Author:
Heiderich Mario,Späth Christopher,Schwenk Jörg
Publisher
Springer International Publishing
Reference26 articles.
1. Johns, M.: Code injection vulnerabilities in web applications - exemplified at cross-site scripting. Ph.D. dissertation, University of Passau, Passau, July 2009
2. Heiderich, M., Frosch, T., Jensen, M., Holz, T.: Crouching tiger - hidden payload: security risks of scalable vector graphics. In: Proceedings of the 18th ACM Conference on Computer and Communications Security, pp. 239–250. ACM (2011)
3. Heiderich, M., Schwenk, J., Frosch, T., Magazinius, J., Yang, E.Z.: mXSS attacks: attacking well-secured web-applications by using innerHTML mutations. In: Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, pp. 777–788. ACM (2013)
4. Akhawe, D., Barth, A., Lam, P.E., Mitchell, J., Song, D.: Towards a formal foundation of web security. In: 23rd IEEE Computer Security Foundations Symposium (CSF) 2010, pp. 290–304. IEEE (2010)
5. Heiderich, M., Späth, C., Schwenk, J.: DOMPurify testset (2017).
https://goo.gl/2g2BMz
Cited by
15 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. XSnare: application-specific client-side cross-site scripting protection;Empirical Software Engineering;2023-08-17
2. It’s (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses;2023 IEEE Symposium on Security and Privacy (SP);2023-05
3. Combinatorial Methods for HTML Sanitizer Security Testing;2023 IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW);2023-04
4. Context-Auditor: Context-sensitive Content Injection Mitigation;25th International Symposium on Research in Attacks, Intrusions and Defenses;2022-10-26
5. HTML violations and where to find them;Proceedings of the 22nd ACM Internet Measurement Conference;2022-10-25