Add test from #1191

coreruleset · Jan 1, 2021 · c6dcf0a · c6dcf0a
1 parent 0b20d75
commit c6dcf0a
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/tests/regression/tests/REQUEST-921-PROTOCOL-ATTACK/921110.yaml b/tests/regression/tests/REQUEST-921-PROTOCOL-ATTACK/921110.yaml
@@ -144,3 +144,21 @@
           uri: /?arg1=GET%20http%3A%2F%2Fwww.foo.bar%20HTTP%2F3.2
         output:
           log_contains: id "921110"
+  -
+    test_title: 921110-9
+    desc: "HTTP Response Splitting false negative test"
+    stages:
+    -
+      stage:
+        input:
+          dest_addr: 127.0.0.1
+          headers:
+            Host: localhost
+            Accept: "*/*"
+            User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
+          method: POST
+          port: 80
+          uri: /
+          data: "var=soundtrack Gympl\r\nanything"
+        output:
+          no_log_contains: id "921110"