CN103955468B - Document display method and device based on browser - Google Patents

Abstract

This application provides a method and device for displaying documents in a browser. The method includes: the browser main process creates a plug-in independent process of the corresponding document processing program according to the request of the user to access the document, and the plug-in independent process is a sub-process of the browser main process; the plug-in independent process initializes the browser page ; The browser page invokes the plug-in of the document processing program to parse the document and display the page. The application can prevent the vulnerability Trojan horse of the document processing program from affecting the use of the browser, thereby preventing the user's computer from being poisoned.

Description

Browser-based document display method and device

The patent application of the present invention is a divisional application of the Chinese invention patent application with the filing date of March 06, 2012, the application number of 201210057484.4, and the title of "A Method and Device for Displaying Documents in a Browser".

technical field

The present application relates to the field of data processing, in particular to a method for displaying documents in a browser, and a device for displaying documents in a browser.

Background technique

The PDF format is an electronic document format. When a user clicks on a PDF file link on the Internet, the system does not directly open the file, but displays a file download window to ask the user whether to download the file. Download the designated PDF file to the hard disk, and then use the Acrobat Reader software, which is a special browser for PDF files, to browse. The operation is cumbersome and time-consuming.

In order to help users better browse PDF files on the Internet, Acrobat Reader has provided IE plug-in function since 4.0, which can use itself as a plug-in of IE browser to add PDF file browsing function to IE. After activating this function, if the user encounters a PDF file when browsing the web, the system will automatically call the Acrobat Reader plug-in to directly display the specified PDF file inside IE, without downloading them to the hard disk for processing, that is, maintaining On the premise that the operation mode of the IE browser remains unchanged, the content that can be browsed is expanded, which greatly facilitates the browsing of PDF files by the majority of users.

The problem existing in the above prior art is that the current PDF program loopholes occur frequently. If the PDF file accessed by the browser is a Trojan horse virus that can trigger the PDF loophole maliciously constructed by an attacker, it will not only cause the browser process to crash and become unusable, but also cause the browser process to crash and become unusable. Downloading and executing a malicious Trojan horse without knowing it will poison the user's computer and may cause economic losses to the user.

Similar to PDF programs, document processing programs such as Word, Excel, and PowerPoint also have multiple vulnerabilities. When the plug-in of the document processing program is called in the browser to open the corresponding document, there will also be problems similar to PDF programs.

Contents of the invention

The technical problem to be solved by this application is to provide a method for displaying documents in a browser, so as to prevent the Trojan horse of a document processing program from affecting the use of the browser, thereby preventing users from being poisoned.

The present application also provides a device for displaying documents in a browser, so as to ensure the practical application and realization of the above method.

In order to solve the above problems, this application discloses a method for displaying documents in a browser, including:

The browser main process creates a plug-in independent process of the corresponding document processing program according to the user's request to access the document, and the plug-in independent process is a sub-process of the browser main process;

The plug-in independent process initializes the browser page;

The browser page invokes the plug-in of the document processing program to parse the document and display the page.

Preferably, the method also includes:

The operating path of the plug-in independent process is set to point to a preset virtual folder.

Preferably, the step of creating a plug-in independent process of the corresponding document processing program according to the request of the user to access the document by the main browser process includes:

The browser main process judges whether the suffix of the access URL in the user's request to access the document is a document identifier;

If yes, according to the document identification, create a corresponding independent process of the plug-in of the document processing program.

Preferably, the plug-in of the document processing program is installed on the user equipment, and the steps of calling the plug-in of the document processing program on the browser page to parse the document and displaying the page include:

The browser page calls the plug-in of the document processing program;

The plug-in of the document processing program extracts the corresponding document according to the request of the user to access the document, and parses the content of the document;

The browser page acquires the content of the document and displays it on the page.

Preferably, the document includes a PDF document, a Word document, a PowerPoint document or an Excel document, and the document identifier includes doc, docx, pdf, xls or ppt.

The present application also provides a device for displaying documents in a browser, including:

The independent process creation module is used for the main process of the browser to create a plug-in independent process of the corresponding document processing program according to the request of the user to access the document, and the independent process of the plug-in is a sub-process of the main browser process;

The page initialization module is used for the independent process of the plug-in to initialize the browser page;

The document display module is used for the browser page to invoke the plug-in of the document processing program to parse the document and perform page display.

Preferably, the device also includes:

The operation path setting module is used to set the operation path of the plug-in independent process to point to a preset virtual folder.

