net/proxy/proxy_bypass_rules_unittest.cc

   1 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "net/proxy/proxy_bypass_rules.h"
   6
   7 #include "base/strings/string_util.h"
   8 #include "base/strings/stringprintf.h"
   9 #include "net/proxy/proxy_config_service_common_unittest.h"
  10 #include "testing/gtest/include/gtest/gtest.h"
  11
  12 namespace net {
  13
  14 namespace {
  15
  16 TEST(ProxyBypassRulesTest, ParseAndMatchBasicHost) {
  17   ProxyBypassRules rules;
  18   rules.ParseFromString("wWw.gOogle.com");
  19   ASSERT_EQ(1u, rules.rules().size());
  20   EXPECT_EQ("www.google.com", rules.rules()[0]->ToString());
  21
  22   // All of these match; port, scheme, and non-hostname components don't
  23   // matter.
  24   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com")));
  25   EXPECT_TRUE(rules.Matches(GURL("ftp://www.google.com:99")));
  26   EXPECT_TRUE(rules.Matches(GURL("https://www.google.com:81")));
  27
  28   // Must be a strict host match to work.
  29   EXPECT_FALSE(rules.Matches(GURL("http://foo.www.google.com")));
  30   EXPECT_FALSE(rules.Matches(GURL("http://xxx.google.com")));
  31   EXPECT_FALSE(rules.Matches(GURL("http://google.com")));
  32   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com.baz.org")));
  33 }
  34
  35 TEST(ProxyBypassRulesTest, ParseAndMatchBasicDomain) {
  36   ProxyBypassRules rules;
  37   rules.ParseFromString(".gOOgle.com");
  38   ASSERT_EQ(1u, rules.rules().size());
  39   // Note that we inferred this was an "ends with" test.
  40   EXPECT_EQ("*.google.com", rules.rules()[0]->ToString());
  41
  42   // All of these match; port, scheme, and non-hostname components don't
  43   // matter.
  44   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com")));
  45   EXPECT_TRUE(rules.Matches(GURL("ftp://www.google.com:99")));
  46   EXPECT_TRUE(rules.Matches(GURL("https://a.google.com:81")));
  47   EXPECT_TRUE(rules.Matches(GURL("http://foo.google.com/x/y?q")));
  48   EXPECT_TRUE(rules.Matches(GURL("http://foo:bar@baz.google.com#x")));
  49
  50   // Must be a strict "ends with" to work.
  51   EXPECT_FALSE(rules.Matches(GURL("http://google.com")));
  52   EXPECT_FALSE(rules.Matches(GURL("http://foo.google.com.baz.org")));
  53 }
  54
  55 TEST(ProxyBypassRulesTest, ParseAndMatchBasicDomainWithPort) {
  56   ProxyBypassRules rules;
  57   rules.ParseFromString("*.GOOGLE.com:80");
  58   ASSERT_EQ(1u, rules.rules().size());
  59   EXPECT_EQ("*.google.com:80", rules.rules()[0]->ToString());
  60
  61   // All of these match; scheme, and non-hostname components don't matter.
  62   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com")));
  63   EXPECT_TRUE(rules.Matches(GURL("ftp://www.google.com:80")));
  64   EXPECT_TRUE(rules.Matches(GURL("https://a.google.com:80?x")));
  65
  66   // Must be a strict "ends with" to work.
  67   EXPECT_FALSE(rules.Matches(GURL("http://google.com")));
  68   EXPECT_FALSE(rules.Matches(GURL("http://foo.google.com.baz.org")));
  69
  70   // The ports must match.
