Dynamic web content management system
In one embodiment, an agent executed by a device intercepts webpage code for a website sent from an application server to a client of the website. The agent identifies a portion of the webpage code as being used for webpage analytics. The agent forms modified webpage code by disabling the portion of the webpage code, based on one or more performance metrics associated with the website. The agent sends the modified webpage code to the client of the website.
1. A method, comprising:
intercepting, by an agent executed by a device, webpage code for a website sent from an application server to a client of the website;
identifying, by the agent, a portion of the webpage code as being used for webpage analytics by identifying a HyperText Markup Language metadata tag in the portion of the webpage code used by a search engine to perform analytics on traffic to the website;
determining, by the agent and based on a policy, that the webpage code poses a security risk by identifying sensitive data or vulnerable security data in the webpage code as defined in the policy, wherein the policy is set by default or specified via a user interface;
forming, by the agent and responsive to determining that the webpage code poses the security risk, a modified webpage code by disabling the portion of the webpage code, wherein the agent disables the portion of the webpage code by removing the HyperText Markup Language metadata tag from the webpage code; and
sending, by the agent, the modified webpage code to the client of the website.
2. The method as in claim 1 , wherein the policy comprises one or more performance metrics that include a page load time of the website.
3. The method as in claim 1 , wherein identifying the portion of the webpage code as being used for webpage analytics further comprises:
identifying a HyperText Markup Language script tag in the portion of the webpage code.
4. The method as in claim 3 , wherein forming the modified webpage code by disabling the portion of the webpage code further comprises:
removing the HyperText Markup Language script tag from the webpage code.
5. The method as in claim 3 , wherein forming the modified webpage code by disabling the portion of the webpage code further comprises:
disabling immediate execution of a script in the portion of the webpage code by converting the script into an asynchronous script.
6. The method as in claim 1 , wherein the policy comprises one or more performance metrics that include network traffic load of a network associated with the website.
7. The method as in claim 1 , wherein the agent comprises a sidecar proxy or cloud access security broker.
8. The method as in claim 1 , wherein the policy further defines whether the client is a bot, whether the client is logged into an account associated with the website, an identity of a user of the client, or a location of the client.
9. An apparatus, comprising:
one or more network interfaces;
a processor coupled to the one or more network interfaces and configured to execute one or more processes; and
a memory configured to store a process that is executable by the processor, the process when executed configured to:
intercept webpage code for a website sent from an application server to a client of the website;
identify a portion of the webpage code as being used for webpage analytics by identifying a HyperText Markup Language metadata tag in the portion of the webpage code used by a search engine to perform analytics on traffic to the website;
determine, based on a policy, that the webpage code poses a security risk by identifying sensitive data or vulnerable security data in the webpage code as defined in the policy, wherein the policy is set by default or specified via a user interface;
form, responsive to determining that the webpage code poses a security risk, a modified webpage code by disabling the portion of the webpage code, wherein the apparatus disables the portion of the webpage code by removing the HyperText Markup Language metadata tag from the webpage code; and
send the modified webpage code to the client of the website.
10. The apparatus as in claim 9 , wherein the policy comprises one or more performance metrics that include a page load time of the website.
11. The apparatus as in claim 9 , wherein the apparatus further identifies the portion of the webpage code as being used for webpage analytics by:
identifying a HyperText Markup Language script tag in the portion of the webpage code.
12. The apparatus as in claim 11 , wherein the apparatus further forms the modified webpage code by disabling the portion of the webpage code by:
removing the HyperText Markup Language script tag from the webpage code.
13. The apparatus as in claim 11 , wherein the apparatus further forms the modified webpage code by disabling the portion of the webpage code by:
disabling immediate execution of a script in the portion of the webpage code by converting the script into an asynchronous script.
14. The apparatus as in claim 9 , wherein the policy comprises one or more performance metrics that include network traffic load of a network associated with the website.
15. The apparatus as in claim 9 , wherein the policy further defines whether the client is a bot, whether the client is logged into an account associated with the website, an identity of a user of the client, or a location of the client.
16. A tangible, non-transitory, computer-readable medium storing program instructions that cause an agent of a device to execute a process comprising:
intercepting webpage code for a website sent from an application server to a client of the website;
identifying a portion of the webpage code as being used for webpage analytics by identifying a HyperText Markup Language metadata tag in the portion of the webpage code used by a search engine to perform analytics on traffic to the website;
determining, by the agent and based on a policy, that the webpage code poses a security risk by identifying sensitive data or vulnerable security data in the webpage code as defined in the policy, wherein the policy is set by default or specified via a user interface;
forming, by the agent and responsive to determining that the webpage code poses the security risk, a modified webpage code by disabling the portion of the webpage code, wherein the agent disables the portion of the webpage code by removing the HyperText Markup Language metadata tag from the webpage code; and
sending the modified webpage code to the client of the website.
17. The tangible, non-transitory, computer-readable medium as in claim 16 , wherein the policy comprises one or more performance metrics that include a page load time of the website.
18. The tangible, non-transitory, computer-readable medium as in claim 16 , wherein the policy comprises one or more performance metrics that include network traffic load of a network associated with the website.
19. The tangible, non-transitory, computer-readable medium as in claim 16 , wherein the policy further defines whether the client is a bot, whether the client is logged into an account associated with the website, an identity of a user of the client, or a location of the client.