1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374 |
- <testcase>
- <info>
- <keywords>
- HTTP
- HTTP GET
- followlocation
- </keywords>
- </info>
- #
- # Server-side
- <reply>
- <data>
- HTTP/1.1 302 OK swsclose
- Location: ../../../../../../../510002
- Date: Thu, 09 Nov 2010 14:50:00 GMT
- Connection: close
- </data>
- <data2>
- HTTP/1.1 200 OK swsclose
- Location: this should be ignored
- Date: Thu, 09 Nov 2010 14:50:00 GMT
- Connection: close
- body
- </data2>
- <datacheck>
- HTTP/1.1 302 OK swsclose
- Location: ../../../../../../../510002
- Date: Thu, 09 Nov 2010 14:50:00 GMT
- Connection: close
- HTTP/1.1 200 OK swsclose
- Location: this should be ignored
- Date: Thu, 09 Nov 2010 14:50:00 GMT
- Connection: close
- body
- </datacheck>
- </reply>
- #
- # Client-side
- <client>
- <server>
- http
- </server>
- <name>
- HTTP follow redirect with excessive ../
- </name>
- <command>
- http://%HOSTIP:%HTTPPORT/we/are/all/twits/51 -L
- </command>
- </client>
- #
- # Verify data after the test has been "shot"
- <verify>
- <strip>
- ^User-Agent:.*
- </strip>
- <protocol>
- GET /we/are/all/twits/51 HTTP/1.1
- Host: %HOSTIP:%HTTPPORT
- Accept: */*
- GET /510002 HTTP/1.1
- User-Agent: curl/7.10 (i686-pc-linux-gnu) libcurl/7.10 OpenSSL/0.9.6c ipv6 zlib/1.1.3
- Host: %HOSTIP:%HTTPPORT
- Accept: */*
- </protocol>
- </verify>
- </testcase>
|