163978 2016-10-25 13:37:11 -0700 REGRESSION (r178265): XSS Auditor fails to block document.write() of incomplete tag 2016-10-25 15:10:15 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Local Build All All RESOLVED FIXED InRadar, Regression, XSSAuditor P2 Normal --- 140166 1 dbates dbates aestes bfulgham cdumez commit-queue darin esprehn+autocc gyuyoung.kim sam webkit-bug-importer oldest_to_newest 1244401 0 dbates 2016-10-25 13:37:11 -0700 Consider a page A.html with the following markup: <!DOCTYPE html> <html> <body> <script>document.write(unescape(window.location));</script> </body> </html> Suppose you navigate to "A.html?<img src=1 onerror=alert(1)". Then the XSS Auditor should block the execution of the injected onerror handler. But it does not. 1244410 1 dbates 2016-10-25 13:44:38 -0700 <rdar://problem/25962131> 1244412 2 292815 dbates 2016-10-25 13:46:17 -0700 Created attachment 292815 Patch and layout tests 1244476 3 292815 dbates 2016-10-25 15:10:10 -0700 Comment on attachment 292815 Patch and layout tests Clearing flags on attachment: 292815 Committed r207848: <http://trac.webkit.org/changeset/207848> 1244477 4 dbates 2016-10-25 15:10:15 -0700 All reviewed patches have been landed. Closing bug. 292815 2016-10-25 13:46:17 -0700 2016-10-25 15:10:10 -0700 Patch and layout tests bug-163978-20161025134231.patch text/plain 13177 dbates U3VidmVyc2lvbiBSZXZpc2lvbjogMjA3NDEyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNTczNDJiYTA3ZTdmOGUz Mjg3ODUyMGE3M2I0MjlhZThlYWI3Y2VlMy4uMTZjZTcwZDRiZGU3OWIyM2QzMDJlYjBiYTdmNWYz MTZkNTM0OTEzNSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDM4IEBACisyMDE2LTEwLTI1ICBEYW5p ZWwgQmF0ZXMgIDxkYWJhdGVzQGFwcGxlLmNvbT4KKworICAgICAgICBSRUdSRVNTSU9OIChyMTc4 MjY1KTogWFNTIEF1ZGl0b3IgZmFpbHMgdG8gYmxvY2sgZG9jdW1lbnQud3JpdGUoKSBvZiBpbmNv bXBsZXRlIHRhZworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/ aWQ9MTYzOTc4CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS8yNTk2MjEzMT4KKworICAgICAgICBS ZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBEdXJpbmcgdGhlIHRva2VuaXph dGlvbiBwcm9jZXNzIG9mIGFuIEhUTUwgdGFnIHRoZSBzdGFydCBhbmQgZW5kIHBvc2l0aW9ucyBv ZiBlYWNoIG9mIGl0cworICAgICAgICBhdHRyaWJ1dGVzIGlzIHRyYWNrZWQgc28gdGhhdCB0aGUg WFNTIEF1ZGl0b3IgY2FuIHJlcXVlc3QgYSBzbmlwcGV0IGFyb3VuZCBhIHN1c3BlY3RlZAorICAg ICAgICBpbmplY3RlZCBhdHRyaWJ1dGUuIFdlIG5lZWQgdG8gdGFrZSBjYXJlIHRvIGNvbnNpZGVy IGRvY3VtZW50LndyaXRlKCkgYm91bmRhcmllcyB3aGVuCisgICAgICAgIHRyYWNraW5nIHRoZSBz