1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
<!DOCTYPE html>
<meta charset=utf-8>
<title>Whitespace and null in header values</title>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<div id=log></div>
<script>
function error(val) {
test(() => {
const client = new XMLHttpRequest();
client.open("GET", "resources/parse-headers.py?my-custom-header="+encodeURIComponent(val), false);
assert_throws_dom("NetworkError", () => client.send());
}, "Header value: " + val.replace("\0", "\\0"));
}
function matchHeaderValue(val) {
test(function () {
var client = new XMLHttpRequest();
var trimmed = val.trim();
client.open("GET", "resources/parse-headers.py?my-custom-header="+encodeURIComponent(val), false);
client.send();
var r = client.getResponseHeader("My-Custom-Header");
assert_equals(r, trimmed);
}, "Header value: " + val.replace(/\t/g, "[tab]").replace(/ /g, "_"));
}
error("hello world\0");
error("\0hello world");
error("hello\0world");
matchHeaderValue(" hello world");
matchHeaderValue("hello world ");
matchHeaderValue(" hello world ");
matchHeaderValue("\thello world");
matchHeaderValue("hello world\t");
matchHeaderValue("\thello world\t");
matchHeaderValue("hello world");
matchHeaderValue("hello\tworld");
error("\0");
matchHeaderValue(" ");
matchHeaderValue("\t");
matchHeaderValue("");
</script>
|
