From 6dc383b7b43ffd0a3da6b4bfd15fe49a22e44835 Mon Sep 17 00:00:00 2001 From: esheri3 Date: Fri, 2 Feb 2007 17:56:23 +0000 Subject: [PATCH] Modified all "Aspect" lessons to include the Aspect logo. The logo links to http://aspectsecurity.com. Moved the "OWASP" logo and added an Aspect logo on the main.jsp page. Adjusted the padding of the "warning" text to prevent "Start" button overlap. git-svn-id: http://webgoat.googlecode.com/svn/trunk@112 4033779f-a91e-0410-96ef-6bf7bf53c507 --- .../webgoat/lessons/AccessControlMatrix.java | 10 +++++++++- .../CrossSiteScripting.java | 3 ++- .../org/owasp/webgoat/lessons/Encoding.java | 10 +++++++++- .../lessons/FailOpenAuthentication.java | 10 +++++++++- .../owasp/webgoat/lessons/ForgotPassword.java | 3 ++- .../webgoat/lessons/HiddenFieldTampering.java | 10 +++++++++- .../org/owasp/webgoat/lessons/HtmlClues.java | 10 +++++++++- .../org/owasp/webgoat/lessons/HttpOnly.java | 3 ++- .../webgoat/lessons/JavaScriptValidation.java | 10 +++++++++- .../RoleBasedAccessControl.java | 3 ++- .../lessons/SQLInjection/SQLInjection.java | 3 ++- .../webgoat/lessons/ThreadSafetyProblem.java | 10 +++++++++- .../lessons/WeakAuthenticationCookie.java | 10 +++++++++- .../owasp/webgoat/lessons/WeakSessionID.java | 3 ++- .../org/owasp/webgoat/session/CreateDB.java | 2 +- .../main/project/WebContent/css/webgoat.css | 2 +- .../WebContent/images/logos/aspect.jpg | Bin 33338 -> 3208 bytes .../project/WebContent/images/logos/owasp.jpg | Bin 15976 -> 3565 bytes webgoat/main/project/WebContent/webgoat.jsp | 10 +++++----- 19 files changed, 91 insertions(+), 21 deletions(-) diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/AccessControlMatrix.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/AccessControlMatrix.java index 968ffaf58..770399108 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/AccessControlMatrix.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/AccessControlMatrix.java @@ -5,6 +5,8 @@ import java.util.List; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; +import org.apache.ecs.html.A; +import org.apache.ecs.html.IMG; import org.apache.ecs.html.P; import org.owasp.webgoat.session.ECSFactory; import org.owasp.webgoat.session.WebSession; @@ -44,7 +46,8 @@ import org.owasp.webgoat.session.WebSession; public class AccessControlMatrix extends LessonAdapter { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + private final static String RESOURCE = "Resource"; private final static String USER = "User"; @@ -253,4 +256,9 @@ public class AccessControlMatrix extends LessonAdapter List resources = getResources(roles); return (resources.contains(resource)); } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/CrossSiteScripting/CrossSiteScripting.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/CrossSiteScripting/CrossSiteScripting.java index 786d3ea27..295245b73 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/CrossSiteScripting/CrossSiteScripting.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/CrossSiteScripting/CrossSiteScripting.java @@ -10,6 +10,7 @@ import java.util.Map; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.html.IMG; +import org.apache.ecs.html.A; import org.owasp.webgoat.lessons.AbstractLesson; import org.owasp.webgoat.lessons.Category; import org.owasp.webgoat.lessons.LessonAdapter; @@ -59,7 +60,7 @@ import org.owasp.webgoat.session.WebSession; */ public class CrossSiteScripting extends LessonAdapter { - public final static IMG ASPECT_LOGO = new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0); + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); public final static String DESCRIPTION = "description"; diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Encoding.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Encoding.java index 4dfc40c0c..bef70a8b8 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Encoding.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Encoding.java @@ -22,7 +22,9 @@ import javax.crypto.spec.PBEParameterSpec; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; +import org.apache.ecs.html.A; import org.apache.ecs.html.B; +import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; import org.apache.ecs.html.P; import org.apache.ecs.html.TD; @@ -68,7 +70,8 @@ import org.owasp.webgoat.util.HtmlEncoder; public class Encoding extends LessonAdapter { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + private final static String INPUT = "input"; private final static String KEY = "key"; @@ -1033,4 +1036,9 @@ public class Encoding extends LessonAdapter i2e.put( entities[i][1], entities[i][0] ); } } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/FailOpenAuthentication.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/FailOpenAuthentication.java index 5175d5c14..2866bd42d 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/FailOpenAuthentication.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/FailOpenAuthentication.java @@ -4,6 +4,8 @@ import java.util.ArrayList; import java.util.List; import org.apache.ecs.Element; +import org.apache.ecs.html.A; +import org.apache.ecs.html.IMG; import org.owasp.webgoat.session.WebSession; /******************************************************************************* @@ -40,7 +42,8 @@ import org.owasp.webgoat.session.WebSession; */ public class FailOpenAuthentication extends WeakAuthenticationCookie { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + /** * Description of the Method * @@ -182,4 +185,9 @@ public class FailOpenAuthentication extends WeakAuthenticationCookie { return ("How to Bypass a Fail Open Authentication Scheme"); } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ForgotPassword.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ForgotPassword.java index f5d0ff5f6..544b72bae 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ForgotPassword.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ForgotPassword.java @@ -7,6 +7,7 @@ import java.util.HashMap; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.StringElement; +import org.apache.ecs.html.A; import org.apache.ecs.html.B; import org.apache.ecs.html.BR; import org.apache.ecs.html.H1; @@ -55,7 +56,7 @@ import org.owasp.webgoat.session.WebSession; public class ForgotPassword extends LessonAdapter { - public final static IMG ASPECT_LOGO = new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0); + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); private final static String USERNAME = "Username"; diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HiddenFieldTampering.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HiddenFieldTampering.java index 4b2b2c526..f6e607b30 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HiddenFieldTampering.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HiddenFieldTampering.java @@ -5,10 +5,12 @@ import java.util.List; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; +import org.apache.ecs.html.A; import org.apache.ecs.html.B; import org.apache.ecs.html.BR; import org.apache.ecs.html.Center; import org.apache.ecs.html.H1; +import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; import org.apache.ecs.html.P; import org.apache.ecs.html.TD; @@ -52,7 +54,8 @@ import org.owasp.webgoat.session.WebSession; */ public class HiddenFieldTampering extends LessonAdapter { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + private final static String PRICE = "Price"; private final static String PRICE_TV = "2999.99"; @@ -227,4 +230,9 @@ public class HiddenFieldTampering extends LessonAdapter { return ("How to Exploit Hidden Fields"); } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HtmlClues.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HtmlClues.java index d7d657438..a83fa6887 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HtmlClues.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HtmlClues.java @@ -6,9 +6,11 @@ import java.util.List; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.StringElement; +import org.apache.ecs.html.A; import org.apache.ecs.html.B; import org.apache.ecs.html.Comment; import org.apache.ecs.html.H1; +import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; import org.apache.ecs.html.P; import org.apache.ecs.html.TD; @@ -53,7 +55,8 @@ import org.owasp.webgoat.session.WebSession; */ public class HtmlClues extends LessonAdapter { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + /** * Description of the Field */ @@ -249,4 +252,9 @@ public class HtmlClues extends LessonAdapter { return ("How to Discover Clues in the HTML"); } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HttpOnly.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HttpOnly.java index 54ae5ffab..d08a1061f 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HttpOnly.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/HttpOnly.java @@ -10,6 +10,7 @@ import javax.servlet.http.HttpServletResponse; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.StringElement; +import org.apache.ecs.html.A; import org.apache.ecs.html.Form; import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; @@ -50,7 +51,7 @@ import sun.misc.BASE64Encoder; */ public class HttpOnly extends LessonAdapter { - public final static IMG ASPECT_LOGO = new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0); + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); private final static Integer DEFAULT_RANKING = new Integer(125); diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/JavaScriptValidation.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/JavaScriptValidation.java index 946f15dce..f20c14683 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/JavaScriptValidation.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/JavaScriptValidation.java @@ -7,7 +7,9 @@ import java.util.regex.Pattern; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.StringElement; +import org.apache.ecs.html.A; import org.apache.ecs.html.Div; +import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; import org.apache.ecs.html.P; import org.apache.ecs.html.TextArea; @@ -49,7 +51,8 @@ import org.owasp.webgoat.session.WebSession; public class JavaScriptValidation extends LessonAdapter { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + /** * Description of the Method * @@ -322,4 +325,9 @@ public class JavaScriptValidation extends LessonAdapter { return ("How to Bypass Client Side JavaScript Validation"); } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/RoleBasedAccessControl/RoleBasedAccessControl.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/RoleBasedAccessControl/RoleBasedAccessControl.java index de9857a24..4b8cd0bea 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/RoleBasedAccessControl/RoleBasedAccessControl.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/RoleBasedAccessControl/RoleBasedAccessControl.java @@ -9,6 +9,7 @@ import java.util.Map; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; +import org.apache.ecs.html.A; import org.apache.ecs.html.IMG; import org.owasp.webgoat.lessons.AbstractLesson; import org.owasp.webgoat.lessons.Category; @@ -52,7 +53,7 @@ import org.owasp.webgoat.session.WebSession; */ public class RoleBasedAccessControl extends LessonAdapter { - public final static IMG ASPECT_LOGO = new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0); + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); public final static String DESCRIPTION = "description"; diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java index 5b45d6c8e..99f2e9e68 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java @@ -9,6 +9,7 @@ import java.util.Map; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; +import org.apache.ecs.html.A; import org.apache.ecs.html.IMG; import org.owasp.webgoat.lessons.AbstractLesson; import org.owasp.webgoat.lessons.Category; @@ -58,7 +59,7 @@ import org.owasp.webgoat.session.WebSession; */ public class SQLInjection extends LessonAdapter { - public final static IMG ASPECT_LOGO = new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0); + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); public final static String DESCRIPTION = "description"; diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ThreadSafetyProblem.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ThreadSafetyProblem.java index 2bdadcb53..45b05ecd7 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ThreadSafetyProblem.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/ThreadSafetyProblem.java @@ -9,8 +9,10 @@ import java.util.List; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.StringElement; +import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; import org.apache.ecs.html.P; +import org.apache.ecs.html.A; import org.owasp.webgoat.session.*; @@ -48,7 +50,8 @@ import org.owasp.webgoat.session.*; */ public class ThreadSafetyProblem extends LessonAdapter { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + private final static String USER_NAME = "username"; private Connection connection = null; @@ -214,4 +217,9 @@ public class ThreadSafetyProblem extends LessonAdapter e.printStackTrace(System.out); } } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakAuthenticationCookie.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakAuthenticationCookie.java index 0cb0229a8..6546e6673 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakAuthenticationCookie.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakAuthenticationCookie.java @@ -6,8 +6,10 @@ import javax.servlet.http.Cookie; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.StringElement; +import org.apache.ecs.html.A; import org.apache.ecs.html.B; import org.apache.ecs.html.H1; +import org.apache.ecs.html.IMG; import org.apache.ecs.html.Input; import org.apache.ecs.html.P; import org.apache.ecs.html.TD; @@ -50,7 +52,8 @@ import org.owasp.webgoat.session.*; */ public class WeakAuthenticationCookie extends LessonAdapter { - + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); + /** * Description of the Field */ @@ -381,4 +384,9 @@ public class WeakAuthenticationCookie extends LessonAdapter return (ec); } + + public Element getCredits() + { + return super.getCustomCredits("", ASPECT_LOGO); + } } diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakSessionID.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakSessionID.java index 59a515096..dd334e1f2 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakSessionID.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/WeakSessionID.java @@ -8,6 +8,7 @@ import javax.servlet.http.Cookie; import org.apache.ecs.Element; import org.apache.ecs.ElementContainer; import org.apache.ecs.StringElement; +import org.apache.ecs.html.A; import org.apache.ecs.html.B; import org.apache.ecs.html.H1; import org.apache.ecs.html.IMG; @@ -55,7 +56,7 @@ import org.owasp.webgoat.session.WebSession; */ public class WeakSessionID extends LessonAdapter { - public final static IMG ASPECT_LOGO = new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0); + public final static A ASPECT_LOGO = new A().setHref("http://www.aspectsecurity.com").addElement(new IMG("images/logos/aspect.jpg").setAlt("Aspect Security").setBorder(0).setHspace(0).setVspace(0)); /** * Description of the Field */ diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/session/CreateDB.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/session/CreateDB.java index 503507480..5fcb2dbee 100644 --- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/session/CreateDB.java +++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/session/CreateDB.java @@ -474,7 +474,7 @@ public class CreateDB String insertData1 = "INSERT INTO employee VALUES (101, 'Larry', 'Stooge', '386-09-5451', 'larry'," + "'Technician','443-689-0192','9175 Guilford Rd','New York, NY', 102, 01012000,55000,'2578546969853547'," - + "5000,010106,'Constantly harrassing coworkers','Does not work well with others')"; + + "5000,010106,'Constantly harassing coworkers','Does not work well with others')"; String insertData2 = "INSERT INTO employee VALUES (102, 'Moe', 'Stooge', '936-18-4524','moe'," + "'CSO','443-938-5301', '3013 AMD Ave', 'New York, NY', 112, 03082003, 140000, 'NA', 0, 0101013, " diff --git a/ webgoat/main/project/WebContent/css/webgoat.css b/ webgoat/main/project/WebContent/css/webgoat.css index 6db239c1c..16f0f30ba 100644 --- a/ webgoat/main/project/WebContent/css/webgoat.css +++ b/ webgoat/main/project/WebContent/css/webgoat.css @@ -242,7 +242,7 @@ html>body #navBar li {} } #start { - height: 360px; + height: 380px; width: 700px; padding: 10px 50px 10px 50px; font-size: 12px; diff --git a/ webgoat/main/project/WebContent/images/logos/aspect.jpg b/ webgoat/main/project/WebContent/images/logos/aspect.jpg index 8c6c8d98ad9f5d633e1335f924e1d89350a6beff..b88015ed5e2785341ec6667aeaae1685253d8b2a 100644 GIT binary patch literal 3208 zcma)8cTm&W7XF1adJQ!crFW!