Re,@ @ s d d l m Z m Z m Z d d l Z d d l m Z m Z d d l m Z d d l
m Z Gd d d e Z
Gd d
d
e e
Z d S) )absolute_importdivisionunicode_literalsN)escapeunescape )
HTMLTokenizer)
tokenTypesc @ s? e Z d Z d Z d d d d d d d d d
d d d
d d d d d d d d d d d d d d d d d d d d! d" d# d$ d% d& d' d( d) d* d+ d, d- d. d/ d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 d: d; d< d= d> d? d@ dA dB dC dD dE dF dG dH dI dJ dK dL dM dN dO dP dQ dR dS dT dU dV dW dX dY dZ d[ d\ d] d^ d_ d` da db dc dd gc Z de df dg dh di dj dk dl dm dn do dp dq dr ds dt du dv dw dx dy dz d{ d| d} d~ d g Z d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d g# Z d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d) d d d d d d d d d d d d d d d d d8 d d d d d d d d d d d d d d d d d d d d d d d d d d d d d ddddddddd d
d d d
ddddR dddddddddd ddd d d d d d!d"d#d$d%d&d'g Z d(d d)d)d)d*d+d,d-d.d/d0d1d2d3d4d d d5d6d7d8d9d9d:d;d<d=d=d=d>d?d d@dAdBdCdDd%d%dEdFdGdHdIg- Z dJdKdLdMdNdOdPdQdRdSdTdUdVdWd dXd dYdZd[d\d]d^d_d`d.dad dbdcdddedfdgdhdidjdkdldmdndodpdqdrd dsdtd dudvdwdxdyd dzd{d|d}d~ddd d d dddddddd ddddddddddddddddddddddddddddddddddddddddddddddd%ddddddddEddFddGdd'ddHdIddddg Z d dd d d d dEdg Z
dXdddbdd d|d{dzddg Z dd d d d dddd d d ddd d g Z ddddddddd d ddd.ddd( dedfdhdidjd dddddddddddddddddddddd"dd%g. Z
dddddddddd dddddddddddd d ddd ddddddd d
d d d
ddg' Z dbdcdddddddg Z ddddddddddddd d d d d d d!d"d#d$g Z e e e Z e e e Z e
Z e Z e Z e Z d%d& Z d'd( Z d)d* Z d+d, Z d-S(. HTMLSanitizerMixinzA sanitization of XHTML+MathML+SVG and of inline style attributes.aZabbrZacronymaddressareaarticleasideaudiobbig
blockquotebrbuttonZcanvascaptioncenterZcitecodecolcolgroupcommanddatagridZdatalistdddeldetailsdfndialogdirdivdldtemz event-sourcefieldset
figcaptionfigurefooterfontformheaderh1h2h3h4h5h6hriimginputZinskeygenZkbdlabelZlegendlimmapmenuZmeterZmulticolnavZnextidoloutputoptgroupoptionppreprogressqsZsampsectionselectsmallZsoundsourceZspacerspanstrikestrongsubsuptabletbodytdtextareatimetfootththeadtrttuulvarvideoZmactionmathZmerrorZmfracmiZ
mmultiscriptsmnmoZmoverZmpaddedZmphantomZ mprescriptsZmrootZmrowZmspaceZmsqrtZmstyleZmsubZmsubsupZmsupZmtableZmtdmtextZmtrZmunderZ
munderovernoneZanimate animateColor
animateMotionanimateTransformclipPathZcircleZdefsdescZellipsez font-facezfont-face-namez
font-face-srcgZglyphZhkernlinearGradientlinemarkermetadataz
missing-glyphZmpathpathZpolygonZpolylineradialGradientZrectsetstopsvgswitchtexttitleZtspanZuseacceptzaccept-charsetZ accesskeyactionZalignZalt autocompleteZ autofocusZaxis
backgroundZbalanceZbgcolorZ bgpropertiesborderZ bordercolorZbordercolordarkZbordercolorlightZ
bottompaddingZ cellpaddingZ cellspacingch challengecharZcharoffZchoffcharsetcheckedclassclearcolorcolsZcolspancompactZcontenteditableZcontrolsZcoordsdataZdatafldZ datapagesizeZdatasrcdatetimedefaultdelaydisabledZ draggableZdynsrcZenctypeendfaceforframeZ
