# Seeds

Curated, read-only, and small. These are the inputs a person chose: real site
docs for the ordinary shapes, plus the classic XSS payloads and two oracle edge
cases (a markdown image that falls through as prose carrying ` onerror=`, and an
entity-escaped payload inside a `title` attribute value).

They are NOT the corpus. Run the fuzzer with the corpus first and these second:

    cargo +nightly fuzz run render fuzz/corpus/render fuzz/seeds/render -- -max_total_time=1800

libFuzzer writes new inputs into the FIRST directory only, so this arrangement
keeps the curated set curated and lets `fuzz/corpus/` grow. Passing seeds as the
first argument instead fills this directory with machine-generated files.