[catoc]

From what I understand it’s just a WKWebView. I’m trying to understand why the embedding of a WKWebView poses additional risk because it’s embedded in iTerm? (aside from the suggested general earlier security mishaps).

[aa-jv]

> it’s just a WKWebView.

Yes, exactly. On top of the existing iTerm2 code, multiplying the attack vector surface significantly.