Skip to content

Commit

Permalink
Deleted 6.7 as already contained in 6.6
Browse files Browse the repository at this point in the history
  • Loading branch information
Sven Schleier committed Jul 5, 2017
1 parent f56ba28 commit e690387
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions Document/0x11-V6-Interaction_with_the_environment.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,10 +14,9 @@ The controls in this group ensure that the app uses platform APIs and standard c
| **6.4** | The app does not export sensitive functionality through IPC facilities, unless these mechanisms are properly protected. |||
| **6.5** | JavaScript is disabled in WebViews unless explicitly required. |||
| **6.6** | WebViews are configured to allow only the minimum set of protocol handlers required (ideally, only https is supported). Potentially dangerous handlers, such as file, tel and app-id, are disabled. |||
| **6.7** | The app does not load user-supplied local resources into WebViews. |||
| **6.8** | If native methods of the app are exposed to a WebView, verify that the WebView only renders JavaScript contained within the app package. |||
| **6.9** | Object serialization, if any, is implemented using safe serialization APIs. |||
| **6.10** | The app detects whether it is being executed on a rooted or jailbroken device. Depending on the business requirement, users are warned, or the app is terminated if the device is rooted or jailbroken. | ||
| **6.7** | If native methods of the app are exposed to a WebView, verify that the WebView only renders JavaScript contained within the app package. |||
| **6.8** | Object serialization, if any, is implemented using safe serialization APIs. |||
| **6.9** | The app detects whether it is being executed on a rooted or jailbroken device. Depending on the business requirement, users are warned, or the app is terminated if the device is rooted or jailbroken. | ||

## References

Expand Down

0 comments on commit e690387

Please sign in to comment.