1. One or more computer-readable storage media comprising computer readable instructions which, when executed, implement: a security module configured to enable secure information transfer between a web browser's scripting engine and layout engine, the security module comprising: a module configured to enable restricted access to at least one Application Programming Interface (API) associated with a scripting language of the scripting engine; a module configured to enable at least one object to be returned cross-domain to a calling system, via the scripting engine and the layout engine, without divulging type system information associated with the at least one object; and a module configured to enable at least one sub-window proxy object to assert security policies associated with a primary window object associated with the layout engine.