Confirmed users
182
edits
Line 24: | Line 24: | ||
** Positive case | ** Positive case | ||
** Negative case | ** Negative case | ||
**CSRF token on the field | **CSRF token on the field | ||
*Test password reset function | *Test password reset function | ||
**CSRF token on the field | **CSRF token on the field | ||
*Test some basic security flaws (XSS, SQL injection, ...) --[[User:Tobbi|Tobbi]] 20:04, 18 August 2011 (PDT) | *Test some basic security flaws (XSS, SQL injection, ...) --[[User:Tobbi|Tobbi]] 20:04, 18 August 2011 (PDT) | ||
*Test entering junk (string consisting of all kinds of random Non-UTF8 string) input into the form fields, make sure we bail out with an error message in that case. | *Test entering junk (string consisting of all kinds of random Non-UTF8 string) input into the form fields, make sure we bail out with an error message in that case. | ||
**'''What kind of junk input?''' | **'''What kind of junk input?''' | ||
*** If there's a string fuzzer, couldn't we maybe use this one? Otherwise, try all UTF-8 and non-UTF-8 characters, foreign characters | |||
==Test Plan (Tobbi)== | ==Test Plan (Tobbi)== |