Skip to content

html/template: add FuzzHTMLTemplateParse for Go 1.26 fuzzing#2

Open
F-WRunTime wants to merge 1 commit intorelease-branch.go1.26from
stdlib-fuzz-go1.26
Open

html/template: add FuzzHTMLTemplateParse for Go 1.26 fuzzing#2
F-WRunTime wants to merge 1 commit intorelease-branch.go1.26from
stdlib-fuzz-go1.26

Conversation

@F-WRunTime
Copy link
Copy Markdown
Member

Summary

Adds a fuzz harness for html/template on the Go 1.26 line: FuzzHTMLTemplateParse (seeded Parse / Execute with input size cap) and TestFuzzHTMLTemplateParseAnchor for stable CI.

Base branch

This branch is based on release-branch.go1.26-equivalent history (Go 1.26.2). Open this PR against release-branch.go1.26 on the upstream golang/go fork (or a release-branch.go1.26 branch on this repo) so the diff is a single commit on top of 1.26, not master.

KaaS / fuzz runners

When fuzzing via KaaS, use a Go 1.26 image and a golang/go checkout with KAAS_GO_MODULE_ROOT=src and test root relative to src (e.g. ./html/template). The compute template sets GOROOT inside the container for module std.

Scope

  • In scope: src/html/template/template_fuzz_test.go only (no production template package changes).

Add fuzz harness for Parse/Execute on html/template for Go 1.26 std
fuzzing (KaaS). Includes fixed-seed anchor test for CI stability.

Made-with: Cursor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant