| API |
|---|
| [SecureStorage] |
| [File-accesser] |
| [Clickjacking defense] |
| [Key generator] |
(Disclaimer SecurityJS.[128/256] is only available on sites encrypted with HTTPS)
SecurityJS Is a JavaScript library (downloadable/embeddable) that can protect your site with a single file.
This library comes in over 2000 lines of code, but the minified version is much smaller.
Firstly, you can also get it by CDN:
<script type="text/javascript" src="https://cdn.jsdelivr.net/gh/Parking-Master/SecurityJS.128@latest/SecurityJS.128.js" data-trust="true" async="" defer=""></script>or
<script type="text/javascript" src="https://cdn.jsdelivr.net/gh/Parking-Master/SecurityJS.128@latest/SecurityJS.128.min.js" data-trust="true" async="" defer=""></script>you'll want to get the @latest version for bug fixes and such.
You can also install it with NPM:
npm install parking-master/securityjs.128
Once SecurityJS is added, you'll see this in the console if it is active:
🛈 SecurityJS.128 active
First, SecurityJS connects to a self-hosted database where it can store data like SSL, site verification, etc.
To get if the site is verified/has SSL, it does little things 1-by-1 and all together it adds up. Just like math,
To get to 100 just by adding 1, You would have to add 1, 100 times. Same with this, SecurityJS Checks browser info,
Site encryption type, visitors, protocol, and eventually it adds up like this: 'valid' or 'invalid'?;
Aside from how it works, SecurityJS has many other APIs too like window.secureStorage, frame clickjacking defense, file restricter, etc. You can learn more about the APIs below, or in the documentation.
Because, SecurityJS is a powerful JS library that comes with 128 bit encryption, and is completely free, it wouldn't hurt to embed with 1 line of code or install it.
Override the default trigger function for when loading is blocked, URI is malformed, etc.
securityjs.onexecute = function() {
// Do what you want here...
alert('SecurityJS is the greatest!');
};
https://www.example.com/?javascript=void(0)
SecurityJS is the greatest!
OK
(deny for all, sameorigin for domain only)
<meta http-equiv="X-Frame-Options" content="deny" />
{
"X-Frame-Options": "deny"
}
and
<script type="application/json" src="./data.json"></script>
SecureStorage is a secure way of locking up localStorage and disabling viewing any securestorage/localstorage items.
(async function(){
// Use securityjs.generateKey() for your key
const myKey = securityjs.generateKey();
secureStorage.setItem(item, value);
secureStorage.lock();
// To unlock it
secureStorage.unlock(myKey);
// Get the item
secureStorage.getItem(item, value);
})();
Make sure to keep it in a local <anonymous> function so the key is private.
In the basic SecurityJS, the most simple way to generate a random key is generateKey()
securityjs.generateKey();
and for a certain length:
securityjs.generateKey(100);
But in SecurityJS.128, you can generate 128-bit keys and 256-bit keys.
securityjs.generate(128);
// Output: Generated 128 bit key (max length approximately 4995 objects in 1ms)
// XPh615YZNAcZ7cSBSe8Ha4iBRJNrk3E7IRJk5rwEBrECTG912CZ3nNWea9PSCXafFGXE_kSqAqxAC7VSOrcg2QAg8uf-K95ifmuudg8rQFFEYNvc3KP1i4Ydxh7Xlb8D
256 bit keys:
securityjs.generate(256);
// Output: Generated 256 bit key (max length approximately 9985 objects in 2ms)
// M60JiJrCP7TacP-sSrvQDbYyyN7ZBKXIhIJr6cvNYFZStEtP0TdGE:OnAk_nDDWGCW_LK5wyFHJIGFA9VeTSVixUaLigsdXY-m60lXTFXKFgrA-GDTmY2G7ZoCIH590dhEwg:vFeb3lJwGNEPIP0A1QSAQLaVpuXyqU_A0rg8GiW-tpK6W79Kqt4EU7YJuSWuh1wtORYCCmDrTJZDFX1V7OX9PQgNRiKcervzX5J9KJW1-tUOrUDj6ErlYBNvkSW
TurboClear is an API that lets you clear cache, history, and cookies.
securityjs.TurboClear(true);
true will cause it to clear everything.
To clear history, use history:
securityjs.TurboClear(history);
To clear cache, use cache:
securityjs.TurboClear(cache);
To clear cookies, use cookies:
securityjs.TurboClear(cookies);
You can only access files using an IPv4 address, or unique password using this API
securityjs.auth('ip', '8.8.8.8');
You can add up to 5 IP addresses:
securityjs.auth('ip', '1.1.1.1', '2.2.2.2', '3.3.3.3', '4.4.4.4', '5.5.5.5');
or
securityjs.auth('password', 'myuniquepasscode1145');
Entering your authorized file ends up like this:
Enter your passcode to access this file:
OK Cancel
SecurityJS restrict() function works the same as the auth function:
securityjs.restrict(type, value);
More APIs and functions are either in the Full Documentation, or are coming soon.
MIT License
Copyright (c) 2021 Parking Master
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.