We extend the Secure LiveWeb prototype with dynamically loaded application code (plugins). The system is able to detect that third-party plugins are loaded to extend an application, and that their interface information is used to validate both the plugin code and its integration with the existing system.