197759 2019-05-09 16:48:53 -0700 Support wasm-unsafe-eval 2022-03-10 11:12:08 -0800 1 1 1 Unclassified WebKit WebAssembly Safari Technology Preview Mac macOS 10.14 RESOLVED DUPLICATE 235408 InRadar P2 Normal --- 1 rob webkit-unassigned chi187 dave dpaddock fpizlo hotaru katherine_cheney keith_miller webkit-bug-importer ysuzuki oldest_to_newest 1534896 0 rob 2019-05-09 16:48:53 -0700 The following issue mentions Chrome, but the same applies to Safari: https://github.com/WebAssembly/content-security-policy/issues/7 It's impossible to use wasm in Safari without the `unsafe-eval` directive. This proposal describes a new directive, `wasm-unsafe-eval`, that would allow executing arbitrary wasm code without having to also allow JS eval(): https://github.com/WebAssembly/content-security-policy/blob/master/proposals/CSP.md Chrome has the following issue open to support that directive: https://bugs.chromium.org/p/chromium/issues/detail?id=948834 We would prefer to use the stream APIs with proper CSP support, but WK does not yet even have the stream functions: https://bugs.webkit.org/show_bug.cgi?id=173105 Given that and the fact that Chrome has the stream functions but not proper CSP support (https://bugs.chromium.org/p/chromium/issues/detail?id=961485), an acceptable alternative for now would be to support `wasm-unsafe-eval` in the `script-src` directive. Note that Firefox and Edge allow wasm compilation and execution without any change to the CSP whatsoever. That behavior is effectively the same as adding `wasm-unsafe-eval` automatically. We aren't advocating that position either and would prefer to see those browsers disable wasm unless `wasm-unsafe-eval` is present or an acceptable SRI hash or origin is present. 1534936 1 webkit-bug-importer 2019-05-09 19:54:18 -0700 <rdar://problem/50649468> 1535198 2 369601 rob 2019-05-10 14:56:56 -0700 Created attachment 369601 WASM and CSP test cases Here is a set of tests and a summary of major browser behavior. 1798590 3 dpaddock 2021-09-29 14:59:16 -0700 It appears Chrome plans to include support for this in M96: https://groups.google.com/a/chromium.org/g/blink-dev/c/5U_SgZ3r8QI/m/pnOzK2S3BAAJ 1809624 4 chi187 2021-10-28 03:42:39 -0700 wasm CSP is on phase 3 now (as voted on October 26 2021 wasm CG meeting) 1850185 5 katherine_cheney 2022-03-10 11:12:08 -0800 *** This bug has been marked as a duplicate of bug 235408 *** 369601 2019-05-10 14:56:56 -0700 2019-05-10 14:56:56 -0700 WASM and CSP test cases wasm-csp.zip application/zip 14304 rob UEsDBAoAAAAAAGF+qk4AAAAAAAAAAAAAAAAJABAAd2FzbS1jc3AvVVgMAGLy1VxF8tVc9wEUAFBL AwQUAAgACAAvfKpOAAAAAAAAAAAAAAAAEwAQAHdhc20tY3NwL2luZGV4Lmh0bWxVWAwAYfLVXCru 1Vz3ARQArVbfb5swEH7vX3HjqZMSAwlJyESYtv6QqmlqtUyr9jQZfIA1gpFtmua/32Haqsqyqevy