Rich internet applications used on web today create a large attack surface for malicious adversaries. In this paper, we introduce a proxy-like obfuscator that protects web applications by obfuscating their code and then continuously replacing the obfuscated code in order to limit the time available for an attacker to compromise the web application. We describe the obfuscator and present experimental results for it to demonstrate the feasibility of our approach.