Software

Information-Flow Security for a Core of JavaScript

Free registration required

Executive Summary

Tracking information flow in dynamic languages remains an important and intricate problem. This paper makes substantial headway toward understanding the main challenges and resolving them. The authors identify language constructs that constitute a core of JavaScript: objects, higher-order functions, exceptions, and dynamic code evaluation. The core is powerful enough to naturally encode native constructs as arrays, as well as functionalities of JavaScript's API from the Document Object Model (DOM) related to document tree manipulation and event processing. As the main contribution, they develop a dynamic type system that guarantees information-flow security for this language.

  • Format: PDF
  • Size: 362.34 KB