Regular expressions considered harmful in client-side XSS filters.

Daniel Bates, Adam Barth, Collin Jackson

Browse the full WWW paper archive.