From 36b10c07bc80b5284c8ae574ea161ab721b940be Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Thu, 23 Mar 2017 11:49:34 +0100 Subject: [PATCH 01/22] First attempt for challenge --- .../src/main/resources/html/Challenge.html | 38 ++++++++++++++++-- .../src/main/resources/images/webgoat2.png | Bin 0 -> 35040 bytes .../resources/lessonPlans/en/Challenge_1.adoc | 9 +++++ .../lessonPlans/en/Challenge_content1.adoc | 1 - .../en/Challenge_introduction.adoc | 9 +++++ webgoat-server/pom.xml | 10 ++--- 6 files changed, 57 insertions(+), 10 deletions(-) create mode 100644 webgoat-lessons/challenge/src/main/resources/images/webgoat2.png create mode 100644 webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_1.adoc delete mode 100644 webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_content1.adoc create mode 100644 webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html index 00c0e2c2f..b5a072d9b 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html @@ -3,10 +3,40 @@
- - -
+
+
+
+
+
+
+ +
+
+
+ +
+ + +
+
+ + +
+ +
+
+
+
+
+
+
\ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/images/webgoat2.png b/webgoat-lessons/challenge/src/main/resources/images/webgoat2.png new file mode 100644 index 0000000000000000000000000000000000000000..c53a1f75b4a3343f03014336462ba0fc6c2e4011 GIT binary patch literal 35040 zcmeI5Ra8{%qsD;&2|rRv2|++Yx*KE=hE7QlhED0BhLQ#;DTxt28M?cqrArhAh7?dj zS{mf=zd3j3=3Je%&U-PlFWxn4_T66lS@By`b{h>vN0G`LEjg9=f&Nx&-Lhn5bMv$l{Wrmg>ABA>~f*A zv}xF3^}3^ZJyR*+@ks)89AlZ&pRC{5KYPTjn-Z=AHyd8~7qg^99pMq<_0#XpWk3Y=n+9zqT9^%pEA>Uob z7v}LWpI&>P{ZIF1bsB`o9EqO_AzTj$6U!&njHt+IlQmG_qoZ<I31iW*d|LpZf)IbjBdZF9Gv2F3v3wt_h#pd<@TpENJJNQoz`C~90klJS8_rp z`T4R;ve;klTAGk@w_=qtAC|<#xTC^x7>kU*>ST>m>tegGn)SRQ)_K#WBo7Dv$zzh= z$o)n~K0)8ix7BL0)W)Qo0ry#5<3uU+i#Z~7PtfngJE*##=W$v}>C1^wGSW^h998?I z{M3$Pe-%d+E4KBnp#IR0q>G-daij04Rn@~=XtJ`zPy8HLKy13y;Z)J&UIX8>F*J8ud5B91lzL$=rcI|aO@(7ffX;J>r;lg2A z!XkGzQ2iMDYQJFrY(s~IPm?s!2_{j^yJ9UnLWrox|HL zWA*z{t#0d*(q;GR+*p&*u6#0=a;(1OQ){6>{0Cyu&e!?Y)SQs_cE_vG;dDw)6RyLN z#+2jJiV?&6vnO?fTBgW1u86KsB>p19KTnY2Xm-qXvSKbWz)Pfw;kc>3)upo4_q)qd z%uP2gc8Qih5;b_;>mqRSr4*un-qu?xx5Re16}QsCN34LvB)Gonl_ZyIi4P`19a|yG z=1p-*5Ka3tc^If*Ji%sx_LPefRZPRrF* z4$)>tE5{iduzF}rjDB$KT#`?|dq_XBpt#omcmG{r%AWm?Z2=c5ju$}KASNtiNJbZdE6dGDi3_(Ho06H=Qk1({sMt!6*eqmS)1_Zc>f!VVd$3 zG~6D3T_l(!bQ3yzo;)ENhC3?HsDQmmCI3;ReIg3$&`kFtnhUOpw@>wvvaN7I;-9VK z>tJskY}D)J`FiF>lB|>#%S>FJ35uhxC8ay^CP8hSi|nn2H7P11jc{4BCkn5hvAh_c zAYP=^Q#zwYXAQ(j3mUJDOlPK6#xTzE4d)YZ)?;#y+C5bS8ZWD6zqL8bj8dD&`tDn5 z%Wyj6#t!bM$lT%k!>eO^sNAc!T2$tdiks>|PQ+1BYFpf$6eci?hbx-LaDyS44K_T9 z_DMFX(WZda9`;MQ&mnx|sF*-oJiV9$s=Wr*SFY%p?vP>DlGc&jUV#wlY2j!zp zXP$KtPjozXd0iVilAa^IN6U3*MYgfw;A;P$S+wQ?t2ox%$x#Qm>?Mu+-xC)7oiv}p z&>lQKcv~c&*p0sr6(q41ZxfBoh1#AGSo`D5OOI#79K4MDS5@u7w^-vkuHPCkGBmqg z;c2nH=kCAc7B+;R>Q$yo)u?Fjf+WrRu! zLuptU2`h6VEyhezF}{WpSMwxT9GN_zK^FK|T=6hFxU@A<8ObTSO)69m2<=>6Eu8*( z6mi#FHVt1nw(BoNWa`fe#i#x9qZ@TOM^VN`-rFs5IE{vKHC#Sb9UIMeq27~vg$pD4 znp#z(2WaPM2^{kn6yNWf0JUky{)r6E&53?o<*Yx0<5J0HiTh1DLfkDCR?c?6jo2rj z_)Z@W<;-6hKj`Aqu4^1LJ<9DvorX1hLf2(yB83)y{>1Vs$6>eC#IE*O>UAsl>ODjw zs}G&_6FPjK?9Qe=Q7#$PN8DyZGi+y*_UFX@{nRcFo`_>i{%{K(}u*TyGkQvUFSSD_YmMbQ?^0$p>s_voFGEY;D!)Vjd5jDzBG{ z4X1iD?I??)LWAo>>dU#5SBVw77v)B+M@T=W0!NW~(W9oi)w)qw$>xLaaqXAsxJ3IrOSifmoqwoygx=gJ|cDz z?tMCnc4X+ir@rQiN-C`D;k8@8vRKL@@AwKpic1P@8TuqLqP4T2?Vl-RUiK4&nQZh9 zJ$^lUFELhHfcb-HL!1EKBc@@$(ROK5>mQlTs@nrs*NAb{*sSMcE*W1=9Yp%KDo-Bd zlD(X!hl^zNIo(@gwyMWxlDNz0SY9j2b`(!bV+66esv#5au!#RR9m&hDu%$@H6TA$Y z@0Y8eT$o$bKYJ8=HkfgTd=3*Uy+Ed>STH@rT|*N+RiSDpH^78lajU%jsPOd;7Z#a% z=9#~huaYW4*L{^HY7)b|{zB@etyN_$UG7XKdDy^A!hd()ewQK?7WOe$iJ?{1ZJ!yA z3Vw!bSthJ7Eoz#l(;#DNEzMq1Ay-K1z&sw>1K~q&6CVFKpEwZM^G(#>;hl~@lt=g{Kx&wP~F+l3M9U>i> z{Nk4rmhKUbzRy&C=KQk$U9v^XK@Rb{hD=-Sk|<(|bAo$!htyOXhm=Ph;gR=CoF(jO z++4}!b>@YmccRN9P$_Tcc* zYjsZPy6$6;~!+Ve1Pc1;a&l6ek9rOu4&UEjgdrcJ)L zeMy&5#;|LXkEr;w%;>4HB^PGEfn*<*%eleZyktB*1Ip)xwdhMxESf0 zmOj`ucW5;$R~{H&vU|11 zT4)$xwcy-}$9#U*e$qo`kg7{-5V?{cxD}}Ogj}YDJdn`suYjEiXB_1AhE!n`-2-0- z&#RhQ#~T0JEk4BF=xib%2Ug zXO$4~MgBSFbHHeB`V`t5&!4C>%|h@>Yd_EM7C6UmkiiEl#C*+6_TemoX5#V<^HRUy z)I&4Od!`RZVv&o+G>lNy5B1xuKcn^z=%aqUB&Z>``dH2+eY0>-t{ipUkoptrPdiTj zGmQm#8VY!aV6P&nmPg#d2gL$UqN&+R4!C*E<3P~?b`SM;Ydxwwb2DTqa%MkvSX5qW zRbb93e$Pagj?NWt#S3=|+k{CYEySn@!oQfrng!Iw6=P3fx_uU+Fi*m7EO>XE5Ovv{Rvi4V9b}f!5 zhz8G|a_WgPrauk1?77FU12@`vzp7LT8N^?}5y~T%ZkaSw&B9M0OIPSop2TSxMD*Uf z%4n^`CN3++3MVU>ig2Hl7EybYS`ev*Q#{_3bCR9qE@Y$dwSpMng@M zMYjq@lzKsS7_D(gV@OASrk=`h}w1RP4F2zIdgpV8q%=Y;$l5nG6Kj<@xIFY)s zN9gVpzK&^hm;LdPzs1@EV2sn3ynU` zp9Pb(WCsyx)u`mxwFFO^?#nGf&aV2Ya-~s+*eO%uIOcOB#t%<_&E%S@Q;5#jQ;~48A8TdP zM@D+Qup9SGvc3DsEc9##wx1yMh{r#8!>U?z=HWLkFZT6+(?+1KbRjv19hn@aQq`!h zla0dhLpYhXE89luhcs9pd4eJ<7Z(2hraia_40!eM=SaiwsKx4!M47ZlsJ#n3^Ou=% z2b+E1VdXtkkiVnssvh^mgS>V}nRXa=w>#F?Gw*Gs0WL z?rZn^xDav3;m9lN!lGAdtV-kf%i?1gq)e){Q#_q8aEXwj=ONITyR}`p{8UWEZ8O9a zC#g3c1>TMV?^sl?5-2;iozXkh0ZKk1=JYbBRW+mh6oza&MC9cvlm>H`^c?E@VWg?8 zqRvq7cPOhuDcgXy7iqsqjJggd@Szr7=as$%+?ReBDoAANL>PReW{QEG*Tt@g$am8Hm3NX&}7LByyXUfR+eoiGY>}Xo-N92xy6bmI!ExfR+eoiGY>}Xo-N92xy6b zmI!ExfR+dt&VbeOU;S3ngfZ+@n&VbeOU;S3ngfZ+@n&H$DO zV2J>h2w;f-mIz>p0G0?~i2#-eV2S*nWQja{h_Hd%y|VOrXzOfg_Yh$hV61QDtLg9T zq6KyG($ZHDGwebgoat-container ${project.version} - - - - - + + org.owasp.webgoat.lesson + challenge + ${project.version} + org.owasp.webgoat.lesson client-side-filtering From debc1e4b737ead176267abe6ed0e19585921c5cb Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Thu, 23 Mar 2017 16:12:04 +0100 Subject: [PATCH 02/22] Added more for challenge 1 including input form group for flag --- .../org/owasp/webgoat/plugin/Challenge1.java | 56 ++++++++++++++++++ .../java/org/owasp/webgoat/plugin/Flag.java | 52 ++++++++++++++++ .../webgoat/plugin/SolutionConstants.java | 13 ++++ .../src/main/resources/html/Challenge.html | 17 +++++- .../resources/i18n/WebGoatLabels.properties | 1 + .../src/main/resources/images/webgoat2.png | Bin 35040 -> 89932 bytes 6 files changed, 137 insertions(+), 2 deletions(-) create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge1.java create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Flag.java create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge1.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge1.java new file mode 100644 index 000000000..2b2a4f1d4 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge1.java @@ -0,0 +1,56 @@ +package org.owasp.webgoat.plugin; + +import org.owasp.webgoat.assignments.AssignmentEndpoint; +import org.owasp.webgoat.assignments.AssignmentPath; +import org.owasp.webgoat.assignments.AttackResult; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.RequestMethod; +import org.springframework.web.bind.annotation.RequestParam; +import org.springframework.web.bind.annotation.ResponseBody; + +import java.io.IOException; + +import static org.owasp.webgoat.plugin.SolutionConstants.PASSWORD; + +/** + * ************************************************************************************************ + * This file is part of WebGoat, an Open Web Application Security Project utility. For details, + * please see http://www.owasp.org/ + *

+ * Copyright (c) 2002 - 20014 Bruce Mayhew + *

+ * This program is free software; you can redistribute it and/or modify it under the terms of the + * GNU General Public License as published by the Free Software Foundation; either version 2 of the + * License, or (at your option) any later version. + *

+ * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without + * even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * General Public License for more details. + *

+ * You should have received a copy of the GNU General Public License along with this program; if + * not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA + * 02111-1307, USA. + *

+ * Getting Source ============== + *

+ * Source for this application is maintained at https://github.com/WebGoat/WebGoat, a repository for free software + * projects. + *

+ * + * @author WebGoat + * @version $Id: $Id + * @since August 11, 2016 + */ +@AssignmentPath("/challenge/1") +public class Challenge1 extends AssignmentEndpoint { + + @RequestMapping(method = RequestMethod.POST) + public + @ResponseBody + AttackResult completed(@RequestParam String username, @RequestParam String password) throws IOException { + if (PASSWORD.equals(password)) { + return success().feedback("challenge.solved").feedbackArgs(Flag.FLAGS.get(1)).build(); + } + return failed().build(); + } +} diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Flag.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Flag.java new file mode 100644 index 000000000..6ac1a0e62 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Flag.java @@ -0,0 +1,52 @@ +package org.owasp.webgoat.plugin; + +import com.google.common.collect.Maps; +import org.owasp.webgoat.assignments.Endpoint; +import org.owasp.webgoat.session.UserTracker; +import org.owasp.webgoat.session.WebSession; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.http.HttpStatus; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.RequestMethod; +import org.springframework.web.bind.annotation.RequestParam; +import org.springframework.web.bind.annotation.ResponseStatus; + +import javax.annotation.PostConstruct; +import java.util.Map; +import java.util.UUID; +import java.util.stream.IntStream; + +/** + * @author nbaars + * @since 3/23/17. + */ +public class Flag extends Endpoint { + + public static final Map FLAGS = Maps.newHashMap(); + @Autowired + private UserTracker userTracker; + @Autowired + private WebSession webSession; + + @PostConstruct + public void initFlags() { + IntStream.range(1, 4).forEach(i -> FLAGS.put(i, UUID.randomUUID().toString())); + } + + @Override + public String getPath() { + return "challenge/flag"; + } + + @RequestMapping(method = RequestMethod.POST) + @ResponseStatus(HttpStatus.OK) + public void postFlag(@RequestParam String flag, @RequestParam int challengeNumber) { + String expectedFlag = FLAGS.get(challengeNumber); + if (expectedFlag.equals(flag)) { + userTracker.assignmentSolved(webSession.getCurrentLesson(), "Challenge" + challengeNumber); + } else { + userTracker.assignmentFailed(webSession.getCurrentLesson()); + } + } + +} diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java new file mode 100644 index 000000000..dda05d492 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java @@ -0,0 +1,13 @@ +package org.owasp.webgoat.plugin; + +/** + * Interface with constants so we can easily change the flags + * + * @author nbaars + * @since 3/23/17. + */ +public interface SolutionConstants { + + String PASSWORD = "!!webgoat_admin_1234!!"; + +} diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html index b5a072d9b..76398ed1a 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html @@ -33,10 +33,23 @@ -

-
+ +
+
+
+
+ +
+
+ +
+ +
+
+
+ \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties b/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties index cbae74dcb..7a0256c24 100644 --- a/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties +++ b/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties @@ -1 +1,2 @@ challenge.title=WebGoat Challenge +challenge.solved=Congratulations, you solved the challenge. Here is your flag: {0} diff --git a/webgoat-lessons/challenge/src/main/resources/images/webgoat2.png b/webgoat-lessons/challenge/src/main/resources/images/webgoat2.png index c53a1f75b4a3343f03014336462ba0fc6c2e4011..394793d4b4879927227af837fbd14b39e161547e 100644 GIT binary patch literal 89932 zcmeI5c|29^-|tODx{Vc*p@a;X$E|Ifw#?Huvs(#~F_GC8k|9cjRP4Aj&n0BY5SfdV zl5I@NkciC6S!-AKx$oEWd!FZY&iUgx&p8(_d)Jz-YhBm1*7~mR_5Hp-vBrj44D_7z z6ciK;I@(wq{JjAG8PM&9KMk{G@bDL<4^B&+qVxsV3w1SrK*m~95aOrexWK!8w0SKS@R}8FV@CdDYWmSgj3RdxQk8|U|J|w>d)~WV z_w)>(!JSxH6}=DB4%ou?=SObwxqV$5aY|G=R$IGJ6;r=c+R-oJ6;j#p=g$1AGjq>U zsIN3pRv7(opi(1ki6mZcWZ4*3PE`0I`j8{6*ehSV$d4}}A#OSMg$|!`kZ#`tx7yKq zSv|*L4T_EG86`0x+SOx>p9zaqt`gD#X*bLDFznV$!omCbJ>%qA&GLn!aH~1D6&u)^ zup4nknyKRnSZ1b1BP!iO3)W-GPW7pM>sM%WJSIlvV zUtvq5SuhS;PG80n1D|r|z2=d#h?txkB2?_(*VH6xPw>@3m8*E!EnHUU8aT92&ic0S zd2-W2<5BMr<-r=Q`wbpKXA1aK*4xXEQEo40FRo9U@JSdlCAjIJ%6Yx)#=;fOwzIia z<3!eYKbW}>wV9PE$J|X9Z&r5reDoo%c1&}td2;A^wbd8ZL=mm4W=iUgG9k2w6k^=J zXF0M9Q{Qu5nZ$Ob9uT$>S?aDzT3IXUw%q@2wW7nwmT=9}zbTwRJIejXae`uwAnALe zMg}4HqFgoiO7){!kJ8$Jw;p4$JIyqd1x7&xV#oIu52@8xh16ynbuEP|V**RFaT5&^ z3~B_@b&ThkxlF9dF*3m##ZZBnyD@PotjgO%r&1y5@kp+uk(c| z*VLR2h1I!U>A1VBDVX4I*E66}QQCPhEk-NO+MM6pptt9~XXBV^;@%~$?h%a-Z9f)o zha@eWdp{@T!6tMnw6f!o@C*6SMV>uv+ZsJy`R$J`=k1UvQ)VAkrzGf523dO2_A6)7 zayfF!zaZr1-dI2Tbn$Wc?i>5+8SZA2ZZol8`6MlPir1n|Z?}hi{&g{Wpy>R*@f=YI7^CVM~l)5zv7O))cN|| zi)}%58AEhqBO%c=l}5}J2XL$tCt8?!1jJ{v{kZpt*Wi0*#IQUZM;_YiT)*jP<~!pl z8Zj&PEWQ5^mKc9&PCI`w!5kx%__w?l%W3G2-Qm5|r0A_LTfB3?bRwcUWS869uA4WD zmEE{aLzw-U7&1Nw(fcs?Jn1@H+f@l&)`&m(03FVlO6wrbm@WjdF%f z^@&`4Z#2ac9=91IVsE%>k?qNWy4(@eAG0gpFZr5K5-*PrKRPnXcqggmOd5??FY9vC znC5O(o6tJpQNdcv2T9u9RrVPCaka}Q`A)s)Wf(nZs=3adbEiEHEp7dwdmt^jG?wR` zL{}D_@FP;ja=nkXRMl45yEk?2%02AR)quq_#>&Dj8CN?NlazN$d=ocuTGDDUoy;rp zPNqrrW}z1@8OQrzt8ak0m2aa{PZ%4as8;@1)WbeDvEU6h2vPLLlPb;844GdY9| ztkXK3V-VFa`o*o-ucxE_)YUum=Bjmt$Y%o`<{Uxi+_hql>9sq=2|Z6z=7pd!uZT|C zbUJdm& z)t>2!^yO%4E8n>q6{;#rl?NhzWewAh_hNnfOmj!N%?ypodcNkk51^=^Sfa$|2f=y+ zu5G=yglBr&XteHp>v(Y@5udPFZ6YIDQ{v$6{Mkyd?|8t#N@x1;w)LSV3FC^Y4%_97 zR^nPj<+GfMyJ-ZOk&hoKE*4V>IvG-ydylnvWxw|AFjFzzi@if(17 zJIm4Kd^Y9V>bZOUU#ND;xyEL7)$HOql~jG6Iv~hdMU<*NJ|~|$gwB0s(k?Er%VA-t zC52H7U6*nGpl4j_SyFMqeM)!yE7=@MW8Hy#F>jNyi>Eaz*GvcNiFSFp=HC<8w}z6= zCzO2IEVim$CIs?kyUGpAFIQJgR`lo;%p7_fSHG1?lUK=Xy5^YJn{`rjYD)FY?MEf>lVc`Pj705tz~fNM=|K}|@%KI6PyE05UuZSaaAwX~P!E6-G`0Ds zA|K9vy2Do#wL3tHI=>*-iMthbE5`T^w*Don^656Z2%G7a&SRH*_9a|JOC7l{Ul}L0 z>nLwmU{5{T*71GXW8Jy-?eG3Ch|k~o91~Fv5H|5oeN*NmMi@J%V(9Im6tls3lR=>D z*t!zUc+OREhXeIQv6`wY43MrRuXvYS&>It_t=BqZQLd}IZk>I*HTlfrNR9qW?|h$1 zylB|V2!+B;LUNKF?_rt`IrQqdKvq9UCY+MuSgSIQyp(5>I_{qrfdwnfdi+ zr45gp?PVT4(;=i-QJLmsToBE`xOGaRi{>ut9{h|0(aCo4lhp@Rg<9`cOn_f zxJtwtK9|jGowUu<-&eO7Dg401elQ>PC1)PR=Yw10R4zT+9sZO`g3GAcF7n_P?kcy0 z=>C8YB^^|=yt$^SAL8REgaXcq9hqtB?-XYCX^&1Gd|~>1H-+)R#C>yHoVSX&zns05 zDxp#Q?ZxL!d)Ge%J`b8aV9TAXVI2;*TjEf4(}kg6s(EWlWR8Yjgom?w?7s8k2BXJX zWlN8R;YV$tM2M^Atuk@Hxr%`|#qkO!vKna8Gu4`Ju=w3w&g%}OA5D+HkaC3@(#G$_ zw=sX}?N)ItY~6VC73V5*_Qu5(yW`&Zb6o=8b6WYeg`PjwPxLFU=C&+VW%SaeKcd!L zG$>y{-H(bXyvOrF;7OQ#1@p~N9_jH6VO3GYGa%|Dr=G4;3j-0=}`EI*1ZA#CbKC{GS428Z^Kra#X zZAHR`WH{rOd(L`zRiF1A^{&E)F9*f5-Q%a3?K?^o0`NAA_I%QKMb*mT6QAtaI|q*} z*dFe_N*J}~;KAzNe>BJcF?!)ESM;aTbPre@o)q(IbsD!k^ z`gt&>uxBWLHeR+-_G|>2V5h)F7x~KODn7U(E^pKH5^=)iQb+{HaXY&FP5&tNYFVtQ zW1H+JoyH|jXTJUZ#8K*UyR7sMAETp$3ugye{feL02YGmgjz3(9>s1>W6YtN8({`QE z2w)XUq#pMSXXX+W+%%6T?R-dj?(@uTB3zzEaR67?WjRJct95AY?6sN-{Pksnv;jTQ zz|N#K%6^_(Rv&3naE6?P{U+s0LaQ4|Qt16&E*W_l6zBV<&7^u&TRQmL%C?$DyVc|` zy;~DDmFG!S58isZPtwHRYX07&W+`K?Wj#WSxDJCz0m^}A@yO!QqBcuxFMwGmp=KxzxQ8>dEmRKJRANZs-vOoaJQS3Zcg zYt|;ovyWi9atxL@EIC=$^%MBzqQBj5%?)~fKs!euEJ5@<6-DdKEOrhN-*`HTH_Hxz zM7pI6in7WAAMFE^%8frl4%#--NZcRFIVc@B>yh7iTXxw+3co06cY`M8@}X9%E2}4V z&iUi!b1%nMUBJA5!npAy?QY_+Ykg_A7nAGOavopO)lph2e<&n$x_L@iMUoGrraDsP z=l)VU(FoJwpHfbYmCTd#FRX}A_@Gy4rZ|3$@!CNgf1&H6z@qn8mLA}PvXA&OsMxgo zC6~S&z$Uj*ur?b>uU79@8KYj`ZezFHLYo7))Z1q{?haa&q3Jb0n z-Q|jk@;>GK!smw5-e>sm^?9Ae>oP~hf-X%vl*GaO%&LZmcI~So%^!nvm^@ za^ma0D%to>sx+sGIV=4o4vHsYp;4tHBR@VL{JI$ueE#sq?#iwnyUF(n$|*;Q3!A&3 z(`j*EX99_e2P7!nZ3|oQ>Ei;+_l-ycC!MvM|6EpF^p)gLeC_a|^giX0|l8+n79u<~n5r&Q3`>-iPl8raN zZjga>HF?K7+t*dv?k}J?;@7>Z{**B^=+*f=&DQu%`{Z6DcQ?y>LW$ig@m(oH)GIi{P z>Y1VXnnA7Ls+|?_$yn$EF=OQE7DPBT7e1IO`z>)!$tI6Wn~pY#8j?SHkF8+bpu;V%Wtf{wn=Qb};=C&F*T{1`dz3U3PJz1!{o z`uFa?TmV0q^mW%zb1C!3U@r%Sj;0~DRNXEj7Pv%!O9Z$?fJ+3pM1V^KxI}-i8CN^1|-ga#2Jt{0}^LI z;tWWf0f{q!B?4F?fF%N0B7h|VSR#NW0$3vdAF)Iv(2DYye}WvK)9)Y+Nb?uV0j=nO znTCx21?J@s~_JBsAFhAd0A!9U38uK^k1BClLh*ng@ zkiic~tr7MET2UH<;2$6hNE@vvi+N>(R2IfSAO*lA2uKBuI*XZbfmA|}O(Cn}c91sA zgg{yaviutt0yVSlkBAXP|93$k58Ah3I)m9a3#Yqhv5ykR@a#;!CcNHl&JB zE0EG4?WLdXL8ezg=45;YWNq6BVG)1@WG#(U41ri6L+&@n0*#Wy!0il=GPI%$2C{9n zLMzH)ep4-wWoShdhRn8r3^$%2eMLS;xbKf4z1a722@11_jDCc80jd0Z$O~k^Ak+(_ zSIdzqBZvNpzd(lSuh<6UsE{G~)A~0F1F6$57zSj3&@hm~5FiHf-3AXU9GQv%nW>CH z8ZZ|FvOt;wjg+wj!F?f(=~sl??-wHjS!b&c;b2Y%d=(iYqzvSokc(R$u9G~5%*;Sq z#tG7U1}~MuAm|LFyAgT@r1E!s268emK?8y>L%65lOK7P9X%d8`ffSG6G?1R^gw&D6 zKdBn# zf+UNOdLvx~okE}-NGp=L9LS00Ss(=et3GJtTaNWc7Kbs&Qc z#&wV{F7v-3J0Sc|W(R~rpdFA&u{LB5V>=)`%n{n90ED#zaSpSK>Eq? zKw7GVeC(6IaUKwUa1uTW4D^6(eiA((wIL-)4?_B}1=2u{^l#7}$jKpR1Oq;hn*nlT zwT9qJUIFtzQ6ETs;N9U<{wMK++z9Y34<65OGyFn-AcYMg*S_pGq_zkH1j1`W+VE`# zE((4cNh60tXdsZmFB}MRcY-W_BSD~3$o3X66$Cmphx%D|BZPwt5jY5hH--%Pf8Kz} zh!E&hg*SW|;K`H_ct;^f3o@%eO#UHLI?1CGzQ`=cAhqAHPUPx_d7b1IuWLmKnC={et<_ZupeMR6|f&dfc*gM z2Vg${`{A!AF|Z$i{Q&$A!2baJ55WHb{12tT{{X++!-!JgfB26rB;bEQoQYum0`~oZ z`3o?A0p>5j`~{gq4(tbDKO8;`<}VPz3lRSRTL&Qi0mMIm_y-XGfPteAK>P!Ue?X$Y z;Ls=#|3Hp?`WI?hAbt{w31M!n^h#{~aK>Q?#p9J|AApZj7U;LCD z1^E{s|KcynRFHoG@-IOC1<2n7`I~UM3&`ID`J3c-C6K=f@;AxS?I3>>ILv0$h-x>e*pXkz<&VzhciRvmRd62mDFEpER+zng{$zz@J?E1Y-dKe-iK~o9w+?dMo=z zHHZ6(j|2WB;7iwp-fk7g!q$y9UvaK7XK!3wu{-XaKi4JjJ*SmlTj=>?{Y1awYHrI?RYose z`Xg%1MT7DM)cvTK!h1X)1fGQIka{zOb9)CY?1xI9^JR(t7mAQ0a!Nq=4d}iB-IgCf zw*>=qTYzp0&}{*JGobqhxa%9p^g7_K1MWKDt^@8m;I0GR*k7(ez+DI2by6uxa;14yADept3p~@knP%8uO;I0Gi`WA#2(qBZRIskVa0^D`LT?gECz+DI2b--Qkgwzo`*=b_VN`DEmf>fV~ zg(87kr6VIhK10@DH$#HY9|raVupbJ>4LaQNT84rD0r(%RARMqCfc*gM2Vg${`{67G zGH;jzx-G~oEu;ZSBeJ+s*ic8v;KIor57BOCgsKEt0Q*4}Zl1&BA25Fb><1}eKLGmy z*bl&d0QLhsAE6Ct0sEn70hyQZKAZ(~-+=BL(0v2CZ)g+>=)M8nHw)-=ejU(#1G;Z8 zgEe3U=)M8nH=z4wx{XFDVCo*W7y;ck!;L4%96lOl5C2JFjv-O7eLt4~`@sg-55Rta zf&L>;f&BpN2bj4+7zOqNupfZ^fXHH2UBJA50s;F0BXd+N2YwUayzi)Y6+V19 zD4y*eKh134QKArlw^_93lg2CloVH-^96YjMd${{59P+@ygVnwNXpaA5^ukxJ=ufBV z9wS%EANu}xr9$@5gJU7` z?SkI=w?8~ZsMO3!D){&FeA=gtN=O^5p9f1x1)ny22t$QvRG5cHrY=)jZ2))eEa>0qtxYgS?RxL8Cd;_pVtTd z3{r^eRT~)-@6U?UcAd}&U=>TG9`_7q<`Na$G><3kd`Nok^UQ4`T%Ja809V*$IYvRN zb!hGEH5dYUec2#wKo7=8C#_NT^W3ufNRxsyb%sy^s8WzBj2^O5H&_LM4;Qg0AVq>)xTg&YY_DRI87w zro+Ew-}Wse5;2~6eb}iqAgJF(V`if7y1;Ydm#U4>ng&u^$lW+K;-mUiTtn)X2Vo-2 zf4cHPv|Y0{NuGTK)0Jbe#9_(FvaX-NFBkpoers;f^8?yB0$~ZF=cy=KZ)UM`i1^0S zQM_4p2qe-iWl)d>R1c8#*ALn@(n#DN$~h<b18wG2#k@RZy zew8um_3bvc3^Z|xGO1sY3i|bk%dpjFl^=e@#waYfVsw`)DvJC{e8Xw)Gko~^yw2iv zWFr33v_rZ4;NdqS7X_#OOzFmYa)zZZHKYmIo+u~2?yHiG@1#om2`u8EfN@1pWLD9^ zf1-*Klv9op7dCf6r_%3BhWioJUs? zv2n^FrM*yi3pLR)Bv;@c&x)k5jk5JSk=9JndbyUh=d4{y3kk{8u@kC)pVW?pJ`gj0 z#lnRTrpkUxoKv#N~nKzvjzCKbI+lYsT)}tn;Ofq zxr`b46RGJ(`7v_b72XtF#*4FVnOxdJwEOG#kg@$?5td_=Q>yBy%yEP1%dgIe!fQ4e zg=ks3D0iJ#=S^p{h1U%DtDFchc z=2GU5QNTYsnugd?b-RdIV?!+ldQN(H5rd9476*SXz<&mGyWvm6Y#BWKMd^dnQl}_= z!8Joc!TekYt7aBJIe%*JYYS7(Q2!|l7R~8D`E_RaZhaBSxns;BsPhQdlliniDKh?s zRE5yrG_l8bjr>U((`3Km9eeR(;OdW6{}&tLm%d-BUYI7l-E6Gr z#RT80=nZ~RF*b*3+*4aght)yBC&oqF#qZgwWH%M&-GsDvd1h z@EP2Rl~vLEFztXXe1CrA7N6VKwGpR8rDL_V3so`oJEa}{5?&#d9e?i3zdAGbEQR_? z6J>?b4+knW(w0c#^+uMBapgpXAEFOA!iv4}wTt}t5)$H;b6@E2DF^BHJ#ecXt(Vnv z9M+)NsGd<06QW%`#`u}ASmi1q9gudjTo1!;%_JPWpWic1p4BX0CyCaQB4%lx@xAR?kE#Ndq^S1{d<-p zyD;@V=aorpSLy*_8pky?hX%bJ1-{&qbBDix)j2h(D-;;ha2y$yPM?t3(_B_pQ=47rK8>@aXm+$Ht?(=E*h`(S-@Vut zRF^SCH#QOyO;c&aTyX%$I&q?fnMXi;HrtPTk9ZBfXGRRm!*S%Hz0UQUj%L0yo}v-6 za?jHH|6qynm*%wd7Zc1eQi*@dd$F8`?${mPOHGR2`m)742TUg-szY|Uz3sYrvsl@U z+cbpPpNS#k)HiJKpFswn-jqgOXPeB?30KGu$>xxl_%8R@BgEz+(}mf10?(BoUM_1n z_v-bLaxUT9^CZpCsKPWIm7QekeWdD4H3P51uSe$^XPZV{V=+m2x5PJb6Q?Du7SqYRBJX6H zWN#LFp^`$U{N@`GQeC@f3J94vOraz*JR! z-Cq3TU5?=hzaquWz8)8Q%ofLmAFF(3^C^BE;ZJu-*w;l#DC`9Ju~8>H+%=O!$iOVrF4WnP&iv4;z>Q7z0LvOBHSBQKz&|%IIbk1EX_LyF~L!8j_BxPO*8uN;#bx%{dh0dx6d?pq}$BUsI2E}j{5+L3W_C4e0~tDH{jaV zdrNqxw~a>Y&bN*iClc`qi`6DFqBSKB?#`dB1pAH$46Jmf4{uu^YLYOnsOqp?&S)jB zMN~e^skoa)kQw>-k>X-8m7tR$Wx4lQi&yq*-%bvU8FnC0X6aty1p(vUVx{O-hPtyH zUCw7yzOA0S*Z+lTmz-;CR#(j~o>NKH=cxmNoK-}r+T(NbxkKpOS0?S^0=pa*hFVe> zwa|4L=MQ?urJf}f7u=_G$G?)zp)}SV$QScADZ6-DqjJr3u%2j_muvn#fqiQz>3l-T zm(60U+GRo@Z?>!4u>5j$#biZ~PQlEfw{i7bsWf?&%%*FOiM?4TMW?1z&s@IM;#9g^ zVLHNq<<@>w0zWxs62(Z=jt4vrwVWO_krsd7VaZs|OBxo2O(RkYNR`|_1>QoD}w zb_Mp-qir4Er#;r4Yv2Cv|AP4ZozF25rWhyhj{;ag&akIV5qh~sV6e}vzoQw;i8CW;y_U-M|)2-^%>T$J?+F#&~I>+JV z$)aj9bmLAWV;NV8Si|SCnXQwydHVb679)ip0GG&sh5b#;|`ifO=N}4hUgt_qwFz%yv6*aXjIybCdc?a4(fY4LKh`vt|U3O=xlRp>10RF-`;$;U70qe=T4tl z;xdLp-zfl5A|OfxM2UbX5fCK;qC`NH2#68^Q6eBp1Vo8|C=n1P0-{7flt^hLaEX+O z`^{AhyeW=XIFZ#rlb)&8e1paB?s8stAcztHi8CN^1|-ga#2Jt{^Y7&F{OiOS`u_o! CvIQsr delta 97 zcmX@JkM+SsrVSOoo9(66F}f=#l&2=8=O>mZq~#>0E0m{KM}{O<_*LcP`nzP8_=h+e zMP?cpMCFEM`Gn+T`-fzgL}j@eMrI|O`sIci`(` Date: Thu, 23 Mar 2017 20:30:23 +0100 Subject: [PATCH 03/22] wip --- .../owasp/webgoat/session/LessonTracker.java | 2 +- .../org/owasp/webgoat/users/Scoreboard.java | 79 +++++++++++++++++++ .../src/main/resources/html/Challenge.html | 2 +- .../resources/lessonPlans/en/Challenge_1.adoc | 10 +-- 4 files changed, 82 insertions(+), 11 deletions(-) create mode 100644 webgoat-container/src/main/java/org/owasp/webgoat/users/Scoreboard.java diff --git a/webgoat-container/src/main/java/org/owasp/webgoat/session/LessonTracker.java b/webgoat-container/src/main/java/org/owasp/webgoat/session/LessonTracker.java index edd0d1483..3d16e90a8 100644 --- a/webgoat-container/src/main/java/org/owasp/webgoat/session/LessonTracker.java +++ b/webgoat-container/src/main/java/org/owasp/webgoat/session/LessonTracker.java @@ -61,7 +61,7 @@ public class LessonTracker implements Serializable { } /** - * Mark an assingment as solved + * Mark an assignment as solved * * @param solvedAssignment the assignment which the user solved */ diff --git a/webgoat-container/src/main/java/org/owasp/webgoat/users/Scoreboard.java b/webgoat-container/src/main/java/org/owasp/webgoat/users/Scoreboard.java new file mode 100644 index 000000000..f6809852d --- /dev/null +++ b/webgoat-container/src/main/java/org/owasp/webgoat/users/Scoreboard.java @@ -0,0 +1,79 @@ +package org.owasp.webgoat.users; + +import com.google.common.collect.Maps; +import com.google.common.io.ByteStreams; +import lombok.AllArgsConstructor; +import lombok.Getter; +import lombok.SneakyThrows; +import org.owasp.webgoat.lessons.Assignment; +import org.owasp.webgoat.session.LessonTracker; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.core.serializer.DefaultDeserializer; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.RestController; + +import java.io.ByteArrayInputStream; +import java.io.File; +import java.io.FileInputStream; +import java.util.List; +import java.util.Map; + +/** + * Temp endpoint just for the CTF. + * + * @author nbaars + * @since 3/23/17. + */ +@RestController +public class Scoreboard { + + @AllArgsConstructor + @Getter + private class Challenge { + private List rankings; + } + + @AllArgsConstructor + @Getter + private class Ranking { + private String username; + private int flagsCaptured; + } + + private final String webgoatDirectory; + + public Scoreboard(@Value("${webgoat.server.directory}") final String webgoatDirectory) { + this.webgoatDirectory = webgoatDirectory; + } + + @GetMapping("/scoreboard") + public Challenge getRankings() { + File homeDir = new File(webgoatDirectory); + File[] files = homeDir.listFiles(f -> f.getName().endsWith(".progress")); + for (File progressFile : files) { + String username = progressFile.getName().replace(".progress", ""); + Map storage = load(progressFile); + LessonTracker lessonTracker = storage.get("WebGoat Challenge"); + Map lessonOverview = lessonTracker.getLessonOverview(); + for (int i = 0; i <= 5; i++) { + //lessonOverview.e + + } + } + return null; + } + + @SneakyThrows + private Map load(File progressFile) { + Map storage = Maps.newHashMap(); + if (progressFile.exists() && progressFile.isFile()) { + DefaultDeserializer deserializer = new DefaultDeserializer(Thread.currentThread().getContextClassLoader()); + try (FileInputStream fis = new FileInputStream(progressFile)) { + byte[] b = ByteStreams.toByteArray(fis); + storage = (Map) deserializer.deserialize(new ByteArrayInputStream(b)); + } + } + return storage; + } + +} diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html index 76398ed1a..b6bc7f41e 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html @@ -36,7 +36,7 @@ -
+
diff --git a/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_1.adoc b/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_1.adoc index b1d8e837f..3a0b7ee9f 100644 --- a/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_1.adoc +++ b/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_1.adoc @@ -1,9 +1 @@ -== Welcome to the WebGoat challenge (CTF) - -In this CTF you will need to solve a couple of challenges, each challenge will give you a flag which you will -need to post in order to gain points. -Flags have the following format: a7179f89-906b-4fec-9d99-f15b796e7208 - - -Have fun!! -Team WebGoat \ No newline at end of file +=== Admin forgot password can you help? \ No newline at end of file From a3d2ed171a34737475f739f883051e0c790b7bf2 Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Sat, 8 Apr 2017 08:04:16 +0200 Subject: [PATCH 04/22] First steps for challenge 2 --- .../org/owasp/webgoat/plugin/Challenge2.java | 31 ++++++ .../owasp/webgoat/plugin/ShopEndpoint.java | 71 +++++++++++++ .../webgoat/plugin/SolutionConstants.java | 1 + .../src/main/resources/css/challenge2.css | 33 +++++++ .../src/main/resources/html/Challenge.html | 93 +++++++++++++++++- .../main/resources/images/samsung-black.jpg | Bin 0 -> 12078 bytes .../main/resources/images/samsung-grey.jpg | Bin 0 -> 11227 bytes .../src/main/resources/js/challenge2.js | 33 +++++++ 8 files changed, 258 insertions(+), 4 deletions(-) create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge2.java create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ShopEndpoint.java create mode 100644 webgoat-lessons/challenge/src/main/resources/css/challenge2.css create mode 100644 webgoat-lessons/challenge/src/main/resources/images/samsung-black.jpg create mode 100644 webgoat-lessons/challenge/src/main/resources/images/samsung-grey.jpg create mode 100644 webgoat-lessons/challenge/src/main/resources/js/challenge2.js diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge2.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge2.java new file mode 100644 index 000000000..8bc916874 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge2.java @@ -0,0 +1,31 @@ +package org.owasp.webgoat.plugin; + +import org.owasp.webgoat.assignments.AssignmentEndpoint; +import org.owasp.webgoat.assignments.AssignmentPath; +import org.owasp.webgoat.assignments.AttackResult; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.RequestMethod; +import org.springframework.web.bind.annotation.RequestParam; +import org.springframework.web.bind.annotation.ResponseBody; + +import java.io.IOException; + +import static org.owasp.webgoat.plugin.SolutionConstants.SUPER_COUPON_CODE; + +/** + * @author nbaars + * @since 4/6/17. + */ +@AssignmentPath("/challenge/2") +public class Challenge2 extends AssignmentEndpoint { + + @RequestMapping(method = RequestMethod.POST) + public + @ResponseBody + AttackResult completed(@RequestParam String couponCode) throws IOException { + if (SUPER_COUPON_CODE.equals(couponCode)) { + return success().feedback("challenge.solved").feedbackArgs(Flag.FLAGS.get(2)).build(); + } + return failed().build(); + } +} diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ShopEndpoint.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ShopEndpoint.java new file mode 100644 index 000000000..fc0323613 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ShopEndpoint.java @@ -0,0 +1,71 @@ +package org.owasp.webgoat.plugin; + +import com.beust.jcommander.internal.Lists; +import lombok.AllArgsConstructor; +import lombok.Getter; +import org.apache.commons.lang3.RandomStringUtils; +import org.springframework.http.MediaType; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.PathVariable; +import org.springframework.web.bind.annotation.RestController; + +import java.util.List; + +import static org.owasp.webgoat.plugin.SolutionConstants.SUPER_COUPON_CODE; + +/** + * @author nbaars + * @since 4/6/17. + */ +@RestController +public class ShopEndpoint { + + @AllArgsConstructor + private class CouponCodes { + + @Getter + private List codes = Lists.newArrayList(); + + public boolean contains(String code) { + return codes.stream().anyMatch(c -> c.getCode().equals(code)); + } + } + + @AllArgsConstructor + @Getter + private class CouponCode { + private String code; + private int discount; + } + + private CouponCodes couponCodes; + + public ShopEndpoint() { + List codes = Lists.newArrayList(); + for (int i = 0; i < 9; i++) { + codes.add(new CouponCode(RandomStringUtils.random(10), i * 100)); + } + this.couponCodes = new CouponCodes(codes); + } + + @GetMapping(value = "/coupons/{user}", produces = MediaType.APPLICATION_JSON_VALUE) + public CouponCodes getDiscountCodes(@PathVariable String user) { + if ("Tom".equals(user)) { + return couponCodes; + } + return null; + } + + @GetMapping(value = "/coupons/valid/{code}", produces = MediaType.APPLICATION_JSON_VALUE) + public boolean isValidCouponCode(@PathVariable String code) { + return couponCodes.contains(code); + } + + @GetMapping(value = "/coupons", produces = MediaType.APPLICATION_JSON_VALUE) + public CouponCodes coupons() { + List all = Lists.newArrayList(); + all.addAll(this.couponCodes.getCodes()); + all.add(new CouponCode(SUPER_COUPON_CODE, 100)); + return new CouponCodes(all); + } +} diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java index dda05d492..5450e02ae 100644 --- a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/SolutionConstants.java @@ -9,5 +9,6 @@ package org.owasp.webgoat.plugin; public interface SolutionConstants { String PASSWORD = "!!webgoat_admin_1234!!"; + String SUPER_COUPON_CODE = "get_if_for_free"; } diff --git a/webgoat-lessons/challenge/src/main/resources/css/challenge2.css b/webgoat-lessons/challenge/src/main/resources/css/challenge2.css new file mode 100644 index 000000000..7bca52cbe --- /dev/null +++ b/webgoat-lessons/challenge/src/main/resources/css/challenge2.css @@ -0,0 +1,33 @@ +ul > li{margin-right:25px;font-weight:lighter;cursor:pointer} +li.active{border-bottom:3px solid silver;} + +.item-photo{display:flex;justify-content:center;align-items:center;border-right:1px solid #f6f6f6;} +.menu-items{list-style-type:none;font-size:11px;display:inline-flex;margin-bottom:0px;margin-top:20px} +.btn-success{width:100%;border-radius:0px;} +.section{width:100%;margin-left:-15px;padding:2px;padding-left:15px;padding-right:15px;background:#f8f9f9} +.title-price{margin-top:30px;margin-bottom:0px;color:black} +.title-attr{margin-top:0px;margin-bottom:0px;color:black;} +.btn-minus{cursor:pointer;font-size:7px;display:flex;align-items:center;padding:5px;padding-left:10px;padding-right:10px;border:1px solid gray;border-radius:2px;border-right:0px;} +.btn-plus{cursor:pointer;font-size:7px;display:flex;align-items:center;padding:5px;padding-left:10px;padding-right:10px;border:1px solid gray;border-radius:2px;border-left:0px;} +div.section > div {width:100%;display:inline-flex;} +div.section > div > input {margin:0px;padding-left:5px;font-size:10px;padding-right:5px;max-width:18%;text-align:center;} +.attr,.attr2{cursor:pointer;margin-right:5px;height:20px;font-size:10px;padding:2px;border:1px solid gray;border-radius:2px;} +.attr.active,.attr2.active{ border:1px solid orange;} + +@media (max-width: 426px) { + .container {margin-top:0px !important;} + .container > .row{padding:0px !important;} + .container > .row > .col-xs-12.col-sm-5{ + padding-right:0px ; + } + .container > .row > .col-xs-12.col-sm-9 > div > p{ + padding-left:0px !important; + padding-right:0px !important; + } + .container > .row > .col-xs-12.col-sm-9 > div > ul{ + padding-left:10px !important; + + } + .section{width:104%;} + .menu-items{padding-left:0px;} +} \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html index b6bc7f41e..59de297d1 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html @@ -36,11 +36,13 @@
- +
-
- +
+
@@ -49,7 +51,90 @@
- + + +
+ + +
+
+
+
+
+ +
+
+

