From e72dca49a6da57177e69033221276124fa063f61 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:22:51 +0200 Subject: [PATCH 001/236] Remove invalid return value and document thrown exception Signed-off-by: Lukas Reschke --- lib/Saml2/Auth.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 6d44be0a..d9be63b2 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -150,8 +150,7 @@ public function getSettings() * Set the strict mode active/disable * * @param bool $value Strict parameter - * - * @return array The settings data. + * @throws OneLogin_Saml2_Error */ public function setStrict($value) { From dfa74d41b930463d627b8e6dd7c8fa27a35236fc Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:24:43 +0200 Subject: [PATCH 002/236] _errorReason can also be of value null if no error happened Signed-off-by: Lukas Reschke --- lib/Saml2/Auth.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index d9be63b2..8673a1ef 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -98,7 +98,7 @@ class OneLogin_Saml2_Auth /** * Reason of the last error. * - * @var string + * @var string|null */ private $_errorReason; @@ -387,7 +387,7 @@ public function getErrors() /** * Returns the reason for the last error * - * @return string Error reason + * @return string|null Error reason */ public function getLastErrorReason() { From e7e1bbff37a0c44bb270f92198e4ff085e841571 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:29:08 +0200 Subject: [PATCH 003/236] \OneLogin_Saml2_Auth::$_sessionExpiration is of type int or null Signed-off-by: Lukas Reschke --- lib/Saml2/Auth.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 8673a1ef..91dae32e 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -62,7 +62,7 @@ class OneLogin_Saml2_Auth * SessionNotOnOrAfter. When the user is logged, this stored it * from the AuthnStatement of the SAML Response * - * @var DateTime + * @var int|null */ private $_sessionExpiration; From 9c71cfcc06a24435048b7dd2b84d3eb3ceafa83c Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:32:59 +0200 Subject: [PATCH 004/236] \OneLogin_Saml2_Utils::redirect returns a string or redirects and exits Signed-off-by: Lukas Reschke --- lib/Saml2/Auth.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 91dae32e..e1f420f6 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -291,6 +291,7 @@ public function processSLO($keepLocalSession = false, $requestId = null, $retrie * @param string $url The target URL to redirect the user. * @param array $parameters Extra parameters to be passed as part of the url * @param bool $stay True if we want to stay (returns the url string) False to redirect + * @return string|null */ public function redirectTo($url = '', $parameters = array(), $stay = false) { @@ -422,7 +423,7 @@ public function getAttribute($name) * @param bool $stay True if we want to stay (returns the url string) False to redirect * @param bool $setNameIdPolicy When true the AuthNReuqest will set a nameIdPolicy element * - * @return If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters + * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters */ public function login($returnTo = null, $parameters = array(), $forceAuthn = false, $isPassive = false, $stay = false, $setNameIdPolicy = true) { @@ -462,7 +463,7 @@ public function login($returnTo = null, $parameters = array(), $forceAuthn = fal * @param string|null $nameIdFormat The NameID Format will be set in the LogoutRequest. * @param string|null $nameIdNameQualifier The NameID NameQualifier will be set in the LogoutRequest. * - * @return If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters + * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters * * @throws OneLogin_Saml2_Error */ From b967743f2e9f5e2bd81338bc05397a00866d35ce Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:34:33 +0200 Subject: [PATCH 005/236] Explicitly typehint $matches Signed-off-by: Lukas Reschke --- lib/Saml2/Utils.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 78d723a2..db3ddd9b 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -725,6 +725,7 @@ public static function parseDuration($duration, $timestamp = null) /* Parse the duration. We use a very strict pattern. */ $durationRegEx = '#^(-?)P(?:(?:(?:(\\d+)Y)?(?:(\\d+)M)?(?:(\\d+)D)?(?:T(?:(\\d+)H)?(?:(\\d+)M)?(?:(\\d+)S)?)?)|(?:(\\d+)W))$#D'; + $matches = []; if (!preg_match($durationRegEx, $duration, $matches)) { throw new Exception('Invalid ISO 8601 duration: ' . $duration); } From d2f73cbcca063d9c270ae989ea92b074003509bf Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:36:31 +0200 Subject: [PATCH 006/236] Annotate missing @throws tag Signed-off-by: Lukas Reschke --- lib/Saml2/Settings.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 681c1ee1..e72769b7 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -997,6 +997,7 @@ public function getErrors() * Activates or deactivates the strict mode. * * @param bool $value Strict parameter + * @throws Exception */ public function setStrict($value) { From b99c73351229cd808bf3d0ee1bf10ab45267e559 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:37:54 +0200 Subject: [PATCH 007/236] $spValidationOnly is a boolean and not an array Signed-off-by: Lukas Reschke --- lib/Saml2/Settings.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index e72769b7..49b86aba 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -88,7 +88,7 @@ class OneLogin_Saml2_Settings /** * Setting errors. * - * @var array + * @var bool */ private $_spValidationOnly = false; @@ -98,6 +98,7 @@ class OneLogin_Saml2_Settings * - Loads settings info from settings file or array/object provided * * @param array|object|null $settings SAML Toolkit Settings + * @param bool $spValidationOnly * * @throws OneLogin_Saml2_Error If any settings parameter is invalid * @throws Exception If OneLogin_Saml2_Settings is incorrectly supplied From fcf39f91237ec1d4a4c23b8652d96e5fc9c592af Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:39:11 +0200 Subject: [PATCH 008/236] Parameters are of type array Signed-off-by: Lukas Reschke --- lib/Saml2/IdPMetadataParser.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index d9fcd9f6..9e7ca38f 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -189,8 +189,8 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n /** * Inject metadata info into php-saml settings array * - * @param string $settings php-saml settings array - * @param string $metadataInfo array metadata info + * @param array $settings php-saml settings array + * @param array $metadataInfo array metadata info * * @return array settings */ From 28d0362b3a765824fbc10d0468ce902b11f075b0 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:41:44 +0200 Subject: [PATCH 009/236] \OneLogin_Saml2_Utils::parseTime2SAML also accepts int Signed-off-by: Lukas Reschke --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index db3ddd9b..3b96b302 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -651,7 +651,7 @@ public static function generateUniqueID() * Converts a UNIX timestamp to SAML2 timestamp on the form * yyyy-mm-ddThh:mm:ss(\.s+)?Z. * - * @param string $time The time we should convert (DateTime). + * @param string|int $time The time we should convert (DateTime). * * @return string $timestamp SAML2 timestamp. */ From 3bb791c22124e2859cedc9c96bc87bfde4b712cb Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:46:45 +0200 Subject: [PATCH 010/236] Reference proper parameter name Signed-off-by: Lukas Reschke --- lib/Saml2/Settings.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 49b86aba..da7d358c 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -1050,7 +1050,7 @@ public function getBaseURL() /** * Sets the IdP certificate. * - * @param string $value IdP certificate + * @param string $cert IdP certificate */ public function setIdPCert($cert) { From d5042da68902de2b0cc2afd314ea38daf57b34c4 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:48:09 +0200 Subject: [PATCH 011/236] Add missing $alg parameter Signed-off-by: Lukas Reschke --- lib/Saml2/Utils.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 3b96b302..780045aa 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -884,6 +884,7 @@ public static function deleteLocalSession() * Calculates the fingerprint of a x509cert. * * @param string $x509cert x509 cert + * @param string $alg * * @return null|string Formatted fingerprint */ From a51ed65313504c0f707ca9f1676c8c597b7ddfba Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:49:55 +0200 Subject: [PATCH 012/236] \OneLogin_Saml2_Utils::getExpireTime can also return null Signed-off-by: Lukas Reschke --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 780045aa..d22e6a84 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -800,7 +800,7 @@ public static function parseDuration($duration, $timestamp = null) * @param string $cacheDuration The duration, as a string. * @param string $validUntil The valid until date, as a string or as a timestamp * - * @return int $expireTime The expiration time. + * @return int|null $expireTime The expiration time. */ public static function getExpireTime($cacheDuration = null, $validUntil = null) { From 462bb480ca10fade2dedcc8db992db4cc0ecf83e Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:50:53 +0200 Subject: [PATCH 013/236] Cast mt_rand to string Signed-off-by: Lukas Reschke --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index d22e6a84..3120533d 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -644,7 +644,7 @@ public static function extractOriginalQueryParam($name) */ public static function generateUniqueID() { - return 'ONELOGIN_' . sha1(uniqid(mt_rand(), true)); + return 'ONELOGIN_' . sha1(uniqid((string)mt_rand(), true)); } /** From 87ff36f9a8fd2030b5c064622bd8e7c5c0d940e6 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:52:22 +0200 Subject: [PATCH 014/236] Members in \OneLogin_Saml2_Utils can also be null Signed-off-by: Lukas Reschke --- lib/Saml2/Utils.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 3120533d..f86337fb 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -18,22 +18,22 @@ class OneLogin_Saml2_Utils /** - * @var string + * @var string|null */ private static $_host; /** - * @var string + * @var string|null */ private static $_protocol; /** - * @var int + * @var int|null */ private static $_port; /** - * @var string + * @var string|null */ private static $_baseurlpath; From f432eb58cd16272fa2a1677b1f18aa5b7fac6688 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 15:56:21 +0200 Subject: [PATCH 015/236] Add missing Exception annotation to \OneLogin_Saml2_IdPMetadataParser::parseXML Signed-off-by: Lukas Reschke --- lib/Saml2/IdPMetadataParser.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index 9e7ca38f..ce6a6938 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -79,6 +79,7 @@ public static function parseFileXML($filepath, $entityId = null, $desiredNameIdF * @param string $desiredNameIdFormat If available on IdP metadata, use that nameIdFormat * * @return array metadata info in php-saml settings format + * @throws \Exception */ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = null) { From cc0e5c1a09f1ebb35f30b66cce76cc1942a5b12e Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:00:19 +0200 Subject: [PATCH 016/236] Add proper return value annotations for \OneLogin_Saml2_Response::getId and \OneLogin_Saml2_Response::getAssertionId Signed-off-by: Lukas Reschke --- lib/Saml2/Response.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index c88c3c3e..76c096aa 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -409,7 +409,7 @@ public function isValid($requestId = null) } /** - * @return the ID of the Response + * @return string|null the ID of the Response */ public function getId() { @@ -421,7 +421,7 @@ public function getId() } /** - * @return the ID of the assertion in the Response + * @return string|null the ID of the assertion in the Response */ public function getAssertionId() { From 0d42ea136fbf7c27203b7aed90384d1d24431601 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:01:44 +0200 Subject: [PATCH 017/236] Replace IllegalArgumentException with InvalidArgumentException IllegalArgumentException doesn't exist in PHP Signed-off-by: Lukas Reschke --- lib/Saml2/Response.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 76c096aa..5b286cc0 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -426,7 +426,7 @@ public function getId() public function getAssertionId() { if (!$this->validateNumAssertions()) { - throw new IllegalArgumentException("SAML Response must contain 1 Assertion."); + throw new InvalidArgumentException("SAML Response must contain 1 Assertion."); } $assertionNodes = $this->_queryAssertion(""); $id = null; From 9326f69d9e18148dfcc3825f83cc838ad7b826d3 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:05:48 +0200 Subject: [PATCH 018/236] Add proper type hints to \OneLogin_Saml2_Response::getAssertionNotOnOrAfter Signed-off-by: Lukas Reschke --- lib/Saml2/Response.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 5b286cc0..8850a0f5 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -47,7 +47,7 @@ class OneLogin_Saml2_Response /** * NotOnOrAfter value of a valid SubjectConfirmationData node * - * @var DateTime + * @var int */ private $_validSCDNotOnOrAfter; @@ -439,7 +439,8 @@ public function getAssertionId() } /** - * @return the NotOnOrAfter value of the valid SubjectConfirmationData * node if any + * @return int the NotOnOrAfter value of the valid SubjectConfirmationData + * node if any */ public function getAssertionNotOnOrAfter() { From d43797da37343f70d37c1192d968a3c5447803fd Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:07:38 +0200 Subject: [PATCH 019/236] Add proper type hints to \OneLogin_Saml2_Auth::getLastAssertionNotOnOrAfter Signed-off-by: Lukas Reschke --- lib/Saml2/Auth.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index e1f420f6..3863053b 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -84,7 +84,7 @@ class OneLogin_Saml2_Auth * The NotOnOrAfter value of the valid SubjectConfirmationData * node (if any) of the last assertion processed * - * @var DateTime + * @var int */ private $_lastAssertionNotOnOrAfter; @@ -651,7 +651,7 @@ public function getLastAssertionId() } /** - * @return The NotOnOrAfter value of the valid + * @return int The NotOnOrAfter value of the valid * SubjectConfirmationData node (if any) * of the last assertion processed */ From 9718ec7bfd02e28c672a866b16154aecb5fdd23f Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:10:14 +0200 Subject: [PATCH 020/236] Remove $idpInfo PhanUndeclaredVariableDim Variable $idpInfo was undeclared, but array fields are being added to it. Signed-off-by: Lukas Reschke --- lib/Saml2/IdPMetadataParser.php | 2 -- 1 file changed, 2 deletions(-) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index ce6a6938..9d1adae7 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -144,13 +144,11 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n if (!empty($keyDescriptorCertSigningNodes) || !empty($keyDescriptorCertEncryptionNodes)) { $metadataInfo['idp']['x509certMulti'] = array(); if (!empty($keyDescriptorCertSigningNodes)) { - $idpInfo['x509certMulti']['signing'] = array(); foreach ($keyDescriptorCertSigningNodes as $keyDescriptorCertSigningNode) { $metadataInfo['idp']['x509certMulti']['signing'][] = OneLogin_Saml2_Utils::formatCert($keyDescriptorCertSigningNode->nodeValue, false); } } if (!empty($keyDescriptorCertEncryptionNodes)) { - $idpInfo['x509certMulti']['encryption'] = array(); foreach ($keyDescriptorCertEncryptionNodes as $keyDescriptorCertEncryptionNode) { $metadataInfo['idp']['x509certMulti']['encryption'][] = OneLogin_Saml2_Utils::formatCert($keyDescriptorCertEncryptionNode->nodeValue, false); } From e5cb6bcd09e8ba888abcc763a3a33f0f4cd38aa3 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:11:52 +0200 Subject: [PATCH 021/236] Add proper data type to \OneLogin_Saml2_LogoutResponse::getId Signed-off-by: Lukas Reschke --- lib/Saml2/LogoutResponse.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index c6b97ed9..acd7cb33 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -271,7 +271,7 @@ public function getError() } /** - * @return the ID of the Response + * @return string the ID of the Response */ public function getId() { From fdb3078ab228cf7c3fd892c66c28a9063d7378d2 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:12:29 +0200 Subject: [PATCH 022/236] \OneLogin_Saml2_LogoutResponse::getStatus can also return null Signed-off-by: Lukas Reschke --- lib/Saml2/LogoutResponse.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index acd7cb33..c65bbf28 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -87,7 +87,7 @@ public function getIssuer() /** * Gets the Status of the Logout Response. * - * @return string The Status + * @return string|null The Status */ public function getStatus() { From 9329e6f3e1373318bdede29f4058fda8a70a73ee Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:14:25 +0200 Subject: [PATCH 023/236] \OneLogin_Saml2_Auth::getLastResponseXML can also return null Signed-off-by: Lukas Reschke --- lib/Saml2/Auth.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 3863053b..9c0af58e 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -677,7 +677,7 @@ public function getLastRequestXML() * If the SAMLResponse was encrypted, by default tries * to return the decrypted XML. * - * @return string The Response XML + * @return string|null The Response XML */ public function getLastResponseXML() { From 4114b66f8432646b314420a7e081a260b487267f Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:14:53 +0200 Subject: [PATCH 024/236] \OneLogin_Saml2_LogoutResponse::$_error can also be null Signed-off-by: Lukas Reschke --- lib/Saml2/LogoutResponse.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index c65bbf28..e41dcd64 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -32,7 +32,7 @@ class OneLogin_Saml2_LogoutResponse /** * After execute a validation process, if it fails, this var contains the cause - * @var string + * @var string|null */ private $_error; From 6f2b4bff34164624a5607d0e93c4c8674d6ccbc2 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 16:15:35 +0200 Subject: [PATCH 025/236] Add missing throw tag to \OneLogin_Saml2_Response::getIssuers Signed-off-by: Lukas Reschke --- lib/Saml2/Response.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 8850a0f5..894f0015 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -525,6 +525,7 @@ public function getAudiences() * Gets the Issuers (from Response and Assertion). * * @return array @issuers The issuers of the assertion/response + * @throws OneLogin_Saml2_ValidationError */ public function getIssuers() { From c61d3c10c544581804a2589c945e46c386911ec5 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 19:26:18 +0200 Subject: [PATCH 026/236] $settings and $advancedSettings is included => suppress Signed-off-by: Lukas Reschke --- lib/Saml2/Settings.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index da7d358c..de500ff7 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -288,6 +288,7 @@ private function _loadSettingsFromArray($settings) * * @return bool True if the settings info is valid * @throws OneLogin_Saml2_Error + * @suppress PhanUndeclaredVariable */ private function _loadSettingsFromFile() { @@ -301,13 +302,15 @@ private function _loadSettingsFromFile() ); } - include $filename; + /** @var array $settings */ + include $filename; // Add advance_settings if exists $advancedFilename = $this->getConfigPath().'advanced_settings.php'; if (file_exists($advancedFilename)) { + /** @var array $advancedSettings */ include $advancedFilename; $settings = array_merge($settings, $advancedSettings); } From 9eb5ab6b815da25fee0b0a2d2785efae621b6533 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 20:03:21 +0200 Subject: [PATCH 027/236] Those functions also can return null Signed-off-by: Lukas Reschke --- lib/Saml2/Response.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 894f0015..f8cbda0d 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -623,7 +623,7 @@ public function getNameIdData() /** * Gets the NameID provided by the SAML response from the IdP. * - * @return string Name ID Value + * @return string|null Name ID Value */ public function getNameId() { @@ -638,7 +638,7 @@ public function getNameId() /** * Gets the NameID Format provided by the SAML response from the IdP. * - * @return string Name ID Format + * @return string|null Name ID Format */ public function getNameIdFormat() { @@ -653,7 +653,7 @@ public function getNameIdFormat() /** * Gets the NameID NameQualifier provided by the SAML response from the IdP. * - * @return string Name ID NameQualifier + * @return string|null Name ID NameQualifier */ public function getNameIdNameQualifier() { From 34832f2c79e9500c7de0d3fba55c2ac04aea4734 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 20:13:28 +0200 Subject: [PATCH 028/236] Suppress the undeclared constants Ref https://github.com/phan/phan/issues/707 Signed-off-by: Lukas Reschke --- lib/Saml2/Settings.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index de500ff7..451c5eb8 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -150,6 +150,7 @@ public function __construct($settings = null, $spValidationOnly = false) /** * Sets the paths of the different folders + * @suppress PhanUndeclaredConstant */ private function _loadPaths() { From effabe29a0a0e5b220704c5e6f4faadaed7820f6 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 3 Oct 2017 20:16:39 +0200 Subject: [PATCH 029/236] \OneLogin_Saml2_Utils::loadXML can also return false Signed-off-by: Lukas Reschke --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index f86337fb..b999f689 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -73,7 +73,7 @@ public static function t($msg, $args = array()) * * @throws Exception * - * @return DOMDocument $dom The result of load the XML at the DomDocument + * @return DOMDocument|false $dom The result of load the XML at the DomDocument */ public static function loadXML($dom, $xml) { From 0e6ee4f12ec70d7d8414bbba17fcb0fca064e1d5 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 18 Oct 2017 17:17:17 +0200 Subject: [PATCH 030/236] Add an extra filter to the url to be used on redirection --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 78d723a2..56a5fff3 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -253,7 +253,7 @@ public static function redirect($url, $parameters = array(), $stay = false) } /* Verify that the URL is to a http or https site. */ - if (!preg_match('@^https?://@i', $url)) { + if (!preg_match('@^https?://@i', $url) || empty($url = filter_var($url, FILTER_VALIDATE_URL))) { throw new OneLogin_Saml2_Error( 'Redirect to invalid URL: ' . $url, OneLogin_Saml2_Error::REDIRECT_INVALID_URL From 52e2fde442a8b6e6a12950cdf274e31a4862a256 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 18 Oct 2017 17:28:07 +0200 Subject: [PATCH 031/236] . --- lib/Saml2/Utils.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 56a5fff3..86fb4954 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -253,7 +253,9 @@ public static function redirect($url, $parameters = array(), $stay = false) } /* Verify that the URL is to a http or https site. */ - if (!preg_match('@^https?://@i', $url) || empty($url = filter_var($url, FILTER_VALIDATE_URL))) { + $wrongProtocol = !preg_match('@^https?://@i', $url); + $url = filter_var($url, FILTER_VALIDATE_URL); + if ($wrongProtocol || empty($url)) { throw new OneLogin_Saml2_Error( 'Redirect to invalid URL: ' . $url, OneLogin_Saml2_Error::REDIRECT_INVALID_URL From 30ad63f5027bb17df421a2fc6f2ad422432ad247 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 18 Oct 2017 17:52:13 +0200 Subject: [PATCH 032/236] Fix #263. Issue with LogoutRequest rejected by ADFS due NameID with unspecified format instead no format attribute --- lib/Saml2/LogoutRequest.php | 3 +- lib/Saml2/Utils.php | 6 +- .../src/OneLogin/Saml2/LogoutRequestTest.php | 70 ++++++++++++++++++- tests/src/OneLogin/Saml2/UtilsTest.php | 19 +++++ 4 files changed, 94 insertions(+), 4 deletions(-) diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index 0c77a692..a10fdd80 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -72,7 +72,8 @@ public function __construct(OneLogin_Saml2_Settings $settings, $request = null, } if (!empty($nameId)) { - if (empty($nameIdFormat)) { + if (empty($nameIdFormat) && + $spData['NameIDFormat'] != OneLogin_Saml2_Constants::NAMEID_UNSPECIFIED) { $nameIdFormat = $spData['NameIDFormat']; } $spNameQualifier = null; diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 86fb4954..4f772d64 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -954,7 +954,7 @@ public static function formatFingerPrint($fingerprint) * * @return string $nameIDElement DOMElement | XMLSec nameID */ - public static function generateNameId($value, $spnq, $format, $cert = null, $nq = null) + public static function generateNameId($value, $spnq, $format = null, $cert = null, $nq = null) { $doc = new DOMDocument(); @@ -966,7 +966,9 @@ public static function generateNameId($value, $spnq, $format, $cert = null, $nq if (isset($nq)) { $nameId->setAttribute('NameQualifier', $nq); } - $nameId->setAttribute('Format', $format); + if (isset($format)) { + $nameId->setAttribute('Format', $format); + } $nameId->appendChild($doc->createTextNode($value)); $doc->appendChild($nameId); diff --git a/tests/src/OneLogin/Saml2/LogoutRequestTest.php b/tests/src/OneLogin/Saml2/LogoutRequestTest.php index 20268294..4c69f221 100644 --- a/tests/src/OneLogin/Saml2/LogoutRequestTest.php +++ b/tests/src/OneLogin/Saml2/LogoutRequestTest.php @@ -109,7 +109,7 @@ public function testConstructorWithSessionIndex() * * @covers OneLogin_Saml2_LogoutRequest */ - public function testConstructorWithNameIdFormat() + public function testConstructorWithNameIdFormatOnParameter() { $settingsDir = TEST_ROOT .'/settings/'; include $settingsDir.'settings1.php'; @@ -137,6 +137,74 @@ public function testConstructorWithNameIdFormat() $this->assertEquals($nameIdFormat, $logoutNameIdData['Format']); } + /** + * Tests the OneLogin_Saml2_LogoutRequest Constructor. + * + * @covers OneLogin_Saml2_LogoutRequest + */ + public function testConstructorWithNameIdFormatOnSettings() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $nameId = 'test@example.com'; + $nameIdFormat = 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient'; + $settingsInfo['sp']['NameIDFormat'] = $nameIdFormat; + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $logoutRequest = new OneLogin_Saml2_LogoutRequest($settings, null, $nameId, null, null); + + $parameters = array('SAMLRequest' => $logoutRequest->getRequest()); + $logoutUrl = OneLogin_Saml2_Utils::redirect('http://idp.example.com/SingleLogoutService.php', $parameters, true); + $this->assertRegExp('#^http://idp\.example\.com\/SingleLogoutService\.php\?SAMLRequest=#', $logoutUrl); + parse_str(parse_url(http://github.com/$logoutUrl,%20PHP_URL_QUERY), $exploded); + // parse_url already urldecode de params so is not required. + $payload = $exploded['SAMLRequest']; + $decoded = base64_decode($payload); + $inflated = gzinflate($decoded); + $this->assertRegExp('#^assertEquals($nameId, $logoutNameId); + + $logoutNameIdData = OneLogin_Saml2_LogoutRequest::getNameIdData($inflated); + $this->assertEquals($nameIdFormat, $logoutNameIdData['Format']); + } + + /** + * Tests the OneLogin_Saml2_LogoutRequest Constructor. + * + * @covers OneLogin_Saml2_LogoutRequest + */ + public function testConstructorWithoutNameIdFormat() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $nameId = 'test@example.com'; + $nameIdFormat = 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified'; + $settingsInfo['sp']['NameIDFormat'] = $nameIdFormat; + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $logoutRequest = new OneLogin_Saml2_LogoutRequest($settings, null, $nameId, null, null); + + $parameters = array('SAMLRequest' => $logoutRequest->getRequest()); + $logoutUrl = OneLogin_Saml2_Utils::redirect('http://idp.example.com/SingleLogoutService.php', $parameters, true); + $this->assertRegExp('#^http://idp\.example\.com\/SingleLogoutService\.php\?SAMLRequest=#', $logoutUrl); + parse_str(parse_url(http://github.com/$logoutUrl,%20PHP_URL_QUERY), $exploded); + // parse_url already urldecode de params so is not required. + $payload = $exploded['SAMLRequest']; + $decoded = base64_decode($payload); + $inflated = gzinflate($decoded); + $this->assertRegExp('#^assertEquals($nameId, $logoutNameId); + + $logoutNameIdData = OneLogin_Saml2_LogoutRequest::getNameIdData($inflated); + $this->assertFalse(isset($logoutNameIdData['Format'])); + } + /** * Tests the OneLogin_Saml2_LogoutRequest Constructor. * diff --git a/tests/src/OneLogin/Saml2/UtilsTest.php b/tests/src/OneLogin/Saml2/UtilsTest.php index 4d2b5ecc..2317859e 100644 --- a/tests/src/OneLogin/Saml2/UtilsTest.php +++ b/tests/src/OneLogin/Saml2/UtilsTest.php @@ -812,6 +812,25 @@ public function testGenerateNameIdWithSPNameQualifier() $this->assertContains($nameidExpectedEnc, $nameIdEnc); } + /** + * Tests the generateNameId method of the OneLogin_Saml2_Utils + * + * @covers OneLogin_Saml2_Utils::generateNameId + */ + public function testGenerateNameIdWithoutFormat() + { + $nameIdValue = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde'; + + $nameId = OneLogin_Saml2_Utils::generateNameId( + $nameIdValue, + null, + null + ); + + $expectedNameId = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde'; + $this->assertEquals($nameId, $expectedNameId); + } + /** * Tests the generateNameId method of the OneLogin_Saml2_Utils * From 282b39dfce4def24f2509904ee6e6a4a1672f54b Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 6 Nov 2017 12:10:10 +0100 Subject: [PATCH 033/236] Fix 250. Fixed issue with IdPMetadataParser only keeping 1 certificate when multiple certificates of a single type were provided. Add and to IdP Parser methods --- lib/Saml2/IdPMetadataParser.php | 24 +- tests/data/metadata/idp/idp_metadata.xml | 42 +++ tests/data/metadata/idp/idp_metadata2.xml | 1 + .../metadata/idp/idp_metadata_multi_certs.xml | 75 +++++ .../idp/idp_metadata_multi_signing_certs.xml | 75 +++++ .../metadata/idp/idp_multiple_descriptors.xml | 53 +++ .../data/metadata/idp/testshib-providers.xml | 311 ++++++++++++++++++ .../OneLogin/Saml2/IdPMetadataParserTest.php | 196 +++++++++++ 8 files changed, 769 insertions(+), 8 deletions(-) create mode 100644 tests/data/metadata/idp/idp_metadata.xml create mode 100644 tests/data/metadata/idp/idp_metadata2.xml create mode 100644 tests/data/metadata/idp/idp_metadata_multi_certs.xml create mode 100644 tests/data/metadata/idp/idp_metadata_multi_signing_certs.xml create mode 100644 tests/data/metadata/idp/idp_multiple_descriptors.xml create mode 100644 tests/data/metadata/idp/testshib-providers.xml diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index d9fcd9f6..8c0b51c9 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -16,10 +16,12 @@ class OneLogin_Saml2_IdPMetadataParser * metadata contains more than one * IDPSSODescriptor, the first is returned * @param string $desiredNameIdFormat If available on IdP metadata, use that nameIdFormat + * @param string $desiredSSOBinding Parse specific binding SSO endpoint. + * @param string $desiredSLOBinding Parse specific binding SLO endpoint. * * @return array metadata info in php-saml settings format */ - public static function parseRemoteXML($url, $entityId = null, $desiredNameIdFormat = null) + public static function parseRemoteXML($url, $entityId = null, $desiredNameIdFormat = null, $desiredSSOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, $desiredSLOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) { $metadataInfo = array(); @@ -33,7 +35,7 @@ public static function parseRemoteXML($url, $entityId = null, $desiredNameIdForm $xml = curl_exec($ch); if ($xml !== false) { - $metadataInfo = self::parseXML($xml, $entityId); + $metadataInfo = self::parseXML($xml, $entityId, $desiredSSOBinding, $desiredSLOBinding); } else { throw new Exception(curl_error($ch), curl_errno($ch)); } @@ -51,17 +53,19 @@ public static function parseRemoteXML($url, $entityId = null, $desiredNameIdForm * metadata contains more than one * IDPSSODescriptor, the first is returned * @param string $desiredNameIdFormat If available on IdP metadata, use that nameIdFormat + * @param string $desiredSSOBinding Parse specific binding SSO endpoint. + * @param string $desiredSLOBinding Parse specific binding SLO endpoint. * * @return array metadata info in php-saml settings format */ - public static function parseFileXML($filepath, $entityId = null, $desiredNameIdFormat = null) + public static function parseFileXML($filepath, $entityId = null, $desiredNameIdFormat = null, $desiredSSOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, $desiredSLOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) { $metadataInfo = array(); try { if (file_exists($filepath)) { $data = file_get_contents($filepath); - $metadataInfo = self::parseXML($data, $entityId); + $metadataInfo = self::parseXML($data, $entityId, $desiredSSOBinding, $desiredSLOBinding); } } catch (Exception $e) { } @@ -77,10 +81,12 @@ public static function parseFileXML($filepath, $entityId = null, $desiredNameIdF * metadata contains more than one * IDPSSODescriptor, the first is returned * @param string $desiredNameIdFormat If available on IdP metadata, use that nameIdFormat + * @param string $desiredSSOBinding Parse specific binding SSO endpoint. + * @param string $desiredSLOBinding Parse specific binding SLO endpoint. * * @return array metadata info in php-saml settings format */ - public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = null) + public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = null, $desiredSSOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, $desiredSLOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) { $metadataInfo = array(); @@ -114,7 +120,7 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n $metadataInfo['idp']['entityId'] = $entityId; } - $ssoNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleSignOnService[@Binding="'.OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT.'"]', $idpDescriptor); + $ssoNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleSignOnService[@Binding="'.$desiredSSOBinding.'"]', $idpDescriptor); if ($ssoNodes->length < 1) { $ssoNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleSignOnService', $idpDescriptor); } @@ -125,7 +131,7 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n ); } - $sloNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleLogoutService[@Binding="'.OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT.'"]', $idpDescriptor); + $sloNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleLogoutService[@Binding="'.$desiredSLOBinding.'"]', $idpDescriptor); if ($sloNodes->length < 1) { $sloNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleLogoutService', $idpDescriptor); } @@ -156,7 +162,9 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n } $idpCertdata = $metadataInfo['idp']['x509certMulti']; - if (count($idpCertdata) == 1 || ((isset($idpCertdata['signing']) && count($idpCertdata['signing']) == 1) && isset($idpCertdata['encryption']) && count($idpCertdata['encryption']) == 1 && strcmp($idpCertdata['signing'][0], $idpCertdata['encryption'][0]) == 0)) { + if (count($idpCertdata) == 1 and + ((isset($idpCertdata['signing']) and count($idpCertdata['signing']) == 1) or (isset($idpCertdata['encryption']) and count($idpCertdata['encryption']) == 1)) or + ((isset($idpCertdata['signing']) && count($idpCertdata['signing']) == 1) && isset($idpCertdata['encryption']) && count($idpCertdata['encryption']) == 1 && strcmp($idpCertdata['signing'][0], $idpCertdata['encryption'][0]) == 0)) { if (isset($metadataInfo['idp']['x509certMulti']['signing'][0])) { $metadataInfo['idp']['x509cert'] = $metadataInfo['idp']['x509certMulti']['signing'][0]; } else { diff --git a/tests/data/metadata/idp/idp_metadata.xml b/tests/data/metadata/idp/idp_metadata.xml new file mode 100644 index 00000000..146428c1 --- /dev/null +++ b/tests/data/metadata/idp/idp_metadata.xml @@ -0,0 +1,42 @@ + + + + + + + MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET +MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD +VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 +MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI +DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u +ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z +0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT +gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m +Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF +zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ +UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG +A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV +HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV +UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw +DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO +BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu +AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV +gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ +sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP +TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu +QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 +1sE= + + + + urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress + + + + + + Support + support@onelogin.com + + \ No newline at end of file diff --git a/tests/data/metadata/idp/idp_metadata2.xml b/tests/data/metadata/idp/idp_metadata2.xml new file mode 100644 index 00000000..0b19f62a --- /dev/null +++ b/tests/data/metadata/idp/idp_metadata2.xml @@ -0,0 +1 @@ + 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 urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress urn:oasis:names:tc:SAML:2.0:nameid-format:persistent urn:oasis:names:tc:SAML:2.0:nameid-format:transient \ No newline at end of file diff --git a/tests/data/metadata/idp/idp_metadata_multi_certs.xml b/tests/data/metadata/idp/idp_metadata_multi_certs.xml new file mode 100644 index 00000000..f993f64a --- /dev/null +++ b/tests/data/metadata/idp/idp_metadata_multi_certs.xml @@ -0,0 +1,75 @@ + + + + + + + MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF +BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj +aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW +T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy +MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz +Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV +BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo +3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw +tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx +VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 +L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t +1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ +BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB +pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD +VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL +DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC +FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B +AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM +GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c +hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB +vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 +MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ +WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== + + + + + + + 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 + + + + + + + MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF +BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj +aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW +T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy +MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz +Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV +BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo +3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw +tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx +VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 +L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t +1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ +BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB +pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD +VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL +DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC +FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B +AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM +GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c +hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB +vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 +MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ +WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== + + + + + urn:oasis:names:tc:SAML:2.0:nameid-format:transient + + + \ No newline at end of file diff --git a/tests/data/metadata/idp/idp_metadata_multi_signing_certs.xml b/tests/data/metadata/idp/idp_metadata_multi_signing_certs.xml new file mode 100644 index 00000000..0cba257a --- /dev/null +++ b/tests/data/metadata/idp/idp_metadata_multi_signing_certs.xml @@ -0,0 +1,75 @@ + + + + + + + MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF +BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj +aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW +T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy +MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz +Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV +BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo +3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw +tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx +VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 +L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t +1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ +BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB +pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD +VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL +DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC +FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B +AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM +GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c +hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB +vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 +MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ +WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== + + + + + + + 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 + + + + + + + MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF +BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj +aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW +T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy +MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz +Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV +BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo +3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw +tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx +VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 +L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t +1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ +BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB +pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD +VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL +DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC +FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B +AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM +GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c +hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB +vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 +MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ +WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== + + + + + urn:oasis:names:tc:SAML:2.0:nameid-format:transient + + + diff --git a/tests/data/metadata/idp/idp_multiple_descriptors.xml b/tests/data/metadata/idp/idp_multiple_descriptors.xml new file mode 100644 index 00000000..c77face7 --- /dev/null +++ b/tests/data/metadata/idp/idp_multiple_descriptors.xml @@ -0,0 +1,53 @@ + + + + + + + + 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 + + + + + + + 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 + + + + + urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified + urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress + urn:oasis:names:tc:SAML:2.0:nameid-format:persistent + + + + + + + + + + + LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURxekNDQXhTZ0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBRENCaGpFTE1Ba0dBMVVFQmhNQ1FWVXgKRERBS0JnTlZCQWdUQTA1VFZ6RVBNQTBHQTFVRUJ4TUdVM2xrYm1WNU1Rd3dDZ1lEVlFRS0RBTlFTVlF4Q1RBSApCZ05WQkFzTUFERVlNQllHQTFVRUF3d1BiR0YzY21WdVkyVndhWFF1WTI5dE1TVXdJd1lKS29aSWh2Y05BUWtCCkRCWnNZWGR5Wlc1alpTNXdhWFJBWjIxaGFXd3VZMjl0TUI0WERURXlNRFF4T1RJeU5UUXhPRm9YRFRNeU1EUXgKTkRJeU5UUXhPRm93Z1lZeEN6QUpCZ05WQkFZVEFrRlZNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVApCbE41Wkc1bGVURU1NQW9HQTFVRUNnd0RVRWxVTVFrd0J3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psCmJtTmxjR2wwTG1OdmJURWxNQ01HQ1NxR1NJYjNEUUVKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnYKYlRDQm56QU5CZ2txaGtpRzl3MEJBUUVGQUFPQmpRQXdnWWtDZ1lFQXFqaWUzUjJvaStwRGFldndJeXMvbWJVVApubkdsa3h0ZGlrcnExMXZleHd4SmlQTmhtaHFSVzNtVXVKRXpsbElkVkw2RW14R1lUcXBxZjkzSGxoa3NhZUowCjhVZ2pQOVVtTVlyaFZKdTFqY0ZXVjdmei9yKzIxL2F3VG5EVjlzTVlRcXVJUllZeTdiRzByMU9iaXdkb3ZudGsKN2dGSTA2WjB2WmFjREU1Ym9xVUNBd0VBQWFPQ0FTVXdnZ0VoTUFrR0ExVWRFd1FDTUFBd0N3WURWUjBQQkFRRApBZ1VnTUIwR0ExVWREZ1FXQkJTUk9OOEdKOG8rOGpnRnRqa3R3WmRxeDZCUnlUQVRCZ05WSFNVRUREQUtCZ2dyCkJnRUZCUWNEQVRBZEJnbGdoa2dCaHZoQ0FRMEVFQllPVkdWemRDQllOVEE1SUdObGNuUXdnYk1HQTFVZEl3U0IKcXpDQnFJQVVrVGpmQmlmS1B2STRCYlk1TGNHWGFzZWdVY21oZ1l5a2dZa3dnWVl4Q3pBSkJnTlZCQVlUQWtGVgpNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVEJsTjVaRzVsZVRFTU1Bb0dBMVVFQ2d3RFVFbFVNUWt3CkJ3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psYm1ObGNHbDBMbU52YlRFbE1DTUdDU3FHU0liM0RRRUoKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnZiWUlCQVRBTkJna3Foa2lHOXcwQkFRc0ZBQU9CZ1FDRQpUQWVKVERTQVc2ejFVRlRWN1FyZWg0VUxGT1JhajkrZUN1RjNLV0RIYyswSVFDajlyZG5ERzRRL3dmNy9yYVEwCkpuUFFDU0NkclBMSmV5b1BIN1FhVHdvYUY3ZHpWdzRMQ3N5TkpURld4NGNNNTBWdzZSNWZET2dpQzhic2ZmUzgKQkptb3VscnJaRE5OVmpHOG1XNmNMeHJZdlZRT3JSVmVjQ0ZJZ3NzQ2JBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= + + + + + + + LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURxekNDQXhTZ0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBRENCaGpFTE1Ba0dBMVVFQmhNQ1FWVXgKRERBS0JnTlZCQWdUQTA1VFZ6RVBNQTBHQTFVRUJ4TUdVM2xrYm1WNU1Rd3dDZ1lEVlFRS0RBTlFTVlF4Q1RBSApCZ05WQkFzTUFERVlNQllHQTFVRUF3d1BiR0YzY21WdVkyVndhWFF1WTI5dE1TVXdJd1lKS29aSWh2Y05BUWtCCkRCWnNZWGR5Wlc1alpTNXdhWFJBWjIxaGFXd3VZMjl0TUI0WERURXlNRFF4T1RJeU5UUXhPRm9YRFRNeU1EUXgKTkRJeU5UUXhPRm93Z1lZeEN6QUpCZ05WQkFZVEFrRlZNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVApCbE41Wkc1bGVURU1NQW9HQTFVRUNnd0RVRWxVTVFrd0J3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psCmJtTmxjR2wwTG1OdmJURWxNQ01HQ1NxR1NJYjNEUUVKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnYKYlRDQm56QU5CZ2txaGtpRzl3MEJBUUVGQUFPQmpRQXdnWWtDZ1lFQXFqaWUzUjJvaStwRGFldndJeXMvbWJVVApubkdsa3h0ZGlrcnExMXZleHd4SmlQTmhtaHFSVzNtVXVKRXpsbElkVkw2RW14R1lUcXBxZjkzSGxoa3NhZUowCjhVZ2pQOVVtTVlyaFZKdTFqY0ZXVjdmei9yKzIxL2F3VG5EVjlzTVlRcXVJUllZeTdiRzByMU9iaXdkb3ZudGsKN2dGSTA2WjB2WmFjREU1Ym9xVUNBd0VBQWFPQ0FTVXdnZ0VoTUFrR0ExVWRFd1FDTUFBd0N3WURWUjBQQkFRRApBZ1VnTUIwR0ExVWREZ1FXQkJTUk9OOEdKOG8rOGpnRnRqa3R3WmRxeDZCUnlUQVRCZ05WSFNVRUREQUtCZ2dyCkJnRUZCUWNEQVRBZEJnbGdoa2dCaHZoQ0FRMEVFQllPVkdWemRDQllOVEE1SUdObGNuUXdnYk1HQTFVZEl3U0IKcXpDQnFJQVVrVGpmQmlmS1B2STRCYlk1TGNHWGFzZWdVY21oZ1l5a2dZa3dnWVl4Q3pBSkJnTlZCQVlUQWtGVgpNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVEJsTjVaRzVsZVRFTU1Bb0dBMVVFQ2d3RFVFbFVNUWt3CkJ3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psYm1ObGNHbDBMbU52YlRFbE1DTUdDU3FHU0liM0RRRUoKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnZiWUlCQVRBTkJna3Foa2lHOXcwQkFRc0ZBQU9CZ1FDRQpUQWVKVERTQVc2ejFVRlRWN1FyZWg0VUxGT1JhajkrZUN1RjNLV0RIYyswSVFDajlyZG5ERzRRL3dmNy9yYVEwCkpuUFFDU0NkclBMSmV5b1BIN1FhVHdvYUY3ZHpWdzRMQ3N5TkpURld4NGNNNTBWdzZSNWZET2dpQzhic2ZmUzgKQkptb3VscnJaRE5OVmpHOG1XNmNMeHJZdlZRT3JSVmVjQ0ZJZ3NzQ2JBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= + + + + + urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified + urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress + urn:oasis:names:tc:SAML:2.0:nameid-format:persistent + + + + + + \ No newline at end of file diff --git a/tests/data/metadata/idp/testshib-providers.xml b/tests/data/metadata/idp/testshib-providers.xml new file mode 100644 index 00000000..c00a1b77 --- /dev/null +++ b/tests/data/metadata/idp/testshib-providers.xml @@ -0,0 +1,311 @@ + + + + + + + + + + + + + + + + + + + + testshib.org + + TestShib Test IdP + TestShib IdP. Use this as a source of attributes + for your test SP. + https://www.testshib.org/testshibtwo.jpg + + + + + + + + MIIEDjCCAvagAwIBAgIBADANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzEV + MBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1cmdoMREwDwYD + VQQKEwhUZXN0U2hpYjEZMBcGA1UEAxMQaWRwLnRlc3RzaGliLm9yZzAeFw0wNjA4 + MzAyMTEyMjVaFw0xNjA4MjcyMTEyMjVaMGcxCzAJBgNVBAYTAlVTMRUwEwYDVQQI + EwxQZW5uc3lsdmFuaWExEzARBgNVBAcTClBpdHRzYnVyZ2gxETAPBgNVBAoTCFRl + c3RTaGliMRkwFwYDVQQDExBpZHAudGVzdHNoaWIub3JnMIIBIjANBgkqhkiG9w0B + AQEFAAOCAQ8AMIIBCgKCAQEArYkCGuTmJp9eAOSGHwRJo1SNatB5ZOKqDM9ysg7C + yVTDClcpu93gSP10nH4gkCZOlnESNgttg0r+MqL8tfJC6ybddEFB3YBo8PZajKSe + 3OQ01Ow3yT4I+Wdg1tsTpSge9gEz7SrC07EkYmHuPtd71CHiUaCWDv+xVfUQX0aT + NPFmDixzUjoYzbGDrtAyCqA8f9CN2txIfJnpHE6q6CmKcoLADS4UrNPlhHSzd614 + kR/JYiks0K4kbRqCQF0Dv0P5Di+rEfefC6glV8ysC8dB5/9nb0yh/ojRuJGmgMWH + gWk6h0ihjihqiu4jACovUZ7vVOCgSE5Ipn7OIwqd93zp2wIDAQABo4HEMIHBMB0G + A1UdDgQWBBSsBQ869nh83KqZr5jArr4/7b+QazCBkQYDVR0jBIGJMIGGgBSsBQ86 + 9nh83KqZr5jArr4/7b+Qa6FrpGkwZzELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFBl + bm5zeWx2YW5pYTETMBEGA1UEBxMKUGl0dHNidXJnaDERMA8GA1UEChMIVGVzdFNo + aWIxGTAXBgNVBAMTEGlkcC50ZXN0c2hpYi5vcmeCAQAwDAYDVR0TBAUwAwEB/zAN + BgkqhkiG9w0BAQUFAAOCAQEAjR29PhrCbk8qLN5MFfSVk98t3CT9jHZoYxd8QMRL + I4j7iYQxXiGJTT1FXs1nd4Rha9un+LqTfeMMYqISdDDI6tv8iNpkOAvZZUosVkUo + 93pv1T0RPz35hcHHYq2yee59HJOco2bFlcsH8JBXRSRrJ3Q7Eut+z9uo80JdGNJ4 + /SJy5UorZ8KazGj16lfJhOBXldgrhppQBb0Nq6HKHguqmwRfJ+WkxemZXzhediAj + Geka8nz8JjwxpUjAiSWYKLtJhGEaTqCYxCCX2Dw+dOTqUzHOZ7WKv4JXPK5G/Uhr + 8K/qhmFT2nIQi538n6rVYLeWj8Bbnl+ev0peYzxFyF5sQA== + + + + + + + + + + + + + + + urn:mace:shibboleth:1.0:nameIdentifier + urn:oasis:names:tc:SAML:2.0:nameid-format:transient + + + + + + + + + + + + + + + + MIIEDjCCAvagAwIBAgIBADANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzEV + MBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1cmdoMREwDwYD + VQQKEwhUZXN0U2hpYjEZMBcGA1UEAxMQaWRwLnRlc3RzaGliLm9yZzAeFw0wNjA4 + MzAyMTEyMjVaFw0xNjA4MjcyMTEyMjVaMGcxCzAJBgNVBAYTAlVTMRUwEwYDVQQI + EwxQZW5uc3lsdmFuaWExEzARBgNVBAcTClBpdHRzYnVyZ2gxETAPBgNVBAoTCFRl + c3RTaGliMRkwFwYDVQQDExBpZHAudGVzdHNoaWIub3JnMIIBIjANBgkqhkiG9w0B + AQEFAAOCAQ8AMIIBCgKCAQEArYkCGuTmJp9eAOSGHwRJo1SNatB5ZOKqDM9ysg7C + yVTDClcpu93gSP10nH4gkCZOlnESNgttg0r+MqL8tfJC6ybddEFB3YBo8PZajKSe + 3OQ01Ow3yT4I+Wdg1tsTpSge9gEz7SrC07EkYmHuPtd71CHiUaCWDv+xVfUQX0aT + NPFmDixzUjoYzbGDrtAyCqA8f9CN2txIfJnpHE6q6CmKcoLADS4UrNPlhHSzd614 + kR/JYiks0K4kbRqCQF0Dv0P5Di+rEfefC6glV8ysC8dB5/9nb0yh/ojRuJGmgMWH + gWk6h0ihjihqiu4jACovUZ7vVOCgSE5Ipn7OIwqd93zp2wIDAQABo4HEMIHBMB0G + A1UdDgQWBBSsBQ869nh83KqZr5jArr4/7b+QazCBkQYDVR0jBIGJMIGGgBSsBQ86 + 9nh83KqZr5jArr4/7b+Qa6FrpGkwZzELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFBl + bm5zeWx2YW5pYTETMBEGA1UEBxMKUGl0dHNidXJnaDERMA8GA1UEChMIVGVzdFNo + aWIxGTAXBgNVBAMTEGlkcC50ZXN0c2hpYi5vcmeCAQAwDAYDVR0TBAUwAwEB/zAN + BgkqhkiG9w0BAQUFAAOCAQEAjR29PhrCbk8qLN5MFfSVk98t3CT9jHZoYxd8QMRL + I4j7iYQxXiGJTT1FXs1nd4Rha9un+LqTfeMMYqISdDDI6tv8iNpkOAvZZUosVkUo + 93pv1T0RPz35hcHHYq2yee59HJOco2bFlcsH8JBXRSRrJ3Q7Eut+z9uo80JdGNJ4 + /SJy5UorZ8KazGj16lfJhOBXldgrhppQBb0Nq6HKHguqmwRfJ+WkxemZXzhediAj + Geka8nz8JjwxpUjAiSWYKLtJhGEaTqCYxCCX2Dw+dOTqUzHOZ7WKv4JXPK5G/Uhr + 8K/qhmFT2nIQi538n6rVYLeWj8Bbnl+ev0peYzxFyF5sQA== + + + + + + + + + + + + + + + + urn:mace:shibboleth:1.0:nameIdentifier + urn:oasis:names:tc:SAML:2.0:nameid-format:transient + + + + + TestShib Two Identity Provider + TestShib Two + http://www.testshib.org/testshib-two/ + + + Nate + Klingenstein + ndk@internet2.edu + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + TestShib Test SP + TestShib SP. Log into this to test your machine. + Once logged in check that all attributes that you expected have been + released. + https://www.testshib.org/testshibtwo.jpg + + + + + + + + MIIEPjCCAyagAwIBAgIBADANBgkqhkiG9w0BAQUFADB3MQswCQYDVQQGEwJVUzEV + MBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1cmdoMSIwIAYD + VQQKExlUZXN0U2hpYiBTZXJ2aWNlIFByb3ZpZGVyMRgwFgYDVQQDEw9zcC50ZXN0 + c2hpYi5vcmcwHhcNMDYwODMwMjEyNDM5WhcNMTYwODI3MjEyNDM5WjB3MQswCQYD + VQQGEwJVUzEVMBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1 + cmdoMSIwIAYDVQQKExlUZXN0U2hpYiBTZXJ2aWNlIFByb3ZpZGVyMRgwFgYDVQQD + Ew9zcC50ZXN0c2hpYi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB + AQDJyR6ZP6MXkQ9z6RRziT0AuCabDd3x1m7nLO9ZRPbr0v1LsU+nnC363jO8nGEq + sqkgiZ/bSsO5lvjEt4ehff57ERio2Qk9cYw8XCgmYccVXKH9M+QVO1MQwErNobWb + AjiVkuhWcwLWQwTDBowfKXI87SA7KR7sFUymNx5z1aoRvk3GM++tiPY6u4shy8c7 + vpWbVfisfTfvef/y+galxjPUQYHmegu7vCbjYP3On0V7/Ivzr+r2aPhp8egxt00Q + XpilNai12LBYV3Nv/lMsUzBeB7+CdXRVjZOHGuQ8mGqEbsj8MBXvcxIKbcpeK5Zi + JCVXPfarzuriM1G5y5QkKW+LAgMBAAGjgdQwgdEwHQYDVR0OBBYEFKB6wPDxwYrY + StNjU5P4b4AjBVQVMIGhBgNVHSMEgZkwgZaAFKB6wPDxwYrYStNjU5P4b4AjBVQV + oXukeTB3MQswCQYDVQQGEwJVUzEVMBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYD + VQQHEwpQaXR0c2J1cmdoMSIwIAYDVQQKExlUZXN0U2hpYiBTZXJ2aWNlIFByb3Zp + ZGVyMRgwFgYDVQQDEw9zcC50ZXN0c2hpYi5vcmeCAQAwDAYDVR0TBAUwAwEB/zAN + BgkqhkiG9w0BAQUFAAOCAQEAc06Kgt7ZP6g2TIZgMbFxg6vKwvDL0+2dzF11Onpl + 5sbtkPaNIcj24lQ4vajCrrGKdzHXo9m54BzrdRJ7xDYtw0dbu37l1IZVmiZr12eE + Iay/5YMU+aWP1z70h867ZQ7/7Y4HW345rdiS6EW663oH732wSYNt9kr7/0Uer3KD + 9CuPuOidBacospDaFyfsaJruE99Kd6Eu/w5KLAGG+m0iqENCziDGzVA47TngKz2v + PVA+aokoOyoz3b53qeti77ijatSEoKjxheBWpO+eoJeGq/e49Um3M2ogIX/JAlMa + Inh+vYSYngQB2sx9LGkR9KHaMKNIGCDehk93Xla4pWJx1w== + + + + + + + + + + + + + + + + + + + + + + + + urn:oasis:names:tc:SAML:2.0:nameid-format:transient + urn:mace:shibboleth:1.0:nameIdentifier + + + + + + + + + + + + + + + + + + + + TestShib Two Service Provider + TestShib Two + http://www.testshib.org/testshib-two/ + + + Nate + Klingenstein + ndk@internet2.edu + + + + + + + diff --git a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php index 58c5bc6b..88c5ffe4 100644 --- a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php +++ b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php @@ -33,6 +33,24 @@ public function testParseFileXML() $filepath = TEST_ROOT .'/data/metadata/idp/onelogin_metadata.xml'; $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseFileXML($filepath); $this->assertEquals($expectedInfo, $idpInfo); + + $expectedInfo2 = array( + "idp" => array( + "singleSignOnService" => array( + "url" => "https://app.onelogin.com/trust/saml2/http-post/sso/383123", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ), + "x509cert" => "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", + "entityId" => "https://app.onelogin.com/saml/metadata/383123" + ), + "sp" => array( + "NameIDFormat" => "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" + ) + ); + + $filepath = TEST_ROOT .'/data/metadata/idp/idp_metadata.xml'; + $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseFileXML($filepath); + $this->assertEquals($expectedInfo2, $idpInfo); } /** @@ -74,6 +92,108 @@ public function testParseXML() $this->assertEquals($expectedInfo, $idpInfo); } + /** + * Tests the parseXML method of IdPMetadataParser. + * Case: Test with testshib metadata. + * Especially test extracting SSO with REDIRECT binding. + * Note that the testshib metadata does not contain an SLO specification + * in the first tag. + * + * @covers OneLogin_Saml2_IdPMetadataParser::parseXML + */ + public function testParseTestshibDesiredBindingSSORedirect() + { + $expectedInfo = array( + "sp" => array( + "NameIDFormat" => "urn:mace:shibboleth:1.0:nameIdentifier" + ), + "idp" => array( + "entityId" => "https://idp.testshib.org/idp/shibboleth", + "singleSignOnService" => array( + "url" => "https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ), + "x509cert" => "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" + ) + ); + + $xml = file_get_contents(TEST_ROOT .'/data/metadata/idp/testshib-providers.xml'); + $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseXML($xml); + $idpInfo2 = OneLogin_Saml2_IdPMetadataParser::parseXML($xml, null, null, OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT); + $this->assertEquals($expectedInfo, $idpInfo); + $this->assertEquals($expectedInfo, $idpInfo2); + } + + /** + * Tests the parseXML method of IdPMetadataParser. + * Case: Test with testshib metadata. + * Especially test extracting SSO with POST binding. + * Note that the testshib metadata does not contain an SLO specification + * in the first tag. + * + * @covers OneLogin_Saml2_IdPMetadataParser::parseXML + */ + public function testParseTestshibDesiredBindingSSOPost() + { + $expectedInfo = array( + "sp" => array( + "NameIDFormat" => "urn:mace:shibboleth:1.0:nameIdentifier" + ), + "idp" => array( + "entityId" => "https://idp.testshib.org/idp/shibboleth", + "singleSignOnService" => array( + "url" => "https://idp.testshib.org/idp/profile/SAML2/POST/SSO", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" + ), + "x509cert" => "MIIEDjCCAvagAwIBAgIBADANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzEVMBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1cmdoMREwDwYDVQQKEwhUZXN0U2hpYjEZMBcGA1UEAxMQaWRwLnRlc3RzaGliLm9yZzAeFw0wNjA4MzAyMTEyMjVaFw0xNjA4MjcyMTEyMjVaMGcxCzAJBgNVBAYTAlVTMRUwEwYDVQQIEwxQZW5uc3lsdmFuaWExEzARBgNVBAcTClBpdHRzYnVyZ2gxETAPBgNVBAoTCFRlc3RTaGliMRkwFwYDVQQDExBpZHAudGVzdHNoaWIub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkCGuTmJp9eAOSGHwRJo1SNatB5ZOKqDM9ysg7CyVTDClcpu93gSP10nH4gkCZOlnESNgttg0r+MqL8tfJC6ybddEFB3YBo8PZajKSe3OQ01Ow3yT4I+Wdg1tsTpSge9gEz7SrC07EkYmHuPtd71CHiUaCWDv+xVfUQX0aTNPFmDixzUjoYzbGDrtAyCqA8f9CN2txIfJnpHE6q6CmKcoLADS4UrNPlhHSzd614kR/JYiks0K4kbRqCQF0Dv0P5Di+rEfefC6glV8ysC8dB5/9nb0yh/ojRuJGmgMWHgWk6h0ihjihqiu4jACovUZ7vVOCgSE5Ipn7OIwqd93zp2wIDAQABo4HEMIHBMB0GA1UdDgQWBBSsBQ869nh83KqZr5jArr4/7b+QazCBkQYDVR0jBIGJMIGGgBSsBQ869nh83KqZr5jArr4/7b+Qa6FrpGkwZzELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFBlbm5zeWx2YW5pYTETMBEGA1UEBxMKUGl0dHNidXJnaDERMA8GA1UEChMIVGVzdFNoaWIxGTAXBgNVBAMTEGlkcC50ZXN0c2hpYi5vcmeCAQAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAjR29PhrCbk8qLN5MFfSVk98t3CT9jHZoYxd8QMRLI4j7iYQxXiGJTT1FXs1nd4Rha9un+LqTfeMMYqISdDDI6tv8iNpkOAvZZUosVkUo93pv1T0RPz35hcHHYq2yee59HJOco2bFlcsH8JBXRSRrJ3Q7Eut+z9uo80JdGNJ4/SJy5UorZ8KazGj16lfJhOBXldgrhppQBb0Nq6HKHguqmwRfJ+WkxemZXzhediAjGeka8nz8JjwxpUjAiSWYKLtJhGEaTqCYxCCX2Dw+dOTqUzHOZ7WKv4JXPK5G/Uhr8K/qhmFT2nIQi538n6rVYLeWj8Bbnl+ev0peYzxFyF5sQA==" + ) + ); + + $xml = file_get_contents(TEST_ROOT .'/data/metadata/idp/testshib-providers.xml'); + $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseXML($xml); + $idpInfo2 = OneLogin_Saml2_IdPMetadataParser::parseXML($xml, null, null, OneLogin_Saml2_Constants::BINDING_HTTP_POST, OneLogin_Saml2_Constants::BINDING_HTTP_POST); + $this->assertNotEquals($expectedInfo, $idpInfo); + $this->assertEquals($expectedInfo, $idpInfo2); + } + + /** + * Tests the parseXML method of IdPMetadataParser. + * Case: Test all combinations of the `desiredSSOBinding` and + * `desiredSLOBinding` parameters. + * Note: IdP metadata contains a SSO and SLO + * service and does not specify any endpoint for the POST binding. + * + * @covers OneLogin_Saml2_IdPMetadataParser::parseXML + */ + public function testParseDesiredBindingAll() + { + $expectedInfo = array( + "sp" => array( + "NameIDFormat" => "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" + ), + "idp" => array( + "entityId" => "urn:example:idp", + "x509cert" => "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", + "singleSignOnService" => array( + "url" => "http://idp.example.com/", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ), + "singleLogoutService" => array( + "url" => "http://idp.example.com/logout", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ) + ) + ); + + $xml = file_get_contents(TEST_ROOT .'/data/metadata/idp/idp_metadata2.xml'); + $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseXML($xml); + $idpInfo2 = OneLogin_Saml2_IdPMetadataParser::parseXML($xml, null, null, OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT); + $idpInfo3 = OneLogin_Saml2_IdPMetadataParser::parseXML($xml, null, null, OneLogin_Saml2_Constants::BINDING_HTTP_POST, OneLogin_Saml2_Constants::BINDING_HTTP_POST); + $this->assertEquals($expectedInfo, $idpInfo); + $this->assertEquals($expectedInfo, $idpInfo2); + $this->assertEquals($expectedInfo, $idpInfo3); + } + /** * Tests the parseXML method of IdPMetadataParser. * Case: With and without specify EntityId @@ -162,6 +282,82 @@ public function testParseXMLNameIdFormat() $this->assertEquals($expectedInfo2, $idpInfo2); } + /** + * Tests the parseXML method of IdPMetadataParser. + * Case: IdP metadata contains multiple certs + * + * @covers OneLogin_Saml2_IdPMetadataParser::parseXML + */ + public function testParseMultiCerts() + { + $expectedInfo = array( + "sp" => array( + "NameIDFormat" => "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" + ), + "idp" => array( + "singleLogoutService" => array( + "url" => "https://idp.examle.com/saml/slo", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ), + "x509certMulti" => array( + "encryption" => array( + "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" + ), + "signing" => array( + "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", + "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" + ) + ), + "entityId" => "https://idp.examle.com/saml/metadata", + "singleSignOnService" => array( + "url" => "https://idp.examle.com/saml/sso", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ) + ) + ); + + $xml = file_get_contents(TEST_ROOT .'/data/metadata/idp/idp_metadata_multi_certs.xml'); + $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseXML($xml); + $this->assertEquals($expectedInfo, $idpInfo); + } + + /** + * Tests the parseXML method of IdPMetadataParser. + * Case: IdP metadata contains multiple certs + * + * @covers OneLogin_Saml2_IdPMetadataParser::parseXML + */ + public function testParseMultiSigningCerts() + { + $expectedInfo = array( + "sp" => array( + "NameIDFormat" => "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" + ), + "idp" => array( + "singleLogoutService" => array( + "url" => "https://idp.examle.com/saml/slo", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ), + "x509certMulti" => array( + "signing" => array( + "MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEFBQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJjaWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwWT25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUyMjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRwtnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xxVRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCBpIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaCFD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXMGI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65chjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIBvlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZWQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw==", + "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", + "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" + ) + ), + "entityId" => "https://idp.examle.com/saml/metadata", + "singleSignOnService" => array( + "url" => "https://idp.examle.com/saml/sso", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ) + ) + ); + + $xml = file_get_contents(TEST_ROOT .'/data/metadata/idp/idp_metadata_multi_signing_certs.xml'); + $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseXML($xml); + $this->assertEquals($expectedInfo, $idpInfo); + } + /** * Tests the injectIntoSettings method of IdPMetadataParser. * From 8d20edbe2fe8faac5c8a65d29b3b014acda1cde1 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 6 Nov 2017 12:48:24 +0100 Subject: [PATCH 034/236] Minor phpcs --- lib/Saml2/Settings.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 451c5eb8..9362c971 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -150,7 +150,7 @@ public function __construct($settings = null, $spValidationOnly = false) /** * Sets the paths of the different folders - * @suppress PhanUndeclaredConstant + * @suppress PhanUndeclaredConstant */ private function _loadPaths() { @@ -304,7 +304,7 @@ private function _loadSettingsFromFile() } /** @var array $settings */ - include $filename; + include $filename; // Add advance_settings if exists From dde1d4e0e61a89d22383749b23645499d1e8d9d6 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 6 Nov 2017 13:25:13 +0100 Subject: [PATCH 035/236] #242. Document that SHA-1 must not be used --- README.md | 12 ++++++++---- advanced_settings_example.php | 6 ++++-- 2 files changed, 12 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index b0cf7813..5bb4ae5b 100644 --- a/README.md +++ b/README.md @@ -152,8 +152,10 @@ start, for example to use the static method getSelfURLNoQuery use: Security warning ---------------- -In production, the `strict` parameter **MUST** be set as `"true"`. Otherwise -your environment is not secure and will be exposed to attacks. +In production, the `strict` parameter **MUST** be set as `"true"` and the +`signatureAlgorithm` and `digestAlgorithm` under `security` must be set to +something other than SHA1 (see https://shattered.io/ ). Otherwise your +environment is not secure and will be exposed to attacks. Getting started @@ -496,14 +498,16 @@ $advancedSettings = array ( // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256' // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384' // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512' - 'signatureAlgorithm' => 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', + // Notice that sha1 is a deprecated algorithm and should not be used + 'signatureAlgorithm' => 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256', // Algorithm that the toolkit will use on digest process. Options: // 'http://www.w3.org/2000/09/xmldsig#sha1' // 'http://www.w3.org/2001/04/xmlenc#sha256' // 'http://www.w3.org/2001/04/xmldsig-more#sha384' // 'http://www.w3.org/2001/04/xmlenc#sha512' - 'digestAlgorithm' => 'http://www.w3.org/2000/09/xmldsig#sha1', + // Notice that sha1 is a deprecated algorithm and should not be used + 'digestAlgorithm' => 'http://www.w3.org/2001/04/xmlenc#sha256', // ADFS URL-Encodes SAML data as lowercase, and the toolkit by default uses // uppercase. Turn it True for ADFS compatibility on signature verification diff --git a/advanced_settings_example.php b/advanced_settings_example.php index 3ada0293..50194ae6 100644 --- a/advanced_settings_example.php +++ b/advanced_settings_example.php @@ -87,14 +87,16 @@ // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256' // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384' // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512' - 'signatureAlgorithm' => 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', + // Notice that sha1 is a deprecated algorithm and should not be used + 'signatureAlgorithm' => 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256', // Algorithm that the toolkit will use on digest process. Options: // 'http://www.w3.org/2000/09/xmldsig#sha1' // 'http://www.w3.org/2001/04/xmlenc#sha256' // 'http://www.w3.org/2001/04/xmldsig-more#sha384' // 'http://www.w3.org/2001/04/xmlenc#sha512' - 'digestAlgorithm' => 'http://www.w3.org/2000/09/xmldsig#sha1', + // Notice that sha1 is a deprecated algorithm and should not be used + 'digestAlgorithm' => 'http://www.w3.org/2001/04/xmlenc#sha256', // ADFS URL-Encodes SAML data as lowercase, and the toolkit by default uses // uppercase. Turn it True for ADFS compatibility on signature verification From 9416fa739cff88ffcc472967cec048a774b97e0f Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 6 Nov 2017 18:44:03 +0100 Subject: [PATCH 036/236] Release 2.12.0 --- CHANGELOG | 10 ++++++++++ lib/Saml2/version.json | 4 ++-- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index aa9dd0f8..e83a93ae 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,15 @@ CHANGELOG ========= +v.2.12.0 +* Improve Time management. Use DateTime/DateTimeZone classes. +* Escape error messages in debug mode +* Improve phpdoc +* Add an extra filter to the url to be used on redirection + +* [#242](https://github.com/onelogin/php-saml/pull/242) Document that SHA-1 must not be used +* [#250](https://github.com/onelogin/php-saml/pull/250) Fixed issue with IdPMetadataParser only keeping 1 certificate when multiple certificates of a single type were provided. +* [#263](https://github.com/onelogin/php-saml/issues/263) Fix incompatibility with ADFS on SLO. When on php saml settings NameID Format is set as unspecified but the SAMLResponse has no NameID Format, no NameID Format should be specified on LogoutRequest. + v.2.11.0 * [#236](https://github.com/onelogin/php-saml/pull/236) Exclude unnecesary files from Composer production downloads * [#226](https://github.com/onelogin/php-saml/pull/226) Add possibility to handle nameId NameQualifier attribute in SLO Request diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 1319c889..b201baa4 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.11.0", - "released": "21/07/2017" + "version": "2.12.0", + "released": "06/11/2017" } } From d089b4fe44d29f58f3f033264afce9cb0bbd7213 Mon Sep 17 00:00:00 2001 From: smullick <33524878+smullick@users.noreply.github.com> Date: Thu, 9 Nov 2017 12:41:52 -0500 Subject: [PATCH 037/236] Update Utils.php making it compatible with php 5.3 --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 15c5416e..013aaf97 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -727,7 +727,7 @@ public static function parseDuration($duration, $timestamp = null) /* Parse the duration. We use a very strict pattern. */ $durationRegEx = '#^(-?)P(?:(?:(?:(\\d+)Y)?(?:(\\d+)M)?(?:(\\d+)D)?(?:T(?:(\\d+)H)?(?:(\\d+)M)?(?:(\\d+)S)?)?)|(?:(\\d+)W))$#D'; - $matches = []; + $matches = array(); if (!preg_match($durationRegEx, $duration, $matches)) { throw new Exception('Invalid ISO 8601 duration: ' . $duration); } From 635d64d08f42fd848d0b7fd4a8b7a127228ed2de Mon Sep 17 00:00:00 2001 From: Tim Trinidad Date: Wed, 15 Nov 2017 15:44:37 -0500 Subject: [PATCH 038/236] allow the getSPMetadata() method to always include the encryption KeyDescriptor --- lib/Saml2/Settings.php | 10 ++- tests/src/OneLogin/Saml2/SettingsTest.php | 77 ++++++++++++++++++----- 2 files changed, 68 insertions(+), 19 deletions(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 9362c971..5250b25c 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -800,11 +800,15 @@ public function shouldCompressResponses() /** * Gets the SP metadata. The XML representation. * + * @param bool $alwaysPublishEncryptionCert When 'true', the returned metadata + * will always include an 'encryption' KeyDescriptor. Otherwise, the 'encryption' + * KeyDescriptor will only be included if $advancedSettings['security']['wantNameIdEncrypted'] + * or $advancedSettings['security']['wantAssertionsEncrypted'] are enabled. * @return string SP metadata (xml) * @throws Exception * @throws OneLogin_Saml2_Error */ - public function getSPMetadata() + public function getSPMetadata($alwaysPublishEncryptionCert = false) { $metadata = OneLogin_Saml2_Metadata::builder($this->_sp, $this->_security['authnRequestsSigned'], $this->_security['wantAssertionsSigned'], null, null, $this->getContacts(), $this->getOrganization()); @@ -813,7 +817,7 @@ public function getSPMetadata() $metadata = OneLogin_Saml2_Metadata::addX509KeyDescriptors( $metadata, $certNew, - $this->_security['wantNameIdEncrypted'] || $this->_security['wantAssertionsEncrypted'] + $alwaysPublishEncryptionCert || $this->_security['wantNameIdEncrypted'] || $this->_security['wantAssertionsEncrypted'] ); } @@ -822,7 +826,7 @@ public function getSPMetadata() $metadata = OneLogin_Saml2_Metadata::addX509KeyDescriptors( $metadata, $cert, - $this->_security['wantNameIdEncrypted'] || $this->_security['wantAssertionsEncrypted'] + $alwaysPublishEncryptionCert || $this->_security['wantNameIdEncrypted'] || $this->_security['wantAssertionsEncrypted'] ); } diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 8c7b5c27..142d579a 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -422,33 +422,78 @@ public function testGetSPMetadata() * Case with x509certNew * * @covers OneLogin_Saml2_Settings::getSPMetadata + * @dataProvider testGetSPMetadataWithX509CertNewDataProvider */ - public function testGetSPMetadataWithX509CertNew() + public function testGetSPMetadataWithX509CertNew($alwaysIncludeEncryption, $wantNameIdEncrypted, $wantAssertionsEncrypted, $expectEncryptionKeyDescriptor) { $settingsDir = TEST_ROOT .'/settings/'; include $settingsDir.'settings5.php'; - $settingsInfo['security']['wantNameIdEncrypted'] = false; - $settingsInfo['security']['wantAssertionsEncrypted'] = false; + $settingsInfo['security']['wantNameIdEncrypted'] = $wantNameIdEncrypted; + $settingsInfo['security']['wantAssertionsEncrypted'] = $wantAssertionsEncrypted; $settings = new OneLogin_Saml2_Settings($settingsInfo); - $metadata = $settings->getSPMetadata(); + $metadata = $settings->getSPMetadata($alwaysIncludeEncryption); - $this->assertEquals(2, substr_count($metadata, "assertEquals($expectEncryptionKeyDescriptor ? 4 : 2, substr_count($metadata, "assertEquals(2, substr_count($metadata, 'assertEquals(0, substr_count($metadata, 'getSPMetadata(); - - $this->assertEquals(4, substr_count($metadata2, "assertEquals(2, substr_count($metadata2, 'assertEquals($expectEncryptionKeyDescriptor ? 2 : 0, substr_count($metadata, 'assertEquals(2, substr_count($metadata2, ' [ + 'alwaysIncludeEncryption' => false, + 'wantNameIdEncrypted' => false, + 'wantAssertionsEncrypted' => false, + 'expectEncryptionKeyDescriptor' => false, + ], + 'wantNameIdEncrypted setting enabled' => [ + 'alwaysIncludeEncryption' => false, + 'wantNameIdEncrypted' => true, + 'wantAssertionsEncrypted' => false, + 'expectEncryptionKeyDescriptor' => true, + ], + 'wantAssertionsEncrypted setting enabled' => [ + 'alwaysIncludeEncryption' => false, + 'wantNameIdEncrypted' => false, + 'wantAssertionsEncrypted' => true, + 'expectEncryptionKeyDescriptor' => true, + ], + 'both settings enabled'=> [ + 'alwaysIncludeEncryption' => false, + 'wantNameIdEncrypted' => true, + 'wantAssertionsEncrypted' => true, + 'expectEncryptionKeyDescriptor' => true, + ], + 'metadata requested with encryption' => [ + 'alwaysIncludeEncryption' => true, + 'wantNameIdEncrypted' => false, + 'wantAssertionsEncrypted' => false, + 'expectEncryptionKeyDescriptor' => true, + ], + 'metadata requested with encryption and wantNameIdEncrypted setting enabled' => [ + 'alwaysIncludeEncryption' => true, + 'wantNameIdEncrypted' => true, + 'wantAssertionsEncrypted' => false, + 'expectEncryptionKeyDescriptor' => true, + ], + 'metadata requested with encryption and wantAssertionsEncrypted setting enabled' => [ + 'alwaysIncludeEncryption' => true, + 'wantNameIdEncrypted' => false, + 'wantAssertionsEncrypted' => true, + 'expectEncryptionKeyDescriptor' => true, + ], + 'metadata requested with encryption and both settings enabled' => [ + 'alwaysIncludeEncryption' => true, + 'wantNameIdEncrypted' => true, + 'wantAssertionsEncrypted' => true, + 'expectEncryptionKeyDescriptor' => true, + ], + ]; } /** From a5b850861724d1622e5e35208f0bf557c5012ae1 Mon Sep 17 00:00:00 2001 From: Brandon Peters Date: Thu, 16 Nov 2017 15:44:44 -0500 Subject: [PATCH 039/236] Add attributes to attribute array using FriendlyName in getAttributes method --- lib/Saml2/Response.php | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index f8cbda0d..eba65713 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -727,7 +727,13 @@ public function getAttributes() /** @var $entry DOMNode */ foreach ($entries as $entry) { - $attributeName = $entry->attributes->getNamedItem('Name')->nodeValue; + $attributeName = $entry->attributes->getNamedItem('Name')->nodeValue; + $attributeFriendlyName = null; + + $attributeFriendlyNameNode = $entry->attributes->getNamedItem('FriendlyName'); + if ($attributeFriendlyNameNode !== null) { + $attributeFriendlyName = $attributeFriendlyNameNode->nodeValue; + } if (in_array($attributeName, array_keys($attributes))) { throw new OneLogin_Saml2_ValidationError( @@ -736,6 +742,13 @@ public function getAttributes() ); } + if (!empty($attributeFriendlyName) && in_array($attributeFriendlyName, array_keys($attributes))) { + throw new OneLogin_Saml2_ValidationError( + "Found an Attribute element with duplicated FriendlyName", + OneLogin_Saml2_ValidationError::DUPLICATED_ATTRIBUTE_NAME_FOUND + ); + } + $attributeValues = array(); foreach ($entry->childNodes as $childNode) { $tagName = ($childNode->prefix ? $childNode->prefix.':' : '') . 'AttributeValue'; @@ -745,6 +758,10 @@ public function getAttributes() } $attributes[$attributeName] = $attributeValues; + + if (!empty($attributeFriendlyName)) { + $attributes[$attributeFriendlyName] = $attributeValues; + } } return $attributes; } From 173a15631caf5a0a9790e36379d22c37c2e2965a Mon Sep 17 00:00:00 2001 From: Brandon Peters Date: Fri, 17 Nov 2017 08:24:33 -0500 Subject: [PATCH 040/236] Add a getAttributesWithFriendlyName method --- lib/Saml2/Response.php | 60 ++++++++++++++++++++++++++++++++++-------- 1 file changed, 49 insertions(+), 11 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index eba65713..7d9036db 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -728,12 +728,6 @@ public function getAttributes() /** @var $entry DOMNode */ foreach ($entries as $entry) { $attributeName = $entry->attributes->getNamedItem('Name')->nodeValue; - $attributeFriendlyName = null; - - $attributeFriendlyNameNode = $entry->attributes->getNamedItem('FriendlyName'); - if ($attributeFriendlyNameNode !== null) { - $attributeFriendlyName = $attributeFriendlyNameNode->nodeValue; - } if (in_array($attributeName, array_keys($attributes))) { throw new OneLogin_Saml2_ValidationError( @@ -742,6 +736,54 @@ public function getAttributes() ); } + $attributeValues = array(); + foreach ($entry->childNodes as $childNode) { + $tagName = ($childNode->prefix ? $childNode->prefix.':' : '') . 'AttributeValue'; + if ($childNode->nodeType == XML_ELEMENT_NODE && $childNode->tagName === $tagName) { + $attributeValues[] = $childNode->nodeValue; + } + } + + $attributes[$attributeName] = $attributeValues; + } + return $attributes; + } + + /** + * Gets the Attributes from the AttributeStatement element using their FriendlyName. + * + * @return array The attributes of the SAML Assertion + */ + public function getAttributesWithFriendlyName() + { + $attributes = array(); + + /* EncryptedAttributes not supported + + $encriptedAttributes = $this->_queryAssertion('/saml:AttributeStatement/saml:EncryptedAttribute'); + + if ($encriptedAttributes->length > 0) { + foreach ($encriptedAttributes as $encriptedAttribute) { + $key = $this->_settings->getSPkey(); + $seckey = new XMLSecurityKey(XMLSecurityKey::RSA_1_5, array('type'=>'private')); + $seckey->loadKey($key); + $attribute = OneLogin_Saml2_Utils::decryptElement($encriptedAttribute->firstChild(), $seckey); + } + } + */ + + $entries = $this->_queryAssertion('/saml:AttributeStatement/saml:Attribute'); + + /** @var $entry DOMNode */ + foreach ($entries as $entry) { + $attributeFriendlyNameNode = $entry->attributes->getNamedItem('FriendlyName'); + + if ($attributeFriendlyNameNode === null) { + continue; + } + + $attributeFriendlyName = $attributeFriendlyNameNode->nodeValue; + if (!empty($attributeFriendlyName) && in_array($attributeFriendlyName, array_keys($attributes))) { throw new OneLogin_Saml2_ValidationError( "Found an Attribute element with duplicated FriendlyName", @@ -757,11 +799,7 @@ public function getAttributes() } } - $attributes[$attributeName] = $attributeValues; - - if (!empty($attributeFriendlyName)) { - $attributes[$attributeFriendlyName] = $attributeValues; - } + $attributes[$attributeFriendlyName] = $attributeValues; } return $attributes; } From 22eea235c7dbbea607f5f86c5e0a0e2dff9ee3bc Mon Sep 17 00:00:00 2001 From: Brandon Peters Date: Fri, 17 Nov 2017 08:25:01 -0500 Subject: [PATCH 041/236] Fix changed spacing --- lib/Saml2/Response.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 7d9036db..b4086bbf 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -727,7 +727,7 @@ public function getAttributes() /** @var $entry DOMNode */ foreach ($entries as $entry) { - $attributeName = $entry->attributes->getNamedItem('Name')->nodeValue; + $attributeName = $entry->attributes->getNamedItem('Name')->nodeValue; if (in_array($attributeName, array_keys($attributes))) { throw new OneLogin_Saml2_ValidationError( From 1f90e549b6fee5fe67cbd832a25210102931c0d0 Mon Sep 17 00:00:00 2001 From: Brandon Peters Date: Fri, 17 Nov 2017 08:26:23 -0500 Subject: [PATCH 042/236] Clean up in_array check --- lib/Saml2/Response.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index b4086bbf..db468611 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -784,7 +784,7 @@ public function getAttributesWithFriendlyName() $attributeFriendlyName = $attributeFriendlyNameNode->nodeValue; - if (!empty($attributeFriendlyName) && in_array($attributeFriendlyName, array_keys($attributes))) { + if (in_array($attributeFriendlyName, array_keys($attributes))) { throw new OneLogin_Saml2_ValidationError( "Found an Attribute element with duplicated FriendlyName", OneLogin_Saml2_ValidationError::DUPLICATED_ATTRIBUTE_NAME_FOUND From d49cf7ba087fe1837cd420ae8f2760badd338ef5 Mon Sep 17 00:00:00 2001 From: Brandon Peters Date: Fri, 17 Nov 2017 08:59:15 -0500 Subject: [PATCH 043/236] Add tests for Response::getAttributesWithFriendlyName --- ..._attributes_with_friendly_names.xml.base64 | 1 + tests/data/responses/response6.xml.base64 | 1 + tests/src/OneLogin/Saml2/ResponseTest.php | 42 +++++++++++++++++++ 3 files changed, 44 insertions(+) create mode 100644 tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 create mode 100644 tests/data/responses/response6.xml.base64 diff --git a/tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 b/tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 new file mode 100644 index 00000000..aba662b2 --- /dev/null +++ b/tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/tests/data/responses/response6.xml.base64 b/tests/data/responses/response6.xml.base64 new file mode 100644 index 00000000..b78c68eb --- /dev/null +++ b/tests/data/responses/response6.xml.base64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index b65278cf..60c4247a 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -599,6 +599,48 @@ public function testGetAttributes() } } + /** + * Tests the getAttributes method of the OneLogin_Saml2_Response + * + * @covers OneLogin_Saml2_Response::getAttributes + */ + public function testGetAttributesWithFriendlyName() + { + $xml = file_get_contents(TEST_ROOT . '/data/responses/response6.xml.base64'); + $response = new OneLogin_Saml2_Response($this->_settings, $xml); + + $expectedAttributes = array( + 'uid' => array( + 'demo' + ), + 'givenName' => array( + 'value' + ), + ); + $this->assertEquals($expectedAttributes, $response->getAttributesWithFriendlyName()); + + // An assertion that has no attributes should return an empty array when asked for the attributes + $xml2 = file_get_contents(TEST_ROOT . '/data/responses/response2.xml.base64'); + $response2 = new OneLogin_Saml2_Response($this->_settings, $xml2); + + $this->assertEmpty($response2->getAttributesWithFriendlyName()); + + // Encrypted Attributes are not supported + $xml3 = file_get_contents(TEST_ROOT . '/data/responses/invalids/encrypted_attrs.xml.base64'); + $response3 = new OneLogin_Saml2_Response($this->_settings, $xml3); + $this->assertEmpty($response3->getAttributesWithFriendlyName()); + + // Duplicated Attribute names + $xml4 = file_get_contents(TEST_ROOT . '/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64'); + $response4 = new OneLogin_Saml2_Response($this->_settings, $xml4); + try { + $attrs = $response4->getAttributesWithFriendlyName(); + $this->fail('OneLogin_Saml2_ValidationError was not raised'); + } catch (OneLogin_Saml2_ValidationError $e) { + $this->assertContains('Found an Attribute element with duplicated FriendlyName', $e->getMessage()); + } + } + /** * Tests the getNameId method of the OneLogin_Saml2_Response * From 59d34dda66d0f35bbe7404216ef0bed5ab8bd9f4 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 29 Nov 2017 10:47:57 +0100 Subject: [PATCH 044/236] Fix #275 Remove unnecesary call --- lib/Saml2/Auth.php | 2 -- 1 file changed, 2 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 9c0af58e..aa636183 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -568,8 +568,6 @@ public function buildRequestSignature($samlRequest, $relayState, $signAlgorithm ); } - $key = $this->_settings->getSPkey(); - $objKey = new XMLSecurityKey($signAlgorithm, array('type' => 'private')); $objKey->loadKey($key, false); From 157a8771ad99c5f15859310fe931f9f54c40b966 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Sat, 2 Dec 2017 22:45:05 +0100 Subject: [PATCH 045/236] Fix bug on parseRemoteXML and parseFileXML. Internal calls to parseXML missed the desiredNameIdFormat parameter --- lib/Saml2/IdPMetadataParser.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index 00cde728..feb1a969 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -35,7 +35,7 @@ public static function parseRemoteXML($url, $entityId = null, $desiredNameIdForm $xml = curl_exec($ch); if ($xml !