/Maturity-Models-QA

Repo of QA files of BSIMM site (i.e. browser automation and performance tests)

Primary LanguageCoffeeScriptApache License 2.0Apache-2.0

BSIMM-Graphs-QA

Repo of QA files of BSIMM site (i.e. browser automation and performance tests)

Issues to add

This is just a helper for the cases where I'm coding offline

  • Add security test for '/v1/api/logs/file/{fileid}'' since that could be an injection point

    • one interesting twist is to add a special branch that has security vulnerabilities (for example in this endpoint), which the idea being that the security tests should pick it up.
  • Add ZAP fuzzing tests to this endpoint, run ZAP in a docker container and instrument it from an Test (which can be triggered by a git pull into DinisCruz-Dev)

  • Add test for /view/route/list

  • Add test that requests all routes from '/view/route/list'

  • Add a Promise return value to $GET so that we don't need done()