Modeling the HTML DOM and browser API in static analysis of JavaScript Web Applications

SIGSOFT/FSE 2011 - Proceedings of the 19th ACM SIGSOFT Symposium on Foundations of Software Engineering

Volumn , Issue , 2011, Pages 59-69

  Jensen, Simon Holm ^a   Madsen, Magnus ^a   Møller, Anders ^a  

^a AARHUS UNIVERSITY   (Denmark)

Author keywords

[No Author keywords available]

Indexed keywords

CALL GRAPHS; COMPLEX INTERACTION; DYNAMIC ASPECTS; FLOW OF CONTROL; HTML DOMS; INTEGRATED DEVELOPMENT ENVIRONMENT; JAVASCRIPT; OBJECT PROPERTY; PROGRAMMING ERRORS; SPELLING ERRORS; TEST DRIVE; TOOL SUPPORT; WEB APPLICATION;

ERRORS; EXPERIMENTS; HIGH LEVEL LANGUAGES; HTML; SOFTWARE ENGINEERING; STATIC ANALYSIS; USER INTERFACES; WORLD WIDE WEB;

DATA FLOW ANALYSIS;

EID: 80053183055     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2025113.2025125     Document Type: Conference Paper

References (20)

1. C. Anderson, P. Giannini, and S. Drossopoulou. Towards type inference for JavaScript. In Proc. 19th European Conference on Object-Oriented Programming, ECOOP'05, volume 3586 of LNCS. Springer-Verlag, July 2005.
2. G. Balakrishnan and T. W. Reps. Recency-abstraction for heap-allocated storage. In Proc. 13th International Static Analysis Symposium, SAS'06, volume 4134 of LNCS. Springer-Verlag, August 2006.
3. R. Chugh, J. A. Meister, R. Jhala, and S. Lerner. Staged information flow for Java Script. In Proc. ACM SIGPLAN Conference on Programming Language Design and Implementation, PLDI'09, June 2009.
4. ECMA. ECMA Script Language Specification, 3rd edition. ECMA-262.
5. S. Fink and J. Dolby. WALA - The T.J. Watson Libraries for Analysis. http://wala.sourceforge.net/.
6. S. Guarnieri and B. Livshits. Gulfstream: Staged static analysis for streaming JavaScript applications. In Proc. USENIX Conference on Web Application Development, WebApps'10, June 2010.
7. S. Guarnieri and V. B. Livshits. Gatekeeper: Mostly static enforcement of security and reliability policies for JavaScript code. In Proc. 18th USENIX Security Symposium, Security'09, August 2009.
8. A. Guha, S. Krishnamurthi, and T. Jim. Using static analysis for Ajax intrusion detection. In Proc. 18th International Conference on World Wide Web, WWW'09, May 2009.
9. A. Guha, C. Saftoiu, and S. Krishnamurthi. Typing local control and state using flow analysis. In Proc. Programming Languages and Systems, 20th European Symposium on Programming, ESOP'11, LNCS. Springer-Verlag, March/April 2011.
10. D. Jang and K.-M. Choe. Points-to analysis for JavaScript. In Proc. 24th Annual ACM Symposium on Applied Computing, SAC'09, Programming Language Track, March 2009.
11. S. H. Jensen, A. Møller, and P. Thiemann. Type analysis for JavaScript. In Proc. 16th International Static Analysis Symposium, SAS'09, volume 5673 of LNCS, pages 238-255. Springer-Verlag, August 2009.
12. S. H. Jensen, A. Møller, and P. Thiemann. Interprocedural analysis with lazy propagation. In Proc. 17th International Static Analysis Symposium, SAS'10, volume 6337 of LNCS, pages 238-256. Springer-Verlag, September 2010.
13. J. B. Kam and J. D. Ullman. Monotone data flow analysis frameworks. Acta Informatica, 7:305-317, 1977. Springer-Verlag.
14. R. Kromann-Larsen and R. Simonsen. Statisk analyse af JavaScript: Indledende arbejde. Master's thesis, Department of Computer Science, Aarhus University, 2007. (In Danish).
15. F. Logozzo and H. Venter. RATA: Rapid atomic type analysis by abstract interpretation - application to JavaScript optimization. In Proc. 19th International Conference on Compiler Construction, CC'10, volume 6011 of LNCS. Springer-Verlag, March 2010.
16. S. Maffeis, J. C. Mitchell, and A. Taly. An operational semantics for JavaScript. In Proc. 6th Asian Symposium on Programming Languages and Systems, APLAS'08, volume 5356 of LNCS. Springer-Verlag, December 2008.
17. G. Richards, C. Hammer, B. Burg, and J. Vitek. The eval that men do - a large-scale study of the use of eval in JavaScript applications. In Proc. 25th European Conference on Object-Oriented Programming, ECOOP'11, LNCS. Springer-Verlag, July 2011.
18. G. Richards, S. Lebresne, B. Burg, and J. Vitek. An analysis of the dynamic behavior of Javascript programs. In Proc. ACM SIGPLAN Conference on Programming Language Design and Implementation, PLDI'10, June 2010.
19. P. Thiemann. Towards a type system for analyzing JavaScript programs. In Proc. Programming Languages and Systems, 14th European Symposium on Programming, ESOP'05, April 2005.
20. P. Thiemann. A type safe DOM API. In Proc. 10th International Workshop on Database Programming Languages, DBPL'05, volume 3774 of LNCS. Springer-Verlag, 2005.