{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:37:09Z","timestamp":1750307829193,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2008,4,21]],"date-time":"2008-04-21T00:00:00Z","timestamp":1208736000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2008,4,21]]},"DOI":"10.1145\/1367497.1367570","type":"proceedings-article","created":{"date-parts":[[2008,5,15]],"date-time":"2008-05-15T18:35:39Z","timestamp":1210876539000},"page":"535-544","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":45,"title":["SMash"],"prefix":"10.1145","author":[{"given":"Frederik","family":"De Keukelaere","sequence":"first","affiliation":[{"name":"IBM Tokyo Research Laboratory, Yamato, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sumeer","family":"Bhola","sequence":"additional","affiliation":[{"name":"IBM T. J. Watson Research Center, Hawthorne, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael","family":"Steiner","sequence":"additional","affiliation":[{"name":"IBM T. J. Watson Research Center, Hawthorne, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Suresh","family":"Chari","sequence":"additional","affiliation":[{"name":"IBM T. J. Watson Research Center, Hawthorne, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sachiko","family":"Yoshihama","sequence":"additional","affiliation":[{"name":"IBM Tokyo Research Laboratory, Yamato, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2008,4,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"OpenAjax Alliance Open Source Project. http:\/\/openajaxallianc.sourceforge.net.  OpenAjax Alliance Open Source Project. http:\/\/openajaxallianc.sourceforge.net."},{"key":"e_1_3_2_1_2_1","unstructured":"A. Barth and C. Jackson. Protecting browsers from frame hijacking attacks. http:\/\/crypto.stanford.edu\/frames\/.  A. Barth and C. Jackson. Protecting browsers from frame hijacking attacks. http:\/\/crypto.stanford.edu\/frames\/."},{"key":"e_1_3_2_1_4_1","unstructured":"J. Burke. Cross domain frame communication with fragment identifiers. http:\/\/tagneto.blogspot.com\/2006\/06\/cross-domain-frame-communication-with.html June 2006.  J. Burke. Cross domain frame communication with fragment identifiers. http:\/\/tagneto.blogspot.com\/2006\/06\/cross-domain-frame-communication-with.html June 2006."},{"key":"e_1_3_2_1_5_1","unstructured":"D. Crockford. The (module) tag. http:\/\/www.json.org\/module.html Oct. 2006.  D. Crockford. The (module) tag. http:\/\/www.json.org\/module.html Oct. 2006."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1124772.1124861"},{"key":"e_1_3_2_1_7_1","unstructured":"Dojo Foundation. Dojo javascript toolkit. http:\/\/www.dojotoolkit.org\/.  Dojo Foundation. Dojo javascript toolkit. http:\/\/www.dojotoolkit.org\/."},{"key":"e_1_3_2_1_8_1","unstructured":"Google. Gadget-to-gadget communication. http:\/\/www.google.com\/apis\/gadgets\/pubsub.html.  Google. Gadget-to-gadget communication. http:\/\/www.google.com\/apis\/gadgets\/pubsub.html."},{"key":"e_1_3_2_1_9_1","unstructured":"Google. Google account authentication (AuthSub). http:\/\/code.google.com\/apis\/accounts\/AuthForWebApps.html.  Google. Google account authentication (AuthSub). http:\/\/code.google.com\/apis\/accounts\/AuthForWebApps.html."},{"key":"e_1_3_2_1_10_1","volume-title":"HTML 5. Technical report","author":"Hickson I.","year":"2007","unstructured":"I. Hickson (Editor). HTML 5. Technical report , Web Hypertext Application Technology Working Group HTML 5, 2007 . Working Draft, http:\/\/www.whatwg.org\/specs\/web-apps\/current-work. I. Hickson (Editor). HTML 5. Technical report, Web Hypertext Application Technology Working Group HTML 5, 2007. Working Draft, http:\/\/www.whatwg.org\/specs\/web-apps\/current-work."},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of HotOS XI: The 11th Workshop on Hot Topics in Operating Systems. USENIX","author":"Howell J.","year":"2007","unstructured":"J. Howell , C. Jackson , H. J. Wang , and X. Fan . MashupOS: Operating system abstractions for client mashups . In Proceedings of HotOS XI: The 11th Workshop on Hot Topics in Operating Systems. USENIX , May 2007 . J. Howell, C. Jackson, H. J. Wang, and X. Fan. MashupOS: Operating system abstractions for client mashups. In Proceedings of HotOS XI: The 11th Workshop on Hot Topics in Operating Systems. USENIX, May 2007."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242655"},{"key":"e_1_3_2_1_13_1","unstructured":"G. Lee. Personal communication on XDDE. http:\/\/www.openspot.com 2007.  G. Lee. Personal communication on XDDE. http:\/\/www.openspot.com 2007."},{"key":"e_1_3_2_1_14_1","volume-title":"IBM developerWorks","author":"McLaughlin B.","year":"2005","unstructured":"B. McLaughlin . Mastering Ajax . IBM developerWorks , 2005 - 2007. http:\/\/www-128.ibm.com\/developerworks\/views\/web\/libraryview.jsp?search_by=Mastering+Ajax+Part. B. McLaughlin. Mastering Ajax. IBM developerWorks, 2005 - 2007. http:\/\/www-128.ibm.com\/developerworks\/views\/web\/libraryview.jsp?search_by=Mastering+Ajax+Part."