Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets. - Sebastian Lekies; Krzysztof Kotowicz; Samuel Groß; Eduardo A. Vela Nava; Martin Johns (CCS, 2017)

Information Leaks via Safari's Intelligent Tracking Prevention. - Artur Janc; Krzysztof Kotowicz; Lukas Weichselbaum; Roberto Clapis (CoRR, 2020)

Adopting Trusted Types in ProductionWeb Frameworks to Prevent DOM-Based Cross-Site Scripting: A Case Study. - Pei Wang; Bjarki Ágúst Guðmundsson; Krzysztof Kotowicz (EuroS&P Workshops, 2021)