utils.txt 41 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173
  1. ============
  2. Django Utils
  3. ============
  4. .. module:: django.utils
  5. :synopsis: Django's built-in utilities.
  6. This document covers all stable modules in ``django.utils``. Most of the
  7. modules in ``django.utils`` are designed for internal use and only the
  8. following parts can be considered stable and thus backwards compatible as per
  9. the :ref:`internal release deprecation policy <internal-release-deprecation-policy>`.
  10. ``django.utils.cache``
  11. ======================
  12. .. module:: django.utils.cache
  13. :synopsis: Helper functions for controlling caching.
  14. This module contains helper functions for controlling caching. It does so by
  15. managing the ``Vary`` header of responses. It includes functions to patch the
  16. header of response objects directly and decorators that change functions to do
  17. that header-patching themselves.
  18. For information on the ``Vary`` header, see :rfc:`2616#section-14.44` section
  19. 14.44.
  20. Essentially, the ``Vary`` HTTP header defines which headers a cache should take
  21. into account when building its cache key. Requests with the same path but
  22. different header content for headers named in ``Vary`` need to get different
  23. cache keys to prevent delivery of wrong content.
  24. For example, :doc:`internationalization </topics/i18n/index>` middleware would
  25. need to distinguish caches by the ``Accept-language`` header.
  26. .. function:: patch_cache_control(response, **kwargs)
  27. This function patches the ``Cache-Control`` header by adding all keyword
  28. arguments to it. The transformation is as follows:
  29. * All keyword parameter names are turned to lowercase, and underscores
  30. are converted to hyphens.
  31. * If the value of a parameter is ``True`` (exactly ``True``, not just a
  32. true value), only the parameter name is added to the header.
  33. * All other parameters are added with their value, after applying
  34. ``str()`` to it.
  35. .. function:: get_max_age(response)
  36. Returns the max-age from the response Cache-Control header as an integer
  37. (or ``None`` if it wasn't found or wasn't an integer).
  38. .. function:: patch_response_headers(response, cache_timeout=None)
  39. Adds some useful headers to the given ``HttpResponse`` object:
  40. * ``ETag``
  41. * ``Last-Modified``
  42. * ``Expires``
  43. * ``Cache-Control``
  44. Each header is only added if it isn't already set.
  45. ``cache_timeout`` is in seconds. The :setting:`CACHE_MIDDLEWARE_SECONDS`
  46. setting is used by default.
  47. .. function:: add_never_cache_headers(response)
  48. Adds a ``Cache-Control: max-age=0, no-cache, no-store, must-revalidate``
  49. header to a response to indicate that a page should never be cached.
  50. .. versionchanged:: 1.9
  51. Before Django 1.9, ``Cache-Control: max-age=0`` was sent. This didn't
  52. reliably prevent caching in all browsers.
  53. .. function:: patch_vary_headers(response, newheaders)
  54. Adds (or updates) the ``Vary`` header in the given ``HttpResponse`` object.
  55. ``newheaders`` is a list of header names that should be in ``Vary``.
  56. Existing headers in ``Vary`` aren't removed.
  57. .. function:: get_cache_key(request, key_prefix=None)
  58. Returns a cache key based on the request path. It can be used in the
  59. request phase because it pulls the list of headers to take into account
  60. from the global path registry and uses those to build a cache key to
  61. check against.
  62. If there is no headerlist stored, the page needs to be rebuilt, so this
  63. function returns ``None``.
  64. .. function:: learn_cache_key(request, response, cache_timeout=None, key_prefix=None)
  65. Learns what headers to take into account for some request path from the
  66. response object. It stores those headers in a global path registry so that
  67. later access to that path will know what headers to take into account
  68. without building the response object itself. The headers are named in
  69. the ``Vary`` header of the response, but we want to prevent response
  70. generation.
  71. The list of headers to use for cache key generation is stored in the same
  72. cache as the pages themselves. If the cache ages some data out of the
  73. cache, this just means that we have to build the response once to get at
  74. the Vary header and so at the list of headers to use for the cache key.
  75. ``django.utils.dateparse``
  76. ==========================
  77. .. module:: django.utils.dateparse
  78. :synopsis: Functions to parse datetime objects.
  79. The functions defined in this module share the following properties:
  80. - They raise :exc:`ValueError` if their input is well formatted but isn't a
  81. valid date or time.
  82. - They return ``None`` if it isn't well formatted at all.
  83. - They accept up to picosecond resolution in input, but they truncate it to
  84. microseconds, since that's what Python supports.
  85. .. function:: parse_date(value)
  86. Parses a string and returns a :class:`datetime.date`.
  87. .. function:: parse_time(value)
  88. Parses a string and returns a :class:`datetime.time`.
  89. UTC offsets aren't supported; if ``value`` describes one, the result is
  90. ``None``.
  91. .. function:: parse_datetime(value)
  92. Parses a string and returns a :class:`datetime.datetime`.
  93. UTC offsets are supported; if ``value`` describes one, the result's
  94. ``tzinfo`` attribute is a :class:`~django.utils.timezone.FixedOffset`
  95. instance.
  96. .. function:: parse_duration(value)
  97. .. versionadded:: 1.8
  98. Parses a string and returns a :class:`datetime.timedelta`.
  99. Expects data in the format ``"DD HH:MM:SS.uuuuuu"`` or as specified by ISO
  100. 8601 (e.g. ``P4DT1H15M20S`` which is equivalent to ``4 1:15:20``).
