U
|
Þ=®dø8 ã @ s( U d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
|
m Z ddl m Z ddl mZ d d
|
lmZ d d lmZ d d lmZ d d lmZ ejdejdejf dZdZe Z ej e e d< e Z ej e e d< ddhZ!ddhZ"ddhZ#ej$e%ddd d d d d d!gfej&e%dd d"d#d!gfej'e%d$d%d&d'd(d gfe e%d$d)dd(d*d d+d d,g ffZ(ej)ej)ej*ej+e f df e d-< ejej,e d.d/d0Z-e.e/d1d2d3Z0eed4d5d6Z1eje e2d7d8d9Z3eje e2d7d:d;Z4G d<d= d=eZ5G d>d? d?e5Z6G d@dA dAe Z7G dBdC dCe7e Z8dS )DzA sandbox layer that ensures unsafe operations cannot be performed.
|
Useful when the template itself comes from an untrusted source.
|
é N)Úformatter_field_name_split)Úabc)Údeque)Ú Formatter)ÚEscapeFormatter)ÚMarkupé )Ú Environment)Ú SecurityError)ÚContext)Ú UndefinedÚF.)Úboundi ÚUNSAFE_FUNCTION_ATTRIBUTESÚUNSAFE_METHOD_ATTRIBUTESÚgi_frameÚgi_codeÚcr_frameÚcr_codeÚag_codeÚag_frameÚaddÚclearÚdifference_updateÚdiscardÚpopÚremoveÚsymmetric_difference_updateÚupdateÚpopitemÚ
|
setdefaultÚappendÚreverseÚinsertÚsortÚextendÚ
|
appendleftÚ
|
extendleftÚpopleftÚrotateÚ _mutable_spec)ÚcallableÚreturnc C s8 t | tjtjfr | jdkr d S | j}t |tr4|S d S )N)ÚformatÚ
|
format_map)Ú
|
isinstanceÚtypesÚ
|
MethodTypeÚBuiltinMethodTypeÚ__name__Ú__self__Ústr)r+ Úobj© r7 úEd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\jinja2/sandbox.pyÚinspect_format_methodS s
|
ÿþ
|
r9 )Úargsr, c G s( t | }t|tkr$tdt d|S )zWA range that can't generate ranges with a length of more than
|
MAX_RANGE items.
|
z@Range too big. The sandbox blocks ranges larger than MAX_RANGE (z).)ÚrangeÚlenÚ MAX_RANGEÚ OverflowError)r: Úrngr7 r7 r8 Ú
|
safe_rangea s
|
ÿr@ )Úfr, c C s
|
d| _ | S )zMarks a function or method as unsafe.
|
|
.. code-block: python
|
|
@unsafe
|
def delete(self):
|
pass
|
T)Úunsafe_callable)rA r7 r7 r8 Úunsafep s rC )r6 Úattrr, c C sØ t | tjr|tkrÎdS n´t | tjr<|tks6|tkrÎdS nt | trT|dkrÎdS nzt | tjtjtj frndS t | tj
|
r|t krÎdS nFt tdr¬t | tj r¬|tkrÎdS n"t tdrÎt | tjrÎ|tkrÎdS | d¡S )a´ Test if the attribute given is an internal python attribute. For
|
example this function returns `True` for the `func_code` attribute of
|
python objects. This is useful if the environment method
|
:meth:`~SandboxedEnvironment.is_safe_attribute` is overridden.
|
|
>>> from jinja2.sandbox import is_internal_attribute
|
>>> is_internal_attribute(str, "mro")
|
True
|
>>> is_internal_attribute(str, "upper")
|
False
|
TÚmroÚ CoroutineTypeÚAsyncGeneratorTypeÚ__)r/ r0 Ú FunctionTyper r1 r ÚtypeÚCodeTypeÚ TracebackTypeÚ FrameTypeÚ GeneratorTypeÚUNSAFE_GENERATOR_ATTRIBUTESÚhasattrrF ÚUNSAFE_COROUTINE_ATTRIBUTESrG Ú!UNSAFE_ASYNC_GENERATOR_ATTRIBUTESÚ
|
startswith)r6 rD r7 r7 r8 Úis_internal_attribute} s0
|
ÿrT c C s( t D ] \}}t| |r||k S qdS )að This function checks if an attribute on a builtin mutable object
|
(list, dict, set or deque) or the corresponding ABCs would modify it
|
if called.