Preferably, the independent process creation module includes:

The suffix judging sub-module is used for the browser main process to judge whether the suffix of the access URL in the user's request for accessing the document is a document identifier;

The process creation sub-module is used to create a plug-in independent process of the corresponding document processing program according to the document identification when the suffix of the URL is the document identification.

Preferably, a plug-in of the document processing program is installed on the user equipment, and the document display module includes:

The plug-in calling submodule is used for the browser page to call the plug-in of the document processing program;

The document parsing sub-module is used for the plug-in of the document processing program to extract the corresponding document from the request of the user to access the document, and parse the content of the document;

The page display submodule is used for the browser page to obtain the content of the document and display the page.

Preferably, the document includes a PDF document, a Word document, a PowerPoint document or an Excel document, and the document identifier includes doc, docx, pdf, xls or ppt.

Compared with the prior art, the present application has the following advantages:

Through this application, when the browser receives a request from the user to view a document, it establishes a plug-in process of the document processing program. The plug-in process and the browser process are independent of each other. After the plug-in process initializes a new browser page, the browser page calls the plug-in Parse the corresponding document and display it. Since the plug-in process is independent, it only has the permission to open the document and has no permission to run any program, so that the Trojan horse attacking the vulnerability of the document processing program cannot run. At the same time, because the plug-in process is separated from the browser process, Make the browser process unaffected by plug-ins.

In addition, this application can also protect the plug-in process, set the operation path of the independent process of the plug-in to point to the preset virtual folder, and direct the files generated and modified by the program to the virtual folder, and the operation of the plug-in will not affect the In this way, even if there is an advanced trojan that can bypass the permission control of the independent process of the plug-in, it can only infect virtual files in the virtual folder, and has no impact on real system files.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required in the embodiments. Obviously, the accompanying drawings in the following description are only some of the present invention. Embodiments, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

FIG. 1 is a flow chart of Embodiment 1 of a method for displaying documents in a browser of the present application;

FIG. 2 is a flowchart of Embodiment 2 of a method for displaying documents in a browser of the present application;

FIG. 3 is a structural block diagram of Embodiment 1 of an apparatus for displaying documents in a browser of the present application;

FIG. 4 is a structural block diagram of Embodiment 2 of an apparatus for displaying documents in a browser of the present application.

detailed description

In order to make the above objects, features and advantages of the present application more obvious and comprehensible, the present application will be further described in detail below in conjunction with the accompanying drawings and specific implementation methods. Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. All other embodiments obtained by persons of ordinary skill in the art based on the embodiments of the present invention belong to the protection scope of the present invention.

In the prior art, when a user reads a document in a browser, the system can directly call a plug-in of a document processing program to directly open the document on the page. When the document processing program has a vulnerability, if the document accessed by the browser is a Trojan horse virus that can trigger the document processing program vulnerability, it may cause the browser process to crash, further causing the user's computer to be poisoned.

One of the core ideas of this application is that when a user requests to open a document in a browser, a plug-in process of the document processing program is established, which is independent of the browser process and only has the authority to open the document, so that the Trojan horse virus cannot run and protect The browser process is not affected.

Referring to FIG. 1 , it shows a flow chart of Embodiment 1 of a method for displaying documents in a browser of the present application. The method may specifically include the following steps:

Step 101, the browser main process creates a corresponding plug-in independent process of the document processing program according to the user's request for document access, and the plug-in independent process is a child process of the browser main process.

In this application, the document may include a PDF document, a Word document, a PowerPoint document or an Excel document, or other types of electronic documents. To call the plug-in of the document processing program in the browser to open the document, firstly, the reading plug-in ReaderOCX needs to be initialized, that is, the plug-in of the document processing program corresponding to the document needs to be installed, and the plug-in can be installed on the user device.

In a preferred embodiment of the present application, the step 101 may include:

Sub-step S11, the browser main process judges whether the suffix of the access URL in the user's request for accessing the document is a document identifier, and if so, executes sub-step S12;

Sub-step S12, according to the document identifier, create a plug-in independent process of the corresponding document processing program.

The document identifier is the suffix of the document. For example, doc is the suffix of the Word document, and the corresponding processing program is Microsoft Office Word97-2003; docx is also the suffix of the Word document, and the corresponding processing program is Microsoft Office Word2007; pdf is the suffix of the PDF document. The corresponding processing program is Acrobat Reader; xls is the suffix of the Excel document, and the corresponding processing program is Microsoft Office Excel; ppt is the suffix of the PowerPoint document, and the corresponding processing program is Microsoft Office PowerPoint.

