Make the default HTTP server configuration more secure

tests/standalone/io/http_server_test.dart

Index: tests/standalone/io/http_server_test.dart
diff --git a/tests/standalone/io/http_server_test.dart b/tests/standalone/io/http_server_test.dart
index f66450129265114cbf3b1cdb8a0a8152b38a9652..445fc5229a6e393736071f4eb870061c19b437fd 100644
--- a/tests/standalone/io/http_server_test.dart
+++ b/tests/standalone/io/http_server_test.dart
@@ -9,6 +9,20 @@ import "dart:io";
 import "package:async_helper/async_helper.dart";
 import "package:expect/expect.dart";
 
+void testDefaultResponseHeaders() {

[Anders Johnsen, 2014/08/08 06:15:45]

Also test actual changing the headers, including encoding, contentLength and
chunkedEncoding.

Add test of default encoding being UTF8 now and that clearing contentType will
make it Latin1.

[Søren Gjesse, 2014/08/11 14:10:09]

Done.

+  HttpServer.bind("127.0.0.1", 0).then((server) {
+    Expect.listEquals(server.defaultResponseHeaders[HttpHeaders.CONTENT_TYPE],
+                      ['text/plain; charset=utf-8']);
+    Expect.listEquals(server.defaultResponseHeaders['X-Frame-Options'],
+                      ['SAMEORIGIN']);
+    Expect.listEquals(server.defaultResponseHeaders['X-Content-Type-Options'],
+                      ['nosniff']);
+    Expect.listEquals(server.defaultResponseHeaders['X-XSS-Protection'],
+                      ['1; mode=block']);
+    server.close();
+  });
+}
+
 void testListenOn() {
   ServerSocket socket;
   HttpServer server;
@@ -137,6 +151,7 @@ void testHttpServerClientClose() {
 
 
 void main() {
+  testDefaultResponseHeaders();
   testListenOn();
   testHttpServerZone();
   testHttpServerZoneError();