o hHc@sddlZddlZddlZddlZddlmZddlmZddlm Z m Z m Z m Z m Z ddlmZddlmZddlmZmZmZmZddlmZdd lmZmZdd lmZmZmZdd l m!Z!dd l"m#Z#m$Z$dd l%m&Z&ddl'm(Z(ddl)m*Z*ddl+m,Z,ddl-m.Z.e*e dre*e dsddl'm Z e/Z0e,dZ1Gddde2Z3Gddde4Z5GdddZ6GdddeZ7Gdd d eZ8Gd!d"d"Z9d#d$Z:d%d&Z;d'd(ZZ%d?d@Z&dAdBZ'dCdDZ(dEdFZ)dS)I HttpRequestzA basic HTTP request.NcCsTtdd|_tdd|_i|_i|_t|_d|_d|_d|_ d|_ d|_ d|_ dS)NT)mutable) QueryDictGETPOSTCOOKIESMETArZFILESpath path_infomethodZresolver_match content_typecontent_paramsselfr%r%r&__init__?s   zHttpRequest.__init__cCs6|jdus |sd|jjSd|jj|j|fS)Nz<%s>z <%s: %s %r>)r3 get_full_path __class__r"r6r%r%r&__repr__Qs zHttpRequest.__repr__cCs t|jSN) HttpHeadersr0r6r%r%r&headersV zHttpRequest.headerscCst|jddS)z%Return a list of MediaType instances.Acceptz*/*)parse_accept_headerr>getr6r%r%r&accepted_typesZszHttpRequest.accepted_typescstfdd|jDS)Nc3s|]}|VqdSr<)match).0Z accepted_type media_typer%r& `s  z&HttpRequest.accepts..)anyrC)r7rGr%rFr&accepts_s zHttpRequest.acceptscCsbt|dd\|_|_d|jvr/z t|jdWn ty&YdSw|jd|_dSdS)z/Set content_type, content_params, and encoding. CONTENT_TYPEr+charsetN) cgirrBr4r5codecslookup LookupErrorencoding)r7metar%r%r&_set_content_type_paramses  z$HttpRequest._set_content_type_paramscCsltjrd|jvr|jd}|Sd|jvr|jd}|S|jd}|}||r+dndkr4d||f}|S)z Return the HTTP host using the environment or request headers. Skip allowed hosts protection, so may return an insecure host. ZHTTP_X_FORWARDED_HOSTZ HTTP_HOSTZ SERVER_NAME44380z%s:%s)r ZUSE_X_FORWARDED_HOSTr0get_port is_secure)r7hostZ server_portr%r%r& _get_raw_hostps     zHttpRequest._get_raw_hostcCsn|}tj}tjr|sgd}t|\}}|rt||r|Sd|}|r/|d|7}t||d7}t|)z>Return the HTTP host using the environment or request headers.)z .localhostz 127.0.0.1z[::1]zInvalid HTTP_HOST header: %r.z) You may need to add %r to ALLOWED_HOSTS.zB The domain name provided is not valid according to RFC 1034/1035.)rYr Z ALLOWED_HOSTSDEBUGsplit_domain_port validate_hostr )r7rX allowed_hostsdomainportmsgr%r%r&get_hosts   zHttpRequest.get_hostcCs4tjrd|jvr|jd}t|S|jd}t|S)z3Return the port number for the request as a string.ZHTTP_X_FORWARDED_PORTZ SERVER_PORT)r ZUSE_X_FORWARDED_PORTr0str)r7r_r%r%r&rVs   zHttpRequest.get_portFcC||j|Sr<)_get_full_pathr1r7force_append_slashr%r%r&r9zHttpRequest.get_full_pathcCrcr<)rdr2rer%r%r&get_full_path_inforgzHttpRequest.get_full_path_infoc CsLdt||r |ds dnd|jddr"dt|jddfSdfS)N%s%s%s/r+Z QUERY_STRING?)rendswithr0rBr)r7r1rfr%r%r&rds"zHttpRequest._get_full_pathr+cCstz|j|}Wnty|tur|YSwztj||dj||d}W|Stjy9|tur8|YSw)z Attempt to return a signed cookie. If the signature fails or the cookie has expired, raise an exception, unless the `default` argument is provided, in which case return that value. )salt)max_age)r/KeyError RAISE_ERRORr Zget_cookie_signerZunsignZ BadSignature)r7keydefaultrmrnZ cookie_valuevaluer%r%r&get_signed_cookies" zHttpRequest.get_signed_cookiecCsdj|j||dS)z Return an absolute URI from variables available in this request. Skip allowed hosts protection, so may return insecure URI. z{scheme}://{host}{path})schemerXr1)formatrurYr9r6r%r%r& get_raw_uris zHttpRequest.get_raw_uricCs|dur d|}nt|}t|}|jr|jsL|jdrC|jsC|jsCd|jvrCd|jvrC|dr:|dd}|j|}t |St|j|j|}t |S)a Build an absolute URI from the location and the variables available in this request. If no ``location`` is specified, build the absolute URI using request.get_full_path(). If the location is absolute, convert it to an RFC 3987 compliant URI and return it. If location is relative or is scheme-relative (i.e., ``//example.com/``), urljoin() it to a base URL constructed from the request variables. Nz//%srjz/./z/../z//) r9rbrrunetlocr1 startswith_current_scheme_hostrr)r7locationbitsr%r%r&build_absolute_uris     zHttpRequest.build_absolute_uricCsd|j|S)Nz{}://{})rvrurar6r%r%r&r{sz