Make the default HTTP server configuration more secure

tests/standalone/io/http_server_test.dart

 // Copyright (c) 2013, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 import "dart:async";
 import "dart:typed_data";
 import "dart:io";
 
 import "package:async_helper/async_helper.dart";
 import "package:expect/expect.dart";
 
+void testDefaultResponseHeaders() {

[Anders Johnsen, 2014/08/08 06:15:45]

Also test actual changing the headers, including encoding, contentLength and
chunkedEncoding.

Add test of default encoding being UTF8 now and that clearing contentType will
make it Latin1.

[Søren Gjesse, 2014/08/11 14:10:09]

Done.

+  HttpServer.bind("127.0.0.1", 0).then((server) {
+    Expect.listEquals(server.defaultResponseHeaders[HttpHeaders.CONTENT_TYPE],
+                      ['text/plain; charset=utf-8']);
+    Expect.listEquals(server.defaultResponseHeaders['X-Frame-Options'],
+                      ['SAMEORIGIN']);
+    Expect.listEquals(server.defaultResponseHeaders['X-Content-Type-Options'],
+                      ['nosniff']);
+    Expect.listEquals(server.defaultResponseHeaders['X-XSS-Protection'],
+                      ['1; mode=block']);
+    server.close();
+  });
+}
+
 void testListenOn() {
   ServerSocket socket;
   HttpServer server;
 
   void test(void onDone()) {
     Expect.equals(socket.port, server.port);
 
     HttpClient client = new HttpClient();
     client.get("127.0.0.1", socket.port, "/")
       .then((request) {
@@ skipping 108 matching lines @@
     client.get("127.0.0.1", server.port, "/")
         .then((request) => request.close())
         .then((response) {
           response.listen((_) {}).cancel();
         });
   });
 }
 
 
 void main() {
+  testDefaultResponseHeaders();
   testListenOn();
   testHttpServerZone();
   testHttpServerZoneError();
   testHttpServerClientClose();
 }