[ext] NoScript 1.8 - Your Browser is YOURS

[aqz]

could you add a temporarily forbid site feature which would only appear if scripts are currently allowed on the page

[Tolrias]

tolrias, your status bar gave away that you were at noscript the entire time. You've conveniently hidden the 'go' button, so it seems pretty obvious that you just pasted that URL into the address bar to give the impression you were actually there when you were not. Your mouse isn't hovering over the alleged iframe, so we know it wasn't just informing you of what you were hovering on. Also on that pic your tabbar was 'mysteriously' missing.

Not a real strong try there, buddy

Video:
http://dump.no/files/0d5c3ca9613f/no_script_bug.avi
Size: 672KB

and also here is a hotmail account so you can test it your self

Code: Select all

U: no_script_bug@hotmail.com
P: q1w2e3r4

[Some Person]

@SomePerson:
A persistent object whitelist is planned, I just can't commit on a date.

@Giorgio Maone:
Of course, dealing with the clickjack etc. is the highest priority. Thanks for the reply, Giorgio.

[Giorgio Maone]

@Tolrias:
it's probably a bug in redirection through frames.
It's very unlikely to be exploitable, since you're allowing a frame as big as the whole page, hence a location bar different from the content is expected.
However I'm investigating, thanks.

@aqz:
I could, but I won't, sorry. The menu is already bloated enough.

@helpy:
please manually add http://*.ningim:8080 to your whitelist.

@clock_work:
NoScript is doing its job preventing you from posting potentially dangerous HTML fragments from a site to one different (livejournal has this brain-damaged multi-site posting system).
You probably need to setup an exception: I could help more if you sent me the [NoScript XSS] lines appearing in your Tools|Error Log

[Alan Baxter]

Here is my wish: 1) Most complex: A whitelist for each Plugin. For example, "Forbid Java" >" Exceptions" (whitelist of sites where Java is always allowed regardless of other settings). "Forbid IFRAME" > "Exceptions". So, I could put Hushmail in the Java whitelist and Yahoo mail in the IFrame whitelist, etc. But I realize that is a lot of whitelists for you to add.

I'd rather organize it as a list of permissions allowed for each whitelisted site. Something like a separate Plugins panel for each whitelisted site.

This reminds me of the granularity of control I had with AdSubtract PRO v2.3, which I last installed on a Win98 machine in 2001 for use with IE and Netscape. I could specify the permissions for all sites by default and override each of them for any sites I wanted.

[berserker]

Giorgio,

Would it be possible to have a countdown timer or a hotkey to revoke temporary permissions?

I don't always close out tabs for websites for which I had to grant a a temporary permission and have to remember to right click and revoke. (example: I might have 12 eBay tabs open with all scripting forbidden, but need to temporarily grant permission in one tab to leave feedback. Once I'm done with that feedback tab I don't want eBay to have scripting permission, but it will unless I remeber to revoke.)

A configurable timer for this would be cool. ie: revoke all temporary permissions after xx seconds.

[PileOfMush]

Giorgio,

I'm using the AlternaTIFF plug-in (http://alternatiff.com) and Firefox crashes very frequently when I also have NoScript enabled. I've tested it on several XP SP2 and SP3 machines running Firefox 3.0.3, NoScript (fairly up to date versions) and AlternaTIFF 1.8.4. If I disable NoScript, AlternaTIFF works fine.

I emailed AlternaTIFF, but I feel there will probably be no response or fix in the near future. Is there any way you can look into the issue to see if the problem is with NoScript rather than AlternaTIFF? I'm afraid I'm in a situation where I must use AlternaTIFF and want to use NoScript, so if there is an unresolved conflict I'll have to turn off NoScript .

Thank you,
Brandon

[PileOfMush]

I contacted AlternaTIFF a few days ago, but immediately after I followed up with them to add that it only crashed in conjunction with running NoScript, I received a response from AlternaTIFF to say they're looking into it.
I guess I should have had more faith and patience.

