29944 2009-09-30 18:06:07 -0700 [XSSAuditor] Reduce false positives by checking for illegal URI characters 2014-02-11 12:29:46 -0800 1 1 1 Unclassified WebKit WebCore Misc. 528+ (Nightly build) All All RESOLVED FIXED XSSAuditor P2 Normal --- 1 dbates webkit-unassigned abarth sam oldest_to_newest 151415 0 dbates 2009-09-30 18:06:07 -0700 We can reduce the number of false positives for both inline script- and inline event handler- based attacks by explicitly allowing requests that do not contain the characters described in section 2.4.3 of RFC 2396 <http://www.faqs.org/rfcs/rfc2396.html> in addition to the single quote character "'". That is, the following characters cannot appear in a valid URI: ', ", <, >. If the request does not contain these characters then we can assume that no inline scripts have been injected into response page, because it is impossible to write an inline script of the form <script>...</script> without "<", ">". With regards to an injection of an inline event handler, we believe that the majority of such injections occur as part of breaking out of a quoted property and thus a request that does not contain a single or double quote can be allowed. However, this decision causes the following test cases to fail: property-inject.html, property-escape-noquotes.html, and property-escape-noquotes-tab-slash-chars.html. We should address these in a separate update. 151418 1 40415 dbates 2009-09-30 18:13:09 -0700 Created attachment 40415 Patch with test cases and rebased test cases Also includes a minor formatting change. 151422 2 40415 abarth 2009-09-30 18:44:11 -0700 Comment on attachment 40415 Patch with test cases and rebased test cases Great. Thanks Dan. 151463 3 dbates 2009-09-30 22:56:28 -0700 Committed r48961: <http://trac.webkit.org/changeset/48961> 979549 4 dbates 2014-02-11 12:29:46 -0800 (In reply to comment #0) > [...] > With regards to an injection of an inline event handler, we believe that the majority of such injections occur as part of breaking out of a quoted property and thus a request that does not contain a single or double quote can be allowed. However, this decision causes the following test cases to fail: property-inject.html, property-escape-noquotes.html, and property-escape-noquotes-tab-slash-chars.html. We should address these in a separate update. See bug #127853. 40415 2009-09-30 18:13:09 -0700 2009-09-30 18:44:11 -0700 Patch with test cases and rebased test cases Bug29944.patch text/plain 16447 dbates SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA0ODk1MSkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMjkgQEAKKzIwMDktMDktMzAgIERhbmllbCBCYXRlcyAgPGRiYXRlc0B3ZWJraXQu b3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yOTk0NAorICAgICAgICAKKyAg ICAgICAgUmVkdWNlcyBmYWxzZSBwb3NpdGl2ZXMgaW4gdGhlIFhTU0F1ZGl0b3IgYnkgZXhwbGlj aXRseSBhbGxvd2luZyByZXF1ZXN0cworICAgICAgICB0aGF0IGRvIG5vdCBjb250YWluIGlsbGVn YWwgVVJJIGNoYXJhY3RlcnMuCisgICAgICAgIAorICAgICAgICBBcyBhIHNpZGUgZWZmZWN0IG9m