关键词: Web应用程序检测, 异步请求时序, 交错图

Abstract: AJAX (asynchronous JavaScript and XML) has been widely adopted in Web applications, which achieves asynchronous interaction. In an AJAX process, improper code design and network delays may lead to data errors and asynchronous faults. Static and dynamic approaches have been proposed to detect such faults, however a fact is ignored, i.e., the return data of an asynchronous operation may contain events that can further trigger asynchronous request and result in asynchronous faults. In this paper, based on dynamic approaches, the complete return data of asynchronous request from the server side is acquired via the URL parameter whose return data contain event operation, in which the events are abstracted. The possible asynchronous faults are analyzed between two return event operations or between one of them and original asynchronous request, which is defined as the asynchronous request sequence problems. Then the asynchronous request interleaving graph is constituted to detect asynchronous request errors by the connected relationship of the graph. Based on the proposed approach, a tool prototype is established for automated testing asynchronous request in Web applications. Five case applications and five open source Web applications are selected for experiments. By controlling the verify network conditions, the results show that the proposed approach is effective for detecting the asynchronous request faults. Moreover, compared with previous methods, it even can detect more Web application errors.

Key words: Web application detection, asynchronous request sequence, interleaving graph