shell bypass 403
3
\ � @ sx d Z ddlZddddddgZG d d� d�Zd
d� Zd d� Zdd
d�Zdd� Zdd� Zddddddddd�j Z
dd� Z dS )z$Miscellaneous WSGI-related Utilities� N� FileWrapper� guess_scheme�application_uri� request_uri�shift_path_info�setup_testing_defaultsc @ s2 e Zd ZdZd dd�Zdd� Zdd� Zd d
� Zd S )
r z1Wrapper to convert file-like objects to iterables� c C s" || _ || _t|d�r |j| _d S )N�close)�filelike�blksize�hasattrr )�selfr
r � r �$/usr/lib64/python3.6/wsgiref/util.py�__init__ s
zFileWrapper.__init__c C s | j j| j�}|r|S t�d S )N)r
�readr �
IndexError)r
�key�datar r r � __getitem__ s zFileWrapper.__getitem__c C s | S )Nr )r
r r r �__iter__ s zFileWrapper.__iter__c C s | j j| j�}|r|S t�d S )N)r
r r �
StopIteration)r
r r r r �__next__ s zFileWrapper.__next__N)r )�__name__�
__module__� __qualname__�__doc__r r r r r r r r r s
c C s | j d�dkrdS dS dS ) zMReturn a guess for whether 'wsgi.url_scheme' should be 'http' or 'https'
ZHTTPS�yes�on�1�https�httpN)r r r )�get)�environr r r r # s c C s� | d d }ddl m} | jd�r0|| d 7 }nR|| d 7 }| d dkrf| d d kr�|d
| d 7 }n | d d kr�|d
| d 7 }||| jd �p�d
dd�7 }|S )z@Return the application's base URI (no PATH_INFO or QUERY_STRING)zwsgi.url_schemez://r )�quote� HTTP_HOST� SERVER_NAMEr � SERVER_PORT�443�:�80� SCRIPT_NAME�/�latin1)�encoding)� urllib.parser$ r" )r# �urlr$ r r r r + s
Tc C sp t | �}ddlm} || jdd�ddd�}| jd�sF||d d
� 7 }n||7 }|rl| jd �rl|d | d 7 }|S )
zBReturn the full request URI, optionally including the query stringr )r$ � PATH_INFO� z/;=,r- )Zsafer. r+ � NZ QUERY_STRING�?)r r/ r$ r" )r# Z
include_queryr0 r$ � path_infor r r r ? s
c C s� | j dd�}|sdS |jd�}dd� |dd
� D �|dd �< |d }|d= | j dd�}tj|d | �}|jd�r~|dd � }| r�|jd� r�|d7 }|| d< dj|�| d< |d kr�d}|S )
aZ Shift a name from PATH_INFO to SCRIPT_NAME, returning it
If there are no remaining path segments in PATH_INFO, return None.
Note: 'environ' is modified in-place; use a copy if you need to keep
the original PATH_INFO or SCRIPT_NAME.
Note: when PATH_INFO is just a '/', this returns '' and appends a trailing
'/' to SCRIPT_NAME, even though empty path segments are normally ignored,
and SCRIPT_NAME doesn't normally end in a '/'. This is intentional
behavior, to ensure that an application can tell the difference between
'/x' and '/x/' when traversing to objects.
r1 r2 Nr, c S s g | ]}|r|d kr|�qS )�.r )�.0�pr r r �
<listcomp>^ s z#shift_path_info.<locals>.<listcomp>r3 r+ r6 ���r: r: )r" �split� posixpath�normpath�endswith�join)r# r5 �
path_parts�nameZ script_namer r r r L s$
c C s� | j dd� | j dd� | j d| d � | j dd� d| kr\d | kr\| j dd
� | j d d � | j d d � | j dd� | j dd� | j dd� ddlm}m} | j d|� � | j d|� � | j dt| �� | d dkr�| j dd� n| d dkr�| j dd� dS ) a: Update 'environ' with trivial defaults for testing purposes
This adds various parameters required for WSGI, including HTTP_HOST,
SERVER_NAME, SERVER_PORT, REQUEST_METHOD, SCRIPT_NAME, PATH_INFO,
and all of the wsgi.* variables. It only supplies default values,
and does not replace any existing settings for these variables.
This routine is intended to make it easier for unit tests of WSGI
servers and applications to set up dummy environments. It should *not*
be used by actual WSGI servers or applications, since the data is fake!
r& z 127.0.0.1ZSERVER_PROTOCOLzHTTP/1.0r% ZREQUEST_METHODZGETr+ r1 r2 r, z wsgi.versionr3 r z
wsgi.run_oncezwsgi.multithreadzwsgi.multiprocess)�StringIO�BytesIOz
wsgi.inputz wsgi.errorszwsgi.url_schemer! r' r* r r( N)r3 r )�
setdefault�iorB rC r )r# rB rC r r r r u s&
r3 )Z
connectionz
keep-alivezproxy-authenticatezproxy-authorizationZteZtrailersztransfer-encodingZupgradec C s t | j� �S )z?Return true if 'header_name' is an HTTP/1.1 "Hop-by-Hop" header)�_hoppish�lower)Z header_namer r r �
is_hop_by_hop� s rH )T) r r< �__all__r r r r r r � __contains__rF rH r r r r �<module> s
))