{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T06:48:36Z","timestamp":1791269316906,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","license":[{"start":{"date-parts":[[2009,3,10]],"date-time":"2009-03-10T00:00:00Z","timestamp":1236643200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100004965","name":"Sixth Framework Programme","doi-asserted-by":"publisher","award":["IST-2005-015905"],"award-info":[{"award-number":["IST-2005-015905"]}],"id":[{"id":"10.13039\/501100004965","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2009,3,10]]},"DOI":"10.1145\/1533057.1533067","type":"proceedings-article","created":{"date-parts":[[2009,4,28]],"date-time":"2009-04-28T14:57:19Z","timestamp":1240930639000},"page":"47-60","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":73,"title":["Lightweight self-protecting JavaScript"],"prefix":"10.1145","author":[{"given":"Phu H.","family":"Phung","sequence":"first","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Sands","sequence":"additional","affiliation":[{"name":"Chalmers University of Technology, Gothenburg, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrey","family":"Chudnov","sequence":"additional","affiliation":[{"name":"Stevens Institute of Technology, New Jersey"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2009,3,10]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Aspect Oriented Extensions for jQuery. http:\/\/code.google.com\/p\/jquery-aop\/.  Aspect Oriented Extensions for jQuery. http:\/\/code.google.com\/p\/jquery-aop\/."},{"key":"e_1_3_2_1_2_1","unstructured":"CNN\n\n  \n  : 'Phishing' scams reel in your identity. http:\/\/www.cnn.com\/2003\/TECH\/internet\/07\/21\/phishing.scam.  CNN: 'Phishing' scams reel in your identity. http:\/\/www.cnn.com\/2003\/TECH\/internet\/07\/21\/phishing.scam."},{"key":"e_1_3_2_1_3_1","unstructured":"ECMAScript 3.1 Language Specification. http:\/\/wiki.ecmascript.org\/doku.php?id=es3.1: es3.1_proposal_working_draft. Working Draft as of 01 Dec 2008.  ECMAScript 3.1 Language Specification. http:\/\/wiki.ecmascript.org\/doku.php?id=es3.1: es3.1_proposal_working_draft. Working Draft as of 01 Dec 2008."},{"key":"e_1_3_2_1_4_1","unstructured":"IBM Rational Web application security software (former AppShield). http:\/\/www-01.ibm.com\/software\/rational\/offerings\/websecurity.  IBM Rational Web application security software (former AppShield). http:\/\/www-01.ibm.com\/software\/rational\/offerings\/websecurity."},{"key":"e_1_3_2_1_5_1","unstructured":"Mozilla Developer Center: Core JavaScript 1.5 Reference. http:\/\/developer.mozilla.org\/en\/docs\/Core_JavaScript_1.5_Reference.  Mozilla Developer Center: Core JavaScript 1.5 Reference. http:\/\/developer.mozilla.org\/en\/docs\/Core_JavaScript_1.5_Reference."},{"key":"e_1_3_2_1_6_1","unstructured":"Mozilla Developer Center: XPCNativeWrapper. http:\/\/developer.mozilla.org\/en\/docs\/XPCNativeWrapper.  Mozilla Developer Center: XPCNativeWrapper. http:\/\/developer.mozilla.org\/en\/docs\/XPCNativeWrapper."},{"key":"e_1_3_2_1_7_1","unstructured":"RSnake: XSS (Cross Site Scripting) Cheat Sheet. http:\/\/ha.ckers.org\/xss.html.  RSnake: XSS (Cross Site Scripting) Cheat Sheet. http:\/\/ha.ckers.org\/xss.html."},{"key":"e_1_3_2_1_8_1","unstructured":"Web 2.0. http:\/\/en.wikipedia.org\/wiki\/Web_2.  Web 2.0. http:\/\/en.wikipedia.org\/wiki\/Web_2."},{"key":"e_1_3_2_1_9_1","unstructured":"Yahoo Developer Network: YSlow for Firebug. http:\/\/developer.yahoo.com\/yslow\/.  Yahoo Developer Network: YSlow for Firebug. http:\/\/developer.yahoo.com\/yslow\/."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68237-0_19"},{"key":"e_1_3_2_1_12_1","unstructured":"M. Arciemowicz. phpBB 2.0.18 XSS and Full Path Disclosure. http:\/\/securityreason.com\/securityalert\/269.  M. Arciemowicz. phpBB 2.0.18 XSS and Full Path Disclosure. http:\/\/securityreason.com\/securityalert\/269."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065047"},{"key":"e_1_3_2_1_14_1","unstructured":"S. Bubrouski. XSS in WebCal (v1.11-v3.04). http:\/\/securityreason.com\/securityalert\/267.  S. Bubrouski. XSS in WebCal (v1.11-v3.04). http:\/\/securityreason.com\/securityalert\/267."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.4"},{"key":"e_1_3_2_1_16_1","volume-title":"Posted on June 29th","author":"Danchev D.","year":"2008"},{"key":"e_1_3_2_1_17_1","unstructured":"Douglas Crockford. ADsafe -- making JavaScript safe for advertising. http:\/\/adsafe.org\/.  Douglas Crockford. ADsafe -- making JavaScript safe for advertising. http:\/\/adsafe.org\/."},{"key":"e_1_3_2_1_18_1","unstructured":"Facebook. FBJS. http: \/\/wiki.developers.facebook.com\/index.php\/FBJS.  Facebook. FBJS. http: \/\/wiki.developers.facebook.com\/index.php\/FBJS."