Skip to content

Instantly share code, notes, and snippets.

@Nick89QA

Nick89QA/Checklist.md

Forked from kiurious/qa.md
Last active January 13, 2026 07:51
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Nick89QA/39ad35f5b2bdf38c4bc5e75a8c1012e1 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Nick89QA/39ad35f5b2bdf38c4bc5e75a8c1012e1 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Checklist.md

Comprehensive Web Application QA Checklist

Table of Contents

Introduction

This document provides a comprehensive quality assurance checklist for web applications. While each application is unique, this checklist covers common components and functionality that should be thoroughly tested to ensure a high-quality product.

Pre-Testing Preparation

  • Requirements Review

    • All functional requirements documented and understood
    • All non-functional requirements documented and understood
    • Acceptance criteria clearly defined

  • Test Environment Setup

    • Test environment matches production configuration
    • Test data prepared and loaded
    • Required test accounts created
    • Third-party service mocks/stubs configured (if applicable)
    • Test tools and frameworks installed and configured

  • Test Planning

    • Test cases created and reviewed
    • Test data prepared for each scenario
    • Prioritization of test cases completed
    • Test schedule created
    • Resources allocated

Functional Testing

Navigation & Routing

  • Main Navigation

    • All navigation links lead to correct pages
    • Active states correctly displayed
    • Dropdown menus function properly
    • Mobile navigation (hamburger menu) works correctly
    • Breadcrumbs display correctly and are functional

  • URL Routing

    • Direct URL access works for all pages
    • URL parameters handled correctly
    • Query string parameters processed correctly
    • Route guards function properly (restricted pages)
    • 404 page displays for invalid routes
    • URL redirects function as expected
    • Back/forward browser buttons work correctly
    • Bookmarking pages works as expected

Form Functionality

  • Input Validation

    • Required fields validation works
    • Email format validation works
    • Number/currency format validation works
    • Date format validation works
    • Custom validation rules function correctly
    • Validation error messages are clear and properly positioned
    • Max length constraints enforced
    • Min length constraints enforced
    • Password strength requirements enforced

  • Form Submission

    • Successful submission stores data correctly
    • Submission with invalid data blocked with appropriate messages
    • Duplicate submission prevention works (double-click protection)
    • Form maintains state after failed submission
    • Submit button disabled during processing
    • Loading indicator displays during submission
    • Success messages display after successful submission
    • Redirects after submission function correctly
    • Cancel buttons function correctly
    • Form reset functions correctly

  • File Upload/Download

    • File uploads work for all supported file types
    • File size limits enforced
    • Multiple file uploads work if applicable
    • Progress indicators function during upload/download
    • Uploaded files can be viewed/downloaded
    • File preview functionality works if applicable
    • Delete/remove uploaded file functionality works

Data Display & Interaction

  • Tables & Lists

    • Data loads and displays correctly
    • Pagination functions correctly
    • Sorting works for all sortable columns
    • Filtering works correctly
    • Search functionality works as expected
    • Empty state displays properly
    • Loading state displays properly
    • Row/item selection works correctly
    • Bulk actions function correctly
    • Table responsiveness on different screen sizes

  • CRUD Operations

    • Create functionality works correctly
    • Read functionality displays accurate data
    • Update functionality saves changes correctly
    • Delete functionality removes data with confirmation
    • Batch/bulk operations function correctly
    • Optimistic UI updates work correctly if applicable

Search & Filtering

  • Search Functionality

    • Basic search returns relevant results
    • Advanced search options function correctly
    • Search filters work as expected
    • Empty search results handled properly
    • Search history/recent searches function if applicable
    • Typeahead/autocomplete functions correctly if implemented
    • Search performance is acceptable

  • Filtering & Sorting

    • All filter options work correctly
    • Multiple filters can be applied simultaneously
    • Filter reset/clear functions correctly
    • Sorting works in ascending and descending order
    • Multi-level sorting functions correctly if applicable
    • Selected filters visibly indicated to user

Notifications & Alerts

  • System Notifications

    • Success messages display when operations complete
    • Error messages display when operations fail
    • Warning messages display when appropriate
    • Notification timeout/dismiss functions work
    • Notification positioning is consistent and appropriate
    • Multiple notifications stack/queue correctly

  • In-App Notifications

    • Notification bell/icon updates with new notifications
    • Notification count displays correctly
    • Notifications can be marked as read
    • Notification center displays history correctly
    • Clicking notifications navigates to correct location

User Interface (UI) Testing

Layout & Responsiveness

  • Desktop Layout

    • Layout renders correctly on standard desktop resolutions
    • No horizontal scrolling on standard screen sizes
    • Content alignment is consistent
    • Spacing between elements is consistent
    • Grid systems align properly

  • Tablet Layout

    • Layout adjusts appropriately for tablet devices
    • Touch targets are adequately sized
    • No layout overflow issues
    • Content prioritization appropriate for medium screens

  • Mobile Layout

    • Layout adjusts properly for mobile screens
    • No horizontal scrolling on mobile
    • Touch targets adequately sized for mobile
    • Content prioritization appropriate for small screens
    • Mobile-specific UI elements function (drawer menus, etc.)

