Controlling incoming data processing requests
Aspects described herein relate to controlling incoming data processing requests or messages and whether the incoming data processing requests are allowed to reach destination applications unmodified. The destination application may be a secure application operating within a secure application wrapper, and the secure application wrapper may determine whether and how much of the request or message is allowed to pass into a managed partition or through the secure application wrapper to reach the secure application for processing.
1. A method, comprising:
receiving, by a secure application wrapper implemented on a computing device comprising a processor, a message containing data, the message indicating an action to perform on the data and a destination application within the secure application wrapper on the computing device;
determining, by the secure application wrapper, that the message does not identify a source application;
determining, by the secure application wrapper, a content type of the data;
identifying an optional part of the data; and
after determining that the message does not identify a source application, creating a modified message by removing, based on the content type of the data, at least a portion of the data from the message, wherein the portion of the data is different from the optional part of the data.
2. The method of claim 1 , wherein the destination application comprises a secure e-mail application, a secure text processing application, or a secure photo editing application, and the method further comprises:
removing the optional part of the data from the message.
3. The method of claim 1 , further comprising:
receiving input, via a graphical user interface, assigning a security setting for a destination application; and
wherein removing at least a portion of the data from the message is further based on the assigned security setting for the destination application.
4. The method of claim 1 , further comprising:
displaying an unverified source notification to a user; and
allowing the modified message to be sent to the destination application.
5. The method of claim 4 , wherein the unverified source notification comprises information describing the content type of the data and the portion of the data that was removed from the message.
6. The method of claim 5 , wherein the unverified source notification further comprises an indication of blocking the action to be performed on the data.
7. The method of claim 1 , wherein the portion of the data removed from the message comprises a uniform resource identifier associated with the action.
8. A system, comprising:
a computing device comprising at least one processor; and
at least one memory storing computer-readable instructions that, when executed by the at least one processor, cause the system to perform:
receiving, by a secure application wrapper implemented by the at least one processor, a message containing data, the message indicating an action to perform on the data and a destination application within the secure application wrapper on the computing device;
determining, by the secure application wrapper, that the message does not identify a source application;
identifying an optional part of the data; and
after determining that the message does not identify a source application, creating a modified message by removing at least a portion of the data from the message, wherein the portion of the data is different from the optional part of the data.
9. The system of claim 8 , wherein the destination application comprises a secure e-mail application, a secure text processing application, or a secure photo editing application.
10. The system of claim 8 , wherein the computer-readable instructions further cause the system to perform:
responsive to removing a portion of the data, displaying a notification describing the portion of the data that is removed and describing that the portion of the data was removed because the message does not identify a source application.
11. The system of claim 8 , wherein the memory storing computer-readable instructions that, when executed by the at least one processor, further cause the system to perform:
displaying an unverified source notification to a user; and
allowing the modified message to be sent to the destination application.
12. The system of claim 11 , wherein the unverified source notification comprises information describing the portion of the data that was removed from the message.
13. The system of claim 8 , wherein the portion of the data removed from the message comprises a uniform resource identifier associated with the action.
14. One or more non-transitory computer-readable storage media having computer-readable instructions stored thereon, that when executed by one or more processors, cause the one or more processors to perform:
receiving, by a secure application wrapper implemented by the one or more processors, a message containing data, the message indicating an action to perform on the data and a destination application within the secure application wrapper;
determining, by the secure application wrapper, that the message does not identify a source application;
identifying an optional part of the data; and
after determining that the message does not identify a source application, creating a modified message by removing at least a portion of the data from the message, wherein the portion of the data is different from the optional part of the data.
15. The computer-readable storage media of claim 14 , wherein the computer-readable instructions further cause the one or more processors to perform:
determining whether a policy setting for application interaction is set to unrestricted; and
responsive to determining that the policy setting for application interaction is set to unrestricted, sending the message, by the secure application wrapper, to the destination application.
16. The computer-readable storage media of claim 14 , wherein the computer-readable instructions further cause the one or more processors to perform:
receiving input, via a graphical user interface, that indicates a security setting for a destination application.
17. The computer-readable storage media of claim 14 , wherein the computer-readable instructions further cause the one or more processors to perform:
displaying an unverified source notification to a user; and
allowing the modified message to be sent to the destination application.
18. The computer-readable storage media of claim 17 , wherein the unverified source notification comprises information describing the portion of the data that was removed from the message.
19. The computer-readable storage media of claim 18 , wherein the unverified source notification further comprises an indication of blocking the action to be performed on the data.
20. The computer-readable storage media of claim 14 , wherein the portion of the data removed from the message comprises a uniform resource identifier associated with the action.