29837 2009-09-28 22:14:39 -0700 Write more XSSAuditor tests 2009-09-29 16:20:46 -0700 1 1 1 Unclassified WebKit WebCore Misc. 528+ (Nightly build) All All RESOLVED FIXED XSSAuditor P2 Normal --- 1 dbates webkit-unassigned abarth sam oldest_to_newest 150798 0 dbates 2009-09-28 22:14:39 -0700 Additional test cases adapted from http://webblaze.org/dbates/. In particular, Embed Tag JavaScript URL: http://good.webblaze.org/dbates/xsstest.php?q=%3Cembed%20src=%22javascript:alert%28document.domain%29%22%3E%3C/embed%3E Object Tag JavaScript URL: http://good.webblaze.org/dbates/xsstest.php?q=%3Cobject%20data=%22javascript:alert%28document.domain%29%22%3E%3C/object%3E HTTP-Equiv Refresh JavaScript URL: http://good.webblaze.org/dbates/xsstest-head.php?q=%3Cmeta+http-equiv%3D%22refresh%22+content%3D%220%3B+url%3Djavascript%3Aalert%28document.domain%29%22%3E Break out of inside property without quotes: http://good.webblaze.org/dbates/xsstest-property-noquotes.php?q=1%20onload=alert(/XSS/) Break out of inside property without quotes using ASCII Tab and / characters: http://good.webblaze.org/dbates/xsstest-property-noquotes.php?q=dummy%09/onload=alert%28/XSS/%29&dummy=dummy Injection of property: http://good.webblaze.org/dbates/xsstest-add-property.php?q=onload=alert%28/XSS/%29&dummy=dummy +++ This bug was initially created as a clone of Bug #26776 +++ 150802 1 40282 dbates 2009-09-28 22:25:35 -0700 Created attachment 40282 More test cases 150815 2 40282 abarth 2009-09-29 00:29:12 -0700 Comment on attachment 40282 More test cases Tests == the awesome 151093 3 dbates 2009-09-29 16:20:46 -0700 Committed r48911: <http://trac.webkit.org/changeset/48911> 40282 2009-09-28 22:25:35 -0700 2009-09-29 00:29:12 -0700 More test cases Bug29837_1.patch text/plain 11891 dbates SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9D aGFuZ2VMb2cJKHJldmlzaW9uIDQ4ODU4KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3Jr aW5nIGNvcHkpCkBAIC0xLDMgKzEsMjcgQEAKKzIwMDktMDktMjggIERhbmllbCBCYXRlcyAgPGRi YXRlc0B3ZWJraXQub3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgor CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yOTgzNwor ICAgICAgICAKKyAgICAgICAgTW9yZSB0ZXN0cyBmb3IgdGhlIFhTU0F1ZGl0b3IuCisKKyAgICAg ICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvZW1iZWQtdGFnLWphdmFzY3JpcHQt dXJsLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94 c3NBdWRpdG9yL2VtYmVkLXRhZy1qYXZhc2NyaXB0LXVybC5odG1sOiBBZGRlZC4KKyAgICAgICAg KiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbWV0YS10YWctaHR0cC1yZWZyZXNoLWph dmFzY3JpcHQtdXJsLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9z ZWN1cml0eS94c3NBdWRpdG9yL21ldGEtdGFnLWh0dHAtcmVmcmVzaC1qYXZhc2NyaXB0LXVybC5o dG1sOiBBZGRlZC4KKyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3Ivb2Jq ZWN0LXRhZy1qYXZhc2NyaXB0LXVybC1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGh0 dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9vYmplY3QtdGFnLWphdmFzY3JpcHQtdXJsLmh0 bWw6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9w ZXJ0eS1lc2NhcGUtbm9xdW90ZXMtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBodHRw L3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLXRhYi1z bGFzaC1jaGFycy1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2Vj dXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMtdGFiLXNsYXNoLWNoYXJz Lmh0bWw6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9w cm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMuaHRtbDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0 cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWluamVjdC1leHBlY3RlZC50eHQ6IEFkZGVk LgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1pbmpl Y3QuaHRtbDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9y L3Jlc291cmNlcy9lY2hvLWhlYWQucGw6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2Vj dXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNoby1pbm5lci10YWcucGw6IEFkZGVkLgorICAg ICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNoby1wcm9w ZXJ0eS1ub3F1b3Rlcy5wbDogQWRkZWQuCisKIDIwMDktMDktMjggIFphbiBEb2JlcnNlayAgPHph bmRvYmVyc2VrQGdtYWlsLmNvbT4KIAogICAgICAgICBSZXZpZXdlZCBieSBEYXZpZCBLaWx6ZXIu CkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvZW1iZWQt dGFnLWphdmFzY3JpcHQtdXJsLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvZW1iZWQtdGFnLWphdmFzY3JpcHQtdXJs LWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2Vj dXJpdHkveHNzQXVkaXRvci9lbWJlZC10YWctamF2YXNjcmlwdC11cmwtZXhwZWN0ZWQudHh0CShy ZXZpc2lvbiAwKQpAQCAtMCwwICsxLDMgQEAKK0NPTlNPTEUgTUVTU0FHRTogbGluZSAxOiBSZWZ1 c2VkIHRvIGV4ZWN1dGUgYSBKYXZhU2NyaXB0IHNjcmlwdC4gU291cmNlIGNvZGUgb2Ygc2NyaXB0 IGZvdW5kIHdpdGhpbiByZXF1ZXN0CitDT05TT0xFIE1FU1NBR0U6IGxpbmUgMTogUmVmdXNlZCB0 byBleGVjdXRlIGEgSmF2YVNjcmlwdCBzY3JpcHQuIFNvdXJjZSBjb2RlIG9mIHNjcmlwdCBmb3Vu ZCB3aXRoaW4gcmVxdWVzdAorCkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5 L3hzc0F1ZGl0b3IvZW1iZWQtdGFnLWphdmFzY3JpcHQtdXJsLmh0bWwKPT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0g TGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2VtYmVkLXRhZy1qYXZh c2NyaXB0LXVybC5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9z ZWN1cml0eS94c3NBdWRpdG9yL2VtYmVkLXRhZy1qYXZhc2NyaXB0LXVybC5odG1sCShyZXZpc2lv biAwKQpAQCAtMCwwICsxLDE1IEBACis8IURPQ1RZUEUgaHRtbD4KKzxodG1sPgorPGhlYWQ+Cis8 c2NyaXB0PgoraWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikgeworICBsYXlvdXRUZXN0 Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7CisgIGxheW91dFRlc3RDb250cm9sbGVyLnNldFhTU0F1 ZGl0b3JFbmFibGVkKHRydWUpOworfQorPC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKzxpZnJh bWUgc3JjPSJodHRwOi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJj ZXMvZWNoby1pbnRlcnRhZy5wbD9xPTxlbWJlZCBzcmM9J2phdmFzY3JpcHQ6YWxlcnQoZG9jdW1l bnQuZG9tYWluKSc+PC9lbWJlZD4iPgorPC9pZnJhbWU+Cis8L2JvZHk+Cis8L2h0bWw+CkluZGV4 OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbWV0YS10YWctaHR0 cC1yZWZyZXNoLWphdmFzY3JpcHQtdXJsLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlv dXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbWV0YS10YWctaHR0cC1yZWZy ZXNoLWphdmFzY3JpcHQtdXJsLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRl c3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9tZXRhLXRhZy1odHRwLXJlZnJlc2gt amF2YXNjcmlwdC11cmwtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDMgQEAK K0NPTlNPTEUgTUVTU0FHRTogbGluZSAxOiBSZWZ1c2VkIHRvIGV4ZWN1dGUgYSBKYXZhU2NyaXB0 IHNjcmlwdC4gU291cmNlIGNvZGUgb2Ygc2NyaXB0IGZvdW5kIHdpdGhpbiByZXF1ZXN0LgorCisK SW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9tZXRhLXRh Zy1odHRwLXJlZnJlc2gtamF2YXNjcmlwdC11cmwuaHRtbAo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRU ZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbWV0YS10YWctaHR0cC1yZWZyZXNo LWphdmFzY3JpcHQtdXJsLmh0bWwJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rl c3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbWV0YS10YWctaHR0cC1yZWZyZXNoLWphdmFzY3JpcHQt dXJsLmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMjMgQEAKKzwhRE9DVFlQRSBodG1sPgor PGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQ+CitpZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVy KSB7CisgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgbGF5b3V0VGVzdENv bnRyb2xsZXIuc2V0WFNTQXVkaXRvckVuYWJsZWQodHJ1ZSk7CisgIGxheW91dFRlc3RDb250cm9s bGVyLndhaXRVbnRpbERvbmUoKTsKKyAgd2luZG93LnNldFRpbWVvdXQoZG9uZSwgMjAwMCk7Cit9 CisKK2Z1bmN0aW9uIGRvbmUoKQoreworICAgIGlmICh3aW5kb3cubGF5b3V0VGVzdENvbnRyb2xs ZXIpCisgICAgICAgIGxheW91dFRlc3RDb250cm9sbGVyLm5vdGlmeURvbmUoKTsKK30KKzwvc2Ny aXB0PgorPC9oZWFkPgorPGJvZHk+Cis8aWZyYW1lIHNyYz0iaHR0cDovL2xvY2FsaG9zdDo4MDAw L3NlY3VyaXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL2VjaG8taGVhZC5wbD9xPSUzQ21ldGEraHR0 cC1lcXVpdiUzRCUyMnJlZnJlc2glMjIrY29udGVudCUzRCUyMjAlM0IrdXJsJTNEamF2YXNjcmlw dCUzQWFsZXJ0JTI4ZG9jdW1lbnQuZG9tYWluJTI5JTIyJTNFIj4KKzwvaWZyYW1lPgorPC9ib2R5 PgorPC9odG1sPgpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRp dG9yL29iamVjdC10YWctamF2YXNjcmlwdC11cmwtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0t IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9vYmplY3QtdGFnLWph dmFzY3JpcHQtdXJsLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0 dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9vYmplY3QtdGFnLWphdmFzY3JpcHQtdXJsLWV4 cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwzIEBACitDT05TT0xFIE1FU1NBR0U6 IGxpbmUgMTogUmVmdXNlZCB0byBleGVjdXRlIGEgSmF2YVNjcmlwdCBzY3JpcHQuIFNvdXJjZSBj b2RlIG9mIHNjcmlwdCBmb3VuZCB3aXRoaW4gcmVxdWVzdAorQ09OU09MRSBNRVNTQUdFOiBsaW5l IDE6IFJlZnVzZWQgdG8gZXhlY3V0ZSBhIEphdmFTY3JpcHQgc2NyaXB0LiBTb3VyY2UgY29kZSBv ZiBzY3JpcHQgZm91bmQgd2l0aGluIHJlcXVlc3QKKwpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90 ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL29iamVjdC10YWctamF2YXNjcmlwdC11cmwuaHRtbAo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3Iv b2JqZWN0LXRhZy1qYXZhc2NyaXB0LXVybC5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVz dHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL29iamVjdC10YWctamF2YXNjcmlwdC11 cmwuaHRtbAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwxNSBAQAorPCFET0NUWVBFIGh0bWw+Cis8 aHRtbD4KKzxoZWFkPgorPHNjcmlwdD4KK2lmICh3aW5kb3cubGF5b3V0VGVzdENvbnRyb2xsZXIp IHsKKyAgbGF5b3V0VGVzdENvbnRyb2xsZXIuZHVtcEFzVGV4dCgpOworICBsYXlvdXRUZXN0Q29u dHJvbGxlci5zZXRYU1NBdWRpdG9yRW5hYmxlZCh0cnVlKTsKK30KKzwvc2NyaXB0PgorPC9oZWFk PgorPGJvZHk+Cis8aWZyYW1lIHNyYz0iaHR0cDovL2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5L3hz c0F1ZGl0b3IvcmVzb3VyY2VzL2VjaG8taW50ZXJ0YWcucGw/cT08b2JqZWN0IGRhdGE9J2phdmFz Y3JpcHQ6YWxlcnQoZG9jdW1lbnQuZG9tYWluKSc+PC9vYmplY3Q+Ij4KKzwvaWZyYW1lPgorPC9i b2R5PgorPC9odG1sPgpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NB dWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1ub3F1b3Rlcy1leHBlY3RlZC50eHQKPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQot LS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWVz Y2FwZS1ub3F1b3Rlcy1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9o dHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLWV4 cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwzIEBACitDT05TT0xFIE1FU1NBR0U6 IGxpbmUgMTogUmVmdXNlZCB0byBleGVjdXRlIGEgSmF2YVNjcmlwdCBzY3JpcHQuIFNvdXJjZSBj b2RlIG9mIHNjcmlwdCBmb3VuZCB3aXRoaW4gcmVxdWVzdC4KKworCkluZGV4OiBMYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVz LXRhYi1zbGFzaC1jaGFycy1leHBlY3RlZC50eHQKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMv aHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1ub3F1b3Rlcy10 YWItc2xhc2gtY2hhcnMtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMv aHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1ub3F1b3Rlcy10 YWItc2xhc2gtY2hhcnMtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDMgQEAK K0NPTlNPTEUgTUVTU0FHRTogbGluZSAxOiBSZWZ1c2VkIHRvIGV4ZWN1dGUgYSBKYXZhU2NyaXB0 IHNjcmlwdC4gU291cmNlIGNvZGUgb2Ygc2NyaXB0IGZvdW5kIHdpdGhpbiByZXF1ZXN0LgorCisK SW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0 eS1lc2NhcGUtbm9xdW90ZXMtdGFiLXNsYXNoLWNoYXJzLmh0bWwKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5 b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1u b3F1b3Rlcy10YWItc2xhc2gtY2hhcnMuaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3Rz L2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMt dGFiLXNsYXNoLWNoYXJzLmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMTUgQEAKKzwhRE9D VFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQ+CitpZiAod2luZG93LmxheW91dFRl c3RDb250cm9sbGVyKSB7CisgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAg bGF5b3V0VGVzdENvbnRyb2xsZXIuc2V0WFNTQXVkaXRvckVuYWJsZWQodHJ1ZSk7Cit9Cis8L3Nj cmlwdD4KKzwvaGVhZD4KKzxib2R5PgorPGlmcmFtZSBzcmM9Imh0dHA6Ly9sb2NhbGhvc3Q6ODAw MC9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291cmNlcy9lY2hvLXByb3BlcnR5LW5vcXVvdGVzLnBs P3E9ZHVtbXklMDkvb25sb2FkPWFsZXJ0KC9YU1MvKSZkdW1teT1kdW1teSI+Cis8L2lmcmFtZT4K KzwvYm9keT4KKzwvaHRtbD4KSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkv eHNzQXVkaXRvci9wcm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMuaHRtbAo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBM YXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBl LW5vcXVvdGVzLmh0bWwJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3Nl Y3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLmh0bWwJKHJldmlzaW9u IDApCkBAIC0wLDAgKzEsMTUgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxz Y3JpcHQ+CitpZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKSB7CisgIGxheW91dFRlc3RD b250cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgbGF5b3V0VGVzdENvbnRyb2xsZXIuc2V0WFNTQXVk aXRvckVuYWJsZWQodHJ1ZSk7Cit9Cis8L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5PgorPGlmcmFt ZSBzcmM9Imh0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291cmNl cy9lY2hvLXByb3BlcnR5LW5vcXVvdGVzLnBsP3E9MSUyMG9ubG9hZD1hbGVydCgvWFNTLykiPgor PC9pZnJhbWU+Cis8L2JvZHk+Cis8L2h0bWw+CkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3Rz L3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktaW5qZWN0LWV4cGVjdGVkLnR4dAo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVy dHktaW5qZWN0LWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0dHAv dGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1pbmplY3QtZXhwZWN0ZWQudHh0CShy ZXZpc2lvbiAwKQpAQCAtMCwwICsxLDMgQEAKK0NPTlNPTEUgTUVTU0FHRTogbGluZSAxOiBSZWZ1 c2VkIHRvIGV4ZWN1dGUgYSBKYXZhU2NyaXB0IHNjcmlwdC4gU291cmNlIGNvZGUgb2Ygc2NyaXB0 IGZvdW5kIHdpdGhpbiByZXF1ZXN0LgorCisKSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMv c2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1pbmplY3QuaHRtbAo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBM YXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktaW5qZWN0 Lmh0bWwJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hz c0F1ZGl0b3IvcHJvcGVydHktaW5qZWN0Lmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMTUg QEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQ+CitpZiAod2luZG93 