我在 Android 中有 PhoneGap 应用程序。现在我准备发布它，但我想保护该应用程序不被脚本小子看到。我首先认为这是不可能的，后来我在市场上发布应用程序时发现了“复制保护”功能。所以我很兴奋，但当我打开它时，它实际上并没有做什么。
我可以毫无问题地在已 root 的手机上安装该应用程序，我可以将其复制到 SD 卡上并查看所有源。我认为这个“复制保护”功能将不允许拥有 root 权限的手机的人安装该应用程序。或者我错过了什么？
有什么方法可以让人们在我的应用程序中看到我的所有 HTML 和 JS 源吗？
I have PhoneGap app in Android. Now I am ready to publish it, but I would like to protect the app from eyes of script-kiddies. I first thought that it is impossible, than I have discovered "Copy protection" feature when publishing the app on the market. So I was excited, but when I turned it ON, it didn't actually does nothing.
I can install the app on the rooted phone with no problem, I can copy it on SD card and see all the sources. I thought that this "Copy protection" feature will not allow people with rooted phones to install the app. Or am I missing something ?
Is there ANY way how to make it at least difficult, if not disable it at all, for people to see all my HTML and JS sources in my app ?
发布评论
评论（4）
Google 已弃用复制保护功能。不要使用它。
使用 ProGuard 来混淆你的代码。
加密您的资产并在您阅读时解密。
如果您有付费应用，请使用许可机制。
The copy protection feature has been deprecated by Google. Do not use it.
Use ProGuard to obfuscate your code.
Encrypt your assets and decrypt them as you read them.
Use the Licensing mechanism if you have a paid app.
我发现的最佳组合是 DojoToolkit 和高级模式下的闭包编译器。
高级模式下的闭包使得 JavaScript 代码几乎不可能进行逆向工程，即使在经过美化器之后也是如此。一旦您的 JavaScript 代码被混淆到无法识别且无法进行逆向工程的程度，您的 HTML 将不会泄露您的太多秘密。
此链接用于在移动应用程序的高级模式下将 Dojo Toolkit 与 Closure Compiler 结合使用：
http://dojo-toolkit.33424.n3.nabble.com/file/n2636749/Using_the_Dojo_Toolkit_with_the_Closure_Compiler.pdf?by-user=t
The best combination I've found is the DojoToolkit and the Closure Compiler in Advanced Mode.
Closure in Advanced Mode makes JavaScript code almost impossible to reverse-engineer, even after passing through a beautifier. Once your JavaScript code is obfuscated beyond any recognition and any possibility to reverse-engineer, your HTML won't disclose much of your secrets.
This link for using the Dojo Toolkit with the Closure Compiler in Advanced Mode for mobile applications:
http://dojo-toolkit.33424.n3.nabble.com/file/n2636749/Using_the_Dojo_Toolkit_with_the_Closure_Compiler.pdf?by-user=t
Android 市场的版权保护太无用了，以至于谷歌正计划将其删除。
如果您希望难以查看嵌入的资源，则应该对其进行加密。这不会使它变得不可能，只会变得更加困难。毕竟，您的应用程序必须可以访问解密密钥，并且您应该假设您的应用程序可以执行的所有操作都可以由专门从事该应用程序的人员观察到。
The Android market copy protection is so not useful that Google is planning to remove it.
If you want it to be difficult to view your embedded resources you should encrypt them. This will not make it impossible, just more difficult. After all, the decryption key must be accessible by your app, and you should assume that everything your app can do can be observed by someone dedicated towards it.
复制保护功能将被 IIRC 淘汰。您需要改用应用程序许可服务。我不久前尝试过&它给出了一些错误的“未经许可”响应，但您可以应用缓存或忽略它给出的结果。
The Copy Protection feature is going to be phased out IIRC. You need to use the Application Licensing service instead. I tried it a while ago & it was giving a few false "Unlicensed" responses, but you can apply caching or ignore the results it gives.