Web extension JavaScript execution control by service/daemon
A method, system and computer-usable medium for collecting and scanning data (i.e., web POST data) before the data is sent. A POST request is sent from a client device to server. The request is through a web browser running a script language listing. The script language listing is paused, while the data is held and scanned. A determination is made to allow or block the data before the data is sent through the POST request.
1. A computer-implementable method for scanning and holding POST request data comprising: initiating a POST request for sending POST data; running a script language to send the POST data; pausing the script language, wherein pausing is performed by a kernel driver under direction of a data leak prevention (DLP) service/daemon connected to a security analytics system to block or allow the POST data to be sent, wherein the security analytics system implements event queuing analytics and streaming analytics applied to the POST data; scanning the POST data, wherein the scanning is performed by the kernel driver; determining to send the POST data; resuming the script language, wherein the POST data is allowed or blocked based on the determining; and sandboxing to local storage access to the POST data.
2. The method of claim 1 , wherein the initiating is performed by a web browser.
3. The method of claim 1 , wherein the POST request is in the form of a hypertext transfer protocol (HTTP) message.
4. The method of claim 1 , wherein the request is to a web server.
5. The method of claim 1 , wherein the script language is JavaScript that runs in a web browser.
6. A system comprising: a processor; a data bus coupled to the processor; and a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for: sending a POST request to a server to receive POST data; running a JavaScript listing on a web browser to the send the POST request; pausing the JavaScript listing, wherein the pausing is performed by a kernel driver under direction of a data leak prevention (DLP) service/daemon connected to a security analytics system to block or allow the POST data to be sent, wherein the security analytics system implements event queuing analytics and streaming analytics applied to the POST data; scanning for the POST data, wherein the scanning is performed by the kernel driver; holding the POST data until a determination is made to block or allow the POST data to be sent to the server; resuming the JavaScript listing to complete the POST request; and sandboxing to local storage access to the POST data.
7. The system of claim 6 , wherein the sending is through an application program interlace (API) connecting the system to the server.
8. The system of claim 6 , wherein the scanning the POST data is performed by a service/daemon running connected to a security analytics system.
9. The system of claim 6 , wherein the kernel driver captures the POST data and send the POST data to service/daemon for the scanning.
10. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for: sending a POST request to a server to receive POST data; running a JavaScript listing on a web browser to the send the POST request; pausing the JavaScript listing, wherein the pausing is performed by a kernel driver under direction of a data leak prevention (DLP) service/daemon connected to a security analytics system to block or allow the POST data to be sent, wherein the security analytics system implements event queuing analytics and streaming analytics applied to the POST data; scanning for the POST data, wherein the scanning is performed by the kernel driver; holding the POST data until a determination is made to block or allow the POST data to be sent to the server; resuming the JavaScript listing to complete the POST request; and sandboxing to local storage access to the POST data.
11. The non-transitory, computer-readable storage medium of claim 10 , wherein the sending is performed by a web browser.
12. The non-transitory, computer-readable storage medium of claim 10 , wherein the POST request is in the form of a hypertext transfer protocol (HTTP) message.
13. The non-transitory, computer-readable storage medium of claim 10 , wherein the sending is through an application program interface (API).
14. The non-transitory, computer-readable storage medium of claim 10 , wherein the determining comprises scanning and holding the POST data.
15. The non-transitory, computer-readable storage medium of claim 10 , wherein the computer executable instructions are deployable to a client system from a server system at a remote location.
16. The non-transitory, computer-readable storage medium of claim 10 , wherein the computer executable instructions are provided by a service provider to a user on an on-demand basis.