DEV Community

Kaewkamphon Suesirithamrong
Kaewkamphon Suesirithamrong

Posted on

Does your online dev tool upload your data? Check in 30 seconds

You paste JWTs, configs and logs into online tools every day. Do you know where they go?

The 30-second check

  1. Open the tool, press F12 → Network, and clear the list.
  2. Paste fake input and run the tool.
  3. Click any new request → Payload. See your input? It left your machine.

💡 Bonus: click the page itself and find content-security-policy in the response headers. connect-src 'self' means the page can only talk to its own site. Not proof, but a good sign.

Jobs that should pass this check

None of these need a server:

  • 🔒 Redacting a log before you paste it into an AI
  • 📂 Diffing two config files
  • ✅ Verifying a download's SHA-256
  • 🖼️ Turning an image into a data URI
ERROR payment failed for jane.doe@example.com from 203.0.113.42
→ ERROR payment failed for [EMAIL_1] from [IP_1]
Enter fullscreen mode Exit fullscreen mode

I build DevTrove, where all four run in your browser. Go ahead and run the check on it. 😉

Which tool are you checking first? 👇

Built and written with help from AI, reviewed and tested by me.

Top comments (0)