Patent ID: 8370529

Claim:
A method, comprising: receiving, at a device, an element origin indication that indicates whether an element is received by a network-enabled application from a network resource that lies outside a trusted zone; receiving an element address indication that indicates whether the element is arranged to address a network resource that lies inside the trusted zone; taking a protective action in response to the element origin indication and the element address indication; wherein the trusted zone of network resources includes a group of network resources having trusted communications amongst the network resources of a first selected trusted zone associated with the network-enabled application and having untrusted communications between a network resource of the first selected trusted zone and a network resource outside of the first selected trusted zone associated with the network-enabled application; wherein the element address indication is generated by comparing the address by which the element is arranged to address a network resource against addresses included in a list of network resources in the trusted zone; networking the group of trusted network resources together via a network that is otherwise inaccessible to an attacker because of the presence of one or more firewalls or authentication requirements; wherein the element address indication is generated in response to rendering the element received by the network-enabled application; and wherein the element address indication is generated in response to an initiation of a request to the network resource that lies inside the trusted zone.