{script}"""
class ToolsFileBrowser(SimpleHTTPRequestHandler):
BLOCKED_NAMES = {'__pycache__', 'node_modules'}
def is_safe_path(self, fs_path):
root = os.path.realpath(ROOT)
real = os.path.realpath(fs_path)
if real != root and not real.startswith(root + os.sep):
return False
rel = os.path.relpath(real, root)
if rel == '.':
return True
parts = rel.split(os.sep)
return not any(part.startswith('.') or part in self.BLOCKED_NAMES for part in parts)
def translate_path(self, path):
path = urllib.parse.urlparse(path).path
path = posixpath.normpath(urllib.parse.unquote(path))
words = [w for w in path.split('/') if w]
out = ROOT
for word in words:
if word in (os.curdir, os.pardir):
continue
out = os.path.join(out, word)
if not self.is_safe_path(out):
return None
return out
def do_GET(self):
parsed = urllib.parse.urlparse(self.path)
path = parsed.path
is_raw = 'raw' in urllib.parse.parse_qs(parsed.query)
if path in ('', '/'):
self.path = '/index.html'
return super().do_GET()
if path == '/browse':
self.send_response(301)
self.send_header('Location', '/browse/')
self.end_headers()
return
if path.startswith('/browse/'):
sub = path[len('/browse/'):]
fs_path = os.path.normpath(os.path.join(ROOT, urllib.parse.unquote(sub)))
if not self.is_safe_path(fs_path):
self.send_error(404, 'File not found')
return
if os.path.isdir(fs_path):
return self.show_directory(fs_path)
if os.path.isfile(fs_path):
if is_raw:
self.path = '/' + sub
return super().do_GET()
return self.serve_file(fs_path, path)
self.send_error(404, 'File not found')
return
fs_path = self.translate_path(path)
if fs_path is None:
self.send_error(404, 'File not found')
return
if os.path.isdir(fs_path):
index = os.path.join(fs_path, 'index.html')
if os.path.isfile(index):
if not path.endswith('/'):
self.send_response(301)
self.send_header('Location', path + '/')
self.end_headers()
return
self.path = path.rstrip('/') + '/index.html'
return super().do_GET()
return self.show_directory(fs_path)
if os.path.isfile(fs_path) and not is_raw:
return self.serve_file(fs_path, path)
return super().do_GET()
def serve_file(self, fs_path, url_path):
"""所有文件直接原始发送，用浏览器原生查看器。"""
if url_path.startswith('/browse/'):
self.path = '/' + url_path[len('/browse/'):]
else:
self.path = url_path
return super().do_GET()
def _send_html(self, body):
data = body.encode('utf-8')
self.send_response(200)
self.send_header('Content-Type', 'text/html; charset=utf-8')
self.send_header('Content-Length', str(len(data)))
self.end_headers()
self.wfile.write(data)
# ── 原有方法 ──────────────────────────────────────────────────
def end_headers(self):
if hasattr(self, '_headers_buffer'):
buf = []
for line in self._headers_buffer:
low = line.lower() if isinstance(line, bytes) else b''
if low.startswith(b'content-type:') and b'charset' not in low and (b'text/' in low or b'application/json' in low):
line = line.rstrip(b'\r\n') + b'; charset=utf-8\r\n'
buf.append(line)
self._headers_buffer = buf
super().end_headers()
def show_directory(self, path):
real = os.path.realpath(path)
root = os.path.realpath(ROOT)
if not self.is_safe_path(real):
self.send_error(404, 'File not found')
return None
try:
names = [
n for n in os.listdir(real)
if not n.startswith('.') and n not in self.BLOCKED_NAMES and self.is_safe_path(os.path.join(real, n))
]
except OSError:
self.send_error(404, 'No permission to list directory')
return None
names.sort(key=lambda n: (not os.path.isdir(os.path.join(real, n)), n.lower()))
rel = os.path.relpath(real, root)
if rel == '.': rel = ''
items = []
if rel:
parent = urllib.parse.quote(os.path.dirname(rel).replace(os.sep, '/'))
href = '/browse/' + (parent + '/' if parent and parent != '.' else '')
items.append(self.card(href, '📁', '../ 上级目录', '', is_dir=True))
else:
items.append(self.card('/', '🏠', '../ 返回工具箱主页', '', is_dir=True))
for name in names:
full = os.path.join(real, name)
url_rel = '/'.join([p for p in (rel.replace(os.sep, '/'), name) if p])
href = '/browse/' + urllib.parse.quote(url_rel) + ('/' if os.path.isdir(full) else '')
icon = '📁' if os.path.isdir(full) else self.icon(name)
size = '' if os.path.isdir(full) else self.size(os.path.getsize(full))
items.append(self.card(href, icon, name + ('/' if os.path.isdir(full) else ''), size, is_dir=os.path.isdir(full)))
body = PAGE.format(
title=html.escape(rel or '/'),
crumb=html.escape('/' + rel),
items=''.join(items) or '