Krause warns that public scrutiny of in-app browser JavaScript tracking code injections on iOS is likely to encourage bad actors to upgrade their software to make such code undetectable to ...

While TikTok said the code’s only used for debugging, researchers also found Meta products Facebook and Instagram can track users’ in-app browser.

Instagram injects Meta’s Meta Pixel JavaScript tracking code into every website that you open. It’s a library designed for website developers to track visitors on their site.

Facebook and Instagram apps can track users via their in-app browsers Tracking code can monitor interactions like clicks, screenshots and password form inputs.

In the Javascript tracking code method, user requests are routed to the advertiser’s actual website rather than through a third party intermediary.

Chrome extensions with 1.4M installs covertly track visits and inject code If you've installed any of these extensions, manually remove them stat.