69708 2011-10-08 14:05:28 -0700 Remove "near miss" XSS vulnerabilities in garden-o-matic 2011-10-09 19:28:14 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 69227 1 abarth abarth abarth collinj eric levin webkit.review.bot oldest_to_newest 480618 0 abarth 2011-10-08 14:05:28 -0700 Remove "near miss" XSS vulnerabilities in garden-o-matic 480619 1 110282 abarth 2011-10-08 14:06:58 -0700 Created attachment 110282 Patch 480775 2 110282 levin 2011-10-09 18:58:07 -0700 Comment on attachment 110282 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=110282&action=review > Tools/BuildSlaveSupport/build.webkit.org-config/public_html/TestFailures/scripts/ui.js:80 > + if (tab.parentNode != this) I'm sure this is obvious to you (and maybe to others?), but I don't understand why this check is need/what it is doing. Maybe you could add a comment about that (and commit it). If it is totally obvious, feel free to just add something in the bug and cq+ this. 480778 3 abarth 2011-10-09 19:11:53 -0700 getElementById is a global function. It could return a DOM node anywhere in the document (which could have been put their by an attacker). That check just restricts it to the immediate children of this node, which greatly limits any trickery. 480780 4 110317 abarth 2011-10-09 19:14:24 -0700 Created attachment 110317 Patch for landing 480783 5 110317 webkit.review.bot 2011-10-09 19:28:09 -0700 Comment on attachment 110317 Patch for landing Clearing flags on attachment: 110317 Committed r97036: <http://trac.webkit.org/changeset/97036> 480784 6 webkit.review.bot 2011-10-09 19:28:14 -0700 All reviewed patches have been landed. Closing bug. 110282 2011-10-08 14:06:58 -0700 2011-10-09 19:14:21 -0700 Patch bug-69708-20111008140656.patch text/plain 4401 abarth U3VidmVyc2lvbiBSZXZpc2lvbjogOTcwMTIKZGlmZiAtLWdpdCBhL1Rvb2xzL0J1aWxkU2xhdmVT dXBwb3J0L2J1aWxkLndlYmtpdC5vcmctY29uZmlnL3B1YmxpY19odG1sL1Rlc3RGYWlsdXJlcy9z Y3JpcHRzL0J1Z3ppbGxhLmpzIGIvVG9vbHMvQnVpbGRTbGF2ZVN1cHBvcnQvYnVpbGQud2Via2l0 