curl/tests/data/test51

   1 <testcase>
   2 <info>
   3 <keywords>
   4 HTTP
   5 HTTP GET
   6 followlocation
   7 </keywords>
   8 </info>
   9 #
  10 # Server-side
  11 <reply>
  12 <data>
  13 HTTP/1.1 302 OK swsclose
  14 Location: ../../../../../../../510002
  15 Date: Thu, 09 Nov 2010 14:50:00 GMT
  16 Connection: close
  17
  18 </data>
  19 <data2>
  20 HTTP/1.1 200 OK swsclose
  21 Location: this should be ignored
  22 Date: Thu, 09 Nov 2010 14:50:00 GMT
  23 Connection: close
  24
  25 body
  26 </data2>
  27 <datacheck>
  28 HTTP/1.1 302 OK swsclose
  29 Location: ../../../../../../../510002
  30 Date: Thu, 09 Nov 2010 14:50:00 GMT
  31 Connection: close
  32
  33 HTTP/1.1 200 OK swsclose
  34 Location: this should be ignored
  35 Date: Thu, 09 Nov 2010 14:50:00 GMT
  36 Connection: close
  37
  38 body
  39 </datacheck>
  40 </reply>
  41
  42 #
  43 # Client-side
  44 <client>
  45 <server>
  46 http
  47 </server>
  48  <name>
  49 HTTP follow redirect with excessive ../
  50  </name>
  51  <command>
  52 http://%HOSTIP:%HTTPPORT/we/are/all/twits/51 -L
  53 </command>
  54 </client>
  55
  56 #
  57 # Verify data after the test has been "shot"
  58 <verify>
  59 <strip>
  60 ^User-Agent:.*
  61 </strip>
  62 <protocol>
  63 GET /we/are/all/twits/51 HTTP/1.1\r
  64 Host: %HOSTIP:%HTTPPORT\r
  65 Accept: */*\r
  66 \r
  67 GET /510002 HTTP/1.1\r
  68 User-Agent: curl/7.10 (i686-pc-linux-gnu) libcurl/7.10 OpenSSL/0.9.6c ipv6 zlib/1.1.3\r
  69 Host: %HOSTIP:%HTTPPORT\r
  70 Accept: */*\r
  71 \r
  72 </protocol>
  73 </verify>
  74 </testcase>