|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /usr/lib64/python2.7/site-packages/django/http/ |
Upload File : |
�
r�\c @ s� d Z d d l m Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l
m Z d d l m
Z
d d l m Z d d l m Z d d
l m Z m Z m Z d% Z d e f d � � YZ d e f d � � YZ d Z d Z d Z d e f d � � YZ d e j f d � � YZ d e j f d � � YZ! d e j f d � � YZ" d e j f d � � YZ# d � Z$ d � Z% d! e f d" � � YZ& d# � Z' d$ � Z( d S(& u�
Multi-part parsing for file uploads.
Exposes one class, ``MultiPartParser``, which feeds chunks of uploaded data to
file upload handlers for processing.
i����( t unicode_literalsN( t settings( t SuspiciousMultipartForm( t MultiValueDict( t
force_text( t six( t unescape_entities( t
StopUploadt SkipFilet StopFutureHandlersu MultiPartParseru MultiPartParserErroru InputStreamExhaustedt MultiPartParserErrorc B s e Z RS( ( t __name__t
__module__( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR
s t InputStreamExhaustedc B s e Z d Z RS( u5
No more reads are allowed from this device.
( R R t __doc__( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR
s u rawu fileu fieldt MultiPartParserc B s5 e Z d Z d d � Z d � Z d � Z d � Z RS( u�
A rfc2388 multipart/form-data parser.
``MultiValueDict.parse()`` reads the input stream in ``chunk_size`` chunks
and returns a tuple of ``(MultiValueDict(POST), MultiValueDict(FILES))``.
c C s� | j d | j d d � � } | j d � s@ t d | � � n t | j d � � \ } } | j d � } | s� t j | � r� t d | � � n y( t | j d | j d
d � � � } Wn t t f k
r� d } n X| d k r� t d | � � n t
| t j � r | j d � } n | | _
| | _ g | D] }
|
j r8|
j ^ q8} t d g | � | _ | | _ | p�t j | _ | | _ | | _ d S( u�
Initialize the MultiPartParser object.
:META:
The standard ``META`` dictionary in Django request objects.
:input_data:
The raw post data, as a file-like object.
:upload_handlers:
A list of UploadHandler instances that perform operations on the uploaded
data.
:encoding:
The encoding with which to treat the incoming data.
u HTTP_CONTENT_TYPEu CONTENT_TYPEu u
multipart/u Invalid Content-Type: %su asciiu boundaryu! Invalid boundary in multipart: %su HTTP_CONTENT_LENGTHu CONTENT_LENGTHi u Invalid content length: %ri i i NI � i���( t gett
startswithR
t parse_headert encodet cgit valid_boundaryt intt
ValueErrort TypeErrort
isinstanceR t text_typet _boundaryt _input_datat
chunk_sizet mint _chunk_sizet _metaR t DEFAULT_CHARSETt _encodingt _content_lengtht _upload_handlers( t selft METAt
input_datat upload_handlerst encodingt content_typet ctypest optst boundaryt content_lengtht xt possible_sizes( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt __init__+ s. (
% c C s9 d d l m } | j } | j } | j d k rM | d d | j �t � f SxS | D]K } | j | j | j | j | j | � } | d k rT | d | d f SqT W| d d t �| _ t � | _
t t | j | j � � } d } d g t | � } y�x�t | | j � D]�\ } }
} | r<| j | | � d } n y" |
d d } | d j � }
Wn t t t f k
r}qn X|
j d
� } | d k r�| d j � } n t |
| d d �}
| t k rB| d
k r| j � } y t | � j d
� } Wq | } q Xn | j � } | j j |
t | | d d �� q| t k r�| j d � } | siqn t | | d d �} | j t! | � � } |
j d d � d j � } y, |
j d d i f � d j d d � } Wn
d } n Xy t" |
j d � d � } Wn t t# t$ f k
r*d } n Xd g t | � } yRx@ | D]8 } y | j% |
| | | | � WqHt& k
rPqHXqHWx| D] } | d
k r,t | � d } | r�| j d | � } | | 7} n y t' j( | � } Wq,t) k
r(} d | } t* j+ t, t, | � t- j. � d � q,Xn x\ t/ | � D]N \ } } t | � } | j0 | | | � } | | c | 7<| d k r9Pq9q9Wq�WWn t1 k
r�t2 | � q�X|
} qt2 | � qWWn, t3 k
r�} | j4 st2 | j � qn Xt2 | j � x$ | D] } | j5 � } | r Pq q W| j | j
f S( u�
Parse the POST data and break it into a FILES MultiValueDict and a POST
MultiValueDict.
