Node / ReticulumProjects / MeshChatX.git / files / vendor / rns_filesync / rns_filesync / paths.py

Displaying Raw • Download

T8b949e"""Path jail helpers for sync directory confinement."""

Tff7b72from T7ee787__future__ Tff7b72import Te6edf3annotations

Tff7b72import T7ee787os

Tff7b72class T56d364PathJailErrorTb4b4b4(Tf85149ValueErrorTb4b4b4)Tb4b4b4:

T8b949e"""Raised when a path escapes the sync root."""

Tff7b72def Td2a8ffnormalize_relpathTb4b4b4(Te6edf3relpathTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:

T8b949e"""Normalize a relative path for protocol use.

Raises:

PathJailError: If the path is empty, absolute, or contains null bytes.

"""

Tff7b72if Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3relpathTb4b4b4, Tffa657strTb4b4b4) Tff7b72or Tff7b72not Te6edf3relpath Tff7b72or Ta5d6ff"Tffea00\x00Ta5d6ff" Tff7b72in Te6edf3relpathTb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffinvalid relative pathTa5d6ff"Tb4b4b4)

T8b949e# Reject Windows drive / UNC style paths even on POSIX.

Tff7b72if Te6edf3relpathTff7b72.Td2a8ffstartswithTb4b4b4(Tb4b4b4(Ta5d6ff"Ta5d6ff/Ta5d6ff"Tb4b4b4, Ta5d6ff"Tffea00\\Ta5d6ff"Tb4b4b4)Tb4b4b4) Tff7b72or Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffisabsTb4b4b4(Te6edf3relpathTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffabsolute paths are not allowedTa5d6ff"Tb4b4b4)

Tff7b72if Tffa657lenTb4b4b4(Te6edf3relpathTb4b4b4) Tff7b72>Tff7b72= T79c0ff2 Tff7b72and Te6edf3relpathTb4b4b4[T79c0ff1Tb4b4b4] Tff7b72== Ta5d6ff"Ta5d6ff:Ta5d6ff"Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffabsolute paths are not allowedTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3relpathTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Tffea00\\Tffea00\\Ta5d6ff"Tb4b4b4) Tff7b72or Te6edf3relpathTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Ta5d6ff//Ta5d6ff"Tb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffabsolute paths are not allowedTa5d6ff"Tb4b4b4)

Te6edf3cleaned Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffnormpathTb4b4b4(Te6edf3relpathTff7b72.Td2a8ffreplaceTb4b4b4(Ta5d6ff"Tffea00\\Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff/Ta5d6ff"Tb4b4b4)Tb4b4b4)

Tff7b72if Te6edf3cleaned Tff7b72in Tb4b4b4(Ta5d6ff"Ta5d6ff.Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff"Tb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffempty relative pathTa5d6ff"Tb4b4b4)

Te6edf3parts Tff7b72= Te6edf3cleanedTff7b72.Td2a8ffsplitTb4b4b4(Ta5d6ff"Ta5d6ff/Ta5d6ff"Tb4b4b4)

Tff7b72if Tffa657anyTb4b4b4(Te6edf3part Tff7b72in Tb4b4b4(Ta5d6ff"Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff..Ta5d6ff"Tb4b4b4) Tff7b72for Te6edf3part Tff7b72in Te6edf3partsTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffpath escape attemptTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3cleanedTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Ta5d6ff../Ta5d6ff"Tb4b4b4) Tff7b72or Te6edf3cleaned Tff7b72== Ta5d6ff"Ta5d6ff..Ta5d6ff"Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffpath escape attemptTa5d6ff"Tb4b4b4)

T8b949e# Disallow hidden protocol/control filenames under sync root.

Tff7b72if Tffa657anyTb4b4b4(

Te6edf3part Tff7b72== Ta5d6ff"Ta5d6ff.rns-filesync.dbTa5d6ff" Tff7b72or Te6edf3partTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Ta5d6ff.rns-xfer-Ta5d6ff"Tb4b4b4) Tff7b72for Te6edf3part Tff7b72in Te6edf3parts

Tb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffreserved pathTa5d6ff"Tb4b4b4)

Tff7b72return Te6edf3cleaned

Tff7b72def Td2a8ffresolve_under_rootTb4b4b4(Te6edf3rootTb4b4b4: Tffa657strTb4b4b4, Te6edf3relpathTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:

T8b949e"""Resolve relpath under root and ensure it stays jailed.

Returns:

Absolute real path under root.

Raises:

PathJailError: If resolution escapes root.

"""

Te6edf3root_real Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffrealpathTb4b4b4(Te6edf3rootTb4b4b4)

Te6edf3safe_rel Tff7b72= Te6edf3normalize_relpathTb4b4b4(Te6edf3relpathTb4b4b4)

Te6edf3candidate Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffrealpathTb4b4b4(Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffjoinTb4b4b4(Te6edf3root_realTb4b4b4, Te6edf3safe_relTb4b4b4)Tb4b4b4)

Tff7b72if Te6edf3candidate Tff7b72!= Te6edf3root_real Tff7b72and Tff7b72not Te6edf3candidateTff7b72.Td2a8ffstartswithTb4b4b4(Te6edf3root_real Tff7b72+ Te6edf3osTff7b72.Td2a8ffsepTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffpath escapes sync rootTa5d6ff"Tb4b4b4)

Tff7b72return Te6edf3candidate

Tff7b72def Td2a8ffrelative_to_rootTb4b4b4(Te6edf3rootTb4b4b4: Tffa657strTb4b4b4, Te6edf3abspathTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:

T8b949e"""Return a jailed relative path from an absolute path under root."""

Te6edf3root_real Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffrealpathTb4b4b4(Te6edf3rootTb4b4b4)

Te6edf3path_real Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffrealpathTb4b4b4(Te6edf3abspathTb4b4b4)

Tff7b72if Te6edf3path_real Tff7b72!= Te6edf3root_real Tff7b72and Tff7b72not Te6edf3path_realTff7b72.Td2a8ffstartswithTb4b4b4(Te6edf3root_real Tff7b72+ Te6edf3osTff7b72.Td2a8ffsepTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3PathJailErrorTb4b4b4(Ta5d6ff"Ta5d6ffpath escapes sync rootTa5d6ff"Tb4b4b4)

Te6edf3rel Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffrelpathTb4b4b4(Te6edf3path_realTb4b4b4, Te6edf3root_realTb4b4b4)

Tff7b72return Te6edf3normalize_relpathTb4b4b4(Te6edf3relTb4b4b4)