Re: Apple tells app developers to disclose or remove screen ...
by djsumdog on Thursday February 07, 2019 @06:31PM
(#19109754)
Modern browsers should block all backend/javascript http communication if the main request is made over HTTPS, unless you specifically disable it with a Content Security Policies.
[ Parent
| on HN ]
Re: Apple tells app developers to disclose or remove screen ...
by inetknght on Friday February 08, 2019 @12:40AM
(#19111830)
Better to just disable javascript altogether. Sure, there's no dynamic loading of garbage, but I didn't want that anyway. If your back-end server can't render HTML then you need to build an app.
At least with native desktop apps I can put that garbage into a VM or container. Load whatever you want. I can then apply my own firewall/containerization/VM rules.