Getting Started With Web Testing

2h workshop for junior testers at Nortal Summer University 2018 about tools for testing front end. Previous workshop "What Tools To Use To Test Better?" is located in Nortal Summer University 2017 directory.

13 June 2018

Irina Ivanova, irina.ivanova@nortal.com

Exercises

Exercises were made for Chrome, so some features can not work at other browsers.

• Exercise 1: DevTool https://iriiiina.github.io/nsu/1
• Exercise 2: Web Accessibility https://iriiiina.github.io/nsu/2
• Exercise 3: Web Security https://iriiiina.github.io/nsu/3

Slides

Slides.pdf

Used Tools

• Chrome DevTool – https://developers.google.com/web/tools/chrome-devtools/
• Chrome extensions:
  • stringG - https://chrome.google.com/webstore/detail/stringg/mklinoolelpkognneckhecljdfhehfbc
  • Textarea Checker - https://chrome.google.com/webstore/detail/textarea-checker/gomnbfgdoefjhpahcbahpeppplelepdd
  • aXe - https://chrome.google.com/webstore/detail/axe/lhdoppojpmngadmnindnejefpokejbdd
  • Cookie Inspector - https://chrome.google.com/webstore/detail/cookie-inspector/jgbbilmfbammlbbhmmgaagdkbkepnijn
• W3C online validator - https://validator.w3.org

Further Reading

Browsers

• Google Documentation on Chrome DevTool - https://developers.google.com/web/tools/chrome-devtools/
• Long, but useful article about how browsers work - https://www.html5rocks.com/en/tutorials/internals/howbrowserswork/
• Online W3C tutorial about HTML – https://www.w3schools.com/Html/

Web Accessibility

• W3C Web Accessibility Initiative – https://www.w3.org/WAI/

Security Testing

• OWASP page about software security - https://www.owasp.org/
• Collection of Evil JavaScript (just for fun) - http://codebox.org.uk/pages/monkeyshine-javascript-practical-jokes
• Big list of naughty strings - https://github.com/minimaxir/big-list-of-naughty-strings
• MDN specification on HTTP cookie - https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
• What all Developers need to know about: Cookie Security - https://techblog.topdesk.com/security/cookie-security/
• Session Management Cheat Sheet - https://www.owasp.org/index.php/Session_Management_Cheat_Sheet