Using a URI Whitelist

Abstract

A method and/or system for using a URI whitelist may include receiving a request to approve an application for release in an application store. The request may comprise application data. The application data may comprise a resource manifest and/or a Uniform Resource Identifier (URI) whitelist. The resource manifest may comprise, for example, one or more resource items. The URI whitelist may comprise, for example, one or more URI items. The request may be analyzed based on application data. A determination may be made whether the applications may be released in the application store based on the analyzing of the applications data. A request to access a particular URI may be received. A determination of whether to grant the request may be based on a resource manifest and/or a URI whitelist associated with the application.

1 - 7 . (canceled) 
     
     
         8 . A method, comprising:
 in an electronic device comprising a memory, wherein the memory comprises an operating system;
 receiving, from an application, a request to access a particular Uniform Resource Identifier (URI), wherein the application is running in the operating system; 
 determining a resource associated with the particular URI; 
 determining a resource manifest associated with the application, wherein the resource manifest comprises one or more resource items; 
 determining whether the resource corresponds to at least one of the one or more resource items; and 
 if the resource corresponds to at least one of the one or more resource items:
 determining a URI whitelist associated with the application, wherein the URI whitelist comprises one or more URI items; 
 determining whether the particular URI corresponds to at least one of the one or more URI items; 
 if the particular URI corresponds to at least one of the one or more URI items, granting the request to access the particular URI; and 
 if the particular URI does not correspond to any one of the one or more URI items, denying the request to access the particular URI. 
 
   
     
     
         9 . The method of  claim 8 , further comprising:
 if the resource does not correspond to any one of the one or more resource items, denying the request to access the particular URI.   
     
     
         10 . The method of  claim 8 , further comprising:
 if the particular URI does not correspond to any one of the one or more URI items, presenting a notification on the electronic device, wherein the notification comprises information indicative of the denial of the request to access the particular URI.   
     
     
         11 - 17 . (canceled) 
     
     
         18 . A system, comprising:
 one or more processors, the one or more processors being operable to:
 receive, from an application, a request to access a particular Uniform Resource Identifier (URI); 
 determine a resource associated with the particular URI; 
 determine a resource manifest associated with the application, wherein the resource manifest comprises one or more resource items; 
 determine whether the resource corresponds to at least one of the one or more resource items; and 
 if the resource corresponds to at least one of the one or more resource items:
 determine a URI whitelist associated with the application, wherein the URI whitelist comprises one or more URI items; 
 determine whether the particular URI corresponds to at least one of the one or more URI items; 
 if the particular URI corresponds to at least one of the one or more URI items, grant the request to access the particular URI; and 
 if the particular URI does not correspond to any one of the one or more URI items, deny the request to access the particular URI. 
 
   
     
     
         19 . The system of  claim 18 , wherein the one or more processors is further operable to:
 if the resource does not correspond to any one of the one or more resource items, deny the request to access the particular URI.   
     
     
         20 . The system of  claim 18 , wherein the one or more processors is further operable to:
 if the particular URI does not correspond to any one of the one or more URI items, present a notification on the electronic device, wherein the notification comprises information indicative of the denial of the request to access the particular URI.