ZPv8+Xzfd3eG5M359dnX7zcXUNlNnZ4kjwNykZ4AJBu0HPKKa4N25XW2GMce7fsDIMmU2DlcFaa3 H9afgTcCztY38BWNhTNu0BA2TE96TJteNXBWabXBEVgCGAhHMBm5Q3NouTHADeB9i7lFwZwTAzO3 vwChoFF21EMEmlzLDAXIBhIOlcZi5VXWtuad72ddaVje3yO7DVO69Fv/celLYzo0viBesn4vxWo5 D6N45qVuA4ZV4vOUwZUFaaBSLd1jK25dzDCFraxr4LVRkCHk6g41AbIdYdBxJ7maEg0USj/4e6QS OSoxkIPOWM0t/nf0URxPo6fo3WqIPsk0+Gl/L0W3lbaCb6iNVA0s5ixg08UyYAGcXheFzCWv4WMn a/EWct5wvYPTeTTOpH0LhN/w/HoNYcDCiEUs8dtn6byUFLy6Hz2RJ8Vk2aheEmws7da7EZBUnDRT hYMNqcd7zDsSoFek1Up0OUI0AbzDhlCqKysHLqQm0Q0ZatHrzRtArZU+RPDyEs7pfE0Z03AhpO3Z zhcsyMLlixmtecG1fCpQF9/kD8VJCRWKMv0PdbnF7Ke0Lq9EavuDjCwvZZ/LcLlYzJZeSiYY5kMm H9pgHFOxaY2mVRSSVa+4YDENg9nDBW5+vEIf/B3KyiAoscirRtWq3MGNxjuJ2xF8wRrpjYA4hNMH WDhh9CLcYvZJWgijeRCzkIVLNvtb4izPakwT+/gc9SY9TPqpSBPfiudrg3Wxb+sawwsc4x2v97fW X66g4qbat2+52YwPnqOZPhiJbIzl1BjU+/veEllovkEwOl95rvz8kPUPskdCClutvCgIPKhQlpUd FkRsOPQbwwPOJsd0Nj2ms+gVzl6i8Npq5BvZlC+IYXZMQvNjOlsc01n8H1LT6DqMRtdw9B8wdBx9 491/wy9QSwcIVonMQ+QCAABPCAAAUEsDBAoAAAAAAG9+qk4AAAAAAAAAAAAAAAAJABAAX19NQUNP U1gvVVgMAGLy1Vxi8tVc9wEUAFBLAwQKAAAAAABvfqpOAAAAAAAAAAAAAAAAEgAQAF9fTUFDT1NY L3dhc20tY3NwL1VYDABi8tVcYvLVXPcBFABQSwMEFAAIAAgAL3yqTgAAAAAAAAAAAAAAAB4AEABf X01BQ09TWC93YXNtLWNzcC8uX2luZGV4Lmh0bWxVWAwAYfLVXCru1Vz3ARQAY2AVY2dgYmDwTUxW 8A9WiFCAApAYAycQGwHxQiAG8S8zEAUcQ0KCoEyQjhlAbI2mhBEhLpqcn6uXWFCQk6pXWJpYlJhX kpmXylCob2BgYWhtmpximphoYG7tVJRYlmpt4WbgZGRuaarr4mjmpGti7Oqq62RmZqxr4mJoYmlq auHo6GTKAABQSwcIAcTNyIYAAADTAAAAUEsDBBQACAAIADhsqk4AAAAAAAAAAAAAAAASABAAd2Fz bS1jc3AvLkRTX1N0b3JlVVgMABvS1Vwb0tVc9wEUAO2XMU7DMBSG/xc8GLF4g9EXYOgJMFE4QS8A aREgtUoVysCWiXtxAUbuwQ2w6x+UKmUoQmpV3ic5n+XYL7Es2X4ApHyajgAHwCK7OMZGLMuAgjax yCrGLSZY4hw3aDfHUvaMtHancdWauGLt2vrVeIj1dlV/jm11fC5jj8fZ3Wg8aeaLXpQtI8ybqqpn TR1H2pe3i/eP8vXyN1GmfxBlcT+YjaIoyqEjWfZkt7+hKMoekvYHTwe6yxa+L2jTG+NoTwe6yxb2 K2hDW9rRng50l81NS5h8CL8szFDE0Z4OW01ZUf4NR1kunf9XP+f/iqIcMGKqcVXiOyEYkM5aH8v1 1wCsXwTYZtg3HcVnvXZPB7rL1ouAouyKT1BLBwjDURrxFwEAAAQYAABQSwMEFAAIAAgAOGyqTgAA AAAAAAAAAAAAAB0AEABfX01BQ09TWC93YXNtLWNzcC8uXy5EU19TdG9yZVVYDAAb0tVcG9LVXPcB FABjYBVjZ2BiYPBNTFbwD1aIUIACkBgDJxAbAbEbEIP4FUDMAFPhIMCAAziGhARBmRUwXegAAFBL BwgLiMA4NQAAAHgAAABQSwMECgAAAAAANWyqTgAAAAAAAAAAAAAAAA8AEAB3YXNtLWNzcC90ZXN0 cy9VWAwAYvLVXBbS1Vz3ARQAUEsDBBQACAAIAHhsqk4AAAAAAAAAAAAAAAAVABAAd2FzbS1jc3Av dGVzdHMvNS5odG1sVVgMAEDy1VyU0tVc9wEUAG2RwU6EMBCG7zxF7YXdA5CwmphYmmxwL14kYRPj sZRBamjBdlB5ewtk4xI9NZ3/69fOlN08Pufn1+JEWtQdD9hlAVHzgBCmAQWRrbAOMKMjNtE9/Q1a xCGCj1F9ZjTvDYLBqAQ5WoVTVPSdkhMlcg0y6qRVA0bOShI66JrQm1iyXsWqvp4WcZvyMzgkdz5K ebCUDjwvC78/LMRggf9xPbBkrl/4p3KDv0B1dA501U2xMg6FQSUQSrQgtDJvuwZQtrswTrRQJv4S Tof7/VZ5+h5AItQb8W26hY4SR9FdI0TVGZ1n4MVgKb/i1yaIbyKjcfLfu+J3N59YwXla65i8f/mn H1BLBwh9sqO4AgEAAL8BAABQSwMECgAAAAAAb36qTgAAAAAAAAAAAAAAABgAEABfX01BQ09TWC93 YXNtLWNzcC90ZXN0cy9VWAwAYvLVXGLy1Vz3ARQAUEsDBBQACAAIAHhsqk4AAAAAAAAAAAAAAAAg ABAAX19NQUNPU1gvd2FzbS1jc3AvdGVzdHMvLl81Lmh0bWxVWAwAQPLVXJTS1Vz3ARQAY2AVY2dg YmDwTUxW8A9WiFCAApAYAycQGwHxQiAG8S8zEAUcQ0KCoEyQjhlAbI2mhBEhLpqcn6uXWFCQk6pX WJpYlJhXkpmXylCob2BgYWhtmpximphoYG7tVJRYlmpt4WbgZGRuaarr4mjmpGti7Oqq62RmZqxr 4mJoYmlqauHo6GTKAABQSwcIAcTNyIYAAADTAAAAUEsDBBQACAAIADJ0qk4AAAAAAAAAAAAAAAAm ABAAd2FzbS1jc3AvdGVzdHMvaW5zdGFudGlhdGVTdHJlYW1pbmcuanNVWAwAQPLVXB/g1Vz3ARQA nZAxa8MwEIV3/4pDSyRoZQqdElJoS4duhRQylot9iQW2ZKRLGxP833ty7K1Tt9M93fseryxhH7EH 5+Ejhs4lAg5QIVcNyCs5fxItMXp2yLTjSNjdlrDDI0ZXzHc2UgrtN2ljuSGvtYHtE+zp8JwSdYd2 sH/56CMJSq9s2aHz9gdTt7qDKzSENcW0llG9Bs/k+f5z6EmtQWHft04iuuDLfKBghNGYmSsxzi2n DL8WMIevCLYwK3ZZbUSuQ3XuxNyeiN9ayuPL8F5rVQlUElFU4ksXnkOIzXJu6dKHKH5Y11/Bk358 MJtiNHZqT1OMIS4p/oGZ7i0HqSr3ZHJa+S0dCzlrN8KE3BS/UEsHCBZFc+0IAQAAyAEAAFBLAwQU AAgACAAydKpOAAAAAAAAAAAAAAAAMQAQAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzLy5faW5zdGFu dGlhdGVTdHJlYW1pbmcuanNVWAwAQPLVXB/g1Vz3ARQAY2AVY2dgYmDwTUxW8A9WiFCAApAYAycQ GwHxQiAG8S8zEAUcQ0KCoEyQjhlAbI2mhBEhLpqcn6uXWFCQk6pXWJpYlJhXkpmXylCob2BgYWht mpximphoYG7tVJRYlmpt4WbgZGRuaarr4mjmpGti7Oqq62RmZqxr4mJoYmlqauHo6GTKAABQSwcI AcTNyIYAAADTAAAAUEsDBBQACAAIADFXqk4AAAAAAAAAAAAAAAAYABAAd2FzbS1jc3AvdGVzdHMv LkRTX1N0b3JlVVgMAH2t1Vx9rdVc9wEUAO2YOw7CMBBEZ40LSzQuKd1wAG5gRckJuAAFV6D30SHa EbIUUlAlgnmS9VaKf2kcTwDY8LhfgAwgwY0zPpLYFoSuNs4hhBBCiH1jrnTcdhtCiB0ynw+FrnRz G58HOnZjMl3oSje3sV+gI53oTBe60s3NQ8sYPowrGxOKMYVYoetXryzE33Bw5fn7P2E1/wshfhiL 43Uc8A4Eyw6vduvqhvVLQPCfhadubKEr3dy6CAixFU9QSwcIagCIbbIAAAAEGAAAUEsDBBQACAAI ADFXqk4AAAAAAAAAAAAAAAAjABAAX19NQUNPU1gvd2FzbS1jc3AvdGVzdHMvLl8uRFNfU3RvcmVV WAwAfa3VXH2t1Vz3ARQAY2AVY2dgYmDwTUxW8A9WiFCAApAYAycQGwGxGxCD+BVAzABT4SDAgAM4 hoQEQZkVMF3oAABQSwcIC4jAODUAAAB4AAAAUEsDBBQACAAIAA9sqk4AAAAAAAAAAAAAAAAVABAA d2FzbS1jc3AvdGVzdHMvNC5odG1sVVgMAEDy1VzO0dVc9wEUAI2RzWqEMBSF9z5Fmo3tIgrOLAqN gcHOppsKDpQuY7xihhhtcp3Wt68/DNVdVyE5J9+5nMsfXt+zy2d+Jg22RgT8foCsREAIbwElUY10 HjClA9bsmf4JDWLP4GvQt5RmnUWwyApQg9M4srwzWo2UqFVIqVdO98i8UyT0YOqQhN/St2ywXtbA 4CZN+DLRebzG87KrxiWsScQFPJLjJCUiWJ4OIivy6X5YHL0D8S8+j2frHfFW7AgfUJ68h7Y0Y6St R2lRS4THckTwT/uv558eFEK1AxyTvemkcJBmayG6SulcidQWHBUb/zo/meZPaRRv8qOrn42rPvez FjNhl239AlBLBwjBEOh1/wAAAMUBAABQSwMEFAAIAAgAD2yqTgAAAAAAAAAAAAAAACAAEABfX01B Q09TWC93YXNtLWNzcC90ZXN0cy8uXzQuaHRtbFVYDABA8tVcztHVXPcBFABjYBVjZ2BiYPBNTFbw D1aIUIACkBgDJxAbAfFCIAbxLzMQBRxDQoKgTJCOGUBsjaaEESEumpyfq5dYUJCTqldYmliUmFeS mZfKUKhvYGBhaG2anGKamGhgbu1UlFiWam3hZuBkZG5pquviaOaka2Ls6qrrZGZmrGviYmhiaWpq 4ejoZMoAAFBLBwgBxM3IhgAAANMAAABQSwMEFAAIAAgAeGyqTgAAAAAAAAAAAAAAABUAEAB3YXNt LWNzcC90ZXN0cy84Lmh0bWxVWAwAQPLVXJTS1Vz3ARQAjZE9b4MwEIZ3foXrxclgkEiHSAVLEc3S pUhEqjo65iiujKH2kZZ/Xz4UNUgdMln2+/g53zl5eH7NTu/5kdTYGBEk1wVkKQJCkgZQElVL5wFT 2mPF9/QvqBE7Dl+9vqQ0ay2CRV6A6p3Ggeet0WqgRC1BSr1yukPunSLMg6kYYd/SN7y3XlbA4SIN G+VJtFRPzm05zLXqWJzAI9mPUSyC+WgnsiIf97uZ6ByIe/RPSTShV8VLsTK8wfngPTRnM4TaepQW