eaf_base_api 3.3.3__tar.gz → 3.3.5__tar.gz

{eaf_base_api-3.3.3 → eaf_base_api-3.3.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: eaf_base_api
-Version: 3.3.3
+Version: 3.3.5
 Summary: A base API for EchterAlsFake's Porn APIs
 Author: Johannes Habel
 Author-email: Johannes Habel <EchterAlsFake@proton.me>

{eaf_base_api-3.3.3 → eaf_base_api-3.3.5}/base_api/base.py

@@ -488,9 +488,9 @@ class BaseCore:
         if self.configuration.dns_over_https:
             curl_options[CurlOpt.DOH_URL] = str(self.configuration.dns_over_https).encode("utf-8")
 
-        proxies = None
-        if self.configuration.proxies:
-            proxies = self.configuration.proxies
+        proxy = None
+        if self.configuration.proxy:
+            proxy = self.configuration.proxy
 
         if self.configuration.max_bandwidth_mb is not None and self.configuration.max_bandwidth_mb > 0:
             global_limit_bytes = int(self.configuration.max_bandwidth_mb * 1024 * 1024)
@@ -511,7 +511,8 @@ class BaseCore:
             p_auth = (u, p)
 
         self.session = cast(Any, AsyncSession)(
-            proxies=proxies,
+            interface=self.configuration.interface,
+            proxy=proxy,
             timeout=self.configuration.timeout,
             verify=verify,
             impersonate=impersonation,

{eaf_base_api-3.3.3 → eaf_base_api-3.3.5}/base_api/modules/config.py

@@ -18,7 +18,7 @@ class RuntimeConfig:
         self.request_delay: int = 0
         self.timeout: int = 20
         self.max_bandwidth_mb: float| None = None # Set speed limit in megabytes per second e.g, 2.0, 3.5 etc...
-        self.proxies: Dict[str, str] | None = None
+        self.proxy = None
         self.http_version: str = "v2" # "v3 = HTTP/3.0, v2 = HTTP/2.0, v1 = HTTP/1.1
         self.dns_over_https: str | None = None
         self.impersonation: str = "chrome"
@@ -31,6 +31,7 @@ class RuntimeConfig:
         self.max_workers_download: int = 20
         self.videos_concurrency: int = 5
         self.pages_concurrency: int = 2
+        self.interface: str | None = None # IP Address of the network interface you want to bind to
 
 
 @dataclass

{eaf_base_api-3.3.3 → eaf_base_api-3.3.5}/base_api/modules/static_functions.py

@@ -2,6 +2,8 @@ import os
 import re
 import math
 import json
+import unicodedata
+from pathlib import PurePath
 from .type_hints import DownloadState
 from datetime import timezone, datetime
 from curl_cffi.requests import Response
@@ -432,31 +434,49 @@ def log_precondition_failed(logger, response: Response, attempt: int) -> None:
     )
 
 
-def strip_title(title: str, max_length: int = 255) -> str:
-    """
-    Sanitize a filename to be safe across Windows, macOS, Linux, and Android.
-    Replaces or strips illegal characters and trims to a safe length.
+def strip_title(
+    title: str, max_length: int = 255, default_name: str = "untitled"
+) -> str:
+    """Sanitize a filename to be safe across Windows, macOS, Linux, and Android.
+
+    Prevents path traversal, replaces illegal characters, handles Windows reserved
+    names, and trims to a safe length.
     """
+    if not title:
+        return default_name
+
+    # 1. Normalize Unicode (converts full-width slashes/characters to standard ASCII where applicable)
+    sanitized = unicodedata.normalize("NFKC", title)
 
-    # Reserved characters on Windows + `/` for Unix/macOS
+    # 2. Extract only the filename component (strips drive letters & path prefixes)
+    sanitized = PurePath(sanitized).name
+
+    # 3. Replace illegal filename characters & explicit path separators with underscores
     illegal_chars = r'[<>:"/\\|?*\x00-\x1F]'
-    sanitized = re.sub(illegal_chars, "_", title)
+    sanitized = re.sub(illegal_chars, "_", sanitized)
 
-    # Strip invisible zero-width characters
-    sanitized = re.sub(r'[\u200B-\u200D\uFEFF]', '', sanitized)
+    # 4. Strip invisible zero-width & non-printable Unicode control characters
+    sanitized = re.sub(r"[\u200B-\u200D\uFEFF]", "", sanitized)
 
-    # Strip trailing periods or spaces (Windows)
-    sanitized = sanitized.rstrip(" .")
+    # 5. Strip LEADING and TRAILING spaces and dots
+    # (Prevents '.' and '..' traversal tokens and hidden files)
+    sanitized = sanitized.strip(" .")
 
-    # Prevent reserved Windows filenames
+    # 6. Prevent Windows reserved filenames (CON, PRN, AUX, NUL, COM1-9, LPT1-9)
     reserved_names = {
-        "CON", "PRN", "AUX", "NUL",
+        "CON",
+        "PRN",
+        "AUX",
+        "NUL",
         *(f"COM{i}" for i in range(1, 10)),
         *(f"LPT{i}" for i in range(1, 10)),
     }
-    name_only = sanitized.split('.')[0].upper()
+    name_only = sanitized.split(".")[0].upper()
     if name_only in reserved_names:
         sanitized = f"_{sanitized}"
 
-    # Trim to max length
-    return sanitized[:max_length]
+    # 7. Trim to max length, then re-strip trailing dots/spaces in case the slice cut mid-string
+    sanitized = sanitized[:max_length].rstrip(" .")
+
+    # 8. Return default fallback if sanitization leaves an empty string
+    return sanitized if sanitized else default_name

{eaf_base_api-3.3.3 → eaf_base_api-3.3.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "eaf_base_api"
-version = "3.3.3"
+version = "3.3.5"
 description = "A base API for EchterAlsFake's Porn APIs"
 readme = { file = "README.md", content-type = "text/markdown" }
 requires-python = ">=3.12"