OWASP / owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://mas.owasp.org/
Creative Commons Attribution Share Alike 4.0 International
11.57k stars 2.29k forks source link

References → Info section #683

Closed Sjord closed 7 years ago

Sjord commented 7 years ago

Some documents have a "References" section with an "Info" subsection. I think "Info" is not really a good section header. First of all, info is short for information, and we should at least write the whole word. Second, the "references" header already indicates that pointers to more information will follow.

I think the references that don't fit under the CWE, MASVS, etc. headers should go directly under the "References" header, without their own additional header. Like this:

References

  • [#nelenkov] - N. Elenkov, Android Security Internals, No Starch Press, 2014, Chapter 5.
OWASP MASVS
  • etc.

These sections contain an "Info" header:

sushi2k commented 7 years ago

Agree, "Info" should be removed entirely and the content should be placed under References. This is an inconsistency that we have at the moment.

I can clean it up this week.

sushi2k commented 7 years ago

Fixed https://github.com/OWASP/owasp-mstg/commit/83e2d37fe40874d958fc1378889e66de358dd1e3