tUQo0IFstP3YVICq3rAwaqS24WRn2+1aefzpQCGUK/FjvIYOCntpbhGiy5ROkxrF4Ki44Ze+yNhX SsPov3eFn366sYDTAJfJjf75N38BUEsHCFcqcVkRAQAA5QEAAFBLAwQUAAgACAB4bKpOAAAAAAAA AAAAAAAAIAAQAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzLy5fOC5odG1sVVgMAEDy1VyU0tVc9wEU AGNgFWNnYGJg8E1MVvAPVohQgAKQGAMnEBsB8UIgBvEvMxAFHENCgqBMkI4ZQGyNpoQRIS6anJ+r l1hQkJOqV1iaWJSYV5KZl8pQqG9gYGFobZqcYpqYaGBu7VSUWJZqbeFm4GRkbmmq6+Jo5qRrYuzq qutkZmasa+JiaGJpamrh6OhkygAAUEsHCAHEzciGAAAA0wAAAFBLAwQUAAgACAAPbKpOAAAAAAAA AAAAAAAAFQAQAHdhc20tY3NwL3Rlc3RzLzMuaHRtbFVYDABA8tVcztHVXPcBFACtUU1Pg0AUvPdX rHuphtBGqNZE2KShTUwvtoJWe1uW17LKl+yDln9fPtIId08vuzM7M2/Wulm+Ot7XZkVCjCM2sq4D eMBGhFgxICci5LkCtGmBB/2J/gEhYqbDbyFLmzppgpCg7oIocomVvkkjKSpKRAfYVIlcZqirXJCx gugwrkfIjYdHfa+dvf1snpbvu7f79GO+fYlPsZFuD6AVyQl+lMbXn8dyaZZHe/xcB7CmXULLT4Oq zRMazAOFxKwhg43aK5M57qY+my0jy4H9VwRr2qhdXdbuwGQH/kIpiP2omshEIU9QcoRbv0JQd8On q3MGAiEYCMyMIWkhsOBRn0JkYNOmWC4TyCnr8bsVSb2iTSfTnv/kWzXEDm8q7LqrZds/vwBQSwcI +sTuLiMBAAALAgAAUEsDBBQACAAIAA9sqk4AAAAAAAAAAAAAAAAgABAAX19NQUNPU1gvd2FzbS1j c3AvdGVzdHMvLl8zLmh0bWxVWAwAQPLVXM7R1Vz3ARQAY2AVY2dgYmDwTUxW8A9WiFCAApAYAycQ GwHxQiAG8S8zEAUcQ0KCoEyQjhlAbI2mhBEhLpqcn6uXWFCQk6pXWJpYlJhXkpmXylCob2BgYWht mpximphoYG7tVJRYlmpt4WbgZGRuaarr4mjmpGti7Oqq62RmZqxr4mJoYmlqauHo6GTKAABQSwcI AcTNyIYAAADTAAAAUEsDBBQACAAIAA9sqk4AAAAAAAAAAAAAAAAVABAAd2FzbS1jc3AvdGVzdHMv Mi5odG1sVVgMAEDy1VzN0dVc9wEUAIWRzWqEMBSF9z5Fmo3tIgpOF4XGwGBnM5sRHChdxnjFDDHa 5DrUt68/DNVVVyE53z3ncsKfPi7Z9Ss/kQZbIwL+OEBWIiCEt4CSqEY6D5jSAWv2Rv+EBrFn8D3o e0qzziJYZAWowWkcWd4ZrUZK1Cqk1Cune2TeKRJ6MHVIwsF6WQODuzTh+2TM4zWZl101LjlNIq7g kSSTlIhgeTqIrMin+2EhegfiP2sez9Rj+lzshj+hPHoPbWnGSFuP0qKWCM/liOBf9qOnnx4UQrUz eE320FHhIM0WIbpK6VyE1BYcFRt+XZ1Mq6c0ijf50c3P4KrP1aydTLbLH/0CUEsHCN4fErT7AAAA uwEAAFBLAwQUAAgACAAPbKpOAAAAAAAAAAAAAAAAIAAQAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3Rz Ly5fMi5odG1sVVgMAEDy1VzN0dVc9wEUAGNgFWNnYGJg8E1MVvAPVohQgAKQGAMnEBsB8UIgBvEv MxAFHENCgqBMkI4ZQGyNpoQRIS6anJ+rl1hQkJOqV1iaWJSYV5KZl8pQqG9gYGFobZqcYpqYaGBu 7VSUWJZqbeFm4GRkbmmq6+Jo5qRrYuzqqutkZmasa+JiaGJpamrh6OhkygAAUEsHCAHEzciGAAAA 0wAAAFBLAwQUAAgACAAMcKpOAAAAAAAAAAAAAAAAFQAQAHdhc20tY3NwL3Rlc3RzLzEuaHRtbFVY DABA8tVcWNjVXPcBFABlUb1ugzAQ3vMUVy9pB0BNlko1lhDN0qVIRKo6GnMRjsCm9hGVt68BpSHq ZPm+X5/5w9tHfvwqDtBQ14oNvx4oa7EB4B2SBNVI55FSNtApemE3oCHqI/we9CVluTWEhqIS1eA0 jVFhW61GBmoBUuaV0z1F3inYemxP29dgxZMli1e2HmfnZieO6AmeA7QTm3m0F3lZhPt+ZvQOxX8z nkzzK/+9vKN/YpV5j13VjrE2nqQhLQkfq5HQP91LDz89KsL6ZiAyCPlw0baVpK0BdM66oPrTZIoG 2a4jQdcpm94utUHHxCpj6Q6he8riZFUnPvuJuODTbpalBNv5W34BUEsHCE2qTcn9AAAArgEAAFBL AwQUAAgACAAMcKpOAAAAAAAAAAAAAAAAIAAQAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzLy5fMS5o dG1sVVgMAEDy1VxY2NVc9wEUAGNgFWNnYGJg8E1MVvAPVohQgAKQGAMnEBsB8UIgBvEvMxAFHENC gqBMkI4ZQGyNpoQRIS6anJ+rl1hQkJOqV1iaWJSYV5KZl8pQqG9gYGFobZqcYpqYaGBu7VSUWJZq