dGFydCBhbmQgZW5kIHBvc2l0aW9ucyBvZiBlYWNoIEhUTUwgdGFnIGFuZCBhdHRyaWJ1dGUgc28g dGhhdCB0aGUgWFNTIEF1ZGl0b3IKKyAgICAgICAgcmVjZWl2ZXMgdGhlIGNvcnJlY3Qgc25pcHBl dC4gRm9sbG93aW5nIHIxNzgyNjUgd2Ugbm8gbG9uZ2VyIGNvbnNpZGVyIGRvY3VtZW50LndyaXRl KCkKKyAgICAgICAgYm91bmRhcmllcyB3aGVuIHRyYWNraW5nIHRoZSBzdGFydCBhbmQgZW5kIHBv c2l0aW9ucyBvZiBhdHRyaWJ1dGVzLiBTbywgdGhlIHN1YnN0cmluZworICAgICAgICByZXByZXNl bnRlZCBieSB0aGUgc3RhcnQgYW5kIGVuZCBwb3NpdGlvbnMgb2YgYW4gYXR0cmlidXRlIG1heSBj b3JyZXNwb25kIHRvIHNvbWUgb3RoZXIKKyAgICAgICAgYXR0cmlidXRlIGluIHRoZSB0YWcuIFRo ZXJlZm9yZSB0aGUgWFNTIEF1ZGl0b3IgbWF5IGZhaWwgdG8gYmxvY2sgYW4gaW5qZWN0aW9uIGJl Y2F1c2UgdGhlCisgICAgICAgIHNuaXBwZXQgaXQgcmVxdWVzdGVkIG1heSBub3QgYmUgdGhlIHNu aXBwZXQgdGhhdCBpdCBpbnRlbmRlZCB0byByZXF1ZXN0LgorCisgICAgICAgIFRlc3RzOiBodHRw L3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvZG9tLXdyaXRlLWxvY2F0aW9uLWRvbS13cml0ZS1v cGVuLWltZy1vbmVycm9yLmh0bWwKKyAgICAgICAgICAgICAgIGh0dHAvdGVzdHMvc2VjdXJpdHkv eHNzQXVkaXRvci9kb20td3JpdGUtbG9jYXRpb24tb3Blbi1pbWctb25lcnJvci5odG1sCisgICAg ICAgICAgICAgICBodHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbmVzdGVkLWRvbS13cml0 ZS1sb2NhdGlvbi1vcGVuLWltZy1vbmVycm9yLmh0bWwKKworICAgICAgICAqIGh0bWwvcGFyc2Vy L0hUTUxTb3VyY2VUcmFja2VyLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OkhUTUxTb3VyY2VUcmFj a2VyOjpzdGFydFRva2VuKTogU2V0IHRoZSBhdHRyaWJ1dGUgYmFzZSBvZmZzZXQgdG8gYmUgdGhl IHRva2VuCisgICAgICAgIHN0YXJ0IHBvc2l0aW9uLgorICAgICAgICAoV2ViQ29yZTo6SFRNTFNv dXJjZVRyYWNrZXI6OnNvdXJjZSk6IFVzZSB0aGUgc3BlY2lmaWVkIGF0dHJpYnV0ZSBzdGFydCBw b3NpdGlvbiBhcy1pcy4gV2Ugbm8KKyAgICAgICAgbG9uZ2VyIGFkanVzdCBpdCBoZXJlIGJlY2F1 c2UgaXQgd2FzIGFkanVzdGVkIHdpdGggcmVzcGVjdCB0byB0aGUgYXR0cmlidXRlIGJhc2Ugb2Zm c2V0LCB3aGljaAorICAgICAgICB0YWtlcyBpbnRvIGFjY291bnQgZG9jdW1lbnQud3JpdGUoKSBi b3VuZGFyaWVzLgorICAgICAgICAqIGh0bWwvcGFyc2VyL0hUTUxUb2tlbi5oOgorICAgICAgICAo V2ViQ29yZTo6SFRNTFRva2VuOjpzZXRBdHRyaWJ1dGVCYXNlT2Zmc2V0KTogQWRkZWQuCisgICAg ICAgIChXZWJDb3JlOjpIVE1MVG9rZW46OmJlZ2luQXR0cmlidXRlKTogU3VidHJhY3QgYXR0cmli dXRlIGJhc2Ugb2Zmc2V0IGZyb20gdGhlIHNwZWNpZmllZCBvZmZzZXQuCisgICAgICAgIChXZWJD b3JlOjpIVE1MVG9rZW46OmVuZEF0dHJpYnV0ZSk6IERpdHRvLgorICAgICAgICAqIGh0bWwvcGFy c2VyL0hUTUxUb2tlbml6ZXIuaDoKKyAgICAgICAgKFdlYkNvcmU6OkhUTUxUb2tlbml6ZXI6OnNl dFRva2VuQXR0cmlidXRlQmFzZU9mZnNldCk6IEFkZGVkLgorCiAyMDE2LTEwLTE3ICBGdWppaSBI aXJvbm9yaSAgPEhpcm9ub3JpLkZ1amlpQHNvbnkuY29tPgogCiAgICAgICAgIHByZXByb2Nlc3Nv