206027 2020-01-09 13:17:51 -0800 Block cross-site top-frame navigations from untrusted iframes 2020-01-09 19:38:52 -0800 1 1 1 Unclassified WebKit Page Loading WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=193076 InRadar P2 Normal --- 1 cdumez cdumez beidson commit-queue dbates esprehn+autocc ews-watchlist ggaren gyuyoung.kim kangil.han webkit-bug-importer oldest_to_newest 1604804 0 cdumez 2020-01-09 13:17:51 -0800 Block cross-site top-frame navigations from untrusted iframes. 1604806 1 cdumez 2020-01-09 13:22:20 -0800 <rdar://problem/58320516> 1604815 2 387263 cdumez 2020-01-09 13:23:07 -0800 Created attachment 387263 Patch 1604928 3 387263 ggaren 2020-01-09 16:55:42 -0800 Comment on attachment 387263 Patch r=me 1604990 4 387263 commit-queue 2020-01-09 19:38:50 -0800 Comment on attachment 387263 Patch Clearing flags on attachment: 387263 Committed r254322: <https://trac.webkit.org/changeset/254322> 1604991 5 commit-queue 2020-01-09 19:38:52 -0800 All reviewed patches have been landed. Closing bug. 387263 2020-01-09 13:23:07 -0800 2020-01-09 19:38:50 -0800 Patch bug-206027-20200109132306.patch text/plain 14052 cdumez U3VidmVyc2lvbiBSZXZpc2lvbjogMjU0MjIzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNTdlOGM4YTZkMWU0ZWVk YzZmOWFkNWQ5MDMzNTViMjdiZTljODE5ZC4uYThhYmIxMmZlZWVhYjg2NGJhMGY0MDdhMTE2MjFh NWI4ZjExZDRjOCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDI4IEBACisyMDIwLTAxLTA5ICBDaHJp cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CisKKyAgICAgICAgQmxvY2sgY3Jvc3Mtc2l0ZSB0 b3AtZnJhbWUgbmF2aWdhdGlvbnMgZnJvbSB1bnRydXN0ZWQgaWZyYW1lcworICAgICAgICBodHRw czovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjA2MDI3CisgICAgICAgIDxyZGFy Oi8vcHJvYmxlbS81ODMyMDUxNj4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMh KS4KKworICAgICAgICBCbG9jayBjcm9zcy1zaXRlIHRvcC1mcmFtZSBuYXZpZ2F0aW9ucyBmcm9t IHVudHJ1c3RlZCBpZnJhbWVzLCB1bmxlc3MgdGhleSBoYXZlIGEgdXNlciBnZXN0dXJlLgorICAg ICAgICBXZSBhbHJlYWR5IGNvbnNpZGVyIHRoaXJkLXBhcnR5IGlmcmFtZXMgYXMgdW50cnVzdGVk LCB3ZSBub3cgYWxzbyB0cmVhdCBmaXJzdC1wYXJ0eSBpZnJhbWVzCisgICAgICAgIGFzIHVudHJ1 c3RlZCBpZiB0aGV5IGFyZSBsb2FkZWQgYm90aCB0aGlyZC1wYXJ0eSBzY3JpcHRzICYgaWZyYW1l cy4KKworICAgICAgICBUZXN0OiBodHRwL3Rlc3RzL3NlY3VyaXR5L2Jsb2NrLXRvcC1sZXZlbC1u YXZpZ2F0aW9ucy1ieS11bnRydXN0ZWQtZmlyc3QtcGFydHktaWZyYW1lcy5odG1sCisKKyAgICAg ICAgKiBkb20vRG9jdW1lbnQuY3BwOgorICAgICAgICAoV2ViQ29yZTo6RG9jdW1lbnQ6OmNhbk5h dmlnYXRlKToKKyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50Ojp3aWxsTG9hZFNjcmlwdEVsZW1l bnQpOgorICAgICAgICAoV2ViQ29yZTo6RG9jdW1lbnQ6OndpbGxMb2FkRnJhbWVFbGVtZW50KToK KyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50Ojppc05hdmlnYXRpb25CbG9ja2VkQnlUaGlyZFBh cnR5SUZyYW1lUmVkaXJlY3RCbG9ja2luZyk6CisgICAgICAgICogZG9tL0RvY3VtZW50Lmg6Cisg ICAgICAgICogZG9tL1NjcmlwdEVsZW1lbnQuY3BwOgorICAgICAgICAoV2ViQ29yZTo6U2NyaXB0 RWxlbWVudDo6cmVxdWVzdENsYXNzaWNTY3JpcHQpOgorICAgICAgICAqIGh0bWwvSFRNTEZyYW1l RWxlbWVudEJhc2UuY3BwOgorICAgICAgICAoV2ViQ29yZTo6SFRNTEZyYW1lRWxlbWVudEJhc2U6 Om9wZW5VUkwpOgorCiAyMDIwLTAxLTA4ICBCcmFkeSBFaWRzb24gIDxiZWlkc29uQGFwcGxlLmNv bT4KIAogICAgICAgICBNYWtlIF9jYWxsQXN5bmNGdW5jdGlvbjp3aXRoQXJndW1lbnRzOiB3b3Jr IHdpdGggcHJvbWlzZXMuCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9kb20vRG9jdW1lbnQu Y3BwIGIvU291cmNlL1dlYkNvcmUvZG9tL0RvY3VtZW50LmNwcAppbmRleCBhYjc3NWI2NjM2NWZm ZDZjNWVlYTBhY2M3ZTczZjU4NjhhYmQ3ZmYxLi5mZGU1ZWYyYjJmNjM1ZGYzN2I3ZTM0YjA4OWIz MWM4ZDI4MGU5YWExIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9kb20vRG9jdW1lbnQuY3Bw CisrKyBiL1NvdXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAKQEAgLTMzNjYsNyArMzM2Niw3 IEBAIGJvb2wgRG9jdW1lbnQ6OmNhbk5hdmlnYXRlKEZyYW1lKiB0YXJnZXRGcmFtZSwgY29uc3Qg VVJMJiBkZXN0aW5hdGlvblVSTCkKICAgICAgICAgcmV0dXJuIGZhbHNlOwogCiAgICAgaWYgKGlz TmF2aWdhdGlvbkJsb2NrZWRCeVRoaXJkUGFydHlJRnJhbWVSZWRpcmVjdEJsb2NraW5nKCp0YXJn ZXRGcmFtZSwgZGVzdGluYXRpb25VUkwpKSB7Ci0gICAgICAgIHByaW50TmF2aWdhdGlvbkVycm9y TWVzc2FnZSgqdGFyZ2V0RnJhbWUsIHVybCgpLCAiVGhlIGZyYW1lIGF0dGVtcHRpbmcgbmF2aWdh dGlvbiBvZiB0aGUgdG9wLWxldmVsIHdpbmRvdyBpcyBjcm9zcy1vcmlnaW4gYW5kIHRoZSB1c2Vy IGhhcyBuZXZlciBpbnRlcmFjdGVkIHdpdGggdGhlIGZyYW1lLiJfcyk7CisgICAgICAgIHByaW50 TmF2aWdhdGlvbkVycm9yTWVzc2FnZSgqdGFyZ2V0RnJhbWUsIHVybCgpLCAiVGhlIGZyYW1lIGF0 dGVtcHRpbmcgbmF2aWdhdGlvbiBvZiB0aGUgdG9wLWxldmVsIHdpbmRvdyBpcyBjcm9zcy1vcmln aW4gb3IgdW50cnVzdGVkIGFuZCB0aGUgdXNlciBoYXMgbmV2ZXIgaW50ZXJhY3RlZCB3aXRoIHRo ZSBmcmFtZS4iX3MpOwogICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgfQogCkBAIC0zNDU2LDYg KzM0NTYsMTYgQEAgYm9vbCBEb2N1bWVudDo6Y2FuTmF2aWdhdGVJbnRlcm5hbChGcmFtZSYgdGFy Z2V0RnJhbWUpCiAgICAgcmV0dXJuIGZhbHNlOwogfQogCit2b2lkIERvY3VtZW50Ojp3aWxsTG9h ZFNjcmlwdEVsZW1lbnQoY29uc3QgVVJMJiBzY3JpcHRVUkwpCit7CisgICAgbV9oYXNMb2FkZWRU aGlyZFBhcnR5U2NyaXB0ID0gbV9oYXNMb2FkZWRUaGlyZFBhcnR5U2NyaXB0IHx8ICFzZWN1cml0 eU9yaWdpbigpLmlzU2FtZU9yaWdpbkFzKFNlY3VyaXR5T3JpZ2luOjpjcmVhdGUoc2NyaXB0VVJM KSk7Cit9CisKK3ZvaWQgRG9jdW1lbnQ6OndpbGxMb2FkRnJhbWVFbGVtZW50KGNvbnN0IFVSTCYg ZnJhbWVVUkwpCit7CisgICAgbV9oYXNMb2FkZWRUaGlyZFBhcnR5RnJhbWUgPSBtX2hhc0xvYWRl ZFRoaXJkUGFydHlGcmFtZSB8fCAhc2VjdXJpdHlPcmlnaW4oKS5pc1NhbWVPcmlnaW5BcyhTZWN1 cml0eU9yaWdpbjo6Y3JlYXRlKGZyYW1lVVJMKSk7Cit9CisKIC8vIFByZXZlbnQgY3Jvc3Mtc2l0 