RequestTest.php 105 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626
  1. <?php
  2. /*
  3. * This file is part of the Symfony package.
  4. *
  5. * (c) Fabien Potencier <fabien@symfony.com>
  6. *
  7. * For the full copyright and license information, please view the LICENSE
  8. * file that was distributed with this source code.
  9. */
  10. namespace Symfony\Component\HttpFoundation\Tests;
  11. use PHPUnit\Framework\TestCase;
  12. use Symfony\Bridge\PhpUnit\ExpectDeprecationTrait;
  13. use Symfony\Component\HttpFoundation\Exception\ConflictingHeadersException;
  14. use Symfony\Component\HttpFoundation\Exception\JsonException;
  15. use Symfony\Component\HttpFoundation\Exception\SuspiciousOperationException;
  16. use Symfony\Component\HttpFoundation\InputBag;
  17. use Symfony\Component\HttpFoundation\ParameterBag;
  18. use Symfony\Component\HttpFoundation\Request;
  19. use Symfony\Component\HttpFoundation\Session\Session;
  20. use Symfony\Component\HttpFoundation\Session\Storage\MockArraySessionStorage;
  21. class RequestTest extends TestCase
  22. {
  23. use ExpectDeprecationTrait;
  24. protected function tearDown(): void
  25. {
  26. Request::setTrustedProxies([], -1);
  27. Request::setTrustedHosts([]);
  28. }
  29. public function testInitialize()
  30. {
  31. $request = new Request();
  32. $request->initialize(['foo' => 'bar']);
  33. $this->assertEquals('bar', $request->query->get('foo'), '->initialize() takes an array of query parameters as its first argument');
  34. $request->initialize([], ['foo' => 'bar']);
  35. $this->assertEquals('bar', $request->request->get('foo'), '->initialize() takes an array of request parameters as its second argument');
  36. $request->initialize([], [], ['foo' => 'bar']);
  37. $this->assertEquals('bar', $request->attributes->get('foo'), '->initialize() takes an array of attributes as its third argument');
  38. $request->initialize([], [], [], [], [], ['HTTP_FOO' => 'bar']);
  39. $this->assertEquals('bar', $request->headers->get('FOO'), '->initialize() takes an array of HTTP headers as its sixth argument');
  40. }
  41. public function testGetLocale()
  42. {
  43. $request = new Request();
  44. $request->setLocale('pl');
  45. $locale = $request->getLocale();
  46. $this->assertEquals('pl', $locale);
  47. }
  48. public function testGetUser()
  49. {
  50. $request = Request::create('http://user:password@test.com');
  51. $user = $request->getUser();
  52. $this->assertEquals('user', $user);
  53. }
  54. public function testGetPassword()
  55. {
  56. $request = Request::create('http://user:password@test.com');
  57. $password = $request->getPassword();
  58. $this->assertEquals('password', $password);
  59. }
  60. public function testIsNoCache()
  61. {
  62. $request = new Request();
  63. $isNoCache = $request->isNoCache();
  64. $this->assertFalse($isNoCache);
  65. }
  66. public function testGetContentType()
  67. {
  68. $request = new Request();
  69. $contentType = $request->getContentType();
  70. $this->assertNull($contentType);
  71. }
  72. public function testSetDefaultLocale()
  73. {
  74. $request = new Request();
  75. $request->setDefaultLocale('pl');
  76. $locale = $request->getLocale();
  77. $this->assertEquals('pl', $locale);
  78. }
  79. public function testCreate()
  80. {
  81. $request = Request::create('http://test.com/foo?bar=baz');
  82. $this->assertEquals('http://test.com/foo?bar=baz', $request->getUri());
  83. $this->assertEquals('/foo', $request->getPathInfo());
  84. $this->assertEquals('bar=baz', $request->getQueryString());
  85. $this->assertEquals(80, $request->getPort());
  86. $this->assertEquals('test.com', $request->getHttpHost());
  87. $this->assertFalse($request->isSecure());
  88. $request = Request::create('http://test.com/foo', 'GET', ['bar' => 'baz']);
  89. $this->assertEquals('http://test.com/foo?bar=baz', $request->getUri());
  90. $this->assertEquals('/foo', $request->getPathInfo());
  91. $this->assertEquals('bar=baz', $request->getQueryString());
  92. $this->assertEquals(80, $request->getPort());
  93. $this->assertEquals('test.com', $request->getHttpHost());
  94. $this->assertFalse($request->isSecure());
  95. $request = Request::create('http://test.com/foo?bar=foo', 'GET', ['bar' => 'baz']);
  96. $this->assertEquals('http://test.com/foo?bar=baz', $request->getUri());
  97. $this->assertEquals('/foo', $request->getPathInfo());
  98. $this->assertEquals('bar=baz', $request->getQueryString());
  99. $this->assertEquals(80, $request->getPort());
  100. $this->assertEquals('test.com', $request->getHttpHost());
  101. $this->assertFalse($request->isSecure());
  102. $request = Request::create('https://test.com/foo?foo.bar=baz');
  103. $this->assertEquals('https://test.com/foo?foo.bar=baz', $request->getUri());
  104. $this->assertEquals('/foo', $request->getPathInfo());
  105. $this->assertEquals('foo.bar=baz', $request->getQueryString());
  106. $this->assertEquals(443, $request->getPort());
  107. $this->assertEquals('test.com', $request->getHttpHost());
  108. $this->assertTrue($request->isSecure());
  109. $this->assertSame(['foo_bar' => 'baz'], $request->query->all());
  110. $request = Request::create('test.com:90/foo');
  111. $this->assertEquals('http://test.com:90/foo', $request->getUri());
  112. $this->assertEquals('/foo', $request->getPathInfo());
  113. $this->assertEquals('test.com', $request->getHost());
  114. $this->assertEquals('test.com:90', $request->getHttpHost());
  115. $this->assertEquals(90, $request->getPort());
  116. $this->assertFalse($request->isSecure());
  117. $request = Request::create('https://test.com:90/foo');
  118. $this->assertEquals('https://test.com:90/foo', $request->getUri());
  119. $this->assertEquals('/foo', $request->getPathInfo());
  120. $this->assertEquals('test.com', $request->getHost());
  121. $this->assertEquals('test.com:90', $request->getHttpHost());
  122. $this->assertEquals(90, $request->getPort());
  123. $this->assertTrue($request->isSecure());
  124. $request = Request::create('https://127.0.0.1:90/foo');
  125. $this->assertEquals('https://127.0.0.1:90/foo', $request->getUri());
  126. $this->assertEquals('/foo', $request->getPathInfo());
  127. $this->assertEquals('127.0.0.1', $request->getHost());
  128. $this->assertEquals('127.0.0.1:90', $request->getHttpHost());
  129. $this->assertEquals(90, $request->getPort());
  130. $this->assertTrue($request->isSecure());
  131. $request = Request::create('https://[::1]:90/foo');
  132. $this->assertEquals('https://[::1]:90/foo', $request->getUri());
  133. $this->assertEquals('/foo', $request->getPathInfo());
  134. $this->assertEquals('[::1]', $request->getHost());
  135. $this->assertEquals('[::1]:90', $request->getHttpHost());
  136. $this->assertEquals(90, $request->getPort());
  137. $this->assertTrue($request->isSecure());
  138. $request = Request::create('https://[::1]/foo');
  139. $this->assertEquals('https://[::1]/foo', $request->getUri());
  140. $this->assertEquals('/foo', $request->getPathInfo());
  141. $this->assertEquals('[::1]', $request->getHost());
  142. $this->assertEquals('[::1]', $request->getHttpHost());
  143. $this->assertEquals(443, $request->getPort());
  144. $this->assertTrue($request->isSecure());
  145. $json = '{"jsonrpc":"2.0","method":"echo","id":7,"params":["Hello World"]}';
  146. $request = Request::create('http://example.com/jsonrpc', 'POST', [], [], [], [], $json);
  147. $this->assertEquals($json, $request->getContent());
  148. $this->assertFalse($request->isSecure());
  149. $request = Request::create('http://test.com');
  150. $this->assertEquals('http://test.com/', $request->getUri());
  151. $this->assertEquals('/', $request->getPathInfo());
  152. $this->assertEquals('', $request->getQueryString());
  153. $this->assertEquals(80, $request->getPort());
  154. $this->assertEquals('test.com', $request->getHttpHost());
  155. $this->assertFalse($request->isSecure());
  156. $request = Request::create('http://test.com?test=1');
  157. $this->assertEquals('http://test.com/?test=1', $request->getUri());
  158. $this->assertEquals('/', $request->getPathInfo());
  159. $this->assertEquals('test=1', $request->getQueryString());
  160. $this->assertEquals(80, $request->getPort());
  161. $this->assertEquals('test.com', $request->getHttpHost());
  162. $this->assertFalse($request->isSecure());
  163. $request = Request::create('http://test.com:90/?test=1');
  164. $this->assertEquals('http://test.com:90/?test=1', $request->getUri());
  165. $this->assertEquals('/', $request->getPathInfo());
  166. $this->assertEquals('test=1', $request->getQueryString());
  167. $this->assertEquals(90, $request->getPort());
  168. $this->assertEquals('test.com:90', $request->getHttpHost());
  169. $this->assertFalse($request->isSecure());
  170. $request = Request::create('http://username:password@test.com');
  171. $this->assertEquals('http://test.com/', $request->getUri());
  172. $this->assertEquals('/', $request->getPathInfo());
  173. $this->assertEquals('', $request->getQueryString());
  174. $this->assertEquals(80, $request->getPort());
  175. $this->assertEquals('test.com', $request->getHttpHost());
  176. $this->assertEquals('username', $request->getUser());
  177. $this->assertEquals('password', $request->getPassword());
  178. $this->assertFalse($request->isSecure());
  179. $request = Request::create('http://username@test.com');
  180. $this->assertEquals('http://test.com/', $request->getUri());
  181. $this->assertEquals('/', $request->getPathInfo());
  182. $this->assertEquals('', $request->getQueryString());
  183. $this->assertEquals(80, $request->getPort());
  184. $this->assertEquals('test.com', $request->getHttpHost());
  185. $this->assertEquals('username', $request->getUser());
  186. $this->assertSame('', $request->getPassword());
  187. $this->assertFalse($request->isSecure());
  188. $request = Request::create('http://test.com/?foo');
  189. $this->assertEquals('/?foo', $request->getRequestUri());
  190. $this->assertEquals(['foo' => ''], $request->query->all());
  191. // assume rewrite rule: (.*) --> app/app.php; app/ is a symlink to a symfony web/ directory
  192. $request = Request::create('http://test.com/apparthotel-1234', 'GET', [], [], [],
  193. [
  194. 'DOCUMENT_ROOT' => '/var/www/www.test.com',
  195. 'SCRIPT_FILENAME' => '/var/www/www.test.com/app/app.php',
  196. 'SCRIPT_NAME' => '/app/app.php',
  197. 'PHP_SELF' => '/app/app.php/apparthotel-1234',
  198. ]);
  199. $this->assertEquals('http://test.com/apparthotel-1234', $request->getUri());
  200. $this->assertEquals('/apparthotel-1234', $request->getPathInfo());
  201. $this->assertEquals('', $request->getQueryString());
  202. $this->assertEquals(80, $request->getPort());
  203. $this->assertEquals('test.com', $request->getHttpHost());
  204. $this->assertFalse($request->isSecure());
  205. // Fragment should not be included in the URI
  206. $request = Request::create('http://test.com/foo#bar');
  207. $this->assertEquals('http://test.com/foo', $request->getUri());
  208. }
  209. public function testCreateWithRequestUri()
  210. {
  211. $request = Request::create('http://test.com:80/foo');
  212. $request->server->set('REQUEST_URI', 'http://test.com:80/foo');
  213. $this->assertEquals('http://test.com/foo', $request->getUri());
  214. $this->assertEquals('/foo', $request->getPathInfo());
  215. $this->assertEquals('test.com', $request->getHost());
  216. $this->assertEquals('test.com', $request->getHttpHost());
  217. $this->assertEquals(80, $request->getPort());
  218. $this->assertFalse($request->isSecure());
  219. $request = Request::create('http://test.com:8080/foo');
  220. $request->server->set('REQUEST_URI', 'http://test.com:8080/foo');
  221. $this->assertEquals('http://test.com:8080/foo', $request->getUri());
  222. $this->assertEquals('/foo', $request->getPathInfo());
  223. $this->assertEquals('test.com', $request->getHost());
  224. $this->assertEquals('test.com:8080', $request->getHttpHost());
  225. $this->assertEquals(8080, $request->getPort());
  226. $this->assertFalse($request->isSecure());
  227. $request = Request::create('http://test.com/foo?bar=foo', 'GET', ['bar' => 'baz']);
  228. $request->server->set('REQUEST_URI', 'http://test.com/foo?bar=foo');
  229. $this->assertEquals('http://test.com/foo?bar=baz', $request->getUri());
  230. $this->assertEquals('/foo', $request->getPathInfo());
  231. $this->assertEquals('bar=baz', $request->getQueryString());
  232. $this->assertEquals('test.com', $request->getHost());
  233. $this->assertEquals('test.com', $request->getHttpHost());
  234. $this->assertEquals(80, $request->getPort());
  235. $this->assertFalse($request->isSecure());
  236. $request = Request::create('https://test.com:443/foo');
  237. $request->server->set('REQUEST_URI', 'https://test.com:443/foo');
  238. $this->assertEquals('https://test.com/foo', $request->getUri());
  239. $this->assertEquals('/foo', $request->getPathInfo());
  240. $this->assertEquals('test.com', $request->getHost());
  241. $this->assertEquals('test.com', $request->getHttpHost());
  242. $this->assertEquals(443, $request->getPort());
  243. $this->assertTrue($request->isSecure());
  244. // Fragment should not be included in the URI
  245. $request = Request::create('http://test.com/foo#bar');
  246. $request->server->set('REQUEST_URI', 'http://test.com/foo#bar');
  247. $this->assertEquals('http://test.com/foo', $request->getUri());
  248. }
  249. /**
  250. * @dataProvider getRequestUriData
  251. */
  252. public function testGetRequestUri($serverRequestUri, $expected, $message)
  253. {
  254. $request = new Request();
  255. $request->server->add([
  256. 'REQUEST_URI' => $serverRequestUri,
  257. // For having http://test.com
  258. 'SERVER_NAME' => 'test.com',
  259. 'SERVER_PORT' => 80,
