tones411

Electron gets hate due to filesize and memory bloat. C++ gets hate for memory leaks. Rust with Tauri relies on a webview which could change versions underneath the app when the OS gets an update.

Which language and cross platform desktop GUI framework checks the boxes for being lightweight in terms of filesize and memory usage, has native controls, supports accessibility and uses retained mode rendering, and works the same ten years from now as the day it was installed?

If someone were to build an installable desktop app with buttons, checkboxes, inputs etc. (so not a video game) which language and GUI framework should they to use to please the memory and filesize conscious?

Server-side Blazor has been around for a little while now and it was announced last week that Blazor WebAssembly is now production-ready. Have you started adopting either one or do you plan to any time soon?

Android phones have had this for a long time. What could be so hard about adding a pause button to the iPhone video camera? Is it a legal thing? A patent issue?

Go to your favorite news outlet's website, find an ad, right click it and choose Inspect. You'll likely see that it was embedded using a cross-domain iframe.

If iframes are so evil and insecure, then why are they still allowed to be used by top websites to let third-party ad networks embed ads?

Please don't ask why I would want to use iframes. I have my reasons for a specific scenario. I know they aren't good for SEO, they are hard to resize, hard to debug, present bookmarking concerns, hard to get to look good, etc.

I'm looking for responses strictly from a security standpoint.

When used properly with the "x-frames-options" and the right "content-security-policy" headers, are cross-domain iFrames still insecure? If so, can you please point me to documented facts?