Integrated browsers in iOS apps
Webviews in iOS are still a big headache. It’s a big paradox, Apple Reveiws is very strict sometimes but having integrated and homebaked webviews in your apps is fine, even the depricated UIWebView:
Any app with an in-app browser can easily steal the user’s email address, passwords and two-factor authentication codes. They can do that by injecting JavaScript code that bridges the data over to the app, or directly to a remote host.