Understanding SQL Injection: Types and Prevention

SQL injection vulnerabilities may affect any website or application that uses an SQL database. These databases include MySQL, Oracle, and SQL Server. Malicious actors may use them to gain unauthorized access to sensitive information. This can include customer information, personal data, and trade secrets.

Understanding SQLi’s particular vulnerability is vital for protecting your systems, products, and security infrastructure.

Table of Contents

What is SQL Injection?

SQL injection is a security vulnerability. It allows an attacker to interfere with the queries an application makes to its database. Attackers can use SQL Injection vulnerabilities to bypass application security measures. They can go around authentication and authorization of a web page or web application and retrieve the content of the entire SQL database.
It usually occurs when untrusted data is improperly sanitized and then inserted into a SQL query. This can lead to unauthorized viewing of data, deletion of data, or other harmful activities.

SQL Injection attacks are one of the oldest, most prevalent, and most dangerous web application vulnerabilities. The OWASP organization (Open Web Application Security Project) lists injections in their OWASP Top 10 2017 document as the number one threat to web application security.

How does SQL Injection works?

SQL injection typically occurs when user input is directly concatenated into a SQL query without proper validation or escaping.

Consequences of SQL Injection

1. Data Manipulation– Attackers can use SQL Injections to find the credentials of other users in the database. They can then impersonate these users. The impersonated user may be a database administrator with all database privileges.

2. Denial of Service (DoS) – Malicious queries can overload the database server. This results in a denial of service. It makes the application unresponsive to legitimate users.

3. Unauthorized Changes – SQL also lets you alter data in a database and add new data. For example, in a financial application, an attacker can use SQL Injection to alter balances. They void transactions or transfer money to their account.

4. Data Loss – You can use SQL to delete records from a database, even drop tables. Even if the administrator makes database backups, deletion of data could affect application availability until the database is restored.

5. Backup Corruption – Attackers may also tamper with backups, making data recovery extremely difficult after an attack.

6. Access to Operating System – Advanced SQL injection attacks can provide access to the underlying operating system, allowing attackers to execute system commands.

7. Regulatory Fines – Non-compliance with data protection regulations like GDPR, HIPAA, or CCPA due to data breaches can result in hefty fines.

SQL Injection Example

In-band SQLi (Classic) SQL Injection Example

Below is a script in Java that tries to authenticate a user by querying the database:

String username = request.getParameter("username");
String forename = request.getParameter("forename");

String sql = "SELECT * FROM users WHERE username = '" + username + "' AND forename = '" + forename + "'";

Connection conn = DriverManager.getConnection(url, username, forename);
Statement stmt = conn.createStatement();
ResultSet result = stmt.executeQuery(sql);
if (result.next()) {
    // User is authenticated
    String status = result.getString("success");
    System.out.println("Login to the application");
} else {
    // Authentication failed
  System.out.println("Unable to Login");
}

Original SQL

SELECT * FROM users WHERE username = 'admin'  AND forename = 'admin';

If a malicious user inputs the username as ‘admin’ — AND forename as ‘admin’ fields:

SELECT * FROM users WHERE username = 'admin'  -- AND forename = 'admin';

The `—` is a comment marker in SQL, causing the rest of the query to be ignored. This effectively becomes:

SELECT * FROM users WHERE username = 'admin'

If there is a user with the username `admin`, the attacker would be logged in without providing the correct forename.

To prevent SQL injection, it is essential to use parameterized queries or prepared statements, which safely handle user input and separate SQL code from data.

String username = request.getParameter("username");
String forename = request.getParameter("forename");

String sql = "SELECT * FROM users WHERE username = ? AND forename = ?";

Connection conn = DriverManager.getConnection(url, username, forename);
PreparedStatement preparedStatement = conn.prepareStatement(sql);
preparedStatement.setString(1, username);
preparedStatement.setString(2, forename);
ResultSet result = preparedStatement.executeQuery();
if (result.next()) {
    // User is authenticated
       String status = result.getString("success");
       System.out.println("Login to the application");
} else {
    // Authentication failed
    System.out.println("Unable to Login");
}

In this example, the `?` placeholders are used in the SQL query, and setString safely assigns the user input to the query parameters, ensuring that special characters are correctly escaped and handled.

Example of a Union-Based SQL Injection

SELECT ProductName, ProductDescription, ProductCost
FROM Products
WHERE ProductId = '100' UNION SELECT Username, Password FROM Users;

Using the UNION SELECT statement, this query combines the request for item 100’s name and description and cost with another that pulls names and passwords for every user in the database.

Types of SQL Injection

SQL injections typically fall under three categories: In-band SQLi (Classic), Inferential SQLi (Blind) and Out-of-band SQLi.

In-band SQL Injection

In-band SQL injection is the most common type of attack. With this type of SQL injection attack, a malicious user uses the same communication channel for the attack. The same channel is used to gather results.

Error-based SQL Injection: This technique allows attackers to gain information about the database structure. They achieve this by using a SQL command to generate an error message from the database server. Error messages are useful during the development of a web application or web page. However, they can be a vulnerability later. This is because they expose information about the database. Attackers intentionally force the application to generate errors through malformed queries.

Union-based SQL injection: This technique involves attackers using the UNION SQL operator. They combine multiple select statements to return a single HTTP response. An attacker can use this technique to extract information from the database.

Inferential SQL Injection

Inferential SQL injection is also called blind SQL injection because the website database doesn’t transfer data to the attacker like with in-band SQL injection. Instead, a malicious user can learn about the structure of the server by sending data payloads and observing the response.

Boolean injection: With this technique, attackers send a SQL query to the database and observe the result. Using true/false statements to infer database information based on the application’s behavior.

Time-based injection: With this technique, attackers send a SQL query to the database. The query makes the database wait a specific number of seconds before responding. Attackers can determine if the result is true or false. They analyze how many seconds elapse before a response. For example, a hacker could use a SQL query. It commands a delay if the first letter of the first database’s name is A. Then, if the response is delayed, the attacker knows the query is true.

Out-of-Band SQL Injection

This type is less common but can be effective when other methods are not feasible. In this type of SQL injection attack, malicious users employ different communication channels. They use one channel for the attack and another to gather results. Attackers use this method if a server is too slow or unstable to use inferential SQL injection or in-band SQL injection.

Best Practices to Protect Your Database from SQL Injection

Install the latest software and security patches from vendors when available.
Conduct regular security testing, including penetration testing and code reviews, to identify and fix vulnerabilities before they are exploited
Always use prepared statements or parameterized queries that separate SQL code from data, ensuring user inputs are handled securely.
Configure error reporting instead of sending error messages to the client web browser.
Use stored procedures to build SQL statements with parameters that are stored in the database and called from the application.
Use allowlist input validation to prevent unvalidated user input from being added to query.

April 8, 2025April 8, 2025 vibssingh

Mastering CSV File Handling in Java with OpenCSV

HOME

Handling CSV files in Java is efficient with the OpenCSV library. It provides simple methods to read and write CSV files. Below is a detailed guide to mastering CSV file handling using OpenCSV:

A Comma-Separated Values (CSV) file is just a normal plain-text file, store data in column by column, and split it by a separator (e.g normally it is a comma “, ”).

Table of Contents

Introduction to OpenCSV

Java language does not provide any native support for effectively handling CSV files. OpenCSV is a CSV parser library for Java. OpenCSV supports all the basic CSV-type operations you are want to do. Java 7 is currently the minimum supported version for OpenCSV.

Implementation Steps

1. Add OpenCSV dependency to Maven Project

Add OpenCSV dependency to the pom.xml. The latest version can be downloaded from here.

<dependency>
            <groupId>com.opencsv</groupId>
            <artifactId>opencsv</artifactId>
            <version>5.10</version>
</dependency>

2. Add OpenCSV dependency to Gradle Project

For Gradle Project, we can include the OpenCSV dependency as shown below.

// https://mvnrepository.com/artifact/com.opencsv/opencsv
implementation group: 'com.opencsv', name: 'opencsv', version: '5.10'

3. Read all data from CSV

3.1 For reading a CSV file we need CSVReader class.

Following are sample CSV file that we’ll read.

