171248 2017-04-24 13:56:57 -0700 importScripts() should respect X-Content-Type-Options: nosniff 2017-05-04 11:25:47 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build All All RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=157068 InRadar, WebExposed P2 Normal --- 136452 1 dbates dbates achristensen aestes bfulgham oliver webkit-bug-importer youennf oldest_to_newest 1300648 0 dbates 2017-04-24 13:56:57 -0700 Fetching a worker-imported script should respect the X-Content-Type-Options: nosniff header as such a fetch is ultimately a "main fetch" and according to "main fetch": [[ 17. If response is not a network error and any of the following algorithms returns blocked, then set response and internalResponse to a network error: ... should internalResponse to request be blocked due to no sniff ]] <https://fetch.spec.whatwg.org/#main-fetch> (30 March 2017) This functionality is exercised by the Web Platform Test <https://trac.webkit.org/browser/trunk/LayoutTests/imported/w3c/web-platform-tests/fetch/nosniff/importscripts.html?rev=200195>. 1301176 1 webkit-bug-importer 2017-04-25 13:14:38 -0700 <rdar://problem/31819023> 1304260 2 308957 dbates 2017-05-03 14:45:29 -0700 Created attachment 308957 Patch 1304707 3 308957 aestes 2017-05-04 11:20:32 -0700 Comment on attachment 308957 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=308957&action=review > Source/WebCore/workers/WorkerScriptLoader.cpp:2 > + * Copyright (C) 2009, 2017 Apple Inc. All Rights Reserved. 2009-2017 > Source/WebCore/workers/WorkerScriptLoader.cpp:119 > + String mimeType = extractMIMETypeFromMediaType(response.httpHeaderField(HTTPHeaderName::ContentType)).convertToASCIILowercase(); Do you need to convert to ASCII lowercase here? MIMETypeRegistry does case-insensitive comparisons. 1304708 4 dbates 2017-05-04 11:23:51 -0700 (In reply to Andy Estes from comment #3) > Comment on attachment 308957 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=308957&action=review > > > Source/WebCore/workers/WorkerScriptLoader.cpp:2 > > + * Copyright (C) 2009, 2017 Apple Inc. All Rights Reserved. > > 2009-2017 > Will