{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,10]],"date-time":"2026-01-10T03:41:35Z","timestamp":1768016495181,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":126,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,12,5]],"date-time":"2022-12-05T00:00:00Z","timestamp":1670198400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,12,5]]},"DOI":"10.1145\/3564625.3567987","type":"proceedings-article","created":{"date-parts":[[2022,12,3]],"date-time":"2022-12-03T01:01:29Z","timestamp":1670029289000},"page":"881-895","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["DeView: Confining Progressive Web Applications by Debloating Web APIs"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3808-5412","authenticated-orcid":false,"given":"ChangSeok","family":"Oh","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0412-7768","authenticated-orcid":false,"given":"Sangho","family":"Lee","sequence":"additional","affiliation":[{"name":"Microsoft Research, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6201-6011","authenticated-orcid":false,"given":"Chenxiong","family":"Qian","sequence":"additional","affiliation":[{"name":"University of Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0799-0230","authenticated-orcid":false,"given":"Hyungjoon","family":"Koo","sequence":"additional","affiliation":[{"name":"Sungkyunkwan University, Korea, South \u2013 Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2761-1277","authenticated-orcid":false,"given":"Wenke","family":"Lee","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,12,5]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Paul Adenot and Hongchan Choi. 2020. Web Audio API. https:\/\/www.w3.org\/TR\/webaudio\/.  Paul Adenot and Hongchan Choi. 2020. Web Audio API. https:\/\/www.w3.org\/TR\/webaudio\/."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359823"},{"key":"e_1_3_2_1_3_1","unstructured":"Ali Alabbas and Joshua Bell. 2020. Indexed Database API 3.0. https:\/\/w3c.github.io\/IndexedDB.  Ali Alabbas and Joshua Bell. 2020. Indexed Database API 3.0. https:\/\/w3c.github.io\/IndexedDB."},{"key":"e_1_3_2_1_4_1","unstructured":"Abdulrahman Alqabandi. 2020. Firefox uXSS and CSS XSS. https:\/\/leucosite.com\/Firefox-uXSS-and-CSS-XSS\/.  Abdulrahman Alqabandi. 2020. Firefox uXSS and CSS XSS. https:\/\/leucosite.com\/Firefox-uXSS-and-CSS-XSS\/."},{"key":"e_1_3_2_1_5_1","unstructured":"Amazon. 2020. Top Sites in United States. https:\/\/www.alexa.com\/topsites\/countries\/US.  Amazon. 2020. Top Sites in United States. https:\/\/www.alexa.com\/topsites\/countries\/US."},{"key":"e_1_3_2_1_6_1","unstructured":"Appscope. 2020. Appscope. https:\/\/appsco.pe.  Appscope. 2020. Appscope. https:\/\/appsco.pe."},{"key":"e_1_3_2_1_7_1","unstructured":"Jake Archibald. 2019. The Service Worker Lifecycle. https:\/\/developers.google.com\/web\/fundamentals\/primers\/service-workers\/lifecycle#install.  Jake Archibald. 2019. The Service Worker Lifecycle. https:\/\/developers.google.com\/web\/fundamentals\/primers\/service-workers\/lifecycle#install."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 28th USENIX Security Symposium (USENIX Security 19)","author":"Azad Babak\u00a0Amin","year":"2019","unstructured":"Babak\u00a0Amin Azad , Pierre Laperdrix , and Nick Nikiforakis . 2019 . Less is More: Quantifying the Security Benefits of Debloating Web Applications . In Proceedings of the 28th USENIX Security Symposium (USENIX Security 19) . Babak\u00a0Amin Azad, Pierre Laperdrix, and Nick Nikiforakis. 2019. Less is More: Quantifying the Security Benefits of Debloating Web Applications. In Proceedings of the 28th USENIX Security Symposium (USENIX Security 19)."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38033-4_22"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2014.6973951"},{"key":"e_1_3_2_1_11_1","unstructured":"Kayce Basques. 2020. Find Unused JavaScript And CSS Code With The Coverage Tab In Chrome DevTools. https:\/\/developers.google.com\/web\/tools\/chrome-devtools\/coverage.  Kayce Basques. 2020. Find Unused JavaScript And CSS Code With The Coverage Tab In Chrome DevTools. https:\/\/developers.google.com\/web\/tools\/chrome-devtools\/coverage."},{"key":"e_1_3_2_1_12_1","unstructured":"Mihai Bazon. 2020. UglifyJS. http:\/\/lisperator.net\/uglifyjs.  Mihai Bazon. 2020. UglifyJS. http:\/\/lisperator.net\/uglifyjs."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/IAS.2007.67"},{"key":"e_1_3_2_1_14_1","unstructured":"Lauren Bradley. 