{"id":"https://openalex.org/W1985998952","doi":"https://doi.org/10.1109/apsec.2013.85","title":"On Security Issues in Web Applications through Cross Site Scripting (XSS)","display_name":"On Security Issues in Web Applications through Cross Site Scripting (XSS)","publication_year":2013,"publication_date":"2013-12-01","ids":{"openalex":"https://openalex.org/W1985998952","doi":"https://doi.org/10.1109/apsec.2013.85","mag":"1985998952"},"language":"en","primary_location":{"id":"doi:10.1109/apsec.2013.85","doi":"https://doi.org/10.1109/apsec.2013.85","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apsec.2013.85","pdf_url":null,"source":{"id":"https://openalex.org/S4210216296","display_name":"Asia-Pacific Software Engineering Conference (APSEC)","issn_l":"1530-1362","issn":["1530-1362","2640-0715"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 20th Asia-Pacific Software Engineering Conference (APSEC)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054109908","display_name":"Vikas Kumar Malviya","orcid":"https://orcid.org/0000-0003-0601-8191","observed_orcids":["https://orcid.org/0000-0003-0601-8191"]},"institutions":[{"id":"https://openalex.org/I207223250","display_name":"Indian Institute of Information Technology Design and Manufacturing Jabalpur","ror":"https://ror.org/00gmd7q80","country_code":"IN","type":"education","lineage":["https://openalex.org/I207223250"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Vikas K. Malviya","raw_affiliation_strings":["Computer Science & Engineering, PDPM, Jabalpur, India","Comput. Sci. & Eng., PDPM IIITDM, Jabalpur, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science & Engineering, PDPM, Jabalpur, India","institution_ids":["https://openalex.org/I207223250"]},{"raw_affiliation_string":"Comput. Sci. & Eng., PDPM IIITDM, Jabalpur, India","institution_ids":["https://openalex.org/I207223250"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070072155","display_name":"Saket Saurav","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I207223250","display_name":"Indian Institute of Information Technology Design and Manufacturing Jabalpur","ror":"https://ror.org/00gmd7q80","country_code":"IN","type":"education","lineage":["https://openalex.org/I207223250"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Saket Saurav","raw_affiliation_strings":["Computer Science & Engineering, PDPM, Jabalpur, India","Comput. Sci. & Eng., PDPM IIITDM, Jabalpur, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science & Engineering, PDPM, Jabalpur, India","institution_ids":["https://openalex.org/I207223250"]},{"raw_affiliation_string":"Comput. Sci. & Eng., PDPM IIITDM, Jabalpur, India","institution_ids":["https://openalex.org/I207223250"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025809080","display_name":"Atul Kumar Gupta","orcid":"https://orcid.org/0000-0001-5051-5887","observed_orcids":["https://orcid.org/0000-0001-5051-5887"]},"institutions":[{"id":"https://openalex.org/I207223250","display_name":"Indian Institute of Information Technology Design and Manufacturing Jabalpur","ror":"https://ror.org/00gmd7q80","country_code":"IN","type":"education","lineage":["https://openalex.org/I207223250"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Atul Gupta","raw_affiliation_strings":["Computer Science & Engineering, PDPM, Jabalpur, India","Comput. Sci. & Eng., PDPM IIITDM, Jabalpur, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science & Engineering, PDPM, Jabalpur, India","institution_ids":["https://openalex.org/I207223250"]},{"raw_affiliation_string":"Comput. Sci. & Eng., PDPM IIITDM, Jabalpur, India","institution_ids":["https://openalex.org/I207223250"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I207223250"],"apc_list":null,"apc_paid":null,"fwci":1.3392,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":{"value":0.78665496,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"583","last_page":"588"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12601","display_name":"Web Applications and Data Management","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"cross-site scripting","score":0.8970000147819519},{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.9679999947547913},{"id":"https://openalex.org/keywords/cross-site-request-forgery","display_name":"cross-site request forgery","score":0.7979999780654907},{"id":"https://openalex.org/keywords/session-hijacking","display_name":"session hijacking","score":1.0},{"id":"https://openalex.org/keywords/web-application-vulnerabilities","display_name":"web application vulnerabilities","score":0.7929999828338623}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.998355507850647},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8166429400444031},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6920663118362427},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.6372095942497253},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6300345063209534},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.616625189781189},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5534492135047913},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.2744683623313904},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.2388201653957367},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07909700274467468}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/apsec.2013.85","doi":"https://doi.org/10.1109/apsec.2013.85","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apsec.2013.85","pdf_url":null,"source":{"id":"https://openalex.org/S4210216296","display_name":"Asia-Pacific Software Engineering Conference (APSEC)","issn_l":"1530-1362","issn":["1530-1362","2640-0715"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 20th Asia-Pacific Software Engineering Conference (APSEC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1971089520","https://openalex.org/W2001890939","https://openalex.org/W2003115932","https://openalex.org/W2006481682","https://openalex.org/W2066263772","https://openalex.org/W2070243518","https://openalex.org/W2071045332","https://openalex.org/W2081237149","https://openalex.org/W2101502756","https://openalex.org/W2102457045","https://openalex.org/W2104452318","https://openalex.org/W2108810805","https://openalex.org/W2110167714","https://openalex.org/W2111487235","https://openalex.org/W2112110713","https://openalex.org/W2119475518","https://openalex.org/W2131723927","https://openalex.org/W2134646643","https://openalex.org/W2143170946","https://openalex.org/W2144522314","https://openalex.org/W2148001343","https://openalex.org/W2148211687","https://openalex.org/W2150898646","https://openalex.org/W2157375374","https://openalex.org/W2164582878","https://openalex.org/W2167187243","https://openalex.org/W2170920217","https://openalex.org/W2243743487","https://openalex.org/W3147903118","https://openalex.org/W4254000746"],"related_works":["https://openalex.org/W4380451136","https://openalex.org/W3151272311","https://openalex.org/W2548409577","https://openalex.org/W1969295446","https://openalex.org/W2321203403","https://openalex.org/W4411061941","https://openalex.org/W7096474827","https://openalex.org/W3171336852","https://openalex.org/W4319431564","https://openalex.org/W2185666069"],"abstract_inverted_index":{"Web":[0],"applications":[1,19,43],"have":[2],"become":[3],"a":[4],"very":[5],"popular":[6],"means":[7],"of":[8,14,17,23,77,91,133,140,158,171],"developing":[9],"software.":[10],"This":[11],"is":[12,53,62,107,112,161,166],"because":[13],"many":[15],"advantages":[16],"web":[18,42,58,68],"like":[20,79],"no":[21],"need":[22],"installation":[24],"on":[25,67],"each":[26],"client":[27],"machine,":[28],"centralized":[29],"data,":[30],"reduction":[31],"in":[32,39],"business":[33],"cost":[34],"etc.":[35,86],"With":[36],"the":[37,54,63,72,131,164,169,172],"increase":[38],"this":[40,123],"trend":[41],"are":[44,88,152],"becoming":[45],"vulnerable":[46],"for":[47,57,74,145],"attacks.":[48],"Cross":[49,80],"site":[50],"scripting":[51],"(XSS)":[52],"major":[55],"threat":[56],"application":[59],"as":[60,114,116],"it":[61],"most":[64],"basic":[65],"attack":[66],"application.":[69],"It":[70],"provides":[71],"surface":[73],"other":[75],"types":[76,90],"attacks":[78,93],"Site":[81],"Request":[82],"Forgery,":[83],"Session":[84],"Hijacking":[85],"There":[87,106],"three":[89,118],"XSS":[92,102,134],"i.e.":[94],"non-persistent":[95],"(or":[96,100],"reflected)":[97],"XSS,":[98],"persistent":[99],"stored)":[101],"and":[103,129,135,142,155],"DOM-based":[104],"vulnerabilities.":[105],"one":[108],"more":[109],"type":[110],"that":[111],"not":[113],"common":[115],"those":[117],"types,":[119],"induced":[120],"XSS.":[121,146],"In":[122],"work":[124],"we":[125],"aim":[126],"to":[127],"study":[128],"consolidate":[130],"understanding":[132],"their":[136],"origin,":[137],"manifestation,":[138],"kinds":[139],"dangers":[141],"mitigation":[143],"efforts":[144],"Different":[147],"approaches":[148,160],"proposed":[149],"by":[150],"researchers":[151],"presented":[153],"here":[154],"an":[156],"analysis":[157],"these":[159],"performed.":[162],"Finally":[163],"conclusion":[165],"drawn":[167],"at":[168],"end":[170],"work.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}