Re:See what JavaScript commands get injected through an in-a...
by wruza on Friday August 19, 2022 @05:34AM
(#32519057)
I agree and should have thought about it this way, my bad. If there will be a way to deny that system-wide or at most once per app, no issue then.
Edit: the confusing part was “the contents of this website”, which made me think of per-site basis.
In the case of UIWebView/WKWebView (AKA the browser within an app that can access web data), this can be implemented by Apple as any other data access prompt like location data access or App tracking access for example.
Apps like to track user data like user location too but thanks to Apple's implementation of prompting the user first, they need to have a legitimate reason to request that information.
So, I guess, apps can claim that they need to access web data to provide some service(like widget, sign in session to transfer the login into the app etc) and users who want that can accept the requests and those who don't can have peace of mind.