桌面应用程序中的HTML / CSS / JS(HTML/CSS/JS in desktop applications)
我已阅读过Skype和ICQ等桌面应用程序中的XSS漏洞。 我想知道他们为什么选择在这种应用程序中使用html,也可以在没有任何html的情况下使用这些应用程序 有一个简单的理由吗? 有人知道Skype是否仅在诸如“Skype Home”的页面上使用html,或者是否使用html编写的整个GUI?
我在问,因为我正在编写一个在浏览器中运行的Web应用程序,一旦完成,它将移植到移动和桌面平台。 你可以将它与即时通讯软件进行比较,但实际上它有些不同。
我想过使用PhoneGap来简单地将项目“复制”到移动平台并通过PhoneGap API使用系统功能。 但我认为这可能会很慢和/或不好看。 此外,它看起来不是本地的,问题在于是否在所有平台上都使用我们自己的html GUI(所以它在任何地方看起来都是一样的),或者适应每个平台的设计概念(使用本地语言的本机控件或例如Titanium这不幸太贵了))。
但我从未想过在桌面应用程序中使用HTML。 无论如何,你如何嵌入? 我正在使用C#。 使用WebBrowser表单元素或使用某种Web浏览器呈现引擎?
I've read about XSS vulnerability in desktop applications like Skype and ICQ. I wonder why they choose to use html in this kind of applications that can also be written without any html. Is there a simple reason? Does someone know if Skype uses html on pages like "Skype Home" only or is the whole GUI written in html?
I'm asking because I'm writing a web application that runs within the browser and will be ported to mobile and desktop platforms once finished. You can compare it to instant messengers but it's something different in fact.
I thought about using PhoneGap to simply "copy" the project to mobile platforms and using system functions via the PhoneGap API. But I think it may be slow and/or not good-looking. Also it wouldn't look native, the question then is whether too use our own html GUI on all platforms (so it looks the same everywhere) or to adapt the design concepts of each platform (using native controls in native languages or e.g. Titanium (which is unfortunately too expensive)).
But I never thought about using HTML in desktop applications. How do you embed that anyway? I'm using C#. Using WebBrowser form element or using some kind of web browser rendering engine?
原文:https://stackoverflow.com/questions/7365338