How can I know that Javascript code are safe to use?

QWE333 said:

Hello guys,

I have a custom tool that I'm using it for a long time, It's a Javascript code of Chrome extension.
Nothing special happened I was just thinking to myself how can I know for the next time if the code is safe to use?

Google / ChatGPT don't give me the answer..
I also did an EAST antivirus scan about all the files in this folder and he said that all good but I just wondered with myself, there is no any tool who do it?

Thanks is advance developers!

Click to expand...

eldes said:

Did you build the custom cool yourself? If not you'd have to audit the source code to see if there are any vulnerabilities.

Click to expand...

Algo said:

Send your code to a dev for review

Click to expand...

giusergiu said:

I think the only way is to know how to read the code

Click to expand...

s0ul_hunt3r said:

what kind of code inspection does chatgpt provides? can it find only input based vulns? or logical too? or leaks?

Click to expand...

jamb0ss said:

chatgpt as a stochastic monkey only gives you an idea if your code contains known and documented vulnerabilities. otherwise it's a bullet in the leg to rely on LLM in this area. I played mostly with smart contracts and 9 out of 10 times chatgpt4 missed pretty obvious logical holes.

Click to expand...