3.2. Create an object of FileReader class with CSV file as a parameter.

  FileReader fileReader = new FileReader(filePath);

3.3. Create csvReader object passing file reader as a parameter

CSVReader csvReader = new CSVReader(fileReader);

3.4. CSVReader provides a method called readAll() to read all the records at once into a List.

List<String[]> records = csvReader.readAll();

3.5. Print the data

  for (String[] record : records) {
                for (String field : record) {
                    System.out.print(field + " ");
                }
                System.out.println();
         }

The complete program is shown below:

package org.example;

import com.opencsv.CSVReader;
import com.opencsv.exceptions.CsvException;

import java.io.FileReader;
import java.io.IOException;
import java.util.List;

public class CSVReader_Demo {

    public static void main(String[] args) {

        String filePath = "C:\\Users\\Documents\\csv_test.csv";

        try {

            FileReader fileReader = new FileReader(filePath);
            CSVReader csvReader = new CSVReader(fileReader);
            List<String[]> records = csvReader.readAll();
            for (String[] record : records) {
                for (String field : record) {
                    System.out.print(field + " ");
                }
                System.out.println();
            }
        } catch (IOException | CsvException e) {
            System.err.println("Error reading CSV file: " + e.getMessage());
        }
    }
}

The output of the above program is

4. Read CSV by Skipping first line

When we read csv file by default, header will not ignored, as shown in output of above codes. When we need to skip the first element in the list then we can specify start line while creating csvReader object.

CSVReader csvReader = new CSVReaderBuilder(fileReader)
                    .withSkipLines(1)
                    .build();

The complete program is shown below

package org.example;

import com.opencsv.CSVReader;
import com.opencsv.CSVReaderBuilder;
import com.opencsv.exceptions.CsvException;

import java.io.FileReader;
import java.io.IOException;
import java.util.List;

public class CSVReader_LineSkip_Demo {

    public static void main(String[] args) {

        String filePath = "C:\\Users\\Documents\\csv_test.csv";

        try {
            FileReader fileReader = new FileReader(filePath);
            CSVReader csvReader = new CSVReaderBuilder(fileReader)
                    .withSkipLines(1)
                    .build();

            List<String[]> records = csvReader.readAll();
            for (String[] record : records) {
                for (String field : record) {
                    System.out.print(field + " ");
                }
                System.out.println();
            }
        } catch (IOException | CsvException e) {
            System.err.println("Error reading CSV file: " + e.getMessage());
        }
    }
}

The output of the above program is

5. Reading CSV File with different separator

CSV files can be separated with a delimiter other than a comma e.g. semi-colon, pipe etc. The following example shows how to read data of CSV file separated by a semi-colon character.

For Custom separator first CSVParser with specific parser character is created.

CSVParser csvParser = new CSVParserBuilder().withSeparator(',').build();

Then, we will create a csvReader object using the withCSVParser() method. We will do this along with the constructor. We provide the created parser object to the parameter of the withCSVParser() method. At last call build method to build object.

CSVReader csvReader = new CSVReaderBuilder(fileReader).withCSVParser(csvParser).build();

The complete program is shown below

package org.example;

import com.opencsv.CSVParser;
import com.opencsv.CSVParserBuilder;
import com.opencsv.CSVReader;
import com.opencsv.CSVReaderBuilder;
import com.opencsv.exceptions.CsvException;

import java.io.FileReader;
import java.io.IOException;
import java.util.List;

public class CSVReader_Seperator_Demo {

    public static void main(String[] args) {

        String filePath = "C:\\Users\\Documents\\csv_test.csv";

        try {
            FileReader fileReader = new FileReader(filePath);
            CSVParser csvParser = new CSVParserBuilder().withSeparator(',').build();
            CSVReader csvReader = new CSVReaderBuilder(fileReader).withCSVParser(csvParser).build();

            List<String[]> records = csvReader.readAll();
            for (String[] record : records) {
                for (String field : record) {
                    System.out.print(field + " ");
                }
                System.out.println();
            }
        } catch (IOException | CsvException e) {
            System.err.println("Error reading CSV file: " + e.getMessage());
        }
    }
}

The output of the above program is

Troubleshooting Common Errors in CSV Handling with OpenCSV:

File Not Found: The specified CSV file path may be incorrect or the file might not exist. Double-check the file path and ensure the file is located in the correct directory.
Incorrect Delimiters: The CSV uses a different delimiter than expected (e.g., semicolon instead of comma). Please specify the correct delimiter when initializing CSVReader using `CSVParser`.
Empty or Malformed CSV File: CSV files without headers, inconsistent rows, or structural issues. Please perform sanity checks on CSV structure before processing.

April 4, 2025April 4, 2025 vibssingh

Step-by-Step HTML Parsing with Jsoup Examples

HOME

In this article, you’ll learn how to use Jsoup for web scraping in Java.

Table of Contents

What is HTML?

HTML, short for HyperText Markup Language, is the standard language used to create and design web pages. It forms the basic structure of websites. It is also one of the core technologies of the World Wide Web, alongside CSS (Cascading Style Sheets) and JavaScript.

<!DOCTYPE html>
<html>
<head>
    <title>Login Page</title>
</head>
<body>
    <h1>Welcome to My Website</h1>
    <p>This is a paragraph of text.</p>
    <a href="https://qaautomation.expert">Visit QA Automation Expert</a>
</body>
</html>

What is Jsoup?

Jsoup is a powerful Java library designed specifically for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods.

Key Features of Jsoup

Parse and clean HTML from URLs, files, or strings.
Extract data using DOM traversal or CSS-like selectors.
Manipulate the HTML content.
Automatically clean untrusted HTML.
Provides support for cookies, POST requests, and session handling.

We need to add Jsoup to the project. If we’re using Maven, include the latest dependency in your pom.xml:

<dependency>
    <groupId>org.jsoup</groupId>
    <artifactId>jsoup</artifactId>
    <version>1.19.1</version>
</dependency>

To use jsoup in your Gradle build, add the following dependency to your build.gradle file.

// https://mvnrepository.com/artifact/org.jsoup/jsoup
implementation("org.jsoup:jsoup:1.19.1")

Parsing HTML From a String

Below is an example of parsing HTML from a string.

package com.example;

import org.jsoup.Jsoup;
import org.jsoup.nodes.Document;

import java.io.File;
import java.io.IOException;

public class Read_HTMLString {

    public static void main(String[] args) {

        String htmlString = "<html><head><title>HTML Scrapping</title></head>"
                + "<body>This page is demo HTML Page. This page is used for web scrapping.</body></html>";
        Document document = Jsoup.parse(htmlString);
        System.out.println("Title : " + document.title());
        System.out.println("Body: " + document.body().text());
    }

The output of the above program is

Explanation

This string contains simple HTML data.

String htmlString = "<html><head><title>HTML Scrapping</title></head>"
                + "<body>This page is demo HTML Page. This page is used for web scrapping.</body></html>";

With the Jsoup’s parse() method, we parse the HTML string. The method returns an HTML document.

Document document = Jsoup.parse(htmlString);

The document’s title() method gets the string contents of the document’s title element.

System.out.println("Title : " + document.title());

The document’s body() method returns the body element; its text() method gets the text of the element.

System.out.println("Body: " + document.body().text());

Parsing HTML from a local HTML file

In the second example, we are going to parse a local HTML file. We use the overloaded Jsoup.parse() method that takes a File object as its first parameter.

package com.example;

import org.jsoup.Jsoup;
import org.jsoup.nodes.Document;

import java.io.File;
import java.io.IOException;

public class Read_HTMLFile {

    public static void main(String args[]) {
        Document document = null;
        try {
            document = Jsoup.parse(new File("C:\\Users\\vibha\\OneDrive\\Desktop\\Login.html"), "ISO-8859-1");
        } catch (IOException e) {
            e.printStackTrace();
        }

        String title = document.title();
        String divClass = document.getElementById("login").className();

        System.out.println("Jsoup can also parse HTML file directly");
        System.out.println("Title : " + title);
        System.out.println("Class of div tag : " + divClass);
        System.out.println("Heading: " + document.select("h1").text());
        System.out.println("Paragraph: " + document.select("p").text());
    }
}

The output of the above program is

Explanation

We parse the HTML file with the Jsoup.parse() method.

document = Jsoup.parse(new File("C:\\Users\\vibha\\OneDrive\\Desktop\\Login.html"), "ISO-8859-1");

With the document’s getElementById() method, we get the element by its ID.

String divClass = document.getElementById("login").className();

The text of the tag is retrieved with the element’s text() method.

System.out.println("Heading: " + document.select("h1").text());

Parsing HTML From a URL and retrieving tags

In the following example, we scrape and parse a web page and retrieve the content of the title element.

package com.example;

import org.jsoup.Jsoup;
import org.jsoup.nodes.Document;
import org.jsoup.nodes.Element;
import org.jsoup.select.Elements;

import java.io.File;
import java.io.IOException;

public class Read_URL {

    public static void main(String[] args) throws IOException {
        String url = "http://qaautomation.expert";
        Document document = Jsoup.connect(url).get();
        System.out.println("Title: " + document.title());

        Elements links = document.select("a[href]"); // Select all <a> tags with href attribute
        for (Element link : links) {
            System.out.println("Link: " + link.attr("href"));
            System.out.println("Text: " + link.text());
        }
    }

}

The output of the above program is

Explanation

The Jsoup’s connect() method creates a connection to the given URL. The get() method executes a GET request and parses the result; it returns an HTML document.

