WwgiDdZddlZddlmZddlmZddlmZmZddlm Z ddl m Z m Z m Z mZdd lmZdd lmZdd l mZmZgd Zed GddZGdde j.Zed GddZed GddZdej6defdZdddddddd ddedeedeee j>d ee j@d!ed"eed#eed$ejBfd%Z"y)&zO Utility classes for handling embedded files in PDFs. .. versionadded:: 0.7.0 N) dataclass)datetime)ListOptional)x509)cryptgenericmiscwriter)RecipientEncryptionPolicy) get_courier)pdf_name pdf_string) embed_fileEmbeddedFileObjectEmbeddedFileParamsFileSpecRelatedFileSpecwrap_encrypted_payloadT)frozencXeZdZUdZeed< dZeed< dZee ed< dZ ee ed<y)rT embed_sizeembed_checksumN creation_datemodification_date) __name__ __module__ __qualname__rbool__annotations__rrrrrN/var/www/horilla/myenv/lib/python3.12/site-packages/pyhanko/pdf_utils/embed.pyrrsOJ ND)-M8H%,-1x)0r#rc eZdZe d dej dedeedee ddf dZ d dej deedee ffd Z d fd Z xZ S) r pdf_writerdataparams mime_typereturncHt||||}|r|j|S)a Construct an embedded file object from file data. This is a very thin wrapper around the constructor, with a slightly less intimidating API. .. note:: This method will not register the embedded file into the document's embedded file namespace, see :func:`.embed_file`. :param pdf_writer: PDF writer to use. :param data: File contents, as a :class:`bytes` object. :param compress: Whether to compress the embedded file's contents. :param params: Optional embedded file parameters. :param mime_type: Optional MIME type string. :return: An embedded file object. )r& stream_datar(r))rcompress)clsr&r'r-r(r)results r$from_file_dataz!EmbeddedFileObject.from_file_data?s/B$!    OO  r#ct|||||jtjd|d<|tjd|z|d<|j ||_||_y)N) dict_datar, encoded_datahandlerz /EmbeddedFile/Type/z/Subtype)super__init__security_handlerr r add_object ef_stream_refr()selfr&r2r,r3r(r) __class__s r$r8zEmbeddedFileObject.__init__ksx #%//   ((9W  &//i@D '2248 r#c|H|js<|j}|j}|j}|||k7r|j ||j }|t jx|d<}|jr+t jt|j|d<|jrEtj|jj} t j | |d<|j""t j$|j"|d<|j&"t j$|j&|d<t( |U|||y)Nz/Paramsz/Sizez /CheckSumz /CreationDatez/ModDate)r4 container_ref)_has_crypt_filtercrypt_filter_configembedded_file_filter_namestream_filter_nameadd_crypt_filterr(r DictionaryObjectr NumberObjectlenr'rhashlibmd5digestByteStringObjectrpdf_daterr7write_to_stream) r<streamr4r?cfcef_filter_namerCr( param_dictchecksumr=s r$rMz"EmbeddedFileObject.write_to_streamsJ  t'='=--C ::N!$!7!7 *"&88%%n5  +2+C+C+E EDOj  &-&:&:3tyy>&J 7#$$";;tyy188:*1*B*B8*L ;'##/.5.>.>((/ ?+''3)0)9)9,,* :&  G=  r#)TNN)NNNNN)NN)rrr classmethodr BasePdfFileWriterbytesrrstrr0r8rM __classcell__)r=s@r$rr>s /3#' ),,)) +, ) C= ) ))\/3#',, +, C=*" " r#rcFeZdZUdZeed< eed< ededfdZ y)rz= Dataclass modelling a RelatedFile construct in PDF. name embedded_datalstcBfd}tj|S)Nc3KD];}tj|j|jj=yw)N)r rrYrZr;)rfsr[s r$_genz/RelatedFileSpec.fmt_related_files.._gens= 6((22''555 6sAA)r ArrayObject)r.r[r_s ` r$fmt_related_filesz!RelatedFileSpec.fmt_related_filess 6 ""46**r#N) rrr__doc__rVr!rrSrrar"r#r$rrsA I&% +D):$;++r#rceZdZUdZeed< dZeeed< dZee ed< dZ eeed< dZ ee jed< dZeeeed< dZeeeed < d e j$fd Zy) rzD Dataclass modelling an embedded file description in a PDF. file_spec_stringN file_namerZ descriptionaf_relationshipf_related_filesuf_related_filesr*c,tjtdtdtdt|ji}|j t|j |d<|j ^tjtd|j jix|d<}|j |j j|d<|j"tj|j|d<|j|j|d<|j}|j}|s|rYtjx|d<}|rtj||d<|r$|j tj||d<|S) z> Represent the file spec as a PDF dictionary. r5z /Filespecz/Fz/UFz/EFz/Descz/AFRelationshipz/RF)r rErrrdrerZr;rfTextStringObjectrgrhrirra)r<r/ef_dict f_related uf_relatedrfs r$ as_pdf_objectzFileSpec.as_pdf_objectsm ))!8K#8 4+@+@ A   >> %&t~~6F5M    )&-&>&>TND$6$6$D$D' F5MG ~~)!