Securing execution of customer-supplied network page generation code
AssigneeAmazon Technologies, Inc.
InventorsAndrew S. Huntwork, Prashant J. Thakare, Shashank Shekhar, Pravi Garg, Jeremy Boynes
Life of this patent
Estimating the term…
Abstract
Disclosed are various embodiments for securing execution of page generation code. The page generation code may be instrumented with code that facilitates monitoring of one or more resources consumed by the page generation code. Various checks relating, for example, to code size and whether exception-handling code is present may be performed. The page generation code may be executed to generate a network page in response to a request obtained from a client. One or more resource consumption limits may be enforced upon the page generation code.
Claims20
A non-transitory computer-readable medium embodying a program executable in at least one computing device, wherein, when executed, the program causes the at least one computing device to at least:
- obtain page generation code from a customer of a hosting provider;
- instrument the page generation code with code that facilitates monitoring of at least one resource consumed by an execution of the page generation code;
- obtain a request for a network page from a client, the network page being associated with a network site hosted by the hosting provider on behalf of the customer;
- and
- send the network page to the client in response to the request.
A system, comprising:
- at least one computing device;
- and
- at least one application executable in the at least one computing device, wherein, when executed, the at least one application causes the at least one computing device to at least:
- obtain a request for a network page from a client;
- obtain page generation code associated with the network page;
- determine whether the page generation code includes exception-handling code;
- in response to determining that the page generation code does not include exception-handling code, execute the page generation code to generate the network page;
- and
- send the network page to the client in response to the request.
A method, comprising:
- obtaining, in at least one computing device, page generation code;
- determining, in the at least one computing device, whether the page generation code includes exception-handling code;
- and
- in response to determining that the page generation code does not include the exception-handling code, executing, in the at least one computing device, the page generation code to generate a network page in response to a request for the network page from a client.
Dependencies are inferred from the claim text.