 Document document = Jsoup.connect(url).get();

With the document’s title() method, we get the title of the HTML document.

System.out.println("Title: " + document.title());

To get a list of links, we use the document’s select() method.

Elements links = document.select("a[href]");

Summary:

Jsoup.parse(htmlString): Parses a HTML string directly.
Jsoup.connect(url): Connects to a URL to fetch and parse the HTML document.
Jsoup.parse(new File(“C:\Users\vibha\OneDrive\Desktop\Login.html”), “ISO-8859-1”): Jsoup reads the HTML content from the specified file using the given encoding and returns a Document object representing the parsed HTML.
Document: Represents the parsed HTML document.
document.select(“a[href]”): Identifies all anchor elements with an href attribute.

That’s it! Congratulations on making it through this tutorial and hope you found it useful! Happy Learning!!

April 1, 2025November 11, 2025 vibssingh

How to install node.js on windows 11

Last Updated On

November 11, 2025

HOME

JavaScript runs most of the interactive elements on websites and mobile applications. JavaScript works perfectly with HTML/CSS and is integrated with most popular browsers. Pure JavaScript is used on the web, and for general JavaScript applications, developers use various runtime environments, such as Node.js.

Node.js is a JavaScript code execution environment. It allows you to use JavaScript as a general-purpose programming language, creating server parts and writing full-fledged desktop applications.

Table of Contents

Steps to install node.js on Windows

Steps to install node.js on Windows

Step 1: Download Node.js Installer

Visit the official Node.js website to download the Node.js ‘.msi’ installer

The downloaded .msi will look as shown below:

Step 2: Run the Installer

Locate the downloaded .msi file and double-click to run it.

Step 3: Accept the License Agreement

Follow the prompts in the setup wizard, accept the license agreement, and use the default settings for installation.

Step 4: Choose the Installation Location

The installation wizard will now ask you to select the installation path for Nodejs. Here we will go with the default installation path so simply click next.

Step 5: Select Components

A custom setup window will so here as well no need to change anything simply click next.

The installer prompt you to “install tools for native modules”. Select “Install” to complete the process.

Step 6: Install Node.js

A Ready To Install Nodejs window will appear. Simply click on the install button. Nodejs will start getting installed in your system.

Step 7: Complete the Installation

Once installation gets complete click on the finish button. By this time Nodejs is successfully installed in your system.

Wait for “Finish” to complete the setup.

This screen will be visible as the system wants the approval to download the additional tools like Chocolatey.

This powershell screen will open and download other tools. This runs in the administrator.

Step 8: Verify the Installation

Open Command Prompt or PowerShell > Check the installed versions by running these commands:

Use the below command to check the version of node.js

node -v

Use the below command to check the version of npm.

npm -v

Congratulations on making it through this tutorial and hope you found it useful! Happy Learning!! Cheers!!

March 25, 2025March 25, 2025 vibssingh

Advance Selenium Multiple Choice Questions – MCQ2

Last Updated On

March 25, 2025

HOME

Welcome to the Advance Selenium Quiz! This blog post features 25 multiple-choice questions that explore advance concepts of Selenium.

1. Selenium can be used to automate Mobile application?

Select the best answer

a) Yes
b) No

Answer 1

b) No

Selenium itself cannot be directly used to automate mobile applications. However, Selenium can be integrated with tools like Appium, which is specifically designed for automating mobile applications.

2. Selenium can be used to automate Desktop application?

Choose one option

a) Yes
b) No

Answer 2

b) No

3. Does Selenium can be used to automate Captcha or OTP?

Choose one option

a) Yes
b) No

Answer 3

b) No

4. Selenium can handle the Browser cookies?

Choose one option

a) Yes
b) No

Answer 4

a) Yes

5. Can we run Selenium tests in GitHub pipeline?

Choose one option

a) Yes
b) No

Answer 5

a) Yes

6. Selenium tests can be run in GitLab pipeline?

a) Yes
b) No

Answer 6

a) Yes

7. What are the benefits of using Docker in a CI/CD pipeline for Selenium tests?

a) Docker ensures that the same environment is used across development, testing, and production, minimizing environment-related issues.
b) Docker allows you to spin up multiple containers in parallel, thereby speeding up the test execution process.
c) Docker integrates well with CI/CD tools like Jenkins, GitLab CI, CircleCI, and Travis CI, making it easy to run Selenium tests within these systems.
d) All of the above

Answer 7

d) All of the above

8. What does the following Selenium WebDriver code do?

WebDriver driver = new ChromeDriver();
driver.get("https://www.example.com");
WebElement element = driver.findElement(By.id("submitButton"));
element.click();

Choose one option

a) Opens Firefox, navigates to https://www.example.com, finds the element with the id “submitButton”, and clicks it.
b) Opens Chrome, navigates to https://www.example.com, finds the element with the id “submitButton”, and clicks it.
c) Opens Safari, navigates to https://www.example.com, finds the element with the id “submitButton”, and clicks it.
d) Opens Chrome, navigates to https://www.example.com, finds the element with the name “submitButton”, and clicks it.

Answer 8

b) Opens Chrome, navigates to “https://www.example.com”, finds the element with the id “submitButton”, and clicks it.

9. What will the following code snippet do?

WebDriver driver = new ChromeDriver();
driver.get("https://www.example.com");
List<WebElement> links = driver.findElements(By.tagName("a"));
System.out.println("Number of links: " + links.size());

Choose one option

a) Prints the text of all the links on the webpage.
b) Prints the total number of links on the webpage.
c) Clicks on all the links on the webpage.
d) Generates an error as `findElements` is not a valid method.

Answer 9

b) Prints the total number of links on the webpage.

10. What exception will be thrown by the following code if the specified element is not found within 10 seconds?

WebDriverWait wait = new WebDriverWait(driver, 10);
WebElement element = wait.until(ExpectedConditions.visibilityOfElementLocated(By.id("elementId")));

Choose one option

a) NoSuchElementException
b) ElementNotVisibleException
c) TimeoutException
d) StaleElementReferenceException

Answer 10

c) TimeoutException

11. Which method is used to handle a JavaScript alert in Selenium WebDriver?

driver.switchTo().___.accept();

Choose one option

a) alert
b) popup
c) window
d) frame

Answer 11

a) alert

12. Which of the following will correctly initialize and use the `Select` class to select an option from a dropdown?

WebElement dropdown = driver.findElement(By.id("dropdown"));
Select select = new Select(dropdown);
select.___("Option 1");

Choose one option

a) click
b) setText
c) selectByVisibleText
d) selectByIndex

Answer 12

c) selectByVisibleText

13. Given the following piece of code, which mouse action is being performed?

Actions actions = new Actions(driver);
WebElement element = driver.findElement(By.id("elementId"));
actions.contextClick(element).perform();

Choose one option

a) Double-click on the element
b) Right-click on the element
c) Drag and drop the element
d) Hover over the element

Answer 13

b) Right-click on the element

14. What is the purpose of the following code snippet?

File screenshot = ((TakesScreenshot) driver).getScreenshotAs(OutputType.FILE);
FileUtils.copyFile(screenshot, new File("path/to/screenshot.png"));

Choose one option

a) Takes a screenshot and saves it to the specified location.
b) Records a video of the browser session.
c) Prints the HTML source of the current page.
d) Extracts text from an image on the webpage.

Answer 14

a) Takes a screenshot and saves it to the specified location.

15. Which of the following code snippets will switch to a frame by its name or ID?

driver.switchTo().___("frameNameOrId");

Choose one option

a) window
b) alert
c) frame
d) defaultContent

Answer 15

c) frame

16. Given the following Selenium WebDriver code, what does `.sendKeys(Keys.TAB)` achieve?

WebElement inputField = driver.findElement(By.id("inputField"));
inputField.sendKeys("test data");
inputField.sendKeys(Keys.TAB);

Choose one option

a) Submits the form containing the input field.
b) Clears the text in the input field.
c) Moves the focus to the next element in the form.
d) Opens a new browser tab.

Answer 16

c) Moves the focus to the next element in the form.

17. What will the following Java code do?

driver.manage().timeouts().implicitlyWait(20, TimeUnit.SECONDS);

Choose one option

a) Waits for 20 seconds before executing any WebDriver command.
b) Sets the timeout for finding elements to 20 seconds.
c) Sets the page load timeout to 20 seconds.
d) Sets the script timeout to 20 seconds.

Answer 17

b) Sets the timeout for finding elements to 20 seconds.

18. What does the following Selenium WebDriver code do?

WebElement table = driver.findElement(By.id("tableId"));
List<WebElement> rows = table.findElements(By.tagName("tr"));
WebElement firstCell = rows.get(0).findElements(By.tagName("td")).get(0);
System.out.println(firstCell.getText());

Choose one option

a) Prints the number of rows in the table with id “tableId”
b) Clicks on the first cell in the table
c) Prints the text from the first cell in the first row of the table with id “tableId”
d) Prints the number of columns in the first row of the table

Answer 18

c) Prints the text from the first cell in the first row of the table with id “tableId”

19. Which of the following code snippets deletes all cookies in the current browser session?

driver.manage().___();

a) removeAllCookies()
b) deleteAllCookies()
c) clearCookies()
d) dropAllCookies()

Answer 19

b) deleteAllCookies()

20. How can you add a new cookie to the browser session in Selenium WebDriver?

Cookie cookie = new Cookie("name", "value");
driver.manage().___(cookie);

Choose one option

a) insertCookie
b) addCookie
c) setCookie
d) putCookie

Answer 20

b) addCookie

21. Which method retrieves all the options from a dropdown as a list of WebElement?

Select dropdown = new Select(driver.findElement(By.id("dropdownId")));
List<WebElement> options = dropdown.___();

a) getAllOptions
b) retrieveOptions
c) findOptions
d) getOptions

Answer 21

d) getOptions

22. What exception is thrown when a Selenium WebDriver command takes too long to execute, exceeding the configured timeout limits?

a) TimeoutException
b) NoSuchElementException
c) WebDriverException
d) ElementNotVisibleException

Answer 22

a) TimeoutException

23. Given the following code snippet, which exception handling mechanism is being demonstrated?

try {
    WebElement element = driver.findElement(By.id("submit"));
    element.click();
} catch (NoSuchElementException e) {
    System.out.println("Element not found.");
}

a) Handling ElementNotVisibleException
b) Handling StaleElementReferenceException
c) Handling NoSuchElementException
d) Handling TimeoutException

Answer 23

c) NoSuchElementException

24. Which of the following exceptions is thrown when an action is attempted on an element that is disabled?

a) ElementNotSelectableException
b) InvalidElementStateException
c) ElementNotVisibleException
d) NoSuchElementException

Answer 24

b) InvalidElementStateException

25. What is the appropriate exception to handle when a script attempt to interact with a non-clickable element?

a) ElementNotVisibleException
b) ElementClickInterceptedException
c) StaleElementReferenceException
d) NoSuchElementException

Answer 25

b) ElementClickInterceptedException

We would love to hear from you! Please leave your comments and share your scores in the section below

March 4, 2025March 25, 2025 vibssingh

Multiple Choice Questions for Security Testing on Web Application

Last Updated On

March 25, 2025

HOME

Welcome to the Security Testing on Web Application Quiz!

1) What is the primary goal of security testing in a web application?

a) To improve the user interface and user experience.
b) To identify and mitigate security vulnerabilities within the application.
c) To enhance the application’s performance and load times.
b) To identify and mitigate security vulnerabilities within the application.

Answer 1

2) By using relative XPath locators

2) What does the acronym ‘OWASP’ stand for?

a) Open Web Application Security Project
b) Open Worldwide Application Security Protocol
c) Offline Web Application Security Program
d) Operational Web Application Safety Procedure

Answer 2

a) Open Web Application Security Project

3) Which of the following is a common method hackers use to find vulnerabilities in web applications?

a) Social engineering
b) Penetration testing
c) Phishing
d) All of the above

Answer 3

d) All of the above

4) What is the primary goal of encryption in web applications?

a) To compress data
b) To increase data integrity
c) To secure data transmission and storage
d) To improve server performance

Answer 4

c) To secure data transmission and storage

5) What is the main risk of using default configurations for web applications?

a) Performance degradation
b) Increased vulnerability to attacks
c) Incompatibility with browsers
d) Accessibility issues

Answer 5

b) Increased vulnerability to attacks

6) What is the main function of a web application firewall (WAF)?

a) To block unauthorized access to the network
b) To filter and monitor HTTP traffic between a web application and the Internet
c) To encrypt data in transit
d) To detect and remove malware from user devices

Answer 6

b) To filter and monitor HTTP traffic between a web application and the Internet

WAFs are designed to defend against a variety of attacks that aim to exploit vulnerabilities in web applications, including:

– SQL Injection
– Cross-Site Scripting (XSS)
– Cross-Site Request Forgery (CSRF)
– File Inclusion

7) Which of the following HTTP headers is used to enhance security by declaring how browsers should handle site’s content?

a) Content-Type
b) Strict-Transport-Security
c) Content-Security-Policy
d) Cache-Control

Answer 7

c) Content-Security-Policy

It helps to prevent various types of attacks such as Cross-Site Scripting (XSS), clickjacking, and other code injection attacks by restricting resources like scripts, styles, or media from being loaded from unauthorized sources.

8) What is a common result of a successful buffer overflow attack?

a) Data leakage
b) Execution of arbitrary code
c) Network eavesdropping
d) Denial of service

Answer 8

b) Execution of arbitrary code

9) What does the term “privilege escalation” refer to in web application security?

a) The granting of highest-level access to all users
b) An attacker obtaining unauthorized higher-level privileges
c) The prioritization of security patches based on severity
d) Increasing the complexity of user authentication mechanisms

Answer 9

b) An attacker obtaining unauthorized higher-level privileges

10) What is the function of the HttpOnly attribute in a cookie?

a) To ensure cookies are only transferred over HTTPS
b) To limit cookies to the current session
c) To prevent access to cookies via JavaScript
d) To enable cross-domain cookie usage

Answer 10

c) To prevent access to cookies via JavaScript

11) Which of the following is implemented during secure session management to enhance security?

a) Storing sessions in browser local storage
b) Terminating sessions after a period of inactivity
c) Using random session IDs
d) b and c

Answer 11

d) b and c

12) Which type of attack is mitigated by setting the Secure attribute on cookies?

a) Clickjacking
b) SQL Injection
c) Man-in-the-middle (MitM) attack
d) Session hijacking over HTTP

Answer 12

2) Clickjacking

13) What type of attack exploits the trust a user has in a particular site?

a) Phishing
b) SQL Injection
c) Cross-Site Scripting (XSS)
d) Cross-Site Request Forgery (CSRF)

Answer 13

d) Cross-Site Request Forgery (CSRF)

14) What is Cross-Site Request Forgery (CSRF)?

a) A method to steal user cookies
b) A technique to redirect users to a malicious site
c) An attack that tricks the victim into submitting a malicious request
d) None of the above

Answer 14

c) An attack that tricks the victim into submitting a malicious request

15) Which security mechanism is designed to prevent CSRF (Cross-Site Request Forgery) attacks?

a) Input validation
b) Use of CSRF tokens
c) Secure cookies
d) Output encoding

Answer 15

b) Use of CSRF tokens

16) What is Cross-Site Scripting (XSS)?

a) A scripting language for web development
b) A technique to enhance website design
c) An attack where malicious scripts are injected into web pages
d) A secure communication protocol

Answer 16

c) An attack where malicious scripts are injected into web pages

17) Which of the following is NOT a type of cross-site scripting (XSS)?

a) Reflected XSS
b) Stored XSS
c) DOM-based XSS
d) Injection XSS

Answer 17

d) Injection XSS

18) What is a potential risk associated with insecure file uploads on a web application?

a) Improved user experience
b) Increased server performance
c) Remote code execution
d) Enhanced data integrity

Answer 18

c) Remote code execution

19) Which of the following is a best practice for password storage?

a) Storing passwords in plain text
b) Encrypting passwords using symmetric key encryption
c) Hashing passwords using a strong, one-way hashing algorithm with salt
d) Using passwords only for trusted users

Answer 19

c) Hashing passwords using a strong, one-way hashing algorithm with salt

20) What is the primary purpose of HTTPS?

a) To redirect users to the correct webpage
b) To improve website loading times
c) To encrypt data transmitted between the user’s browser and the web server
d) To block unwanted ads

Answer 20

c) To encrypt data transmitted between the user’s browser and the web server

21) Which HTTP header can be used to protect against clickjacking attacks?

a) Content-Security-Policy
b) X-Frame-Options
c) X-XSS-Protection
d) Strict-Transport-Security

Answer 21

b) X-Frame-Options

22) What is the purpose of content security policy (CSP)?

a) To prevent data breaches
b) To protect against XSS attacks
c) To enforce secure password handling
d) To block SQL injections

Answer 22

b) To protect against XSS attacks

23) Which protocol is designed to replace the widely exploited TELNET and offer encrypted communication?

a) HTTP
b) SSH
c) FTP
d) SMTP

Answer 23

b) SSH

24) Which OWASP tool is used primarily for penetration testing of web applications?

a) OWASP ZAP
b) Metasploit
c) Nmap
d) John the Ripper

Answer 24

a) OWASP ZAP

25) During a web application penetration test, what is the importance of session management testing?

a) To identify UI/UX issues
b) To ensure efficient data processing
c) To verify secure user session handling
d) To optimize web server performance

Answer 25

c) To verify secure user session handling

February 27, 2025April 18, 2025 vibssingh

Run ChainTest Report on Docker

Last Updated On

April 18, 2025

HOME

ChainTest Reports can be run on docker (dynamic report).

