Challenges for static analysis of java reflection-literature review and empirical study

D Landman, A Serebrenik… - 2017 IEEE/ACM 39th …, 2017 - ieeexplore.ieee.org
The behavior of software that uses the Java Reflection API is fundamentally hard to predict
by analyzing code. Only recent static analysis approaches can resolve reflection under …

A survey of dynamic analysis and test generation for JavaScript

E Andreasen, L Gong, A Møller, M Pradel… - ACM Computing …, 2017 - dl.acm.org
JavaScript has become one of the most prevalent programming languages. Unfortunately,
some of the unique properties that contribute to this popularity also make JavaScript …

Jalangi: A selective record-replay and dynamic analysis framework for JavaScript

K Sen, S Kalasapur, T Brutch, S Gibbs - … of the 2013 9th Joint Meeting on …, 2013 - dl.acm.org
JavaScript is widely used for writing client-side web applications and is getting increasingly
popular for writing mobile applications. However, unlike C, C++, and Java, there are not that …

Efficient construction of approximate call graphs for JavaScript IDE services

A Feldthaus, M Schäfer, M Sridharan… - 2013 35th …, 2013 - ieeexplore.ieee.org
The rapid rise of JavaScript as one of the most popular programming languages of the
present day has led to a demand for sophisticated IDE support similar to what is available for …

Discovering bug patterns in JavaScript

Q Hanam, FSM Brito, A Mesbah - Proceedings of the 2016 24th ACM …, 2016 - dl.acm.org
JavaScript has become the most popular language used by developers for client and server
side programming. The language, however, still lacks proper support in the form of warnings …

Determinacy in static analysis for jQuery

E Andreasen, A Møller - Proceedings of the 2014 ACM International …, 2014 - dl.acm.org
Static analysis for JavaScript can potentially help programmers find errors early during
development. Although much progress has been made on analysis techniques, a major …

Practical static analysis of JavaScript applications in the presence of frameworks and libraries

M Madsen, B Livshits, M Fanning - Proceedings of the 2013 9th Joint …, 2013 - dl.acm.org
JavaScript is a language that is widely-used for both web-based and standalone
applications such as those in the upcoming Windows 8 operating system. Analysis of …

Alias analysis for object-oriented programs

M Sridharan, S Chandra, J Dolby, SJ Fink… - Aliasing in Object …, 2013 - Springer
We present a high-level survey of state-of-the-art alias analyses for object-oriented
programs, based on a years-long effort develo** industrial-strength static analyses for …

The adoption of javascript linters in practice: A case study on eslint

KF Tómasdóttir, M Aniche… - IEEE Transactions on …, 2018 - ieeexplore.ieee.org
A linter is a static analysis tool that warns software developers about possible code errors or
violations to coding standards. By using such a tool, errors can be surfaced early in the …

{JAW}: Studying client-side {CSRF} with hybrid property graphs and declarative traversals

S Khodayari, G Pellegrino - 30th USENIX Security Symposium (USENIX …, 2021 - usenix.org
Client-side CSRF is a new type of CSRF vulnerability where the adversary can trick the
client-side JavaScript program to send a forged HTTP request to a vulnerable target site by …