o
    ¹ió  ã                   @   sV   d Z ddlmZ ddlmZ ddlmZ ddlmZ dZ	G d	d
„ d
eƒZ
ee
fgZdS )z&Tornado handlers for security logging.é    )Úweb)Ú
authorizedé   )Ú
APIHandleré   )Úcsp_report_uriÚcspc                   @   s:   e Zd ZdZeZdZdd„ Zdd„ Ze	j
edd„ ƒƒZd	S )
ÚCSPReportHandlerz2Accepts a content security policy violation reportFc                 C   ó   dS )z:Don't check origin when reporting origin-check violations!T© ©Úselfr   r   úd/var/www/edux/Edux_v2/venv/lib/python3.10/site-packages/jupyter_server/services/security/handlers.pyÚskip_check_origin   ó   z"CSPReportHandler.skip_check_originc                 C   r
   )z!Don't check XSRF for CSP reports.Nr   r   r   r   r   Úcheck_xsrf_cookie   r   z"CSPReportHandler.check_xsrf_cookiec                 C   s   | j  d| jj dd¡¡ dS )z.Log a content security policy violation reportzContent security violation: %sÚutf8ÚreplaceN)ÚlogÚwarningÚrequestÚbodyÚdecoder   r   r   r   Úpost   s   þzCSPReportHandler.postN)Ú__name__Ú
__module__Ú__qualname__Ú__doc__ÚAUTH_RESOURCEÚauth_resourceÚ_track_activityr   r   r   Úauthenticatedr   r   r   r   r   r   r	      s    r	   N)r   Útornador   Újupyter_server.authr   Úbase.handlersr   Ú r   r   r	   Údefault_handlersr   r   r   r   Ú<module>   s    