fix. > > Source/WebCore/workers/WorkerScriptLoader.cpp:119 > > + String mimeType = extractMIMETypeFromMediaType(response.httpHeaderField(HTTPHeaderName::ContentType)).convertToASCIILowercase(); > > Do you need to convert to ASCII lowercase here? MIMETypeRegistry does > case-insensitive comparisons. You're right! No need to convert to lowercase as MIMETypeRegistry does the lookup case-insensitively. Will fix before landing. 1304710 5 dbates 2017-05-04 11:25:47 -0700 Committed r216195: <http://trac.webkit.org/changeset/216195> 308957 2017-05-03 14:45:29 -0700 2017-05-04 11:20:32 -0700 Patch bug-171248-20170503144529.patch text/plain 7222 dbates U3VidmVyc2lvbiBSZXZpc2lvbjogMjE2MTIwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggM2ZjZDBjM2Q4NDA0ZGM2 Zjc5OGM0OGNhNjlmYjUxMTYzNDFhMGIyNi4uOWZjNzBlZWFjYjdiOGYyMTFmOGYzNzNjZGNmMjVh NDMxMTM5OWZjMCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDIzIEBACiAyMDE3LTA1LTAzICBEYW5p ZWwgQmF0ZXMgIDxkYWJhdGVzQGFwcGxlLmNvbT4KIAorICAgICAgICBpbXBvcnRTY3JpcHRzKCkg c2hvdWxkIHJlc3BlY3QgWC1Db250ZW50LVR5cGUtT3B0aW9uczogbm9zbmlmZgorICAgICAgICBo dHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTcxMjQ4CisgICAgICAgIDxy ZGFyOi8vcHJvYmxlbS8zMTgxOTAyMz4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9P UFMhKS4KKworICAgICAgICBEbyBub3QgbG9hZCBhIHdvcmtlciBzY3JpcHQgaWYgaXQgaGFzIHRo ZSBIVFRQIHJlc3BvbnNlIGhlYWRlciAiWC1Db250ZW50LVR5cGUtT3B0aW9uczogbm9zbmlmZiIK KyAgICAgICAgYW5kIGl0cyBDb250ZW50LXR5cGUgaGVhZGVyIGlzIG5vdCBhbiBhbGxvd2VkIEph dmFTY3JpcHQgc2NyaXB0IG1pbWUgdHlwZS4gVGhpcyBiZWhhdmlvciBmb2xsb3dzCisgICAgICAg IGZyb20gPGh0dHBzOi8vaHRtbC5zcGVjLndoYXR3Zy5vcmcvbXVsdGlwYWdlL3dlYmFwcGFwaXMu aHRtbCNmZXRjaC1hLWNsYXNzaWMtd29ya2VyLWltcG9ydGVkLXNjcmlwdD4gKDMgTWF5IDIwMTcp LAorICAgICAgICA8aHR0cHM6Ly9mZXRjaC5zcGVjLndoYXR3Zy5vcmcvI2NvbmNlcHQtZmV0Y2g+ ICgyIE1heSAyMDE3KSwgYW5kIDxodHRwczovL2ZldGNoLnNwZWMud2hhdHdnLm9yZy8jY29uY2Vw dC1tYWluLWZldGNoPi4KKworICAgICAgICAqIHdvcmtlcnMvV29ya2VyU2NyaXB0TG9hZGVyLmNw cDoKKyAgICAgICAgKFdlYkNvcmU6Om1pbWVUeXBlQWxsb3dlZEJ5Tm9zbmlmZik6IEFkZGVkLgor ICAgICAgICAoV2ViQ29yZTo6V29ya2VyU2NyaXB0TG9hZGVyOjpkaWRSZWNlaXZlUmVzcG9uc2Up