
    Xh                     \    d Z ddlmZ ddlmZ ddlmZ ddlmZ dZ	 G d	 d
e      Z
ee
fgZy)z&Tornado handlers for security logging.    )web)
authorized   )
APIHandler   )csp_report_uricspc                   R    e Zd ZdZeZdZd Zd Ze	j                  ed               Zy)CSPReportHandlerz2Accepts a content security policy violation reportFc                      y)z:Don't check origin when reporting origin-check violations!T selfs    ]/var/www/html/myenv/lib/python3.12/site-packages/jupyter_server/services/security/handlers.pyskip_check_originz"CSPReportHandler.skip_check_origin   s        c                      y)z!Don't check XSRF for CSP reports.Nr   r   s    r   check_xsrf_cookiez"CSPReportHandler.check_xsrf_cookie   s    r   c                     | j                   j                  d| j                  j                  j	                  dd             y)z.Log a content security policy violation reportzContent security violation: %sutf8replaceN)logwarningrequestbodydecoder   s    r   postzCSPReportHandler.post   s3     	,LL$$VY7	
r   N)__name__
__module____qualname____doc__AUTH_RESOURCEauth_resource_track_activityr   r   r   authenticatedr   r   r   r   r   r   r      s;    <!MO 	
  
r   r   N)r!   tornador   jupyter_server.auth.decoratorr   base.handlersr    r   r"   r   default_handlersr   r   r   <module>r+      s8    ,  4 ' 
z 
0 $%567 r   