  71   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com:90")));
  72   EXPECT_FALSE(rules.Matches(GURL("https://www.google.com")));
  73 }
  74
  75 TEST(ProxyBypassRulesTest, MatchAll) {
  76   ProxyBypassRules rules;
  77   rules.ParseFromString("*");
  78   ASSERT_EQ(1u, rules.rules().size());
  79   EXPECT_EQ("*", rules.rules()[0]->ToString());
  80
  81   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com")));
  82   EXPECT_TRUE(rules.Matches(GURL("ftp://www.foobar.com:99")));
  83   EXPECT_TRUE(rules.Matches(GURL("https://a.google.com:80?x")));
  84 }
  85
  86 TEST(ProxyBypassRulesTest, WildcardAtStart) {
  87   ProxyBypassRules rules;
  88   rules.ParseFromString("*.org:443");
  89   ASSERT_EQ(1u, rules.rules().size());
  90   EXPECT_EQ("*.org:443", rules.rules()[0]->ToString());
  91
  92   EXPECT_TRUE(rules.Matches(GURL("http://www.google.org:443")));
  93   EXPECT_TRUE(rules.Matches(GURL("https://www.google.org")));
  94
  95   EXPECT_FALSE(rules.Matches(GURL("http://www.google.org")));
  96   EXPECT_FALSE(rules.Matches(GURL("https://www.google.com")));
  97   EXPECT_FALSE(rules.Matches(GURL("https://www.google.org.com")));
  98 }
  99
 100 TEST(ProxyBypassRulesTest, IPV4Address) {
 101   ProxyBypassRules rules;
 102   rules.ParseFromString("192.168.1.1");
 103   ASSERT_EQ(1u, rules.rules().size());
 104   EXPECT_EQ("192.168.1.1", rules.rules()[0]->ToString());
 105
 106   EXPECT_TRUE(rules.Matches(GURL("http://192.168.1.1")));
 107   EXPECT_TRUE(rules.Matches(GURL("https://192.168.1.1:90")));
 108
 109   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com")));
 110   EXPECT_FALSE(rules.Matches(GURL("http://sup.192.168.1.1")));
 111 }
 112
 113 TEST(ProxyBypassRulesTest, IPV4AddressWithPort) {
 114   ProxyBypassRules rules;
 115   rules.ParseFromString("192.168.1.1:33");
 116   ASSERT_EQ(1u, rules.rules().size());
 117   EXPECT_EQ("192.168.1.1:33", rules.rules()[0]->ToString());
 118
 119   EXPECT_TRUE(rules.Matches(GURL("http://192.168.1.1:33")));
 120
 121   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com")));
 122   EXPECT_FALSE(rules.Matches(GURL("http://192.168.1.1")));
 123   EXPECT_FALSE(rules.Matches(GURL("http://sup.192.168.1.1:33")));
 124 }
 125
 126 TEST(ProxyBypassRulesTest, IPV6Address) {
 127   ProxyBypassRules rules;
 128   rules.ParseFromString("[3ffe:2a00:100:7031:0:0::1]");
 129   ASSERT_EQ(1u, rules.rules().size());
 130   // Note that we canonicalized the IP address.
 131   EXPECT_EQ("[3ffe:2a00:100:7031::1]", rules.rules()[0]->ToString());
 132
 133   EXPECT_TRUE(rules.Matches(GURL("http://[3ffe:2a00:100:7031::1]")));
 134   EXPECT_TRUE(rules.Matches(GURL("http://[3ffe:2a00:100:7031::1]:33")));
 135
 136   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com")));
 137   EXPECT_FALSE(rules.Matches(GURL("http://sup.192.168.1.1:33")));
 138 }
 139
 140 TEST(ProxyBypassRulesTest, IPV6AddressWithPort) {
 141   ProxyBypassRules rules;
 142   rules.ParseFromString("[3ffe:2a00:100:7031::1]:33");
 143   ASSERT_EQ(1u, rules.rules().size());
 144   EXPECT_EQ("[3ffe:2a00:100:7031::1]:33", rules.rules()[0]->ToString());
 145
 146   EXPECT_TRUE(rules.Matches(GURL("http://[3ffe:2a00:100:7031::1]:33")));
 147
 148   EXPECT_FALSE(rules.Matches(GURL("http://[3ffe:2a00:100:7031::1]")));
 149   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com")));
 150 }
 151
 152 TEST(ProxyBypassRulesTest, HTTPOnly) {
 153   ProxyBypassRules rules;
 154   rules.ParseFromString("http://www.google.com");
 155   ASSERT_EQ(1u, rules.rules().size());
 156   EXPECT_EQ("http://www.google.com", rules.rules()[0]->ToString());
 157
 158   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com/foo")));
