3 []cG@s<dZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl mZddl mZddlmZddlmZdd lmZdd lmZdd lmZdd lmZd dlmZd dlm Z!d dl"m#Z#d dl"m$Z$ddZ d#Z%ddZ&da'ddZ(Gddde)Z*ddZ+Gdd d e)Z,dS)$z werkzeug.debug ~~~~~~~~~~~~~~ WSGI application traceback debugger. :copyright: 2007 Pallets :license: BSD-3-Clause N)chain)basename)join) text_type)_log) parse_cookie)gen_salt) BaseRequest) BaseResponse)Console) debug_repr)get_current_traceback)render_console_htmlcOs"ddl}|jdtddt||S)Nrz}'debug_repr' has moved to 'werkzeug.debug.repr.debug_repr' as of version 0.7. This old import will be removed in version 1.0.r) stacklevel)warningswarnDeprecationWarning _debug_repr)argskwargsrr;/tmp/pip-build-w1as9q70/Werkzeug/werkzeug/debug/__init__.pyr%s r<cCs0t|tr|jdd}tj|djddS)Nzutf-8replaces shittysalt ) isinstancerencodehashlibmd5 hexdigest)pinrrrhash_pin6s  r%cCs&t}|dk r|Sdd}|a}|S)Nc 3Ssy td}|j}WdQRXWntk r4YnX|jjdd}|rP|SxFdD]>}y"t|d}|jjSQRXWqVtk rwVYqVXqVWyPddlm}m}|d d d d d g|djd}t j d|}|dk r|j dSWnt t fk rYnXd}y ddl}Wn:t k rNy ddl}Wnt k rHYnXYnX|dk ryT|j|jdd|j|jB0}|j|d\} } | |jkr| jdS| SWdQRXWntk rYnXdS)Nz/proc/self/cgroupz/docker/r/etc/machine-id/proc/sys/kernel/random/boot_idrbr)PopenPIPEZioregz-cZIOPlatformExpertDevicez-d2)stdouts"serial-number" = <([^>]+)r zSOFTWARE\Microsoft\CryptographyZ MachineGuidzutf-8)r&r')openreadlineIOErrorstrip partition subprocessr)r* communicateresearchgroupOSError ImportErrorwinreg_winregOpenKeyHKEY_LOCAL_MACHINEZKEY_READZKEY_WOW64_64KEY QueryValueExREG_SZr Z WindowsError) fvaluefilenamer)r*dumpmatchwrZrkZ machineGuidZwrTyperrr _generateEs\           z!get_machine_id.._generate) _machine_id)rvrErrrget_machine_id?s A rHc@seZdZdZddZdS) _ConsoleFramez]Helper class so that we can reuse the frame console code for the standalone console. cCst||_d|_dS)Nr)r consoleid)self namespacerrr__init__s z_ConsoleFrame.__init__N)__name__ __module__ __qualname____doc__rNrrrrrIsrIc stjjd}d}d|dkr dS|dk rJ|jddjrJd|krF|}n|t|d|jj}y tj }Wnt t fk rd}YnXt j j|}||t|d|jjt|ddg}ttjtg}tj}x6t||D](} | sqt| tr| jd } |j| qW|jd d |jdd } dkrN|jd dt|jddd|dkrxLdD]@tdkr^djfddtdtD}Pq^W}|| fS)aQGiven an application object this returns a semi-stable 9 digit pin code and a random key. The hope is that this is stable between restarts to not make debugging particularly frustrating. If the pin was forcefully disabled this returns `None`. Second item in the resulting tuple is the cookie name for remembering. ZWERKZEUG_DEBUG_PINNoff-rPrO__file__zutf-8s cookiesaltZ__wzdspinsaltz%09d rc3s&|]}||jdVqdS)0N)rjust).0x) group_sizenumrr sz*get_pin_and_cookie_name..)NN)rZr[r\)osenvirongetrisdigitgetattr __class__rPgetpassgetuserr8KeyErrorsysmodulesrOstruuidgetnoderHr!r"rrrr updater#intlenrrange) appr$rGmodnameusernamemodZprobably_public_bitsZ private_bitshbitZ cookie_namer)rarbrget_pin_and_cookie_namesR            r|c@seZdZdZd#ddZd d Zd d ZeeeZ[[ed dZ ddZ ddZ ddZ ddZ ddZddZddZddZdd Zd!d"ZdS)$DebuggedApplicationaQEnables debugging support for a given application:: from werkzeug.debug import DebuggedApplication from myapp import app app = DebuggedApplication(app, evalex=True) The `evalex` keyword argument allows evaluating expressions in a traceback's frame context. .. versionadded:: 0.9 The `lodgeit_url` parameter was deprecated. :param app: the WSGI application to run debugged. :param evalex: enable exception evaluation feature (interactive debugging). This requires a non-forking server. :param request_key: The key that points to the request object in ths environment. This parameter is ignored in current versions. :param console_path: the URL for a general purpose console. :param console_init_func: the function that is executed before starting the general purpose console. The return value is used as initial namespace. :param show_hidden_frames: by default hidden traceback frames are skipped. You can show them by setting this parameter to `True`. :param pin_security: can be used to disable the pin based security system. :param pin_logging: enables the logging of the pin