== false) { - $metadataInfo = self::parseXML($xml, $entityId, $desiredSSOBinding, $desiredSLOBinding); + $metadataInfo = self::parseXML($xml, $entityId, $desiredNameIdFormat, $desiredSSOBinding, $desiredSLOBinding); } else { throw new Exception(curl_error($ch), curl_errno($ch)); } @@ -65,7 +65,7 @@ public static function parseFileXML($filepath, $entityId = null, $desiredNameIdF try { if (file_exists($filepath)) { $data = file_get_contents($filepath); - $metadataInfo = self::parseXML($data, $entityId, $desiredSSOBinding, $desiredSLOBinding); + $metadataInfo = self::parseXML($data, $entityId, $desiredNameIdFormat, $desiredSSOBinding, $desiredSLOBinding); } } catch (Exception $e) { } From 283914aec41a2ac6bb1232270c7bc8577ff6e198 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 13 Dec 2017 19:06:16 +0100 Subject: [PATCH 046/236] Add more tests to cover IdPMetadataParser --- lib/Saml2/IdPMetadataParser.php | 4 +- ...tadata_different_sign_and_encrypt_cert.xml | 72 +++++++++++++++++++ ...dp_metadata_same_sign_and_encrypt_cert.xml | 71 ++++++++++++++++++ .../OneLogin/Saml2/IdPMetadataParserTest.php | 51 +++++++++++++ 4 files changed, 196 insertions(+), 2 deletions(-) create mode 100644 tests/data/metadata/idp/idp_metadata_different_sign_and_encrypt_cert.xml create mode 100644 tests/data/metadata/idp/idp_metadata_same_sign_and_encrypt_cert.xml diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index feb1a969..0cf17997 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -161,8 +161,8 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n } $idpCertdata = $metadataInfo['idp']['x509certMulti']; - if (count($idpCertdata) == 1 and - ((isset($idpCertdata['signing']) and count($idpCertdata['signing']) == 1) or (isset($idpCertdata['encryption']) and count($idpCertdata['encryption']) == 1)) or + if ((count($idpCertdata) == 1 and + ((isset($idpCertdata['signing']) and count($idpCertdata['signing']) == 1) or (isset($idpCertdata['encryption']) and count($idpCertdata['encryption']) == 1))) or ((isset($idpCertdata['signing']) && count($idpCertdata['signing']) == 1) && isset($idpCertdata['encryption']) && count($idpCertdata['encryption']) == 1 && strcmp($idpCertdata['signing'][0], $idpCertdata['encryption'][0]) == 0)) { if (isset($metadataInfo['idp']['x509certMulti']['signing'][0])) { $metadataInfo['idp']['x509cert'] = $metadataInfo['idp']['x509certMulti']['signing'][0]; diff --git a/tests/data/metadata/idp/idp_metadata_different_sign_and_encrypt_cert.xml b/tests/data/metadata/idp/idp_metadata_different_sign_and_encrypt_cert.xml new file mode 100644 index 00000000..df90353a --- /dev/null +++ b/tests/data/metadata/idp/idp_metadata_different_sign_and_encrypt_cert.xml @@ -0,0 +1,72 @@ + + + + + + + MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET +MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD +VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 +MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI +DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u +ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z +0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT +gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m +Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF +zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ +UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG +A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV +HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV +UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw +DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO +BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu +AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV +gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ +sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP +TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu +QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 +1sE= + + + + + + + MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF +BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj +aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW +T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy +MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz +Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV +BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo +3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw +tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx +VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 +L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t +1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ +BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB +pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD +VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL +DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC +FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B +AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM +GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c +hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB +vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 +MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ +WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== + + + + urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress + + + + + + Support + support@onelogin.com + + \ No newline at end of file diff --git a/tests/data/metadata/idp/idp_metadata_same_sign_and_encrypt_cert.xml b/tests/data/metadata/idp/idp_metadata_same_sign_and_encrypt_cert.xml new file mode 100644 index 00000000..e7fd250b --- /dev/null +++ b/tests/data/metadata/idp/idp_metadata_same_sign_and_encrypt_cert.xml @@ -0,0 +1,71 @@ + + + + + + + MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET +MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD +VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 +MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI +DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u +ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z +0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT +gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m +Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF +zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ +UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG +A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV +HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV +UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw +DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO +BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu +AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV +gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ +sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP +TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu +QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 +1sE= + + + + + + + MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET +MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD +VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 +MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI +DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u +ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z +0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT +gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m +Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF +zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ +UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG +A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV +HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV +UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw +DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO +BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu +AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV +gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ +sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP +TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu +QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 +1sE= + + + + urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress + + + + + + Support + support@onelogin.com + + \ No newline at end of file diff --git a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php index 88c5ffe4..c6db20dd 100644 --- a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php +++ b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php @@ -358,6 +358,57 @@ public function testParseMultiSigningCerts() $this->assertEquals($expectedInfo, $idpInfo); } + /** + * Tests the parseXML method of IdPMetadataParser. + * Case: IdP metadata contains multiple signature cert and encrypt cert + * that is the same + * + * @covers OneLogin_Saml2_IdPMetadataParser::parseXML + */ + public function testParseMultiSameSigningAndEncryptCert() + { + $expectedInfo = array( + "idp" => array( + "singleSignOnService" => array( + "url" => "https://app.onelogin.com/trust/saml2/http-post/sso/383123", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ), + "x509cert" => "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", + "entityId" => "https://app.onelogin.com/saml/metadata/383123" + ), + "sp" => array( + "NameIDFormat" => "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" + ) + ); + + $expectedInfo2 = array( + "idp" => array( + "singleSignOnService" => array( + "url" => "https://app.onelogin.com/trust/saml2/http-post/sso/383123", + "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + ), + "x509certMulti" => array( + "signing" => array( + 0 => "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"), + "encryption" => array( + 0 => "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"), + ), + "entityId" => "https://app.onelogin.com/saml/metadata/383123" + ), + "sp" => array( + "NameIDFormat" => "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" + ) + ); + + $filepath = TEST_ROOT .'/data/metadata/idp/idp_metadata_same_sign_and_encrypt_cert.xml'; + $idpInfo = OneLogin_Saml2_IdPMetadataParser::parseFileXML($filepath); + $this->assertEquals($expectedInfo, $idpInfo); + + $filepath2 = TEST_ROOT .'/data/metadata/idp/idp_metadata_different_sign_and_encrypt_cert.xml'; + $idpInfo2 = OneLogin_Saml2_IdPMetadataParser::parseFileXML($filepath2); + $this->assertEquals($expectedInfo2, $idpInfo2); + } + /** * Tests the injectIntoSettings method of IdPMetadataParser. * From 0b7985d41569ef2f53a5f6fd67c4761d73c8a9ed Mon Sep 17 00:00:00 2001 From: Pascal Hofmann Date: Thu, 21 Dec 2017 15:05:45 +0100 Subject: [PATCH 047/236] Fixed typo. --- demo1/index.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/demo1/index.php b/demo1/index.php index fbb06871..39967912 100644 --- a/demo1/index.php +++ b/demo1/index.php @@ -27,7 +27,7 @@ $auth->login($returnTo); } else if (isset($_GET['slo'])) { $returnTo = null; - $paramters = array(); + $parameters = array(); $nameId = null; $sessionIndex = null; $nameIdFormat = null; @@ -42,7 +42,7 @@ $nameIdFormat = $_SESSION['samlNameIdFormat']; } - $auth->logout($returnTo, $paramters, $nameId, $sessionIndex, false, $nameIdFormat); + $auth->logout($returnTo, $parameters, $nameId, $sessionIndex, false, $nameIdFormat); # If LogoutRequest ID need to be saved in order to later validate it, do instead # $sloBuiltUrl = $auth->logout(null, $paramters, $nameId, $sessionIndex, true); From 1045c6bd12ff22dc8bbfa8a0c6787f16ce930ab6 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 18 Jan 2018 19:17:03 +0100 Subject: [PATCH 048/236] Refactor, Add more tests --- lib/Saml2/Auth.php | 36 +++++++++ lib/Saml2/Response.php | 72 +++-------------- ..._attributes_with_friendly_names.xml.base64 | 2 +- tests/data/responses/response6.xml.base64 | 2 +- tests/src/OneLogin/Saml2/AuthTest.php | 78 +++++++++++++++++++ 5 files changed, 128 insertions(+), 62 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index aa636183..b53d21b2 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -20,6 +20,13 @@ class OneLogin_Saml2_Auth */ private $_attributes = array(); + /** + * User attributes data with FriendlyName index. + * + * @var array + */ + private $_attributesWithFriendlyName = array(); + /** * NameID * @@ -182,6 +189,7 @@ public function processResponse($requestId = null) if ($response->isValid($requestId)) { $this->_attributes = $response->getAttributes(); + $this->_attributesWithFriendlyName = $response->getAttributesWithFriendlyName(); $this->_nameid = $response->getNameId(); $this->_nameidFormat = $response->getNameIdFormat(); $this->_nameidNameQualifier = $response->getNameIdNameQualifier(); @@ -325,6 +333,16 @@ public function getAttributes() return $this->_attributes; } + /** + * Returns the set of SAML attributes indexed by FriendlyName + * + * @return array Attributes of the user. + */ + public function getAttributesWithFriendlyName() + { + return $this->_attributesWithFriendlyName; + } + /** * Returns the nameID * @@ -413,6 +431,24 @@ public function getAttribute($name) return $value; } + /** + * Returns the requested SAML attribute indexed by FriendlyName + * + * @param string $friendlyName The requested attribute of the user. + * + * @return array|null Requested SAML attribute ($friendlyName). + */ + public function getAttributeWithFriendlyName($friendlyName) + { + assert('is_string($friendlyName)'); + + $value = null; + if (isset($this->_attributesWithFriendlyName[$friendlyName])) { + return $this->_attributesWithFriendlyName[$friendlyName]; + } + return $value; + } + /** * Initiates the SSO process. * diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index db468611..060ed72b 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -707,46 +707,7 @@ public function getSessionIndex() */ public function getAttributes() { - $attributes = array(); - - /* EncryptedAttributes not supported - - $encriptedAttributes = $this->_queryAssertion('/saml:AttributeStatement/saml:EncryptedAttribute'); - - if ($encriptedAttributes->length > 0) { - foreach ($encriptedAttributes as $encriptedAttribute) { - $key = $this->_settings->getSPkey(); - $seckey = new XMLSecurityKey(XMLSecurityKey::RSA_1_5, array('type'=>'private')); - $seckey->loadKey($key); - $attribute = OneLogin_Saml2_Utils::decryptElement($encriptedAttribute->firstChild(), $seckey); - } - } - */ - - $entries = $this->_queryAssertion('/saml:AttributeStatement/saml:Attribute'); - - /** @var $entry DOMNode */ - foreach ($entries as $entry) { - $attributeName = $entry->attributes->getNamedItem('Name')->nodeValue; - - if (in_array($attributeName, array_keys($attributes))) { - throw new OneLogin_Saml2_ValidationError( - "Found an Attribute element with duplicated Name", - OneLogin_Saml2_ValidationError::DUPLICATED_ATTRIBUTE_NAME_FOUND - ); - } - - $attributeValues = array(); - foreach ($entry->childNodes as $childNode) { - $tagName = ($childNode->prefix ? $childNode->prefix.':' : '') . 'AttributeValue'; - if ($childNode->nodeType == XML_ELEMENT_NODE && $childNode->tagName === $tagName) { - $attributeValues[] = $childNode->nodeValue; - } - } - - $attributes[$attributeName] = $attributeValues; - } - return $attributes; + return $this->_getAttributesByKeyName('Name'); } /** @@ -756,37 +717,28 @@ public function getAttributes() */ public function getAttributesWithFriendlyName() { - $attributes = array(); - - /* EncryptedAttributes not supported - - $encriptedAttributes = $this->_queryAssertion('/saml:AttributeStatement/saml:EncryptedAttribute'); + return $this->_getAttributesByKeyName('FriendlyName'); + } - if ($encriptedAttributes->length > 0) { - foreach ($encriptedAttributes as $encriptedAttribute) { - $key = $this->_settings->getSPkey(); - $seckey = new XMLSecurityKey(XMLSecurityKey::RSA_1_5, array('type'=>'private')); - $seckey->loadKey($key); - $attribute = OneLogin_Saml2_Utils::decryptElement($encriptedAttribute->firstChild(), $seckey); - } - } - */ + private function _getAttributesByKeyName($keyName="Name") + { + $attributes = array(); $entries = $this->_queryAssertion('/saml:AttributeStatement/saml:Attribute'); /** @var $entry DOMNode */ foreach ($entries as $entry) { - $attributeFriendlyNameNode = $entry->attributes->getNamedItem('FriendlyName'); + $attributeKeyNode = $entry->attributes->getNamedItem($keyName); - if ($attributeFriendlyNameNode === null) { + if ($attributeKeyNode === null) { continue; } - $attributeFriendlyName = $attributeFriendlyNameNode->nodeValue; + $attributeKeyName = $attributeKeyNode->nodeValue; - if (in_array($attributeFriendlyName, array_keys($attributes))) { + if (in_array($attributeKeyName, array_keys($attributes))) { throw new OneLogin_Saml2_ValidationError( - "Found an Attribute element with duplicated FriendlyName", + "Found an Attribute element with duplicated ".$keyName, OneLogin_Saml2_ValidationError::DUPLICATED_ATTRIBUTE_NAME_FOUND ); } @@ -799,7 +751,7 @@ public function getAttributesWithFriendlyName() } } - $attributes[$attributeFriendlyName] = $attributeValues; + $attributes[$attributeKeyName] = $attributeValues; } return $attributes; } diff --git a/tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 b/tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 index aba662b2..17afb888 100644 --- a/tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 +++ b/tests/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64 @@ -1 +1 @@ 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 \ No newline at end of file +PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeDkyOWMxNjg1LWZhZTctNTJlYi05OTdkLTYxZDliMWM2YzFkZiIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDMtMjFUMTM6NDI6MzFaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzE5MWMwM2U2OGQ3MWQ5Nzk2ZjVlMDdlNjI2MmNhNGFkODgzYTc0YjEiPg0KICAgIDxzYW1sOklzc3Vlcj5odHRwczovL3BpdGJ1bGsubm8taXAub3JnL3NpbXBsZXNhbWwvc2FtbDIvaWRwL21ldGFkYXRhLnBocDwvc2FtbDpJc3N1ZXI+PGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogIDxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPg0KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeDkyOWMxNjg1LWZhZTctNTJlYi05OTdkLTYxZDliMWM2YzFkZiI+PGRzOlRyYW5zZm9ybXM+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+RXlHY1RES1k0TlJTK0RRZlN5My9MRGFUL0lJPTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpTaWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT5FalhCUyt1dVlHcURXTFBJZ3JpZTA3a3orcXE5bEJvTng0WVlZQUpBSTJtR3JDdjF5NkkreTFYTU1YRU9DZVh4L3F3Tk5ROGwwck13YWVXMzcxT1VxZnRzM3RsK21xWCs4b05iOWhRVkpXWTdSMGRwc25DcEcwYk1LY2FETTQwcGxuWWJzQ0UzUUZUNVFKWGFkTC9wUHN4QXVxcmNIVTdZT0pPenNwQkRXTkk9PC9kczpTaWduYXR1cmVWYWx1ZT4NCjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUNnVENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtpRzl3MEJBUVVGQURDQmhERUxNQWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBGdVpISmxZWE1nVTI5c1ltVnlaekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFRS0V3ZFZUa2xPUlZSVU1SZ3dGZ1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04eElUQWZCZ2txaGtpRzl3MEJDUUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpBZUZ3MHdOekEyTVRVeE1qQXhNelZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFzd0NRWURWUVFHRXdKT1R6RVlNQllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhKbk1Rd3dDZ1lEVlFRSEV3TkdiMjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RBV0JnTlZCQU1URDJabGFXUmxMbVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFFSkFSWVNZVzVrY21WaGMwQjFibWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0JnUURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9saXVwaUJPZXNDTzNTSGJEcmwzK3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJZXNMQ243YzhhUEhJU0tPdFBsQWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNmQ0dQdEtUeXRIT2dlL09sSmJvMDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJREFRQUJNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVvV1E5K1ZNUXgxQVNEb2hCandPc2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtGRGJTdE5vbVBuUXo3bmJLK29ueWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRVdnMvMVV2cTNvck9vL1dKVmhUeXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhvcGhTTXYxWk9vPC9kczpYNTA5Q2VydGlmaWNhdGU+PC9kczpYNTA5RGF0YT48L2RzOktleUluZm8+PC9kczpTaWduYXR1cmU+DQogICAgPHNhbWxwOlN0YXR1cz4NCiAgICAgICAgPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPg0KICAgIDwvc2FtbHA6U3RhdHVzPg0KICAgIDxzYW1sOkFzc2VydGlvbiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIElEPSJwZnhlNTUwZGFmMC1jMGUwLTFhN2YtMDgwNS1kYTcwM2IxNzMzNTgiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDE0LTAzLTIxVDEzOjQyOjMxWiI+DQogICAgICAgIDxzYW1sOklzc3Vlcj5odHRwczovL3BpdGJ1bGsubm8taXAub3JnL3NpbXBsZXNhbWwvc2FtbDIvaWRwL21ldGFkYXRhLnBocDwvc2FtbDpJc3N1ZXI+PGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogIDxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPg0KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeGU1NTBkYWYwLWMwZTAtMWE3Zi0wODA1LWRhNzAzYjE3MzM1OCI+PGRzOlRyYW5zZm9ybXM+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+VFQvYjJnYm51eVBTRXJBU20wWEVSSFdhaWV3PTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpTaWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT5wQXEwcjNQMFJjYThmM0FTZ29MNXlHL2krOU9aSnU1dndSL09rZmg5UDVYNHpKbm1yVWN3SzZPSjRPSVkvK2RISGpkemxpR2RyQkVXdXNlWlFxSEYwR05GSk1wZmVUcVFyd3M1SUN3Z1psenNqZ3dHcXpsWUNsYkZ1aktyQUhsTDZwdHppVVZRWWhLeTdEa2RDY05NcjROako0QmpSbzkybCtXcnZvUXJqYUk9PC9kczpTaWduYXR1cmVWYWx1ZT4NCjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUNnVENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtpRzl3MEJBUVVGQURDQmhERUxNQWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBGdVpISmxZWE1nVTI5c1ltVnlaekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFRS0V3ZFZUa2xPUlZSVU1SZ3dGZ1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04eElUQWZCZ2txaGtpRzl3MEJDUUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpBZUZ3MHdOekEyTVRVeE1qQXhNelZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFzd0NRWURWUVFHRXdKT1R6RVlNQllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhKbk1Rd3dDZ1lEVlFRSEV3TkdiMjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RBV0JnTlZCQU1URDJabGFXUmxMbVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFFSkFSWVNZVzVrY21WaGMwQjFibWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0JnUURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9saXVwaUJPZXNDTzNTSGJEcmwzK3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJZXNMQ243YzhhUEhJU0tPdFBsQWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNmQ0dQdEtUeXRIT2dlL09sSmJvMDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJREFRQUJNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVvV1E5K1ZNUXgxQVNEb2hCandPc2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtGRGJTdE5vbVBuUXo3bmJLK29ueWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRVdnMvMVV2cTNvck9vL1dKVmhUeXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhvcGhTTXYxWk9vPC9kczpYNTA5Q2VydGlmaWNhdGU+PC9kczpYNTA5RGF0YT48L2RzOktleUluZm8+PC9kczpTaWduYXR1cmU+DQogICAgICAgIDxzYW1sOlN1YmplY3Q+DQogICAgICAgICAgICA8c2FtbDpOYW1lSUQgU1BOYW1lUXVhbGlmaWVyPSJodHRwczovL3BpdGJ1bGsubm8taXAub3JnL25ld29uZWxvZ2luL2RlbW8xL21ldGFkYXRhLnBocCIgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6bmFtZWlkLWZvcm1hdDp0cmFuc2llbnQiPl8yMTI2ZGQxOWI4YTlhMjgyMzhkODhmZGM3Mzg1ZTYwOTk1MDA0YTc3ODI8L3NhbWw6TmFtZUlEPg0KICAgICAgICAgICAgPHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPg0KICAgICAgICAgICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAyMy0wOS0yMlQxOTowMjozMVoiIFJlY2lwaWVudD0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzE5MWMwM2U2OGQ3MWQ5Nzk2ZjVlMDdlNjI2MmNhNGFkODgzYTc0YjEiLz4NCiAgICAgICAgICAgIDwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPg0KICAgICAgICA8L3NhbWw6U3ViamVjdD4NCiAgICAgICAgPHNhbWw6Q29uZGl0aW9ucyBOb3RCZWZvcmU9IjIwMTQtMDMtMjFUMTM6NDI6MDFaIiBOb3RPbk9yQWZ0ZXI9IjIwMjMtMDktMjJUMTk6MDI6MzFaIj4NCiAgICAgICAgICAgIDxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgICAgICAgICAgICAgPHNhbWw6QXVkaWVuY2U+aHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9tZXRhZGF0YS5waHA8L3NhbWw6QXVkaWVuY2U+DQogICAgICAgICAgICA8L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4NCiAgICAgICAgPC9zYW1sOkNvbmRpdGlvbnM+DQogICAgICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxNC0wMy0yMVQxMzo0MTowOVoiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwMTQtMDMtMjFUMjE6NDI6MzFaIiBTZXNzaW9uSW5kZXg9Il9lNjU3OGQ2YWY5N2I5ZjdmMDY3MmQ4NTBkMjlkYjRhZGQxYTI4NmRjMjQiPg0KICAgICAgICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Pg0KICAgICAgICAgICAgICAgIDxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPg0KICAgICAgICAgICAgPC9zYW1sOkF1dGhuQ29udGV4dD4NCiAgICAgICAgPC9zYW1sOkF1dGhuU3RhdGVtZW50Pg0KICAgICAgICA8c2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+DQogICAgICAgICAgICA8c2FtbDpBdHRyaWJ1dGUgTmFtZT0idXJuOm9pZDowLjkuMjM0Mi4xOTIwMDMwMC4xMDAuMS4xIiBGcmllbmRseU5hbWU9InVpZCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+DQogICAgICAgICAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dGVzdDwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgICAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgICAgICAgICA8c2FtbDpBdHRyaWJ1dGUgTmFtZT0idXJuOm9pZDowLjkuMjM0Mi4xOTIwMDMwMC4xMDAuMS41IiBGcmllbmRseU5hbWU9InVpZCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+DQogICAgICAgICAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dGVzdDI8L3NhbWw6QXR0cmlidXRlVmFsdWU+DQogICAgICAgICAgICA8L3NhbWw6QXR0cmlidXRlPg0KICAgICAgICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWU9Im1haWwiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPg0KICAgICAgICAgICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnRlc3RAZXhhbXBsZS5jb208L3NhbWw6QXR0cmlidXRlVmFsdWU+DQogICAgICAgICAgICA8L3NhbWw6QXR0cmlidXRlPg0KICAgICAgICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWU9ImNuIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj4NCiAgICAgICAgICAgICAgICA8c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj50ZXN0PC9zYW1sOkF0dHJpYnV0ZVZhbHVlPg0KICAgICAgICAgICAgPC9zYW1sOkF0dHJpYnV0ZT4NCiAgICAgICAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJzbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+DQogICAgICAgICAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+d2FhMjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgICAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgICAgICAgICA8c2FtbDpBdHRyaWJ1dGUgTmFtZT0iZWR1UGVyc29uQWZmaWxpYXRpb24iIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPg0KICAgICAgICAgICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnVzZXI8L3NhbWw6QXR0cmlidXRlVmFsdWU+DQogICAgICAgICAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+YWRtaW48L3NhbWw6QXR0cmlidXRlVmFsdWU+DQogICAgICAgICAgICA8L3NhbWw6QXR0cmlidXRlPg0KICAgICAgICA8L3NhbWw6QXR0cmlidXRlU3RhdGVtZW50Pg0KICAgIDwvc2FtbDpBc3NlcnRpb24+DQo8L3NhbWxwOlJlc3BvbnNlPg== \ No newline at end of file diff --git a/tests/data/responses/response6.xml.base64 b/tests/data/responses/response6.xml.base64 index b78c68eb..0262ad83 100644 --- a/tests/data/responses/response6.xml.base64 +++ b/tests/data/responses/response6.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file 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 diff --git a/tests/src/OneLogin/Saml2/AuthTest.php b/tests/src/OneLogin/Saml2/AuthTest.php index 12a0ed92..fa96414b 100644 --- a/tests/src/OneLogin/Saml2/AuthTest.php +++ b/tests/src/OneLogin/Saml2/AuthTest.php @@ -198,6 +198,84 @@ public function testProcessResponseValid() $this->assertEquals('2655106621', $sessionExpiration); } + /** + * Tests the getAttributes and getAttributesWithFriendlyName methods + * @covers OneLogin_Saml2_Auth::getAttributes + * @covers OneLogin_Saml2_Auth::getAttribute + * @covers OneLogin_Saml2_Auth::getAttributesWithFriendlyName + * @covers OneLogin_Saml2_Auth::getAttributeWithFriendlyName + */ + public function testGetAttributes() + { + $auth = new OneLogin_Saml2_Auth($this->_settingsInfo); + + $response = file_get_contents(TEST_ROOT . '/data/responses/response6.xml.base64'); + $_POST['SAMLResponse'] = $response; + $auth->processResponse(); + + $expectedAttributes = array( + 'urn:oid:0.9.2342.19200300.100.1.1' => array( + 'demo' + ), + 'urn:oid:2.5.4.42' => array( + 'value' + ), + ); + $expectedFriendlyNameAttributes = array( + 'uid' => array( + 'demo' + ), + 'givenName' => array( + 'value' + ), + ); + $this->assertEquals($expectedAttributes, $auth->getAttributes()); + $this->assertEquals($expectedFriendlyNameAttributes, $auth->getAttributesWithFriendlyName()); + + $this->assertNull($auth->getAttribute('givenName')); + $this->assertEquals(array('value'), $auth->getAttributeWithFriendlyName('givenName')); + + $this->assertEquals(array('value'), $auth->getAttribute('urn:oid:2.5.4.42')); + $this->assertNull($auth->getAttributeWithFriendlyName('urn:oid:2.5.4.42')); + + // An assertion that has no attributes should return an empty array when asked for the attributes + $response2 = file_get_contents(TEST_ROOT . '/data/responses/response2.xml.base64'); + $_POST['SAMLResponse'] = $response2; + $auth2 = new OneLogin_Saml2_Auth($this->_settingsInfo); + $auth2->processResponse(); + $this->assertEmpty($auth2->getAttributes()); + $this->assertEmpty($auth2->getAttributesWithFriendlyName()); + + // Encrypted Attributes are not supported + $response3 = file_get_contents(TEST_ROOT . '/data/responses/invalids/encrypted_attrs.xml.base64'); + $_POST['SAMLResponse'] = $response3; + $auth3 = new OneLogin_Saml2_Auth($this->_settingsInfo); + $auth3->processResponse(); + $this->assertEmpty($auth3->getAttributes()); + $this->assertEmpty($auth3->getAttributesWithFriendlyName()); + + // Duplicated Attribute names + $response4 = file_get_contents(TEST_ROOT . '/data/responses/invalids/duplicated_attributes_with_friendly_names.xml.base64'); + $_POST['SAMLResponse'] = $response4; + $auth4 = new OneLogin_Saml2_Auth($this->_settingsInfo); + try { + $auth4->processResponse(); + $this->fail('OneLogin_Saml2_ValidationError was not raised'); + } catch (OneLogin_Saml2_ValidationError $e) { + $this->assertContains('Found an Attribute element with duplicated FriendlyName', $e->getMessage()); + } + + $response5 = file_get_contents(TEST_ROOT . '/data/responses/invalids/duplicated_attributes.xml.base64'); + $_POST['SAMLResponse'] = $response5; + $auth5 = new OneLogin_Saml2_Auth($this->_settingsInfo); + try { + $auth5->processResponse(); + $this->fail('OneLogin_Saml2_ValidationError was not raised'); + } catch (OneLogin_Saml2_ValidationError $e) { + $this->assertContains('Found an Attribute element with duplicated Name', $e->getMessage()); + } + } + /** * Tests the redirectTo method of the OneLogin_Saml2_Auth class * (phpunit raises an exception when a redirect is executed, the From 9272165365cefc2327d3499e5b837a71a794a464 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Delprat?= Date: Tue, 23 Jan 2018 14:04:43 +0900 Subject: [PATCH 049/236] Change Fatal Error to Exception `OneLogin_Saml2_Utils::loadXML` returns `false` if input is not correct XML. Which leads to a Fatal Error : > Call to a member function getAttribute() on null in **/vendor/onelogin/php-saml/lib/Saml2/LogoutRequest.php:163 With this fix, an Exception is thrown. --- lib/Saml2/LogoutRequest.php | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index a10fdd80..2ed69826 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -150,6 +150,8 @@ public function getRequest($deflate = null) * @param string|DOMDocument $request Logout Request Message * * @return string ID + * + * @throws OneLogin_Saml2_Error */ public static function getID($request) { @@ -158,6 +160,13 @@ public static function getID($request) } else { $dom = new DOMDocument(); $dom = OneLogin_Saml2_Utils::loadXML($dom, $request); + + if (false === $dom) { + throw new OneLogin_Saml2_Error( + "XML is invalid", + OneLogin_Saml2_Error::SAML_LOGOUTREQUEST_INVALID + ); + } } $id = $dom->documentElement->getAttribute('ID'); From 8fe3ab466075493d4e3ae8547bd50b57f086ca5c Mon Sep 17 00:00:00 2001 From: Stephane Delprat Date: Wed, 24 Jan 2018 12:44:21 +0900 Subject: [PATCH 050/236] Add tests and LogoutResponse --- lib/Saml2/LogoutRequest.php | 2 +- lib/Saml2/LogoutResponse.php | 9 +++++++ lib/Saml2/Utils.php | 2 +- .../src/OneLogin/Saml2/LogoutRequestTest.php | 25 ++++++++++++++++--- .../src/OneLogin/Saml2/LogoutResponseTest.php | 23 ++++++++++++++--- 5 files changed, 53 insertions(+), 8 deletions(-) diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index 2ed69826..8bbcedb4 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -160,7 +160,7 @@ public static function getID($request) } else { $dom = new DOMDocument(); $dom = OneLogin_Saml2_Utils::loadXML($dom, $request); - + if (false === $dom) { throw new OneLogin_Saml2_Error( "XML is invalid", diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index e41dcd64..77ce2eff 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -42,6 +42,8 @@ class OneLogin_Saml2_LogoutResponse * * @param OneLogin_Saml2_Settings $settings Settings. * @param string|null $response An UUEncoded SAML Logout response from the IdP. + * + * @throws OneLogin_Saml2_Error */ public function __construct(OneLogin_Saml2_Settings $settings, $response = null) { @@ -63,6 +65,13 @@ public function __construct(OneLogin_Saml2_Settings $settings, $response = null) $this->document = new DOMDocument(); $this->document = OneLogin_Saml2_Utils::loadXML($this->document, $this->_logoutResponse); + if (false === $this->document) { + throw new OneLogin_Saml2_Error( + "XML is invalid", + OneLogin_Saml2_Error::SAML_LOGOUTRESPONSE_INVALID + ); + } + if ($this->document->documentElement->hasAttribute('ID')) { $this->id = $this->document->documentElement->getAttribute('ID'); } diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 013aaf97..8458ffe7 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -727,7 +727,7 @@ public static function parseDuration($duration, $timestamp = null) /* Parse the duration. We use a very strict pattern. */ $durationRegEx = '#^(-?)P(?:(?:(?:(\\d+)Y)?(?:(\\d+)M)?(?:(\\d+)D)?(?:T(?:(\\d+)H)?(?:(\\d+)M)?(?:(\\d+)S)?)?)|(?:(\\d+)W))$#D'; - $matches = array(); + $matches = array(); if (!preg_match($durationRegEx, $duration, $matches)) { throw new Exception('Invalid ISO 8601 duration: ' . $duration); } diff --git a/tests/src/OneLogin/Saml2/LogoutRequestTest.php b/tests/src/OneLogin/Saml2/LogoutRequestTest.php index 4c69f221..7daa6f10 100644 --- a/tests/src/OneLogin/Saml2/LogoutRequestTest.php +++ b/tests/src/OneLogin/Saml2/LogoutRequestTest.php @@ -265,7 +265,7 @@ public function testCreateDeflatedSAMLLogoutRequestURLParameter() /** * Tests the OneLogin_Saml2_LogoutRequest Constructor. * Case: Able to generate encryptedID with MultiCert - * + * * @covers OneLogin_Saml2_LogoutRequest */ public function testConstructorEncryptIdUsingX509certMulti() @@ -828,7 +828,7 @@ public function testGetXML() $logoutRequest = new OneLogin_Saml2_LogoutRequest($settings); $xml = $logoutRequest->getXML(); $this->assertRegExp('#^getXML(); $this->assertRegExp('#^getXML(); $id1 = OneLogin_Saml2_LogoutRequest::getID($xml); $this->assertNotNull($id1); - + $logoutRequestProcessed = new OneLogin_Saml2_LogoutRequest($settings, base64_encode($xml)); $id2 = $logoutRequestProcessed->id; $this->assertEquals($id1, $id2); } + + /** + * Tests that the LogoutRequest throws an exception + * + * @covers OneLogin_Saml2_LogoutRequest::getID() + * + * @expectedException OneLogin_Saml2_Error + * @expectedExceptionMessage XML is invalid + */ + public function testGetIDException() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $settings = new OneLogin_Saml2_Settings($settingsInfo); + $logoutRequest = new OneLogin_Saml2_LogoutRequest($settings); + $xml = $logoutRequest->getXML(); + $id1 = OneLogin_Saml2_LogoutRequest::getID($xml.''); + } } diff --git a/tests/src/OneLogin/Saml2/LogoutResponseTest.php b/tests/src/OneLogin/Saml2/LogoutResponseTest.php index 54a84976..31165485 100644 --- a/tests/src/OneLogin/Saml2/LogoutResponseTest.php +++ b/tests/src/OneLogin/Saml2/LogoutResponseTest.php @@ -437,7 +437,7 @@ public function testWeCanChooseToDeflateAResponseBody() //Test that we can choose not to compress the request payload. $settingsDir = TEST_ROOT .'/settings/'; include $settingsDir.'settings1.php'; - + //Compression is currently turned on in settings. $settings = new OneLogin_Saml2_Settings($settingsInfo); $logoutResponse = new OneLogin_Saml2_LogoutResponse($settings, $message); @@ -448,7 +448,7 @@ public function testWeCanChooseToDeflateAResponseBody() //Test that we can choose not to compress the request payload. $settingsDir = TEST_ROOT .'/settings/'; include $settingsDir.'settings2.php'; - + //Compression is currently turned on in settings. $settings = new OneLogin_Saml2_Settings($settingsInfo); $logoutResponse = new OneLogin_Saml2_LogoutResponse($settings, $message); @@ -497,9 +497,26 @@ public function testGetID() $xml = $logoutResponse->getXML(); $id1 = $logoutResponse->getID(); $this->assertNotNull($id1); - + $processedLogoutResponse = new OneLogin_Saml2_LogoutResponse($settings, base64_encode($xml)); $id2 = $processedLogoutResponse->getID(); $this->assertEquals($id1, $id2); } + + /** + * Tests that the LogoutRequest throws an exception + * + * @covers OneLogin_Saml2_LogoutRequest::getID() + * + * @expectedException OneLogin_Saml2_Error + * @expectedExceptionMessage XML is invalid + */ + public function testGetIDException() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $settings = new OneLogin_Saml2_Settings($settingsInfo); + $logoutResponse = new OneLogin_Saml2_LogoutResponse($settings, ''); + } } From 035a3bf7cd1061f87fe2fcde219c8d3bd02793f0 Mon Sep 17 00:00:00 2001 From: Stephane Delprat Date: Wed, 24 Jan 2018 21:51:28 +0900 Subject: [PATCH 051/236] Change exception message --- lib/Saml2/LogoutRequest.php | 2 +- lib/Saml2/LogoutResponse.php | 2 +- tests/src/OneLogin/Saml2/LogoutRequestTest.php | 2 +- tests/src/OneLogin/Saml2/LogoutResponseTest.php | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index 8bbcedb4..7fa6e52a 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -163,7 +163,7 @@ public static function getID($request) if (false === $dom) { throw new OneLogin_Saml2_Error( - "XML is invalid", + "LogoutRequest could not be processed", OneLogin_Saml2_Error::SAML_LOGOUTREQUEST_INVALID ); } diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index 77ce2eff..be5caf3f 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -67,7 +67,7 @@ public function __construct(OneLogin_Saml2_Settings $settings, $response = null) if (false === $this->document) { throw new OneLogin_Saml2_Error( - "XML is invalid", + "LogoutResponse could not be processed", OneLogin_Saml2_Error::SAML_LOGOUTRESPONSE_INVALID ); } diff --git a/tests/src/OneLogin/Saml2/LogoutRequestTest.php b/tests/src/OneLogin/Saml2/LogoutRequestTest.php index 7daa6f10..7c5c3cff 100644 --- a/tests/src/OneLogin/Saml2/LogoutRequestTest.php +++ b/tests/src/OneLogin/Saml2/LogoutRequestTest.php @@ -861,7 +861,7 @@ public function testGetID() * @covers OneLogin_Saml2_LogoutRequest::getID() * * @expectedException OneLogin_Saml2_Error - * @expectedExceptionMessage XML is invalid + * @expectedExceptionMessage LogoutRequest could not be processed */ public function testGetIDException() { diff --git a/tests/src/OneLogin/Saml2/LogoutResponseTest.php b/tests/src/OneLogin/Saml2/LogoutResponseTest.php index 31165485..5cc5d45b 100644 --- a/tests/src/OneLogin/Saml2/LogoutResponseTest.php +++ b/tests/src/OneLogin/Saml2/LogoutResponseTest.php @@ -509,7 +509,7 @@ public function testGetID() * @covers OneLogin_Saml2_LogoutRequest::getID() * * @expectedException OneLogin_Saml2_Error - * @expectedExceptionMessage XML is invalid + * @expectedExceptionMessage LogoutResponse could not be processed */ public function testGetIDException() { From 47cc1092daa416df3188b19966a9870f22d7d456 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 27 Feb 2018 19:05:03 +0100 Subject: [PATCH 052/236] Adding test that checks VU-475445 --- .../response_node_text_attack.xml.base64 | 1 + tests/src/OneLogin/Saml2/ResponseTest.php | 24 +++++++++++++++---- 2 files changed, 21 insertions(+), 4 deletions(-) create mode 100644 tests/data/responses/response_node_text_attack.xml.base64 diff --git a/tests/data/responses/response_node_text_attack.xml.base64 b/tests/data/responses/response_node_text_attack.xml.base64 new file mode 100644 index 00000000..ba9f2f12 --- /dev/null +++ b/tests/data/responses/response_node_text_attack.xml.base64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 60c4247a..26939ac4 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -535,9 +535,6 @@ public function testGetIssuers() } } - - - /** * Tests the getSessionIndex method of the OneLogin_Saml2_Response * @@ -556,7 +553,6 @@ public function testGetSessionIndex() $this->assertEquals('_7164a9a9f97828bfdb8d0ebc004a05d2e7d873f70c', $response2->getSessionIndex()); } - /** * Tests the getAttributes method of the OneLogin_Saml2_Response * @@ -720,6 +716,26 @@ public function testDoesNotAllowSignatureWrappingAttack2() $this->assertFalse($valid); } + /** + * Tests the getNameId and getAttributes methods of the + * OneLogin_Saml2_Response + * + * Test that the node text with comment attack (VU#475445) + * is not allowed + * + * @covers OneLogin_Saml2_Response::getNameId + * @covers OneLogin_Saml2_Response::getAttributes + */ + public function testNodeTextAttack() + { + $xml = file_get_contents(TEST_ROOT . '/data/responses/response_node_text_attack.xml.base64'); + $response = new OneLogin_Saml2_Response($this->_settings, $xml); + $nameId = $response->getNameId(); + $attributes = $response->getAttributes(); + $this->assertEquals("support@onelogin.com", $nameId); + $this->assertEquals("smith", $attributes['surname'][0]); + } + /** * Tests the getSessionNotOnOrAfter method of the OneLogin_Saml2_Response * From 8c491d58a3c6928c3b153fd32f3b70dd4376cd60 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 2 Mar 2018 01:21:07 +0100 Subject: [PATCH 053/236] Improve how fingerprint is calcultated --- lib/Saml2/Utils.php | 40 +++++++++++++---------- tests/src/OneLogin/Saml2/ResponseTest.php | 3 +- tests/src/OneLogin/Saml2/UtilsTest.php | 14 +++++--- 3 files changed, 33 insertions(+), 24 deletions(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 013aaf97..468308bb 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -727,7 +727,7 @@ public static function parseDuration($duration, $timestamp = null) /* Parse the duration. We use a very strict pattern. */ $durationRegEx = '#^(-?)P(?:(?:(?:(\\d+)Y)?(?:(\\d+)M)?(?:(\\d+)D)?(?:T(?:(\\d+)H)?(?:(\\d+)M)?(?:(\\d+)S)?)?)|(?:(\\d+)W))$#D'; - $matches = array(); + $matches = array(); if (!preg_match($durationRegEx, $duration, $matches)) { throw new Exception('Invalid ISO 8601 duration: ' . $duration); } @@ -894,27 +894,30 @@ public static function calculateX509Fingerprint($x509cert, $alg = 'sha1') { assert('is_string($x509cert)'); - $lines = explode("\n", $x509cert); - + $arCert = explode("\n", $x509cert); $data = ''; - - foreach ($lines as $line) { - /* Remove '\r' from end of line if present. */ - $line = rtrim($line); - if ($line === '-----BEGIN CERTIFICATE-----') { - /* Delete junk from before the certificate. */ - $data = ''; - } elseif ($line === '-----END CERTIFICATE-----') { - /* Ignore data after the certificate. */ - break; - } elseif ($line === '-----BEGIN PUBLIC KEY-----' || $line === '-----BEGIN RSA PRIVATE KEY-----') { - /* This isn't an X509 certificate. */ - return null; + $inData = false; + + foreach ($arCert as $curData) { + if (! $inData) { + if (strncmp($curData, '-----BEGIN CERTIFICATE', 22) == 0) { + $inData = true; + } elseif ((strncmp($curData, '-----BEGIN PUBLIC KEY', 21) == 0) || (strncmp($curData, '-----BEGIN RSA PRIVATE KEY', 26) == 0)) { + /* This isn't an X509 certificate. */ + return null; + } } else { - /* Append the current line to the certificate data. */ - $data .= $line; + if (strncmp($curData, '-----END CERTIFICATE', 20) == 0) { + break; + } + $data .= trim($curData); } } + + if (empty($data)) { + return null; + } + $decodedData = base64_decode($data); switch ($alg) { @@ -1185,6 +1188,7 @@ public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public' if ($key->type === $algorithm) { return $key; } + $keyInfo = openssl_pkey_get_details($key->key); if ($keyInfo === false) { throw new Exception('Unable to get key details from XMLSecurityKey.'); diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 26939ac4..6d7d280c 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -1475,7 +1475,8 @@ public function testIsValid2() $settingsDir = TEST_ROOT .'