Confirm
596
edits
Changes
Add warning about security of bundles in their current state - should not include JS with system privileges
webrunner gmail.webapp
webrunner https://mail.google.com/mail
== Security ==
Webapp bundles, as defined today, can and usually do include a JS (webapp.js) which runs with system privileges. This should be removed, so that starting a webapp bundle does not imply handing over your machine and all the data on it to whoever created or modified the bundle. Ideally, webapp bundles should not be able to do more than a normal webapp can, just run in a slightly different UI (no menu etc.) and in their own process.
== Web Application Bundles ==