beFm4GRkbmmq6+Jo5qRrYuzqqutkZmasa+JiaGJpamrh6OhkygAAUEsHCAHEzciGAAAA0wAAAFBL AwQUAAgACABVhapOAAAAAAAAAAAAAAAAGAAQAHdhc20tY3NwL3Rlc3RzL21haW4ud2FzbVVYDABi 8tVcYv7VXPcBFAA9yksOQEAQBcD3ZtDBSuIAruIkTDIT8ekmrKxcnZVaF8KlBMCCIx8+3hFZzoNk 7olGWldo0v28HSTEOOyWgKqkoEPPpUYt22zrbNPX0WQWNLHin19QSwcID2DDVVQAAABhAAAAUEsD BBQACAAIAFWFqk4AAAAAAAAAAAAAAAAjABAAX19NQUNPU1gvd2FzbS1jc3AvdGVzdHMvLl9tYWlu Lndhc21VWAwAYvLVXGL+1Vz3ARQAY2AVY2dgYmDwTUxW8A9WiFCAApAYAycQGwHxQiAG8S8zEAUc Q0KCoEyQjhlAbI2mhBEhLpqcn6uXWFCQk6pXWJpYlJhXkpmXylCob2BgYWhtmpximphoYG7tVJRY lmpt4WbgZGRuaarr4mjmpGti7Oqq62RmZqxr4mJoYmlqauHo6GTKAABQSwcIAcTNyIYAAADTAAAA UEsDBBQACAAIAFWFqk4AAAAAAAAAAAAAAAAWABAAd2FzbS1jc3AvdGVzdHMvbWFpbi5yc1VYDABi 8tVcYv7VXPcBFABTjs7Lj89NzEvPSY3lKihNUkitKEktylNQclZSSMtTSExJic/PS9WosFLINDbS VNC1A9EK1VwKQFChoK1gyFULAFBLBwhsBTBwQQAAAEMAAABQSwMEFAAIAAgAVYWqTgAAAAAAAAAA AAAAACEAEABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8uX21haW4ucnNVWAwAYvLVXGL+1Vz3ARQA Y2AVY2dgYmDwTUxW8A9WiFCAApAYAycQGwHxQiAG8S8zEAUcQ0KCoEyQjhlAbI2mhBEhLpqcn6uX WFCQk6pXWJpYlJhXkpmXylCob2BgYWhtmpximphoYG7tVJRYlmpt4WbgZGRuaarr4mjmpGti7Oqq 62RmZqxr4mJoYmlqauHo6GTKAABQSwcIAcTNyIYAAADTAAAAUEsDBBQACAAIAEJsqk4AAAAAAAAA AAAAAAAdABAAd2FzbS1jc3AvdGVzdHMvaW5zdGFudGlhdGUuanNVWAwAYvLVXCzS1Vz3ARQAnY8x j8IwDIX3/oqIhWQxQmKrQILTDcwMjChNXajUOshxBRXiv+O2VLffFud9fu+5Qgk3u4RV62uCh0/t 0oHckCxjukdKaLa7zJh5As/s+0NXVcjWZV+26AWTguaMxT4lbIumh5qSeJLaC06A+3PuGhn5l1pP XNAg81Vg/spVLmPoWiSBK8pvg8Pz0B9LuwiRREsjL9QXn/Kjs4pqM68DPu+R1c+X5SUS2s3a5dnb QfDD1cgceW7xj5hxHySehGu6Wje0VTrFRpMHbUoYI/PsA1BLBwjTFMzW0AAAAGoBAABQSwMEFAAI AAgAQmyqTgAAAAAAAAAAAAAAACgAEABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8uX2luc3RhbnRp YXRlLmpzVVgMAGLy1Vws0tVc9wEUAGNgFWNnYGJg8E1MVvAPVohQgAKQGAMnEBsB8UIgBvEvMxAF HENCgqBMkI4ZQGyNpoQRIS6anJ+rl1hQkJOqV1iaWJSYV5KZl8pQqG9gYGFobZqcYpqYaGBu7VSU WJZqbeFm4GRkbmmq6+Jo5qRrYuzqqutkZmasa+JiaGJpamrh6OhkygAAUEsHCAHEzciGAAAA0wAA AFBLAwQUAAgACAB4bKpOAAAAAAAAAAAAAAAAFQAQAHdhc20tY3NwL3Rlc3RzLzcuaHRtbFVYDABA 8tVclNLVXPcBFACtUk1vgkAUvPsrtntBY4AUbW1SIDFq0nipFlpbb+vykG1ZoOwD5d+Xj5hK0mNP L7szOzNvsvbN8nnhf2xWJEIZuwP7MoAF7oAQWwIywiOWK0CHFhjqD/QXiBAzHb4LUTp0kSYICeoe 8CIXWOmbNBa8ooR3gEMVz0WGuso50RTEoVaPiFl39/p+fPb301lavu5ebtO32fZJnqSVbkMYF8kJ vtSYrd+P5XJSHh2t9rfNLqB9SIOqjRNZrg8KyayGLHfQXk3chbepz5OWkeXg/lOCR9ts1C4ua69n soPDXCmQh7gyRKKQJSgYgoc5MCmS4zAE5NFQM0zJRGKcmJLaaNSXXJ0z4AhBT3hq9UlzjgWLrylE BA5t+q6FIafuFb9bndSrO9Qw/8plfKrmRUdsOu7KrfXbP/EDUEsHCCfghrQ2AQAAKwIAAFBLAwQU AAgACAB4bKpOAAAAAAAAAAAAAAAAIAAQAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzLy5fNy5odG1s VVgMAEDy1VyU0tVc9wEUAGNgFWNnYGJg8E1MVvAPVohQgAKQGAMnEBsB8UIgBvEvMxAFHENCgqBM kI4ZQGyNpoQRIS6anJ+rl1hQkJOqV1iaWJSYV5KZl8pQqG9gYGFobZqcYpqYaGBu7VSUWJZqbeFm 4GRkbmmq6+Jo5qRrYuzqqutkZmasa+JiaGJpamrh6OhkygAAUEsHCAHEzciGAAAA0wAAAFBLAwQU