MASVS-STORAGE Refactoring (till 15.03.22)

[cpholguera]

Hello everybody,

as part of the refactoring process we decided to publish our draft of every section of the MASVS that we (@cpholguera, @TheDauntless and @sushi2k) worked on.

This is based on the MASVS category "V2: Data Storage and Privacy Requirements" (from the MASVS Version 1.4.2): https://github.com/OWASP/owasp-masvs/blob/v1.4.2/Document/0x07-V2-Data_Storage_and_Privacy_requirements.md

Here you can find a summary of the proposed new requirements (more details below):

In the following link we include a nice visualization as a diff spreadsheet including:

• Reason for removal/change.
• Idea behind the new requirement/formulation.
• More context thanks to related Test Cases.
• Filter in column F1 to see
  • the previous version only
  • the new version only
  • or the diff

MASVS-STORAGE is open for comments till mid of March 2022. Please comment directly in the Google Spreadsheet (you can comment on each of the cells) or in this GitHub Discussion.

MASVS-STORAGE Refactoring Diff

[jmanico]

I like this change from the current version, nice!

[cpholguera]

Closed for comments. Thanks everyone for your feedback so far!

[cpholguera]

Consider #647