ZSB0b3AtbGV2ZWwgcmVkaXJlY3RzIGZyb20gdGhpcmQtcGFydHkgaWZyYW1lcyB1bmxlc3MgdGhl IHVzZXIgaGFzIGV2ZXIgaW50ZXJhY3RlZCB3aXRoIHRoZSBmcmFtZS4KIGJvb2wgRG9jdW1lbnQ6 OmlzTmF2aWdhdGlvbkJsb2NrZWRCeVRoaXJkUGFydHlJRnJhbWVSZWRpcmVjdEJsb2NraW5nKEZy YW1lJiB0YXJnZXRGcmFtZSwgY29uc3QgVVJMJiBkZXN0aW5hdGlvblVSTCkKIHsKQEAgLTM0NzUs OCArMzQ4NSw5IEBAIGJvb2wgRG9jdW1lbnQ6OmlzTmF2aWdhdGlvbkJsb2NrZWRCeVRoaXJkUGFy dHlJRnJhbWVSZWRpcmVjdEJsb2NraW5nKEZyYW1lJiB0YXJnCiAgICAgaWYgKHNhbmRib3hGbGFn cygpICE9IFNhbmRib3hOb25lKQogICAgICAgICByZXR1cm4gZmFsc2U7CiAKLSAgICAvLyBPbmx5 IHByZXZlbnQgbmF2aWdhdGlvbnMgYnkgdGhpcmQtcGFydHkgaWZyYW1lcy4KLSAgICBpZiAoY2Fu QWNjZXNzQW5jZXN0b3Ioc2VjdXJpdHlPcmlnaW4oKSwgJnRhcmdldEZyYW1lKSkKKyAgICAvLyBP bmx5IHByZXZlbnQgbmF2aWdhdGlvbnMgYnkgdGhpcmQtcGFydHkgaWZyYW1lcyBvciB1bnRydXN0 ZWQgZmlyc3QtcGFydHkgaWZyYW1lcy4KKyAgICBib29sIGlzVW50cnVzdGVkSWZyYW1lID0gbV9o YXNMb2FkZWRUaGlyZFBhcnR5U2NyaXB0ICYmIG1faGFzTG9hZGVkVGhpcmRQYXJ0eUZyYW1lOwor ICAgIGlmIChjYW5BY2Nlc3NBbmNlc3RvcihzZWN1cml0eU9yaWdpbigpLCAmdGFyZ2V0RnJhbWUp ICYmICFpc1VudHJ1c3RlZElmcmFtZSkKICAgICAgICAgcmV0dXJuIGZhbHNlOwogCiAgICAgLy8g T25seSBwcmV2ZW50IGNyb3NzLXNpdGUgbmF2aWdhdGlvbnMuCmRpZmYgLS1naXQgYS9Tb3VyY2Uv V2ViQ29yZS9kb20vRG9jdW1lbnQuaCBiL1NvdXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5oCmlu ZGV4IGE1NWE1YmRmZDhjMDc2ZDczZDI4ZjMyZmM2OTY3Yzk4YTg2YzEwZDAuLjJmOWJiYzc3YjJk MmE1NmNjYWQwYzk1NzU3MjE0YzU2NWYzNTI0ZDggMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3Jl L2RvbS9Eb2N1bWVudC5oCisrKyBiL1NvdXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5oCkBAIC0x MzI3LDYgKzEzMjcsOSBAQCBwdWJsaWM6CiAgICAgU2VjdXJpdHlPcmlnaW4mIHNlY3VyaXR5T3Jp Z2luKCkgY29uc3QgeyByZXR1cm4gKlNlY3VyaXR5Q29udGV4dDo6c2VjdXJpdHlPcmlnaW4oKTsg fQogICAgIFNlY3VyaXR5T3JpZ2luJiB0b3BPcmlnaW4oKSBjb25zdCBmaW5hbCB7IHJldHVybiB0 b3BEb2N1bWVudCgpLnNlY3VyaXR5T3JpZ2luKCk7IH0KIAorICAgIHZvaWQgd2lsbExvYWRTY3Jp cHRFbGVtZW50KGNvbnN0IFVSTCYpOworICAgIHZvaWQgd2lsbExvYWRGcmFtZUVsZW1lbnQoY29u c3QgVVJMJik7CisKICAgICBSZWY8Rm9udEZhY2VTZXQ+IGZvbnRzKCk7CiAKICAgICB2b2lkIGVu c3VyZVBsdWdJbnNJbmplY3RlZFNjcmlwdChET01XcmFwcGVyV29ybGQmKTsKQEAgLTIwNTUsNiAr MjA1OCw4IEBAIHByaXZhdGU6CiAgICAgYm9vbCBtX2lzUnVubmluZ1VzZXJTY3JpcHRzIHsgZmFs c2UgfTsKICAgICBib29sIG1fbWF5QmVEZXRhY2hlZEZyb21GcmFtZSB7IHRydWUgfTsKICAgICBi b29sIG1fc2hvdWxkUHJldmVudEVudGVyaW5nQmFja0ZvcndhcmRDYWNoZUZvclRlc3RpbmcgeyBm YWxzZSB9OworICAgIGJvb2wgbV9oYXNMb2FkZWRUaGlyZFBhcnR5U2NyaXB0IHsgZmFsc2UgfTsK KyAgICBib29sIG1faGFzTG9hZGVkVGhpcmRQYXJ0eUZyYW1lIHsgZmFsc2UgfTsKICNpZiBFTkFC TEUoQVBQTEVfUEFZKQogICAgIGJvb2wgbV9oYXNTdGFydGVkQXBwbGVQYXlTZXNzaW9uIHsgZmFs c2UgfTsKICNlbmRpZgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvZG9tL1NjcmlwdEVsZW1l