o
0i: @ s d Z dgZddlZddlZddlZedZedZG dd deZ dd Z
d
d Z d d Z G d
d dZ
G dd dZG dd dZG dd dZG dd dZdd Zdd Zdd Zd d Zd d Zd!d" Zd#d$ Zd%d& ZdS )'a&
Middleware to check for obedience to the WSGI specification.
Some of the things this checks:
* Signature of the application and start_response (including that
keyword arguments are not used).
* Environment checks:
- Environment is a dictionary (and not a subclass).
- That all the required keys are in the environment: REQUEST_METHOD,
SERVER_NAME, SERVER_PORT, wsgi.version, wsgi.input, wsgi.errors,
wsgi.multithread, wsgi.multiprocess, wsgi.run_once
- That HTTP_CONTENT_TYPE and HTTP_CONTENT_LENGTH are not in the
environment (these headers should appear as CONTENT_LENGTH and
CONTENT_TYPE).
- Warns if QUERY_STRING is missing, as the cgi module acts
unpredictably in that case.
- That CGI-style variables (that don't contain a .) have
(non-unicode) string values
- That wsgi.version is a tuple
- That wsgi.url_scheme is 'http' or 'https' (@@: is this too
restrictive?)
- Warns if the REQUEST_METHOD is not known (@@: probably too
restrictive).
- That SCRIPT_NAME and PATH_INFO are empty or start with /
- That at least one of SCRIPT_NAME or PATH_INFO are set.
- That CONTENT_LENGTH is a positive integer.
- That SCRIPT_NAME is not '/' (it should be '', and PATH_INFO should
be '/').
- That wsgi.input has the methods read, readline, readlines, and
__iter__
- That wsgi.errors has the methods flush, write, writelines
* The status is a string, contains a space, starts with an integer,
and that integer is in range (> 100).
* That the headers is a list (not a subclass, not another kind of
sequence).
* That the items of the headers are tuples of strings.
* That there is no 'status' header (that is used in CGI, but not in
WSGI).
* That the headers don't contain newlines or colons, end in _ or -, or
contain characters codes below 037.
* That Content-Type is given if there is content (CGI often has a
default content type, but WSGI does not).
* That no Content-Type is given when there is no content (@@: is this
too restrictive?)
* That the exc_info argument to start_response is a tuple or None.
* That all calls to the writer are with strings, and no other methods
on the writer are accessed.
* That wsgi.input is used properly:
- .read() is called with exactly one argument
- That it returns a string
- That readline, readlines, and __iter__ return strings
- That .close() is not called
- No other methods are provided
* That wsgi.errors is used properly:
- .write() and .writelines() is called with a string
- That .close() is not called, and no other methods are provided.
* The response iterator:
- That it is not a string (it should be a list of a single string; a
string will work, but perform horribly).
- That .__next__() returns a string
- That the iterator is not iterated over until start_response has
been called (that can signal either a server or application
error).
- That .close() is called (doesn't raise exception, only prints to
sys.stderr, because we only know it isn't called when the object
is garbage collected).
validator Nz^[a-zA-Z][a-zA-Z0-9\-_]*$z [\000-\037]c @ s e Zd ZdZdS ) WSGIWarningz:
Raised in response to WSGI-spec-related warnings
N)__name__
__module__ __qualname____doc__ r r 7/opt/alt/python310/lib64/python3.10/wsgiref/validate.pyr y s r c G s | st | d S N)AssertionError)Zcondargsr r r assert_~ s r
c C s$ t | tu r| S td|t| )Nz!{0} must be of type str (got {1}))typestrr formatrepr)valuetitler r r check_string_type s
r c s fdd}|S )a
When applied between a WSGI server and a WSGI application, this
middleware will check for WSGI compliance on a number of levels.
This middleware does not modify the request or response in any
way, but will raise an AssertionError if anything seems off
(except for a failure to close the application iterator, which
will be printed to stderr -- there's no way to raise an exception
at that point).