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCS.2005.35"},{"key":"e_1_3_2_1_20_1","unstructured":"I. Jacobs. URIs Addressability and the use of HTTP GET and POST. http: \/\/www.w3.org\/2001\/tag\/doc\/whenToUseGet.html. Accessed May 16 2007.  I. Jacobs. URIs Addressability and the use of HTTP GET and POST. http: \/\/www.w3.org\/2001\/tag\/doc\/whenToUseGet.html. Accessed May 16 2007."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242654"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.29"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0053381"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2006.141"},{"key":"e_1_3_2_1_25_1","author":"Ligatti J.","year":"2005","journal-title":"Edit Automata: Enforcement Mechanisms for Run-time Security Policies. International Journal of Information Security, 4(1--2):2--16"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89330-1_22"},{"key":"e_1_3_2_1_27_1","unstructured":"M. S. Miller M. Samuel B. Laurie and I. A. M. Stay. Caja: Safe active content in sanitized JavaScript. http:\/\/google-caja.googlecode.com\/files\/caja-spec-2008-06-07.pdf.  M. S. Miller M. Samuel B. Laurie and I. A. M. Stay. Caja: Safe active content in sanitized JavaScript. http:\/\/google-caja.googlecode.com\/files\/caja-spec-2008-06-07.pdf."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-25660-1_20"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_7"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1281480.1281481"},{"key":"e_1_3_2_1_32_1","unstructured":"J. Ruderman. Same origin policy for JavaScript. http:\/\/developer.mozilla.org\/En\/Same_origin_ policy_for_JavaScript.  J. Ruderman. Same origin policy for JavaScript. http:\/\/developer.mozilla.org\/En\/Same_origin_ policy_for_JavaScript."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/353323.353382"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/647348.724331"},{"key":"e_1_3_2_1_35_1","author":"Stevens A.","year":"2002","journal-title":"PC Magazine"},{"key":"e_1_3_2_1_36_1","volume-title":"Ithaca","author":"Erlingsson \u00dalfar","year":"2004"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.5555\/1361397.1361415"},{"key":"e_1_3_2_1_38_1","first-page":"246","volume-title":"Erlingsson and F. B. Schneider. IRM Enforcement of Java Stack Inspection. In SP '00: Proceedings of the 2000 IEEE Symposium on Security and Privacy","author":"\u00dalfar","year":"2000"},{"key":"e_1_3_2_1_39_1","volume-title":"Cross-Site Scripting Prevention with Dynamic Data Tainting and Static Analysis. In NDSS '07: Proceeding of the 14th Annual Network and Distributed System Security","author":"Vogt P.","year":"2007"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/168619.168635"},{"key":"e_1_3_2_1_41_1","unstructured":"J. Wells. Protect sensitive Web data with Teros-100 APS. http:\/\/articles.techrepublic.com.com\/5100-10878_11-1060422.html.  J. Wells. Protect sensitive Web data with Teros-100 APS. http:\/\/articles.techrepublic.com.com\/5100-10878_11-1060422.html."},{"key":"e_1_3_2_1_42_1","unstructured":"A. Wirfs-Brock. Proposed ECMAScript 3.1 Static Object Functions: Use Cases and Rationale. http:\/\/wiki.ecmascript.org\/lib\/exe\/fetch.php? id=es3.1%3Aes3.1_proposal_working_draft&cache=cache&media=es3.1:rationale_for_es3_1_static_ object_methodsaug26.pdf. Revised August 26 2008.  A. Wirfs-Brock. Proposed ECMAScript 3.1 Static Object Functions: Use Cases and Rationale. http:\/\/wiki.ecmascript.org\/lib\/exe\/fetch.php? id=es3.1%3Aes3.1_proposal_working_draft&cache=cache&media=es3.1:rationale_for_es3_1_static_ object_methodsaug26.pdf. Revised August 26 2008."},{"key":"e_1_3_2_1_43_1","first-page":"13","volume-title":"USENIX-SS'06: Proceedings of the 15th conference on USENIX Security Symposium","author":"Xie Y.","year":"2006"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190252"}],"event":{"name":"Asia CCS 09: Asia CCS 2009 ACM Symposium on Information, Computer and Communications Security","location":"Sydney Australia","acronym":"Asia CCS 09","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 4th International Symposium on Information, Computer, and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1533057.1533067","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1533057.1533067","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:29:44Z","timestamp":1750253384000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1533057.1533067"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,3,10]]},"references-count":42,"alternative-id":["10.1145\/1533057.1533067","10.1145\/1533057"],"URL":"https:\/\/doi.org\/10.1145\/1533057.1533067","relation":{},"subject":[],"published":{"date-parts":[[2009,3,10]]},"assertion":[{"value":"2009-03-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}