31098 2009-11-03 21:41:48 -0800 [XSSAuditor] Allow scripts and plug-ins from the same origin 2009-11-09 12:33:22 -0800 1 1 1 Unclassified WebKit WebCore JavaScript 528+ (Nightly build) All All RESOLVED FIXED XSSAuditor P2 Normal --- 1 abarth dbates dbates eric sam oldest_to_newest 160313 0 abarth 2009-11-03 21:41:48 -0800 I got a report today of a false positive with the XSSAuditor involving loading a SWF from a relative URL supplied in a request parameter. We can eliminate this false positive by always allowing same-origin loads of scripts and plug-ins. That should be pretty safe. 160595 1 dbates 2009-11-04 13:58:02 -0800 Adam, did you want to look into this? Otherwise, I can. 160665 2 abarth 2009-11-04 16:54:52 -0800 If you could look into this, that would be great. We want to do something similar to what we do for the base tag. 161453 3 42721 dbates 2009-11-08 15:26:54 -0800 Created attachment 42721 Patch with test case Since XSSAuditor::canLoadExternalScriptFromSrc, XSSAuditor::canLoadObject, and XSSAuditor::canSetBaseElementURL should all allow same-origin loads, I defined a new method XSSAuditor::isSameOriginResource, as opposed to inlining the same-origin check. 161456 4 42721 abarth 2009-11-08 16:27:17 -0800 Comment on attachment 42721 Patch with test case Precisely. 161458 5 42721 commit-queue 2009-11-08 16:39:10 -0800 Comment on attachment 42721 Patch with test case Rejecting patch 42721 from commit-queue. Failed to run "['WebKitTools/Scripts/run-webkit-tests', '--no-launch-safari', '--quiet', '--exit-after-n-failures=1']" exit_code: 1 Running build-dumprendertree Running tests from /Users/eseidel/Projects/CommitQueue/LayoutTests Testing 11577 test cases. http/tests/security/xssAuditor/object-src-inject.html -> failed Exiting early after 1 failures. 9065 tests run. 257.04s total testing time 9064 test cases (99%) succeeded 1 test case (<1%) had incorrect layout 5 test cases (<1%) had stderr output 161459 6 abarth 2009-11-08 16:44:57 -0800 Dan, I think you'll have to land this manually because of the executable bit. 161460 7 dbates 2009-11-08 16:50:00 -0800 OK. Will do. (In reply to comment #6) > Dan, I think you'll have to land this manually because of the executable bit. 161463 8 dbates 2009-11-08 17:18:41 -0800 Committed r50631: <http://trac.webkit.org/changeset/50631> 161703 9 eric 2009-11-09 12:33:22 -0800 svn-apply bug is bug 27204. 42721 2009-11-08 15:26:54 -0800 2009-11-08 16:39:10 -0800 Patch with test case Bug31098.patch text/plain 7645 dbates SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA1MDYyOCkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMjAgQEAKKzIwMDktMTEtMDggIERhbmllbCBCYXRlcyAgPGRiYXRlc0B3ZWJraXQu b3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0zMTA5OAorCisgICAgICAgIEFs bG93cyBzYW1lLW9yaWdpbiBwbHVnaW4tYmFzZWQgY29udGVudCB0byBsb2FkLgorCisgICAgICAg IFRlc3Q6IGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9vYmplY3Qtc3JjLWluamVjdC5o dG1sCisKKyAgICAgICAgKiBwYWdlL1hTU0F1ZGl0b3IuY3BwOgorICAgICAgICAoV2ViQ29yZTo6 WFNTQXVkaXRvcjo6Y2FuTG9hZEV4dGVybmFsU2NyaXB0RnJvbVNyYyk6IE1vZGlmaWVkIHRvIGNh bGwgWFNTQXVkaXRvcjo6aXNTYW1lT3JpZ2luUmVzb3VyY2UuCisgICAgICAgIChXZWJDb3JlOjpY U1NBdWRpdG9yOjpjYW5Mb2FkT2JqZWN0KTogRGl0dG8uCisgICAgICAgIChXZWJDb3JlOjpYU1NB dWRpdG9yOjpjYW5TZXRCYXNlRWxlbWVudFVSTCk6IERpdHRvLiAKKyAgICAgICAgKFdlYkNvcmU6 OlhTU0F1ZGl0b3I6OmlzU2FtZU9yaWdpblJlc291cmNlKTogQWRkZWQuCisgICAgICAgICogcGFn ZS9YU1NBdWRpdG9yLmg6CisKIDIwMDktMTEtMDggIFBhdmVsIEZlbGRtYW4gIDxwZmVsZG1hbkBj aHJvbWl1bS5vcmc+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgVGltb3RoeSBIYXRjaGVyLgpJbmRl eDogV2ViQ29yZS9wYWdlL1hTU0F1ZGl0b3IuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvcGFn ZS9YU1NBdWRpdG9yLmNwcAkocmV2aXNpb24gNTA2MTIpCisrKyBXZWJDb3JlL3BhZ2UvWFNTQXVk aXRvci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTE0NCwxNCArMTQ0LDcgQEAgYm9vbCBYU1NBdWRp dG9yOjpjYW5Mb2FkRXh0ZXJuYWxTY3JpcHRGcgogICAgIGlmICghaXNFbmFibGVkKCkpCiAgICAg ICAgIHJldHVybiB0cnVlOwogCi0gICAgLy8gSWYgdGhlIHNjcmlwdCBpcyBsb2FkZWQgZnJvbSB0 aGUgc2FtZSBVUkwgYXMgdGhlIGVuY2xvc2luZyBwYWdlLCBpdCdzCi0gICAgLy8gcHJvYmFibHkg bm90IGFuIFhTUyBhdHRhY2ssIHNvIHdlIHJlZHVjZSBmYWxzZSBwb3NpdGl2ZXMgYnkgYWxsb3dp bmcgdGhlCi0gICAgLy8gc2NyaXB0LiBJZiB0aGUgc2NyaXB0IGhhcyBhIHF1ZXJ5IHN0cmluZywg d2UncmUgbW9yZSBzdXNwaWNpb3VzLAotICAgIC8vIGhvd2V2ZXIsIGJlY2F1c2UgdGhhdCdzIHBy ZXR0eSByYXJlIGFuZCB0aGUgYXR0YWNrZXIgbWlnaHQgYmUgYWJsZSB0bwotICAgIC8vIHRyaWNr IGEgc2VydmVyLXNpZGUgc2NyaXB0IGludG8gZG9pbmcgc29tZXRoaW5nIGRhbmdlcm91cyB3aXRo IHRoZSBxdWVyeQotICAgIC8vIHN0cmluZy4KLSAgICBLVVJMIHNjcmlwdFVSTChtX2ZyYW1lLT5k b2N1bWVudCgpLT51cmwoKSwgdXJsKTsKLSAgICBpZiAobV9mcmFtZS0+ZG9jdW1lbnQoKS0+dXJs KCkuaG9zdCgpID09IHNjcmlwdFVSTC5ob3N0KCkgJiYgc2NyaXB0VVJMLnF1ZXJ5KCkuaXNFbXB0 eSgpKQorICAgIGlmIChpc1NhbWVPcmlnaW5SZXNvdXJjZSh1cmwpKQogICAgICAgICByZXR1cm4g dHJ1ZTsKIAogICAgIGlmIChmaW5kSW5SZXF1ZXN0KGNvbnRleHQgKyB1cmwpKSB7CkBAIC0xNjcs NiArMTYwLDkgQEAgYm9vbCBYU1NBdWRpdG9yOjpjYW5Mb2FkT2JqZWN0KGNvbnN0IFN0cgogICAg IGlmICghaXNFbmFibGVkKCkpCiAgICAgICAgIHJldHVybiB0cnVlOwogCisgICAgaWYgKGlzU2Ft ZU9yaWdpblJlc291cmNlKHVybCkpCisgICAgICAgIHJldHVybiB0cnVlOworCiAgICAgaWYgKGZp bmRJblJlcXVlc3QodXJsKSkgewogICAgICAgICBERUZJTkVfU1RBVElDX0xPQ0FMKFN0cmluZywg Y29uc29sZU1lc3NhZ2UsICgiUmVmdXNlZCB0byBleGVjdXRlIGEgSmF2YVNjcmlwdCBzY3JpcHQu IFNvdXJjZSBjb2RlIG9mIHNjcmlwdCBmb3VuZCB3aXRoaW4gcmVxdWVzdCIpKTsKICAgICAgICAg bV9mcmFtZS0+ZG9tV2luZG93KCktPmNvbnNvbGUoKS0+YWRkTWVzc2FnZShKU01lc3NhZ2VTb3Vy Y2UsIExvZ01lc3NhZ2VUeXBlLCBFcnJvck1lc3NhZ2VMZXZlbCwgY29uc29sZU1lc3NhZ2UsIDEs IFN0cmluZygpKTsKQEAgLTE3OSw5ICsxNzUsMTEgQEAgYm9vbCBYU1NBdWRpdG9yOjpjYW5TZXRC YXNlRWxlbWVudFVSTChjbwogewogICAgIGlmICghaXNFbmFibGVkKCkpCiAgICAgICAgIHJldHVy biB0cnVlOwotICAgIAotICAgIEtVUkwgYmFzZUVsZW1lbnRVUkwobV9mcmFtZS0+ZG9jdW1lbnQo KS0+dXJsKCksIHVybCk7Ci0gICAgaWYgKG1fZnJhbWUtPmRvY3VtZW50KCktPnVybCgpLmhvc3Qo KSAhPSBiYXNlRWxlbWVudFVSTC5ob3N0KCkgJiYgZmluZEluUmVxdWVzdCh1cmwpKSB7CisKKyAg ICBpZiAoaXNTYW1lT3JpZ2luUmVzb3VyY2UodXJsKSkKKyAgICAgICAgcmV0dXJuIHRydWU7CisK KyAgICBpZiAoZmluZEluUmVxdWVzdCh1cmwpKSB7CiAgICAgICAgIERFRklORV9TVEFUSUNfTE9D QUwoU3RyaW5nLCBjb25zb2xlTWVzc2FnZSwgKCJSZWZ1c2VkIHRvIGV4ZWN1dGUgYSBKYXZhU2Ny aXB0IHNjcmlwdC4gU291cmNlIGNvZGUgb2Ygc2NyaXB0IGZvdW5kIHdpdGhpbiByZXF1ZXN0Iikp OwogICAgICAgICBtX2ZyYW1lLT5kb21XaW5kb3coKS0+Y29uc29sZSgpLT5hZGRNZXNzYWdlKEpT TWVzc2FnZVNvdXJjZSwgTG9nTWVzc2FnZVR5cGUsIEVycm9yTWVzc2FnZUxldmVsLCBjb25zb2xl TWVzc2FnZSwgMSwgU3RyaW5nKCkpOwogICAgICAgICByZXR1cm4gZmFsc2U7CkBAIC0yNTUsNiAr MjUzLDE4IEBAIFN0cmluZyBYU1NBdWRpdG9yOjpkZWNvZGVIVE1MRW50aXRpZXMoY28KICAgICBy ZXR1cm4gU3RyaW5nOjphZG9wdChyZXN1bHQpOwogfQogCitib29sIFhTU0F1ZGl0b3I6OmlzU2Ft ZU9yaWdpblJlc291cmNlKGNvbnN0IFN0cmluZyYgdXJsKSBjb25zdAoreworICAgIC8vIElmIHRo ZSByZXNvdXJjZSBpcyBsb2FkZWQgZnJvbSB0aGUgc2FtZSBVUkwgYXMgdGhlIGVuY2xvc2luZyBw YWdlLCBpdCdzCisgICAgLy8gcHJvYmFibHkgbm90IGFuIFhTUyBhdHRhY2ssIHNvIHdlIHJlZHVj ZSBmYWxzZSBwb3NpdGl2ZXMgYnkgYWxsb3dpbmcgdGhlCisgICAgLy8gcmVxdWVzdC4gSWYgdGhl IHJlc291cmNlIGhhcyBhIHF1ZXJ5IHN0cmluZywgd2UncmUgbW9yZSBzdXNwaWNpb3VzLAorICAg IC8vIGhvd2V2ZXIsIGJlY2F1c2UgdGhhdCdzIHByZXR0eSByYXJlIGFuZCB0aGUgYXR0YWNrZXIg bWlnaHQgYmUgYWJsZSB0bworICAgIC8vIHRyaWNrIGEgc2VydmVyLXNpZGUgc2NyaXB0IGludG8g ZG9pbmcgc29tZXRoaW5nIGRhbmdlcm91cyB3aXRoIHRoZSBxdWVyeQorICAgIC8vIHN0cmluZy4K KyAgICBLVVJMIHJlc291cmNlVVJMKG1fZnJhbWUtPmRvY3VtZW50KCktPnVybCgpLCB1cmwpOwor ICAgIHJldHVybiAobV9mcmFtZS0+ZG9jdW1lbnQoKS0+dXJsKCkuaG9zdCgpID09IHJlc291cmNl VVJMLmhvc3QoKSAmJiByZXNvdXJjZVVSTC5xdWVyeSgpLmlzRW1wdHkoKSk7Cit9CisKIGJvb2wg