evaluateJavaScript is called with a string containing interpolated variable data.
Pass data via WKScriptMessageHandler or JSON-encode and escape values before injection.