83238 2012-04-04 18:08:02 -0700 XSSAuditor doesn't catch injected srcdoc attributes 2012-04-04 21:18:49 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 abarth abarth dbates eric tsepez webkit.review.bot oldest_to_newest 596165 0 abarth 2012-04-04 18:08:02 -0700 XSSAuditor doesn't catch injected srcdoc attributes 596169 1 135734 abarth 2012-04-04 18:10:28 -0700 Created attachment 135734 Patch 596267 2 135734 dbates 2012-04-04 20:42:25 -0700 Comment on attachment 135734 Patch Looks good to me. 596280 3 135734 webkit.review.bot 2012-04-04 21:18:44 -0700 Comment on attachment 135734 Patch Clearing flags on attachment: 135734 Committed r113286: <http://trac.webkit.org/changeset/113286> 596281 4 webkit.review.bot 2012-04-04 21:18:49 -0700 All reviewed patches have been landed. Closing bug. 135734 2012-04-04 18:10:28 -0700 2012-04-04 21:18:44 -0700 Patch bug-83238-20120404181027.patch text/plain 9247 abarth SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDExMzI3MCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDI0IEBACisyMDEyLTA0LTA0ICBBZGFtIEJh cnRoICA8YWJhcnRoQHdlYmtpdC5vcmc+CisKKyAgICAgICAgWFNTQXVkaXRvciBkb2Vzbid0IGNh dGNoIGluamVjdGVkIHNyY2RvYyBhdHRyaWJ1dGVzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJr aXQub3JnL3Nob3dfYnVnLmNnaT9pZD04MzIzOAorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9E WSAoT09QUyEpLgorCisgICAgICAgIDxpZnJhbWUgc3JjZG9jPiBpcyBhbiBYU1MgaW5qZWN0aW9u IHZlY3RvciBiZWNhdXNlIHRoZSBzcmNkb2MgaW5oZXJpdHMKKyAgICAgICAgdGhlIHNlY3VyaXR5 IG9yaWdpbiBvZiB0aGUgcGFyZW50IHBhZ2UuICBUaGlzIHBhdGNoIHVwZGF0ZXMgdGhlIFhTUwor ICAgICAgICBhdWRpdG9yIHRvIGNoZWNrIHdoZXRoZXIgdGhlIGF0dHJpYnV0ZSBpcyBpbmplY3Rl ZCB1c2luZyB0aGUgc2FtZQorICAgICAgICBodWVyaXN0aWNzIHdlIHVzZSBmb3IgaW5saW5lIGV2 ZW50IGhhbmRsZXJzLgorCisgICAgICAgIFRlc3Q6IGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVk aXRvci9pZnJhbWUtc3JjZG9jLmh0bWwKKworICAgICAgICAqIGh0bWwvcGFyc2VyL1hTU0F1ZGl0 b3IuY3BwOgorICAgICAgICAoV2ViQ29yZTo6WFNTQXVkaXRvcjo6ZmlsdGVySWZyYW1lVG9rZW4p OgorICAgICAgICAoV2ViQ29yZTo6WFNTQXVkaXRvcjo6ZXJhc2VEYW5nZXJvdXNBdHRyaWJ1dGVz SWZJbmplY3RlZCk6CisgICAgICAgIChXZWJDb3JlOjpYU1NBdWRpdG9yOjplcmFzZUF0dHJpYnV0 