What is ChainLP?

ChainLP (Chain-Long-Playing like LP Record) is a Java (Spring) server which packs the Angular frontend and is distributed as a Docker image. ChainLP is the framework component providing historical analytics.

The recommended way to run ChainLP is with docker-compose. Currently, the supported databases are listed below but most RDBMS database should work.

H2
MySQL
PostgreSQL

For each database, there is a separate docker-compose.yml available at chainlp/docker. H2 provides the most straight-forward way to test, but it is NOT recommended for production use.

Docker image is available from https://hub.docker.com/r/anshooarora/chaintest.

We need to have Desktop Docker up and running. To know how to install the Desktop Docker, please refer to this tutorial – How to install Desktop Docker on Windows 11

Go the location where these docker images are placed and run the below command. In this example, we are running h2 docker image.

docker-compose -f docker-compose-h2.yml up

The output of the above execution is

Go to the http:localhost:80 and we will see an empty ChainTest Report.

Run the project contains the ChainTest report configuration. Refer this tutorial to get the ChainTest Report configuration – ChainTest Report with Cucumber and TestNG.

Add the following properties to chaintest.properties file in src/test/resources

# chaintest configuration
chaintest.project.name= ChaninTest Report with Cucumber and TestNG

# generators:
## chainlp
chaintest.generator.chainlp.enabled=true
chaintest.generator.chainlp.class-name=com.aventstack.chaintest.generator.ChainLPGenerator
chaintest.generator.chainlp.host.url=http://localhost/
chaintest.generator.chainlp.client.request-timeout-s=30
chaintest.generator.chainlp.client.expect-continue=false
chaintest.generator.chainlp.client.max-retries=3

Run the test either through command line or through Test Runner class.

Run the tests through command line

To run the tests, use the below command

mvn clean test

Updation of ChainTest Report

ChainTest Report is updated with the current test run as shown below:

Click on the project and it will show the complete test execution report.

Click on cucumber-jvm option. It will show the detailed execution report. This report includes a pie chart for the feature, Scenario and Steps. Here, we have executed 1 feature file and 1 scenario. The Feature file has failed. So, the Feature pie chart shows 100% failed. There are 5 scenarios. Out of 5, 4 tests are passed. 1 test failed. Therefore, the Scenario pie chart shows 80% passed. This report also shows error message for the failed test.

We see that one of the tests has failed. The screenshot of the failed test is also attached in the report.

We are done! Congratulations on making it through this tutorial and hope you found it useful! Happy Learning!!

February 24, 2025 vibssingh

ChainTest Report with Selenium and JUnit5

HOME

In this tutorial, will generate a ChainTest Report with Selenium and JUnit5. In the previous tutorial, I have explained the steps to generate ChainTest Report with Cucumber – ChainTest Report with Cucumber and TestNG. ChainTest Report is the replacement of Extent Report.

Table of Contents

What is ChainTest Report?

ChainTest is a complete reporting system, it supports a variety of sources, including email, static data, and real-time, historical analytics with ChainLP. The next-generation reporting framework ChainTest was developed for a number of test frameworks, such as Cucumber, JUnit, and TestNG.

Prerequisite

Java 17 is installed
Maven is installed
Eclipse or IntelliJ is installed

Dependency List:

Selenium – 4.28.1
Java 17
JUnit5 – 5.11.0-M2
Maven – 3.9.6
ChainTest JUnit5 – 1.0.11

Structure of Project

Implementation

Step 1 – Add ChainTest JUnit5 plugin dependency in Maven Project.

<dependency>
      <groupId>com.aventstack</groupId>
      <artifactId>chaintest-junit5</artifactId>
      <version>${chaintest.version}</version>
</dependency>

The complete pom.xml looks like as shown below:

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>com.example</groupId>
  <artifactId>ChainTestReport_JUnit5_Demo</artifactId>
  <version>1.0-SNAPSHOT</version>
  <packaging>jar</packaging>

  <name>ChainTestReport_JUnit5_Demo</name>
  <url>http://maven.apache.org</url>

  <properties>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <selenium.version>4.21.0</selenium.version>
    <chaintest.version>1.0.11</chaintest.version>
    <junit.jupiter.engine.version>5.11.0-M2</junit.jupiter.engine.version>
    <junit.jupiter.api.version>5.11.0-M2</junit.jupiter.api.version>
    <junit.jupiter.params.version>5.11.0-M2</junit.jupiter.params.version>
    <maven.compiler.plugin.version>3.13.0</maven.compiler.plugin.version>
    <maven.compiler.source.version>17</maven.compiler.source.version>
    <maven.compiler.target.version>17</maven.compiler.target.version>
    <maven.surefire.plugin.version>3.2.5</maven.surefire.plugin.version>
    <maven.compiler.source>17</maven.compiler.source>
    <maven.compiler.target>17</maven.compiler.target>
  </properties>

  <dependencies>

    <dependency>
      <groupId>org.seleniumhq.selenium</groupId>
      <artifactId>selenium-java</artifactId>
      <version>${selenium.version}</version>
    </dependency>

    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter-engine</artifactId>
      <version>${junit.jupiter.engine.version}</version>
      <scope>test</scope>
    </dependency>

    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter-api</artifactId>
      <version>${junit.jupiter.api.version}</version>
      <scope>test</scope>
    </dependency>

    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter-params</artifactId>
      <version>${junit.jupiter.params.version}</version>
      <scope>test</scope>
    </dependency>

    <dependency>
      <groupId>com.aventstack</groupId>
      <artifactId>chaintest-junit5</artifactId>
      <version>${chaintest.version}</version>
    </dependency>

  </dependencies>

  <build>
    <plugins>

      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-surefire-plugin</artifactId>
        <version>${maven.surefire.plugin.version}</version>

        <dependencies>
          <dependency>
            <groupId>org.junit.jupiter</groupId>
            <artifactId>junit-jupiter-engine</artifactId>
            <version>${junit.jupiter.engine.version}</version>
          </dependency>
        </dependencies>
      </plugin>
    </plugins>
  </build>

</project>

Step 2 – Create Pages and Test Code for the pages

BasePage

package com.example;

import org.openqa.selenium.WebDriver;
import org.openqa.selenium.support.PageFactory;

public class BasePage {
    public WebDriver driver;

    public BasePage(WebDriver driver) {
        this.driver = driver;
        PageFactory.initElements(driver,this);
    }

}

LoginPage

package com.example;

import org.openqa.selenium.WebDriver;
import org.openqa.selenium.WebElement;
import org.openqa.selenium.support.FindBy;

public class LoginPage extends BasePage {

    public LoginPage(WebDriver driver) {
        super(driver);

    }

    @FindBy(name = "username")
    public WebElement userName;

    @FindBy(name = "password")
    public WebElement password;

    @FindBy(xpath = "//*[@type='submit']")
    public WebElement loginBtn;

    @FindBy(xpath = "//*[@id='flash']")
    public WebElement errorMessage;

    public void login(String strUserName, String strPassword) {
        userName.sendKeys(strUserName);
        password.sendKeys(strPassword);
        loginBtn.click();
    }

    public String getErrorMessage() {
        return errorMessage.getText();
    }

}

SecurePage

package com.example;

import org.openqa.selenium.WebDriver;
import org.openqa.selenium.WebElement;
import org.openqa.selenium.support.FindBy;

public class SecurePage extends BasePage {

    public SecurePage(WebDriver driver) {
        super(driver);

