North-Seattle-College / ad440-winter2021-thursday-repo

NSC AD 440 Winter 2021 Thursday cohort practicum repo
Apache License 2.0
2 stars 27 forks source link

[Task] Create SQL Injection Test for PUT /users/{user_id}/tasks/{task_id} #207

Closed AlexSuth closed 3 years ago

AlexSuth commented 3 years ago

[Task] Create SQL Injection PUT /users/{user_id}/tasks/{task_id}

For Sprint 4, I created a github action that does a SQL Injection PUT Test on the endpoint /users/{user_id}/tasks/{task_id} To do this, I used Postman to create an example task which can be found at: https://nsc-fun-dev-usw2-thursday.azurewebsites.net/api/users/1/tasks/3103 The action will test this endpoint.

Screenshot of successful run: Screen Shot 2021-03-04 at 8 50 54 PM

Testing instructions:

  1. This action will run automatically any time a branch is pushed to development.
  2. For easier testing, please clone this repo, and DM me on Slack to get added as a collaborator: https://github.com/AlexSuth/ArtilleryGithubActions.git
  3. If using my personal repo, create a new file of any kind in the repo (without making changes to my code), and push it to the remote repo. You can then merge in your changes, and travel to the Actions tab of the repo to see if the Action was successful.

Time Tracking:

Activity Time Spent
SQL Injection research 4 hr
Testing endpoints and preparing test 1.5 hr
POST and PUT troubleshooting 1 hr
Create github action 2 hr
More SQL Injection research and finish action 1 hr
Documentation 1 hr