Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix up address bar spoofing tests to match new behaviours. #2743

Merged
merged 5 commits into from
May 3, 2024

Conversation

not-a-rootkit
Copy link
Contributor

@not-a-rootkit not-a-rootkit commented Apr 15, 2024

Task/Issue URL: https://app.asana.com/0/0/1207057471208069/f
Tech Design URL: N/A

Description:
As per Change Security maestro test to use new URL target - some core changes were made in one of the address bar spoofing security tests. In the process, I discovered several of the other security tests had also broken, and that they weren't being run in a workflow.

As such I introduce a few changes:

  • Fix the URL origin of the application spoofing target to spreadprivacy
  • Update the URL checks to match the new standardization (eTLD instead of full URL in the address bar)
  • Fix a couple flakey tests such as the download path one
  • Add the security tests to a workflow to run them daily.

Steps to test this PR:
maestro test --include-tags "securityTest" ./.maestro

Copy Testing:

  • Use of correct apostrophes in new copy, ie rather than '

Orientation Testing:

  • Portrait
  • Landscape

Device Testing:

  • iPhone SE (1st Gen)
  • iPhone 8
  • iPhone X
  • iPhone 14 Pro
  • iPad

OS Testing:

  • iOS 14
  • iOS 15
  • iOS 16

Theme Testing:

  • Light theme
  • Dark theme

Internal references:

Software Engineering Expectations
Technical Design Template

@github-actions github-actions bot added the bot: not in app board Added by automation for pull requests with tasks not added to iOS App Board Asana project label Apr 15, 2024
@not-a-rootkit not-a-rootkit removed the bot: not in app board Added by automation for pull requests with tasks not added to iOS App Board Asana project label Apr 15, 2024
@not-a-rootkit
Copy link
Contributor Author

I've run the E2E tests a few times no with no issues discovered so I'm pretty happy this PR should fix the issues we were having before.

e.g. https://github.com/duckduckgo/iOS/actions/runs/8781732695/job/24094344902

Copy link
Contributor

@loremattei loremattei left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me!
:shipit:

Copy link

github-actions bot commented May 2, 2024

This PR has been inactive for more than 7 days and will be automatically closed 7 days from now.

@github-actions github-actions bot added the stale label May 2, 2024
@loremattei loremattei merged commit 00d1273 into main May 3, 2024
20 checks passed
@loremattei loremattei deleted the tespach/fix-security-tests branch May 3, 2024 14:27
samsymons added a commit that referenced this pull request May 6, 2024
* main:
  Enable field validation for Sync payloads (#2807)
  Fix up address bar spoofing tests to match new behaviours. (#2743)
  Release 7.118.0-4 (#2821)
  Settings: onAppear changed to onDisappear (#2817) (#2820)
  Manage Expired Subscription (#2764)
  Replace deprecated tab preview renderer (#2814)
  Release 7.118.0-3 (#2819)
  Update release notes.
  Settings: onAppear changed to onDisappear (#2817)
  Release 7.118.0-2 (#2815)
  Improve VPN underlying error detail (#2813)
  Break the Subscription module’s dependency on BSK (#2804)
samsymons added a commit that referenced this pull request May 13, 2024
* main: (27 commits)
  Release 7.120.0-0 (#2846)
  Enable gzip compression for Sync PATCH payloads (#2805)
  sync error notify (#2822)
  Wire up VPN error UI (#2826)
  Mergeback from release/7.119.0
  Release 7.119.0-1 (#2840)
  Add temporary survey to Passwords screen (#2834)
  Upload logs on cancel (#2836)
  Add bookmarks to top hits suggestions on iOS (#2835)
  Fix Maestro reporting for e2e tests (#2713)
  support marketplace kit (#2833)
  Enable attribution flag (#2825)
  Release 7.119.0-0 (#2831)
  Fix subscriptions glitch in Settings (#2828)
  Delegate SecureVault KeyStore Events in All Scenarios  (#2827)
  Clears subscription cache on restore (#2823)
  Enable field validation for Sync payloads (#2807)
  Fix up address bar spoofing tests to match new behaviours. (#2743)
  Release 7.118.0-4 (#2821)
  Settings: onAppear changed to onDisappear (#2817) (#2820)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants