A Sense of Time for JavaScript and Node.js: First-Class Timeouts as a Cure for Event Handler Poisoning. - James C. Davis 001; Eric R. Williamson; Dongyoon Lee (USENIX Security Symposium, 2018)