%!3!3!A!A    '%66t7G7GHF7O    +(,(<(|jAd}tjB| jE|d|}| jG|| S)a| Include a PDF document as an encrypted attachment in a wrapper document. This function sets certain flags in the wrapper document's collection dictionary to instruct compliant PDF viewers to display the attachment instead of the wrapping document. Viewers that do not fully support PDF collections will display a landing page instead, explaining how to open the attachment manually. Using this method mitigates some weaknesses in the PDF standard's encryption provisions, and makes it harder to manipulate the encrypted attachment without knowing the encryption key. .. danger:: Until PDF supports authenticated encryption mechanisms, this is a mitigation strategy, not a foolproof defence mechanism. .. warning:: While users of viewers that do not support PDF collections can still open the attached file manually, the viewer still has to support PDF files where only the attachments are encrypted. .. note:: This is not quite the same as the "unencrypted wrapper document" pattern discussed in the PDF 2.0 specification. The latter is intended to support nonstandard security handlers. This function uses a standard security handler on the wrapping document to encrypt the attachment as a binary blob. Moreover, the functionality in this function is available in PDF 1.7 viewers as well. :param plaintext_payload: The plaintext payload (a binary representation of a PDF document). :param security_handler: The security handler to use on the wrapper document. If ``None``, a security handler will be constructed based on the ``password`` or ``certs`` parameter. :param password: Password to encrypt the attachment with. Will be ignored if ``security_handler`` is provided. :param certs: Encrypt the file using PDF public-key encryption, targeting the keys in the provided certificates. Will be ignored if ``security_handler`` is provided. :param file_spec_string: PDFDocEncoded file spec string for the attachment. :param params: Embedded file parameters to use. :param file_name: Unicode file name for the attachment. :param description: Description for the attachment :param include_explanation_page: If ``False``, do not generate an explanation page in the wrapper document. This setting could be useful if you want to customise the wrapper document's behaviour yourself. :return: A :class:`~writer.PdfFileWriter` representing the wrapper document. NzSIf 'security_handler' is not provided, exactly one of 'password' or 'cert' must be. F)keylenacts_as_defaultencrypt_metadata)default_file_filter)rupubkey_handler_subfilter legacy_keylenrrA)policy)r)rArz /Collectionr5z/Dz/Hz/Viewzapplication/pdf)r'r)r()rdrerZrfz/Fontz/F1a BT /F1 10 Tf 10 830 Td 12 TL (This document is a wrapper for an encrypted attachment.) ' (Your viewer should prompt for a password and ) ' (open the attached file automatically.) Tj (If not, navigate to the attached document manually.) ' T* (In addition, your viewer must support encryption ) ' (scoped to embedded files.) Tj ET latin1)r,)rrg ףp=@gQO@)contents media_box resources)$r PdfFileWriter ValueErrorr PubKeyAESCryptFilterset_embedded_onlyPubKeySecurityHandlerSecurityHandlerVersionAES256PubKeyAdbeSubFilterS5CryptFilterConfigurationDEF_EMBEDDED_FILEadd_recipientsr StandardAESCryptFilterStandardSecurityHandler build_from_pwSTD_CF_assign_security_handlerr rErxrrkrr0rrrr StreamObjectencode PageObjectr: insert_page)rrrr9rdr(rerfrw pubkey_cfstd_cfcollection_dictef_objrrrstream_contentrNexplanation_pages r$rrgsN A  %4- 0?   $ $$2255I  ' ' )$::44;;).)B)B)E)E"!&$)$B$B,,i8(-(?(?%    $ $U3L3N $ O11rsg !!**3#)  $@d --d N $+++< $ZZZzB9633B98B9P#.28<,+/#"!f f smf  D))* + f u445 f  f  ' (f }f  f r#