Yelp / fuzz-lightyear

A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos engineering testing and stateful, Swagger fuzzing.
Other
205 stars 25 forks source link

add --disable-unicode flag #2

Closed domanchi closed 4 years ago

domanchi commented 5 years ago

Summary

Thanks to hypothesis fuzzing, string fuzzing randomly generates unicode strings too. This may be good if you want to test whether the application handles unicode gracefully, however, this option should be able to be disabled, so that only proper ascii strings are fuzzed.

After all, if you know that your application does not handle unicode strings gracefully, tests should not attempt to try unicode strings. This will just lead to more noise than necessary.