shell bypass 403
UnknownSec Shell
:
/
snap
/
core22
/
2216
/
usr
/
lib
/
python3
/
dist-packages
/
requests
/
__pycache__
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
sessions.cpython-310.pyc
o ��Hhzv � @ s� d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z ddl m Z m Z m Z mZmZ ddlmZmZmZmZ dd lmZmZmZ dd lmZmZ dd l m Z dd l m Z m Z m!Z! dd l"m#Z#m$Z$m%Z%m&Z& ddl'm(Z( ddl)m*Z* ddl m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0 ddl1m2Z2 ddlm3Z3 ej4dkr�zej5Z6W n e7y� ej8Z6Y nw ejZ6efdd�Z9efdd�Z:G dd� de;�Z<G dd� de<�Z=d d � Z>dS ) z� requests.sessions ~~~~~~~~~~~~~~~~~ This module provides a Session object to manage and persist settings across requests (cookies, auth, proxies). � N)� timedelta)� OrderedDict� )�_basic_auth_str)� cookielib�is_py3�urljoin�urlparse�Mapping)�cookiejar_from_dict�extract_cookies_to_jar�RequestsCookieJar� merge_cookies)�Request�PreparedRequest�DEFAULT_REDIRECT_LIMIT)� default_hooks� dispatch_hook)�to_native_string)�to_key_val_list�default_headers� DEFAULT_PORTS)�TooManyRedirects� InvalidSchema�ChunkedEncodingError�ContentDecodingError)�CaseInsensitiveDict)� HTTPAdapter)� requote_uri�get_environ_proxies�get_netrc_auth�should_bypass_proxies�get_auth_from_url� rewind_body)�codes)�REDIRECT_STATI�win32c C sp |du r| S | du r |S t |t�rt | t�s| S |t|��}|�t| �� dd� |�� D �}|D ]}||= q0|S )z�Determines appropriate setting for a given request, taking into account the explicit setting on that request, and the setting in the session. If a setting is a dictionary, they will be merged together using `dict_class` Nc S s g | ] \}}|d u r|�qS �N� )�.0�k�vr( r( �3/usr/lib/python3/dist-packages/requests/sessions.py� <listcomp>J s z!merge_setting.<locals>.<listcomp>)� isinstancer r �update�items)�request_setting�session_setting� dict_class�merged_setting� none_keys�keyr( r( r, � merge_setting2 s �� r7 c C s@ |du s |� d�g kr | S | du s| � d�g kr|S t| ||�S )z�Properly merges both requests and session hooks. This is necessary because when request_hooks == {'response': []}, the merge breaks Session hooks entirely. N�response)�getr7 )� request_hooks� session_hooksr3 r( r( r, � merge_hooksQ s r< c @ sB e Zd Zdd� Zdd� Z ddd �Zd d � Zd d � Zdd� ZdS )�SessionRedirectMixinc C s, |j r|jd }tr|�d�}t|d�S dS )z7Receives a Response. Returns a redirect URI or ``None``�location�latin1�utf8N)� is_redirect�headersr �encoder )�self�respr> r( r( r, �get_redirect_targetb s z(SessionRedirectMixin.get_redirect_targetc C s� t |�}t |�}|j|jkrdS |jdkr&|jdv r&|jdkr&|jdv r&dS |j|jk}|j|jk}t�|jd�df}|sI|j|v rI|j|v rIdS |pL|S )zFDecide whether Authorization header should be removed when redirectingT�http)�P N�https)i� NFN)r �hostname�scheme�portr r9 )rD �old_url�new_url� old_parsed� new_parsed� changed_port�changed_scheme� default_portr( r( r, �should_strip_authw s z&SessionRedirectMixin.should_strip_authFNTc k s@ � g } | � |�} t|j�j} | �r |�� } | �|� | dd� |_z|j W n tt t fy9 |j j dd� Y nw t |j�| jkrLtd�| j�|d��|�� | �d�rdt|j�}d�t|j�| g�} t| �}|jd krv| rv|j| d �}n|jr||j} |�� } |js�t|jt| ��} nt| �} t| �| _| �| |� |j t j t j fvr�d }|D ] }| j �!|d� q�d| _"| j }|�!d d� t#| j$||j � t%| j$| j&� | �'| j$� | �(| |�}| �)| |� | j*duo�d |v p�d|v }|r�t+| � | }|r�|V n | j,|f|||||dd�| ��}t#| j&| |j � | � |�} |V | sdS dS )zBReceives a Response. Returns a generator of Responses or Requests.r NF)�decode_contentzExceeded {} redirects.)r8 z//�:� )�fragment)�Content-Lengthz Content-Type�Transfer-Encoding�CookierY rZ )�stream�timeout�verify�cert�proxies�allow_redirects)-rF r �urlrX �copy�append�history�contentr r � RuntimeError�raw�read�len� max_redirectsr �format�close� startswith�joinr rK �_replace�geturl�netlocr r �rebuild_method� status_coder$ �temporary_redirect�permanent_redirectrB �pop�bodyr �_cookiesr �cookies�prepare_cookies�rebuild_proxies� rebuild_auth�_body_positionr# �send)rD rE �reqr\ r] r^ r_ r` �yield_requests�adapter_kwargs�histrb �previous_fragment�prepared_request� parsed_rurl�parsed�purged_headers�headerrB � rewindabler( r( r, �resolve_redirects� s� � � ���� �z&SessionRedirectMixin.resolve_redirectsc C sV |j }|j}d|v r| �|jj|�r|d= | jr t|�nd}|dur)|�|� dS dS )z�When being redirected we may want to strip authentication from the request to avoid leaking credentials. This method intelligently removes and reapplies authentication where possible to avoid credential loss. � AuthorizationN)rB rb rT �request� trust_envr � prepare_auth)rD r� r8 rB rb �new_authr( r( r, r} � s �z!SessionRedirectMixin.rebuild_authc C s� |dur|ni }|j }|j}t|�j}|�� }|�d�}t||d�}| jr>|s>t||d�} | �|| �d��} | r>|� || � d|v rE|d= z t || �\} } W n t y\ d\} } Y nw |� d�sm| rm| rmt | | �|d< |S )a� This method re-evaluates the proxy configuration by considering the environment variables. If we are redirected to a URL covered by NO_PROXY, we strip the proxy configuration. Otherwise, we set missing proxy keys for this URL (in case they were stripped by a previous redirect). This method also replaces the Proxy-Authorization header where necessary. :rtype: dict N�no_proxy�r� �allzProxy-Authorization�NNrI )rB rb r rK rc r9 r! r� r � setdefaultr" �KeyErrorrn r ) rD r� r` rB rb rK � new_proxiesr� � bypass_proxy�environ_proxies�proxy�username�passwordr( r( r, r| s, �z$SessionRedirectMixin.rebuild_proxiesc C sX |j }|jtjkr|dkrd}|jtjkr|dkrd}|jtjkr'|dkr'd}||_ dS )z�When being redirected we may want to change the method of the request based on certain specs or browser behavior. �HEAD�GET�POSTN)�methodrt r$ � see_other�found�moved)rD r� r8 r� r( r( r, rs < s z#SessionRedirectMixin.rebuild_method)FNTNNF) �__name__� __module__� __qualname__rF rT r� r} r| rs r( r( r( r, r= ` s �n +r= c @ s� e Zd ZdZg d�Zdd� Zdd� Zdd� Zd d � Z d+d d�Z dd� Z dd� Z dd� Z d,dd�Z d-dd�Zd-dd�Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd S ).�Sessiona� A Requests session. Provides cookie persistence, connection-pooling, and configuration. Basic Usage:: >>> import requests >>> s = requests.Session() >>> s.get('https://httpbin.org/get') <Response [200]> Or as a context manager:: >>> with requests.Session() as s: ... s.get('https://httpbin.org/get') <Response [200]> ) rB rz �authr` �hooks�paramsr^ r_ �adaptersr\ r� rk c C sr t � | _d | _i | _t� | _i | _d| _d| _d | _ t | _ d| _ t i �| _t� | _| �dt� � | �dt� � d S )NFTzhttps://zhttp://)r rB r� r` r r� r� r\ r^ r_ r rk r� r rz r r� �mountr �rD r( r( r, �__init__l s zSession.__init__c C s | S r' r( r� r( r( r, � __enter__� s zSession.__enter__c G s | � � d S r' )rm )rD �argsr( r( r, �__exit__� s zSession.__exit__c C s� |j pi }t|tj�st|�}ttt� | j �|�}|j}| jr)|s)| js)t |j �}t � }|j |j �� |j |j|j|jt|j| jtd�t|j| j�t|| j�|t|j| j�d� |S )a� Constructs a :class:`PreparedRequest <PreparedRequest>` for transmission and returns it. The :class:`PreparedRequest` has settings merged from the :class:`Request <Request>` instance and those of the :class:`Session`. :param request: :class:`Request` instance to prepare with this session's settings. :rtype: requests.PreparedRequest )r3 ) r� rb �files�data�jsonrB r� r� rz r� )rz r. r � CookieJarr r r r� r� r rb r �preparer� �upperr� r� r� r7 rB r r� r< r� )rD r� rz �merged_cookiesr� �pr( r( r, �prepare_request� s. � � zSession.prepare_requestNTc C sx t |�� ||||p i ||pi ||| d� }| �|�}| p i } | �|j| | ||�}| | d�}|�|� | j|fi |��}|S )ax Constructs a :class:`Request <Request>`, prepares it and sends it. Returns :class:`Response <Response>` object. :param