{"id":"W2095804328","doi":"10.1109/compsacw.2011.27","title":"Injecting Comments to Detect JavaScript Code Injection Attacks","year":2011,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":28,"is_retracted":false,"has_abstract":true,"ca_institutions":"Queen's University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"JavaScript; Unobtrusive JavaScript; Computer science; Cross-site scripting; Scripting language; Code (set theory); Programming language; Web application; Source code; Redundant code; Rich Internet application; Operating system; Code generation; Key (lock); Web service; Web development","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0004371578,0.000125487,0.0001231029,0.0001426257,0.0001751266,0.0001128777,0.000777439,0.00005349177,0.00009666708],"category_scores_gemma":[0.00007754066,0.0001231726,0.00004367603,0.0004717484,0.00002505972,0.0004722502,0.0003844386,0.0001350462,0.000441584],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0000843548,"about_ca_system_score_gemma":0.00002907464,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0006466053,"about_ca_topic_score_gemma":0.0002614099,"domain_scores_codex":[0.9987609,0.00008075403,0.0002545001,0.0004100483,0.0002283988,0.0002654025],"domain_scores_gemma":[0.9989054,0.00007053274,0.00006030512,0.0007174556,0.0001166051,0.0001296906],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.00007017405,0.0005513587,0.03567948,0.00009180359,0.000135465,0.00000988771,0.1030662,0.0002138188,0.01372191,0.3783861,0.08318101,0.3848928],"study_design_scores_gemma":[0.001995717,0.002032973,0.07211813,0.00008781085,0.00003052453,0.0002001796,0.004644683,0.03101089,0.5725052,0.09964232,0.2131435,0.002588102],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1179723,0.00001028641,0.8452225,0.0005126167,0.0003421693,0.0003122719,0.000001442044,0.0005701653,0.03505626],"genre_scores_gemma":[0.8934625,7.508443e-7,0.1034679,0.002356861,0.00004167373,0.00007902772,6.405921e-7,0.00000991624,0.0005807789],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.7754902,"threshold_uncertainty_score":0.5675817,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.06320345382442585,"score_gpt":0.2821957931494312,"score_spread":0.2189923393250053,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}