ZUlmSW5qZWN0ZWQpOgorICAgICAgICAoV2ViQ29yZTo6WFNTQXVkaXRvcjo6ZGVjb2RlZFNuaXBw ZXRGb3JBdHRyaWJ1dGUpOgorICAgICAgICAqIGh0bWwvcGFyc2VyL1hTU0F1ZGl0b3IuaDoKKwog MjAxMi0wNC0wNCAgQ2hyaXMgUm9nZXJzICA8Y3JvZ2Vyc0Bnb29nbGUuY29tPgogCiAgICAgICAg IFdhdmVUYWJsZTo6d2F2ZURhdGFGb3JGdW5kYW1lbnRhbEZyZXF1ZW5jeSgpIHNob3VsZCBwcm9w ZXJseSBpbnRlcnByZXQgbmVnYXRpdmUgZnJlcXVlbmN5CkluZGV4OiBTb3VyY2UvV2ViQ29yZS9o dG1sL3BhcnNlci9YU1NBdWRpdG9yLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9o dG1sL3BhcnNlci9YU1NBdWRpdG9yLmNwcAkocmV2aXNpb24gMTEzMjY4KQorKysgU291cmNlL1dl YkNvcmUvaHRtbC9wYXJzZXIvWFNTQXVkaXRvci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTM5OSwx MCArMzk5LDEyIEBAIGJvb2wgWFNTQXVkaXRvcjo6ZmlsdGVySWZyYW1lVG9rZW4oSFRNTFQKICAg ICBBU1NFUlQodG9rZW4udHlwZSgpID09IEhUTUxUb2tlblR5cGVzOjpTdGFydFRhZyk7CiAgICAg QVNTRVJUKGhhc05hbWUodG9rZW4sIGlmcmFtZVRhZykpOwogCi0gICAgaWYgKGlzQ29udGFpbmVk SW5SZXF1ZXN0KGRlY29kZWRTbmlwcGV0Rm9yTmFtZSh0b2tlbikpKQotICAgICAgICByZXR1cm4g ZXJhc2VBdHRyaWJ1dGVJZkluamVjdGVkKHRva2VuLCBzcmNBdHRyLCBTdHJpbmcoKSwgU3JjTGlr ZUF0dHJpYnV0ZSk7Ci0KLSAgICByZXR1cm4gZmFsc2U7CisgICAgYm9vbCBkaWRCbG9ja1Njcmlw dCA9IGZhbHNlOworICAgIGlmIChpc0NvbnRhaW5lZEluUmVxdWVzdChkZWNvZGVkU25pcHBldEZv ck5hbWUodG9rZW4pKSkgeworICAgICAgICBkaWRCbG9ja1NjcmlwdCB8PSBlcmFzZUF0dHJpYnV0 ZUlmSW5qZWN0ZWQodG9rZW4sIHNyY0F0dHIsIFN0cmluZygpLCBTcmNMaWtlQXR0cmlidXRlKTsK KyAgICAgICAgZGlkQmxvY2tTY3JpcHQgfD0gZXJhc2VBdHRyaWJ1dGVJZkluamVjdGVkKHRva2Vu LCBzcmNkb2NBdHRyLCBTdHJpbmcoKSwgU2NyaXB0TGlrZUF0dHJpYnV0ZSk7CisgICAgfQorICAg IHJldHVybiBkaWRCbG9ja1NjcmlwdDsKIH0KIAogYm9vbCBYU1NBdWRpdG9yOjpmaWx0ZXJNZXRh VG9rZW4oSFRNTFRva2VuJiB0b2tlbikKQEAgLTQ0MCwzMCArNDQyLDcgQEAgYm9vbCBYU1NBdWRp dG9yOjplcmFzZURhbmdlcm91c0F0dHJpYnV0ZQogICAgICAgICBib29sIHZhbHVlQ29udGFpbnNK YXZhU2NyaXB0VVJMID0gIWlzSW5saW5lRXZlbnRIYW5kbGVyICYmIHByb3RvY29sSXNKYXZhU2Ny aXB0KHN0cmlwTGVhZGluZ0FuZFRyYWlsaW5nSFRNTFNwYWNlcyhTdHJpbmcoYXR0cmlidXRlLm1f dmFsdWUuZGF0YSgpLCBhdHRyaWJ1dGUubV92YWx1ZS5zaXplKCkpKSk7CiAgICAgICAgIGlmICgh aXNJbmxpbmVFdmVudEhhbmRsZXIgJiYgIXZhbHVlQ29udGFpbnNKYXZhU2NyaXB0VVJMKQogICAg ICAgICAgICAgY29udGludWU7Ci0gICAgICAgIC8vIEJld2FyZSBvZiB0cmFpbGluZyBjaGFyYWN0 ZXJzIHdoaWNoIGNhbWUgZnJvbSB0aGUgcGFnZSBpdHNlbGYsIG5vdCB0aGUgCi0gICAgICAgIC8v