How to Fix the App Store(mohamed.attahri.com)
mohamed.attahri.com
How to Fix the App Store
https://mohamed.attahri.com/posts/how-to-fix-apple-app-store
6 comments
PWAs need to be pushed more. PWAs are more private and don't have access to things that could contain sensitive information like the clipboard's contents which are often scraped and uploaded to shady C2s by some apps
There's a Clipboard API https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_A...
...That is often abused https://in.mashable.com/tech/12219/tiktok-and-other-popular-...
Indeed.
You mentioned
> PWAs are more private and don't have access to things that could contain sensitive information like the clipboard's contents
Do PWAs -- Web applications built with JavaScript, among other Web technologies -- have access to standard Web API offering? If so, then PWAs offer no advantage with respect to your claim. How does using a PWA provide a more secure environment for the user?
You mentioned
> PWAs are more private and don't have access to things that could contain sensitive information like the clipboard's contents
Do PWAs -- Web applications built with JavaScript, among other Web technologies -- have access to standard Web API offering? If so, then PWAs offer no advantage with respect to your claim. How does using a PWA provide a more secure environment for the user?
The JS API is a bit safer as the user has to "explicitly enable this feature". Although in some browsers, full access is granted. Thanks for pointing it out. Another reason to surf with JS disabled and whitelist for sites that require it.
[deleted]