From 716e7aeb9381e1c27552e8040cc547018630551d Mon Sep 17 00:00:00 2001
From: Shaun Dang <pulorsok@gmail.com>
Date: Fri, 12 Dec 2025 14:50:47 +0800
Subject: [PATCH 1/2] Revise CWE-749 detection process documentation

Updated section titles and added images for CWE-749 detection process.
---
 docs/source/quark_script.rst | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/docs/source/quark_script.rst b/docs/source/quark_script.rst
index a3e7445d..1eb5913d 100644
--- a/docs/source/quark_script.rst
+++ b/docs/source/quark_script.rst
@@ -1027,13 +1027,20 @@ We use the `MSTG-Android-Java.apk <https://github.com/OWASP/MASTG-Hacking-Playgr
 
 .. image:: https://imgur.com/KiA0vRD.png
 
-Quark Script CWE-749.py
-===========================
+CWE-749 Detection Process Using Quark Script API
+================================================
+
+.. image:: https://i.postimg.cc/BvhcVXtb/jie-tu-2025-12-12-xia-wu2-47-18.png
 
 Let’s use the above APIs to show how the Quark script finds this vulnerability.
 
 First, we design a detection rule ``configureJsExecution.json`` to spot on behavior using the method ``setJavascriptEnabled``. Then, we use the API ``methodInstance.getArguments()`` to check if it enables JavaScript execution on websites. Finally, we look for calls to the method ``addJavaScriptInterface`` in the caller method. If yes, the APK exposes dangerous methods or functions to websites. That causes CWE-749 vulnerability.
 
+Quark Script: CWE-749.py
+========================
+
+.. image:: https://i.postimg.cc/m2Rz7T2p/jie-tu-2025-12-12-xia-wu2-50-11.png
+
 .. code-block:: python
 
     from quark.script import runQuarkAnalysis, Rule

From 12512930fa4c7c090ae05e880893ce5723df6e4d Mon Sep 17 00:00:00 2001
From: Shaun Dang <pulorsok@gmail.com>
Date: Fri, 12 Dec 2025 23:04:17 +0800
Subject: [PATCH 2/2] Update Quark Script CWE-749 documentation

---
 docs/source/quark_script.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/source/quark_script.rst b/docs/source/quark_script.rst
index 1eb5913d..da0725dd 100644
--- a/docs/source/quark_script.rst
+++ b/docs/source/quark_script.rst
@@ -1030,7 +1030,7 @@ We use the `MSTG-Android-Java.apk <https://github.com/OWASP/MASTG-Hacking-Playgr
 CWE-749 Detection Process Using Quark Script API
 ================================================
 
-.. image:: https://i.postimg.cc/BvhcVXtb/jie-tu-2025-12-12-xia-wu2-47-18.png
+.. image:: https://i.postimg.cc/xjWjXH3P/jie-tu-2025-12-12-wan-shang11-01-40.png
 
 Let’s use the above APIs to show how the Quark script finds this vulnerability.
 
@@ -1039,7 +1039,7 @@ First, we design a detection rule ``configureJsExecution.json`` to spot on behav
 Quark Script: CWE-749.py
 ========================
 
-.. image:: https://i.postimg.cc/m2Rz7T2p/jie-tu-2025-12-12-xia-wu2-50-11.png
+.. image:: https://i.postimg.cc/TwKGwYyH/jie-tu-2025-12-12-wan-shang11-02-28.png
 
 .. code-block:: python