IGluamVjdGVkIHZlY3Rvci4gRXhjbHVkaW5nIHRoZSB0ZXJtaW5hdGluZyBjaGFyYWN0ZXIgY292 ZXJzIGNvbW1vbiBjYXNlcwotICAgICAgICAvLyB3aGVyZSB0aGUgcGFnZSBpbW1lZGlhdGVseSBl bmRzIHRoZSBhdHRyaWJ1dGUsIGJ1dCBkb2Vzbid0IGNvdmVyIG1vcmUKLSAgICAgICAgLy8gY29t cGxleCBjYXNlcyB3aGVyZSB0aGVyZSBpcyBvdGhlciBwYWdlIGRhdGEgZm9sbG93aW5nIHRoZSBp bmplY3Rpb24uIAotICAgICAgICAvLyBHZW5lcmFsbHksIHRoZXNlIHdvbid0IHBhcnNlIGFzIGph dmFzY3JpcHQsIHNvIHRoZSBpbmplY3RlZCB2ZWN0b3IKLSAgICAgICAgLy8gdHlwaWNhbGx5IGV4 Y2x1ZGVzIHRoZW0gZnJvbSBjb25zaWRlcmF0aW9uIHZpYSBhIHNpbmdsZS1saW5lIGNvbW1lbnQg b3IKLSAgICAgICAgLy8gYnkgZW5jbG9zaW5nIHRoZW0gaW4gYSBzdHJpbmcgbGl0ZXJhbCB0ZXJt aW5hdGVkIGxhdGVyIGJ5IHRoZSBwYWdlJ3Mgb3duCi0gICAgICAgIC8vIGNsb3NpbmcgcHVuY3R1 YXRpb24uIFNpbmNlIHRoZSBzbmlwcGV0IGhhcyBub3QgYmVlbiBwYXJzZWQsIHRoZSB2ZWN0b3IK LSAgICAgICAgLy8gbWF5IGFsc28gdHJ5IHRvIGludHJvZHVjZSB0aGVzZSB2aWEgZW50aXRpZXMu IEFzIGEgcmVzdWx0LCB3ZSdkIGxpa2UgdG8KLSAgICAgICAgLy8gc3RvcCBiZWZvcmUgdGhlIGZp cnN0ICIvLyIsIHRoZSBmaXJzdCA8IS0tLCB0aGUgZmlyc3QgZW50aXR5LCBvciB0aGUgZmlyc3QK LSAgICAgICAgLy8gcXVvdGUgbm90IGltbWVkaWF0ZWx5IGZvbGxvd2luZyB0aGUgZmlyc3QgZXF1 YWxzIHNpZ24gKHRha2luZyB3aGl0ZXNwYWNlCi0gICAgICAgIC8vIGludG8gY29uc2lkZXJhdGlv bikuIFRvIGtlZXAgdGhpbmdzIHNpbXBsZXIsIHdlIGRvbid0IHRyeSB0byBkaXN0aW5ndWlzaAot ICAgICAgICAvLyBiZXR3ZWVuIGVudGl0eS1pbnRyb2R1Y2luZyBhbXBlcmFuZHMgdnMuIG90aGVy IHVzZXMsIG5vciBkbyB3ZSBib3RoZXIgdG8KLSAgICAgICAgLy8gY2hlY2sgZm9yIGEgc2Vjb25k IHNsYXNoIGZvciBhIGNvbW1lbnQsIG5vciBkbyB3ZSBib3RoZXIgdG8gY2hlY2sgZm9yCi0gICAg ICAgIC8vICEtLSBmb2xsb3dpbmcgYSBsZXNzLXRoYW4gc2lnbi4gV2Ugc3RvcCBpbnN0ZWFkIG9u IGFueSBhbXBlcnNhbmQKLSAgICAgICAgLy8gc2xhc2gsIG9yIGxlc3MtdGhhbiBzaWduLgotICAg ICAgICBTdHJpbmcgZGVjb2RlZFNuaXBwZXQgPSBkZWNvZGVkU25pcHBldEZvckF0dHJpYnV0ZSh0 b2tlbiwgYXR0cmlidXRlKTsKLSAgICAgICAgc2l6ZV90IHBvc2l0aW9uOwotICAgICAgICBpZiAo KHBvc2l0aW9uID0gZGVjb2RlZFNuaXBwZXQuZmluZCgiPSIpKSAhPSBub3RGb3VuZAotICAgICAg ICAgICAgJiYgKHBvc2l0aW9uID0gZGVjb2RlZFNuaXBwZXQuZmluZChpc05vdEhUTUxTcGFjZSwg cG9zaXRpb24gKyAxKSkgIT0gbm90Rm91bmQKLSAgICAgICAgICAgICYmIChwb3NpdGlvbiA9IGRl Y29kZWRTbmlwcGV0LmZpbmQoaXNUZXJtaW5hdGluZ0NoYXJhY3RlciwgaXNIVE1MUXVvdGUoZGVj b2RlZFNuaXBwZXRbcG9zaXRpb25dKSA/IHBvc2l0aW9uICsgMSA6IHBvc2l0aW9uKSkgIT0gbm90 Rm91bmQpIHsKLSAgICAgICAgICAgIGRlY29kZWRTbmlwcGV0LnRydW5jYXRlKHBvc2l0aW9uKTsK LSAgICAgICAgfQotICAgICAgICBpZiAoIWlzQ29udGFpbmVkSW5SZXF1ZXN0KGRlY29kZWRTbmlw cGV0KSkKKyAgICAgICAgaWYgKCFpc0NvbnRhaW5lZEluUmVxdWVzdChkZWNvZGVkU25pcHBldEZv ckF0dHJpYnV0ZSh0b2tlbiwgYXR0cmlidXRlLCBTY3JpcHRMaWtlQXR0cmlidXRlKSkpCiAgICAg ICAgICAgICBjb250aW51ZTsKICAgICAgICAgdG9rZW4uZXJhc2VWYWx1ZU9mQXR0cmlidXRlKGkp OwogICAgICAgICBpZiAodmFsdWVDb250YWluc0phdmFTY3JpcHRVUkwpCkBAIC00NzUsNyArNDU0 LDcgQEAgYm9vbCBYU1NBdWRpdG9yOjplcmFzZURhbmdlcm91c0F0dHJpYnV0ZQogCiBib29sIFhT U0F1ZGl0b3I6OmVyYXNlQXR0cmlidXRlSWZJbmplY3RlZChIVE1MVG9rZW4mIHRva2VuLCBjb25z dCBRdWFsaWZpZWROYW1lJiBhdHRyaWJ1dGVOYW1lLCBjb25zdCBTdHJpbmcmIHJlcGxhY2VtZW50 VmFsdWUsIEF0dHJpYnV0ZUtpbmQgdHJlYXRtZW50KQogewotICAgIHNpemVfdCBpbmRleE9mQXR0 cmlidXRlOworICAgIHNpemVfdCBpbmRleE9mQXR0cmlidXRlID0gMDsKICAgICBpZiAoZmluZEF0 dHJpYnV0ZVdpdGhOYW1lKHRva2VuLCBhdHRyaWJ1dGVOYW1lLCBpbmRleE9mQXR0cmlidXRlKSkg ewogICAgICAgICBjb25zdCBIVE1MVG9rZW46OkF0dHJpYnV0ZSYgYXR0cmlidXRlID0gdG9rZW4u YXR0cmlidXRlcygpLmF0KGluZGV4T2ZBdHRyaWJ1dGUpOwogICAgICAgICBpZiAoaXNDb250YWlu ZWRJblJlcXVlc3QoZGVjb2RlZFNuaXBwZXRGb3JBdHRyaWJ1dGUodG9rZW4sIGF0dHJpYnV0ZSwg dHJlYXRtZW50KSkpIHsKQEAgLTUyNyw2ICs1MDYsMjkgQEAgU3RyaW5nIFhTU0F1ZGl0b3I6OmRl Y29kZWRTbmlwcGV0Rm9yQXR0cgogICAgICAgICAgICAgaWYgKGN1cnJlbnRDaGFyID09ICcsJykK ICAgICAgICAgICAgICAgICBjb21tYVNlZW4gPSB0cnVlOwogICAgICAgICB9CisgICAgfSBlbHNl IGlmICh0cmVhdG1lbnQgPT0gU2NyaXB0TGlrZUF0dHJpYnV0ZSkgeworICAgICAgICAvLyBCZXdh cmUgb2YgdHJhaWxpbmcgY2hhcmFjdGVycyB3aGljaCBjYW1lIGZyb20gdGhlIHBhZ2UgaXRzZWxm LCBub3QgdGhlIAorICAgICAgICAvLyBpbmplY3RlZCB2ZWN0b3IuIEV4Y2x1ZGluZyB0aGUgdGVy bWluYXRpbmcgY2hhcmFjdGVyIGNvdmVycyBjb21tb24gY2FzZXMKKyAgICAgICAgLy8gd2hlcmUg dGhlIHBhZ2UgaW1tZWRpYXRlbHkgZW5kcyB0aGUgYXR0cmlidXRlLCBidXQgZG9lc24ndCBjb3Zl ciBtb3JlCisgICAgICAgIC8vIGNvbXBsZXggY2FzZXMgd2hlcmUgdGhlcmUgaXMgb3RoZXIgcGFn ZSBkYXRhIGZvbGxvd2luZyB0aGUgaW5qZWN0aW9uLiAKKyAgICAgICAgLy8gR2VuZXJhbGx5LCB0 aGVzZSB3b24ndCBwYXJzZSBhcyBqYXZhc2NyaXB0LCBzbyB0aGUgaW5qZWN0ZWQgdmVjdG9yCisg ICAgICAgIC8vIHR5cGljYWxseSBleGNsdWRlcyB0aGVtIGZyb20gY29uc2lkZXJhdGlvbiB2aWEg YSBzaW5nbGUtbGluZSBjb21tZW50IG9yCisgICAgICAgIC8vIGJ5IGVuY2xvc2luZyB0aGVtIGlu IGEgc3RyaW5nIGxpdGVyYWwgdGVybWluYXRlZCBsYXRlciBieSB0aGUgcGFnZSdzIG93bgorICAg