This file is indexed.

/usr/share/pyshared/circuits/web/http.py is in python-circuits 2.1.0-2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
# Module:   http
# Date:     13th September 2007
# Author:   James Mills, prologic at shortcircuit dot net dot au

"""Hyper Text Transfer Protocol

This module implements the server side Hyper Text Transfer Protocol
or commonly known as HTTP.
"""


try:
    from urllib.parse import unquote
    from urllib.parse import urlparse
except ImportError:
    from urllib import unquote  # NOQA
    from urlparse import urlparse  # NOQA

from circuits.net.sockets import Close, Write
from circuits.core import handler, BaseComponent, Value

from . import wrappers
from .utils import quoted_slash
from .exceptions import HTTPException
from .headers import parse_headers, Headers
from .events import Request, Response, Stream
from .errors import HTTPError, NotFound, Redirect
from .exceptions import Redirect as RedirectException

MAX_HEADER_FRAGENTS = 20
HTTP_ENCODING = 'utf-8'

try:
    unicode
except NameError:
    unicode = str


class HTTP(BaseComponent):
    """HTTP Protocol Component

    Implements the HTTP server protocol and parses and processes incoming
    HTTP messages, creating and sending an appropriate response.

    The component handles :class:`~circuits.net.sockets.Read` events
    on its channel and collects the associated data until a complete
    HTTP request has been received. It parses the request's content
    and puts it in a :class:`~circuits.web.wrappers.Request` object and
    creates a corresponding :class:`~circuits.web.wrappers.Response`
    object. Then it emits a :class:`~circuits.web.events.Request`
    event with these objects as arguments.

    The component defines several handlers that send a response back to
    the client.
    """

    channel = "web"

    def __init__(self, encoding="utf-8", channel=channel):
        super(HTTP, self).__init__(channel=channel)

        self._encoding = encoding

        self._clients = {}
        self._buffers = {}

    @handler("stream")
    def _on_stream(self, response, data):
        if data is not None:
            if data:
                if response.chunked:
                    data = "{0:s}\r\n{1:s}\r\n".format(
                        hex(len(data))[2:], data
                    ).encode(self._encoding)
                self.fire(Write(response.request.sock, data))
            if response.body and not response.done:
                try:
                    data = next(response.body)
                except StopIteration:
                    data = None
                self.fire(Stream(response, data))
        else:
            if response.body:
                response.body.close()
            if response.chunked:
                self.fire(Write(response.request.sock, b"0\r\n\r\n"))
            if response.close:
                self.fire(Close(response.request.sock))
            response.done = True

    @handler("response")
    def _on_response(self, response):
        """``Response`` Event Handler

        :param response: the ``Response`` object created when the
            HTTP request was initially received.
        :type response: :class:`~circuits.web.wrappers.Response`

        This handler builds an HTTP response data stream from
        the information contained in the *response* object and
        sends it to the client (firing ``Write`` events).
        """
        self.fire(
            Write(response.request.sock, str(response).encode(HTTP_ENCODING))
        )

        if response.stream and response.body:
            try:
                data = next(response.body)
            except StopIteration:
                data = None
            self.fire(Stream(response, data))
        else:
            if isinstance(response.body, bytes):
                body = response.body
            elif isinstance(response.body, unicode):
                body = response.body.encode(self._encoding)
            else:
                parts = (
                    s
                    if isinstance(s, bytes) else s.encode(self._encoding)
                    for s in response.body if s is not None
                )
                body = b"".join(parts)

            if body:
                if response.chunked:
                    buf = [hex(len(body))[2:].encode(), b"\r\n", body, b"\r\n"]
                    body = b"".join(buf)
                self.fire(Write(response.request.sock, body))

                if response.chunked:
                    self.fire(Write(response.request.sock, b"0\r\n\r\n"))

            if not response.stream:
                if response.close:
                    self.fire(Close(response.request.sock))
                response.done = True

    @handler("disconnect")
    def _on_disconnect(self, sock):
        if sock in self._clients:
            del self._clients[sock]

    @handler("read")
    def _on_read(self, sock, data):
        """Read Event Handler

