JezK
Edit File: constants.cpython-311.pyc
� Ȁsj3 � � � d dl Z d dlZddlmZmZ ej d� � ZdZdede fd�Z d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Z!dZ"dZ#d Z$e j% �& d!� � rd"nd#Z'd$Z( e� � rd%Z)d&Z*d'Z+ e� � rd(Z(d)Z,nd*Z,d+Z-n d,Z)d-Z*d'Z+d.Z,d.Z-d/e*� d0e+� d1e)� �Z.d2d3gZ/d Z0d4Z1d5Z2dS )6� N� )�staging� local_apiz^[a-zA-Z0-9_\-]+$) z /opt/alt/phpz /var/cagefs/z/opt/cpanel/ea-phpz/opt/plesk/php/z/usr/local/phpz/usr/share/cagefs/z/usr/share/cagefs-skeleton/z/etc/cl.php.d/z /etc/php.d/z/etc/php.scan.d/z /etc/users/�path�returnc �^ � t j � | � � }t D �]}t j � |� � }|� d� � r,||k s"|� |t j z � � r dS �c|� |� � s�y|t |� � d� }|dt |� � t |� d� � � � z � }|r8|t |� � t |� � dz � dt j fv r dS ��dS )uT Boundary-aware allowlist check for a PHP ini_scan_dir / ini_location. A plain ``startswith`` against ALLOWED_INI_PREFIXES is unsafe: a sibling such as ``/opt/alt/phpevil`` string-prefix-matches the bare ``/opt/alt/php`` entry and escapes the intended tree. Canonicalize the candidate and require a real directory boundary against each prefix: * Prefixes that name a full directory (trailing separator) match only when the candidate is that directory or descends below it. * The bare component prefixes (``/opt/alt/php``, ``/opt/cpanel/ea-php``, ``/usr/local/php``) are followed by a PHP version component; the candidate must continue with a run of version digits (e.g. ``/opt/alt/php80``) that then either ends or descends at a separator — never a letter or other separator-extending name. �/TN� 0123456789r � F) �osr �realpath�ALLOWED_INI_PREFIXES�normpath�endswith� startswith�sep�len�lstrip)r �resolved�prefix� normalized�rest�digitss �N/opt/cloudlinux/venv/lib64/python3.11/site-packages/xray/internal/constants.py�is_allowed_ini_pathr s! � � �w� � ��%�%�H�&� � ���W�%�%�f�-�-� � �?�?�3� � � � �:�%�%��)<�)<�Z�"�&�=P�)Q�)Q�%��t�t� &� �&�&�v�.�.� ���C��K�K�L�L�)�D��E�3�t�9�9�s�4�;�;�|�+D�+D�'E�'E�E�E�F�F�� �$�s�6�{�{�3�v�;�;��?� :�;��B�F�|�K�K��t�t�� �5� z /usr/share/alt-php-xray/tasksz /usr/share/alt-php-xray/fpm.statz-/usr/share/alt-php-xray/nginx-user-cache.statz"/usr/share/alt-php-xray/continuousz /usr/share/alt-php-xray/requestsz /usr/share/alt-php-xray-tasksz /usr/share/alt-php-xray/pendingz$/usr/share/alt-php-xray/applied_dataz*/usr/share/alt-php-xray/advices_cache.jsonz0/usr/share/alt-php-xray/advices_im360_cache.jsonz!/var/log/alt-php-xray/manager.logz /var/log/alt-php-xray/agent.logz$/var/log/alt-php-xray/user-agent.logz&/var/log/alt-php-xray/smart_advice.logz /opt/alt/php-xray/run/xray.sockz$/opt/alt/php-xray/run/xray-user.sockz"/usr/share/alt-php-xray/agent.filez&/usr/share/alt-php-xray/mail_templatesz)/usr/share/alt-php-xray/get_email_scriptsz /etc/sysconfig/rhn/jwt.token�P � �� T� DEBUG_LOG�debug�info�https�8� 2ac05adf1e9f4cd18c064fe9e9b1a474z cl.cl.sentry.g.cdn.mycache.org�httpz127.0.0.1:8000ztest-im.cdn.mycache.orgz x-ray-staging.cloudlinux.com�7� c4d18de9e2164ca6b92cf110faec42eazpapi.g.geo.mycache.orgzhttps://�@r � ACCELERATE_WP�WORDPRESS_PLUGIN�:�,)3r �rer r r �compile�safe_id_patternr �str�boolr �local_tasks_storage�fpm_stat_storage�nginx_cache_stat_storage�continuous_storage�request_data_storage�tasks_base_storage�advice_pending_storage�advice_processed_storage�advice_list_cache�advice_list_im360_cache� manager_log� agent_log�user_agent_log� adviser_log� agent_sock�user_agent_sock� agent_file�mail_template_location�mail_scripts_location�jwt_token_location� drop_after� check_period�throttling_threshold�fpm_reload_timeout�user_tasks_count�allow_disable_nginx_cache�environ�get� logging_level�proto� s_postfix�s_key�s_name� api_server�adviser_api_server� sentry_dsn�advice_action_sources�advice_reason_max_len�part_delimiter�task_delimiter� r r �<module>r\ s� �� � � � � � � � � � � � � � � � � �"�*� 1�2�2�� � � %�c� %�d� %� %� %� %�N 6� �5� �J� �9� �9� �4� �:� �A� �@� �L� �1� � -� �7��6� � .� �8�� 1� �A� �C� �3� � � �� �� �� �� � � � �:�>�>�+�6�6�B���F� ��� �7�9�9� 2��I� .�E� -�F��y�{�{� /���%� � �.� �7����I� .�E� -�F�)�J�1�� 4�� 4� 4�� 4� 4�� 4� 4� �(�*<�=� �� ������r