|
2 | 2 |
|
3 | 3 | <p align="center">Easily implement usual security measures in React Native Expo apps</p>
|
4 | 4 |
|
5 |
| -- [SSL public key pinning](#ssl-pinning) |
6 |
| -- [Certificate transparency](#certificate-transparency) |
7 |
| -- [Prevent "recent screenshots"](#prevent-recent-screenshots) |
8 |
| -- [Safe Keyboard Detector](#safe-keyboard-detector) |
| 5 | +- [Installation and setup](#installation-and-setup) |
| 6 | +- [Features](#features) |
| 7 | + - [SSL Pinning](#ssl-pinning) |
| 8 | + - [Configuration](#configuration) |
| 9 | + - [Pinning subdomains](#pinning-subdomains) |
| 10 | + - [Generating the public key hashes](#generating-the-public-key-hashes) |
| 11 | + - [Testing](#testing) |
| 12 | + - [Certificate transparency](#certificate-transparency) |
| 13 | + - [Configuration](#configuration-1) |
| 14 | + - [Prevent "recent screenshots"](#prevent-recent-screenshots) |
| 15 | + - [Configuration](#configuration-2) |
| 16 | + - [Safe Keyboard Detector](#safe-keyboard-detector) |
| 17 | +- [Contributing](#contributing) |
| 18 | +- [👉 About BAM](#-about-bam) |
9 | 19 |
|
10 | 20 | > **⚠️ Disclaimer**<br/>
|
11 | 21 | > This package is intended to help implement a few basic security features but does not in itself guarantee that an app is secure.<br/>
|
@@ -54,7 +64,7 @@ yarn expo prebuild
|
54 | 64 |
|
55 | 65 | ## SSL Pinning
|
56 | 66 |
|
57 |
| -> **🥷 What's the threat?** Attackers intercepting your app's network requests and accessing private data or sending malicious responses. [More details](https://mas.owasp.org/MASTG/General/0x04f-Testing-Network-Communication/#restricting-trust-identity-pinning) |
| 67 | +> **🥷 What's the threat?** Attackers intercepting your app's network requests and accessing private data or sending malicious responses. [More details](https://github.com/OWASP/owasp-mastg/blob/master/Document/0x04f-Testing-Network-Communication.md#restricting-trust-identity-pinning) |
58 | 68 |
|
59 | 69 | This package implements [public key pinning](https://cheatsheetseries.owasp.org/cheatsheets/Pinning_Cheat_Sheet.html#public-key) using [TrustKit](https://github.com/datatheorem/TrustKit) on iOS and the certificate pinner included in OkHttp on Android.
|
60 | 70 |
|
|
0 commit comments