Symantec Corporation

Luca Loiodice

Todd A Smith

Charles Andrew Payne

Justin Patterson

Michael Anthony Alagna

A system and method for protecting a user against a cross-site scripting attack or other network attack that relies on scripting code embedded within a uniform resource locator (URL) are described. Validation software executing on a client computer system may intercept a URL in response to a user providing the URL to a web browser or other client application. The validation software may analyze the URL to determine whether the URL includes scripting code. If the URL includes scripting code then the validation software may block the client application from accessing the URL or may otherwise inhibit access to the URL.

Method, system, and computer program product for avoiding cross-site scripting attacks

In a first embodiment, an information handling system determines whether a resource is likely misrepresented as a trusted resource within a global computer network. In a second embodiment, the information handling system outputs an indication of whether a resource within a global computer network is recognized as a known trusted resource.

Growing community of inventors

Austin, TX, United States of America

Luca Loiodice