{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T03:47:08Z","timestamp":1772164028657,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2013,10,29]],"date-time":"2013-10-29T00:00:00Z","timestamp":1383004800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2013,10,29]]},"DOI":"10.1145\/2509136.2509542","type":"proceedings-article","created":{"date-parts":[[2013,10,23]],"date-time":"2013-10-23T11:29:17Z","timestamp":1382527757000},"page":"305-322","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Flexible access control for javascript"],"prefix":"10.1145","author":[{"given":"Gregor","family":"Richards","sequence":"first","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christian","family":"Hammer","sequence":"additional","affiliation":[{"name":"Saarland University, Saarbr\u00fccken, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Francesco","family":"Zappa Nardelli","sequence":"additional","affiliation":[{"name":"INRIA, Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Suresh","family":"Jagannathan","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jan","family":"Vitek","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2013,10,29]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Network and Distributed System Security Symp. (NDSS)","author":"Abadi M.","year":"2003","unstructured":"M. Abadi and C. Fournet . Access control based on execution history . In Network and Distributed System Security Symp. (NDSS) , 2003 . M. Abadi and C. Fournet. Access control based on execution history. In Network and Distributed System Security Symp. (NDSS), 2003."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2010.27"},{"key":"e_1_3_2_1_3_1","volume-title":"W2SP 2009: WEB 2.0 Security and Privacy","author":"Athanasopoulos E.","year":"2009","unstructured":"E. Athanasopoulos , V. Pappas , and E. P. Markatos . Code-injection attacks in browsers supporting policies . In W2SP 2009: WEB 2.0 Security and Privacy , 2009 . E. Athanasopoulos, V. Pappas, and E. P. Markatos. Code-injection attacks in browsers supporting policies. In W2SP 2009: WEB 2.0 Security and Privacy, 2009."},{"key":"e_1_3_2_1_4_1","volume-title":"W2SP 2009: WEB 2.0 Security and Privacy","author":"Barth A.","year":"2009","unstructured":"A. Barth , C. Jackson , and W. Li . Attacks on javascript mashup communication . In W2SP 2009: WEB 2.0 Security and Privacy , 2009 . A. Barth, C. Jackson, and W. Li. Attacks on javascript mashup communication. In W2SP 2009: WEB 2.0 Security and Privacy, 2009."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1516046.1516066"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1525880.1525882"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455800"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542483"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382275"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1367497.1367570"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31057-7_18"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1435497.1435502"},{"key":"e_1_3_2_1_13_1","volume-title":"USENIX Security Symposium","author":"Guarnieri S.","year":"2009","unstructured":"S. Guarnieri and B. Livshits . Gatekeeper: Mostly static enforcement of security and reliability policies for JavaScript code . In USENIX Security Symposium , 2009 . S. Guarnieri and B. Livshits. Gatekeeper: Mostly static enforcement of security and reliability policies for JavaScript code. In USENIX Security Symposium, 2009."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1526709.1526785"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCS.2005.35"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/165123.165164"},{"key":"e_1_3_2_1_17_1","volume-title":"Workshop on Hot topics in Operating Systems (HOTOS)","author":"Howell J.","year":"2007","unstructured":"J. Howell , C. Jackson , H. J. Wang , and X. Fan . MashupOS: operating system abstractions for client mashups . In Workshop on Hot topics in Operating Systems (HOTOS) , 2007 . J. Howell, C. Jackson, H. J. Wang, and X. Fan. MashupOS: operating system abstractions for client mashups. In Workshop on Hot topics in Operating Systems (HOTOS), 2007."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 2010 Workshop on Web 2.0 Security and Privacy","author":"Janc A.","year":"2010","unstructured":"A. Janc and L. Olejnik . Feasibility and real-world implications of web browser history detection . In Proceedings of the 2010 Workshop on Web 2.0 Security and Privacy , 2010 . A. Janc and L. Olejnik. Feasibility and real-world implications of web browser history detection. In Proceedings of the 2010 Workshop on Web 2.0 Security and Privacy, 2010."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866339"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242654"},{"key":"e_1_3_2_1_21_1","volume-title":"USENIX Annual Technical Conference","author":"Locasto M. E.","year":"2007","unstructured":"M. E. Locasto , A. Stavrou , G. F. Cretu , and A. D. Keromytis . From STEM to SEAD: Speculative execution for automated defense . In USENIX Annual Technical Conference , 2007 . M. E. Locasto, A. Stavrou, G. F. Cretu, and A. D. Keromytis. From STEM to SEAD: Speculative execution for automated defense. In USENIX Annual Technical Conference, 2007."},{"key":"e_1_3_2_1_22_1","volume-title":"USENIX Security Symposium","author":"Louw M. T.","year":"2010","unstructured":"M. T. Louw , K. T. Ganesh , and V. Venkatakrishnan . AdJail: Practical enforcement of confidentiality and integrity policies on web advertisements . In USENIX Security Symposium , 2010 . M. T. Louw, K. T. Ganesh, and V. Venkatakrishnan. AdJail: Practical enforcement of confidentiality and integrity policies on web advertisements. In USENIX Security Symposium, 2010."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/1813084.1813126"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2009.11"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.36"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382274"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1533057.1533067"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1281480.1281481"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1519065.1519090"},{"key":"e_1_3_2_1_30_1","volume-title":"ECOOP--Object-oriented Programming","author":"Richards G.","year":"2011","unstructured":"G. Richards , C. Hammer , B. Burg , and J. Vitek . The eval that men do -- a large-scale study of the use of eval in JavaScript applications . In ECOOP--Object-oriented Programming , 2011 . G. Richards, C. Hammer, B. Burg, and J. Vitek. The eval that men do -- a large-scale study of the use of eval in JavaScript applications. In ECOOP--Object-oriented Programming, 2011."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806596.1806598"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.5555\/647883.738389"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/353323.353382"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.39"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653685"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190252"}],"event":{"name":"SPLASH '13: Conference on Systems, Programming, and Applications: Software for Humanity","location":"Indianapolis Indiana USA","acronym":"SPLASH '13","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages"]},"container-title":["Proceedings of the 2013 ACM SIGPLAN international conference on Object oriented programming systems languages & applications"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2509136.2509542","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2509136.2509542","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:28:34Z","timestamp":1750217314000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2509136.2509542"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,10,29]]},"references-count":36,"alternative-id":["10.1145\/2509136.2509542","10.1145\/2509136"],"URL":"https:\/\/doi.org\/10.1145\/2509136.2509542","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/2544173.2509542","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2013,10,29]]},"assertion":[{"value":"2013-10-29","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}