test1241 1.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364
  1. <testcase>
  2. <info>
  3. # verify that dotdot removal can be disabled!
  4. <keywords>
  5. HTTP
  6. HTTP GET
  7. HTTP proxy
  8. </keywords>
  9. </info>
  10. #
  11. # Server-side
  12. <reply>
  13. <data>
  14. HTTP/1.1 200 OK
  15. Content-Length: 6
  16. Connection: close
  17. -foo-
  18. </data>
  19. <data1>
  20. HTTP/1.1 200 OK
  21. Content-Length: 7
  22. Connection: close
  23. -cool-
  24. </data1>
  25. </reply>
  26. #
  27. # Client-side
  28. <client>
  29. <server>
  30. http
  31. </server>
  32. <name>
  33. HTTP _without_ dotdot removal
  34. </name>
  35. <command>
  36. --path-as-is --proxy http://%HOSTIP:%HTTPPORT http://test.remote.haxx.se.1241:8990/../../hej/but/who/../1241?stupid=me/../1241#soo/../1241 http://test.remote.haxx.se.1241:8990/../../hej/but/who/../12410001#/../12410001
  37. </command>
  38. </client>
  39. #
  40. # Verify data after the test has been "shot"
  41. <verify>
  42. <strip>
  43. ^User-Agent:.*
  44. </strip>
  45. <protocol>
  46. GET http://test.remote.haxx.se.1241:8990/../../hej/but/who/../1241?stupid=me/../1241 HTTP/1.1
  47. Host: test.remote.haxx.se.1241:8990
  48. Accept: */*
  49. Proxy-Connection: Keep-Alive
  50. GET http://test.remote.haxx.se.1241:8990/../../hej/but/who/../12410001 HTTP/1.1
  51. Host: test.remote.haxx.se.1241:8990
  52. Accept: */*
  53. Proxy-Connection: Keep-Alive
  54. </protocol>
  55. </verify>
  56. </testcase>