Files
Chris Tate c8b42772a8 fix(http): enforce HTTP/1.1 Host requirement (#388)
* fix(http): enforce HTTP/1.1 Host requirement

- Enforce Node's default Host behavior while preserving opt-out and HTTP/1.0 handling.

- Match the 400 wire response and add C/LLVM differential coverage.

* feat(http): add static HTTP trailer and streaming support

- Parse incoming chunk trailers and expose distinct/raw trailer reads.
- Frame outgoing trailers and add streaming controls with differential coverage.

* fix(http): harden request trailer parsing

- Safely discard trailers after early responses while preserving parser validation.
- Bound aggregate head and trailer parsing by bytes and field count.
- Add regressions for early response trailers and overflow rejection.
2026-09-23 10:21:53 -05:00

67 lines
2.4 KiB
JavaScript

import { connect } from "node:net";
const port = Number(process.argv[2]);
function exchange(path, body = "") {
return new Promise((resolve, reject) => {
let wire = "";
const socket = connect(port, "127.0.0.1", () => {
const headers = [
`${body ? "POST" : "GET"} ${path} HTTP/1.1`,
"Host: test",
"Connection: close",
...(body ? ["X-Head: one", "X-Head: two", "Transfer-Encoding: chunked", "Trailer: X-Note, Cookie, Authorization"] : []),
"",
"",
].join("\r\n");
socket.write(headers + body);
});
socket.on("data", (chunk) => { wire += chunk.toString("latin1"); });
socket.on("end", () => resolve(wire));
socket.on("error", reject);
socket.setTimeout(5000, () => reject(new Error(`timeout on ${path}`)));
});
}
function earlyExchange() {
return new Promise((resolve, reject) => {
let wire = "";
let responseDone = false;
const socket = connect(port, "127.0.0.1", () => {
socket.write(
"POST /early HTTP/1.1\r\n" +
"Host: test\r\n" +
"Connection: keep-alive\r\n" +
"Transfer-Encoding: chunked\r\n" +
"Trailer: X-Probe\r\n\r\n" +
"0\r\nX-Probe: yes\r\n\r\n",
);
});
socket.on("data", (chunk) => {
wire += chunk.toString("latin1");
if (!responseDone && wire.includes("\r\n\r\nearly")) {
responseDone = true;
socket.end();
}
});
socket.on("end", () => resolve(wire));
socket.on("error", reject);
socket.setTimeout(5000, () => reject(new Error("timeout on /early")));
});
}
function summarize(path, wire) {
const split = wire.indexOf("\r\n\r\n");
const head = wire.slice(0, split);
const body = wire.slice(split + 4);
const status = head.split("\r\n")[0];
console.log(`${path} ${status} chunked=${/Transfer-Encoding: chunked/i.test(head)} length=${/Content-Length: 2/i.test(head)} wire=${body.replaceAll("\r\n", "|")}`);
}
const chunked = "4\r\ndata\r\n0\r\nX-Note: first\r\nx-NoTe: second\r\nCookie: a=1\r\ncookie: b=2\r\nAuthorization: first\r\nAuthorization: second\r\n\r\n";
summarize("/early", await earlyExchange());
for (const [path, body] of [["/incoming", chunked], ["/fixed", ""], ["/replace", ""], ["/explicit", ""], ["/declared", ""], ["/invalid-framing", ""], ["/invalid", ""], ["/quit", ""]]) {
summarize(path, await exchange(path, body));
}
console.log("driver done");