Sensor Access Test Guide

Summary Description

Sensor Access Test is used to check if the Dapp silently accesses the gyroscope. When using the gyroscope, the Dapp should request permission, and by default, the Dapp should not be granted gyroscope access directly.

Vulnerability Identification

• Click the "Start the demo" button.
• If a small window appears at the top of the page asking for permission to access motion and orientation, it means the Dapp is correctly requesting permission to access the gyroscope.
• If clicking directly displays gyroscope data in the box, a vulnerability is present.

Solution

It's recommended to notify users and request permission before performing any gyroscope-related operations.