Our readingWhat is a korrent?
Native apps can inject arbitrary JavaScript into any website viewed within their webviews.
Drawn from what Adrian Holovaty said
SubjectJavaScript
Our readingWhat is a korrent?
Drawn from what Adrian Holovaty said
When a native app embeds a website via a webview, the native app has control over that page. Yes, even if it's on a domain that the native app doesn't control (!). This means the native app can inject whatever JavaScript it likes into any website that's viewed in the webview.
Where this was said
↗Adrian Holovaty > Writingholovaty.com
All 3 korrents from this piecethis one is 2nd
Added to korrents 24 Oct 2026 · How quotes work · Something wrong? Tell us
Do you hold this korrent?Do you also believe this?
I hold this tooShared subject first, then similar wording. They may agree or disagree.