IHRoaXMgY2hhbmdlLCB0aGUgdGVzdHMgcHJvcGVydHktaW5qZWN0Lmh0bWwsIAorICAgICAgICBw cm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMuaHRtbCwgYW5kIHByb3BlcnR5LWVzY2FwZS1ub3F1b3Rl cy10YWItc2xhc2gtY2hhcnMuaHRtbCAKKyAgICAgICAgZmFpbCBiZWNhdXNlIHRoZXNlIGF0dGFj a3MgZG8gbm90IGNvbnRhaW4gYW55IGlsbGVnYWwgVVJJIGNoYXJhY3RlcnMgYW5kIAorICAgICAg ICB0aHVzIGFyZSBub3cgYWxsb3dlZCBieSB0aGUgWFNTQXVkaXRvciwgd2hlcmUgcHJldmlvdXNs eSB0aGV5IHdlcmVuJ3QuIEEgZnV0dXJlCisgICAgICAgIGNoYW5nZSBtYXkgcmVpbnN0YXRlIHRo aXMgZnVuY3Rpb25hbGl0eS4KKworICAgICAgICBUZXN0czogaHR0cC90ZXN0cy9zZWN1cml0eS94 c3NBdWRpdG9yL3NjcmlwdC10YWctc2FmZTIuaHRtbAorICAgICAgICAgICAgICAgaHR0cC90ZXN0 cy9zZWN1cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWctc2FmZTMuaHRtbAorCisgICAgICAgICog cGFnZS9YU1NBdWRpdG9yLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OmlzSWxsZWdhbFVSSUNoYXJh Y3Rlcik6IEFkZGVkIG1ldGhvZC4KKyAgICAgICAgKFdlYkNvcmU6OlhTU0F1ZGl0b3I6OmNhbkV2 YWx1YXRlKToKKyAgICAgICAgKFdlYkNvcmU6OlhTU0F1ZGl0b3I6OmNhbkNyZWF0ZUlubGluZUV2 ZW50TGlzdGVuZXIpOgorICAgICAgICAoV2ViQ29yZTo6WFNTQXVkaXRvcjo6ZmluZEluUmVxdWVz dCk6IEFkZGVkIHBhcmFtZXRlciAKKyAgICAgICAgYWxsb3dSZXF1ZXN0SWZOb0lsbGVnYWxVUklD aGFyYWN0ZXJzLgorICAgICAgICAqIHBhZ2UvWFNTQXVkaXRvci5oOgorCiAyMDA5LTA5LTMwICBE YXZlIEh5YXR0ICA8aHlhdHRAYXBwbGUuY29tPgogCiAgICAgICAgIFJldmlld2VkIGJ5IFRpbSBI YXRjaGVyLgpJbmRleDogV2ViQ29yZS9wYWdlL1hTU0F1ZGl0b3IuY3BwCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0t IFdlYkNvcmUvcGFnZS9YU1NBdWRpdG9yLmNwcAkocmV2aXNpb24gNDg3OTQpCisrKyBXZWJDb3Jl L3BhZ2UvWFNTQXVkaXRvci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTU4LDYgKzU4LDE4IEBAIHN0 YXRpYyBib29sIGlzTm9uQ2Fub25pY2FsQ2hhcmFjdGVyKFVDaGEKICAgICByZXR1cm4gKGMgPT0g J1xcJyB8fCBjID09ICcwJyB8fCBjIDwgJyAnIHx8IGMgPj0gMTI3KTsKIH0KIAorc3RhdGljIGJv b2wgaXNJbGxlZ2FsVVJJQ2hhcmFjdGVyKFVDaGFyIGMpCit7CisgICAgLy8gVGhlIGNoYXJhY3Rl cnMgZGVzY3JpYmVkIGluIHNlY3Rpb24gMi40LjMgb2YgUkZDIDIzOTYgPGh0dHA6Ly93d3cuZmFx cy5vcmcvcmZjcy9yZmMyMzk2Lmh0bWw+IGluIGFkZGl0aW9uIHRvIHRoZSAKKyAgICAvLyBzaW5n bGUgcXVvdGUgY2hhcmFjdGVyICInIiBhcmUgY29uc2lkZXJlZCBpbGxlZ2FsIFVSSSBjaGFyYWN0 ZXJzLiBUaGF0IGlzLCB0aGUgZm9sbG93aW5nIGNoYXJhY3RlcnMgY2Fubm90IGFwcGVhcgorICAg IC8vIGluIGEgdmFsaWQgVVJJOiAnLCAiLCA8LCA+CisgICAgLy8KKyAgICAvLyBJZiB0aGUgcmVx dWVzdCBkb2VzIG5vdCBjb250YWluIHRoZXNlIGNoYXJhY3RlcnMgdGhlbiB3ZSBjYW4gYXNzdW1l IHRoYXQgbm8gaW5saW5lIHNjcmlwdHMgaGF2ZSBiZWVuIGluamVjdGVkIAorICAgIC8vIGludG8g cmVzcG9uc2UgcGFnZSwgYmVjYXVzZSBpdCBpcyBpbXBvc3NpYmxlIHRvIHdyaXRlIGFuIGlubGlu ZSBzY3JpcHQgb2YgdGhlIGZvcm0gPHNjcmlwdD4uLi48L3NjcmlwdD4KKyAgICAvLyB3aXRob3V0 ICI8IiwgIj4iLgorICAgIHJldHVybiAoYyA9PSAnXCcnIHx8IGMgPT0gJyInIHx8IGMgPT0gJzwn IHx8IGMgPT0gJz4nKTsKK30KKwogU3RyaW5nIFhTU0F1ZGl0b3I6OkNhY2hpbmdVUkxDYW5vbmlj YWxpemVyOjpjYW5vbmljYWxpemVVUkwoY29uc3QgU3RyaW5nJiB1cmwsIGNvbnN0IFRleHRFbmNv ZGluZyYgZW5jb2RpbmcsIGJvb2wgZGVjb2RlRW50aXRpZXMpCiB7CiAgICAgaWYgKGRlY29kZUVu dGl0aWVzID09IG1fZGVjb2RlRW50aXRpZXMgJiYgZW5jb2RpbmcgPT0gbV9lbmNvZGluZyAmJiB1 cmwgPT0gbV9pbnB1dFVSTCkKQEAgLTkwLDcgKzEwMiw3IEBAIGJvb2wgWFNTQXVkaXRvcjo6Y2Fu