mirror of
https://github.com/php/php-src.git
synced 2026-10-29 10:22:06 +08:00
Daniel Scherzer
ed8ff1ec53
The server previously responded with a copy of the requested "Host" header in the response, without any validation. That header, as defined in RFC 9110, is intended for use in *requests*; remove it from the responses.
40 lines
622 B
PHP
40 lines
622 B
PHP
--TEST--
|
|
Implement Req #60850 (Built in web server does not set $_SERVER['SCRIPT_FILENAME'] when using router)
|
|
--SKIPIF--
|
|
<?php
|
|
include "skipif.inc";
|
|
?>
|
|
--FILE--
|
|
<?php
|
|
include "php_cli_server.inc";
|
|
php_cli_server_start(<<<'PHP'
|
|
var_dump($_SERVER['SCRIPT_FILENAME']);
|
|
PHP
|
|
);
|
|
|
|
$host = PHP_CLI_SERVER_HOSTNAME;
|
|
$fp = php_cli_server_connect();
|
|
|
|
if(fwrite($fp, <<<HEADER
|
|
POST / HTTP/1.1
|
|
Host: {$host}
|
|
|
|
|
|
HEADER
|
|
)) {
|
|
while (!feof($fp)) {
|
|
echo fgets($fp);
|
|
}
|
|
}
|
|
|
|
fclose($fp);
|
|
?>
|
|
--EXPECTF--
|
|
HTTP/1.1 200 OK
|
|
Date: %s
|
|
Connection: close
|
|
X-Powered-By: %s
|
|
Content-type: text/html; charset=UTF-8
|
|
|
|
string(%d) "%sindex.php"
|