Method and system to modify function calls from within content published by a trusted web site

• US 20060036746A1
• Filed: 07/14/2004
• Published: 02/16/2006
• Est. Priority Date: 07/14/2004
• Status: Active Grant

• Current Assignee: eBay Inc.
• Original Assignee: eBay Inc.
• Inventors: Davis, Jeremy A.
• Granted Patent: US 8,244,910 B2
• Time in Patent Office: Days
• US Class Current: 709/228
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

A network-based publication system, to publish data over a communications network, includes an interface to receive, via the communications network and from a first user, user data to be published by a network-based publication system. The publication system further includes a publisher component to generate publication data (e.g., an HTML document) including the user data and function modifying code. The publisher component generates the publication data in accordance with a publication format. The interface publishes the publication data via the communications network. The function modifying code is interpreted and executed, at a browser application, to disable (or modify) least one function of programming language supported by the browser application.

Claims

1. A network-based publication system to publish data over a communications network, the system including:

an interface to receive, via a communications network and from a first user, user data to be published by the network-based publication system; and

a publisher to generate publication data including the user data and function modifying code, the publisher to generate the publication data in accordance with a publication format; and

wherein the interface is to communicate the publication data via the communications network, and wherein the function modifying code is to modify at least one function of programming language supported by an access application that interprets the publication data according to the publication format.

2. The system of claim 1, wherein the at least one function enables construction of a string that constitutes executable code.

3. The system of claim 1, wherein the user data is associated with executable code.

4. The system of claim 3, wherein the user data includes the executable code.

5. The system of claim 3, wherein the user data includes a reference to executable code stored at a further location accessible via the communications network.

6. The system of claim 1, wherein the publication format is a markup-language document format.

7. The system of claim 1, wherein the programming language is the JavaScript programming language.

8. The system of claim 1, wherein the access application includes an interpreter to interpret the executable code in accordance with the programming language.

9. The system of claim 8, wherein the access application supports a library of functions made available by the programming language.

10. The system of claim 1, wherein the access application includes a render engine to render the publication data according to the publication format.

11. The system of claim 1, wherein the access application is a web browser.

12. The system of claim 1, wherein the publisher is to generate the publication data to include publisher data associated with the network-based publication system.

13. The system of claim 1, wherein the interface is to receive a publication request from a second user, the publisher is to generate the publication data responsive to the publication request received from the second user via the communications network for a specific publication, the system further including a selector to select the function modifying code from a plurality of function modifying codes based on the specific publication, the plurality of function modifying codes being stored within a database of the network-based publication system.

14. The system of claim 13, wherein each function modifying code of the plurality of function modifying codes is operatively to modify a unique set of functions of the programming language

15. The system of claim 1, wherein the function modifying code is to disable a capability of the at least one function of the programming language.

16. A method to publish data over a communications network, the method including:

receiving, via a communications network and from a first user, user data to be published by a network-based publication system;

generating publication data to include the user data and function modifying code, the publication data being generated in accordance with a publication format; and

publishing the publication data, utilizing the network-based publication system, over the communications network,

wherein the function modifying code is to modify at least one function of a programming language supported by an access application that interprets the publication data according to the publication format.

17. The method of claim 16, wherein the at least one function enables construction of a string that constitutes executable code.

18. The method of claim 16, wherein the user data is associated with executable code.

19. The method of claim 16, wherein the user data includes the executable code.

20. The method of claim 18, wherein the user data includes a reference to executable code stored at a further location accessible via the communications network.

21. The method of claim 16, wherein the publication format is a markup-language document format.

22. The method of claim 16, wherein the programming language is the JavaScript programming language.

23. The method of claim 16, wherein the access application includes an interpreter to interpret the executable code in accordance with the programming language.

24. The method of claim 23, wherein the access application supports a library of functions made available by the programming language.

25. The method of claim 16, wherein the access application includes a render engine to render the publication data according to the publication format.

26. The method of claim 16, wherein the access application is a web browser.

27. The method of claim 16, wherein the publication data is generated to include publisher data to generated by the network-based publication system.

28. The method of claim 16, wherein the publication data is published responsive to a publication request received from a second user, via the communications network, for a specific publication, the method further including selecting the function modifying code from a plurality of function modifying codes based on the specific publication.

29. The method of claim 28, wherein each function modifying code of the plurality of function modifying codes is operatively to modify a unique set of functions of the programming language.

30. The method of claim 16, wherein the function modifying code is to disable a capability of the at least one function of the programming language.

31. A network-based publication system to publish data over a communications network, the system including:

first means for receiving, via a communications network and from a first user, user data to be published by the network-based publication system; and

second means for generating publication data including the user data and function modifying code, the second means for generating the publication data in accordance with a publication format,

wherein the first means is for communicating the publication data via the communications network, and wherein the function modifying code is for modifying at least one function of programming language supported by an access application that interprets the publication data according to the publication format.

32. A machine-readable medium storing a set of instructions that, when executed by a machine, cause machine to perform a method to publish data over a communications network, the method including:

receiving, via a communications network and from a first user, user data to be published by a network-based publication system;

generating publication data to include the user data and function modifying code, the publication data being generated in accordance with a publication format; and

publishing the publication data, utilizing the network-based publication system, over the communications network,

wherein the function modifying code is to modify at least one function of a programming language supported by an access application that interprets the publication data according to the publication format.