Many Functional Testing/QA Engineers don’t have insights into Security vulnerabilities. Usually an enterprise has a separate security testing team solely for that task and functional testers have to rely on them for the security audit.
This talk looks at strategies for testing a Grails application secured by one or more of the Spring Security plugins. We’ll look at functional tests for URL-based security, as well as integration tests to validate the security configuration and to verify ACLs. In addition we’ll look at which test phases …
Cross site scripting, or XSS, is the modern-day equivalent of the middle-ages black plague in the web application world: it’s widespread, it’s bad and there are little or no technical ways to detect it until it’s too late. DOM XSS is a particularly nasty variant of those, as it requires …
An explanation on benefits of certification on the Java platform [youtube JUSM2b2MTnA]
