188073 2018-07-26 13:04:11 -0700 Same-Site cookies are not sent with same-origin redirect initiated from cross-origin navigation 2020-10-19 20:51:02 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Mac Unspecified NEW InRadar P2 Normal --- 1 dbates dbates jxtps435 webkit-bug-importer oldest_to_newest 1445499 0 dbates 2018-07-26 13:04:11 -0700 Let A, B be two registrable domains where A != B. Without loss of generality suppose that you load A/a1.html in the top-most frame and it redirects to B/b1.html that redirects to A/a2.html that redirects to A/a3.html. Then same-site cookies are never sent in the request to A/a3.html. But we should have sent same-site cookies in the request to A/a3.html because the request is same-site with A/a2.html, which initiated the load. 1445500 1 webkit-bug-importer 2018-07-26 13:04:37 -0700 <rdar://problem/42635007> 1445501 2 webkit-bug-importer 2018-07-26 13:04:53 -0700 <rdar://problem/42635005> 1445502 3 345860 dbates 2018-07-26 13:06:51 -0700 Created attachment 345860 Layout tests 1484898 4 jxtps435 2018-12-04 10:46:22 -0800 This bug is breaking our federated login. We have a somewhat tricky federated login setup between two trusted sites, and since Safari 12 there's a cookie not being sent with the last request - presumably due to ITP 2.0. Site A.example uses site B.example for federated login. Both sites are owned by the same entity, and know / trust each other (but not other sites) via shared secrets, and have split responsibilities - some account management is done on site A, some on site B (we have many sites A, this is to be able to reuse the functionality on B). The sequence is as follows: A.example renders page containing iframe from B.example (cookies not used or necessary). Form in this iframe has target=_top and action=B.example/login. User submits the form. B.example/login authenticates the login, sets a session cookie, and redirects to A.example/login?token=xyz A.example/login?token=xyz authenticates the login, sets a session cookie, and redirects to A.example/hello A.example/hello expected the session cookie to be sent, but it isn't => looks like the user isn't logged in. <-- THIS IS THE CHANGE IN BEHAVIOR FROM PREVIOUS VERSIONS OF