Samsung Galaxy S8 Plus 64GB Android Phone

+
Manufacturer Samsung ยท + (5054 reviews) +
+ +
+ PRICE +
+

US $899

+ +
+
+ COLOR +
+
+
+
+
+
+
+
+ CAPACITY +
+
+
16 GB
+
32 GB
+
+
+
+
+ QUANTITY +
+
+
+ +
+
+
+ +
+ +
+ Like
+
+
+
+
+
+
+ +
+
+
+ +
+
+ + +
+ +
+
+
+
+
+ \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/images/samsung-black.jpg b/webgoat-lessons/challenge/src/main/resources/images/samsung-black.jpg new file mode 100644 index 0000000000000000000000000000000000000000..7b0c1f809f8822b3f63d0cfafc325c9c47a9b3b0 GIT binary patch literal 12078 zcmb7qbyOQ&*KdMDkszfIpad&Ypg6&b7J@^N;zf%D3ofO&7I$~I;!>RA4#lBZDORLt zX`yh_=Xv|R-@5Dmb0?WKGrv9S%s%_<^E-R*nft~24FE_%R$dkW1Ofm+)DLjK0tf=& zVqxQ8W8vap(?e)zX&G7g*cqR2Gt<&?h;eZ93knMh zGdvZS5r<0i2?+}V@$m2n@Cm>~L|{QCS|-8&@9n-DK#T+I1#F=M=>cfOKy+f@eII}t zr6UG9O3D9jKs0nr43xGgsTK$TL`Or%z`!EJ!p26!{?j2eVss1=I&MrXNp(_s6C}T& zvwvJIHW>pCuK--r#Wk<4XPTT(Dn23cp@ykbeeWhCvsOU<_fw{VM^B_>%*-uN%~AsY z-TwPb01yoW6CEX@BSt*|4Ty=l;ja{kM$FBFPC`njP9{lzzYM@fsf$vA7$6QfW|1mg z>u8mB7r@+^YX$ZO3McLe%Vnmo3k5yAIqITfaIVt(U7*>yllvs9iv2*mxyCK2ziFXf zWv$D*zkHxuieXM&pcCdmSdJ2ov0b#8wEMgj4HiDFf7~oUzThB&~Vld+Y9)1k$ti=Pdma*TlC0R zu;xxZqBsilU7qU+DPo2%x{fen3z<0C&MB_Id1q>R{9v)&1Ns=eFP>gZ{f3XIWD2 z{uhRKiH5f;miGXbzPEqR`e8fC2k8MnF7p4hK3q#%_~VtppVrf}1hp77Fk+cRmK*N@ z6)YV00Quw2KTVUoP56Af{PCwO+k2arcV)u_RmQk{LqN>teX;fNO7TR~S2ORr(hu(e zUnxpsQ7vbG+i4U3DZp@%{w=C{@=m=xJ?eSfX)jq!;mm>wB7MgO?*VUn3bwv7N?Z8b zxR*JzSH5Renj>CKN!Hxe-Z*{Tr>ick{zz4?)$rDQLjbkmC(*< zS5LO7ap>X*8x36~#7Do#7AlCc&>UW0EYcbqvP#}+t1#&Y@JRq|qY7RuPaA_tgUpjISon7zP{<|(J^fh~X(2jy zJ(qqc8YYSC7u6nzFC~@>XY6SZT0_Dp$);5zZ>hvxSby4GzBxUu7W?|Em?KxMgvYv$ zh-4~mwk-9Bu$QB;#@Xbjaa!=F$2*kPkdlkbxB4AVP06ehXsDQP%I+2lG18TUzRu#^ zDf)<>o>pGW`Bu6Y(eSG#pC~LVYnXsu7qX72%SDiclw zL^@|aEEym?*YAGXT-nAy^e;Z~HTwQRo>Q2^Cy4*(EqQCt+G(%k$;*{VF{qDr>;f8C z|3-aqrZnoM(Bcrq$42z;MkT6q1_DbHzw;%B_C5o*(>IuMGkM1`kG*Naf2Bd9G>`#G z)(>nMp%Q${Th;@5W^T8RyNt+e&TSankvcO+Q5F0tBXllI;H~^QKeT21WiXr78 z6NE;iLiLfhsVNaZd7gq{WT1c5CI>MaR^;ys(#oRo69O~y1P}>z?1E4|_<)E$BKdRD z2dNQ!WEu98CM5zVSnm@(bH`xD2+5ctcy6WSAdSHjGX|j{wVmnE*=ltWtBXi}s^DCq z%7n3dz^3d5tEQ`P3?dVk@FUh^wjK3+6AQtw#IGz2K^ zksgLUV$VkKRGoX4<8=-!kXVeh6y)5Fwjcg5t!YBe&RE}|o$q``qB?!~1r~FaF7EM6 z(smtN?@Yflh z3}O=-9u2hFyxuWv0b_y&OqOxfOK53)I>UuO9vP@6A)i9YgZq1fatvh zj6n>~`lT_2f@-_7fO_Up_RP5MHb??DQ#mgwNlzpIO*QSAoJIk^xG{)-S3DjIcOg9% zK*b!v>bDd9o<_5$y6i+hFUSuov@rm{@RGFh%JGE)et~w8U`J!ksC23mbB>j2vzb`U zL~4W8i7`px_9+~iSHavT4YkQC(20C}u?zS}kX$ zTzdM%-NDG(e)89<5?9!C1v{3WbM(h$vNQv30(bMBkFag=6MpLLq~UaSeoQRyE(@{AyQFG4bVlGMvzl3|v%!zohuncabn7ZVyPZvaasB;tvoSAveRia&P zGt22Wa5st-MGZLAA}mwy&waE7kf2V8a_6B`+C&(JNivAm-;h67-<4m}p!cfopKkA% z6lYr6q{b+vcIJT;_DMjfqYKiNhDYIrBjLeJ)$RmhoxwD+$?Xk+klx_}iJ7ZL_%Hj1 z#o&d}3@qV~p{5ZlZY%GavG%f*`)S)BSBW1G z#R{O{5PyT0UT>UMeO_L3&c4KGTb^xNsOz8mjOS21ZTw5;6)8vL-JF@3&Kmx=G}83a zFrnY&H}*5e`8P4Pd|D5sg>j&nGraCjdBev5SBW8cqbz8PU45o>crQc_V+#K@wwINo zsIv+pXk>+11Hm1r(^|>Pln)zaqIxV{$X_Tqr+{uGtymKZVk|c1fadGrBy{IeLToah z0I`j52t!i@uzbF!ua1#mdzp)E7!&p{Ft6>#*W~HVkIWPaF6$dDRL(!oGCg|%%xoqi zsR*2u3*!GU!Ta7xI}$>S&GZOZ$pKaE#C?x+oUZD{*c?&i&oSy87XfF1wdeF3ewiL5 zjsA)*!G;KpvFm9!+UU+#De?a%6V62!z?UqTQApEfWvzzFNA|kW4`bl>V0k=AK4r3y z2IFse%gQw=C{$Z}vRhdR1AFjePyG}l{SymI2f2?C%X%9yhDNd*8y|iz7cW_jfsIvH z8Uou>WtUOl$Stnr?XKMNc?QFb{Ykxnl!(RovP)K`%c`;xEy+L4DW;giRT3 z%=5JlLICj^fujt4G)+Z($sZmMKdSj2ij!|saW{_ z#cvkM454;Sq^UZaVU}Q4%tv6UT+qzc(zdDQ<$+d}Y-|<0Ac{P~#h(Nn8>1K9dYkaI zg{JI1z?UwsU^|dIUsAm%+6o+N$@eQ^F2yEwctVJ=)EPzz1pzYicw{W&;j2N+om*8B z-9KOmVS#NP2c`r-pi**caG{?BLwa(G42{xidxT1?GUP#!8^xiT*s*u5*o1Q~E;2Jj zk_(uIUUQY}Bix?^zU5&0fQ^fL#QzG$UjQm$jOCr+XQPIs!9!;Yam=y@I%-U&!&I{J z&@?#sb!@n1i*Yy+D(3Fr)#q%*x&s!O8G2aWf+W6@$&;uBG1AUlrzFMGm*ihs%V*P94Yjn9C-`W4E7kTdTU`BRkS{0( z`MrYf81eV!@0){<^h4mczFiP3!98l@Ge&i zoGUAaH0Ew``eSRUayn=3;)*&MWw~rNO)}+&NBS@r@IJm0=aa^&MpBd6d8cpeY|9## zl_hsB6u1hS+2Xy30v(?Bd8AGwShQW#rs4Ev#M52r2ty^!vBwc6i}hRm&qR)8T4*^tSG&k3g73ey|G#AK}On z^%!qT-8x)EA?z!i>>0I_e+~v=Tl0H_&di7611%iF-eVcqWvQG~ykaI2`Xf!02e%NP z?o;MIP9dSAOG6J>RxLI`EHl=L724eEqr%>?Mbc`1mfgDgsMZVBZ+g6FUtbF^4Asv*%64n+ zdpcP-jl!t@VwgXL{|O3`1O7WuUZT|m?sY4*zmuPFl+E&^AC_xlG%=7_yf>|_t#H5* z<837=`-qFk;-K)%@=lsR670ol7AbW8CBD=^f1+&r%vfCEm*Q;?(_cnoo4!;AKj zOOIhX5l)N-K>Z}KrO;j~nW9mxr4z!Kn#h8+!H4}ynb)dFwGYhYIMfl2Zv>!D%3OxK z>O_U}odtS7BJ3E^&Tt8+&y>9#TY3m>W2vEoWZyz&EM5u(uKqGx>*&QjcT_iZ2}ceM zO-8Wx4+2XHkfwn1X&%6w<>65=`-<1X;)-GCabRhvHsv())yi@WvEoPgn_=w5!Y0I1 z?GlwD*=a;JdUIZOc`N`XZfDiskk zaOT)p_ZkerBwJ)^DS()&Im@bpd|2!ISjc43vUsAc>0K1&J7)A|q+KCaMR|_Pn$H~(gE zOu1HA;k>*Ka)8FzPRFc0m|79+neTj&o!friXt5INM*n2X?;cRex!c-in!Nh?o5(WR zx^l38>Z?jWw5>lAS+VcWMDBMl804RvQ*7kq=y)tt{kHrzDJtrz!|YgHHBYw+fF?m+ zDD@aG_=qAJm)#v7%3V9u$`37-C*)S z3F5&BsUZAWGz^pT++2#|7v^eRADZi1>I-!0*7h0}jM1w?xieJ^gH2z%&OrzH;w2>> za+G|-KT)TiZR#SNxMZ~VR@~xPn6dKt{$ZgO5Y=CIA|9~4A}7}0`b&$b^O4>a198jz zb6+)smtQ&4_gnLDbgV*Od=zM!YF;)Pbr%$fepd7wykiB|r(f%p7<0DSG)~mJi6N3qN5@0x zJQ(1JCg~4IY zjlfggLmKa+d$qKx@*T7o?4+BO1JIn1Vx2A_jrM`dzZv>Lw?5RDNNes1kgQoqCJB&U zI>Z1^J&4lLxeXT&4%mMHfS9nL&UKu8zV+Kvm#U@068hb3VE^ZgPvk=~=3=9$A% zGB`zz*KY2mVH$cd?v`GG&dcJ&)o+uePl6Z3!rwC3-UE*BfKFoNW=Q*?g%!T%*M?u* z+$@@g7n9wZl%1`bGGK&AX0AsMe<~J#(EDTiXV632jyTRxRGISSZN>EHgg)&6$NIF* zJs?SEv1*MdWHem!9P;C7R@YqByG9L}?MG!QoK&{IVo0v0`&da&UZqD$IJ@}w2%EvO zd15ySKu}82`B>3QUrXrbp1gcW!S{gaIG!(Hrh|<%`x4f1?*95Y42dm|GRO~JrMP#6 z*+XHM#T3(Gmk-jrcfxG<0Er*VM`b=qg=JfP$#;8_$*lsB$9O*sMb%HW+fL+1oX7WD)ufp_X1ziiq!rC%RP03)c2qh5~mSOjV{H>emFY&tv1=mlhDiIfrGDypFvKABy{0tZ6)KrWZ8 znG}w*r8=w3z~V_C2qMQ}D>s1$7sE;p!!$kq2Xq)k?U#1n;CZr*3if0brhDr>*Gd$} zY-GESEEorYi?KVz@^M>XP|02iVYk8{T9~@R&H$w&4|7{B0U`{ECM}cQmu+74F?hx~ zGDzu80n0Kmk2Ae!D6&|MpFX|naa7_On}&zS?@)OM6Ke6P(pWmizBGUI8VKQ{sE9hA z&73Ygi_JE7!~@v3ndZ6kcB~B~5mZDEWMopvwT7<{xjUc?Z(O4kGD&FaB7Xslb7#_vf6n zBJi7HCn)PdFR1c!HI0EX8F^KIP9FE z!j@~%+>~drdFLagMz~loDd5BtZc2X~FcU^N8t)GAY_}yj*Cutr`81h-(Wf9%G$mZW z^qj~9NE|&rMQkhyg?{%H#GblDoJU61TGjH73=Y|Gj)7yrBtj>GN+rTjdtACq*@>~8 zfHcrgwO9`J;v|nd(j~O zAbQeR|C%tBpdbhgmW30fp$6}j%9SF2!4_TNGT1&^M+z{-qXn?~Bsx&LCWKNZVAnEzp2cwVN?{U!!7rT=E1H*jGNd&mY3_+mn=U}5<3T74a%mmVG2Qhv8WT2;!<=Hvr;bf zAbwmme^4?B1SZ3@6NDqBO%44}#lyhOy)2>@L;%-+!|VM?vjLYsO>{P{(e8a%N~cli zy3Gao_;=U$ah9deo*(^##r$tf__k=lkVh?uo$nFFnlE*VxE5`Xo9lpJ#vsS!+^hK7 zIz55)YX{-dU}ST;vIjW6oX#r|rDq(j38-Nhr3=cBg7#z}Hl%rs5E-T*DGY@$Nr^B; z>KO>NVgd0J5+ijVxwjWbTDYEW&bd>0WRJNxh*b#<%9+A(2(f!NqxTVH3ZyxwMvs zr)Y9Kej-mL`~T4T?(_A#|MbN6Zv{s9|LV!Be|yq?CuILmPoe}JZpE`SD}36;R)3VY zKb~OQ(J%E1A(}vckqU*1XH$>dG z_;-`@?igOa{kt0MxC$xO{p-S<&;Fxgij{$x=dF{$Z;hW%slXwhA0O>%DXiPaxSf}m z8daex0OLVY9yVO%!!>@SHAMt}ymwQUOoI-TgVXCD8wNL#VU44vCreci=3xkuO2AWM zjUAH5Q)1~&BkqO4$qRb}cu1t;iE-$A3!8~`JND`1?ZuWl_8Cl8mh8n&lJkBnw;lh- zpE)txX^By@j;M2P-R*CgBTEH-^bebYAG|vek5;Ss`TI)G}Nx%_)4^M% zV|1pd16AmX@u$%Gy>o1&#>oe4F`g{_6d@v2#y7;ZiDC2T6E}NpO##~Q-i(V48$L^K zad#x1`HNr*%@$&Rp3<5EybLrh7P{U@Hd~zT0O~*T1U#IY!rtOu)KL*Gm4TQE}P5aLnz4<#vJ?;rx%KzGB{_i{&EE_Rw z*h0M=s6o9PKn>PsAB~@!6D@@YSu@Md4?Xn`;keW2+AuLxm1v4}K4jUT7~q zm@S`rgQPKdb&&N@k1yWEW}>lRuVbuq(OC(U&*%M68(TIy>NS{^fU}>6n~MQ$XzzwN zu$HIt4NiB-$HhpR@Hi|$0$L6lSFsEQ2|0Tt>jMo2S~RJ-IDa|^Q*$#Dd4KcGLuK}C zylu1O5;cc5-VT^f){D-AwF`2QDF&x!qE$qvXeT27NxNEPFD+VMuE9gEqYT&oF7Bv> z{HTQd--7%=UqHXwD5h3Xt{CnIo%Q=4t*%!0kEm=KDQpZi3u!qxEmWw( zgrhG-1o#2B+WHEO^txdh5YUxloUr>|Ygf~#QsX4Y1~XT^ty^$EII>KkNZtx+$h)Iw zYHHF3Z*HMD&@57^m+;d828gtO<8DUF=(ZD{HQ4bFPfZ6LPg|4U=>3W`d43P5N?EK7 zxmv}#5Nx3Mj@^~Uru5YJhe%D2+p2jJm0>>q8N<2GBX8~td3O3L?lf;+^se~)C8}YC z1nOOREZhM}g7d2M-n+o^x<+F8i)>tHz1NaE;!K&t!HT7BEaPZR>1_h@2hBHPdM=}V zA)%&#vz-cru5cQ~vOc}cDekHX?0_{SzR9)AG<^Pdgt@khH5dC2wV;nLc({J?g`|)2 zB`EWa)Ozt{fk)Yu*Xp`;sQ^m9gLz^)#ezofZ=_*=E>R31~T%X@L5iqR1aoHNlY< zV2dg@&#&o+m0nKE>QNbb6|cW`pih!g{tOstSlSBX^j_N^!IGY@Iet%VNWhFUxo)Fr z_x>e@8Lu!lhsAknnjufOHYZ<&C^YA;(sFOw#Nco=q$OaYj5Itt=Tc|(q~Z}4HncwS z=~M56+z&}?vAr|gS`*CofCsv-ZMqvAq%|seGQS^a9c53INKqfSKA_ka`o5L#iAYm; zr!x|5?I(f8qtjR_%8T&`N?kJ?lseL+Pjf{6nF5jZ3YONXS%W$9`zUsb<7w7Y zjGC07cDqun%U)-}gb^AGwZ4ncb7(5>K2-yFJmlqS36^XYO?>UY-9%)Ao?#r_H>i8X zj9kv;BVzn0S8McPvR3LF@37GqJTustk}Jcof$;2^l0ay@`;&)QaofpR;x6_ET6qnk z@t^9U0|r{hT;=O-1G`2sM^pCz5a*ZrH#CTC-Gc`aH;_+!KNP+{b|JdkFsyj(@o&+N zzv-}q0u>hO+H!LLSyRtrelz^T52u;U9HGX z9tHvf&^x$~+(@i9`^0`8ZWmj$M_0g@r8LIb5?2Xizg03jc}dG(RxLrWO{YjgK9!D` zRL?DS>l$y_OTnhOHvl-il&lFjdmXbmD%4)>52G60HIQX$jdPFXnG-9q8wAN-JJFMt zd2j4mLEXxddcUR^GO?LVFlI?N;Ca2AJm8VJ2b32+e7psQ4KD$lbU7-=v<$c!{DGtd zO&_hZQ?bMbpLzEf&Mfm84SSmcK1J+Y*gJmE`;r_tY`Jp8cHI|_W=1^3K28tI6vlDI z^RGF1V@xPN(MU)UVq8U&Vai5AFR1}v6TW!Oi7vq-LT*_?JB(=iW+&hi-udZJZ+NX@ zFUGRABrh}w-P|hx!-?7StGPz-X|0z*+Fp-@wMP>gYPbmzFd1+TY#qKWWFS zr*?DygvAa21~{)Y-zwHubGLU2Ro|7~#$!b_rxO@Y;SW=?H9-Z-XI^VHtwEoLq7!CG zRkl{C)b|@j^6##j3@Pk~U3|^T-sL~G!cQUL#%5M$=b45O0G?8Az3(!yCf-#p(K>SW z$C7QOuSEAt4rj=r70!O&(vA(|_-4*0c2JbWBb15;&}FYY90K5y4n@zIYT$R-f~%37 z6eY=d3d@tmP!)hI+}w+t%BBu5pm&;Q^Y&3Fu(BfYBVE$kE;eDQy#X)lL{%K;WQ$aE zR@TQ%Tn?H%i+2J;gK$qN1@3Hf7$c$ehjtT;v*4T~8}-=!wZgs;<>4yp<0SmvuI0J) zg}pQ3EV8jC7ZRBN@bjVp_P|0%C4QsZ45)0b1q=0v65?H;*XoGg>ny>KI?Qkd^Ex0Y z=T@;pPy9gqViq(Xy!$-Q58u}kLe{WH$}|C$6HPRvGe>{o5}EMP2DX|Tr7X)p9P4ZLZ>LJCpDRwdu$(Onb9*I&N8#Xgv7J1boiY7T|3>psAUzX2bmSMO4 zE@m>Fs+8F>b|8HMd-3{tMMhy`N4s}2)iba?x?MG0YPyF6_IEl6FiTWPoTHii>KR$@= z1t!w)%DvGiWq;Na6~um4?pEZu7vtS`b|Jc^2GDr>mOE~%k#ynuS)5fFLMEgai! z20ph?4-z!k4S0L4%~?4bK^Q(J)G?ABJ@5RSB-Pi7tFzYEXq`%fH`QRKT4zJ|V<_Jb zp*gTTXm7Gnlb~+$farv|*#(eQg#e2pswW9wk6vckJCKSG=Lzux9h!M)cC zsfOqYS{ag=L=N0^-4&KILpqkeKR|tFHtp<{Z(>v6(apmVleHhSa^y0O{q~o8ug8vl zu>KBz&4OSJyWDyMi2*FI_?=!!a~bbFpb06yP8;w2BP7EQZ8rMHNXK`Nuf9hS)fBa^ zvUTu_4m!~B<$HpSA^??iXzUwif-lBDnkLY1_SdnaU-rBokq*RWii7cqJTQ)CG;hpn zud!S{7CVvuB@fn*Tiqyec`PDO;wr;MSf*_E$uBM%7??hv(cWP8nSJeiMdLSF)mk}+ zJ^3QVwoS!4?w5LtBK7DLGYs?-3q^R59MG>p5TYf zqmzgx!$NPOcx+V+%x){2i*G^*>DxnnQaR&g4!Yryyju>x>68^LlVe;YE`ti zJ3^o*lgpZ)YRcKg%3H8-qbUqFwU)X1!e)gj0qo;nu4mzv_A$+D!kv3{OPzN+$6@F# zlN%ibwyWf`sp1xXKJO+nSW6HNkNcK1C!WldvWdE7`kmvepo*woq7ndtM-#7f*g(N# z950uix@Wa}S0No7RB1kgY^KZycz~Flj<5@kGCGpL{>yLTxvoX8+g;>vh(J4o=tIGV zm|o&byo>qK-{;F3-AMPBj|45X6M{6}FTYi6^Qb0m_+e>#SP`m!q?}7FR$sj+D}o4_NRVGDjjA%KV#{e!lL~$&sj)5cLqQlXhiUzTnoKY=>bebe z&3v2kc3%=q`iuECVUJ}m=S(#>*OV-a^iKYQ%;nin&fhZue5|Ou{s>>48Qv73l4lqG z=O}3hrfR&eOKv!xk^gN>ZsDHIn}1p&%X)Ap|9d7-wq(ftIFUF{iQ^!P;`|;!2N&qw zKb>A#c(WgpP=5n5t*pT7AW(_Lb(|r$=sdC0J3;80I8wVHQuTJ-1vPdsU8?%8D7w0; zR8BlcD-ZqqkJOX&IzqQ&np-j7*Ki)M8W=3BA$EvirX@D2M=fE_gT^G&YhPDFB&978 zQX}(8RYm0Lc`x!3_dkK=8>|4Rz(45E-{C0wD@{LGYcKg_;YehR*Hyst*;2`oAG>CU zZIbY!;_>=C4c>?(tcFRC2MI4*DhEL$b71DcFe#AKx3)~_-}%iaNm;eWh|be0AFpca zcc>gv*RK4sOw&?MyFmQI7CE4!EoZ*M7gQvL?d`Pp%~}6C`0?itKgS)m$mr0hR$6}B zG@s(B+JC-1KpjE;#aG{U`Mbi@k5;;}wD0JoKwNA8iZG8BCJ?@$JREdS*YouCKGx39 zA7bYJAb5c*DeAxeG`RD5H7={)EM=4xl$*WQVfnaGFSMiIK|jF);i=hlwjAX)kz^f8 o)JP9<{hVTAX<@%^y{tcVrkTDDA9o@63kw3fG%83+r?Mc;f^;Yb zieEm@^LhUG{rQ{w$GvyXyk^e4&zbj}Gxz@e^mh|LrLV204Zy(x0C4Uuz~5ECO8^NW z5it=V2{92dDJcmV1;afGa&ih*I(jMwPIhi?PWJovfdU{AAfE*P{rjTIq7u@w3JMB5 z!Vfhc%4vY)6=ZQpNl7WlDOm2^W0B>(&nx@?UH-lUP!r<}0_O2>xB<#rAr zk^}_?#bjl-w$ITqFshqdf?aYd+ve$cWMnlg-b+cl#toeFYHG#4(vKcN=U^z(nRZrQ{Nj`qMHle^WKPOgZI8~ zJ4Kz!MoB&ta@q;I;<;?Jm{no)yI-hw`&;jpvE_cD#vaG;e)dW!D_IIgbrT#C$yodB zfzy5Q#1G0zw~S}^s|)z+IS^qlYO*R?{h(scTtl2!SorkIqpwbsWi|46 zM<->NRr=#km`ALRoPX>;ogeHTDm`V?0$-|(+56;M7m2Mrv{~D559-dLM2^O+y-7Zf zKpkVqT9H9(9;v2Diq3{9j^AR&F2zariH%hfAuAg?SjJ&3IG^Xt}aX#Z5{D)=p_WfOeN$eupxDbxKp-5#0{ z*oW(S;75sG$bt@e+l#(fg|R>BIT7=m?JiWioO5KwL*rXIN?HuIUp)wmCc26z=CvIo zC9sj+d`NU-74?PYdE-OL92q=l5#}>Z#+B>ui4D9Fp&&#uS@g_&s=_%*C=nFPIUYRb zpL}n5H1jH#^);&%s0Vms^A{lbeZ|260Ie4;GJf>Z95LL2>*xBX$+OWn3Fo}^)@}Ou zIr?eOLC(oPokn<5FD@fWIy$qNwHHfQa}JfuSkIrMEgO0`h-gKkinu;~_ZqA30rCuv z{w(Ml+@E08IPj9PW`fMh@hn023ql`aYDs$zGVc-3OvZ-tcoKFxltX5`eu<~*NRw=* z%Bp(yn`=S$6TDUC`{p_wUM~Dhy{=OvLG9e;@nfVg{oB?Z5@u?ShZQCIm&;vNeGL6P zDofi=7cwx^ABMjGlm}Wd^ns`I@-dJt#gRwq=3`H(puPRe?pmC-9q zl7Ht{jdv_KJP#$EKiznxc!?zmZrT1U=otwH3YYBTL{qUyf3fX*uh3HdXVb?9dzV+WK!EsF==~KaB+xEx6lZ(^(Ly9uEX)XdIgvdQj|8wdwS6LP6q+F+l43Z{};G zR8sqMzO*eZ5`kB8!8=jvZmS5Upc;7mJR%7;Z!* z2IgKpA*)Ed=%xMjfZ>Ca1B*Pi_|onkZ|kBd&f8cD7}fG#mcS=s5IbVn_Zh(qFwSvx z(Wvqmi-p#y=hez2pyIMXaJ<58J6QtFFbpB!oiV@rHWe~Ei$Ks2jYtjXGQ?2X_d^0H zvfx#q-}i0u`KdXfqsGoUUQEktjK!Y>$W6z0Xrw-&S029?41o@quZAXgpY-=wO>fvN zg#}+od|^=8jT`8kEfwZM=F{G?J|_{Q%mC$FAO1ON{|f-?U0&w&DgX}gg-uSTZa#Y4 zB8o?dyo7oKM>SNm2bjZI{_KH_OD|n=$Xqvr5bknH?n1c24s4i`M18f3O=qZ{GQYnm z!6oUF#NVa>LeI0&o-yY?Evz5<`saeO>xhwr0mD|fbGInOS27dHIjFW>?qX&B6uP7^5hp^O9ohyIY?DnafcYm1taphgiZBk z^!?euFn66SO1XHPI=k1)-*7>~dA@j%q>`j&9n(Zs2@p+^XD%TF)`UgSc0gp?;t#LY zK>T!wU<#+4a4OVBa!D}36-eTS?P?uF$~PYT5LdczWZ+w;@@4ffDt&`aJ`OVc9(NH8 zpIS|ACNtd_lU;6=5p*hYJ=ImZvk-q70 z&p4h^-l)pkFNqBx_FbOS^EcSbSx*{%GBc`@K0?burMs?cR@4G~tfIxJcNxN(+{$1G zyn011tZKj+gx~ za(o$S^wy-|I3n^ED)_ZRwciya9Y(suu@29ZyV`EhyU|#2w$GzOs1=Xz8twdm&zgEA zF1W%ZdP*zBxBKZ)3VRA2QU3_0JaG^Q-j@1q*BG;*&^dy7!RuH!+okUWiF3+)jrSP*5 zk@_%l48_D=t7ZbIb>n-5hQ}$u3F8p^_SVl-KZ?VI2xAvLIs-|tq&VjKVW#Q6GBCt+ zQd58^bDn1%tl~E9OKkn?*yC5sO{Lw^T}UT_H|P}4A1?HqAph-Fnf;sOg#|KYDD4a4 zuSc>$TI=`J^^QN!For9W+!@5g4TS0a^i}N-*f)$;OdUmUc|1~V5n1-?AtKEyzuoyh z6PD4J?M8oWaNi}znk{xQU50S>$!xt&{LA1cv-Ftkc><`>YJPn@Peiw`Ue0S6V<$r{ zFF{8W<$!pY8g8W>TNZP4xZ6wNa6j`wbx7gtntEkF#GQX^d-G5d&AH@`%9Frihqd%|+_N4miFGZJ7qmpL{)aQTGlUHVaZq(k5NC8s5;GAEJQT#<~%YA=Uca|*} z@tAUkY{z-e$zf+S(4#A~0xNx>h3ZKQ#U-iL&kd9wTFgF#4&_yd_@k?;O9r%dJ@o^O z*uqQLwxL}FfpP~CBUPcgXkGt-L@h5qH>!9XpD?)Q@r)XL-;uL2rnbU89fW8}u2VKE za^Mun1%f%I&3Omm$PwZkZLb8HM)?bFW0bC zVNLAabqB&)pj}%Nw9CPSkcPE#=j1@Z^us|9qzfX$ussaqxcL>BSKJLhBdX+`s>`ue zQ?!VT>ASOr7lgQ&dS_Sl_3g6L#%>fCVk|5R=sn+`uj;OCuJ;kvVrn7T1!}UW&Cc0V zC%SoQS#}e@Z^dGKS?FsCQpj7cFbZnKuf?T@NMZYn^#z!hRbR=#J($NlMZg&#zu26+p3JnyNv#S}E4+&F%Tu!o-C`SL?X!+hO{ZB%s_-a- z2_sY89g8#8l31mhPjM7esM`naB;*#m?V#q5aTM2C2&8P$^(m{#+RyFs#EIw2Kvk5$ zg78>jTMIkR945lZIgMOhcv8b0u}k3CVXRlRDj=Bijl)!+<*PD6(IrFsekrGgqR;*O z{Zn)wKcU8@*UrPlqS{E16A$AuK1%quA^kmV6r=w9_myt6W~CPA5GL{{qkjEkExsSwFCM2=(#WXJ?Ui>sIQUiyY=khZ16KQ`GvNgQ2T?ku|Ht4)E@s z+D*QwuLeHJhHyHeEKef}-Zcy2PGZ7r<@7ZwKvjgr@#PZs;IDPPB8>4WHya=3Dwu}k zwN!0p>*d$u?3VmiN1GPCGfR8^BnX@>$D}2Pt-Z)M0M7X8H}1T*jw`aNp2QheH`IKRZ@(ZgEQuMzA%s1F=U`L`OE%L# z9a&Te!rmt;ES7geZQq?Q#xg!!!7ZajNmfgWmD+0Qlp!4(nxIWiit;G6Jrsyw#9%|r{t|y^yL-sU@Oy$%3N%va~J;Dwz zi~cN=9E##xnvW_03(~9Qsln*KfXjFGx|*>lu^a`C8lU+cI!ZPo^~QAB61+4uwEY zzp;{7(lHJ)bzEG}>jgGJ&jN9&{sd*Dd?1|BNE`YCknc~NbT|CHf^LTV;v z7L%z*qy>a%O!H1%tI>Dw-M8ZU3z!^U=<+b{E*swJ>H*b7dh~m%6Au(Fia*ow zKhz5fh;pBt@sh1>PfGFxt@d6uPaR}w&(ZD#1Z9A-OcfU0gG5=OFBBv>MsHw=>E?}J zxhkibqkFC{($lDv+U*9VhXNOcrAA0bScC{DC?RI#6jffhC4OA{T>5?_a1IgW_D;{m zCXyAyc(AoD-p>l_Xp4K&_$VGqq>K}UAL#xt55lsbUJsrI-WO`cYpa;`(@N8C+tdmi z^E30#Wxg;^TcSg%dooS(4!9vOw&~roIa!v~Nm%3-V%9YP)~f~wBp3%o3>gJ)qJ?E} zsFjKv8?%ZY1udqB2qf4EYM%;C`f&9fAHq1PcV}26GRg6trW9-Jm?t40GOrU!|2gtHluHM2^Z^h9RsHIGZ!p-cOQQvh?}JHsUW} z=PuCo#sG0PEfkudoyy35h2y_~C42J)>UB@}mkDJ;CyozP#GnOfLEyVt7L4hULl$=$ z(p5uCNKz}Ek+xWi#JFw7^IloS6(m@j86t$+Dw;voin0(npekoQPZe!Rv&*Kef{7mu z*rkFKkagsN|Rd5;VJmWqu`Bsj`<$BIzPkuF(()7%Mts$%40G%_mQ7q@SWKPZk!>hx1`+ z)G&Ix-0%*RjM4+U7G1`LQtI|pEgr>5K{8mRSBNN*8^*N}9MKBL zw6xFnn>Tmpi$dCM;Zr)~c>_$48EF+#O;Vwyouu0sKXsuxw;S`s8YObED* z8eCAC-qhCxMbDa>IVh;ZACC&nH4l<78(N6X6L@L~r{#bgsRb~Zt>MMrqay+xPK`dz zd_6{{5H6Ho00_nd{&+NDDTjYuOXMzK{PkV^3frg)(u6J$D@AeuW)pz+*4T<=)Ki0@#j0|%mEy{C{U=DuJ)$v|2cUv@nb5R{Ufopw-1}ATH2hjJl90nU4>7XZkrk}O5`~}9 z>7t<2uk!E494Q+#d>5-e8SgCBx_STR-pBS|Ku3cChrWk>20Mece*xqv^)G6?35`7& z`TaFQb#)abO&_u94I9om1PU?Je zjLg0-AYhbfK@b}a+0_tFF2XH%`JzctoX72Jm4YESbnsR+xI?K~HAfy525&yyMwYKe z+A7bPYUCbW_2aDHbLz5RxeXx#(h5R*yVleTpy=8Zq3D?Sn(hT&h$5?lmZ!tG5Uz|u z7i3co=+aemT!n*Whm;v8l104iiA5>K@{z0dHv=eE7mEec^1>UfP*N8?{7 z()X;ia6>OE^aZp6Az(+&RF6`tH|-awDVE4U&QQiZH72m=$XQ*~_;FA@X(#Mj9wiOO}@YsD7%9MX+p`EawV%Nx&W*;Z6AEWfx zL!tXHk*5^|f>8%IPNJlegJEiozXqlC?~;Y(6dj()ID@SV?{3r$i+hz%JDPaW7&IyZ8Vy;>vO3!LD2@2KNKkDGX=l>i>K zB$e$LZCEdAm44Twof#x8&n=@3B2p9w!CQRuPSe^XE2~T?ovBhq&Co5b8|olinynE7 z=n(s&X|_(^cBFxtAd&M__acjRO>hoVrh6{JJ;XV+kAD8U1M*~hV=hYGy(g)J$;^(GT&sh!_#b`-nn)xFN zy~@Zl^B%F(cqY=e^Q9P_DA9X*pN7$WVEfZ0BP+`awNR}uT#tPA4$q|9XWdGN5d5x- zLK3WDtInPemKV$J{)8agfgp{7Cq~S;k#4-3gaEb;Dyt{a5~;hZufAx&ntxO$tFjRf z7adtuvPwvp;;FrMD{Ec&rAaG;Y4D7Oxj<4uKMd$|`p0F> zy<|7gEHH3)+K!lRrNLRqIaw{b8n=u*XO4uFf3QZ2bBPYmjA?NT;p0UjUEdXGxZDt( zY)ZbJQ#6~3>q3=RO6*^ipr2OzZjh2;?lYNHQi}F@12{EYB%BE^srjqN(8t3$C*DUA zX#=vnv!zUvKDi#R+`tA}7{`*3L;G#9mm@-_mPhn^!*9+qb?r`lK!U^Zliaym;3Yee z%9S~A$V&!nj|mS)YNJv(G2JwxY$fA|VpoCM(T=_QMEoWcHny6u*+cwm_ScWOrG?4S zdfP}C$HkkM*==DW$~$*Qd`5kH@czsP!qe*v*t^W8rLw8B7^^WjwO?v&X`q8fggv(5I2+L z-MFqGOA=KzEgeuCTTU9BYc@zb2h2^=tk06?Lu5^u@;x0eYL1qXSOS0T-u_+xI+LDAX0wrW}IW(lm4?tdeE3R=svwa&g za#8W%`7`JXy?1cz^`)`-7iG%3U7?Vp^vS7BrlFwFb_ zI=aT|?;daT+3)=0R`@B%@F@tF<|Z)DG{?}wveul(a-{)3IVoBXm`kGBAV5!pcv@dw zoo9|nvsltiGO`@1&*SN;l>eeUCMKj4l-wem%q49aj_;n?^u>Wr^Ru9#FuZ9?4YuY! zS6x_6GqQ?nH2v#$m+~{Oqw)$w*o!UIRJ2vF~_kL&nUqfrp zv(7@7^I-qz+I|e4)F-lmZ^l=wgkJwHt)Lli+9mSD=)!)j8UzQ*eZuaRNylHHI)_3o zk<)&U2o6n}G4@KW$@$xU3^2qur{|QP*F{3yy#wXWAn$a{u9t$XwU-9`xbm0L849{< zeU-AKi|%1le%r>RF+9XU4r~imG2?PJ-liq>u_bvtVC{yxDZfO(VGUs2Ltcd^mTrhF zBTHv}1f?KYvySGTIxijer9CW`mtvGx($W~lD?BD`c|s3=vxTVhlCuZbPq|NUI@7Ns zPJpon+4{c09Q{fAnanz*l_xmJ(Ff0on$w^SKV}{}4gAk!<7=;f$o!&lV0W^9db@PO z|FZp-vDxdqp)fnhQS|7>8dY|;u{(A5zA%Tin567vWR-kl!anmG`p5!*sDPNk7dsVe z_qeWwvSP;BlclntD5sdm9cq4wx$O#dJK~3oNvJvRwSvBDl0uuS{FH(h@==cRXB=Im zPn&Maz9)Qr<;s=4Ak~#uft63MioJR?^Wm#OeYcijeI>J`4lfHflhYVZ8ca)VDVe4z zNf#%`&!sEPMGC}LIm1(mvq>9^!9=owiV0popr9_9nxzNVW-JQ(1S|-zt@I)tfZbn? zCH%%-?aP{N{EPHYJ412B&@W%h4s=X`@VlR;Pp?HoqL{HS`knqoLH~bfIC5A=K0!z7 zMh*P~hs$}?(T6W*Q5a;^d4AO3w-5Gz0Ug3i+dsDUtO7Jbi0?L&&_MiMGna586~Pir zeL`mS!D;b$M;NJGve>V~x0PjFbR+%Hv7G>dM{TQ*sF`76jz9K|OTN2)iuSIeyEmj_ z{EcA1vGZyt2+9j^42k_6yU4O~ptte%L*Mrl_PW3pI;kvcRy+@10bWWr_AJ#h5|@)t zsyp3Js#$_85Y77jm({P~mKuu#h|KUH3y3*$1K_3GkR>-Dj}H8q!;3e0B9;}FiNJDB zP;xfs*UNYFTS%>a4IEibc-%eq0(RL7;0iKp83)Xvti3*^K)$*4myqgsNlkzpi$H!AgJPuPu5Nq9PrAJKQe*|kse&QTGw#THt9!RwWt_XWVDmn#^?fP+ky~3rUd}P?T5Nl)k8e85Z$fbp=Ks`*if)g$m zRJ+G(iV;M0LG+6Y?dzwwjJ9;G?0~-DIp+MIHc(53tvdazROThY*IFyU>8>=AHSGMHWM;AFV zshKkU!uN+=qsH0aesSgSL!rWFcQH_q(e(UBix9?Adt@8KQaj$_p7zv}GEBgPptr03 zq1D^uDDMrPx9F3hfJKR}ALQCKPgXnHzQfpLbR?%ztS$RDUTB=z1lYh6WjdO-gET_~ z0G2z253I__zC(CW(x-jAnbtCIUPcHYeZX7NTLHQ^8g^_80Bmv;i?ph2nZi=aZwrsw zIws{H`gP~Mqif^6#Jf+2*;Y<_iG6;RyaP*n*WaBnpKHQMyf@+xOJw`2j?^VzYbg2Q(Em}vQJTkPA`BZ*qNkh^LKpgVSJu>mv~<+d=n9<% z$=K9LRh3)({sJJzk*i%uD?4nRd|H%^X||#5O=;d4xRE(6-;Rdm&<|wj0|JQ>A-&pI z-QXF|VpUkAL327(RZQzSM&RRC*osEFA-qtDx|9~036F87tM<|d$;f*!Re8uJf$YMb zd>S3(%|i!BLq2O&jT0aEM-xViIKfKV;5`l>iS#ejxka(HUrvZ2A z9idX0uzCh6S5XmCyF>6|B}JLzMZfRAYd-Ja@XbFYf^R`-rDOh2(x`mX`Pjyd!CP^M zrCN6rJsUM5r?@_`;+YmfU%ehB=io|@~` zSeSik?RVd1^w|-DZ9lqcWMCk$!>6SUCm9NwiXx=i`a(J(Gk<#j^14O(&C=>d!F}UW z0~QJ)aDCGSm4x=kkY=skfY45R>6R%!G;{IuP}y6%6>R4f&-#7+<05h++*Cg>ZNAiY zM@lApW^?~F)DN~XS-wSj_!HeZ>4()psh}|fz9`!m^342_S4#AX-l0&l2T**PvqAah zBi25HJmpMZxFT!?D|;oN=qFZ3N-P?8yL|h^82$~}tCb(ALJRV9bu4z!k$zusU%Yxc8g7=zn~p1B|&_XxkaZq<*<9g#2djH+n-$@#U>zl+En z-PEQtzEs)O)l6~Y8j?sgc4CaD6ZqKrOtbxD_%m}A9L?}O4pY2l0Xr5A&9P&&6xr|V zp1?Kg=-H^YYGEZp!h|sjn;QcziL>f`p*pcQ*8fwO=W=hukbf8g`DxpFU%I8mcJ2Y{pxUYFqQb_f@Ex6{0-6TjDqt1!aEi1&ntzCyyvMT*oc< zyq~7yUiim2wS&E#(4XXgXQ)^M zma+S^nd}1A$o9|Hba16%_=0;_@%=@=D@#P8Q$LV;n-lKa;Uu6zDT^GBvV#x|7etD1-&w zHbHrG_d&sD?3@n@Wnf2W$Dlxl%tu7$qI96ha1Kh=!5fl*UdL93$gOq*_hh!febF+j z+h&W)H;p}3-CgAZ)S46XXKzOCB?PW2wY0tsW~g0^!fe%FHZk|I`>+yIt-#A_<8pFI ze=Zs)0<*vHeln_k8N<88$^YBxh1@cK;z6U%=M&xI7qfq8JumNh<&f}p zpJ_l|B%yxd>bQkQLxVBTmiSl<{MPelpVN9>Swt?p9qBY`oHBQ*?&v>!^cSFs=^I-A z_TUWe6XlLHbjzRVx4$_keza2i9U1kU7J4IzGz`uk?T`FVWuDx%2?Xd*(Ie_sUXL`? zEYSR%h*4LSwQSreZdhYSmq>POO`I~rUP-cm=8T`dx!SxWZClNB{0$+@P* z){Msfy4T7uIT1E2dgNPmB2}`{Rfczna-+O-h-+0&IqtOeUM?)bB+HGdLupmBNh7oM?CZq?G&A9VNE0n z^Hu=89xtDDuTPXh`3b4h3HtY86iN_So#V6I6J~kG>X!YVp+6Vz9xSS>{le^SLmp!2 zW$b<2(P)$FcwlbEX|KsN-_-}FL)7o>M@rS%S!sybsEh|?7Lo9%eZBqMaY4o&{@dWP z0E5r8e*p?6a(7MsE24KfLm8cpC5rOB6*#|BqB^R%53};tW{rn`zdzIp!j&M-m6R3N UOc-4XG?&x^zSIL|=losyKcD{;1ONa4 literal 0 HcmV?d00001 diff --git a/webgoat-lessons/challenge/src/main/resources/js/challenge2.js b/webgoat-lessons/challenge/src/main/resources/js/challenge2.js new file mode 100644 index 000000000..a9e649e8c --- /dev/null +++ b/webgoat-lessons/challenge/src/main/resources/js/challenge2.js @@ -0,0 +1,33 @@ +$(document).ready(function(){ + //-- Click on detail + $("ul.menu-items > li").on("click",function(){ + $("ul.menu-items > li").removeClass("active"); + $(this).addClass("active"); + }) + + $(".attr,.attr2").on("click",function(){ + var clase = $(this).attr("class"); + + $("." + clase).removeClass("active"); + $(this).addClass("active"); + }) + + //-- Click on QUANTITY + $(".btn-minus").on("click",function(){ + var now = $(".section > div > input").val(); + if ($.isNumeric(now)){ + if (parseInt(now) -1 > 0){ now--;} + $(".section > div > input").val(now); + }else{ + $(".section > div > input").val("1"); + } + }) + $(".btn-plus").on("click",function(){ + var now = $(".section > div > input").val(); + if ($.isNumeric(now)){ + $(".section > div > input").val(parseInt(now)+1); + }else{ + $(".section > div > input").val("1"); + } + }) +}) \ No newline at end of file From 08f0c94a57cfbbbdfd7eea905f4eca5a5b6b31bd Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Thu, 23 Mar 2017 21:03:20 +0100 Subject: [PATCH 05/22] Fixed logout --- webgoat-container/src/main/resources/templates/main_new.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webgoat-container/src/main/resources/templates/main_new.html b/webgoat-container/src/main/resources/templates/main_new.html index a791f2026..925781ffa 100644 --- a/webgoat-container/src/main/resources/templates/main_new.html +++ b/webgoat-container/src/main/resources/templates/main_new.html @@ -62,7 +62,7 @@
    -
  • Logout
  • ' + + '
    ' + + 'avatar' + + '
    ' + + '
    ' + + '
    ' + + '

    USER

    ' + + '
    DATETIME
    ' + + '
    ' + + '

    COMMENT

    ' + + '
    ' + + '
    • '; + $.get("challenge/3", function (result, status) { - alert("Hello"); - }) + for (var i = 0; i < result.length; i++) { + var comment = html.replace('USER', result[i].user); + comment = comment.replace('DATETIME', result[i].dateTime); + comment = comment.replace('COMMENT', result[i].comment); + $("#list").append(comment); + } + + }); }) \ No newline at end of file From a60c529229c7ce6a86e6e76b1e7dcd477ac76c1a Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Sun, 9 Apr 2017 02:30:13 +0200 Subject: [PATCH 18/22] Separating challenges --- .../owasp/webgoat/plugins/PluginResource.java | 5 +- .../owasp/webgoat/plugins/PluginsLoader.java | 19 +-- .../Assignment1.java} | 5 +- .../Challenge1.java} | 8 +- .../Assignment2.java} | 5 +- .../webgoat/plugin/challenge2/Challenge2.java | 39 ++++++ .../plugin/{ => challenge2}/ShopEndpoint.java | 2 +- .../plugin/challenge3/Assignment3.java | 109 +++++++++++++++++ .../webgoat/plugin/challenge3/Challenge3.java | 112 ++++-------------- .../src/main/resources/html/Challenge1.html | 59 +++++++++ .../src/main/resources/html/Challenge2.html | 111 +++++++++++++++++ .../src/main/resources/html/Challenge3.html | 57 +++++++++ .../src/main/resources/html/Challenge4.html | 111 +++++++++++++++++ .../resources/i18n/WebGoatLabels.properties | 3 + 14 files changed, 535 insertions(+), 110 deletions(-) rename webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/{Challenge1.java => challenge1/Assignment1.java} (94%) rename webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/{Challenge.java => challenge1/Challenge1.java} (79%) rename webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/{Challenge2.java => challenge2/Assignment2.java} (87%) create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/Challenge2.java rename webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/{ => challenge2}/ShopEndpoint.java (97%) create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java create mode 100644 webgoat-lessons/challenge/src/main/resources/html/Challenge1.html create mode 100644 webgoat-lessons/challenge/src/main/resources/html/Challenge2.html create mode 100644 webgoat-lessons/challenge/src/main/resources/html/Challenge3.html create mode 100644 webgoat-lessons/challenge/src/main/resources/html/Challenge4.html diff --git a/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginResource.java b/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginResource.java index c84f07da2..73e3ee03b 100644 --- a/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginResource.java +++ b/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginResource.java @@ -8,7 +8,6 @@ import org.owasp.webgoat.lessons.NewLesson; import java.net.URL; import java.util.List; -import java.util.Optional; import java.util.stream.Collectors; /** @@ -24,8 +23,8 @@ public class PluginResource { private final URL location; private final List classes; - public Optional getLesson() { - return classes.stream().filter(c -> c.getSuperclass() == NewLesson.class).findFirst(); + public List getLessons() { + return classes.stream().filter(c -> c.getSuperclass() == NewLesson.class).collect(Collectors.toList()); } public List> getEndpoints() { diff --git a/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginsLoader.java b/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginsLoader.java index 50a255381..594b185ef 100644 --- a/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginsLoader.java +++ b/webgoat-container/src/main/java/org/owasp/webgoat/plugins/PluginsLoader.java @@ -67,13 +67,18 @@ public class PluginsLoader { List lessons = Lists.newArrayList(); for (PluginResource plugin : findPluginResources()) { try { - Class lessonClazz = plugin.getLesson() - .orElseThrow(() -> new PluginLoadingFailure("Plugin resource does not contain lesson")); - NewLesson lesson = (NewLesson) lessonClazz.newInstance(); - List> assignments = plugin.getAssignments(); - lesson.setAssignments(createAssignment(assignments)); - lessons.add(lesson); - pluginEndpointPublisher.publish(plugin.getEndpoints()); + plugin.getLessons().forEach(c -> { + NewLesson lesson = null; + try { + lesson = (NewLesson) c.newInstance(); + } catch (Exception e) { + log.error("Error while loading:" + c, e); + } + List> assignments = plugin.getAssignments(); + lesson.setAssignments(createAssignment(assignments)); + lessons.add(lesson); + pluginEndpointPublisher.publish(plugin.getEndpoints()); + }); } catch (Exception e) { log.error("Error in loadLessons: ", e); } diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge1.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge1/Assignment1.java similarity index 94% rename from webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge1.java rename to webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge1/Assignment1.java index 2b2a4f1d4..a05fcafab 100644 --- a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge1.java +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge1/Assignment1.java @@ -1,8 +1,9 @@ -package org.owasp.webgoat.plugin; +package org.owasp.webgoat.plugin.challenge1; import org.owasp.webgoat.assignments.AssignmentEndpoint; import org.owasp.webgoat.assignments.AssignmentPath; import org.owasp.webgoat.assignments.AttackResult; +import org.owasp.webgoat.plugin.Flag; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.bind.annotation.RequestParam; @@ -42,7 +43,7 @@ import static org.owasp.webgoat.plugin.SolutionConstants.PASSWORD; * @since August 11, 2016 */ @AssignmentPath("/challenge/1") -public class Challenge1 extends AssignmentEndpoint { +public class Assignment1 extends AssignmentEndpoint { @RequestMapping(method = RequestMethod.POST) public diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge1/Challenge1.java similarity index 79% rename from webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge.java rename to webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge1/Challenge1.java index be24197ca..86364d124 100644 --- a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge.java +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge1/Challenge1.java @@ -1,4 +1,4 @@ -package org.owasp.webgoat.plugin; +package org.owasp.webgoat.plugin.challenge1; import com.google.common.collect.Lists; import org.owasp.webgoat.lessons.Category; @@ -10,7 +10,7 @@ import java.util.List; * @author nbaars * @since 3/21/17. */ -public class Challenge extends NewLesson { +public class Challenge1 extends NewLesson { @Override public Category getDefaultCategory() { @@ -29,11 +29,11 @@ public class Challenge extends NewLesson { @Override public String getTitle() { - return "challenge.title"; + return "challenge1.title"; } @Override public String getId() { - return "Challenge"; + return "Challenge1"; } } diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge2.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/Assignment2.java similarity index 87% rename from webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge2.java rename to webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/Assignment2.java index 87ece4df9..d46535589 100644 --- a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/Challenge2.java +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/Assignment2.java @@ -1,8 +1,9 @@ -package org.owasp.webgoat.plugin; +package org.owasp.webgoat.plugin.challenge2; import org.owasp.webgoat.assignments.AssignmentEndpoint; import org.owasp.webgoat.assignments.AssignmentPath; import org.owasp.webgoat.assignments.AttackResult; +import org.owasp.webgoat.plugin.Flag; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.bind.annotation.RequestParam; @@ -17,7 +18,7 @@ import static org.owasp.webgoat.plugin.SolutionConstants.SUPER_COUPON_CODE; * @since 4/6/17. */ @AssignmentPath("/challenge/2") -public class Challenge2 extends AssignmentEndpoint { +public class Assignment2 extends AssignmentEndpoint { @RequestMapping(method = RequestMethod.POST) public diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/Challenge2.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/Challenge2.java new file mode 100644 index 000000000..94b1cf58b --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/Challenge2.java @@ -0,0 +1,39 @@ +package org.owasp.webgoat.plugin.challenge2; + +import com.google.common.collect.Lists; +import org.owasp.webgoat.lessons.Category; +import org.owasp.webgoat.lessons.NewLesson; + +import java.util.List; + +/** + * @author nbaars + * @since 3/21/17. + */ +public class Challenge2 extends NewLesson { + + @Override + public Category getDefaultCategory() { + return Category.CHALLENGE; + } + + @Override + public List getHints() { + return Lists.newArrayList(); + } + + @Override + public Integer getDefaultRanking() { + return 10; + } + + @Override + public String getTitle() { + return "challenge2.title"; + } + + @Override + public String getId() { + return "Challenge2"; + } +} diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ShopEndpoint.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/ShopEndpoint.java similarity index 97% rename from webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ShopEndpoint.java rename to webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/ShopEndpoint.java index aae31c098..12c929492 100644 --- a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ShopEndpoint.java +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge2/ShopEndpoint.java @@ -1,4 +1,4 @@ -package org.owasp.webgoat.plugin; +package org.owasp.webgoat.plugin.challenge2; import com.beust.jcommander.internal.Lists; import lombok.AllArgsConstructor; diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java new file mode 100644 index 000000000..5d44247dd --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java @@ -0,0 +1,109 @@ +package org.owasp.webgoat.plugin.challenge3; + +import com.fasterxml.jackson.databind.ObjectMapper; +import com.google.common.collect.EvictingQueue; +import org.joda.time.DateTime; +import org.owasp.webgoat.assignments.AssignmentEndpoint; +import org.owasp.webgoat.assignments.AssignmentPath; +import org.owasp.webgoat.assignments.AttackResult; +import org.owasp.webgoat.plugin.Flag; +import org.owasp.webgoat.session.WebSession; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.http.MediaType; +import org.springframework.web.bind.annotation.*; + +import javax.xml.bind.JAXBContext; +import javax.xml.bind.Unmarshaller; +import javax.xml.stream.XMLInputFactory; +import javax.xml.stream.XMLStreamReader; +import java.io.IOException; +import java.io.StringReader; +import java.util.Collection; + +import static org.springframework.http.MediaType.ALL_VALUE; +import static org.springframework.http.MediaType.APPLICATION_JSON_VALUE; +import static org.springframework.web.bind.annotation.RequestMethod.GET; +import static org.springframework.web.bind.annotation.RequestMethod.POST; + +/** + * @author nbaars + * @since 4/8/17. + */ +@AssignmentPath("/challenge/3") +public class Assignment3 extends AssignmentEndpoint { + + @Autowired + private WebSession webSession; + private static final EvictingQueue comments = EvictingQueue.create(100); + + static { + comments.add(new Comment("webgoat", DateTime.now().toString(), "Silly cat....")); + comments.add(new Comment("guest", DateTime.now().toString(), "I think I will use this picture in one of my projects.")); + comments.add(new Comment("guest", DateTime.now().toString(), "Lol!! :-).")); + } + + @RequestMapping(method = GET, produces = APPLICATION_JSON_VALUE) + @ResponseBody + public Collection retrieveComments() { + return comments; + } + + @RequestMapping(method = POST, consumes = ALL_VALUE, produces = APPLICATION_JSON_VALUE) + @ResponseBody + public AttackResult createNewComment(@RequestBody String commentStr, @RequestHeader("Content-Type") String contentType) throws Exception { + Comment comment = null; + AttackResult attackResult = failed().build(); + if (APPLICATION_JSON_VALUE.equals(contentType)) { + comment = parseJson(commentStr); + comment.setDateTime(DateTime.now().toString()); + comment.setUser(webSession.getUserName()); + } + if (MediaType.APPLICATION_XML_VALUE.equals(contentType)) { + comment = parseXml(commentStr); + comment.setDateTime(DateTime.now().toString()); + comment.setUser(webSession.getUserName()); + } + if (comment != null) { + comments.add(comment); + if (checkSolution(comment)) { + attackResult = success().feedback("challenge.solved").feedbackArgs(Flag.FLAGS.get(2)).build(); + } + } + + return attackResult; + } + + private boolean checkSolution(Comment comment) { + if (comment.getComment().contains("Congratulations you may now collect your flag")) { + comment.setComment("Congratulations to " + webSession.getUserName() + " for finding the flag!!"); + return true; + } + return false; + } + + public static Comment parseXml(String xml) throws Exception { + JAXBContext jc = JAXBContext.newInstance(Comment.class); + + XMLInputFactory xif = XMLInputFactory.newFactory(); + xif.setProperty(XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIES, true); + xif.setProperty(XMLInputFactory.IS_VALIDATING, false); + + xif.setProperty(XMLInputFactory.SUPPORT_DTD, true); + XMLStreamReader xsr = xif.createXMLStreamReader(new StringReader(xml)); + + Unmarshaller unmarshaller = jc.createUnmarshaller(); + return (Comment) unmarshaller.unmarshal(xsr); + } + + private Comment parseJson(String comment) { + ObjectMapper mapper = new ObjectMapper(); + try { + return mapper.readValue(comment, Comment.class); + } catch (IOException e) { + return new Comment(); + } + } + + +} + diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Challenge3.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Challenge3.java index d1a92dd84..91a05d4ea 100644 --- a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Challenge3.java +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Challenge3.java @@ -1,109 +1,39 @@ package org.owasp.webgoat.plugin.challenge3; -import com.fasterxml.jackson.databind.ObjectMapper; -import com.google.common.collect.EvictingQueue; -import org.joda.time.DateTime; -import org.owasp.webgoat.assignments.AssignmentEndpoint; -import org.owasp.webgoat.assignments.AssignmentPath; -import org.owasp.webgoat.assignments.AttackResult; -import org.owasp.webgoat.plugin.Flag; -import org.owasp.webgoat.session.WebSession; -import org.springframework.beans.factory.annotation.Autowired; -import org.springframework.http.MediaType; -import org.springframework.web.bind.annotation.*; +import com.google.common.collect.Lists; +import org.owasp.webgoat.lessons.Category; +import org.owasp.webgoat.lessons.NewLesson; -import javax.xml.bind.JAXBContext; -import javax.xml.bind.Unmarshaller; -import javax.xml.stream.XMLInputFactory; -import javax.xml.stream.XMLStreamReader; -import java.io.IOException; -import java.io.StringReader; -import java.util.Collection; - -import static org.springframework.http.MediaType.ALL_VALUE; -import static org.springframework.http.MediaType.APPLICATION_JSON_VALUE; -import static org.springframework.web.bind.annotation.RequestMethod.GET; -import static org.springframework.web.bind.annotation.RequestMethod.POST; +import java.util.List; /** * @author nbaars - * @since 4/8/17. + * @since 3/21/17. */ -@AssignmentPath("/challenge/3") -public class Challenge3 extends AssignmentEndpoint { +public class Challenge3 extends NewLesson { - @Autowired - private WebSession webSession; - private static final EvictingQueue comments = EvictingQueue.create(100); - - static { - comments.add(new Comment("webgoat", DateTime.now().toString(), "Silly cat....")); - comments.add(new Comment("guest", DateTime.now().toString(), "I think I will use this picture in one of my projects.")); - comments.add(new Comment("guest", DateTime.now().toString(), "Lol!! :-).")); + @Override + public Category getDefaultCategory() { + return Category.CHALLENGE; } - @RequestMapping(method = GET, produces = APPLICATION_JSON_VALUE) - @ResponseBody - public Collection retrieveComments() { - return comments; + @Override + public List getHints() { + return Lists.newArrayList(); } - @RequestMapping(method = POST, consumes = ALL_VALUE, produces = APPLICATION_JSON_VALUE) - @ResponseBody - public AttackResult createNewComment(@RequestBody String commentStr, @RequestHeader("Content-Type") String contentType) throws Exception { - Comment comment = null; - AttackResult attackResult = failed().build(); - if (APPLICATION_JSON_VALUE.equals(contentType)) { - comment = parseJson(commentStr); - comment.setDateTime(DateTime.now().toString()); - comment.setUser(webSession.getUserName()); - } - if (MediaType.APPLICATION_XML_VALUE.equals(contentType)) { - comment = parseXml(commentStr); - comment.setDateTime(DateTime.now().toString()); - comment.setUser(webSession.getUserName()); - } - if (comment != null) { - comments.add(comment); - if (checkSolution(comment)) { - attackResult = success().feedback("challenge.solved").feedbackArgs(Flag.FLAGS.get(2)).build(); - } - } - - return attackResult; + @Override + public Integer getDefaultRanking() { + return 10; } - private boolean checkSolution(Comment comment) { - if (comment.getComment().contains("Congratulations you may now collect your flag")) { - comment.setComment("Congratulations to " + webSession.getUserName() + " for finding the flag!!"); - return true; - } - return false; + @Override + public String getTitle() { + return "challenge3.title"; } - public static Comment parseXml(String xml) throws Exception { - JAXBContext jc = JAXBContext.newInstance(Comment.class); - - XMLInputFactory xif = XMLInputFactory.newFactory(); - xif.setProperty(XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIES, true); - xif.setProperty(XMLInputFactory.IS_VALIDATING, false); - - xif.setProperty(XMLInputFactory.SUPPORT_DTD, true); - XMLStreamReader xsr = xif.createXMLStreamReader(new StringReader(xml)); - - Unmarshaller unmarshaller = jc.createUnmarshaller(); - return (Comment) unmarshaller.unmarshal(xsr); + @Override + public String getId() { + return "Challenge3"; } - - private Comment parseJson(String comment) { - ObjectMapper mapper = new ObjectMapper(); - try { - return mapper.readValue(comment, Comment.class); - } catch (IOException e) { - return new Comment(); - } - } - - } - diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge1.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge1.html new file mode 100644 index 000000000..f2baa0d78 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge1.html @@ -0,0 +1,59 @@ + + + + +
    +
    +
    + +
    +
    +
    +
    +
    +
    + +
    +
    +
    + +
    + + +
    +
    + + +
    + +
    +
    +
    + +
    +
    +
    +
    + +
    +
    + +
    + +
    +
    +
    +
    +
    + + + \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge2.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge2.html new file mode 100644 index 000000000..8d3cea4c8 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge2.html @@ -0,0 +1,111 @@ + + + + +
    +
    +
    + +
    +
    + + +
    +
    +
    + + +
    + +
    + +
    +
    +

    Samsung Galaxy S8

    +
    Samsung ยท + (124421 reviews) +
    + +
    + PRICE +
    +

    US $899

    + +
    +
    + COLOR +
    +
    +
    +
    +
    +
    +
    +
    + CAPACITY +
    +
    +
    64 GB
    +
    128 GB
    +
    +
    +
    +
    + QUANTITY +
    +
    +
    + +
    +
    +
    + +
    +
    + CHECKOUT CODE +
    + + + +
    + +
    + +
    + Like
    +
    +
    +
    + +
    +
    +
    +
    +
    +
    +
    + +
    +
    + +
    +
    + +
    +
    +
    +
    +
    + + \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge3.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge3.html new file mode 100644 index 000000000..a5e0ebdf9 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge3.html @@ -0,0 +1,57 @@ + + + + +
    +
    +
    + +
    +
    + + +
    +
    +
    +
    +
    + user profile image +
    +
    +
    + John Doe + uploaded a photo. +
    +
    24 days ago
    +
    +
    + +
    + image post +
    + +
    + +
    +
    +
    + + + + +
    +
      +
      +
      +
    +
    +
    + + +
    +
    +
    +
    +
    + \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge4.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge4.html new file mode 100644 index 000000000..c095de87a --- /dev/null +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge4.html @@ -0,0 +1,111 @@ + + + + +
    +
    +
    + +
    +
    + + +
    +
    +
    + + +
    + +
    + +
    +
    +

    Samsung Galaxy S8

    +
    Samsung ยท + (124421 reviews) +
    + +
    + PRICE +
    +

    US $899

    + +
    +
    + COLOR +
    +
    +
    +
    +
    +
    +
    +
    + CAPACITY +
    +
    +
    64 GB
    +
    128 GB
    +
    +
    +
    +
    + QUANTITY +
    +
    +
    + +
    +
    +
    + +
    +
    + CHECKOUT CODE +
    + + + +
    + +
    + +
    + Like
    +
    +
    +
    + +
    +
    +
    +
    +
    +
    +
    + +
    +
    + +
    +
    + +
    +
    +
    +
    +
    + + \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties b/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties index 7a0256c24..f5bc601a3 100644 --- a/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties +++ b/webgoat-lessons/challenge/src/main/resources/i18n/WebGoatLabels.properties @@ -1,2 +1,5 @@ challenge.title=WebGoat Challenge +challenge1.title=Admin lost password +challenge2.title=Get it for free +challenge3.title=Photo comments challenge.solved=Congratulations, you solved the challenge. Here is your flag: {0} From c2c7c602df94fa810adbe03bcabcf01d7bc9a933 Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Sun, 9 Apr 2017 03:27:16 +0200 Subject: [PATCH 19/22] Fixed layout issues --- .../owasp/webgoat/plugin/ChallengeIntro.java | 39 +++ .../src/main/resources/html/Challenge.html | 303 ------------------ .../src/main/resources/html/Challenge1.html | 5 - .../src/main/resources/html/Challenge2.html | 3 - .../src/main/resources/html/Challenge3.html | 3 - .../src/main/resources/html/Challenge4.html | 3 - .../src/main/resources/images/boss.jpg | Bin 0 -> 23340 bytes .../en/Challenge_introduction.adoc | 7 +- 8 files changed, 45 insertions(+), 318 deletions(-) create mode 100644 webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ChallengeIntro.java create mode 100644 webgoat-lessons/challenge/src/main/resources/images/boss.jpg diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ChallengeIntro.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ChallengeIntro.java new file mode 100644 index 000000000..de5869668 --- /dev/null +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/ChallengeIntro.java @@ -0,0 +1,39 @@ +package org.owasp.webgoat.plugin; + +import com.google.common.collect.Lists; +import org.owasp.webgoat.lessons.Category; +import org.owasp.webgoat.lessons.NewLesson; + +import java.util.List; + +/** + * @author nbaars + * @since 3/21/17. + */ +public class ChallengeIntro extends NewLesson { + + @Override + public Category getDefaultCategory() { + return Category.CHALLENGE; + } + + @Override + public List getHints() { + return Lists.newArrayList(); + } + + @Override + public Integer getDefaultRanking() { + return 10; + } + + @Override + public String getTitle() { + return "challenge.title"; + } + + @Override + public String getId() { + return "Challenge"; + } +} diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html index 0d0b0fe86..8c61187d4 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge.html @@ -6,307 +6,4 @@
    -
    -
    -
    -
    -
    -
    - -
    -
    -
    - -
    - - -
    -
    - - -
    - -
    -
    -
    - -
    -
    -
    -
    - -
    -
    - -
    - -
    -
    -
    -
    -
    - -
    -
    - - -
    -
    -
    - - -
    - -
    - -
    -
    -

    Samsung Galaxy S8

    -
    Samsung ยท - (124421 reviews) -
    - -
    - PRICE -
    -

    US $899

    - -
    -
    - COLOR -
    -
    -
    -
    -
    -
    -
    -
    - CAPACITY -
    -
    -
    64 GB
    -
    128 GB
    -
    -
    -
    -
    - QUANTITY -
    -
    -
    - -
    -
    -
    - -
    -
    - CHECKOUT CODE -
    - - - -
    - -
    - -
    - Like
    -
    -
    -
    - -
    -
    -
    -
    -
    -
    -
    - -
    -
    - -
    -
    - -
    -
    -
    -
    -
    - - -
    -
    - - -
    -
    -
    -
    -
    - user profile image -
    -
    -
    - John Doe - uploaded a photo. -
    -
    24 days ago
    -
    -
    - -
    - image post -
    - -
    - -
    -
    -
    - - - - -
    -
      -
      -
      -
    -
    -
    - - -
    -
    -
    -
    -
    - -
    -
    - - -
    -
    -
    - - -
    - -
    - -
    -
    -