ci5wbTogY2wuZXhlIG91dHB1dHMgcHJvY2Vzc2luZyBmaWxlbmFtZXMgaWYgV2luZG93cyBQZXJs IGlzIHVzZWQKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2h0bWwvcGFyc2VyL0hUTUxTb3Vy Y2VUcmFja2VyLmNwcCBiL1NvdXJjZS9XZWJDb3JlL2h0bWwvcGFyc2VyL0hUTUxTb3VyY2VUcmFj a2VyLmNwcAppbmRleCAwYzlhMDQ2MzI3MGRjYWEyYjFmZWY1OWU0NTJjZjY1YTU5NTNkMmQ3Li43 ODMwNDdiN2IxYTY0NjJmYWQ3NTViMzdjZmE2ODkyNjRhMTc4ZTYwIDEwMDY0NAotLS0gYS9Tb3Vy Y2UvV2ViQ29yZS9odG1sL3BhcnNlci9IVE1MU291cmNlVHJhY2tlci5jcHAKKysrIGIvU291cmNl L1dlYkNvcmUvaHRtbC9wYXJzZXIvSFRNTFNvdXJjZVRyYWNrZXIuY3BwCkBAIC00OSw2ICs0OSw3 IEBAIHZvaWQgSFRNTFNvdXJjZVRyYWNrZXI6OnN0YXJ0VG9rZW4oU2VnbWVudGVkU3RyaW5nJiBj dXJyZW50SW5wdXQsIEhUTUxUb2tlbml6ZXImCiAKICAgICBtX2N1cnJlbnRTb3VyY2UgPSBjdXJy ZW50SW5wdXQ7CiAgICAgbV90b2tlblN0YXJ0ID0gbV9jdXJyZW50U291cmNlLm51bWJlck9mQ2hh cmFjdGVyc0NvbnN1bWVkKCkgLSBtX3ByZXZpb3VzU291cmNlLmxlbmd0aCgpOworICAgIHRva2Vu aXplci5zZXRUb2tlbkF0dHJpYnV0ZUJhc2VPZmZzZXQobV90b2tlblN0YXJ0KTsKIH0KIAogdm9p ZCBIVE1MU291cmNlVHJhY2tlcjo6ZW5kVG9rZW4oU2VnbWVudGVkU3RyaW5nJiBjdXJyZW50SW5w dXQsIEhUTUxUb2tlbml6ZXImIHRva2VuaXplcikKQEAgLTkyLDcgKzkzLDcgQEAgU3RyaW5nIEhU TUxTb3VyY2VUcmFja2VyOjpzb3VyY2UoY29uc3QgSFRNTFRva2VuJiB0b2tlbikKIAogU3RyaW5n IEhUTUxTb3VyY2VUcmFja2VyOjpzb3VyY2UoY29uc3QgSFRNTFRva2VuJiB0b2tlbiwgdW5zaWdu ZWQgYXR0cmlidXRlU3RhcnQsIHVuc2lnbmVkIGF0dHJpYnV0ZUVuZCkKIHsKLSAgICByZXR1cm4g c291cmNlKHRva2VuKS5zdWJzdHJpbmcoYXR0cmlidXRlU3RhcnQgLSBtX3Rva2VuU3RhcnQsIGF0 dHJpYnV0ZUVuZCAtIGF0dHJpYnV0ZVN0YXJ0KTsKKyAgICByZXR1cm4gc291cmNlKHRva2VuKS5z dWJzdHJpbmcoYXR0cmlidXRlU3RhcnQsIGF0dHJpYnV0ZUVuZCAtIGF0dHJpYnV0ZVN0YXJ0KTsK IH0KIAogfQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvaHRtbC9wYXJzZXIvSFRNTFRva2Vu LmggYi9Tb3VyY2UvV2ViQ29yZS9odG1sL3BhcnNlci9IVE1MVG9rZW4uaAppbmRleCAzYzA2ZTM3 MDBmYjUyZTkxZWM1MGM0YjA4YTkxMDk2OTMyY2UxNDk0Li41ZTRhZWE5N2JhOTBkNjIzZTA5OWFj N2ViOThkNWQ5OWIxZmIxNDQwIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9odG1sL3BhcnNl ci9IVE1MVG9rZW4uaAorKysgYi9Tb3VyY2UvV2ViQ29yZS9odG1sL3BhcnNlci9IVE1MVG9rZW4u aApAQCAtMTE0LDYgKzExNCw5IEBAIHB1YmxpYzoKIAogICAgIHZvaWQgc2V0U2VsZkNsb3Npbmco KTsKIAorICAgIC8vIFVzZWQgYnkgSFRNTFRva2VuaXplciBvbiBiZWhhbGYgb2YgSFRNTFNvdXJj ZVRyYWNrZXIuCisgICAgdm9pZCBzZXRBdHRyaWJ1dGVCYXNlT2Zmc2V0KHVuc2lnbmVkIGF0dHJp YnV0ZUJhc2VPZmZzZXQpIHsgbV9hdHRyaWJ1dGVCYXNlT2Zmc2V0ID0gYXR0cmlidXRlQmFzZU9m ZnNldDsgfQorCiBwdWJsaWM6CiAgICAgLy8gVXNlZCBieSB0aGUgWFNTQXVkaXRvciB0byBudWtl IFhTUy1sYWRlbiBhdHRyaWJ1dGVzLgogICAgIHZvaWQgZXJhc2VWYWx1ZU9mQXR0cmlidXRlKHVu