27. A computer-implemented method comprising: enabling, using a computing device, secure information transfer between a web browser's scripting engine and layout engine, said enabling comprising: enabling restricted access to at least one Application Programming Interface (API) associated with a scripting language of the scripting engine; enabling at least one object to be returned cross-domain to a calling system, via the scripting engine and the layout engine, without divulging type system information associated with the at least one object, said enabling the at least one object to be returned cross-domain enabling return of a proxy object associated with the at least one object, the proxy object created in a type system associated with the calling system; and enabling at least one sub-window proxy object to assert security policies associated with a primary window object associated with the layout engine.
27. A computer-implemented method comprising: enabling, using a computing device, secure information transfer between a web browser's scripting engine and layout engine, said enabling comprising: enabling restricted access to at least one Application Programming Interface (API) associated with a scripting language of the scripting engine; enabling at least one object to be returned cross-domain to a calling system, via the scripting engine and the layout engine, without divulging type system information associated with the at least one object, said enabling the at least one object to be returned cross-domain enabling return of a proxy object associated with the at least one object, the proxy object created in a type system associated with the calling system; and enabling at least one sub-window proxy object to assert security policies associated with a primary window object associated with the layout engine. 31. The computer-implemented method of claim 27 , further comprising: enabling bypassing security checks based, at least in part, on a determination of the information transfer occurring in a same domain.