{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T15:55:37Z","timestamp":1783007737693,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":18,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,10,28]],"date-time":"2007-10-28T00:00:00Z","timestamp":1193529600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,10,28]]},"DOI":"10.1145\/1315245.1315248","type":"proceedings-article","created":{"date-parts":[[2007,11,15]],"date-time":"2007-11-15T14:30:20Z","timestamp":1195137020000},"page":"2-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["An analysis of browser domain-isolation bugs and a light-weight transparent defense mechanism"],"prefix":"10.1145","author":[{"given":"Shuo","family":"Chen","sequence":"first","affiliation":[{"name":"Microsoft, Redmond, WA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Ross","sequence":"additional","affiliation":[{"name":"Microsoft, Redmond, WA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yi-Min","family":"Wang","sequence":"additional","affiliation":[{"name":"Microsoft, Redmond, WA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2007,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Security Focus Vulnerability Database. Bug IDs: 10877, 11177, 12465, 12884, 13231","author":"Cross-Frame Vulnerabilities Firefox","year":"2004","unstructured":"Firefox Cross-Frame Vulnerabilities . Security Focus Vulnerability Database. Bug IDs: 10877, 11177, 12465, 12884, 13231 , 2004 2. http:\/\/www.securityfocus.com\/bid Firefox Cross-Frame Vulnerabilities. Security Focus Vulnerability Database. Bug IDs: 10877, 11177, 12465, 12884, 13231, 20042. http:\/\/www.securityfocus.com\/bid"},{"key":"e_1_3_2_1_2_1","unstructured":"Opera Cross-Frame Vulnerabilities. Security Focus Vulnerability Database. Bug IDs: 3553 4745 6754 8887 10763. http:\/\/www.securityfocus.com\/bid  Opera Cross-Frame Vulnerabilities. Security Focus Vulnerability Database. Bug IDs: 3553 4745 6754 8887 10763. http:\/\/www.securityfocus.com\/bid"},{"key":"e_1_3_2_1_3_1","unstructured":"Netscape Navigator Cross-Frame Vulnerabilities. Security Focus Vulnerability Database. Bug IDs: 11177 13231. http:\/\/www.securityfocus.com\/bid  Netscape Navigator Cross-Frame Vulnerabilities. Security Focus Vulnerability Database. Bug IDs: 11177 13231. http:\/\/www.securityfocus.com\/bid"},{"key":"e_1_3_2_1_4_1","volume-title":"CSS visited","author":"Clover A.","year":"2002","unstructured":"A. Clover . CSS visited pages disclosure, 2002 . http:\/\/seclists.org\/lists\/bugtraq\/2002\/Feb\/0271.html. A. Clover. CSS visited pages disclosure, 2002. http:\/\/seclists.org\/lists\/bugtraq\/2002\/Feb\/0271.html."},{"key":"e_1_3_2_1_5_1","unstructured":"Don Box. Essential COM. ISBN 0-201-63446-5. Addison Wesley.  Don Box. Essential COM. ISBN 0-201-63446-5. Addison Wesley."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.4"},{"key":"e_1_3_2_1_7_1","unstructured":"Douglas Crockford. \"JSONRequest \" http:\/\/www.json.org\/JSONRequest.html  Douglas Crockford. \"JSONRequest \" http:\/\/www.json.org\/JSONRequest.html"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/352600.352606"},{"key":"e_1_3_2_1_9_1","volume-title":"1982 IEEE Symposium on Security and Privacy","author":"Goguen J. A.","unstructured":"J. A. Goguen and J. Meseguer , \" Security policies and security models,\" in Proc . 1982 IEEE Symposium on Security and Privacy J. A. Goguen and J. Meseguer, \"Security policies and security models,\" in Proc. 1982 IEEE Symposium on Security and Privacy"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1135777.1135884"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/11863908_27"},{"key":"e_1_3_2_1_12_1","unstructured":"MSDN Online. http:\/\/msdn.microsoft.com  MSDN Online. http:\/\/msdn.microsoft.com"},{"key":"e_1_3_2_1_13_1","unstructured":"The \"Javascript:\" Protocol. http:\/\/www.webreference.com\/js\/column35\/protocol.html  The \"Javascript:\" Protocol. http:\/\/www.webreference.com\/js\/column35\/protocol.html"},{"key":"e_1_3_2_1_14_1","volume-title":"Usenix Security Symposium","author":"Livshits Benjamin","year":"2005","unstructured":"Benjamin Livshits and Monica S. Lam . \"Finding Security Vulnerabilities in Java Applications with Static Analysis,\" in Proc . Usenix Security Symposium , Baltimore, Maryland , August 2005 . Benjamin Livshits and Monica S. Lam. \"Finding Security Vulnerabilities in Java Applications with Static Analysis,\" in Proc. Usenix Security Symposium, Baltimore, Maryland, August 2005."},{"key":"e_1_3_2_1_15_1","volume-title":"BC","author":"Xu Wei","year":"2006","unstructured":"Wei Xu , Sandeep Bhatkar and R. Sekar . \" Taint-Enhanced Policy Enforcement: A Practical Approach to Defeat a Wide Range of Attacks,\" in Proc. the 15th USENIX Security Symposium, Vancouver , BC , Canada , July 2006 . Wei Xu, Sandeep Bhatkar and R. Sekar. \"Taint-Enhanced Policy Enforcement: A Practical Approach to Defeat a Wide Range of Attacks,\" in Proc. the 15th USENIX Security Symposium, Vancouver, BC, Canada, July 2006."},{"key":"e_1_3_2_1_16_1","first-page":"w3","author":"HttpRequest Object The","year":"2006","unstructured":"The XML HttpRequest Object . W3 C Working Draft 27 September 2006 . http:\/\/www. w3 .org\/TR\/XMLHttpRequest\/ The XMLHttpRequest Object. W3C Working Draft 27 September 2006. http:\/\/www.w3.org\/TR\/XMLHttpRequest\/","journal-title":"C Working Draft"},{"key":"e_1_3_2_1_17_1","unstructured":"Cross-site scripting. http:\/\/en.wikipedia.org\/wiki\/Cross _site_scripting  Cross-site scripting. http:\/\/en.wikipedia.org\/wiki\/Cross _site_scripting"},{"key":"e_1_3_2_1_18_1","unstructured":"Common Language Runtime (CLR). MSDN Online. http:\/\/msdn2.microsoft.com\/en-us\/netframework\/aa497266.aspx  Common Language Runtime (CLR). MSDN Online. http:\/\/msdn2.microsoft.com\/en-us\/netframework\/aa497266.aspx"}],"event":{"name":"CCS07: 14th ACM Conference on Computer and Communications Security 2007","location":"Alexandria Virginia USA","acronym":"CCS07","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 14th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315248","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1315245.1315248","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:56:12Z","timestamp":1750254972000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315248"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,10,28]]},"references-count":18,"alternative-id":["10.1145\/1315245.1315248","10.1145\/1315245"],"URL":"https:\/\/doi.org\/10.1145\/1315245.1315248","relation":{},"subject":[],"published":{"date-parts":[[2007,10,28]]},"assertion":[{"value":"2007-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}