From 1904022f91d0e987d972359d98993422db11ab3f Mon Sep 17 00:00:00 2001 From: Lukas Klein Date: Wed, 11 Feb 2015 11:09:51 +0100 Subject: [1.8.x] Fixed #24321 -- Improved `utils.http.same_origin` compliance with RFC6454 Backport of 93b3ef9b2e from master. --- tests/utils_tests/test_http.py | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'tests/utils_tests') diff --git a/tests/utils_tests/test_http.py b/tests/utils_tests/test_http.py index 19bfa79f1a..7e48fe70a7 100644 --- a/tests/utils_tests/test_http.py +++ b/tests/utils_tests/test_http.py @@ -18,6 +18,9 @@ class TestUtilsHttp(unittest.TestCase): self.assertTrue(http.same_origin('http://foo.com/', 'http://foo.com')) # With port self.assertTrue(http.same_origin('https://foo.com:8000', 'https://foo.com:8000/')) + # No port given but according to RFC6454 still the same origin + self.assertTrue(http.same_origin('http://foo.com', 'http://foo.com:80/')) + self.assertTrue(http.same_origin('https://foo.com', 'https://foo.com:443/')) def test_same_origin_false(self): # Different scheme @@ -28,6 +31,9 @@ class TestUtilsHttp(unittest.TestCase): self.assertFalse(http.same_origin('http://foo.com', 'http://foo.com.evil.com')) # Different port self.assertFalse(http.same_origin('http://foo.com:8000', 'http://foo.com:8001')) + # No port given + self.assertFalse(http.same_origin('http://foo.com', 'http://foo.com:8000/')) + self.assertFalse(http.same_origin('https://foo.com', 'https://foo.com:8000/')) def test_urlencode(self): # 2-tuples (the norm) -- cgit v1.3