{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JJGIGAPM7DXORE5246AZEJF7CI","short_pith_number":"pith:JJGIGAPM","canonical_record":{"source":{"id":"2411.15416","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T02:25:43Z","cross_cats_sorted":[],"title_canon_sha256":"c0086e29536861109a51c82491a097554f41f8d41b2e0c5d3615ada20fe7a07e","abstract_canon_sha256":"d9b1c562f60b440c4bfaf134123a8338fa377ac63869001f6c81731893191ea8"},"schema_version":"1.0"},"canonical_sha256":"4a4c8301ecf8eee893bae7819224bf123c8a52b15311070d1a0bf8459b83358d","source":{"kind":"arxiv","id":"2411.15416","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.15416","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"arxiv_version","alias_value":"2411.15416v1","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.15416","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"pith_short_12","alias_value":"JJGIGAPM7DXO","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"pith_short_16","alias_value":"JJGIGAPM7DXORE52","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"pith_short_8","alias_value":"JJGIGAPM","created_at":"2026-07-05T09:39:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JJGIGAPM7DXORE5246AZEJF7CI","target":"record","payload":{"canonical_record":{"source":{"id":"2411.15416","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T02:25:43Z","cross_cats_sorted":[],"title_canon_sha256":"c0086e29536861109a51c82491a097554f41f8d41b2e0c5d3615ada20fe7a07e","abstract_canon_sha256":"d9b1c562f60b440c4bfaf134123a8338fa377ac63869001f6c81731893191ea8"},"schema_version":"1.0"},"canonical_sha256":"4a4c8301ecf8eee893bae7819224bf123c8a52b15311070d1a0bf8459b83358d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:39:34.296042Z","signature_b64":"mGEjiFawwkboAkh1gWS5FpNXN7bNifwHtgB7yK8xCpwIj0ZaAUnrfjLeuXvmLIq+fpHaFsHzSMEN8tIcb220Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4a4c8301ecf8eee893bae7819224bf123c8a52b15311070d1a0bf8459b83358d","last_reissued_at":"2026-07-05T09:39:34.295501Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:39:34.295501Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.15416","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:39:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xP7DG3ToeE8tqWfiH03fy+Ba/lG2I/0OszzMoYZJR51+CkBuCk0HVmEuVDOE7v1V4sYn5wRaR2izyDV0HbUgDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T10:34:05.328205Z"},"content_sha256":"ecd910fe5ba0cd2541e08ecabc4bc7af531ebccd72c2c017e2781fd8587ef003","schema_version":"1.0","event_id":"sha256:ecd910fe5ba0cd2541e08ecabc4bc7af531ebccd72c2c017e2781fd8587ef003"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JJGIGAPM7DXORE5246AZEJF7CI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Least Privilege Access for Persistent Storage Mechanisms in Web Browsers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Abhishek Bichhawat, Dishank Goel, Gayatri Priyadarsini Kancherla","submitted_at":"2024-11-23T02:25:43Z","abstract_excerpt":"Web applications often include third-party content and scripts to personalize a user's online experience. These scripts have unrestricted access to a user's private data stored in the browser's persistent storage like cookies, localstorage and IndexedDB, associated with the host page. Various mechanisms have been implemented to restrict access to these storage objects, e.g., content security policy, the HttpOnly attribute with cookies, etc. However, the existing mechanisms provide an all-or-none access and do not work in scenarios where web applications need to allow controlled access to cooki"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.15416","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.15416/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:39:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qsYTTBrt+zC4Qe8Usu1I7PwBvHlWuQYz2PTwUdSrLZjwxDtW9k7Dcb677Hv7BFpp/C/QJIE/O/SImiCJHM6FAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T10:34:05.328704Z"},"content_sha256":"90a614175a5af0c4721796373ea96684859c19afbb3729767e5c0720cb6489b5","schema_version":"1.0","event_id":"sha256:90a614175a5af0c4721796373ea96684859c19afbb3729767e5c0720cb6489b5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JJGIGAPM7DXORE5246AZEJF7CI/bundle.json","state_url":"https