HTTP HTTP GET followlocation # # Server-side HTTP/1.1 302 OK swsclose Location: ../../../../../../../510002 Date: Thu, 09 Nov 2010 14:50:00 GMT Connection: close HTTP/1.1 200 OK swsclose Location: this should be ignored Date: Thu, 09 Nov 2010 14:50:00 GMT Connection: close body HTTP/1.1 302 OK swsclose Location: ../../../../../../../510002 Date: Thu, 09 Nov 2010 14:50:00 GMT Connection: close HTTP/1.1 200 OK swsclose Location: this should be ignored Date: Thu, 09 Nov 2010 14:50:00 GMT Connection: close body # # Client-side http HTTP follow redirect with exessive ../ http://%HOSTIP:%HTTPPORT/we/are/all/twits/51 -L # # Verify data after the test has been "shot" ^User-Agent:.* GET /we/are/all/twits/51 HTTP/1.1 Host: %HOSTIP:%HTTPPORT Accept: */* GET /510002 HTTP/1.1 User-Agent: curl/7.10 (i686-pc-linux-gnu) libcurl/7.10 OpenSSL/0.9.6c ipv6 zlib/1.1.3 Host: %HOSTIP:%HTTPPORT Accept: */*