mercurial-scm/hg-stable: mercurial/hgweb/common.py annotate

annotate mercurial/hgweb/common.py @ 43076:2372284d9457

formatting: blacken the codebase This is using my patch to black (https://github.com/psf/black/pull/826) so we don't un-wrap collection literals. Done with: hg files 'set:**.py - mercurial/thirdparty/** - "contrib/python-zstandard/**"' | xargs black -S # skip-blame mass-reformatting only # no-check-commit reformats foo_bar functions Differential Revision: https://phab.mercurial-scm.org/D6971

author	Augie Fackler <augie@google.com>
date	Sun, 06 Oct 2019 09:45:02 -0400
parents	8d9322b6e687
children	687b865b95ad

rev	line source
2391 d351a3be3371 Fixing up comment headers for split up code. Eric Hopper <hopper@omnifarious.org> parents: 2356 diff changeset	1 # hgweb/common.py - Utility functions needed by hgweb_mod and hgwebdir_mod
131 c9d51742471c moving hgweb to mercurial subdir jake@edge2.net parents: diff changeset	2 #
238 3b92f8fe47ae hgweb.py: kill #! line, clean up copyright notice mpm@selenic.com parents: 222 diff changeset	3 # Copyright 21 May 2005 - (c) 2005 Jake Edge <jake@edge2.net>
2859 345bac2bc4ec update copyrights. Vadim Gelfer <vadim.gelfer@gmail.com> parents: 2514 diff changeset	4 # Copyright 2005, 2006 Matt Mackall <mpm@selenic.com>
131 c9d51742471c moving hgweb to mercurial subdir jake@edge2.net parents: diff changeset	5 #
8225 46293a0c7e9f updated license to be explicit about GPL version 2 Martin Geisler <mg@lazybytes.net> parents: 7966 diff changeset	6 # This software may be used and distributed according to the terms of the
10263 25e572394f5c Update license to GPLv2+ Matt Mackall <mpm@selenic.com> parents: 9694 diff changeset	7 # GNU General Public License version 2 or any later version.
131 c9d51742471c moving hgweb to mercurial subdir jake@edge2.net parents: diff changeset	8
27046 37fcfe52c68c hgweb: use absolute_import Yuya Nishihara <yuya@tcha.org> parents: 27044 diff changeset	9 from __future__ import absolute_import
37fcfe52c68c hgweb: use absolute_import Yuya Nishihara <yuya@tcha.org> parents: 27044 diff changeset	10
30766 d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	11 import base64
27046 37fcfe52c68c hgweb: use absolute_import Yuya Nishihara <yuya@tcha.org> parents: 27044 diff changeset	12 import errno
37fcfe52c68c hgweb: use absolute_import Yuya Nishihara <yuya@tcha.org> parents: 27044 diff changeset	13 import mimetypes
37fcfe52c68c hgweb: use absolute_import Yuya Nishihara <yuya@tcha.org> parents: 27044 diff changeset	14 import os
36789 ffa3026d4196 cleanup: use stat_result[stat.ST_MTIME] instead of stat_result.st_mtime Augie Fackler <augie@google.com> parents: 36677 diff changeset	15 import stat
5561 22713dce19f6 hgweb: return meaningful HTTP status codes instead of nonsense Bryan O'Sullivan <bos@serpentine.com> parents: 4462 diff changeset	16
30620 bb77654dc7ae py3: replace os.sep with pycompat.ossep (part 3 of 4) Pulkit Goyal <7895pulkit@gmail.com> parents: 29566 diff changeset	17 from .. import (
30641 f1c9fafcbf46 py3: replace os.environ with encoding.environ (part 3 of 5) Pulkit Goyal <7895pulkit@gmail.com> parents: 30630 diff changeset	18 encoding,
30620 bb77654dc7ae py3: replace os.sep with pycompat.ossep (part 3 of 4) Pulkit Goyal <7895pulkit@gmail.com> parents: 29566 diff changeset	19 pycompat,
bb77654dc7ae py3: replace os.sep with pycompat.ossep (part 3 of 4) Pulkit Goyal <7895pulkit@gmail.com> parents: 29566 diff changeset	20 util,
bb77654dc7ae py3: replace os.sep with pycompat.ossep (part 3 of 4) Pulkit Goyal <7895pulkit@gmail.com> parents: 29566 diff changeset	21 )
29566 075146e85bb6 py3: conditionalize BaseHTTPServer, SimpleHTTPServer and CGIHTTPServer import Pulkit Goyal <7895pulkit@gmail.com> parents: 29491 diff changeset	22