    Samsung Galaxy S8

    -
    Samsung ยท - (124421 reviews) -
    - -
    - PRICE -
    -

    US $899

    - -
    -
    - COLOR -
    -
    -
    -
    -
    -
    -
    -
    - CAPACITY -
    -
    -
    64 GB
    -
    128 GB
    -
    -
    -
    -
    - QUANTITY -
    -
    -
    - -
    -
    -
    - -
    -
    - CHECKOUT CODE -
    - - - -
    - -
    - -
    - Like
    -
    -
    -
    - -
    -
    -
    -
    -
    -
    -
    - -
    -
    - -
    -
    - -
    -
    -
    -
    -
    - \ No newline at end of file diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge1.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge1.html index f2baa0d78..52559bfc2 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge1.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge1.html @@ -3,11 +3,6 @@
    -
    -
    - -
    -
    diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge2.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge2.html index 8d3cea4c8..52b0b8de1 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge2.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge2.html @@ -2,9 +2,6 @@ -
    -
    -
    diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge3.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge3.html index a5e0ebdf9..aec09ac6b 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge3.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge3.html @@ -2,9 +2,6 @@ -
    -
    -
    diff --git a/webgoat-lessons/challenge/src/main/resources/html/Challenge4.html b/webgoat-lessons/challenge/src/main/resources/html/Challenge4.html index c095de87a..8b7f8ddac 100644 --- a/webgoat-lessons/challenge/src/main/resources/html/Challenge4.html +++ b/webgoat-lessons/challenge/src/main/resources/html/Challenge4.html @@ -2,9 +2,6 @@ -
    -
    -
    diff --git a/webgoat-lessons/challenge/src/main/resources/images/boss.jpg b/webgoat-lessons/challenge/src/main/resources/images/boss.jpg new file mode 100644 index 0000000000000000000000000000000000000000..ec432e31aa710343ea08a8602b58237ef76f2141 GIT binary patch literal 23340 zcmb5VbyOTd*FJ~`x51sk9R~Mc!{8F!-QAtwE`vM4LxA8KAjse@!4sU|!GmXc-|x5I zp8aq4R-Znny82Xi*S&S?xzFwTxAJcb4p$MZ0EUByhl7KED{%kT;bh=YkdRT3kx)>O zQQo~nK}E+!M@K_LC&0$R#3d#mAt5FpA|j(?pe7@yqaY%pVW**EWMW}uA*JTv=3wS# zU}jvTpd|JY36{B`Ho;_N)lc6|Q=uGv>VVVcu?8@3jw`D6Sk9o82XVhnN;nHbmCChrv5W%lU2R;oNBWH?lV6+7Q?uymqT;LrXQuf=(@`)k6mK7rht+@LcxXrqbZan@!<~& zhr?~bG=GY1y^?oLw)x6CIh&#R__bd?Zwfr>POmApHQ+9qrh|Y~ zWH|zTSZipyH1pJNP%Ow-EtuqI{#b2z>vHly=<1kv^KAGS zmS-FBM<}2m6n#9;oVR6{IWIk0`na&*0SkxD%t6b#k_Pwlooejtm3H}(ek$Mv<(+(z zm>vHxcBM{|phw|oy8me~x*-{U zL4|fgVq5f5XWUwo_#og18CTh-EML-f_eTHYuCD=`*(bv0btic0e@^&!bfyd}^m+W@ z`^%-SfvD9%IbQ-XP59t+f;HaBh>!8a_rj%rX!up;LBVQ6x| z%%eGWYIDDcv^Zi*&wmbkve73?&s1N$)2gZx&bI$!JrK}3745hTsuL&m2DkDC(dr4{ zmFrR-pb|v*b8E+{_}PxtvHKBSQz38X*!wxuaU6)vU->EHjuh1IJ~Zmp(%PLq&_)bj znO#1^H3rcv-dg%dFBe6nHq~ML-k{15%bzRWy9v(UyI~R_tungLdeO|vk8(k2YRFHm z18=Zt2%;BepU(g6IN;G{*RFwRL8_ws5|Eh<=HF*@3ep5&u6nTYB_B=Ve;^<_#LS7% z{8h^F$B6A9mh`e##}dcGp#Sdtc3N^aNF1a@r#bC6{Fo%&F)eyjP$_cVd)T8?@K?jf z!+kNnir%)!xxus5Bf#IgT{wxN_2*@DevMgJSu8zDf)pQ{gQKTwOvUFV5nIp+{;YX3 zAk+8o7q$JcFI7E}L>s^LZcDUPVOqgO{^tIYNBmmz2LyMGc{4MGo{lcJ#&4V-$_nzB zy-1B!81jr=QrCCm$dsB)zjn9$r0Jd>{@PP+m(Z%-^NU#3oXWxQ_Y&EULs)ok`SKJ` zNYapHyEqY9SsSAWh|)sOZFY)PB-x~5tDq2JX8u|jJ6$|}>iWRMQLnQ+U1s%?`0Enw zntQUge{fw#wfw?F=G5KQ4QavT(D`-y@%pdB>-P485tj$F{h)7M2TaQ7RJc$2Joal9 zIz??}gR-pf5<9<$xl}%T5AgCguNkl@B>|8=ipVkMSra*U5}IrMq3hy%-&1WOZ(|>9 zn0I_T)Lj1?u}{Fp;P>YN^oypyO%C$*oSRp1_qlB#)Ih4PWDJ*zOQ8CM(!!v{@=rMU8N7Zy$qBH6Ue>b4^H)w|ow zwvFc{>}=4N>K~9A{(|wq$1_{a;n)^?L=J5xop+do;;C^o*~Ex4T7uc`AhKG`?>VjP zT|LTYo-6%%ZK)QS-;h+y?e%z+=DdgrfAp!{I8aK{xu$E?)WLBpMHf3qf{99--dF?zzVQ^~D<-L70P1RCH#2-v}UF!EM znpj+|&;ZkGKcNerC00?;!@Y^S#Fh842`VN^6Gm?@93=6Zwn!oQ>Z%kG#jndk;P6{-5pLg@i+yZ0fu>1i`!kWTZ*VL1SbevULX>!gDNH zP*+YJs}1zCFgXvrcl&k@&3yJYEvV{?T?=h*RxoD{{Y|Dgj9g1S4So;#7F@N9x}Nj@ z_FB`qBN!sQa?&<@hdpYvsf2kl*eDiseqQ@LB-^*e%VxK@1S@R97k>72F`j?sG@ zphu2&J$|<)y!?J!_v%r2!zBW-*I$60qwECzlHJ4cOY*QN05a%-8H3VjM892>NL&$+#GY zsO_VQwC!Xa8)JZM>zJD;U z@LnC$vKd{kajrsL6t&TpQKhzdi_lZ;^I4D`>n z8`HV-It~9T5LXV86B7kBa;nhPq$|4R(;3XEDzggI#E=6q56O8YBVk>iiOL}~!F z&{A+~5B|P^O5py6foI{CMYxLteYqw%`C`n6J`_v^a~e1@T7Yibn6z zxlg_hXo{aQ>cC1EQvr=fUnz2Hy~Rm&Y+7pTwmi02RVA~Qas`y1(Eh>Eq6TPu2|$|e zC^5vLjQ7qXSn+9LyZ1Pw%dusrRvuO&R>0%|M+n|@1>BW)P?~TZ>>K^$xA;2XRA@OG zsH1+F(a1iFM<-!I$g6H3^V5_uRIVcRQ%16!O1WAcJ8=@X`b3mCfM%%w3p0kgiIzTf zMS)OX zn|#UZy_C!ajmPi2#D(%Vt1oG|v9Z#J&!l%&Gb*5m`@<>IyzaSeYB~3f%s>@_i=EMj zl<K@6cT_NK`GEUEG5$1+}ws&nFpLb2`h>%&q?36(&XY%O&HSP zFA-maHq(|DI`-j=n)@g;?sf9%9~{|Gk~}0<8n4NonaRmQ!-CZ43fU2MR zPf%3c{AllOZ}xrrU+T==MIC-hAT6r&Q4y4Br(&Iw+pIr1uXwFACmtxxRxz5WWo~+> z342cBdG(lig9oid6&lXH5o^;Z*X@9VWCG&xs%}Nq((8nR)oH5M*m9u96! zZ!tzy>S3#R<#<_{xek0)zEd89V!Vdq%y1=mkY8QEB2&&vKrkp7|n!Q(B+Ozpm*GrgwkvLRk#gJlK@Bgc&^z0znB)|Ev7-}AqNW#t8A&{@~*&XuqS1gNj zj^@Hu7-E$6Tb|8Tr8-KpxLPV@k;w5D0{aJdx}<;nMfQ)!n-e(j=oT86r$`oXrm%7! z-G#QMFpWM?^MZy+H`Z2RQ_=m4$;|ONO!PGs$f;3@z56B*L zj5jE0UJ&w=j{WU8w=SH18)hStH#3Mp!6Z3}uy0v$63F3Meyea>R$_Yfr`%g^hIe!- zEt+FtVGeRn@?s7iMVlu;Qift%=7{p%?Y@6@m>H>k4wy!ND-A|{pQO*@DoROIq2Ulun%cQ&e6nXmCf6Zul zP4}8otJFZxE$W$UWS;F6+L*}D9t-epfZ^JO2Up`QbX|z+Ccq;)BaKZDSq~OrjxplIqj<)QYXrkzRn@iI;yB!h|&tZ}f{r zRm+$D$}(0yyoLBMb=Igzc6@ySK+M(AR~>uDFN$Y!qF6?B&f1%oU);HFIaKzQ9z@1$ zgpMB_cOF0NzmLqLSeK+61Gjc@D*#)&bnUa6se>49v^q7AC|W!v08Ro0GapzpPf z8B#Vhs;N0Qo-XZ@s|XggHVwsj4Xc!w^a|>Zh)bTPLK6vB3VashnDa%CUIClEnrQ-U zVD>dLjdijM=XmxX&PxuhVqI%_>(w)ovFwV4RuUpPb@NsgvGz|yKK>vV#=kO*5Y&s? zmOs(OPq;a`6r?A3pbrmhs+PHA%&rDCWh9%m+PY(GsLL_vuDXvR_dh8<%Q@9=QyYCT zbn*eKS~z#iAZHzjP90nkrDq3^L=XGx{Ahx?2tuLV`@)blk8VTH8ByVtdfW2ViKEwg z&jVj!ic_Dq0B!u-%KG4_4p>DKS%Op8m&`0q&a2=ntFd%COMj3OEU@f+z;~E z=fZfFW6^Vu!$_W+xLaTC<%AZNhX5x_EdHP6UtP%J3|XAl(N2KL!Sk8uhX#co0u#Nn z+r-PChC?_q{FZa>jd4fj={W9apCP8{Y7A4#C4&|&6HW@ofqT72ih%U-#xnVub=4X} za^h>q;4mh>$!e(pbG3dikZwzwj9PAf(?&rNL||cWa^lr`wy-hJucIV5^Wf5aaB6j6 z|JA)HE9tSvNr0TOtA)?ZvHUFlL%aJ8@NLCNS#@osqhw7_d|_R8UO2XJu(~sLQFz#p zI4It?$;UM~Go29-_Od)KnM3pGgJQ?V(SEHal6~_fKZ9E?H>+;_I`mcaQ_%X{3f`d$ z0i6X>YqhPkKs;+Z@};N3V$~o*59$QKC33m+eBZMjbz(BR;>pSC1neBL$Ive9lnoBx zEU~}swu@|&|FLi7G;a}Li)h}UamGxJ6on_7h}EGDgT!;2sS_wJ(QTaj-f?Z3DmMH$ zkG*bPTZ1%O=qcL`E1tN7WV5KrAB$#HefaD%GFSUkhTB=-Z-zz$y%kIRplIykHQDGO z%AoylQUduJ!78-blOTC_rL1N@OtgHm8Vu<#-ZPFu0XIErnU*;cUfc>hm)7T&!}x1{ z-jzxNA*C^`T0{B`kpA%LxxUEYEv3rpAr0##E!7`+As+(l2J#*InTG`1CGw4&o6hip z1i+lyGcwiDy@hI(Mnw@y7OlLD%DG3V5Oru1cqw)x*@}(GlE3h0d;at_q4KUpgwQl^ z;z~edo33?!-0N$4nUSu><>GSZPcT95Atr9Ri_gXa8=q?V7th3T zcy6&R9C#@`t9uxCl|E-BpX-cR5*D^6)S7`&1j_x?FQhCakbqnmZn-BS3HD!qY9 zMO(Ym=+Fc{7@dq~Adm;2GLwzlW+tOc{cjH)>{GcMx!L=#L zz%rqlv~=(8ITj^Bo+6WqU;LZFnc1fUkEPEL0Q-MZTI*#!NHD)S)N8R=oZ!^57V-80d_e&~aSai)|qPUeoT z$&x%n63#h0L0w{`Af>@b{eF}Vph5!afhaR zd6F9xFc2W8KBC?sVq?&;qO`+q5SQb|8!AmY&B*P^&&^_l4eh_Kke#N^;UiZnL!m@0 zzHiS879>)`t8coJuQ|HC>)w(PD6=uxQC|jIQj+$(u1K)>D&JRAC7%uOw~n+!=xTt3JpU zWtUMocFb{tSY=qP?TPNsA54WeKR5j55wRjanOW(lVJgoA<+5IO=CAhTum0y8?;*(3 z8yjpOIdGx#w5P1>@di~p#+X*F8RjK`@-wUNqB?%L3X&%sY(q9|8=@cO%U*QDB|I1z z1zZHlr+(9Z69?u-TjqW7Bk#xsY>O=F!#B%fBm%j#< zNsRd&em5x&*?f!hfOv3-|5N^#ZimN1z{N+Tq2=b00suAs8{WO~?UL}e>5fYC85I)5 z%e3_`jE(bDCE^F7==Wk-@X~$;1N(TA!G`8X{>0`4ynk@|fERi0Ns#kv9{x zeA5tF=|X}Embp1ajY6z>jP1GC*wfRope6RM!^07Db`3mK>nGuPtuep{6J@3aiz$*t?L<3Z})GcAh}MK2$(4_vh)B-Z>-JkL0D2@6anjWULjjP*_H^SGO> z&m0s-_QC8tFSwDk;;H}xX^r-k<{buzq zhFlO-(26r((vD@r7}`SR{{n`$=jMDC=!C7PB_yp)842m1NH%Y zGU@5*)UzXPBk62xY&-!KEU0gxWk7kEEIv@uq2tM3c`HwVR67bD6S~p$F5okabYv;BW!6VJ!>2wjNqb4r=>B`z{1{`Q1 z*c(|A_@Z*zig#neg`0h`7a}_ZKFs)m|JOE++vA2S{`(viC!c9}ZMt~EvV)h}se_#z zC(mUe5Klw4Fjb8UqtoVF>1V5)!aIFG$k*k_s9ZFQC$^rQsc#M=TitrA*4YUH6iHLD z!BM+n$))aURvta7)r%rI&6ehkldDP1V+YehT1s3Ljce@pzYZT{th4m~^PxkuqaTEN z7sM?tO;8mEvvOxJ;=rHX*=@t8=2|lxhK6U7PzqDVmQ;=zJ=)6bwhn%3Obm9lo(84A z=(my+@uXmevrq)7+x?)cMpDY--?}P{S9m0U)EH^eCoN`*aBWe|=V$gSO;QLP$jC0~ zY!c|n$CfM9@g~Jd-93#F$=Oi2IT>bdoZL93)^P;rrD*Cc4{P$%InI55p>G6UMK)R| zt+OWD3d(=zqyL)Ln_L39#(=xXVJJ#koJFABos*m{}5k^ zGk%%YH51#v+Z|%t{KrdnuMz}33g1rkJDGxKEYGht>vXv2c3?MEc4`1+?y>v$z?`ST z1R|C$M&Ut5hV6bUlb&s-EX|E;D`!EKnu@+`OK0lGgvGo~HCPpeQ=?O@UZcfONqGPVS@d zX5-`p%!ICbvC(zab=CUZfZFruuSCR=MA}8M!fe+a*CS`bYr_6NxKbvF2uUNGDg?TC ztk-_p==Am!ALDH6r`nRJHiuVb1L80u;>&Lu<9job4J(aeM#5Wz?ni?$*wl2*G32Iu za+KD4O6aJiH{klc)(D)llx+*}u8AnSp+rTl(}U`V)IB!%ah-jCVxwYZ*q= zJTm-W2`!jQ<7sDWqV5V}R!wX^ zcV&HA_z;z{^?rk^j3U6Rw}y-MH0vOjqsgv`CF5@uA?{)flDnXOrQ*BQ_$2=vx4Ci_ z6FRgPOt(>)>HxA2;H;rG{|VumOHQNCOW?ko>6XFySd}z$W#zGhQnk>gLn ze3$5MCYRU@gNlqRLxv{*nIygaO4j1V!?7XVqFOzZG_U!l?&v~={W5{uuN9g_CsM7PIB3&a-ojmFr^X?a4bbmiFUA|1U;t)olX_f zSHE7e*soe_8@L&gho>85P#?#n#1D-t#;nmTO&f}v9lFfkdImVO@g|c>1LZ{;L>Y2% zy;zWM@ws3bOk!G4zQ}Yy~_I zWM)i+#Ub;H;7lFa!k0MRWh;#kG}@6AtN`T zeyKB)isioxOv*V{PKPRen8;%A{JoffLvMF)P@TC?wQmWPsL4<`BxV=~6jp&Oi~MS8 zuVM`N&0pn?GXFCXtS5>X5{Sl!;(C_E-bI27qqjsY)7w_OJ>*yYA&WKdwBA2=5Um=Y zggOj&3#609g(y_nW{eR}0de9cKbyDmV}2E)mfHR{*gKSfKd&e^kQU;0AD4!^@cnz6ZjltzG9aB~(r_!IA`Z}@)B{B-fD5!vTM~}$#Ipg z({s)keX4o-g|{UL?&>a{8B}YHD|as02qvhPqsW4;!L&SOCr}UHK+SOXE;6Ue`?Mp-KzG-FV%+o-*C}px zJgqSXVLwhJ!x6dxkPS6EC$jDc%@wH)pDsrpB3D2gU)qhiM(Ng!GCB}Rf`tNVr1qjs zP0XjH3~~~9APqu6TA2QY$)lXJod6HYu$1b_VuL>o!ig(??~YtbufbLjfD7xl5)Q>W zpyrtvyg2CdrPc6YNDP| zPtG$1a(~N9*mo2cqgRPtE2n!snypSjtL9{IH*r{OI)43FU#Tn%EU2 zR&nHJSc5Q|^s8Ah;hITciur)0FFpFoQ?v@=X)nP!k2hJpfGPY$>cTz5^5+Og2 zv_6D+&<8}`uL3PsY}`hRi+)Me0A+{Q@JxViNTmpxm`W&-ka4r|VLUC|%;ES!SXS#Y zc1^P@en}=sC0?%xc@T#LM5a-bkx}1f@nRd#pk`B2#wN!`@#dsPR^4=3hL%0ey6m|ue2F*Tv1ncI>@7gR+gwM_>`9ke!>aqht38~RFo)!4_U-OF=R}W za48(Ko@WyvDx;P_yZ5uTr4t}z*C3+Jt&;jX z=y%&S3ZDDTo6_EKfCamG2=g6zgC+*s{FpN;RwM@m^o(~ zAhnkYkoyNW#3ok^c-&)nkq)<4_ymkIi4ZW|`tt~pvUyc|t)4ecd&Z7E@m(F%+k#JG zdZ0Piwq%k{d89^sNiuyDm#UKX!X{0!l8O0F4qy~8FdPHxEi=CAST>2$=4mMEh8d@< zC=%*l08S@9zDl1GLqYF)14p_g`u|Y%J*^b`1P+Dh|CMmPQnQd4ePS++9`ex$5nw!3 zNFVqn5dxu3M)RY`M?i$=XcYPRDv+eI3%+ zy$eF#6u(}@Q~C!7c^y@2zml|(Uw?+)O(sctiYEPSvz=db{6?SO zFGRvpt_c{moEbUv?@?}4|G~i|w6*C6S%gWAL7kyBlKE&W9NOa>+;Xwiq@C-+Lcy|+XmKFn37|nnEoT5gRR)libhYg$M zpF)iNIYP(;H~XXY-JFK2J-X5V!P(8bhBtFu(1|y%j0DFoto(5uvL61W$OZAo&88dT z^CoI$OQA>HT}+XBS&3nd?BuR#UbILpc4HIL_BHSyM(d?U@~4TzhLC7>RFE_5uy<}4 ztbzbLxeB4OQ@az;B}$swZc*%yGFjhrdQs$c=9M$ajU(%V^4x5c7d6RAwu%w^!0N(v zx4SUiFf+FwjRNpz8Ubjf24DKJ@EUTm8GdHWkGZ#X2H>xptOLUzEh+H776c5+P{BD}7p3v!etJd2L~A78>IG=CwuprI zqwdiY#lW2m%c+39W{dc`~A&P4hrn;A!;==W#Qz{=Ul^JspN@#t~E zE!VB+TSioVf&n%799wEc;R~nF6<4J;8WRk%Ym>A9t+q9$qQylqG1Lc5LC(p97d~aM zj)z=*hPd0$(U{B>S(?Xpie$l5;cJ8t2mh+ zp`((8So2?!VSgD;+)4g#lve9ODY2C>yb_Nldo_z^v_@u`NU-vauG|fn|L{}IL?8g> z??;R@T56{3_X!$VcBwF%UBV@MfXf0}cCDv^vT^BzkRe(HVp6$1ds=bbBUu=^H z`pZE(nVs^!|GjzPOiI+fkZdF@4FJ?9M!BI7u=65U;f>2`NQ{0(IOmEbv)X_%O4Xh;STUw zpku?IG0Vl1jtcTbl3b8##O5?`X>jC&Mfw*>)qeib80V?mL+@sFWeN2eahxu#xz~u4W}?)L<417@ zY2wP<3r-kX`H%)3n3AgG!~`=tj3}}rb)1>9-U754Hj8#8PMRJ0ovzuUcEI;IOAA^) zJiCe_M!zs-liOV|-WyeO126#FCSth!ik~iHYL=8?%%eP*j}P?yU4opIi*=N9I1Obv zN()y!7VhV(P13zj58=sg89U2qqn~b4p^a|PTRcEMBwZt?ST#qZHXyXhU0D;Om?PFC z;1GyWw%as1^xhK+ICSwVv~yj}oz}oBLJuvTmMW z6lcpGmzQwLC`7LG&R8QL(le}b{F%b4BsN5^Bqc(JXD#IjV{v45E&kgbvf~BT@A@!d z+u%6=PzxsgS)39~DL--*JlGB(P--v*Ed0(Z#UM_9%8gq!o>0Xa#);n`0fiE~O=Kjj zj&GhCI*c^Z86)+|)+I@G=r39PNoF=Me~t@?(@7n;h?0S0xZx@}Tj*O0>)unL$**4( zFiWR1UHv#nXSY%gNrx}k674@7Ycp(q1XjF(8f)q58{S&>mf$%b8;rm$NI@z7VF%-& z^bST%U(fCx5m$y3Q}kuh_C3e^lT}bYtsFu`K$&AE)`ggxRS|9iTxpN$b`c4%mYuL* zWb6@ncxYl;S>-EMQeM5~c8Fff=do;djII~*&{_K-yye3jU?5Fl37RFV4$0PfUqqHA zS)04OqjBP7l!?l0FQ!)z&PUxtv!3BUX{JQEc{SUEDeB9{?jg{Is)*W-P<9b_a$*|eL zv9JK#*uvRMVAtjQ>qZ2?aWl>3wRrsj%r!^$H)=x3te8(}qSbctckaiQfEifqOIgKG?R zn|agaS`BZsG6RSJ z+_So4$9o^^aZwll%7Fb`GbojybmJ%BK>m&H4Ykg;}tR6&5puE1N z$vmX&#V0K*j*16Pr_(6FN<_9Oph{b#q^sM$qFLG#EnP;DK94?OgtXY8WhVOeN5jMt zx06r%9$B}Em!qsh;Z|}ldH1#ZG9ZCsc7I?Bryq)Tr427*^-!r`pc>N)c$)WJC|zh? zJaYn!mVVh|Y}<#bk_4Hvu?Z!(rC(zO{P|6c{=wlDWH@KjxyUqqV*^;*T)Gb1%QdGU zS9*y1zfmgx-FovzzrexaW-sH;3q%tiefh54rZH&VnJ3<_cmHNG@+wS52Z?3`MZH|n=EsEJx9KWG*M*2yQQ<4QKvHWX2US~*N`P1=zH3ek042ZJETzpDOhr_ z)R!bSl$bW1S6fRy+{3Py0MTaML;A|#D%oV~{Q-oNO#|eQ@BlW1#obou>eKUgctyN2 zocEf;;!_U7MrP7=r!`+3a_JI9!m__pRv741U}G4qT`|(7IP2*nETcPcM{cP9gQHj4 zvDb1Z7@AP$}ouh8-(FI17So|-d=o1`vmH60q0 z{YIuy;r%Bg{KljGKZ#*Dytki!r8LZG-2XQ#j9Yt5B{ouUH;T5$hR;=zcb9u|;<6e~^`m-4N^0V01$42g=*f!im;1AhAN`Cu< zagUyO*2f;@Cvhh=cn7>=i6tZbKt~_K&#~)~AmvbJ(dbQ?5VB7XM_ncgmBaBZ-1q}dQcx>$|PN&7h&^8o1N z;AtYS+aYfC=^0QLH6Yrxck#e9(Se~(CUE3-27Pp7|H~Duk5B5z(YAIW*jpR@tHN&= zW1=?sJ|msp+@SRV8^Z8QVv{Ltucf!IDG@cn5ylC$#7^8CE={( zi^Vpm&pR{oMIiykp&B8U7}DY1sxxX-nOd=rnBgP_@GeOlIin&5*F)cJ|K!tdVtWR) zK8OExLX*gMl_eV{wsHcn$F}oU)94Yq>Qp$J+6R0*4S%p-B(9~P-DC3ivHqbrlwzD! zOnWndQE7uuNmNWz*OR2WMV~Z=lQyxzHVl$9r)E-ftv-Jk(_b1MIv!j>gI}4b_N~?_ z^UU!us-5u>v}x#BjrbfgWKzfdwfUB3-bkdqdRZ*cQ&hAYu+9BO5-C#c`L636*qHPe zts^zITW78A$b7Wn(yakAkZ&cJM@0jjf^wvHCK0RUb|kZAEU~^_(MSinbc_jLwnkqv zp`X?MA=&&PNNtANW#uP@vVH)OjFA6)1eM@8lzGFlTL7vrE=Y0q%;;1Nx2LOUo5|l?ydp zDyP9T#;BEbtUyTLH$`J5k{tzR-!KoeTrq`x%1v*o6fqEV5oC@imSSQ zvD52>&>itQIs6@r9J8X0V>NW0h*m=SA6&ZitJtsCvAjU>AdA}#x;jY9Si7N#sBc8aU%I!x&YF@CFASYSixpL9yOY3D?^;#&B>W?j4WqeVHpaU;^ z5gr*FN7(upyFB7!gK0JDK|WR+yF!y7WbZo6 z9@7;~&o%vz4pTRgab_$jyD7&x6_V}fpPxrf3XJ5!Xg*d$2Q434#zZYMb9&Aavs`xO zUJav_mud$>@uODle`A&Q^~ptqpN2CgjrBLSr7n3hEQcQ`tau7guMn?)R!Ypcd!_x; z>8iwLNG|CPC$6mXqL(8dYrlUzijx*4{F!mXZv&wxVUkLozxRWRFN-&4DQ@p@XJgfp zggs8%d7A~2uIDkO&+x!&v6DD^h(7&l`z3V^m9e{RFywFC9aYUkYw~Qc^KDU>snfWw z$4L|Ru8*bUaSk-l+KC zrRsNvm3_PP&}?OoV~=2O?(xjkl!uzh?Cvv*&qC#k}$iJGK^i0%#I~UCv#T5Wh1~xIvYbE6BMMvPBjSf0ZqW+hJtM(BrxPr0yAU-?q^HkGyTB{g1%I{Wpj5-xNwC z?p*)&#pVB|P;h-=W+}>Ux6G%03HK=9!$NYdZiRP0H^$g0=92C3N#oVzX%H548X=i~ z^3NlJRS073y0c9ZSrVM9v){*ZTW?&wd;gLOce{``~|g}4k_c!wN*AbNRP8EiFBpJ@faQz_S4Bt zMk8JN_*2>57mw^It}B`sWwN7#Z_Z>3S;OO2J!l-LeZC(scD`HiZey1GVkYpIV{@GK zs9b=C9(_QsD;o)SW00H0=Y3~D0;iRzNx(-o$`rYWZ2cuhi`xhTNj&Is=7BrbR+6wHKZ$9lIV!l3fP@hb0_y8*LAnL0%>hb-L)o%hBSU3tq?FV2#a@L zLrQTRu@befqN_3nbh6LcGL^mX@5HcVgrhKdxGapV4#YF-pe%UbchCh)MeRP2#+lfSXM%-ng!Jb8vBiVre;DlqZ5^&!( zvNXo3!-tLWN5MS8?>ps@2(__s1H)|&&4@P?Bci_aT6jDG$vu8l747D3qJB0Cx1eu) zw5}jM(E085>k>=#(|`~TJ(ICkmvJkuZ&Y&D%y@Lpv1DC*uNT<%te8{gikCAQU(me~ zt);cEy7Q|ATQpi(t_&^UeX!yz`z3rg&kmxZ#3wfRTkN_Q=?=nUV)$Fi8sJNutRoM` zBqAFbm&Zp7q-oH!kCIt`M^;uw){^#h4zz{smPdW~uw3(EqLSBbaW6+!-wDA!j3_?# z&o$n}HQJgIX4M7;FnGxC1HMr+yn|&_=kq@}%0E`<<8nk>T7EJrPvPquONz6o#2>?T zDP=wlh(v_%)A6cWLv2fvd)`>{LnX>v9=y(#e&OW(*jiY7Xs&0>wGhq$5n|d)e?N0z zxbt#{=6uhjNX-T~Wn8}^c--)Lfavys9b0Uoz;vU^-*(z!A~8!W zJp;AwC4=ase--GScyZ`iF432;eSjMGla}EI1|9zQ7(R@qAU_;`R$hPaf6g5UNU_{iI^FCJh-43Exe9Ne9=YK!spEa{@%F%9ilvx_g- z3^M#eXYxk_<_?7YExWL(u*clvkV+>WW{i(wFd+sh()ey=#A@G0V24p@T`b5BY)=Pz zZ#XH+1I$SC`#;8i}jK z4f#G;E-^`liY?4t3EY3WWkIz zVn&_OWwNjXNBH$57Mt}6l{3ntp+DBHKN43WH<5^h9=_9?@U)g9qkz739QYJ@WJySH zj(%*^$Z5)b;^yj>+B2D-@p&ENnmN@S_UUIUDh~;7t}BbSg|@73ON$Vwy=?Nk@{f00 zvg~4ga8tvy=q=QJoHyguc@sbw)oi$C$q=ifoo_$$QT(0-mXt_`y8HddV}Ut#Vx$F) z+ymML4mX|;6DW!aZjtSZW`Eui>eO!^L5n0Jb=PvR`PL z@c$K%8E@tW7htmJgBMi{Dc1uBAoWel(Pz{VX-`A|Q|OMX&CDTGSBSAl@Xq;NJx)}7Lan3sLjsh|{{XsX zuyp?bWDS8hKi*nU2Vd_wZTQP60~Lui!KOd1I4=SJ02qtIS=B$pXrH+LrReTsF$x&-@VMJyRmJCOxCG((g8u1BP~LKjHQveqt2|n$WBJ&&VDpwX zfDd|`%6+B)Of=BWAwHt3U$QMs9%faes6hLP1f_SmUIXej7z0C(Q239G!M0ms?hkPS zvfw#Dhf>cpLAy{URX*~bBkmKf-0aZ5WPTN$#R+C zOiWAn5#WzpdZ0TWsCE7(9--ljIEWojLHUVJ9~TUl90YoZcq@WvcJ&^~LQvikx4$2g-L@LuK`aJf4tcv$RAp_mA!ju>R8} zWAmGaJt))tlDaZE!v3Id`M=ahli~jWQx1J%{-An^yaH>MAM1Ez_Jp}SL*e|wXcxf-tFj7zmS4}r z%NdztA98a3)VrGe&UT+^XZA9KndrKT8zt{7bPB!0Qndhf%S(4V81pMzi59Z%pdTzi zLw=)nSc+;fjlo7WomT$_T9!C{CNJwm9cW|gjQ=r1?06&Vk6q6v~Ta?{Q^gPc!Ck-=Go0O?jxis|`u_QCPph zFz-HMpnMUKGn$$`@^uFMjh3{N>6O}!F+=^#B2-@S28L0o@-1-~n}Ye&Wy`r%@t(%m z8W()$F;apl7k3;plxb~x{{S%ZsuAJ6ZV;npL3~`iky<=fV&MskRxO6zHHZ=U5SMq_ zWiRUg0JT`DJxL_5y*U5rQ-k8xzG4e7R9U zO4D$i&9(Fs!z}w}CmvYS08+3t*SI3^aaR`RA-H76tK4eY_CON;>1h>F7C`xoE&b8D zv1Nm>#j=dG0Paa-;ZWS#w+t_ff@m3JibD)SY#LzW1B#SE+Z&z`7NGi;&}n%fEB@lx zKA~zUQbiF@#7$8p8H+Sc2?T+Lx_~m3s!&C^1T|%)rMO1q5Nk zI*KY%^BEPAGFbBr%@({xVtFK_rcJW6sV>b&7E}!ar9jr=B=;@olmn9|Cmeod5JJHC z7l@XA}E`8xUlh*UEFoywj0_YlIsC{#H~^1P|1`W9%G%| zZ@AiWnVw?sinYTWoH-+R19x(j+EI);3=)`IHNQ!u^$wW+64+QF1DabD+m7lBLL*59 z5y@HcIEU_4k!B|d3<0?Wqy`X8t2;2ed`2g05Bh_pWOT8x$JA}vV#3hs;@*9iHm?=Q z2zS>UR4kdxQAB8>i>Atrk(sP`ji3!K^pVXDP@Q>NQok`NW*7jR<);RH*7KBlxjrMX6Q#3r~v zT2vq_P&<}JN1a)*{{Rsc3jxSu1x;fbQTRPZ8pv$YlSkJsOlB#>e9OCtinhja5Msr> zUQ?-*bCM8#3 zCw4??p{q=7Fnpp3OgTD>YM48o-^A#38VY~xx{JDqpoq*K@MCMlrU6v5j-@VIblW&* zZC;}23o{kspcgEuzzlUe&a290_<$qERv-GA@&Fr|1(sr|(qd#vAWibuyC&DfWhQY_ z(sHczEE_q7?t7G{s3e@rH6a=$!_qt2CooyH{KUh=VJmkSBQjoQlEZn75|&XFL*`ET zyi5|efpA_6Idkf2b0NGDk+?Ri-9xG)s4;VxnNJ18Ww*Aoqu(B2EKJxjaF+i7ClgtE zqcDyYLU>?Kqv7I)qSiwK=S)*L(+1U!pz)S7H%o5f1;?n0978~)CYc~-PCedzPM}nsp#Xu~G zPbioLIYN#D+4_ls(JqhWgqHQfO1*&Ga9yr z>-R4{+$yzc_Z2I&J6X)KOHe;V8MxW(nc^pM7>BK)LnlQt_j2-npc-B2oup9usSzI9A0W;=k>c-p$If{Ar6G{@iQXwogf@Jq9)n%3wCYp?MLhHfQA<;7G zoc>A0Uje3Kw2smf;Fz`i8NnNmB0mw(iz9(*7f{>^jKstzqGH4}n6oKy*AuA)iHNtU zV^Bi_aVrs`p>PYaWMI-dTqOJoz~U9KVQgRXEhJuDM=DnEc6FpZjsfgM^VYL~RziI-;(ZHPCi z)*)bVDy&2;QH)|-7|YKv&x|yH+C~2W3!wpnDRZihHk!VtYViL6?SGhYTXa$I9mYjg z^@VQ_GSsq3)j#rmMkX3=Z~p)yBJ8EqOEmrwNLr{rxXteY%DRo6=A3NAAXm%9J|5xm z0%?gvO`y^z;v!&vrHzg}OD!0fiy;lvtOi*0N`X@c5mq6fRBlk5h{ROOFjk@)wF*_7 z9Jzgpqogtr7Yh&t1?8eMGT#%Lncv72Yk1|3rB=FM>3n?k0~O3z0pFLzzdMH}YR;m0 zRgN{pu&TYx=Q5?R4j{I9SEz=~HVZckKo)V!QR(X=UTTMd8moZIi^ML?lB@clukax0 zuhgsw=#)?!fmwp-#w8`OmDS&IR^?ob0P-ni#4aQ8 zFElr|5h@a|P_i1ufYAZl6xa^e6C$XES0!-@#h^P~e*XYa5!{QLci_j-+j5>8wMLx( z0FZ|4a0}h95nMJLbIn4hk-U)ELin5$JE61uK-e&aMZjt)bcD2g0;=5OsiS}+Tg1A= zgcB^A%45e(UZ#A%IFziE7l?xe&Jc!GS%?Bz&;~9BxMCVCW*caZ4MAliT$0xVDIs+>5YZ_wf*kWC6!- z)Kx9yTr8uh3J#ch0Ie}4gI7qpBew@GVv`KV7IE-@%&<~lF?NQnoYXkN=~6wB6W>Uz zM0u8oE~YxE)(8hdm}0=P38os5S09onmK8b!hB%%U>M6*FHAv%7&Th@(Rkw81uq?2L zMj&uI)LsBWj0-ZKQM9WWRUkzpv|0-oZc`${XgDFv28^&)t&M5#^h&b|6L{26fT_*i zVHgHWTuL#UYb{FM#?D~$K+&dP$?Ukdbu9>%1J z+%TVYM4b6xBLU?rs)n4a;3tNoYmCDo4%*s5&4S^V2Pi(SPhlT2H5ULkXQt^^5$MH4bdX?a# z>It!p87N>1x`%QS6R2+N0bWpxXf811-&0}r5Wu`uXw+iBT2~J;hC#KrJBbGIQvk6o zZp2=2H3GmG=}?2WcucBWIEBlEHjYl^`7Y1~SVse(4cb}uz@i-mAHeA97d9gLUhBm` zNC)g=6v9|e3e#DGP-%;C5U1KA)}VC&JwXe0Q=gobp?91hk5abH2IBx2m$0Y+nMUEdPf$}23% zrw}6qTY+L*Fkb^QF=!aUU)(mW86M6fJ-&&B%<#+|?k88sUhDnFWxd9p7vc<7p!*Bf zc+dPyF2VuB9o#=5IqIp}O-D3LDIIV)s*2)OY~Ph#rdjiOoMOuL`TH z%;J7_W?=%khai)OliJZ4T9~%f?unlu$U*(ekt;7yjZ6K^JfS5QwkG>8FMh6s-o63meEK^m*lo@h=&T$AE0U@>MUwqR%ahlDt? z`xq=!=AThiw{*X_M*LA9a;!rYQ6LuIxo&8uLh_Fh^3h~nqnM+9t7(D4DdT*gs6hc_X^wq#&z9F@F?-b0WDBw>J}QlVHC|X3O?og z{{W}VxB40QIl!PkgmHVUpK*{)y+Bkr1+pVn(QwEu%4j6NM7nASJ^_kjuo=s5xH|G! z8YQUG`;G;QCgK^iD63cgM z3@oh~X*B^yQBsWZ;Vz(dyMqW&_bUbi1{fFGsJE58O?o-vWdm=Ckb^i!QCp_FCZ+uU z0NqB(!m7jo1wBDT&@K^_9bBXD3`u(?`iQj;+(iLRRlP!}CTh&VAPcAWHjqXki-9cN z`Gz^qw4^J2#Apg#k&UVx)X-;(B88sBLUy(iR@*}v)O#w|pQw*Pmkl|KXdYGH67fR? z6#{)$*KU7MBv!PS4It$80cbD8%h8|%wx)MT0h)^OYTH-T5h@fHG!yKK%F60i>d#eE z4UH101>)tnVaNb@imtgbm2kPl%muA_hE#F!5gvCOVu&QALh_N*uV)&>K~`RFHdM1F zC8k7zlnBzX>H})}GU+QVLA|?(%U-b(Q69*w@KoTrve{aKs_d8%MmjQ>wwL&raA}vd z=3?5?vWk_-cZ2Z_ybWSrlF+Mo?pWx{p5mD}zmUNIRlB5`LuG@RXbapJ+Lf#$uk=a- zy=8zvc21X4mQ}v)QPTuuqMb`HW01@NjYn~KYT(?(GSnf7 z$f_hTtZE=CkG2Vs_KG|N*3QRpr994>IXU5xkg)8bATyaTw0KEK?7BQiZu(A zU?^8mPQ!H-K%%9NL8H{Ij*HZ9(D8}3vw9kqSzwLYTsYLNr8NpDJtn1jh}b+25jMp1 zMa4kLf#RhrPZ21VTOJHbpr=&?#go*b0*ci})E?oAgHg^dINiMYW*L!`If#}szaAnK zKo6SKtt=?jOrWzU3|zGt5v}>us4Ah~Iwk_?acZ>%6?9gRGnOn%aOfdZay3k)P$Rem zbT#fFM?J@iWYohllTJY@0I@BJp{==CMhmkQ4O-RIQvl$VdyqM`g4ot3a8si&lZV8( zn{}C_r5@)9u`@ngK^wL_GMfdj5{wvHIyix{v7lo!AVmc_4ko75f}oKhWy2<7D=Akq zFmlC$rqvLymJ?z5m1ziK8D3)y4SpfCQ1J{{kiJ{8G;=H$s-`XgjQS8_5q!*8yMxGiN`T&K0MPIeR|j1{qw^o!CM?Z^JPd0u?8{0A zL#eu#UV7k)0ErfnOJJ5&Rp1UM6hjaK<~;i)WjmE&cU3p`>k;I&lq@pmFn51(f}e?S zK*Si}l$I)0(-10Hpe^25mA4Owk2HKi$SSE>Uji{8cGN>w68nRRd|#qn0(Y2}+|Cpb zAhxb*kMM_8@gqhVmV=!@p1r{qwQg8Ji|?4A&j9K+5nc$OUdX{B-s`xtlpq4ayg_9r z97e;O#G^KYa*1fvw=uii9UbGsjIy&-k2HHnU{LbTi0)9sm>RW{AZDU~(XfWfm|tm% zDPOoH3rUK>jtfaMWqx8+f0?H90I(R1-5G1LX_nblwjnWB)JF@E19oG?1O|8>CK{+` z<^u<)H*Hi?h`hMIBeg5$HL91yaq;d@uPE#)WNBJuC6^SyWuPPUS|v)n${HA0JOy}^ zP~p_%ZGPd3#beygM`gq`U?>ejl(L~l7pUh5OU~!4$B+!ybb}gCYcs1?>J3+H6{cz- z=q^xEer6TD7c8^3iF3B10_PH#d5&9hTwO&dJ@CqE52!y+#19qpf-OLlQGv|6N*zWn z%7p0kE^?qEW>7Ik6G~r*M15RP>a@lb%kSQHhBb44k1EbSm#3lh#XOb8qUC}iv&>dQB_DM zRW)e%mMn}bgv?9KzLu~|G2S3EGRrkJnz$`un0tbake2gO(_+l9EfcLi;+i!CWz5nr zFt@lvTb0cm%IHg_97Pn&NY5^1lUZ2%l&ZgRS|4yifqvjc$qX}Rh_dwRI}>z{kkJ(Y zp#%*Xf@z4AS(vv~OjWDI0G7ETyI3jHfT|fZ!6af*>6)3W_hT&T^G4l}Ng}RukmNl3FyGxig1;Qs04N4_>>Sl9S z0kj2~id{jKHZX!1Ov=GqBNKDi+$f3E;S;1lbWVW^%oD7L4k0zopvS}z9mjxyaf69& za}#^w8fM4D7jl;6xl0VUGP2JiJ;6aU!@ CL2nWO literal 0 HcmV?d00001 diff --git a/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc b/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc index b1d8e837f..e007d5caa 100644 --- a/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc +++ b/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc @@ -1,9 +1,14 @@ == Welcome to the WebGoat challenge (CTF) +:hardbreaks: In this CTF you will need to solve a couple of challenges, each challenge will give you a flag which you will need to post in order to gain points. + Flags have the following format: a7179f89-906b-4fec-9d99-f15b796e7208 Have fun!! -Team WebGoat \ No newline at end of file +Team WebGoat + + +image::images/boss.jpg[] \ No newline at end of file From 91eba2542a351f737eaf10f44c2527e3688a771b Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Sun, 9 Apr 2017 05:48:15 +0200 Subject: [PATCH 20/22] Fixed pagination not initializing correctly when clicking on menu items --- .../static/js/goatApp/view/PaginationControlView.js | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/webgoat-container/src/main/resources/static/js/goatApp/view/PaginationControlView.js b/webgoat-container/src/main/resources/static/js/goatApp/view/PaginationControlView.js index 2cc744859..46239dcd5 100644 --- a/webgoat-container/src/main/resources/static/js/goatApp/view/PaginationControlView.js +++ b/webgoat-container/src/main/resources/static/js/goatApp/view/PaginationControlView.js @@ -20,10 +20,9 @@ define(['jquery', this.numPages = this.$contentPages.length; this.baseUrl = baseLessonUrl; - this.initPagination(); - //this.render(); - this.model.fetch(); + this.initPagination(); + this.render(); }, render: function () { From c11c0104a3d12ed6418fc95b9b3867dbf1ecc5d9 Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Sun, 9 Apr 2017 05:51:12 +0200 Subject: [PATCH 21/22] Stop showing old lesson overview after finishing a lesson --- .../main/resources/static/js/goatApp/view/LessonOverviewView.