26

Here is one approach. If you have a Gmail account with an address of, say, abdullah@gmail.com, I can send emails to you at abdullah+ARBITRARY-STRING@gmail.com. Each of your users can have a different Gmail address, e.g. abdullah+1@gmail.com, abdullah+2@gmail.com, and adbdullah+3@gmail.com, but they will all correspond to the same Gmail account.


20

Some suggestions in addition to the good ones already listed: Look for things the software shouldn't do. Make it do them. It's web-based, so what happens if it loses the network/internet partway through a multiple-screen operation? Look for words in the specifications/user stories like "should", "always", "never", and so forth. These indicate conditions ...


17

Deploy test SMTP server in your local network where the application does have access to that one and external network does not. Configure your DNS (MX record) or your application (test instances usually allow to override the normal mailing configuration) so that the mails are sent through that SMTP server. There is a number of free mail server stubs ...


11

If your driver implements WebStorage you can invoke driver.getSessionStorage().clear(); driver.getLocalStorage().clear(); In order to make sure that the driver does implement WebStorage the idiom is if (driver instanceof WebStorage) { WebStorage webStorage = (WebStorage)driver; webStorage.getSessionStorage().clear(); webStorage.getLocalStorage(...


10

Cleanest solution is to get it removed for QA environment (render it conditionally) - you have one right? You do test BEFORE deploying to production? So don't use CAPTCHA in environment where you run automated tests. If you cannot, use automated humans: there are companies which will solve CAPTCHA for you - it is quite cheap, 1000 for a buck, with decent ...


9

You could use local systems like mailcatcher or mailhog. MailHog has a web interface and SMTP port, you can use it as your SMTP target and you'll "receive" all mail in there. If your application isn't using SMTP but an API and a mail service like sendgrid or mailchimp, this isn't the best thing to since it won't test the API access. Best thing in those ...


8

As of my reading- Guerrilla Testing means going into a coffee shop or another public place to ask people there about your product or prototype. It can be conducted anywhere ex- cafe, library, train station etc, essentially anywhere where there is significant footfall. Guerrilla testing works well to quickly validate how effective a design is on its ...


7

Things are expected to slip through if you are just given a once through correct? Im not talking about a lot of major stuff. But little things (especially if it's a large website). How do I not beat myself up over this? Yes. There are innumerable levels of quality and bugs will slip through at each of them. Consider these levels: Is it possible to use ...


7

The process we follow where I work when a defect is reported in production might give you some perspective: Reproduce the problem. If possible, we try to reproduce on production. Failing that, we'll use the staging environment which is a mirror of production except when we have a new deployment staged there prior to release. Analyze the problem. First we ...


7

Here is the completed example that demonstrates how you can modify requests from your Selenium tests. To demonstrate one I have created a sample REST mock service via SoapUI that would return just a {"SUCCESS"} message for any response. The test code (TestNg is used for test running, and borwsermob-proxy for proxying requests): public class MiscTests { ...


7

While this depends heavily on what part/functionality of a web app you want to test, there is a place and time for both. For example you might have a pop-up for informing the user about a cookie and have him accept (or decline) it. Typically this pop-up would only show for the first visit, making incognito mode ideal for repeatedly checking the pop-up ...


7

Given a simple application diagram how would you test it or what will be your test plan or test strategy. The only answer to a question like this is: "There is no such thing as 'go there and test'". Testing is performing a risk investigation activity. Any investigation has goals and questions to be answered. So, what type of testing one usually do ...


6

The answer Peter Masiar gave no longer works. This answer will result in the following exception: Traceback (most recent call last): File "", line 1, in File "/Library/Frameworks/Python.framework/Versions/3.5/lib/python3.5/site-packages/selenium/webdriver/remote/webdriver.py", line 245, in get self.execute(Command.GET, {'url': url}) ...


6

So is there any perfect test plan template which I can use for one website and I am only tester. No. There is no such thing as a "perfect test plan template". Instead of perfection, strive for "good enough for your needs". Since you are the sole tester, start out with something simple. Note what you are testing, when you are testing, the environment you ...


