Secure dynamic HTML pages

• US 20070156871A1
• Filed: 12/30/2005
• Published: 07/05/2007
• Est. Priority Date: 12/30/2005
• Status: Abandoned Application

• Current Assignee: SAP AG (SAP SE)
• Original Assignee: SAP AG (SAP SE)
• Inventors: Braun, Michael, Rath, Ralf M.
• Application Number:
  US11/322,624
• Publication Number:
  US 20070156871A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A computer-implemented method and computer program product for filtering web content at a portal/intranet server. A web page is received at a portal/intranet server having hypertext markup language (HTML) content embedded with one or more active scripts. The one or more active scripts are parsed from the HTML content. A filter determines whether any of the one or more active scripts are potentially dangerous to a requesting client computer. The web page is then filtered of active scripts that are determined to be potentially dangerous to the requesting client computer.

Claims

1. A computer-implemented method for filtering web content, the method comprising:

receiving a web page at a portal/intranet server, the web page having hypertext markup language (HTML) content embedded with one or more active scripts;

parsing the web page in the portal/intranet server to remove at least one active script from the HTML content;

generating a filtered web page without the at least one active script; and

passing the filtered web page to a requesting client computer.

2. A method in accordance with claim 1, wherein parsing the web page further includes identifying the at least one active script from the one or more active scripts that is potentially dangerous to the requesting client computer.

3. A method in accordance with claim 1, wherein parsing the web page further includes identifying, among the one or more active scripts, whether any active scripts are end-user generated.

4. A method in accordance with claim 3, wherein generating a filtered web page further includes recombining the end-user generated active scripts with the HTML content.

5. A computer-implemented method for filtering web content at a portal/intranet server, the method comprising:

receiving a web page having hypertext markup language (HTML) content embedded with one or more active scripts;

parsing the one or more active scripts from the HTML content;

determining whether any of the one or more active scripts are potentially dangerous to a requesting client computer; and

filtering the web page of active scripts that are determined to be potentially dangerous to the requesting client computer.

6. A method in accordance with claim 5, further comprising passing the filtered web page to the requesting client computer.

7. A method in accordance with claim 6, further comprising determining whether any of the one or more active scripts are end-user generated active scripts.

8. A method in accordance with claim 7, wherein passing the filtered web page to the requesting client computer further includes recombining end-user active scripts with the HTML content.

9. A method in accordance with claim 5, further comprising generating a notification that indicates the filtering of active scripts from the web page.

10. A method in accordance with claim 9, further comprising generating a link for the requesting client computer to the active scripts that are filtered from the web page.

11. A computer program product, tangibly embodied in an information carrier, the computer program product being operable to cause a data processing apparatus to:

receive a web page having hypertext markup language (HTML) content embedded with one or more active scripts;

parse the one or more active scripts from the HTML content;

determine whether any of the one or more active scripts are potentially dangerous to a requesting client computer; and

filter the web page of active scripts that are determined to be potentially dangerous to the requesting client computer.

12. A computer program product in accordance with claim 11, and being further operable to cause a data processing apparatus to pass the filtered web page to the requesting client computer.

13. A computer program product in accordance with claim 12, and being further operable to cause a data processing apparatus to determine whether any of the one or more active scripts are end-user generated active scripts.

14. A computer program product in accordance with claim 13, and being further operable to cause a data processing apparatus to recombine end-user active scripts with the HTML content.

15. A computer program product in accordance with claim 11, and being further operable to cause a data processing apparatus to generating a notification that indicates the filtering of active scripts from the web page.

16. A computer program product in accordance with claim 15, and being further operable to cause a data processing apparatus to generate a link for the requesting client computer to the active scripts that are filtered from the web page.