14566 2007-07-09 12:35:10 -0700 Changing document.domain does not raise javascript exception 2009-10-08 19:35:51 -0700 1 1 1 Unclassified WebKit DOM 523.x (Safari 3) All All RESOLVED FIXED http://sgurivireddy.googlepages.com/document_domain.html P2 Normal --- 1 just1gb webkit-unassigned abarth ap commit-queue darin eric mrowe sam song.yuan oldest_to_newest 5107 0 just1gb 2007-07-09 12:35:10 -0700 http://sgurivireddy.googlepages.com/document_domain.html changing document.domain to invalid location does not raise javascript exception. 5064 1 sam 2007-07-10 11:06:45 -0700 Reporter, have you tested this in IE? I believe what you are seeing here is the difference in behavior between Firefox and IE. IE should let you set document.domain to any value, but Firefox only lets you set it to the superdomain (ie. bugs.webkit.org to webkit.org) 5062 2 ap 2007-07-10 11:25:18 -0700 FWIW, HTML5 currently specifies that a security exception must be raised when trying to set document.domain to a prohibited value. 142844 3 38612 song.yuan 2009-08-26 06:56:22 -0700 Created attachment 38612 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value. 142847 4 38612 song.yuan 2009-08-26 06:59:20 -0700 Comment on attachment 38612 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value. It passes the test case at http://sgurivireddy.googlepages.com/document_domain.html, provided by the original bug reporter. 142850 5 38612 sam 2009-08-26 07:07:01 -0700 Comment on attachment 38612 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value. This needs a test case. Also, have you tested IE, not that it would be a blocker, it is just good to have the facts. r- 143135 6 song.yuan 2009-08-27 09:44:40 -0700 (In reply to comment #5) Would I better modify an existing test case (e.g. http/tests/security/xss-DENIED-invalid-domain-change.html, there is a catch exception block) or add a new one? By the way, I've tested IE8 and it also throws an exception. 144569 7 39002 song.yuan 2009-09-03 12:39:32 -0700 Created attachment 39002 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case added). 144728 8 39002 eric 2009-09-04 00:40:26 -0700 Comment on attachment 39002 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case added). Tests like this area always better as js-only tests: http://trac.webkit.org/wiki/Writing%20Layout%20Tests%20for%20DumpRenderTree 145319 9 39180 song.yuan 2009-09-08 05:34:29 -0700 Created attachment 39180 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case changed to js-only test). 145385 10 darin 2009-09-08 09:26:43 -0700 The patch looks good, but I don't see an answer to the "Have you tested IE?" question. 145472 11 song.yuan 2009-09-08 11:52:09 -0700 (In reply to comment #10) > The patch looks good, but I don't see an answer to the "Have you tested IE?" > question. I answered it briefly in Comment #6. However, I've tested IE7 and IE8. Both of them only allow to set document.domain to either the same domain as that of the page (i.e. bugs.webkit.org to bugs.webkit.org) or the super domain (i.e. bugs.webkit.org to webkit.org). Otherwise, an "Invalid argument" exception is thrown. Furthermore, in case of IE8, the exception "This method can't be used in this context." is thrown if I try to set document.domain to any value in a local html file. 148271 12 39180 eric 2009-09-18 11:50:59 -0700 Comment on attachment 39180 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case changed to js-only test). Yuan is not a committer, setting cq+ 148301 13 39180 commit-queue 2009-09-18 12:18:54 -0700 Comment on attachment 39180 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case changed to js-only test). Rejecting patch 39180 from commit-queue. Failed to run "['WebKitTools/Scripts/run-webkit-tests', '--no-launch-safari', '--quiet', '--exit-after-n-failures=1']" exit_code: 1 Running build-dumprendertree Running tests from /Users/eseidel/Projects/CommitQueue/LayoutTests Testing 11277 test cases. fast/forms/basic-textareas.html -> failed Exiting early after 1 failures. 6211 tests run. 117.50s total testing time 6210 test cases (99%) succeeded 1 test case (<1%) had incorrect layout 2 test cases (<1%) had stderr output 148306 14 39180 eric 2009-09-18 12:23:47 -0700 Comment on attachment 39180 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case changed to js-only test). We seem to have a lot of flakey tests. fast/forms/basic-textareas.html -> failed seems unrelated. Lets try again. 148328 15 39180 commit-queue 2009-09-18 13:06:25 -0700 Comment on attachment 39180 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case changed to js-only test). Rejecting patch 39180 from commit-queue. Failed to run "['WebKitTools/Scripts/run-webkit-tests', '--no-launch-safari', '--quiet', '--exit-after-n-failures=1']" exit_code: 1 Running build-dumprendertree Running tests from /Users/eseidel/Projects/CommitQueue/LayoutTests Testing 11277 test cases. fast/forms/basic-textareas.html -> failed Exiting early after 1 failures. 6211 tests run. 117.54s total testing time 6210 test cases (99%) succeeded 1 test case (<1%) had incorrect layout 2 test cases (<1%) had stderr output 148336 16 eric 2009-09-18 13:10:04 -0700 No clue how, but it would appear this change breaks basic-textareas.html. 148338 17 39180 eric 2009-09-18 13:12:32 -0700 Comment on attachment 39180 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case changed to js-only test). +CONSOLE MESSAGE: line 86: Error: SECURITY_ERR: DOM Exception 18 It would appear that basic-textareas is doing something wrong. This patch needs revision. r- 148615 18 39843 song.yuan 2009-09-21 01:58:40 -0700 Created attachment 39843 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value ("document.domain" is not set to "mydummydomain" any more in fast/forms/basic-textareas.html) In this new patch, "document.domain" is not set to "mydummydomain" any more in fast/forms/basic-textareas.html. It looks to me that it's faulty and not necessary. Because "document.domain" is set to "layouttests" if a local html file is launched by DumpRenderTree, so the access to the iframe is allowed anyway. Running this modified basic-textarea.html in DumpRenderTree gives exactly the same output as the original one. The test is conducted in WebKit gtk port in Ubuntu. I'm now trying to borrow a Mac to verify it. 149121 19 darin 2009-09-22 10:57:27 -0700 (In reply to comment #18) > In this new patch, "document.domain" is not set to "mydummydomain" any more in > fast/forms/basic-textareas.html. It looks to me that it's faulty and not > necessary. Because "document.domain" is set to "layouttests" if a local html > file is launched by DumpRenderTree, so the access to the iframe is allowed > anyway. We’d like these tests to work inside the web browser as well as in DumpRenderTree when possible. 