Ascertaining domain contexts
AssigneeMicrosoft Corporation
InventorsGovind Varshney, Marc A. Silbey, Shankar Ganesh, Robert Impollonia, Venkatraman V. Kudallur
Life of this patent
Estimating the term…
Abstract
Various embodiments pertain to ascertaining domain contexts. In one embodiment, an application receives content that may contain a script (i.e. code). In this case, the domain context is ascertained and the script is executed in the context of the domain associated with the received content, rather than requiring the application or some other component to navigate to a location, such as a web location, to attempt to ascertain the domain context of the script. In another embodiment, third party objects or code are required to provide their domain context to an application in order for the application to make a security-based decision.
Claims15
A computer-implemented method comprising:
- receiving, at a computing device, a call from a third party object that requests a domain context;
- ascertaining, by the computing device, the domain context of the third party object by requesting a source identifier of the third party object from a server;
- returning, by the computing device, the domain context to the third party object;
- requiring, by the computing device, the third party object to include the third party object's associated domain context in subsequent calls that the third party object makes, the requiring comprising one of:
- causing the third party object to be aware to include the third party object's associated domain context when making the subsequent calls;
- or
- wrapping the third party object to cause the third party object to pass the third party object's associated domain context when making the subsequent calls;
- receiving a subsequent call from the third party object;
- ascertaining, from the subsequent call, the domain context of the third party object;
- and
- making a domain context-based decision based on the ascertained domain context by enforcing cross domain boundaries.
One or more computer-readable storage media comprising computer executable instructions stored thereon that, responsive to execution by a computing device, perform operations comprising:
- receiving a call from a third party object that requests a domain context;
- ascertaining the domain context of the third party object by requesting a source identifier of the third party object from a server;
- returning the domain context to the third party object;
- requiring the third party object to include its associated domain context in subsequent calls that the third party object makes, the requiring comprising one of:
- causing the third party object to be aware to include its associated domain context when making the subsequent calls;
- or
- wrapping the third party object to cause the third party object to pass its associated domain context when making the subsequent calls;
- receiving a subsequent call from the third party object;
- ascertaining, from the subsequent call, the domain context of the third party object;
- and
- making a domain context-based decision based on the ascertained domain context by enforcing cross domain boundaries.
A computing device comprising:
- one or more processors;
- and
- one or more computer-readable storage media comprising computer executable instructions stored thereon that, responsive to execution by the one or more processors, cause the one or more processors to:
- receive a call from a third party object that requests a domain context;
- ascertain the domain context of the third party object by requesting a source identifier of the third party object from a server;
- return the domain context to the third party object;
- require the third party object to include the third party object's associated domain context in subsequent calls that the third party object makes by:
- causing the third party object to be aware to include the third party object's associated domain context when making the subsequent calls;
- or
- wrapping the third party object to cause the third party object to pass the third party object's associated domain context when making the subsequent calls;
- receive a subsequent call from the third party object;
- ascertain, from the subsequent call, the domain context of the third party object;
- and
- make a domain context-based decision based on the ascertained domain context by enforcing cross domain boundaries.
Dependencies are inferred from the claim text.