c2lnbmVkIGluZGV4KTsKQEAgLTE1Myw2ICsxNTYsOCBAQCBwcml2YXRlOgogCiAgICAgLy8gRm9y IERPQ1RZUEUKICAgICBzdGQ6OnVuaXF1ZV9wdHI8RG9jdHlwZURhdGE+IG1fZG9jdHlwZURhdGE7 CisKKyAgICB1bnNpZ25lZCBtX2F0dHJpYnV0ZUJhc2VPZmZzZXQgeyAwIH07IC8vIENoYW5nZXMg YWNyb3NzIGRvY3VtZW50LndyaXRlKCkgYm91bmRhcmllcy4KIH07CiAKIGNvbnN0IEhUTUxUb2tl bjo6QXR0cmlidXRlKiBmaW5kQXR0cmlidXRlKGNvbnN0IFZlY3RvcjxIVE1MVG9rZW46OkF0dHJp YnV0ZT4mLCBTdHJpbmdWaWV3IG5hbWUpOwpAQCAtMzE1LDE0ICszMjAsMTQgQEAgaW5saW5lIHZv aWQgSFRNTFRva2VuOjpiZWdpbkF0dHJpYnV0ZSh1bnNpZ25lZCBvZmZzZXQpCiAgICAgbV9hdHRy aWJ1dGVzLmdyb3cobV9hdHRyaWJ1dGVzLnNpemUoKSArIDEpOwogICAgIG1fY3VycmVudEF0dHJp YnV0ZSA9ICZtX2F0dHJpYnV0ZXMubGFzdCgpOwogCi0gICAgbV9jdXJyZW50QXR0cmlidXRlLT5z dGFydE9mZnNldCA9IG9mZnNldDsKKyAgICBtX2N1cnJlbnRBdHRyaWJ1dGUtPnN0YXJ0T2Zmc2V0 ID0gb2Zmc2V0IC0gbV9hdHRyaWJ1dGVCYXNlT2Zmc2V0OwogfQogCiBpbmxpbmUgdm9pZCBIVE1M VG9rZW46OmVuZEF0dHJpYnV0ZSh1bnNpZ25lZCBvZmZzZXQpCiB7CiAgICAgQVNTRVJUKG9mZnNl dCk7CiAgICAgQVNTRVJUKG1fY3VycmVudEF0dHJpYnV0ZSk7Ci0gICAgbV9jdXJyZW50QXR0cmli dXRlLT5lbmRPZmZzZXQgPSBvZmZzZXQ7CisgICAgbV9jdXJyZW50QXR0cmlidXRlLT5lbmRPZmZz ZXQgPSBvZmZzZXQgLSBtX2F0dHJpYnV0ZUJhc2VPZmZzZXQ7CiAjaWYgIUFTU0VSVF9ESVNBQkxF RAogICAgIG1fY3VycmVudEF0dHJpYnV0ZSA9IG51bGxwdHI7CiAjZW5kaWYKZGlmZiAtLWdpdCBh L1NvdXJjZS9XZWJDb3JlL2h0bWwvcGFyc2VyL0hUTUxUb2tlbml6ZXIuaCBiL1NvdXJjZS9XZWJD b3JlL2h0bWwvcGFyc2VyL0hUTUxUb2tlbml6ZXIuaAppbmRleCBmZWQyMTE4OGRiNGY2ZTI3MWYx MTQxMjY0MGIzOThmMDkwNzE3NWE3Li5iYmY1Y2RiOWJhOWU0NDg4OTFlMjI2MjhjNThjYzcyZTQw ODQ3ZTgzIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9odG1sL3BhcnNlci9IVE1MVG9rZW5p emVyLmgKKysrIGIvU291cmNlL1dlYkNvcmUvaHRtbC9wYXJzZXIvSFRNTFRva2VuaXplci5oCkBA IC00Myw2ICs0Myw5IEBAIHB1YmxpYzoKICAgICBjbGFzcyBUb2tlblB0cjsKICAgICBUb2tlblB0 ciBuZXh0VG9rZW4oU2VnbWVudGVkU3RyaW5nJik7CiAKKyAgICAvLyBVc2VkIGJ5IEhUTUxTb3Vy Y2VUcmFja2VyLgorICAgIHZvaWQgc2V0VG9rZW5BdHRyaWJ1dGVCYXNlT2Zmc2V0KHVuc2lnbmVk KTsKKwogICAgIC8vIFJldHVybnMgYSBjb3B5IG9mIGFueSBjaGFyYWN0ZXJzIGJ1ZmZlcmVkIGlu dGVybmFsbHkgYnkgdGhlIHRva2VuaXplci4KICAgICAvLyBUaGUgdG9rZW5pemVyIGJ1ZmZlcnMg Y2hhcmFjdGVycyB3aGVuIHNlYXJjaGluZyBmb3IgdGhlIDwvc2NyaXB0PiB0b2tlbiB0aGF0IHRl cm1pbmF0ZXMgYSBzY3JpcHQgZWxlbWVudC4KICAgICBTdHJpbmcgYnVmZmVyZWRDaGFyYWN0ZXJz KCkgY29uc3Q7CkBAIC0yODIsNiArMjg1LDExIEBAIGlubGluZSBIVE1MVG9rZW5pemVyOjpUb2tl blB0ciBIVE1MVG9rZW5pemVyOjpuZXh0VG9rZW4oU2VnbWVudGVkU3RyaW5nJiBzb3VyY2UpCiAg ICAgcmV0dXJuIFRva2VuUHRyKHByb2Nlc3NUb2tlbihzb3VyY2UpID8gJm1fdG9rZW4gOiBudWxs