B ݡXp@sdZddlmZmZddlZddlmZddlm Z m Z m Z ej ddkZ dZejZGd d d ejZGd d d ejZeZejZdddZdddZdddZeZddZdS)z`Example code for lxml.etree protection The code has NO protection against decompression bombs. )print_functionabsolute_importN)etree) DTDForbiddenEntitiesForbiddenNotSupportedErrorz lxml.etreecseZdZdZdZejZddZfddZ dfd d Z dfd d Z dfd d Z dfdd Z fddZdfdd ZZS)RestrictedElementzJA restricted Element class that filters out instances of some classes ccs*|j}x|D]}t||rq |Vq WdS)N) blacklist isinstance)selfiteratorr Zchildr r .lib/python3.7/site-packages/defusedxml/lxml.py_filters   zRestrictedElement._filtercstt|}||S)N)superr __iter__r)rr) __class__r rr&szRestrictedElement.__iter__NFcstt|j||d}||S)N)tagreversed)rr iterchildrenr)rrrr)rr rr*s  zRestrictedElement.iterchildrencs tt|j|d|i}||S)Nr)rr iterr)rrtagsr)rr rr/szRestrictedElement.itercs tt|j|d|i}||S)Nr)rr iterdescendantsr)rrrr)rr rr3sz!RestrictedElement.iterdescendantscstt|j||d}||S)N)r preceding)rr itersiblingsr)rrrr)rr rr8s  zRestrictedElement.itersiblingscstt|}t||S)N)rr rlistr)rr)rr r getchildren=szRestrictedElement.getchildrencstt||}||S)N)rr getiteratorr)rrr)rr rrAszRestrictedElement.getiterator)NF)N)N)NF)N)__name__ __module__ __qualname____doc__ __slots___etreeZ_Entityr rrrrrrrr __classcell__r r )rrr s  r c@s4eZdZdZddiZeZddZddZdd Z d S) GlobalParserTLSz5Thread local context for custom parser instances Zresolve_entitiesFcCs8tjf|j}|j}|jdk r4tj|d}|||S)N)element)r%Z XMLParser parser_config element_classZElementDefaultClassLookupZset_element_class_lookup)rparserr*lookupr r rcreateDefaultParserQs    z#GlobalParserTLS.createDefaultParsercCs ||_dS)N)_default_parser)rr+r r rsetDefaultParserYsz GlobalParserTLS.setDefaultParsercCs*t|dd}|dkr&|}|||S)Nr.)getattrr-r/)rr+r r rgetDefaultParser\s   z GlobalParserTLS.getDefaultParserN) r r!r"r#r)r r*r-r/r1r r r rr'Fs r'FTc Cs|j}|jr2|r"t|j|j|j|r2ts2td|r~xF|j|jfD]6}|dkrRqDx&| D]}t |j |j ddddq\WqDWdS)zCheck docinfo of an element tree for DTD and entity declarations The check for entity declarations needs lxml 3 or newer. lxml 2.x does not support dtd.iterentities(). z3Unable to check for entity declarations in lxml 2.xN) docinfoZdoctyperZ system_urlZ public_idLXML3rZ internalDTDZ externalDTDZ iterentitiesrnameZcontent) elementtree forbid_dtdforbid_entitiesr2ZdtdZentityr r r check_docinfohs r8cCs.|dkrt}tj|||d}t||||S)N)base_url)r1r%parser8)sourcer+r9r6r7r5r r rr:s  r:cCs6|dkrt}tj|||d}|}t||||S)N)r9)r1r% fromstringZ getroottreer8)textr+r9r6r7Z rootelementr5r r rr<s  r<cOs tddS)Nz*defused lxml.etree.iterparse not available)r)argskwargsr r r iterparsesr@)FT)NNFT)NNFT)r#Z __future__rrZ threadingZlxmlrr%commonrrrZ LXML_VERSIONr3Z __origin__ZtostringZ ElementBaser Zlocalr'Z _parser_tlsr1r8r:r<ZXMLr@r r r r s$ .