Checklist for Testing of Web Application

Similar documents
This document is for informational purposes only. PowerMapper Software makes no warranties, express or implied in this document.

CSCI 1320 Creating Modern Web Applications

Browser Guide for PeopleSoft

GUI Testing Guidelines

ACT476 Professional Project II Test Case Development Team Name Project Tester

BANNER 9 ADMINISTRATIVE PAGES (BAP) USER'S GUIDE. Computing and Telecommunications Services. Banner 9 Administrative Pages - User's Guide 0

Google Chrome 4.0. AccuCMS

Practice Labs User Guide

Creating Better Forms; an article for developers 2010

Live Guide Co-browsing

Website SEO Checklist

OU EDUCATE TRAINING MANUAL

Penetration Testing. James Walden Northern Kentucky University

Defect Based Approach using Defect Taxonomy. Chhavi Raj Dosaj

Beta Mobile app Testing guidelines

Website Report for test.com

Browser Cookie Settings

Website Report for colourways.com.au

Biz Storage File Share User s Manual

Types of Software Testing: Different Testing Types with Details

[Frequently Asked Questions] Accommodation Booking Website

WITNYS Prevention. Basics User Guide V1.0

Instructions For Configuring Your Browser Settings and Online Banking FAQ's

Web Application Penetration Testing

Browser Settings. Updated 4/30/ SSF

Department of Computer Science and Engineering The University of Texas at Arlington. Team: TimeKeepers. Project: Volunteer Tracking System

BIG-IP Access Policy Manager : Portal Access. Version 12.1

Workstation Configuration

CMS Enterprise Portal User Manual

Leader Services Version 2

Website Report for facebook.com

edirectory Change log

Storgrid web client manual

EPRI Software Development 2016 Guide for Testing Your Software. Software Quality Assurance (SQA)

HealthStream Connect Administrator User Guide

Single Sign-On Showdown

How to Edit Your Website

Perceptive Nolij Web. Administrator Guide. Version: 6.8.x

Student User Manual December 2017

Website Report for bangaloregastro.com

erequest Frequently Asked Questions

AppGate 11.0 RELEASE NOTES

Mobile Access Guide Using WhatsUp Gold Mobile Access

2 P age. Pete s Pagebuilder revised: March 2008

Clear Cache Guide Click here for Windows guide Click here for Mac OS guide

Instructions for Configuring Your Browser Settings and Online Security FAQ s

Metrics that Matter Setup. v12.7

Solutions Business Manager Web Application Security Assessment

DreamFactory Security Guide

System Administrator s Guide Login. Updated: May 2018 Version: 2.4

Detects Potential Problems. Customizable Data Columns. Support for International Characters

How to Edit Your Website

Leader Services Version 2

SVRS Float Plan Guide - Slide Index

IDRP Portal User Guide for Providers and Plans

Ricoh Managed File Transfer (MFT) User Guide

Programming Fundamentals of Web Applications

Table of Content. Last updated: June 16th, 2015

pinremote Manual Version 4.0

Republicbank.com Supported Browsers and Settings (Updated 03/12/13)

OneStop Reporting 4.5 OSR Administration User Guide

Xerox Connect App for Blackboard

TripSource: Profile Manager

Release Notes. Dell SonicWALL SRA Release Notes

Sophos Mobile Control SaaS startup guide. Product version: 6.1

Workstation Configuration

Vanguard Secure Service (VSES) User Guide

Oracle Sourcing Support Helpdesk: Telephone: > Option

Contents Using the Primavera Cloud Service Administrator's Guide... 9 Web Browser Setup Tasks... 10

Security and Privacy. SWE 432, Fall 2016 Design and Implementation of Software for the Web

Registering for a DAAD Portal Account

Tableau Server - 101

How to Configure Authentication and Access Control (AAA)

TripSource: Profile Manager

Mobile Banking Online Banking Features Dashboard Pending Transactions Account Export Bill Pay Online Bill Pay

This section of the release notes is reserved for notable changes and new features since the prior version.

