From 27da9c884d93ff4ddec39768da78bc033b10d087 Mon Sep 17 00:00:00 2001 From: Carlos Holguera Date: Thu, 7 Nov 2024 16:15:11 +0100 Subject: [PATCH] Update MASWE-0002.md --- weaknesses/MASVS-STORAGE/MASWE-0002.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/weaknesses/MASVS-STORAGE/MASWE-0002.md b/weaknesses/MASVS-STORAGE/MASWE-0002.md index 845788da31..106db7b11e 100644 --- a/weaknesses/MASVS-STORAGE/MASWE-0002.md +++ b/weaknesses/MASVS-STORAGE/MASWE-0002.md @@ -20,7 +20,7 @@ draft: topics: - File permissions (Android) - improperly configured FileProvider (Android) - - [Avoid the deprecated MODE_WORLD_WRITEABLE and MODE_WORLD_READABLE modes for IPC files](https://developer.android.com/privacy-and-security/security-tips#internal-storage). They don't provide the ability to limit data access to particular applications, and they don't provide any control of data format. If you want to share your data with other app processes, consider using a content provider instead, which offers read and write permissions to other apps and can make dynamic permission grants on a case-by-case basis. + - Avoid the deprecated MODE_WORLD_WRITEABLE and MODE_WORLD_READABLE modes for IPC files, see https://developer.android.com/privacy-and-security/security-tips#internal-storage. They don't provide the ability to limit data access to particular applications, and they don't provide any control of data format. If you want to share your data with other app processes, consider using a content provider instead, which offers read and write permissions to other apps and can make dynamic permission grants on a case-by-case basis. status: draft ---