"Eۨ m V U d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
m Z ddl m
Z
ddl mZ d d
lmZ d d lmZ d d lmZ d d
lmZ ej dej dej f ZdZ e Z ej e e d< e Z ej e e d< ddhZ!ddhZ"ddhZ#ej$ e%g d fej& e%g d fej' e%g d fe e%g d ffZ(ej) ej) ej* ej+ e f df e d < d ej d ej, e fd!Z-d"e.d e/fd#Z0d$ed efd%Z1d&ej d'e d e2fd(Z3d&ej d'e d e2fd)Z4 G d* d+e Z5 G d, d-e5 Z6 G d. d/e Z7 G d0 d1e7e
Z8dS )2zA sandbox layer that ensures unsafe operations cannot be performed.
Useful when the template itself comes from an untrusted source.
N)formatter_field_name_split)abc)deque) Formatter)EscapeFormatter)Markup ) Environment)
SecurityError)Context) UndefinedF.)boundi UNSAFE_FUNCTION_ATTRIBUTESUNSAFE_METHOD_ATTRIBUTESgi_framegi_codecr_framecr_codeag_codeag_frame)addcleardifference_updatediscardpopremovesymmetric_difference_updateupdate)r r popitem
setdefaultr )appendreverseinsertsortextendr ) r"
appendleftr r&
extendleftr popleftr rotate
_mutable_speccallablereturnc t | t j t j f r | j dvrd S | j }t |t r|S d S )N)format
format_map)
isinstancetypes
MethodTypeBuiltinMethodType__name____self__str)r, objs `/builddir/build/BUILD/cloudlinux-venv-1.0.10/venv/lib/python3.11/site-packages/jinja2/sandbox.pyinspect_format_methodr: S s\ 5#U%<= ": : :t
C#s
4 argsc x t | }t | t k rt dt d |S )zWA range that can't generate ranges with a length of more than
MAX_RANGE items.
z@Range too big. The sandbox blocks ranges larger than MAX_RANGE (z).)rangelen MAX_RANGE
OverflowError)r< rngs r9
safe_rangerC a sN ,C
3xx)
)$
)
)
)
Jr; fc d| _ | S )zMarks a function or method as unsafe.
.. code-block: python
@unsafe
def delete(self):
pass
T)unsafe_callable)rD s r9 unsaferG p s A Hr; r8 attrc t | t j r
|t v rdS nt | t j r|t v s |t
v rdS nt | t r |dk rdS nt | t j t j t j f rdS t | t j
r |t v rdS nut t d r&t | t j
r |t v rdS n:t t d r%t | t j r |t v rdS | d S )a Test if the attribute given is an internal python attribute. For
example this function returns `True` for the `func_code` attribute of
python objects. This is useful if the environment method
:meth:`~SandboxedEnvironment.is_safe_attribute` is overridden.
>>> from jinja2.sandbox import is_internal_attribute
>>> is_internal_attribute(str, "mro")
True
>>> is_internal_attribute(str, "upper")
False
Tmro
CoroutineTypeAsyncGeneratorType__)r1 r2 FunctionTyper r3 r typeCodeType
TracebackType FrameType
GeneratorTypeUNSAFE_GENERATOR_ATTRIBUTEShasattrrK UNSAFE_COROUTINE_ATTRIBUTESrL !UNSAFE_ASYNC_GENERATOR_ATTRIBUTES
startswith)r8 rH s r9 is_internal_attributerY } sh #u)** - - -4 . C) * * - - -9Q1Q1Q4 2R C 5==4 C%.%*=uO P P t C, - -
. . .4 / ( ( ZU=P-Q-Q . . .4 / , - - * U
%3 3 4 4 44 ??4 r; c L t D ]\ }}t | | r||v c S dS )a This function checks if an attribute on a builtin mutable object
(list, dict, set or deque) or the corresponding ABCs would modify it
if called.
>>> modifies_known_mutable({}, "clear")
True
>>> modifies_known_mutable({}, "keys")
False
>>> modifies_known_mutable([], "append")
True
>>> modifies_known_mutable([], "index")
False
If called with an unsupported object, ``False`` is returned.
