OSSFuzz Integration about django-compressor HOT 4 CLOSED

Hi @capuanob — thanks for the interest!

Could you open a branch with what you have in mind?

It sounds interesting. I don't know much about the OSS Fuzz project, but IIRC @apollo13 was involved in discussions for tests on Django.

from django-compressor.

@carltongibson Hi Carlton,

I have yet to implement anything, as I wanted to make sure I had permission to do before getting started! I would submit a fuzzing harness, a CIfuzz.yml to integrate PRs into fuzz-testing, and a build.sh to build a Dockerfile for fuzzing.

Does this sound like something you would support me pursuing? All I would need from you is the eventual PR reviews!

from django-compressor.

I wonder what benefit django-compressor has from OSSFuzz integration. django-compressor runs "offline" on (mostly?) trusted data. I'd imagine that there are other libraries handling userinput (markdown stuff etc?) would benefit way more from OSSFuzz integration. That should not hold you off but the cost/benefit ratio seems rather low to me personally.

from django-compressor.

Thanks @apollo13 — good insight.

@capuanob I'll close based on that, but happy if you want to follow up.

🎄

from django-compressor.