I built a security scanner for my pastebin. But detecting secrets is harder than I expected.

说明与用途

开发者为 PasteDB 构建了浏览器端扫描器，在发布粘贴前警告潜在的秘密。

问题

Accidental public exposure of API keys, database passwords, or access tokens in a paste-sharing application.

结果

The scanner now runs locally in the browser, detecting potential secrets before a paste is published and warning users, while avoiding sending paste content to external services.

工作流

• 1. User types or pastes content into PasteDB editor.
• 2. Browser‑side scanner analyzes the content for known credential patterns.
• 3. Scanner checks for unusually random strings and evaluates surrounding context to assess sensitivity.
• 4. If potential secrets are detected, the scanner displays a warning to the user before the paste is created.
• 5. User can review the warning and decide whether to proceed or modify the content.

证据

I decided to build a security scanner that runs directly in the browser before a paste is created.

来源

The scanner is now working, and I’m continuing to improve it.

来源