Security testing
Like any other application, portal applications should be tested for penetration and other malicious attacks. The following are some of the items to be looked at via a penetration test strategy and robust exploit framework:
XSS cross scripting vulnerabilities at themes, WCM, portlet, JavaScript, and JSP levels
SQL injection and other SQL-related vulnerabilities
Basic authentication, impersonation and Trust Association Interceptor (TAI) hijacking
Denial of service via remote requests
XMLAccess vulnerabilities
DNS poisoning
Man-in-the-middle attack
Attack vectors for administrative or any other group or user role
Ajax, SOAP, REST, and web services vulnerabilities
