New Object Capabilities and Isolation of Untrusted Web Applications 3 3