Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets. - Sebastian Lekies; Krzysztof Kotowicz; Samuel Groß; Eduardo A. Vela Nava; Martin Johns (CCS, 2017)