OWASP / owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://mas.owasp.org/
Creative Commons Attribution Share Alike 4.0 International
11.57k stars 2.29k forks source link

Migrate to new github actions #1736

Closed commjoen closed 11 months ago

commjoen commented 4 years ago

In order to speed up reviewing & releasing, we need to :

Run the new pipeline and create documents: ./tools/docker/run_docker_mstg_generation_on_local.sh

Notes

Nots about to-be-fixed line-breaking issues (P: problem, S: solution):

P: this is not breaking line (causing overflow): **Protocol_KeyExchangeAlgorithm_WITH_BlockCipher_IntegrityCheckAlgorithm**
S: TO BE FIXED

P: Tables e.g. under "if data is rendered in a HTML context, six control characters that must be escaped:"
S: TO BE FIXED

P: The following is not breaking properly
"The module app.package.attacksurface",
"For example, \e search.quiet=true;", 
"are stored in clear text in /data/data/<package-name>/shared_-"
"stored in the clear text file /data/data/<package-name>/databases/privateNotSoSecure"
S: \newcommand*\justify... -> Verify if it's the best solution

P: The following is not breaking properly "A94A8FE5CCB19 ..."
S: TO BE FIXED

P: "Apple recommends using loadHTMLString:baseURL:/loadData"
"method loadFileURL:allowingReadAccessToURL"
"init(activityItems:applicationActivities:"
S:  TO BE FIXED

P: "contains a single file "WKWebView/scenario1.html" "
"kernel header file arch/arm/include/asm/unistd.h."
S:  TO BE FIXED
commjoen commented 4 years ago

We still have todos open...

commjoen commented 4 years ago

maybe we can include the open tasks of https://github.com/OWASP/owasp-mstg/issues/1156 here?

commjoen commented 4 years ago
Schermafbeelding 2020-05-29 om 11 14 27

regarding pdf links...

commjoen commented 4 years ago

~Propose : fix Level 6 headings (######) have no formatting and look like normal text by preprocessing: ###### -> s/######\(.*\)/\_\1\_/g ?~ fix can be derived from https://github.com/jgm/pandoc/issues/783 i guess...

commjoen commented 4 years ago

Maybe https://github.com/dalibo/pandocker/issues/168#issuecomment-660968845 can help?