[somerando7]

To me it's not obvious. I wouldn't think that an app can inject JS into a website because I'm using a web-browser from their app.