/settings/'; include $settingsDir.'settings1.php'; - $settingsInfo['idp']['certFingerprint'] = OneLogin_Saml2_Utils::calculateX509Fingerprint($settingsInfo['idp']['x509cert']); + $cert = OneLogin_Saml2_Utils::formatCert($settingsInfo['idp']['x509cert']); + $settingsInfo['idp']['certFingerprint'] = OneLogin_Saml2_Utils::calculateX509Fingerprint($cert); $settingsInfo['idp']['x509cert'] = null; $settings = new OneLogin_Saml2_Settings($settingsInfo); diff --git a/tests/src/OneLogin/Saml2/UtilsTest.php b/tests/src/OneLogin/Saml2/UtilsTest.php index 2317859e..41dd8b5f 100644 --- a/tests/src/OneLogin/Saml2/UtilsTest.php +++ b/tests/src/OneLogin/Saml2/UtilsTest.php @@ -455,7 +455,7 @@ public function testSetBaseURL() $this->assertNull(OneLogin_Saml2_Utils::getSelfPort()); $this->assertNull(OneLogin_Saml2_Utils::getBaseURLPath()); - $this->assertEquals($expectedUrlNQ, OneLogin_Saml2_Utils::getSelfURLNoQuery()); + $this->assertEquals($expectedUrlNQ, OneLogin_Saml2_Utils::getSelfURLNoQuery()); $this->assertEquals($expectedRoutedUrlNQ, OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery()); $this->assertEquals($expectedUrl, OneLogin_Saml2_Utils::getSelfURL()); @@ -469,14 +469,14 @@ public function testSetBaseURL() $this->assertEquals('81', OneLogin_Saml2_Utils::getSelfPort()); $this->assertEquals('/example2/', OneLogin_Saml2_Utils::getBaseURLPath()); - $this->assertEquals($expectedUrlNQ2, OneLogin_Saml2_Utils::getSelfURLNoQuery()); + $this->assertEquals($expectedUrlNQ2, OneLogin_Saml2_Utils::getSelfURLNoQuery()); $this->assertEquals($expectedRoutedUrlNQ2, OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery()); $this->assertEquals($expectedUrl2, OneLogin_Saml2_Utils::getSelfURL()); $_SERVER['PATH_INFO'] = '/test'; $expectedUrlNQ2 = 'http://anothersp.example.com:81/example2/route.php/test'; - $this->assertEquals($expectedUrlNQ2, OneLogin_Saml2_Utils::getSelfURLNoQuery()); + $this->assertEquals($expectedUrlNQ2, OneLogin_Saml2_Utils::getSelfURLNoQuery()); $this->assertEquals($expectedRoutedUrlNQ2, OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery()); $this->assertEquals($expectedUrl2, OneLogin_Saml2_Utils::getSelfURL()); } @@ -929,7 +929,6 @@ public function testDeleteLocalSession() // Can't test that on TRAVIS $this->markTestSkipped("Can't test that on TRAVIS"); } else { - if (!isset($_SESSION)) { $_SESSION = array(); } @@ -964,7 +963,6 @@ public function testisSessionStarted() // Can't test that on TRAVIS $this->markTestSkipped("Can't test that on TRAVIS"); } else { - $this->assertFalse(OneLogin_Saml2_Utils::isSessionStarted()); $prev = error_reporting(0); @@ -994,6 +992,12 @@ public function testCalculateX509Fingerprint() $this->assertNull(OneLogin_Saml2_Utils::calculateX509Fingerprint($key)); + $this->assertNull(OneLogin_Saml2_Utils::calculateX509Fingerprint("")); + + $this->assertNull(OneLogin_Saml2_Utils::calculateX509Fingerprint($settingsInfo['idp']['x509cert'])); + + $this->assertEquals('afe71c28ef740bc87425be13a2263d37971da1f9', OneLogin_Saml2_Utils::calculateX509Fingerprint(OneLogin_Saml2_Utils::formatCert($settingsInfo['idp']['x509cert']))); + $this->assertEquals('afe71c28ef740bc87425be13a2263d37971da1f9', OneLogin_Saml2_Utils::calculateX509Fingerprint($cert)); $this->assertEquals('afe71c28ef740bc87425be13a2263d37971da1f9', OneLogin_Saml2_Utils::calculateX509Fingerprint($cert, 'sha1')); From 54d148932bdda678a6e296d7d0c46abe93fc8742 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 5 Mar 2018 12:47:32 +0100 Subject: [PATCH 054/236] Add some fixes to xmlseclibs. Extra protection verifying the Signature algorithm used on SignedInfo element, not only rely on verify / verifySignature methods --- extlib/xmlseclibs/xmlseclibs.php | 6 ++---- lib/Saml2/Utils.php | 19 +++++++++++++++++++ 2 files changed, 21 insertions(+), 4 deletions(-) diff --git a/extlib/xmlseclibs/xmlseclibs.php b/extlib/xmlseclibs/xmlseclibs.php index 05be8643..bd3caa5f 100644 --- a/extlib/xmlseclibs/xmlseclibs.php +++ b/extlib/xmlseclibs/xmlseclibs.php @@ -282,7 +282,7 @@ public function loadKey($key, $isFile=false, $isCert = false) { } else { $this->key = openssl_get_privatekey($this->key, $this->passphrase); } - } else if ($this->cryptParams['cipher'] == MCRYPT_RIJNDAEL_128) { + } else if (isset($this->cryptParams['cipher']) && $this->cryptParams['cipher'] == MCRYPT_RIJNDAEL_128) { /* Check key length */ switch ($this->type) { case (XMLSecurityKey::AES256_CBC): @@ -724,7 +724,7 @@ public function validateDigest($refNode, $data) { $digValue = $this->calculateDigest($digestAlgorithm, $data, false); $query = 'string(./secdsig:DigestValue)'; $digestValue = $xpath->evaluate($query, $refNode); - return ($digValue == base64_decode($digestValue)); + return ($digValue === base64_decode($digestValue)); } public function processTransforms($refNode, $objData, $includeCommentNodes = true) { @@ -846,8 +846,6 @@ public function processRefNode($refNode) { } else { $dataObject = $refNode->ownerDocument; } - } else { - $dataObject = file_get_contents($arUrl); } } else { /* This reference identifies the root node with an empty URI. This should diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 468308bb..ff5b6ae2 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -1189,6 +1189,10 @@ public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public' return $key; } + if (!OneLogin_Saml2_Utils::isSupportedSigningAlgorithm($algorithm)) { + throw new \Exception('Unsupported signing algorithm.'); + } + $keyInfo = openssl_pkey_get_details($key->key); if ($keyInfo === false) { throw new Exception('Unable to get key details from XMLSecurityKey.'); @@ -1201,6 +1205,17 @@ public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public' return $newKey; } + public static function isSupportedSigningAlgorithm($algorithm) + { + return in_array($algorithm, array( + XMLSecurityKey::RSA_1_5, + XMLSecurityKey::RSA_SHA1, + XMLSecurityKey::RSA_SHA256, + XMLSecurityKey::RSA_SHA384, + XMLSecurityKey::RSA_SHA512 + )); + } + /** * Adds signature key and senders certificate to an element (Message or Assertion). * @@ -1312,6 +1327,10 @@ public static function validateSign($xml, $cert = null, $fingerprint = null, $fi throw new Exception('We have no idea about the key'); } + if (!OneLogin_Saml2_Utils::isSupportedSigningAlgorithm($objKey->type)) { + throw new \Exception('Unsupported signing algorithm.'); + } + $objXMLSecDSig->canonicalizeSignedInfo(); try { From 2992d885d61889e7dce30abcac81b10d821c4e8f Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 5 Mar 2018 13:08:39 +0100 Subject: [PATCH 055/236] Add warning about the use of fingerprint on signature verification method --- README.md | 6 +++++- settings_example.php | 5 ++++- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 5bb4ae5b..7c600880 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,8 @@ and supported by OneLogin Inc. Warning ------- +php-saml is not affected by [201803-01](https://simplesamlphp.org/security/201803-01) + Update php-saml to 2.10.4, this version includes a security patch related to [signature validations on LogoutRequests/LogoutResponses](https://github.com/onelogin/php-saml/commit/949359f5cad5e1d085c4e5447d9aa8f49a6e82a1) @@ -157,6 +159,7 @@ In production, the `strict` parameter **MUST** be set as `"true"` and the something other than SHA1 (see https://shattered.io/ ). Otherwise your environment is not secure and will be exposed to attacks. +In production also we highly recommended to register on the settings the IdP certificate instead of using the fingerprint method. The fingerprint, is a hash, so at the end is open to a collision attack that can end on a siganture validation bypass. Other SAML toolkits deprecated that mechanism, we maintain it for compatibility and also to be used on test environment. Getting started --------------- @@ -379,7 +382,8 @@ $settings = array ( 'x509cert' => '', /* * Instead of use the whole x509cert you can use a fingerprint in order to - * validate a SAMLResponse. + * validate a SAMLResponse, but we don't recommend to use that + * method on production since is exploitable by a collision attack. * (openssl x509 -noout -fingerprint -in "idp.crt" to generate it, * or add for example the -sha256 , -sha384 or -sha512 parameter) * diff --git a/settings_example.php b/settings_example.php index 7f648512..213c9606 100644 --- a/settings_example.php +++ b/settings_example.php @@ -101,7 +101,10 @@ // Public x509 certificate of the IdP 'x509cert' => '', /* - * Instead of use the whole x509cert you can use a fingerprint + * Instead of use the whole x509cert you can use a fingerprint in + * order to validate the SAMLResponse, but we don't recommend to use + * that method on production since is exploitable by a collision + * attack. * (openssl x509 -noout -fingerprint -in "idp.crt" to generate it, * or add for example the -sha256 , -sha384 or -sha512 parameter) * From 28e7ccc949592e78f7f4648dcfb492893aecc360 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 5 Mar 2018 16:43:24 +0100 Subject: [PATCH 056/236] Release 2.13.0 --- CHANGELOG | 6 ++++++ lib/Saml2/Utils.php | 17 ++++++++++------- lib/Saml2/version.json | 4 ++-- 3 files changed, 18 insertions(+), 9 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index e83a93ae..362fc2c7 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,11 @@ CHANGELOG ========= +v.2.13.0 +* Update xmlseclibs with some fixes. +* Add extra protection verifying the Signature algorithm used on SignedInfo element, not only rely on the xmlseclibs verify / verifySignature methods. +* Add getAttributesWithFriendlyName method which returns the set of SAML attributes indexed by FriendlyName +* Fix bug on parseRemoteXML and parseFileXML. Internal calls to parseXML missed the desiredNameIdFormat parameter + v.2.12.0 * Improve Time management. Use DateTime/DateTimeZone classes. * Escape error messages in debug mode diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index ff5b6ae2..7683b632 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -1207,13 +1207,16 @@ public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public' public static function isSupportedSigningAlgorithm($algorithm) { - return in_array($algorithm, array( - XMLSecurityKey::RSA_1_5, - XMLSecurityKey::RSA_SHA1, - XMLSecurityKey::RSA_SHA256, - XMLSecurityKey::RSA_SHA384, - XMLSecurityKey::RSA_SHA512 - )); + return in_array( + $algorithm, + array( + XMLSecurityKey::RSA_1_5, + XMLSecurityKey::RSA_SHA1, + XMLSecurityKey::RSA_SHA256, + XMLSecurityKey::RSA_SHA384, + XMLSecurityKey::RSA_SHA512 + ) + ); } /** diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index b201baa4..dc3aca8b 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.12.0", - "released": "06/11/2017" + "version": "2.13.0", + "released": "05/03/2017" } } From 9593164081a688fc36c0531c097c894e4566ee5f Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 11 Apr 2018 15:30:29 +0200 Subject: [PATCH 057/236] Fix release date --- lib/Saml2/version.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index dc3aca8b..f502a0cb 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { "version": "2.13.0", - "released": "05/03/2017" + "released": "05/03/2018" } } From ca5dd55b4c0ee217d9c16c83dfa0da373d17d768 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 26 Apr 2018 13:19:42 +0200 Subject: [PATCH 058/236] Improve Readme --- README.md | 45 +++++++++++++++++++++++---------------------- demo1/Readme.txt | 20 ++++++++------------ 2 files changed, 31 insertions(+), 34 deletions(-) diff --git a/README.md b/README.md index 7c600880..578cb734 100644 --- a/README.md +++ b/README.md @@ -119,7 +119,7 @@ After installation has completed you will find at the `vendor/` folder a new fol **Important** In this option, the x509 certs must be stored at `vendor/onelogin/php-saml/certs` and settings file stored at `vendor/onelogin/php-saml`. -Your settings are at risk of being deleted when updating packages using `composer update` or similiar commands. So it is **highly** recommended that instead of using settings files, you pass the settings as an array directly to the constructor (explained later in this document). If you do not use this approach your settings are at risk of being deleted when updating packages using `composer update` or similiar commands. +Your settings are at risk of being deleted when updating packages using `composer update` or similar commands. So it is **highly** recommended that instead of using settings files, you pass the settings as an array directly to the constructor (explained later in this document). If you do not use this approach your settings are at risk of being deleted when updating packages using `composer update` or similar commands. Compatibility ------------- @@ -144,7 +144,7 @@ the new features that the new library Saml2 carries. Namespaces ---------- -If you are using the library with a framework like Symfony2 that contains +If you are using the library with a framework like Symfony that contains namespaces, remember that calls to the class must be done by adding a backslash (`\`) to the start, for example to use the static method getSelfURLNoQuery use: @@ -159,7 +159,7 @@ In production, the `strict` parameter **MUST** be set as `"true"` and the something other than SHA1 (see https://shattered.io/ ). Otherwise your environment is not secure and will be exposed to attacks. -In production also we highly recommended to register on the settings the IdP certificate instead of using the fingerprint method. The fingerprint, is a hash, so at the end is open to a collision attack that can end on a siganture validation bypass. Other SAML toolkits deprecated that mechanism, we maintain it for compatibility and also to be used on test environment. +In production also we highly recommended to register on the settings the IdP certificate instead of using the fingerprint method. The fingerprint, is a hash, so at the end is open to a collision attack that can end on a signature validation bypass. Other SAML toolkits deprecated that mechanism, we maintain it for compatibility and also to be used on test environment. Getting started --------------- @@ -173,7 +173,7 @@ Let's start describing the folders: #### `certs/` #### -SAML requires a x.509 cert to sign and encrypt elements like `NameID`, `Message`, +SAML requires a x509 cert to sign and encrypt elements like `NameID`, `Message`, `Assertion`, `Metadata`. If our environment requires sign or encrypt support, this folder may contain @@ -186,11 +186,11 @@ Or also we can provide those data in the setting file at the `$settings['sp']['x and the `$settings['sp']['privateKey']`. Sometimes we could need a signature on the metadata published by the SP, in -this case we could use the x.509 cert previously mentioned or use a new x.509 +this case we could use the x509 cert previously mentioned or use a new x509 cert: `metadata.crt` and `metadata.key`. Use `sp_new.crt` if you are in a key rollover process and you want to -publish that x509certificate on Service Provider metadata. +publish that x509 certificate on Service Provider metadata. #### `extlib/` #### @@ -545,7 +545,7 @@ $advancedSettings = array ( The compression settings allow you to instruct whether or not the IdP can accept data that has been compressed using [gzip](gzip) ('requests' and 'responses'). -But if we provide a $deflate boolean parameter to the getRequest or getResponse method it will have priority over the compression settings. +But if we provide a `$deflate` boolean parameter to the `getRequest` or `getResponse` method it will have priority over the compression settings. In the security section, you can set the way that the SP will handle the messages and assertions. Contact the admin of the IdP and ask him what the IdP expects, @@ -556,7 +556,7 @@ Once we know what kind of data could be configured, let's talk about the way settings are handled within the toolkit. The settings files described (`settings.php` and `advanced_settings.php`) are loaded -by the toolkit if not other array with settings info is provided in the constructors of the toolkit. Let's see some examples. +by the toolkit if no other array with settings info is provided in the constructor of the toolkit. Let's see some examples. ```php // Initializes toolkit with settings.php & advanced_settings files. @@ -570,7 +570,7 @@ $auth = new OneLogin_Saml2_Auth($settingsInfo); $settings = new OneLogin_Saml2_Settings($settingsInfo); ``` -You can declare the `$settingsInfo` in the file that constains the constructor +You can declare the `$settingsInfo` in the file that contains the constructor execution or locate them in any file and load the file in order to get the array available as we see in the following example: @@ -632,9 +632,9 @@ The `AuthNRequest` will be sent signed or unsigned based on the security info of the `advanced_settings.php` (`'authnRequestsSigned'`). -The IdP will then return the SAML Response to the user's client. The client is then forwarded to the Attribute Consumer Service of the SP with this information. If we do not set a 'url' param in the login method and we are using the default ACS provided by the toolkit (`endpoints/acs.php`), then the ACS endpoint will redirect the user to the file that launched the SSO request. +The IdP will then return the SAML Response to the user's client. The client is then forwarded to the Attribute Consumer Service of the SP with this information. If we do not set a `'url'` param in the login method and we are using the default ACS provided by the toolkit (`endpoints/acs.php`), then the ACS endpoint will redirect the user to the file that launched the SSO request. -We can set an `'returnTo'` url to change the workflow and redirect the user to the other PHP file. +We can set a `'returnTo'` url to change the workflow and redirect the user to the other PHP file. ```php $newTargetUrl = 'http://example.com/consume2.php'; @@ -701,7 +701,8 @@ Before the XML metadata is exposed, a check takes place to ensure that the info to be provided is valid. Instead of use the Auth object, you can directly use -``` + +```php $settings = new OneLogin_Saml2_Settings($settingsInfo, true); ``` to get the settings object and with the true parameter we will avoid the IdP Settings validation. @@ -1126,11 +1127,11 @@ php-saml toolkit uses a bunch of methods in OneLogin_Saml2_Utils that try to gue getSelfURLNoQuery and getSelfRoutedURLNoQuery are used to calculate the currentURL in order to valdate SAML elements like Destination or Recipient. -When the PHP application is behind a proxy or a load balancer we can execute setProxyVars(true) and getSelfPort and isHTTPS will take care of the $_SERVER["HTTP_X_FORWARDED_PORT"] and $_SERVER['HTTP_X_FORWARDED_PROTO'] vars (otherwise they are ignored). +When the PHP application is behind a proxy or a load balancer we can execute `setProxyVars(true)` and `setSelfPort` and `isHTTPS` will take care of the `$_SERVER["HTTP_X_FORWARDED_PORT"]` and `$_SERVER['HTTP_X_FORWARDED_PROTO']` vars (otherwise they are ignored). -Also a developer can use setSelfProtocol, setSelfHost, setSelfPort and getBaseURLPath to define a specific value to be returned by isHTTPS, getSelfHost, getSelfPort and getBaseURLPath. And define a setBasePath to be used on the getSelfURL and getSelfRoutedURLNoQuery to replace the data extracted from $_SERVER["REQUEST_URI"]. +Also a developer can use `setSelfProtocol`, `setSelfHost`, `setSelfPort` and `getBaseURLPath` to define a specific value to be returned by `isHTTPS`, `getSelfHost`, `getSelfPort` and `getBaseURLPath`. And define a `setBasePath` to be used on the `getSelfURL` and `getSelfRoutedURLNoQuery` to replace the data extracted from `$_SERVER["REQUEST_URI"]`. -At the settings the developer will be able to set a 'baseurl' parameter that automatically will use setBaseURL to set values for setSelfProtocol, setSelfHost, setSelfPort and setBaseURLPath. +At the settings the developer will be able to set a `'baseurl'` parameter that automatically will use `setBaseURL` to set values for `setSelfProtocol`, `setSelfHost`, `setSelfPort` and `setBaseURLPath`. ### Working behind load balancer ### @@ -1144,7 +1145,7 @@ Or by using the method described on the previous section. ### SP Key rollover ### -If you plan to update the SP x509cert and privateKey you can define the new x509cert as $settings['sp']['x509certNew'] and it will be +If you plan to update the SP x509cert and privateKey you can define the new x509cert as `$settings['sp']['x509certNew']` and it will be published on the SP metadata so Identity Providers can read them and get ready for rollover. @@ -1153,20 +1154,20 @@ published on the SP metadata so Identity Providers can read them and get ready f In some scenarios the IdP uses different certificates for signing/encryption, or is under key rollover phase and more than one certificate is published on IdP metadata. -In order to handle that the toolkit offers the $settings['idp']['x509certMulti'] parameter. +In order to handle that the toolkit offers the `$settings['idp']['x509certMulti']` parameter. -When that parameter is used, 'x509cert' and 'certFingerprint' values will be ignored by the toolkit. +When that parameter is used, `'x509cert'` and `'certFingerprint'` values will be ignored by the toolkit. -The 'x509certMulti' is an array with 2 keys: -- 'signing'. An array of certs that will be used to validate IdP signature -- 'encryption' An array with one unique cert that will be used to encrypt data to be sent to the IdP +The `'x509certMulti'` is an array with 2 keys: +- `'signing'`. An array of certs that will be used to validate IdP signature +- `'encryption'` An array with one unique cert that will be used to encrypt data to be sent to the IdP ### Replay attacks ### In order to avoid replay attacks, you can store the ID of the SAML messages already processed, to avoid processing them twice. Since the Messages expires and will be invalidated due that fact, you don't need to store those IDs longer than the time frame that you currently accepting. -Get the ID of the last processed message/assertion with the getLastMessageId/getLastAssertionId method of the Auth object. +Get the ID of the last processed message/assertion with the `getLastMessageId/getLastAssertionId` methods of the Auth object. ### Main classes and methods ### diff --git a/demo1/Readme.txt b/demo1/Readme.txt index 1493b353..fae19121 100644 --- a/demo1/Readme.txt +++ b/demo1/Readme.txt @@ -19,8 +19,7 @@ file is loaded in order to get the $settingsInfo var to be used to initialize the Setting class. Notice that in this demo, the setting.php file that could be defined at the base -folder of the toolkit is ignored and the libs are loaded using the -_toolkit_loader.php located at the base folder of the toolkit. +folder of the toolkit is ignored and the libs are loaded using the _toolkit_loader.php located at the base folder of the toolkit. IdP setup @@ -37,40 +36,37 @@ How it works to the same view or login and be redirected to the attrs.php view. 2. When you click: - + 2.1 in the first link, we access to (index.php?sso) an AuthNRequest is sent to the IdP, we authenticate at the IdP and then a Response is sent to the SP, specifically the Assertion Consumer Service view: index.php?acs, notice that a RelayState parameter is set to the url that initiated the process, the index.php view. - 2.2 in the second link we access to (attrs.php) have the same process - described at 2.1 with the diference that as RelayState is set the attrs.php + 2.2 in the second link we access to (attrs.php) have the same process described at 2.1 with the diference that as RelayState is set the attrs.php 3. The SAML Response is processed in the ACS (index.php?acs), if the Response is not valid, the process stop here and a message is showed. Otherwise we are redirected to the RelayState view. a) index.php or b) attrs.php -4. We are logged in the app and the user attributes are showed. +4. We are logged in the app and the user attributes are showed. At this point, we can test the single log out functionality. -5. The single log out funcionality could be tested by 2 ways. +5. The single log out functionality could be tested by 2 ways. 5.1 SLO Initiated by SP. Click on the "logout" link at the SP, after that a - Logout Request is sent to the IdP, the session at the IdP is closed and - replies to the SP a Logout Response (sent to the Single Logout Service + Logout Request is sent to the IdP, the session at the IdP is closed and replies to the SP a Logout Response (sent to the Single Logout Service endpoint). The SLS endpoint (index.php?sls)of the SP process the Logout Response and if is valid, close the user session of the local app. Notice that the SLO Workflow starts and ends at the SP. 5.2 SLO Initiated by IdP. In this case, the action takes place on the IdP - side, the logout process is initiated at the idP, sends a Logout - Request to the SP (SLS endpoint, index.php?sls). The SLS endpoint of the SP + side, the logout process is initiated at the idP, sends a Logout Request to the SP (SLS endpoint, index.php?sls). The SLS endpoint of the SP process the Logout Request and if is valid, close the session of the user at the local app and send a Logout Response to the IdP (to the SLS endpoint of the IdP). The IdP recieve the Logout Response, process it and close the session at of the IdP. Notice that the SLO Workflow starts and ends at the IdP. - + Notice that all the SAML Requests and Responses are handler at a unique file, the index.php file and how GET paramters are used to know the action that must be done. From f13c9f3ed0e0492ff938a0af0fa8270a95a9b404 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 26 Apr 2018 18:53:50 +0200 Subject: [PATCH 059/236] Fix phpdoc --- lib/Saml2/Auth.php | 24 ++++++++++++------------ lib/Saml2/AuthnRequest.php | 2 ++ lib/Saml2/Response.php | 2 +- lib/Saml2/Utils.php | 28 ++++++++++++++++++++-------- 4 files changed, 35 insertions(+), 21 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index b53d21b2..b547804d 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -129,7 +129,7 @@ class OneLogin_Saml2_Auth * (SAMLResponse, LogoutResponse). If the SAMLResponse was * encrypted, by default tries to return the decrypted XML * - * @var string + * @var string|\DomDocument|null */ private $_lastResponse; @@ -215,13 +215,13 @@ public function processResponse($requestId = null) /** * Process the SAML Logout Response / Logout Request sent by the IdP. * - * @param bool $keepLocalSession When false will destroy the local session, otherwise will keep it - * @param string|null $requestId The ID of the LogoutRequest sent by this SP to the IdP - * @param bool $retrieveParametersFromServer - * @param callable $cbDeleteSession - * @param bool $stay True if we want to stay (returns the url string) False to redirect + * @param bool $keepLocalSession When false will destroy the local session, otherwise will keep it + * @param string|null $requestId The ID of the LogoutRequest sent by this SP to the IdP + * @param bool $retrieveParametersFromServer True if we want to use parameters from $_SERVER to validate the signature + * @param callable $cbDeleteSession Callback to be executed to delete session + * @param bool $stay True if we want to stay (returns the url string) False to redirect * - * @return string|void + * @return string|null * * @throws OneLogin_Saml2_Error */ @@ -386,7 +386,7 @@ public function getSessionIndex() /** * Returns the SessionNotOnOrAfter * - * @return DateTime|null The SessionNotOnOrAfter of the assertion + * @return int|null The SessionNotOnOrAfter of the assertion */ public function getSessionExpiration() { @@ -454,10 +454,10 @@ public function getAttributeWithFriendlyName($friendlyName) * * @param string|null $returnTo The target URL the user should be returned to after login. * @param array $parameters Extra parameters to be added to the GET - * @param bool $forceAuthn When true the AuthNReuqest will set the ForceAuthn='true' - * @param bool $isPassive When true the AuthNReuqest will set the Ispassive='true' + * @param bool $forceAuthn When true the AuthNRequest will set the ForceAuthn='true' + * @param bool $isPassive When true the AuthNRequest will set the Ispassive='true' * @param bool $stay True if we want to stay (returns the url string) False to redirect - * @param bool $setNameIdPolicy When true the AuthNReuqest will set a nameIdPolicy element + * @param bool $setNameIdPolicy When true the AuthNRueqest will set a nameIdPolicy element * * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters */ @@ -560,7 +560,7 @@ public function getSSOurl() /** * Gets the SLO url. * - * @return string The url of the Single Logout Service + * @return string|null The url of the Single Logout Service */ public function getSLOurl() { diff --git a/lib/Saml2/AuthnRequest.php b/lib/Saml2/AuthnRequest.php index 5735a6f3..8418ee37 100644 --- a/lib/Saml2/AuthnRequest.php +++ b/lib/Saml2/AuthnRequest.php @@ -141,6 +141,8 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal * Returns deflated, base64 encoded, unsigned AuthnRequest. * * @param bool|null $deflate Whether or not we should 'gzdeflate' the request body before we return it. + * + * @return string */ public function getRequest($deflate = null) { diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 060ed72b..779d66a3 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -950,7 +950,7 @@ public function validateSignedElements($signedElements) /** * Extracts a node from the DOMDocument (Assertion). * - * @param string $assertionXpath Xpath Expresion + * @param string $assertionXpath Xpath Expression * * @return DOMNodeList The queried node * diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 7683b632..7852df4a 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -406,7 +406,7 @@ public static function setBaseURLPath($baseurlpath) } /** - * return string The baseurlpath to be used when constructing URLs + * @return string The baseurlpath to be used when constructing URLs */ public static function getBaseURLPath() { @@ -716,7 +716,7 @@ public static function parseSAML2Time($time) * duration to. Optional, default to the * current time. * - * @return int|null The new timestamp, after the duration is applied. + * @return int The new timestamp, after the duration is applied. * * @throws Exception */ @@ -799,8 +799,8 @@ public static function parseDuration($duration, $timestamp = null) /** * Compares 2 dates and returns the earliest. * - * @param string $cacheDuration The duration, as a string. - * @param string $validUntil The valid until date, as a string or as a timestamp + * @param string|null $cacheDuration The duration, as a string. + * @param string|int|null $validUntil The valid until date, as a string or as a timestamp * * @return int|null $expireTime The expiration time. */ @@ -830,9 +830,9 @@ public static function getExpireTime($cacheDuration = null, $validUntil = null) /** * Extracts nodes from the DOMDocument. * - * @param DOMDocument $dom The DOMDocument - * @param string $query Xpath Expresion - * @param DomElement $context Context Node (DomElement) + * @param DOMDocument $dom The DOMDocument + * @param string $query Xpath Expresion + * @param DomElement|null $context Context Node (DomElement) * * @return DOMNodeList The queried nodes */ @@ -953,7 +953,7 @@ public static function formatFingerPrint($fingerprint) * * @param string $value fingerprint * @param string $spnq SP Name Qualifier - * @param string $format SP Format + * @param string|null $format SP Format * @param string|null $cert IdP Public cert to encrypt the nameID * @param string|null $nq IdP Name Qualifier * @@ -1381,6 +1381,18 @@ public static function validateSign($xml, $cert = null, $fingerprint = null, $fi return $valid; } + /** + * Validates a binary signature + * + * @param string $messageType Type of SAML Message + * @param array $getData HTTP GET array + * @param array $idpData IdP setting data + * @param bool $retrieveParametersFromServer Indicates where to get the values in order to validate the Sign, from getData or from $_SERVER + * + * @return bool + * + * @throws Exception + */ public static function validateBinarySign($messageType, $getData, $idpData, $retrieveParametersFromServer = false) { if (!isset($getData['SigAlg'])) { From 1b2a413d32136fbee23fb7c8036123e04191ed37 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 2 May 2018 18:49:11 +0200 Subject: [PATCH 060/236] Fix #265. Support and parameters at getSPMetadata method --- lib/Saml2/Settings.php | 9 ++++--- tests/src/OneLogin/Saml2/SettingsTest.php | 29 +++++++++++++++++++++++ 2 files changed, 35 insertions(+), 3 deletions(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 5250b25c..0547ab23 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -803,14 +803,17 @@ public function shouldCompressResponses() * @param bool $alwaysPublishEncryptionCert When 'true', the returned metadata * will always include an 'encryption' KeyDescriptor. Otherwise, the 'encryption' * KeyDescriptor will only be included if $advancedSettings['security']['wantNameIdEncrypted'] - * or $advancedSettings['security']['wantAssertionsEncrypted'] are enabled. + * or $advancedSettings['security']['wantAssertionsEncrypted'] are enabled. + * @param DateTime|null $validUntil Metadata's valid time + * @param int|null $cacheDuration Duration of the cache in seconds + * * @return string SP metadata (xml) * @throws Exception * @throws OneLogin_Saml2_Error */ - public function getSPMetadata($alwaysPublishEncryptionCert = false) + public function getSPMetadata($alwaysPublishEncryptionCert = false, $validUntil = null, $cacheDuration = null) { - $metadata = OneLogin_Saml2_Metadata::builder($this->_sp, $this->_security['authnRequestsSigned'], $this->_security['wantAssertionsSigned'], null, null, $this->getContacts(), $this->getOrganization()); + $metadata = OneLogin_Saml2_Metadata::builder($this->_sp, $this->_security['authnRequestsSigned'], $this->_security['wantAssertionsSigned'], $validUntil, $cacheDuration, $this->getContacts(), $this->getOrganization()); $certNew = $this->getSPcertNew(); if (!empty($certNew)) { diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 142d579a..c60ff412 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -496,6 +496,35 @@ public function testGetSPMetadataWithX509CertNewDataProvider() ]; } + /** + * Tests the getSPMetadata method of the OneLogin_Saml2_Settings + * Case ValidUntil CacheDuration + * + * @covers OneLogin_Saml2_Settings::getSPMetadata + */ + public function testGetSPMetadataTiming() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $currentValidUntil = time() + OneLogin_Saml2_Metadata::TIME_VALID; + $currentValidUntilStr = gmdate('Y-m-d\TH:i:s\Z', $currentValidUntil); + $defaultCacheDuration = OneLogin_Saml2_Metadata::TIME_CACHED; + + $metadata = $settings->getSPMetadata(); + $this->assertContains('validUntil="'.$currentValidUntilStr.'"', $metadata); + $this->assertContains('cacheDuration="PT604800S"', $metadata); + + $newValidUntil = 2524668343; + $newValidUntilStr = gmdate('Y-m-d\TH:i:s\Z', $newValidUntil); + $newCacheDuration = 1209600; + $metadata2 = $settings->getSPMetadata(false, $newValidUntil, $newCacheDuration); + $this->assertContains('validUntil="'.$newValidUntilStr.'"', $metadata2); + $this->assertContains('cacheDuration="PT1209600S"', $metadata2); + } + /** * Tests the getSPMetadata method of the OneLogin_Saml2_Settings * Case signed metadata From 12948aaa44957f7a13a197908931aa57f4392deb Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 2 May 2018 18:52:31 +0200 Subject: [PATCH 061/236] Remove extra spaces --- tests/src/OneLogin/Saml2/SettingsTest.php | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index c60ff412..913cace4 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -446,49 +446,49 @@ public function testGetSPMetadataWithX509CertNewDataProvider() { return [ 'settings do not require encryption' => [ - 'alwaysIncludeEncryption' => false, + 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => false, ], 'wantNameIdEncrypted setting enabled' => [ - 'alwaysIncludeEncryption' => false, + 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => true, ], 'wantAssertionsEncrypted setting enabled' => [ - 'alwaysIncludeEncryption' => false, + 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, ], 'both settings enabled'=> [ - 'alwaysIncludeEncryption' => false, + 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, ], 'metadata requested with encryption' => [ - 'alwaysIncludeEncryption' => true, + 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => true, ], - 'metadata requested with encryption and wantNameIdEncrypted setting enabled' => [ - 'alwaysIncludeEncryption' => true, + 'metadata requested with encryption and wantNameIdEncrypted setting enabled' => [ + 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => true, ], 'metadata requested with encryption and wantAssertionsEncrypted setting enabled' => [ - 'alwaysIncludeEncryption' => true, + 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, ], 'metadata requested with encryption and both settings enabled' => [ - 'alwaysIncludeEncryption' => true, + 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, From 428ffa877577114528d8346320d2031375bfba2e Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 15 May 2018 14:10:49 +0200 Subject: [PATCH 062/236] Fix #283.New method of importing a decrypted assertion into the XML document to replace the EncryptedAssertion. Fix signature issues on Signed Encrypted Assertions with default namespace --- lib/Saml2/Response.php | 41 +++++++++++++++++++++-------------------- lib/Saml2/Utils.php | 42 ++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 63 insertions(+), 20 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 779d66a3..0b39f752 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -720,7 +720,7 @@ public function getAttributesWithFriendlyName() return $this->_getAttributesByKeyName('FriendlyName'); } - private function _getAttributesByKeyName($keyName="Name") + private function _getAttributesByKeyName($keyName = "Name") { $attributes = array(); @@ -1028,14 +1028,12 @@ private function _query($query) protected function _decryptAssertion($dom) { $pem = $this->_settings->getSPkey(); - if (empty($pem)) { throw new OneLogin_Saml2_Error( "No private key available, check settings", OneLogin_Saml2_Error::PRIVATE_KEY_NOT_FOUND ); } - $objenc = new XMLSecEnc(); $encData = $objenc->locateEncryptedData($dom); if (!$encData) { @@ -1044,7 +1042,6 @@ protected function _decryptAssertion($dom) OneLogin_Saml2_ValidationError::MISSING_ENCRYPTED_ELEMENT ); } - $objenc->setNode($encData); $objenc->type = $encData->getAttribute("Type"); if (!$objKey = $objenc->locateKey()) { @@ -1053,7 +1050,6 @@ protected function _decryptAssertion($dom) OneLogin_Saml2_ValidationError::KEY_ALGORITHM_ERROR ); } - $key = null; if ($objKeyInfo = $objenc->locateKeyInfo($objKey)) { if ($objKeyInfo->isEncrypted) { @@ -1069,22 +1065,26 @@ protected function _decryptAssertion($dom) if (empty($objKey->key)) { $objKey->loadKey($key); } - - $decrypted = $objenc->decryptNode($objKey, true); - - if ($decrypted instanceof DOMDocument) { + $decryptedXML = $objenc->decryptNode($objKey, false); + $decrypted = new DOMDocument(); + $check = OneLogin_Saml2_Utils::loadXML($decrypted, $decryptedXML); + if ($check === false) { + throw new Exception('Error: string from decrypted assertion could not be loaded into a XML document'); + } + if ($encData->parentNode instanceof DOMDocument) { return $decrypted; } else { - $encryptedAssertion = $decrypted->parentNode; + $decrypted = $decrypted->documentElement; + $encryptedAssertion = $encData->parentNode; $container = $encryptedAssertion->parentNode; - # Fix possible issue with saml namespace - if (!$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml') && - !$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml2') && - !$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns') && - !$container->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml') && - !$container->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml2') - ) { + // Fix possible issue with saml namespace + if (!$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml') + && !$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml2') + && !$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns') + && !$container->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml') + && !$container->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml2') + ) { if (strpos($encryptedAssertion->tagName, 'saml2:') !== false) { $ns = 'xmlns:saml2'; } else if (strpos($encryptedAssertion->tagName, 'saml:') !== false) { @@ -1092,13 +1092,14 @@ protected function _decryptAssertion($dom) } else { $ns = 'xmlns'; } - $decrypted->setAttributeNS('http://www.w3.org/2000/xmlns/', $ns, OneLogin_Saml2_Constants::NS_SAML); } - $container->replaceChild($decrypted, $encryptedAssertion); + OneLogin_Saml2_Utils::treeCopyReplace($encryptedAssertion, $decrypted); - return $decrypted->ownerDocument; + // Rebuild the DOM will fix issues with namespaces as well + $dom = new DOMDocument(); + return OneLogin_Saml2_Utils::loadXML($dom, $container->ownerDocument->saveXML()); } } diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 7852df4a..955a4ddb 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -145,6 +145,48 @@ public static function validateXML($xml, $schema, $debug = false) return $dom; } + /** + * Import a node tree into a target document + * Copy it before a reference node as a sibling + * and at the end of the copy remove + * the reference node in the target document + * As it were 'replacing' it + * Leaving nested default namespaces alone + * (Standard importNode with deep copy + * mangles nested default namespaces) + * + * The reference node must not be a DomDocument + * It CAN be the top element of a document + * Returns the copied node in the target document + * + * @param DomNode $targetNode + * @param DomNode $sourceNode + * @param bool $recurse + * @return DOMNode + * @throws Exception + */ + public static function treeCopyReplace(DomNode $targetNode, DomNode $sourceNode, $recurse = false) + { + if ($targetNode->parentNode === null) { + throw new Exception('Illegal argument targetNode. It has no parentNode.'); + } + $clonedNode = $targetNode->ownerDocument->importNode($sourceNode, false); + if ($recurse) { + $resultNode = $targetNode->appendChild($clonedNode); + } else { + $resultNode = $targetNode->parentNode->insertBefore($clonedNode, $targetNode); + } + if ($sourceNode->childNodes !== null) { + foreach ($sourceNode->childNodes as $child) { + self::treeCopyReplace($resultNode, $child, true); + } + } + if (!$recurse) { + $targetNode->parentNode->removeChild($targetNode); + } + return $resultNode; + } + /** * Returns a x509 cert (adding header & footer if required). * From ab7fff7cd15f225da17bd8b3e4e99b66685f0be1 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 15 May 2018 14:15:28 +0200 Subject: [PATCH 063/236] Add parameter to the decryptElement method to make optional the formatting --- lib/Saml2/Utils.php | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 955a4ddb..f173f8a0 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -1100,12 +1100,13 @@ public static function getStatus($dom) * * @param DOMElement $encryptedData The encrypted data. * @param XMLSecurityKey $inputKey The decryption key. + * @param bool $formatOutput Format or not the output. * * @return DOMElement The decrypted element. * * @throws Exception */ - public static function decryptElement(DOMElement $encryptedData, XMLSecurityKey $inputKey) + public static function decryptElement(DOMElement $encryptedData, XMLSecurityKey $inputKey, $formatOutput = true) { $enc = new XMLSecEnc(); @@ -1190,8 +1191,10 @@ public static function decryptElement(DOMElement $encryptedData, XMLSecurityKey $xml = ''.$decrypted.''; $newDoc = new DOMDocument(); - $newDoc->preserveWhiteSpace = false; - $newDoc->formatOutput = true; + if ($formatOutput) { + $newDoc->preserveWhiteSpace = false; + $newDoc->formatOutput = true; + } $newDoc = self::loadXML($newDoc, $xml); if (!$newDoc) { throw new OneLogin_Saml2_ValidationError( @@ -1211,7 +1214,7 @@ public static function decryptElement(DOMElement $encryptedData, XMLSecurityKey return $decryptedElement; } - /** + /** * Converts a XMLSecurityKey to the correct algorithm. * * @param XMLSecurityKey $key The key. From cfb7254d81ba0acdadee949a62259f463ed38c22 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 7 Jun 2018 19:35:51 +0200 Subject: [PATCH 064/236] Merge --- lib/Saml2/Auth.php | 37 ++++++++------ lib/Saml2/IdPMetadataParser.php | 3 +- lib/Saml2/LogoutRequest.php | 60 ++++++++++++---------- lib/Saml2/LogoutResponse.php | 29 +++++------ lib/Saml2/Metadata.php | 21 +++++--- lib/Saml2/Response.php | 90 +++++++++++++++++++++------------ lib/Saml2/Settings.php | 19 ++++--- lib/Saml2/Utils.php | 55 ++++++++++++-------- 8 files changed, 186 insertions(+), 128 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index b547804d..429d965c 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -137,6 +137,8 @@ class OneLogin_Saml2_Auth * Initializes the SP SAML instance. * * @param array|object|null $oldSettings Setting data (You can provide a OneLogin_Saml_Settings, the settings object of the Saml folder implementation) + * + * @throws OneLogin_Saml2_Error */ public function __construct($oldSettings = null) { @@ -157,11 +159,12 @@ public function getSettings() * Set the strict mode active/disable * * @param bool $value Strict parameter + * * @throws OneLogin_Saml2_Error */ public function setStrict($value) { - if (! (is_bool($value))) { + if (!is_bool($value)) { throw new OneLogin_Saml2_Error( 'Invalid value passed to setStrict()', OneLogin_Saml2_Error::SETTINGS_INVALID_SYNTAX @@ -177,12 +180,13 @@ public function setStrict($value) * @param string|null $requestId The ID of the AuthNRequest sent by this SP to the IdP * * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError */ public function processResponse($requestId = null) { $this->_errors = array(); $this->_errorReason = null; - if (isset($_POST) && isset($_POST['SAMLResponse'])) { + if (isset($_POST['SAMLResponse'])) { // AuthnResponse -- HTTP_POST Binding $response = new OneLogin_Saml2_Response($this->_settings, $_POST['SAMLResponse']); $this->_lastResponse = $response->getXMLDocument(); @@ -229,7 +233,7 @@ public function processSLO($keepLocalSession = false, $requestId = null, $retrie { $this->_errors = array(); $this->_errorReason = null; - if (isset($_GET) && isset($_GET['SAMLResponse'])) { + if (isset($_GET['SAMLResponse'])) { $logoutResponse = new OneLogin_Saml2_LogoutResponse($this->_settings, $_GET['SAMLResponse']); $this->_lastResponse = $logoutResponse->getXML(); if (!$logoutResponse->isValid($requestId, $retrieveParametersFromServer)) { @@ -247,7 +251,7 @@ public function processSLO($keepLocalSession = false, $requestId = null, $retrie } } } - } else if (isset($_GET) && isset($_GET['SAMLRequest'])) { + } else if (isset($_GET['SAMLRequest'])) { $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, $_GET['SAMLRequest']); $this->_lastRequest = $logoutRequest->getXML(); if (!