Website UI & Content :
- Pay special attention to verifying the content on the website application.
- Also, test the UI specifications as per the UI deck requirement document.
- The size of buttons, menus, and text fields should be properly aligned with other controls as per the height and width of the page.
General validations :
- General validations are performed considering the overall architecture of the software.
- Module-wise ensure to test all the functionalities of a web application. Test the web forms at all the steps, right from filling the form to verifying until the confirmation page.
- Verify the fonts and images used in the web application are uniform across all browsers.
- Verify that the fields that are by default disabled are not clickable.
- On the login page, verify that the cursor points to the username text field as an indicator to input details in this field.
- Test the working of scroll bars and popups on the web page.
- Test if there are any broken links in the web page application.
- Focus on properly testing the fields like dropdowns, check boxes, list boxes, text boxes, etc.
- Verify if the values in the drop-down list are present in alphabetical order.
- In the case of a text box, if the fields are marked with a (*) mandatory indicator, it becomes easier for the users to understand this better as well.
Database validations :
- Databases form the backbone of web applications. Hence, it is essentially important as the front end requests of an application are processed by fetching results from the backend, i.e. the database.
- The database should be validated to check the password encryption.
- Verify a column does not allow a “NULL” value until any such condition is specified.
- Test if the data is stored in the correct format in the database.
- Test the time taken for a stored procedure to execute a command.
Security validations :
- Security validations are done to identify security loopholes in software, and the key areas which are prone to security breach.
- Validate sensitive data does not appear in the URL
- Test all web application data that is transmitted over the web using “https” for instance payment information, passwords, etc.
- After session time out of an application, the same user should be prompted to fresh log in again.