Meta Developers
1 HN recommender · recommended in 3 months, 2016–2019
4:40 · 3.6K views · Feb 26, 2016
A five-minute lightning talk from React.js Conf 2016 by Elie Rotenberg on protecting the DOM from tampering. It shows how React tree obfuscation (react-armor) can shuffle class names, tags and tree structure to defeat CSS-selector-based ad blocking.
Cited as the origin of react-armor style DOM obfuscation, and as a favourite short talk from the conference.
4 comments from Hacker News
My favourite talk was only 5 minutes long and came from Elie Rotenberg[0]. He demonstrated how React can be used to completely obfuscate the DOM tree. In practice it seems somewhat malicious to do this, however there may be some legitimate use cases too. [0] this video
It reminds me of a lightning talk I gave at ReactConf some time ago :) Basically forward-shuffling the component tree to produce HTML that will be really hard to match using CSS Selectors usually found in adblockers and other DOM-targeting scripts. Code: [LINK] Video: this video
Something like react-armor can make cryptographically unpredictable class name, tree structure and tag name obfuscation. But it won't be enough if the ad itself is not written with the same toolkit. [LINK] this video
Or they can already do dom obfuscation like react-armor, it can make cryptographically unpredictable class name, tree structure and tag name obfuscation. [LINK] this video