$logoutRequest->isValid($retrieveParametersFromServer)) { @@ -296,10 +300,13 @@ public function processSLO($keepLocalSession = false, $requestId = null, $retrie * Redirects the user to the url past by parameter * or to the url that we defined in our SSO Request. * - * @param string $url The target URL to redirect the user. - * @param array $parameters Extra parameters to be passed as part of the url - * @param bool $stay True if we want to stay (returns the url string) False to redirect + * @param string $url The target URL to redirect the user. + * @param array $parameters Extra parameters to be passed as part of the url + * @param bool $stay True if we want to stay (returns the url string) False to redirect + * * @return string|null + * + * @throws OneLogin_Saml2_Error */ public function redirectTo($url = '', $parameters = array(), $stay = false) { @@ -452,14 +459,16 @@ public function getAttributeWithFriendlyName($friendlyName) /** * Initiates the SSO process. * - * @param string|null $returnTo The target URL the user should be returned to after login. - * @param array $parameters Extra parameters to be added to the GET - * @param bool $forceAuthn When true the AuthNRequest will set the ForceAuthn='true' - * @param bool $isPassive When true the AuthNRequest will set the Ispassive='true' - * @param bool $stay True if we want to stay (returns the url string) False to redirect - * @param bool $setNameIdPolicy When true the AuthNRueqest will set a nameIdPolicy element + * @param string|null $returnTo The target URL the user should be returned to after login. + * @param array $parameters Extra parameters to be added to the GET + * @param bool $forceAuthn When true the AuthNRequest will set the ForceAuthn='true' + * @param bool $isPassive When true the AuthNRequest will set the Ispassive='true' + * @param bool $stay True if we want to stay (returns the url string) False to redirect + * @param bool $setNameIdPolicy When true the AuthNRueqest will set a nameIdPolicy element * * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters + * + * @throws OneLogin_Saml2_Error */ public function login($returnTo = null, $parameters = array(), $forceAuthn = false, $isPassive = false, $stay = false, $setNameIdPolicy = true) { @@ -591,7 +600,6 @@ public function getLastRequestID() * * @return string A base64 encoded signature * - * @throws Exception * @throws OneLogin_Saml2_Error */ public function buildRequestSignature($samlRequest, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA1) @@ -634,7 +642,6 @@ public function buildRequestSignature($samlRequest, $relayState, $signAlgorithm * * @return string A base64 encoded signature * - * @throws Exception * @throws OneLogin_Saml2_Error */ public function buildResponseSignature($samlResponse, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA1) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index 0cf17997..5ad795c4 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -85,7 +85,8 @@ public static function parseFileXML($filepath, $entityId = null, $desiredNameIdF * @param string $desiredSLOBinding Parse specific binding SLO endpoint. * * @return array metadata info in php-saml settings format - * @throws \Exception + * + * @throws Exception */ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = null, $desiredSSOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, $desiredSLOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) { diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index 7fa6e52a..595c1ca1 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -33,12 +33,14 @@ class OneLogin_Saml2_LogoutRequest /** * Constructs the Logout Request object. * - * @param OneLogin_Saml2_Settings $settings Settings - * @param string|null $request A UUEncoded Logout Request. - * @param string|null $nameId The NameID that will be set in the LogoutRequest. - * @param string|null $sessionIndex The SessionIndex (taken from the SAML Response in the SSO process). - * @param string|null $nameIdFormat The NameID Format will be set in the LogoutRequest. - * @param string|null $nameIdNameQualifier The NameID NameQualifier will be set in the LogoutRequest. + * @param OneLogin_Saml2_Settings $settings Settings + * @param string|null $request A UUEncoded Logout Request. + * @param string|null $nameId The NameID that will be set in the LogoutRequest. + * @param string|null $sessionIndex The SessionIndex (taken from the SAML Response in the SSO process). + * @param string|null $nameIdFormat The NameID Format will be set in the LogoutRequest. + * @param string|null $nameIdNameQualifier The NameID NameQualifier will be set in the LogoutRequest. + * + * @throws OneLogin_Saml2_Error */ public function __construct(OneLogin_Saml2_Settings $settings, $request = null, $nameId = null, $sessionIndex = null, $nameIdFormat = null, $nameIdNameQualifier = null) { @@ -177,11 +179,12 @@ public static function getID($request) * Gets the NameID Data of the the Logout Request. * * @param string|DOMDocument $request Logout Request Message - * @param string|null $key The SP key + * @param string|null $key The SP key * * @return array Name ID Data (Value, Format, NameQualifier, SPNameQualifier) * - * @throws Exception + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError */ public static function getNameIdData($request, $key = null) { @@ -239,9 +242,12 @@ public static function getNameIdData($request, $key = null) * Gets the NameID of the Logout Request. * * @param string|DOMDocument $request Logout Request Message - * @param string|null $key The SP key + * @param string|null $key The SP key * * @return string Name ID Value + * + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError */ public static function getNameId($request, $key = null) { @@ -255,6 +261,7 @@ public static function getNameId($request, $key = null) * @param string|DOMDocument $request Logout Request Message * * @return string|null $issuer The Issuer + * @throws Exception */ public static function getIssuer($request) { @@ -282,6 +289,8 @@ public static function getIssuer($request) * @param string|DOMDocument $request Logout Request Message * * @return array The SessionIndex value + * + * @throws Exception */ public static function getSessionIndexes($request) { @@ -303,6 +312,8 @@ public static function getSessionIndexes($request) /** * Checks if the Logout Request recieved is valid. * + * @param bool $retrieveParametersFromServer + * * @return bool If the Logout Request is or not valid */ public function isValid($retrieveParametersFromServer = false) @@ -344,20 +355,18 @@ public function isValid($retrieveParametersFromServer = false) // Check destination if ($dom->documentElement->hasAttribute('Destination')) { $destination = $dom->documentElement->getAttribute('Destination'); - if (!empty($destination)) { - if (strpos($destination, $currentURL) === false) { - throw new OneLogin_Saml2_ValidationError( - "The LogoutRequest was received at $currentURL instead of $destination", - OneLogin_Saml2_ValidationError::WRONG_DESTINATION - ); - } + if (!empty($destination) && strpos($destination, $currentURL) === false) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutRequest was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); } } - $nameId = $this->getNameId($dom, $this->_settings->getSPkey()); + $nameId = static::getNameId($dom, $this->_settings->getSPkey()); // Check issuer - $issuer = $this->getIssuer($dom); + $issuer = static::getIssuer($dom); if (!empty($issuer) && $issuer != $idPEntityId) { throw new OneLogin_Saml2_ValidationError( "Invalid issuer in the Logout Request", @@ -365,13 +374,11 @@ public function isValid($retrieveParametersFromServer = false) ); } - if ($security['wantMessagesSigned']) { - if (!isset($_GET['Signature'])) { - throw new OneLogin_Saml2_ValidationError( - "The Message of the Logout Request is not signed and the SP require it", - OneLogin_Saml2_ValidationError::NO_SIGNED_MESSAGE - ); - } + if ($security['wantMessagesSigned'] && !isset($_GET['Signature'])) { + throw new OneLogin_Saml2_ValidationError( + "The Message of the Logout Request is not signed and the SP require it", + OneLogin_Saml2_ValidationError::NO_SIGNED_MESSAGE + ); } } @@ -396,7 +403,8 @@ public function isValid($retrieveParametersFromServer = false) } } - /* After execute a validation process, if fails this method returns the cause + /** + * After execute a validation process, if fails this method returns the cause * * @return string Cause */ diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index be5caf3f..20f582a1 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -115,8 +115,6 @@ public function getStatus() * @param bool $retrieveParametersFromServer * * @return bool Returns if the SAML LogoutResponse is or not valid - * - * @throws Exception */ public function isValid($requestId = null, $retrieveParametersFromServer = false) { @@ -163,24 +161,20 @@ public function isValid($requestId = null, $retrieveParametersFromServer = false // Check destination if ($this->document->documentElement->hasAttribute('Destination')) { $destination = $this->document->documentElement->getAttribute('Destination'); - if (!empty($destination)) { - if (strpos($destination, $currentURL) === false) { - throw new OneLogin_Saml2_ValidationError( - "The LogoutResponse was received at $currentURL instead of $destination", - OneLogin_Saml2_ValidationError::WRONG_DESTINATION - ); - } - } - } - - if ($security['wantMessagesSigned']) { - if (!isset($_GET['Signature'])) { + if (!empty($destination) && strpos($destination, $currentURL) === false) { throw new OneLogin_Saml2_ValidationError( - "The Message of the Logout Response is not signed and the SP requires it", - OneLogin_Saml2_ValidationError::NO_SIGNED_MESSAGE + "The LogoutResponse was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION ); } } + + if ($security['wantMessagesSigned'] && !isset($_GET['Signature'])) { + throw new OneLogin_Saml2_ValidationError( + "The Message of the Logout Response is not signed and the SP requires it", + OneLogin_Saml2_ValidationError::NO_SIGNED_MESSAGE + ); + } } if (isset($_GET['Signature'])) { @@ -270,7 +264,8 @@ public function getResponse($deflate = null) return base64_encode($subject); } - /* After execute a validation process, if fails this method returns the cause. + /** + * After execute a validation process, if fails this method returns the cause. * * @return string Cause */ diff --git a/lib/Saml2/Metadata.php b/lib/Saml2/Metadata.php index 9e2049db..0f05a1a1 100644 --- a/lib/Saml2/Metadata.php +++ b/lib/Saml2/Metadata.php @@ -21,6 +21,7 @@ class OneLogin_Saml2_Metadata * @param array $contacts Contacts info * @param array $organization Organization ingo * @param array $attributes + * * @return string SAML Metadata XML */ public static function builder($sp, $authnsign = false, $wsign = false, $validUntil = null, $cacheDuration = null, $contacts = array(), $organization = array(), $attributes = array()) @@ -173,13 +174,15 @@ public static function builder($sp, $authnsign = false, $wsign = false, $validUn /** * Signs the metadata with the key/cert provided * - * @param string $metadata SAML Metadata XML - * @param string $key x509 key - * @param string $cert x509 cert - * @param string $signAlgorithm Signature algorithm method - * @param string $digestAlgorithm Digest algorithm method + * @param string $metadata SAML Metadata XML + * @param string $key x509 key + * @param string $cert x509 cert + * @param string $signAlgorithm Signature algorithm method + * @param string $digestAlgorithm Digest algorithm method * * @return string Signed Metadata + * + * @throws Exception */ public static function signMetadata($metadata, $key, $cert, $signAlgorithm = XMLSecurityKey::RSA_SHA1, $digestAlgorithm = XMLSecurityDSig::SHA1) { @@ -190,11 +193,13 @@ public static function signMetadata($metadata, $key, $cert, $signAlgorithm = XML * Adds the x509 descriptors (sign/encriptation) to the metadata * The same cert will be used for sign/encrypt * - * @param string $metadata SAML Metadata XML - * @param string $cert x509 cert - * @param bool $wantsEncrypted Whether to include the KeyDescriptor for encryption + * @param string $metadata SAML Metadata XML + * @param string $cert x509 cert + * @param bool $wantsEncrypted Whether to include the KeyDescriptor for encryption * * @return string Metadata with KeyDescriptors + * + * @throws Exception */ public static function addX509KeyDescriptors($metadata, $cert, $wantsEncrypted = true) { diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 0b39f752..cc23a6c4 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -55,9 +55,10 @@ class OneLogin_Saml2_Response * Constructs the SAML Response object. * * @param OneLogin_Saml2_Settings $settings Settings. - * @param string $response A UUEncoded SAML response from the IdP. + * @param string $response A UUEncoded SAML response from the IdP. * - * @throws Exception + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError */ public function __construct(OneLogin_Saml2_Settings $settings, $response) { @@ -94,8 +95,6 @@ public function __construct(OneLogin_Saml2_Settings $settings, $response) * @param string|null $requestId The ID of the AuthNRequest sent by this SP to the IdP * * @return bool Validate the document - * - * @throws Exception */ public function isValid($requestId = null) { @@ -172,13 +171,11 @@ public function isValid($requestId = null) } // Check if the InResponseTo of the Response matchs the ID of the AuthNRequest (requestId) if provided - if (isset($requestId) && isset($responseInResponseTo)) { - if ($requestId != $responseInResponseTo) { - throw new OneLogin_Saml2_ValidationError( - "The InResponseTo of the Response: $responseInResponseTo, does not match the ID of the AuthNRequest sent by the SP: $requestId", - OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO - ); - } + if (isset($requestId) && isset($responseInResponseTo) && $requestId != $responseInResponseTo) { + throw new OneLogin_Saml2_ValidationError( + "The InResponseTo of the Response: $responseInResponseTo, does not match the ID of the AuthNRequest sent by the SP: $requestId", + OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO + ); } if (!$this->encrypted && $security['wantAssertionsEncrypted']) { @@ -422,6 +419,8 @@ public function getId() /** * @return string|null the ID of the assertion in the Response + * + * @throws InvalidArgumentException */ public function getAssertionId() { @@ -430,10 +429,8 @@ public function getAssertionId() } $assertionNodes = $this->_queryAssertion(""); $id = null; - if ($assertionNodes->length == 1) { - if ($assertionNodes->item(0)->hasAttribute('ID')) { - $id = $assertionNodes->item(0)->getAttribute('ID'); - } + if ($assertionNodes->length == 1 && $assertionNodes->item(0)->hasAttribute('ID')) { + $id = $assertionNodes->item(0)->getAttribute('ID'); } return $id; } @@ -450,7 +447,7 @@ public function getAssertionNotOnOrAfter() /** * Checks if the Status is success * - * @throws $statusExceptionMsg If status is not success + * @throws OneLogin_Saml2_ValidationError If status is not success */ public function checkStatus() { @@ -525,6 +522,7 @@ public function getAudiences() * Gets the Issuers (from Response and Assertion). * * @return array @issuers The issuers of the assertion/response + * * @throws OneLogin_Saml2_ValidationError */ public function getIssuers() @@ -560,6 +558,8 @@ public function getIssuers() * Gets the NameID Data provided by the SAML response from the IdP. * * @return array Name ID Data (Value, Format, NameQualifier, SPNameQualifier) + * + * @throws OneLogin_Saml2_ValidationError */ public function getNameIdData() { @@ -624,6 +624,8 @@ public function getNameIdData() * Gets the NameID provided by the SAML response from the IdP. * * @return string|null Name ID Value + * + * @throws OneLogin_Saml2_ValidationError */ public function getNameId() { @@ -639,6 +641,8 @@ public function getNameId() * Gets the NameID Format provided by the SAML response from the IdP. * * @return string|null Name ID Format + * + * @throws OneLogin_Saml2_ValidationError */ public function getNameIdFormat() { @@ -654,6 +658,8 @@ public function getNameIdFormat() * Gets the NameID NameQualifier provided by the SAML response from the IdP. * * @return string|null Name ID NameQualifier + * + * @throws OneLogin_Saml2_ValidationError */ public function getNameIdNameQualifier() { @@ -670,6 +676,8 @@ public function getNameIdNameQualifier() * Could be used to set the local session expiration * * @return int|null The SessionNotOnOrAfter value + * + * @throws Exception */ public function getSessionNotOnOrAfter() { @@ -704,6 +712,8 @@ public function getSessionIndex() * Gets the Attributes from the AttributeStatement element. * * @return array The attributes of the SAML Assertion + * + * @throws OneLogin_Saml2_ValidationError */ public function getAttributes() { @@ -714,13 +724,22 @@ public function getAttributes() * Gets the Attributes from the AttributeStatement element using their FriendlyName. * * @return array The attributes of the SAML Assertion + * + * @throws OneLogin_Saml2_ValidationError */ public function getAttributesWithFriendlyName() { return $this->_getAttributesByKeyName('FriendlyName'); } - private function _getAttributesByKeyName($keyName = "Name") + /** + * @param string $keyName + * + * @return array + * + * @throws OneLogin_Saml2_ValidationError + */ + private function _getAttributesByKeyName($keyName="Name") { $attributes = array(); @@ -782,6 +801,8 @@ public function validateNumAssertions() * - Check that IDs and reference URI are unique and consistent. * * @return array Signed element tags + * + * @throws OneLogin_Saml2_ValidationError */ public function processSignedElements() { @@ -855,14 +876,12 @@ public function processSignedElements() $signedElements[] = $signedElement; } - if (!empty($signedElements)) { - // Check SignedElements - if (!$this->validateSignedElements($signedElements)) { - throw new OneLogin_Saml2_ValidationError( - 'Found an unexpected Signature Element. SAML Response rejected', - OneLogin_Saml2_ValidationError::UNEXPECTED_SIGNED_ELEMENTS - ); - } + // Check SignedElements + if (!empty($signedElements) && !$this->validateSignedElements($signedElements)) { + throw new OneLogin_Saml2_ValidationError( + 'Found an unexpected Signature Element. SAML Response rejected', + OneLogin_Saml2_ValidationError::UNEXPECTED_SIGNED_ELEMENTS + ); } return $signedElements; } @@ -871,6 +890,9 @@ public function processSignedElements() * Verifies that the document is still valid according Conditions Element. * * @return bool + * + * @throws Exception + * @throws OneLogin_Saml2_ValidationError */ public function validateTimestamps() { @@ -884,13 +906,13 @@ public function validateTimestamps() for ($i = 0; $i < $timestampNodes->length; $i++) { $nbAttribute = $timestampNodes->item($i)->attributes->getNamedItem("NotBefore"); $naAttribute = $timestampNodes->item($i)->attributes->getNamedItem("NotOnOrAfter"); - if ($nbAttribute && OneLogin_SAML2_Utils::parseSAML2Time($nbAttribute->textContent) > time() + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT) { + if ($nbAttribute && OneLogin_Saml2_Utils::parseSAML2Time($nbAttribute->textContent) > time() + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT) { throw new OneLogin_Saml2_ValidationError( 'Could not validate timestamp: not yet valid. Check system clock.', OneLogin_Saml2_ValidationError::ASSERTION_TOO_EARLY ); } - if ($naAttribute && OneLogin_SAML2_Utils::parseSAML2Time($naAttribute->textContent) + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT <= time()) { + if ($naAttribute && OneLogin_Saml2_Utils::parseSAML2Time($naAttribute->textContent) + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT <= time()) { throw new OneLogin_Saml2_ValidationError( 'Could not validate timestamp: expired. Check system clock.', OneLogin_Saml2_ValidationError::ASSERTION_EXPIRED @@ -903,7 +925,11 @@ public function validateTimestamps() /** * Verifies that the document has the expected signed nodes. * + * @param $signedElements + * * @return bool + * + * @throws OneLogin_Saml2_ValidationError */ public function validateSignedElements($signedElements) { @@ -953,8 +979,6 @@ public function validateSignedElements($signedElements) * @param string $assertionXpath Xpath Expression * * @return DOMNodeList The queried node - * - * @throws Exception */ protected function _queryAssertion($assertionXpath) { @@ -1023,7 +1047,8 @@ private function _query($query) * * @return DOMDocument Decrypted Assertion * - * @throws Exception + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError */ protected function _decryptAssertion($dom) { @@ -1103,7 +1128,8 @@ protected function _decryptAssertion($dom) } } - /* After execute a validation process, if fails this method returns the cause + /** + * After execute a validation process, if fails this method returns the cause * * @return string Cause */ @@ -1112,7 +1138,7 @@ public function getError() return $this->_error; } - /* + /** * Returns the SAML Response document (If contains an encrypted assertion, decrypts it) * * @return DomDocument SAML Response diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 0547ab23..5d0f7eda 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -288,7 +288,9 @@ private function _loadSettingsFromArray($settings) * Loads settings info from the settings file * * @return bool True if the settings info is valid + * * @throws OneLogin_Saml2_Error + * * @suppress PhanUndeclaredVariable */ private function _loadSettingsFromFile() @@ -598,12 +600,9 @@ public function checkSPSettings($settings) $errors[] = 'sp_sls_url_invalid'; } - if (isset($security['signMetadata']) && is_array($security['signMetadata'])) { - if (!isset($security['signMetadata']['keyFileName']) - || !isset($security['signMetadata']['certFileName']) - ) { - $errors[] = 'sp_signMetadata_invalid'; - } + if (isset($security['signMetadata']) && is_array($security['signMetadata']) && + (!isset($security['signMetadata']['keyFileName']) || !isset($security['signMetadata']['certFileName']))) { + $errors[] = 'sp_signMetadata_invalid'; } if (((isset($security['authnRequestsSigned']) && $security['authnRequestsSigned'] == true) @@ -808,6 +807,7 @@ public function shouldCompressResponses() * @param int|null $cacheDuration Duration of the cache in seconds * * @return string SP metadata (xml) + * * @throws Exception * @throws OneLogin_Saml2_Error */ @@ -900,6 +900,8 @@ public function getSPMetadata($alwaysPublishEncryptionCert = false, $validUntil * @param string $xml Metadata's XML that will be validate * * @return Array The list of found errors + * + * @throws Exception */ public function validateMetadata($xml) { @@ -1009,11 +1011,12 @@ public function getErrors() * Activates or deactivates the strict mode. * * @param bool $value Strict parameter + * * @throws Exception */ public function setStrict($value) { - if (! (is_bool($value))) { + if (!is_bool($value)) { throw new Exception('Invalid value passed to setStrict()'); } @@ -1042,6 +1045,8 @@ public function isDebugActive() /** * Set a baseurl value. + * + * @param $baseurl */ public function setBaseURL($baseurl) { diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index f173f8a0..d38e1247 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -71,9 +71,9 @@ public static function t($msg, $args = array()) * @param DOMDocument $dom The document where load the xml. * @param string $xml The XML string to be loaded. * - * @throws Exception - * * @return DOMDocument|false $dom The result of load the XML at the DomDocument + * + * @throws Exception */ public static function loadXML($dom, $xml) { @@ -100,11 +100,13 @@ public static function loadXML($dom, $xml) * * It will parse the string into a DOM document and validate this document against the schema. * - * @param string|DOMDocument $xml The XML string or document which should be validated. - * @param string $schema The schema filename which should be used. - * @param bool $debug To disable/enable the debug mode + * @param string|DOMDocument $xml The XML string or document which should be validated. + * @param string $schema The schema filename which should be used. + * @param bool $debug To disable/enable the debug mode * * @return string|DOMDocument $dom string that explains the problem or the DOMDocument + * + * @throws Exception */ public static function validateXML($xml, $schema, $debug = false) { @@ -629,10 +631,8 @@ public static function getSelfURL() $requestURI = ''; if (!empty($_SERVER['REQUEST_URI'])) { $requestURI = $_SERVER['REQUEST_URI']; - if ($requestURI[0] !== '/') { - if (preg_match('#^https?://[^/]*(/.*)#i', $requestURI, $matches)) { - $requestURI = $matches[1]; - } + if ($requestURI[0] !== '/' && preg_match('#^https?://[^/]*(/.*)#i', $requestURI, $matches)) { + $requestURI = $matches[1]; } } @@ -647,6 +647,8 @@ public static function getSelfURL() /** * Returns the part of the URL with the BaseURLPath. * + * @param $info + * * @return string */ protected static function buildWithBaseURLPath($info) @@ -806,8 +808,8 @@ public static function parseDuration($duration, $timestamp = null) * gmtime function. Instead we use the gmdate function, and split the result. */ $yearmonth = explode(':', gmdate('Y:n', $timestamp)); - $year = (int)($yearmonth[0]); - $month = (int)($yearmonth[1]); + $year = (int)$yearmonth[0]; + $month = (int)$yearmonth[1]; /* Remove the year and month from the timestamp. */ $timestamp -= gmmktime(0, 0, 0, $month, 1, $year); @@ -841,10 +843,12 @@ public static function parseDuration($duration, $timestamp = null) /** * Compares 2 dates and returns the earliest. * - * @param string|null $cacheDuration The duration, as a string. - * @param string|int|null $validUntil The valid until date, as a string or as a timestamp + * @param string|null $cacheDuration The duration, as a string. + * @param string|int|null $validUntil The valid until date, as a string or as a timestamp * * @return int|null $expireTime The expiration time. + * + * @throws Exception */ public static function getExpireTime($cacheDuration = null, $validUntil = null) { @@ -993,13 +997,15 @@ public static function formatFingerPrint($fingerprint) /** * Generates a nameID. * - * @param string $value fingerprint - * @param string $spnq SP Name Qualifier + * @param string $value fingerprint + * @param string $spnq SP Name Qualifier * @param string|null $format SP Format - * @param string|null $cert IdP Public cert to encrypt the nameID - * @param string|null $nq IdP Name Qualifier + * @param string|null $cert IdP Public cert to encrypt the nameID + * @param string|null $nq IdP Name Qualifier * * @return string $nameIDElement DOMElement | XMLSec nameID + * + * @throws Exception */ public static function generateNameId($value, $spnq, $format = null, $cert = null, $nq = null) { @@ -1056,7 +1062,7 @@ public static function generateNameId($value, $spnq, $format = null, $cert = nul * * @return array $status The Status, an array with the code and a message. * - * @throws Exception + * @throws OneLogin_Saml2_ValidationError */ public static function getStatus($dom) { @@ -1104,7 +1110,7 @@ public static function getStatus($dom) * * @return DOMElement The decrypted element. * - * @throws Exception + * @throws OneLogin_Saml2_ValidationError */ public static function decryptElement(DOMElement $encryptedData, XMLSecurityKey $inputKey, $formatOutput = true) { @@ -1173,7 +1179,7 @@ public static function decryptElement(DOMElement $encryptedData, XMLSecurityKey $key = str_pad($key, $keySize); } } - $symmetricKey->loadkey($key); + $symmetricKey->loadKey($key); } else { $symKeyAlgo = $symmetricKey->getAlgorithm(); if ($inputKeyAlgo !== $symKeyAlgo) { @@ -1235,7 +1241,7 @@ public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public' } if (!OneLogin_Saml2_Utils::isSupportedSigningAlgorithm($algorithm)) { - throw new \Exception('Unsupported signing algorithm.'); + throw new Exception('Unsupported signing algorithm.'); } $keyInfo = openssl_pkey_get_details($key->key); @@ -1250,6 +1256,11 @@ public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public' return $newKey; } + /** + * @param $algorithm + * + * @return bool + */ public static function isSupportedSigningAlgorithm($algorithm) { return in_array( @@ -1376,7 +1387,7 @@ public static function validateSign($xml, $cert = null, $fingerprint = null, $fi } if (!OneLogin_Saml2_Utils::isSupportedSigningAlgorithm($objKey->type)) { - throw new \Exception('Unsupported signing algorithm.'); + throw new Exception('Unsupported signing algorithm.'); } $objXMLSecDSig->canonicalizeSignedInfo(); From 55d82780e56542e64d0913268541a7707eb4b757 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 7 Jun 2018 19:36:09 +0200 Subject: [PATCH 065/236] Release 2.14.0 --- CHANGELOG | 8 ++++++++ lib/Saml2/version.json | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 362fc2c7..079e45c8 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,13 @@ CHANGELOG ========= +v.2.14.0 +* Add parameter to the decryptElement method to make optional the formatting +* [#283](https://github.com/onelogin/php-saml/pull/283) New method of importing a decrypted assertion into the XML document to replace the EncryptedAssertion. Fix signature issues on Signed Encrypted Assertions with default namespace +* Allow the getSPMetadata() method to always include the encryption Key Descriptor +* Change some Fatal Error to Exceptions +* [#265](https://github.com/onelogin/php-saml/issues/265) Support parameters at getSPMetadata method +* Avoid calling static method using this + v.2.13.0 * Update xmlseclibs with some fixes. * Add extra protection verifying the Signature algorithm used on SignedInfo element, not only rely on the xmlseclibs verify / verifySignature methods. diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index f502a0cb..b00006b9 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.13.0", - "released": "05/03/2018" + "version": "2.14.0", + "released": "07/06/2018" } } From ededcba36b37262bddf776b5bbd22e68b69f1503 Mon Sep 17 00:00:00 2001 From: Nik Karbaum Date: Sat, 16 Jun 2018 16:41:57 +0200 Subject: [PATCH 066/236] Add ability to change regex for protocol check --- lib/Saml2/Utils.php | 21 +++++++++++++++++++-- 1 file changed, 19 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index d38e1247..da83ae20 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -37,6 +37,10 @@ class OneLogin_Saml2_Utils */ private static $_baseurlpath; + /** + * @var string + */ + private static $_protocolRegex = '@^https?://@i'; /** * Translates any string. Accepts args @@ -296,8 +300,11 @@ public static function redirect($url, $parameters = array(), $stay = false) $url = self::getSelfURLhost() . $url; } - /* Verify that the URL is to a http or https site. */ - $wrongProtocol = !preg_match('@^https?://@i', $url); + /** + * Verify that the URL matches the regex for the protocol. + * By default this will check for http and https + */ + $wrongProtocol = !preg_match(self::$_protocolRegex, $url); $url = filter_var($url, FILTER_VALIDATE_URL); if ($wrongProtocol || empty($url)) { throw new OneLogin_Saml2_Error( @@ -344,6 +351,16 @@ public static function redirect($url, $parameters = array(), $stay = false) exit(); } + /** + * @var $protocolRegex string + */ + public static function setProtocolRegex($protocolRegex) + { + if (!empty($protocolRegex)) { + self::$_protocolRegex = $protocolRegex; + } + } + /** * @param $baseurl string The base url to be used when constructing URLs */ From 332219024bb4a9d9e6c6e7522b25787627847139 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tobias=20M=C3=BChl?= Date: Mon, 16 Jul 2018 15:31:48 +0700 Subject: [PATCH 067/236] Typo in README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 578cb734..9c0eadd5 100644 --- a/README.md +++ b/README.md @@ -1559,7 +1559,7 @@ demo1, only changes the targets. valid, close the user session of the local app. Notice that the SLO Workflow starts and ends at the SP. - 5.2 SLO Initiated by IdP. In this case, the action takes place on the IdP + 4.2 SLO Initiated by IdP. In this case, the action takes place on the IdP side, the logout process is initiated at the idP, sends a Logout Request to the SP (SLS endpoint `sls.php` of the endpoint folder). The SLS endpoint of the SP process the Logout Request and if is valid, From 18cedc6df345c41f5e39f27de8ce27d7e01a0023 Mon Sep 17 00:00:00 2001 From: Matt DeLong Date: Tue, 11 Sep 2018 17:08:12 -0500 Subject: [PATCH 068/236] typo fix --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 9c0eadd5..58d4912d 100644 --- a/README.md +++ b/README.md @@ -180,7 +180,7 @@ If our environment requires sign or encrypt support, this folder may contain the x509 cert and the private key that the SP will use: * `sp.crt` - The public cert of the SP - * `sp.key` - The privake key of the SP + * `sp.key` - The private key of the SP Or also we can provide those data in the setting file at the `$settings['sp']['x509cert']` and the `$settings['sp']['privateKey']`. From eda6530f216fe562fb973095a14cb9733bf34eae Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 12 Sep 2018 20:00:42 +0200 Subject: [PATCH 069/236] Refactor buildRequestSignature and buildResponseSignature adding buildMessageSignature --- lib/Saml2/Auth.php | 60 +++++++++++++++++++++------------------------- 1 file changed, 27 insertions(+), 33 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 429d965c..bfa09a0b 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -604,33 +604,7 @@ public function getLastRequestID() */ public function buildRequestSignature($samlRequest, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA1) { - $key = $this->_settings->getSPkey(); - if (empty($key)) { - throw new OneLogin_Saml2_Error( - "Trying to sign the SAML Request but can't load the SP private key", - OneLogin_Saml2_Error::PRIVATE_KEY_NOT_FOUND - ); - } - - $objKey = new XMLSecurityKey($signAlgorithm, array('type' => 'private')); - $objKey->loadKey($key, false); - - $security = $this->_settings->getSecurityData(); - if ($security['lowercaseUrlencoding']) { - $msg = 'SAMLRequest='.rawurlencode($samlRequest); - if (isset($relayState)) { - $msg .= '&RelayState='.rawurlencode($relayState); - } - $msg .= '&SigAlg=' . rawurlencode($signAlgorithm); - } else { - $msg = 'SAMLRequest='.urlencode($samlRequest); - if (isset($relayState)) { - $msg .= '&RelayState='.urlencode($relayState); - } - $msg .= '&SigAlg=' . urlencode($signAlgorithm); - } - $signature = $objKey->signData($msg); - return base64_encode($signature); + return $this->buildMessageSignature($samlRequest, $relayState, $signAlgorithm, "SAMLRequest"); } /** @@ -645,13 +619,33 @@ public function buildRequestSignature($samlRequest, $relayState, $signAlgorithm * @throws OneLogin_Saml2_Error */ public function buildResponseSignature($samlResponse, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA1) + { + return $this->buildMessageSignature($samlResponse, $relayState, $signAlgorithm, "SAMLResponse"); + } + + /** + * Generates the Signature for a SAML Response + * + * @param string $samlMessage The SAML Response + * @param string $relayState The RelayState + * @param string $signAlgorithm Signature algorithm method + * @param string $type "SAMLRequest" or "SAMLResponse" + * + * @return string A base64 encoded signature + * + * @throws OneLogin_Saml2_Error + */ + private function buildMessageSignature($samlMessage, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA256, $type="SAMLRequest") { $key = $this->_settings->getSPkey(); if (empty($key)) { - throw new OneLogin_Saml2_Error( - "Trying to sign the SAML Response but can't load the SP private key", - OneLogin_Saml2_Error::PRIVATE_KEY_NOT_FOUND - ); + if ($type == "SAMLRequest") { + $errorMsg = "Trying to sign the SAML Request but can't load the SP private key"; + } else { + $errorMsg = "Trying to sign the SAML Response but can't load the SP private key"; + } + + throw new OneLogin_Saml2_Error($errorMsg, OneLogin_Saml2_Error::PRIVATE_KEY_NOT_FOUND); } $objKey = new XMLSecurityKey($signAlgorithm, array('type' => 'private')); @@ -659,13 +653,13 @@ public function buildResponseSignature($samlResponse, $relayState, $signAlgorith $security = $this->_settings->getSecurityData(); if ($security['lowercaseUrlencoding']) { - $msg = 'SAMLResponse='.rawurlencode($samlResponse); + $msg = $type.'='.rawurlencode($samlMessage); if (isset($relayState)) { $msg .= '&RelayState='.rawurlencode($relayState); } $msg .= '&SigAlg=' . rawurlencode($signAlgorithm); } else { - $msg = 'SAMLResponse='.urlencode($samlResponse); + $msg = $type.'='.urlencode($samlMessage); if (isset($relayState)) { $msg .= '&RelayState='.urlencode($relayState); } From da96b0683addad9ffc1dbff48a38a0517a746aec Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 14 Jan 2019 15:27:17 +0100 Subject: [PATCH 070/236] Fix Readme #353 --- settings_example.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/settings_example.php b/settings_example.php index 213c9606..ea5cc898 100644 --- a/settings_example.php +++ b/settings_example.php @@ -34,7 +34,7 @@ // attributeConsumingService. nameFormat, attributeValue and // friendlyName can be omitted. Otherwise remove this section. "attributeConsumingService"=> array( - "ServiceName" => "SP test", + "serviceName" => "SP test" "serviceDescription" => "Test Service", "requestedAttributes" => array( array( From 2a9c538d3edb58b1f0d81561e02fcc2ce2408b94 Mon Sep 17 00:00:00 2001 From: Chris Rowles <42321445+chrisdevelops@users.noreply.github.com> Date: Wed, 16 Jan 2019 10:08:38 +0000 Subject: [PATCH 071/236] Fix syntax error on line 37 Array item was missing a comma :) --- settings_example.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/settings_example.php b/settings_example.php index ea5cc898..c7cf2e8d 100644 --- a/settings_example.php +++ b/settings_example.php @@ -34,7 +34,7 @@ // attributeConsumingService. nameFormat, attributeValue and // friendlyName can be omitted. Otherwise remove this section. "attributeConsumingService"=> array( - "serviceName" => "SP test" + "serviceName" => "SP test", "serviceDescription" => "Test Service", "requestedAttributes" => array( array( From d9e316a7d6d4453a80e1ebd595f584269d3230d1 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 22 Jan 2019 13:48:54 +0100 Subject: [PATCH 072/236] Remove unused var --- lib/Saml2/Response.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index cc23a6c4..b2a6f689 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -115,7 +115,7 @@ public function isValid($requestId = null) ); } - $status = $this->checkStatus(); + $this->checkStatus(); $singleAssertion = $this->validateNumAssertions(); if (!$singleAssertion) { From c6ca9929c1d025727ef9f3a0123ab9f9e856267f Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 23 Jan 2019 18:57:56 +0100 Subject: [PATCH 073/236] Security improvement suggested by Nils Engelbertz to prevent DDOS by expansion of internally defined entities (XEE) --- lib/Saml2/Utils.php | 14 +++++++++---- tests/src/OneLogin/Saml2/UtilsTest.php | 28 ++++++++++++++++++++------ 2 files changed, 32 insertions(+), 10 deletions(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index da83ae20..248b954c 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -84,14 +84,20 @@ public static function loadXML($dom, $xml) assert('$dom instanceof DOMDocument'); assert('is_string($xml)'); - if (strpos($xml, 'loadXML($xml); + libxml_disable_entity_loader($oldEntityLoader); + foreach ($dom->childNodes as $child) { + if ($child->nodeType === XML_DOCUMENT_TYPE_NODE) { + throw new Exception( + 'Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks' + ); + } + } + if (!$res) { return false; } else { diff --git a/tests/src/OneLogin/Saml2/UtilsTest.php b/tests/src/OneLogin/Saml2/UtilsTest.php index 41dd8b5f..47f09772 100644 --- a/tests/src/OneLogin/Saml2/UtilsTest.php +++ b/tests/src/OneLogin/Saml2/UtilsTest.php @@ -70,9 +70,9 @@ public function testXMLAttacks() ]>&xxe;'; try { $res = OneLogin_Saml2_Utils::loadXML($dom, $attackXXE); - $this->fail('Exception was not raised'); + $this->assertFalse($res); } catch (Exception $e) { - $this->assertEquals('Detected use of ENTITY in XML, disabled to prevent XXE/XEE attacks', $e->getMessage()); + $this->assertEquals('Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks', $e->getMessage()); } $xmlWithDTD = ' @@ -83,8 +83,12 @@ public function testXMLAttacks() test '; - $res2 = OneLogin_Saml2_Utils::loadXML($dom, $xmlWithDTD); - $this->assertTrue($res2 instanceof DOMDocument); + try { + $res2 = OneLogin_Saml2_Utils::loadXML($dom, $xmlWithDTD); + $this->assertFalse($res2); + } catch (Exception $e) { + $this->assertEquals('Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks', $e->getMessage()); + } $attackXEE = ' ]> @@ -93,9 +97,21 @@ public function testXMLAttacks() '; try { $res3 = OneLogin_Saml2_Utils::loadXML($dom, $attackXEE); - $this->fail('Exception was not raised'); + $this->assertFalse($res3); + } catch (Exception $e) { + $this->assertEquals('Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks', $e->getMessage()); + } + + $attackXEEutf16 = mb_convert_encoding(' + ]> + + This result is &harmless; + ', 'UTF-16'); + try { + $res4 = OneLogin_Saml2_Utils::loadXML($dom, $attackXEEutf16); + $this->assertFalse($res4); } catch (Exception $e) { - $this->assertEquals('Detected use of ENTITY in XML, disabled to prevent XXE/XEE attacks', $e->getMessage()); + $this->assertEquals('Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks', $e->getMessage()); } } From db784e00053e84e7f970f3a4535e21ea4ca922c8 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 28 Jan 2019 13:57:04 +0100 Subject: [PATCH 074/236] Release 2.15.0 --- README.md | 2 ++ lib/Saml2/version.json | 4 ++-- tests/src/OneLogin/Saml2/UtilsTest.php | 7 +++++-- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 58d4912d..b5801a1f 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,8 @@ and supported by OneLogin Inc. Warning ------- +Update php-saml to 2.15.0, this version includes a security patch related to XEE attacks + php-saml is not affected by [201803-01](https://simplesamlphp.org/security/201803-01) Update php-saml to 2.10.4, this version includes a security patch related to diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index b00006b9..091f09ab 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.14.0", - "released": "07/06/2018" + "version": "2.15.0", + "released": "28/01/2019" } } diff --git a/tests/src/OneLogin/Saml2/UtilsTest.php b/tests/src/OneLogin/Saml2/UtilsTest.php index 47f09772..b70901b8 100644 --- a/tests/src/OneLogin/Saml2/UtilsTest.php +++ b/tests/src/OneLogin/Saml2/UtilsTest.php @@ -102,11 +102,14 @@ public function testXMLAttacks() $this->assertEquals('Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks', $e->getMessage()); } - $attackXEEutf16 = mb_convert_encoding(' + $attackXEEutf16 = mb_convert_encoding( + ' ]> This result is &harmless; - ', 'UTF-16'); + ', + 'UTF-16' + ); try { $res4 = OneLogin_Saml2_Utils::loadXML($dom, $attackXEEutf16); $this->assertFalse($res4); From 35efa30cc1a7f6d1685c59f8e91ebe20310ae755 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 28 Jan 2019 14:02:22 +0100 Subject: [PATCH 075/236] Update changelog with 2.15.0 info --- CHANGELOG | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index 079e45c8..4153f982 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,10 @@ CHANGELOG ========= + +v.2.15.0 +* Security improvement suggested by Nils Engelbertz to prevent DDOS by expansion of internally defined entities (XEE) +* Fix bug on settings_example.php + v.2.14.0 * Add parameter to the decryptElement method to make optional the formatting * [#283](https://github.com/onelogin/php-saml/pull/283) New method of importing a decrypted assertion into the XML document to replace the EncryptedAssertion. Fix signature issues on Signed Encrypted Assertions with default namespace From acf61a87dd7d609e089d0e6230f1a8cf792fa266 Mon Sep 17 00:00:00 2001 From: Martin Wey Date: Tue, 5 Feb 2019 12:05:42 +0100 Subject: [PATCH 076/236] add getSLOResponseUrl(), add check for setting ['singleLogoutService']['responseUrl'] --- lib/Saml2/Auth.php | 17 ++++++++++++++++- lib/Saml2/Settings.php | 8 ++++++++ 2 files changed, 24 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index bfa09a0b..95d8ad32 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -285,7 +285,7 @@ public function processSLO($keepLocalSession = false, $requestId = null, $retrie $parameters['Signature'] = $signature; } - return $this->redirectTo($this->getSLOurl(), $parameters, $stay); + return $this->redirectTo($this->getSLOResponseUrl(), $parameters, $stay); } } else { $this->_errors[] = 'invalid_binding'; @@ -581,6 +581,21 @@ public function getSLOurl() return $url; } + /** + * Gets the SLO response url. + * + * @return string|null The response url of the Single Logout Service + */ + public function getSLOResponseUrl() + { + $url = null; + $idpData = $this->_settings->getIdPData(); + if (isset($idpData['singleLogoutService']) && isset($idpData['singleLogoutService']['responseUrl'])) { + return $idpData['singleLogoutService']['responseUrl']; + } + return $this->getSLOurl(); + } + /** * Gets the ID of the last AuthNRequest or LogoutRequest generated by the Service Provider. * diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 5d0f7eda..ffc1b27b 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -531,6 +531,14 @@ public function checkIdPSettings($settings) $errors[] = 'idp_slo_url_invalid'; } + if (isset($idp['singleLogoutService']) + && isset($idp['singleLogoutService']['responseUrl']) + && !empty($idp['singleLogoutService']['responseUrl']) + && !filter_var($idp['singleLogoutService']['responseUrl'], FILTER_VALIDATE_URL) + ) { + $errors[] = 'idp_slo_response_url_invalid'; + } + if (isset($settings['security'])) { $security = $settings['security']; From ecc1abc0f2dc683146d8019a33671148a7fc4b1b Mon Sep 17 00:00:00 2001 From: Martin Wey Date: Wed, 6 Feb 2019 18:00:27 +0100 Subject: [PATCH 077/236] add more tests --- README.md | 3 +++ lib/Saml2/Auth.php | 1 - settings_example.php | 3 +++ tests/settings/settings1.php | 1 + tests/src/OneLogin/Saml2/AuthTest.php | 27 ++++++++++++++++------- tests/src/OneLogin/Saml2/SettingsTest.php | 2 ++ 6 files changed, 28 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index b5801a1f..feb836bf 100644 --- a/README.md +++ b/README.md @@ -375,6 +375,9 @@ $settings = array ( 'singleLogoutService' => array ( // URL Location of the IdP where SLO Request will be sent. 