o q>e\6@sdZddlmZddlZddlmZddlmZddl m Z ddl m Z dd l mZdd lmZejrEdd lmZdd lmZdd lmZGdddeZGdddeZefd&ddZGdddZGdddZGd d!d!ZGd"d#d#ZGd$d%d%ZdS)'a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause ) annotationsN) TracebackType)urlparse)warn)Headers)is_entity_header) FileWrapper) StartResponse)WSGIApplication)WSGIEnvironmentc@eZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N__name__ __module__ __qualname____doc__rrY/var/www/bmteknikk.ddns.net/venv/lib/python3.10/site-packages/werkzeug/middleware/lint.pyr rc@r ) HTTPWarningz Warning class for HTTP warnings.Nrrrrrr$rrcontextstrobjobjectneedt.TypereturnNonecCs<t||urt|d|jdt|jdtdddSdS)Nz requires z, got . stacklevel)typerrr)rrrrrr check_type(s  r%c@s>eZdZdddZdd d Zdd d ZdddZdddZdS) InputStreamstream t.IO[bytes]rrcC ||_dSN_streamselfr'rrr__init__2 zInputStream.__init__argst.AnybytescGsBt|dkrtdtddn t|dkrtdtdd|jj|S)NrzWSGI does not guarantee an EOF marker on the input stream, thus making calls to 'wsgi.input.read()' unsafe. Conforming servers may never return from this call.rr"z2Too many parameters passed to 'wsgi.input.read()'.)lenrrr,readr.r1rrrr65s   zInputStream.readcGsLt|dkrtdtddnt|dkrtdtddntd|jj|S)Nrz_Calls to 'wsgi.input.readline()' without arguments are unsafe. Use 'wsgi.input.read()' instead.rr"r4z~'wsgi.input.readline()' was called with a size hint. WSGI does not support this, although it's available on all major servers.z5Too many arguments passed to 'wsgi.input.readline()'.)r5rr TypeErrorr,readliner7rrrr9Fs   zInputStream.readlinet.Iterator[bytes]cCs6zt|jWStytdtddtdYSw)Nz'wsgi.input' is not iterable.rr"r)iterr,r8rrr.rrr__iter__Ys    zInputStream.__iter__cCtdtdd|jdS)Nz(The application closed the input stream!rr"rrr,closer<rrrr@`zInputStream.closeN)r'r(rr)r1r2rr3)rr:rr)rrrr/r6r9r=r@rrrrr&1s     r&c@s>eZdZdddZdd d Zdd d ZdddZdddZdS) ErrorStreamr' t.IO[str]rrcCr)r*r+r-rrrr/fr0zErrorStream.__init__srcCstd|t|j|dS)Nzwsgi.error.write())r%rr,writer.rErrrrFis zErrorStream.writecCs|jdSr*)r,flushr<rrrrHmszErrorStream.flushseqt.Iterable[str]cCs|D]}||qdSr*)rF)r.rIlinerrr writelinesps zErrorStream.writelinescCr>)Nz(The application closed the error stream!rr"r?r<rrrr@trAzErrorStream.closeN)r'rDrr)rErrrrB)rIrJrr)rrrr/rFrHrLr@rrrrrCes     rCc@s eZdZdddZdd d Zd S) GuardedWriterFt.Callable[[bytes], object]chunks list[int]rrcCs||_||_dSr*)_write_chunks)r.rFrOrrrr/zs zGuardedWrite.__init__rEr3cCs*td|t|||jt|dS)Nzwrite())r%r3rQrRappendr5rGrrr__call__~s  zGuardedWrite.__call__N)rFrNrOrPrr)rEr3rr)rrrr/rTrrrrrMys rMc@s>eZdZdd d Zdd d ZdddZdddZdddZdS)GuardedIteratoriteratort.Iterable[bytes] headers_settuple[int, Headers]rOrPrrcCs(||_t|j|_d|_||_||_dS)NF) _iteratorr;__next___nextclosedrXrO)r.rVrXrOrrrr/s   zGuardedIterator.__init__cCs|Sr*rr<rrrr=szGuardedIterator.__iter__r3cCsP|jr tdtdd|}|jstdtddtd|t|jt ||S)Nz Iterated over closed 'app_iter'.rr"z8The application returned before it started the response.zapplication iterator items) r]rrr\rXr%r3rOrSr5)r.rvrrrr[s zGuardedIterator.