관리-도구
편집 파일: sanitizer.cpython-34.pyc
� �Re,@ � @ s� d d l m Z m Z m Z d d l Z d d l m Z m Z d d l m Z d d l m Z Gd d � d e � Z Gd d � d e e � Z d S) � )�absolute_import�division�unicode_literalsN)�escape�unescape� )� HTMLTokenizer)� tokenTypesc � @ s? e Z d Z d Z d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d! d" d# d$ d% d& d' d( d) d* d+ d, d- d. d/ d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 d: d; d< d= d> d? d@ dA dB dC dD dE dF dG dH dI dJ dK dL dM dN dO dP dQ dR dS dT dU dV dW dX dY dZ d[ d\ d] d^ d_ d` da db dc dd gc Z de df dg dh di dj dk dl dm dn do dp dq dr ds dt du dv dw dx dy dz d{ d| d} d~ d g Z d d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� g# Z d d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d d� d� d� d� d� d� d� d) d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d8 d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d� d ddddddddd d d d d ddddR dddddddddd� ddd d d d d d!d"d#d$d%d&d'g� Z d(d� d)d)d)d*d+d,d-d.d/d0d1d2d3d4d� d� d5d6d7d8d9d9d:d;d<d=d=d=d>d?d d@dAdBdCdDd%d%dEdFdGdHdIg- Z dJdKdLdMdNdOdPdQdRdSdTdUdVdWd� dXd� dYdZd[d\d]d^d_d`d.dad� dbdcdddedfdgdhdidjdkdldmdndodpdqdrd� dsdtd� dudvdwdxdyd� dzd{d|d}d~dd�d� d� d� d�d�d�d�d�d�d�d� d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�dd�d�d�dd�d�d�d�d�d�d�d�d�d�d�d%d�d�d�d�d�d�d�dEd�dFd�dGd�d'd�dHdId�d�d�d�g� Z d� dd d� d� d� dEd�g Z dXd�d�dbd�d� d|d{dzd�d�g Z d�d� d� d� d� d�d�d�d� d� d� d�d�d� d� g Z d�d�d�d�d�d�d�d�d� d� d�d�d.d�d�d( dedfdhdidjd� d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d"d�d%g. Z d�d�d�d�d�d�d�d�d�d d�d�d�d�d�d�d�d�d�d�d�d d ddd� ddddddd d d d d ddg' Z dbdcddd�d�d�d�d�g Z ddddddddddddd d d d d d d!d"d#d$g Z e e e Z e e e Z e Z e Z e Z e Z d%d&� Z d'd(� Z d)d*� Z d+d,� Z d-S(. �HTMLSanitizerMixinzA sanitization of XHTML+MathML+SVG and of inline style attributes.�aZabbrZacronym�address�area�article�aside�audio�b�big� blockquote�br�buttonZcanvas�caption�centerZcite�code�col�colgroup�command�datagridZdatalist�dd�del�details�dfn�dialog�dir�div�dl�dt�emz event-source�fieldset� figcaption�figure�footer�font�form�header�h1�h2�h3�h4�h5�h6�hr�i�img�inputZins�keygenZkbd�labelZlegend�li�m�map�menuZmeterZmulticol�navZnextid�ol�output�optgroup�option�p�pre�progress�q�sZsamp�section�select�smallZsound�sourceZspacer�span�strike�strong�sub�sup�table�tbody�td�textarea�time�tfoot�th�thead�tr�tt�u�ul�var�videoZmaction�mathZmerrorZmfrac�miZ mmultiscripts�mn�moZmoverZmpaddedZmphantomZ mprescriptsZmrootZmrowZmspaceZmsqrtZmstyleZmsubZmsubsupZmsupZmtableZmtd�mtextZmtrZmunderZ munderover�noneZanimate� animateColor� animateMotion�animateTransform�clipPathZcircleZdefs�descZellipsez font-facezfont-face-namez font-face-src�gZglyphZhkern�linearGradient�line�marker�metadataz missing-glyphZmpath�pathZpolygonZpolyline�radialGradientZrect�set�stop�svg�switch�text�titleZtspanZuse�acceptzaccept-charsetZ accesskey�actionZalignZalt� autocompleteZ autofocusZaxis� backgroundZbalanceZbgcolorZ bgproperties�borderZ bordercolorZbordercolordarkZbordercolorlightZ bottompaddingZ cellpaddingZ cellspacing�ch� challenge�charZcharoffZchoff�charset�checked�class�clear�color�colsZcolspan�compactZcontenteditableZcontrolsZcoords�dataZdatafldZ datapagesizeZdatasrc�datetime�default�delay�disabledZ draggableZdynsrcZenctype�end�face�for�frameZ galleryimgZgutter�headers�heightZ hidefocus�hidden�high�hrefZhreflangZhspaceZicon�idZ inputmodeZismapZkeytypeZ leftspacing�lang�listZlongdescZloopZ loopcountZloopendZ loopstart�lowZlowsrc�maxZ maxlengthZmedia�method�minZmultiple�nameZnohrefZnoshadeZnowrap�openZoptimum�patternZpingz point-sizeZposterZpqgZpreload�promptZ radiogroup�readonly�relz repeat-maxz repeat-min�replace�required�revZ rightspacing�rowsZrowspan�rulesZscope�selected�shape�size�src�start�step�style�summary�suppressZtabindex�target�templateZ toppadding�typeZ unselectableZusemap�urnZvalign�value�variable�volumeZvspaceZvrml�width�wrapzxml:langZ actiontypeZ columnalignZ columnlinesZ columnspacingZ columnspan�depthZdisplayZ displaystyleZ equalcolumnsZ equalrowsZfenceZ fontstyleZ fontweightZ linethicknessZlspaceZmathbackgroundZ mathcolorZ mathvariant�maxsizeZminsize�otherZrowalignZrowlinesZ rowspacingZrspaceZ scriptlevelZ selection� separatorZstretchyz xlink:hrefz xlink:showz xlink:type�xmlnsz xmlns:xlinkz accent-height� accumulateZadditiveZ alphabeticz arabic-formZascent� attributeName� attributeType� baseProfileZbbox�beginZby�calcModez cap-heightz clip-pathzcolor-rendering�contentZcx�cy�dZdxZdyZdescentZdur�fillz fill-opacityz fill-rulez font-familyz font-sizez font-stretchz font-stylez font-variantz font-weight�fromZfxZfyZg1Zg2z glyph-name� gradientUnitsZhangingz horiz-adv-xzhoriz-origin-xZ ideographic�k� keyPoints� keySplines�keyTimesz marker-endz marker-midz marker-start� markerHeight� markerUnits� markerWidthZ mathematical�offsetZopacityZorient�originzoverline-positionzoverline-thicknesszpanose-1� pathLengthZpoints�preserveAspectRatio�r�refX�refY� repeatCount� repeatDur�requiredExtensions�requiredFeaturesZrestart�rotate�rxZryZslopeZstemhZstemvz stop-colorz stop-opacityzstrikethrough-positionzstrikethrough-thicknessZstrokezstroke-dasharrayzstroke-dashoffsetzstroke-linecapzstroke-linejoinzstroke-miterlimitzstroke-opacityz stroke-width�systemLanguagez text-anchorZtoZ transform�u1�u2zunderline-positionzunderline-thickness�unicodez unicode-rangez units-per-em�values�version�viewBoxZ visibilityZwidths�xzx-heightZx1Zx2z xlink:actuatez xlink:arcrolez xlink:rolez xlink:titlezxml:basez xml:space�y�y1�y2� zoomAndPanz color-profile�cursor�filter�mask�altGlyph�feImage�textpathZtrefZazimuthzbackground-colorzborder-bottom-colorzborder-collapsez border-colorzborder-left-colorzborder-right-colorzborder-top-colorZ directionZ elevation�floatzletter-spacingz line-heightZoverflow�pausez pause-afterz pause-beforeZpitchz pitch-rangeZrichnessZspeakz speak-headerz speak-numeralzspeak-punctuationz speech-rateZstressz text-alignztext-decorationz text-indentz unicode-bidizvertical-alignz voice-familyz white-spaceZautoZaquaZblack�blockZblueZboldZbothZbottomZbrownZcollapseZdashedZdottedZfuchsiaZgrayZgreenz !importantZitalic�leftZlimeZmaroonZmediumZnavyZnormalZolive�pointerZpurpleZred�rightZsolidZsilverZteal�topZ transparentZ underlineZwhiteZyellowZed2k�ftp�http�httpsZirc�mailto�news�gopher�nntp�telnetZwebcalZxmppZcallto�feedZaim�rsync�tag�ssh�sftp�rtspZafsc