2019. Starbucks and Ipsy Win with eCommerce PWA and SPA Frontends. https:\/\/www.layer0.co\/post\/starbucks-ipsy-win-ecommerce-progressive-web-apps-single-page-applications.  Lauren Bradley. 2019. Starbucks and Ipsy Win with eCommerce PWA and SPA Frontends. https:\/\/www.layer0.co\/post\/starbucks-ipsy-win-ecommerce-progressive-web-apps-single-page-applications."},{"key":"e_1_3_2_1_15_1","unstructured":"The brave community. 2019. Spotify web player is not working any more. https:\/\/community.brave.com\/t\/spotify-web-player-is-not-working-any-more\/75752\/9.  The brave community. 2019. Spotify web player is not working any more. https:\/\/community.brave.com\/t\/spotify-web-player-is-not-working-any-more\/75752\/9."},{"key":"e_1_3_2_1_16_1","unstructured":"Jan B\u00f6hmer. 2020. Crooked Style Sheets. https:\/\/github.com\/jbtronics\/CrookedStyleSheets.  Jan B\u00f6hmer. 2020. Crooked Style Sheets. https:\/\/github.com\/jbtronics\/CrookedStyleSheets."},{"key":"e_1_3_2_1_17_1","unstructured":"Checkly. 2020. Headless Recorder. https:\/\/github.com\/checkly\/headless-recorder.  Checkly. 2020. Headless Recorder. https:\/\/github.com\/checkly\/headless-recorder."},{"key":"e_1_3_2_1_18_1","unstructured":"Erik Chen. 2017. Consistent Memory Metrics in Task Manager. https:\/\/docs.google.com\/document\/d\/1PZyRzChnvkUNUB85Op46aqkFXuAGUJi751DJuB6O40g.  Erik Chen. 2017. Consistent Memory Metrics in Task Manager. https:\/\/docs.google.com\/document\/d\/1PZyRzChnvkUNUB85Op46aqkFXuAGUJi751DJuB6O40g."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3141235.3141243"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87785-1_36"},{"key":"e_1_3_2_1_21_1","unstructured":"The chrome team. 2020. Chrome Releases. https:\/\/chromereleases.googleblog.com\/.  The chrome team. 2020. Chrome Releases. https:\/\/chromereleases.googleblog.com\/."},{"key":"e_1_3_2_1_22_1","unstructured":"The chromium project. 2020. Chrome Platform Status. https:\/\/www.chromestatus.com\/features.  The chromium project. 2020. Chrome Platform Status. https:\/\/www.chromestatus.com\/features."},{"key":"e_1_3_2_1_23_1","unstructured":"The chromium project. 2020. Issue 1065761: Security: Copy & paste XSS via noscript. https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=1065761.  The chromium project. 2020. Issue 1065761: Security: Copy & paste XSS via noscript. https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=1065761."},{"key":"e_1_3_2_1_24_1","unstructured":"The chromium project. 2020. MemoryInfra. https:\/\/chromium.googlesource.com\/chromium\/src\/+\/master\/docs\/memory-infra\/README.md.  The chromium project. 2020. MemoryInfra. https:\/\/chromium.googlesource.com\/chromium\/src\/+\/master\/docs\/memory-infra\/README.md."},{"key":"e_1_3_2_1_25_1","unstructured":"The chromium project. 2020. Web IDL Interfaces. https:\/\/www.chromium.org\/developers\/web-idl-interfaces.  The chromium project. 2020. Web IDL Interfaces. https:\/\/www.chromium.org\/developers\/web-idl-interfaces."},{"key":"e_1_3_2_1_26_1","unstructured":"Ian Clelland. 2020. Permissions Policy. https:\/\/www.w3.org\/TR\/permissions-policy-1\/.  Ian Clelland. 2020. Permissions Policy. https:\/\/www.w3.org\/TR\/permissions-policy-1\/."},{"key":"e_1_3_2_1_27_1","volume-title":"Proceedings of the OZCHI Australian Conference on Human Computer Interaction.","author":"Cockburn Andy","year":"1999","unstructured":"Andy Cockburn , Saul Greenberg , Bruce McKenzie , Michael Jasonsmith , and Shaun Kaasten . 1999 . WebView: A graphical aid for revisiting Web pages . In Proceedings of the OZCHI Australian Conference on Human Computer Interaction. Andy Cockburn, Saul Greenberg, Bruce McKenzie, Michael Jasonsmith, and Shaun Kaasten. 1999. WebView: A graphical aid for revisiting Web pages. In Proceedings of the OZCHI Australian Conference on Human Computer Interaction."},{"key":"e_1_3_2_1_28_1","unstructured":"The\u00a0Mozilla community. 2020. WebIDL. https:\/\/firefox-source-docs.mozilla.org\/dom\/bindings\/webidl\/index.html.  The\u00a0Mozilla community. 2020. WebIDL. https:\/\/firefox-source-docs.mozilla.org\/dom\/bindings\/webidl\/index.html."},{"key":"e_1_3_2_1_29_1","unstructured":"The\u00a0Mozilla community. 2022. Diagnose Firefox issues using Troubleshoot Mode. https:\/\/support.mozilla.org\/en-US\/kb\/diagnose-firefox-issues-using-troubleshoot-mode.  The\u00a0Mozilla community. 2022. Diagnose Firefox issues using Troubleshoot Mode. https:\/\/support.mozilla.org\/en-US\/kb\/diagnose-firefox-issues-using-troubleshoot-mode."