Methods and systems for providing security for page framing
Techniques for analyzing a page to be presented by a browser running on a computing platform. The page is disabled. The page is tested to determine if the page is framed by a second page. The page is enabled if the testing indicates that the page is not framed by a second page. Each level of a hierarchy of framed pages is inspected to determine whether each level is authorized. The page is enabled if the inspecting indicates that each level of the hierarchy of framed pages is authorized.
1. A method for analyzing a page to be presented by a browser executed by one or more processors of a computing platform, the method comprising:
blocking loading of the page having one or more frames with the one or more processors to disable the page and all pages retrieved through the page until frame analysis has been completed;
enabling the blocked page with the one or more processors if the blocked page is not framed by a second page;
inspecting each level of a hierarchy of framing pages with the one or more processors to determine whether each level is authorized by
determining whether a domain of the frame matches a domain of the framing page,
determining whether the framing satisfies a framing policy, and
providing an indication to the framed page of whether the domain of the frame and the domain of the framing page to be tested match, and whether the framing satisfies the framing policy; and
enabling the blocked page with the one or more processors if the inspecting indicates that each level of the hierarchy of framing pages is authorized.
2. The method of claim 1 wherein the browser accesses the framing policy to determine what hierarchy of framing pages is allowed.
3. The method of claim 2 wherein framing policies correspond to tenants within a multi-tenant environment.
4. The method of claim 1 wherein framing policy comprises a port-based framing policy enforced by a browser.
5. The method of claim 1 wherein determining whether a domain of the frame matches a domain of the framing page comprises utilizing a challenge request-response exchange between the domain of the frame and the domain of the framed page.
6. The method of claim 1 wherein providing an indication to the framed page of whether the domain of the frame and the domain of the framing page to be tested match comprises utilizing a secure message post between the domain of the frame and the domain of the framed page to secure the verification process.
7. A non-transitory computer readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processors to analyze a page to be presented by a browser running on a computing platform by:
blocking loading of the page having one or more frames with the one or more processors to disable the page and all pages retrieved through the page until frame analysis has been completed;
enabling the blocked page with the one or more processors if the blocked page is not framed by a second page;
inspecting each level of a hierarchy of framing pages with the one or more processors to determine whether each level is authorized by
determining whether a domain of the frame matches a domain of the framing page,
determining whether the framing satisfies a framing policy, and
providing an indication to the framed page of whether the domain of the frame and the domain of the framing page to be tested match, and whether the framing satisfies the framing policy; and
enabling the blocked page with the one or more processors if the inspecting indicates that each level of the hierarchy of framing pages is authorized.
8. The non-transitory computer readable medium of claim 7 wherein the browser accesses the framing policy to determine what hierarchy of framing pages is allowed.
9. The non-transitory computer readable medium of claim 8 wherein framing policies correspond to tenants within a multi-tenant environment.
10. The non-transitory computer readable medium of claim 7 wherein framing policy comprises a port-based framing policy enforced by a browser.
11. The non-transitory computer readable medium of claim 7 wherein determining whether a domain of the frame matches a domain of the framing page comprises utilizing a challenge request-response exchange between the domain of the frame and the domain of the framed page.
12. The non-transitory computer readable medium of claim 7 wherein providing an indication to the framed page of whether the domain of the frame and the domain of the framing page to be tested match comprises utilizing a secure message post between the domain of the frame and the domain of the framed page to secure the verification process.
13. A system having one or more hardware processing cores to analyze a page to be presented by a browser executed by the one or more hardware processing cores, wherein the one or more hardware processing cores at least to block loading of the page having one or more frames with the one or more processors to disable the page and all pages retrieved through the page until frame analysis has been completed, to enable the blocked page with the one or more processors if the blocked page is not framed by a second page, to inspect each level of a hierarchy of framing pages with the one or more processors to determine whether each level is authorized by determining whether a domain of the frame matches a domain of the framing page, determining whether the framing satisfies a framing policy, and providing an indication to the framed page of whether the domain of the frame and the domain of the framing page to be tested match, and whether the framing satisfies the framing policy, and to enable the blocked page with the one or more processors if the inspecting indicates that each level of the hierarchy of framing pages is authorized.
14. The system of claim 13 wherein the browser accesses the framing policy to determine what hierarchy of framing pages is allowed.
15. The system of claim 14 wherein framing policies correspond to tenants within a multi-tenant environment.
16. The system of claim 13 wherein framing policy comprises a port-based framing policy enforced by a browser.
17. The system of claim 13 wherein determining whether a domain of the frame matches a domain of the framing page comprises utilizing a challenge request-response exchange between the domain of the frame and the domain of the framed page.
18. The system of claim 13 wherein providing an indication to the framed page of whether the domain of the frame and the domain of the framing page to be tested match comprises utilizing a secure message post between the domain of the frame and the domain of the framed page to secure the verification process.