{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,4]],"date-time":"2026-10-04T11:42:56Z","timestamp":1791114176201,"version":"4.1.0"},"publisher-location":"Berlin, Heidelberg","reference-count":33,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642279362","type":"print"},{"value":"9783642279379","type":"electronic"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-27937-9_17","type":"book-chapter","created":{"date-parts":[[2012,4,24]],"date-time":"2012-04-24T21:56:08Z","timestamp":1335304568000},"page":"239-255","source":"Crossref","is-referenced-by-count":29,"title":["Safe Wrappers and Sane Policies for Self Protecting JavaScript"],"prefix":"10.1007","author":[{"given":"Jonas","family":"Magazinius","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Phu H.","family":"Phung","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Sands","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"17_CR1","unstructured":"Ajaxpect: Aspect-Oriented Programming for Ajax (2008), http:\/\/code.google.com\/p\/ajaxpect\/"},{"key":"17_CR2","unstructured":"Anderson, J.P.: Computer security technology planning study. Technical Report ESD-TR-73-51, US Air Force, Electronic Systems Division, Deputy for Command and Management Systems, HQ Electronic Systems Division (AFSC), USA (1972)"},{"key":"17_CR3","unstructured":"AspectJS: A JavaScript MCI\/AOP Component-Library. Version 1.1, commercial (2008), http:\/\/www.aspectjs.com\/"},{"key":"17_CR4","unstructured":"Balz, C.M.: The AspectES Framework: AOP for EcmaScript, http:\/\/aspectes.tigris.org\/ (accessed in January 2010)"},{"issue":"6","key":"17_CR5","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1145\/1516046.1516066","volume":"52","author":"A. Barth","year":"2009","unstructured":"Barth, A., Jackson, C., Mitchell, J.C.: Securing frame communication in browsers. Commun. ACM\u00a052(6), 83\u201391 (2009)","journal-title":"Commun. ACM"},{"key":"17_CR6","unstructured":"Barth, A., Weinberger, J., Song, D.: Cross-origin JavaScript capability leaks: Detection, exploitation, and defense. In: Proc. of the 18th USENIX Security Symposium (USENIX Security 2009) (2009)"},{"key":"17_CR7","unstructured":"Cerny, R.: Cerny.js: a JavaScript library. Version 2.0, http:\/\/www.cerny-online.com\/cerny.js\/"},{"key":"17_CR8","unstructured":"Chess, B., O\u2019Neil, Y.T., West, J.: JavaScript Hijacking, http:\/\/cli.gs\/jshijack (accessed in January 2010)"},{"key":"17_CR9","doi-asserted-by":"publisher","first-page":"383","DOI":"10.1145\/1111037.1111071","volume-title":"POPL 2006: Conference Record of the 33rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages","author":"D.S. Dantas","year":"2006","unstructured":"Dantas, D.S., Walker, D.: Harmless advice. In: POPL 2006: Conference Record of the 33rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pp. 383\u2013396. ACM, New York (2006)"},{"key":"17_CR10","unstructured":"dojo AOP library (2008), http:\/\/cli.gs\/dojoaop"},{"key":"17_CR11","unstructured":"Ecma International. Standard ECMA-262: ECMAScript Language Specification. 5th edn., (December 2009), http:\/\/cli.gs\/ecma2625e"},{"key":"17_CR12","unstructured":"Facebook. FBJS, http:\/\/cli.gs\/facebookjs"},{"key":"17_CR13","unstructured":"Google. Attackvectors, http:\/\/code.google.com\/p\/google-caja\/wiki\/AttackVectors (accessed January 2010)"},{"key":"17_CR14","doi-asserted-by":"crossref","unstructured":"Guha, A., Saftoiu, C., Krishnamurthi, S.: The Essence of JavaScript, http:\/\/www.cs.brown.edu\/research\/plt\/dl\/CS-09-10\/ (accessed in January 2010)","DOI":"10.1007\/978-3-642-14107-2_7"},{"key":"17_CR15","unstructured":"jQuery AOP. Version 1.3 (October 17, 2009), http:\/\/plugins.jquery.com\/project\/AOP"},{"key":"17_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"326","DOI":"10.1007\/978-3-540-89330-1_23","volume-title":"Programming Languages and Systems","author":"H. Kikuchi","year":"2008","unstructured":"Kikuchi, H., Yu, D., Chander, A., Inamura, H., Serikov, I.: Javascript Instrumentation in Practice. In: Ramalingam, G. (ed.) APLAS 2008. LNCS, vol.\u00a05356, pp. 326\u2013341. Springer, Heidelberg (2008)"},{"key":"17_CR17","unstructured":"Maffeis, S., Mitchell, J., Taly, A.: Run-Time Enforcement of Secure JavaScript Subsets. In: Proc of W2SP 2009. IEEE (2009)"},{"key":"17_CR18","doi-asserted-by":"crossref","unstructured":"Maffeis, S., Mitchell, J., Taly, A.: Object capabilities and isolation of untrusted web applications. In: Proc of IEEE Security and Privacy 2010. IEEE (2010)","DOI":"10.1109\/SP.2010.16"},{"key":"17_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"505","DOI":"10.1007\/978-3-642-04444-1_31","volume-title":"Computer Security \u2013 ESORICS 2009","author":"S. Maffeis","year":"2009","unstructured":"Maffeis, S., Mitchell, J.C., Taly, A.: Isolating JavaScript with Filters, Rewriting, and Wrappers. In: Backes, M., Ning, P. (eds.) ESORICS 2009. LNCS, vol.