src/Middleware/Rewrite/test/ApacheModRewrite/ModRewriteMiddlewareTest.cs - main - githubmirror/aspnetcore

src/Middleware/Rewrite/test/ApacheModRewrite/ModRewriteMiddlewareTest.cs
522 строки18 KB
Roman Konecny
Collapse scheme-relative leading slashes in Rewrite middleware redirect/rewrite targets (#66961)
24 июн 2026, 12:20
24 июн 2026, 12:200563bff
// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.

using System.Net;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.TestHost;
using Microsoft.Extensions.Hosting;

namespace Microsoft.AspNetCore.Rewrite.Tests.ModRewrite;

public class ModRewriteMiddlewareTest
{
    [Fact]
    public async Task Invoke_RewritePathWhenMatching()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader("RewriteRule /hey/(.*) /$1 "));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("/hey/hello");

        Assert.Equal("/hello", response);
    }

    [Theory]
    [InlineData("/legacy//example.com")]
    [InlineData("/legacy///example.com")]
    [InlineData(@"/legacy/\example.com")]
    public async Task Invoke_RedirectCollapsesSchemeRelativeBackReference(string requestPath)
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader("RewriteRule /legacy/(.*) /$1 [R=302,L]"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Response.Headers.Location));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetAsync(requestPath);

        Assert.Equal("/example.com", response.Headers.Location.OriginalString);
    }

    [Theory]
    [InlineData("/legacy//example.com")]
    [InlineData("/legacy///example.com")]
    [InlineData(@"/legacy/\example.com")]
    public async Task Invoke_RewriteCollapsesSchemeRelativeBackReference(string requestPath)
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader("RewriteRule /legacy/(.*) /$1"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync(requestPath);

        Assert.Equal("/example.com", response);
    }

    [Fact]
    public async Task Invoke_RewritePathTerminatesOnFirstSuccessOfRule()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader("RewriteRule /hey/(.*) /$1 [L]"))
                        .AddApacheModRewrite(new StringReader("RewriteRule /hello /what"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                 .Configure(app =>
                 {
                     app.UseRewriter(options);
                     app.Run(context => context.Response.WriteAsync(context.Request.Path));
                 });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("/hey/hello");

        Assert.Equal("/hello", response);
    }

    [Fact]
    public async Task Invoke_RewritePathDoesNotTerminateOnFirstSuccessOfRule()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader("RewriteRule /hey/(.*) /$1"))
                                   .AddApacheModRewrite(new StringReader("RewriteRule /hello /what"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("/hey/hello");

        Assert.Equal("/what", response);
    }

    [Fact]
    public async Task Invoke_ShouldIgnoreComments()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader("#RewriteRule ^/hey/(.*) /$1 "));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("/hey/hello");

        Assert.Equal("/hey/hello", response);
    }

    [Fact]
    public async Task Invoke_ShouldRewriteHomepage()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader(@"RewriteRule ^/$ /homepage.html"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("http://www.foo.org/");

        Assert.Equal("/homepage.html", response);
    }

    [Fact]
    public async Task Invoke_ShouldIgnorePorts()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader(@"RewriteRule ^/$ /homepage.html"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
               .Configure(app =>
               {
                   app.UseRewriter(options);
                   app.Run(context => context.Response.WriteAsync(context.Request.Path));
               });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("http://www.foo.org:42/");

        Assert.Equal("/homepage.html", response);
    }

    [Fact]
    public async Task Invoke_HandleNegatedRewriteRules()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader(@"RewriteRule !^/$ /homepage.html"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
               .Configure(app =>
               {
                   app.UseRewriter(options);
                   app.Run(context => context.Response.WriteAsync(context.Request.Path));
               });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("http://www.foo.org/");

        Assert.Equal("/", response);
    }

    [Theory]
    [InlineData("http://www.foo.org/homepage.aspx", @"RewriteRule (.*)\.aspx $1.php", "/homepage.php")]
    [InlineData("http://www.foo.org/pages/homepage.aspx", @"RewriteRule (.*)/(.*)\.aspx $2.php", "/homepage.php")]
    public async Task Invoke_BackReferencesShouldBeApplied(string url, string rule, string expected)
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader(rule));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync(url);

        Assert.Equal(expected, response);
    }

    [Theory]
    [InlineData("http://www.foo.org/homepage.aspx", @"RewriteRule (.*)\.aspx $1.php", "/homepage.php")]
    [InlineData("http://www.foo.org/homepage.ASPX", @"RewriteRule (.*)\.aspx $1.php", "/homepage.ASPX")]
    [InlineData("http://www.foo.org/homepage.aspx", @"RewriteRule (.*)\.aspx $1.php [NC]", "/homepage.php")]
    [InlineData("http://www.foo.org/homepage.ASPX", @"RewriteRule (.*)\.aspx $1.php [NC]", "/homepage.php")]
    [InlineData("http://www.foo.org/homepage.aspx", @"RewriteRule (.*)\.aspx $1.php [nocase]", "/homepage.php")]
    [InlineData("http://www.foo.org/homepage.ASPX", @"RewriteRule (.*)\.aspx $1.php [nocase]", "/homepage.php")]
    public async Task Invoke_ShouldHandleFlagNoCase(string url, string rule, string expected)
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader(rule));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync(url);

        Assert.Equal(expected, response);
    }

    [Fact]
    public async Task Invoke_CheckFullUrlWithOnlyPath()
    {
        var options = new RewriteOptions()
            .AddApacheModRewrite(new StringReader(@"RewriteRule (.+) http://www.example.com$1/"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("http://www.foo.org/blog/2016-jun");

        Assert.Equal(@"/blog/2016-jun/", response);
    }

    [Fact]
    public async Task Invoke_CheckFullUrlWithUFlag()
    {
        var options = new RewriteOptions()
            .AddApacheModRewrite(new StringReader(@"RewriteRule (.+) http://www.example.com$1/"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Scheme + "://" + context.Request.Host.Host + context.Request.Path + context.Request.QueryString));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("http://www.foo.org/blog/2016-jun");

        Assert.Equal(@"http://www.example.com/blog/2016-jun/", response);
    }

    [Fact]
    public async Task Invoke_CheckModFileConditions()
    {
        var options = new RewriteOptions()
            .AddApacheModRewrite(new StringReader(@"RewriteRule (.+) http://www.example.com$1/"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Scheme + "://" + context.Request.Host.Host + context.Request.Path + context.Request.QueryString));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync("http://www.foo.org/blog/2016-jun");

        Assert.Equal(@"http://www.example.com/blog/2016-jun/", response);
    }

    [Theory]
    [InlineData("http://www.example.com/foo/")]
    public async Task Invoke_EnsureHttps(string input)
    {
        var options = new RewriteOptions()
            .AddApacheModRewrite(new StringReader("RewriteCond %{REQUEST_URI} /foo/  \nRewriteCond %{HTTPS} !on   \nRewriteRule ^(.*)$ https://www.example.com$1 [R=301,L]"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Scheme + "://" + context.Request.Host.Host + context.Request.Path + context.Request.QueryString));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetAsync(input);

        Assert.Equal((HttpStatusCode)301, response.StatusCode);
        Assert.Equal(@"https://www.example.com/foo/", response.Headers.Location.AbsoluteUri);
    }

    [Theory]
    [InlineData("http://www.example.com/")]
    public async Task Invoke_CaptureEmptyStringInRegexAssertRedirectLocationHasForwardSlash(string input)
    {
        var options = new RewriteOptions()
            .AddApacheModRewrite(new StringReader("RewriteRule ^(.*)$ $1 [R=301,L]"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Scheme + "://" + context.Request.Host.Host + context.Request.Path + context.Request.QueryString));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetAsync(input);

        Assert.Equal(HttpStatusCode.MovedPermanently, response.StatusCode);
        Assert.Equal("/", response.Headers.Location.OriginalString);
    }

    [Theory]
    [InlineData("http://www.example.com/")]
    public async Task Invoke_CaptureEmptyStringInRegexAssertRewriteHasForwardSlash(string input)
    {
        var options = new RewriteOptions()
            .AddApacheModRewrite(new StringReader("RewriteRule ^(.*)$ $1 [L]"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(context.Request.Path + context.Request.QueryString));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();

        var response = await server.CreateClient().GetStringAsync(input);
        Assert.Equal("/", response);
    }

    [Fact]
    public async Task Invoke_CaptureEmptyStringInRegexAssertLocationHeaderContainsPathBase()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader(@"RewriteRule ^(.*)$ $1 [R=301,L]"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(
                        context.Request.Path +
                        context.Request.QueryString));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();
        server.BaseAddress = new Uri("http://localhost:5000/foo");

        var response = await server.CreateClient().GetAsync("");

        Assert.Equal("/foo", response.Headers.Location.OriginalString);
    }

    [Fact]
    public async Task CapturedVariablesInConditionsArePreservedToRewriteRule()
    {
        var options = new RewriteOptions().AddApacheModRewrite(new StringReader(@"RewriteCond %{REQUEST_URI} /home
RewriteCond %{QUERY_STRING} report_id=(.+)
RewriteRule (.*) http://localhost:80/home/report/%1 [R=301,L,QSD]"));
        using var host = new HostBuilder()
            .ConfigureWebHost(webHostBuilder =>
            {
                webHostBuilder
                .UseTestServer()
                .Configure(app =>
                {
                    app.UseRewriter(options);
                    app.Run(context => context.Response.WriteAsync(
                       context.Request.Path +
                       context.Request.QueryString));
                });
            }).Build();

        await host.StartAsync();

        var server = host.GetTestServer();
        server.BaseAddress = new Uri("http://localhost:5000/foo");
        var response = await server.CreateClient().GetAsync("/home?report_id=123");

        Assert.Equal("http://localhost:80/home/report/123", response.Headers.Location.OriginalString);
    }
}