[Webkit-unassigned] [Bug 32249] New: WebSocket test server handshake is not strict enough

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=32249

           Summary: WebSocket test server handshake is not strict enough
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org


WebSocket test server should reject invalid WebSocket connection attempts (thus
testing that the client handshake request is valid).

Steps to reproduce:
1. run-webkit-websocketserver
2. telnet 127.0.0.1 8880
3. Paste the following handshake text:
--------------------
GET       /websocket/tests/simple      HTTP/1.1
connection:Upgrade
Upgrade:     WebSocket
Host: 127.0.0.1:8880
origin:
 http://www.example.org

--------------------

Results: a connection is established successfully. It shouldn't be.

There are several issues with this request:
- wrong whitespace (must always be a single space);
- wrong case of headers;
- wrong order of Connection and Upgrade headers;
- Origin is continued to the next line, which is not allowed for WebSocket.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.