  260. ]);
  261. $this->assertSame($expected, $request->getRequestUri(), $message);
  262. $this->assertSame($expected, $request->server->get('REQUEST_URI'), 'Normalize the request URI.');
  263. }
  264. public static function getRequestUriData()
  265. {
  266. $message = 'Do not modify the path.';
  267. yield ['/foo', '/foo', $message];
  268. yield ['//bar/foo', '//bar/foo', $message];
  269. yield ['///bar/foo', '///bar/foo', $message];
  270. $message = 'Handle when the scheme, host are on REQUEST_URI.';
  271. yield ['http://test.com/foo?bar=baz', '/foo?bar=baz', $message];
  272. $message = 'Handle when the scheme, host and port are on REQUEST_URI.';
  273. yield ['http://test.com:80/foo', '/foo', $message];
  274. yield ['https://test.com:8080/foo', '/foo', $message];
  275. yield ['https://test.com:443/foo', '/foo', $message];
  276. $message = 'Fragment should not be included in the URI';
  277. yield ['http://test.com/foo#bar', '/foo', $message];
  278. yield ['/foo#bar', '/foo', $message];
  279. }
  280. public function testGetRequestUriWithoutRequiredHeader()
  281. {
  282. $expected = '';
  283. $request = new Request();
  284. $message = 'Fallback to empty URI when headers are missing.';
  285. $this->assertSame($expected, $request->getRequestUri(), $message);
  286. $this->assertSame($expected, $request->server->get('REQUEST_URI'), 'Normalize the request URI.');
  287. }
  288. public function testCreateCheckPrecedence()
  289. {
  290. // server is used by default
  291. $request = Request::create('/', 'DELETE', [], [], [], [
  292. 'HTTP_HOST' => 'example.com',
  293. 'HTTPS' => 'on',
  294. 'SERVER_PORT' => 443,
  295. 'PHP_AUTH_USER' => 'fabien',
  296. 'PHP_AUTH_PW' => 'pa$$',
  297. 'QUERY_STRING' => 'foo=bar',
  298. 'CONTENT_TYPE' => 'application/json',
  299. ]);
  300. $this->assertEquals('example.com', $request->getHost());
  301. $this->assertEquals(443, $request->getPort());
  302. $this->assertTrue($request->isSecure());
  303. $this->assertEquals('fabien', $request->getUser());
  304. $this->assertEquals('pa$$', $request->getPassword());
  305. $this->assertEquals('', $request->getQueryString());
  306. $this->assertEquals('application/json', $request->headers->get('CONTENT_TYPE'));
  307. // URI has precedence over server
  308. $request = Request::create('http://thomas:pokemon@example.net:8080/?foo=bar', 'GET', [], [], [], [
  309. 'HTTP_HOST' => 'example.com',
  310. 'HTTPS' => 'on',
  311. 'SERVER_PORT' => 443,
  312. ]);
  313. $this->assertEquals('example.net', $request->getHost());
  314. $this->assertEquals(8080, $request->getPort());
  315. $this->assertFalse($request->isSecure());
  316. $this->assertEquals('thomas', $request->getUser());
  317. $this->assertEquals('pokemon', $request->getPassword());
  318. $this->assertEquals('foo=bar', $request->getQueryString());
  319. }
  320. public function testDuplicate()
  321. {
  322. $request = new Request(['foo' => 'bar'], ['foo' => 'bar'], ['foo' => 'bar'], [], [], ['HTTP_FOO' => 'bar']);
  323. $dup = $request->duplicate();
  324. $this->assertEquals($request->query->all(), $dup->query->all(), '->duplicate() duplicates a request an copy the current query parameters');
  325. $this->assertEquals($request->request->all(), $dup->request->all(), '->duplicate() duplicates a request an copy the current request parameters');
  326. $this->assertEquals($request->attributes->all(), $dup->attributes->all(), '->duplicate() duplicates a request an copy the current attributes');
  327. $this->assertEquals($request->headers->all(), $dup->headers->all(), '->duplicate() duplicates a request an copy the current HTTP headers');
  328. $dup = $request->duplicate(['foo' => 'foobar'], ['foo' => 'foobar'], ['foo' => 'foobar'], [], [], ['HTTP_FOO' => 'foobar']);
  329. $this->assertEquals(['foo' => 'foobar'], $dup->query->all(), '->duplicate() overrides the query parameters if provided');
  330. $this->assertEquals(['foo' => 'foobar'], $dup->request->all(), '->duplicate() overrides the request parameters if provided');
  331. $this->assertEquals(['foo' => 'foobar'], $dup->attributes->all(), '->duplicate() overrides the attributes if provided');
  332. $this->assertEquals(['foo' => ['foobar']], $dup->headers->all(), '->duplicate() overrides the HTTP header if provided');
  333. }
  334. public function testDuplicateWithFormat()
  335. {
  336. $request = new Request([], [], ['_format' => 'json']);
  337. $dup = $request->duplicate();
  338. $this->assertEquals('json', $dup->getRequestFormat());
  339. $this->assertEquals('json', $dup->attributes->get('_format'));
  340. $request = new Request();
  341. $request->setRequestFormat('xml');
  342. $dup = $request->duplicate();
  343. $this->assertEquals('xml', $dup->getRequestFormat());
  344. }
  345. public function testGetPreferredFormat()
  346. {
  347. $request = new Request();
  348. $this->assertNull($request->getPreferredFormat(null));
  349. $this->assertSame('html', $request->getPreferredFormat());
  350. $this->assertSame('json', $request->getPreferredFormat('json'));
  351. $request->setRequestFormat('atom');
  352. $request->headers->set('Accept', 'application/ld+json');
  353. $this->assertSame('atom', $request->getPreferredFormat());
  354. $request = new Request();
  355. $request->headers->set('Accept', 'application/xml');
  356. $this->assertSame('xml', $request->getPreferredFormat());
  357. $request = new Request();
  358. $request->headers->set('Accept', 'application/xml');
  359. $this->assertSame('xml', $request->getPreferredFormat());
  360. $request = new Request();
  361. $request->headers->set('Accept', 'application/json;q=0.8,application/xml;q=0.9');
  362. $this->assertSame('xml', $request->getPreferredFormat());
  363. }
  364. /**
  365. * @dataProvider getFormatToMimeTypeMapProvider
  366. */
  367. public function testGetFormatFromMimeType($format, $mimeTypes)
  368. {
  369. $request = new Request();
  370. foreach ($mimeTypes as $mime) {
  371. $this->assertEquals($format, $request->getFormat($mime));
  372. }
  373. $request->setFormat($format, $mimeTypes);
  374. foreach ($mimeTypes as $mime) {
  375. $this->assertEquals($format, $request->getFormat($mime));
  376. if (null !== $format) {
  377. $this->assertEquals($mimeTypes[0], $request->getMimeType($format));
  378. }
  379. }
  380. }
  381. public function testGetFormatFromMimeTypeWithParameters()
  382. {
  383. $request = new Request();
  384. $this->assertEquals('json', $request->getFormat('application/json; charset=utf-8'));
  385. $this->assertEquals('json', $request->getFormat('application/json;charset=utf-8'));
  386. $this->assertEquals('json', $request->getFormat('application/json ; charset=utf-8'));
  387. $this->assertEquals('json', $request->getFormat('application/json ;charset=utf-8'));
  388. }
  389. /**
  390. * @dataProvider getFormatToMimeTypeMapProvider
  391. */
  392. public function testGetMimeTypeFromFormat($format, $mimeTypes)
  393. {
  394. $request = new Request();
  395. $this->assertEquals($mimeTypes[0], $request->getMimeType($format));
  396. }
  397. /**
  398. * @dataProvider getFormatToMimeTypeMapProvider
  399. */
  400. public function testGetMimeTypesFromFormat($format, $mimeTypes)
  401. {
  402. $this->assertEquals($mimeTypes, Request::getMimeTypes($format));
  403. }
  404. public function testGetMimeTypesFromInexistentFormat()
  405. {
  406. $request = new Request();
  407. $this->assertNull($request->getMimeType('foo'));
  408. $this->assertEquals([], Request::getMimeTypes('foo'));
  409. }
  410. public function testGetFormatWithCustomMimeType()
  411. {
  412. $request = new Request();
  413. $request->setFormat('custom', 'application/vnd.foo.api;myversion=2.3');
  414. $this->assertEquals('custom', $request->getFormat('application/vnd.foo.api;myversion=2.3'));
  415. }
  416. public static function getFormatToMimeTypeMapProvider()
  417. {
  418. return [
  419. ['txt', ['text/plain']],
  420. ['js', ['application/javascript', 'application/x-javascript', 'text/javascript']],
  421. ['css', ['text/css']],
  422. ['json', ['application/json', 'application/x-json']],
  423. ['jsonld', ['application/ld+json']],
  424. ['xml', ['text/xml', 'application/xml', 'application/x-xml']],
  425. ['rdf', ['application/rdf+xml']],
  426. ['atom', ['application/atom+xml']],
  427. ['form', ['application/x-www-form-urlencoded', 'multipart/form-data']],
  428. ];
  429. }
  430. public function testGetUri()
  431. {
  432. $server = [];
  433. // Standard Request on non default PORT
  434. // http://host:8080/index.php/path/info?query=string
  435. $server['HTTP_HOST'] = 'host:8080';
  436. $server['SERVER_NAME'] = 'servername';
  437. $server['SERVER_PORT'] = '8080';
  438. $server['QUERY_STRING'] = 'query=string';
  439. $server['REQUEST_URI'] = '/index.php/path/info?query=string';
  440. $server['SCRIPT_NAME'] = '/index.php';
  441. $server['PATH_INFO'] = '/path/info';
  442. $server['PATH_TRANSLATED'] = 'redirect:/index.php/path/info';
  443. $server['PHP_SELF'] = '/index_dev.php/path/info';
  444. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  445. $request = new Request();
  446. $request->initialize([], [], [], [], [], $server);
  447. $this->assertEquals('http://host:8080/index.php/path/info?query=string', $request->getUri(), '->getUri() with non default port');
  448. // Use std port number
  449. $server['HTTP_HOST'] = 'host';
  450. $server['SERVER_NAME'] = 'servername';
  451. $server['SERVER_PORT'] = '80';
  452. $request->initialize([], [], [], [], [], $server);
  453. $this->assertEquals('http://host/index.php/path/info?query=string', $request->getUri(), '->getUri() with default port');
  454. // Without HOST HEADER
  455. unset($server['HTTP_HOST']);
  456. $server['SERVER_NAME'] = 'servername';
  457. $server['SERVER_PORT'] = '80';
  458. $request->initialize([], [], [], [], [], $server);
  459. $this->assertEquals('http://servername/index.php/path/info?query=string', $request->getUri(), '->getUri() with default port without HOST_HEADER');
  460. // Request with URL REWRITING (hide index.php)
  461. // RewriteCond %{REQUEST_FILENAME} !-f
  462. // RewriteRule ^(.*)$ index.php [QSA,L]
  463. // http://host:8080/path/info?query=string
  464. $server = [];
  465. $server['HTTP_HOST'] = 'host:8080';
  466. $server['SERVER_NAME'] = 'servername';
  467. $server['SERVER_PORT'] = '8080';
  468. $server['REDIRECT_QUERY_STRING'] = 'query=string';
  469. $server['REDIRECT_URL'] = '/path/info';
  470. $server['SCRIPT_NAME'] = '/index.php';
  471. $server['QUERY_STRING'] = 'query=string';
  472. $server['REQUEST_URI'] = '/path/info?toto=test&1=1';
  473. $server['SCRIPT_NAME'] = '/index.php';
  474. $server['PHP_SELF'] = '/index.php';
  475. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  476. $request->initialize([], [], [], [], [], $server);
  477. $this->assertEquals('http://host:8080/path/info?query=string', $request->getUri(), '->getUri() with rewrite');
  478. // Use std port number
  479. // http://host/path/info?query=string
  480. $server['HTTP_HOST'] = 'host';
  481. $server['SERVER_NAME'] = 'servername';
  482. $server['SERVER_PORT'] = '80';
  483. $request->initialize([], [], [], [], [], $server);
  484. $this->assertEquals('http://host/path/info?query=string', $request->getUri(), '->getUri() with rewrite and default port');
  485. // Without HOST HEADER
  486. unset($server['HTTP_HOST']);
  487. $server['SERVER_NAME'] = 'servername';
  488. $server['SERVER_PORT'] = '80';
  489. $request->initialize([], [], [], [], [], $server);
  490. $this->assertEquals('http://servername/path/info?query=string', $request->getUri(), '->getUri() with rewrite, default port without HOST_HEADER');
  491. // With encoded characters
  492. $server = [
  493. 'HTTP_HOST' => 'host:8080',
  494. 'SERVER_NAME' => 'servername',
  495. 'SERVER_PORT' => '8080',
  496. 'QUERY_STRING' => 'query=string',
  497. 'REQUEST_URI' => '/ba%20se/index_dev.php/foo%20bar/in+fo?query=string',
  498. 'SCRIPT_NAME' => '/ba se/index_dev.php',
  499. 'PATH_TRANSLATED' => 'redirect:/index.php/foo bar/in+fo',
  500. 'PHP_SELF' => '/ba se/index_dev.php/path/info',
  501. 'SCRIPT_FILENAME' => '/some/where/ba se/index_dev.php',
  502. ];
  503. $request->initialize([], [], [], [], [], $server);
  504. $this->assertEquals(
  505. 'http://host:8080/ba%20se/index_dev.php/foo%20bar/in+fo?query=string',
  506. $request->getUri()
  507. );
  508. // with user info
  509. $server['PHP_AUTH_USER'] = 'fabien';
  510. $request->initialize([], [], [], [], [], $server);
  511. $this->assertEquals('http://host:8080/ba%20se/index_dev.php/foo%20bar/in+fo?query=string', $request->getUri());
  512. $server['PHP_AUTH_PW'] = 'symfony';
  513. $request->initialize([], [], [], [], [], $server);
  514. $this->assertEquals('http://host:8080/ba%20se/index_dev.php/foo%20bar/in+fo?query=string', $request->getUri());
  515. }
  516. public function testGetUriForPath()
  517. {
  518. $request = Request::create('http://test.com/foo?bar=baz');
  519. $this->assertEquals('http://test.com/some/path', $request->getUriForPath('/some/path'));
  520. $request = Request::create('http://test.com:90/foo?bar=baz');
  521. $this->assertEquals('http://test.com:90/some/path', $request->getUriForPath('/some/path'));
  522. $request = Request::create('https://test.com/foo?bar=baz');
  523. $this->assertEquals('https://test.com/some/path', $request->getUriForPath('/some/path'));
  524. $request = Request::create('https://test.com:90/foo?bar=baz');
  525. $this->assertEquals('https://test.com:90/some/path', $request->getUriForPath('/some/path'));
  526. $server = [];
  527. // Standard Request on non default PORT
  528. // http://host:8080/index.php/path/info?query=string
  529. $server['HTTP_HOST'] = 'host:8080';
  530. $server['SERVER_NAME'] = 'servername';
  531. $server['SERVER_PORT'] = '8080';