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webgoat-container/src/main/resources/static/js/goatApp/view/LessonOverviewView.js b/webgoat-container/src/main/resources/static/js/goatApp/view/LessonOverviewView.js index f17b3e9aa..c073fbe9f 100644 --- a/webgoat-container/src/main/resources/static/js/goatApp/view/LessonOverviewView.js +++ b/webgoat-container/src/main/resources/static/js/goatApp/view/LessonOverviewView.js @@ -39,7 +39,7 @@ function($, } else { this.$el.show(); } - this.showAssignments(); + //this.showAssignments(); return this; }, From c3a11af20b5ba2e359e7ff01419f79ccfbcb62d9 Mon Sep 17 00:00:00 2001 From: Nanne Baars Date: Sun, 9 Apr 2017 05:51:46 +0200 Subject: [PATCH 22/22] Fixing challenges intro and challenge 3 --- .../plugin/challenge3/Assignment3.java | 37 +++++++++++++++--- .../src/main/resources/images/boss.jpg | Bin 23340 -> 83837 bytes .../en/Challenge_introduction.adoc | 2 +- 3 files changed, 33 insertions(+), 6 deletions(-) diff --git a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java index 5d44247dd..749db2fc1 100644 --- a/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java +++ b/webgoat-lessons/challenge/src/main/java/org/owasp/webgoat/plugin/challenge3/Assignment3.java @@ -2,22 +2,33 @@ package org.owasp.webgoat.plugin.challenge3; import com.fasterxml.jackson.databind.ObjectMapper; import com.google.common.collect.EvictingQueue; +import com.google.common.io.Files; +import lombok.SneakyThrows; import org.joda.time.DateTime; +import org.joda.time.format.DateTimeFormat; +import org.joda.time.format.DateTimeFormatter; import org.owasp.webgoat.assignments.AssignmentEndpoint; import org.owasp.webgoat.assignments.AssignmentPath; import org.owasp.webgoat.assignments.AttackResult; import org.owasp.webgoat.plugin.Flag; import org.owasp.webgoat.session.WebSession; import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.beans.factory.annotation.Value; import org.springframework.http.MediaType; -import org.springframework.web.bind.annotation.*; +import org.springframework.web.bind.annotation.RequestBody; +import org.springframework.web.bind.annotation.RequestHeader; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.ResponseBody; +import javax.annotation.PostConstruct; import javax.xml.bind.JAXBContext; import javax.xml.bind.Unmarshaller; import javax.xml.stream.XMLInputFactory; import javax.xml.stream.XMLStreamReader; +import java.io.File; import java.io.IOException; import java.io.StringReader; +import java.nio.charset.Charset; import java.util.Collection; import static org.springframework.http.MediaType.ALL_VALUE; @@ -32,16 +43,32 @@ import static org.springframework.web.bind.annotation.RequestMethod.POST; @AssignmentPath("/challenge/3") public class Assignment3 extends AssignmentEndpoint { + @Value("${webgoat.server.directory}") + private String webGoatHomeDirectory; @Autowired private WebSession webSession; + private static DateTimeFormatter fmt = DateTimeFormat.forPattern("yyyy-MM-dd, HH:mm:ss"); + private static final EvictingQueue comments = EvictingQueue.create(100); + private static final String secretContents = "Congratulations you may now collect your flag"; static { - comments.add(new Comment("webgoat", DateTime.now().toString(), "Silly cat....")); - comments.add(new Comment("guest", DateTime.now().toString(), "I think I will use this picture in one of my projects.")); + comments.add(new Comment("webgoat", DateTime.now().toString(fmt), "Silly cat....")); + comments.add(new Comment("guest", DateTime.now().toString(fmt), "I think I will use this picture in one of my projects.")); comments.add(new Comment("guest", DateTime.now().toString(), "Lol!! :-).")); } + @PostConstruct + @SneakyThrows + public void copyFile() { + File targetDirectory = new File(webGoatHomeDirectory, "/challenges"); + if (!targetDirectory.exists()) { + targetDirectory.mkdir(); + } + Files.write(secretContents, new File(targetDirectory, "secret.txt"), Charset.defaultCharset()); + } + + @RequestMapping(method = GET, produces = APPLICATION_JSON_VALUE) @ResponseBody public Collection retrieveComments() { @@ -60,7 +87,7 @@ public class Assignment3 extends AssignmentEndpoint { } if (MediaType.APPLICATION_XML_VALUE.equals(contentType)) { comment = parseXml(commentStr); - comment.setDateTime(DateTime.now().toString()); + comment.setDateTime(DateTime.now().toString(fmt)); comment.setUser(webSession.getUserName()); } if (comment != null) { @@ -74,7 +101,7 @@ public class Assignment3 extends AssignmentEndpoint { } private boolean checkSolution(Comment comment) { - if (comment.getComment().contains("Congratulations you may now collect your flag")) { + if (comment.getComment().contains(secretContents)) { comment.setComment("Congratulations to " + webSession.getUserName() + " for finding the flag!!"); return true; } diff --git a/webgoat-lessons/challenge/src/main/resources/images/boss.jpg b/webgoat-lessons/challenge/src/main/resources/images/boss.jpg index ec432e31aa710343ea08a8602b58237ef76f2141..3fcd1c36e2bd8da589e188f256d5ab15c668b6f7 100644 GIT binary patch literal 83837 zcmbq)1CwSy(C;(Yv9)8{Hg;^=w(Xf6+qP}nwr$(m@tyx$_tyIXZcgV^r8?;(b&{^` zU-$W5{oVy2NQj7w0Dypi0AfE6;Cllg_+RV)tNbVA|4YDsgTMO$h!8;OKztxThyY+j zAP_{L??C`A000CE^1}xFzXAsO3mgI%1QGxQ^~1*o0s#NV{$D-_C;;deFc>(*_c{Ou zyPfP^3NQ|a+Ncfz#L8_(?&)PyB0F#h}9-rAzK=@ zBVSx{LoIeTmee^|2krN`r?D2?FUo96dg5ug&S8-*8MWz5=E{@O+Be7erA6%+nz;bB zda`eTik@tOhdYxcGf9D~?A$-ns9&09^OP`d%1Hfl)KT=n4*d=R7(UF$XV;0l7BptW zFS0o0A8y_G|4i{UtLBqi)%14T0-y+&GAF@$iTgF;YXA0G$0HX$9-^(FC~p5P4DiRk z=bilgnDD#cPP54-sFO(iZN!x04m(VC?6+s@7b{R)Xhk!m0q`B)-kNrne-R3xR0ihxlX!>fF0`d#Jhgv7V&M9 zHx!49{Es<^!+v5VBQqcObN>!JegLe5nr0aJIqRKtb-9BN3`yFpg55^nK}BNpvOYU@ z`w1j=gk~hl=5Nksg!RL%hSu(&at)>$`9BFZ+#SOShUUne5Wgqh6Q(MGYxFay%BFf9 z3C1`Wqci*LOI)WfWBxGg;5%gRNQR|NhrW!v2xyXL*2YxpPT{_{5J7L+?bw-gED#R( zN$32DsDB;E*7bLgT2@3K*n%UJV(f-a5%0sLFHGL08cBI}WGjBS?kI;nWbi2PJm*@ z=vV;05GH|Ii*{NzW{(TLxAP~-i3z0NCD6*!lRy6tp0i^s=~Q+DyBu@!8RYz&Bxx>= zo^vMy3)Za=b_`_0Vd8^#wy31K@WRcbbV$|CzMs0 z-ZR#8jJJY2{|~npr$apocBeQJvUCw&(6xsCjC2o8vG7EbB~X(FOylB<)++W4;%CIc zLKUX%EFJb!M$Nw>4j!1JYDbR#16k^7x#4n_S-6TzVX(RHF;)-aOswDy&d6e)OO^I) zD#PLwlKj16=A5PI;T$*4;8+*zzD|7ntbvtJ4*4Yu@aL_eh#{;eg8rJm^nWK-V6DoW zdpjYUg&J*nvoT)#^sm(AazmC)Gk6u3fudq3VkT?E99`6r7cCOcjj^+&-Gg5Uzs76F z_PkjbaNKcEaTa3aZ+~0pYkDAahwSs^)gBA$7i0UFfCTG#J2C--K4!aJkC#f1DQL6Z zLxPFFQP9rj)51>fu$><`iNV5%+@J`u%ynlzLd8Rl%~p12?<&1)pP`Hut01Uhw*~4H zZ@D!heTiik^hyV&d*=2=NbpD@Flrjo(*wFhxcy)RS47cQprUUCC-MO}ujvSrR78Uer;)1I@PM%~1DU#Zy89#dg zlLSp~@%XY(WQ2Yd)<}Xucwp&zWTbMCkcB#e#A-y<9+mFdejzM#YFg9e+4(-${lbSx zOj0B@C<`K!Oq@;h)%;z3QT3hbLEEP&h&lXji_xMTm_*p>mQwPbMRJ1bGur+RfHqgA zV14bsz2Hk`$n$?XVEHMzPq56cnt@j+$}}O%0z)Toue^)=?O^;uiPd3GiH8dNX?KT6 zn;r=c*B0Q@j*$|xjEn*0p9T1?@R55VQR(#UaqOO;6S;1?|ohT3O$y+7d0?vDDyU5q}luzY150rwR~bz z=$>QhFtuJBqFO;XHgv^y1?KRa0={r=B$ESo#o44Nc*vD7*r#TbIP^Zz?mAAG-nDLd zy(RtQo!rTFbORHP6D(7N7mz$-4hiUd7*g>4Oaq^rBz{au8n+{aQRC7BH%`3SbYfbQ zB9Bn!+j~-ga|WSdOpp+$8!?l(_0;2|u)?L1v_P=z*9Fmm0H+a8u=dw0%BivSRc(|E z5a#4hJ!umW{oGTc;Rzj(8jy+s8-^CBo=n$zoJNCQT66R+kixEA_f*(ICMKG+s8lxx z*xc*eq#PkBi~f8wJO>9;5T7O{Ynhy!eKg0L)os5DHbLl45)-8tNk!GB=O)CS*W~ z8H)<-ch@qMJ`ExoGSo8ai$xN5(uzoG)@t?1{?Nx|8ad4B5Wbg8zu62cp{`ML`W?F% zmLwkb&Jr!4D65kDEVH_f-wzrP!Eo9H7w+-j<&>5!3{~Q8oGhIM9a>qtXJDC}q$E3n z)rIDlh?j11V~SP!1(A~G`?@Sl<;HHyUF~PG^d%M*p}q+Su5X)M$O{TQ;_8jRgb8AA>`CH;K*!rzy_)j*aFk z?MLQ~H5uCp9x1ZMI9Fph|o~mSnF2;~a{|z|a-ZP4f zf%5a@%i=pa-QA!{P+?{^?{e1vCo ze3YfKaH4<)r4T3Q>0L+*-Ni9j!UwvI7as0==sZIpWld%?w6OQAs$% z<@g4iela$dKB6A+ko&?d*h)ri#)u!$MuK{Em`;@l)IYIvq?{7@ELfkHT=~Fh1MonE zFv^9m`2)k*NM>Gh=5Q?VNxYDiJx!<4NjFlc+PGj-TI8_ShI(1WP9Zmc`3TP*PB$N4 zSJdbV+&*TWsbuoWb}%gBMC5ko{4V&48P_E41!Ju!bj|T{6?SYazu{jXd;t&e6X7p_ zu`Zn<1-dklDfN0djUYB>lkVf>0>vsyULQ}_ir4Utmmg+=+mOodINggmNAJyD3l_q5 zSR&K-0H0m87_~C^!vMQ1H*LX?m`|9=x~=!2$M(Q~Qu7 z{BYC#CUkZl*<6^KEXU>6Om+Q=ALQ@R7VVxMnsWsL}AnKu5(Rw(wZVo z`8<0Z+b=^idOMK2Cnqk7EGD*oNP>dzS1_dYJ_9|4qXY7sFRT@<$Id5=m2HCdOXRdi zr2kR~jcVAisyzAL92l7}DV0I5u~C$Tz4lfwS$;u288j_ev%2@(VIY!B8CP2v&06cI zQ?wy)HDMmScpgIZ__vzeU}+OpxvgXWgD@TC?X>~0GY2|f(NzyC64Z&^YFV#K7xAJ6 z$Y1z??DF9=upz@XS$0dUg~5DN7?^2&03qBPKS`Z6)U#d;J^B}hS$euE!;D?v9tXZ- zDRSmKgeuWpYhP%J8Ia=M=t?s6soAc!xqku3qw-~^#xlZj?P@`<1GZ4zsno#y3B|?J ziy<%e8D>*bYr}8fJr6N-);#q-WLjYd;p~P<&Qb$U{L;uelOlmN^I;h?6J^I(c$P;1 zQ`|CTEUZfa65}}Kd$b@HOuzuqLenaqpxsYRS_JByEES`U|;r@_I5~O$#=n zv421qL2`s*RtO~S7gdNcAuX0h)19~#(x}n(0ZO*Ll49R1J(}ypqsCI zllBRc+mqW(Fe&m!`Ss$D_OhBl52tsYMBUFsqZe-ibg-__MQRqj4E-U|b>nOg+Tr+-MX zgt~*I7yAOIy}`_x;Z=P(J{h$ys(n5$2B&pd9=mv7;hy)TpkT?u0$nl(e7tz`T1}9X zkK+X-O6m@!>AX!iEr3#AIbh6@Xaw$;lf48 zX`f+!Dp6ab+lu3_{IdJ-xoUawF=_PJA=5>kyAbX39%SDwDs-yJ2{CkJU^KCY5$#hH z@0)S#bVE)qTeDCl4<%zDd?XM8xuu%Ok`Pd^@Uf$VD?MjulTg@o#Z0+4?&~pm@RD7` z5!U(?{rA$+^9J=$U{FpQ?_6RFQmjk;+~qa(i{!l}q|&En5=GDAlLLLqL+nMXqdL~w8p?7|A2-Ut{2jzlnGCf&}Owc^fZ+f ziw&Lhsrhv^=!#jUx=7#Fc5@5D1p^0eMD3`~?J_fGVBYIks7tqoJn2y7txXxxNNIj{ zpNceB@5{YGvr5zTR^wm&RWf?x%M1Ey+nxHQ`e@qJNck*Ul(``uO3!c7^j?8To+KTzec7z{dB zIE!q9*kUh()qqAm9`r3)N7oh=pr3;Qy^*Dt_DJ5_HH@~Iuu+;MPrl;3b3FLU@F+CC zNh6yLo8FaivCA+RQ4D8cj4+&2a}O#zhXvu0VH# zt9Pr4k;7fr1OvQu`cKinhV7;`5uQ;aF_h13{?#=1(Tp!9C=$yue0Kk5Xq!yk@S5N- zWR`_4xVkthPz#|glpt)X>R%!RO&Be!6Fa=P;Xp4(Duin(+k1o?meYthBhvfjeTGbG zs?)H|B2WM14vh;wT>~;Dv2M*lOX_g6=GgpfQA=2`E zrws@?4DF)u@D`=9`yxB*A6p4m59s7t)tSgNe@X(J4wg>3Bo95gTRaHtO7dAtmgvnqZB~Z`|Kt`NZz%EH z3_E6CT;Ctikrn{}{8NBHfk6H*HVFj$13Uf#Lqq~cMj=2&BP3#AWa5V)X8uhg_ya>i z{J@hxnB?CV-nPFo40_Q9A!DQ*iXS-_9D3K`cpD90Z{TG-8Ub4i_&DAHYOw}@L*Lm! zFLF8ypkLtp>UZJ;DeEk{80da+jkV%cCmZK_wyk`G4JtAD>*OunEf?iV zCurM)%vcQtry~$=4brwGc&(>#SN8l4BZQT^%ZZUCYjKXB4nfzcQ_)I1;^!!ktP$H$ znunr`tb1TowTEnb7_Sg(l+y;0SBAe>?*JL4BBbYaAdaeFZ>e~hei2#^U9|ViMu!N7 zHy6lwL?wssZ|=DFz|Sqp(GEP7tn-nERZ#zid3L*oLt=!yhY=m-V>MpRgb zN-)OqgrW)1Lsdl~L9NCl82dZz8NwN*W}K$|<6UDN2* zbY!ch!F!%MBnO^UqZ@DR&+(UE#)w%V?oOB@N0AV+KzotJS{0c~#Bt}0WDwoA_;WKxIf5D`5tshz8=|d^+9?#C+p)FkiJ&OivLXl+ zew{pGuAx)1BKa=q(lM}!CAc(V75fdKCK`vA-+gumeC1r%EDMO*{ncT`mG7~}Kv$zB z&OLBLR2EG-*z^eP%r)b-UpN)sCg!-zUMHASQaudET`qNUdIG6L~Qk>GG$DRtX*(JzwKc$;$UZ z?KjNxMXK&KnzaIf(q!@v9zE2!N`sHKjK*xm5vDP(S7^#rb;V~pkb z2ahH?R-W{X^QtQ{smLozkAB}o&kj0nKV1R?W%;1N_yIf>K) z@Z=G#v1{`ah@@)KxyH2eB*N&#zU1j~cB+BKyPkq3;wqGR3}*_4(ZKPJ2xL*X{lOUb ztwl)#S#sLxuqnI;)(uhMm?6O}Yi`Rh!E4Sgh+V)V0|u(L*PZca*I3}Rz0}&`R%-%$ zDxSB}=K>UJFqGZFLJaF-E|O9xm8B;ICieTS41ZOdM%R5T7CcjFg@QGTI*j1X!qB@H zK>Ge00Jl?$601SvXK+zv?vX zgkJS>$eHlAVpACw?3ruy92dN;WT@M@%%-lPQ%|(M^s0I#>3PssRW9Vg4q`?5M-KE{ zoBXq~XQWGK?~rPF*!PU^g)9u!HTt4f9p|s;piQWkPP9Pa!S7$%eaMfX1<Q^HVvvHbm0(oJSul9gBH zfx4BeZ2|@dmJ35;IWT}&A1@!i>^FelQ*KW73Zk>lfD8>e&iz?=ns8KNh(I@#pM`h6 zka$9-QtA{<7;a)G8W>U;z;TAEl@{;9MV>jLjYq!f=70IOuPsWL<`H#YM-qyl^V5{CsJ(o+yc zb9?g92okE)_KItf;**%c`Y8Oyk&Z~!yqm(ki81b^fRutw(Y>p|b`> z=nk!K4z6$YwR8m7)&jY7P=7@C1~~kiN%K0;=m;LFo~j7J^i-=c?TIr3eolQd+C{Ug z9Dy1OBE}bbz2fMDjx;O0SWBoeo`$-~!G6Z~Qqycwr_Z}sBZF0CH_!a=b^mwgUv9`h zOONXx9VY@2VvgieM@lT7J!uLfA4!3Wt_Uh035n|||40}EMHvs6Sqmi7p^7XEFO_Xf zRc6Zb6F~)mAmfIlKtAqHe4+7(s9t=t&yT~JSj*ul3-(mh3$}VLo`Iwvpcv4Zk+%y~ z`-&{i=fx8w+Sk|~L0WR@l$2t6tWMS6U$^>XDfrcToXK`}rNbJaz;wrHCsHCkyJP{C z)~FC|^V?_tuN?GV%NkQ}mIAZcb1gsn2+^}98DaeY00 z##NrWl1ei1Jj-E3(zqm$4xfanO?luCnx#lVw)WCn(`BdACZOHAvevrXXcg%E_jNY| z$uuB5u`b+wB^HO@B8)vc3U2T5&L{L>>Tl|%SC}nwT?QH+ zxmDoNlU!k-sb0m0+O))f4Q$6|GlY}?~O&|OsFn~iCWrb%V+ zN9sq1qk)lsAZBavN7F>6si>`9CR0?T4c;)IWUw`Y?2Hz>{KGapz%}ab1`&ojwx6(L zY9x4NtYdFJ#+@W84L@U0!m$Dh8WtEOzfgD~Bq|fr6mIH-K)#G1|OvcA0mVP~9(Rr!8qNvz4s7Z2arKMv4&bD|cwG_8Z_4 zK?i5X+5nySjL3LH`0BjjUBALR;a=O>cs52kRGit#iJ(_k6c2j9ZBH89gAo-aLxn&3 zZ{rCb3xA}Tyf#&jp%YZYkF@VkQdc!>%Yo-x2QO94+*VEdAt&BQ4fTq`_BqRD?1!|@ zcslF*(zf*&SUHNcALxM|FNZ;Ec1^<}-tz&6O3DRdL$+dO&P$Ol1>s7Phs$v_$(k&? z4Gl}`g@wK+YN<*vdMwOJzs>rl-8TT;Ih`*;BT>G;mYW!wA>am3E?C+Az#My4{6bWM zdAwjO8*P#zMXeDMb?&T^E8&v2p%h=m6XjilwqZ@#7H$^Rh{z*#Af}_Z-tg(K%hG`K zjxOy9H-e74j^~V7BW|jTbDq(qmEO_m`VCM*h(W)2H5j)Wsr|C*>;nQM>kY6PCM@&B4U{Mfr0!6 zbR|2*j2By$d(9IFlgrO-NR-Zsx{b{Q68c46v!P<30ohN}6^cf!uRw8bY*jaQBWq44_?D?MfGVwy4GTY3M<^D zWQ|wQ!2GbncU?O8m%JKA4Y-X}Yvct~OmYC$l(NoihpRVgI+dd$E?VMMf&nN!MaP!Uc{DmOPRnYnf7{dWImh8)u7W+$ps4mxOmH=5X}b1n^v@a({dwGbJKc{lTDpk96e!+2Sc}j z>e1NCJ<}*5Gubo=ri6wpk!4jHUWdJEk90X*vl?2!dSYIs4SNb2Ihr$S=al2Vh5}Ub zgR6v(XrkaKbZwX;_#i^OZe6x6OYEGHDe%H@(*g6Xyj_|$`-(H{W<9-n!4jlus<9te zuxWYH+Ttv<4Mpywbl2II`7DRK17^!8J~HWHi)ZT75|LVIXSL3OcG-SikdfOn5YkY8 zEj&pT46Zlv1q=Ca4m;OX>N}S+p};B@;XBUft2dPkAwkij>jLL+_ne`5>Di#EukTk6 z!8$QZei4cOsM`{JnnRU!lJ)Y4#{Q((!2mZLw<7R9e>^zJykIa!!-2$DaV>^RT&h*o z>MzR;H%ehT^4qv-X}cuYI8fz)H}TJU-0++&t?1ORsoB$7o*<6jv#0R|_009uN=~%T zJgj9BAy}I&!wum0=|i}puCW`<79%QIU!FB#AtY#3>j!eSr&qa6MO}=#u80IcM4;t} zR`~~P?q46Cy~*Bj+*UP*GsY};Tb8gDdmwxzpDu|gcf zD9>JHOEo?_sXvmpsnIk*(9omRLl5ZG_|Yq~+)1?}&byZ}Yt`0Ad>Z042qhOmheO5u z;4{S}#t@+?ar<$1-$ux~N`%w87vq&;kyJ4(jwID_IH5Lm)M>5Rt1I^GKR1{3byOSM zjdyhU5;v_oZDgBsrjK56T1W63WNy$70t_c!tKf(0Et~DxrHse+-_og{J;(9@NfRCA z%DZjt@nf)?v|MH((t=ltr>a_hK1DdxBUc_*@amrzjiPX)p2|M`ZHPkzir^8Y{OJ)1 zifv~qH{P8Go!O-~@tXCEEnH=!zq3H2><){Le0Z=nR_z-!b-}q#NUmw3CYNP%jM|Xg z5Bq8>p2x+aW3tII4$Wf+KBOV;qY<}2Kl41zepgl((j*a(ggztqhpk4pLe`dI1h*Po z9I&UK-Z_sgo$EX9bFh>lWCve&2)`Ay~65|&dbH@*EL51m5g>Qwn$A~w?E zfV40YleSI|M>UYEO2%KA()l)Ce}#$0+BQPDJoT{;$zsf8kx!+mm|7z1D9W?3K=Lrw z+*7bruB;5BVs3buJW3XR#inJWvCidR4~a@!O_Wh%vP~#=m6{|{XF*xN^Qn{k_R3TR zEIeKr?nKO6n}oH?gk+Zn20{N@q-b|1t} z$?TN@7Y6Z|;}4l%dcJ94mw`HUUA?u1CNI1POD<^>BK-|wG+ySeOsm1@lC0ANuucBZ z7&J}~sFPLIi!&xK#lLHI_Pz>y1bRphKk}!aYYMo8x^m+1Usa=+T>P$OYx|5;A*r%tiQv{Qyjw-?9SFKYKik+}UDCO2rdPpN;Pur) zoOf>BpeR_X_DnO_mF3GE>2651dnFkcvm$-9tIMHRekfmomx!>WGG{*)WX9Y;IZz&3 zZ+TDoX<8d31-U!~sw~8T6vP0xKfqiXTtf!D=NbMk zluC*PVP7I3RnVNNuQw&DYe(&|6|iqsJYUproQstYZ0-!pO0h> zpO@(}(!+d}G~XAZDS-krgu1=u%31Wc?zTsOg9PSP@-~;cXYcl7&fnhlt`Y30ihF6@ z$sEVwAvf!3c^>e#vTg0PGyE=1)9UngTlPYyA$IFK>z?0-N^L4xs}$J=3|C;V`ombb z?#!PMmyHn`J)yyvgMvB@&^{aL{wQ}9P-wxp(fK{$QuSz#3w?B#MLKgaYpXD7w3%^- zA=LMeH6}XlS1dUy7YpLv=IH|tJ!+I&6ZIc2MJV%^Zrv?=7R2^f*Ud~bG+9nufliCU}e$qxx4;8>MKOM@i=xl`-Cc* zxNekqRlH_Dv%{CP<%{#-y$MYM6VrmEtl;_1+o}q>Z5fT-Fi>sgr$}pwmMPrU;?FK^Z>8{n6 zX?Kp&&W!1fwkRw#3LiQ(s1q_mKF@7g|sg7 z?q|AtF4d7#&1*!(b0O9yk!G8nt?QYqQzup#t-o8Pc1w1usMhTHuPG$){er1+S>Qd43I8Ugc>N zGI-l2)?4&AG0xJEO9xLkxp|ciq1RJ`LvUvqfR4Q*)eG)v4M)J;X9Bs}?O*M2yymT6 zc4wG5-ZNrz{T`!BQ<7fIxkk@(@wh{VUU624h9z1^20<7$*0l=VM3_zmvhrDc7f#X7 ztE!b=DY~1swS#?bI-hCIL$wiv59FeBs4TGr{efEp|Mb*{zq811{i6Mx?nl=OBTy6k z39yegy(6lE;G%F~i_gj*;78VkUb9@#N`-e{WSR?=5zh)Fl6}^*CAws-P>p}Rxz`3< zrCh?pMdkt#i$ZfSGP5^(3}>xwkl#*Jl~B@QEKXtCS9w4y#^1iv5k1Bc{XyYTrkB?2 zZHZrbfiCX|GN>Q8s{NBy_NEYkx_fiTKidLtZG(bFLu7;$7hgxdZ-8n9iH+RpXqi>J z!XT0RD49=uEik!8^{TLPM`sPsg?!bry@RkHQLriGQRcpa%%nlbTg|w z6v{p0Q<8qMT~M=AdWZ8CJBVtJ`8m4(7J=55vuNHeno)eIJhX5$8cdr*=zO!Ym{~my zvaRw3Au}Y6sN%x#FHN~q(Wf#RNzt`~Rb5&+==K{hf%_WsHUH)_Sv1mZY(vcTLh*7f zYtOhP>CB4rmI3!E9pY0w(j%W&6S2v2TwE9z65~^nvT*g0t=pp@Kb!v3Tj^%ia}4#y z#DMsEJk|O#^H~co55vUBOymbr!TYGYN&5zbdGnbl9PBW*AmO|xzQ2&QX5SA*DTd!?i$G(B(Nv6N;m}zfihf@*IYB!B{T6Ob%RJ8D1;wERnf zvgQblw0xJ^SVq{QkkWz|v^9Qv49SBDgGSeDlC*MAP=uv|x*I0%U-vg)Oz`%zCoVGO zUT$kgp&q~E=^K#WUtq5vS0^%3;*r5*x?`2aWk6a$yR~La)^eWfPx*2A*^d&!z z9X_iy?(~EQtR-%16h1p!1$%@+UN^%?^$p-_!{vD(88pGV^YAIg`XLL2oP5Kr71Prnnf@I=28vhawBEiqRI_7<1e{^qN1q1M32WHJOk zD(^zZhLj{OHl~_drsO5jxF(UYFJo20wzKJs?M$+d6g6|MaPIyriFs691Zjc?bVG%( zZBSBxTNy?BZe)Hc`HDeH{E}*17NSeHIz4$=zD}{!0&l=#JFqI}pc&+O&E#}5+i~>v z+p9-_rQH)s^$I;F!!P7jm_Tf5c9OhH7`XUqNR8{773t{G%6MYcNtXy7tQEN{Ov}#D zPsf$0GfL)N$ihs_s5N0*KV?$?;Qr@~DNekcOG2mS?MZn3+LNHOs}+YIKzoM=n*GX* zIV<%+&*$dVe3^9fTH)@NmqP{l>Fw_GDJ(0`4-f0SBfq=g8AE_PDpc_|OcE@Po02R@ z<7G0D6YiI7YRtFql%FR@yi1iea*25>PKliZ4iwVaaNPINmy*euc8JXpn#tz+XQxL&@m$8^Lo0Z-nBoT^@69k! z6<%{8B{gAkwV!mvy%&hM`3NT=F=%Yh^p?RbY>lVzA=cvqenWFbA`XX)u^jc(k*fH; z7>MUpyl>qlsoS0c16BA7+KiIg=H+rFauIZ-H+VcvFe;LPG zR5`w!gVxZnl(UdnSv^eNsziFkosuTLUpkR~Y4?Q*UZoL9UFdwr5xK&8c)5i@rD`k< z&-ZX_$7*BgaH>m3#KeRxTbI6ee;@<*e{{-B_u9`Ic}DQ~7g|qwzmA9US`bAJ&9t1x z6a@MOZshgO9&iZeymInL$Zvgu$T@7KqCo$lnjdY3JJG)I31q`+s=Y%oyBeK}ptuuo zYM9X^^*}ZhjjqifMrBIH(MaAW7rjdR-&|Y$_I13?HYKkk9L%=HwRdE#NNduXU2lHm zIW+C)SyiA-tCLD9_!13kz_A8b4oBtqk33#Jpe*AbzlP_z6&`i_(z#Q74Tg36GY`H2 zhz930G?ylmEi|Gb4vP|nZctrfw@jOBT285F4DFdAl$jyn6{BwLnNdX(%{s?J^-4b< zXx1>o%;{*Qrwv^)1Ha19s^dLF^23F$r>*v8aW#$FRK$t$XUg#GKs}N8IwN(&EV4eR zEV9u^!tAGu&%yoH8hHZ>9%|nvTAkr(s_-Y)aH7%>c`dhcuaNMP(S#ogIUD&$X=nlw~$h)5GQ`0OPY`!2J4hb2n*neRxi5mZiwWROj}$Q!wvD z{ls|38=gz^zF}JBqf#yWBef3oEiUq=Tjxg^qR*6GbARlVxj*=n%q)&kVX=xoVtPeM zdkRr>ynMuoDAKv$VEOuW*gb#sSIK_^Mpk7Cc4ZVwuo?~S61w8Mn_GB};nKyu`8pQL zbYU|bS?PLue2Rx&UTzle=dX|ZUS58OjNKXZx7y;seTs&xbm!j|iuT8xUX-|g$(|t| zcC>x+#vJL4JihTIc|!k^ypQ;)?})t>*987iElB;eg8fe1`G@YpqiasA+P{K3wzh@> zdqBp!b#~rymA_Qao>*0OKVhoujC07&ZWF7cqPF)gb0sk(xFdBV6eo(pQ%9AvwvVdX zOPpTMtT!V0Le;Az(5v!yHdrOQ-!h2BiKRFEf(K2u!>`~3V~ZA*tthvIHA_omAE1=l zA`pT?MborDXP7(QBha(`OAD!>3O%rtXO#_S*J-mpqe{FBrl-FFAsg?|7<>~~pHZFP z0Ln*^ZQqnNp=#Hn`w<=(xr($~YXcD9MCJqY{!XK7JL0sug!k7CbzAxr#~ghyzTQMP+Q!aLb<3 zyZTManbZnilb?H>^>lMdF>)VnuY32*diN2$%@-G+$VUe!RmN^{|FHK&vX7ujvLE4~ zy7PFmA$?j!(c)wMu(|WEN4E~jwa2$L&w*Ks-)?31DRhTYMbLapU{7L+YuUxk5 zL|1WoqKw+AJqC-mxR3Zt`P40ad^>zcpveF=>l@G=jEq>`*0RuDP~Gt!-R8*Ato6RQ zUTv6eNKv9HBnZUeNb%2-;-61O49T49Gk5x7$2+b{j;!GL!r7@ve9Es=1A0{j7tI{F zVBUa$l%>RSV{67HiAzx{(;+@jEm^2s>ld9^99>)RtmhnxU zYmt5gNxRJ71WMtD)=^E5++8B>7KH?fgQ}5+G#feBZixldJF0JqdmdSIGd-JSn5>#D zgeYeYjOyvPSgxC&Frdh)mNi6pnj&!!CrkfXj5IQR}!^g5#_A&pX@q&4h`HixnD~*^yJ=JBy9(Ne5_;++^@z2i{gI=X&SEa~d|f zc{-4KnF zYE@QG8^n&nZzFSEKbeF80<^ifH1yRq7wr_|wIoNzYVWrX#V2G2=F4hp8t2>E)HLZN zb=EK@_?^}lFBj55RROO_XQzDSWOp8EjO6!l1XpswBMmqnu#l)e_5ICmnW<(- zNDJH(<0IoEiZF`t^{~#>?c^NiI`ZJTsmV7WO6D`%`#-* zs+5DHlac>XWT?$RnSrBK!A@)Jf076{nbpFPXl85o?B{xb5o86r5yg4fnXqJud{yKd zZqEOc6$lkU845ND@;qVAn__$iH80r-egBwd+UDCT@8XlEnw=U)f%`ypEMuP|e zgE)H|?>laAxO4HYld#?GVP87lUl5$mMLs3LlE?26@RV^XXlR-}ar!#xSYZF4p=m{v zQ-~&b1&T(M-aMgV%hEj1gyW2qgjr_ufbCeR;_6OCV)*4nQ_i+~#*W@x%cvQfZw!>I zX*Oklmtk`=Te>o~M2<6>^O}%ho^OAMQAJY_goVXz?J#{3ghUB#G@ra@Q}}B_o=px8 zn1<$T-j=l}d;9(<*}F1vZM)B)pr~#C{t@rcy`>j~{*kyNRoW-+@}uoSLIEDww77(z ze@OY)R=Pw6udeHqil>Stvjsjv;Ru2QWj1Iyhyw-096yxD&MQKQxOCt4RWxXlAtCFj zIq}h+&P0&(aI-i%1Pv|VQRth07gu<>Bkc`i86?GgWjzupvYNJ$wx?mB|3vTDjEN^i z5pK~RFBPRk87?v>LA(5)iloOgCGf!Brh`yn#g!%!9UmrF5k~0jEeM^Eqls>E4(iUm79;rp}<6pjK~oS z*^z?p1QnR)f+vuXO$^ISy5eL4q<&7~#O%bZ+yt{*k}(ur$oMxv5LJF!q2<`OEO^14 zW3_-mN|7*9VB4Aw%uQoT_2xa1d>d*r`KCm6^)8%4^F5U`kLBlwRfKvP>H1^q_Lnkh zEoYLj6?be^c>`f!`mM?T#80LmTN)^bsiIoD##Op!cFHoPCQ)zvd&B{4b^N)jPTb`; z*X}x>61NjX!xtK8ZBQIXK1JLtahxQWg!z<&VLEKPvma=*K zj|artnIiX+GN!@HNy!gZuNkI4&Ola=e{0R8QjqNKq_8Sh1orHmdYJgAdOqbfiAJ^8 zBp!6Uef?Hz=3Eknyx9YC#rDpxs=p8qa_$lkz*r{Hp;P{xurxcFa!EV!bcsI1E>4+FLC z(_dHLPk|3_eT-jiykm?_+A(ADzYf*O;JeR$T;Ba<1AKQnNp#u9h}a34GdedCu(%8&7=)zCuDE^gYF+RNc$(IPpE$ zwbI0vh&pb35>d~{%H@@cG=yQyf{G*TpqT?{Qd9`MaOH0wB??c--a1^ zBon;lC42FkYs{1aF|@DqLtf^Xo8L;q*T-z`VhNZhn?S3laRg~8B9f6am@li!I$_aE z^^;Pt+CQSK^pj^uyK$!soEp03@$;K0siyz+C?YSWn1|*k?;BE>`rWhLwf$6zDmhLs zkFkPvgI4%i`1r9OKGj@MVgs8#vE;An*CIyM;xS_r{{y_T%M4nnp1R<=kTNTOFSq?< z$o8bkGkxPZ+%^0ZQu=mhePt2S{|R(b4(=7FWXmEBB22yIl9j|!m!$eEPM71yA?m>_ z&*)S!);pGx((s&DKq2AaU@M2Ie`+nxYog>A_`z)k*+Hbisc}=NWm)7zdG*lI73;0B zRm?@JO2GisH-FpG5*{6YoF% zWcW+F@inc}>czU=c6!_86)_IO-M(qJtyjuDS-V`?^FI{W@zRhtZvsaCaCN=SabM)V zr5BjM#@0gLDEiOuL0iL%6PKiKW zUx+V*=4Z+$HpXgZv1Ajs zq!(fM=~T4-sOmsU#*)#|a2L^XI@Xp%A&+N|5cTGA@MM%ZSmD*XNoDExqNW|+6-927 z-%H6%G@+#hCxL!t@Z3gl+WYN;R+^)b_(ft|$)*2%`L!L=2F8AQwb-R z=`CP)u_BTlw^|2qVc@4$;kK6A(e_NRHC5TKWROt!>&liIko%;jp^}|^`N6pQmbBoN zre?<6Tm^Z2Z4haJ*AP%Mkb5p*vd%e;g`u-o1+s;Wy$S2(#3-j7mseq>D-kF+Oz;KUIJGyM4(} z?Y@}8uJq}_=U2lrYFwzN0<7+GSg-NR^iY4f2l zGi#Rp@o%({PZSf_iHt_}0>`T4=IQx?Dwr-Go|g}&FJBau+*0p{$KUg68f8>C&d z-l4+bY1*YzUv!rN|Id1dTdH-OjRLNitJd{aXn)MtSvpZOFFjm}w>?(3-R!Ew8oyP= z&kndIA?HF>fm6*Qo=vcj{54C1#4@Gaj$ ze&4Zv?NRs}J^mjmCm{5;HF00;g3@9(XzuU!lOl6z^;9afsSBt+&~Y-gpqhOpSiAkC zHj%ArrrU!=t~oom>0f7EoA#yJpD&5sB_f?s6>j6`UXKq{&hI;3YIipBfVuJyz;e(& zcUEk!udqwNdtk)Po7gWm6e@flHe=id^{dl&%a~UdVOM6lZ-GOH+POZ5)=9~7ixL}) zsv9f&zW3ikf0>7(+z<=jjBcpaF$<{|$P6%ubyP|;B_USMIOqrLbaS)2a^ZvG=Gcrb~OOhwWu z768dp6cGH!R1nLK)33dt;j{EeJ`1m9_#dVM?LVd>mS^UQ#P}Zy%RiJV@oDJFxNBiy zp$MWqt!VS|S^KU-x6!*rt`4z3o>6w*cp=Bn3(_aDkyV?MAJV5(MC@X8@SX zOd)oC!Xu z4V(dO)nJOwWR)71lvjK%zj#c2oHE2~D%;GKoXX!k}av6iPZcl3=Y})KYHPeCjtBh%zgdu=WoLiF9h5wA`Ax` zs9MUl3;Vr0ge+}Uq>}6-^$)at==8Is=aqDGh-BEzzwzj7jUJZVb)w>?6?8JJtO;Q7 zO4BUAD#l;{fPXYVy@*e%BPgbHz|sqCb0&xM+=X66)bw}SxSCmhs|9wL&URb;?@BSo zz5%G&#zsh^b--Pv3R@V(!$FfH(!B}`jkrMCDOsZIAaI?_I-vZ-;r%ELTR>{G(2rn-Tw`zfzK+BFYETF!Oan8Fh9+x2|DpFH_*8B4uTeEVb({}&of(09OVW(Pu8Q&BJ zUQ(Mb9Mf!d=;bbz-~;^5jd9fME{bA!7p5-92*KI|Caw1bv{u2*5i}J``lb?q8PW1M zwmlFwDoR%Nv(aD|8cZLXR+xD^fBxVOY4K{7j@+8vuoRP)(k2Ep2=)}_1VXO&tQ31< zxdowUJX2KVki?`=bqeyMnL>k5Z^1jx^7USZt1@jNLbfVHHdPoMA$7gVEN%xe=>+Q~_S*b-?bEA= zq`n<7twQWY9;h7{C?C*b-&lGgZ$%@GG?hVYkVxB+i^GuZgsP3X%hg29W)VR~_Kl1{Gc3-E2%-(kA5c2D^pKMmBv28zieA)g`%!H2st@NRL=)qbX^ zbvQ zHx>5Z6s{!;!xgW*V~RsT1_jI}7z_vb5oy_DwS89{#)0>}kd2iYmVPwBudj*J0>^kJ z1%lXne2r88z^x$hVNC$5wz{?Ou2~sJ(Or5DZGSkfOx{+z{*H@802{Q|s=0_FdpyRJ zrB4W8m7Un?e1z21k|yL8&+tkKI8I#ttmr|I`j(5@3u&_OlmH&(4pUBk_3(27W#h4M z&59*6&|o0E;4LfF1WU2AO2IAUeis44YbhWk@gn=Ax4_G>#-||HK}k+>HmyDWeOBN; z==H*zI_Z@XUq7Klo2Av|H?`8^;BY7fy*-F#wMwREo>Z}=JzU7o%i)py2QwV$0(*e(q2@&y$sq7vfS^kdLaSZ4HBN}bxiYY05wR@?F*bs;Tt@Q*SNoruhqwg$-j;}twzS$Vd4xam5U=0*1Ca!Z!o%^WG`vk z7mSY1?6)7t`#%KyLz$XOdFf)I!o}=Q*V9%N{w1kKl|4M@zFk>!0=JK#WD>WJm?@q3 zE@`4?|3*IF-YrT@3^+ZZtu_eYw4L|M$& zCE!~}6=;FsG7D=nbBhrcrZ7JRwqrM;#q4R$(;V!hkNLTJ9mtY|#)oP5`V^Q=U@wje z29Lw>&QNowo@mZD)-}>@*K>AU<&T$Rm%12N-jRk_lKftja0Sy%3G{S3_&JHq+Lm&D z0d}!Gup8~}yrT*ioPVd(Co$B~G7sD8$nsmSUV2-ho--!>*o#dghNn zjov=uNtur?IEEAqf1wuPVv4XE$FCyZ2;89#`08NSt9tuZNm!QE>xFvFlD^rld_C09 zs(>Bw-=dMAv~yPX$I7jsux7L>&RNV4!9DuoDdiw^T2(u_CP#)T6&TEcV=peO3-QT{ z%xwCmIXNDzzD?97M|C#Lbe+t5_GP<%IompE)$_%YkxaUd#so53&b*K$U^^mBrf4g3 z6+5YixZr_iZ(&y0ML5Fl@F{&%rKb7y-=y>*o6|@EK4q)AdEUhf`PYb^fON}4cWvcR zjO!S8;M^(ei1$%TVYfq8-A^z(j)OeSPc1e~4YqxsDbL$FEW&#AE)e6Zzjt8ewecxu z?CDQ~iNx$0!$jbx@ zt!AwvzAwLJIb5ZPVq~BIXldO6dOl3*X^#jtGqqua4v=-c)#7i|O;7?47w)kI3Wu=a z2&j0+y-9YCZcCk^Z4v#&qtMM(c`wqIQXlBcdg-9j>a*p2n?Bdhd%6hsqn-s*y@M>@U zWxuPK6MDb>igqE#)?VKv<34@O0g;jy1u;%~GBE3?A4RAC?X8%U_wEX^-qH{x!1wF$ zu;0kjCuNF4%ICxL(1NuSBH<&nsITDJ32ZmSp)s64MFvhr0qef0w)_e~p6mi{ENi{; zb^~PN06B)0kBVy~R*1bjR-*s5VcKB<7uvsBa(nRr2LW-cF`jQMlWxB2$oNf@!99SE z1oW2P$;T|Q@H?3;!W>Ufyk_3dVfimSSWLCiE#|CEOTte{EY?{?2TRJcwW+W~<1rQr z>?A3EJ~>PCwip{2kLb)Siz$UHVl4{eknaOC?qoQ9GHzAxx$|EYE4{hcLP?c_&j}zG z_G$UO(GlUotx6mNg2ZrKkSu~|F%)CA@cyW9{ zy+&?YKSqpBvCcPQzeA!sF6t)BNSNR-D3zMqh~N|G!%9)_x-MHZ0aGh+YiHC5v%bbW z+Fy_=-q^X*UdX1X!Z^`rjNw2JX=Xd7>A3J{!`fX4pI24*++grsWsVgLdS?PkGP@aL(N5a?KhCm8LlK z8dP$;$0(gYwhsGHs3KCv5&{aSni_(q_zvZL1+y#VK9Hl=(L*wOT7IuWl&B+I0kzHl zP#TPmY}w^@eW0*Ckk$H)qDpJaLy@!ZRD8pVj(78u(qGM~*dz}w`A4l(T5eF-LfaU* zE(f-wiQow^R;iD=)fono@^a3{9iNb9-eY)TfVwKI#JmID+ZY@vICu(Yd731TmlU44 zcnL==?fTRFX=Twi#Xen{Ww=3u#-#Mnp!z%|PIHGjxDhBUl_jyuFU0vY>gC)Z-f(sf zQ3>SZs0nz+pz>X-i#dV>%tfQlVJ%YR#r$tZz zGo&Nn+e1G02pFoeF~c@)KT5d^R`*nQ4>+FItlfs%^pcajoYQN>iDR@^<*;*o{CfjN z8=hNpp|0t&KKWLrE*q>}kFe~lhR;Ii9)I|APVN3)a8h)zF&6*wnjd|jftd!a-cUVv zW&!=;8DtF&85|4A>uzdn^q0Et$vQ&k1n1TL@?)izE>0VypB12ivHqIP3bU96+@S@= z1Q#V5l!5vBDz!qUm`j&yz{e7n4T}N0EQpUqM8}BqAN%VFK45vBWu;F>jCpB&`z8^B zOS8VUe5Q{D!AW1mHZB2fW5uflA|qb9ye&z|MsJ%A%f344@}4`gX5IN9f(5T)f@V`W z7-bhM5ht|OJ=bF5p$^OSy;UsEcpaKK|4{BtBAaC1>$UR&$IJq9Ku%tPIjUiQjR7^u ztSy3U=33v=7O}Gx)Ah!A#VQOt2;FsXCl|DX-(<(ka(H;=pate^iD5gkKzx`SNSbVw zTh*iZpBVmh=w8N>?jzuJ4kYPYS;;#7&meR2POvea6?YE$JJ#ml)Y_dGrz_nN-|!RC zG%jaNX8@lGl8UmixpMse>fJF-f<@>TN@&*LjwHePLP}UQ@ANa3sE;tupHdpF^7kYB zrNa2NN8ULmzEKu)pFzsG(G%5T%0>*t*vM%bmVH| zuUAW2*@}H2!W&|#U->N5n)!5$S?04U$G9;m_c+u5PeZkp)AJib(nFS6(uTWb#H^z> z(Df>?tgSjF*dH)t@)|q({^v*i)8zW9tYaM%b)J=8A0u^nCv(z|FmkDEveDf@fbeDs@~x>oC$|f+yK~7ZWiedNa+)O)*?$R{ZQ`2L1oIH43epwi~3{V90iYdQo5L3=^zcDK(EnupH zg#X@nh~js`cwQS0WmCsi5TNLemCZn2G24?KV#?)j-fPm;hkQi7VgpsYP~~Tmgqm0h zXn5)m_RY1#)(otcK5YIRw|;kUX#HqRfWSYL=C~VL4awEnBJ30DlhJj<1?JyPBl zE*({)TqYGwz_P@5^Kb`@zVJ_gUU+xVBTi6PT05W0%%D>+#a&)?cV zlLP~hxS;$zJZc-KT6G)fwIv1TJ6a+Qhen08drzV2$;_@wU8iCI4eOS8zNc#7&BIsUkYJeD) zVUIl(I=N$sSxNWdhR4jmZn&zDshU8mZ5U6_B5&Ju=ykYXAY*eh7LWS66P_U}*l-0F z{B6-DmxQALj&8+id=1mEXK_rQ=0G4~+e8{VSx0<6)$)jpHV70}VXSTD&9{*4_-WYL zW%)!UW#cVta)7s(95xw^sDN0WM zjekUag+29?Oc-^yT5nY^DJdp;tA)woRpl=NV+s38iTbQzly+ZB#~!-kqt7S5A8r!g zP?V<$n+vl0IviQ6Vn3%i#?IsE|!P2?On8R6z+b%pdm%{8b$L@? zEPaQ4)r9PIZ525m8@U(n$5?gg#ZpI`w^OYAR+MHhHvw61s;bbx0;>ij?WTklVpZ+! zc5lzGfqmgBQPp18%zS`_{E-ULDGvEf8kEv3f?RZYKPHrCv%!h=UH zis-o#o-S-A1A_}Qec~7)izor6=!g|fxO4bRcT)d|Wvee*+P*`7fwfoeHwt4%yTd9$ zF{JVP$_qtZh8P4_w50)BVyjdr>(sKBsQMOeQsjX2770xtMzA!yA7 z5b{Z9^&X1UEcyD9kU=p|jm2sB;N3L~|NAKN&i>s2$vkT>r!JKz^6)2$v+e9cRfUlK zK%y)M-O&+MTQ4g@|8kSO^M=oW`PVIBCLNm&@8K zHB__qB=ktUbveE^TeSD}dkv~Uz|6!&67a6yhE-GJCHWQ^uri!)*a^rY5N7c`I6djR z7KKoGCUU7_V&2RjoeI&iVW~WgvW-KrhT3&}(=j};kSG3}N}u&UT6S9a&-u&>6{ACZ zX$$8eraQU*UpUC3MdR>EPq7N3%q^*+XbTk-BdL;jvTSfaIRMPAe|v0wWSjZM@>-C6 z@CFm(_&zwi!7M}uD=gc~WwX9=B+w0=k?dD)W2w52w#ojyn78>D2Tt)1es<-B4IM*KG$N+_3&Oo$KJ&4wQoB+21`lE+lL7hSJ)+h<@3vfuc@_`v zMK2Ts4KHf++Sl;UGW;cw{Y_+4(a*vl3G25<0E;N?^CzkXOC%T9;&m@SO?e6*sd-lA zy`Qx9%u!(GpL4Z@GdcDAG&1lr|gW+!PpgQ|8{`p&Bu@suR=;i*5Vz zRyNkD8T%JG_H5r=Xf)cbi$6|Xe`>!_%bDecI&?HhRxS8fu=Dg{tpdK|PAXYC6@VEQ zH3b;17W6!|xou(`F^P=4U)dAGX5f(xvO0%EmYltMG3?^G@7%zGL+e%N`tYRJ(dU?e zk5UXrT_{mMS3V!6&J(-b#faQjNSW>ymZ}}BtP(>ha~sl7Pq;gyAC}=W*AA#LDod{J|>c<(DD>k1L4C$P&I7>QW?jg7A21e_^@2w4CcVCk# zNrti+?RXFBmYYzo-oJM}Z1D+v2Dpr7k}D{weddp97%z2ElLU}S8_i*x8@7KWH~Dpf zCZ@q8uWfM4>%<>FTal$1xUcp1%3Eq+YIoT&+tDP6 zJ$?tXdpW&WQ~a2x5~?uNunaIO9b(7g+cWARMJFR(B-8AUep9!nxoS6&OHFnOol-(J zJbZgu@r8^CR}E$J8z5u?BmP-|qd*dKU0B3uMb}Y_jOn+=d^_YFh*2-$X}m;EjhX6_H`JrBNPi%MCF1B!3H>y1HPE zYE1&w_BEZmNTcX?qnL!Sd(W(1IZ6mq=)FtxW|WpqjF8zjX(7DiYIl?ud}5UC<(*YLez% z3tguTy~I>Z-NO1g=1lm(Il6a;3tL~nGTL|Zd)-6KzS`nu3dzBSsEH=j%Zj`wc9_wc zQP@53ns;~UBOj^@<6AXM2o7$`SMn4xv33pZnhwYjeh-!PWBia!uVGNXKlN#U8Pydv zeP11&|59)HCY6jwMB-ON@8^kwr;_%F_QZ0+m-neT&YCsi8q(SRNYdAFV20%UjgVT+ zWex0PT|4`NV_ESl=bbS4^R%6Bg!qRae~5MO;Inc8-3EWRrjZoKTRoDG;)WMjGc0>(I(Y`w`s8>oeTyO9>|lWE6%Qk4=Wi9AMj4< zo6PnV{kPBP} z=apSHSyOyck#c~!0;$w{T>}oVRsW``DIagPR$s8MWVa=Yh|_j`VkE<0GT9g}nB`$XjC#ku zpBs8}mb4L1RmF$50BbwaPgv0hEJ2SXmqJT8F4CULM}&pU-x6qT&H$cqI<=8tOw zF3I#4AHGqGp?J1r&70v00h70)`)msMsLkWo`uVJq~ z0!<)fYQNx}Ig_Qvk+U(q754BMAN_}d7I?WgpW!`iw#ji)VAm^khZB_Qis!=lJD_@% z-C_K>vEmk|h`(qHu5c2T*AL$ScIS|s*%atMdi(k#+Br+$&!S5L6u7S5^`Sczf}L1c zxAy-~MnM<1iMPUE={iw+67l|&fH@Z`aktjyr>K9(KDdOC+{4XQ*(vL^E!Hl8p{qbK zaNBr&3G*FdfwBV5{G3Kgyys{F$_10#x4OWV`HCh1i@h$`Ka`3Nn zrft7vW^Cu9_f5on7wZI|t9nZkTRwCw{xQ~UzD*hFodrLa%$ipzp%OA64fI_I19kaj zC7+belH^IW&&Gb5PfkU>QK{euNe_=}kQ2zb1c%p+G<4sjfSPxS=RU(prLkq*qy;Fz z1tjVqszj;KvVnoywZSRjQ-IEn82JWm8F;(Tw4y_NrQh zM|Fp9`b||WNc-G3Lj>4$Sk<*$<6Y%}$Taaa`iFAGjw0TcamD$)60{n*)!~gf)tY`9 zk~aOoexI@0g?Y=FA7XP$ZO7mmzGxsx{Of7%2K;d}w7c~&`{WWadk;K#VlV%PqE=BC zI#CW=Els=7SEbMvs8L-|X%w1Q&!~m5H$IP*CfYw0{q=t1I6cX0I+&g^bq`KFF2DWt z$h)>?^0}+RXd`0}IF|ko1^bZEXf=3dm)Z;K<9&veYbN>8J=Vq@%*<80^OJsN}+WiS_Mc3rMIRhOzDIC~?H}<1_ zc$3y=qs=X)u97%=GoG&qrF=@dqNmT;?X`lY&q67U73*HyR!(=_D?N!oRii z<*e+cCi&->wd&}4HCi-4^0~i)>k|L?jv7{5!;F`*MW^m(I3-^mY~MR zd63w1Iq+(bV$aT5iNxup|c_l&hKEt54qkBF`PR`NS2yt+YA_xE`mMZ^9 zLbl>_+7^|BTKdp*o_-zF!ZEh8?xkAu52cOp@W&IISlC_qwI2IR2>vjlh@JXK1SwQ! z+H95f4+ZBdl^qxUb^(MHh;F;s)-kbNHS$f#F>oY}NN@n1+AG=ypcdcBlA2XWD=2~C z{&P=af0xxV_0|ZWCXYnE!WDontAIRdLLA^gZtP;Rvc+mn_pIouj)(jImZYu8-PZ zi2s$~dv@8+kYewqyc3;@ybikx1JXVThF47h2bc{8Fc*fm%qN@S}rXE zcozBFDk`6pwjPwQzN)rWcoIyv34f(sjiP(J(~dI{UkpEH{27{NJ|TUb(@@HIA{SQh zRXUy4W~vU=_qoKEPT?XEM|ZzszmfA#;q>K{JII;s+f^W&dLF*!GhKm@(6>X2Ycf{)|cbYsJILQTW2NwoQXzO0)QK-cqO^2tRZx zVl#B=3zwi`T-b@je<@z&#)NSm;%kX`8blw3wsf3 z9^AP7uIyh4ckJBOE9r$imPh(CxIdj%ggNc_W_?ak42|~EN-V*{v?O2%8QeDzb~TZ4 zd9~^ye5)7d7F1`IlC!-=4ghGRryi+b+png_a_P=HI0iO7TUeNNtMsJ&k?dV)GVbzO&`Yco>ZA9;yi@$7lku$8a7TdnOvsYA%7yxTw{ z2P}K{AUVF4&Dh!)eaX?tQf$gxN`^OmYKvrZbQy)aX->a=r}g?*I@ES-Z>mZ<(AU6m z4GU8)PGH1szO!YgHGtUotPeIDDB7t?b6tZXgZu|t20%(|G82rIV%-!r&u40%Cpsb) zkM|?PNeG`Wvhp$9TjoW0!o@H>ZQQL^88q}F@>BIM!5lS&ud5P8O^$bHZXSccN_j>Bv7XU_o?)< zveV?NffuHHJh_4Y5u}=>OISOMdMm2XHo;cb?(-*U-f!G>y=xs=x$(~qbK=iMbrZ;q z+E)(|7hO3T{I#U!7G?C0P5hx~=&N!bn`(YGJz6EOFf5PFO;y_PRX5V`2+(uhyqECwaWli^FKR@n}fUcP}t$y*9yt-q97*b9%4C5 z->SsMSY@5|g!nPVMEo{go(AD4)dWKiWkRkQ!XMk~bBo8C0quWY<-d5Jvwbcpuh1}jvgv?^>i5qI{JWLs`B#hv|LdDc^(1qVrz()GPQS_2)6Ncu%-;*uBR+oO0>RZ-*bE>pVOyjV+4LL9|DwZ{u z$Y4*{fA8~5Vcfn~@H0iMJMxlKi*y^*+O@W|PpxyOP0H>$c!WRI@(;y9iE+Wy^)a*2 zo1L7zd0ugB1`_&ZA{}aGrM5GvCn{o|Sv4xWbr~a4;jFDotuoKB(XGyzp===e6VZ!s zbvGCoKGaJKge2H%$xSvYXR}k6AD3uk)^rcDX*gsJQ|r<-nRPdp#$?ocwn5+JzWUXm z-O>U0b2(nlG(VwgQn!?Y7csGO6K%6+nI@6qG@F}2(t=n$3MM3Se#Jq-x#k$Si|vD@ zxPR7zAyoZ)*{s+5tNuV;jnRN%6QW%SuRSa8?Sa{;2R-G{x?_4K`QPq3u}`{E2pskz z%hs_Pqeqr`@2W0FWc}87?B9LF`usU5$i2>a+3-PcN{iM@I5ul>%u5JcQ8-9#aW%A6 zFOV&~-KThFoop@e^5>50kBfu6N7J%fpas@tn18Lif&6VAV@1*b?7&m^X7 z1Fy9iR=BQPZwkohMJQwSv6dHVdfzAQjjHUfXCUi$xO|iz3}Q^q4f48s3#*$Ub!vTF z3{9=4Pb#SOa`7=C*PhQ7w7}H#(FhU?T`A=PWx!3dn^;t|g{Egp%hzPk;;j~S`1ji7FN#Ag z$WRq)H0KN)V3}cGce(0mw}aIH92+dh0VUBG%)knX(KA%7fX|%vtvpWQ@=3nv>q#lx z$bL+H64|k$I4tpmMleWl70Nj{zx`D!FxSNF-c_Ujp5c32esovixYpaSAYM_0z1zu^ zx`Ovf^|dmF>g3<8He*a9;jF>lNC3B2S647RA8N3;SlCm1S@V8L&0x4W=NSJ%H4w!_ zCIkmY=Ohj_RduaPdURJz_}Q+api1L4w>eYrq=eFxN>Iy^$UGc|Q~eb70&Lrc7c`=2 zfsS?Bpe0$8ynE2si_;=%)?cngne(_Y){B(+j`)Tmw`ZHQ7@A&Yb&IDXPm=9_*%ef7 zRmL@$70gl&_ja2+^tOq;f@h^>TJm!ymsd@1WCKmp$ZUi-(*=K=3`Q%`7gI>2KsO?Q z%Acqi0#ZiF+s=B&^8cX-a09IvG?Ln#E)wPS*`~NDg@ibnp7&mr_KDY|A$*akY}r3e zRLflt&UqCQ^e%XWt(a8mUvZNS6n}B=@-|zL!H_C&NxGbzcD_1yZeg5SdvvcRR9eCCN9BHnYqZnp#Z&wK0q7<5fZzw7*D zAOJPAzw@{^`=e#AiE&sKo<}OOoTy@N6T>KeEKK%Slc*>$@j{n@AiL2xXYY-_FrJ?I zvPGrKr<~)>kaDM6<}k^071%9wpo~lPAIhe5`>f5x{y-v*QU8_rbP(!sf(hP(I8?P_ z$lL8px-ID~_=`n1;DKmp>m}Dumk)OVDNP(b9{VP$ZbFJ47$3b{e)_;5<+1Y&E{S!k zBXW#R053N|mcK+r86w+>I9_0o-r9E!dS6XQ?a z7i=gvnHNA+>EGdOvai@6RT;S<@^m5AUL~9X{F4+e9X>rKY;o zf@8iIr5DGKS?xG}+IX4&S6CcL~_;-|9wt^B@q3DB8o5B2C%rO&T$NhjtF-Hv)r z6L0g$!;1^@fP|hh_cL%!`f&Qv311e?_z~Oq*_=(5I(7vVmqy<8%_}TlCJ)WCHa0D& z=c?;LF}ZT~ks5syGqHtgk;xEuia+bczF35T<-s0{txa^?%U|fPfvX{D?Nrn@BuOne z5rH&6gj&35-bZell7-bS_qNkUa?sh zKaJ*uen6@RJs+0NJpkkMB-PcibNt>?=v;UD9(47vm9Z+K0lE78$jo-!#F=TNuc{x+Ab>kRO|-wSuxA&N zR}!l_28Wgba$Wg(l;(;)cGPFJN_9OA0vZZ|l5h@Yy|%6jE{9`_-L5?gBt}<$QG5+l z-+9yciq{iLbed9v1pfd^qh-ane<^C4I0NEMT%z?Q6;o2Ij_);9i;IP=MVhl>bB1h| zj6$%k$7ZyL62nCr3X%C>S&u@OE{^VcOr0buw6SFGws$@!eJENWXA?0PV4Q#_2w6l{ zc5un>1Mpqe7~i`%*6i#iVM(L4K)<92%illL45hi|JQ%aBdj}8U_RfmELsb3z6*g-b z+{65OZ2-Rw55T1+oK%lO72giu=AKOSht<@NyA{5E4^jw-eEG?wd*+-@Ze$kc#%A~v zC9ScqxFiEQnKC4KEJ%b2i&_wG(i3{TuKSdW8+|8JLQ>>M&0Lakkv#HqiHl~sq$s8KSl3lCd?Q3C1mRy`kZNeyeT^2C1AF;{SW0&#J8Rd ze?=9g7=>0vWH5MuJ@Che2gW608$n@-W^a(<#vv^Y4dN^5*oNYFY90H7=pRM zE$MZQJS zyp|q5qW&JN^!CRWLY>8{b?=se=Mr)%OA~5``HszeDGd`w>~~<<`$0ePQLxKO;ck7& z&D3*;lSsY*f%b^1HsFe<5%gn#?h0OEJ9q{$yv$}6PtKVESk=(7wiYWsXcJ}BXR0h{6SxvV zlZU5K#1KwO%cVPH4;4-5>yY8$n=_jfaFfzm25${gJBft#1mFKPaMEHeo*N6tGVJ@h z2QC?HNA^>ya-guEQLGl}i!ELC`m)ASclneQwnlG5_}tNyqt#Hda_~g9p2YBA5wp^= zgyaIl9ji=?`gO2juM@Oc+&u!oKPPi0Idh$Toh^0(-AojbV$(AA3WGTF9Rhn_K7W6fN2wcJA3V*t z)0s0XdR0~g^Kf)($FD!!2C0_*-B~}KD+tW*^8Fa{m6MyGnD}});lnv7fHzGnC^2?M ztPZDXd|L8X;jwk77jF3{c`r>6c^2$*xqeRePZx6R)X9qg4J!UCqist%9}9A|i+b;B zU8jiOJ2aAOlJpHbNOgWJ53FsWJJdj!2H?NEiPmt0o9Z;@uI8$AeAS7!ZCv-8sy}Q% zpJrn0`ss^Qd1Y}^m6cV6(bjd-PoPcGJild6(?n-IUz5uzIxqm z{@fS&xgD(QeA2MA-^#NbUW`+SwVNm%Woi-%%Pju#SVv7;W!xVs)!@=a{z(72rATee zL=N58SrdW(0qq`oYKz(Q%#HLnm&9EwPfE_7zLJZTKCS-;@V@szU#l&H^Mp07#>H9u zm*8)jGiR#=eRWx9YR2k3C?~JYoN{+)_3b(wE=3O>Nv(NO-V}YMr3H+M+0%^p)b$t{ zGb`}Tl3~8GPM?kVTy5hu*Y2vT}a%!U=jLpVF zU_sGPxYn;aNgK5r&)uAHPdz9fRGz;25zwfsM6S^J!jSqaKh^vPBX7_S$KIE2OOqIqIG&=617Dciq3J4Fd>oG9QSQLjR+-ElQS0{Y zM%B09`ZDGv6)Dvki04Mz@*+45A0gu62t3yd360ZSjTSt9tQm6;{{havi#JuB>%#?3 z7er>uT91yFEi9Zpl79`m`f#dhX{H95xU3NivwD;ASc=p#_n!azu_;=?^nvOfL!zAA zIE#*TezbRF5PbKfKCpjF4!@gK&GF~zLC(Z1P>YSCw-IXq{+NWryUYHWxOM2jv^Sz{ ze^)Zhy>r4omy1)eEF(0ZbwzQ9f+}*9mDUw%C<8CU9JW3hLXTf;7~b;y{UXqYV%!pi z|1i-AN*X7A5hYtmI6I7oC3~nkQiox=>bv3%bZGQxLYSJ!_9b#?bMtcc4{TMy<>tN@ zvpv{iktbzFvAIoKgim>L73!<3G)GI<|3dwKwszs+#S&T&MJCUkfp>EiGoi{|9Fpyu z(jwFPZz}Ln%f2jPuc~pM+3CO`uvyG@0brNMrW)s$-Cd(-Ef2Rt;yQbr=uDTNQT8sl zL!*1kGvPyPL0+@E!5nx$ugzE5Qg%X!zObvxQEPoA)LHi}ZJdyTIk{cBVq|pmU!{TKUZkv_VchrlutQyR7D9`m z1H>c}ze>~{&dxfx?O7oH*MFXxN9V&`GrKk~ADqlI)<+MuU%IJ$Tx_D6m8{mhZUxpT z?rxpY)ETle2MKP+x0B`WWYN)i?IIq7(3JO#A$YI)<+5$y7U8ezaQkb+^(@yEPxTH8 ziOLBI`zQ-1+B#34x-aS_iY(3<8JRqqZK@IjL+<=aEz|2}PKgJ}G>S(cPls&C=KJpx zC~JoB_A{h|l_zDP=*v^#zn#~F7=%_7k5z5XH20m?4dBPF9PF$<1g)1ha3$@QB-dm~ z2p~Hv6vT)m{Ck77h@`BT5Ub7OiaL$AL z2k^tGs~D8ipCn85yLeKNaX6}z=jzZG5$-wHU3!p%clDP$KO$KE53uQ= zky@ZypYieXAr+Y&kgBp~`K8>U-edmtH?6WCxrW>Lj6-|T9*FWwq5cuoo^rt5swA$~W^-u&Z^?xW_%*psna(jHC9GFmg&TBxqWGs88RDbEWp6v z_FgP~btddz(#d$mSb`p%p@KMAP~vDr*Gnaq@*C4Flr}*GcQ>wzD&^qs#)mIk))y1= z9mkn9p&Pl4klvBe(&<%1*2ts8qnW36CGVv-w}hC_%)ysxd1O1vMx*|{pmt6V#{A+5 z1K)hOW^WRtQUX5}y<{~{G(}#kyAt--^tgCbkgZIN^i!bLQ>+)StgqZ&f54_G8Qn)S zK$feEaRxr3zI~0yURtYq4X>r9Q!MoG&;Cl0|#Esn-7a^(d<6TDz$8|qn9A1l2Z#cRXx z>dng#|EkHgM~o}{z)>^olJP~QUAA+ar`4Y)WBhB~{i#ft&4ODdgH843v96IjUp^04 z>(WHh1f#cR;z4})Dk;qiqS>sTE8MvYSAbVJYchLJOMU^~{(LJ>p6oh)-B$}I1fslF zW42QlT^=6Qcj3wu`OyqkoQwf6qZXH7;M+Cylp1zwBGfLJz*L)bs_|&LWn%^P`y~ZQO#bcZhgJXHr|a0*Hz=2UggInTj^wk z;dH*xc8vMa(80Awhk-Tbf=h?qyTOh)ZvCxHn{Bc4^hdXb4~KLj|NeX-oJbFjH9Hp3 zX8N-tY`dFr0cR2dTlp#R^jR_$%wPKS0Wj+*N!edHcnCb60AB(ajJ!{Otvv~NXKb7V z%Rli=uFD4g2blh@UzYK*coZD`<~Clr*%tX!Z-9%f_vB`e66@DE^qX**UnpW)k`T4j z86BUB_ByS}^EQy|8&vjm(ir3&i>P&PO&ghU<;s^FpZa3dVbb{`NE0%!X&9R#{#y}x z2g{0!fqz8hA|{(QH`7>LNXx5xS@dV|AJzBkQI&TTZEzX=wM<>TbYjzMi;)fn+|(1NgsSeytR<4?9kDl z>^JOSy3Jl7+%Nj51IhIxSEYhrZWPl;+?%??KN=zfhqa^h z-XivXm-)umMAqJameNfZhUcX+DO0hh8=(mY2Cg-IR1>PA* zMV@bk6vy58|G5n#8@(A+$BK+upzc(Yu^uP|w0dW6^H6W1=(VU=LVgFKdv=|m75%xc zLbE~D$7HD=(XDDQZ~ zI-}x1&wcn_6+XxS!_6ji zMq^xwMvnlHOXlFvx)~a`FAeuX1GUDNialq7a*vsy++!FJ;{T$jp*aTs`@moVC^>E@*dgL->gKM= z7$NoZW<~vfZvTJwv>0V6$Z0wu+8`o6)K-&D9hVB;XlN*@b3&OOJHNK~d*}X~F+s@c z#i%ns+0jt60W;`{oEDiY)+)F~9v%`+0W73_eK0tUc{ug`@}S}&)4 za~pcA)zG(gKAnEr#i*n4J_es|*t*FT0S>zW}y^?Ho5`$3bilT93ZaIp_2~_!4kv+zW+dn^4N}@TRjLoRnT=&!iq;ig zXr9n6ljLj4k)#>&zStviALW)vun@2>-bcyaY5xW`2p}}TrA>g?%k(jlNxo3`V)K*O8>Dh;&!YTJazbm<=}5C)D+p8DMT-h=ShK` ztf>-~3TLj`DruIFi!|ngb68SP1R==G>-k>y8rg|1B6CB0^q!#W=_ z*u|(km(#;9qqHiOw69eg)3spOrJ=+d$7(i2pLvHiGc~2^jx8f`HvLIf>(ym-rDQU= z4^^hIn0_*QnHrBV*|2a^EyI@)q*meLKM)&iWGYd$M$5a*9>i{cy_7Ke2>ex+RJ<=5 zUi9~d&12CyhMd-GRH`lIY2u|Pi+NtH_IP&kdvl@d+v4z;!ifKYV8+Q@pGxKa4^ogG zp+C$J#xn05C&;NJ)gFJy^rtAZ>K?eQkqGrifDG&j8XW7YdnLngr;EZGy!oqp!od8R zhvUU5B=fd8%pt`-H>j2gbAbu3BagdnuZcT$elwx8-(y-=+|!(jcCIqB8pc{WnxomPA;Ux_$!TfQoq82rT!HQC zTn{g9rXze-hi|yZPKD}LZt&A5{U!2qZdw}lt}%1^N9T*Vv`H3}d>tt=J%xWasTP)e z=+xkC5Fc2pmP=f*jI6hkASeNV&9ZwT$w@O5wt14Wz@03j+#sBWYWDGBcME73&lrhO z+7$Nm*88|`%k6Y*h!%!_x_#Z4yaKH+rl>g4pU8&Qfu3xo?xYnBq`5V-IqNy6WaB)P zt;SOSWW?IcMlPgR%CQ6$d;}}fl|j+N9j}!MYZs3$rCDX3hqbC~nu@~ORpudJh=Y{V z8{BIuRN+if%6a2S{cI*eGUQLYTXLP^|sP zi}XH>1UUBxFfV)RBwr{(W(<&OX^}MrcVo#V={T8J3r$fllCj5Q3+KNn8Zc^z}X@}$c>l(|gyWO-X|mGapjm~D)jYV$ye znNu}=vwD!wd6<9?dZRTVcA0e`k}^d!%>a0lFWcGACe60ovaX@@(yflLEe6y`k z)s<+h`AbWsJ*b{`A%3=RFu2+J20N8DeU)aJwgF=1hqIfGVYT-sj*9*dym6IUDN|s9 zoigzb`%%mYV#nVUQFwWcgh%cRf_Ao2)pDImU#wuqh$1mNC&z@H1mIj*O@23j zhTrA$*w|^9n+dwFA6u~Uwm;-6?M5NeQ@_S-;pv%S$JIenTrvR;3L$_=M>99sTZ)z1iDL+^@96E#(o8mHLuea;mIu*;{BTJv^KnQX55{7eqs zt(bOmtr#8+#zHdl#FCQI*aAM*y6)E*eZTzAuiWuWDVCD3@MA*aM4z+~JH-}PMI?oz ziW!;Dn2j2lrn-(9>ds=n$0b!RzIzi)=`ZEhlY3_ZqV>-*T}<@Idn8a?l=0&OD$S-v zrTpoTW37Q>h75$dPVCw`baLy;#et}~(oe!t#?_lDy~D;QoX(i_bgiAn2QJ+Xo;lR} zRzcvw^@GAM+H33c=hDWU7~U#xGL~|9jmH$^oy|A{sz76;?P)JYnI8aC^XpMPv9t$x zMc#CU$MH*@()bZ&1)Ck|tySh+;%a_Axg*CKRmC&Qf9veX3)IN94x?+mXIkw7yUd95 zJlJFvnM{Rb;Ox$?#Sytpvf`T-O8mB>Dh+tn_{v4}6_~b&My-;LOm7YRbgI$zZOCJO z>iR76O2jHVZdc&hqdJ&58l?uukrnC;4$+u~#(L(iQMsaNVp?eqV|4wQxDHKrBYg?J z@7oH$Ft0%Ky>zFfsfM|Rde7L_9}K78aN>W!pAVar2IJ7;r5k8ZJTjY4eL|Yx4DT|; z#X(0Op*3>bn-?Evm9Q?TEeaGjs}W@-$Zx>7yA>`q+(NFYFxnR@rCfhi()Tfbq;9iL z;NL57=iWNC6pcTpcX9nf(r38Z4tHjw%fl&R`s0yL{%dcg5!^*U-}YxH;aQdr(o%rz zY|8XmsP5$0#v?YNjP!vo{=9_n8OAgo1+#?MB0%pHv7po!&U#hI)6YBAK&!cWI93Xg z!p-YEmkPU13{t^3bLKQRpa35H7l*X_h^}-uyY&=_MX`xL39+>#Zp45cM9_w`m+a>d zRPh1oKuHuzMp%d`#;NcjY(Ok1Zz!5Og}4viwEfwF;ggixmEcWp79N#p1J;SI$&kT6 zzb8LTL@ZwBB6xNBNy2zzRNnDkyYBk;zV&a@m!SwiPWQv&UyO8j-k)jqR3x-q!JIcT z!@}&o*Gk(1u)(M>1V|@;f+42>7z(sR%d`{~%kJJe7ATZJf##+G0kBZKfx%E@VbyQ~ zS1u|2_)>>Me%UZc-*_$#R<{N9Ni~E}ViTC9z=A-M5U?HuglE>bOOXPg2u}u3rHR*p zmc}7c-qWw5TBHDD!{MzVg3RPG=24SSrGX0wn0=X{NS5^C z%uT_c(qSFahd{-0aNGcGO9lHMg8(cT2q%?XdT?cuAw$}%eDF9;X(~l{m{o&53r8wU zTEDH?0>vH-Lg)fqDKfKVHp*Nq0(-v|`#NfypIv0A9xtI|a4=vAnW0IN5^TzX!vJ|q za>UxOYEm-;rOM${G?%kmF?7IiD>{Uyf{w?`ntoNK%Tcya+F=nW2I|QdvRd)xSYc=u z)xmJm6fsAq?|p_SMMhqocl4wMAB(0o=0EhHhT5ugSyiQ}XcnjulZj?*X0J2VzE zG+|1IN`No`{N>UPI2aI&L6p*Ubv!u|ummDto>nG_0T7H3zXeHxAOgNq;+4qPYm(E< zSqcVYU?d}IgegQ2;evvd?Bx(akWYf2;c#rxEhA{LQsk&4Aw>g}Tv-oI$*6QmEP@6R zO%ir6g3>r>1VxKh08P7aLCOyBa%fqlUXO7wfWY7YY)fOL zqxvLV{xI|A#yy%r5S4fN+(nQLJhXTh#36qED=BrM#2$RPe`G|?#`}MySLu}yT z?_v-IGYZxp3f75x;SA6oC=%QLTr0kzVnmtu<1)!^`#e|uS}{pvfUpO83eAB*?0g*y zYdBQkXlLy6>MQr4EyiUUp&FNr7tdQ^yVy(J2Vk~fjK!;KQ%^YUQgtm9HL z6EycGQu$fhA(#%Wd`)v0!zI*Vb8ho-Nez)Ua%#l*hN>8CoqZ^u3~GWDIU1&xCSTOH z8=A;cYkaW0-~Wv3bMUsX*#BHMnkoh0q#!w!MvRzAlPAzSm6k`FUGl1636Ql{rKM8M z#Cs3~U`fT<1+Jc*{#`NEA$`KpL^)P5M0@a3jQLAQqn=5`DH}CbOtS!fqdf9k)(@|r z%j2sYqJSA#Hm@uy4aG9Betkj3tQmahvI0F7+QIoH2Cd6U{H|By7x0Y=(q>hQDArSc zA}r0x&mg*lttF3ssovg;R+fz{w!(vdzsnYG7GDa7(py3UwaDV7$efxtb$D+sXj zD$?xh49aKboTyBRpA3Ztx{DXaBpnC-Jn*iDhu#0+1R%ofaY69z9!`X`-+Ioh6k+#% z2^VBrs5Ty`r)Op4L5ihP7EFTdW@LLWDGz#u;>IqU*=A%nTsO=W?~@-ly;gNv+zXcX zTXDQR@rgDJrHN@SOf?JggDz*?b-RaI-v0wMwLX2!=Z%Ts%}tim$y<8nNs1wbBr%-$ z2XUhi>%EbWT`EWs0LWsbHbq~T8iV4TS<8HmvKB0l^O?|kwJ0ndJm*<^#LHqdIOi=4 z<4+;p`ZSW`ykv#nF@rJDKVjGNzYGf^>3?6|8fEyR47zrG5)a+mnf z#wrTAh5ma}@=ivIBRT(m8+Wdd#`q~@OZrS?U>jD=)ou{yW(lpdk zYI1erg3BY~1IBL-}Fwx?C8!bR=sSpNG4rR9C>wf@S9P#bIlN5WDlLVE(-my!~+^eU;VgM~1 z{ZS2cCdMQLN_2ND0d0szy5Ht;8hHG#NA2mWe;GfCOpE^9yl%g;%TxXJ@Wee+(c6*# zV23B@D>yE!UPajE?>{Z5pYG(nW4=1)&7$&pAw=}o=(;tz*6*kH#@KQqlM27l{^ygv zX<|>a^9COF>3&$uuHHjZwHv221mHTN>9!P7nk~6`Z0tobFkz0<@9(OM2mj_^xlDA8g%FRi+!wu62G0d*Z;Dn= z)Cj(-!Kk2Xk&g;GOE~h)t%b!>VPG!0zws`I%b0~lh2b5}fi1XA``$EWOg+Du{-~cF zHzhul%1qbwdHDT&^|13>fpJ!tw$;g=f_`oLbxj>J$p!Z~EvJC`eFt zomZ{^IR3XsKC?fuSW?NCfsG|*6DUq%i*25s?Hdzy?MBtXb zarv-o5=p=U0yxpo(p2PSfiu!aXZaqvuZ9MFEA2L1|nwXd^yrU zybh`R(vBx>@G>ULVOBTRmF%}L>~FaDg`1DMXK z%YSzXkc2h9%+r5sPb*-@DCECL(~dH}^Li9Fum>>a)#tXNAzbH_I0IA$&%dij7HC^7 z6tS5tS`KYUb_TRn@Y4pXc-k&a#ijU(eP@miNB7YmJw%{`aNQNbP{4gu%D@urKRo?X z35~5_mep*&mV=Mx^Kh(tD+bDhpZ=4|e16-`#m!?LJ?)w=4*y3z(3Uq-9%FlICeY=4 zD+3nC1|YlS#0}Hwq|hMt$i;$5EJ?r=9|hnzB`4QT$8Yv3BCWQ(A_?53k{4cvWNFm^ zw49dpSUGA0CGw+S_0pIOqORenX^a#t57h2n+w>)TyB>T6x-rFE^g*d;N<^f=yIAIp zac_D}9EeR(^vMY#Qxs~r$8Fb9468<~U=2|055nP}52L5TvG9<{_z&+=0@Ow^ORrTm z)W{vYmgv7wGRoi=zkq)}Kh0Mb5}G|^G!0D;U&{!~U^{rbFXvpP#`0Amw!6gxG;+ED zvuF7by#7Vcgb&7#is?#uIqaYxFFloL@GXNkkAO-@Rws zZkvhsO#_7;A?yefUo>QYQ4Ax1ws;$8rjE*k>GPStdICWNEeEz9&!sB*4Lh_%1Pt~r zABpczKSf7_7B}Z9L|nYzMNZ5qP`>Bfm)@bWBCLL-KsC2^0~DLz@&ky~ta2+iv-ZyI z<8gNcNa+fN;&a5eA90)$0-pc(&G4=D`}Pu4gsf=fgnQ|*0V6(z!O5j}R=3-w{a-~? zGw*OuC?GAlA3j8Lwjlw0V)-&n01%7=z%$4`yN=rG$Ho6FALG>@YX25TTJ9rxx$ zS>4ly@G}~hb8K+(y5lPo9uD1gE%e6vfd3H8Og1*MF$ic(`_G@Ktb}B%OLN*!QeC&M>YQ6 z5QywA-5@J2)<}5_LlakeV|>0!lu8*g7YkwXyO^vqzHU{H~5jxd73o()-8AIg^8XQ0f`>FAMIT7dN z2!rHa&6N0^kF*8HDY?LS)UmQ?3_n!L)M)C)w!ua#@z==;tH;iRs4_g7Cyp@0&``?8 z8yZ@Lap-3}a}8hHdjXb32^2XU44CLbt(P%lDCo{R^Cul>K5^k?9XMuCTdmXguep>0 z&8Wa1I)BA|AN6FawNI1r>>1OAj@Y={RYv!qv`d-bzT&T}Lig4GRzL4E!|SL>Awz@5 zEK3sT3*9(CqER7(r0rSPl^gkQC zOEb}p?79)H-)#P%Mqu%cwE3ZTNn_$TkvbT;vg*_;#(>G3a}C~42HkwF+P!ORiZ1@l zMUtb<&m5&gfx-Ivo!FNzWADW!1Ont*+%pzcx?)-YkUB!!YOPn%_sH?ooIlwFG_3P} zT^hhXw1PX$nw`9nZLjLyuItfkOw4Q78>Y>qNyTIEBwqd7M7lw$k%wA#y zhmWFd9=9xEU`z=s&l3?5xG-C$36hqV7Guzn9%mY=UHFn`2GF&1Wg9|$BJ3Qm-+z)p z#|{vO|MkezgGxa!ch_^ahxzL^&lY3K^%N>BLJ(Agz&2y6OYu_74b65(jgjVB!7X9RLIW5QWE<(%KyCJ7Ghuvz&^3t{I?f5*fkLrWV&ur!OCV+W;- zfyUd5I5>xPpcS+a5oS7b#hKb*U=bcu;PgQA=h6Lk8+6PQ=gck^Z|B|EZZk#1lYBB;7R~tMGoFWSm-3#!sy4m$KaA|$E5=IhU(_JXAx%%MnZ-3j zo%#ALxz`GZXX9?4@6CPy;_3pf*Rync#v3c=)x?t{pUuvzwAh(R!%<|qjJ=B~k(Enk z*Vp4{tdeF-ZmJF%-8a|f$LbS$E2cEzjQRscozjAVBULSa9pLFh_M^u>r3>sUV$q)7@0zhO@pU{FSipK}^)|QzlgaXi%`HKn} z^j&*!v9NUH``=29$ZicwR(d|b-+xL>r{q1|aF-d0jkat{V~1kt^$Iy2e36bo)q3zx zT!J7Poc<5zsCObH|GMNt6!uJ9Xyr0UGG4BE$6OCB4FTUo!(aKSXL~LNj27A{f1-EI zfL=EZ1x9}VuHIzRwY+KYfaqS@^MGt3))Gl!6!TD$%4O}U4h~-eyvp{-||~VD{-qV4vY@w)EbI!WtGciQ$aD4F=V6YmAV;~ z!Uk4SI^>3@km|+b+Nx{LQoay&mw^m;!SH>IOh@Qv5oaO$|q5y972#cVn;G7xqRXCOSheIV+_^fknRU@@mhj>|tjSpYmIyBUj z0Tw;do7Zb07;zPIiFj1AgImA>&jzK_buSX^jKSXW?_UW@%Ba~>dBAntLk*0R=t_cZ zO0a150jRuuTuSP`==*l)l9ACKX^?mIfD)-nML^V#!i2)36S%yZ2m(C;%PZB89%G>7 z*unIk@=@%-Zad4)*Fp*)AR&_9LFkI1gEL_CE^BF?CX_Jgr)^%k)xmoU=~D%rOwjK~ z(x+dVGjBfY!A(F=*w8t5v~j_quj-*pLLe%oOfS9rjoqP>>Gy)4X)bsa*mR;kT9Os+ zJ+EX-K=HZr3gd6~%rJGZaf!zybI*F8cX$(<+Z&j-q#Dakn3I*mu76AE0Y9C)1SNYy zqRVI`IlV@m4-xAWLRC2FAA=F2yAu8qFG$t>TP%FtOA-P;XN{~GA(6m1#uK*e;P@d; z=|Phh;%wD(>>ul96=;J;q)UW6E*K~j97sysgM{a?bey?dOI>fbV!<5S?`OGK$s6uce%cwKuk*v zUIy?045&^T1s-&zJ^ptgbIJEV0J??Jm+QjEvW>Q~jmEpwNEOLD@xBq;!X!d<00p8z z*11XYKjTH|L{+iJP<< z1${is15D%J`=O&ZdkaW%5B^5cE=k((e=J}ddx z&A-CZ9E6kqAIk>n={tBpY=F*~t$IiP=i@!O|VAy=h9ua#-Vkw3Ye`#5fh8iZu^z@0RRB>Lzx&TiuY z58wBSSMg6}Gqu+1J!x1}(=sxb`L+mQu--&hn?8jA7+V10VAA>eo0gh%&hWuHo4|T9 zN0XuiE>z=#OZz4I_o2#*Rwy8@<;dclSp&TLFf`pd*$vl{kuX!T5AO>{!cF|g{U{iL z1#UIa$uAoWKqdK@=R~P-@i=%>$5?P`6}s?uguqS`0X>eV3F&it(n9Y@dO8#L!X>8y z(W~tjRX;oK7(nA&|H+;B5rxWNg@yHP#~`MdhqKVvoI?O|7;t^$hMvWCqppO6JuOW`1YD8N+n*pgsLoICnp)*0j5)p>Jq`CwX{g6 zA+)31xIBPH%@1ypF~N!*s1KOV1f|4NSb||?r3j_^i6Ah9lr`q;0Ajt({zFH%H(8=FMoslmh0K+G5xOltDi$B4BSPf zD-jV$002{QPM#ugVU&emqDADsy+({_IfBp(#kmqpr#KtDr#JzP>=H}c87cy$4J-!U zl-jXo%P$82KeT5$mEkV2ET5;+L3%A0KQRoz+GQOKo5K0DqhcMUM1s@K_u6gu4TGhcTFh@Aal3Ela@S4@lIMW>u?hnbjGqO;8aMnlpqexHLe5W$@CXXz_n z8hlfb^gQZKFWC#3F|t%KheYq7e{&iz0HS=5YISK?7NMOmLq zYS%ZF2Uoc|pk?|)yIb)#fH_@9ZpSGtJVXU{Q~28A z6D^HEfow(Sp(15`-oBVTrw&5{1Ih4HY|k4;Kmby#)eZOZ6?ZGk1g)B$0MEVTdyyxz z?HmQWuSJK^fRtNUf~lABd(j|3)*Rm$Tj@d{5&^^_aw&`|md^KW@S&qSJL6p~m{9NF zrQP^bF=D7yo`&-Yk9v`=<+acLG&@(G(H%Xslo^+j0m8<=4ymdx%u#&VGPxEJidVV96(|4mJ@+ED}K)d*e}n~5nC99thzktom$ z^yrF}QqV)5FS`ZpfIv_`i};|>NZOP;OW0!8+!sB}1smhAk7b4!{rG}Id4L)U=2h#z zZW;`RP;rp|?5nq42uzp@Z$&WOV8CCZklgL)sq^c)OL2-w8u*^A%CvRseYbXWO?&n_ zUJA}Wg^h=1Fhv6m6CwSNa-fd!ROiuVo^Ln|Cs^rl`ss?dxE|ni%y8Yl$E89TDV}$c zjll5hFqQqM$#+h?)|eI+hrRF{x-qQ%=tXhcLM)0^u(+9@qd?&xqEWCV`P0`zpc=0m zkC5?0krL4tOTZ=Bk56F*wp%oIDBjwtqRXd3!acsgwo}NB+qK%2ILR z2o5=6(9i=R)0B<(j=Cv3fcCvzY(WT|m>l1l-0Y;pfni^!2tOQUISI{@-9x?Rd`d8u zVaB`k^s$d|2TN8-B{H|C%^B7NT*4CK$Ey@RXEIEAu6`s(j{3=HyT@F0~m2SUrAia8}4H>K79_QYM&m<@ZT zq~1v<>iUHO;{aLGmf{{qcnyzvBtasv`Qnc1LIu4|QaQn^#;VT84{=Y z>uw&m5KMl?%l$FJVhDB!^E+9WGAwvb>R7T@a=e&}_#aml;k9(6 zo5xD_!?$(LRQ`m)(P@*+{e--8zrMHHS=hUFKh($7N1n-zfAyD!Q0DvkhIffzf$8c0 zwxohQMa~?YB>X?;189;QUiRIk-3;kA@|(8IOyW*Cq=52SG@FP2+r8qu3i1}2HeAx% z+HqtEVE2Ib5xIgmIlHwmogEKnvE?lC9B#+9=KCefif789Hl`1_?wgB(`A0D{7*nCF z?ox^&Y)akF_sy(fE4^f1MO2_}=G5&_+zD&r$C5ul_9m`*G=U0;bc!GTYi}$~bg`qA z(|1?QIExaf#7)r2!}q)lF7i*|+$x1DehE;IzVHeEycUE+p%*St_c?y_C;AqSq#4Z0 zd-c0`V)j>3Ws&$e&(lX;ZtLb*cPsT(RpJD?4B0@h%_r{myJN>$U(2DaUa?sr-L8A+ zGK8b@+T`ncibB7Xw?@Z8G|d>x`5&YhT5*C+H$G?|N~vy~`B(1`POkk|8L*4%dm$vH z0jdX)JJ&gK@$8xSUAb~?Kqvo~JW^QQJE-Jo7oJ^& z^wixIS{?Ht^{G%b@JwQSjd@~a$VovI(K(U)LODr?We9L77GsO#(0G=Un?x#^TI2-SaY!pkam$Mn3#jBqfJPr#vn| z^tVRG2!J0R4UX69DNE?B{=V zJN%IzPVD}-!J*ft1#GyA@kEh^zQ`tz^LBbn;jy{6KM8zYT5 z$)iT}A}P#zwDi}R3VSRg!#nToc^RC!FFw~4`K8k&VZ4Dsv7R3Nk^25u1M7dOVgB0e zF2>jve9n>agXW;$i<9K-{ktu=351W{b!`KyuH^8N#O;8wYkwHMd97as(WjVh4L(we-^ z?RiQYY%CIzX1u3re(|g(4OB*>%{o0U!(($rjuMX!C;!}as`J_Ax~wVyigeKJjnSc3 zLbo@Nz`6+h50IlKmqWVzEnu?f5P*OPF9Ag!1oNTX9`vP1IJA|xneDK7RiUiiK^!J| zs03p+!gKXYE_XdlZjiR=7gX?Hgw-#`KE3j83^?k^>=!P7p$dFXvpR7?8?vLsBt#ml zzT9`jX^d#j{{ZB7k&smH>D$XZc)Wn1<_jo7?djcyj?^vy{{NBn-a$=#Z@lm(1PIm8 zI|c|%QRy8_AVBC~K|ny75I{hw(nC>tN2Qn0ReD#dNK-lpNS9uO&{5j=#^0Sg^Ul1P zooxQeOwR7f+2?%Pb80jFF0hCAp8HyJH9qIPe0E%zfK_Ai*I^7Uwx8#Hvo#JEL!;D3 zczm6yZpCP_i`!<3xHl?e>6wm%Dys`#_nME2qKZ3E?VXg=`6f5%^_iV|we>uUR_G0x z`YHR6^g~$2`XgDVzZQ$$3pomtjl>Jl>YZx{DbV4fj5vxiBr{bCqEUQBa+jsSLOQoE zWckxg`T4T1Y*dlkqv&D!18cj>6Fe?_|5P3F+AFz*B2BUX$yzWTg(l&eY%HZeB!54y zNCKwWgU*T?uh_lj1vfyFpUX^yxxQo$A!DgR-Cz(tfL+(!QPaRJN1x0Z!FLXh3>MR# zyUv&tCa8RjJKcItx)J&Gy?mzE);`M2Lt&?J*U|4YOU}sbFh9k{liu9uw?y}sR%roO z>eVo^3iDfwb9Nt1@|1I_{@wk@*QM%KhSwB>zq&)ZE)Q2`vmqo0b88AvaRP5!_Zf|b$4Ny;8tJ7sz zjEll_Z$pPp{i8e~g9D(Gnco@^ButZyb>_Ch16G}6$XwFt!q+GeIGHDIqZ&8q3nUCb zji~4Lf4H)o1s|FJBfs#}QN95*tv8MYZeUuwRFQG7I|N1!S4N}JV@PGm7N}(CGpJL+ z?R-<1qDs}l*@n<>qQqz0o!w2|0YYuW+1;bS#qmB zbhDDsSo*v5e`mY`Nl8T8z!uQ)t$sHHH5E8n5IBxct{nSr_8a>(eg0(y5We2hL{a3RBrFH`31WeJz8rj3I@k%#zn6fFHY?L&5}yiJgj0yc z8!@CSPP;G3L`?p|Isr=6@V5}mOYMB!x?yg!Y5yE8P%M7jr!W#>vvl+onxRN?s>$>A zmDAQYWgk2Rg9N})L!P`REW-Gkk^Yf~?Lv!?fJ)1myGjC?ZF88ipFxIE%aOt(D|tel zB2xhU*2f7e1B|G^Qm<5SUUdmlMgG}|yc7B>M)g5qU)SgxIlMN=QX9$StFiTwQ-SfzUZK) zVb!s4+CCba2JaoZephl&xbV%p(@A|&&fMsR__TbLz6>4uhxOMPA+v12RLu2Hto{^p z>y9Tu(*c1&SU|%kE)Hw_h2+pTVUN&PcQg$xW+F=xfNuS?4STE2Z`i_9>Wy>x(G&XA zzzvejx8o>zf9~zZOZo!hMz<8qz5QBA!+rFPH-bA;8VkmCJq93*_4d&|}FaG*a3$hY>~HW9}O4 zC@oYP=sA5z){<~pfw{!{D$o#@-}C^b@J6Lr)`9{_*pG|02koq)4-Og?yZPW;hgtn6fu&(pJz4STmX-4hH+R!1be@p&6VTM@tiG8Q z3eE;bZRYz|CAnlTVwJ-W#`(+lJ{|n%4NFaWmc@v>gX5m&+}E%rEl309l*h$Tv4Rv{ zpg5%$Z1M(#u4;c(5i|hHSLL`(zWO_=a%9rUGg>NWR-_U!T4lkPg5I<*ok3Zr>$Ftd zS!N~LcLV*5?TP2VMO*~%7)#Xp-tE#_Q$GHhE9YG;hp?srz!S4Va;+=-h?Aycch=sq zM)cAUbUC~ed-(1J{xWzl6&GpCv(LIRd{sje)f@f0a#zFFWQGC0VV@0f_OxJ)|N76ZG=>aIT}nv z@!T2t^^QnWsvk0p`ai7vD91KWd~U)qqqL{yjp+))k{pS}<#7n!