← Back
Editing: security.cpython-311.pyc
� �|�e� � �N � d dl Z d dlmZ d dlmZ d dlmZ G d� de� � ZdS )� N)�settings)� HttpResponsePermanentRedirect)�MiddlewareMixinc �, � � e Zd Zd� fd� Zd� Zd� Z� xZS )�SecurityMiddlewareNc � �� t � � � |� � t j | _ t j | _ t j | _ t j | _ t j | _ t j | _ t j | _ d� t j D � � | _ t j | _ d S )Nc �6 � g | ]}t j |� � ��S � )�re�compile)�.0�rs �</usr/lib/python3/dist-packages/django/middleware/security.py� <listcomp>z/SecurityMiddleware.__init__.<locals>.<listcomp> s � � W� W� W�!�� �1� � � W� W� W� )�super�__init__r �SECURE_HSTS_SECONDS� sts_seconds� SECURE_HSTS_INCLUDE_SUBDOMAINS�sts_include_subdomains�SECURE_HSTS_PRELOAD� sts_preload�SECURE_CONTENT_TYPE_NOSNIFF�content_type_nosniff�SECURE_BROWSER_XSS_FILTER� xss_filter�SECURE_SSL_REDIRECT�redirect�SECURE_SSL_HOST� redirect_host�SECURE_REDIRECT_EXEMPT�redirect_exempt�SECURE_REFERRER_POLICY�referrer_policy)�self� get_response� __class__s �r r zSecurityMiddleware.__init__ s� �� � ����� �&�&�&�#�7���&.�&M��#�#�7���$,�$H��!�"�<��� �4�� � %� 5��� W� W�x�7V� W� W� W�� � '� >�� � � r c �< �� |j � d� � �| j ru|� � � sct �fd�| j D � � � � sE| j p|� � � }t d|�|� � � ��� � S d S d S d S )N�/c 3 �B �K � | ]}|� �� � V � �d S �N)�search)r �pattern�paths �r � <genexpr>z5SecurityMiddleware.process_request.<locals>.<genexpr> sC �� � � � =� =� #� ���t�,�,� =� =� =� =� =� =r zhttps://) r/ �lstripr � is_secure�anyr# r! �get_hostr � get_full_path)r& �request�hostr/ s @r �process_requestz"SecurityMiddleware.process_request s� �� ��|�"�"�3�'�'�� �M� �'�"3�"3�"5�"5� �� =� =� =� =�'+�';�=� =� =� =� =� � �%�;��)9�)9�);�);�D�0�0�"&�$��(=�(=�(?�(?�(?�@�� � � � � � � � r c � � | j rD|� � � r0d|vr,d| j z }| j r|dz }| j r|dz }||j d< | j r|j � dd� � | j r|j � dd� � | j rq|j � d d � t | j t � � r$d � | j � d � � D � � n| j � � � � |S ) NzStrict-Transport-Securityz max-age=%sz; includeSubDomainsz ; preloadzX-Content-Type-Options�nosniffzX-XSS-Protectionz 1; mode=blockzReferrer-Policy�,c �6 � g | ]}|� � � ��S r )�strip)r �vs r r z7SecurityMiddleware.process_response.<locals>.<listcomp>5 s � �D�D�D�q������D�D�Dr ) r r2 r r �headersr � setdefaultr r% �join� isinstance�str�split)r& r6 �response� sts_headers r �process_responsez#SecurityMiddleware.process_response! sB � � � � G��!2�!2�!4�!4� G�+�8�;�;�%��(8�8�J��*� @� '�*?� ?� �� � 6� '�+� 5� �<F�H� � 8� 9� � $� M� � � '� '�(@�)� L� L� L� �?� M� � � '� '�(:�O� L� L� L� � � � � � '� '�(9�3�8�8� �d� 2�C�8�8�S�D�D�D�$8�$>�$>�s�$C�$C�D�D�D�D�>B�>R�<� <� � � � �r r, )�__name__� __module__� __qualname__r r8 rG � __classcell__)r( s @r r r s[ �� � � � � � ?� ?� ?� ?� ?� ?�� � �� � � � � � r r )r � django.confr � django.httpr �django.utils.deprecationr r r r r �<module>rO sx �� � � � � � � � � � � 5� 5� 5� 5� 5� 5� 4� 4� 4� 4� 4� 4�1� 1� 1� 1� 1� � 1� 1� 1� 1� 1r
Save File
Cancel