Skip to main content
Application security tools

Application security / FREE TOOL

JavaScript review

Inspect JavaScript syntax for dynamic execution, HTML injection sinks, message handling, and sensitive storage patterns.

Local review / optional AI

01 Your input

Local processing only. Maximum file size: 2 MB.

02 Your results

A closer look starts here.

Add your input and run the check. We will show the observations and explain what needs review.

 

A QUICK WALKTHROUGH

How to use it

  1. 01Paste source code or select a local .js, .mjs or .cjs file.
  2. 02Inspect the reported patterns and their line locations.
  3. 03Trace the actual input, bindings and sanitization before deciding whether a finding is exploitable.

What this check can tell you

Parses JavaScript without executing it. Reports syntactic review signals, not proven vulnerabilities or complete data-flow analysis. Runtime bindings, sanitization and surrounding files can change their meaning. TypeScript and JSX are unsupported; maximum source size is 200,000 characters.

The initial review processes files in this tab. If you choose the optional AI summary, the displayed findings are sent to Cloudflare AI; your raw file, result tables and decoded token claims are excluded.

OWASP DOM based XSS prevention guidance
All tools