3v P d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z
d dl Z
d dl m
Z
d dlmZ d dlmZmZ d dlmZ d dlmZ d dlmZ d d lmZ d d
lm Z m Z m Z m Z d d l m!Z!m"Z" ej# e$ Z%d Z& ed
G d d Z' ed
G d d Z(d-dZ)d.dZ*d.dZ+ ej, dej- Z.d/d Z/d0d!Z0d1d#Z1ej2 G d$ d% Z3 G d& d'e Z4d2d)Z5ej6 d3d, Z7dS )4 ) annotationsN)Mapping) dataclass)Any
NamedTuple)InvalidEggFragment)parse_iso_datetime)WHEEL_EXTENSION)Hashes)pairwiseredact_auth_from_urlsplit_auth_from_netlocsplitext) path_to_url url_to_path)sha512sha384sha256sha224sha1md5T)frozenc e Zd ZU dZded< ded< ej d d d e D Z
dd Z e e
j dd ZddZddZd dZdS ) LinkHasha Links to content may have embedded hash values. This class parses those.
`name` must be any member of `_SUPPORTED_HASHES`.
This class can be converted to and from `ArchiveInfo`. While ArchiveInfo intends to
be JSON-serializable to conform to PEP 610, this class contains the logic for
parsing a hash name and value for correctness, and then checking whether that hash
conforms to a schema with `.is_hash_allowed()`.strnamevaluez[#&]({choices})=([^&]*)|c # > K | ]}t j | V d S N)reescape).0 hash_names y/builddir/build/BUILD/imunify360-venv-2.6.2/opt/imunify360/venv/lib/python3.11/site-packages/pip/_internal/models/link.py zLinkHash.< s, U UiRYy 1 1 U U U U U U )choicesreturnNonec & | j t v sJ d S r )r _SUPPORTED_HASHESselfs r%
__post_init__zLinkHash.__post_init__@ s y -------r' urlLinkHash | Nonec | j | }|dS | \ }} | || S )zGSearch a string for a checksum algorithm name and encoded output value.Nr r )_hash_url_fragment_researchgroups)clsr0 matchr r s r% find_hash_url_fragmentz LinkHash.find_hash_url_fragmentC sJ )0055 =4llnn esE****r' dict[str, str]c | j | j iS r r3 r- s r% as_dictzLinkHash.as_dictM s 4:&&r' r c : t | j | j gi S )z@Return a Hashes instance which checks only for the current hash.)r r r r- s r% as_hasheszLinkHash.as_hashesP s ty4:,/000r' hashes
Hashes | Noneboolc L |dS | | j | j S )zI
Return True if the current hash is allowed by `hashes`.
NF)
hex_digest)is_hash_allowedr r r. r? s r% rD zLinkHash.is_hash_allowedT s+ >5%%diDJ%GGGr' Nr) r* )r0 r r) r1 )r) r: r) r r? r@ r) rA )__name__
__module__ __qualname____doc____annotations__r! compileformatjoinr, r4 r/ classmethod functoolscacher9 r< r> rD r' r% r r ' s 7 7 IIIJJJ &BJ #))HH U UCT U U UUU *
. . . . _+ + + _ [+' ' ' '1 1 1 1H H H H H Hr' r c & e Zd ZU dZded< ddZdS ) MetadataFilezFInformation about a core metadata file associated with a distribution.dict[str, str] | Noner? r) r* c X | j t d | j D sJ d S d S )Nc 3 ( K | ]
}|t v V d S r r, )r# r s r% r& z-MetadataFile.__post_init__..e s( IITt 00IIIIIIr' )r? allr- s r% r/ zMetadataFile.__post_init__c s= ; "IIT[IIIII I II # " I Ir' NrF )rI rJ rK rL rM r/ rT r' r% rV rV ] sB PP!!!!J J J J J Jr' rV r? rW r) c R | d S d | D } | sd S | S )Nc , i | ]\ }}|t v ||S rT rZ )r# nvs r%
z$supported_hashes..m s)
H
H
Htq!6G1G1Ga1G1G1Gr' )itemsr? s r% supported_hashesrc h s; ~t
H
Hv||~~
H
H
HF t Mr' partr c z t j t j | S )zP
Clean a "part" of a URL path (i.e. after splitting on "@" characters).
)urllibparsequoteunquote)rd s r% _clean_url_path_partrj s s*
< fl 2 24 8 8 9 99r' c t j t j | }| d r| d }|S )z
Clean the first part of a URL path that corresponds to a local
filesystem path (i.e. the first part after splitting on "@" characters).
z///z//)rf request pathname2url url2pathname
startswith removeprefix)rd rets r% _clean_file_url_pathrr { sU .
