159 lines
18 KiB
Plaintext
159 lines
18 KiB
Plaintext
|
Ë
|
|||
|
|
LÀj¡: ã óp — U d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl
|
|||
|
|
m Z ddl m
|
|||
|
|
Z
|
|||
|
|
ddlmZ dd lmZ d
|
|||
|
|
d lmZ d
|
|||
|
|
d lmZ d
|
|||
|
|
d
|
|||
|
|
lmZ d
|
|||
|
|
dlmZ ej0 dej2 dej4 f ¬« ZdZ e « Z ej> e e!d< e « Z"ej> e e!d< ddhZ#ddhZ$ddhZ%ejL e'g d¢« fejP e'g d ¢« fejR e'g d ¢« fe e'g d ¢« ffZ*ejV ejV ejX ej4 ejZ e f df e!d < d e.d!e/fd"„Z0d#ed!efd$„Z1d%ej4 d&e d!e2fd'„Z3d%ej4 d&e d!e2fd(„Z4 G d)„ d*e« Z5 G d+„ d,e5« Z6 G d-„ d.e
|
|||
|
|
« Z7 G d/„ d0e7e« Z8y)1z„A sandbox layer that ensures unsafe operations cannot be performed.
|
|||
|
|
Useful when the template itself comes from an untrusted source.
|
|||
|
|
é N)Úformatter_field_name_split)Úabc)Údeque)Úupdate_wrapper)Ú Formatter)ÚEscapeFormatter)ÚMarkupé )Ú Environment)Ú
|
|||
|
|
SecurityError)ÚContext)Ú UndefinedÚF.)Úboundi † ÚUNSAFE_FUNCTION_ATTRIBUTESÚUNSAFE_METHOD_ATTRIBUTESÚgi_frameÚgi_codeÚcr_frameÚcr_codeÚag_codeÚag_frame)ÚaddÚclearÚdifference_updateÚdiscardÚpopÚremoveÚsymmetric_difference_updateÚupdate)r r ÚpopitemÚ
|
|||
|
|
setdefaultr )Úappendr r ÚreverseÚinsertÚsortÚextendr ) r# Ú
|
|||
|
|
appendleftr r' Ú
|
|||
|
|
extendleftr Úpopleftr ÚrotateÚ
|
|||
|
|
_mutable_specÚargsÚreturnc ó` — t | Ž }t |« t kD rt dt › d�« ‚|S )zWA range that can't generate ranges with a length of more than
|
|||
|
|
MAX_RANGE items.
|
|||
|
|
z@Range too big. The sandbox blocks ranges larger than MAX_RANGE (z).)ÚrangeÚlenÚ MAX_RANGEÚ
|
|||
|
|
OverflowError)r- Úrngs úQ/home/antigravity/intellecton/venv/lib/python3.12/site-packages/jinja2/sandbox.pyÚ
|
|||
|
|
safe_ranger6 W s> € ô �ˆ,€Cä
|
|||
|
|
ˆ3ƒx”)ÒÜð
|
|||
|
|
Ü$˜+ Rð
|
|||
|
|
)ó
|
|||
|
|
ð
|
|||
|
|
ð
|
|||
|
|
€Jó Úfc ó — d| _ | S )z�Marks a function or method as unsafe.
|
|||
|
|
|
|||
|
|
.. code-block: python
|
|||
|
|
|
|||
|
|
@unsafe
|
|||
|
|
def delete(self):
|
|||
|
|
pass
|
|||
|
|
T)Úunsafe_callable)r8 s r5 Úunsafer; f s € ð €AÔØ €Hr7 ÚobjÚattrc ót — t | t j « r
|
|||
|
|
|t v �ryt | t j « r|t v s|t
|
|||
|
|
v rÚyt | t « r|dk( rÄyt | t j t j t j f« ryt | t j « r |t v rgyt t d« r#t | t j « r |t v r4yt t d« r#t | t j « r |t v ry|j# d« S )a´ Test if the attribute given is an internal python attribute. For
|
|||
|
|
example this function returns `True` for the `func_code` attribute of
|
|||
|
|
python objects. This is useful if the environment method
|
|||
|
|
:meth:`~SandboxedEnvironment.is_safe_attribute` is overridden.
