JP2008186160A - Document display apparatus and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enhance the security and convenience of a document display apparatus for displaying structured documents described in HTML and the like. <P>SOLUTION: The document display apparatus comprises a Web server 20 and a Web browser 10 for acquiring and displaying document files from the Web server 20. The Web browser 10 comprises a communication part 11 for sending a request to acquire a document file to the Web server 20 of the local host or a Web server of an external apparatus and receiving a response to the acquisition request, an interpreter 14 for executing a script described in the document file included in the received response, and a browser control part 16 for identifying the response source server and controlling the script execution in accordance with the identified server. If the response source is the external apparatus server, the browser control part 16 restricts the script execution. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a document display device having a browser function for displaying a structured document described in HTML (HyperText Markup Language) or the like.

  In information devices such as so-called office automation (OA) devices, home appliances, mobile phones and PDAs (Personal Digital Assistants), status display and display for performing various settings are performed using a Web browser. There are some (see, for example, Patent Documents 1 and 2). The web browser is a document browser that displays a structured document described in a markup language such as HTML used in WWW (World Wide Web).

  The web browser has a function of accepting input of text, commands, etc. or transmitting a request to the server in accordance with the contents described in the document to be displayed. Therefore, using such a function of a web browser, an operation panel is replaced with a screen displayed on the web browser in various devices as described above.

  In addition, in this type of structured document, a script represented by JavaScript (trademark of Sun Microsystems, Inc.) can be described. When displaying a structured document, the web browser executes a script described in the structured document. Therefore, by describing a script in a structured document, a dynamic function can be given to a page displayed on a web browser.

Japanese Patent Laid-Open No. 2002-31231 JP 2002-366417 A

  An object of the present invention is to improve safety and convenience in a document display device that displays a structured document described in HTML or the like.

  In order to achieve the above object, the present invention is realized as the following document display device. The apparatus includes a server that provides a document file and a browser that acquires the document file from the server and displays the document file on a display device. The browser sends a document file acquisition request to a server in the apparatus or a server of an external device. A communication means for transmitting and receiving a response to the acquisition request; a script execution means for analyzing a document file included in the response received by the communication means and extracting and executing a script described in the document file; And a control unit that specifies a server that is a transmission source of the response based on the acquisition request or the response received by the communication unit, and controls execution of the script by the script execution unit according to the specified server.

More specifically, the control means identifies whether the response transmission source is a server in the apparatus or a server of the external apparatus. If the response transmission source is a server of the external apparatus, the script is executed by the script execution means. Restrict execution.
Further, the control means has a list of identification information for identifying the server, which is information included in the header of the acquisition request or the header of the response, and the server that is the transmission destination of the document file acquisition request or the transmission source of the response. When the identification information is not registered in the list, script execution by the script execution unit is restricted.

More specifically, the control means does not transmit the data requested by the script as the script execution restriction.
The control means does not refer to or execute a script that is externally referenced from the acquired document file as a script execution restriction.

  Preferably, the server of the document display device receives a document file acquisition request from a browser in the device or a browser of an external device, and transmits a response to the acquisition request, and a storage in which the document file is held. The document acquisition unit that acquires the document file corresponding to the acquisition request received from the device by the communication unit, and the browser that is the transmission destination of the response based on the response or the acquisition request received by the communication unit are specified and specified. Editing means for editing the description of the document file acquired by the document acquisition means in accordance with the browser.

  Another document display device according to the present invention transmits a document file acquisition request to a server and receives a response to the acquisition request, and analyzes the document file included in the response received by the communication unit. Display means to be displayed on the display device, script execution means for analyzing the document file included in the response received by the communication means and extracting and executing the script described in the document file, and an acquisition request or communication means. Control means for identifying whether or not the server that sent the response is a server that exists on the local host based on the received response; and if the server is not a server that exists on the local host, control means for restricting script execution by the script execution means; Is provided.

  Preferably, the control unit has a list of identification information for identifying the server, which is information included in the header of the acquisition request or the header of the response, and is a transmission destination of the acquisition request of the document file or a response transmission source. If the identification information of a server is registered in the list, the script execution restriction by the script execution means is canceled even if the server is not a server existing on the local host.

