%ge^SrSSKJr SSKrSSKrSSKJr SSKJrJ r J r SSK J r J r SSKJrJr \(aSS KJrJr SS K JrJr \R,"S 5r\"S 5r\"S 5r\"/SQ5r\"/SQ5r\"SS/5r\"/SQ5r\"S/5r \"S/5r!\"\""\\55r#S5Sjr$S6Sjr%S7Sjr&S8Sjr'S6Sjr("SS\ 5r)S9Sjr*S:Sjr+S:Sjr,S:Sjr-S:S jr.S:S!jr/S;S"jr0S:S#jr1SS(jr6S?S)jr7S5S*jr8S5S+jr9S5S,jr:S:S-jr;S:S.jr<S5S/jr=S@SAS0jjr>S:S1jr?S:S2jr@"S3S4\R\B\ 45rCg)BzW h2/utilities ~~~~~~~~~~~~ Utility functions that do not belong in a separate module. ) annotationsN) whitespace) TYPE_CHECKINGAny NamedTuple) HeaderTupleNeverIndexedHeaderTuple)FlowControlError ProtocolError) GeneratorIterable)HeaderHeaderWeaklyTypeds[A-Z]:1)s connectionsproxy-connections keep-alivestransfer-encodingsupgrade):method:scheme :authority:path:status :protocols authorizationsproxy-authorization)rrrrrrrc## UH_n[US[5(deUS[;dUSS;a([US5S:a[ USUS5v M[Uv Ma g7f)a^ Certain headers are at risk of being attacked during the header compression phase, and so need to be kept out of header compression contexts. This function automatically transforms certain specific headers into HPACK never-indexed fields to ensure they don't get added to header compression contexts. This function currently implements two rules: - 'authorization' and 'proxy-authorization' fields are automatically made never-indexed. - Any 'cookie' header field shorter than 20 bytes long is made never-indexed. These fields are the most at-risk. These rules are inspired by Firefox and nghttp2. rcookier N) isinstancebytes_SECURE_HEADERSlenr headershdr_validation_flagsheaders ./usr/lib/python3/dist-packages/h2/utilities.py_secure_headersr%Lsj&&)U++++ !9 'F1I,Bs6RS9~XZGZ)&)VAY? ?L sA'A)cUHTup[U[5(a US:XaUs $[U[5(dM;US:XdMCURS5s $ g)z4 Extracts the request method from the headers list. rz:methodutf-8N)rrstrencode)r!kvs r$extract_method_headerr,gsO a  AOH a  !y.88G$ $  c|UH6upURS5(d gUS:waM%URS5s $ g)a Searches headers list for a :status header to confirm that a given collection of headers are an informational response. Assumes the header are well formed and encoded as bytes: that is, that the HTTP/2 special headers are first in the block, and so that it can stop looking when it finds the first header field whose name does not begin with a colon. :param headers: The HTTP/2 headers. :returns: A boolean indicating if this is an informational response. rFrr) startswithr!nr+s r$is_informational_responser2ss@||D!! ? ||D!! r-c<SnX-nX2:aSU3n[U5eU$)a Increments a flow control window, guarding against that window becoming too large. :param current: The current value of the flow control window. :param increment: The increment to apply to that window. :returns: The new value of the window. :raises: ``FlowControlError`` iz+May not increment flow control window past )r )current incrementLARGEST_FLOW_CONTROL_WINDOWnew_sizemsgs r$guard_increment_windowr9s6#,"H-;\rSrSr%S\S'S\S'S\S'S\S'Srg) HeaderValidationFlagsbool is_client is_traileris_response_headeris_push_promiser;N)__name__ __module__ __qualname____firstlineno____annotations____static_attributes__r;r-r$r>r>sOr-r>c[X5n[X5n[X5n[X5n[ X5n[ X5n[ X5n[X5$)z Validates a header sequence against a set of constraints from RFC 7540. :param headers: The HTTP header set. :param hdr_validation_flags: An instance of HeaderValidationFlags. )_reject_empty_header_names_reject_uppercase_header_fields_reject_surrounding_whitespace _reject_te_reject_connection_header_reject_pseudo_header_fields_check_host_authority_header_check_path_headerr!r"s r$validate_headersrUsx )G.G-GG(G+G+G g <Q :C$ $ s.0c## UH9n[RUS5(aSUS<S3n[U5eUv M; g7f)zO Raises a ProtocolError if any uppercase character is found in a header block. rzReceived uppercase header name .N)UPPER_REsearchr rWs r$rMrMsF  ??6!9 % %3F1I=BC$ $ sAAc# # UHynUSS[;dUSS[;aSUS<3n[U5eUS(a4USS[;dUSS[;aSUS<3n[U5eUv M{ g7f)z\ Raises a ProtocolError if any header name or value is surrounded by whitespace characters. rz.Received