Tauri

This walks you through building Tauri desktop apps with security front and center. It's structured around TDD workflows and assumes you know the web/native boundary is dangerous. You get minimal capability configs, CSP lockdowns, IPC command validation patterns, and origin verification checks. The split structure puts CVE details and threat models in separate references since this is tagged HIGH-RISK. If you're shipping a desktop app that wraps web content with Rust, this covers the permission system and common pitfalls like path traversal and shell execution. The patterns show actual validation code, not just principles.