CasperSecurity
o
�˝`z} � @ sj U d Z ddlZddlZddlZddlZddlmZ ddlm Z ddlm
Z
ddl m Z ddl
mZ dd l
mZ dd
lmZ dd lmZ dd lmZ dd
lmZ ddlmZ ejr�ddlZddlmZ ddlm Z ddl m Z G dd� dej �Z G dd� de �Z!ej"e e!f Z#dZ$ej%e&df e'd< e�(d�Z)G dd� d�Z*ed ed ej+d ej+d ej"ej+ef fd d!��Z,d"ej-e&ge&f d ej-de&f fd#d$�Z.d"ej-e&e&e/ge&f d ej-de&f fd%d&�Z0d"ej-e&e&ge&f d ej-de&f fd'd(�Z1d"ej-e&e&e&e/ge&f d ej-de&f fd)d*�Z2G d+d,� d,e*�Z3G d-d.� d.e*�Z4G d/d0� d0e*�Z5G d1d2� d2e*�Z6G d3d4� d4e*�Z7G d5d6� d6e*�Z8e$d7fd8e
j9d9ej:e& d:e;d ej<ej%e/e&ej"ej=e& ej%ej=e& df f f fd;d<�Z>G d=d>� d>�Z?d?ej@d@ej:e& dAej:e& dBejAe&ej+f d ej<ej%e/e&ej"ej=e& ej%ej=e& df f ejBe& f f
dCdD�ZCe3ZDe4ZEe5ZFe6ZGe7ZHe8ZIdS )Ez2Extension API for adding custom tags and behavior.� N)�Markup� )�defaults)�nodes)� Environment)�TemplateAssertionError)�TemplateSyntaxError)�concat)�Context)� Undefined)�
import_string)� pass_context)�Token)� TokenStream)�Parserc @ s8 e Zd Zdedefdd�Zdedededefdd �Zd
S ) �_TranslationsBasic�message�returnc C � d S �N� )�selfr r r �,/usr/lib/python3/dist-packages/jinja2/ext.py�gettext � z_TranslationsBasic.gettext�singular�plural�nc C r r r )r r r r r r r �ngettext r z_TranslationsBasic.ngettextN)�__name__�
__module__� __qualname__�strr �intr r r r r r s r c
@ s@ e Zd Zdededefdd�Zdededededef
d d
�Zd S ) �_TranslationsContext�contextr r c C r r r )r r% r r r r �pgettext" r z _TranslationsContext.pgettextr r r c C r r r )r r% r r r r r r � npgettext% r z _TranslationsContext.npgettextN)r r r! r" r& r# r' r r r r r$ ! s "r$ )�_r r r& r' .�GETTEXT_FUNCTIONSz\s*\n\s*c @ s` e Zd ZU dZeje ed< d%dd�Ze � Z
ej e ed< dZ d e
ddfd
d �Zd e
dd fd d
�Z d&dedeje deje defdd�Zdddejdejd f fdd�Zdddejejejej f fdd�Z d&ded eje dejfd d �Z d'ded ejejej d ejejej d!ejej d"ejej d eje dej fd#d$�Z dS )(� Extensionag Extensions can be used to add extra functionality to the Jinja template
system at the parser level. Custom extensions are bound to an environment
but may not store environment specific data on `self`. The reason for
this is that an extension can be bound to another environment (for
overlays) by creating a copy and reassigning the `environment` attribute.
As extensions are created by the environment they cannot accept any
arguments for configuration. One may want to work around that by using
a factory function, but that is not possible as extensions are identified
by their import name. The correct way to configure the extension is
storing the configuration values on the environment. Because this way the
environment ends up acting as central configuration storage the
attributes may clash which is why extensions have to ensure that the names
they choose for configuration are not too generic. ``prefix`` for example
is a terrible name, ``fragment_cache_prefix`` on the other hand is a good
name as includes the name of the extension (fragment cache).