  532. $server['QUERY_STRING'] = 'query=string';
  533. $server['REQUEST_URI'] = '/index.php/path/info?query=string';
  534. $server['SCRIPT_NAME'] = '/index.php';
  535. $server['PATH_INFO'] = '/path/info';
  536. $server['PATH_TRANSLATED'] = 'redirect:/index.php/path/info';
  537. $server['PHP_SELF'] = '/index_dev.php/path/info';
  538. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  539. $request = new Request();
  540. $request->initialize([], [], [], [], [], $server);
  541. $this->assertEquals('http://host:8080/index.php/some/path', $request->getUriForPath('/some/path'), '->getUriForPath() with non default port');
  542. // Use std port number
  543. $server['HTTP_HOST'] = 'host';
  544. $server['SERVER_NAME'] = 'servername';
  545. $server['SERVER_PORT'] = '80';
  546. $request->initialize([], [], [], [], [], $server);
  547. $this->assertEquals('http://host/index.php/some/path', $request->getUriForPath('/some/path'), '->getUriForPath() with default port');
  548. // Without HOST HEADER
  549. unset($server['HTTP_HOST']);
  550. $server['SERVER_NAME'] = 'servername';
  551. $server['SERVER_PORT'] = '80';
  552. $request->initialize([], [], [], [], [], $server);
  553. $this->assertEquals('http://servername/index.php/some/path', $request->getUriForPath('/some/path'), '->getUriForPath() with default port without HOST_HEADER');
  554. // Request with URL REWRITING (hide index.php)
  555. // RewriteCond %{REQUEST_FILENAME} !-f
  556. // RewriteRule ^(.*)$ index.php [QSA,L]
  557. // http://host:8080/path/info?query=string
  558. $server = [];
  559. $server['HTTP_HOST'] = 'host:8080';
  560. $server['SERVER_NAME'] = 'servername';
  561. $server['SERVER_PORT'] = '8080';
  562. $server['REDIRECT_QUERY_STRING'] = 'query=string';
  563. $server['REDIRECT_URL'] = '/path/info';
  564. $server['SCRIPT_NAME'] = '/index.php';
  565. $server['QUERY_STRING'] = 'query=string';
  566. $server['REQUEST_URI'] = '/path/info?toto=test&1=1';
  567. $server['SCRIPT_NAME'] = '/index.php';
  568. $server['PHP_SELF'] = '/index.php';
  569. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  570. $request->initialize([], [], [], [], [], $server);
  571. $this->assertEquals('http://host:8080/some/path', $request->getUriForPath('/some/path'), '->getUri() with rewrite');
  572. // Use std port number
  573. // http://host/path/info?query=string
  574. $server['HTTP_HOST'] = 'host';
  575. $server['SERVER_NAME'] = 'servername';
  576. $server['SERVER_PORT'] = '80';
  577. $request->initialize([], [], [], [], [], $server);
  578. $this->assertEquals('http://host/some/path', $request->getUriForPath('/some/path'), '->getUriForPath() with rewrite and default port');
  579. // Without HOST HEADER
  580. unset($server['HTTP_HOST']);
  581. $server['SERVER_NAME'] = 'servername';
  582. $server['SERVER_PORT'] = '80';
  583. $request->initialize([], [], [], [], [], $server);
  584. $this->assertEquals('http://servername/some/path', $request->getUriForPath('/some/path'), '->getUriForPath() with rewrite, default port without HOST_HEADER');
  585. $this->assertEquals('servername', $request->getHttpHost());
  586. // with user info
  587. $server['PHP_AUTH_USER'] = 'fabien';
  588. $request->initialize([], [], [], [], [], $server);
  589. $this->assertEquals('http://servername/some/path', $request->getUriForPath('/some/path'));
  590. $server['PHP_AUTH_PW'] = 'symfony';
  591. $request->initialize([], [], [], [], [], $server);
  592. $this->assertEquals('http://servername/some/path', $request->getUriForPath('/some/path'));
  593. }
  594. /**
  595. * @dataProvider getRelativeUriForPathData
  596. */
  597. public function testGetRelativeUriForPath($expected, $pathinfo, $path)
  598. {
  599. $this->assertEquals($expected, Request::create($pathinfo)->getRelativeUriForPath($path));
  600. }
  601. public static function getRelativeUriForPathData()
  602. {
  603. return [
  604. ['me.png', '/foo', '/me.png'],
  605. ['../me.png', '/foo/bar', '/me.png'],
  606. ['me.png', '/foo/bar', '/foo/me.png'],
  607. ['../baz/me.png', '/foo/bar/b', '/foo/baz/me.png'],
  608. ['../../fooz/baz/me.png', '/foo/bar/b', '/fooz/baz/me.png'],
  609. ['baz/me.png', '/foo/bar/b', 'baz/me.png'],
  610. ];
  611. }
  612. public function testGetUserInfo()
  613. {
  614. $request = new Request();
  615. $server = ['PHP_AUTH_USER' => 'fabien'];
  616. $request->initialize([], [], [], [], [], $server);
  617. $this->assertEquals('fabien', $request->getUserInfo());
  618. $server['PHP_AUTH_USER'] = '0';
  619. $request->initialize([], [], [], [], [], $server);
  620. $this->assertEquals('0', $request->getUserInfo());
  621. $server['PHP_AUTH_PW'] = '0';
  622. $request->initialize([], [], [], [], [], $server);
  623. $this->assertEquals('0:0', $request->getUserInfo());
  624. }
  625. public function testGetSchemeAndHttpHost()
  626. {
  627. $request = new Request();
  628. $server = [];
  629. $server['SERVER_NAME'] = 'servername';
  630. $server['SERVER_PORT'] = '90';
  631. $request->initialize([], [], [], [], [], $server);
  632. $this->assertEquals('http://servername:90', $request->getSchemeAndHttpHost());
  633. $server['PHP_AUTH_USER'] = 'fabien';
  634. $request->initialize([], [], [], [], [], $server);
  635. $this->assertEquals('http://servername:90', $request->getSchemeAndHttpHost());
  636. $server['PHP_AUTH_USER'] = '0';
  637. $request->initialize([], [], [], [], [], $server);
  638. $this->assertEquals('http://servername:90', $request->getSchemeAndHttpHost());
  639. $server['PHP_AUTH_PW'] = '0';
  640. $request->initialize([], [], [], [], [], $server);
  641. $this->assertEquals('http://servername:90', $request->getSchemeAndHttpHost());
  642. }
  643. /**
  644. * @dataProvider getQueryStringNormalizationData
  645. */
  646. public function testGetQueryString($query, $expectedQuery, $msg)
  647. {
  648. $request = new Request();
  649. $request->server->set('QUERY_STRING', $query);
  650. $this->assertSame($expectedQuery, $request->getQueryString(), $msg);
  651. }
  652. public static function getQueryStringNormalizationData()
  653. {
  654. return [
  655. ['foo', 'foo=', 'works with valueless parameters'],
  656. ['foo=', 'foo=', 'includes a dangling equal sign'],
  657. ['bar=&foo=bar', 'bar=&foo=bar', '->works with empty parameters'],
  658. ['foo=bar&bar=', 'bar=&foo=bar', 'sorts keys alphabetically'],
  659. // GET parameters, that are submitted from an HTML form, encode spaces as "+" by default (as defined in enctype application/x-www-form-urlencoded).
  660. // PHP also converts "+" to spaces when filling the global _GET or when using the function parse_str.
  661. ['baz=Foo%20Baz&bar=Foo+Bar', 'bar=Foo%20Bar&baz=Foo%20Baz', 'normalizes spaces in both encodings "%20" and "+"'],
  662. ['foo[]=1&foo[]=2', 'foo%5B0%5D=1&foo%5B1%5D=2', 'allows array notation'],
  663. ['foo=1&foo=2', 'foo=2', 'merges repeated parameters'],
  664. ['pa%3Dram=foo%26bar%3Dbaz&test=test', 'pa%3Dram=foo%26bar%3Dbaz&test=test', 'works with encoded delimiters'],
  665. ['0', '0=', 'allows "0"'],
  666. ['Foo Bar&Foo%20Baz', 'Foo%20Bar=&Foo%20Baz=', 'normalizes encoding in keys'],
  667. ['bar=Foo Bar&baz=Foo%20Baz', 'bar=Foo%20Bar&baz=Foo%20Baz', 'normalizes encoding in values'],
  668. ['foo=bar&&&test&&', 'foo=bar&test=', 'removes unneeded delimiters'],
  669. ['formula=e=m*c^2', 'formula=e%3Dm%2Ac%5E2', 'correctly treats only the first "=" as delimiter and the next as value'],
  670. // Ignore pairs with empty key, even if there was a value, e.g. "=value", as such nameless values cannot be retrieved anyway.
  671. // PHP also does not include them when building _GET.
  672. ['foo=bar&=a=b&=x=y', 'foo=bar', 'removes params with empty key'],
  673. // Don't reorder nested query string keys
  674. ['foo[]=Z&foo[]=A', 'foo%5B0%5D=Z&foo%5B1%5D=A', 'keeps order of values'],
  675. ['foo[Z]=B&foo[A]=B', 'foo%5BZ%5D=B&foo%5BA%5D=B', 'keeps order of keys'],
  676. ['utf8=✓', 'utf8=%E2%9C%93', 'encodes UTF-8'],
  677. ];
  678. }
  679. public function testGetQueryStringReturnsNull()
  680. {
  681. $request = new Request();
  682. $this->assertNull($request->getQueryString(), '->getQueryString() returns null for non-existent query string');
  683. $request->server->set('QUERY_STRING', '');
  684. $this->assertNull($request->getQueryString(), '->getQueryString() returns null for empty query string');
  685. }
  686. public function testGetHost()
  687. {
  688. $request = new Request();
  689. $request->initialize(['foo' => 'bar']);
  690. $this->assertEquals('', $request->getHost(), '->getHost() return empty string if not initialized');
  691. $request->initialize([], [], [], [], [], ['HTTP_HOST' => 'www.example.com']);
  692. $this->assertEquals('www.example.com', $request->getHost(), '->getHost() from Host Header');
  693. // Host header with port number
  694. $request->initialize([], [], [], [], [], ['HTTP_HOST' => 'www.example.com:8080']);
  695. $this->assertEquals('www.example.com', $request->getHost(), '->getHost() from Host Header with port number');
  696. // Server values
  697. $request->initialize([], [], [], [], [], ['SERVER_NAME' => 'www.example.com']);
  698. $this->assertEquals('www.example.com', $request->getHost(), '->getHost() from server name');
  699. $request->initialize([], [], [], [], [], ['SERVER_NAME' => 'www.example.com', 'HTTP_HOST' => 'www.host.com']);
  700. $this->assertEquals('www.host.com', $request->getHost(), '->getHost() value from Host header has priority over SERVER_NAME ');
  701. }
  702. public function testGetPort()
  703. {
  704. $request = Request::create('http://example.com', 'GET', [], [], [], [
  705. 'HTTP_X_FORWARDED_PROTO' => 'https',
  706. 'HTTP_X_FORWARDED_PORT' => '443',
  707. ]);
  708. $port = $request->getPort();
  709. $this->assertEquals(80, $port, 'Without trusted proxies FORWARDED_PROTO and FORWARDED_PORT are ignored.');
  710. Request::setTrustedProxies(['1.1.1.1'], Request::HEADER_X_FORWARDED_PROTO | Request::HEADER_X_FORWARDED_PORT);
  711. $request = Request::create('http://example.com', 'GET', [], [], [], [
  712. 'HTTP_X_FORWARDED_PROTO' => 'https',
  713. 'HTTP_X_FORWARDED_PORT' => '8443',
  714. ]);
  715. $this->assertEquals(80, $request->getPort(), 'With PROTO and PORT on untrusted connection server value takes precedence.');
  716. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  717. $this->assertEquals(8443, $request->getPort(), 'With PROTO and PORT set PORT takes precedence.');
  718. $request = Request::create('http://example.com', 'GET', [], [], [], [
  719. 'HTTP_X_FORWARDED_PROTO' => 'https',
  720. ]);
  721. $this->assertEquals(80, $request->getPort(), 'With only PROTO set getPort() ignores trusted headers on untrusted connection.');
  722. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  723. $this->assertEquals(443, $request->getPort(), 'With only PROTO set getPort() defaults to 443.');
  724. $request = Request::create('http://example.com', 'GET', [], [], [], [
  725. 'HTTP_X_FORWARDED_PROTO' => 'http',
  726. ]);
  727. $this->assertEquals(80, $request->getPort(), 'If X_FORWARDED_PROTO is set to HTTP getPort() ignores trusted headers on untrusted connection.');
  728. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  729. $this->assertEquals(80, $request->getPort(), 'If X_FORWARDED_PROTO is set to HTTP getPort() returns port of the original request.');
  730. $request = Request::create('http://example.com', 'GET', [], [], [], [
  731. 'HTTP_X_FORWARDED_PROTO' => 'On',
  732. ]);
  733. $this->assertEquals(80, $request->getPort(), 'With only PROTO set and value is On, getPort() ignores trusted headers on untrusted connection.');
  734. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  735. $this->assertEquals(443, $request->getPort(), 'With only PROTO set and value is On, getPort() defaults to 443.');
  736. $request = Request::create('http://example.com', 'GET', [], [], [], [
  737. 'HTTP_X_FORWARDED_PROTO' => '1',
  738. ]);
  739. $this->assertEquals(80, $request->getPort(), 'With only PROTO set and value is 1, getPort() ignores trusted headers on untrusted connection.');
  740. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  741. $this->assertEquals(443, $request->getPort(), 'With only PROTO set and value is 1, getPort() defaults to 443.');
  742. $request = Request::create('http://example.com', 'GET', [], [], [], [
  743. 'HTTP_X_FORWARDED_PROTO' => 'something-else',
  744. ]);
  745. $port = $request->getPort();
  746. $this->assertEquals(80, $port, 'With only PROTO set and value is not recognized, getPort() defaults to 80.');
  747. }
  748. public function testGetHostWithFakeHttpHostValue()
  749. {
  750. $this->expectException(\RuntimeException::class);
  751. $request = new Request();
  752. $request->initialize([], [], [], [], [], ['HTTP_HOST' => 'www.host.com?query=string']);
  753. $request->getHost();
  754. }
  755. public function testGetSetMethod()
  756. {
  757. $request = new Request();
  758. $this->assertEquals('GET', $request->getMethod(), '->getMethod() returns GET if no method is defined');
  759. $request->setMethod('get');
  760. $this->assertEquals('GET', $request->getMethod(), '->getMethod() returns an uppercased string');
  761. $request->setMethod('PURGE');
  762. $this->assertEquals('PURGE', $request->getMethod(), '->getMethod() returns the method even if it is not a standard one');
  763. $request->setMethod('POST');
  764. $this->assertEquals('POST', $request->getMethod(), '->getMethod() returns the method POST if no _method is defined');
  765. $request->setMethod('POST');
  766. $request->request->set('_method', 'purge');
  767. $this->assertEquals('POST', $request->getMethod(), '->getMethod() does not return the method from _method if defined and POST but support not enabled');
  768. $request = new Request();
  769. $request->setMethod('POST');
