
Security Fundamentals
Obfuscation 101: Unmasking the Tricks Behind Malicious Code
Attackers use obfuscation to hide malware in open source packages. Learn how to spot these techniques across npm, PyPI, Maven, and more.
strip-pragma-loader
Advanced tools
A webpack loader to strip out code blocks between RequireJS pragma style comments.
A webpack loader that strips code block from between requireJS includeStart
/excludeStart
pragma style comments using the requireJS optimizer syntax.
For example, this loader would be used to strip out blocks of the following pattern:
//>>includeStart('debug', pragmas.debug);
console.log('Debugging...');
//>>includeEnd('debug');
Install the loader with npm.
npm install strip-pragma-loader --save-dev
In your webpack configuration object, you'll need to add strip-pragma-loader
to your list of modules.
module: {
rules: [{
test: /\.js$/,
enforce: pre,
use: [{
loader: 'strip-pragma-loader',
options: {
pragmas: {
debug: true
}
}
}]
}]
}
You can pass options to the loader using the options
property.
The following options are supported:
pragmas
: Object with each pragma name and value. A false
value will strip out and includeStart
blocks, and a true
value will strip out and exlcudeStart
blocks. Defaults to an empty object.For example, the following would strip out all blocks beginning with //>>includeStart('debug', pragmas.debug);
and ending with //>>includeEnd('debug');
:
module: {
rules: [{
test: /\.js$/,
enforce: pre,
use: [{
loader: 'strip-pragma-loader',
options: {
pragmas: {
debug: true
}
}
}]
}]
}
See the RequireJS configuration options for more information on pragmas.
Pull requests are appreciated. Please use the same Contributor License Agreement (CLA) used for Cesium.
Developed by the Cesium team.
FAQs
A webpack loader to strip out code blocks between RequireJS pragma style comments.
The npm package strip-pragma-loader receives a total of 2,363 weekly downloads. As such, strip-pragma-loader popularity was classified as popular.
We found that strip-pragma-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
Attackers use obfuscation to hide malware in open source packages. Learn how to spot these techniques across npm, PyPI, Maven, and more.
Security News
Join Socket for exclusive networking events, rooftop gatherings, and one-on-one meetings during BSidesSF and RSA 2025 in San Francisco.
Security News
Biome's v2.0 beta introduces custom plugins, domain-specific linting, and type-aware rules while laying groundwork for HTML support and embedded language features in 2025.