bnQuY3BwIGIvU291cmNlL1dlYkNvcmUvZG9tL1NjcmlwdEVsZW1lbnQuY3BwCmluZGV4IDE1MTE3 NTE5ZWY5MTM0Njc2NzdkMjU4NjUzY2QyNzIwMTc3ZTgwNGEuLmJiOGRhOTYyZTE0YjViODdlZmJi ZjgyMjIxMDNkMGJlNTE0OWQyYmYgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2RvbS9TY3Jp cHRFbGVtZW50LmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9kb20vU2NyaXB0RWxlbWVudC5jcHAK QEAgLTI5MCw3ICsyOTAsMTAgQEAgYm9vbCBTY3JpcHRFbGVtZW50OjpyZXF1ZXN0Q2xhc3NpY1Nj cmlwdChjb25zdCBTdHJpbmcmIHNvdXJjZVVSTCkKICAgICAgICAgICAgIHNjcmlwdENoYXJzZXQo KSwKICAgICAgICAgICAgIG1fZWxlbWVudC5sb2NhbE5hbWUoKSwKICAgICAgICAgICAgIG1fZWxl bWVudC5pc0luVXNlckFnZW50U2hhZG93VHJlZSgpKTsKLSAgICAgICAgaWYgKHNjcmlwdC0+bG9h ZChtX2VsZW1lbnQuZG9jdW1lbnQoKSwgbV9lbGVtZW50LmRvY3VtZW50KCkuY29tcGxldGVVUkwo c291cmNlVVJMKSkpIHsKKworICAgICAgICBhdXRvIHNjcmlwdFVSTCA9IG1fZWxlbWVudC5kb2N1 bWVudCgpLmNvbXBsZXRlVVJMKHNvdXJjZVVSTCk7CisgICAgICAgIG1fZWxlbWVudC5kb2N1bWVu dCgpLndpbGxMb2FkU2NyaXB0RWxlbWVudChzY3JpcHRVUkwpOworICAgICAgICBpZiAoc2NyaXB0 LT5sb2FkKG1fZWxlbWVudC5kb2N1bWVudCgpLCBzY3JpcHRVUkwpKSB7CiAgICAgICAgICAgICBt X2xvYWRhYmxlU2NyaXB0ID0gV1RGTW92ZShzY3JpcHQpOwogICAgICAgICAgICAgbV9pc0V4dGVy bmFsU2NyaXB0ID0gdHJ1ZTsKICAgICAgICAgfQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUv aHRtbC9IVE1MRnJhbWVFbGVtZW50QmFzZS5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9odG1sL0hUTUxG cmFtZUVsZW1lbnRCYXNlLmNwcAppbmRleCA1MDBmNzE1NjJiN2Q2M2NlNzU3YzczM2E3MjUxZDVm MTNjOWY0NWQxLi4wOTg4ZDlhNzY4YjY2ZGY3ZGQwYTAzZTczMzhlYjMxM2YwMGViNjRjIDEwMDY0 NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9odG1sL0hUTUxGcmFtZUVsZW1lbnRCYXNlLmNwcAorKysg Yi9Tb3VyY2UvV2ViQ29yZS9odG1sL0hUTUxGcmFtZUVsZW1lbnRCYXNlLmNwcApAQCAtOTMsNiAr OTMsOCBAQCB2b2lkIEhUTUxGcmFtZUVsZW1lbnRCYXNlOjpvcGVuVVJMKExvY2tIaXN0b3J5IGxv Y2tIaXN0b3J5LCBMb2NrQmFja0ZvcndhcmRMaXN0CiAgICAgaWYgKCFwYXJlbnRGcmFtZSkKICAg ICAgICAgcmV0dXJuOwogCisgICAgZG9jdW1lbnQoKS53aWxsTG9hZEZyYW1lRWxlbWVudChwYXJl bnRGcmFtZS0+ZG9jdW1lbnQoKS0+Y29tcGxldGVVUkwobV9VUkwpKTsKKwogICAgIFN0cmluZyBm cmFtZU5hbWUgPSBnZXROYW1lQXR0cmlidXRlKCk7CiAgICAgaWYgKGZyYW1lTmFtZS5pc051bGwo KSAmJiBVTkxJS0VMWShkb2N1bWVudCgpLnNldHRpbmdzKCkubmVlZHNGcmFtZU5hbWVGYWxsYmFj a1RvSWRRdWlyaygpKSkKICAgICAgICAgZnJhbWVOYW1lID0gZ2V0SWRBdHRyaWJ1dGUoKTsKZGlm ZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwpp bmRleCBlNWM5NTY0Yzg1MTA5ZDgwODc0NGIxMDYzYTc1ZjYwZDAwMjI2YWIwLi45YmVjZjhmOGEy NWU4NDUxNjdhMjRiOTdiODFkMTFlMzMyZjRiYzZiIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9D aGFuZ2VMb2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTkgQEAKKzIw MjAtMDEtMDkgIENocmlzIER1bWV6ICA8Y2R1bWV6QGFwcGxlLmNvbT4KKworICAgICAgICBCbG9j ayBjcm9zcy1zaXRlIHRvcC1mcmFtZSBuYXZpZ2F0aW9ucyBmcm9tIHVudHJ1c3RlZCBpZnJhbWVz CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMDYwMjcK KyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzU4MzIwNTE2PgorCisgICAgICAgIFJldmlld2VkIGJ5 IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIEFkZCBsYXlvdXQgdGVzdCBjb3ZlcmFnZS4KKwor ICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkvYmxvY2stdG9wLWxldmVsLW5hdmlnYXRpb25z LWJ5LXRoaXJkLXBhcnR5LWlmcmFtZXMtZXhwZWN0ZWQudHh0OgorICAgICAgICAqIGh0dHAvdGVz dHMvc2VjdXJpdHkvYmxvY2stdG9wLWxldmVsLW5hdmlnYXRpb25zLWJ5LXVudHJ1c3RlZC1maXJz dC1wYXJ0eS1pZnJhbWVzLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0 cy9zZWN1cml0eS9ibG9jay10b3AtbGV2ZWwtbmF2aWdhdGlvbnMtYnktdW50cnVzdGVkLWZpcnN0 LXBhcnR5LWlmcmFtZXMuaHRtbDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0 eS9yZXNvdXJjZXMvbmF2aWdhdGUtdG9wLWxldmVsLWZyYW1lLXRvLWZhaWx1cmUtcGFnZS11bnRy dXN0ZWQtaWZyYW1lLmh0bWw6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkv cmVzb3VyY2VzL25hdmlnYXRlLXRvcC10by1lcnJvci1wYWdlLmpzOiBBZGRlZC4KKwogMjAyMC0w MS0wOCAgTXlsZXMgQy4gTWF4ZmllbGQgIDxtbWF4ZmllbGRAYXBwbGUuY29tPgogCiAgICAgICAg IEZpeCBzcGVjaWZpY2F0aW9uIHZpb2xhdGlvbiBpbiBGb250IExvYWRpbmcgQVBJCmRpZmYgLS1n aXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2Jsb2NrLXRvcC1sZXZlbC1uYXZp Z2F0aW9ucy1ieS10aGlyZC1wYXJ0eS1pZnJhbWVzLWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3Rz L2h0dHAvdGVzdHMvc2VjdXJpdHkvYmxvY2stdG9wLWxldmVsLW5hdmlnYXRpb25zLWJ5LXRoaXJk LXBhcnR5LWlmcmFtZXMtZXhwZWN0ZWQudHh0CmluZGV4IDNkMDhmNjljNjQ5N2NhMDYxZjc5NzBj MWU2MWYyMzMwMTRjYzFmNzEuLjkzNTRiZDRmM2ZjOTZmZWE4N2U1ZWYyOTJlMWJiMDZiZjIyZjlm NGYgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvYmxvY2stdG9w LWxldmVsLW5hdmlnYXRpb25zLWJ5LXRoaXJkLXBhcnR5LWlmcmFtZXMtZXhwZWN0ZWQudHh0Cisr KyBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvYmxvY2stdG9wLWxldmVsLW5hdmln YXRpb25zLWJ5LXRoaXJkLXBhcnR5LWlmcmFtZXMtZXhwZWN0ZWQudHh0CkBAIC0xLDcgKzEsNyBA QAotQ09OU09MRSBNRVNTQUdFOiBsaW5lIDY6IFVuc2FmZSBKYXZhU2NyaXB0IGF0dGVtcHQgdG8g aW5pdGlhdGUgbmF2aWdhdGlvbiBmb3IgZnJhbWUgd2l0aCBVUkwgJ2h0dHA6Ly8xMjcuMC4wLjE6 ODAwMC9zZWN1cml0eS9ibG9jay10b3AtbGV2ZWwtbmF2aWdhdGlvbnMtYnktdGhpcmQtcGFydHkt aWZyYW1lcy5odG1sJyBmcm9tIGZyYW1lIHdpdGggVVJMICdodHRwOi8vbG9jYWxob3N0OjgwMDAv c2VjdXJpdHkvcmVzb3VyY2VzL25hdmlnYXRlLXRvcC1sZXZlbC1mcmFtZS10by1mYWlsdXJlLXBh Z2UuaHRtbCcuIFRoZSBmcmFtZSBhdHRlbXB0aW5nIG5hdmlnYXRpb24gb2YgdGhlIHRvcC1sZXZl bCB3aW5kb3cgaXMgY3Jvc3Mtb3JpZ2luIGFuZCB0aGUgdXNlciBoYXMgbmV2ZXIgaW50ZXJhY3Rl ZCB3aXRoIHRoZSBmcmFtZS4KK0NPTlNPTEUgTUVTU0FHRTogbGluZSA2OiBVbnNhZmUgSmF2YVNj