Mark, Miller. "Caja discussion on the Caplet Group". [cap-talk]. [e-lang]. Archived from the original on 17 May 2008. https://web.archive.org/web/20080517202947/http://www.eros-os.org/pipermail/e-lang/2007-October/012283.html
"Introduction - Caja". Google Developers. Archived from the original on 22 January 2021. https://developers.google.com/caja/
Miller, Mark S.; Samuel, M; Laurie, B; Awad, I; Stay, M (7 June 2008). "Safe active content in sanitized JavaScript". Google Scholar. /wiki/Mark_S._Miller
Synodinos, Dio (25 February 2011). "ECMAScript 5, Caja and Retrofitting Security, with Mark S. Miller". InfoQ. https://www.infoq.com/interviews/ecmascript-5-caja-retrofitting-security/
"Html Service: Caja Sanitization". Google Developers. Archived from the original on 26 August 2013. https://web.archive.org/web/20130826134554/https://developers.google.com/apps-script/guides/html-service-caja
"MySpace: Caja JavaScript scrubbing ready for prime time". 4 February 2008. Archived from the original on 1 October 2008. https://web.archive.org/web/20081001192140/http://blogs.zdnet.com/security/?p=847
"Web 2.0 Investors: Pay Attention To Caja". Tim Oren's Due Diligence. 11 April 2008. https://due-diligence.typepad.com/blog/2008/04/web-20-investor.html
Pullara, Sam (28 October 2008). "OpenSocial API Blog: Launched: Yahoo!'s First Implementation of OpenSocial Support". OpenSocial. Archived from the original on 16 December 2008. https://web.archive.org/web/20081216015012/http://opensocialapis.blogspot.com/2008/10/launched-yahoos-first-implementation-of.html