  The present invention also provides a computer, server means for providing a document file, communication means for transmitting a document file acquisition request to the server means or a server of an external device, and receiving a response to the acquisition request, and the communication means. Analyzing the document file included in the response received by the display means to display on the display device, and extracting the script described in the document file by analyzing the document file included in the response received by the communication means Script execution means to be executed, and control means for identifying the response transmission source based on the acquisition request or the response received by the communication means, and controlling execution of the script by the script execution means in accordance with the identified response transmission source It is also realized as a program characterized by functioning as

More specifically, this program identifies, as a function of the control means, whether the response transmission source is a server means or a server of an external device. If the response transmission source is a server of the external device, the program execution means Causes the computer to execute a process that restricts script execution.
Further, as a function of the control means, it refers to a list of identification information that is information included in the header of the acquisition request or the header of the response and identifies the server, and is a transmission destination of a document file acquisition request or a response transmission source If the server identification information is not registered in the list, the computer is caused to execute processing for restricting script execution by the script execution means.

  Furthermore, the present invention provides a computer for transmitting a document file acquisition request to a server and receiving a response to the acquisition request, and analyzing and displaying the document file included in the response received by the communication unit. Display means to be displayed on the device, script execution means for extracting and executing a script described in the document file by analyzing the document file included in the response received by the communication means, and receiving request or communication means Based on the received response, it is identified whether the server that sent the response is a server that exists on the local host. It is also realized as a program characterized by this.

  In more detail, this program refers to a list of identification information that is included in the header of the acquisition request or the header of the response and identifies the server as a function of the control unit, and sends the transmission destination of the document file acquisition request. Alternatively, if the identification information of the server that is the transmission source of the response is registered in the list, the script execution restriction by the script execution unit is released even if the server is not a server that exists on the local host.

According to the first aspect of the present invention, the server of the acquired HTML document is identified, the execution of the script is controlled, the safety in executing the script is ensured, and the compatibility of the script is ensured for convenience. Can increase the sex.
According to the second aspect of the present invention, in the device that provides the operation and information display of the device by the combination of the server and the browser in the device, the function of the script is comprehensively used for such operation and information display. While providing advanced operations and information display, it is possible to limit the execution of scripts for HTML documents acquired from a server of an external device, thereby improving safety.
According to the third aspect of the present invention, it is possible to restrict the execution of a script for an HTML document acquired from a server other than the servers registered in the list, thereby improving safety and convenience.
According to the invention which concerns on Claim 4, the transmission of the data requested | required by a script can be restrict | limited and safety | security can be improved.
According to the fifth aspect of the invention, it is possible to increase the safety by restricting the reference or execution of the script that is externally referenced from the document file.
According to the sixth aspect of the present invention, it is possible to identify the browser to which the HTML document is transmitted and edit the HTML document, to ensure the compatibility of the script and enhance the convenience.
According to the seventh aspect of the present invention, when the server of the acquired HTML document is not a server existing on the local host, script execution is restricted, safety in script execution is ensured, and script compatibility is achieved. It is possible to secure convenience and enhance convenience.
According to the eighth aspect of the invention, it is possible to construct a more flexible and convenient system by canceling the script execution restriction on the HTML document acquired from the specific server registered in the list.
According to the invention of claim 9, in the computer on which this program is installed, the server of the acquired HTML document is identified, the execution of the script is controlled, the safety in executing the script is ensured, and the script The compatibility can be ensured and the convenience can be improved.
According to the tenth aspect of the present invention, in a computer in which this program is installed, execution of a script is restricted for an HTML document acquired from a server of an external device, and safety and convenience can be improved.
According to the invention of claim 11, in a computer on which this program is implemented, script execution can be restricted for an HTML document acquired from a server other than the server registered in the list, thereby improving safety. .
According to the twelfth aspect of the present invention, in a computer in which this program is installed, if the server of the acquired HTML document is not a server that exists on the local host, script execution is restricted, and security in script execution is limited. Can be ensured, and compatibility of scripts can be ensured to improve convenience.
According to the thirteenth aspect of the present invention, in a computer in which this program is implemented, by removing the script execution restriction for the HTML document acquired from the specific server registered in the list, it is more flexible and convenient. A high system can be constructed.

The best mode for carrying out the present invention (hereinafter referred to as an embodiment) will be described below in detail with reference to the accompanying drawings.
The document display device according to the present embodiment can be applied to various OA devices, household appliances, information devices, and the like. Hereinafter, a case where the document display device is applied to a printer will be described as an example. Note that the form of a document to be processed by the document display apparatus of the present embodiment includes various data such as text, images, and programs.

