Q&A: What does the Shape Defense JavaScript code do?

Question

What does the Shape Defense JavaScript code do?

• Javascript insertion is part of Shape Defense configuration on Portal: How to Configure "Shape Defense" Option in Proxy/App Configuration
  • Shape Defense Javascript Path - What Javascript do you want inserted onto your pages?
  • Javascript Insertion Location - Where do you want the Javascript inserted on the page?

Environment

• Silverline Shape Defense
• Bot defense
• Bot protection
• Anti-bot

Answer

The Javascript code injected into your protected endpoints' code does the following:

• obtains signals from the browser, such as: browser type and version, headers, construction of the DOM (Document Object Model), and many others
• signals are used by the Shape Shifter Elements to evaluate whether the requester is human or automation/bot

The process for Javascript insertion is the following:

1. Client visits a Silverline Shape Defense protected endpoint (URI designated in Shape Defense Configuration)
2. HTML script tags are inserted into the server response(s).
3. Once the HTML page is loaded into the browser, the script element tags are processed and the JavaScript (JS) code snippet is sent to the browser from the Silverline Shape Shifter Elements (SSEs) and executed.

Related Content

• Q&A: What are the parameters that Shape Defense uses to identify a bot?
• Q&A: Does Shape Defense allow Good Bots (like Google) to crawl pages?
• How to Configure "Shape Defense" Option in Proxy/App Configuration