|
|||
|
|
|
|||
|
|
>>> from jinja2.sandbox import is_internal_attribute
|
|||
|
|
>>> is_internal_attribute(str, "mro")
|
|||
|
|
True
|
|||
|
|
>>> is_internal_attribute(str, "upper")
|
|||
|
|
False
|
|||
|
|
TÚmroÚ
|
|||
|
|
CoroutineTypeÚAsyncGeneratorTypeÚ__)Ú
|
|||
|
|
isinstanceÚtypesÚ FunctionTyper Ú
|
|||
|
|
MethodTyper ÚtypeÚCodeTypeÚ
|
|||
|
|
TracebackTypeÚ FrameTypeÚ
|
|||
|
|
GeneratorTypeÚUNSAFE_GENERATOR_ATTRIBUTESÚhasattrr@ ÚUNSAFE_COROUTINE_ATTRIBUTESrA Ú!UNSAFE_ASYNC_GENERATOR_ATTRIBUTESÚ
|
|||
|
|
startswith)r< r= s r5 Úis_internal_attributerQ s sõ € ô �#”u×)Ñ)Ô*Ø Ô-Ò -ØÜ �Cœ×)Ñ)Ô *Ø Ô-Ñ -°Ô9QÑ1QØÜ �CœÔ Ø �5Š=ØÜ �Cœ%Ÿ.™.¬%×*=Ñ*=¼u¿¹ÐOÔ PØÜ �Cœ×,Ñ,Ô -Ø Ô.Ñ .ØÜ ”˜Ô (¬Z¸¼U×=PÑ=PÔ-QØ Ô.Ñ .ØÜ ”Ð,Ô -´*Ø ŒU×
|
|||
|
|
%Ñ
|
|||
|
|
%ô3ð Ô4Ñ 4ØØ �?‰?˜4Ó Ð r7 c óD — t D ] \ }}t | |« sŒ||v c S y)að This function checks if an attribute on a builtin mutable object
|
|||
|
|
(list, dict, set or deque) or the corresponding ABCs would modify it
|
|||
|
|
if called.
|
|||
|
|
|
|||
|
|
>>> modifies_known_mutable({}, "clear")
|
|||
|
|
True
|
|||
|
|
>>> modifies_known_mutable({}, "keys")
|
|||
|
|
False
|
|||
|
|
>>> modifies_known_mutable([], "append")
|
|||
|
|
True
|
|||
|
|
>>> modifies_known_mutable([], "index")
|
|||
|
|
False
|
|||
|
|
|
|||
|
|
If called with an unsupported object, ``False`` is returned.
|
|||
|
|
|
|||
|
|
>>> modifies_known_mutable("foo", "upper")
|
|||
|
|
False
|
|||
|
|
F)r, rC )r< r= Útypespecr; s r5 Úmodifies_known_mutablerT ˜ s1 € ô& *ò "ш�&Ü �c˜8Õ $ؘ6�>Ò !ð"ð r7 c
|
|||
|
|
ó\ ‡ — e Zd ZU dZdZej ej ej ej ej ej ej dœZ
|
|||
|
|
ej eej" ej$ ej$ gej$ f f ed< ej( ej* dœZej eej" ej$ gej$ f f ed< e« Zej2 e ed< e« Zej2 e ed< d ej$ d
|
|||
|
|
ej$ d d fˆ fd
|
|||
|
|
„ Zdej$ dedej$ d e fd„Z dej$ d e fd„Z de dedej$ dej$ d ej$ f
|
|||
|
|
d„Z de dedej$ d ej$ fd„Z!dej$ dejD eej$ f d ejD ej$ e#f fd„Z$dej$ d ed ejD ej$ e#f fd „Z%dej$ d ed e#fd „Z&dej$ d ejN ej" d ef fd „Z(d!e d"ej$ d ej$ d
|
|||
|
|
ej$ d ej$ f
|
|||
|
|
d#„Z)ˆ xZ*S )$ÚSandboxedEnvironmentaé The sandboxed environment. It works like the regular environment but
|
|||
|
|
tells the compiler to generate sandboxed code. Additionally subclasses of
|
|||
|
|
this environment may override the methods that tell the runtime what
|
|||
|
|
attributes or functions are safe to access.
