Skip to content

Commit

Permalink
complete description for rule hidden_ui
Browse files Browse the repository at this point in the history
  • Loading branch information
sebastianrevuelta committed Jun 14, 2024
1 parent 7342a3d commit 35abb83
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions mobsfscan/rules/semgrep/android/hidden_ui.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -17,12 +17,13 @@ rules:
message: >-
Hidden elements in view can be used to hide data from user. But this data
can be leaked. If the view contains sensitive data, it might still be accessible through memory inspection.
A good practice is to clear sensitive data before hiding it.
languages:
- java
severity: ERROR
metadata:
cwe: cwe-919
owasp-mobile: m1
masvs: storage-7
references:
- https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-for-sensitive-data-disclosure-through-the-user-interface-mstg-storage-7
reference: >-
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-for-sensitive-data-disclosure-through-the-user-interface-mstg-storage-7

0 comments on commit 35abb83

Please sign in to comment.