Google Inc.

Johann Tomas Sigurdsson

Sigurdur Asgeirsson

Tomas Gunnarsson

Marc-André Decoste

Cynthia W Lau

Sumit Gwalani

Anurag Sharma

Sanjeev Radhakrishnan

Adam Barth

Roger Tawa

Wayne Gray

Amit Joshi

Finnur Thorarinsson

Sunil Namdeo Shilimkar

Ananta Iyengar

Cem Paya

Jeffrey Bailey

Configurations for sharing an instance of an executing process for a plug-in based on a session and a cookie data store associated with the session are disclosed. A cookie data store can be associated with a tab running in a corresponding security mode. By way of example, instead of initiating a new process for the plug-in in a new tab, the subject technology can first determine whether a previous tab is running an instance of a plug-in process. If this is the case, the subject technology can then determine whether the previous tab is running in the same security mode (e.g., protected or unprotected) as the new tab. The subject technology then shares the existing plug-in process in the previous tab without instantiating a new plug-in process in the new tab.

Sharing a process in a web client

Sharing a plug-in instance in a web client

Methods and systems for cross-site scripting (XSS) defense are described herein. An embodiment includes, embedding one or more tags in content at a server to identify executable and non-executable regions in the content and transmitting the content with the tags to a client based on a request from the client. Another embodiment includes receiving content embedded with one or more permission tags from a server, processing the content and the permission tags, and granting permission to a browser to execute executable content in the content based on the permission tags. A method embodiment also includes receiving content embedded with one or more verify tags from a server, performing an integrity check using the verify tags and granting permission to a browser to execute executable content in the content based on the integrity check.

Methods and systems for scripting defense

Embodiments of this invention relate to an application program interface to enable browser extensions which may be executed in different browsers. In an embodiment, a browser extension may be written in using commands written in a cross-browser application program interface. When the browser extension is executed, the cross-browser commands may be translated into a native command of the browser. In an embodiment, the commands that require access to a document object model (DOM) of a page loaded in the browser may be executed on the thread that renders the loaded page. In a further embodiment the cross-browser application program interface may be, at least in part, an asynchronous interface. In this way, the cross-browser extension application program interface provides a stable, uniform interface to implement browser extensions that can operate in a plurality of different types of web browsers.

Interfaces to enable cross-browser extensions and applications thereof

Embodiments of invention relate to automatically updating browser extensions. In an embodiment, a method for updating browser extensions is provided. In the method, an input to execute a browser extension installed in a local browser extension database is received. In response to receipt of the input, a remote server is automatically communicated with to determine whether a portion of the browser extension should be updated. An updated portion of the browser extension is received if the browser extension should be updated. Finally, the updated portion of the browser extension is installed in the local browser extension database.

Automatically updating browser extensions, and applications thereof

A system and method provide access to a target object associated with a desired functionality. This is accomplished by creating an instance of a pre-existing object, replacing one or more functions of a table shared by all objects of the object's class, and triggering a call that ultimately causes the replacement functions to be called to allow access to the target object. The system includes software portions for enabling the method.

Access to a target object with desired functionality

An innovative security solution which separates a client into a Protected Context, which is the real files and resources of the client, and an Isolated Context, which is a restricted execution environment which makes use of virtualized resources to execute applications and modify content in the Isolated Context, without allowing explicit access to the resources in the Protected Context. The solution further consolidates user interfaces to allow users to seamlessly work with content in both contexts, and provide a visual indication of which display windows are rendered from content executed in the Isolated Context.

Systems and methods for secure client applications

Growing community of inventors

Montreal, Canada

Johann Tomas Sigurdsson