_VO@sddlmZddlZddlZddlZddlmZddlmZddl m Z ddl m Z ddl mZmZddlmZdd lmZmZdd lmZdd lmZmZdd lmZmZmZmZmZdd l m!Z!ddl"m#Z#m$Z$m%Z%m&Z&m'Z'e(Z)ej*dZ+Gddde,Z-Gddde.Z/Gddde(Z0GdddeZ1ddZ2ddZ3ddZ4dS))unicode_literalsN)BytesIO)chain)settings)signing)DisallowedHostImproperlyConfigured) uploadhandler)MultiPartParserMultiPartParserError)six) ImmutableListMultiValueDict)escape_uri_path force_bytes force_str force_text iri_to_uri)is_same_domain) parse_qslquote urlencodeurljoinurlsplitz/^([a-z0-9.-]+|\[[a-f0-9]*:[a-f0-9:]+\])(:\d+)?$c@seZdZdS)UnreadablePostErrorN)__name__ __module__ __qualname__rr5/tmp/pip-build-ghmbqnp_/Django/django/http/request.pyrs rc@seZdZdZdS)RawPostDataExceptionz You cannot access raw_post_data from a request that has multipart/* POST data if it has been accessed via POST, FILES, etc.. N)rrr__doc__rrrrr s r c@seZdZdZdZgZddZddZddZd d Z d d Z d ddZ e ddddZ ddZdddZddZeddZddZddZedd Zejd!d Zd"d#Zed$d%Zejd&d%Zd'd(Zed)d*Zd+d,Zd-d.Zd/d0Zd1d2Zd3d4Zd5d6Z e Z!d7d8Z"dS)9 HttpRequestzA basic HTTP request.NcCsstdd|_tdd|_i|_i|_t|_d|_d|_d|_ d|_ d|_ dS)NmutableTF) QueryDictGETPOSTCOOKIESMETArZFILESpathZ path_infomethodZresolver_match_post_parse_error)selfrrr__init__0s       zHttpRequest.__init__cCs\|jdks|j r0td|jjStd|jj|jt|jfS)Nz<%s>z <%s: %s %r>)r+ get_full_pathr __class__r)r-rrr__repr__AszHttpRequest.__repr__cCstjr(d|jkr(|jd}nid|jkrG|jd}nJ|jd}|j}||jrudndkrd||f}n|S)z Return the HTTP host using the environment or request headers. Skip allowed hosts protection, so may return an insecure host. ZHTTP_X_FORWARDED_HOSTZ HTTP_HOSTZ SERVER_NAMEZ44380z%s:%s)rZUSE_X_FORWARDED_HOSTr)get_port is_secure)r-hostZ server_portrrr _get_raw_hostHs   zHttpRequest._get_raw_hostcCs|j}tjr|St|\}}|rGt|tjrG|Sd|}|rh|d|7}n |d7}t|dS)z>Return the HTTP host using the environment or request headers.zInvalid HTTP_HOST header: %r.z) You may need to add %r to ALLOWED_HOSTS.zB The domain name provided is not valid according to RFC 1034/1035.N)r6rDEBUGsplit_domain_port validate_hostZ ALLOWED_HOSTSr)r-r5domainportmsgrrrget_host[s    zHttpRequest.get_hostcCs?tjr(d|jkr(|jd}n |jd}t|S)z3Return the port number for the request as a string.ZHTTP_X_FORWARDED_PORTZ SERVER_PORT)rZUSE_X_FORWARDED_PORTr)str)r-r;rrrr3ns zHttpRequest.get_portFcCsmdt|j|r.|jjd r.dnd|jjddredt|jjddndfS)Nz%s%s%s/r$ QUERY_STRING?)rr*endswithr)getr)r-Zforce_append_slashrrrr/vs "zHttpRequest.get_full_pathr$cCsy|j|}Wn%tk r8|tk r1|SYnXy)tjd||j|d|}Wn(tjk r|tk r|SYnX|S)z Attempts to return a signed cookie. If the signature fails or the cookie has expired, raises an exception... unless you provide the default argument in which case that value will be returned instead. saltmax_age)r(KeyError RAISE_ERRORrZget_cookie_signerZunsignZ BadSignature)r-keydefaultrDrEZ cookie_valuevaluerrrget_signed_cookies   zHttpRequest.get_signed_cookiecCs+djd|jd|jd|jS)z Return an absolute URI from variables available in this request. Skip allowed hosts protection, so may return insecure URI. z{scheme}://{host}{path}schemer5r*)formatrLr6r/)r-rrr get_raw_uris   zHttpRequest.get_raw_uricCs|dkrd|j}nt|}|jo:|jsydjd|jd|jd|j}t||}nt|S)a Builds an absolute URI from the location and the variables available in this request. If no ``location`` is specified, the absolute URI is built on ``request.get_full_path()``. Anyway, if the location is absolute, it is simply converted to an RFC 3987 compliant URI and returned and if location