C s� | d } | t t j � � k r/ t | } n | t d t d t d f k r� | d | j k rs | j | | � S| j | | � Sn | t d k r� n | Sd S)Nr� �StartTag�EndTag�EmptyTagr� �Comment)r� r �keys�allowed_elements� allowed_token�disallowed_token)�self�token� token_type� r �9/tmp/pip-ztkk0jow-build/pip/_vendor/html5lib/sanitizer.py�sanitize_token� s z!HTMLSanitizerMixin.sanitize_tokenc s� d | k r�t � f d d � | d d d d � D� � } x� � j D]� } | | k r^ qF n t j d d t | | � � j � } | j d d � } t j d | � rF | j d � d � j k rF | | =qF qF WxC � j D]8 } | | k r� t j d d t | | � � | | <q� q� W| d � j k rVd | k rVt j d | d � rV| d =n d | k r|� j | d � | d <n d d � t | j � � D� | d <n | S)Nr� c s1 g | ]' \ } } | � j k r | | f � q Sr )�allowed_attributes)�.0r� �val)r r r � <listcomp>� s z4HTMLSanitizerMixin.allowed_token.<locals>.<listcomp>r u [` - - \s]+� u �z^[a-z0-9][-+.a-z0-9]*:�:r zurl\s*\(\s*[^#\s][^)]+?\)� r� z xlink:hrefz ^\s*[^#\s].*r� c S s" g | ] \ } } | | g � q Sr r )r r� r r r r r � s ���)�dict�attr_val_is_uri�rerO r �lowerr� �match�split�allowed_protocols�svg_attr_val_allows_ref�svg_allow_local_href�search� sanitize_cssr� �items)r r r �attrs�attrZ val_unescapedr )r r r � s4 &z HTMLSanitizerMixin.allowed_tokenc C s� | t d k r% d | d | d <nW | d rj d j d d � | d D� � } d | d | f | d <n d | d | d <| j d � r� | d d d � d | d <n | d t t j � � k r� d | d <n t d | d <| d =| S)Nr z</%s>r� r� r c S s, g | ]" \ } } d | t | � f � q S)z %s="%s")r )r r� �vr r r r � s z7HTMLSanitizerMixin.disallowed_token.<locals>.<listcomp>z<%s%s>z<%s>� selfClosingr z/>r� � Charactersr )r �join�getr� r )r r r r& r r r r � s z#HTMLSanitizerMixin.disallowed_tokenc C sc t j d � j d | � } t j d | � s1 d St j d | � sG d Sg } xt j d | � D]� \ } } | sx q` n | j � | j k r� | j | d | d � q` | j d � d j � d k r!x� | j � D], } | | j k r� t j d | � r� Pq� q� W| j | d | d � q` | j � | j k r` | j | d | d � q` q` Wd j | � S)Nzurl\s*\(\s*[^\s)]+?\s*\)\s*r z@^([:,;#%.\sa-zA-Z0-9!]|\w-\w|'[\s\w]+'|"[\s\w]+"|\([\d,\s]+\))*$r z ^\s*([-\w]+\s*:[^:;]*(;\s*|$))*$z([-\w]+)\s*:\s*([^:;]*)z: �;�-r rz r{ �margin�paddingz\^(#[0-9a-f]+|rgb\(\d+%?,\d*%?,?\d*%?\)?|\d{0,2}\.?\d{0,2}(cm|em|ex|in|mm|pc|pt|px|%|,|\))?)$)rz r{ zmarginzpadding) r �compilerO r �findallr �allowed_css_properties�appendr �acceptable_css_keywords�allowed_svg_propertiesr+ )r r� �clean�propr� �keywordr r r r$ � s* z HTMLSanitizerMixin.sanitize_cssN)�__name__� __module__� __qualname__�__doc__Zacceptable_elementsZmathml_elementsZ svg_elementsZacceptable_attributesZmathml_attributesZsvg_attributesr r! r" Zacceptable_css_propertiesr5 Zacceptable_svg_propertiesZacceptable_protocolsr r r3 Zallowed_css_keywordsr6 r r r r r$ r r r r r s r c @ s: e Z d Z d d d d d d d d � Z d d � Z d S)� HTMLSanitizerNTFc C s) t j | | | | | | | d | �d S)N�parser)r �__init__)r �stream�encoding� parseMeta� useChardet�lowercaseElementName�lowercaseAttrNamer? r r r r@ s zHTMLSanitizer.__init__c c s; x4 t j | � D]# } | j | � } | r | Vq q Wd S)N)r �__iter__r )r r r r r rG s zHTMLSanitizer.__iter__)r: r; r< r@ rG r r r r r> s r> )� __future__r r r r �xml.sax.saxutilsr r � tokenizerr � constantsr �objectr r> r r r r �<module> s �