Chromium Code Reviews Chromium Code Reviews
Issue 1917503002:
URLRequest fuzzer. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@fuzz| OLD | NEW |
|---|---|
| 1 # Copyright 2016 The Chromium Authors. All rights reserved. | 1 # Copyright 2016 The Chromium Authors. All rights reserved. |
| 2 # Use of this source code is governed by a BSD-style license that can be | 2 # Use of this source code is governed by a BSD-style license that can be |
| 3 # found in the LICENSE file. | 3 # found in the LICENSE file. |
| 4 | 4 |
| 5 # Fuzzer dictionary targetting HTTP/1.x responses. | 5 # Fuzzer dictionary targetting HTTP/1.x responses. |
| 6 | 6 |
| 7 # Entries that are generally useful in headers | 7 # Entries that are generally useful in headers |
| 8 ":" | 8 ":" |
| 9 "\x0A" | 9 "\x0A" |
| 10 "\x0D" | 10 "\x0D" |
| 11 "0" | 11 "0" |
| 12 "50" | 12 "50" |
| 13 "500" | 13 "500" |
| 14 # Horizontal whitespace. Matters mostly in status line. | 14 # Horizontal whitespace. Matters mostly in status line. |
| 15 " " | 15 " " |
| 16 "\x09" | 16 "\x09" |
| 17 # Header continuation | 17 # Header continuation |
| 18 "\x0D\x0A\x09" | 18 "\x0D\x0A\x09" |
| 19 # Used in a lot of individual headers | 19 # Used in a lot of individual headers |
| 20 ";" | 20 ";" |
| 21 "=" | 21 "=" |
| 22 "," | 22 "," |
| 23 "\"" | 23 "\"" |
| 24 "-" | |
| 24 | 25 |
| 25 # Status line components | 26 # Status line components |
| 26 "HTTP" | 27 "HTTP" |
| 27 "/1.1" | 28 "/1.1" |
| 28 "/1.0" | 29 "/1.0" |
| 29 # More interesting status codes. Leading space so can be inserted into | 30 # More interesting status codes. Leading space so can be inserted into |
| 30 # other status lines. | 31 # other status lines. |
| 31 " 100" | 32 " 100" |
| 32 " 200" | 33 " 200" |
| 33 " 206" | 34 " 206" |
| 34 " 301" | 35 " 301" |
| 35 " 302" | 36 " 302" |
| 36 " 303" | 37 " 303" |
| 37 " 304" | 38 " 304" |
| 38 " 307" | 39 " 307" |
| 39 " 308" | 40 " 308" |
| 40 " 401" | 41 " 401" |
| 41 " 403" | 42 " 403" |
| 42 " 404" | 43 " 404" |
| 43 " 500" | 44 " 500" |
| 44 " 501" | 45 " 501" |
| 45 " 403" | 46 " 403" |
| 46 | 47 |
| 47 # Full status lines (Some with relevant following headers) | 48 # Full status lines (Some with relevant following headers) |
| 48 "HTTP/1.1 200 OK\x0A\x0A" | 49 "HTTP/1.1 200 OK\x0A\x0A" |
| 49 "HTTP/1.1 100 Continue\x0A\x0A" | 50 "HTTP/1.1 100 Continue\x0A\x0A" |
| 50 "HTTP/1.1 401 Unauthorized\x0AWWW-Authenticate: Basic realm=\"Middle-Earth\"\x0A \xA0" | 51 "HTTP/1.1 401 Unauthorized\x0AWWW-Authenticate: Basic realm=\"Middle-Earth\"\x0A \xA0" |
| 51 "HTTP/1.1 407 Proxy Authentication Required\x0AProxy-Authenticate: Digest realm= \"Middle-Earth\", nonce=\"aaaaaaaaaa\"\x0A\x0A" | 52 "HTTP/1.1 407 Proxy Authentication Required\x0AProxy-Authenticate: Digest realm= \"Middle-Earth\", nonce=\"aaaaaaaaaa\"\x0A\x0A" |
| 52 "HTTP/1.0 301 Moved Permanently\x0ALocation: /a\x0A\x0A" | 53 "HTTP/1.0 301 Moved Permanently\x0ALocation: /a\x0A\x0A" |
