Testcase for Cookies

01. Verify application response while Browser - Privacy is set to "Do Not Accept Cookies"

02. Verify application response while Browser - Privacy is set to "Warn Me Before Accepting Cookies"

03. Verify that application displays proper message for enabling the cookies if attempt of web server to set cookies fails.

04. Verify that Page functions if cookies are selectively rejected.

05. Verify that cookie is encrypted.

06. Verify that sensitive information like username, passwords, credit card numbers are not stored in encrypted and non encrypted cookies.

07. Verify that cookie expiry date is relevant (according to requirements).

08. Verify that domain attribute of cookie matches with domain name of the URL from where the cookie is fetched (regular match or tail match).

09. Verify that path name attribute of cookie matches path name component of URL.

10. Verify that cookie decoding does not reveal any sensitive information.

11. Verify application response while permanent cookies are modified.

12. Try altering the name of permanent cookie.

13. Try altering session id value from data field of cookie.

14. Verify that manipulating the session id does not gain access to another user’s session.

15. Verify application response while login names, session/user ids, signatures are modified.

16. Verify application response after sending two cookies under the same name.

17. Verify application response after sending cookies that are too large in size.

18. Verify that cookie size does not exceed 4 kb.

19. Verify that total number of cookies does not exceed 20 cookies per domain.

20. Verify that total number of cookies does not exceed 300.