| Server IP : 162.144.4.212 / Your IP : 216.73.216.108 Web Server : Apache System : Linux gator2125.hostgator.com 5.14.0-162.23.1.9991722448259.nf.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 31 18:11:45 UTC 2024 x86_64 User : cozeellc ( 2980) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /usr/lib64/python3.9/site-packages/mercurial/hgweb/__pycache__/ |
Upload File : |
a
�+�b�# � @ s d dl mZ d dlZd dlZd dlZd dlZd dlZddlmZm Z ddl
m Z mZm Z m
Z
e
jZdZdZdZd Zd
Zd Zd Zd
ZdZdZdZdd� Zdd� ZegZ G dd� de �Z G dd� de �Z dd� Z!d+dd �Z"d d � Z#d d � Z$d!d"� Z%d#d$� Z&d,d%d&�Z'd'd(� Z(d)d*� Z)dS )-� )�absolute_importN� )�getattr�open)�encoding�pycompat� templater�util�� �� i0 i� i� i� i� i� i� i� i� c C s |dgkp||v S )z�Check if username is a member of userlist.
If userlist has a single '*' member, all users are considered members.
Can be overridden by extensions to provide more complex authorization
schemes.
� *� )�ui�usernameZuserlistr
r
�</usr/lib64/python3.9/site-packages/mercurial/hgweb/common.py�ismember+ s r c C sL |j }| �dd�}|r4|r*t| jj||�r4ttd��| �dd�}|r^t| jj||�s^ttd��|dkrx| jsxttd��n|dks�|du r�dS |dkr�|jd kr�d
}tt |��n|jd kr�d }tt |��| �
dd
�r�|j dkr�tt d��| �dd�}|�r|�rt| jj||��rttd��| �dd�}|�r>t| jj||��sHttd��dS )z�Check permission for operation based on request data (including
authentication info). Return if op allowed, else raise an ErrorResponse
exception.� webs deny_reads read not authorizeds
allow_reads pulls pull not authorizedNs uploads PUTs upload requires PUT requests POSTs push requires POST requests push_ssls httpss ssl requireds deny_pushs push not authorizeds
allow-push)
Z
remoteuserZ
configlistr Zrepor �
ErrorResponse�HTTP_UNAUTHORIZEDZ allowpull�method�HTTP_METHOD_NOT_ALLOWEDZ
configboolZ urlscheme�HTTP_FORBIDDEN) ZhgwebZreq�op�userZ deny_readZ
allow_read�msgZdenyZallowr
r
r �
checkauthz5 s4
r c @ s e Zd Zddd�ZdS )r Nc C sD |d u rt |�}t�| t�|�� || _|d u r4g }|| _|| _d S )N)�_statusmessage� Exception�__init__r Zsysstr�code�headers�message)�selfr r! r r
r
r r l s zErrorResponse.__init__)NN)�__name__�
__module__� __qualname__r r
r
r
r r k s r c @ s* e Zd ZdZdd� Zd
dd�Zdd� Zd S ) �continuereadera. File object wrapper to handle HTTP 100-continue.
This is used by servers so they automatically handle Expect: 100-continue
request headers. On first read of the request body, the 100 Continue
response is sent. This should trigger the client into actually sending
the request body.
c C s || _ || _d| _d S )NF)�f�_write� continued)r" r' �writer
r
r r � s zcontinuereader.__init__���c C s" | j sd| _ | �d� | j�|�S )NTs HTTP/1.1 100 Continue
)r) r( r' �read)r" Zamtr
r
r r, � s
zcontinuereader.readc C s |dv rt | j|�S t�d S )N)s closes readlines readliness __iter__)r r' �AttributeError)r" �attrr
r
r � __getattr__� s zcontinuereader.__getattr__N)r+ )r# r$ r% �__doc__r r, r/ r
r
r
r r& w s
r& c C s t jj}t�|�| d�d �S )N)�Errorz
Unknown errorr )�
httpserverZbasehttprequesthandler� responsesr Zbytesurl�get)r r3 r
r
r r � s r c C s d| |pt | �f S )Ns %d %s)r )r r! r
r
r �
statusmessage� s r5 c C s2 t j�| |�}t j�|�r$t �|�S t �| �S dS )z%stat fn if it exists, spath otherwiseN)�os�path�join�exists�stat)�spath�fnZcl_pathr
r
r �get_stat� s
r= c C s t | d�tj S )Ns
00changelog.i)r= r: �ST_MTIME)r; r
r
r � get_mtime� s r? c C sN | � d�}|D ]:}|dtjtjfv sBtj|v sBtjdurtj|v r dS qdS )z9Determine if a path is safe to use for filesystem access.� /� NFT)�splitr ZoscurdirZospardirZossepZosaltsep)r7 �parts�partr
r
r �
ispathsafe� s
����rE c
C s2 t |�s dS |s2| pt�� }|dur2tj�|d�}tjj|�d�� }t�t �
t� |��d p^d�}tj�||�}z@t� |� t
|d��}|�� } W d � n1 s�0 Y W nh ty� ttd��Y nN t�y }
z4|
jtjkr�tt��nttt�|
j���W Y d}
~
n
d}
~
0 0 ||jd< |�| � |S ) a+ return a file inside directory with guessed Content-Type header
fname always uses '/' as directory separator and isn't allowed to
contain unusual path components.
Content-Type is guessed using the mimetypes module.
Return an empty string if fname is illegal or file not found.
Ns staticr@ r z
text/plains rbs illegal filenames Content-Type)rE r Z templatedirr6 r7 r8 rB r Zsysbytes� mimetypesZ
guess_type�fsdecoder: r r, � TypeErrorr �HTTP_SERVER_ERROR�OSError�errno�ENOENT�HTTP_NOT_FOUNDr Z
strtolocal�strerrorr Z setbodybytes) Z templatepathZ directory�fname�res�tpZfpathZctr7 Zfh�data�errr
r
r �
staticfile� s4 �
*
�
rT c c sZ | r&|r&| | | }| | | d@ }nd}d}|V |d7 }| r.|| kr.d| }d}q.dS )z5count parity of horizontal stripes for easier reading� r Nr
)Z stripecount�offset�countZparityr
r
r � paritygen� s rX c C s$ | dd�p"| dd�p"t j�d�p"dS )z�Return repo contact information or empty string.
web.contact is the primary source, but if that is not set, try
ui.username or $EMAIL as a fallback to display something useful.
r s contacts uis usernames EMAILrA )r �environr4 )�configr
r
r � get_contact� s
�
��r[ c C sR ddl }| jdddd�}d}|rJd|v rJt�|�� j��d�}|�d|�}||fS ) a Obtain the Content-Security-Policy header and nonce value.
Returns a 2-tuple of the CSP header value and the nonce value.
First value is ``None`` if CSP isn't enabled. Second value is ``None``
if CSP isn't enabled or if the CSP header doesn't need a nonce.
r Nr s cspF)Z untrusteds %nonce%� =)�uuidrZ �base64Zurlsafe_b64encodeZuuid4�bytes�rstrip�replace)r r] ZcspZnoncer
r
r � cspvalues� s rb )N)r )*Z
__future__r r^ rK rF r6 r: r r r � r r r r2 ZHTTP_OKZ HTTP_CREATEDZHTTP_NOT_MODIFIEDZHTTP_BAD_REQUESTr r rM r ZHTTP_NOT_ACCEPTABLEZHTTP_UNSUPPORTED_MEDIA_TYPErI r r Z permhooksr r �objectr& r r5 r= r? rE rT rX r[ rb r
r
r
r �<module> sB
3
)