In tauri v1, we locked our webkitgtk version to 2.22. But now we have bumped to 2.38.
This means we could enable sandbox already.
https://webkitgtk.org/reference/webkit2gtk/2.28.3/WebKitWebContext.html#webkit-web-context-set-sandbox-enabled
What I'm not sure is should we enable by default? Or we just offer an attribute option?
Note that sandbox will disable file system, network, and dbus access whithin the webview.
Here's an overview of it
In tauri v1, we locked our webkitgtk version to 2.22. But now we have bumped to 2.38. This means we could enable sandbox already. https://webkitgtk.org/reference/webkit2gtk/2.28.3/WebKitWebContext.html#webkit-web-context-set-sandbox-enabled What I'm not sure is should we enable by default? Or we just offer an attribute option? Note that sandbox will disable file system, network, and dbus access whithin the webview. Here's an overview of it![圖片](https://user-images.githubusercontent.com/8409985/233308043-5cc587dd-50e9-4517-9c16-1ad715b7bb3f.png)
cc @lucasfernog @tweidinger