149378 20 song.yuan 2009-09-23 06:15:40 -0700 (In reply to comment #19) > We’d like these tests to work inside the web browser as well as in > DumpRenderTree when possible. I agree. However, in this test case "fast/forms/basic-textarea.html", the "CSS1Compat" part never works in the browser before. Because the "standardsIframe" has a data URL, which allows no cross-frame access. So it makes the "CSS1Compat" part of the test fail in the browser. While the DumpRenderTree allows the frames that have file URL to gain universal access to any other frames. Then it makes this part of the text runnable. So setting "document.domain" here is not only unnecessary, but also faulty. Removing the code of setting "document.domain" won't change the original behavior of the test case in any aspect. Making this test case runnable in a browser is a separate issue. My proposal is to make "standardsIframe" load an empty HTML page with DOCTYPE defined instead of using data URL. I already tried and it worked. But shall I include this in my patch or a new patch instead? 149384 21 39994 song.yuan 2009-09-23 06:54:39 -0700 Created attachment 39994 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (make fast/forms/basic-textareas.html runnable in a browser) Please refer to Comment #20 for the reason behind this updated patch. I figured that I might as well submit this updated patch to solve the problem that "fast/forms/basic-textareas.html" is not runnable in a browser, because submitting a separate patch to simply fix test case does not make sense. 149416 22 darin 2009-09-23 09:34:22 -0700 (In reply to comment #20) > So setting "document.domain" here is not only unnecessary, but also faulty. > Removing the code of setting "document.domain" won't change the original > behavior of the test case in any aspect. OK. > My proposal is > to make "standardsIframe" load an empty HTML page with DOCTYPE defined instead > of using data URL. I already tried and it worked. But shall I include this in > my patch or a new patch instead? Seems fine to do that separately. 149417 23 darin 2009-09-23 09:34:49 -0700 (In reply to comment #21) > Please refer to Comment #20 for the reason behind this updated patch. I figured > that I might as well submit this updated patch to solve the problem that > "fast/forms/basic-textareas.html" is not runnable in a browser, because > submitting a separate patch to simply fix test case does not make sense. OK. 149801 24 eric 2009-09-24 13:02:02 -0700 From Darin's comments it looks like he's OK with your updated patch. But I'd prefer he set the r+ himself. If you want this committed by the commit-bot you'll need to set commit-queue=? as well. 149805 25 39994 darin 2009-09-24 13:09:11 -0700 Comment on attachment 39994 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (make fast/forms/basic-textareas.html runnable in a browser) This patch raises SECURITY_ERR if you set domain to the same value it already has. Is that the behavior we want? 149976 26 song.yuan 2009-09-25 04:51:34 -0700 (In reply to comment #25) I can't see that it does. The first if statement of Document::setDomain returns silently (no exception thrown) if the new and old domain are the same, as expected. This check was already there. I verified manually that re-setting the same domain doesn't throw any exception in my build of WebKit. I also verified that IE, Firefox, and Opera behave the same way. 150043 27 darin 2009-09-25 10:09:42 -0700 (In reply to comment #26) > I can't see that it does. OK. My mistake; the code to handle that case was outside the patch context, I guess. If there was a test case covering this, then I would feel even more confident. I’ll review now. 150046 28 eric 2009-09-25 10:12:53 -0700 I agree with Darin that tests are the best way to get rid of any ambiguity. Do we have a test which sets the domain to itself and verifies that it doesn't do anything crazy? 150051 29 abarth 2009-09-25 10:36:45 -0700 (In reply to comment #28) > I agree with Darin that tests are the best way to get rid of any ambiguity. Do > we have a test which sets the domain to itself and verifies that it doesn't do > anything crazy? We have tons of tests like that. That's how we test most of the document.domain security quirks. 150053 30 39994 eric 2009-09-25 10:38:36 -0700 Comment on attachment 39994 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (make fast/forms/basic-textareas.html runnable in a browser) Sounds good to me then. :) Another patch is landing now, so assuming the bots stay green, you patch should be landed in 20 minutes or so: http://webkit-commit-queue.appspot.com/ 150069 31 39994 commit-queue 2009-09-25 10:53:52 -0700 Comment on attachment 39994 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (make fast/forms/basic-textareas.html runnable in a browser) Clearing flags on attachment: 39994 Committed r48761: <http://trac.webkit.org/changeset/48761> 150070 32 commit-queue 2009-09-25 10:54:01 -0700 All reviewed patches have been landed. Closing bug. 153597 33 mrowe 2009-10-08 19:35:51 -0700 This change added a DOM-related layout test to fast/js. That’s wrong. 38612 2009-08-26 06:56:22 -0700 2009-09-03 12:39:32 -0700 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value. patch.txt text/plain 3052 song.yuan SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA0Nzc3NSkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTYgQEAKKzIwMDktMDgtMjYgIFl1YW4gU29uZyAgPHNvbmcueXVhbkBlcmljc3Nv bi5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE0NTY2CisKKyAgICAgICAg UmFpc2UgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBpZiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gY2hh bmdlIGRvY3VtZW50LmRvbWFpbiB0byBhbiBpbnZhbGlkIHZhbHVlLgorCisgICAgICAgICogZG9t L0RvY3VtZW50LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50OjpzZXREb21haW4pOgor ICAgICAgICAqIGRvbS9Eb2N1bWVudC5oOgorICAgICAgICAqIGRvbS9Eb2N1bWVudC5pZGw6CisK IDIwMDktMDgtMjUgIEVyaWMgQ2FybHNvbiAgPGVyaWMuY2FybHNvbkBhcHBsZS5jb20+CiAKICAg ICAgICAgUmV2aWV3ZWQgYnkgRGFuIEJlcm5zdGVpbgpJbmRleDogV2ViQ29yZS9kb20vRG9jdW1l bnQuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvZG9tL0RvY3VtZW50LmNwcAkocmV2aXNpb24g