'url' => '', + // URL location of the IdP where the SP will send the SLO Response (ResponseLocation) + // if not set, url for the SLO Request will be used + 'responseUrl' => '', // SAML protocol binding to be used when returning the // message. OneLogin Toolkit supports the HTTP-Redirect binding // only for this endpoint. diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 95d8ad32..0fb93492 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -588,7 +588,6 @@ public function getSLOurl() */ public function getSLOResponseUrl() { - $url = null; $idpData = $this->_settings->getIdPData(); if (isset($idpData['singleLogoutService']) && isset($idpData['singleLogoutService']['responseUrl'])) { return $idpData['singleLogoutService']['responseUrl']; diff --git a/settings_example.php b/settings_example.php index c7cf2e8d..29f8da63 100644 --- a/settings_example.php +++ b/settings_example.php @@ -93,6 +93,9 @@ 'singleLogoutService' => array ( // URL Location of the IdP where the SP will send the SLO Request 'url' => '', + // URL location of the IdP where the SP will send the SLO Response (ResponseLocation) + // if not set, url for the SLO Request will be used + 'responseUrl' => '', // SAML protocol binding to be used when returning the // message. Onelogin Toolkit supports for this endpoint the // HTTP-Redirect binding only diff --git a/tests/settings/settings1.php b/tests/settings/settings1.php index a69eab2f..5e2d9b72 100644 --- a/tests/settings/settings1.php +++ b/tests/settings/settings1.php @@ -19,6 +19,7 @@ ), 'singleLogoutService' => array ( 'url' => 'http://idp.example.com/SingleLogoutService.php', + 'responseUrl' => 'http://idp.example.com/SingleLogoutServiceResponse.php', ), 'x509cert' => 'MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMCTk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYDVQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xiZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2ZlaWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5vMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7nbK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2QarQ4/67OZfHd7R+POBXhophSMv1ZOo', ), diff --git a/tests/src/OneLogin/Saml2/AuthTest.php b/tests/src/OneLogin/Saml2/AuthTest.php index fa96414b..d06fc0e2 100644 --- a/tests/src/OneLogin/Saml2/AuthTest.php +++ b/tests/src/OneLogin/Saml2/AuthTest.php @@ -79,6 +79,17 @@ public function testGetSLOurl() $this->assertEquals($this->_auth->getSLOurl(), $sloUrl); } + /** + * Tests the getSLOResponseUrl method of the OneLogin_Saml2_Auth class + * + * @covers OneLogin_Saml2_Auth::getSLOurl + */ + public function testGetSLOResponseUrl() + { + $sloResponseUrl = $this->_settingsInfo['idp']['singleLogoutService']['responseUrl']; + $this->assertEquals($this->_auth->getSLOResponseUrl(), $sloResponseUrl); + } + /** * Tests the processResponse method of the OneLogin_Saml2_Auth class * Case No Response, An exception is throw @@ -548,8 +559,8 @@ public function testProcessSLORequestInvalidValid() $parsedQuery = getParamsFromUrl($targetUrl); $this->assertEmpty($this->_auth->getErrors()); - $sloUrl = $this->_settingsInfo['idp']['singleLogoutService']['url']; - $this->assertContains($sloUrl, $targetUrl); + $sloResponseUrl = $this->_settingsInfo['idp']['singleLogoutService']['responseUrl']; + $this->assertContains($sloResponseUrl, $targetUrl); $this->assertArrayHasKey('SAMLResponse', $parsedQuery); $this->assertArrayNotHasKey('RelayState', $parsedQuery); } @@ -570,8 +581,8 @@ public function testProcessSLORequestInvalidValid() $parsedQuery = getParamsFromUrl($targetUrl); $this->assertEmpty($this->_auth->getErrors()); - $sloUrl = $this->_settingsInfo['idp']['singleLogoutService']['url']; - $this->assertContains($sloUrl, $targetUrl); + $sloResponseUrl = $this->_settingsInfo['idp']['singleLogoutService']['responseUrl']; + $this->assertContains($sloResponseUrl, $targetUrl); $this->assertArrayHasKey('SAMLResponse', $parsedQuery); $this->assertArrayNotHasKey('RelayState', $parsedQuery); } @@ -636,8 +647,8 @@ public function testProcessSLORequestDeletingSession() $targetUrl = getUrlFromRedirect($trace); $parsedQuery = getParamsFromUrl($targetUrl); - $sloUrl = $this->_settingsInfo['idp']['singleLogoutService']['url']; - $this->assertContains($sloUrl, $targetUrl); + $sloResponseUrl = $this->_settingsInfo['idp']['singleLogoutService']['responseUrl']; + $this->assertContains($sloResponseUrl, $targetUrl); $this->assertArrayHasKey('SAMLResponse', $parsedQuery); $this->assertArrayNotHasKey('RelayState', $parsedQuery); @@ -657,8 +668,8 @@ public function testProcessSLORequestDeletingSession() $targetUrl = getUrlFromRedirect($trace); $parsedQuery = getParamsFromUrl($targetUrl); - $sloUrl = $this->_settingsInfo['idp']['singleLogoutService']['url']; - $this->assertContains($sloUrl, $targetUrl); + $sloResponseUrl = $this->_settingsInfo['idp']['singleLogoutService']['responseUrl']; + $this->assertContains($sloResponseUrl, $targetUrl); $this->assertArrayHasKey('SAMLResponse', $parsedQuery); $this->assertArrayNotHasKey('RelayState', $parsedQuery); diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 913cace4..c0db5d5c 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -333,6 +333,7 @@ public function testCheckSettings() $settingsInfo['idp']['entityID'] = 'entityId'; $settingsInfo['idp']['singleSignOnService']['url'] = 'invalid_value'; $settingsInfo['idp']['singleLogoutService']['url'] = 'invalid_value'; + $settingsInfo['idp']['singleLogoutService']['responseUrl'] = 'invalid_value'; $settingsInfo['sp']['assertionConsumerService']['url'] = 'invalid_value'; $settingsInfo['sp']['singleLogoutService']['url'] = 'invalid_value'; try { @@ -341,6 +342,7 @@ public function testCheckSettings() } catch (OneLogin_Saml2_error $e) { $this->assertContains('idp_sso_url_invalid', $e->getMessage()); $this->assertContains('idp_slo_url_invalid', $e->getMessage()); + $this->assertContains('idp_slo_response_url_invalid', $e->getMessage()); $this->assertContains('sp_acs_url_invalid', $e->getMessage()); $this->assertContains('sp_sls_url_invalid', $e->getMessage()); } From ec053249bbe08bf7e2f18cc6cccf090a8761dbd2 Mon Sep 17 00:00:00 2001 From: Martin Wey Date: Thu, 7 Feb 2019 07:53:01 +0100 Subject: [PATCH 078/236] read ResponseLocation from idP metadata --- lib/Saml2/IdPMetadataParser.php | 1 + tests/data/metadata/idp/metadata.xml | 2 +- tests/src/OneLogin/Saml2/IdPMetadataParserTest.php | 7 +++++++ 3 files changed, 9 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index 5ad795c4..9acca013 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -140,6 +140,7 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n if ($sloNodes->length > 0) { $metadataInfo['idp']['singleLogoutService'] = array( 'url' => $sloNodes->item(0)->getAttribute('Location'), + 'responseUrl' => $sloNodes->item(0)->getAttribute('ResponseLocation'), 'binding' => $sloNodes->item(0)->getAttribute('Binding') ); } diff --git a/tests/data/metadata/idp/metadata.xml b/tests/data/metadata/idp/metadata.xml index 7c1991f4..c2ca6739 100644 --- a/tests/data/metadata/idp/metadata.xml +++ b/tests/data/metadata/idp/metadata.xml @@ -68,7 +68,7 @@ WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== - + urn:oasis:names:tc:SAML:2.0:nameid-format:transient diff --git a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php index c6db20dd..51c80716 100644 --- a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php +++ b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php @@ -21,6 +21,7 @@ public function testParseFileXML() ), 'singleLogoutService' => array ( 'url' => 'https://example.onelogin.com/trust/saml2/http-redirect/slo/645460', + 'responseUrl' => '', 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect' ), 'x509cert' => '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' @@ -70,6 +71,7 @@ public function testParseXML() ), 'singleLogoutService' => array ( 'url' => 'https://idp.examle.com/saml/slo', + 'responseUrl' => 'https://idp.examle.com/saml/slr', 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect' ), 'x509certMulti' => array ( @@ -180,6 +182,7 @@ public function testParseDesiredBindingAll() ), "singleLogoutService" => array( "url" => "http://idp.example.com/logout", + 'responseUrl' => '', "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" ) ) @@ -297,6 +300,7 @@ public function testParseMultiCerts() "idp" => array( "singleLogoutService" => array( "url" => "https://idp.examle.com/saml/slo", + 'responseUrl' => '', "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" ), "x509certMulti" => array( @@ -336,6 +340,7 @@ public function testParseMultiSigningCerts() "idp" => array( "singleLogoutService" => array( "url" => "https://idp.examle.com/saml/slo", + 'responseUrl' => '', "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" ), "x509certMulti" => array( @@ -424,6 +429,7 @@ public function testInjectIntoSettings() ), 'singleLogoutService' => array ( 'url' => 'http://stuff.com/endpoints/endpoints/sls.php' + ), 'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress' ), @@ -435,6 +441,7 @@ public function testInjectIntoSettings() ), 'singleLogoutService' => array ( 'url' => 'https://idp.adfs.example.com/adfs/ls/', + 'responseUrl' => '', 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect' ), 'x509certMulti' => array ( From 7dc2a85ad80a2467d004d62739dfff7a8566ef48 Mon Sep 17 00:00:00 2001 From: Martin Wey Date: Thu, 7 Feb 2019 07:58:09 +0100 Subject: [PATCH 079/236] remove empty line --- tests/src/OneLogin/Saml2/IdPMetadataParserTest.php | 1 - 1 file changed, 1 deletion(-) diff --git a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php index 51c80716..1198176a 100644 --- a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php +++ b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php @@ -429,7 +429,6 @@ public function testInjectIntoSettings() ), 'singleLogoutService' => array ( 'url' => 'http://stuff.com/endpoints/endpoints/sls.php' - ), 'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress' ), From 95ba1d9c488bdad8d8506595a1116bd3988fad73 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 11 Mar 2019 10:36:26 +0100 Subject: [PATCH 080/236] Set strict=true on config examples --- README.md | 2 +- settings_example.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index feb836bf..5b549f79 100644 --- a/README.md +++ b/README.md @@ -287,7 +287,7 @@ $settings = array ( // or unencrypted messages if it expects them to be signed or encrypted. // Also it will reject the messages if the SAML standard is not strictly // followed: Destination, NameId, Conditions ... are validated too. - 'strict' => false, + 'strict' => true, // Enable debug mode (to print errors). 'debug' => false, diff --git a/settings_example.php b/settings_example.php index 29f8da63..7b5fc960 100644 --- a/settings_example.php +++ b/settings_example.php @@ -5,7 +5,7 @@ // or unencrypted messages if it expects them signed or encrypted // Also will reject the messages if not strictly follow the SAML // standard: Destination, NameId, Conditions ... are validated too. - 'strict' => false, + 'strict' => true, // Enable debug mode (to print errors) 'debug' => false, From 3f51a3224e82970c4bf4e5ad923a66e39407bba0 Mon Sep 17 00:00:00 2001 From: tjallingt Date: Mon, 6 Aug 2018 12:12:02 +0200 Subject: [PATCH 081/236] Move phpunit.xml --- .travis.yml | 2 +- phpunit.xml | 18 ++++++++++++++++++ tests/phpunit.xml | 18 ------------------ 3 files changed, 19 insertions(+), 19 deletions(-) create mode 100644 phpunit.xml delete mode 100644 tests/phpunit.xml diff --git a/.travis.yml b/.travis.yml index 648e8cc0..412b3293 100644 --- a/.travis.yml +++ b/.travis.yml @@ -21,7 +21,7 @@ before_script: - phpenv config-rm xdebug.ini script: - - vendor/bin/phpunit --bootstrap tests/bootstrap.php --configuration tests/phpunit.xml + - vendor/bin/phpunit - php vendor/bin/phpcpd --exclude tests --exclude vendor . - php vendor/bin/phploc . --exclude vendor - php vendor/bin/phploc lib/. diff --git a/phpunit.xml b/phpunit.xml new file mode 100644 index 00000000..ceb2c5c9 --- /dev/null +++ b/phpunit.xml @@ -0,0 +1,18 @@ + + + + ./tests/src + + + + + ./lib + + + + + + + + + diff --git a/tests/phpunit.xml b/tests/phpunit.xml deleted file mode 100644 index 35073c85..00000000 --- a/tests/phpunit.xml +++ /dev/null @@ -1,18 +0,0 @@ - - - - ./src - - - - - ./../lib/ - - - - - - - - - From 6de04e019bc6a047687b97b368dd6ed6445a6681 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 2 Apr 2019 18:30:58 +0200 Subject: [PATCH 082/236] Add support for Subjects on AuthNRequests by the new parameter --- README.md | 3 +- lib/Saml2/Auth.php | 5 +- lib/Saml2/AuthnRequest.php | 25 ++++-- tests/src/OneLogin/Saml2/AuthTest.php | 84 +++++++++++++++++++ tests/src/OneLogin/Saml2/AuthnRequestTest.php | 37 ++++++++ 5 files changed, 144 insertions(+), 10 deletions(-) diff --git a/README.md b/README.md index 5b549f79..f8820540 100644 --- a/README.md +++ b/README.md @@ -647,13 +647,14 @@ $auth = new OneLogin_Saml2_Auth(); $auth->login($newTargetUrl); ``` -The login method can receive other five optional parameters: +The login method can receive other six optional parameters: * `$parameters` - An array of parameters that will be added to the `GET` in the HTTP-Redirect. * `$forceAuthn` - When true the `AuthNRequest` will set the `ForceAuthn='true'` * `$isPassive` - When true the `AuthNRequest` will set the `Ispassive='true'` * `$strict` - True if we want to stay (returns the url string) False to redirect * `$setNameIdPolicy` - When true the AuthNRequest will set a nameIdPolicy element. +* `$nameIdValueReq` - Indicates to the IdP the subject that should be authenticated. If a match on the future SAMLResponse ID and the AuthNRequest ID to be sent is required, that AuthNRequest ID must to be extracted and saved. diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 0fb93492..fed8aceb 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -465,16 +465,17 @@ public function getAttributeWithFriendlyName($friendlyName) * @param bool $isPassive When true the AuthNRequest will set the Ispassive='true' * @param bool $stay True if we want to stay (returns the url string) False to redirect * @param bool $setNameIdPolicy When true the AuthNRueqest will set a nameIdPolicy element + * @param string $nameIdValueReq Indicates to the IdP the subject that should be authenticated * * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters * * @throws OneLogin_Saml2_Error */ - public function login($returnTo = null, $parameters = array(), $forceAuthn = false, $isPassive = false, $stay = false, $setNameIdPolicy = true) + public function login($returnTo = null, $parameters = array(), $forceAuthn = false, $isPassive = false, $stay = false, $setNameIdPolicy = true, $nameIdValueReq = null) { assert('is_array($parameters)'); - $authnRequest = new OneLogin_Saml2_AuthnRequest($this->_settings, $forceAuthn, $isPassive, $setNameIdPolicy); + $authnRequest = new OneLogin_Saml2_AuthnRequest($this->_settings, $forceAuthn, $isPassive, $setNameIdPolicy, $nameIdValueReq); $this->_lastRequest = $authnRequest->getXML(); $this->_lastRequestID = $authnRequest->getId(); diff --git a/lib/Saml2/AuthnRequest.php b/lib/Saml2/AuthnRequest.php index 8418ee37..2da1046e 100644 --- a/lib/Saml2/AuthnRequest.php +++ b/lib/Saml2/AuthnRequest.php @@ -29,11 +29,12 @@ class OneLogin_Saml2_AuthnRequest * Constructs the AuthnRequest object. * * @param OneLogin_Saml2_Settings $settings Settings - * @param bool $forceAuthn When true the AuthNReuqest will set the ForceAuthn='true' - * @param bool $isPassive When true the AuthNReuqest will set the Ispassive='true' + * @param bool $forceAuthn When true the AuthNReuqest will set the ForceAuthn='true' + * @param bool $isPassive When true the AuthNReuqest will set the Ispassive='true' * @param bool $setNameIdPolicy When true the AuthNReuqest will set a nameIdPolicy + * @param string $nameIdValueReq Indicates to the IdP the subject that should be authenticated */ - public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = false, $isPassive = false, $setNameIdPolicy = true) + public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = false, $isPassive = false, $setNameIdPolicy = true, $nameIdValueReq = null) { $this->_settings = $settings; @@ -44,6 +45,17 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal $id = OneLogin_Saml2_Utils::generateUniqueID(); $issueInstant = OneLogin_Saml2_Utils::parseTime2SAML(time()); + $subjectStr = ""; + if (isset($nameIdValueReq)) { + $subjectStr = << + {$nameIdValueReq} + + +SUBJECT; + } + $nameIdPolicyStr = ''; if ($setNameIdPolicy) { $nameIDPolicyFormat = $spData['NameIDFormat']; @@ -52,6 +64,7 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal } $nameIdPolicyStr = << @@ -93,7 +106,6 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal $requestedAuthnStr = ''; if (isset($security['requestedAuthnContext']) && $security['requestedAuthnContext'] !== false) { - $authnComparison = 'exact'; if (isset($security['requestedAuthnContextComparison'])) { $authnComparison = $security['requestedAuthnContextComparison']; @@ -101,6 +113,7 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal if ($security['requestedAuthnContext'] === true) { $requestedAuthnStr = << urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport @@ -127,9 +140,7 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal Destination="{$idpData['singleSignOnService']['url']}" ProtocolBinding="{$spData['assertionConsumerService']['binding']}" AssertionConsumerServiceURL="{$acsUrl}"> - {$spEntityId} -{$nameIdPolicyStr} -{$requestedAuthnStr} + {$spEntityId}{$subjectStr}{$nameIdPolicyStr}{$requestedAuthnStr} AUTHNREQUEST; diff --git a/tests/src/OneLogin/Saml2/AuthTest.php b/tests/src/OneLogin/Saml2/AuthTest.php index d06fc0e2..2606448e 100644 --- a/tests/src/OneLogin/Saml2/AuthTest.php +++ b/tests/src/OneLogin/Saml2/AuthTest.php @@ -1196,6 +1196,90 @@ public function testLoginNameIDPolicy() } } + /** + * Tests the login method of the OneLogin_Saml2_Auth class + * Case Login with no parameters. A AuthN Request is built with and without Subject + * + * @covers OneLogin_Saml2_Auth::login + * @runInSeparateProcess + */ + public function testLoginSubject() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $auth = new OneLogin_Saml2_Auth($settingsInfo); + + try { + // The Header of the redirect produces an Exception + $returnTo = 'http://example.com/returnto'; + $auth->login($returnTo); + // Do not ever get here + $this->assertFalse(true); + } catch (Exception $e) { + $this->assertContains('Cannot modify header information', $e->getMessage()); + $trace = $e->getTrace(); + $targetUrl = getUrlFromRedirect($trace); + $parsedQuery = getParamsFromUrl($targetUrl); + + $ssoUrl = $settingsInfo['idp']['singleSignOnService']['url']; + $this->assertContains($ssoUrl, $targetUrl); + $this->assertArrayHasKey('SAMLRequest', $parsedQuery); + $encodedRequest = $parsedQuery['SAMLRequest']; + $decoded = base64_decode($encodedRequest); + $request = gzinflate($decoded); + $this->assertNotContains('login($returnTo, array(), false, false, false, true, "testuser@example.com"); + // Do not ever get here + $this->assertFalse(true); + } catch (Exception $e) { + $this->assertContains('Cannot modify header information', $e->getMessage()); + $trace2 = $e->getTrace(); + $targetUrl2 = getUrlFromRedirect($trace2); + $parsedQuery2 = getParamsFromUrl($targetUrl2); + + $ssoUrl2 = $settingsInfo['idp']['singleSignOnService']['url']; + $this->assertContains($ssoUrl2, $targetUrl2); + $this->assertArrayHasKey('SAMLRequest', $parsedQuery2); + $encodedRequest2 = $parsedQuery2['SAMLRequest']; + $decoded2 = base64_decode($encodedRequest2); + $request2 = gzinflate($decoded2); + $this->assertContains('assertContains('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">testuser@example.com', $request2); + $this->assertContains('', $request2); + } + + try { + // The Header of the redirect produces an Exception + $returnTo = 'http://example.com/returnto'; + $settingsInfo['sp']['NameIDFormat'] = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"; + $auth2 = new OneLogin_Saml2_Auth($settingsInfo); + $auth2->login($returnTo); + // Do not ever get here + $this->assertFalse(true); + } catch (Exception $e) { + $this->assertContains('Cannot modify header information', $e->getMessage()); + $trace3 = $e->getTrace(); + $targetUrl3 = getUrlFromRedirect($trace3); + $parsedQuery3 = getParamsFromUrl($targetUrl3); + + $ssoUrl3 = $settingsInfo['idp']['singleSignOnService']['url']; + $this->assertContains($ssoUrl3, $targetUrl3); + $this->assertArrayHasKey('SAMLRequest', $parsedQuery3); + $encodedRequest3 = $parsedQuery3['SAMLRequest']; + $decoded3 = base64_decode($encodedRequest3); + $request3 = gzinflate($decoded3); + $this->assertContains('assertContains('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">testuser@example.com', $request3); + $this->assertContains('', $request3); + } + } + /** * Tests the logout method of the OneLogin_Saml2_Auth class * Case Logout with no parameters. A logout Request is built and redirect executed diff --git a/tests/src/OneLogin/Saml2/AuthnRequestTest.php b/tests/src/OneLogin/Saml2/AuthnRequestTest.php index c62e8a36..7d1ab056 100644 --- a/tests/src/OneLogin/Saml2/AuthnRequestTest.php +++ b/tests/src/OneLogin/Saml2/AuthnRequestTest.php @@ -189,6 +189,43 @@ public function testNameIDPolicy() $this->assertContains('getRequest(); + $decoded = base64_decode($encodedRequest); + $request = gzinflate($decoded); + $this->assertNotContains('getRequest(); + $decoded2 = base64_decode($encodedRequest2); + $request2 = gzinflate($decoded2); + $this->assertContains('assertContains('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">testuser@example.com', $request2); + $this->assertContains('', $request2); + + $settingsInfo['sp']['NameIDFormat'] = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"; + $settings = new OneLogin_Saml2_Settings($settingsInfo); + $authnRequest3 = new OneLogin_Saml2_AuthnRequest($settings, false, false, true, "testuser@example.com"); + $encodedRequest3 = $authnRequest3->getRequest(); + $decoded3 = base64_decode($encodedRequest3); + $request3 = gzinflate($decoded3); + $this->assertContains('assertContains('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">testuser@example.com', $request3); + $this->assertContains('', $request3); + } + /** * Tests the OneLogin_Saml2_AuthnRequest Constructor. * The creation of a deflated SAML Request From 5dfb2de42a4cb02c94570e42168e63e2c1aef5ce Mon Sep 17 00:00:00 2001 From: Ying Date: Wed, 24 Apr 2019 21:50:03 -0700 Subject: [PATCH 083/236] Update README.md with Composer example Update README.md to include a fully working example using Composer --- README.md | 40 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) diff --git a/README.md b/README.md index f8820540..028fc789 100644 --- a/README.md +++ b/README.md @@ -1119,6 +1119,46 @@ if (isset($_SESSION['samlUserdata'])) { // If there is user data we print it. } ``` +#### Example (using Composer) that initiates the SSO request and handles the response (is the acs target) #### + +Install package via composer: +``` +composer require onelogin/php-saml +``` + +Create an index.php: +```php +processResponse(null); + $errors = $auth->getErrors(); + if (empty($errors)) { + // user has authenticated successfully + $needsAuth = false; + $_SESSION['samlUserdata'] = $auth->getAttributes(); + } + } + + if ($needsAuth) { + $auth->login(); + } +} + +// rest of your app goes here +``` + #### URL-guessing methods #### php-saml toolkit uses a bunch of methods in OneLogin_Saml2_Utils that try to guess the URL where the SAML messages are processed. From f34e85fc4b9e45f3c4d7714e8b7dce382ab8069d Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 11 Jun 2019 12:10:41 +0200 Subject: [PATCH 084/236] Fix #375 Typo on binding documentation --- settings_example.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/settings_example.php b/settings_example.php index 7b5fc960..d29d069e 100644 --- a/settings_example.php +++ b/settings_example.php @@ -27,7 +27,7 @@ 'url' => '', // SAML protocol binding to be used when returning the // message. Onelogin Toolkit supports for this endpoint the - // HTTP-Redirect binding only + // HTTP-POST binding only 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST', ), // If you need to specify requested attributes, set a @@ -86,7 +86,7 @@ 'url' => '', // SAML protocol binding to be used when returning the // message. Onelogin Toolkit supports for this endpoint the - // HTTP-POST binding only + // HTTP-Redirect binding only 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', ), // SLO endpoint info of the IdP. From 4348bd7d90b92099e68b01470afdb18ce75a4103 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 13 Jun 2019 16:57:49 +0200 Subject: [PATCH 085/236] Adjusted acs endpoint to extract NameQualifier and SPNameQualifier from SAMLResponse. Adjusted single logout service to provide NameQualifier and SPNameQualifier to logout method. Add getNameIdNameQualifier to Auth and SamlResponse. Extend logout method from Auth and LogoutRequest constructor to support SPNameQualifier parameter. Align LogoutRequest constructor with SAML specs --- README.md | 22 ++++++- demo1/index.php | 16 +++-- lib/Saml2/Auth.php | 24 +++++++- lib/Saml2/LogoutRequest.php | 20 ++++-- lib/Saml2/Response.php | 17 ++++++ tests/src/OneLogin/Saml2/AuthTest.php | 61 +++++++++++++++++++ .../src/OneLogin/Saml2/LogoutRequestTest.php | 18 ++++++ tests/src/OneLogin/Saml2/ResponseTest.php | 29 +++++++++ 8 files changed, 193 insertions(+), 14 deletions(-) diff --git a/README.md b/README.md index 028fc789..900e0413 100644 --- a/README.md +++ b/README.md @@ -753,6 +753,8 @@ if (!$auth->isAuthenticated()) { $_SESSION['samlUserdata'] = $auth->getAttributes(); $_SESSION['samlNameId'] = $auth->getNameId(); $_SESSION['samlNameIdFormat'] = $auth->getNameIdFormat(); +$_SESSION['samlNameidNameQualifier' = $auth->getNameIdNameQualifier(); +$_SESSION['samlNameidSPNameQualifier' = $auth->getNameIdSPNameQualifier(); $_SESSION['samlSessionIndex'] = $auth->getSessionIndex(); if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { @@ -980,7 +982,7 @@ $auth = new OneLogin_Saml2_Auth(); $auth->logout(); // Method that sent the Logout Request. ``` -Also there are six optional parameters that can be set: +Also there are eight optional parameters that can be set: * `$returnTo` - The target URL the user should be returned to after logout. * `$parameters` - Extra parameters to be added to the GET. * `$name_id` - That will be used to build the LogoutRequest. If `name_id` parameter is not set and the auth object processed a @@ -988,6 +990,8 @@ SAML Response with a `NameId`, then this `NameId` will be used. * `$session_index` - SessionIndex that identifies the session of the user. * `$stay` - True if we want to stay (returns the url string) False to redirect. * `$nameIdFormat` - The NameID Format will be set in the LogoutRequest. +* `$nameIdNameQualifier` - The NameID NameQualifier will be set in the LogoutRequest. +* `$nameIdSPNameQualifier` - The NameID SP NameQualifier will be set in the LogoutRequest. The Logout Request will be sent signed or unsigned based on the security info of the `advanced_settings.php` (`'logoutRequestSigned'`). @@ -1014,6 +1018,9 @@ $paramters = array(); $nameId = null; $sessionIndex = null; $nameIdFormat = null; +$nameIdNameQualifier = null; +$nameIdSPNameQualifier = null; + if (isset($_SESSION['samlNameId'])) { $nameId = $_SESSION['samlNameId']; } @@ -1023,7 +1030,13 @@ if (isset($_SESSION['samlSessionIndex'])) { if (isset($_SESSION['samlNameIdFormat'])) { $nameIdFormat = $_SESSION['samlNameIdFormat']; } -$auth->logout($returnTo, $paramters, $nameId, $sessionIndex, false, $nameIdFormat); +if (isset($_SESSION['samlNameIdNameQualifier'])) { + $nameIdNameQualifier = $_SESSION['samlNameIdNameQualifier']; +} +if (isset($_SESSION['samlNameIdSPNameQualifier'])) { + $nameIdSPNameQualifier = $_SESSION['samlNameIdSPNameQualifier']; +} +$auth->logout($returnTo, $paramters, $nameId, $sessionIndex, false, $nameIdFormat, $nameIdNameQualifier, $nameIdSPNameQualifier); ``` If a match on the future LogoutResponse ID and the LogoutRequest ID to be sent is required, that LogoutRequest ID must to be extracted and stored. @@ -1282,6 +1295,9 @@ Main class of OneLogin PHP Toolkit * `getAttributes` - Returns the set of SAML attributes. * `getAttribute` - Returns the requested SAML attribute * `getNameId` - Returns the nameID + * `getNameIdFormat` - Gets the NameID Format provided by the SAML response from the IdP. + * `getNameIdNameQualifier` - Gets the NameID NameQualifier provided from the SAML Response String. + * `getNameIdNameSPQualifier` - Gets the NameID SP NameQualifier provided from the SAML Response String. * `getSessionIndex` - Gets the SessionIndex from the AuthnStatement. * `getErrors` - Returns if there were any error * `getSSOurl` - Gets the SSO url. @@ -1318,6 +1334,8 @@ SAML 2 Authentication Response class IdP. * `getNameId` - Gets the NameID provided by the SAML response from the IdP. * `getNameIdFormat` - Gets the NameID Format provided by the SAML response from the IdP. + * `getNameIdNameQualifier` - Gets the NameID NameQualifier provided from the SAML Response String. + * `getNameIdNameSPQualifier` - Gets the NameID SP NameQualifier provided from the SAML Response String. * `getSessionNotOnOrAfter` - Gets the SessionNotOnOrAfter from the AuthnStatement * `getSessionIndex` - Gets the SessionIndex from the AuthnStatement. diff --git a/demo1/index.php b/demo1/index.php index 39967912..2400451f 100644 --- a/demo1/index.php +++ b/demo1/index.php @@ -35,14 +35,20 @@ if (isset($_SESSION['samlNameId'])) { $nameId = $_SESSION['samlNameId']; } - if (isset($_SESSION['samlSessionIndex'])) { - $sessionIndex = $_SESSION['samlSessionIndex']; - } if (isset($_SESSION['samlNameIdFormat'])) { $nameIdFormat = $_SESSION['samlNameIdFormat']; } + if (isset($_SESSION['samlNameIdNameQualifier'])) { + $nameIdNameQualifier = $_SESSION['samlNameIdNameQualifier']; + } + if (isset($_SESSION['samlNameIdSPNameQualifier'])) { + $nameIdSPNameQualifier = $_SESSION['samlNameIdSPNameQualifier']; + } + if (isset($_SESSION['samlSessionIndex'])) { + $sessionIndex = $_SESSION['samlSessionIndex']; + } - $auth->logout($returnTo, $parameters, $nameId, $sessionIndex, false, $nameIdFormat); + $auth->logout($returnTo, $parameters, $nameId, $sessionIndex, false, $nameIdFormat, $nameIdNameQualifier, $nameIdSPNameQualifier); # If LogoutRequest ID need to be saved in order to later validate it, do instead # $sloBuiltUrl = $auth->logout(null, $paramters, $nameId, $sessionIndex, true); @@ -75,6 +81,8 @@ $_SESSION['samlUserdata'] = $auth->getAttributes(); $_SESSION['samlNameId'] = $auth->getNameId(); $_SESSION['samlNameIdFormat'] = $auth->getNameIdFormat(); + $_SESSION['samlNameIdNameQualifier'] = $auth->getNameIdNameQualifier(); + $_SESSION['samlNameIdSPNameQualifier'] = $auth->getNameIdSPNameQualifier(); $_SESSION['samlSessionIndex'] = $auth->getSessionIndex(); unset($_SESSION['AuthNRequestID']); if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index fed8aceb..591ffd37 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -49,6 +49,13 @@ class OneLogin_Saml2_Auth */ private $_nameidNameQualifier; + /** + * NameID SP NameQualifier + * + * @var string + */ + private $_nameidSPNameQualifier; + /** * If user is authenticated. * @@ -197,6 +204,7 @@ public function processResponse($requestId = null) $this->_nameid = $response->getNameId(); $this->_nameidFormat = $response->getNameIdFormat(); $this->_nameidNameQualifier = $response->getNameIdNameQualifier(); + $this->_nameidSPNameQualifier = $response->getNameIdSPNameQualifier(); $this->_authenticated = true; $this->_sessionIndex = $response->getSessionIndex(); $this->_sessionExpiration = $response->getSessionNotOnOrAfter(); @@ -380,6 +388,16 @@ public function getNameIdNameQualifier() return $this->_nameidNameQualifier; } + /** + * Returns the nameID SP NameQualifier + * + * @return string The nameID SP NameQualifier of the assertion + */ + public function getNameIdSPNameQualifier() + { + return $this->_nameidSPNameQualifier; + } + /** * Returns the SessionIndex * @@ -513,7 +531,7 @@ public function login($returnTo = null, $parameters = array(), $forceAuthn = fal * * @throws OneLogin_Saml2_Error */ - public function logout($returnTo = null, $parameters = array(), $nameId = null, $sessionIndex = null, $stay = false, $nameIdFormat = null, $nameIdNameQualifier = null) + public function logout($returnTo = null, $parameters = array(), $nameId = null, $sessionIndex = null, $stay = false, $nameIdFormat = null, $nameIdNameQualifier = null, $nameIdSPNameQualifier = null) { assert('is_array($parameters)'); @@ -532,7 +550,7 @@ public function logout($returnTo = null, $parameters = array(), $nameId = null, $nameIdFormat = $this->_nameidFormat; } - $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, null, $nameId, $sessionIndex, $nameIdFormat, $nameIdNameQualifier); + $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, null, $nameId, $sessionIndex, $nameIdFormat, $nameIdNameQualifier, $nameIdSPNameQualifier); $this->_lastRequest = $logoutRequest->getXML(); $this->_lastRequestID = $logoutRequest->id; @@ -650,7 +668,7 @@ public function buildResponseSignature($samlResponse, $relayState, $signAlgorith * * @throws OneLogin_Saml2_Error */ - private function buildMessageSignature($samlMessage, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA256, $type="SAMLRequest") + private function buildMessageSignature($samlMessage, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA256, $type = "SAMLRequest") { $key = $this->_settings->getSPkey(); if (empty($key)) { diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index 595c1ca1..e1523903 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -39,10 +39,11 @@ class OneLogin_Saml2_LogoutRequest * @param string|null $sessionIndex The SessionIndex (taken from the SAML Response in the SSO process). * @param string|null $nameIdFormat The NameID Format will be set in the LogoutRequest. * @param string|null $nameIdNameQualifier The NameID NameQualifier will be set in the LogoutRequest. + * @param string|null $nameIdSPNameQualifier The NameID SP NameQualifier will be set in the LogoutRequest. * * @throws OneLogin_Saml2_Error */ - public function __construct(OneLogin_Saml2_Settings $settings, $request = null, $nameId = null, $sessionIndex = null, $nameIdFormat = null, $nameIdNameQualifier = null) + public function __construct(OneLogin_Saml2_Settings $settings, $request = null, $nameId = null, $sessionIndex = null, $nameIdFormat = null, $nameIdNameQualifier = null, $nameIdSPNameQualifier = null) { $this->_settings = $settings; @@ -59,7 +60,6 @@ public function __construct(OneLogin_Saml2_Settings $settings, $request = null, $id = OneLogin_Saml2_Utils::generateUniqueID(); $this->id = $id; - $nameIdValue = OneLogin_Saml2_Utils::generateUniqueID(); $issueInstant = OneLogin_Saml2_Utils::parseTime2SAML(time()); $cert = null; @@ -78,16 +78,26 @@ public function __construct(OneLogin_Saml2_Settings $settings, $request = null, $spData['NameIDFormat'] != OneLogin_Saml2_Constants::NAMEID_UNSPECIFIED) { $nameIdFormat = $spData['NameIDFormat']; } - $spNameQualifier = null; } else { $nameId = $idpData['entityId']; $nameIdFormat = OneLogin_Saml2_Constants::NAMEID_ENTITY; - $spNameQualifier = $spData['entityId']; + } + + /* From saml-core-2.0-os 8.3.6, when the entity Format is used: + "The NameQualifier, SPNameQualifier, and SPProvidedID attributes MUST be omitted. + */ + if (!empty($nameIdFormat) && $nameIdFormat == OneLogin_Saml2_Constants::NAMEID_ENTITY) { + $nameIdNameQualifier = null; + $nameIdSPNameQualifier = null; + } + // NameID Format UNSPECIFIED omitted + if (!empty($nameIdFormat) && $nameIdFormat == OneLogin_Saml2_Constants::NAMEID_UNSPECIFIED) { + $nameIdFormat = null; } $nameIdObj = OneLogin_Saml2_Utils::generateNameId( $nameId, - $spNameQualifier, + $nameIdSPNameQualifier, $nameIdFormat, $cert, $nameIdNameQualifier diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index b2a6f689..55e480d6 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -671,6 +671,23 @@ public function getNameIdNameQualifier() return $nameIdNameQualifier; } + /** + * Gets the NameID SP NameQualifier provided by the SAML response from the IdP. + * + * @return string|null NameID SP NameQualifier + * + * @throws ValidationError + */ + public function getNameIdSPNameQualifier() + { + $nameIdSPNameQualifier = null; + $nameIdData = $this->getNameIdData(); + if (!empty($nameIdData) && isset($nameIdData['SPNameQualifier'])) { + $nameIdSPNameQualifier = $nameIdData['SPNameQualifier']; + } + return $nameIdSPNameQualifier; + } + /** * Gets the SessionNotOnOrAfter from the AuthnStatement. * Could be used to set the local session expiration diff --git a/tests/src/OneLogin/Saml2/AuthTest.php b/tests/src/OneLogin/Saml2/AuthTest.php index 2606448e..94e3872f 100644 --- a/tests/src/OneLogin/Saml2/AuthTest.php +++ b/tests/src/OneLogin/Saml2/AuthTest.php @@ -120,6 +120,8 @@ public function testProcessNoResponse() * @covers OneLogin_Saml2_Auth::getAttribute * @covers OneLogin_Saml2_Auth::getNameId * @covers OneLogin_Saml2_Auth::getNameIdFormat + * @covers OneLogin_Saml2_Auth::getNameIdNameQualifier + * @covers OneLogin_Saml2_Auth::getNameIdSPNameQualifier * @covers OneLogin_Saml2_Auth::getErrors * @covers OneLogin_Saml2_Auth::getSessionIndex * @covers OneLogin_Saml2_Auth::getSessionExpiration @@ -136,6 +138,8 @@ public function testProcessResponseInvalid() $this->assertEmpty($this->_auth->getAttributes()); $this->assertNull($this->_auth->getNameId()); $this->assertNull($this->_auth->getNameIdFormat()); + $this->assertNull($this->_auth->getNameIdNameQualifier()); + $this->assertNull($this->_auth->getNameIdSPNameQualifier()); $this->assertNull($this->_auth->getSessionIndex()); $this->assertNull($this->_auth->getSessionExpiration()); $this->assertNull($this->_auth->getAttribute('uid')); @@ -209,6 +213,63 @@ public function testProcessResponseValid() $this->assertEquals('2655106621', $sessionExpiration); } + /** + * Tests the getNameIdNameQualifier method of the Auth class + * Case found + * @covers OneLogin_Saml2_Auth::getNameIdNameQualifier + */ + public function testGetNameIdNameQualifier() + { + $message = file_get_contents(TEST_ROOT . '/data/responses/valid_response_with_namequalifier.xml.base64'); + $_POST['SAMLResponse'] = $message; + $this->assertNull($this->_auth->getNameIdNameQualifier()); + $this->_auth->processResponse(); + $this->assertTrue($this->_auth->isAuthenticated()); + $this->assertEquals('https://test.example.com/saml/metadata', $this->_auth->getNameIdNameQualifier()); + } + /** + * Tests the getNameIdNameQualifier method of the Auth class + * Case Null + * @covers OneLogin_Saml2_Auth::getNameIdNameQualifier + */ + public function testGetNameIdNameQualifier2() + { + $message = file_get_contents(TEST_ROOT . '/data/responses/valid_response.xml.base64'); + $_POST['SAMLResponse'] = $message; + $this->assertNull($this->_auth->getNameIdNameQualifier()); + $this->_auth->processResponse(); + $this->assertTrue($this->_auth->isAuthenticated()); + $this->assertNull($this->_auth->getNameIdNameQualifier()); + } + /** + * Tests the getNameIdSPNameQualifier method of the Auth class + * Case Found + * @covers OneLogin_Saml2_Auth::getNameIdSPNameQualifier + */ + public function testGetNameIdSPNameQualifier() + { + $message = file_get_contents(TEST_ROOT . '/data/responses/valid_response_with_namequalifier.xml.base64'); + $_POST['SAMLResponse'] = $message; + $this->assertNull($this->_auth->getNameIdSPNameQualifier()); + $this->_auth->processResponse(); + $this->assertTrue($this->_auth->isAuthenticated()); + $this->assertNull($this->_auth->getNameIdSPNameQualifier()); + } + /** + * Tests the getNameIdSPNameQualifier method of the Auth class + * Case Null + * @covers OneLogin_Saml2_Auth::getNameIdSPNameQualifier + */ + public function testGetNameIdSPNameQualifier2() + { + $message = file_get_contents(TEST_ROOT . '/data/responses/valid_response.xml.base64'); + $_POST['SAMLResponse'] = $message; + $this->assertNull($this->_auth->getNameIdSPNameQualifier()); + $this->_auth->processResponse(); + $this->assertTrue($this->_auth->isAuthenticated()); + $this->assertEquals('http://stuff.com/endpoints/metadata.php', $this->_auth->getNameIdSPNameQualifier()); + } + /** * Tests the getAttributes and getAttributesWithFriendlyName methods * @covers OneLogin_Saml2_Auth::getAttributes diff --git a/tests/src/OneLogin/Saml2/LogoutRequestTest.php b/tests/src/OneLogin/Saml2/LogoutRequestTest.php index 7c5c3cff..f48dc555 100644 --- a/tests/src/OneLogin/Saml2/LogoutRequestTest.php +++ b/tests/src/OneLogin/Saml2/LogoutRequestTest.php @@ -374,6 +374,24 @@ public function testGetNameIdData() $this->assertContains('NameID not found in the Logout Request', $e->getMessage()); } + $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, null, "ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c", null, OneLogin_Saml2_Constants::NAMEID_PERSISTENT, $this->_settings->getIdPData()['entityId'], $this->_settings->getSPData()['entityId']); + $logoutRequestStr = $logoutRequest->getXML(); + $this->assertContains('ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c', $logoutRequestStr); + $this->assertContains('Format="'.OneLogin_Saml2_Constants::NAMEID_PERSISTENT, $logoutRequestStr); + $this->assertContains('NameQualifier="'.$this->_settings->getIdPData()['entityId'], $logoutRequestStr); + $this->assertContains('SPNameQualifier="'.$this->_settings->getSPData()['entityId'], $logoutRequestStr); + $logoutRequest2 = new OneLogin_Saml2_LogoutRequest($this->_settings, null, "ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c", null, OneLogin_Saml2_Constants::NAMEID_ENTITY, $this->_settings->getIdPData()['entityId'], $this->_settings->getSPData()['entityId']); + $logoutRequestStr2 = $logoutRequest2->getXML(); + $this->assertContains('ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c', $logoutRequestStr2); + $this->assertContains('Format="'.OneLogin_Saml2_Constants::NAMEID_ENTITY, $logoutRequestStr2); + $this->assertNotContains('NameQualifier', $logoutRequestStr2); + $this->assertNotContains('SPNameQualifier', $logoutRequestStr2); + $logoutRequest3 = new OneLogin_Saml2_LogoutRequest($this->_settings, null, "ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c", null, OneLogin_Saml2_Constants::NAMEID_UNSPECIFIED); + $logoutRequestStr3 = $logoutRequest3->getXML(); + $this->assertContains('ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c', $logoutRequestStr3); + $this->assertNotContains('Format', $logoutRequestStr3); + $this->assertNotContains('NameQualifier', $logoutRequestStr3); + $this->assertNotContains('SPNameQualifier', $logoutRequestStr3); } /** diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 6d7d280c..54097a42 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -258,6 +258,35 @@ public function testGetNameIdNameQualifier() } } + /** + * Tests the getNameIdSPNameQualifier method of the Response + * + * @covers OneLogin_Saml2_Response::getNameIdSPNameQualifier + */ + public function testGetNameIdSPNameQualifier() + { + $xml = file_get_contents(TEST_ROOT . '/data/responses/response1.xml.base64'); + $response = new OneLogin_Saml2_Response($this->_settings, $xml); + $this->assertNull($response->getNameIdSPNameQualifier()); + $xml2 = file_get_contents(TEST_ROOT . '/data/responses/response_encrypted_nameid.xml.base64'); + $response2 = new OneLogin_Saml2_Response($this->_settings, $xml2); + $this->assertEquals('http://stuff.com/endpoints/metadata.php', $response2->getNameIdSPNameQualifier()); + $xml3 = file_get_contents(TEST_ROOT . '/data/responses/valid_encrypted_assertion.xml.base64'); + $response3 = new OneLogin_Saml2_Response($this->_settings, $xml3); + $this->assertEquals('http://stuff.com/endpoints/metadata.php', $response3->getNameIdSPNameQualifier()); + $xml4 = file_get_contents(TEST_ROOT . '/data/responses/valid_response.xml.base64'); + $response4 = new OneLogin_Saml2_Response($this->_settings, $xml4); + $this->assertEquals('http://stuff.com/endpoints/metadata.php', $response4->getNameIdSPNameQualifier()); + $xml5 = file_get_contents(TEST_ROOT . '/data/responses/invalids/no_nameid.xml.base64'); + $response5 = new OneLogin_Saml2_Response($this->_settings, $xml5); + try { + $nameId5 = $response5->getNameIdSPNameQualifier(); + $this->fail('ValidationError was not raised'); + } catch (OneLogin_Saml2_ValidationError $e) { + $this->assertContains('NameID not found in the assertion of the Response', $e->getMessage()); + } + } + /** * Tests the getNameIdData method of the OneLogin_Saml2_Response * From 622e14ece11cba27edc723435d6363b9993920c5 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 13 Jun 2019 17:05:23 +0200 Subject: [PATCH 086/236] Missed file --- .../data/responses/valid_response_with_namequalifier.xml.base64 | 1 + 1 file changed, 1 insertion(+) create mode 100644 tests/data/responses/valid_response_with_namequalifier.xml.base64 diff --git a/tests/data/responses/valid_response_with_namequalifier.xml.base64 b/tests/data/responses/valid_response_with_namequalifier.xml.base64 new file mode 100644 index 00000000..5bca509b --- /dev/null +++ b/tests/data/responses/valid_response_with_namequalifier.xml.base64 @@ -0,0 +1 @@ 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 From 0a98e72cca5e98598e08dca398a3adad460a7d18 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 24 Jun 2019 12:40:44 +0200 Subject: [PATCH 087/236] Add info about PHP 7.X support and the 3.X branch --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 900e0413..57305a0f 100644 --- a/README.md +++ b/README.md @@ -7,6 +7,8 @@ Forget those complicated libraries and use this open source library provided and supported by OneLogin Inc. +**The 3.X branch is compatible with PHP > 7.1, so if you are using that PHP version, use it and not the 2.X or the master branch** + Warning ------- From 8ec4aa6eb85a0fe87cb5dbabe9e649781870885f Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 24 Jun 2019 17:17:22 +0200 Subject: [PATCH 088/236] Fix #344 Raise errors on IdPMetadataParser::parseRemoteXML and IdPMetadataParser::parseFileXML --- lib/Saml2/IdPMetadataParser.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index 9acca013..7d2220d6 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -40,6 +40,7 @@ public static function parseRemoteXML($url, $entityId = null, $desiredNameIdForm throw new Exception(curl_error($ch), curl_errno($ch)); } } catch (Exception $e) { + throw new Exception('Error on parseRemoteXML. '.$e->getMessage()); } return $metadataInfo; } @@ -68,6 +69,7 @@ public static function parseFileXML($filepath, $entityId = null, $desiredNameIdF $metadataInfo = self::parseXML($data, $entityId, $desiredNameIdFormat, $desiredSSOBinding, $desiredSLOBinding); } } catch (Exception $e) { + throw new Exception('Error on parseFileXML. '.