Apple explicitly allows shipping Javascript OTA updates to web based apps. I think they just don’t want apps to sneak in usage of restricted native features between review cycles.
Login to reply
Replies (2)
These scripts are heavily sandboxed and restricted in what they can do, its fine.
“2.5.2 Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps. Educational apps designed to teach, develop, or allow students to test executable code may, in limited circumstances, download code provided that such code is not used for other purposes. Such apps must make the source code provided by the app completely viewable and editable by the user.”
4.7 also talks about the exception for JavaScript.


Apple Developer
App Review Guidelines - Apple Developer
The App Review Guidelines provide guidance and examples across a range of development topics, including user interface design, functionality, conte...