Building Canva Apps: Working Within the Iframe Sandbox and Performance Budget
Canva Apps run in a locked-down iframe with a 200 KB budget and a typed RPC layer. This post walks through the architectural constraints — message-passing, design tokens, rate limits — and shows a concrete content-extension pattern that passes review.
canva