XSS-GUARD: Precise Dynamic Prevention of Cross-Site Scripting Attacks
MUTEC: Mutation-based testing of Cross Site Scripting
unFriendly: Multi-party Privacy Risks in Social Networks
A Systematic Analysis of XSS Sanitization in Web Application Frameworks
Scriptless attacks: stealing the pie without touching the sill
Noncespaces: Using randomization to defeat cross-site scripting attacks