Update: MASWE-0064 - Content Provider
Open
- Dominant language
- Python
- Stars
- 43
- Forks
- 27
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 4
Description
Update the existing MASWE for content providers: https://github.com/OWASP/maswe/blob/main/weaknesses/MASVS-PLATFORM/MASWE-0064.md
Follow the guidelines in .github/instructions/
References to consider when updating the MASWE:
https://developer.android.com/guide/topics/providers/content-provider-basics
https://developer.android.com/privacy-and-security/risks/content-resolver
https://developer.android.com/privacy-and-security/risks/untrustworthy-contentprovider-provided-filename
Exclude the Dirty Stream attack, this will be handled separately.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.