Damy Wise damywise

Security Checklist (What can be done in CursorAI & software-level not infrastructure!)

Configuration Security

Detect secrets in code
Identify secrets committed to version control
Flag hardcoded credentials

Authentication & Authorization

Identify missing authentication checks
Detect improper authorization patterns

Using Edge WebView2 is really straightforward, but using the Composition controller is poorly documented and only discussed on few issues in the WebView2 repo.

The browser itself is rendered on a separate process using DirectComposition API wich does not directly interoperate with DirectX, but can be readed using GraphicsCaptureItem WinRT apis. This means that a capture session must be setup into the host visual root, and it will provide accelerated GPU texture capture of the browser (with transparency)

There are few extra steps to setup this pipeline under win32 apps, apart of usual WebView2 setup:

A DispatcherQueueController need to be created in the hosting thread in order to be able to use the Visual interfaces
Use CreateCoreWebView2CompositionController instead CreateCoreWebView2Controller or its WithConfig equivalent.
Create a WinRT DirectComposition IContainerVisual and IVisual as in the example
Create a WinRT Direct3D11CaptureFramePool and start the session using `GraphicsC

Make sure to initialize Firebase -
Add dependency flutter pub add firebase_messaging
Configure your app for ios/macos to receive notification (https://firebase.flutter.dev/docs/messaging/apple-integration/)

Usage

import 'package:firebase_core/firebase_core.dart';
import 'package:firebase_messaging/firebase_messaging.dart';

	import 'dart:async';

	import 'package:flutter/material.dart';
	import 'package:flutter/rendering.dart';

	/// Written by PHNTM GmbH
	void main() {
	runApp(const AdvancedOverlaySample());
	}

	// MIT License
	//
	// Copyright (c) 2025 Nidal Bakir
	//
	// Permission is hereby granted, free of charge, to any person obtaining a copy
	// of this software and associated documentation files (the "Software"), to deal
	// in the Software without restriction, including without limitation the rights
	// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	// copies of the Software, and to permit persons to whom the Software is
	// furnished to do so, subject to the following conditions:

	// Source: https://twitter.com/calebporzio/status/1151876736931549185

	<div class="flex">
	<aside class="h-screen sticky top-0">
	// Fixed Sidebar
	</aside>

	<main>
	// Content
	</main>