Skip to content

[docs] Clarification about development security #3760

Description

@solomatov

The documentation here: https://v2.tauri.app/security/lifecycle/#development-server says the following

This is also the case for the built-in Tauri development server and exposes your frontend and assets to the local network. Additionally, this allows attackers to push their own frontend code to development devices in the same network as the attacker.

It would be nice to explain in which cases attackers are able to push their own frontend code to development devices, and how it is possible. E.g. is it possible if you just develop a desktop app? What about a mobile app?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions