Re: [w3c/manifest] About update icon in web app manifest (Issue #1049)

There is no developer-facing permission or anything. All you have to do is update your Web App Manifest. The browser then decides how to present potential changes to the user and lets them approve the change. For example, in Chromium, this behavior is still being iterated on. Track https://crbug.com/926083 for updates.

The core threat is:
- The user installs a harmless PWA like, say, a Tetris game.
- The PWA, after a couple of days, replaces its icon and name with, say, "Chase Bank", and the [Chase icon](https://www.chase.com/etc/designs/chase-ux/favicon-152.png).
- The user opens the turned-evil "Tetris" app, thinking it is the Chase Bank" app.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/1049#issuecomment-1231437356
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/manifest/issues/1049/1231437356@github.com>