://pith.science/pith/JJGIGAPM7DXORE5246AZEJF7CI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JJGIGAPM7DXORE5246AZEJF7CI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T10:34:05Z","links":{"resolver":"https://pith.science/pith/JJGIGAPM7DXORE5246AZEJF7CI","bundle":"https://pith.science/pith/JJGIGAPM7DXORE5246AZEJF7CI/bundle.json","state":"https://pith.science/pith/JJGIGAPM7DXORE5246AZEJF7CI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JJGIGAPM7DXORE5246AZEJF7CI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JJGIGAPM7DXORE5246AZEJF7CI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d9b1c562f60b440c4bfaf134123a8338fa377ac63869001f6c81731893191ea8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T02:25:43Z","title_canon_sha256":"c0086e29536861109a51c82491a097554f41f8d41b2e0c5d3615ada20fe7a07e"},"schema_version":"1.0","source":{"id":"2411.15416","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.15416","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"arxiv_version","alias_value":"2411.15416v1","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.15416","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"pith_short_12","alias_value":"JJGIGAPM7DXO","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"pith_short_16","alias_value":"JJGIGAPM7DXORE52","created_at":"2026-07-05T09:39:34Z"},{"alias_kind":"pith_short_8","alias_value":"JJGIGAPM","created_at":"2026-07-05T09:39:34Z"}],"graph_snapshots":[{"event_id":"sha256:90a614175a5af0c4721796373ea96684859c19afbb3729767e5c0720cb6489b5","target":"graph","created_at":"2026-07-05T09:39:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.15416/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Web applications often include third-party content and scripts to personalize a user's online experience. These scripts have unrestricted access to a user's private data stored in the browser's persistent storage like cookies, localstorage and IndexedDB, associated with the host page. Various mechanisms have been implemented to restrict access to these storage objects, e.g., content security policy, the HttpOnly attribute with cookies, etc. However, the existing mechanisms provide an all-or-none access and do not work in scenarios where web applications need to allow controlled access to cooki","authors_text":"Abhishek Bichhawat, Dishank Goel, Gayatri Priyadarsini Kancherla","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T02:25:43Z","title":"Least Privilege Access for Persistent Storage Mechanisms in Web Browsers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.15416","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ecd910fe5ba0cd2541e08ecabc4bc7af531ebccd72c2c017e2781fd8587ef003","target":"record","created_at":"2026-07-05T09:39:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d9b1c562f60b440c4bfaf134123a8338fa377ac63869001f6c81731893191ea8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-23T02:25:43Z","title_canon_sha256":"c0086e29536861109a51c82491a097554f41f8d41b2e0c5d3615ada20fe7a07e"},"schema_version":"1.0","source":{"id":"2411.15416","kind":"arxiv","version":1}},"canonical_sha256":"4a4c8301ecf8eee893bae7819224bf123c8a52b15311070d1a0bf8459b83358d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4a4c8301ecf8eee893bae7819224bf123c8a52b15311070d1a0bf8459b83358d","first_computed_at":"2026-07-05T09:39:34.295501Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:39:34.295501Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mGEjiFawwkboAkh1gWS5FpNXN7bNifwHtgB7yK8xCpwIj0ZaAUnrfjLeuXvmLIq+fpHaFsHzSMEN8tIcb220Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:39:34.296042Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.15416","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ecd910fe5ba0cd2541e08ecabc4bc7af531ebccd72c2c017e2781fd8587ef003","sha256:90a614175a5af0c4721796373ea96684859c19afbb3729767e5c0720cb6489b5"],"state_sha256":"130822e9e7205aabfc10fe089792698c9186c9bcf137680109a97534f01dbc27"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JyH7M2Q01PWYdZ66NxBQ9il3R7ixWoJs3fucTF0uLMyjaXntHSxfQmdP8oDtRwuv7af1vJkumGvWnE3Z0RdxCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T10:34:05.332515Z","bundle_sha256":"731f7e51293b1823985a1231f53057729d5df7f29c29859dcf1c09bfae0fce08"}}