SAFARI. The user is terribly confused and either gives up or contacts support. If the user reloads A.example/hello or clicks a link on that page, the session cookie is sent => now it looks like the user is logged in. Even more confusing. Presumably this is due to ITP 2.0 (or similar functionality) blocking the cookie since it probably looks like a tracking scenario to that code - the user is logged in to both sites, so the ability to track is certainly there. Please include the session cookie when an eTLD redirects to itself (e.g. A.example/login?token=xyz redirecting to A.example/hello). It's totally fine if only cookies set in the redirecting action (A.example/login?token=xyz) are included. 1484900 5 jxtps435 2018-12-04 10:49:38 -0800 Note that this does not reproduce when A.example is localhost - for some reason it only happens with "real" domains (or over https?) 1484902 6 jxtps435 2018-12-04 10:52:06 -0800 It looks like the tests added in https://bugs.webkit.org/show_bug.cgi?id=185235 are insufficient since they use localhost. 1484910 7 dbates 2018-12-04 11:01:00 -0800 This needs to be fixed in CFNetwork. This work is tracked in <rdar://problem/42097136>. Keeping this bug open to add tests. 345860 2018-07-26 13:06:51 -0700 2020-10-19 20:51:02 -0700 Layout tests bug-188073-20180726130650.patch text/plain 8677 dbates U3VidmVyc2lvbiBSZXZpc2lvbjogMjM0MTk3CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRw L3Rlc3RzL2Nvb2tpZXMvc2FtZS1zaXRlL2ZldGNoLWFmdGVyLXRvcC1sZXZlbC1jcm9zcy1vcmln aW4tdG8tc2FtZS1vcmlnaW4tdG8tc2FtZS1vcmlnaW4tcmVkaXJlY3QtZXhwZWN0ZWQudHh0IGIv TGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29raWVzL3NhbWUtc2l0ZS9mZXRjaC1hZnRlci10b3At bGV2ZWwtY3Jvc3Mtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXJlZGlyZWN0 LWV4cGVjdGVkLnR4dApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5lODRkYWFlZDgyZmE4OWVlOGI1MDQyM2YzY2I5Njgy OTEzODlhYzU4Ci0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29r aWVzL3NhbWUtc2l0ZS9mZXRjaC1hZnRlci10b3AtbGV2ZWwtY3Jvc3Mtb3JpZ2luLXRvLXNhbWUt b3JpZ2luLXRvLXNhbWUtb3JpZ2luLXJlZGlyZWN0LWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDIw IEBACitUZXN0cyB0aGF0IFNhbWVTaXRlIGNvb2tpZXMgZm9yIDEyNy4wLjAuMSBhcmUgc2VudCB3 