__next__cCsd|_t|jdr|j|jr|j\}}t|j}|jdtd}|dkrM|D]\}}| }|dvrAt |rAt d|dt q(|rKt d t dSdSd |krWd ks\n|d krv|d krht |dt |rtt |dt dSdS|dur||krt dt dSdSdSdS)NTr@zcontent-length)r$i0)expireszcontent-locationzEntity header z found in 304 response.z#304 responses must not have a body.drz- responses must have an empty content length.z responses must not have a body.zGContent-Length and the number of bytes sent to the client do not match.)r]hasattrrZr@rXsumrOgetintlowerrrrr)r. status_codeheaders bytes_sentcontent_lengthkey_valuerrrr@sH       zGuardedIterator.closecCs0|jsztdtWdStyYdSwdS)Nz4Iterator was garbage collected before it was closed.)r]rr Exceptionr<rrr__del__s zGuardedIterator.__del__N)rVrWrXrYrOrPrr)rrU)rr3rB)rrrr/r=r[r@rorrrrrUs    %rUc@sLeZdZdZd"ddZd#d d Zd$ddZd%ddZd&ddZd'dd Z d!S)(LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it checks are: - invalid status codes - non-bytes sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) appr rrcCr)r*)rq)r.rqrrrr/r0zLintMiddleware.__init__environr cCst|tur tdtdddD]}||vr td|dtddq|dd kr.td tdd|d d }|d d }|rL|ddkrLtd|tdd|r`|ddkrbtd|tdddSdSdS)Nz/WSGI environment is not a standard Python dict.r") REQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_oncezRequired environment key z not foundr!rw)r4rz"Environ is not a WSGI 1.0 environ. SCRIPT_NAME PATH_INFOr/z+'SCRIPT_NAME' does not start with a slash: z)'PATH_INFO' does not start with a slash: )r$dictrrre)r.rrrl script_name path_inforrr check_environs>       zLintMiddleware.check_environstatusrrilist[tuple[str, str]]exc_info?None | tuple[type[BaseException], BaseException, TracebackType]rYc CsVtd|t|ddd}t|dks|stdtddt|dks+|ddkr6td |d tddt|}|d krEtd tddt|t urRtd tdd|D]9}t|t usbt|dkritdtdd|\}}t|tusyt|turtdtdd| dkrtdtddqT|durt |t stdtddt |}||||fS)Nrr4rr!z!Status code must be three digits.r"rs zInvalid value for status zJ. Valid status strings are three digits, a space and a status explanation.r`zStatus code < 100 detected.zHeader list is not a list.rz#Header items must be 2-item tuples.z'Header keys and values must be strings.zFThe status header is not supported due to conflicts with the CGI spec.zInvalid value for exc_info.)r%rsplitr5 isdecimalrrrfr$listtuplerg isinstancer check_headers) r.rrirstatus_code_strrhitemnamevaluerrrcheck_start_responsesF     z#LintMiddleware.check_start_responsercCs|d}|dur:|dr |drtdtdd|dd}|dd|d dkr2d ks:ntd tdd|d }|durQt|jsStd tdddSdSdS)Netag)zW/w/rz)Weak etag indicator should be upper case.rsr"rr4"zUnquoted etag emitted.locationz+Absolute URLs required for location header.)re startswithrrrnetloc)r.rirrrrrrNs,    &   zLintMiddleware.check_headersapp_iterrWcCs t|trtdtdddSdS)NzThe application returned a string. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.r!r")rrrr)r.rrrrcheck_iteratoris  zLintMiddleware.check_iteratorr1r2kwargscst|dkr tdtdd|rtdtdd|d}|d|t|d|d<t|d|d<t|d <ggdfdd }|t d|} |t |t tj t tfS)NrzA WSGI app takes two arguments.r"z+A WSGI app does not take keyword arguments.rr4rxryzwsgi.file_wrapperr1r2rrt.Callable[[bytes], None]cst|dvrtdt|dtdd|rtdt|d}|d}t|d kr,|dnd}|||dd<t|||S) N>rr!zInvalid number of arguments: z, expected 2 or 3.rr"z1'start_response' does not take keyword arguments.rr4r!)r5rrrrM)r1rrrirrOrXr.start_responserrchecking_start_responses  z8LintMiddleware.__call__..checking_start_responser )r1r2rr2rr)r5rrrr&rCr rqtcastrrUTuplerfr)r.r1rrrrrrrrrTss(   zLintMiddleware.__call__N)rqr rr)rrr rr)rrrirrrrrY)rirrr)rrWrr)r1r2rr2rrW) rrrrr/rrrrrTrrrrrps   , 4  rp)rrrrrrrr) r __future__rtypingrtypesr urllib.parserwarningsrdatastructuresrhttprwsgir TYPE_CHECKING_typeshed.wsgir r r Warningrrrr%r&rCrMrUrprrrrs*           4 P