3 ms·
Looks like it's very close to what I meant! I was thinking of something like `/usr/bin/firefox --webapp-mode /var/opt/path/to/approot/` (in my model, the brows
by tgsovlerkhgsel 2y ago
Looks like it's very close to what I meant!
I was thinking of something like `/usr/bin/firefox --webapp-mode /var/opt/path/to/approot/` (in my model, the browser would contain code to load some standard webapp format, while with Tauri it looks like the app bundles a small piece of code that loads local webkit) but that's just a detail.
The downside of Tauri is that you likely run the built-in runtime with regular (full) access, while with a browser-controlled flow, the browser could enforce a permission system.
- plonq 2y agoFWIW Tauri has a comprehensive permission system
- LoganDark 2y agoI think the concern is not XSS but rather trusting the first party developer of the binary that hosts the webview.
- nox101 2y agohow is that different than apps off an app store?
- LoganDark 2y agoOn platforms that have app stores (including desktop operating systems like Windows, some distributions of Linux, and especially macOS), the apps you download from the store are sandboxed (UWP; Flatpak/AppImage; Apple) far more than raw binaries. Tauri apps are raw binaries; Electron apps are too; those are both different from visiting a webpage in a browser, regardless of whether such navigation happened manually or automatically (as in from a PWA shortcut).