News for hackers. Stuff that matters.

A comment on See what JavaScript commands get injected through an in-app browser.

Re:See what JavaScript commands get injected through an in-a... by martinsuchan on Friday August 19, 2022 @03:24AM (#32518352)
I'm just curious, there are plenty of 3rd party full-featured browsers based on WKWebView that are injecting tons of JavaScript into all pages and basically doing the same as in-app browsers. So what's the difference?
[ Parent | on HN ]
Re:See what JavaScript commands get injected through an in-a... by elaus on Friday August 19, 2022 @03:29AM (#32518367)
The article actually mentions those:

> [...] they use JavaScript to offer some of their functionality, like a password manager.

Basically a 3rd-party browser needs to use JS to offer any features or real benefit over simply using Safari. But as a TikTok user you have no benefit when all links open inside the app with tons of custom JS injected that seems to be mainly for tracking you.

[ Parent | on HN ]