{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,31]],"date-time":"2026-03-31T03:53:53Z","timestamp":1774929233404,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":19,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,4,23]],"date-time":"2006-04-23T00:00:00Z","timestamp":1145750400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,4,23]]},"DOI":"10.1145\/1141277.1141357","type":"proceedings-article","created":{"date-parts":[[2006,7,24]],"date-time":"2006-07-24T16:53:01Z","timestamp":1153759981000},"page":"330-337","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":148,"title":["Noxes"],"prefix":"10.1145","author":[{"given":"Engin","family":"Kirda","sequence":"first","affiliation":[{"name":"Technical University of Vienna"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christopher","family":"Kruegel","sequence":"additional","affiliation":[{"name":"Technical University of Vienna"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giovanni","family":"Vigna","sequence":"additional","affiliation":[{"name":"University of California, Santa Barbara"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nenad","family":"Jovanovic","sequence":"additional","affiliation":[{"name":"Technical University of Vienna"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2006,4,23]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"JavaScript: The Definitive Guide","author":"Flanagan D.","year":"2001","unstructured":"D. Flanagan . JavaScript: The Definitive Guide . December 2001 . 4 th Edition. D. Flanagan. JavaScript: The Definitive Guide. December 2001. 4th Edition.","edition":"4"},{"key":"e_1_3_2_1_2_1","volume-title":"ECMAScript language specification","year":"1999","unstructured":"ECMA-262 , ECMAScript language specification , 1999 . ECMA-262, ECMAScript language specification, 1999."},{"key":"e_1_3_2_1_3_1","volume-title":"The Evolution of Cross Site Scripting Attacks. Technical report, iDEFENSE Labs","author":"Endler David","year":"2002","unstructured":"David Endler . The Evolution of Cross Site Scripting Attacks. Technical report, iDEFENSE Labs , 2002 . David Endler. The Evolution of Cross Site Scripting Attacks. Technical report, iDEFENSE Labs, 2002."},{"key":"e_1_3_2_1_4_1","unstructured":"CERT. Advisory CA-2000-02: malicious HTML tags embedded in client web requests. http:\/\/www.cert.org\/advisories\/CA-2000-02.html 2000.  CERT. Advisory CA-2000-02: malicious HTML tags embedded in client web requests. http:\/\/www.cert.org\/advisories\/CA-2000-02.html 2000."},{"key":"e_1_3_2_1_5_1","volume-title":"http:\/\/www.cve.mitre.org\/","author":"Vulnerabilities Common","year":"2005","unstructured":"Common Vulnerabilities and Exposures. http:\/\/www.cve.mitre.org\/ , 2005 . Common Vulnerabilities and Exposures. http:\/\/www.cve.mitre.org\/, 2005."},{"key":"e_1_3_2_1_6_1","volume-title":"A Web Developer's Guide to Cross-Site Scripting. Technical report","author":"Cook Steven","year":"2003","unstructured":"Steven Cook . A Web Developer's Guide to Cross-Site Scripting. Technical report , SANS Institute , 2003 . Steven Cook. A Web Developer's Guide to Cross-Site Scripting. Technical report, SANS Institute, 2003."},{"key":"e_1_3_2_1_7_1","volume-title":"http:\/\/www.cert.org\/tech_ tips\/malicious_code_mitigation.html","author":"CERT.","year":"2005","unstructured":"CERT. Understanding malicious content mitigation for web developers. http:\/\/www.cert.org\/tech_ tips\/malicious_code_mitigation.html , 2005 . CERT. Understanding malicious content mitigation for web developers. http:\/\/www.cert.org\/tech_ tips\/malicious_code_mitigation.html, 2005."},{"key":"e_1_3_2_1_8_1","volume-title":"http:\/\/www.tinysoftware.com\/home\/tiny2","author":"Software TINY","year":"2005","unstructured":"TINY Software . Tiny Firewall . http:\/\/www.tinysoftware.com\/home\/tiny2 , 2005 . TINY Software. Tiny Firewall. http:\/\/www.tinysoftware.com\/home\/tiny2, 2005."},{"key":"e_1_3_2_1_9_1","unstructured":"Zone Labs. Zone Labs Internet Security Products. http:\/\/www.zonelabs.com\/store\/content\/home.jsp 2005.  Zone Labs. Zone Labs Internet Security Products. http:\/\/www.zonelabs.com\/store\/content\/home.jsp 2005."},{"key":"e_1_3_2_1_10_1","volume-title":"http:\/\/www.kerio.com","author":"Firewall Kerio","year":"2005","unstructured":"Kerio. Kerio Firewall . http:\/\/www.kerio.com , 2005 . Kerio. Kerio Firewall. http:\/\/www.kerio.com, 2005."},{"key":"e_1_3_2_1_11_1","unstructured":"Symantec. Norton Personal Firewall. http:\/\/www.symantec.com\/sabu\/nis\/npf\/ 2005.  Symantec. Norton Personal Firewall. http:\/\/www.symantec.com\/sabu\/nis\/npf\/ 2005."},{"key":"e_1_3_2_1_12_1","unstructured":"Dark Bicho. PHP-Nuke Reviews Module Cross-Site Scripting Vulnerability. http:\/\/www.securityfocus.com\/bid\/10493 2004.  Dark Bicho. PHP-Nuke Reviews Module Cross-Site Scripting Vulnerability. http:\/\/www.securityfocus.com\/bid\/10493 2004."},{"key":"e_1_3_2_1_13_1","unstructured":"Francisco Burzi. PHP-Nuke Home Page. http:\/\/www.phpnuke.org 2005.  Francisco Burzi. PHP-Nuke Home Page. http:\/\/www.phpnuke.org 2005."},{"key":"e_1_3_2_1_14_1","unstructured":"Security Focus. Bugtraq Mailing List. http:\/\/www.securityfocus.com 2005.  Security Focus. Bugtraq Mailing List. http:\/\/www.securityfocus.com 2005."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/511446.511498"},{"key":"e_1_3_2_1_16_1","unstructured":"Sanctum Inc. AppShield White Paper. http:\/\/sanctuminc.com 2005.  Sanctum Inc. AppShield White Paper. http:\/\/sanctuminc.com 2005."},{"key":"e_1_3_2_1_17_1","unstructured":"Axel Kossel. eBay-Passwortklau. http:\/\/www.heise.de\/security\/result.xhtml?url=\/security\/artikel\/54271&w%ords=eBay 2004.  Axel Kossel. eBay-Passwortklau. http:\/\/www.heise.de\/security\/result.xhtml?url=\/security\/artikel\/54271&w%ords=eBay 2004."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/775152.775174"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988679"}],"event":{"name":"SAC06: The 2006 ACM Symposium on Applied Computing","location":"Dijon France","acronym":"SAC06","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"]},"container-title":["Proceedings of the 2006 ACM symposium on Applied computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1141277.1141357","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1141277.1141357","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T20:22:37Z","timestamp":1750278157000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1141277.1141357"}},"subtitle":["a client-side solution for mitigating cross-site scripting attacks"],"short-title":[],"issued":{"date-parts":[[2006,4,23]]},"references-count":19,"alternative-id":["10.1145\/1141277.1141357","10.1145\/1141277"],"URL":"https:\/\/doi.org\/10.1145\/1141277.1141357","relation":{},"subject":[],"published":{"date-parts":[[2006,4,23]]},"assertion":[{"value":"2006-04-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}