taintline

Interprocedural taint analysis for JavaScript, running here in your browser.

source on GitHub

Example

Findings

include low confidence

Every finding shows the whole path the value took. Click a hop to jump to it. The analysis is the same code the CLI runs — no server, no network.