Merge use case of issue 7 #25
Conversation
Merge use case of #7
index.html
Outdated
|
|
||
| <dt>Motivation</dt> | ||
| <dd> | ||
| <a href="https://appfigures.com/top-sdks/development/all">Up to 30%</a> of apps found in the App stores (Apple and Google) are built with frameworks like <a href="https://cordova.apache.org">Apache Cordova</a> and <a href="https://capacitorjs.com/">CapacitorJS</a>. Those two frameworks use one big Webview for providing app developers a native wrapper and some plugins for their Web App. App developers build their Web application and put the HTML, CSS and JavaScript files in one folder. The framework then takes care of building a Native App project and bundling the Web code as a Native application ready to distribute via the App stores. |
There was a problem hiding this comment.
The problem also exists on desktop platforms and their web views as well, both for applications (in Electron, etc.) or books.
index.html
Outdated
| <dt>Stakeholders</dt> | ||
| <dd> | ||
| <ul> | ||
| <li>WebView provider: Apple, Google, deciders on how to support having a standardized origin of web content hosted by the App for the Webview</li> |
There was a problem hiding this comment.
Also need to include desktop providers including Microsoft and various Linux variants.
There was a problem hiding this comment.
Also the Publishing CG & WG here at the W3C, as they manage the EPUB standard
index.html
Outdated
|
|
||
| <dt>Analysis</dt> | ||
| <dd> | ||
| Apps built with this hybrid approach in mind are really dependent on making CORS work and HTTP requests possible on their own web content. This approach might benefit from a standardized way of providing web content from the app to the webview. This content could be considered secure. |
There was a problem hiding this comment.
One of the extra considerations for non-applications (i.e., eBooks) is that the content is user generated (UGC) and therefore not reviewed as part of an AppStore review. It is also not digitally signed - so there is really no "trust" associated with it and therefore security becomes a significant concern
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
Co-authored-by: Niklas Merz <[email protected]>
|
I go ahead and merge the current PR. https://webview-cg.github.io/usage-and-challenges/#the-origin-in-a-webview-for-locally-hosted-content If any new edits, please make PR freely. |
Merge use case of #7