com.atlassian.jira.webtests.ztests.project.security.xss

Class TestAssignGroupsToProjectRole

java.lang.Object

com.atlassian.jira.functest.framework.BaseJiraFuncTest

com.atlassian.jira.webtests.ztests.project.security.xss.TestAssignGroupsToProjectRole

public class TestAssignGroupsToProjectRole
extends BaseJiraFuncTest

Responsible for verifying that a malicious user can not perform an XSS attack on the Assign Groups to Project Role page.

This page is used to manage which JIRA groups are associated to a project role.

See JRADEV-1273

Since:

v4.2

Field Summary

Fields inherited from class com.atlassian.jira.functest.framework.BaseJiraFuncTest

assertions, backdoor, environmentData, initClass, navigation, tester, testRule

Constructor Summary

Constructors

Constructor and Description
TestAssignGroupsToProjectRole()

Method Summary

Modifier and Type	Method and Description
void	setUpTest()
void	testXssOnProjectGroupNamesParameter() Responsible for verifying that a malicious user can not perform an XSS attack through the groupNames parameter.
void	testXssOnProjectIdParameter()
void	testXssOnProjectRoleIdParameter() Responsible for verifying that a malicious user can not perform an XSS attack through the projectRoleId parameter.

Methods inherited from class com.atlassian.jira.functest.framework.BaseJiraFuncTest

getAssertions, getBackdoor, getEnvironmentData, getTester

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TestAssignGroupsToProjectRole

public TestAssignGroupsToProjectRole()

Method Detail

setUpTest

public void setUpTest()

testXssOnProjectIdParameter

public void testXssOnProjectIdParameter()

testXssOnProjectRoleIdParameter

public void testXssOnProjectRoleIdParameter()

Responsible for verifying that a malicious user can not perform an XSS attack through the projectRoleId parameter.

testXssOnProjectGroupNamesParameter

public void testXssOnProjectGroupNamesParameter()

Responsible for verifying that a malicious user can not perform an XSS attack through the groupNames parameter.