  770. $request->request->set('_method', 'purge');
  771. $this->assertFalse(Request::getHttpMethodParameterOverride(), 'httpMethodParameterOverride should be disabled by default');
  772. Request::enableHttpMethodParameterOverride();
  773. $this->assertTrue(Request::getHttpMethodParameterOverride(), 'httpMethodParameterOverride should be enabled now but it is not');
  774. $this->assertEquals('PURGE', $request->getMethod(), '->getMethod() returns the method from _method if defined and POST');
  775. $this->disableHttpMethodParameterOverride();
  776. $request = new Request();
  777. $request->setMethod('POST');
  778. $request->query->set('_method', 'purge');
  779. $this->assertEquals('POST', $request->getMethod(), '->getMethod() does not return the method from _method if defined and POST but support not enabled');
  780. $request = new Request();
  781. $request->setMethod('POST');
  782. $request->query->set('_method', 'purge');
  783. Request::enableHttpMethodParameterOverride();
  784. $this->assertEquals('PURGE', $request->getMethod(), '->getMethod() returns the method from _method if defined and POST');
  785. $this->disableHttpMethodParameterOverride();
  786. $request = new Request();
  787. $request->setMethod('POST');
  788. $request->headers->set('X-HTTP-METHOD-OVERRIDE', 'delete');
  789. $this->assertEquals('DELETE', $request->getMethod(), '->getMethod() returns the method from X-HTTP-Method-Override even though _method is set if defined and POST');
  790. $request = new Request();
  791. $request->setMethod('POST');
  792. $request->headers->set('X-HTTP-METHOD-OVERRIDE', 'delete');
  793. $this->assertEquals('DELETE', $request->getMethod(), '->getMethod() returns the method from X-HTTP-Method-Override if defined and POST');
  794. $request = new Request();
  795. $request->setMethod('POST');
  796. $request->query->set('_method', ['delete', 'patch']);
  797. $this->assertSame('POST', $request->getMethod(), '->getMethod() returns the request method if invalid type is defined in query');
  798. }
  799. /**
  800. * @dataProvider getClientIpsProvider
  801. */
  802. public function testGetClientIp($expected, $remoteAddr, $httpForwardedFor, $trustedProxies)
  803. {
  804. $request = $this->getRequestInstanceForClientIpTests($remoteAddr, $httpForwardedFor, $trustedProxies);
  805. $this->assertEquals($expected[0], $request->getClientIp());
  806. }
  807. /**
  808. * @dataProvider getClientIpsProvider
  809. */
  810. public function testGetClientIps($expected, $remoteAddr, $httpForwardedFor, $trustedProxies)
  811. {
  812. $request = $this->getRequestInstanceForClientIpTests($remoteAddr, $httpForwardedFor, $trustedProxies);
  813. $this->assertEquals($expected, $request->getClientIps());
  814. }
  815. /**
  816. * @dataProvider getClientIpsForwardedProvider
  817. */
  818. public function testGetClientIpsForwarded($expected, $remoteAddr, $httpForwarded, $trustedProxies)
  819. {
  820. $request = $this->getRequestInstanceForClientIpsForwardedTests($remoteAddr, $httpForwarded, $trustedProxies);
  821. $this->assertEquals($expected, $request->getClientIps());
  822. }
  823. public static function getClientIpsForwardedProvider()
  824. {
  825. // $expected $remoteAddr $httpForwarded $trustedProxies
  826. return [
  827. [['127.0.0.1'], '127.0.0.1', 'for="_gazonk"', null],
  828. [['127.0.0.1'], '127.0.0.1', 'for="_gazonk"', ['127.0.0.1']],
  829. [['88.88.88.88'], '127.0.0.1', 'for="88.88.88.88:80"', ['127.0.0.1']],
  830. [['192.0.2.60'], '::1', 'for=192.0.2.60;proto=http;by=203.0.113.43', ['::1']],
  831. [['2620:0:1cfe:face:b00c::3', '192.0.2.43'], '::1', 'for=192.0.2.43, for="[2620:0:1cfe:face:b00c::3]"', ['::1']],
  832. [['2001:db8:cafe::17'], '::1', 'for="[2001:db8:cafe::17]:4711', ['::1']],
  833. ];
  834. }
  835. public static function getClientIpsProvider()
  836. {
  837. // $expected $remoteAddr $httpForwardedFor $trustedProxies
  838. return [
  839. // simple IPv4
  840. [['88.88.88.88'], '88.88.88.88', null, null],
  841. // trust the IPv4 remote addr
  842. [['88.88.88.88'], '88.88.88.88', null, ['88.88.88.88']],
  843. // simple IPv6
  844. [['::1'], '::1', null, null],
  845. // trust the IPv6 remote addr
  846. [['::1'], '::1', null, ['::1']],
  847. // forwarded for with remote IPv4 addr not trusted
  848. [['127.0.0.1'], '127.0.0.1', '88.88.88.88', null],
  849. // forwarded for with remote IPv4 addr trusted + comma
  850. [['88.88.88.88'], '127.0.0.1', '88.88.88.88,', ['127.0.0.1']],
  851. // forwarded for with remote IPv4 and all FF addrs trusted
  852. [['88.88.88.88'], '127.0.0.1', '88.88.88.88', ['127.0.0.1', '88.88.88.88']],
  853. // forwarded for with remote IPv4 range trusted
  854. [['88.88.88.88'], '123.45.67.89', '88.88.88.88', ['123.45.67.0/24']],
  855. // forwarded for with remote IPv6 addr not trusted
  856. [['1620:0:1cfe:face:b00c::3'], '1620:0:1cfe:face:b00c::3', '2620:0:1cfe:face:b00c::3', null],
  857. // forwarded for with remote IPv6 addr trusted
  858. [['2620:0:1cfe:face:b00c::3'], '1620:0:1cfe:face:b00c::3', '2620:0:1cfe:face:b00c::3', ['1620:0:1cfe:face:b00c::3']],
  859. // forwarded for with remote IPv6 range trusted
  860. [['88.88.88.88'], '2a01:198:603:0:396e:4789:8e99:890f', '88.88.88.88', ['2a01:198:603:0::/65']],
  861. // multiple forwarded for with remote IPv4 addr trusted
  862. [['88.88.88.88', '87.65.43.21', '127.0.0.1'], '123.45.67.89', '127.0.0.1, 87.65.43.21, 88.88.88.88', ['123.45.67.89']],
  863. // multiple forwarded for with remote IPv4 addr and some reverse proxies trusted
  864. [['87.65.43.21', '127.0.0.1'], '123.45.67.89', '127.0.0.1, 87.65.43.21, 88.88.88.88', ['123.45.67.89', '88.88.88.88']],
  865. // multiple forwarded for with remote IPv4 addr and some reverse proxies trusted but in the middle
  866. [['88.88.88.88', '127.0.0.1'], '123.45.67.89', '127.0.0.1, 87.65.43.21, 88.88.88.88', ['123.45.67.89', '87.65.43.21']],
  867. // multiple forwarded for with remote IPv4 addr and all reverse proxies trusted
  868. [['127.0.0.1'], '123.45.67.89', '127.0.0.1, 87.65.43.21, 88.88.88.88', ['123.45.67.89', '87.65.43.21', '88.88.88.88', '127.0.0.1']],
  869. // multiple forwarded for with remote IPv6 addr trusted
  870. [['2620:0:1cfe:face:b00c::3', '3620:0:1cfe:face:b00c::3'], '1620:0:1cfe:face:b00c::3', '3620:0:1cfe:face:b00c::3,2620:0:1cfe:face:b00c::3', ['1620:0:1cfe:face:b00c::3']],
  871. // multiple forwarded for with remote IPv6 addr and some reverse proxies trusted
  872. [['3620:0:1cfe:face:b00c::3'], '1620:0:1cfe:face:b00c::3', '3620:0:1cfe:face:b00c::3,2620:0:1cfe:face:b00c::3', ['1620:0:1cfe:face:b00c::3', '2620:0:1cfe:face:b00c::3']],
  873. // multiple forwarded for with remote IPv4 addr and some reverse proxies trusted but in the middle
  874. [['2620:0:1cfe:face:b00c::3', '4620:0:1cfe:face:b00c::3'], '1620:0:1cfe:face:b00c::3', '4620:0:1cfe:face:b00c::3,3620:0:1cfe:face:b00c::3,2620:0:1cfe:face:b00c::3', ['1620:0:1cfe:face:b00c::3', '3620:0:1cfe:face:b00c::3']],
  875. // client IP with port
  876. [['88.88.88.88'], '127.0.0.1', '88.88.88.88:12345, 127.0.0.1', ['127.0.0.1']],
  877. // invalid forwarded IP is ignored
  878. [['88.88.88.88'], '127.0.0.1', 'unknown,88.88.88.88', ['127.0.0.1']],
  879. [['88.88.88.88'], '127.0.0.1', '}__test|O:21:&quot;JDatabaseDriverMysqli&quot;:3:{s:2,88.88.88.88', ['127.0.0.1']],
  880. ];
  881. }
  882. /**
  883. * @dataProvider getClientIpsWithConflictingHeadersProvider
  884. */
  885. public function testGetClientIpsWithConflictingHeaders($httpForwarded, $httpXForwardedFor)
  886. {
  887. $this->expectException(ConflictingHeadersException::class);
  888. $request = new Request();
  889. $server = [
  890. 'REMOTE_ADDR' => '88.88.88.88',
  891. 'HTTP_FORWARDED' => $httpForwarded,
  892. 'HTTP_X_FORWARDED_FOR' => $httpXForwardedFor,
  893. ];
  894. Request::setTrustedProxies(['88.88.88.88'], Request::HEADER_X_FORWARDED_FOR | Request::HEADER_FORWARDED);
  895. $request->initialize([], [], [], [], [], $server);
  896. $request->getClientIps();
  897. }
  898. /**
  899. * @dataProvider getClientIpsWithConflictingHeadersProvider
  900. */
  901. public function testGetClientIpsOnlyXHttpForwardedForTrusted($httpForwarded, $httpXForwardedFor)
  902. {
  903. $request = new Request();
  904. $server = [
  905. 'REMOTE_ADDR' => '88.88.88.88',
  906. 'HTTP_FORWARDED' => $httpForwarded,
  907. 'HTTP_X_FORWARDED_FOR' => $httpXForwardedFor,
  908. ];
  909. Request::setTrustedProxies(['88.88.88.88'], Request::HEADER_X_FORWARDED_FOR);
  910. $request->initialize([], [], [], [], [], $server);
  911. $this->assertSame(array_reverse(explode(',', $httpXForwardedFor)), $request->getClientIps());
  912. }
  913. public static function getClientIpsWithConflictingHeadersProvider()
  914. {
  915. // $httpForwarded $httpXForwardedFor
  916. return [
  917. ['for=87.65.43.21', '192.0.2.60'],
  918. ['for=87.65.43.21, for=192.0.2.60', '192.0.2.60'],
  919. ['for=192.0.2.60', '192.0.2.60,87.65.43.21'],
  920. ['for="::face", for=192.0.2.60', '192.0.2.60,192.0.2.43'],
  921. ['for=87.65.43.21, for=192.0.2.60', '192.0.2.60,87.65.43.21'],
  922. ];
  923. }
  924. /**
  925. * @dataProvider getClientIpsWithAgreeingHeadersProvider
  926. */
  927. public function testGetClientIpsWithAgreeingHeaders($httpForwarded, $httpXForwardedFor, $expectedIps)
  928. {
  929. $request = new Request();
  930. $server = [
  931. 'REMOTE_ADDR' => '88.88.88.88',
  932. 'HTTP_FORWARDED' => $httpForwarded,
  933. 'HTTP_X_FORWARDED_FOR' => $httpXForwardedFor,
  934. ];
  935. Request::setTrustedProxies(['88.88.88.88'], -1);
  936. $request->initialize([], [], [], [], [], $server);
  937. $clientIps = $request->getClientIps();
  938. $this->assertSame($expectedIps, $clientIps);
  939. }
  940. public static function getClientIpsWithAgreeingHeadersProvider()
  941. {
  942. // $httpForwarded $httpXForwardedFor
  943. return [
  944. ['for="192.0.2.60"', '192.0.2.60', ['192.0.2.60']],
  945. ['for=192.0.2.60, for=87.65.43.21', '192.0.2.60,87.65.43.21', ['87.65.43.21', '192.0.2.60']],
  946. ['for="[::face]", for=192.0.2.60', '::face,192.0.2.60', ['192.0.2.60', '::face']],
  947. ['for="192.0.2.60:80"', '192.0.2.60', ['192.0.2.60']],
  948. ['for=192.0.2.60;proto=http;by=203.0.113.43', '192.0.2.60', ['192.0.2.60']],
  949. ['for="[2001:db8:cafe::17]:4711"', '2001:db8:cafe::17', ['2001:db8:cafe::17']],
  950. ];
  951. }
  952. public function testGetContentWorksTwiceInDefaultMode()
  953. {
  954. $req = new Request();
  955. $this->assertEquals('', $req->getContent());
  956. $this->assertEquals('', $req->getContent());
  957. }
  958. public function testGetContentReturnsResource()
  959. {
  960. $req = new Request();
  961. $retval = $req->getContent(true);
  962. $this->assertIsResource($retval);
  963. $this->assertEquals('', fread($retval, 1));
  964. $this->assertTrue(feof($retval));
  965. }
  966. public function testGetContentReturnsResourceWhenContentSetInConstructor()
  967. {
  968. $req = new Request([], [], [], [], [], [], 'MyContent');
  969. $resource = $req->getContent(true);
  970. $this->assertIsResource($resource);
  971. $this->assertEquals('MyContent', stream_get_contents($resource));
  972. }
  973. public function testContentAsResource()
  974. {
  975. $resource = fopen('php://memory', 'r+');
  976. fwrite($resource, 'My other content');
  977. rewind($resource);
  978. $req = new Request([], [], [], [], [], [], $resource);
  979. $this->assertEquals('My other content', stream_get_contents($req->getContent(true)));
  980. $this->assertEquals('My other content', $req->getContent());
  981. }
  982. public function getContentCantBeCalledTwiceWithResourcesProvider()
  983. {
  984. return [
  985. 'Resource then fetch' => [true, false],
  986. 'Resource then resource' => [true, true],
  987. ];
  988. }
  989. /**
  990. * @dataProvider getContentCanBeCalledTwiceWithResourcesProvider
  991. */
  992. public function testGetContentCanBeCalledTwiceWithResources($first, $second)
  993. {
  994. $req = new Request();
  995. $a = $req->getContent($first);
  996. $b = $req->getContent($second);
  997. if ($first) {
  998. $a = stream_get_contents($a);
  999. }
  1000. if ($second) {
  1001. $b = stream_get_contents($b);
  1002. }
  1003. $this->assertSame($a, $b);
  1004. }
  1005. public static function getContentCanBeCalledTwiceWithResourcesProvider()
  1006. {
  1007. return [
  1008. 'Fetch then fetch' => [false, false],
  1009. 'Fetch then resource' => [false, true],
  1010. 'Resource then fetch' => [true, false],
  1011. 'Resource then resource' => [true, true],
  1012. ];
  1013. }
  1014. public static function provideOverloadedMethods()
  1015. {
  1016. return [
  1017. ['PUT'],
  1018. ['DELETE'],
  1019. ['PATCH'],
  1020. ['put'],
  1021. ['delete'],
  1022. ['patch'],
  1023. ];
  1024. }
  1025. public function testToArrayEmpty()
  1026. {
  1027. $req = new Request();
  1028. $this->expectException(JsonException::class);
  1029. $this->expectExceptionMessage('Request body is empty.');
  1030. $req->toArray();
  1031. }
  1032. public function testToArrayNonJson()
  1033. {
  1034. $req = new Request([], [], [], [], [], [], 'foobar');
  1035. $this->expectException(JsonException::class);
  1036. $this->expectExceptionMessageMatches('|Could not decode request body.+|');
  1037. $req->toArray();
  1038. }
  1039. public function testToArray()
  1040. {
  1041. $req = new Request([], [], [], [], [], [], json_encode([]));
  1042. $this->assertEquals([], $req->toArray());
  1043. $req = new Request([], [], [], [], [], [], json_encode(['foo' => 'bar']));
  1044. $this->assertEquals(['foo' => 'bar'], $req->toArray());
  1045. }
  1046. /**
  1047. * @dataProvider provideOverloadedMethods
  1048. */
  1049. public function testCreateFromGlobals($method)
  1050. {
  1051. $normalizedMethod = strtoupper($method);
  1052. $_GET['foo1'] = 'bar1';