When a user needs to access a document in a browser, the suffix of the requested URL received by the browser main process is the document identifier of the document. Based on the identifier, the browser main process can determine that the user requests to view the document in the browser. For example, if the user requests to visit the website http://www.wendang.com/test.pdf, and its suffix is pdf, the main process of the browser will create an independent process of the Acrobat Reader plug-in according to the identification of pdf.

The plug-in independent process is a child process of the browser main process, which is independent of the browser main process. The independent process can be created by the corresponding independent process creation function (CreateReaderActiveXProcess). For example, under the Windows operating system, an independent process can be created through CreateProcess. In linux Under the operating system, an independent process can be created through the fork() function. The independent process of the plug-in only has the permission to display the document, and does not have the permission to run any program. If the Trojan horse cannot run, it cannot attack the vulnerability of the document processing program. Even if the plug-in process is attacked, it will not affect the browser process, and the user can continue to browse. Web page.

Step 102, the plug-in independent process initializes the browser page.

In this application, the independent process of the plug-in is independent of the main process of the browser, and does not involve any data communication with the main process of the browser. The independent process of the plug-in is the rendering process, which opens the document in a separate page. Therefore, first you need to initialize a browser page, that is, initialize the WebBrowser control. WebBrowser is a container packaged by Microsoft and is used to host Windows applications to render web pages and documents supported by other browsers. A page is a WebBrowser container. The independent process calls the interface of the WebBrowser control to complete the initialization.

Step 103, the browser page invokes the plug-in of the document processing program to parse the document and display the page.

In a preferred embodiment of the present application, the step 102 may include:

Sub-step S21, the browser page calls the plug-in of the document processing program;

Sub-step S22, the plug-in of the document processing program extracts the corresponding document according to the request of the user to access the document, and parses the content of the document;

Sub-step S23, the browser page obtains the content of the document and displays it on the page.

After the WebBrowser is initialized, it can call the plug-in of the installed document processing program to parse the document. The plug-in of the document processing program has a unique identifier CLSID in the system, and the WebBrowser can find the plug-in of the corresponding document processing program through the unique identifier, and the call is completed by calling the relevant interface of the plug-in. The plug-in extracts the corresponding document from the server according to the request of the user to access the document, then parses out the content of the document, and passes the content of the document to the WebBrowser for page display.

Referring to FIG. 2 , it shows a flow chart of Embodiment 2 of a method for displaying documents in a browser of the present application. The method may specifically include the following steps:

Step 201, the browser main process creates a corresponding plug-in independent process of the document processing program according to the user's request for document access, and the plug-in independent process is a child process of the browser main process.

Step 202, setting the operation path of the plug-in independent process to point to a preset virtual folder.

Establishing a plug-in independent process can prevent Trojan horses from running, but a small number of advanced Trojan horses can bypass security protection and enter the system. In order to avoid Trojan virus in the system, you can create a virtual folder in the system. The virtual folder is equivalent to a virtual isolation space in the system. After the independent process of the plug-in is established, set the operation path of the independent process of the plug-in to point to the preset Virtual folder, so that the files generated and modified by the plug-in will be directed into the virtual folder and isolated from the system. In this way, even if there is an advanced Trojan horse that can bypass the permission control of the independent process of the plug-in, it can only infect virtual files in the virtual folder, without any impact on real system files.

In a specific implementation, if the plug-in of the document processing program is installed on the user device, the independent process of the plug-in can be added to the browser security sandbox, which is equivalent to redirecting all file operations of the independent process to the security sandbox. The security sandbox is like building a virtual isolation space in the system, and each operation of an independent process is equivalent to being carried out in the sandbox. When you click on the Trojan horse website and download a virus or account hacking Trojan horse, the Trojan horse virus will run in this isolated space. The Trojan horse infects only virtual system files and will not have any impact on real system files.

Step 203, the plug-in independent process initializes the browser page.

Step 204, the browser page invokes the plug-in of the document processing program to parse the document and display the page.

Wherein, the plug-in of the document processing program may be installed on the user equipment.

To sum up, this application provides a method for displaying documents in a browser. Through this application, when a browser receives a request from a user to view a document, it establishes a plug-in process of a document processing program, which is independent of the browser process. After the independent process of the plug-in initializes a new browser page, the browser page calls the plug-in to parse the corresponding document and display it. Since the independent plug-in process only has the permission to open the document and does not have the permission to run any program, it makes the attack document processing The Trojan horse of the vulnerability of the program cannot run, and at the same time, because the plug-in process is separated from the browser process, the browser process is not affected by the plug-in.

