For the security scenario you’ve described, a better more obvious architecture is to run each tab in a unique “process”, not thread, with unique memory protected address space. Then use IPC to share a framebuffer to the viewer app. Thats not the path they took.
1 Like