blob: 1b9cfb3322c9ecee997dc4c8e6b3a3731d3d663d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
import urllib
from zope.interface import implements
from repoze.bfg.interfaces import ITraversalPolicy
from repoze.bfg.interfaces import ITraverser
def split_path(path):
if path.startswith('/'):
path = path[1:]
if path.endswith('/'):
path = path[:-1]
clean=[]
for segment in path.split('/'):
segment = urllib.unquote(segment) # deal with spaces in path segment
if not segment or segment=='.':
continue
elif segment == '..':
del clean[-1]
else:
clean.append(segment)
return clean
class NaiveTraversalPolicy:
implements(ITraversalPolicy)
def __call__(self, environ, root):
path = split_path(environ['PATH_INFO'])
ob = root
name = ''
while path:
segment = pop(path)
traverser = ITraverser(ob)
next = traverser(environ, segment)
if next is None:
if path:
name = pop(path)
break
ob = next
return ob, name, path
def pop(path):
return path.pop(0)
|
