{"id":"W4385952926","doi":"10.1007/s10664-023-10323-w","title":"XSnare: application-specific client-side cross-site scripting protection","year":2023,"lang":"en","type":"article","venue":"Empirical Software Engineering","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of British Columbia","funders":"","keywords":"Cross-site scripting; Exploit; Computer science; Scripting language; Client-side; Context (archaeology); Computer security; Overhead (engineering); World Wide Web; Database; Web page; Web application security; Operating system; Web development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004935812,0.0004656665,0.0002688153,0.001492733,0.0005630334,0.001320245,0.001257625,0.000892707,0.008769098],"category_scores_gemma":[0.02040896,0.0003672774,0.0003605722,0.0009863535,0.001128985,0.002149015,0.001900007,0.001515824,0.002433465],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006572198,"about_ca_system_score_gemma":0.001603626,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001988943,"about_ca_topic_score_gemma":0.001732942,"domain_scores_codex":[0.9963627,0.00113478,0.0002342481,0.0004016808,0.001583132,0.0002833724],"domain_scores_gemma":[0.9839314,0.006104694,0.001795841,0.006510382,0.001241987,0.0004156688],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.001383368,0.002580533,0.1111495,0.0009395228,0.0002631706,0.0006822813,0.003003392,0.01516748,0.03673163,0.07386879,0.06547126,0.6887591],"study_design_scores_gemma":[0.0004915804,0.002534404,0.2795555,0.0007192043,0.0004576888,0.005073721,0.001520354,0.1802399,0.2104899,0.08197499,0.2366,0.0003428052],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5649245,0.0006072441,0.2380585,0.001631637,0.0001570044,0.0008798676,0.008321214,0.09626298,0.08915708],"genre_scores_gemma":[0.9224164,0.0002321678,0.05320492,0.0003599206,0.00003800633,0.0002422299,0.005879343,0.002860242,0.01476669],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.008769098,"threshold_uncertainty_score":0.02933556,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03303138290703469,"score_gpt":0.2844141654592613,"score_spread":0.2513827825522266,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}