Hi,
Since C3 is a web application, and since you guys are providing an SDK, isn't it possible to take control over the whole application via DOM manipulations ? I mean if a developer had access to the document object of the C3 application, then anything can be done.
Or I'm I missing something ?