I built a free client-side Secure Code Scanner (XSS, SQL Injection, CSP & more)

Описание и применение

Разработчик создал полностью клиентский сканер кода, который обнаруживает XSS, SQL‑инъекции и другие уязвимости без отправки данных на сервер.

Задача

Developers needed a quick, privacy‑preserving way to check code snippets for common security anti‑patterns without uploading code to a server.

Результат

The tool enables developers to quickly identify security anti‑patterns locally, preserving privacy and reducing reliance on external services.

Рабочий процесс

• Open https://iosecure-code-scanner.site in a browser
• Paste or type code into the Code Scanner to run heuristic checks
• Use the Context Playground to see how input behaves in different contexts
• Generate a CSP with the CSP Builder
• Take the Interactive Quiz to test knowledge
• Consult the Vulnerability Reference for defensive principles

Доказательства

Everything stays in your browser. Nothing is sent to any server.

Источник