122 lines
14 KiB
JSON
122 lines
14 KiB
JSON
|
|
{
|
||
|
|
"id": "edge-special-chars-board",
|
||
|
|
"name": "엣지 케이스: 특수문자 검색 (게시판 > 자유게시판)",
|
||
|
|
"version": "1.0.0",
|
||
|
|
"auth": {
|
||
|
|
"role": "admin"
|
||
|
|
},
|
||
|
|
"menuNavigation": {
|
||
|
|
"level1": "게시판",
|
||
|
|
"level2": "자유게시판"
|
||
|
|
},
|
||
|
|
"screenshotPolicy": {
|
||
|
|
"captureOnFail": true,
|
||
|
|
"captureOnPass": false
|
||
|
|
},
|
||
|
|
"steps": [
|
||
|
|
{
|
||
|
|
"id": 1,
|
||
|
|
"name": "페이지 로드 대기",
|
||
|
|
"action": "wait",
|
||
|
|
"timeout": 3000
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 2,
|
||
|
|
"name": "테이블 로드 대기",
|
||
|
|
"action": "wait_for_table",
|
||
|
|
"timeout": 5000
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 3,
|
||
|
|
"name": "특수문자 검색: <script>",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'FILL_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(!searchInput){R.err='검색 입력란 없음';R.ok=true;return JSON.stringify(R);}searchInput.focus();await w(200);const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set;if(ns)ns.call(searchInput,\"<script>alert('xss')</script>\");else searchInput.value=\"<script>alert('xss')</script>\";searchInput.dispatchEvent(new Event('input',{bubbles:true}));searchInput.dispatchEvent(new Event('change',{bubbles:true}));searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true}));await w(2000);R.searchValue=\"<script>alert('xss')</script>\";R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_XSS"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 4,
|
||
|
|
"name": "특수문자 검색 결과 확인",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'SEARCH_XSS_CHECK'};await w(2000);const rows=Array.from(document.querySelectorAll('table tbody tr')).filter(r=>r.offsetParent!==null);R.rowCount=rows.length;const hasError=document.querySelector('[class*=\"error\"],[class*=\"Error\"],[role=\"alert\"]');R.hasError=!!hasError;if(hasError){R.errorText=hasError.innerText?.trim().substring(0,80);}const noDataMsg=document.body.innerText.includes('데이터가 없습니다')||document.body.innerText.includes('검색 결과가 없습니다')||document.body.innerText.includes('No data');R.noDataMessage=noDataMsg;R.pageStable=!document.querySelector('.loading,.spinner,[class*=\"skeleton\"]');R.ok=true;R.info=R.hasError?'⚠️ 특수문자 검색 시 에러 발생':'✅ 특수문자 검색 시 에러 없음 (정상)';return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_XSS_CHECK"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 5,
|
||
|
|
"name": "검색 초기화",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'CLEAR_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(searchInput){ const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set; if(ns)ns.call(searchInput,'');else searchInput.value=''; searchInput.dispatchEvent(new Event('input',{bubbles:true})); searchInput.dispatchEvent(new Event('change',{bubbles:true})); searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true})); await w(1500); R.cleared=true;}else{R.cleared=false;R.warn='검색 입력란 없음';}R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 5000
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 6,
|
||
|
|
"name": "SQL 인젝션 검색",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'FILL_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(!searchInput){R.err='검색 입력란 없음';R.ok=true;return JSON.stringify(R);}searchInput.focus();await w(200);const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set;if(ns)ns.call(searchInput,\"'; DROP TABLE users; --\");else searchInput.value=\"'; DROP TABLE users; --\";searchInput.dispatchEvent(new Event('input',{bubbles:true}));searchInput.dispatchEvent(new Event('change',{bubbles:true}));searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true}));await w(2000);R.searchValue=\"'; DROP TABLE users; --\";R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_SQL"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 7,
|
||
|
|
"name": "SQL 인젝션 검색 결과 확인",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'SEARCH_SQL_CHECK'};await w(2000);const rows=Array.from(document.querySelectorAll('table tbody tr')).filter(r=>r.offsetParent!==null);R.rowCount=rows.length;const hasError=document.querySelector('[class*=\"error\"],[class*=\"Error\"],[role=\"alert\"]');R.hasError=!!hasError;if(hasError){R.errorText=hasError.innerText?.trim().substring(0,80);}const noDataMsg=document.body.innerText.includes('데이터가 없습니다')||document.body.innerText.includes('검색 결과가 없습니다')||document.body.innerText.includes('No data');R.noDataMessage=noDataMsg;R.pageStable=!document.querySelector('.loading,.spinner,[class*=\"skeleton\"]');R.ok=true;R.info=R.hasError?'⚠️ 특수문자 검색 시 에러 발생':'✅ 특수문자 검색 시 에러 없음 (정상)';return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_SQL_CHECK"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 8,
|
||
|
|
"name": "검색 초기화",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'CLEAR_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(searchInput){ const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set; if(ns)ns.call(searchInput,'');else searchInput.value=''; searchInput.dispatchEvent(new Event('input',{bubbles:true})); searchInput.dispatchEvent(new Event('change',{bubbles:true})); searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true})); await w(1500); R.cleared=true;}else{R.cleared=false;R.warn='검색 입력란 없음';}R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 5000
