Of course, the developer also notes that not every app that injects JavaScript code into an in-app browser does so for malicious purposes, since JavaScript is the basis of many web features.