{"id":"W3162411565","doi":"10.1109/saner50967.2021.00023","title":"XSnare: Application-specific client-side cross-site scripting protection","year":2021,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":5,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of British Columbia","funders":"","keywords":"Cross-site scripting; Exploit; Computer science; Scripting language; Overhead (engineering); Context (archaeology); World Wide Web; Client-side; Computer security; Database; Web page; Web application security; Operating system; Web development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002169281,0.001497836,0.0007049456,0.001241087,0.0004848031,0.001658349,0.002204787,0.001525202,0.008417868],"category_scores_gemma":[0.005399361,0.000940313,0.0009415156,0.0004891689,0.001118638,0.00285626,0.00320917,0.002628761,0.007092724],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005569062,"about_ca_system_score_gemma":0.0008444931,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001515656,"about_ca_topic_score_gemma":0.0009466328,"domain_scores_codex":[0.9970881,0.0003918737,0.0002756879,0.0004576952,0.001374972,0.0004116282],"domain_scores_gemma":[0.9958365,0.0006248617,0.0005033533,0.002182175,0.0005797872,0.0002733794],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.003106023,0.001548315,0.02707812,0.001393054,0.0005095525,0.0026896,0.001762591,0.01497145,0.1959923,0.02331688,0.176965,0.5506672],"study_design_scores_gemma":[0.0004252486,0.001454415,0.02638025,0.000363343,0.0002433621,0.005634556,0.0001852316,0.1817437,0.3440586,0.009719608,0.4293357,0.0004561669],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"software","genre_gemma":"empirical","genre_scores_codex":[0.09753948,0.002028798,0.2807066,0.0007183653,0.0004341552,0.001003735,0.002115868,0.580308,0.03514508],"genre_scores_gemma":[0.7604321,0.001270361,0.1538206,0.002249264,0.0002834572,0.0005301383,0.008439005,0.02619497,0.04678002],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.008417868,"threshold_uncertainty_score":0.02816057,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02511780257533086,"score_gpt":0.2673688391623837,"score_spread":0.2422510365870528,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}