Add CRLF attack test for SetCookie::setValue

zendframework · Sep 12, 2015 · 0a3911c · 0a3911c
1 parent 83ec382
commit 0a3911c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/test/Header/SetCookieTest.php b/test/Header/SetCookieTest.php
@@ -435,6 +435,13 @@ public function testPreventsCRLFAttackViaConstructor()
         $this->assertEquals('Set-Cookie: leo_auth_token=example%0D%0A%0D%0AevilContent', $header->toString());
     }
 
+    public function testPreventsCRLFAttackViaSetValue()
+    {
+        $header = new SetCookie("leo_auth_token");
+        $header->setValue("example\r\n\r\nevilContent");
+        $this->assertEquals('Set-Cookie: leo_auth_token=example%0D%0A%0D%0AevilContent', $header->toString());
+    }
+
     public function setterInjections()
     {
         return [