US 11,755,722 B2
Sandboxed application extensions
Lee Benjamin Graber, Seattle, WA (US); Michael Brian Kovner, Seattle, WA (US); Sean Daye Mann, Seattle, WA (US); and Brett Allen Taylor, Seattle, WA (US)
Assigned to Tableau Software, LLC, Seattle, WA (US)
Filed by Tableau Software, LLC, Seattle, WA (US)
Filed on Apr. 4, 2022, as Appl. No. 17/713,113.
Application 17/713,113 is a continuation of application No. 16/702,410, filed on Dec. 3, 2019, granted, now 11,295,007.
Prior Publication US 2022/0229899 A1, Jul. 21, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/53 (2013.01); G06F 21/12 (2013.01); H04L 9/40 (2022.01); G06F 21/55 (2013.01)
CPC G06F 21/53 (2013.01) [G06F 21/128 (2013.01); G06F 21/552 (2013.01); G06F 21/554 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for managing application behavior using one or more processors that execute instructions to perform actions, comprising:
providing a first request to an extension server for an extension shell for a hosting application, wherein the extension shell is associated with a first security policy for a sandbox environment that restricts an extension body corresponding to the extension shell from navigating away from the hosting application or the extension server;
providing the extension body with controlled access to one or more prescribed resources within the sandbox environment via one or more application programming interfaces (APIs);
providing a second request to the extension server to embed the extension body in the extension shell, wherein the extension body is associated with a second security policy that restricts network access of the extension body; and
employing one or more of the first security policy or the second security policy to restrict access by one or more of the extension shell or the extension body to the hosting application or the extension server.