1. A system comprising: at least one processor; a non-transitory memory operatively coupled to the at least one processor; a VM (virtual machine) manager embodied on the memory that when executed by the at least one processor causes the at least one processor to receive a function call by one of a plurality of VMs operating within a web browser, wherein a security model shared amongst the VMs separately binds each VM, and wherein at least two of the plurality of VMs have different privileges for accessing a DOM (document object model), that represents a web page, based on the shared security model; a VM scheduler configured to ensure only one of the VMs interacts with the DOM at a time; and a DOM manager configured to provide resources of the web browser to each of a plurality of programs operating within one of the plurality of VMs on the web browser.