6

Do you really need to test money has been deducted? You should trust PayPal tested their end of the payment system. If not get some real credit-cards and test the full flow. PayPal has some guides how to do the testing, it includes example of test credit-card numbers, with this you should be able to test the whole flow, except the money part. Test ...


6

Follow Test Pyramid and apply 80/20 rule: 80% of tests are low-level unit tests 16% are API tests (services) (16% is 80% of the reminder) 4% are UI tests Start with manually running unit tests. Add CI for unit test, then services and UI tests as you have time. Jenkins is commonly recommended as test runner for CI. See recently asked: Tests in CI: Are API ...


5

If this were Selenium, what I would do is first wait for the element to exist before I tried to operate on it (especially if I'm seeing this problem on IE, seems to be a common annoyance with that browser unfortunately) Rereading your question, I think something like this will solve it. That you can click it manually after the tool loads the page and fails ...


5

Welcome to SQA, Eddy. I have no experience in testing your software, so I have no real-world scenarios that may suit your application. And scenarios I know are typical for software that I tested, so they might be useless for you anyway. However, I have a number of general tricks or techniques that opened my mind: Learn from existing bug reports. If your ...


5

I can provide a bit more detail here -- I work for ChargeOver. Firstly -- Please do feel free to reach out with us directly! We haven't spoken with you directly (we've spoken with Alvin about this only) but are more than happy to help in any way we can! Really! We love to help and code and want to make sure things are going well for you, and also don't ...


5

Here you check. There are 58 (and counting) free and open source load testing tools which you can utilize. If you are looking for the narrowed-down list check out Open Source Load Testing Tools: Which One Should You Use? article which describes and compares the following tools: The Grinder Gatling Tsung Apache JMeter There you will be able to find ...


5

No, test-cases are about behaviour not implementation. The implementation could change, but most often the behaviour would stay the same. Coupling test cases to implementation would mean you need to change the test-cases every-time you refactor the code. This is an anti-pattern. So don't specifically use test-cases to check how the application was ...


4

If you want pass "classical capture" like this http://www.google.com/recaptcha/learnmore, then my answer "There is no way". For testing: you should test build without capture verification (Devs can create special build) For hacking by webdriver (f.e. You want to create google accounts by webdriver automatically) you should to explore "capture hacking"


4

In my experience, functional testing of websites isn't much different from functional testing of desktop applications. The places I've found that can be different are: Getting a clean test environment can be more complicated (it can also be next to impossible for extremely large corporate web applications) There will be additional security concerns because ...


4

Public websites do not want you to run your performance test against them. In fact, there is a name for that situation: it's called an attack, and you could get into legal trouble for it. If you want to run a performance test, set up your own website. (For your purposes, you can probably run the web server on the same machine as your test code.)


4

Been in that situation, and far more than I'd like. While we'd like customers to provide complete and iron-clad requirements, it never (and I do mean never) happens. Well, unless you're shooting people into space. I hear they do a pretty thorough job. For the rest of us, it's generally a continuum. The bits of this you don't have as far as requirements ...


4

What is Guerrilla Testing: It is a way to get some quick user feedback on your product or prototype. I can say its usability testing. Guerrilla Testing Covers: It covers an activity by which you need to conduct it where your audience are novice users and observe these - Can they find the content? Is the language relevant to them? Have they understood what ...


4

10 security checks for any web application are as follows - #1 SQL Injection Code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). #2 Broken authentication and session management Authentication and session ...


4

There is no certain way from a black box perspective, especially if the tests are not just 50/50 binary switches. For example if a test is being run at 5% / 95% (as we do in my company) that it will only show up, on average, once every 20 runs. Given the above, there are a few things I can think of that you can do: If the ab test is performed via URL ...


4

As I understand this, you have an application that takes some set of data per user, renders it to PDF, and allows the user to download the generated PDF file. If there are any errors, the PDF is not generated. You are correct that in testing the PDF, you are essentially testing the third party library the app uses to generate it. You are also pulling too ...


4

It depends If the coding standards of the organization require that each element has a clear name and limits the data to be entered, and the test team is typically part of code reviews, then by all means include these checks with your test cases. If the organization doesn't require controls like this, it's probably better for your interaction with the ...


Only top voted, non community-wiki answers of a minimum length are eligible