RXZhbHVhdGUoY29uc3QgU3RyaW4KICAgICBpZiAoIWlzRW5hYmxlZCgpKQogICAgICAgICByZXR1 cm4gdHJ1ZTsKIAotICAgIGlmIChmaW5kSW5SZXF1ZXN0KGNvZGUsIGZhbHNlKSkgeworICAgIGlm IChmaW5kSW5SZXF1ZXN0KGNvZGUsIGZhbHNlLCB0cnVlKSkgewogICAgICAgICBERUZJTkVfU1RB VElDX0xPQ0FMKFN0cmluZywgY29uc29sZU1lc3NhZ2UsICgiUmVmdXNlZCB0byBleGVjdXRlIGEg SmF2YVNjcmlwdCBzY3JpcHQuIFNvdXJjZSBjb2RlIG9mIHNjcmlwdCBmb3VuZCB3aXRoaW4gcmVx dWVzdC5cbiIpKTsKICAgICAgICAgbV9mcmFtZS0+ZG9tV2luZG93KCktPmNvbnNvbGUoKS0+YWRk TWVzc2FnZShKU01lc3NhZ2VTb3VyY2UsIExvZ01lc3NhZ2VUeXBlLCBFcnJvck1lc3NhZ2VMZXZl bCwgY29uc29sZU1lc3NhZ2UsIDEsIFN0cmluZygpKTsKICAgICAgICAgcmV0dXJuIGZhbHNlOwpA QCAtMTE2LDcgKzEyOCw3IEBAIGJvb2wgWFNTQXVkaXRvcjo6Y2FuQ3JlYXRlSW5saW5lRXZlbnRM aXMKICAgICBpZiAoIWlzRW5hYmxlZCgpKQogICAgICAgICByZXR1cm4gdHJ1ZTsKIAotICAgIGlm IChmaW5kSW5SZXF1ZXN0KGNvZGUpKSB7CisgICAgaWYgKGZpbmRJblJlcXVlc3QoY29kZSwgdHJ1 ZSwgdHJ1ZSkpIHsKICAgICAgICAgREVGSU5FX1NUQVRJQ19MT0NBTChTdHJpbmcsIGNvbnNvbGVN ZXNzYWdlLCAoIlJlZnVzZWQgdG8gZXhlY3V0ZSBhIEphdmFTY3JpcHQgc2NyaXB0LiBTb3VyY2Ug Y29kZSBvZiBzY3JpcHQgZm91bmQgd2l0aGluIHJlcXVlc3QuXG4iKSk7CiAgICAgICAgIG1fZnJh bWUtPmRvbVdpbmRvdygpLT5jb25zb2xlKCktPmFkZE1lc3NhZ2UoSlNNZXNzYWdlU291cmNlLCBM b2dNZXNzYWdlVHlwZSwgRXJyb3JNZXNzYWdlTGV2ZWwsIGNvbnNvbGVNZXNzYWdlLCAxLCBTdHJp bmcoKSk7CiAgICAgICAgIHJldHVybiBmYWxzZTsKQEAgLTIyMywxOCArMjM1LDE4IEBAIFN0cmlu ZyBYU1NBdWRpdG9yOjpkZWNvZGVIVE1MRW50aXRpZXMoY28KICAgICByZXR1cm4gU3RyaW5nOjph ZG9wdChyZXN1bHQpOwogfQogCi1ib29sIFhTU0F1ZGl0b3I6OmZpbmRJblJlcXVlc3QoY29uc3Qg U3RyaW5nJiBzdHJpbmcsIGJvb2wgZGVjb2RlRW50aXRpZXMpIGNvbnN0Citib29sIFhTU0F1ZGl0 b3I6OmZpbmRJblJlcXVlc3QoY29uc3QgU3RyaW5nJiBzdHJpbmcsIGJvb2wgZGVjb2RlRW50aXRp ZXMsIGJvb2wgYWxsb3dSZXF1ZXN0SWZOb0lsbGVnYWxVUklDaGFyYWN0ZXJzKSBjb25zdAogewog ICAgIGJvb2wgcmVzdWx0ID0gZmFsc2U7CiAgICAgRnJhbWUqIHBhcmVudEZyYW1lID0gbV9mcmFt ZS0+dHJlZSgpLT5wYXJlbnQoKTsKICAgICBpZiAocGFyZW50RnJhbWUgJiYgbV9mcmFtZS0+ZG9j dW1lbnQoKS0+dXJsKCkgPT0gYmxhbmtVUkwoKSkKLSAgICAgICAgcmVzdWx0ID0gZmluZEluUmVx dWVzdChwYXJlbnRGcmFtZSwgc3RyaW5nLCBkZWNvZGVFbnRpdGllcyk7CisgICAgICAgIHJlc3Vs dCA9IGZpbmRJblJlcXVlc3QocGFyZW50RnJhbWUsIHN0cmluZywgZGVjb2RlRW50aXRpZXMsIGFs bG93UmVxdWVzdElmTm9JbGxlZ2FsVVJJQ2hhcmFjdGVycyk7CiAgICAgaWYgKCFyZXN1bHQpCi0g ICAgICAgIHJlc3VsdCA9IGZpbmRJblJlcXVlc3QobV9mcmFtZSwgc3RyaW5nLCBkZWNvZGVFbnRp dGllcyk7CisgICAgICAgIHJlc3VsdCA9IGZpbmRJblJlcXVlc3QobV9mcmFtZSwgc3RyaW5nLCBk ZWNvZGVFbnRpdGllcywgYWxsb3dSZXF1ZXN0SWZOb0lsbGVnYWxVUklDaGFyYWN0ZXJzKTsKICAg ICByZXR1cm4gcmVzdWx0OwogfQogCi1ib29sIFhTU0F1ZGl0b3I6OmZpbmRJblJlcXVlc3QoRnJh bWUqIGZyYW1lLCBjb25zdCBTdHJpbmcmIHN0cmluZywgYm9vbCBkZWNvZGVFbnRpdGllcykgY29u c3QKK2Jvb2wgWFNTQXVkaXRvcjo6ZmluZEluUmVxdWVzdChGcmFtZSogZnJhbWUsIGNvbnN0IFN0 cmluZyYgc3RyaW5nLCBib29sIGRlY29kZUVudGl0aWVzLCBib29sIGFsbG93UmVxdWVzdElmTm9J bGxlZ2FsVVJJQ2hhcmFjdGVycykgY29uc3QKIHsKICAgICBBU1NFUlQoZnJhbWUtPmRvY3VtZW50 KCkpOwogCkBAIC0yNzQsOCArMjg2LDEzIEBAIGJvb2wgWFNTQXVkaXRvcjo6ZmluZEluUmVxdWVz dChGcmFtZSogZnIKICAgICBpZiAoc3RyaW5nLmxlbmd0aCgpIDwgcGFnZVVSTC5sZW5ndGgoKSkg ewogICAgICAgICAvLyBUaGUgc3RyaW5nIGNhbiBhY3R1YWxseSBmaXQgaW5zaWRlIHRoZSBwYWdl