galleryimgZgutterheadersheightZ hidefocushiddenhighhrefZhreflangZhspaceZiconidZ inputmodeZismapZkeytypeZ leftspacinglanglistZlongdescZloopZ loopcountZloopendZ loopstartlowZlowsrcmaxZ maxlengthZmediamethodminZmultiplenameZnohrefZnoshadeZnowrapopenZoptimumpatternZpingz
point-sizeZposterZpqgZpreloadpromptZ
radiogroupreadonlyrelz
repeat-maxz
repeat-minreplacerequiredrevZ rightspacingrowsZrowspanrulesZscopeselectedshapesizesrcstartstepstylesummarysuppressZtabindextargettemplateZ
toppaddingtypeZ unselectableZusemapurnZvalignvaluevariablevolumeZvspaceZvrmlwidthwrapzxml:langZ
actiontypeZ columnalignZ columnlinesZ
columnspacingZ
columnspandepthZdisplayZ displaystyleZ equalcolumnsZ equalrowsZfenceZ fontstyleZ
fontweightZ
linethicknessZlspaceZmathbackgroundZ mathcolorZ mathvariantmaxsizeZminsizeotherZrowalignZrowlinesZ
rowspacingZrspaceZ scriptlevelZ selection separatorZstretchyz
xlink:hrefz
xlink:showz
xlink:typexmlnsz xmlns:xlinkz
accent-height
accumulateZadditiveZ
alphabeticz arabic-formZascent
attributeName
attributeType baseProfileZbboxbeginZbycalcModez
cap-heightz clip-pathzcolor-renderingcontentZcxcydZdxZdyZdescentZdurfillz fill-opacityz fill-rulez font-familyz font-sizez font-stretchz
font-stylez font-variantz font-weightfromZfxZfyZg1Zg2z
glyph-name
gradientUnitsZhangingz horiz-adv-xzhoriz-origin-xZ ideographick keyPoints
keySplineskeyTimesz
marker-endz
marker-midz marker-start markerHeight markerUnits markerWidthZ mathematicaloffsetZopacityZorientoriginzoverline-positionzoverline-thicknesszpanose-1
pathLengthZpointspreserveAspectRatiorrefXrefY repeatCount repeatDurrequiredExtensionsrequiredFeaturesZrestartrotaterxZryZslopeZstemhZstemvz
stop-colorz stop-opacityzstrikethrough-positionzstrikethrough-thicknessZstrokezstroke-dasharrayzstroke-dashoffsetzstroke-linecapzstroke-linejoinzstroke-miterlimitzstroke-opacityz stroke-widthsystemLanguagez text-anchorZtoZ transformu1u2zunderline-positionzunderline-thicknessunicodez
unicode-rangez units-per-emvaluesversionviewBoxZ
visibilityZwidthsxzx-heightZx1Zx2z
xlink:actuatez
xlink:arcrolez
xlink:rolez xlink:titlezxml:basez xml:spaceyy1y2
zoomAndPanz
color-profilecursorfiltermaskaltGlyphfeImagetextpathZtrefZazimuthzbackground-colorzborder-bottom-colorzborder-collapsez border-colorzborder-left-colorzborder-right-colorzborder-top-colorZ directionZ elevationfloatzletter-spacingz line-heightZoverflowpausez pause-afterz pause-beforeZpitchz pitch-rangeZrichnessZspeakz speak-headerz
speak-numeralzspeak-punctuationz speech-rateZstressz
text-alignztext-decorationz text-indentz unicode-bidizvertical-alignz voice-familyz white-spaceZautoZaquaZblackblockZblueZboldZbothZbottomZbrownZcollapseZdashedZdottedZfuchsiaZgrayZgreenz
