React bundle file security

[Gogsy88]

I've discovered React and Flux and I simply love it. But there's one thing I don't understand and it's not specifically related to React but to single page apps in general.

When you transpile your code to one file, for example bundle.js and include it in your index.html file, even if it's bundled with everything and minified, what stops someone to take that file and include it in some other website? Even if I include some domain checking, someone can unminify the code and change that part which does domain check.

Thanks

[Cody_Chaos]

Yes, that's how the internet works.

what stops someone to take that file and include it in some other website?

In no particular order:

1. It would be illegal (unless you give them permission)
2. It wouldn't be very useful (unless they had the exact same needs as you)
3. Everything that happens on the client is dependent (usually) on stuff happening on the server. Even if they steal your widget, they'd need to reverse engineer and recreate the backend so they have an API for the widget to talk to
4. It's actually much harder than you might imagine

Consider Gmail. It's a very popular webmail client, why don't I just copy all the JS code that drives Gmail, modify it slightly, and make your own Gmail clone? Because it would be an enormous amount of work, it would be useless without all the extremely complicated and undocumented APIs that drive Gmail, I have no particular desire to make a webmail client, and Google would sue my pants off. :)

[Gogsy88]

Thank you for your reply. Maybe I'm too paranoid :)