[ChrisTheCat]

I'm using NoScript on a Mac after using it on PC for quite a while. On the Mac, the option "Full Domains" doesn't seem to work. I can manually enter a full domain, but when I click on the noscript icon in the browser footer, it only offers me root domains.

[Alan Baxter]

Would it be possible to have a countdown timer or a hotkey to revoke temporary permissions?

NoScript provides a dedicated toolbar button for revoking temporary permissions. Have you tried it out?

[Some Person]

Here is my wish: 1) Most complex: A whitelist for each Plugin. For example, "Forbid Java" >" Exceptions" (whitelist of sites where Java is always allowed regardless of other settings). "Forbid IFRAME" > "Exceptions". So, I could put Hushmail in the Java whitelist and Yahoo mail in the IFrame whitelist, etc. But I realize that is a lot of whitelists for you to add.

I'd rather organize it as a list of permissions allowed for each whitelisted site. Something like a separate Plugins panel for each whitelisted site.

@Alan Baxter:
Cool. I'm interested in results, not how we get there. Having one master site list in NS and then being able to configure permanent, individual plugin permissions for each site (with temporary exceptions still on the menu) sounds like the ultimate NS, and maybe not even too difficult to accomplish. Hope Giorgio has the time to look this over in the near future. Thanks for your time and reply.

P.S. I don't post here much, but I lurk sometimes, and I notice how often you answer questions, taking a lot of the load off Giorgio. Many forums have super-users who answer a huge number of posts, and they rarely get thanked for it. So, on behalf of everyone here you've ever helped, ... Thanks, Alan.

[berserker]

Would it be possible to have a countdown timer or a hotkey to revoke temporary permissions?

NoScript provides a dedicated toolbar button for revoking temporary permissions. Have you tried it out?

I hadn't seen that. That will do the trick (I'd still like a timer, but....)

Thanks.

[Alan Baxter]

sounds like the ultimate NS, and maybe not even too difficult to accomplish. Hope Giorgio has the time to look this over in the near future.

It's been on Giorgio's todo list for a long time. I'm afraid that getting a bug free version out the door isn't trivial and his time is taken away by things with higher priority. I'll understand and be content if it doesn't happen.

Thank you for your kind words of appreciation.

[TrevorHart1]

@Alan Baxter and @Some Person

Thank you both for your responses. I'm sorry I didn't see Some Person's earlier posting but I do like Alan's method better where permissions descend from each whitelisted site.

@Giorgio

Thanks so much for your efforts. It's very much appreciated!

Trevor

[aqz]