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 9,
|
||
|
|
"name": "유니코드/이모지 검색",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'FILL_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(!searchInput){R.err='검색 입력란 없음';R.ok=true;return JSON.stringify(R);}searchInput.focus();await w(200);const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set;if(ns)ns.call(searchInput,\"한글テスト🎉中文العربية\");else searchInput.value=\"한글テスト🎉中文العربية\";searchInput.dispatchEvent(new Event('input',{bubbles:true}));searchInput.dispatchEvent(new Event('change',{bubbles:true}));searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true}));await w(2000);R.searchValue=\"한글テスト🎉中文العربية\";R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_UNICODE"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 10,
|
||
|
|
"name": "유니코드 검색 결과 확인",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'SEARCH_UNICODE_CHECK'};await w(2000);const rows=Array.from(document.querySelectorAll('table tbody tr')).filter(r=>r.offsetParent!==null);R.rowCount=rows.length;const hasError=document.querySelector('[class*=\"error\"],[class*=\"Error\"],[role=\"alert\"]');R.hasError=!!hasError;if(hasError){R.errorText=hasError.innerText?.trim().substring(0,80);}const noDataMsg=document.body.innerText.includes('데이터가 없습니다')||document.body.innerText.includes('검색 결과가 없습니다')||document.body.innerText.includes('No data');R.noDataMessage=noDataMsg;R.pageStable=!document.querySelector('.loading,.spinner,[class*=\"skeleton\"]');R.ok=true;R.info=R.hasError?'⚠️ 특수문자 검색 시 에러 발생':'✅ 특수문자 검색 시 에러 없음 (정상)';return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_UNICODE_CHECK"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 11,
|
||
|
|
"name": "검색 초기화",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'CLEAR_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(searchInput){ const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set; if(ns)ns.call(searchInput,'');else searchInput.value=''; searchInput.dispatchEvent(new Event('input',{bubbles:true})); searchInput.dispatchEvent(new Event('change',{bubbles:true})); searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true})); await w(1500); R.cleared=true;}else{R.cleared=false;R.warn='검색 입력란 없음';}R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 5000
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 12,
|
||
|
|
"name": "초장문 검색",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'FILL_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(!searchInput){R.err='검색 입력란 없음';R.ok=true;return JSON.stringify(R);}searchInput.focus();await w(200);const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set;if(ns)ns.call(searchInput,\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\");else searchInput.value=\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\";searchInput.dispatchEvent(new Event('input',{bubbles:true}));searchInput.dispatchEvent(new Event('change',{bubbles:true}));searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true}));await w(2000);R.searchValue=\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\";R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_LONG"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 13,
|
||
|
|
"name": "초장문 검색 결과 확인",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'SEARCH_LONG_CHECK'};await w(2000);const rows=Array.from(document.querySelectorAll('table tbody tr')).filter(r=>r.offsetParent!==null);R.rowCount=rows.length;const hasError=document.querySelector('[class*=\"error\"],[class*=\"Error\"],[role=\"alert\"]');R.hasError=!!hasError;if(hasError){R.errorText=hasError.innerText?.trim().substring(0,80);}const noDataMsg=document.body.innerText.includes('데이터가 없습니다')||document.body.innerText.includes('검색 결과가 없습니다')||document.body.innerText.includes('No data');R.noDataMessage=noDataMsg;R.pageStable=!document.querySelector('.loading,.spinner,[class*=\"skeleton\"]');R.ok=true;R.info=R.hasError?'⚠️ 특수문자 검색 시 에러 발생':'✅ 특수문자 검색 시 에러 없음 (정상)';return JSON.stringify(R);})()",
|
||
|
|
"timeout": 10000,
|
||
|
|
"phase": "SEARCH_LONG_CHECK"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 14,
|
||
|
|
"name": "검색 초기화",
|
||
|
|
"action": "evaluate",
|
||
|
|
"script": "(async()=>{const w=ms=>new Promise(r=>setTimeout(r,ms));const R={phase:'CLEAR_SEARCH'};const searchInput=document.querySelector('input[placeholder*=\"검색\"]')||document.querySelector('input[type=\"search\"]')||document.querySelector('input[role=\"searchbox\"]');if(searchInput){ const ns=Object.getOwnPropertyDescriptor(HTMLInputElement.prototype,'value')?.set; if(ns)ns.call(searchInput,'');else searchInput.value=''; searchInput.dispatchEvent(new Event('input',{bubbles:true})); searchInput.dispatchEvent(new Event('change',{bubbles:true})); searchInput.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',code:'Enter',keyCode:13,bubbles:true})); await w(1500); R.cleared=true;}else{R.cleared=false;R.warn='검색 입력란 없음';}R.ok=true;return JSON.stringify(R);})()",
|
||
|
|
"timeout": 5000
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|