System and method for securing a third party communication with a hosting web page

1. A method for providing secure communications between third parties and hosting web pages, comprising:

uploading a hosting web page to a client device, wherein the hosting web page includes at least a sand-box proxy and a sand-box engine;

uploading a third party module to the hosting web page;

determining whether a proxy application programming interface (API) call received from the third party module meets at least one validation rule, wherein the proxy API call includes at least a script and a payload parameter provided by the third party module;

for each validation rule, upon determining that the proxy API call does not meet the validation rule, modifying the script to meet the validation rule;

generating an engine API call including at least the payload parameter;

validating the engine API call; and

upon validation of the engine API call, executing, by the sand-box engine over the hosting web page, the payload parameter.

2. The method of claim 1 , further comprising:

checking if the engine API call is received from a known sand-box proxy; and

validating the script included in the engine API call.

3. The method of claim 2 , wherein each validation rule is selected from a set of predefined rules.

4. The method of claim 3 , wherein the sand-box engine and the sand-box proxy are embedded in the hosting web page.

5. The method of claim 1 , wherein the hosting web page is at least a mashup web page.

6. A non-transitory computer readable medium having stored thereon instructions for causing one or more processing units to execute the method according to claim 1 .

7. A system for secure communications between third parties and hosting web pages, comprising:

a processing unit; and

a memory, the memory containing instructions that, when executed by the processing unit, configure the system to:

upload a hosting web page to a client device, wherein the hosting web page includes at least a sand-box proxy and a sand-box engine;

upload a third party module to the hosting web page;

determine whether a proxy application programming interface (API) call received from the third party module meets at least one validation rule, wherein the proxy API call includes at least a script and a payload parameter provided by the third party module;

for each validation rule, upon determining that the proxy API call does not meet the validation rule, modify the script to meet the validation rule;

generate an engine API call including at least the payload parameter

validate the engine API call; and

upon validation of the engine API call, execute, by the sand-box engine over the hosting web page, the payload parameter.

8. The system of claim 7 , wherein the system is further configured to:

check if the engine API call is received from a known sand-box proxy; and

validate the script included in the engine API call.

9. The system of claim 8 , wherein each validation rule is selected from a set of predefined rules.

10. The system of claim 9 , wherein the sand-box engine and the sand-box proxy are embedded in the hosting web page.

11. The system of claim 7 , wherein the hosting web page is at least a mashup web page.