Lm9yZy1jb25maWcvcHVibGljX2h0bWwvVGVzdEZhaWx1cmVzL3NjcmlwdHMvQnVnemlsbGEuanMK aW5kZXggZjBiMDliZTZhYWYzNzY3Mzc0YzJiNDhkMmIzNGYyNzlmYTM1ZTg1MC4uYTg5OWZiYzg5 ZDQ1YzEyNzYxODg1YTBhYWM0ZTYzMDFlYTA1MjllYiAxMDA2NDQKLS0tIGEvVG9vbHMvQnVpbGRT bGF2ZVN1cHBvcnQvYnVpbGQud2Via2l0Lm9yZy1jb25maWcvcHVibGljX2h0bWwvVGVzdEZhaWx1 cmVzL3NjcmlwdHMvQnVnemlsbGEuanMKKysrIGIvVG9vbHMvQnVpbGRTbGF2ZVN1cHBvcnQvYnVp bGQud2Via2l0Lm9yZy1jb25maWcvcHVibGljX2h0bWwvVGVzdEZhaWx1cmVzL3NjcmlwdHMvQnVn emlsbGEuanMKQEAgLTM0LDYgKzM0LDE5IEBAIHZhciBrT3BlblN0YXR1c2VzID0gewogICAgIFJF T1BFTkVEOiB0cnVlLAogfTsKIAorZnVuY3Rpb24gY3JlYXRlRGV0YWNoZWRGcmFnbWVudChodG1s RnJhZ21lbnQpCit7CisgICAgLy8gU3RlcCAxOiBDcmVhdGUgYSBkZXRhY2hlZCBEb2N1bWVudCB0 byBwZXJmb3JtIHRoZSBwYXJzaW5nLgorICAgIHZhciBkZXRhY2hlZERvY3VtZW50ID0gZG9jdW1l bnQuaW1wbGVtZW50YXRpb24uY3JlYXRlSFRNTERvY3VtZW50KCk7CisKKyAgICAvLyBTdGVwIDI6 IENyZWF0ZSBhIGRldGFjaGVkIEVsZW1lbnQgYXNzb2NpYXRlZCB3aXRoIHRoZSBkZXRhY2hlZCBE b2N1bWVudC4KKyAgICB2YXIgY29udGFpbmVyID0gZGV0YWNoZWREb2N1bWVudC5jcmVhdGVFbGVt ZW50KCdkaXYnKTsKKworICAgIC8vIFN0ZXAgMzogUHVsbCB0aGUgdHJpZ2dlci4KKyAgICBjb250 YWluZXIuaW5uZXJIVE1MID0gaHRtbEZyYWdtZW50OworICAgIHJldHVybiBjb250YWluZXI7Cit9 CisKIHZhciBnX3NlYXJjaENhY2hlID0gbmV3IGJhc2UuQXN5bmNocm9ub3VzQ2FjaGUoZnVuY3Rp b24ocXVlcnksIGNhbGxiYWNrKSB7CiAgICAgdmFyIHVybCA9IGNvbmZpZy5rQnVnemlsbGFVUkwg KyAnL2J1Z2xpc3QuY2dpPycgKyAkLnBhcmFtKHsKICAgICAgICAgY3R5cGU6ICdyc3MnLApAQCAt NDQsMTAgKzU3LDkgQEAgdmFyIGdfc2VhcmNoQ2FjaGUgPSBuZXcgYmFzZS5Bc3luY2hyb25vdXND YWNoZShmdW5jdGlvbihxdWVyeSwgY2FsbGJhY2spIHsKICAgICBuZXQuZ2V0KHVybCwgZnVuY3Rp b24ocmVzcG9uc2VYTUwpIHsKICAgICAgICAgdmFyIGVudHJpZXMgPSByZXNwb25zZVhNTC5nZXRF bGVtZW50c0J5VGFnTmFtZSgnZW50cnknKTsKICAgICAgICAgdmFyIHJlc3VsdHMgPSBBcnJheS5w cm90b3R5cGUubWFwLmNhbGwoZW50cmllcywgZnVuY3Rpb24oZW50cnkpIHsKLSAgICAgICAgICAg IHZhciBjb250YWluZXIgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCdkaXYnKTsKLSAgICAgICAg ICAgIC8vIEZJWE1FOiBJcyB0aGlzIGFuIFhTUyByaXNrPwotICAgICAgICAgICAgY29udGFpbmVy