Skip to main content

Check Reads Still Work

ItemDescription
Full Fuzzer NameCheckReadsStillWorkFuzzer
Log KeyN/A; the fuzzer name and scenario identify the test.
DescriptionSecond-phase fuzzer that runs after all first-phase fuzzers finish for a path and repeats a GET request that succeeded before fuzzing, verifying that fuzzed POST, PUT, or PATCH requests did not store corrupt data that breaks subsequent reads.
Enabled by default?Yes; included in the security and full profiles.
Expected result2XX (or 404/410 if a fuzzer deleted the resource).
Fuzzing logicRepeats the unmodified GET request for a path that also defines write operations (POST, PUT, or PATCH) and had an unmodified 2XX GET earlier in the run.
Conditions when this fuzzer will be skippedWhen the path has no write operations (POST, PUT, or PATCH), or when GET did not succeed with an unmodified request earlier in the run.
HTTP methods that will be skippedAll except GET (POST, PUT, PATCH, DELETE, HEAD, TRACE).
ReportingReports error (Read broken after fuzzing) on 5XX responses, info on 404/410 (resource deleted during fuzzing), and normal 2XX reporting otherwise.