075146e85bb6 py3: conditionalize BaseHTTPServer, SimpleHTTPServer and CGIHTTPServer import Pulkit Goyal <7895pulkit@gmail.com> parents: 29491 diff changeset	23 httpserver = util.httpserver
075146e85bb6 py3: conditionalize BaseHTTPServer, SimpleHTTPServer and CGIHTTPServer import Pulkit Goyal <7895pulkit@gmail.com> parents: 29491 diff changeset	24
5993 948a41e77902 hgweb: explicit response status Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5930 diff changeset	25 HTTP_OK = 200
37152 cc0a6ea95d98 lfs: add support for serving blob files Matt Harbison <matt_harbison@yahoo.com> parents: 37150 diff changeset	26 HTTP_CREATED = 201
12183 f64b416b0ac8 hgweb: support very simple caching model (issue1845) Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 10264 diff changeset	27 HTTP_NOT_MODIFIED = 304
5993 948a41e77902 hgweb: explicit response status Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5930 diff changeset	28 HTTP_BAD_REQUEST = 400
6926 57b954d8d003 hgweb: raise ErrorResponses to communicate protocol errors Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 6924 diff changeset	29 HTTP_UNAUTHORIZED = 401
7029 b84d27386285 hgweb: Respond with HTTP 403 for disabled archive types instead of 404 Rocco Rutte <pdmef@gmx.net> parents: 6926 diff changeset	30 HTTP_FORBIDDEN = 403
5993 948a41e77902 hgweb: explicit response status Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5930 diff changeset	31 HTTP_NOT_FOUND = 404
6926 57b954d8d003 hgweb: raise ErrorResponses to communicate protocol errors Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 6924 diff changeset	32 HTTP_METHOD_NOT_ALLOWED = 405
37693 31a0d47d69b3 lfs: update the HTTP status codes in error cases Matt Harbison <matt_harbison@yahoo.com> parents: 37152 diff changeset	33 HTTP_NOT_ACCEPTABLE = 406
31a0d47d69b3 lfs: update the HTTP status codes in error cases Matt Harbison <matt_harbison@yahoo.com> parents: 37152 diff changeset	34 HTTP_UNSUPPORTED_MEDIA_TYPE = 415
5993 948a41e77902 hgweb: explicit response status Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5930 diff changeset	35 HTTP_SERVER_ERROR = 500
948a41e77902 hgweb: explicit response status Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5930 diff changeset	36
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	37
19032 7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	38 def ismember(ui, username, userlist):
7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	39 """Check if username is a member of userlist.
7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	40
7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	41 If userlist has a single '*' member, all users are considered members.
19951 d51c4d85ec23 spelling: random spell checker fixes Mads Kiilerich <madski@unity3d.com> parents: 19032 diff changeset	42 Can be overridden by extensions to provide more complex authorization
19032 7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	43 schemes.
7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	44 """
7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	45 return userlist == ['*'] or username in userlist
7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	46
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	47
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	48 def checkauthz(hgweb, req, op):
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	49 '''Check permission for operation based on request data (including
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	50 authentication info). Return if op allowed, else raise an ErrorResponse
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	51 exception.'''
