"j dZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlmZddlmZmZddlmZddlmZddlmZmZmZmZddlmZdd lmZdd l m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*dd l+m,Z,m-Z-m.Z.m/Z/m0Z0d Z1d Z2ejfe2Z4djke jlddDcgc] }e7| c}Z8e jrZ:deZ;de8Z<GddZ=dee7de>fdZ?dZ@dZAdZBddZCddZDddddeEfdZFe=fddd ZGdd!d"ZHdd#dd$d%ZId&ZJd'ZKd(dd)d*e7de7fd+ZLdd,ZMdd-ZNdd.ZOd/ZPd0ZQd1ZRdd2d3ZSd4ZTd5ZUdd#d6d7ZVdd8d9ZWdd*e7d:e7d;e>de7fd<ZXd=ZYd>ZZd?Z[d@Z\dAZ]dBZ^dCZ_dDdEdFZ`dGZadHZbd#dd#d#dIdJZcd#d#d#dKdLZddMZedNZf ddddd#dOdPZgGdQdRZhdSZidTe7de7fdUZjdTe7dee7fdVZkdWe7dXe7de>fdYZldZZmdd[Zndd\Zodd]d^Zpd_Zqddd`daZrdbZsdcZtddZudeZvddfdgZwdhZxdiZye jdjZ{e jdkZ|dlZ}dmZ~e jdne jZdoZdpZe jdqZe jdrZe jdsZe jdtZduZdvZdwdwdxdydzdzd{Zdd|e7d}eede7fd~Zycc}w)z. Miscellaneous support functions for WsgiDAV. N)deepcopy) formatdate parsedate)md5)pformat)DictIterableOptionalTuple)quote) __version__) HTTP_BAD_REQUEST HTTP_CREATEDHTTP_NO_CONTENTHTTP_NOT_MODIFIEDHTTP_OKHTTP_PRECONDITION_FAILEDHTTP_RANGE_NOT_SATISFIABLEDAVError as_DAVErrorget_http_status_string)etreeis_etree_elementmake_sub_elementuse_lxml xml_to_bytesreStructuredTextwsgidav.zWsgiDAV/zPython/ceZdZdZy) NO_DEFAULTN)__name__ __module__ __qualname____doc__;/srv/dav/.venv/lib/python3.12/site-packages/wsgidav/util.pyr"r"Es r)r" min_versionreturnctj|krSdj|ddDcgc] }t|c}}t j d|dt dtdy y cc}w) z$Check for deprecated Python version.rNr z&Support for Python version less than `z` is deprecated (using )) stacklevelFT)sys version_infojoinstrwarningswarnPYTHON_VERSIONDeprecationWarning)r+smin_vers r*check_python_versionr;Isk +%((KO$%Q (    =sA(c.t|ttfS)zNReturn True for any string type (for str/unicode on Py2 and bytes/str on Py3).) isinstancer4bytesr9s r* is_basestringr@\s a#u &&r)c"t|tS)z>Return True for bytestrings (for str on Py2 and bytes on Py3).)r=r>r?s r*is_bytesrBas a r)c"t|tS)z8Return True for native strings (for str on Py2 and Py3).)r=r4r?s r*is_strrDfs a r)c@t|tur t||}|S)zLConvert a text string (unicode) to bytestring (str on Py2 and bytes on Py3).)typer>r9encodings r*to_bytesrIks Awe !X  Hr)c|t|turt||}|St|tur t|}|S)zGConvert data to native str type (bytestring on Py2 and unicode on Py3).)rFr>r4rGs r*to_strrKrs= Aw% 8  H a  F Hr)F)or_none raise_errorct}t|tur|}|St|tur4tttj|j d}|St |tttfrttt|}|S||rd}|S|rt|dt||S)N,, ) setrFr4mapstripsplitr=dictlisttuple TypeError)valrLrMress r*to_setr[{s %C CyC J cc #cii301 J C$e, -#c3-  J  J 3%r$s)-.. Jr))as_dictcl|r t||i}||SiS|t ur t||S|j d}|jd}||}|r|jd}t|tr||}ndt|ttfrA|jdr|jds td|dd}|t|}n t||}|r|S#ttttf$ricYSwxYw#ttttf$r|cYSwxYw#t$rwxYw) a2Return the value of a nested dict using dot-notation path. Args: d (dict): key_path (str): default (any): as_dict (bool): Assume default is `{}` and also return `{}` if the key exists with a value of `None`. This covers the case where suboptions are supposed to be dicts, but are defined in a YAML file as entry without a value. Raises: KeyError: ValueError: IndexError: Examples:: ... Todo: * k[1] instead of k.[1] )defaultrr[]z(Use `[INT]` syntax to address list items)get_dict_valueAttributeErrorKeyError ValueError IndexErrorr"rTpopr=rUrVrW startswithendswithintgetattr)dkey_pathr^r\rZseg_listsegvalues r*rcrcsD2  Hb9C/3 1r 1j  !!X. .~~c"H ,,q/C cFE ll1o eT "#JE e} ->>#&cll3.? !KLLa)C#c(OE s+  L;*jA I  *jA N ("  s3C&C& D D(&DDD%$D%( D3)in_placeclfd|s t|}|jD] }| |ry|S)Nct|tr'd|vrd|d<|jD] }| yt|tr!t|ts|D] }| yyy)Npasswordz )r=rUvaluesr r4)vele_purges r*ryzpurge_passwords.._purgesk a Q +* xxz s   8 $Z3-? s  .