[Interest] Security thoughts on Webchannel

[Florian Hertrampf]

Hello everyone,

I started using the WebChannel stuff to deploy my applications to a  
Docker container and provide a web-based, interactive GUI.
Now, I think about using this mechanism to authenticate various users  
for information access via webbrowser.
Private information may provided, so I think of the security of the  
Webchannel.

Is there any isolation between client and server object?
Is a client-added function simply pushed to the server and executed?

Thank you in advance

Florian