o 'h8@sdZddlmZddlZddlmZddlmZddl m Z ddl m Z dd l mZdd lmZejrEdd lmZdd lmZdd lmZGdddeZGdddeZefd&ddZGdddZGdddZGd d!d!ZGd"d#d#ZGd$d%d%ZdS)'a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause ) annotationsN) TracebackType)urlparse)warn)Headers)is_entity_header) FileWrapper) StartResponse)WSGIApplication)WSGIEnvironmentc@eZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N__name__ __module__ __qualname____doc__rrT/var/www/html/olx_land/venv/lib/python3.10/site-packages/werkzeug/middleware/lint.pyr!rc@r ) HTTPWarningz Warning class for HTTP warnings.Nrrrrrr%rrcontextstrobjobjectneedtypereturnNonecCs<t||urt|d|jdt|jdtdddSdS)Nz requires z, got . stacklevel)rrrr)rrrrrr check_type)s  r$c@s>eZdZdddZdd d Zdd d ZdddZdddZdS) InputStreamstream t.IO[bytes]rrcC ||_dSN_streamselfr&rrr__init__3 zInputStream.__init__argst.AnybytescGsBt|dkrtdtddn t|dkrtdtdd|jj|S)NrzWSGI does not guarantee an EOF marker on the input stream, thus making calls to 'wsgi.input.read()' unsafe. Conforming servers may never return from this call.rr"z2Too many parameters passed to 'wsgi.input.read()'.)lenrrr+readr-r0rrrr56s   zInputStream.readcGsLt|dkrtdtddnt|dkrtdtddntd|jj|S)Nrz_Calls to 'wsgi.input.readline()' without arguments are unsafe. Use 'wsgi.input.read()' instead.rr"r3z~'wsgi.input.readline()' was called with a size hint. WSGI does not support this, although it's available on all major servers.z5Too many arguments passed to 'wsgi.input.readline()'.)r4rr TypeErrorr+readliner6rrrr8Gs   zInputStream.readlinet.Iterator[bytes]cCs6zt|jWStytdtddtdYSw)Nz'wsgi.input' is not iterable.rr"r)iterr+r7rrr-rrr__iter__Zs    zInputStream.__iter__cCtdtdd|jdS)Nz(The application closed the input stream!rr"rrr+closer;rrrr?azInputStream.closeN)r&r'rr)r0r1rr2)rr9rr)rrrr.r5r8r<r?rrrrr%2s     r%c@s>eZdZdddZdd d Zdd d ZdddZdddZdS) ErrorStreamr& t.IO[str]rrcCr(r)r*r,rrrr.gr/zErrorStream.__init__srcCstd|t|j|dS)Nzwsgi.error.write())r$rr+writer-rDrrrrEjs zErrorStream.writecCs|jdSr))r+flushr;rrrrGnszErrorStream.flushseqt.Iterable[str]cCs|D]}||qdSr))rE)r-rHlinerrr writelinesqs zErrorStream.writelinescCr=)Nz(The application closed the error stream!rr"r>r;rrrr?ur@zErrorStream.closeN)r&rCrr)rDrrrrA)rHrIrr)rrrr.rErGrKr?rrrrrBfs     rBc@s eZdZdddZdd d Zd S) GuardedWriterEt.Callable[[bytes], object]chunks list[int]rrcCs||_||_dSr))_write_chunks)r-rErNrrrr.{s zGuardedWrite.__init__rDr2cCs*td|t|||jt|dS)Nzwrite())r$r2rPrQappendr4rFrrr__call__s  zGuardedWrite.__call__N)rErMrNrOrr)rDr2rr)rrrr.rSrrrrrLzs rLc@s>eZdZdd d Zdd d ZdddZdddZdddZdS)GuardedIteratoriteratort.Iterable[bytes] headers_settuple[int, Headers]rNrOrrcCs(||_t|j|_d|_||_||_dS)NF) _iteratorr:__next___nextclosedrWrN)r-rUrWrNrrrr.s   zGuardedIterator.__init__cCs|Sr)rr;rrrr<szGuardedIterator.__iter__r2cCsP|jr tdtdd|}|jstdtddtd|t|jt ||S)Nz Iterated over closed 'app_iter'.rr"z8The application returned before it started the response.zapplication iterator items) r\rrr[rWr$r2rNrRr4)r-rvrrrrZs zGuardedIterator.__next__cCs*d|_t|jdr|j|jr|j\}}t|j}|jdtd}|dkrQ|D]\}}| }|dvrCt |rCt d|dt d d q(|rOt d t d d dSdSd |kr[d ks`n|dkr~|dkrnt |dt d d |r|t |dt d d dSdS|dur||krt dt d d dSdSdSdS)NTr?zcontent-length)ri0)expireszcontent-locationzEntity header z found in 304 response.rr"z#304 responses must not have a body.drz- responses must have an empty content length.z responses must not have a body.zGContent-Length and the number of bytes sent to the client do not match.)r\hasattrrYr?rWsumrNgetintlowerrrrr)r- status_codeheaders bytes_sentcontent_lengthkey_valuerrrr?s`          #zGuardedIterator.closecCs4|jsz tdtddWdStyYdSwdS)Nz4Iterator was garbage collected before it was closed.rr")r\rr Exceptionr;rrr__del__s zGuardedIterator.