@ $r))rrv)rmrrrwrys @r*purge_passwordsrzs?  QK XXZq  Hr)T)msgrMrequiredc|sJdt|}|}|dur |}t}n/|r-t|}|j|}|j|}t|}g}|j|}|r/|j dj dj ||rB|j|}|r/|j dj dj ||r|r|jd||rB|r@|j dj dj |dj |nc|r0|j dj dj |n1|r/|j d j dj |d j |}|r t||Sy ) zCheck if `tags` only contains known tags. If check fails and raise_error is true, a ValueError is raised. If check passes, None is returned. zmust not be emptyTz Unknown: {!r}z', 'z Missing: {!r}rz"Required: ({!r}). Optional: ({!r})zRequired: ({!r})zOptional: ({!r}) N) r[rQunion differenceappendformatr3insertrf) tagsknownr{rMr|optionalrZunknownmissings r* check_tagsrs %%%5 5MEH45 (# H%##H- $?@%%d+  JJ--fkk'.BC D  JJq#   JJ4;;KK)6;;x+@   JJ)00X1FG H  JJ)00X1FG Hiin S/ ! r)cL|jtdjdS)zDConvert an environment variable to a WSGI 'bytes-as-unicode' string.surrogateescape iso-8859-1)encodefilesystemencodingdecode)us r*unicode_to_wsgirs" 88&(9 : A A, OOr)c$|jdS)zConvert a native string to a WSGI / HTTP compatible byte string. WSGI always assumes iso-8859-1 (PEP 3333). https://bugs.python.org/issue16679#msg177450 r)rr?s r* wsgi_to_bytesrs 88L !!r)zutf-8)rHfallbackr9c t|tur|j|S|jdj|S#t$r|r|cYSwxYw)aConvert a WSGI string to `str`, assuming the client used UTF-8. WSGI always assumes iso-8859-1. Modern clients send UTF-8, so we have to re-encode https://www.python.org/dev/peps/pep-3333/#unicode-issues https://bugs.python.org/issue16679#msg177450 r)rFr>rrUnicodeDecodeError)r9rHrs r*re_encode_wsgir(sV 7e 88H% %xx %,,X66  H s!AA AAct|ddS)zMReturn in rfc 1123 date/time format (pass secs=None for current date).FT)timeval localtimeusegmt)rsecss r*get_rfc1123_timerAs deD AAr)cTtjdtj|S)zReturn in RFC 3339 date/time format (pass secs=None for current date). RFC 3339 is a subset of ISO 8601, used for '{DAV:}creationdate'. See http://tools.ietf.org/html/rfc3339 z%Y-%m-%dT%H:%M:%SZtimestrftimegmtimers r*get_rfc3339_timerGs ==-t{{4/@ AAr)cTtjdtj|S)zCReturn in log time format (pass secs=None for current date).z%Y-%m-%d %H:%M:%Srrs r* get_log_timerPs ==,dkk$.? @@r)cHt|}|rtj|Sy)ahReturn the number of seconds since the epoch, for a date/time string. Returns None for invalid input The following time type strings are supported: Sun, 06 Nov 1994 08:49:37 GMT ; RFC 822, updated by RFC 1123 Sunday, 06-Nov-94 08:49:37 GMT ; RFC 850, obsoleted by RFC 1036 Sun Nov 6 08:49:37 1994 ; ANSI C's asctime() format N)_parse_gmt_timecalendartimegm) timestringresults r*parse_time_stringrUs#Z (F v&& r)c tj|dS#t$rYnwxYw tj|dS#t$rYnwxYw tj|dS#t$rYnwxYw t|S#t$rYywxYw)zMReturn a standard time tuple (see time and calendar), for a date/time string.z%a, %d %b %Y %H:%M:%S GMTz%A %d-%b-%y %H:%M:%S GMTz%a %b %d %H:%M:%S %YN)rstrptime Exceptionr)rs r*rrfs }}Z)DEE     }}Z)CDD     }}Z)?@@     $$    s? $$> A  A A$$ A0/A04 A?? B  B cddlm}m}|jdd}|jdxsi}|jdg}|g}|jd|}|jd |}t j ||}t j tj} | j|t jt} |d k\r | jtjn|dk(r | jtjni|d k(r | jtjnD|d k(r | jtj n| jtj"d | _| j&ddD]4} | j)| j+| j/| 6| j1| |dk\rm|D]h} | j3tdzs tdz| z} t j| j5} | jtjjy#t,$rYwxYw)a Initialize base logger named 'wsgidav'. The base logger is filtered by the `verbose` configuration option. Log entries will have a time stamp and thread id. **Note:** init_logging() is automatically called if an application adds ``"logging": { "enable": true }`` to the configuration. Module loggers ~~~~~~~~~~~~~~ Module loggers (e.g 'wsgidav.lock_man.lock_manager') are named loggers, that can be independently switched to DEBUG mode. Except for verbosity, they will