JavaScript is widely used for writing client-side web applications and is getting increasingly
popular for writing mobile applications. However, unlike C, C++, and Java, there are not that …

JavaScript has been a de facto standard language for client-side web programs, and now it
is expanding its territory to general purpose programs. In this article, we classify the client …

JavaScript is used everywhere from the browser to the server, including desktops and
mobile devices. However, the current state of the art in JavaScript static analysis lags far …

Static analysis for JavaScript can potentially help programmers find errors early during
development. Although much progress has been made on analysis techniques, a major …

Developers of JavaScript web applications have little tool support for catching errors early in
development. In comparison, an abundance of tools exist for statically typed languages …

JavaScript poses significant challenges for points-to analysis, particularly due to its flexible
object model in which object properties can be created and deleted at run-time and …

Python is an increasingly popular dynamic programming language, particularly used in the
scientific community and well-known for its powerful and permissive high-level syntax. Our …

Client-side CSRF is a new type of CSRF vulnerability where the adversary can trick the
client-side JavaScript program to send a forged HTTP request to a vulnerable target site by …

A range of static analysis tools and techniques have been developed in recent years with
the aim of hel** JavaScript web application programmers produce code that is more …

Modern web pages are becoming increasingly full-featured, and this additional functionality
often requires greater use of asynchrony. Unfortunately, this asynchrony can trigger …