FIG. 1 is a diagram illustrating a hardware configuration example of a printer to which the present embodiment is applied.
A printer 100 shown in FIG. 1 includes a printing mechanism 110 for performing printing output, and a control device 120 for controlling printing processing by the printing mechanism 110 and other operations of the printer 100. Further, it includes a magnetic disk device 130 as a storage means, a display device 140 as a display means, a touch panel 150 as an input means, and a network interface 160 as a communication means with an external device. Although not particularly illustrated, when the printer 100 is a so-called multifunction machine having a scanner function and a fax function, a mechanism for capturing an image and a configuration for transmitting and receiving an image through a telephone line are further provided.

  The printing mechanism 110 is configured to form and output an image or the like to be printed on a sheet, an image forming unit that forms the image or the like to be printed on the sheet with an image forming material such as toner, and a sheet Transporting means for transporting and discharging after image formation. The image forming method by the image forming means may be any method such as an electrophotographic method, an ink jet method, or an electrostatic induction method.

  The control device 120 is realized by, for example, a program-controlled CPU and a memory such as a RAM and a ROM. The program is installed in, for example, a ROM that is a nonvolatile memory, and the operation of the printer 100 is controlled by the CPU reading this program from the ROM and executing it. The control unit 120 controls the operation of the printing mechanism 110 to execute the print output of the print target, writes / reads data to / from the magnetic disk device 130, displays on the display device 140, accepts an operation by the touch panel 150, It controls operations such as data exchange with an external device via the network interface 160.

  The magnetic disk device 130 holds various setting information used when the control device 120 controls the operation of the printer 100, a pattern image for test printing, an image displayed on the display device 140, and the like. Information such as network setting information used when connecting to an external device over a network, a telephone number used when connecting via a telephone line in the fax function, and counter information for the number of printed output sheets are appropriately stored. .

  The display device 140 is realized by a liquid crystal display (LCD), for example. The display device 140 displays information such as the operating state of the printer 100, the conditions of the print job, and which functions can be used, and notifies the operator. Further, it is also used as a console in combination with the touch panel 150 as input means.

  The touch panel 150 is installed in a state where it is attached to the display surface of the display device 140. When the operator touches the panel surface, touch panel 150 regards the coordinates as an input, determines which part of the display image displayed on display device 140 has been designated, and notifies control device 120. By switching the display image of the display device 140, even if the operation on the touch panel 150 is the same, it is accepted as a different input. As an input unit of the printer 100, an operation panel provided with input keys may be provided and used together with the touch panel 150.

  The network interface 160 is connected to a network such as a LAN (Local Area Network) or the Internet, and receives a print request and data to be printed from an external device. Also, commands and data are received in remote maintenance work, and collected data is transmitted. Further, when the printer 100 has a scanner function, the captured image data is transmitted to an external device.

FIG. 2 is a diagram illustrating a functional configuration of the printer 100 according to the present embodiment.
As shown in FIG. 2, the printer 100 of this embodiment includes a web browser 10 and a web server 20. That is, the apparatus has means for realizing both functions of a web browser and a web server. These functions are realized by, for example, the control device 120 in FIG. That is, as described above, the processing is realized by the CPU executing processing according to a program held in a nonvolatile memory such as a ROM.

  The display on the operation panel of the printer 100 according to the present embodiment is performed by the web browser 10. When the web browser 10 transmits a request to the web server 20, the web server 20 receives the request, generates an HTML document, and responds to the web browser 10. The web browser 10 displays the HTML transmitted from the web server 20 on the operation panel. As a hardware configuration, a document display device is realized by the control device 120, the magnetic disk device 130, the display device 140, and the touch panel 150. The HTML may include a script such as JavaScript, or may include a style sheet such as CSS (Cascadin Style Sheet). Alternatively, instead of HTML, XML (Extensible Markup Language) or XHTML (HTML with HTML grammar) may be used.

  The web browser 10 which is an internal browser of the printer 100 reads setting information from the magnetic disk device 130 and operates according to this information. For example, when the printer 100 is turned on, the web browser 10 obtains the URL of the HTML document to be displayed first after the power is turned on, from the acquired setting information. Then, the web browser 10 transmits an HTML document acquisition request (web request) to the web server 20 according to the TCP / IP (Transmission Control Protocol / Internet Protocol) protocol, and is transmitted from the web server 20 as a response (web response). The HTML document is received and displayed on the display device 140. In addition, when the web browser 10 receives an input from the touch panel 150 and a hyperlink in the displayed document is selected, the web browser 10 transmits an HTML document acquisition request indicated by the hyperlink to the web server 20. The web browser 10 communicates with an external device via the network interface 160 according to the TCP / IP protocol. Then, depending on the web server (web server 20 or external web server) of the communication partner, the execution processing of the acquired HTML document is appropriately changed.