  1053. $_POST['foo2'] = 'bar2';
  1054. $_COOKIE['foo3'] = 'bar3';
  1055. $_FILES['foo4'] = ['bar4'];
  1056. $_SERVER['foo5'] = 'bar5';
  1057. $request = Request::createFromGlobals();
  1058. $this->assertEquals('bar1', $request->query->get('foo1'), '::fromGlobals() uses values from $_GET');
  1059. $this->assertEquals('bar2', $request->request->get('foo2'), '::fromGlobals() uses values from $_POST');
  1060. $this->assertEquals('bar3', $request->cookies->get('foo3'), '::fromGlobals() uses values from $_COOKIE');
  1061. $this->assertEquals(['bar4'], $request->files->get('foo4'), '::fromGlobals() uses values from $_FILES');
  1062. $this->assertEquals('bar5', $request->server->get('foo5'), '::fromGlobals() uses values from $_SERVER');
  1063. $this->assertInstanceOf(InputBag::class, $request->request);
  1064. $this->assertInstanceOf(ParameterBag::class, $request->request);
  1065. unset($_GET['foo1'], $_POST['foo2'], $_COOKIE['foo3'], $_FILES['foo4'], $_SERVER['foo5']);
  1066. $_SERVER['REQUEST_METHOD'] = $method;
  1067. $_SERVER['CONTENT_TYPE'] = 'application/x-www-form-urlencoded';
  1068. $request = RequestContentProxy::createFromGlobals();
  1069. $this->assertEquals($normalizedMethod, $request->getMethod());
  1070. $this->assertEquals('mycontent', $request->request->get('content'));
  1071. $this->assertInstanceOf(InputBag::class, $request->request);
  1072. $this->assertInstanceOf(ParameterBag::class, $request->request);
  1073. unset($_SERVER['REQUEST_METHOD'], $_SERVER['CONTENT_TYPE']);
  1074. Request::createFromGlobals();
  1075. Request::enableHttpMethodParameterOverride();
  1076. $_POST['_method'] = $method;
  1077. $_POST['foo6'] = 'bar6';
  1078. $_SERVER['REQUEST_METHOD'] = 'PoSt';
  1079. $request = Request::createFromGlobals();
  1080. $this->assertEquals($normalizedMethod, $request->getMethod());
  1081. $this->assertEquals('POST', $request->getRealMethod());
  1082. $this->assertEquals('bar6', $request->request->get('foo6'));
  1083. unset($_POST['_method'], $_POST['foo6'], $_SERVER['REQUEST_METHOD']);
  1084. $this->disableHttpMethodParameterOverride();
  1085. }
  1086. public function testOverrideGlobals()
  1087. {
  1088. $request = new Request();
  1089. $request->initialize(['foo' => 'bar']);
  1090. // as the Request::overrideGlobals really work, it erase $_SERVER, so we must backup it
  1091. $server = $_SERVER;
  1092. $request->overrideGlobals();
  1093. $this->assertEquals(['foo' => 'bar'], $_GET);
  1094. $request->initialize([], ['foo' => 'bar']);
  1095. $request->overrideGlobals();
  1096. $this->assertEquals(['foo' => 'bar'], $_POST);
  1097. $this->assertArrayNotHasKey('HTTP_X_FORWARDED_PROTO', $_SERVER);
  1098. $request->headers->set('X_FORWARDED_PROTO', 'https');
  1099. Request::setTrustedProxies(['1.1.1.1'], Request::HEADER_X_FORWARDED_PROTO);
  1100. $this->assertFalse($request->isSecure());
  1101. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  1102. $this->assertTrue($request->isSecure());
  1103. $request->overrideGlobals();
  1104. $this->assertArrayHasKey('HTTP_X_FORWARDED_PROTO', $_SERVER);
  1105. $request->headers->set('CONTENT_TYPE', 'multipart/form-data');
  1106. $request->headers->set('CONTENT_LENGTH', 12345);
  1107. $request->overrideGlobals();
  1108. $this->assertArrayHasKey('CONTENT_TYPE', $_SERVER);
  1109. $this->assertArrayHasKey('CONTENT_LENGTH', $_SERVER);
  1110. $request->initialize(['foo' => 'bar', 'baz' => 'foo']);
  1111. $request->query->remove('baz');
  1112. $request->overrideGlobals();
  1113. $this->assertEquals(['foo' => 'bar'], $_GET);
  1114. $this->assertEquals('foo=bar', $_SERVER['QUERY_STRING']);
  1115. $this->assertEquals('foo=bar', $request->server->get('QUERY_STRING'));
  1116. // restore initial $_SERVER array
  1117. $_SERVER = $server;
  1118. }
  1119. public function testGetScriptName()
  1120. {
  1121. $request = new Request();
  1122. $this->assertEquals('', $request->getScriptName());
  1123. $server = [];
  1124. $server['SCRIPT_NAME'] = '/index.php';
  1125. $request->initialize([], [], [], [], [], $server);
  1126. $this->assertEquals('/index.php', $request->getScriptName());
  1127. $server = [];
  1128. $server['ORIG_SCRIPT_NAME'] = '/frontend.php';
  1129. $request->initialize([], [], [], [], [], $server);
  1130. $this->assertEquals('/frontend.php', $request->getScriptName());
  1131. $server = [];
  1132. $server['SCRIPT_NAME'] = '/index.php';
  1133. $server['ORIG_SCRIPT_NAME'] = '/frontend.php';
  1134. $request->initialize([], [], [], [], [], $server);
  1135. $this->assertEquals('/index.php', $request->getScriptName());
  1136. }
  1137. public function testGetBasePath()
  1138. {
  1139. $request = new Request();
  1140. $this->assertEquals('', $request->getBasePath());
  1141. $server = [];
  1142. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  1143. $request->initialize([], [], [], [], [], $server);
  1144. $this->assertEquals('', $request->getBasePath());
  1145. $server = [];
  1146. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  1147. $server['SCRIPT_NAME'] = '/index.php';
  1148. $request->initialize([], [], [], [], [], $server);
  1149. $this->assertEquals('', $request->getBasePath());
  1150. $server = [];
  1151. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  1152. $server['PHP_SELF'] = '/index.php';
  1153. $request->initialize([], [], [], [], [], $server);
  1154. $this->assertEquals('', $request->getBasePath());
  1155. $server = [];
  1156. $server['SCRIPT_FILENAME'] = '/some/where/index.php';
  1157. $server['ORIG_SCRIPT_NAME'] = '/index.php';
  1158. $request->initialize([], [], [], [], [], $server);
  1159. $this->assertEquals('', $request->getBasePath());
  1160. }
  1161. public function testGetPathInfo()
  1162. {
  1163. $request = new Request();
  1164. $this->assertEquals('/', $request->getPathInfo());
  1165. $server = [];
  1166. $server['REQUEST_URI'] = '/path/info';
  1167. $request->initialize([], [], [], [], [], $server);
  1168. $this->assertEquals('/path/info', $request->getPathInfo());
  1169. $server = [];
  1170. $server['REQUEST_URI'] = '/path%20test/info';
  1171. $request->initialize([], [], [], [], [], $server);
  1172. $this->assertEquals('/path%20test/info', $request->getPathInfo());
  1173. $server = [];
  1174. $server['REQUEST_URI'] = '?a=b';
  1175. $request->initialize([], [], [], [], [], $server);
  1176. $this->assertEquals('/', $request->getPathInfo());
  1177. }
  1178. public function testGetParameterPrecedence()
  1179. {
  1180. $request = new Request();
  1181. $request->attributes->set('foo', 'attr');
  1182. $request->query->set('foo', 'query');
  1183. $request->request->set('foo', 'body');
  1184. $this->assertSame('attr', $request->get('foo'));
  1185. $request->attributes->remove('foo');
  1186. $this->assertSame('query', $request->get('foo'));
  1187. $request->query->remove('foo');
  1188. $this->assertSame('body', $request->get('foo'));
  1189. $request->request->remove('foo');
  1190. $this->assertNull($request->get('foo'));
  1191. }
  1192. public function testGetPreferredLanguage()
  1193. {
  1194. $request = new Request();
  1195. $this->assertNull($request->getPreferredLanguage());
  1196. $this->assertNull($request->getPreferredLanguage([]));
  1197. $this->assertEquals('fr', $request->getPreferredLanguage(['fr']));
  1198. $this->assertEquals('fr', $request->getPreferredLanguage(['fr', 'en']));
  1199. $this->assertEquals('en', $request->getPreferredLanguage(['en', 'fr']));
  1200. $this->assertEquals('fr-ch', $request->getPreferredLanguage(['fr-ch', 'fr-fr']));
  1201. $request = new Request();
  1202. $request->headers->set('Accept-language', 'zh, en-us; q=0.8, en; q=0.6');
  1203. $this->assertEquals('en', $request->getPreferredLanguage(['en', 'en-us']));
  1204. $request = new Request();
  1205. $request->headers->set('Accept-language', 'zh, en-us; q=0.8, en; q=0.6');
  1206. $this->assertEquals('en', $request->getPreferredLanguage(['fr', 'en']));
  1207. $request = new Request();
  1208. $request->headers->set('Accept-language', 'zh, en-us; q=0.8');
  1209. $this->assertEquals('en', $request->getPreferredLanguage(['fr', 'en']));
  1210. $request = new Request();
  1211. $request->headers->set('Accept-language', 'zh, en-us; q=0.8, fr-fr; q=0.6, fr; q=0.5');
  1212. $this->assertEquals('en', $request->getPreferredLanguage(['fr', 'en']));
  1213. }
  1214. public function testIsXmlHttpRequest()
  1215. {
  1216. $request = new Request();
  1217. $this->assertFalse($request->isXmlHttpRequest());
  1218. $request->headers->set('X-Requested-With', 'XMLHttpRequest');
  1219. $this->assertTrue($request->isXmlHttpRequest());
  1220. $request->headers->remove('X-Requested-With');
  1221. $this->assertFalse($request->isXmlHttpRequest());
  1222. }
  1223. /**
  1224. * @requires extension intl
  1225. */
  1226. public function testIntlLocale()
  1227. {
  1228. $request = new Request();
  1229. $request->setDefaultLocale('fr');
  1230. $this->assertEquals('fr', $request->getLocale());
  1231. $this->assertEquals('fr', \Locale::getDefault());
  1232. $request->setLocale('en');
  1233. $this->assertEquals('en', $request->getLocale());
  1234. $this->assertEquals('en', \Locale::getDefault());
  1235. $request->setDefaultLocale('de');
  1236. $this->assertEquals('en', $request->getLocale());
  1237. $this->assertEquals('en', \Locale::getDefault());
  1238. }
  1239. public function testGetCharsets()
  1240. {
  1241. $request = new Request();
  1242. $this->assertEquals([], $request->getCharsets());
  1243. $request->headers->set('Accept-Charset', 'ISO-8859-1, US-ASCII, UTF-8; q=0.8, ISO-10646-UCS-2; q=0.6');
  1244. $this->assertEquals([], $request->getCharsets()); // testing caching
  1245. $request = new Request();
  1246. $request->headers->set('Accept-Charset', 'ISO-8859-1, US-ASCII, UTF-8; q=0.8, ISO-10646-UCS-2; q=0.6');
  1247. $this->assertEquals(['ISO-8859-1', 'US-ASCII', 'UTF-8', 'ISO-10646-UCS-2'], $request->getCharsets());
  1248. $request = new Request();
  1249. $request->headers->set('Accept-Charset', 'ISO-8859-1,utf-8;q=0.7,*;q=0.7');
  1250. $this->assertEquals(['ISO-8859-1', 'utf-8', '*'], $request->getCharsets());
  1251. }
  1252. public function testGetEncodings()
  1253. {
  1254. $request = new Request();
  1255. $this->assertEquals([], $request->getEncodings());
  1256. $request->headers->set('Accept-Encoding', 'gzip,deflate,sdch');
  1257. $this->assertEquals([], $request->getEncodings()); // testing caching
  1258. $request = new Request();
  1259. $request->headers->set('Accept-Encoding', 'gzip,deflate,sdch');
  1260. $this->assertEquals(['gzip', 'deflate', 'sdch'], $request->getEncodings());
  1261. $request = new Request();
  1262. $request->headers->set('Accept-Encoding', 'gzip;q=0.4,deflate;q=0.9,compress;q=0.7');
  1263. $this->assertEquals(['deflate', 'compress', 'gzip'], $request->getEncodings());
  1264. }
  1265. public function testGetAcceptableContentTypes()
  1266. {
  1267. $request = new Request();
  1268. $this->assertEquals([], $request->getAcceptableContentTypes());
  1269. $request->headers->set('Accept', 'application/vnd.wap.wmlscriptc, text/vnd.wap.wml, application/vnd.wap.xhtml+xml, application/xhtml+xml, text/html, multipart/mixed, */*');
  1270. $this->assertEquals([], $request->getAcceptableContentTypes()); // testing caching
  1271. $request = new Request();
  1272. $request->headers->set('Accept', 'application/vnd.wap.wmlscriptc, text/vnd.wap.wml, application/vnd.wap.xhtml+xml, application/xhtml+xml, text/html, multipart/mixed, */*');
  1273. $this->assertEquals(['application/vnd.wap.wmlscriptc', 'text/vnd.wap.wml', 'application/vnd.wap.xhtml+xml', 'application/xhtml+xml', 'text/html', 'multipart/mixed', '*/*'], $request->getAcceptableContentTypes());
  1274. }
  1275. public function testGetLanguages()
  1276. {
  1277. $request = new Request();
  1278. $this->assertEquals([], $request->getLanguages());
  1279. $request = new Request();
  1280. $request->headers->set('Accept-language', 'zh, en-us; q=0.8, en; q=0.6');
  1281. $this->assertEquals(['zh', 'en_US', 'en'], $request->getLanguages());
  1282. $request = new Request();
  1283. $request->headers->set('Accept-language', 'zh, en-us; q=0.6, en; q=0.8');
  1284. $this->assertEquals(['zh', 'en', 'en_US'], $request->getLanguages()); // Test out of order qvalues
  1285. $request = new Request();
  1286. $request->headers->set('Accept-language', 'zh, en, en-us');
  1287. $this->assertEquals(['zh', 'en', 'en_US'], $request->getLanguages()); // Test equal weighting without qvalues
  1288. $request = new Request();
  1289. $request->headers->set('Accept-language', 'zh; q=0.6, en, en-us; q=0.6');
  1290. $this->assertEquals(['en', 'zh', 'en_US'], $request->getLanguages()); // Test equal weighting with qvalues
  1291. $request = new Request();
  1292. $request->headers->set('Accept-language', 'zh, i-cherokee; q=0.6');
  1293. $this->assertEquals(['zh', 'cherokee'], $request->getLanguages());
  1294. }
  1295. public function testGetAcceptHeadersReturnString()
  1296. {
  1297. $request = new Request();
  1298. $request->headers->set('Accept', '123');
  1299. $request->headers->set('Accept-Charset', '123');
  1300. $request->headers->set('Accept-Encoding', '123');
  1301. $request->headers->set('Accept-Language', '123');
  1302. $this->assertSame(['123'], $request->getAcceptableContentTypes());
  1303. $this->assertSame(['123'], $request->getCharsets());
  1304. $this->assertSame(['123'], $request->getEncodings());
  1305. $this->assertSame(['123'], $request->getLanguages());
  1306. }
  1307. public function testGetRequestFormat()
  1308. {
  1309. $request = new Request();
  1310. $this->assertEquals('html', $request->getRequestFormat());
  1311. // Ensure that setting different default values over time is possible,
  1312. // aka. setRequestFormat determines the state.
