English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Web developers routinely rely on third-party Java-Script libraries such asjQuery to enhance the functionality of their sites. However, if not properlymaintained, such dependencies can create attack vectors allowing a site to becompromised.  In this paper, we conduct the first comprehensive study of client-sideJavaScript library usage and the resulting security implications across theWeb. Using data from over 133 k websites, we show that 37% of them include atleast one library with a known vulnerability; the time lag behind the newestrelease of a library is measured in the order of years. In order to betterunderstand why websites use so many vulnerable or outdated libraries, we trackcausal inclusion relationships and quantify different scenarios. We observesites including libraries in ad hoc and often transitive ways, which can leadto different versions of the same library being loaded into the same documentat the same time. Furthermore, we find that libraries included transitively, orvia ad and tracking code, are more likely to be vulnerable. This demonstratesthat not only website administrators, but also the dynamic architecture anddevelopers of third-party services are to blame for the Web's poor state oflibrary management.  The results of our work underline the need for more thorough approaches todependency management, code maintenance and third-party code inclusion on theWeb.

Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web