Properties Safety

Hi,

What properties can I user access? Are there any properties that could be read by a webapp user?

I mean, a property in App can’t be accessed by a user, what about one in a WebSession, WebContainer, Control, Window etc?