4 ms·
Apple seems to have a legitimate take here: > "...malicious web apps [on the home screen] could read data from other web apps and recapture their permissions t
by slowmovintarget 3y ago
Apple seems to have a legitimate take here:
> "...malicious web apps [on the home screen] could read data from other web apps and recapture their permissions to gain access to a user’s camera, microphone or location without a user’s consent. Browsers also could install web apps on the system without a user’s awareness and consent. Addressing the complex security and privacy concerns associated with web apps using alternative browser engines would require building an entirely new integration architecture that does not currently exist in iOS and was not practical to undertake given the other demands of the DMA and the very low user adoption of Home Screen web apps. And so, to comply with the DMA’s requirements, we had to remove the Home Screen web apps feature in the EU."
Being "open" potentially has consequences that Apple has taken a decision on. It's reasonable, especially when most of their customers are not developers, and not technically savvy.
PWAs as native apps have no answer for this security issue.