  The web server 20 that is an internal server of the printer 100 transmits and receives HTTP commands and HTML documents according to the TCP / IP protocol. Then, in response to a request from the web browser 10, an HTML document corresponding to the request is read from the HTML documents on the input screen held in the magnetic disk device 130, and returned to the web browser 10. The web server 20 communicates with an external device via the network interface 160 according to the TCP / IP protocol. Then, depending on the type of request by HTTP and the web browser (web browser 10 or external web browser) that is the issue source of the request, the HTML document is edited and transmitted.

FIG. 3 is a diagram showing a detailed functional configuration of the web browser 10.
As shown in FIG. 3, the web browser 10 includes a communication unit 11, a parsing unit 12, an execution unit 13, an interpreter 14, a drawing unit 15, and a browser control unit 16.
The communication unit 11 communicates with a web server (web server 20 or an external web server) according to the TCP / IP protocol. The communication unit 11 is a communication unit that transmits an HTML document acquisition request and receives a response to the acquisition request.

  The parsing unit 12 analyzes the HTML document acquired via the communication unit 11 and generates a DOM (Document Object Model). DOM is an API for manipulating internal information (forming a tree structure) of an XML document. If the acquired HTML document is an XHTML document, a DOM is generated from the document as it is. On the other hand, if the acquired HTML document is a normal (SGML grammar) HTML document, the close tag may be omitted, so the necessary correction such as complementing the omitted close tag is performed. Generate a DOM from

The execution unit 13 analyzes and executes the description of the HTML document based on the DOM generated by the parsing unit 12. When a script such as JavaScript is described in the HTML document, the script is passed to the interpreter 14. Other descriptions are transferred to the drawing unit 15 for drawing.
The interpreter 14 executes the script received from the execution unit 13. The DOM is changed according to the content of the script, or the web server (web server 20 or an external web server) is communicated via the communication unit 11.
The drawing unit 15 renders the HTML document received from the execution unit 13 and displays text and images on the display device 140.

  The parsing unit 12, the execution unit 13, and the interpreter 14 function as script execution means for executing a script described in the HTML document. The parsing unit 12, the execution unit 13, and the drawing unit 15 function as a display unit for displaying an HTML document.

  The browser control unit 16 specifies a web server (web server 20 or an external web server) that is a transmission source of the HTML document from the HTML document acquisition request or the response including the HTML document acquired via the communication unit 11. Then, the processing of the communication unit 11 and the parsing unit 12 is controlled according to the specified web server, and communication by executing the script is limited, or the script is ignored in the HTML document analysis processing. The browser control unit 16 is a control means for controlling the execution of the script described in the HTML document. Details of the control will be described later.

FIG. 4 is a diagram illustrating a detailed functional configuration of the web server 20.
As shown in FIG. 4, the web server 20 includes a communication unit 21, a document acquisition unit 22, and an editing unit 23.
The communication unit 21 communicates with a web browser (the web browser 10 or an external web browser) according to the TCP / IP protocol. The communication unit 21 is a communication unit that receives an HTML document acquisition request and transmits a response to the acquisition request.
The document acquisition unit 22 is a document acquisition unit that accesses the magnetic disk device 130 in response to a request received via the communication unit 21 and searches for and acquires an HTML document specified in the request.

  The editing unit 23 specifies the web browser (the web browser 10 or an external web browser) that is the transmission destination of the HTML document from the request received via the communication unit 21. Then, the HTML document is edited according to the specified web browser. The editing unit 23 is an editing unit that edits the HTML document according to the web browser that is the transmission destination of the HTML document. Details of the editing will be described later.

  By the way, in this embodiment, the web browser 10 and the web server 20 can be connected to an external device. Therefore, the web browser 10 may receive and execute an HTML document transmitted from an external web server. Similarly, the web server 20 may receive a request from the external web browser 10 and transmit an HTML document.

  When the web browser 10 executes an HTML document transmitted from an external web server, it is necessary to consider safety and compatibility in executing the script. The HTML document can execute a dynamic process when it is read by the web browser 10 by describing a script. Accordingly, if the acquired HTML document is executed unconditionally as it is, there is a risk that the printer 100 executes a process that is problematic. For example, processing that causes a failure, downloads a program that causes such failure, and transmits user information held in the magnetic disk device 130 without permission.

