HTTP
HTTP GET
dotdot removal
#
# Server-side
HTTP/1.1 200 OK
Content-Length: 6
Connection: close
-foo-
HTTP/1.1 200 OK
Content-Length: 7
Connection: close
-cool-
#
# Client-side
http
HTTP URL with dotdot removal from path
http://%HOSTIP:%HTTPPORT/../../hej/but/who/../%TESTNUMBER?stupid=me/../%TESTNUMBER#soo/../%TESTNUMBER http://%HOSTIP:%HTTPPORT/../../hej/but/who/../%TESTNUMBER0001#/../%TESTNUMBER0001
#
# Verify data after the test has been "shot"
GET /hej/but/%TESTNUMBER?stupid=me/../%TESTNUMBER HTTP/1.1
Host: %HOSTIP:%HTTPPORT
User-Agent: curl/%VERSION
Accept: */*
GET /hej/but/%TESTNUMBER0001 HTTP/1.1
Host: %HOSTIP:%HTTPPORT
User-Agent: curl/%VERSION
Accept: */*