},{"key":"e_1_3_2_1_30_1","unstructured":"The\u00a0WebKit Community. 2017. WebKit IDL. https:\/\/trac.webkit.org\/wiki\/WebKitIDL.  The\u00a0WebKit Community. 2017. WebKit IDL. https:\/\/trac.webkit.org\/wiki\/WebKitIDL."},{"key":"e_1_3_2_1_31_1","unstructured":"MDN contributors. 2020. Introduction to web APIs. https:\/\/developer.mozilla.org\/en-US\/docs\/Learn\/JavaScript\/Client-side_web_APIs\/Introduction.  MDN contributors. 2020. Introduction to web APIs. https:\/\/developer.mozilla.org\/en-US\/docs\/Learn\/JavaScript\/Client-side_web_APIs\/Introduction."},{"key":"e_1_3_2_1_32_1","unstructured":"MDN contributors. 2020. Web APIs. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API.  MDN contributors. 2020. Web APIs. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API."},{"key":"e_1_3_2_1_33_1","unstructured":"Starbucks Corporation. 2020. Starbucks Coffee Company. https:\/\/app.starbucks.com.  Starbucks Corporation. 2020. Starbucks Coffee Company. https:\/\/app.starbucks.com."},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings International Conference on Wireless Networks (ICWN). 68\u201374","author":"Costa Rafael","year":"2012","unstructured":"Rafael Costa , Luci Pirmez , Davidson Boccardo , Luiz\u00a0Fernando Rust , and Raphael Machado . 2012 . TinyObf: code obfuscation framework for wireless sensor networks . In Proceedings International Conference on Wireless Networks (ICWN). 68\u201374 . Rafael Costa, Luci Pirmez, Davidson Boccardo, Luiz\u00a0Fernando Rust, and Raphael Machado. 2012. TinyObf: code obfuscation framework for wireless sensor networks. In Proceedings International Conference on Wireless Networks (ICWN). 68\u201374."},{"key":"e_1_3_2_1_35_1","volume-title":"Proceedings of the 15th USENIX Security Symposium (Security)","author":"Cox Benjamin","year":"2006","unstructured":"Benjamin Cox , David Evans , Adrian Filipi , Jonathan Rowanhill , Wei Hu , Jack Davidson , John Knight , Anh Nguyen-Tuong , and Jason Hiser . 2006 . N-Variant Systems: A Secretless Framework for Security through Diversity .. In Proceedings of the 15th USENIX Security Symposium (Security) . Vancouver, Canada. Benjamin Cox, David Evans, Adrian Filipi, Jonathan Rowanhill, Wei Hu, Jack Davidson, John Knight, Anh Nguyen-Tuong, and Jason Hiser. 2006. N-Variant Systems: A Secretless Framework for Security through Diversity.. In Proceedings of the 15th USENIX Security Symposium (Security). Vancouver, Canada."},{"key":"e_1_3_2_1_36_1","unstructured":"Marcos C\u00e1ceres Kenneth\u00a0Rohde Christiansen Mounir Lamouri Anssi Kostiainen Matt Giuca and Aaron Gustafson. 2020. Web App Manifest. https:\/\/www.w3.org\/TR\/appmanifest.  Marcos C\u00e1ceres Kenneth\u00a0Rohde Christiansen Mounir Lamouri Anssi Kostiainen Matt Giuca and Aaron Gustafson. 2020. Web App Manifest. https:\/\/www.w3.org\/TR\/appmanifest."},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the International Conference on Research in Attacks, Intrusions, and Defenses (RAID).","author":"DeMarinis Nicholas","year":"2020","unstructured":"Nicholas DeMarinis , Kent Williams-King , Di Jin , Rodrigo Fonseca , and Vasileios\u00a0 P. Kemerlis . 2020 . Sysfilter: Automated System Call Filtering for Commodity Software . In Proceedings of the International Conference on Research in Attacks, Intrusions, and Defenses (RAID). Nicholas DeMarinis, Kent Williams-King, Di Jin, Rodrigo Fonseca, and Vasileios\u00a0P. Kemerlis. 2020. Sysfilter: Automated System Call Filtering for Commodity Software. In Proceedings of the International Conference on Research in Attacks, Intrusions, and Defenses (RAID)."},{"key":"e_1_3_2_1_38_1","unstructured":"Google Developers. 2020. Puppeteer. https:\/\/developers.google.com\/web\/tools\/puppeteer.  Google Developers. 2020. Puppeteer. https:\/\/developers.google.com\/web\/tools\/puppeteer."},{"key":"e_1_3_2_1_39_1","unstructured":"Google Developers. 2022. Installation prompt. https:\/\/web.dev\/learn\/pwa\/installation-prompt.  Google Developers. 2022. Installation prompt. https:\/\/web.dev\/learn\/pwa\/installation-prompt."},{"key":"e_1_3_2_1_40_1","unstructured":"Alexis Deveria. 2020. Permissions API. https:\/\/caniuse.com\/permissions-api.  Alexis Deveria. 2020. Permissions API. https:\/\/caniuse.com\/permissions-api."},{"key":"e_1_3_2_1_41_1","volume-title":"Electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS. https:\/\/www.electronjs.org.","author":"Foundation JS","year":"2020","unstructured":"Open JS Foundation . 2020 . Electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS. https:\/\/www.electronjs.org. OpenJS Foundation. 