o i2@s dZddlmZddlmZddlmZddlmZddlmZddl m Z dd l m Z zdd l mZWneyCdd lmZYnwGd d d eZGd ddeZdddZGdddeZGdddeZGdddeZeGdddeZGdddeZdS)a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause )warn)implements_iterator)PY2) string_types)Headers)is_entity_header) FileWrapper)urlparsec@eZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N__name__ __module__ __qualname____doc__rrS/var/www/edux/Edux_v2/venv/lib/python3.10/site-packages/werkzeug/middleware/lint.pyr r c@r ) HTTPWarningz Warning class for HTTP warnings.Nr rrrrr"rrcCs,t|turtd|t|jftdSdS)Nz'%s' requires strings, got '%s')typestrrrr )contextobj stacklevelrrr check_string&s rc@4eZdZddZddZddZddZd d Zd S) InputStreamcC ||_dSN_streamselfstreamrrr__init__/ zInputStream.__init__cGsBt|dkrtdtddn t|dkrtdtdd|jj|S)NrzWSGI does not guarantee an EOF marker on the input stream, thus making calls to 'wsgi.input.read()' unsafe. Conforming servers may never return from this call.rrz2Too many parameters passed to 'wsgi.input.read()'.)lenrr r"readr$argsrrrr+2s   zInputStream.readcGsLt|dkrtdtddnt|dkrtdtddntd|jj|S)Nrz_Calls to 'wsgi.input.readline()' without arguments are unsafe. Use 'wsgi.input.read()' instead.rr(r)z~'wsgi.input.readline()' was called with a size hint. WSGI does not support this, although it's available on all major servers.z5Too many arguments passed to 'wsgi.input.readline()'.)r*rr TypeErrorr"readliner,rrrr/Cs   zInputStream.readlinecCs6zt|jWStytdtddtdYSw)Nz'wsgi.input' is not iterable.rr(r)iterr"r.rr r$rrr__iter__Vs    zInputStream.__iter__cCtdtdd|jdS)Nz(The application closed the input stream!rr(rr r"closer1rrrr5]zInputStream.closeN)rrrr&r+r/r2r5rrrrr.s  rc@r) ErrorStreamcCrr r!r#rrrr&cr'zErrorStream.__init__cCstd||j|dS)Nzwsgi.error.write())rr"writer$srrrr8fs zErrorStream.writecCs|jdSr )r"flushr1rrrr;jszErrorStream.flushcCs|D]}||qdSr )r8)r$seqlinerrr writelinesms zErrorStream.writelinescCr3)Nz(The application closed the error stream!rr(r4r1rrrr5qr6zErrorStream.closeN)rrrr&r8r;r>r5rrrrr7bs  r7c@seZdZddZddZdS) GuardedWritecCs||_||_dSr )_write_chunks)r$r8chunksrrrr&ws zGuardedWrite.__init__cCs*td||j||jt|dS)Nzwrite())rr@r8rAappendr*r9rrr__call__{s  zGuardedWrite.__call__N)rrrr&rDrrrrr?vs r?c@r) GuardedIteratorcCs:||_tr t|j|_nt|j|_d|_||_||_dS)NF) _iteratorrr0next_next__next__closed headers_setrB)r$iteratorrKrBrrrr&s  zGuardedIterator.__init__cCs|Sr rr1rrrr2szGuardedIterator.__iter__cCsN|jr tdtdd|}|jstdtddtd||jt||S)Nz Iterated over closed 'app_iter'.rr(z8The application returned before it started the response.zapplication iterator items) rJrr rHrKrrBrCr*)r$rvrrrrIs zGuardedIterator.__next__cCsd|_t|jdr|j|jr|j\}}t|j}|jdtd}|dkrK|D]\}}| }|dvr?t |r?t d|t q(|rIt dt dSdSd |krUd ksZn|d krr|d kret d |t |rpt d|t dSdS|dur||krt dt dSdSdSdS)NTr5zcontent-length)ri0)expireszcontent-locationz'Entity header %r found in 304 response.z#304 responses must not have a body.drz/%r responses must have an empty content length.z"%r responses must not have a body.zGContent-Length and the number of bytes sent to the client do not match.)rJhasattrrFr5rKsumrBgetintlowerrrrr )r$ status_codeheaders bytes_sentcontent_lengthkey_valuerrrr5sL      zGuardedIterator.closecCs0|jsztdtWdStyYdSwdS)Nz4Iterator was garbage collected before it was closed.)rJrr Exceptionr1rrr__del__s zGuardedIterator.__del__N)rrrr&r2rIr5r^rrrrrEs   'rEc@s@eZdZdZddZddZddZdd Zd d Zd d Z dS)LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it check are: - invalid status codes - non-bytestrings sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) cCrr )app)r$r`rrrr&r'zLintMiddleware.__init__cCst|tur tdtdddD]}||vrtd|tddq|ddkr,td tdd|d d }|d d }|rI|d dkrItd|tdd|r\|d dkr^td|tdddSdSdS)Nz/WSGI environment is not a standard Python dict.r() REQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_oncez%Required environment key %r not foundrre)r)rz"Environ is not a WSGI 1.0 environ. SCRIPT_NAME PATH_INFOr/z-'SCRIPT_NAME' does not start with a slash: %rz+'PATH_INFO' does not start with a slash: %r)rdictrr rT)r$environr[ script_name path_inforrr check_environs>      zLintMiddleware.check_environcCs\td||ddd}t|dks|sttdddt|dks+|ddkr3ttd ddt|}|d krCttd ddt|turQttd dd|D]<}t|t usat|d krittddd|\}}t|t usyt|t urttddd| dkrttdddqS|durt |t sttdddt |}||||fS)Nstatusr)rrz Status code must be three digitsr(ra zeInvalid value for status %r. Valid status strings are three digits, a space and a status explanationrOzstatus code < 100 detectedzheader list is not a listrz Headers must tuple 2-item tupleszheader items must be stringszFThe status header is not supported due to conflicts with the CGI spec.zinvalid value for exc_info)rsplitr*isdigitrr rUrlisttuplerrV isinstancer check_headers)r$rqrXexc_inforWitemnamevaluerrrcheck_start_responsesF     z#LintMiddleware.check_start_responsecCs|d}|dur<|dr!|drttddd|dd}|dd|d dkr3d ks.checking_start_response) r*rr rprr7r r`rrE)r$r-rrmrrrrrrDks"     zLintMiddleware.__call__N) rrrrr&rpr}rxrrDrrrrr_s,0 r_N)r)rwarningsr_compatrrrdatastructuresrhttprwsgir urllib.parser ImportErrorWarningr rrobjectrr7r?rEr_rrrrs,         4 P