$e->getMessage()); } return $metadataInfo; } From e16161d89067866cabb6dd4f5ccd1437b6a64eda Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 24 Jun 2019 19:43:15 +0200 Subject: [PATCH 089/236] Release 2.16.0 --- CHANGELOG | 6 ++++++ lib/Saml2/version.json | 4 ++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 4153f982..e0dc4fd2 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,11 @@ CHANGELOG ========= +v.2.16.0 +* Support SLO ResponseLocation +* [#344](https://github.com/onelogin/php-saml/issues/344) Raise errors on IdPMetadataParser::parseRemoteXML and IdPMetadataParser::parseFileXML +* Adjusted acs endpoint to extract NameQualifier and SPNameQualifier from SAMLResponse. Adjusted single logout service to provide NameQualifier and SPNameQualifier to logout method. Add getNameIdNameQualifier to Auth and SamlResponse. Extend logout method from Auth and LogoutRequest constructor to support SPNameQualifier parameter. Align LogoutRequest constructor with SAML specs +* Add support for Subjects on AuthNRequests by the new parameter +* Set strict=true on config examples v.2.15.0 * Security improvement suggested by Nils Engelbertz to prevent DDOS by expansion of internally defined entities (XEE) diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 091f09ab..112ca458 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.15.0", - "released": "28/01/2019" + "version": "2.16.0", + "released": "24/06/2019" } } From c02356e96ba6ce8cf895bd4e9d9c7bb0de822e33 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 16 Jul 2019 09:05:27 +0200 Subject: [PATCH 090/236] Relax comparision of false on SignMetadata --- lib/Saml2/Settings.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index ffc1b27b..5374a416 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -842,7 +842,7 @@ public function getSPMetadata($alwaysPublishEncryptionCert = false, $validUntil } //Sign Metadata - if (isset($this->_security['signMetadata']) && $this->_security['signMetadata'] !== false) { + if (isset($this->_security['signMetadata']) && $this->_security['signMetadata'] != false) { if ($this->_security['signMetadata'] === true) { $keyMetadata = $this->getSPkey(); $certMetadata = $cert; From 17770c0587f82d31418db2609a699f7ee7bfd905 Mon Sep 17 00:00:00 2001 From: ignaciovazquez Date: Thu, 18 Jul 2019 16:34:17 -0700 Subject: [PATCH 091/236] Fixed syntax errors in endpoints/acs.php example --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 57305a0f..0dd26e28 100644 --- a/README.md +++ b/README.md @@ -755,8 +755,8 @@ if (!$auth->isAuthenticated()) { $_SESSION['samlUserdata'] = $auth->getAttributes(); $_SESSION['samlNameId'] = $auth->getNameId(); $_SESSION['samlNameIdFormat'] = $auth->getNameIdFormat(); -$_SESSION['samlNameidNameQualifier' = $auth->getNameIdNameQualifier(); -$_SESSION['samlNameidSPNameQualifier' = $auth->getNameIdSPNameQualifier(); +$_SESSION['samlNameidNameQualifier'] = $auth->getNameIdNameQualifier(); +$_SESSION['samlNameidSPNameQualifier'] = $auth->getNameIdSPNameQualifier(); $_SESSION['samlSessionIndex'] = $auth->getSessionIndex(); if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { From 7afe73c3b6c6cb658d9489bd3d2d3191004badde Mon Sep 17 00:00:00 2001 From: Pierre Grimaud Date: Mon, 9 Sep 2019 17:01:21 +0200 Subject: [PATCH 092/236] Fix typos --- README.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 0dd26e28..802f4b75 100644 --- a/README.md +++ b/README.md @@ -102,7 +102,7 @@ Since [PHP 5.3 is officially unsupported](http://php.net/eol.php) we recommend y The toolkit is hosted on github. You can download it from: - * Lastest release: https://github.com/onelogin/php-saml/releases/latest + * Latest release: https://github.com/onelogin/php-saml/releases/latest * Master repo: https://github.com/onelogin/php-saml/tree/master Copy the core of the library inside the php application. (each application has its @@ -199,7 +199,7 @@ publish that x509 certificate on Service Provider metadata. #### `extlib/` #### This folder contains the 3rd party libraries that the toolkit uses. At the -moment only uses the `xmlseclibs` (autor Robert Richards, BSD Licensed) which +moment only uses the `xmlseclibs` (author Robert Richards, BSD Licensed) which handle the sign and the encryption of xml elements. @@ -1186,7 +1186,7 @@ php-saml toolkit uses a bunch of methods in OneLogin_Saml2_Utils that try to gue * `getSelfURLNoQuery` Returns the URL of the current host + current view. * `getSelfRoutedURLNoQuery` Returns the routed URL of the current host + current view. -getSelfURLNoQuery and getSelfRoutedURLNoQuery are used to calculate the currentURL in order to valdate SAML elements like Destination or Recipient. +getSelfURLNoQuery and getSelfRoutedURLNoQuery are used to calculate the currentURL in order to validate SAML elements like Destination or Recipient. When the PHP application is behind a proxy or a load balancer we can execute `setProxyVars(true)` and `setSelfPort` and `isHTTPS` will take care of the `$_SERVER["HTTP_X_FORWARDED_PORT"]` and `$_SERVER['HTTP_X_FORWARDED_PROTO']` vars (otherwise they are ignored). @@ -1530,7 +1530,7 @@ Once the SP is configured, the metadata of the SP is published at the process, the `index.php` view. 2.2 in the second link we access to (`attrs.php`) have the same process - described at 2.1 with the diference that as `RelayState` is set the `attrs.php`. + described at 2.1 with the difference that as `RelayState` is set the `attrs.php`. 3. The SAML Response is processed in the ACS (`index.php?acs`), if the Response is not valid, the process stops here and a message is shown. Otherwise we @@ -1557,7 +1557,7 @@ Once the SP is configured, the metadata of the SP is published at the session at of the IdP. Notice that the SLO Workflow starts and ends at the IdP. Notice that all the SAML Requests and Responses are handled by a unique file, -the `index.php` file and how `GET` paramters are used to know the action that +the `index.php` file and how `GET` parameters are used to know the action that must be done. From 7a6f4babaa57a38ab8e565561d4d2e9dfbae7144 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 10 Sep 2019 19:29:13 +0200 Subject: [PATCH 093/236] Set true as the default value for strict setting --- lib/Saml2/Settings.php | 2 +- tests/src/OneLogin/Saml2/SettingsTest.php | 26 +++++++++++------------ 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 5374a416..13e54ff1 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -26,7 +26,7 @@ class OneLogin_Saml2_Settings * * @var bool */ - private $_strict = false; + private $_strict = true; /** * Activate debug mode diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index c0db5d5c..f23e56c2 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -199,7 +199,7 @@ public function testNonArrayCompressionSettingsCauseSyntaxError($invalidValue) return; } - $this->fail("An OneLogin_Saml2_error should have been caught."); + $this->fail("An OneLogin_Saml2_Error should have been caught."); } /** @@ -233,7 +233,7 @@ public function testThatOnlyBooleansCanBeUsedForCompressionSettings($invalidValu $settingsInfo['compress']['responses'] = $invalidValue; $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $expectedMessage = "Invalid array settings: 'compress'=>'responses' values must be true or false."; $this->assertEquals($expectedMessage, $e->getMessage()); $responsesIsInvalid = true; @@ -301,7 +301,7 @@ public function testCheckSettings() try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('Invalid array settings: invalid_syntax', $e->getMessage()); } @@ -309,7 +309,7 @@ public function testCheckSettings() try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('idp_not_found', $e->getMessage()); $this->assertContains('sp_not_found', $e->getMessage()); } @@ -323,7 +323,7 @@ public function testCheckSettings() try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('idp_entityId_not_found', $e->getMessage()); $this->assertContains('idp_sso_not_found', $e->getMessage()); $this->assertContains('sp_entityId_not_found', $e->getMessage()); @@ -339,7 +339,7 @@ public function testCheckSettings() try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('idp_sso_url_invalid', $e->getMessage()); $this->assertContains('idp_slo_url_invalid', $e->getMessage()); $this->assertContains('idp_slo_response_url_invalid', $e->getMessage()); @@ -351,7 +351,7 @@ public function testCheckSettings() try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('idp_cert_or_fingerprint_not_found_and_required', $e->getMessage()); } @@ -359,7 +359,7 @@ public function testCheckSettings() try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('idp_cert_not_found_and_required', $e->getMessage()); } @@ -386,7 +386,7 @@ public function testCheckSettings() try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('sp_signMetadata_invalid', $e->getMessage()); $this->assertContains('organization_not_enought_data', $e->getMessage()); $this->assertContains('contact_type_invalid', $e->getMessage()); @@ -610,7 +610,7 @@ public function testGetSPMetadataSignedNoMetadataCert() $settings = new OneLogin_Saml2_Settings($settingsInfo); $metadata = $settings->getSPMetadata(); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('sp_signMetadata_invalid', $e->getMessage()); } @@ -624,7 +624,7 @@ public function testGetSPMetadataSignedNoMetadataCert() try { $metadata = $settings->getSPMetadata(); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('Private key file not found', $e->getMessage()); } @@ -637,7 +637,7 @@ public function testGetSPMetadataSignedNoMetadataCert() try { $metadata = $settings->getSPMetadata(); $this->fail('OneLogin_Saml2_Error was not raised'); - } catch (OneLogin_Saml2_error $e) { + } catch (OneLogin_Saml2_Error $e) { $this->assertContains('Public cert file not found', $e->getMessage()); } } @@ -1023,7 +1023,7 @@ public function testIsStrict() unset($settingsInfo['strict']); $settings = new OneLogin_Saml2_Settings($settingsInfo); - $this->assertFalse($settings->isStrict()); + $this->assertTrue($settings->isStrict()); $settingsInfo['strict'] = false; $settings2 = new OneLogin_Saml2_Settings($settingsInfo); From dc9708878a83209d4369d3f748b2bfa947256a60 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 10 Sep 2019 19:40:49 +0200 Subject: [PATCH 094/236] Support 'x509cert' and 'privateKey' on signMetadata security settings --- README.md | 6 ++- advanced_settings_example.php | 8 +++- lib/Saml2/Settings.php | 51 ++++++++++++++--------- tests/src/OneLogin/Saml2/SettingsTest.php | 30 +++++++++++++ 4 files changed, 73 insertions(+), 22 deletions(-) diff --git a/README.md b/README.md index 802f4b75..dd0a868b 100644 --- a/README.md +++ b/README.md @@ -463,7 +463,11 @@ $advancedSettings = array ( False || True (use sp certs) || array ( keyFileName => 'metadata.key', certFileName => 'metadata.crt' - ) + ) + || array ( + 'x509cert' => '', + 'privateKey' => '' + ) */ 'signMetadata' => false, diff --git a/advanced_settings_example.php b/advanced_settings_example.php index 50194ae6..99d0c044 100644 --- a/advanced_settings_example.php +++ b/advanced_settings_example.php @@ -2,7 +2,7 @@ $advancedSettings = array ( - // Compression settings + // Compression settings // Handle if the getRequest/getResponse methods will return the Request/Response deflated. // But if we provide a $deflate boolean parameter to the getRequest or getResponse // method it will have priority over the compression settings. @@ -36,7 +36,11 @@ False || True (use sp certs) || array ( keyFileName => 'metadata.key', certFileName => 'metadata.crt' - ) + ) + || array ( + 'x509cert' => '', + 'privateKey' => '' + ) */ 'signMetadata' => false, diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 13e54ff1..67410cf0 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -608,9 +608,14 @@ public function checkSPSettings($settings) $errors[] = 'sp_sls_url_invalid'; } - if (isset($security['signMetadata']) && is_array($security['signMetadata']) && - (!isset($security['signMetadata']['keyFileName']) || !isset($security['signMetadata']['certFileName']))) { - $errors[] = 'sp_signMetadata_invalid'; + if (isset($security['signMetadata']) && is_array($security['signMetadata'])) { + if ((!isset($security['signMetadata']['keyFileName']) + || !isset($security['signMetadata']['certFileName'])) && + (!isset($security['signMetadata']['privateKey']) + || !isset($security['signMetadata']['x509cert'])) + ) { + $errors[] = 'sp_signMetadata_invalid'; + } } if (((isset($security['authnRequestsSigned']) && $security['authnRequestsSigned'] == true) @@ -842,40 +847,28 @@ public function getSPMetadata($alwaysPublishEncryptionCert = false, $validUntil } //Sign Metadata - if (isset($this->_security['signMetadata']) && $this->_security['signMetadata'] != false) { + if (isset($this->_security['signMetadata']) && $this->_security['signMetadata'] !== false) { if ($this->_security['signMetadata'] === true) { $keyMetadata = $this->getSPkey(); $certMetadata = $cert; - if (!$keyMetadata) { throw new OneLogin_Saml2_Error( 'SP Private key not found.', OneLogin_Saml2_Error::PRIVATE_KEY_FILE_NOT_FOUND ); } - if (!$certMetadata) { throw new OneLogin_Saml2_Error( 'SP Public cert not found.', OneLogin_Saml2_Error::PUBLIC_CERT_FILE_NOT_FOUND ); } - } else { - if (!isset($this->_security['signMetadata']['keyFileName']) - || !isset($this->_security['signMetadata']['certFileName']) - ) { - throw new OneLogin_Saml2_Error( - 'Invalid Setting: signMetadata value of the sp is not valid', - OneLogin_Saml2_Error::SETTINGS_INVALID_SYNTAX - ); - } + } else if (isset($this->_security['signMetadata']['keyFileName']) && + isset($this->_security['signMetadata']['certFileName'])) { $keyFileName = $this->_security['signMetadata']['keyFileName']; $certFileName = $this->_security['signMetadata']['certFileName']; - $keyMetadataFile = $this->_paths['cert'].$keyFileName; $certMetadataFile = $this->_paths['cert'].$certFileName; - - if (!file_exists($keyMetadataFile)) { throw new OneLogin_Saml2_Error( 'SP Private key file not found: %s', @@ -883,7 +876,6 @@ public function getSPMetadata($alwaysPublishEncryptionCert = false, $validUntil array($keyMetadataFile) ); } - if (!file_exists($certMetadataFile)) { throw new OneLogin_Saml2_Error( 'SP Public cert file not found: %s', @@ -893,6 +885,27 @@ public function getSPMetadata($alwaysPublishEncryptionCert = false, $validUntil } $keyMetadata = file_get_contents($keyMetadataFile); $certMetadata = file_get_contents($certMetadataFile); + } else if (isset($this->_security['signMetadata']['privateKey']) && + isset($this->_security['signMetadata']['x509cert'])) { + $keyMetadata = OneLogin_Saml2_Utils::formatPrivateKey($this->_security['signMetadata']['privateKey']); + $certMetadata = OneLogin_Saml2_Utils::formatCert($this->_security['signMetadata']['x509cert']); + if (!$keyMetadata) { + throw new OneLogin_Saml2_Error( + 'Private key not found.', + OneLogin_Saml2_Error::PRIVATE_KEY_FILE_NOT_FOUND + ); + } + if (!$certMetadata) { + throw new OneLogin_Saml2_Error( + 'Public cert not found.', + OneLogin_Saml2_Error::PUBLIC_CERT_FILE_NOT_FOUND + ); + } + } else { + throw new OneLogin_Saml2_Error( + 'Invalid Setting: signMetadata value of the sp is not valid', + OneLogin_Saml2_Error::SETTINGS_INVALID_SYNTAX + ); } $signatureAlgorithm = $this->_security['signatureAlgorithm']; diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index f23e56c2..44bdae5a 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -391,6 +391,16 @@ public function testCheckSettings() $this->assertContains('organization_not_enought_data', $e->getMessage()); $this->assertContains('contact_type_invalid', $e->getMessage()); } + + $settingsInfo['security']['signMetadata'] = ['privateKey' => file_get_contents(TEST_ROOT . '/data/customPath/certs/metadata.key')]; + try { + $settings = new OneLogin_Saml2_Settings($settingsInfo); + $this->fail('Error was not raised'); + } catch (OneLogin_Saml2_Error $e) { + $this->assertContains('sp_signMetadata_invalid', $e->getMessage()); + $this->assertContains('organization_not_enought_data', $e->getMessage()); + $this->assertContains('contact_type_invalid', $e->getMessage()); + } } /** @@ -588,6 +598,26 @@ public function testGetSPMetadataSigned() $this->assertContains('assertContains('', $metadata2); + $cert = file_get_contents(TEST_ROOT . '/data/customPath/certs/metadata.crt'); + $settingsInfo['security']['signMetadata'] = [ + 'privateKey' => file_get_contents(TEST_ROOT . '/data/customPath/certs/metadata.key'), + 'x509cert' => $cert, + ]; + $settings3 = new OneLogin_Saml2_Settings($settingsInfo); + $metadata3 = $settings3->getSPMetadata(); + $this->assertNotEmpty($metadata3); + $this->assertContains('assertContains('entityID="http://stuff.com/endpoints/metadata.php"', $metadata3); + $this->assertContains('AuthnRequestsSigned="false"', $metadata3); + $this->assertContains('WantAssertionsSigned="false"', $metadata3); + $this->assertContains('', $metadata3); + $this->assertContains('', $metadata3); + $this->assertContains('urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', $metadata3); + $this->assertContains('', $metadata3); + $this->assertContains('', $metadata3); + $this->assertContains('assertContains('', $metadata3); + $this->assertContains(OneLogin_Saml2_Utils::formatCert($cert, false), $metadata3); } /** From ba415aa0ccf0f0b8d0174ae619b0a17766a52163 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 11 Sep 2019 02:07:07 +0200 Subject: [PATCH 095/236] Fix CI --- .travis.yml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/.travis.yml b/.travis.yml index 412b3293..f3c0a43e 100644 --- a/.travis.yml +++ b/.travis.yml @@ -1,17 +1,19 @@ language: php - +dist: trusty php: - - 5.6 - 5.5 - - 5.4 -# - 5.3 - - 7.0 - -env: - - TRAVIS=true + - 5.6 matrix: fast_finish: true + include: + - php: 5.3 + dist: precise + - php: 5.4 + dist: precise + +env: + - TRAVIS=true before_install: - composer self-update || true From 47eea7f5059ae147f152db7baf16b61a24572987 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 11 Sep 2019 02:20:59 +0200 Subject: [PATCH 096/236] Fix test for php5.3 --- tests/src/OneLogin/Saml2/LogoutRequestTest.php | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/tests/src/OneLogin/Saml2/LogoutRequestTest.php b/tests/src/OneLogin/Saml2/LogoutRequestTest.php index f48dc555..211f41ed 100644 --- a/tests/src/OneLogin/Saml2/LogoutRequestTest.php +++ b/tests/src/OneLogin/Saml2/LogoutRequestTest.php @@ -374,13 +374,15 @@ public function testGetNameIdData() $this->assertContains('NameID not found in the Logout Request', $e->getMessage()); } - $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, null, "ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c", null, OneLogin_Saml2_Constants::NAMEID_PERSISTENT, $this->_settings->getIdPData()['entityId'], $this->_settings->getSPData()['entityId']); + $idpData = $this->_settings->getIdPData(); + $spData = $this->_settings->getSPData(); + $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, null, "ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c", null, OneLogin_Saml2_Constants::NAMEID_PERSISTENT, $idpData['entityId'], $spData['entityId']); $logoutRequestStr = $logoutRequest->getXML(); $this->assertContains('ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c', $logoutRequestStr); $this->assertContains('Format="'.OneLogin_Saml2_Constants::NAMEID_PERSISTENT, $logoutRequestStr); - $this->assertContains('NameQualifier="'.$this->_settings->getIdPData()['entityId'], $logoutRequestStr); - $this->assertContains('SPNameQualifier="'.$this->_settings->getSPData()['entityId'], $logoutRequestStr); - $logoutRequest2 = new OneLogin_Saml2_LogoutRequest($this->_settings, null, "ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c", null, OneLogin_Saml2_Constants::NAMEID_ENTITY, $this->_settings->getIdPData()['entityId'], $this->_settings->getSPData()['entityId']); + $this->assertContains('NameQualifier="'.$idpData['entityId'], $logoutRequestStr); + $this->assertContains('SPNameQualifier="'.$spData['entityId'], $logoutRequestStr); + $logoutRequest2 = new OneLogin_Saml2_LogoutRequest($this->_settings, null, "ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c", null, OneLogin_Saml2_Constants::NAMEID_ENTITY, $idpData['entityId'], $spData['entityId']); $logoutRequestStr2 = $logoutRequest2->getXML(); $this->assertContains('ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c', $logoutRequestStr2); $this->assertContains('Format="'.OneLogin_Saml2_Constants::NAMEID_ENTITY, $logoutRequestStr2); From d427b07ba5150b28249eeca5029fbe5d911ee12d Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 11 Sep 2019 14:00:26 +0200 Subject: [PATCH 097/236] More fixes for PHP 5.3 --- tests/src/OneLogin/Saml2/SettingsTest.php | 42 +++++++++++------------ 1 file changed, 21 insertions(+), 21 deletions(-) diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 44bdae5a..00e3d903 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -392,7 +392,7 @@ public function testCheckSettings() $this->assertContains('contact_type_invalid', $e->getMessage()); } - $settingsInfo['security']['signMetadata'] = ['privateKey' => file_get_contents(TEST_ROOT . '/data/customPath/certs/metadata.key')]; + $settingsInfo['security']['signMetadata'] = array('privateKey' => file_get_contents(TEST_ROOT . '/data/customPath/certs/metadata.key')); try { $settings = new OneLogin_Saml2_Settings($settingsInfo); $this->fail('Error was not raised'); @@ -456,56 +456,56 @@ public function testGetSPMetadataWithX509CertNew($alwaysIncludeEncryption, $want public function testGetSPMetadataWithX509CertNewDataProvider() { - return [ - 'settings do not require encryption' => [ + return array( + 'settings do not require encryption' => array( 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => false, - ], - 'wantNameIdEncrypted setting enabled' => [ + ), + 'wantNameIdEncrypted setting enabled' => array( 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => true, - ], - 'wantAssertionsEncrypted setting enabled' => [ + ), + 'wantAssertionsEncrypted setting enabled' => array( 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, - ], - 'both settings enabled'=> [ + ), + 'both settings enabled'=> array( 'alwaysIncludeEncryption' => false, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, - ], - 'metadata requested with encryption' => [ + ), + 'metadata requested with encryption' => array( 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => true, - ], - 'metadata requested with encryption and wantNameIdEncrypted setting enabled' => [ + ), + 'metadata requested with encryption and wantNameIdEncrypted setting enabled' => array( 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => false, 'expectEncryptionKeyDescriptor' => true, - ], - 'metadata requested with encryption and wantAssertionsEncrypted setting enabled' => [ + ), + 'metadata requested with encryption and wantAssertionsEncrypted setting enabled' => array( 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => false, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, - ], - 'metadata requested with encryption and both settings enabled' => [ + ), + 'metadata requested with encryption and both settings enabled' => array( 'alwaysIncludeEncryption' => true, 'wantNameIdEncrypted' => true, 'wantAssertionsEncrypted' => true, 'expectEncryptionKeyDescriptor' => true, - ], - ]; + ), + ); } /** @@ -599,10 +599,10 @@ public function testGetSPMetadataSigned() $this->assertContains('', $metadata2); $cert = file_get_contents(TEST_ROOT . '/data/customPath/certs/metadata.crt'); - $settingsInfo['security']['signMetadata'] = [ + $settingsInfo['security']['signMetadata'] = array( 'privateKey' => file_get_contents(TEST_ROOT . '/data/customPath/certs/metadata.key'), 'x509cert' => $cert, - ]; + ); $settings3 = new OneLogin_Saml2_Settings($settingsInfo); $metadata3 = $settings3->getSPMetadata(); $this->assertNotEmpty($metadata3); From 2aaa5aaa9aa6d6887fbd15be0013dd7fac793fc9 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 11 Sep 2019 15:55:25 +0200 Subject: [PATCH 098/236] Release 2.17.0 --- CHANGELOG | 6 ++++++ README.md | 2 ++ lib/Saml2/version.json | 4 ++-- 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index e0dc4fd2..7e240dcc 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,11 @@ CHANGELOG ========= +v.2.17.0 +* Set true as the default value for strict setting +* Support 'x509cert' and 'privateKey' on signMetadata security settings +* Relax comparision of false on SignMetadata +* Fix CI + v.2.16.0 * Support SLO ResponseLocation * [#344](https://github.com/onelogin/php-saml/issues/344) Raise errors on IdPMetadataParser::parseRemoteXML and IdPMetadataParser::parseFileXML diff --git a/README.md b/README.md index dd0a868b..12289672 100644 --- a/README.md +++ b/README.md @@ -12,6 +12,8 @@ and supported by OneLogin Inc. Warning ------- +Version 2.17.0 sets strict mode active by default + Update php-saml to 2.15.0, this version includes a security patch related to XEE attacks php-saml is not affected by [201803-01](https://simplesamlphp.org/security/201803-01) diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 112ca458..2dcd57f4 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.16.0", - "released": "24/06/2019" + "version": "2.17.0", + "released": "11/09/2019" } } From a965cd72d9c317187606ba9cba319c848fac15db Mon Sep 17 00:00:00 2001 From: Davide Porrovecchio Date: Tue, 1 Oct 2019 10:13:05 +0200 Subject: [PATCH 099/236] Add 'destinationStrictlyMatches' option --- README.md | 6 ++++++ advanced_settings_example.php | 6 ++++++ lib/Saml2/Settings.php | 5 +++++ 3 files changed, 17 insertions(+) diff --git a/README.md b/README.md index 12289672..f1acba7b 100644 --- a/README.md +++ b/README.md @@ -509,6 +509,12 @@ $advancedSettings = array ( // attribute will not be rejected for this fact. 'relaxDestinationValidation' => false, + // If true, Destination URL should strictly match to the address to + // which the response has been sent. + // Notice that if 'relaxDestinationValidation' is true an empty Destintation + // will be accepted. + 'destinationStrictlyMatches' => false, + // Algorithm that the toolkit will use on signing process. Options: // 'http://www.w3.org/2000/09/xmldsig#rsa-sha1' // 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' diff --git a/advanced_settings_example.php b/advanced_settings_example.php index 99d0c044..4350765a 100644 --- a/advanced_settings_example.php +++ b/advanced_settings_example.php @@ -85,6 +85,12 @@ // attribute will not be rejected for this fact. 'relaxDestinationValidation' => false, + // If true, Destination URL should strictly match to the address to + // which the response has been sent. + // Notice that if 'relaxDestinationValidation' is true an empty Destintation + // will be accepted. + 'destinationStrictlyMatches' => false, + // Algorithm that the toolkit will use on signing process. Options: // 'http://www.w3.org/2000/09/xmldsig#rsa-sha1' // 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 67410cf0..de721473 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -385,6 +385,11 @@ private function _addDefaultValues() $this->_security['relaxDestinationValidation'] = false; } + // Strict Destination match validation + if (!isset($this->_security['destinationStrictlyMatches'])) { + $this->_security['destinationStrictlyMatches'] = false; + } + // encrypt expected if (!isset($this->_security['wantAssertionsEncrypted'])) { $this->_security['wantAssertionsEncrypted'] = false; From 6feb4b34be5d35931e887a68aca92a6accd058a8 Mon Sep 17 00:00:00 2001 From: Davide Porrovecchio Date: Tue, 1 Oct 2019 10:15:14 +0200 Subject: [PATCH 100/236] Add strict verification for destination --- lib/Saml2/Response.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 55e480d6..adcd4cb8 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -234,10 +234,12 @@ public function isValid($requestId = null) ); } } else { - if (strpos($destination, $currentURL) !== 0) { + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURL); + if (strncmp($destination, $currentURL, $urlComparisonLength) !== 0) { $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURLNoRouted); - if (strpos($destination, $currentURLNoRouted) !== 0) { + if (strncmp($destination, $currentURLNoRouted, $urlComparisonLength) !== 0) { throw new OneLogin_Saml2_ValidationError( "The response was received at $currentURL instead of $destination", OneLogin_Saml2_ValidationError::WRONG_DESTINATION From f52248e008fbad5f12787e134bbb08d363c6964c Mon Sep 17 00:00:00 2001 From: Davide Porrovecchio Date: Tue, 1 Oct 2019 10:15:37 +0200 Subject: [PATCH 101/236] Add strict destination test --- .../invalid_strict_destination.xml.base64 | 1 + tests/src/OneLogin/Saml2/ResponseTest.php | 22 +++++++++++++++++++ 2 files changed, 23 insertions(+) create mode 100644 tests/data/responses/invalids/invalid_strict_destination.xml.base64 diff --git a/tests/data/responses/invalids/invalid_strict_destination.xml.base64 b/tests/data/responses/invalids/invalid_strict_destination.xml.base64 new file mode 100644 index 00000000..53aebd6a --- /dev/null +++ b/tests/data/responses/invalids/invalid_strict_destination.xml.base64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 54097a42..db778366 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -1011,6 +1011,10 @@ public function testIsInValidWrongXML() */ public function testIsInValidDestination() { + $_SERVER['HTTP_HOST'] = 'stuff.com'; + $_SERVER['HTTPS'] = 'https'; + $_SERVER['REQUEST_URI'] = '/endpoints/endpoints/acs.php'; + $xml = file_get_contents(TEST_ROOT . '/data/responses/unsigned_response.xml.base64'); $response = new OneLogin_Saml2_Response($this->_settings, $xml); @@ -1031,10 +1035,28 @@ public function testIsInValidDestination() $this->assertEquals('The response has an empty Destination value', $response3->getError()); include TEST_ROOT .'/settings/settings1.php'; + $settingsInfo['strict'] = true; $settingsInfo['security']['relaxDestinationValidation'] = true; $settings = new OneLogin_Saml2_Settings($settingsInfo); $response4 = new OneLogin_Saml2_Response($settings, $xml2); $this->assertTrue($response4->isValid()); + + // Destination strict match + $xml3 = file_get_contents(TEST_ROOT . '/data/responses/invalids/invalid_strict_destination.xml.base64'); + $response5 = new OneLogin_Saml2_Response($settings, $xml3); + $this->assertTrue($response5->isValid()); + + $settingsInfo['security']['destinationStrictlyMatches'] = true; + $settings2 = new OneLogin_Saml2_Settings($settingsInfo); + $response6 = new OneLogin_Saml2_Response($settings2, $xml3); + $this->assertFalse($response6->isValid()); + $this->assertContains('The response was received at', $response6->getError()); + + unset($settingsInfo['strict']); + unset($settingsInfo['security']['destinationStrictlyMatches']); + unset($_SERVER['HTTP_HOST']); + unset($_SERVER['HTTPS']); + unset($_SERVER['REQUEST_URI']); } /** From 78ac9f404c3fce525b70998eedf67fcf811ad641 Mon Sep 17 00:00:00 2001 From: Davide Porrovecchio Date: Tue, 1 Oct 2019 10:15:57 +0200 Subject: [PATCH 102/236] Fix empty destination test saml response --- tests/data/responses/invalids/empty_destination.xml.base64 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/data/responses/invalids/empty_destination.xml.base64 b/tests/data/responses/invalids/empty_destination.xml.base64 index c41dc637..2b16b213 100644 --- a/tests/data/responses/invalids/empty_destination.xml.base64 +++ b/tests/data/responses/invalids/empty_destination.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file 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 \ No newline at end of file From c898e943fdf2fe5e249d0485219ff60a1792cd8e Mon Sep 17 00:00:00 2001 From: Davide Porrovecchio Date: Sat, 5 Oct 2019 12:18:31 +0200 Subject: [PATCH 103/236] Add keys to SettingsTest --- tests/src/OneLogin/Saml2/SettingsTest.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 00e3d903..561e774f 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -919,6 +919,8 @@ public function testGetSecurityData() $this->assertArrayHasKey('requestedAuthnContext', $security); $this->assertArrayHasKey('wantXMLValidation', $security); $this->assertArrayHasKey('wantNameId', $security); + $this->assertArrayHasKey('relaxDestinationValidation', $security); + $this->assertArrayHasKey('destinationStrictlyMatches', $security); } /** From 791066ad7284970bb970e31ec8cbcbf1c466eb66 Mon Sep 17 00:00:00 2001 From: Vitalii Shtykno Date: Tue, 15 Oct 2019 16:58:50 +0300 Subject: [PATCH 104/236] Remove Comparison atribute for empty value --- lib/Saml2/AuthnRequest.php | 9 +++++++-- tests/src/OneLogin/Saml2/AuthnRequestTest.php | 8 ++++++++ 2 files changed, 15 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/AuthnRequest.php b/lib/Saml2/AuthnRequest.php index 2da1046e..fc6d3237 100644 --- a/lib/Saml2/AuthnRequest.php +++ b/lib/Saml2/AuthnRequest.php @@ -111,15 +111,20 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal $authnComparison = $security['requestedAuthnContextComparison']; } + $authnComparisonAttr = ''; + if (!empty($authnComparison)) { + $authnComparisonAttr = sprintf('Comparison="%s"', $authnComparison); + } + if ($security['requestedAuthnContext'] === true) { $requestedAuthnStr = << + urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport REQUESTEDAUTHN; } else { - $requestedAuthnStr .= " \n"; + $requestedAuthnStr .= " \n"; foreach ($security['requestedAuthnContext'] as $contextValue) { $requestedAuthnStr .= " ".$contextValue."\n"; } diff --git a/tests/src/OneLogin/Saml2/AuthnRequestTest.php b/tests/src/OneLogin/Saml2/AuthnRequestTest.php index 7d1ab056..f3eea822 100644 --- a/tests/src/OneLogin/Saml2/AuthnRequestTest.php +++ b/tests/src/OneLogin/Saml2/AuthnRequestTest.php @@ -94,6 +94,14 @@ public function testAuthNContext() $decoded5 = base64_decode($encodedRequest5); $request5 = gzinflate($decoded5); $this->assertContains('', $request5); + + $settingsInfo['security']['requestedAuthnContextComparison'] = ''; + $settings6 = new OneLogin_Saml2_Settings($settingsInfo); + $authnRequest6 = new OneLogin_Saml2_AuthnRequest($settings6); + $encodedRequest6 = $authnRequest6->getRequest(); + $decoded6 = base64_decode($encodedRequest6); + $request6 = gzinflate($decoded6); + $this->assertContains('', $request6); } /** From d868c41533d68627557942795bdf55a7902a7ce6 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 6 Nov 2019 17:23:58 +0100 Subject: [PATCH 105/236] Update xmlseclibs to 3.0.4 --- extlib/xmlseclibs/xmlseclibs.php | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/extlib/xmlseclibs/xmlseclibs.php b/extlib/xmlseclibs/xmlseclibs.php index bd3caa5f..d1095c8a 100644 --- a/extlib/xmlseclibs/xmlseclibs.php +++ b/extlib/xmlseclibs/xmlseclibs.php @@ -2,7 +2,7 @@ /** * xmlseclibs.php * - * Copyright (c) 2007-2015, Robert Richards . + * Copyright (c) 2007-2019, Robert Richards . * All rights reserved. * * Redistribution and use in source and binary forms, with or without @@ -35,9 +35,9 @@ * POSSIBILITY OF SUCH DAMAGE. * * @author Robert Richards - * @copyright 2007-2015 Robert Richards + * @copyright 2007-2019 Robert Richards * @license http://www.opensource.org/licenses/bsd-license.php BSD License - * @version 2.0.0 modified + * @version 3.0.4 modified */ class XMLSecurityKey { @@ -589,6 +589,11 @@ public function locateSignature($objDoc, $pos=0) { $query = ".//secdsig:Signature"; $nodeset = $xpath->query($query, $objDoc); $this->sigNode = $nodeset->item($pos); + $query = "./secdsig:SignedInfo"; + $nodeset = $xpath->query($query, $this->sigNode); + if ($nodeset->length > 1) { + throw new Exception("Invalid structure - Too many SignedInfo elements found"); + } return $this->sigNode; } return null; @@ -675,6 +680,9 @@ public function canonicalizeSignedInfo() { $xpath = $this->getXPathObj(); $query = "./secdsig:SignedInfo"; $nodeset = $xpath->query($query, $this->sigNode); + if ($nodeset->length > 1) { + throw new Exception("Invalid structure - Too many SignedInfo elements found"); + } if ($signInfoNode = $nodeset->item(0)) { $query = "./secdsig:CanonicalizationMethod"; $nodeset = $xpath->query($query, $signInfoNode); @@ -790,7 +798,7 @@ public function processTransforms($refNode, $objData, $includeCommentNodes = tru if ($node->localName == 'XPath') { $arXPath = array(); $arXPath['query'] = '(.//. | .//@* | .//namespace::*)['.$node->nodeValue.']'; - $arXpath['namespaces'] = array(); + $arXPath['namespaces'] = array(); $nslist = $xpath->query('./namespace::*', $node); foreach ($nslist AS $nsnode) { if ($nsnode->localName != "xml") { @@ -888,7 +896,7 @@ public function getRefIDs() { $refids = array(); $xpath = $this->getXPathObj(); - $query = "./secdsig:SignedInfo/secdsig:Reference"; + $query = "./secdsig:SignedInfo[1]/secdsig:Reference"; $nodeset = $xpath->query($query, $this->sigNode); if ($nodeset->length == 0) { throw new Exception("Reference nodes not found"); @@ -905,7 +913,7 @@ public function validateReference() { $this->sigNode->parentNode->removeChild($this->sigNode); } $xpath = $this->getXPathObj(); - $query = "./secdsig:SignedInfo/secdsig:Reference"; + $query = "./secdsig:SignedInfo[1]/secdsig:Reference"; $nodeset = $xpath->query($query, $this->sigNode); if ($nodeset->length == 0) { throw new Exception("Reference nodes not found"); From 0c44b699c12e7d5296f13d1ba3620792b2e89895 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 6 Nov 2019 17:25:01 +0100 Subject: [PATCH 106/236] Release 2.17.1 --- CHANGELOG | 4 ++++ lib/Saml2/version.json | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 7e240dcc..152ebdf3 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,9 @@ CHANGELOG ========= +v.2.17.1 +* Update xmlseclibs to 3.0.4 +* Remove Comparison atribute from RequestedAuthnContext when setting has empty value + v.2.17.0 * Set true as the default value for strict setting * Support 'x509cert' and 'privateKey' on signMetadata security settings diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 2dcd57f4..7c74ba40 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.17.0", - "released": "11/09/2019" + "version": "2.17.1", + "released": "06/11/2019" } } From aa7e0f24cf287d44f618f7634b8464a3b4645472 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 6 Nov 2019 17:32:50 +0100 Subject: [PATCH 107/236] Add notification about CVE-2019-3465 --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 12289672..34de15c0 100644 --- a/README.md +++ b/README.md @@ -12,6 +12,8 @@ and supported by OneLogin Inc. Warning ------- +Version 2.17.1 updates xmlseclibs to 3.0.4 (CVE-2019-3465), but php-saml was not directly affected since it implements additional checks that prevent to exploit that vulnerability. + Version 2.17.0 sets strict mode active by default Update php-saml to 2.15.0, this version includes a security patch related to XEE attacks From edbab290b39656fef77b0b95535b8fa60e6915bb Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 8 Nov 2019 18:36:45 +0100 Subject: [PATCH 108/236] Update xmlseclibs changelog --- extlib/xmlseclibs/CHANGELOG.txt | 64 ++++++++++++++++++++++++++++++--- extlib/xmlseclibs/LICENSE | 2 +- 2 files changed, 61 insertions(+), 5 deletions(-) diff --git a/extlib/xmlseclibs/CHANGELOG.txt b/extlib/xmlseclibs/CHANGELOG.txt index c0b8cfe4..642fcda8 100644 --- a/extlib/xmlseclibs/CHANGELOG.txt +++ b/extlib/xmlseclibs/CHANGELOG.txt @@ -1,8 +1,64 @@ xmlseclibs.php -??, ??? ????, 2.0.0 -Features: -- Support for locating specific signature when multiple exist in - document. (griga3k) + +06, Nov 2019, 3.0.4 +Security Improvements: +- Insure only a single SignedInfo element exists within a signature during + verification. Refs CVE-2019-3465. +Bug Fixes: +- Fix variable casing. + +15, Nov 2018, 3.0.3 +Bug Fixes: +- Fix casing of class name. (Willem Stuursma-Ruwen) +- Fix Xpath casing. (Tim van Dijen) + +Improvements: +- Make PCRE2 compliant. (Stefan Winter) +- Add PHP 7.3 support. (Stefan Winter) + +27, Sep 2018, 3.0.2 +Security Improvements: +- OpenSSL is now a requirement rather than suggestion. (Slaven Bacelic) +- Filter input to avoid XPath injection. (Jaime Pérez) + +Bug Fixes: +- Fix missing parentheses (Tim van Dijen) + +Improvements: +- Use strict comparison operator to compare digest values. (Jaime Pérez) +- Remove call to file_get_contents that doesn't even work. (Jaime Pérez) +- Document potentially dangerous return value behaviour. (Thijs Kinkhorst) + +31, Aug 2017, 3.0.1 +Bug Fixes: +- Fixed missing () in function call. (Dennis Væversted) + +Improvements: +- Add OneLogin to supported software. +- Add .gitattributes to remove unneeded files. (Filippo Tessarotto) +- Fix bug in example code. (Dan Church) +- Travis: add PHP 7.1, move hhvm to allowed failures. (Thijs Kinkhorst) +- Drop failing extract-win-cert test (Thijs Kinkhorst). (Thijs Kinkhorst) +- Add comments to warn about return values of verify(). (Thijs Kinkhorst) +- Fix tests to properly check return code of verify(). (Thijs Kinkhorst) +- Restore support for PHP >= 5.4. (Jaime Pérez) + +25, May 2017, 3.0.0 +Improvements: +- Remove use of mcrypt (skymeyer) + +08, Sep 2016, 2.0.1 +Bug Fixes: +- Strip whitespace characters when parsing X509Certificate. fixes #84 + (klemen.bratec) +- Certificate 'subject' values can be arrays. fixes #80 (Andreas Stangl) +- HHVM signing node with ID attribute w/out namespace regenerates ID value. + fixes #88 (Milos Tomic) + +Improvements: +- Fix typos and add some PHPDoc Blocks. (gfaust-qb) +- Update lightSAML link. (Milos Tomic) +- Update copyright dates. 23, Jun 2015, 1.4.0 Features: diff --git a/extlib/xmlseclibs/LICENSE b/extlib/xmlseclibs/LICENSE index 2a102b76..0ca76899 100644 --- a/extlib/xmlseclibs/LICENSE +++ b/extlib/xmlseclibs/LICENSE @@ -1,4 +1,4 @@ -Copyright (c) 2007-2013, Robert Richards . +Copyright (c) 2007-2019, Robert Richards . All rights reserved. Redistribution and use in source and binary forms, with or without From 5ab552a060926bb7178aa8f8a75667f70fd7ead6 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 8 Nov 2019 18:38:29 +0100 Subject: [PATCH 109/236] Check destination against the getSelfURLNoQuery as well on LogoutRequest and LogoutResponse as we do on Response --- lib/Saml2/LogoutRequest.php | 14 +++++++++----- lib/Saml2/LogoutResponse.php | 14 +++++++++----- 2 files changed, 18 insertions(+), 10 deletions(-) diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index e1523903..4217f1ae 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -365,11 +365,15 @@ public function isValid($retrieveParametersFromServer = false) // Check destination if ($dom->documentElement->hasAttribute('Destination')) { $destination = $dom->documentElement->getAttribute('Destination'); - if (!empty($destination) && strpos($destination, $currentURL) === false) { - throw new OneLogin_Saml2_ValidationError( - "The LogoutRequest was received at $currentURL instead of $destination", - OneLogin_Saml2_ValidationError::WRONG_DESTINATION - ); + if (!empty($destination) && strpos($destination, $currentURL) !== 0) { + $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + + if (strpos($destination, $currentURLNoRouted) !== 0) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutRequest was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); + } } } diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index 20f582a1..3411b007 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -161,11 +161,15 @@ public function isValid($requestId = null, $retrieveParametersFromServer = false // Check destination if ($this->document->documentElement->hasAttribute('Destination')) { $destination = $this->document->documentElement->getAttribute('Destination'); - if (!empty($destination) && strpos($destination, $currentURL) === false) { - throw new OneLogin_Saml2_ValidationError( - "The LogoutResponse was received at $currentURL instead of $destination", - OneLogin_Saml2_ValidationError::WRONG_DESTINATION - ); + if (!empty($destination) && strpos($destination, $currentURL) !== 0) { + $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + + if (strpos($destination, $currentURLNoRouted) !== 0) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutResponse was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); + } } } From 36aa9554335b2eb07f5add4929a5d4c35499bc19 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 8 Nov 2019 18:39:15 +0100 Subject: [PATCH 110/236] Improve getSelfRoutedURLNoQuery method --- lib/Saml2/Utils.php | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 248b954c..f2747110 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -626,7 +626,7 @@ public static function getSelfRoutedURLNoQuery() if (!empty($_SERVER['REQUEST_URI'])) { $route = $_SERVER['REQUEST_URI']; if (!empty($_SERVER['QUERY_STRING'])) { - $route = str_replace($_SERVER['QUERY_STRING'], '', $route); + $route = self::str_lreplace($_SERVER['QUERY_STRING'], '', $route); if (substr($route, -1) == '?') { $route = substr($route, 0, -1); } @@ -639,9 +639,26 @@ public static function getSelfRoutedURLNoQuery() } $selfRoutedURLNoQuery = $selfURLhost . $route; + + $pos = strpos($selfRoutedURLNoQuery, "?"); + if ($pos !== false) { + $selfRoutedURLNoQuery = substr($selfRoutedURLNoQuery, 0, $pos-1); + } + return $selfRoutedURLNoQuery; } + public static function str_lreplace($search, $replace, $subject) + { + $pos = strrpos($subject, $search); + + if ($pos !