Describe Apache's handling of Transfer-Encoding: identity in requests.
Use a descriptive name for a test.
Raise HTP_REQUEST_SMUGGLING when T-E is used with HTTP/1.0. Previously only HTP_REQUEST_INVALID_T_E would be raised.
Docs.
Do not set htp_tx_t::request_transfer_coding when we cannot reliably determine how to handle the request body (even if we error out). Use HTP_CODING_INVALID instead.
Add test cases for Basic and Digest authentication.
Typo.
Leave htp_tx_t::request_uri NULL when the request line does not contain the URI. Previously, an empty string would be allocated.
Add a test for invalid protocol.
Typo.
Do not fail the entire stream if the Authorization header is invalid. Set HTP_AUTH_INVALID instead.
When parsing an invalid Digest authentication, do not fail the stream.
Add a test for unrecognized authentication type.