can you have it to allow script on a page encoded in base64 without it being enabled globally
<url=data:text/html;base64,PHNjcmlwdCBMQU5HVUFHRT0iSmF2YVNjcmlwdCI+DQovKg0Kb3JpZ2luYWwgY2FsY3VsYXRvciBhdmF
pbGFibGUgYXQgDQpodHRwOi8vd3d3LmphdmFzY3JpcHRraXQuY29tL3NjcmlwdC9jdXQxNTIuc2h0bWwNCio vDQpmdW5jdGlvbiBwYWQoYW55c3RyKSB7DQogICAgICAgIGRvY3VtZW50LmNhbGMuc2hvd251bS52YWx1ZS ArPSBhbnlzdHINCn0NCg0KZnVuY3Rpb24gY2FsY2l0KCkgew0KICAgICAgICBkb2N1bWVudC5jYWxjLnNob3dudW 0udmFsdWUgPSBldmFsKGRvY3VtZW50LmNhbGMuc2hvd251bS52YWx1ZSkNCn0NCg0KZnVuY3Rpb24gY2xlYXJ pdCgpIHsNCiAgICAgICAgZG9jdW1lbnQuY2FsYy5zaG93bnVtLnZhbHVlID0gIiINCn0NCg0KZnVuY3Rpb24gYmFja3 NwYWNlKCkgew0KICAgICAgICBjdXJ2YWx1ZSA9IGRvY3VtZW50LmNhbGMuc2hvd251bS52YWx1ZQ0KICAgICAg ICBjdXJsZW5ndGggPSBjdXJ2YWx1ZS5sZW5ndGgNCiAgICAgICAgY3VydmFsdWUgPSBjdXJ2YWx1ZS5zdWJzd HJpbmcoMCxjdXJsZW5ndGgtMSkNCiAgICAgICAgZG9jdW1lbnQuY2FsYy5zaG93bnVtLnZhbHVlID0gY3VydmFsd WUNCn0NCg0KPC9zY3JpcHQ+DQo8bWFwIE5BTUU9ImNhbGNtYXAiPg0KPGFyZWEgU0hBUEU9IlJFQ1QiIENPT 1JEUz0iMTAsODAsNDAsMTA2IiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnMScpIj4NCjxhcmVhIFNIQVBFPSJSRUNUIi BDT09SRFM9IjQ5LDgwLDc4LDEwNiIgSFJFRj0iamF2YXNjcmlwdDpwYWQoJzInKSI+DQo8YXJlYSBTSEFQRT0iUk VDVCIgQ09PUkRTPSI4OCw3OSwxMTcsMTA2IiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnMycpIj4NCjxhcmVhIFNIQV BFPSJSRUNUIiBDT09SRFM9IjEyOCw4MSwxNTgsMTA1IiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnKycpIj4NCjxhcm VhIFNIQVBFPSJSRUNUIiBDT09SRFM9IjExLDExNSwzOSwxNDEiIEhSRUY9ImphdmFzY3JpcHQ6cGFkKCcwJykiPg 0KPGFyZWEgU0hBUEU9IlJFQ1QiIENPT1JEUz0iNDksMTE1LDc4LDE0MiIgSFJFRj0iamF2YXNjcmlwdDpwYWQoJy 4nKSI+DQo8YXJlYSBTSEFQRT0iUkVDVCIgQ09PUkRTPSI4OSwxMTYsMTE5LDE0MSIgSFJFRj0iamF2YXNjcmlwdDp jYWxjaXQoKSI+DQo8YXJlYSBTSEFQRT0iUkVDVCIgQ09PUkRTPSIxMjgsMTE2LDE1OCwxNDIiIEhSRUY9ImphdmF zY3JpcHQ6cGFkKCctJykiPg0KPGFyZWEgU0hBUEU9IlJFQ1QiIENPT1JEUz0iMTY3LDgwLDE5NCwxMDUiIEhSR UY9ImphdmFzY3JpcHQ6cGFkKCcqJykiPg0KPGFyZWEgU0hBUEU9IlJFQ1QiIENPT1JEUz0iMTY3LDExNiwxOTY sMTQxIiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnLycpIj4NCjxhcmVhIFNIQVBFPSJSRUNUIiBDT09SRFM9IjExLDQz