{"id":"https://openalex.org/W2137584523","doi":"https://doi.org/10.1109/csf.2009.11","title":"Language-Based Isolation of Untrusted JavaScript","display_name":"Language-Based Isolation of Untrusted JavaScript","publication_year":2009,"publication_date":"2009-07-01","ids":{"openalex":"https://openalex.org/W2137584523","doi":"https://doi.org/10.1109/csf.2009.11","mag":"2137584523"},"language":"en","primary_location":{"id":"doi:10.1109/csf.2009.11","doi":"https://doi.org/10.1109/csf.2009.11","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csf.2009.11","pdf_url":null,"source":{"id":"https://openalex.org/S4210181444","display_name":"IEEE Computer Security Foundations Workshop (CSFW)","issn_l":"1063-6900","issn":["1063-6900","2377-5459"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 22nd IEEE Computer Security Foundations Symposium","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/10044/1/95274","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043151499","display_name":"Sergio Maffeis","orcid":"https://orcid.org/0000-0003-1514-6857","observed_orcids":["https://orcid.org/0000-0003-1514-6857"]},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sergio Maffeis","raw_affiliation_strings":["Department of Computing, Imperial College London, London, UK","Dept. of Comput., Imperial Coll. London, London, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing, Imperial College London, London, UK","institution_ids":["https://openalex.org/I47508984"]},{"raw_affiliation_string":"Dept. of Comput., Imperial Coll. London, London, UK","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069391199","display_name":"Ankur Taly","orcid":"https://orcid.org/0009-0004-3459-0288","observed_orcids":["https://orcid.org/0009-0004-3459-0288"]},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ankur Taly","raw_affiliation_strings":["Department of Computer Science, University of Stanford, Palo Alto, USA","Stanford University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Stanford, Palo Alto, USA","institution_ids":["https://openalex.org/I97018004"]},{"raw_affiliation_string":"Stanford University","institution_ids":["https://openalex.org/I97018004"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.8493,"has_fulltext":false,"cited_by_count":91,"citation_normalized_percentile":{"value":0.97765534,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"77","last_page":"91"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.951200008392334,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.951200008392334,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0203000009059906,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.019899999722838402,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/web-security","display_name":"web security","score":0.6430000066757202},{"id":"https://openalex.org/keywords/code-rewriting","display_name":"code rewriting","score":0.49399998784065247},{"id":"https://openalex.org/keywords/operational-semantics","display_name":"operational semantics","score":0.9670000076293945},{"id":"https://openalex.org/keywords/sensitive-information-theft","display_name":"sensitive information theft","score":0.3269999921321869}],"concepts":[{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.8687758445739746},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8649691343307495},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.6689218282699585},{"id":"https://openalex.org/C198240166","wikidata":"https://www.wikidata.org/wiki/Q2298909","display_name":"Unobtrusive JavaScript","level":4,"score":0.6658900380134583},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6332676410675049},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.6279984712600708},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.5537341237068176},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.43220919370651245},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.43020954728126526},{"id":"https://openalex.org/C103048170","wikidata":"https://www.wikidata.org/wiki/Q725485","display_name":"Rich Internet application","level":3,"score":0.25275421142578125},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C89423630","wikidata":"https://www.wikidata.org/wiki/Q7193","display_name":"Microbiology","level":1,"score":0.0}],"mesh":[],"locations_count":8,"locations":[{"id":"doi:10.1109/csf.2009.11","doi":"https://doi.org/10.1109/csf.2009.11","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csf.2009.11","pdf_url":null,"source":{"id":"https://openalex.org/S4210181444","display_name":"IEEE Computer Security Foundations Workshop (CSFW)","issn_l":"1063-6900","issn":["1063-6900","2377-5459"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 22nd IEEE Computer Security Foundations Symposium","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.151.8680","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.151.8680","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://crypto.stanford.edu/websec/jsPapers/csf09-camera-ready.