{"_id":"big-list-of-naughty-strings","_rev":"6-502faf63fe93e8d63a642e475332d8d2","name":"big-list-of-naughty-strings","description":"The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data","dist-tags":{"latest":"1.0.0"},"versions":{"1.0.0":{"name":"big-list-of-naughty-strings","version":"1.0.0","description":"The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data","author":{"name":"Max Woolf","email":"max@minimaxir.com"},"main":"blns.json","repository":{"type":"git","url":"git+https://github.com/minimaxir/big-list-of-naughty-strings.git"},"license":"MIT","bugs":{"url":"https://github.com/minimaxir/big-list-of-naughty-strings/issues"},"homepage":"https://github.com/minimaxir/big-list-of-naughty-strings#readme","gitHead":"bcd08985e0d5eb445b434f4cf5227153ec450faa","_id":"big-list-of-naughty-strings@1.0.0","scripts":{},"_shasum":"4364e58591541b18e2e8991bc034ce5e9ab18119","_from":".","_npmVersion":"2.14.3","_nodeVersion":"4.1.0","_npmUser":{"name":"minimaxir","email":"max@minimaxir.com"},"dist":{"shasum":"4364e58591541b18e2e8991bc034ce5e9ab18119","tarball":"https://registry.npmjs.org/big-list-of-naughty-strings/-/big-list-of-naughty-strings-1.0.0.tgz","integrity":"sha512-WiC+gW38KhSqHR5nmQ51l25CkiU/WkDCXFXd6R1uvyCdYrMk70IzmcVrrV3CEKU1ppd2PcZY+UsRz/RyM7/jMA==","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIE6zLFkDCVVfsLyHZ8yPiKRLfQ5pmv4TsHXCmeTfxmxxAiEAojLTWmn8zSug4LeXoN2a3+65wa9C3+FCt2TWne3PQ/k="}]},"maintainers":[{"name":"minimaxir","email":"max@minimaxir.com"}]}},"readme":"# Big List of Naughty Strings\nThe Big List of Naughty Strings is an evolving list of strings which have a high probability of causing issues when used as user-input data. This is intended for use in helping both automated and manual QA testing; useful for whenever your QA engineer [walks into a bar](http://www.sempf.net/post/On-Testing1.aspx).\n\n## Why Test Naughty Strings?\n\nEven multi-billion dollar companies with huge amounts of automated testing can't find every bad input. For example, look at what happens when you try to Tweet a [zero-width space](https://en.wikipedia.org/wiki/Zero-width_space) (U+200B) on Twitter:\n\n![](http://i.imgur.com/HyDg2eV.gif)\n\nAlthough this is not a malicious error, and typical users aren't Tweeting weird unicode, an \"internal server error\" for unexpected input is never a positive experience for the user, and may in fact be a symptom of deeper string-validation issues. The Big List of Naughty Strings is intended to help reveal such issues.\n\n## Usage\n\n`blns.txt` consists of newline-delimited strings and comments which are preceded with `#`. The comments divide the strings into sections for easy manual reading and copy/pasting into input forms. For those who want to access the strings programmatically, a `blns.json` file is provided containing an array with all the comments stripped out (the `scripts` folder contains a Python script used to generate the `blns.json`).\n\n## Contributions\n\nFeel free to send a pull request to add more strings, or additional sections. However, please do not send pull requests with very-long strings (255+ characters), as that makes the list much more difficult to view.\n\nLikewise, please do not send pull requests which compromise *manual usability of the file*. This includes the [EICAR test string](https://en.wikipedia.org/wiki/EICAR_test_file), which can cause the file to be flagged by antivirus scanners, and files which alter the encoding of `blns.txt`. Also, do not send a null character (U+0000) string, as it [changes the file format on GitHub to binary](http://stackoverflow.com/a/19723302) and renders it unreadable in pull requests.\n\n## Disclaimer\n\nThe Big List of Naughty Strings is intended to be used *for software you own and manage*. Some of the Naughty Strings can indicate security vulnerabilities, and as a result using such strings with third-party software may be a crime. The maintainer is not responsible for any negative actions that result from the use of the list.\n\n## Maintainer\n\n* Max Woolf ([@minimaxir](https://twitter.com/minimaxir))\n","maintainers":[{"name":"minimaxir","email":"max@minimaxir.com"}],"time":{"modified":"2022-06-13T04:35:54.631Z","created":"2015-09-18T04:14:23.865Z","1.0.0":"2015-09-18T04:14:23.865Z"},"homepage":"https://github.com/minimaxir/big-list-of-naughty-strings#readme","repository":{"type":"git","url":"git+https://github.com/minimaxir/big-list-of-naughty-strings.git"},"author":{"name":"Max Woolf","email":"max@minimaxir.com"},"bugs":{"url":"https://github.com/minimaxir/big-list-of-naughty-strings/issues"},"license":"MIT","readmeFilename":"README.md","users":{"ruyadorno":true,"lvivier":true,"penzin":true}}