In one example, a method for enforcing, using a web browser of a client, a predefined management policy for an HTTP-based application executed on a server. The method includes initializing the browser with the policy, the policy including at least one operation and an element, associated with that operation, of a document object model (DOM) for a web page presented to the client by the application. The method also includes detecting with the browser a document change event for an element of the DOM. The method further includes performing the operation if the document change event is for an element in the policy.