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	52
36883 02bea04b4c54 hgweb: transition permissions hooks to modern request type (API) Gregory Szorc <gregory.szorc@gmail.com> parents: 36879 diff changeset	53 user = req.remoteuser
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	54
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	55 deny_read = hgweb.configlist('web', 'deny_read')
19032 7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	56 if deny_read and (not user or ismember(hgweb.repo.ui, user, deny_read)):
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	57 raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	58
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	59 allow_read = hgweb.configlist('web', 'allow_read')
19032 7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	60 if allow_read and (not ismember(hgweb.repo.ui, user, allow_read)):
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	61 raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	62
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	63 if op == 'pull' and not hgweb.allowpull:
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	64 raise ErrorResponse(HTTP_UNAUTHORIZED, 'pull not authorized')
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	65 elif op == 'pull' or op is None: # op is None for interface requests
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	66 return
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	67
37150 a2566597acb5 lfs: add basic routing for the server side wire protocol processing Matt Harbison <matt_harbison@yahoo.com> parents: 36883 diff changeset	68 # Allow LFS uploading via PUT requests
a2566597acb5 lfs: add basic routing for the server side wire protocol processing Matt Harbison <matt_harbison@yahoo.com> parents: 36883 diff changeset	69 if op == 'upload':
a2566597acb5 lfs: add basic routing for the server side wire protocol processing Matt Harbison <matt_harbison@yahoo.com> parents: 36883 diff changeset	70 if req.method != 'PUT':
a2566597acb5 lfs: add basic routing for the server side wire protocol processing Matt Harbison <matt_harbison@yahoo.com> parents: 36883 diff changeset	71 msg = 'upload requires PUT request'
a2566597acb5 lfs: add basic routing for the server side wire protocol processing Matt Harbison <matt_harbison@yahoo.com> parents: 36883 diff changeset	72 raise ErrorResponse(HTTP_METHOD_NOT_ALLOWED, msg)
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	73 # enforce that you can only push using POST requests
37150 a2566597acb5 lfs: add basic routing for the server side wire protocol processing Matt Harbison <matt_harbison@yahoo.com> parents: 36883 diff changeset	74 elif req.method != 'POST':
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	75 msg = 'push requires POST request'
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	76 raise ErrorResponse(HTTP_METHOD_NOT_ALLOWED, msg)
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	77
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	78 # require ssl by default for pushing, auth info cannot be sniffed
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	79 # and replayed
36883 02bea04b4c54 hgweb: transition permissions hooks to modern request type (API) Gregory Szorc <gregory.szorc@gmail.com> parents: 36879 diff changeset	80 if hgweb.configbool('web', 'push_ssl') and req.urlscheme != 'https':
17456 59a168019255 hgweb: respond 403 forbidden for ssl required error Yuya Nishihara <yuya@tcha.org> parents: 16687 diff changeset	81 raise ErrorResponse(HTTP_FORBIDDEN, 'ssl required')
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	82
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	83 deny = hgweb.configlist('web', 'deny_push')
19032 7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	84 if deny and (not user or ismember(hgweb.repo.ui, user, deny)):
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	85 raise ErrorResponse(HTTP_UNAUTHORIZED, 'push not authorized')
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	86
35061 6ef744a7df65 config: rename allow_push to allow-push David Demelier <markand@malikania.fr> parents: 34721 diff changeset	87 allow = hgweb.configlist('web', 'allow-push')
19032 7d31f2e42a8a hgweb: refactor checks for granting and revoking user permissions Wagner Bruna <wbruna@softwareexpress.com.br> parents: 18645 diff changeset	88 if not (allow and ismember(hgweb.repo.ui, user, allow)):
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	89 raise ErrorResponse(HTTP_UNAUTHORIZED, 'push not authorized')
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	90
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	91
14058 3233b39d756f hgweb: initialize permhooks at definition time Martin Geisler <mg@lazybytes.net> parents: 13959 diff changeset	92 # Hooks for hgweb permission checks; extensions can add hooks here.
3233b39d756f hgweb: initialize permhooks at definition time Martin Geisler <mg@lazybytes.net> parents: 13959 diff changeset	93 # Each hook is invoked like this: hook(hgweb, request, operation),
37150 a2566597acb5 lfs: add basic routing for the server side wire protocol processing Matt Harbison <matt_harbison@yahoo.com> parents: 36883 diff changeset	94 # where operation is either read, pull, push or upload. Hooks should either
14058 3233b39d756f hgweb: initialize permhooks at definition time Martin Geisler <mg@lazybytes.net> parents: 13959 diff changeset	95 # raise an ErrorResponse exception, or just return.