  In recent years, a technique called Ajax (Asynchronous JavaScript + XML) has become widespread as a user interface technique using a web browser. This is because the HTTP communication function of JavaScript installed in the web browser is used to communicate with the web server asynchronously, and the screen is dynamically refreshed without redrawing (redrawing) the entire screen. This is a technique for rewriting. By using this Ajax, the operability of a screen rendered based on an HTML document, such as an input screen displayed by the web browser 10 in this embodiment, is greatly improved. However, with Ajax, it is difficult to ensure safety because JavaScript is automatically executed.

  In addition, commands that can be used in scripts often differ depending on the type of web browser (by manufacturer). Therefore, a script that is not described in consideration of compatibility so that it can be executed by various web browsers may not be executed correctly by the web browser 10.

  Therefore, the web browser 10 according to the present embodiment changes the execution processing of the HTML document according to the web server specified as the HTML document transmission source under the control of the browser control unit 16. As a result, safety in the execution of JavaScript is ensured, and compatibility of JavaScript is ensured to improve convenience.

  On the other hand, when the web server 20 transmits an HTML document to an external web browser, there is no safety problem as when the web browser 10 communicates with an external web server, but the compatibility of scripts is the same. Need to be considered.

  Therefore, the web server 20 according to the present embodiment edits the HTML document acquired by the document acquisition unit 22 according to the web browser specified as the transmission destination of the HTML document by the editing unit 23 to improve compatibility. Send. Thereby, the compatibility of JavaScript is ensured and the convenience is enhanced.

  Since the web browser 10 and the web server 20 together constitute the printer 100 (exists on the local host), it is not necessary to consider safety and compatibility in exchanging HTML documents. When a script is described in the HTML document transmitted from the web server 20, the web browser 10 can execute the script correctly to provide advanced functions and operability, and the web browser 10 can execute the script. It is assumed that even if executed, the processing is not problematic for the printer 100.

Hereinafter, operations of the web browser 10 and the web server 20 will be described.
First, the operation of the web browser 10 will be described. As described above, the web browser 10 controls the execution of the script described in the HTML document according to the web server that is the transmission source of the HTML document. As a method for controlling the execution of the script, a method for changing the processing of executing the script itself (not executing, switching to another processing, etc.) and controlling the communication according to the script request (not communicating, changing the request content, etc.) ) Method.

FIG. 5 is a flowchart for explaining the operation of the web browser 10 in the case of implementing a method for changing the script execution process itself.
As shown in FIG. 5, when the communication unit 11 of the web browser 10 receives an HTML document as a response to a request to the web server (the web server 20 or an external web server) (step 501), the browser control unit 16 sends this response. The web server that is the transmission source of the HTML document is specified based on the above (step 502).

Here, for the web browser 10, the web server 20 is a special server that is different from other web servers in that it is an internal server constituting the printer 100. Therefore, the browser control unit 16 identifies whether the web server that is the transmission source of the HTML document is the web server 20 or an external web server. As an identification method, for example, the following method can be considered.

(1) If a loopback address (“127.0.0.1”) is used at the TCP / IP level, it is determined that the transmission source of the HTML document is the web server 20.

(2) If “localhost” or “127.0.0.1” is used as the host of the URL of the request (web request) destination, it is determined that the source of the HTML document is the web server 20 To do.

(3) If an identifier indicating the web server 20 is described in the server information (Server) of the HTTP header of the response (web response), it is determined that the transmission source of the HTML document is the web server 20.

  Among the above identification methods, the method (1) can be performed at the time of request transmission and response reception since it looks at the loopback address. Method (2) can be performed at the time of request transmission because the destination URL of the request is viewed. Since the method (3) looks at the HTTP header of the response, the method (3) can be performed when the response is received. Therefore, the method (1) or the method (3) is applied in the determination of step 502 performed after receiving the response. However, any applicable method may be used according to the processing procedure of the web browser 10. For example, the web server may be identified by the method (2) in advance when the request is transmitted, and the identification result may be confirmed at the timing of step 502.

  Returning to the flowchart of FIG. 5, if it is determined that the transmission source of the HTML document is the web server 20 (internal server) (Yes in step 503), the parse unit 12 makes any change to the HTML document. DOM is generated (step 505). On the other hand, if it is determined that the source of the HTML document is not an external web server (No in step 503), the parsing unit 12 sets the HTML document so that script execution is restricted according to the control of the browser control unit 16. Rewriting (step 504) and generating a DOM (step 505).

  Thereafter, the execution unit 13 analyzes the HTML document according to the DOM generated by the parsing unit 12, passes the script to the interpreter 14 for execution, and passes the other description to the drawing unit 15 for display on the display device 140. (Step 506).

FIG. 6 is a flowchart for explaining the operation of the web browser 10 in the case of implementing a method for controlling communication in response to a script request.
As shown in FIG. 6, when the interpreter 14 of the web browser 10 executes a script, the browser control unit 16 determines whether or not the execution of the script is accompanied by transmission of a request (step 601). If the script is JavaScript, it is determined whether the object class or method involves sending a request (XMLHttpRequest.send?).

  If execution of the script does not involve transmission of a request (No in step 602), the interpreter 14 executes the object as it is (step 603). On the other hand, if the execution of the script involves the transmission of a request (Yes in step 602), then the browser control unit 16 checks the web server (web server 20 or external web server) that is the transmission destination of this request. As a web server identification method, the identification method (1) or (2) described in step 502 of FIG. 5 can be used.

  If it is determined that the transmission destination of the request is an external web server (No in step 604), the operation is terminated without transmitting the request (the object is not executed). On the other hand, if it is determined that the transmission destination of the request is the web server 20 (internal server) (Yes in step 604), the transmission of this request is executed (step 605).

For example, the following method can be considered as a specific method for restricting the execution of the script executed in these operations. Here, a case where JavaScript is used as a script will be described as an example.

(1) Method for suppressing only specific execution of JavaScript: An object or method involving transmission is specified, and such a method is not executed.
-Switch execution of XMLHttpRequest. A dummy operation mode attribute is provided in the XMLHttpRequest of the interpreter 14. When the suppression condition is met (when the HTML document transmission source is an external web server), the web browser 10 does not generate an XMLHttpRequest object (specifically, the return value of createRequest () is null). . Alternatively, a request is not transmitted by the send () method of XMLHttpRequest.

(2) Method of suppressing transmission-Control is performed so as not to perform a transmission operation when the caller is JavaScript (or a specific object thereof) using a socket of the operating system or a low-level communication mechanism in the interpreter 14. .

(3) Method for suppressing execution of JavaScript • The <script> tag in the HTML document is ignored. Further, when the type attribute of the <script> tag is “text / javascript”, the tag is ignored.
-When JavaScript is externally referenced from an HTML document, this JavaScript is not referenced or is not executed even if it is referenced. In order to determine JavaScript at the time of reference, determination is made based on whether the Content-Type header of the HTTP header is text / javascript.

(4) Method for Switching Requests • When an HTML document acquisition request is transmitted, whether to request an HTML document including JavaScript is switched according to the destination server.
Example) Requesting a page containing Javascript http: // xxx / sample. html? js = 1
Request for a page that does not contain JavaScript http: // xxx / sample. html? js = 0

(5) Other methods Of the external files included from the HTML document, JavaScript (with the type attribute value “text / javascript”) is not read (the style sheet “text / css” is read).

  Among the above methods, the methods (1), (3), and (5) are realized by rewriting corresponding descriptions when the parsing unit 12 analyzes the HTML document. Therefore, the method described with reference to FIG. 5 can be used. On the other hand, the methods (2) and (4) are realized by controlling the communication unit 11 when a request is transmitted. The method described with reference to FIG. 6 can be used.

  In the above description, the browser control unit 16 identifies whether the HTML document transmission source or the request transmission destination web server is the web server 20 or an external web server. This is because the web server 20 is a special server that configures the printer 100 (exists on the local host) and does not need to consider safety and compatibility in exchanging HTML documents. Here, even an external web server is provided by the manufacturer of the printer 100, for example, and there may be a web server that does not require consideration of safety and script compatibility. As for the HTML document acquired from such an external web server, the script may be executed without limitation similarly to the HTML document acquired from the web server 20. Therefore, as an extension of the present embodiment, the browser control unit 16 identifies a specific web server among the external web servers, and in the operation of FIG. 5 or FIG. Is handled in the same manner as in the case of the web server 20.

  A specific method for identifying an external web server to be handled in the same manner as the web server 20 (that is, execution of a script is not restricted for an HTML document acquired from the web server) is, for example, the web server to be treated as such. A method is conceivable in which identification information is registered in the list, and the identification information of the web server obtained from the HTML document acquisition request or its response is checked against this list. The identification information for identifying the web server includes (1) the URL of the request (web request) destination, (2) the server information in the HTTP header of the response (web response), and (3) the response (web response). HTML (or XML) meta-information can be considered.

