Security model for live applications in a cloud collaboration platform
Disclosed herein are system, method, and computer program product embodiments for providing a security model to customizable live applications in a cloud collaboration platform. The security approach may dedicate a frame to each live application, serving the frame from a different domain than a document in which the live application is embedded. This approach ensures that more stringent security requirements may be required of the live application and allows the data presented to the live application to be narrowly tailored. The security model may further leverage sandbox attributes and content-security policies to restrict the behavior of sandboxed and non-sandboxed live applications in accordance with best security practices.
1. A method, comprising:
generating, by one or more processors, a live application in a document associated with a collaboration platform, wherein the live application is assigned a type;
associating the live application with a subdomain based on the type; and
providing the live application from a different path than the document, wherein the different path includes the subdomain, and wherein the collaboration platform exposes a shared object to the live application based on the subdomain.
2. The method of claim 1 , wherein the live application comprises a sandbox attribute limiting actions performable by the live application.
3. The method of claim 1 , wherein the live application comprises a content-security policy limiting external content that the live application can access.
4. The method of claim 3 , wherein the content security policy comprises an exception for an external resource.
5. The method of claim 1 , wherein the live application and the document communicate via a bridge application programming interface.
6. The method of claim 1 , further comprising:
determining auto-complete values based on an input entered in the live application; and
displaying a response to the input including the auto-complete values.
7. The method of claim 1 , further comprising:
providing account information and document information to the live application while preventing access to other data used by the collaboration platform.
8. A system, comprising:
a memory; and
at least one processor coupled to the memory and configured to:
generate a live application in a document associated with a collaboration platform, wherein the live application is assigned a type;
associate the live application with a subdomain based on the type; and
provide the live application from a different path than the document, wherein the different path includes the subdomain, and wherein the collaboration platform exposes a shared object to the live application based on the subdomain.
9. The system of claim 8 , wherein the live application comprises a sandbox attribute limiting actions performable by the live application.
10. The system of claim 8 , wherein the live application comprises a content-security policy limiting external content that the live application can access.
11. The system of claim 10 , wherein the content security policy comprises an exception for an external resource.
12. The system of claim 8 , wherein the live application and the document communicate via a bridge application programming interface.
13. The system of claim 8 , the at least one processor further configured to:
determine auto-complete values based on an input entered in the live application; and
display a response to the input including the auto-complete values.
14. The system of claim 8 , the at least one processor further configured to:
provide account information and document information to the live application while preventing access to other data used by the collaboration platform.
15. A non-transitory computer-readable device having instructions stored thereon that, when executed by at least one computing device, causes the at least one computing device to perform operations comprising:
generating a live application in a document associated with a collaboration platform, and wherein the live application is assigned a type;
associating the live application with a subdomain based on the type; and
providing the live application from a different path than the document, wherein the different path includes the subdomain, and wherein the collaboration platform exposes a shared object to the live application based on the subdomain.
16. The non-transitory computer-readable device of claim 15 , wherein the live application comprises a sandbox attribute that limits actions performable by the live application.
17. The non-transitory computer-readable device of claim 15 , wherein the live application comprises a content-security policy that limits external content that the live application can access.
18. The non-transitory computer-readable device of claim 15 , wherein the live application and the document communicate via a bridge application programming interface.
19. The non-transitory computer-readable device of claim 15 , the operations further comprising:
determining auto-complete values based on an input entered in the live application; and
displaying a response to the input including the auto-complete values.
20. The non-transitory computer-readable device of claim 15 , the operations further comprising:
providing account information and document information to the live application while preventing access to other data used by the collaboration platform.