shell bypass 403
�
� f` � �l � d Z ddlZg d�Z G d� d� � Zd� Zd� Zdd �Zd
� Zd � Zh d �j Z
d
� Z dS )z$Miscellaneous WSGI-related Utilities� N)� FileWrapper� guess_scheme�application_uri� request_uri�shift_path_info�setup_testing_defaultsc �& � e Zd ZdZdd�Zd� Zd� ZdS )r z1Wrapper to convert file-like objects to iterables� c �^ � || _ || _ t |d� � r|j | _ d S d S )N�close)�filelike�blksize�hasattrr )�selfr
r s �%/usr/lib64/python3.11/wsgiref/util.py�__init__zFileWrapper.__init__ s9 � � ��
� �� � �8�G� $� $� (�!� �D�J�J�J� (� (� c � � | S �N� )r s r �__iter__zFileWrapper.__iter__ s � �� r c �V � | j � | j � � }|r|S t �r )r
�readr �
StopIteration)r �datas r �__next__zFileWrapper.__next__ s, � ��}�!�!�$�,�/�/�� � ��K��r N)r
)�__name__�
__module__� __qualname__�__doc__r r r r r r r r sL � � � � � �;�;�(� (� (� (� � � � � � � � r r c �8 � | � d� � dv rdS dS )zMReturn a guess for whether 'wsgi.url_scheme' should be 'http' or 'https'
�HTTPS)�yes�on�1�https�http)�get)�environs r r r s& � � �{�{�7��� /�/�/��w��vr c �L � | d dz }ddl m} | � d� � r || d z
}nL|| d z
}| d dk r| d d k r|d
| d z z
}n| d d k r|d
| d z z
}| || � d � � pd
d�� � z
}|S )z@Return the application's base URI (no PATH_INFO or QUERY_STRING)�wsgi.url_schemez://r ��quote� HTTP_HOST� SERVER_NAMEr& � SERVER_PORT�443�:�80� SCRIPT_NAME�/�latin1)�encoding)� urllib.parser- r( )r) �urlr- s r r r % s� � �
�#�
$�U�
*�C�"�"�"�"�"�"��{�{�;� � �
4� �w�{�#�#��� �w�}�%�%�� �$� %�� 0� 0��}�%��.�.��s�W�]� 3�3�3����}�%��-�-��s�W�]� 3�3�3���5�5����]�+�+�2�s�X� F� F� F�F�C� �Jr Tc � � t | � � }ddlm} || � dd� � dd�� � }| � d� � s||d d
� z
}n||z
}|r#| � d � � r|d | d z z
}|S )
zBReturn the full request URI, optionally including the query stringr r, � PATH_INFO� z/;=,r6 )�safer7 r4 � N� QUERY_STRING�?)r r8 r- r( )r) �
include_queryr9 r- � path_infos r r r 9 s� � �
�'�
"�
"�C�"�"�"�"�"�"���g�k�k�+�b�1�1���R�R�R�I� �;�;�}� %� %� � �y����}� ��� �y���� -����^�4�4� -� �s�W�^�,�,�,�� �Jr c �� � | � dd� � }|sdS |� d� � }d� |dd� D � � |dd�< |d }|d= | � dd� � }t j |dz |z � � }|� d� � r
|dd� }|s|� d� � s|dz
}|| d< d� |� � | d< |d k rd}|S )
aZ Shift a name from PATH_INFO to SCRIPT_NAME, returning it
If there are no remaining path segments in PATH_INFO, return None.
Note: 'environ' is modified in-place; use a copy if you need to keep
the original PATH_INFO or SCRIPT_NAME.
Note: when PATH_INFO is just a '/', this returns '' and appends a trailing
'/' to SCRIPT_NAME, even though empty path segments are normally ignored,
and SCRIPT_NAME doesn't normally end in a '/'. This is intentional
behavior, to ensure that an application can tell the difference between
'/x' and '/x/' when traversing to objects.
r; r< Nr5 c �" � g | ] }|�|d k �
|��
S )�.r )�.0�ps r �
<listcomp>z#shift_path_info.<locals>.<listcomp>X s" � �F�F�F�a�q�F�Q�#�X�X��X�X�Xr r> ���r4 rE )r( �split� posixpath�normpath�endswith�join)r) rB �
path_parts�name� script_names r r r F s � � � � �K��+�+�I� � ��t�� � ��%�%�J�F�F�:�a��d�#3�F�F�F�J�q��t�� �a�=�D��1�
��+�+�m�B�/�/�K��$�[��_�T�%9�:�:�K����C� � � '�!�#�2�#�&� � � � �,�,�S�1�1� ��s�� � (�G�M�� �X�X�j� 1� 1�G�K�� �S�y�y��� �Kr c �8 � | � dd� � | � dd� � | � d| d � � | � dd� � d| vr0d | vr,| � dd
� � | � d d � � | � d d
� � | � dd� � | � dd� � | � dd� � ddlm}m} | � d |� � � � | � d |� � � � | � dt | � � � � | d dk r| � dd� � dS | d dk r| � dd� � dS dS ) a: Update 'environ' with trivial defaults for testing purposes
This adds various parameters required for WSGI, including HTTP_HOST,
SERVER_NAME, SERVER_PORT, REQUEST_METHOD, SCRIPT_NAME, PATH_INFO,
and all of the wsgi.* variables. It only supplies default values,
and does not replace any existing settings for these variables.
This routine is intended to make it easier for unit tests of WSGI
servers and applications to set up dummy environments. It should *not*
be used by actual WSGI servers or applications, since the data is fake!
r/ z 127.0.0.1�SERVER_PROTOCOLzHTTP/1.0r. �REQUEST_METHOD�GETr4 r; r< r5 z wsgi.version)r> r z
wsgi.run_oncer zwsgi.multithreadzwsgi.multiprocess)�StringIO�BytesIOz
wsgi.inputz wsgi.errorsr+ r' r0 r3 r& r1 N)�
setdefault�iorV rW r )r) rV rW s r r r o s� � � ���}�[�1�1�1� ���(��4�4�4� ���{�7�=�#9�:�:�:� ���'��.�.�.��G�#�#� �7�(B�(B����=��,�,�,����;�s�+�+�+� ���~�u�-�-�-� �����*�*�*� ���)�1�-�-�-� ���*�A�.�.�.�$�$�$�$�$�$�$�$� ���|�W�W�Y�Y�/�/�/� ���}�h�h�j�j�1�1�1� ���(� �g�)>�)>�?�?�?�� �!�6�)�)����=�$�/�/�/�/�/� �"� #�W� ,� ,����=�%�0�0�0�0�0�
-� ,r > �
keep-alive�transfer-encoding�proxy-authenticate�proxy-authorization�te�upgrade�trailers�
connectionc �D � t | � � � � � S )z?Return true if 'header_name' is an HTTP/1.1 "Hop-by-Hop" header)�_hoppish�lower)� header_names r �
is_hop_by_hoprf � s � � �K�%�%�'�'� (� (�(r )T) r rK �__all__r r r r r r � __contains__rc rf r r r �<module>ri s� �� *� *� � � � � � � �� � � � � � � � �$� � �� � �( � � � �'� '� '�R$1� $1� $1�P � � � � � )� )� )� )� )r