a d@sVdZdZddlmZmZmZddlmZddlZddl Z ddl Z ddl m Z ddlmZddlZddlZddlZgdZd adad d Zd d ZddZddZeadade jdddfddZd2ddZddZddZ GdddZ!Gdd d Z"e jfd!d"Z#d3d#d$Z$e jfd%d&Z%d'd(Z&d)d*Z'd+d,Z(d-d.Z)d/d0Z*e+d1krRe#dS)4zSupport module for CGI (Common Gateway Interface) scripts. This module defines a number of utilities for use by CGI scripts written in Python. z2.6)StringIOBytesIO TextIOWrapper)MappingN) FeedParser)Message) MiniFieldStorage FieldStorageparseparse_multipart parse_headertestprint_exception print_environ print_formprint_directoryprint_argumentsprint_environ_usagecGsDtr*ts*zttdaWnty(Yn0ts4tantat|dS)aWrite a log message, if there is a log file. Even though this function is called initlog(), you should always use log(); log is a variable that is set either to initlog (initially), to dolog (once the log file has been opened), or to nolog (when logging is disabled). The first argument is a format string; the remaining arguments (if any) are arguments to the % operator, so e.g. log("%s: %s", "a", "b") will write "a: b" to the log file, followed by a newline. If the global logfp is not None, it should be a file object to which log data is written. If the global logfp is None, the global logfile may be a string giving a filename to open, in append mode. This file should be world writable!!! If the file can't be opened, logging is silently disabled (since there is no safe place where we could send an error message). aN)logfilelogfpopenOSErrornologlogdologallargsr/usr/lib64/python3.9/cgi.pyinitlog8s r!cGst||ddS)z=Write a log message to the log file. See initlog() for docs. N)rwrite)fmtargsrrr r[srcGsdS)z9Dummy function, assigned to log when logging is disabled.Nrrrrr r_srcCsdatrtdatadS)zClose the log file.rN)rrcloser!rrrrr closelogcs r'&c Cs^|durtj}t|dr |j}nd}t|tr4|j}d|vrDd|d<|ddkr t|d\}}|dkrxt|||d S|d krt |d }t r|t krt d | | |} nd } d|vr| r| d} | |d} n*tjddr| r| d} | tjd} | |d<nz#parse_multipart..)r=formatrset_typeKeyErrorr )rArFr)rNr.rKrErMrrRr r s    r ccs|dddkr|dd}|d}|dkr`|dd||dd|dr`|d|d}q&|dkrpt|}|d|}|V||d}qdS)Nr3;r"\")findcountlenstrip)sendfrrr _parseparams  (  rdcCstd|}|}i}|D]}|d}|dkr|d|}||dd}t|dkr|d|dkrdkrnn |dd}|d d d d}|||<q||fS) zfParse a Content-type like header. Return the main content-type and a dictionary of options. rY=rNr3r\rZz\\\r[)rd__next__r]r`lowerr_rJ)linepartskeyrFpinamevaluerrr r s  ,  r c@s@eZdZdZdZdZdZdZiZdZ iZ iZ ddZ ddZ dS)rz=Like FieldStorage, for use when no file uploads are possible.NcCs||_||_dS)z&Constructor from field name and value.Nrorpselfrorprrr __init__ szMiniFieldStorage.__init__cCsd|j|jfS)z Return printable representation.zMiniFieldStorage(%r, %r)rqrsrrr __repr__szMiniFieldStorage.__repr__)__name__ __module__ __qualname____doc__filenamelisttypefile type_options dispositiondisposition_optionsrMrtrvrrrr rsrc @seZdZdZdddejdddddddf dd Zd d Zd d ZddZ ddZ ddZ ddZ ddZ d;ddZdencodelocalegetpreferredencodingrr7rr TypeErrorrMr5r8rArr6r)rNbytesr}rw outerboundary bytes_readlimitr rrror{ _binary_filer innerboundaryr9r;r:lengthr|r~doneread_urlencoded read_multi read_single)rsrArMrrBrCrDrr)rNrr.methodrHcdisprFrEclenrrr rt?s/                          zFieldStorage.__init__cCs&z|jWnty Yn0dSN)r~r&AttributeErrorrurrr __del__s zFieldStorage.__del__cCs|Srrrurrr __enter__szFieldStorage.__enter__cGs|jdSr)r~r&)rsr%rrr __exit__szFieldStorage.__exit__cCsd|j|j|jfS)z"Return a printable representation.zFieldStorage(%r, %r, %r))ror{rprurrr rvs zFieldStorage.__repr__cCs t|Sr)iterkeysrurrr __iter__szFieldStorage.__iter__cCsT|dkrt||jr:|jd|j}|jdn|jdurL|j}nd}|S)Nrpr)rr~seekr<r|rrrrr __getattr__s   zFieldStorage.__getattr__cCs^|jdurtdg}|jD]}|j|kr||q|sBt|t|dkrV|dS|SdS)zDictionary style indexing.N not indexabler3r)r|rroappendrXr_)rsrlfounditemrrr __getitem__s   zFieldStorage.__getitem__cCs8||vr0||}t|tr(dd|DS|jSn|SdS)z8Dictionary style get() method, including 'value' lookup.cSsg|] }|jqSrrprPxrrr rUz)FieldStorage.getvalue..Nr7r|rprsrldefaultrprrr getvalues  zFieldStorage.getvaluecCs4||vr,||}t|tr$|djS|jSn|SdS)z! Return the first value received.rNrrrrr getfirsts   zFieldStorage.getfirstcCs:||vr2||}t|tr(dd|DS|jgSngSdS)z Return list of received values.cSsg|] }|jqSrrrrrr r.rUz(FieldStorage.getlist..Nr)rsrlrprrr rO)s   zFieldStorage.getlistcCs*|jdurtdttdd|jDS)zDictionary style keys() method.Nrcss|] }|jVqdSrrorPrrrr 8rUz$FieldStorage.keys..)r|rsetrurrr r4s zFieldStorage.keyscs*|jdurtdtfdd|jDS)z%Dictionary style __contains__ method.Nrc3s|]}|jkVqdSrrrrlrr r>rUz,FieldStorage.__contains__..)r|rany)rsrlrrr __contains__:s zFieldStorage.__contains__cCs t|S)z Dictionary style len(x) support.)r_rrurrr __len__@szFieldStorage.__len__cCs|jdurtdt|jS)NzCannot be converted to bool.)r|rboolrurrr __bool__Ds zFieldStorage.__bool__c Cs|j|j}t|ts0td|jt|jf||j |j }|j rT|d|j 7}t j j||j|j|j |j |j|jd}dd|D|_|dS)z+Internal: read data in query string format.%s should return bytes, got %sr(r)rNrr.cSsg|]\}}t||qSrrrPrlrprrr rVrUz0FieldStorage.read_urlencoded..N)rAr<rr7rr;r}rwr=r)rNrr?r parse_qslrCrDrr.r| skip_lines)rsrHqueryrrr rIs  zFieldStorage.read_urlencodedc CsL|j}t|std|fg|_|jrftjj|j|j|j |j |j |j |j d}|jdd|D|jpp|j}|j}t|tstd|jt|jf|jt|7_|d|jkr|r|j}|jt|7_q|j }|dur|t|j8}t} d} |j} | | 7} | s q0q | s:q@|jt| 7_| | |j |j | } d | vrz| d =|jdurdn |j|j} ||j| ||||| |j |j ||j }|dur|d 8}|jr|t|j8}|d krtd |j|j7_|j||j s@|j|j!kr4d krnnq@q|"dS) z/Internal: read a part that is itself multipart.z&Invalid boundary in multipart form: %rrcss|]\}}t||VqdSrrrrrr rfrUz*FieldStorage.read_multi..r--NrUrr3rzMax number of fields exceeded)#rvalid_boundaryr;r|rr?r rrCrDr)rNrr.extendFieldStorageClass __class__rArr7rr}rwrr_r`rfeedr=r&rrrrr)rsrBrCrDibrklass first_linerparserhdr_textdatarMrpartrrr r[sr             (zFieldStorage.read_multicCs4|jdkr||n||jddS)zInternal: read an atomic part.rN)r read_binaryr read_linesr~rrurrr rs   zFieldStorage.read_singlei cCs||_|j}|dkr|dkr|jt||j}t|tsVt d|jt |j f|j t |7_ |std|_q|j||t |}qdS)zInternal: read binary data.rrrfN) make_filer~rrAr<minbufsizer7rr;r}rwrr_rr#)rstodorrrr rs   zFieldStorage.read_binarycCs@|jrt|_|_nt|_|_|jr4|n|dS)z0Internal: read lines until EOF or outerboundary.N)rrr~_FieldStorage__filerrread_lines_to_outerboundaryread_lines_to_eofrurrr rs  zFieldStorage.read_linescCsv|jdurF|jt|dkrF||_|j}|j|d|_|jrZ|j|n|j||j |j dS)z line is always bytes, not stringNi) rtellr_rr~rr#rr=r)rN)rsrjrrrr __writes    zFieldStorage.__writecCs:|jd}|jt|7_|s*d|_q6||qdS)zInternal: read lines until EOF.rfN)rArrr_r_FieldStorage__write)rsrjrrr rs  zFieldStorage.read_lines_to_eofc CsJd|j}|d}d}d}d}|jdurFd|jkr>|krFnnqF|jd}|jt|7_|t|7}|s~d|_qF|dkr||}d}|dr|r|}||krqF||krd |_qF|}| d rd }|dd }d}nL| d r d }|dd}d}n*| dr.d}|dd}d }nd}d }| ||qdS)zInternal: read lines until outerboundary. Data is read as bytes: boundaries and line ends must be converted to bytes for comparisons. rrUTrNrrf r3s  F) rrrArrr_r startswithrstripendswithr) rs next_boundary last_boundarydelimlast_line_lfend_readrj strippedlineodelimrrr rsN $        z(FieldStorage.read_lines_to_outerboundarycCs|jr |jrdSd|j}|d}d}|jd}|jt|7_|sPd|_q|dr|r|}||krpq||krd|_q|d}q&dS)z5Internal: skip lines until outer boundary if defined.NrTrrfr3r)rrrArrr_rr`)rsrrrrjrrrr rs$   zFieldStorage.skip_linescCs&|jrtdStjd|jddSdS)aOverridable: return a readable & writable file. The file will be used as follows: - data is written to it - seek(0) - data is read from it The file is opened in binary mode for files, in text mode for other fields This version opens a temporary file for reading and writing, and immediately deletes (unlinks) it. The trick (on Unix!) is that the file can still be used, but it can't be opened by another process, and it will automatically be deleted when it is closed or when the current process terminates. If you want a more permanent file, you derive a class which overrides this method. If you want a visible temporary file that is nevertheless automatically deleted when the script terminates, try defining a __del__ method in a derived class which unlinks the temporary files you have created. zwb+zw+r")r)newlineN)rtempfile TemporaryFiler)rurrr r(s  zFieldStorage.make_file)N)N)!rwrxryrzosrBrtrrrrvrrrrrrOrrrrrrrrrrrrrrrrrrrr r sB) &   E   2r cCstdttjt_zNt}ttt|t|t dd}|fdd}td|Wnt Yn0tdda z&t}ttt|t|Wnt Yn0d S) zRobust test CGI script, usable as main program. Write minimal HTTP headers and dump all information provided to the script in HTML form. zContent-type: text/htmlcSs tddS)Nz,testing print_exception() -- italics?)execrrrr rc[sztest..fcSs |dSrr)rcrrr g]sztest..gz9