-A{|6b1cXpSQ6fQ#fB_=1G(ka-Duj*-42WeZA|-;r z%HmQKk*>thdlQh3CJ%SszBli`_uaX7&V1jwbH2HAX3k}NW=sLxXv+(h0Eh_yyiXRu zSOa)0NLK?Q01yBH0Knjc+5k9By@T-t!26FA2E?EOcL5j#0)awcP$-NAcCy)+VK8Pk zc2-t4R#tXy_P@c+&dJ5i#mUachd}W0i6W6mQHlQm1c$>p*g1r_xrIdddH6;CBmBPs z;}3v`8BhVb!5|)hi3bGc0Wms(yc2&=5D0YQ^B;gAP#7G<#Qci||BnJXk(glI00{gy z05}Z(>k^0w3;}qcynL|J>Tpv@gq;Sz7ctH(M2h*PJzmosRra>On)D7iLoLf zw_Iy^>!?{G_O4+_gkC^nZ8WPBQ^KvbucIGOs6qxHP}Q`RR2(_mXmF+L&f?gknNJ!v zDQFyOzOv!5Z!T?ldE)}=$oV1iyBqK4l_D$ZhU!p8;Ej3RuB@ANuV?;S?4O9&fs!0a zutkYekOXtb{-C^8rg|vI}f$k zrkz!+#||7VpC|78D$}o#nzhAemx^=iQMd=u5!|bo$u23{IeyW%TRxOxG=4n|a}A5s zv<&ii-k*9p^l5&C%Jx2DuIy0VJpJ?-_@-bpRZ&23P0i)zK-BrF;nn6A%r5@s!15E_ zi{~QH^KP7{PF|NQnS%wxg+go!nu(S)_=s4)BDw0eLTw85SJs|{ zhp<=5ZiXJLg=LOL3X40bD$S8|X&ih!;XBNjBtZti!4kExFM2IKk4QKFgP{IhB3CrP z=&fQX+LRM@SKlJMgG^dQ@5Vf;cWPfeyg@kNyKf9WwcsRKX@Sube9QTUhZ9YraCwB= zHq+~^eB8}bLn5NGQ*5U4FE$$PXba7S*i^jb4~EjlvKGJ8*1L^6Zmb8R6-Rzz8}CIm z#Rn3L^Al$AGIqig(kGv8XyY1!q*hz|%_1>w`eGEj?AaV|;tzABcawOf0I+J4gS0Q^ zJu)&)lkRHUJa(MGainZt@jxrk9lU#9D16xo#W%IoVb@8KV{__Oq9Q#6YQZ&S_zi3_`+*%E?Y|MK(-_a&#Rh$M&D{7SZ!hW=%-5O)K&)6ZyrpEl8|HgQeVn$fa!C6)q;E77x!nx2NU z&Zw6$KUR>`5x$o!XDG{-5XqirrflN;^0#w+Pm^u1X%4{|qlTz0}VGGK- zAUB$VrGut)4Y0!9>RdkJJu?xA;51crUk$q}<*Q~LV+6k&N6|)P#p;Y@kNR2u1Y5Pj zGi+p8C9&FxtWBGVR@{2cdCc-pvLYpvi^c2Jgi+^aQmFf1vs+w^$7)MlRfI;G=?Dp> zT6bt?d>PH}e((q+8kstK#_CqLB}$W+b!Zb`J8nio#0SQXSzL-LooakNrjXEWNm{%3 zRJ|~@+bgpHs`WiXX1In}m*X*!dt~RIKP9gFkyxPV{yyYuh8+H?DfzE%g?FWGO^Q~; zvGbHLL;3rflY<{*Ep5al$bDU28oj1@spFVZE5FFJQp{+YDXY=oIR@Y%P=!t2EOr){ zQ6{G1^R|QnJA?JjitTAK7+jTCNCltQU{cksJAXcS6MPt$TDE;T=isQJPIzEzKQKTg ze592DuqrGvpYL9bnv@Etu*X}NwO{mMb<&S{i5u6QjM@%wE}#Fh{`-%hmVJ---<*Xo z*QrWSljYgxJ$!eBKQU9Qd!sB6Z~ZNDn4@gVTSvXXUPcw2&%z;N0%%3I zRW{%fLflEOv+cAi$3)P9->hJJYtj0{;+qFB;>TwC%H!yX`$RJu%j@MMYbGAu7Q2bu z#crj;K;6OYayB@#&bMW!QukO1?yc=oc<+F;y#EkBt9;q0)gM|*37eUv^m?c!)Od6c z1>KIe9gGvwg`Dec&*b8NHdE&|bVd7xbL7z_gI*K9sTS^<>w1+F(De#ak9GoF-DPfe zT2j%;omqNSa+25{RL{Be?}7DehH$CrQ&m(J9k_@5lyLo5$SGN|1X<6j#-RM9Sw&}f zwjkTv`4IOGx>N+*dtp(<^t_pbQ+b$`qMWbnTgm+;CD??a_VG(n^Fp~zdslE1ntDBB zNa%3HkgtHKN0jQlrY7if(Yx;&ak&1KnD19kg(g-f^3n%Qbab}90)i;D&n0(_hGV@0M#dVz^C9f4B>$ds zBCfoS;Zy-Hr@`g@=){@cb(4Wde(z|Q=RZd!zOsh@_M$-+#raB4}ng62eiHzD(0@R<7#)?dfmTZ{Aff^&Pb$%g6!<}99rJqI#Ke-dVeqr*PBwb57!zT&uG z1(W?^tT0^nq>XyuefBD|KzR~QbFeA7(Q(jqK?DH_IBZpu$Jl0t+}~F-_90=vDDGF e2ok059q0P<4*B~{NTW&0ouFZvCj%0UFaH9H%A6?x literal 33338 zcmeHw2V7Ijw)aj#uTsQ@f^=yi^n@n82!d2Qh9p3MBoGpsg>x*Zs9>iFsMsiqf}n!f z07XRL_A7Z%2_F{fCdDIJ6>23%+;|s8Ly- ziRC~n7%vAxX<|75CZqX9Xd=gTk7$Env|vO=ep&7EZ^m=3qp1ZMTG%^rjifzeEXvp~ z9ESP``{tiFHjAJH$%c{Wp=27>L=K~=B_~Uw5@7oOhlgw8VR20YjRFgXqFv~;U=p1X=?JuHfC!pI22l>AH~+uPL85c8TcSqQm8Q+mIu*BqyIiWgG>k{ zF*FHu5}rY$kHz6P4rKuKem^G%SQI=JBnc!(B?R~r7@Zv^tbs9WdIE}L3qE3T0zy5KrNVR8KcKYHlXM+M2*p7FoSfa zYCq0&7#chSG>WmrI92pp>-+!5dVW(h*iOd4!~BTjv;pz|TL$Dtzz2ao;(wd*{8TJX zrvt2Jy3gVCFaMs&c!F_|49w<#;fVE{qH#=Tdc67v#;Y-ae`=rqTgI%vC?3a#rn?^) zim~a- z{hhR)f&LHd@i_@d_4k<`o00xJ$^RE|om~5`(|myDROb1U=J|IM{qY&wlE(`WxnwhOAy z9`x1VMTZOAaWBPF#-Fsud$Zpf{#ds##okskn4;-I3uU+w=;UC~rH{Ysn6w4|=RNLZ zMTD(&G$T~JMi7YsUOfGfwaGiJU*3CgwEg@}>8}evc?y$ti#i%w1{zuzcZ>l}7mL%; z|Kat=q@YgTE&lT0{-2tb2NnPSW<>uVU}KY%^)I@{>0$kMukZc?`~8Q8_3?gVVx0o+ zf8)6RKg@uCF6>`e@L!DLf5Dy}+`;0&}7jpIm}-Ob{^W<>=~o$(D3>_ ztQo;xcUEGDiHt`y`vV$Tkrrn2;C1Z<4!ewfzz;#eU|+&- zFVuTD__sl<|0Il!3?Hl;g3AiZja)o(kD>_gZGhOj14i(f3wu%Kz!@nI?1dnB_5U!q zc_2I#3Q9qO2oMAKf2eWbhp&k|IL_Fv1$N-i0%Oe4%)wqNGbjlBz#A`kd}vH6G1S>7 zfB<}>id_i|4Di7f54nTQ6+twrA56oSBgvOB(Qm<^QAYjjY`FUQkA<^~6B&e9NfHYkG<6d-MoHu8Z-C@77y4d;76vCs7wloBV_FcYX@tjfCv1- zcqW5pOQMqKpofDS59AKItWjZs5n-4EhuBm6WWmpWcll9FdXT&Ia(9r_D7Y~AKXRNx z{YXD>c<@0Ccf8*ZJP`s3#3My8>_hF`og95=v>;d^-x&J`VSaxaJ<2?Y>^Fv#=t$wg zMvDj9E3r4yMBszb@Ln4TY~~5Z!@F2yeMrE5P2@foUzd|5 z6HVm2^qjPuf-On@WVjl?4W4Wp1IRWsb$_Sm*!coV72ro(>WpDFFLJAV0uO(+R$kfHmJdPdMF7lpo!dA2|2Ye0y3DTfHLFA zKV@dLfQElvz+d8xX9mV?B$)Vn-2PVWgm~j>IiQXgl5Li7a%k9uCYTf_;3xhROl@*Q zn+P9VkvL2E-6{#*{`A9kr_pVL8d`cdEik$MNpeD=;1DMok?b2e6&({Kf7SuoE?A7g zPf5!}*`M^V%L6)RFhH12x=V6Gp+?0=HT`3iK_qbMA{dN=?B0b)K$C(`2 zLwyhlIA8XrKvOaWtV^N;f=OUg&N%m<&S3D^{!vaof9PU3!R!wEhn#YPaO@EeR4d6; z2h97&6i#4IsGsp*JFtV2Mvnx~TqDgGZUf_?_Li1ltEDeFh-4b-YHJ~DZ*8fM!RqU4 zXlsIJ%HPWU)6g);zJJm2!Xdu`0&{T_cB{b;zrXM%6qX&f9PZSDnDE9uuoF@XTxbmJ zjz*mr{BzV5lSiEx{BzXtm>yIz!xZemWM}3l_Rq1Fg8hYIBrCEXDHO!f(^uElGXS?C zxUuTm`r7K+2D;z|JVRY|JsmA@V*m~KhC1rnSbcRJEsVMj#t__Cbvu3WW&|{zl zZXjy_`}IILxOH@Ow2iE=R_2xl7y~V=wVt*fM&HW9+)&TPK;J;yT2Dvca15p&ayFXn zf2<9Yzy|N%w+=YuS37{YI2UpRDQLMB88mbFjfE*j59IZ?Arnv@4_`4JQ^#Op#0ddE zM`SlcH!z_h!IsC?HG%cB^be2$DD`#Kb+xeiT5K0olL1D1#MNeVMqC}h*Tam+=&Hl9 z4A?HHQczuh16;t-HPq8$yP!G&4Js43p!yATfN{VskOwXnb`60faN)FcfT_SPoQe)G zA=m|Rfy<5y3`iHF3qoNRRR^Z7uCH#OZm5n` z2hdKJWxjE*`+R~?u!5W*O!1Dn?dvY;h^h5*`#9%wGW+Cjqr_HJaUXNA$#wE#0G z9jrCR0%M?Og*Df<(zVgD(zCG8wj8a@A8Kq;BOft+FwF&9(9xXP@`R3-)8qd0#JHXP z^SU`2rxW2oF%@DOuBo8Jk(q{z1I1K`X}G3>5=UklE)En^A*SJ)3Q8QAX}CC0Oof<+ zYbq#lWTxTbKrt0!8m_6J#F3eXivz_}h-tW{f)Yn&8ZHhLQz53|nhHuBnQ6EnTCr4#Z-uCxTb;4ir-%rs0|jN*tMKxHwQu zg_wqGDkyPers3j1F%@DOuBo8Jk(q{z1I1K`X}G3>5=UklE)En^A*SJ)3Q8QAX}CC0 zOof;fE`jm$rz9#kbQ%s$m$F_9EeB_hyj@(KZR{Pb*+*rC>>SBd8WJ2Ir%)Mm_%zb; z6)RCp=ux9zDNIsN=Z!