diff --git a/jetty-core/jetty-http/src/test/java/org/eclipse/jetty/http/HttpURITest.java b/jetty-core/jetty-http/src/test/java/org/eclipse/jetty/http/HttpURITest.java index c9f14d8949ca..4fdf1acd6e5f 100644 --- a/jetty-core/jetty-http/src/test/java/org/eclipse/jetty/http/HttpURITest.java +++ b/jetty-core/jetty-http/src/test/java/org/eclipse/jetty/http/HttpURITest.java @@ -1232,6 +1232,15 @@ public static Stream badAuthorities() "https://[notIpv6]/", "https://bad[0::1::2::3::4]/", + "http://[fe80::1%25eth0]/", + "http://[fe80::1%251]/", + + "http://[vulndetector.com]", + "http://hostone.com@[vulndetector.com]#hosttwo.com/", + "http://hostone.com:80@[vulndetector.com]/", + "http://[vulndetector.com]#@normal.com", + "http://hostone.com\\\\[vulndetector.com]/", + // Ambiguous empty path "http://localhost;param", "http://localhost:8080;param"