{"id":"W4281398044","doi":"10.1145/3488932.3497769","title":"On Measuring Vulnerable JavaScript Functions in the Wild","year":2022,"lang":"en","type":"article","venue":"Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security","topic":"Software Engineering Research","field":"Computer Science","cited_by":13,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"JavaScript; Unobtrusive JavaScript; Computer science; Vulnerability (computing); Secure coding; Exploit; Web application; Popularity; Computer security; Rich Internet application; World Wide Web; Cross-site scripting; Source code; Web application security; Web page; Software security assurance; Programming language; Information security; Web development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002589892,0.0009061512,0.0006383869,0.007467256,0.0006344108,0.001051627,0.001101901,0.001280306,0.0003705902],"category_scores_gemma":[0.01599445,0.0003199897,0.0005773049,0.004030826,0.000837147,0.003052366,0.001589747,0.000733919,0.0007116222],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006944805,"about_ca_system_score_gemma":0.0006505715,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.004722769,"about_ca_topic_score_gemma":0.006323332,"domain_scores_codex":[0.995103,0.0008483627,0.0005385619,0.00143958,0.001696037,0.0003745382],"domain_scores_gemma":[0.9814449,0.007103608,0.004900707,0.002637316,0.003121806,0.0007915957],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0004104016,0.0009318475,0.7644084,0.000803643,0.0002850427,0.0008077804,0.00156511,0.0206719,0.02810531,0.001685896,0.009577939,0.1707467],"study_design_scores_gemma":[0.00003023047,0.0007323342,0.8240215,0.0001729025,0.0001642964,0.002111144,0.001826385,0.1304261,0.02868851,0.002394819,0.009303187,0.0001285573],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9744952,0.0008094453,0.01675615,0.0001092372,0.00004320305,0.0001019698,0.004960667,0.001215093,0.001508895],"genre_scores_gemma":[0.9578916,0.0003993046,0.02710409,0.00008347582,0.00003480706,0.0001301667,0.01342123,0.000156045,0.0007793333],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.007467256,"threshold_uncertainty_score":0.01369685,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04772153059830603,"score_gpt":0.2654061366848843,"score_spread":0.2176846060865782,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}