HTTP/2 301
content-security-policy: script-src 'sha256-1az3CiAdXAaMP3TFl5msfrDjNuSHMdg1ecAgxfZPR50=' 'unsafe-inline' 'strict-dynamic'; object-src 'none'; base-uri 'none'; report-uri https://csp.withgoogle.com/csp/chromium-website/
location: https://www.chromium.org/developers/testing/fuzzers
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Sat, 11 Oct 2025 17:03:57 GMT
x-served-by: cache-bom-vanm7210042-BOM
x-cache: MISS
x-cache-hits: 0
x-timer: S1760202238.860895,VS0,VE117
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 66
HTTP/2 301
content-security-policy: script-src 'sha256-1az3CiAdXAaMP3TFl5msfrDjNuSHMdg1ecAgxfZPR50=' 'unsafe-inline' 'strict-dynamic'; object-src 'none'; base-uri 'none'; report-uri https://csp.withgoogle.com/csp/chromium-website/
location: /developers/testing/fuzzers/
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Sat, 11 Oct 2025 17:03:58 GMT
x-served-by: cache-bom-vanm7210066-BOM
x-cache: MISS
x-cache-hits: 0
x-timer: S1760202238.028723,VS0,VE146
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 43
HTTP/2 200
cache-control: max-age=3600
content-encoding: gzip
content-security-policy: script-src 'sha256-1az3CiAdXAaMP3TFl5msfrDjNuSHMdg1ecAgxfZPR50=' 'unsafe-inline' 'strict-dynamic'; object-src 'none'; base-uri 'none'; report-uri https://csp.withgoogle.com/csp/chromium-website/
content-type: text/html; charset=utf-8
etag: "892b37c4879a8847430055e471c4ed9f1d1f7e36417fe42107f09280a0eca6e4"
last-modified: Fri, 10 Oct 2025 02:31:02 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Sat, 11 Oct 2025 17:03:58 GMT
x-served-by: cache-bom-vanm7210066-BOM
x-cache: HIT
x-cache-hits: 0
x-timer: S1760202238.188348,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2075
fuzzers
cross_fuzz is a DOM fuzzer, a good stress test for Chromium and any other
browser.
To get cross_fuzz just add
"src/third_party/cross_fuzz":
"https://src.chromium.org/chrome/trunk/deps/third_party/cross_fuzz",
to your "custom_deps" section in your .gclient and run gclient runhooks.
Your gclient file should look like this:
solutions = [
{ "name" : "src",
"url" : "https://src.chromium.org/chrome/trunk/src",
"custom_deps" : {
"src/third_party/cross_fuzz":
"https://src.chromium.org/chrome/trunk/deps/third_party/cross_fuzz",
...
}
},
]
To run cross_fuzz just point the browser to the
third_party/cross_fuzz/cross_fuzz_randomized_20110105_seed.html page. Popup
blocker should be disabled.
For automated runs you may use something like this:
out/Release/chrome --disable-popup-blocking --no-first-run
--user-data-dir=$TEMPDIR \
--allow-file-access-from-files --noerrdialogs --disable-hang-monitor \
file://`pwd`/third_party/cross_fuzz/cross_fuzz_randomized_20110105_seed.html**#1234**
On Windows, you should use
file://%cd%/third_party/cross_fuzz/cross_fuzz_randomized_20110105_seed.html#1234****
instead.
#1234 is the random seed. Replace it with your own seed or remove it from
the URL if you want cross fuzz to generate its own random seed.