  101. ``django.utils.decorators``
  102. ===========================
  103. .. module:: django.utils.decorators
  104. :synopsis: Functions that help with creating decorators for views.
  105. .. function:: method_decorator(decorator, name='')
  106. Converts a function decorator into a method decorator. It can be used to
  107. decorate methods or classes; in the latter case, ``name`` is the name
  108. of the method to be decorated and is required.
  109. ``decorator`` may also be a a list or tuple of functions. They are wrapped
  110. in reverse order so that the call order is the order in which the functions
  111. appear in the list/tuple.
  112. See :ref:`decorating class based views <decorating-class-based-views>` for
  113. example usage.
  114. .. versionchanged:: 1.9
  115. The ability to decorate classes, the ``name`` parameter, and the ability
  116. for ``decorator`` to accept a list/tuple of decorator functions were
  117. added.
  118. .. function:: decorator_from_middleware(middleware_class)
  119. Given a middleware class, returns a view decorator. This lets you use
  120. middleware functionality on a per-view basis. The middleware is created
  121. with no params passed.
  122. .. function:: decorator_from_middleware_with_args(middleware_class)
  123. Like ``decorator_from_middleware``, but returns a function
  124. that accepts the arguments to be passed to the middleware_class.
  125. For example, the :func:`~django.views.decorators.cache.cache_page`
  126. decorator is created from the ``CacheMiddleware`` like this::
  127. cache_page = decorator_from_middleware_with_args(CacheMiddleware)
  128. @cache_page(3600)
  129. def my_view(request):
  130. pass
  131. ``django.utils.encoding``
  132. =========================
  133. .. module:: django.utils.encoding
  134. :synopsis: A series of helper functions to manage character encoding.
  135. .. function:: python_2_unicode_compatible
  136. A decorator that defines ``__unicode__`` and ``__str__`` methods under
  137. Python 2. Under Python 3 it does nothing.
  138. To support Python 2 and 3 with a single code base, define a ``__str__``
  139. method returning text and apply this decorator to the class.
  140. .. function:: smart_text(s, encoding='utf-8', strings_only=False, errors='strict')
  141. Returns a text object representing ``s`` -- ``unicode`` on Python 2 and
  142. ``str`` on Python 3. Treats bytestrings using the ``encoding`` codec.
  143. If ``strings_only`` is ``True``, don't convert (some) non-string-like
  144. objects.
  145. .. function:: smart_unicode(s, encoding='utf-8', strings_only=False, errors='strict')
  146. Historical name of :func:`smart_text`. Only available under Python 2.
  147. .. function:: is_protected_type(obj)
  148. Determine if the object instance is of a protected type.
  149. Objects of protected types are preserved as-is when passed to
  150. ``force_text(strings_only=True)``.
  151. .. function:: force_text(s, encoding='utf-8', strings_only=False, errors='strict')
  152. Similar to ``smart_text``, except that lazy instances are resolved to
  153. strings, rather than kept as lazy objects.
  154. If ``strings_only`` is ``True``, don't convert (some) non-string-like
  155. objects.
  156. .. function:: force_unicode(s, encoding='utf-8', strings_only=False, errors='strict')
  157. Historical name of :func:`force_text`. Only available under Python 2.
  158. .. function:: smart_bytes(s, encoding='utf-8', strings_only=False, errors='strict')
  159. Returns a bytestring version of ``s``, encoded as specified in
  160. ``encoding``.
  161. If ``strings_only`` is ``True``, don't convert (some) non-string-like
  162. objects.
  163. .. function:: force_bytes(s, encoding='utf-8', strings_only=False, errors='strict')
  164. Similar to ``smart_bytes``, except that lazy instances are resolved to
  165. bytestrings, rather than kept as lazy objects.
  166. If ``strings_only`` is ``True``, don't convert (some) non-string-like
  167. objects.
  168. .. function:: smart_str(s, encoding='utf-8', strings_only=False, errors='strict')
  169. Alias of :func:`smart_bytes` on Python 2 and :func:`smart_text` on Python
  170. 3. This function returns a ``str`` or a lazy string.
  171. For instance, this is suitable for writing to :data:`sys.stdout` on
  172. Python 2 and 3.
  173. .. function:: force_str(s, encoding='utf-8', strings_only=False, errors='strict')
  174. Alias of :func:`force_bytes` on Python 2 and :func:`force_text` on Python
  175. 3. This function always returns a ``str``.
  176. .. function:: iri_to_uri(iri)
  177. Convert an Internationalized Resource Identifier (IRI) portion to a URI
  178. portion that is suitable for inclusion in a URL.
  179. This is the algorithm from section 3.1 of :rfc:`3987#section-3.1`. However,
  180. since we are assuming input is either UTF-8 or unicode already, we can
  181. simplify things a little from the full method.
  182. Takes an IRI in UTF-8 bytes and returns ASCII bytes containing the encoded
  183. result.
  184. .. function:: uri_to_iri(uri)
  185. .. versionadded:: 1.8
  186. Converts a Uniform Resource Identifier into an Internationalized Resource
  187. Identifier.
  188. This is an algorithm from section 3.2 of :rfc:`3987#section-3.2`.
  189. Takes a URI in ASCII bytes and returns a unicode string containing the
  190. encoded result.
