Detecting and understanding JavaScript global identifier conflicts on the web

Abstract

JavaScript is widely used for implementing client-side web applications, and it is common to include JavaScript code from many different hosts. However, in a web browser, all the scripts loaded in the same frame share a single global namespace. As a result, a script may read or even overwrite the global objects or functions in other scripts, causing unexpected behaviors. For example, a script can redefine a function in a different script as an object, so that any call of that function would cause an exception at run time.

BibTeX

@inproceedings{Zhang-Meng:FSE20,
  author    = {Mingxue Zhang and
               Wei Meng},
  title     = {Detecting and understanding {JavaScript} global identifier conflicts on the web},
  booktitle = {{ESEC/SIGSOFT} {FSE}},
  pages     = {38--49},
  publisher = {{ACM}},
  year      = {2020},
}

Detecting and understanding JavaScript global identifier conflicts on the web

Abstract

Related papers