shell bypass 403
�
?��cc @ s� d d l m Z d d l m Z m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
m Z d f d � � YZ e � e _ y d d l
m Z Wn! e k
r� d d l m Z n Xd f d � � YZ d
� Z d e d � f d
e d � f d e d � f d e d � f d e d � f d i f d i f d i f d i d g d 6f d e d � f d e d � f d e d � f d i d g d 6f d i d g d 6f d i d g d 6f d i d g d 6f d! e d � f d" e d# � f d$ i d% g d 6d& g d 6f d' i d% d( g d 6f d) i d* g d+ 6d, g d- 6d. g d/ 6f d0 i d* g d+ 6d, g d- 6d. g d/ 6f d1 i d* g d+ 6d, g d- 6d. g d/ 6f d2 i d3 g d4 6d5 g d6 6d7 g d8 6d9 g d: 6d; g d< 6d= g d> 6d? g d@ 6dA g dB 6f dC i dD g dE 6dF g dG 6dH g dI 6d* g dJ 6dK g dL 6dM g dN 6f g Z dO � Z dP � Z dQ � Z dR e j f dS � � YZ dT � Z e dU k r�e � n d S(V i����( t BytesIO( t run_unittestt check_warningsN( t
namedtuplet HackedSysModulec B s e Z g Z e j Z RS( ( t __name__t
__module__t argvt syst stdin( ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyR s ( t StringIOt ComparableExceptionc B s, e Z d � Z d � Z d � Z d � Z RS( c C s
| | _ d S( N( t err( t selfR ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt __init__ s c C s
t | j � S( N( t strR ( R
( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt __str__ s c C sQ t | t � s d St | j j | j � } | d k r; | St | j j | j � S( Ni����i ( t
isinstancet Exceptiont cmpR t __class__t args( R
t anExct x( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt __cmp__ s c C s t | j | � S( N( t getattrR ( R
t attr( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt __getattr__' s ( R R R R R R ( ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyR s c C s� i } | d k r/ d } d | d <| | d <nR | d k rt t | � } d | d <d | d <t t | � � | d <n
t d | � y t j | | d d
�SWn t k
r� } t | � SXd S( Nt GETt REQUEST_METHODt QUERY_STRINGt POSTs! application/x-www-form-urlencodedt CONTENT_TYPEt CONTENT_LENGTHs unknown method: %st strict_parsingi ( t NoneR
R t lent
ValueErrort cgit parset
StandardErrorR ( t buft methodt envt fpR ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt do_test* s
t s bad query field: ''t &s &&t ;s ;&;t =s =&=s =;=s =at as &=as =a&s =&as bad query field: 'a's b=at bs b+=as b s a=b=as a=+b=as b=as &b=as b&=as bad query field: 'b's a=a+b&b=b+cs a bs b cs a=a+b&a=b+as b as x=1&y=2.0&z=2-3.%2b0t 1R s 2.0t ys 2-3.+0t zs x=1;y=2.0&z=2-3.%2b0s x=1;y=2.0;z=2-3.%2b0s� Hbc5161168c542333633315dee1182227:key_store_seqid=400006&cuyer=r&view=bustomer&order_id=0bb2e248638833d48cb7fed300000f1b&expire=964546263&lobale=en-US&kid=130003.300038&ss=envt 400006s1 Hbc5161168c542333633315dee1182227:key_store_seqidt rt cuyert 964546263t expires
130003.300038t kids en-USt lobalet 0bb2e248638833d48cb7fed300000f1bt order_idR+ t sst bustomert viewsQ group_id=5470&set=custom&_assigned_to=31392&_status=1&_category=100&SUBMIT=Browset Browset SUBMITt 31392t _assigned_tot 100t _categoryt _statust 5470t group_idt customt setc C s t d � | � S( Nc S s | d S( Ni ( ( R ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt <lambda>l R. ( t map( t list( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt
first_eltsk s c C s t d � | � S( Nc S s | d | d d f S( Ni i ( ( t p( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyRN o R. ( RO ( RP ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt first_second_eltsn s c C s� t | � } | j d � t j d | d | � } i } xK t | � j � D]7 \ } } t | t � rt | j | � pz | j | | <qJ W| S( Ni R, t environ(
R
t seekR& t FieldStoraget dictt itemsR RP t getlistt value( t dataRT t
fake_stdint formt resultt kt v( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt
gen_resultq s
/t CgiTestsc B s� e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z i d d 6d
d g d 6d
d 6d d 6Z
d � Z d � Z d � Z
d � Z d � Z d � Z d � Z RS( c C sR | j d t j d � � | j d t j d � � | j d t j d t � � d S( Ns test & strings
test & strings <test string>s