  191. .. function:: filepath_to_uri(path)
  192. Convert a file system path to a URI portion that is suitable for inclusion
  193. in a URL. The path is assumed to be either UTF-8 or unicode.
  194. This method will encode certain characters that would normally be
  195. recognized as special characters for URIs. Note that this method does not
  196. encode the ' character, as it is a valid character within URIs. See
  197. ``encodeURIComponent()`` JavaScript function for more details.
  198. Returns an ASCII string containing the encoded result.
  199. .. function:: escape_uri_path(path)
  200. .. versionadded:: 1.8
  201. Escapes the unsafe characters from the path portion of a Uniform Resource
  202. Identifier (URI).
  203. ``django.utils.feedgenerator``
  204. ==============================
  205. .. module:: django.utils.feedgenerator
  206. :synopsis: Syndication feed generation library -- used for generating RSS, etc.
  207. Sample usage::
  208. >>> from django.utils import feedgenerator
  209. >>> feed = feedgenerator.Rss201rev2Feed(
  210. ... title="Poynter E-Media Tidbits",
  211. ... link="http://www.poynter.org/column.asp?id=31",
  212. ... description="A group Weblog by the sharpest minds in online media/journalism/publishing.",
  213. ... language="en",
  214. ... )
  215. >>> feed.add_item(
  216. ... title="Hello",
  217. ... link="http://www.holovaty.com/test/",
  218. ... description="Testing."
  219. ... )
  220. >>> with open('test.rss', 'w') as fp:
  221. ... feed.write(fp, 'utf-8')
  222. For simplifying the selection of a generator use ``feedgenerator.DefaultFeed``
  223. which is currently ``Rss201rev2Feed``
  224. For definitions of the different versions of RSS, see:
  225. http://web.archive.org/web/20110718035220/http://diveintomark.org/archives/2004/02/04/incompatible-rss
  226. .. function:: get_tag_uri(url, date)
  227. Creates a TagURI.
  228. See http://web.archive.org/web/20110514113830/http://diveintomark.org/archives/2004/05/28/howto-atom-id
  229. SyndicationFeed
  230. ---------------
  231. .. class:: SyndicationFeed
  232. Base class for all syndication feeds. Subclasses should provide write().
  233. .. method:: __init__(title, link, description, language=None, author_email=None, author_name=None, author_link=None, subtitle=None, categories=None, feed_url=None, feed_copyright=None, feed_guid=None, ttl=None, **kwargs)
  234. Initialize the feed with the given dictionary of metadata, which applies
  235. to the entire feed.
  236. Any extra keyword arguments you pass to ``__init__`` will be stored in
  237. ``self.feed``.
  238. All parameters should be Unicode objects, except ``categories``, which
  239. should be a sequence of Unicode objects.
  240. .. method:: add_item(title, link, description, author_email=None, author_name=None, author_link=None, pubdate=None, comments=None, unique_id=None, enclosure=None, categories=(), item_copyright=None, ttl=None, updateddate=None, enclosures=None, **kwargs)
  241. Adds an item to the feed. All args are expected to be Python ``unicode``
  242. objects except ``pubdate`` and ``updateddate``, which are ``datetime.datetime``
  243. objects, ``enclosure``, which is an ``Enclosure`` instance, and
  244. ``enclosures``, which is a list of ``Enclosure`` instances.
  245. .. deprecated:: 1.9
  246. The ``enclosure`` keyword argument is deprecated in favor of the
  247. new ``enclosures`` keyword argument which accepts a list of
  248. ``Enclosure`` objects.
  249. .. method:: num_items()
  250. .. method:: root_attributes()
  251. Return extra attributes to place on the root (i.e. feed/channel)
  252. element. Called from ``write()``.
  253. .. method:: add_root_elements(handler)
  254. Add elements in the root (i.e. feed/channel) element.
  255. Called from ``write()``.
  256. .. method:: item_attributes(item)
  257. Return extra attributes to place on each item (i.e. item/entry)
  258. element.
  259. .. method:: add_item_elements(handler, item)
  260. Add elements on each item (i.e. item/entry) element.
  261. .. method:: write(outfile, encoding)
  262. Outputs the feed in the given encoding to ``outfile``, which is a
  263. file-like object. Subclasses should override this.
  264. .. method:: writeString(encoding)
  265. Returns the feed in the given encoding as a string.
  266. .. method:: latest_post_date()
  267. Returns the latest ``pubdate`` or ``updateddate`` for all items in the
  268. feed. If no items have either of these attributes this returns the
  269. current date/time.
  270. Enclosure
  271. ---------
  272. .. class:: Enclosure
  273. Represents an RSS enclosure
  274. RssFeed
  275. -------
  276. .. class:: RssFeed(SyndicationFeed)
  277. Rss201rev2Feed
  278. --------------
  279. .. class:: Rss201rev2Feed(RssFeed)
  280. Spec: http://cyber.law.harvard.edu/rss/rss.html
  281. RssUserland091Feed
  282. ------------------
  283. .. class:: RssUserland091Feed(RssFeed)
  284. Spec: http://backend.userland.com/rss091
  285. Atom1Feed
  286. ---------
  287. .. class:: Atom1Feed(SyndicationFeed)
  288. Spec: http://tools.ietf.org/html/rfc4287
  289. ``django.utils.functional``
  290. ===========================
  291. .. module:: django.utils.functional
  292. :synopsis: Functional programming tools.
