Patent ID: 8438649
Filing Date: 2013-05-07
Classification: G06F,H04L

Abstract:
1. A method of adding tokens to content to protect against a cross-site request forgery, the method comprising: receiving a request for a page of content; prior to transmitting the page of content to a destination, initiating a state machine to an initial state; scanning, by the state machine, the page of content character by character for predetermined tags, without constructing a model of the page of content, wherein the scanning includes transitioning a state of the state machine based on the character-by-character content of the page of content until reaching a state indicating that one of the predetermined tags has been encountered; while scanning the page of content, identifying a malformed portion of the page of content and transitioning the state of the state machine to a safe state until encountering a well-formed portion of the page of content; commencing transmission of the page of content to a destination before completion of said scanning; and for each predetermined tag located in the page of content, inserting a token into the page of content while transmitting the page of content.