3233b39d756f hgweb: initialize permhooks at definition time Martin Geisler <mg@lazybytes.net> parents: 13959 diff changeset	96 #
3233b39d756f hgweb: initialize permhooks at definition time Martin Geisler <mg@lazybytes.net> parents: 13959 diff changeset	97 # It is possible to do both authentication and authorization through
3233b39d756f hgweb: initialize permhooks at definition time Martin Geisler <mg@lazybytes.net> parents: 13959 diff changeset	98 # this.
3233b39d756f hgweb: initialize permhooks at definition time Martin Geisler <mg@lazybytes.net> parents: 13959 diff changeset	99 permhooks = [checkauthz]
9910 6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	100
6f92997dbdca hgweb: add support for extension-provided permission hooks Sune Foldager <cryo@cyanite.org> parents: 9694 diff changeset	101
5561 22713dce19f6 hgweb: return meaningful HTTP status codes instead of nonsense Bryan O'Sullivan <bos@serpentine.com> parents: 4462 diff changeset	102 class ErrorResponse(Exception):
31399 7dafa8d0e006 hgweb: don't use mutable default argument value Gregory Szorc <gregory.szorc@gmail.com> parents: 30766 diff changeset	103 def __init__(self, code, message=None, headers=None):
13444 75f5f312df5f hgweb: give ErrorResponse a descriptive string/Exception representation Mads Kiilerich <mads@kiilerich.com> parents: 13400 diff changeset	104 if message is None:
75f5f312df5f hgweb: give ErrorResponse a descriptive string/Exception representation Mads Kiilerich <mads@kiilerich.com> parents: 13400 diff changeset	105 message = _statusmessage(code)
36459 f8ea6988a5fb hgweb: pass exception message to builtin Exception ctor as sysstr Augie Fackler <augie@google.com> parents: 36427 diff changeset	106 Exception.__init__(self, pycompat.sysstr(message))
5561 22713dce19f6 hgweb: return meaningful HTTP status codes instead of nonsense Bryan O'Sullivan <bos@serpentine.com> parents: 4462 diff changeset	107 self.code = code
31444 2daeab02b4b1 hgweb: explicitly tests for None Pierre-Yves David <pierre-yves.david@ens-lyon.org> parents: 31399 diff changeset	108 if headers is None:
2daeab02b4b1 hgweb: explicitly tests for None Pierre-Yves David <pierre-yves.david@ens-lyon.org> parents: 31399 diff changeset	109 headers = []
2daeab02b4b1 hgweb: explicitly tests for None Pierre-Yves David <pierre-yves.david@ens-lyon.org> parents: 31399 diff changeset	110 self.headers = headers
42926 8d9322b6e687 hgweb: add a `message` attribute to `hgweb.common.ErrorResponse` Connor Sheehan <sheehan@mozilla.com> parents: 40211 diff changeset	111 self.message = message
5563 d61fea133f2d hgweb: fix breaking tests on Python < 2.5 Bryan O'Sullivan <bos@serpentine.com> parents: 5561 diff changeset	112
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	113
13570 617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	114 class continuereader(object):
36859 7066617187c1 hgweb: document continuereader Gregory Szorc <gregory.szorc@gmail.com> parents: 36789 diff changeset	115 """File object wrapper to handle HTTP 100-continue.
7066617187c1 hgweb: document continuereader Gregory Szorc <gregory.szorc@gmail.com> parents: 36789 diff changeset	116
7066617187c1 hgweb: document continuereader Gregory Szorc <gregory.szorc@gmail.com> parents: 36789 diff changeset	117 This is used by servers so they automatically handle Expect: 100-continue
7066617187c1 hgweb: document continuereader Gregory Szorc <gregory.szorc@gmail.com> parents: 36789 diff changeset	118 request headers. On first read of the request body, the 100 Continue
7066617187c1 hgweb: document continuereader Gregory Szorc <gregory.szorc@gmail.com> parents: 36789 diff changeset	119 response is sent. This should trigger the client into actually sending
7066617187c1 hgweb: document continuereader Gregory Szorc <gregory.szorc@gmail.com> parents: 36789 diff changeset	120 the request body.
