In short, an XBAP application runs inside a web browser. It combines features of both Web applications and rich-client applications but it doesn't run with full trust and full permisions and there is a lot of security limitations involved compared to an
ordinary WPF application that runs on the desktop of a client computer.
Please refer to the answer by Sandro Garcia in the following thread and the additional link for more information about the differences:
