Concurrent preparation of multiple versions of a website

    公开(公告)号:US09658993B2

    公开(公告)日:2017-05-23

    申请号:US14075381

    申请日:2013-11-08

    IPC分类号: G06F17/30 G06F17/22 G06F9/44

    摘要: Techniques are disclosed for concurrent preparation of multiple versions of a website. Web page content can be branched in response to a request from a first user to create a working copy of one or more production web pages source documents. Any edits applied to the production version of the documents may be automatically applied to the working copy. Further, the working copy can be edited independently of the production version. The working copy can be promoted to production by replacing the production version with the edited working copy. Any number of separate working copies can be created and edited concurrently with the production version.

    CONTEXT EDITING WITHOUT INTERFERING WITH TARGET PAGE
    2.
    发明申请
    CONTEXT EDITING WITHOUT INTERFERING WITH TARGET PAGE 审中-公开
    没有干扰目标页面的语境编辑

    公开(公告)号:US20150169518A1

    公开(公告)日:2015-06-18

    申请号:US14107153

    申请日:2013-12-16

    IPC分类号: G06F17/24 G06F17/30

    CPC分类号: G06F17/24 G06F16/958

    摘要: An editable version of a first web page may be created by first forming a second web page having the first web page as an inline frame. Then an outer frame of the second web page can be created, the outer frame designed to cause a browser rendering the second web page to create objects in the outer frame placed over corresponding objects in the first web page in the inline frame such that user attempts at interaction with the corresponding objects in the first web page are intercepted by the objects in the outer frame.

    摘要翻译: 可以通过首先形成具有第一网页作为内联帧的第二网页来创建第一网页的可编辑版本。 然后,可以创建第二网页的外框,外框被设计成使浏览器呈现第二网页,以在外框中的对象中创建放置在内联框架中的第一网页中的对应对象上的对象,使得用户尝试 在与第一网页中的相应对象的交互中被外框中的对象拦截。

    TAG-BASED CONTENT EXCLUSION
    3.
    发明申请
    TAG-BASED CONTENT EXCLUSION 审中-公开
    基于标签的内容排除

    公开(公告)号:US20150302064A1

    公开(公告)日:2015-10-22

    申请号:US14257508

    申请日:2014-04-21

    发明人: Gilles Knobloch

    摘要: Techniques are provided for filtering digital content based on subject matter exclusion tags associated with a target audience. A content author can associate authored content with tag metadata that is representative of the subject matter of the authored content. When searching for content, such as by submitting a query to a search engine, a content consumer can designate exclusion tags corresponding to subject matter that is not of interest. Where one of the content consumer's designated exclusion tags corresponds to the tag metadata designated by a content author for a particular content item, the consumer can be assumed to have no interest in that content item. A content server can prevent such content from being served to the content consumer. This allows the content consumer to more specifically tailor the received content to his/her specific interests, and to specify customizations that exclude unwanted content from content retrieval operations.

    摘要翻译: 提供了基于与目标受众相关联的主题排除标签来过滤数字内容的技术。 内容作者可以将创作内容与代表创作内容主题的标签元数据相关联。 当搜索内容(例如通过向搜索引擎提交查询)时,内容消费者可以指定与不感兴趣的主题相对应的排除标签。 如果内容消费者的指定排除标签中的一个与特定内容项目的内容作者指定的标签元数据相对应,则可以假设消费者对该内容项目不感兴趣。 内容服务器可以防止向内容消费者提供这样的内容。 这允许内容消费者更具体地将收到的内容定制为他/她的特定兴趣,并且指定从内容检索操作中排除不需要的内容的定制。

    CONCURRENT PREPARATION OF MULTIPLE VERSIONS OF A WEBSITE

    公开(公告)号:US20170255600A1

    公开(公告)日:2017-09-07

    申请号:US15596098

    申请日:2017-05-16

    IPC分类号: G06F17/22 G06F9/44 G06F17/30

    摘要: Techniques are disclosed for concurrent preparation of multiple versions of a website. Web page content can be branched in response to a request from a first user to create a working copy of one or more production web pages source documents. Any edits applied to the production version of the documents may be automatically applied to the working copy. Further, the working copy can be edited independently of the production version. The working copy can be promoted to production by replacing the production version with the edited working copy. Any number of separate working copies can be created and edited concurrently with the production version.

    CROSS-SITE REQUEST FORGERY DEFENSE

    公开(公告)号:US20170223051A1

    公开(公告)日:2017-08-03

    申请号:US15494623

    申请日:2017-04-24

    IPC分类号: H04L29/06 H04L9/32

    摘要: An HTML document includes a JavaScript element that manages CSRF token use. When the HTML document is rendered, the JavaScript element asynchronously requests a CSRF token from the server. In response, the server generates a JWT using a keyed HMAC algorithm. The resulting JWT, which functions as a CSRF token, is returned to the user where it is stored in a protected variable inside the JavaScript element. The CSRF token is therefore stateless and isn't stored in a server-side repository. When the user later requests access to a server resource, the CSRF token is included in such request. This may be accomplished by adding a hidden input field that includes the CSRF token to the submission that's transmitted to the server. If the server cannot validate the received token using the HMAC key that was originally used to generate the token, the request is considered unauthorized and is not processed.

