blob: da15ba593441fd458851767d30dcd5d8e90287f1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
$NetBSD: patch-Lib_test_test__httpservers.py,v 1.2.2.2 2014/07/05 11:13:52 tron Exp $
Test case for directory traversal vulnerability, ref.
http://bugs.python.org/issue21766
--- Lib/test/test_httpservers.py.orig 2014-06-09 11:29:38.000000000 +0000
+++ Lib/test/test_httpservers.py
@@ -510,6 +510,11 @@ class CGIHTTPServerTestCase(BaseTestCase
(res.read(), res.getheader('Content-type'), res.status))
self.assertEqual(os.environ['SERVER_SOFTWARE'], signature)
+ def test_urlquote_decoding_in_cgi_check(self):
+ res = self.request('/cgi-bin%2ffile1.py')
+ self.assertEqual((b'Hello World\n', 'text/html', 200),
+ (res.read(), res.getheader('Content-type'), res.status))
+
class SimpleHTTPRequestHandlerTestCase(unittest.TestCase):
""" Test url parsing """
|
