OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	09/05/2025 09:34:06 AM	rwxr-xr-x
📁 .hash	-	02/07/2025 10:01:29 PM	rwxr-xr-x
📄 __init__.py	7.58 KB	12/18/2024 10:23:16 AM	rw-r--r--
📁 __pycache__	-	02/07/2025 11:11:02 PM	rwxr-xr-x
📄 _cparser.pxd	4.22 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 _find_header.pxd	68 bytes	12/18/2024 10:23:16 AM	rw-r--r--
📄 _headers.pxi	1.96 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 _helpers.cpython-311-x86_64-linux-gnu.so	86.01 KB	12/18/2024 10:23:52 AM	rwxr-xr-x
📄 _helpers.pyi	202 bytes	12/18/2024 10:23:16 AM	rw-r--r--
📄 _helpers.pyx	1.02 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 _http_parser.cpython-311-x86_64-linux-gnu.so	569.59 KB	12/18/2024 10:23:52 AM	rwxr-xr-x
📄 _http_parser.pyx	27.4 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 _http_writer.cpython-311-x86_64-linux-gnu.so	75.01 KB	12/18/2024 10:23:52 AM	rwxr-xr-x
📄 _http_writer.pyx	4.47 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 _websocket.cpython-311-x86_64-linux-gnu.so	53.37 KB	12/18/2024 10:23:52 AM	rwxr-xr-x
📄 _websocket.pyx	1.52 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 abc.py	5.37 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 base_protocol.py	2.68 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 client.py	46.17 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 client_exceptions.py	9.19 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 client_proto.py	8.45 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 client_reqrep.py	38.75 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 client_ws.py	10.75 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 compression_utils.py	4.9 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 connector.py	51.56 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 cookiejar.py	13.69 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 formdata.py	5.96 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 hdrs.py	4.5 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 helpers.py	29.55 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 http.py	1.8 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 http_exceptions.py	2.65 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 http_parser.py	34.66 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 http_websocket.py	26.09 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 http_writer.py	5.79 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 locks.py	1.11 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 log.py	325 bytes	12/18/2024 10:23:16 AM	rw-r--r--
📄 multipart.py	31.71 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 payload.py	13.22 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 payload_streamer.py	2.04 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 py.typed	7 bytes	12/18/2024 10:23:16 AM	rw-r--r--
📄 pytest_plugin.py	11.33 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 resolver.py	4.95 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 streams.py	20.35 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 tcp_helpers.py	961 bytes	12/18/2024 10:23:16 AM	rw-r--r--
📄 test_utils.py	19.71 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 tracing.py	14.78 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 typedefs.py	1.44 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web.py	18.81 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_app.py	17.88 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_exceptions.py	10.12 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_fileresponse.py	11.15 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_log.py	7.62 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_middlewares.py	3.94 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_protocol.py	22.5 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_request.py	28.08 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_response.py	27.08 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_routedef.py	5.99 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_runner.py	11.46 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_server.py	2.53 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_urldispatcher.py	39.12 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 web_ws.py	18.21 KB	12/18/2024 10:23:16 AM	rw-r--r--
📄 worker.py	7.78 KB	12/18/2024 10:23:16 AM	rw-r--r--

Name

Size

Modified

Perms

📁 ..

09/05/2025 09:34:06 AM

rwxr-xr-x

📁 .hash

02/07/2025 10:01:29 PM

rwxr-xr-x

📄 __init__.py

7.58 KB

12/18/2024 10:23:16 AM

rw-r--r--

📁 __pycache__

02/07/2025 11:11:02 PM

rwxr-xr-x

📄 _cparser.pxd

4.22 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 _find_header.pxd

68 bytes

12/18/2024 10:23:16 AM

rw-r--r--

📄 _headers.pxi

1.96 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 _helpers.cpython-311-x86_64-linux-gnu.so

86.01 KB

12/18/2024 10:23:52 AM

rwxr-xr-x

📄 _helpers.pyi

202 bytes

12/18/2024 10:23:16 AM

rw-r--r--

📄 _helpers.pyx

1.02 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 _http_parser.cpython-311-x86_64-linux-gnu.so

569.59 KB

12/18/2024 10:23:52 AM

rwxr-xr-x

📄 _http_parser.pyx

27.4 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 _http_writer.cpython-311-x86_64-linux-gnu.so

75.01 KB

12/18/2024 10:23:52 AM

rwxr-xr-x

📄 _http_writer.pyx

4.47 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 _websocket.cpython-311-x86_64-linux-gnu.so