AAgACAB4bKpOAAAAAAAAAAAAAAAAFQAQAHdhc20tY3NwL3Rlc3RzLzYuaHRtbFVYDABA8tVclNLV XPcBFACFkU9rhDAQxe9+ijSX7B6i4JZSqAYWu5deKrhQeszGsaaYaJNxW799/cPSFRZ6Csl785uZ l+Tu+TU7vucHUqNpRJBcDpClCAhJDKAkqpbOA6a0x4o/0j+hRuw4fPX6nNKstQgWeQGqdxoHnreN VgMlahFS6pXTHXLvFGEemooR1lsvK+Bwlg17GsFJtHROTm05zH3qWBzBI3kYpVgE89NOZEU+3nez o3Mg/kMn0eS6VL8Uq+I3OO29B3NqhlBbj9KilggFOpBG249NBajqDQsjI7UNv6U3bLtdIw8/HSiE cgW+j9emvcJeNtcWosuUTgGNYHBUXPmXlci4UkrD6NZc4aefKhbjlN0S2sifP/EXUEsHCGw837QP AQAA3AEAAFBLAwQUAAgACAB4bKpOAAAAAAAAAAAAAAAAIAAQAF9fTUFDT1NYL3dhc20tY3NwL3Rl c3RzLy5fNi5odG1sVVgMAEDy1VyU0tVc9wEUAGNgFWNnYGJg8E1MVvAPVohQgAKQGAMnEBsB8UIg BvEvMxAFHENCgqBMkI4ZQGyNpoQRIS6anJ+rl1hQkJOqV1iaWJSYV5KZl8pQqG9gYGFobZqcYpqY aGBu7VSUWJZqbeFm4GRkbmmq6+Jo5qRrYuzqqutkZmasa+JiaGJpamrh6OhkygAAUEsHCAHEzciG AAAA0wAAAFBLAwQUAAgACAA1bKpOAAAAAAAAAAAAAAAAGQAQAF9fTUFDT1NYL3dhc20tY3NwLy5f dGVzdHNVWAwAYvLVXBbS1Vz3ARQAY2AVY2dgYmDwTUxW8A9WiFCAApAYAycQGwHxQiAG8S8zEAUc Q0KCoEyQjhlAbI2mhBEhLpqcn6uXWFCQk6pXWJpYlJhXkpmXylCob2BgYWhtmpximphoYG7tVJRY lmpt4WbgZGRuaarr4mjmpGti7Oqq62RmZqxr4mJoYmlqauHo6GTKAABQSwcIAcTNyIYAAADTAAAA UEsDBBQACAAIAJl6qk4AAAAAAAAAAAAAAAASABAAd2FzbS1jc3AvUkVBRE1FLm1kVVgMAGLy1Vwy 69Vc9wEUACWKwQrCMBAF7/sVD7ynsV5Kb9KzKLTgOTSLDcRNyK79fqUypxnmhOd1viFIxDQ/sLAa pqCsRGcHqW8kUQs5U//X9hEot53p4nCvLNjM6th13h2Mg/cepcE2RoixsSpeaf+NSY64FtGS2dEX UEsHCDGxKolrAAAAfAAAAFBLAwQUAAgACACZeqpOAAAAAAAAAAAAAAAAHQAQAF9fTUFDT1NYL3dh c20tY3NwLy5fUkVBRE1FLm1kVVgMAGLy1Vwy69Vc9wEUAGNgFWNnYGJg8E1MVvAPVohQgAKQGAMn EBsB8UIgBvEvMxAFHENCgqBMkI4ZQGyNpoQRIS6anJ+rl1hQkJOqV1iaWJSYV5KZl8pQqG9gYGFo bZqcYpqYaGBu7VSUWJZqbeFm4GRkbmmq6+Jo5qRrYuzqqutkZmasa+JiaGJpamrh6OhkygAAUEsH CAHEzciGAAAA0wAAAFBLAwQUAAgACABzeqpOAAAAAAAAAAAAAAAAGgAQAHdhc20tY3NwL3BhY2th Z2UtbG9jay5qc29uVVgMAGLy1Vzq6tVc9wEUAK1UXXOaQBR9z6/I+GoRFjSazvSBiJ9VERQxPmQG YYXl210QMZP/XkBJNbW1zfSB4XIue/aevWfv6939fcXXPFj5el9JNOJROgmpCJKIVL7kuR3EBAV+ ngY1psYcUTfQnQ1y4eI9Cwocw22MMCQZEOEYFpgBQ+gb0NdRgb9mWIbqloYJjN6BX7cCxVZFJmMM 3B008pQVRSH5StMYmohEOK35oWeTWoBN+sRJU2VEFTy1yDz85EJ+BE2MojQnI5bWACz1YCxSUXy2 w01XH4Hn+rZtYT6QRnJ/Z7MHlFq6x0hD1xJ13kqdEe0AZ65M1zCotprjiTyXDYcVBwMyWK7jLrdn E9ToLM1v3yrFpm/HvStQJ5EWIf03mutZpew/ay5JM9FlSBVMt1W7PubFUGE3TVlrGR4IVUYAsZ4q e2nQcVqy3cU7WTTB87a9YGK4iB+tg4lmnfUslcXtUhBQX+4Y23Y94fhEnK9ZblpXpEz1mYZ3O5SK L1pfeblsdJa04AkHl7iHjh59YWv1jxkfedmxvK9jzrOBT22yH4h1PMlsOXf5Q4xdyg5Q0YKXemHx U/LtsnswI8Lk944Fn3BsSZp37xRSBdOfuwcoVdpbXZV8r+/myXChp8ECpSu8V4nFfHBdcaDXK2bP TuJvK7ZgVqsFqWL1bY91aSD4Sm8ahKK8QoyPqu0dbpt9qdFNO3xfHs34MH5Wxx5ez5Jgwo59uulU ey7XMoe+3ExTYeU8qKNlgnqBAYaiOhG+95KPN+tkjmsqc7v8+63KCTOd+YsqGG4rPQyfNivBSeS4 anNTw2C1PpEbvU2ftQeq5Y3A6vAU6NVllRt2IsRaax6rejqsAldrA4GlFVoFGl1tQ9NmaNHvKGy6 tn+ZIWdm/389LUkLxcfwb/oLqADwA2I+PolCk/SbjvI4BsZjI/CkQPpQ9+U1vN4o7hOln/Fm1Z99 UQXfLQGDaeewGvQSswXAmPNmgerut4iVNEW/OcbOBsLp9l+dG2fz5frUZz4huyTNNJchVTDdEjyf