1. A computer-implemented method comprising: blocking, with a blocking mechanism, Internet-application access to administrative and/or user spaces of a client computing device on which the Internet-application executes; defining at least one containment zone in which said Internet-application is to write and read data; providing an administrative broker object that is configured to broker access to the administrative space that is blocked, and a user broker object that is configured to broker access to the user space that is blocked, wherein the administrative broker object and the user broker object are task-based, at least one of the administrative broker object or the user broker object having a lifetime defined by a task; executing at least the administrative broker object or the user broker object in a separate process than the Internet-application; inspecting a request from the Internet-application to access at least one of said administrative space or said user space by confirming that the request is valid and by checking an electronic signature of the Internet-application, the request to access said administrative space being inspected by the administrative broker object and the request to access said user space being inspected by the user broker object; modifying at least one of said administrative space with the administrative broker object or said user space with the user broker object for said Internet-application in response to receiving a confirmation of credentials; brokering access to at least one of said administrative space with the administrative broker object or said user space with the user broker object for said Internet-application by forcing certain tasks to be called in a defined order to accomplish a desired action, the defined order of calls comprising parameters that are cached in the administrative broker object or the user broker object and later compared with subsequently received parameters, wherein access is brokered only for matching parameters; and if compared parameters do not match, maintaining blocked access to said administrative and/or user spaces for said Internet-application.