8.ڊ]6ddlZddlZddlZddlZddlZddlmZddlmZm Z ddl m Z mZm Z m Z mZejZdZdZdZd Zd Zd Zd Zd ZdZdZdZe j6ZdZdZegZGddeZ GddZ!dZ"d dZ#dZ$dZ%dZ&dZ'd!dZ(dZ)dZ*y)"N)_)getattropen)encodingpycompatscmutil templaterutili0iiiiiiiict|jjdrY|j}|j dd}|j }|rt |||rytd|z}|j|y)Ns access-hiddens experimentalsserver.allow-hidden-accessTsEignoring request to access hidden changeset by unauthorized user: %r F) boolqsparamsgetui configlist remoteuserismemberrwarn)reporeqrallowusermsgs :usr/lib/python3.12/site-packages/mercurial/hgweb/common.pyhashiddenaccessr.s~ CLL  - ./WW o/LM~~ Xb$./   GGCL c|j}|jdd}|r3|r!t|jj||rt t d|jdd}|r1t|jj||st t d|dk(r|jst t d|dk(s|y|dk(r!|jd k7r3d }t t||jd k7rd }t t||jdd r|jdk7rt td|jdd}|r3|r!t|jj||rt t d|jdd}|r!t|jj||st t dy)zCheck permission for operation based on request data (including authentication info). Return if op allowed, else raise an ErrorResponse exception.webs deny_readsread not authorizeds allow_readspullspull not authorizedNsuploadsPUTsupload requires PUT requestsPOSTspush requires POST requestspush_sslshttpss ssl requireds deny_pushspush not authorizeds allow-push) rrrrr ErrorResponseHTTP_UNAUTHORIZED allowpullmethodHTTP_METHOD_NOT_ALLOWED configbool urlschemeHTTP_FORBIDDEN) hgwebropr deny_read allow_readrdenyrs r checkauthzr.Hs >>D  6I$(5::==$ "J-/EFF!!&-8J8EJJMM4D-/EFF W}U__-/EFF w"* Y :: 0C 7= = w +3S99  ,(1JNO<<   FL 1D TXejjmmT4@-/EFF   V] 3E huzz}}dE:-/EFF;rceZdZddZy)r!Nc| t|}tj|tj|||_|g}||_||_yN)_statusmessage Exception__init__rsysstrcodeheadersmessage)selfr6r8r7s rr4zErrorResponse.__init__sI ?$T*G4!9: ?G  r)NN)__name__ __module__ __qualname__r4rrr!r!~srr!c$eZdZdZdZddZdZy)continuereadera.File object wrapper to handle HTTP 100-continue. This is used by servers so they automatically handle Expect: 100-continue request headers. On first read of the request body, the 100 Continue response is sent. This should trigger the client into actually sending the request body. c.||_||_d|_y)NF)f_write continued)r9rAwrites rr4zcontinuereader.__init__s rc|jsd|_|jd|jj|S)NTsHTTP/1.1 100 Continue )rCrBrAread)r9amts rrFzcontinuereader.reads0~~!DN KK8 9vv{{3rcB|dvrt|j|St)N)sclosesreadlines readliness__iter__)rrAAttributeError)r9attrs r __getattr__zcontinuereader.__getattr__s" E E4664( (rN))r:r;r<__doc__r4rFrKr=rrr?r?s  rr?ctjj}tj|j |ddS)N)Errorz Unknown errorr) httpserverbasehttprequesthandler responsesrbytesurlr)r6rRs rr2r2s511;;I   Y]]41KLQO PPrc*d||xs t|fzS)Ns%d %s)r2)r6r8s r statusmessagerUs tW<t(<= ==rctjj||}tjj|rtj|Stj|S)z%stat fn if it exists, spath otherwise)ospathjoinexistsstat)spathfncl_paths rget_statr_sCggll5"%G ww~~gwwwwwu~rc<t|dtjS)Ns 00changelog.i)r_r[ST_MTIME)r\s r get_mtimerbs E+ ,T]] ;;rc|jd}|D]\}|dtjtjfvs6tj|vs$tj Itj |vs\yy)z9Determine if a path is safe to use for filesystem access./rFT)splitroscurdirospardirosseposaltsep)rXpartsparts r ispathsaferlsc JJt E S(++X->->? ?~~%  ,!!T) rct|sy|s:|xstj}| tjj |d}tjj |j d}tjtjtj|dxsd}tjj ||} tj|t|d5}|j} ddd||j2d<|j5 |S#1swY+xYw#t$rt!t"dt$$r^} | j&t&j(k(rt!t*t!t"t-j.| j0d} ~ wwxYw) a+return a file inside directory with guessed Content-Type header fname always uses '/' as directory separator and isn't allowed to contain unusual path components. Content-Type is guessed using the mimetypes module. Return an empty string if fname is illegal or file not found. Nsstaticrdrz text/plainsrbsillegal filenames Content-Type)rlr templatedirrWrXrYrersysbytes mimetypes guess_typefsdecoder[rrF TypeErrorr!HTTP_SERVER_ERROROSErrorerrnoENOENTHTTP_NOT_FOUNDr strtolocalstrerrorr7 setbodybytes) templatepath directoryfnamerestpfpathctrXfhdataerrs r staticfilers] e    4Y224 > R3I GGLL%++d+ ,E   X..u56q9J] B 77<< 5 )D   $ "779D$&CKK T J  D-/BCC  99 $/ /!8#6#6s||#D  s1!D?8D3 D?3D<8D??!F> AF99F>c#tK|r|r||z|z}||z|zdz}nd}d} ||dz }|r ||k\rd|z }d}w)z5count parity of horizontal stripes for easier readingrr=) stripecountoffsetcountparitys r paritygenrsfvv%4&;6:     5K/ZFE s68ct|ddxs.|ddxs#tjjdxsdS)zReturn repo contact information or empty string. web.contact is the primary source, but if that is not set, try ui.username or $EMAIL as a fallback to display something useful. r scontactsuisusernamesEMAILr)renvironr)configs r get_contactrsE vz"  % %       )   rcddl}|jddd}d}|rRd|vrNtj|j j j d}|jd|}||fS) aObtain the Content-Security-Policy header and nonce value. Returns a 2-tuple of the CSP header value and the nonce value. First value is ``None`` if CSP isn't enabled. Second value is ``None`` if CSP isn't enabled or if the CSP header doesn't need a nonce. rNr scspF) untrusteds%nonce%=)uuidrbase64urlsafe_b64encodeuuid4bytesrstripreplace)rrcspnonces r cspvaluesrsm. ))FFe) 4C E zS ((););<CCDIkk*e, :rr1)r)+rrvrprWr[i18nrrrrrr r r rPHTTP_OK HTTP_CREATEDHTTP_NOT_MODIFIEDHTTP_BAD_REQUESTr"r(rxr%HTTP_NOT_ACCEPTABLEHTTP_UNSUPPORTED_MEDIA_TYPErtrrr. permhooksr3r!r?r2rUr_rbrlrrrrr=rrrs  __  !   4)GfL  I 4Q >< &R" "r