Alick
Occasional Contributor
Joined 9 years ago
User Profile
User Widgets
Contributions
Re: I can't work out how to run secure with proper JSON parameters
Hi Mfagerlind, thanks for the reply :) yeah I was told after contacting smartbear directly that it was an issue from <1.9.0 which has been fixed in the latest release which is definitely what I wanted! I think it was ticket API-1341 if i remember correctly, I was checking everyday for an update and when 1.9.0 came out I was shamelessly happy :)1.5KViews1like1CommentRe: Secure: How to prevent test fail if the response is an error?
ok, and will this assertion work separately to the immediate response assertion? the logic i need is something like fail IF cross site script is in response AND 'Error' is NOT in response but there's no documentation on the relationship between assertions or the overarching logic (if response doesn't contain the cross site scripting string then we don't want to assert that error is always there)1.1KViews0likes0CommentsRe: Secure: How to prevent test fail if the response is an error?
Hi Amber, thanks for the reply. I've looked in there, The assertion is "Cross Site Scripting Detection", but the only modifiable field in there is to make a separate call to a different URL for results, nothing that I can see would change the logic of the assertion itself, am I missing something I can do?1.1KViews0likes2CommentsSecure: How to prevent test fail if the response is an error?
For a lot of my security tests the requests are being rejected by the API, but because the XSS string is contained in an error message it counts as a failed test in the response comparison Is there a simple way of preventing a failed test if the word "Error" is present in the response?1.1KViews0likes4CommentsRe: Secure pro tool alarming
that's what you want isn't it? if there are 100 payloads and 20 cause alarm, then you've successfully protected against 80, but every one of those 20 is a possible vector the payloads do the same thing but use different methods, it's not a binary test791Views0likes0Comments