U %_2@s dZddlmZddlmZddlmZddlmZddlmZddl m Z dd l m Z zdd l mZWn ek rdd lmZYnXGd d d eZGd ddeZdddZGdddeZGdddeZGdddeZeGdddeZGdddeZdS)a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause )warn)implements_iterator)PY2) string_types)Headers)is_entity_header) FileWrapper)urlparsec@seZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N__name__ __module__ __qualname____doc__rrK/home/toby/toby_env/lib/python3.8/site-packages/werkzeug/middleware/lint.pyr sr c@seZdZdZdS) HTTPWarningz Warning class for HTTP warnings.Nr rrrrr"srcCs(t|tk r$td|t|jftdS)Nz'%s' requires strings, got '%s')typestrrr r )contextobj stacklevelrrr check_string&s  rc@s4eZdZddZddZddZddZd d Zd S) InputStreamcCs ||_dSN_streamselfstreamrrr__init__/szInputStream.__init__cGsBt|dkrtdtddnt|dkr6tdtdd|jj|S)NrzWSGI does not guarantee an EOF marker on the input stream, thus making calls to 'wsgi.input.read()' unsafe. Conforming servers may never return from this call.rrz2Too many parameters passed to 'wsgi.input.read()'.)lenrr rreadr argsrrrr&2s  zInputStream.readcGsLt|dkrtdtddn$t|dkr8tdtddntd|jj|S)Nrz_Calls to 'wsgi.input.readline()' without arguments are unsafe. Use 'wsgi.input.read()' instead.rr#r$z~'wsgi.input.readline()' was called with a size hint. WSGI does not support this, although it's available on all major servers.z5Too many arguments passed to 'wsgi.input.readline()'.)r%rr TypeErrorrreadliner'rrrr*Cs  zInputStream.readlinecCs<z t|jWStk r6tdtddtdYSXdS)Nz'wsgi.input' is not iterable.rr#r)iterrr)rr r rrr__iter__Vs  zInputStream.__iter__cCstdtdd|jdS)Nz(The application closed the input stream!rr#rr rcloser,rrrr/]szInputStream.closeN)r rrr"r&r*r-r/rrrrr.s rc@s4eZdZddZddZddZddZd d Zd S) ErrorStreamcCs ||_dSrrrrrrr"cszErrorStream.__init__cCstd||j|dS)Nzwsgi.error.write())rrwriter srrrr1fs zErrorStream.writecCs|jdSr)rflushr,rrrr4jszErrorStream.flushcCs|D]}||qdSr)r1)r seqlinerrr writelinesmszErrorStream.writelinescCstdtdd|jdS)Nz(The application closed the error stream!rr#r.r,rrrr/qszErrorStream.closeN)r rrr"r1r4r7r/rrrrr0bs r0c@seZdZddZddZdS) GuardedWritecCs||_||_dSr)_write_chunks)r r1chunksrrrr"wszGuardedWrite.__init__cCs*td||j||jt|dS)Nzwrite())rr9r1r:appendr%r2rrr__call__{s  zGuardedWrite.__call__N)r rrr"r=rrrrr8vsr8c@s4eZdZddZddZddZddZd d Zd S) GuardedIteratorcCs:||_trt|j|_n t|j|_d|_||_||_dS)NF) _iteratorrr+next_next__next__closed headers_setr;)r iteratorrDr;rrrr"s zGuardedIterator.__init__cCs|Srrr,rrrr-szGuardedIterator.__iter__cCsN|jrtdtdd|}|js0tdtddtd||jt||S)Nz Iterated over closed 'app_iter'.rr#z8The application returned before it started the response.zapplication iterator items) rCrr rArDrr;r<r%)r rvrrrrBs zGuardedIterator.__next__cCsd|_t|jdr|j|jr|j\}}t|j}|jdtd}|dkr|D].\}}| }|dkrPt |rPt d|t qP|rt dt nbd |krd ksn|d kr|d krt d |t |rt d|t n|dk r||krt dt dS)NTr/zcontent-length)ri0)expireszcontent-locationz'Entity header %r found in 304 response.z#304 responses must not have a body.drz/%r responses must have an empty content length.z"%r responses must not have a body.zGContent-Length and the number of bytes sent to the client do not match.)rChasattrr?r/rDsumr;getintlowerrrrr )r status_codeheadersZ bytes_sentcontent_lengthkey_valuerrrr/sF       zGuardedIterator.closecCs.