US 12,464,030 B2
Self-healing content security policies
Jonathan Kulisz, San Antonio, TX (US); Shutanshu, Campbell, CA (US); Sudip Chakrabarty, San Jose, CA (US); Srinivas Hariharan, Bengaluru (IN); Piyush Pattanayak, Fremont, CA (US); Nishant Kumar Das Pattanaik, Bengaluru (IN); and Anuj Kaul, Dublin, CA (US)
Assigned to eBay Inc., San Jose, CA (US)
Filed by eBay Inc., San Jose, CA (US)
Filed on Jul. 27, 2023, as Appl. No. 18/227,099.
Claims priority of application No. 202311049317 (IN), filed on Jul. 21, 2023.
Prior Publication US 2025/0030747 A1, Jan. 23, 2025
Int. Cl. H04L 29/00 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/205 (2013.01) [H04L 63/1433 (2013.01); H04L 63/20 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
receiving, by at least one server from one or more servers, content security policy (CSP) violation information identifying a CSP violation for a CSP header and a violating source for the CSP violation;
comparing, by at least one server from the one or more servers, the violating source for the CSP violation to a list of trusted sources;
identifying, by at least one server of the one or more services, a first trusted source in the list of trusted sources matching the violating source for the CSP violation;
responsive to identifying the first trusted source as matching the violating source, causing, by at least one server from the one or more servers, a CSP definition associated with the CSP header to include a source value based on the violating source or the first trusted source to provide an updated CSP definition in a repository of CSP definitions;
receiving, by a frontend server, a webpage request from a user device requesting a webpage;
in response to receiving the webpage request, retrieving, by the frontend server, the updated CSP definition from the repository of CSP definitions;
generating, by the frontend server, an updated CSP header based on the updated CSP definition, the updated CSP header including the source value; and
providing, by the frontend server to the user device, the CSP header as a response header for the requested webpage.