<test string>s "test string"s
"test string"( t assertEqualR& t escapet True( R
( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_escape~ s c C s4 x-t D]%\ } } t | d � } | j | | d t | � � t | d � } | j | | d t | � � i | d 6} t j | � } t j | � } t j d | � } t | t � r | j t
| � t
| � � | j | j � | j � � | j | j
� | j
� � | j | j � | j � � | j | j d d � d � | j t
| � t
| � � | j | j � | j � � | j | j d d � d � x�| j � D]�} | | } | j | j | � � | j | | | | � | j | j | d � | | � | j | j | � � t
| � d k r3d }
n d }
y | | } Wn7 t k
r�| j |
� | j | j | � | � n? X| j |
� | j | | d � | j | j | � | d � | j | j | � | � |
r�| j | j
� t | j
� � � | j | j � t | j � � � q�q�Wq q Wd S(
NR s Error parsing %sR R RT s nonexistent fieldt defaulti i ( t parse_strict_test_casesR- Rc t reprR& t FormContentDictt SvFormContentDictRV R RW R$ t assertItemsEqualt keyst valuesRX t gett getvaluet
assertTruet has_keyt
IndexErrort assertFalseRY RQ RS ( R
t origt expectt dR+ t fcdt sdt fst keyt
expect_valt single_valuet val( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_strict� sR
c C s� i d d 6} i d d 6d d 6d d 6d d
6} t j | � } x. | j � D] \ } } | j | | | � qK Wx. | j � D] \ } } | j | | | � q| W| j | j � | j � � d S( Ns x=1&y=2.0&z=2-3.%2b0&1=1abcR i R g @R5 s 2-3.+0R6 t 1abcR4 ( R& t InterpFormContentDictRX Rc Rl Rn ( R
R+ Rv Rw R_ R` ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_weird_formcontentdict� s
"c C s� t j d � t � t _ t j d d � t j d d � | j t j j � d � t j j d � r� d t _ d t _ t j d d � t j d � n d S( Nt Testings %ss Testing initlog 1s
Testing log 2s Testing initlog 1
Testing log 2
s /dev/nulls
Testing log 3s
Testing log 4( R& t logR
t logfpt initlogRc Rp t ost patht existsR# t logfile( R
( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_log� s
c C s� d d d � � Y} | t j � � } | j d d d � | j d � i d d 6} t j d | d
| � } | j | j d � d S(
Nt TestReadlineFilec B s& e Z d � Z d d � Z d � Z RS( c S s | | _ d | _ d S( Ni ( t filet numcalls( R
R� ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyR � s c S s6 | j d 7_ | r% | j j | � S| j j � Sd S( Ni ( R� R� t readline( R
t size( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyR� � s c S sB | j d } t | | � } t | t � s> t | | | � n | S( NR� ( t __dict__R R t intt setattr( R
t nameR� R2 ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyR � s
N( R R R R# R� R ( ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyR� � s R i i i t PUTR R, RT i ( ( t tempfilet
TemporaryFilet writeRU R& RV t
assertGreaterR� ( R
R� t fR+ Rz ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_fieldstorage_readline� s
c C s� t j � } | j | � | j t t | � � | j t | � t | j � � � | j j t
d d � d � � | j | � d S( Nt MockFieldStorageR� t
fieldvalue( R& RV Rt t assertRaisest TypeErrort boolRc RP Rm t appendR Rq ( R
Rz ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_fieldstorage_invalid� s
" c C s) i d d 6d d 6d d 6} d } t j d t | � d | � } | j t | j � d
� i d d 6d d
6d d 6i d d 6d d
6d d 6i d d 6d d
6d d 6i d d 6d d
6d d 6g } xd t t | j � � D]M } xD | | j � D]2 \ } } t | j | | � } | j | | � q� Wq� Wd S( NR R sT multipart/form-data; boundary=---------------------------721837373350705526688164684R t 558R! s -----------------------------721837373350705526688164684
Content-Disposition: form-data; name="id"
1234
-----------------------------721837373350705526688164684
Content-Disposition: form-data; name="title"
-----------------------------721837373350705526688164684
Content-Disposition: form-data; name="file"; filename="test.txt"
Content-Type: text/plain
Testing 123.
-----------------------------721837373350705526688164684
Content-Disposition: form-data; name="submit"
Add
-----------------------------721837373350705526688164684--
R, RT i t idR� t filenamet 1234RZ t titleR. R� s test.txts
Testing 123.
