Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Blazor Desktop tenets: Security #2540

Closed
Eilon opened this issue Feb 27, 2021 · 2 comments
Closed

Blazor Desktop tenets: Security #2540

Eilon opened this issue Feb 27, 2021 · 2 comments
Assignees
Labels
area-blazor Blazor Hybrid / Desktop, BlazorWebView
Milestone

Comments

@Eilon
Copy link
Member

Eilon commented Feb 27, 2021

  • Need to define what are the threats here
  • Rogue-ish 3rd party component?
  • Need to look at the threat models for other native client platforms, e.g. WPF, because we will likely have some subset of the same concerns
  • Need to review guidance from docs of each native WebView component for any best practices
@ghost
Copy link

ghost commented Mar 1, 2021

Thanks for contacting us.
We're moving this issue to the Next sprint planning milestone for future evaluation / consideration. We will evaluate the request when we are planning the work for the next milestone. To learn more about what to expect next and how this issue will be handled you can read more about our triage process here.

@Eilon Eilon transferred this issue from dotnet/aspnetcore Sep 16, 2021
@Eilon Eilon added the area-blazor Blazor Hybrid / Desktop, BlazorWebView label Sep 16, 2021
@mkArtakMSFT
Copy link
Member

Closing as the remaining work is being addressed and is tracked: https://github.com/aspnet/specs/issues?q=is%3Aissue+is%3Aopen+label%3Asecurity

@mkArtakMSFT mkArtakMSFT added this to the 6.0.300-rc.1 milestone Mar 23, 2022
@ghost ghost locked as resolved and limited conversation to collaborators Apr 23, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
area-blazor Blazor Hybrid / Desktop, BlazorWebView
Projects
None yet
Development

No branches or pull requests

2 participants