Proxy Service Sandboxing Web Resources
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Multi-tenant database systems face security and performance issues when integrating multiple web resources into a single web object, particularly due to the limitations of using HTML inline frames (iFrames), which complicate communication between frames and can reduce performance.
Innovation Solution
Implementing a Resource Provider Proxy Service (RPPS) that downloads and caches whitelisted resources from third-party services, using a Content Security Policy (CSP) to sandbox resources and allow only specified domains, thereby isolating them and controlling content within web applications without requiring significant browser changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If iFrames are used to integrate multiple webpages into a single web object, then isolation from third party code is achieved, but integration difficulty increases and performance decreases
Solution Approach 1:
The patent introduces a proxy service as an intermediary between the main application and third-party resources. The proxy downloads, caches, and serves third-party content through controlled endpoints, mediating all interactions and eliminating the need for iFrames while maintaining isolation and improving integration ease.
Solution Approach 2:
The patent creates copies of third-party resources by downloading them to a local cache on the server side. These cached copies are then served through proxy endpoints, replacing direct third-party content delivery and enabling seamless integration without external frame dependencies.
2Reliability
If iFrames are used to integrate multiple webpages into a single web object, then isolation from third party code is achieved, but code execution performance reduces
Solution Approach 1:
The patent performs preliminary actions by downloading and caching third-party resources in advance on the server side. The proxy service pre-loads content and stores it locally, so that subsequent requests are served from cache rather than requiring real-time external connections, significantly improving execution performance.
Solution Approach 2:
The proxy service acts as an intermediary that optimizes content delivery by serving cached copies of third-party resources. This mediation eliminates performance penalties associated with iFrames by providing local, high-speed access to external content through controlled endpoints.
3Reliability
If Content Security Policy is used to sandbox resources, then security is enhanced and resource consumption is restricted to trusted domains, but browser compatibility requirements increase
Solution Approach 1:
The proxy service serves as an intermediary that enforces security policies server-side before content reaches the browser. By controlling resource delivery through the proxy and using CSP headers, the system achieves enhanced security while maintaining broad browser compatibility, as the heavy lifting is done server-side rather than relying on advanced browser features.
Data Source
AI summary
Systems, methods, and computer-readable media for integrating web resources are provided. A Resource Provider Proxy Service (RPPS) may download and cache whitelisted resources from a third party service (3PS). Once whitelisted resources are downloaded to the RPPS from the 3PS, a secure endpoint service may expose the resources to applications running on user systems. The resources served to the user system applications may be virtually isolated from one another in separate domains using a sandboxing framework. Other embodiments may be described and/or claimed.