[faizmokhtar]

Only SFSafariViewController prevents that. Devs still can inject javascript through WKWebView.

[altairprime]

Thanks for the correction; I swapped the two in my head and you’re right.