Internal Reference Scanner
Detects links to localhost or internal IPs in the HTML, dev leftovers that leak your infrastructure.
What it checks
This scanner reviews your page's HTML and detects links to localhost or internal IP addresses. It finds those development leftovers that get forgotten in the published code.
Why it matters
These internal references leak details about your infrastructure, such as server addresses and names that should only be known internally. That information helps an attacker understand how your system is built and plan their next move.
How to fix it
Review your code before publishing and replace any references to localhost or internal IPs with the real production URLs. Properly setting your environment variables per environment prevents these development addresses from ending up in the public version.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free