Skip to content

Port MASTG-TEST-0073: Testing UIPasteboard (ios) (by @guardsquare) #3051

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 7 commits into from
May 27, 2025

Conversation

pascalj
Copy link
Collaborator

@pascalj pascalj commented Nov 7, 2024

This PR closes #2966

This pull request introduces significant updates related to monitoring and testing the use of the iOS general pasteboard. It includes the addition of new technical guidance, test cases, and the deprecation of an older test in favor of a more detailed and structured approach. Key changes are grouped into technical guidance, new test cases, and deprecation updates:

Technical Guidance:

  • Added a new document MASTG-TECH-0134.md that provides comprehensive instructions on monitoring the iOS pasteboard for sensitive data, including methods to retrieve pasteboard information, detect sensitive data, and build a custom pasteboard monitor.

New Test Cases:

  • Introduced MASTG-TEST-0276.md for static analysis of the iOS general pasteboard to ensure sensitive data is not written to it.
  • Added MASTG-TEST-0277.md for dynamic analysis to monitor sensitive data being written to the pasteboard at runtime.
  • Created draft tests:
    • MASTG-TEST-0278.md to verify that pasteboard contents are cleared when the app moves to the background or terminates.
    • MASTG-TEST-0279.md to ensure pasteboard contents have an expiration date.
    • MASTG-TEST-0280.md to check if pasteboard contents are restricted to the local device.

Deprecation Updates:

  • Deprecated MASTG-TEST-0073.md with a note pointing to the new test cases in MASTG V2. Updated its content to reference MASTG-TECH-0134 for runtime pasteboard monitoring and removed redundant technical details. [1] [2] [3]

@pascalj pascalj changed the title Port MASTG-TEST-0073 Port MASTG-TEST-0073 (by @guardsquare) Nov 7, 2024
@pascalj
Copy link
Collaborator Author

pascalj commented Nov 7, 2024

A couple of comments:

@cpholguera cpholguera changed the title Port MASTG-TEST-0073 (by @guardsquare) Port MASTG-TEST-0073: Testing UIPasteboard (ios) (by @guardsquare) Feb 24, 2025
@cpholguera cpholguera self-requested a review May 25, 2025 16:27
@cpholguera cpholguera marked this pull request as ready for review May 27, 2025 12:56
@cpholguera cpholguera merged commit 697878c into OWASP:master May 27, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

MASTG v1->v2 MASTG-TEST-0073: Testing UIPasteboard (ios)
3 participants