diff options
Diffstat (limited to 'tests/requests')
| -rw-r--r-- | tests/requests/tests.py | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/tests/requests/tests.py b/tests/requests/tests.py index 8a0b32d1c0..3a3d7e7733 100644 --- a/tests/requests/tests.py +++ b/tests/requests/tests.py @@ -502,6 +502,18 @@ class RequestsTests(SimpleTestCase): with self.assertRaises(UnreadablePostError): request.FILES + @override_settings(ALLOWED_HOSTS=['example.com']) + def test_get_raw_uri(self): + factory = RequestFactory(HTTP_HOST='evil.com') + request = factory.get('////absolute-uri') + self.assertEqual(request.get_raw_uri(), 'http://evil.com//absolute-uri') + + request = factory.get('/?foo=bar') + self.assertEqual(request.get_raw_uri(), 'http://evil.com/?foo=bar') + + request = factory.get('/path/with:colons') + self.assertEqual(request.get_raw_uri(), 'http://evil.com/path/with:colons') + class HostValidationTests(SimpleTestCase): poisoned_hosts = [ |