Returns a tuple containing the POST and FILES dictionary, respectively.
i����( t QueryDicti u R) i t mutableu content-dispositionu nameu content-transfer-encodingt errorsu replaceu base64u filenameu content-typeu charsetu content-lengthi u Could not decode base64 data: %ri N( u (6 t django.httpR2 R" R$ R# R t handle_raw_inputR R R t Nonet Truet _postt _filest
LazyStreamt ChunkIterR t lent Parsert handle_file_completet stript KeyErrort
IndexErrort AttributeErrorR R t FIELDt readt strt decodet
appendlistt FILEt IE_sanitizeR R R R t new_fileR t base64t b64decodet ExceptionR t reraiseR
t syst exc_infot enumeratet receive_data_chunkR t exhaustR t connection_resett upload_complete( R% R2 R) t handlerst handlert resultt streamt old_field_namet counterst item_typet meta_datat field_streamt dispositiont
field_namet transfer_encodingt raw_datat datat file_nameR* t charsetR. t chunkt
over_bytest
over_chunkt et msgt it chunk_lengtht retval( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt parseb s�
"
,
*
c C sf x_ t | j � D]N \ } } | j | | � } | r | j j t | | j d d �| � Pq q Wd S( uU
Handle all the signalling that takes place when a file is complete.
R4 u replaceN( RR R$ t
file_completeR: RH R R" ( R% R[ R\ Rl RX t file_obj( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR? � s c C s! | o | | j d � d j � S( u3 Cleanup filename from Internet Explorer full paths.u \i ( t rfindR@ ( R% t filename( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyRJ s N( R R R R7 R1 Ro R? RJ ( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR $ s
7 � R; c B s\ e Z d Z d d � Z d � Z d d � Z d � Z d � Z d � Z d � Z
d � Z RS(
u!
The LazyStream wrapper allows one to get and "unget" bytes from a stream.
Given a producer object (an iterator that yields bytestrings), the
LazyStream object will support iteration, reading, and keeping a "look-back"
variable in case you need to "unget" some bytes.
c C sC | | _ t | _ d | _ | | _ d | _ | | _ g | _ d S( u�
Every LazyStream must have a producer when instantiated.
A producer is an iterable that returns a string each time it
is called.
t i N( t _producert Falset _emptyt _leftovert lengtht positiont
_remainingt _unget_history( R% t producerRy ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR1 s c C s | j S( N( Rz ( R% ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt tell# s c s( � � f d � } d j | � � } | S( Nc 3 s� � d k r � j n � } | d k r9 d j � � Vd Sxd | d k r� | d k s` t d � � t � � } | | } � j | | � | t | � 8} | Vq< Wd S( NRt i u0 remaining bytes to read should never go negative( R7 R{ t joint AssertionErrort nextt ungetR= ( t remainingRg t emitting( R% t size( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt parts' s
Rt ( R ( R% R� R� t out( ( R% R� s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyRE & s c C sO | j r | j } d | _ n t | j � } g | _ | j t | � 7_ | S( u
Used when the exact number of bytes to read is unimportant.
This procedure just returns whatever is chunk is conveniently returned
from the iterator instead. Useful to avoid unnecessary bookkeeping if
performance is an issue.
Rt ( Rx R� Ru R| Rz R= ( R% t output( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt __next__> s c C s
g | _ d S( u�
Used to invalidate/disable this lazy stream.
Replaces the producer with an empty list. Any leftover bytes that have
already been read will still be reported upon read() and/or next().
N( Ru ( R% ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt closeO s c C s | S( N( ( R% ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt __iter__X s c C sQ | s
d S| j t | � � | j t | � 8_ d j | | j g � | _ d S( u�
Places bytes back onto the front of the lazy stream.
Future calls to read() will return those bytes first. The
stream position and thus tell() will be rewound.
NRt ( t _update_unget_historyR= Rz R Rx ( R% t bytes( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� [ s
c C sd | g | j d | _ t g | j D] } | | k r$ | ^ q$ � } | d k r` t d � � n d S( u[
Updates the unget history as a sanity check to see if we've pushed
back the same number of bytes in one chunk. If we keep ungetting the
same number of bytes many times (here, 50), we're mostly likely in an
infinite loop of some sort. This is usually caused by a
maliciously-malformed MIME request.
i1 i( u� The multipart parser got stuck, which shouldn't happen with normal uploaded files. Check for malicious upload activity; if there is none, report this to the Django developers.N( R| R= R ( R% t num_bytest current_numbert number_equal( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� h s N( R R R R7 R1 R~ RE R� R� R� R� R� ( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR; s
R< c B s, e Z d Z d d � Z d � Z d � Z RS( u�
An iterable that will yield chunks of data. Given a file-like object as the
constructor, this object will yield chunks of read operations from that
object.
i@ i c C s | | _ | | _ d S( N( t floR ( R% R� R ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR1 � s c C sM y | j j | j � } Wn t k
r5 t � � n X| r@ | St � � d S( N( R� RE R R
t
StopIteration( R% Rd ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s
c C s | S( N( ( R% ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s i ( R R R R1 R� R� ( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR< { s
t InterBoundaryIterc B s) e Z d Z d � Z d � Z d � Z RS( u7
A Producer that will iterate over boundaries.
c C s | | _ | | _ d S( N( t _streamR ( R% RZ R- ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR1 � s c C s | S( N( ( R% ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s c C s> y t t | j | j � � SWn t k
r9 t � � n Xd S( N( R; t BoundaryIterR� R R
R� ( R% ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s
( R R R R1 R� R� ( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s R� c B s5 e Z d Z d � Z d � Z d � Z e d � Z RS( ue
A Producer that is sensitive to boundaries.
