Prevent js injection for non-200 response status codes

android/src/main/java/com/reactnativecommunity/webview/RNCWebViewManager.java

@@ -225,7 +225,25 @@ public static Boolean responseRequiresJSInjection(Response response) {
       return false;
     }
     final String contentTypeAndCharset = response.header(HEADER_CONTENT_TYPE, MIME_UNKNOWN);
-    return contentTypeAndCharset.startsWith(MIME_TEXT_HTML);
+    final int responseCode = response.code();
+
+    String responseBody = "";
+    String contentTypeAndCharset = "";
+
+    try {
+      assert response.body() != null;
+      responseBody = response.body().string();
+    } catch (IOException e) {
+      e.printStackTrace();
+      return false;
+    }
+
+    boolean responseBodyContainsHTMLLikeString = responseBody.matches("[\\S\\s]*\\<[a-z]+[\\S\\s]*\>[\\S\\s]*");
+    boolean responseCodeIsInjectible = responseCode == 200;
+    boolean contentTypeIsHtml = contentTypeAndCharset.startsWith(MIME_TEXT_HTML)
+
+    boolean requiresJSInjection = responseBodyContainsHTMLLikeString && responseCodeIsInjectible && contentTypeIsHtml;
+    return requiresJSInjection;
   }