header name surrounded by whitespace r z/Received header value surrounded by whitespace N) _WHITESPACEr rWs r$rNrNs !9Q<; &&)B-;*FB6!9-PC$ $ !96!9Q<;6 1IbM[ (CF1I=QC$ $ sBBc## UH;nUSS:Xa+USR5S:waSUS<3n[U5eUv M= g7f)zw Raises a ProtocolError if the TE header is present in a header block and its value is anything other than "trailers". rster strailerszInvalid value for TE header: N)lowerr rWs r$rOrOsO  !9 &)//"3{"B1&)?C$ $ sAAc#j# UH)nUS[;aSUS<S3n[U5eUv M+ g7f)zO Raises a ProtocolError if the Connection header is present in a header block. rz*Connection-specific header field present: rYN)CONNECTION_HEADERSr rWs r$rPrP$s@  !9* *>vaym1MC$ $ s13c2X;aSU<S3n[U5eg)z Given a set of header names, checks whether the string or byte version of the header name is present. Raises a Protocol error with the appropriate error if it's missing. zHeader block missing mandatory z headerNr ) bytes_header header_setr8s r$_assert_header_in_setrg1s)%/ /?wGC  &r-c#v# [5nSnSnUHnUSS[:Xa|USU;aSUS<3n[U5eURUS5 U(aSUS<3n[U5eUS[;aSUS<3n[U5eUSS;aUSnOS nUv M [ X$U5 g7f) z Raises a ProtocolError if duplicate pseudo-header fields are found in a header block or if a pseudo-header field appears in a block after an ordinary header field. Raises a ProtocolError if pseudo-header fields are found in trailers. FNrz'Received duplicate pseudo-header field z.Received pseudo-header field out of sequence: z$Received custom pseudo-header field rr T)setSIGILr add_ALLOWED_PSEUDO_HEADER_FIELDS(_check_pseudo_header_field_acceptability)r!r"seen_pseudo_header_fieldsseen_regular_headermethodr#r8s r$rQrQ=s!$ F !9Q<5 ay55?q }M#C(( % ) )&) 4"FvaymT#C((ay ==2>2BCC  ..j.9#14I#I #56N5OPC$ $ $#55"-- h7j.9j.9"03I"I "67N6OPC$ $ Z ,/LLOA/ATU#C(( .6r-c## SnSnUH$nUSS:XaUSnOUSS:XaUSnUv M& USLnUSLnU(dU(d Sn[U5eU(a#U(aX:waSU<SU<3n[U5eggg7f) z Given the :authority and Host headers from a request block that isn't a trailer, check that: 1. At least one of these headers is set. 2. If both headers are set, they match. :param headers: The HTTP header set. :raises: ``ProtocolError`` Nrrr shostz@Request header block does not have an :authority or Host header.zARequest header block has mismatched :authority and Host headers: z / rd)r!authority_header_valhost_header_valr#authority_present host_presentr8s r$_validate_host_authority_headerr~s" O !9 %#)!9 AY' !$QiO .T9#4/L \PC  \.B.U 14C7J L C  /V\sA=A?cvUR=(d URnU(a SU5$[U5$)z Raises a ProtocolError if a header block arrives that does not contain an :authority or a Host header, or if a header block contains both fields, but their values do not match. c3$# UHov M g7fNr;.0hs r$ /_check_host_authority_header..#7a7rCrBr~r!r"skip_validations r$rRrR; // (''#7## *7 33r-c^SU4SjjnUR=(d URnU(a ST5$U"5$)za Raise a ProtocolError if a header block arrives or is sent that contains an empty :path header. c3h># TH'nUSS:XaUS(d Sn[U5eUv M) g7f)Nrrr z"An empty :path header is forbiddenrd)r#r8r!s r$inner!_check_path_header..inners7FayH$VAY:#C((L s/2c3$# UHov M g7frr;rs r$r%_check_path_header..rr)returnGenerator[Header, None, None])rCrB)r!r"rrs` r$rSrSs=  // (''#7## 7Nr-cR[U[5(aU$URS5$)z Given an assumed `str` (or anything that supports `.encode()`), encodes it using utf-8 into bytes. Returns the unmodified object if it is already a `bytes` object. r')rrr))r+s r$ _to_bytesrs$ 1e$$1;!((7*;;r-c/nUHnn[US5[US54n[U[5(a)URUR USUS55 M]URU5 Mp U$)z Given an iterable of header two-tuples, rebuilds that as a list with the header names and values encoded as utf-8 bytes. This function produces tuples that preserve the original type of the header tuple for tuple and any ``HeaderTuple``. rr )rrrappend __class__)r!encoded_headersr#rs r$utf8_encode_headersrsu%'O vay !9VAY#7 8 fk * *  " "6#3#3AaD!A$#? @  " "1 %  r-c## UH\n[U[5(a*URUSR5US5v MBUSR5US4v M^ g7f)z Given an iterable of header two-tuples, rebuilds that iterable with the header names lowercased. This generator produces tuples that preserve the original type of the header tuple for tuple and any ``HeaderTuple``. rr N)rrrr`r s r$_lowercase_header_namesr sZ fk * *""6!9??