On-demand unprotected mode access

1. A non-transitory computer-readable storage medium that stores one or more sequences of instructions, which when executed by one or more processors, causes:

a first virtual machine, executing on a computer system, retrieving and rendering content for a web session;

upon receiving a request for the web session to enter an unprotected mode, migrating support for the web session from the first virtual machine to a host operating system of the computer system,

wherein, in the unprotected mode, web sessions are supported by the host operating system rather than by a virtual machine;

after migrating support for the web session to the host operating system, displaying a visual cue indicating that the unprotected mode is active for the web session; and

upon receiving a request for the web session to exit the unprotected mode, migrating support for the web session to a second virtual machine executing on the computer system and removing the visual cue.

2. The non-transitory computer-readable storage medium of claim 1 , wherein the web session is displayed within a first tab of a web browser, and wherein the web browser comprises at least one other tab which is configured to display content that is retrieved and rendered by a different virtual machine than either the first virtual machine or the second virtual machine while the web session displayed by the first tab is in unprotected mode.

3. The non-transitory computer-readable storage medium of claim 1 , wherein the first and second virtual machines are instantiated to execute the web session therein.

4. The non-transitory computer-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further causes:

creating a snapshot of the host operating system upon entering and exiting the unprotected mode.

5. The non-transitory computer-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further causes:

upon the web session entering the unprotected mode, logging activity performed in support of the web session within the host operating system until the unprotected mode is exited.

6. The non-transitory computer-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further causes:

upon receiving the request for the web session to exit the unprotected mode, adding at least one web site address, visited while unprotected mode was active, to a whitelist so that subsequent visits to the at least one web site will automatically be rendered in the unprotected mode.

7. The non-transitory computer-readable storage medium of claim 1 , wherein the second virtual machine is created from a different template than the first virtual machine.

8. The non-transitory computer-readable storage medium of claim 1 , wherein receiving the request for the web session to exit the unprotected mode further comprises:

upon receiving user input that identifies a selected template, instantiating the second virtual machine using the selected template.

9. The non-transitory computer-readable storage medium of claim 1 , wherein receiving the request for the web session to exit the unprotected mode further comprises:

determining that the request for the web session to exit the unprotected mode has been received by detecting that the visual cue has been clicked, a menu option has been selected, a new web address has been requested using the web browser, or a web browser tab has been closed.

10. An apparatus, comprising:

one or more processors; and

one or more non-transitory computer-readable storage mediums storing one or more sequences of instructions, which when executed, causes:

a first virtual machine, executing on a computer system, retrieving and rendering content for a web session;

upon receiving a request for the web session to enter an unprotected mode, migrating support for the web session from the first virtual machine to a host operating system of the computer system,

wherein, in the unprotected mode, web sessions are supported by the host operating system rather than by a virtual machine;

after migrating support for the web session to the host operating system, displaying a visual cue indicating that the unprotected mode is active for the web session; and

upon receiving a request for the web session to exit the unprotected mode, migrating support for the web session to a second virtual machine executing on the computer system and removing the visual cue.

11. The apparatus of claim 10 , wherein the web session is displayed within a first tab of a web browser, and wherein the web browser comprises at least one other tab which is configured to display content that is retrieved and rendered by a different virtual machine than either the first virtual machine or the second virtual machine while the web session displayed by the first tab is in unprotected mode.

12. The apparatus of claim 10 , wherein the first and second virtual machines are instantiated to execute the web session therein.

13. The apparatus of claim 10 , wherein execution of the one or more sequences of instructions further causes:

creating a snapshot of the host operating system upon entering and exiting the unprotected mode.

14. The apparatus of claim 10 , wherein execution of the one or more sequences of instructions further causes:

upon the web session entering the unprotected mode, logging activity performed in support of the web session within the host operating system until the unprotected mode is exited.

15. The apparatus of claim 10 , wherein execution of the one or more sequences of instructions further causes:

upon receiving the request for the web session to exit the unprotected mode, adding at least one web site address, visited while unprotected mode was active, to a whitelist so that subsequent visits to the at least one web site will automatically be rendered in the unprotected mode.

16. The apparatus of claim 10 , wherein the second virtual machine is created from a different template than the first virtual machine.

17. The apparatus of claim 10 , wherein receiving the request for the web session to exit the unprotected mode further comprises:

upon receiving user input that identifies a selected template, instantiating the second virtual machine using the selected template.

18. The apparatus of claim 10 , wherein receiving the request for the web session to exit the unprotected mode further comprises:

determining that the request for the web session to exit the unprotected mode has been received by detecting that the visual cue has been clicked, a menu option has been selected, a new web address has been requested using the web browser, or a web browser tab has been closed.

19. A method, comprising:

a first virtual machine, executing on a computer system, retrieving and rendering content for a web session;

upon receiving a request for the web session to enter an unprotected mode, migrating support for the web session from the first virtual machine to a host operating system of the computer system,

wherein, in the unprotected mode, web sessions are supported by the host operating system rather than by a virtual machine; and

upon receiving a request for the web session to exit the unprotected mode, migrating support for the web session to a second virtual machine executing on the computer system.

20. The method of claim 19 , further comprising:

after migrating support for the web session to the host operating system, displaying a visual cue indicating that the unprotected mode is active for the web session; and

upon migrating support for the web session to the second virtual machine executing on the computer system, removing the visual cue.