2Bf6 TdZddlZddlmZddlmZddlmZddl m Z ddl m Z dd l mZejrdd lmZdd lmZdd lmZGd deZGddeZefdededej2ddfdZGddZGddZGddZGddZGddZy) a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause N) TracebackType)urlparse)warn)Headers)is_entity_header) FileWrapper) StartResponse)WSGIApplication)WSGIEnvironmentceZdZdZy) WSGIWarningz Warning class for WSGI warnings.N__name__ __module__ __qualname____doc__X/var/www/highfloat_scraper/venv/lib/python3.12/site-packages/werkzeug/middleware/lint.pyrr*rrceZdZdZy) HTTPWarningz Warning class for HTTP warnings.Nrrrrrr"rrrcontextobjneedreturnc t||ur9t|d|jdt|jdtdyy)Nz requires z, got . stacklevel)typerrr)rrrs r check_typer$&sH Cy kDMM#4F49;M;M:PPQ R  rceZdZdejddfdZdej defdZdej defdZ dejefdZ d d Z y) InputStreamstreamrNc||_yN_streamselfr's r__init__zInputStream.__init__0  rargsct|dk(rtdtdn t|dk7rtdtd|jj|S)NrzWSGI does not guarantee an EOF marker on the input stream, thus making calls to 'wsgi.input.read()' unsafe. Conforming servers may never return from this call.rr!z2Too many parameters passed to 'wsgi.input.read()'.)lenrrr+readr-r0s rr4zInputStream.read3sY t9> *  Y!^ D  !t||  $''rct|dk(rtdtdn,t|dk(rtdtdn td|jj |S)Nrz_Calls to 'wsgi.input.readline()' without arguments are unsafe. Use 'wsgi.input.read()' instead.rr!r2z~'wsgi.input.readline()' was called with a size hint. WSGI does not support this, although it's available on all major servers.z5Too many arguments passed to 'wsgi.input.readline()'.)r3rr TypeErrorr+readliner5s rr8zInputStream.readlineDsf t9> 0   Y!^ O  ST T$t||$$d++rc t|jS#t$r tdtdtdcYSwxYw)Nz'wsgi.input' is not iterable.rr!r)iterr+r7rrr-s r__iter__zInputStream.__iter__Ws;  % %  0+! L8O s&AAc\tdtd|jjy)Nz(The application closed the input stream!rr!rrr+closer;s rr?zInputStream.close^  7QRS rrN) rrrtBinaryIOr.Anybytesr4r8Iteratorr<r?rrrr&r&/saqzzd(!%%(E(",aee,,&!**U+rr&czeZdZdejddfdZdeddfdZd dZdejeddfd Z d d Z y) ErrorStreamr'rNc||_yr)r*r,s rr.zErrorStream.__init__dr/rsc\td|t|jj|y)Nzwsgi.error.write())r$strr+writer-rJs rrMzErrorStream.writegs!'C0 1rc8|jjyr))r+flushr;s rrPzErrorStream.flushks rseqc4|D]}|j|yr))rM)r-rQlines r writelineszErrorStream.writelinesns D JJt  rc\tdtd|jjy)Nz(The application closed the error stream!rr!r>r;s rr?zErrorStream.closerr@rrA) rrrrBTextIOr.rLrMrPIterablerTr?rrrrHrHcsQqxxDstajjo$rrHcjeZdZdejegdfdej eddfdZdeddfdZ y) GuardedWriterMNchunksrc ||_||_yr))_write_chunks)r-rMrZs rr.zGuardedWrite.__init__xs  rrJctd|t|j||jj t |y)Nzwrite())r$rEr\r]appendr3rNs r__call__zGuardedWrite.__call__|s/9a' A CF#r) rrrrBCallablerEListintr.r`rrrrYrYwsGajj%$7QU$%$D$rrYceZdZdejedej eefdejeddfdZ d dZ defdZ d d Z d d Zy) GuardedIteratoriterator headers_setrZrNcp||_t|j|_d|_||_||_y)NF) _iteratorr:__next___nextclosedrgrZ)r-rfrgrZs rr.zGuardedIterator.__init__s2 "(^,,  & rc|Sr)rr;s rr<zGuardedIterator.__iter__s rc|jrtdtd|j}|jstdtdt d|t |jjt||S)Nz Iterated over closed 'app_iter'.rr!z8The application returned before it started the response.zapplication iterator items) rlrrrkrgr$rErZr_r3)r-rvs rrjzGuardedIterator.__next__se ;; 3[Q O ZZ\ J  /U; 3r7# rcfd|_t|jdr|jj|jr|j\}}t |j }|jdt}|dk(rS|D]:\}}|j}|dvst|s'td|dt<|rtd tyyd |cxkrd ksn|d k(r/|d k7rt|dt|rt|dtyy|||k7rtdtyyyy)NTr?zcontent-length)r#i0)expireszcontent-locationzEntity header z found in 304 response.z#304 responses must not have a body.drz- responses must have an empty content length.z responses must not have a body.zGContent-Length and the number of bytes sent to the client do not match.)rlhasattrrir?rgsumrZgetrclowerrrrr)r- status_codeheaders bytes_sentcontent_lengthkey_values rr?zGuardedIterator.closesC 4>>7 + NN "   #'#3#3 KT[[)J$[[)9[DNc!