The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Nov. 25, 2014
Filed:
Dec. 28, 2010
David Molnar, Seattle, WA (US);
Benjamin Livshits, Kirkland, WA (US);
Patrice Godefroid, Mercer Island, WA (US);
Prateek Saxena, Berkeley, CA (US);
David Molnar, Seattle, WA (US);
Benjamin Livshits, Kirkland, WA (US);
Patrice Godefroid, Mercer Island, WA (US);
Prateek Saxena, Berkeley, CA (US);
Microsoft Corporation, Redmond, WA (US);
Abstract
An automatic context-sensitive sanitization technique detects errors due to the mismatch of a sanitizer sequence with a browser parsing context. A pre-deployment analyzer automatically detects violating paths that contain a sanitizer sequence that is inconsistent with a browsing context associated with outputting an untrusted input. The pre-deployment analyzer determines a correct sanitizer sequence which is stored in a sanitization cache. During the runtime execution of the web application, a path detector tracks execution of the web application in relation to the violating paths. The correct sanitizer sequence can be applied when the runtime execution follows a violating path.