I'm running a script on my site and I need to figure out what it is doing. It seems to be obfuscated (or at least I can't figure out what its doing). I want to make sure that it can not be used in an xss attack on my site. Are there any programs that will let you see the effect of a javascript on the website by showing what functions are being executed on the site itself?
Of course. Most js encryption methods are easily bypassed and none are 100% foolproof. Post a link or the code.
Run it through a code formatter, such as javascript.about.com/b/2007/06/02/format-your-javascript.htm Or open it in Firebug and have a look. If your browser can read it, so can you.