Sciweavers

4 search results - page 1 / 1
» Language-Based Isolation of Untrusted JavaScript
Sort
View
CSFW
2009
IEEE
14 years 2 months ago
Language-Based Isolation of Untrusted JavaScript
Sergio Maffeis, Ankur Taly
ESORICS
2009
Springer
14 years 8 months ago
Isolating JavaScript with Filters, Rewriting, and Wrappers
Abstract. We study methods that allow web sites to safely combine JavaScript from untrusted sources. If implemented properly, filters can prevent dangerous code from loading into t...
Sergio Maffeis, John C. Mitchell, Ankur Taly
SP
2010
IEEE
182views Security Privacy» more  SP 2010»
13 years 11 months ago
Object Capabilities and Isolation of Untrusted Web Applications
—A growing number of current web sites combine active content (applications) from untrusted sources, as in so-called mashups. The object-capability model provides an appealing ap...
Sergio Maffeis, John C. Mitchell, Ankur Taly
PLDI
2011
ACM
12 years 10 months ago
Language-independent sandboxing of just-in-time compilation and self-modifying code
When dealing with dynamic, untrusted content, such as on the Web, software behavior must be sandboxed, typically through use of a language like JavaScript. However, even for such ...
Jason Ansel, Petr Marchenko, Úlfar Erlingss...