Hacker News new | ask | show | jobs
by plonq 669 days ago
FWIW Tauri has a comprehensive permission system
1 comments

I think the concern is not XSS but rather trusting the first party developer of the binary that hosts the webview.
how is that different than apps off an app store?
On platforms that have app stores (including desktop operating systems like Windows, some distributions of Linux, and especially macOS), the apps you download from the store are sandboxed (UWP; Flatpak/AppImage; Apple) far more than raw binaries. Tauri apps are raw binaries; Electron apps are too; those are both different from visiting a webpage in a browser, regardless of whether such navigation happened manually or automatically (as in from a PWA shortcut).