Optimize the document of Quark Script CWE-20

Author: JerryTasi

CWE-20/README.md

@@ -1,38 +1,34 @@
 # Detect CWE-20 in Android Application
 
+This scenario seeks to find **Improper Input Validation** in the APK file.
 
-This scenario seeks to find **Improper Input Validation** in the APK
-file.
-
-## CWE-20 Improper Input Validation
+## CWE-20: Improper Input Validation
 
 We analyze the definition of CWE-20 and identify its characteristics.
 
-See [CWE-20](https://cwe.mitre.org/data/definitions/20.html) for more
-details.
+See [CWE-20](https://cwe.mitre.org/data/definitions/20.html) for more details.
 
-![image](https://imgur.com/21CzFUq.jpg)
+![image](https://imgur.com/eO8fepu.jpg)
 
 ## Code of CWE-20 in diva.apk
 
-We use the [diva.apk](https://github.com/payatu/diva-android) sample to
-explain the vulnerability code of CWE-20.
+We use the [diva.apk](https://github.com/payatu/diva-android) sample to explain the vulnerability code of CWE-20.
 
-![image](https://imgur.com/kRIuEHd.jpg)
+![image](https://imgur.com/nsuXYGU.jpg)
 
-## Quark Script CWE-20.py
+## CWE-20 Detection Process Using Quark Script API
+
+![image](https://imgur.com/C7zmwLm.jpg)
+
+Let’s use the above APIs to show how the Quark script finds this vulnerability.
 
-Let's use the above APIs to show how the Quark script finds this
-vulnerability.
+First, we design a detection rule ``openUrlThatUserInput.json``, to spot the behavior of opening the URL that the user inputs. Then, we use API ``behaviorInstance.getMethodsInArgs()`` to get a list of methods that the URL in ``loadUrl`` passes through. Finally, we check if any validation method is in the list. If No, the APK does not validate user input. That causes CWE-20 vulnerability.
 
-First, we design a detection rule `openUrlThatUserInput.json`, to spot
-the behavior of opening the URL that the user inputs. Then, we use API
-`behaviorInstance.getMethodsInArgs()` to get a list of methods that the
-URL in `loadUrl` passes through. Finally, we check if any validation
-method is in the list. If No, the APK does not validate user input. That
-causes CWE-20 vulnerability.
+## Quark Script CWE-20.py
+
+![image](https://imgur.com/bwPqc4K.jpg)
 
-``` python
+```python
 from quark.script import runQuarkAnalysis, Rule
 
 SAMPLE_PATH = "diva.apk"
@@ -54,7 +50,9 @@ for openUrl in result.behaviorOccurList:
 
 ## Quark Rule: openUrlThatUserInput.json
 
-``` json
+![image](https://imgur.com/k4WT8Fb.jpg)
+
+```json
 {
     "crime": "Open the Url that user input",
     "permission": [],
@@ -77,7 +75,7 @@ for openUrl in result.behaviorOccurList:
 
 ## Quark Script Result
 
-``` TEXT
+```
 $ python CWE-20.py
 CWE-20 is detected in method, Ljakhar/aseem/diva/InputValidation2URISchemeActivity; get (Landroid/view/View;)V
 ```