cHRyKTsKIH0KIAoraW5saW5lIHZvaWQgSFRNTFRva2VuaXplcjo6c2V0VG9rZW5BdHRyaWJ1dGVC YXNlT2Zmc2V0KHVuc2lnbmVkIG9mZnNldCkKK3sKKyAgICBtX3Rva2VuLnNldEF0dHJpYnV0ZUJh c2VPZmZzZXQob2Zmc2V0KTsKK30KKwogaW5saW5lIHNpemVfdCBIVE1MVG9rZW5pemVyOjpudW1i ZXJPZkJ1ZmZlcmVkQ2hhcmFjdGVycygpIGNvbnN0CiB7CiAgICAgLy8gTm90aWNlIHRoYXQgd2Ug YWRkIDIgdG8gdGhlIGxlbmd0aCBvZiB0aGUgbV90ZW1wb3JhcnlCdWZmZXIgdG8KZGlmZiAtLWdp dCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwppbmRleCA1 YmQwNTBjYzg3ODI3NjA0ODZmNWI4ODViYjQ0NDU2YmMwMGYwZmQ4Li5jZDU2M2NiYmFlZmNlMDg3 OGM2MTQzYmNiMGIzMDFlYTc4ZTM2M2MzIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VM b2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMjEgQEAKKzIwMTYtMTAt MjUgIERhbmllbCBCYXRlcyAgPGRhYmF0ZXNAYXBwbGUuY29tPgorCisgICAgICAgIFJFR1JFU1NJ T04gKHIxNzgyNjUpOiBYU1MgQXVkaXRvciBmYWlscyB0byBibG9jayBkb2N1bWVudC53cml0ZSgp IG9mIGluY29tcGxldGUgdGFnCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3df YnVnLmNnaT9pZD0xNjM5NzgKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzI1OTYyMTMxPgorCisg ICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIEFkZCB0ZXN0cyB0 byBlbnN1cmUgdGhhdCB0aGUgWFNTIEF1ZGl0b3IgYmxvY2tzIGEgZG9jdW1lbnQud3JpdGUoKSBv ZiBhbiBpbmNvbXBsZXRlIEhUTUwgaW1hZ2UgdGFnLgorCisgICAgICAgICogaHR0cC90ZXN0cy9z ZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0ZS1sb2NhdGlvbi1kb20td3JpdGUtb3Blbi1pbWct b25lcnJvci1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJp dHkveHNzQXVkaXRvci9kb20td3JpdGUtbG9jYXRpb24tZG9tLXdyaXRlLW9wZW4taW1nLW9uZXJy b3IuaHRtbDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9y L2RvbS13cml0ZS1sb2NhdGlvbi1vcGVuLWltZy1vbmVycm9yLWV4cGVjdGVkLnR4dDogQWRkZWQu CisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0ZS1sb2Nh dGlvbi1vcGVuLWltZy1vbmVycm9yLmh0bWw6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMv c2VjdXJpdHkveHNzQXVkaXRvci9uZXN0ZWQtZG9tLXdyaXRlLWxvY2F0aW9uLW9wZW4taW1nLW9u ZXJyb3ItZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5 L3hzc0F1ZGl0b3IvbmVzdGVkLWRvbS13cml0ZS1sb2NhdGlvbi1vcGVuLWltZy1vbmVycm9yLmh0 bWw6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNv dXJjZXMvZWNoby1uZXN0ZWQtZG9tLXdyaXRlLWxvY2F0aW9uLmh0bWw6IEFkZGVkLgorCiAyMDE2 LTEwLTE3ICBSeWFuIEhhZGRhZCAgPHJ5YW5oYWRkYWRAYXBwbGUuY29tPgogCiAgICAgICAgIFJl YmFzZWxpbmUgbWF0aG1sL21hdGhtbC1pbi1kYXNoYm9hcmQuaHRtbCBmb3IgbWFjLgpkaWZmIC0t Z2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0 ZS1sb2NhdGlvbi1kb20td3JpdGUtb3Blbi1pbWctb25lcnJvci1leHBlY3RlZC50eHQgYi9MYXlv dXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvZG9tLXdyaXRlLWxvY2F0aW9u LWRvbS13cml0ZS1vcGVuLWltZy1vbmVycm9yLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEw MDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi44Mzk0 MzY4MGE2NzUyNWYzOWU0MGE1MDJiZDdiYWM0ZDZkZDAyZjJhCi0tLSAvZGV2L251bGwKKysrIGIv TGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0ZS1sb2Nh dGlvbi1kb20td3JpdGUtb3Blbi1pbWctb25lcnJvci1leHBlY3RlZC50eHQKQEAgLTAsMCArMSwy IEBACitDT05TT0xFIE1FU1NBR0U6IGxpbmUgNjogVGhlIFhTUyBBdWRpdG9yIHJlZnVzZWQgdG8g ZXhlY3V0ZSBhIHNjcmlwdCBpbiAnaHR0cDovL2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5L3hzc0F1 ZGl0b3IvcmVzb3VyY2VzL2VjaG8tZG9tLXdyaXRlLWxvY2F0aW9uLmh0bWw/cT0lM0NzY3JpcHQl M0Vkb2N1bWVudC53cml0ZSglMjIlM0NpbWclMjBzcmM9MSUyMCUyMik7JTNDL3NjcmlwdCUzRW9u ZXJyb3I9YWxlcnQoL1hTUy8pJyBiZWNhdXNlIGl0cyBzb3VyY2UgY29kZSB3YXMgZm91bmQgd2l0 aGluIHRoZSByZXF1ZXN0LiBUaGUgYXVkaXRvciB3YXMgZW5hYmxlZCBiZWNhdXNlIHRoZSBzZXJ2 ZXIgZGlkIG5vdCBzZW5kIGFuICdYLVhTUy1Qcm90ZWN0aW9uJyBoZWFkZXIuCisKZGlmZiAtLWdp dCBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9kb20td3JpdGUt bG9jYXRpb24tZG9tLXdyaXRlLW9wZW4taW1nLW9uZXJyb3IuaHRtbCBiL0xheW91dFRlc3RzL2h0 dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9kb20td3JpdGUtbG9jYXRpb24tZG9tLXdyaXRl LW9wZW4taW1nLW9uZXJyb3IuaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi42Y2I0N2VhZDhlZWJjOGJlYWNhZjNj NzU3ZmQwNjUyMzNmOGU3YTExCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90 ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0ZS1sb2NhdGlvbi1kb20td3JpdGUtb3Bl bi1pbWctb25lcnJvci5odG1sCkBAIC0wLDAgKzEsMTUgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0 bWw+Cis8aGVhZD4KKzxzY3JpcHQ+CitpZiAod2luZG93LnRlc3RSdW5uZXIpIHsKKyAgICB0ZXN0 UnVubmVyLmR1bXBBc1RleHQoKTsKKyAgICB0ZXN0UnVubmVyLnNldFhTU0F1ZGl0b3JFbmFibGVk KHRydWUpOworfQorPC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKzxpZnJhbWUgc3JjPSdodHRw Oi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNoby1kb20t d3JpdGUtbG9jYXRpb24uaHRtbD9xPTxzY3JpcHQ+ZG9jdW1lbnQud3JpdGUoIjxpbWcgc3JjPTEg Iik7PC9zY3JpcHQ+b25lcnJvcj1hbGVydCgvWFNTLyknPgorPC9pZnJhbWU+Cis8L2JvZHk+Cis8 L2h0bWw+CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1 ZGl0b3IvZG9tLXdyaXRlLWxvY2F0aW9uLW9wZW4taW1nLW9uZXJyb3ItZXhwZWN0ZWQudHh0IGIv TGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0ZS1sb2Nh