7066617187c1 hgweb: document continuereader Gregory Szorc <gregory.szorc@gmail.com> parents: 36789 diff changeset	121 """
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	122
13570 617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	123 def __init__(self, f, write):
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	124 self.f = f
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	125 self._write = write
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	126 self.continued = False
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	127
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	128 def read(self, amt=-1):
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	129 if not self.continued:
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	130 self.continued = True
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	131 self._write('HTTP/1.1 100 Continue\r\n\r\n')
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	132 return self.f.read(amt)
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	133
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	134 def __getattr__(self, attr):
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	135 if attr in ('close', 'readline', 'readlines', '__iter__'):
617a87cb7eb2 hgweb: add support for 100-continue as recommended by PEP 333. Augie Fackler <durin42@gmail.com> parents: 13444 diff changeset	136 return getattr(self.f, attr)
16687 e34106fa0dc3 cleanup: "raise SomeException()" -> "raise SomeException" Brodie Rao <brodie@sf.io> parents: 14058 diff changeset	137 raise AttributeError
5563 d61fea133f2d hgweb: fix breaking tests on Python < 2.5 Bryan O'Sullivan <bos@serpentine.com> parents: 5561 diff changeset	138
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	139
5563 d61fea133f2d hgweb: fix breaking tests on Python < 2.5 Bryan O'Sullivan <bos@serpentine.com> parents: 5561 diff changeset	140 def _statusmessage(code):
29566 075146e85bb6 py3: conditionalize BaseHTTPServer, SimpleHTTPServer and CGIHTTPServer import Pulkit Goyal <7895pulkit@gmail.com> parents: 29491 diff changeset	141 responses = httpserver.basehttprequesthandler.responses
37734 a1110db1e455 hgweb: these strings should be sysstrs, not bytes Augie Fackler <augie@google.com> parents: 37693 diff changeset	142 return pycompat.bytesurl(
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	143 responses.get(code, (r'Error', r'Unknown error'))[0]
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	144 )
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	145
5760 0145f9afb0e7 Removed tabs and trailing whitespace in python files Thomas Arendsen Hein <thomas@intevation.de> parents: 5563 diff changeset	146
9694 8269fe2d48f6 hgweb: send proper error messages to the client Sune Foldager <cryo@cyanite.org> parents: 9031 diff changeset	147 def statusmessage(code, message=None):
8269fe2d48f6 hgweb: send proper error messages to the client Sune Foldager <cryo@cyanite.org> parents: 9031 diff changeset	148 return '%d %s' % (code, message or _statusmessage(code))
131 c9d51742471c moving hgweb to mercurial subdir jake@edge2.net parents: diff changeset	149
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	150
25717 46e2c57026bc hgweb: drop the default argument for get_stat Pierre-Yves David <pierre-yves.david@fb.com> parents: 25660 diff changeset	151 def get_stat(spath, fn):
46e2c57026bc hgweb: drop the default argument for get_stat Pierre-Yves David <pierre-yves.david@fb.com> parents: 25660 diff changeset	152 """stat fn if it exists, spath otherwise"""
22577 a111e460318a hgweb: refresh hgweb.repo on phase change (issue4061) Anton Shestakov <engored@ya.ru> parents: 19951 diff changeset	153 cl_path = os.path.join(spath, fn)
3853 c0b449154a90 switch to the .hg/store layout, fix the tests Benoit Boissinot <benoit.boissinot@ens-lyon.org> parents: 3276 diff changeset	154 if os.path.exists(cl_path):
13958 71f51cc71652 hgweb: detect change based on changelog size too Martin Geisler <mg@lazybytes.net> parents: 13444 diff changeset	155 return os.stat(cl_path)
1418 68f81ba07b2a Make hgweb work when the repository is empty (no 00changelog.i) Benoit Boissinot <benoit.boissinot@ens-lyon.org> parents: 1416 diff changeset	156 else:
13958 71f51cc71652 hgweb: detect change based on changelog size too Martin Geisler <mg@lazybytes.net> parents: 13444 diff changeset	157 return os.stat(spath)
71f51cc71652 hgweb: detect change based on changelog size too Martin Geisler <mg@lazybytes.net> parents: 13444 diff changeset	158
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	159
13958 71f51cc71652 hgweb: detect change based on changelog size too Martin Geisler <mg@lazybytes.net> parents: 13444 diff changeset	160 def get_mtime(spath):
36789 ffa3026d4196 cleanup: use stat_result[stat.ST_MTIME] instead of stat_result.st_mtime Augie Fackler <augie@google.com> parents: 36677 diff changeset	161 return get_stat(spath, "00changelog.i")[stat.ST_MTIME]
1418 68f81ba07b2a Make hgweb work when the repository is empty (no 00changelog.i) Benoit Boissinot <benoit.boissinot@ens-lyon.org> parents: 1416 diff changeset	162
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	163
31793 62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	164 def ispathsafe(path):
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	165 """Determine if a path is safe to use for filesystem access."""
