U Y$d)a@szddlZddlZddlmZddlmZddlmZmZm Z m Z m Z ddl m Z ddlmZddlmZmZmZmZddlmZdd lmZmZmZdd lmZmZmZdd lm Z m!Z!dd l"m#Z#dd l$m%Z%m&Z&ddl'm(Z(ddl)m*Z*e+Z,e(dZ-Gddde.Z/Gddde0Z1GdddZ2GdddeZ3GdddeZ4GdddZ5ddZ6d d!Z7d"d#Z8d$d%Z9dS)&N)BytesIO)chain) parse_qslquote urlencodeurljoinurlsplit)settings)signing)DisallowedHostImproperlyConfiguredRequestDataTooBigTooManyFieldsSent) uploadhandler)MultiPartParserMultiPartParserErrorTooManyFilesSent)CaseInsensitiveMapping ImmutableListMultiValueDict)escape_uri_path iri_to_uri)cached_property)is_same_domainparse_header_parameters)_lazy_re_compile) parse_headerz4^([a-z0-9.-]+|\[[a-f0-9]*:[a-f0-9\.:]+\])(:[0-9]+)?$c@s eZdZdS)UnreadablePostErrorN)__name__ __module__ __qualname__r"r"7/tmp/pip-unpacked-wheel-1oeddy95/django/http/request.pyr'src@seZdZdZdS)RawPostDataExceptionz You cannot access raw_post_data from a request that has multipart/* POST data if it has been accessed via POST, FILES, etc.. N)rr r!__doc__r"r"r"r#r$+sr$c@sNeZdZdZdZgZddZddZeddZ ed d Z d d Z d dZ ddZ ddZddZdCddZdDddZddZeddfddZdEdd Zed!d"Zd#d$Zed%d&Zd'd(Zed)d*Zejd+d*Zd,d-Zed.d/Zejd0d/Zd1d2Zed3d4Z d5d6Z!d7d8Z"d9d:Z#d;d<Z$d=d>Z%d?d@Z&dAdBZ'dS)F HttpRequestzA basic HTTP request.NcCsTtdd|_tdd|_i|_i|_t|_d|_d|_d|_ d|_ d|_ d|_ dS)NT)mutable) QueryDictGETPOSTCOOKIESMETArZFILESpath path_infomethodZresolver_match content_typecontent_paramsselfr"r"r#__init__<s  zHttpRequest.__init__cCs6|jdks|sd|jjSd|jj|j|fS)Nz<%s>z <%s: %s %r>)r0 get_full_path __class__rr3r"r"r#__repr__Ns zHttpRequest.__repr__cCs t|jSN) HttpHeadersr-r3r"r"r#headersWszHttpRequest.headerscCst|jddS)z%Return a list of MediaType instances.Acceptz*/*)parse_accept_headerr;getr3r"r"r#accepted_types[szHttpRequest.accepted_typescstfdd|jDS)Nc3s|]}|VqdSr9)match).0Z accepted_type media_typer"r# asz&HttpRequest.accepts..)anyr?)r4rCr"rBr#accepts`s zHttpRequest.acceptscCs\t|dd\|_|_d|jkrXzt|jdWntk rJYnX|jd|_dS)z/Set content_type, content_params, and encoding. CONTENT_TYPEr(charsetN)rr>r1r2codecslookup LookupErrorencoding)r4metar"r"r#_set_content_type_paramses  z$HttpRequest._set_content_type_paramscCshtjrd|jkr|jd}nHd|jkr2|jd}n2|jd}|}||rRdndkrdd||f}|S)z Return the HTTP host using the environment or request headers. Skip allowed hosts protection, so may return an insecure host. ZHTTP_X_FORWARDED_HOSTZ HTTP_HOSTZ SERVER_NAME44380z%s:%s)r ZUSE_X_FORWARDED_HOSTr-get_port is_secure)r4hostZ server_portr"r"r# _get_raw_hostrs     zHttpRequest._get_raw_hostcCsn|}tj}tjr"|s"dddg}t|\}}|r@t||r@|Sd|}|rZ|d|7}n|d7}t|dS)z>Return the HTTP host using the environment or request headers.z .localhostz 127.0.0.1z[::1]zInvalid HTTP_HOST header: %r.z) You may need to add %r to