>>> modifies_known_mutable("foo", "upper")
False
F)r+ r1 )r8 rH typespecrG s r9 modifies_known_mutabler\ sD & * " "& c8 $ $ "6> ! ! ! " 5r; c e Zd ZU dZdZej ej ej ej ej
ej ej dZ
ej eej ej ej gej f f ed< ej ej dZej eej ej gej f f ed< e Zej e ed< e Zej e ed< d ej d
ej d d f fd
Zdej dedej d e fdZ dej d e fdZ de dedej dej d ej f
dZ de dedej d ej fdZ!dej dej" eej f d ej" ej e#f fdZ$dej d ed ej" ej e#f fd Z%dej d ed e#fd Z& d&d ed ej' ej d f d
ej eej f d!ej( ej d ef
d"Z)d#e d$ej d ej d
ej d ej f
d%Z* xZ+S )'SandboxedEnvironmenta The sandboxed environment. It works like the regular environment but
tells the compiler to generate sandboxed code. Additionally subclasses of
this environment may override the methods that tell the runtime what
attributes or functions are safe to access.
If the template tries to access insecure code a :exc:`SecurityError` is
raised. However also other exceptions may occur during the rendering so
the caller has to ensure that all exceptions are caught.
T)+-*/z//z**%default_binop_table)r_ r` default_unop_tableintercepted_binopsintercepted_unopsr< kwargsr- Nc t j |i | t | j d< | j | _ | j | _ d S )Nr> ) super__init__rC globalsrd copy binop_tablere
unop_table)selfr< rh __class__s r9 rk z SandboxedEnvironment.__init__ s\ $)&))) * W 388:: 16688r; r8 rH valuec N | d pt || S )aY The sandboxed environment will call this method to check if the
attribute of an object is safe to access. Per default all attributes
starting with an underscore are considered private as well as the
special attributes of internal python objects as returned by the
:func:`is_internal_attribute` function.
_)rX rY )rp r8 rH rr s r9 is_safe_attributez&SandboxedEnvironment.is_safe_attribute s) OOC((L,A#t,L,LMMr; c H t |dd pt |dd S )zCheck if an object is safely callable. By default callables
are considered safe unless decorated with :func:`unsafe`.
This also recognizes the Django convention of setting
``func.alters_data = True``.
rF F alters_data)getattr)rp r8 s r9 is_safe_callablez%SandboxedEnvironment.is_safe_callable s0
C*E 2 2 Xgc=RW6X6X
r; contextoperatorleftrightc 0 | j | || S )zFor intercepted binary operator calls (:meth:`intercepted_binops`)
this function is executed instead of the builtin operator. This can
be used to fine tune the behavior of certain operators.
.. versionadded:: 2.6
)rn )rp rz r{ r| r} s r9
call_binopz SandboxedEnvironment.call_binop s *t )$666r; argc . | j | | S )zFor intercepted unary operator calls (:meth:`intercepted_unops`)
this function is executed instead of the builtin operator. This can
be used to fine tune the behavior of certain operators.
.. versionadded:: 2.6
)ro )rp rz r{ r s r9 call_unopz SandboxedEnvironment.call_unop! s )tx(---r; argumentc || S # t t f$ r t |t rt t | } t || }| ||| r|cY S | || cY S # t $ r Y nw xY w# t $ r Y nw xY wY nw xY w| || S )z(Subscribe an object from sandboxed code.r8 name)
TypeError LookupErrorr1 r7 rx ru unsafe_undefinedAttributeError Exception undefined)rp r8 r rH rr s r9 getitemz SandboxedEnvironment.getitem* s Dx= ;' D D D(C((
D D x==DD 'T 2 2 11#xGG )#(LLL # 4 4S( C CCCC * ! D D ~~#H~555sV
&B'BBB',B'
BB'BB'
B! B' B!!B'&B' attributec t || }| ||| r|S | || S # t $ r% || cY S # t t
f$ r Y nw xY wY nw xY w| || S )zSubscribe an object from sandboxed code and prefer the
attribute. The attribute passed *must* be a bytestring.
r )rx ru r r r r r )rp r8 r rr s r9 rx z SandboxedEnvironment.getattrA s
9C++E %%c9e<<
((i88 8
9~%%% {+
~~#I~666s5 A
A0 AA0A*'A0)A**A0/A0c p | d|dt | j d||t S )z1Return an undefined object for unsafe attributes.zaccess to attribute z of z object is unsafe.)r r8 exc)r rO r5 r )rp r8 r s r9 r z%SandboxedEnvironment.unsafe_undefinedR sR ~~
99
9
9S "
9
9
9
r; s. format_funcc x t |t rt | |j }nt | }|O|j dk rDt
| dk s|r%t dt
| |duz d |d }d}| ||| } t | | S ) zIf a format call is detected, then this is routed through this
method so that our safety sandbox can be used for it.
