thrillwiki_django_no_react/memory-bank/security/test-cases.md

Security Test Case Template

Authentication Tests

Scenario: Lock override with expired session
  Given an active branch lock
  When session expires during override attempt
  Then system should reject with 401 Unauthorized
  And log security event "LOCK_OVERRIDE_FAILURE"

Injection Prevention

Scenario: XSS in change comments
  When submitting comment with <script>alert(1)</script>
  Then response should sanitize to "&amp;lt;script&amp;gt;alert(1)&amp;lt;/script&amp;gt;"
  And store original input in quarantine

Data Integrity

Scenario: Unauthorized diff modification
  Given approved version comparison
  When altering historical diff metadata
  Then checksum validation should fail
  And trigger auto-rollback procedure

Workflow Security

Scenario: Approval state bypass
  Given pending approval workflow
  When attempting direct state transition
  Then enforce state machine rules
  And log "ILLEGAL_STATE_CHANGE" event

Monitoring Tests

Scenario: Abnormal approval patterns
  Given 10 rapid approvals from same IP
  When monitoring system detects anomaly
  Then freeze approval process
  And notify security team