Limiting execution of software programs
AssigneeInternational Business Machines Corporation
InventorsMatthew Jason Duftler, Douglas Charles Lovell
Life of this patent
Estimating the term…
Abstract
Techniques are disclosed for limiting execution of software programs. For example, a method comprises the following steps. A first set of program code is extracted from a second set of program code. The extracted first set of program code is parsed to generate a parsed structure. The parsed structure generated from the first set of program code is examined for one or more expressions predetermined to be unsafe for execution. The one or more expressions predetermined to be unsafe for execution that are contained in the first set of program code are detected. In one example, the first set of program code may be a script generated with the JavaScript™ scripting language and the second set of program code may be a business process.
Claims13
A method comprising:
- generating a configuration file comprising one or more constructs predetermined to be unsafe for execution as identified by a user;
- extracting a first set of program code from a second set of program code;
- parsing the extracted first set of program code to generate a parsed structure;
- examining the parsed structure generated from the first set of program code for one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution, wherein the examining step further comprises providing a looping guard to verify if the entire first set of program code has been examined;
- detecting the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution that are contained in the first set of program code, wherein the detecting step further comprises flagging each of the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution that are contained in the first set of program code;
- and
- generating an unsafe-expression flagged version of the first set of program code for editing by a user;
- wherein the extracting, parsing, examining, detecting and generating steps are performed in accordance with a processor device.
Dependencies are inferred from the claim text.