  293. .. class:: cached_property(object, name)
  294. The ``@cached_property`` decorator caches the result of a method with a
  295. single ``self`` argument as a property. The cached result will persist
  296. as long as the instance does, so if the instance is passed around and the
  297. function subsequently invoked, the cached result will be returned.
  298. Consider a typical case, where a view might need to call a model's method
  299. to perform some computation, before placing the model instance into the
  300. context, where the template might invoke the method once more::
  301. # the model
  302. class Person(models.Model):
  303. def friends(self):
  304. # expensive computation
  305. ...
  306. return friends
  307. # in the view:
  308. if person.friends():
  309. ...
  310. And in the template you would have:
  311. .. code-block:: html+django
  312. {% for friend in person.friends %}
  313. Here, ``friends()`` will be called twice. Since the instance ``person`` in
  314. the view and the template are the same, ``@cached_property`` can avoid
  315. that::
  316. from django.utils.functional import cached_property
  317. @cached_property
  318. def friends(self):
  319. # expensive computation
  320. ...
  321. return friends
  322. Note that as the method is now a property, in Python code it will need to
  323. be invoked appropriately::
  324. # in the view:
  325. if person.friends:
  326. ...
  327. The cached value can be treated like an ordinary attribute of the instance::
  328. # clear it, requiring re-computation next time it's called
  329. del person.friends # or delattr(person, "friends")
  330. # set a value manually, that will persist on the instance until cleared
  331. person.friends = ["Huckleberry Finn", "Tom Sawyer"]
  332. As well as offering potential performance advantages, ``@cached_property``
  333. can ensure that an attribute's value does not change unexpectedly over the
  334. life of an instance. This could occur with a method whose computation is
  335. based on ``datetime.now()``, or simply if a change were saved to the
  336. database by some other process in the brief interval between subsequent
  337. invocations of a method on the same instance.
  338. .. versionadded:: 1.8
  339. You can use the ``name`` argument to make cached properties of other
  340. methods. For example, if you had an expensive ``get_friends()`` method and
  341. wanted to allow calling it without retrieving the cached value, you could
  342. write::
  343. friends = cached_property(get_friends, name='friends')
  344. While ``person.get_friends()`` will recompute the friends on each call, the
  345. value of the cached property will persist until you delete it as described
  346. above::
  347. x = person.friends # calls first time
  348. y = person.get_friends() # calls again
  349. z = person.friends # does not call
  350. x is z # is True
  351. .. function:: allow_lazy(func, *resultclasses)
  352. Django offers many utility functions (particularly in ``django.utils``)
  353. that take a string as their first argument and do something to that string.
  354. These functions are used by template filters as well as directly in other
  355. code.
  356. If you write your own similar functions and deal with translations, you'll
  357. face the problem of what to do when the first argument is a lazy
  358. translation object. You don't want to convert it to a string immediately,
  359. because you might be using this function outside of a view (and hence the
  360. current thread's locale setting will not be correct).
  361. For cases like this, use the ``django.utils.functional.allow_lazy()``
  362. decorator. It modifies the function so that *if* it's called with a lazy
  363. translation as one of its arguments, the function evaluation is delayed
  364. until it needs to be converted to a string.
  365. For example::
  366. from django.utils.functional import allow_lazy
  367. def fancy_utility_function(s, ...):
  368. # Do some conversion on string 's'
  369. ...
  370. # Replace unicode by str on Python 3
  371. fancy_utility_function = allow_lazy(fancy_utility_function, unicode)
  372. The ``allow_lazy()`` decorator takes, in addition to the function to
  373. decorate, a number of extra arguments (``*args``) specifying the type(s)
  374. that the original function can return. Usually, it's enough to include
  375. ``unicode`` (or ``str`` on Python 3) here and ensure that your function
  376. returns only Unicode strings.
  377. Using this decorator means you can write your function and assume that the
  378. input is a proper string, then add support for lazy translation objects at
  379. the end.
  380. ``django.utils.html``
  381. =====================
  382. .. module:: django.utils.html
  383. :synopsis: HTML helper functions
  384. Usually you should build up HTML using Django's templates to make use of its
  385. autoescape mechanism, using the utilities in :mod:`django.utils.safestring`
  386. where appropriate. This module provides some additional low level utilities for
  387. escaping HTML.
  388. .. function:: escape(text)
  389. Returns the given text with ampersands, quotes and angle brackets encoded
  390. for use in HTML. The input is first passed through
  391. :func:`~django.utils.encoding.force_text` and the output has
  392. :func:`~django.utils.safestring.mark_safe` applied.
  393. .. function:: conditional_escape(text)
  394. Similar to ``escape()``, except that it doesn't operate on pre-escaped
  395. strings, so it will not double escape.
  396. .. function:: format_html(format_string, *args, **kwargs)
  397. This is similar to `str.format`_, except that it is appropriate for
  398. building up HTML fragments. All args and kwargs are passed through
  399. :func:`conditional_escape` before being passed to ``str.format``.
