US 12,242,561 B1
Managing content uploads
Stephen John Stanley Thornhill, Chalfont St. Giles (GB); Andrew Peter Edward Prince, Chippenham (GB); and Joshua Frank Wharton, Reading (GB)
Assigned to Menlo Security, Inc., Mountain View, CA (US)
Filed by Menlo Security, Inc., Mountain View, CA (US)
Filed on Jul. 3, 2023, as Appl. No. 18/217,948.
Application 18/217,948 is a continuation of application No. 17/895,873, filed on Aug. 25, 2022, granted, now 11,741,185.
Application 17/895,873 is a continuation of application No. 17/000,084, filed on Aug. 21, 2020, granted, now 11,468,142, issued on Oct. 11, 2022.
Claims priority of provisional application 62/992,958, filed on Mar. 21, 2020.
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/958 (2019.01); H04L 9/32 (2006.01); H04L 67/06 (2022.01)
CPC G06F 16/958 (2019.01) [H04L 9/32 (2013.01); H04L 67/06 (2013.01)] 27 Claims
OG exemplary drawing
 
15. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
receiving, at a browser isolation system situated between: (1) a client device that is part of an enterprise network, and (2) a server, an indication that a user of a browser executing on the client device is attempting to upload a first file to a destination website served by the server;
obtaining a copy of the first file from the client device;
prompting, in response to determining by the browser isolation system that a credential is required for the browser isolation system to access contents of the first file, the user of the client device for the credential in the browser;
determining a policy to apply to the user's attempted upload of the first file to the destination website, wherein applying the policy includes determining, by the browser isolation system, that the first file should be transmitted to a service configured to alter the first file in accordance with a requirement specified by an administrator of the enterprise network and transmitting the first file to the service, wherein the service is configured to: selectively perform at least one of: (1) adding material to or (2) deleting material from the contents of the first file to form a modified version of the first file; and
receiving the modified version of the first file from the service and transmitting, by the browser isolation system, the modified version of the first file to the server.