Current File : //lib/mailman/Mailman/CSRFcheck.pyc
�
��ac @ s� d Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m
Z
m Z i e j d 6e j
d 6e j d 6e j d 6e j d
6Z d d � Z d d � Z d S(
s$ Cross-Site Request Forgery checker i����N( t mm_cfg( t syslog( t UnobscureEmailt sha_newt usert postert moderatort admint sitec
C s� | r t t j | � � } n x4 | D]( } | j | | � \ } } | r% Pq% q% Wd St t j � � } t | |
� j � } d | | f } t j
t j | | f � � } | S( s5 create token by mailman cookie generation algorithm s %s:%sN(
R t urllibt unquotet AuthContextInfot Nonet intt timeR t hexdigestt binasciit hexlifyt marshalt dumps(
t mlistt contextsR t contextt keyt secrett issuedt mact keymact token( ( s_ /builddir/build/BUILDROOT/mailman-2.1.15-30.el7_9.2.x86_64/usr/lib/mailman/Mailman/CSRFcheck.pyt
csrf_token' s
c
C s
y�t j t j | � � \ } } | j d d � \ } } | j d d � \ } } | | j � k si t � d | k r� | j d d � \ } } n d
} | d k r� | d k r t d d | r� | d | n | � t SnC | d k r | d k r t d d
| r| d | n | � t Sn | rct
t j | � � } | rc| | k rct d d t
| � t Sn t j | � }
| j |
| � \ } } | s�t � t | |
� j � } | | k r�d t j � | k o�t j k n r�t St SWn t t t f k
rt SXd
S( s4 check token by mailman cookie validation algorithm t :i t +R R t mischiefs3 admin form submitted with CSRF token issued for %s.t admindbR s5 admindb form submitted with CSRF token issued for %s.s9 Form for user %s submitted with CSRF token issued for %s.i N( R s site( R R s site( R t loadsR t unhexlifyt splitt
internal_namet AssertionErrorR R t FalseR R R
t options_usert keydictt getR R R R R t
FORM_LIFETIMEt Truet
ValueErrort TypeError(
R R t cgi_userR R R t received_mact klistR t raw_userR R R ( ( s_ /builddir/build/BUILDROOT/mailman-2.1.15-30.el7_9.2.x86_64/usr/lib/mailman/Mailman/CSRFcheck.pyt
csrf_check: sJ
)( t __doc__R R R R t MailmanR t Mailman.Logging.SyslogR t
Mailman.UtilsR R t AuthUsert AuthListPostert AuthListModeratort
AuthListAdmint
AuthSiteAdminR) R R R3 ( ( ( s_ /builddir/build/BUILDROOT/mailman-2.1.15-30.el7_9.2.x86_64/usr/lib/mailman/Mailman/CSRFcheck.pyt <module> s
Mini Shell