  400. For the case of building up small HTML fragments, this function is to be
  401. preferred over string interpolation using ``%`` or ``str.format`` directly,
  402. because it applies escaping to all arguments - just like the Template system
  403. applies escaping by default.
  404. So, instead of writing::
  405. mark_safe("%s <b>%s</b> %s" % (some_html,
  406. escape(some_text),
  407. escape(some_other_text),
  408. ))
  409. You should instead use::
  410. format_html("{} <b>{}</b> {}",
  411. mark_safe(some_html), some_text, some_other_text)
  412. This has the advantage that you don't need to apply :func:`escape` to each
  413. argument and risk a bug and an XSS vulnerability if you forget one.
  414. Note that although this function uses ``str.format`` to do the
  415. interpolation, some of the formatting options provided by `str.format`_
  416. (e.g. number formatting) will not work, since all arguments are passed
  417. through :func:`conditional_escape` which (ultimately) calls
  418. :func:`~django.utils.encoding.force_text` on the values.
  419. .. function:: format_html_join(sep, format_string, args_generator)
  420. A wrapper of :func:`format_html`, for the common case of a group of
  421. arguments that need to be formatted using the same format string, and then
  422. joined using ``sep``. ``sep`` is also passed through
  423. :func:`conditional_escape`.
  424. ``args_generator`` should be an iterator that returns the sequence of
  425. ``args`` that will be passed to :func:`format_html`. For example::
  426. format_html_join('\n', "<li>{} {}</li>", ((u.first_name, u.last_name)
  427. for u in users))
  428. .. function:: strip_tags(value)
  429. Tries to remove anything that looks like an HTML tag from the string, that
  430. is anything contained within ``<>``.
  431. Absolutely NO guarantee is provided about the resulting string being
  432. HTML safe. So NEVER mark safe the result of a ``strip_tag`` call without
  433. escaping it first, for example with :func:`~django.utils.html.escape`.
  434. For example::
  435. strip_tags(value)
  436. If ``value`` is ``"<b>Joel</b> <button>is</button> a <span>slug</span>"``
  437. the return value will be ``"Joel is a slug"``.
  438. If you are looking for a more robust solution, take a look at the `bleach`_
  439. Python library.
  440. .. function:: remove_tags(value, tags)
  441. .. deprecated:: 1.8
  442. ``remove_tags()`` cannot guarantee HTML safe output and has been
  443. deprecated due to security concerns. Consider using `bleach`_ instead.
  444. Removes a space-separated list of [X]HTML tag names from the output.
  445. Absolutely NO guarantee is provided about the resulting string being HTML
  446. safe. In particular, it doesn't work recursively, so the output of
  447. ``remove_tags("<sc<script>ript>alert('XSS')</sc</script>ript>", "script")``
  448. won't remove the "nested" script tags. So if the ``value`` is untrusted,
  449. NEVER mark safe the result of a ``remove_tags()`` call without escaping it
  450. first, for example with :func:`~django.utils.html.escape`.
  451. For example::
  452. remove_tags(value, "b span")
  453. If ``value`` is ``"<b>Joel</b> <button>is</button> a <span>slug</span>"``
  454. the return value will be ``"Joel <button>is</button> a slug"``.
  455. Note that this filter is case-sensitive.
  456. If ``value`` is ``"<B>Joel</B> <button>is</button> a <span>slug</span>"``
  457. the return value will be ``"<B>Joel</B> <button>is</button> a slug"``.
  458. .. _str.format: https://docs.python.org/library/stdtypes.html#str.format
  459. .. _bleach: https://pypi.python.org/pypi/bleach
  460. .. function:: html_safe()
  461. .. versionadded:: 1.8
  462. The ``__html__()`` method on a class helps non-Django templates detect
  463. classes whose output doesn't require HTML escaping.
  464. This decorator defines the ``__html__()`` method on the decorated class
  465. by wrapping the ``__unicode__()`` (Python 2) or ``__str__()`` (Python 3)
  466. in :meth:`~django.utils.safestring.mark_safe`. Ensure the ``__unicode__()``
  467. or ``__str__()`` method does indeed return text that doesn't require HTML
  468. escaping.
  469. ``django.utils.http``
  470. =====================
  471. .. module:: django.utils.http
  472. :synopsis: HTTP helper functions. (URL encoding, cookie handling, ...)
  473. .. function:: urlquote(url, safe='/')
  474. A version of Python's ``urllib.quote()`` function that can operate on
  475. unicode strings. The url is first UTF-8 encoded before quoting. The
  476. returned string can safely be used as part of an argument to a subsequent
  477. ``iri_to_uri()`` call without double-quoting occurring. Employs lazy
  478. execution.
  479. .. function:: urlquote_plus(url, safe='')
  480. A version of Python's urllib.quote_plus() function that can operate on
  481. unicode strings. The url is first UTF-8 encoded before quoting. The
  482. returned string can safely be used as part of an argument to a subsequent
  483. ``iri_to_uri()`` call without double-quoting occurring. Employs lazy
  484. execution.
  485. .. function:: urlencode(query, doseq=0)
  486. A version of Python's urllib.urlencode() function that can operate on
  487. unicode strings. The parameters are first cast to UTF-8 encoded strings
  488. and then encoded as per normal.
