diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2013-04-10 13:40:36 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2013-04-11 23:52:12 +0200 |
| commit | 5c5e1a1cd206ad8feadaa83a37d0326ba45cf45d (patch) | |
| tree | 74c714fbbf4003150932688e8d61001937d3ba44 /tests/data/test1216 | |
| parent | 2eb8dcf26cb37f09cffe26909a646e702dbcab66 (diff) | |
test1218: another cookie tailmatch test
... and make 1216 also verify it with a file input
These tests verify commit 3604fde3d3c9b0d, the fix for the "cookie
domain tailmatch" vulnerability. See
http://curl.haxx.se/docs/adv_20130412.html
Diffstat (limited to 'tests/data/test1216')
| -rw-r--r-- | tests/data/test1216 | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/tests/data/test1216 b/tests/data/test1216 index e63fe926d..5beda797d 100644 --- a/tests/data/test1216 +++ b/tests/data/test1216 @@ -37,6 +37,7 @@ http://example.fake/c/1216 http://bexample.fake/c/1216 -b log/injar1216 -x %HOST example.fake FALSE /a FALSE 2139150993 mooo indeed example.fake FALSE /b FALSE 0 moo1 indeed example.fake FALSE /c FALSE 2139150993 moo2 indeed +example.fake TRUE /c FALSE 2139150993 moo3 indeed </file> </client> @@ -50,7 +51,7 @@ GET http://example.fake/c/1216 HTTP/1.1 Host: example.fake
Accept: */*
Proxy-Connection: Keep-Alive
-Cookie: moo2=indeed
+Cookie: moo2=indeed; moo3=indeed
GET http://bexample.fake/c/1216 HTTP/1.1
Host: bexample.fake
|