Overview

This test complements MASTG-TEST-0313. It monitors text inputs in the app at runtime, for example UITextField, UITextView or UISearchBar, and checks whether they are eligible for keyboard caching when the user enters sensitive information.

Steps

  1. Use MASTG-TECH-0056 to install the app.
  2. Use MASTG-TECH-0095 to hook the relevant APIs.
  3. Exercise the app extensively to trigger as many flows as possible and enter sensitive data wherever you can.

Observation

The output should allow the tester to associate each text entry with the corresponding input field and its protection status. At minimum it should contain:

Evaluation

The test case fails if any UI inputs that may handle sensitive values (for example, usernames, passwords, email addresses, credit card numbers, recovery codes) are eligible for keyboard caching. This occurs when:

Expected False Negatives:

This test may produce false negatives if the app uses custom text input controls that do not rely on standard UIKit classes such as UITextField or UITextView (for example in custom UI frameworks or game engines), or if text entry is handled through nonstandard abstractions that prevent reliable observation of input traits at runtime.