Showing posts with label #chrome. Show all posts
Showing posts with label #chrome. Show all posts

Monday, 9 September 2024

A security feature in the Chrome web browser which has been designed to mitigate JavaScript memory corruption issues has security vulnerabilities

 


A security feature in the Chrome web browser which has been designed to mitigate JavaScript memory corruption issues has security vulnerabilities

 

The earlier version of Chrome i.e., beforehand 128.0.6613.84, allows a remote attacker to potentially exploit memory corruption or access all the system or server resources via a constructed HTML page.

INSIGHTS ABOUT THE THREAD:

Chrome V8 Engine, has been designed in JavaScript engine which executes the JavaScript code.  V8 is written in C++ and it can execute the C++ programs which knobs the file system, database and network connections and  this permits to construct C++ in JavaScript, and this will be executed via V8.

It can execute JavaScript code either within or outside of a browser.

V8 is used in the Chromium-based web browsers - Google Chrome, Brave, Opera, Vivaldi, Microsoft Edge, and in the Couchbase database server.

Hence forth using this exploitation, if the organization/individuals have old browsers in machines or in server entire organization/individuals’ data in filesystem & databases, and network can be controlled/accessed.

Hence as part of DevOps Security Practices, it is encouraged to update the browser to the latest version to come over these security vulnerabilities. 

Saturday, 13 August 2022

🐛 Bug report: Cypress is not throwing exception or error message when wrong “Event Types” are used

 Issue:
 
In the below screenshot, an incorrect “Event Type” such as “window:con” (not specified in the Cypress docs) is being used. Here the Cypress is not throwing any exception or error message while execution
 
Screenshot:


Cypress is not throwing exception or error message when wrong  “Event Types” are used




Friday, 12 August 2022

Analysis of Architectural difference between Cypress and Selenium

 In this demo, I will summarize my analysis of Architectural difference between Cypress and Selenium.


Kindly provide your feedback as comments whether the “Real User Actions or Behaviors” should be part of functional, API and regression test automation or tweaking of HTML or DOM should be, too be a part.






Thursday, 11 August 2022

🐛 Bug report: Cypress “Time Travel” feature fails with Chai Assertions

 

Issue:


When the dropdown is selected using Cypress and validated with Chai assertion, the “Time Travel” feature captures incorrect details which contradicts with the actual selection by the tool.


Screenshots:










Wednesday, 10 August 2022

🐛 Bug report: Cypress Tests are failing after the updating the Browser to Latest Version

 Issue:

  • When the installed local Browser version is updated to the latest version and when the Cypress Test scripts are ran, the test scripts are failing and the message “No Commands were issued in the test” was displayed.


  • After clicking the update in the Cypress Test runner too, the test scripts were failing.


  • If I Close the Cypress Test Runner and after re-opening it, the tests are passing.


  • After local browser is updated, every new opening of Cypress Test Runner is causing error and tests are failing.


Screenshots:



After Re-Opening the Cypress Test Runner, the test scripts are passing: 






Wednesday, 3 August 2022

“Web Scrapping” of data from YouTube UI and generate reports using python (AI & Data Science) Demo

 

  • v  A Python BDD (AI and Data science) solution for YouTube UI, demo.
  • v  Web Scrapping of data from UI will be performed.
  • v  Scrubbing of the extracted data will be accomplished.
  • v  Graphs generated are two-dimensional comparison in nature
  • v  At the end, below mentioned reports will be produced using AI & Data Science which provides useful/vital insights.

  Ø  Plot Graph
Ø  Scatter Chart
Ø  Bar Graph
Ø  Histogram
Ø  Pie Chart




Sunday, 17 July 2022

Thursday, 14 July 2022

Web Scrapping using Selenium4 and Python (Data Science)

  • Data is scraped from Amazon website using Selenium4
  • Python Data science is used to create analytical report
  • Bar Chat and Pie Chart analytical reports are created from real time data



Tuesday, 28 June 2022

[🐛 Bug]: Selenium4, Java & WebDriverManager downloads improper versions of drivers and test executions are failing

 

When old versions of Chrome/Edge/Firefox are installed and when the WebDriverManager is used/run, it downloads the incorrect version of chromedrive.exe or respective drivers and hence the test executions are failing.


Screenshots:

Error Details:

Selenium4, Java, WebDriverManager, Error


Browser Installed Version:

Old Version Chrome Browser installed details



[🐛 Bug]: Selenium4, CSharp & WebDriverManager downloads inappropriate versions of drivers and test executions are failing

 

When old versions of Chrome/Edge/Firefox are installed and when the WebDriverManager is used/run, it downloads the latest version of chromedrive.exe or respective drivers and hence the test executions are failing.

Screenshots:

Error Details:



Browser Installed Version:



WebDriverManager driver downloaded details: