Original Summary

I got tired of pasting JWTs and JSON into sites that upload them, so I built a set of single-purpose tools that run entirely in the page: https://owaiskhan.website/tools/ What's there: JSON/XML formatters, a JWT decoder (verifies HS/RS/PS/ES/EdDSA signatures with Web Crypto, accepts JWKS), UUID v4/v7/v5, text diff, case converter, word counter, and some calculators (GPA, final grade, time card with FLSA and California overtime). The privacy claim is enforced rather than promised: the test suite scans every shipped page for fetch(, XMLHttpRequest, sendBeacon, WebSocket and EventSource and fails the build if it finds one. The pages are static HTML with the logic inlined (no framework runtime), and each one shows a worked example in the static HTML, so you can see what it does before any script runs. The logic is tested against outside oracles where they exist: the JSON parser against JSONTestSuite, JWT verification against the RFC 7515 vectors, UUIDs against RFC 9562, the diff against GNU patch, and X/Twitter character counting against twitter-text's conformance suite. Question for you: which dev tool do you still paste sensitive data into because there's no local alternative? That's what I'd build next.   submitted by   /u/ReaperOAK [link]   [comments]

  • 情报分类：商业与市场研究
  • 分类依据：内容涉及商业、投资或市场动态
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/10/8 16:36:46