JavaScript is not available.

InAppBrowser.com - a new tool I used to investigate the in-app browsers of apps (that use them) to look for any external JavaScript code being injected.

649

2,332

When opening a website from within the TikTok iOS app, they inject code that can observe every keyboard input (which may include credit card details, passwords or other sensitive information) TikTok also has code to observe all taps, like clicking on any buttons or links.

2,865

4,314

Continuing to analyse the Instagram iOS app, I found something new: Besides injecting pcm.js (as covered last week), Instagram also injects JavaScript code to observe all taps happening inside their in-app browser, like clicking on buttons, links or images.

636

1,695

As of iOS 14.3, apps can easily hide their JavaScript activities from websites using WKContentWorld. Hence, it becomes more important than ever to find a solution to end the use of custom in-app browsers for showing third party content.

252

1,367

Apps that use the recommended SFSafariViewController approach, don’t have any of those problems. Even with the WKContentWorld system, there is no way the iOS app can inject JS code into external websites, making it the safest choice for the user.

251

1,169

FAQ for non-tech readers

428

1,487

Wow, what an honour to have my work featured on

@forbes

Including statements by TikTok confirming the code I found exists and does what I expected. forbes.com/sites/richardn via

@richardjnieva

482

2,458

mikeymikey

@mikeymikey

Github link at the end doesn't seem to be working?

GitHub - KrauseFx/InAppBrowser.com: Showcasing what in-app browsers do under the hood

I knew I’d forget something! Here we go, it’s public now:

github.com

Showcasing what in-app browsers do under the hood. Contribute to KrauseFx/InAppBrowser.com development by creating an account on GitHub.

152

Show replies

Aiden

@aidencoder

I wonder who the coders are ... who said yes to implementing this feature ... instead of just walking out, knowing that programming is in high demand.

266