!importantZitalicleftZlimeZmaroonZmediumZnavyZnormalZolivepointerZpurpleZredrightZsolidZsilverZtealtopZ transparentZ underlineZwhiteZyellowZed2kftphttphttpsZircmailtonewsgophernntptelnetZwebcalZxmppZcalltofeedZaimrsynctagsshsftprtspZafsc C s | d } | t t j k r/ t | } n | t d t d t d f k r | d | j k rs | j | | S| j | | Sn | t d k r n | Sd S)Nr StartTagEndTagEmptyTagr Comment)r r keysallowed_elements
allowed_tokendisallowed_token)selftoken
token_type r 9/tmp/pip-ztkk0jow-build/pip/_vendor/html5lib/sanitizer.pysanitize_token s
z!HTMLSanitizerMixin.sanitize_tokenc s d | k rt f d d | d d d d D } x j D] } | | k r^ qF n t j d d t | | j } | j d d } t j d | rF | j d d
j k rF | | =qF qF WxC j
D]8 } | | k r t j d d t | | | | s z4HTMLSanitizerMixin.allowed_token..r u
[` - - \s]+ u �z^[a-z0-9][-+.a-z0-9]*::r zurl\s*\(\s*[^#\s][^)]+?\) r z
xlink:hrefz ^\s*[^#\s].*r c S s" g | ] \ } } | | g q Sr r )r r r r r r r s )dictattr_val_is_urirerO r lowerr matchsplitallowed_protocolssvg_attr_val_allows_refsvg_allow_local_hrefsearch sanitize_cssr items)r r
r attrsattrZ
val_unescapedr )r r r
s4
&z HTMLSanitizerMixin.allowed_tokenc C s | t d k r% d | d | d r r r c S s, g | ]" \ } } d | t | f q S)z %s="%s")r )r r vr r r r s z7HTMLSanitizerMixin.disallowed_token..z<%s%s>z<%s> selfClosingr z/>r
Charactersr )r joingetr r )r r
r r& r r r r s
z#HTMLSanitizerMixin.disallowed_tokenc C sc t j d j d | } t j d | s1 d St j d | sG d Sg } xt j d | D] \ } } | sx q` n | j | j k r | j | d | d q` | j d d
j d k r!x | j D], } | | j k r t j d | r Pq q W| j | d | d q` | j | j
k r` | j | d | d q` q` Wd j | S)Nzurl\s*\(\s*[^\s)]+?\s*\)\s*r z@^([:,;#%.\sa-zA-Z0-9!]|\w-\w|'[\s\w]+'|"[\s\w]+"|\([\d,\s]+\))*$r z ^\s*([-\w]+\s*:[^:;]*(;\s*|$))*$z([-\w]+)\s*:\s*([^:;]*)z: ;-r rz r{ marginpaddingz\^(#[0-9a-f]+|rgb\(\d+%?,\d*%?,?\d*%?\)?|\d{0,2}\.?\d{0,2}(cm|em|ex|in|mm|pc|pt|px|%|,|\))?)$)rz r{ zmarginzpadding) r compilerO r findallr allowed_css_propertiesappendr acceptable_css_keywordsallowed_svg_propertiesr+ )r r cleanpropr keywordr r r r$ s* z HTMLSanitizerMixin.sanitize_cssN)__name__
__module__ __qualname____doc__Zacceptable_elementsZmathml_elementsZ svg_elementsZacceptable_attributesZmathml_attributesZsvg_attributesr r! r" Zacceptable_css_propertiesr5 Zacceptable_svg_propertiesZacceptable_protocolsr r r3 Zallowed_css_keywordsr6 r r r
r r$ r r r r r
s
r
c @ s: e Z d Z d d d d d d d d Z d d Z d S)
HTMLSanitizerNTFc
C s) t j | | | | | | | d | d S)Nparser)r __init__)r streamencoding parseMeta
useChardetlowercaseElementNamelowercaseAttrNamer? r r r r@ s zHTMLSanitizer.__init__c c s; x4 t j | D]# } | j | } | r | Vq q Wd S)N)r __iter__r )r r
r r r rG s zHTMLSanitizer.__iter__)r: r; r< r@ rG r r r r r> s r> )
__future__r r r r xml.sax.saxutilsr r tokenizerr constantsr objectr
r> r r r r s