LmlubmVySFRNTCA9IGVudHJ5LmdldEVsZW1lbnRzQnlUYWdOYW1lKCdzdW1tYXJ5JylbMF0udGV4 dENvbnRlbnQ7Ci0gICAgICAgICAgICB2YXIgc3RhdHVzUm93ID0gY29udGFpbmVyLnF1ZXJ5U2Vs ZWN0b3IoJ3RyLmJ6X2ZlZWRfYnVnX3N0YXR1cycpOworICAgICAgICAgICAgdmFyIGh0bWxGcmFn bWVudCA9IGVudHJ5LmdldEVsZW1lbnRzQnlUYWdOYW1lKCdzdW1tYXJ5JylbMF0udGV4dENvbnRl bnQ7CisgICAgICAgICAgICB2YXIgZnJhZ21lbnQgPSBjcmVhdGVEZXRhY2hlZEZyYWdtZW50KGh0 bWxGcmFnbWVudCk7CisgICAgICAgICAgICB2YXIgc3RhdHVzUm93ID0gZnJhZ21lbnQucXVlcnlT ZWxlY3RvcigndHIuYnpfZmVlZF9idWdfc3RhdHVzJyk7CiAgICAgICAgICAgICByZXR1cm4gewog ICAgICAgICAgICAgICAgIHRpdGxlOiBlbnRyeS5nZXRFbGVtZW50c0J5VGFnTmFtZSgndGl0bGUn KVswXS50ZXh0Q29udGVudCwKICAgICAgICAgICAgICAgICB1cmw6IGVudHJ5LmdldEVsZW1lbnRz QnlUYWdOYW1lKCdpZCcpWzBdLnRleHRDb250ZW50LApkaWZmIC0tZ2l0IGEvVG9vbHMvQnVpbGRT bGF2ZVN1cHBvcnQvYnVpbGQud2Via2l0Lm9yZy1jb25maWcvcHVibGljX2h0bWwvVGVzdEZhaWx1 cmVzL3NjcmlwdHMvdWkuanMgYi9Ub29scy9CdWlsZFNsYXZlU3VwcG9ydC9idWlsZC53ZWJraXQu b3JnLWNvbmZpZy9wdWJsaWNfaHRtbC9UZXN0RmFpbHVyZXMvc2NyaXB0cy91aS5qcwppbmRleCA1 MzkzZjdhMzIyYmE3ZWFlZmQ5NjFjYTY2MDZkZDRhOTUyNTdmYmI2Li45ZTRlZjk5NGIyMmIzYmY2 MzBjMDE1MzRlMDI5ZjI0MjRiMDg0MjQzIDEwMDY0NAotLS0gYS9Ub29scy9CdWlsZFNsYXZlU3Vw cG9ydC9idWlsZC53ZWJraXQub3JnLWNvbmZpZy9wdWJsaWNfaHRtbC9UZXN0RmFpbHVyZXMvc2Ny aXB0cy91aS5qcworKysgYi9Ub29scy9CdWlsZFNsYXZlU3VwcG9ydC9idWlsZC53ZWJraXQub3Jn LWNvbmZpZy9wdWJsaWNfaHRtbC9UZXN0RmFpbHVyZXMvc2NyaXB0cy91aS5qcwpAQCAtNzYsNyAr NzYsMTAgQEAgdWkub25lYmFyID0gYmFzZS5leHRlbmRzKCdkaXYnLCB7CiAgICAgfSwKICAgICB0 YWJOYW1lZDogZnVuY3Rpb24odGFiTmFtZSkKICAgICB7Ci0gICAgICAgIHJldHVybiAkKCcjJyAr IHRhYk5hbWUsIHRoaXMpWzBdOworICAgICAgICB0YWIgPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJ ZCh0YWJOYW1lKTsKKyAgICAgICAgaWYgKHRhYi5wYXJlbnROb2RlICE9IHRoaXMpCisgICAgICAg ICAgICByZXR1cm4gbnVsbDsKKyAgICAgICAgcmV0dXJuIHRhYjsKICAgICB9LAogICAgIHN1bW1h cnk6IGZ1bmN0aW9uKCkKICAgICB7CkBAIC0xMzAsOSArMTMzLDkgQEAgdWkuTWVzc2FnZUJveCA9 IGJhc2UuZXh0ZW5kcygnZGl2JywgIHsKICAgICAgICAgZG9jdW1lbnQuYm9keS5hcHBlbmRDaGls