| 1 | from django.core.exceptions import Http404, ImproperlyConfigured |
|---|
| 2 | from django.utils.httpwrappers import HttpResponse |
|---|
| 3 | from django.conf import settings |
|---|
| 4 | import os |
|---|
| 5 | import posixpath |
|---|
| 6 | import urllib |
|---|
| 7 | import mimetypes |
|---|
| 8 | |
|---|
| 9 | def list_directory(path, fullpath): |
|---|
| 10 | files = os.listdir(fullpath) |
|---|
| 11 | response = """ |
|---|
| 12 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> |
|---|
| 13 | <html> |
|---|
| 14 | <head> |
|---|
| 15 | <title>Index of %s/</title> |
|---|
| 16 | </head> |
|---|
| 17 | <body> |
|---|
| 18 | <h1>Index of %s/</h1> |
|---|
| 19 | <pre> |
|---|
| 20 | """ % (path, path) |
|---|
| 21 | for f in files: |
|---|
| 22 | if os.path.isdir(os.path.join(fullpath, f)): |
|---|
| 23 | f += '/' |
|---|
| 24 | response += '<a href="%s">%s</a>\n' % (f, f) |
|---|
| 25 | |
|---|
| 26 | response += """ |
|---|
| 27 | </pre> |
|---|
| 28 | </body> |
|---|
| 29 | </html> |
|---|
| 30 | """ |
|---|
| 31 | return response |
|---|
| 32 | |
|---|
| 33 | |
|---|
| 34 | def serve(request, path): |
|---|
| 35 | if not hasattr(settings, 'DOCUMENT_ROOT'): |
|---|
| 36 | raise ImproperlyConfigured, "DOCUMENT_ROOT not set in settings file" |
|---|
| 37 | |
|---|
| 38 | # Clean up path given in URL. |
|---|
| 39 | # Algorithm taken from SimpleHTTPServer.translate_path() |
|---|
| 40 | # Should only allow files below DOCUMENT_ROOT to be accessed. |
|---|
| 41 | path = posixpath.normpath(urllib.unquote(path)) |
|---|
| 42 | parts = path.split('/') |
|---|
| 43 | parts = filter(None, parts) |
|---|
| 44 | path = "" |
|---|
| 45 | for part in parts: |
|---|
| 46 | drive, part = os.path.splitdrive(part) |
|---|
| 47 | head, part = os.path.split(part) |
|---|
| 48 | if part in (os.curdir, os.pardir): continue # Strip off . and .. |
|---|
| 49 | path = os.path.join(path, part) |
|---|
| 50 | |
|---|
| 51 | fullpath = os.path.join(settings.DOCUMENT_ROOT, path) |
|---|
| 52 | try: |
|---|
| 53 | if os.path.isdir(fullpath): |
|---|
| 54 | response = HttpResponse(list_directory(path, fullpath), |
|---|
| 55 | mimetype="text/html") |
|---|
| 56 | else: |
|---|
| 57 | mimetype = mimetypes.guess_type(fullpath)[0] |
|---|
| 58 | f = open(fullpath) |
|---|
| 59 | response = HttpResponse(f.read(), mimetype=mimetype) |
|---|
| 60 | f.close() |
|---|
| 61 | |
|---|
| 62 | return response |
|---|
| 63 | except IOError: |
|---|
| 64 | raise Http404 |
|---|