c s t t| dkd t | d | \} t| g fdd}t|d |d< t|d |d< ||}t |d uo=|dkd t| t|S )
N zTwo arguments required No keyword arguments allowedc s t t| dkp t| dkd| f t | d | d }| d }t| dkr+| d }nd }t| t| t|| t| d t | S )Nr z Invalid number of arguments: %sr r )r
len check_status
check_headerscheck_content_typecheck_exc_infoappend WriteWrapper)r kwstatusheadersexc_infoZstart_responseZstart_response_startedr r start_response_wrapper s
z;validator..lint_app..start_response_wrapper
wsgi.input wsgi.errorsFz>The application must return an iterator, if only an empty list)r
r
check_environ InputWrapper ErrorWrappercheck_iteratorIteratorWrapper)r r environr% iterator applicationr$ r lint_app s
zvalidator..lint_appr )r0 r1 r r/ r r s )c @ s< e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
S )r) c C
|| _ d S r
)input)self
wsgi_inputr r r __init__
zInputWrapper.__init__c G s0 t t|dk | jj| }t t|tu |S Nr )r
r r3 readr bytesr4 r vr r r r9 zInputWrapper.readc G s0 t t|dk | jj| }t t|tu |S r8 )r
r r3 readliner r: r; r r r r> r= zInputWrapper.readlinec G sJ t t|dk | jj| }t t|tu |D ]
}t t|tu q|S r8 )r
r r3 readlinesr listr: )r4 r linesliner r r r? s zInputWrapper.readlinesc c s | }|s
d S |V qr
)r> )r4 rB r r r __iter__ s zInputWrapper.__iter__c C t dd d S )Nr z input.close() must not be calledr
r4 r r r close zInputWrapper.closeN) r r r r6 r9 r> r? rC rG r r r r r) s r) c @ 4 e Zd Zdd Zdd Zdd Zdd Zd d
Zd S ) r* c C r2 r
)errors)r4 wsgi_errorsr r r r6 r7 zErrorWrapper.__init__c C s t t|tu | j| d S r
)r
r r rJ writer4 sr r r rL s zErrorWrapper.writec C s | j d S r
)rJ flushrF r r r rO rH zErrorWrapper.flushc C s |D ]}| | qd S r
)rL )r4 seqrB r r r
writelines s zErrorWrapper.writelinesc C rD )Nr z!errors.close() must not be calledrE rF r r r rG rH zErrorWrapper.closeN)r r r r6 rL rO rQ rG r r r r r* s r* c @ e Zd Zdd Zdd ZdS )r c C r2 r
)writer)r4 Z wsgi_writerr r r r6 r7 zWriteWrapper.__init__c C s t t|tu | | d S r
)r
r r: rS rM r r r __call__ s zWriteWrapper.__call__N)r r r r6 rT r r r r r r c @ rR )PartialIteratorWrapperc C r2 r
r. )r4
wsgi_iteratorr r r r6 r7 z PartialIteratorWrapper.__init__c C s t | jd S r
)r, r. rF r r r rC s z PartialIteratorWrapper.__iter__N)r r r r6 rC r r r r rV rU rV c @ rI ) r, c C s || _ t|| _d| _|| _d S )NF)original_iteratoriterr. closedcheck_start_response)r4 rX r\ r r r r6 s
zIteratorWrapper.__init__c C s | S r
r rF r r r rC s zIteratorWrapper.__iter__c C sT t | j d t| j}t|turt dd|f | jd ur(t | jd d | _|S )NzIterator read after closedFz$Iterator yielded non-bytestring (%r)zjThe application returns and we started iterating over its body, but start_response has not yet been called)r
r[ nextr. r r: r\ )r4 r< r r r __next__ s
zIteratorWrapper.__next__c C s$ d| _ t| jdr| j d S d S )NTrG )r[ hasattrrY rG rF r r r rG s zIteratorWrapper.closec C s" | j s tjd t| j d d S )Nz/Iterator garbage collected without being closed)r[ sysstderrrL r
rF r r r __del__# s zIteratorWrapper.__del__N)r r r r6 rC r^ rG rb r r r r r, s r, c C s t t| tu dt| | f dD ] }t || v d|f qdD ]}t || vd||dd f q d| vr r? rC z-wsgi.input (%r) doesn't have the attribute %sr
r_ )r5 attrr r r rm k
rm c C rs )N)rO rL rQ z.wsgi.errors (%r) doesn't have the attribute %srt )rK ru r r r rn q rv rn c C sz t | d} | d dd }tt|dkd| t|}t|dkd| t| dk s1| d d kr;td
| t d S d S ) NStatusr r r z)Status codes must be three characters: %rd zStatus code is invalid: %r zjThe status string (%r) should be a three-digit integer followed by a single space and a status explanation)r splitr
r rq ri rj r )r! Z status_codeZ
status_intr r r r w s
r c C s t t| tu d| t| f | D ]n}t t|tu d|t|f t t|dk |\}}t|d}t|d}t | dkd| t d|voKd |vd
| t t|d | t | d of| d
d| t
|rt dd|t
| df qd S )Nz%Headers (%r) must be of type list: %rz1Individual headers (%r) must be of type tuple: %rr Header namez Header valuer! zyThe Status header cannot be used; it conflicts with CGI script, and HTTP status is not given through headers (value: %r).
:z,Header names may not contain ':' or '\n': %rzBad header name: %r-_z#Names may not end in '-' or '_': %rr z#Bad header value: %r (bad char: %r)) r
r r@ rl r r lower header_researchendswithbad_header_value_regroup)r" itemnamer r r r r sB
r c C s t | d} t| d dd }d}|D ] \}}t |d}| dkr0||vr) d S tdd| q||vr>tdd| d S d S ) Nrw r r ) i0 r| z content-typezJContent-Type header found in a %s response, which must not return content.z,No Content-Type header found in headers (%s))r rq r{ r r
)r! r" codeZNO_MESSAGE_BODYr r r r r r s
r c C s* t | d u p
t| tu d| t| f d S )Nz exc_info (%r) is not a tuple: %r)r
r rl )r# r r r r s r c C s t t| ttf d d S )NzwYou should not return a string as your application iterator, instead return a single-item list containing a bytestring.)r
isinstancer r: rW r r r r+ s r+ )r __all__rer` ri compiler r Warningr r
r r r) r* r rV r, r( rm rn r r r r r+ r r r r s0 j
7# #A