OwlCyberSecurity - MANAGER
Edit File: security.cpython-39.pyc
a ���e' � @ s@ d dl Z d dlmZ d dlmZ d dlmZ G dd� de�ZdS )� N)�settings)� HttpResponsePermanentRedirect)�MiddlewareMixinc s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )�SecurityMiddlewarec sb t � �|� tj| _tj| _tj| _tj | _ tj | _ tj | _dd� tjD �| _tj| _tj| _d S )Nc S s g | ]}t �|��qS � )�re�compile)�.0�rr r �[/home/gouroczh/virtualenv/pat/3.9/lib/python3.9/site-packages/django/middleware/security.py� <listcomp> � z/SecurityMiddleware.__init__.<locals>.<listcomp>)�super�__init__r ZSECURE_HSTS_SECONDS� sts_secondsZ SECURE_HSTS_INCLUDE_SUBDOMAINS�sts_include_subdomainsZSECURE_HSTS_PRELOAD� sts_preloadZSECURE_CONTENT_TYPE_NOSNIFF�content_type_nosniffZSECURE_SSL_REDIRECT�redirectZSECURE_SSL_HOST� redirect_hostZSECURE_REDIRECT_EXEMPT�redirect_exemptZSECURE_REFERRER_POLICY�referrer_policyZ!SECURE_CROSS_ORIGIN_OPENER_POLICY�cross_origin_opener_policy)�selfZ get_response�� __class__r r r s zSecurityMiddleware.__init__c sX |j �d�� | jrT|�� sTt� fdd�| jD ��sT| jp>|�� }td||� � f �S d S )N�/c 3 s | ]}|� � �V qd S )N)�search)r �pattern��pathr r � <genexpr> r z5SecurityMiddleware.process_request.<locals>.<genexpr>z https://%s%s) r �lstripr � is_secure�anyr r �get_hostr Z get_full_path)r �request�hostr r r �process_request s ����z"SecurityMiddleware.process_requestc C s� | j rF|�� rFd|vrFd| j }| jr.|d7 }| jr<|d7 }||jd< | jrZ|j�dd� | jr�|j�dd�t | jt �r�d d � | j� d�D �n| j�� | j r�|�d | j � |S ) NzStrict-Transport-Securityz max-age=%sz; includeSubDomainsz ; preloadzX-Content-Type-OptionsZnosniffzReferrer-Policy�,c S s g | ] }|� � �qS r )�strip)r �vr r r r 7 r z7SecurityMiddleware.process_response.<locals>.<listcomp>zCross-Origin-Opener-Policy) r r# r r �headersr � setdefaultr �join� isinstance�str�splitr )r r& �responseZ sts_headerr r r �process_response! s: ��� ��� �z#SecurityMiddleware.process_response)�__name__� __module__� __qualname__r r( r3 � __classcell__r r r r r s r )r Z django.confr Z django.httpr Zdjango.utils.deprecationr r r r r r �<module> s