2

My client uses simple Selenium IDE scripts for regression testing. The issue is that when the scripts are shared, people's AD usernames and passwords are shared too.

I'm trying to put a stop to this by having a test account created with a shared password but they're not convinced this is a better way to go because of the security risk. I realise it's the same thing as what they're doing now... but that's a different discussion.

Anyway, is possible to mask the password in the IDE or call an external file with the test username and password in? I think that would convince them to provide QA with a test account and not inherit the risk of fraudulent activity.

Thanks, Dan

  • Why do not you use selenium webdriver instead of IDE? – Helping Hands Feb 13 '15 at 11:58
  • They don't have the time, budget, resource, etc. to implement WebDriver at the moment. They have an existing library of very simple tests (login, verify a value, logout) and it's just the current setup. The client's always right ;) – trashpanda Feb 13 '15 at 12:02
  • P.S. By resource, I mean that testing's a new concept at the moment so only have functional, manual testers on-board at the moment. This might change in future but it's all they have for now! – trashpanda Feb 13 '15 at 12:04
  • As far as I know , there is no solution in selenium IDE to hide password. – Helping Hands Feb 13 '15 at 12:14
  • 1
    The only quasi-solution would be to have a test/QA environment with a copy of production data, but all passwords changed to something known and standard. So even if people and scripts share passwords, they don't share PRODUCTION passwords. – Peter M. Feb 13 '15 at 14:48
1

Haven't tried it myself, but it appears this firefox addon SelBlocks has functions called loadXmlVars and loadJsonVars.

Found reference to this in a similar question.

GL with that client.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.