| <testcase> | |
| # | |
| # This test is crafted to reproduce oss-fuzz bug | |
| # https://crbug.com/oss-fuzz/17954 | |
| # | |
| <info> | |
| <keywords> | |
| HTTP | |
| HTTP GET | |
| HTTP proxy | |
| followlocation | |
| </keywords> | |
| </info> | |
| # | |
| # Server-side | |
| <reply> | |
| <data> | |
| HTTP/1.1 302 OK | |
| Location: http://example.net/there/it/is/../../tes t case=/%TESTNUMBER0002? yes no | |
| Date: Tue, 09 Nov 2010 14:49:00 GMT | |
| Content-Length: 0 | |
| </data> | |
| <data2> | |
| HTTP/1.1 200 OK | |
| Location: this should be ignored | |
| Date: Tue, 09 Nov 2010 14:49:00 GMT | |
| Content-Length: 5 | |
| body | |
| </data2> | |
| <datacheck> | |
| HTTP/1.1 302 OK | |
| Location: http://example.net/there/it/is/../../tes t case=/%TESTNUMBER0002? yes no | |
| Date: Tue, 09 Nov 2010 14:49:00 GMT | |
| Content-Length: 0 | |
| HTTP/1.1 200 OK | |
| Location: this should be ignored | |
| Date: Tue, 09 Nov 2010 14:49:00 GMT | |
| Content-Length: 5 | |
| body | |
| </datacheck> | |
| </reply> | |
| # | |
| # Client-side | |
| <client> | |
| <server> | |
| http | |
| </server> | |
| <name> | |
| HTTP redirect with dotdots and whitespaces in absolute Location: URL | |
| </name> | |
| <command> | |
| http://example.com/please/../gimme/%TESTNUMBER?foobar#hello -L -x http://%HOSTIP:%HTTPPORT | |
| </command> | |
| <features> | |
| proxy | |
| </features> | |
| </client> | |
| # | |
| # Verify data after the test has been "shot" | |
| <verify> | |
| <protocol> | |
| GET http://example.com/gimme/%TESTNUMBER?foobar HTTP/1.1 | |
| Host: example.com | |
| User-Agent: curl/%VERSION | |
| Accept: */* | |
| Proxy-Connection: Keep-Alive | |
| GET http://example.net/there/tes%20t%20case=/%TESTNUMBER0002?+yes+no HTTP/1.1 | |
| Host: example.net | |
| User-Agent: curl/%VERSION | |
| Accept: */* | |
| Proxy-Connection: Keep-Alive | |
| </protocol> | |
| </verify> | |
| </testcase> |