#*KC))+C"AAFVG,SG3JK[ > L )c)[C-?!Q&&-'TU#K=(HI;W+*0L,1M+1 rc^|js tdtyy#t$rYywxYw)Nz4Iterator was garbage collected before it was closed.)rlrr Exceptionr;s r__del__zGuardedIterator.__del__s4{{ JK   s  ,,)rrerA)rrrrBrWrETuplercrrbr.r<rjr?rrrrreresg **U# WWS'\* s   %"#Jrrec reZdZdZddZddZdedejejeefdejejeje e e fdejeeffd Zdeddfd Zd ej$eddfd Zd ej*dej*dej$efdZy)LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it checks are: - invalid status codes - non-bytes sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) rNc||_yr))app)r-rs rr.zLintMiddleware.__init__s rct|turtdtddD]}||vstd|dtd|dd k7rtd td|j d d }|j d d }|r|ddk7rtd|td|r|ddk7rtd|tdyyy)Nz/WSGI environment is not a standard Python dict.r!) REQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorszwsgi.multithreadzwsgi.multiprocessz wsgi.run_oncezRequired environment key z not foundr r)r2rz"Environ is not a WSGI 1.0 environ. SCRIPT_NAME PATH_INFOr/z+'SCRIPT_NAME' does not start with a slash: z)'PATH_INFO' does not start with a slash: )r#dictrrrw)r-environr} script_name path_infos r check_environzLintMiddleware.check_environs = $ A    C'!/wjA  " > "f , 5{q Qkk-4 KK R0 ;q>S0 =k_M  1, ;I=I -9rstatusrzexc_infocFtd|t|jddd}t|dk7s|j st dt dt|dks|ddk7rt d |d t dt|}|d krt d t dt|turt d t d|D]}t|tust|dk7rt dt d|\}}t|tust|turt dt d|jdk(st dt d|"t|tst dt dt|}|j|||fS)Nrr2rr z!Status code must be three digits.r!r zInvalid value for status zJ. Valid status strings are three digits, a space and a status explanation.rrzStatus code < 100 detected.zHeader list is not a list.rz#Header items must be 2-item tuples.z'Header keys and values must be strings.zFThe status header is not supported due to conflicts with the CGI spec.zInvalid value for exc_info.)r$rLsplitr3isdigitrrrcr#listtuplerx isinstancer check_headers) r-rrzrstatus_code_strryitemnamevalues rcheck_start_responsez#LintMiddleware.check_start_responses 8VS) ,,tQ/2  1 $O,C,C,E 4ka P v;?fQi3. +F:6==  /*   .  J = $ -{q I DDz&#d)q.:KTUVKD%Dz$U 3(>={WXzz|x'4     8U(C .  J'" 7#G##rc^|jd}|^|jdr(|jdrtdtd|dd}|dd|d dcxk(rd k(sntd td|jd }|)t |j std tdyyy)Netag)zW/w/rz)Weak etag indicator should be upper case.rr!rr2"zUnquoted etag emitted.locationz+Absolute URLs required for location header.)rw startswithrrrnetloc)r-rzrrs rrzLintMiddleware.check_headersNs{{6"  |,??4(C##$ ABx!HRS 0S0-{qI;;z*  H%,,A - rapp_itercJt|trtdtdyy)NzThe application returned a bytestring. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.r r!)rrErr)r-rs rcheck_iteratorzLintMiddleware.check_iteratoris& h & 6   'rr0kwargscrt|dk7rtdtd|rtdtd|d}|dj|t |d|d<t |d|d<t |d <ggd tjd tjd tjtgdfffd }j|tjd|}j|t|tjtjt t"fS)NrzA WSGI app takes two arguments.r!z+A WSGI app does not take keyword arguments.rr2rrzwsgi.file_wrapperr0rrct|dvrtdt|dtd|rtdt|d}|d}t|d k(r|dnd}j|||ddt |||S) N>rr zInvalid number of arguments: z, expected 2 or 3.rr!z1'start_response' does not take keyword arguments.rr2r )r3rrrrY) r0rrrzrrZrgr-start_responses rchecking_start_responsez8LintMiddleware.__call__..checking_start_responses4y&3CI;>PQ  H+Vq'F15aG INa "66vwQKNvw I6R Rrr )r3rrrr&rHr rBrDrarErcastrrerrcr) r-r0rrrrrZrgrs ` @@@rr`zLintMiddleware.__call__ss% t9> 2KA N  ={WX &*!W*.q' 7# +GL,A B !,W]-C!D (3#$%'   S55 S$%EE S ZZ & S S,88GQVVO=T%UV H% affQWWS'\2K@&  r)rr rN)rr rN)rrrrr.rrLrBrbrOptionalType BaseExceptionrrcrrrrWrErrDr`rrrrrs,*X4$4$S)*4$** GGAFF=)=-G H 4$ g 4$lW6qzz%'8T1 aee1 quu1 E9J1 rr) rtypingrBtypesr urllib.parserwarningsrdatastructuresrhttprwsgir TYPE_CHECKING_typeshed.wsgir r r WarningrrrLobjectrr$r&rHrYrerrrrrs !$#??,..+'++'+:=  &   11h($$MM`R R r