Enhanced document and event mirroring for accessing internet content
Systems and methods for enhanced DOM and event mirroring and security in web applications provides an intermediate Master Browser between web content and client devices to improve security and other enhancements.
1. A method, comprising:
establishing, by a first browser executing on a device intermediary to a client and a server, a first model of content received from the server on the first browser;
transmitting, by the first browser, a message of the first model to a second browser executing on the client for establishing or updating a second model of the content on the second browser at the client for creating a mirrored copy of the first model on the device as the second model on the client;
applying, by the first browser, based on an event identifier received from the second browser, a security policy to a modification of the first model of the content, the event identifier corresponding to a user interaction with the content on the second browser at the client; and
determining, by the first browser according to the security policy applied to the modification of the first model based on the event identifier corresponding to the user interaction, whether to allow the second model on the second browser at the client to be modified.
2. The method of claim 1 , wherein applying the modification to the first model comprises applying the modification to the first model prior to allowing a modification to the second model corresponding to the user interaction.
3. The method of claim 1 , further comprising specifying, by the first browser according to the security policy, a modification to the second model.
4. The method of claim 3 , wherein the modification to the second model is different from the modification to the first model.
5. The method of claim 1 , wherein if the user interaction comprises a user interaction that does not affect the second model, the second browser is configured to respond directly to the user interaction.
6. The method of claim 1 , further comprising:
modifying, by a web application of the first browser, a cookie store in the device by at least one of setting a new cookie, removing an existing cookie, and modifying a cookie value;
formatting, by the web application, information about the modified cookie store into a message; and
sending, by the web application, the message to the second browser.
7. The method of claim 1 , further comprising:
registering, by the first browser, an event handler including a preventDefault attribute; and
preventing, by the first browser, transmission of data from the event handler to the second browser.
8. The method of claim 7 , further comprising executing, by the first browser, the user interaction using the event identifier received from the second browser to determine if the user interaction is a registered event.
9. The method of claim 8 , further comprising determining, by the first browser, responsive to determining that the user interaction is a registered event, that a corresponding default action should not be executed.
10. The method of claim 1 , further comprising transmitting, by the first browser, a divergence indicator to the second browser, wherein the divergence indicator identifies a divergence in processing of the user interaction between the first browser and the second browser.
11. A system, comprising:
a device intermediary to a client and a server, the device comprising circuitry for executing a first browser, the first browser configured to:
establish, on the first browser, a first model of content received from the server;
transmit a message of the first model to a second browser executing on the client for establishing or updating a second model of the content on the second browser at the client for creating a mirrored copy of the first model on the device as the second model on the client;
apply, based on an event identifier received from the second browser on the client, a security policy to a modification of the first model of the content, the event identifier corresponding to a user interaction with the content on the second browser at the client; and
determine, according to the security policy applied to the modification of the first model based on the event identifier corresponding to the user interaction, whether to allow the second model on the second browser at the client to be modified.
12. The system of claim 11 , wherein the first browser is configured to apply the modification to the first model prior to allowing a modification to the second model corresponding to the user interaction.
13. The system of claim 11 , wherein the first browser is further configured to specify a modification to the second model according to the security policy.
14. The system of claim 13 , wherein the modification to the second model is different from the modification to the first model.
15. The system of claim 11 , wherein if the user interaction comprises a user interaction that does not affect the second model, the second browser is configured to respond directly to the user interaction.
16. The system of claim 11 , further comprising a web application executing on the device, the web application configured to
modify a cookie store in the device by at least one of setting a new cookie, removing an existing cookie, and modifying a cookie value;
format information about the modified cookie store into a message; and
send the message to the second browser.
17. The system of claim 11 , wherein the first browser is further configured to register an event handler including a preventDefault attribute, and prevent transmission of data from the event handler to the second browser.
18. The system of claim 17 , wherein the first browser is further configured to execute the user interaction using the event identifier received from the second browser to determine if the user interaction is a registered event.
19. The system of claim 18 , wherein the first browser is further configured to determine, responsive to determining that the user interaction is a registered event, that a corresponding default action should not be executed.
20. The system of claim 11 , wherein the first browser is further configured to transmit a divergence indicator to the second browser, wherein the divergence indicator identifies a divergence in processing of the user interaction between the first browser and the second browser.