Preventing uncontrolled access to an execution environment of a first
component object by a second component object. A system includes a memory
area storing the first component object, the second component object, and
one or more predefined properties associated with the second component
object. The system comprises a processor configured to receive a request
from the first component object stored in the memory area to create the
second component object stored in the memory area. The first component
object executes in a first execution environment and the request
specifies a requested execution environment for the second component
object. The processor is also configured for analyzing the predefined
properties stored in the memory area to determine an execution
environment privilege associated with the second component object. The
processor is configured for granting the received request as a function
of the determined execution environment privilege.