<testcase> <info> # verify that dotdot removal can be disabled! <keywords> HTTP HTTP GET HTTP proxy </keywords> </info> # # Server-side <reply> <data> HTTP/1.1 200 OK Content-Length: 6 Connection: close -foo- </data> <data1> HTTP/1.1 200 OK Content-Length: 7 Connection: close -cool- </data1> </reply> # # Client-side <client> <server> http </server> <name> HTTP _without_ dotdot removal </name> <command> --path-as-is --proxy http://%HOSTIP:%HTTPPORT http://test.remote.haxx.se.1241:8990/../../hej/but/who/../1241?stupid=me/../1241#soo/../1241 http://test.remote.haxx.se.1241:8990/../../hej/but/who/../12410001#/../12410001 </command> </client> # # Verify data after the test has been "shot" <verify> <strip> ^User-Agent:.* </strip> <protocol> GET http://test.remote.haxx.se.1241:8990/../../hej/but/who/../1241?stupid=me/../1241 HTTP/1.1 Host: test.remote.haxx.se.1241:8990 Accept: */* Proxy-Connection: Keep-Alive GET http://test.remote.haxx.se.1241:8990/../../hej/but/who/../12410001 HTTP/1.1 Host: test.remote.haxx.se.1241:8990 Accept: */* Proxy-Connection: Keep-Alive </protocol> </verify> </testcase>