�
identifierr Nc C s | j � d| j� �| _d S )N�.)r r r+ )�clsr r r �__init_subclass__L � zExtension.__init_subclass__�tags�d � environmentc C s
|| _ d S r )r2 �r r2 r r r �__init__Y s
zExtension.__init__c C s, t �tt�| j��}|j�| j� ||_|S )z=Create a copy of this extension bound to another environment.) �t�castr* �object�__new__� __class__�__dict__�updater2 )r r2 �rvr r r �bind\ s zExtension.bind�source�name�filenamec C � |S )z�This method is called before the actual lexing and can be used to
preprocess the source. The `filename` is optional. The return value
must be the preprocessed source.
r )r r> r? r@ r r r �
preprocessc s zExtension.preprocess�streamr r c C rA )a It's passed a :class:`~jinja2.lexer.TokenStream` that can be used
to filter tokens returned. This method has to return an iterable of
:class:`~jinja2.lexer.Token`\s, but it doesn't have to return a
:class:`~jinja2.lexer.TokenStream`.
r )r rC r r r �
filter_streaml s zExtension.filter_stream�parserr c C s t � �)a If any of the :attr:`tags` matched this method is called with the
parser as first argument. The token the parser stream is pointing at
is the name token that matched. This method has to return one or a
list of multiple nodes.
)�NotImplementedError)r rE r r r �parsev s zExtension.parse�linenoc C s t j| j||d�S )z�Return an attribute node for the current extension. This is useful
to pass constants on extensions to generated template code.
::
self.attr('_my_attribute', lineno=lineno)
�rH )r �ExtensionAttributer+ )r r? rH r r r �attr~ s
zExtension.attr�args�kwargs�dyn_args�
dyn_kwargsc C s8 |du rg }|du r g }t j| j||d�|||||d�S )zsCall a method of the extension. This is a shortcut for
:meth:`attr` + :class:`jinja2.nodes.Call`.
NrI )r �CallrK )r r? rL rM rN rO rH r r r � call_method� s �zExtension.call_method)r Nr )NNNNN) r r r! �__doc__r5 �ClassVarr" �__annotations__r. �setr0 �Set�priorityr r4 r= �OptionalrB �Union�IterablerD r �Node�ListrG r# rJ rK �Expr�KeywordrP rQ r r r r r* 7 sh
����
� �
�&
���
�����
�
���r* � __contextrL rM r c O s | j | �d�g|�R i |��S )Nr )�call�resolve)r_ rL rM r r r �_gettext_alias� s rb �funcc s( t dtdtdtjdtf� fdd� �}|S )Nr_ �__string� variablesr c s$ | � � |�}| jjrt|�}|| S r )r` �eval_ctx�
autoescaper )r_ rd re r< �rc r r r � s z"_make_new_gettext.<locals>.gettext�r
r
r" r5 �Any)rc r r rh r �_make_new_gettext� s " rk c
s0 t dtdtdtdtdtjdtf � fdd� �}|S ) Nr_ �
__singular�__plural�__numre r c s4 |� d|� | �� |||�}| jjrt|�}|| S )N�num��
setdefaultr` rf rg r )r_ rl rm rn re r< rh r r r � s
z$_make_new_ngettext.<locals>.ngettext�r
r
r" r# r5 rj )rc r r rh r �_make_new_ngettext� s ������rs c s, t dtdtdtdtjdtf
� fdd� �}|S )Nr_ � __string_ctxrd re r c s2 |� d|� | �� ||�}| jjrt|�}|| S )Nr% rp )r_ rt rd re r< rh r r r& � s
z$_make_new_pgettext.<locals>.pgettextri )rc r& r rh r �_make_new_pgettext� s ����� ru c s4 t dtdtdtdtdtdtjdtf� fdd � �}|S )
Nr_ rt rl rm rn re r c sB |� d|� |� d|� | �� ||||�}| jjr t|�}|| S )Nr% ro rp )r_ rt rl rm rn re r< rh r r r' � s z&_make_new_npgettext.<locals>.npgettextrr )rc r' r rh r �_make_new_npgettext� s" �������rv c s� e Zd ZdZdhZdeddf� fdd� Z d/dd d
