Encrypted Scripts

In some cases, the logic inside your script may contain sensitive information — such as API keys, internal business rules, or proprietary calculations — that should not be visible to other users. Tabidoo allows you to protect such logic using Encrypted Scripts.

What Are Encrypted Scripts?

Encrypted Scripts are JavaScript-based scripts that are stored securely on the server and hidden from all users except the script author. Unlike standard client-side scripts, they do not run in the browser and cannot interact with the user interface.

These scripts are:

  • Encrypted and secure — Their content is not visible to others.
  • Executed on the server — They are never downloaded to the client’s browser.
  • Isolated from the form UI — They cannot modify the visibility of fields or respond to field changes.

When to Use Encrypted Scripts

Use Encrypted Scripts when:

  • You need to store or process confidential information.
  • You want to integrate with secure third-party services using API keys.
  • The script’s logic should remain private and unmodifiable by other users.
  • You are executing backend operations without requiring any UI interaction.

Limitations of Encrypted Scripts

Cannot read or modify form UI (e.g. no doo.form interaction).

  • Cannot display confirmation dialogs or error messages to users.
  • Cannot run in On Model Load, On Model Change, or On Model Save client-side events.

These limitations make Encrypted Scripts ideal for:

  • Background processes
  • Server-side validations
  • Secure API calls

How to Create an Encrypted Script

  1. Navigate to the appropriate place where scripting is supported - Scripting extensions or Workflow action.
  2. (In Workflow Automation) Add a Run Script action.
  3. Enable the Encrypt script option.
  4. Write your logic using the available doo objects.