Security Test Cases

1. Two security testing methods

  1. Try to enter attack vectors such as XSS or SQL injection in the input box, and check whether the system can correctly filter or escape these characters
  2. Try to enter scripts or other dangerous codes in the input box to check whether the system has security holes.
    Test case test value

2. Specific test methods

1. XSS attack vector test

<script> alert['Hello'];</script>

2. SQL Injection Attack Vectors

"OR 1=1 --"	

3. Script and Dangerous Code Testing

"<img src='http://example.com/malware.pong'>"	

Guess you like

Origin blog.csdn.net/Orange_hhh/article/details/129668076