mathan_vel

 Profile Answers by mathan_vel Questions by mathan_vel

• Jan 11th, 2008

 

Once the User entered to the Application with their Login, their details are entered to the specific system. on enabled the Pop-Ups after login, the cookies fetch data from the login. for next time login application should load the password after entered the Userid. if the password is populated means "No issue". if u got any problem, there might be an issue. we can see the Cookies status in the Tool menu browser.
Cookies are browser independent. Once the  Cookies are deleted. user should enter the password again..
In this we will test the volume of the cookies, how comes its populate correct like wise we could test..

jaspinder_23

 Profile Answers by jaspinder_23 Questions by jaspinder_23

• Jan 12th, 2008

 

right now i cant tell the ans. to u people. i will post its ans. after some time

sandeepkashyap

 Profile Answers by sandeepkashyap 

• Jun 6th, 2008

 

The major things, which we have to consider while writing the security test cases are: sql injection, url re-writing and cross site scripting. If e.g. at login page we are able to inject the sql injection malicious script. The security will break. We will have to check in all the fields for sql injection.
We should check that after login if we paste the url in other browser. It should not open the page, while the page should be redirected to the login page.
We should also check the cross site scripting scripts should not be accepted by any field in the application, which is open for use.

If we are able to validate these issues, we are able to test the application for security.