Paste a Set-Cookie or Cookie header and get the name, the value and every attribute decoded, with Max-Age and Expires resolved to an exact date and a plain duration. Flags a missing Secure or HttpOnly, a SameSite=None that modern browsers reject outright, and a Domain wide enough to leak the cookie to subdomains. ATTRIBUTES EXPIRY FLAGS
Paste a Content-Security-Policy header and get every directive split out with its source list and a verdict, plus findings for unsafe-inline beside a host allowlist, wildcard sources, a missing default-src, data: in script-src, http: next to https:, and nonces with no strict-dynamic.
Decode a JWT header and payload without verifying the signature, with base64url handled correctly, the algorithm flagged as claimed-only, and an expiry check.
A real entropy estimate in bits from character-class pools with a repetition penalty, an estimated crack time, a common-password list check and a live verdict.
Paste a Content-Security-Policy header and get every directive split out with its source list and a verdict, plus findings for unsafe-inline beside a host allowlist, wildcard sources, a missing default-src, data: in script-src, http: next to https:, and nonces with no strict-dynamic.
Vout, current and per-resistor power for a loaded or unloaded divider, plus the inverse solve for R1, with a warning as soon as the load impedance comes within 100x of R2 and the divider stops being ideal.
Dew point from temperature and relative humidity with the Magnus saturation steps shown, and the reverse solve for humidity from a dew point - flagged honestly as an empirical approximation, not a derivation.
C1V1 = C2V2 with M, mM, g/L, mg/mL, % and v/v all normalised through molecular weight, and a serial dilution ladder generator. A zero or negative volume returns a readable error, never NaN.
Standard score from x, mean and sample standard deviation, the reverse from z back to a raw value, and a per-row z-score table for a whole sample. SD = 0 is reported as undefined rather than silently dividing.
