Context-sensitive auto-sanitization in web templating languages using type qualifiers. - Mike Samuel; Prateek Saxena; Dawn Song (CCS, 2011)

Let's Parse to Prevent Pwnage. - Mike Samuel; Úlfar Erlingsson (LEET, 2012)