如何从网页隐藏/加密视图源？ [英] How to hide/encrypt view source from web page?

问题描述

There is whiteHat(hacker) security scan ran in our Project and they ask us block sensitive data from View Page source, Data like Account number, SSN number

So I have done my R & D on net and found that there is no Direct solution for this thing.

I don't want to disable right click

Does anybody have idea how we can achieve this ?

details :

Application - Web
Framework - Struts1.X

我尝试了什么：



我尝试过加密但是没有工作

What I have tried:

I have tried encryption but it was not working

推荐答案

你不能。如果Web浏览器可以下载并显示HTML，那么用户也可以。



即使您找到了阻止浏览器向用户显示源的方法，他们可以使用像Fiddler或WireShark这样的工具来捕获和查看服务器和浏览器之间的流量。



您唯一能做的就是编辑敏感数据服务器，以便用户看不到它;并确保您的网站仅使用HTTPS，以防止窃听通过网络的流量。

You can't. If a web browser can download and display the HTML, then so can the user.

Even if you found a way to prevent the browser from displaying the source to the user, they could use a tool like Fiddler or WireShark to capture and view the traffic between your server and the browser.

The only thing you can do is redact sensitive data on the server, so that the user can't see it; and make sure your site only uses HTTPS, to prevent eavesdropping on the traffic passing over the network.

这篇关于如何从网页隐藏/加密视图源？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！