Isolation and presentation of untrusted data

A computer-implemented method of handling data, the method comprising:

• performing a schema check on data received from a data source to determine that the data received comprises untrusted data, the schema check indicating that the data received is corrupted;
• determining that the data received comprises trusted data by determining that a user has previously chosen to edit the data received;
• creating an isolated client environment in which to process the untrusted data in response to determining that the data received comprises untrusted data;
• processing the untrusted data in the isolated client environment using an application instance of an application, the application being configured to process trusted data;
• routing communications between the isolated client environment and a host process via a host broker;
• and
• presenting a protected view and a normal view within a user interface, the protected view comprising a view of the untrusted data from the isolated client environment, and the normal view comprising a view of the trusted data processed by the application.

A computer storage medium having stored thereon computer readable instructions that, when executed by a computer, cause the computer to:

• perform a virus scan on data received from a data source to determine that the data received comprises untrusted data;
• determine that the data received comprises trusted data by determining that a user has previously chosen to edit the data received;
• in response to determining that the data received comprises untrusted data, create an isolated client environment in which to process the untrusted data received from a data source;
• process the untrusted data in the isolated client environment using an application instance of an application, the application being configured to process the trusted data;
• route communications between the isolated client environment and a host process via a host broker;
• and
• present a view comprising a protected view and a normal view, the protected view comprising a view of the untrusted data from the isolated client environment, and the normal view comprising a view of the trusted data processed by the application.