ZCh0aGlzKTsKICAgICAgICAgJCh0aGlzKS5kaWFsb2coewogICAgICAgICAgICAgcmVzaXphYmxl OiBmYWxzZSwKLSAgICAgICAgICAgIHRpdGxlOiB0aXRsZSwKICAgICAgICAgICAgIHdpZHRoOiAk KHdpbmRvdykud2lkdGgoKSAqIDAuODAsICAvLyBGSVhNRTogV2Ugc2hvdWxkIGhhdmUgQ1NTIGRv IHRoaXMgd29yayBmb3IgdXMuCiAgICAgICAgIH0pOworICAgICAgICAkKCcudWktZGlhbG9nLXRp dGxlJywgdGhpcy5wYXJlbnROb2RlKS50ZXh0KHRpdGxlKTsKICAgICAgICAgJCh0aGlzKS5iaW5k KCdkaWFsb2djbG9zZScsIGZ1bmN0aW9uKCkgewogICAgICAgICAgICAgJCh0aGlzKS5kZXRhY2go KTsKICAgICAgICAgfS5iaW5kKHRoaXMpKTsKZGlmZiAtLWdpdCBhL1Rvb2xzL0NoYW5nZUxvZyBi L1Rvb2xzL0NoYW5nZUxvZwppbmRleCA5Yzc2OGI0NzI4ODRkNzgyOWE5NzFkNTk5MzI2ZDIzMzkz NjgxOGMxLi40YmZjMzE2MGNjZDQyODczOGY5NjdkYzVhODQ5NTk3ZGM1MWQ2M2I0IDEwMDY0NAot LS0gYS9Ub29scy9DaGFuZ2VMb2cKKysrIGIvVG9vbHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTgg QEAKKzIwMTEtMTAtMDggIEFkYW0gQmFydGggIDxhYmFydGhAd2Via2l0Lm9yZz4KKworICAgICAg ICBSZW1vdmUgIm5lYXIgbWlzcyIgWFNTIHZ1bG5lcmFiaWxpdGllcyBpbiBnYXJkZW4tby1tYXRp YworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9Njk3MDgK KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBDb2xsaW4g SmFja3NvbiBkaWQgYSBzZWN1cml0eSBhdWRpdCBvZiBnYXJkZW4tby1tYXRpYy4gIEhlIGhhc24n dCBmb3VuZAorICAgICAgICBhbnkgYWN0dWFsIHZ1bG5lcmFiaWxpdGllcyB5ZXQsIGJ1dCBoZSBk aWQgaWRlbnRpZnkgYSBjb3VwbGUgIm5lYXIKKyAgICAgICAgbWlzc2VzIiB3aGVyZSBhIHNsaWdo dCBjaGFuZ2UgaW4gZ2FyZGVuLW8tbWF0aWMgY291bGQgbGVhZCB0byBhCisgICAgICAgIHZ1bG5l cmFiaWxpdHkuICBUaGlzIHBhdGNoIHJlbW92ZXMgdGhvc2UgcG90ZW50aWFsIGlzc3Vlcy4KKwor ICAgICAgICAqIEJ1aWxkU2xhdmVTdXBwb3J0L2J1aWxkLndlYmtpdC5vcmctY29uZmlnL3B1Ymxp Y19odG1sL1Rlc3RGYWlsdXJlcy9zY3JpcHRzL0J1Z3ppbGxhLmpzOgorICAgICAgICAqIEJ1aWxk U2xhdmVTdXBwb3J0L2J1aWxkLndlYmtpdC5vcmctY29uZmlnL3B1YmxpY19odG1sL1Rlc3RGYWls dXJlcy9zY3JpcHRzL3VpLmpzOgorCiAyMDExLTEwLTA3ICBBZGFtIEJhcnRoICA8YWJhcnRoQHdl YmtpdC5vcmc+CiAKICAgICAgICAgQWRkIGEgQ29udGVudC1TZWN1cml0eS1Qb2xpY3kgdG8gZ2Fy ZGVuLW8tbWF0aWMK 110317 2011-10-09 19:14:24 -0700 2011-10-09 19:28:09 -0700 Patch for landing bug-69708-20111009191423.patch