mirror of
https://github.com/nodejs/node.git
synced 2025-05-01 17:03:34 +00:00

This helps to prevent issues where a failed test can keep a bound socket open long enough to cause other tests to fail with EADDRINUSE because the same port number is used. PR-URL: https://github.com/nodejs/node/pull/7045 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Rod Vagg <rod@vagg.org>
56 lines
1.7 KiB
JavaScript
56 lines
1.7 KiB
JavaScript
'use strict';
|
||
|
||
const common = require('../common');
|
||
const http = require('http');
|
||
const net = require('net');
|
||
const url = require('url');
|
||
const assert = require('assert');
|
||
|
||
// Response splitting example, credit: Amit Klein, Safebreach
|
||
const str = '/welcome?lang=bar%c4%8d%c4%8aContentLength:%200%c4%8d%c4%8a%c' +
|
||
'4%8d%c4%8aHTTP/1.1%20200%20OK%c4%8d%c4%8aContentLength:%202' +
|
||
'0%c4%8d%c4%8aLastModified:%20Mon,%2027%20Oct%202003%2014:50:18' +
|
||
'%20GMT%c4%8d%c4%8aContentType:%20text/html%c4%8d%c4%8a%c4%8' +
|
||
'd%c4%8a%3chtml%3eGotcha!%3c/html%3e';
|
||
|
||
// Response splitting example, credit: Сковорода Никита Андреевич (@ChALkeR)
|
||
const x = 'fooഊSet-Cookie: foo=barഊഊ<script>alert("Hi!")</script>';
|
||
const y = 'foo⠊Set-Cookie: foo=bar';
|
||
|
||
var count = 0;
|
||
|
||
const server = http.createServer((req, res) => {
|
||
switch (count++) {
|
||
case 0:
|
||
const loc = url.parse(req.url, true).query.lang;
|
||
assert.throws(common.mustCall(() => {
|
||
res.writeHead(302, {Location: `/foo?lang=${loc}`});
|
||
}));
|
||
break;
|
||
case 1:
|
||
assert.throws(common.mustCall(() => {
|
||
res.writeHead(200, {'foo': x});
|
||
}));
|
||
break;
|
||
case 2:
|
||
assert.throws(common.mustCall(() => {
|
||
res.writeHead(200, {'foo': y});
|
||
}));
|
||
break;
|
||
default:
|
||
assert.fail(null, null, 'should not get to here.');
|
||
}
|
||
if (count === 3)
|
||
server.close();
|
||
res.end('ok');
|
||
});
|
||
server.listen(0, () => {
|
||
const end = 'HTTP/1.1\r\n\r\n';
|
||
const client = net.connect({port: server.address().port}, () => {
|
||
client.write(`GET ${str} ${end}`);
|
||
client.write(`GET / ${end}`);
|
||
client.write(`GET / ${end}`);
|
||
client.end();
|
||
});
|
||
});
|