LDM5LDcxIiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnNCcpIj4NCjxhcmVhIFNIQVBFPSJSRUNUIiBDT09SRFM9IjUwL DQ1LDc3LDY5IiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnNScpIj4NCjxhcmVhIFNIQVBFPSJSRUNUIiBDT09SRFM9Ijg 4LDQ0LDExNyw3MSIgSFJFRj0iamF2YXNjcmlwdDpwYWQoJzYnKSI+DQo8YXJlYSBTSEFQRT0iUkVDVCIgQ09PU kRTPSIxMjcsNDQsMTU4LDcxIiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnKScpIj4NCjxhcmVhIFNIQVBFPSJSRUNUIiB DT09SRFM9IjE2NSw0MywxOTYsNzAiIEhSRUY9ImphdmFzY3JpcHQ6YmFja3NwYWNlKCkiPg0KPGFyZWEgU0hB UEU9IlJFQ1QiIENPT1JEUz0iMTAsNyw0MCwzMyIgSFJFRj0iamF2YXNjcmlwdDpwYWQoJzcnKSI+DQo8YXJlYSB TSEFQRT0iUkVDVCIgQ09PUkRTPSI0OCw3LDgxLDM1IiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnOCcpIj4NCjxhcm VhIFNIQVBFPSJSRUNUIiBDT09SRFM9Ijg3LDcsMTE3LDM0IiBIUkVGPSJqYXZhc2NyaXB0OnBhZCgnOScpIj4NCjx hcmVhIFNIQVBFPSJSRUNUIiBDT09SRFM9IjEyNyw3LDE1NiwzNCIgSFJFRj0iamF2YXNjcmlwdDpwYWQoJygn KSI+DQo8YXJlYSBTSEFQRT0iUkVDVCIgQ09PUkRTPSIxNjYsNywxOTUsMzUiIEhSRUY9ImphdmFzY3JpcHQ6Y2x lYXJpdCgpIj4NCjwvbWFwPg0KPGNlbnRlcj48Zm9ybSBOQU1FPSJjYWxjIj4NCiAgIDx0YWJsZSBCT1JERVI9IjE iIEJHQ09MT1I9IiMwMDAwMDAiPg0KICAgICAgPHRyPg0KICAgICAgICAgPHRkIFdJRFRIPSIyMTMiPjxjZW50ZXI+P HA+DQogICAgICAgICAgICA8aW5wdXQgTkFNRT0ic2hvd251bSIgVkFMVUUgTUFYTEVOR1RIPSIyNSIgU0laRT0iM jUiPjwvcD48L2NlbnRlcj4NCiAgICAgICAgIDwvdGQ+DQogICAgICA8L3RyPg0KICAgICAgPHRyPg0KICAgICAgICA gPHRkIFdJRFRIPSIyMTMiPg0KICAgICAgICAgICAgPGltZyBVU0VNQVA9IiNjYWxjbWFwIiBTUkM9ImRhdGE6aW1 hZ2UvZ2lmO2Jhc2U2NCxSMGxHT0RsaHpnQ1pBUGNBQUFBQUFBQUEvM3NBZTN0N2U3Mjl2ZjhBQVAvLy8vL y8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy 8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8 vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8 vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL y8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy 8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8 vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8v Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy95 d0FBQUFBemdDWkFBQUkvd0FCQ0J4SXNLREJnd2dUS2x6SXNLSERoeEFqU3B4SXNhTEZpeGd6YXR6SXNh UEhqeUJEaWh4SnNxVEpreWhUcWx6SnNxWExsekJqeXB4SnN5WkZBemh6NnR6SnMyZE9oRDZEQ3RVSm RLalJua1dQS3NXWmRPblJpUVk2RGdBcWxTckhxUWVqWHJXNkVXdEVyVjI1YXZSYUVPeFlzUm5KRWpTY kZtclZyRzhOc3NXb2R1RGNpM1VGM3JXWWwrSGVpbjMvVWd3Y3Qyemh0WWNkQ3A1SWVDdGN4M0lUN
