Forum Discussion

Alick's avatar
Alick
Occasional Contributor
9 years ago

Secure: How to prevent test fail if the response is an error?

For a lot of my security tests the requests are being rejected by the API, but because the XSS string is contained in an error message it counts as a failed test in the response comparison   Is the...
SmartBearAmber's avatar
SmartBearAmber
Icon for Alumni rankAlumni
9 years ago

You can add additional assertions from the Assertions menu.

Alick's avatar
Alick
Occasional Contributor
9 years ago

ok, and will this assertion work separately to the immediate response assertion?

 

the logic i need is something like

 

fail IF cross site script is in response

AND

   'Error' is NOT in response

 

but there's no documentation on the relationship between assertions or the overarching logic

 

(if response doesn't contain the cross site scripting string then we don't want to assert that error is always there)