01Analyzes JavaScript, CSS, and URL contexts for injection risks
02Flags potential CRLF and header injection vulnerabilities
03Detects direct echo of raw user input and global variables
04Provides severity-rated findings with specific code fixes
05Identifies insecure Blade and Twig raw output filters
0645 GitHub stars