The guard that stops our automation from following a link

Описание и применение

Защита от перехода на сторонние сайты в автоматизированных рабочих процессах, использующих запись и воспроизведение действий, реализована с помощью проверки домена (eTLD+1) и блокировки переходов на другие сайты.

Задача

Automated form‑filling workflows can unintentionally navigate to third‑party sites that require account creation, payment, or other actions, leading to unintended account creation and data leakage.

Результат

The guard prevents automated workflows from following redirects to external domains, ensuring that only safe, same‑site interactions are executed and reducing the risk of unintended account creation.

Рабочий процесс

• 1. User records a reply flow on the aggregator site.
• 2. During recording, any step that navigates to a different registrable domain is flagged and not recorded.
• 3. On replay, the guard checks the current URL’s registrable domain against the original domain.
• 4. If the domains differ, the guard triggers an "offsite" block and aborts the replay.
• 5. The user is notified of the specific guard that tripped.

Доказательства

Guard at the point data enters the system, not only at the point it is used. A recorded artifact is a persisted decision, and persisting a dangerous one and relying on downstream checks means one missed check turns into a repeatable incident.

Источник

Every rule here is deterministic and runs before anything is typed or clicked. None of it is delegated to a model — the whole point is that the refusals are predictable and auditable.

Источник