CasperSecurity
o
_�Kj,Z � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlmZ d dl m
Z
d dl m Z d dl Z
d dlmZ d dl mZ d dlmZ d d
lmZ d d lmZ d d lmZ d d
lmZ d dlmZ d dl m Z ej rkd dl mZ djdd�Z dkdldd�Z!dmdd �Z"dnd d!�Z#ddddd"�dod,d-�Z$ dpdqd4d5�Zdrd9d:�Zdsd=d>�Z%dtdudBdC�Z& EdvdwdJdK�Z'dxdMdN�Z( D dydzd[d\�Z)d{d`da�Z*d|dcdd�Z+e
dde�d}dhdi��Z,dS )~� )� annotationsN)�datetime)� lru_cache)�update_wrapper)�abort)�redirect)�Response� )� _cv_request)� current_app)�request)� request_ctx)�session)�message_flashed�return�boolc C s t j�d�} t| o| �� dv�S )z�Get whether debug mode should be enabled for the app, indicated by the
:envvar:`FLASK_DEBUG` environment variable. The default is ``False``.
� FLASK_DEBUG> �0�no�false)�os�environ�getr �lower)�val� r �@/opt/hikvison/venv/lib/python3.10/site-packages/flask/helpers.py�get_debug_flag s r T�defaultc C s t j�d�}|s
| S |�� dv S )z�Get whether the user has disabled loading default dotenv files by
setting :envvar:`FLASK_SKIP_DOTENV`. The default is ``True``, load
the files.
:param default: What to return if the env var isn't set.
�FLASK_SKIP_DOTENV)r r r )r r r r )r r r r r �get_load_dotenv# s r �generator_or_function�<t.Iterator[t.AnyStr] | t.Callable[..., t.Iterator[t.AnyStr]]�t.Iterator[t.AnyStr]c sX zt ��� W n ty d �fdd� }t|�� Y S w d � fdd � }|� }t|� |S )
a� Request contexts disappear when the response is started on the server.
This is done for efficiency reasons and to make it less likely to encounter
memory leaks with badly written WSGI middlewares. The downside is that if
you are using streamed responses, the generator cannot access request bound
information any more.
This function however can help you keep the context around for longer::
from flask import stream_with_context, request, Response
@app.route('/stream')
def streamed_response():
@stream_with_context
def generate():
yield 'Hello '
yield request.args['name']
yield '!'
return Response(generate())
Alternatively it can also be used around a specific generator::
from flask import stream_with_context, request, Response
@app.route('/stream')
def streamed_response():
def generate():
yield 'Hello '
yield request.args['name']
yield '!'
return Response(stream_with_context(generate()))
.. versionadded:: 0.9
�args�t.Any�kwargsr c s � | i |��}t |�S )N)�stream_with_context)r$ r& �gen)r! r r � decoratorZ s z&stream_with_context.<locals>.decorator�t.Iterator[t.AnyStr | None]c
3 s� � t �d �} | d u rtd��| �( d V z� E d H W t� d�r$� �� n t� d�r/� �� w w W d � d S 1 s;w Y d S )Nzd'stream_with_context' can only be used when a request context is active, such as in a view function.�close)r
r � RuntimeError�hasattrr+ )�ctx)r( r r � generator` s$ �
�
�
�
��"�z&stream_with_context.<locals>.generatorN)r$ r% r& r% r r% )r r* )�iter� TypeErrorr �next)r! r) r/ � wrapped_gr )r( r! r r' 2 s $ �r' r$ r% r c G s* | st �� S t| �dkr| d } t �| �S )ay Sometimes it is necessary to set additional headers in a view. Because
views do not have to return response objects but can return a value that
is converted into a response object by Flask itself, it becomes tricky to
add headers to it. This function can be called instead of using a return
and you will get a response object which you can use to attach headers.
If view looked like this and you want to add a new header::
def index():
return render_template('index.html', foo=42)
You can now do something like this::
def index():
response = make_response(render_template('index.html', foo=42))
response.headers['X-Parachutes'] = 'parachutes are cool'
return response
This function accepts the very same arguments you can return from a
view function. This for example creates a response with a 404 error
code::
response = make_response(render_template('not_found.html'), 404)
The other use case of this function is to force the return value of a
view function into a response which is helpful with view
decorators::
response = make_response(view_function())
response.headers['X-Parachutes'] = 'parachutes are cool'
Internally this function does the following things:
- if no arguments are passed, it creates a new response argument
- if one argument is passed, :meth:`flask.Flask.make_response`
is invoked with it.