eje ddfd d �Z
d/d
eje ddfd
d�Z d0dej e
ge
f dej e
e
ege
f d
eje dejej e
e
ge
f dejej e
e
e
ege
f ddf dd�Zd1dd�Zefdeje
ejf deje
dejejee
ejeje
ejeje
df f f fdd�Zd d dejejejej f fd d �Ze fd e
d!ej e
de
fd"d#�Z d d d$e dejeje
e
f fd%d&�Z d'e
d(eje
d)ej e
ej!f d*ejej! d+e d,e dej"fd-d.�Z#� Z$S )2� InternationalizationExtensionz-This extension adds gettext support to Jinja.�transr2 r Nc s: t � �|� t|jd< |j| j| j| j| j| j dd� d S )Nr( F)� install_gettext_translations�install_null_translations�install_gettext_callables� uninstall_gettext_translations�extract_translations�newstyle_gettext)
�superr4 rb �globals�extend�_install�
_install_null�_install_callables�
_uninstall�_extractr3 �r9 r r r4 s
�z&InternationalizationExtension.__init__� translations�_SupportedTranslations�newstylec C sd t |dd �}|d u r
|j}t |dd �}|d u r|j}t |dd �}t |dd �}| j|||||d� d S )N�ugettext� ungettextr& r' )r� r& r' )�getattrr r r� )r r� r� r r r& r' r r r r� s
�z&InternationalizationExtension._installc
C s� dd l }|�� }t|d�r|j}n dtdtdtfdd�}t|d�r%|j}ndtdtd td
tdtf
d d �}| j|j |j|||d
� d S )Nr r& �c�sr c S rA r r )r� r� r r r r& * r z=InternationalizationExtension._install_null.<locals>.pgettextr' �pr c S s |dkr|S |S )Nr r )r� r� r� r r r r r' 1 � z>InternationalizationExtension._install_null.<locals>.npgettext)r r r� r& r' ) r �NullTranslations�hasattrr& r" r' r# r� r )r r� r r� r& r' r r r r� s
�z+InternationalizationExtension._install_nullr r r& r' c C sb |d ur|| j _| j jr$t|�}t|�}|d ur t|�}|d ur$t|�}| j jj||||d� d S �N)r r r& r' )r2 r~ rk rs ru rv r� r; )r r r r� r& r' r r r r� < s
�z0InternationalizationExtension._install_callablesc C s dD ]
}| j j�|d � qd S r� )r2 r� �pop)r r� �keyr r r r� T s �z(InternationalizationExtension._uninstallr> �gettext_functions.c C s t |t�r | j�|�}t||�S r )�
isinstancer" r2 rG �extract_from_ast)r r> r� r r r r� X s
z&InternationalizationExtension._extractrE r c C s t |j�j}d}d}d}i }d}|jjjdkr�|r |j�d� |j�d�r&nx|j�d�}|j|v r?|jd|j�d�|jt d � |jjjd
krUt |j� |�
� ||j< } n|du rd|jd v rd|jd k}qt � |jd
� ||j< } |du r�t
| t j�r�t � dd
�}|||j< t �t � dd�| �}n| }|jdk}|jjjdks|j�d� d}
d} t� } | �|d�\}
}|
r�| �|
� |du r�t � |
d d
�}|
d dk}|jj�d��r d} t |j� |jjjdk�r|j�d�}|j|vr�|jd|j�d�|jt d � ||j }|jdk}|j�d� | �|d�\}}
t |j� | �|� nt |j� | D ]}||v�r5t � |d
�||< �q&| �s=d}n |du �rH|�d|� |du �rS| jjd }|�rc| �|�}|
�rc| �|
�}
| �||
||t| �|�op| �}|�|� |du�r�||gS |S )zParse a translatable tag.FN� block_end�comma�colonr? ztranslatable variable z defined twice.)�exc�assign)�trimmed� notrimmedr� �load�_trans�storero Tr �name:pluralizezunknown variable z for pluralizationzpluralize without variables�ext.i18n.trimmed)�nextrC rH �current�type�expect�skip_if�value�failr �parse_expressionr �Namer� rP �AssignrU � _parse_blockr; �testr2 �policies�_trim_whitespace�
_make_node�bool�
set_lineno)r rE rH �num_called_num� plural_expr�plural_expr_assignmentre r� �token�varr � have_plural�
referenced�singular_namesr � plural_namesr? �noder r r rG c s�
�
�
� %
�
�
�
z#InternationalizationExtension.parse�string�_ws_rec C s |� d|�� �S )N� )�sub�strip)r r� r� r r r r� � r� z.InternationalizationExtension._trim_whitespace�allow_pluralizec C s g }g } |j jjdkr |�|j jj�dd�� t|j � n_|j jjdkrFt|j � |j �d�j}|�|� |�d|� d�� |j �d � n7|j jjd
krot|j � |j j�d �rZn$|j j�d �ri|rdn|� d
� |� d� n|j j
ry|� d� nt d��q|t |�fS )z1Parse until the next block tag with a given name.T�data�%�%%�variable_beginr? z%(z)s� variable_end� block_beginz
name:endtransr� z:a translatable section can have only one pluralize sectionz;control structures in translatable sections are not allowedzunclosed translation blockzinternal parser error)
rC r� r� �appendr� �replacer� r� r� r� �eos� RuntimeErrorr )r rE r� r� �bufr? r r r r� � s<
�� � z*InternationalizationExtension._parse_blockr r re r� �vars_referencedr� c
C s | j j}|s|s|�dd�}|r|�dd�}|du r.t�dd�}t�|t�|�gg dd�} nt�dd�}
t�|
t�|�t�|�|gg dd�} |rc|�� D ]\} } |rW| dkrWqL| j� t�
| | �� qLnt� | �} |rzt� | t�
dd � |�� D ���} t�| g�S )
z/Generates a useful node from the data provided.r� r� Nr r� r ro c S s" g | ]
\}}t �t �|�|��qS r )r �Pair�Const)�.0r� r� r r r �
<listcomp>6 s ��z<InternationalizationExtension._make_node.<locals>.<listcomp>)r2 r~ r� r r� rP r� �itemsrM r� r^ �MarkSafeIfAutoescape�Mod�Dict�Output)
r r r re r� r� r� r� r r� r r� r� r r r r� � sB
� �
��� z(InternationalizationExtension._make_noder )NNN)r� r� r N)%r r r! rR r0 r r4 r5 rX r� r� r� �Callabler" r# r� r� r) rY r �Template�Sequence�Iterator�Tupler� r[ r\ rG r� �Patternr� r� r� r] r� r� �
__classcell__r r r� r rw � s�
���
� ������
�
���.�
�& s��
�%���
����rw c @ s* e Zd ZdZdhZdddejfdd�ZdS ) �ExprStmtExtensionzrAdds a `do` tag to Jinja that works like the print statement just
that it doesn't print the return value.
�dorE r r c C s" t jt|j�jd�}|�� |_|S )NrI )r �ExprStmtr� rC rH � parse_tupler� )r rE r� r r r rG F s
zExprStmtExtension.parseN)r r r! rR r0 r r� rG r r r r r� ? s r� c @ s8 e Zd ZdZddhZdddejejej f fdd�Z
d S )
�LoopControlExtensionz/Adds break and continue to the template engine.�break�continuerE r r c C s0 t |j�}|jdkrtj|jd�S tj|jd�S )Nr� rI )r� rC r� r �BreakrH �Continue)r rE r� r r r rG Q s
zLoopControlExtension.parseN) r r r! rR r0 r5 rY r r� r� rG r r r r r� L s $r� c �& e Zd Zdeddf� fdd� Z� ZS )�
WithExtensionr2 r Nc � t � �|� tjdtdd� d S )NzZThe 'with' extension is deprecated and will be removed in Jinja 3.1. This is built in now.� ��
stacklevel�r r4 �warnings�warn�DeprecationWarningr3 r� r r r4 Y �
�zWithExtension.__init__�r r r! r r4 r� r r r� r r� X � r� c r� )�AutoEscapeExtensionr2 r Nc r� )Nz`The 'autoescape' extension is deprecated and will be removed in Jinja 3.1. This is built in now.r� r� r� r3 r� r r r4 d r� z AutoEscapeExtension.__init__r� r r r� r r� c r� r� c @ s< e Zd ZdZdhZdddejfdd�Zdede fd d
�Z
d S ) �DebugExtensiona� A ``{% debug %}`` tag that dumps the available variables,
filters, and tests.
