Check out <a href="https:&#x2F;&#x2F;www.tinfoilsecurity.com" rel="nofollow">https:&#x2F;&#x2F;www.tinfoilsecurity.com</a>. It looks for XSS, and about 60 other different types of attacks.<p>(edit: full disclosure, I&#x27;m one of the founders)