Patent ID: 9455997
Filing Date: 2016-09-27
CPC Classification: H04L

Claim Text:
1. A method, performed by a sequence of instructions executing on a device, for detecting JavaScript hijacking attacks, comprising: receiving, at the device, a HTTP request sent by a client to a trusted server responsive to a user visiting a page of an attacker-controlled web site that includes a script, wherein a valid authenticated session exists between the client and the trusted server, wherein the trusted server hosts a web-site in a domain, and wherein the request includes a Referer header field having a domain name of the attacker-controlled web site that is different than the domain of the trusted server in which the web-site is hosted; sending the HTTP request to the trusted server; receiving a response from the trusted server that includes a script code; and sending the response to the client with special purpose script code to run on a web browser of the client to allow the user to stop a JavaScript hijacking attack by preventing content from the response that was sent by the trusted server from being processed by the script of the page of the attacker-controlled web site, wherein the special purpose script code was selectively added responsive to: