7 ms·

FWIW Tauri has a comprehensive permission system

• LoganDark 2y ago
  I think the concern is not XSS but rather trusting the first party developer of the binary that hosts the webview.
  • nox101 2y ago
    how is that different than apps off an app store?
    • LoganDark 2y ago
      On platforms that have app stores (including desktop operating systems like Windows, some distributions of Linux, and especially macOS), the apps you download from the store are sandboxed (UWP; Flatpak/AppImage; Apple) far more than raw binaries. Tauri apps are raw binaries; Electron apps are too; those are both different from visiting a webpage in a browser, regardless of whether such navigation happened manually or automatically (as in from a PWA shortcut).