The documentation here: https://v2.tauri.app/security/lifecycle/#development-server says the following
This is also the case for the built-in Tauri development server and exposes your frontend and assets to the local network. Additionally, this allows attackers to push their own frontend code to development devices in the same network as the attacker.
It would be nice to explain in which cases attackers are able to push their own frontend code to development devices, and how it is possible. E.g. is it possible if you just develop a desktop app? What about a mobile app?
The documentation here: https://v2.tauri.app/security/lifecycle/#development-server says the following
It would be nice to explain in which cases attackers are able to push their own frontend code to development devices, and how it is possible. E.g. is it possible if you just develop a desktop app? What about a mobile app?