Abstract: In order to facilitate users to find resources of interest, many Web applications may provide search function. If there is a failure in the search function, the Web application will run abnormally and even security problems will be caused. So the search function needs to be fully tested. This paper uses the method of combinatorial testing to generate test cases to test the search function of Web application, where each test case is a string of special characters. For test cases that can cause server errors, this paper uses the method of fault location based on combinatorial testing to find the combinations of characters that can cause server errors. This paper tests 96 websites, including schools, governments and institutions, and it is found that 23 of these sites will meet a server error when searching for some special combinations of characters. The experimental result of fault location indicates that 56% of server errors are caused by the combinations of “%” “<” “’” “\” and other characters.

Key words: Web testing, combinatorial testing, fault location

摘要： 为了方便用户查询感兴趣的资源，许多Web应用程序会提供搜索功能。如果搜索功能存在故障，将会导致Web应用程序的功能异常，甚至会引发安全问题，因而需要对其进行充分的测试。可以使用组合测试的方法生成测试用例测试Web应用程序的搜索功能，其中每一个测试用例是由特殊字符组成的字符串。对于引起系统错误的测试用例，使用组合测试错误定位的方法找到系统错误是由哪些字符组合引起的。使用该方法对学校、政府和事业单位的96个网站进行了测试，发现其中23个网站在搜索某些特殊字符组合时，会引起服务器错误响应。错误定位结果表明，56%的服务器错误响应是由“%”“<”“’”“\”和其他字符的组合引起的。

关键词: Web测试, 组合测试, 错误定位