    }

    @FindBy(xpath = "//*[@id='flash']")
    public WebElement securePageTitle;

    public String getSecurePageTitle() {
        return securePageTitle.getText();
    }

}

Step3 – Annotate test class with `@ExtendWith(ChainTestExecutionCallback.class)`

BaseTests

package com.example;

import com.aventstack.chaintest.plugins.ChainTestExecutionCallback;
import org.junit.jupiter.api.extension.ExtendWith;
import org.junit.jupiter.api.extension.TestWatcher;
import org.openqa.selenium.WebDriver;
import org.openqa.selenium.chrome.ChromeDriver;
import org.openqa.selenium.chrome.ChromeOptions;
import org.junit.jupiter.api.AfterEach;
import org.junit.jupiter.api.BeforeEach;
import java.time.Duration;

@ExtendWith(ChainTestExecutionCallback.class)
public class BaseTests implements TestWatcher {

    public static WebDriver driver;
    public final static int TIMEOUT = 10;

    @BeforeEach
    public void setup() {
        ChromeOptions options = new ChromeOptions();
        options.addArguments("--remote-allow-origins=*");
        options.addArguments("--no-sandbox");
        options.addArguments("--disable-dev-shm-usage");
        driver = new ChromeDriver(options);

        driver.manage().window().maximize();
        driver.get("https://the-internet.herokuapp.com/login");
        driver.manage().timeouts().implicitlyWait(Duration.ofSeconds(TIMEOUT));
    }

    @AfterEach
    void tearDown() {
        driver.quit();
    }

}

LoginPageTests

package com.example;

import org.junit.jupiter.api.Assertions;
import org.junit.jupiter.api.Test;

public class LoginPageTests extends BaseTests {

    String actualLoginPageTitle;
    String actualErrorMessage;
    String actualSecurePageTitle;
    
    @Test
    public void verifyPageTitle() {

        actualLoginPageTitle = driver.getTitle();
        
        // Verify Page Title - Fail
        Assertions.assertEquals("The Internet !!",actualLoginPageTitle);

    }

    @Test
    public void invalidCredentials() {

        LoginPage loginPage = new LoginPage(driver);
        loginPage.login("tomsmith", "happy!");
        actualErrorMessage = loginPage.getErrorMessage();

        // Verify Error Message
        Assertions.assertTrue(actualErrorMessage.contains("Your password is invalid!"));

    }

    @Test
    public void validLogin() {

        LoginPage loginPage = new LoginPage(driver);
        loginPage.login("tomsmith", "SuperSecretPassword!");

        SecurePage securePage = new SecurePage(driver);
        actualSecurePageTitle = securePage.getSecurePageTitle();

        // Verify Home Page
        Assertions.assertTrue(actualSecurePageTitle.contains("You logged into a secure area!"));

    }
}

Step 4 – Add chaintest.properties file in src/test/resources

Add chaintest.properties to the classpath, example: src/test/resources/chaintest.properties.

# chaintest configuration
chaintest.project.name= ChaninTest Report with Selenium and JUnit5

# storage
chaintest.storage.service.enabled=false
# [azure-blob, aws-s3]
chaintest.storage.service=azure-blob
# s3 bucket or azure container name
chaintest.storage.service.container-name=

# generators:
## chainlp
chaintest.generator.chainlp.enabled=true
chaintest.generator.chainlp.class-name=com.aventstack.chaintest.generator.ChainLPGenerator
chaintest.generator.chainlp.host.url=http://localhost/
chaintest.generator.chainlp.client.request-timeout-s=30
chaintest.generator.chainlp.client.expect-continue=false
chaintest.generator.chainlp.client.max-retries=3

## simple
chaintest.generator.simple.enabled=true
chaintest.generator.simple.document-title=chaintest
chaintest.generator.simple.class-name=com.aventstack.chaintest.generator.ChainTestSimpleGenerator
chaintest.generator.simple.output-file=target/chaintest/Index.html
chaintest.generator.simple.offline=false
chaintest.generator.simple.dark-theme=true
chaintest.generator.simple.datetime-format=yyyy-MM-dd hh:mm:ss a
chaintest.generator.simple.js=
chaintest.generator.simple.css=

## email
chaintest.generator.email.enabled=true
chaintest.generator.email.class-name=com.aventstack.chaintest.generator.ChainTestEmailGenerator
chaintest.generator.email.output-file=target/chaintest/Email.html
chaintest.generator.email.datetime-format=yyyy-MM-dd hh:mm:ss a

Step 5 – Run the tests

Right click on LoginPageTests and select Run ‘LoginPageTests’

The execution status looks like as shown below. There are 3 tests and 1 test will fail.

Step 6 -View ChainTest Reports

ChainTest Reports are generated in target folder – Index.html and email.html.

Index.html

Right-click and open with Web Browser.

The index.html has a summary section that displays the summary of the execution. The summary includes the overview of the pass/fail using a pictogram, start time, end time, and pass/fail details of tests as shown in the image below.

Email.html

This report contains the high level summary of the test execution.

Step 7 – Run the tests through command line

To run the tests, use the below command

mvn clean test

We are done! Congratulations on making it through this tutorial and hope you found it useful! Happy Learning!!

February 21, 2025February 21, 2025 vibssingh

How to install Desktop Docker on Windows 11

HOME

In this tutorial, we will discuss the Docker, Docker Desktop and how to install Docker Desktop on the Windows 11.

Table of Contents

What is Docker?

Docker is an open platform for developing, shipping, and running applications using the containers. Docker enables us to separate the applications from the infrastructure so we can deliver software quickly. With Docker, we can manage your infrastructure in the same ways you manage your applications.

Containers are lightweight, portable, and self-sufficient units that package an application and its dependencies, ensuring consistency across different environments.

The current image has no alternative text. The file name is: image-34.png

What is Docker Desktop?

Docker Desktop is a one-click-install application for your Mac, Linux, or Windows environment that lets you build, share, and run containerized applications and microservices.

It provides a straightforward GUI (Graphical User Interface) that lets you manage your containers, applications, and images directly from your machine.

Before installing Docker on Windows 10 or 11, ensure your system meets the following requirements:

Windows 10 64-bit: Build 18362 or higher
Windows 11 64-bit
Hardware Virtualization Technology (VT-x) enabled in BIOS
Microsoft Hyper-V and Containers features enabled

How to verify WSL is installed?

Windows Subsystem for Linux (WSL) 2 is a prerequisite for Docker Desktop on Windows. It provides a lightweight Linux kernel for compatibility and performance improvements.

wsl --version

The output of the above command should display the version of wsl installed on the machine.

Open PowerShell as Administrator and run:

wsl --install

Restart the computer if prompted.

Install Docker Desktop

On the Docker download page, select “Windows” as your operating system.

The download will begin automatically. The duration will depend on your internet speed.

After installation, open Docker Desktop.

After clicking “OK,” the installation will start.

After installation completes, it will show a confirmation screen.

Create an account for Docker Desktop.

Once we will create the account, we will login and see that the Docker Engine is stopped.

Go to the settings and select “Start Docker Desktop when sign in to your computer.”. This is optional.

Go to the bottom tray and right click on the Desktop option.

It will show below mentioned options. Select “Quit Docker Desktop”.

Start Docker Desktop

Docker Desktop does not start automatically after installation. To start Docker Desktop:

Search for Docker, and select Docker Desktop in the search results.

The Docker menu displays the Docker Subscription Service Agreement. Select Accept to continue. Docker Desktop starts after you accept the terms.

Note that Docker Desktop won’t run if you do not agree to the terms. You can choose to accept the terms at a later date by opening Docker Desktop.

How to verify successful docker installation

Open a command prompt or PowerShell window.

Using the following command check the docker version for verifying the installation.

docker --version

Pull a sample image, such as Nginx, using the following command:

 docker pull nginx

If the image pulls successfully, Docker Desktop has been installed correctly

TroubleShooting

The error you’re seeing indicates that Docker is unable to authenticate when trying to pull the NGINX image from Docker Hub

Use the below command to login to docker

 docker login -u my-user-name (using real username)

We are done! Congratulations on making it through this tutorial and hope you found it useful! Happy Learning!!

February 17, 2025March 27, 2025 vibssingh

ChainTest Report with Cucumber and TestNG

Last Updated On

March 27, 2025

HOME

ExtentReport, one of the most popular and extensively used test reports, has been officially retired. Changes in automated testing techniques led to this decision. The same developer, Anshoo Arora, fills the void with ChainTest, a potent reporting system. With its enhanced capabilities, real-time data, and seamless integration options, ChainTest is anticipated to transform how we see test results.

Table of Contents

What is ChainTest Report?