    Cross-site request forgery defense

    公开(公告)号:US09774622B2

    公开(公告)日:2017-09-26

    申请号:US15494623

    申请日:2017-04-24

    IPC分类号: H04L29/06 H04L9/32

    摘要: An HTML document includes a JavaScript element that manages CSRF token use. When the HTML document is rendered, the JavaScript element asynchronously requests a CSRF token from the server. In response, the server generates a JWT using a keyed HMAC algorithm. The resulting JWT, which functions as a CSRF token, is returned to the user where it is stored in a protected variable inside the JavaScript element. The CSRF token is therefore stateless and isn't stored in a server-side repository. When the user later requests access to a server resource, the CSRF token is included in such request. This may be accomplished by adding a hidden input field that includes the CSRF token to the submission that's transmitted to the server. If the server cannot validate the received token using the HMAC key that was originally used to generate the token, the request is considered unauthorized and is not processed.

    Cross-site request forgery defense

    公开(公告)号:US09660809B2

    公开(公告)日:2017-05-23

    申请号:US14820607

    申请日:2015-08-07

    IPC分类号: H04L29/06 H04L9/32

    摘要: An HTML document includes a JavaScript element that manages CSRF token use. When the HTML document is rendered, the JavaScript element asynchronously requests a CSRF token from the server. In response, the server generates a JWT using a keyed HMAC algorithm. The resulting JWT, which functions as a CSRF token, is returned to the user where it is stored in a protected variable inside the JavaScript element. The CSRF token is therefore stateless and isn't stored in a server-side repository. When the user later requests access to a server resource, the CSRF token is included in such request. This may be accomplished by adding a hidden input field that includes the CSRF token to the submission that's transmitted to the server. If the server cannot validate the received token using the HMAC key that was originally used to generate the token, the request is considered unauthorized and is not processed.

    CROSS-SITE REQUEST FORGERY DEFENSE
    8.
    发明申请
    CROSS-SITE REQUEST FORGERY DEFENSE 有权
    跨场要求强制防御

    公开(公告)号:US20170041144A1

    公开(公告)日:2017-02-09

    申请号:US14820607

    申请日:2015-08-07

    IPC分类号: H04L9/32 H04L29/06

    摘要: An HTML document includes a JavaScript element that manages CSRF token use. When the HTML document is rendered, the JavaScript element asynchronously requests a CSRF token from the server. In response, the server generates a JWT using a keyed HMAC algorithm. The resulting JWT, which functions as a CSRF token, is returned to the user where it is stored in a protected variable inside the JavaScript element. The CSRF token is therefore stateless and isn't stored in a server-side repository. When the user later requests access to a server resource, the CSRF token is included in such request. This may be accomplished by adding a hidden input field that includes the CSRF token to the submission that's transmitted to the server. If the server cannot validate the received token using the HMAC key that was originally used to generate the token, the request is considered unauthorized and is not processed.

    摘要翻译: HTML文档包含一个管理CSRF令牌使用的JavaScript元素。 当呈现HTML文档时,JavaScript元素异步地从服务器请求一个CSRF令牌。 作为响应,服务器使用密钥HMAC算法生成JWT。 作为CSRF令牌的结果JWT将返回给用户,并将其存储在JavaScript元素内的受保护变量中。 因此,CSRF令牌是无状态的,不存储在服务器端存储库中。 当用户稍后请求访问服务器资源时,CSRF令牌被包含在这样的请求中。 这可以通过将包含CSRF令牌的隐藏输入字段添加到发送到服务器的提交来实现。 如果服务器无法使用最初用于生成令牌的HMAC密钥来验证接收到的令牌,则该请求被视为未经授权,不会被处理。

    CONCURRENT PREPARATION OF MULTIPLE VERSIONS OF A WEBSITE
    9.
    发明申请
    CONCURRENT PREPARATION OF MULTIPLE VERSIONS OF A WEBSITE 有权
    一个网站的多个版本的同时准备

    公开(公告)号:US20150134629A1

    公开(公告)日:2015-05-14

    申请号:US14075381

    申请日:2013-11-08

    IPC分类号: G06F17/22

    摘要: Techniques are disclosed for concurrent preparation of multiple versions of a website. Web page content can be branched in response to a request from a first user to create a working copy of one or more production web pages source documents. Any edits applied to the production version of the documents may be automatically applied to the working copy. Further, the working copy can be edited independently of the production version. The working copy can be promoted to production by replacing the production version with the edited working copy. Any number of separate working copies can be created and edited concurrently with the production version.

    摘要翻译: 披露了同时准备多个版本的网站的技术。 网页内容可以响应于来自第一用户的请求而分支,以创建一个或多个生产网页源文档的工作副本。 应用于生产版本的文档的任何编辑可能会自动应用于工作副本。 此外,工作副本可以独立于生产版本进行编辑。 工作副本可以通过用编辑的工作副本替换生产版本来升级到生产。 可以与生产版本同时创建和编辑任意数量的单独的工作副本。