OiBNYXJrIHRoZSBsb2FkIGFzIGZhaWxlZCBpZiB0aGUgcmVzcG9uc2UKKyAgICAgICAgaXMgbm90 IGFsbG93ZWQgYnkgWC1Db250ZW50LVR5cGUtT3B0aW9uczogbm9zbmlmZi4KKworMjAxNy0wNS0w MyAgRGFuaWVsIEJhdGVzICA8ZGFiYXRlc0BhcHBsZS5jb20+CisKICAgICAgICAgQWJhbmRvbiB0 aGUgY3VycmVudCBsb2FkIG9uY2UgdGhlIHByb3Zpc2lvbmFsIGxvYWRlciBkZXRhY2hlcyBmcm9t IHRoZSBmcmFtZQogICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/ aWQ9MTcxNTc3CiAgICAgICAgIDxyZGFyOi8vcHJvYmxlbS8zMTU4MTIyNz4KZGlmZiAtLWdpdCBh L1NvdXJjZS9XZWJDb3JlL3dvcmtlcnMvV29ya2VyU2NyaXB0TG9hZGVyLmNwcCBiL1NvdXJjZS9X ZWJDb3JlL3dvcmtlcnMvV29ya2VyU2NyaXB0TG9hZGVyLmNwcAppbmRleCA2MmM5NDcwYzBmNzlm NGY4OTVhNzU1ZjA3NTgwM2JkYmJjNjk1MTkyLi44OGU4MWEyY2M1NDY5NGRkZjhjNDBmYjRjNGI1 ZjYxOWUzOGJkZDM3IDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS93b3JrZXJzL1dvcmtlclNj cmlwdExvYWRlci5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvd29ya2Vycy9Xb3JrZXJTY3JpcHRM b2FkZXIuY3BwCkBAIC0xLDUgKzEsNSBAQAogLyoKLSAqIENvcHlyaWdodCAoQykgMjAwOSBBcHBs ZSBJbmMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuCisgKiBDb3B5cmlnaHQgKEMpIDIwMDksIDIwMTcg QXBwbGUgSW5jLiBBbGwgUmlnaHRzIFJlc2VydmVkLgogICogQ29weXJpZ2h0IChDKSAyMDA5LCAy MDExIEdvb2dsZSBJbmMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuCiAgKgogICogUmVkaXN0cmlidXRp b24gYW5kIHVzZSBpbiBzb3VyY2UgYW5kIGJpbmFyeSBmb3Jtcywgd2l0aCBvciB3aXRob3V0CkBA IC0yOCw2ICsyOCw4IEBACiAjaW5jbHVkZSAiV29ya2VyU2NyaXB0TG9hZGVyLmgiCiAKICNpbmNs dWRlICJDb250ZW50U2VjdXJpdHlQb2xpY3kuaCIKKyNpbmNsdWRlICJIVFRQUGFyc2Vycy5oIgor I2luY2x1ZGUgIk1JTUVUeXBlUmVnaXN0cnkuaCIKICNpbmNsdWRlICJSZXNvdXJjZVJlc3BvbnNl LmgiCiAjaW5jbHVkZSAiU2NyaXB0RXhlY3V0aW9uQ29udGV4dC5oIgogI2luY2x1ZGUgIlRleHRS ZXNvdXJjZURlY29kZXIuaCIKQEAgLTExMCwxMyArMTEyLDI5IEBAIHN0ZDo6dW5pcXVlX3B0cjxS ZXNvdXJjZVJlcXVlc3Q+IFdvcmtlclNjcmlwdExvYWRlcjo6Y3JlYXRlUmVzb3VyY2VSZXF1ZXN0 KGNvbnN0CiAgICAgcmVxdWVzdC0+c2V0SW5pdGlhdG9ySWRlbnRpZmllcihpbml0aWF0b3JJZGVu dGlmaWVyKTsKICAgICByZXR1cm4gcmVxdWVzdDsKIH0KLSAgICAKKworI2lmIEVOQUJMRShOT1NO SUZGKQorc3RhdGljIGJvb2wgbWltZVR5cGVBbGxvd2VkQnlOb3NuaWZmKGNvbnN0IFJlc291cmNl UmVzcG9uc2UmIHJlc3BvbnNlKQoreworICAgIFN0cmluZyBtaW1lVHlwZSA9IGV4dHJhY3RNSU1F VHlwZUZyb21NZWRpYVR5cGUocmVzcG9uc2UuaHR0cEhlYWRlckZpZWxkKEhUVFBIZWFkZXJOYW1l