method: method for the new :class:`Request` object. :param url: URL for the new :class:`Request` object. :param params: (optional) Dictionary or bytes to be sent in the query string for the :class:`Request`. :param data: (optional) Dictionary, list of tuples, bytes, or file-like object to send in the body of the :class:`Request`. :param json: (optional) json to send in the body of the :class:`Request`. :param headers: (optional) Dictionary of HTTP Headers to send with the :class:`Request`. :param cookies: (optional) Dict or CookieJar object to send with the :class:`Request`. :param files: (optional) Dictionary of ``'filename': file-like-objects`` for multipart encoding upload. :param auth: (optional) Auth tuple or callable to enable Basic/Digest/Custom HTTP Auth. :param timeout: (optional) How long to wait for the server to send data before giving up, as a float, or a :ref:`(connect timeout, read timeout) <timeouts>` tuple. :type timeout: float or tuple :param allow_redirects: (optional) Set to True by default. :type allow_redirects: bool :param proxies: (optional) Dictionary mapping protocol or protocol and hostname to the URL of the proxy. :param stream: (optional) whether to immediately download the response content. Defaults to ``False``. :param verify: (optional) Either a boolean, in which case it controls whether we verify the server's TLS certificate, or a string, in which case it must be a path to a CA bundle to use. Defaults to ``True``. When set to ``False``, requests will accept any TLS certificate presented by the server, and will ignore hostname mismatches and/or expired certificates, which will make your application vulnerable to man-in-the-middle (MitM) attacks. Setting verify to ``False`` may be useful during local development or testing. :param cert: (optional) if String, path to ssl client cert file (.pem). If Tuple, ('cert', 'key') pair. :rtype: requests.Response ) r� rb rB r� r� r� r� r� rz r� )r] ra )r r� r� �merge_environment_settingsrb r/ r )rD r� rb r� r� rB rz r� r� r] ra r` r� r\ r^ r_ r� r� �prep�settings� send_kwargsrE r( r( r, r� � s. .� �� zSession.requestc K � |� dd� | jd|fi |��S )z�Sends a GET request. Returns :class:`Response` object. :param url: URL for the new :class:`Request` object. :param \*\*kwargs: Optional arguments that ``request`` takes. :rtype: requests.Response ra Tr� �r� r� �rD rb �kwargsr( r( r, r9 $ � z Session.getc K r� )z�Sends a OPTIONS request. Returns :class:`Response` object. :param url: URL for the new :class:`Request` object. :param \*\*kwargs: Optional arguments that ``request`` takes. :rtype: requests.Response ra T�OPTIONSr� r� r( r( r, �options/ r� zSession.optionsc K r� )z�Sends a HEAD request. Returns :class:`Response` object. :param url: URL for the new :class:`Request` object. :param \*\*kwargs: Optional arguments that ``request`` takes. :rtype: requests.Response ra Fr� r� r� r( r( r, �head: r� z Session.headc K s | j d|f||d�|��S )a� Sends a POST request. Returns :class:`Response` object. :param url: URL for the new :class:`Request` object. :param data: (optional) Dictionary, list of tuples, bytes, or file-like object to send in the body of the :class:`Request`. :param json: (optional) json to send in the body of the :class:`Request`. :param \*\*kwargs: Optional arguments that ``request`` takes. :rtype: requests.Response r� )r� r� �r� )rD rb r� r� r� r( r( r, �postE s z Session.postc K � | j d|fd|i|��S )au Sends a PUT request. Returns :class:`Response` object. :param url: URL for the new :class:`Request` object. :param data: (optional) Dictionary, list of tuples, bytes, or file-like object to send in the body of the :class:`Request`. :param \*\*kwargs: Optional arguments that ``request`` takes. :rtype: requests.Response �PUTr� r� �rD rb r� r� r( r( r, �putR � z Session.putc K r� )aw Sends a PATCH request. Returns :class:`Response` object. :param url: URL for the new :class:`Request` object. :param data: (optional) Dictionary, list of tuples, bytes, or file-like object to send in the body of the :class:`Request`. :param \*\*kwargs: Optional arguments that ``request`` takes. :rtype: requests.Response �PATCHr� r� r� r( r( r, �patch^ r� z Session.patchc K s | j d|fi |��S )z�Sends a DELETE request. Returns :class:`Response` object. :param url: URL for the new :class:`Request` object. :param \*\*kwargs: Optional arguments that ``request`` takes. :rtype: requests.Response �DELETEr� r� r( r( r, �deletej s zSession.deletec K s| |� d| j� |� d| j� |� d| j� |� d| j� t|t�r%td��|�dd�}|� d�}|j }| j |j d�}t � }|j|fi |��}t � | } t| d �|_td ||fi |��}|jrm|jD ] } t| j| j| j� qat| j||j� |r�| j||fi |��} d d � | D �} ng } | r�| �d |� | �� }| |_|s�zt| j||fddi|���|_W n ty� Y nw |s�|j |S )zISend a given PreparedRequest. :rtype: requests.Response r\ r^ r_ r` z#You can only send PreparedRequests.ra T)rb )�secondsr8 c S s g | ]}|�qS r( r( )r) rE r( r( r, r- � s z Session.send.<locals>.<listcomp>r r� ) r� r\ r^ r_ r` r. r � ValueErrorrw r9 r� � get_adapterrb �preferred_clockr r �elapsedr re r rz r� rh r� �insert�next�_next� StopIterationrf ) rD r� r� ra r\ r� �adapter�start�rr� rE �genre r( r( r, r t sH " �z Session.sendc C s� | j r7|dur |�d�nd}t||d�}|�� D ] \}} |�|| � q|du s+|du r7tj�d�p6tj�d�}t|| j�}t|| j �}t|| j �}t|| j �}||||d�S )z^ Check the environment and merge it with some settings. :rtype: dict Nr� r� T�REQUESTS_CA_BUNDLE�CURL_CA_BUNDLE)r^ r` r\ r_ ) r� r9 r r0 r� �os�environr7 r` r\ r^ r_ ) rD rb r` r\ r^ r_ r� � env_proxiesr* r+ r( r( r, r� � s � �z"Session.merge_environment_settingsc C s< | j �� D ]\}}|�� �|�� �r| S qtd�|���)z~ Returns the appropriate connection adapter for the given URL. :rtype: requests.adapters.BaseAdapter z*No connection adapters were found for {!r})r� r0 �lowerrn r rl )rD rb �prefixr� r( r( r, r� � s �zSession.get_adapterc C s | j �� D ]}|�� qdS )z+Closes all adapters and as such the sessionN)r� �valuesrm )rD r+ r( r( r, rm � s �z Session.closec s> || j � < � fdd�| j D �}|D ] }| j �|�| j |< qdS )zwRegisters a connection adapter to a prefix. Adapters are sorted in descending order by prefix length. c s g | ] }t |�t � �k r|�qS r( )rj )r) r* �r� r( r, r- � s z!Session.mount.<locals>.<listcomp>N)r� rw )rD r� r� � keys_to_mover6 r( r� r, r� � s �z Session.mountc s � fdd�� j D �}|S )Nc s i | ] }|t � |d ��qS r' )�getattr)r) �attrr� r( r, � <dictcomp>� s z(Session.__getstate__.<locals>.<dictcomp>)� __attrs__)rD �stater( r� r, � __getstate__� s zSession.__getstate__c C s" |� � D ] \}}t| ||� qd S r' )r0 �setattr)rD r� r� �valuer( r( r, � __setstate__� s �zSession.__setstate__)NNNNNNNTNNNNNNr� r' )r� r� r� �__doc__r� r� r� r� r� r� r9 r� r� r� r� r� r� r r� r� rm r� r� r� r( r( r( r, r� S s2 >) �L K r� c C s t � S )aZ Returns a :class:`Session` for context-management. .. deprecated:: 1.0.0 This method has been deprecated since version 1.0.0 and is only kept for backwards compatibility. New code should use :class:`~requests.sessions.Session` to create a session. This may be removed at a future date. :rtype: Session )r� r( r( r( r, �session s r� )?r� r� �sys�time�datetimer � collectionsr r� r �compatr r r r r rz r r r r �modelsr r r r� r r �_internal_utilsr �utilsr r r � exceptionsr r r r � structuresr r� r r r r r! r" r# � status_codesr$ r% �platform� perf_counterr� �AttributeError�clockr7 r< �objectr= r� r� r( r( r( r, �<module> sF � t 3
© 2026 UnknownSec