romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-24 09:37:25 +03:00
Code Issues Projects Releases Packages Wiki Activity

http: clear the proxy credentials as well on port or scheme change

Browse source 
Add tests 2009-2011 to verify switching between proxies with credentials
when the switch is driven by a redirect

Reported-by: Dwij Mehta

Closes #21304
This commit is contained in:
Daniel Stenberg 2026-04-13 17:17:23 +02:00
parent 9ceb3ff46a
commit 188c2f166a
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
7 changed files with 262 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/data/Makefile.am
View file

@ -244,7 +244,7 @@ test1970 test1971 test1972 test1973 test1974 test1975 test1976 test1977 \
test1978 test1979 test1980 test1981 test1982 test1983 test1984 \
\
test2000 test2001 test2002 test2003 test2004 test2005 test2006 test2007 \
test2008 \
test2008 test2009 test2010 test2011 \
\
test2023 \
test2024 test2025 test2026 test2027 test2028 test2029 test2030 test2031 \

70
tests/data/test2009 Normal file
View file

@ -0,0 +1,70 @@
<?xml version="1.0" encoding="US-ASCII"?>
<testcase>
<info>
<keywords>
HTTP
HTTP proxy
http_proxy
</keywords>
</info>
# Server-side
<reply>
<connect>
HTTP/1.1 407 Denied
</connect>
<data crlf="headers" nocheck="yes">
HTTP/1.1 301 redirect
Date: Tue, 09 Nov 2010 14:49:00 GMT
Server: test-server/fake
Content-Length: 4
Content-Type: text/html
Location: https://another.example/%TESTNUMBER0002
boo
</data>
</reply>
# Client-side
<client>
<features>
proxy
</features>
<server>
http
https
</server>
<name>
proxy credentials via env variables, redirect from http to https
</name>
<setenv>
http_proxy=http://user:secret@%HOSTIP:%HTTPPORT
https_proxy=https://%HOSTIP:%HTTPSPORT/
</setenv>
<command>
http://somewhere.example/ --follow --proxy-insecure
</command>
</client>
# Verify data after the test has been "shot"
<verify>
<protocol crlf="headers">
GET http://somewhere.example/ HTTP/1.1
Host: somewhere.example
Proxy-Authorization: Basic %b64[user:secret]b64%
User-Agent: curl/%VERSION
Accept: */*
Proxy-Connection: Keep-Alive
CONNECT another.example:443 HTTP/1.1
Host: another.example:443
User-Agent: curl/%VERSION
Proxy-Connection: Keep-Alive
</protocol>
<errorcode>
7
</errorcode>
</verify>
</testcase>

71
tests/data/test2010 Normal file
View file

@ -0,0 +1,71 @@
<?xml version="1.0" encoding="US-ASCII"?>
<testcase>
<info>
<keywords>
HTTP
HTTP proxy
http_proxy
</keywords>
</info>
# Server-side
<reply>
<connect>
HTTP/1.1 407 Denied
</connect>
<data crlf="headers" nocheck="yes">
HTTP/1.1 301 redirect
Date: Tue, 09 Nov 2010 14:49:00 GMT
Server: test-server/fake
Content-Length: 4
Content-Type: text/html
Location: https://another.example/%TESTNUMBER0002
boo
</data>
</reply>
# Client-side
<client>
<features>
proxy
</features>
<server>
http
https
</server>
<name>
proxy credentials via options for two proxies, redirect from http to https
</name>
<setenv>
http_proxy=http://%HOSTIP:%HTTPPORT
https_proxy=https://%HOSTIP:%HTTPSPORT/
</setenv>
<command>
--proxy-user batman:robin http://somewhere.example/ --follow --proxy-insecure
</command>
</client>
# Verify data after the test has been "shot"
<verify>
<protocol crlf="headers">
GET http://somewhere.example/ HTTP/1.1
Host: somewhere.example
Proxy-Authorization: Basic %b64[batman:robin]b64%
User-Agent: curl/%VERSION
Accept: */*
Proxy-Connection: Keep-Alive
CONNECT another.example:443 HTTP/1.1
Host: another.example:443
Proxy-Authorization: Basic %b64[batman:robin]b64%
User-Agent: curl/%VERSION
Proxy-Connection: Keep-Alive
</protocol>
<errorcode>
7
</errorcode>
</verify>
</testcase>

70
tests/data/test2011 Normal file
View file

@ -0,0 +1,70 @@
<?xml version="1.0" encoding="US-ASCII"?>
<testcase>
<info>
<keywords>
HTTP
HTTP proxy
http_proxy
</keywords>
</info>
# Server-side
<reply>
<connect>
HTTP/1.1 407 Denied
</connect>
<data crlf="headers" nocheck="yes">
HTTP/1.1 301 redirect
Date: Tue, 09 Nov 2010 14:49:00 GMT
Server: test-server/fake
Content-Length: 4
Content-Type: text/html
Location: https://another.example/%TESTNUMBER0002
boo
</data>
</reply>
# Client-side
<client>
<features>
proxy
</features>
<server>
http
https
</server>
<name>
proxy creds via env, cross-scheme redirect, --location-trusted
</name>
<setenv>
http_proxy=http://user:secret@%HOSTIP:%HTTPPORT
https_proxy=https://%HOSTIP:%HTTPSPORT/
</setenv>
<command>
http://somewhere.example/ --location-trusted --proxy-insecure
</command>
</client>
# Verify data after the test has been "shot"
<verify>
<protocol crlf="headers">
GET http://somewhere.example/ HTTP/1.1
Host: somewhere.example
Proxy-Authorization: Basic %b64[user:secret]b64%
User-Agent: curl/%VERSION
Accept: */*
Proxy-Connection: Keep-Alive
CONNECT another.example:443 HTTP/1.1
Host: another.example:443
User-Agent: curl/%VERSION
Proxy-Connection: Keep-Alive
</protocol>
<errorcode>
7
</errorcode>
</verify>
</testcase>