# Embedding forms in Kotlin Native Android apps don't have a DOM to embed a ` """.trimIndent() loadDataWithBaseURL("https://eu.forms.app", html, "text/html", "UTF-8", null) } }) } ``` Escape interpolated values `referralCode` is being written directly into an HTML string that a `WebView` will execute as a page. Always escape or JSON-encode any value that comes from outside your app (a deep link, a previous screen, and so on) before interpolating it, to avoid injecting unintended HTML or script into the page. `loadDataWithBaseURL`'s `baseUrl` argument is set to `https://eu.forms.app`, your account's data-region domain, so the loaded page resolves the embed script correctly. Match it to the domain shown on your form's Share page. ## What's next - [Embed options](/embeds/embed-options) for every layout's settings. - [Passing data to your form](/embeds/passing-form-data) for the `answers` option in full.