dGlvbi1vcGVuLWltZy1vbmVycm9yLWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NApp bmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi40MDYxOTkwNmJj NDU1YmJkNzY4ZTk5YmZjMjcyMzE2OWE3Y2UxN2ZlCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0 VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0ZS1sb2NhdGlvbi1v cGVuLWltZy1vbmVycm9yLWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDIgQEAKK0NPTlNPTEUgTUVT U0FHRTogbGluZSA3OiBUaGUgWFNTIEF1ZGl0b3IgcmVmdXNlZCB0byBleGVjdXRlIGEgc2NyaXB0 IGluICdodHRwOi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMv ZWNoby1kb20td3JpdGUtbG9jYXRpb24uaHRtbD9xPSUzQ2ltZyUyMHNyYz0xJTIwb25lcnJvcj1h bGVydCgvWFNTLyknIGJlY2F1c2UgaXRzIHNvdXJjZSBjb2RlIHdhcyBmb3VuZCB3aXRoaW4gdGhl IHJlcXVlc3QuIFRoZSBhdWRpdG9yIHdhcyBlbmFibGVkIGJlY2F1c2UgdGhlIHNlcnZlciBkaWQg bm90IHNlbmQgYW4gJ1gtWFNTLVByb3RlY3Rpb24nIGhlYWRlci4KKwpkaWZmIC0tZ2l0IGEvTGF5 b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2RvbS13cml0ZS1sb2NhdGlv bi1vcGVuLWltZy1vbmVycm9yLmh0bWwgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5 L3hzc0F1ZGl0b3IvZG9tLXdyaXRlLWxvY2F0aW9uLW9wZW4taW1nLW9uZXJyb3IuaHRtbApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwLi41OGUyM2ZlNjdhOWYwMWZkMjRjZGQwODRiNzk1YjE1Y2JlYzU3NzgwCi0tLSAvZGV2 L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2Rv bS13cml0ZS1sb2NhdGlvbi1vcGVuLWltZy1vbmVycm9yLmh0bWwKQEAgLTAsMCArMSwxNSBAQAor PCFET0NUWVBFIGh0bWw+Cis8aHRtbD4KKzxoZWFkPgorPHNjcmlwdD4KK2lmICh3aW5kb3cudGVz dFJ1bm5lcikgeworICAgIHRlc3RSdW5uZXIuZHVtcEFzVGV4dCgpOworICAgIHRlc3RSdW5uZXIu c2V0WFNTQXVkaXRvckVuYWJsZWQodHJ1ZSk7Cit9Cis8L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5 PgorPGlmcmFtZSBzcmM9J2h0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS94c3NBdWRpdG9y L3Jlc291cmNlcy9lY2hvLWRvbS13cml0ZS1sb2NhdGlvbi5odG1sP3E9PGltZyUyMHNyYz0xJTIw b25lcnJvcj1hbGVydCgvWFNTLyknPgorPC9pZnJhbWU+Cis8L2JvZHk+Cis8L2h0bWw+CmRpZmYg LS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbmVzdGVk LWRvbS13cml0ZS1sb2NhdGlvbi1vcGVuLWltZy1vbmVycm9yLWV4cGVjdGVkLnR4dCBiL0xheW91 dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9uZXN0ZWQtZG9tLXdyaXRlLWxv Y2F0aW9uLW9wZW4taW1nLW9uZXJyb3ItZXhwZWN0ZWQudHh0Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0 CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLmE4NDQ1ZmM0 MzQ5MTNlZjdjN2RhNzkzODY1YWYxMjQ4YWE4ZTJkYjQKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlv dXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1ZGl0b3IvbmVzdGVkLWRvbS13cml0ZS1s