Iframe workaround

[stackedCG]

1. I made a project that can edit the HTML through the iframe, though the iframe works in both the vite as well as the dev mode of tauri, the element throws either an error or its just messes up all the UIs I created and breaks it in the process.

Now this are what I already done upon doing some research:

• dialog - I am trying to release this app on mobile as well so this is a no go
• webview/multiplewebview - same as the dialog as well I cannot use this method
• csp: disabling - for this one I am currently using this:

//tauri.conf.json

"security": {
      "csp": "default-src 'self'; frame-src asset:; style-src 'self' 'unsafe-inline'; script-src 'self';"
    }

To add more context, I am currently using an iframe inside of the build itself I added it here:
src-tauri > assets > test_templates_temporary > index.html

Currently I cannot find any other solutions and I am kinda at a lost, since using the iframe is crucial for this project.

2. Also I would like to ask if disabling the csp will make a vulnerability that will open my app codes or will it only be harmful to the user, although for this app I am not adding any credentials of some sorts, its just straight up editor.

Thank you in advance for answering!