MSSS — Hardened Static Access Portal
- Live
Overview
A client-side access portal built from plain HTML, vanilla JavaScript and Tailwind, with a build pipeline that hardens it: obfuscation, anti-tamper shielding, closed Shadow DOM isolation and a steganographic payload carrier. The readable source and the shipped build are deliberately different artefacts.
Project context
An exercise in how far client-side hardening can actually go — and where it stops, since everything the browser runs is ultimately readable.
Key features
- Build pipeline that obfuscates JavaScript and adds self-defending anti-tamper checks
- Steganographic PNG carrier generated at build time, decoded client-side
- Closed Shadow DOM isolation for the protected markup
- Security blocks bypassed on localhost so the source stays editable during development
- Ships as a standalone static folder — no server, deployable to GitHub Pages
Technical details
- Node pipeline: Tailwind compile, steganographic asset generation, HTML minification, JS obfuscation
- GitHub Pages
- MIT
- Tailwind CSS
- JavaScript (vanilla)