Gareth Heyes 探讨 Safari 模糊测试行为
AI 导读
我琢磨着怎么对 Safari 这个有趣的行为做模糊测试。首先，代码检查标记是否被消费，只在未被消费时才递增计数器。第二段代码则把标签包进一个 select 里，看代码是否执行。如果标签被消费并被中和，计数器就是 1。
正文
I thought how can fuzz this interesting Safari behaviour. First the code checks markup is consumed by only incrementing the counter if it is not.The second snippet then wraps the tag in a select and see if the code executes. The counter is 1 if the tag consumes and is neutralized