        Process any incoming data appending it to an internal buffer.
        Split the buffer by the standard HTTP delimiter CRLF and create
        Raw Event per line. Any unfinished lines of text, leave in the buffer.
        """

        if sock in self._clients:
            request, response = self._clients[sock]
            if response.done:
                del self._clients[sock]

        if sock in self._clients:
            request, response = self._clients[sock]
            request.body.write(data)
            contentLength = int(request.headers.get("Content-Length", "0"))
            if not request.body.tell() == contentLength:
                return
        else:
            if sock in self._buffers:
                # header fragments have been received before
                self._buffers[sock].append(data)
                data = b"".join(self._buffers[sock])
                if data.find(b'\r\n\r\n') == -1:
                    # still not all headers received
                    return
                # all headers received, use combined data and remove buffer
                del self._buffers[sock]
            else:
                # no pending header fragments for this socket
                if data.find(b'\r\n\r\n') == -1:
                    # this first chunk doesn't contain all headers yet, buffer
                    buf = self._buffers.setdefault(sock, [])
                    buf.append(data)
                    if len(buf) > MAX_HEADER_FRAGENTS:
                        del self._buffers[sock]
                        raise ValueError("Too many HTTP Headers Fragments.")
                    return

            requestline, data = data.split(b"\r\n", 1)
            requestline = requestline.strip().decode(
                HTTP_ENCODING, "replace"
            )
            method, path, protocol = requestline.split(" ", 2)
            scheme, location, path, params, qs, frag = urlparse(path)

            protocol = tuple(map(int, protocol[5:].split(".")))
            request = wrappers.Request(
                sock, method, scheme, path, protocol, qs
            )
            response = wrappers.Response(request, encoding=self._encoding)
            self._clients[sock] = request, response

            if frag:
                return self.fire(HTTPError(request, response, 400))

            if params:
                path = "%s;%s" % (path, params)

            # Unquote the path+params (e.g. "/this%20path" -> "this path").
            # http://www.w3.org/Protocols/rfc2616/rfc2616-sec5.html#sec5.1.2
            #
            # But note that "...a URI must be separated into its components
            # before the escaped characters within those components can be
            # safely decoded." http://www.ietf.org/rfc/rfc2396.txt, sec 2.4.2
            path = "%2F".join(map(unquote, quoted_slash.split(path)))

            # Compare request and server HTTP protocol versions, in case our
            # server does not support the requested protocol. Limit our output
            # to min(req, server). We want the following output:
            #    request    server   actual written supported response
            #    protocol protocol response protocol    feature set
            # a  1.0        1.0         1.0             1.0
            # b  1.0        1.1         1.1             1.0
            # c  1.1        1.0         1.0             1.0
            # d  1.1        1.1         1.1             1.1
            # Notice that, in (b), the response will be "HTTP/1.1" even though
            # the client only understands 1.0. RFC 2616 10.5.6 says we should
            # only return 505 if the _major_ version is different.
            if not request.protocol[0] == request.server_protocol[0]:
                return self.fire(HTTPError(request, response, 505))

            rp = request.protocol
            sp = request.server_protocol
            response.protocol = "HTTP/%s.%s" % min(rp, sp)

            end_of_headers = data.find(b"\r\n\r\n")
            if end_of_headers > -1:
                header_data = data[:end_of_headers].decode(
                    HTTP_ENCODING, "replace"
                )
                headers = request.headers = parse_headers(header_data)
            else:
                headers = request.headers = Headers([])

            request.body.write(data[(end_of_headers + 4):])

            if headers.get("Expect", "") == "100-continue":
                return self.fire(
                    Response(
                        wrappers.Response(
                            request, code=100, encoding=self._encoding
                        )
                    )
                )

            contentLength = int(headers.get("Content-Length", "0"))
            if request.body.tell() < contentLength:
                return

        # Persistent connection support
        if request.protocol == (1, 1):
            # Both server and client are HTTP/1.1
            if request.headers.get("Connection", "").lower() == "close":
                response.close = True
        else:
            # Either the server or client (or both) are HTTP/1.0
            if request.headers.get("Connection", "").lower() != "keep-alive":
                response.close = True

        request.body.seek(0)

        if hasattr(sock, "getpeercert"):
            peer_cert = sock.getpeercert()
            if peer_cert:
                req = Request(request, response, peer_cert)
            else:
                req = Request(request, response)
        else:
            req = Request(request, response)

        self.fire(req)

    @handler("httperror")
    def _on_httperror(self, event, request, response, code, **kwargs):
        """Default HTTP Error Handler

        Default Error Handler that by default just fires a ``Response``
        event with the *response* as argument. The *response* is normally
        modified by a :class:`~circuits.web.errors.HTTPError` instance
        or a subclass thereof.
        """
        response.body = str(event)
        self.fire(Response(response))

    @handler("request_success")
    def _on_request_success(self, e, value):
        """
        Handler for the ``RequestSuccess`` event that is automatically
        generated after all handlers for a
        :class:`~circuits.web.events.Request` event have been invoked
        successfully.