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	166 parts = path.split('/')
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	167 for part in parts:
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	168 if (
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	169 part in ('', pycompat.oscurdir, pycompat.ospardir)
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	170 or pycompat.ossep in part
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	171 or pycompat.osaltsep is not None
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	172 and pycompat.osaltsep in part
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	173 ):
31793 62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	174 return False
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	175
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	176 return True
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	177
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	178
36879 98baf8dea553 hgweb: port static file handling to new response API Gregory Szorc <gregory.szorc@gmail.com> parents: 36875 diff changeset	179 def staticfile(directory, fname, res):
5930 c301f15c965a send conservatively capitalized HTTP headers Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5779 diff changeset	180 """return a file inside directory with guessed Content-Type header
1825 a9343f9d7365 Make hgweb.staticfile() more secure and portable. Thomas Arendsen Hein <thomas@intevation.de> parents: 1796 diff changeset	181
a9343f9d7365 Make hgweb.staticfile() more secure and portable. Thomas Arendsen Hein <thomas@intevation.de> parents: 1796 diff changeset	182 fname always uses '/' as directory separator and isn't allowed to
a9343f9d7365 Make hgweb.staticfile() more secure and portable. Thomas Arendsen Hein <thomas@intevation.de> parents: 1796 diff changeset	183 contain unusual path components.
5930 c301f15c965a send conservatively capitalized HTTP headers Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5779 diff changeset	184 Content-Type is guessed using the mimetypes module.
1825 a9343f9d7365 Make hgweb.staticfile() more secure and portable. Thomas Arendsen Hein <thomas@intevation.de> parents: 1796 diff changeset	185 Return an empty string if fname is illegal or file not found.
1793 83c6d8355909 Allow serving static files from hgwebdir to fix CSS and favicon. Thomas Arendsen Hein <thomas@intevation.de> parents: 1792 diff changeset	186
1825 a9343f9d7365 Make hgweb.staticfile() more secure and portable. Thomas Arendsen Hein <thomas@intevation.de> parents: 1796 diff changeset	187 """
31793 62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	188 if not ispathsafe(fname):
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	189 return
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	190
62f9679df1f2 hgweb: extract path traversal checking into standalone function Gregory Szorc <gregory.szorc@gmail.com> parents: 31792 diff changeset	191 fpath = os.path.join(*fname.split('/'))
7288 9c399c53469d Allow per-file shadowing of static directory in templatepath Brendan Cully <brendan@kublai.com> parents: 7107 diff changeset	192 if isinstance(directory, str):
9c399c53469d Allow per-file shadowing of static directory in templatepath Brendan Cully <brendan@kublai.com> parents: 7107 diff changeset	193 directory = [directory]
9c399c53469d Allow per-file shadowing of static directory in templatepath Brendan Cully <brendan@kublai.com> parents: 7107 diff changeset	194 for d in directory:
9c399c53469d Allow per-file shadowing of static directory in templatepath Brendan Cully <brendan@kublai.com> parents: 7107 diff changeset	195 path = os.path.join(d, fpath)
9c399c53469d Allow per-file shadowing of static directory in templatepath Brendan Cully <brendan@kublai.com> parents: 7107 diff changeset	196 if os.path.exists(path):
9c399c53469d Allow per-file shadowing of static directory in templatepath Brendan Cully <brendan@kublai.com> parents: 7107 diff changeset	197 break
1793 83c6d8355909 Allow serving static files from hgwebdir to fix CSS and favicon. Thomas Arendsen Hein <thomas@intevation.de> parents: 1792 diff changeset	198 try:
1825 a9343f9d7365 Make hgweb.staticfile() more secure and portable. Thomas Arendsen Hein <thomas@intevation.de> parents: 1796 diff changeset	199 os.stat(path)
40158 9310037f0636 py3: pass str and return bytes from mimetypes.guess_type() Gregory Szorc <gregory.szorc@gmail.com> parents: 37734 diff changeset	200 ct = pycompat.sysbytes(
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	201 mimetypes.guess_type(pycompat.fsdecode(path))[0] or r"text/plain"
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	202 )
31792 161a87ed456e hgweb: use context manager for file I/O Gregory Szorc <gregory.szorc@gmail.com> parents: 31444 diff changeset	203 with open(path, 'rb') as fh:
161a87ed456e hgweb: use context manager for file I/O Gregory Szorc <gregory.szorc@gmail.com> parents: 31444 diff changeset	204 data = fh.read()
161a87ed456e hgweb: use context manager for file I/O Gregory Szorc <gregory.szorc@gmail.com> parents: 31444 diff changeset	205
36879 98baf8dea553 hgweb: port static file handling to new response API Gregory Szorc <gregory.szorc@gmail.com> parents: 36875 diff changeset	206 res.headers['Content-Type'] = ct
98baf8dea553 hgweb: port static file handling to new response API Gregory Szorc <gregory.szorc@gmail.com> parents: 36875 diff changeset	207 res.setbodybytes(data)
98baf8dea553 hgweb: port static file handling to new response API Gregory Szorc <gregory.szorc@gmail.com> parents: 36875 diff changeset	208 return res
5561 22713dce19f6 hgweb: return meaningful HTTP status codes instead of nonsense Bryan O'Sullivan <bos@serpentine.com> parents: 4462 diff changeset	209 except TypeError:
8761 0289f384e1e5 Generally replace "file name" with "filename" in help and comments. timeless <timeless@gmail.com> parents: 8225 diff changeset	210 raise ErrorResponse(HTTP_SERVER_ERROR, 'illegal filename')
25660 328739ea70c3 global: mass rewrite to use modern exception syntax Gregory Szorc <gregory.szorc@gmail.com> parents: 22577 diff changeset	211 except OSError as err:
5561 22713dce19f6 hgweb: return meaningful HTTP status codes instead of nonsense Bryan O'Sullivan <bos@serpentine.com> parents: 4462 diff changeset	212 if err.errno == errno.ENOENT:
5993 948a41e77902 hgweb: explicit response status Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 5930 diff changeset	213 raise ErrorResponse(HTTP_NOT_FOUND)
5561 22713dce19f6 hgweb: return meaningful HTTP status codes instead of nonsense Bryan O'Sullivan <bos@serpentine.com> parents: 4462 diff changeset	214 else:
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	215 raise ErrorResponse(
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	216 HTTP_SERVER_ERROR, encoding.strtolocal(err.strerror)
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	217 )
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	218
3276 db9d2a624521 hgweb: Search templates in templatepath/style/map, too, using a common function. Thomas Arendsen Hein <thomas@intevation.de> parents: 3244 diff changeset	219
4462 12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	220 def paritygen(stripecount, offset=0):
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	221 """count parity of horizontal stripes for easier reading"""
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	222 if stripecount and offset:
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	223 # account for offset, e.g. due to building the list in reverse
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	224 count = (stripecount + offset) % stripecount
36427 7a3590e67868 py3: use '//' for integer division in hgweb/common.py Pulkit Goyal <7895pulkit@gmail.com> parents: 36329 diff changeset	225 parity = (stripecount + offset) // stripecount & 1
4462 12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	226 else:
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	227 count = 0
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	228 parity = 0
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	229 while True:
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	230 yield parity
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	231 count += 1
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	232 if stripecount and count >= stripecount:
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	233 parity = 1 - parity
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	234 count = 0
12e4d9524951 hgweb: use generator to count parity of horizontal stripes for easier reading. Thomas Arendsen Hein <thomas@intevation.de> parents: 4038 diff changeset	235
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	236
5779 e9f68860d5ed Don't let ui.username override web.contact (issue900) Thomas Arendsen Hein <thomas@intevation.de> parents: 5760 diff changeset	237 def get_contact(config):
e9f68860d5ed Don't let ui.username override web.contact (issue900) Thomas Arendsen Hein <thomas@intevation.de> parents: 5760 diff changeset	238 """Return repo contact information or empty string.
