| OLD | NEW |
| (Empty) |
| 1 # Copyright 2016 The Chromium Authors. All rights reserved. | |
| 2 # Use of this source code is governed by a BSD-style license that can be | |
| 3 # found in the LICENSE file. | |
| 4 | |
| 5 # Fuzzer dictionary targetting HTTP/1.x responses. | |
| 6 | |
| 7 # Entries that are generally useful in headers | |
| 8 ":" | |
| 9 "\x0A" | |
| 10 "\x0D" | |
| 11 "0" | |
| 12 "50" | |
| 13 "500" | |
| 14 # Horizontal whitespace. Matters mostly in status line. | |
| 15 " " | |
| 16 "\x09" | |
| 17 # Header continuation | |
| 18 "\x0D\x0A\x09" | |
| 19 # Used in a lot of individual headers | |
| 20 ";" | |
| 21 "=" | |
| 22 "," | |
| 23 "\"" | |
| 24 "-" | |
| 25 | |
| 26 # Status line components | |
| 27 "HTTP" | |
| 28 "/1.1" | |
| 29 "/1.0" | |
| 30 # More interesting status codes. Leading space so can be inserted into | |
| 31 # other status lines. | |
| 32 " 100" | |
| 33 " 200" | |
| 34 " 206" | |
| 35 " 301" | |
| 36 " 302" | |
| 37 " 303" | |
| 38 " 304" | |
| 39 " 307" | |
| 40 " 308" | |
| 41 " 401" | |
| 42 " 403" | |
| 43 " 404" | |
| 44 " 500" | |
| 45 " 501" | |
| 46 " 403" | |
| 47 | |
| 48 # Full status lines (Some with relevant following headers) | |
| 49 "HTTP/1.1 200 OK\x0A\x0A" | |
| 50 "HTTP/1.1 100 Continue\x0A\x0A" | |
| 51 "HTTP/1.1 401 Unauthorized\x0AWWW-Authenticate: Basic realm=\"Middle-Earth\"\x0A
\xA0" | |
| 52 "HTTP/1.1 407 Proxy Authentication Required\x0AProxy-Authenticate: Digest realm=
\"Middle-Earth\", nonce=\"aaaaaaaaaa\"\x0A\x0A" | |
| 53 "HTTP/1.0 301 Moved Permanently\x0ALocation: /a\x0A\x0A" | |
| 54 "HTTP/1.1 302 Found\x0ALocation: http://lost/\x0A\x0A" | |
| 55 | |
| 56 # Proxy authentication headers. Note that fuzzers don't support NTLM or | |
| 57 # negotiate. | |
| 58 "WWW-Authenticate:" | |
| 59 "Proxy-Authenticate:" | |
| 60 "Basic" | |
| 61 "Digest" | |
| 62 "realm" | |
| 63 "nonce" | |
| 64 | |
| 65 "Connection:" | |
| 66 "Proxy-Connection:" | |
| 67 "Keep-Alive" | |
| 68 "Close" | |
| 69 "Upgrade" | |
| 70 "\x0AConnection: Keep-Alive" | |
| 71 "\x0AConnection: Close" | |
| 72 "\x0AProxy-Connection: Keep-Alive" | |
| 73 "\x0AProxy-Connection: Close" | |
| 74 | |
| 75 "Content-Length:" | |
| 76 "Transfer-Encoding:" | |
| 77 "chunked" | |
| 78 "\x0AContent-Length: 0" | |
| 79 "\x0AContent-Length: 500" | |
| 80 "\x0ATransfer-Encoding: chunked\x0A\x0A5\x0A12345\x0A0\x0A\x0A" | |
| 81 | |
| 82 "Location:" | |
| 83 "\x0ALocation: http://foo/" | |
| 84 "\x0ALocation: http://bar/" | |
| 85 "\x0ALocation: https://foo/" | |
| 86 "\x0ALocation: https://bar/" | |
| 87 | |
| 88 "Accept-Ranges:" | |
| 89 "bytes" | |
| 90 "\x0AAccept-Ranges: bytes" | |
| 91 | |
| 92 "Content-Range:" | |
| 93 | |
| 94 "Age:" | |
| 95 "\x0AAge: 0" | |
| 96 "\x0AAge: 3153600000" | |
| 97 | |
| 98 "Cache-Control:" | |
| 99 "max-age" | |
| 100 "no-cache" | |
| 101 "no-store" | |
| 102 "must-revalidate" | |
| 103 "\x0ACache-Control: max-age=3153600000" | |
| 104 "\x0ACache-Control: max-age=0" | |
| 105 "\x0ACache-Control: no-cache" | |
| 106 "\x0ACache-Control: no-store" | |
| 107 "\x0ACache-Control: must-revalidate" | |
| 108 | |
| 109 "Content-Disposition:" | |
| 110 "attachment" | |
| 111 "filename" | |
| 112 | |
| 113 "Content-Encoding:" | |
| 114 "gzip" | |
| 115 "deflate" | |
| 116 "sdch" | |
| 117 "br" | |
| 118 "\x0AContent-Encoding: gzip" | |
| 119 "\x0AContent-Encoding: deflate" | |
| 120 "\x0AContent-Encoding: sdch" | |
| 121 "\x0AContent-Encoding: br" | |
| 122 | |
| 123 "Date:" | |
| 124 "Fri, 01 Apr, 2050 14:14:14 GMT" | |
| 125 "Mon, 28 Mar, 2016 04:04:04 GMT" | |
| 126 "\x0ADate: Fri, 01 Apr, 2050 14:14:14 GMT" | |
| 127 "\x0ADate: Mon, 28 Mar, 2016 04:04:04 GMT" | |
| 128 | |
| 129 "Last-Modified:" | |
| 130 "\x0ALast-Modified: Fri, 01 Apr, 2050 14:14:14 GMT" | |
| 131 "\x0ALast-Modified: Mon, 28 Mar, 2016 04:04:04 GMT" | |
| 132 | |
| 133 "Expires:" | |
| 134 "\x0AExpires: Fri, 01 Apr, 2050 14:14:14 GMT" | |
| 135 "\x0AExpires: Mon, 28 Mar, 2016 04:04:04 GMT" | |
| 136 | |
| 137 "Set-Cookie:" | |
| 138 "Expires" | |
| 139 "Max-Age" | |
| 140 "Domain" | |
| 141 "Path" | |
| 142 "Secure" | |
| 143 "HttpOnly" | |
| 144 "Priority" | |
| 145 "Low" | |
| 146 "Medium" | |
| 147 "High" | |
| 148 "SameSite" | |
| 149 "Strict" | |
| 150 "Lax" | |
| 151 "\x0ASet-Cookie: foo=bar" | |
| 152 "\x0ASet-Cookie: foo2=bar2;HttpOnly;Priority=Low;SameSite=Strict;Path=/" | |
| 153 "\x0ASet-Cookie: foo=chicken;SameSite=Lax" | |
| 154 | |
| 155 "Strict-Transport-Security:" | |
| 156 "includeSubDomains" | |
| 157 | |
| 158 "Vary:" | |
| 159 "\x0AVary: Cookie" | |
| 160 "\x0AVary: Age" | |
| 161 | |
| 162 "ETag:" | |
| 163 "\x0AETag: jumboshrimp" | |
| OLD | NEW |