        :param e: the successfully handled ``Request`` event (having
            as attributes the associated
            :class:`~circuits.web.wrappers.Request` and
            :class:`~circuits.web.wrappers.Response` objects).
        :param value: the value(s) returned by the invoked handler(s).

        This handler converts the value(s) returned by the
        (successfully invoked) handlers for the initial ``Request``
        event to a body and assigns it to the ``Response`` object's
        ``body`` attribute. It then fires a
        :class:`~circuits.web.events.Response` event with the
        ``Response`` object as argument.
        """
        # We only want the non-recursive value at this point.
        # If the value is an instance of Value we will set
        # the .notify flag and be notified of changes to the value.
        value = e.value.getValue(recursive=False)

        if isinstance(value, Value) and not value.promise:
            value = value.getValue(recursive=False)

        request, response = e.args[:2]

        if value is None:
            self.fire(NotFound(request, response))
        elif isinstance(value, HTTPError):
            response.body = str(value)
            self.fire(Response(response))
        elif isinstance(value, wrappers.Response):
            self.fire(Response(value))
        elif isinstance(value, Value):
            if value.result and not value.errors:
                response.body = value.value
                self.fire(Response(response))
            elif value.errors:
                error = value.value
                etype, evalue, traceback = error
                if isinstance(evalue, RedirectException):
                    self.fire(
                        Redirect(request, response, evalue.urls, evalue.status)
                    )
                elif isinstance(evalue, HTTPException):
                    if evalue.traceback:
                        self.fire(
                            HTTPError(
                                request, response, evalue.code,
                                description=evalue.description,
                                error=error
                            )
                        )
                    else:
                        self.fire(
                            HTTPError(
                                request, response, evalue.code,
                                description=evalue.description
                            )
                        )
                else:
                    self.fire(HTTPError(request, response, error=error))
            else:
                # We want to be notified of changes to the value
                value = e.value.getValue(recursive=False)
                value.event = e
                value.notify = True
        elif type(value) is tuple:
            etype, evalue, traceback = error = value

            if isinstance(evalue, RedirectException):
                self.fire(
                    Redirect(request, response, evalue.urls, evalue.status)
                )
            elif isinstance(evalue, HTTPException):
                if evalue.traceback:
                    self.fire(
                        HTTPError(
                            request, response, evalue.code,
                            description=evalue.description,
                            error=error
                        )
                    )
                else:
                    self.fire(
                        HTTPError(
                            request, response, evalue.code,
                            description=evalue.description
                        )
                    )
            else:
                self.fire(HTTPError(request, response, error=error))
        elif type(value) is not bool:
            response.body = value
            self.fire(Response(response))

    @handler("request_failure", "response_failure")
    def _on_request_or_response_failure(self, evt, err):
        if len(evt.args) == 1:
            response = evt.args[0]
            request = response.request
        else:
            request, response = evt.args[:2]

        # Ignore filtered requests already handled (eg: HTTPException(s)).
        # Ignore failed "response" handlers (eg: Loggers or Tools)
        if request.handled or response.done:
            return

        if not request.handled:
            request.handled = True

        etype, evalue, traceback = err

        if isinstance(evalue, RedirectException):
            self.fire(
                Redirect(request, response, evalue.urls, evalue.status)
            )
        elif isinstance(evalue, HTTPException):
            if evalue.traceback:
                self.fire(
                    HTTPError(
                        request, response, evalue.code,
                        description=evalue.description,
                        error=err
                    )
                )
            else:
                self.fire(
                    HTTPError(
                        request, response, evalue.code,
                        description=evalue.description
                    )
                )
        else:
            self.fire(HTTPError(request, response, error=err))