TikTok's custom in-app browser on iOS reportedly injects JavaScript code into external websites that allows TikTok to monitor "all keyboard inputs and taps" while a user is interacting with a given ...

Of course, the developer also notes that not every app that injects JavaScript code into an in-app browser does so for malicious purposes, since JavaScript is the basis of many web features.