As you know, one of the security measures is preventing everyone from being able to see all site routes and showing them what they need to and they should only see.
I want to fix this problem for SPA web apps, in which all routes are plain in the final build app.js ( even it has been uglified). So I want to know how should I do this? ( i already test some methods but didn't get the right result.)
update
I know that every method using in SPA for this kind of use will eventually include the routes in the spa in the final bundle app.js. as you know in the code obfuscation world, one way is to pack(encrypt) the sensitive data, so nobody can see it in plain text, and show it at runtime when the user actually needs it.
I know it is not a perfect solution, but I believe, it will increase security as a layer.