{"id":135,"date":"2015-03-06T20:41:13","date_gmt":"2015-03-06T20:41:13","guid":{"rendered":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/?p=135"},"modified":"2015-03-18T20:03:51","modified_gmt":"2015-03-18T20:03:51","slug":"for-passwords","status":"publish","type":"post","link":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/for-passwords\/","title":{"rendered":"Test Objectives for Passwords"},"content":{"rendered":"

Test Objectives for Passwords<\/h1>\n

One of the most common web UI elements on website is humble Password field. Every website that requires authentication commonly needs a way to enter the password and there few different ways to collect it.<\/p>\n

Most of the time password fields do have a special masking to hide characters entered. Similarly there commonly is a minimum length requirement, but is that all. Are there any other similarities with the common password field, and most importantly are there any common #TestObjectives<\/a>\u00a0that software testers, specially in the context of Exploratory Testing or Session Based Testing.<\/p>\n

 <\/p>\n

So lets start with those two common requirements and see what #TestObjectives<\/a>\u00a0we can come up with.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
G<\/b>roup<\/b><\/td>\nTest Objective<\/b><\/td>\n<\/tr>\n
valid<\/td>\nPassword with zero length<\/td>\n<\/tr>\n
valid<\/td>\nPassword with 256<\/span> characters<\/td>\n<\/tr>\n
valid<\/td>\nPassword with 1025<\/span> characters<\/td>\n<\/tr>\n
valid<\/td>\nPassword with special characters: !”#\u00a4%&\/()=^<\/span><\/td>\n<\/tr>\n
valid<\/td>\nPassword with special\u00a0characters: ASCII 9 (\u25cb), ASCII 23 (\u21a8), ASCII 26 (\u2192)<\/span><\/td>\n<\/tr>\n
valid<\/td>\nPassword with special meaning:\u00a0<script>alert(password);<\/script><\/span><\/td>\n<\/tr>\n
valid<\/td>\nPassword with special meaning:\u00a0<?<\/span>php <\/span><\/code>print_r<\/span>(<\/span>$_SESSION<\/span>);<\/span>?><\/span><\/td>\n<\/tr>\n
valid<\/td>\nPassword with special meaning:\u00a0<%\u00a0HttpContext<\/span>.<\/span>Current<\/span>.<\/span>Session<\/span>[<\/span>“password”<\/span>]\u00a0%><\/span><\/span><\/td>\n<\/tr>\n
valid<\/td>\nPassword with special meaning:
\n‘;UPDATE users SET password = ‘apple’;\u00a0SELECT<\/span> *<\/span> FROM<\/span> users\u00a0WHERE<\/span> ‘1’<\/span> =<\/span> ‘1<\/span><\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Hopefully that gives you an idea that even a\u00a0simple password field that looks very simple can actually have multiple #TestObjectives<\/a>\u00a0that can be tested.<\/p>\n

So next time you see the password field remember that there might be more than you think to test for.
\n\"Test<\/a><\/p>\n

Interested to read more about possible Test Objectives for passwords?<\/p>\n

\"Download<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Tips for writing Exploratory testing and Session Based Testing TestObjectives for Password fields. #TestObjectives #SessionBasedTesting<\/p>\n","protected":false},"author":1,"featured_media":141,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[20,11,7,12,13,9],"_links":{"self":[{"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/posts\/135"}],"collection":[{"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/comments?post=135"}],"version-history":[{"count":11,"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/posts\/135\/revisions"}],"predecessor-version":[{"id":283,"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/posts\/135\/revisions\/283"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/media\/141"}],"wp:attachment":[{"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/media?parent=135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/categories?post=135"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.mytipsfor.com\/writing\/testobjectives\/wp-json\/wp\/v2\/tags?post=135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}