Rooba
/
oss-fuzz
mirror of https://github.com/google/oss-fuzz.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity
oss-fuzz/projects/json-sanitizer/project.yaml

11 lines
265 B
YAML
Raw Normal View History

[jazzer][json-sanitizer] Add json-sanitizer as the first JVM project (#5186) json-sanitizer uses Maven and has no native dependencies. The build file is loosely divided into two parts. The first part is project-specific, the second one can serve as a template for JVM fuzz targets without native dependencies. The following three fuzz targets are added to OSS-Fuzz and can later be moved into the json-sanitizer tree: * DenylistFuzzer verifies that the output of json-sanitizer never contains certain substrings that can lead to HTML or XML injections. * IdempotenceFuzzer verifies that json-sanitizer is idempotent. * ValidJsonFuzzer verifies that the output of json-sanitizer is valid JSON by passing it into gson.
2021-02-16 18:13:29 +00:00
homepage: "https://github.com/OWASP/json-sanitizer"
language: jvm
primary_contact: "mikesamuel@gmail.com"
auto_ccs:
- "meumertzheim@code-intelligence.com"
fuzzing_engines:
- libfuzzer
main_repo: "https://github.com/OWASP/json-sanitizer"
sanitizers:
- address