httpbin does not reflect requests perfectly

[theseion]

httpbin usually returns the request data in the response exactly as sent. At least in case of Unicode that is not true, unfortunately. Example:

curl -X POST "https://httpbin.org/anything" --json '{"über": "bort"}'
{
  "args": {},
  "data": "{\"\u00fcber\": \"bort\"}",
  "files": {},
  "form": {},
  "headers": {
    "Accept": "application/json",
    "Content-Length": "17",
    "Content-Type": "application/json",
    "Host": "httpbin.org",
    "User-Agent": "curl/8.1.2",
    "X-Amzn-Trace-Id": "Root=1-6548859d-09da901d70e79647362f7b83"
  },
  "json": {
    "\u00fcber": "bort"
  },
  "method": "POST",
  "origin": "89.133.9.17",
  "url": "https://httpbin.org/anything"
}

The Unicode sequence is returned as a backslash escape sequence instead. That is semantically correct but bad for testing. We need to find a way around this.

[M4tteoP]

The httpbin go port (go-httpbin) is behaving in a better way:

▶ go run github.com/mccutchen/go-httpbin/v2/cmd/go-httpbin@v2.9 -port 8080 & 
▶ curl -X POST localhost:8080/anything --json '{"über": "bort"}'
{
  "args": {},
  "headers": {
    "Accept": [
      "application/json"
    ],
    "Content-Length": [
      "17"
    ],
    "Content-Type": [
      "application/json"
    ],
    "Host": [
      "localhost:8080"
    ],
    "User-Agent": [
      "curl/8.1.2"
    ]
  },
  "method": "POST",
  "origin": "127.0.0.1:54971",
  "url": "http://localhost:8080/anything",
  "data": "{\"über\": \"bort\"}",
  "files": null,
  "form": null,
  "json": {
    "über": "bort"
  }
}

Around Coraza we are already using it in some places as the backend to test the CRS, moving to it should be pretty smooth

[theseion]

Great! I'll take a look.

[theseion]

coreruleset/coreruleset#3464 fixes the issue for the CRS test suite but is not a generic solution for go-ftw.

[theseion]

We now have albedo.