android: This is achieved by directly injecting native js code into the webview page and using the addJavascriptInterface method. ios: ios UIWebView itself has the stringByEvaluatingJavaScriptFromString method implementation, which returns the execution result of the js script
The js in the webview page can call each other with Android's local java. The implementation method is slightly different for different Android versions. You can search for the specific topic. There are many examples.
It shouldn’t be possible, just imagine, your App打开任意url都可以对其注入JS代码，那还有什么安全可言？ 调用Web支付接口的时候，顺便把Cookie、Session什么的往自己服务器上发一份？ 虽然Chrome插件 can do this[/squinting smile].
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
android: This is achieved by directly injecting native js code into the webview page and using the addJavascriptInterface method.
ios: ios UIWebView itself has the stringByEvaluatingJavaScriptFromString method implementation, which returns the execution result of the js script
XmlHttpRequest
The js in the webview page can call each other with Android's local java. The implementation method is slightly different for different Android versions. You can search for the specific topic. There are many examples.
It shouldn’t be possible, just imagine, your
App打开任意url都可以对其注入JS代码，那还有什么安全可言？调用
Web支付接口的时候，顺便把Cookie、Session什么的往自己服务器上发一份？虽然
Chrome插件can do this[/squinting smile].