From 953cbbd4c4b66cbe409c82800ed26b538cf82474 Mon Sep 17 00:00:00 2001
From: F-WRunTime <freeman.wenzl@runtimeverification.com>
Date: Thu, 9 Apr 2026 09:00:55 -0600
Subject: [PATCH] html/template: add FuzzHTMLTemplateParse and anchor test

Add fuzz harness for Parse/Execute on html/template for Go 1.26 std
fuzzing (KaaS). Includes fixed-seed anchor test for CI stability.

Made-with: Cursor
---
 src/html/template/template_fuzz_test.go | 48 +++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 src/html/template/template_fuzz_test.go

diff --git a/src/html/template/template_fuzz_test.go b/src/html/template/template_fuzz_test.go
new file mode 100644
index 00000000000000..f07c61eadf1c6f
--- /dev/null
+++ b/src/html/template/template_fuzz_test.go
@@ -0,0 +1,48 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package template_test
+
+import (
+	"bytes"
+	"testing"
+
+	"html/template"
+)
+
+func FuzzHTMLTemplateParse(f *testing.F) {
+	f.Add([]byte("{{.}}"))
+	f.Add([]byte("{{if .}}x{{end}}"))
+	f.Add([]byte("{{range .}}{{.}}{{end}}"))
+	f.Add([]byte("{{define \"t\"}}x{{end}}{{template \"t\" .}}"))
+	f.Add([]byte("{{/* comment */}}"))
+
+	f.Fuzz(func(t *testing.T, data []byte) {
+		if len(data) > 1<<20 {
+			t.Skip()
+		}
+		s := string(data)
+		tmpl, err := template.New("fuzz").Parse(s)
+		if err != nil {
+			return
+		}
+		var buf bytes.Buffer
+		_ = tmpl.Execute(&buf, map[string]any{})
+	})
+}
+
+func TestFuzzHTMLTemplateParseAnchor(t *testing.T) {
+	const anchor = "{{.}}"
+	tmpl, err := template.New("anchor").Parse(anchor)
+	if err != nil {
+		t.Fatalf("parse anchor: %v", err)
+	}
+	var buf bytes.Buffer
+	if err := tmpl.Execute(&buf, "ok"); err != nil {
+		t.Fatalf("execute anchor: %v", err)
+	}
+	if got, want := buf.String(), "ok"; got != want {
+		t.Fatalf("anchor output: got %q want %q", got, want)
+	}
+}