Up a level |
(2021) Reining in the Web's Inconsistencies with Site Policy.
(2021) DoubleX: Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale.
(2021) Careful Who You Trust: Studying the Pitfalls of Cross-Origin Communication.
(2021) Statically Detecting JavaScript Obfuscation and Minification Techniques in the Wild.
(2021) Share First, Ask Later (or Never?) - Studying Violations of GDPR's Explicit Consent in Android Apps.
(2021) 12 Angry Developers – A Qualitative Study on Developers’ Struggles with CSP.
(2021) Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI.