3i @ddlmZddlZddlZddlmZddlmZddl m Z ddl m Z ddl mZejd ej ej"zej$z Z d dd Z d dd Z d dd Z d ddZy)) annotationsN)quote) _plain_int) SecurityError)parse_set_header) uri_to_iriz ( [a-z0-9.-]+ # domain or ipv4 | \[[a-f0-9]*:[a-f0-9.:]+] # ipv6 ) (?::[0-9]+)? # optional port )flagsc|sytj|y|jdd}|syt|tr|g}|D]n}|j dr|dd}d}nd} |jddj djd }||k(s|sY|jd|snyy#t$rYywxYw) aPerform some checks on a ``Host`` header ``host:port``. The host must be made up of valid characters, but this does not check validity beyond that. If a list of trusted domains is given, the domain must match one. :param hostname: The ``Host`` header ``host:port`` to check. :param trusted_list: A list of trusted domains to match. These should already be IDNA encoded, but will be encoded if needed. The port is ignored for this check. If a name starts with a dot it will match as a suffix, accepting all subdomains. If empty or ``None``, all domains are allowed. .. versionchanged:: 3.2 The value's characters are validated. .. versionchanged:: 3.2 ``trusted_list`` defaults to ``None``. .. versionadded:: 0.9 FN:rT.idnaascii) _host_re fullmatch partition isinstancestr startswithencodedecodeUnicodeEncodeErrorendswith)hostname trusted_listref suffix_matchs H/var/www/opsc/venv/lib/python3.12/site-packages/werkzeug/sansio/utils.pyhost_is_trustedr s, (#+!!#&q)H ,$$~   >># ab'CL L --$Q'..v6==gFC (?|0A0AAcU)0L   "  s%2B88 CCc||}n+|'|d"|d}d|vr|ddk7rd|d}|d|d}nd}|dvr|jd}n|d vr|jd }t||std |d |S) aWGet and validate a request's ``host:port`` based on the given values. The ``Host`` header sent by the client is preferred. Otherwise, the server's configured address is used. The port is omitted if it matches the standard HTTP or HTTPS ports. The value is passed through :func:`host_is_trusted`. The host must be made up of valid characters, but this does not check validity beyond that. If a list of trusted domains is given, the domain must match one. :param scheme: The protocol of the request. Used to omit the standard ports 80 and 443. :param host_header: The ``Host`` header value. :param server: The server's configured address ``(host, port)``. The server may be using a Unix socket and give ``(path, None)``; this is ignored as it would not produce a useful host value. :param trusted_hosts: A list of trusted domains to match. These should already be IDNA encoded, but will be encoded if needed. The port is ignored for this check. If a name starts with a dot it will match as a suffix, accepting all subdomains. If empty or ``None``, all domains are allowed. :return: Host, with port if necessary. :raise .SecurityError: If the host is not trusted. .. versionchanged:: 3.2 The characters of the host value are validated. The empty string is no longer allowed if no header value is available. .. versionchanged:: 3.2 When using the server address, Unix sockets are ignored. .. versionchanged:: 3.1.3 If ``SERVER_NAME`` is IPv6, it is wrapped in ``[]``. rrr []>wshttpz:80>wsshttpsz:443zHost z is not trusted.) removesuffixr r)scheme host_headerserver trusted_hostshosts rget_hostr/OsR  q 5ay $;47c>tfA;Dq $   ' # #  ( 4 /eD8+;<== Kc|d|g}|+|jdtdj|S|jt|j dd|jd|tdj|S|jt|j dd|r-|jd|jt|dtdj|S)aRecreate the URL for a request. If an optional part isn't provided, it and subsequent parts are not included in the URL. The URL is an IRI, not a URI, so it may contain Unicode characters. Use :func:`~werkzeug.urls.iri_to_uri` to convert it to ASCII. :param scheme: The protocol the request used, like ``"https"``. :param host: The host the request was made to. See :func:`get_host`. :param root_path: Prefix that the application is mounted under. This is prepended to ``path``. :param path: The path part of the URL after ``root_path``. :param query_string: The portion of the URL after the "?". z:///r$z!$&'()*+,/:;=@%)safe?z!$&'()*+,/:;=?@%)appendr joinrrstriplstrip)r*r. root_pathpath query_stringurls rget_current_urlr=s( 5$ C 3"''#,''JJuY%%c*1BCDJJsO |"''#,''JJuT[[%,=>? 3 5,>?@ bggcl ##r0cp| dt|vs|y tdt|S#t$rYywxYw)aReturn the ``Content-Length`` header value as an int. If the header is not given or the ``Transfer-Encoding`` header is ``chunked``, ``None`` is returned to indicate a streaming request. If the value is not an integer, or negative, 0 is returned. :param http_content_length: The Content-Length HTTP header. :param http_transfer_encoding: The Transfer-Encoding HTTP header. .. versionadded:: 2.2 Nchunkedr)rmaxr ValueError)http_content_lengthhttp_transfer_encodings rget_content_lengthrDsL * )*@A A  $1j!4566 s ) 55)N)r str | Nonert.Collection[str] | Nonereturnbool)NN) r*rr+rEr,ztuple[str, int | None] | Noner-rFrGr)NNN) r*rr.rr9rEr:rEr;z bytes | NonerGr)rBrErCrErGz int | None) __future__rretypingt urllib.parser _internalr exceptionsrr&rurlsr compileASCII IGNORECASEVERBOSErr r/r=rDr0rrVs$" "&# 2:: ((R]] "RZZ / DH33(@3 3r-1.2 @ @@ *@, @  @L!!% ($ ($ ($($  ($  ($  ($X'+)-#&r0