Skip to content

Generalize MASTG-TEST-0375 for both implicit and explicit intents #3906

Description

@TheDauntless

MASTG-TEST-0375: Missing Validation of Data Returned from Implicit Intents

This test focusses on Implicit intents, but there's no reason for that. Implicit intents are definitely more 'dangerous', but it's not because an explicit intent is used, that the other app is inherently trusted.

You could have a button 'attach file from dropbox' in your app, which uses an explicit intent to trigger dropbox, but it doesn't mean you should trust the data that dropbox returns.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions