A computing device, comprising: one or more output devices; a processor; and a storage device including instructions which, when executed by the processor, cause the processor to: execute a web host application program having an associated application program interface, API, whitelist defining a set of APIs accessible to the web host application program; download a web application, wherein the web application includes: an authorization certificate; and a metadata file that includes an identifier of at least one local API of the computing device; for each of the at least one local API indicated in the metadate file: determine whether the local API is included in the API whitelist of the web host application program; and if it has been determined that the local API is not included in the API whitelist, determine (208, 308), based on the local API indicated in the authorization certificate and the local API indicated in the metadata file, whether the web application is compatible with the computing device and authorized to access the local API that is not included in the API whitelist; if it has been determined that the web application is authorized to access at least one of the at least one local APIs, execute (212, 314) the web application at the web host application program, wherein executing the web application includes utilizing the at least one local API that is not included in the API whitelist; and convey at least one output of the web application for output at the one or more output devices. one or more output devices; a processor; and a storage device including instructions which, when executed by the processor, cause the processor to: execute a web host application program having an associated application program interface, API, whitelist defining a set of APIs accessible to the web host application program; download a web application, wherein the web application includes: an authorization certificate; and a metadata file that includes an identifier of at least one local API of the computing device; for each of the at least one local API indicated in the metadate file: determine whether the local API is included in the API whitelist of the web host application program; and if it has been determined that the local API is not included in the API whitelist, determine (208, 308), based on the local API indicated in the authorization certificate and the local API indicated in the metadata file, whether the web application is compatible with the computing device and authorized to access the local API that is not included in the API whitelist; if it has been determined that the web application is authorized to access at least one of the at least one local APIs, execute (212, 314) the web application at the web host application program, wherein executing the web application includes utilizing the at least one local API that is not included in the API whitelist; and convey at least one output of the web application for output at the one or more output devices. execute a web host application program having an associated application program interface, API, whitelist defining a set of APIs accessible to the web host application program; download a web application, wherein the web application includes: an authorization certificate; and a metadata file that includes an identifier of at least one local API of the computing device; an authorization certificate; and a metadata file that includes an identifier of at least one local API of the computing device; for each of the at least one local API indicated in the metadate file: determine whether the local API is included in the API whitelist of the web host application program; and if it has been determined that the local API is not included in the API whitelist, determine (208, 308), based on the local API indicated in the authorization certificate and the local API indicated in the metadata file, whether the web application is compatible with the computing device and authorized to access the local API that is not included in the API whitelist; determine whether the local API is included in the API whitelist of the web host application program; and if it has been determined that the local API is not included in the API whitelist, determine (208, 308), based on the local API indicated in the authorization certificate and the local API indicated in the metadata file, whether the web application is compatible with the computing device and authorized to access the local API that is not included in the API whitelist; if it has been determined that the web application is authorized to access at least one of the at least one local APIs, execute (212, 314) the web application at the web host application program, wherein executing the web application includes utilizing the at least one local API that is not included in the API whitelist; and convey at least one output of the web application for output at the one or more output devices.