 159   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com:99")));
 160
 161   EXPECT_FALSE(rules.Matches(GURL("https://www.google.com")));
 162   EXPECT_FALSE(rules.Matches(GURL("ftp://www.google.com")));
 163   EXPECT_FALSE(rules.Matches(GURL("http://foo.www.google.com")));
 164   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com.org")));
 165   EXPECT_FALSE(rules.Matches(GURL("https://www.google.com")));
 166 }
 167
 168 TEST(ProxyBypassRulesTest, HTTPOnlyWithWildcard) {
 169   ProxyBypassRules rules;
 170   rules.ParseFromString("http://*www.google.com");
 171   ASSERT_EQ(1u, rules.rules().size());
 172   EXPECT_EQ("http://*www.google.com", rules.rules()[0]->ToString());
 173
 174   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com/foo")));
 175   EXPECT_TRUE(rules.Matches(GURL("http://www.google.com:99")));
 176   EXPECT_TRUE(rules.Matches(GURL("http://foo.www.google.com")));
 177
 178   EXPECT_FALSE(rules.Matches(GURL("https://www.google.com")));
 179   EXPECT_FALSE(rules.Matches(GURL("ftp://www.google.com")));
 180   EXPECT_FALSE(rules.Matches(GURL("http://www.google.com.org")));
 181   EXPECT_FALSE(rules.Matches(GURL("https://www.google.com")));
 182 }
 183
 184 TEST(ProxyBypassRulesTest, UseSuffixMatching) {
 185   ProxyBypassRules rules;
 186   rules.ParseFromStringUsingSuffixMatching(
 187       "foo1.com, .foo2.com, 192.168.1.1, "
 188       "*foobar.com:80, *.foo, http://baz, <local>");
 189   ASSERT_EQ(7u, rules.rules().size());
 190   EXPECT_EQ("*foo1.com", rules.rules()[0]->ToString());
 191   EXPECT_EQ("*.foo2.com", rules.rules()[1]->ToString());
 192   EXPECT_EQ("192.168.1.1", rules.rules()[2]->ToString());
 193   EXPECT_EQ("*foobar.com:80", rules.rules()[3]->ToString());
 194   EXPECT_EQ("*.foo", rules.rules()[4]->ToString());
 195   EXPECT_EQ("http://*baz", rules.rules()[5]->ToString());
 196   EXPECT_EQ("<local>", rules.rules()[6]->ToString());
 197
 198   EXPECT_TRUE(rules.Matches(GURL("http://foo1.com")));
 199   EXPECT_TRUE(rules.Matches(GURL("http://aaafoo1.com")));
 200   EXPECT_FALSE(rules.Matches(GURL("http://aaafoo1.com.net")));
 201 }
 202
 203 TEST(ProxyBypassRulesTest, MultipleRules) {
 204   ProxyBypassRules rules;
 205   rules.ParseFromString(".google.com , .foobar.com:30");
 206   ASSERT_EQ(2u, rules.rules().size());
 207
 208   EXPECT_TRUE(rules.Matches(GURL("http://baz.google.com:40")));
 209   EXPECT_FALSE(rules.Matches(GURL("http://google.com:40")));
 210   EXPECT_TRUE(rules.Matches(GURL("http://bar.foobar.com:30")));
 211   EXPECT_FALSE(rules.Matches(GURL("http://bar.foobar.com")));
 212   EXPECT_FALSE(rules.Matches(GURL("http://bar.foobar.com:33")));
 213 }
 214
 215 TEST(ProxyBypassRulesTest, BadInputs) {
 216   ProxyBypassRules rules;
 217   EXPECT_FALSE(rules.AddRuleFromString("://"));
 218   EXPECT_FALSE(rules.AddRuleFromString("  "));
 219   EXPECT_FALSE(rules.AddRuleFromString("http://"));
 220   EXPECT_FALSE(rules.AddRuleFromString("*.foo.com:-34"));
 221   EXPECT_EQ(0u, rules.rules().size());
 222 }
 223
 224 TEST(ProxyBypassRulesTest, Equals) {
 225   ProxyBypassRules rules1;
 226   ProxyBypassRules rules2;
 227
 228   rules1.ParseFromString("foo1.com, .foo2.com");
 229   rules2.ParseFromString("foo1.com,.FOo2.com");
 230
 231   EXPECT_TRUE(rules1.Equals(rules2));
 232   EXPECT_TRUE(rules2.Equals(rules1));
 233
 234   rules1.ParseFromString(".foo2.com");
 235   rules2.ParseFromString("foo1.com,.FOo2.com");
 236
 237   EXPECT_FALSE(rules1.Equals(rules2));
 238   EXPECT_FALSE(rules2.Equals(rules1));
 239 }
 240
 241 TEST(ProxyBypassRulesTest, BypassLocalNames) {
 242   const struct {
 243     const char* url;
 244     bool expected_is_local;
 245   } tests[] = {
 246     // Single-component hostnames are considered local.