\u00a05789, pp. 505\u2013522. Springer, Heidelberg (2009)"},{"key":"17_CR20","doi-asserted-by":"crossref","unstructured":"Meyerovich, L., Felt, A.P., Miller, M.: Object Views: FineGrained Sharing in Browsers. In: WWW2010: Proceedings of the 16th International Conference on World Wide Web. ACM (2010)","DOI":"10.1145\/1772690.1772764"},{"key":"17_CR21","doi-asserted-by":"crossref","unstructured":"Meyerovich, L., Livshits, B.: ConScript: Specifying and Enforcing Fine-Grained Security Policies for JavaScript in the Browser. In: SP 2010: Proceedings of the 2010 IEEE Symposium on Security and Privacy. IEEE Computer Society (2010)","DOI":"10.1109\/SP.2010.36"},{"key":"17_CR22","unstructured":"Nadji, Y., Saxena, P., Song, D.: Document Structure Integrity: A Robust Basis for Cross-site Scripting Defense. In: Proc. of Network and Distributed System Security Symposium, NDSS 2009 (2009)"},{"key":"17_CR23","doi-asserted-by":"crossref","unstructured":"Ofuonye, E., Miller, J.: Resolving JavaScript Vulnerabilities in the Browser Runtime. In: 19th International Symposium on Software Reliability Engineering, ISSRE 2008, pp. 57\u201366 (November 2008)","DOI":"10.1109\/ISSRE.2008.11"},{"key":"17_CR24","unstructured":"Open Ajax Alliance. Ajax and Mashup Security, http:\/\/cli.gs\/ajaxmashupsec (accessed in January 2010)"},{"key":"17_CR25","first-page":"47","volume-title":"ASIACCS 2009: Proceedings of the 4th International Symposium on Information, Computer, and Communications Security","author":"P.H. Phung","year":"2009","unstructured":"Phung, P.H., Sands, D., Chudnov, A.: Lightweight Self-Protecting JavaScript. In: ASIACCS 2009: Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, pp. 47\u201360. ACM, New York (2009)"},{"key":"17_CR26","unstructured":"ProSec Security group, Chalmers. Self-Protecting JavaScript project, http:\/\/www.cse.chalmers.se\/~phung\/projects\/jss"},{"key":"17_CR27","unstructured":"Prototype Core Team. Prototype - A JavaScript Framework, http:\/\/www.prototypejs.org\/ (accessed in January 2010)"},{"issue":"3","key":"17_CR28","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1145\/1281480.1281481","volume":"1","author":"C. Reis","year":"2007","unstructured":"Reis, C., Dunagan, J., Wang, H.J., Dubrovsky, O., Esmeir, S.: BrowserShield: Vulnerability-driven filtering of dynamic HTML. ACM Trans. Web\u00a01(3), 11 (2007)","journal-title":"ACM Trans. Web"},{"key":"17_CR29","unstructured":"The Mozilla Development Team. New in JavaScript 1.8.1, http:\/\/cli.gs\/newjs181 (accessed in January 2010)"},{"key":"17_CR30","unstructured":"The Tor Project. Torbutton FAQ; Security Issues, http:\/\/cli.gs\/torsec (accessed in February 2010)"},{"key":"17_CR31","doi-asserted-by":"crossref","unstructured":"Toledo, R., Leger, P., Tanter, E.: AspectScript: Expressive Aspects for the Web. Technical report, University of Chile Santiago, Chile (2009)","DOI":"10.1145\/1739230.1739233"},{"key":"17_CR32","unstructured":"Walden, J.: Web Tech Blog - Object and Array initializers should not invoke setters when evaluated, http:\/\/cli.gs\/mozillasetters (accessed in January 2010)"},{"key":"17_CR33","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1145\/1509276.1509285","volume-title":"ACP4IS 2009: Proceedings of the 8th Workshop on Aspects, Components, and Patterns for Infrastructure Software","author":"H. Washizaki","year":"2009","unstructured":"Washizaki, H., Kubo, A., Mizumachi, T., Eguchi, K., Fukazawa, Y., Yoshioka, N., Kanuka, H., Kodaka, T., Sugimoto, N., Nagai, Y., Yamamoto, R.: AOJS: Aspect-Oriented JavaScript Programming Framework for Web Development. In: ACP4IS 2009: Proceedings of the 8th Workshop on Aspects, Components, and Patterns for Infrastructure Software, pp. 31\u201336. ACM, New York (2009)"}],"container-title":["Lecture Notes in Computer Science","Information Security Technology for Applications"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-27937-9_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T14:43:33Z","timestamp":1743000213000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-27937-9_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642279362","9783642279379"],"references-count":33,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-27937-9_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012]]}}}