The essence of command injection attacks in web applications.

Zhendong Su, Gary Wassermann

Browse the full POPL paper archive.