Cross Miniapp Request Forgery-Reference-Cited by-同舟云学术

Cross Miniapp Request Forgery

Published:2022-11-07 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Yang Yuqing¹,Zhang Yue¹,Lin Zhiqiang¹

Affiliation:

1. The Ohio State University, Columbus, OH, USA

Funder

NSF (National Science Foundation)

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3548606.3560597

Reference49 articles.

1. Authorization | weixin public doc. https://developers.weixin.qq.com/miniprogr am/en/dev/framework/open-ability/authorize.html. (Accessed on 09/05/2022). Authorization | weixin public doc. https://developers.weixin.qq.com/miniprogr am/en/dev/framework/open-ability/authorize.html. (Accessed on 09/05/2022).

2. China's tencent takes on the app store with launch of mini programs for wechat. https://techcrunch.com/2017/01/09/wechat-mini-programs/. (Accessed on 08/05/2022). China's tencent takes on the app store with launch of mini programs for wechat. https://techcrunch.com/2017/01/09/wechat-mini-programs/. (Accessed on 08/05/2022).

3. Network | weixin public doc. https://developers.weixin.qq.com/miniprogram/e n/dev/framework/ability/network.html. (Accessed on 09/05/2022). Network | weixin public doc. https://developers.weixin.qq.com/miniprogram/e n/dev/framework/ability/network.html. (Accessed on 09/05/2022).

4. Snap minis. https://minis.snapchat.com/. Snap minis. https://minis.snapchat.com/.

5. Wechat active users worldwide 2022 | statista. https://www.statista.com/sta tistics/255778/number-of-active-wechat-messenger-accounts/. (Accessed on 09/05/2022). Wechat active users worldwide 2022 | statista. https://www.statista.com/sta tistics/255778/number-of-active-wechat-messenger-accounts/. (Accessed on 09/05/2022).

Cited by 18 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. RootFree Attacks: Exploiting Mobile Platform's Super Apps From Desktop;Proceedings of the 19th ACM Asia Conference on Computer and Communications Security;2024-07

2. Undefined-oriented Programming: Detecting and Chaining Prototype Pollution Gadgets in Node.js Template Engines for Malicious Consequences;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

3. Keep Me Updated: An Empirical Study on Embedded Javascript Engines in Android Apps;Proceedings of the 21st International Conference on Mining Software Repositories;2024-04-15

4. The Dark Forest: Understanding Security Risks of Cross-Party Delegated Resources in Mobile App-in-App Ecosystems;IEEE Transactions on Information Forensics and Security;2024

5. On the Usage-scenario-based Data Minimization in Mini Programs;Proceedings of the 2023 ACM Workshop on Secure and Trustworthy Superapps;2023-11-26