Abstract: Methods, systems, and apparatus, including computer program products feature receiving, from a client application running in a virtual machine and displayed within a first window of a graphic display, a request to create a second window within the graphic display. In an example implementation, a first set of one or more parameters is received in association with the request. The request and some or all of the first set of one or more parameters are provided to a host application. An indication of a determination is received from the host application as to whether the second window has been created. The determination is based on a policy of the host application. The indication of the determination is provided to the client application. If the indication of the determination indicates that the second window has been created, the indication further includes an identifier associated with the second window.

Abstract: Methods, systems, and apparatus, including computer program products feature receiving, from a client application running in a virtual machine and displayed within a first window of a graphic display, a request to create a second window within the graphic display. In an example implementation, a first set of one or more parameters is received in association with the request. The request and some or all of the first set of one or more parameters are provided to a host application. An indication of a determination is received from the host application as to whether the second window has been created. The determination is based on a policy of the host application. The indication of the determination is provided to the client application. If the indication of the determination indicates that the second window has been created, the indication further includes an identifier associated with the second window.