Parallels Remote Application Server

Attacks Against Websites 3 The OWASP Top 10. Tom Chothia Computer Security, Lecture 14

A Simple Course Management Website

ISS INDIA Active Directory Self Password Management Solution ISS Facility Services India PVT.LTD.

HKUST WEBSITE GUIDELINES LAST UPDATED _ AUGUST 2018

AppSpider Enterprise. Getting Started Guide

USER MANUAL. SalesPort Salesforce Customer Portal for WordPress (Lightning Mode) TABLE OF CONTENTS. Version: 3.1.0

FAQ. General Information: Online Support:

Release Notes. Lavastorm Analytics Engine 6.1.3

ForeScout CounterACT. Configuration Guide. Version 3.4

Regions OnePass USER GUIDE. It s time to expect more. Regions Bank Member FDIC Revised

Portal Recipient Guide. The Signature Approval Process

APPLICATION INTERFACE

ForeScout Open Integration Module: Data Exchange Plugin

Regions OnePassSM USER GUIDE. It s time to expect more. Regions Bank Member FDIC Revised

Page 1 of 20. Agent Portal v2.0. Training Guide

CNIT 129S: Securing Web Applications. Ch 4: Mapping the Application

Yes No Comments. SHQ Form Compliance Checklist. Sponsor Name: Anticipated Launch Date: Url (s) used for site audit: Audit performed by: Audit Date:

ACA Dreamweaver Exam Notes

I, J, K. Lightweight directory access protocol (LDAP), 162

The SBCC Web Publishing Process The process of creating new web pages or editing existing pages within the OmniUpdate system is straightforward.

CONTENTS IN DETAIL INTRODUCTION 1 THE FAQS OF LIFE THE SCRIPTS EVERY PHP PROGRAMMER WANTS (OR NEEDS) TO KNOW 1 2 CONFIGURING PHP 19

Barracuda Web Application Firewall Advanced Security Features - WAF02

Lava New Media s CMS. Documentation Page 1

Transcription:

Checklist for Testing of Web Application Web Testing in simple terms is checking your web application for potential bugs before its made live or before code is moved into the production environment. During this stage issues such as that of web application security, the functioning of the site, its access to regular users and its ability to handle traffic is checked. Types of Web App Testing Functionality Testing What is Functional Testing? 01. Testing the features and operational behavior of a product to ensure they correspond to its specifications. 02. Testing that ignores the internal mechanism of a system or component and focuses solely on the outputs generated in response to selected inputs and execution conditions. Goal of Functional Testing : The goal of Functional Testing is to verify whether your product meets the intended functional specifications mentioned in your development documentation. Testing Activities Included : Test all the links in your webpages are working correctly and make sure there are no broken links. Links to be checked will include - 01. Outgoing links 02. Internal links 03. Anchor Links 04. MailTo Links

Test Forms are working as expected. This will include- 01. Scripting checks on the form are working as expected. For example- if a user does not fill a mandatory field in a form an error message is shown. 02. Check default values are being populated. 03. Once submitted, the data in the forms is submitted to a live database or is linked to a working email address. 04. Forms are optimally formatted for better readability. Test Cookies are working as expected. Cookies are small files used by websites to primarily remember active user sessions so you do not need to log in every time you visit a website. Cookie Testing will include 01. Testing cookies (sessions) are deleted either when cache is cleared or when they reach their expiry. 02. Delete cookies (sessions) and test that login credentials are asked for when you next visit the site. Test HTML and CSS to ensure that search engines can crawl your site easily. This will include 01. Checking for Syntax Errors 02. Readable Color Schemas 03. Standard Compliance. Ensure standards such W3C, OASIS, IETF, ISO, ECMA, or WS-I are followed. Test business workflow- This will include 01. Testing your end - to - end workflow/ business scenarios which takes the user through a series of web pages to complete. 02. Test negative scenarios as well, such that when a user executes an unexpected step, appropriate error message or help is shown in your web application. Functional Test Scenarios : 01. Test all the mandatory fields should be validated. 02. Test the asterisk sign should display for all the mandatory fields. 03. Test the system should not display the error message for optional fields. 04. Test that leap years are validated correctly & do not cause errors/miscalcula-