53.37 KB

12/18/2024 10:23:52 AM

rwxr-xr-x

📄 _websocket.pyx

1.52 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 abc.py

5.37 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 base_protocol.py

2.68 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 client.py

46.17 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 client_exceptions.py

9.19 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 client_proto.py

8.45 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 client_reqrep.py

38.75 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 client_ws.py

10.75 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 compression_utils.py

4.9 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 connector.py

51.56 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 cookiejar.py

13.69 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 formdata.py

5.96 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 hdrs.py

4.5 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 helpers.py

29.55 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 http.py

1.8 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 http_exceptions.py

2.65 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 http_parser.py

34.66 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 http_websocket.py

26.09 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 http_writer.py

5.79 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 locks.py

1.11 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 log.py

325 bytes

12/18/2024 10:23:16 AM

rw-r--r--

📄 multipart.py

31.71 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 payload.py

13.22 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 payload_streamer.py

2.04 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 py.typed

7 bytes

12/18/2024 10:23:16 AM

rw-r--r--

📄 pytest_plugin.py

11.33 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 resolver.py

4.95 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 streams.py

20.35 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 tcp_helpers.py

961 bytes

12/18/2024 10:23:16 AM

rw-r--r--

📄 test_utils.py

19.71 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 tracing.py

14.78 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 typedefs.py

1.44 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web.py

18.81 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_app.py

17.88 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_exceptions.py

10.12 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_fileresponse.py

11.15 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_log.py

7.62 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_middlewares.py

3.94 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_protocol.py

22.5 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_request.py

28.08 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_response.py

27.08 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_routedef.py

5.99 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_runner.py

11.46 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_server.py

2.53 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_urldispatcher.py

39.12 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 web_ws.py

18.21 KB

12/18/2024 10:23:16 AM

rw-r--r--

📄 worker.py

7.78 KB

12/18/2024 10:23:16 AM

rw-r--r--

Editing: web_middlewares.py

import re
from typing import TYPE_CHECKING, Tuple, Type, TypeVar

from .typedefs import Handler, Middleware
from .web_exceptions import HTTPMove, HTTPPermanentRedirect
from .web_request import Request
from .web_response import StreamResponse
from .web_urldispatcher import SystemRoute

__all__ = (
    "middleware",
    "normalize_path_middleware",
)

if TYPE_CHECKING:
    from .web_app import Application

_Func = TypeVar("_Func")

async def _check_request_resolves(request: Request, path: str) -> Tuple[bool, Request]:
    alt_request = request.clone(rel_url=path)

match_info = await request.app.router.resolve(alt_request)
    alt_request._match_info = match_info

if match_info.http_exception is None:
        return True, alt_request

return False, request

def middleware(f: _Func) -> _Func:
    f.__middleware_version__ = 1  # type: ignore[attr-defined]
    return f

def normalize_path_middleware(
    *,
    append_slash: bool = True,
    remove_slash: bool = False,
    merge_slashes: bool = True,
    redirect_class: Type[HTTPMove] = HTTPPermanentRedirect,
) -> Middleware:
    """Factory for producing a middleware that normalizes the path of a request.

Normalizing means:
        - Add or remove a trailing slash to the path.
        - Double slashes are replaced by one.

The middleware returns as soon as it finds a path that resolves
    correctly. The order if both merge and append/remove are enabled is
        1) merge slashes
        2) append/remove slash
        3) both merge slashes and append/remove slash.
    If the path resolves with at least one of those conditions, it will
    redirect to the new path.

Only one of `append_slash` and `remove_slash` can be enabled. If both
    are `True` the factory will raise an assertion error

If `append_slash` is `True` the middleware will append a slash when
    needed. If a resource is defined with trailing slash and the request
    comes without it, it will append it automatically.

If `remove_slash` is `True`, `append_slash` must be `False`. When enabled
    the middleware will remove trailing slashes and redirect if the resource
    is defined

If merge_slashes is True, merge multiple consecutive slashes in the
    path into one.
    """
    correct_configuration = not (append_slash and remove_slash)
    assert correct_configuration, "Cannot both remove and append slash"

@middleware
    async def impl(request: Request, handler: Handler) -> StreamResponse:
        if isinstance(request.match_info.route, SystemRoute):
            paths_to_check = []
            if "?" in request.raw_path:
                path, query = request.raw_path.split("?", 1)
                query = "?" + query
            else:
                query = ""
                path = request.raw_path

if merge_slashes:
                paths_to_check.append(re.sub("//+", "/", path))
            if append_slash and not request.path.endswith("/"):
                paths_to_check.append(path + "/")
            if remove_slash and request.path.endswith("/"):
                paths_to_check.append(path[:-1])
            if merge_slashes and append_slash:
                paths_to_check.append(re.sub("//+", "/", path + "/"))
            if merge_slashes and remove_slash:
                merged_slashes = re.sub("//+", "/", path)
                paths_to_check.append(merged_slashes[:-1])

for path in paths_to_check:
                path = re.sub("^//+", "/", path)  # SECURITY: GHSA-v6wp-4m6f-gcjg
                resolves, request = await _check_request_resolves(request, path)
                if resolves:
                    raise redirect_class(request.raw_path + query)

return await handler(request)

return impl

def _fix_request_current_app(app: "Application") -> Middleware:
    @middleware
    async def impl(request: Request, handler: Handler) -> StreamResponse:
        with request.match_info.set_current_app(app):
            return await handler(request)

return impl