Static Detection of User-specified Security Vulnerabilities in Client-side JavaScript. - Jens Nicolay; Valentijn Spruyt; Coen De Roover (PLAS@CCS, 2016)