Abstract: Modern JavaScript engines employ multi-tier JIT compilation for high performance, but these aggressive optimizations often introduce subtle and hard-to-detect security vulnerabilities.

We've all been there: you drop a 15MB swagger.json file into a viewer. It takes 10 seconds to render. You search for "admin" to audit security. You find 400 matches. 398 of them are admin_id fields in ...

This repository contains Warblre, a Coq mechanization of ECMAScript regexes. ECMAScript is the specification followed by JavaScript implementations, and a mechanization of its regex semantics makes it ...