In addition, this application can also protect the plug-in process, set the operation path of the independent process of the plug-in to point to the preset virtual folder, and direct the files generated and modified by the program to the virtual folder, and the operation of the plug-in will not affect the In this way, even if there is an advanced trojan that can bypass the permission control of the independent process of the plug-in, it can only infect virtual files in the virtual folder, and has no impact on real system files.

For the method embodiment, for the sake of simple description, it is expressed as a series of action combinations, but those skilled in the art should know that the application is not limited by the described action sequence, because according to the application, certain steps Other sequences or concurrently may be used. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions and modules involved are not necessarily required by this application.

Referring to FIG. 3 , it shows a structural block diagram of Embodiment 1 of an apparatus for displaying documents in a browser of the present application. The apparatus may specifically include the following modules:

The independent process creation module 301 is used for the main process of the browser to create a plug-in independent process of the corresponding document processing program according to the request of the user to access the document, and the independent process of the plug-in is a sub-process of the main browser process;

The page initialization module 302 is used for the independent process of the plug-in to initialize the browser page;

The document display module 303 is used for the browser page to call the plug-in of the document processing program to parse the document and perform page display.

In a preferred embodiment of the present application, the independent process creation module 301 may include:

The suffix judging sub-module is used for the browser main process to judge whether the suffix of the access URL in the user's request for accessing the document is a document identifier;

The process creation sub-module is used to create a plug-in independent process of the corresponding document processing program according to the document identification when the suffix of the URL is the document identification.

In a preferred embodiment of the present application, a plug-in of the document processing program may be installed on the user equipment, and the document display module may include:

The plug-in calling submodule is used for the browser page to call the plug-in of the document processing program;

The document parsing sub-module is used for the plug-in of the document processing program to extract the corresponding document from the request of the user to access the document, and parse the content of the document;

The page display submodule is used for the browser page to obtain the content of the document and display the page.

In a preferred embodiment of the present application, the document may include a PDF document, a Word document, a PowerPoint document or an Excel document, and the document identifier may include doc, docx, pdf, xls or ppt.

Referring to FIG. 4 , it shows a structural block diagram of Embodiment 2 of an apparatus for displaying documents in a browser of the present application. The apparatus may specifically include the following modules:

The independent process creation module 401 is used for the browser main process to create the plug-in independent process of the corresponding document processing program according to the request of the user to access the document, and the plug-in independent process is a sub-process of the browser main process;

An operation path setting module 402, configured to set the operation path of the plug-in independent process to point to a preset virtual folder.

The page initialization module 403 is used for the independent process of the plug-in to initialize the browser page;

The document presentation module 404 is used for the browser page to call the plug-in of the document processing program to parse the document and perform page presentation.

Wherein, the plug-in of the document processing program may be installed on the user equipment.

To sum up, this application provides a device for displaying documents in a browser. Through this application, the independent process creation module establishes a plug-in process of a document processing program based on the user's request to view documents, which is independent of the browser process. After the page initialization module uses the plug-in independent process to initialize a new browser page, the browser page in the document display module will call the plug-in to parse the corresponding document and display it. Since the plug-in process is independent, it only has the authority to open the document and does not run any programs. permissions, so that the Trojan horse attacking the vulnerability of the document processing program cannot run, and at the same time, because the plug-in process is separated from the browser process, the browser process is not affected by the plug-in.

In addition, the operation path setting module can also set the operation path of the independent process of the plug-in to point to a preset virtual folder, and direct the files generated and modified by the program to the virtual folder, and the operation of the plug-in will not affect the system files , to protect the plug-in process, so that even if there is an advanced Trojan that can bypass the permission control of the independent process of the plug-in, it can only infect virtual files in the virtual folder, and has no impact on real system files.

Since the device embodiment basically corresponds to the method embodiment shown in Figure 1 and Figure 2 above, for details not described in this embodiment, you can refer to the relevant description in the previous embodiment, and will not go into details here .

The application can be used in numerous general purpose or special purpose computing system environments or configurations. Examples: personal computers, server computers, handheld or portable devices, tablet-type devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, including A distributed computing environment for any of the above systems or devices, etc.

This application may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The application may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including storage devices.

