gZdZddlZddlZddlmZddlmZmZddlm Z m Z ejdZ e gdZe gd Ze gd Ze gd Ze d d gZe ddgZe eeeZdZdZdZdZdZej8dgdZdZdZdZ dZ!dZ"dZ#dZ$dZ%dZ&d Z'd!Z(d"Z)d#Z*d$Z+d%Z,d&Z-d'Z.d(Z/d)Z0d*Z1d+Z2Gd,d-ejfZ4y).zW h2/utilities ~~~~~~~~~~~~ Utility functions that do not belong in a separate module. N) whitespace) HeaderTupleNeverIndexedHeaderTuple) ProtocolErrorFlowControlErrors[A-Z]) s connection connectionsproxy-connectionzproxy-connections keep-alivez keep-alivestransfer-encodingztransfer-encodingsupgradeupgrade) :method:method:scheme:scheme :authority :authority:path:path:status:status :protocol :protocol)s authorization authorizationsproxy-authorizationzproxy-authorization) r rrrrrr r rrrrrrc#K|D]?}|dtvr t||ddvrt|ddkr t|<|Ayw)a Certain headers are at risk of being attacked during the header compression phase, and so need to be kept out of header compression contexts. This function automatically transforms certain specific headers into HPACK never-indexed fields to ensure they don't get added to header compression contexts. This function currently implements two rules: - 'authorization' and 'proxy-authorization' fields are automatically made never-indexed. - Any 'cookie' header field shorter than 20 bytes long is made never-indexed. These fields are the most at-risk. These rules are inspired by Firefox and nghttp2. r)cookiecookierN)_SECURE_HEADERSrlenheadershdr_validation_flagsheaders A/var/www/openai/venv/lib/python3.12/site-packages/h2/utilities.py_secure_headersr#BsU$ !9 ')62 2 AY0 0S^b5H)62 2L sAAcn|D]0\}}|dvs t|ts|jdcS|cSy)z< Extracts the request method from the headers list. r r utf-8N isinstancebytesencode)rkvs r"extract_method_headerr-]s91 ( (a'xx(( c|D]M\}}t|trd}d}d}nd}d}d}|j|sy||k7r<|j|cSy) a Searches a header block for a :status header to confirm that a given collection of headers are an informational response. Assumes the header block is well formed: that is, that the HTTP/2 special headers are first in the block, and so that it can stop looking when it finds the first header field whose name does not begin with a colon. :param headers: The HTTP/2 header block. :returns: A boolean indicating if this is an informational response. :r1:r1FNr(r) startswith)rnr,sigilstatusinformational_starts r"is_informational_responser:isk1 a EF"& EF"& ||E" ; ||/00'r.c:d}||z}||kDrtd|z|S)a- Increments a flow control window, guarding against that window becoming too large. :param current: The current value of the flow control window. :param increment: The increment to apply to that window. :returns: The new value of the window. :raises: ``FlowControlError`` iz-May not increment flow control window past %d)r)current incrementLARGEST_FLOW_CONTROL_WINDOWnew_sizes r"guard_increment_windowr@s<#,"H-- ; ' (  Or.cn|D]0\}}|dvs t|ts|jdcS|cSy)a Given a header set, searches for the authority header and returns the value. Note that this doesn't terminate early, so should only be called if the headers are for a client request. Otherwise, will loop over the entire header set, which is potentially unwise. :param headers: The HTTP header set. :returns: The value of the authority header, or ``None``. :rtype: ``bytes`` or ``None``. rrr&Nr')rr6r,s r"authority_from_headersrCs?1 . .,6q%,@188G$ Ga G  r.HeaderValidationFlags) is_client is_traileris_response_headeris_push_promisect||}t||}t||}t||}t ||}t ||}t ||}t||}|S)z Validates a header sequence against a set of constraints from RFC 7540. :param headers: The HTTP header set. :param hdr_validation_flags: An instance of HeaderValidationFlags. )_reject_empty_header_names_reject_uppercase_header_fields_reject_surrounding_whitespace _reject_te_reject_connection_header_reject_pseudo_header_fields_check_host_authority_header_check_path_headerrr s r"validate_headersrSs )%G.%G-%G%G(%G+%G+%G!*>?G Nr.c#ZK|D]"}t|ddk(r td|$yw)z Raises a ProtocolError if any header names are empty (length 0). While hpack decodes such headers without errors, they are semantically forbidden in HTTP, see RFC 7230, stating that they must be at least one character long. rz&Received header name with zero length.N)rrrs r"rJrJs3 vay>Q  HI I )+c#tK|D]/}tj|drtd|dz|1yw)z[ Raises a ProtocolError if any uppercase character is found in a header block. rz"Received uppercase header name %s.N)UPPER_REsearchrrs r"rKrKsB  ??6!9 %4vay@B B s68c#K|D]e}|ddtvs|ddtvrtd|dz|dr-|ddtvs|ddtvrtd|dz|gyw)zh Raises a ProtocolError if any header name or value is surrounded by whitespace characters. rz0Received header name surrounded by whitespace %rrz1Received header value surrounded by whitespace %rN) _WHITESPACErrs r"rLrLs !9Q<; &&)B-;*FBVAYNP P !96!9Q<;6 1IbM[ (CfQiO  sA,A.c#|K|D]3}|ddvr&|djdvrtd|dz|5yw)z Raises a ProtocolError if the TE header is present in a header block and its value is anything other than "trailers". r)steter)strailerstrailerszInvalid value for TE header: %sN)lowerrrs r"rMrMsU  !9 &ay (BB#51I  s:<c#ZK|D]"}|dtvrtd|dz|$yw)z[ Raises a ProtocolError if the Connection header is present in a header block. rz-Connection-specific header field present: %s.N)CONNECTION_HEADERSrrs r"rNrN*s?  !9* *?&)K  rUcft|tr|j|S|j|S)z Given a string that might be a bytestring or a Unicode string, return True if it starts with the appropriate prefix. r4) test_string bytes_prefixunicode_prefixs r"_custom_startswithrf8s0 +u%%%l33%%n55r.c2||vs||vstd|zyy)z Given a set of header names, checks whether the string or byte version of the header name is present. Raises a Protocol error with the appropriate error if it's missing. z(Header block missing mandatory %s headerNr) string_header bytes_header header_sets r"_assert_header_in_setrlCs1 Z '<:+E 6 F  ,F 'r.c#Kt}d}d}|D]}t|dddr|d|vrtd|dz|j|d|rtd|dz|dtvrtd|dz|dd vr0t |d t s|d jd }n|d }nd }|t|||yw) a Raises a ProtocolError if duplicate pseudo-header fields are found in a header block or if a pseudo-header field appears in a block after an ordinary header field. Raises a ProtocolError if pseudo-header fields are found in trailers. FNrr0r2z)Received duplicate pseudo-header field %sz0Received pseudo-header field out of sequence: %sz&Received custom pseudo-header field %sr%rr&T) setrfradd_ALLOWED_PSEUDO_HEADER_FIELDSr(r)r*(_check_pseudo_header_field_acceptability)rr seen_pseudo_header_fieldsseen_regular_headermethodr!s r"rOrOOs!$ F fQit 4ay55#?&)K & ) )&) 4"#F1I ay ==# 2^ C  ..j*nE#14I#I #5()  $ #55"-- h.Aj*nEj*nE"03I"I "6'(  Z ,/LLO#A#$ .6r.c#Kd}d}|D]}|ddvr|d}n |ddvr|d}|!|du}|du}|s |s td|r|r||k7rtd|d|yyyw) a Given the :authority and Host headers from a request block that isn't a trailer, check that: 1. At least one of these headers is set. 2. If both headers are set, they match. :param headers: The HTTP header set. :raises: ``ProtocolError`` NrrBr)shosthostz@Request header block does not have an :authority or Host header.zARequest header block has mismatched :authority and Host headers: z / rh)rauthority_header_valhost_header_valr!authority_present host_presents r"_validate_host_authority_headerrs" O !96 6#)!9 AY, ,$QiO .T9#4/L \ N  \ ? 2(:  3*sAAcT|jxs |j}|r|St|S)z Raises a ProtocolError if a header block arrives that does not contain an :authority or a Host header, or if a header block contains both fields, but their values do not match. rGrFrrr skip_validations r"rPrP5 // ('' *7 33r.cXfd}|jxs |j}|rS|S)zm Raise a ProtocolError if a header block arrives or is sent that contains an empty :path header. c3RKD]}|ddvr|ds td|yw)Nr)rrrz"An empty :path header is forbiddenrh)r!rs r"innerz!_check_path_header..inners6Fay00ay'(LMML s$')rGrF)rr rrs` r"rQrQs7  // (''wr.c#K|D]U}t|tr)|j|dj|d<|dj|dfWyw)z Given an iterable of header two-tuples, rebuilds that iterable with the header names lowercased. This generator produces tuples that preserve the original type of the header tuple for tuple and any ``HeaderTuple``. rrN)r(r __class__r_rs r"_lowercase_header_namesrsX  fk *""6!9??#4fQi@ @!9??$fQi0 0 sAAc#K|D]q}t|tr7|j|dj|djJ|dj|djfsyw)a Given an iterable of header two-tuples, strip both leading and trailing whitespace from both header names and header values. This generator produces tuples that preserve the original type of the header tuple for tuple and any ``HeaderTuple``. rrN)r(rrstriprs r"_strip_surrounding_whitespacersf fk *""6!9??#4fQioo6GH H!9??$fQioo&78 8 sA8A:c#:K|D]}|dtvs|yw)uA Strip any connection headers as per RFC7540 § 8.1.2.2. rN)rars r"_strip_connection_headersr+s$ !9. .LscT|jxs |j}|r|St|S)z Raises an InvalidHeaderBlockError if we try to send a header block that does not contain an :authority or a Host header, or if the header block contains both fields, but their values do not match. rrs r"!_check_sent_host_authority_headerr4rr.c#Kg}|D]#}|ddk(r|j|d |%|r dj|}td|yyw)us RFC 7540 § 8.1.2.5 allows HTTP/2 clients to split the Cookie header field, which must normally appear only once, into multiple fields for better compression. However, they MUST be joined back up again when received. This normalization step applies that transform. The side-effect is that all cookie fields now appear *last* in the header block. rrrs; N)appendjoinr)rr cookiesr! cookie_vals r"_combine_cookie_fieldsrGs]G !9 ! NN6!9 %L  ZZ( %i<<sAAcft||}t||}t||}t||}|S)z Normalizes a header sequence that we are about to send. :param headers: The HTTP header set. :param hdr_validation_flags: An instance of HeaderValidationFlags. )rrrr#rRs r"normalize_outbound_headersr^s=&g/CDG+G5IJG'1EFGg';?G Nr.c.eZdZfdZfdZdZxZS) SizeLimitDictcz|jdd|_tt||i||j y)N size_limit)pop _size_limitsuperr__init___check_size_limit)selfargskwargsrs r"rzSizeLimitDict.__init__s6!::lD9 mT+Trs]  67 2::h  !*+!"##J #;< !*<*F GC,- 6 1B02/ ..H 'T  ,  6  .b.b/d4&4 1 94&=. 0)K++)r.