If you rely on disabling web security, you will not be able to run tests on If you cannot accurately know the state of your application then no matter what There are loads of scenario in which a system under test could legitimately behave differently at a given time. If your site embeds an