Can user see source of js call in html 5 iphone or android app?
If I am building an html 5 phone app (using phonegap or Icenium) that calls a web service that needs a username / password, can anyone have a look at the code in any way, or is it compiled or compiled in some way to JavaScript ? Suppose in this case url is in javascript file with username and password.
Neither Phonegap nor Icenium (both based on Apache Cordova) obfuscate or compile your application's JavaScript code.
You can use any Cordova iOS or Android app and simply unzip the .ipa or .apk package to show the HTML, CSS, and JavaScript code that the app supports.
If this is a regular user, then most likely not.
But if you are asking this question because you want someone qualified to want to see your code app. Then the answer is:
Nothing is secure on your client device. Not sqlite database, not built-in storage, not source code (weather compiled or not);