3 []2 @s dZddlmZddlmZddlmZddlmZddlmZddl m Z dd l m Z ydd l mZWn ek rdd lmZYnXGd d d eZGd ddeZdddZGdddeZGdddeZGdddeZeGdddeZGdddeZdS)a WSGI Protocol Linter ==================== This module provides a middleware that performs sanity checks on the behavior of the WSGI server and application. It checks that the :pep:`3333` WSGI spec is properly implemented. It also warns on some common HTTP errors such as non-empty responses for 304 status codes. .. autoclass:: LintMiddleware :copyright: 2007 Pallets :license: BSD-3-Clause )warn)implements_iterator)PY2) string_types)Headers)is_entity_header) FileWrapper)urlparsec@seZdZdZdS) WSGIWarningz Warning class for WSGI warnings.N)__name__ __module__ __qualname____doc__rrr?)r:hasattrr6r'r;sumr2getintlowerrrrr )r status_codeheadersZ bytes_sentcontent_lengthkey_valuerrrr's8       zGuardedIterator.closec Cs.|js*ytdtWntk r(YnXdS)Nz4Iterator was garbage collected before it was closed.)r:rr Exception)rrrr__del__s  zGuardedIterator.__del__N)r r rrr&r9r'rNrrrrr5s  'r5c@s@eZdZdZddZddZddZdd Zd d Zd d Z dS)LintMiddlewareaWarns about common errors in the WSGI and HTTP behavior of the server and wrapped application. Some of the issues it check are: - invalid status codes - non-bytestrings sent to the WSGI server - strings returned from the WSGI application - non-empty conditional responses - unquoted etags - relative URLs in the Location header - unsafe calls to wsgi.input - unclosed iterators Error information is emitted using the :mod:`warnings` module. :param app: The WSGI application to wrap. .. code-block:: python from werkzeug.middleware.lint import LintMiddleware app = LintMiddleware(app) cCs ||_dS)N)app)rrPrrrrszLintMiddleware.__init__c Cst|tk rtdtddx&dD]}||kr td |tddq W|ddkr\tdtdd|jdd}|jdd}|r|ddkrtd|tdd|r|ddkrtd|tdddS)Nz/WSGI environment is not a standard Python dict.)rREQUEST_METHOD SERVER_NAME SERVER_PORT wsgi.version wsgi.input wsgi.errorswsgi.multithreadwsgi.multiprocess wsgi.run_oncez%Required environment key %r not foundrrrz"Environ is not a WSGI 1.0 environ.Z SCRIPT_NAMEZ PATH_INFO/z-'SCRIPT_NAME' does not start with a slash: %rz+'PATH_INFO' does not start with a slash: %r) rRrSrTrUrVrWrXrYrZ)rr)rdictrr rE)renvironrK script_nameZ path_inforrr check_environsD     zLintMiddleware.check_environcCsjtd||jddd}t|dks0|j r@ttdddt|dksX|ddkrhttd ddt|}|d krttd ddt|tk rttd ddx|D]z}t|t k st|d krttddd|\}}t|t k st|t k rttddd|j dkrttdddqW|dk rPt |t  rPttdddt |}|j|||fS)Nstatusrrrz Status code must be three digits)rrQ zeInvalid value for status %r. Valid status strings are three digits, a space and a status explanationr@zstatus code < 100 detectedzheader list is not a listrz Headers must tuple 2-item tupleszheader items must be stringszFThe status header is not supported due to conflicts with the CGI spec.zinvalid value for exc_info)rsplitr isdigitrr rFrlisttuplerrG isinstancer check_headers)rrarIexc_inforHitemnamevaluerrrcheck_start_responses<      z#LintMiddleware.check_start_responsecCs|jd}|dk rz|jd rB|jdr6ttddd|dd}|dd|ddkodd knszttd dd|jd }|dk rt|jsttd dddS)NetagW/w/z%weak etag indicator should be upcase.rQ)rrr"zunquoted etag emitted.locationz*absolute URLs required for location header)rorp)rE startswithrrr netloc)rrIrnrrrrrrhHs     (  zLintMiddleware.check_headerscCst|trtdtdddS)NzThe application returned astring. The response will send one character at a time to the client, which will kill performance. Return a list or iterable instead.r)r)rgrrr )rapp_iterrrrcheck_iteratoras  zLintMiddleware.check_iteratorcst|dkrtdtdd|r,tdtdd|\}j|t|d|d<t|d|d<t|d<ggfdd }j||}j|t |S) NrzA WSGI app takes two arguments.)rz+A WSGI app does not take keyword arguments.z wsgi.inputz wsgi.errorszwsgi.file_wrappercst|dkr"tdt|tdd|r0tdt|dd\}}t|dkrV|d}nd}j|||dd<t|||S)Nrrz1Invalid number of arguments: %s, expected 2 or 3.)rz1'start_response' does not take keyword arguments.)rr)r rr rmr/)r"kwargsrarIri)r2r;rstart_responserrchecking_start_responses     z8LintMiddleware.__call__..checking_start_response) r rr r`rr(r rPrwr5)rr"rxr^rzrvr)r2r;rryrr4ks      zLintMiddleware.__call__N) r r rrrr`rmrhrwr4rrrrrOs,0 rON)r)rwarningsr_compatrrrZdatastructuresrhttprZwsgir urllib.parser ImportErrorWarningr rrobjectrr(r/r5rOrrrrs(        4 P