inherit settings from the base logger. They will suppress DEBUG level messages, unless they are enabled by passing their name to util.init_logging(). If enabled, module loggers will print DEBUG messages, even if verbose == 3. Example initialize and use a module logger, that will generate output, if enabled (and verbose >= 2):: _logger = util.get_module_logger(__name__) [..] _logger.debug("foo: {!r}".format(s)) This logger would be enabled by passing its name to init_logging():: config.logging.enable_loggers = ["lock_manager", "property_manager", ] util.init_logging(2, enable_loggers) Log Level Matrix ~~~~~~~~~~~~~~~~ +---------+--------+---------------------------------------------------------------+ | Verbose | Option | Log level | | level | +-------------+------------------------+------------------------+ | | | base logger | module logger(default) | module logger(enabled) | +=========+========+=============+========================+========================+ | 0 | -qqq | CRITICAL | CRITICAL | CRITICAL | +---------+--------+-------------+------------------------+------------------------+ | 1 | -qq | ERROR | ERROR | ERROR | +---------+--------+-------------+------------------------+------------------------+ | 2 | -q | WARN | WARN | WARN | +---------+--------+-------------+------------------------+------------------------+ | 3 | | INFO | INFO | **DEBUG** | +---------+--------+-------------+------------------------+------------------------+ | 4 | -v | DEBUG | DEBUG | DEBUG | +---------+--------+-------------+------------------------+------------------------+ | 5 | -vv | DEBUG | DEBUG | DEBUG | +---------+--------+-------------+------------------------+------------------------+ r)DEFAULT_LOGGER_DATE_FORMATDEFAULT_LOGGER_FORMATverboser loggingenable_loggersNlogger_date_format logger_formatr/raFr)wsgidav.default_confrrgetr Formatter StreamHandlerr1stdout setFormatter getLoggerBASE_LOGGER_NAMEsetLevelDEBUGINFOWARNERRORCRITICAL propagatehandlersflushcloser removeHandler addHandlerrirS)configrrrlog_optsrrr formatterconsoleHandlerloggerhdlrelgs r* init_loggingrstWjjA&Gzz)$*H\\"2B7N!&:  !1C!7 8%+j8   z *F Mr)cX|jD]\}}t|tjjrh|j |}|!t |ttttfvr|j||<rt|j |i|||<|||<|SN) itemsr= collectionsabcMappingrrFboolfloatrkr4copy deep_update)rmrkrwprev_vals r*rrs 1 a00 1uuQxH4>dE35L#Lvvx!#155B<3!AaD  Hr)cddl}d|vrtd||jdd\}} |j|}t||}|S#t$r!}t j d|d|d}~wwxYw)zBImport a class from a module string, e.g. ``my.module.ClassName``.rNrz%Expected `path.to.ClassName` string: razDynamic import of z failed: ) importlibrfrsplit import_moduler_loggererrorrl)namer module_name class_namemoduler the_classs r*dynamic_import_classr*s $@IJJ"kk#q1K((5 +I   *4()A3?@ sA A6A11A6)expandrMcLfd}t|ddhd||jdxsg}|$t|ttfst d||jdxsi}|t|t st d| d}t|}tt||}|jD cic]\} } | || }} } ||i|}|D cgc]} | c} |jD cgc] \} } | d | c} } z} tjd j|d j| ||Scc} } wcc} wcc} } w#t$r:d |d |d} |rtj| tj!| YSwxYw)aImport a class and instantiate with custom args. Equivalent of ```py from my.module import Foo return Foo(bar=42, baz="qux") ``` would be ```py options = { "bar": 42, "baz": "qux" } => ``` Examples: # Equivalent of name = "my.module.Foo" from my.module import Foo return Foo(bar=42, baz="qux") cPr"t|r|jvr|S|S)z2Replace some string templates with defined values.)r@lower)rwrs r*_expandz*dynamic_instantiate_class.._expandQs) mA&1779+>!9 r)argskwargsz(Invalid class instantiation options for )r{Nz(Expected list format for `args` option: z*Expected dict format for `kwargs` option: =zInstantiate {}({}) => {}rPz Instantiate (z) failed)rrr=rWrVrfrUrrRrrdebugrr3rr exception)roptionsrrMrpos_argsrinstrrrwo disp_argsr{s ` r*dynamic_instantiate_classr:s.  6zl C {{6"(bHJx%$GCG9MNN [[ " (bF *VT":EgYOPP(4 Wh/0,2LLN;DAq!WQZ-;;(-f-%-.sV.