|
|
>>> modifies_known_mutable({}, "clear")
|
True
|
>>> modifies_known_mutable({}, "keys")
|
False
|
>>> modifies_known_mutable([], "append")
|
True
|
>>> modifies_known_mutable([], "index")
|
False
|
|
If called with an unsupported object, ``False`` is returned.
|
|
>>> modifies_known_mutable("foo", "upper")
|
False
|
F)r* r/ )r6 rD ZtypespecrC r7 r7 r8 Úmodifies_known_mutable¢ s
|
rU c sè e Zd ZU dZdZejejejej ej
|
ej ej dZ ejeejejejgejf f ed< ejejdZejeejejgejf f ed< e Zeje ed< e Zeje ed< ejejd d
|
fd d Zejeeje d ddZ eje dddZ e eejejejdddZ e eejejdddZ!ejej"eejf ej"eje#f dddZ$ejeej"eje#f d d d Z%ejee#d d d Z&d(eej'ejd!f ejeejf ej(ej ed"d#d$Z)e ejejejejd%d&d'Z* Z+S ))ÚSandboxedEnvironmentaé The sandboxed environment. It works like the regular environment but
|
tells the compiler to generate sandboxed code. Additionally subclasses of
|
this environment may override the methods that tell the runtime what
|
attributes or functions are safe to access.
|
|
If the template tries to access insecure code a :exc:`SecurityError` is
|
raised. However also other exceptions may occur during the rendering so
|
the caller has to ensure that all exceptions are caught.
|
T)ú+ú-Ú*ú/z//z**ú%Údefault_binop_table)rW rX Údefault_unop_tableÚintercepted_binopsÚintercepted_unopsN)r: Úkwargsr, c s4 t j|| t| jd< | j ¡ | _| j ¡ | _d S )Nr; ) ÚsuperÚ__init__r@ Úglobalsr\ ÚcopyÚ binop_tabler] Ú
|
unop_table)Úselfr: r` ©Ú __class__r7 r8 rb ü s
|
z SandboxedEnvironment.__init__©r6 rD Úvaluer, c C s | d¡pt|| S )aY The sandboxed environment will call this method to check if the
|
attribute of an object is safe to access. Per default all attributes
|
starting with an underscore are considered private as well as the
|
special attributes of internal python objects as returned by the
|
:func:`is_internal_attribute` function.
|
Ú_)rS rT ©rg r6 rD rk r7 r7 r8 Úis_safe_attribute s z&SandboxedEnvironment.is_safe_attribute)r6 r, c C s t |ddpt |dd S )zêCheck if an object is safely callable. By default callables
|
are considered safe unless decorated with :func:`unsafe`.
|
|
This also recognizes the Django convention of setting
|
``func.alters_data = True``.
|
rB FZ alters_data)Úgetattr)rg r6 r7 r7 r8 Úis_safe_callable s ÿz%SandboxedEnvironment.is_safe_callable)ÚcontextÚoperatorÚleftÚrightr, c C s | j | ||S )z÷For intercepted binary operator calls (:meth:`intercepted_binops`)
|
this function is executed instead of the builtin operator. This can
|
be used to fine tune the behavior of certain operators.
|
|
.. versionadded:: 2.6
|
)re )rg rq rr rs rt r7 r7 r8 Ú
|
call_binop s z SandboxedEnvironment.call_binop)rq rr Úargr, c C s | j | |S )zõFor intercepted unary operator calls (:meth:`intercepted_unops`)
|
this function is executed instead of the builtin operator. This can
|
be used to fine tune the behavior of certain operators.
|
|
.. versionadded:: 2.6
|
)rf )rg rq rr rv r7 r7 r8 Ú call_unop! s z SandboxedEnvironment.call_unop)r6 Úargumentr, c C s¨ z
|
|| W S t tfk
|
r t|trz t|}W n tk
|
rH Y nLX zt||}W n tk
|
rl Y n(X | |||¡r| Y S | ||¡ Y S Y nX | j ||dS )z(Subscribe an object from sandboxed code.©r6 Úname)
|
Ú TypeErrorÚ LookupErrorr/ r5 Ú Exceptionro ÚAttributeErrorrn Úunsafe_undefinedÚ undefined)rg r6 rx rD rk r7 r7 r8 Úgetitem* s
|
|
z SandboxedEnvironment.getitem)r6 Ú attributer, c C sx zt ||}W n< tk
|
rJ z|| W Y S ttfk
|
rD Y nX Y n X | |||¡r^|S | ||¡S | j||dS )zSubscribe an object from sandboxed code and prefer the
|
attribute. The attribute passed *must* be a bytestring.