Next, the operation of the web server 20 will be described. As described above, the web server 20 edits and transmits the HTML document according to the web browser that is the transmission destination of the HTML document.
FIG. 7 is a flowchart for explaining the operation of the web server 20.
As shown in FIG. 7, the editing unit 23 of the web server 20 specifies the web browser that is the transmission source of this request based on the HTML document acquisition request received by the communication unit 21 (step 701).

Here, for the web server 20, the web browser 10 is a special browser that is different from other web browsers in that it is an internal browser constituting the printer 100. Therefore, the editing unit 23 identifies whether the web browser that is the transmission source of the HTML document acquisition request is the web browser 10 or an external web browser. As an identification method, for example, the following method can be considered.

(1) If a loopback address (“127.0.0.1”) is used at the TCP / IP level, it is determined that the transmission source of the HTML document acquisition request is the web browser 10.

(2) If the identifier indicating the web browser 10 is described in the user agent information (User-Agent) of the HTTP header of the request (web request), it is determined that the transmission source of the HTML document acquisition request is the web browser 10 To do.

Returning to the flowchart of FIG. 7, if it is determined that the transmission source of the HTML document acquisition request is the web browser 10 (internal browser) (Yes in step 702), the editing unit 23 does not edit the HTML document at all. To the communication unit 21, and the communication unit 21 transmits it to the transmission source of the HTML document acquisition request (step 705). On the other hand, if it is determined that the transmission source of the HTML document acquisition request is not the web browser 10 (No in step 702), the editing unit 23 then displays information indicating the type of the specified external web server as the HTML document. From the acquisition request (step 703). The type of web browser can be obtained from the user agent information in the HTTP header of the request. For example, in the case of Internet Explorer of Microsoft Corporation in the United States,

User-Agent: Mozilla / 4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)

This description identifies the Internet Explorer.

  Next, the editing unit 23 edits the HTML document based on the compatibility information prepared in advance (step 704). The compatibility information is a table in which information for converting into tags, objects, and methods that can be used for each type of web browser is registered so that an HTML document can be correctly executed by various web browsers. This compatibility information is held in, for example, the magnetic disk device 130 of FIG. 1, and is read and referenced by the editing unit 23.

FIG. 8 is a diagram illustrating a configuration example of compatibility information.
In the example shown in FIG. 8, the compatibility information is registered in association with each information of a change method, a target web browser, a target file or section type, a change target, and a change content. For example, in the entry on the first line, delete (D) as the change method, Internet Explorer (IE) as the target web browser, JavaScript as the type of the target file or section, and FX-Custom-Request as the change target are registered. Has been. In this entry, since the change method is deleted, the change content column is blank. In the entry on the third line, change (M) as the change method, Internet Explorer (IE) as the target web browser, HTML as the type of the target file or section, ABBR tag as the change target, and tag after change Each EM tag is registered.

Thereafter, the editing unit 23 passes the HTML document edited as described above to the communication unit 21, and transmits the HTML document edited by the communication unit 21 to the transmission source of the acquisition request for the HTML document (step 705).
Note that, in the web browser 10, the extension for handling a specific external web server in the same manner as the web server 20 is performed, and in the web server 20, the extension for handling a specific external web browser in the same manner as the web browser 10 is performed. You can go. In this case as well, the identification information of the external web browser handled in the same manner as the web browser 10 is registered in the list, and the identification information of the web browser obtained from the HTML document acquisition request may be checked against this list.

FIG. 2 is a diagram illustrating a hardware configuration example of a printer to which the present embodiment is applied. It is a figure which shows the function structure of the printer of this embodiment. It is a figure which shows the detailed functional structure of the web browser of this embodiment. It is a figure which shows the detailed functional structure of the web server of this embodiment. In this embodiment, it is a flowchart explaining the operation | movement of a web browser in the case of implementing the method of changing the process which performs a script itself. In this embodiment, it is a flowchart explaining operation | movement of a web browser in the case of implementing the method of controlling the communication by the request | requirement of a script. It is a flowchart explaining operation | movement of the web server of this embodiment. It is a figure which shows the structural example of the compatibility information used by this embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Web browser, 11 ... Communication part, 12 ... Parse part, 13 ... Execution part, 14 ... Interpreter, 15 ... Drawing part, 16 ... Browser control part, 20 ... Web server, 21 ... Communication part, 22 ... Document acquisition part , 23 ... Editing unit, 100 ... Printer, 120 ... Control device, 130 ... Magnetic disk device, 140 ... Display device, 150 ... Touch panel, 160 ... Network interface

