JavaScript security audit

XSS vulnerabilities occur when untrusted data is inserted into the DOM unsafely. This Skill audits your JavaScript to detect dangerous patterns like `innerHTML` with user input, unsafe DOM manipulation, and missing input validation—core OWASP Top 10 risks in educational web projects.

Functions like `eval()`, `Function()`, and `document.write()` create security risks by executing or injecting code unpredictably. This Skill flags these dangerous patterns and guides you toward safer alternatives for handling dynamic content in educational demos and games.

Input validation using whitelist approaches ensures only expected data formats reach your application logic. This Skill enforces whitelist validation for all user input and external data sources, blocking injection attacks before they compromise your web project.

Run security audits before deploying new interactive features, after code edits, and whenever integrating external data or browser APIs. This Skill automates those checks for demos, calculators, and games to catch vulnerabilities early in your development cycle.

Yes. This Skill applies OWASP Top 10 validation, input validation, XSS prevention, safe DOM manipulation, and defense-in-depth checks to your client-side JavaScript, ensuring your educational web projects meet standard security practices.

Yes. This Skill validates data sources and checks for unsafe browser API usage patterns. It audits how your JavaScript handles external data and API interactions to prevent vulnerabilities when integrating third-party content or platform features.