HttpRequest._current_scheme_hostcCsdS)zf Hook for subclasses like WSGIRequest to implement. Return 'http' by default. httpr%r6r%r%r& _get_schemeszHttpRequest._get_schemecCsXtjr(ztj\}}Wn tytdw|j|}|dur(||kr&dSdS|S)NzJThe SECURE_PROXY_SSL_HEADER setting must be a tuple containing two values.httpsr)r ZSECURE_PROXY_SSL_HEADER ValueErrorr r0rBr)r7headerZ secure_value header_valuer%r%r&rus  zHttpRequest.schemecCs |jdkS)Nr)rur6r%r%r&rW s zHttpRequest.is_securecCs tjdtdd|jddkS)Nzfrequest.is_ajax() is deprecated. See Django 3.1 release notes for more details about this deprecation.rx) stacklevelZHTTP_X_REQUESTED_WITHZXMLHttpRequest)warningswarnrr0rBr6r%r%r&is_ajaxs zHttpRequest.is_ajaxcCs|jSr< _encodingr6r%r%r&rQszHttpRequest.encodingcCs*||_t|dr |`t|dr|`dSdS)z Set the encoding used for GET/POST accesses. If the GET or POST dictionary has already been created, remove and recreate it on the next access (so that it is decoded correctly). r-_postN)rhasattrr-r)r7valr%r%r&rQs   csfddtjD_dS)Ncsg|]}t|qSr%)rZ load_handler)rEhandlerr6r%r& +sz4HttpRequest._initialize_handlers..)r ZFILE_UPLOAD_HANDLERS_upload_handlersr6r%r6r&_initialize_handlers*s  z HttpRequest._initialize_handlerscCs|js||jSr<)rrr6r%r%r&upload_handlers.szHttpRequest.upload_handlerscCst|dr td||_dS)N_fileszGYou cannot set the upload handlers after the upload has been processed.)rAttributeErrorr)r7rr%r%r&r5s  cCs*t|jdd|_t|||j|j}|S)z9Return a tuple of (POST QueryDict, FILES MultiValueDict).zEYou cannot alter upload handlers after the upload has been processed.)warning)rrrrQparse)r7r0Z post_dataparserr%r%r&parse_file_upload;s zHttpRequest.parse_file_uploadc Cst|dsB|jr tdtjdur"t|jdpdtjkr"tdz| |_ Wnt y;}zt |j |d}~wwt|j |_|j S)N_bodyz?You cannot access body after reading from request's data streamCONTENT_LENGTHrz;Request body exceeded settings.DATA_UPLOAD_MAX_MEMORY_SIZE.)r _read_startedr'r ZDATA_UPLOAD_MAX_MEMORY_SIZEintr0rBr readrOSErrorr!argsr_stream)r7er%r%r&bodyDs    zHttpRequest.bodycCst|_t|_dSr<)r,rrrr6r%r%r&_mark_post_parse_errorVs z"HttpRequest._mark_post_parse_errorcCs|jdkrt|jdt|_|_dS|jr!t|ds!|dS|j dkrNt|dr1t |j }n|}z| |j |\|_|_WdStyM|w|j dkrct|j|jdt|_|_dSt|jdt|_|_dS)zFPopulate self._post and self._files if the content-type is a form typer.)rQNrzmultipart/form-dataz!application/x-www-form-urlencoded)r3r,rrrrrrrr4rrrr0rr)r7datar%r%r&_load_post_and_filesZs&       z HttpRequest._load_post_and_filescCs:t|drtdd|jDD]}|qdSdS)Nrcss|]}|dVqdS)rNr%)rElist_r%r%r&rHysz$HttpRequest.close..)rr from_iterablerlistsclose)r7fr%r%r&rws  zHttpRequest.closec O@d|_z |jj|i|WSty}zt|j|d}~wwNT)rrrrr!rr7rkwargsrr%r%r&r zHttpRequest.readc Orr)rrreadlinerr!rrr%r%r&rrzHttpRequest.readlinecCs t|jdS)N)iterrr6r%r%r&__iter__ zHttpRequest.__iter__cCst|Sr<)listr6r%r%r& readlinesszHttpRequest.readlines)Fr<)*r"r#r$r(rrr8r;rr>rCrJrSrYrarVr9rhrdrprtrwr~r{rpropertyrurWrrQsetterrrrrrrrrrrrr%r%r%r&r)8s^       $           r)cs@eZdZdZddhZfddZfddZedd ZZ S) r=ZHTTP_rKrcs<i}|D]\}}||}|r|||<qt|dSr<)itemsparse_header_namesuperr8)r7environr>rrsnamer:r%r&r8s zHttpHeaders.__init__cst|ddS)z:Allow header lookup using underscores in place of hyphens._-)r __getitem__replacer7rqrr%r&rzHttpHeaders.__getitem__cCs>||jr|t|jd}n||jvrdS|ddS)Nrr)rz HTTP_PREFIXlenUNPREFIXED_HEADERSrtitle)clsrr%r%r&rs  zHttpHeaders.parse_header_name) r"r#r$rrr8r classmethodr __classcell__r%r%rr&r=s  r=cseZdZdZdZdZd)fdd Zed*dd Ze d d Z e j d d Z d dZ fddZ fddZddZddZfddZd+fdd ZfddZfddZfdd Zfd!d"Zd+fd#d$ Zd%d&Zd+d'd(ZZS),r,a A specialized MultiValueDict which represents a query string. A QueryDict can be used to represent GET or POST data. It subclasses MultiValueDict since keys in such data can be repeated, for instance in the data from a form with a