|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/django/middleware/__pycache__/ |
Upload File : |
o
3�a� � @ s@ d dl Z d dlmZ d dlmZ d dlmZ G dd� de�ZdS )� N)�settings)� HttpResponsePermanentRedirect)�MiddlewareMixinc s. e Zd Zd� fdd� Zdd� Zdd� Z� ZS ) �SecurityMiddlewareNc sb t � �|� tj| _tj| _tj| _tj | _
tj | _ tj
| _tj| _dd� tjD �| _tj| _d S )Nc S s g | ]}t �|��qS � )�re�compile)�.0�rr r �</usr/lib/python3/dist-packages/django/middleware/security.py�
<listcomp> s z/SecurityMiddleware.__init__.<locals>.<listcomp>)�super�__init__r �SECURE_HSTS_SECONDS� sts_seconds� SECURE_HSTS_INCLUDE_SUBDOMAINS�sts_include_subdomains�SECURE_HSTS_PRELOAD� sts_preload�SECURE_CONTENT_TYPE_NOSNIFF�content_type_nosniff�SECURE_BROWSER_XSS_FILTER�
xss_filter�SECURE_SSL_REDIRECT�redirect�SECURE_SSL_HOST�
redirect_host�SECURE_REDIRECT_EXEMPT�redirect_exempt�SECURE_REFERRER_POLICY�referrer_policy)�self� get_response�� __class__r r r s zSecurityMiddleware.__init__c s` |j �d�� | jr*|�� s,t� fdd�| jD ��s.| jp |�� }td||� � f �S d S d S d S )N�/c 3 s � | ]}|� � �V qd S �N)�search)r �pattern��pathr r � <genexpr> s � �z5SecurityMiddleware.process_request.<locals>.<genexpr>z https://%s%s)
r* �lstripr � is_secure�anyr r �get_hostr �
get_full_path)r! �request�hostr r) r �process_request s ��� �z"SecurityMiddleware.process_requestc C s� | j r#|�� r#d|vr#d| j }| jr|d }| jr |d }||jd< | jr-|j�dd� | jr7|j�dd� | jrV|j�d d
� t
| jt �rQd d � | j� d
�D �n| j�� |S )
NzStrict-Transport-Securityz
max-age=%sz; includeSubDomainsz ; preloadzX-Content-Type-Options�nosniffzX-XSS-Protectionz
1; mode=blockzReferrer-Policy�,c S s g | ]}|� � �qS r )�strip)r �vr r r r 5 s z7SecurityMiddleware.process_response.<locals>.<listcomp>)
r r- r r �headersr �
setdefaultr r �join�
isinstance�str�split)r! r1 �response�
sts_headerr r r �process_response! s&
��z#SecurityMiddleware.process_responser& )�__name__�
__module__� __qualname__r r3 r@ �
__classcell__r r r# r r s
r )r � django.confr � django.httpr �django.utils.deprecationr r r r r r �<module> s