2020. Electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS. https:\/\/www.electronjs.org."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSE.2009.20"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3345665"},{"key":"e_1_3_2_1_44_1","volume-title":"Proceedings of the International Conference on Research in Attacks, Intrusions, and Defenses (RAID).","author":"Ghavamnia Seyedhamed","year":"2020","unstructured":"Seyedhamed Ghavamnia , Tapti Palit , Azzedine Benameur , and Michalis Polychronakis . 2020 . Confine: Automated System Call Policy Generation for Container Attack Surface Reduction . In Proceedings of the International Conference on Research in Attacks, Intrusions, and Defenses (RAID). Seyedhamed Ghavamnia, Tapti Palit, Azzedine Benameur, and Michalis Polychronakis. 2020. Confine: Automated System Call Policy Generation for Container Attack Surface Reduction. In Proceedings of the International Conference on Research in Attacks, Intrusions, and Defenses (RAID)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.5555\/3489212.3489311"},{"key":"e_1_3_2_1_46_1","volume-title":"Building Hybrid Android Apps with Java and JavaScript. O\u2019Reilly Media","author":"Gok Nizamettin","unstructured":"Nizamettin Gok and Nitin Khanna . 2013. Building Hybrid Android Apps with Java and JavaScript. O\u2019Reilly Media , Inc . Nizamettin Gok and Nitin Khanna. 2013. Building Hybrid Android Apps with Java and JavaScript. O\u2019Reilly Media, Inc."},{"key":"e_1_3_2_1_47_1","unstructured":"Reilly Grant Ken Rockot and Ovidio Ruiz-Henr\u00edquez. 2020. WebUSB API. https:\/\/wicg.github.io\/webusb\/.  Reilly Grant Ken Rockot and Ovidio Ruiz-Henr\u00edquez. 2020. WebUSB API. https:\/\/wicg.github.io\/webusb\/."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2014.52"},{"key":"e_1_3_2_1_49_1","unstructured":"Mike Gualtieri. 2018. Stealing Data With CSS: Attack and Defense. https:\/\/www.mike-gualtieri.com\/posts\/stealing-data-with-css-attack-and-defense.  Mike Gualtieri. 2018. Stealing Data With CSS: Attack and Defense. https:\/\/www.mike-gualtieri.com\/posts\/stealing-data-with-css-attack-and-defense."},{"key":"e_1_3_2_1_50_1","volume-title":"Guo and Dawson Engler","author":"J.","year":"2011","unstructured":"Philip\u00a0 J. Guo and Dawson Engler . 2011 . CDE : Using System Call Interposition to Automatically Create Portable Software Packages . Philip\u00a0J. Guo and Dawson Engler. 2011. CDE: Using System Call Interposition to Automatically Create Portable Software Packages."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243838"},{"key":"e_1_3_2_1_52_1","unstructured":"Hemanth HM. 2020. Awesome PWA. https:\/\/github.com\/hemanth\/awesome-pwa.  Hemanth HM. 2020. Awesome PWA. https:\/\/github.com\/hemanth\/awesome-pwa."},{"key":"e_1_3_2_1_53_1","volume-title":"Diversity reduces the impact of malware. (May","author":"Hole Kjell\u00a0J\u00f8rgen","year":"2013","unstructured":"Kjell\u00a0J\u00f8rgen Hole . 2013. Diversity reduces the impact of malware. (May 2013 ). Kjell\u00a0J\u00f8rgen Hole. 2013. Diversity reduces the impact of malware. (May 2013)."},{"key":"e_1_3_2_1_54_1","volume-title":"DockerizeMe: Automatic Inference of Environment Dependencies for Python Code Snippets. In 2019 IEEE\/ACM 41st International Conference on Software Engineering (ICSE).","author":"Horton E.","unstructured":"E. Horton and C. Parnin . 2019 . DockerizeMe: Automatic Inference of Environment Dependencies for Python Code Snippets. In 2019 IEEE\/ACM 41st International Conference on Software Engineering (ICSE). E. Horton and C. Parnin. 2019. DockerizeMe: Automatic Inference of Environment Dependencies for Python Code Snippets. In 2019 IEEE\/ACM 41st International Conference on Software Engineering (ICSE)."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.07.007"},{"key":"e_1_3_2_1_56_1","volume-title":"Proceedings of the 21st USENIX Security Symposium (Security)","author":"Huang Lin-Shung","year":"2012","unstructured":"Lin-Shung Huang , Alex Moshchuk , Helen\u00a0 J. Wang , Stuart Schecter , and Collin Jackson . 2012 . Clickjacking: Attacks and Defenses . In Proceedings of the 21st USENIX Security Symposium (Security) . Bellevue, WA. Lin-Shung Huang, Alex Moshchuk, Helen\u00a0J. Wang, Stuart Schecter, and Collin Jackson. 2012. Clickjacking: Attacks and Defenses. In Proceedings of the 21st USENIX Security Symposium (Security). Bellevue, WA."},{"key":"e_1_3_2_1_57_1","unstructured":"Tomohiro Ikeda. 