aXRoIGEgcmVkaXJlY3QgZnJvbSBhIHBhZ2Ugd2l0aCB0aGUgc2FtZSBvcmlnaW4uCisKK09uIHN1 Y2Nlc3MsIHlvdSB3aWxsIHNlZSBhIHNlcmllcyBvZiAiUEFTUyIgbWVzc2FnZXMsIGZvbGxvd2Vk IGJ5ICJURVNUIENPTVBMRVRFIi4KKworCitDb29raWVzIHNlbnQgd2l0aCBIVFRQIHJlcXVlc3Q6 CitQQVNTIEhhcyBjb29raWUgInN0cmljdCIgd2l0aCB2YWx1ZSAyMC4KK1BBU1MgSGFzIGNvb2tp ZSAiaW1wbGljaXQtc3RyaWN0IiB3aXRoIHZhbHVlIDIwLgorUEFTUyBIYXMgY29va2llICJzdHJp Y3QtYmVjYXVzZS1pbnZhbGlkLVNhbWVTaXRlLXZhbHVlIiB3aXRoIHZhbHVlIDIwLgorUEFTUyBI YXMgY29va2llICJsYXgiIHdpdGggdmFsdWUgMjAuCisKK0Nvb2tpZXMgdmlzaWJsZSBpbiBET006 CitQQVNTIEhhcyBET00gY29va2llICJzdHJpY3QiIHdpdGggdmFsdWUgMjAuCitQQVNTIEhhcyBE T00gY29va2llICJpbXBsaWNpdC1zdHJpY3QiIHdpdGggdmFsdWUgMjAuCitQQVNTIEhhcyBET00g Y29va2llICJzdHJpY3QtYmVjYXVzZS1pbnZhbGlkLVNhbWVTaXRlLXZhbHVlIiB3aXRoIHZhbHVl IDIwLgorUEFTUyBIYXMgRE9NIGNvb2tpZSAibGF4IiB3aXRoIHZhbHVlIDIwLgorUEFTUyBzdWNj ZXNzZnVsbHlQYXJzZWQgaXMgdHJ1ZQorCitURVNUIENPTVBMRVRFCisKZGlmZiAtLWdpdCBhL0xh eW91dFRlc3RzL2h0dHAvdGVzdHMvY29va2llcy9zYW1lLXNpdGUvZmV0Y2gtYWZ0ZXItdG9wLWxl dmVsLWNyb3NzLW9yaWdpbi10by1zYW1lLW9yaWdpbi10by1zYW1lLW9yaWdpbi1yZWRpcmVjdC5o dG1sIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29raWVzL3NhbWUtc2l0ZS9mZXRjaC1hZnRl ci10b3AtbGV2ZWwtY3Jvc3Mtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXJl ZGlyZWN0Lmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uZTZjZjg4NDdjNjJiZjc4MDg4MDgwNjBlNjYzZTU4ODU2 NDNmM2VkNAotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvY29va2ll cy9zYW1lLXNpdGUvZmV0Y2gtYWZ0ZXItdG9wLWxldmVsLWNyb3NzLW9yaWdpbi10by1zYW1lLW9y aWdpbi10by1zYW1lLW9yaWdpbi1yZWRpcmVjdC5odG1sCkBAIC0wLDAgKzEsMTkgQEAKKzwhRE9D VFlQRSBodG1sPgorPGh0bWw+Cis8aGVhZD4KKzxzY3JpcHQgc3JjPSIuLi9yZXNvdXJjZXMvY29v a2llLXV0aWxpdGllcy5qcyI+PC9zY3JpcHQ+Cis8Ym9keT4KKzxzY3JpcHQ+Cithc3luYyBmdW5j dGlvbiBydW5UZXN0KCkKK3sKKyAgICBhd2FpdCByZXNldENvb2tpZXMoKTsKKyAgICBhd2FpdCBz ZXRDb29raWUoInN0cmljdCIsICIyMCIsIHsiU2FtZVNpdGUiOiAiU3RyaWN0IiwgIk1heC1BZ2Ui OiAxMDAsICJwYXRoIjogIi8ifSk7CisgICAgYXdhaXQgc2V0Q29va2llKCJpbXBsaWNpdC1zdHJp Y3QiLCAiMjAiLCB7IlNhbWVTaXRlIjogbnVsbCwgIk1heC1BZ2UiOiAxMDAsICJwYXRoIjogIi8i fSk7CisgICAgYXdhaXQgc2V0Q29va2llKCJzdHJpY3QtYmVjYXVzZS1pbnZhbGlkLVNhbWVTaXRl LXZhbHVlIiwgIjIwIiwgeyJTYW1lU2l0ZSI6ICJpbnZhbGlkIiwgIk1heC1BZ2UiOiAxMDAsICJw