)escapeNr0 r z(format_map() takes exactly one argument z givenr )
r1 r SandboxedEscapeFormatterr SandboxedFormatterr5 r? r vformatrO )rp r r< rh r formatterrvs r9
format_stringz"SandboxedEnvironment.format_string\ s a 10ahGGGII*400I "{';|'K'K4yyA~~~ AD V4%78A A A
!WFD
q$
/
/tAwwr{{r; _SandboxedEnvironment__context_SandboxedEnvironment__objc t | }|| |||| S | | st |d |j |g|R i |S )z#Call an object from sandboxed code.Nz is not safely callable)r: r ry r call)_SandboxedEnvironment__selfr r r< rh fmts r9 r zSandboxedEnvironment.cally s $E** ?''T65AA A &&u-- E 5 C C CDD D y~e5d555f555r; N),r5
__module__ __qualname____doc__ sandboxedr{ r submultruedivfloordivpowmodrd tDictr7 CallableAny__annotations__posnegre frozensetrf FrozenSetrg rk boolru ry r r r Unionr
r rx r TupleOptionalr r
__classcell__rq s @r9 r^ r^ s I \
\
\
l
\K KQZ0E%F FG \
\C CsAJw~$> >? & ,59;; C(666 +4)++q{3'5559ae 9qu 9 9 9 9 9 9 9 NQU N# Nae N N N N N
AE
d
7 7*- 756U 7CD5 7
7 7 7 7. .C .ae . . . . .656$%GCJ$76
! "6 6 6 6.715 7S 7QWQUI=M5N 7 7 7 7"
AE
c
i
/3 gaeSj! sAEz"
Z
+
:66 u6 u 6
% 6
6 6 6 6 6 6 6 6r; r^ c H e Zd ZdZdej dedej def fd Z xZ S ) ImmutableSandboxedEnvironmentzWorks exactly like the regular `SandboxedEnvironment` but does not
permit modifications on the builtin mutable objects `list`, `set`, and
`dict` by using the :func:`modifies_known_mutable` function.
r8 rH rr r- c p t ||| sdS t || S )NF)rj ru r\ )rp r8 rH rr rq s r9 ru z/ImmutableSandboxedEnvironment.is_safe_attribute s9 ww((dE:: 5)#t4444r; )
r5 r r r r r r7 r ru r r s @r9 r r sg
5QU 5# 5ae 5 5 5 5 5 5 5 5 5 5 5r; r c
e Zd Zdedej ddf fd Zdedej ej dej eej f dej
ej ef fdZ xZ S ) r envrh r- Nc H || _ t j di | d S )Nr )_envrj rk )rp r rh rq s r9 rk zSandboxedFormatter.__init__ s- ""6"""""r;
field_namer< c t | \ }}| ||| }|D ]>\ }}|r | j || }#| j || }?||fS r )r get_valuer rx r ) rp r r< rh firstrestr8 is_attris r9 get_fieldz SandboxedFormatter.get_field s 1<< tnnUD&11 0 0JGQ
0i''Q//i''Q//Ezr; )
r5 r r r
r r rk r7 SequenceMappingr r r r s @r9 r r s #K #15 #T # # # # # #
%&Z%6
@A #qu*@U
r; r c e Zd ZdS )r N)r5 r r r r; r9 r r s Dr; r )9r r{ r2 typingr _stringr collectionsr r stringr
markupsafer r environmentr
exceptionsr runtimer r
TypeVarr r r r@ setr Setr7 r r rT rV rW
MutableSetr MutableMappingMutableSequencer+ r Typer r r: intr> rC rG r rY r\ r^ r r r r r; r9 r s . . . . . . & & & & & & $ $ $ $ $ $ % % % % % %
AIcCJ/000
*- AE#J . . . (+suu !%* , , , *9 5 *9 5 &/
$; !
EEEFF
MMMNN
1(B
qwqwqvq{3'7 78#=> ( ( (V AJ 1:c? c e
a
A
"!qu "!C "!D "! "! "! "!J S T 2N6 N6 N6 N6 N6; N6 N6 N6b
5
5
5
5
5$8
5
5
5 $ 1? r;