DETECTING ERROR STATES WHEN INTERACTING WITH WEB APPLICATIONS

摘要

Detecting error states when interacting with web applications is performed by accessing a first web page of a web application, determining that the first web page includes an input validation operation, configuring an input to cause the input validation operation to effect an error state, providing the input to the first web page, thereby effecting the error state, identifying a feature that is absent from the first web page before the input is provided to the first web page and present in the first web page after the input is provided to the first web page, and detecting that a second web page of the web application is in an error state if the feature is present in the second web page.

主权项

1. A computer program product for detecting error states when interacting with web applications, the computer program product comprising:
a non-transitory, computer-readable storage medium; and computer readable program code embodied in the computer-readable storage medium, wherein when executed by a computer the computer-readable program code is configured to: access a first web page of a plurality of web pages of a web application, determine that the first web page includes an input validation operation by statically analyzing software instructions within the first web page, and analyze the input validation operation to identify a characteristic of the input validation operation; configure an input to cause the input validation operation to effect an error state, and provide the input to the first web page, thereby effecting the error state; and identify a feature among the plurality of web pages that is:
absent from the first web page before the input is provided to the first web page and present in the first web page after the input is provided to the first web page; anddetect that a second web page of the plurality of web pages of the web application is in the error state, wherein the error state is based on determining as a common feature at least one feature identified in the plurality of web pages that is common to a predefined number or percentage of the plurality of web pages, and detecting that the second web page of the web application is in the error state if the common feature is present in the second web page; crawl the web application and provide at least one of a web application analyzer, a web application tester, and an error state detector with access to at least one of the plurality of web pages; and provide at least one different inputs to the second web page until the feature is absent from the second web page, wherein the at least one different inputs is based on the characteristic of the input validation operation.