Strategies for controlling use of a resource that is shared between trusted and untrusted environments

A client device, comprising:

• one or more processors;
• and
• memory including a data store that is accessible to network entities and associated with a security module that facilitates transfer of content between applications of the client device;
• and
• computer-executable instructions stored in the memory that, when executed by the one or more processors, cause the client device to implement the security module to perform operations to control access to a resource maintained in the data store, including:
• detecting an attempt to access the resource by a network entity with which the client device is interacting through a network-enabled application;
• determining an access setting associated with the network entity;
• enabling the network entity to perform one or more actions with respect to the resource that are allowed according to the access setting;
• and
• preventing performance by the network entity of actions with respect to the resource that are disallowed according to the access setting.

One or more computer readable memory devices storing instructions that, when executed by one or more components of a client device, implement a security module for the client device configured to perform operations to control access to a resource maintained in a data store of the client device that is accessible to network entities, including:

• enabling entities associated with a trusted environment defined by the security module to access the resource;
• detecting an attempt by a web page associated with a network entity to access the resource from the data store, the web page associated with an untrusted environment defined by the security module and the data store implemented in memory of the client device associated with the security module employed to control transfer of content between the trusted environment and the untrusted environment;
• and
• controlling access of the web page to the resource according to an access setting associated with the network entity including enabling the web page to perform one or more actions with respect to the resource that are allowed according to the access setting and preventing performance by the web page of actions with respect to the resource that are disallowed according to the access setting.