R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 1 | """Policy framework for the email package. |
| 2 | |
| 3 | Allows fine grained feature control of how the package parses and emits data. |
| 4 | """ |
| 5 | |
| 6 | import abc |
| 7 | from email import header |
| 8 | from email import charset as _charset |
| 9 | from email.utils import _has_surrogates |
| 10 | |
| 11 | __all__ = [ |
| 12 | 'Policy', |
| 13 | 'Compat32', |
| 14 | 'compat32', |
| 15 | ] |
| 16 | |
| 17 | |
| 18 | class _PolicyBase: |
| 19 | |
| 20 | """Policy Object basic framework. |
| 21 | |
| 22 | This class is useless unless subclassed. A subclass should define |
| 23 | class attributes with defaults for any values that are to be |
| 24 | managed by the Policy object. The constructor will then allow |
| 25 | non-default values to be set for these attributes at instance |
| 26 | creation time. The instance will be callable, taking these same |
| 27 | attributes keyword arguments, and returning a new instance |
| 28 | identical to the called instance except for those values changed |
| 29 | by the keyword arguments. Instances may be added, yielding new |
| 30 | instances with any non-default values from the right hand |
| 31 | operand overriding those in the left hand operand. That is, |
| 32 | |
| 33 | A + B == A(<non-default values of B>) |
| 34 | |
| 35 | The repr of an instance can be used to reconstruct the object |
| 36 | if and only if the repr of the values can be used to reconstruct |
| 37 | those values. |
| 38 | |
| 39 | """ |
| 40 | |
| 41 | def __init__(self, **kw): |
| 42 | """Create new Policy, possibly overriding some defaults. |
| 43 | |
| 44 | See class docstring for a list of overridable attributes. |
| 45 | |
| 46 | """ |
| 47 | for name, value in kw.items(): |
| 48 | if hasattr(self, name): |
| 49 | super(_PolicyBase,self).__setattr__(name, value) |
| 50 | else: |
| 51 | raise TypeError( |
| 52 | "{!r} is an invalid keyword argument for {}".format( |
| 53 | name, self.__class__.__name__)) |
| 54 | |
| 55 | def __repr__(self): |
| 56 | args = [ "{}={!r}".format(name, value) |
| 57 | for name, value in self.__dict__.items() ] |
| 58 | return "{}({})".format(self.__class__.__name__, ', '.join(args)) |
| 59 | |
| 60 | def clone(self, **kw): |
| 61 | """Return a new instance with specified attributes changed. |
| 62 | |
| 63 | The new instance has the same attribute values as the current object, |
| 64 | except for the changes passed in as keyword arguments. |
| 65 | |
| 66 | """ |
R David Murray | 0b6f6c8 | 2012-05-25 18:42:14 -0400 | [diff] [blame] | 67 | newpolicy = self.__class__.__new__(self.__class__) |
R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 68 | for attr, value in self.__dict__.items(): |
R David Murray | 0b6f6c8 | 2012-05-25 18:42:14 -0400 | [diff] [blame] | 69 | object.__setattr__(newpolicy, attr, value) |
| 70 | for attr, value in kw.items(): |
| 71 | if not hasattr(self, attr): |
| 72 | raise TypeError( |
| 73 | "{!r} is an invalid keyword argument for {}".format( |
| 74 | attr, self.__class__.__name__)) |
| 75 | object.__setattr__(newpolicy, attr, value) |
| 76 | return newpolicy |
R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 77 | |
| 78 | def __setattr__(self, name, value): |
| 79 | if hasattr(self, name): |
| 80 | msg = "{!r} object attribute {!r} is read-only" |
| 81 | else: |
| 82 | msg = "{!r} object has no attribute {!r}" |
| 83 | raise AttributeError(msg.format(self.__class__.__name__, name)) |
| 84 | |
| 85 | def __add__(self, other): |
| 86 | """Non-default values from right operand override those from left. |
| 87 | |
| 88 | The object returned is a new instance of the subclass. |
| 89 | |
| 90 | """ |
| 91 | return self.clone(**other.__dict__) |
| 92 | |
| 93 | |
R David Murray | 1be413e | 2012-05-31 18:00:45 -0400 | [diff] [blame] | 94 | def _append_doc(doc, added_doc): |
| 95 | doc = doc.rsplit('\n', 1)[0] |
| 96 | added_doc = added_doc.split('\n', 1)[1] |
| 97 | return doc + '\n' + added_doc |
