公开(公告)号：US12242834B2

公开(公告)日：2025-03-04

申请号：US17857367

申请日：2022-07-05

Applicant: Salesforce, Inc.

Inventor： Julie Tung ,  Rajeev Nayak ,  Kevin Gibbs ,  Bret Taylor ,  Yang Su ,  Nate Botwick ,  Pedram Razavi ,  Scott Goodfriend ,  Nikrad Mahdi ,  Andy Chung ,  Drew Hamlin ,  Patrick Linehan ,  Sophia Westwood ,  Lindsey Simon ,  Shrey Banga ,  Diana Berlin

IPC: G06F8/71 ,  G06F8/34 ,  G06F8/36 ,  G06F8/60 ,  G06F9/451 ,  G06F9/50 ,  G06F9/54 ,  G06F12/0871 ,  G06F16/17 ,  G06F16/172 ,  G06F16/176 ,  G06F16/25 ,  G06F16/901 ,  G06F16/93 ,  G06F21/31 ,  G06F21/53 ,  G06F21/56 ,  G06F40/166 ,  H04L9/40 ,  H04L65/401 ,  H04L67/00

Abstract: Disclosed herein are system, method, and computer program product embodiments for providing a security model to customizable live applications in a cloud collaboration platform. The security approach may dedicate a frame to each live application, serving the frame from a different domain than a document in which the live application is embedded. This approach ensures that more stringent security requirements may be required of the live application and allows the data presented to the live application to be narrowly tailored. The security model may further leverage sandbox attributes and content-security policies to restrict the behavior of sandboxed and non-sandboxed live applications in accordance with best security practices.