GD32F450_BMC_BaseCode/app/goahead-3.6.5/test/security/traversal.es.tst

/*
    Test directory traversal
 */

const HTTP = tget('TM_HTTP') || "127.0.0.1:8080"

http = new Http
http.get(HTTP + "/../auth.conf")
ttrue(http.status == 400)
http.close()

http.get(HTTP + "/../../index.html")
ttrue(http.status == 400)
http.close()

/* Test windows '\' delimiter */
http.get(HTTP + "/..%5Cauth.conf")
ttrue(http.status == 400)
http.close()

http.get(HTTP + "/../../../../../.x/.x/.x/.x/.x/.x/etc/passwd")
ttrue(http.status == 400)
http.close()