R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 98 | |
R David Murray | 1be413e | 2012-05-31 18:00:45 -0400 | [diff] [blame] | 99 | def _extend_docstrings(cls): |
| 100 | if cls.__doc__ and cls.__doc__.startswith('+'): |
| 101 | cls.__doc__ = _append_doc(cls.__bases__[0].__doc__, cls.__doc__) |
| 102 | for name, attr in cls.__dict__.items(): |
| 103 | if attr.__doc__ and attr.__doc__.startswith('+'): |
| 104 | for c in (c for base in cls.__bases__ for c in base.mro()): |
| 105 | doc = getattr(getattr(c, name), '__doc__') |
| 106 | if doc: |
| 107 | attr.__doc__ = _append_doc(doc, attr.__doc__) |
| 108 | break |
| 109 | return cls |
R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 110 | |
| 111 | |
R David Murray | 1be413e | 2012-05-31 18:00:45 -0400 | [diff] [blame] | 112 | class Policy(_PolicyBase, metaclass=abc.ABCMeta): |
R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 113 | |
| 114 | r"""Controls for how messages are interpreted and formatted. |
| 115 | |
| 116 | Most of the classes and many of the methods in the email package accept |
| 117 | Policy objects as parameters. A Policy object contains a set of values and |
| 118 | functions that control how input is interpreted and how output is rendered. |
| 119 | For example, the parameter 'raise_on_defect' controls whether or not an RFC |
| 120 | violation results in an error being raised or not, while 'max_line_length' |
| 121 | controls the maximum length of output lines when a Message is serialized. |
| 122 | |
| 123 | Any valid attribute may be overridden when a Policy is created by passing |
| 124 | it as a keyword argument to the constructor. Policy objects are immutable, |
| 125 | but a new Policy object can be created with only certain values changed by |
| 126 | calling the Policy instance with keyword arguments. Policy objects can |
| 127 | also be added, producing a new Policy object in which the non-default |
| 128 | attributes set in the right hand operand overwrite those specified in the |
| 129 | left operand. |
| 130 | |
| 131 | Settable attributes: |
| 132 | |
| 133 | raise_on_defect -- If true, then defects should be raised as errors. |
| 134 | Default: False. |
| 135 | |
| 136 | linesep -- string containing the value to use as separation |
| 137 | between output lines. Default '\n'. |
| 138 | |
| 139 | cte_type -- Type of allowed content transfer encodings |
| 140 | |
| 141 | 7bit -- ASCII only |
| 142 | 8bit -- Content-Transfer-Encoding: 8bit is allowed |
| 143 | |
| 144 | Default: 8bit. Also controls the disposition of |
| 145 | (RFC invalid) binary data in headers; see the |
| 146 | documentation of the binary_fold method. |
| 147 | |
| 148 | max_line_length -- maximum length of lines, excluding 'linesep', |
| 149 | during serialization. None or 0 means no line |
| 150 | wrapping is done. Default is 78. |
| 151 | |
| 152 | """ |
| 153 | |
| 154 | raise_on_defect = False |
| 155 | linesep = '\n' |
| 156 | cte_type = '8bit' |
| 157 | max_line_length = 78 |
| 158 | |
| 159 | def handle_defect(self, obj, defect): |
| 160 | """Based on policy, either raise defect or call register_defect. |
| 161 | |
| 162 | handle_defect(obj, defect) |
| 163 | |
| 164 | defect should be a Defect subclass, but in any case must be an |
| 165 | Exception subclass. obj is the object on which the defect should be |
| 166 | registered if it is not raised. If the raise_on_defect is True, the |
| 167 | defect is raised as an error, otherwise the object and the defect are |
| 168 | passed to register_defect. |
| 169 | |
| 170 | This method is intended to be called by parsers that discover defects. |
| 171 | The email package parsers always call it with Defect instances. |
| 172 | |
| 173 | """ |
| 174 | if self.raise_on_defect: |
| 175 | raise defect |
| 176 | self.register_defect(obj, defect) |
| 177 | |
| 178 | def register_defect(self, obj, defect): |
| 179 | """Record 'defect' on 'obj'. |
| 180 | |
| 181 | Called by handle_defect if raise_on_defect is False. This method is |