jVYc2wvSmlpWTNEUHRZY0dUTEV5eEV6bjkwOHVqTm53NTRmZ29Zb3VpMXAxNlpMb3o2dFdtR0EyN2dE TUd4dE1MZnUzV2g3NDNiSU8rRnQ0Sy9sRWtYKzFiYnYzd3FMRDN3T1BhSDA2YmtiWGk5NG5QbnNyRHk5M S85dTJIM2g5dUhEelFjbmlMNjg5ZlhDcTc5UHZwYnA4dm5OR2FaWFR4Kzc3djM0ZlJjZkFBQWl0QjEyeE1FS HdFOTZYZGJYUXFDNUY1MkNBdm1tSFlYdHlYZlFnUVJLR0NCaVNZWG0xa0lGZm1nWGlkbUpkNkp4ejZrNE dZb2FHcWdnZ3c4OXFOQmxKY3JZWDRYSDVWalFnUzN5Rnh0Q1BocDBIWTBKU29SampEb095VjJQSGhw SklYdFIvamhsaDB4S3VTT05UQW41R1l3MVlnaGxsZ09kTjZhTEMrcFhwWlpPMWhmVmZVMSs2UnlaVnU2SV pZb1QyaG1rbHlET21XU2Jkb1hIcDJKZy9pbGdmR3NTQkdTUmRRTDZwS0Y5TmdXYWpRbXRGcWFkakYw cElxWTgwaWtRaDV2bVI5dUtvNzVZYXBya2VRb0FxS3lOZUtxbGtKTC9LbHVrS0tJSjY0VktXcVpyYXJMQ2R paGVyczdhSzEyYXRzcHBxTC95RmF5dnRCSjdyTEdPRGxic3BWOE5ZTzIxMkdhcjdiYldBc1h0dCtCZTYyM jQ1R283YnJub0JwWnV1amExNis2NzhNWXI3N3owMW12dnZmam1xKysrL1Bicjc3OEFCeXp3d0FRWGJM QzlUaTBsYWNKQkxjd3dVdUE5TEpUREVzTTUzcXU3WXN5cnFjSTJkS3V0R1hlTXFzYW5RaGd5czhNQyt5e TF5UUsyckxQUlpycHlyQnlqWERQTWNwSXM4c2VEM3F4eXpKaTkvSFBMMHM2TUs5RElOanYweFR1ZmpM UFN5aHFOcHNrYmo5eDAxVHpuaVRTME9SZXFOZEYzcXNvaG5sOURqU0RMa2Zya1p0bUVxcG5vcDFOYUN QS2NqTUxONmR1S2l0VndnNEpSLzNxbDNHejdUQ1hYWm1OcGVNOVdFNG0zM2JGeDJlV0NqMjhvTkpWa 3gxbjRub0VuL3FTcVpXcTYrS3A2UCs2NFZraUNucXR6aDJjdUdIVnpLLzZmMko0dkxwcmFnYjRaT2VOZEM5 ZHA2d2RseUR1aWRadU9kUERDZjBjNzM2WGp6dlRtdXlPK1d2Qm12dTRwcU1UUEx2cjFGaXZmZHUvVTBS bDk2aVlLdmp2MHNjTk8ydWkxWisvM2p0MTdMNmIwdnpOUC9ySFZodzRXK3BDenRmN1c4OGNNdU9vdz ZoL1ltdWM4TndrcWYzeHJWTzVZTkwyL2ZXNXM5YU1mNTZ4M1FBUW1zSE9uMDVuTk5MZTBsREh2YUF OTTJ2YXVwc0duZVhCd05PTmcxRVJGd2hadWNER2YwNTc0aXNiQ0Z6cXRnek9VMmRiUU5rSWJZdTJHS 3d3aDRmOTZhTUljQmsxcUJmeGgxU0MwTG5TZHE0bmdlaUlVdVNYRktab3JLMWFNNHNHMnlNVXVldkdM WUF5akdNZEl4akthOFl4b1RLTWExOGpHTnRLclloT0xHQndyYU1BNVpnOTVka3dlSHZQSXM2eUZUNFV1U XlJQWxWaXlHd0V4a0R0TW9SOHRkMElhTGhDSGdIUms0WFFvUkI0YVVZUWVPNlFrRzBuSlNSNHhrU0Jj