  • Responsive Breakpoints

    • Layout transitions smoothly between breakpoints
    • No content clipping at transition points
    • No sudden layout shifts between sizes

Visual Elements

  • Typography

    • Font family renders correctly
    • Font sizes are appropriate and consistent
    • Font weights display correctly
    • Text alignment is consistent
    • Line height is appropriate
    • No text overflow issues
    • No orphaned text or widows

  • Colors & Contrast

    • Brand colors used consistently
    • Color contrast meets accessibility standards
    • Color usage is consistent for similar elements
    • Color states (hover, active, disabled) function correctly
    • Color blindness considerations tested

  • Images & Media

    • Images load correctly
    • Images are appropriately sized
    • Images are not distorted
    • Alt text exists for images
    • Responsive images work correctly
    • Image placeholders display during loading
    • Video playback works if applicable
    • Audio playback works if applicable

  • Icons & Graphics

    • Icons render clearly at all sizes
    • Icon usage is consistent
    • SVG elements scale correctly
    • Icon states (hover, active, disabled) function correctly

  • Component Visual Consistency

    • Buttons have consistent styling
    • Form inputs have consistent styling
    • Cards/panels have consistent styling
    • Modals/dialogs have consistent styling
    • Consistent use of shadows and elevation
    • Animation and transitions are consistent

User Experience (UX) Testing

User Flows

  • Critical Path Testing

    • Main user journeys can be completed without errors
    • Steps in each flow follow logical sequence
    • Number of steps is appropriate and not excessive
    • Progress indication provided for multi-step flows
    • No dead-ends in user flows

  • Feedback & Guidance

    • Users receive feedback for all important actions
    • Error messages are helpful and suggest corrections
    • Success messages confirm completed actions
    • Loading states indicate processing
    • Tooltips provide helpful information when needed
    • Help documentation accessible when needed

  • Interaction Design

    • Interactive elements are clearly identifiable
    • Hover/focus states provide clear feedback
    • Click/tap targets are appropriately sized
    • Scrolling behavior is smooth and expected
    • Drag and drop interactions work if applicable
    • Custom gestures function correctly if implemented

States Handling

  • Loading States

    • Loading indicators display during data fetching
    • Loading states are consistent across the application
    • Skeleton screens display where appropriate
    • Loading state prevents premature user interaction

  • Empty States

    • Empty lists/tables show helpful messages
    • First-time user experience guidance provided
    • Empty search results provide guidance
    • Zero data states include helpful next actions

  • Error States

    • Error pages (404, 500, etc.) display correctly
    • Error recovery options provided
    • Form validation errors clear on correction
    • Network error handling works appropriately
    • Offline state handled appropriately

Authentication & Authorization Testing

Registration Process

  • Account Creation

    • Registration form validates all inputs correctly
    • Password requirements clearly communicated
    • Email verification process works
    • Account creation success/failure handled properly
    • Duplicate account detection works

  • Social Authentication

    • All social login options function (Google, Facebook, etc.)
    • Account linking with social profiles works
    • Error handling for failed social authentication
    • Required permissions clearly communicated

Login Process

  • Standard Login

    • Username/email and password authentication works
    • Error messages for invalid credentials are secure (not too specific)
    • Remember me functionality works correctly
    • Password reset functionality works
    • Account lockout after failed attempts functions correctly

  • Multi-Factor Authentication

    • MFA setup process works
    • MFA verification works during login
    • Backup codes/recovery options work
    • MFA bypass for trusted devices works if applicable

Authorization & Permissions

  • Role-Based Access

    • User roles assigned correctly
    • Access to features based on roles works
    • UI elements hidden/disabled based on permissions
    • Direct URL access blocked for unauthorized resources

  • Session Management

    • Session timeout functions correctly
    • Concurrent session handling works if applicable
    • Session renewal works without disrupting user
    • Logout clears session data correctly
    • Remember me extends session appropriately

Database Testing

  • CRUD Operations

    • Data is correctly inserted into the database
    • Data is correctly read from the database
    • Data is correctly updated in the database
    • Data is correctly deleted from the database
    • Transactions handle multiple operations correctly

