[i8\UdZddlmZddlZddlZddlmZddlmZdZ de d<d d Z d d Z y) ajUtilities for safely resolving component asset paths and content types. These helpers are used by server handlers to construct safe absolute paths for component files and to determine the appropriate ``Content-Type`` header for responses. Path resolution prevents directory traversal by normalizing and checking real paths against a component's root directory. ) annotationsN)Final)is_unsafe_path_patternzapplication/octet-streamz Final[str] _OCTET_STREAMct|rytjj|}tjj tjj ||}tjj|} tjj ||g|k7ry |S#t$rYywxYw)a:Build an absolute path inside ``component_root`` if safe. The function first validates that ``relative_url_path`` does not contain dangerous patterns using :func:`~streamlit.path_security.is_unsafe_path_pattern`, then joins it with ``component_root`` and resolves symlinks. Returns ``None`` if the path is rejected by security checks or escapes the root. Parameters ---------- component_root : str Absolute path to the component's root directory. relative_url_path : str Relative URL path from the component root to the requested file. Must be a simple relative path without dangerous patterns. Returns ------- str or None The resolved absolute path if it passes all validation and stays within ``component_root``; otherwise ``None``. N)rospathrealpathnormpathjoin commonpath ValueError)component_rootrelative_url_path root_real candidatecandidate_reals z/var/www/html/userprofiledev.eatanceapp.com/venv/lib/python3.12/site-packages/streamlit/web/server/component_file_utils.pybuild_safe_abspathr#s./0  0I  i9J!KLIWW%%i0N 77  y.9 :i G H  s $B11 B=<B=cbtj|\}}|dk(ry|tS||StS)aGuess the HTTP ``Content-Type`` for a file path. This logic mirrors Tornado's ``StaticFileHandler`` by respecting encoding metadata from ``mimetypes.guess_type`` and falling back to ``application/octet-stream`` when no specific type can be determined. Parameters ---------- abspath : str Absolute file path used for type detection (only the suffix matters). Returns ------- str Guessed content type string suitable for the ``Content-Type`` header. gzipzapplication/gzip) mimetypes guess_typer)abspath mime_typeencodings rguess_content_typerLsD"$..w7Ix6! )rstrrrreturnz str | None)rrr r) __doc__ __future__rrrtypingrstreamlit.path_securityrr__annotations__rrrrr's0 # :6 z6&Rr