_Gxkb}V3u zzhZ=7Iyj|_Z~^iI1;7InFW?2=&B3W>>!cf+Z z6b^qJO~VBo3dYlk?2q*0sgV#gQf4?7B>u~BFgAO{nKW>M++-wNwm54=0pI3bvOCe{X;7I;8F(ExoI6cl$I$5icBk;1YRTIFGb|zgm6h1;EtMRiD|JxBKWNSh`)WMlu z5*_^M29m5Nurl!NaZueI57-KdTT;69!f%} z_DYCLLJ&f&P6HtbPQ5wudxGQf5acEEZp7{Z4Z_*(4-PUOc#)xG_Gc9!OILSU0+Sv# zBEkj#aD%Uah(eOk9PrmZV-c_Y5EBqNR?G7%RLR}eQ5cM;Wy z=ZIH`4~Q>_??@C<2q}r2k5odUk%mZfguX zNpQ(>X>b{F*>QPr5x7FQHgWCdO6EGlRmfGw^@QscS0~pnw=lOfw;DH&+n#$lw;y*n zcMSJo?o-?a+~wR)xm&q=czAfEc$9ezcFGS$x;{9`n898{nV8 zugH(%cjhPZNAkz>pWrXzf5_j;KOi6`pe$e_;4Tm#@TWkcz&U|(ffoW_1qB7=1hIn4 z1j&Mb2qp@i7pxF`CD<<{E~F}CDYROMDHJDkTIhz*bD^)o!oo_zi-lJTGlb)WGlffq zn}qvBBt$et>_vzo(IP1#g(8ndIz;(J6-CWO*NR4o9v00PeJJ{A2LBAD8J08fGd9gg znQ>)C-HdKA2{DYAvlvBew^)|gU9tD#yy8mY*5X9*t>PKtrQ$6TC<%E9O9_I+7KsxQ zYY7r_Tt&3*|D>8XFr|&eU9uL>p6jQ_RYC8r*SUVT-CYD=7!Hr zn_E8j(>%#}M)L^sV&~<}tCvPft4g~{ub0k{u9WVczhJ)Y{NVXX^GoM{S|GJx@q&N_ z2Nzsh@IgjG##DwZb5Q2G%tzUovgWcuvWc=~vYiX17uqdkEAmu7Wqai) zE^buR04>8k0HbklU7=}G80>224$r8lH+pikF7r~kn~!C;-i5raBI zNkbRI-G&udZmb118haJnkJHC7aCx}TMjA$eMp;Jhjg^f_#wUzhOyo@PCdW*gO=V5j znI1K5Hd|e;Thyajh)eM@o@Fk}QkK1S#kg*8z2hd~ z=Ixf{*5hvB9`D}Zq2j^xxaBG8x!N<+v)9YYYrj|Xa`f_z%kQt4yMnyp@=D&7o-0qS z>|SNP>d>mz)q1OAR@bgkUK6qA?%KI)gVvUKi+ba|^Ve~&^IDg+ZV>N`KaTJAvG+OR z(@C%-BoNw&i-`w`A4n#o{iJukCcgW9-}{;P9q{|$Z{~m4{}b7goJ{TtunR~J=nZrZ zJRQgi@(RkO@KM%Lu299Pfz&eE0$K#EI#?|@Cb&5S7jh`1lfHz0DijgACiF5x5=^El znJUa}%vWKiVJTsK;hy375n>V4h{{OS$eoezqHLm0uIE}$SbuB7!VQ0Jc(u`dx@YuDjjgS!d4@9n|tN!-JV^Np*D*N;!z%d?ldw|1Y| zzBBv9_DAh+IpB1l@SyC$*n{5=c^|raSod&xfO(~gK z5`RtL+SY5V>rvOcZv@}?bkpx<%PsF)4W-LVYs!|DRh2I(uefbe$7YXjKCyaoyT-oe{?nyT zt7|=KpVh6dYko$2_WpU$^RD`^`hkW&UU0vNZJg0~xJkO{_{&8vbDQ;>OI}&Ms(kJC zx}k;8()K3w&0y=+x594^zms{F`Cj||)eklw9(`Q(v9&F@ZQxT(yIA{?4wa6JpBI0w z>|Ea2+C}eTecAnW&ezl5bidu|cIj^Fq4W&&#`ewWJJWC2f9Jc`_jd!~gS>-@LyLxr zhL;S#U{SzVw>lsZ_SYyN;$kotK(HF1t>E!u$`^9{0^dU$y(Yv)A`wXB7=OyYtQ(LR zANYLMVH83PLW&_!VhC0v`0kYis|*3AwGa;yHDRX1%g4jb#g7sIf9p#Suz64*eIPV) zfgltwk`KWT2?)-BkO&kP0)>Kegyi98B9JI9F>Z05g}f4S5FbX;Tw8u7|1t|Hyn@aw z*N{JF`|MM+Ja(Z|NtZ4#=VrB@@+&v}&0YJCTe*i?+ZfmqR6IPr=H}gc{Q3)V3**36 zQbvC1la@t>zF(QDSe%``1DLG&`I7^}!XqN1w#97Uu`~AIp~DG@Ny#Tpo;rOdGwWhO z;ib!0ipt7w->JBJujXlO-LvQQZ(85Jd;j6%x9*niSdn@zClI-aMb zH^*Jyny4%gy5)ck1J17piRo#ubsIawUl+|ic;aGN&6{tBP8O6uZS7XE_3||gi#dF% z@OJIn9>4JI38ydJse9LJx7RsF0QBqejkjwnMsjYGS1O~&?G^nL_$g4c^GpxPZsxp%EVcK=GV}jP<0HjMpVML57n;R*RJ(6Kk$oyV;*{Gw z8T@d-lH09ARZiD@Dd!MgWJj?Gf zl^1Sh+;uv(W!o=pA-AN4-^~uHm_$vSp$BrH7oChiH0(wD?~DK zK3;1oYnRrLe7a)wNvS8fm0lTl<1*uL4zVk9B_~I#+e>%ZHMKR0i{!ANZ7W!i zn(6%)CgHm)9&gC_xbbwo(JiNK1xDcoMLKk~>Aya< zVao||>ph#Zuvzu9Q&$hq}9)e>)${FT~#EBUloP-#Y~iFhMN_OY(Z?I-ip+A{9B-AheMxE;phd)oI=5{9YU(XIPxYsKBuE`j7j zYgWwmusb#&y7Z=Q;SxUMr%f+2tx>|HPa~x!MHtMRDXWqqwHs5fyywb&-cciK~EFZfiK-!nooEGKjAW)NeW<`O=( z@{=4j5q?w-mIWP{CrIl!Qd^ZGQ9@slBlMYj!}8T!D`ww}FF&`uGLk##s4!00T5`=F zgYoOdEt2#`)uu&ihr~8#<_|hp&+de#Iolz z%1xWlai^A7D^+^pXZ7t8+A`O7;NC1{y93pPZv6$F4VS+&+X*tJ$-U^i9mVwx@n(hE zlJl+|zaHdpHz|GomYBSl{fhgOrLy-kE7VTTPR>*Kf>Wvec-<5FWK)LP-F>`S9H*RK z>6{&=e1GlMk7UvCFlCSSL?eS)#UcGw*KbLe^=F1Ku(1v~Yn?^iF85@(5-(I97)r&b zdB5tukkIKUT(b4br9(2w?HV~Y?-Vm*@ro{99tcT!*LQlJnU6y)Ywd>WO*^YMHe$0A zBTqTga=O!)x0+8M}&2Ej}$hmzmL!5|gsQ z>qEwylkaP=23`gCjUi^@T$wm8Jl>UI=B=a;Z@smMm5jS zF4J1r#xxIyi+}w=F=Bs=k$tPBUmc(Cst>ZXQXf0XGavR4c(!L=J~#X-@aF9Hl@bMK1oWam9L9$YF(s=F8Pq+T+u%ow%QK`>31MmrW3D_A|G4wcSG9tZF{9 zq|;ws4+p%g%RtQ(VVJkgU}^t+7R3LyFR<(Lo9kb) z`_;b8D!iuOQ()^(-54L&w4!NCzeMeNqjOr=O7zljXOCApDYK%?@XgyjsIg9GJ#0OBwiL_8^~b*UpWUF+ zpYbK5pA@ZXly|~(6~PP%&=<%3wmb|wc%F(^`?!V2d@?NHuv66y}Li_ zwr)&c-=cV?G4=Hk^vueInnchEDpTvPkvgrlxQ( zL#kc?#+j}`tA5L_mj2x=2)F6>XVb0irl+25eA1Zz_IpA&?Llf{L!wA|nL$)|4}(}3 zvqauWSf9H4RsJ`RwRUq7NL=y}&bg8q-g__ifYBD= z!ZX=%Mst$xc)oj&c^$Jwes;CJL=C}rC0U+6%V9?ImkTVYuz->gnvPI>(XrZXn;;_o zkooERInM|BK5S_erG@Qr)vJ10VKnpVHRU_6)kTJeqb^pQ%tF*GHLke%bd^p)4-4}7 zl-rS3^U36FLG%u5{jO4)?dDu6;X|AQ?e%ui73%ITwR1vnEBQ_9RWD}g^H|TV+*|HY zV5giT>+)2RC)K)Xo?ujYlgakWFa5*064g_kRuaCXk}5gakRjvEZKJq9 z_5STFL5B+kpH9q=StFpT_O-2SzSW~A$1E@Q#C+RW-Nl0PItQG?sM6Hha>~B6o9R-v zVJ$0Tj>jv?5i@t59LT9W|4?p;T$WA1I$S0GVDh4sb|+%fa?G=m7o;vK?DhLRoZkLj z{gQWcVVHC9eH10gnrFcQ8tF?Hq3!yPd!fr>V?ALWl~0Abck1Z{EmILt z(7}9rzs9%n9;!Fw<1r^MX1zPioGKeDuh(eemR3fzuLPHQ!d{ozxy! zlX0W6T~O0CCNB+ps?+A)Lk(@c3X8MnKhET~U8@?4{3tZ5fKow0w2MFPHWBZyqzGdbbl@7@r+`t_KlYV^uXTwViD(Y1NteM2(Vq zeeeBJhaF{+S!&8BmLK1-=H$Mol2YsVH??g@@qK=|Lwm0J3@`z_nyEYZVX<))ZtnV! zdj`fs9ij?!lVqLM)PaJNiKi24mhO{M2zK{We{j=XN&#}VN^d?g6xk*7dRFP$sQI-uiqtlpaP_K)j-5x=9S(${Aa^(Q84K*j@^7MBHKW!xncI|oVVv~Tm9E%C?+1y zR5%h}c(;Il>ONU(D0J42?v^Z9qU`s5S=&E-Ts83GYh(K5mk}?Skp}{qMz{_$Tgqv% zME$;u3wtu8rLf%BV~--bYX8`e!wocC#YLafFWJ=HG?b99|F-tF?XJVcdTY|}B-_b7 z=m=VSzszA%6ZzzRQsuPy3LM6^8M zR#%6To~gqX7shM84ho7McP2f2HLro3ara73`4X2}$32M+A0(11T=L!gDN&4qlDeV|FXrEU zy2{I_uE8&uHk7-&s^=_;BD%K4_nzC;fvnY=Dw^i+TcNLe<8k?*sm7kV{v!#EcGZsy zOmS z^WsB|chm4mlidw#jonYQhcp-|)Smjd`o#J3Z95hCijy+!&pPsF`+Fpk7Y_S>7k%+$ zQ@8e}_O69px^Az!_7}AcZyz2y9lkv))hRtZqsp?;BzuTjTk-YfBWkpHH;?(S&OqL0 z^Fqv)VN>pnV+f49hO|>+*y?y8T8S6A2vRvIQoq)3z90%LvP1k+trXF z8s4p>>UW!3{Y9=QC6KD|^g>tvP`C5Nszyq=eUZ-WdiygxO=}94NiBb~oDaA4dtF1; zhwJ-^M%hvK6CSW29qGdY$Fm6rjxIr|xt+ZHX=OWxJ=zWFT?BfAS9phT$>p#Ie)l7K zg`K2Re0R;MVKhYfojPs*CHUlOVDEfGap@I~?MY_W^<*k+QxsmSzD7IML+%+YZz$L zyzyjfdE%q>xeVbq3H_4idfHIe-wyk^GVyWQeR*|HHt=jYQ%*Dw;07?W;`3vMzp^qFzhhI|0sb_9;L3yvt+FlJpLoMy}IW2}<;= zo3xF`y4sXk`@QP<^j5$zyQO3$q7@DcOpmm2)@d{(0lm=hoIGB`O2Y!