OjpDb250ZW50VHlwZSkpLmNvbnZlcnRUb0FTQ0lJTG93ZXJjYXNlKCk7CisgICAgcmV0dXJuIHBh cnNlQ29udGVudFR5cGVPcHRpb25zSGVhZGVyKHJlc3BvbnNlLmh0dHBIZWFkZXJGaWVsZChIVFRQ SGVhZGVyTmFtZTo6WENvbnRlbnRUeXBlT3B0aW9ucykpICE9IENvbnRlbnRUeXBlT3B0aW9uc05v c25pZmYgfHwgTUlNRVR5cGVSZWdpc3RyeTo6aXNTdXBwb3J0ZWRKYXZhU2NyaXB0TUlNRVR5cGUo bWltZVR5cGUpOworfQorI2VuZGlmCisKIHZvaWQgV29ya2VyU2NyaXB0TG9hZGVyOjpkaWRSZWNl aXZlUmVzcG9uc2UodW5zaWduZWQgbG9uZyBpZGVudGlmaWVyLCBjb25zdCBSZXNvdXJjZVJlc3Bv bnNlJiByZXNwb25zZSkKIHsKICAgICBpZiAocmVzcG9uc2UuaHR0cFN0YXR1c0NvZGUoKSAvIDEw MCAhPSAyICYmIHJlc3BvbnNlLmh0dHBTdGF0dXNDb2RlKCkpIHsKICAgICAgICAgbV9mYWlsZWQg PSB0cnVlOwogICAgICAgICByZXR1cm47CiAgICAgfQorCisjaWYgRU5BQkxFKE5PU05JRkYpCisg ICAgaWYgKCFtaW1lVHlwZUFsbG93ZWRCeU5vc25pZmYocmVzcG9uc2UpKSB7CisgICAgICAgIG1f ZmFpbGVkID0gdHJ1ZTsKKyAgICAgICAgcmV0dXJuOworICAgIH0KKyNlbmRpZgorCiAgICAgbV9y ZXNwb25zZVVSTCA9IHJlc3BvbnNlLnVybCgpOwogICAgIG1fcmVzcG9uc2VFbmNvZGluZyA9IHJl c3BvbnNlLnRleHRFbmNvZGluZ05hbWUoKTsKICAgICBpZiAobV9jbGllbnQpCmRpZmYgLS1naXQg YS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggYjgx Nzg3OWQ5YWM0MjYyOTMwOWY1OTNhYmMzZjZhNDQwZGYwNWQ3Ny4uZGIyYzk3N2FhZWFjNDdlYmEx YmUxNmYyMWZjZGM4YzZjMWU2Mzc2NSAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9n CisrKyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDE3IEBACiAyMDE3LTA1LTAz ICBEYW5pZWwgQmF0ZXMgIDxkYWJhdGVzQGFwcGxlLmNvbT4KIAorICAgICAgICBpbXBvcnRTY3Jp cHRzKCkgc2hvdWxkIHJlc3BlY3QgWC1Db250ZW50LVR5cGUtT3B0aW9uczogbm9zbmlmZgorICAg ICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTcxMjQ4CisgICAg ICAgIDxyZGFyOi8vcHJvYmxlbS8zMTgxOTAyMz4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JP RFkgKE9PUFMhKS4KKworICAgICAgICBVbnNraXAgd2ViLXBsYXRmb3JtLXRlc3RzL2ZldGNoL25v c25pZmYvaW1wb3J0c2NyaXB0cyBhcyBpdCBub3cgcGFzc2VzLgorCisgICAgICAgICogVGVzdEV4 cGVjdGF0aW9uczoKKworMjAxNy0wNS0wMyAgRGFuaWVsIEJhdGVzICA8ZGFiYXRlc0BhcHBsZS5j b20+CisKICAgICAgICAgQWJhbmRvbiB0aGUgY3VycmVudCBsb2FkIG9uY2UgdGhlIHByb3Zpc2lv bmFsIGxvYWRlciBkZXRhY2hlcyBmcm9tIHRoZSBmcmFtZQogICAgICAgICBodHRwczovL2J1Z3Mu d2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTcxNTc3CiAgICAgICAgIDxyZGFyOi8vcHJvYmxl bS8zMTU4MTIyNz4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2ltcG9ydGVkL3czYy9DaGFuZ2VM b2cgYi9MYXlvdXRUZXN0cy9pbXBvcnRlZC93M2MvQ2hhbmdlTG9nCmluZGV4IDMzMmZkMjdmZTU2 YzA2MmMxYTllMWUwMmNhNzk5ODRhYzlhYjAyZjkuLjdmOWMxNmNlZDMwM2FlYTcyNjgwYjc3ZTAw YTI4ODU1NWFjMDM2MWUgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL2ltcG9ydGVkL3czYy9DaGFu Z2VMb2cKKysrIGIvTGF5b3V0VGVzdHMvaW1wb3J0ZWQvdzNjL0NoYW5nZUxvZwpAQCAtMSwzICsx LDE2IEBACisyMDE3LTA1LTAzICBEYW5pZWwgQmF0ZXMgIDxkYWJhdGVzQGFwcGxlLmNvbT4KKwor ICAgICAgICBpbXBvcnRTY3JpcHRzKCkgc2hvdWxkIHJlc3BlY3QgWC1Db250ZW50LVR5cGUtT3B0 aW9uczogbm9zbmlmZgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5j Z2k/aWQ9MTcxMjQ4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS8zMTgxOTAyMz4KKworICAgICAg ICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBVcGRhdGUgZXhwZWN0ZWQg cmVzdWx0cyBmb3IgV2ViIFBsYXRmb3JtIFRlc3RzIHRoYXQgbm93IHBhc3MuCisKKyAgICAgICAg KiB3ZWItcGxhdGZvcm0tdGVzdHMvZmV0Y2gvbm9zbmlmZi9pbXBvcnRzY3JpcHRzLWV4cGVjdGVk LnR4dDogQWRkZWQuCisgICAgICAgICogd2ViLXBsYXRmb3JtLXRlc3RzL2ZldGNoL25vc25pZmYv d29ya2VyLWV4cGVjdGVkLnR4dDoKKwogMjAxNy0wNS0wMiAgQmVuIEtlbGx5IDxiZW5Ad2FuZGVy dmlldy5jb20+CiAKICAgICAgICAgU2V0IFJlc3BvbnNlLmJsb2IoKSB0eXBlIGNvcnJlY3RseSB3 aGVuIGJvZHkgaXMgYSBSZWFkYWJsZVN0cmVhbS4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL1Rl c3RFeHBlY3RhdGlvbnMgYi9MYXlvdXRUZXN0cy9UZXN0RXhwZWN0YXRpb25zCmluZGV4IDg4Yzdm MjRhNGQ4Y2U0MGQxYWFjZjhkOWU2NjI3NWRkMzY5ZmM5MTAuLjc1MzMxNjUxMjI0MGY3MDVmOWM3 YzAwNjAzMTUyNjA1MDAxNzAwMTcgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL1Rlc3RFeHBlY3Rh dGlvbnMKKysrIGIvTGF5b3V0VGVzdHMvVGVzdEV4cGVjdGF0aW9ucwpAQCAtMTMwMiw2ICsxMzAy LDQgQEAgd2Via2l0Lm9yZy9iLzE3MTAzMSBpbXBvcnRlZC93M2Mvd2ViLXBsYXRmb3JtLXRlc3Rz L1hNTEh0dHBSZXF1ZXN0L2dldGFsbHJlc3BvbnMKIAogd2Via2l0Lm9yZy9iLzE3MDcwMSB3ZWJy dGMvZGF0YWNoYW5uZWwvYnVmZmVyZWRBbW91bnRMb3dUaHJlc2hvbGQuaHRtbCBbIFBhc3MgRmFp bHVyZSBdCiAKLXdlYmtpdC5vcmcvYi8xNzEyNDggaW1wb3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10 ZXN0cy9mZXRjaC9ub3NuaWZmL2ltcG9ydHNjcmlwdHMuaHRtbAotCiB3ZWJraXQub3JnL2IvMTcw ODM1IGZhc3QvbWVkaWFjYXB0dXJlZnJvbWVsZW1lbnQvQ2FudmFzQ2FwdHVyZU1lZGlhU3RyZWFt