tions. 05. Test the numeric fields should not accept the alphabets and proper error message should display. 06. Test for negative numbers if allowed for numeric fields. 07. Test division by zero should be handled properly for calculations. 08. Test the max length of every field to ensure the data is not truncated. 09. Test the pop up message ( This field is limited to 500 characters ) should display if the data reaches the maximum size of the field. 10. Test that a confirmation message should display for update and delete operations. 11. Test the amount values should display in currency format. 12. Test all input fields for special characters. 13. Test the timeout functionality. 14. Test the Sorting functionality. Test the Sorting functionality. 15. Test the functionality of the buttons available. 16. Test the Privacy Policy & FAQ is clearly defined and should be available for users. 17. Test if any functionality fails the user gets redirected to the custom error page. Usability Testing What is Usability Testing? 01. Usability testing is nothing but the User-friendliness check. 02. In Usability testing, the application flow is tested so that a new user can understand the application easily. 03. Basically, system navigation is checked in Usability testing. Goal of Usability Testing : A Usability test establishes the ease of use and effectiveness of a product using a standard Usability test practices.

Testing Activities Included : Test the site Navigation: 01. Menus, buttons or Links to different pages on your site should be easily visible and consistent on all webpages. 02. Test the Content. 03. Content should be legible with no spelling or grammatical errors. 04. Images if present should contain an alt text. Usability Test Scenarios : 01. Web page content should be correct without any spelling or grammatical errors. 02. All fonts should be same as per the requirements. 03. All the text should be properly aligned. 04. All the error messages should be correct without any spelling or grammatical errors and the error message should match with the field label. 05. Tool tip text should be there for every field. 06. All the fields should be properly aligned. 07. Enough space should be provided between field labels, columns, rows, and error messages. 08. All the buttons should be in a standard format and size. 09. Home link should be there on every single page. 10. Disabled fields should be grayed out. 11. Check for broken links and images. 12. Confirmation message should be displayed for any kind of update and delete operation. 13. Check the site on different resolutions (640 x 480, 600x800 etc.?) 14. Check the end user can run the system without frustration. 15. If there is an error message on submit, the information filled by the user should be there. 16. Title should display on each web page 17. All fields (Textbox, dropdown, radio button etc) and buttons should be accessible by keyboard shortcuts and the user should be able to perform all operations by using keyboard. 18. Check if the dropdown data is not truncated due to the field size and also check whether the data is hardcoded or managed via administrator.

Interface Testing Three areas to be tested here are - Application, Web and Database Server 01. Application: Test requests are sent correctly to the Database and output at the client side is displayed correctly. Errors if any must be caught by the application and must be only shown to the administrator and not the end user. 02. Web Server: Test Web server is handling all application requests without any service denial. 03. Database Server: Make sure queries sent to the database give expected results. Test system response when connection between the three layers (Application, Web and Database) cannot be established and appropriate message is shown to the end user. Database Testing Database is one critical component of your web application and stress must be laid to test it thoroughly. Testing activities will include- 01. Test if any errors are shown while executing queries. 02. Data Integrity is maintained while creating, updating or deleting data in database. 03. Check response time of queries and fine tune them if necessary. 04. Test data retrieved from your database is shown accurately in your web application. To perform the Database testing, the tester should be aware of the below mentioned points: 01. The tester should understand the functional requirements, business logic, application flow and database design thoroughly. 02. The tester should figure out the tables, triggers, store procedures, views and cursors used for the application. 03. The tester should understand the logic of the triggers, store procedures, views and cursors created. 04. The tester should figure out the tables which get affected when insert update and delete (DML) operations are performed through the web or desktop applications.