  1313. $this->assertEquals('json', $request->getRequestFormat('json'));
  1314. $this->assertEquals('html', $request->getRequestFormat('html'));
  1315. $request = new Request();
  1316. $this->assertNull($request->getRequestFormat(null));
  1317. $request = new Request();
  1318. $this->assertNull($request->setRequestFormat('foo'));
  1319. $this->assertEquals('foo', $request->getRequestFormat(null));
  1320. $request = new Request(['_format' => 'foo']);
  1321. $this->assertEquals('html', $request->getRequestFormat());
  1322. }
  1323. public function testHasSession()
  1324. {
  1325. $request = new Request();
  1326. $this->assertFalse($request->hasSession());
  1327. $this->assertFalse($request->hasSession(true));
  1328. $request->setSessionFactory(function () {});
  1329. $this->assertTrue($request->hasSession());
  1330. $this->assertFalse($request->hasSession(true));
  1331. $request->setSession(new Session(new MockArraySessionStorage()));
  1332. $this->assertTrue($request->hasSession());
  1333. $this->assertTrue($request->hasSession(true));
  1334. }
  1335. public function testGetSession()
  1336. {
  1337. $request = new Request();
  1338. $request->setSession(new Session(new MockArraySessionStorage()));
  1339. $this->assertTrue($request->hasSession());
  1340. $this->assertInstanceOf(Session::class, $request->getSession());
  1341. }
  1342. public function testHasPreviousSession()
  1343. {
  1344. $request = new Request();
  1345. $this->assertFalse($request->hasPreviousSession());
  1346. $request->cookies->set('MOCKSESSID', 'foo');
  1347. $this->assertFalse($request->hasPreviousSession());
  1348. $request->setSession(new Session(new MockArraySessionStorage()));
  1349. $this->assertTrue($request->hasPreviousSession());
  1350. }
  1351. public function testToString()
  1352. {
  1353. $request = new Request();
  1354. $request->headers->set('Accept-language', 'zh, en-us; q=0.8, en; q=0.6');
  1355. $request->cookies->set('Foo', 'Bar');
  1356. $asString = (string) $request;
  1357. $this->assertStringContainsString('Accept-Language: zh, en-us; q=0.8, en; q=0.6', $asString);
  1358. $this->assertStringContainsString('Cookie: Foo=Bar', $asString);
  1359. $request->cookies->set('Another', 'Cookie');
  1360. $asString = (string) $request;
  1361. $this->assertStringContainsString('Cookie: Foo=Bar; Another=Cookie', $asString);
  1362. $request->cookies->set('foo.bar', [1, 2]);
  1363. $asString = (string) $request;
  1364. $this->assertStringContainsString('foo.bar%5B0%5D=1; foo.bar%5B1%5D=2', $asString);
  1365. }
  1366. public function testIsMethod()
  1367. {
  1368. $request = new Request();
  1369. $request->setMethod('POST');
  1370. $this->assertTrue($request->isMethod('POST'));
  1371. $this->assertTrue($request->isMethod('post'));
  1372. $this->assertFalse($request->isMethod('GET'));
  1373. $this->assertFalse($request->isMethod('get'));
  1374. $request->setMethod('GET');
  1375. $this->assertTrue($request->isMethod('GET'));
  1376. $this->assertTrue($request->isMethod('get'));
  1377. $this->assertFalse($request->isMethod('POST'));
  1378. $this->assertFalse($request->isMethod('post'));
  1379. }
  1380. /**
  1381. * @dataProvider getBaseUrlData
  1382. */
  1383. public function testGetBaseUrl($uri, $server, $expectedBaseUrl, $expectedPathInfo)
  1384. {
  1385. $request = Request::create($uri, 'GET', [], [], [], $server);
  1386. $this->assertSame($expectedBaseUrl, $request->getBaseUrl(), 'baseUrl');
  1387. $this->assertSame($expectedPathInfo, $request->getPathInfo(), 'pathInfo');
  1388. }
  1389. public static function getBaseUrlData()
  1390. {
  1391. return [
  1392. [
  1393. '/fruit/strawberry/1234index.php/blah',
  1394. [
  1395. 'SCRIPT_FILENAME' => 'E:/Sites/cc-new/public_html/fruit/index.php',
  1396. 'SCRIPT_NAME' => '/fruit/index.php',
  1397. 'PHP_SELF' => '/fruit/index.php',
  1398. ],
  1399. '/fruit',
  1400. '/strawberry/1234index.php/blah',
  1401. ],
  1402. [
  1403. '/fruit/strawberry/1234index.php/blah',
  1404. [
  1405. 'SCRIPT_FILENAME' => 'E:/Sites/cc-new/public_html/index.php',
  1406. 'SCRIPT_NAME' => '/index.php',
  1407. 'PHP_SELF' => '/index.php',
  1408. ],
  1409. '',
  1410. '/fruit/strawberry/1234index.php/blah',
  1411. ],
  1412. [
  1413. '/foo%20bar/',
  1414. [
  1415. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo bar/app.php',
  1416. 'SCRIPT_NAME' => '/foo bar/app.php',
  1417. 'PHP_SELF' => '/foo bar/app.php',
  1418. ],
  1419. '/foo%20bar',
  1420. '/',
  1421. ],
  1422. [
  1423. '/foo%20bar/home',
  1424. [
  1425. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo bar/app.php',
  1426. 'SCRIPT_NAME' => '/foo bar/app.php',
  1427. 'PHP_SELF' => '/foo bar/app.php',
  1428. ],
  1429. '/foo%20bar',
  1430. '/home',
  1431. ],
  1432. [
  1433. '/foo%20bar/app.php/home',
  1434. [
  1435. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo bar/app.php',
  1436. 'SCRIPT_NAME' => '/foo bar/app.php',
  1437. 'PHP_SELF' => '/foo bar/app.php',
  1438. ],
  1439. '/foo%20bar/app.php',
  1440. '/home',
  1441. ],
  1442. [
  1443. '/foo%20bar/app.php/home%3Dbaz',
  1444. [
  1445. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo bar/app.php',
  1446. 'SCRIPT_NAME' => '/foo bar/app.php',
  1447. 'PHP_SELF' => '/foo bar/app.php',
  1448. ],
  1449. '/foo%20bar/app.php',
  1450. '/home%3Dbaz',
  1451. ],
  1452. [
  1453. '/foo/bar+baz',
  1454. [
  1455. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo/app.php',
  1456. 'SCRIPT_NAME' => '/foo/app.php',
  1457. 'PHP_SELF' => '/foo/app.php',
  1458. ],
  1459. '/foo',
  1460. '/bar+baz',
  1461. ],
  1462. [
  1463. '/sub/foo/bar',
  1464. [
  1465. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo/app.php',
  1466. 'SCRIPT_NAME' => '/foo/app.php',
  1467. 'PHP_SELF' => '/foo/app.php',
  1468. ],
  1469. '',
  1470. '/sub/foo/bar',
  1471. ],
  1472. [
  1473. '/sub/foo/app.php/bar',
  1474. [
  1475. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo/app.php',
  1476. 'SCRIPT_NAME' => '/foo/app.php',
  1477. 'PHP_SELF' => '/foo/app.php',
  1478. ],
  1479. '/sub/foo/app.php',
  1480. '/bar',
  1481. ],
  1482. [
  1483. '/sub/foo/bar/baz',
  1484. [
  1485. 'SCRIPT_FILENAME' => '/home/John Doe/public_html/foo/app2.phpx',
  1486. 'SCRIPT_NAME' => '/foo/app2.phpx',
  1487. 'PHP_SELF' => '/foo/app2.phpx',
  1488. ],
  1489. '',
  1490. '/sub/foo/bar/baz',
  1491. ],
  1492. [
  1493. '/foo/api/bar',
  1494. [
  1495. 'SCRIPT_FILENAME' => '/var/www/api/index.php',
  1496. 'SCRIPT_NAME' => '/api/index.php',
  1497. 'PHP_SELF' => '/api/index.php',
  1498. ],
  1499. '',
  1500. '/foo/api/bar',
  1501. ],
  1502. ];
  1503. }
  1504. /**
  1505. * @dataProvider baseUriDetectionOnIisWithRewriteData
  1506. */
  1507. public function testBaseUriDetectionOnIisWithRewrite(array $server, string $expectedBaseUrl, string $expectedPathInfo)
  1508. {
  1509. $request = new Request([], [], [], [], [], $server);
  1510. self::assertSame($expectedBaseUrl, $request->getBaseUrl());
  1511. self::assertSame($expectedPathInfo, $request->getPathInfo());
  1512. }
  1513. public static function baseUriDetectionOnIisWithRewriteData(): \Generator
  1514. {
  1515. yield 'No rewrite' => [
  1516. [
  1517. 'PATH_INFO' => '/foo/bar',
  1518. 'PHP_SELF' => '/routingtest/index.php/foo/bar',
  1519. 'REQUEST_URI' => '/routingtest/index.php/foo/bar',
  1520. 'SCRIPT_FILENAME' => 'C:/Users/derrabus/Projects/routing-test/public/index.php',
  1521. 'SCRIPT_NAME' => '/routingtest/index.php',
  1522. ],
  1523. '/routingtest/index.php',
  1524. '/foo/bar',
  1525. ];
  1526. yield 'Rewrite with correct case' => [
  1527. [
  1528. 'IIS_WasUrlRewritten' => '1',
  1529. 'PATH_INFO' => '/foo/bar',
  1530. 'PHP_SELF' => '/routingtest/index.php/foo/bar',
  1531. 'REQUEST_URI' => '/routingtest/foo/bar',
  1532. 'SCRIPT_FILENAME' => 'C:/Users/derrabus/Projects/routing-test/public/index.php',
  1533. 'SCRIPT_NAME' => '/routingtest/index.php',
  1534. 'UNENCODED_URL' => '/routingtest/foo/bar',
  1535. ],
  1536. '/routingtest',
  1537. '/foo/bar',
  1538. ];
  1539. // ISS with UrlRewriteModule might report SCRIPT_NAME/PHP_SELF with wrong case
  1540. // see https://github.com/php/php-src/issues/11981
  1541. yield 'Rewrite with case mismatch' => [
  1542. [
  1543. 'IIS_WasUrlRewritten' => '1',
  1544. 'PATH_INFO' => '/foo/bar',
  1545. 'PHP_SELF' => '/routingtest/index.php/foo/bar',
  1546. 'REQUEST_URI' => '/RoutingTest/foo/bar',
  1547. 'SCRIPT_FILENAME' => 'C:/Users/derrabus/Projects/routing-test/public/index.php',
  1548. 'SCRIPT_NAME' => '/routingtest/index.php',
  1549. 'UNENCODED_URL' => '/RoutingTest/foo/bar',
  1550. ],
  1551. '/RoutingTest',
  1552. '/foo/bar',
  1553. ];
  1554. }
  1555. /**
  1556. * @dataProvider urlencodedStringPrefixData
  1557. */
  1558. public function testUrlencodedStringPrefix($string, $prefix, $expect)
  1559. {
  1560. $request = new Request();
  1561. $me = new \ReflectionMethod($request, 'getUrlencodedPrefix');
  1562. $me->setAccessible(true);
  1563. $this->assertSame($expect, $me->invoke($request, $string, $prefix));
  1564. }
  1565. public static function urlencodedStringPrefixData()
  1566. {
  1567. return [
  1568. ['foo', 'foo', 'foo'],
  1569. ['fo%6f', 'foo', 'fo%6f'],
  1570. ['foo/bar', 'foo', 'foo'],
  1571. ['fo%6f/bar', 'foo', 'fo%6f'],
  1572. ['f%6f%6f/bar', 'foo', 'f%6f%6f'],
  1573. ['%66%6F%6F/bar', 'foo', '%66%6F%6F'],
  1574. ['fo+o/bar', 'fo+o', 'fo+o'],
  1575. ['fo%2Bo/bar', 'fo+o', 'fo%2Bo'],
  1576. ];
  1577. }
  1578. private function disableHttpMethodParameterOverride()
  1579. {
  1580. $class = new \ReflectionClass(Request::class);
  1581. $property = $class->getProperty('httpMethodParameterOverride');
  1582. $property->setAccessible(true);
  1583. $property->setValue(null, false);
  1584. }
  1585. private function getRequestInstanceForClientIpTests(string $remoteAddr, ?string $httpForwardedFor, ?array $trustedProxies): Request
  1586. {
  1587. $request = new Request();
  1588. $server = ['REMOTE_ADDR' => $remoteAddr];
  1589. if (null !== $httpForwardedFor) {
  1590. $server['HTTP_X_FORWARDED_FOR'] = $httpForwardedFor;
  1591. }
  1592. if ($trustedProxies) {
  1593. Request::setTrustedProxies($trustedProxies, Request::HEADER_X_FORWARDED_FOR);
  1594. }
  1595. $request->initialize([], [], [], [], [], $server);
  1596. return $request;
  1597. }
  1598. private function getRequestInstanceForClientIpsForwardedTests(string $remoteAddr, ?string $httpForwarded, ?array $trustedProxies): Request
  1599. {
  1600. $request = new Request();
  1601. $server = ['REMOTE_ADDR' => $remoteAddr];
  1602. if (null !== $httpForwarded) {
  1603. $server['HTTP_FORWARDED'] = $httpForwarded;
  1604. }
  1605. if ($trustedProxies) {
  1606. Request::setTrustedProxies($trustedProxies, Request::HEADER_FORWARDED);
  1607. }
  1608. $request->initialize([], [], [], [], [], $server);
  1609. return $request;
  1610. }
  1611. public function testTrustedProxiesXForwardedFor()
  1612. {
  1613. $request = Request::create('http://example.com/');
  1614. $request->server->set('REMOTE_ADDR', '3.3.3.3');
  1615. $request->headers->set('X_FORWARDED_FOR', '1.1.1.1, 2.2.2.2');
  1616. $request->headers->set('X_FORWARDED_HOST', 'foo.example.com:1234, real.example.com:8080');
  1617. $request->headers->set('X_FORWARDED_PROTO', 'https');
  1618. $request->headers->set('X_FORWARDED_PORT', 443);
