+ DfjÙãó²€Rt^RIt]!]!^^€44]!]!]P R44, t]!]!^€R44t!RR4t!RR4t R#)zF Helpers for URI and method injection tests. @see: U{CVE-2019-12387} NÚasciiécó<a€]tRt^toRtRtRtRtRtRt Vt R#)ÚMethodInjectionTestsMixina A mixin that runs HTTP method injection tests. Define L{MethodInjectionTestsMixin.attemptRequestWithMaliciousMethod} in a L{twisted.trial.unittest.SynchronousTestCase} subclass to test how HTTP client code behaves when presented with malicious HTTP methods. @see: U{CVE-2019-12387} c ó€\4h)zÇ Attempt to send a request with the given method. This should synchronously raise a L{ValueError} if either is invalid. @param method: the method (e.g. C{GET}) @param uri: the URI @type method: ©ÚNotImplementedError©ÚselfÚmethods&&ÚC/usr/lib/python3/dist-packages/twisted/web/test/injectionhelpers.pyÚ!attemptRequestWithMaliciousMethodÚ;MethodInjectionTestsMixin.attemptRequestWithMaliciousMethods €ô"Ó#Ð#óc óè€VP\4;_uu_4pRpVPV4RRR4VP\ XP 4R4R# +'giL7;i)zk Issuing a request with a method that contains a carriage return and line feed fails with a L{ValueError}. sGET X-Injected-Header: valueNú^Invalid method)Ú assertRaisesÚ ValueErrorr Ú assertRegexÚstrÚ exception)r Úcmr s& r Útest_methodWithCLRFRejectedÚ5MethodInjectionTestsMixin.test_methodWithCLRFRejected(sT€ð × Ñ œz× *Ô *¨bØ7ˆFØ × 2Ñ 2°6Ô :÷+ð ×Ñœ˜RŸ\™\Ó*Ð,=Ö>÷+× *úó žA!Á! A1 c ó&€\FspR\V.43,pVP\4;_uu_4pVP V4RRR4VP \ XP4R4Ku R# +'giL;;i)zh Issuing a request with a method that contains unprintable ASCII characters fails with a L{ValueError}. óGET%sNr)ÚUNPRINTABLE_ASCIIÚ bytearrayrrr rrr©r Úcr rs& r Ú'test_methodWithUnprintableASCIIRejectedÚAMethodInjectionTestsMixin.test_methodWithUnprintableASCIIRejected2sh€÷ #ˆAؤ¨A¨3£Ð 1Õ1ˆFØ×"Ñ"¤:×.Ô.°"Ø×6Ñ6°vÔ>÷/à × Ñ œS §¡Ó.Ð0AÖ Bó #ç.×.úó »B B c ó&€\FspR\V.43,pVP\4;_uu_4pVP V4RRR4VP \ XP4R4Ku R# +'giL;;i)z` Issuing a request with a method that contains non-ASCII characters fails with a L{ValueError}. rNr)ÚNONASCIIrrrr rrrrs& r Útest_methodWithNonASCIIRejectedÚ9MethodInjectionTestsMixin.test_methodWithNonASCIIRejected=sh€÷ ˆAؤ¨A¨3£Ð 1Õ1ˆFØ×"Ñ"¤:×.Ô.°"Ø×6Ñ6°vÔ>÷/à × Ñ œS §¡Ó.Ð0AÖ Bó ç.×.úr#©N) Ú__name__Ú __module__Ú __qualname__Ú__firstlineno__Ú__doc__r rr!r&Ú__static_attributes__Ú__classdictcell__©Ú __classdict__s@r rrs&ø‡€ñò $ò?ò C÷ Cð CrrcóNa€]tRt^ItoRtRtRtRtRtRt Rt Rt R t Vt R #) ÚURIInjectionTestsMixinzû A mixin that runs HTTP URI injection tests. Define L{MethodInjectionTestsMixin.attemptRequestWithMaliciousURI} in a L{twisted.trial.unittest.SynchronousTestCase} subclass to test how HTTP client code behaves when presented with malicious HTTP URIs. c ó€\4h)z› Attempt to send a request with the given URI. This should synchronously raise a L{ValueError} if either is invalid. @param uri: the URI. @type method: rr s&&r ÚattemptRequestWithMaliciousURIÚ5URIInjectionTestsMixin.attemptRequestWithMaliciousURIRs €ô"Ó#Ð#rc óè€VP\4;_uu_4pRpVPV4RRR4VP\ XP 4R4R# +'giL7;i)zn Issuing a request with a URI whose host contains a carriage return and line feed fails with a L{ValueError}. shttp://twisted .invalid/pathNú ^Invalid URI©rrr5rrr©r rÚuris& r Útest_hostWithCRLFRejectedÚ0URIInjectionTestsMixin.test_hostWithCRLFRejected]óS€ð × Ñ œz× *Ô *¨bØ4ˆCØ × /Ñ /°Ô 4÷+ð ×Ñœ˜RŸ\™\Ó*¨NÖ;÷+× *úrc ó&€\FspR\V.43,pVP\4;_uu_4pVP V4RRR4VP \ XP4R4Ku R# +'giL;;i)zk Issuing a request with a URI whose host contains unprintable ASCII characters fails with a L{ValueError}. óhttp://twisted%s.invalid/OKNr8©rrrrr5rrr©r r r;rs& r Ú)test_hostWithWithUnprintableASCIIRejectedÚ@URIInjectionTestsMixin.test_hostWithWithUnprintableASCIIRejectedgóg€÷ #ˆAØ0´I¸q¸c³NÐ3DÕDˆCØ×"Ñ"¤:×.Ô.°"Ø×3Ñ3°CÔ8÷/à × Ñ œS §¡Ó.°Ö ?ó #ç.×.úr#c ó&€\FspR\V.43,pVP\4;_uu_4pVP V4RRR4VP \ XP4R4Ku R# +'giL;;i)zc Issuing a request with a URI whose host contains non-ASCII characters fails with a L{ValueError}. r@Nr8©r%rrrr5rrrrBs& r Útest_hostWithNonASCIIRejectedÚ4URIInjectionTestsMixin.test_hostWithNonASCIIRejectedróg€÷ ˆAØ0´I¸q¸c³NÐ3DÕDˆCØ×"Ñ"¤:×.Ô.°"Ø×3Ñ3°CÔ8÷/à × Ñ œS §¡Ó.°Ö ?ó ç.×.úr#c óè€VP\4;_uu_4pRpVPV4RRR4VP\ XP 4R4R# +'giL7;i)zn Issuing a request with a URI whose path contains a carriage return and line feed fails with a L{ValueError}. shttp://twisted.invalid/ pathNr8r9r:s& r Útest_pathWithCRLFRejectedÚ0URIInjectionTestsMixin.test_pathWithCRLFRejected}r>rc ó&€\FspR\V.43,pVP\4;_uu_4pVP V4RRR4VP \ XP4R4Ku R# +'giL;;i)zk Issuing a request with a URI whose path contains unprintable ASCII characters fails with a L{ValueError}. óhttp://twisted.invalid/OK%sNr8rArBs& r Ú)test_pathWithWithUnprintableASCIIRejectedÚ@URIInjectionTestsMixin.test_pathWithWithUnprintableASCIIRejected‡rEr#c ó&€\FspR\V.43,pVP\4;_uu_4pVP V4RRR4VP \ XP4R4Ku R# +'giL;;i)zc Issuing a request with a URI whose path contains non-ASCII characters fails with a L{ValueError}. rONr8rGrBs& r Útest_pathWithNonASCIIRejectedÚ4URIInjectionTestsMixin.test_pathWithNonASCIIRejected’rJr#r(N)r)r*r+r,r-r5r<rCrHrLrPrSr.r/r0s@r r3r3Is7ø‡€ñò $ò<ò @ò @ò<ò @÷ @ð @rr3) r-ÚstringÚ frozensetÚrangerÚ printablerr%rr3r(rr ÚrYsiðñó á™e A s›mÓ,©yÙ ˆf×Ñ Ó(ó0õÐñ ‘U˜3 “_Ó %€÷6Cñ6C÷rR@óR@r