receiving, via an second interface process, a resource including mobile code from a remote data source, the operating system being configured to allocate data associated with the remote data source with a third sensitivity label and the second interface process having privileges that allow it to transfer data between the browser and the remote data source; processing the mobile code to provide gra