Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/llllvvuu/dl-webapp-sources
download original source code from JavaScript bundle/chunk URLs
https://github.com/llllvvuu/dl-webapp-sources
javascript react reactjs reverse-engineering sourcemaps typescript web webapp
Last synced: 4 months ago
JSON representation
download original source code from JavaScript bundle/chunk URLs
- Host: GitHub
- URL: https://github.com/llllvvuu/dl-webapp-sources
- Owner: llllvvuu
- License: isc
- Created: 2023-09-04T11:28:44.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2023-09-06T12:44:41.000Z (over 1 year ago)
- Last Synced: 2024-10-12T15:33:50.681Z (4 months ago)
- Topics: javascript, react, reactjs, reverse-engineering, sourcemaps, typescript, web, webapp
- Language: TypeScript
- Homepage: https://www.npmjs.com/package/@llllvvuu/dl-webapp-sources
- Size: 76.2 KB
- Stars: 4
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Download original source code from public sourcemaps
Get original JavaScript/TypeScript files/project layout:
```sh
dl-webapp-sources -o my-react-app \
https://app.com/chunk1.js https://app.com/chunk2.js.map localChunk.js localMap.js.map ...
```
- [x] sanitize output paths / pad relative parents
- [x] .js arguments
- [x] .js.map arguments
- [x] URL arguments
- [x] filename arguments
- [x] `sourceMappingURL=data:...`
- [x] `sourceMappingURL=file:...`
- [x] `sourceMappingURL=http...`
- [x] `sourceMappingURL=`
- [x] guess `sourceMappingURL` by adding `.map` (find sources that Chrome misses)
- [x] lookup from `sourcesContent`
- [x] lookup from `sources` paths
## Installation
```sh
npm install -g @llllvvuu/dl-webapp-sources
```
## CLI Usage
Automated crawler may not pass auth, and it may also miss asynchronously loaded JS. But, you can get a list of loaded JS files by manually logging in.
After logging in, paste into the console:
```javascript
performance
.getEntriesByType("resource")
.map(resource => resource.name)
.filter(name => name.endsWith(".js"))
.map(name => `"${name}"`)
.join(" ")
```
This gives you the CLI args for:
```sh
dl-webapp-sources ${JS_URLS} -o ${OUTPUT_DIRECTORY}
```
If you got anything interesting, go back and click around the app to load all of the chunks (if it's a SPA), and repeat.
Now you can try to add some `create-react-app` or `create-next-app` boilerplate to try to get the app to build.
> ⚠️ Sometimes `axios` gets 403; I will try to fix this if I have time, but in the meantime you can get around this by manually downloading .js.map from the browser and passing the local filepath into the CLI.
> ⚠️ Some sites clear the performance timeline, so the performance API won't list all of the JS files. If this happens you can try another method to get the list of JS files.
## Library Usage
See the API reference at [markdown/dl-webapp-sources.md](./markdown/dl-webapp-sources.md).
## Motivation
I created this solution since neither [denands/sourcemapper](https://github.com/denandz/sourcemapper), [tehryanx/sourcemapper](https://github.com/tehryanx/sourcemapper), nor [paazmaya/shuji](https://github.com/paazmaya/shuji) accept a list of multiple JS files, which is quite common with chunked webapps.
[jonluca/source-map-cloner](https://github.com/jonluca/source-map-cloner) is a solution for crawling an HTML page.
`dl-webapp-sources` leaves auth/crawling to the user. It accepts a list of .js or .js.map.
Sometimes it can find sources that Google Chrome misses.
## Credits
- [denands/sourcemapper](https://github.com/denandz/sourcemapper)
- [tehryanx/sourcemapper](https://github.com/tehryanx/sourcemapper)
- [jonluca/source-map-cloner](https://github.com/jonluca/source-map-cloner)
- [paazmaya/shuji](https://github.com/paazmaya/shuji)
- [webpack-contrib/source-map-loader](https://github.com/webpack-contrib/source-map-loader)
- [User Pingolin on StackOverflow](https://stackoverflow.com/a/62640158/5938726)