U cc< @s|dZddlZddlmZddlmZmZmZmZddl m Z ddl m Z ddl mZmZmZddlmZmZd d lmZd d lmZmZmZmZd d lmZmZmZd d lm Z m!Z!m"Z"m#Z#d dl$m%Z%m&Z&d dl'm(Z(m)Z)e*e+Z,dddgZ-edddZ.GdddeZ/e/ee%0ej1e0ej1e0ej1e 0ej1e&0ej1gee"e#e!gddZ2e/gddZ3dS)zF Module defining pyHanko's standard difference policy implementation. N) defaultdict)IteratorListOptionalUnion)misc) PdfObject)HistoricalResolver PdfFileReader RawPdfPath) FieldMDPSpecMDPPerm)FormUpdatingRule) DiffPolicy DiffResultModificationLevelSuspiciousModification)CatalogModificationRuleObjectStreamRuleXrefStreamRule)DSSCompareRuleGenericFieldModificationRuleSigFieldCreationRuleSigFieldModificationRule) DocInfoRuleMetadataUpdateRule)QualifiedWhitelistRuleReferenceUpdateStandardDiffPolicyDEFAULT_DIFF_POLICYNO_CHANGES_DIFF_POLICY)hist_revcs}jjd}tt}|D]$}||rD||q*|q*ttdfdd }|}|rz t |}Wnt k rYqYnX|j |jd8}qn|S)za Within a revision, find new refs that can't be reached from refs in the older ones. r)returnc3s jVD]}|Vq dSN)Z trailer_view)_refr"Zupdated_old_refs]/var/www/html/project/venv/lib/python3.8/site-packages/pyhanko/sign/diff_analysis/policies.py_objs_to_checkQsz%_find_orphans.._objs_to_check)Zsince_revision) explicit_refs_in_revisionreaderget_historical_resolverrevisionsetZis_ref_availableaddrrnext StopIterationZcollect_dependencies)r"Znew_refspreviousZcandidate_orphansrefr)Zobj_iterobjr'r&r( _find_orphans0s(      r5c@szeZdZdZd eeeedddZde e ee ee e ddd Z deeee fee ee ee efd d d ZdS)raa Run a list of rules to analyse the differences between two revisions. :param global_rules: The :class:`.QualifiedWhitelistRule` objects encoding the rules to apply. :param form_rule: The :class:`.FormUpdatingRule` that adjudicates changes to form fields and their values. :param reject_object_freeing: Always fail revisions that free objects that existed prior to signing. .. note:: PyHanko resolves freed references to the ``null`` object in PDF, and a freeing instruction in a cross-reference section is always registered as a change that needs to be approved, regardless of the value of this setting. It is theoretically possible for a rule to permit deleting content, in which case allowing objects to be freed might be reasonable. That said, pyHanko takes the conservative default position to reject all object freeing instructions as suspect. :param ignore_orphaned_objects: Some PDF writers create objects that aren't used anywhere (tsk tsk). Since those don't affect the "actual" document content, they can usually be ignored. If ``True``, newly created orphaned objects will be cleared at level :attr:`.ModificationLevel.LTA_UPDATES`. Default is ``True``. T global_rules form_rulecCs||_||_||_||_dSr$)r7r8reject_object_freeingignore_orphaned_objects)selfr7r8r9r:r'r'r(__init__szStandardDiffPolicy.__init__N)oldnewfield_mdp_specdoc_mdpr#csj|tjkrtd|jr6|}|r6td|d|tt fdd}|j rxt |D]}t j |qbt|t tdfdd }|jD]$} | |D]\} } || | qqt } |jrj|j|} fd d }| D]x\} }|| ||j}|dk rH|jsH||r._init_multi_lut)_level_updcs|j}zb|\}}|jr"t}n$|jp*d}t|tr<|f}||t||}||f|<|rfWdSWntk r|YnX| |dS)Nr') updated_refZblanket_approver. paths_checked isinstancer difference_updatemaxKeyErrorr/)rErFr3Zcurrent_max_levelrBrH) explainedold_usages_to_clearr'r( ingest_refs        z,StandardDiffPolicy.apply..ingest_refcsdk o|Sr$) is_locked)Zfq_name)r?r'r(rPsz+StandardDiffPolicy.apply..is_lockedz Update of z' is not allowed because the form field z is locked.zL is only allowed after an approval signature, not a certification signature. css.|]&}dt|t|ddfVqdS)z%s:%s...Ni,)reprZ get_object.0xr'r'r( s z+StandardDiffPolicy.apply..z$Unexplained xrefs in revision %d: %sc Ss>g|]6\}\}}|rdt|dddd|DdqS)z - z is also used at , css|]}t|VqdSr$)str)rTpr'r'r(rVsz6StandardDiffPolicy.apply...z in the prior revision.)rRjoin)rTr3_Zpaths_remainingr'r'r( s z,StandardDiffPolicy.apply..z(There are unexplained xrefs in revision z: rWcss|]}t|VqdSr$)rRrSr'r'r(rV s.zSome objects from revision z were replaced in revision z without precise justification: z%s %s)modification_levelchanged_form_fields)"r ZANNOTATEloggerwarningr9Zrefs_freed_in_revisionrr*rr.r:r5r LTA_UPDATESr/dictrr7Zapply_qualifiedr8apply field_nameZvalid_when_lockedrGZvalid_when_certifyingZ FORM_FILLINGZ ANNOTATIONSrZLazyJoindebugr-itemsrZr)r;r=r>r?r@ZfreedrDr%rOrulelevelZupdr_Z form_changesrPZfureZunexplained_ltaZunexplained_formfillZunexplained_annotmsgZunexplained_overrideserr_msgZunchecked_paths_msgr')rMr?rCr=rNr(rds             "   zStandardDiffPolicy.apply)r+ base_revisionr?r@r#c Cst}|jj}tj}t|tr*||}n |}|j}t |d|D]} z|j ||| ||d} WnHt k r} z*t j d|d| | d| WYSd} ~ XYnXt|| j}|| jO}qBt||S)z Implementation of :meth:`.DiffPolicy.review_file` that reviews each intermediate revision between the base revision and the current one individually. r)r=r>r?r@z)Error in diff operation between revision z and )exc_infoN)r.ZxrefsZtotal_revisionsrrArIintr,r-rangerdrr`rarKr^r_r) r;r+rlr?r@r_Z rev_countZ current_maxZbase_rev_resolverr-Z diff_resulter'r'r( review_file#s4     zStandardDiffPolicy.review_file)TT)NN)NN)__name__ __module__ __qualname____doc__rrrrr<r r r rrdr rrnrrqr'r'r'r(rds,     )Z field_rulesr6)4rulogging collectionsrtypingrrrrZpyhanko.pdf_utilsrZpyhanko.pdf_utils.genericrZpyhanko.pdf_utils.readerr r r Zpyhanko.sign.fieldsr r Zform_rules_apirZ policy_apirrrrZrules.file_structure_rulesrrrZrules.form_field_rulesrrrrZrules.metadata_rulesrrZ rules_apirr getLoggerrrr`__all__r5rZ as_qualifiedrbr r!r'r'r'r(sL     4x     %