New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

test(security): add security tests for articles and comments endpoints #16

Draft

derevnjuk wants to merge 3 commits into main from bright/tests-6de7c13a-56ba-440b-acc0-266ba8badde1

Member

derevnjuk commented Jan 16, 2025 •

edited

Loading

Description

Adds security tests for the following endpoints:

GET /articles
GET /articles/feed
GET /articles/{slug}
POST /articles
PUT /articles/{slug}
DELETE /articles/{slug}
POST /articles/{slug}/favorite
DELETE /articles/{slug}/favorite
GET http://example.com/api/articles/sample-article/comments
POST http://example.com/api/articles/sample-article/comments
DELETE http://example.com/api/articles/sample-article/comments/1

Tests cover:

SQL injection
XSS vulnerabilities
Authentication bypass

Test Plan

Validate security tests by running the test suite and ensuring all tests pass.

Endpoints Tested

GET /articles
GET /articles/feed
GET /articles/{slug}
POST /articles
PUT /articles/{slug}
DELETE /articles/{slug}
POST /articles/{slug}/favorite
DELETE /articles/{slug}/favorite
GET http://example.com/api/articles/sample-article/comments
POST http://example.com/api/articles/sample-article/comments
DELETE http://example.com/api/articles/sample-article/comments/1

Checklist

Tests implemented
Documentation updated


          chore: empty commit for PR

511cba8

derevnjuk changed the title ~~test: add security tests~~ test(security): add security tests for articles and comments endpoints

derevnjuk added 2 commits

January 16, 2025 17:00


          test: add Bright's tests

586f6d7


          test: add Bright's workflow file

5de619c

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet