Skip to content
Adam Bliss edited this page Aug 9, 2020 · 3 revisions

The security model of Sandstorm is pretty different from the web in general. Browser developers target the latter, and try to strike the right balance between usability and security, but this is often suboptimal for sandstorm. Here are some examples.

Iframe related

  1. Iframe cannot request site-based permissions (e.g. camera, microphone, notifications).
  2. Iframe cannot be whitelisted for security exceptions.

Mobile specific

  1. No non-persistent notifications

Brainstorming

  1. Broader support of webkeys in urls (maybe similar to text fragment links?)
Clone this wiki locally