˔j9ddlmZddlZ ddlmZddlmZn#e$rddlmZddlm ZYnwxYwGddeZ d Z d Z d Z d Ze d e e de e de e de e deGddeZdZdZdZdS))BytesION)CDumper) CSafeLoaderDumper) SafeLoaderceZdZdZdS)_CassetteLoaderaA safe YAML loader for cassettes. It refuses the dangerous ``!!python/object``/``!!python/object/apply``/ ``!!python/object/new``/``!!python/module``/``!!python/name`` tags that the full loader would execute (CVE-class: arbitrary code execution via untrusted cassette files), while still constructing the handful of benign Python-specific tags that vcrpy cassettes legitimately contain: plain strings, tuples, and serialized ``BytesIO`` request bodies. This keeps existing cassettes loadable. Note the ``BytesIO`` constructor is bound to the *exact* tag and rebuilds the buffer from its (safely constructed) byte content only. It never invokes PyYAML's generic object machinery, so it cannot be used to instantiate an arbitrary class. N)__name__ __module__ __qualname____doc__LC:\Projects\DSCons\.venv\Lib\site-packages\vcr/serializers/yamlserializer.pyr r srr c,||SN)construct_scalarloadernodes r_construct_python_strr s  " "4 ( ((rcFt||Sr)tupleconstruct_sequencers r_construct_python_tupler$s **400 1 11rc||d}|dpd}|r|dnd}t|tr|d}t |pdS)NTdeepstate)rrrzutf-8)construct_mappingget isinstancestrencoder)rrmappingr datas r_construct_bytesior((sy &&t$&77G KK *FE %588#D$${{7## 4;3  rc||d}|dpgf}t|r|dngS)NTrargsr)r!r"iter)rrr&r*s r_construct_iterr,5sO &&t$&77G ;;v   '2%D 4'QR ( ((rztag:yaml.org,2002:python/strz tag:yaml.org,2002:python/unicodeztag:yaml.org,2002:python/tuplez/tag:yaml.org,2002:python/object/new:_io.BytesIOz3tag:yaml.org,2002:python/object/apply:builtins.iterc&eZdZdZeZfdZxZS)_CassetteDumperaA YAML dumper that refuses to emit what the cassette loader can't read. PyYAML's full dumper happily turns any Python object into a ``!!python/object*`` tag, but the safe cassette loader refuses those tags, so recording such a cassette would succeed and then fail to load on replay (#1007). Refuse at record time instead, before anything is written. The check uses the paired loader's constructor table, so any tag the loader can construct is also dumpable and the two sides stay symmetric. ct|}|j}t|trI|dr4||jjvr&tj d|d|d|S)Nztag:yaml.org,2002:python/zzCassette not saved: the request or response contains a Python object that the safe YAML loader would refuse to load back (a ). Keep custom Python objects out of recorded requests/responses, or register a serializer that supports this object on your VCR instance: from vcr.serializers import yamlserializer my_vcr.register_serializer("yaml", yamlserializer.with_custom_tags({ z: my_constructor, # def my_constructor(loader, node): ... })) See https://vcrpy.readthedocs.io/en/latest/advanced.html#cassettes-containing-custom-python-objects) superrepresent_datatagr#r$ startswith loader_classyaml_constructorsyaml representerRepresenterError)selfr'rr2 __class__s rr1z_CassetteDumper.represent_dataSsww%%d++h sC  :;; 4,>>>"33 >OR > > > > >    r)r r r rr r4r1 __classcell__)r:s@rr.r.FsI#Lrr.ctdtfi|D]\}}||tdtfdiGfdd}|S)apBuild a YAML serializer that can record and replay custom Python objects. ``constructors`` maps YAML tags to PyYAML constructor callables. The returned serializer's loader knows how to construct those tags, and its dumper therefore allows saving them; everything else stays as locked down as the default serializer. Register the result on a VCR instance:: my_vcr.register_serializer("yaml", yamlserializer.with_custom_tags({ "tag:yaml.org,2002:python/object/new:myapp.CustomHeader": lambda loader, node: CustomHeader(loader.construct_sequence(node)[0]), })) _CustomTagCassetteLoader_CustomTagCassetteDumperr4cDeZdZefdZefdZdS).with_custom_tags.._CustomTagSerializerc0tj|SN)Loader)r6load)cassette_stringrs r deserializez:with_custom_tags.._CustomTagSerializer.deserialize~s9_V<<< ._CustomTagSerializer.serializes9]6::: :rN)r r r staticmethodrFrL)rKrsr_CustomTagSerializerr@}s]  = = = =  =  ; ; ; ;  ; ; ;rrN)typer itemsadd_constructorr.) constructorsr2 constructorrNrKrs @@rwith_custom_tagsrTks,.@" E EF(..0011[sK0000 ,.@>SYBZ [ [F;;;;;;;;;;;  ! !!rc8tj|tSrB)r6rDr )rEs rrFrFs 9__ = = ==rc8tj|tSrH)r6rIr.)rJs rrLrLs 9]? ; ; ;;r)iorr6r _BaseDumperr _BaseLoader ImportErrorrrr rrr(r,rQr.rTrFrLrrrr[s /++++++//////////******......../ k$)))222    ))) >@UVVV BDYZZZ @BYZZZ QSefff UWfggg"""""k"""J"""<>>><<<<