Collected research

XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers

Lukas Knittel, Christian Mainka, Marcus Niemietz, Dominik Trevor Noß and Jörg Schwenk · ACM CCS

Separates response differences, inclusion methods and observable channels into a model for testing browser cross-site leaks. Controlled server states and browser adapters support repeatable comparisons, with additional global-limit and performance channels. The suite evaluates browser behavior; it does not automatically discover vulnerable website states. Extraction note: consult the original PDF for the attackable/safe circle symbols in Tables 2–4; their extracted glyph shapes differ.

Record

Researcher

Lukas Knittel, Christian Mainka, Marcus Niemietz, Dominik Trevor Noß and Jörg Schwenk

Published by

ACM CCS

Format

Whitepaper

Topic

Browser

In the archive

• Collected in the 2021 research round

Related sources

• Browser test suite

Tags

• xsleak
• side-channel
• tooling

This page is the archive's own catalogue record. The research is the work of Lukas Knittel, Christian Mainka, Marcus Niemietz, Dominik Trevor Noß and Jörg Schwenk, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 29 September 2026.