- if more than one argument is passed, the arguments are passed
to the :meth:`flask.Flask.make_response` function as tuple.
.. versionadded:: 0.6
r r )r �response_class�len�
make_response)r$ r r r r6 s
*
r6 ��_anchor�_method�_scheme� _external�endpoint�strr8 �
str | Noner9 r: r; � bool | None�valuesc K s t j| f||||d�|��S )a� Generate a URL to the given endpoint with the given values.
This requires an active request or application context, and calls
:meth:`current_app.url_for() <flask.Flask.url_for>`. See that method
for full documentation.
:param endpoint: The endpoint name associated with the URL to
generate. If this starts with a ``.``, the current blueprint
name (if any) will be used.
:param _anchor: If given, append this as ``#anchor`` to the URL.
:param _method: If given, generate the URL associated with this
method for the endpoint.
:param _scheme: If given, the URL will have this scheme if it is
external.
:param _external: If given, prefer the URL to be internal (False) or
require it to be external (True). External URLs include the
scheme and domain. When not in an active request, URLs are
external by default.
:param values: Values to use for the variable parts of the URL rule.
Unknown keys are appended as query string arguments, like
``?a=b&c=d``.
.. versionchanged:: 2.2
Calls ``current_app.url_for``, allowing an app to override the
behavior.
.. versionchanged:: 0.10
The ``_scheme`` parameter was added.
.. versionchanged:: 0.9
The ``_anchor`` and ``_method`` parameters were added.
.. versionchanged:: 0.9
Calls ``app.handle_url_build_error`` on build errors.
r7 )r �url_for)r< r8 r9 r: r; r@ r r r rA � s ,���rA �. �location�code�int�type[BaseResponse] | None� BaseResponsec C s t r t j| |d�S t| ||d�S )aB Create a redirect response object.
If :data:`~flask.current_app` is available, it will use its
:meth:`~flask.Flask.redirect` method, otherwise it will use
:func:`werkzeug.utils.redirect`.
:param location: The URL to redirect to.
:param code: The status code for the redirect.
:param Response: The response class to use. Not used when
``current_app`` is active, which uses ``app.response_class``.
.. versionadded:: 2.2
Calls ``current_app.redirect`` if available instead of always
using Werkzeug's default ``redirect``.
)rD )rD r )r r � _wz_redirect)rC rD r r r r r � s r �int | BaseResponser& �
t.NoReturnc O s6 t rt j| g|�R i |�� t| g|�R i |�� dS )aJ Raise an :exc:`~werkzeug.exceptions.HTTPException` for the given
status code.
If :data:`~flask.current_app` is available, it will call its
:attr:`~flask.Flask.aborter` object, otherwise it will use
:func:`werkzeug.exceptions.abort`.
:param code: The status code for the exception, which must be
registered in ``app.aborter``.
:param args: Passed to the exception.
:param kwargs: Passed to the exception.
.. versionadded:: 2.2
Calls ``current_app.aborter`` if available instead of always
using Werkzeug's default ``abort``.
N)r �aborter� _wz_abort)rD r$ r& r r r r � s r �
template_name� attributec C s t tj�| �j|�S )aX Loads a macro (or variable) a template exports. This can be used to
invoke a macro from within Python code. If you for example have a
template named :file:`_cider.html` with the following contents:
.. sourcecode:: html+jinja
{% macro hello(name) %}Hello {{ name }}!{% endmacro %}
You can access this from Python code like this::
hello = get_template_attribute('_cider.html', 'hello')
return hello('World')
.. versionadded:: 0.2
:param template_name: the name of the template
:param attribute: the name of the variable of macro to access
)�getattrr � jinja_env� get_template�module)rM rN r r r �get_template_attribute s rS �message�category�Nonec C sB t �dg �}|�|| f� |t d< t�� }tj||j| |d� dS )a� Flashes a message to the next request. In order to remove the
flashed message from the session and to display it to the user,
the template has to call :func:`get_flashed_messages`.
.. versionchanged:: 0.3
`category` parameter added.
:param message: the message to be flashed.
:param category: the category for the message. The following values
are recommended: ``'message'`` for any kind of message,
``'error'`` for errors, ``'info'`` for information
messages and ``'warning'`` for warnings. However any
kind of string can be used as category.
�_flashes)�_async_wrapperrT rU N)r r �appendr �_get_current_objectr �send� ensure_sync)rT rU �flashes�appr r r �flash+ s
�r_ Fr �with_categories�category_filter�t.Iterable[str]�!list[str] | list[tuple[str, str]]c sZ t j}|du rdtv rt�d�ng }|t _� r"tt� fdd�|��}| s+dd� |D �S |S )a� Pulls all flashed messages from the session and returns them.
Further calls in the same request to the function will return
the same messages. By default just the messages are returned,
but when `with_categories` is set to ``True``, the return value will
be a list of tuples in the form ``(category, message)`` instead.
Filter the flashed messages to one or more categories by providing those
categories in `category_filter`. This allows rendering categories in
separate html blocks. The `with_categories` and `category_filter`
arguments are distinct:
* `with_categories` controls whether categories are returned with message
text (``True`` gives a tuple, where ``False`` gives just the message text).
* `category_filter` filters the messages down to only those matching the
provided categories.
See :doc:`/patterns/flashing` for examples.
.. versionchanged:: 0.3
`with_categories` parameter added.
.. versionchanged:: 0.9
`category_filter` parameter added.
:param with_categories: set to ``True`` to also receive categories.
:param category_filter: filter of categories to limit return values. Only
categories in the list will be returned.
NrW c s | d � v S )Nr r )�f�ra r r �<lambda>q s z&get_flashed_messages.<locals>.<lambda>c S s g | ]}|d �qS )r r )�.0�xr r r �
<listcomp>s s z(get_flashed_messages.<locals>.<listcomp>)r
r] r �pop�list�filter)r` ra r] r re r �get_flashed_messagesM s rm �dict[str, t.Any]c K s: | � d�d u r tj| d< | jtjtjd tjtjd� | S )N�max_age�USE_X_SENDFILE)r �use_x_sendfiler4 �
_root_path) r r �get_send_file_max_age�updater r �configr4 � root_path)r& r r r �_prepare_send_file_kwargsw s
�rw � path_or_file�(os.PathLike[t.AnyStr] | str | t.BinaryIO�mimetype�
as_attachment�
download_name� conditional�etag�
bool | str�
last_modified� datetime | int | float | Nonero �3None | (int | t.Callable[[str | None], int | None])c C s* t jjdi t| tj|||||||d� ��S )a_ Send the contents of a file to the client.
The first argument can be a file path or a file-like object. Paths
are preferred in most cases because Werkzeug can manage the file and
get extra information from the path. Passing a file-like object
requires that the file is opened in binary mode, and is mostly
useful when building a file in memory with :class:`io.BytesIO`.
Never pass file paths provided by a user. The path is assumed to be
trusted, so a user could craft a path to access a file you didn't
intend. Use :func:`send_from_directory` to safely serve
user-requested paths from within a directory.
If the WSGI server sets a ``file_wrapper`` in ``environ``, it is
used, otherwise Werkzeug's built-in wrapper is used. Alternatively,
if the HTTP server supports ``X-Sendfile``, configuring Flask with
``USE_X_SENDFILE = True`` will tell the server to send the given
path, which is much more efficient than reading it in Python.
:param path_or_file: The path to the file to send, relative to the
current working directory if a relative path is given.
Alternatively, a file-like object opened in binary mode. Make
sure the file pointer is seeked to the start of the data.
:param mimetype: The MIME type to send for the file. If not
provided, it will try to detect it from the file name.
:param as_attachment: Indicate to a browser that it should offer to
save the file instead of displaying it.
:param download_name: The default name browsers will use when saving
the file. Defaults to the passed file name.
:param conditional: Enable conditional and range responses based on
request headers. Requires passing a file path and ``environ``.
:param etag: Calculate an ETag for the file, which requires passing
a file path. Can also be a string to use instead.
:param last_modified: The last modified time to send for the file,
in seconds. If not provided, it will try to detect it from the
file path.
:param max_age: How long the client should cache the file, in
seconds. If set, ``Cache-Control`` will be ``public``, otherwise
it will be ``no-cache`` to prefer conditional caching.
.. versionchanged:: 2.0
``download_name`` replaces the ``attachment_filename``
parameter. If ``as_attachment=False``, it is passed with
``Content-Disposition: inline`` instead.
.. versionchanged:: 2.0
``max_age`` replaces the ``cache_timeout`` parameter.
``conditional`` is enabled and ``max_age`` is not set by
default.
.. versionchanged:: 2.0
``etag`` replaces the ``add_etags`` parameter. It can be a
string to use instead of generating one.
.. versionchanged:: 2.0
Passing a file-like object that inherits from
:class:`~io.TextIOBase` will raise a :exc:`ValueError` rather
than sending an empty file.
.. versionadded:: 2.0
Moved the implementation to Werkzeug. This is now a wrapper to
pass some Flask-specific arguments.
.. versionchanged:: 1.1
``filename`` may be a :class:`~os.PathLike` object.
.. versionchanged:: 1.1
Passing a :class:`~io.BytesIO` object supports range requests.
.. versionchanged:: 1.0.3
Filenames are encoded with ASCII instead of Latin-1 for broader
compatibility with WSGI servers.
.. versionchanged:: 1.0
UTF-8 filenames as specified in :rfc:`2231` are supported.
.. versionchanged:: 0.12
The filename is no longer automatically inferred from file
objects. If you want to use automatic MIME and etag support,
pass a filename via ``filename_or_fp`` or
``attachment_filename``.
.. versionchanged:: 0.12
``attachment_filename`` is preferred over ``filename`` for MIME
detection.
.. versionchanged:: 0.9
``cache_timeout`` defaults to
:meth:`Flask.get_send_file_max_age`.
.. versionchanged:: 0.7
MIME guessing and etag support for file-like objects was
removed because it was unreliable. Pass a filename if you are
able to, otherwise attach an etag yourself.
.. versionchanged:: 0.5
The ``add_etags``, ``cache_timeout`` and ``conditional``
parameters were added. The default behavior is to add etags.
.. versionadded:: 0.2
) rx r rz r{ r| r} r~ r� ro Nr )�werkzeug�utils� send_filerw r r )rx rz r{ r| r} r~ r� ro r r r r� � s
o��r� � directory�os.PathLike[str] | str�pathc K s t jj| |fi tdi |����S )a� Send a file from within a directory using :func:`send_file`.
.. code-block:: python
@app.route("/uploads/<path:name>")
def download_file(name):
return send_from_directory(
app.config['UPLOAD_FOLDER'], name, as_attachment=True
)
This is a secure way to serve files from a folder, such as static
files or uploads. Uses :func:`~werkzeug.security.safe_join` to
ensure the path coming from the client is not maliciously crafted to
point outside the specified directory.
If the final path does not point to an existing regular file,
raises a 404 :exc:`~werkzeug.exceptions.NotFound` error.
:param directory: The directory that ``path`` must be located under,
relative to the current application's root path.
:param path: The path to the file to send, relative to
``directory``.
:param kwargs: Arguments to pass to :func:`send_file`.
.. versionchanged:: 2.0
``path`` replaces the ``filename`` parameter.
.. versionadded:: 2.0
Moved the implementation to Werkzeug. This is now a wrapper to
pass some Flask-specific arguments.
.. versionadded:: 0.5
Nr )r� r� �send_from_directoryrw )r� r� r& r r r r� s
&� �r� � import_namec C s� t j�| �}|dur t|d�r |jdur tj�tj�|j��S zt j
� | �}|du r,t �W n
t
t fy: d}Y nw |j}|du rFt�� S t|d�rQ|�| �}nt| � t j| }t|dd�}|du rltd| �d���tj�tj�|��S )z�Find the root path of a package, or the path that contains a
module. If it cannot be found, returns the current working
directory.
Not to be confused with the value returned by :func:`find_package`.
:meta private:
N�__file__� get_filenamez2No root path can be found for the provided module z�. This can happen because the module came from an import hook that does not provide file name information or because it's a namespace package. In this case the root path needs to be explicitly provided.)�sys�modulesr r- r� r r� �dirname�abspath� importlib�util� find_spec�
ValueError� ImportError�loader�getcwdr� �
__import__rO r, )r� �mod�specr� �filepathr r r �
get_root_path- s4
��
��
r� )�maxsize�name� list[str]c C s* | g}d| v r|� t| �d�d �� |S )N�.r )�extend�_split_blueprint_path�
rpartition)r� �outr r r r� f s r� )r r )T)r r r r )r! r" r r# )r$ r% r r )r< r= r8 r> r9 r> r: r> r; r? r@ r% r r= )rB N)rC r= rD rE r rF r rG )rD rI r$ r% r& r% r rJ )rM r= rN r= r r% )rT )rT r= rU r= r rV )Fr )r` r ra rb r rc )r& r% r rn )NFNTTNN)rx ry rz r> r{ r r| r> r} r r~ r r� r� ro r� r r )r� r� r� r� r& r% r r )r� r= r r= )r� r= r r� )-�
__future__r �importlib.utilr� r r� �typing�tr � functoolsr r �werkzeug.utilsr� �werkzeug.exceptionsr rL r rH �werkzeug.wrappersr rG �globalsr
r r r
r �signalsr �
TYPE_CHECKING�wrappersr r r' r6 rA rS r_ rm rw r� r� r� r� r r r r �<module> sb
M4�7 �
# �
* �
~
+9