206 |
"""Examine request for security violations""" |
"""Examine request for security violations""" |
207 |
#if Globals.server: sys.stderr.write(str(request) + "\n") |
#if Globals.server: sys.stderr.write(str(request) + "\n") |
208 |
security_level = Globals.security_level |
security_level = Globals.security_level |
209 |
|
if security_level == "override": return |
210 |
if Globals.restrict_path: |
if Globals.restrict_path: |
211 |
for arg in arglist: |
for arg in arglist: |
212 |
if isinstance(arg, rpath.RPath): vet_rpath(arg) |
if isinstance(arg, rpath.RPath): vet_rpath(arg) |
213 |
if request.function_string in file_requests: |
if request.function_string in file_requests: |
214 |
vet_filename(request, arglist) |
vet_filename(request, arglist) |
|
if security_level == "override": return |
|
215 |
if request.function_string in allowed_requests: return |
if request.function_string in allowed_requests: return |
216 |
if request.function_string in ("Globals.set", "Globals.set_local"): |
if request.function_string in ("Globals.set", "Globals.set_local"): |
217 |
if arglist[0] not in disallowed_server_globals: return |
if arglist[0] not in disallowed_server_globals: return |