|
ry )ro r~ r{ r| rn r r )rg r6 r rk r7 r7 r8 ro A s z SandboxedEnvironment.getattrc C s& | j d|dt|jd||tdS )z1Return an undefined object for unsafe attributes.zaccess to attribute z of z object is unsafe.)rz r6 Úexc)r rJ r3 r
|
)rg r6 r r7 r7 r8 r R s ûz%SandboxedEnvironment.unsafe_undefined.)Úsr: r` Ú format_funcr, c C s t |trt| |jd}nt| }|dk rl|jdkrlt|dksD|r`tdt||dk d|d }d}| |||¡}t ||S ) z
If a format call is detected, then this is routed through this
|
method so that our safety sandbox can be used for it.
|
)ÚescapeNr. r z(format_map() takes exactly one argument z givenr r7 )
|
r/ r ÚSandboxedEscapeFormatterr ÚSandboxedFormatterr3 r< r{ ÚvformatrJ )rg r r: r` r
Ú formatterÚrvr7 r7 r8 Ú format_string\ s
|
ÿz"SandboxedEnvironment.format_string)Ú _SandboxedEnvironment__contextÚ_SandboxedEnvironment__objr: r` r, c O sJ t |}|dk r | ||||¡S | |¡s8t|d|j|f||S )z#Call an object from sandboxed code.Nz is not safely callable)r9 r rp r
|
Úcall)Z_SandboxedEnvironment__selfr r r: r` Úfmtr7 r7 r8 r y s
|
zSandboxedEnvironment.call)N),r3 Ú
|
__module__Ú __qualname__Ú__doc__Z sandboxedrr r ÚsubÚmulÚtruedivÚfloordivÚpowÚmodr\ ÚtÚDictr5 ÚCallableÚAnyÚ__annotations__ÚposÚnegr] Ú frozensetr^ Ú FrozenSetr_ rb Úboolrn rp r ru rw ÚUnionr r ro r ÚTupleÚOptionalr r Ú __classcell__r7 r7 rh r8 rV » sZ
|
|
ù,þ( þ
|
þ û
|
ú úrV c s0 e Zd ZdZejeejed fdd Z Z S )Ú ImmutableSandboxedEnvironmentzÓWorks exactly like the regular `SandboxedEnvironment` but does not
|
permit modifications on the builtin mutable objects `list`, `set`, and
|
`dict` by using the :func:`modifies_known_mutable` function.
|
rj c s t |||¡sdS t|| S )NF)ra rn rU rm rh r7 r8 rn s z/ImmutableSandboxedEnvironment.is_safe_attribute)
|
r3 r r r r r r5 r£ rn r§ r7 r7 rh r8 r¨ s r¨ c s\ e Zd Zeejdd fdd Zeejej ej eejf ej
|
ejef dddZ Z S )r N)Úenvr` r, c s || _ t jf | d S ©N)Ú_envra rb )rg r© r` rh r7 r8 rb s zSandboxedFormatter.__init__)Ú
|
field_namer: r` r, c C sR t |\}}| |||¡}|D ]*\}}|r:| j ||¡}q | j ||¡}q ||fS rª )r Ú get_valuer« ro r ) rg r¬ r: r` ÚfirstÚrestr6 Úis_attrÚir7 r7 r8 Ú get_field s z SandboxedFormatter.get_field) r3 r r r r r rb r5 ÚSequenceÚMappingr¥ r² r§ r7 r7 rh r8 r s
|
þr c @ s e Zd ZdS )r N)r3 r r r7 r7 r7 r8 r « s r )9r rr r0 Útypingr Ú_stringr Ú collectionsr r Ústringr Z
|
markupsafer r Ú environmentr Ú
|
exceptionsr
|
Zruntimer r ÚTypeVarr r r r= Úsetr ÚSetr5 r r rO rQ rR Ú
|
MutableSetr¡ ÚMutableMappingÚMutableSequencer* r¥ ÚTyper¢ r¦ r9 Úintr; r@ rC r£ rT rU rV r¨ r r r7 r7 r7 r8 Ú<module> s øÿþþþ÷ÿþè(+ % R
|
