Patent ID: 8751568

Claim:
A computer-implemented method for data loss prevention, at least a portion of the method being performed by a proxy system comprising at least one processor, the method comprising: receiving, at the proxy system from a hypertext-transfer-protocol server, a web page comprising a web form for a client system; injecting, at the proxy system, a script into the web page that: scans the web page for at least one of user-editable fields and non-user-editable fields; generates and stores custom metadata within the web page that: marks user-editable fields within the web page as being subject to data-loss-prevention analysis; marks non-user-editable fields within the web page as not being subject to data-loss-prevention analysis; identifying, at the proxy system, a hypertext-transfer-protocol POST request issued in connection with the web form by the client system to the hypertext-transfer-protocol server; identifying, at the proxy system, the custom metadata within the hypertext-transfer-protocol POST request that was generated by the script; subjecting, based on the custom metadata identified at the proxy system, the user-editable field to a data-loss-prevention analysis and omitting the non-user-editable field from the data-loss-prevention analysis; removing, at the proxy system, the custom metadata from the hypertext-transfer-protocol POST; performing, at the proxy system, a data-loss-prevention action based on the data-loss-prevention analysis by blocking the user-editable field from reaching the hypertext-transfer-protocol server.