+ SR#)*z Cross Site Request Forgery Middleware. This module provides a middleware that implements protection against request forgeries from other sites. N) defaultdicturlsplit)settings)DisallowedHostImproperlyConfigured) HttpHeadersUnreadablePostError) get_callable)patch_vary_headers)constant_time_compareget_random_string)MiddlewareMixin)cached_propertyis_same_domain) log_response)_lazy_re_compilezdjango.security.csrfz [^a-zA-Z0-9]z?Origin checking failed - %s does not match any trusted origins.z%Referer checking failed - no Referer.z@Referer checking failed - %s does not match any trusted origins.zCSRF cookie not set.zCSRF token missing.z/Referer checking failed - Referer is malformed.zCReferer checking failed - Referer is insecure while host is secure.zhas incorrect lengthzhas invalid characters _csrftokenc4\\P4#)z/Return the view to be used for CSRF rejections.)r rCSRF_FAILURE_VIEWV/var/www/html/data_capital/venv/lib/python3.14/site-packages/django/middleware/csrf.py_get_failure_viewr2s 22 33rc,\\\R7#)) allowed_chars)r CSRF_SECRET_LENGTHCSRF_ALLOWED_CHARSrrr_get_new_csrf_stringr7s /?Q RRrca\4p\o\V3RlV4V3RlV44pRPV3RlV44pW,#)z Given a secret (assumed to be a string of CSRF_ALLOWED_CHARS), generate a token by adding a mask and applying it to the secret. c3F<"TFpSPV4xK R#5iNindex.0xcharss& r &_mask_cipher_secret..Bs0AQ!c3F<"TFpSPV4xK R#5ir"r#r%s& rr)r*Bs2P4a5;;q>>4r+c3f<"TF&wrSW,\S4,,xK( R#5ir")lenr&r'yr(s& rr)r*Cs&CUTQUAESZ/00Us.1)rrzipjoin)secretmaskpairscipherr(s& @r_mask_cipher_secretr8;sF !D E 002P42P QE WWCUC CF =rcaVR\pV\Rp\o\V3RlV4V3RlV44pRPV3RlV44#)z Given a token (assumed to be a string of CSRF_ALLOWED_CHARS, of length CSRF_TOKEN_LENGTH, and that its first half is a mask), use it to decrypt the second half to produce the original secret. Nc3F<"TFpSPV4xK R#5ir"r#r%s& rr)'_unmask_cipher_token..Ps/AQr+c3F<"TFpSPV4xK R#5ir"r#r%s& rr)r;Ps1O$Q%++a..$r+r-c3F<"TFwrSW, ,xK R#5ir"rr0s& rr)r;Qs2EDA5<s&r_check_token_formatrgsE  5z+-?@@ !899$$U++ !:;;,rc\V4\8Xd \V4p\V4\8XgQh\ W4#)ag Return whether the given CSRF token matches the given CSRF secret, after unmasking the token if necessary. This function assumes that the request_csrf_token argument has been validated to have the correct length (CSRF_SECRET_LENGTH or CSRF_TOKEN_LENGTH characters) and allowed characters, and that if it has length CSRF_TOKEN_LENGTH, it is a masked secret. )r/rbr?rr )request_csrf_tokenrGs&&r_does_token_matchrjs@ "3312DE ! "&8 88 8 !3 AArc&a]tRt^toRtRtVtR#) RejectRequestcWnR#r"rPrRs&&rrTRejectRequest.__init__rVrrPNrWr^s@rrlrlr`rrlca]tRt^toRt]R4t]R4t]R4tRt Rt Rt Rt R t R tR tR tR tRtRtRtVtR#)CsrfViewMiddlewarez Require a present and correct csrfmiddlewaretoken for POST requests that have a CSRF cookie, and set an outgoing CSRF cookie. This middleware should be used in conjunction with the {% csrf_token %} template tag. c\PUu.uF'p\V4PP R4NK) up#uupi*)rCSRF_TRUSTED_ORIGINSrnetloclstriprSorigins& rcsrf_trusted_origins_hosts-CsrfViewMiddleware.csrf_trusted_origins_hostssE#77 7 V  # # * *3 /7   s-Ac^\PUu0uFpRV9gK VkK up#uupirr)rrtrws& rallowed_origins_exact(CsrfViewMiddleware.allowed_origins_exacts,%-%B%BX%B6cQWFW%BXXXs **c \\4pR\P4F=pWP,P VP PR44K? V#)zj A mapping of allowed schemes to list of allowed netlocs, where all subdomains of the netloc are allowed. c3J"TFpRV9gK \V4xK R#5i)rsNr)r&rxs& rr)?CsrfViewMiddleware.allowed_origin_subdomains..s( 7f} HV  7s ##rs)rlistrrtschemeappendrurv)rSallowed_origin_subdomainsparseds& rr,CsrfViewMiddleware.allowed_origin_subdomainssX %0$5! "77 F &mm 4 ; ;FMM  LL  rc r\P'd"VPP\4pM-VP\P,p\V4VfR#\V4\8Xd \V4pV# \ d \ R4hi;i \dRpLPi;i)z Return the CSRF secret originally associated with the request, or None if it didn't have one. If the CSRF_USE_SESSIONS setting is false, raises InvalidTokenFormat if the request's secret has invalid characters or an invalid length. zCSRF_USE_SESSIONS is enabled, but request.session is not set. SessionMiddleware must appear before CsrfViewMiddleware in MIDDLEWARE.N)rCSRF_USE_SESSIONSsessiongetCSRF_SESSION_KEYAttributeErrorrCOOKIESCSRF_COOKIE_NAMErgKeyErrorr/rbr?rSrFrGs&& r _get_secretCsrfViewMiddleware._get_secrets  % % % %oo112BC  1%ooh.G.GH $K0   { 0 0.{;K'" *%  #"  #sB !B& B#& B65B6c \P'd^VPP\4VP R,8wd'VP R,VP\&R#R#VP \PVP R,\P\P\P\P\P\PR7\VR4R#)rA)max_agedomainrsecurehttponlysamesiteN)Cookie)rrrrrrC set_cookierCSRF_COOKIE_AGECSRF_COOKIE_DOMAINCSRF_COOKIE_PATHCSRF_COOKIE_SECURECSRF_COOKIE_HTTPONLYCSRF_COOKIE_SAMESITEr rSrFrs&&&r_set_csrf_cookie#CsrfViewMiddleware._set_csrf_cookies  % % %""#34 ]8SS4;LL4O 01T   )) ]+ 0022..22!66!66  x 5rc.aVPR,pVP4pVP4'dRMR: RV: 2pW$8XdR#W P9dR#\ V4pTPpTPo\;QJd9T3RlTPPTR44F 'gK R# R#!T3RlTPPTR444# \dLi;i \ dR#i;i) HTTP_ORIGINhttpshttpz://TFc3<<"TFp\SV4xK R#5ir"r)r&hostparsed_origin_netlocs& rr)6CsrfViewMiddleware._origin_verified..$s# T / 6 6Tsr) rCget_host is_securerr|r ValueErrorrruanyrr)rSrFrequest_origin good_host good_origin parsed_originparsed_origin_schemers&& @r_origin_verified#CsrfViewMiddleware._origin_verifieds m4 ((*I #,,..F:K,- 77 7 $^4M -33,33s 66::;OQST ss s s 66::;OQST   #     s#C4# D4 DD DDcaVPPR4oSf\\4h\ S4oRSPSP39d\\ 4hSPR8wd\\4h\;QJd)T3RlTP4F 'gK RM RM!T3RlTP44'dR#\P'd\PM\PpTfTP!4pM TP)4pTR9d T: RT: 2p\+SPT4'g%\\$SP'4,4hR# \ d\\ 4hi;i \"d&\\$SP'4,4hi;i) HTTP_REFERERNr-rc3P<"TFp\SPV4xK R#5ir")rru)r&rreferers& rr)4CsrfViewMiddleware._check_referer..;s& 7 7>>4 0 07s#&TF:)44380)rCrrlREASON_NO_REFERERrrREASON_MALFORMED_REFERERrruREASON_INSECURE_REFERERrryrrSESSION_COOKIE_DOMAINrrrREASON_BAD_REFERERgeturlget_portr)rSrF good_referer server_portrs&& @r_check_referer!CsrfViewMiddleware._check_referer)s,,"">2 ? 12 2 :w'G '..'..1 1 89 9 >>W $ 78 8 3 77 333 77    )))  * *,,    K&//1 "**,K-/*6 D gnnl;; 2W^^5E EF F**73K   56 6  >>V # %,\\%5%56KR%P"  # ? &-\\(2K2K%L"$44L!L (  2 3 !!3AA,,[,GF' 'BU" >,szzl! <= = >'      ?#$=>> ?" (,,SZZFF' ' (sLCC:!D  D) C7C22C7: DD D&) E 4'EE cVPV4pVeW!PR&R#R# \d\T4R#i;i)NrA)rrCrNrHrs&& rprocess_request"CsrfViewMiddleware.process_requestsK :**73K& /: ]+ '" *  ) *s)AAc\VRR4'dR#\VRR4'dR#VPR9dVPV4#\VRR4'dVPV4#RVP9dGVP V4'g/VP V\ VPR,,4#M(VP4'dVPV4VPV4TPT4# \d&pTP YP4uRp?#Rp?ii;i \d&pTP YP4uRp?#Rp?ii;i)rFN csrf_exempt_dont_enforce_csrf_checksr)GETHEADOPTIONSTRACE) getattrrrrCrrREASON_BAD_ORIGINrrrlrQr)rSrFcallback callback_argscallback_kwargsrs&&&&& r process_viewCsrfViewMiddleware.process_viewsB 72E : : 8]E 2 2 >>@ @<<( ( 77 ? ? <<( ( GLL (((11||.m1LL2   $ 9##G, 5   g &||G$$! 9||GZZ88 9  5<<4 4 5s<D1E ED>8E>E E6E1+E61E6cVPPR4'd!VPW4RVPR&V#)rBF)rCrrrs&&&rprocess_response#CsrfViewMiddleware.process_responses< <<  6 7 7  ! !' 48=GLL3 4rrN)rXrYrZr[__doc__rryr|rrrrrrrrrrrrr\r]r^s@rrprps  YY ) )  @6$ 4+GZ;2(h :8%t  rrp)?rloggingstring collectionsr urllib.parser django.confrdjango.core.exceptionsrr django.httprr django.urlsr django.utils.cacher django.utils.cryptor r django.utils.deprecationrdjango.utils.functionalrdjango.utils.httprdjango.utils.logrdjango.utils.regex_helperr getLoggerrrdrrrrrrrrcrfrrb ascii_lettersdigitsrrrrr8r?rHrJrL ExceptionrNrgrjrlrprrrrs #! G8$1H43,)6   1 2).9U;W.1LI 14**))FMM94 S  3 ,*" <B"I r