Claims (13)

A server that provides document files;
A browser for acquiring the document file from the server and displaying it on a display device;
The browser
Communication means for transmitting an acquisition request for the document file to the server in the apparatus or a server of an external apparatus, and receiving a response to the acquisition request;
Script execution means for analyzing the document file included in the response received by the communication means and extracting and executing a script described in the document file;
A control unit that identifies a server that is a transmission source of the response based on the acquisition request or the response received by the communication unit, and controls execution of the script by the script execution unit according to the identified server; A document display device comprising:   The control means identifies whether the response transmission source is the server in the apparatus or the server of the external apparatus, and when the response transmission source is the server of the external apparatus, the script by the script execution means The document display device according to claim 1, wherein execution of the document is restricted.   The control means includes a list of identification information for identifying a server, which is information included in the header of the acquisition request or the header of the response, and is a transmission destination of the document file acquisition request or a transmission source of the response 2. The document display apparatus according to claim 1, wherein when the server identification information is not registered in the list, execution of the script by the script execution unit is restricted.   The document display apparatus according to claim 1, wherein the control unit does not transmit data requested by the script as an execution restriction of the script.   The document display apparatus according to claim 1, wherein the control unit does not refer to or execute a script externally referred to from the acquired document file as an execution restriction of the script. The server
Communication means for receiving an acquisition request for the document file from the browser in the apparatus or a browser of an external apparatus, and transmitting a response to the acquisition request;
Document acquisition means for acquiring a document file corresponding to the acquisition request received by the communication means from a storage device in which the document file is held;
Based on the response or the acquisition request received by the communication unit, the browser that is the transmission destination of the response is specified, and the description of the document file acquired by the document acquisition unit according to the specified browser is described. The document display device according to claim 1, further comprising editing means for editing. A communication means for sending a document file acquisition request to the server and receiving a response to the acquisition request;
Display means for analyzing and displaying the document file included in the response received by the communication means on a display device;
Script execution means for analyzing the document file included in the response received by the communication means and extracting and executing a script described in the document file;
Based on the acquisition request or the response received by the communication means, identifies whether the server that is the source of the response is a server that exists on a local host, and if the server is not a server that exists on the local host, A document display device comprising: control means for restricting execution of the script by the script execution means.   The control means includes a list of identification information for identifying a server, which is information included in the header of the acquisition request or the header of the response, and is a transmission destination of the document file acquisition request or a transmission source of the response When the server identification information is registered in the list, the script execution restriction by the script execution unit is canceled even if the server is not a server existing on the local host. The document display device according to claim 7. Computer
Server means for providing document files;
A communication means for transmitting an acquisition request for the document file to the server means or an external device server, and receiving a response to the acquisition request;
Display means for analyzing and displaying the document file included in the response received by the communication means on a display device;
Script execution means for analyzing the document file included in the response received by the communication means and extracting and executing a script described in the document file;
Control means for identifying the transmission source of the response based on the acquisition request or the response received by the communication means, and controlling execution of the script by the script execution means according to the identified transmission source of the response A program characterized by functioning as   The function of the control means is to identify whether the response transmission source is the server means or the server of the external device, and when the response transmission source is the server of the external device, the script by the script execution means The program according to claim 9, which causes the computer to execute processing for restricting execution of the program.   As a function of the control means, refer to a list of identification information that is information included in the header of the acquisition request or the header of the response and identifies a server, and the transmission destination or the transmission source of the response of the document file 10. The program according to claim 9, wherein if the server identification information is not registered in the list, the computer is caused to execute processing for restricting execution of the script by the script execution unit. Computer
A communication means for sending a document file acquisition request to the server and receiving a response to the acquisition request;
Display means for analyzing and displaying the document file included in the response received by the communication means on a display device;
Script execution means for analyzing the document file included in the response received by the communication means and extracting and executing a script described in the document file;
Based on the acquisition request or the response received by the communication means, identifies whether the server that is the source of the response is a server that exists on a local host, and if the server is not a server that exists on the local host, A program that functions as control means for restricting execution of the script by the script execution means.   As a function of the control means, refer to a list of identification information that is information included in the header of the acquisition request or the header of the response and identifies a server, and the transmission destination or the transmission source of the response of the document file If the server identification information is registered in the list, the script execution means removes the script execution restriction even if the server is not a server existing on the local host. The program according to claim 12.

Images