| 53 "HTTP/1.1 302 Found\x0ALocation: http://lost/\x0A\x0A" | 54 "HTTP/1.1 302 Found\x0ALocation: http://lost/\x0A\x0A" |
|
mmenke
2016/04/22 20:12:47
Strangely, I have yet to see it generate a test ca
| |
| 54 | 55 |
| 55 # Proxy authentication headers. Note that fuzzers don't support NTLM or | 56 # Proxy authentication headers. Note that fuzzers don't support NTLM or |
| 56 # negotiate. | 57 # negotiate. |
| 57 "WWW-Authenticate" | 58 "WWW-Authenticate:" |
| 58 "Proxy-Authenticate" | 59 "Proxy-Authenticate:" |
| 59 "Basic" | 60 "Basic" |
| 60 "Digest" | 61 "Digest" |
| 61 "realm" | 62 "realm" |
| 62 "nonce" | 63 "nonce" |
| 63 | 64 |
| 64 "Connection" | 65 "Connection:" |
| 65 "Proxy-Connection" | 66 "Proxy-Connection:" |
| 66 "Keep-Alive" | 67 "Keep-Alive" |
| 67 "Close" | 68 "Close" |
| 69 "Upgrade" | |
| 68 "\x0AConnection: Keep-Alive" | 70 "\x0AConnection: Keep-Alive" |
| 69 "\x0AConnection: Close" | 71 "\x0AConnection: Close" |
| 70 "\x0AProxy-Connection: Keep-Alive" | 72 "\x0AProxy-Connection: Keep-Alive" |
| 71 "\x0AProxy-Connection: Close" | 73 "\x0AProxy-Connection: Close" |
| 72 | 74 |
| 73 "Content-Length" | 75 "Content-Length:" |
| 74 "Transfer-Encoding" | 76 "Transfer-Encoding:" |
| 75 "chunked" | 77 "chunked" |
| 76 "\x0AContent-Length: 0" | 78 "\x0AContent-Length: 0" |
| 77 "\x0AContent-Length: 500" | 79 "\x0AContent-Length: 500" |
| 78 "\x0ATransfer-Encoding: chunked\x0A\x0A5\x0A12345\x0A0\x0A\x0A" | 80 "\x0ATransfer-Encoding: chunked\x0A\x0A5\x0A12345\x0A0\x0A\x0A" |
| 81 | |
| 82 "Location:" | |
| 83 | |
| 84 "Accept-Ranges:" | |
| 85 "bytes" | |
| 86 | |
| 87 "Age" | |
| 88 | |
| 89 "Cache-Control:" | |
| 90 "max-age" | |
| 91 "no-cache" | |
| 92 "no-store" | |
| 93 | |
| 94 "Content-Disposition:" | |
| 95 "attachment" | |
| 96 "filename" | |
| 97 | |
| 98 "Content-Encoding:" | |
| 99 "gzip" | |
| 100 "deflate" | |
| 101 "sdch" | |
| 102 "br" | |
| 103 "\x0AContent-Encoding: gzip" | |
| 104 "\x0AContent-Encoding: deflate" | |
| 105 "\x0AContent-Encoding: sdch" | |
| 106 "\x0AContent-Encoding: br" | |
| 107 | |
| 108 "Date:" | |
| 109 "Fri, 01 Apr, 2050 14:14:14 GMT" | |
| 110 "Mon, 28 Mar, 2016 04:04:04 GMT" | |
| 111 | |
| 112 "Last-Modified:" | |
| 113 | |
| 114 "Set-Cookie:" | |
| 115 "Expires" | |
| 116 "Max-Age" | |
| 117 "Domain" | |
| 118 "Path" | |
| 119 "Secure" | |
| 120 "HttpOnly" | |
| 121 "Priority" | |
| 122 "Low" | |
| 123 "Medium" | |
| 124 "High" | |
| 125 "SameSite" | |
| 126 "Strict" | |
| 127 "Lax" | |
| 128 "\x0ASet-Cookie: foo=bar" | |
| 129 "\x0ASet-Cookie: foo2=bar2;HttpOnly;Priority=Low;SameSite=Strict;Path=/" | |
| 130 "\x0ASet-Cookie: foo=chicken;SameSite=Lax" | |
| 131 | |
| 132 "Strict-Transport-Security:" | |
| 133 "includeSubDomains" | |
| 134 | |
| 135 "Vary:" | |
| 136 "Vary: Cookie" | |
| 137 "Vary: Age" | |
| 138 | |
| 139 "ETag:" | |
| OLD | NEW |
