Techniques for enforcing policies. A user requests content from an application and content is retrieved from the application. A determination is made whether any policies apply to the content. A script adapted to modify processing of the content according to any applicable policies is injected into a response to the user. The script may be dynamically generated, pulled from a cache or other data store, or a combination thereof.