{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,20]],"date-time":"2025-07-20T04:28:05Z","timestamp":1752985685481,"version":"3.28.0"},"reference-count":50,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,11]]},"DOI":"10.1109\/ase51524.2021.9678636","type":"proceedings-article","created":{"date-parts":[[2022,1,20]],"date-time":"2022-01-20T20:33:49Z","timestamp":1642710829000},"page":"215-226","source":"Crossref","is-referenced-by-count":5,"title":["CorbFuzz: Checking Browser Security Policies with Fuzzing"],"prefix":"10.1109","author":[{"given":"Chaofan","family":"Shou","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ismet Burak","family":"Kadron","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qi","family":"Su","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tevfik","family":"Bultan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3473487"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3341216.3342206"},{"year":"0","key":"ref33","article-title":"The javascript object notation (json) data interchange format"},{"journal-title":"The Composer","year":"0","key":"ref32"},{"year":"0","key":"ref31","article-title":"NGINX | High Performance Load Balancer, Web Server, & Reverse Proxy"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23368"},{"year":"2021","key":"ref37","article-title":"Fuzzilli - A JavaScript Engine Fuzzer"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423340"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380432"},{"article-title":"Chaining No impact(N\/A) Bugs to get High impact","year":"0","author":"shankar","key":"ref34"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420977"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3147.3165"},{"journal-title":"isset - php manual","year":"0","key":"ref29"},{"journal-title":"XSS Attacks Cross Site Scripting Exploits and Defense","year":"2007","author":"grossman","key":"ref2"},{"article-title":"Cross-Site Script Inclusion","year":"0","author":"hailperin","key":"ref1"},{"year":"0","key":"ref20","article-title":"Issue 1013906: Security: expose stored (in cache) cross-site response’s size"},{"journal-title":"MIME Sniffing Standard","year":"0","key":"ref22"},{"journal-title":"Fetch Standard","year":"0","key":"ref21"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133959"},{"journal-title":"185331 – Cross-Origin Read Blocking (CORB)","year":"0","key":"ref23"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/0022-0000(78)90014-4"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17511-4_24"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/1390630.1390661"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_5"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.19"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359662"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991080"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.9"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939922"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23104"},{"key":"ref16","article-title":"Spectre attacks: Exploiting speculative execution","volume":"abs 1801 1203","author":"kocher","year":"2018","journal-title":"CoRR"},{"key":"ref17","first-page":"1661","article-title":"Site isolation: Process separation for web sites within the browser","author":"reis","year":"2019","journal-title":"Proceedings of the 28th USENIX Conference on Security Symposium"},{"journal-title":"Site Isolation - The Chromium Projects","year":"0","key":"ref18"},{"journal-title":"CVE - CVE-2020-6442","year":"0","key":"ref19"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3357033"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2014.02.001"},{"year":"0","key":"ref5","article-title":"Cross-Origin Read Blocking (CORB)"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66299-2_2"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2011.6100082"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/1390630.1390662"},{"key":"ref9","first-page":"713","article-title":"Same-origin policy: Evaluation in modern browsers","author":"schwenk","year":"0"},{"year":"2021","key":"ref46","article-title":"A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine"},{"year":"2021","key":"ref45","article-title":"Dharma - Generation-based, context-free grammar fuzzer"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2003.1201187"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2610384.2628057"},{"journal-title":"American Fuzzy Lop","year":"0","key":"ref42"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24018"},{"year":"2021","key":"ref44","article-title":"Domato - DOM fuzzer"},{"key":"ref43","article-title":"libFuzzer, a library for coverage-guided fuzz testing","author":"serebryany","year":"2015","journal-title":"LLVM-Project"}],"event":{"name":"2021 36th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","start":{"date-parts":[[2021,11,15]]},"location":"Melbourne, Australia","end":{"date-parts":[[2021,11,19]]}},"container-title":["2021 36th IEEE\/ACM International Conference on Automated Software Engineering (ASE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9678507\/9678392\/09678636.pdf?arnumber=9678636","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T16:57:42Z","timestamp":1652201862000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9678636\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11]]},"references-count":50,"URL":"https:\/\/doi.org\/10.1109\/ase51524.2021.9678636","relation":{},"subject":[],"published":{"date-parts":[[2021,11]]}}}