ChainTest is a complete reporting system. It supports a variety of sources, including email and static data. It also handles real-time and historical analytics with ChainLP. The next-generation reporting framework ChainTest was developed for a number of test frameworks, such as Cucumber, JUnit, and TestNG.

Prerequisite

Java 17 is installed
Maven is installed
Eclipse or IntelliJ is installed

Dependency List:

Selenium – 4.28.1
Java 17
TestNG – 7.10.2
Cucumber – 7.18.1
Maven – 3.9.6
ChainTest Cucumber– 1.0.11

Structure of Project

Implementation

Step 1 – Add ChainTest Cucumber plugin dependency in Maven Project.

<dependency>
      <groupId>com.aventstack</groupId>
      <artifactId>chaintest-cucumber-jvm</artifactId>
      <version>${chaintest.cucumberjvm.version}</version>
      <scope>provided</scope>
 </dependency>

The complete pom.xml looks like as shown below:

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>com.example</groupId>
  <artifactId>ChainTestReport_Cucumber_TestNG_Demo</artifactId>
  <version>1.0-SNAPSHOT</version>
  <packaging>jar</packaging>

  <name>ChainTestReport_Cucumber_TestNG_Demo</name>
  <url>http://maven.apache.org</url>

  <properties>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <cucumber.version>7.18.1</cucumber.version>
    <selenium.version>4.25.0</selenium.version>
    <testng.version>7.10.2</testng.version>
    <chaintest.cucumberjvm.version>1.0.11</chaintest.cucumberjvm.version>
    <apache.common.version>2.4</apache.common.version>
    <maven.compiler.plugin.version>3.13.0</maven.compiler.plugin.version>
    <maven.surefire.plugin.version>3.3.1</maven.surefire.plugin.version>
    <maven.compiler.source.version>17</maven.compiler.source.version>
    <maven.compiler.target.version>17</maven.compiler.target.version>
    <maven.cucumber.reporting.version>5.8.2</maven.cucumber.reporting.version>
  </properties>

  <dependencies>

    <dependency>
      <groupId>io.cucumber</groupId>
      <artifactId>cucumber-java</artifactId>
      <version>${cucumber.version}</version>
    </dependency>

    <dependency>
      <groupId>io.cucumber</groupId>
      <artifactId>cucumber-testng</artifactId>
      <version>${cucumber.version}</version>
      <scope>test</scope>
    </dependency>

    <!-- Selenium -->
    <dependency>
      <groupId>org.seleniumhq.selenium</groupId>
      <artifactId>selenium-java</artifactId>
      <version>${selenium.version}</version>
    </dependency>

    <!-- TestNG -->
    <dependency>
      <groupId>org.testng</groupId>
      <artifactId>testng</artifactId>
      <version>${testng.version}</version>
      <scope>test</scope>
    </dependency>

    <dependency>
      <groupId>com.aventstack</groupId>
      <artifactId>chaintest-cucumber-jvm</artifactId>
      <version>${chaintest.cucumberjvm.version}</version>
      <scope>provided</scope>
    </dependency>

  </dependencies>

  <build>
    <plugins>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-compiler-plugin</artifactId>
        <version>${maven.compiler.plugin.version}</version>
        <configuration>
          <source>${maven.compiler.source.version}</source>
          <target>${maven.compiler.target.version}</target>
        </configuration>
      </plugin>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-surefire-plugin</artifactId>
        <version>${maven.surefire.plugin.version}</version>
        <configuration>
          <testFailureIgnore>true</testFailureIgnore>
          <suiteXmlFiles>
            <suiteXmlFile>testng.xml</suiteXmlFile>
          </suiteXmlFiles>
        </configuration>
      </plugin>

    </plugins>
  </build>
</project>

Step 2 – Create a feature file under src/test/resources/features

It is recommended to create a features folder in the src/test/resources directory. Create all the feature files in this features folder. Feature file should be saved as an extension of .feature. The test scenarios in the Feature file are written in Gherkins language. Add the test scenarios in this feature file. I have added sample test scenarios.

Feature: Login to HRM Application

  Background:
    Given User is on HRMLogin page "https://opensource-demo.orangehrmlive.com/"

  @ValidCredentials
  Scenario: Login with valid credentials

    When User enters username as "Admin" and password as "admin123"
    Then User should be able to login successfully and new page open

  @InvalidCredentials
  Scenario Outline: Login with invalid credentials

    When User enters username as "<username>" and password as "<password>"
    Then User should be able to see error message "<errorMessage>"

    Examples:
      | username   | password  | errorMessage           |
      | Admin      | admin12$$ | Invalid credentials    |
      | admin$$    | admin123  | Invalid credentials    |
      | abc123     | xyz$$     | Invalid credentials    |

  @MissingUsername
  Scenario: Login with blank username - FailedTest

    When User enters username as " " and password as "admin123"
    Then User should be able to see a message "Required1" below Username

Step 3 – Create the classes for locators, actions, and utilities in src/main/java

LoginPageActions

package com.example.actions;

import com.example.locators.LoginPageLocators;
import org.openqa.selenium.support.PageFactory;
import com.example.utils.HelperClass;


public class LoginPageActions {

    LoginPageLocators loginPageLocators = null;

    public LoginPageActions() {

        this.loginPageLocators = new LoginPageLocators();
        PageFactory.initElements(HelperClass.getDriver(), loginPageLocators);
    }

    // Get the error message when username is blank
    public String getMissingUsernameText() {
        return loginPageLocators.missingUsernameErrorMessage.getText();
    }

    // Get the Error Message
    public String getErrorMessage() {
        return loginPageLocators.errorMessage.getText();
    }

    public void login(String strUserName, String strPassword) {

        // Fill user name
        loginPageLocators.userName.sendKeys(strUserName);

        // Fill password
        loginPageLocators.password.sendKeys(strPassword);

        // Click Login button
        loginPageLocators.login.click();

    }
}

HomePageActions

package com.example.actions;

import com.example.locators.HomePageLocators;
import org.openqa.selenium.support.PageFactory;
import com.example.utils.HelperClass;

public class HomePageActions {

    HomePageLocators homePageLocators = null;

    public HomePageActions() {

        this.homePageLocators = new HomePageLocators();
        PageFactory.initElements(HelperClass.getDriver(),homePageLocators);
    }

    public String getHomePageText() {
        System.out.println("Heading :" + homePageLocators.homePageUserName.getText());
        return homePageLocators.homePageUserName.getText();
    }

}

LoginPageLocators

package com.example.locators;

import org.openqa.selenium.WebElement;
import org.openqa.selenium.support.FindBy;

public class LoginPageLocators {

    @FindBy(name = "username")
    public WebElement userName;

    @FindBy(name = "password")
    public WebElement password;

    @FindBy(xpath = "//*[@id='app']/div[1]/div/div[1]/div/div[2]/div[2]/form/div[1]/div/span")
    public WebElement missingUsernameErrorMessage;

    @FindBy(xpath = "//*[@id='app']/div[1]/div/div[1]/div/div[2]/div[2]/form/div[3]/button")
    public WebElement login;

    @FindBy(xpath = "//*[@id='app']/div[1]/div/div[1]/div/div[2]/div[2]/div/div[1]/div[1]/p")
    public  WebElement errorMessage;

}

HomePageLocators

package com.example.locators;
import org.openqa.selenium.WebElement;
import org.openqa.selenium.support.FindBy;

public class HomePageLocators {

    @FindBy(xpath = "//span[@class='oxd-topbar-header-breadcrumb']/h6")

    public  WebElement homePageUserName;

}

HelperClass

package com.example.utils;

import java.time.Duration;
import org.openqa.selenium.WebDriver;
import org.openqa.selenium.chrome.ChromeDriver;
import org.openqa.selenium.chrome.ChromeOptions;

public class HelperClass {

    private static HelperClass helperClass;

    private static WebDriver driver;
    public final static int TIMEOUT = 5;

    private HelperClass() {

        ChromeOptions options = new ChromeOptions();
        options.addArguments("--start-maximized");
        driver = new ChromeDriver(options);
        driver.manage().timeouts().implicitlyWait(Duration.ofSeconds(TIMEOUT));
    }

    public static void openPage(String url) {
        driver.get(url);
    }

    public static WebDriver getDriver() {
        return driver;
    }

    public static void setUpDriver() {

        if (helperClass==null) {
            helperClass = new HelperClass();
        }
    }

    public static void tearDown() {

        if(driver!=null) {
            driver.quit();
        }

        helperClass = null;
    }

}

Step 4 – Create a StepDefinition class in src/test/java

Create a Java Class called Definition. In this class, we will create the Test Code related to the Given, When, Then of the Feature file. This will be in src/test/java.

