Invention Grant
- Patent Title: Cross-site request forgery protection
-
Application No.: US17160840Application Date: 2021-01-28
-
Publication No.: US11949714B2Publication Date: 2024-04-02
- Inventor: Robert Spremulli , Chris Smith , Radha Shelat , Myles Taggart Frothingham
- Applicant: salesforce.com, inc.
- Applicant Address: US CA San Francisco
- Assignee: Salesforce, Inc.
- Current Assignee: Salesforce, Inc.
- Current Assignee Address: US CA San Francisco
- Agency: Butzel Long
- Main IPC: H04L9/40
- IPC: H04L9/40

Abstract:
Digital data processing systems of the type in which a server digital data device (“server”) is coupled to a client digital data device (“client”) over a network, e.g., the Internet, include web server software executing within an application layer on the server that responds to a request from the client by (i) validating a key received from the client with that request, (ii) generating a result code indicative of a success of that validation, (iii) initiating processing of the request, including invoking server resource software executing outside the application layer. The server resource software, which checks the result code upon invocation and before performing a protected operation required for processing the request, responds to a result code indicating that the result did not validate by exiting before executing the protected operation.
Public/Granted literature
- US20210152599A1 CROSS-SITE REQUEST FORGERY PROTECTION Public/Granted day:2021-05-20
Information query