HTML 52.3% · JavaScript 47.7%
Is it a true single-file web app?
✗ No, this is not a single-file web app. It needs 5 files from elsewhere.
– Contacts
cdn.jsdelivr.net– Contacts
d3js.org✗ Loaded over plain http, modifiable in transit: http://d3js.org/d3.v4.min.js
How to fix it
→ Inline
font-awesome.min.css into a <script>/<style> tag instead of fetching it from cdn.jsdelivr.net→ Inline
d3-lasso.min.js into a <script>/<style> tag instead of fetching it from cdn.jsdelivr.net→ Inline
htpad.js into a <script>/<style> tag instead of fetching it from cdn.jsdelivr.net→ Load
d3.v4.min.js over https — it currently comes in over plain http and can be modified in transit→ Inline
fontawesome-webfont.woff2 into a <script>/<style> tag instead of fetching it from cdn.jsdelivr.netSecurity audit — full results 9/9
✓ No leaked credentials (detect-secrets)
✓ Semgrep security-audit ruleset
✓ Semgrep javascript ruleset
✓ eval() usage
✓ Function() construction
✓ decode→eval chain
✓ document.write of decoded content
✓ sendBeacon usage
✓ decoded content DOM injection
Embed this badge
