|
|
|
|
|
|
by muhammad-shafat
11 days ago
|
|
|
I get where you’re coming from, but there are some security practices in place. The host client renders views inside a strictly sandboxed `<iframe>`. Any action the UI wants to take must pass an auditable message back to the host application, which triggers an explicit user-permission prompt. |
|
|