2b7e8f5198
Thanks for the killer effort from David Zwarg from Avencia in building this, and for Tim Schaub from OpenGeo for his excellent review. r=me,tschaub (Closes #213) git-svn-id: http://svn.openlayers.org/trunk/openlayers@9249 dc9f47b5-9b13-0410-9fdd-eb0c1a62fdaf
79 lines
2.4 KiB
Python
Executable File
79 lines
2.4 KiB
Python
Executable File
#!/usr/bin/env python
|
|
|
|
|
|
"""This is a blind proxy that we use to get around browser
|
|
restrictions that prevent the Javascript from loading pages not on the
|
|
same server as the Javascript. This has several problems: it's less
|
|
efficient, it might break some sites, and it's a security risk because
|
|
people can use this proxy to browse the web and possibly do bad stuff
|
|
with it. It only loads pages via http and https, but it can load any
|
|
content type. It supports GET and POST requests."""
|
|
|
|
import urllib2
|
|
import cgi
|
|
import sys, os
|
|
|
|
# Designed to prevent Open Proxy type stuff.
|
|
|
|
allowedHosts = ['www.openlayers.org', 'openlayers.org',
|
|
'labs.metacarta.com', 'world.freemap.in',
|
|
'prototype.openmnnd.org', 'geo.openplans.org',
|
|
'sigma.openplans.org', 'demo.opengeo.org',
|
|
'www.openstreetmap.org', 'sample.avencia.com']
|
|
|
|
method = os.environ["REQUEST_METHOD"]
|
|
|
|
if method == "POST":
|
|
qs = os.environ["QUERY_STRING"]
|
|
d = cgi.parse_qs(qs)
|
|
if d.has_key("url"):
|
|
url = d["url"][0]
|
|
else:
|
|
url = "http://www.openlayers.org"
|
|
else:
|
|
fs = cgi.FieldStorage()
|
|
url = fs.getvalue('url', "http://www.openlayers.org")
|
|
|
|
try:
|
|
host = url.split("/")[2]
|
|
if allowedHosts and not host in allowedHosts:
|
|
print "Status: 502 Bad Gateway"
|
|
print "Content-Type: text/plain"
|
|
print
|
|
print "This proxy does not allow you to access that location (%s)." % (host,)
|
|
print
|
|
print os.environ
|
|
|
|
elif url.startswith("http://") or url.startswith("https://"):
|
|
|
|
if method == "POST":
|
|
length = int(os.environ["CONTENT_LENGTH"])
|
|
headers = {"Content-Type": os.environ["CONTENT_TYPE"]}
|
|
body = sys.stdin.read(length)
|
|
r = urllib2.Request(url, body, headers)
|
|
y = urllib2.urlopen(r)
|
|
else:
|
|
y = urllib2.urlopen(url)
|
|
|
|
# print content type header
|
|
i = y.info()
|
|
if i.has_key("Content-Type"):
|
|
print "Content-Type: %s" % (i["Content-Type"])
|
|
else:
|
|
print "Content-Type: text/plain"
|
|
print
|
|
|
|
print y.read()
|
|
|
|
y.close()
|
|
else:
|
|
print "Content-Type: text/plain"
|
|
print
|
|
print "Illegal request."
|
|
|
|
except Exception, E:
|
|
print "Status: 500 Unexpected Error"
|
|
print "Content-Type: text/plain"
|
|
print
|
|
print "Some unexpected error occurred. Error text was:", E
|