`=lse{nwb-ac93L34PwGOHfv%dNPJWh_X95Ernmo_zR; zdo^x-E;B4zI-#EsUAih-3vuC8zrpZ*geKQWqjd*6$_w(mO2;g?LT=l=z*xI&Wv diff --git a/ webgoat/main/project/WebContent/images/logos/owasp.jpg b/ webgoat/main/project/WebContent/images/logos/owasp.jpg index d4a0f58882216df1f4ac84ebe38f5b10b9d76661..3934b7a494332d982fff15157068d239e79e1968 100644 GIT binary patch literal 3565 zcma)8byU=Cu>NfmyEFo$?02wkqQt2 z1|T3t0L%!2FoI5dfTXkfpb*emnSTL=!4Y5x6$k_Z!2eePLBMAs0{{j=&KLv^gTVfc z0)ZinP#C}jzk-n9VrEgjYv(Pg#?49gfIfiz>hqLmH=heH({YbsG#F%*E+c3e?YhIc8Mf5qsn;n}-&fbZnm>>G(fxD6xNyelBeMkJMCdSiao;k#%JaCb zkepIMG>P_QCh<3^Bf}#bul2k9Vuo7qId*t@rT5eqsnwPuUQSTEk)V-_xDCky2#%J2 zQy%i*X#3)L=r&CAAqn{;qzA4lw&Ruj?(&rOSSy-Fux5J=^JgH^OCh`9jBUjf()Z>{P)p`+yu89AV#$IZoso~WQ>=~(y z%v)|R&UJm=fAg$W&*mRfy>=N-Q4=QC)UdE9m2yPYI1OEaN7T@|@LeC|BtuuHw=ZgT zYbYXghajaA7V|22wC7HSIrceEO>&Yn>iBr6HSton!{U+SoRrbq-7(!Kft`*HT7ihN z3Z)*~>Zrg^?Y`$FzGnYiNc~~0#^GlR%L%Qo*&(LliWezUZr=l&wJv=ROt+lX@DXYH zlS^Q>_*7N>N$BQEtLy45gPG*)arX_9zFZt~$h?HFhw`h&M=r6YFpJ$=akkIfb8QhU zlY?POzTM4#qde4)<(J!+!G8`F(?85&w@h*>U@gy)r5!}WSeR&(>JN9!iYC;bgZ9PF z+KBILOQiWcmOA}%%tG2ysjZo2uZb=I)7~uUS9Nvz+i$A2fpgVp{4}jLH7bPX+`87& zZoxOn>(mX$L^_!+)#TQ`e%2+h8RhEz?jbJe5^w&6h81#b#r9;$s{ew7>Fw>~ec!cA zdvc1sxEbf2pShEhj21IdA0nfeB4~uJl85`h04FMWme=sZ%|3c^1io}>{4Ue=Na*JD zTE@~dB}$qFJ3E013{$$u-EHjH+rQIyH7x6QOCoc80cW{l3pe-6ngv8)vhCCI-sH@a zF;}Pjlc{Fdyyatz`*)u$%S30k=YN7<34Y%@keSTSCR;A|-*@{Q7l_F4nk`wH3wa&( zRBUY4QqeRNyXg)J46P`ok07qT%v_ubXMZx|TkzgiedCirMI|F#ObWDn*CNAVte=8Q z-?9N6e8!43P1_pUIpRsFlOH2h-2#My$^k>&(RKnix=4Eg>rxoxer*iGnp{Z0hLK zX6Z}jEJsGN<_v(#)z+00tD|ne3ySj$Y4_Q%Qme&^2NKv;9An-#Cy)AYKOhP{Ci10g|OTi|W#0G;*43F!lTA^jAq{FnCKmifD1)VL?&my74ue(**kBI@hkRdsS zMB(&V6%R*x7t!_C1ouiRF;C7i+JYZOxRrdFK8ZcFbYuNvyI2`oPA71ADGLDlB28~` zHo*S7ws^6Lmej49)r{uAxpcIOwE^UjwtlZ>DwXB7LXsbn)8V-XUMu*%BL; z#zZh^b=zdUo=UWjKWXPYn%XAJ#p=gX>d!M+4$j9)PQm}VU}J6u9!3~kOTJt)kfQME zO(y=MOuqO~>by>@jk2>#1?q{Z&C9!+K?z|C;c2on){f>$SX-~`-zcm8bn=8@ag{Fr ze%&(S_qdG%>(#LpD=mT1uoJSl>^bXp;?Nx`tD=EhhOXbDM#C;2hx_CpHYPLt(nJGV z(R`^4*gB>m#X|f5K`*|Fs;xQ1>>u+?ja0_M_&-J#21gBa3fPzpg|N@W-lFE#w&V%d z0@GQm+vnBL6RCw6W2Hy;NDAHWn>wS$8wY2mZMl_{w(RRV+nskIe$Fxsk)+<3Oo0k#U9kQ$P|R$u3D)q0#+zJz5UyUcvqu_hU)1 z2`bznT`!}{lwS2M8IbmZoFo=dU2@fM=Q?p(VY^4x-C!bFW%L2X&WJl0&ym6}e+pax z3q76NnUn~foj_|>i*}XRLfhDkR;yqYh9Q&`fBJ|I`%U zeLYRQo;pSQ8JYk#j?)B|ujvmq9ht5EjBAg*W#y)?_`7G7uQ;_VK$xNKu-p%pe6@E@ zFf+w6D=bxbIC}gB^kJWI4hCk%Q6`T}7Fdj=Jt=Xm1>btGNdhiBuKx8fW@Lvju*{?^ zzc4EM9aHrxsmRGbr#Sv~z51K$$jTYD3jfdgOZQTYo-N_o_SU9in`EU9%_c59QExHd z!GAN5zd~~E{cR(b{w864gx8bDh{sR_V|@Qj^)i8*VbClH4lJ|Y9H^7Ly3?E>n4=b# z$)(#hT)F5fUXoIfed$3g4sN0ljfw~qDaxBQWqzCbPEfsbr?7F#MLrmx2Z@a;{blQp z8R@0-kl1MTk3^^3X z8ZZA7qqothB)A!iJHgS9S%+E=o6H9_x+jeOQJ2cipE#H|<4G`g;L%~c=O`rXKQ;5h zz>;}FUw&|1Z!e#&!UKT(6Y&V-yl!a1Z+cl(V)ET!5+%FO3OF* zf@HAJi^(QOS;$32aa_!?z{FTuaf^`m@f)2?gar0%rofPhnEvXgN zTb~J8_ooEqaM`V=ef41fm~fC#Jpj^hZ`fcZDL#c^`Pdsft!{JoI*rQfJ=0MZ*d@0) zU2sX#@6wNrto9%;=6`hOCgzC*C>UyJ+xmsS3^LYBZPr(7VW^@bfvP|xg~cF@$u%F# z!u7D;E~`1hoTRijk2aiK#DC?0~yk{AyYJxsul%+xx;RUT7)f2cpr zcmkL4y=d!Kk1jE>JKWG7?Q{@%KYgAg(qhH-R-&O6eU7Enh;TB=v`2q#qZB7VSd&+m zct{bYSn1q#x-@zUl%Uldw7A4AT`bGjl^iyeIFRlks*bQ`f^7Obw0U^;pHH-wGOYn* z0UX3vn5y&Pa(D&@!b;Y&Pe!aKFb&a;KUb_l!y$gPDO=tHDGP7)WYALmQ!3Me_13(; zM#jc|_!U8{kKr<-@}V*_&KO2pRPAFp>XZfHt#M8f26U6bAm=uG=KJkuG~; zkNxJZRKsd=246-o*yu*NWJg)c@i(>pRh)b4T2gN6{LhTIR?DV*-a;q4wgmpdIGlUi z<=d4ot?4n9IfV04{`Kcu2in;DTRDR>@lzVYyUZi#exAB46kGG84{NN+5SK&@0wdlmb<)R WJ_`x^cX3An&i~8*YoCueo&FC*YJHOc literal 15976 zcmbumcT`hfwC@`PK~X>ykd6u>9qCH_A<{vF(7W`OAWA@LtRP)_6Cxc#iS$lDO6a|Z zfb7UyQXssDoM4Ufcq1FuiacCn9DvdZ^(CEroAw2eqTSp-Ud-jBwc^j{65ip9cl=k!oXYmGW&USQ2M~ehvKpFNre@~OF0O7qz90PjzlDT; z4+~F7OiE5kP0P*8FDNX6S5?>4*3~z3batV-dwRzwCa0!nW>;3%);Bh{4v&scP6=mM zH%>-=je>&wIt2vsvU{)WNp#*0tfv5W>;c1#jC%X!*H zRNn2~U;HfjI1b2c|8hUOf>(;gP+HaD3HAFg@oL`x+H2$pF_!uI?SC75z|WeHTh%eX za+sJ`-8r#(#HViJ^vowDDZi#`a_!jJH#E7R7B#hgqG9Ut;d@G9UHA0H>2pmpSHG~- zqWYehO@e@|mbsgMcpAK+cXsRSau#s=>hWBoC#MG}0Tz}Q8cvj*At$~DfnHk|ix{iT zX*uWO288WW-T)YbYpf7kemfn`+?!45L#F@=0;%LOBqZz)n3w?{sZhMr+KAd|p8O8$ zCnqsZ&B|d#lV@!D`dpV9Y>GFF-O9^}5j$2$J=ivGmHqKA68BWIg$;+({A>cFFfSas zw72^1-jk@b%&_S$QFc#>?^(vKrXK+maX|nU-X__R2h=~wChkoUiG+~_#<(>(y7Cr_ zlaj=haZQmUoJanj*~*4HfKJ?M&+C!4m)&KIwy1X2Ux3GD6j@aP3Pb27ZAl+dnnnl7 z{&M>%ZM--9{Q(qQ@*l^xftCW6%u);5P;`& zt^8hCy7b{ecV|qruNqmR{GvnSHFc(E>C@2x(F$I|B_Us3_hT&>{&Hy`IC-G5hl$T? zo$b|}%`XAU-!B1F7CM&zq22X2<3R&WHJ1R*9a_TNIe8`i0BB$@8@f6#=}|gRSL~GV zBIP2nxgrtrjHc6!CvG#E+OkrUzmn&+h(cHTy5KIc{y~I)Rnkl}WnOlgq0jGjGQCG` z66@A6!k#6&CRQb3kBCvwC8T1_kNn=TKJnM%@{;wy8%dU48IG|E4`=KX1bEKqzi`NZ zd+NI}sP9)#_HM8?ibvNg+ zGP^ow^GIYKJg+SOb47SQb+2q;PG%ZB$z_Wl{vc7MQ}SNN5W|SZS4KykJ75JY!W;8r z&H_p=(3Uv3xF6qu)p*AuE5L6h3UcSr*_RW(1U#^~nxLlqGS-ub3|ALlk!v-1?F=XmSwm+UVrqd@f)# z5eUimHT~<~7yu{10IumO+LIQu_u*W8*!l7StUF`V+b0azLY( z@mVf&f`t&CcM9hSh}_jZTis<~vST#7+phrth-g0f2)MFp6v&A55%J}g=B8?v&U6-j zW#uOJp%fL`y<#g?u1PU&m>6%^VgFXeP2axl-|m%H<5*uEOf_E(x*Lqe1pE&x=(uBl zb=YGoX3S?T!J_xojbeKo+zY~!!asiwrz$EbErDmmvAUU?e@N5h@uB{n8~3l(Q$3de z!uBOV2HZ_@y97M8uscfhapDTiuxb*lSwLmhe0FOJ67>Lk*c%S7G)@JM1TSFp;=c5s z7Ou03F{}NPEt>|f=aHE{)vEe*a=Vj_}lngw^?nUc|YOly^ii;$s{3< zXD1o#iMU$PfFP&1u88;js_u{53uP_(U(mHyw-VJpCMoLEZuZ{~SSe+#RDW~&+Wxg7 zIFK}WEf+Xc4Bte?q#M_0IRrukpM^nU7<@Hj;M-PZDneg2--&dXwG^L3kyZs%IF+{j zp~W0L)sMzohkfd=4_dEYlT2n_S zhCj}q&iEL6v)DrHub@^+$|75ohMH8?8{@vFYIG3eJgmg1RE-gp%6PzOkK<;{Us+%b zR$o$7@tBJoJghojcQo$&w!jRBYN;AM{kdFmI1*pPSNU{Ij_gn~C-M4(vKT$XhUUl@ zOk=U4_aI52q;&T6##_y4(-=^$AYCz#wcw)Ed=0+jELu`+{0L*{+ z(^SKlv%@Y4M}jInl&M)-m?