  1619. // no trusted proxies
  1620. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1621. $this->assertEquals('example.com', $request->getHost());
  1622. $this->assertEquals(80, $request->getPort());
  1623. $this->assertFalse($request->isSecure());
  1624. // disabling proxy trusting
  1625. Request::setTrustedProxies([], Request::HEADER_X_FORWARDED_FOR);
  1626. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1627. $this->assertEquals('example.com', $request->getHost());
  1628. $this->assertEquals(80, $request->getPort());
  1629. $this->assertFalse($request->isSecure());
  1630. // request is forwarded by a non-trusted proxy
  1631. Request::setTrustedProxies(['2.2.2.2'], Request::HEADER_X_FORWARDED_FOR);
  1632. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1633. $this->assertEquals('example.com', $request->getHost());
  1634. $this->assertEquals(80, $request->getPort());
  1635. $this->assertFalse($request->isSecure());
  1636. // trusted proxy via setTrustedProxies()
  1637. Request::setTrustedProxies(['3.3.3.3', '2.2.2.2'], Request::HEADER_X_FORWARDED_FOR | Request::HEADER_X_FORWARDED_HOST | Request::HEADER_X_FORWARDED_PORT | Request::HEADER_X_FORWARDED_PROTO);
  1638. $this->assertEquals('1.1.1.1', $request->getClientIp());
  1639. $this->assertEquals('foo.example.com', $request->getHost());
  1640. $this->assertEquals(443, $request->getPort());
  1641. $this->assertTrue($request->isSecure());
  1642. // trusted proxy via setTrustedProxies()
  1643. Request::setTrustedProxies(['3.3.3.4', '2.2.2.2'], Request::HEADER_X_FORWARDED_FOR | Request::HEADER_X_FORWARDED_HOST | Request::HEADER_X_FORWARDED_PORT | Request::HEADER_X_FORWARDED_PROTO);
  1644. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1645. $this->assertEquals('example.com', $request->getHost());
  1646. $this->assertEquals(80, $request->getPort());
  1647. $this->assertFalse($request->isSecure());
  1648. // check various X_FORWARDED_PROTO header values
  1649. Request::setTrustedProxies(['3.3.3.3', '2.2.2.2'], Request::HEADER_X_FORWARDED_PROTO);
  1650. $request->headers->set('X_FORWARDED_PROTO', 'ssl');
  1651. $this->assertTrue($request->isSecure());
  1652. $request->headers->set('X_FORWARDED_PROTO', 'https, http');
  1653. $this->assertTrue($request->isSecure());
  1654. }
  1655. public function testTrustedProxiesForwarded()
  1656. {
  1657. $request = Request::create('http://example.com/');
  1658. $request->server->set('REMOTE_ADDR', '3.3.3.3');
  1659. $request->headers->set('FORWARDED', 'for=1.1.1.1, host=foo.example.com:8080, proto=https, for=2.2.2.2, host=real.example.com:8080');
  1660. // no trusted proxies
  1661. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1662. $this->assertEquals('example.com', $request->getHost());
  1663. $this->assertEquals(80, $request->getPort());
  1664. $this->assertFalse($request->isSecure());
  1665. // disabling proxy trusting
  1666. Request::setTrustedProxies([], Request::HEADER_FORWARDED);
  1667. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1668. $this->assertEquals('example.com', $request->getHost());
  1669. $this->assertEquals(80, $request->getPort());
  1670. $this->assertFalse($request->isSecure());
  1671. // request is forwarded by a non-trusted proxy
  1672. Request::setTrustedProxies(['2.2.2.2'], Request::HEADER_FORWARDED);
  1673. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1674. $this->assertEquals('example.com', $request->getHost());
  1675. $this->assertEquals(80, $request->getPort());
  1676. $this->assertFalse($request->isSecure());
  1677. // trusted proxy via setTrustedProxies()
  1678. Request::setTrustedProxies(['3.3.3.3', '2.2.2.2'], Request::HEADER_FORWARDED);
  1679. $this->assertEquals('1.1.1.1', $request->getClientIp());
  1680. $this->assertEquals('foo.example.com', $request->getHost());
  1681. $this->assertEquals(8080, $request->getPort());
  1682. $this->assertTrue($request->isSecure());
  1683. // trusted proxy via setTrustedProxies()
  1684. Request::setTrustedProxies(['3.3.3.4', '2.2.2.2'], Request::HEADER_FORWARDED);
  1685. $this->assertEquals('3.3.3.3', $request->getClientIp());
  1686. $this->assertEquals('example.com', $request->getHost());
  1687. $this->assertEquals(80, $request->getPort());
  1688. $this->assertFalse($request->isSecure());
  1689. // check various X_FORWARDED_PROTO header values
  1690. Request::setTrustedProxies(['3.3.3.3', '2.2.2.2'], Request::HEADER_FORWARDED);
  1691. $request->headers->set('FORWARDED', 'proto=ssl');
  1692. $this->assertTrue($request->isSecure());
  1693. $request->headers->set('FORWARDED', 'proto=https, proto=http');
  1694. $this->assertTrue($request->isSecure());
  1695. }
  1696. /**
  1697. * @dataProvider iisRequestUriProvider
  1698. */
  1699. public function testIISRequestUri($headers, $server, $expectedRequestUri)
  1700. {
  1701. $request = new Request();
  1702. $request->headers->replace($headers);
  1703. $request->server->replace($server);
  1704. $this->assertEquals($expectedRequestUri, $request->getRequestUri(), '->getRequestUri() is correct');
  1705. $subRequestUri = '/bar/foo';
  1706. $subRequest = Request::create($subRequestUri, 'get', [], [], [], $request->server->all());
  1707. $this->assertEquals($subRequestUri, $subRequest->getRequestUri(), '->getRequestUri() is correct in sub request');
  1708. }
  1709. public static function iisRequestUriProvider()
  1710. {
  1711. return [
  1712. [
  1713. [],
  1714. [
  1715. 'IIS_WasUrlRewritten' => '1',
  1716. 'UNENCODED_URL' => '/foo/bar',
  1717. ],
  1718. '/foo/bar',
  1719. ],
  1720. [
  1721. [],
  1722. [
  1723. 'ORIG_PATH_INFO' => '/foo/bar',
  1724. ],
  1725. '/foo/bar',
  1726. ],
  1727. [
  1728. [],
  1729. [
  1730. 'ORIG_PATH_INFO' => '/foo/bar',
  1731. 'QUERY_STRING' => 'foo=bar',
  1732. ],
  1733. '/foo/bar?foo=bar',
  1734. ],
  1735. ];
  1736. }
  1737. public function testTrustedHosts()
  1738. {
  1739. // create a request
  1740. $request = Request::create('/');
  1741. // no trusted host set -> no host check
  1742. $request->headers->set('host', 'evil.com');
  1743. $this->assertEquals('evil.com', $request->getHost());
  1744. // add a trusted domain and all its subdomains
  1745. Request::setTrustedHosts(['^([a-z]{9}\.)?trusted\.com$']);
  1746. // untrusted host
  1747. $request->headers->set('host', 'evil.com');
  1748. try {
  1749. $request->getHost();
  1750. $this->fail('Request::getHost() should throw an exception when host is not trusted.');
  1751. } catch (SuspiciousOperationException $e) {
  1752. $this->assertEquals('Untrusted Host "evil.com".', $e->getMessage());
  1753. }
  1754. // trusted hosts
  1755. $request->headers->set('host', 'trusted.com');
  1756. $this->assertEquals('trusted.com', $request->getHost());
  1757. $this->assertEquals(80, $request->getPort());
  1758. $request->server->set('HTTPS', true);
  1759. $request->headers->set('host', 'trusted.com');
  1760. $this->assertEquals('trusted.com', $request->getHost());
  1761. $this->assertEquals(443, $request->getPort());
  1762. $request->server->set('HTTPS', false);
  1763. $request->headers->set('host', 'trusted.com:8000');
  1764. $this->assertEquals('trusted.com', $request->getHost());
  1765. $this->assertEquals(8000, $request->getPort());
  1766. $request->headers->set('host', 'subdomain.trusted.com');
  1767. $this->assertEquals('subdomain.trusted.com', $request->getHost());
  1768. }
  1769. public function testSetTrustedHostsDoesNotBreakOnSpecialCharacters()
  1770. {
  1771. Request::setTrustedHosts(['localhost(\.local){0,1}#,example.com', 'localhost']);
  1772. $request = Request::create('/');
  1773. $request->headers->set('host', 'localhost');
  1774. $this->assertSame('localhost', $request->getHost());
  1775. }
  1776. public function testFactory()
  1777. {
  1778. Request::setFactory(function (array $query = [], array $request = [], array $attributes = [], array $cookies = [], array $files = [], array $server = [], $content = null) {
  1779. return new NewRequest();
  1780. });
  1781. $this->assertEquals('foo', Request::create('/')->getFoo());
  1782. Request::setFactory(null);
  1783. }
  1784. /**
  1785. * @dataProvider getLongHostNames
  1786. */
  1787. public function testVeryLongHosts($host)
  1788. {
  1789. $start = microtime(true);
  1790. $request = Request::create('/');
  1791. $request->headers->set('host', $host);
  1792. $this->assertEquals($host, $request->getHost());
  1793. $this->assertLessThan(5, microtime(true) - $start);
  1794. }
  1795. /**
  1796. * @dataProvider getHostValidities
  1797. */
  1798. public function testHostValidity($host, $isValid, $expectedHost = null, $expectedPort = null)
  1799. {
  1800. $request = Request::create('/');
  1801. $request->headers->set('host', $host);
  1802. if ($isValid) {
  1803. $this->assertSame($expectedHost ?: $host, $request->getHost());
  1804. if ($expectedPort) {
  1805. $this->assertSame($expectedPort, $request->getPort());
  1806. }
  1807. } else {
  1808. $this->expectException(SuspiciousOperationException::class);
  1809. $this->expectExceptionMessage('Invalid Host');
  1810. $request->getHost();
  1811. }
  1812. }
  1813. public static function getHostValidities()
  1814. {
  1815. return [
  1816. ['.a', false],
  1817. ['a..', false],
  1818. ['a.', true],
  1819. ["\xE9", false],
  1820. ['[::1]', true],
  1821. ['[::1]:80', true, '[::1]', 80],
  1822. [str_repeat('.', 101), false],
  1823. ];
  1824. }
  1825. public static function getLongHostNames()
  1826. {
  1827. return [
  1828. ['a'.str_repeat('.a', 40000)],
  1829. [str_repeat(':', 101)],
  1830. ];
  1831. }
  1832. /**
  1833. * @dataProvider methodIdempotentProvider
  1834. */
  1835. public function testMethodIdempotent($method, $idempotent)
  1836. {
  1837. $request = new Request();
  1838. $request->setMethod($method);
  1839. $this->assertEquals($idempotent, $request->isMethodIdempotent());
  1840. }
  1841. public static function methodIdempotentProvider()
  1842. {
  1843. return [
  1844. ['HEAD', true],
  1845. ['GET', true],
  1846. ['POST', false],
  1847. ['PUT', true],
  1848. ['PATCH', false],
  1849. ['DELETE', true],
  1850. ['PURGE', true],
  1851. ['OPTIONS', true],
  1852. ['TRACE', true],
  1853. ['CONNECT', false],
  1854. ];
  1855. }
  1856. /**
  1857. * @dataProvider methodSafeProvider
  1858. */
  1859. public function testMethodSafe($method, $safe)
  1860. {
  1861. $request = new Request();
  1862. $request->setMethod($method);
  1863. $this->assertEquals($safe, $request->isMethodSafe());
  1864. }
  1865. public static function methodSafeProvider()
  1866. {
  1867. return [
  1868. ['HEAD', true],
  1869. ['GET', true],
  1870. ['POST', false],
  1871. ['PUT', false],
  1872. ['PATCH', false],
  1873. ['DELETE', false],
  1874. ['PURGE', false],
  1875. ['OPTIONS', true],
  1876. ['TRACE', true],
  1877. ['CONNECT', false],
  1878. ];
  1879. }
  1880. /**
  1881. * @dataProvider methodCacheableProvider
  1882. */
  1883. public function testMethodCacheable($method, $cacheable)
  1884. {
  1885. $request = new Request();
  1886. $request->setMethod($method);
  1887. $this->assertEquals($cacheable, $request->isMethodCacheable());
  1888. }
  1889. public static function methodCacheableProvider()
  1890. {
  1891. return [
  1892. ['HEAD', true],
  1893. ['GET', true],
  1894. ['POST', false],
