3
2kSb( @ s d Z ddlZddlZddlmZ ddlmZmZmZm Z m
Z
m Z ddddgZ ej
d Zej
d
ZG d d deZG d d
d
eZeedrG dd dejZdd ZG dd deZyddlmZmZmZ W n( e k
r ddl mZmZmZ Y nX e s
eZ e j d dS )z
markupsafe
~~~~~~~~~~
Implements a Markup string.
:copyright: (c) 2010 by Armin Ronacher.
:license: BSD, see LICENSE for more details.
N)Mapping) text_type string_types int_typesunichr iteritemsPY2Markup soft_unicodeescape
escape_silentz(|<[^>]*>)z &([^;]+);c s2 e Zd ZdZf Zd>ddZdd Z fd d
Zd d Zd
d Z e Z
dd Z dd Z dd Z
ej
je
_dd Zejje_dd Zejje_dd Zejje_dd Zd d Zed d Zd!d" Zxd?D ]Zeee e< qW eed3 rd4d5 Zd6d7 Zeed8rd9d: Z d;d< Z eed=r&ed=Z [[ Z S )@r a Marks a string as being safe for inclusion in HTML/XML output without
needing to be escaped. This implements the `__html__` interface a couple
of frameworks and web applications use. :class:`Markup` is a direct
subclass of `unicode` and provides all the methods of `unicode` just that
it escapes arguments passed and always returns `Markup`.
The `escape` function returns markup objects so that double escaping can't
happen.
The constructor of the :class:`Markup` class can be used for three
different things: When passed an unicode object it's assumed to be safe,
when passed an object with an HTML representation (has an `__html__`
method) that representation is used, otherwise the object passed is
converted into a unicode string and then assumed to be safe:
>>> Markup("Hello World!")
Markup(u'Hello World!')
>>> class Foo(object):
... def __html__(self):
... return 'foo'
...
>>> Markup(Foo())
Markup(u'foo')
If you want object passed being always treated as unsafe you can use the
:meth:`escape` classmethod to create a :class:`Markup` object:
>>> Markup.escape("Hello World!")
Markup(u'Hello <em>World</em>!')
Operations on a markup string are markup aware which means that all
arguments are passed through the :func:`escape` function:
>>> em = Markup("%s")
>>> em % "foo & bar"
Markup(u'foo & bar')
>>> strong = Markup("%(text)s")
>>> strong % {'text': ''}
Markup(u'<blink>hacker here</blink>')
>>> Markup("Hello ") + ""
Markup(u'Hello <foo>')
Nstrictc C s6 t |dr|j }|d kr&tj| |S tj| |||S )N__html__)hasattrr r __new__)clsbaseencodingerrors r /usr/lib64/python3.6/__init__.pyr F s
zMarkup.__new__c C s | S )Nr )selfr r r r M s zMarkup.__html__c s4 t |tst|dr0| jtt| j| j|S tS )Nr )
isinstancer r __class__superr __add__r NotImplemented)r other)r r r r P s zMarkup.__add__c C s( t |dst|tr$| j|j| S tS )Nr )r r r r r r )r r r r r __radd__U s zMarkup.__radd__c C s t |tr | jtj| |S tS )N)r r r r __mul__r )r Znumr r r r Z s
zMarkup.__mul__c s@ t |tr"t fdd|D }n t| j} jtj |S )Nc 3 s | ]}t | jV qd S )N)_MarkupEscapeHelperr ).0x)r r r b s z!Markup.__mod__..)r tupler! r r r __mod__)r argr )r r r& ` s
zMarkup.__mod__c C s d| j jtj| f S )Nz%s(%s))r __name__r __repr__)r r r r r) g s zMarkup.__repr__c C s | j tj| t| j|S )N)r r joinmapr )r seqr r r r* m s z Markup.joinc O s t t| jtj| f||S )N)listr+ r r split)r argskwargsr r r r. q s z Markup.splitc O s t t| jtj| f||S )N)r- r+ r r rsplit)r r/ r0 r r r r1 u s z
Markup.rsplitc O s t t| jtj| f||S )N)r- r+ r r
splitlines)r r/ r0 r r r r2 y s zMarkup.splitlinesc s( ddl m fdd}tj|t| S )zUnescape markup again into an text_type string. This also resolves
known HTML4 and XHTML entities:
>>> Markup("Main » About").unescape()
u'Main \xbb About'
r )
HTML_ENTITIESc s | j d}| kr t | S yH|d d dkrFtt|dd dS |jdrdtt|dd S W n tk
rz Y nX dS ) N #x#X #r
)r6 r7 )groupr int
startswith
ValueError)mname)r3 r r handle_match s
z%Markup.unescape..handle_match)Zmarkupsafe._constantsr3
_entity_resubr )r r@ r )r3 r unescape~ s zMarkup.unescapec C s" dj tjd| j }t|j S )a Unescape markup into an text_type string and strip all tags. This
also resolves known HTML4 and XHTML entities. Whitespace is
normalized to one:
>>> Markup("Main » About").striptags()
u'Main \xbb About'
r
)r*
_striptags_rerB r. r rC )r strippedr r r striptags s zMarkup.striptagsc C s t |}|j| k r| |S |S )zEscape the string. Works like :func:`escape` with the difference
that for subclasses of :class:`Markup` this function would return the
correct subclass.