$SN|;E1h&6HaMV& zhbA#FoT_$WAQVWXjvSfgysIy}CQ205J?rNt+*=vSf4!8I(=tz1z_!P@aUy{Pa}P7= zJRr(AStV%RYHHw!F(&L{!Ok~*S*aJ%g6WJG6s=+|b@JoexYJLEkA~t-?UySqD)$0! z$^uf)3!Rkm3`5yhIuc#23?U(_TdSL$J30~kToilX_l1O-=xW?E7Bcj0Gyt_Qs0Cpp z3IWKPT*WGK<55RliunHfFTxpwyCZIjqKU57dWXC$?d~tR0rHm5e-9|q>$7`>wX%pWkpA@ zi~3|AL4*;=@x=X{PEEA#Q`(8MEK7slX3#qXyl8$JyAcwJP^{Lso*b-A0n}3Wb4-8k zxd>j<=1?5xaq=O~j-%qSg*`t58K5mNyv|o+hqq_>q}Z2B)MC=YiMws4YESMT`b$bx zjd$&$!Oarjeg2_XJh)o3kxhD&H>B5OSy%g%4iyLHlgO<#&;f4m(fk}eoUXg485-Vr zL_mQJH;iml+g_AWL(?n~`TC2w272#gt?cWUxVSYl67Dp55s1*Y3pa{=yKfg8T(mAN z;o~DsE{W7>f5EpKo9wyg4nHYO5MSl5w{bsI^9T+;ee`9}!H#q_#(dqEO@#t3)EwM8 zmo1z?Vk~OQQ2$Ec?90Zrkh3K*RWORffAR8|k&PZC%30Q^w8?{G3R8uf(Xjm;;HWeX ze@>dA`n~U-m{Sd!UVu7;vt`myJuD(b&W2-{2KeR$KkmNvgBs3SD{xTR ztRSjOZ5wL`lRqqu;u`aJFV!Q3d{Os)G;$|3R|r|Z@Hu-eMT@)U0< zil>*kl#r~amO>uSs{OY2!nxX(z#aF<=pL(@d9L9o;9e$%qkaT^XsqA%Z$nn8F>%_^ ztr!)mB-{|hG^$-d@M68f6w!ARkxdA=pb<)7hT&PCnr-iE15_{=8(n=0#u`Y25iDh* zB1pxx$lYxgBBDpCfsr?Fj$Ur6(+S@5l=pp|qC*|gQoDJo<=`YCV0>Em#H|CY8%%R_ z7cfAvQ1t^=9N_GDUtT>BVusBuD0i44Oa;DUja;XFp=O|CrxzH1kfaH_l|rX-7O68k z$R7fF6_K>U5dDi|)!;idjJg+-9M~EqJRwbXpPoFRBrj=g*S5_F3+UoP9g+#871M^s zr2WvUt{U_-k~y^6ytSWzxz(NK<~LYNqJ4vGyYB3h94p5)c;Tkx46FZ@zsL{S{lg;{t{@@?=|)J^slT^{bV z`Ysyk-%kk7*hzc_BG2w_NTNdfV%3I~*J61Mg@8B5JTKGb8C!ZomX(t=CNZ`Wyg2^1 z56Jh?a4=W}1BNhDY1H1h8UKx=y*O>fK8I7ACl026B`&&s zw#gzjm*CO&gBW67?*jLGu^5)mH@d}E*ODG}idEUPk8EhZjriUq+kMmxR)T@n22=WN2w|)jjlB?0&ed`wLV?{8 z14B_fS5+U|iBKdo7}40DPrY1teWFv$T~=CFFC0f93YmLr=XyKr6#$Bkr-`-BQ*AJx zFM4gj(7gMsBsmFW9ce^rCR_+JwU{hXb^O>zZ~GK&E!$k`lO5%K=i#f z7@|4}28k=T8tiWLTNKUi^kkK)-5PQ1r`o_i*9?}H$vSrzh{5K5Gs)a36r`o>o!S}G z*${e+!@$&`V}d5rvA=6UEAgHRVjCFC5Nad}Po6H#mDD1IY7OUPHwziyN!bNy zj}8wpA=mEnbar00l;+CQFSL0ugPan0vZn&r(t%)T4H2^=PS|b=LAYVZ5I##(3!p<} zDh1V-&`V@>_SEAULuJLiCY`ZRO9YdU*QwbECr{EyEupPTwvudcNj})Y1DP7Z{fjHh z*I8Xfk&n=r7u;-Nw)97T06gj3?)o0#XjTqipw6o7Idp|B9a8){LO8Y_QU$MrjwhdW-($gI0;Exn=jn=2ju2V zb0d&JI%nDUX{cih>+6UI$2`gv_Igz5!_1MOliiq`5>3C2aqdOq_oH>o(>9+O^jUv< zDG?~9%FL501QO@M4=5jz@#=M|zAA+*)xY9M05uzfrX18@S}~wS$W6Ogal6$*m$$iz zf)zu4u?|l|P{Z_60}c4kF^+nApF#66bl}9>d#*n{OY*BU1#{#_!=_R+td*h-sv6T> zSYz}VpC-atp)x%;Um#Ts5@^bQPQIGJf!iB2V+OVGCI`+Ynho(FVq#0rOKAMa;vy$rs=(x85cwNV{)E#`ZV??ZBI((FnRd~KoV z%j8*xLxb^N2|D7Un-0Y>-1T#j$unh;|NOW{3{|PB^DfVPmVl;Gl|e)(snr;!u7(QP z8wP#j6%l!U{!WKy;B)h_Qhh1PW9#@;2 z2N+b)u<++H44h8suoSZAGRC3K;1Z030t1WDKpXau3rwlEYTYmtw5p#?#QR#YUm~R+ zUzoUHx1T;wt-Z>$!&$*?_1V4hKdrJUyL;AUFrvUQt4`0m6+hi*y6jCz$H(s~VPKHG?A7!US^GPv+Cgg<_3O~0>$>vyJ0X3Clpg6o zXR0B&w%mN0Z9m;<$DwAv(oMXrO-H`9W@yqgYO{+}2Cax$e0V5EU;08Foc4M`T7E z8_MKPDR<`1ki(T9$1N2;JC`T+RynWQd9vKFU^6wjOrw4TiDDq@Sad+qYl1Z!`PO&r zB~R;GTszDR`RGl~S2$lv7K&af>~G~-k;PIdKcHq$XJ;zC135pevx`T(^?*FysL>1Q zd@mI#ahPIORz~Qf*oI0%~UsB&=1(;$745(1ctb@^`O2?Akdg zX(^{zeQn{)D_vRF*eeU9rv>}A(xf$=`tj8Yg zW<2fgG2ad{^O209U-M){T!6~Nt+N}lRHA{9nR zRFdVOlyU3gb!j@C^7;UVP*o!OO-DZD7HS0VWI@seg>kOz(fcS?@LO<#%|#1T9x$Pc zMfT;h@=JgIbY`k6#IqfHG?|Ulu?jj+4%(2yLfd55%^! z2H?*LXd(k*9r(k7Vy0JGx$OO^K7?*+R_G(wXjOHs=|*4j)vZd zXh#3_Ie;4ZsyRe%^ay2Vn?R6sgCV~(^ZUyf{D+3OjI9ujQf-@HOZx?@X&mjBb&e|yM?ei{ulv4-WO2N2NO3qA zAl+9X5xxDQiKy7e#aLcmWgqe22b=|3C+jCy>He5qV99R^YrTzR;g!&~9;htW>(kx9BlVzh3-WU&_S*Bq^? zytjgU>qmY+n)SPM-if-(=DYX({SU|?+AanDKekJv=aTpW(f$8ym;ZBJg8#WL|K>3M zao`ob>btu4#VT6bk@i0zDimkl*>Do0)0#6)w1*k~y}Y?}VMN3)-nZfY6gFRNdjEK@ z9OPIxx%i{JO`z%J)$l#4DzB>_Srx2_McEFEQY?g$-=9W!#F7)wF+GXrXh-+MRK!+Ty zk1M?AU-prUxElkR%dJv*!sN1&tmx`|_p=h71dM>1s5mK%j=5dfvKbrwB}1MpEQ8v4 zu)8`{b|$@Ta^>Gt0;_?sx6h(~EXTipJhYo6wHes+LUk>0Yw}4b5)-ViOO&1>wW4o2 z`>rmZ8+kV`>FB-j|3fS?1S%wvA?zvxV*FIer)}I=R$iLZg+Rp}Z4@)<$XM<)uEUIx zit^}|$du{Yub+Ywh3Zt}Zz2%UNgM zL`u`53Ts|~AH49t>|zrs_skfa{Wvnkd#615qXqZ)vkc7(qN((2Z%_Gh;|E;o&+|t- z>}K23MG3YPMxUSB56HGlQ*(dV5)uNzZAn50z;Lp#Jg@t?)H}9@$Y86mMD`Fc=Gbo} z3-l-n*_97D%HxEGvhr7Pdqdb$T9T3Mp^XhvGW`|X!4_Gh{zK`0o=ls=kLFI1qFfDk z|Czo%eU};NPR-dNW388w_uw3sg$Y_VOA{TZC{aOI^AZ(}kHZwfF*KVrWx-RA{>Fa;Sf8~6PaG4hlQ6XFX=e|R!&Fn(B9^P8lp!t3*cTd(&Nk%GM>wyy# zg93OX?x?11Y5+bCGAq{P@*~{ zYEAU!?s81CtEyMpf z|Judk?L6NE9IC_9syCCou1jSa&C!~(J^xKo?LUA_(c^pa2Mvo#JjAG~D8FHBhjCQ> z_`>9>^>l1ErhoI)=+i}d6`kC=w{KKWhNG`n0X1}bXG2WYs&V(#Ygs(6t=VR4kALRC z?biQ*(CHSz1L6_(lh1jXWAlaY%@C)2qB*Dg{BXw6Lrg68l;~h+udF!y`%a_4xFbm< zw%#rTV=K1R|Kd8+kH^qQLATK&q_#q&>}JoP7for2|aRM-dr>;QL>5 zG6Cd_LfIxaO$Q!l^ZK#N_7E7a%AwhlzHd`UJ<2^ZCqen=FBWJ?Hr_ogNXV zi(RP?Im#aOdPmR#d{1JT|F?zp(<`btjRDv=(#Q4iGCx}QDC76v>^dR`C?-)nM;v{b z=U+)_sR{4SO%%lI#$NUzrtzkL)RSpA4!sM}nLccFs8epM+QnjACfzF+_#|O>+rn3d zc}OgRgg^u!*FrCh$nd#Y$=+C9R{3;qWVP*os)2t-)=1C>Sk})~LW2Xd@w6eD*QEw+ zHM?UasC^X$qJ|DDPw&c)0JZSHefu&T_a;ohEb3SMFZ9qtg6?_CTVc6j{!e^7nC0`t z0ye2>R9jBFXaGSq@a_n~Js$QHrb9RB3*!>=<2_j@gtOh3PdRxt0O`%38kF&kOCiP0 z(9T#_ZXc_~n4G^=+>b($rW{G%beJ7Rh0Fvp&W|$+va@6L)M=X^W|Pmcc~7qTYg~RW zo-^Iv!#;B=AiS9f!907o+JdhLNgFJ)fAISjqhTMqK)2{JZ3Fv)SJk3P%qGfSIHFbW zlHmVIRu4wt7V^Ho@BeYQJR2p(@4(yX3xrV{yEc?ZLg0u+tBz1Qt{Z}{UD`iZ!dzZSUPo?EC!5(2VlGN8~>q-ur&IV`6DZY z_tcNb-&YF5>@>O!#5zus)cK})>yRW`EMLxru3?VWT5v>c>ODtr|3!aVTNFKLpShlk z5l_cuYG$Yj+Mj;0V2<5GVni`+d-~NCXbv*1=^Sb=$p@BueyfOB8$$&AEEKVc#E>< z?8z5Dy0}$XhTZ#L=GClh1{7ry(`Nf}VFFO6yzdhsdtI0HzM~wccWYl?4(;6hBo`MK zSZY4JGH`I^fPCs2TNWu9p~J2wf}G$Am;lR7d0qNZ`R^w$VKqI9X@3gAL$#_ zh2U^PR6Kik9hvVnwwybtvGG3p)^WJHmdFcHi|(1u9((TBTOWw9C|^S0+^7@EZ%;H-m`CEW^8 zDhVU$;Bmaxrz~{h7FXjLBQMO037R998<3T7Nyz@P@5`UTbGhSZ_YGSqaOUFjs!o0w z8RPuv?C|k*4kCc^L6QqNyxVN}^T68D*-VjGQlz@&Z(HR}L`V2;AI;uFFeK+Z;>H#@ z)12LK0SVy*1Sogbq7I@(wx-*PqQVAmeeOOZs&LsABKNkhc;XijgsmDEKgS15ZgxF*SeTl`^HTF8TZ&W{A4|R z!pV4fB@CtLokt^90s_e$>vn0_fT*?sE!LYbZ=Z=Us!(~s7IKY0KW+iW9g`tE-}?>e zczdZRrD~(D>(ID~j206IJDJO>+)gx6{f)zSnl z)klHNUej-;7JmHsO|*LhO)q-c{sSm-Kj@#oOPp`XIUycJ?Ar>v^?4P+VuHTJrI9sl zjBtg&4aGlXOAQEm(>Zi_<*va?7(D0hu2;;Ni+6myWj{az)1y=p;GP$v>eiq9we#eu zv*#Zvr-}id+~0S9skJmTk6{p0D`4HrO-Hy0HOQ)q7%M92QzYD$Hy%u|w|K`E3eBiv?BfX5nC33n|o2s&%T2Kz`8B zeEplD>z&o-hZp7C|9;#-+-b+e`Aq}lIIo6AO|sewsoSmmF_RLC`m0;4ln!irK{tt^ zDF411MJXQDLf_XiwDAAbZW~DZUb{8#jVNbs;o6tPfE19t zVV{zD!@cS(sPo6xN8KrW(X0b!F2A1MQ~Mm+`ncSxR4J(U|K3~9`RYINJ@|0C{)D+5 zZ*=+j{+r{q(DvsPJ?2C)o~j4T-l#G)eIc{iesCNRgIRi4{di$;53R`=l*$;>_2v(E zJGUgBgiSVjZ)m0{A_AeZj2c9+W2`7de@|x#?}cKbAF~UsEk)d*&J;QH_bB{=_9}a$ z6!CjA=Y2HD`i}oFKAD(cljAW~uVhoFlu6|~pDKweFY?`Pm5G}DTSg#D?VWg8pM#GP z)iM5Tu(tGB(4S5NqAAl-H+uH)S5lCXD47;M60w>;c)73rp$Wg`mqYZzIyv>7OEG5l zW}|yo+>!8FW`$A>Qvgw3#=>h{ZGl}(hz)&L|3PO`yZE5x-9a(88MNO;m7q$0j_GVB zDBVyvky(hB!h3l#zdWpyzaMuGax2CV?FeW6Ih6L%5N9bdxtpqL<3dn9&%=XaIiEU1AQxC{l1O%*@%Ux^9a>$#2!-dtl1aCvPW~`a~U~ zeI$c>e8^(qn~3<3c9y&RaC-|yaz5!Gq0ovt%TtW(Kj48F5b_i%AKNXcE5uqu?q`3$ zs5ZpQ*OmF#)kv%7DRK9}x-IWF)&-rK(eLhTJ!Y^W*ZrSw?`t9}c1vT1lSYV+q*3(I zw?CyCkar`y1Qm5O83{+SN@w=Mo6YNQHgi0$4o_Mbc3UKN+r}mDdC>HYMtYcu7o+(1 zTki1RW^2D2q%cBy(Vz_b(t1=G_u6OSwd+!7f`~Ysk$@tNs|FQ) z^OBGCZDl>_a9c;2>&{)&Ov6mYQwA6?T^Qc-@)f&DTB6{s^|jZ=Zr*eAc?}DT-t+Z7 zV?V+Jx~RgKjXS4L$1SitAV@LCdPSF-70)s}?ONR%O+Gc9*?E(EtGh3y>UVUmE!7h4 z3<#j;Et5%Q`W^{zOZZ zMBGm2ZmJT*FiN23$?<%wvX1U49@@y4b7sj<$dW2pe9-o#xWIeHW@-e{JwZHA$5*LN z-Z?TgW;fVdt;$F~U>I{W_)cDay6@VB`2Q02AkhlP!(#7KFUrf-9TQ7q3o=I731KLo7@H0(*{cH99nH@p_wM}xm0 zV3?}Uf_%G?ynQ-c>%Uu*9W{seRChLzqg0wy7XcfruPNwW#QnQrmekQ8nJ2SP?@z@v z)iSJq$x8(T)Va^9E29@oN!tC%eWbsBU8=ukV>Vtg-8@`?i#I?;uWyAX=KCbOEhklKO(ClOjI=@F6$nf47t8MKMyBcm~&8|T`Ty@~y3lup+NIN_@S=Zpid_Z}Ai)*Eb4^d{ntqjvk!vz~I~ z1I*AXk}uy5r1B797S}VlyWfakCpKJhZaq$AaP{Txj^kzFTya$gb@pSgN+0CXk})io zAIk>F**ukNd4BdEKu%;KL$@n`J3%?bo4!1tF8{G~Zb+}`FncxXNFsjSSKj=4Njy=p z3|M~8u9@D~MAz%xOSYQBtOOo^cYhZk@iTY>XT*QR#XVX zuq)-Gg%FO)w(FoaWcCOMVR0}DtMEcsooZ|}puFRi5`8+_){^=>QgVY|d3h!kk zFY3%{JiNE>AmjRXtp>&MdFc0ZN4=t=fE2P?HtHyMZaG);t=ac(FKB-rtR3k*qaYVr z*|Hx|_pw(#T-?-tnwN2Py5~`hN)25JtW%G)@~2{GyX9c9Gc-1zh`{R?t+%L?StD8s zq&QuX{i(dJ1M7)>C6Uase!Go-_)LXGMg0i#5-t4Vs$z#9rXy-^xft0e_T{l|!G^FBy1XJqjvbk?w)xhTB24?L{`)>vn~ zrXv}tq{aN3j7F0gc-60wV8a=0Lm`3_5(V?=kPg~a7>X@Ho}^_1haMQcJx5gbMp&$d zUs*>c>45#NLX(jOkbaVk+jr+SdNV&St@9CXN9PXwc1^S2#d0LGzIjS=@z}r%A(7G6 zyQ$7d&+g!;tVZ8EvUI+dIjcNAt!PLk?DkA%*IHT@uS9F@o)N7}NLRx#MWn@p@%RzGm9W2VvRZl0Ln`9L+v?FCJx zyg}?h-KC3yGpaXP(EQXz;h7MQ; z%4e^@d#T9dK;g>3AR(fu59Zo{QZwUR-Y4n`@$_;G7ta*-Rj!?hDf(g=5tIT(>xsN1 zz9T9~7zIfowT|Vv`yMub*yAb+4thcUTzTUQX@m}$z?@9sf(N*@?&_G=S+`rRaECY8 zCSdQKl^T={1{HcMa-hAVvMWkueVbWu)4_OO94X=U>>5x5LQ%$GtW0{JQmt?{Q7H0D_9jR z6REpg@vxK8*OOpTT5&pX^Zc8I9Deb(jxE!hHeXAQcxP*Mc?UDECYgn`(8mI5nnUX5 z5U@Jw_YB*!J30xZA!%k?J22*P__w59F4vYK#c=~2$Zs_LakK?}7dt9}Vq%W97-Z)x zC_h}O-C8s1e3=_T#-O`E6@b;j-K%0b&nlt7@(#-{+o&g7TAtX>yfNcxT(P~=vH=3k zz$A*-ge(o%Y)$Qr8|{5l=t!<*(e~sP;2`wO4dmMuT8fFYrFY@eQ$vih2o^8a81ZIe z6rb8V&68~J3ai%hKkSBvvwvMY_aw_e%~^ii^O1{CM6!ph zXXvYIU))p$Q}CiWQVhurpb55MVtK~vNwuXGZdb%b%J}5*8Fa`LiWkuRqoL18BIw1~wn|#JIu5twlr8HEw zz}tz5Or$1tGBgRr@}}IO0BSI@YO@slBXBK@{NC`w+;OfbXijG8K3a2!jbWjSEy>Ki zem#lkl0#dAXWt_dNJzjSZ~5D`j0QZG_n!CQ&p;?`YG!dhf(9c>0G(vlf8IrxQf;pj zB>kbItasV`j0f2#peys%z32}(1qcgCt+h2;+!Z5I@yhSXg0_9tdeL3jrso3L0*+kF?OMPgh;mZ4|wtXw+}cQ!24Ta&SZ* z;qG{=GE#nf{wGO0c|II21-(tBZC@-27>oa`_p=BAAUx|iYJViN{GZsM1^m#*hL7jT zR~gwl+AoS&=nV+XH^*q$Q`vtFur(h_qG6HrB9FSnlS9!)3rb=x2qbwbnr5tmcDvP;H=rOFa(}(U7EX+%q59uPJ#xT-{m1P8*mXC9&;B&J`6YdgF*b2~p&N+cO`EEM045|VIn5ol*99~Xr~ zUVUYa;k?5Lh4s~B(pw;vwqOiS;ImULF=iEu2fH)zXn>RxB>ASnUZ%M3qOA94EHMBk zetOzm?V0~Qv6a9d1UI2*O+v$^2=Z3Qi>LUzN~j32Fl4nYqjeW}>Esih=5r?Fpg-VOuH0Tv7vRlbH5Dy zI-uwhD<^{+Jph0|S4cTMd-sO3jkKKq<0v^%1T-TW;=fHx4NW#JKdsobMM{TUYZ%{kLk z2SHxBsJHO&~qJOSZKN(5ar-JAt>JfR$NZ_F`%Vw6&*LQ^|i89)? z5thG2jWWz57izr5ozz0o<`($yK=8A^J@ZnP%!H_g=h)Y7sZD~O@x0LpQ}^eC=RS zWMODkiA-pfylHF-(imi0Sdg`$pTcc=v-b}kgBE8Ku?;xIw=>xrPSPq-;t)j9W7GVs zbr=*$Vg(Q7Rv&!G3qa*SjLf=&8vOfOcKoSYJLh%u2r>};H|OOjid^bc0PjjjRu>ty zd|hmgoWPcV&@WN|5M7oR&PQ}3%85{m7v3*XQ?fNC~mU+RwEt; zbQ|0?;Om`8rL}i{vT>+g$)VQvV_$=e6C3_zi~9#0Ef`X}T<7e^bwb<_y!s0IOuE?? zTnJtK5{6;by)JN4+7FTz%XtqWed{f)6>u>unuKUHebaTmgDIf53imGg=^RCEZEMDR zoVh)LlZF9{DKrg%mG0EK4dnJ}A&*?!&XKNsZau#q9BBsmtjXqemQPMTIC|Fti9>R8 zuRj+(NryHpj8=0{saM#eHj~Rvyzw-A*Y9>t|KnyUNTUQ;KgToY^Zj2y=HI-V{+kB? z@k%f{2c;a>*iU+wC$&Dq7l4_aae!=hNTrym*<* z*v{=a7nBle^X2j2RQiqcol`E;+*IifiJ}`eG+*dQS{Tzfp&92=2(Y)R`JFm8fENs- zV4aTSueNtjw~`iV0^ex?!s($%k1ntZ#XE`8x}71$YrODhx>tO4vWz;^{{b9rfn}Lo z)Tac`C{~D+$IF*Hf%_;c_k>f)I`gK}%e+*zf$z~_GBmXxaz0{1ERwUR;REpVm9t4dp@+kgqh1NUO~Au`agLY9%6~K&``4 z8FcG{BtaOuc*524nUb95N{!XUGqlGm$4hwFo+SU}jO0p!NU#-4J40X!5=(Qd)SGAM zw;>QbL0bRfANxipDi#;C8Xmg;h+BW?g2=yr?l}9PFSugJ*`j)M`oTQ##$;1*in7o6 zg<(7Ac89_ax@+!7v)KRu82nb7nSsWZY)%roCp|!-)>85Moq1$=9+NH%+d6!=r9KA9(2etSVi}Fu;<1OMW=Z7YMHp+}HXZGtP%1GdZF66W>1Y^Uh!3j&Xg4O{$FxqK zd?Q*fgqZ2^b^^+}B_&C^QPjsd68eCGn8dSISDLYc2!07^A7XKBO_=~72W~BdSY$%&UK0pm(XxQ5wm+xk7-g{5PoJ~B4xv_7# zX^1J!l9833hl*hzF0Q|?JP1_t^KHq<5g^Z>t>^In#Z4SX#9f z^G=vcy9EMhp(zmL4#Vgd9>PZ(v5nfdA$hWkNf3pl2a()YJ2;h@4ONWeG|iB2RuJuF%pX zGM+LrY{Ypst92tGnos-i60g~(yy|~n@5_9{p*pf8)qi!QxG%ExXuUo5U~sO)fF9OV zO^;2GgolO+iaQ@Ww%*n~sh@sG)I?Nop8f|=ZzzS2o_Oc|_PMl=4v~h!|CAbf2n*&hh{w>_)q)>Y9H5X3>{}CLoZ1m}&4Wp$Gb(O>AXqjdn2;6zT zkF?lzk0p`>8!_mUPW%ZoFJHQ1l}PEl`=e#*{m(6o$Ik8nwBxMSUy#Wn0#LTM;{vD% z@tKJDPvEXTVsyz>Ojb!6y}IUYaUYyMCRen5C@-D;qq|8CdLmYZH7ZOx5_ zsJ^swdVSycxs#dR(uYmk_4Der#R#_;!RAYY)JgT1pK}q$Tu19#Q22jkO)p^?#Ww@!}A4~R#CmzF#aAsla z-fO!FYi=*k^`j&d&qEI!Hzn3b_f;961~<(}oa#xlDi2nUiADqfhbhZ-Kvr6|f&0L9Q@uKhF zWfTZiAG#@BUVQhY7*3>V!<_B`anM<4&Vb3nT>cON#s>JG-*Z*Vqqo zoY&HxNb=;`a0KZR!z#NtgaAytMFhBPQOp_&lWCtdrguO>>E$m+HIR3PVm(s3*ft}% z={>86^X(bD{ayK|jQxoSNJ-8+hvxZX)~2fSfYUsRnB?pr%RhyYX6uj68jFXIa^^lt z7SY8KjYG&>_rmCX={M?T16_5pFTFj`ZtE#{@q)D&y*2s4f$e7_{NLu!1JcDA*pFrP z;@Z_)2WNtp;|6|(Wve_t10J8MT`h^@iUzs)}eY1dQt zgBa83>*D1$#nPkJ-&%+D4GFG#=EtNwmH4yf>wJHfAqQM6Din76f+u$$a?;retg#HGK9Kqe?aH6q z_$|tVm~H(lKYUYNl>ricc&zsZlzZzrZxqzF?9VYHufmsg<2$~0M4*!wWkfKh(myDj z+GH&ZhLYG*`+GjXW~)sXS}gO!5D5Xoq$5-?a8>|m9aau%;()gd$clbJBvRdLn;p1C zjia*s8_zuQASu!P+xZ7B2c2s11q)>?{MW>q*SA<*AUZPmo6VzQ-#2xAA>PbRTBN~b zvlVb(;cDoD$nmb<1Gj6;6M@9kcxEE$E>mi$)5kOT=~RA{Gn$20V(USOmf1Rx$W~u# z7);`Svh%4lkACtEwrO-QI1y&MF=?C!3Wj4WFVh8j8GNdoD)TFwRz&rGPy)uDH+f$? zopeOA!8dPTEl5I9{0jBc!@GVXjCon!3%fDB7b{uk21s!>k~zPoyd)2$Cqv`+VKHl? zdwTK@Y8is1HmzfG$-vSk`xg(801l>PpsX(3o;h22@^W4R4Iy`PF39xYDxm|a_zeH* zq0ruRQ-<^yS-G3rCpZoy2tuZ8qa}$)!0AOuzd{wW92Qe_h~OCvBZK3iQ@5f=O0zMY zIytB*VhMhqmY<0Vxh71k?tLD;kms?3F?gh8e}I*t5mV-iacT<>ePvU6Zzbl-D`D5x z#cuouwC~r^BSjy?a*Mn(;f;m&WyAEU%8%TDb?=Osan0mCHu@l{Y7iM^Sscn@~-4V*M0-E zN))=IVe*}>S)};)K`t&sch?wG%Iw;&9ssQ(wR4#XkOD}L%?z;9vChobycJ?rKM$mp za8hFjzeIiTTHUSDh!L&WJf2kpe!bQF)<@M~DvXn3(=g1aIB_(AsWOu;!d6BS$=m#x zuXJIo;(wM_b zk^dTPJiBgiw}g_7nS!^IqO$1v;~Q8~Jrz(wleUq^Gkz81Isk@>a2;QLlBbR|8lg|s znos8eRH1@4uOj`&g^U4TT5iQ3H~|FIe|A~#hmt6DT*bUOcpDz+L(XzMOm=s|i!%#j zsP-Hp0h40i?UL)YxX7v~-;JX0I5idF5Xrb$m=F$$e`MeNVb`50{?sWy zt-M=*YygCWO8>Yt2nODw?S|qz)H1C5gC|+-EAvc{I=8aJg=Y%cFalWzO`B7n@2!x+ zBS=KF$OB%y(*=7fySmQTwljcsXz#qKje@E2kmgn9-E-YF|5_$Q7#WslC4Z<>X{q@T;A@*@|jLk|Kn- z5(iXp-hiQg9}kKwtG0mH--VZVN5pjhAClg~pUTJo|3BwAI5;@RJY*clu}Ah+=WvW; zA0vdaL$b1xWE>oO6QN_zva@AJkwaFZ%(9AvR~fy3KHuNSs`~C4|L^ovi z&Wg1Xo?tq*=bQF?Ix3TPF7+{!sKHp&y-?+(&y#>;D)5~@mnwnwnVI;$s@1m-Y9-6% z_o{z1Rz_3SNVfl!wL!@|!Wwp`QROU~(eLtn{kAc4&oZTbIn$PIOk{#?>;L`Crs@z| zJ^D(4{Ak96{JqMM;CR~xn>R=+^wr{7$wvqS?XTsBo+YDPzxjTb)&rA79KXPy=w8Rc=qi93i^bdE*QJ6?HYqMq8*ruQlA(T9_dRm}84J+INaM8O%K9*5R*TZ;%PukKD*j#1 zSDIg8)GW_oSVY{DVS;C+s|^aSWix-?C9GfrAwv;J<^p?aI#zHb0bR`hLq$(AJwp{C z>-&R4AMG1*#mKCuf?J9Ld=9?6=o~dU=)N|iYy2wot5sR~mE`=80za|!9H*%DhEfNg z@!_kQjVIiPm*VAf;^Iywx?IA+!xDPKZ{0Rx0Gaj+yL5(#hSLr}H-XUQd_Ybf-zIcOT89i6Ba z88nbOn2gVmDD(Gx(1n*FQO9jc$S5mpmpBc%7IECzzN)OQWP$f8`Xuynf4pI=4KHtr z2w4nPxE0Lv?=^1<4C#2_X#G K&)8eGvS_<+lE3KK{p6JJHOc=Vj%QQ<;y&<+u^d zHg`F9x5p}}G+j^aETDmO0sfmIHRrazZM6G5t?Gm=MtQN|fq(HPyr2Kse)yRTpxG=D zHu(HkSI&`~@rICfzsxW)S{h20?U`f+(VIGi{8oS<9g#e%zYm=g(uen3=@NzmO+-mF z0jrNhu)nleCgLL9M={k)9xxDuOizc)J%j>Sl1aeKOg2Rfl)-pVIGV&FMBO06`0PsAE%l()y znW_~4XF*_=TlqvsbY%fB7coZ~JRlPq*n*$k|UD#yyRc?>zrClYJeQ0sZyR4uolJ$^i5y220I0utp!~fUuaj@ zk%j?{f&lkGFXw0EsAssS4b!7|SrPYu$&2x7t?Miyrz`$g2#B6~aMbRDVi4L70s=Z_ zIm#FhaYCZB##CC7p8ybmAOIi!heUE*H7& zbXqP^z-{4GXtI4RZ8aFo(0iULI>XuWFl|YuXifQ>sIov!IIP^`tbhkF4;g!g3m0X@ zg2t%H{gFP;Tp1s{q!Pr~(l9^OQN$MR{^Vr8$u?2Mb#K`WBpwyY6`i>EO4QLGEubuy zKk*<|r++n{hIit_BD*vd6*XMI=Ivy)Id#@Ntcj7kuztXc(C1yQ!MvulGs+joWi_ek(F1Z1Y>*`FeX62wD5qR^J zw$l$ScxzYieAW*I%Z~ z(?lq*;$8kgI7VwVsH~sh-&^s{@{@Wtsc5RR5<-lU)9fffLmYvjqQe{OWf*6U{m0`a z3!H*dWv3Dx%YVb)DKF0~T}^|hJ}`z2>?d9UMa-O)swNlz_(mg1_@t(mrB4R23=p{? zdzB$J8~Dgjpk^Xgch=jGGmE6+n*7y3RQI;D&VNE;BIlSGA^9xUk?wVpf#dqOO*s6k z*E8JE_>hu>!Yyt=h~X{HrDUGieY?J2Y1{<7u{2QhD(Zt=fv0EDh8ejbuiI2MCIxS= ztnq$cNaQmURt$c$D@4&E9sv{D9kwgejVXFIzkQFHATeOTV2ABS!R&2;Msj#+En~v?zuPa1j-6p7Z-Q&R7vtPI5PEE zfHSp(?!H>7Mc(IG`S+(>pGL&IUU?FX&5n8|bLUKultC7`N0TWbO4dtc7%+A_#s9Jd3fZQuh2$ku zAkknv1R=Z`R2E4KIMN?o+EcB7;oJZFd|VFTjsL!7q;c)VoE=aSl9k4wgF#89Kc!Bu z+*E9wtMhJuS7Prb`~Lf7APCsV=6)o|Hv5UTd?GxE%{x0r+vi`I{(vC;_u}g~e>zS9 z&+1+cRnVqK>j(>k1ut6@qge-|9Y6SbS;2zNc*oI_VpD?-VfFl8Ij7o$EG~JUdtD3Q z*AKv$g>C5l!n<#dq7R~Sw63m8jL@vt>rognfeoo+^#dF-JJLk{3I}*!T$qP~0X6^?;q@PP z;$g!q7)sh<+7?R&egADY=#%3*ni;9d#z1l#z(lCqu34510g%04^6BoIMc5}!&7dz0 z2_^o`Z+?RW%=T!aBT6~L01zfOJ=SxDPz;hS`2reTT#|WoWl>y;X{1|>IxJH#!`sWH zyy&H7k(1j9s>1)!i_-Nb9`hWteHeHBRa2C%0DK_)ZK3B|27u|M&iunRWQ?ELw(LY` z=~(B2#gWLQOmv%0=d9^Tn{hS<_4c}{k|myyr>wzT^r_cb`0!El_PuKa&lp#iNqDq3 zt;@N#P*Qg2{DNJEzH{8>K|=5RY#<;LGyYBFb#|mXHd2g5<^hmmM)`Z=%Bb8aW9oO= z%_y4Z7{`K#UMs4ysYsB+f^;UQrvpn8M6W4xMLtO@xQ6vZ_;w_Xo=aOtKlS3LJ# z(J$>xjE7;;-pkw#D>G0?-`%E~FVBo}&7R+!`=tv+PmHVnD%Z%+gJ+VCsg8xN8S6wv zV)B_8eATDZfnx#;44YhJBoe~6%+E$((Ok~DQ=|jwci}OYq#{@4JT&{zqy6)Gyn`J!4J%QWh28Z3G( zt7GBxwAv_h@#w0O{Lt7v-Qh#`G;vyV1kS*|GiyC}CE}CjNh@gdyK(bdc;D`S9SXWT z2b~Q?w^YNqQN-tI1y?=4g#y&X^TOX}ULVR3r7t+({NA;&L}~qb1C<~ zlKiZ~qUv`Uuk9#*FYDIAr`ZL4Wi@}}0+dv@ek({nT@}PWQ7&W^gATN8YTUd z$X8ooO_LG-b~hHbtdGlNMYzz|>UKK;ZxJsQ>S|f>Qr)3iR;* zwm|>?DbWANqyhm~OzQE#$@dS?7q07&VK|O?Z@;BlG>2`j46aCtldg4`85iKU_^EZH z&+yL}krQ{F-Hyhff2mgix;(x&z4e}VKbV6mx}*M#`dF$w7%D| zEXKK#ToyZ-rGg-w!OE`v^az-P)Wl~uFhZM;pZ7-<#{`H%fnW}JHgP3N18W4)jVAR^ z8)XT~3ktxm%Am`VBzeRnl=M(p7$tK9U{LdcHL46+0%wI+JEt>Gd$iM_eeZn?R2eo) zOff$k%I1CQ=-))elPz2UP1Z4&7X**7;?iqnLZ2Un(2$j(mAJ7L>^}=Nk4!jA-RLnv zLCo({YdP8up}l~TUU`!l-LWT;XEM~8O6nnEPo2ezW5-nriIS|Q{iOK5<&>&1EwSbR zMJ(SZKrN&qv-p%rtQhXf<_bi8dFlrW5!$10Hx`{KBJd0LF7iY4z3%$#s;3HOP2y#< zB$b3vHa)DB;M2+2%}eGz@+Isnj~G8aKvyn&*7Gqs_||(ZfuHmi%YQoN2nl9? z^@sZB3}s$)5M}Q+_gC5_R3BP+zBsUPRxYL-qo_YyTg&t#Tz=~5s3IlbeW5ctgZ#So z?nyf(wy<%-VtcLsnp!XryG-NQH!rIvku+?e&ps#cy=<4n@O)OzN>Nx5-lM;Q*B>Sg z$gLd-uT8xAe59&k*+!fF?=UkMMbi;b6nu@bQ z?xo3paj9+4#*1HK^of5Thpr-;1e}K6IC8aG89s>?yKm{kP3_7(rL5hYEA@BKoKZ&A zlgjycBOBlL`h~V_W0pLlDif*n?oIunbh6!zh+)SlhA&vj%5tkBH`X-ipNUg8YYhoh zOkDKacI9E@>@$PG$Po;5#kYUcVE1Zrgr;BaO(FUf;hgt?r}yo{FYHXz@(X*Oupf80 zroOt<96#sCOnD5tqsb#>`yV7yhNEW)TgG`q-p?nK)9bEHtg~KohwhNLb91s5ZD^<$ zeXV(7OUSGdrVjPwB98AUb%cbWq`JqY)(g%{aQ+-$4bnPVDDje%==t#Or2@T-uPy88 z-cy$EFr6uD%}1MvvhK=H4QhjLyrss%Sl)H?8-$FL#UeEFN&@lw9^Mx=kEj~%pc3FG z{8?#EB>b=K8zf<|2p)u#ztlvU6$v%$ad)#x49+(BLPc6sF)SLTzi^$q+YwaQNW>KcscP^lwYyEf4EG<@ zdKKWYBMR_X_&OxZfGm5R^_!l`VAAe-j_snFR1xQmy!6_4k{#c225Y2l}c^2s~&_aWI)@ zHM%*H15Ej%RB3AVWZ^Tpu@)axK0^F$ilXOapf53ZncD~_tyz1|3=4@6$7%WKH?;d_ z4Y!zTN;)RQ%YyeYu@#S=-!pe%-!6`GbLum4&>efDn=M@$wXI!0|CupH}_sOkT>#k8h%G-Vk#GX?#!+|A)s!dQ)qXe*)(j{?A-0LC8XbH#kRNYQgp>3x%uveVvk{!0p{zc+26%{QTu+gYdeVbn`S*B=gMSKW6xpO#yXnmDUF?Qlzc1mV(dM5@H zps#lAK{VHjwf7BDG1lgl4YIqMqKAL7qvn}k9y?GoU&*805Ybq^2|=5mC3)39ha^Nk zmZa87-hDmf2J5{3)zfA<(bx?~GitTE;7|fg;CA(P{;r+Mf4eg!v|2kbRg{9i-!!?j z5m#Jr52SGT>eiUZp7sYx`#8bM&MpCC7tUoUA<0&wYJGs*|NU3$Vc?CP_r=-tCCA6S zEbOX3n z9cBT|Kh0lb`=+MkShT{K(QLfwFN{wKfl@P1+LNIC;R7EWiLLCK$8aw5y&^H%#1~(V z+!OOtVl1m(m5vGga$?dFUh3NXHHNdL`oSW;&M4}X=e&K>j8n}Eddev@wyVg?AWlI< z(F9sNkI=Vq$lU-&^@U&EIMsdcw8Js12k$FRI0O)uvlvjz+w%Bz;8)?U^#mKwu{AC# zLAjWS0if?kFZL2xqS)rVN7=5ebfy#9xGx{1MoX}*xUzlua4`YZtD<2R1L^t+@8@n@ zXK#IWt&95+Tf!opR(xh5#E)s@t+A^!s*-t+RPFub=lApu%ys#{#*XlkBjqomno)5p zG&z=OeYaxR>m4hq%4)Mhcb-GWKGs+-S(Pfvx|&{4)ahk-l~%ZRY#BIe40NJ zLna+|sxku}PEVDb5c=-~m{T%_s#6kb;I?Q*Aa9r^YmK7LcQuT6;~$nMJ)(x>{{b2R zk?@g>H38ZF?D?AUBPWH-+|=f;gtJJF%eQ7C9_P}q0D20M>V@4M2uJHJ5$?B@Wn}bx zsed`GZJU;zjuZhstbty>g9V$d826CiWh>108U5Q$8!cD4oAae(ry8Bn&yRLKB}d@n zeWGgro8eXRsc9~1_KJbe-)z4&UiZk85mdK%nVLLz=h_P;*d&KT$0nw&(6CtFzE=WZ zFi`4iX$9~64w7T&&8nEAc%@0axN8h_)sUqB0EY?M)yp5sWINcEP_i7S;#@g=$8Y63 zBn}d7+t#}jqYxeze@oNoSzj0UZS;4DKA;uM#?hy>LH3^Zk+Kut=zGC|!sD-=^^dgB zd^Yh>hak_&%da-D;j%tq;KM!s}5yt-hAnn&Ke*M_vpJ~ti~-Z6a{C*XSg zm_D&;>M27#t|{cu#$cP{GFNWd7^V1kEY9wqMQn%eZ()OCstV2`b)0D1mixc6kAT`4 zznHa!i7>U@zbBKPE< z=Bsg+1=q}Eu#)b(xci(w7IoB)hp>YZk~H0+`eGRDvBN(yU6qgNOWd&2ALGg)xivLP zy2Lp5%!q3H5(kD@@sPUj!y43)mNo zE`zp&e4_S!?Rylc$5lRc6gtpu&s~I3ysxw6SyxasJhZ=C=KQAlNv*71&Oh@~kC3$t zIhu^S(9v^*u;4nIn@=dDMJe`%H=Sea3m(4~teUAqraNr08C`ivpVw$MnpIfuepCM* z;}uiLKzK(_Lt7SDS7J?Hq@yzU-K?o^&{PNmP zcsQyCS(~X>{xlkeHuZNeK^)n-Z}@|FTGMDs7a63+)RL?oDXlLW>V14muoMbinkHBF z(#t*C8cA>iI@M!IsjYUgd+_M}axG?x1Hqxp5hM1+t}m{C-U7&de{JR^gMhfLv@06S zT1In| zDuwkUY){QnRNx@he6cy5WG~sF)R!*2hZ7rl=_GOns@c2hY2kz#5GCVql0+?z+))LPi8%sHN6PjP-7{%}!sU%>XQCaHKvx!b69tM5}Ky z&Pl3M{o6*rT=9IE}k zc*`GM>6cT?wONEu>P^^|`fSS^T<(6J4}{Vx)K1u4`0kHp{8QB$Lig~Nq#uEl_t9luD=64iuAmB`-T3}?U~7dy zjE9eOgLwg*;(hJ>j)e}3NUaNes6TE_#rLTq5$yDil1f?8UT$lXlxzI~=5Bp%TuBiP zUeXQiwOWOEIG=l`e+W8L0gm`)(dYP>N>nes9y!#1ayREl!WW3lHp_mqoz6 zWnQ+{i7k&$zUSC|kwi-a$sG-=5<%8{acJ1`R-Zc9nZh=Ty*2f9YDE7Ib+d{y=?$oh zY}i<+N6~(BWn1;iRT2|)jp^=P$MqP~ z&kP^*dHg#C8`1#r^S*N{R96>jsSBym>|iysE+T@1dRCQ6P=Qqm45>Ci1^D>ur*|>g zL|y#uzdUG?_f6&VN2tl_pDg<1E3@tU93Q!q8O>kStK|(t!u{R3uyQrn@Ee+OWOJzk z?ttF7`XyD4MivYE}2UhUi(NYtqAd|Obh#QAF9tgtL2LSC{PZ_zt8%+ zqr_V-6zAXg=fRydzI&N2=3%@}R9kbyk^Yz5V$9Vh-T}4|x`S>?>lsPirLT1(#@2^D z_^EmYKE4333M88jKlqcS1$hF9`_c`%1s1+(0x{SV{{1v6R>IZj_py$z<6(T%S7C^a z_UxV>wl31;gB1_@59tW%evh6ZTUCJG!&(@b|63!69Fw2CGO;`{JF@ukgZpDDUTuy( zM?1?m*zvHC&t4eN@$QSe7)E?4>uv9o(9aE`qP)0S}gxwovv%gY*> z5meeOX?KP<^8C1GAcD{$??V zXIO}7<|r91XjM2rphu-QRv!bQ42%DF$Xnj4d87dih#NM0Hau_8wY^HIAh#H@6lqrj zP&x_y=3oHb_p!AGJh?zgR$Db)D;=rj%<@=@cAHC0&ya~U68s{yH2d8C+Z|l6S}Aj< zac8XlW3A4KjVXdryLkQ#d6@1ypYRm7NYX?w*t@+(r@1H5O zf;&wAC34Is^?2M6vtO9L?*ii;Je1vjgrqQ85>xy+}*=pRid=mG$OUtnTa^vg}TA`-CVwS6F`#~WU&b!85D7b$-lGYeB` zEzAP0=MQ^Kl#{CoPDP^nEcU-Rn1yJ*{>Ap0QGkZ4v@o%`dz7XWCx-c0oQ$R%l(V8r zqs@lX(yV#4nz}^F$k7ZOuaLc!E-a-9Z?dZ?aUhMhYR%0>Jb&d&hMAO1ZufZLrvaY2 z$Fo+N2UWgCvUvW{Ri|=4AO1!Uv3tT1v>2Ed@w=Aaddho!U96Ql?^Ux+mY6ZS+81N~ zQ(wgJQ6T}vQ5(^3FK%G(G*K=XASW-QDrT9MV65Wln5?BOr1#(3Vfi4{iF6#Ah!WHQ zL=jgi;cJd`E42*USFBTdIG2Yc2q}g4K@Mc4I%bDQNb?POD1^1dtNpOSnSFkae z(1O%R55J2c3vhS*5bhLnVUN>I9>qOCn8cI`LWB*vos*DL!j<-HmMl~Qe_@wHdrV_cCe&IrF$$U9FUPy{vL*cESWb-!{G#8=4)BxT^YBp;PrviE z7J}#3HoiYc)21`=eiWnkvEL&TB?TkpEc|S=a*arGc~Q#l)6%Y%l&;;Aa?isuKj|X18!mLI%5L zXs1PkJEV&$wfBpxOZUr?;b%LInTS12nPmk}Q$wqLR=AI`;-E~kYfLasTb!Ra?tg%Q zasiVKkb84Lwm!C~NtHB~3U$Y23gR)i=?LazX6`U>X-zKs*@Q7kD(qQvrtDk8K`j(j z)fa7&Nxny(&u~>Ie>g<)waR~+UdgFUVL#}CwMre(hswN>AEp*WQbRURy3$>^Bc`9~ zwjl~TcBLURqt2_2=SJY5Jcz^hYNAx?*w~;3PaVy9C z7C9;19M3BbLKiub7_&@W+<;9Z8|wp6E9YNsPat&YDDA8m`EDe|j^C|0 zh4}Wig8zj2;Ped}AE1U_F*#dLq5F-mj3m*#VHtv^Bc1<9ba`FeK)-lr2sKt)nO*o1jnS6|~w_ST6I5YA)Atc#Vm2`LzU4pe(Vw zq2Q#r&_&CFd6b)yEmzuGN&~F2p5q%jj*}AFsLrHCX%<5f zF)JPm6+d0?`u69$yHr+2%NH6&3n_G=`D0r8Rpqk=OvK&gQRdMZJb10hexdRy{Zdpk z4jF5MSET7=4S}GA=bUGn*sHDzw7BT(puORI_y=EtgAv?g8nlIhj8IcZ$FX}C| zm$vvCxdBnG($d7PzfZQ=ebgj&0)>+x*%1E_?1TH2_5j0If02^fbp9{q&!g`Qztlg3x zcN@N*{p=68@>Xx=4M!g2(8eU6IGxH1bM$w}V5txXq@->E@gZ*wN#)zHYR0ol6}imD zopD085?ZX;if>h*i}cIab{Q{#SLk}^$lrpjzkT>Y+&%4&~FKgWqxPzTM)q$uC*Jd$o6LP zmWP7j`mI5iYsL!YmqOkrn2&Gc^36=hSAxs(S~XJqxRT_+KR2N3;wv?&GHf(PO=FVc&u{93tjQ*nQ}(cN3E!pmPB(y7qi7V?!KyurP4P)F0iu|?lNqz#m3r!)%N zamP(W4d;mXw&nfoBJYRY;yn(ScCV5E?t78i>5UtvF&`6f4|sVhYo|YNKko`u38)wo zrGpmhM?uGI7E`}7Yzp(HnifH^h)_OdF9xL7i;STg)w5BCV~WDDsS+JQh*t+*eA%4n zlB-W4646C*E~JuNl-}DH=b>Qo-szp+Up7R>R%+Iv9G|SYfiy#=Z0Z~8;agmxg_bUh z&qrqCG{-MKLA<)kSrTi%(&RbZ@H*s>4b(qr6g0DRwk?b$n6cpNJ&(i89HZJ!@nCXd zp-Zx;7E{XHt7}9h+Aa3d6(NE4cX7ofY%uNtUHLYM4-1`~goLV*V-yV_(p7M*?5Ie( ztRtEHC9IZwa`N`&XwJ#WHz0WH8q0%nMfx_!$6Ja1G=2DIEqOV-3%~B>B2YULYcVp# zg3IFuMQFH{qc3Aw<2Rgu{U=8QNSRvJ-HaW~^;`5dTTVUerH)LU7ZzXEB0m-65rwT( zqrY2TORd|h)gcby<(t)WM$0E$BLDQ}?|jjvW7WE7;M79wkJmJf)5zZQ_*_TCyN|yf z80q3)CQS$02od0Y@%56?A-pza&Y~h&0)NWYICB-1cyW$DDCyz|6~j6Faax9Qy1GH0Y^yERH18!EZ%2#(;-C-`x)o;TFZ;-W9MQ z_}#WD{g#KQyvP@c2TRx%Nljm*PpjIAQNmDtgbiBjf4mkVu{$bcIct1Xp~LKO-Fwf0 zT1mKZVd32%6&XCcjKe8{RCY6CC;8S$DKc%EvF34!ETRlmhz2P2pJjwIB^ER>E2q$MqrR>G?}=|W;CXKhu;Z^pouh6 zgG9na8hWcVqT}XrZhE-T-T2QrB?d5%e?g-|eV-bDv-h&=Wu?c7@OVEX(SbyYb-BLY zU2gm-{|24j=u;3l3RCk;F8&`t$L`0fvBBfnt8_IlW9&riQHLT8Zps10Y-Rq*d=Zy> zFo*9V_y6&fOV>ycP4l7$SLfBaKIya{W;MPWK zK6viVd){9lT~Q^o0p_0qvwG^*n;G0*$h+m|YP|5TZ{(NpxS{=(s0><-ht+R| zJN>I=_vCueqQKZ7vPPWi#6+8@*^K2+^@0hD`4+^N|9;5^*55QvPLz(7HQKI`{UB#( zlI~~1d%gZDjP9P8R+rSyPK@ZQ5CoI>M-!