Hacker News Reader

> they download and execute external JavaScript

Yes, but they may do so only by embedding Apple's own sandboxed WebKit component. So the downloading, execution, and results are tightly controlled.

I believe all browsers in the app store that run js use Apple's UIWebView and don't run the js themselves.

They have to use Apple's JS engine.