Patent ID: 7664865

Claim:
A computer program product for use in controlling a computing system which includes a managed code environment, the computer program product comprising a computer storage medium having computer-executable instructions for implementing a method of controlling navigation requests by the unmanaged web OLE control on behalf of partially trusted code in order to prevent navigation to an undesirable location, the method comprising: launching at the computing system a web browser that utilizes code access security (CAS) which defines program code as running with full trust or with partial trust, the web browser including a managed web browser control that hosts an unmanaged web object linking and embedding (OLE) control using a security model based on zones, wherein a website is categorized based on its website address as belonging to a particular zone which includes at least one of the Internet, intranet, a trusted or untrusted zone; receiving at the browser a navigation request from a partially trusted web application program to navigate to a site; the web OLE control creating an event prior to navigation to the requested site to provide the managed web browser control with a uniform resource identifier (URI) that identifies where the navigation is to occur before proceeding, and locking navigation to a set of web pages based on the current site until further authorization to proceed is obtained; and the managed web browser control of the computing system's browser then using the URI to check whether the partially trusted web application program has permission to access the URI and then returning to the web OLE control an indication as to whether the partially trusted web application program has permission to access the URI, and if so, the web OLE control permitting navigation by the partially trusted web application program to the URI, otherwise, the web OLE control blocking navigation to the URI for the navigation to continue to be locked to limit the navigation to a set of web pages based on the current site of the partially trusted web application program.