Is there a way to run (or rather, to check) JS code without running it in the browser, or without having to read it all? A safe way to run it. Scenario: you find a malicious page with JS on it, and you want to run it to see what it does, but in a safe way. The solution would probably be a kind of sandbox that tells you the result of the code, but does not produce any dangerous output (execution stops and ask permission before any redirections, no ajax requests, calls to browser APIs, etc.)

In general, the same thing would be useful for other languages too (PHP, Python, etc.). Also useful to see the result of obfuscated code, without having to do it by hand.

I'm pretty sure something like this already exist, but I don't know what it is. Like a framework where every potentially dangerous or "interesting" function has been replaced with something safe, that tells you what it is going to do before doing it

OTOH, I'm not sure if what I'm looking for is actually going to be useful, without also having to read all the code anyway to understand it and do some manual deobfuscation

Note this is in addition to running the code in a VM for extra security, of course

@MechMK1 Uhhh

SpaceX seems to have actuallly gotten a rocket to the ISS.... twice....

unrelatedly...

security.stackexchange.com/questions/255136/… I wonder what's the threat profile where you're using a lighter and a hammer and nails for secure deletion... ._.

@reed you can do a good deal of debugging with javascript by using Developer Tools on your browser, or VScode plus nodejs