q&f&2ddlZddlZddlZddlZddlZddlmZddlmZddl m Z mZm Z m Z m Z e jZdZdZdZd Zd Zd Zd Zd ZdZdZdZe j4ZdZdZegZGddeZGddZ dZ!d dZ"dZ#dZ$dZ%dZ&d!dZ'dZ(dZ)y)"N)_)open)encodingpycompatscmutil templaterutili0iiiiiiiict|jjdrY|j}|j dd}|j }|rt |||rytd|z}|j|y)Ns access-hiddens experimentalsserver.allow-hidden-accessTsEignoring request to access hidden changeset by unauthorized user: %r F) boolqsparamsgetui configlist remoteuserismemberrwarn)reporeqrallowusermsgs 8/usr/lib/python3/dist-packages/mercurial/hgweb/common.pyhashiddenaccessr-s~ CLL  - ./WW o/LM~~ Xb$./   GGCL c|j}|jdd}|r3|r!t|jj||rt t d|jdd}|r1t|jj||st t d|dk(r|jst t d|dk(s|y|dk(r!|jd k7r3d }t t||jd k7rd }t t||jdd r|jdk7rt td|jdd}|r3|r!t|jj||rt t d|jdd}|r!t|jj||st t dy)zCheck permission for operation based on request data (including authentication info). Return if op allowed, else raise an ErrorResponse exception.webs deny_readsread not authorizeds allow_readspullspull not authorizedNsuploadsPUTsupload requires PUT requestsPOSTspush requires POST requestspush_sslshttpss ssl requireds deny_pushspush not authorizeds allow-push) rrrrr ErrorResponseHTTP_UNAUTHORIZED allowpullmethodHTTP_METHOD_NOT_ALLOWED configbool urlschemeHTTP_FORBIDDEN) hgwebropr deny_read allow_readrdenyrs r checkauthzr-Gs >>D  6I$(5::==$ "J-/EFF!!&-8J8EJJMM4D-/EFF W}U__-/EFF w"* Y :: 0C 7= = w +3S99  ,(1JNO<<   FL 1D TXejjmmT4@-/EFF   V] 3E huzz}}dE:-/EFF;rceZdZddZy)r Nc| t|}tj|tj|||_|g}||_||_yN)_statusmessage Exception__init__rsysstrcodeheadersmessage)selfr5r7r6s rr3zErrorResponse.__init__~sI ?$T*G4!9: ?G  r)NN)__name__ __module__ __qualname__r3rrr r }srr c$eZdZdZdZddZdZy)continuereadera.File object wrapper to handle HTTP 100-continue. This is used by servers so they automatically handle Expect: 100-continue request headers. On first read of the request body, the 100 Continue response is sent. This should trigger the client into actually sending the request body. c.||_||_d|_y)NF)f_write continued)r8r@writes rr3zcontinuereader.__init__s rc|jsd|_|jd|jj|S)NTsHTTP/1.1 100 Continue )rBrAr@read)r8amts rrEzcontinuereader.reads0~~!DN KK8 9vv{{3rcB|dvrt|j|St)N)sclosesreadlines readliness__iter__)getattrr@AttributeError)r8attrs r __getattr__zcontinuereader.__getattr__s" E E4664( (rN))r9r:r;__doc__r3rErKr<rrr>r>s  rr>ctjj}tj|j |ddS)N)Errorz Unknown errorr) httpserverbasehttprequesthandler responsesrbytesurlr)r5rRs rr1r1s511;;I   Y]]41KLQO PPrc*d||xs t|fzS)Ns%d %s)r1)r5r7s r statusmessagerUs tW<t(<= ==rctjj||}tjj|rtj|Stj|S)z%stat fn if it exists, spath otherwise)ospathjoinexistsstat)spathfncl_paths rget_statr_sCggll5"%G ww~~gwwwwwu~rc<t|dtjS)Ns 00changelog.i)r_r[ST_MTIME)r\s r get_mtimerbs E+ ,T]] ;;rc|jd}|D]\}|dtjtjfvs6tj|vs$tj Itj |vs\yy)z9Determine if a path is safe to use for filesystem access./rFT)splitroscurdirospardirosseposaltsep)rXpartsparts r ispathsaferlsh JJt E S(++X->->? ?~~%  ,!!T) rct|sy|s:|xstj}| tjj |d}tjj |j d}tjtjtj|dxsd}tjj ||} tj|t|d5}|j} ddd||j2d<|j5 |S#1swY+xYw#t$rt!t"dt$$r^} | j&t&j(k(rt!t*t!t"t-j.| j0d} ~ wwxYw) a+return a file inside directory with guessed Content-Type header fname always uses '/' as directory separator and isn't allowed to contain unusual path components. Content-Type is guessed using the mimetypes module. Return an empty string if fname is illegal or file not found. Nsstaticrdrz text/plainsrbsillegal filenames Content-Type)rlr templatedirrWrXrYrersysbytes mimetypes guess_typefsdecoder[rrE TypeErrorr HTTP_SERVER_ERROROSErrorerrnoENOENTHTTP_NOT_FOUNDr strtolocalstrerrorr6 setbodybytes) templatepath directoryfnamerestpfpathctrXfhdataerrs r staticfilersd e    4Y224 > R3I GGLL%++d+ ,E   X..u56q9J] B 77<< 5 )D   $  "779D $&CKK T J   D-/BCC  99 $/ /!8#6#6s||#D  s1!D?8D3 D?3D<8D??!F> AF99F>c#tK|r|r||z|z}||z|zdz}nd}d} ||dz }|r ||k\rd|z }d}w)z5count parity of horizontal stripes for easier readingrr<) stripecountoffsetcountparitys r paritygenrsfvv%4&;6:     5K/ZFE s68ct|ddxs.|ddxs#tjjdxsdS)zReturn repo contact information or empty string. web.contact is the primary source, but if that is not set, try ui.username or $EMAIL as a fallback to display something useful. rscontactsuisusernamesEMAILr)renvironr)configs r get_contactrsE vz"  % %       )   rcddl}|jddd}d}|rRd|vrNtj|j j j d}|jd|}||fS) aObtain the Content-Security-Policy header and nonce value. Returns a 2-tuple of the CSP header value and the nonce value. First value is ``None`` if CSP isn't enabled. Second value is ``None`` if CSP isn't enabled or if the CSP header doesn't need a nonce. rNrscspF) untrusteds%nonce%=)uuidrbase64urlsafe_b64encodeuuid4bytesrstripreplace)rrcspnonces r cspvaluesrsm. ))FFe) 4C E zS ((););<CCDIkk*e, :rr0)r)*rrvrprWr[i18nrrrrrr r rPHTTP_OK HTTP_CREATEDHTTP_NOT_MODIFIEDHTTP_BAD_REQUESTr!r'rxr$HTTP_NOT_ACCEPTABLEHTTP_UNSUPPORTED_MEDIA_TYPErtrrr- permhooksr2r r>r1rUr_rbrlrrrrr<rrrs  __  !   4)GfL  I 4Q >< &R" "r