e9f68860d5ed Don't let ui.username override web.contact (issue900) Thomas Arendsen Hein <thomas@intevation.de> parents: 5760 diff changeset	239
e9f68860d5ed Don't let ui.username override web.contact (issue900) Thomas Arendsen Hein <thomas@intevation.de> parents: 5760 diff changeset	240 web.contact is the primary source, but if that is not set, try
e9f68860d5ed Don't let ui.username override web.contact (issue900) Thomas Arendsen Hein <thomas@intevation.de> parents: 5760 diff changeset	241 ui.username or $EMAIL as a fallback to display something useful.
e9f68860d5ed Don't let ui.username override web.contact (issue900) Thomas Arendsen Hein <thomas@intevation.de> parents: 5760 diff changeset	242 """
43076 2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	243 return (
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	244 config("web", "contact")
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	245 or config("ui", "username")
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	246 or encoding.environ.get("EMAIL")
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	247 or ""
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	248 )
2372284d9457 formatting: blacken the codebase Augie Fackler <augie@google.com> parents: 42926 diff changeset	249
12183 f64b416b0ac8 hgweb: support very simple caching model (issue1845) Dirkjan Ochtman <dirkjan@ochtman.nl> parents: 10264 diff changeset	250
30766 d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	251 def cspvalues(ui):
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	252 """Obtain the Content-Security-Policy header and nonce value.
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	253
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	254 Returns a 2-tuple of the CSP header value and the nonce value.
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	255
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	256 First value is ``None`` if CSP isn't enabled. Second value is ``None``
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	257 if CSP isn't enabled or if the CSP header doesn't need a nonce.
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	258 """
34643 f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	259 # Without demandimport, "import uuid" could have an immediate side-effect
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	260 # running "ldconfig" on Linux trying to find libuuid.
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	261 # With Python <= 2.7.12, that "ldconfig" is run via a shell and the shell
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	262 # may pollute the terminal with:
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	263 #
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	264 # shell-init: error retrieving current directory: getcwd: cannot access
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	265 # parent directories: No such file or directory
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	266 #
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	267 # Python >= 2.7.13 has fixed it by running "ldconfig" directly without a
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	268 # shell (hg changeset a09ae70f3489).
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	269 #
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	270 # Moved "import uuid" from here so it's executed after we know we have
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	271 # a sane cwd (i.e. after dispatch.py cwd check).
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	272 #
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	273 # We can move it back once we no longer need Python <= 2.7.12 support.
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	274 import uuid
f42dec9c976e hgweb: do not import uuid immediately to avoid its side effect Jun Wu <quark@fb.com> parents: 34585 diff changeset	275
30766 d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	276 # Don't allow untrusted CSP setting since it be disable protections
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	277 # from a trusted/global source.
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	278 csp = ui.config('web', 'csp', untrusted=False)
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	279 nonce = None
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	280
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	281 if csp and '%nonce%' in csp:
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	282 nonce = base64.urlsafe_b64encode(uuid.uuid4().bytes).rstrip('=')
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	283 csp = csp.replace('%nonce%', nonce)
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	284
d7bf7d2bd5ab hgweb: support Content Security Policy Gregory Szorc <gregory.szorc@gmail.com> parents: 30641 diff changeset	285 return csp, nonce

Mercurial > public > mercurial-scm > hg-stable

annotate mercurial/hgweb/common.py @ 43076:2372284d9457