B CVvgwc@sddlZddlZddlZddlZddlmZddlmZddlm Z m Z m Z m Z m Z ddlmZddlmZddlmZmZmZmZddlmZdd lmZmZmZdd lmZmZm Z dd l!m"Z"dd l#m$Z$m%Z%dd l&m'Z'ddl(m)Z)ddl*m+Z+ddl,m-Z-ddl.m/Z/e+e dr(e+e ds4ddl(m Z e0Z1e-dZ2Gddde3Z4Gddde5Z6GdddZ7GdddeZ8Gdd d e Z9Gd!d"d"Z:d#d$Z;d%d&ZdS)+N)BytesIO)chain) parse_qslquote urlencodeurljoinurlsplit)settings)signing)DisallowedHostImproperlyConfiguredRequestDataTooBigTooManyFieldsSent) uploadhandler)MultiPartParserMultiPartParserErrorTooManyFilesSent)CaseInsensitiveMapping ImmutableListMultiValueDict)RemovedInDjango40Warning)escape_uri_path iri_to_uri)cached_property)is_same_domain)func_supports_parameter)_lazy_re_compile) parse_headermax_num_fields separator)rz1^([a-z0-9.-]+|\[[a-f0-9]*:[a-f0-9\.:]+\])(:\d+)?$c@s eZdZdS)UnreadablePostErrorN)__name__ __module__ __qualname__r%r%7/tmp/pip-install-o3oxmrkh/Django/django/http/request.pyr!-sr!c@seZdZdZdS)RawPostDataExceptionz You cannot access raw_post_data from a request that has multipart/* POST data if it has been accessed via POST, FILES, etc.. N)r"r#r$__doc__r%r%r%r&r'1sr'c@s^eZdZdZdZgZddZddZeddZ ed d Z d d Z d dZ ddZ ddZddZdGddZdHddZddZeddfddZdd ZdId!d"Zed#d$Zd%d&Zed'd(Zd)d*Zd+d,Zed-d.Zejd/d.Zd0d1Zed2d3Z e jd4d3Z d5d6Z!ed7d8Z"d9d:Z#d;d<Z$d=d>Z%d?d@Z&dAdBZ'dCdDZ(dEdFZ)dS)J HttpRequestzA basic HTTP request.NcCsTtdd|_tdd|_i|_i|_t|_d|_d|_d|_ d|_ d|_ d|_ dS)NT)mutable) QueryDictGETPOSTCOOKIESMETArZFILESpath path_infomethodZresolver_match content_typecontent_params)selfr%r%r&__init__As  zHttpRequest.__init__cCs6|jdks|sd|jjSd|jj|j|fS)Nz<%s>z <%s: %s %r>)r3 get_full_path __class__r")r6r%r%r&__repr__Ss zHttpRequest.__repr__cCs t|jS)N) HttpHeadersr0)r6r%r%r&headersXszHttpRequest.headerscCst|jddS)z%Return a list of MediaType instances.Acceptz*/*)parse_accept_headerr<get)r6r%r%r&accepted_types\szHttpRequest.accepted_typescstfdd|jDS)Nc3s|]}|VqdS)N)match).0Z accepted_type) media_typer%r& csz&HttpRequest.accepts..)anyr@)r6rCr%)rCr&acceptsas zHttpRequest.acceptscCs^t|dd\|_|_d|jkrZyt|jdWntk rLYnX|jd|_dS)z/Set content_type, content_params, and encoding. CONTENT_TYPEr+charsetN) cgirr?r4r5codecslookup LookupErrorencoding)r6metar%r%r&_set_content_type_paramsgs z$HttpRequest._set_content_type_paramscCshtjrd|jkr|jd}nHd|jkr2|jd}n2|jd}|}||rRdndkrdd||f}|S)z Return the HTTP host using the environment or request headers. Skip allowed hosts protection, so may return an insecure host. ZHTTP_X_FORWARDED_HOSTZ HTTP_HOSTZ SERVER_NAME44380z%s:%s)r ZUSE_X_FORWARDED_HOSTr0get_port is_secure)r6hostZ server_portr%r%r& _get_raw_hostrs      zHttpRequest._get_raw_hostcCsn|}tj}tjr"|s"dddg}t|\}}|r@t||r@|Sd|}|rZ|d|7}n|d7}t|dS)z>Return the HTTP host using the environment or request headers.z .localhostz 127.0.0.1z[::1]zInvalid HTTP_HOST header: %r.z) You may need to add %r to ALLOWED_HOSTS.zB The domain name provided is not valid according to RFC 