closed as off-topic by Terry Chia, Adi, NULLZ, Rory Alsop♦ Nov 9 '13 at 12:50
This question appears to be off-topic. The users who voted to close gave this specific reason:
If you don't have any server side code then your app is quite low risk: there is very little an attacker could get from attacking it. There won't be any database, so there won't be a risk of SQL injection. Can you elaborate on what you are trying to protect? For example, is there any sensitive information handled by the app?
This open source scanner looks for DOM based Cross site scripting, but I'm not sure how easy it would be to set up. You can also search Google for "xss detection plugin" to find other browser plugins that scan web apps.
If your app has server side code then leave a comment to say what language it is so I can suggest a scanner for it.