|+B{0X@yLyMS1! zuC8wDCU>efu7n9~ubqkoG;IwzOxK)M?JThx>xx>6#Pq&Wc7FGmNNX>pI;byGTYAdV zl+3g2{Jf{w24PDy(EHDbez4elLBGzs zN2hD7H4hoIVS{>!#Jdk?v^)guL)Bnd4c?M%L!FCz;9?XFx@_Um?lbP*FHGM!KU4Ih1+51y{9dEZE@7SLv8$9-1hl<0$pH<_ik4 z9WA>okR=xjl1uJmrM{_uTjAC_=(N#M!LoyU(f+Lh#Arl-DAh^o(viyT7Wy(RtmpMD zU4hqU)6_#vVd93}P*%Pd^)SOXG+%_^pV`QJb1U^jfr9CBHZPYY_Oo17p;3Zci)ZRa zSVQxI*F_a=pR~HXEw*LfgC^mzIs!LM-x7Fqy~71JX|2Ev&|8+9F!~(OMIv3l02P?@ z7($jUq;jg#fD$%^kUZSIboglYEDHj$9e-q9qWXCqG zgbb}ukxaV(GK`8wB0zCWmI+|YBXvrHX4#9SX4k6kdAxm2VjX_a_$PtOvkb9isQ*yY zFx>oH_7)p`iX`vu+0qc8)VfEV(FS$Wimj!ed-@a$k-6RN%oJUpOeRlbBC-!**xu** zwFfNRwfReS4cc((BuYhdFkI)}Hvz2PjHA@D8+|mM0Amp*H+;ta6#!Ci3oW+GVeX{b zJrm+UdETf?iWbH5Vf=CiZs`xzX2TKh^2mw;SwqNwUzu=dIzb&F@I6-KH2b*HwWh_< zT1onIy+s`X!1#N)-HmQ~KuDf!{ah@R;xp~eS86uzk-q*f8tKUxuCv1pNeB`QdIz4? zg1&QB`7y{$Z|cP-kyztfS!1YgrA?5lm(5l|-_fNryRvrM(y%I>^ypdYHeP=Yi!S_o z&l*zwz05Zd4lsN*fKi_+wGwq*jr!zUFkysUOsmeEa86BeGjTs#%uJq%nDysmITP1A z{U4w{SsJ*jxVDl}iZisLETcv8MSd}8WN@8-O3i}{jIP+e!{gj^z76nYG z?Snaj01eUUBq&4ctD%oO>4z6gI2w~M_5%xY##!{C;7MCf+&c@!>CNY2RLWZL8PRe| z+E_Hz6Ubtr_=?rkz6Lo&HKasH+GI>vK8VWs;y zIF5NO@5n&b_44u>y}`!pdI_8U@2of0&n{pES0SZcd*EOc7pY`1<9inA0%(}vluQUs zc|;0=-N8#ZCO*Cw{U)VgR~(&l4bs~!$R@$>0S zvi?xH(VCQi7qGLo7~^A~{brwx(Fy*~KN_jlt0qR?9$x5ctc~VK+DWUY-Q}1{oDiM1 z5~&yF#{cNrnFD@cHHeTzH~`abwTh5W^QY8OqU?w6%IXO0Ja-mtUdlyGGYE#hZ<}0K zfa|nVbXgScipe;>YHWM?K0OjJ$pgQ{Q+fU@evHcna<^)$GacHO2>SM`Mi~7 zOSTq+Wf|_zj6tvk{3UG3U03O<;*((jfR34%gA+9)b+;;%L);PvfX_CnNm|z@TqrSy zMv2x=j0sD&Vn)ZkU2qPS$fz%8^AR*ii_06}k%UP(Wp3^JdivSJvzPMkY=SJzYfYcD z%PP`UUyL|J6Gz!z|H9F$uii@$!sUW)1g$=TnQWz1xv{gSUTV$D#CKYqjhGAYwtvOy zSXxA!2ps2%P8;E9DdKkkc{+w$-ZJo4G2_`yUmIe$=b>+9OW~J9@t9j}UOlWjQHjJz zCkan&BjnHclk`VOwj@I0>VO&Za&`Kw6#fj)jR*72Vme&k)_^nGW6DlSAl<_!uvoBJ#sraN!4^4* z)+*35TP1Y%;a1n4eBfevo?fT3mIE1(O{GQFWU-rzqSMS8Dx$ih0c*ez@cm;>fWSZa z;QO^^11m@(bC6BK){sG0^(IcBuz;LqRX;xE*cb(xV+g%Oaz$hN1piP+8}qdCvEAm< z4`E8}KTUC01hx3S1q%Y+4Fvl3H}!9c-g?60Vd)k8dHv^BFVh{A*wQ`8oT{oTD;x)t z7&ntyhZ_E4J{sq$Kl1lidL&y!bB}*GprYz6eYW3Z(#x2d_3^bAPBQ5U>77o`s_|1W`RTr-i*PW>fS{{cbb8;-p7tdQlbbk?&J^Ina0AzobIsu(Pn~-Mu{F> zH_abKFYPH2eZE5(FXGGugxEg!mzoIAx)Z0;4HfhyCl+ssB-gehfJst;%WA|O+*xK! zB#z4VRRc)c1Thy^0t3cr-_x#s#Kx#K>9Pc|=f5V#ENLVqD1}*GINAV)2lq(U%d$7=25dT)Z&A^UUUwmERpipk(BxfOcMzCj zi>a_mxyyieI8T=wpq~G`Ofsr|d;3xU@^gqA)J&g?23D*T%$*Lk6PzVcV=ye9iwT8_bc=QSwUgj z{S$gvd!7emf_1`6_O0b~(RHWmKjXTa{#7?Js|swHB^2RlK(N=3<;@8ClzD_phIDf8 zt{UB+(eg)x+TSzsb93J*Ye@oK=GnG}b^hz34o_*y;mjxB+#o7Hsjk^bCvte8L2m;+ z-{P#e-Gnuc6<7d|bDJN+2ASdqDIu2J6@2%1t08J1w->3@ElZAt+u&LLXs1niWpsel z%4Tviw`j+=kE%8V_~OJF@Tgwt?nzOOwem@l_CXLxpqWsg)k z(*_MBo|HX!IUL!fxjW{-5b4a&7!$8RGJ>w^ihWKSa$?g=j=w9A)qtIPl_@`?m3Pnb zX$vo|{8JaZ8c54!EcGIgeFnK6SyB$#z z|3sIB%zAD+cqxEYnMvr-0FoNf@TYX6VjkF>6+@QwC$dPho4bcgwUEkpIu7_GkI{Hwq&m1i>q4<$2_Teh$IW5l{X4vWaLEMVn9wTscEZG3A8P(We)2y)PH6(oYh66 za_uT-A)@#ri;HbK3|FtE0m(pSVtQqj8+t44u}K-5+m{Fy#BjPz=kLX6x{{#VHba*1 z3(Dt!*)SkuPWt=US~SPTAVTt+E+mrZAs*V&QcGnSgn?ZINRK-k3eEezJs;e^H=<*>)S(@{?P^FWW##J_y}Jci#dpG#NP>4yQkI^U2v+-I^N9_hH& zx!1C=wQyZ+ZtXdHoo zf^}h7x8j);+6o1Naa}b*`$#;S^=^rgP|7rSIAJlDv-H$mcPs4`A^HvNL!%iLkzG z6`3$zr0H0zl)O*@^#VUEsD5!<(#a)VWiNFAXEx{e47;2a zn6{qZzlhWMp`YG%i(;wArckA)Tq2}$qpGH2sx;b_Hn>d^dzH64qMt6RZ#`pi^yr;NepD2lJ}n$2Dt7;>35{%MqaeFTDXm{%400I|l({f>^4Z7(fCi_#~xq z&?&qUW4I-t(bpjz0yHH3_u)wd1_Yy?Mk7it`5@p{rtjb~5)sg?kPbpey`E+6W6hFo z*#-)V!|BRy$~>#AOAtX0B7S+|7=_BiP=45HY3OVXAeN+gA)*NRrdAad5sPe*RVC^b zK?OQK*44(s4BxIusvk(Dc7?>!nkgS!(?XIVA*e)z5d^5k0$V$Ts)qwR5EPPd5l}@F z8JdwrVkBZ525Cp2n+S8duz_=wg21FAItWtO#J$~6>P9Fq(Ll8eA}SCRi)2bfLImta zQZ0xT<*8y$2*`!4RA*=sCct3Hhg8O9W|@sT0+A*}PH-!R5y_1%OmL`Jy&djVLV#mz zOwYJ+ry^!@SWqYsNOd(+bv5K;h}}W{V39DZLm+XPtk5Yn(8hfNoLJOUK!jYRMIjLc(j!tW zfqBjlO zQQo~nK}E+!M@K_LC&0$R#3d#mAt5FpA|j(?pe7@yqaY%pVW**EWMW}uA*JTv=3wS# zU}jvTpd|JY36{B`Ho;_N)lc6|Q=uGv>VVVcu?8@3jw`D6Sk9o82XVhnN;nHbmCChrv5W%lU2R;oNBWH?lV6+7Q?uymqT;LrXQuf=(@`)k6mK7rht+@LcxXrqbZan@!<~& zhr?~bG=GY1y^?oLw)x6CIh&#R__bd?Zwfr>POmApHQ+9qrh|Y~ zWH|zTSZipyH1pJNP%Ow-EtuqI{#b2z>vHly=<1kv^KAGS zmS-FBM<}2m6n#9;oVR6{IWIk0`na&*0SkxD%t6b#k_Pwlooejtm3H}(ek$Mv<(+(z zm>vHxcBM{|phw|oy8me~x*-{U zL4|fgVq5f5XWUwo_#og18CTh-EML-f_eTHYuCD=`*(bv0btic0e@^&!bfyd}^m+W@ z`^%-SfvD9%IbQ-XP59t+f;HaBh>!8a_rj%rX!up;LBVQ6x| z%%eGWYIDDcv^Zi*&wmbkve73?&s1N$)2gZx&bI$!JrK}3745hTsuL&m2DkDC(dr4{ zmFrR-pb|v*b8E+{_}PxtvHKBSQz38X*!wxuaU6)vU->EHjuh1IJ~Zmp(%PLq&_)bj znO#1^H3rcv-dg%dFBe6nHq~ML-k{15%bzRWy9v(UyI~R_tungLdeO|vk8(k2YRFHm z18=Zt2%;BepU(g6IN;G{*RFwRL8_ws5|Eh<=HF*@3ep5&u6nTYB_B=Ve;^<_#LS7% z{8h^F$B6A9mh`e##}dcGp#Sdtc3N^aNF1a@r#bC6{Fo%&F)eyjP$_cVd)T8?@K?jf z!+kNnir%)!xxus5Bf#IgT{wxN_2*@DevMgJSu8zDf)pQ{gQKTwOvUFV5nIp+{;YX3 zAk+8o7q$JcFI7E}L>s^LZcDUPVOqgO{^tIYNBmmz2LyMGc{4MGo{lcJ#&4V-$_nzB zy-1B!81jr=QrCCm$dsB)zjn9$r0Jd>{@PP+m(Z%-^NU#3oXWxQ_Y&EULs)ok`SKJ` zNYapHyEqY9SsSAWh|)sOZFY)PB-x~5tDq2JX8u|jJ6$|}>iWRMQLnQ+U1s%?`0Enw zntQUge{fw#wfw?F=G5KQ4QavT(D`-y@%pdB>-P485tj$F{h)7M2TaQ7RJc$2Joal9 zIz??}gR-pf5<9<$xl}%T5AgCguNkl@B>|8=ipVkMSra*U5}IrMq3hy%-&1WOZ(|>9 zn0I_T)Lj1?u}{Fp;P>YN^oypyO%C$*oSRp1_qlB#)Ih4PWDJ*zOQ8CM(!!v{@=rMU8N7Zy$qBH6Ue>b4^H)w|ow zwvFc{>}=4N>K~9A{(|wq$1_{a;n)^?L=J5xop+do;;C^o*~Ex4T7uc`AhKG`?>VjP zT|LTYo-6%%ZK)QS-;h+y?e%z+=DdgrfAp!{I8aK{xu$E?)WLBpMHf3qf{99--dF?zzVQ^~D<-L70P1RCH#2-v}UF!EM znpj+|&;ZkGKcNerC00?;!@Y^S#Fh842`VN^6Gm?@93=6Zwn!oQ>Z%kG#jndk;P6{-5pLg@i+yZ0fu>1i`!kWTZ*VL1SbevULX>!gDNH zP*+YJs}1zCFgXvrcl&k@&3yJYEvV{?T?=h*RxoD{{Y|Dgj9g1S4So;#7F@N9x}Nj@ z_FB`qBN!sQa?&<@hdpYvsf2kl*eDiseqQ@LB-^*e%VxK@1S@R97k>72F`j?sG@ zphu2&J$|<)y!?J!_v%r2!zBW-*I$60qwECzlHJ4cOY*QN05a%-8H3VjM892>NL&$+#GY zsO_VQwC!Xa8)JZM>zJD;U z@LnC$vKd{kajrsL6t&TpQKhzdi_lZ;^I4D`>n z8`HV-It~9T5LXV86B7kBa;nhPq$|4R(;3XEDzggI#E=6q56O8YBVk>iiOL}~!F z&{A+~5B|P^O5py6foI{CMYxLteYqw%`C`n6J`_v^a~e1@T7Yibn6z zxlg_hXo{aQ>cC1EQvr=fUnz2Hy~Rm&Y+7pTwmi02RVA~Qas`y1(Eh>Eq6TPu2|$|e zC^5vLjQ7qXSn+9LyZ1Pw%dusrRvuO&R>0%|M+n|@1>BW)P?~TZ>>K^$xA;2XRA@OG zsH1+F(a1iFM<-!I$g6H3^V5_uRIVcRQ%16!O1WAcJ8=@X`b3mCfM%%w3p0kgiIzTf zMS)OX zn|#UZy_C!ajmPi2#D(%Vt1oG|v9Z#J&!l%&Gb*5m`@<>IyzaSeYB~3f%s>@_i=EMj zl<K@6cT_NK`GEUEG5$1+}ws&nFpLb2`h>%&q?36(&XY%O&HSP zFA-maHq(|DI`-j=n)@g;?sf9%9~{|Gk~}0<8n4NonaRmQ!-CZ43fU2MR zPf%3c{AllOZ}xrrU+T==MIC-hAT6r&Q4y4Br(&Iw+pIr1uXwFACmtxxRxz5WWo~+> z342cBdG(lig9oid6&lXH5o^;Z*X@9VWCG&xs%}Nq((8nR)oH5M*m9u96! zZ!tzy>S3#R<#<_{xek0)zEd89V!Vdq%y1=mkY8QEB2&&vKrkp7|n!Q(B+Ozpm*GrgwkvLRk#gJlK@Bgc&^z0znB)|Ev7-}AqNW#t8A&{@~*&XuqS1gNj zj^@Hu7-E$6Tb|8Tr8-KpxLPV@k;w5D0{aJdx}<;nMfQ)!n-e(j=oT86r$`oXrm%7! z-G#QMFpWM?^MZy+H`Z2RQ_=m4$;|ONO!PGs$f;3@z56B*L zj5jE0UJ&w=j{WU8w=SH18)hStH#3Mp!6Z3}uy0v$63F3Meyea>R$_Yfr`%g^hIe!- zEt+FtVGeRn@?s7iMVlu;Qift%=7{p%?Y@6@m>H>k4wy!ND-A|{pQO*@DoROIq2Ulun%cQ&e6nXmCf6Zul zP4}8otJFZxE$W$UWS;F6+L*}D9t-epfZ^JO2Up`QbX|z+Ccq;)BaKZDSq~OrjxplIqj<)QYXrkzRn@iI;yB!h|&tZ}f{r zRm+$D$}(0yyoLBMb=Igzc6@ySK+M(AR~>uDFN$Y!qF6?B&f1%oU);HFIaKzQ9z@1$ zgpMB_cOF0NzmLqLSeK+61Gjc@D*#)&bnUa6se>49v^q7AC|W!v08Ro0GapzpPf z8B#Vhs;N0Qo-XZ@s|XggHVwsj4Xc!w^a|>Zh)bTPLK6vB3VashnDa%CUIClEnrQ-U zVD>dLjdijM=XmxX&PxuhVqI%_>(w)ovFwV4RuUpPb@NsgvGz|yKK>vV#=kO*5Y&s? zmOs(OPq;a`6r?A3pbrmhs+PHA%&rDCWh9%m+PY(GsLL_vuDXvR_dh8<%Q@9=QyYCT zbn*eKS~z#iAZHzjP90nkrDq3^L=XGx{Ahx?2tuLV`@)blk8VTH8ByVtdfW2ViKEwg z&jVj!ic_Dq0B!u-%KG4_4p>DKS%Op8m&`0q&a2=ntFd%COMj3OEU@f+z;~E z=fZfFW6^Vu!$_W+xLaTC<%AZNhX5x_EdHP6UtP%J3|XAl(N2KL!Sk8uhX#co0u#Nn z+r-PChC?_q{FZa>jd4fj={W9apCP8{Y7A4#C4&|&6HW@ofqT72ih%U-#xnVub=4X} za^h>q;4mh>$!e(pbG3dikZwzwj9PAf(?&rNL||cWa^lr`wy-hJucIV5^Wf5aaB6j6 z|JA)HE9tSvNr0TOtA)?ZvHUFlL%aJ8@NLCNS#@osqhw7_d|_R8UO2XJu(~sLQFz#p zI4It?$;UM~Go29-_Od)KnM3pGgJQ?V(SEHal6~_fKZ9E?H>+;_I`mcaQ_%X{3f`d$ z0i6X>YqhPkKs;+Z@};N3V$~o*59$QKC33m+eBZMjbz(BR;>pSC1neBL$Ive9lnoBx zEU~}swu@|&|FLi7G;a}Li)h}UamGxJ6on_7h}EGDgT!;2sS_wJ(QTaj-f?Z3DmMH$ zkG*bPTZ1%O=qcL`E1tN7WV5KrAB$#HefaD%GFSUkhTB=-Z-zz$y%kIRplIykHQDGO z%AoylQUduJ!78-blOTC_rL1N@OtgHm8Vu<#-ZPFu0XIErnU*;cUfc>hm)7T&!}x1{ z-jzxNA*C^`T0{B`kpA%LxxUEYEv3rpAr0##E!7`+As+(l2J#*InTG`1CGw4&o6hip z1i+lyGcwiDy@hI(Mnw@y7OlLD%DG3V5Oru1cqw)x*@}(GlE3h0d;at_q4KUpgwQl^ z;z~edo33?!-0N$4nUSu><>GSZPcT95Atr9Ri_gXa8=q?V7th3T zcy6&R9C#@`t9uxCl|E-BpX-cR5*D^6)S7`&1j_x?FQhCakbqnmZn-BS3HD!qY9 zMO(Ym=+Fc{7@dq~Adm;2GLwzlW+tOc{cjH)>{GcMx!L=#L zz%rqlv~=(8ITj^Bo+6WqU;LZFnc1fUkEPEL0Q-MZTI*#!NHD)S)N8R=oZ!^57V-80d_e&~aSai)|qPUeoT z$&x%n63#h0L0w{`Af>@b{eF}Vph5!afhaR zd6F9xFc2W8KBC?sVq?&;qO`+q5SQb|8!AmY&B*P^&&^_l4eh_Kke#N^;UiZnL!m@0 zzHiS879>)`t8coJuQ|HC>)w(PD6=uxQC|jIQj+$(u1K)>D&JRAC7%uOw~n+!=xTt3JpU zWtUMocFb{tSY=qP?TPNsA54WeKR5j55wRjanOW(lVJgoA<+5IO=CAhTum0y8?;*(3 z8yjpOIdGx#w5P1>@di~p#+X*F8RjK`@-wUNqB?%L3X&%sY(q9|8=@cO%U*QDB|I1z z1zZHlr+(9Z69?u-TjqW7Bk#xsY>O=F!#B%fBm%j#< zNsRd&em5x&*?f!hfOv3-|5N^#ZimN1z{N+Tq2=b00suAs8{WO~?UL}e>5fYC85I)5 z%e3_`jE(bDCE^F7==Wk-@X~$;1N(TA!G`8X{>0`4ynk@|fERi0Ns#kv9{x zeA5tF=|X}Embp1ajY6z>jP1GC*wfRope6RM!^07Db`3mK>nGuPtuep{6J@3aiz$*t?L<3Z})GcAh}MK2$(4_vh)B-Z>-JkL0D2@6anjWULjjP*_H^SGO> z&m0s-_QC8tFSwDk;;H}xX^r-k<{buzq zhFlO-(26r((vD@r7}`SR{{n`$=jMDC=!C7PB_yp)842m1NH%Y zGU@5*)UzXPBk62xY&-!KEU0gxWk7kEEIv@uq2tM3c`HwVR67bD6S~p$F5okabYv;BW!6VJ!>2wjNqb4r=>B`z{1{`Q1 z*c(|A_@Z*zig#neg`0h`7a}_ZKFs)m|JOE++vA2S{`(viC!c9}ZMt~EvV)h}se_#z zC(mUe5Klw4Fjb8UqtoVF>1V5)!aIFG$k*k_s9ZFQC$^rQsc#M=TitrA*4YUH6iHLD z!BM+n$))aURvta7)r%rI&6ehkldDP1V+YehT1s3Ljce@pzYZT{th4m~^PxkuqaTEN z7sM?tO;8mEvvOxJ;=rHX*=@t8=2|lxhK6U7PzqDVmQ;=zJ=)6bwhn%3Obm9lo(84A z=(my+@uXmevrq)7+x?)cMpDY--?}P{S9m0U)EH^eCoN`*aBWe|=V$gSO;QLP$jC0~ zY!c|n$CfM9@g~Jd-93#F$=Oi2IT>bdoZL93)^P;rrD*Cc4{P$%InI55p>G6UMK)R| zt+OWD3d(=zqyL)Ln_L39#(=xXVJJ#koJFABos*m{}5k^ zGk%%YH51#v+Z|%t{KrdnuMz}33g1rkJDGxKEYGht>vXv2c3?MEc4`1+?y>v$z?`ST z1R|C$M&Ut5hV6bUlb&s-EX|E;D`!EKnu@+`OK0lGgvGo~HCPpeQ=?O@UZcfONqGPVS@d zX5-`p%!ICbvC(zab=CUZfZFruuSCR=MA}8M!fe+a*CS`bYr_6NxKbvF2uUNGDg?TC ztk-_p==Am!ALDH6r`nRJHiuVb1L80u;>&Lu<9job4J(aeM#5Wz?ni?$*wl2*G32Iu za+KD4O6aJiH{klc)(D)llx+*}u8AnSp+rTl(}U`V)IB!%ah-jCVxwYZ*q= zJTm-W2`!jQ<7sDWqV5V}R!wX^ zcV&HA_z;z{^?rk^j3U6Rw}y-MH0vOjqsgv`CF5@uA?{)flDnXOrQ*BQ_$2=vx4Ci_ z6FRgPOt(>)>HxA2;H;rG{|VumOHQNCOW?ko>6XFySd}z$W#zGhQnk>gLn ze3$5MCYRU@gNlqRLxv{*nIygaO4j1V!?7XVqFOzZG_U!l?&v~={W5{uuN9g_CsM7PIB3&a-ojmFr^X?a4bbmiFUA|1U;t)olX_f zSHE7e*soe_8@L&gho>85P#?#n#1D-t#;nmTO&f}v9lFfkdImVO@g|c>1LZ{;L>Y2% zy;zWM@ws3bOk!G4zQ}Yy~_I zWM)i+#Ub;H;7lFa!k0MRWh;#kG}@6AtN`T zeyKB)isioxOv*V{PKPRen8;%A{JoffLvMF)P@TC?wQmWPsL4<`BxV=~6jp&Oi~MS8 zuVM`N&0pn?GXFCXtS5>X5{Sl!;(C_E-bI27qqjsY)7w_OJ>*yYA&WKdwBA2=5Um=Y zggOj&3#609g(y_nW{eR}0de9cKbyDmV}2E)mfHR{*gKSfKd&e^kQU;0AD4!^@cnz6ZjltzG9aB~(r_!IA`Z}@)B{B-fD5!vTM~}$#Ipg z({s)keX4o-g|{UL?&>a{8B}YHD|as02qvhPqsW4;!L&SOCr}UHK+SOXE;6Ue`?Mp-KzG-FV%+o-*C}px zJgqSXVLwhJ!x6dxkPS6EC$jDc%@wH)pDsrpB3D2gU)qhiM(Ng!GCB}Rf`tNVr1qjs zP0XjH3~~~9APqu6TA2QY$)lXJod6HYu$1b_VuL>o!ig(??~YtbufbLjfD7xl5)Q>W zpyrtvyg2CdrPc6YNDP| zPtG$1a(~N9*mo2cqgRPtE2n!snypSjtL9{IH*r{OI)43FU#Tn%EU2 zR&nHJSc5Q|^s8Ah;hITciur)0FFpFoQ?v@=X)nP!k2hJpfGPY$>cTz5^5+Og2 zv_6D+&<8}`uL3PsY}`hRi+)Me0A+{Q@JxViNTmpxm`W&-ka4r|VLUC|%;ES!SXS#Y zc1^P@en}=sC0?%xc@T#LM5a-bkx}1f@nRd#pk`B2#wN!`@#dsPR^4=3hL%0ey6m|ue2F*Tv1ncI>@7gR+gwM_>`9ke!>aqht38~RFo)!4_U-OF=R}W za48(Ko@WyvDx;P_yZ5uTr4t}z*C3+Jt&;jX z=y%&S3ZDDTo6_EKfCamG2=g6zgC+*s{FpN;RwM@m^o(~ zAhnkYkoyNW#3ok^c-&)nkq)<4_ymkIi4ZW|`tt~pvUyc|t)4ecd&Z7E@m(F%+k#JG zdZ0Piwq%k{d89^sNiuyDm#UKX!X{0!l8O0F4qy~8FdPHxEi=CAST>2$=4mMEh8d@< zC=%*l08S@9zDl1GLqYF)14p_g`u|Y%J*^b`1P+Dh|CMmPQnQd4ePS++9`ex$5nw!3 zNFVqn5dxu3M)RY`M?i$=XcYPRDv+eI3%+ zy$eF#6u(}@Q~C!7c^y@2zml|(Uw?+)O(sctiYEPSvz=db{6?SO zFGRvpt_c{moEbUv?@?}4|G~i|w6*C6S%gWAL7kyBlKE&W9NOa>+;Xwiq@C-+Lcy|+XmKFn37|nnEoT5gRR)libhYg$M zpF)iNIYP(;H~XXY-JFK2J-X5V!P(8bhBtFu(1|y%j0DFoto(5uvL61W$OZAo&88dT z^CoI$OQA>HT}+XBS&3nd?BuR#UbILpc4HIL_BHSyM(d?U@~4TzhLC7>RFE_5uy<}4 ztbzbLxeB4OQ@az;B}$swZc*%yGFjhrdQs$c=9M$ajU(%V^4x5c7d6RAwu%w^!0N(v zx4SUiFf+FwjRNpz8Ubjf24DKJ@EUTm8GdHWkGZ#X2H>xptOLUzEh+H776c5+P{BD}7p3v!etJd2L~A78>IG=CwuprI zqwdiY#lW2m%c+39W{dc`~A&P4hrn;A!;==W#Qz{=Ul^JspN@#t~E zE!VB+TSioVf&n%799wEc;R~nF6<4J;8WRk%Ym>A9t+q9$qQylqG1Lc5LC(p97d~aM zj)z=*hPd0$(U{B>S(?Xpie$l5;cJ8t2mh+ zp`((8So2?!VSgD;+)4g#lve9ODY2C>yb_Nldo_z^v_@u`NU-vauG|fn|L{}IL?8g> z??;R@T56{3_X!$VcBwF%UBV@MfXf0}cCDv^vT^BzkRe(HVp6$1ds=bbBUu=^H z`pZE(nVs^!|GjzPOiI+fkZdF@4FJ?9M!BI7u=65U;f>2`NQ{0(IOmEbv)X_%O4Xh;STUw zpku?IG0Vl1jtcTbl3b8##O5?`X>jC&Mfw*>)qeib80V?mL+@sFWeN2eahxu#xz~u4W}?)L<417@ zY2wP<3r-kX`H%)3n3AgG!~`=tj3}}rb)1>9-U754Hj8#8PMRJ0ovzuUcEI;IOAA^) zJiCe_M!zs-liOV|-WyeO126#FCSth!ik~iHYL=8?%%eP*j}P?yU4opIi*=N9I1Obv zN()y!7VhV(P13zj58=sg89U2qqn~b4p^a|PTRcEMBwZt?ST#qZHXyXhU0D;Om?PFC z;1GyWw%as1^xhK+ICSwVv~yj}oz}oBLJuvTmMW z6lcpGmzQwLC`7LG&R8QL(le}b{F%b4BsN5^Bqc(JXD#IjV{v45E&kgbvf~BT@A@!d z+u%6=PzxsgS)39~DL--*JlGB(P--v*Ed0(Z#UM_9%8gq!o>0Xa#);n`0fiE~O=Kjj zj&GhCI*c^Z86)+|)+I@G=r39PNoF=Me~t@?(@7n;h?0S0xZx@}Tj*O0>)unL$**4( zFiWR1UHv#nXSY%gNrx}k674@7Ycp(q1XjF(8f)q58{S&>mf$%b8;rm$NI@z7VF%-& z^bST%U(fCx5m$y3Q}kuh_C3e^lT}bYtsFu`K$&AE)`ggxRS|9iTxpN$b`c4%mYuL* zWb6@ncxYl;S>-EMQeM5~c8Fff=do;djII~*&{_K-yye3jU?5Fl37RFV4$0PfUqqHA zS)04OqjBP7l!?l0FQ!)z&PUxtv!3BUX{JQEc{SUEDeB9{?jg{Is)*W-P<9b_a$*|eL zv9JK#*uvRMVAtjQ>qZ2?aWl>3wRrsj%r!^$H)=x3te8(}qSbctckaiQfEifqOIgKG?R zn|agaS`BZsG6RSJ z+_So4$9o^^aZwll%7Fb`GbojybmJ%BK>m&H4Ykg;}tR6&5puE1N z$vmX&#V0K*j*16Pr_(6FN<_9Oph{b#q^sM$qFLG#EnP;DK94?OgtXY8WhVOeN5jMt zx06r%9$B}Em!qsh;Z|}ldH1#ZG9ZCsc7I?Bryq)Tr427*^-!r`pc>N)c$)WJC|zh? zJaYn!mVVh|Y}<#bk_4Hvu?Z!(rC(zO{P|6c{=wlDWH@KjxyUqqV*^;*T)Gb1%QdGU zS9*y1zfmgx-FovzzrexaW-sH;3q%tiefh54rZH&VnJ3<_cmHNG@+wS52Z?3`MZH|n=EsEJx9KWG*M*2yQQ<4QKvHWX2US~*N`P1=zH3ek042ZJETzpDOhr_ z)R!bSl$bW1S6fRy+{3Py0MTaML;A|#D%oV~{Q-oNO#|eQ@BlW1#obou>eKUgctyN2 zocEf;;!_U7MrP7=r!`+3a_JI9!m__pRv741U}G4qT`|(7IP2*nETcPcM{cP9gQHj4 zvDb1Z7@AP$}ouh8-(FI17So|-d=o1`vmH60q0 z{YIuy;r%Bg{KljGKZ#*Dytki!r8LZG-2XQ#j9Yt5B{ouUH;T5$hR;=zcb9u|;<6e~^`m-4N^0V01$42g=*f!im;1AhAN`Cu< zagUyO*2f;@Cvhh=cn7>=i6tZbKt~_K&#~)~AmvbJ(dbQ?5VB7XM_ncgmBaBZ-1q}dQcx>$|PN&7h&^8o1N z;AtYS+aYfC=^0QLH6Yrxck#e9(Se~(CUE3-27Pp7|H~Duk5B5z(YAIW*jpR@tHN&= zW1=?sJ|msp+@SRV8^Z8QVv{Ltucf!IDG@cn5ylC$#7^8CE={( zi^Vpm&pR{oMIiykp&B8U7}DY1sxxX-nOd=rnBgP_@GeOlIin&5*F)cJ|K!tdVtWR) zK8OExLX*gMl_eV{wsHcn$F}oU)94Yq>Qp$J+6R0*4S%p-B(9~P-DC3ivHqbrlwzD! zOnWndQE7uuNmNWz*OR2WMV~Z=lQyxzHVl$9r)E-ftv-Jk(_b1MIv!j>gI}4b_N~?_ z^UU!us-5u>v}x#BjrbfgWKzfdwfUB3-bkdqdRZ*cQ&hAYu+9BO5-C#c`L636*qHPe zts^zITW78A$b7Wn(yakAkZ&cJM@0jjf^wvHCK0RUb|kZAEU~^_(MSinbc_jLwnkqv zp`X?MA=&&PNNtANW#uP@vVH)OjFA6)1eM@8lzGFlTL7vrE=Y0q%;;1Nx2LOUo5|l?ydp zDyP9T#;BEbtUyTLH$`J5k{tzR-!KoeTrq`x%1v*o6fqEV5oC@imSSQ zvD52>&>itQIs6@r9J8X0V>NW0h*m=SA6&ZitJtsCvAjU>AdA}#x;jY9Si7N#sBc8aU%I!x&YF@CFASYSixpL9yOY3D?^;#&B>W?j4WqeVHpaU;^ z5gr*FN7(upyFB7!gK0JDK|WR+yF!y7WbZo6 z9@7;~&o%vz4pTRgab_$jyD7&x6_V}fpPxrf3XJ5!Xg*d$2Q434#zZYMb9&Aavs`xO zUJav_mud$>@uODle`A&Q^~ptqpN2CgjrBLSr7n3hEQcQ`tau7guMn?)R!Ypcd!_x; z>8iwLNG|CPC$6mXqL(8dYrlUzijx*4{F!mXZv&wxVUkLozxRWRFN-&4DQ@p@XJgfp zggs8%d7A~2uIDkO&+x!&v6DD^h(7&l`z3V^m9e{RFywFC9aYUkYw~Qc^KDU>snfWw z$4L|Ru8*bUaSk-l+KC zrRsNvm3_PP&}?OoV~=2O?(xjkl!uzh?Cvv*&qC#k}$iJGK^i0%#I~UCv#T5Wh1~xIvYbE6BMMvPBjSf0ZqW+hJtM(BrxPr0yAU-?q^HkGyTB{g1%I{Wpj5-xNwC z?p*)&#pVB|P;h-=W+}>Ux6G%03HK=9!$NYdZiRP0H^$g0=92C3N#oVzX%H548X=i~ z^3NlJRS073y0c9ZSrVM9v){*ZTW?&wd;gLOce{``~|g}4k_c!wN*AbNRP8EiFBpJ@faQz_S4Bt zMk8JN_*2>57mw^It}B`sWwN7#Z_Z>3S;OO2J!l-LeZC(scD`HiZey1GVkYpIV{@GK zs9b=C9(_QsD;o)SW00H0=Y3~D0;iRzNx(-o$`rYWZ2cuhi`xhTNj&Is=7BrbR+6wHKZ$9lIV!l3fP@hb0_y8*LAnL0%>hb-L)o%hBSU3tq?FV2#a@L zLrQTRu@befqN_3nbh6LcGL^mX@5HcVgrhKdxGapV4#YF-pe%UbchCh)MeRP2#+lfSXM%-ng!Jb8vBiVre;DlqZ5^&!( zvNXo3!-tLWN5MS8?>ps@2(__s1H)|&&4@P?Bci_aT6jDG$vu8l747D3qJB0Cx1eu) zw5}jM(E085>k>=#(|`~TJ(ICkmvJkuZ&Y&D%y@Lpv1DC*uNT<%te8{gikCAQU(me~ zt);cEy7Q|ATQpi(t_&^UeX!yz`z3rg&kmxZ#3wfRTkN_Q=?=nUV)$Fi8sJNutRoM` zBqAFbm&Zp7q-oH!kCIt`M^;uw){^#h4zz{smPdW~uw3(EqLSBbaW6+!-wDA!j3_?# z&o$n}HQJgIX4M7;FnGxC1HMr+yn|&_=kq@}%0E`<<8nk>T7EJrPvPquONz6o#2>?T zDP=wlh(v_%)A6cWLv2fvd)`>{LnX>v9=y(#e&OW(*jiY7Xs&0>wGhq$5n|d)e?N0z zxbt#{=6uhjNX-T~Wn8}^c--)Lfavys9b0Uoz;vU^-*(z!A~8!W zJp;AwC4=ase--GScyZ`iF432;eSjMGla}EI1|9zQ7(R@qAU_;`R$hPaf6g5UNU_{iI^FCJh-43Exe9Ne9=YK!spEa{@%F%9ilvx_g- z3^M#eXYxk_<_?7YExWL(u*clvkV+>WW{i(wFd+sh()ey=#A@G0V24p@T`b5BY)=Pz zZ#XH+1I$SC`#;8i}jK z4f#G;E-^`liY?4t3EY3WWkIz zVn&_OWwNjXNBH$57Mt}6l{3ntp+DBHKN43WH<5^h9=_9?@U)g9qkz739QYJ@WJySH zj(%*^$Z5)b;^yj>+B2D-@p&ENnmN@S_UUIUDh~;7t}BbSg|@73ON$Vwy=?Nk@{f00 zvg~4ga8tvy=q=QJoHyguc@sbw)oi$C$q=ifoo_$$QT(0-mXt_`y8HddV}Ut#Vx$F) z+ymML4mX|;6DW!aZjtSZW`Eui>eO!^L5n0Jb=PvR`PL z@c$K%8E@tW7htmJgBMi{Dc1uBAoWel(Pz{VX-`A|Q|OMX&CDTGSBSAl@Xq;NJx)}7Lan3sLjsh|{{XsX zuyp?bWDS8hKi*nU2Vd_wZTQP60~Lui!KOd1I4=SJ02qtIS=B$pXrH+LrReTsF$x&-@VMJyRmJCOxCG((g8u1BP~LKjHQveqt2|n$WBJ&&VDpwX zfDd|`%6+B)Of=BWAwHt3U$QMs9%faes6hLP1f_SmUIXej7z0C(Q239G!M0ms?hkPS zvfw#Dhf>cpLAy{URX*~bBkmKf-0aZ5WPTN$#R+C zOiWAn5#WzpdZ0TWsCE7(9--ljIEWojLHUVJ9~TUl90YoZcq@WvcJ&^~LQvikx4$2g-L@LuK`aJf4tcv$RAp_mA!ju>R8} zWAmGaJt))tlDaZE!v3Id`M=ahli~jWQx1J%{-An^yaH>MAM1Ez_Jp}SL*e|wXcxf-tFj7zmS4}r z%NdztA98a3)VrGe&UT+^XZA9KndrKT8zt{7bPB!0Qndhf%S(4V81pMzi59Z%pdTzi zLw=)nSc+;fjlo7WomT$_T9!C{CNJwm9cW|gjQ=r1?06&Vk6q6v~Ta?{Q^gPc!Ck-=Go0O?jxis|`u_QCPph zFz-HMpnMUKGn$$`@^uFMjh3{N>6O}!F+=^#B2-@S28L0o@-1-~n}Ye&Wy`r%@t(%m z8W()$F;apl7k3;plxb~x{{S%ZsuAJ6ZV;npL3~`iky<=fV&MskRxO6zHHZ=U5SMq_ zWiRUg0JT`DJxL_5y*U5rQ-k8xzG4e7R9U zO4D$i&9(Fs!z}w}CmvYS08+3t*SI3^aaR`RA-H76tK4eY_CON;>1h>F7C`xoE&b8D zv1Nm>#j=dG0Paa-;ZWS#w+t_ff@m3JibD)SY#LzW1B#SE+Z&z`7NGi;&}n%fEB@lx zKA~zUQbiF@#7$8p8H+Sc2?T+Lx_~m3s!&C^1T|%)rMO1q5Nk zI*KY%^BEPAGFbBr%@({xVtFK_rcJW6sV>b&7E}!ar9jr=B=;@olmn9|Cmeod5JJHC z7l@XA}E`8xUlh*UEFoywj0_YlIsC{#H~^1P|1`W9%G%| zZ@AiWnVw?sinYTWoH-+R19x(j+EI);3=)`IHNQ!u^$wW+64+QF1DabD+m7lBLL*59 z5y@HcIEU_4k!B|d3<0?Wqy`X8t2;2ed`2g05Bh_pWOT8x$JA}vV#3hs;@*9iHm?=Q z2zS>UR4kdxQAB8>i>Atrk(sP`ji3!K^pVXDP@Q>NQok`NW*7jR<);RH*7KBlxjrMX6Q#3r~v zT2vq_P&<}JN1a)*{{Rsc3jxSu1x;fbQTRPZ8pv$YlSkJsOlB#>e9OCtinhja5Msr> zUQ?-*bCM8#3 zCw4??p{q=7Fnpp3OgTD>YM48o-^A#38VY~xx{JDqpoq*K@MCMlrU6v5j-@VIblW&* zZC;}23o{kspcgEuzzlUe&a290_<$qERv-GA@&Fr|1(sr|(qd#vAWibuyC&DfWhQY_ z(sHczEE_q7?t7G{s3e@rH6a=$!_qt2CooyH{KUh=VJmkSBQjoQlEZn75|&XFL*`ET zyi5|efpA_6Idkf2b0NGDk+?Ri-9xG)s4;VxnNJ18Ww*Aoqu(B2EKJxjaF+i7ClgtE zqcDyYLU>?Kqv7I)qSiwK=S)*L(+1U!pz)S7H%o5f1;?n0978~)CYc~-PCedzPM}nsp#Xu~G zPbioLIYN#D+4_ls(JqhWgqHQfO1*&Ga9yr z>-R4{+$yzc_Z2I&J6X)KOHe;V8MxW(nc^pM7>BK)LnlQt_j2-npc-B2oup9usSzI9A0W;=k>c-p$If{Ar6G{@iQXwogf@Jq9)n%3wCYp?MLhHfQA<;7G zoc>A0Uje3Kw2smf;Fz`i8NnNmB0mw(iz9(*7f{>^jKstzqGH4}n6oKy*AuA)iHNtU zV^Bi_aVrs`p>PYaWMI-dTqOJoz~U9KVQgRXEhJuDM=DnEc6FpZjsfgM^VYL~RziI-;(ZHPCi z)*)bVDy&2;QH)|-7|YKv&x|yH+C~2W3!wpnDRZihHk!VtYViL6?SGhYTXa$I9mYjg z^@VQ_GSsq3)j#rmMkX3=Z~p)yBJ8EqOEmrwNLr{rxXteY%DRo6=A3NAAXm%9J|5xm z0%?gvO`y^z;v!&vrHzg}OD!0fiy;lvtOi*0N`X@c5mq6fRBlk5h{ROOFjk@)wF*_7 z9Jzgpqogtr7Yh&t1?8eMGT#%Lncv72Yk1|3rB=FM>3n?k0~O3z0pFLzzdMH}YR;m0 zRgN{pu&TYx=Q5?R4j{I9SEz=~HVZckKo)V!QR(X=UTTMd8moZIi^ML?lB@clukax0 zuhgsw=#)?!fmwp-#w8`OmDS&IR^?ob0P-ni#4aQ8 zFElr|5h@a|P_i1ufYAZl6xa^e6C$XES0!-@#h^P~e*XYa5!{QLci_j-+j5>8wMLx( z0FZ|4a0}h95nMJLbIn4hk-U)ELin5$JE61uK-e&aMZjt)bcD2g0;=5OsiS}+Tg1A= zgcB^A%45e(UZ#A%IFziE7l?xe&Jc!GS%?Bz&;~9BxMCVCW*caZ4MAliT$0xVDIs+>5YZ_wf*kWC6!- z)Kx9yTr8uh3J#ch0Ie}4gI7qpBew@GVv`KV7IE-@%&<~lF?NQnoYXkN=~6wB6W>Uz zM0u8oE~YxE)(8hdm}0=P38os5S09onmK8b!hB%%U>M6*FHAv%7&Th@(Rkw81uq?2L zMj&uI)LsBWj0-ZKQM9WWRUkzpv|0-oZc`${XgDFv28^&)t&M5#^h&b|6L{26fT_*i zVHgHWTuL#UYb{FM#?D~$K+&dP$?Ukdbu9>%1J z+%TVYM4b6xBLU?rs)n4a;3tNoYmCDo4%*s5&4S^V2Pi(SPhlT2H5ULkXQt^^5$MH4bdX?a# z>It!p87N>1x`%QS6R2+N0bWpxXf811-&0}r5Wu`uXw+iBT2~J;hC#KrJBbGIQvk6o zZp2=2H3GmG=}?2WcucBWIEBlEHjYl^`7Y1~SVse(4cb}uz@i-mAHeA97d9gLUhBm` zNC)g=6v9|e3e#DGP-%;C5U1KA)}VC&JwXe0Q=gobp?91hk5abH2IBx2m$0Y+nMUEdPf$}23% zrw}6qTY+L*Fkb^QF=!aUU)(mW86M6fJ-&&B%<#+|?k88sUhDnFWxd9p7vc<7p!*Bf zc+dPyF2VuB9o#=5IqIp}O-D3LDIIV)s*2)OY~Ph#rdjiOoMOuL`TH z%;J7_W?=%khai)OliJZ4T9~%f?unlu$U*(ekt;7yjZ6K^JfS5QwkG>8FMh6s-o63meEK^m*lo@h=&T$AE0U@>MUwqR%ahlDt? z`xq=!=AThiw{*X_M*LA9a;!rYQ6LuIxo&8uLh_Fh^3h~nqnM+9t7(D4DdT*gs6hc_X^wq#&z9F@F?-b0WDBw>J}QlVHC|X3O?og z{{W}VxB40QIl!PkgmHVUpK*{)y+Bkr1+pVn(QwEu%4j6NM7nASJ^_kjuo=s5xH|G! z8YQUG`;G;QCgK^iD63cgM z3@oh~X*B^yQBsWZ;Vz(dyMqW&_bUbi1{fFGsJE58O?o-vWdm=Ckb^i!QCp_FCZ+uU z0NqB(!m7jo1wBDT&@K^_9bBXD3`u(?`iQj;+(iLRRlP!}CTh&VAPcAWHjqXki-9cN z`Gz^qw4^J2#Apg#k&UVx)X-;(B88sBLUy(iR@*}v)O#w|pQw*Pmkl|KXdYGH67fR? z6#{)$*KU7MBv!PS4It$80cbD8%h8|%wx)MT0h)^OYTH-T5h@fHG!yKK%F60i>d#eE z4UH101>)tnVaNb@imtgbm2kPl%muA_hE#F!5gvCOVu&QALh_N*uV)&>K~`RFHdM1F zC8k7zlnBzX>H})}GU+QVLA|?(%U-b(Q69*w@KoTrve{aKs_d8%MmjQ>wwL&raA}vd z=3?5?vWk_-cZ2Z_ybWSrlF+Mo?pWx{p5mD}zmUNIRlB5`LuG@RXbapJ+Lf#$uk=a- zy=8zvc21X4mQ}v)QPTuuqMb`HW01@NjYn~KYT(?(GSnf7 z$f_hTtZE=CkG2Vs_KG|N*3QRpr994>IXU5xkg)8bATyaTw0KEK?7BQiZu(A zU?^8mPQ!H-K%%9NL8H{Ij*HZ9(D8}3vw9kqSzwLYTsYLNr8NpDJtn1jh}b+25jMp1 zMa4kLf#RhrPZ21VTOJHbpr=&?#go*b0*ci})E?oAgHg^dINiMYW*L!`If#}szaAnK zKo6SKtt=?jOrWzU3|zGt5v}>us4Ah~Iwk_?acZ>%6?9gRGnOn%aOfdZay3k)P$Rem zbT#fFM?J@iWYohllTJY@0I@BJp{==CMhmkQ4O-RIQvl$VdyqM`g4ot3a8si&lZV8( zn{}C_r5@)9u`@ngK^wL_GMfdj5{wvHIyix{v7lo!AVmc_4ko75f}oKhWy2<7D=Akq zFmlC$rqvLymJ?z5m1ziK8D3)y4SpfCQ1J{{kiJ{8G;=H$s-`XgjQS8_5q!*8yMxGiN`T&K0MPIeR|j1{qw^o!CM?Z^JPd0u?8{0A zL#eu#UV7k)0ErfnOJJ5&Rp1UM6hjaK<~;i)WjmE&cU3p`>k;I&lq@pmFn51(f}e?S zK*Si}l$I)0(-10Hpe^25mA4Owk2HKi$SSE>Uji{8cGN>w68nRRd|#qn0(Y2}+|Cpb zAhxb*kMM_8@gqhVmV=!@p1r{qwQg8Ji|?4A&j9K+5nc$OUdX{B-s`xtlpq4ayg_9r z97e;O#G^KYa*1fvw=uii9UbGsjIy&-k2HHnU{LbTi0)9sm>RW{AZDU~(XfWfm|tm% zDPOoH3rUK>jtfaMWqx8+f0?H90I(R1-5G1LX_nblwjnWB)JF@E19oG?1O|8>CK{+` z<^u<)H*Hi?h`hMIBeg5$HL91yaq;d@uPE#)WNBJuC6^SyWuPPUS|v)n${HA0JOy}^ zP~p_%ZGPd3#beygM`gq`U?>ejl(L~l7pUh5OU~!4$B+!ybb}gCYcs1?>J3+H6{cz- z=q^xEer6TD7c8^3iF3B10_PH#d5&9hTwO&dJ@CqE52!y+#19qpf-OLlQGv|6N*zWn z%7p0kE^?qEW>7Ik6G~r*M15RP>a@lb%kSQHhBb44k1EbSm#3lh#XOb8qUC}iv&>dQB_DM zRW)e%mMn}bgv?9KzLu~|G2S3EGRrkJnz$`un0tbake2gO(_+l9EfcLi;+i!CWz5nr zFt@lvTb0cm%IHg_97Pn&NY5^1lUZ2%l&ZgRS|4yifqvjc$qX}Rh_dwRI}>z{kkJ(Y zp#%*Xf@z4AS(vv~OjWDI0G7ETyI3jHfT|fZ!6af*>6)3W_hT&T^G4l}Ng}RukmNl3FyGxig1;Qs04N4_>>Sl9S z0kj2~id{jKHZX!1Ov=GqBNKDi+$f3E;S;1lbWVW^%oD7L4k0zopvS}z9mjxyaf69& za}#^w8fM4D7jl;6xl0VUGP2JiJ;6aU!@ CL2nWO diff --git a/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc b/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc index e007d5caa..3f4d14759 100644 --- a/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc +++ b/webgoat-lessons/challenge/src/main/resources/lessonPlans/en/Challenge_introduction.adoc @@ -4,7 +4,7 @@ In this CTF you will need to solve a couple of challenges, each challenge will give you a flag which you will need to post in order to gain points. -Flags have the following format: a7179f89-906b-4fec-9d99-f15b796e7208 +Flags have the following format: `a7179f89-906b-4fec-9d99-f15b796e7208` Have fun!!