Port MASTG-TEST-0073: Testing UIPasteboard (ios) (by @guardsquare) #3051
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR closes #2966
This pull request introduces significant updates related to monitoring and testing the use of the iOS general pasteboard. It includes the addition of new technical guidance, test cases, and the deprecation of an older test in favor of a more detailed and structured approach. Key changes are grouped into technical guidance, new test cases, and deprecation updates:
Technical Guidance:
MASTG-TECH-0134.md
that provides comprehensive instructions on monitoring the iOS pasteboard for sensitive data, including methods to retrieve pasteboard information, detect sensitive data, and build a custom pasteboard monitor.New Test Cases:
MASTG-TEST-0276.md
for static analysis of the iOS general pasteboard to ensure sensitive data is not written to it.MASTG-TEST-0277.md
for dynamic analysis to monitor sensitive data being written to the pasteboard at runtime.MASTG-TEST-0278.md
to verify that pasteboard contents are cleared when the app moves to the background or terminates.MASTG-TEST-0279.md
to ensure pasteboard contents have an expiration date.MASTG-TEST-0280.md
to check if pasteboard contents are restricted to the local device.Deprecation Updates:
MASTG-TEST-0073.md
with a note pointing to the new test cases in MASTG V2. Updated its content to referenceMASTG-TECH-0134
for runtime pasteboard monitoring and removed redundant technical details. [1] [2] [3]