IMO, this should not work. Running scripts in Joplin should be blocked or at least only allowed after changing a setting. @laurent, why is it possible to run scripts on mobile?