^cl#ddlZddlZddlZddlZddlZddlmZmZddlm Z mZm Z m Z e j Z dZ dZdZdZd Zd Zd Zd Zd ZdZdZdZdZegZGddeZGddZdZddZdZ dZ!dZ"dZ#d dZ$dZ%dZ&dS)!N)getattropen)encodingpycompat templaterutili0iiiiiiiic|dgkp||vS)zCheck if username is a member of userlist. If userlist has a single '*' member, all users are considered members. Can be overridden by extensions to provide more complex authorization schemes. *)uiusernameuserlists 8/usr/lib/python3/dist-packages/mercurial/hgweb/common.pyismemberr*s v  5X!55c|j}|dd}|r2|rt|jj||rt t d|dd}|r0t|jj||st t d|dkr|jst t d|dks|dS|dkr#|jd krd }t t|n"|jd krd }t t|| dd r |j dkrt td|dd}|r2|rt|jj||rt t d|dd}|rt|jj||st t ddS)zCheck permission for operation based on request data (including authentication info). Return if op allowed, else raise an ErrorResponse exception.webs deny_readsread not authorizeds allow_readspullspull not authorizedNsuploadsPUTsupload requires PUT requestsPOSTspush requires POST requestspush_sslshttpss ssl requireds deny_pushspush not authorizeds allow-push) remoteuser configlistrrepor ErrorResponseHTTP_UNAUTHORIZED allowpullmethodHTTP_METHOD_NOT_ALLOWED configbool urlschemeHTTP_FORBIDDEN) hgwebreqopuser deny_read allow_readmsgdenyallows r checkauthzr+4s >D  66IG$G(5:=$ "J"JG-/EFFF!!&-88JG8EJM4DDG-/EFFF W}}U_}-/EFFF w"* Y :  0C 7== =  w  +3S999  ,,=(1J1JNO<<<   FL 1 1D GTGXejmT4@@G-/EFFF   V] 3 3E Ghuz}dE::G-/EFFFGGrceZdZddZdS)rNc|t|}t|tj|||_|g}||_||_dSN)_statusmessage Exception__init__rsysstrcodeheadersmessage)selfr3r5r4s rr1zErrorResponse.__init__ksW ?$T**G4!9!9::: ?G  r)NN)__name__ __module__ __qualname__r1rrrrrjs(rrc&eZdZdZdZddZdZdS)continuereadera.File object wrapper to handle HTTP 100-continue. This is used by servers so they automatically handle Expect: 100-continue request headers. On first read of the request body, the 100 Continue response is sent. This should trigger the client into actually sending the request body. c0||_||_d|_dS)NF)f_write continued)r6r=writes rr1zcontinuereader.__init__s rc||jsd|_|d|j|S)NTsHTTP/1.1 100 Continue )r?r>r=read)r6amts rrCzcontinuereader.reads:~ :!DN KK8 9 9 9v{{3rcB|dvrt|j|St)N)sclosesreadlines readliness__iter__)rr=AttributeError)r6attrs r __getattr__zcontinuereader.__getattr__s& E E E464(( (rN)rA)r7r8r9__doc__r1rCrHrrrr;r;vsP     rr;ctjj}tj||ddS)N)Errorz Unknown errorr) httpserverbasehttprequesthandler responsesrbytesurlget)r3rNs rr/r/s21;I  Y]]41KLLQO P PPrc.d||pt|fzS)Ns%d %s)r/)r3r5s r statusmessagerRs tW<t(<(<= ==rctj||}tj|rtj|Stj|S)z%stat fn if it exists, spath otherwise)ospathjoinexistsstat)spathfncl_paths rget_statr\sKgll5"%%G w~~gwwwu~~rcBt|dtjS)Ns 00changelog.i)r\rXST_MTIME)rYs r get_mtimer_s E+ , ,T] ;;rc|d}|D]H}|dtjtjfvs(tj|vstjtj|vrdSIdS)z9Determine if a path is safe to use for filesystem access./rNFT)splitroscurdirospardirosseposaltsep)rUpartsparts r ispathsaferisk JJt  E S(+X->? ? ?~%% ,!T))55 4rct|sdS|s7|ptj}| tj|d}tjj|d}tjtj tj |dpd}tj||} tj |t|d5}|} dddn #1swxYwYn#t$rt!t"dt$$rZ} | jt&jkrt!t*t!t"t-j| jd} ~ wwxYw||jd<|| |S) a+return a file inside directory with guessed Content-Type header fname always uses '/' as directory separator and isn't allowed to contain unusual path components. Content-Type is guessed using the mimetypes module. Return an empty string if fname is illegal or file not found. Nsstaticrarz text/plainsrbsillegal filenames Content-Type)rir templatedirrTrUrVrbrsysbytes mimetypes guess_typefsdecoderXrrC TypeErrorrHTTP_SERVER_ERROROSErrorerrnoENOENTHTTP_NOT_FOUNDr strtolocalstrerrorr4 setbodybytes) templatepath directoryfnamerestpfpathctrUfhdataerrs r staticfilers e   4  4Y244 > R33I GL%++d++ ,E  X.u5566q9J]  B 7<< 5 ) )D   $   "7799D                DDD-/BCCC  9 $ $// /!8#6s|#D#D  $&CK T Js=$D#6D D#DD#DD##(F% AF  F%c#rK|r|r||z|z}||z|zdz}nd}d} |V|dz }|r ||krd|z }d})z5count parity of horizontal stripes for easier readingrr) stripecountoffsetcountparitys r paritygenrsvv%4&;6:     5K//ZFE rct|ddp,|ddp tjdpdS)zReturn repo contact information or empty string. web.contact is the primary source, but if that is not set, try ui.username or $EMAIL as a fallback to display something useful. rscontactsuisusernamesEMAILr)renvironrP)configs r get_contactrsO vz""  6% % %      ) )   rcddl}|ddd}d}|rXd|vrTtj|jd}|d|}||fS) aObtain the Content-Security-Policy header and nonce value. Returns a 2-tuple of the CSP header value and the nonce value. First value is ``None`` if CSP isn't enabled. Second value is ``None`` if CSP isn't enabled or if the CSP header doesn't need a nonce. rNrscspF) untrusteds%nonce%=)uuidrbase64urlsafe_b64encodeuuid4bytesrstripreplace)rrcspnonces r cspvaluesrs.KKK ))FFe) 4 4C E -zS  ();<<CCDIIkk*e,, :rr.)r)'rrsrmrTrXrrrrrr rLHTTP_OK HTTP_CREATEDHTTP_NOT_MODIFIEDHTTP_BAD_REQUESTrr!rurHTTP_NOT_ACCEPTABLEHTTP_UNSUPPORTED_MEDIA_TYPErqrr+ permhooksr0rr;r/rRr\r_rirrrrrrrrs  _  !666)G)G)GfL      I   4QQQ >>>><<<   &&&R"   """""r