Resource leakage is one of the important defects of sandbox escape.The existing browser sandbox testing methods are insufficient to discovery leak resources.Based on most leaking resources have same or similar attribute values

this paper designed a resource-leakage oriented browser testing method.The method firstly analyzes resources attributes and create resource selecting rules

secondly

Calculates the escape index of every resource of system and use threshold to select testing resources; thirdly

Design and Implement a prototype system-Browser Sandbox Testing System(BSTS) and analysis the capability of our method

then we select and test some browser sandboxes

in the end

We found an undisclosed resource leakage vulnerability.