leyline-http 0.1.5

HTTP client that impersonates Chrome, Firefox, and Safari on the wire: TLS (JA3/JA4), HTTP/2, and HTTP/3 fingerprints
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

use super::{name, value};
use http::Method;

#[test]
fn method_rejects_crlf() {
    Method::from_bytes(b"GET").expect("expected Ok");
    Method::from_bytes(b"GET\r\nHost: evil").expect_err("expected Err");
    Method::from_bytes(b"").expect_err("expected Err");
    Method::from_bytes(b"GET /").expect_err("expected Err");
}

#[test]
fn header_rejects_crlf_injection() {
    name("x-request-id").expect("expected Ok");
    value("1").expect("expected Ok");
    value("1\r\nHost: evil").expect_err("expected Err");
    name("x-a\r\nHost").expect_err("expected Err");
    name("x a").expect_err("expected Err");
    name("x-a\n").expect_err("expected Err");
    value("a\nb").expect_err("expected Err");
}