__del__N)rUrVrWrXrNrOrr)rrT)rr2rA)rrrr.r<rZr?rnrrrrrTs    1rTc@sLeZdZdZd"ddZd#d d Zd$ddZd%ddZd&ddZd'dd Z d!S)(LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it checks are: - invalid status codes - non-bytes sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) appr rrcCr(r))rp)r-rprrrr.r/zLintMiddleware.__init__environr cCst|tur tdtdddD]}||vr td|dtddq|dd kr.td tdd|d d }|d d }|rL|ddkrLtd|tdd|r`|ddkrbtd|tdddSdSdS)Nz/WSGI environment is not a standard Python dict.r") REQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_oncezRequired environment key z not foundr!rv)r3rz"Environ is not a WSGI 1.0 environ. SCRIPT_NAME PATH_INFOr/z+'SCRIPT_NAME' does not start with a slash: z)'PATH_INFO' does not start with a slash: )rdictrrrd)r-rqrk script_name path_inforrr check_environs>       zLintMiddleware.check_environstatusrrhlist[tuple[str, str]]exc_info?None | tuple[type[BaseException], BaseException, TracebackType]rXc CsVtd|t|ddd}t|dks|stdtddt|dks+|ddkr6td |d tddt|}|d krEtd tddt|t urRtd tdd|D]9}t|t usbt|dkritdtdd|\}}t|tusyt|turtdtdd| dkrtdtddqT|durt |t stdtddt |} || || fS)Nrr3rr!z!Status code must be three digits.r"rr zInvalid value for status zJ. Valid status strings are three digits, a space and a status explanation.r_zStatus code < 100 detected.zHeader list is not a list.rz#Header items must be 2-item tuples.z'Header keys and values must be strings.zFThe status header is not supported due to conflicts with the CGI spec.zInvalid value for exc_info.)r$rsplitr4 isdecimalrrrerlisttuplerf isinstancer check_headers) r-rrhrstatus_code_strrgitemnamevalue headers_objrrrcheck_start_response)sF     z#LintMiddleware.check_start_responsercCs|d}|dur:|dr |drtdtdd|dd}|dd|d dkr2d ks:ntd tdd|d }|durQt|jsStd tdddSdSdS)Netag)zW/w/rz)Weak etag indicator should be upper case.rrr"rr3"zUnquoted etag emitted.locationz+Absolute URLs required for location header.)rd startswithrrrnetloc)r-rhrrrrrr]s,    &   zLintMiddleware.check_headersapp_iterrVcCs t|trtdtdddSdS)NzThe application returned a string. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.r!r")rrrr)r-rrrrcheck_iteratorxs  zLintMiddleware.check_iteratorr0r1kwargscst|dkr tdtdd|rtdtdd|d}|d|t|d|d<t|d|d<t|d <ggdfdd }|t d|} |t |t t t tfS)NrzA WSGI app takes two arguments.r"z+A WSGI app does not take keyword arguments.rr3rwrxzwsgi.file_wrapperr0r1rrt.Callable[[bytes], None]cst|dvrtdt|dtdd|rtdtdd|d}|d}t|d kr.|dnd}|||dd<t|||S) N>rr!zInvalid number of arguments: z, expected 2 or 3.rr"z1'start_response' does not take keyword arguments.rr3r!)r4rrrrL)r0rrrhrrNrWr-start_responserrchecking_start_responses$ z8LintMiddleware.__call__..checking_start_responser )r0r1rr1rr)r4rrrr%rBr rptcastrrTrrer)r-r0rrqrrrrrrSs(   zLintMiddleware.__call__N)rpr rr)rqr rr)rrrhrrrrrX)rhrrr)rrVrr)r0r1rr1rrV) rrrrr.rrrrrSrrrrros   , 4  ro)rrrrrrrr) r __future__rtypingrtypesr urllib.parserwarningsrdatastructuresrhttprwsgir TYPE_CHECKING_typeshed.wsgir r r Warningrrrr$r%rBrLrTrorrrrs*           4 ^