The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
May. 02, 2023
Filed:
May. 04, 2018
Google Llc, Mountain View, CA (US);
Sebastian Lekies, Zurich, CH;
Nicolas Golubovic, Zurich, CH;
Google LLC, Mountain View, CA (US);
Abstract
A method () for detecting an injection vulnerability of a client-side templating system includes receiving a web page (), determining that the web page implements an interpreted programming language framework () with client-side templating, and extracting a version () of the interpreted programming language framework and an interpolation sign () from the web page. The method also includes generating an attack payload () for at least one injection vulnerability context () of the web page based on the version of the interpreted programming language framework and the interpolation sign, instrumenting the web page to inject the attack payload into the at least one injection vulnerability context of the web page, and executing the instrumented web page.