Filtering of endpoints before fuzzing

[grebnetiew]

When fuzzing using a specification, users may want to exclude certain paths, such as /logout, or many ones in case of testing a new feature.

One way to do this is edit the specifcation (like yq 'del(.paths."/logout")' openapi.yml > filtered.yml). But maybe it is also nice if the fuzzer allows to do this by configuration option (blocklist/allowlist).

[Jelle-Nauta]

Plan: define the whitelist/blacklist files with one (URL-encoded) endpoint per line, optionally followed by space-separated HTTP-methods to which the white-/blacklisting applies.