Check how content-length is reported when zero content-length (#3922)

estringana · web-flow · commit 6a0bbf7c3c62 · 2026-06-09T17:14:24.000+02:00
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/CommonTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/CommonTests.groovy
@@ -271,7 +271,6 @@ trait CommonTests {
     @Test
     void 'trace without event'() {
         def respContentType = null
-        def respContentLength = null
         def trace = container.traceFromRequest('/hello.php') { HttpResponse<InputStream> resp ->
             assert resp.statusCode() == 200
             def headerContentType = resp.headers().firstValue('Content-Type')
@@ -288,6 +287,28 @@ trait CommonTests {
         assert span.meta."http.response.headers.content-language" == 'en'
     }
 
+    @Test
+    void 'response with zero content-length'() {
+        def trace = container.traceFromRequest('/zero_content_length.php') { HttpResponse<InputStream> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        def spanContentLength = trace.first().meta."http.response.headers.content-length"
+        assert spanContentLength instanceof String
+        assert spanContentLength == '0'
+    }
+
+    @Test
+    void 'response with non-zero content-length'() {
+        def trace = container.traceFromRequest('/non_zero_content_length.php') { HttpResponse<InputStream> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        def spanContentLength = trace.first().meta."http.response.headers.content-length"
+        assert spanContentLength instanceof String
+        assert spanContentLength == '12'
+    }
+
     @Test
     void 'trace with an attack'() {
         HttpRequest req = container.buildReq('/hello.php')
diff --git a/appsec/tests/integration/src/test/www/base/public/non_zero_content_length.php b/appsec/tests/integration/src/test/www/base/public/non_zero_content_length.php
@@ -0,0 +1,5 @@
+<?php
+$content = 'Hello world!';
+header('Content-Length: ' . strlen($content));
+header('Content-Type: text/plain');
+echo $content;
diff --git a/appsec/tests/integration/src/test/www/base/public/zero_content_length.php b/appsec/tests/integration/src/test/www/base/public/zero_content_length.php
@@ -0,0 +1,3 @@
+<?php
+header('Content-Length: 0');
+header('Content-Type: text/plain');

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+<?php`
	`2`	`+header('Content-Length: 0');`
	`3`	`+header('Content-Type: text/plain');`