search

RebackkHQ / webapp-scanner

[WIP] An open-source web app vulnerability scanner developed by Rebackk.
https://rebackkhq.github.io/webapp-scanner/
Other
1 stars 1 forks source link

Implement Tests For The Whole Project #61

Open 0xsarwagya opened 1 day ago

0xsarwagya commented 1 day ago

Is your feature request related to a problem? Please describe.
Testing is a critical part of ensuring the robustness and reliability of the project. Currently, there are no comprehensive automated tests to verify the functionality, identify edge cases, or prevent regressions. This lack of testing makes it difficult to confidently implement changes or add new features without fear of introducing bugs.

Describe the solution you'd like
Implement a complete suite of tests for the entire project, including:

  1. Unit Tests: Cover individual modules, functions, and components to ensure they work as intended in isolation.
  2. Integration Tests: Test interactions between different modules (e.g., scanning components like XSS, SQL injection, and header checks).
  3. End-to-End Tests: Simulate real user scenarios to ensure the entire application works as expected.
  4. Performance Tests: Identify potential bottlenecks during scans on large or complex web applications.
  5. Regression Tests: Automatically verify that previous functionality remains intact after updates.

Describe alternatives you've considered

  1. Manual Testing: This is an option but is time-consuming, prone to human error, and not scalable.
  2. Partial Testing: Focus only on the most critical areas of the project. While this could save time initially, it might leave gaps in coverage.
  3. Crowdsourced Testing: Involve external testers to find bugs. However, this is more suited for identifying edge cases rather than ensuring consistent coverage.

Additional context
The project currently includes scanning functionality for XSS vulnerabilities, security and information headers, and SQL injection vulnerabilities. Tests should simulate a variety of scenarios, such as scanning simple, complex, and intentionally broken web applications. Tools like Jest (for JavaScript), Pytest (for Python), or Selenium (for UI testing) can be considered for implementation.

github-actions[bot] commented 1 day ago

👋 @0xsarwagya 👋

We're thrilled to see you opening an issue! Your input is valuable to us. Don’t forget to fill out our issue template for the best experience. We will look into it soon.