Possible Typo in Testing Object Persistence Web View (https://mas.owasp.org/MASTG/tests/android/MASVS-CODE/MASTG-TEST-0034/)

[MommyBurger]

Hi All!

Was reading through the MASVS tetsing guide and notice there may be a slight Typo on for MASTG-0034 in the Overview section, see bolded below:

To test for object persistence being used for storing sensitive information on the device, first identify all instances of object serialization and check if they carry any sensitive data. If yes, check if is properly protected against eavesdropping or unauthorized modification.

There may be a work missing. Potential rewrite:

To test for object persistence being used for storing sensitive information on the device, first identify all instances of object serialization and check if they carry any sensitive data. If yes, check if the sensitive information is properly protected against eavesdropping or unauthorized modification.

Minor change, but may be worth adding for clarity