U he@s<dZddlZddlZddlZddlmZddlmZddl m Z ddZ dd Z d d Zd d ZddZddZddZddZddZddZddZddZddZd d!Zd"d#Zd$d%Zd&d'Zd(d)Zd*d+Zd,d-Zd.d/Z d0d1Z!d2d3Z"d4d5Z#d6d7Z$d8d9Z%d:d;Z&ddZd?dZdS)@z? Custom validators for enhanced input validation and security. N)ValidationError) URLValidator) gettext_lazycCst}z ||Wn tk r2ttdYnXtj|}|jdkrVttd|jr|jdkrln|j ds|j dr| ds| dsttd d d d d g}|D] }t ||t j rttdqdS)z Validate HLS stream URL format and security. Args: value (str): URL to validate Raises: ValidationError: If URL is invalid or insecure zInvalid URL format.)httphttpsz*Only HTTP and HTTPS protocols are allowed.) localhostz 127.0.0.1z0.0.0.0z192.168.z10.z.m3u8z.m3uz7URL must point to an HLS playlist file (.m3u8 or .m3u).z[<>"\'] javascript:data:zfile:z+URL contains potentially malicious content.N)rr_urllibparseurlparseschemehostnamelower startswithendswithresearch IGNORECASE)value url_validatorparsedsuspicious_patternspatternr8/var/www/html/JingleDetector/src/apps/core/validators.pyvalidate_hls_url s,      rc ssttddkr$ttddr^ddddd g}tfd d |Ds^ttd d ddddddddg }tfdd |DrttdtdkrttddS)z Validate file path for security and format. Args: value (str): File path to validate Raises: ValidationError: If path is invalid or insecure zFile path cannot be empty.z..z(Path traversal attempts are not allowed./z/tmp/z /var/tmp/z /opt/streams/z/data/streams/z /app/media/c3s|]}|VqdSN)r).0prefixrrr Zsz%validate_file_path..z.Absolute paths must be in allowed directories.<>"'&|;`$c3s|]}|kVqdSrr)r charr"rrr#_sz&File path contains invalid characters.iz+File path is too long (max 500 characters).N)rr ranylen)rZallowed_prefixesZsuspicious_charsrr"rvalidate_file_path?s$       r0cCs<t||dr|d}dtj|kr8ttddS)z Validate directory path for security and format. Args: value (str): Directory path to validate Raises: ValidationError: If path is invalid or insecure r.z+Path appears to be a file, not a directory.N)r0rrstripospathbasenamerr r"rrrvalidate_directory_pathgs   r6cs0t|tsttddfdd |dS)z Validate JSON configuration for notification channels. Args: value (dict): Configuration dictionary to validate Raises: ValidationError: If configuration is invalid z*Configuration must be a valid JSON object.cst|trP|D]:\}}td|s8ttd|||d|qnJt|trtd|tj r|ttd|td|rttd|dS)N^[a-zA-Z_][a-zA-Z0-9_]*$zInvalid configuration key: r1.check_suspicious_contentN)r7)r;r<rr r"rrCrvalidate_json_configuration}s  rEcCsddg}|D]:}||kr*ttd|||s ttd|dq |d}td|shttdt|d}td|sttd d S) z Validate Telegram notification configuration. Args: config (dict): Telegram configuration Raises: ValidationError: If configuration is invalid bot_tokenchat_idMissing required field: Field  cannot be emptyz^\d+:[A-Za-z0-9_-]+$z"Invalid Telegram bot token format.z^-?\d+$z Invalid Telegram chat ID format.N)rr rr>r?)configrequired_fieldsfieldrFrGrrrvalidate_telegram_configs     rNc Csddddg}|D]:}||kr.ttd|||sttd|dq|d}td|slttd z2t|d}d |krd ksnttd Wn$ttfk rttd YnXddlm}|}z||dWn"tk rttdYnXdS)z Validate email notification configuration. Args: config (dict): Email configuration Raises: ValidationError: If configuration is invalid smtp_hostZ smtp_portusernamepasswordrHrIrJz^[a-zA-Z0-9.-]+$zInvalid SMTP host format.iz&SMTP port must be between 1 and 65535.z"SMTP port must be a valid integer.r)EmailValidatorzInvalid email address format.N) rr rr>int ValueError TypeErrordjango.core.validatorsrS)rKrLrMrOportrSZemail_validatorrrrvalidate_email_configs*     rYcCs6ddg}|D]:}||kr*ttd|||s ttd|dq t}z||dWn tk r~ttdYnXddd d g}|d|krttd d |d |kr2|d }t|tsttd|D]L\}}t|trt|tsttd| dkrttd|dqdS)z Validate webhook notification configuration. Args: config (dict): Webhook configuration Raises: ValidationError: If configuration is invalid urlmethodrHrIrJzInvalid webhook URL format.GETPOSTPUTPATCHzHTTP method must be one of: , headersz$Headers must be a valid JSON object.z(Header names and values must be strings.)hostzcontent-lengthzHeader z is not allowed.N) rr rupperjoinr;r<r=r?r)rKrLrMrZallowed_methodsra header_name header_valuerrrvalidate_webhook_configs.       rgcCs|r |sttdtd|tjr4ttdtd|rLttdtd|}|D]*}|}td|s\ttd|q\t|d krttd d S) z Validate notification template content for security. Args: value (str): Template content to validate Raises: ValidationError: If template contains unsafe content !Template content cannot be empty.r9z0Template contains potentially malicious content.r:z3Template contains potentially dangerous characters.z\{\{([^}]+)\}\}r8zInvalid template variable: iz3Template content is too long (max 5000 characters).N) striprr rrrfindallr>r/)rZ template_varsvarrrrvalidate_template_contents        rlcCs@t|ttfsttdd|kr.dksi"ViDiiwizSample rate must be one of: r`z Hz.N)rvrr rdmapr?)rZ valid_ratesrrrvalidate_sample_rates rcCs.t|d|krdks*nttddS)z Validate audio channel count. Args: value (int): Number of audio channels Raises: ValidationError: If channel count is invalid rRz'Audio channels must be between 1 and 8.Nrxr"rrrvalidate_audio_channelss rcCs@t|ttfsttdd|kr.dksSlug can only contain lowercase letters, numbers, and hyphens.