%+\\^2 !Qqc1%L2    & - -j$))I:NPT U  K3</2 ZL'(;  MM#  # Ks< 5E EE " E,E E;E E ?F#"F#rct|turd|i}n|j}t|hddd|j d}t |||S)aImport a class and instantiate with custom args. Construct from class path, without constructor args: ```py dynamic_instantiate_class_from_opts("wsgidav.lock_man.lock_storage.LockStorageDict") ``` Construct with constructor args: ```py opts = { "class": "wsgidav.lock_man.lock_storage.LockStorageShelve", "kwargs": { "storage_path": "~/wsgidav_locks.shelve", } } dynamic_instantiate_class_from_opts(opts, expand=...) ``` class>rrrz#Invalid class instantiation options)r|r{r)rFr4rrrhr)rrrs r*#dynamic_instantiate_class_from_optsrsX& G}G$,,.# 1  W%J $Z HHr)prefix ignore_casec|r/|jj|js|S|j|s|S|t|dS)zDReplacement for str.removeprefix() (Py3.9+) with ignore_case option.N)rrilen)r9rr s r* removeprefixr sFwwy##FLLN3H||F#H S[] r)c|j||}t||kr |jdt||kr |S)zGSplit string, always returning n-tuple (filled with None if necessary).N)rTr r)r9sepmaxsplittoks r* save_splitrs= ''#x C c(h  4 c(h  Jr)c|dvry|jdsJ|jdjd\}}}|d|zfS)z!Return '/a/b/c' -> ('a', '/b/c').r#/)r#r#r)rilstrip partition)pathfirst_seprests r*pop_pathrsN y ??3   C(2237E4 3: r)cg}|jdD]C}|dvr|dk(r&|r|j ttd||j |Et j dg|}|jdr |dk7r|dz }|S)zAReturn the canonical URL path used for routing and authorization.r)r#rz..zPath escapes application root: )rTrhrrr posixpathr3rj)rpartspart normalizeds r*normalize_pathr!s E 3  9   4< $(Gv&N LL  ,e,J }}SjC/c r)cT|dvryt|\}}t|\}}||d|zfS)z$Return '/a/b/c' -> ('a', 'b', '/c').r)r#r#r#r)r)rrrseconds r* pop_path2r$s8 y4.KE4D>LFD 63: &&r)cxt|\}}|t|jd||jdfS)z,Return ('/a', '/b/c') -> ('b', '/a/b', 'c').r)rjoin_urirstrip) script_name path_infosegmentrs r* shift_pathr+s8Y'MGT Xk005w?SAQ RRr)cl|jdr d|vr|jdd\}}|dd|fSd|fS)zReturn (namespace, localname) tuple for a property name in Clark Notation. Namespace defaults to ''. Example: '{DAV:}foo' -> ('DAV:', 'foo') 'bar' -> ('', 'bar') {}raNr#)rirT) clark_namens localnames r*split_namespacer2sKS!cZ&7"((a0 I12 ""  r)c t|d}|S#t$r)tjd|dt|d}Y|SwxYw)zHConvert a binary string to Unicode using UTF-8 (fallback to ISO-8859-1).utf8zto_unicode_safe(z%) *** UTF-8 failed. Trying ISO-8859-1z ISO-8859-1)rKrfrr)r9rs r*to_unicode_safer5sS$ 1f  H $ (-RST 1l # H$s .AAbackslashreplaceerrorsc|sd}t|r$|j||j|}|S|j||j|}|S)u)Re-encode str or binary so that is compatible with a given encoding (replacing unsupported chars). We use ASCII as default, which gives us some output that contains ™ and 香 for every character > 127, for easier debugging. (e.g. if we don't know the encoding, see #87, #96) ASCIIr7)rBrr)r9 encoding_tor8s r*safe_re_encoder<s[  { HH[H 0 7 7 D H HH[H 0 7 7 D Hr)ct|r2|d}|D]&}t|tur t|}|d|zz }(|S|S)zReturn a string as hex dump.z: z%02x )rBrFr4ord)r9rZbs r* string_reprr@sS{Rj AAw#~F 7Q; C  SMr)cJtjj|d}|S)Nra)osrsplitext)rexts r*get_file_extensionrE#s ''  4  #C Jr)) thousands_seprbase1024 append_bytescd}d}|r6d}|r|dk\r&|dz }|dz }|dk\rn|dk\r|dz }|dz}|dk\rgd|}|r |dk(rd }nd }|r |dk\s|r|d }n t|}|||S) z1Convert bytes into human-readable representation.r#rira ig@@)r#KMGTPz Bytez Bytesz,d)r4) numberrFrrGrH magsuffix bytesuffix magnitudesnums r*byte_number_stringrU(sIJ D.Q 2D.D.Q & D. 2)<  Q; J!J&D.I6{VI;zl ++r)) expand_vars must_exist allow_nonec|dvr|rytd|tjj|s|stj}nXt |t urG|jd}|r tjj|}ntj}tjjtjj||}|r2Kww{3yy{wwrww||D$78ww!!"''"4"4T":;"''...