...
This new Kiuwan Engine provides support for Apache Cordova framework (Microsoft framework for developing multi-device mobile apps in C# for .
Apache Cordova is a mobile application development framework that enables software programmers to build applications for mobile devices using CSS3, HTML5, and JavaScript, instead of relying on platform-specific APIs like those in Android, iOS, MacOS and Windows mobile platforms).Kiuwan engine is now aware of security-relevant items in Xamarin APIs, providing mappings for input elements in user-defined interfaces (via XAML in Xamarin.Forms) so they are properly considered as user-controlled input.or Windows Phone.
Specific rules addressed to Cordova:
- OPT.HTML.CORDOVA.ShouldUseContentSecurityPolicy
- OPT.JAVASCRIPT.CORDOVA.AvoidClickEvent
- OPT.JAVASCRIPT.CORDOVA.AvoidEnabledDebugMode
- OPT.JAVASCRIPT.CORDOVA.InsecureAndroidMinSdkVersion
- OPT.JAVASCRIPT.CORDOVA.TooBroadAccessOrigin
- OPT.JAVASCRIPT.CORDOVA.WhitelistPluginNotInstalled
****************************************
...