-'Slug cannot start or end with a hyphen.--(Slug cannot contain consecutive hyphens.2z.Slug must be between 3 and 50 characters long.N)rr rr>rrr/r"rrrvalidate_slug_formats      rcCsz|r |sttd|}td|r8ttdtd|rPttddt|krhdksvnttdd S) z Validate name format for display purposes. Args: value (str): Name to validate Raises: ValidationError: If name format is invalid Name cannot be empty.z[<>]zName cannot contain HTML tags.[\x00-\x1f\x7f]z'Name cannot contain control characters.rzz/Name must be between 2 and 100 characters long.N)rirr rrr/r"rrrvalidate_name_format1s      rcCs<t|tsttdd|kr*dks8nttddS)z Validate priority value. Args: value (int): Priority value Raises: ValidationError: If priority is invalid zPriority must be an integer.rRr|z"Priority must be between 1 and 10.Nrur"rrrvalidate_priorityMs  rcCsR|sttdtd|s(ttddt|kr@dksNnttddS)z Validate event type format. Args: value (str): Event type to validate Raises: ValidationError: If event type is invalid zEvent type cannot be empty.z^[a-z][a-z0-9_]*$zREvent type must be in snake_case format (lowercase letters, numbers, underscores).rrz4Event type must be between 3 and 50 characters long.N)rr rr>r/r"rrrvalidate_event_type^s    rcCsPt|ddddddg}tj|d}||krLttdd |d S) z Validate image file path and format. Args: value (str): Image file path to validate Raises: ValidationError: If path or format is invalid z.jpgz.jpegz.pngz.bmpz.tiffz.webprRz.Image file must have one of these extensions: r`N)r0r3r4splitextrrr rd)rZvalid_extensionsfile_extrrrvalidate_image_file_pathts rcCsDt|ts|Stdd|}tdd|}ddl}||}|S)z Sanitize user input for safe storage and display. Args: value (str): Input to sanitize Returns: str: Sanitized input rr7z\s+ rN)r;r?rsubrihtmlescape)rrrrrsanitize_user_inputs  rc st|tsttdd fdd |D]\}}||q,ddl}z&||}t|dkrlttdWn$tt fk rttd YnXdS) z Validate context data for templates and notifications. Args: context (dict): Context data to validate Raises: ValidationError: If context data is invalid zContext must be a dictionary.r7cs|r|d|n|}td|s4ttd|t|trt|dkr\ttd|td|tjr~ttd|nt|t r| D]\}}|||qnht|t rt |D](\}}t|tt frd|||qn*t|t tttdfsttd |dS) Nr1r8zInvalid context key: zContext value too long: zrr r;r?r/rrr<r=list enumeraterTrrbooltype)rArr4 current_pathZ nested_key nested_valueiitemvalidate_context_valuerrrs"     z5validate_context_data..validate_context_valuerNi'z%Context data is too large (max 10KB).z'Context data must be JSON serializable.)r7) r;r<rr r=jsondumpsr/rVrU)contextrArrZ context_jsonrrrvalidate_context_datas     rcCsx|sttdtd|s(ttdt|dkr@ttd|dsT|dr`ttdd|krtttd d S) z Validate slug format for URL-friendly identifiers. Args: value (str): Slug to validate Raises: ValidationError: If slug format is invalid rrrrzz&Slug is too long (max 100 characters).rrrrN)rr rr>r/rrr"rrrrs       cCs|sttdt|dkr(ttdtd|s@ttd|sTttdddd g}|D] }t||tjrbttd qbd S) z Validate name format for human-readable names. Args: value (str): Name to validate Raises: ValidationError: If name format is invalid rrzz&Name is too long (max 100 characters).z^[a-zA-Z0-9\s\-_\.\(\)]+$z!Name contains invalid characters.zName cannot be only whitespace.z<[^>]*>rr:z,Name contains potentially malicious content.N)rr r/rr>rirrrrrrrrrs       c Csf|dkrttdz t|}Wn$ttfk rDttdYnX|dksV|dkrbttddS)z Validate confidence score range (0.0 to 1.0). Args: value (float): Confidence score to validate Raises: ValidationError: If score is out of range Nz Confidence score cannot be None.rmrnrorp)rr rrrVrU)rscorerrrrss   cCsr|sttdt|dkr(ttdddddg}|D] }t||tjr8ttdq8|snttd d S) z Validate template content for jingle detection. Args: value (str): Template content to validate Raises: ValidationError: If template content is invalid rhrz3Template content is too long (max 1000 characters).z ]*>rr r:z8Template content contains potentially malicious content.z+Template content cannot be only whitespace.N)rr r/rrrrirrrrrl4s    )'__doc__rr3 urllib.parser django.core.exceptionsrrWrdjango.utils.translationrr rr0r6rErNrYrgrlrsrtrvryr{r}rrrrrrrrrrrrrrrrrsJ   2(#).!9%