2017-07-17 10:29:42 -07:00
|
|
|
'use strict';
|
|
|
|
|
|
|
|
const common = require('../common');
|
2017-08-07 07:54:44 +02:00
|
|
|
if (!common.hasCrypto)
|
|
|
|
common.skip('missing crypto');
|
2017-07-17 10:29:42 -07:00
|
|
|
const assert = require('assert');
|
|
|
|
const http2 = require('http2');
|
|
|
|
|
|
|
|
const server = http2.createServer();
|
|
|
|
|
2023-01-09 21:38:36 -08:00
|
|
|
const src = { __proto__: null };
|
2017-07-17 10:29:42 -07:00
|
|
|
src.accept = [ 'abc', 'def' ];
|
|
|
|
src.Accept = 'ghijklmnop';
|
|
|
|
src['www-authenticate'] = 'foo';
|
|
|
|
src['WWW-Authenticate'] = 'bar';
|
|
|
|
src['WWW-AUTHENTICATE'] = 'baz';
|
|
|
|
src['proxy-authenticate'] = 'foo';
|
|
|
|
src['Proxy-Authenticate'] = 'bar';
|
|
|
|
src['PROXY-AUTHENTICATE'] = 'baz';
|
|
|
|
src['x-foo'] = 'foo';
|
|
|
|
src['X-Foo'] = 'bar';
|
|
|
|
src['X-FOO'] = 'baz';
|
|
|
|
src.constructor = 'foo';
|
|
|
|
src.Constructor = 'bar';
|
|
|
|
src.CONSTRUCTOR = 'baz';
|
|
|
|
// eslint-disable-next-line no-proto
|
2018-02-13 06:09:31 +01:00
|
|
|
src.__proto__ = 'foo';
|
|
|
|
src.__PROTO__ = 'bar';
|
|
|
|
src.__Proto__ = 'baz';
|
2017-07-17 10:29:42 -07:00
|
|
|
|
|
|
|
function checkHeaders(headers) {
|
2021-10-27 16:15:11 +00:00
|
|
|
assert.strictEqual(headers.accept, 'abc, def, ghijklmnop');
|
|
|
|
assert.strictEqual(headers['www-authenticate'], 'foo, bar, baz');
|
|
|
|
assert.strictEqual(headers['proxy-authenticate'], 'foo, bar, baz');
|
|
|
|
assert.strictEqual(headers['x-foo'], 'foo, bar, baz');
|
|
|
|
assert.strictEqual(headers.constructor, 'foo, bar, baz');
|
2017-07-17 10:29:42 -07:00
|
|
|
// eslint-disable-next-line no-proto
|
2021-10-27 16:15:11 +00:00
|
|
|
assert.strictEqual(headers.__proto__, 'foo, bar, baz');
|
2017-07-17 10:29:42 -07:00
|
|
|
}
|
|
|
|
|
|
|
|
server.on('stream', common.mustCall((stream, headers) => {
|
|
|
|
assert.strictEqual(headers[':path'], '/');
|
|
|
|
assert.strictEqual(headers[':scheme'], 'http');
|
|
|
|
assert.strictEqual(headers[':method'], 'GET');
|
|
|
|
checkHeaders(headers);
|
|
|
|
stream.respond(src);
|
|
|
|
stream.end();
|
|
|
|
}));
|
|
|
|
|
|
|
|
server.listen(0, common.mustCall(() => {
|
|
|
|
const client = http2.connect(`http://localhost:${server.address().port}`);
|
|
|
|
const req = client.request(src);
|
|
|
|
req.on('response', common.mustCall(checkHeaders));
|
2017-11-25 13:02:16 -08:00
|
|
|
req.on('close', common.mustCall(() => {
|
2017-07-17 10:29:42 -07:00
|
|
|
server.close();
|
2017-12-12 11:34:17 -08:00
|
|
|
client.close();
|
2017-07-17 10:29:42 -07:00
|
|
|
}));
|
|
|
|
}));
|