mirror of
https://github.com/php/php-src.git
synced 2026-10-29 10:22:06 +08:00
Daniel Scherzer
ed8ff1ec53
The server previously responded with a copy of the requested "Host" header in the response, without any validation. That header, as defined in RFC 9110, is intended for use in *requests*; remove it from the responses.
36 lines
526 B
PHP
36 lines
526 B
PHP
--TEST--
|
|
Bug #81305 (Built-in Webserver Drops Requests With "Upgrade" Header)
|
|
--SKIPIF--
|
|
<?php
|
|
include "skipif.inc";
|
|
?>
|
|
--FILE--
|
|
<?php
|
|
include "php_cli_server.inc";
|
|
php_cli_server_start();
|
|
|
|
$host = PHP_CLI_SERVER_HOSTNAME;
|
|
$fp = php_cli_server_connect();
|
|
|
|
if (fwrite($fp, <<<HEADER
|
|
GET / HTTP/1.1
|
|
Host: {$host}
|
|
Upgrade: HTTP/2.0
|
|
Connection: upgrade
|
|
|
|
|
|
HEADER)) {
|
|
fpassthru($fp);
|
|
}
|
|
|
|
fclose($fp);
|
|
?>
|
|
--EXPECTF--
|
|
HTTP/1.1 200 OK
|
|
Date: %s
|
|
Connection: close
|
|
X-Powered-By: PHP/%s
|
|
Content-type: text/html; charset=UTF-8
|
|
|
|
Hello world
|