cmlwdCBhdHRlbXB0IHRvIGluaXRpYXRlIG5hdmlnYXRpb24gZm9yIGZyYW1lIHdpdGggVVJMICdo dHRwOi8vMTI3LjAuMC4xOjgwMDAvc2VjdXJpdHkvYmxvY2stdG9wLWxldmVsLW5hdmlnYXRpb25z LWJ5LXRoaXJkLXBhcnR5LWlmcmFtZXMuaHRtbCcgZnJvbSBmcmFtZSB3aXRoIFVSTCAnaHR0cDov L2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5L3Jlc291cmNlcy9uYXZpZ2F0ZS10b3AtbGV2ZWwtZnJh bWUtdG8tZmFpbHVyZS1wYWdlLmh0bWwnLiBUaGUgZnJhbWUgYXR0ZW1wdGluZyBuYXZpZ2F0aW9u IG9mIHRoZSB0b3AtbGV2ZWwgd2luZG93IGlzIGNyb3NzLW9yaWdpbiBvciB1bnRydXN0ZWQgYW5k IHRoZSB1c2VyIGhhcyBuZXZlciBpbnRlcmFjdGVkIHdpdGggdGhlIGZyYW1lLgogCiBDT05TT0xF IE1FU1NBR0U6IGxpbmUgNjogU2VjdXJpdHlFcnJvcjogVGhlIG9wZXJhdGlvbiBpcyBpbnNlY3Vy ZS4KLUNPTlNPTEUgTUVTU0FHRTogbGluZSA2OiBVbnNhZmUgSmF2YVNjcmlwdCBhdHRlbXB0IHRv IGluaXRpYXRlIG5hdmlnYXRpb24gZm9yIGZyYW1lIHdpdGggVVJMICdodHRwOi8vMTI3LjAuMC4x OjgwMDAvc2VjdXJpdHkvYmxvY2stdG9wLWxldmVsLW5hdmlnYXRpb25zLWJ5LXRoaXJkLXBhcnR5 LWlmcmFtZXMuaHRtbCcgZnJvbSBmcmFtZSB3aXRoIFVSTCAnaHR0cDovL2xvY2FsaG9zdDo4MDAw L3NlY3VyaXR5L3Jlc291cmNlcy9uYXZpZ2F0ZS10b3AtbGV2ZWwtZnJhbWUtdG8tZmFpbHVyZS1w YWdlLmh0bWwnLiBUaGUgZnJhbWUgYXR0ZW1wdGluZyBuYXZpZ2F0aW9uIG9mIHRoZSB0b3AtbGV2 ZWwgd2luZG93IGlzIGNyb3NzLW9yaWdpbiBhbmQgdGhlIHVzZXIgaGFzIG5ldmVyIGludGVyYWN0 ZWQgd2l0aCB0aGUgZnJhbWUuCitDT05TT0xFIE1FU1NBR0U6IGxpbmUgNjogVW5zYWZlIEphdmFT Y3JpcHQgYXR0ZW1wdCB0byBpbml0aWF0ZSBuYXZpZ2F0aW9uIGZvciBmcmFtZSB3aXRoIFVSTCAn aHR0cDovLzEyNy4wLjAuMTo4MDAwL3NlY3VyaXR5L2Jsb2NrLXRvcC1sZXZlbC1uYXZpZ2F0aW9u cy1ieS10aGlyZC1wYXJ0eS1pZnJhbWVzLmh0bWwnIGZyb20gZnJhbWUgd2l0aCBVUkwgJ2h0dHA6 Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS9yZXNvdXJjZXMvbmF2aWdhdGUtdG9wLWxldmVsLWZy YW1lLXRvLWZhaWx1cmUtcGFnZS5odG1sJy4gVGhlIGZyYW1lIGF0dGVtcHRpbmcgbmF2aWdhdGlv biBvZiB0aGUgdG9wLWxldmVsIHdpbmRvdyBpcyBjcm9zcy1vcmlnaW4gb3IgdW50cnVzdGVkIGFu ZCB0aGUgdXNlciBoYXMgbmV2ZXIgaW50ZXJhY3RlZCB3aXRoIHRoZSBmcmFtZS4KIAogQ09OU09M RSBNRVNTQUdFOiBsaW5lIDY6IFNlY3VyaXR5RXJyb3I6IFRoZSBvcGVyYXRpb24gaXMgaW5zZWN1 cmUuCiBUZXN0IGJsb2NraW5nIG9mIHN1c3BpY2lvdXMgdG9wLWxldmVsIG5hdmlnYXRpb25zIGJ5 IGEgdGhpcmQtcGFydHkgaWZyYW1lCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3Rz L3NlY3VyaXR5L2Jsb2NrLXRvcC1sZXZlbC1uYXZpZ2F0aW9ucy1ieS11bnRydXN0ZWQtZmlyc3Qt cGFydHktaWZyYW1lcy1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3Vy aXR5L2Jsb2NrLXRvcC1sZXZlbC1uYXZpZ2F0aW9ucy1ieS11bnRydXN0ZWQtZmlyc3QtcGFydHkt aWZyYW1lcy1leHBlY3RlZC50eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uMWE3ODY1ZTE5YWQzODM1Mzc3Yjc0NDRk YTU4ODRkZDE5NzFmMzA3NAotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2h0dHAvdGVz dHMvc2VjdXJpdHkvYmxvY2stdG9wLWxldmVsLW5hdmlnYXRpb25zLWJ5LXVudHJ1c3RlZC1maXJz