I built a free client-side Secure Code Scanner (XSS, SQL Injection, CSP & more)

说明与用途

开发者创建了一个完全客户端的代码扫描器，能够检测 XSS、SQL 注入等漏洞，而无需将数据发送到服务器。

问题

Developers needed a quick, privacy‑preserving way to check code snippets for common security anti‑patterns without uploading code to a server.

结果

The tool enables developers to quickly identify security anti‑patterns locally, preserving privacy and reducing reliance on external services.

工作流

• Open https://iosecure-code-scanner.site in a browser
• Paste or type code into the Code Scanner to run heuristic checks
• Use the Context Playground to see how input behaves in different contexts
• Generate a CSP with the CSP Builder
• Take the Interactive Quiz to test knowledge
• Consult the Vulnerability Reference for defensive principles

证据

Everything stays in your browser. Nothing is sent to any server.

来源