| 182 | part of the Policy API so that Policy subclasses can implement custom |
| 183 | defect handling. The default implementation calls the append method of |
| 184 | the defects attribute of obj. The objects used by the email package by |
| 185 | default that get passed to this method will always have a defects |
| 186 | attribute with an append method. |
| 187 | |
| 188 | """ |
| 189 | obj.defects.append(defect) |
| 190 | |
R David Murray | abfc374 | 2012-05-29 09:14:44 -0400 | [diff] [blame] | 191 | def header_max_count(self, name): |
| 192 | """Return the maximum allowed number of headers named 'name'. |
| 193 | |
| 194 | Called when a header is added to a Message object. If the returned |
| 195 | value is not 0 or None, and there are already a number of headers with |
| 196 | the name 'name' equal to the value returned, a ValueError is raised. |
| 197 | |
| 198 | Because the default behavior of Message's __setitem__ is to append the |
| 199 | value to the list of headers, it is easy to create duplicate headers |
| 200 | without realizing it. This method allows certain headers to be limited |
| 201 | in the number of instances of that header that may be added to a |
| 202 | Message programmatically. (The limit is not observed by the parser, |
| 203 | which will faithfully produce as many headers as exist in the message |
| 204 | being parsed.) |
| 205 | |
| 206 | The default implementation returns None for all header names. |
| 207 | """ |
| 208 | return None |
| 209 | |
R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 210 | @abc.abstractmethod |
| 211 | def header_source_parse(self, sourcelines): |
| 212 | """Given a list of linesep terminated strings constituting the lines of |
| 213 | a single header, return the (name, value) tuple that should be stored |
| 214 | in the model. The input lines should retain their terminating linesep |
| 215 | characters. The lines passed in by the email package may contain |
| 216 | surrogateescaped binary data. |
| 217 | """ |
| 218 | raise NotImplementedError |
| 219 | |
| 220 | @abc.abstractmethod |
| 221 | def header_store_parse(self, name, value): |
| 222 | """Given the header name and the value provided by the application |
| 223 | program, return the (name, value) that should be stored in the model. |
| 224 | """ |
| 225 | raise NotImplementedError |
| 226 | |
| 227 | @abc.abstractmethod |
| 228 | def header_fetch_parse(self, name, value): |
| 229 | """Given the header name and the value from the model, return the value |
| 230 | to be returned to the application program that is requesting that |
| 231 | header. The value passed in by the email package may contain |
| 232 | surrogateescaped binary data if the lines were parsed by a BytesParser. |
| 233 | The returned value should not contain any surrogateescaped data. |
| 234 | |
| 235 | """ |
| 236 | raise NotImplementedError |
| 237 | |
| 238 | @abc.abstractmethod |
| 239 | def fold(self, name, value): |
| 240 | """Given the header name and the value from the model, return a string |
| 241 | containing linesep characters that implement the folding of the header |
| 242 | according to the policy controls. The value passed in by the email |
| 243 | package may contain surrogateescaped binary data if the lines were |
| 244 | parsed by a BytesParser. The returned value should not contain any |
| 245 | surrogateescaped data. |
| 246 | |
| 247 | """ |
| 248 | raise NotImplementedError |
| 249 | |
| 250 | @abc.abstractmethod |
| 251 | def fold_binary(self, name, value): |
| 252 | """Given the header name and the value from the model, return binary |
| 253 | data containing linesep characters that implement the folding of the |
| 254 | header according to the policy controls. The value passed in by the |
| 255 | email package may contain surrogateescaped binary data. |
| 256 | |
| 257 | """ |
| 258 | raise NotImplementedError |
| 259 | |
| 260 | |
R David Murray | 1be413e | 2012-05-31 18:00:45 -0400 | [diff] [blame] | 261 | @_extend_docstrings |