WFNTQXVkaXRvcjo6ZmluZEluUmVxdWVzdChjb25zdCBTdHJpbmcmIHN0cmluZywgYm9vbCBkZWNv ZGVFbnRpdGllcywgYm9vbCBhbGxvd1JlcXVlc3RJZk5vSWxsZWdhbFVSSUNoYXJhY3RlcnMsIAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJvb2wgZGVjb2RlVVJMRXNjYXBlU2VxdWVu Y2VzVHdpY2UpIGNvbnN0CiB7CkluZGV4OiBXZWJDb3JlL3BhZ2UvWFNTQXVkaXRvci5oCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0KLS0tIFdlYkNvcmUvcGFnZS9YU1NBdWRpdG9yLmgJKHJldmlzaW9uIDUwNjEyKQorKysg V2ViQ29yZS9wYWdlL1hTU0F1ZGl0b3IuaAkod29ya2luZyBjb3B5KQpAQCAtMTIyLDYgKzEyMiw3 IEBAIG5hbWVzcGFjZSBXZWJDb3JlIHsKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Ym9vbCBkZWNvZGVVUkxFc2NhcGVTZXF1ZW5jZXNUd2ljZSA9IGZhbHNlKTsKICAgICAgICAgc3Rh dGljIFN0cmluZyBkZWNvZGVIVE1MRW50aXRpZXMoY29uc3QgU3RyaW5nJiwgYm9vbCBsZWF2ZVVu ZGVjb2RhYmxlRW50aXRpZXNVbnRvdWNoZWQgPSB0cnVlKTsKIAorICAgICAgICBib29sIGlzU2Ft ZU9yaWdpblJlc291cmNlKGNvbnN0IFN0cmluZyYgdXJsKSBjb25zdDsKICAgICAgICAgYm9vbCBm aW5kSW5SZXF1ZXN0KGNvbnN0IFN0cmluZyYsIGJvb2wgZGVjb2RlRW50aXRpZXMgPSB0cnVlLCBi b29sIGFsbG93UmVxdWVzdElmTm9JbGxlZ2FsVVJJQ2hhcmFjdGVycyA9IGZhbHNlLCAKICAgICAg ICAgICAgICAgICAgICAgICAgICAgIGJvb2wgZGVjb2RlVVJMRXNjYXBlU2VxdWVuY2VzVHdpY2Ug PSBmYWxzZSkgY29uc3Q7CiAgICAgICAgIGJvb2wgZmluZEluUmVxdWVzdChGcmFtZSosIGNvbnN0 IFN0cmluZyYsIGJvb2wgZGVjb2RlRW50aXRpZXMgPSB0cnVlLCBib29sIGFsbG93UmVxdWVzdElm Tm9JbGxlZ2FsVVJJQ2hhcmFjdGVycyA9IGZhbHNlLCAKSW5kZXg6IExheW91dFRlc3RzL0NoYW5n ZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDUwNjI4 KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTYg QEAKKzIwMDktMTEtMDggIERhbmllbCBCYXRlcyAgPGRiYXRlc0B3ZWJraXQub3JnPgorCisgICAg ICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIGh0dHBzOi8vYnVncy53 ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0zMTA5OAorCisgICAgICAgIFRlc3RzIHRoYXQgdGhl IFhTU0F1ZGl0b3IgcHJldmVudHMgbG9hZGluZyBwbHVnaW4tYmFzZWQgY29udGVudCB0aGF0IGlz IG5vdCAKKyAgICAgICAgZnJvbSB0aGUgc2FtZS1vcmlnaW4gYXMgdGhlIGVuY2xvc2luZyBwYWdl LgorCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL29iamVjdC1zcmMt aW5qZWN0LWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0 eS94c3NBdWRpdG9yL29iamVjdC1zcmMtaW5qZWN0Lmh0bWw6IEFkZGVkLgorICAgICAgICAqIGh0 dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNoby1vYmplY3Qtc3JjLnBs OiBBZGRlZC4KKwogMjAwOS0xMS0wOCAgU2h1IENoYW5nICA8Q2hhbmcuU2h1QG5va2lhLmNvbT4K IAogICAgICAgICBSZXZpZXdlZCBieSBIb2xnZXIgRnJleXRoZXIuCkluZGV4OiBMYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3Ivb2JqZWN0LXNyYy1pbmplY3QtZXhwZWN0 ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNz QXVkaXRvci9vYmplY3Qtc3JjLWluamVjdC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBM YXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3Ivb2JqZWN0LXNyYy1pbmpl Y3QtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDIgQEAKK0NPTlNPTEUgTUVT U0FHRTogbGluZSAxOiBSZWZ1c2VkIHRvIGV4ZWN1dGUgYSBKYXZhU2NyaXB0IHNjcmlwdC4gU291 cmNlIGNvZGUgb2Ygc2NyaXB0IGZvdW5kIHdpdGhpbiByZXF1ZXN0CisKSW5kZXg6IExheW91dFRl c3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9vYmplY3Qtc3JjLWluamVjdC5odG1s Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRv ci9vYmplY3Qtc3JjLWluamVjdC5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvaHR0 cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL29iamVjdC1zcmMtaW5qZWN0Lmh0bWwJKHJldmlz aW9uIDApCkBAIC0wLDAgKzEsMTUgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4K KzxzY3JpcHQ+CitpZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKSB7CisgIGxheW91dFRl c3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgbGF5b3V0VGVzdENvbnRyb2xsZXIuc2V0WFNT QXVkaXRvckVuYWJsZWQodHJ1ZSk7Cit9Cis8L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5PgorPGlm cmFtZSBzcmM9Imh0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291 cmNlcy9lY2hvLW9iamVjdC1zcmMucGw/cT1odHRwOi8vMTI3LjAuMC4xOjgwMDAvc2VjdXJpdHkv eHNzQXVkaXRvci9yZXNvdXJjZXMvZHVtbXkuc3dmIj4KKzwvaWZyYW1lPgorPC9ib2R5PgorPC9o dG1sPgpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Jl c291cmNlcy9lY2hvLW9iamVjdC1zcmMucGwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0 cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291cmNlcy9lY2hvLW9iamVjdC1zcmMucGwJ KHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0 b3IvcmVzb3VyY2VzL2VjaG8tb2JqZWN0LXNyYy5wbAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwx NSBAQAorIyEvdXNyL2Jpbi9wZXJsIC13VAordXNlIHN0cmljdDsKK3VzZSBDR0k7CisKK215ICRj Z2kgPSBuZXcgQ0dJOworCitwcmludCAiQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9 VVRGLThcblxuIjsKKworcHJpbnQgIjwhRE9DVFlQRSBodG1sPlxuIjsKK3ByaW50ICI8aHRtbD5c biI7CitwcmludCAiPG9iamVjdCBuYW1lPVwicGx1Z2luXCIgdHlwZT1cImFwcGxpY2F0aW9uL3gt d2Via2l0LXRlc3QtbmV0c2NhcGVcIj5cbiI7CitwcmludCAiPHBhcmFtIG5hbWU9XCJtb3ZpZVwi IHZhbHVlPVwiIi4kY2dpLT5wYXJhbSgncScpLiJcIiAvPlxuIjsKK3ByaW50ICI8L29iamVjdD5c biI7CitwcmludCAiPC9ib2R5PlxuIjsKK3ByaW50ICI8L2h0bWw+XG4iOwoKUHJvcGVydHkgY2hh bmdlcyBvbjogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL3Jlc291 cmNlcy9lY2hvLW9iamVjdC1zcmMucGwKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpOYW1lOiBzdm46ZXhlY3V0YWJsZQog ICArICoKCg==