Systems and methods for runtime content masking

A method for performing cybersecurity operations for masking sensitive data, the method comprising:

• receiving for execution, code associated with displaying an unmasked version of sensitive data, wherein the unmasked version of the sensitive data is included in the code, retrieved from a server by executing the code, or computed at runtime as a result of executing the code;
• and
• injecting, into an execution environment associated with the code, an agent configured to:
• identify the unmasked version of the sensitive data based on an indicator;
• access a Document Object Model (DOM) associated with the code;
• identify in the DOM the unmasked version of the sensitive data;
• replace in the DOM at least a portion of the unmasked version of the sensitive data with a mask, thereby generating a masked version of the sensitive data and concealing the at least a portion of the unmasked version of the sensitive data when content is displayed based on the code;
• and
• if a request for the unmasked version of the sensitive data is detected, return the unmasked version of the sensitive data while maintaining the mask in the DOM.

A system for performing cybersecurity operations for masking sensitive data, the system comprising at least one processor configured to:

• receive for execution, code associated with displaying an unmasked version of sensitive data, wherein the unmasked version of the sensitive data is included in the code, retrieved from a server by executing the code, or computed at runtime as a result of executing the code;
• and
• inject, into an execution environment associated with the code, an agent configured to:
• identify the unmasked version of the sensitive data based on an indicator;
• access a Document Object Model (DOM) associated with the code;
• identify in the DOM the unmasked version of the sensitive data;
• replace in the DOM at least a portion of the unmasked version of the sensitive data with a mask, thereby generating a masked version of the sensitive data and concealing the at least a portion of the unmasked version of the sensitive data when content is displayed based on the code;
• and
• if a request for the unmasked version of the sensitive data is detected, return the unmasked version of the sensitive data while maintaining the mask in the DOM.