shell bypass 403
o
�?Og� � @ sb d Z ddlZg d�ZG dd� d�Zdd� Zdd � Zdd d �Zd
d� Zdd� Zh d�j Z
dd� Z dS )z$Miscellaneous WSGI-related Utilities� N)� FileWrapper� guess_scheme�application_uri� request_uri�shift_path_info�setup_testing_defaultsc @ s2 e Zd ZdZd dd�Zdd� Zdd� Zd d
� Zd S )
r z1Wrapper to convert file-like objects to iterables� c C s& || _ || _t|d�r|j| _d S d S )N�close)�filelike�blksize�hasattrr )�selfr
r � r �3/opt/alt/python310/lib64/python3.10/wsgiref/util.py�__init__ s
�zFileWrapper.__init__c C s2 dd l }|jdtdd� | j�| j�}|r|S t�)Nr zXFileWrapper's __getitem__ method ignores 'key' parameter. Use iterator protocol instead.� )�
stacklevel)�warnings�warn�DeprecationWarningr
�readr �
IndexError)r
�keyr �datar r r � __getitem__ s �zFileWrapper.__getitem__c C s | S �Nr )r
r r r �__iter__! s zFileWrapper.__iter__c C s | j �| j�}|r |S t�r )r
r r �
StopIteration)r
r r r r �__next__$ s zFileWrapper.__next__N)r )�__name__�
__module__� __qualname__�__doc__r r r r r r r r r s
r c C s | � d�dv r dS dS )zMReturn a guess for whether 'wsgi.url_scheme' should be 'http' or 'https'
ZHTTPS)ZyesZon�1�https�http)�get)�environr r r r * s r c C s� | d d }ddl m} | �d�r|| d 7 }n)|| d 7 }| d dkr3| d d kr2|d
| d 7 }n| d d krA|d
| d 7 }||| �d �pId
dd�7 }|S )z@Return the application's base URI (no PATH_INFO or QUERY_STRING)�wsgi.url_schemez://r ��quote� HTTP_HOST� SERVER_NAMEr$ � SERVER_PORT�443�:�80� SCRIPT_NAME�/�latin1)�encoding)� urllib.parser* r& )r' �urlr* r r r r 2 s
� r Tc C sp t | �}ddlm} || �dd�ddd�}| �d�s#||d d
� 7 }n||7 }|r6| �d �r6|d | d 7 }|S )
zBReturn the full request URI, optionally including the query stringr r) � PATH_INFO� z/;=,r3 )Zsafer4 r1 � NZ QUERY_STRING�?)r r5 r* r& )r' Z
include_queryr6 r* � path_infor r r r F s
r c C s� | � dd�}|s
dS |�d�}dd� |dd� D �|dd�< |d }|d= | � d d�}t�|d | �}|�d�r?|dd� }|sJ|�d�sJ|d7 }|| d < d�|�| d< |d
kr[d}|S ) aZ Shift a name from PATH_INFO to SCRIPT_NAME, returning it
If there are no remaining path segments in PATH_INFO, return None.
Note: 'environ' is modified in-place; use a copy if you need to keep
the original PATH_INFO or SCRIPT_NAME.
Note: when PATH_INFO is just a '/', this returns '' and appends a trailing
'/' to SCRIPT_NAME, even though empty path segments are normally ignored,
and SCRIPT_NAME doesn't normally end in a '/'. This is intentional
behavior, to ensure that an application can tell the difference between
'/x' and '/x/' when traversing to objects.
r7 r8 Nr2 c S s g | ]
}|r|d kr|�qS )�.r )�.0�pr r r �
<listcomp>e s z#shift_path_info.<locals>.<listcomp>r9 ���r1 r< )r& �split� posixpath�normpath�endswith�join)r' r; �
path_parts�nameZ script_namer r r r S s$
r c C s | � dd� | � dd� | � d| d � | � dd� d| vr.d | vr.| � dd
� | � d d � | � d d
� | � dd� | � dd� | � dd� ddlm}m} | � d|� � | � d|� � | � dt| �� | d dkrr| � dd� dS | d dkr�| � dd� dS dS ) a: Update 'environ' with trivial defaults for testing purposes
This adds various parameters required for WSGI, including HTTP_HOST,
SERVER_NAME, SERVER_PORT, REQUEST_METHOD, SCRIPT_NAME, PATH_INFO,
and all of the wsgi.* variables. It only supplies default values,
and does not replace any existing settings for these variables.
This routine is intended to make it easier for unit tests of WSGI
servers and applications to set up dummy environments. It should *not*
be used by actual WSGI servers or applications, since the data is fake!
r, z 127.0.0.1ZSERVER_PROTOCOLzHTTP/1.0r+ ZREQUEST_METHODZGETr1 r7 r8 r2 z wsgi.version)r9 r z
wsgi.run_oncer zwsgi.multithreadzwsgi.multiprocess)�StringIO�BytesIOz
wsgi.inputz wsgi.errorsr( r% r- r0 r$ r. N)�
setdefault�iorH rI r )r' rH rI r r r r | s(
�r > ztransfer-encodingzproxy-authorizationzproxy-authenticatez
keep-alive�teZtrailersZupgradeZ
connectionc C s t | �� �S )z?Return true if 'header_name' is an HTTP/1.1 "Hop-by-Hop" header)�_hoppish�lower)Z header_namer r r �
is_hop_by_hop� s rO )T) r" rB �__all__r r r r r r � __contains__rM rO r r r r �<module> s
)(