1'use strict'; 2 3const common = require('../common'); 4if (!common.hasCrypto) 5 common.skip('missing crypto'); 6const assert = require('assert'); 7const http2 = require('http2'); 8 9const server = http2.createServer(); 10 11const src = Object.create(null); 12src.accept = [ 'abc', 'def' ]; 13src.Accept = 'ghijklmnop'; 14src['www-authenticate'] = 'foo'; 15src['WWW-Authenticate'] = 'bar'; 16src['WWW-AUTHENTICATE'] = 'baz'; 17src['proxy-authenticate'] = 'foo'; 18src['Proxy-Authenticate'] = 'bar'; 19src['PROXY-AUTHENTICATE'] = 'baz'; 20src['x-foo'] = 'foo'; 21src['X-Foo'] = 'bar'; 22src['X-FOO'] = 'baz'; 23src.constructor = 'foo'; 24src.Constructor = 'bar'; 25src.CONSTRUCTOR = 'baz'; 26// eslint-disable-next-line no-proto 27src.__proto__ = 'foo'; 28src.__PROTO__ = 'bar'; 29src.__Proto__ = 'baz'; 30 31function checkHeaders(headers) { 32 assert.deepStrictEqual(headers.accept, 33 'abc, def, ghijklmnop'); 34 assert.deepStrictEqual(headers['www-authenticate'], 35 'foo, bar, baz'); 36 assert.deepStrictEqual(headers['proxy-authenticate'], 37 'foo, bar, baz'); 38 assert.deepStrictEqual(headers['x-foo'], 'foo, bar, baz'); 39 assert.deepStrictEqual(headers.constructor, 'foo, bar, baz'); 40 // eslint-disable-next-line no-proto 41 assert.deepStrictEqual(headers.__proto__, 'foo, bar, baz'); 42} 43 44server.on('stream', common.mustCall((stream, headers) => { 45 assert.strictEqual(headers[':path'], '/'); 46 assert.strictEqual(headers[':scheme'], 'http'); 47 assert.strictEqual(headers[':method'], 'GET'); 48 checkHeaders(headers); 49 stream.respond(src); 50 stream.end(); 51})); 52 53server.listen(0, common.mustCall(() => { 54 const client = http2.connect(`http://localhost:${server.address().port}`); 55 const req = client.request(src); 56 req.on('response', common.mustCall(checkHeaders)); 57 req.on('close', common.mustCall(() => { 58 server.close(); 59 client.close(); 60 })); 61})); 62