Skip to content

Update MASTG-TECH-0142: add direct file system inspection of WebView storage directory#3739

Draft
Copilot wants to merge 2 commits into
masterfrom
copilot/update-maastg-tech-0142
Draft

Update MASTG-TECH-0142: add direct file system inspection of WebView storage directory#3739
Copilot wants to merge 2 commits into
masterfrom
copilot/update-maastg-tech-0142

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 7, 2026

MASTG-TECH-0142 only covered Chrome DevTools for WebView storage inspection. It now includes direct file system access to /data/data/<app_package>/app_webview/ and references @MASTG-KNOW-0018 for storage area context.

Changes

  • MASTG-TECH-0142: Added "Direct File System Inspection" section with three approaches, delegating general file transfer to @MASTG-TECH-0002:

    • @MASTG-TOOL-0004 (adb): adb pull to retrieve the directory; adb shell grep to search in-place. Notes root/debuggable requirement.
    • @MASTG-TOOL-0007 (Android Studio): Device File Explorer UI path. Notes root/debuggable requirement.
    • @MASTG-TOOL-0038 (objection): filesystem download — works without root or debuggable app.
    • Added @MASTG-KNOW-0018 reference for expected directory contents.
  • MASTG-TEST-0320 (step 6): Updated reference from @MASTG-TECH-0002@MASTG-TECH-0142.

  • MASTG-DEMO-0082 (step 7): Updated reference from @MASTG-TECH-0002@MASTG-TECH-0142.

Original prompt

This section details on the original issue you should resolve

<issue_title>Update and use MASTG-TECH-0142</issue_title>
<issue_description>Update MASTG-TECH-0142 to include direct inspection or retrieval of /data/data/<app_package>/app_webview/, e.g. via adb, objection or Android Studio

Ensure it's used in the relevant tests such as tests-beta/android/MASVS-PLATFORM/MASTG-TEST-0320.md

  • Use @MASTG-TOOL-XXXX IDs everywhere.
  • If another MASTG-TECH covers part of the steps here you should use it instead (e.g. for "Obtain a shell").
  • Refer to MASTG-KNOW-0018 for "what to expect within this folder".</issue_description>

Comments on the Issue (you are @copilot in this section)

@cpholguera Thanks @SuyashJain17 . It's assigned to you now.

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

… update related tests/demos

Co-authored-by: cpholguera <[email protected]>
Copilot AI changed the title [WIP] Update and use MASTG-TECH-0142 for app inspection Update MASTG-TECH-0142: add direct file system inspection of WebView storage directory Mar 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update and use MASTG-TECH-0142

2 participants