R David Murray | c27e522 | 2012-05-25 15:01:48 -0400 | [diff] [blame] | 262 | class Compat32(Policy): |
| 263 | |
| 264 | """+ |
| 265 | This particular policy is the backward compatibility Policy. It |
| 266 | replicates the behavior of the email package version 5.1. |
| 267 | """ |
| 268 | |
| 269 | def _sanitize_header(self, name, value): |
| 270 | # If the header value contains surrogates, return a Header using |
| 271 | # the unknown-8bit charset to encode the bytes as encoded words. |
| 272 | if not isinstance(value, str): |
| 273 | # Assume it is already a header object |
| 274 | return value |
| 275 | if _has_surrogates(value): |
| 276 | return header.Header(value, charset=_charset.UNKNOWN8BIT, |
| 277 | header_name=name) |
| 278 | else: |
| 279 | return value |
| 280 | |
| 281 | def header_source_parse(self, sourcelines): |
| 282 | """+ |
| 283 | The name is parsed as everything up to the ':' and returned unmodified. |
| 284 | The value is determined by stripping leading whitespace off the |
| 285 | remainder of the first line, joining all subsequent lines together, and |
| 286 | stripping any trailing carriage return or linefeed characters. |
| 287 | |
| 288 | """ |
| 289 | name, value = sourcelines[0].split(':', 1) |
| 290 | value = value.lstrip(' \t') + ''.join(sourcelines[1:]) |
| 291 | return (name, value.rstrip('\r\n')) |
| 292 | |
| 293 | def header_store_parse(self, name, value): |
| 294 | """+ |
| 295 | The name and value are returned unmodified. |
| 296 | """ |
| 297 | return (name, value) |
| 298 | |
| 299 | def header_fetch_parse(self, name, value): |
| 300 | """+ |
| 301 | If the value contains binary data, it is converted into a Header object |
| 302 | using the unknown-8bit charset. Otherwise it is returned unmodified. |
| 303 | """ |
| 304 | return self._sanitize_header(name, value) |
| 305 | |
| 306 | def fold(self, name, value): |
| 307 | """+ |
| 308 | Headers are folded using the Header folding algorithm, which preserves |
| 309 | existing line breaks in the value, and wraps each resulting line to the |
| 310 | max_line_length. Non-ASCII binary data are CTE encoded using the |
| 311 | unknown-8bit charset. |
| 312 | |
| 313 | """ |
| 314 | return self._fold(name, value, sanitize=True) |
| 315 | |
| 316 | def fold_binary(self, name, value): |
| 317 | """+ |
| 318 | Headers are folded using the Header folding algorithm, which preserves |
| 319 | existing line breaks in the value, and wraps each resulting line to the |
| 320 | max_line_length. If cte_type is 7bit, non-ascii binary data is CTE |
| 321 | encoded using the unknown-8bit charset. Otherwise the original source |
| 322 | header is used, with its existing line breaks and/or binary data. |
| 323 | |
| 324 | """ |
| 325 | folded = self._fold(name, value, sanitize=self.cte_type=='7bit') |
| 326 | return folded.encode('ascii', 'surrogateescape') |
| 327 | |
| 328 | def _fold(self, name, value, sanitize): |
| 329 | parts = [] |
| 330 | parts.append('%s: ' % name) |
| 331 | if isinstance(value, str): |
| 332 | if _has_surrogates(value): |
| 333 | if sanitize: |
| 334 | h = header.Header(value, |
| 335 | charset=_charset.UNKNOWN8BIT, |
| 336 | header_name=name) |
| 337 | else: |
| 338 | # If we have raw 8bit data in a byte string, we have no idea |
| 339 | # what the encoding is. There is no safe way to split this |
| 340 | # string. If it's ascii-subset, then we could do a normal |
| 341 | # ascii split, but if it's multibyte then we could break the |
| 342 | # string. There's no way to know so the least harm seems to |
| 343 | # be to not split the string and risk it being too long. |
| 344 | parts.append(value) |
| 345 | h = None |
| 346 | else: |
| 347 | h = header.Header(value, header_name=name) |
| 348 | else: |
| 349 | # Assume it is a Header-like object. |
| 350 | h = value |
| 351 | if h is not None: |
| 352 | parts.append(h.encode(linesep=self.linesep, |
| 353 | maxlinelen=self.max_line_length)) |
| 354 | parts.append(self.linesep) |
| 355 | return ''.join(parts) |
| 356 | |
| 357 | |
| 358 | compat32 = Compat32() |