Oracle exercise on real example
heuristic, learn testing, oracle
TL;DR This post is example how to apply oracle heuristic to identify is there a problem. Disclaimer: this blog post is not about some fancy new software testing framework. Pure…
Author: Karlo Smid
UI check automation suggests important project issues
TL;DR This blog post is my experience about UI test automation applied in various projects. First disclaimer, this post is not against UI check automation. If not used as a…
Ruby on Rails bottom up security – Cross site scripting (XSS) check
TL;DR This post explains how to check your Rails application source code for cross site scripting (XSS) attack. Cross site scripting means that your application accepts html code as user…
Exploratory session of Pena Palace
TL;DR Using this excellent post by Marcel Gehlen , I am learning about exploratory software testing. I created github wiki where I put notes about every resource listed in that post. This…
Ruby on Rails bottom up security – authentication and session management check
Ruby on Rails, security, security testing
TL;DR This post is about checking “The Gates” of your Rails application. Every web application is a set of urls. Some of them are publically available and some are available…
Learning risk management by example
BBST, learn testing, Uncategorized
TL;DR After taking state of the art software learning courses, I concluded that best way to comprehend knowledge is to learn by using examples of presented materials. How to measure…
Ruby on Rails bottom up security – sql injection check
Ruby on Rails, security, security testing, Uncategorized
TL;DR This post will explain how to check your Ruby on Rails code base against sql injections [Wikipedia]. After you have read Wikipedia source link about sql injections, you are…
Ruby on Rails bottom up security – daily server check
OWASP, Ruby on Rails, security
TL;DR This is next post in series about Ruby on Rails security. In previous post I explained how to harden other servers. This time I will explain daily security check…