},{"key":"e_1_3_2_1_15_1","unstructured":"Microsoft. Windows cardspace. http:\/\/cardspace.netfx3.com http:\/\/www.identityblog.com.  Microsoft. Windows cardspace. http:\/\/cardspace.netfx3.com http:\/\/www.identityblog.com."},{"key":"e_1_3_2_1_16_1","unstructured":"M. S. Miller M. Samuel B. Laurie I. Awad and M. Stay. Caja - safe active content in sanitized Javascript. http:\/\/google-caja.googlecode.com\/files\/caja-spec-2007-10-11.pdf Oct. 2007.  M. S. Miller M. Samuel B. Laurie I. Awad and M. Stay. Caja - safe active content in sanitized Javascript. http:\/\/google-caja.googlecode.com\/files\/caja-spec-2007-10-11.pdf Oct. 2007."},{"key":"e_1_3_2_1_17_1","unstructured":"Mozilla.org. The same origin policy. http:\/\/www.mozilla.org\/projects\/security\/components\/same-origin.html.  Mozilla.org. The same origin policy. http:\/\/www.mozilla.org\/projects\/security\/components\/same-origin.html."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/361598.361623"},{"key":"e_1_3_2_1_19_1","volume-title":"Dec","author":"Raggett D.","year":"1999","unstructured":"D. Raggett , H. Le Arnaud , and I. Jacobs (Editors). HyperText Markup Language (HTML). W3C Recommendation 4.01, W3C , Dec , Dec. 1999 . D. Raggett, H. Le Arnaud, and I. Jacobs (Editors). HyperText Markup Language (HTML). W3C Recommendation 4.01, W3C, Dec, Dec. 1999."},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the Sixth Symposium on Operating Systems Design and Implementation","author":"Reis C.","year":"2006","unstructured":"C. Reis , J. Dunagan , H. J. Wang , O. Dubrovsky , and S. Esmeir . BrowserShield: Vulnerability-driven filtering of dynamic HTML . In Proceedings of the Sixth Symposium on Operating Systems Design and Implementation , Nov. 2006 . C. Reis, J. Dunagan, H. J. Wang, O. Dubrovsky, and S. Esmeir. BrowserShield: Vulnerability-driven filtering of dynamic HTML. In Proceedings of the Sixth Symposium on Operating Systems Design and Implementation, Nov. 2006."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"e_1_3_2_1_23_1","volume-title":"SPI Dynamics","author":"Spett K.","year":"2005","unstructured":"K. Spett . Cross-site scripting - are your web applications vulnerable? Technical report , SPI Dynamics , 2005 . http:\/\/www.spidynamics.com\/whitepapers\/SPIcross-sitescripting.pdf. K. Spett. Cross-site scripting - are your web applications vulnerable? Technical report, SPI Dynamics, 2005. http:\/\/www.spidynamics.com\/whitepapers\/SPIcross-sitescripting.pdf."},{"volume-title":"Shadowcat Systems, and SitePen","author":"Teknikill","key":"e_1_3_2_1_24_1","unstructured":"Teknikill , Shadowcat Systems, and SitePen , Inc. Cometd . http:\/\/www.cometd.com\/. Teknikill, Shadowcat Systems, and SitePen, Inc. Cometd. http:\/\/www.cometd.com\/."},{"key":"e_1_3_2_1_25_1","volume-title":"Web 2.0 Security &amp","author":"Vikram K.","year":"2007","unstructured":"K. Vikram and M. Steiner . Mashup component isolation via server-side analysis and instrumentation . In Web 2.0 Security &amp ; Privacy Workshop. IEEE Computer Society , Technical Committee on Security and Privacy, 2007 . K. Vikram and M. Steiner. Mashup component isolation via server-side analysis and instrumentation. In Web 2.0 Security & Privacy Workshop. IEEE Computer Society, Technical Committee on Security and Privacy, 2007."},{"key":"e_1_3_2_1_26_1","unstructured":"World Wide Web Consortium. Document Object Model. http:\/\/www.w3.org\/DOM\/.  World Wide Web Consortium. Document Object Model. http:\/\/www.w3.org\/DOM\/."},{"key":"e_1_3_2_1_27_1","unstructured":"Yahoo! Browser-based authentication (BBAuth). http:\/\/developer.yahoo.com\/auth\/.  Yahoo! Browser-based authentication (BBAuth). http:\/\/developer.yahoo.com\/auth\/."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143120.1143126"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190252"},{"key":"e_1_3_2_1_30_1","unstructured":"K. Zyp. CrossSafe. http:\/\/code.google.com\/p\/crosssafe\/.  K. Zyp. CrossSafe. http:\/\/code.google.com\/p\/crosssafe\/."}],"event":{"name":"WWW '08: The 17th International World Wide Web Conference","sponsor":["ACM Association for Computing Machinery","SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"],"location":"Beijing China","acronym":"WWW '08"},"container-title":["Proceedings of the 17th international conference on World Wide Web"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1367497.1367570","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1367497.1367570","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:57:54Z","timestamp":1750255074000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1367497.1367570"}},"subtitle":["secure component model for cross-domain mashups on unmodified browsers"],"short-title":[],"issued":{"date-parts":[[2008,4,21]]},"references-count":28,"alternative-id":["10.1145\/1367497.1367570","10.1145\/1367497"],"URL":"https:\/\/doi.org\/10.1145\/1367497.1367570","relation":{},"subject":[],"published":{"date-parts":[[2008,4,21]]},"assertion":[{"value":"2008-04-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}