is relative or is scheme-relative (i.e., ``//example.com/``), it is urljoined to a base URL constructed from the request variables. Nz//%sz{scheme}://{host}{path}rLr5r*) r/rrLnetlocrMr=r*rr)r-locationbitsZ current_urirrrbuild_absolute_uris    zHttpRequest.build_absolute_uricCsdS)zg Hook for subclasses like WSGIRequest to implement. Returns 'http' by default. httpr)r-rrr _get_schemeszHttpRequest._get_schemec Csftjr\ytj\}}Wntk r<tdYnX|jj||kr\dSn|jS)NzJThe SECURE_PROXY_SSL_HEADER setting must be a tuple containing two values.https)rZSECURE_PROXY_SSL_HEADER ValueErrorrr)rCrT)r-headerrJrrrrLs  zHttpRequest.schemecCs |jdkS)NrU)rL)r-rrrr4szHttpRequest.is_securecCs|jjddkS)NZHTTP_X_REQUESTED_WITHZXMLHttpRequest)r)rC)r-rrris_ajaxszHttpRequest.is_ajaxcCs|jS)N) _encoding)r-rrrencodingszHttpRequest.encodingcCs=||_t|dr!|`nt|dr9|`ndS)z Sets the encoding used for GET/POST accesses. If the GET or POST dictionary has already been created, it is removed and recreated on the next access (so that it is decoded correctly). _get_postN)rYhasattrr[r\)r-valrrrrZs   cs#fddtjD_dS)Ncs"g|]}tj|qSr)r Z load_handler).0handler)r-rr s z4HttpRequest._initialize_handlers..)rZFILE_UPLOAD_HANDLERS_upload_handlers)r-r)r-r_initialize_handlerssz HttpRequest._initialize_handlerscCs|js|jn|jS)N)rbrc)r-rrrupload_handlerss  zHttpRequest.upload_handlerscCs+t|drtdn||_dS)N_fileszGYou cannot set the upload handlers after the upload has been processed.)r]AttributeErrorrb)r-rdrrrrdscCs=t|jdd|_t|||j|j}|jS)z:Returns a tuple of (POST QueryDict, FILES MultiValueDict).warningzEYou cannot alter upload handlers after the upload has been processed.)r rdr rZparse)r-r)Z post_dataparserrrrparse_file_uploads   zHttpRequest.parse_file_uploadcCst|ds|jr'tdny|j|_WnKtk r}z+tjtt|j t j dWYdd}~XnXt |j|_ n|jS)N_bodyz?You cannot access body after reading from request's data stream)r] _read_startedr readrkIOErrorr reraiserargssysexc_infor_stream)r-errrbodys 9zHttpRequest.bodycCs(td|_t|_d|_dS)Nr$T)r%r\rrer,)r-rrr_mark_post_parse_error s z"HttpRequest._mark_post_parse_errorc Cs`|jdkr8tdd|jt|_|_dS|jr_t|d r_|jdS|j j ddj drt|drt |j }n|}y%|j|j |\|_|_Wq\tk r|jYq\Xnn|j j ddj dr7t|jd|jt|_|_n%tdd|jt|_|_dS) zFPopulate self._post and self._files if the content-type is a form typer'r$rZNrk CONTENT_TYPEzmultipart/form-dataz!application/x-www-form-urlencoded)r+r%rYrr\rermr]rwr)rC startswithrrkrjr rv)r-datarrr_load_post_and_filess$% %   +z HttpRequest._load_post_and_filescCsPt|drLx:tjdd|jjDD]}|jq5WndS)Nrecss|]}|dVqdS)Nr)r_lrrr 2sz$HttpRequest.close..)r]r from_iterablerelistsclose)r-frrrr0s,zHttpRequest.closecOsrd|_y|jj||SWnKtk rm}z+tjtt|jtj dWYdd}~XnXdS)NTrl) rmrtrnror rprrqrrrs)r-rqkwargsrurrrrn=s  zHttpRequest.readcOsrd|_y|jj||SWnKtk rm}z+tjtt|jtj dWYdd}~XnXdS)NTrl) rmrtreadlineror rprrqrrrs)r-rqrrurrrrDs  zHttpRequest.readlineccs&x|j}|sPn|VqWdS)N)r)r-bufrrr xreadlinesKs  zHttpRequest.xreadlinescCstt|S)N)listiter)r-rrr readlinesTszHttpRequest.readlines)#rrrr!rYrbr.r1r6r=r3r/rGrKrNrRrTpropertyrLr4rXrZsetterrcrdrjrvrwr{rrnrr__iter__rrrrrr")s>                 r"csKeZdZdZdZdZdddfddZeddZej d dZd d Z fd d Z fddZ ddZ ddZfddZdfddZfddZfddZfddZfddZdfd d!Zd"d#Zdd$d%ZS)&r%a A specialized MultiValueDict which represents a query string. A QueryDict can be used to represent GET or POST data. It subclasses MultiValueDict since keys in such data can be repeated, for instance in the data from a form with a