Patent ID: 8578482

Claim:
A method of detecting a cross-site script in Web content, the method comprising: receiving, in a monitor of a client computer, a message from a browser for retrieving the Web content, the browser executing on said client computer having sensitive information, wherein the monitor is a separate component from the browser and is not a plug-in to the browser; retrieving the Web content from a target Web server; storing said Web content by said monitor in said client computer; analyzing the Web content for a cross-site script by said monitor; if a cross-site script is present in said Web content, determining a destination to which some or all of the sensitive information will be sent if the cross-site script executes, said determining performed by said monitor; and displaying a message in the browser relating to display of the Web content, thereby preventing execution of the cross-site script in the browser, and wherein the storing step, analyzing step and the determining step are performed at the monitor and not at the browser, before the Web content is received by the browser.