oss-fuzz/projects/json-sanitizer/project.yaml

homepage: "https://github.com/OWASP/json-sanitizer"
language: jvm
primary_contact: "mikesamuel@gmail.com"
fuzzing_engines:
  - libfuzzer
main_repo: "https://github.com/OWASP/json-sanitizer"
sanitizers:
  - address
vendor_ccs:
  - "meumertzheim@code-intelligence.com"
  - "norbert.schneider@code-intelligence.com"
  - "hlin@code-intelligence.com"
  - "bug-disclosure@code-intelligence.com"
[jazzer][json-sanitizer] Add json-sanitizer as the first JVM project (#5186) json-sanitizer uses Maven and has no native dependencies. The build file is loosely divided into two parts. The first part is project-specific, the second one can serve as a template for JVM fuzz targets without native dependencies. The following three fuzz targets are added to OSS-Fuzz and can later be moved into the json-sanitizer tree: * DenylistFuzzer verifies that the output of json-sanitizer never contains certain substrings that can lead to HTML or XML injections. * IdempotenceFuzzer verifies that json-sanitizer is idempotent. * ValidJsonFuzzer verifies that the output of json-sanitizer is valid JSON by passing it into gson. 2021-02-16 18:13:29 +00:00			`homepage: "https://github.com/OWASP/json-sanitizer"`
			`language: jvm`
			`primary_contact: "mikesamuel@gmail.com"`
			`fuzzing_engines:`
			`- libfuzzer`
			`main_repo: "https://github.com/OWASP/json-sanitizer"`
			`sanitizers:`
			`- address`
Code Intelligence Java projects: Add bug-disclosure email to project.yaml. (#8987) Add bug-disclosure email to all java projects' project.yaml. 2022-11-16 06:48:01 +00:00			`vendor_ccs:`
			`- "meumertzheim@code-intelligence.com"`
			`- "norbert.schneider@code-intelligence.com"`
			`- "hlin@code-intelligence.com"`
			`- "bug-disclosure@code-intelligence.com"`