A collection of test heuristics
- Minimun and maximum length
0
,255+1
,65535+1
- Non ASCII (american) characters (
วผแธฤรฦ
,่ฑกๅฝขๅญ
,ุงูููุนูุฑูุจููููุฉู
...) - Invisible characters (space, tab, break, etc.)
- Delimiters (
< > [ ] ( ) { } " ' | / \ , : ; & ^ * ? Tab
) - Special characters (
~!@#$%^&*+-=
) - Emojis (๐๐๐โจ)
- Empty, null
- HTML tags
- JS code
- SQL injection (
' OR '1'='1'; drop table users;
) - Non text (numbers, binary, blobs)
- Minimun and maximum values
-1
,0
,255+1
,65535+1
- Types (
decimal
,binary
,hexadecimal
,octal
) - Scientific notation (
1E-9
,10-9
) - Separators (comma, dot, space, semicolon)
- Operations (devide by zero, sum negative numbers, etc.)
- Non number (text, symbols)
- Date/time in the future
- Date/time in the past
- Time difference between machines
- Crossing time zones
- Daylight savings changes
- Leap days
- Invalid days (
Feb 30
,Sept 31
) - Feb 29 in non-leap years
- Internationalization (
mmmm dd, yyyy
,yyyy/mm/dd
,dd.mm.yyyy
,mm/dd/yyyy
) - Delimiters (comma, dot, slash, dash, colon)
- Clock format (AM/PM, 24 hours)
- Reset clock backward or forward
- Back/Forward button (watch for expired messages and double-posted transactions)
- Refresh
- Bookmark the URL
- Select bookmark when logged Out
- Modify URL parameters
- Access from multiple devices simultaneously
- Gestures (swipe, tap, pinch, hold, drag)
- Javascript Off
- Cookies Off
- Security high
- Resize browser window
- Change font size
- Change zoom value
- Activate ad/tracker blocker
- Orientation
- Performance
- Network speed
- Energy consumption
- Log off
- Shut down
- Reboot
- Kill process
- Disconnect
- Hibernate
- Timeout
- Cancel
- Document structure
- Keyboard navigation
- Valid links URL
- Image alt text
- Form input labels
- Language definition
- No all-capitals text
- Color contrast
- Error messages have human-readable description
- Abbreviations have human-readable description
-
C
: Create -
R
: Read -
U
: Update -
D
: Delete
-
B
: Boundary -
I
: Invalid Entries -
N
: NULL -
M
: Method -
E
: Empty -
N
: Negative
-
P
: Parameters -
O
: Output -
I
: Interoperability -
S
: Security -
E
: Errors -
D
: Data
-
V
: Verbs -
A
: Authentication/Authorization -
D
: Data -
E
: Errors -
R
: Responsiveness