Adam Barth, Joel Weinberger, Dawn Song. Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense. In 18th USENIX Security Symposium, Montreal, Canada, August 10-14, 2009, Proceedings. pages 187-198, USENIX Association, 2009. [doi]
Abstract is missing.