chore: add HTTP/2 tests

Author: theseion

.github/workflows/verifyimage.yml

@@ -101,14 +101,51 @@ jobs:
         run: |
           [ $(docker inspect ${{ matrix.target }}-test --format='{{.State.Running}}') = 'true' ]
           if grep -q  "nginx "<<< "${{ matrix.target }}"; then
+            echo "### nginx tests ###"
+
+            echo "Storing headers for sample attack..."
             curl -q -D headers.txt http://localhost:8080/?test=../../etc/passwd
+            echo "...done"
+
+            echo "Check status 403..."
             grep -q "HTTP/1.1 403 Forbidden" headers.txt
+            echo "...yes"
+
+            echo "Check 'Access-Control-Allow-Origin' header..."
             grep -q "Access-Control-Allow-Origin: *" headers.txt
+            echo "...yes"
+
+            echo "Check 'Access-Control-Max-Age' header..."
             grep -q "Access-Control-Max-Age: 3600" headers.txt
+            echo "...yes"
+
+            echo "Check 'Access-Control-Allow-Methods' header..."
             grep -q "Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS" headers.txt
+            echo "...yes"
+
+            echo "Check 'Access-Control-Allow-Headers'..."
             grep -q "Access-Control-Allow-Headers: *" headers.txt
+            echo "...yes"
+
+            echo "### nginx tests - done ###"
           fi
 
+          echo "### generic tests ###"
+
+          echo "Test HTTP/2 upgrade..."
+          curl -v --http2 localhost:8000 2>&1 | tee out.txt
+          grep -iP "101 Switching Protocols|HTTP/2 200" < out.txt | tee out2.txt
+          wc -l out2.txt | xargs -I % test % -eq 2
+          rm out*.txt
+          echo "...yes"
+
+          echo "Test HTTP/2 prior knowledge..."
+          curl -v --http2-prior-knowledge localhost:8000 2>&1 | tee out.txt
+          grep -i "HTTP/2 200" < out.txt
+          echo "...yes"
+
+          echo "### generic tests - done ###"
+
       - name: Checkout CRS
         uses: actions/checkout@v4
         with: