Designing Tauri Capability Permissions: A Minimal-Trust Architecture Note
An architecture note on Tauri 2 capabilities: treat the WebView as untrusted, grant per-window scoped permissions, validate everything crossing IPC, and verify default-deny with negative tests.
rust