REGTESTS: http-rules: verify that we block '#' by default for normalize-uri

Since we now block fragments by default, let's add an extra test there
to confirm that it's blocked even when stripping it.
This commit is contained in:
Willy Tarreau 2023-08-08 19:53:51 +02:00
parent 2e97857a84
commit 4d0175b54b
1 changed files with 11 additions and 0 deletions

View File

@ -151,6 +151,11 @@ haproxy h1 -conf {
default_backend be
frontend fe_fragment_block
bind "fd@${fe_fragment_block}"
http-request normalize-uri fragment-strip
default_backend be
backend be
server s1 ${s1_addr}:${s1_port}
@ -536,3 +541,9 @@ client c10 -connect ${h1_fe_fragment_encode_sock} {
expect resp.http.before == "*"
expect resp.http.after == "*"
} -run
client c11 -connect ${h1_fe_fragment_block_sock} {
txreq -url "/#foo"
rxresp
expect resp.status == 400
} -run