LmxheW91dFRlc3RDb250cm9sbGVyKSB7CisgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1Rl eHQoKTsKKyAgbGF5b3V0VGVzdENvbnRyb2xsZXIuc2V0WFNTQXVkaXRvckVuYWJsZWQodHJ1ZSk7 Cit9Cis8L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5PgorPGlmcmFtZSBzcmM9Imh0dHA6Ly9sb2Nh bGhvc3Q6ODAwMC9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291cmNlcy9lY2hvLWlubmVyLXRhZy5w bD9xPW9ubG9hZD1hbGVydCgvWFNTLykiPgorPC9pZnJhbWU+Cis8L2JvZHk+Cis8L2h0bWw+Cklu ZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2Vz L2VjaG8taGVhZC5wbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3Vy aXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL2VjaG8taGVhZC5wbAkocmV2aXNpb24gMCkKKysrIExh eW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNoby1o ZWFkLnBsCShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDE2IEBACisjIS91c3IvYmluL3BlcmwgLXdU Cit1c2Ugc3RyaWN0OwordXNlIENHSTsKKworbXkgJGNnaSA9IG5ldyBDR0k7CisKK3ByaW50ICJD b250ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD1VVEYtOFxuXG4iOworCitwcmludCAiPCFE T0NUWVBFIGh0bWw+XG4iOworcHJpbnQgIjxodG1sPlxuIjsKK3ByaW50ICI8aGVhZD5cbiI7Citw cmludCAkY2dpLT5wYXJhbSgncScpOworcHJpbnQgIjwvaGVhZD5cbiI7CitwcmludCAiPGJvZHk+ XG4iOworcHJpbnQgIjwvYm9keT5cbiI7CitwcmludCAiPC9odG1sPlxuIjsKClByb3BlcnR5IGNo YW5nZXMgb246IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNv dXJjZXMvZWNoby1oZWFkLnBsCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18KQWRkZWQ6IHN2bjpleGVjdXRhYmxlCiAgICsg KgoKSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNv dXJjZXMvZWNoby1pbm5lci10YWcucGwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90 ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291cmNlcy9lY2hvLWlubmVyLXRhZy5wbAkocmV2 aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9y ZXNvdXJjZXMvZWNoby1pbm5lci10YWcucGwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMTUgQEAK KyMhL3Vzci9iaW4vcGVybCAtd1QKK3VzZSBzdHJpY3Q7Cit1c2UgQ0dJOworCitteSAkY2dpID0g bmV3IENHSTsKKworcHJpbnQgIkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PVVURi04 XG5cbiI7CisKK3ByaW50ICI8IURPQ1RZUEUgaHRtbD5cbiI7CitwcmludCAiPGh0bWw+XG4iOwor cHJpbnQgIjxib2R5ICI7CitwcmludCAkY2dpLT5wYXJhbSgncScpOworcHJpbnQgIj5cbiI7Citw cmludCAiPC9ib2R5PlxuIjsKK3ByaW50ICI8L2h0bWw+XG4iOwoKUHJvcGVydHkgY2hhbmdlcyBv bjogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291cmNlcy9l Y2hvLWlubmVyLXRhZy5wbApfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fCkFkZGVkOiBzdm46ZXhlY3V0YWJsZQogICArICoK CkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcmVzb3Vy Y2VzL2VjaG8tcHJvcGVydHktbm9xdW90ZXMucGwKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMv aHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291cmNlcy9lY2hvLXByb3BlcnR5LW5v cXVvdGVzLnBsCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0 eS94c3NBdWRpdG9yL3Jlc291cmNlcy9lY2hvLXByb3BlcnR5LW5vcXVvdGVzLnBsCShyZXZpc2lv biAwKQpAQCAtMCwwICsxLDE1IEBACisjIS91c3IvYmluL3BlcmwgLXdUCit1c2Ugc3RyaWN0Owor dXNlIENHSTsKKworbXkgJGNnaSA9IG5ldyBDR0k7CisKK3ByaW50ICJDb250ZW50LVR5cGU6IHRl eHQvaHRtbDsgY2hhcnNldD1VVEYtOFxuXG4iOworCitwcmludCAiPCFET0NUWVBFIGh0bWw+XG4i OworcHJpbnQgIjxodG1sPlxuIjsKK3ByaW50ICI8Ym9keSBmb289IjsKK3ByaW50ICRjZ2ktPnBh cmFtKCdxJyk7CitwcmludCAiPlxuIjsKK3ByaW50ICI8L2JvZHk+XG4iOworcHJpbnQgIjwvaHRt bD5cbiI7CgpQcm9wZXJ0eSBjaGFuZ2VzIG9uOiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3Vy aXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL2VjaG8tcHJvcGVydHktbm9xdW90ZXMucGwKX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpBZGRlZDogc3ZuOmV4ZWN1dGFibGUKICAgKyAqCgo=