|
|||
|
|
|
|||
|
|
If the template tries to access insecure code a :exc:`SecurityError` is
|
|||
|
|
raised. However also other exceptions may occur during the rendering so
|
|||
|
|
the caller has to ensure that all exceptions are caught.
|
|||
|
|
T)ú+ú-Ú*ú/z//z**ú%Údefault_binop_table)rW rX Údefault_unop_tableÚintercepted_binopsÚintercepted_unopsr- Úkwargsr. Nc óÆ •— t ‰| � |i |¤Ž t | j d< | j j « | _ | j j « | _ y )Nr0 ) ÚsuperÚ__init__r6 Úglobalsr\ ÚcopyÚ binop_tabler] Ú
|
|||
|
|
unop_table)Úselfr- r` Ú __class__s €r5 rc z SandboxedEnvironment.__init__ò sP ø€ Ü
|
|||
|
|
‰Ñ˜$Ð) &Ò)Ü *ˆ� ‰ �WÑ Ø ×3Ñ3×8Ñ8Ó:ˆÔØ ×1Ñ1×6Ñ6Ó8ˆ�r7 r< r= Úvaluec óB — |j d« xs t ||« S )aY The sandboxed environment will call this method to check if the
|
|||
|
|
attribute of an object is safe to access. Per default all attributes
|
|||
|
|
starting with an underscore are considered private as well as the
|
|||
|
|
special attributes of internal python objects as returned by the
|
|||
|
|
:func:`is_internal_attribute` function.
|
|||
|
|
Ú_)rP rQ )rh r< r= rj s r5 Úis_safe_attributez&SandboxedEnvironment.is_safe_attributeø s# € ð —O‘O CÓ(ÒLÔ,AÀ#ÀtÓ,LÐMÐMr7 c ó< — t |dd« xs
|
|||
|
|
t |dd« S )zêCheck if an object is safely callable. By default callables
|
|||
|
|
are considered safe unless decorated with :func:`unsafe`.
|
|||
|
|
|
|||
|
|
This also recognizes the Django convention of setting
|
|||
|
|
``func.alters_data = True``.
|
|||
|
|
r: FÚ alters_data)Úgetattr)rh r< s r5 Úis_safe_callablez%SandboxedEnvironment.is_safe_callable s* € ô
|
|||
|
|
�CÐ*¨EÓ 2Ò X´g¸cÀ=ÐRWÓ6Xð
|
|||
|
|
ð
|
|||
|
|
r7 ÚcontextÚoperatorÚleftÚrightc ó. — | j | ||« S )z÷For intercepted binary operator calls (:meth:`intercepted_binops`)
|
|||
|
|
this function is executed instead of the builtin operator. This can
|
|||
|
|
be used to fine tune the behavior of certain operators.
|
|||
|
|
|
|||
|
|
.. versionadded:: 2.6
|
|||
|
|
)rf )rh rr rs rt ru s r5 Ú
|
|||
|
|
call_binopz SandboxedEnvironment.call_binop s € ð *ˆt× Ñ Ñ)¨$°Ó6Ð6r7 Úargc ó, — | j | |« S )zõFor intercepted unary operator calls (:meth:`intercepted_unops`)
|
|||
|
|
this function is executed instead of the builtin operator. This can
|
|||
|
|
be used to fine tune the behavior of certain operators.