%
%fn&A&A$&G&G
H
HC
~~e % t$$ Jr' z(@|%2F)path
is_local_pathrA c b |rt }nt }t | }g }t t j |dg D ]J\ }}| || | | Kd | S )z*
Clean the path portion of a URL.
)
rr rj _reserved_chars_resplitr itertoolschainappendupperrP )rs rt
clean_funcparts
cleaned_partsto_cleanreserveds r% _clean_url_pathr s *)
)
$ $T * *EM &yurd'C'C D D / /( ZZ 1 1222 X^^ - -....
77= ! !!r' r0 c t j | }|j }t |j | }t j | d| }|j |dd z }|S )z
Make sure a link is fully quoted.
For example, if ' ' occurs in the URL, it will be replaced with "%20",
and without double-quoting other characters.
)rt file)schemers N) rf rg urlsplitnetlocr rs
urlunsplit_replacer )r0 resultrt rs rq s r% _ensure_quoted_urlr sw \
"
"3
'
'F
%M 6;m D D DD ,
!
!&//d/"K"K
L
LC
-#abb'
!C Jr' base_urlc p | d r|S t j | | S )zk
A faster implementation of urllib.parse.urljoin with a shortcut
for absolute http/https URLs.
)zhttps://zhttp://)ro rf rg urljoin)r r0 s r% _absolute_link_urlr s6
~~-.. 3
|##Hc222r' c e Zd ZdZg dZ dEdFdZedGd ZedHd ZdId Z dId Z
dJd"Z dKd%Z dKd&Z
edId' ZedId( ZedId) ZedId* ZedId+ ZedId, ZedId- ZdLd/ZedId0 ZedId1 Z ej d2 Z ej d3ej Z dMd4Z ej d5 Z edMd6 Z dNd7Z!dOd9Z"edMd: Z#edMd; Z$edId< Z%edPd= Z&dPd>Z'edPd? Z(edPd@ Z)edPdA Z*edPdB Z+dQdDZ,dS )RLinkz:Represents a parsed link from a Package Index's simple URL) _parsed_url_url_path_hashes
comes_fromrequires_python
yanked_reasonmetadata_file_data upload_timecache_link_parsing egg_fragmentNTr0 r r
str | Noner r r MetadataFile | Noner datetime.datetime | Noner rA r? Mapping[str, str] | Noner) r* c | d rt | }t j | | _ || _ t j | j j | _ t | } | i n| }
||
| _
n i ||
| _
|| _ |r|nd| _ || _ || _ || _ || _ | | _ dS )a;
:param url: url of the resource pointed to (href of the link)
:param comes_from: URL or string indicating where the link was found.
:param requires_python: String containing the `Requires-Python`
metadata field, specified in PEP 345. This may be specified by
a data-requires-python attribute in the HTML link tag, as
described in PEP 503.
:param yanked_reason: the reason the file has been yanked, if the
file has been yanked, or None if the file hasn't been yanked.
This is the value of the "data-yanked" attribute, if present, in
a simple repository HTML link. If the file has been yanked but
no reason was provided, this should be the empty string. See
PEP 592 for more information and the specification.
:param metadata_file_data: the metadata attached to the file, or None if
no such metadata is provided. This argument, if not None, indicates
that a separate metadata file exists, and also optionally supplies
hashes for that file.
:param upload_time: upload time of the file, or None if the information
is not available from the server.
:param cache_link_parsing: A flag that is used elsewhere to determine
whether resources retrieved from this link should be cached. PyPI
URLs should generally have this set to False, for example.
:param hashes: A mapping of hash names to digests to allow us to
determine the validity of a download.
z\\N)ro r rf rg r r r ri rs r r r9 r< r r r r r r r
_egg_fragmentr ) r. r0 r r r r r r r? link_hashhashes_from_links r% __init__z
Link.__init__ s T >>& ! ! # c""C!<0055 \))$*:*?@@
33C88 !*!222 8I8I8K8K >+DLL9f9(89DL$2A Kt *"4 &"4 . . 0 0r' file_datadict[str, Any]page_url Link | Nonec | d }|dS t t || }| d }| d }| di }| d }|| d }| d x} rt | }
nd}
t |t
r t
t | } n|rt
d } nd} |rt |t sd }n|sd} | |||||| |
S ) zZ
Convert an pypi json document from a simple repository page into a Link.
r0 Nzrequires-pythonyankedr? z
core-metadatazdist-info-metadataz upload-timerv )r r r r? r r ) getr r r
isinstancedictrV rc r ) r7 r r file_urlr0 pyrequirer r?
metadata_infoupload_time_datar r s r% from_jsonzLink.from_json st =='' 4 !3Hh!G!GHH MM"344 !
h//
x,, "
o66
%MM*> ? ?M (}}] ; ; ; ,-=>>KK K mT * * &!-.>}.M.M!N!N
&!-d!3!3 "& !M3!?!? ! MM ! Ms %' 1#
r' anchor_attribsdict[str, str | None]r c @ | d }|sdS t t || }| d }| d }| d }|| d }|dk rt d } nm|d} nh| d \ }
} } | dk r t t |
| i } n*t d | t d } | |||||
S ) z_
Convert an anchor element's attributes in a simple repository page to a Link.
hrefNzdata-requires-pythonz data-yankedzdata-core-metadatazdata-dist-info-metadatatrue=z8Index returned invalid data-dist-info-metadata value: %s)r r r r )r r r rV partitionrc loggerdebug)
r7 r r r r r0 r r r r hashnamesephashvals
r% from_elementzLink.from_elementS sZ !!&)) 4 !3Hd!C!CDD"&&'=>> &**=99
'**+?@@
* . ./H I IM F " "!-d!3!3
"!% &3%<%rT r- s r% __repr__z
Link.__repr__ s r' intc * t | j S r )hashr0 r- s r% __hash__z
Link.__hash__ s DH~~ r' otherr c Z t |t st S | j |j k S r r r NotImplementedr0 r. r s r% __eq__z Link.__eq__ s) %&& "! !x59$$r' c Z t |t st S | j |j k S r r r s r% __lt__z Link.__lt__ s) %&& "! !x%)##r' c | j S r )r r- s r% r0 zLink.url s
yr' c * t | j S r )r
r0 r- s r% r zLink.redacted_url s #DH---r' c | j d }t j | }|st | j \ }}|S t j | }|sJ d| j d |S )N/zURL z produced no filename)
rs rstrip posixpathbasenamer r rf rg ri r )r. rs r r user_passs r% filenamez
Link.filename s y $$!$'' !7t{ C C FIM|##D))>>>DI>>>>>t r' c * t | j S r )r r0 r- s r% file_pathzLink.file_path s 48$$$r' c | j j S r )r r r- s r% r z Link.scheme s &&r' c | j j S )z4
This can contain auth information.
)r r r- s r% r z Link.netloc s
&&r' c | j S r )r r- s r% rs z Link.path s
zr' tuple[str, str]c t t t j | j d S )Nr )r r r rs r r- s r% r z
Link.splitext s+ *49+;+;C+@+@AABBBr' c 6 | d S N )r r- s r% extzLink.ext s }}q!!r' c d | j \ }}}}}t j ||||df S )Nrv )r rf rg r )r. r r rs queryfragments r% url_without_fragmentzLink.url_without_fragment s6 040@-eX|&&eR'HIIIr' z[#&]egg=([^&]*)z)^([A-Z0-9]|[A-Z0-9][A-Z0-9._-]*[A-Z0-9])$c | j | j }|sd S | d }| j | st
| | |S r )_egg_fragment_rer5 r group_project_name_rer8 r )r. r8 project_names r% r zLink._egg_fragment sg %,,TY77 4 {{1~~ $**<88 9$T<88 8r' z[#&]subdirectory=([^&]*)c r | j | j }|sd S | d S r )_subdirectory_fragment_rer5 r r )r. r8 s r% subdirectory_fragmentzLink.subdirectory_fragment s7 .55di@@ 4{{1~~ r' c | j dS | j d}| j j t | S t || j j S )z>> " ) 1 %% %L)@)GHHHHr' r c b t d | j D S )Nc i | ] \ }}||g
S rT rT )r# kr_ s r% r` z"Link.as_hashes.. s ???$!Qq1#???r' )r r ra r- s r% r> zLink.as_hashes s- ??$,*<*<*>*>???@@@r' c j t t | j d S r )nextiterr valuesr- s r% r z Link.hash s( D ,,..//666r' c F t t | j d S r )r r r r- s r% r$ zLink.hash_name s D &&---r' c t j | j dd d dd d S )N#r r ?)r r r rx r- s r% show_urlz
Link.show_url s= !$)//#q"9"9!"<"B"B3"J"J1"MNNNr' c | j dk S )Nr )r r- s r% is_filez Link.is_file s {f$$r' c X | j o#t j | j S r )r osrs isdirr r- s r% is_existing_dirzLink.is_existing_dir s |=
dn = ==r' c " | j t k S r )r r
r- s r% is_wheelz
Link.is_wheel s x?**r' c * ddl m} | j |j v S )Nr )vcs)pip._internal.vcsr r all_schemes)r. r s r% is_vcsz Link.is_vcs s# )))))){co--r' c | j d uS r )r r- s r% is_yankedzLink.is_yanked s !--r' c * t | j S r )rA r r- s r% has_hashz
Link.has_hash s DL!!!r' r@ c p dS t fd| j D S )zS
Return True if the link has a hash and it is allowed by `hashes`.
NFc 3 J K | ] \ }} || V d S r )rD )r# r r_ r? s r% r& z'Link.is_hash_allowed..* s7 QQDAq6))!Q//QQQQQQr' )anyr ra rE s `r% rD zLink.is_hash_allowed$ s@ >5QQQQDL r r$ r r r
r r r r rD rT r' r% r r s DD I" "&&*$(2604#'+/B1 B1 B1 B1 B1H 6
6
6
[6
p 1
1
1
[1
f% % % % % % % %
$ $ $ $
X . . . X. X % % % X% ' ' ' X' ' ' ' X' XC C C C " " " X" J J J XJ "rz"455 "rz4bm !+
+F G G
X I I I IA A A A 7 7 7 X7 . . . X. O O O XO % % % X%> > > > + + + X+ . . . X.
. . . X. " " " X"R R R R R Rr' r c < e Zd ZU dZded< ded< ded< ded < d
S ) _CleanResulta Convert link for equivalency check.
This is used in the resolver to check whether two URL-specified requirements
likely point to the same distribution and can be considered equivalent. This
equivalency logic avoids comparing URLs literally, which can be too strict
(e.g. "a=1&b=2" vs "b=2&a=1") and produce conflicts unexpecting to users.
Currently this does three things:
1. Drop the basic auth part. This is technically wrong since a server can
serve different content based on auth, but if it does that, it is even
impossible to guarantee two URLs without auth are equivalent, since
the user can input different auth information when prompted. So the
practical solution is to assume the auth doesn't affect the response.
2. Parse the query to avoid the ordering issue. Note that ordering under the
same key in the query are NOT cleaned; i.e. "a=1&a=2" and "a=2&a=1" are
still considered different.
3. Explicitly drop most of the fragment part, except ``subdirectory=`` and
hash values, since it should have no impact the downloaded content. Note
that this drops the "egg=" part historically used to denote the requested
project (and extras), which is wrong in the strictest sense, but too many
people are supplying it inconsistently to cause superfluous resolution
conflicts, so we choose to also ignore them.
zurllib.parse.SplitResultparsedzdict[str, list[str]]r r subdirectoryr: r? N)rI rJ rK rL rM rT r' r% r r - sN 2 %$$$ r' r linkc | j }|j dd d }|j dk r|sd}t j |j dv rt d| d d }n# t t f$ r d
}Y nw xY wfd t D }t | |d
d
t j |j ||
S )N@r r localhosteggz Ignoring egg= fragment in %sr r rv c 6 i | ]}|v || d S )r rT )r# r r s r% r` z _clean_link..^ s(
L
L
LAa8mma!Q mmmr' )r r r )r r r r? )r r rsplitr rf rg parse_qsr r r
IndexErrorKeyErrorr, r r r )r r r r r? r s @r% _clean_linkr+ M s
F
]
!
!#q
)
)"
-F
} v |$$V_55H 3T::: /2 ! M
L
L
L):
L
L
LF fBDDl##FL11! s =B B"!B"link1link2c B t | t | k S r )r+ )r, r- s r% links_equivalentr/ g s u U!3!3 33r' )r? rW r) rW )rd r r) r )rs r rt rA r) r )r0 r r) r )r r r0 r r) r )r r r) r )r, r r- r r) rA )8
__future__r datetimerR ry loggingr r r! urllib.parserf urllib.requestcollections.abcr dataclassesr typingr r pip._internal.exceptionsr pip._internal.utils.datetimer pip._internal.utils.filetypesr
pip._internal.utils.hashesr pip._internal.utils.miscr r
r r pip._internal.utils.urlsr r getLoggerrI r r, r rV rc rj rr rN r rw r r r total_orderingr r r+ rS r/ rT r' r% r@ sW " " " " " " # # # # # # ! ! ! ! ! !
8 7 7 7 7 7 ; ; ; ; ; ; 9 9 9 9 9 9 - - - - - - > = = = = = = = 8 $ $
L $2H 2H 2H 2H 2H 2H 2H 2Hj $J J J J J J J J : : : : $ RZ 2=99 " " " ", &3 3 3 3 eR eR eR eR eR eR eR eRP : @ 4 4 4 4 4 4 4r'