\c,{un z f qI6n1ВJ P>5K _Ni-@x~f<#ZonEfDIJ6Cy~gUYcN3ga2 @ˀ}X1,09 9]NxrB V䨮 !AI,2HN 3- G{爬H;PǻzuO4 hl#24;7uDAVe.Yu+J5^}`^LM^m)Yϡq,}"JjsU)qfMNHPf k\  Y UI{tne.pݩ$-j i#3 כim>sB]9[\N0vҕ[Gr!6j_R)h$d)oN _޴=J̃GӜ8̈́$sP]m`^U>VځÁlGGv{ewFePH=]*wwGjtQw X?_WiH#V¨]R|(\Zd HfDUan{  =kE&˕, @0+tG@͸Ā sJ&UbOӀUA+?ۢA:[ܝg%!hb%OvR 0Q=yz#[Ua98Xz&; T݂$!|?i=c"Mޏ<ثEZB?d!#B|7ݜ2Rs]#V)u# tSU-2A@ۑwp r\?t`XFS۔%;5sy|Oweu!~[aU?2r! vV3fSnUAϭ҂.$}|?Y;QO`͖*R$Rmp==|c&謍hC ܼ.DN3jJ{* ᄸ4a7WW@b' Gj F\ '% z-ُ@U`]9y|9z1>/Axp8>>=Mɭv˛ mPpmTHG[V==2ɚڰPu,ll,i8@듗}bbcu,Vi;?WmX*[/HӚ)\*  6QvZ؇Vk."7V Q񘖊 $,…4ғ |Ǩ|zuv8xRzF~f불e1p;sc}++E"}¾.cqsLL?`(~Ѳ@,a'k|WTM(N4C{LCE}v-CJ<wm`4Hs(λ參B|Jh<~ eMhz7 eR=co<'=coП Q.D= ξ@Ԙȣt@]ɕn$UUٽ r5+`>|:f+f24w %8&'uȧlNp] zɺ+z?EqŦB0l`>ukSMJ*P% z1&-|;SUL\ ި>i"FHt<ƺ|>)4Ul3<ޓN{*fnX09+AS^:N }fW䈽k3S*wsj2RV 蓗^.oy8 ~fӓjѤ͜,|-(h4#l9YOg.urJOM70YW>;q>mf.]vիO|R\;y +N#D@`)7m0&u0zlGx!>n<9`:(I'Vl6I2Q6*lYqUPU]n#إn+SC߫yyi.㦚O`{~=#s*l0d-Rc)ЬX5hx@-[ ~_!ƕh~N6Sa"ϭoyžҾQW?aXy=á7{jK{%\"o -uJ@2NSLWaOJ"-])fKF"Go&Rp:Kx`\3d>B!/_}CA>9jO+W16zԳT@m(~IVxDZն)]ut%9}݋w)3bp˄r]pIlZ@C'}Pbjڻ }jwq6[Tj^Z8_\<5}'(_ݞt;a* 6IЌG_˰nE 61)GNY9pz[NRk3)j?t[)rbgWť72yJ\18_G9U|$"?s'%X`=ElO4 L5tY3nK2dj@Qn24)5.&!,B;80n\3撉2)W0Z3bp˄{S¥62J4&YB|p~Ro ٢M&1 *DJkB$ <%Dh3`Jr ZLT\߹AJڈe2];\qtH8ȡ"/k0 {-Sxtoqo_c*QBrZc_BlQ5W7k6w:.5}A{} result['name'] = urllib.unquote(fieldStorage.filename) result['type'] = fieldStorage.type result['size'] = self.get_file_size(fieldStorage.file) if self.validate(result): key, thumbnail_key = self.write_blob( fieldStorage.value, result ) if key is not None: result['url'] = self.request.host_url + '/' + key result['deleteUrl'] = result['url'] result['deleteType'] = 'DELETE' if thumbnail_key is not None: result['thumbnailUrl'] = self.request.host_url +\ '/' + thumbnail_key else: result['error'] = 'Failed to store uploaded file.' results.append(result) return results def head(self): pass def get(self): self.redirect(WEBSITE) def post(self): if (self.request.get('_method') == 'DELETE'): return self.delete() result = {'files': self.handle_upload()} s = self.json_stringify(result) redirect = self.request.get('redirect') if self.validate_redirect(redirect): return self.redirect(str( redirect.replace('%s', urllib.quote(s, ''), 1) )) if 'application/json' in self.request.headers.get('Accept'): self.response.headers['Content-Type'] = 'application/json' self.response.write(s) class FileHandler(CORSHandler): def normalize(self, str): return urllib.quote(urllib.unquote(str), '') def get(self, content_type, data_hash, file_name): content_type = self.normalize(content_type) file_name = self.normalize(file_name) key = content_type + '/' + data_hash + '/' + file_name data = memcache.get(key) if data is None: return self.error(404) # Prevent browsers from MIME-sniffing the content-type: self.response.headers['X-Content-Type-Options'] = 'nosniff' content_type = urllib.unquote(content_type) if not IMAGE_TYPES.match(content_type): # Force a download dialog for non-image types: content_type = 'application/octet-stream' elif file_name.endswith(THUMB_SUFFIX): content_type = 'image/png' self.response.headers['Content-Type'] = content_type # Cache for the expiration time: self.response.headers['Cache-Control'] = 'public,max-age=%d' \ % EXPIRATION_TIME self.response.write(data) def delete(self, content_type, data_hash, file_name): content_type = self.normalize(content_type) file_name = self.normalize(file_name) key = content_type + '/' + data_hash + '/' + file_name result = {key: memcache.delete(key)} content_type = urllib.unquote(content_type) if IMAGE_TYPES.match(content_type): thumbnail_key = key + THUMB_SUFFIX result[thumbnail_key] = memcache.delete(thumbnail_key) if 'application/json' in self.request.headers.get('Accept'): self.response.headers['Content-Type'] = 'application/json' s = self.json_stringify(result) self.response.write(s) app = webapp2.WSGIApplication( [ ('/', UploadHandler), ('/(.+)/([^/]+)/([^/]+)', FileHandler) ], debug=DEBUG )