o h`@svddlZddlZddlmZddlmZddlmZmZm Z m Z m Z ddl m Z ddlmZddlmZmZmZmZddlmZdd lmZmZdd lmZmZmZdd lmZm Z dd l!m"Z"dd l#m$Z$m%Z%ddl&m'Z'ddl(m)Z)e*Z+e'dZ,Gddde-Z.Gddde/Z0GdddZ1GdddeZ2GdddeZ3GdddZ4ddZ5d d!Z6d"d#Z7d$d%Z8dS)&N)BytesIO)chain) parse_qslquote urlencodeurljoinurlsplit)settings)signing)DisallowedHostImproperlyConfiguredRequestDataTooBigTooManyFieldsSent) uploadhandler)MultiPartParserMultiPartParserError)CaseInsensitiveMapping ImmutableListMultiValueDict)escape_uri_path iri_to_uri)cached_property)is_same_domainparse_header_parameters)_lazy_re_compile) parse_headerz4^([a-z0-9.-]+|\[[a-f0-9]*:[a-f0-9\.:]+\])(:[0-9]+)?$c@s eZdZdS)UnreadablePostErrorN)__name__ __module__ __qualname__r!r!E/var/www/html/env/lib/python3.10/site-packages/django/http/request.pyr#src@seZdZdZdS)RawPostDataExceptionz You cannot access raw_post_data from a request that has multipart/* POST data if it has been accessed via POST, FILES, etc.. N)rrr __doc__r!r!r!r"r#'sr#c@sNeZdZdZdZgZddZddZeddZ ed d Z d d Z d dZ ddZ ddZddZdCddZdCddZddZeddfddZdDdd Zed!d"Zd#d$Zed%d&Zd'd(Zed)d*Zejd+d*Zd,d-Zed.d/Zejd0d/Zd1d2Zed3d4Z d5d6Z!d7d8Z"d9d:Z#d;d<Z$d=d>Z%d?d@Z&dAdBZ'dS)E HttpRequestzA basic HTTP request.NcCsTtdd|_tdd|_i|_i|_t|_d|_d|_d|_ d|_ d|_ d|_ dS)NT)mutable) QueryDictGETPOSTCOOKIESMETArFILESpath path_infomethodresolver_match content_typecontent_paramsselfr!r!r"__init__8s   zHttpRequest.__init__cCs6|jdus |sd|jjSd|jj|j|fS)Nz<%s>z <%s: %s %r>)r0 get_full_path __class__rr4r!r!r"__repr__Js zHttpRequest.__repr__cCs t|jSN) HttpHeadersr,r4r!r!r"headersS zHttpRequest.headerscCst|jddS)z%Return a list of MediaType instances.Acceptz*/*)parse_accept_headerr<getr4r!r!r"accepted_typesWszHttpRequest.accepted_typescstfdd|jDS)Nc3s|]}|VqdSr:)match).0 accepted_type media_typer!r" ]s  z&HttpRequest.accepts..)anyrA)r5rFr!rEr"accepts\s zHttpRequest.acceptscCs`t|dd\|_|_d|jvr.z t|jdWn ty%YdSw|jd|_dSdS)z/Set content_type, content_params, and encoding. CONTENT_TYPEr'charsetN)rr@r2r3codecslookup LookupErrorencoding)r5metar!r!r"_set_content_type_paramsas   z$HttpRequest._set_content_type_paramscCsltjrd|jvr|jd}|Sd|jvr|jd}|S|jd}|}||r+dndkr4d||f}|S)z Return the HTTP host using the environment or request headers. Skip allowed hosts protection, so may return an insecure host. HTTP_X_FORWARDED_HOST HTTP_HOST SERVER_NAME44380z%s:%s)r USE_X_FORWARDED_HOSTr,get_port is_secure)r5host server_portr!r!r" _get_raw_hostns    zHttpRequest._get_raw_hostcCsn|}tj}tjr|sgd}t|\}}|rt||r|Sd|}|r/|d|7}t||d7}t|)z>Return the HTTP host using the environment or request headers.)z .localhostz 127.0.0.1z[::1]zInvalid HTTP_HOST header: %r.z) You may