_frddlmZddlmZddlmZddlmZGddZdZ Gd d eZ d S) )urlparse)settings)is_same_domain)AsyncWebsocketConsumerc6eZdZdZdZdZdZdZdZdZ dS) OriginValidatorze Validates that the incoming connection has an Origin header that is in an allowed list. c"||_||_dSN) applicationallowed_origins)selfr r s M/var/www/html/env/lib/python3.11/site-packages/channels/security/websocket.py__init__zOriginValidator.__init__s&.cK|ddkrtdd}|dgD]?\}}|dkr4 t|d}/#t$rY;wxYw@||r||||d{VSt}||||d{VS)Ntype websocketzz2OriginValidator.validate_origin..IsP   sN Od77 wOO      r)anyr r(s``rr'zOriginValidator.validate_origin8sF"     /      rc|dSt|}|jdS|js.td|zjp|}t |j|S||}||}|j|jkr"||krt |j|jrdSdS)a Returns ``True`` if the origin is either an exact match or a match to the wildcard pattern. Compares scheme, domain, port of origin and pattern. Any pattern can be begins with a scheme. After the scheme must be a domain, or just domain without scheme. Any domain beginning with a period corresponds to the domain and all its subdomains (for example, ``.example.com`` ``example.com`` and any subdomain). Also with scheme (for example, ``http://.example.com`` ``http://exapmple.com``). After the domain there must be a port, but it can be omitted. Note. This function assumes that the given origin is either None, a schema-domain-port string, or just a domain string NFz//T)rlowerhostnameschemerget_origin_port)rr r-parsed_patternpattern_hostname origin_port pattern_ports rr+z$OriginValidator.match_allowed_originNs  5"'--//22  ! )5$ L'w77@KG !-"8:JKK K**=99 ++N;;   !]%9 9 9|++}5~7NOO,4urc|j|jS|jdks |jdkrdS|jdks |jdkrdSdS)zq Returns the origin.port or port for this schema by default. Otherwise, it returns None. NhttpwsPhttpswssi)portr3)rorigins rr4zOriginValidator.get_origin_portusU ; ";  =F " "fmt&;&;2 ]g % %%)?)?34rN) __name__ __module__ __qualname____doc__rr$rr'r+r4rrr r sy ///6660 3 3 3   ,%%%Nrr c^tj}tjr|sgd}t||S)zi Factory function which returns an OriginValidator configured to use settings.ALLOWED_HOSTS. ) localhostz 127.0.0.1z[::1])r ALLOWED_HOSTSDEBUGr )r allowed_hostss rAllowedHostsOriginValidatorrKs8 *M~K|d{VdSr )close)rs rconnectzWebsocketDenier.connects,jjllrN)rArBrCrDrOrErrrrs-rrN) urllib.parser django.confrdjango.http.requestrgeneric.websocketrr rKrrErrrTs!!!!!! ......666666||||||||~777,r