text/plain 4415 abarth SW5kZXg6IFRvb2xzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBUb29scy9DaGFuZ2VMb2cJKHJl dmlzaW9uIDk3MDM1KQorKysgVG9vbHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMg KzEsMTggQEAKKzIwMTEtMTAtMDkgIEFkYW0gQmFydGggIDxhYmFydGhAd2Via2l0Lm9yZz4KKwor ICAgICAgICBSZW1vdmUgIm5lYXIgbWlzcyIgWFNTIHZ1bG5lcmFiaWxpdGllcyBpbiBnYXJkZW4t by1tYXRpYworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 Njk3MDgKKworICAgICAgICBSZXZpZXdlZCBieSBEYXZpZCBMZXZpbi4KKworICAgICAgICBDb2xs aW4gSmFja3NvbiBkaWQgYSBzZWN1cml0eSBhdWRpdCBvZiBnYXJkZW4tby1tYXRpYy4gIEhlIGhh c24ndCBmb3VuZAorICAgICAgICBhbnkgYWN0dWFsIHZ1bG5lcmFiaWxpdGllcyB5ZXQsIGJ1dCBo ZSBkaWQgaWRlbnRpZnkgYSBjb3VwbGUgIm5lYXIKKyAgICAgICAgbWlzc2VzIiB3aGVyZSBhIHNs aWdodCBjaGFuZ2UgaW4gZ2FyZGVuLW8tbWF0aWMgY291bGQgbGVhZCB0byBhCisgICAgICAgIHZ1 bG5lcmFiaWxpdHkuICBUaGlzIHBhdGNoIHJlbW92ZXMgdGhvc2UgcG90ZW50aWFsIGlzc3Vlcy4K KworICAgICAgICAqIEJ1aWxkU2xhdmVTdXBwb3J0L2J1aWxkLndlYmtpdC5vcmctY29uZmlnL3B1 YmxpY19odG1sL1Rlc3RGYWlsdXJlcy9zY3JpcHRzL0J1Z3ppbGxhLmpzOgorICAgICAgICAqIEJ1 aWxkU2xhdmVTdXBwb3J0L2J1aWxkLndlYmtpdC5vcmctY29uZmlnL3B1YmxpY19odG1sL1Rlc3RG YWlsdXJlcy9zY3JpcHRzL3VpLmpzOgorCiAyMDExLTEwLTA3ICBBZGFtIEJhcnRoICA8YWJhcnRo QHdlYmtpdC5vcmc+CiAKICAgICAgICAgQWRkIGEgQ29udGVudC1TZWN1cml0eS1Qb2xpY3kgdG8g Z2FyZGVuLW8tbWF0aWMKSW5kZXg6IFRvb2xzL0J1aWxkU2xhdmVTdXBwb3J0L2J1aWxkLndlYmtp dC5vcmctY29uZmlnL3B1YmxpY19odG1sL1Rlc3RGYWlsdXJlcy9zY3JpcHRzL0J1Z3ppbGxhLmpz Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KLS0tIFRvb2xzL0J1aWxkU2xhdmVTdXBwb3J0L2J1aWxkLndlYmtpdC5vcmct Y29uZmlnL3B1YmxpY19odG1sL1Rlc3RGYWlsdXJlcy9zY3JpcHRzL0J1Z3ppbGxhLmpzCShyZXZp c2lvbiA5NzAzNSkKKysrIFRvb2xzL0J1aWxkU2xhdmVTdXBwb3J0L2J1aWxkLndlYmtpdC5vcmct Y29uZmlnL3B1YmxpY19odG1sL1Rlc3RGYWlsdXJlcy9zY3JpcHRzL0J1Z3ppbGxhLmpzCSh3b3Jr aW5nIGNvcHkpCkBAIC0zNCw2ICszNCwxOSBAQCB2YXIga09wZW5TdGF0dXNlcyA9IHsKICAgICBS RU9QRU5FRDogdHJ1ZSwKIH07CiAKK2Z1bmN0aW9uIGNyZWF0ZURldGFjaGVkRnJhZ21lbnQoaHRt