1. A method of enforcing a client-side security policy, comprising: receiving a security policy at a client; monitoring a client-side script execution process; determining if the client-side script execution process complies with the security policy; and transforming a mutation if the client-side script execution process does not comply with the security policy in order to enforce the security policy.