microsoft / restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
MIT License
2.59k stars 296 forks source link

enable specifying valid codes for a request #682

Open marina-p opened 1 year ago

marina-p commented 1 year ago

Description

Today, coverage is counted by whether the request received a "valid" code (defined by RESTler as 200-level code). However, users may want to define their own valid codes for particular requests (either a subset of 200-level codes or in some cases expecting only 400-level codes to be returned). RESTler should allow per-resource settings for valid codes that will be used for coverage purposes only (not modifying RESTler's main algorithm from the default definitions).

A new settings block different from per-resource settings needs to be added as part of this work (also, see related issue 682).