az9713 Form Validation & Input Testing
Run 27 form test cases across 4 parallel agents covering happy paths, validation, boundary values, and advanced input scenarios.
Setup
URL="${ARGUMENTS:-http://localhost:3000}"
TIMESTAMP=$(date +%Y%m%d-%H%M%S)
OUTDIR="test-results/test-forms/$TIMESTAMP"
mkdir -p "$OUTDIR/screenshots" "$OUTDIR/snapshots" "$OUTDIR/traces"
Before running, verify prerequisites per references/prerequisites.md.
Pre-check: Discover Forms
Before spawning agents, discover forms on the page:
playwright-cli -s=forms-discovery open "$URL"
playwright-cli -s=forms-discovery run-code "async page => {
const forms = await page.locator('form').count();
const inputs = await page.locator('input, select, textarea').count();
return { forms, inputs };
}"
playwright-cli -s=forms-discovery snapshot --filename="$OUTDIR/snapshots/forms-discovery.yaml"
playwright-cli -s=forms-discovery close
If no forms or inputs found, generate a report noting "No forms found" and skip test execution.
Parallel Execution — 4 Subagents
Agent 1: Happy Path (-s=forms-happy)
Tests valid submissions, success states, and form reset.
playwright-cli -s=forms-happy open "$URL"
playwright-cli -s=forms-happy tracing-start
Test Cases:
| TC | Test | How to Check |
|---|---|---|
| TC-F1 | Valid submission with all field types | Fill all fields with valid data, submit, verify success (no errors, redirect or success message) |
| TC-F2 | Form reset/clear button | Fill fields, click reset/clear button, verify all fields emptied |
| TC-F3 | Submit button disabled→enabled→loading states | Check initial disabled state (if applicable), fill required fields, verify enabled, click and check loading state |
| TC-F4 | Success confirmation (message/redirect/toast) | Submit valid form, verify success indicator appears (toast, message, redirect to new URL) |
playwright-cli -s=forms-happy tracing-stop
playwright-cli -s=forms-happy close
Agent 2: Validation (-s=forms-validation)
Tests required fields, invalid formats, and error display.
playwright-cli -s=forms-validation open "$URL"
playwright-cli -s=forms-validation tracing-start
Test Cases:
| TC | Test | How to Check |
|---|---|---|
| TC-F5 | Empty required fields (each individually) | Submit form without filling each required field, verify error appears per field |
| TC-F6 | Invalid email formats | Fill email field with notanemail, @missing, user@, verify validation error |
| TC-F7 | Invalid phone/URL/number formats | Fill fields with invalid formats per type, verify validation |
| TC-F8 | Error message display + clearing on correction | Trigger error, correct the field, verify error clears |
| TC-F9 | Real-time vs on-submit validation | Type invalid input, check if error shows immediately (blur/keyup) or only on submit |
| TC-F10 | Server-side validation messages | Submit form, check for server-returned error messages (not just client-side HTML5 validation) |
playwright-cli -s=forms-validation tracing-stop
playwright-cli -s=forms-validation close
Agent 3: Boundary (-s=forms-boundary)
Tests boundary values, special characters, and edge cases.
playwright-cli -s=forms-boundary open "$URL"
playwright-cli -s=forms-boundary tracing-start
Test Cases:
| TC | Test | How to Check |
|---|---|---|
| TC-F11 | Min/max length enforcement | Fill with text shorter/longer than limits, verify validation |
| TC-F12 | Special characters (<>&"') |
Fill fields with special chars, submit, verify no encoding issues or XSS |
| TC-F13 | Unicode/emoji (日本語 🎉) |
Fill fields with unicode/emoji, submit, verify accepted and displayed correctly |
| TC-F14 | XSS payloads in fields | Fill with <script>alert(1)</script>, <img>, verify sanitized |
| TC-F15 | SQL injection strings | Fill with ' OR 1=1--, '; DROP TABLE users--, verify no error/unexpected behavior |
| TC-F16 | Extremely long input (10000+ chars) | Fill field with 10000+ character string, verify handled (truncated or error) |
| TC-F17 | Whitespace-only input | Fill required fields with only spaces, verify validation catches it |
| TC-F18 | Copy-paste formatted text | Use run-code to paste rich text into fields, verify handled correctly |
| TC-F19 | Multi-step form state persistence | If multi-step: fill step 1, go to step 2, go back, verify step 1 data retained |
playwright-cli -s=forms-boundary tracing-stop
playwright-cli -s=forms-boundary close
Agent 4: Advanced (-s=forms-advanced)
Tests file uploads, autocomplete, autofill, and submission edge cases.
playwright-cli -s=forms-advanced open "$URL"
playwright-cli -s=forms-advanced tracing-start
Test Cases:
| TC | Test | How to Check |
|---|---|---|
| TC-F20 | File upload (valid types) | If file input exists: upload a valid file, verify accepted |
| TC-F21 | File upload (invalid types/oversized) | Upload wrong file type or oversized file, verify rejection message |
| TC-F22 | Drag-and-drop file upload | If drop zone exists: test drag-and-drop via run-code with DataTransfer API |
| TC-F23 | Autocomplete suggestions | If autocomplete field exists: type partial text, verify suggestions appear |
| TC-F24 | Browser autofill compatibility | Check autocomplete attributes on input fields for proper values |
| TC-F25 | Duplicate submission prevention | Click submit button rapidly twice, verify only one submission (button disabled or request deduplicated) |
| TC-F26 | Form submission via Enter key | Focus on input, press Enter, verify form submits |
| TC-F27 | CAPTCHA/honeypot fields present | Check for CAPTCHA elements or hidden honeypot fields (hidden input with tabindex=-1) |
playwright-cli -s=forms-advanced tracing-stop
playwright-cli -s=forms-advanced close
Fix Loop
After execution, if any tests failed, follow the fix loop process in references/fix-loop.md.
Max 3 attempts. Only re-run failed test cases.
Include fix attempt history in the report.
Report Generation
After all 4 agents complete, merge results into $OUTDIR/report.md following the standard report format (see references/report-format.md).
Group results by agent category:
- Happy Path (TC-F1 through TC-F4)
- Validation (TC-F5 through TC-F10)
- Boundary (TC-F11 through TC-F19)
- Advanced (TC-F20 through TC-F27)
Cleanup
playwright-cli -s=forms-discovery close 2>/dev/null
playwright-cli -s=forms-happy close 2>/dev/null
playwright-cli -s=forms-validation close 2>/dev/null
playwright-cli -s=forms-boundary close 2>/dev/null
playwright-cli -s=forms-advanced close 2>/dev/null