  489. .. function:: cookie_date(epoch_seconds=None)
  490. Formats the time to ensure compatibility with Netscape's cookie standard.
  491. Accepts a floating point number expressed in seconds since the epoch in
  492. UTC--such as that outputted by ``time.time()``. If set to ``None``,
  493. defaults to the current time.
  494. Outputs a string in the format ``Wdy, DD-Mon-YYYY HH:MM:SS GMT``.
  495. .. function:: http_date(epoch_seconds=None)
  496. Formats the time to match the :rfc:`1123` date format as specified by HTTP
  497. :rfc:`2616#section-3.3.1` section 3.3.1.
  498. Accepts a floating point number expressed in seconds since the epoch in
  499. UTC--such as that outputted by ``time.time()``. If set to ``None``,
  500. defaults to the current time.
  501. Outputs a string in the format ``Wdy, DD Mon YYYY HH:MM:SS GMT``.
  502. .. function:: base36_to_int(s)
  503. Converts a base 36 string to an integer. On Python 2 the output is
  504. guaranteed to be an ``int`` and not a ``long``.
  505. .. function:: int_to_base36(i)
  506. Converts a positive integer to a base 36 string. On Python 2 ``i`` must be
  507. smaller than `sys.maxint`_.
  508. .. _sys.maxint: https://docs.python.org/2/library/sys.html#sys.maxint
  509. .. function:: urlsafe_base64_encode(s)
  510. Encodes a bytestring in base64 for use in URLs, stripping any trailing
  511. equal signs.
  512. .. function:: urlsafe_base64_decode(s)
  513. Decodes a base64 encoded string, adding back any trailing equal signs that
  514. might have been stripped.
  515. ``django.utils.module_loading``
  516. ===============================
  517. .. module:: django.utils.module_loading
  518. :synopsis: Functions for working with Python modules.
  519. Functions for working with Python modules.
  520. .. function:: import_string(dotted_path)
  521. Imports a dotted module path and returns the attribute/class designated by
  522. the last name in the path. Raises ``ImportError`` if the import failed. For
  523. example::
  524. from django.utils.module_loading import import_string
  525. ValidationError = import_string('django.core.exceptions.ValidationError')
  526. is equivalent to::
  527. from django.core.exceptions import ValidationError
  528. ``django.utils.safestring``
  529. ===========================
  530. .. module:: django.utils.safestring
  531. :synopsis: Functions and classes for working with strings that can be displayed safely without further escaping in HTML.
  532. Functions and classes for working with "safe strings": strings that can be
  533. displayed safely without further escaping in HTML. Marking something as a "safe
  534. string" means that the producer of the string has already turned characters
  535. that should not be interpreted by the HTML engine (e.g. '<') into the
  536. appropriate entities.
  537. .. class:: SafeBytes
  538. A ``bytes`` subclass that has been specifically marked as "safe"
  539. (requires no further escaping) for HTML output purposes.
  540. .. class:: SafeString
  541. A ``str`` subclass that has been specifically marked as "safe"
  542. (requires no further escaping) for HTML output purposes. This is
  543. :class:`SafeBytes` on Python 2 and :class:`SafeText` on Python 3.
  544. .. class:: SafeText
  545. A ``str`` (in Python 3) or ``unicode`` (in Python 2) subclass
  546. that has been specifically marked as "safe" for HTML output purposes.
  547. .. class:: SafeUnicode
  548. Historical name of :class:`SafeText`. Only available under Python 2.
  549. .. function:: mark_safe(s)
  550. Explicitly mark a string as safe for (HTML) output purposes. The returned
  551. object can be used everywhere a string or unicode object is appropriate.
  552. Can be called multiple times on a single string.
  553. For building up fragments of HTML, you should normally be using
  554. :func:`django.utils.html.format_html` instead.
  555. String marked safe will become unsafe again if modified. For example::
  556. >>> mystr = '<b>Hello World</b> '
  557. >>> mystr = mark_safe(mystr)
  558. >>> type(mystr)
  559. <class 'django.utils.safestring.SafeBytes'>
  560. >>> mystr = mystr.strip() # removing whitespace
  561. >>> type(mystr)
  562. <type 'str'>
  563. .. function:: mark_for_escaping(s)
  564. Explicitly mark a string as requiring HTML escaping upon output. Has no
  565. effect on ``SafeData`` subclasses.
  566. Can be called multiple times on a single string (the resulting escaping is
  567. only applied once).
  568. ``django.utils.text``
  569. =====================
  570. .. module:: django.utils.text
  571. :synopsis: Text manipulation.
  572. .. function:: slugify(allow_unicode=False)
  573. Converts to ASCII if ``allow_unicode`` is ``False`` (default). Converts spaces to
  574. hyphens. Removes characters that aren't alphanumerics, underscores, or
  575. hyphens. Converts to lowercase. Also strips leading and trailing whitespace.
  576. For example::
  577. slugify(value)
  578. If ``value`` is ``"Joel is a slug"``, the output will be
  579. ``"joel-is-a-slug"``.
  580. You can set the ``allow_unicode`` parameter to ``True``, if you want to
  581. allow Unicode characters::
  582. slugify(value, allow_unicode=True)
  583. If ``value`` is ``"你好 World"``, the output will be ``"你好-world"``.
  584. .. versionchanged:: 1.9
  585. The ``allow_unicode`` parameter was added.
  586. .. _time-zone-selection-functions:
  587. ``django.utils.timezone``
  588. =========================
  589. .. module:: django.utils.timezone
  590. :synopsis: Timezone support.
