Publications

OAuth 2.0 Redirect URI Validation Falls Short Literally
Tommaso Innocenti, Matteo Golinelli, Kaan Onarlioglu, Ali Mirheidari, Bruno Crispo, Engin Kirda
PDF Cite Code DOI
The Nonce-nce of Web Security: An Investigation of CSP Nonces Reuse
Matteo Golinelli, Francesco Bonomi, Bruno Crispo
Cite Code arXiv On Springer (paid access)
Mind the CORS
Matteo Golinelli, Elham Arshad, Dmytro Kashchuk, Bruno Crispo
PDF Cite Code IEEE Xplore
Web Cache Deception Escalates!
Seyed Ali Mirheidari, Matteo Golinelli, Kaan Onarlioglu, Engin Kirda, Bruno Crispo
PDF Cite Code Slides Video On USENIX