Browser Cross-App Scripting

Android browser could be tricked into running javascript in the domain of a different app...