blob: ff3bb13b927932bf4d6a3d6ba4d774a1762f139c [file] [log] [blame]
#!/usr/bin/perl
# (C) Sergey Kandaurov
# (C) Nginx, Inc.
# Tests for absolute_redirect directive and Location escaping.
###############################################################################
use warnings;
use strict;
use Test::More;
BEGIN { use FindBin; chdir($FindBin::Bin); }
use lib 'lib';
use Test::Nginx;
###############################################################################
select STDERR; $| = 1;
select STDOUT; $| = 1;
my $t = Test::Nginx->new()->has(qw/http proxy rewrite/)
->write_file_expand('nginx.conf', <<'EOF');
%%TEST_GLOBALS%%
daemon off;
events {
}
http {
%%TEST_GLOBALS_HTTP%%
absolute_redirect off;
server {
listen 127.0.0.1:8080;
server_name on;
absolute_redirect on;
error_page 400 /return301;
location / { }
location /auto/ {
proxy_pass http://127.0.0.1:8080;
}
location "/auto sp/" {
proxy_pass http://127.0.0.1:8080;
}
location /return301 {
return 301 /redirect;
}
location /return301/name {
return 301 /redirect;
server_name_in_redirect on;
}
location /return301/port {
return 301 /redirect;
port_in_redirect off;
}
location /i/ {
alias %%TESTDIR%%/;
}
}
server {
listen 127.0.0.1:8080;
server_name off;
location / { }
location /auto/ {
proxy_pass http://127.0.0.1:8080;
}
location "/auto sp/" {
proxy_pass http://127.0.0.1:8080;
}
location '/auto "#%<>?\^`{|}/' {
proxy_pass http://127.0.0.1:8080;
}
location /return301 {
return 301 /redirect;
}
location /i/ {
alias %%TESTDIR%%/;
}
}
}
EOF
mkdir($t->testdir() . '/dir');
mkdir($t->testdir() . '/dir sp');
$t->run()->plan(23);
###############################################################################
my $p = port(8080);
like(get('on', '/dir'), qr!Location: http://on:$p/dir/\x0d?$!m, 'directory');
like(get('on', '/i/dir'), qr!Location: http://on:$p/i/dir/\x0d?$!m,
'directory alias');
TODO: {
local $TODO = 'not yet' unless $t->has_version('1.21.0');
like(get('on', '/dir%20sp'), qr!Location: http://on:$p/dir%20sp/\x0d?$!m,
'directory escaped');
like(get('on', '/dir%20sp?a=b'),
qr!Location: http://on:$p/dir%20sp/\?a=b\x0d?$!m,
'directory escaped args');
}
like(get('on', '/auto'), qr!Location: http://on:$p/auto/\x0d?$!m, 'auto');
like(get('on', '/auto?a=b'), qr!Location: http://on:$p/auto/\?a=b\x0d?$!m,
'auto args');
TODO: {
local $TODO = 'not yet' unless $t->has_version('1.21.0');
like(get('on', '/auto%20sp'), qr!Location: http://on:$p/auto%20sp/\x0d?$!m,
'auto escaped');
like(get('on', '/auto%20sp?a=b'),
qr!Location: http://on:$p/auto%20sp/\?a=b\x0d?$!m,
'auto escaped args');
}
like(get('on', '/return301'), qr!Location: http://on:$p/redirect\x0d?$!m,
'return');
like(get('host', '/return301/name'), qr!Location: http://on:$p/redirect\x0d?!m,
'server_name_in_redirect on');
like(get('host', '/return301'), qr!Location: http://host:$p/redirect\x0d?$!m,
'server_name_in_redirect off - using host');
my $ph = IO::Socket::INET->new("127.0.0.1:$p")->peerhost();
like(get('.', '/return301'), qr!Location: http://$ph:$p/redirect\x0d?$!m,
'invalid host - using local sockaddr');
like(get('host', '/return301/port'), qr!Location: http://host/redirect\x0d?$!m,
'port_in_redirect off');
like(get('off', '/dir'), qr!Location: /dir/\x0d?$!m, 'off directory');
like(get('off', '/i/dir'), qr!Location: /i/dir/\x0d?$!m, 'off directory alias');
TODO: {
local $TODO = 'not yet' unless $t->has_version('1.21.0');
like(get('off', '/dir%20sp'), qr!Location: /dir%20sp/\x0d?$!m,
'off directory escaped');
like(get('off', '/dir%20sp?a=b'), qr!Location: /dir%20sp/\?a=b\x0d?$!m,
'off directory escaped args');
}
like(get('off', '/auto'), qr!Location: /auto/\x0d?$!m, 'off auto');
like(get('off', '/auto?a=b'), qr!Location: /auto/\?a=b\x0d?$!m,
'off auto args');
TODO: {
local $TODO = 'not yet' unless $t->has_version('1.21.0');
like(get('off', '/auto%20sp'), qr!Location: /auto%20sp/\x0d?$!m,
'auto escaped');
like(get('off', '/auto%20sp?a=b'), qr!Location: /auto%20sp/\?a=b\x0d?$!m,
'auto escaped args');
}
like(get('off', '/return301'), qr!Location: /redirect\x0d?$!m, 'off return');
# per RFC 3986, these characters are not allowed unescaped:
# %00-%1F, %7F-%FF, " ", """, "<", ">", "\", "^", "`", "{", "|", "}"
# additionally, all characters in ESCAPE_URI: "?", "%", "#"
SKIP: {
skip 'win32', 1 if $^O eq 'MSWin32';
TODO: {
local $TODO = 'not yet' unless $t->has_version('1.21.1');
like(get('off', '/auto%20%22%23%25%3C%3E%3F%5C%5E%60%7B%7C%7D'),
qr!Location: /auto%20%22%23%25%3C%3E%3F%5C%5E%60%7B%7C%7D/\x0d?$!m,
'auto escaped strict');
}
}
###############################################################################
sub get {
my ($host, $uri) = @_;
http(<<EOF);
GET $uri HTTP/1.0
Host: $host
EOF
}
###############################################################################