A web based security apparatus comprising: an operating system-independent and browser-independent data container including: a web application interface to identify web content obtained by a user via a browser, said browser being associated with a local data store on the platform where the browser executes, and detect an attempt by the web content to access the local data store due to at least a portion of the web content being written in one or more of a runtime or a just in time, JIT, environment language; an enforcement module in the data container to determine whether to permit the attempt based on a context-based security policy, wherein the enforcement module is to obtain the context-based security policy from one or more of a user profile, a multi-user data source and a cloud service, said context-based security policy is to identify at least a browsing sequence; and a user interface to generate a first user prompt for authorization to implement an action associated with the context-based security policy, wherein the first user prompt is to include one or more multi-user statistics, said multi-user statistics comprising at least a percentage of users who have chosen to allow or deny access to their respective local data stores when encountering the web content. an operating system-independent and browser-independent data container including: a web application interface to identify web content obtained by a user via a browser, said browser being associated with a local data store on the platform where the browser executes, and detect an attempt by the web content to access the local data store due to at least a portion of the web content being written in one or more of a runtime or a just in time, JIT, environment language; an enforcement module in the data container to determine whether to permit the attempt based on a context-based security policy, wherein the enforcement module is to obtain the context-based security policy from one or more of a user profile, a multi-user data source and a cloud service, said context-based security policy is to identify at least a browsing sequence; and a user interface to generate a first user prompt for authorization to implement an action associated with the context-based security policy, wherein the first user prompt is to include one or more multi-user statistics, said multi-user statistics comprising at least a percentage of users who have chosen to allow or deny access to their respective local data stores when encountering the web content. a web application interface to identify web content obtained by a user via a browser, said browser being associated with a local data store on the platform where the browser executes, and detect an attempt by the web content to access the local data store due to at least a portion of the web content being written in one or more of a runtime or a just in time, JIT, environment language; an enforcement module in the data container to determine whether to permit the attempt based on a context-based security policy, wherein the enforcement module is to obtain the context-based security policy from one or more of a user profile, a multi-user data source and a cloud service, said context-based security policy is to identify at least a browsing sequence; and a user interface to generate a first user prompt for authorization to implement an action associated with the context-based security policy, wherein the first user prompt is to include one or more multi-user statistics, said multi-user statistics comprising at least a percentage of users who have chosen to allow or deny access to their respective local data stores when encountering the web content.