Add a demo for MASTG-TEST-0231 (References to Logging APIs)

[dchapagain]

I noticed MASTG-TEST-0231 does not have a demo yet. I would be interested in adding one. My idea is to create a static Semgrep demo built on the MASTestApp, with a MastgTest.kt sample that covers the logging APIs listed on the test (android.util.Log, Logger, System.out.print, System.err.print, Throwable.printStackTrace). I would also add a new rule under rules/ and include the reversed Java generated by the extraction script.

I am a Software Engineer, mostly React Native with native Kotlin modules (Android). I already have a working local setup: MASTestApp builds and runs on an API 35 AVD, and jadx/apktool/semgrep are in place.

Before I start, I wanted to check one thing. PR #3592 is currently a draft and updates some of the terminology in this area, such as using "authenticators" instead of "secrets" and "user sensitive data". Should I write against the current master, or align with the wording in that PR?

[cpholguera]

Hi @deepagain81, I got a proposal for you. It seems that MASTG-DEMO-0006 is missing some APIs. Would you like to open a PR first to update that demo? After that's all done and merged we can consider a new PR where you can reuse the kotlin file for the new static demo. Please read our contribution guidelines and content guidelines https://mas.owasp.org/contributing/writing-content/

First of all you'll need to create an issue for the update and get it assigned. Thank you!

[dchapagain]

Thanks, that works for me - happy to start with MASTG-DEMO-0006.

I have gone through the contribution and content guidelines. When comparing the demo's MastgTest.kt and run.sh against the APIs list in MASTG-TEST-0203, the ones that I do not see covered are System.out.print, System.err.print and Throwable.printStackTrace. Also, the Logger is only covered via .severe. Let me know if I have missed anything or if you had a slightly different scope in mind.

I will open an issue for the update with a couple of scope questions and request assignment there.