b2NhdGlvbi1vcGVuLWltZy1vbmVycm9yLWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDIgQEAKK0NP TlNPTEUgTUVTU0FHRTogbGluZSA3OiBUaGUgWFNTIEF1ZGl0b3IgcmVmdXNlZCB0byBleGVjdXRl IGEgc2NyaXB0IGluICdodHRwOi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNzQXVkaXRvci9y ZXNvdXJjZXMvZWNoby1uZXN0ZWQtZG9tLXdyaXRlLWxvY2F0aW9uLmh0bWw/cT0lM0NpbWclMjBz cmM9MSUyMG9uZXJyb3I9YWxlcnQoL1hTUy8pJyBiZWNhdXNlIGl0cyBzb3VyY2UgY29kZSB3YXMg Zm91bmQgd2l0aGluIHRoZSByZXF1ZXN0LiBUaGUgYXVkaXRvciB3YXMgZW5hYmxlZCBiZWNhdXNl IHRoZSBzZXJ2ZXIgZGlkIG5vdCBzZW5kIGFuICdYLVhTUy1Qcm90ZWN0aW9uJyBoZWFkZXIuCisK ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9u ZXN0ZWQtZG9tLXdyaXRlLWxvY2F0aW9uLW9wZW4taW1nLW9uZXJyb3IuaHRtbCBiL0xheW91dFRl c3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9uZXN0ZWQtZG9tLXdyaXRlLWxvY2F0 aW9uLW9wZW4taW1nLW9uZXJyb3IuaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi41MDg4MjU4Zjc0Y2NlZGE5OWMw ZDg2NjAwNDBmMjY5ZTcxOThlYjE1Ci0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0 cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL25lc3RlZC1kb20td3JpdGUtbG9jYXRpb24tb3Bl bi1pbWctb25lcnJvci5odG1sCkBAIC0wLDAgKzEsMTUgQEAKKzwhRE9DVFlQRSBodG1sPgorPGh0 bWw+Cis8aGVhZD4KKzxzY3JpcHQ+CitpZiAod2luZG93LnRlc3RSdW5uZXIpIHsKKyAgICB0ZXN0 UnVubmVyLmR1bXBBc1RleHQoKTsKKyAgICB0ZXN0UnVubmVyLnNldFhTU0F1ZGl0b3JFbmFibGVk KHRydWUpOworfQorPC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKzxpZnJhbWUgc3JjPSdodHRw Oi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNoby1uZXN0 ZWQtZG9tLXdyaXRlLWxvY2F0aW9uLmh0bWw/cT08aW1nJTIwc3JjPTElMjBvbmVycm9yPWFsZXJ0 KC9YU1MvKSc+Cis8L2lmcmFtZT4KKzwvYm9keT4KKzwvaHRtbD4KZGlmZiAtLWdpdCBhL0xheW91 dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzQXVkaXRvci9yZXNvdXJjZXMvZWNoby1uZXN0 ZWQtZG9tLXdyaXRlLWxvY2F0aW9uLmh0bWwgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3Vy aXR5L3hzc0F1ZGl0b3IvcmVzb3VyY2VzL2VjaG8tbmVzdGVkLWRvbS13cml0ZS1sb2NhdGlvbi5o dG1sCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAuLmYyNzA0ODk5NzkyNzUxMDliOTg4MjUwODU4MWQyODc5NDRiZjRjZTIK LS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hzc0F1 ZGl0b3IvcmVzb3VyY2VzL2VjaG8tbmVzdGVkLWRvbS13cml0ZS1sb2NhdGlvbi5odG1sCkBAIC0w LDAgKzEsOCBAQAorPCFET0NUWVBFIGh0bWw+Cis8aHRtbD4KKzxoZWFkPgorPC9oZWFkPgorPGJv ZHk+Cis8c2NyaXB0PmRvY3VtZW50LndyaXRlKCI8c2NyaXB0PmRvY3VtZW50LndyaXRlKHVuZXNj YXBlKHdpbmRvdy5sb2NhdGlvbikpOzwvIiArICJzY3JpcHQ+Iik7PC9zY3JpcHQ+Cis8L2JvZHk+ Cis8L2h0bWw+Cg==