1034/1035.N)rUr Z ALLOWED_HOSTSDEBUGsplit_domain_port validate_hostr )r6rT allowed_hostsdomainportmsgr%r%r&get_hosts   zHttpRequest.get_hostcCs.tjrd|jkr|jd}n |jd}t|S)z3Return the port number for the request as a string.ZHTTP_X_FORWARDED_PORTZ SERVER_PORT)r ZUSE_X_FORWARDED_PORTr0str)r6r[r%r%r&rRs  zHttpRequest.get_portFcCs||j|S)N)_get_full_pathr1)r6force_append_slashr%r%r&r8szHttpRequest.get_full_pathcCs||j|S)N)r_r2)r6r`r%r%r&get_full_path_infoszHttpRequest.get_full_path_infoc CsHdt||r|dsdnd|jddr@dt|jddndfS)Nz%s%s%s/r+ QUERY_STRING?)rendswithr0r?r)r6r1r`r%r%r&r_szHttpRequest._get_full_pathr+cCszy|j|}Wn"tk r0|tk r*|SYnXytj||dj||d}Wn$tjk rt|tk rn|SYnX|S)z Attempt to return a signed cookie. If the signature fails or the cookie has expired, raise an exception, unless the `default` argument is provided, in which case return that value. )salt)max_age)r/KeyError RAISE_ERRORr Zget_cookie_signerZunsignZ BadSignature)r6keydefaultrfrgZ cookie_valuevaluer%r%r&get_signed_cookieszHttpRequest.get_signed_cookiecCsdj|j||dS)z Return an absolute URI from variables available in this request. Skip allowed hosts protection, so may return insecure URI. z{scheme}://{host}{path})schemerTr1)formatrnrUr8)r6r%r%r& get_raw_uriszHttpRequest.get_raw_uricCs|dkrd|}nt|}t|}|jr2|js|jdr|js|jsd|jkrd|jkr|drt|dd}|j|}nt|j|j|}t |S)a Build an absolute URI from the location and the variables available in this request. If no ``location`` is specified, build the absolute URI using request.get_full_path(). If the location is absolute, convert it to an RFC 3987 compliant URI and return it. If location is relative or is scheme-relative (i.e., ``//example.com/``), urljoin() it to a base URL constructed from the request variables. Nz//%srbz/./z/../z//) r8r^rrnnetlocr1 startswith_current_scheme_hostrr)r6locationbitsr%r%r&build_absolute_uris     zHttpRequest.build_absolute_uricCsd|j|S)Nz{}://{})rornr])r6r%r%r&rtsz HttpRequest._current_scheme_hostcCsdS)zf Hook for subclasses like WSGIRequest to implement. Return 'http' by default. httpr%)r6r%r%r& _get_schemeszHttpRequest._get_schemecCs^tjrVytj\}}Wntk r0tdYnX|j|}|dk rV||krRdSdS|S)NzJThe SECURE_PROXY_SSL_HEADER setting must be a tuple containing two values.httpsrx)r ZSECURE_PROXY_SSL_HEADER ValueErrorr r0r?ry)r6headerZ secure_value header_valuer%r%r&rns  zHttpRequest.schemecCs |jdkS)Nrz)rn)r6r%r%r&rSszHttpRequest.is_securecCs tjdtdd|jddkS)Nzfrequest.is_ajax() is deprecated. See Django 3.1 release notes for more details about this deprecation.rq) stacklevelZHTTP_X_REQUESTED_WITHZXMLHttpRequest)warningswarnrr0r?)r6r%r%r&is_ajaxs zHttpRequest.is_ajaxcCs|jS)N) _encoding)r6r%r%r&rMszHttpRequest.encodingcCs&||_t|dr|`t|dr"|`dS)z Set the encoding used for GET/POST accesses. If the GET or POST dictionary has already been created, remove and recreate it on the next access (so that it is decoded