dC1wYXJ0eS1pZnJhbWVzLWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDE2IEBACitDT05TT0xFIE1F U1NBR0U6IFVuc2FmZSBKYXZhU2NyaXB0IGF0dGVtcHQgdG8gaW5pdGlhdGUgbmF2aWdhdGlvbiBm b3IgZnJhbWUgd2l0aCBVUkwgJ2h0dHA6Ly8xMjcuMC4wLjE6ODAwMC9zZWN1cml0eS9ibG9jay10 b3AtbGV2ZWwtbmF2aWdhdGlvbnMtYnktdW50cnVzdGVkLWZpcnN0LXBhcnR5LWlmcmFtZXMuaHRt bCcgZnJvbSBmcmFtZSB3aXRoIFVSTCAnaHR0cDovLzEyNy4wLjAuMTo4MDAwL3NlY3VyaXR5L3Jl c291cmNlcy9uYXZpZ2F0ZS10b3AtbGV2ZWwtZnJhbWUtdG8tZmFpbHVyZS1wYWdlLXVudHJ1c3Rl ZC1pZnJhbWUuaHRtbCcuIFRoZSBmcmFtZSBhdHRlbXB0aW5nIG5hdmlnYXRpb24gb2YgdGhlIHRv cC1sZXZlbCB3aW5kb3cgaXMgY3Jvc3Mtb3JpZ2luIG9yIHVudHJ1c3RlZCBhbmQgdGhlIHVzZXIg aGFzIG5ldmVyIGludGVyYWN0ZWQgd2l0aCB0aGUgZnJhbWUuCisKK0NPTlNPTEUgTUVTU0FHRTog U2VjdXJpdHlFcnJvcjogVGhlIG9wZXJhdGlvbiBpcyBpbnNlY3VyZS4KK0NPTlNPTEUgTUVTU0FH RTogVW5zYWZlIEphdmFTY3JpcHQgYXR0ZW1wdCB0byBpbml0aWF0ZSBuYXZpZ2F0aW9uIGZvciBm cmFtZSB3aXRoIFVSTCAnaHR0cDovLzEyNy4wLjAuMTo4MDAwL3NlY3VyaXR5L2Jsb2NrLXRvcC1s ZXZlbC1uYXZpZ2F0aW9ucy1ieS11bnRydXN0ZWQtZmlyc3QtcGFydHktaWZyYW1lcy5odG1sJyBm cm9tIGZyYW1lIHdpdGggVVJMICdodHRwOi8vMTI3LjAuMC4xOjgwMDAvc2VjdXJpdHkvcmVzb3Vy Y2VzL25hdmlnYXRlLXRvcC1sZXZlbC1mcmFtZS10by1mYWlsdXJlLXBhZ2UtdW50cnVzdGVkLWlm cmFtZS5odG1sJy4gVGhlIGZyYW1lIGF0dGVtcHRpbmcgbmF2aWdhdGlvbiBvZiB0aGUgdG9wLWxl dmVsIHdpbmRvdyBpcyBjcm9zcy1vcmlnaW4gb3IgdW50cnVzdGVkIGFuZCB0aGUgdXNlciBoYXMg bmV2ZXIgaW50ZXJhY3RlZCB3aXRoIHRoZSBmcmFtZS4KKworQ09OU09MRSBNRVNTQUdFOiBTZWN1 cml0eUVycm9yOiBUaGUgb3BlcmF0aW9uIGlzIGluc2VjdXJlLgorVGVzdCBibG9ja2luZyBvZiBz dXNwaWNpb3VzIHRvcC1sZXZlbCBuYXZpZ2F0aW9ucyBieSBhIHVudHJ1c3RlZCBmaXJzdC1wYXJ0 eSBpZnJhbWUKKworT24gc3VjY2VzcywgeW91IHdpbGwgc2VlIGEgc2VyaWVzIG9mICJQQVNTIiBt ZXNzYWdlcywgZm9sbG93ZWQgYnkgIlRFU1QgQ09NUExFVEUiLgorCisKK1BBU1MgQWxsIG5hdmln YXRpb25zIGJ5IHN1YmZyYW1lcyBoYXZlIGJlZW4gYmxvY2tlZAorUEFTUyBzdWNjZXNzZnVsbHlQ YXJzZWQgaXMgdHJ1ZQorCitURVNUIENPTVBMRVRFCisgCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2Jsb2NrLXRvcC1sZXZlbC1uYXZpZ2F0aW9ucy1ieS11bnRy dXN0ZWQtZmlyc3QtcGFydHktaWZyYW1lcy5odG1sIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9z ZWN1cml0eS9ibG9jay10b3AtbGV2ZWwtbmF2aWdhdGlvbnMtYnktdW50cnVzdGVkLWZpcnN0LXBh cnR5LWlmcmFtZXMuaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5iYzVkZTE0N2VkMDEyNjkyZjIwNWZlZjlhYzU3 ZTY2MWUyOTY5MWZjCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9z ZWN1cml0eS9ibG9jay10b3AtbGV2ZWwtbmF2aWdhdGlvbnMtYnktdW50cnVzdGVkLWZpcnN0LXBh cnR5LWlmcmFtZXMuaHRtbApAQCAtMCwwICsxLDIxIEBACis8IURPQ1RZUEUgaHRtbD4KKzxodG1s PgorPGJvZHk+Cis8c2NyaXB0IHNyYz0iL2pzLXRlc3QtcmVzb3VyY2VzL2pzLXRlc3QuanMiPjwv