3 ms·
My main concern with this would be the security and W3 standard support. Browser engines and whatnot do make your life easy, but they add a lot of attack vector
by zerof1l 6y ago
My main concern with this would be the security and W3 standard support. Browser engines and whatnot do make your life easy, but they add a lot of attack vectors. Also the support for W3 standard is usually limited and incomplete.
Also it seems that the engine itself is distributed as binary only? I can't find source anywhere. That's a -1 for security.
- kevingadd 6y agoFrom browsing the docs, it looks like scripts can open sockets so it makes it much easier to jump from exploiting an app's Sciter frontend to attacking other targets
- c-smile 6y agoThese functions are off by default, check: https://sciter.com/security-in-sciter-based-applications/ https://sciter.com/security-in-sciter-based-applications/ Even more, you can compile Sciter without them completely.