o 0c6 @sdZddlZddlmZddlmZddlmZddl m Z ddl m Z dd l mZejr?dd lmZdd lmZdd lmZGd ddeZGdddeZefdededejddfddZGdddZGdddZGdddZGdddZGdd d ZdS)!a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause N) TracebackType)urlparse)warn)Headers)is_entity_header) FileWrapper) StartResponse)WSGIApplication)WSGIEnvironmentc@eZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N__name__ __module__ __qualname____doc__rrN/var/www/html/gps/gps/lib/python3.10/site-packages/werkzeug/middleware/lint.pyr r c@r ) HTTPWarningz Warning class for HTTP warnings.Nrrrrrr"rrcontextobjneedreturncCs<t||urt|d|jdt|jdtdddSdS)Nz requires z, got . stacklevel)typerrr )rrrrrr check_type&s  r c@sfeZdZdejddfddZdejdefddZdejdefd d Z dej efd d Z dd dZ dS) InputStreamstreamrNcC ||_dSN_streamselfr"rrr__init__0 zInputStream.__init__argscGsBt|dkrtdtddn t|dkrtdtdd|jj|S)NrzWSGI does not guarantee an EOF marker on the input stream, thus making calls to 'wsgi.input.read()' unsafe. Conforming servers may never return from this call.rrz2Too many parameters passed to 'wsgi.input.read()'.)lenrr r&readr(r+rrrr.3s   zInputStream.readcGsLt|dkrtdtddnt|dkrtdtddntd|jj|S)Nrz_Calls to 'wsgi.input.readline()' without arguments are unsafe. Use 'wsgi.input.read()' instead.rrr,z~'wsgi.input.readline()' was called with a size hint. WSGI does not support this, although it's available on all major servers.z5Too many arguments passed to 'wsgi.input.readline()'.)r-rr TypeErrorr&readliner/rrrr1Ds   zInputStream.readlinecCs6zt|jWStytdtddtdYSw)Nz'wsgi.input' is not iterable.rrr)iterr&r0rr r(rrr__iter__Ws    zInputStream.__iter__cCtdtdd|jdS)Nz(The application closed the input stream!rrrr r&closer3rrrr7^zInputStream.closerN) rrrtBinaryIOr)Anybytesr.r1Iteratorr4r7rrrrr!/s r!c@s^eZdZdejddfddZdeddfddZdd d Zd ej eddfd d Z dddZ dS) ErrorStreamr"rNcCr#r$r%r'rrrr)dr*zErrorStream.__init__scCstd|t|j|dS)Nzwsgi.error.write())r strr&writer(r@rrrrBgs zErrorStream.writecCs|jdSr$)r&flushr3rrrrDkszErrorStream.flushseqcCs|D]}||qdSr$)rB)r(rElinerrr writelinesns zErrorStream.writelinescCr5)Nz(The application closed the error stream!rrr6r3rrrr7rr8zErrorStream.closer9) rrrr:TextIOr)rArBrDIterablerGr7rrrrr?cs  r?c@sFeZdZdejegdfdejeddfddZdeddfdd Z dS) GuardedWriterBNchunksrcCs||_||_dSr$)_write_chunks)r(rBrKrrrr)xs zGuardedWrite.__init__r@cCs*td|t|||jt|dS)Nzwrite())r r=rLrMappendr-rCrrr__call__|s  zGuardedWrite.__call__) rrrr:Callabler=Listintr)rOrrrrrJws(rJc@sheZdZdejedejeefdej eddfddZ ddd Z defd d Z dd d Z dddZdS)GuardedIteratoriterator headers_setrKrNcCs(||_t|j|_d|_||_||_dS)NF) _iteratorr2__next___nextclosedrUrK)r(rTrUrKrrrr)s   zGuardedIterator.__init__cCs|Sr$rr3rrrr4szGuardedIterator.__iter__cCsP|jr tdtdd|}|jstdtddtd|t|jt ||S)Nz Iterated over closed 'app_iter'.rrz8The application returned before it started the response.zapplication iterator items) rYrr rXrUr r=rKrNr-)r(rvrrrrWs zGuardedIterator.__next__cCsd|_t|jdr|j|jr|j\}}t|j}|jdtd}|dkrM|D]\}}| }|dvrAt |rAt d|dt q(|rKt d t dSdSd |krWd ks\n|d krv|d krht |dt |rtt |dt dSdS|dur||krt dt dSdSdSdS)NTr7zcontent-length)ri0)expireszcontent-locationzEntity header z found in 304 response.z#304 responses must not have a body.drz- responses must have an empty content length.z responses must not have a body.zGContent-Length and the number of bytes sent to the client do not match.)rYhasattrrVr7rUsumrKgetrRlowerrrrr )r( status_codeheaders bytes_sentcontent_lengthkey_valuerrrr7sH       zGuardedIterator.closecCs0|jsztdtWdStyYdSwdS)Nz4Iterator was garbage collected before it was closed.)rYrr Exceptionr3rrr__del__s zGuardedIterator.