need to add %r to ALLOWED_HOSTS.zB The domain name provided is not valid according to RFC 1034/1035.)r\r ALLOWED_HOSTSDEBUGsplit_domain_port validate_hostr )r5rZ allowed_hostsdomainportmsgr!r!r"get_hosts   zHttpRequest.get_hostcCs4tjrd|jvr|jd}t|S|jd}t|S)z3Return the port number for the request as a string.HTTP_X_FORWARDED_PORT SERVER_PORT)r USE_X_FORWARDED_PORTr,str)r5rcr!r!r"rXs   zHttpRequest.get_portFcC||j|Sr:)_get_full_pathr.r5force_append_slashr!r!r"r7zHttpRequest.get_full_pathcCrjr:)rkr/rlr!r!r"get_full_path_infornzHttpRequest.get_full_path_infoc CsLdt||r |ds dnd|jddr"dt|jddfSdfS)N%s%s%s/r' QUERY_STRING?)rendswithr,r@r)r5r.rmr!r!r"rks zHttpRequest._get_full_pathr'cCstz|j|}Wnty|tur|YSwztj||dj||d}W|Stjy9|tur8|YSw)z Attempt to return a signed cookie. If the signature fails or the cookie has expired, raise an exception, unless the `default` argument is provided, in which case return that value. )salt)max_age)r+KeyError RAISE_ERRORr get_cookie_signerunsign BadSignature)r5keydefaultrurv cookie_valuevaluer!r!r"get_signed_cookies" zHttpRequest.get_signed_cookiecCs|dur d|}nt|}t|}|jr|jsL|jdrC|jsC|jsCd|jvrCd|jvrC|dr:|dd}|j|}t |St|j|j|}t |S)a Build an absolute URI from the location and the variables available in this request. If no ``location`` is specified, build the absolute URI using request.get_full_path(). If the location is absolute, convert it to an RFC 3987 compliant URI and return it. If location is relative or is scheme-relative (i.e., ``//example.com/``), urljoin() it to a base URL constructed from the request variables. Nz//%srqz/./z/../z//) r7rirschemenetlocr. startswith_current_scheme_hostrr)r5locationbitsr!r!r"build_absolute_uris&        zHttpRequest.build_absolute_uricCsd|j|S)Nz{}://{})formatrrer4r!r!r"rsz HttpRequest._current_scheme_hostcCsdS)zf Hook for subclasses like WSGIRequest to implement. Return 'http' by default. httpr!r4r!r!r" _get_schemeszHttpRequest._get_schemecCsltjr2ztj\}}Wn tytdw|j|}|dur2|dd^}}||kr0dSdS|S)NzJThe SECURE_PROXY_SSL_HEADER setting must be a tuple containing two values.,rhttpsr) r SECURE_PROXY_SSL_HEADER ValueErrorr r,r@splitstripr)r5header secure_value header_value_r!r!r"rs  zHttpRequest.schemecCs |jdkS)Nr)rr4r!r!r"rY s zHttpRequest.is_securecCs|jSr: _encodingr4r!r!r"rOszHttpRequest.encodingcCs*||_t|dr |`t|dr|`dSdS)z Set the encoding used for GET/POST accesses. If the GET or POST dictionary has already been created, remove and recreate it on the next access (so that it is decoded correctly). r)_postN)rhasattrr)r)r5valr!r!r"rOs   csfddtjD_dS)Ncsg|]}t|qSr!)r load_handler)rChandlerr4r!r" s z4HttpRequest._initialize_handlers..)r