NDc3NDMpCisrKyBXZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTI5 MjMsNyArMjkyMyw3IEBAIFN0cmluZyBEb2N1bWVudDo6ZG9tYWluKCkgY29uc3QKICAgICByZXR1 cm4gc2VjdXJpdHlPcmlnaW4oKS0+ZG9tYWluKCk7CiB9CiAKLXZvaWQgRG9jdW1lbnQ6OnNldERv bWFpbihjb25zdCBTdHJpbmcmIG5ld0RvbWFpbikKK3ZvaWQgRG9jdW1lbnQ6OnNldERvbWFpbihj b25zdCBTdHJpbmcmIG5ld0RvbWFpbiwgRXhjZXB0aW9uQ29kZSYgZWMpCiB7CiAgICAgLy8gQm90 aCBOUyBhbmQgSUUgc3BlY2lmeSB0aGF0IGNoYW5naW5nIHRoZSBkb21haW4gaXMgb25seSBhbGxv d2VkIHdoZW4KICAgICAvLyB0aGUgbmV3IGRvbWFpbiBpcyBhIHN1ZmZpeCBvZiB0aGUgb2xkIGRv bWFpbi4KQEAgLTI5NDYsMTkgKzI5NDYsMjUgQEAgdm9pZCBEb2N1bWVudDo6c2V0RG9tYWluKGNv bnN0IFN0cmluZyYgbgogICAgIGludCBvbGRMZW5ndGggPSBkb21haW4oKS5sZW5ndGgoKTsKICAg ICBpbnQgbmV3TGVuZ3RoID0gbmV3RG9tYWluLmxlbmd0aCgpOwogICAgIC8vIGUuZy4gbmV3RG9t YWluID0gd2Via2l0Lm9yZyAoMTApIGFuZCBkb21haW4oKSA9IHd3dy53ZWJraXQub3JnICgxNCkK LSAgICBpZiAobmV3TGVuZ3RoID49IG9sZExlbmd0aCkKKyAgICBpZiAobmV3TGVuZ3RoID49IG9s ZExlbmd0aCkgeworICAgICAgICBlYyA9IFNFQ1VSSVRZX0VSUjsKICAgICAgICAgcmV0dXJuOwor ICAgIH0KIAogICAgIFN0cmluZyB0ZXN0ID0gZG9tYWluKCk7CiAgICAgLy8gQ2hlY2sgdGhhdCBp dCdzIGEgc3ViZG9tYWluLCBub3QgZS5nLiAiZWJraXQub3JnIgotICAgIGlmICh0ZXN0W29sZExl bmd0aCAtIG5ld0xlbmd0aCAtIDFdICE9ICcuJykKKyAgICBpZiAodGVzdFtvbGRMZW5ndGggLSBu ZXdMZW5ndGggLSAxXSAhPSAnLicpIHsKKyAgICAgICAgZWMgPSBTRUNVUklUWV9FUlI7CiAgICAg ICAgIHJldHVybjsKKyAgICB9CiAKICAgICAvLyBOb3cgdGVzdCBpcyAid2Via2l0Lm9yZyIgZnJv bSBkb21haW4oKQogICAgIC8vIGFuZCB3ZSBjaGVjayB0aGF0IGl0J3MgdGhlIHNhbWUgdGhpbmcg YXMgbmV3RG9tYWluCiAgICAgdGVzdC5yZW1vdmUoMCwgb2xkTGVuZ3RoIC0gbmV3TGVuZ3RoKTsK LSAgICBpZiAodGVzdCAhPSBuZXdEb21haW4pCisgICAgaWYgKHRlc3QgIT0gbmV3RG9tYWluKSB7 CisgICAgICAgIGVjID0gU0VDVVJJVFlfRVJSOwogICAgICAgICByZXR1cm47CisgICAgfQogCiAg ICAgc2VjdXJpdHlPcmlnaW4oKS0+c2V0RG9tYWluRnJvbURPTShuZXdEb21haW4pOwogICAgIGlm IChtX2ZyYW1lKQpJbmRleDogV2ViQ29yZS9kb20vRG9jdW1lbnQuaAo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBX ZWJDb3JlL2RvbS9Eb2N1bWVudC5oCShyZXZpc2lvbiA0Nzc0MykKKysrIFdlYkNvcmUvZG9tL0Rv Y3VtZW50LmgJKHdvcmtpbmcgY29weSkKQEAgLTYzMiw3ICs2MzIsNyBAQCBwdWJsaWM6CiAgICAg U3RyaW5nIHJlZmVycmVyKCkgY29uc3Q7CiAKICAgICBTdHJpbmcgZG9tYWluKCkgY29uc3Q7Ci0g ICAgdm9pZCBzZXREb21haW4oY29uc3QgU3RyaW5nJiBuZXdEb21haW4pOworICAgIHZvaWQgc2V0 RG9tYWluKGNvbnN0IFN0cmluZyYgbmV3RG9tYWluLCBFeGNlcHRpb25Db2RlJik7CiAKICAgICBT dHJpbmcgbGFzdE1vZGlmaWVkKCkgY29uc3Q7CiAKSW5kZXg6IFdlYkNvcmUvZG9tL0RvY3VtZW50 LmlkbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL2RvbS9Eb2N1bWVudC5pZGwJKHJldmlzaW9uIDQ3 NzQzKQorKysgV2ViQ29yZS9kb20vRG9jdW1lbnQuaWRsCSh3b3JraW5nIGNvcHkpCkBAIC0xNTYs NiArMTU2LDcgQEAgbW9kdWxlIGNvcmUgewogICAgICAgICByZWFkb25seSBhdHRyaWJ1dGUgRE9N U3RyaW5nIHJlZmVycmVyOwogI2lmIGRlZmluZWQoTEFOR1VBR0VfSkFWQVNDUklQVCkgJiYgTEFO R1VBR0VfSkFWQVNDUklQVAogICAgICAgICAgICAgICAgICBhdHRyaWJ1dGUgW0NvbnZlcnROdWxs VG9OdWxsU3RyaW5nXSBET01TdHJpbmcgZG9tYWluOworICAgICAgICAgICAgICAgICAgICAgc2V0 dGVyIHJhaXNlcyAoRE9NRXhjZXB0aW9uKTsKICNlbHNlCiAgICAgICAgIHJlYWRvbmx5IGF0dHJp YnV0ZSBET01TdHJpbmcgZG9tYWluOwogI2VuZGlmCg== 39002 2009-09-03 12:39:32 -0700 2009-09-08 05:34:29 -0700 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case added). patch.txt text/plain 5783 song.yuan SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA0ODAyNykKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTggQEAKKzIwMDktMDktMDMgIFl1YW4gU29uZyAgPHNvbmcueXVhbkBlcmljc3Nv bi5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE0NTY2CisKKyAgICAgICAg UmFpc2UgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBpZiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gY2hh bmdlIGRvY3VtZW50LmRvbWFpbiB0byBhbiBpbnZhbGlkIHZhbHVlLgorCisgICAgICAgIFRlc3Q6 IGZhc3QvZG9tL0RPTUV4Y2VwdGlvbi9pbnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhyb3dzLWV4Y2Vw dGlvbi5odG1sCisKKyAgICAgICAgKiBkb20vRG9jdW1lbnQuY3BwOgorICAgICAgICAoV2ViQ29y ZTo6RG9jdW1lbnQ6OnNldERvbWFpbik6CisgICAgICAgICogZG9tL0RvY3VtZW50Lmg6CisgICAg ICAgICogZG9tL0RvY3VtZW50LmlkbDoKKwogMjAwOS0wOS0wMyAgRHJldyBXaWxzb24gIDxhdHdp bHNvbkBnb29nbGUuY29tPgogCiAgICAgICAgIFJldmlld2VkIGJ5IERpbWl0cmkgR2xhemtvdi4K SW5kZXg6IFdlYkNvcmUvZG9tL0RvY3VtZW50LmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL2Rv bS9Eb2N1bWVudC5jcHAJKHJldmlzaW9uIDQ3OTYyKQorKysgV2ViQ29yZS9kb20vRG9jdW1lbnQu Y3BwCSh3b3JraW5nIGNvcHkpCkBAIC0yOTMzLDcgKzI5MzMsNyBAQCBTdHJpbmcgRG9jdW1lbnQ6 OmRvbWFpbigpIGNvbnN0CiAgICAgcmV0dXJuIHNlY3VyaXR5T3JpZ2luKCktPmRvbWFpbigpOwog fQogCi12b2lkIERvY3VtZW50OjpzZXREb21haW4oY29uc3QgU3RyaW5nJiBuZXdEb21haW4pCit2 b2lkIERvY3VtZW50OjpzZXREb21haW4oY29uc3QgU3RyaW5nJiBuZXdEb21haW4sIEV4Y2VwdGlv bkNvZGUmIGVjKQogewogICAgIC8vIEJvdGggTlMgYW5kIElFIHNwZWNpZnkgdGhhdCBjaGFuZ2lu ZyB0aGUgZG9tYWluIGlzIG9ubHkgYWxsb3dlZCB3aGVuCiAgICAgLy8gdGhlIG5ldyBkb21haW4g aXMgYSBzdWZmaXggb2YgdGhlIG9sZCBkb21haW4uCkBAIC0yOTU2LDE5ICsyOTU2LDI1IEBAIHZv aWQgRG9jdW1lbnQ6OnNldERvbWFpbihjb25zdCBTdHJpbmcmIG4KICAgICBpbnQgb2xkTGVuZ3Ro ID0gZG9tYWluKCkubGVuZ3RoKCk7CiAgICAgaW50IG5ld0xlbmd0aCA9IG5ld0RvbWFpbi5sZW5n dGgoKTsKICAgICAvLyBlLmcuIG5ld0RvbWFpbiA9IHdlYmtpdC5vcmcgKDEwKSBhbmQgZG9tYWlu KCkgPSB3d3cud2Via2l0Lm9yZyAoMTQpCi0gICAgaWYgKG5ld0xlbmd0aCA+PSBvbGRMZW5ndGgp CisgICAgaWYgKG5ld0xlbmd0aCA+PSBvbGRMZW5ndGgpIHsKKyAgICAgICAgZWMgPSBTRUNVUklU WV9FUlI7CiAgICAgICAgIHJldHVybjsKKyAgICB9CiAKICAgICBTdHJpbmcgdGVzdCA9IGRvbWFp bigpOwogICAgIC8vIENoZWNrIHRoYXQgaXQncyBhIHN1YmRvbWFpbiwgbm90IGUuZy4gImVia2l0 Lm9yZyIKLSAgICBpZiAodGVzdFtvbGRMZW5ndGggLSBuZXdMZW5ndGggLSAxXSAhPSAnLicpCisg ICAgaWYgKHRlc3Rbb2xkTGVuZ3RoIC0gbmV3TGVuZ3RoIC0gMV0gIT0gJy4nKSB7CisgICAgICAg IGVjID0gU0VDVVJJVFlfRVJSOwogICAgICAgICByZXR1cm47CisgICAgfQogCiAgICAgLy8gTm93 IHRlc3QgaXMgIndlYmtpdC5vcmciIGZyb20gZG9tYWluKCkKICAgICAvLyBhbmQgd2UgY2hlY2sg dGhhdCBpdCdzIHRoZSBzYW1lIHRoaW5nIGFzIG5ld0RvbWFpbgogICAgIHRlc3QucmVtb3ZlKDAs IG9sZExlbmd0aCAtIG5ld0xlbmd0aCk7Ci0gICAgaWYgKHRlc3QgIT0gbmV3RG9tYWluKQorICAg IGlmICh0ZXN0ICE9IG5ld0RvbWFpbikgeworICAgICAgICBlYyA9IFNFQ1VSSVRZX0VSUjsKICAg ICAgICAgcmV0dXJuOworICAgIH0KIAogICAgIHNlY3VyaXR5T3JpZ2luKCktPnNldERvbWFpbkZy b21ET00obmV3RG9tYWluKTsKICAgICBpZiAobV9mcmFtZSkKSW5kZXg6IFdlYkNvcmUvZG9tL0Rv Y3VtZW50LmgKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQotLS0gV2ViQ29yZS9kb20vRG9jdW1lbnQuaAkocmV2aXNpb24g NDc5NjIpCisrKyBXZWJDb3JlL2RvbS9Eb2N1bWVudC5oCSh3b3JraW5nIGNvcHkpCkBAIC02MzMs NyArNjMzLDcgQEAgcHVibGljOgogICAgIFN0cmluZyByZWZlcnJlcigpIGNvbnN0OwogCiAgICAg U3RyaW5nIGRvbWFpbigpIGNvbnN0OwotICAgIHZvaWQgc2V0RG9tYWluKGNvbnN0IFN0cmluZyYg bmV3RG9tYWluKTsKKyAgICB2b2lkIHNldERvbWFpbihjb25zdCBTdHJpbmcmIG5ld0RvbWFpbiwg RXhjZXB0aW9uQ29kZSYpOwogCiAgICAgU3RyaW5nIGxhc3RNb2RpZmllZCgpIGNvbnN0OwogCklu