jedarden/pdftract

Fork 0

Commit graph

Author	SHA1	Message	Date
jedarden	bc9e6f8e57	test(bf-1b7od): add profile_yaml fuzz target and verify cargo-fuzz configuration - Create fuzz/fuzz_targets/profile_yaml.rs to test YAML parsing - Register profile_yaml target in fuzz/Cargo.toml - Verify cargo-fuzz 0.13.1 is installed and working - All 7 fuzz targets now operational per plan requirement (line 3236) Closes bf-1b7od. Verification: notes/bf-1b7od.md	2026-07-06 09:38:59 -04:00
jedarden	eb24e6ddbe	test(bf-4zc9i): implement TH-05-ssrf-block.rs MCP SSRF tests - Add mcp_ssrf_tests module to th_05_ssrf_block.rs - Test 5 SSRF payload patterns: loopback, 0.0.0.0, AWS metadata, RFC 1918, IPv6 loopback - Verify MCP server rejects SSRF-prone URLs with stub responses - Confirm no network connections attempted (response < 500ms) - Ensure zero orphaned pdftract mcp processes after tests - All 17 tests pass in 0.70s Acceptance criteria: - ✅ cargo nextest run --test th_05_ssrf_block passes in < 30s - ✅ All 5 SSRF URL patterns rejected - ✅ No network connections attempted - ✅ Zero orphaned processes Closes bf-4zc9i	2026-07-06 09:02:34 -04:00

Author

SHA1

Message

Date

jedarden

bc9e6f8e57

test(bf-1b7od): add profile_yaml fuzz target and verify cargo-fuzz configuration

- Create fuzz/fuzz_targets/profile_yaml.rs to test YAML parsing
- Register profile_yaml target in fuzz/Cargo.toml
- Verify cargo-fuzz 0.13.1 is installed and working
- All 7 fuzz targets now operational per plan requirement (line 3236)

Closes bf-1b7od. Verification: notes/bf-1b7od.md

2026-07-06 09:38:59 -04:00

jedarden

eb24e6ddbe

test(bf-4zc9i): implement TH-05-ssrf-block.rs MCP SSRF tests

- Add mcp_ssrf_tests module to th_05_ssrf_block.rs
- Test 5 SSRF payload patterns: loopback, 0.0.0.0, AWS metadata, RFC 1918, IPv6 loopback
- Verify MCP server rejects SSRF-prone URLs with stub responses
- Confirm no network connections attempted (response < 500ms)
- Ensure zero orphaned pdftract mcp processes after tests
- All 17 tests pass in 0.70s

Acceptance criteria:
- ✅ cargo nextest run --test th_05_ssrf_block passes in < 30s
- ✅ All 5 SSRF URL patterns rejected
- ✅ No network connections attempted
- ✅ Zero orphaned processes

Closes bf-4zc9i

2026-07-06 09:02:34 -04:00

2 commits