>$233 Kr)c l tdt|jddS#t$rYywxYw)zDReturn a positive CONTENT_LENGTH in a safe way (return 0 otherwise).rCONTENT_LENGTH)maxrkrrf)environs r*get_content_lengthrjus71c'++&6:;<< s $' 33c|jds|jdryt|}|dk\sJ|dk(ryd}d|d<|rd|d<|d}t|drnt|d rb|jdk(rR|jdkDrB|r |j}nd}|j |}t jd |d |dd d yyyt|drt|jdrx |j}|j}|jd |r|}nd}|j |}t jd |d|dd d |j|yyy#t$r%}t jdd|Yd}~=d}~wwxYw#t$r-t jdtjYywxYw)aoRead 1 byte from wsgi.input, if this has not been done yet. Returning a response without reading from a request body might confuse the WebDAV client. This may happen, if an exception like '401 Not authorized', or '500 Internal error' was raised BEFORE anything was read from the request stream. See GC issue 13, issue 23 See http://groups.google.com/group/paste-users/browse_frm/thread/fc0c9476047e9a47?hl=en Note that with persistent sessions (HTTP/1.1) we must make sure, that the 'Connection: closed' header is set with the response, to prevent reusing the current stream. zwsgidav.some_input_readwsgidav.all_input_readNrTra wsgi.input _consumedlengthzReading z= bytes from potentially unread httpserver.LimitedLengthFile: 2z..._sock settimeoutz* bytes from potentially unread POST body: z-> read z bytes failed: z--> wsgi_input.read(): )rrjhasattrrnroreadrrrq gettimeoutrrOSErrorrrr1exc_info) riclREAD_ALL wsgi_inputnbodysocktimeoutses r*read_and_discard_inputrs {{,-=U1V G $B 7N7 QwH)*G %&,-()&Jz;'GJ,I   1 $):):Q)>%%??1%D MM1#Z[_`cac[dZggjk *? $ W %'*2B2BL*Q F##Doo'G OOA  AAA!q) qc!KDQTRTI=X[\ OOG $++R %" A ?2$?@@ A  F MM3CLLN3CD E Fs<,-F7E%F% F.F FFF3G  G  src_exception err_condition add_headersadd_bodyct|tr t|}nt||||||}tj d|j |)z$Wrapper to raise (and log) DAVError.rzRaising DAVError )r=rrrrr get_user_info)rq context_inforrrrrs r*failrsW%#     ''#   MM%aoo&7%89: Gr)cVeZdZfdZedZedZedZddZxZ S)SubAppStartResponsecLd|_g|_d|_t|yrZ)_SubAppStartResponse__status&_SubAppStartResponse__response_headers_SubAppStartResponse__exc_infosuper__init__)self __class__s r*rzSubAppStartResponse.__init__s$ "$ r)c|jSr)rrs r*statuszSubAppStartResponse.statuss }}r)c|jSr)rrs r*response_headersz$SubAppStartResponse.response_headerss&&&r)c|jSr)rrs r*rwzSubAppStartResponse.exc_infos r)c.||_||_||_yr)rrr)rrrrws r*__call__zSubAppStartResponse.__call__s "2"r)r) r$r%r&rpropertyrrrwr __classcell__)rs@r*rrsI''#r)rcZdj|}|s|S|jddz|zS)zEAppend segments to URI. Example: join_uri("/a/b", "c", "d") r)r3r')urisegmentssubs r*r&r&s2 ((8 C  ::c?S 3 &&r)rcH|jdjddS)z,Return local name, i.e. last segment of URI.rrb)rSrTrs r* get_uri_namers 99S>   $R ((r)c||r|jdk(ry|jdjddddzS)zReturn URI of parent collection with trailing '/', or None, if URI is top-level. This function simply strips the last segment. It does not test, if the target is a 'collection', or even exists. rNrar)rSr'rrs r*get_uri_parentrs< #))+$ ::c? ! !#q )! ,s 22r) parent_uri child_urict|xr?t|xr2|jdj|jddzS)zReturn True, if child_uri is a child of parent_uri. This function accounts for the fact that '/a/b/c' and 'a/b/c/' are children of '/a/b' (and also of '/a/b/'). Note that '/a/b/cd' is NOT a child of 'a/b/c'. r)rr'rirrs r* is_child_urir)sM Z K O K   S ! , ,Z->->s-Cc-I Jr)c||xr9|xr5|jddzj|jddzS)zReturn True, if child_uri is a child of parent_uri or maps to the same resource. Similar to _ , but this method also returns True, if parent equals child. ('/a/b' is