)r r )r srvr r r r s
z
Markup.escapec s* t t| fdd} j|_ j|_|S )Nc s> t t|t|| j}t |t|| j | j | f||S )N)_escape_argspecr- enumerater r r )r r/ r0 )origr r func s z1Markup.make_simple_escaping_wrapper..func)getattrr r( __doc__)r? rM r )rL r make_simple_escaping_wrapper s
z#Markup.make_simple_escaping_wrapper __getitem__
capitalizetitlelowerupperreplaceljustrjustlstriprstripcenterstrip translate
expandtabsswapcasezfill partitionc C s t t| jtj| | j|S )N)r% r+ r r ra r )r sepr r r ra s zMarkup.partitionc C s t t| jtj| | j|S )N)r% r+ r r
rpartitionr )r rb r r r rc s zMarkup.rpartitionformatc O s> | d | dd }} t |j}t| |}|j|j|| |S )Nr r4 )EscapeFormatterr _MagicFormatMappingr Zvformat)r/ r0 r Z formatterr r r rd s
z
Markup.formatc C s |r t d| S )Nz,Unsupported format specification for Markup.)r= )r format_specr r r __html_format__ s zMarkup.__html_format__ __getslice__)r
Nr )rQ rR rS rT rU rV rW rX rY rZ r[ r\ r] r^ r_ r` ) r(
__module__ __qualname__rO __slots__r r r r r __rmul__r& r) r* r r. r1 r2 rC rG classmethodr rP methodlocalsr ra rc rd rh ri
__classcell__r r )r r r sH *
c @ s0 e Zd ZdZdd Zdd Zdd Zdd Zd
S ) rf zThis class implements a dummy wrapper to fix a bug in the Python
standard library for string formatting.
See http://bugs.python.org/issue13598 for information about why
this is necessary.
c C s || _ || _d| _d S )Nr )_args_kwargs _last_index)r r/ r0 r r r __init__ s z _MagicFormatMapping.__init__c C sN |dkrD| j }| j d7 _ y
| j| S tk
r: Y nX t|}| j| S )Nr
r4 )rt rr LookupErrorstrrs )r keyidxr r r rQ s
z _MagicFormatMapping.__getitem__c C s
t | jS )N)iterrs )r r r r __iter__ s z _MagicFormatMapping.__iter__c C s
t | jS )N)lenrs )r r r r __len__ s z_MagicFormatMapping.__len__N)r( rj rk rO ru rQ r{ r} r r r r rf s
rf rd c @ s e Zd Zdd Zdd ZdS )re c C s
|| _ d S )N)r )r r r r r ru s zEscapeFormatter.__init__c C sT t |dr|j|}n0t |dr6|r,td|j }ntjj| ||}t| j|S )Nrh r zSNo format specification allowed when formatting an object with its __html__ method.) r rh r= r string Formatter format_fieldr r )r valuerg rI r r r r s
z EscapeFormatter.format_fieldN)r( rj rk ru r r r r r re s re c C s6 x0|D ](\}}t |ds"t|tr||| |< qW | S )z,Helper for various string-wrapped functions.r )r r r )objiterabler rx r r r r rJ s rJ c @ sD e Zd ZdZdd Zdd Zdd ZZdd Zdd Z d d Z
d
S ) r! zHelper for Markup.__mod__c C s || _ || _d S )N)r r )r r r r r r ru s z _MarkupEscapeHelper.__init__c C s t | j| | jS )N)r! r r )rH r# r r r s z _MarkupEscapeHelper.c C s t | j| jS )N)r r r )rH r r r r s c C s t | jt| jS )N)rw r reprr )rH r r r r s c C s
t | jS )N)r; r )rH r r r r s c C s
t | jS )N)floatr )rH r r r r s N) r( rj rk rO ru rQ Z __unicode____str__r) __int__ __float__r r r r r! s r! )r r r
soft_str) rO rer~ collectionsr Zmarkupsafe._compatr r r r r r __all__compilerE rA r rf r r re rJ objectr! Zmarkupsafe._speedupsr r r
ImportErrorZmarkupsafe._nativer appendr r r r
s*
@