VVJMLgogICAgICAgICBTdHJpbmcgZGVjb2RlZFBhZ2VVUkwgPSBtX2NhY2hlLmNhbm9uaWNhbGl6 ZVVSTChwYWdlVVJMLCBmcmFtZS0+ZG9jdW1lbnQoKS0+ZGVjb2RlcigpLT5lbmNvZGluZygpLCBk ZWNvZGVFbnRpdGllcyk7CisKKyAgICAgICAgaWYgKGFsbG93UmVxdWVzdElmTm9JbGxlZ2FsVVJJ Q2hhcmFjdGVycyAmJiAoIWZvcm1EYXRhT2JqIHx8IGZvcm1EYXRhT2JqLT5pc0VtcHR5KCkpIAor ICAgICAgICAgICAgJiYgZGVjb2RlZFBhZ2VVUkwuZmluZCgmaXNJbGxlZ2FsVVJJQ2hhcmFjdGVy LCAwKSA9PSAtMSkKKyAgICAgICAgICAgIHJldHVybiBmYWxzZTsgLy8gSW5qZWN0aW9uIGlzIGlt cG9zc2libGUgYmVjYXVzZSB0aGUgcmVxdWVzdCBkb2VzIG5vdCBjb250YWluIGFueSBpbGxlZ2Fs IFVSSSBjaGFyYWN0ZXJzLiAKKwogICAgICAgICBpZiAoZGVjb2RlZFBhZ2VVUkwuZmluZChjYW5v bmljYWxpemVkU3RyaW5nLCAwLCBmYWxzZSkgIT0gLTEpCi0gICAgICAgICAgIHJldHVybiB0cnVl OyAgLy8gV2UndmUgZm91bmQgdGhlIHNtb2tpbmcgZ3VuLgorICAgICAgICAgICAgcmV0dXJuIHRy dWU7ICAvLyBXZSd2ZSBmb3VuZCB0aGUgc21va2luZyBndW4uCiAgICAgfQogCiAgICAgaWYgKGZv cm1EYXRhT2JqICYmICFmb3JtRGF0YU9iai0+aXNFbXB0eSgpKSB7CkluZGV4OiBXZWJDb3JlL3Bh Z2UvWFNTQXVkaXRvci5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvcGFnZS9YU1NBdWRpdG9yLmgJ KHJldmlzaW9uIDQ4Nzk0KQorKysgV2ViQ29yZS9wYWdlL1hTU0F1ZGl0b3IuaAkod29ya2luZyBj b3B5KQpAQCAtMTE5LDggKzExOSw4IEBAIG5hbWVzcGFjZSBXZWJDb3JlIHsKICAgICAgICAgc3Rh dGljIFN0cmluZyBkZWNvZGVVUkwoY29uc3QgU3RyaW5nJiB1cmwsIGNvbnN0IFRleHRFbmNvZGlu ZyYgZW5jb2RpbmcsIGJvb2wgZGVjb2RlRW50aXRpZXMpOwogICAgICAgICBzdGF0aWMgU3RyaW5n IGRlY29kZUhUTUxFbnRpdGllcyhjb25zdCBTdHJpbmcmLCBib29sIGxlYXZlVW5kZWNvZGFibGVF bnRpdGllc1VudG91Y2hlZCA9IHRydWUpOwogCi0gICAgICAgIGJvb2wgZmluZEluUmVxdWVzdChj b25zdCBTdHJpbmcmLCBib29sIGRlY29kZUVudGl0aWVzID0gdHJ1ZSkgY29uc3Q7Ci0gICAgICAg IGJvb2wgZmluZEluUmVxdWVzdChGcmFtZSosIGNvbnN0IFN0cmluZyYsIGJvb2wgZGVjb2RlRW50 aXRpZXMgPSB0cnVlKSBjb25zdDsKKyAgICAgICAgYm9vbCBmaW5kSW5SZXF1ZXN0KGNvbnN0IFN0 cmluZyYsIGJvb2wgZGVjb2RlRW50aXRpZXMgPSB0cnVlLCBib29sIGFsbG93UmVxdWVzdElmTm9J bGxlZ2FsVVJJQ2hhcmFjdGVycyA9IGZhbHNlKSBjb25zdDsKKyAgICAgICAgYm9vbCBmaW5kSW5S ZXF1ZXN0KEZyYW1lKiwgY29uc3QgU3RyaW5nJiwgYm9vbCBkZWNvZGVFbnRpdGllcyA9IHRydWUs IGJvb2wgYWxsb3dSZXF1ZXN0SWZOb0lsbGVnYWxVUklDaGFyYWN0ZXJzID0gZmFsc2UpIGNvbnN0 OwogCiAgICAgICAgIC8vIFRoZSBmcmFtZSB0byBhdWRpdC4KICAgICAgICAgRnJhbWUqIG1fZnJh bWU7CkluZGV4OiBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVz dHMvQ2hhbmdlTG9nCShyZXZpc2lvbiA0ODk1MSkKKysrIExheW91dFRlc3RzL0NoYW5nZUxvZwko d29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDMwIEBACisyMDA5LTA5LTMwICBEYW5pZWwgQmF0ZXMg IDxkYmF0ZXNAd2Via2l0Lm9yZz4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMh KS4KKworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9Mjk5 NDQKKyAgICAgICAgCisgICAgICAgIFRlc3RzIHRoYXQgdGhlIFhTU0F1ZGl0b3IgYWxsb3dzIHJl cXVlc3RzIHRoYXQgZG8gbm90IGNvbnRhaW4gaWxsZWdhbCBVUkkgCisgICAgICAgIGNoYXJhY3Rl cnMuCisgICAgICAgIAorICAgICAgICBBZGRlZCBhIG5vdGljZSByZWdhcmRpbmcgdGhlIGZhaWx1 cmUgb2YgdGVzdHMgcHJvcGVydHktaW5qZWN0Lmh0bWwsIAorICAgICAgICBwcm9wZXJ0eS1lc2Nh cGUtbm9xdW90ZXMuaHRtbCBhbmQgcHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLXRhYi1zbGFzaC1j aGFycy5odG1sLCAKKyAgICAgICAgYW5kIHJlYmFzZWQgdGhlIGV4cGVjdGVkIHJlc3VsdHMgb2Yg dGhlc2UgdGVzdHMuCisKKyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3Iv cHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLWV4cGVjdGVkLnR4dDoKKyAgICAgICAgKiBodHRwL3Rl c3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLXRhYi1zbGFz aC1jaGFycy1leHBlY3RlZC50eHQ6CisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NB dWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1ub3F1b3Rlcy10YWItc2xhc2gtY2hhcnMuaHRtbDoKKyAg ICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5v cXVvdGVzLmh0bWw6CisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3By b3BlcnR5LWluamVjdC1leHBlY3RlZC50eHQ6CisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0 eS94c3NBdWRpdG9yL3Byb3BlcnR5LWluamVjdC5odG1sOgorICAgICAgICAqIGh0dHAvdGVzdHMv c2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvc2FmZS1zY3JpcHQtbm9xdW90ZXMuanM6IEFk ZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMv c2NyaXB0LXRhZy1zYWZlMi5odG1sOiBBZGRlZC4KKyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3Vy aXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL3NjcmlwdC10YWctc2FmZTMuaHRtbDogQWRkZWQuCisg ICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWctc2FmZTIt ZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1 ZGl0b3Ivc2NyaXB0LXRhZy1zYWZlMi5odG1sOiBBZGRlZC4KKyAgICAgICAgKiBodHRwL3Rlc3Rz L3NlY3VyaXR5L3hzc0F1ZGl0b3Ivc2NyaXB0LXRhZy1zYWZlMy1leHBlY3RlZC50eHQ6IEFkZGVk LgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9zY3JpcHQtdGFnLXNh ZmUzLmh0bWw6IEFkZGVkLgorCiAyMDA5LTA5LTMwICBKZXJlbXkgT3Jsb3cgIDxqb3Jsb3dAY2hy b21pdW0ub3JnPgogCiAgICAgICAgIFJldmlld2VkIGJ5IERpbWl0cmkgR2xhemtvdi4KSW5kZXg6 IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1lc2Nh cGUtbm9xdW90ZXMtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2h0dHAv dGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMtZXhwZWN0 ZWQudHh0CShyZXZpc2lvbiA0ODkzNikKKysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJp dHkveHNzQXVkaXRvci9wcm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMtZXhwZWN0ZWQudHh0CSh3b3Jr aW5nIGNvcHkpCkBAIC0xLDMgKzEsNCBAQAotQ09OU09MRSBNRVNTQUdFOiBsaW5lIDE6IFJlZnVz ZWQgdG8gZXhlY3V0ZSBhIEphdmFTY3JpcHQgc2NyaXB0LiBTb3VyY2UgY29kZSBvZiBzY3JpcHQg Zm91bmQgd2l0aGluIHJlcXVlc3QuCitBTEVSVDogL1hTUy8KK1RoaXMgdGVzdCBmYWlscyBiZWNh dXNlIHRoZSBYU1NBdWRpdG9yIGFsbG93cyByZXF1ZXN0cyB0aGF0IGRvIG5vdCBjb250YWluIGls bGVnYWwgVVJJIGNoYXJhY3RlcnMuIFRodXMsIHRoZSBYU1NBdWRpdG9yIGRvZXMgbm90IGRldGVj dCBicmVha2luZyBvdXQgb2YgYSBwcm9wZXJ0eSB3aXRob3V0IHF1b3Rlcy4gQSBmdXR1cmUgdXBk YXRlIG1heSByZWluc3RhdGUgdGhpcyBmdW5jdGlvbmFsaXR5LgogCiAKSW5kZXg6IExheW91dFRl c3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1lc2NhcGUtbm9xdW90 ZXMtdGFiLXNsYXNoLWNoYXJzLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVz LXRhYi1zbGFzaC1jaGFycy1leHBlY3RlZC50eHQJKHJldmlzaW9uIDQ4OTM2KQorKysgTGF5b3V0 VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1ub3F1 b3Rlcy10YWItc2xhc2gtY2hhcnMtZXhwZWN0ZWQudHh0CSh3b3JraW5nIGNvcHkpCkBAIC0xLDMg KzEsNCBAQAotQ09OU09MRSBNRVNTQUdFOiBsaW5lIDE6IFJlZnVzZWQgdG8gZXhlY3V0ZSBhIEph