  1895. ['PUT', false],
  1896. ['PATCH', false],
  1897. ['DELETE', false],
  1898. ['PURGE', false],
  1899. ['OPTIONS', false],
  1900. ['TRACE', false],
  1901. ['CONNECT', false],
  1902. ];
  1903. }
  1904. /**
  1905. * @dataProvider protocolVersionProvider
  1906. */
  1907. public function testProtocolVersion($serverProtocol, $trustedProxy, $via, $expected)
  1908. {
  1909. if ($trustedProxy) {
  1910. Request::setTrustedProxies(['1.1.1.1'], -1);
  1911. }
  1912. $request = new Request();
  1913. $request->server->set('SERVER_PROTOCOL', $serverProtocol);
  1914. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  1915. if (null !== $via) {
  1916. $request->headers->set('Via', $via);
  1917. }
  1918. $this->assertSame($expected, $request->getProtocolVersion());
  1919. }
  1920. public static function protocolVersionProvider()
  1921. {
  1922. return [
  1923. 'untrusted with empty via' => ['HTTP/2.0', false, '', 'HTTP/2.0'],
  1924. 'untrusted without via' => ['HTTP/2.0', false, null, 'HTTP/2.0'],
  1925. 'untrusted with via' => ['HTTP/2.0', false, '1.0 fred, 1.1 nowhere.com (Apache/1.1)', 'HTTP/2.0'],
  1926. 'trusted with empty via' => ['HTTP/2.0', true, '', 'HTTP/2.0'],
  1927. 'trusted without via' => ['HTTP/2.0', true, null, 'HTTP/2.0'],
  1928. 'trusted with via' => ['HTTP/2.0', true, '1.0 fred, 1.1 nowhere.com (Apache/1.1)', 'HTTP/1.0'],
  1929. 'trusted with via and protocol name' => ['HTTP/2.0', true, 'HTTP/1.0 fred, HTTP/1.1 nowhere.com (Apache/1.1)', 'HTTP/1.0'],
  1930. 'trusted with broken via' => ['HTTP/2.0', true, 'HTTP/1^0 foo', 'HTTP/2.0'],
  1931. 'trusted with partially-broken via' => ['HTTP/2.0', true, '1.0 fred, foo', 'HTTP/1.0'],
  1932. ];
  1933. }
  1934. public static function nonstandardRequestsData()
  1935. {
  1936. return [
  1937. ['', '', '/', 'http://host:8080/', ''],
  1938. ['/', '', '/', 'http://host:8080/', ''],
  1939. ['hello/app.php/x', '', '/x', 'http://host:8080/hello/app.php/x', '/hello', '/hello/app.php'],
  1940. ['/hello/app.php/x', '', '/x', 'http://host:8080/hello/app.php/x', '/hello', '/hello/app.php'],
  1941. ['', 'a=b', '/', 'http://host:8080/?a=b'],
  1942. ['?a=b', 'a=b', '/', 'http://host:8080/?a=b'],
  1943. ['/?a=b', 'a=b', '/', 'http://host:8080/?a=b'],
  1944. ['x', 'a=b', '/x', 'http://host:8080/x?a=b'],
  1945. ['x?a=b', 'a=b', '/x', 'http://host:8080/x?a=b'],
  1946. ['/x?a=b', 'a=b', '/x', 'http://host:8080/x?a=b'],
  1947. ['hello/x', '', '/x', 'http://host:8080/hello/x', '/hello'],
  1948. ['/hello/x', '', '/x', 'http://host:8080/hello/x', '/hello'],
  1949. ['hello/app.php/x', 'a=b', '/x', 'http://host:8080/hello/app.php/x?a=b', '/hello', '/hello/app.php'],
  1950. ['hello/app.php/x?a=b', 'a=b', '/x', 'http://host:8080/hello/app.php/x?a=b', '/hello', '/hello/app.php'],
  1951. ['/hello/app.php/x?a=b', 'a=b', '/x', 'http://host:8080/hello/app.php/x?a=b', '/hello', '/hello/app.php'],
  1952. ];
  1953. }
  1954. /**
  1955. * @dataProvider nonstandardRequestsData
  1956. */
  1957. public function testNonstandardRequests($requestUri, $queryString, $expectedPathInfo, $expectedUri, $expectedBasePath = '', $expectedBaseUrl = null)
  1958. {
  1959. if (null === $expectedBaseUrl) {
  1960. $expectedBaseUrl = $expectedBasePath;
  1961. }
  1962. $server = [
  1963. 'HTTP_HOST' => 'host:8080',
  1964. 'SERVER_PORT' => '8080',
  1965. 'QUERY_STRING' => $queryString,
  1966. 'PHP_SELF' => '/hello/app.php',
  1967. 'SCRIPT_FILENAME' => '/some/path/app.php',
  1968. 'REQUEST_URI' => $requestUri,
  1969. ];
  1970. $request = new Request([], [], [], [], [], $server);
  1971. $this->assertEquals($expectedPathInfo, $request->getPathInfo());
  1972. $this->assertEquals($expectedUri, $request->getUri());
  1973. $this->assertEquals($queryString, $request->getQueryString());
  1974. $this->assertEquals(8080, $request->getPort());
  1975. $this->assertEquals('host:8080', $request->getHttpHost());
  1976. $this->assertEquals($expectedBaseUrl, $request->getBaseUrl());
  1977. $this->assertEquals($expectedBasePath, $request->getBasePath());
  1978. }
  1979. public function testTrustedHost()
  1980. {
  1981. Request::setTrustedProxies(['1.1.1.1'], -1);
  1982. $request = Request::create('/');
  1983. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  1984. $request->headers->set('Forwarded', 'host=localhost:8080');
  1985. $request->headers->set('X-Forwarded-Host', 'localhost:8080');
  1986. $this->assertSame('localhost:8080', $request->getHttpHost());
  1987. $this->assertSame(8080, $request->getPort());
  1988. $request = Request::create('/');
  1989. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  1990. $request->headers->set('Forwarded', 'host="[::1]:443"');
  1991. $request->headers->set('X-Forwarded-Host', '[::1]:443');
  1992. $request->headers->set('X-Forwarded-Port', 443);
  1993. $this->assertSame('[::1]:443', $request->getHttpHost());
  1994. $this->assertSame(443, $request->getPort());
  1995. }
  1996. public function testTrustedPrefix()
  1997. {
  1998. Request::setTrustedProxies(['1.1.1.1'], Request::HEADER_X_FORWARDED_TRAEFIK);
  1999. // test with index deployed under root
  2000. $request = Request::create('/method');
  2001. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  2002. $request->headers->set('X-Forwarded-Prefix', '/myprefix');
  2003. $request->headers->set('Forwarded', 'host=localhost:8080');
  2004. $this->assertSame('/myprefix', $request->getBaseUrl());
  2005. $this->assertSame('/myprefix', $request->getBasePath());
  2006. $this->assertSame('/method', $request->getPathInfo());
  2007. }
  2008. public function testTrustedPrefixWithSubdir()
  2009. {
  2010. Request::setTrustedProxies(['1.1.1.1'], Request::HEADER_X_FORWARDED_TRAEFIK);
  2011. $server = [
  2012. 'SCRIPT_FILENAME' => '/var/hidden/app/public/public/index.php',
  2013. 'SCRIPT_NAME' => '/public/index.php',
  2014. 'PHP_SELF' => '/public/index.php',
  2015. ];
  2016. // test with index file deployed in subdir, i.e. local dev server (insecure!!)
  2017. $request = Request::create('/public/method', 'GET', [], [], [], $server);
  2018. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  2019. $request->headers->set('X-Forwarded-Prefix', '/prefix');
  2020. $request->headers->set('Forwarded', 'host=localhost:8080');
  2021. $this->assertSame('/prefix/public', $request->getBaseUrl());
  2022. $this->assertSame('/prefix/public', $request->getBasePath());
  2023. $this->assertSame('/method', $request->getPathInfo());
  2024. }
  2025. public function testTrustedPrefixEmpty()
  2026. {
  2027. // check that there is no error, if no prefix is provided
  2028. Request::setTrustedProxies(['1.1.1.1'], Request::HEADER_X_FORWARDED_TRAEFIK);
  2029. $request = Request::create('/method');
  2030. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  2031. $this->assertSame('', $request->getBaseUrl());
  2032. }
  2033. public function testTrustedPort()
  2034. {
  2035. Request::setTrustedProxies(['1.1.1.1'], -1);
  2036. $request = Request::create('/');
  2037. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  2038. $request->headers->set('Forwarded', 'host=localhost:8080');
  2039. $request->headers->set('X-Forwarded-Port', 8080);
  2040. $this->assertSame(8080, $request->getPort());
  2041. $request = Request::create('/');
  2042. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  2043. $request->headers->set('Forwarded', 'host=localhost');
  2044. $request->headers->set('X-Forwarded-Port', 80);
  2045. $this->assertSame(80, $request->getPort());
  2046. $request = Request::create('/');
  2047. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  2048. $request->headers->set('Forwarded', 'host="[::1]"');
  2049. $request->headers->set('X-Forwarded-Proto', 'https');
  2050. $request->headers->set('X-Forwarded-Port', 443);
  2051. $this->assertSame(443, $request->getPort());
  2052. }
  2053. public function testTrustedPortDoesNotDefaultToZero()
  2054. {
  2055. Request::setTrustedProxies(['1.1.1.1'], Request::HEADER_X_FORWARDED_FOR);
  2056. $request = Request::create('/');
  2057. $request->server->set('REMOTE_ADDR', '1.1.1.1');
  2058. $request->headers->set('X-Forwarded-Host', 'test.example.com');
  2059. $request->headers->set('X-Forwarded-Port', '');
  2060. $this->assertSame(80, $request->getPort());
  2061. }
  2062. /**
  2063. * @dataProvider trustedProxiesRemoteAddr
  2064. */
  2065. public function testTrustedProxiesRemoteAddr($serverRemoteAddr, $trustedProxies, $result)
  2066. {
  2067. $_SERVER['REMOTE_ADDR'] = $serverRemoteAddr;
  2068. Request::setTrustedProxies($trustedProxies, Request::HEADER_X_FORWARDED_FOR);
  2069. $this->assertSame($result, Request::getTrustedProxies());
  2070. }
  2071. public static function trustedProxiesRemoteAddr()
  2072. {
  2073. return [
  2074. ['1.1.1.1', ['REMOTE_ADDR'], ['1.1.1.1']],
  2075. ['1.1.1.1', ['REMOTE_ADDR', '2.2.2.2'], ['1.1.1.1', '2.2.2.2']],
  2076. [null, ['REMOTE_ADDR'], []],
  2077. [null, ['REMOTE_ADDR', '2.2.2.2'], ['2.2.2.2']],
  2078. ];
  2079. }
  2080. /**
  2081. * @dataProvider preferSafeContentData
  2082. */
  2083. public function testPreferSafeContent($server, bool $safePreferenceExpected)
  2084. {
  2085. $request = new Request([], [], [], [], [], $server);
  2086. $this->assertEquals($safePreferenceExpected, $request->preferSafeContent());
  2087. }
  2088. public static function preferSafeContentData()
  2089. {
  2090. return [
  2091. [[], false],
  2092. [
  2093. [
  2094. 'HTTPS' => 'on',
  2095. ],
  2096. false,
  2097. ],
  2098. [
  2099. [
  2100. 'HTTPS' => 'off',
  2101. 'HTTP_PREFER' => 'safe',
  2102. ],
  2103. false,
  2104. ],
  2105. [
  2106. [
  2107. 'HTTPS' => 'on',
  2108. 'HTTP_PREFER' => 'safe',
  2109. ],
  2110. true,
  2111. ],
  2112. [
  2113. [
  2114. 'HTTPS' => 'on',
  2115. 'HTTP_PREFER' => 'unknown-preference',
  2116. ],
  2117. false,
  2118. ],
  2119. [
  2120. [
  2121. 'HTTPS' => 'on',
  2122. 'HTTP_PREFER' => 'unknown-preference=42, safe',
  2123. ],
  2124. true,
  2125. ],
  2126. [
  2127. [
  2128. 'HTTPS' => 'on',
  2129. 'HTTP_PREFER' => 'safe, unknown-preference=42',
  2130. ],
  2131. true,
  2132. ],
  2133. ];
  2134. }
  2135. /**
  2136. * @group legacy
  2137. */
  2138. public function testXForwarededAllConstantDeprecated()
  2139. {
  2140. $this->expectDeprecation('Since symfony/http-foundation 5.2: The "HEADER_X_FORWARDED_ALL" constant is deprecated, use either "HEADER_X_FORWARDED_FOR | HEADER_X_FORWARDED_HOST | HEADER_X_FORWARDED_PORT | HEADER_X_FORWARDED_PROTO" or "HEADER_X_FORWARDED_AWS_ELB" or "HEADER_X_FORWARDED_TRAEFIK" constants instead.');
  2141. Request::setTrustedProxies([], Request::HEADER_X_FORWARDED_ALL);
  2142. }
  2143. public function testReservedFlags()
  2144. {
  2145. foreach ((new \ReflectionClass(Request::class))->getConstants() as $constant => $value) {
  2146. $this->assertNotSame(0b10000000, $value, sprintf('The constant "%s" should not use the reserved value "0b10000000".', $constant));
  2147. }
  2148. }
  2149. }
  2150. class RequestContentProxy extends Request
  2151. {
  2152. public function getContent($asResource = false)
  2153. {
  2154. return http_build_query(['_method' => 'PUT', 'content' => 'mycontent'], '', '&');
  2155. }
  2156. }
  2157. class NewRequest extends Request
  2158. {
  2159. public function getFoo()
  2160. {
  2161. return 'foo';
  2162. }
  2163. }