.. code-block:: html+jinja
<pre>{% debug %}</pre>
.. code-block:: text
{'context': {'cycler': <class 'jinja2.utils.Cycler'>,
...,
'namespace': <class 'jinja2.utils.Namespace'>},
'filters': ['abs', 'attr', 'batch', 'capitalize', 'center', 'count', 'd',
..., 'urlencode', 'urlize', 'wordcount', 'wordwrap', 'xmlattr'],
'tests': ['!=', '<', '<=', '==', '>', '>=', 'callable', 'defined',
..., 'odd', 'sameas', 'sequence', 'string', 'undefined', 'upper']}
.. versionadded:: 2.11.0
�debugrE r r c C s8 |j �d�j}t�� }| jd|g|d�}tj|g|d�S )Nz
name:debug�_renderrI )rC r� rH r �ContextReferencerQ r� )r rE rH r% �resultr r r rG � s zDebugExtension.parser% c C s8 |� � t| jj�� �t| jj�� �d�}tj|ddd�S )N)r% �filters�testsr� T)�depth�compact)�get_all�sortedr2 r� �keysr �pprint�pformat)r r% r� r r r r� � s
�zDebugExtension._renderN) r r r! rR r0 r r� rG r
r" r� r r r r r� n s
r� T�astr� � babel_stylec c s � | � tj�D ]v}t|jtj�r|jj|vrqg }|jD ]}t|tj�r1t|j t
�r1|� |j � q |� d� q |j D ]}|� d� q:|j
durL|� d� |jdurV|� d� |setdd� |D ��}|sdqnt|�dkrp|d }nt|�}|j|jj|fV qdS )a� Extract localizable strings from the given template node. Per
default this function returns matches in babel style that means non string
parameters as well as keyword arguments are returned as `None`. This
allows Babel to figure out what you really meant if you are using
gettext functions that allow keyword arguments for placeholder expansion.
If you don't want that behavior set the `babel_style` parameter to `False`
which causes only strings to be returned and parameters are always stored
in tuples. As a consequence invalid gettext calls (calls without a single
string parameter or string parameters after non-string parameters) are
skipped.
This example explains the behavior:
>>> from jinja2 import Environment
>>> env = Environment()
>>> node = env.parse('{{ (_("foo"), _(), ngettext("foo", "bar", 42)) }}')
>>> list(extract_from_ast(node))
[(1, '_', 'foo'), (1, '_', ()), (1, 'ngettext', ('foo', 'bar', None))]
>>> list(extract_from_ast(node, babel_style=False))
[(1, '_', ('foo',)), (1, 'ngettext', ('foo', 'bar'))]
For every string found this function yields a ``(lineno, function,
message)`` tuple, where:
* ``lineno`` is the number of the line on which the string was found,
* ``function`` is the name of the ``gettext`` function used (if the
string was extracted from embedded Python code), and
* ``message`` is the string, or a tuple of strings for functions
with multiple string arguments.
This extraction function operates on the AST and is because of that unable
to extract any comments. For comment support you have to use the babel
extraction interface or extract comments yourself.
Nc s s � | ] }|d ur|V qd S r r )r� �xr r r � <genexpr>� s � z#extract_from_ast.<locals>.<genexpr>r r )�find_allr rP r� r� r� r? rL r� r� r" r� rM rN rO �tuple�lenrH )r r� r r� �strings�argr( �outr r r r� � s6 �+ �
�
�r� c @ sn e Zd ZdZdejejeeef deje ddfdd�Z dedej
e fd d
�Z d edej
e fd d
�Z dS )�_CommentFinderz�Helper class to find comments in a token stream. Can only
find comments for gettext calls forwards. Once the comment
from line 4 is found, a comment for line 1 will not return a
usable value.
