j~SSKrSSKJr SSKJrJr SSKJr Sr"SS\5r "SS \5r S S jr S r S S jr g)N)StrEnum)SimpleLazyObjectempty) format_html csp_noncecD\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rSrg)CSP a Content Security Policy constants for directive values and special tokens. These constants represent: 1. Standard quoted string values from the CSP spec (e.g., 'self', 'unsafe-inline') 2. Special placeholder tokens (NONCE) that get replaced by the middleware Using this enum instead of raw strings provides better type checking, autocompletion, and protection against common mistakes like: - Typos (e.g., 'noone' instead of 'none') - Missing quotes (e.g., ["self"] instead of ["'self'"]) - Inconsistent quote styles (e.g., ["'self'", ""unsafe-inline""]) Example usage in Django settings: SECURE_CSP = { "default-src": [CSP.NONE], "script-src": [CSP.SELF, CSP.NONCE], } zContent-Security-Policyz#Content-Security-Policy-Report-Onlyz'none'z'report-sample'z'self'z'strict-dynamic'z 'unsafe-eval'z'unsafe-hashes'z'unsafe-inline'z'wasm-unsafe-eval'zN)__name__ __module__ __qualname____firstlineno____doc__HEADER_ENFORCEHEADER_REPORT_ONLYNONE REPORT_SAMPLESELFSTRICT_DYNAMIC UNSAFE_EVAL UNSAFE_HASHES UNSAFE_INLINEWASM_UNSAFE_EVALNONCE__static_attributes__r H/var/www/html/KUNJ/venv/lib/python3.13/site-packages/django/utils/csp.pyr r sF2/N> D%M D'N!K%M%M+ #Err c2^\rSrSrSrU4SjrSrSrU=r$) LazyNonce8aw Lazily generates a cryptographically secure nonce string, for use in CSP headers. The nonce is only generated when first accessed (e.g., via string interpolation or inside a template). The nonce will evaluate as `True` if it has been generated, and `False` if it has not. This is useful for third-party Django libraries that want to support CSP without requiring it. Example Django template usage with context processors enabled: ``{% csp_nonce_attr %}`` will only render the nonce attribute if the nonce has been evaluated (i.e. accessed) elsewhere in the request/response cycle. c,>[TU][5 gN)super__init__generate_nonce)self __class__s rr%LazyNonce.__init__Ms (rc&UR[L$r#)_wrappedr)r's r__bool__LazyNonce.__bool__Ps}}E))rr ) r r rrrr%r,r __classcell__)r(s@rr r 8s()**rr cUR[5nU(aURUbSU0S9$SS9$Ucg[SU5$)Nnonce)attrsz nonce="{}")get CONTEXT_KEYrenderr)contextmediar0s r nonce_attrr8TsM KK $E ||e6G7E"2|RRT|RR } |U ++rc.[R"S5$)N)secrets token_urlsafer rrr&r&]s   $$rc/nUR5GHup4US;aMUSLaSnO[U[5(a [U5nO[U[[ -5(dU/n[ RU;=n(a3U(a,UVs/sHow[ R:XaSUS3OUPM nnO.U(a'UVs/sHow[ R:wdMUPM nnU(dMSRU5nURUSU3R55 GM SRU5$s snfs snf)N)NFTr2z'nonce-' z; ) items isinstancesetsortedlisttupler rjoinappendrstrip)configr0policy directivevaluesrendered_value has_sentinelvs r build_policyrPas F#\\^ ] "  T>N&#&& u 55 !$ V 33 3OUVv!SYYGE7!,AEvV%+>VCII~!V> XXf-N  1^$45<<>?5,8 99V W>s%D8D=D=r#)r;enumrdjango.utils.functionalrrdjango.utils.htmlrr4r r r8r&rPr rrrTsA;) *#'*#Z* *8,%r