Browser drag and drop file upload encryption enforcement
Some websites accessed via browser allow for file uploading via drag and drop functionality. In a drag and drop operation, a user selects a file on the information handling system and drags the file to a browser window for uploading via the browser. File encryption systems, such as virtual file systems, may implement an encryption algorithm and enforce encryption standards, set by a user or organization, when uploading files via a browser, including uploading of files performed via file drag and drop functionality.
1. A method for enforcing security on an information handling system, the method comprising:
detecting browser access of a managed site;
redirecting input/output file activity of the browser associated with the managed site from a default file system of an operating system of the information handling system to a virtual file system, wherein the input output file activity comprises requests to read data from or write data to a data storage of the information handling system, and wherein the requests are requests to read data from or write data to a same location of the data storage before and after redirection; and
preventing, by the virtual file system, the browser from retrieving an unencrypted file to be uploaded to the managed site.
2. The method of claim 1 , further comprising instructing a user to encrypt a file to be uploaded to the managed site prior to uploading when the file is unencrypted.
3. The method of claim 1 , wherein the step of preventing comprises hiding an unencrypted file from the browser, and wherein hiding the file from the browser comprises notifying, by the virtual file system, the browser that the file does not exist.
4. The method of claim 1 , wherein the step of detecting browser access of a managed site comprises detecting, by the virtual file system, input-output file activity associated with the managed site indicating a browser drag and drop upload request for a file.
5. The method of claim 1 , wherein preventing, by the virtual file system, the browser from retrieving unencrypted files comprises reading metadata from a file to be uploaded to determine whether the file is encrypted.
6. A computer program product for implementation on an information handling system, comprising:
a non-transitory computer readable medium comprising code to perform steps comprising:
detecting browser access of a managed site;
redirecting input/output file activity of the browser associated with the managed site from a default file system of an operating system of the information handling system to a virtual file system, wherein the input output file activity comprises requests to read data from or write data to a data storage of the information handling system, and wherein the requests are requests to read data from or write data to a same location of the data storage before and after redirection; and
preventing, by the virtual file system, the browser from retrieving an unencrypted file to be uploaded to the managed site.
7. The computer program product of claim 6 , wherein the step of preventing further comprises instructing a user to encrypt a file to be uploaded to the managed site prior to uploading, when the file is unencrypted.
8. The computer program product of claim 6 , wherein the step of preventing comprises hiding an unencrypted file from the browser, and wherein hiding the file from the browser comprises notifying, by the virtual file system, the browser that the file does not exist.
9. The computer program product of claim 8 , wherein the step of detecting browser access of a managed site comprises detecting, by the virtual file system, input-output file activity associated with the managed site indicating a browser drag and drop upload request for a file.
10. The computer program product of claim 6 , wherein preventing, by the virtual file system, the browser from retrieving unencrypted files comprises reading metadata from a file to be uploaded to determine whether the file is encrypted.
11. An information handling system, comprising:
a processor; and
a memory coupled to the processor, wherein the processor is configured to perform steps comprising:
detecting browser access of a managed site;
redirecting input/output file activity of the browser associated with the managed site from a default file system of an operating system of the information handling system to a virtual file system, wherein the input output file activity comprises requests to read data from or write data to a data storage of the information handling system, and wherein the requests are requests to read data from or write data to a same location of the data storage before and after redirection; and
preventing, by the virtual file system, the browser from retrieving an unencrypted file to be uploaded to the managed site.
12. The information handling system of claim 11 , wherein the step of preventing further comprises instructing a user to encrypt a file to be uploaded to the managed site prior to uploading, when the file is unencrypted.
13. The information handling system of claim 11 , wherein the step of preventing comprises hiding an unencrypted file from the browser, and wherein hiding the file from the browser comprises notifying, by the virtual file system, the browser that the file does not exist.
14. The information handling system of claim 11 , wherein preventing, by the virtual file system, the browser from retrieving unencrypted files comprises reading metadata from a file to be uploaded to determine whether the file is encrypted.