HTTP
HTTP GET
followlocation
#
# Server-side
HTTP/1.1 302 OK swsclose
Location: ../../../../../../../510002
Date: Thu, 09 Nov 2010 14:50:00 GMT
Connection: close
HTTP/1.1 200 OK swsclose
Location: this should be ignored
Date: Thu, 09 Nov 2010 14:50:00 GMT
Connection: close
body
HTTP/1.1 302 OK swsclose
Location: ../../../../../../../510002
Date: Thu, 09 Nov 2010 14:50:00 GMT
Connection: close
HTTP/1.1 200 OK swsclose
Location: this should be ignored
Date: Thu, 09 Nov 2010 14:50:00 GMT
Connection: close
body
#
# Client-side
http
HTTP follow redirect with excessive ../
http://%HOSTIP:%HTTPPORT/we/are/all/twits/51 -L
#
# Verify data after the test has been "shot"
GET /we/are/all/twits/51 HTTP/1.1
Host: %HOSTIP:%HTTPPORT
User-Agent: curl/%VERSION
Accept: */*
GET /510002 HTTP/1.1
Host: %HOSTIP:%HTTPPORT
User-Agent: curl/%VERSION
Accept: */*