ZGV4OiBXZWJDb3JlL2RvbS9Eb2N1bWVudC5pZGwKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gV2ViQ29yZS9kb20v RG9jdW1lbnQuaWRsCShyZXZpc2lvbiA0Nzk2MikKKysrIFdlYkNvcmUvZG9tL0RvY3VtZW50Lmlk bAkod29ya2luZyBjb3B5KQpAQCAtMTU1LDcgKzE1NSw4IEBAIG1vZHVsZSBjb3JlIHsKICAgICAg ICAgICAgICAgICAgYXR0cmlidXRlIFtDb252ZXJ0TnVsbFRvTnVsbFN0cmluZ10gRE9NU3RyaW5n IHRpdGxlOwogICAgICAgICByZWFkb25seSBhdHRyaWJ1dGUgRE9NU3RyaW5nIHJlZmVycmVyOwog I2lmIGRlZmluZWQoTEFOR1VBR0VfSkFWQVNDUklQVCkgJiYgTEFOR1VBR0VfSkFWQVNDUklQVAot ICAgICAgICAgICAgICAgICBhdHRyaWJ1dGUgW0NvbnZlcnROdWxsVG9OdWxsU3RyaW5nXSBET01T dHJpbmcgZG9tYWluOworICAgICAgICAgICAgICAgICBhdHRyaWJ1dGUgW0NvbnZlcnROdWxsVG9O dWxsU3RyaW5nXSBET01TdHJpbmcgZG9tYWluCisgICAgICAgICAgICAgICAgICAgICBzZXR0ZXIg cmFpc2VzIChET01FeGNlcHRpb24pOwogI2Vsc2UKICAgICAgICAgcmVhZG9ubHkgYXR0cmlidXRl IERPTVN0cmluZyBkb21haW47CiAjZW5kaWYKSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDQ4MDI3KQorKysg TGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTQgQEAKKzIw MDktMDktMDMgIFl1YW4gU29uZyAgPHNvbmcueXVhbkBlcmljc3Nvbi5jb20+CisKKyAgICAgICAg UmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtp dC5vcmcvc2hvd19idWcuY2dpP2lkPTE0NTY2CisKKyAgICAgICAgQWRkIHRlc3QgdG8gZW5zdXJl IGEgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBpcyByYWlzZWQgaWYgYW4gYXR0ZW1wdCBpcyBtYWRl IHRvIGNoYW5nZSBkb2N1bWVudC5kb21haW4gdG8gYW4gaW52YWxpZCB2YWx1ZS4KKwkKKyAgICAg ICAgKiBmYXN0L2RvbS9ET01FeGNlcHRpb24vaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1l eGNlcHRpb24tZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2RvbS9ET01FeGNl cHRpb24vaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uaHRtbDogQWRkZWQu CisKIDIwMDktMDktMDMgIERyZXcgV2lsc29uICA8YXR3aWxzb25AZ29vZ2xlLmNvbT4KIAogICAg ICAgICBSZXZpZXdlZCBieSBTYW0gV2VpbmlnLgpJbmRleDogTGF5b3V0VGVzdHMvZmFzdC9kb20v RE9NRXhjZXB0aW9uL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLWV4cGVj dGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L2RvbS9ET01FeGNlcHRpb24v aW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24tZXhwZWN0ZWQudHh0CShyZXZp c2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9kb20vRE9NRXhjZXB0aW9uL2ludmFsaWQtZG9t YWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAg LTAsMCArMSwzIEBACitUZXN0IHRvIGVuc3VyZSBhIFNFQ1VSSVRZX0VSUiBleGNlcHRpb24gaXMg cmFpc2VkIGlmIGFuIGF0dGVtcHQgaXMgbWFkZSB0byBjaGFuZ2UgZG9jdW1lbnQuZG9tYWluIHRv IGFuIGludmFsaWQgdmFsdWUuIFNob3VsZCBwcmludCBhIFBBU1MgbWVzc2FnZS4KKworUEFTUzog ZXhjZXB0aW9uIHRocm93biAnU0VDVVJJVFlfRVJSOiBET00gRXhjZXB0aW9uIDE4JwpJbmRleDog TGF5b3V0VGVzdHMvZmFzdC9kb20vRE9NRXhjZXB0aW9uL2ludmFsaWQtZG9tYWluLWNoYW5nZS10 aHJvd3MtZXhjZXB0aW9uLmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9kb20v RE9NRXhjZXB0aW9uL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmh0bWwJ KHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9mYXN0L2RvbS9ET01FeGNlcHRpb24vaW52YWxp ZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uaHRtbAkocmV2aXNpb24gMCkKQEAgLTAs MCArMSwzMSBAQAorPGh0bWw+CisKKzxoZWFkPgorPHNjcmlwdD4KK2lmICh3aW5kb3cubGF5b3V0 VGVzdENvbnRyb2xsZXIpIHsKKyAgICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7 CisgICAgbGF5b3V0VGVzdENvbnRyb2xsZXIud2FpdFVudGlsRG9uZSgpOworfQorCit3aW5kb3cu b25sb2FkID0gaW52YWxpZF9kb21haW5fY2hhbmdlOworCitmdW5jdGlvbiBpbnZhbGlkX2RvbWFp bl9jaGFuZ2UoKSB7CisgICAgdHJ5IHsKKyAgICAgICAgZG9jdW1lbnQuZG9tYWluID0gImFwcGxl LmNvbSI7CisgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJjb25zb2xlIikuaW5uZXJI VE1MID0gIkZBSUw6IG5vIGV4Y2VwdGlvbiB0aHJvd24iOworICAgIH0gY2F0Y2ggKGUpIHsKKyAg ICAgICAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoImNvbnNvbGUiKS5pbm5lckhUTUwgPSAiUEFT UzogZXhjZXB0aW9uIHRocm93biAnIiArIGUubWVzc2FnZSArICInIjsKKyAgICB9CisKKyAgICBp ZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKQorICAgICAgICBsYXlvdXRUZXN0Q29udHJv bGxlci5ub3RpZnlEb25lKCk7Cit9Cis8L3NjcmlwdD4KKzwvaGVhZD4KKworPGJvZHk+Cis8cD5U ZXN0IHRvIGVuc3VyZSBhIFNFQ1VSSVRZX0VSUiBleGNlcHRpb24gaXMgcmFpc2VkIGlmIGFuIGF0 dGVtcHQgaXMgbWFkZSB0byBjaGFuZ2UgZG9jdW1lbnQuZG9tYWluIHRvIGFuIGludmFsaWQgdmFs dWUuIFNob3VsZCBwcmludCBhIFBBU1MgbWVzc2FnZS48L3A+Cis8ZGl2IGlkPSJjb25zb2xlIj48 L2Rpdj4KKzwvYm9keT4KKworPC9odG1sPgo= 39180 2009-09-08 05:34:29 -0700 2009-09-21 01:58:40 -0700 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (test case changed to js-only test). patch.txt text/plain 6088 song.yuan SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA0ODE0NykKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTggQEAKKzIwMDktMDktMDggIFl1YW4gU29uZyAgPHNvbmcueXVhbkBlcmljc3Nv bi5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE0NTY2CisKKyAgICAgICAg UmFpc2UgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBpZiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gY2hh bmdlIGRvY3VtZW50LmRvbWFpbiB0byBhbiBpbnZhbGlkIHZhbHVlLgorCisgICAgICAgIFRlc3Q6 IGZhc3QvanMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uaHRtbAorCisg ICAgICAgICogZG9tL0RvY3VtZW50LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50Ojpz ZXREb21haW4pOgorICAgICAgICAqIGRvbS9Eb2N1bWVudC5oOgorICAgICAgICAqIGRvbS9Eb2N1 bWVudC5pZGw6CisKIDIwMDktMDktMDggIEpvY2VseW4gVHVyY290dGUgIDxqb2NlbHluLnR1cmNv dHRlQG5va2lhLmNvbT4KIAogICAgICAgICBSZXZpZXdlZCBieSBUaW1vdGh5IEhhdGNoZXIuCklu ZGV4OiBXZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gV2ViQ29yZS9kb20v RG9jdW1lbnQuY3BwCShyZXZpc2lvbiA0ODE0NykKKysrIFdlYkNvcmUvZG9tL0RvY3VtZW50LmNw cAkod29ya2luZyBjb3B5KQpAQCAtMjkxMSw3ICsyOTExLDcgQEAgU3RyaW5nIERvY3VtZW50Ojpk b21haW4oKSBjb25zdAogICAgIHJldHVybiBzZWN1cml0eU9yaWdpbigpLT5kb21haW4oKTsKIH0K IAotdm9pZCBEb2N1bWVudDo6c2V0RG9tYWluKGNvbnN0IFN0cmluZyYgbmV3RG9tYWluKQordm9p ZCBEb2N1bWVudDo6c2V0RG9tYWluKGNvbnN0IFN0cmluZyYgbmV3RG9tYWluLCBFeGNlcHRpb25D b2RlJiBlYykKIHsKICAgICAvLyBCb3RoIE5TIGFuZCBJRSBzcGVjaWZ5IHRoYXQgY2hhbmdpbmcg dGhlIGRvbWFpbiBpcyBvbmx5IGFsbG93ZWQgd2hlbgogICAgIC8vIHRoZSBuZXcgZG9tYWluIGlz IGEgc3VmZml4IG9mIHRoZSBvbGQgZG9tYWluLgpAQCAtMjkzNCwxOSArMjkzNCwyNSBAQCB2b2lk IERvY3VtZW50OjpzZXREb21haW4oY29uc3QgU3RyaW5nJiBuCiAgICAgaW50IG9sZExlbmd0aCA9 IGRvbWFpbigpLmxlbmd0aCgpOwogICAgIGludCBuZXdMZW5ndGggPSBuZXdEb21haW4ubGVuZ3Ro KCk7CiAgICAgLy8gZS5nLiBuZXdEb21haW4gPSB3ZWJraXQub3JnICgxMCkgYW5kIGRvbWFpbigp ID0gd3d3LndlYmtpdC5vcmcgKDE0KQotICAgIGlmIChuZXdMZW5ndGggPj0gb2xkTGVuZ3RoKQor ICAgIGlmIChuZXdMZW5ndGggPj0gb2xkTGVuZ3RoKSB7CisgICAgICAgIGVjID0gU0VDVVJJVFlf RVJSOwogICAgICAgICByZXR1cm47CisgICAgfQogCiAgICAgU3RyaW5nIHRlc3QgPSBkb21haW4o KTsKICAgICAvLyBDaGVjayB0aGF0IGl0J3MgYSBzdWJkb21haW4sIG5vdCBlLmcuICJlYmtpdC5v cmciCi0gICAgaWYgKHRlc3Rbb2xkTGVuZ3RoIC0gbmV3TGVuZ3RoIC0gMV0gIT0gJy4nKQorICAg IGlmICh0ZXN0W29sZExlbmd0aCAtIG5ld0xlbmd0aCAtIDFdICE9ICcuJykgeworICAgICAgICBl