Application execution in a restricted application execution environment

摘要

Application programming interface (API) calls made by an application are intercepted at runtime. A determination is made as to whether each intercepted API call is allowed or blocked by a restricted application execution environment. Each API call that is blocked by the restricted application execution environment is modified so that the API call is allowable such as, for instance, modifying the API call to execute against a shadow resource. Remediation code might also be executed at runtime to reformat the API call so that it is allowed to execute in the restricted application execution environment.

主权项

1. A computer-implemented method comprising performing computer-implemented for:
intercepting, by a computing device, an application programming interface (API) call designated to invoke a function to be executed against a resource; determining, by the computing device, if the intercepted API call is blocked from being executed against the resource; and if the intercepted API call is blocked, causing, by the computing device, the function to be executed against a copy of the resource in response to the API call, wherein the copy of the resource comprises a version of the resource.