Abstract. We define a small-step operational semantics for the ECMAScript standard language corresponding to JavaScript, as a basis for analyzing security properties of web applications and mashups. The semantics is based on the language standard and a number of experiments with different implementations and browsers. Some basic properties of the semantics are proved, including a soundness theorem and a characterization of the reachable portion of the heap.
REF proposed one of the first formal semantics for the JavaScript language.
An operational semantics for javascript
In Proc. of APLAS’08, volume 5356 of LNCS
Computer Science