correctly). r-_postN)rhasattrr-r)r6valr%r%r&rMs   csfddtjD_dS)Ncsg|]}t|qSr%)rZ load_handler)rBhandler)r6r%r& -sz4HttpRequest._initialize_handlers..)r ZFILE_UPLOAD_HANDLERS_upload_handlers)r6r%)r6r&_initialize_handlers,s z HttpRequest._initialize_handlerscCs|js||jS)N)rr)r6r%r%r&upload_handlers0szHttpRequest.upload_handlerscCst|drtd||_dS)N_fileszGYou cannot set the upload handlers after the upload has been processed.)rAttributeErrorr)r6rr%r%r&r7s cCs*t|jdd|_t|||j|j}|S)z9Return a tuple of (POST QueryDict, FILES MultiValueDict).zEYou cannot alter upload handlers after the upload has been processed.)warning)rrrrMparse)r6r0Z post_dataparserr%r%r&parse_file_upload=s  zHttpRequest.parse_file_uploadc Cst|ds|jrtdtjdk rDt|jdp2dtjkrDtdy| |_ Wn.t k r}zt |j |Wdd}~XYnXt|j |_|j S)N_bodyz?You cannot access body after reading from request's data streamCONTENT_LENGTHrz;Request body exceeded settings.DATA_UPLOAD_MAX_MEMORY_SIZE.)r _read_startedr'r ZDATA_UPLOAD_MAX_MEMORY_SIZEintr0r?r readrOSErrorr!argsr_stream)r6er%r%r&bodyFs   zHttpRequest.bodycCst|_t|_dS)N)r,rrr)r6r%r%r&_mark_post_parse_errorXsz"HttpRequest._mark_post_parse_errorc Cs|jdkr&t|jdt|_|_dS|jrBt|dsB|dS|j dkrt|drbt |j }n|}y| |j |\|_|_Wqttfk r|YqXn@|j dkrt|j|jdt|_|_nt|jdt|_|_dS)zFPopulate self._post and self._files if the content-type is a form typer.)rMNrzmultipart/form-dataz!application/x-www-form-urlencoded)r3r,rrrrrrrr4rrrr0rrr)r6datar%r%r&_load_post_and_files\s$      z HttpRequest._load_post_and_filescCs:t|dr6x*tdd|jDD] }|q&WdS)Nrcss|]}|dVqdS)rNr%)rBlist_r%r%r&rD{sz$HttpRequest.close..)rr from_iterablerlistsclose)r6fr%r%r&rys  zHttpRequest.closec OsHd|_y|jj||Stk rB}zt|j|Wdd}~XYnXdS)NT)rrrrr!r)r6rkwargsrr%r%r&rs zHttpRequest.readc OsHd|_y|jj||Stk rB}zt|j|Wdd}~XYnXdS)NT)rrreadlinerr!r)r6rrrr%r%r&rs zHttpRequest.readlinecCs t|jdS)N)iterr)r6r%r%r&__iter__szHttpRequest.__iter__cCst|S)N)list)r6r%r%r& readlinesszHttpRequest.readlines)F)F)N)*r"r#r$r(rrr7r:rr<r@rFrOrUr]rRr8rar_rirmrprwrtrypropertyrnrSrrMsetterrrrrrrrrrrrr%r%r%r&r):sJ       $       r)cs@eZdZdZddhZfddZfddZedd ZZ S) r;ZHTTP_rGrcs@i}x*|D]\}}||}|r|||<qWt|dS)N)itemsparse_header_namesuperr7)r6environr<r|rlname)r9r%r&r7s   zHttpHeaders.__init__cst|ddS)z:Allow header lookup using underscores in place of hyphens._-)r __getitem__replace)r6rj)r9r%r&rszHttpHeaders.__getitem__cCs>||jr |t|jd}n||jkr.dS|ddS)Nrr)rs HTTP_PREFIXlenUNPREFIXED_HEADERSrtitle)clsr|r%r%r&rs   zHttpHeaders.parse_header_name) r"r#r$rrr7r classmethodr __classcell__r%r%)r9r&r;s   r;cseZdZdZdZdZd)fdd Zed*dd Ze d d Z e j d d Z d dZ fddZ fddZddZddZfddZd+fdd ZfddZfddZfdd Zfd!d"Zd,fd#d$ Zd%d&Zd-d'd(ZZS).r,a A specialized MultiValueDict which represents a query string. A QueryDict can be used to represent GET or POST data. It subclasses MultiValueDict since keys in such data can be repeated, for instance in the data from a form with a