From 7313e0168d1044b77ff262d398ae5669eb64b130 Mon Sep 17 00:00:00 2001 From: Alex Hultman Date: Sat, 29 Feb 2020 01:25:32 +0100 Subject: [PATCH] Add link to fuzzing bug list --- fuzzing/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fuzzing/README.md b/fuzzing/README.md index 8ac2d8f..2c8e7d7 100644 --- a/fuzzing/README.md +++ b/fuzzing/README.md @@ -25,6 +25,8 @@ A secure web server must be capable of receiving mass amount of malicious input No defects or issues are left unfixed, covered up or otherwise neglected. In fact we **cannot** cover up security issues as OSS-Fuzz automatically and publicly reports security issues as they happen. +Here is the list of public issues (issues are kept private for 90 days or until fixed): https://bugs.chromium.org/p/oss-fuzz/issues/list?q=label%3AProj-uwebsockets&can=1 + Currently we are at ~90% total fuzz coverage and OSS-Fuzz is reporting **zero** issues whatsoever. The goal is to approach 100% total coverage. ### Security awards