discussions-and-proposals
discussions-and-proposals copied to clipboard
Implementing MSTG-PLATFORM-9
How to make sure react native application is protected against screen overlay attacks and how to test it?
We need to make sure our react native app follows MSTG-PLATFORM-9. We are following this link: https://github.com/OWASP/owasp-mastg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-for-overlay-attacks-mstg-platform-9.
Details
- In the above link given, there are 3 points given in static Analysis, i need to know if our app need to implement it and in which cases?
- Can anyone explain where to add the code provided in the above link if we are required to do it. Also, our app doesn't uses
SYSTEM_ALERT_WINDOW
permission.
Here are the version details:
- react-native: 0.70.2