2026-07-21T03:18:02Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:13202 2024-03-06T11:05:08Z ddc:004 open_access

A Trusted Infrastructure for Symbolic Analysis of Event-Driven Web Applications (Artifact) Sampaio, Gabriela Fragoso Santos, José Maksimović, Petar Gardner, Philippa Events DOM JavaScript promises symbolic execution bug-finding This artifact contains the implementation of JaVerT.Click, a symbolic analysis tool for modern event-driven Web applications. The tool extends JaVerT 2.0, a state-of-the-art symbolic execution tool for JavaScript (JS), with JS reference implementations of the DOM Core Level 1, DOM UI Events, JavaScript Promises and the JavaScript async/await APIs, all underpinned by a simple Core Event Semantics which is sufficiently expressive to describe the event models underlying these APIs. Our reference implementations mostly follow the respective standards line-by-line and are all thoroughly tested against the official test suite. We also evaluate JaVerT.Click by performing symbolic analysis on two real-world libraries: cash and p-map, finding three previously unknown bugs. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Gabriela Sampaio and José Fragoso Santos and Petar Maksimović and Philippa Gardner 2020 Is Part Of DARTS, Volume 6, Issue 2, Special Issue of the 34th European Conference on Object-Oriented Programming (ECOOP 2020) Article Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/DARTS.6.2.5 urn:nbn:de:0030-drops-132028 https://drops.dagstuhl.de/entities/document/10.4230/DARTS.6.2.5 eng https://creativecommons.org/licenses/by/3.0/legalcode