dmFTY3JpcHQgc2NyaXB0LiBTb3VyY2UgY29kZSBvZiBzY3JpcHQgZm91bmQgd2l0aGluIHJlcXVl c3QuCitBTEVSVDogL1hTUy8KK1RoaXMgdGVzdCBmYWlscyBiZWNhdXNlIHRoZSBYU1NBdWRpdG9y IGFsbG93cyByZXF1ZXN0cyB0aGF0IGRvIG5vdCBjb250YWluIGlsbGVnYWwgVVJJIGNoYXJhY3Rl cnMuIFRodXMsIHRoZSBYU1NBdWRpdG9yIGRvZXMgbm90IGRldGVjdCBicmVha2luZyBvdXQgb2Yg YSBwcm9wZXJ0eSB3aXRob3V0IHF1b3Rlcy4gQSBmdXR1cmUgdXBkYXRlIG1heSByZWluc3RhdGUg dGhpcyBmdW5jdGlvbmFsaXR5LgogCiAKSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2Vj dXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1lc2NhcGUtbm9xdW90ZXMtdGFiLXNsYXNoLWNoYXJz Lmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NB dWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1ub3F1b3Rlcy10YWItc2xhc2gtY2hhcnMuaHRtbAkocmV2 aXNpb24gNDg5MzYpCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0 b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLXRhYi1zbGFzaC1jaGFycy5odG1sCSh3b3JraW5n IGNvcHkpCkBAIC05LDYgKzksOSBAQCBpZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKSB7 CiA8L3NjcmlwdD4KIDwvaGVhZD4KIDxib2R5PgorPHA+VGhpcyB0ZXN0IGZhaWxzIGJlY2F1c2Ug dGhlIFhTU0F1ZGl0b3IgYWxsb3dzIHJlcXVlc3RzIHRoYXQgZG8gbm90IGNvbnRhaW4gaWxsZWdh bCBVUkkgY2hhcmFjdGVycy4gVGh1cywgCit0aGUgWFNTQXVkaXRvciBkb2VzIG5vdCBkZXRlY3Qg YnJlYWtpbmcgb3V0IG9mIGFuIHVucXVvdGVkIHByb3BlcnR5LiBBIGZ1dHVyZSB1cGRhdGUgbWF5 IHJlaW5zdGF0ZSB0aGlzIAorZnVuY3Rpb25hbGl0eS48L3A+CiA8aWZyYW1lIHNyYz0iaHR0cDov L2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL2VjaG8tcHJvcGVy dHktbm9xdW90ZXMucGw/cT1kdW1teSUwOS9vbmxvYWQ9YWxlcnQoL1hTUy8pJmR1bW15PWR1bW15 Ij4KIDwvaWZyYW1lPgogPC9ib2R5PgpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1 cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWVzY2FwZS1ub3F1b3Rlcy5odG1sCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9wcm9wZXJ0eS1l c2NhcGUtbm9xdW90ZXMuaHRtbAkocmV2aXNpb24gNDg5MzYpCisrKyBMYXlvdXRUZXN0cy9odHRw L3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktZXNjYXBlLW5vcXVvdGVzLmh0bWwJ KHdvcmtpbmcgY29weSkKQEAgLTksNiArOSw5IEBAIGlmICh3aW5kb3cubGF5b3V0VGVzdENvbnRy b2xsZXIpIHsKIDwvc2NyaXB0PgogPC9oZWFkPgogPGJvZHk+Cis8cD5UaGlzIHRlc3QgZmFpbHMg YmVjYXVzZSB0aGUgWFNTQXVkaXRvciBhbGxvd3MgcmVxdWVzdHMgdGhhdCBkbyBub3QgY29udGFp biBpbGxlZ2FsIFVSSSBjaGFyYWN0ZXJzLiBUaHVzLCAKK3RoZSBYU1NBdWRpdG9yIGRvZXMgbm90 IGRldGVjdCBicmVha2luZyBvdXQgb2YgYW4gdW5xdW90ZWQgcHJvcGVydHkuIEEgZnV0dXJlIHVw ZGF0ZSBtYXkgcmVpbnN0YXRlIHRoaXMgCitmdW5jdGlvbmFsaXR5LjwvcD4KIDxpZnJhbWUgc3Jj PSJodHRwOi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNo by1wcm9wZXJ0eS1ub3F1b3Rlcy5wbD9xPTElMjBvbmxvYWQ9YWxlcnQoL1hTUy8pIj4KIDwvaWZy YW1lPgogPC9ib2R5PgpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NB dWRpdG9yL3Byb3BlcnR5LWluamVjdC1leHBlY3RlZC50eHQKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0 VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWluamVjdC1leHBl Y3RlZC50eHQJKHJldmlzaW9uIDQ4OTM2KQorKysgTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1 cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWluamVjdC1leHBlY3RlZC50eHQJKHdvcmtpbmcgY29w