3 ms·
This is not a threat model that's unique to PWAs though, nor in any way enabled by what's seen here. Installing a PWA is practically equivalent to installing an
by Etheryte 4y ago
This is not a threat model that's unique to PWAs though, nor in any way enabled by what's seen here. Installing a PWA is practically equivalent to installing an app and a malicious app or an app that had their OneSignal or similar credentials compromised could do the exact same thing.
- diebeforei485 4y agoApple can disable push notifications from a compromised app. It's unclear if they can do it for a compromised website, which was my question above.