U QV‚g¨ã@sZddlmZddlmZddlmZddlmZGdd„dƒZdd „Z Gd d „d eƒZ d S) é)Úurlparse)Úsettings)Úis_same_domainé)ÚAsyncWebsocketConsumerc@s@eZdZdZdd„Zdd„Zdd„Zdd „Zd d „Zd d „Z dS)ÚOriginValidatorze Validates that the incoming connection has an Origin header that is in an allowed list. cCs||_||_dS©N)Ú applicationÚallowed_origins)Úselfr r ©r ú?/tmp/pip-unpacked-wheel-lkk2pq7o/channels/security/websocket.pyÚ__init__szOriginValidator.__init__c Ãs˜|ddkrtdƒ‚d}| dg¡D]8\}}|dkr$zt| d¡ƒ}Wq$tk rZYq$Xq$| |¡r|| |||¡IdHStƒ}||||ƒIdHSdS)NÚtypeZ websocketzIsÿz2OriginValidator.validate_origin..)Úanyr rr r#r r8sþzOriginValidator.validate_origincCsˆ|dkr dSt| ¡ƒ}|jdkr&dS|jsJtd|ƒjp<|}t|j|ƒS| |¡}| |¡}|j|jkr„||kr„t|j|jƒr„dSdS)aü Returns ``True`` if the origin is either an exact match or a match to the wildcard pattern. Compares scheme, domain, port of origin and pattern. Any pattern can be begins with a scheme. After the scheme must be a domain, or just domain without scheme. Any domain beginning with a period corresponds to the domain and all its subdomains (for example, ``.example.com`` ``example.com`` and any subdomain). Also with scheme (for example, ``http://.example.com`` ``http://exapmple.com``). After the domain there must be a port, but it can be omitted. Note. This function assumes that the given origin is either None, a schema-domain-port string, or just a domain string NFz//T)rÚlowerÚhostnameÚschemerÚget_origin_port)r rr"Zparsed_patternZpattern_hostnameÚ origin_portZ pattern_portr r r r Ns$      ÿþ ýz$OriginValidator.match_allowed_origincCsH|jdk r|jS|jdks$|jdkr(dS|jdks<|jdkr@dSdSdS)zq Returns the origin.port or port for this schema by default. Otherwise, it returns None. NÚhttpÚwséPÚhttpsÚwssi»)Úportr()r Úoriginr r r r)us zOriginValidator.get_origin_portN) Ú__name__Ú __module__Ú __qualname__Ú__doc__rrrrr r)r r r r r s 'rcCs$tj}tjr|sdddg}t||ƒS)zi Factory function which returns an OriginValidator configured to use settings.ALLOWED_HOSTS. Ú localhostz 127.0.0.1z[::1])rZ ALLOWED_HOSTSÚDEBUGr)r Z allowed_hostsr r r ÚAllowedHostsOriginValidatorˆs  r8c@seZdZdZdd„ZdS)rz= Simple application which denies all requests to it. cÃs| ¡IdHdSr)Úclose)r r r r Úconnect˜szWebsocketDenier.connectN)r2r3r4r5r:r r r r r“srN) Ú urllib.parserZ django.confrZdjango.http.requestrZgeneric.websocketrrr8rr r r r Ús