Will happily yield bytes until a boundary is found. Will yield the bytes
before the boundary, throw away the boundary bytes themselves, and push the
post-boundary bytes back on the stream.
The future calls to next() after locating the boundary will raise a
StopIteration exception.
c C sf | | _ | | _ t | _ t | � d | _ | j j d � } | sR t � � n | j j | � d S( Ni i ( R� R Rv t _doneR= t _rollbackRE R
R� ( R% RZ R- t unused_char( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR1 � s c C s | S( N( ( R% ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s c
C s1 | j r t � � n | j } | j } d } g } xN | D]= } | t | � 7} | j | � | | k rm Pn | s: Pq: q: Wt | _ | s� t � � n d j | � } | j | t | � | j k � } | r� | \ } } | j | | � t | _ | | S| | st | _ | S| j | | � | | Sd S( Ni Rt (
R� R� R� R� R= t appendR8 R t _find_boundaryR� (
R% RZ t rollbackt
bytes_readt chunksR� Rg R- t endR� ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s8
! c C s� | j | j � } | d k r" d S| } | t | j � } t d | d � } | | | d !d k rr | d 8} n t d | d � } | | | d !d k r� | d 8} n | | f Sd S( u(
Finds a multipart boundary in data.
Should no boundry exist in the data None is returned instead. Otherwise
a tuple containing the indices of the following are returned:
* the end of current encapsulation
* the start of the next encapsulation
i i s
s
N( t findR R7 R= t max( R% Rd t eoft indexR� R� t last( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s
( R R R R1 R� R� Rv R� ( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� � s
)c C si d } y t | � } Wn t k
r8 t | d � } n X| d k rT t d � � n x | D] } q[ Wd S( u�
Completely exhausts an iterator or stream.
Raise a MultiPartParserError if the argument is not a stream or an iterable.
i @ uG multipartparser.exhaust() was passed a non-iterable or stream parameterN( R7 t iterR R< R
( t stream_or_iterablet iteratort __( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyRT s
c C s! | j | � } | j d � } d � } | d k rM | j | � t i | f S| | } | j | | d � t } i } x} | j d � D]l } y | | � \ } \ }
} Wn
q� n X| d k r� t } | j d � r� t } q� n |
| f | | <q� W| t k r| j | � n | | | f S( uI
Parses one and exactly one stream that encapsulates a boundary.
s
c S sX t | � \ } } y | j d d � \ } } Wn t d | � � n X| | | f f S( Nu :i u Invalid header: %r( R t splitR ( t linet main_value_pairt paramst namet value( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt
_parse_header# s i����i s
u content-dispositionu filename( RE R� R� t RAWR� RD R RI ( RZ t max_header_sizeRg t
header_endR� t headert TYPEt outdictR� R� R� R� ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt parse_boundary_stream s.
R> c B s e Z d � Z d � Z RS( c C s | | _ d | | _ d S( Ns --( R� t
_separator( R% RZ R- ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR1 P s c c s8 t | j | j � } x | D] } t | d � Vq Wd S( Ni ( R� R� R� R� ( R% t boundarystreamt
sub_stream( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� T s
( R R R1 R� ( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR> O s c C s t d | � } | j d � j � j d � } i } x� | D]� } | j d � } | d k r; | | j � j � j d � } | | d j � } t | � d k r� | d | d k o� d k n r� | d d !} | j d d
� j d d � } n | | | <q; q; W| | f S( u� Parse the header into a key-value.
Input (line): bytes, output: unicode for key/name, bytes for value which
will be decoded later
t ;i u asciit =i i i����t "s \\s \s \"( t _parse_header_paramst popt lowerRG R� R@ R= t replace( R� t plistt keyt pdictt pRl R� R� ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR Z s
6
!c C s� g } x� | d d k r� | d } | j d � } x? | d k rs | j d d | � d rs | j d | d � } q5 W| d k r� t | � } n | | } | j | j � � | | } q W| S( Ni R� i R� i ( R� t countR= R� R@ ( t sR� R� t f( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyR� m s
(
( u MultiPartParseru MultiPartParserErroru InputStreamExhausted() R t
__future__R RL R RP t django.confR t django.core.exceptionsR t django.utils.datastructuresR t django.utils.encodingR t django.utilsR t django.utils.textR t django.core.files.uploadhandlerR R R t __all__RN R
R
R� RI RD t objectR t IteratorR; R< R� R� RT R� R> R R� ( ( ( s= /tmp/pip-install-XxeQeY/django/django/http/multipartparser.pyt <module> s6 �o` :