1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980 |
- from django.core.exceptions import ImproperlyConfigured, SuspiciousFileOperation
- from django.template.utils import get_app_template_dirs
- from django.utils._os import safe_join
- from django.utils.functional import cached_property
-
-
- class BaseEngine:
- # Core methods: engines have to provide their own implementation
- # (except for from_string which is optional).
-
- def __init__(self, params):
- """
- Initialize the template engine.
-
- `params` is a dict of configuration settings.
- """
- params = params.copy()
- self.name = params.pop("NAME")
- self.dirs = list(params.pop("DIRS"))
- self.app_dirs = params.pop("APP_DIRS")
- if params:
- raise ImproperlyConfigured(
- "Unknown parameters: {}".format(", ".join(params))
- )
-
- @property
- def app_dirname(self):
- raise ImproperlyConfigured(
- "{} doesn't support loading templates from installed "
- "applications.".format(self.__class__.__name__)
- )
-
- def from_string(self, template_code):
- """
- Create and return a template for the given source code.
-
- This method is optional.
- """
- raise NotImplementedError(
- "subclasses of BaseEngine should provide a from_string() method"
- )
-
- def get_template(self, template_name):
- """
- Load and return a template for the given name.
-
- Raise TemplateDoesNotExist if no such template exists.
- """
- raise NotImplementedError(
- "subclasses of BaseEngine must provide a get_template() method"
- )
-
- # Utility methods: they are provided to minimize code duplication and
- # security issues in third-party backends.
-
- @cached_property
- def template_dirs(self):
- """
- Return a list of directories to search for templates.
- """
- # Immutable return value because it's cached and shared by callers.
- template_dirs = tuple(self.dirs)
- if self.app_dirs:
- template_dirs += get_app_template_dirs(self.app_dirname)
- return template_dirs
-
- def iter_template_filenames(self, template_name):
- """
- Iterate over candidate files for template_name.
-
- Ignore files that don't lie inside configured template dirs to avoid
- directory traversal attacks.
- """
- for template_dir in self.template_dirs:
- try:
- yield safe_join(template_dir, template_name)
- except SuspiciousFileOperation:
- # The joined path was located outside of this template_dir
- # (it might be inside another one, so this isn't fatal).
- pass
|