MASTG-TEST-0080 #3048
Open
MASTG-TEST-0080 #3048
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
The Evaluation doesn't give 100% certainty, so I don't know how to write this down. Do we add a disclaimer? |
sydseter
reviewed
Nov 6, 2024
| ## Steps | ||
|
|
||
| 1. Examine the startup flow of the application. Identify if the application calls out to a backend with the application's version information included. | ||
| 2. Examine if the application can handle a specific response from the backend indicating that the application must be updated. For example, the application might evaluate the response from the backend and show a specific error message. Note that the error message can also come from the backend, so the lack of a custom error message in the application does not mean that the feature isn't implemented. |
There was a problem hiding this comment.
Perhaps this part should be clarified? Perhaps it could be written like this:
- Examine if the application can handle a specific response from the backend indicating that the application must be updated. For example by showing or evaluating an error message retrieved from an API or the mobile application.
sydseter
reviewed
Nov 6, 2024
| ## Steps | ||
|
|
||
| 1. Examine the startup flow of the application. Identify if the application calls out to a backend with the application's version information included. | ||
| 2. Examine if the application can handle a specific response from the backend indicating that the application must be updated. For example, the application might evaluate the response from the backend and show a specific error message. Note that the error message can also come from the backend, so the lack of a custom error message in the application does not mean that the feature isn't implemented. |
There was a problem hiding this comment.
Same as above. Regardless of my comment, the note you are using is a bit confusing to me. Otherwise, I like very much the rest.
sydseter
reviewed
Nov 6, 2024
|
|
||
| ## Evaluation | ||
|
|
||
| The test case fails if the application does not contain any logic to handle a forced application update. Additionally, the test case fails if the application informs the user that they must update, but the user can ignore the prompt and still use the application. |
There was a problem hiding this comment.
I feel the evaluation contradict the observation a bit.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Thank you for submitting a Pull Request to the OWASP MASTG. Please make sure that:
If your PR is related to an issue. Please end your PR test with the following line:
This PR closes #2988 and #2994