Later archive addition

Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web

Tobias Lauinger, Abdelberi Chaabane, Sajjad Arshad, William Robertson, Christo Wilson and Engin Kirda · Internet Society

The study measures client-side JavaScript libraries on more than 133,000 sites using a curated vulnerability catalogue and Chromium inclusion trees. It finds 37% of sites loading a known-vulnerable library and shows that transitive advertising and tracking inclusions are especially likely to be outdated.

Record

Researcher

Tobias Lauinger, Abdelberi Chaabane, Sajjad Arshad, William Robertson, Christo Wilson and Engin Kirda

Published by

Internet Society

In the archive

• Added to the 2016–17 archive after the original list was published

Tags

• javascript
• measurement-study
• supply-chain
• code-audit
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Tobias Lauinger, Abdelberi Chaabane, Sajjad Arshad, William Robertson, Christo Wilson and Engin Kirda, first published at the original source. Preserved copies are kept so the citation survives its host.