Patent ID: 7814556

Claim:
A method for securing execution of untrusted applications, the method comprising: sending, from an untrusted to an application server at a computer including a nontransitory computer readable medium and processor operating thereon, a request to access a class maintained by the application server with an internal API that includes a plurality of internal classes, separate from a public API that includes a plurality of public classes, of the application server, and wherein the plurality of public classes are accessible by the untrusted applications; wherein after receiving the request, the application server looks-up the class using a local classloader and a parent classloader, if the class is not found by either the local classloader or the parent classloader then returns an exception, if the class is found by either the local classloader or the parent classloader then looks-up the class in a filter list which includes a plurality of documented classes available to untrusted applications including the plurality of public classes, and if the class is in the filter list, then grants permission to the untrusted application to access the class; and receiving at the untrusted application, permission to access the class the application server has determined that the class is permitted to be accessed by untrusted applications.