The latest articles on DEV Community by nadeeja (@hirun). https://dev.to/hirun https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4112869%2F950cedc8-a89d-443c-b6cd-7c400432f677.png https://dev.to/hirun en nadeeja Sun, 06 Sep 2026 22:03:30 +0000 https://dev.to/hirun/i-built-a-free-client-side-secure-code-scanner-xss-sql-injection-csp-more-obg https://dev.to/hirun/i-built-a-free-client-side-secure-code-scanner-xss-sql-injection-csp-more-obg <p>A few weeks ago I wanted a simple way to quickly check code snippets for common security anti-patterns without uploading anything to a server.<br> So I built Secure Code Scanner — a completely free, client-side tool that runs 100% in your browser.<br> What’s included:</p> <p>Code Scanner → Heuristic detection for XSS sinks, SQL concatenation, command injection, insecure deserialization, weak crypto, prototype pollution, and more<br> Context Playground → See how the same user input behaves differently in HTML body, attributes, URLs, headers, SQL, NoSQL, filenames, shell commands, and logs<br> CSP Builder → Generate a starting Content-Security-Policy with sensible defaults<br> Interactive Quiz → Test your understanding of common injection issues<br> Vulnerability Reference → Clear defensive principles (not just payload lists)</p> <p>Everything stays in your browser. Nothing is sent to any server.<br> <strong>Try it here:</strong><br> <a href="https://iosecure-code-scanner.site" rel="noopener noreferrer">https://iosecure-code-scanner.site</a><br> I’d love feedback — especially if you find false positives/negatives in the scanner rules or have ideas for new checks.<br> If you find it useful, a share or star would mean a lot!</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Ftad5lpn0t6uqn6skcuj1.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Ftad5lpn0t6uqn6skcuj1.png" alt=" " width="800" height="382"></a></p> webdev security javascript opensource