  591. .. data:: utc
  592. :class:`~datetime.tzinfo` instance that represents UTC.
  593. .. class:: FixedOffset(offset=None, name=None)
  594. A :class:`~datetime.tzinfo` subclass modeling a fixed offset from UTC.
  595. ``offset`` is an integer number of minutes east of UTC.
  596. .. function:: get_fixed_timezone(offset)
  597. Returns a :class:`~datetime.tzinfo` instance that represents a time zone
  598. with a fixed offset from UTC.
  599. ``offset`` is a :class:`datetime.timedelta` or an integer number of
  600. minutes. Use positive values for time zones east of UTC and negative
  601. values for west of UTC.
  602. .. function:: get_default_timezone()
  603. Returns a :class:`~datetime.tzinfo` instance that represents the
  604. :ref:`default time zone <default-current-time-zone>`.
  605. .. function:: get_default_timezone_name()
  606. Returns the name of the :ref:`default time zone
  607. <default-current-time-zone>`.
  608. .. function:: get_current_timezone()
  609. Returns a :class:`~datetime.tzinfo` instance that represents the
  610. :ref:`current time zone <default-current-time-zone>`.
  611. .. function:: get_current_timezone_name()
  612. Returns the name of the :ref:`current time zone
  613. <default-current-time-zone>`.
  614. .. function:: activate(timezone)
  615. Sets the :ref:`current time zone <default-current-time-zone>`. The
  616. ``timezone`` argument must be an instance of a :class:`~datetime.tzinfo`
  617. subclass or, if pytz_ is available, a time zone name.
  618. .. function:: deactivate()
  619. Unsets the :ref:`current time zone <default-current-time-zone>`.
  620. .. function:: override(timezone)
  621. This is a Python context manager that sets the :ref:`current time zone
  622. <default-current-time-zone>` on entry with :func:`activate()`, and restores
  623. the previously active time zone on exit. If the ``timezone`` argument is
  624. ``None``, the :ref:`current time zone <default-current-time-zone>` is unset
  625. on entry with :func:`deactivate()` instead.
  626. .. versionchanged:: 1.8
  627. ``override`` is now usable as a function decorator.
  628. .. function:: localtime(value, timezone=None)
  629. Converts an aware :class:`~datetime.datetime` to a different time zone,
  630. by default the :ref:`current time zone <default-current-time-zone>`.
  631. This function doesn't work on naive datetimes; use :func:`make_aware`
  632. instead.
  633. .. function:: now()
  634. Returns a :class:`~datetime.datetime` that represents the
  635. current point in time. Exactly what's returned depends on the value of
  636. :setting:`USE_TZ`:
  637. * If :setting:`USE_TZ` is ``False``, this will be a
  638. :ref:`naive <naive_vs_aware_datetimes>` datetime (i.e. a datetime
  639. without an associated timezone) that represents the current time
  640. in the system's local timezone.
  641. * If :setting:`USE_TZ` is ``True``, this will be an
  642. :ref:`aware <naive_vs_aware_datetimes>` datetime representing the
  643. current time in UTC. Note that :func:`now` will always return
  644. times in UTC regardless of the value of :setting:`TIME_ZONE`;
  645. you can use :func:`localtime` to convert to a time in the current
  646. time zone.
  647. .. function:: is_aware(value)
  648. Returns ``True`` if ``value`` is aware, ``False`` if it is naive. This
  649. function assumes that ``value`` is a :class:`~datetime.datetime`.
  650. .. function:: is_naive(value)
  651. Returns ``True`` if ``value`` is naive, ``False`` if it is aware. This
  652. function assumes that ``value`` is a :class:`~datetime.datetime`.
  653. .. function:: make_aware(value, timezone=None, is_dst=None)
  654. Returns an aware :class:`~datetime.datetime` that represents the same
  655. point in time as ``value`` in ``timezone``, ``value`` being a naive
  656. :class:`~datetime.datetime`. If ``timezone`` is set to ``None``, it
  657. defaults to the :ref:`current time zone <default-current-time-zone>`.
  658. When pytz_ is installed, the exception ``pytz.AmbiguousTimeError``
  659. will be raised if you try to make ``value`` aware during a DST transition
  660. where the same time occurs twice (when reverting from DST). Setting
  661. ``is_dst`` to ``True`` or ``False`` will avoid the exception by choosing if
  662. the time is pre-transition or post-transition respectively.
  663. When pytz_ is installed, the exception ``pytz.NonExistentTimeError``
  664. will be raised if you try to make ``value`` aware during a DST transition
  665. such that the time never occurred (when entering into DST). Setting
  666. ``is_dst`` to ``True`` or ``False`` will avoid the exception by moving the
  667. hour backwards or forwards by 1 respectively. For example, ``is_dst=True``
  668. would change a non-existent time of 2:30 to 1:30 and ``is_dst=False``
  669. would change the time to 3:30.
  670. ``is_dst`` has no effect when ``pytz`` is not installed.
