1*6236dae4SAndroid Build Coastguard Worker<testcase> 2*6236dae4SAndroid Build Coastguard Worker<info> 3*6236dae4SAndroid Build Coastguard Worker<keywords> 4*6236dae4SAndroid Build Coastguard WorkerHTTP 5*6236dae4SAndroid Build Coastguard WorkerHTTP GET 6*6236dae4SAndroid Build Coastguard Workerdotdot removal 7*6236dae4SAndroid Build Coastguard Worker</keywords> 8*6236dae4SAndroid Build Coastguard Worker</info> 9*6236dae4SAndroid Build Coastguard Worker 10*6236dae4SAndroid Build Coastguard Worker# 11*6236dae4SAndroid Build Coastguard Worker# Server-side 12*6236dae4SAndroid Build Coastguard Worker<reply> 13*6236dae4SAndroid Build Coastguard Worker<data> 14*6236dae4SAndroid Build Coastguard WorkerHTTP/1.1 200 OK 15*6236dae4SAndroid Build Coastguard WorkerContent-Length: 6 16*6236dae4SAndroid Build Coastguard WorkerConnection: close 17*6236dae4SAndroid Build Coastguard Worker 18*6236dae4SAndroid Build Coastguard Worker-foo- 19*6236dae4SAndroid Build Coastguard Worker</data> 20*6236dae4SAndroid Build Coastguard Worker 21*6236dae4SAndroid Build Coastguard Worker<data1> 22*6236dae4SAndroid Build Coastguard WorkerHTTP/1.1 200 OK 23*6236dae4SAndroid Build Coastguard WorkerContent-Length: 7 24*6236dae4SAndroid Build Coastguard WorkerConnection: close 25*6236dae4SAndroid Build Coastguard Worker 26*6236dae4SAndroid Build Coastguard Worker-cool- 27*6236dae4SAndroid Build Coastguard Worker</data1> 28*6236dae4SAndroid Build Coastguard Worker</reply> 29*6236dae4SAndroid Build Coastguard Worker 30*6236dae4SAndroid Build Coastguard Worker# 31*6236dae4SAndroid Build Coastguard Worker# Client-side 32*6236dae4SAndroid Build Coastguard Worker<client> 33*6236dae4SAndroid Build Coastguard Worker<server> 34*6236dae4SAndroid Build Coastguard Workerhttp 35*6236dae4SAndroid Build Coastguard Worker</server> 36*6236dae4SAndroid Build Coastguard Worker<name> 37*6236dae4SAndroid Build Coastguard WorkerHTTP URL with dotdot removal from path 38*6236dae4SAndroid Build Coastguard Worker</name> 39*6236dae4SAndroid Build Coastguard Worker<command> 40*6236dae4SAndroid Build Coastguard Workerhttp://%HOSTIP:%HTTPPORT/../../hej/but/who/../%TESTNUMBER?stupid=me/../%TESTNUMBER#soo/../%TESTNUMBER http://%HOSTIP:%HTTPPORT/../../hej/but/who/../%TESTNUMBER0001#/../%TESTNUMBER0001 41*6236dae4SAndroid Build Coastguard Worker</command> 42*6236dae4SAndroid Build Coastguard Worker</client> 43*6236dae4SAndroid Build Coastguard Worker 44*6236dae4SAndroid Build Coastguard Worker# 45*6236dae4SAndroid Build Coastguard Worker# Verify data after the test has been "shot" 46*6236dae4SAndroid Build Coastguard Worker<verify> 47*6236dae4SAndroid Build Coastguard Worker<protocol> 48*6236dae4SAndroid Build Coastguard WorkerGET /hej/but/%TESTNUMBER?stupid=me/../%TESTNUMBER HTTP/1.1 49*6236dae4SAndroid Build Coastguard WorkerHost: %HOSTIP:%HTTPPORT 50*6236dae4SAndroid Build Coastguard WorkerUser-Agent: curl/%VERSION 51*6236dae4SAndroid Build Coastguard WorkerAccept: */* 52*6236dae4SAndroid Build Coastguard Worker 53*6236dae4SAndroid Build Coastguard WorkerGET /hej/but/%TESTNUMBER0001 HTTP/1.1 54*6236dae4SAndroid Build Coastguard WorkerHost: %HOSTIP:%HTTPPORT 55*6236dae4SAndroid Build Coastguard WorkerUser-Agent: curl/%VERSION 56*6236dae4SAndroid Build Coastguard WorkerAccept: */* 57*6236dae4SAndroid Build Coastguard Worker 58*6236dae4SAndroid Build Coastguard Worker</protocol> 59*6236dae4SAndroid Build Coastguard Worker</verify> 60*6236dae4SAndroid Build Coastguard Worker</testcase> 61