ICAgICAvLyBjbG9zaW5nIHB1bmN0dWF0aW9uLiBTaW5jZSB0aGUgc25pcHBldCBoYXMgbm90IGJl ZW4gcGFyc2VkLCB0aGUgdmVjdG9yCisgICAgICAgIC8vIG1heSBhbHNvIHRyeSB0byBpbnRyb2R1 Y2UgdGhlc2UgdmlhIGVudGl0aWVzLiBBcyBhIHJlc3VsdCwgd2UnZCBsaWtlIHRvCisgICAgICAg IC8vIHN0b3AgYmVmb3JlIHRoZSBmaXJzdCAiLy8iLCB0aGUgZmlyc3QgPCEtLSwgdGhlIGZpcnN0 IGVudGl0eSwgb3IgdGhlIGZpcnN0CisgICAgICAgIC8vIHF1b3RlIG5vdCBpbW1lZGlhdGVseSBm b2xsb3dpbmcgdGhlIGZpcnN0IGVxdWFscyBzaWduICh0YWtpbmcgd2hpdGVzcGFjZQorICAgICAg ICAvLyBpbnRvIGNvbnNpZGVyYXRpb24pLiBUbyBrZWVwIHRoaW5ncyBzaW1wbGVyLCB3ZSBkb24n dCB0cnkgdG8gZGlzdGluZ3Vpc2gKKyAgICAgICAgLy8gYmV0d2VlbiBlbnRpdHktaW50cm9kdWNp bmcgYW1wZXJhbmRzIHZzLiBvdGhlciB1c2VzLCBub3IgZG8gd2UgYm90aGVyIHRvCisgICAgICAg IC8vIGNoZWNrIGZvciBhIHNlY29uZCBzbGFzaCBmb3IgYSBjb21tZW50LCBub3IgZG8gd2UgYm90 aGVyIHRvIGNoZWNrIGZvcgorICAgICAgICAvLyAhLS0gZm9sbG93aW5nIGEgbGVzcy10aGFuIHNp Z24uIFdlIHN0b3AgaW5zdGVhZCBvbiBhbnkgYW1wZXJzYW5kCisgICAgICAgIC8vIHNsYXNoLCBv ciBsZXNzLXRoYW4gc2lnbi4KKyAgICAgICAgc2l6ZV90IHBvc2l0aW9uID0gMDsKKyAgICAgICAg aWYgKChwb3NpdGlvbiA9IGRlY29kZWRTbmlwcGV0LmZpbmQoIj0iKSkgIT0gbm90Rm91bmQKKyAg ICAgICAgICAgICYmIChwb3NpdGlvbiA9IGRlY29kZWRTbmlwcGV0LmZpbmQoaXNOb3RIVE1MU3Bh Y2UsIHBvc2l0aW9uICsgMSkpICE9IG5vdEZvdW5kCisgICAgICAgICAgICAmJiAocG9zaXRpb24g PSBkZWNvZGVkU25pcHBldC5maW5kKGlzVGVybWluYXRpbmdDaGFyYWN0ZXIsIGlzSFRNTFF1b3Rl KGRlY29kZWRTbmlwcGV0W3Bvc2l0aW9uXSkgPyBwb3NpdGlvbiArIDEgOiBwb3NpdGlvbikpICE9 IG5vdEZvdW5kKSB7CisgICAgICAgICAgICBkZWNvZGVkU25pcHBldC50cnVuY2F0ZShwb3NpdGlv bik7CisgICAgICAgIH0KICAgICB9CiAgICAgcmV0dXJuIGRlY29kZWRTbmlwcGV0OwogfQpJbmRl eDogU291cmNlL1dlYkNvcmUvaHRtbC9wYXJzZXIvWFNTQXVkaXRvci5oCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0t IFNvdXJjZS9XZWJDb3JlL2h0bWwvcGFyc2VyL1hTU0F1ZGl0b3IuaAkocmV2aXNpb24gMTEzMjY4 KQorKysgU291cmNlL1dlYkNvcmUvaHRtbC9wYXJzZXIvWFNTQXVkaXRvci5oCSh3b3JraW5nIGNv cHkpCkBAIC01MSw3ICs1MSw4IEBAIHByaXZhdGU6CiAKICAgICBlbnVtIEF0dHJpYnV0ZUtpbmQg ewogICAgICAgICBOb3JtYWxBdHRyaWJ1dGUsCi0gICAgICAgIFNyY0xpa2VBdHRyaWJ1dGUKKyAg ICAgICAgU3JjTGlrZUF0dHJpYnV0ZSwKKyAgICAgICAgU2NyaXB0TGlrZUF0dHJpYnV0ZQogICAg IH07CiAKICAgICB2b2lkIGluaXQoKTsKSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDExMzI3MCkKKysrIExh