This is why I always refused the argument “embedded browsers are bad because they don’t show the address bar”.
Here’s FB’s EMBEDDED browser showing an address bar… and it can show *whatever* the app developer wants in there. Also, capture all your keystrokes.
1
2
7
That’s the point of the argument though, it’s not about whether there is an address bar visible, it’s whether it’s the *real* system address bar. Unfortunately it’s nearly impossible to enforce or accurately communicate to users tho.
1
1
I agree, and platforms haven't been doing much to help in this regard lately either. One of the last mechanisms we have to clearly communicate this is that websites can't draw things outside the browser window. Obvs that's different in mobile apps tho.
May 11, 2021 · 2:28 AM UTC



