]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
REGTESTS: http-rules: verify that we block '#' by default for normalize-uri
authorWilly Tarreau <w@1wt.eu>
Tue, 8 Aug 2023 17:53:51 +0000 (19:53 +0200)
committerWilly Tarreau <w@1wt.eu>
Tue, 8 Aug 2023 17:56:41 +0000 (19:56 +0200)
Since we now block fragments by default, let's add an extra test there
to confirm that it's blocked even when stripping it.

reg-tests/http-rules/normalize_uri.vtc

index 34905eaf93ae62d6e5104e88f26f9cfecc74f6a8..ad7b44acfe55da35d3c49840a414b6b52fb89c86 100644 (file)
@@ -151,6 +151,11 @@ haproxy h1 -conf {
 
         default_backend be
 
+    frontend fe_fragment_block
+        bind "fd@${fe_fragment_block}"
+        http-request normalize-uri fragment-strip
+        default_backend be
+
     backend be
         server s1 ${s1_addr}:${s1_port}
 
@@ -536,3 +541,9 @@ client c10 -connect ${h1_fe_fragment_encode_sock} {
     expect resp.http.before == "*"
     expect resp.http.after == "*"
 } -run
+
+client c11 -connect ${h1_fe_fragment_block_sock} {
+    txreq -url "/#foo"
+    rxresp
+    expect resp.status == 400
+} -run