4 ms·
Sorry, I'm using the OPs parlance here – by PWA I think he means "JS apps that use advanced browser APIs". The typical concern is that a phisher will use to ma
by vorador 5y ago
Sorry, I'm using the OPs parlance here – by PWA I think he means "JS apps that use advanced browser APIs".
The typical concern is that a phisher will use to make a page that looks like Google's sign-in page and display it in fullscreen mode. This would let them collect credentials while mirroring the input in a real form that'd be filled in the background.
- upbeat_general 5y agoHow is that related to the APIs being talked about? What advanced browser APIs does phishing in full screen require? The new iOS 15 safari is full screen (and you’ve always been able to add to home screen to make a website really fullscreen)…