|
|||
|
|
|
|||
|
|
.. versionadded:: 2.6
|
|||
|
|
)rg )rh rr rs rx s r5 Ú call_unopz SandboxedEnvironment.call_unop s € ð )ˆt�‰˜xÑ(¨Ó-Ð-r7 Úargumentc óp — || S # t t f$ rŒ t |t « ry t |« } t ||« }| j |« }|�|cY S | j
|
|||
|
|
|||« r|cY S | j ||« cY S # t $ r Y nw xY w# t $ r Y nw xY wY nw xY w| j ||¬« S )z(Subscribe an object from sandboxed code.©r< Úname) Ú TypeErrorÚ LookupErrorrC Ústrrp Úwrap_str_formatrm Úunsafe_undefinedÚAttributeErrorÚ ExceptionÚ undefined)rh r< r{ r= rj Úfmts r5 Úgetitemz SandboxedEnvironment.getitem sÕ € ð DØ�x‘=Ð øÜœ;Ð'ò Dܘ(¤CÔ(ðDÜ ˜x›=�Dð
|
|||
|
|
DÜ '¨¨TÓ 2˜ð #× 2Ñ 2°5Ó 9˜Ø ˜?Ø#&šJØ ×1Ñ1°#°xÀÔGØ#(šLØ #× 4Ñ 4°S¸(Ó CÒCøô *ò Ù ð ûô !ò Ùðüð Dúð$ �~‰~ #¨Hˆ~Ó5Ð5sZ ‚ ‡ B"§ B³ B¿B"ÁB"Á-B" B
|
|||
|
|
Â
|
|||
|
|
B"Â B
|
|||
|
|
Â
|
|||
|
|
B"Â B ÂB"ÂB Â B"Â!B"Ú attributec ó — t ||« }| j |« }|�|S | j |||« r|S | j ||« S # t $ r || cY S # t
|
|||
|
|
t f$ r Y nw xY wY nw xY w| j ||¬« S )z€Subscribe an object from sandboxed code and prefer the
|
|||
|
|
attribute. The attribute passed *must* be a bytestring.
|
|||
|
|
r} )rp r‚ rm rƒ r„ r r€ r† )rh r< r‰ rj r‡ s r5 rp z SandboxedEnvironment.getattr: s¨ € ð
|
|||
|
|
9ܘC Ó+ˆEð ×&Ñ& uÓ-ˆC؈Ø�
|
|||
|
|
Ø×%Ñ% c¨9°eÔ<Ø � Ø×(Ñ(¨¨iÓ8Ð 8øô ò ð
|
|||
|
|
ؘ9‘~Ò%øÜ œ{Ð+ò
|
|||
|
|
Ùð
|
|||
|
|
úÙð úð �~‰~ #¨Iˆ~Ó6Ð6s5 ‚ A
|
|||
|
|
Á
|
|||
|
|
A3ÁAÁA3ÁA-Á*A3Á,A-Á-A3Á2A3c óh — | j d|›dt |« j ›d�||t ¬« S )z1Return an undefined object for unsafe attributes.zaccess to attribute z of z object is unsafe.)r~ r< Úexc)r† rG Ú__name__r )rh r< r‰ s r5 rƒ z%SandboxedEnvironment.unsafe_undefinedN sE € à�~‰~Ø" 9 -ð 0Ü�S“ ×"Ñ"Ð%Ð%7ð
|
|||
|
|
9àØÜ ð ó
|
|||
|
|
ð
|
|||
|
|
r7 .c óÞ ‡‡‡‡— t |t j t j f« r|j dvry|j
|
|||
|
|
Št ‰t « syt ‰« Š|j dk( Št ‰t « rt | ‰j ¬« }n t | « }|j Šdt j dt j dt fˆˆˆˆfd„ }t ||« S ) a If the given value is a ``str.format`` or ``str.format_map`` method,
|
|||
|
|
return a new function than handles sandboxing. This is done at access
|
|||
|
|
rather than in :meth:`call`, so that calls made without ``call`` are
|
|||
|
|
also sandboxed.