 247     {"http://localhost/x", true},
 248     {"http://www", true},
 249
 250     // IPv4 loopback interface.
 251     {"http://127.0.0.1/x", true},
 252     {"http://127.0.0.1:80/x", true},
 253
 254     // IPv6 loopback interface.
 255     {"http://[::1]:80/x", true},
 256     {"http://[0:0::1]:6233/x", true},
 257     {"http://[0:0:0:0:0:0:0:1]/x", true},
 258
 259     // Non-local URLs.
 260     {"http://foo.com/", false},
 261     {"http://localhost.i/", false},
 262     {"http://www.google.com/", false},
 263     {"http://192.168.0.1/", false},
 264
 265     // Try with different protocols.
 266     {"ftp://127.0.0.1/x", true},
 267     {"ftp://foobar.com/x", false},
 268
 269     // This is a bit of a gray-area, but GURL does not strip trailing dots
 270     // in host-names, so the following are considered non-local.
 271     {"http://www./x", false},
 272     {"http://localhost./x", false},
 273   };
 274
 275   ProxyBypassRules rules;
 276   rules.ParseFromString("<local>");
 277
 278   for (size_t i = 0; i < arraysize(tests); ++i) {
 279     SCOPED_TRACE(base::StringPrintf(
 280         "Test[%d]: %s", static_cast<int>(i), tests[i].url));
 281     EXPECT_EQ(tests[i].expected_is_local, rules.Matches(GURL(tests[i].url)));
 282   }
 283 }
 284
 285 TEST(ProxyBypassRulesTest, ParseAndMatchCIDR_IPv4) {
 286   ProxyBypassRules rules;
 287   rules.ParseFromString("192.168.1.1/16");
 288   ASSERT_EQ(1u, rules.rules().size());
 289   EXPECT_EQ("192.168.1.1/16", rules.rules()[0]->ToString());
 290
 291   EXPECT_TRUE(rules.Matches(GURL("http://192.168.1.1")));
 292   EXPECT_TRUE(rules.Matches(GURL("ftp://192.168.4.4")));
 293   EXPECT_TRUE(rules.Matches(GURL("https://192.168.0.0:81")));
 294   EXPECT_TRUE(rules.Matches(GURL("http://[::ffff:192.168.11.11]")));
 295
 296   EXPECT_FALSE(rules.Matches(GURL("http://foobar.com")));
 297   EXPECT_FALSE(rules.Matches(GURL("http://192.169.1.1")));
 298   EXPECT_FALSE(rules.Matches(GURL("http://xxx.192.168.1.1")));
 299   EXPECT_FALSE(rules.Matches(GURL("http://192.168.1.1.xx")));
 300 }
 301
 302 TEST(ProxyBypassRulesTest, ParseAndMatchCIDR_IPv6) {
 303   ProxyBypassRules rules;
 304   rules.ParseFromString("a:b:c:d::/48");
 305   ASSERT_EQ(1u, rules.rules().size());
 306   EXPECT_EQ("a:b:c:d::/48", rules.rules()[0]->ToString());
 307
 308   EXPECT_TRUE(rules.Matches(GURL("http://[A:b:C:9::]")));
 309   EXPECT_FALSE(rules.Matches(GURL("http://foobar.com")));
 310   EXPECT_FALSE(rules.Matches(GURL("http://192.169.1.1")));
 311 }
 312
 313 }  // namespace
 314
 315 }  // namespace net