t submits Add (
R& RV R
Rc R$ RP R# t rangeRX R ( R
R+ t postdataRz Rv R R_ t expt got( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_fieldstorage_multipart� s c sl d } d � _ � f d � } | d | d � | d | d d � | d | d d d | d � d S( Ni i c sa d j d d � | } i t t | � � d 6d d 6d d 6} � j t | | � i | d 6� d S(
Nsq
---123
Content-Disposition: form-data; name="upload"; filename="fake.txt"
Content-Type: text/plain
%s
---123--
s
s
R! s" multipart/form-data; boundary=-123R R R t upload( t replaceR R$ Rc Ra ( t contentR[ RT ( R
( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt check s
R s
R5 i ( R# t maxDiff( R
t maxlineR� ( ( R
s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt# test_fieldstorage_multipart_maxline s t value1t key1t value2xt value2yt key2t value3t key3t value4t key4c C sZ d } i t t | � � d 6d d 6d d 6d d 6} t | | � } | j | j | � d S( Ns$ key2=value2x&key3=value3&key4=value4R! s! application/x-www-form-urlencodedR s key1=value1&key2=value2yR R R ( R R$ Ra Rc t
_qs_result( R
R[ RT R` ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt testQSAndUrlEncode5 s
c C s d j d g d � } i t t | � � d 6d d 6d d 6} | j t � �- t j d t | j � � d
| d d � Wd QXd
} i t t | � � d 6d d 6d d 6d d 6} | j t � �- t j d t | j � � d
| d d � Wd QXt j d t | j � � d
| d d � d S( NR/ s a=ai R! s! application/x-www-form-urlencodedR R R R, RT t max_num_fieldsi
s� ---123
Content-Disposition: form-data; name="a"
3
---123
Content-Type: application/x-www-form-urlencoded
a=4
---123
Content-Type: application/x-www-form-urlencoded
a=5
---123--
s" multipart/form-data; boundary=-123s a=1&a=2R i i ( t joinR R$ R� R% R& RV R t encode( R
R[ RT ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_max_num_fields@ s2
c C sZ d } i t t | � � d 6d d 6d d 6d d 6} t | | � } | j | j | � d S( Ns�
---123
Content-Disposition: form-data; name="key2"
value2y
---123
Content-Disposition: form-data; name="key3"
value3
---123
Content-Disposition: form-data; name="key4"
value4
---123--
R! s" multipart/form-data; boundary=-123R s key1=value1&key2=value2xR R R ( R R$ Ra Rc R� ( R
R[ RT R` ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt testQSAndFormDatav s
c C sz d } i t t | � � d 6d d 6d d 6d d 6} | j j � } | j i d d
6� t | | � } | j | | � d S( NsF
---123
Content-Disposition: form-data; name="key2"
value2y
---123
Content-Disposition: form-data; name="key3"
value3
---123
Content-Disposition: form-data; name="key4"
value4
---123
Content-Disposition: form-data; name="upload"; filename="fake.txt"
Content-Type: text/plain
this is the content of the fake file
---123--
R! s" multipart/form-data; boundary=-123R s key1=value1&key2=value2xR R R s% this is the content of the fake file
R� ( R R$ R� t copyt updateRa Rc ( R
R[ RT R^ R` ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt testQSAndFormDataFile� s
c C sT t d t f � �< | j i d g d 6d g d 6d g d 6t j d � � Wd QXd S( Ns9 cgi.parse_qs is deprecated, use urlparse.parse_qs insteadt A1R2 t B3t Bt B2R3 s a=A1&b=B2&B=B3( R t PendingDeprecationWarningRc R& t parse_qs( R
( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_deprecated_parse_qs� s
'c C s? t d t f � �' | j d d
d g t j d � � Wd QXd S( Ns; cgi.parse_qsl is deprecated, use urlparse.parse_qsl insteadR2 R� R3 R� R� R� s a=A1&b=B2&B=B3( R2 R� ( R3 R� ( R� R� ( R R� Rc R& t parse_qsl( R
( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_deprecated_parse_qsl� s
c C sa | j t j d � d i f � | j t j d � d i f � | j t j d � d i d d 6f � | j t j d � d i d d 6f � | j t j d � d i d d 6d d
6f � | j t j d � d i d
d 6f � | j t j d � d i d d 6f � | j t j d � d i d d 6d d 6f � | j t j d � d i d d 6d d 6f � d S( Ns
text/plains text/vnd.just.made.this.up ; s text/vnd.just.made.this.ups text/plain;charset=us-asciis us-asciit charsets text/plain ; charset="us-ascii"s, text/plain ; charset="us-ascii"; another=optt optt anothers attachment; filename="silly.txt"t
attachments silly.txtR� s# attachment; filename="strange;name"s strange;names- attachment; filename="strange;name";size=123;t 123R� s- form-data; name="files"; filename="fo\"o;bar"s form-datat filesR� s fo"o;bar( Rc R& t parse_header( R
( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_parse_header� s6
( R R Rf R R� R� R� R� R� R� R� R� R� R� R� R� R� R� ( ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyRb | s( 1
" "
6 # c C s t t � d S( N( R Rb ( ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt test_main� s t __main__( t ioR t test.test_supportR R R& R� R R� t unittestt collectionsR R t cStringIOR
t ImportErrorR R- R% Rh RQ RS Ra t TestCaseRb R� R ( ( ( s4 /usr/local/python-2.7/lib/python2.7/test/test_cgi.pyt <module> s|
'''
� c