Lightweight Integrity Protection for Web Storage-Driven Content Caching
Methods, systems, and computer-readable storage media for providing integrity protection for web storage-driven content caching. Implementations include receiving a web page from a server, the web page being associated with a script library and one or more items that can be stored in web storage of a web browser executed on a client computing device, each of the one or more items being associated with a pre-determined checksum value, and loading the script library, such that a local storage API is overwritten using a wrapper function, the script library being executable to, in response to a request for an item from web storage, perform operations including: determining a generated checksum value based on the item, and verifying an integrity of the item based on the generated checksum value and a pre-determined checksum value associated with the item.
1 . A computer-implemented method for providing integrity protection for web storage for secure content caching, the method being executed using one or more processors and comprising:
receiving, at a client computing device, a web page from a server, the web page being associated with a script library and one or more items that can be stored in web storage of a web browser executed on the client computing device, each of the one or more items being associated with a pre-determined checksum value; and
loading the script library, such that a local storage application program interface (API) is overwritten using a wrapper function, the script library being executable to, in response to a request for an item from web storage, perform operations comprising:
determining a generated checksum value based on the item, and
verifying an integrity of the item based on the generated checksum value and a pre-determined checksum value associated with the item.
2 . The method of claim 1 , wherein verifying an integrity of the item comprises comparing the generated checksum value to the pre-determined checksum value.
3 . The method of claim 1 , wherein the script library further comprises functionality for, in response to determining that the integrity of the item is compromised:
requesting a new version of the item from the server;
receiving the new version of the item from the server;
storing the new version of the item in web storage, such that the new version of the item is stored in place of the item; and
returning the new version of the item in response to the request.
4 . The method of claim 1 , wherein the script library further comprises functionality for, in response to determining that the integrity of the item is intact, returning the item in response to the request.
5 . The method of claim 4 , wherein the script library further comprises functionality for selectively encoding the item prior to returning the item in response to the request.
6 . The method of claim 1 , wherein the server provides a table of items and associated pre-determined checksum values with the web page.
7 . The method of claim 1 , wherein each of the one or more items is associated with a respective key.
8 . The method of claim 7 , wherein the request indicating a key associated with the item.
9 . The method of claim 8 , wherein the script library further comprises:
functionality for determining that the key indicates that the integrity of the item is to be verified, wherein determining the generated checksum value and verifying an integrity are performed in response to determining that the key indicates that the integrity of the item is to be verified.
10 . The method of claim 1 , wherein the generated checksum value is determined using a hash function.
11 . The method of claim 1 , wherein the script library is provided as a Javascript library.
12 . A non-transitory computer-readable storage medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations for providing integrity protection for web storage-driven content caching, the operations comprising:
receiving, at a client computing device, a web page from a server, the web page being associated with a script library and one or more items that can be stored in web storage of a web browser executed on the client computing device, each of the one or more items being associated with a pre-determined checksum value; and
loading the script library, such that a local storage application program interface (API) is overwritten using a wrapper function, the script library being executable to, in response to a request for an item from web storage, perform operations comprising:
determining a generated checksum value based on the item, and
verifying an integrity of the item based on the generated checksum value and a pre-determined checksum value associated with the item.
13 . A system, comprising:
a computing device; and
a computer-readable storage device coupled to the computing device and having instructions stored thereon which, when executed by the computing device, cause the computing device to perform operations for providing integrity protection for web storage-driven content caching, the operations comprising:
receiving, at a client computing device, a web page from a server, the web page being associated with a script library and one or more items that can be stored in web storage of a web browser executed on the client computing device, each of the one or more items being associated with a pre-determined checksum value; and
loading the script library, such that a local storage application program interface (API) is overwritten using a wrapper function, the script library being executable to, in response to a request for an item from web storage, perform operations comprising:
determining a generated checksum value based on the item, and
verifying an integrity of the item based on the generated checksum value and a pre-determined checksum value associated with the item.