內容簡介
JAZ-X Code Inspection 是一款只讀的靜態檢查工具,旨在協助管理員檢視代碼的潛在風險,包括動態代碼執行、代碼混淆及檔案系統寫入等,幫助使用者在信任代碼前提出更好的問題。
【主要功能】
• 標示需檢視的代碼能力
• 列出掃描代碼中引用的外部域名
• 不發送掃描數據至外部服務
外掛標籤
開發者團隊
原文外掛簡介
JAZ-X Code Inspection is a read-only static inspection tool. It highlights code capabilities that deserve review, including dynamic code execution, obfuscation, filesystem writes, direct database changes, outbound requests, REST routes, scheduled tasks, and user privilege changes.
It also lists literal external domains referenced by the scanned code.
Important: a finding is not proof of malware, and a clean report is not a guarantee of safety. Legitimate plugins often need powerful WordPress capabilities. JAZ-X Code Inspection helps administrators ask better questions before trusting code.
JAZ-X Code Inspection does not send scan data to an external service and does not retain uploaded ZIP files.
JAZ-X Code Inspection Pro
The free edition is fully usable for on-demand static inspection. If you need continuous monitoring, baselines, scan history, change alerts, and other advanced workflow features, an optional Pro edition is available from JAZ-X Innovation:
https://store.jazx.online/product/code-x-ray-pro-wordpress-plugin-security-scanner/