YXRoIjogIi8ifSk7CisgICAgYXdhaXQgc2V0Q29va2llKCJsYXgiLCAiMjAiLCB7IlNhbWVTaXRl IjogIkxheCIsICJNYXgtQWdlIjogMTAwLCAicGF0aCI6ICIvIn0pOworICAgIHdpbmRvdy5sb2Nh dGlvbi5ocmVmID0gImh0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9yZXNvdXJjZXMvcmVkaXJlY3QucGhw P3VybD1odHRwJTNBLy8xMjcuMC4wLjElM0E4MDAwL3Jlc291cmNlcy9yZWRpcmVjdC5waHAlM0Z1 cmwlM0RodHRwJTNBLy8xMjcuMC4wLjElM0E4MDAwL2Nvb2tpZXMvc2FtZS1zaXRlL3Jlc291cmNl cy9mZXRjaC1hZnRlci10b3AtbGV2ZWwtc2FtZS1vcmlnaW4tcmVkaXJlY3QucGhwIjsKK30KK3J1 blRlc3QoKTsKKzwvc2NyaXB0PgorPC9ib2R5PgorPC9odG1sPgpkaWZmIC0tZ2l0IGEvTGF5b3V0 VGVzdHMvaHR0cC90ZXN0cy9jb29raWVzL3NhbWUtc2l0ZS9mZXRjaC1hZnRlci10b3AtbGV2ZWwt c2FtZS1vcmlnaW4tcmVkaXJlY3QtZXhwZWN0ZWQudHh0IGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0 cy9jb29raWVzL3NhbWUtc2l0ZS9mZXRjaC1hZnRlci10b3AtbGV2ZWwtc2FtZS1vcmlnaW4tcmVk aXJlY3QtZXhwZWN0ZWQudHh0CmluZGV4IGE2NzUxMzA2ZDNhOWEyZjM0MjBmMDVhMWU1ZjVmZDM5 ZTJkMTE1ZWEuLmU4NGRhYWVkODJmYTg5ZWU4YjUwNDIzZjNjYjk2ODI5MTM4OWFjNTggMTAwNjQ0 Ci0tLSBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvY29va2llcy9zYW1lLXNpdGUvZmV0Y2gtYWZ0 ZXItdG9wLWxldmVsLXNhbWUtb3JpZ2luLXJlZGlyZWN0LWV4cGVjdGVkLnR4dAorKysgYi9MYXlv dXRUZXN0cy9odHRwL3Rlc3RzL2Nvb2tpZXMvc2FtZS1zaXRlL2ZldGNoLWFmdGVyLXRvcC1sZXZl bC1zYW1lLW9yaWdpbi1yZWRpcmVjdC1leHBlY3RlZC50eHQKQEAgLTEsNCArMSw0IEBACi1UZXN0 cyB0aGF0IGEgU2FtZVNpdGUgTGF4IGNvb2tpZSBmb3IgMTI3LjAuMC4xIGlzIHNlbnQgd2l0aCBh IHJlZGlyZWN0IGZyb20gYSBwYWdlIHdpdGggdGhlIHNhbWUgb3JpZ2luLgorVGVzdHMgdGhhdCBT YW1lU2l0ZSBjb29raWVzIGZvciAxMjcuMC4wLjEgYXJlIHNlbnQgd2l0aCBhIHJlZGlyZWN0IGZy b20gYSBwYWdlIHdpdGggdGhlIHNhbWUgb3JpZ2luLgogCiBPbiBzdWNjZXNzLCB5b3Ugd2lsbCBz ZWUgYSBzZXJpZXMgb2YgIlBBU1MiIG1lc3NhZ2VzLCBmb2xsb3dlZCBieSAiVEVTVCBDT01QTEVU RSIuCiAKZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvY29va2llcy9zYW1lLXNp dGUvZmV0Y2gtaW4tZnJhbWUtYWZ0ZXItY3Jvc3Mtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXRvLXNh bWUtb3JpZ2luLXJlZGlyZWN0LWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMv Y29va2llcy9zYW1lLXNpdGUvZmV0Y2gtaW4tZnJhbWUtYWZ0ZXItY3Jvc3Mtb3JpZ2luLXRvLXNh bWUtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXJlZGlyZWN0LWV4cGVjdGVkLnR4dApuZXcgZmlsZSBt b2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw Li5mYWIwN2QyMDAxMjMyOWIyNDQ0NzVjM2Q0ZGYzYTM4OGYyNGYyZjU0Ci0tLSAvZGV2L251bGwK KysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29raWVzL3NhbWUtc2l0ZS9mZXRjaC1pbi1m cmFtZS1hZnRlci1jcm9zcy1vcmlnaW4tdG8tc2FtZS1vcmlnaW4tdG8tc2FtZS1vcmlnaW4tcmVk aXJlY3QtZXhwZWN0ZWQudHh0CkBAIC0wLDAgKzEsMjUgQEAKKworCistLS0tLS0tLQorRnJhbWU6 ICc8IS0tZnJhbWUxLS0+JworLS0tLS0tLS0KK1Rlc3RzIHRoYXQgU2FtZVNpdGUgY29va2llcyBm b3IgMTI3LjAuMC4xIGFyZSBzZW50IHdpdGggYSByZWRpcmVjdCBmcm9tIGEgcGFnZSB3aXRoIHRo ZSBzYW1lIG9yaWdpbi4KKworT24gc3VjY2VzcywgeW91IHdpbGwgc2VlIGEgc2VyaWVzIG9mICJQ QVNTIiBtZXNzYWdlcywgZm9sbG93ZWQgYnkgIlRFU1QgQ09NUExFVEUiLgorCisKK0Nvb2tpZXMg c2VudCB3aXRoIEhUVFAgcmVxdWVzdDoKK1BBU1MgSGFzIGNvb2tpZSAic3RyaWN0IiB3aXRoIHZh bHVlIDIwLgorUEFTUyBIYXMgY29va2llICJpbXBsaWNpdC1zdHJpY3QiIHdpdGggdmFsdWUgMjAu CitQQVNTIEhhcyBjb29raWUgInN0cmljdC1iZWNhdXNlLWludmFsaWQtU2FtZVNpdGUtdmFsdWUi IHdpdGggdmFsdWUgMjAuCitQQVNTIEhhcyBjb29raWUgImxheCIgd2l0aCB2YWx1ZSAyMC4KKwor Q29va2llcyB2aXNpYmxlIGluIERPTToKK1BBU1MgSGFzIERPTSBjb29raWUgInN0cmljdCIgd2l0 aCB2YWx1ZSAyMC4KK1BBU1MgSGFzIERPTSBjb29raWUgImltcGxpY2l0LXN0cmljdCIgd2l0aCB2 YWx1ZSAyMC4KK1BBU1MgSGFzIERPTSBjb29raWUgInN0cmljdC1iZWNhdXNlLWludmFsaWQtU2Ft ZVNpdGUtdmFsdWUiIHdpdGggdmFsdWUgMjAuCitQQVNTIEhhcyBET00gY29va2llICJsYXgiIHdp dGggdmFsdWUgMjAuCitQQVNTIHN1Y2Nlc3NmdWxseVBhcnNlZCBpcyB0cnVlCisKK1RFU1QgQ09N UExFVEUKKwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29raWVzL3NhbWUt c2l0ZS9mZXRjaC1pbi1mcmFtZS1hZnRlci1jcm9zcy1vcmlnaW4tdG8tc2FtZS1vcmlnaW4tdG8t c2FtZS1vcmlnaW4tcmVkaXJlY3QuaHRtbCBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvY29va2ll cy9zYW1lLXNpdGUvZmV0Y2gtaW4tZnJhbWUtYWZ0ZXItY3Jvc3Mtb3JpZ2luLXRvLXNhbWUtb3Jp Z2luLXRvLXNhbWUtb3JpZ2luLXJlZGlyZWN0Lmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5k ZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uYWRhNmUyODQ5Njdh MDVlOWQ2ODU0MzhmNmYxMjQ0ZWEyZDdlYjMwZgotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRl c3RzL2h0dHAvdGVzdHMvY29va2llcy9zYW1lLXNpdGUvZmV0Y2gtaW4tZnJhbWUtYWZ0ZXItY3Jv c3Mtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXJlZGlyZWN0Lmh0bWwKQEAg LTAsMCArMSwxOSBAQAorPCFET0NUWVBFIGh0bWw+Cis8aHRtbD4KKzxoZWFkPgorPHNjcmlwdCBz cmM9Ii4uL3Jlc291cmNlcy9jb29raWUtdXRpbGl0aWVzLmpzIj48L3NjcmlwdD4KKzxib2R5Pgor PHNjcmlwdD4KK2FzeW5jIGZ1bmN0aW9uIHJ1blRlc3QoKQoreworICAgIGF3YWl0IHJlc2V0Q29v