package com.example.definitions;

import com.example.actions.HomePageActions;
import com.example.actions.LoginPageActions;

import io.cucumber.java.en.Given;
import io.cucumber.java.en.Then;
import io.cucumber.java.en.When;
import org.testng.Assert;
import com.example.utils.HelperClass;

public class LoginPageDefinitions {

    LoginPageActions objLogin = new LoginPageActions();
    HomePageActions objHomePage = new HomePageActions();

    @Given("User is on HRMLogin page {string}")
    public void loginTest(String url) {

        HelperClass.openPage(url);

    }

    @When("User enters username as {string} and password as {string}")
    public void goToHomePage(String userName, String passWord) {

        // login to application
        objLogin.login(userName, passWord);

    }

    @Then("User should be able to login successfully and new page open")
    public void verifyLogin() {

        // Verify home page
        Assert.assertTrue(objHomePage.getHomePageText().contains("Dashboard"));

    }

    @Then("User should be able to see error message {string}")
    public void verifyErrorMessage(String expectedErrorMessage) {

        // Verify error message
        Assert.assertEquals(objLogin.getErrorMessage(),expectedErrorMessage);

    }

    @Then("User should be able to see a message {string} below Username")
    public void verifyMissingUsernameMessage(String message) {

        Assert.assertEquals(objLogin.getMissingUsernameText(),message);
    }

}

Step 5 – Create a Hook class in src/test/java

Create the hook class that contains the Before and After hook. Use it to initialize the web browser. Then, close the web browser. I have added the code to take the screenshot of the failed scenario in @After Hook.

package com.example.definitions;
import org.openqa.selenium.OutputType;
import org.openqa.selenium.TakesScreenshot;

import io.cucumber.java.After;
import io.cucumber.java.Before;
import io.cucumber.java.Scenario;
import com.example.utils.HelperClass;

public class Hooks {

    @Before
    public static void setUp() {

        HelperClass.setUpDriver();
    }

    @After
    public static void tearDown(Scenario scenario) {

        //validate if scenario has failed
        if(scenario.isFailed()) {
            final byte[] screenshot = ((TakesScreenshot) HelperClass.getDriver()).getScreenshotAs(OutputType.BYTES);
            scenario.attach(screenshot, "image/png", scenario.getName());
        }

        HelperClass.tearDown();
    }
}

Step 6 – Create a TestNG Cucumber Runner class in the src/test/java

Below is the code for CucumberRunnerTests class.

package com.example.runner;

import io.cucumber.testng.AbstractTestNGCucumberTests;
import io.cucumber.testng.CucumberOptions;

@CucumberOptions(features = "src/test/resources/features/LoginPage.feature",
        glue = "com.example.definitions",
        plugin = {
                "pretty",
                "com.aventstack.chaintest.plugins.ChainTestCucumberListener:"
        }
)
public class RunnerTests extends AbstractTestNGCucumberTests {
}

Step 7 – Add ChainTest plugin to the runner class.

@CucumberOptions(plugin = { 
  "com.aventstack.chaintest.plugins.ChainTestCucumberListener:" 
})

Step 8 – Add chaintest.properties to src/test/resources directory

Add chaintest.properties to the classpath, example: src/test/resources/chaintest.properties.

# chaintest configuration
chaintest.project.name= ChaninTest Report with Cucumber and TestNG

# generators:
## chainlp
chaintest.generator.chainlp.enabled=true
chaintest.generator.chainlp.class-name=com.aventstack.chaintest.generator.ChainLPGenerator
chaintest.generator.chainlp.host.url=http://localhost/
chaintest.generator.chainlp.client.request-timeout-s=30
chaintest.generator.chainlp.client.expect-continue=false
chaintest.generator.chainlp.client.max-retries=3

## simple
chaintest.generator.simple.enabled=true
chaintest.generator.simple.document-title=chaintest
chaintest.generator.simple.class-name=com.aventstack.chaintest.generator.ChainTestSimpleGenerator
chaintest.generator.simple.output-file=target/chaintest/Index.html
chaintest.generator.simple.offline=false
chaintest.generator.simple.dark-theme=true
chaintest.generator.simple.datetime-format=yyyy-MM-dd hh:mm:ss a
chaintest.generator.simple.js=
chaintest.generator.simple.css=

## email
chaintest.generator.email.enabled=true
chaintest.generator.email.class-name=com.aventstack.chaintest.generator.ChainTestEmailGenerator
chaintest.generator.email.output-file=target/chaintest/Email.html
chaintest.generator.email.datetime-format=yyyy-MM-dd hh:mm:ss a

Step 9 – Create a testng.xml at the root directory.

Create a testng.xml at the root of the project. This xml holds parameter detail like allow passing parameters to test methods like browser name.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE suite SYSTEM "https://testng.org/testng-1.0.dtd">
<suite name="Suite">
    <test  name="Cucumber with TestNG Test">
        <classes>
            <class name="com.example.runner.RunnerTests"/>
        </classes>
    </test> <!-- Test -->
</suite> <!-- Suite -->

Step 10 – Run the tests from TestNG

You can execute the test script by right-clicking on TestRunner class -> Run As TestNG. (Eclipse)

In the case of the IntelliJ project, right-click on the runner class and select Run ‘RunnerTests’.

The execution status looks like as shown below. There are 5 tests and 1 test will fail.

Step 11 – View ChainTest Reports

ChainTest Reports are generated in target folder – Index.html and email.html.

Index.html

Right-click and open with Web Browser.

The index.html has a summary section that displays the summary of the execution. The summary includes the overview using a pictogram. It shows the start time and end time. The details of pass/fail tests are provided as shown in the image below.

Email.html

This report contains the high level summary of the test execution.

Step 12 – Run the tests through command line

To run the tests, use the below command

mvn clean test

We are done! Congratulations on making it through this tutorial and hope you found it useful! Happy Learning!!

You can get the project in GitHub, please refer this link

What is SQL Injection?

How does SQL Injection works?

Consequences of SQL Injection

SQL Injection Example

In-band SQLi (Classic) SQL Injection Example

Example of a Union-Based SQL Injection

Types of SQL Injection

In-band SQL Injection

Inferential SQL Injection

Out-of-Band SQL Injection

Best Practices to Protect Your Database from SQL Injection

Introduction to OpenCSV

Implementation Steps

1. Add OpenCSV dependency to Maven Project

2. Add OpenCSV dependency to Gradle Project

3. Read all data from CSV

4. Read CSV by Skipping first line

5. Reading CSV File with different separator

What is HTML?

What is Jsoup?

Key Features of Jsoup

Parsing HTML From a String

Parsing HTML from a local HTML file

Parsing HTML From a URL and retrieving tags

Steps to install node.js on Windows

Step 1: Download Node.js Installer

Step 2: Run the Installer

Step 3: Accept the License Agreement

Step 4: Choose the Installation Location

Step 5: Select Components

Step 6: Install Node.js

Step 7: Complete the Installation

Step 8: Verify the Installation

What is ChainLP?

Run the tests through command line

Updation of ChainTest Report

What is ChainTest Report?

Prerequisite

Dependency List:

Structure of Project

Implementation

Step 1 – Add ChainTest JUnit5 plugin dependency in Maven Project.

Step 2 – Create Pages and Test Code for the pages

Step3 – Annotate test class with @ExtendWith(ChainTestExecutionCallback.class)

Step 4 – Add chaintest.properties file in src/test/resources

Step 5 – Run the tests

Step 6 -View ChainTest Reports

Step 7 – Run the tests through command line

What is Docker?

What is Docker Desktop?

How to verify WSL is installed?

Install Docker Desktop

Start Docker Desktop

How to verify successful docker installation

What is ChainTest Report?

Prerequisite

Dependency List:

Structure of Project

Implementation

Step 1 – Add ChainTest Cucumber plugin dependency in Maven Project.

Step 2 – Create a feature file under src/test/resources/features

Step 3 – Create the classes for locators, actions, and utilities in src/main/java

Step 4 – Create a StepDefinition class in src/test/java

Step 5 – Create a Hook class in src/test/java

Step 6 – Create a TestNG Cucumber Runner class in the src/test/java

Step 7 – Add ChainTest plugin to the runner class.

Step 8 – Add chaintest.properties to src/test/resources directory

Step 9 – Create a testng.xml at the root directory.

Step 10 – Run the tests from TestNG

Step 11 – View ChainTest Reports

Step 12 – Run the tests through command line

Step3 – Annotate test class with `@ExtendWith(ChainTestExecutionCallback.class)`