2020. XSound. https:\/\/xsound.app\/.  Tomohiro Ikeda. 2020. XSound. https:\/\/xsound.app\/."},{"key":"e_1_3_2_1_58_1","unstructured":"Apple Inc.2020. WKWebView. https:\/\/developer.apple.com\/documentation\/webkit\/wkwebview.  Apple Inc.2020. WKWebView. https:\/\/developer.apple.com\/documentation\/webkit\/wkwebview."},{"key":"e_1_3_2_1_59_1","volume-title":"Progressive Web Apps Market 2019","author":"Insights Absolute\u00a0Markets","year":"2027","unstructured":"Absolute\u00a0Markets Insights . 2019. Progressive Web Apps Market 2019 2027 . https:\/\/www.absolutemarketsinsights.com\/reports\/Progressive-Web-Apps-Market-2019-2027-414. Absolute\u00a0Markets Insights. 2019. Progressive Web Apps Market 2019 2027. https:\/\/www.absolutemarketsinsights.com\/reports\/Progressive-Web-Apps-Market-2019-2027-414."},{"key":"e_1_3_2_1_60_1","unstructured":"jcpazos. 2018. Some blocked features still accessible. https:\/\/github.com\/pes10k\/web-api-manager\/issues\/97.  jcpazos. 2018. Some blocked features still accessible. https:\/\/github.com\/pes10k\/web-api-manager\/issues\/97."},{"key":"e_1_3_2_1_61_1","unstructured":"Cullen Jennings Henrik Bostr\u00f6m and Jan-Ivar Bruaroey. 2020. WebRTC 1.0: Real-Time Communication Between Browsers. https:\/\/www.w3.org\/TR\/webrtc\/.  Cullen Jennings Henrik Bostr\u00f6m and Jan-Ivar Bruaroey. 2020. WebRTC 1.0: Real-Time Communication Between Browsers. https:\/\/www.w3.org\/TR\/webrtc\/."},{"key":"e_1_3_2_1_62_1","unstructured":"Jun. 2017. PWA - Progressive Web Attack. https:\/\/shhnjk.blogspot.com\/2017\/10\/pwa-progressive-web-attack.html.  Jun. 2017. PWA - Progressive Web Attack. https:\/\/shhnjk.blogspot.com\/2017\/10\/pwa-progressive-web-attack.html."},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635904"},{"key":"e_1_3_2_1_64_1","unstructured":"Antoni Kepinski. 2019. How to make your Electron app faster. https:\/\/dev.to\/xxczaki\/how-to-make-your-electron-app-faster-4ifb.  Antoni Kepinski. 2019. How to make your Electron app faster. https:\/\/dev.to\/xxczaki\/how-to-make-your-electron-app-faster-4ifb."},{"key":"e_1_3_2_1_65_1","unstructured":"Kirupa. 2019. Understanding WebViews. https:\/\/www.kirupa.com\/apps\/webview.htm.  Kirupa. 2019. Understanding WebViews. https:\/\/www.kirupa.com\/apps\/webview.htm."},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3301417.3312501"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3393691.3394215"},{"key":"e_1_3_2_1_68_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS).","author":"Kurmus Anil","year":"2013","unstructured":"Anil Kurmus , Reinhard Tartler , Daniela Dorneanu , Bernhard Heinloth , Valentin Rothberg , Andreas Ruprecht , Wolfgang Schroder-Preikschat , Daniel Lohmann , and Rudiger Kapitza . 2013 . Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring . In Proceedings of the Network and Distributed System Security Symposium (NDSS). Anil Kurmus, Reinhard Tartler, Daniela Dorneanu, Bernhard Heinloth, Valentin Rothberg, Andreas Ruprecht, Wolfgang Schroder-Preikschat, Daniel Lohmann, and Rudiger Kapitza. 2013. Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring. In Proceedings of the Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243867"},{"key":"e_1_3_2_1_70_1","unstructured":"Google LLC.2020. WebView for Android. https:\/\/developer.chrome.com\/multidevice\/webview\/overview.  Google LLC.2020. WebView for Android. https:\/\/developer.chrome.com\/multidevice\/webview\/overview."},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557572"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.5555\/1151699.1151721"},{"key":"e_1_3_2_1_73_1","unstructured":"marmelab. 2020. gremlins.js. https:\/\/github.com\/marmelab\/gremlins.js.  marmelab. 2020. gremlins.js. https:\/\/github.com\/marmelab\/gremlins.js."},{"key":"e_1_3_2_1_74_1","unstructured":"Cameron McCormack Yves Lafon and Travis Leithead. 2020. WebIDL Level 1. https:\/\/www.w3.org\/TR\/WebIDL\/.  Cameron McCormack Yves Lafon and Travis Leithead. 2020. WebIDL Level 1. https:\/\/www.w3.org\/TR\/WebIDL\/."},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23309"},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICET.2006.335944"},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274703"},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00010"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.5555\/976440.976442"},{"key":"e_1_3_2_1_82_1","unstructured":"Mozilla and individual contributors. 2020. Polyfill. https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Polyfill.  