a2llcygpOworICAgIGF3YWl0IHNldENvb2tpZSgic3RyaWN0IiwgIjIwIiwgeyJTYW1lU2l0ZSI6 ICJTdHJpY3QiLCAiTWF4LUFnZSI6IDEwMCwgInBhdGgiOiAiLyJ9KTsKKyAgICBhd2FpdCBzZXRD b29raWUoImltcGxpY2l0LXN0cmljdCIsICIyMCIsIHsiU2FtZVNpdGUiOiBudWxsLCAiTWF4LUFn ZSI6IDEwMCwgInBhdGgiOiAiLyJ9KTsKKyAgICBhd2FpdCBzZXRDb29raWUoInN0cmljdC1iZWNh dXNlLWludmFsaWQtU2FtZVNpdGUtdmFsdWUiLCAiMjAiLCB7IlNhbWVTaXRlIjogImludmFsaWQi LCAiTWF4LUFnZSI6IDEwMCwgInBhdGgiOiAiLyJ9KTsKKyAgICBhd2FpdCBzZXRDb29raWUoImxh eCIsICIyMCIsIHsiU2FtZVNpdGUiOiAiTGF4IiwgIk1heC1BZ2UiOiAxMDAsICJwYXRoIjogIi8i fSk7CisgICAgd2luZG93LmxvY2F0aW9uLmhyZWYgPSAiaHR0cDovLzEyNy4wLjAuMTo4MDAwL3Jl c291cmNlcy9lY2hvLWlmcmFtZS1zcmMucGhwP3NyYz1odHRwJTNBLy9sb2NhbGhvc3QlM0E4MDAw L3Jlc291cmNlcy9yZWRpcmVjdC5waHAlM0Z1cmwlM0RodHRwJTNBLy8xMjcuMC4wLjElM0E4MDAw L3Jlc291cmNlcy9yZWRpcmVjdC5waHAlM0Z1cmwlM0RodHRwJTNBLy8xMjcuMC4wLjElM0E4MDAw L2Nvb2tpZXMvc2FtZS1zaXRlL3Jlc291cmNlcy9mZXRjaC1hZnRlci10b3AtbGV2ZWwtc2FtZS1v cmlnaW4tcmVkaXJlY3QucGhwIjsKK30KK3J1blRlc3QoKTsKKzwvc2NyaXB0PgorPC9ib2R5Pgor PC9odG1sPgpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29raWVzL3NhbWUt c2l0ZS9yZXNvdXJjZXMvZmV0Y2gtYWZ0ZXItdG9wLWxldmVsLXNhbWUtb3JpZ2luLXJlZGlyZWN0 LnBocCBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvY29va2llcy9zYW1lLXNpdGUvcmVzb3VyY2Vz L2ZldGNoLWFmdGVyLXRvcC1sZXZlbC1zYW1lLW9yaWdpbi1yZWRpcmVjdC5waHAKaW5kZXggNjQw Njk3YTNkOTlmMDk4Yzg5NzM0YWFmOWNjMDdhOTNkMDQ2ZTQ4NC4uYTJiNjcxMzNjZTYwYzY3OGVj OWUzMDZmZGZiOWRjMGY4ODgxYTkwZiAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0 cy9jb29raWVzL3NhbWUtc2l0ZS9yZXNvdXJjZXMvZmV0Y2gtYWZ0ZXItdG9wLWxldmVsLXNhbWUt b3JpZ2luLXJlZGlyZWN0LnBocAorKysgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL2Nvb2tpZXMv c2FtZS1zaXRlL3Jlc291cmNlcy9mZXRjaC1hZnRlci10b3AtbGV2ZWwtc2FtZS1vcmlnaW4tcmVk aXJlY3QucGhwCkBAIC05LDcgKzksNyBAQAogPHNjcmlwdD4KIHdpbmRvdy5qc1Rlc3RJc0FzeW5j ID0gdHJ1ZTsKIAotZGVzY3JpcHRpb24oIlRlc3RzIHRoYXQgYSBTYW1lU2l0ZSBMYXggY29va2ll IGZvciAxMjcuMC4wLjEgaXMgc2VudCB3aXRoIGEgcmVkaXJlY3QgZnJvbSBhIHBhZ2Ugd2l0aCB0 aGUgc2FtZSBvcmlnaW4uIik7CitkZXNjcmlwdGlvbigiVGVzdHMgdGhhdCBTYW1lU2l0ZSBjb29r aWVzIGZvciAxMjcuMC4wLjEgYXJlIHNlbnQgd2l0aCBhIHJlZGlyZWN0IGZyb20gYSBwYWdlIHdp dGggdGhlIHNhbWUgb3JpZ2luLiIpOwogCiBhc3luYyBmdW5jdGlvbiBjaGVja1Jlc3VsdCgpCiB7 CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL2Nvb2tpZXMvc2FtZS1zaXRlL3Jl c291cmNlcy9mZXRjaC1pbi1mcmFtZS1hZnRlci1jcm9zcy1vcmlnaW4tdG8tc2FtZS1vcmlnaW4t dG8tc2FtZS1vcmlnaW4tcmVkaXJlY3QucGhwIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29r aWVzL3NhbWUtc2l0ZS9yZXNvdXJjZXMvZmV0Y2gtaW4tZnJhbWUtYWZ0ZXItY3Jvc3Mtb3JpZ2lu LXRvLXNhbWUtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXJlZGlyZWN0LnBocApuZXcgZmlsZSBtb2Rl IDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5m ZDk0YjdlMGYwYjQ1ZDM1M2IwNWE0MzRlZWZmODJkMjMwMjE3NGMwCi0tLSAvZGV2L251bGwKKysr IGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9jb29raWVzL3NhbWUtc2l0ZS9yZXNvdXJjZXMvZmV0 Y2gtaW4tZnJhbWUtYWZ0ZXItY3Jvc3Mtb3JpZ2luLXRvLXNhbWUtb3JpZ2luLXRvLXNhbWUtb3Jp Z2luLXJlZGlyZWN0LnBocApAQCAtMCwwICsxLDM1IEBACis8IURPQ1RZUEUgaHRtbD4KKzxodG1s PgorPGhlYWQ+Cis8c2NyaXB0IHNyYz0iL2pzLXRlc3QtcmVzb3VyY2VzL2pzLXRlc3QuanMiPjwv c2NyaXB0PgorPHNjcmlwdCBzcmM9Ii4uLy4uL3Jlc291cmNlcy9jb29raWUtdXRpbGl0aWVzLmpz Ij48L3NjcmlwdD4KKzxzY3JpcHQ+X3NldENhY2hlZENvb2tpZXNKU09OKCc8P3BocCBlY2hvIGpz b25fZW5jb2RlKCRfQ09PS0lFKTsgPz4nKTwvc2NyaXB0PgorPC9oZWFkPgorPGJvZHk+Cis8c2Ny aXB0Pgord2luZG93LmpzVGVzdElzQXN5bmMgPSB0cnVlOworCitkZXNjcmlwdGlvbigiVGVzdHMg dGhhdCBhIFNhbWVTaXRlIExheCBjb29raWUgZm9yIDEyNy4wLjAuMSBpcyBzZW50IHdpdGggYSBy ZWRpcmVjdCBmcm9tIGEgcGFnZSB3aXRoIGEgZGlmZmVyZW50IG9yaWdpbi4iKTsKKworYXN5bmMg ZnVuY3Rpb24gY2hlY2tSZXN1bHQoKQoreworICAgIGRlYnVnKCJDb29raWVzIHNlbnQgd2l0aCBI VFRQIHJlcXVlc3Q6Iik7CisgICAgYXdhaXQgc2hvdWxkTm90SGF2ZUNvb2tpZSgic3RyaWN0Iik7 CisgICAgYXdhaXQgc2hvdWxkTm90SGF2ZUNvb2tpZSgiaW1wbGljaXQtc3RyaWN0Iik7CisgICAg YXdhaXQgc2hvdWxkTm90SGF2ZUNvb2tpZSgic3RyaWN0LWJlY2F1c2UtaW52YWxpZC1TYW1lU2l0 ZS12YWx1ZSIpOworICAgIGF3YWl0IHNob3VsZEhhdmVDb29raWVXaXRoVmFsdWUoImxheCIsICIx OSIpOworCisgICAgZGVidWcoIjxicj5Db29raWVzIHZpc2libGUgaW4gRE9NOiIpOworICAgIHNo b3VsZE5vdEhhdmVET01Db29raWUoInN0cmljdCIpOworICAgIHNob3VsZE5vdEhhdmVET01Db29r aWUoImltcGxpY2l0LXN0cmljdCIpOworICAgIHNob3VsZE5vdEhhdmVET01Db29raWUoInN0cmlj dC1iZWNhdXNlLWludmFsaWQtU2FtZVNpdGUtdmFsdWUiKTsKKyAgICBzaG91bGRIYXZlRE9NQ29v a2llV2l0aFZhbHVlKCJsYXgiLCAiMTkiKTsKKworICAgIGF3YWl0IHJlc2V0Q29va2llcygpOwor ICAgIGZpbmlzaEpTVGVzdCgpOworfQorCitjaGVja1Jlc3VsdCgpOworPC9zY3JpcHQ+Cis8L2Jv ZHk+Cis8L2h0bWw+Cg==