|js*ztdtWntk r(YnXdS)Nz4Iterator was garbage collected before it was closed.)rCrr Exceptionr,rrr__del__szGuardedIterator.__del__N)r rrr"r-rBr/rVrrrrr>s  'r>c@s@eZdZdZddZddZddZdd Zd d Zd d Z dS)LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it check are: - invalid status codes - non-bytestrings sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) cCs ||_dSr)app)r rXrrrr"szLintMiddleware.__init__cCst|tk rtdtdddD]}||krtd|tddq|ddkrXtd tdd|d d }|d d }|r|d dkrtd|tdd|r|d dkrtd|tdddS)Nz/WSGI environment is not a standard Python dict.r#) REQUEST_METHODZ SERVER_NAMEZ SERVER_PORT wsgi.version wsgi.input wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_oncez%Required environment key %r not foundrr[)r$rz"Environ is not a WSGI 1.0 environ.Z SCRIPT_NAMEZ PATH_INFOr/z-'SCRIPT_NAME' does not start with a slash: %rz+'PATH_INFO' does not start with a slash: %r)rdictrr rM)r environrS script_nameZ path_inforrr check_environs:     zLintMiddleware.check_environcCsbtd||ddd}t|dks.|s>ttdddt|dksV|ddkrfttd ddt|}|d krttd ddt|tk rttd dd|D]z}t|t k st|d krttddd|\}}t|t k st|t k rttddd| dkrttdddq|dk rHt |t sHttdddt |}||||fS)Nstatusr$rrz Status code must be three digitsr#rY zeInvalid value for status %r. Valid status strings are three digits, a space and a status explanationrHzstatus code < 100 detectedzheader list is not a listrz Headers must tuple 2-item tupleszheader items must be stringszFThe status header is not supported due to conflicts with the CGI spec.zinvalid value for exc_info)rsplitr%isdigitrr rNrlisttuplerrO isinstancer check_headers)r rdrQexc_inforPitemnamevaluerrrcheck_start_responsesD     z#LintMiddleware.check_start_responsecCs|d}|dk rx|drB|dr6ttddd|dd}|dd|d dkrfd ksxnttd dd|d }|dk rt|jsttd dddS)Netag)zW/w/rrz%weak etag indicator should be upcase.rYr#rr$"zunquoted etag emitted.locationz*absolute URLs required for location header)rM startswithrrr netloc)r rQrqrurrrrkHs$    &  zLintMiddleware.check_headerscCst|trtdtdddS)NzThe application returned astring. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.rr#)rjrrr )r app_iterrrrcheck_iteratoras  zLintMiddleware.check_iteratorcst|dkrtdtdd|r,tdtdd|\}|t|d|d<t|d|d<t|d<ggfdd }||}|t |S) NrzA WSGI app takes two arguments.r#z+A WSGI app does not take keyword arguments.r\r]zwsgi.file_wrappercst|dkr"tdt|tdd|r0tdt|dd\}}t|dkrV|d}nd}|||dd<t|||S)N)rrz1Invalid number of arguments: %s, expected 2 or 3.rr#z1'start_response' does not take keyword arguments.r)r%rr rpr8)r(kwargsrdrQrlr;rDr Zstart_responserrchecking_start_responses     z8LintMiddleware.__call__..checking_start_response) r%rr rcrr0r rXryr>)r r(rzrar|rxrr{rr=ks&    zLintMiddleware.__call__N) r rrrr"rcrprkryr=rrrrrWs,0 rWN)r)rwarningsr_compatrrrZdatastructuresrhttprZwsgir urllib.parser ImportErrorWarningr rrobjectrr0r8r>rWrrrrs(        4 P