10 karma · joined May 7, 2020
i gathered from your comment about large amts of devices still on 50 D:
I know it won't be used for external web content, but all it takes is an escape or malicious frame/xss, and boom, mass RCE.
I don't like electron for the same reason.
I'm not saying that it's a wasteland out there, it's just one element that concerns me, is all.
This concerns me. Under the current google model, as long as you have a play store compatible device, you get chrome webview updates through the play store, even if the device fw is eol.
If an app developer doesn't update their app, then you can have potentially vulnerable version of geckoview lying around. I hope a decoupling/webview-style update mechanism is eventually implemented, although I don't know how feasible that is (i'm an amateur android dev)
That said, I really do like the project. And, I use firefox as my personal browser, both on principle and because it's quality software.