Lockbox for mitigating same origin policy failures

A method performed by executing instructions with at least one processing unit, the method comprising:

• creating a lockbox computing application element that associates security privileges with data or an application feature contained in the lockbox computing application element, the lockbox computing application element being associated with a plurality of nested lockboxes including at least:
• an inner lockbox that includes the data or the application feature and has a first associated security privilege, and
• an outer lockbox that includes the inner lockbox and has a second associated security privilege;
• receiving a request for the data or the application feature that is contained in the lockbox computing application element;
• identifying a source of the request;
• making a determination whether the source is an approved source to which the lockbox computing application element is configured to provide access;
• and
• selectively providing access to the data or the application feature based on the determination.

One or more hardware computer storage media storing computer executable instructions that, when executed by a computing device, cause the computing device to perform operations comprising:

• creating a lockbox computing application element that associates a first security privilege and a second security privilege with data or an application feature, the lockbox computing application element identifying nested lockboxes including at least:
• an inner lockbox that contains the data or the application feature and associates the first security privilege with the data or the application feature, and
• an outer lockbox that contains the inner lockbox and associates the second security privilege with the data or the application feature;
• receiving a request for the data or the application feature that is contained in the inner lockbox identified by the lockbox computing application element;
• identifying a source of the request;
• determining that the source of the request is approved to access the data or the application feature in accordance with both the first security privilege and the second security privilege;
• and
• responsive to the determining, providing the data or the application feature to the source of the request.