Method and system for safe execution of untrusted content.

A method of restricting access of content to resources for a system having a mechanism (78) security provided by an operating system (35) that determines access of a process (94) to resources (142, 146) based on information in an access token associated with each of the processes (94) against information (144, 148) security associated with each of the resources (142, 146), the method comprising the steps of configuring a process (132) for the content, deriving a control (134) restricted from an access token access, determining information (136) of restriction based on information corresponding to the content, modifying said control (134 ) restricted with information (136) of restriction, and use the control (134) as the access restricted access token process (132) the content.