considered identical with '/a/b/'). r)r'rirs r*is_equal_or_child_urir7sI  S  S   c "S ( 4 4Z5F5Fs5Kc5Q Rr)cz|ddz}|jdr ||dz }n7||dz }|ddk(r|ddk7r|d|dzz }n|dd k7r |d|dzz }|t|jd d z }|<|t|jd d z }|jd r |d|d zz }|S||z }|S)zsURL reconstruction according to PEP 333. @see https://www.python.org/dev/peps/pep-3333/#url-reconstruction zwsgi.url_schemez:// HTTP_HOST SERVER_NAMEhttps SERVER_PORT443:80 SCRIPT_NAMEr# PATH_INFO QUERY_STRING?)rr )ri local_uriurls r*make_complete_urlrDs # $u ,C{{; w{## w}%% $ % 0}%.sW]333}%-sW]3335]B/ 00C uW[[b122 ;;~ & 300 0C J y Jr)c"|Dcic]\}}|j||f}}}t|D]0\}\}}|j|jd}|,|||<2|jD]} |j | ycc}}w)z@Modify or append new headers to existing header list (in-place).N)r enumeraterhrvr) target new_itemsrrwnew_dictidxr_valuenew_valrqs r*update_headers_in_placeras.78da Aq6!8H8(0"^dF,,tzz|T2  !F3K"" e 9sB ) allow_emptyc |jddj}|dk(rd}nC t|}|dkrttd |dk(rd}n|dj |}d|d <|dk(r|ryttd  tr,tj|tjd  }ntj|}|jdrAtjdj|dt!t#|dd |d<|S#t $rttddwxYw#t$r}ttd|dd}~wwxYw)aRead request body XML into an etree.Element. Return None, if no request body was sent. Raise HTTP_BAD_REQUEST, if something else went wrong. TODO: this is a very relaxed interpretation: should we raise HTTP_BAD_REQUEST instead, if CONTENT_LENGTH is missing, invalid, or 0? RFC: For compatibility with HTTP/1.0 applications, HTTP/1.1 requests containing a message-body MUST include a valid Content-Length header field unless the server is known to be HTTP/1.1 compliant. If a request contains a message-body and a Content-Length is not given, the server SHOULD respond with 400 (bad request) if it cannot determine the length of the message, or with 411 (length required) if it wishes to insist on receiving a valid Content-Length." So I'd say, we should accept a missing CONTENT_LENGTH, and try to read the content anyway. But WSGI doesn't guarantee to support input.read() without length(?). At least it locked, when I tried it with a request that had a missing content-type and no body. Current approach: if CONTENT_LENGTH is - valid and >0: read body (exactly bytes) and parse the result. - 0: Assume empty body and return None or raise exception. - invalid (negative or not a number: raise HTTP_BAD_REQUEST - missing: NOT: Try to read body until end and parse the result. BUT: assume '0' - empty string: WSGI allows it to be empty or absent: treated like 'missing'. rgr#rzNegative content-length.zcontent-length is not numeric.NrmrarlzBody must not be empty.F)resolve_entities)parserzInvalid XML format.)rzwsgidav.dump_request_bodyz{} XML request body: {}REQUEST_METHODTpretty)rrSrkrrrfrtrrXML XMLParser fromstringrrinforrKr)rirclHeader requestbodycontent_lengthrootELrs r*parse_xml_bodyrss|L{{+R0668H2~   Y ]N!/1KLL" Q K!,/44^DK01G, -b +-FG G  YYEOOU$KF%%k2F{{./ & - -()|F489  05+, MK Y+-MNTX X Y,  31  s$ D AD> D;> EEEc J|dddtfdt|fgdgS)4Start a WSGI response for a DAVError or status code.z301 Moved PermanentlyContent-Length0DateLocationr))rr )ristart_responselocations r*send_redirect_responsers8 # %' ( x )  5Lr))ris_headc t|}g}|r|j|t|tr'|jr|j|j|t t fvr||ddtfg|zdgS|ttfvr t|}t|tsJ||j\}}|rd}t|sJ|||d|fdtfdtt|fg|z|gS)rrrr) Content-Typer)rextendr=rrrrrrrget_response_pagerBr4r ) rirrrrrheaders content_typer|s r*send_status_responsers$A &FG{#!X1==q}}%   00 ,v7G7I.JKgU u Wl ## QK a "%A% ",,.L$ D>4> \ * %' ( s3t9~ .    6Mr)c |jdr.dj|dtt|d}||d<t|d}t |sJ|ddt fd t t|fg}|d ||gS) Nzwsgidav.dump_response_bodyz{} XML response body: {}rTrF)rzapplication/xml; charset=utf-8rrz207 Multi-Status)rrrKrrBrr4r )rirmultistatus_elemxmlxml_datars r*send_multi_status_responsers{{/0)00 $ % < 0> ? 