|
|||
|
|
)ÚformatÚ
|
|||
|
|
format_mapNr� )Úescaper- r` r. c óœ •— ‰r:|r t d« ‚t | « dk7 rt dt | « › d�« ‚| d }d} ‰ ‰‰| |« « S )Nz'format_map() takes no keyword argumentsr
|
|||
|
|
z)format_map() takes exactly one argument (z given)r © )r r1 )r- r` Úf_selfÚ
|
|||
|
|
is_format_mapÚstr_typeÚvformats €€€€r5 Úwrapperz5SandboxedEnvironment.wrap_str_format.<locals>.wrappers sa ø€ Ù ÙÜ#Ð$MÓNÐNä�t“9 ’>Ü#ØCÄCÈÃIÀ;ÈgÐVóð ð ˜a™�Ø�á™G F¨D°&Ó 9Ó:Ð :r7 )rC rD rF ÚBuiltinMethodTyper� Ú__self__r� rG r ÚSandboxedEscapeFormatterr‘ ÚSandboxedFormatterr— ÚtÚAnyr )rh rj Ú formatterr˜ r” r• r– r— s @@@@r5 r‚ z$SandboxedEnvironment.wrap_str_formatX sÇ û€ ô Ø ”E×$Ñ$¤e×&=Ñ&=Ð>ô
|
|||
|
|
à
|
|||
|
|
�^‰^Ð#;Ñ
|
|||
|
|
;Øà Ÿ™ˆä˜&¤#Ô&Øä $ V£ ˆØ Ÿ™¨,Ñ6ˆ
|
|||
|
|
ô �fœfÔ %Ü0°¸f¿m¹mÔL‰Iä*¨4Ó0ˆIà×#Ñ#ˆð
|
|||
|
|
;œ1Ÿ5™5ð
|
|||
|
|
;¬A¯E©Eð
|
|||
|
|
;´c÷
|
|||
|
|
;ð
|
|||
|
|
;ô ˜g uÓ-Ð-r7 Ú _SandboxedEnvironment__contextÚ_SandboxedEnvironment__objc ól — | j |« st |›d�« ‚ |j |g|¢i |¤ŽS )z#Call an object from sandboxed code.z is not safely callable)rq r Úcall)Ú_SandboxedEnvironment__selfr r¡ r- r` s r5 r£ zSandboxedEnvironment.call„ s@ € ð ×&Ñ& uÔ-Ü 5 )Ð+BÐ CÓDÐ DØ ˆy�~‰~˜eÐ5 dÒ5¨fÑ5Ð5r7 )+r� Ú
|
|||
|
|
__module__Ú __qualname__Ú__doc__Ú sandboxedrs r ÚsubÚmulÚtruedivÚfloordivÚpowÚmodr\ r� ÚDictr� ÚCallablerž Ú__annotations__ÚposÚnegr] Ú frozensetr^ Ú FrozenSetr_ rc Úboolrm rq r
|
|||
|
|
rw rz ÚUnionr rˆ rp rƒ ÚOptionalr‚ r£ Ú
|
|||
|
|
__classcell__©ri s @r5 rV rV ± sÅ ø… ñð €Ið �\‰\Ø
|
|||
|
|
�\‰\Ø
|
|||
|
|
�\‰\Ø
|
|||
|
|
×
|
|||
|
|
Ñ
|
|||
|
|
Ø× Ñ Ø�l‰lØ
|
|||
|
|
�\‰\ñKИŸ™ Q§Z¡Z°·±¸¿¹°ÀÇÁÐ0EÑ%FÐ FÑGó ð �\‰\Ø
|