Mozilla and individual contributors. 2020. Polyfill. https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Polyfill."},{"key":"e_1_3_2_1_83_1","unstructured":"Mozilla and individual contributors. 2020. Standard built-in objects. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/JavaScript\/Reference\/Global_Objects.  Mozilla and individual contributors. 2020. Standard built-in objects. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/JavaScript\/Reference\/Global_Objects."},{"key":"e_1_3_2_1_84_1","unstructured":"Mozilla and individual contributors. 2020. Using Promises. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/JavaScript\/Guide\/Using_promises.  Mozilla and individual contributors. 2020. Using Promises. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/JavaScript\/Guide\/Using_promises."},{"key":"e_1_3_2_1_85_1","unstructured":"Mozilla and individual contributors. 2020. Vendor Prefix. https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Vendor_Prefix.  Mozilla and individual contributors. 2020. Vendor Prefix. https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Vendor_Prefix."},{"key":"e_1_3_2_1_86_1","unstructured":"Mozilla and individual contributors. 2022. BeforeInstallPromptEvent \u2013 Web APIs | MDN. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/BeforeInstallPromptEvent.  Mozilla and individual contributors. 2022. BeforeInstallPromptEvent \u2013 Web APIs | MDN. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/BeforeInstallPromptEvent."},{"key":"e_1_3_2_1_87_1","unstructured":"Mozilla and individual contributors. 2022. Scope \u2013 Web app manifests | MDN. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Manifest\/scope.  Mozilla and individual contributors. 2022. Scope \u2013 Web app manifests | MDN. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Manifest\/scope."},{"key":"e_1_3_2_1_88_1","unstructured":"Collin Mulliner and Matthias Neugschwandtner. 2015. Breaking Payloads with Runtime Code Stripping and Image Freezing.  Collin Mulliner and Matthias Neugschwandtner. 2015. Breaking Payloads with Runtime Code Stripping and Image Freezing."},{"key":"e_1_3_2_1_89_1","unstructured":"neutrinos. 2021. Progressive Web Apps vs Native Apps. https:\/\/www.goneutrinos.com\/wp-content\/uploads\/2021\/06\/Whitepaper-Progressive-Web-Apps-vs-Native-Apps.pdf.  neutrinos. 2021. Progressive Web Apps vs Native Apps. https:\/\/www.goneutrinos.com\/wp-content\/uploads\/2021\/06\/Whitepaper-Progressive-Web-Apps-vs-Native-Apps.pdf."},{"key":"e_1_3_2_1_90_1","unstructured":"Pauli\u00a0Olavi Ojala. 2017. Put your Electron app on a diet with Electrino. https:\/\/medium.com\/dailyjs\/put-your-electron-app-on-a-diet-with-electrino-c7ffdf1d6297.  Pauli\u00a0Olavi Ojala. 2017. Put your Electron app on a diet with Electrino. https:\/\/medium.com\/dailyjs\/put-your-electron-app-on-a-diet-with-electrino-c7ffdf1d6297."},{"key":"e_1_3_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1145\/2600075.2600080"},{"key":"e_1_3_2_1_92_1","unstructured":"Addy Osmani. 2015. Getting started with Progressive Web Apps. https:\/\/developer.chrome.com\/blog\/getting-started-pwa\/.  Addy Osmani. 2015. Getting started with Progressive Web Apps. https:\/\/developer.chrome.com\/blog\/getting-started-pwa\/."},{"key":"e_1_3_2_1_93_1","unstructured":"Stack Overflow. 2021. 2021 Developer Survey. https:\/\/insights.stackoverflow.com\/survey\/2021#most-popular-technologies-language-prof.  Stack Overflow. 2021. 2021 Developer Survey. https:\/\/insights.stackoverflow.com\/survey\/2021#most-popular-technologies-language-prof."},{"key":"e_1_3_2_1_94_1","volume-title":"The state of PWA support on mobile and desktop","author":"Poot Arthur","year":"2020","unstructured":"Arthur Poot . 2020. The state of PWA support on mobile and desktop in 2020 . https:\/\/simplabs.com\/blog\/2020\/06\/10\/the-state-of-pwa-support-on-mobile-and-desktop-in-2020\/. Arthur Poot. 2020. The state of PWA support on mobile and desktop in 2020. https:\/\/simplabs.com\/blog\/2020\/06\/10\/the-state-of-pwa-support-on-mobile-and-desktop-in-2020\/."},{"key":"e_1_3_2_1_95_1","unstructured":"progressivewebapproom@gmail.com. 2020. Great examples of progressive web apps in one room. http:\/\/progressivewebapproom.com.  progressivewebapproom@gmail.com. 2020. Great examples of progressive web apps in one room. http:\/\/progressivewebapproom.com."},{"key":"e_1_3_2_1_96_1","volume-title":"Proceedings of the 28th USENIX Security Symposium.","author":"Qian Chenxiong","year":"2019","unstructured":"Chenxiong Qian , Hong Hu , Mansour Alharthi , Pak\u00a0Ho Chung , Taesoo Kim , and Wenke Lee . 