14,- ,U;H H 'x'  ; !#$ 3s8}-.G%w/ :r)cd}i}i}i}|D]u\}}d} t|tr t|} d}t|\} } | dk7r| |vr| dk7rd|| <| |d|<|dz }|j | gj ||fwt |d| } |tj| d _ |D]} tj| d } tj| d }|| D]_\}}|tj||t|r|j | element to element. node depends on the value type: - str or unicode: add element with this content - None: add an empty element - etree.Element: add XML element as child - DAVError: add an empty element to an own for this status code @param multistatus_elem: etree.Element @param href: global URL of the resource, e.g. 'http://server:port/path'. @param prop_list: list of 2-tuples (name, value) raz200 OKNzDAV:r#TNSz{DAV:}response)nsmapz {DAV:}hrefz{DAV:}propstatz {DAV:}propz HTTP/1.1 z {DAV:}status) r=rrr2 setdefaultrrr SubElementtextrr5)rhref prop_listnsCountnsDictnsMappropDictrrqrr0_ responseEL propstatELpropELs r*add_property_responser3sG F EH > e eX &+E2FE %A $""24DERJ7;EZ.3 Q%%j2BC !!*l;#F+ MKD%}  .!%( e$ 7Fe6L  .3 M?Hx"` header. Note that we also reject weak entity tags (W/""), since WebDAV servers commonly use strong ETags. N"W/Invalid ETag format: ''.)rSrirf)etagrXs r* checked_etagr sG |  ::? 77>>+ ,9~'')) GG% &E ||w9~'')*!E$--,@+A5CVBW X K $%QuT]]';&Q=RS Kr)z(([0-9]+)-([0-9]*))z (-([0-9]+))c g}|jd}|D]}d}|stj|}|rt|j d}||k\rt t d|d|ddd|fg |j d d k(r|d z }nt|j d }||kr$||kr||k\r|d z }|j||fd }|rtj|}|s|t|j dz }|dkrd}|d z }|j||fd }|jg} d} t|dkDr|j\} } t|} | dkDrE|| d z \}}|| d z ks||d zkDrnt| |} t| |} || d z =| d z } | dkDrE| j| | | | z d zf| | z| z d z} t|dkDr| | fS)ap See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Range Return tuple (range_list, total_length) range_list content ranges as values to their parsed components in the tuple (seek_position/abs position of first byte, abs position of last byte, num_of_bytes_to_read) total_length total length for Content-Length rOFr/z)Requested range starts behind file size (z >= r.z Content-Rangezbytes */)rr r#raTr)rTreByteRangeSpecifiersearchrkgrouprrrreSuffixByteRangeSpecifiersortr rhminrh) range_headerfilesize list_rangesrequest_rangessubrange is_matchedmatch range_start range_end list_ranges_2 total_length rfirstposrlastposcounter nfirstposnlastposs r*obtain_content_rangesr2sNK!'',N"$" (//9E!%++a.1 (*2CK=PTU]T^^_`&5(7L%M$N ;;q>R' (1 I!$EKKN 3I)+ h0F H,$,qL && Y'?@!%J.55h?E&U[[^)<< ?"#K$qL ""K#;<! I$"NML k Q  + 1Hk"k$/! $< !Y)a-'9x!|+C 95 x2! ,kGk i8i3G!3KLM#h.:Q>  k Q  < ((r)izsecond\-([0-9]+)cd}|jd}|D]e}|j}|jdk(rytj |}|D]$}t |}|t kDry|dk7s |ccSgy)z-Return -1 if infinite, else return numofsecs.rrOinfiniterbN)rTrSrreSecondsReaderfindallrkMAX_FINITE_TIMEOUT_LIMIT) timeoutvalue timeoutsecstimeoutvaluelist timeoutspeclistSRrs r*read_timeout_value_headerr=)sK#))#.' ' !'')    * ,$,,[9F '!$i !99!#&&  ' ' r)cT|syd|vrG|jr7t|d}d}|D]}||k(s|dk(sd}n|sttdd}d|vr'|j rt |d}|r||kDrd}d} d|vrZ|jrJt|d}|D]5}||k(s|dk(s|d d vr|stt d ttd d} d |vr5|j r%t |d } | r| |krttd|r| stt dy)aeHandle 'If-...:' headers (but not 'If:' header). If-Match @see: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.24 Only perform the action if the client supplied entity matches the same entity on the server. This is mainly for methods like PUT to only update a resource if it has not been modified since the user last updated it. If-Match: "737060cd8c284d8af7ad3082f209582d" If-Modified-Since @see: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.25 Allows a 304 Not