HTML5 application security hardening

Prerequisites

• An unhardened JS package is ready. The package must be in ZIP format and no larger than 100 MB.

  Important

  Use caution with JS files that are already obfuscated. They may cause performance issues.

• The Mobile Security Hardening service is purchased, or you are within the seven-day free trial period.

Procedure

To harden an H5 application:

1. Log on to the mPaaS console and select your app.

2. In the left-side navigation pane, choose Security > Mobile Security Armor > H5 application security hardening.

3. Click Create H5 application security hardening to open the Upload applications to be hardened page.

4. Click Upload file and upload the ZIP file.

5. After the upload completes, the Confirm security hardening Information page appears. Verify the app and hardening information.

6. (Optional) In the HTML5 protection column, select the protection capability you need.

   Note

   HTML5 protection reduces JS execution efficiency. Higher protection levels have greater performance impact.

7. In the HTML5 protection column, select the JS files to protect.

8. Click Confirm hardening to start the hardening process.

9. After hardening completes, the Security hardening details page appears.

10. Click Download security hardened package to download the hardened JS package. The Security hardening details column shows the file size and applied security capabilities.

What to do next

After hardening, verify that key components function correctly. If the hardened package is abnormal, submit a ticket or join DingTalk group 145930007362 for help.