ALLOWED_HOSTS.zB The domain name provided is not valid according to RFC 1034/1035.N)rTr Z ALLOWED_HOSTSDEBUGsplit_domain_port validate_hostr )r4rS allowed_hostsdomainportmsgr"r"r#get_hosts   zHttpRequest.get_hostcCs.tjrd|jkr|jd}n |jd}t|S)z3Return the port number for the request as a string.ZHTTP_X_FORWARDED_PORTZ SERVER_PORT)r ZUSE_X_FORWARDED_PORTr-str)r4rZr"r"r#rQs  zHttpRequest.get_portFcCs||j|Sr9)_get_full_pathr.r4force_append_slashr"r"r#r6szHttpRequest.get_full_pathcCs||j|Sr9)r^r/r_r"r"r#get_full_path_infoszHttpRequest.get_full_path_infoc CsHdt||r|dsdnd|jddr@dt|jddndfS)N%s%s%s/r( QUERY_STRING?)rendswithr-r>r)r4r.r`r"r"r#r^s zHttpRequest._get_full_pathr(cCsz|j|}Wn&tk r4|tk r.|YSYnXztj||dj||d}Wn(tjk r||tk rv|YSYnX|S)z Attempt to return a signed cookie. If the signature fails or the cookie has expired, raise an exception, unless the `default` argument is provided, in which case return that value. )salt)max_age)r,KeyError RAISE_ERRORr Zget_cookie_signerZunsignZ BadSignature)r4keydefaultrgrhZ cookie_valuevaluer"r"r#get_signed_cookies  zHttpRequest.get_signed_cookiecCs|dkrd|}nt|}t|}|jr2|js|jdr|js|jsd|jkrd|jkr|drt|dd}|j|}nt|j|j|}t |S)a Build an absolute URI from the location and the variables available in this request. If no ``location`` is specified, build the absolute URI using request.get_full_path(). If the location is absolute, convert it to an RFC 3987 compliant URI and return it. If location is relative or is scheme-relative (i.e., ``//example.com/``), urljoin() it to a base URL constructed from the request variables. Nz//%srcz/./z/../z//) r6r]rschemenetlocr. startswith_current_scheme_hostrr)r4locationbitsr"r"r#build_absolute_uris(      zHttpRequest.build_absolute_uricCsd|j|S)Nz{}://{})formatrpr\r3r"r"r#rssz HttpRequest._current_scheme_hostcCsdS)zf Hook for subclasses like WSGIRequest to implement. Return 'http' by default. httpr"r3r"r"r# _get_schemeszHttpRequest._get_schemecCsrtjrjztj\}}Wntk r0tdYnX|j|}|dk rj|dd^}}||krfdSdS|S)NzJThe SECURE_PROXY_SSL_HEADER setting must be a tuple containing two values.,rhttpsrx) r ZSECURE_PROXY_SSL_HEADER ValueErrorr r-r>splitstripry)r4headerZ secure_value header_value_r"r"r#rps  zHttpRequest.schemecCs |jdkS)Nr{)rpr3r"r"r#rRszHttpRequest.is_securecCs|jSr9 _encodingr3r"r"r#rLszHttpRequest.encodingcCs&||_t|dr|`t|dr"|`dS)z Set the encoding used for GET/POST accesses. If the GET or POST dictionary has already been created, remove and recreate it on the next access (so that it is decoded correctly). r*_postN)rhasattrr*r)r4valr"r"r#rLs   csfddtjD_dS)Ncsg|]}t|qSr")rZ load_handler)rAhandlerr3r"r# $sz4HttpRequest._initialize_handlers..)r