Function TestIPEncodingHeadersSendsEncodedLocalhostVariants

cmd/bypass_test.go:1615–1662

(t *testing.T)

}

func TestIPEncodingHeadersSendsEncodedLocalhostVariants(t *testing.T) {
	resetTestState()

	var mu sync.Mutex
	var sawIntegerIP bool
	var sawIPv6 bool

	ts, _ := testServer(t, func(w http.ResponseWriter, r *http.Request) {
		mu.Lock()
		for _, value := range []string{
			r.Header.Get("X-Forwarded-For"),
			r.Header.Get("Client-IP"),
			r.Header.Get("True-Client-IP"),
			r.Header.Get("X-Real-Ip"),
			r.Header.Get("Cf-Connecting-Ip"),
		} {
			if value == "2130706433" {
				sawIntegerIP = true
			}
			if value == "[::1]" || value == "::ffff:127.0.0.1" {
				sawIPv6 = true
			}
		}
		mu.Unlock()
		w.WriteHeader(http.StatusForbidden)
		fmt.Fprint(w, "Forbidden")
	})
	defer ts.Close()

	opts := RequestOptions{
		uri:       ts.URL + "/admin",
		headers:   []header{{"User-Agent", "test"}},
		method:    "GET",
		proxy:     &url.URL{},
		timeout:   5000,
		rateLimit: false,
		redirect:  false,
		verbose:   true,
	}

	requestIPEncodingHeaders(opts)

	mu.Lock()
	defer mu.Unlock()
	if !sawIntegerIP || !sawIPv6 {
		t.Fatalf("expected ip encoding technique to send encoded localhost variants")
	}
}

func TestRawAuthoritySendsDuplicateHostHeaders(t *testing.T) {
	resetTestState()