{"id":"W4281398044","doi":"10.1145/3488932.3497769","title":"On Measuring Vulnerable JavaScript Functions in the Wild","year":2022,"lang":"en","type":"article","venue":"Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security","topic":"Software Engineering Research","field":"Computer Science","cited_by":13,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"JavaScript; Unobtrusive JavaScript; Computer science; Vulnerability (computing); Secure coding; Exploit; Web application; Popularity; Computer security; Rich Internet application; World Wide Web; Cross-site scripting; Source code; Web application security; Web page; Software security assurance; Programming language; Information security; Web development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["open_science"],"consensus_categories":[],"category_scores_codex":[0.001488703,0.0001582896,0.0001697723,0.0002214583,0.001027576,0.0002335307,0.007077228,0.00003360887,0.00001487902],"category_scores_gemma":[0.000444766,0.0001184911,0.00006543917,0.001022363,0.0001166811,0.0001823476,0.003581458,0.001480611,0.000005336206],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001033668,"about_ca_system_score_gemma":0.00007609773,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00004585473,"about_ca_topic_score_gemma":0.000008622893,"domain_scores_codex":[0.9982775,0.0002029263,0.0002388362,0.0003477494,0.0006870083,0.0002460199],"domain_scores_gemma":[0.9968274,0.001028668,0.0001114897,0.001807641,0.0001759617,0.00004887754],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003319177,0.0008347739,0.004800112,0.00003927405,0.00003505043,8.51421e-7,0.005812445,0.0006646228,0.0001777147,0.9673888,0.008766599,0.01144654],"study_design_scores_gemma":[0.002496334,0.002739524,0.09420846,0.0005408438,0.00004356977,0.0001373219,0.004973814,0.6392819,0.001329821,0.2239621,0.02901927,0.001267083],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.880286,0.0005443712,0.006037483,0.08115032,0.001112481,0.002025536,0.000044564,0.0004805628,0.02831871],"genre_scores_gemma":[0.9975271,0.00004102165,0.001543733,0.0005490305,0.00001913131,0.0002204079,0.000002082484,0.000009188457,0.00008830992],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.7434267,"threshold_uncertainty_score":0.9982949,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04772153059830603,"score_gpt":0.2654061366848843,"score_spread":0.2176846060865782,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}