2019 . RAZOR: A Framework for Post-deployment Software Debloating . In Proceedings of the 28th USENIX Security Symposium. Chenxiong Qian, Hong Hu, Mansour Alharthi, Pak\u00a0Ho Chung, Taesoo Kim, and Wenke Lee. 2019. RAZOR: A Framework for Post-deployment Software Debloating. In Proceedings of the 28th USENIX Security Symposium."},{"key":"e_1_3_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417866"},{"key":"e_1_3_2_1_98_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCSCT.2008.48"},{"key":"e_1_3_2_1_99_1","volume-title":"Proceedings of the 27th USENIX Security Symposium (USENIX Security 18)","author":"Quach Anh","year":"2018","unstructured":"Anh Quach , Aravind Prakash , and Lok Yan . 2018 . Debloating Software through Piece-Wise Compilation and Loading . In Proceedings of the 27th USENIX Security Symposium (USENIX Security 18) . 869\u2013886. Anh Quach, Aravind Prakash, and Lok Yan. 2018. Debloating Software through Piece-Wise Compilation and Loading. In Proceedings of the 27th USENIX Security Symposium (USENIX Security 18). 869\u2013886."},{"key":"e_1_3_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106271"},{"key":"e_1_3_2_1_101_1","unstructured":"Sam Richard and Pete LePage. 2020. What makes a good Progressive Web App?https:\/\/web.dev\/pwa-checklist\/.  Sam Richard and Pete LePage. 2020. What makes a good Progressive Web App?https:\/\/web.dev\/pwa-checklist\/."},{"key":"e_1_3_2_1_102_1","unstructured":"Alex Russell Jungkee Song Jake Archibald and Marijn Kruisselbrink. 2020. Service Workers Nightly. https:\/\/w3c.github.io\/ServiceWorker\/.  Alex Russell Jungkee Song Jake Archibald and Marijn Kruisselbrink. 2020. Service Workers Nightly. https:\/\/w3c.github.io\/ServiceWorker\/."},{"key":"e_1_3_2_1_103_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423616"},{"key":"e_1_3_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24178-9_19"},{"key":"e_1_3_2_1_105_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11265-010-0548-8"},{"key":"e_1_3_2_1_106_1","unstructured":"Ax Sharma. 2022. Dev corrupts NPM libs \u2019colors\u2019 and \u2019faker\u2019 breaking thousands of apps. https:\/\/www.bleepingcomputer.com\/news\/security\/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps.  Ax Sharma. 2022. Dev corrupts NPM libs \u2019colors\u2019 and \u2019faker\u2019 breaking thousands of apps. https:\/\/www.bleepingcomputer.com\/news\/security\/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps."},{"key":"e_1_3_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987466"},{"key":"e_1_3_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133966"},{"key":"e_1_3_2_1_109_1","unstructured":"Cybersecurity\u00a0Help s.r.o.2019. Cross-site scripting in PWA for WP & AMP for WordPress. https:\/\/www.cybersecurity-help.cz\/vdb\/SB2019032518.  Cybersecurity\u00a0Help s.r.o.2019. Cross-site scripting in PWA for WP & AMP for WordPress. https:\/\/www.cybersecurity-help.cz\/vdb\/SB2019032518."},{"key":"e_1_3_2_1_110_1","unstructured":"Simon Stewart and David Burns. 2020. WebDriver. https:\/\/www.w3.org\/TR\/webdriver\/.  Simon Stewart and David Burns. 2020. WebDriver. https:\/\/www.w3.org\/TR\/webdriver\/."},{"key":"e_1_3_2_1_111_1","volume-title":"Web Browser Fingerprinting Using Only Cascading Style Sheets. In 2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA). 57\u201363","author":"Takei Naoki","year":"2015","unstructured":"Naoki Takei , Takamichi Saito , Ko Takasu , and Tomotaka Yamada . 2015 . Web Browser Fingerprinting Using Only Cascading Style Sheets. In 2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA). 57\u201363 . Naoki Takei, Takamichi Saito, Ko Takasu, and Tomotaka Yamada. 2015. Web Browser Fingerprinting Using Only Cascading Style Sheets. In 2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA). 57\u201363."},{"key":"e_1_3_2_1_112_1","unstructured":"Telegram. 2020. Telegram Web. https:\/\/webweb.telegram.org.  Telegram. 2020. Telegram Web. https:\/\/webweb.telegram.org."},{"key":"e_1_3_2_1_113_1","unstructured":"The terser community. 2020. JavaScript parser mangler and compressor toolkit for ES6+. https:\/\/terser.org\/.  The terser community. 2020. JavaScript parser mangler and compressor toolkit for ES6+. https:\/\/terser.org\/."},{"key":"e_1_3_2_1_114_1","unstructured":"Dan Thorp-Lancaster. 