1. A method comprising: receiving a script for execution within a scripting host of an application executing on a processor of a computing device; identifying, by the scripting host, a function called within the script and a context from which the identified function is called; retrieving by the scripting host, from a memory, a security setting representation of the identified function based at least in part on the context from which the identified function is called; and the scripting host, based on the security setting representation indicating that the identified function is not allowed in the context from which the identified function is called, preventing execution of the identified function in the context from which the identified function was called.