YyA9IFNFQ1VSSVRZX0VSUjsKICAgICAgICAgcmV0dXJuOworICAgIH0KIAogICAgIC8vIE5vdyB0 ZXN0IGlzICJ3ZWJraXQub3JnIiBmcm9tIGRvbWFpbigpCiAgICAgLy8gYW5kIHdlIGNoZWNrIHRo YXQgaXQncyB0aGUgc2FtZSB0aGluZyBhcyBuZXdEb21haW4KICAgICB0ZXN0LnJlbW92ZSgwLCBv bGRMZW5ndGggLSBuZXdMZW5ndGgpOwotICAgIGlmICh0ZXN0ICE9IG5ld0RvbWFpbikKKyAgICBp ZiAodGVzdCAhPSBuZXdEb21haW4pIHsKKyAgICAgICAgZWMgPSBTRUNVUklUWV9FUlI7CiAgICAg ICAgIHJldHVybjsKKyAgICB9CiAKICAgICBzZWN1cml0eU9yaWdpbigpLT5zZXREb21haW5Gcm9t RE9NKG5ld0RvbWFpbik7CiAgICAgaWYgKG1fZnJhbWUpCkluZGV4OiBXZWJDb3JlL2RvbS9Eb2N1 bWVudC5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvZG9tL0RvY3VtZW50LmgJKHJldmlzaW9uIDQ4 MTQ3KQorKysgV2ViQ29yZS9kb20vRG9jdW1lbnQuaAkod29ya2luZyBjb3B5KQpAQCAtNjIwLDcg KzYyMCw3IEBAIHB1YmxpYzoKICAgICBTdHJpbmcgcmVmZXJyZXIoKSBjb25zdDsKIAogICAgIFN0 cmluZyBkb21haW4oKSBjb25zdDsKLSAgICB2b2lkIHNldERvbWFpbihjb25zdCBTdHJpbmcmIG5l d0RvbWFpbik7CisgICAgdm9pZCBzZXREb21haW4oY29uc3QgU3RyaW5nJiBuZXdEb21haW4sIEV4 Y2VwdGlvbkNvZGUmKTsKIAogICAgIFN0cmluZyBsYXN0TW9kaWZpZWQoKSBjb25zdDsKIApJbmRl eDogV2ViQ29yZS9kb20vRG9jdW1lbnQuaWRsCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvZG9tL0Rv Y3VtZW50LmlkbAkocmV2aXNpb24gNDgxNDcpCisrKyBXZWJDb3JlL2RvbS9Eb2N1bWVudC5pZGwJ KHdvcmtpbmcgY29weSkKQEAgLTE1NSw3ICsxNTUsOCBAQCBtb2R1bGUgY29yZSB7CiAgICAgICAg ICAgICAgICAgIGF0dHJpYnV0ZSBbQ29udmVydE51bGxUb051bGxTdHJpbmddIERPTVN0cmluZyB0 aXRsZTsKICAgICAgICAgcmVhZG9ubHkgYXR0cmlidXRlIERPTVN0cmluZyByZWZlcnJlcjsKICNp ZiBkZWZpbmVkKExBTkdVQUdFX0pBVkFTQ1JJUFQpICYmIExBTkdVQUdFX0pBVkFTQ1JJUFQKLSAg ICAgICAgICAgICAgICAgYXR0cmlidXRlIFtDb252ZXJ0TnVsbFRvTnVsbFN0cmluZ10gRE9NU3Ry aW5nIGRvbWFpbjsKKyAgICAgICAgICAgICAgICAgYXR0cmlidXRlIFtDb252ZXJ0TnVsbFRvTnVs bFN0cmluZ10gRE9NU3RyaW5nIGRvbWFpbgorICAgICAgICAgICAgICAgICAgICAgc2V0dGVyIHJh aXNlcyAoRE9NRXhjZXB0aW9uKTsKICNlbHNlCiAgICAgICAgIHJlYWRvbmx5IGF0dHJpYnV0ZSBE T01TdHJpbmcgZG9tYWluOwogI2VuZGlmCkluZGV4OiBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCShyZXZpc2lvbiA0ODE0NykKKysrIExh eW91dFRlc3RzL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDA5 LTA5LTA4ICBZdWFuIFNvbmcgIDxzb25nLnl1YW5AZXJpY3Nzb24uY29tPgorCisgICAgICAgIFJl dmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQu b3JnL3Nob3dfYnVnLmNnaT9pZD0xNDU2NgorCisgICAgICAgIEFkZCB0ZXN0IHRvIGVuc3VyZSBh IFNFQ1VSSVRZX0VSUiBleGNlcHRpb24gaXMgcmFpc2VkIGlmIGFuIGF0dGVtcHQgaXMgbWFkZSB0 byBjaGFuZ2UgZG9jdW1lbnQuZG9tYWluIHRvIGFuIGludmFsaWQgdmFsdWUuCisKKyAgICAgICAg KiBmYXN0L2pzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLWV4cGVjdGVk LnR4dDogQWRkZWQuCisgICAgICAgICogZmFzdC9qcy9pbnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhy b3dzLWV4Y2VwdGlvbi5odG1sOiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2pzL3Jlc291cmNlcy9p bnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhyb3dzLWV4Y2VwdGlvbi5qczogQWRkZWQuCisKIDIwMDkt MDktMDcgIFN0ZXZlIEJsb2NrICA8c3RldmVibG9ja0Bnb29nbGUuY29tPgogCiAgICAgICAgIFJl dmlld2VkIGJ5IEFkYW0gQmFydGguCkluZGV4OiBMYXlvdXRUZXN0cy9mYXN0L2pzL2ludmFsaWQt ZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0t LSBMYXlvdXRUZXN0cy9mYXN0L2pzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0 aW9uLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2Zhc3QvanMvaW52 YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24tZXhwZWN0ZWQudHh0CShyZXZpc2lv biAwKQpAQCAtMCwwICsxLDEwIEBACitUaGlzIHRlc3QgY2hlY2tzIHRoYXQgYSBTRUNVUklUWV9F UlIgZXhjZXB0aW9uIGlzIHJhaXNlZCBpZiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gY2hhbmdlIGRv Y3VtZW50LmRvbWFpbiB0byBhbiBpbnZhbGlkIHZhbHVlLgorCitPbiBzdWNjZXNzLCB5b3Ugd2ls bCBzZWUgYSBzZXJpZXMgb2YgIlBBU1MiIG1lc3NhZ2VzLCBmb2xsb3dlZCBieSAiVEVTVCBDT01Q TEVURSIuCisKKworUEFTUyBkb2N1bWVudC5kb21haW4gPSAiYXBwbGUuY29tIiB0aHJldyBleGNl cHRpb24gRXJyb3I6IFNFQ1VSSVRZX0VSUjogRE9NIEV4Y2VwdGlvbiAxOC4KK1BBU1Mgc3VjY2Vz c2Z1bGx5UGFyc2VkIGlzIHRydWUKKworVEVTVCBDT01QTEVURQorCkluZGV4OiBMYXlvdXRUZXN0 cy9mYXN0L2pzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmh0bWwKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9qcy9pbnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhy b3dzLWV4Y2VwdGlvbi5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9qcy9p bnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhyb3dzLWV4Y2VwdGlvbi5odG1sCShyZXZpc2lvbiAwKQpA QCAtMCwwICsxLDEzIEBACis8IURPQ1RZUEUgSFRNTCBQVUJMSUMgIi0vL0lFVEYvL0RURCBIVE1M Ly9FTiI+Cis8aHRtbD4KKzxoZWFkPgorPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJyZXNv dXJjZXMvanMtdGVzdC1zdHlsZS5jc3MiPgorPHNjcmlwdCBzcmM9InJlc291cmNlcy9qcy10ZXN0 LXByZS5qcyI+PC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKzxwIGlkPSJkZXNjcmlwdGlvbiI+ PC9wPgorPGRpdiBpZD0iY29uc29sZSI+PC9kaXY+Cis8c2NyaXB0IHNyYz0icmVzb3VyY2VzL2lu dmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmpzIj48L3NjcmlwdD4KKzxzY3Jp cHQgc3JjPSJyZXNvdXJjZXMvanMtdGVzdC1wb3N0LmpzIj48L3NjcmlwdD4KKzwvYm9keT4KKzwv aHRtbD4KSW5kZXg6IExheW91dFRlc3RzL2Zhc3QvanMvcmVzb3VyY2VzL2ludmFsaWQtZG9tYWlu LWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmpzCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zh c3QvanMvcmVzb3VyY2VzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmpz CShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9qcy9yZXNvdXJjZXMvaW52YWxpZC1k b21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uanMJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEs NSBAQAorZGVzY3JpcHRpb24oIlRoaXMgdGVzdCBjaGVja3MgdGhhdCBhIFNFQ1VSSVRZX0VSUiBl eGNlcHRpb24gaXMgcmFpc2VkIGlmIGFuIGF0dGVtcHQgaXMgbWFkZSB0byBjaGFuZ2UgZG9jdW1l bnQuZG9tYWluIHRvIGFuIGludmFsaWQgdmFsdWUuIik7CisKK3Nob3VsZFRocm93KCdkb2N1bWVu dC5kb21haW4gPSAiYXBwbGUuY29tIicsICciRXJyb3I6IFNFQ1VSSVRZX0VSUjogRE9NIEV4Y2Vw dGlvbiAxOCInKTsKKwordmFyIHN1Y2Nlc3NmdWxseVBhcnNlZCA9IHRydWU7Cg== 39843 2009-09-21 01:58:40 -0700 2009-09-23 06:54:39 -0700 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value ("document.domain" is not set to "mydummydomain" any more in fast/forms/basic-textareas.html) patch.txt text/plain 7291 song.yuan SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA0ODU3NCkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTggQEAKKzIwMDktMDktMjEgIFl1YW4gU29uZyAgPHNvbmcueXVhbkBlcmljc3Nv bi5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE0NTY2CisKKyAgICAgICAg UmFpc2UgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBpZiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gY2hh bmdlIGRvY3VtZW50LmRvbWFpbiB0byBhbiBpbnZhbGlkIHZhbHVlLgorCisgICAgICAgIFRlc3Q6 IGZhc3QvanMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uaHRtbAorCisg ICAgICAgICogZG9tL0RvY3VtZW50LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50Ojpz ZXREb21haW4pOgorICAgICAgICAqIGRvbS9Eb2N1bWVudC5oOgorICAgICAgICAqIGRvbS9Eb2N1 bWVudC5pZGw6CisKIDIwMDktMDktMjAgIEFkYW0gQmFydGggIDxhYmFydGhAd2Via2l0Lm9yZz4K IAogICAgICAgICBSZXZpZXdlZCBieSBNYWNpZWogU3RhY2hvd2lhay4KSW5kZXg6IFdlYkNvcmUv ZG9tL0RvY3VtZW50LmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAJ KHJldmlzaW9uIDQ4MTQ3KQorKysgV2ViQ29yZS9kb20vRG9jdW1lbnQuY3BwCSh3b3JraW5nIGNv cHkpCkBAIC0yOTExLDcgKzI5MTEsNyBAQCBTdHJpbmcgRG9jdW1lbnQ6OmRvbWFpbigpIGNvbnN0 CiAgICAgcmV0dXJuIHNlY3VyaXR5T3JpZ2luKCktPmRvbWFpbigpOwogfQogCi12b2lkIERvY3Vt ZW50OjpzZXREb21haW4oY29uc3QgU3RyaW5nJiBuZXdEb21haW4pCit2b2lkIERvY3VtZW50Ojpz ZXREb21haW4oY29uc3QgU3RyaW5nJiBuZXdEb21haW4sIEV4Y2VwdGlvbkNvZGUmIGVjKQogewog ICAgIC8vIEJvdGggTlMgYW5kIElFIHNwZWNpZnkgdGhhdCBjaGFuZ2luZyB0aGUgZG9tYWluIGlz IG9ubHkgYWxsb3dlZCB3aGVuCiAgICAgLy8gdGhlIG5ldyBkb21haW4gaXMgYSBzdWZmaXggb2Yg dGhlIG9sZCBkb21haW4uCkBAIC0yOTM0LDE5ICsyOTM0LDI1IEBAIHZvaWQgRG9jdW1lbnQ6OnNl dERvbWFpbihjb25zdCBTdHJpbmcmIG4KICAgICBpbnQgb2xkTGVuZ3RoID0gZG9tYWluKCkubGVu Z3RoKCk7CiAgICAgaW50IG5ld0xlbmd0aCA9IG5ld0RvbWFpbi5sZW5ndGgoKTsKICAgICAvLyBl LmcuIG5ld0RvbWFpbiA9IHdlYmtpdC5vcmcgKDEwKSBhbmQgZG9tYWluKCkgPSB3d3cud2Via2l0 Lm9yZyAoMTQpCi0gICAgaWYgKG5ld0xlbmd0aCA+PSBvbGRMZW5ndGgpCisgICAgaWYgKG5ld0xl bmd0aCA+PSBvbGRMZW5ndGgpIHsKKyAgICAgICAgZWMgPSBTRUNVUklUWV9FUlI7CiAgICAgICAg IHJldHVybjsKKyAgICB9CiAKICAgICBTdHJpbmcgdGVzdCA9IGRvbWFpbigpOwogICAgIC8vIENo ZWNrIHRoYXQgaXQncyBhIHN1YmRvbWFpbiwgbm90IGUuZy4gImVia2l0Lm9yZyIKLSAgICBpZiAo dGVzdFtvbGRMZW5ndGggLSBuZXdMZW5ndGggLSAxXSAhPSAnLicpCisgICAgaWYgKHRlc3Rbb2xk TGVuZ3RoIC0gbmV3TGVuZ3RoIC0gMV0gIT0gJy4nKSB7CisgICAgICAgIGVjID0gU0VDVVJJVFlf RVJSOwogICAgICAgICByZXR1cm47CisgICAgfQogCiAgICAgLy8gTm93IHRlc3QgaXMgIndlYmtp dC5vcmciIGZyb20gZG9tYWluKCkKICAgICAvLyBhbmQgd2UgY2hlY2sgdGhhdCBpdCdzIHRoZSBz YW1lIHRoaW5nIGFzIG5ld0RvbWFpbgogICAgIHRlc3QucmVtb3ZlKDAsIG9sZExlbmd0aCAtIG5l d0xlbmd0aCk7Ci0gICAgaWYgKHRlc3QgIT0gbmV3RG9tYWluKQorICAgIGlmICh0ZXN0ICE9IG5l d0RvbWFpbikgeworICAgICAgICBlYyA9IFNFQ1VSSVRZX0VSUjsKICAgICAgICAgcmV0dXJuOwor ICAgIH0KIAogICAgIHNlY3VyaXR5T3JpZ2luKCktPnNldERvbWFpbkZyb21ET00obmV3RG9tYWlu KTsKICAgICBpZiAobV9mcmFtZSkKSW5kZXg6IFdlYkNvcmUvZG9tL0RvY3VtZW50LmgKPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gV2ViQ29yZS9kb20vRG9jdW1lbnQuaAkocmV2aXNpb24gNDgxNDcpCisrKyBXZWJD b3JlL2RvbS9Eb2N1bWVudC5oCSh3b3JraW5nIGNvcHkpCkBAIC02MjAsNyArNjIwLDcgQEAgcHVi bGljOgogICAgIFN0cmluZyByZWZlcnJlcigpIGNvbnN0OwogCiAgICAgU3RyaW5nIGRvbWFpbigp IGNvbnN0OwotICAgIHZvaWQgc2V0RG9tYWluKGNvbnN0IFN0cmluZyYgbmV3RG9tYWluKTsKKyAg ICB2b2lkIHNldERvbWFpbihjb25zdCBTdHJpbmcmIG5ld0RvbWFpbiwgRXhjZXB0aW9uQ29kZSYp OwogCiAgICAgU3RyaW5nIGxhc3RNb2RpZmllZCgpIGNvbnN0OwogCkluZGV4OiBXZWJDb3JlL2Rv bS9Eb2N1bWVudC5pZGwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gV2ViQ29yZS9kb20vRG9jdW1lbnQuaWRsCShy ZXZpc2lvbiA0ODE0NykKKysrIFdlYkNvcmUvZG9tL0RvY3VtZW50LmlkbAkod29ya2luZyBjb3B5 KQpAQCAtMTU1LDcgKzE1NSw4IEBAIG1vZHVsZSBjb3JlIHsKICAgICAgICAgICAgICAgICAgYXR0 cmlidXRlIFtDb252ZXJ0TnVsbFRvTnVsbFN0cmluZ10gRE9NU3RyaW5nIHRpdGxlOwogICAgICAg ICByZWFkb25seSBhdHRyaWJ1dGUgRE9NU3RyaW5nIHJlZmVycmVyOwogI2lmIGRlZmluZWQoTEFO R1VBR0VfSkFWQVNDUklQVCkgJiYgTEFOR1VBR0VfSkFWQVNDUklQVAotICAgICAgICAgICAgICAg ICBhdHRyaWJ1dGUgW0NvbnZlcnROdWxsVG9OdWxsU3RyaW5nXSBET01TdHJpbmcgZG9tYWluOwor ICAgICAgICAgICAgICAgICBhdHRyaWJ1dGUgW0NvbnZlcnROdWxsVG9OdWxsU3RyaW5nXSBET01T dHJpbmcgZG9tYWluCisgICAgICAgICAgICAgICAgICAgICBzZXR0ZXIgcmFpc2VzIChET01FeGNl cHRpb24pOwogI2Vsc2UKICAgICAgICAgcmVhZG9ubHkgYXR0cmlidXRlIERPTVN0cmluZyBkb21h aW47CiAjZW5kaWYKSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBM YXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDQ4NTc0KQorKysgTGF5b3V0VGVzdHMvQ2hh bmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTYgQEAKKzIwMDktMDktMjEgIFl1YW4g U29uZyAgPHNvbmcueXVhbkBlcmljc3Nvbi5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9C T0RZIChPT1BTISkuCisKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcu Y2dpP2lkPTE0NTY2CisKKyAgICAgICAgQWRkIHRlc3QgdG8gZW5zdXJlIGEgU0VDVVJJVFlfRVJS IGV4Y2VwdGlvbiBpcyByYWlzZWQgaWYgYW4gYXR0ZW1wdCBpcyBtYWRlIHRvIGNoYW5nZSBkb2N1 bWVudC5kb21haW4gdG8gYW4gaW52YWxpZCB2YWx1ZS4KKworICAgICAgICAqIGZhc3QvZm9ybXMv YmFzaWMtdGV4dGFyZWFzLmh0bWw6ICJkb2N1bWVudC5kb21haW4iIGlzIG5vdCBzZXQgdG8gIm15 ZHVtbXlkb21haW4iIGFueSBtb3JlIHNpbmNlIGl0J3MgZmF1bHR5IGFuZCBub3QgbmVjZXNzYXJ5 IGhlcmUuCisgICAgICAgICogZmFzdC9qcy9pbnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhyb3dzLWV4 Y2VwdGlvbi1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGZhc3QvanMvaW52YWxpZC1k b21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uaHRtbDogQWRkZWQuCisgICAgICAgICogZmFz dC9qcy9yZXNvdXJjZXMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uanM6 IEFkZGVkLgorCiAyMDA5LTA5LTIwICBBZGFtIEJhcnRoICA8YWJhcnRoQHdlYmtpdC5vcmc+CiAK ICAgICAgICAgUmV2aWV3ZWQgYnkgTWFjaWVqIFN0YWNob3dpYWsuCkluZGV4OiBMYXlvdXRUZXN0 cy9mYXN0L2Zvcm1zL2Jhc2ljLXRleHRhcmVhcy5odG1sCj09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRl c3RzL2Zhc3QvZm9ybXMvYmFzaWMtdGV4dGFyZWFzLmh0bWwJKHJldmlzaW9uIDQ4MTQ3KQorKysg TGF5b3V0VGVzdHMvZmFzdC9mb3Jtcy9iYXNpYy10ZXh0YXJlYXMuaHRtbAkod29ya2luZyBjb3B5 KQpAQCAtODEsMTQgKzgxLDExIEBAIGZ1bmN0aW9uIGFkZEFsbFRleHRhcmVhcyhpZnJhbWUsIGNv bXBhdE0KICAgICBpZnJhbWUuc3R5bGUuaGVpZ2h0ID0gZG9jVG9BcHBlbmRUby5ib2R5Lm9mZnNl dEhlaWdodCArIDUgKyAncHgnOwogfQogCi0vLyBTZXQgdGhlIGRvbWFpbiBpbiB0aGUgdG9wLWxl dmVsIHBhZ2UgYXMgd2VsbCBhcyB0aGUgaWZyYW1lLgotLy8gU28gdGhleSBjYW4gY29tbXVuaWNh dGUgZGVzcGl0ZSB1c2Ugb2YgdGhlIGRhdGEgdXJsLgotZG9jdW1lbnQuZG9tYWluID0gJ215ZHVt bXlkb21haW4nOwogZG9jdW1lbnQuYm9keS5zdHlsZS5tYXJnaW4gPSAwOwogCiB2YXIgc3RhbmRh cmRzSWZyYW1lID0gZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnaWZyYW1lJyk7CiAvLyBDcmVhdGUg YSBwYWdlIHdpdGggYSBkb2N0eXBlIHNvIGl0J3Mgc3RhbmRhcmRzIG1vZGUuCi1zdGFuZGFyZHNJ ZnJhbWUuc3JjID0gJ2RhdGE6dGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgsJTNDIURPQ1RZUEUlMjBI VE1MJTNFJTNDYm9keSUzRSUzQ3NjcmlwdCUzRWRvY3VtZW50LmRvbWFpbiUyMCUzRCUyMCJteWR1 bW15ZG9tYWluIiUzQiUzQyUyRmJvZHklM0UlM0MlMkZodG1sJTNFJTBEJTBBJzsKK3N0YW5kYXJk c0lmcmFtZS5zcmMgPSAnZGF0YTp0ZXh0L2h0bWw7Y2hhcnNldD11dGYtOCwlM0MhRE9DVFlQRSUy MEhUTUwlM0UlM0Nib2R5JTNFJTNDJTJGYm9keSUzRSUzQyUyRmh0bWwlM0UlMEQlMEEnOwogc3Rh bmRhcmRzSWZyYW1lLm9ubG9hZCA9IGZ1bmN0aW9uKGUpIHsKICAgICBhZGRBbGxUZXh0YXJlYXMo ZS50YXJnZXQsICdDU1MxQ29tcGF0Jyk7CiB9CkluZGV4OiBMYXlvdXRUZXN0cy9mYXN0L2pzL2lu dmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLWV4cGVjdGVkLnR4dAo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L2pzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3Mt ZXhjZXB0aW9uLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2Zhc3Qv anMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24tZXhwZWN0ZWQudHh0CShy