ZFILE_UPLOAD_HANDLERS_upload_handlersr3r"r3r#_initialize_handlers#s z HttpRequest._initialize_handlerscCs|js||jSr9)rrr3r"r"r#upload_handlers)szHttpRequest.upload_handlerscCst|drtd||_dS)N_fileszGYou cannot set the upload handlers after the upload has been processed.)rAttributeErrorr)r4rr"r"r#r0s  cCs*t|jdd|_t|||j|j}|S)z9Return a tuple of (POST QueryDict, FILES MultiValueDict).zEYou cannot alter upload handlers after the upload has been processed.)warning)rrrrLparse)r4r-Z post_dataparserr"r"r#parse_file_upload9s zHttpRequest.parse_file_uploadc Cst|ds|jrtdtjdk rDt|jdp2dtjkrDtdz| |_ Wn.t k r}zt |j |W5d}~XYnXt|j |_|j S)N_bodyz?You cannot access body after reading from request's data streamCONTENT_LENGTHrz;Request body exceeded settings.DATA_UPLOAD_MAX_MEMORY_SIZE.)r _read_startedr$r ZDATA_UPLOAD_MAX_MEMORY_SIZEintr-r>r readrOSErrorrargsr_stream)r4er"r"r#bodyEs(  zHttpRequest.bodycCst|_t|_dSr9)r)rrrr3r"r"r#_mark_post_parse_error^sz"HttpRequest._mark_post_parse_errorc Cs|jdkr&t|jdt|_|_dS|jrBt|dsB|dS|j dkrt|drbt |j }n|}z| |j |\|_|_Wqttfk r|YqXn@|j dkrt|j|jdt|_|_nt|jdt|_|_dS)zFPopulate self._post and self._files if the content-type is a form typer+)rLNrzmultipart/form-dataz!application/x-www-form-urlencoded)r0r)rrrrrrrr1rrrr-rrr)r4datar"r"r#_load_post_and_filesbs0          z HttpRequest._load_post_and_filescCs6t|dr2tdd|jDD] }|q$dS)Nrcss|]}|dVqdS)rNr")rAlist_r"r"r#rDsz$HttpRequest.close..)rr from_iterablerlistsclose)r4fr"r"r#rs zHttpRequest.closec OsJd|_z|jj||WStk rD}zt|j|W5d}~XYnXdSNT)rrrrrrr4rkwargsrr"r"r#rs zHttpRequest.readc OsJd|_z|jj||WStk rD}zt|j|W5d}~XYnXdSr)rrreadlinerrrrr"r"r#rs zHttpRequest.readlinecCs t|jdS)N)iterrr3r"r"r#__iter__szHttpRequest.__iter__cCst|Sr9)listr3r"r"r# readlinesszHttpRequest.readlines)F)F)N)(rr r!r%rrr5r8rr;r?rFrNrTr\rQr6rar^rjrnrvrsrypropertyrprRrLsetterrrrrrrrrrrrr"r"r"r#r&5sX        )        & r&cs@eZdZdZddhZfddZfddZedd ZZ S) r:ZHTTP_rGrcs<i}|D]\}}||}|r |||<q t|dSr9)itemsparse_header_namesuperr5)r4environr;rrmnamer7r"r#r5s   zHttpHeaders.__init__cst|ddS)z:Allow header lookup using underscores in place of hyphens.r-)r __getitem__replacer4rkrr"r#rszHttpHeaders.__getitem__cCs>||jr |t|jd}n||jkr.dS|ddS)Nrr)rr HTTP_PREFIXlenUNPREFIXED_HEADERSrtitle)clsrr"r"r#rs   zHttpHeaders.parse_header_name) rr r!rrr5r classmethodr __classcell__r"r"rr#r:s   r:cseZdZdZdZdZd)fdd Zed*dd Ze d d Z e j d d Z d dZ fddZ fddZddZddZfddZd+fdd ZfddZfddZfdd Zfd!d"Zd,fd#d$ Zd%d&Zd-d'd(ZZS).r)a A specialized MultiValueDict which represents a query string. A QueryDict can be used to represent GET or POST data. It subclasses MultiValueDict since keys in such data can be repeated, for instance in the data from a form with a