-
Interesting paper on security aspects of Progressive Web Apps: github.com/spostman/ppp-ccs2018/raw/master/paper/ppp-ccs2018.pdf [PDF]. Among them: crypto-mining in a service worker that's kept alive with silent push notifications and a caching attack. Looks like deeper investigation is needed: github.com/spostman/ppp-ccs2018.