What follows is a test, not an actual exception:

z*

Second try with a small maxlen...

2N) printr4stdoutstderrr rrrrrrr:)rBformrcrrrr r Js4    r c Csx|durt\}}}ddl}ttd||||||}tdtd|ddt|df~dS)Nrz+

Traceback (most recent call last):

z
%s%s
rrf) r4exc_info tracebackr format_tbformat_exception_onlyhtmlescapejoin)r}rptbrrr|rrr rqs   rc Cs\t|}ttdtd|D]"}tdt|dt||q&tdtdS)z#Dump the shell environment as HTML.z

Shell Environment:





N)sortedrrrr)rBrrlrrr rs  rcCst|}ttd|s&tdtd|D]Z}tdt|ddd||}tdttt|d td tt|q2td td S) z$Dump the contents of a form as HTML.z

Form Contents:

z

No form fields.rr: )rbzzrrN)rrrrrreprr})rrrlrprrr rs rc Cslttdz t}Wn8tyR}z tdtt|WYd}~nd}~00tt|tdS)z#Dump the current directory as HTML.z#

Current Working Directory:

zOSError:N)rrgetcwdrrrstr)pwdmsgrrr rs *rcCs(ttdtttjtdS)Nz

Command Line Arguments:

)rr4r>rrrr rs  rcCs tddS)z9Dump a list of environment variables used by CGI as HTML.a

These environment variables could have been set:

  • AUTH_TYPE
  • CONTENT_LENGTH
  • CONTENT_TYPE
  • DATE_GMT
  • DATE_LOCAL
  • DOCUMENT_NAME
  • DOCUMENT_ROOT
  • DOCUMENT_URI
  • GATEWAY_INTERFACE
  • LAST_MODIFIED
  • PATH
  • PATH_INFO
  • PATH_TRANSLATED
  • QUERY_STRING
  • REMOTE_ADDR
  • REMOTE_HOST
  • REMOTE_IDENT
  • REMOTE_USER
  • REQUEST_METHOD
  • SCRIPT_NAME
  • SERVER_NAME
  • SERVER_PORT
  • SERVER_PROTOCOL
  • SERVER_ROOT
  • SERVER_SOFTWARE
In addition, HTTP headers sent by the server may be passed in the environment as well. Here are some common variable names:
  • HTTP_ACCEPT
  • HTTP_CONNECTION
  • HTTP_HOST
  • HTTP_PRAGMA
  • HTTP_REFERER
  • HTTP_USER_AGENT
N)rrrrr rsrcCs(ddl}t|trd}nd}|||S)Nrs^[ -~]{0,200}[!-~]$z^[ -~]{0,200}[!-~]$)rer7rmatch)rar  _vb_patternrrr rs  r__main__)rIrJr()NNNN),rz __version__iorrrcollections.abcrr4r urllib.parser? email.parserr email.messagerrrr__all__rrr!rrr'rr:rBr r rdr rr r rrrrrrrrwrrrr  sT   #  F  :'   /