#4fQi@ @!9??$fQi0 0 sA$A&c## UHxn[U[5(a8URUSR5USR55v MPUSR5USR54v Mz g7f)z Given an iterable of header two-tuples, strip both leading and trailing whitespace from both header names and header values. This generator produces tuples that preserve the original type of the header tuple for tuple and any ``HeaderTuple``. rr N)rrrstripr s r$_strip_surrounding_whitespacersh fk * *""6!9??#4fQioo6GH H!9??$fQioo&78 8 sBBc#D# UHnUS[;dMUv M g7f)u9 Strip any connection headers as per RFC7540 § 8.1.2.2. rN)rbr s r$_strip_connection_headersr's#  !9. .Ls  cvUR=(d URnU(a SU5$[U5$)z Raises an InvalidHeaderBlockError if we try to send a header block that does not contain an :authority or a Host header, or if the header block contains both fields, but their values do not match. c3$# UHov M g7frr;rs r$r4_check_sent_host_authority_header..@rrrrs r$!_check_sent_host_authority_headerr1rr-c## /nUH&nUSS:XaURUS5 M"Uv M( U(a SRU5n[SU5v gg7f)u[ RFC 7540 § 8.1.2.5 allows HTTP/2 clients to split the Cookie header field, which must normally appear only once, into multiple fields for better compression. However, they MUST be joined back up again when received. This normalization step applies that transform. The side-effect is that all cookie fields now appear *last* in the header block. rrr ; N)rjoinr )r!r"cookiesr# cookie_vals r$_combine_cookie_fieldsrEs\G !9 ! NN6!9 %L  ZZ( %i<<sAAc#H# UHn[US[5(de[US[5(deUSS:XaTUSRS5H:n[U[5(aUR USU5v M1USU4v M< MUv M g7f)u RFC 7540 § 8.1.2.5 allows for better compression efficiency, to split the Cookie header field into separate header fields We want to do it for outbound requests, as we are doing for inbound. rr rrN)rrsplitrr)r!r"r#rs r$_split_outbound_cookie_fieldsr\s&)U++++&)U++++ !9 !$Qiooe4 fk22 **6!9jAA )Z// 5 LsB B"c~[X5nU(a [X5n[X5n[X5n[ X5$)z Normalizes a header sequence that we are about to send. :param headers: The HTTP header set. :param hdr_validation_flags: An instance of HeaderValidationFlags. :param should_split_outbound_cookies: boolean flag )rrrrr%)r!r"should_split_outbound_cookiess r$normalize_outbound_headersrrs:&gDG$/N+GJG'FG 7 99r-c[X5$)z Normalizes a header sequence that we have received. :param headers: The HTTP header set. :param hdr_validation_flags: An instance of HeaderValidationFlags )rrTs r$normalize_inbound_headersrs "' @@r-cp[X5n[X5n[X5n[X5n[ X5$)z Validates and normalizes a header sequence that we are about to send. :param headers: The HTTP header set. :param hdr_validation_flags: An instance of HeaderValidationFlags. )rOrPrQrrSrTs r$validate_outbound_headersrsKG(G+G0G g <URSS5Ul[TU] "U0UD6 UR 5 g)N size_limit)pop _size_limitsuper__init___check_size_limit)selfargskwargsrs r$rSizeLimitDict.__init__s4!::lD9 $)&)  r-cD>[TU]X5 UR5 gr)r __setitem__r)rkeyvaluers r$rSizeLimitDict.__setitem__s C'  r-cURbE[U5UR:a+URSS9 [U5UR:aM*ggg)NF)last)rrpopitem)rs r$rSizeLimitDict._check_size_limitsG    'd)d... % (d)d... (r-)r)rzdict[int, int]rrrNone)rintrz Any | intrr)rr) rErFrGrHrrrrJ __classcell__)rs@r$rrs! ! ))r-r)r!Iterable[Header]r"HeaderValidationFlags | Nonerr)r!rr bytes | None)r!rrr@)r4rr5rrr)r!rr"r>rr)r!rr"r>rr)rerrf(set[bytes | str] | set[bytes] | set[str]rr)rurrprr"r>rr)r!rrr)r+z bytes | strrr)r!zIterable[HeaderWeaklyTyped]rz list[Header])F)r!rr"rrr@rr)D__doc__ __future__r collectionsrestringrtypingrrr hpack.structrr exceptionsr r collections.abcr rrrcompilerZordrjINFORMATIONAL_START frozensetrbrlrrrrsrtmapr^r%r,r2r9r<r>rUrLrMrNrOrPrgrQrmr~rRrSrrrrrrrrrrr OrderedDictrrr;r-r$rs # 11=736 ::h  D $i  !*+!"##J<0 !*<. 9C,- *FKh6 ,,,J%=R 5J Ol  :O Tq 9NSp,   !&N !SW !(7L(Qn(V')5A')CX')]a')T-!`47L4Qn4(-BGd4<" 12N 1Sp 1 98T 9Yv 94PUr4B:Mj:&A4IANkA=4I=Nk=0)K++CH5)r-