# verify that dotdot removal can be disabled! HTTP HTTP GET HTTP proxy # # Server-side HTTP/1.1 200 OK Content-Length: 6 Connection: close -foo- HTTP/1.1 200 OK Content-Length: 7 Connection: close -cool- # # Client-side http HTTP _without_ dotdot removal --path-as-is --proxy http://%HOSTIP:%HTTPPORT http://test.remote.haxx.se.%TESTNUMBER:8990/../../hej/but/who/../%TESTNUMBER?stupid=me/../%TESTNUMBER#soo/../%TESTNUMBER http://test.remote.haxx.se.%TESTNUMBER:8990/../../hej/but/who/../%TESTNUMBER0001#/../%TESTNUMBER0001 proxy # # Verify data after the test has been "shot" GET http://test.remote.haxx.se.%TESTNUMBER:8990/../../hej/but/who/../%TESTNUMBER?stupid=me/../%TESTNUMBER HTTP/1.1 Host: test.remote.haxx.se.%TESTNUMBER:8990 User-Agent: curl/%VERSION Accept: */* Proxy-Connection: Keep-Alive GET http://test.remote.haxx.se.%TESTNUMBER:8990/../../hej/but/who/../%TESTNUMBER0001 HTTP/1.1 Host: test.remote.haxx.se.%TESTNUMBER:8990 User-Agent: curl/%VERSION Accept: */* Proxy-Connection: Keep-Alive