Abstract: A web service sandbox system. The web service sandbox system provides a secure mechanism with little to no risk to an origination domain hosting a user agent for the user agent to retrieve content from a potentially insecure web service hosted in another domain and using JSONP to bypass same-origin policy restrictions. The user agent posts a command message to a separate quarantined web session of a sandbox service acting as intermediary between the user agent web session and the web service. The sandbox service makes the actual call to and parses the response from the web service. Scripts from the response are executed only in the quarantined web session of the sandbox service. The resulting “safe” content obtained from the web service by the sandbox service is returned to the user agent where it may be rendered.

Abstract: A web service sandbox system. The web service sandbox system provides a secure mechanism with little to no risk to an origination domain hosting a user agent for the user agent to retrieve content from a potentially insecure web service hosted in another domain and using JSONP to bypass same-origin policy restrictions. The user agent posts a command message to a separate quarantined web session of a sandbox service acting as intermediary between the user agent web session and the web service. The sandbox service makes the actual call to and parses the response from the web service. Scripts from the response are executed only in the quarantined web session of the sandbox service. The resulting “safe” content obtained from the web service by the sandbox service is returned to the user agent where it may be rendered.