bEZyYWdtZW50KQoreworICAgIC8vIFN0ZXAgMTogQ3JlYXRlIGEgZGV0YWNoZWQgRG9jdW1lbnQg dG8gcGVyZm9ybSB0aGUgcGFyc2luZy4KKyAgICB2YXIgZGV0YWNoZWREb2N1bWVudCA9IGRvY3Vt ZW50LmltcGxlbWVudGF0aW9uLmNyZWF0ZUhUTUxEb2N1bWVudCgpOworCisgICAgLy8gU3RlcCAy OiBDcmVhdGUgYSBkZXRhY2hlZCBFbGVtZW50IGFzc29jaWF0ZWQgd2l0aCB0aGUgZGV0YWNoZWQg RG9jdW1lbnQuCisgICAgdmFyIGNvbnRhaW5lciA9IGRldGFjaGVkRG9jdW1lbnQuY3JlYXRlRWxl bWVudCgnZGl2Jyk7CisKKyAgICAvLyBTdGVwIDM6IFB1bGwgdGhlIHRyaWdnZXIuCisgICAgY29u dGFpbmVyLmlubmVySFRNTCA9IGh0bWxGcmFnbWVudDsKKyAgICByZXR1cm4gY29udGFpbmVyOwor fQorCiB2YXIgZ19zZWFyY2hDYWNoZSA9IG5ldyBiYXNlLkFzeW5jaHJvbm91c0NhY2hlKGZ1bmN0 aW9uKHF1ZXJ5LCBjYWxsYmFjaykgewogICAgIHZhciB1cmwgPSBjb25maWcua0J1Z3ppbGxhVVJM ICsgJy9idWdsaXN0LmNnaT8nICsgJC5wYXJhbSh7CiAgICAgICAgIGN0eXBlOiAncnNzJywKQEAg LTQ0LDEwICs1Nyw5IEBAIHZhciBnX3NlYXJjaENhY2hlID0gbmV3IGJhc2UuQXN5bmNocm9ub3UK ICAgICBuZXQuZ2V0KHVybCwgZnVuY3Rpb24ocmVzcG9uc2VYTUwpIHsKICAgICAgICAgdmFyIGVu dHJpZXMgPSByZXNwb25zZVhNTC5nZXRFbGVtZW50c0J5VGFnTmFtZSgnZW50cnknKTsKICAgICAg ICAgdmFyIHJlc3VsdHMgPSBBcnJheS5wcm90b3R5cGUubWFwLmNhbGwoZW50cmllcywgZnVuY3Rp b24oZW50cnkpIHsKLSAgICAgICAgICAgIHZhciBjb250YWluZXIgPSBkb2N1bWVudC5jcmVhdGVF bGVtZW50KCdkaXYnKTsKLSAgICAgICAgICAgIC8vIEZJWE1FOiBJcyB0aGlzIGFuIFhTUyByaXNr PwotICAgICAgICAgICAgY29udGFpbmVyLmlubmVySFRNTCA9IGVudHJ5LmdldEVsZW1lbnRzQnlU YWdOYW1lKCdzdW1tYXJ5JylbMF0udGV4dENvbnRlbnQ7Ci0gICAgICAgICAgICB2YXIgc3RhdHVz Um93ID0gY29udGFpbmVyLnF1ZXJ5U2VsZWN0b3IoJ3RyLmJ6X2ZlZWRfYnVnX3N0YXR1cycpOwor ICAgICAgICAgICAgdmFyIGh0bWxGcmFnbWVudCA9IGVudHJ5LmdldEVsZW1lbnRzQnlUYWdOYW1l KCdzdW1tYXJ5JylbMF0udGV4dENvbnRlbnQ7CisgICAgICAgICAgICB2YXIgZnJhZ21lbnQgPSBj cmVhdGVEZXRhY2hlZEZyYWdtZW50KGh0bWxGcmFnbWVudCk7CisgICAgICAgICAgICB2YXIgc3Rh dHVzUm93ID0gZnJhZ21lbnQucXVlcnlTZWxlY3RvcigndHIuYnpfZmVlZF9idWdfc3RhdHVzJyk7 CiAgICAgICAgICAgICByZXR1cm4gewogICAgICAgICAgICAgICAgIHRpdGxlOiBlbnRyeS5nZXRF bGVtZW50c0J5VGFnTmFtZSgndGl0bGUnKVswXS50ZXh0Q29udGVudCwKICAgICAgICAgICAgICAg ICB1cmw6IGVudHJ5LmdldEVsZW1lbnRzQnlUYWdOYW1lKCdpZCcpWzBdLnRleHRDb250ZW50LApJ bmRleDogVG9vbHMvQnVpbGRTbGF2ZVN1cHBvcnQvYnVpbGQud2Via2l0Lm9yZy1jb25maWcvcHVi bGljX2h0bWwvVGVzdEZhaWx1cmVzL3NjcmlwdHMvdWkuanMKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gVG9vbHMv QnVpbGRTbGF2ZVN1cHBvcnQvYnVpbGQud2Via2l0Lm9yZy1jb25maWcvcHVibGljX2h0bWwvVGVz dEZhaWx1cmVzL3NjcmlwdHMvdWkuanMJKHJldmlzaW9uIDk3MDM1KQorKysgVG9vbHMvQnVpbGRT bGF2ZVN1cHBvcnQvYnVpbGQud2Via2l0Lm9yZy1jb25maWcvcHVibGljX2h0bWwvVGVzdEZhaWx1 cmVzL3NjcmlwdHMvdWkuanMJKHdvcmtpbmcgY29weSkKQEAgLTc2LDcgKzc2LDE0IEBAIHVpLm9u ZWJhciA9IGJhc2UuZXh0ZW5kcygnZGl2JywgewogICAgIH0sCiAgICAgdGFiTmFtZWQ6IGZ1bmN0 aW9uKHRhYk5hbWUpCiAgICAgewotICAgICAgICByZXR1cm4gJCgnIycgKyB0YWJOYW1lLCB0aGlz KVswXTsKKyAgICAgICAgdGFiID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQodGFiTmFtZSk7Cisg ICAgICAgIC8vIFdlIHBlcmZvcm0gdGhpcyBzYW5pdHkgY2hlY2sgYmVsb3cgdG8gbWFrZSBzdXJl IGdldEVsZW1lbnRCeUlkCisgICAgICAgIC8vIGhhc24ndCBnaXZlbiB1cyBhIG5vZGUgaW4gc29t ZSBvdGhlciB1bnJlbGF0ZWQgcGFydCBvZiB0aGUgZG9jdW1lbnQuCisgICAgICAgIC8vIHRoYXQg c2hvdWxkbid0IGhhcHBlbiBub3JtYWxseSwgYnV0IGl0IGNvdWxkIGhhcHBlbiBpZiBhbiBhdHRh Y2tlcgorICAgICAgICAvLyBoYXMgc29tZWhvdyBzbmVha2lseSBhZGRlZCBhIG5vZGUgdG8gb3Vy IGRvY3VtZW50LgorICAgICAgICBpZiAodGFiLnBhcmVudE5vZGUgIT0gdGhpcykKKyAgICAgICAg ICAgIHJldHVybiBudWxsOworICAgICAgICByZXR1cm4gdGFiOwogICAgIH0sCiAgICAgc3VtbWFy eTogZnVuY3Rpb24oKQogICAgIHsKQEAgLTEzMCw5ICsxMzcsOSBAQCB1aS5NZXNzYWdlQm94ID0g YmFzZS5leHRlbmRzKCdkaXYnLCAgewogICAgICAgICBkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxk KHRoaXMpOwogICAgICAgICAkKHRoaXMpLmRpYWxvZyh7CiAgICAgICAgICAgICByZXNpemFibGU6 IGZhbHNlLAotICAgICAgICAgICAgdGl0bGU6IHRpdGxlLAogICAgICAgICAgICAgd2lkdGg6ICQo d2luZG93KS53aWR0aCgpICogMC44MCwgIC8vIEZJWE1FOiBXZSBzaG91bGQgaGF2ZSBDU1MgZG8g dGhpcyB3b3JrIGZvciB1cy4KICAgICAgICAgfSk7CisgICAgICAgICQoJy51aS1kaWFsb2ctdGl0 bGUnLCB0aGlzLnBhcmVudE5vZGUpLnRleHQodGl0bGUpOwogICAgICAgICAkKHRoaXMpLmJpbmQo J2RpYWxvZ2Nsb3NlJywgZnVuY3Rpb24oKSB7CiAgICAgICAgICAgICAkKHRoaXMpLmRldGFjaCgp OwogICAgICAgICB9LmJpbmQodGhpcykpOwo=