c2NyaXB0PgorPHNjcmlwdD4KK2Rlc2NyaXB0aW9uKCJUZXN0IGJsb2NraW5nIG9mIHN1c3BpY2lv dXMgdG9wLWxldmVsIG5hdmlnYXRpb25zIGJ5IGEgdW50cnVzdGVkIGZpcnN0LXBhcnR5IGlmcmFt ZSIpOworanNUZXN0SXNBc3luYyA9IHRydWU7CitvbmxvYWQgPSAoKSA9PiB7CisgICAgc2V0VGlt ZW91dCgoKSA9PiB7CisgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0ZXN0RnJhbWUn KS5zcmMgPSAiL3NlY3VyaXR5L3Jlc291cmNlcy9uYXZpZ2F0ZS10b3AtbGV2ZWwtZnJhbWUtdG8t ZmFpbHVyZS1wYWdlLXVudHJ1c3RlZC1pZnJhbWUuaHRtbCI7CisgICAgICAgIHNldFRpbWVvdXQo KCkgPT4geworICAgICAgICAgICAgdGVzdFBhc3NlZCgiQWxsIG5hdmlnYXRpb25zIGJ5IHN1YmZy YW1lcyBoYXZlIGJlZW4gYmxvY2tlZCIpOworICAgICAgICAgICAgZmluaXNoSlNUZXN0KCk7Cisg ICAgICAgIH0sIDEwMDApOworICAgIH0sIDEwKTsKK30KKzwvc2NyaXB0PgorPGlmcmFtZSBzcmM9 Ii9zZWN1cml0eS9yZXNvdXJjZXMvbmF2aWdhdGUtdG9wLWxldmVsLWZyYW1lLXRvLWZhaWx1cmUt cGFnZS11bnRydXN0ZWQtaWZyYW1lLmh0bWwiPjwvaWZyYW1lPgorPGlmcmFtZSBpZD0idGVzdEZy YW1lIj48L2lmcmFtZT4KKzwvYm9keT4KKzwvaHRtbD4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3Rz L2h0dHAvdGVzdHMvc2VjdXJpdHkvcmVzb3VyY2VzL25hdmlnYXRlLXRvcC1sZXZlbC1mcmFtZS10 by1mYWlsdXJlLXBhZ2UtdW50cnVzdGVkLWlmcmFtZS5odG1sIGIvTGF5b3V0VGVzdHMvaHR0cC90 ZXN0cy9zZWN1cml0eS9yZXNvdXJjZXMvbmF2aWdhdGUtdG9wLWxldmVsLWZyYW1lLXRvLWZhaWx1 cmUtcGFnZS11bnRydXN0ZWQtaWZyYW1lLmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXgg MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uNTdkZmExZGI2ZWE1YjA4 NTQyNzQ3NzdkZjY0YzQ1MjE5Y2IxMDUwZAotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3Rz L2h0dHAvdGVzdHMvc2VjdXJpdHkvcmVzb3VyY2VzL25hdmlnYXRlLXRvcC1sZXZlbC1mcmFtZS10 by1mYWlsdXJlLXBhZ2UtdW50cnVzdGVkLWlmcmFtZS5odG1sCkBAIC0wLDAgKzEsOCBAQAorPGh0 bWw+Cis8Ym9keT4KK1N1Y2Nlc3MhIFRoZSBuYXZpZ2F0aW9uIHdhcyBibG9ja2VkCis8aWZyYW1l IHNyYz0iaHR0cDovL2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5L3Jlc291cmNlcy9ibGFuay5odG1s Ij48L2lmcmFtZT4KKzxzY3JpcHQgc3JjPSJodHRwOi8vbG9jYWxob3N0OjgwMDAvc2VjdXJpdHkv cmVzb3VyY2VzL25hdmlnYXRlLXRvcC10by1lcnJvci1wYWdlLmpzIj48L3NjcmlwdD4KKzwvc2Ny aXB0PgorPC9ib2R5PgorPC9odG1sPgpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0 cy9zZWN1cml0eS9yZXNvdXJjZXMvbmF2aWdhdGUtdG9wLXRvLWVycm9yLXBhZ2UuanMgYi9MYXlv dXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3Jlc291cmNlcy9uYXZpZ2F0ZS10b3AtdG8tZXJy b3ItcGFnZS5qcwpuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwLi5lMmUyZTY4NDE1ZGVhYzFhYjBmZDhmY2YzM2M4MmFkZGE1 OWUzYzNlCi0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0 eS9yZXNvdXJjZXMvbmF2aWdhdGUtdG9wLXRvLWVycm9yLXBhZ2UuanMKQEAgLTAsMCArMSBAQAor dG9wLmxvY2F0aW9uID0gImh0dHA6Ly9sb2NhbGhvc3Q6ODAwMC9zZWN1cml0eS9yZXNvdXJjZXMv c2hvdWxkLW5vdC1oYXZlLWxvYWRlZC5odG1sIjsK