14. A computing device comprising: one or more processors; one or more computer-readable storage memories comprising computer readable instructions which, when executed by the one or more processors, implement: a security module configured to enable secure information transfer between a web browser's scripting engine and layout engine, the security module comprising: a module configured to enable restricted access to at least one Application Programming Interface (API) associated with a scripting language of the scripting engine; a module configured to enable at least one object to be returned cross-domain to a calling system, via the scripting engine and the layout engine, without divulging type system information associated with the at least one object, the module configured to enable the at least one object to be returned across the one or more domains being configured to return a proxy object associated with the at least one object, the proxy object created in a type system associated with the calling system; and a module configured to enable at least one sub-window proxy object to assert security policies associated with a primary window object associated with the layout engine.
14. A computing device comprising: one or more processors; one or more computer-readable storage memories comprising computer readable instructions which, when executed by the one or more processors, implement: a security module configured to enable secure information transfer between a web browser's scripting engine and layout engine, the security module comprising: a module configured to enable restricted access to at least one Application Programming Interface (API) associated with a scripting language of the scripting engine; a module configured to enable at least one object to be returned cross-domain to a calling system, via the scripting engine and the layout engine, without divulging type system information associated with the at least one object, the module configured to enable the at least one object to be returned across the one or more domains being configured to return a proxy object associated with the at least one object, the proxy object created in a type system associated with the calling system; and a module configured to enable at least one sub-window proxy object to assert security policies associated with a primary window object associated with the layout engine. 20. The computing device of claim 14 , wherein the at least one sub-window proxy object is configured to defer security requests to the primary window object.