wdf2ldZddlmZddlmZddlmZddlmZddlmZddl m Z dd l m Z  dd l mZn#e$r dd lmZYnwxYwGd d eZGd deZddZGddeZGddeZGddeZeGddeZGddeZdS)a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause )warn)implements_iterator)PY2) string_types)Headers)is_entity_header) FileWrapper)urlparseceZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N__name__ __module__ __qualname____doc__]/var/www/book.euthymeo.com/html/venv/lib/python3.11/site-packages/werkzeug/middleware/lint.pyr r ****rr ceZdZdZdS) HTTPWarningz Warning class for HTTP warnings.Nrrrrrr"rrrct|tur0td|dt|jdtdSdS)N'z' requires strings, got ')typestrrrr )contextobj stacklevels r check_stringr!&sW Cyy 18$s)):L:L:L M      rc,eZdZdZdZdZdZdZdS) InputStreamc||_dSN_streamselfstreams r__init__zInputStream.__init__/  rct|dkrtdtdn*t|dkrtdtd|jj|S)NrzWSGI does not guarantee an EOF marker on the input stream, thus making calls to 'wsgi.input.read()' unsafe. Conforming servers may never return from this call.rr z2Too many parameters passed to 'wsgi.input.read()'.)lenrr r'readr)argss rr1zInputStream.read2s t99>> *      YY!^^ D     !t| $''rct|dkrtdtdn:t|dkrtdtdntd|jj|S)Nrz_Calls to 'wsgi.input.readline()' without arguments are unsafe. Use 'wsgi.input.read()' instead.rr.r/z~'wsgi.input.readline()' was called with a size hint. WSGI does not support this, although it's available on all major servers.z5Too many arguments passed to 'wsgi.input.readline()'.)r0rr TypeErrorr'readliner2s rr6zInputStream.readlineCs t99>> 0       YY!^^ O      STT T$t|$d++rc t|jS#t$r)tdtdtdcYSwxYw)Nz'wsgi.input' is not iterable.rr.r)iterr'r5rr r)s r__iter__zInputStream.__iter__VsW  %% %    0+! L L L L88OOO s0A A cftdtd|jdS)Nz(The application closed the input stream!rr.rr r'closer9s rr=zInputStream.close]3 7QRSSSS rN)rrrr+r1r6r:r=rrrr#r#.s_(((",,,&rr#c,eZdZdZdZdZdZdZdS) ErrorStreamc||_dSr%r&r(s rr+zErrorStream.__init__cr,rcZtd||j|dS)Nzwsgi.error.write())r!r'writer)ss rrCzErrorStream.writefs/)1--- 1rc8|jdSr%)r'flushr9s rrGzErrorStream.flushjs rc:|D]}||dSr%)rC)r)seqlines r writelineszErrorStream.writelinesms0  D JJt      rcftdtd|jdS)Nz(The application closed the error stream!rr.r<r9s rr=zErrorStream.closeqr>rN)rrrr+rCrGrKr=rrrr@r@bs_rr@ceZdZdZdZdS) GuardedWritec"||_||_dSr%)_write_chunks)r)rCchunkss rr+zGuardedWrite.__init__ws  rctd||j||jt |dS)Nzwrite())r!rPrCrQappendr0rDs r__call__zGuardedWrite.__call__{sJY""" ! CFF#####rN)rrrr+rUrrrrNrNvs2$$$$$rrNc,eZdZdZdZdZdZdZdS)GuardedIteratorc||_trt|j|_nt|j|_d|_||_||_dS)NF) _iteratorrr8next_next__next__closed headers_setrR)r)iteratorr^rRs rr+zGuardedIterator.__init__sM!  1h,DJJh0DJ & rc|Sr%rr9s rr:zGuardedIterator.__iter__s rc|jrtdtd|}|jstdtdt d||jt||S)Nz Iterated over closed 'app_iter'.rr.z8The application returned before it started the response.zapplication iterator items) r]rr r[r^r!rRrTr0)r)rvs rr\zGuardedIterator.__next__s ; P 3[Q O O O O ZZ\\  J     12666 3r77### rcd|_t|jdr|j|jr|j\}}t |j}|dt}|dkrb|D]D\}}| }|dvr't|rtd|ztE|rtdtdSdSd |cxkrd ksn|d kr<|d krtd |zt|rtd|ztdSdS|||krtdtdSdSdSdS)NTr=zcontent-length)ri0)expireszcontent-locationz'Entity header %r found in 304 response.z#304 responses must not have a body.drz/%r responses must have an empty content length.z"%r responses must not have a body.zGContent-Length and the number of bytes sent to the client do not match.)r]hasattrrYr=r^sumrRgetintlowerr rrr )r) status_codeheaders bytes_sentcontent_lengthkey_values rr=zGuardedIterator.closes 4>7 + + # N " " "   #'#3 KT[))J$[[)9[DDNc!!