Add test to demonstrate Denial of Service issue

- https://www.npmjs.com/advisories/1208 - cloudhead#213
frankdean · Jul 17, 2020 · 64151eb · 64151eb
1 parent 89af84a
commit 64151eb
Show file tree

Hide file tree

Showing 2 changed files with 1,203 additions and 0 deletions.
diff --git a/test/integration/node-static-test.js b/test/integration/node-static-test.js
@@ -95,6 +95,22 @@ suite.addBatch({
       }
     }
 })
+.addBatch({
+  'requesting a forbidden URI /%00': {
+    topic : function(){
+      request.get(TEST_SERVER + '/%00', this.callback);
+    },
+    'should respond with 403' : function(error, response, body){
+      assert.equal(response.statusCode, 403);
+    },
+    'should respond without content-type header': function(error, response, body){
+      assert.isUndefined(response.headers['content-type']);
+    },
+    'should respond with empty body': function(error, response, body){
+      assert.isEmpty(body);
+    }
+  }
+})
 .addBatch({
   'serving empty.css': {
     topic : function(){