Prod origin of a Tauri-registered scheme. PLATFORM-DEPENDENT (verified
against tauri 2.11.2 plugin.rs): macOS/iOS/Linux resolve it to
<scheme>://localhost, Windows (WebView2) to http://<scheme>.localhost.
The wrong form silently rejects every guest message and the handshake never
completes, so it MUST match the iframe's real origin. UA sniffing is
dependable inside the Tauri webview (WebView2 always reports a Windows UA).
Prod origin of a Tauri-registered scheme. PLATFORM-DEPENDENT (verified against tauri 2.11.2
plugin.rs): macOS/iOS/Linux resolve it to<scheme>://localhost, Windows (WebView2) tohttp://<scheme>.localhost. The wrong form silently rejects every guest message and the handshake never completes, so it MUST match the iframe's real origin. UA sniffing is dependable inside the Tauri webview (WebView2 always reports a Windows UA).