#*KC))++C"AAAFVGGAEK[M> LLLLLMM ))))c))))[C-?-?!Q&&IKW#<{JK +*0L0L7  4,+0L0Lrcf|js) tdtdS#t$rYdSwxYwdS)Nz4Iterator was garbage collected before it was closed.)r]rr Exceptionr9s r__del__zGuardedIterator.__del__s`{  JK       s  ..N)rrrr+r:r\r=rurrrrWrWs`"%%%NrrWc6eZdZdZdZdZdZdZdZdZ dS) LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it check are: - invalid status codes - non-bytestrings sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) c||_dSr%)app)r)rys rr+zLintMiddleware.__init__s rct|turtdtddD] }||vrtd|ztd!|ddkrtd td|d d }|d d }|r&|d dkrtd|ztd|r(|d dkrtd|ztddSdSdS)Nz/WSGI environment is not a standard Python dict.r.) REQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_oncez%Required environment key %r not foundrr)r/rz"Environ is not a WSGI 1.0 environ. SCRIPT_NAME PATH_INFOr/z-'SCRIPT_NAME' does not start with a slash: %rz+'PATH_INFO' does not start with a slash: %r)rdictrr rj)r)environrq script_name path_infos r check_environzLintMiddleware.check_environsW == $ $ A        C'!!;cA  > "f , , 5{q Q Q Q Qkk-44 KK R00  ;q>S00 ?+M      1,, = I        ,,rctd||ddd}t|dks|st t ddt|dks |ddkrt t d dt |}|d krt t d dt|turt t d d|D]}t|tust|d krt t dd|\}}t|tust|turt t dd| dkrt t dd|3t|tst t ddt|}||||fS)Nstatusr/rrz Status code must be three digitsr.r{ zeInvalid value for status %r. Valid status strings are three digits, a space and a status explanationrezstatus code < 100 detectedzheader list is not a listrz Headers must tuple 2-item tupleszheader items must be stringszFThe status header is not supported due to conflicts with the CGI spec.zinvalid value for exc_info)r!splitr0isdigitrr rkrlisttuplerrl isinstancer check_headers)r)rrnexc_informitemnamevalues rcheck_start_responsez#LintMiddleware.check_start_responsesJXv&&&ll4++A. {  q (;(;(=(= ?@@Q O O O O v;;??fQi3.. /      +&&    9::q I I I I == $ $ 899a H H H H  DDzz&&#d))q..[!CDDQRSSSSKD%Dzz$$U 3(>(>[!?@@QOOOOzz||x''7 !    8U(C(C  9::q I I I I'"" 7###G##rc|d}||dr=|drttdd|dd}|dd|d dcxkrd ks nttd d|d }|4t |js"ttd ddSdSdS)Netag)zW/w/rz%weak etag indicator should be upcase.r{r.rr/"zunquoted etag emitted.locationz*absolute URLs required for location header)rj startswithrrr netloc)r)rnrrs rrzLintMiddleware.check_headersHs-{{6""  |,, ??4((#$KLL#$ ABBx!HRSS 0000S0000[!9::qIIII;;z**  H%%,  LMM    rcbt|trtdtddSdS)NzThe application returned astring. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.rr.)rrrr )r)app_iters rcheck_iteratorzLintMiddleware.check_iteratorasL h - -  (         rct|dkrtdtd|rtdtd|\}|t |d|d<t |d|d<t |d<ggfd}||}|t|S) NrzA WSGI app takes two arguments.r.z+A WSGI app does not take keyword arguments.rrzwsgi.file_wrappercft|dvr'tdt|ztd|rtdt|dd\}}t|dkr |d}nd}|||dd<t |||S)N)rrz1Invalid number of arguments: %s, expected 2 or 3.rr.z1'start_response' does not take keyword arguments.r)r0rr rrN) r3kwargsrrnrrRr^r)start_responses rchecking_start_responsez8LintMiddleware.__call__..checking_start_responses4yy&&G#d))S   WH+VVV"2A2hOFG4yyA~~7!66vwQQKNvw I I6RR Rr) r0rr rr#r@r ryrrW) r)r3rrrrrRr^rs ` @@@rrUzLintMiddleware.__call__ks# t99>> 2KA N N N N   ={WX    #' 7### +GL,A B B !,W]-C!D!D (3#$  S S S S S S S S*88G%<== H%%%xf===rN) rrrrr+rrrrrUrrrrwrwsz,***X.$.$.$`2->->->->->rrwN)r)rwarningsr_compatrrrdatastructuresrhttpr wsgir urllib.parser ImportErrorWarningr rr!objectr#r@rNrWrwrrrrsA  ))))))""""""$$$$$$######"%%%%%%%"""!!!!!!!!"+++++'++++++++'+++    11111&111h&($$$$$6$$$MMMMMfMMM`F>F>F>F>F>VF>F>F>F>F>s5 AA