Tag Info

Hot answers tagged

9

Zed Attack Proxy from OWASP - https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project And generally I would advise browsing the site to learn more about security Metasploit community edition is free - http://www.metasploit.com/about/choose-right-edition/


9

It's certainly possible - that's the way I and many others here became testers. As Som Ghosh says, you will need to mention in your applications for test positions that you have worked in testing as well as development. I'd suggest you include details of the kind of testing you've done and the scale of the projects that you tested. I would recommend that ...


8

I am not expert in search engines, but there are many factors that contribute to how search results are displayed. The query is is essentially the starting point, and how the engine parses the query is important. Also some search engines will 'refactor' the query based on natural langauge algorithms. The order of returned results is often dependent on ...


6

1 may be necessary, but it's also possible to handle it by executing some javascript. For example, if the ajax page is using the jquery library, you can do this: bool isAjaxFinished = ((IJavaScriptExecutor)webDriver).ExecuteScript("return jQuery.active == 0") 4 and 5 on your list don't seem necessary and may actually be counter-productive. Selenium does ...


5

My experience is that UI automation tools differentiate themselves by the kinds of interfaces they interact with rather than whether they facilitate "basic" testing or complicated testing. I think you will have a hard time finding a single tool that covers both native applications (what you called "locally installed GUI front-ends") as well as web ...


4

I'm currently using Quality Center for test case management, and it has a similar structure. I've found that in the expected result section for each step is a good place to write down some items that you would look for outside of the basic 'action completes without error'. You could mention a few points of other questions to ask while the application is ...


4

In my experience, functional testing of websites isn't much different from functional testing of desktop applications. The places I've found that can be different are: Getting a clean test environment can be more complicated (it can also be next to impossible for extremely large corporate web applications) There will be additional security concerns ...


4

The wording of the question and the answers seem to miss a subtlety in what you're asking. To not break HTTP, you should always return as a 500. You never redirect to an error page (and give a 200 OK if something bad happened). Now, whether or not you're bubbling up the stack trace, or just giving a simple "something bad happened" - that's another story. ...


4

In the company I'm currently working on, we tested out some testing frameworks out there, and we finally decided to go with Jasmine. This is what we found: JsUnit: This is one of the oldest unit testing framework, that was later being maintained by Pivotal Labs. But even they are using Jasmine now :P. JSpec: This is an RSpec like BDD unit testing ...


3

Jasmine is a BDD tool for JavaScript.


3

In production, our web application shows a friendly message. While manual testing, we set a test flag that allows a stack trace to appear in the browser. When we are penetration testing or stress testing, we surface the HTTP 500.


3

Have a look at Selenium @ www.seleniumhq.org its open source and really flexible or you can have a look at jubula http://eclipse.org/jubula/ its an eclipse project for automated functional GUI testing for Java and HTML applications.


3

This question comes up a lot. Here is a possible solution, but it will require some additional development. You could use a customized HTTP proxy that acts as a pass-through filter except when it sees an HTTP 401 response. In the latter case, the proxy would respond with authentication credentials of your choosing. Here is how you might do it, in steps: ...


2

There are lots of changes you will see once you switch from Testing of Desktop to Web application. You can study about these points: Understand the client Server Architecture. How your Website is handling data. Does your testing needs to cover Security part. Learn about SQL injections or XSS. Scripts and controls or model which different websites are ...


2

For functional testing, I've used soapUI and WFetch. WFetch has worked well for the most part, soapUI is great, although doesn't seem to handle kerberos, by which most of the web services that I need to test are protected. For just manual, soapUI has normally been my clear winner. When it comes to automation, I'll admit, I found soapUI rather confusing ...


2

Actually, the question how to test search engines is part of information retrieval (IR) problem. I will list just a few approaches how they can be evaluated/tested. Traditional IR approach One way in traditional IR is to prepare test setup, including: Candidate queries Dataset of indexed pages Expected result set (included expected ranking) for each ...


2

I worked for a SEO company in 2004. Our target was to get natural/organic search results on the first or second page of Google for the targeted key phrases (Natural/organic search results are the regular search results, not the ones sponsored by Google Ad Words). The company was a start-up and decided to focus on Google only since it had more than 80% of the ...


2

No. If you ask a normal person (i.e. a non geek) they will most likely think that they have done something wrong. You should always try and be as user friendly as possible. Also the stack trace should never be visible in a production system as that is exactly what hackers are looking for. One thing we used to do was in a test environment was to surface the ...


2

I'm not sure it's directly relevant or an option for you, but this post on SO suggests that Hudson is a good option. And for good measure, here's a direct Hudson CI link.


2

First of all I would recommend to read about the Testing Pyramid (if you do not know it yet); in a nutshell, do not create more than 10% GUI Tests. Furthermore, I recommend these two articles from Gojko Adzic:Ui Testing without shooting yourself and Effective User Interface Testing In our current project we (unfortunately) have a lot of GUI Tests. What ...


2

As far as my experience goes (not too far ;-) - have a look at Sikuli. At first thought - it is ideal for heterogenous apps with GUI and not wanting to go too deep into details of the apps.


2

I don't see DOM based tools going away until DOM itself goes away. In general this is getting more and more complex with graphics, animations, tricks to increase speed, etc... but the underlying structure of the browser and html is the same. The tricky parts are really just timing as the DOM is modified based on user interactions to avoid page reloading. ...


2

Eugene S, I had a similar problem with testing UI generated by ExtJS library. The solution I found useful was to create separate classes for more complex visual components. For instance, for data grid components I have created ExtJsDataGrid class that let me pick up a specific cell in the grid, abstracting me from obscure details in Selenium (dynamic ...


1

You can use those links : Mozilla https://support.mozilla.org/en-US/kb/clearing-cookies-private-data-history-and-settings Chrome https://support.google.com/chrome/answer/2392709?hl=en


1

Just a comment, no matter how many documents are written for developers about producing testable code, the code will still not be testable, until developer tries to write some automation for his code. IMHO, spending half a day when dev sits side by side with a person who knows how to use one of the UI automation frameworks and trying to write some automation ...


1

Overall best practices for testability is difficult, since that could involve whether the code "hides" defects (e.g. race conditions causing intermittent threading issues or difficult corner case issues). Usually testability goes hand in hand with good development practices: well documented code, following a coherent coding style standard, and good ...


1

You can try this tools: Grid Wichterle https://play.google.com/store/apps/details?id=eu.inmite.android.gridwichterle&hl=cs Pixel Ruler http://www.pixel-ruler.net/ Disclaimer: I'm author of the second one :-)


1

The page object pattern is a pretty simple concept, not nearly enough meat on it for an entire book, although I could definitely see a book about UI automation that included it. This blog post has some good information about it: http://selenium-tutorial.blogspot.com/2012/06/webdriver-page-objects-pattern.html As for other best practices, see this answer ...


1

You can use SilkTest 2011 as it has support for the IE 9 & FF6. Your silk test 2010 script will run on Silk test 2011.


1

You could try configuring IE so it does not display those troublesome modal boxes. Otherwise, you might try scripting the relevant parts with the modal dialog manually with the help of the locator spy. Edit: With newer versions of Silk Test you can enable Accessibility support for IE, which will enable Silk Test to recognize those little overlays at the ...



Only top voted, non community-wiki answers of a minimum length are eligible