Patent ID: 9160756
Filing Date: 2015-10-13
Classification: G06F,H04L

Abstract:
1. Apparatus for protecting a markup language document against a cross-site scripting attack, comprising: a processor; computer memory holding computer program instructions that when executed by the processor perform a method, comprising: receiving a markup language document; identifying one or more content elements within the markup language document; for each of the one or more content elements identified, generating a secure domain name that is uniquely associated with the content element, wherein the secure domain name includes a first portion that is a unique identifier, and a second portion, the first portion and the second portion of the secure domain name being in a particular order, the unique identifier being generated randomly or by applying a cryptographic hash function to the content element; removing the content element from the markup language document and replacing the removed content element with a reference that is associated with the secure domain name to generate a modified markup language document; and transferring the modified markup language document.