appdefensealliance / ASA-WG

1 stars 4 forks source link

Mobile App Profile 1.1.2.1: incorrect evidence requested #34

Open zka-nord opened 1 week ago

zka-nord commented 1 week ago

Evidence

L1: Provide a code snippet showing the use of InputMethodManager showSoftInput with the SHOW_IMPLICIT flag for sensitive data fields.

The evidence above is related to the way how and when the keyboard appears to the user. This doesn't impact the keyboard cache to prevent data leaking. For keyboard cache disable the general suggestion is to use

android:inputType="textNoSuggestions"