Test Scenarios for Database Testing 01. Verify the database name: The database name should match with the specifications. 02. Verify the Tables, columns, column types and defaults. All things should match with the specifications. 03. Verify whether the column allows a null or not. 04. Verify the Primary and foreign key of each table. 05. Verify the Stored Procedure. 06. Test whether the Stored procedure is installed or not. 07. Verify the Stored procedure name 08. Verify the parameter names, types and number of parameters. 09. Test the parameters if they are required or not. 10. Test the stored procedure by deleting some parameters 11. Test when the output is zero, the zero records should be affected. 12. Test the stored procedure by writing simple SQL queries. 13. Test whether the stored procedure returns the values 14. Test the stored procedure with sample input data. 15. Verify the behavior of each flag in the table. 16. Verify the data gets properly saved into the database after the each page submision. 17. Verify the data if the DML (Update, delete and insert) operations are performed. 18. Check the length of every field. The field length in the back end and front end must be same. 19. Verify the database names of QA, UAT and production. The names should beunique. 20. Verify the encrypted data in the database. 21. Verify the database size. Also test the response time of each query executed. 22. Verify the data displayed on the front end and make sure it is same in the back end. 23. Verify the data validity by inserting the invalid data in the database. 24. Verify the Triggers.

Compatibility Testing What is Compatibility Testing? Compatibility testing is used to determine if your software is compatible with other elements of a system with which it should operate, e.g. Browsers, Operating Systems, or hardware. Goal of Compatibility Testing : The purpose of Compatibility testing is to evaluate how well software performs in a particular browser, Operating Systems, hardware or software. Compatibility tests ensure that your web application displays correctly across different devices. Testing Activities Included : Browser Compatibility Test: Same website in different browsers will display differently. You need to test if your web application is being displayed correctly across browsers, JavaScript, AJAX and authentication is working fine. You may also check for Mobile Browser Compatibility. The rendering of web elements like buttons, text fields etc. changes with change in Operating System. Make sure your website works fine for various combination of Operating systems such as Windows, Linux, Mac and Browsers such as Firefox, Internet Explorer, Safari etc. Compatibility Test Scenarios : 01. Test the website in different browsers (IE, Firefox, Chrome, Safari and Opera) and ensure the website is displaying properly. 02. Test the HTML version being used is compatible with appropriate browser versions. 03. Test the images display correctly in different browsers. 04. Test the fonts are usable in different browsers. 05. Test the java script code is usable in different browsers. 06. Test the Animated GIF's across different browsers.

Performance Testing What is Performance Testing? Performance Testing is conducted to evaluate the compliance of a system or component with specified performance requirements. Testing Activities Included : 01. Website application response times at different connection speeds. 02. Load test your web application to determine its behavior under normal and peak loads. 03. Stress test your web site to determine its break point when pushed to beyond normal loads at peak time. 04. Test if a crash occurs due to peak load, how does the site recover from such an event. 05. Make sure optimization techniques like gzip compression, browser and server side cache enabled to reduce load times. General Test Scenarios : 01. To determine the performance, stability and scalability of an application under different load conditions. 02. To determine if the current architecture can support the application at peak user levels. 03. To determine which configuration sizing provides the best performance level. 04. To identify application and infrastructure bottlenecks. 05. To determine if the new version of the software adversely had an impact on response time. 06. To evaluate product and/or hardware to determine if it can handle projected load volumes.

Security Testing Security Testing involves the test to identify any flaws and gaps from a security point of view. Test Scenarios for Security Testing : 01. Verify the web page which contains important data like password, credit card numbers, secret answers for security question etc should be submitted via HTTPS (SSL). 02. Verify the important information like password, credit card numbers etc should display in encrypted format. 03. Verify password rules are implemented on all authentication pages like Registration, forgot password, change password. 04. Verify if the password is changed the user should not be able to login with the old password. 05. Verify the error messages should not display any important information. 06. Verify if the user is logged out from the system or user session was expired, the user should not be able to navigate the site. 07. Verify to access the secured and non secured web pages directly without login. 08. Verify the View Source code option is disabled and should not be visible to the user. 09. Verify the user account gets locked out if the user is entering the wrong password several times. 10. Verify the cookies should not store passwords. 11. Verify if, any functionality is not working, the system should not display any application, server, or database information. Instead, it should display the custom error page. 12. Verify the SQL injection attacks. 13. Verify the user roles and their rights. For Example The requestor should not be able to access the admin page. 14. Verify the important operations are written in log files, and that information should be traceable. 15. Verify the session values are in an encrypted format in the address bar. 16. Verify the cookie information is stored in encrypted format. 17. Verify the application for Brute Force Attacks.