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.154.6150","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.154.6150","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://crypto.stanford.edu/cs142/papers/javascript-fbjs-adsafe%20(preliminary%20version).pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.157.8546","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.157.8546","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.doc.ic.ac.uk/~maffeis/csf09.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.207.3059","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.207.3059","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://theory.stanford.edu/~ataly/Papers/csf09.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.297.2911","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.297.2911","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://wwwhomes.doc.ic.ac.uk/~maffeis/csf09.pdf","raw_type":"text"},{"id":"pmh:oai:spiral.imperial.ac.uk:10044/1/95274","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10044/1/95274","pdf_url":null,"source":{"id":"https://openalex.org/S4306401396","display_name":"Spiral (Imperial College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"36","raw_type":"Report"},{"id":"doi:10.25561/95274","doi":"https://doi.org/10.25561/95274","is_oa":true,"landing_page_url":"https://doi.org/10.25561/95274","pdf_url":null,"source":{"id":"https://openalex.org/S7407050757","display_name":"Imperial College Research Computing Service Data Repository","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:spiral.imperial.ac.uk:10044/1/95274","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10044/1/95274","pdf_url":null,"source":{"id":"https://openalex.org/S4306401396","display_name":"Spiral (Imperial College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"36","raw_type":"Report"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2582189557","display_name":"Programming abstractions and static analyses for the web 2.0 and beyond.","funder_award_id":"EP/E044956/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1512206543","https://openalex.org/W1520961854","https://openalex.org/W1664998284","https://openalex.org/W2022356878","https://openalex.org/W2032095999","https://openalex.org/W2045177959","https://openalex.org/W2060857434","https://openalex.org/W2102362173","https://openalex.org/W2118431434","https://openalex.org/W2121194882","https://openalex.org/W2126461222","https://openalex.org/W2129345992","https://openalex.org/W2132733485","https://openalex.org/W2141228336","https://openalex.org/W2154366986","https://openalex.org/W2156249516","https://openalex.org/W2157514610","https://openalex.org/W2161433768","https://openalex.org/W2162071448","https://openalex.org/W2162755110","https://openalex.org/W2202668079","https://openalex.org/W4247465700"],"related_works":["https://openalex.org/W1579453661","https://openalex.org/W7100591595","https://openalex.org/W7099667811","https://openalex.org/W7100563984","https://openalex.org/W153608977","https://openalex.org/W1563971619","https://openalex.org/W2121780525","https://openalex.org/W4239707840","https://openalex.org/W916837809","https://openalex.org/W2003313442"],"abstract_inverted_index":{"Web":[0],"sites":[1],"that":[2],"incorporate":[3],"untrusted":[4],"content":[5,15],"may":[6],"use":[7],"browser-":[8],"or":[9,23],"language-based":[10,29],"methods":[11,30],"to":[12,79,83],"keep":[13],"such":[14],"from":[16],"maliciously":[17],"altering":[18],"pages,":[19],"stealing":[20],"sensitive":[21],"information,":[22],"causing":[24],"other":[25],"harm.":[26],"We":[27,46,75],"study":[28],"for":[31,62],"filtering":[32],"and":[33,40,56,58],"rewriting":[34],"JavaScript":[35,86],"code,":[36],"using":[37],"Yahoo!":[38],"ADSafe":[39],"Facebook":[41],"FBJS":[42],"as":[43],"motivating":[44],"examples.":[45],"explain":[47],"the":[48,71,85],"core":[49],"problems":[50,88],"by":[51],"describing":[52],"previously":[53],"unknown":[54],"vulnerabilities":[55],"subtleties,":[57],"develop":[59],"a":[60],"foundation":[61],"improved":[63],"solutions":[64],"based":[65],"on":[66],"an":[67],"operational":[68],"semantics":[69],"of":[70],"full":[72],"ECMA-262":[73],"language.":[74],"also":[76],"discuss":[77],"how":[78],"apply":[80],"our":[81],"analysis":[82],"address":[84],"isolation":[87],"we":[89],"discovered.":[90]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":5},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":9},{"year":2015,"cited_by_count":10},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":11},{"year":2012,"cited_by_count":14}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}