Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense.

Adam Barth Joel Weinberger Dawn Song Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense. 187-198 2009 USENIX Security Symposium http://www.usenix.org/events/sec09/tech/full_papers/barth.pdf conf/uss/2009 db/conf/uss/uss2009.html#BarthWS09