Method and apparatus for dynamic content marking to facilitate context-aware output escaping

An apparatus, comprising:

• a processor;
• computer memory holding computer program instructions that when executed by the processor perform operations, comprising:
• generating a dynamic output marking, by a dynamic content marking function, to selectively mark a plurality of pieces of dynamically-generated content being output by a web application to obtain a set of marked content, the dynamic content marking function being associated with a sanitization filter function deployed separately from, and not integrated with, the dynamic content marking function;
• outputting, by the dynamic content marking function, the set of marked content to an output buffer;
• determining that the set of marked content in the output buffer represents a full set of content;
• responsive to the determination that the set of marked content in the output buffer represents a full set of content, providing the full set of content from the output buffer to the sanitization filter function, the sanitization filter function having been further configured to identify the full set of content using one or more string values included with the full set of content;
• wherein:
• lack of integration of the dynamic marking content function and the sanitization filter function decouples:
• (i) a determination about a need to sanitize the plurality of pieces of dynamically-generated content affected by the selective marking of the dynamic content marking function, and (ii) sanitization performed by the sanitization filter function;
• and
• the lack of integration of the dynamic content marking function and the sanitization filter function allows the sanitizing, by the sanitization filter function, to occur after the full set of content is ready to be examined, as determined using the one or more string values.

A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions that when executed by the data processing system perform operations, comprising:

• generating a dynamic output marking, by a dynamic content marking function, to selectively mark a plurality of pieces of dynamically-generated content being output by a web application to obtain a set of marked content, the dynamic content marking function being associated with a sanitization filter function deployed separately from, and not integrated with, the dynamic content marking function;
• outputting, by the dynamic content marking function, the set of marked content to an output buffer;
• determining that the set of marked content in the output buffer represents a full set of content;
• responsive to the determination that the set of marked content in the output buffer represents a full set of content, providing the full set of content from the output buffer to the sanitization filter function, the sanitization filter function having been further configured to identify the full set of content using one or more string values included with the full set of content;
• wherein:
• lack of integration of the dynamic marking content function and the sanitization filter function decouples:
• (i) a determination about a need to sanitize the plurality of pieces of dynamically-generated content affected by the selective marking of the dynamic content marking function, and (ii) sanitization performed by the sanitization filter function;
• and
• the lack of integration of the dynamic content marking function and the sanitization filter function allows the sanitizing, by the sanitization filter function, to occur after the full set of content is ready to be examined, as determined using the one or more string values.