T/gHfjM3DjvNW/Xr4y6eHNqht5wFZcfu8uft7gdQSwcIdZ7v6h8DAAAaCAAAUEsDBBQACAAIAId6 qk4AAAAAAAAAAAAAAAAVABAAd2FzbS1jc3AvcGFja2FnZS5qc29uVVgMAGLy1VwN69Vc9wEUAE2M MQ6EMAwE+7wicn1EcKK6x5wUmS1SEKLYggLxdxKCEKXHM7sbayn6GfSztHmZO5bUKUSFPvU3QTiH pGGJVWlwRZYbDK53faNNlEL3claAvF7DYFGvganw455NiBMiB7yCxyvNf3SD+16FOcwJUEsHCJp6 fH9uAAAAqAAAAFBLAwQUAAgACABhfqpOAAAAAAAAAAAAAAAAEwAQAF9fTUFDT1NYLy5fd2FzbS1j c3BVWAwAYvLVXEXy1Vz3ARQAY2AVY2dgYmDwTUxW8A9WiFCAApAYAycQGzEwMLIAaSCf0YwBGXAw 4ACOISFBEBZYxwkgzkNTwgQVN2ZgUEnOz9VLLCjISdXLTS1JTEksSbSKz/Z18SxJzQ0tTi0KSUwv Buv5DcTWDAyiCPWFpYlFiXklmXmpDEkFOZnFJQYGCxnDnHJKU7lMOLigTmBEshIZCBbqGxhYGFqb JqeYJiYamFs7FSWWpVpbuBk4GZlbmuq6OJo56ZoYu7rqOpmZGeuauBiaWJqaWjg6OpkyAABQSwcI g9AK0M4AAAA2AQAAUEsBAhUDCgAAAAAAYX6qTgAAAAAAAAAAAAAAAAkADAAAAAAAAAAAQMBBAAAA AHdhc20tY3NwL1VYCABi8tVcRfLVXFBLAQIVAxQACAAIAC98qk5WicxD5AIAAE8IAAATAAwAAAAA AAAAAEDtgTcAAAB3YXNtLWNzcC9pbmRleC5odG1sVVgIAGHy1Vwq7tVcUEsBAhUDCgAAAAAAb36q TgAAAAAAAAAAAAAAAAkADAAAAAAAAAAAQP1BbAMAAF9fTUFDT1NYL1VYCABi8tVcYvLVXFBLAQIV AwoAAAAAAG9+qk4AAAAAAAAAAAAAAAASAAwAAAAAAAAAAED9QaMDAABfX01BQ09TWC93YXNtLWNz cC9VWAgAYvLVXGLy1VxQSwECFQMUAAgACAAvfKpOAcTNyIYAAADTAAAAHgAMAAAAAAAAAABApIHj AwAAX19NQUNPU1gvd2FzbS1jc3AvLl9pbmRleC5odG1sVVgIAGHy1Vwq7tVcUEsBAhUDFAAIAAgA OGyqTsNRGvEXAQAABBgAABIADAAAAAAAAAAAQKSBxQQAAHdhc20tY3NwLy5EU19TdG9yZVVYCAAb 0tVcG9LVXFBLAQIVAxQACAAIADhsqk4LiMA4NQAAAHgAAAAdAAwAAAAAAAAAAECkgSwGAABfX01B Q09TWC93YXNtLWNzcC8uXy5EU19TdG9yZVVYCAAb0tVcG9LVXFBLAQIVAwoAAAAAADVsqk4AAAAA AAAAAAAAAAAPAAwAAAAAAAAAAEDtQbwGAAB3YXNtLWNzcC90ZXN0cy9VWAgAYvLVXBbS1VxQSwEC FQMUAAgACAB4bKpOfbKjuAIBAAC/AQAAFQAMAAAAAAAAAABA7YH5BgAAd2FzbS1jc3AvdGVzdHMv NS5odG1sVVgIAEDy1VyU0tVcUEsBAhUDCgAAAAAAb36qTgAAAAAAAAAAAAAAABgADAAAAAAAAAAA QP1BTggAAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzL1VYCABi8tVcYvLVXFBLAQIVAxQACAAIAHhs qk4BxM3IhgAAANMAAAAgAAwAAAAAAAAAAECkgZQIAABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8u XzUuaHRtbFVYCABA8tVclNLVXFBLAQIVAxQACAAIADJ0qk4WRXPtCAEAAMgBAAAmAAwAAAAAAAAA AEDtgXgJAAB3YXNtLWNzcC90ZXN0cy9pbnN0YW50aWF0ZVN0cmVhbWluZy5qc1VYCABA8tVcH+DV XFBLAQIVAxQACAAIADJ0qk4BxM3IhgAAANMAAAAxAAwAAAAAAAAAAECkgeQKAABfX01BQ09TWC93 YXNtLWNzcC90ZXN0cy8uX2luc3RhbnRpYXRlU3RyZWFtaW5nLmpzVVgIAEDy1Vwf4NVcUEsBAhUD FAAIAAgAMVeqTmoAiG2yAAAABBgAABgADAAAAAAAAAAAQKSB2QsAAHdhc20tY3NwL3Rlc3RzLy5E U19TdG9yZVVYCAB9rdVcfa3VXFBLAQIVAxQACAAIADFXqk4LiMA4NQAAAHgAAAAjAAwAAAAAAAAA AECkgeEMAABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8uXy5EU19TdG9yZVVYCAB9rdVcfa3VXFBL AQIVAxQACAAIAA9sqk7BEOh1/wAAAMUBAAAVAAwAAAAAAAAAAEDtgXcNAAB3YXNtLWNzcC90ZXN0 cy80Lmh0bWxVWAgAQPLVXM7R1VxQSwECFQMUAAgACAAPbKpOAcTNyIYAAADTAAAAIAAMAAAAAAAA AABApIHJDgAAX19NQUNPU1gvd2FzbS1jc3AvdGVzdHMvLl80Lmh0bWxVWAgAQPLVXM7R1VxQSwEC FQMUAAgACAB4bKpOVypxWREBAADlAQAAFQAMAAAAAAAAAABA7YGtDwAAd2FzbS1jc3AvdGVzdHMv