457fd7bdc2e24173f8923b6f9ed12d9f by 2024

Author:2024
Language: eng
Format: epub

Chapter 4 SpeCifiCation

Fuzzing doesn’t have a clear goal in mind, it’s undirected testing of single cases that may or may not be relevant to our testing goals and priorities. We can stab in the dark testing extremely niche edge-cases like the user trying to set their username to all eggplant emojis, or we can test what we know.

To do that, we need to define system behavior. This is another value of writing specifications. Project management can bring order to the chaos and give us a clear expectation of how things should work.

Security testing is an exception in many ways. Security testing can justify getting more exploratory and aggressive, and we’ll talk about it in Chapter 7.

4.4 Refactoring

Refactoring means changing how your code works, but with the same inputs and outputs remaining. Think of it as an in-place replacement.

The risk of course is new code. I’m building emotional stress just thinking about it.

Refactoring is sometimes painful, but it is frequently necessary.

Upgrading software component versions is a good example. Another might be an optimization effort to make code more efficient or secure or simply easier to read. Believe me, it can get messy.

We mentioned earlier the standards you may place on your code, perhaps a stricter level of the language specification, which will require tighter code style and conventions. Style itself may be enforced through automation. Whitespace rules, comment structure, dependency injection requirements, there are a lot of possibilities. These rules don’t necessarily affect the logic of the underlying code, and so should be considered a secondary priority. To that end, when your team commits code to “make it pretty,” those changes should be committed separately from changes to 51

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.