_g-7$vO zJuh8zJYEfSEgdjah{y33%#HJ2Q8k8vEC~1S@T3H z#mV#vH%^UP41Ms739*VWQqT!{-zYvY^WA6S+RCF)QIm=-H*@94xke*5yTT7|jJ^oI zK=shUCU(}f^DD7>mHqo98>J-wWB&%Op9_7v%g_TxtZSpv+wD?hy&S7ZRSCM;ab{#{ zU5r4am9CNfImxnrV23}P-gKD~jy;F5A09099|NSChsA&@<|f-mjEjV$9R&jz{?6&e z=!dedxr!C(SC3#TGOxk6aU8sdWhK2C3(D$0&M(T-I$u;e%zjQS#PY*8O~Y+_#`-R7whpoC#q1>Q4E>Qt?d5zq z|HJ%2H2RV5k@k1^_6_OnndcUw4R7!0MidqI^u%|sEbJuZ^ySgVDc$aBPdr&~H%Pe1 zggT#v($kb<~4&giOrZMtX*l&o-b$X=zm=JfC_Oc63JuwSmv9YWis(s+KKU+>uO zhS;MoEGn|29TN~skb^IXfRS4#FkpZj{yg(;A$Rh?rUJ%mWw&Z~_JzyEgH9AZvQ}~b?c^=czDEDe7(h=;;!OlZ?N^Dl&&w7XoEYK ztu>CRX%Soub_(R#XsOxNJB)q&>QAdj(*PrwyWF>|6@#twYJC1%Tsw0B)SoFMmQ?6Z zU2mV1S(FPDr1C0NJ}Lc2N}cW~7&=7c2q<+zCMEwFsK=wq<&f^X!F{_;6STwgEJD0< zF&qn+)Q`zDx{-4M5sW-WKz*<{;h_-oMpu2%n;*5u-;Z}H>fGX#9F>I5{Ev2`O?nr? zm4uLqwrCq}MG<1jZklkqdi~QBp%XJ7lG_eCX$dwc5oYhU zi>_u>O=A5vmTL@0U9I#*27y=-*<{1a(BeY33+a_No#kt2_C9)>PRq_&GLNu}17&)J^#{L_Focu@Vhxj*Y`R`X0 zQjr+4@HX$fW$?rEXevA7p_m050bi$k%bnLD3`d59+u)%&?^K~(Clmc1t&y4rO#DZ9 z#}6yjie%({rdu{oWlwBmVxlr!Kg~53`|VJ54==5BOevzUJ$ULj=s5kqxqCaj@NRzK z_js9DCk=NN8rjpY?<&;hUGV5>jxgzwfZiOcRoQQt?oki`60tgy*@;`7Z{BLX*_;FC%VCJq^Ohf2OWuxz%PC zQx;<8f|sPtJDVsYG7nx5&N}T+I~F*uXy4_z2uuWvH`jhrJ0}w)^zS)oE{> zPz^w!^(QE?5KlD?oq{u|R@5)0m94d77-Y@WCy@qX-93las*#QKFk+b5V$A92t>g)A zu&GVtjo8T#SNY4Z@7bn%;&xLeR*KMMsU=`roTCIzy`J2P7x{i?EY-e{#55S%9i-1! zS5r}|PCLVqMX#grf^Kn{u;O<3H}I5vY;8w7MB*R0Hu5M}0;@eSajQxxg=uQ0xoL&N*b560g-9%x64tDhfv(pislY6IUctk3{A#AAe=P5Z5|l0urIF! zS;4x&mdFk;#wSx_N-zzjr>Fc|#?c&^pO4^{|IqM-|9Y;(IEQ&E;(JqHMPFYdX0q@3 zPEBf33!KgspPwhtzA|x8V33hGYCVgBaJ4`BtfVB`y^P1YK-b^H20;s}_6Mv5U_D_) zy@ylG7tP$QmO5|IFn=7VzAn~?#atu5&C!iJR(E3gU1{6#i>42T-X-hVzL$WT2QzZM zV4@Lv)V|17)dfD#^1^hvQd-U9n|1yCTA!eSI^FQCs3&^>bh%`~ANQDwpFtm%5kL+P ziGP<;f8?U7>20GYonXYapZ-13nt)}8WxjQCVz!oWU(C>(imDecl%q4VZ|20dPP~8B z0xOaRcIsV|JyBmL*zA~NX7;2;u7YQjkMKDV|F}d^3k>>w31vc$H)1Qf4lLotc{yp8)IG+kYt1 zE&&zL36eEOK-Lr2o+kr(>o*rT3O`j?x$mWW*thUOzRU>lhA`BgJ`aRZSM%Kx1lM@k)2hJDzJoMlU`ACGA!X5$9KG8{My3SCBWE!WDBY2 z?|2OD5>14$DEdEKk9Gel-=O~afd_R?@YFPV`$%w7EQMKWSvvgFDs${T( zuBSGu+ZmaofN?H|)FnVlX`Bv^buO)LsP(h2-RVGE6x;`LSTR}9D_dv-*&`l}1C0z+ z^mSjCe9`6^?!NKh2ee4$xQD`aAB%B!Cw5%L0-m64&jfV*+HRNI>=w;JBQnJ4#9HYd zUqP?_4pD*C&JL3v4EMxqP4+F>M$2vq{J3kPW^2)Hcf9pXAqq8hJa!z^1i&sR{vtw2 z{^$k70fUtiv9$qQ7S9lOTL-iFd*AGaBdQRRAIgn98_m91yvaZM%1!Y1uB29OVlH(q z2Xl9qAc?DgnQ#O@s#vgemR8)FISm?_Bm`Q&ciqteae7`)?JyjhTo!*emmxd3jNNp~ zh2B1#cx!l*@l!pGoiY=H6vCIYw!KsY89&s+`TMke+J?7w-EDlwT%j(bpow7u6cpbm z)4!Jnx@gLn)uJhi?3v{8@v>V~zP}Qrg1nn%T&=Xo;Xal_M(hfHw>z}f95KVipvZWr z{`U2eJV#V*E!2(p1&51Izy>u6fWnI&xBsn4;(E?tW|^QJpTs)DYa2f}oU8wbq32QU zi~NvZM=do^PFY47F*GA=diIl&{azo!Wvz_(%Jl?G-0r>(qasqu9jM6X z!GTa3c9=D6;?J((R!sNbx^{v&uPV9>jatmheJ{_nvE zuJ7$tSGb%;JxWZ+By8!KLDh!$MsQdEj&&<4h9|My5q}ser6O#kz5Gf`17}aqnu;-%Y!1rL4TbN-P*V(f%559)SwVt~>fH<<{8J%; z*%y;PpV>1oO3LcpJ`9qkbKOR@f@No2XcSfMr4KA_jcT^+Xo@A&^FL`bT;|6LJ~&5S zr_l>Boh-aoE>z6+{Kq*3*aGx7^I5KxdX%aCKE2w+Kd!NbhJHU@0X9zDlkP`r(!2CL zREhiGKpnr~;-XPlNO5l>Ffeg@y)*|=HNubq=ZF&z|D@f!U*a}-@xwv7&PIcYw{P3M zuhA_Fs1kF;HFR(Z5H&((eCJJ3g#A4#fYE2NyYTNW-*dpht;-Bkv zT%hhE8J*dKmb-$s6UPpV6PPFj847fj?FJm zjAMb&Tk{NiZAMXrbx}W4Ohcq){9j)mP-;V6Sf?Ig7d$O&RE6Gm#lOJv81Q*}%NPR> zADnw4AVswYe|J9wo1dUiN~`7j2i%m0m~?xn3L5#a;u%YBkDdP#JLvkW`|h^2G$4vU zX%V8j+8HH?;ymBGyl|-pIvZKjhr?TWt}#b%hX{&6E=T1`?K|*@LVs;%9N*^SJRL9_ zhvq9@R;P1ww`crIW(*YLXAcbejaS1~&U4D0iVDt<5|d}edh5%>5DV0D*Cc_w)-`1( zCZ-V{s$^vHib=MuLLwfxcw#QJFFKbN=;fw`ze(T4pE1x)K0orY)E##8_L4PR@6F8f%SowBM5I;$FJ@ zdlL%p>%M|cv>#uj5NMm%tv?Q}QPFOkauEA{*1Kskq6!1)JUx0O^k0v@G^WO_f9dF~ zmf?Mz*z}`u64)13#z(hvqpT%cbDCUNZ?Ng9Vt??0NVRq8IzcrM8lN95{if0a{zhaE zGtn4P-N-FxdRsVQn-kSLv2!t#P*Re*?8_i-lqVoDCoIhKro<)i(KUf`6I@$*K$g0#%wXevL#F)2dP zLo?GJ(mpN4o_zg!A#r7&!v)gv`V2-jZ$?Ul-Et*<*_nSRY);G2r8Gn;f$W3~t)%0{ zIp_BD8ing7vZrw`Q>ju1=Yg5j_Wi<`d0Byqp#mIvE& zAa9_`w`f*k$XvujL0}%!J&Dxr)$;L?s!yr5ViT2Z%)oq>`??9HuA9YN`-WHP;WnNb zivcR(*=Fkorsl4=tk;a;k1jcFpGO;y&Ey-;{e_abUcE3~h(WERzlDD`iOzw|{7W7} z$tGu0tdpicXmw+=I#s1~WM9&V3*Kmb@Ppj_@9dm;E9{uY-BW@@hlezI3ug1U(KG6+ zZWm@5TE=+*0G2Qa7W3|Z$fOO|4;(fY4vVLPlp61|i&K@IGv&h`WG^nZd3wA?O*K?} zHnCQ@_wvhzRK>y0W^RU%3*8xVf&>phq$y%IN=HU7Ix&|3PJBYJ(24GG7Y?oJpqa%O z;4T)M?(Ok&K*;0Me5h!x_&)QraF|;4$7KbDh0f1>_O9MmDKrW`8%*=jIpo`?i(KdIh-#y{b76w zZGSMDBPMJ;ZXk&MPR>Tl+VfrEQqZimtU5rv<1bmJkc;Bju%e*fdWIpj;r?@gU%W~y zbv%B}((fbZ#Bz3sJ86SsWYLlyE=SAG2sv2O?oDgrYAnrBNyY;gvfQ=2- z`#Kjmfm3Ks#QZhFqzfi=sOxb)cZS?@`%nxY1>TW<+OeevUlDEi6r!!(CJUd+vYkaaZ1h@}GiJrHOM{b&sBFPruaUSAn^9XRLzi`FN5<~kNa;SnI~9|A#Fw<@&H^@4Z3%EQ~Q zwkfSg5H6*B=nOe<4B1H!1_g4?aEWc6mFe~gThRjHzN<`Uf2QnblVrmS^1qK7{}s$E z<+*EHnGm-D50jMmkPvd4A?BL;5W<_0n0G2OeK9d5r(y>g>OuUlx*qxmw7oOBNl|1Igc;hXYf5`5h_gh8#Ly-#t{iI|g*Bjpgu=isRmOAk(Z(1O@$Bb*M<6F!t z&Igqz77Z=Fr|boVJC;X5R`Tk&w(>vowO zcS;YgWS%Lm_8ls^yV*OzZ^P|(gY(?hUDX5|L zi5hMYzFBsN+l@M!md}%Z5i~GdeeO;M8yIN|D@O57^$eu8Icye5ujsvwhmVxpCAg00 zq}{afr?`4(M6N4&@e2ZC#z8|&_dP-R6Vs2>yG2f?>u=BN;{7tvwFjomGMrlVSb+*g zqr~dO53FgdGXhuvPIYlLEVtGPByitV0E%X&LCY_y>{O)wV|hiMZjFZ z%`I*AM>f1n%Z2;X7Q9!LTFOW#HkIe$izGXBrfV4id367Gc=cZ~{y&NAs~t>v#C(9K zX!U{q&GPy*746qGw_g|MjvxGz_j85YY2G^%r@InyU6(Hb)OShdGoW%{az`6a~Ne=j6Ulb zbvGd!8K2OQzwuy+gUElQ9J$WD^ln-b7Cv;nh8#UNWeRS^WJ_?k`lf`&{G|b_% za67~pag7SwemJ`zJ5G};E^w2kS|<&i%I20*izJ?sZ2mGoYOx}J4qB|)lN!)7)>Y(s zsA(0_-*@ewgU;~5;en_Uc=*#d=OHL%vo+H`(Zrl;)HqvSX~)RKdx0N)=A&>38DTUr zU)I+0(Q9oh%3s5N?0%zF%dO;_BLZ`cF;A)v%$nIH*hLkWR`&DE zJUhH4?q%l9yI3CaA_LEDAk`-b^&Iurym#*uRG*C-eDzk(;V!3Tt(j*p(A8=8| zE85G`y?nBw?isG7Ra*4D6j*<7N0Y{Zq%j8~8X3eJ85wjB_QaKZWi0s4^*GGy@cN>t zUvq!;YDUp9O;OuInZ4lj`)krH)3mf|cerXlD%>Ujlg-!O1b7#04o}rlOV9$mS`Qu& zfUA>NlVk6P-fDaX`dJ2=I1m5@tvp?rAE^AXc?k$-{@G!mDu2$YwGrxgyz;b{ae#NN z+b-+RoArt?SN@8--(27ie*CR(Q* zw^e-2gYe?F+i6>;k@{eEp?mUPEo$MHfGW+4nupuo(*z9~0|D6+^Gm=sCF&vbWtLVJ;xGf??)