diff options
Diffstat (limited to 'test/modules/http1/test_006_unsafe.py')
| -rw-r--r-- | test/modules/http1/test_006_unsafe.py | 132 |
1 files changed, 132 insertions, 0 deletions
diff --git a/test/modules/http1/test_006_unsafe.py b/test/modules/http1/test_006_unsafe.py new file mode 100644 index 0000000000..b6882292c2 --- /dev/null +++ b/test/modules/http1/test_006_unsafe.py @@ -0,0 +1,132 @@ +import re +import socket +from typing import Optional + +import pytest + +from .env import H1Conf + +class TestRequestUnsafe: + + @pytest.fixture(autouse=True, scope='class') + def _class_scope(self, env): + conf = H1Conf(env) + conf.add([ + "HttpProtocolOptions Unsafe", + ]) + conf.install() + assert env.apache_restart() == 0 + + # unsafe tests from t/apache/http_strict.t + # possible expected results: + # 0: any HTTP error + # 1: any HTTP success + # 200-500: specific HTTP status code + # None: HTTPD should drop connection without error message + @pytest.mark.parametrize(["intext", "status"], [ + ["GET / HTTP/1.0\r\n\r\n", 1], + ["GET / HTTP/1.0\n\n", 1], + ["get / HTTP/1.0\r\n\r\n", 501], + ["G ET / HTTP/1.0\r\n\r\n", 400], + ["G\0ET / HTTP/1.0\r\n\r\n", 400], + ["G/T / HTTP/1.0\r\n\r\n", 501], + ["GET /\0 HTTP/1.0\r\n\r\n", 400], + ["GET / HTTP/1.0\0\r\n\r\n", 400], + ["GET\f/ HTTP/1.0\r\n\r\n", 400], + ["GET\r/ HTTP/1.0\r\n\r\n", 400], + ["GET\t/ HTTP/1.0\r\n\r\n", 400], + ["GET / HTT/1.0\r\n\r\n", 0], + ["GET / HTTP/1.0\r\nHost: localhost\r\n\r\n", 1], + ["GET / HTTP/2.0\r\nHost: localhost\r\n\r\n", 1], + ["GET / HTTP/1.2\r\nHost: localhost\r\n\r\n", 1], + ["GET / HTTP/1.11\r\nHost: localhost\r\n\r\n", 400], + ["GET / HTTP/10.0\r\nHost: localhost\r\n\r\n", 400], + ["GET / HTTP/1.0 \r\nHost: localhost\r\n\r\n", 200], + ["GET / HTTP/1.0 x\r\nHost: localhost\r\n\r\n", 400], + ["GET / HTTP/\r\nHost: localhost\r\n\r\n", 0], + ["GET / HTTP/0.9\r\n\r\n", 0], + ["GET / HTTP/0.8\r\n\r\n", 0], + ["GET /\x01 HTTP/1.0\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nFoo: bar\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nFoo:bar\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nFoo: b\0ar\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nFoo: b\x01ar\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nFoo\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nFoo bar\r\n\r\n", 400], + ["GET / HTTP/1.0\r\n: bar\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nX: bar\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nFoo bar:bash\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nFoo :bar\r\n\r\n", 400], + ["GET / HTTP/1.0\r\n Foo:bar\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nF\x01o: bar\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nF\ro: bar\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nF\to: bar\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nFo: b\tar\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nFo: bar\r\r\n\r\n", 400], + ["GET / HTTP/1.0\r\r", None], + ["GET /\r\n", 90], + ["GET /#frag HTTP/1.0\r\n", 400], + ["GET / HTTP/1.0\r\nHost: localhost\r\nHost: localhost\r\n\r\n", 200], + ["GET http://017700000001/ HTTP/1.0\r\n\r\n", 200], + ["GET http://0x7f.1/ HTTP/1.0\r\n\r\n", 200], + ["GET http://127.0.0.1/ HTTP/1.0\r\n\r\n", 200], + ["GET http://127.01.0.1/ HTTP/1.0\r\n\r\n", 200], + ["GET http://%3127.0.0.1/ HTTP/1.0\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nHost: localhost:80\r\nHost: localhost:80\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nHost: localhost:80 x\r\n\r", 400], + ["GET http://localhost:80/ HTTP/1.0\r\n\r\n", 200], + ["GET http://localhost:80x/ HTTP/1.0\r\n\r\n", 400], + ["GET http://localhost:80:80/ HTTP/1.0\r\n\r\n", 400], + ["GET http://localhost::80/ HTTP/1.0\r\n\r\n", 400], + ["GET http://foo@localhost:80/ HTTP/1.0\r\n\r\n", 200], + ["GET http://[::1]/ HTTP/1.0\r\n\r\n", 1], + ["GET http://[::1:2]/ HTTP/1.0\r\n\r\n", 1], + ["GET http://[4712::abcd]/ HTTP/1.0\r\n\r\n", 1], + ["GET http://[4712::abcd:1]/ HTTP/1.0\r\n\r\n", 1], + ["GET http://[4712::abcd::]/ HTTP/1.0\r\n\r\n", 400], + ["GET http://[4712:abcd::]/ HTTP/1.0\r\n\r\n", 1], + ["GET http://[4712::abcd]:8000/ HTTP/1.0\r\n\r\n", 1], + ["GET http://4713::abcd:8001/ HTTP/1.0\r\n\r\n", 400], + ["GET / HTTP/1.0\r\nHost: [::1]\r\n\r\n", 1], + ["GET / HTTP/1.0\r\nHost: [::1:2]\r\n\r\n", 1], + ["GET / HTTP/1.0\r\nHost: [4711::abcd]\r\n\r\n", 1], + ["GET / HTTP/1.0\r\nHost: [4711::abcd:1]\r\n\r\n", 1], + ["GET / HTTP/1.0\r\nHost: [4711:abcd::]\r\n\r\n", 1], + ["GET / HTTP/1.0\r\nHost: [4711::abcd]:8000\r\n\r\n", 1], + ["GET / HTTP/1.0\r\nHost: 4714::abcd:8001\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nHost: abc\xa0\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nHost: abc\\foo\r\n\r\n", 400], + ["GET http://foo/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200], + ["GET http://foo:81/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200], + ["GET http://[::1]:81/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200], + ["GET http://10.0.0.1:81/ HTTP/1.0\r\nHost: bar\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nHost: foo-bar.example.com\r\n\r\n", 200], + ["GET / HTTP/1.0\r\nHost: foo_bar.example.com\r\n\r\n", 200], + ["GET http://foo_bar/ HTTP/1.0\r\n\r\n", 200], + ]) + def test_h1_006_01(self, env, intext, status: Optional[int]): + with socket.create_connection(('localhost', int(env.http_port))) as sock: + # on some OS, the server does not see our connection until there is + # something incoming + sock.sendall(intext.encode()) + sock.shutdown(socket.SHUT_WR) + buff = sock.recv(1024) + msg = buff.decode() + if status is None: + assert len(msg) == 0, f"unexpected answer: {msg}" + else: + assert len(msg) > 0, "no answer from server" + rlines = msg.splitlines() + response = rlines[0] + m = re.match(r'^HTTP/1.1 (\d+)\s+(\S+)', response) + assert m or status == 90, f"unrecognized response: {rlines}" + if status == 1: + assert int(m.group(1)) >= 200 + elif status == 90: + # headerless 0.9 response, yuk + assert len(rlines) >= 1, f"{rlines}" + elif status > 0: + assert int(m.group(1)) == status, f"{rlines}" + else: + assert int(m.group(1)) >= 400, f"{rlines}" + |