ZXZpc2lvbiAwKQpAQCAtMCwwICsxLDEwIEBACitUaGlzIHRlc3QgY2hlY2tzIHRoYXQgYSBTRUNV UklUWV9FUlIgZXhjZXB0aW9uIGlzIHJhaXNlZCBpZiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gY2hh bmdlIGRvY3VtZW50LmRvbWFpbiB0byBhbiBpbnZhbGlkIHZhbHVlLgorCitPbiBzdWNjZXNzLCB5 b3Ugd2lsbCBzZWUgYSBzZXJpZXMgb2YgIlBBU1MiIG1lc3NhZ2VzLCBmb2xsb3dlZCBieSAiVEVT VCBDT01QTEVURSIuCisKKworUEFTUyBkb2N1bWVudC5kb21haW4gPSAiYXBwbGUuY29tIiB0aHJl dyBleGNlcHRpb24gRXJyb3I6IFNFQ1VSSVRZX0VSUjogRE9NIEV4Y2VwdGlvbiAxOC4KK1BBU1Mg c3VjY2Vzc2Z1bGx5UGFyc2VkIGlzIHRydWUKKworVEVTVCBDT01QTEVURQorCkluZGV4OiBMYXlv dXRUZXN0cy9mYXN0L2pzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmh0 bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9qcy9pbnZhbGlkLWRvbWFpbi1jaGFu Z2UtdGhyb3dzLWV4Y2VwdGlvbi5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFz dC9qcy9pbnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhyb3dzLWV4Y2VwdGlvbi5odG1sCShyZXZpc2lv biAwKQpAQCAtMCwwICsxLDEzIEBACis8IURPQ1RZUEUgSFRNTCBQVUJMSUMgIi0vL0lFVEYvL0RU RCBIVE1MLy9FTiI+Cis8aHRtbD4KKzxoZWFkPgorPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVm PSJyZXNvdXJjZXMvanMtdGVzdC1zdHlsZS5jc3MiPgorPHNjcmlwdCBzcmM9InJlc291cmNlcy9q cy10ZXN0LXByZS5qcyI+PC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKzxwIGlkPSJkZXNjcmlw dGlvbiI+PC9wPgorPGRpdiBpZD0iY29uc29sZSI+PC9kaXY+Cis8c2NyaXB0IHNyYz0icmVzb3Vy Y2VzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmpzIj48L3NjcmlwdD4K KzxzY3JpcHQgc3JjPSJyZXNvdXJjZXMvanMtdGVzdC1wb3N0LmpzIj48L3NjcmlwdD4KKzwvYm9k eT4KKzwvaHRtbD4KSW5kZXg6IExheW91dFRlc3RzL2Zhc3QvanMvcmVzb3VyY2VzL2ludmFsaWQt ZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmpzCj09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRl c3RzL2Zhc3QvanMvcmVzb3VyY2VzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0 aW9uLmpzCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9qcy9yZXNvdXJjZXMvaW52 YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uanMJKHJldmlzaW9uIDApCkBAIC0w LDAgKzEsNSBAQAorZGVzY3JpcHRpb24oIlRoaXMgdGVzdCBjaGVja3MgdGhhdCBhIFNFQ1VSSVRZ X0VSUiBleGNlcHRpb24gaXMgcmFpc2VkIGlmIGFuIGF0dGVtcHQgaXMgbWFkZSB0byBjaGFuZ2Ug ZG9jdW1lbnQuZG9tYWluIHRvIGFuIGludmFsaWQgdmFsdWUuIik7CisKK3Nob3VsZFRocm93KCdk b2N1bWVudC5kb21haW4gPSAiYXBwbGUuY29tIicsICciRXJyb3I6IFNFQ1VSSVRZX0VSUjogRE9N IEV4Y2VwdGlvbiAxOCInKTsKKwordmFyIHN1Y2Nlc3NmdWxseVBhcnNlZCA9IHRydWU7Cg== 39994 2009-09-23 06:54:39 -0700 2009-09-25 10:53:51 -0700 Patch to raise SECURITY_ERR exception if an attempt is made to change document.domain to an invalid value (make fast/forms/basic-textareas.html runnable in a browser) patch.txt text/plain 7950 song.yuan SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA0ODY3MykKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTggQEAKKzIwMDktMDktMjMgIFl1YW4gU29uZyAgPHNvbmcueXVhbkBlcmljc3Nv bi5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE0NTY2CisKKyAgICAgICAg UmFpc2UgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBpZiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gY2hh bmdlIGRvY3VtZW50LmRvbWFpbiB0byBhbiBpbnZhbGlkIHZhbHVlLgorCisgICAgICAgIFRlc3Q6 IGZhc3QvanMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uaHRtbAorCisg ICAgICAgICogZG9tL0RvY3VtZW50LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50Ojpz ZXREb21haW4pOgorICAgICAgICAqIGRvbS9Eb2N1bWVudC5oOgorICAgICAgICAqIGRvbS9Eb2N1 bWVudC5pZGw6CisKIDIwMDktMDktMjMgIEd1c3Rhdm8gTm9yb25oYSBTaWx2YSAgPGduc0Bnbm9t ZS5vcmc+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgWGFuIExvcGV6LgpJbmRleDogV2ViQ29yZS9k b20vRG9jdW1lbnQuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvZG9tL0RvY3VtZW50LmNwcAko cmV2aXNpb24gNDgxNDcpCisrKyBXZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAJKHdvcmtpbmcgY29w eSkKQEAgLTI5MTEsNyArMjkxMSw3IEBAIFN0cmluZyBEb2N1bWVudDo6ZG9tYWluKCkgY29uc3QK ICAgICByZXR1cm4gc2VjdXJpdHlPcmlnaW4oKS0+ZG9tYWluKCk7CiB9CiAKLXZvaWQgRG9jdW1l bnQ6OnNldERvbWFpbihjb25zdCBTdHJpbmcmIG5ld0RvbWFpbikKK3ZvaWQgRG9jdW1lbnQ6OnNl dERvbWFpbihjb25zdCBTdHJpbmcmIG5ld0RvbWFpbiwgRXhjZXB0aW9uQ29kZSYgZWMpCiB7CiAg ICAgLy8gQm90aCBOUyBhbmQgSUUgc3BlY2lmeSB0aGF0IGNoYW5naW5nIHRoZSBkb21haW4gaXMg b25seSBhbGxvd2VkIHdoZW4KICAgICAvLyB0aGUgbmV3IGRvbWFpbiBpcyBhIHN1ZmZpeCBvZiB0 aGUgb2xkIGRvbWFpbi4KQEAgLTI5MzQsMTkgKzI5MzQsMjUgQEAgdm9pZCBEb2N1bWVudDo6c2V0 RG9tYWluKGNvbnN0IFN0cmluZyYgbgogICAgIGludCBvbGRMZW5ndGggPSBkb21haW4oKS5sZW5n dGgoKTsKICAgICBpbnQgbmV3TGVuZ3RoID0gbmV3RG9tYWluLmxlbmd0aCgpOwogICAgIC8vIGUu Zy4gbmV3RG9tYWluID0gd2Via2l0Lm9yZyAoMTApIGFuZCBkb21haW4oKSA9IHd3dy53ZWJraXQu b3JnICgxNCkKLSAgICBpZiAobmV3TGVuZ3RoID49IG9sZExlbmd0aCkKKyAgICBpZiAobmV3TGVu Z3RoID49IG9sZExlbmd0aCkgeworICAgICAgICBlYyA9IFNFQ1VSSVRZX0VSUjsKICAgICAgICAg cmV0dXJuOworICAgIH0KIAogICAgIFN0cmluZyB0ZXN0ID0gZG9tYWluKCk7CiAgICAgLy8gQ2hl Y2sgdGhhdCBpdCdzIGEgc3ViZG9tYWluLCBub3QgZS5nLiAiZWJraXQub3JnIgotICAgIGlmICh0 ZXN0W29sZExlbmd0aCAtIG5ld0xlbmd0aCAtIDFdICE9ICcuJykKKyAgICBpZiAodGVzdFtvbGRM ZW5ndGggLSBuZXdMZW5ndGggLSAxXSAhPSAnLicpIHsKKyAgICAgICAgZWMgPSBTRUNVUklUWV9F UlI7CiAgICAgICAgIHJldHVybjsKKyAgICB9CiAKICAgICAvLyBOb3cgdGVzdCBpcyAid2Via2l0 Lm9yZyIgZnJvbSBkb21haW4oKQogICAgIC8vIGFuZCB3ZSBjaGVjayB0aGF0IGl0J3MgdGhlIHNh bWUgdGhpbmcgYXMgbmV3RG9tYWluCiAgICAgdGVzdC5yZW1vdmUoMCwgb2xkTGVuZ3RoIC0gbmV3 TGVuZ3RoKTsKLSAgICBpZiAodGVzdCAhPSBuZXdEb21haW4pCisgICAgaWYgKHRlc3QgIT0gbmV3 RG9tYWluKSB7CisgICAgICAgIGVjID0gU0VDVVJJVFlfRVJSOwogICAgICAgICByZXR1cm47Cisg ICAgfQogCiAgICAgc2VjdXJpdHlPcmlnaW4oKS0+c2V0RG9tYWluRnJvbURPTShuZXdEb21haW4p OwogICAgIGlmIChtX2ZyYW1lKQpJbmRleDogV2ViQ29yZS9kb20vRG9jdW1lbnQuaAo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09Ci0tLSBXZWJDb3JlL2RvbS9Eb2N1bWVudC5oCShyZXZpc2lvbiA0ODE0NykKKysrIFdlYkNv cmUvZG9tL0RvY3VtZW50LmgJKHdvcmtpbmcgY29weSkKQEAgLTYyMCw3ICs2MjAsNyBAQCBwdWJs aWM6CiAgICAgU3RyaW5nIHJlZmVycmVyKCkgY29uc3Q7CiAKICAgICBTdHJpbmcgZG9tYWluKCkg Y29uc3Q7Ci0gICAgdm9pZCBzZXREb21haW4oY29uc3QgU3RyaW5nJiBuZXdEb21haW4pOworICAg IHZvaWQgc2V0RG9tYWluKGNvbnN0IFN0cmluZyYgbmV3RG9tYWluLCBFeGNlcHRpb25Db2RlJik7 CiAKICAgICBTdHJpbmcgbGFzdE1vZGlmaWVkKCkgY29uc3Q7CiAKSW5kZXg6IFdlYkNvcmUvZG9t L0RvY3VtZW50LmlkbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL2RvbS9Eb2N1bWVudC5pZGwJKHJl dmlzaW9uIDQ4MTQ3KQorKysgV2ViQ29yZS9kb20vRG9jdW1lbnQuaWRsCSh3b3JraW5nIGNvcHkp CkBAIC0xNTUsNyArMTU1LDggQEAgbW9kdWxlIGNvcmUgewogICAgICAgICAgICAgICAgICBhdHRy aWJ1dGUgW0NvbnZlcnROdWxsVG9OdWxsU3RyaW5nXSBET01TdHJpbmcgdGl0bGU7CiAgICAgICAg IHJlYWRvbmx5IGF0dHJpYnV0ZSBET01TdHJpbmcgcmVmZXJyZXI7CiAjaWYgZGVmaW5lZChMQU5H VUFHRV9KQVZBU0NSSVBUKSAmJiBMQU5HVUFHRV9KQVZBU0NSSVBUCi0gICAgICAgICAgICAgICAg