Replying to Avatar Sirius

I wonder if the native app could add window.nostr to the webview and keep the private key fully protected from XSS and any security breach of the PWA origin.
Avatar
ismyhc 3y ago

If you are loading the site into WKWebview you can inject anything you want into the site. You can definitely make a bridge to talk back and forth. Swift <> JavaScript.

Be cautious, apple is very weird about doing this.

Reply to this note

Please Login to reply.

Discussion

Avatar
fiatjaf 3y ago

how hard would it be to make something like a pure Nostr browser that just loads HTML/JS Nostr apps from URLs and injects window.nostr?