Re: [w3ctag/design-reviews] MiniApp Lifecycle (#523)

> In the updated explainer, I see this: "When a MiniApp is launched, its hosted Super App or OS will check the origin of the MiniApp, to guarantee the MiniApp's security."
> 
> How does it check the origin?

MiniApp developer can submit its MiniApp domain to the backend MiniApp platform, which is provided by the hosted Super App or OS vendors. The MiniApp platform will check and determine whether the MiniApp domain can be permitted, and register the MiniApp domain if permitted.

Then, after a MiniApp is launched, when the MiniApp sends a request, its hosted Super App or OS will check with the backend MiniApp platform, on whether the domain of request has been registered in the MiniApp platform, so to guarantee the MiniApp's security.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/523#issuecomment-1094738722
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/523/1094738722@github.com>