OC5odG1sVVgIAEDy1VyU0tVcUEsBAhUDFAAIAAgAeGyqTgHEzciGAAAA0wAAACAADAAAAAAAAAAA QKSBEREAAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzLy5fOC5odG1sVVgIAEDy1VyU0tVcUEsBAhUD FAAIAAgAD2yqTvrE7i4jAQAACwIAABUADAAAAAAAAAAAQO2B9REAAHdhc20tY3NwL3Rlc3RzLzMu aHRtbFVYCABA8tVcztHVXFBLAQIVAxQACAAIAA9sqk4BxM3IhgAAANMAAAAgAAwAAAAAAAAAAECk gWsTAABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8uXzMuaHRtbFVYCABA8tVcztHVXFBLAQIVAxQA CAAIAA9sqk7eHxK0+wAAALsBAAAVAAwAAAAAAAAAAEDtgU8UAAB3YXNtLWNzcC90ZXN0cy8yLmh0 bWxVWAgAQPLVXM3R1VxQSwECFQMUAAgACAAPbKpOAcTNyIYAAADTAAAAIAAMAAAAAAAAAABApIGd FQAAX19NQUNPU1gvd2FzbS1jc3AvdGVzdHMvLl8yLmh0bWxVWAgAQPLVXM3R1VxQSwECFQMUAAgA CAAMcKpOTapNyf0AAACuAQAAFQAMAAAAAAAAAABA7YGBFgAAd2FzbS1jc3AvdGVzdHMvMS5odG1s VVgIAEDy1VxY2NVcUEsBAhUDFAAIAAgADHCqTgHEzciGAAAA0wAAACAADAAAAAAAAAAAQKSB0RcA AF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzLy5fMS5odG1sVVgIAEDy1VxY2NVcUEsBAhUDFAAIAAgA VYWqTg9gw1VUAAAAYQAAABgADAAAAAAAAAAAQO2BtRgAAHdhc20tY3NwL3Rlc3RzL21haW4ud2Fz bVVYCABi8tVcYv7VXFBLAQIVAxQACAAIAFWFqk4BxM3IhgAAANMAAAAjAAwAAAAAAAAAAECkgV8Z AABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8uX21haW4ud2FzbVVYCABi8tVcYv7VXFBLAQIVAxQA CAAIAFWFqk5sBTBwQQAAAEMAAAAWAAwAAAAAAAAAAEDtgUYaAAB3YXNtLWNzcC90ZXN0cy9tYWlu LnJzVVgIAGLy1Vxi/tVcUEsBAhUDFAAIAAgAVYWqTgHEzciGAAAA0wAAACEADAAAAAAAAAAAQKSB 2xoAAF9fTUFDT1NYL3dhc20tY3NwL3Rlc3RzLy5fbWFpbi5yc1VYCABi8tVcYv7VXFBLAQIVAxQA CAAIAEJsqk7TFMzW0AAAAGoBAAAdAAwAAAAAAAAAAEDtgcAbAAB3YXNtLWNzcC90ZXN0cy9pbnN0 YW50aWF0ZS5qc1VYCABi8tVcLNLVXFBLAQIVAxQACAAIAEJsqk4BxM3IhgAAANMAAAAoAAwAAAAA AAAAAECkgescAABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8uX2luc3RhbnRpYXRlLmpzVVgIAGLy 1Vws0tVcUEsBAhUDFAAIAAgAeGyqTifghrQ2AQAAKwIAABUADAAAAAAAAAAAQO2B1x0AAHdhc20t Y3NwL3Rlc3RzLzcuaHRtbFVYCABA8tVclNLVXFBLAQIVAxQACAAIAHhsqk4BxM3IhgAAANMAAAAg AAwAAAAAAAAAAECkgWAfAABfX01BQ09TWC93YXNtLWNzcC90ZXN0cy8uXzcuaHRtbFVYCABA8tVc lNLVXFBLAQIVAxQACAAIAHhsqk5sPN+0DwEAANwBAAAVAAwAAAAAAAAAAEDtgUQgAAB3YXNtLWNz cC90ZXN0cy82Lmh0bWxVWAgAQPLVXJTS1VxQSwECFQMUAAgACAB4bKpOAcTNyIYAAADTAAAAIAAM AAAAAAAAAABApIGmIQAAX19NQUNPU1gvd2FzbS1jc3AvdGVzdHMvLl82Lmh0bWxVWAgAQPLVXJTS 1VxQSwECFQMUAAgACAA1bKpOAcTNyIYAAADTAAAAGQAMAAAAAAAAAABApIGKIgAAX19NQUNPU1gv d2FzbS1jc3AvLl90ZXN0c1VYCABi8tVcFtLVXFBLAQIVAxQACAAIAJl6qk4xsSqJawAAAHwAAAAS AAwAAAAAAAAAAEDtgWcjAAB3YXNtLWNzcC9SRUFETUUubWRVWAgAYvLVXDLr1VxQSwECFQMUAAgA CACZeqpOAcTNyIYAAADTAAAAHQAMAAAAAAAAAABApIEiJAAAX19NQUNPU1gvd2FzbS1jc3AvLl9S RUFETUUubWRVWAgAYvLVXDLr1VxQSwECFQMUAAgACABzeqpOdZ7v6h8DAAAaCAAAGgAMAAAAAAAA AABApIEDJQAAd2FzbS1jc3AvcGFja2FnZS1sb2NrLmpzb25VWAgAYvLVXOrq1VxQSwECFQMUAAgA CACHeqpOmnp8f24AAACoAAAAFQAMAAAAAAAAAABA7YF6KAAAd2FzbS1jc3AvcGFja2FnZS5qc29u VVgIAGLy1VwN69VcUEsBAhUDFAAIAAgAYX6qToPQCtDOAAAANgEAABMADAAAAAAAAAAAQICBOykA AF9fTUFDT1NYLy5fd2FzbS1jc3BVWAgAYvLVXEXy1VxQSwUGAAAAACkAKQBwDQAAWioAAAAA