handlebars-lang / handlebars-lang/handlebars.js
Add automated fuzzing
Open
help wanted
- Dominant language
- JavaScript
- Stars
- 18.7k
- Forks
- 2.1k
- PR merge metrics
- No merged PRs in 30d
Description
We should do some automated fuzzing to improve/maintain security.
### Tools
* https://github.com/CodeIntelligenceTesting/jazzer.js
* https://gitlab.com/gitlab-org/security-products/analyzers/fuzzers/jsfuzz
Contributor guide
Research direction
Start by reviewing the repository's existing JavaScript test and automation setup, then compare the listed tools, jazzer.js and jsfuzz, against it. Define which inputs and entry points should be fuzzed and how runs will be automated; done means a documented, repeatable fuzzing workflow is integrated and produces actionable failures.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security, testing-qa
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100