_2 @sbdZddlmZddlmZddlmZddlmZddlmZddl m Z dd l m Z ydd l mZWn"ek rdd lmZYnXGd d d eZGd ddeZdddZGdddeZGdddeZGdddeZeGdddeZGdddeZdS)a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause )warn)implements_iterator)PY2) string_types)Headers)is_entity_header) FileWrapper)urlparsec@seZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N)__name__ __module__ __qualname____doc__rrr?)r:hasattrr6r'r;sumr2getintlowerrrrr )r status_codeheadersZ bytes_sentZcontent_lengthkey_valuerrrr's8      ( zGuardedIterator.closec Cs3|js/ytdtWntk r.YnXdS)Nz4Iterator was garbage collected before it was closed.)r:rr Exception)rrrr__del__s   zGuardedIterator.__del__N)r r rrr&r9r'rMrrrrr5s    'r5c@s^eZdZdZddZddZddZdd Zd d Zd d Z dS)LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it check are: - invalid status codes - non-bytestrings sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) cCs ||_dS)N)app)rrOrrrrszLintMiddleware.__init__c Cst|tk r%tdtddx1dD])}||kr,td |tddq,W|ddkr|tdtdd|jdd}|jdd}|r|ddkrtd|tdd|r|ddkrtd|tdddS)Nz/WSGI environment is not a standard Python dict.rREQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorswsgi.multithreadwsgi.multiprocess wsgi.run_oncez%Required environment key %r not foundrrrz"Environ is not a WSGI 1.0 environ.Z SCRIPT_NAMEZ PATH_INFO/z-'SCRIPT_NAME' does not start with a slash: %rz+'PATH_INFO' does not start with a slash: %r) rQrRrSrTrUrVrWrXrY)rr)rdictrr rE)renvironrJ script_nameZ path_inforrr check_environsD   zLintMiddleware.check_environcCstd||jddd}t|dksB|j rXttdddt|dksz|ddkrttd ddt|}|d krttd ddt|tk rttd ddx|D]}t|t k st|d kr-ttddd|\}}t|t k s]t|t k rsttddd|j dkrttdddqW|dk rt |t  rttdddt |}|j|||fS)Nstatusrrrz Status code must be three digitsrrP zeInvalid value for status %r. Valid status strings are three digits, a space and a status explanationr@zstatus code < 100 detectedzheader list is not a listrz Headers must tuple 2-item tupleszheader items must be stringszFThe status header is not supported due to conflicts with the CGI spec.zinvalid value for exc_info)rsplitr isdigitrr rFrlisttuplerrG isinstancer check_headers)rr`rIexc_inforHitemnamevaluerrrcheck_start_responses< "    $ $    z#LintMiddleware.check_start_responsecCs|jd}|dk r|jd r_|jdrOttddd|dd}|dd|ddkod knsttd dd|jd }|dk rt|jsttd dddS)NetagW/w/z%weak etag indicator should be upcase.rrPrr"zunquoted etag emitted.locationz*absolute URLs required for location header)rnro)rE startswithrrr netloc)rrIrmrqrrrrgHs   0  zLintMiddleware.check_headerscCs&t|tr"tdtdddS)NzThe application returned astring. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.rr)rfrrr )rapp_iterrrrcheck_iteratoras zLintMiddleware.check_iteratorcst|dkr%tdtdd|r>tdtdd|\}j|t|d|d.checking_start_response) r rr r_rr(r rOrvr5)rr"rwr]ryrur)r2r;rrxrr4ks     zLintMiddleware.__call__N) r r rrrr_rlrgrvr4rrrrrNs   , 0  rNN)rwarningsr_compatrrrZdatastructuresrhttprZwsgir urllib.parser ImportErrorWarningr rrobjectrr(r/r5rNrrrrs( 4  P