+zSh?L z5UH54*7y1h@Q)TDRQN03%30lUxVRTXXre7SO`a^qpST`JR(c>mdE4;bZ>mJElTFtT z?sabWm(e+cZ4@M*vm89b;L_*P3s|e#g^gB<%@IOFce50?x)mP}zK`bm`)}N^kZf$T zha`l7Y?AxX3bAOf)d$I5izhAPbJL*ZTH56{hvVS$*0HfS5|HVmaC7zv zYBF9yZu$tz4P)bCeru_2EXJ5h6TA?wB(8XSM=8TwNid+e_`LQ5Xs2%{8ri-*fYH+) z%@9^Due8WJF3?}~4=UuHwZMW#-qbW1qN8h-u3KA|nHQ~TZl*p`Z4_ov70CZGynbPg z6loq^F1rL|mRU6vv$UMkEr~j;mZR14WVsv88-qMRi&Na!YotXz76rJ(T6{=Dee15i zU?5Gc1T(yT_M@Olq`^g>d2fZ^53d(=XU+ao8FVUOF2W2%@nFXiVRBUPYL~OMO>q-9 zSU;1#aIeuPLl6w^+@i^f#hA$k4$hQ73a7378l2mWmiErmpBN@gm@&WTq0rZ67((1E zvNV8gad}#7D4%)~Ckum(kAr)$O$%KY7o$}{rNg6F>>RlBlXN<5(G?HD^@G%*G+_g1+;zLTw|p`W)Emv)*n8e7CYGMBcwei~^`OC1sd=eMxz zbLS#4&bx%7?84+H--p0kZrk{=Yq^VF?pmSkCYzNHjU=<)f6}?AE11cw)>#j=Ca@9F z`%3&Ryu>dBn~^d;hm(i1L88?y>W4_DZQ5=aqZO=E|2P^mi>>v2rT%86+-9zMGZwXK z?4OaBlvb9M|GApg?3Rjvsv!_w_W%k<+FkS7tQJ;OdEX5$j0g`Gh+U31I-)lC$YpZ` zEk3{onK%bR#WLGwpaY)8K5BEA>h`6znE_;n^)OoV(;QtbKImYU%`G{2F@O~`DW-&R z27OD3?I1rj2(-FR7pbs(+Fc1q*eqeoJPMJoQe~C#(VBt{F z{WgJyIz#A}QWMF|cyi+0)1Zv{P1)q%iV`PEueV79JHhLx0orrVb_S-a4^0*E)2wkmjh&wkTCWY@OfT`hPCt;@-sX^0St;Y}wCF_{$IkeEQbiA_ zU>MsdXB8EG&p?%5uQCKWE{OW(eT=1Wcb>C=D{#rKAsU?Xc zY-m^he2@JAYag45p1$#)+?Q3ZaNV!hRqp+xEB~*MQ>Nh7{LsIa&@_r8ecT$G3VO1z zzt4vso1tfRC2&^7R7skg{x`6?-fkFm^nvr{pldfM9;k@ONQ6Y*O_Ct z?rJhx&kAThTl{oI98CyK4GXmL{)Rh<^{DFo=RrL`W|2&dPXdpahVoA98)~WCmjmvV z?C%wr1y+9!e^oU!@`^}?d~lt!Ev=NMvPATnqB)C1I zT&CutcU7#>vwG9VX%+XAG~Qt=ARW9E=~O!e!rjO&$}j8a;^%b};x^P&N^%+1W|;V) zp7hMm)=U11wjs!|BQ1p__al~Bk(v1mm3^D?0Q+43O2JvQp$~@l0*lF_-NImGYQ>*l zEF7~by)#k&*|8l47kjtNCjp6KomfGAb8W4Pvf?awhJu~7*le2wNjpJ*a-vZnQrDaz z7l#bVJlQ_*8P+q+w2tx&+e;m_Foni&>X7EMwMt;;VHi0cgNd6Di-+Iw{=E1t$m20P z7EYMV2>7KWMjSq;6Kko_b2JR}AdpQ|BexO6WZYo&=Eclh#&as`6H0D-`x@|H)QTM2 zy;`n!PBlsEmX3x7OKz-%C|yQfLtXaKI||dKG}ko_evxdhBrl~aKTh{zXMqIv3sjR^ zo=}Gn-wYmA%LIC>o#INI4z0(rb7kFEdtR*}EV#(B?r(*HSNk~S^Vd7dnsgY=1zP4b z#=7GE8L6qF9_Bi-zfu^The{8t2*?G6vqM~DC40sfT!75+u zOA%8B=$|9;(;W3X1_U@ow4Zze8$ zuS!$myb>^;cU|wS?uw0tz}|2K;5HU_7S;uS%>3A`ujHa`3}@P~N)6qPNl3W_9EMKN zBy9%8*1t<#YaL&5cDpk@KvVUIo8*+zzZYcyr=}AK3o+Y9=q{?G(i}Xy3%5<{jg{{<4mD#hbt8IfgAR zIiL>?QfypXgs}^oWQ&ciKpH}IGs$M`7-zh{vFRTjW9v)j3@MvKga(2zt9tePXP1Bv zCZN!BxaG@r(a1hk8dg0cp7D{_5;}J?&0Zu+dF2(sW?nT zX-W8^uLAo$=#B2)C}H-q*du%K-`8HIoE5k;Q4i6}etc8J2D!MB&8eU%C-~AKZx{$n z+q%KS#ZtSrgy?qil`&uQI+6(V+x{8PpA#nJzit(eV48V0yX%zT; zUK@qRorc-`(+8W)ZoUR4$UqEKOTu`dijx-!1qbK;!fcf*O@1`0$3u<-27hC98o8yk z-^wS85;b18lDoeZnG|*>fghwVKs`&w)7`@?=^lTp_OoyJa_sM%EB4NK`|zHSEg|EB z((mB;h+2E%*KN?4-nX_fyI-^KhTE9X9aEEP^`P^_+_-;I`V|;yZf0|eypfJ}x`0(um*{4-4 zLYhIQ>2fq1`xO+9In|+iA6S5~uvvi~P|l`T<|{rmm@oiGit2&mtv>H8{D_iJHPew% zynwql7c6;d^G`dcf)x-Ke`KLc4D$yNp z%9&@ME#{(@y%HEk+9|{yp%^sazW`KK85RY|tK`_kXYiCiVmf_cCF!8mN6%9)ji72i z6WoUw1Y1?wyspnhC&b6#xbz|mUWU7Q>D~}!h~I)Ogz2s> zgt&?rQT>Oeboh6h+|@Pn9VLA}On+zC)U#`;x|%p=<{Cd|Hgfty->#Gs!Xr5~H)@h( z9-1ZQ_AZJYNfNl~%)9eYt&rdNFfd0bE9*t|)e>rrQWspR?Jzps{ft24eV(}cC`cI^ zGE~jb&dlEhZ?|xUGV1WVxOg3jE$_viI=pNe>=Axh`m0aSm1)Gumh3N;HA)pJK`fEo z`4*t=;t{ov3AmNph>%O2v&tFf@SO(LoQ3*K?znv`#0=lovc>vJk92yPefe3hHcr2XgSxcKNl( z=4^X*@>}e}cxE;-dVH?YokP#8g-<$8#2}8^+}}@3Q%ch4&Nw+aU(jj7YbYZWmR#@) zk4N+&fC}tZu|$M)ff*Qg@N*jT1&vlGo1O{kYdEkV_t?F$*{~Gh<9QpTOBwLauBJ5j zmQV^Y!(*)40*DRtE4wM5FxZ{tUQ{&c>+d%|KX|mg`Px3@#zMV zpjRM^%KX>HaA4`_mx%>oF)Qbo?Iyz+wXNXcSxjTq&SC0+zMr%l zzuBzGr9|f2aa-)*@vi5VkjIJwvWDUsqq%YN->OV&xoq}GRsn;}6zFt<-BHcfCi|3% zldp~Qs!x|^d2!>b+V>7J)>Ib{COla$_As&faWHQKkeiQL{(P2TWY4vUhhYyjlPKr| z_IzpdUnzzXrLgnXL3e24_XMH43kjD1K0W`xjjyZ=Fbbb0*rwdZR%(4Z%Vrc%z_D`` z&|G3cq2V{WFnXq=!}gnrrJFej;+Zs7v-p0>96WSSdY$^W6CC&bjG5}=_|2s)UWA2PuisP}z_%~P;GK;}KJ z^wSh3b|S^9vA*(<(bPN>iK~v1nVjiUSE+J&$8zHx)RQewIa9X5m0K;u@xghaPtiEj zS3+RR!jT_jSx;apKM;nGogrX8l}ppEjebPGcM4a&b2I>v3q) zZ68jf*3sdi?}1F#{;t9Jw6gjfKI1%2Nyq8fee>6WO)U#B>tFcIsnSb8qR7Bj+I(H_ zcGUjdx$l$7AZM$w)3EZ!(d70N>}(`PZ4rgLn9??@6)1YYkLxeh){KeG2^%(ZIuQ9a zal5bm!a5@$-$NbmvsH=+>9DOyI^3Zt)m9xp;<%Yqf^Phi79-r`?^G-iH<;fxpE$v$ z2I*efPfShg$Sui@juF$-GZAt(hFDs3*qg_r`YzN<={HA1-$MB^bNUT-=e*6D2_M^h zoSqcy`3*GJNYwQ^akG5faAmSCYQ;4`W~Hi4g}~zvU&L^0zb?)>M^{h61e^2g~`X3RYoKCgi`rWfB! z$QlBHP@m@TPQMRBj6Qkw2}!(k{?cU_15x>Phf-6z6)+Q>QTzHjx9nMAhKsQcShyOk(2cc05=6W2kq#emAD(zkK zN~ro>?O-sLk`&EN&F!a?cDME#T=i;$LLgE}u{Js!0fLI^!V_w;6DsDTOsD4XADd z)C2-UJyZ>=qzqaI?c7Da{ANa-T_L;Zu$^|2Nxk(rCZn=NPVioXtow5tJU7d1vrw~V z6JL42dWrOW2i6KX7T{F$zRt~~jF!4|xB9K90$31brhQ#l#~W|`vSGR>oNf;)VIy%I z6q4be!KQTTahv9e9WHvl>lhgfBK^sosk8dlcp@^3qi$d?Z~^^fvMW~jp1*y*=vH(f z#hf;mVW6xaOJMW)v3_q;E=f&!LAGq!{Q3D(dP#hUOyw!Z64KaS~z~xv~IRoXSz(H9rg5 z_QGP^qz;rwpGfE1yL-rEXQfC#n;uf%lM~qKeHaeiLsYsDgd*K>O}@2XjuD<*1@nWY zkDB;n&{t>=h=AzbfetI!%-fTaE&+>^S6UF7Sa}+A#!I@7u-OTkI^n(`Dk|KcI-YNq z85y|1Roh>j5XNF~%P2h7#*?$gm81_lq;)=lage&{&Td@-obFlCp`rOPS1^5h;1Y0m z>OLCkgB(Mi6D|SYu_MLjh;!eXGSA%sb3fNBDs5L^fJa!PEQHSsEdGCNuK$0jKmV5- M^#8xdKwi%LFZg;=umAu6 diff --git a/ webgoat/main/project/WebContent/webgoat.jsp b/ webgoat/main/project/WebContent/webgoat.jsp index 6e21d99c6..51143caf6 100644 --- a/ webgoat/main/project/WebContent/webgoat.jsp +++ b/ webgoat/main/project/WebContent/webgoat.jsp @@ -19,7 +19,11 @@ The exercises are intended to provide hands on experience with application penetration testing techniques.

- +
+ + + + @@ -86,10 +90,6 @@ Use of these techniques without permission could lead to job termination, financial liability, and/or criminal penalties. -
OWASP Foundation
Aspect Security
WebGoat Design Team
Lesson Contributers