LTJkLWV2ZW50cy5odG1sIFsgUGFzcyBGYWlsdXJlIF0KZGlmZiAtLWdpdCBhL0xheW91dFRlc3Rz L2ltcG9ydGVkL3czYy93ZWItcGxhdGZvcm0tdGVzdHMvZmV0Y2gvbm9zbmlmZi9pbXBvcnRzY3Jp cHRzLWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3RzL2ltcG9ydGVkL3czYy93ZWItcGxhdGZvcm0t dGVzdHMvZmV0Y2gvbm9zbmlmZi9pbXBvcnRzY3JpcHRzLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBt b2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw Li5iMThjOTBiNWZkNTZjMTU1MmFmZDJiY2I5MjZlYzBiYzEyOThkOWViCi0tLSAvZGV2L251bGwK KysrIGIvTGF5b3V0VGVzdHMvaW1wb3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10ZXN0cy9mZXRjaC9u b3NuaWZmL2ltcG9ydHNjcmlwdHMtZXhwZWN0ZWQudHh0CkBAIC0wLDAgKzEsMyBAQAorCitQQVNT IFRlc3QgaW1wb3J0U2NyaXB0cygpIAorCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9pbXBvcnRl ZC93M2Mvd2ViLXBsYXRmb3JtLXRlc3RzL2ZldGNoL25vc25pZmYvd29ya2VyLWV4cGVjdGVkLnR4 dCBiL0xheW91dFRlc3RzL2ltcG9ydGVkL3czYy93ZWItcGxhdGZvcm0tdGVzdHMvZmV0Y2gvbm9z bmlmZi93b3JrZXItZXhwZWN0ZWQudHh0CmluZGV4IDhjOGIzYmM3MDI1NzhkYzcxYjM3YWY3OTdk ZTFiYzZiOGYwODFhYjcuLjlmZDI2YjViNzA3ZTYzMWFjYzMzNTdjYTk0Zjk3NDc3NWU3ZWUyYjgg MTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL2ltcG9ydGVkL3czYy93ZWItcGxhdGZvcm0tdGVzdHMv ZmV0Y2gvbm9zbmlmZi93b3JrZXItZXhwZWN0ZWQudHh0CisrKyBiL0xheW91dFRlc3RzL2ltcG9y dGVkL3czYy93ZWItcGxhdGZvcm0tdGVzdHMvZmV0Y2gvbm9zbmlmZi93b3JrZXItZXhwZWN0ZWQu dHh0CkBAIC0xLDggKzEsOCBAQAogCi1GQUlMIFVSTCBxdWVyeTogIGFzc2VydF91bnJlYWNoZWQ6 IFVuZXhwZWN0ZWQgbWVzc2FnZSBldmVudCBSZWFjaGVkIHVucmVhY2hhYmxlIGNvZGUKLUZBSUwg VVJMIHF1ZXJ5OiA/dHlwZT0gYXNzZXJ0X3VucmVhY2hlZDogVW5leHBlY3RlZCBtZXNzYWdlIGV2 ZW50IFJlYWNoZWQgdW5yZWFjaGFibGUgY29kZQotRkFJTCBVUkwgcXVlcnk6ID90eXBlPXggYXNz ZXJ0X3VucmVhY2hlZDogVW5leHBlY3RlZCBtZXNzYWdlIGV2ZW50IFJlYWNoZWQgdW5yZWFjaGFi bGUgY29kZQotRkFJTCBVUkwgcXVlcnk6ID90eXBlPXgveCBhc3NlcnRfdW5yZWFjaGVkOiBVbmV4 cGVjdGVkIG1lc3NhZ2UgZXZlbnQgUmVhY2hlZCB1bnJlYWNoYWJsZSBjb2RlCitQQVNTIFVSTCBx dWVyeTogIAorUEFTUyBVUkwgcXVlcnk6ID90eXBlPSAKK1BBU1MgVVJMIHF1ZXJ5OiA/dHlwZT14 IAorUEFTUyBVUkwgcXVlcnk6ID90eXBlPXgveCAKIFBBU1MgVVJMIHF1ZXJ5OiA/dHlwZT10ZXh0 L2phdmFzY3JpcHQgCiBQQVNTIFVSTCBxdWVyeTogP3R5cGU9dGV4dC9lY21hc2NyaXB0IAogUEFT UyBVUkwgcXVlcnk6ID90eXBlPXRleHQvZWNtYXNjcmlwdDt5YXkgCg==