Client-site dom api access control

A system for restricting usage of a Document Object Model (DOM) application programming interfaces (API), comprising:

• a hardware processor configured to:
• receive a request for a webpage file from a web browser running on a device;
• inject a DOM virtualization client on the device by adding JavaScript DOM virtualization client code in the webpage file to form a modified webpage file, and wherein the JavaScript DOM virtualization client code is executable by the web browser, and wherein adding JavaScript DOM virtualization client code comprises:
• adding JavaScript code that, when executed by the web browser, causes the DOM virtualization client to intercept a usage of a DOM API associated with one or more scripts running on the web browser;
• adding JavaScript code that, when executed by the web browser, causes the DOM virtualization client to determine whether the usage of the DOM API by the one or more scripts is allowed based on a DOM API access control list, wherein the DOM API access control list excludes usage of the DOM API by at least some scripts;
• and
• adding JavaScript code that, when executed by the web browser, causes the DOM virtualization client to process the usage of the DOM API based on the determination;
• and
• send to the web browser the modified webpage file with the JavaScript DOM virtualization client code added;
• and
• a memory device coupled to the hardware processor and configured to provide the hardware processor with instructions.

A computer program product for restricting usage of a Document Object Model (DOM) application programming interfaces (API), the computer program product comprising a non-transitory computer readable storage medium, the non-transitory computer readable storage medium comprising computer instructions for:

• receiving a request for a webpage file from a web browser running on a device;
• injecting a DOM virtualization client on the device by adding JavaScript DOM virtualization client code in the webpage file to form a modified webpage file, and wherein the JavaScript DOM virtualization client code is executable by the web browser, and wherein adding JavaScript DOM virtualization client code comprises:
• adding JavaScript code that, when executed by the web browser, causes the DOM virtualization client to intercept a usage of a DOM API associated with one or more scripts running on a web browser;
• adding JavaScript code that, when executed by the web browser, causes the DOM virtualization client to determine whether the usage of the DOM API by the one or more scripts is allowed based on a DOM API access control list, wherein the DOM API access control list excludes usage of the DOM API by at least some scripts;
• and
• adding JavaScript code that, when executed by the web browser, causes the DOM virtualization client to process the usage of the DOM API based on the determination;
• and
• sending to the web browser the modified webpage file with the JavaScript DOM virtualization client code added.