eSkKQEAgLTEsMyArMSw0IEBACi1DT05TT0xFIE1FU1NBR0U6IGxpbmUgMTogUmVmdXNlZCB0byBl eGVjdXRlIGEgSmF2YVNjcmlwdCBzY3JpcHQuIFNvdXJjZSBjb2RlIG9mIHNjcmlwdCBmb3VuZCB3 aXRoaW4gcmVxdWVzdC4KK0FMRVJUOiAvWFNTLworVGhpcyB0ZXN0IGZhaWxzIGJlY2F1c2UgdGhl IFhTU0F1ZGl0b3IgYWxsb3dzIHJlcXVlc3RzIHRoYXQgZG8gbm90IGNvbnRhaW4gaWxsZWdhbCBV UkkgY2hhcmFjdGVycy4gVGh1cywgdGhlIFhTU0F1ZGl0b3IgZG9lcyBub3QgZGV0ZWN0IHRoZSBp bmplY3Rpb24gb2YgYW4gaW5saW5lIGV2ZW50IGhhbmRsZXIgd2l0aGluIGEgdGFnLiBBIGZ1dHVy ZSB1cGRhdGUgbWF5IHJlaW5zdGF0ZSB0aGlzIGZ1bmN0aW9uYWxpdHkuCiAKIApJbmRleDogTGF5 b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Byb3BlcnR5LWluamVjdC5o dG1sCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVk aXRvci9wcm9wZXJ0eS1pbmplY3QuaHRtbAkocmV2aXNpb24gNDg5MzYpCisrKyBMYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcHJvcGVydHktaW5qZWN0Lmh0bWwJKHdv cmtpbmcgY29weSkKQEAgLTksNiArOSw5IEBAIGlmICh3aW5kb3cubGF5b3V0VGVzdENvbnRyb2xs ZXIpIHsKIDwvc2NyaXB0PgogPC9oZWFkPgogPGJvZHk+Cis8cD5UaGlzIHRlc3QgZmFpbHMgYmVj YXVzZSB0aGUgWFNTQXVkaXRvciBhbGxvd3MgcmVxdWVzdHMgdGhhdCBkbyBub3QgY29udGFpbiBp bGxlZ2FsIFVSSSBjaGFyYWN0ZXJzLiBUaHVzLCAKK3RoZSBYU1NBdWRpdG9yIGRvZXMgbm90IGRl dGVjdCB0aGUgaW5qZWN0aW9uIG9mIGFuIGlubGluZSBldmVudCBoYW5kbGVyIHdpdGhpbiBhIHRh Zy4gQSBmdXR1cmUgdXBkYXRlIG1heSAKK3JlaW5zdGF0ZSB0aGlzIGZ1bmN0aW9uYWxpdHkuPC9w PgogPGlmcmFtZSBzcmM9Imh0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS94c3NBdWRpdG9y L3Jlc291cmNlcy9lY2hvLWlubmVyLXRhZy5wbD9xPW9ubG9hZD1hbGVydCgvWFNTLykiPgogPC9p ZnJhbWU+CiA8L2JvZHk+CkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hz c0F1ZGl0b3Ivc2NyaXB0LXRhZy1zYWZlMi1leHBlY3RlZC50eHQKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5 b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWctc2FmZTIt ZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1 cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWctc2FmZTItZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAw KQpAQCAtMCwwICsxLDIgQEAKK0FMRVJUOiAvVGhpcyBpcyBhIHNhZmUgc2NyaXB0Li8KKwpJbmRl eDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWct c2FmZTIuaHRtbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5 L3hzc0F1ZGl0b3Ivc2NyaXB0LXRhZy1zYWZlMi5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0 VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWctc2FmZTIuaHRt bAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwxNSBAQAorPCFET0NUWVBFIGh0bWw+Cis8aHRtbD4K KzxoZWFkPgorPHNjcmlwdD4KK2lmICh3aW5kb3cubGF5b3V0VGVzdENvbnRyb2xsZXIpIHsKKyAg ICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7CisgICAgbGF5b3V0VGVzdENvbnRy b2xsZXIuc2V0WFNTQXVkaXRvckVuYWJsZWQodHJ1ZSk7Cit9Cis8L3NjcmlwdD4KKzwvaGVhZD4K Kzxib2R5PgorPGlmcmFtZSBzcmM9J2h0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS94c3NB dWRpdG9yL3Jlc291cmNlcy9zY3JpcHQtdGFnLXNhZmUyLmh0bWw/cT1hbGVydCgvVGhpcytpcyth K3NhZmUrc2NyaXB0Li8pJz4KKzwvaWZyYW1lPgorPC9ib2R5PgorPC9odG1sPgpJbmRleDogTGF5 b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWctc2FmZTMt ZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJp dHkveHNzQXVkaXRvci9zY3JpcHQtdGFnLXNhZmUzLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkK KysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9zY3JpcHQtdGFn LXNhZmUzLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwyIEBACitBTEVSVDog L1RoaXMgaXMgYSBzYWZlIHNjcmlwdC4vCisKSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMv c2VjdXJpdHkveHNzQXVkaXRvci9zY3JpcHQtdGFnLXNhZmUzLmh0bWwKPT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0g TGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3NjcmlwdC10YWctc2Fm ZTMuaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkv eHNzQXVkaXRvci9zY3JpcHQtdGFnLXNhZmUzLmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEs MTUgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQ+CitpZiAod2lu ZG93LmxheW91dFRlc3RDb250cm9sbGVyKSB7CisgICAgbGF5b3V0VGVzdENvbnRyb2xsZXIuZHVt cEFzVGV4dCgpOworICAgIGxheW91dFRlc3RDb250cm9sbGVyLnNldFhTU0F1ZGl0b3JFbmFibGVk KHRydWUpOworfQorPC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKzxpZnJhbWUgc3JjPSdodHRw Oi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvc2NyaXB0LXRh Zy1zYWZlMy5odG1sP3E9YWxlcnQoL1RoaXMraXMrYStzYWZlK3NjcmlwdC4vKSUzQic+Cis8L2lm cmFtZT4KKzwvYm9keT4KKzwvaHRtbD4KSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2Vj dXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvc2FmZS1zY3JpcHQtbm9xdW90ZXMuanMKPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291 cmNlcy9zYWZlLXNjcmlwdC1ub3F1b3Rlcy5qcwkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3Rz L2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvc2FmZS1zY3JpcHQtbm9x dW90ZXMuanMJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEgQEAKK2FsZXJ0KC9UaGlzIGlzIGEgc2Fm ZSBzY3JpcHQuLyk7CkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1 ZGl0b3IvcmVzb3VyY2VzL3NjcmlwdC10YWctc2FmZTIuaHRtbAo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlv dXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL3NjcmlwdC10 YWctc2FmZTIuaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2Vj dXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvc2NyaXB0LXRhZy1zYWZlMi5odG1sCShyZXZpc2lv biAwKQpAQCAtMCwwICsxLDggQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxz Y3JpcHQ+YWxlcnQoL1RoaXMgaXMgYSBzYWZlIHNjcmlwdC4vKTwvc2NyaXB0PgorPC9oZWFkPgor PGJvZHk+Cis8L2JvZHk+Cis8L2h0bWw+CkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3Nl Y3VyaXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL3NjcmlwdC10YWctc2FmZTMuaHRtbAo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvcmVzb3Vy Y2VzL3NjcmlwdC10YWctc2FmZTMuaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0 dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvc2NyaXB0LXRhZy1zYWZlMy5o dG1sCShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDggQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+ Cis8aGVhZD4KKzxzY3JpcHQgc3JjPSdodHRwOi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNz QXVkaXRvci9yZXNvdXJjZXMvc2FmZS1zY3JpcHQtbm9xdW90ZXMuanMnPjwvc2NyaXB0PgorPC9o ZWFkPgorPGJvZHk+Cis8L2JvZHk+Cis8L2h0bWw+Cg==