  671. .. versionchanged:: 1.8
  672. In older versions of Django, ``timezone`` was a required argument.
  673. .. versionchanged:: 1.9
  674. The ``is_dst`` argument was added.
  675. .. function:: make_naive(value, timezone=None)
  676. Returns an naive :class:`~datetime.datetime` that represents in
  677. ``timezone`` the same point in time as ``value``, ``value`` being an
  678. aware :class:`~datetime.datetime`. If ``timezone`` is set to ``None``, it
  679. defaults to the :ref:`current time zone <default-current-time-zone>`.
  680. .. versionchanged:: 1.8
  681. In older versions of Django, ``timezone`` was a required argument.
  682. .. _pytz: http://pytz.sourceforge.net/
  683. ``django.utils.translation``
  684. ============================
  685. .. module:: django.utils.translation
  686. :synopsis: Internationalization support.
  687. For a complete discussion on the usage of the following see the
  688. :doc:`translation documentation </topics/i18n/translation>`.
  689. .. function:: gettext(message)
  690. Translates ``message`` and returns it in a UTF-8 bytestring
  691. .. function:: ugettext(message)
  692. Translates ``message`` and returns it in a unicode string
  693. .. function:: pgettext(context, message)
  694. Translates ``message`` given the ``context`` and returns
  695. it in a unicode string.
  696. For more information, see :ref:`contextual-markers`.
  697. .. function:: gettext_lazy(message)
  698. .. function:: ugettext_lazy(message)
  699. .. function:: pgettext_lazy(context, message)
  700. Same as the non-lazy versions above, but using lazy execution.
  701. See :ref:`lazy translations documentation <lazy-translations>`.
  702. .. function:: gettext_noop(message)
  703. .. function:: ugettext_noop(message)
  704. Marks strings for translation but doesn't translate them now. This can be
  705. used to store strings in global variables that should stay in the base
  706. language (because they might be used externally) and will be translated
  707. later.
  708. .. function:: ngettext(singular, plural, number)
  709. Translates ``singular`` and ``plural`` and returns the appropriate string
  710. based on ``number`` in a UTF-8 bytestring.
  711. .. function:: ungettext(singular, plural, number)
  712. Translates ``singular`` and ``plural`` and returns the appropriate string
  713. based on ``number`` in a unicode string.
  714. .. function:: npgettext(context, singular, plural, number)
  715. Translates ``singular`` and ``plural`` and returns the appropriate string
  716. based on ``number`` and the ``context`` in a unicode string.
  717. .. function:: ngettext_lazy(singular, plural, number)
  718. .. function:: ungettext_lazy(singular, plural, number)
  719. .. function:: npgettext_lazy(context, singular, plural, number)
  720. Same as the non-lazy versions above, but using lazy execution.
  721. See :ref:`lazy translations documentation <lazy-translations>`.
  722. .. function:: string_concat(*strings)
  723. Lazy variant of string concatenation, needed for translations that are
  724. constructed from multiple parts.
  725. .. function:: activate(language)
  726. Fetches the translation object for a given language and activates it as
  727. the current translation object for the current thread.
  728. .. function:: deactivate()
  729. Deactivates the currently active translation object so that further _ calls
  730. will resolve against the default translation object, again.
  731. .. function:: deactivate_all()
  732. Makes the active translation object a ``NullTranslations()`` instance.
  733. This is useful when we want delayed translations to appear as the original
  734. string for some reason.
  735. .. function:: override(language, deactivate=False)
  736. A Python context manager that uses
  737. :func:`django.utils.translation.activate` to fetch the translation object
  738. for a given language, activates it as the translation object for the
  739. current thread and reactivates the previous active language on exit.
  740. Optionally, it can simply deactivate the temporary translation on exit with
  741. :func:`django.utils.translation.deactivate` if the ``deactivate`` argument
  742. is ``True``. If you pass ``None`` as the language argument, a
  743. ``NullTranslations()`` instance is activated within the context.
  744. .. versionchanged:: 1.8
  745. ``override`` is now usable as a function decorator.
  746. .. function:: get_language()
  747. Returns the currently selected language code. Returns ``None`` if
  748. translations are temporarily deactivated (by :func:`deactivate_all()` or
  749. when ``None`` is passed to :func:`override()`).
  750. .. versionchanged:: 1.8
  751. Before Django 1.8, ``get_language()`` always returned
  752. :setting:`LANGUAGE_CODE` when translations were deactivated.
  753. .. function:: get_language_bidi()
  754. Returns selected language's BiDi layout:
  755. * ``False`` = left-to-right layout
  756. * ``True`` = right-to-left layout
  757. .. function:: get_language_from_request(request, check_path=False)
  758. Analyzes the request to find what language the user wants the system to
  759. show. Only languages listed in settings.LANGUAGES are taken into account.
  760. If the user requests a sublanguage where we have a main language, we send
  761. out the main language.
  762. If ``check_path`` is ``True``, the function first checks the requested URL
  763. for whether its path begins with a language code listed in the
  764. :setting:`LANGUAGES` setting.
  765. .. function:: to_locale(language)
  766. Turns a language name (en-us) into a locale name (en_US).
  767. .. function:: templatize(src)
  768. Turns a Django template into something that is understood by ``xgettext``.
  769. It does so by translating the Django translation tags into standard
  770. ``gettext`` function invocations.
  771. .. data:: LANGUAGE_SESSION_KEY
  772. Session key under which the active language for the current session is
  773. stored.