2018. Microsoft announces Teams Progressive Web App (PWA) preview for Windows 10 S. https:\/\/www.windowscentral.com\/microsoft-announces-teams-progressive-web-app-pwa-preview-windows-10-s.  Dan Thorp-Lancaster. 2018. Microsoft announces Teams Progressive Web App (PWA) preview for Windows 10 S. https:\/\/www.windowscentral.com\/microsoft-announces-teams-progressive-web-app-pwa-preview-windows-10-s."},{"key":"e_1_3_2_1_115_1","unstructured":"Common Vulnerabilities and Exposures. 2019. CVE-2019-13720. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-13720.  Common Vulnerabilities and Exposures. 2019. CVE-2019-13720. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-13720."},{"key":"e_1_3_2_1_116_1","unstructured":"Common Vulnerabilities and Exposures. 2020. CVE-2020-6541. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-6541.  Common Vulnerabilities and Exposures. 2020. CVE-2020-6541. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-6541."},{"key":"e_1_3_2_1_117_1","unstructured":"Common Vulnerabilities and Exposures. 2021. CVE-2021-4079. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2021-4079.  Common Vulnerabilities and Exposures. 2021. CVE-2021-4079. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2021-4079."},{"key":"e_1_3_2_1_118_1","unstructured":"W3C. 2020. W3C Working Group. https:\/\/www.w3.org\/groups\/wg\/.  W3C. 2020. W3C Working Group. https:\/\/www.w3.org\/groups\/wg\/."},{"key":"e_1_3_2_1_119_1","unstructured":"Tom Warren. 2019. Microsoft has turned Outlook into a Progressive Web App. https:\/\/www.theverge.com\/2019\/11\/26\/20983886\/microsoft-outlook-com-pwa-progressive-web-app-install-features.  Tom Warren. 2019. Microsoft has turned Outlook into a Progressive Web App. https:\/\/www.theverge.com\/2019\/11\/26\/20983886\/microsoft-outlook-com-pwa-progressive-web-app-install-features."},{"key":"e_1_3_2_1_120_1","unstructured":"Wikipedia. 2020. INT (x86 instruction). https:\/\/en.wikipedia.org\/wiki\/INT_(x86_instruction).  Wikipedia. 2020. INT (x86 instruction). https:\/\/en.wikipedia.org\/wiki\/INT_(x86_instruction)."},{"key":"e_1_3_2_1_121_1","unstructured":"Wikipedia. 2020. Jaccard index. https:\/\/en.wikipedia.org\/wiki\/Jaccard_index).  Wikipedia. 2020. Jaccard index. https:\/\/en.wikipedia.org\/wiki\/Jaccard_index)."},{"key":"e_1_3_2_1_122_1","unstructured":"Wikipedia. 2022. Progressive web application. https:\/\/en.wikipedia.org\/wiki\/Progressive_web_application#Technologies.  Wikipedia. 2022. Progressive web application. https:\/\/en.wikipedia.org\/wiki\/Progressive_web_application#Technologies."},{"key":"e_1_3_2_1_123_1","unstructured":"Wikipedia. 2022. WHATWG. https:\/\/en.wikipedia.org\/wiki\/WHATWG.  Wikipedia. 2022. WHATWG. https:\/\/en.wikipedia.org\/wiki\/WHATWG."},{"key":"e_1_3_2_1_124_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2009.58"},{"key":"e_1_3_2_1_125_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-37231-6_17"},{"key":"e_1_3_2_1_126_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCSE.2009.402"},{"key":"e_1_3_2_1_127_1","volume-title":"2022 IEEE\/ACM 44th International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP).","author":"Zahan Nusrat","year":"2022","unstructured":"Nusrat Zahan , Thomas Zimmermann , Patrice Godefroid , Brendan Murphy , Chandra Maddila , and Laurie Williams . 2022 . What are weak links in the NPM supply chain? . In 2022 IEEE\/ACM 44th International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP). Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid, Brendan Murphy, Chandra Maddila, and Laurie Williams. 2022. What are weak links in the NPM supply chain?. In 2022 IEEE\/ACM 44th International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP)."},{"key":"e_1_3_2_1_128_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_32"}],"event":{"name":"ACSAC: Annual Computer Security Applications Conference","location":"Austin TX USA","acronym":"ACSAC"},"container-title":["Proceedings of the 38th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3567987","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3564625.3567987","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:09:12Z","timestamp":1750183752000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3567987"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12,5]]},"references-count":126,"alternative-id":["10.1145\/3564625.3567987","10.1145\/3564625"],"URL":"https:\/\/doi.org\/10.1145\/3564625.3567987","relation":{},"subject":[],"published":{"date-parts":[[2022,12,5]]},"assertion":[{"value":"2022-12-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}