WGhFajJVbE9mcktTaXFRTTFVb0l5VVZLVHBCL2RDV2JIaGxFVDJLU2xLZTA1UkF2dWN2S0VOS0ZvNVNs QW5WcFNWOTZiWkFNbEYzY0tzZElYaFlUTkFVb1FBcFg2YWY0YlU2QWw4TmNNM0Y1UzJoS001UkV2S2 I1b3VXN0pMb09mTnYwWmlvVkVzMTJmak56MUFUZU9JbFdUbVFlTTUwTmllWTZGNkwvVDNCbWtrWG 94R2VxR2lqQmVkcXluOVlzaUR2OWFjeHFtdE9oOW1RZ1F3WGp6b1ZHOUNEZmZDYzhEZW0yaVE3VW9 4OTlxRUVxMms2UmpqS2U1MHdvNWZaNXoxY2lEYUVtaFNSS3VXZFFUaEpQaHBHc1p5enpxZEdMeXBTa kxYVXBQYlVwMUd3eXM2aW1CQUJNZlZyTGNBNUlwV0hEMjZJaUNFcW9sdktmckd5cU0xbnF3MEpXU3B OWDVXWXZoWmszV0c1enBsb1Y2elBCbXN1azloS3RpRVFsU0xNYVYySk9FNmpBYkNWYnU2bEt2SFkxcj JrbEt3YXJpamdtWnBHS1dEenN0cXFvV0hVMU5sdU1WYXdiSjB2WnlscjJzcGpOckdZM3k5bk9ldmF6b0E ydGFHL0N4enZtcjdSN1FhMGVUMXRhaXMxeGNuVjE2MXAvK2RjTi84SjFrMXVkSzJCam05dXArVFdZZXgx cmNJdDUyN0FLRnFmSExaNWRkV3ZiMytxVnRzQ0Y3aysvS3QzQURwZXJKM1d1ZGF2TFc3VmlkN3JUK3U 1MjZZcGI3ekswdUFFVktIbU5POXllbmxXNy9sR21XWkhhMjVpT2x5SHVwVzlEQjRSTjJZcTN1OGxsVlg3M WUxdWRxbmUzU2lXcFZkdkt5d0hQVXBRcjdXOTltU29Ra2pwNHNISmRjSVh2U3QxelN0aThHaFl1ZHdseT RXRTZkWHhTRFM5ekZhcGcrNUxZb2hRbU1YSGhhN2dQQjVoQ0ZsNXdSVFZjNHJMV1VINHBMdWlLbjd2 ZURYTjRtVlFOWVpLWEcrTFpzdk90TkNhZ2kxZmE1UCtXOXpJOTlqRXRBWHpkSWQrM3VSMUdNSHRIUE dhdnFyaktYdVl5bVJtODMrZ1dtVCt2YTc0bGV1SDhaaEhYZWNaaHJxMmJ4Y3ptR3l2cHNaQk5MS0M3Sm VoQlIvYXdoODdpYUJmTjZFWTcrdEdRanJTa0owM3BTbHY2MHBqT3RLWTFIUkFBT3c9PSIgQk9SREVSP SIwIiBIRUlHSFQ9IjE1MyIgV0lEVEg9IjIwNiI+PC9wPjwvY2VudGVyPg0KICAgICAgICAgPC90ZD4NCiAgICAg IDwvdHI+DQogICA8L3RhYmxlPg0KPHNwYW4+VGhlIGJlbG93IHRleHQgYXJlYSBpcyBmb3Igc2NyYXRjaC Bub3Rlcy48L3NwYW4+DQo8cCBjbGFzcz1Nc29Ob3JtYWw+PFRFWFRBUkVBPjwvVEVYVEFSRUE+PC9 wPg0KPC9mb3JtPjwvY2VudGVyPg0KPHN0eWxlPg0KaHRtbCB7YmFja2dyb3VuZC1jb2xvcjojMzgzODM 4O30NCnNwYW4ge2NvbG9yOndoaXRlO2ZvbnQtc2l6ZToxMnB4O21hcmdpbi1ib3R0b206LTEwcHg7fQ0 KaW5wdXQge2JhY2tncm91bmQtY29sb3I6IzM4MzgzODtjb2xvcjp3aGl0ZTt9DQouTXNvTm9ybWFsIHRl eHRhcmVhIHttYXJnaW4tdG9wOi0xMHB4O292ZXJmbG93LXk6YXV0bzt3aWR0aDoxMDAlO2hlaWdodDo 1MyU7LW1vei1ib3JkZXItcmFkaXVzOjVweDtib3JkZXI6IDVweCBpbnNldCB3aGl0ZTtiYWNrZ3JvdW5kO iAjMzgzODM4O2NvbG9yOiB3aGl0ZTt9DQo8L3N0eWxlPg==>base 64 link</url>