- "We study dynamic code evaluation practices on nearly a quarter million URLs crawled starting from the the Alexa Top 1000 websites."
- "To remedy this, we propose a technique to generate secure patches that replace unsafe string interpolation with safer code that programmatic DOM construction techniques"
- "The root cause of DOM-based XSS vulnerabilities is unsafe software engineering or coding practices — specifically, the use of unsafe string interpolation in dynamic code evaluation constructs."
- ""
- ""
- ""
- ""
- ""
- ""
- ""
- ""
- ""
- ""