Additional bad authority tests

jetty · Nov 6, 2024 · 72f7025 · 72f7025
1 parent 0091bb4
commit 72f7025
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/jetty-core/jetty-http/src/test/java/org/eclipse/jetty/http/HttpURITest.java b/jetty-core/jetty-http/src/test/java/org/eclipse/jetty/http/HttpURITest.java
@@ -1232,6 +1232,15 @@ public static Stream<String> badAuthorities()
             "https://[notIpv6]/",
             "https://bad[0::1::2::3::4]/",
 
+            "http://[fe80::1%25eth0]/",
+            "http://[fe80::1%251]/",
+
+            "http://[vulndetector.com]",
+            "http://hostone.com@[vulndetector.com]#hosttwo.com/",
+            "http://hostone.com:80@[vulndetector.com]/",
+            "http://[vulndetector.com]#@normal.com",
+            "http://hostone.com\\\\[vulndetector.com]/",
+
             // Ambiguous empty path
             "http://localhost;param",
             "http://localhost:8080;param"