Content management system supporting third-party code

Patent metadata

Field	Value
Publication number	US-10979235-B2
Application number	US-201715789809-A
Country	US
Kind code	B2
Filing date	Oct 20, 2017
Priority date	Oct 20, 2017
Publication date	Apr 13, 2021
Grant date	Apr 13, 2021

Abstract

The disclosed technology relates to a system configured to retrieve a content item from a first domain of a content management system, analyze the content item to identify a portion of the content item that references third-party code, retrieve the third-party code from a second domain of the content management system, and execute the third-party code in the portion of the content item.

First claim

What is claimed is:

1. A computer-implemented method comprising:
retrieving, by a client device, a content item from a first domain of a content management system;
identifying, by the client device, a portion of the content item that references third-party code stored in a second domain of the content management system and isolated from the first domain of the content management system;
requesting, by the client device, the third-party code from the second domain of the content management system;
generating, by the client device, third-party content by executing the third-party code;
inserting, by the client device, the third-party content into the portion of the content item;
sending, by the client device to the first domain of the content management system, a request to be relayed by the first domain for additional third-party content from a source external to the content management system;
receiving, from the first domain of the content management system, the additional third-party content in response to the request;
rendering, by the client device, the content item with the third-party content and the additional third-party content; and
maintaining a same-origin policy configured to restrict access of the third-party code to content of the content item located outside of the portion of the content item that references the third-party code based on having different domains.

2. The computer-implemented method of claim 1 , wherein when the client device lacks a copy of credentials for accessing the additional third-party content, the client device gains access to the additional third-party content using credentials stored on the content management system.

3. The computer-implemented method of claim 1 , further comprising:
generating, based on execution of the third-party code, data associated with the third-party code; and
transmitting the data associated with the third-party code to the content management system for storage.

4. The computer-implemented method of claim 1 , further comprising:
generating, based on execution of the third-party code, data associated with the third-party code; and
transmitting the data associated with the third-party code to the source external to the content management system for storage.

5. The computer-implemented method of claim 1 , wherein execution of the third-party code is sandboxed from the content item.

6. The computer-implemented method of claim 5 , wherein the third-party code is configured to retrieve data associated with the content item via a postMessage interface.

7. The computer-implemented method of claim 1 , wherein the third-party code originates from a third-party that is external to the content management system and separate from the client device.

8. The computer-implemented method of claim 1 , wherein the portion of the content item that references the third-party code is an iframe.

9. The computer-implemented method of claim 1 , wherein the portion of the content item that references the third-party code is a hidden iframe and wherein the third-party content is non-displayable content rendered in the hidden iframe.

10. The computer-implemented method of claim 1 , wherein the third-party content comprises at least one of a picture, a video, a document, an audio file, or a widget.

11. A non-transitory computer readable medium comprising instructions, the instructions, when executed by a computing system, cause the computing system to:
retrieve, by a client device, a content item from a first domain of a content management system;
identify, by the client device, a portion of the content item that references third-party code stored in a second domain of the content management system;
request, by the client device, the third-party code from the second domain of the content management system;
execute, by the client device, the third-party code in the portion of the content item, the third-party code retrieved from the second domain of the content management system that is isolated from the first domain of the content management system, wherein the third-party code is executed according to a same-origin policy, wherein access is restricted based on code with different origins;
send, by the client device to the first domain of the content management system, a request to be relayed by the first domain for third-party content from a source external to the content management system;
receive, from the first domain of the content management system, the third-party content in response to the request; and
render, by the client device, the content item with the third-party content.

12. The non-transitory computer readable medium of claim 11 , wherein the executing of the third-party code in the portion of the content item causes the computing system to:
produce additional third-party content;
insert the additional third-party content into the portion of the content item; and
render the content item with the additional third-party content.

13. A client device comprising:
one or more processors; and
at least one non-transitory computer-readable medium storing instructions that, when executed by the one or more processors, cause the one or more processors to:
retrieve, by the client device, a content item from a first domain of a content management system;
identify, by the client device, a secure portion of the content item that references third-party code, the third-party code stored in a second domain of the content management system and isolated from the first domain of the content management system;
request, by the client device, the third-party code from the second domain of the content management system;
execute, by the client device, the third-party code in the secure portion of the content item, wherein the third-party code is executed according to a same-origin policy, wherein access is restricted based on code with different origins;
send, by the client device to the first domain of the content management system, a request to be relayed by the first domain for third-party content from a source external to the content management system;
receive, from the first domain of the content management system, the third-party content in response to the request; and
render, by the client device, the content item with the third-party content.

14. The client device of claim 13 , wherein the third-party code was provided to the content management system by the source external to the content management system.

15. The client device of claim 14 , wherein the instructions further cause the one or more processors to:
retrieve, based on the executing of the third-party code, content from the source external to the content management system.

16. The client device of claim 14 , wherein the instructions further cause the one or more processors to:
retrieve, based on the executing of the third-party code, data associated with the third-party code from the content management system.

17. The client device of claim 13 , wherein the executing of the third-party code causes the one or more processors to:
produce additional third-party content; and
render the content item with the additional third-party content.

18. The client device of claim 17 , wherein when the client device lacks a copy of credentials for accessing the additional third-party content, the client device gains access to the additional third-party content using credentials stored on the content management system.

19. The client device of claim 13 , wherein the instructions further cause the one or more

Assignees

• Dropbox Inc

Inventors

• Embiricos Alexander
• Broussard Matt
• Wu Willy
• Lee Jennifer
• Kofman Igor
• Palkovic Aj

Classifications

• H04L67/53 Primary

  using third party service providers · CPC title

• H04L12/1822

  Conducting the conference, e.g. admission, detection, selection or grouping of participants, correlating users to one or more conference sessions, prioritising transmission · CPC title

• H04L12/1813 Primary

  for computer conferences, e.g. chat rooms (instant messaging H04L51/04; protocols for multimedia communication H04L65/1101; arrangements for multi-party communication H04L65/403; telephonic conference arrangements H04M3/56; television conference systems H04N7/15) · CPC title

• G06F9/547

  Remote procedure calls [RPC]; Web services · CPC title

• H04L67/20

  Electricity · mapped topic