__del__)rrSr9)rrrr:rIr=TuplerRrrQr)r4rWr7rjrrrrrSs   %rSc @seZdZdZdddZdd d Zd ed ejej eefdej ej ej e e e fdej eeffddZd eddfddZdejeddfddZdejdejdejefddZdS)LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it checks are: - invalid status codes - non-bytes sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) appr rNcCr#r$)rm)r(rmrrrr)r*zLintMiddleware.__init__environr cCst|tur tdtdddD]}||vr td|dtddq|dd kr.td tdd|d d }|d d }|rL|ddkrLtd|tdd|r`|ddkrbtd|tdddSdSdS)Nz/WSGI environment is not a standard Python dict.r) REQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_oncezRequired environment key z not foundrrs)r,rz"Environ is not a WSGI 1.0 environ. SCRIPT_NAME PATH_INFOr/z+'SCRIPT_NAME' does not start with a slash: z)'PATH_INFO' does not start with a slash: )rdictrr ra)r(rnrg script_name path_inforrr check_environs>       zLintMiddleware.check_environstatusrdexc_infoc CsVtd|t|ddd}t|dks|stdtddt|dks+|ddkr6td |d tddt|}|d krEtd tddt|t urRtd tdd|D]9}t|t usbt|dkritdtdd|\}}t|tusyt|turtdtdd| dkrtdtddqT|durt |t stdtddt |}||||fS)Nr~r,rrz!Status code must be three digits.rro zInvalid value for status zJ. Valid status strings are three digits, a space and a status explanation.r\zStatus code < 100 detected.zHeader list is not a list.rz#Header items must be 2-item tuples.z'Header keys and values must be strings.zFThe status header is not supported due to conflicts with the CGI spec.zInvalid value for exc_info.)r rAsplitr-isdigitrr rRrlisttuplerb isinstancer check_headers) r(r~rdrstatus_code_strrcitemnamevaluerrrcheck_start_responsesF     z#LintMiddleware.check_start_responsecCs|d}|dur:|dr |drtdtdd|dd}|dd|d dkr2d ks:ntd tdd|d }|durQt|jsStd tdddSdSdS)Netag)zW/w/rz)Weak etag indicator should be upper case.rorrr,"zUnquoted etag emitted.locationz+Absolute URLs required for location header.)ra startswithrrrnetloc)r(rdrrrrrrNs,    &   zLintMiddleware.check_headersapp_itercCs t|trtdtdddSdS)NzThe application returned a bytestring. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.rr)rr=rr )r(rrrrcheck_iteratoris  zLintMiddleware.check_iteratorr+kwargscst|dkr tdtdd|rtdtdd|d}|d|t|d|d<t|d|d<t|d <ggd tjd tjd tj t gdfffd d } |t d|} |t|t tjttfS)NrzA WSGI app takes two arguments.rz+A WSGI app does not take keyword arguments.rr,rtruzwsgi.file_wrapperr+rrcst|dvrtdt|dtdd|rtdt|d}|d}t|d kr,|dnd}|||dd<t|||S) N>rrzInvalid number of arguments: z, expected 2 or 3.rrz1'start_response' does not take keyword arguments.rr,r)r-rr rrJ)r+rr~rdrrKrUr(start_responserrchecking_start_responses  z8LintMiddleware.__call__..checking_start_responser )r-rr r}r!r?rr:r<rPr=rmcastrrSrkrRr)r(r+rrnrrrrrrOss4   zLintMiddleware.__call__)rmr rN)rnr rN)rrrrr)r}rAr:rQrkOptionalType BaseExceptionrrRrrrrIr=rr<rOrrrrrls$  ,  6$ rl) rtypingr:typesr urllib.parserwarningsrdatastructuresrhttprwsgir TYPE_CHECKING_typeshed.wsgir r r Warningr rrAobjectrr r!r?rJrSrlrrrrs(           4 P