�tokens� comment_tagsr Nc C s || _ || _d| _d| _d S )Nr )r r �offset� last_lineno)r r r r r r r4 � s
z_CommentFinder.__init__r c C s� z>t | j| j|� �D ]-\}}}|dv r8z
|�d d�\}}W n ty' Y q w || jv r8|�� g W || _S q g W || _S || _w )N)�comment� linecommentr )�reversedr r �split�
ValueErrorr �rstrip)r r r( �
token_type� token_value�prefixr r r r �find_backwards� s � �
��z _CommentFinder.find_backwardsrH c C sd | j r| j|kr
g S t| j| jd � �D ]\}\}}}||kr)| �| j| � S q| �t| j��S r )r r � enumerater r r r )r rH �idx� token_linenor( r r r �
find_comments s "�z _CommentFinder.find_comments)
r r r! rR r5 r� r� r# r" r4 r\ r r$ r r r r r � s ��
� r �fileobj�keywordsr �optionsc c s� � i }|� dd��d�D ]}|�� }|sq d|t|�< q t|vr$d|t< d dtjttf dtdtd tfd
d �}||d d
�}t |� dt
j �|� dt
j �|� dt
j
�|� dt
j�|� dt
j�|� dt
j�|� d�pit
j|� d�ppt
j||dt
j�||dt
j�t
j||dt
j�t|�ddd�}||d�r�d
|jd < ||d �r�d
|_| �� �|� d d ��} z|� | �}
t |� |� | ���} W n
t y� |sĂ Y dS w t!| |�} t"|
|�D ]\}
}}|
||| �#|
�fV q�dS )!a Babel extraction method for Jinja templates.
.. versionchanged:: 2.3
Basic support for translation comments was added. If `comment_tags`
is now set to a list of keywords for extraction, the extractor will
try to find the best preceding comment that begins with one of the
keywords. For best results, make sure to not have more than one
gettext call in one line of code and the matching comment in the
same line or the line before.
.. versionchanged:: 2.5.1
The `newstyle_gettext` flag can be set to `True` to enable newstyle
gettext calls.
.. versionchanged:: 2.7
A `silent` option can now be provided. If set to `False` template
syntax errors are propagated instead of being ignored.
:param fileobj: the file-like object the messages should be extracted from
:param keywords: a list of keywords (i.e. function names) that should be
recognized as translation functions
:param comment_tags: a list of translator tags to search for and include
in the results.
:param options: a dictionary of additional options (optional)
:return: an iterator over ``(lineno, funcname, message, comments)`` tuples.
(comments will be empty currently)
�
extensions� �,NFr' r� �defaultr c S s | � |t|���� dv S )N> �1�on�yes�true)�getr" �lower)r' r� r+ r r r �getbool? r/ z babel_extract.<locals>.getbool�silentT�block_start_string�block_end_string�variable_start_string�variable_end_string�comment_start_string�comment_end_string�line_statement_prefix�line_comment_prefix� trim_blocks�
lstrip_blocks�keep_trailing_newliner )�
cache_size� auto_reloadr� r� r~ �encodingzutf-8)F)$r0 r r� r rw r5 �Mappingr" r� r r �BLOCK_START_STRING�BLOCK_END_STRING�VARIABLE_START_STRING�VARIABLE_END_STRING�COMMENT_START_STRING�COMMENT_END_STRING�LINE_STATEMENT_PREFIX�LINE_COMMENT_PREFIX� TRIM_BLOCKS�
LSTRIP_BLOCKS�NEWLINE_SEQUENCE�KEEP_TRAILING_NEWLINEr
r� r~ �read�decoderG �list�lexrB r r r� r$ )r% r& r r' r( �extension_namer2 r3 r2 r> r� r �finderrH rc r r r r �
babel_extract
sZ �%& �
�
�rU )JrR r �re�typingr5 r� �
markupsafer r) r r r2 r �
exceptionsr r �runtimer r
r �utilsr r
�
TYPE_CHECKING�typing_extensions�te�lexerr r rE r �Protocolr r$ rY r� r) r� r" rT �compiler� r* rj rb r� rk r# rs ru rv rw r� r� r� r� r� r� r� r� r� rX r� r �BinaryIOr� r\ rU �i18nr� � loopcontrols�with_rg r� r r r r �<module> s�
m��� �(,*�
� K
*����.�
�O(����0��
�]