App sandbox

[jonaswre]

A sandbox for thrid party content must be implemented.

A webview would likely be the best solution.

The current api needs to be extended to provide the ability to interact with native functionality, like camera, notification, gps, media player and anything that might be useful.

[jonaswre]

I just had a look at the flutter webview. It should be possible to isolate the loaded thrid party content.
Communications can be handled only by passing messages between the webview and app. No need for csp headers.