Skip to main content

Security Model

PyWee is for trusted local GUI applications. It is not a general web browser and must not execute system Python for arbitrary remote pages.

The current rule is simple:

  • local trusted PyWee app: Python can run;
  • ordinary remote web page: Python must not run;
  • Python has the normal OS permissions of the process/user that launched PyWee.

PyWee no longer implements a manifest permission layer for filesystem, network, subprocess, DDS, camera, serial, or similar access. If access must be restricted, that belongs to the operating system, process launcher, container, service account, or future product packaging policy, not to the web engine manifest.

Chromium's own renderer/browser process model may still exist because it is part of Chromium. That is separate from Python app permissions and does not make Python an untrusted sandboxed language.