XSS#NoXSSVulnerabilityInRecycleBin - Investigate the failure

• Type: Testing
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 7.4.13 DXP U50, Master
• Fix Version/s: None
• Component/s: Application Security
• Labels:
  • QA-AUTOMATION
  • rca_completed
• Story Points: 2
• Epic Link: Stabilise Weekly AppSec test results
• Testing Type: Analysis
• QA Test Name:
  • LocalFile.XSS#NoXSSVulnerabilityInRecycleBin
• QA Test Score: 4

Testray
Jenkins

Error:

[exec] com.liferay.poshi.runner.PoshiRunner > test[LocalFile.XSS#NoXSSVulnerabilityInRecycleBin] STANDARD_ERROR
     [exec]     java.lang.Exception: Pattern "<script>alert(123);</script>" does not exists in the HTML source
     [exec]     /opt/dev/projects/github/liferay-portal/portal-web/test/functional/com/liferay/portalweb/tests/coreinfrastructure/security/xss/XSS.testcase[NoXSSVulnerabilityInRecycleBin]:423
     [exec]     	at com.liferay.poshi.runner.selenium.BaseWebDriverImpl.assertHTMLSourceTextPresent(BaseWebDriverImpl.java:408)
     [exec]     	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     [exec]     	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
     [exec]     	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
     [exec]     	at java.lang.reflect.Method.invoke(Method.java:498)
     [exec]     	at com.liferay.poshi.runner.PoshiRunnerExecutor.lambda$invokeLiferaySeleniumMethod$0(PoshiRunnerExecutor.java:1180)
     [exec]     	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
     [exec]     	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
     [exec]     	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
     [exec]     	at java.lang.Thread.run(Thread.java:745)