As used herein, the terms "comprises," "comprises," or any other variation thereof are intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus that includes a set of elements includes not only those elements, but also includes not expressly included other elements listed, or also include elements inherent in such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

A method for displaying documents in a browser and a device for displaying documents in a browser provided by this application have been introduced above in detail. In this paper, specific examples are used to illustrate the principles and implementation methods of this application. Explain that the description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present application, there will be changes in the specific implementation and application scope In summary, the contents of this specification should not be construed as limiting the application.

Claims (20)

1. A browser-based document display method, comprising: When receiving a request from a user to access a document, the browser main process creates a sub-process corresponding to the document, and the sub-process is independent of the browser main process; a browser page is initialized by the child process; The browser page invokes a plug-in of a document processing program corresponding to the document to parse the document; The browser page displays the parsed document content. 2. The method of claim 1, further comprising: The operation path of the subprocess is set to point to a preset virtual folder or sandbox. 3. The method according to claim 2, wherein, when receiving a request from a user to access a document, creating a subprocess corresponding to the document by the browser main process further comprises: The browser main process obtains the suffix of the document according to the user's request to access the document; According to the suffix of the document, a plug-in independent process of the document processing program corresponding to the suffix of the document is created, and the independent process of the plug-in is a child process of the main browser process. 4. The method of claim 3, wherein the plug-in independent process is a rendering process. 5. The method according to any one of claims 1 to 4, wherein the document comprises a PDF document, a Word document, a PowerPoint document or an Excel document. 6. A browser-based document display device, comprising: The process creation module is adapted to create a sub-process corresponding to the document by the main browser process when receiving a request from a user to access a document, and the sub-process is independent of the main browser process; A page initialization module, suitable for initializing a browser page by the subprocess; A calling module, adapted for the browser page to call a plug-in of a document processing program corresponding to the document to analyze the document; The display module is adapted to display the parsed document content on the browser page. 7. The apparatus of claim 6, further comprising: The operation path setting module is adapted to set the operation path of the sub-process to point to a preset virtual folder or sandbox. 8. The apparatus of claim 7, wherein the process creation module is further adapted to: Knowing the suffix of the document according to the user's request to access the document; According to the suffix of the document, a plug-in independent process of the document processing program corresponding to the suffix of the document is created, and the independent process of the plug-in is a child process of the main browser process. 9. The apparatus of claim 8, wherein the plug-in independent process is a rendering process. 10. The device according to any one of claims 6 to 9, wherein the document comprises a PDF document, a Word document, a PowerPoint document or an Excel document. 11. A browser-based document display method, comprising: Receive user requests to access documents; According to the document type of the document in the request, create a plug-in independent process for the plug-in of the document processing program corresponding to the document type, and the plug-in independent process is a sub-process of the browser main process; The document is rendered by the plug-in independent process. 12. The method according to claim 11, wherein, before displaying the document by the plug-in independent process, further comprising: The operation path of the plug-in independent process is set to point to a preset virtual folder or sandbox. 13. The method of claim 12, wherein rendering the document by the plug-in independent process further comprises: a browser page is initialized by the plug-in independent process; The browser page invokes the plug-in of the document processing program to analyze the document; The browser page displays the parsed document content on a page. 14. The method of claim 13, wherein the plug-in independent process is a rendering process. 15. The method according to any one of claims 11 to 14, wherein the document comprises a PDF document, a Word document, a PowerPoint document or an Excel document. 16. A browser-based document presentation device, comprising: a receiving module adapted to receive a user's request for accessing a document; The plug-in independent process creation module is suitable for creating a plug-in independent process for the plug-in of the document processing program corresponding to the document type according to the document type of the document in the request, and the plug-in independent process is a child of the browser main process process; The display module is suitable for displaying the document by the independent process of the plug-in. 17. The apparatus of claim 16, further comprising: The operation path setting module is adapted to set the operation path of the plug-in independent process to point to a preset virtual folder or sandbox. 18. The apparatus of claim 17, wherein the display module further comprises: A page initialization module, adapted to initialize a browser page by the plug-in independent process; A calling module, adapted for the browser page to call the plug-in of the document processing program to analyze the document; The display sub-module is suitable for displaying the parsed document content on the browser page. 19. The apparatus of claim 18, wherein the plug-in independent process is a rendering process. 20. The apparatus according to any one of claims 16 to 19, wherein the document comprises a PDF document, a Word document, a PowerPoint document or an Excel document.