Faker is a well-known and powerful library for generating fake data. It provides a wide range of random but realistic-looking data generators. However, testing with purely random data can be risky, which is why property-based testing is valuable. While using fake but realistic data in tests can be beneficial, it is essential to integrate it properly. fast-check offers a robust solution for this integration.
On the 28th of September 2023, a critical security vulnerability affecting all versions of Zod was reported under the identifier CVE-2023-4316. Zod is known as "TypeScript-first schema validation with static type inference".
This post proposes an approach to anticipate and prevent such vulnerabilities. by leveraging fast-check and its ecosystem.
Prototype pollution is among the most frequent sources of Common Vulnerabilities and Exposures - aka CVE - in the JavaScript ecosystem. As a result, detecting them early has always been a key challenge for fast-check.
In this post, you will learn what they are and how you can find them easily using fast-check.