IGF0dHJpYnV0ZSBbQ29udmVydE51bGxUb051bGxTdHJpbmddIERPTVN0cmluZyBkb21haW47Cisg ICAgICAgICAgICAgICAgIGF0dHJpYnV0ZSBbQ29udmVydE51bGxUb051bGxTdHJpbmddIERPTVN0 cmluZyBkb21haW4KKyAgICAgICAgICAgICAgICAgICAgIHNldHRlciByYWlzZXMgKERPTUV4Y2Vw dGlvbik7CiAjZWxzZQogICAgICAgICByZWFkb25seSBhdHRyaWJ1dGUgRE9NU3RyaW5nIGRvbWFp bjsKICNlbmRpZgpJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExh eW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gNDg2NzMpCisrKyBMYXlvdXRUZXN0cy9DaGFu Z2VMb2cJKHdvcmtpbmcgY29weSkKQEAgLTEsMyArMSwxNyBAQAorMjAwOS0wOS0yMyAgWXVhbiBT b25nICA8c29uZy55dWFuQGVyaWNzc29uLmNvbT4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JP RFkgKE9PUFMhKS4KKworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5j Z2k/aWQ9MTQ1NjYKKworICAgICAgICBBZGQgdGVzdCAiaW52YWxpZC1kb21haW4tY2hhbmdlLXRo cm93cy1leGNlcHRpb24uaHRtbCIgdG8gZW5zdXJlIGEgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBp cyByYWlzZWQgaWYgYW4gYXR0ZW1wdCBpcyBtYWRlIHRvIGNoYW5nZSBkb2N1bWVudC5kb21haW4g dG8gYW4gaW52YWxpZCB2YWx1ZS4gSW4gdGhlIGV4aXN0aW5nIHRlc3QgY2FzZSAiYmFzaWMtdGV4 dGFyZWFzLmh0bWwiLCBmaXggdGhlIGZhdWx0eSBiZWhhdmlvciBvZiBzZXR0aW5nIGRvY3VtZW50 LmRvbWFpbiB0byBpbnZhbGlkIHZhbHVlLCBhbmQgcmVwbGFjZSB0aGUgZGF0YSBVUkwgdG8gYSBm aWxlIFVSTCB0aGF0IHBvaW50cyB0byAiYmFzaWMtdGV4dGFyZWFzLXN0YW5kYXJkcy5odG1sIiBp biBvcmRlciB0byBtYWtlICJiYXNpYy10ZXh0YXJlYXMuaHRtbCIgcnVubmFibGUgaW4gYSBicm93 c2VyLgorCisgICAgICAgICogZmFzdC9mb3Jtcy9iYXNpYy10ZXh0YXJlYXMuaHRtbDoKKyAgICAg ICAgKiBmYXN0L2Zvcm1zL3Jlc291cmNlcy9iYXNpYy10ZXh0YXJlYXMtc3RhbmRhcmRzLmh0bWw6 IEFkZGVkLgorICAgICAgICAqIGZhc3QvanMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1l eGNlcHRpb24tZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2pzL2ludmFsaWQt ZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmh0bWw6IEFkZGVkLgorICAgICAgICAqIGZh c3QvanMvcmVzb3VyY2VzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmpz OiBBZGRlZC4KKwogMjAwOS0wOS0yMyAgQW5kcmFzIEJlY3NpICA8YmVjc2kuYW5kcmFzQHN0dWQu dS1zemVnZWQuaHU+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgVG9yIEFybmUgVmVzdGLDuC4KSW5k ZXg6IExheW91dFRlc3RzL2Zhc3QvZm9ybXMvYmFzaWMtdGV4dGFyZWFzLmh0bWwKPT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9mb3Jtcy9iYXNpYy10ZXh0YXJlYXMuaHRtbAkocmV2aXNp b24gNDgxNDcpCisrKyBMYXlvdXRUZXN0cy9mYXN0L2Zvcm1zL2Jhc2ljLXRleHRhcmVhcy5odG1s CSh3b3JraW5nIGNvcHkpCkBAIC04MSwxNCArODEsMTEgQEAgZnVuY3Rpb24gYWRkQWxsVGV4dGFy ZWFzKGlmcmFtZSwgY29tcGF0TQogICAgIGlmcmFtZS5zdHlsZS5oZWlnaHQgPSBkb2NUb0FwcGVu ZFRvLmJvZHkub2Zmc2V0SGVpZ2h0ICsgNSArICdweCc7CiB9CiAKLS8vIFNldCB0aGUgZG9tYWlu IGluIHRoZSB0b3AtbGV2ZWwgcGFnZSBhcyB3ZWxsIGFzIHRoZSBpZnJhbWUuCi0vLyBTbyB0aGV5 IGNhbiBjb21tdW5pY2F0ZSBkZXNwaXRlIHVzZSBvZiB0aGUgZGF0YSB1cmwuCi1kb2N1bWVudC5k b21haW4gPSAnbXlkdW1teWRvbWFpbic7CiBkb2N1bWVudC5ib2R5LnN0eWxlLm1hcmdpbiA9IDA7 CiAKIHZhciBzdGFuZGFyZHNJZnJhbWUgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCdpZnJhbWUn KTsKLS8vIENyZWF0ZSBhIHBhZ2Ugd2l0aCBhIGRvY3R5cGUgc28gaXQncyBzdGFuZGFyZHMgbW9k ZS4KLXN0YW5kYXJkc0lmcmFtZS5zcmMgPSAnZGF0YTp0ZXh0L2h0bWw7Y2hhcnNldD11dGYtOCwl M0MhRE9DVFlQRSUyMEhUTUwlM0UlM0Nib2R5JTNFJTNDc2NyaXB0JTNFZG9jdW1lbnQuZG9tYWlu JTIwJTNEJTIwIm15ZHVtbXlkb21haW4iJTNCJTNDJTJGYm9keSUzRSUzQyUyRmh0bWwlM0UlMEQl MEEnOworLy8gUmVmZXJlbmNlIGEgcGFnZSB3aXRoIGEgZG9jdHlwZSBzbyBpdCdzIHN0YW5kYXJk cyBtb2RlLgorc3RhbmRhcmRzSWZyYW1lLnNyYyA9ICdyZXNvdXJjZXMvYmFzaWMtdGV4dGFyZWFz LXN0YW5kYXJkcy5odG1sJzsKIHN0YW5kYXJkc0lmcmFtZS5vbmxvYWQgPSBmdW5jdGlvbihlKSB7 CiAgICAgYWRkQWxsVGV4dGFyZWFzKGUudGFyZ2V0LCAnQ1NTMUNvbXBhdCcpOwogfQpJbmRleDog TGF5b3V0VGVzdHMvZmFzdC9mb3Jtcy9yZXNvdXJjZXMvYmFzaWMtdGV4dGFyZWFzLXN0YW5kYXJk cy5odG1sCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3QvZm9ybXMvcmVzb3VyY2VzL2Jh c2ljLXRleHRhcmVhcy1zdGFuZGFyZHMuaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3Rz L2Zhc3QvZm9ybXMvcmVzb3VyY2VzL2Jhc2ljLXRleHRhcmVhcy1zdGFuZGFyZHMuaHRtbAkocmV2 aXNpb24gMCkKQEAgLTAsMCArMSBAQAorPCFET0NUWVBFIEhUTUw+PGJvZHk+PC9ib2R5PjwvaHRt bD4KSW5kZXg6IExheW91dFRlc3RzL2Zhc3QvanMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93 cy1leGNlcHRpb24tZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3Qv anMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24tZXhwZWN0ZWQudHh0CShy ZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9qcy9pbnZhbGlkLWRvbWFpbi1jaGFuZ2Ut dGhyb3dzLWV4Y2VwdGlvbi1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMTAg QEAKK1RoaXMgdGVzdCBjaGVja3MgdGhhdCBhIFNFQ1VSSVRZX0VSUiBleGNlcHRpb24gaXMgcmFp c2VkIGlmIGFuIGF0dGVtcHQgaXMgbWFkZSB0byBjaGFuZ2UgZG9jdW1lbnQuZG9tYWluIHRvIGFu IGludmFsaWQgdmFsdWUuCisKK09uIHN1Y2Nlc3MsIHlvdSB3aWxsIHNlZSBhIHNlcmllcyBvZiAi UEFTUyIgbWVzc2FnZXMsIGZvbGxvd2VkIGJ5ICJURVNUIENPTVBMRVRFIi4KKworCitQQVNTIGRv Y3VtZW50LmRvbWFpbiA9ICJhcHBsZS5jb20iIHRocmV3IGV4Y2VwdGlvbiBFcnJvcjogU0VDVVJJ VFlfRVJSOiBET00gRXhjZXB0aW9uIDE4LgorUEFTUyBzdWNjZXNzZnVsbHlQYXJzZWQgaXMgdHJ1 ZQorCitURVNUIENPTVBMRVRFCisKSW5kZXg6IExheW91dFRlc3RzL2Zhc3QvanMvaW52YWxpZC1k b21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uaHRtbAo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRU ZXN0cy9mYXN0L2pzL2ludmFsaWQtZG9tYWluLWNoYW5nZS10aHJvd3MtZXhjZXB0aW9uLmh0bWwJ KHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9mYXN0L2pzL2ludmFsaWQtZG9tYWluLWNoYW5n ZS10aHJvd3MtZXhjZXB0aW9uLmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMTMgQEAKKzwh RE9DVFlQRSBIVE1MIFBVQkxJQyAiLS8vSUVURi8vRFREIEhUTUwvL0VOIj4KKzxodG1sPgorPGhl YWQ+Cis8bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9InJlc291cmNlcy9qcy10ZXN0LXN0eWxl LmNzcyI+Cis8c2NyaXB0IHNyYz0icmVzb3VyY2VzL2pzLXRlc3QtcHJlLmpzIj48L3NjcmlwdD4K KzwvaGVhZD4KKzxib2R5PgorPHAgaWQ9ImRlc2NyaXB0aW9uIj48L3A+Cis8ZGl2IGlkPSJjb25z b2xlIj48L2Rpdj4KKzxzY3JpcHQgc3JjPSJyZXNvdXJjZXMvaW52YWxpZC1kb21haW4tY2hhbmdl LXRocm93cy1leGNlcHRpb24uanMiPjwvc2NyaXB0PgorPHNjcmlwdCBzcmM9InJlc291cmNlcy9q cy10ZXN0LXBvc3QuanMiPjwvc2NyaXB0PgorPC9ib2R5PgorPC9odG1sPgpJbmRleDogTGF5b3V0 VGVzdHMvZmFzdC9qcy9yZXNvdXJjZXMvaW52YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNl cHRpb24uanMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9qcy9yZXNvdXJjZXMvaW52 YWxpZC1kb21haW4tY2hhbmdlLXRocm93cy1leGNlcHRpb24uanMJKHJldmlzaW9uIDApCisrKyBM YXlvdXRUZXN0cy9mYXN0L2pzL3Jlc291cmNlcy9pbnZhbGlkLWRvbWFpbi1jaGFuZ2UtdGhyb3dz LWV4Y2VwdGlvbi5qcwkocmV2aXNpb24gMCkKQEAgLTAsMCArMSw1IEBACitkZXNjcmlwdGlvbigi VGhpcyB0ZXN0IGNoZWNrcyB0aGF0IGEgU0VDVVJJVFlfRVJSIGV4Y2VwdGlvbiBpcyByYWlzZWQg aWYgYW4gYXR0ZW1wdCBpcyBtYWRlIHRvIGNoYW5nZSBkb2N1bWVudC5kb21haW4gdG8gYW4gaW52 YWxpZCB2YWx1ZS4iKTsKKworc2hvdWxkVGhyb3coJ2RvY3VtZW50LmRvbWFpbiA9ICJhcHBsZS5j b20iJywgJyJFcnJvcjogU0VDVVJJVFlfRVJSOiBET00gRXhjZXB0aW9uIDE4IicpOworCit2YXIg c3VjY2Vzc2Z1bGx5UGFyc2VkID0gdHJ1ZTsK