3 j6bHc@sddlZddlZddlZddlZddlmZddlmZddlm Z m Z m Z m Z m Z ddlmZddlmZddlmZmZmZmZddlmZdd lmZmZdd lmZmZmZdd l m!Z!dd l"m#Z#m$Z$dd l%m&Z&ddl'm(Z(ddl)m*Z*ddl+m,Z,ddl-m.Z.e*e d s(e*e d r4ddl'm Z e/Z0e,dZ1Gddde2Z3Gddde4Z5GdddZ6GdddeZ7Gdd d eZ8Gd!d"d"Z9d#d$Z:d%d&Z;d'd(ZZ%d?d@Z&dAdBZ'dCdDZ(dEdFZ)dS)J HttpRequestzA basic HTTP request.NcCsTtdd|_tdd|_i|_i|_t|_d|_d|_d|_ d|_ d|_ d|_ dS)NT)mutable) QueryDictGETPOSTCOOKIESMETArZFILESpath path_infomethodZresolver_match content_typecontent_params)selfr$r$r%__init__?s  zHttpRequest.__init__cCs8|jdks|j r d|jjSd|jj|j|jfS)Nz<%s>z <%s: %s %r>)r2 get_full_path __class__r!)r5r$r$r%__repr__Qs zHttpRequest.__repr__cCs t|jS)N) HttpHeadersr/)r5r$r$r%headersVszHttpRequest.headerscCst|jjddS)z%Return a list of MediaType instances.Acceptz*/*)parse_accept_headerr;get)r5r$r$r%accepted_typesZszHttpRequest.accepted_typescstfdd|jDS)Nc3s|]}|jVqdS)N)match).0Z accepted_type) media_typer$r% asz&HttpRequest.accepts..)anyr?)r5rBr$)rBr%accepts_s zHttpRequest.acceptsc Cs^tj|jdd\|_|_d|jkrZytj|jdWntk rLYnX|jd|_dS)z/Set content_type, content_params, and encoding. CONTENT_TYPEr*charsetN) cgirr>r3r4codecslookup LookupErrorencoding)r5metar$r$r%_set_content_type_paramses z$HttpRequest._set_content_type_paramscCshtjrd|jkr|jd}nHd|jkr2|jd}n2|jd}|j}||jrRdndkrdd||f}|S)z Return the HTTP host using the environment or request headers. Skip allowed hosts protection, so may return an insecure host. ZHTTP_X_FORWARDED_HOSTZ HTTP_HOSTZ SERVER_NAME44380z%s:%s)r ZUSE_X_FORWARDED_HOSTr/get_port is_secure)r5hostZ server_portr$r$r% _get_raw_hostps      zHttpRequest._get_raw_hostcCsp|j}tj}tjr$| r$dddg}t|\}}|rBt||rB|Sd|}|r\|d|7}n|d7}t|dS)z>Return the HTTP host using the environment or request headers.z .localhostz 127.0.0.1z[::1]zInvalid HTTP_HOST header: %r.z) You may need to add %r to ALLOWED_HOSTS.zB The domain name provided is not valid according to RFC 1034/1035.N)rTr Z ALLOWED_HOSTSDEBUGsplit_domain_port validate_hostr )r5rS allowed_hostsdomainportmsgr$r$r%get_hosts   zHttpRequest.get_hostcCs.tjrd|jkr|jd}n |jd}t|S)z3Return the port number for the request as a string.ZHTTP_X_FORWARDED_PORTZ SERVER_PORT)r ZUSE_X_FORWARDED_PORTr/str)r5rZr$r$r%rQs  zHttpRequest.get_portFcCs|j|j|S)N)_get_full_pathr0)r5force_append_slashr$r$r%r7szHttpRequest.get_full_pathcCs|j|j|S)N)r^r1)r5r_r$r$r%get_full_path_infoszHttpRequest.get_full_path_infocCsJdt||r|jd rdnd|jjddrBdt|jjddndfS)Nz%s%s%s/r* QUERY_STRING?)rendswithr/r>r)r5r0r_r$r$r%r^szHttpRequest._get_full_pathr*cCszy|j|}Wn"tk r0|tk r*|SYnXytj||dj||d}Wn$tjk rt|tk rn|SYnX|S)z Attempt to return a signed cookie. If the signature fails or the cookie has expired, raise an exception, unless the `default` argument is provided, in which case return that value. )salt)max_age)r.KeyError RAISE_ERRORr Zget_cookie_signerZunsignZ BadSignature)r5keydefaultrerfZ cookie_valuevaluer$r$r%get_signed_cookieszHttpRequest.get_signed_cookiecCsdj|j|j|jdS)z Return an absolute URI from variables available in this request. Skip allowed hosts protection, so may return insecure URI. z{scheme}://{host}{path})schemerSr0)formatrmrTr7)r5r$r$r% get_raw_uriszHttpRequest.get_raw_uricCs|dkrd|j}nt|}t|}|jo0|js|jjdr|j r|j rd|jkrd|jkr|jdrx|dd}|j|}nt|j|j|}t |S)a Build an absolute URI from the location and the variables available in this request. If no ``location`` is specified, build the absolute URI using request.get_full_path(). If the location is absolute, convert it to an RFC 3987 compliant URI and return it. If location is relative or is scheme-relative (i.e., ``//example.com/``), urljoin() it to a base URL constructed from the request variables. Nz//%sraz/./z/../z//) r7r]rrmnetlocr0 startswith_current_scheme_hostrr)r5locationbitsr$r$r%build_absolute_uris     zHttpRequest.build_absolute_uricCsdj|j|jS)Nz{}://{})rnrmr\)r5r$r$r%rssz