Patent ID: 8689329

Claim:
An apparatus comprising: at least one processor; a memory coupled to the at least one processor; a browser residing in the memory and executed by the at least one processor that provides an interface for a user to request a selected page, the browser receiving a page stream with dividers that corresponds to the selected page and partitioning a document object model corresponding to the selected page according to a plurality of sections defined by the dividers in the selected page to define a plurality of partitions in the document object model, the browser intercepting calls to scripts in the selected page and blocking a first call by a first script in a first partition in the document object model that attempts to access content in a second partition in the document object model; and an access rights mechanism that determines access rights for each partition in the document object model from metadata in the page stream that corresponds to each section in the selected page, wherein the browser blocks the first call when the access rights for the first partition do not allow calls that access content outside the first partition.