mirror of
https://github.com/projectdiscovery/nuclei
synced 2026-06-08 16:50:47 +00:00
Dwi Siswanto
b84480ae18
Fix ambiguous interpretation of IPv6 addresses like "::1:8065" by bracketing them before URL formation to make sure they are treated as hosts rather than "host:port" pairs. Close #6960 Signed-off-by: Dwi Siswanto <git@dw1.io>
97 lines
2.4 KiB
Go
97 lines
2.4 KiB
Go
package utils
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestDetermineSchemeOrder(t *testing.T) {
|
|
type testCase struct {
|
|
input string
|
|
expected []string
|
|
}
|
|
|
|
tests := []testCase{
|
|
// No port or uncommon ports should return https first
|
|
{"example.com", []string{"https", "http"}},
|
|
{"example.com:443", []string{"https", "http"}},
|
|
{"127.0.0.1", []string{"https", "http"}},
|
|
{"[fe80::1]:443", []string{"https", "http"}},
|
|
// Common HTTP ports should return http first
|
|
{"example.com:80", []string{"http", "https"}},
|
|
{"example.com:8080", []string{"http", "https"}},
|
|
{"127.0.0.1:80", []string{"http", "https"}},
|
|
{"127.0.0.1:8080", []string{"http", "https"}},
|
|
{"fe80::1", []string{"https", "http"}},
|
|
{"[fe80::1]:80", []string{"http", "https"}},
|
|
{"[fe80::1]:8080", []string{"http", "https"}},
|
|
}
|
|
|
|
for _, tc := range tests {
|
|
t.Run(tc.input, func(t *testing.T) {
|
|
actual := determineSchemeOrder(tc.input)
|
|
require.Equal(t, tc.expected, actual)
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestDetermineSchemeOrderWithHighPorts(t *testing.T) {
|
|
type testCase struct {
|
|
input string
|
|
expected []string
|
|
}
|
|
|
|
tests := []testCase{
|
|
// Ports > 1024 should return http first
|
|
{"example.com:2048", []string{"http", "https"}},
|
|
{"example.com:8081", []string{"http", "https"}},
|
|
{"[fe80::1]:2048", []string{"http", "https"}},
|
|
{"[fe80::1]:12345", []string{"http", "https"}},
|
|
}
|
|
|
|
for _, tc := range tests {
|
|
t.Run(tc.input, func(t *testing.T) {
|
|
actual := determineSchemeOrder(tc.input)
|
|
require.Equal(t, tc.expected, actual)
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestDetermineSchemeOrderAmbiguousIPv6Literal(t *testing.T) {
|
|
tests := []struct {
|
|
input string
|
|
expected []string
|
|
}{
|
|
{"::1:8065", []string{"https", "http"}},
|
|
{"[::1]:8065", []string{"http", "https"}},
|
|
}
|
|
|
|
for _, tc := range tests {
|
|
t.Run(tc.input, func(t *testing.T) {
|
|
actual := determineSchemeOrder(normalizeProbeInput(tc.input))
|
|
require.Equal(t, tc.expected, actual)
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestNormalizeProbeInput(t *testing.T) {
|
|
tests := []struct {
|
|
input string
|
|
expected string
|
|
}{
|
|
{"::1:8065", "[::1:8065]"},
|
|
{"fe80::1", "[fe80::1]"},
|
|
{"[::1]:8065", "[::1]:8065"},
|
|
{"127.0.0.1:8080", "127.0.0.1:8080"},
|
|
{"example.com:443", "example.com:443"},
|
|
}
|
|
|
|
for _, tc := range tests {
|
|
t.Run(tc.input, func(t *testing.T) {
|
|
actual := normalizeProbeInput(tc.input)
|
|
require.Equal(t, tc.expected, actual)
|
|
})
|
|
}
|
|
}
|