Modified to be returned if content is unchanged If-Modified-Since: Sat, 29 Oct 1994 19:43:31 GMT If-None-Match @see: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.26 Allows a 304 Not Modified to be returned if content is unchanged, see HTTP ETag If-None-Match: "737060cd8c284d8af7ad3082f209582d" If-Unmodified-Since @see: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.28 Only send the response if the entity has not been modified since a specific time. N HTTP_IF_MATCHF*Tz If-Match header condition failedHTTP_IF_MODIFIED_SINCEHTTP_IF_NONE_MATCHr)GETHEADzIf-None-Match header failedz%If-None-Match header condition failedHTTP_IF_UNMODIFIED_SINCEz+If-Unmodified-Since header condition failedz)If-Modified-Since header condition failed) support_etagr rrsupport_modifiedrr) dav_res last_modified entity_tagri token_listr(tokenifModifiedSinceFailed ifmodtimeignoreIfModifiedSince ifunmodtimes r*evaluate_http_conditionalsrQAs0 '!g&:&:&<*7?+CD  E "esl 35WX X"7*w/G/G/I%g.F&GH ]2$( !"w&7+?+?+A*73G+HI  E "esl,-@1"#46STT,.U !%!W,1I1I1K'0J(KL ;6(*W %:(*UVV r)z(\<([^>]+)\>)|(\(([^\)]+)\))z\<([^>]+)\>([^<]+)z \(([^)]+)\)z(\S+)c d|vryd|vr d|d<g|d<y|dj}|jdsd|z}tg}g}d}tj |D]\}}}}|dk7r|}g} d } t j |D]} | j d k7rx| jd r$| j| d | jd fnC| j| d| jdf|j| jd| j d k7} ||vr||} ng} | ||<| j| ||d<||d<tjdt|y)zParse HTTP_IF header into a dictionary and lists, and cache the result. @see http://www.webdav.org/specs/rfc4918.html#HEADER_If zwsgidav.conditions.ifNHTTP_IFzwsgidav.ifLockTokenListr@r#TNOTr_entityz"[] locktokenz<>zparse_if_header_dict ) rSrirU reIfSeparatorr6reIfTagListContentsupperrrrr) riiftextifDict ifLockList resource1 tmpURLVarURLVar_tmpContentVar contentVarlistTagContentstestflaglistitemlistTags r*parse_if_header_dictrgs ')+/'(-/)* Y  % % 'F   S ! "XFJI9F9N9Nv9V ,5 6>: ?I OH/77 C 5>>#u,**3/'.. ( ( (u 5(.. ( + (t 4#))(..*>?#>>+u4' 5*F" +$+y! NN? +A ,D(.G #$)3G %& MM*76?*;<= r)c >tjd|d|d|d||vr||}n d|vr|d}ny|j}|D]?}d}|D]2\} } } | dk(r|r|| k(} n| dk(r| } n | dk(r| |v} nd} | | k(} | r0d}n|r?ytjd y) Nztest_if_header_dict(rPr.r@TFrVrWz -> FAILED)rrrF)rHif_dictfullurllocktoken_listrJlistTestsupportEntityTag listTestConds matchfailedrd checkstyle checkvalue testresult checkresults r*test_if_header_dictrts MM( N3C2j\QRST'7# 3<++-!  0=  ,Hj*X%*:':5 x'% {*'>9 ! $0K"  #$ MM- r)z audio/oggz video/oggz video/webmzapplication/yaml)z.ogaz.oggz.ogvz.webmz.ymlz.yamlrrcFtj|\}}|r|jdnd}|sRtjj |d}t j|}tjd|d||sd}|jdr |r|d|z }|S) zUse the mimetypes module to lookup the type for an extension. This function also adds some extensions required for HTML5 default_charsetNraz mimetype(z): zapplication/octet-streamztext/z ; charset=) mimetypes guess_typerrBrrC _MIME_TYPESrrri)rrmimetype _mimeencodingrvrDs r*guess_mime_typer| s !* 4 4S 9X}8?gkk"34TO ggs#A&??3' #c(45 -7#j 122 Or))r4r)F)r,N)r'rrcollections.abcrrrwrBrrerr1rr5rr email.utilsrrhashlibrpprintrtypingrr r r urllib.parser rr wsgidav.dav_errorrrrrrrrrrrwsgidav.xml_toolsrrrrr __docformat__rrrr3r2r4r7getfilesystemencodingrpublic_wsgidav_infopublic_python_infor"rr;r@rBrDrIrKrQr[rcrzrrrrrrrrrrrrrrrr rrr!r$r+r2r5r<r@rErUrerjrrrr&rrrrrrrrrrrrrr r rcompilerrr2r7Ir5r=rQrX reIfHeader reIfTagListrYrgrtryr|r?s0r*rs    -22   #  '  , -3+;+;BQ+?@a3q6@A.S..0 ! .~./   eCj T &'     !e  )3:u:@$) ,$(TE2pP"(/c32B BA "Fy x9>  .  >BtGT<@INC4C,'S  .@ &  "UTPT$,N)-$ L(GFX   8##>')c)c) 33 3 S S T  :  $,1YN 04U(V@=QJ &+",L"rzz"78'RZZ 6G)^3"**0"$$70S l :; RZZ- . bjj(  bjj*: zR       x~k6As=K