[Webkit-unassigned] [Bug 32249] New: WebSocket test server handshake is not strict enough

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Dec 7 14:58:10 PST 2009


           Summary: WebSocket test server handshake is not strict enough
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org

WebSocket test server should reject invalid WebSocket connection attempts (thus
testing that the client handshake request is valid).

Steps to reproduce:
1. run-webkit-websocketserver
2. telnet 8880
3. Paste the following handshake text:
GET       /websocket/tests/simple      HTTP/1.1
Upgrade:     WebSocket


Results: a connection is established successfully. It shouldn't be.

There are several issues with this request:
- wrong whitespace (must always be a single space);
- wrong case of headers;
- wrong order of Connection and Upgrade headers;
- Origin is continued to the next line, which is not allowed for WebSocket.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list