OLD | NEW |
| (Empty) |
1 # Copyright 2016 The Chromium Authors. All rights reserved. | |
2 # Use of this source code is governed by a BSD-style license that can be | |
3 # found in the LICENSE file. | |
4 | |
5 # Fuzzer dictionary targetting HTTP/1.x responses. | |
6 | |
7 # Entries that are generally useful in headers | |
8 ":" | |
9 "\x0A" | |
10 "\x0D" | |
11 "0" | |
12 "50" | |
13 "500" | |
14 # Horizontal whitespace. Matters mostly in status line. | |
15 " " | |
16 "\x09" | |
17 # Header continuation | |
18 "\x0D\x0A\x09" | |
19 # Used in a lot of individual headers | |
20 ";" | |
21 "=" | |
22 "," | |
23 "\"" | |
24 "-" | |
25 | |
26 # Status line components | |
27 "HTTP" | |
28 "/1.1" | |
29 "/1.0" | |
30 # More interesting status codes. Leading space so can be inserted into | |
31 # other status lines. | |
32 " 100" | |
33 " 200" | |
34 " 206" | |
35 " 301" | |
36 " 302" | |
37 " 303" | |
38 " 304" | |
39 " 307" | |
40 " 308" | |
41 " 401" | |
42 " 403" | |
43 " 404" | |
44 " 500" | |
45 " 501" | |
46 " 403" | |
47 | |
48 # Full status lines (Some with relevant following headers) | |
49 "HTTP/1.1 200 OK\x0A\x0A" | |
50 "HTTP/1.1 100 Continue\x0A\x0A" | |
51 "HTTP/1.1 401 Unauthorized\x0AWWW-Authenticate: Basic realm=\"Middle-Earth\"\x0A
\xA0" | |
52 "HTTP/1.1 407 Proxy Authentication Required\x0AProxy-Authenticate: Digest realm=
\"Middle-Earth\", nonce=\"aaaaaaaaaa\"\x0A\x0A" | |
53 "HTTP/1.0 301 Moved Permanently\x0ALocation: /a\x0A\x0A" | |
54 "HTTP/1.1 302 Found\x0ALocation: http://lost/\x0A\x0A" | |
55 | |
56 # Proxy authentication headers. Note that fuzzers don't support NTLM or | |
57 # negotiate. | |
58 "WWW-Authenticate:" | |
59 "Proxy-Authenticate:" | |
60 "Basic" | |
61 "Digest" | |
62 "realm" | |
63 "nonce" | |
64 | |
65 "Connection:" | |
66 "Proxy-Connection:" | |
67 "Keep-Alive" | |
68 "Close" | |
69 "Upgrade" | |
70 "\x0AConnection: Keep-Alive" | |
71 "\x0AConnection: Close" | |
72 "\x0AProxy-Connection: Keep-Alive" | |
73 "\x0AProxy-Connection: Close" | |
74 | |
75 "Content-Length:" | |
76 "Transfer-Encoding:" | |
77 "chunked" | |
78 "\x0AContent-Length: 0" | |
79 "\x0AContent-Length: 500" | |
80 "\x0ATransfer-Encoding: chunked\x0A\x0A5\x0A12345\x0A0\x0A\x0A" | |
81 | |
82 "Location:" | |
83 "\x0ALocation: http://foo/" | |
84 "\x0ALocation: http://bar/" | |
85 "\x0ALocation: https://foo/" | |
86 "\x0ALocation: https://bar/" | |
87 | |
88 "Accept-Ranges:" | |
89 "bytes" | |
90 "\x0AAccept-Ranges: bytes" | |
91 | |
92 "Content-Range:" | |
93 | |
94 "Age:" | |
95 "\x0AAge: 0" | |
96 "\x0AAge: 3153600000" | |
97 | |
98 "Cache-Control:" | |
99 "max-age" | |
100 "no-cache" | |
101 "no-store" | |
102 "must-revalidate" | |
103 "\x0ACache-Control: max-age=3153600000" | |
104 "\x0ACache-Control: max-age=0" | |
105 "\x0ACache-Control: no-cache" | |
106 "\x0ACache-Control: no-store" | |
107 "\x0ACache-Control: must-revalidate" | |
108 | |
109 "Content-Disposition:" | |
110 "attachment" | |
111 "filename" | |
112 | |
113 "Content-Encoding:" | |
114 "gzip" | |
115 "deflate" | |
116 "sdch" | |
117 "br" | |
118 "\x0AContent-Encoding: gzip" | |
119 "\x0AContent-Encoding: deflate" | |
120 "\x0AContent-Encoding: sdch" | |
121 "\x0AContent-Encoding: br" | |
122 | |
123 "Date:" | |
124 "Fri, 01 Apr, 2050 14:14:14 GMT" | |
125 "Mon, 28 Mar, 2016 04:04:04 GMT" | |
126 "\x0ADate: Fri, 01 Apr, 2050 14:14:14 GMT" | |
127 "\x0ADate: Mon, 28 Mar, 2016 04:04:04 GMT" | |
128 | |
129 "Last-Modified:" | |
130 "\x0ALast-Modified: Fri, 01 Apr, 2050 14:14:14 GMT" | |
131 "\x0ALast-Modified: Mon, 28 Mar, 2016 04:04:04 GMT" | |
132 | |
133 "Expires:" | |
134 "\x0AExpires: Fri, 01 Apr, 2050 14:14:14 GMT" | |
135 "\x0AExpires: Mon, 28 Mar, 2016 04:04:04 GMT" | |
136 | |
137 "Set-Cookie:" | |
138 "Expires" | |
139 "Max-Age" | |
140 "Domain" | |
141 "Path" | |
142 "Secure" | |
143 "HttpOnly" | |
144 "Priority" | |
145 "Low" | |
146 "Medium" | |
147 "High" | |
148 "SameSite" | |
149 "Strict" | |
150 "Lax" | |
151 "\x0ASet-Cookie: foo=bar" | |
152 "\x0ASet-Cookie: foo2=bar2;HttpOnly;Priority=Low;SameSite=Strict;Path=/" | |
153 "\x0ASet-Cookie: foo=chicken;SameSite=Lax" | |
154 | |
155 "Strict-Transport-Security:" | |
156 "includeSubDomains" | |
157 | |
158 "Vary:" | |
159 "\x0AVary: Cookie" | |
160 "\x0AVary: Age" | |
161 | |
162 "ETag:" | |
163 "\x0AETag: jumboshrimp" | |
OLD | NEW |