Mozillians/TestPlan: Difference between revisions

Line 24: Line 24:
** Positive case
** Positive case
** Negative case
** Negative case
**CSRF token on the field?
**CSRF token on the field
*Test password reset function
*Test password reset function
**CSRF token on the field?
**CSRF token on the field
*Test some basic security flaws (XSS, SQL injection, ...) --[[User:Tobbi|Tobbi]] 20:04, 18 August 2011 (PDT)
*Test some basic security flaws (XSS, SQL injection, ...) --[[User:Tobbi|Tobbi]] 20:04, 18 August 2011 (PDT)
*Test entering junk (string consisting of all kinds of random Non-UTF8 string) input into the form fields, make sure we bail out with an error message in that case.
*Test entering junk (string consisting of all kinds of random Non-UTF8 string) input into the form fields, make sure we bail out with an error message in that case.
**'''What kind of junk input?'''
**'''What kind of junk input?'''
*** If there's a string fuzzer, couldn't we maybe use this one? Otherwise, try all UTF-8 and non-UTF-8 characters, foreign characters


==Test Plan (Tobbi)==
==Test Plan (Tobbi)==
Confirmed users
182

edits