eW91dFRlc3RzL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDEzIEBACisyMDEy LTA0LTA0ICBBZGFtIEJhcnRoICA8YWJhcnRoQHdlYmtpdC5vcmc+CisKKyAgICAgICAgWFNTQXVk aXRvciBkb2Vzbid0IGNhdGNoIGluamVjdGVkIHNyY2RvYyBhdHRyaWJ1dGVzCisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD04MzIzOAorCisgICAgICAgIFJl dmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0 eS94c3NBdWRpdG9yL2lmcmFtZS1zcmNkb2MtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAg KiBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvaWZyYW1lLXNyY2RvYy5odG1sOiBBZGRl ZC4KKwogMjAxMi0wNC0wNCAgT2xpdmVyIEh1bnQgIDxvbGl2ZXJAYXBwbGUuY29tPgogCiAgICAg ICAgIFBhcnNlciBmYWlscyB0byByZXZlcnQgc29tZSBzdGF0ZSBhZnRlciBwYXJzaW5nIGV4cHJl c3Npb24gYW5kIG9iamVjdCBsaXRlcmFscy4KSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMv c2VjdXJpdHkveHNzQXVkaXRvci9pZnJhbWUtc3JjZG9jLWV4cGVjdGVkLnR4dAo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvaWZyYW1lLXNy Y2RvYy1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3Rz L3NlY3VyaXR5L3hzc0F1ZGl0b3IvaWZyYW1lLXNyY2RvYy1leHBlY3RlZC50eHQJKHJldmlzaW9u IDApCkBAIC0wLDAgKzEsMyBAQAorQ09OU09MRSBNRVNTQUdFOiBSZWZ1c2VkIHRvIGV4ZWN1dGUg YSBKYXZhU2NyaXB0IHNjcmlwdC4gU291cmNlIGNvZGUgb2Ygc2NyaXB0IGZvdW5kIHdpdGhpbiBy ZXF1ZXN0LgorCisKSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVk aXRvci9pZnJhbWUtc3JjZG9jLmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90 ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2lmcmFtZS1zcmNkb2MuaHRtbAkocmV2aXNpb24gMCkK KysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9pZnJhbWUtc3Jj ZG9jLmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMTUgQEAKKzwhRE9DVFlQRSBodG1sPgor PGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQ+CitpZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVy KSB7CisgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgbGF5b3V0VGVzdENv bnRyb2xsZXIuc2V0WFNTQXVkaXRvckVuYWJsZWQodHJ1ZSk7Cit9Cis8L3NjcmlwdD4KKzwvaGVh ZD4KKzxib2R5PgorPGlmcmFtZSBzcmM9Imh0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS94 c3NBdWRpdG9yL3Jlc291cmNlcy9lY2hvLWludGVydGFnLnBsP3E9PGlmcmFtZSBzcmNkb2M9PHNj cmlwdD5hbGVydCgvRkFJTC8pPC9zY3JpcHQ+ID48L2lmcmFtZT4iPgorPC9pZnJhbWU+Cis8L2Jv ZHk+Cis8L2h0bWw+Cg==