HTTP HTTP GET dotdot removal # # Server-side HTTP/1.1 200 OK Content-Length: 6 Connection: close -foo- HTTP/1.1 200 OK Content-Length: 7 Connection: close -cool- # # Client-side http HTTP URL with dotdot removal from path http://%HOSTIP:%HTTPPORT/../../hej/but/who/../1231?stupid=me/../1231#soo/../1231 http://%HOSTIP:%HTTPPORT/../../hej/but/who/../12310001#/../12310001 # # Verify data after the test has been "shot" ^User-Agent:.* GET /hej/but/1231?stupid=me/../1231 HTTP/1.1 Host: %HOSTIP:%HTTPPORT Accept: */* GET /hej/but/12310001 HTTP/1.1 Host: %HOSTIP:%HTTPPORT Accept: */*