HttpRequest._current_scheme_hostcCsdS)zf Hook for subclasses like WSGIRequest to implement. Return 'http' by default. httpr$)r5r$r$r% _get_schemeszHttpRequest._get_schemec Cs^tjrVytj\}}Wntk r0tdYnX|jj|}|dk rV||krRdSdS|jS)NzJThe SECURE_PROXY_SSL_HEADER setting must be a tuple containing two values.httpsrw)r ZSECURE_PROXY_SSL_HEADER ValueErrorr r/r>rx)r5headerZ secure_value header_valuer$r$r%rms  zHttpRequest.schemecCs |jdkS)Nry)rm)r5r$r$r%rR szHttpRequest.is_securecCs tjdtdd|jjddkS)Nzfrequest.is_ajax() is deprecated. See Django 3.1 release notes for more details about this deprecation.rp) stacklevelZHTTP_X_REQUESTED_WITHZXMLHttpRequest)warningswarnrr/r>)r5r$r$r%is_ajaxs zHttpRequest.is_ajaxcCs|jS)N) _encoding)r5r$r$r%rLszHttpRequest.encodingcCs&||_t|dr|`t|dr"|`dS)z Set the encoding used for GET/POST accesses. If the GET or POST dictionary has already been created, remove and recreate it on the next access (so that it is decoded correctly). r,_postN)rhasattrr,r)r5valr$r$r%rLs   csfddtjD_dS)Ncsg|]}tj|qSr$)rZ load_handler)rAhandler)r5r$r% +sz4HttpRequest._initialize_handlers..)r ZFILE_UPLOAD_HANDLERS_upload_handlers)r5r$)r5r%_initialize_handlers*s z HttpRequest._initialize_handlerscCs|js|j|jS)N)rr)r5r$r$r%upload_handlers.szHttpRequest.upload_handlerscCst|drtd||_dS)N_fileszGYou cannot set the upload handlers after the upload has been processed.)rAttributeErrorr)r5rr$r$r%r5s cCs*t|jdd|_t|||j|j}|jS)z9Return a tuple of (POST QueryDict, FILES MultiValueDict).zEYou cannot alter upload handlers after the upload has been processed.)warning)rrrrLparse)r5r/Z post_dataparserr$r$r%parse_file_upload;s  zHttpRequest.parse_file_uploadcCst|ds|jrtdtjdk rDt|jjdp2dtjkrDtdy|j |_ Wn.t k r}zt |j |WYdd}~XnXt|j |_|j S)N_bodyz?You cannot access body after reading from request's data streamCONTENT_LENGTHrz;Request body exceeded settings.DATA_UPLOAD_MAX_MEMORY_SIZE.)r _read_startedr&r ZDATA_UPLOAD_MAX_MEMORY_SIZEintr/r>r readrOSErrorr argsr_stream)r5er$r$r%bodyDs   zHttpRequest.bodycCst|_t|_dS)N)r+rrr)r5r$r$r%_mark_post_parse_errorVsz"HttpRequest._mark_post_parse_errorc Cs|jdkr&t|jdt|_|_dS|jrDt|d rD|jdS|j dkrt|drdt |j }n|}y|j |j |\|_|_Wqtk r|jYqXn@|j dkrt|j|jdt|_|_nt|jdt|_|_dS)zFPopulate self._post and self._files if the content-type is a form typer-)rLNrzmultipart/form-dataz!application/x-www-form-urlencoded)r2r+rrrrrrrr3rrrr/rr)r5datar$r$r%_load_post_and_filesZs$      z HttpRequest._load_post_and_filescCs:t|dr6x*tjdd|jjDD] }|jq&WdS)Nrcss|]}|dVqdS)rNr$)rAlist_r$r$r%rCysz$HttpRequest.close..)rr from_iterablerlistsclose)r5fr$r$r%rws  zHttpRequest.closecOsHd|_y|jj||Stk rB}zt|j|WYdd}~XnXdS)NT)rrrrr r)r5rkwargsrr$r$r%rs zHttpRequest.readcOsHd|_y|jj||Stk rB}zt|j|WYdd}~XnXdS)NT)rrreadlinerr r)r5rrrr$r$r%rs zHttpRequest.readlinecCs t|jdS)N)iterr)r5r$r$r%__iter__szHttpRequest.__iter__cCst|S)N)list)r5r$r$r% readlinesszHttpRequest.readlines)F)F)N)*r!r"r#r'rrr6r9rr;r?rErNrTr\rQr7r`r^rhrlrorvrsrxpropertyrmrRrrLsetterrrrrrrrrrrrr$r$r$r%r(8sJ       $       r(cs@eZdZdZddhZfddZfddZedd ZZ S) r:ZHTTP_rFrcs@i}x*|jD]\}}|j|}|r|||<qWtj|dS)N)itemsparse_header_namesuperr6)r5environr;r{rkname)r8r$r%r6s   zHttpHeaders.__init__cstj|jddS)z:Allow header lookup using underscores in place of hyphens._-)r __getitem__replace)r5ri)r8r$r%rszHttpHeaders.__getitem__cCs>|j|jr |t|jd}n||jkr.dS|jddjS)Nrr)rr HTTP_PREFIXlenUNPREFIXED_HEADERSrtitle)clsr{r$r$r%rs   zHttpHeaders.parse_header_name) r!r"r#rrr6r classmethodr __classcell__r$r$)r8r%r:s   r:cseZdZdZdZdZd)fdd Zed*dd Ze d d Z e j d d Z d dZ fddZ fddZddZddZfddZd+fdd ZfddZfddZfdd Zfd!d"Zd,fd#d$ Zd%d&Zd-d'd(ZZS).r+a A specialized MultiValueDict which represents a query string. A QueryDict can be used to represent GET or POST data. It subclasses MultiValueDict since keys in such data can be repeated, for instance in the data from a form with a