FILE_UPLOAD_HANDLERS_upload_handlersr4r!r4r"_initialize_handlerss  z HttpRequest._initialize_handlerscCs|js||jSr:)rrr4r!r!r"upload_handlers%szHttpRequest.upload_handlerscCst|dr td||_dS)N_fileszGYou cannot set the upload handlers after the upload has been processed.)rAttributeErrorr)r5rr!r!r"r,s  cCs*t|jdd|_t|||j|j}|S)z9Return a tuple of (POST QueryDict, FILES MultiValueDict).zEYou cannot alter upload handlers after the upload has been processed.)warning)rrrrOparse)r5r, post_dataparserr!r!r"parse_file_upload5s zHttpRequest.parse_file_uploadc Cst|dsB|jr tdtjdur"t|jdpdtjkr"tdz| |_ Wnt y;}zt |j |d}~wwt|j |_|j S)N_bodyz?You cannot access body after reading from request's data streamCONTENT_LENGTHrz;Request body exceeded settings.DATA_UPLOAD_MAX_MEMORY_SIZE.)r _read_startedr#r DATA_UPLOAD_MAX_MEMORY_SIZEintr,r@r readrOSErrorrargsr_stream)r5er!r!r"bodyAs(    zHttpRequest.bodycCst|_t|_dSr:)r(rrrr4r!r!r"_mark_post_parse_errorZs z"HttpRequest._mark_post_parse_errorcCs|jdkrt|jdt|_|_dS|jr!t|ds!|dS|j dkrNt|dr1t |j }n|}z| |j |\|_|_WdStyM|w|j dkrct|j|jdt|_|_dSt|jdt|_|_dS)zFPopulate self._post and self._files if the content-type is a form typer*)rONrzmultipart/form-dataz!application/x-www-form-urlencoded)r0r(rrrrrrrr2rrrr,rr)r5datar!r!r"_load_post_and_files^s2         z HttpRequest._load_post_and_filescCs:t|drtdd|jDD]}|qdSdS)Nrcss|]}|dVqdS)rNr!)rClist_r!r!r"rGsz$HttpRequest.close..)rr from_iterablerlistsclose)r5fr!r!r"rs  zHttpRequest.closec O@d|_z |jj|i|WSty}zt|j|d}~wwNT)rrrrrrr5rkwargsrr!r!r"r zHttpRequest.readc Orr)rrreadlinerrrrr!r!r"rrzHttpRequest.readlinecCs t|jdS)N)iterrr4r!r!r"__iter__ zHttpRequest.__iter__cCst|Sr:)listr4r!r!r" readlinesszHttpRequest.readlines)Fr:)(rrr r$rrr6r9rr<rArIrQr\rerXr7rorkrxrrrrpropertyrrYrOsetterrrrrrrrrrrrr!r!r!r"r%1sZ      )        &  r%cs@eZdZdZddhZfddZfddZedd ZZ S) r;HTTP_rJrcs<i}|D]\}}||}|r|||<qt|dSr:)itemsparse_header_namesuperr6)r5environr<rrnamer8r!r"r6s zHttpHeaders.__init__cst|ddS)z:Allow header lookup using underscores in place of hyphens.r-)r __getitem__replacer5r|rr!r"rzHttpHeaders.__getitem__cCs>||jr|t|jd}n||jvrdS|ddS)Nrr)r HTTP_PREFIXlenUNPREFIXED_HEADERSrtitle)clsrr!r!r"rs  zHttpHeaders.parse_header_name) rrr rrr6r classmethodr __classcell__r!r!rr"r;s  r;cseZdZdZdZdZd)fdd Zed*dd Ze d d Z e j d d Z d dZ fddZ fddZddZddZfddZd+fdd ZfddZfddZfdd Zfd!d"Zd+fd#d$ Zd%d&Zd+d'd(ZZS),r(a A specialized MultiValueDict which represents a query string. A QueryDict can be used to represent GET or POST data. It subclasses MultiValueDict since keys in such data can be repeated, for instance in the data from a form with a