  • Data Integrity

    • Primary key constraints enforced
    • Foreign key constraints enforced
    • Unique constraints enforced
    • Null constraints enforced
    • Default values applied correctly

  • Data Validation

    • Server-side validation prevents invalid data
    • Data type validation enforced
    • Business rule validation enforced
    • Boundary value handling tested

  • Query Performance

    • Database queries execute within acceptable time
    • Indexes improve query performance
    • Large result sets handled appropriately (pagination)
    • Connection pooling configured correctly

  • Database Security

    • SQL injection prevention tested
    • Database access limited to necessary operations
    • Sensitive data encrypted in database
    • Database credentials securely managed

Performance Testing

  • Page Load Performance

    • Initial page load time acceptable
    • Time to interactive acceptable
    • First contentful paint acceptable
    • Largest contentful paint acceptable

  • Runtime Performance

    • Scrolling is smooth without jank
    • Animations run at acceptable frame rate
    • UI remains responsive during background operations
    • Memory usage remains stable over time

  • Network Performance

    • API response times acceptable
    • Payload sizes optimized
    • Resources loaded in priority order
    • Caching implemented correctly
    • Lazy loading implemented for appropriate resources

  • Resource Optimization

    • Images appropriately sized and compressed
    • CSS/JS bundled and minified
    • Tree-shaking implemented for JS
    • Code splitting implemented if applicable
    • Font loading optimized

  • Load Testing

    • Application functions under expected user load
    • Performance degrades gracefully under heavy load
    • Recovery after heavy load is automatic
    • No memory leaks under sustained use

Security Testing

  • Authentication Security

    • Passwords stored securely (hashed, not encrypted)
    • Failed login attempts limited (rate limiting)
    • Session IDs securely generated and managed
    • Password strength requirements enforced
    • Password reset process secure

  • Data Protection

    • Sensitive data encrypted in transit (HTTPS)
    • Sensitive data encrypted at rest
    • PII handled according to regulations (GDPR, CCPA)
    • Data minimization practiced (only necessary data collected)
    • Data retention policies implemented

  • Input Validation & Sanitization

    • All user inputs validated and sanitized
    • XSS prevention implemented
    • CSRF protection implemented
    • Content Security Policy implemented
    • File upload validation and scanning

  • Authorization Checks

    • Vertical access control (role-based) verified
    • Horizontal access control (user's own data) verified
    • API endpoints protected appropriately
    • Insecure direct object references prevented
    • Forced browsing attempts blocked

  • Security Headers & Configuration

    • Appropriate security headers set
    • Cookies secured (HttpOnly, Secure, SameSite)
    • Error messages don't leak sensitive information
    • Debug/diagnostic endpoints not accessible in production
    • Server information not exposed

Localization & Internationalization

  • Translation Completeness

    • All UI text elements translated for supported languages
    • Dynamic content can be translated
    • Placeholders in translations work correctly
    • Translation fallbacks work if missing translations

  • Locale-Specific Formatting

    • Dates displayed in locale-appropriate format
    • Times displayed in locale-appropriate format
    • Numbers formatted according to locale
    • Currency displayed with appropriate symbols

  • RTL Language Support (if applicable)

    • UI layout mirrors correctly for RTL languages
    • Text alignment correct for RTL
    • Icons that indicate direction are flipped
    • Scrolling behavior appropriate for RTL

  • Character Encoding

    • Special characters display correctly
    • Non-Latin characters display correctly
    • Input fields accept international characters
    • Search works with international characters

  • Cultural Considerations

    • Images and icons are culturally appropriate
    • Colors used appropriately for different cultures
    • Dates and times adjust for local holidays/observances if applicable

Accessibility Testing

  • Screen Reader Compatibility

    • All content accessible via screen reader
    • Proper ARIA roles implemented
    • Image alt text provided
    • Form elements properly labeled
    • Reading order logical

  • Keyboard Navigation

    • All functionality accessible via keyboard
    • Focus states clearly visible
    • Focus order is logical
    • No keyboard traps
    • Shortcuts don't conflict with assistive technology

  • Visual Accessibility

    • Color contrast meets WCAG standards
    • Text resizing doesn't break layout
    • Site usable with high contrast mode
    • No critical information conveyed by color alone
    • Animations can be paused/stopped

  • Semantic HTML

    • Proper heading hierarchy implemented
    • Landmark regions used appropriately
    • Lists used for list content
    • Tables used for tabular data with headers
    • Semantic elements used instead of generic divs where appropriate

  • Compliance Testing

    • WCAG 2.1 AA compliance verified
    • Automated accessibility tests pass
    • Manual accessibility checklist completed

Cross-Browser & Device Testing

  • Browser Compatibility

    • Application functions in Chrome
    • Application functions in Firefox
    • Application functions in Safari
    • Application functions in Edge
    • Graceful degradation for older browsers if supported

  • Mobile Devices

    • Application functions on iOS devices
    • Application functions on Android devices
    • Touch interactions work correctly
    • Viewport settings correct
    • No content overflow issues

  • Tablet Devices

    • Application functions on iPad
    • Application functions on Android tablets
    • Layout appropriate for tablet screen size
    • Touch interactions work correctly

  • Different Screen Sizes

    • Application functions on small screens (320px+)
    • Application functions on medium screens
    • Application functions on large screens
    • Application functions on extra-large screens
    • No layout issues at any standard breakpoint

  • Device-Specific Features

    • Camera access works if applicable
    • Geolocation works if applicable
    • Push notifications work if applicable
    • Offline functionality works if applicable
    • Device orientation handling works if applicable

API & Integration Testing

  • API Endpoints

    • All endpoints return correct response codes
    • Response payloads match expected schema
    • Error responses provide useful information
    • Rate limiting functions correctly if implemented
    • API versioning handled correctly if applicable

  • Authentication & Authorization

    • API authentication works correctly
    • Authorization checks prevent unauthorized access
    • Token refresh mechanism works
    • API keys/secrets securely handled

  • External Service Integration

    • Third-party API integrations function correctly
    • Payment gateway integration works if applicable
    • Social media integrations function if applicable
    • Maps/geolocation services work if applicable
    • Analytics tracking works correctly

  • Error Handling

    • API errors handled gracefully
    • Retry mechanism works for transient errors
    • Fallback procedures work when services unavailable
    • Error logging provides adequate information

  • Data Consistency

    • Data sent to APIs is correctly formatted
    • Data received from APIs is correctly processed
    • Data synchronization works if applicable
    • Race conditions handled appropriately

Regression Testing

  • Automated Regression Suite

    • Automated tests cover critical functionality
    • Regression tests pass after new changes
    • Visual regression tests pass if implemented
    • Integration tests verify system works as a whole

  • Critical Feature Verification

    • Core business functionality works after changes
    • Authentication and authorization still function
    • Critical user journeys can be completed
    • Payment processing works if applicable

  • Performance Regression

    • Page load times remain acceptable
    • API response times remain acceptable
    • Resource usage hasn't increased significantly
    • Animation performance remains smooth

  • Visual Regression

    • UI appearance consistent after changes
    • No unintended style changes
    • Layout still functions on all screen sizes
    • Print layouts still function if applicable

Documentation & Reporting

  • Test Documentation

    • Test cases documented
    • Manual test steps documented
    • Test data documented
    • Test environment configuration documented

  • Bug Reporting

    • Bug reports include steps to reproduce
    • Bug reports include expected vs. actual behavior
    • Bug reports include environment information
    • Bug reports include severity and priority
    • Screenshots or videos attached when relevant

  • Test Coverage Reporting

    • Features tested documented
    • Test coverage metrics collected
    • Areas not tested documented with rationale
    • Risk assessment for untested areas provided

  • Test Results Reporting

    • Test summary report prepared
    • Pass/fail statistics compiled
    • Critical issues highlighted
    • Recommendations provided
    • Go/no-go decision supported with data

Appendix: QA Tools & Resources

Recommended Testing Tools

  • Automated Testing Tools

    • Selenium WebDriver
    • Cypress
    • Playwright
    • Jest
    • Testing Library

  • Performance Testing Tools

    • Lighthouse
    • WebPageTest
    • JMeter
    • LoadRunner

  • Accessibility Testing Tools

    • axe DevTools
    • WAVE
    • Lighthouse Accessibility Audit
    • Screen readers (NVDA, VoiceOver)

  • Security Testing Tools

    • OWASP ZAP
    • Burp Suite
    • Nmap
    • SonarQube

  • Visual Testing Tools

    • Percy
    • Applitools
    • BackstopJS

  • API Testing Tools

    • Postman
    • Insomnia
    • REST Assured
    • SoapUI

Testing Best Practices

  • Implement continuous testing in CI/CD pipeline
  • Prioritize tests based on risk and user impact
  • Use a combination of automated and manual testing
  • Update test cases when requirements change
  • Review and update test data regularly
  • Perform exploratory testing in addition to scripted tests
  • Rotate testers to get fresh perspectives
  • Involve cross-functional team members in testing
  • Test early and often throughout development cycle
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment