Security model for a layout engine and scripting engine

摘要

Various embodiments provide an interface between a Web browser's layout engine and a scripting engine. The interface enables objects from the layout engine to be recognized by a memory manager in the scripting engine and interact in a streamlined, efficient manner. In accordance with one or more embodiments, the interface allows browser layout engine objects to be created as objects that are native to the scripting engine. Alternately or additionally, in some embodiments, the native objects are further configured to proxy functionality between the layout engine and the scripting engine.

主权项

1. A computer-implemented method comprising:
creating at least one layout engine object in a layout engine memory space; creating at least one scripting language object in a scripting engine memory space; creating a custom object that is configured to represent relationships between objects in the scripting engine memory space and objects in the layout engine memory space, the custom object comprising a pointer to the at least one scripting language object and a pointer to the at least one scripting language object, and the custom object providing a linkage between the at least one scripting language object, and the at least one layout engine object; and using at least one security module to provide secure information transfer during access to the at least one layout engine object and the at least one scripting language object, the security module configured to enable controlled access to an Application Programming Interface (API) associated with a scripting language of the scripting engine.