system. Fwerkzeug.request/consoleNTc Cs|dk r"ddlm} | dtdd|s*d}||_||_i|_i|_||_||_||_ ||_ t d|_ d|_ | |_|rtjjddkr| rtd d |jdkrtd d qtd d |jnd|_dS)Nr)rz'lodgeit_url' is no longer used as of version 0.9 and will be removed in version 1.0. Werkzeug uses https://gist.github.com/ instead.r)rrWZWERKZEUG_RUN_MAINtruewarningz * Debugger is active!z- * Debugger PIN disabled. DEBUGGER UNSECURED!infoz * Debugger PIN: %s)rrrrvevalexframes tracebacks request_key console_pathconsole_init_funcshow_hidden_framesr secret_failed_pin_auth pin_loggingrdrerfrr$) rLrvrrrrrZ lodgeit_urlZ pin_securityrrrrrrNs4      zDebuggedApplication.__init__cCs"t|dst|j\|_|_|jS)N_pin)hasattrr|rvr _pin_cookie)rLrrr_get_pin4s zDebuggedApplication._get_pincCs ||_dS)N)r)rLr@rrr_set_pin9szDebuggedApplication._set_pincCs"t|dst|j\|_|_|jS)zThe name of the pin cookie.r)rr|rvrr)rLrrrpin_cookie_name?s z#DebuggedApplication.pin_cookie_nameccsd}y6|j||}x|D] }|VqWt|dr8|jWntk r t|dr^|jtd|jdd}x|jD]}||j|j<qvW||j|j<y|dddgWn"tk r|d j d Yn.Xt |j |}|j |j ||jd jddV|j|d YnXdS)z6Run the application and conserve the traceback frames.Ncloser T)skiprZignore_system_exceptionsz500 INTERNAL SERVER ERROR Content-Typetext/html; charset=utf-8X-XSS-Protectionr]z wsgi.errorszpDebugging middleware caught exception in streamed response at a point where response headers were already sent. )revalex_trustedrzutf-8r)rr)rr])rvrr ExceptionrrrrKrwriteboolcheck_pin_trustZ render_fullrrr log)rLrestart_responseZapp_iteritem tracebackframe is_trustedrrrdebug_applicationFs<           z%DebuggedApplication.debug_applicationcCst|jj|ddS)zExecute a command in a console.z text/html)mimetype)ResponserJeval)rLrequestcommandrrrrexecute_commandwsz#DebuggedApplication.execute_commandcCshd|jkrB|jdkri}n t|j}|jd|jt||jd<t|j|j}t t |j |dddS)zDisplay a standalone shell.rNrv)rrz text/html)r) rrdict setdefaultrvrIrrrerrr)rLrnsrrrrdisplay_console{s    z#DebuggedApplication.display_consolecCs|j}ttj|ddS)z/Paste the traceback and return a JSON response.zapplication/json)r)pasterjsondumps)rLrrrGrrrpaste_tracebacksz#DebuggedApplication.paste_tracebackc Csjtdt|}ytjt|}Wntk r6d}YnX|dk r^tj|dpPd}t||dStdddS) z0Return a static resource from the shared folder.ZsharedNrzapplication/octet-stream)rz Not Foundi)status) rrpkgutilget_data __package__r7 mimetypes guess_typer)rLrrAdatarrrr get_resources  z DebuggedApplication.get_resourcecCsr|jdkrdSt|j|j}| s,d|kr0dS|jdd\}}|jsLdS|t|jkr^dStjtt |kS)a!Checks if the request passed the pin test. This returns `True` if the request is trusted on a pin/cookie basis and returns `False` if not. Additionally if the cookie's stored pin hash is wrong it will return `None` so that appropriate action can be taken. NT|Fr ) r$rrfrsplitrgr%timePIN_TIMErs)rLrevaltsZpin_hashrrrrs z#DebuggedApplication.check_pin_trustcCs*tj|jdkrdnd|jd7_dS)NrZg@g?r )rsleepr)rLrrr_fail_pin_authsz"DebuggedApplication._fail_pin_authcCsd}d}|j|j}d}|dkr.|jd}nX|r8d}nN|jdkrHd}n>|jjd}|jjdd|jjddkr~d|_d}n|jt t j ||d d d }|r|j |j d ttjt|jfdd n|r|j|j |S)zAuthenticates with the pin.FNT r$rTrUr)auth exhaustedzapplication/json)rz%s|%s)httponly)rrerrrrfr0rr$rrr set_cookierrsrr%Z delete_cookie)rLrrrtrust bad_cookieZ entered_pinrGrrrpin_auths6     zDebuggedApplication.pin_authcCs2|jr*|jdk r*tddtdd|jtdS)zLog the pin if needed.Nrz= * To enable the debugger you need to enter the security pin:z * Debugger pin code: %srU)rr$rr)rLrrrlog_pin_requests z#DebuggedApplication.log_pin_requestc Csjt|}|j}|jjddkr4|jjd}|jjd}|jjd}|jj|jjdtd}|jj|jjdtd} |d kr|r|j||}n|d kr|d k r||jkr|j ||}n||d kr||jkr|j |}n^|d kr||jkr|j }nB|j r`|d k r`| d k r`|j|kr`|j |r`|j||| }n,|j r`|jd k r`|j|jkr`|j|}|||S)zDispatch the requests.Z __debugger__yescmdr?stb)typeZfrmresourcerNZpinauthZprintpin)Requestrrrfrrsrrrrrrrrrrpathr) rLrerrresponserargrrrrrr__call__s6            zDebuggedApplication.__call__)Fr~rNFNTT)rOrPrQrRrNrrpropertyr$rrrrrrrrrrrrrrrr}s0 %  1 / r}iiQi: )-rRrjr!rrrdrr4rmrrp itertoolsros.pathrr_compatrZ _internalrhttprsecurityr Zwrappersr rr rrJr reprrrZtbtoolsrrrr%rFrHobjectrIr|r}rrrr s>             K S