Element Omission

Applies to ReadyAPI 3.9, last modified on July 28, 2021

Element omission is opposite to element duplication. In both cases, you are trying to cause the service to reveal sensitive information with unexpected requests.

To create a request of this type, omit some elements from the body:

<login>
    <username> smartbear</username>
</login>

The response reveals an element you need to gain access to the service.

<loginresponse>
    <error>element password is expected.</error>
</loginresponse>

Also, try the following:

  • Replace the username with a password:

    <login>
        <password>ReaDyAP1R0ck5</password>
    </login>

  • Remove all elements:

    <login>
    </login>

See Also

Sample Login Tests

Highlight search results