== false) { + $subject = substr_replace($subject, $replace, $pos, strlen($search)); + } + + return $subject; + } + /** * Returns the URL of the current host + current view + query. * From 61f4df58b3d33870fb478779155e72595af084aa Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 8 Nov 2019 21:15:35 +0100 Subject: [PATCH 111/236] Fix #407 Only add responseUrl to the settings if ResponseLocation present --- lib/Saml2/IdPMetadataParser.php | 5 ++++- tests/src/OneLogin/Saml2/IdPMetadataParserTest.php | 5 ----- 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index 7d2220d6..ca385644 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -142,9 +142,12 @@ public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = n if ($sloNodes->length > 0) { $metadataInfo['idp']['singleLogoutService'] = array( 'url' => $sloNodes->item(0)->getAttribute('Location'), - 'responseUrl' => $sloNodes->item(0)->getAttribute('ResponseLocation'), 'binding' => $sloNodes->item(0)->getAttribute('Binding') ); + + if ($sloNodes->item(0)->hasAttribute('ResponseLocation')) { + $metadataInfo['idp']['singleLogoutService']['responseUrl'] = $sloNodes->item(0)->getAttribute('ResponseLocation'); + } } $keyDescriptorCertSigningNodes = OneLogin_Saml2_Utils::query($dom, './md:KeyDescriptor[not(contains(@use, "encryption"))]/ds:KeyInfo/ds:X509Data/ds:X509Certificate', $idpDescriptor); diff --git a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php index 1198176a..797b5c75 100644 --- a/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php +++ b/tests/src/OneLogin/Saml2/IdPMetadataParserTest.php @@ -21,7 +21,6 @@ public function testParseFileXML() ), 'singleLogoutService' => array ( 'url' => 'https://example.onelogin.com/trust/saml2/http-redirect/slo/645460', - 'responseUrl' => '', 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect' ), 'x509cert' => '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' @@ -182,7 +181,6 @@ public function testParseDesiredBindingAll() ), "singleLogoutService" => array( "url" => "http://idp.example.com/logout", - 'responseUrl' => '', "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" ) ) @@ -300,7 +298,6 @@ public function testParseMultiCerts() "idp" => array( "singleLogoutService" => array( "url" => "https://idp.examle.com/saml/slo", - 'responseUrl' => '', "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" ), "x509certMulti" => array( @@ -340,7 +337,6 @@ public function testParseMultiSigningCerts() "idp" => array( "singleLogoutService" => array( "url" => "https://idp.examle.com/saml/slo", - 'responseUrl' => '', "binding" => "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" ), "x509certMulti" => array( @@ -440,7 +436,6 @@ public function testInjectIntoSettings() ), 'singleLogoutService' => array ( 'url' => 'https://idp.adfs.example.com/adfs/ls/', - 'responseUrl' => '', 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect' ), 'x509certMulti' => array ( From 6af4a7bdbc03a4f66df9601b0100b1edd3567f9e Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Sat, 9 Nov 2019 08:26:40 +0100 Subject: [PATCH 112/236] Fix #395 Bad use of on static method validateBinarySign --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index f2747110..ddcea66f 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -1549,7 +1549,7 @@ public static function validateBinarySign($messageType, $getData, $idpData, $ret } } - if ($objKey->verifySignature($signedQuery, base64_decode($_GET['Signature'])) === 1) { + if ($objKey->verifySignature($signedQuery, base64_decode($getData['Signature'])) === 1) { $signatureValid = true; break; } From 4ff22ef9ece38839e798313e95e882432857ac94 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Sat, 9 Nov 2019 08:35:25 +0100 Subject: [PATCH 113/236] Fix #391 Invalid error message when assertion and nameid was encrypted --- lib/Saml2/Response.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 55e480d6..48c92275 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -354,7 +354,7 @@ public function isValid($requestId = null) $encryptedIDNodes = OneLogin_Saml2_Utils::query($this->decryptedDocument, '/samlp:Response/saml:Assertion/saml:Subject/saml:EncryptedID'); if ($encryptedIDNodes->length > 0) { throw new OneLogin_Saml2_ValidationError( - 'Unsigned SAML Response that contains a signed and encrypted Assertion with encrypted nameId is not supported.', + 'SAML Response that contains a an encrypted Assertion with encrypted nameId is not supported.', OneLogin_Saml2_ValidationError::NOT_SUPPORTED ); } @@ -756,7 +756,7 @@ public function getAttributesWithFriendlyName() * * @throws OneLogin_Saml2_ValidationError */ - private function _getAttributesByKeyName($keyName="Name") + private function _getAttributesByKeyName($keyName = "Name") { $attributes = array(); @@ -1148,7 +1148,7 @@ protected function _decryptAssertion($dom) /** * After execute a validation process, if fails this method returns the cause * - * @return string Cause + * @return string Cause */ public function getError() { From 0c557b45dde31300f239a65a429481f0e05e3942 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Sun, 10 Nov 2019 10:01:24 +0100 Subject: [PATCH 114/236] Fix #386. Support rejecting unsolicited SAMLResponses. Reject SAMLResponse if requestID was provided to the validotr but the InResponseTo attributeof the SAMLResponse is missing --- README.md | 6 ++ advanced_settings_example.php | 4 ++ lib/Saml2/Response.php | 21 ++++++- lib/Saml2/Settings.php | 5 ++ lib/Saml2/version.json | 2 +- .../invalid_unpaired_inresponsesto.xml.base64 | 1 + tests/src/OneLogin/Saml2/ResponseTest.php | 63 +++++++++++++++++++ 7 files changed, 98 insertions(+), 4 deletions(-) create mode 100644 tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 diff --git a/README.md b/README.md index 34de15c0..fa25e8de 100644 --- a/README.md +++ b/README.md @@ -12,6 +12,8 @@ and supported by OneLogin Inc. Warning ------- +Version 2.18.0 introduces the 'rejectUnsolicitedResponsesWithInResponseTo' setting parameter, by default disabled, that will allow invalidate unsolicited SAMLResponse. This version as well will reject SAMLResponse if requestId was provided to the validator but the SAMLResponse does not contain a InResponseTo attribute. + Version 2.17.1 updates xmlseclibs to 3.0.4 (CVE-2019-3465), but php-saml was not directly affected since it implements additional checks that prevent to exploit that vulnerability. Version 2.17.0 sets strict mode active by default @@ -511,6 +513,10 @@ $advancedSettings = array ( // attribute will not be rejected for this fact. 'relaxDestinationValidation' => false, + // If true, SAMLResponses with an InResponseTo value will be rejectd if not + // AuthNRequest ID provided to the validation method. + 'rejectUnsolicitedResponsesWithInResponseTo' => false, + // Algorithm that the toolkit will use on signing process. Options: // 'http://www.w3.org/2000/09/xmldsig#rsa-sha1' // 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' diff --git a/advanced_settings_example.php b/advanced_settings_example.php index 99d0c044..1bb6c832 100644 --- a/advanced_settings_example.php +++ b/advanced_settings_example.php @@ -85,6 +85,10 @@ // attribute will not be rejected for this fact. 'relaxDestinationValidation' => false, + // If true, SAMLResponses with an InResponseTo value will be rejectd if not + // AuthNRequest ID provided to the validation method. + 'rejectUnsolicitedResponsesWithInResponseTo' => false, + // Algorithm that the toolkit will use on signing process. Options: // 'http://www.w3.org/2000/09/xmldsig#rsa-sha1' // 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 48c92275..15ec846b 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -166,18 +166,33 @@ public function isValid($requestId = null) $currentURL = OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery(); + $responseInResponseTo = null; if ($this->document->documentElement->hasAttribute('InResponseTo')) { $responseInResponseTo = $this->document->documentElement->getAttribute('InResponseTo'); } - // Check if the InResponseTo of the Response matchs the ID of the AuthNRequest (requestId) if provided - if (isset($requestId) && isset($responseInResponseTo) && $requestId != $responseInResponseTo) { + if (!isset($requestId) && isset($responseInResponseTo) && $security['rejectUnsolicitedResponsesWithInResponseTo']) { throw new OneLogin_Saml2_ValidationError( - "The InResponseTo of the Response: $responseInResponseTo, does not match the ID of the AuthNRequest sent by the SP: $requestId", + "The Response has an InResponseTo attribute: " . $responseInResponseTo . " while no InResponseTo was expected", OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO ); } + // Check if the InResponseTo of the Response matchs the ID of the AuthNRequest (requestId) if provided + if (isset($requestId) && $requestId != $responseInResponseTo) { + if ($responseInResponseTo == null) { + throw new OneLogin_Saml2_ValidationError( + "No InResponseTo at the Response, but it was provided the requestId related to the AuthNRequest sent by the SP: $requestId", + OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO + ); + } else { + throw new OneLogin_Saml2_ValidationError( + "The InResponseTo of the Response: $responseInResponseTo, does not match the ID of the AuthNRequest sent by the SP: $requestId", + OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO + ); + } + } + if (!$this->encrypted && $security['wantAssertionsEncrypted']) { throw new OneLogin_Saml2_ValidationError( "The assertion of the Response is not encrypted and the SP requires it", diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index 67410cf0..e8cf78bb 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -385,6 +385,11 @@ private function _addDefaultValues() $this->_security['relaxDestinationValidation'] = false; } + // InResponseTo + if (!isset($this->_security['rejectUnsolicitedResponsesWithInResponseTo'])) { + $this->_security['rejectUnsolicitedResponsesWithInResponseTo'] = false; + } + // encrypt expected if (!isset($this->_security['wantAssertionsEncrypted'])) { $this->_security['wantAssertionsEncrypted'] = false; diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 7c74ba40..9f151295 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.17.1", + "version": "2.18.0", "released": "06/11/2019" } } diff --git a/tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 b/tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 new file mode 100644 index 00000000..87ce60fc --- /dev/null +++ b/tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 54097a42..5d1f7436 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -1280,6 +1280,69 @@ public function testIsInValidRequestId() $this->assertContains('No Signature found. SAML Response rejected', $response2->getError()); } + /** + * Tests the isValid method of the OneLogin_Saml2_Response class + * Case Invalid Response, Unexpected InResponseTo + * + * @covers OneLogin_Saml2_Response::isValid + */ + public function testIsInValidUnexpectedInResponseTo() + { + $xml = file_get_contents(TEST_ROOT . '/data/responses/unsigned_response.xml.base64'); + + $plainMessage = base64_decode($xml); + $currentURL = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $plainMessage = str_replace('http://stuff.com/endpoints/endpoints/acs.php', $currentURL, $plainMessage); + $message = base64_encode($plainMessage); + + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + $settingsInfo['security']['rejectUnsolicitedResponsesWithInResponseTo'] = true; + $settingsInfo['strict'] = true; + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $response = new OneLogin_Saml2_Response($settings, $message); + + $inResponseTo = "_57bcbf70-7b1f-012e-c821-782bcb13bb38"; + + $response->isValid(); + $this->assertEquals('The Response has an InResponseTo attribute: '.$inResponseTo.' while no InResponseTo was expected', $response->getError()); + + $response->isValid($inResponseTo); + $this->assertContains('No Signature found. SAML Response rejected', $response->getError()); + } + + /** + * Tests the isValid method of the OneLogin_Saml2_Response class + * Case Invalid Response, No InResponseTo + * + * @covers OneLogin_Saml2_Response::isValid + */ + public function testIsInValidNoInResponseTo() + { + $xml = file_get_contents(TEST_ROOT . '/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64'); + + $plainMessage = base64_decode($xml); + $currentURL = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $plainMessage = str_replace('http://stuff.com/endpoints/endpoints/acs.php', $currentURL, $plainMessage); + $message = base64_encode($plainMessage); + + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + $settingsInfo['security']['rejectUnsolicitedResponsesWithInResponseTo'] = true; + $settingsInfo['strict'] = true; + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $response = new OneLogin_Saml2_Response($settings, $message); + + $inResponseTo = "_57bcbf70-7b1f-012e-c821-782bcb13bb38"; + + $response->isValid(); + $this->assertContains('No Signature found. SAML Response rejected', $response->getError()); + + $response->isValid($inResponseTo); + $this->assertEquals('No InResponseTo at the Response, but it was provided the requestId related to the AuthNRequest sent by the SP: '.$inResponseTo, $response->getError()); + } /** * Tests the isValid method of the OneLogin_Saml2_Response class From c0bf17218081ed575dc21b2882568c4ee0276c81 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Sun, 10 Nov 2019 10:25:17 +0100 Subject: [PATCH 115/236] Add additional way to get the toolkit: git clone --- README.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index fa25e8de..f1e8ea62 100644 --- a/README.md +++ b/README.md @@ -104,7 +104,11 @@ Since [PHP 5.3 is officially unsupported](http://php.net/eol.php) we recommend y ### Code ### -#### Option 1. Download from github #### +#### Option 1. clone the repository from github #### + +git clone git@github.com:onelogin/php-saml.git + +#### Option 2. Download from github #### The toolkit is hosted on github. You can download it from: @@ -115,7 +119,10 @@ Copy the core of the library inside the php application. (each application has i structure so take your time to locate the PHP SAML toolkit in the best place). See the "Guide to add SAML support to my app" to know how. -#### Option 2. Composer #### +Take in mind that the compressed file only contains the main files. +If you plan to play with the demos, use the Option 1. + +#### Option 3. Composer #### The toolkit supports [composer](https://getcomposer.org/). You can find the `onelogin/php-saml` package at https://packagist.org/packages/onelogin/php-saml From c5b05cd9cc7bed1c81c2f37ef6e3eef2cb2b3ac7 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 13 Nov 2019 15:58:14 +0100 Subject: [PATCH 116/236] Update changelog --- CHANGELOG | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index 152ebdf3..ccdba903 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,14 @@ CHANGELOG ========= +v.2.18.0 +* Support rejecting unsolicited SAMLResponses. +* Reject SAMLResponse if requestID was provided to the validotr but the InResponseTo attributeof the SAMLResponse is missing +* Check destination against the getSelfURLNoQuery as well on LogoutRequest and LogoutResponse as we do on Response +* Improve getSelfRoutedURLNoQuery method +* Only add responseUrl to the settings if ResponseLocation present in the IdPMetadataParser +* Remove use of $_GET on static method validateBinarySign +* Fix error message when Assertion and NameId are both encrypted (not supported) + v.2.17.1 * Update xmlseclibs to 3.0.4 * Remove Comparison atribute from RequestedAuthnContext when setting has empty value From e163da23e814d7569a8b723e4c6a72b2186c80ba Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 13 Nov 2019 16:43:01 +0100 Subject: [PATCH 117/236] Ability to set custom schema path --- lib/Saml2/LogoutRequest.php | 2 +- lib/Saml2/LogoutResponse.php | 2 +- lib/Saml2/Response.php | 4 ++-- lib/Saml2/Settings.php | 18 ++++++++++++++++-- lib/Saml2/Utils.php | 14 ++++++++++---- tests/src/OneLogin/Saml2/SettingsTest.php | 18 ++++++++++++++++-- 6 files changed, 46 insertions(+), 12 deletions(-) diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index 4217f1ae..b9c6bfcf 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -340,7 +340,7 @@ public function isValid($retrieveParametersFromServer = false) $security = $this->_settings->getSecurityData(); if ($security['wantXMLValidation']) { - $res = OneLogin_Saml2_Utils::validateXML($dom, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive()); + $res = OneLogin_Saml2_Utils::validateXML($dom, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); if (!$res instanceof DOMDocument) { throw new OneLogin_Saml2_ValidationError( "Invalid SAML Logout Request. Not match the saml-schema-protocol-2.0.xsd", diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index 3411b007..39bbf9fc 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -127,7 +127,7 @@ public function isValid($requestId = null, $retrieveParametersFromServer = false $security = $this->_settings->getSecurityData(); if ($security['wantXMLValidation']) { - $res = OneLogin_Saml2_Utils::validateXML($this->document, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive()); + $res = OneLogin_Saml2_Utils::validateXML($this->document, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); if (!$res instanceof DOMDocument) { throw new OneLogin_Saml2_ValidationError( "Invalid SAML Logout Response. Not match the saml-schema-protocol-2.0.xsd", diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 15ec846b..29979faf 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -143,7 +143,7 @@ public function isValid($requestId = null) if ($security['wantXMLValidation']) { $errorXmlMsg = "Invalid SAML Response. Not match the saml-schema-protocol-2.0.xsd"; - $res = OneLogin_Saml2_Utils::validateXML($this->document, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive()); + $res = OneLogin_Saml2_Utils::validateXML($this->document, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); if (!$res instanceof DOMDocument) { throw new OneLogin_Saml2_ValidationError( $errorXmlMsg, @@ -153,7 +153,7 @@ public function isValid($requestId = null) # If encrypted, check also the decrypted document if ($this->encrypted) { - $res = OneLogin_Saml2_Utils::validateXML($this->decryptedDocument, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive()); + $res = OneLogin_Saml2_Utils::validateXML($this->decryptedDocument, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); if (!$res instanceof DOMDocument) { throw new OneLogin_Saml2_ValidationError( $errorXmlMsg, diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index e8cf78bb..d287e8f4 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -159,7 +159,7 @@ private function _loadPaths() 'base' => $basePath, 'config' => $basePath, 'cert' => $basePath.'certs/', - 'lib' => $basePath.'lib/', + 'lib' => $basePath.'lib/Saml2/', 'extlib' => $basePath.'extlib/' ); @@ -226,9 +226,23 @@ public function getExtLibPath() */ public function getSchemasPath() { + if (isset($this->_paths['schemas'])) { + return $this->_paths['schemas']; + } return $this->_paths['lib'].'schemas/'; } + /** + * Set schemas path + * + * @param string $path + * @return $this + */ + public function setSchemasPath($path) + { + $this->_paths['schemas'] = $path; + } + /** * Loads settings info from a settings Array * @@ -934,7 +948,7 @@ public function validateMetadata($xml) assert('is_string($xml)'); $errors = array(); - $res = OneLogin_Saml2_Utils::validateXML($xml, 'saml-schema-metadata-2.0.xsd', $this->_debug); + $res = OneLogin_Saml2_Utils::validateXML($xml, 'saml-schema-metadata-2.0.xsd', $this->_debug, $this->getSchemasPath()); if (!$res instanceof DOMDocument) { $errors[] = $res; } else { diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index ddcea66f..5a7ea51f 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -113,12 +113,13 @@ public static function loadXML($dom, $xml) * @param string|DOMDocument $xml The XML string or document which should be validated. * @param string $schema The schema filename which should be used. * @param bool $debug To disable/enable the debug mode + * @param string $schemaPath Change schema path * * @return string|DOMDocument $dom string that explains the problem or the DOMDocument * * @throws Exception */ - public static function validateXML($xml, $schema, $debug = false) + public static function validateXML($xml, $schema, $debug = false, $schemaPath = null) { assert('is_string($xml) || $xml instanceof DOMDocument'); assert('is_string($schema)'); @@ -136,7 +137,12 @@ public static function validateXML($xml, $schema, $debug = false) } } - $schemaFile = __DIR__.'/schemas/' . $schema; + if (isset($schemaPath)) { + $schemaFile = $schemaPath . $schema; + } else { + $schemaFile = __DIR__ . '/schemas/' . $schema; + } + $oldEntityLoader = libxml_disable_entity_loader(false); $res = $dom->schemaValidate($schemaFile); libxml_disable_entity_loader($oldEntityLoader); @@ -626,7 +632,7 @@ public static function getSelfRoutedURLNoQuery() if (!empty($_SERVER['REQUEST_URI'])) { $route = $_SERVER['REQUEST_URI']; if (!empty($_SERVER['QUERY_STRING'])) { - $route = self::str_lreplace($_SERVER['QUERY_STRING'], '', $route); + $route = self::strLreplace($_SERVER['QUERY_STRING'], '', $route); if (substr($route, -1) == '?') { $route = substr($route, 0, -1); } @@ -648,7 +654,7 @@ public static function getSelfRoutedURLNoQuery() return $selfRoutedURLNoQuery; } - public static function str_lreplace($search, $replace, $subject) + public static function strLreplace($search, $replace, $subject) { $pos = strrpos($subject, $search); diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 00e3d903..3a32d45d 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -95,7 +95,7 @@ public function testGetLibPath() $settings = new OneLogin_Saml2_Settings(); $base = $settings->getBasePath(); - $this->assertEquals($base.'lib/', $settings->getLibPath()); + $this->assertEquals($base.'lib/Saml2/', $settings->getLibPath()); } /** @@ -121,10 +121,24 @@ public function testGetSchemasPath() $settings = new OneLogin_Saml2_Settings(); $base = $settings->getBasePath(); - $this->assertEquals($base.'lib/schemas/', $settings->getSchemasPath()); + $this->assertEquals($base.'lib/Saml2/schemas/', $settings->getSchemasPath()); } + /** + * Tests getSchemasPath method of the Settings + * + * @covers OneLogin_Saml2_Settings::setSchemasPath + */ + public function testSetSchemasPath() + { + $settings = new OneLogin_Saml2_Settings(); + $base = $settings->getBasePath(); + $this->assertEquals($base.'lib/Saml2/schemas/', $settings->getSchemasPath()); + $settings->setSchemasPath('custompath/'); + $this->assertEquals('custompath/', $settings->getSchemasPath()); + } + /** * Tests shouldCompressRequests method of OneLogin_Saml2_Settings. * From 96dd9ef647b7af838123067a5109467dbf65738c Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 13 Nov 2019 17:08:44 +0100 Subject: [PATCH 118/236] Update changelog. Apply strict destination matching also on logout request and logout response --- CHANGELOG | 1 + lib/Saml2/LogoutRequest.php | 23 +++++++++++++++++------ lib/Saml2/LogoutResponse.php | 23 +++++++++++++++++------ 3 files changed, 35 insertions(+), 12 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index ccdba903..603e07fa 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -2,6 +2,7 @@ CHANGELOG ========= v.2.18.0 * Support rejecting unsolicited SAMLResponses. +* Support stric destination matching. * Reject SAMLResponse if requestID was provided to the validotr but the InResponseTo attributeof the SAMLResponse is missing * Check destination against the getSelfURLNoQuery as well on LogoutRequest and LogoutResponse as we do on Response * Improve getSelfRoutedURLNoQuery method diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index b9c6bfcf..b7014866 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -365,15 +365,26 @@ public function isValid($retrieveParametersFromServer = false) // Check destination if ($dom->documentElement->hasAttribute('Destination')) { $destination = $dom->documentElement->getAttribute('Destination'); - if (!empty($destination) && strpos($destination, $currentURL) !== 0) { - $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); - - if (strpos($destination, $currentURLNoRouted) !== 0) { + if (empty($destination)) { + if (!$security['relaxDestinationValidation']) { throw new OneLogin_Saml2_ValidationError( - "The LogoutRequest was received at $currentURL instead of $destination", - OneLogin_Saml2_ValidationError::WRONG_DESTINATION + "The LogoutRequest has an empty Destination value", + OneLogin_Saml2_ValidationError::EMPTY_DESTINATION ); } + } else { + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURL); + if (strncmp($destination, $currentURL, $urlComparisonLength) !== 0) { + $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURLNoRouted); + + if (strncmp($destination, $currentURLNoRouted, $urlComparisonLength) !== 0) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutRequest was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); + } + } } } diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index 39bbf9fc..bb7da37d 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -161,15 +161,26 @@ public function isValid($requestId = null, $retrieveParametersFromServer = false // Check destination if ($this->document->documentElement->hasAttribute('Destination')) { $destination = $this->document->documentElement->getAttribute('Destination'); - if (!empty($destination) && strpos($destination, $currentURL) !== 0) { - $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); - - if (strpos($destination, $currentURLNoRouted) !== 0) { + if (empty($destination)) { + if (!$security['relaxDestinationValidation']) { throw new OneLogin_Saml2_ValidationError( - "The LogoutResponse was received at $currentURL instead of $destination", - OneLogin_Saml2_ValidationError::WRONG_DESTINATION + "The LogoutResponse has an empty Destination value", + OneLogin_Saml2_ValidationError::EMPTY_DESTINATION ); } + } else { + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURL); + if (strncmp($destination, $currentURL, $urlComparisonLength) !== 0) { + $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURLNoRouted); + + if (strncmp($destination, $currentURLNoRouted, $urlComparisonLength) !== 0) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutResponse was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); + } + } } } From bbb3c1e27ba38261307836d7926b306e873877f5 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 13 Nov 2019 17:15:01 +0100 Subject: [PATCH 119/236] Typo --- README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/README.md b/README.md index 1ae55a52..d5059ee0 100644 --- a/README.md +++ b/README.md @@ -12,8 +12,7 @@ and supported by OneLogin Inc. Warning ------- -Version 2.18.0 introduces the 'rejectUnsolicitedResponsesWithInResponseTo' setting parameter, by default disabled, that will allow invalidate unsolicited SAMLResponse. This version as well will reject SAMLResponse if requestId was provided to the validator but the SAMLResponse does not contain a InResponseTo attribute. -as well as the 'destinationStrictlyMatches' parameter, by default disabled, that will force that the Destination URL should strictly match to the address that process the SAMLResponse. +Version 2.18.0 introduces the 'rejectUnsolicitedResponsesWithInResponseTo' setting parameter, by default disabled, that will allow invalidate unsolicited SAMLResponse. This version as well will reject SAMLResponse if requestId was provided to the validator but the SAMLResponse does not contain a InResponseTo attribute. And an additional setting parameter 'destinationStrictlyMatches', by default disabled, that will force that the Destination URL should strictly match to the address that process the SAMLResponse. Version 2.17.1 updates xmlseclibs to 3.0.4 (CVE-2019-3465), but php-saml was not directly affected since it implements additional checks that prevent to exploit that vulnerability. From a1864313eb4e886bc26a77375ce204fad7027450 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 19 Nov 2019 17:03:59 +0100 Subject: [PATCH 120/236] Release 2.18.0 --- lib/Saml2/version.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 9f151295..c7ad54c3 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { "version": "2.18.0", - "released": "06/11/2019" + "released": "19/11/2019" } } From d4407715d9fa705c752c3e3d089f3c47d446cd11 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 25 Nov 2019 18:31:18 +0100 Subject: [PATCH 121/236] Add setSchemasPath to Auth class and fix backward compatibility --- lib/Saml2/Auth.php | 11 +++++++++++ lib/Saml2/Settings.php | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 591ffd37..43c2f930 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -181,6 +181,17 @@ public function setStrict($value) $this->_settings->setStrict($value); } + /** + * Set schemas path + * + * @param string $path + * @return $this + */ + public function setSchemasPath($path) + { + $this->_paths['schemas'] = $path; + } + /** * Process the SAML Response sent by the IdP. * diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index e9fe5957..fd8a12e6 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -229,7 +229,7 @@ public function getSchemasPath() if (isset($this->_paths['schemas'])) { return $this->_paths['schemas']; } - return $this->_paths['lib'].'schemas/'; + return __DIR__ . '/schemas/'; } /** From a4619e04e8e4b958a941a02125d1d9314ba5f0b3 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Mon, 25 Nov 2019 18:31:38 +0100 Subject: [PATCH 122/236] Release 2.18.1 --- CHANGELOG | 3 +++ lib/Saml2/version.json | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 603e07fa..526279a9 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,8 @@ CHANGELOG ========= +v.2.18.1 +* Add setSchemasPath to Auth class and fix backward compatibility + v.2.18.0 * Support rejecting unsolicited SAMLResponses. * Support stric destination matching. diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index c7ad54c3..91b7e8f1 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.18.0", - "released": "19/11/2019" + "version": "2.18.1", + "released": "25/11/2019" } } From 7f0a1518a80ddb3f1947f3039e1de272fa6b3f88 Mon Sep 17 00:00:00 2001 From: Swen van Zanten Date: Thu, 5 Dec 2019 07:46:40 +0100 Subject: [PATCH 123/236] Empty the $_SESSION variable instead of unset We shouldn't destroy a global variable cause other scripts trust them to be there. --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 5a7ea51f..4d73280f 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -971,7 +971,7 @@ public static function deleteLocalSession() session_destroy(); } - unset($_SESSION); + $_SESSION = []; } /** From 674903bc66fa1e9b61494c5ea8c3647ec352f667 Mon Sep 17 00:00:00 2001 From: Swen van Zanten Date: Thu, 5 Dec 2019 08:09:36 +0100 Subject: [PATCH 124/236] Adjust unit tests to expect an empty array --- tests/src/OneLogin/Saml2/UtilsTest.php | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/tests/src/OneLogin/Saml2/UtilsTest.php b/tests/src/OneLogin/Saml2/UtilsTest.php index b70901b8..387ea410 100644 --- a/tests/src/OneLogin/Saml2/UtilsTest.php +++ b/tests/src/OneLogin/Saml2/UtilsTest.php @@ -370,10 +370,10 @@ public function testGetselfhost() public function testisHTTPS() { $this->assertFalse(OneLogin_Saml2_Utils::isHTTPS()); - + $_SERVER['HTTPS'] = 'on'; $this->assertTrue(OneLogin_Saml2_Utils::isHTTPS()); - + unset($_SERVER['HTTPS']); $this->assertFalse(OneLogin_Saml2_Utils::isHTTPS()); $_SERVER['HTTP_HOST'] = 'example.com:443'; @@ -482,7 +482,7 @@ public function testSetBaseURL() $expectedUrlNQ2 = 'http://anothersp.example.com:81/example2/route.php'; $expectedRoutedUrlNQ2 = 'http://anothersp.example.com:81/example2/route.php'; $expectedUrl2 = 'http://anothersp.example.com:81/example2/route.php?x=test'; - + $this->assertEquals('http', OneLogin_Saml2_Utils::getSelfProtocol()); $this->assertEquals('anothersp.example.com', OneLogin_Saml2_Utils::getSelfHost()); $this->assertEquals('81', OneLogin_Saml2_Utils::getSelfPort()); @@ -957,7 +957,7 @@ public function testDeleteLocalSession() $this->assertTrue($_SESSION['samltest']); OneLogin_Saml2_Utils::deleteLocalSession(); - $this->assertFalse(isset($_SESSION)); + $this->assertEmpty($_SESSION); $this->assertFalse(isset($_SESSION['samltest'])); $prev = error_reporting(0); @@ -966,7 +966,7 @@ public function testDeleteLocalSession() $_SESSION['samltest'] = true; OneLogin_Saml2_Utils::deleteLocalSession(); - $this->assertFalse(isset($_SESSION)); + $this->assertEmpty($_SESSION); $this->assertFalse(isset($_SESSION['samltest'])); } } From c9e16f31216b99069966e76eb89ab2fcfacd4c26 Mon Sep 17 00:00:00 2001 From: Swen van Zanten Date: Thu, 5 Dec 2019 08:33:25 +0100 Subject: [PATCH 125/236] Use the session_unset function --- lib/Saml2/Utils.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 4d73280f..c2d2fdbe 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -968,10 +968,9 @@ public static function deleteLocalSession() { if (OneLogin_Saml2_Utils::isSessionStarted()) { + session_unset(); session_destroy(); } - - $_SESSION = []; } /** From 1d2c22656c41239b9ca7775a8d7937ef64700808 Mon Sep 17 00:00:00 2001 From: Swen van Zanten Date: Thu, 5 Dec 2019 11:37:01 +0100 Subject: [PATCH 126/236] Move session_unset() upwards --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index c2d2fdbe..5ca01876 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -966,9 +966,9 @@ public static function isSessionStarted() */ public static function deleteLocalSession() { + session_unset(); if (OneLogin_Saml2_Utils::isSessionStarted()) { - session_unset(); session_destroy(); } } From 2fcb2e9699a3df470d126151ecf0ebd4b4d46340 Mon Sep 17 00:00:00 2001 From: Swen van Zanten Date: Fri, 6 Dec 2019 10:45:01 +0100 Subject: [PATCH 127/236] Reset the $_SESSION variable if the session isn't started --- lib/Saml2/Utils.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 5ca01876..2ea69951 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -966,10 +966,11 @@ public static function isSessionStarted() */ public static function deleteLocalSession() { - session_unset(); - if (OneLogin_Saml2_Utils::isSessionStarted()) { + session_unset(); session_destroy(); + } else { + $_SESSION = array(); } } From ead86cf9ac7d2218a470aff029782db3eac13032 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= Date: Mon, 16 Dec 2019 17:44:47 +0100 Subject: [PATCH 128/236] Fix documentation for getNameIdSPNameQualifier --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index d5059ee0..b7d464c2 100644 --- a/README.md +++ b/README.md @@ -1326,7 +1326,7 @@ Main class of OneLogin PHP Toolkit * `getNameId` - Returns the nameID * `getNameIdFormat` - Gets the NameID Format provided by the SAML response from the IdP. * `getNameIdNameQualifier` - Gets the NameID NameQualifier provided from the SAML Response String. - * `getNameIdNameSPQualifier` - Gets the NameID SP NameQualifier provided from the SAML Response String. + * `getNameIdSPNameQualifier` - Gets the NameID SP NameQualifier provided from the SAML Response String. * `getSessionIndex` - Gets the SessionIndex from the AuthnStatement. * `getErrors` - Returns if there were any error * `getSSOurl` - Gets the SSO url. @@ -1364,7 +1364,7 @@ SAML 2 Authentication Response class * `getNameId` - Gets the NameID provided by the SAML response from the IdP. * `getNameIdFormat` - Gets the NameID Format provided by the SAML response from the IdP. * `getNameIdNameQualifier` - Gets the NameID NameQualifier provided from the SAML Response String. - * `getNameIdNameSPQualifier` - Gets the NameID SP NameQualifier provided from the SAML Response String. + * `getNameIdSPNameQualifier` - Gets the NameID SP NameQualifier provided from the SAML Response String. * `getSessionNotOnOrAfter` - Gets the SessionNotOnOrAfter from the AuthnStatement * `getSessionIndex` - Gets the SessionIndex from the AuthnStatement. From c3803254a2ffb36bd0cdbcaf200469309973dd52 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 15 Jan 2020 17:04:07 +0100 Subject: [PATCH 129/236] Fix php composer requirement --- composer.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/composer.json b/composer.json index 106f0bde..b8131f6e 100644 --- a/composer.json +++ b/composer.json @@ -17,7 +17,7 @@ "source": "https://github.com/onelogin/php-saml/" }, "require": { - "php": ">=5.3.2", + "php": ">=5.3.2 <7.2", "ext-curl": "*", "ext-openssl": "*", "ext-dom": "*", From 6f0b41d1cc5b46742e303da8d11d48d1c21a3e82 Mon Sep 17 00:00:00 2001 From: Fred McMullen Date: Wed, 12 Aug 2020 11:51:24 -0500 Subject: [PATCH 130/236] Add Auth Context Class Constants --- lib/Saml2/Constants.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/Saml2/Constants.php b/lib/Saml2/Constants.php index dd702fa3..86c28efb 100644 --- a/lib/Saml2/Constants.php +++ b/lib/Saml2/Constants.php @@ -49,9 +49,11 @@ class OneLogin_Saml2_Constants const AC_PASSWORD_PROTECTED = 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport'; const AC_X509 = 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509'; const AC_SMARTCARD = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Smartcard'; + const AC_SMARTCARD_PKI = 'urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI'; const AC_KERBEROS = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos'; const AC_WINDOWS = 'urn:federation:authentication:windows'; const AC_TLS = 'urn:oasis:names:tc:SAML:2.0:ac:classes:TLSClient'; + const AC_RSATOKEN = 'urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken'; // Subject Confirmation const CM_BEARER = 'urn:oasis:names:tc:SAML:2.0:cm:bearer'; From 89aa21894098f571749b6f8ded287c4cb752c44d Mon Sep 17 00:00:00 2001 From: Tony McNulty Date: Fri, 16 Oct 2020 16:17:00 +0100 Subject: [PATCH 131/236] Fix typo --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 2ea69951..7a0d2bee 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -1391,7 +1391,7 @@ public static function addSign($xml, $key, $cert, $signAlgorithm = XMLSecurityKe * Validates a signature (Message or Assertion). * * @param string|DomNode $xml The element we should validate - * @param string|null $cert The pubic cert + * @param string|null $cert The public cert * @param string|null $fingerprint The fingerprint of the public cert * @param string|null $fingerprintalg The algorithm used to get the fingerprint * @param string|null $xpath The xpath of the signed element From 399a98e2c448eded7ab7ca1a2ee6714317a937f8 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 24 Nov 2020 18:17:30 +0100 Subject: [PATCH 132/236] Update README.md Update docs --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index b7d464c2..796dd7dd 100644 --- a/README.md +++ b/README.md @@ -510,7 +510,7 @@ $advancedSettings = array ( // Set to false and no AuthContext will be sent in the AuthNRequest. // Set true or don't present this parameter and you will get an AuthContext 'exact' 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport'. // Set an array with the possible auth context values: array ('urn:oasis:names:tc:SAML:2.0:ac:classes:Password', 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509'). - 'requestedAuthnContext' => true, + 'requestedAuthnContext' => false, // Indicates if the SP will validate all received xmls. // (In order to validate the xml, 'strict' and 'wantXMLValidation' must be true). From 635bd9470d3ca1d1aecb7afb1e167e66c6d10c18 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 25 Nov 2020 17:29:55 +0100 Subject: [PATCH 133/236] Update unitests --- .../invalids/invalid_subjectconfirmation_nb.xml.base64 | 2 +- .../invalids/invalid_unpaired_inresponsesto.xml.base64 | 2 +- tests/data/responses/unsigned_response.xml.base64 | 2 +- .../data/responses/unsigned_response_with_miliseconds.xm.base64 | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/tests/data/responses/invalids/invalid_subjectconfirmation_nb.xml.base64 b/tests/data/responses/invalids/invalid_subjectconfirmation_nb.xml.base64 index ff6d371c..de582bfb 100644 --- a/tests/data/responses/invalids/invalid_subjectconfirmation_nb.xml.base64 +++ b/tests/data/responses/invalids/invalid_subjectconfirmation_nb.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 b/tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 index 87ce60fc..bfd1a938 100644 --- a/tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 +++ b/tests/data/responses/invalids/invalid_unpaired_inresponsesto.xml.base64 @@ -1 +1 @@ -PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeGMzMmFlZDY3LTgyMGYtNDI5Ni0wYzIwLTIwNWExMGRkNTc4NyIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIiBEZXN0aW5hdGlvbj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiPg0KICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPg0KICA8c2FtbHA6U3RhdHVzPg0KICAgIDxzYW1scDpTdGF0dXNDb2RlIFZhbHVlPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6c3RhdHVzOlN1Y2Nlc3MiLz4NCiAgPC9zYW1scDpTdGF0dXM+DQogIDxzYW1sOkFzc2VydGlvbiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIElEPSJwZng3ODQxOTkxYy1jNzNmLTQwMzUtZTJlZS1jMTcwYzBlMWQzZTQiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDExLTA2LTE3VDE0OjU0OjE0WiI+DQogICAgPHNhbWw6SXNzdWVyPmh0dHA6Ly9pZHAuZXhhbXBsZS5jb20vPC9zYW1sOklzc3Vlcj4gICAgDQogICAgPHNhbWw6U3ViamVjdD4NCiAgICAgIDxzYW1sOk5hbWVJRCBTUE5hbWVRdWFsaWZpZXI9ImhlbGxvLmNvbSIgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoxLjE6bmFtZWlkLWZvcm1hdDplbWFpbEFkZHJlc3MiPnNvbWVvbmVAZXhhbXBsZS5jb208L3NhbWw6TmFtZUlEPg0KICAgICAgPHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPg0KICAgICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBOb3RPbk9yQWZ0ZXI9IjIwMjAtMDYtMTdUMTQ6NTk6MTRaIiBSZWNpcGllbnQ9Imh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL2VuZHBvaW50cy9hY3MucGhwIiBJblJlc3BvbnNlVG89ImludmFsaWRfaW5yZXNwb25zZSIvPg0KICAgICAgPC9zYW1sOlN1YmplY3RDb25maXJtYXRpb24+DQogICAgPC9zYW1sOlN1YmplY3Q+DQogICAgPHNhbWw6Q29uZGl0aW9ucyBOb3RCZWZvcmU9IjIwMTAtMDYtMTdUMTQ6NTM6NDRaIiBOb3RPbk9yQWZ0ZXI9IjIwMjEtMDYtMTdUMTQ6NTk6MTRaIj4NCiAgICAgIDxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgICAgIDxzYW1sOkF1ZGllbmNlPmh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL21ldGFkYXRhLnBocDwvc2FtbDpBdWRpZW5jZT4NCiAgICAgIDwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgIDwvc2FtbDpDb25kaXRpb25zPg0KICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDowN1oiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwMjEtMDYtMTdUMjI6NTQ6MTRaIiBTZXNzaW9uSW5kZXg9Il81MWJlMzc5NjVmZWI1NTc5ZDgwMzE0MTA3NjkzNmRjMmU5ZDFkOThlYmYiPg0KICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Pg0KICAgICAgICA8c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj4NCiAgICAgIDwvc2FtbDpBdXRobkNvbnRleHQ+DQogICAgPC9zYW1sOkF1dGhuU3RhdGVtZW50Pg0KICAgIDxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj4NCiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgPC9zYW1sOkFzc2VydGlvbj4NCjwvc2FtbHA6UmVzcG9uc2U+ \ No newline at end of file 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 \ No newline at end of file diff --git a/tests/data/responses/unsigned_response.xml.base64 b/tests/data/responses/unsigned_response.xml.base64 index 66892b53..09ea69c7 100644 --- a/tests/data/responses/unsigned_response.xml.base64 +++ b/tests/data/responses/unsigned_response.xml.base64 @@ -1 +1 @@ -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 +PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeGMzMmFlZDY3LTgyMGYtNDI5Ni0wYzIwLTIwNWExMGRkNTc4NyIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIiBEZXN0aW5hdGlvbj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCI+DQogIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+DQogIDxzYW1scDpTdGF0dXM+DQogICAgPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPg0KICA8L3NhbWxwOlN0YXR1cz4NCiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4NCiAgICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPiAgICANCiAgICA8c2FtbDpTdWJqZWN0Pg0KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjk5OS0wNi0xN1QxNDo1OToxNFoiIFJlY2lwaWVudD0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCIvPg0KICAgICAgPC9zYW1sOlN1YmplY3RDb25maXJtYXRpb24+DQogICAgPC9zYW1sOlN1YmplY3Q+DQogICAgPHNhbWw6Q29uZGl0aW9ucyBOb3RCZWZvcmU9IjIwMTAtMDYtMTdUMTQ6NTM6NDRaIiBOb3RPbk9yQWZ0ZXI9IjI5OTktMDYtMTdUMTQ6NTk6MTRaIj4NCiAgICAgIDxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgICAgIDxzYW1sOkF1ZGllbmNlPmh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL21ldGFkYXRhLnBocDwvc2FtbDpBdWRpZW5jZT4NCiAgICAgIDwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgIDwvc2FtbDpDb25kaXRpb25zPg0KICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDowN1oiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjI5OTktMDYtMTdUMjI6NTQ6MTRaIiBTZXNzaW9uSW5kZXg9Il81MWJlMzc5NjVmZWI1NTc5ZDgwMzE0MTA3NjkzNmRjMmU5ZDFkOThlYmYiPg0KICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Pg0KICAgICAgICA8c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj4NCiAgICAgIDwvc2FtbDpBdXRobkNvbnRleHQ+DQogICAgPC9zYW1sOkF1dGhuU3RhdGVtZW50Pg0KICAgIDxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj4NCiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgPC9zYW1sOkFzc2VydGlvbj4NCjwvc2FtbHA6UmVzcG9uc2U+ \ No newline at end of file diff --git a/tests/data/responses/unsigned_response_with_miliseconds.xm.base64 b/tests/data/responses/unsigned_response_with_miliseconds.xm.base64 index 76522b7e..b3bc8fce 100644 --- a/tests/data/responses/unsigned_response_with_miliseconds.xm.base64 +++ b/tests/data/responses/unsigned_response_with_miliseconds.xm.base64 @@ -1 +1 @@ -PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeGMzMmFlZDY3LTgyMGYtNDI5Ni0wYzIwLTIwNWExMGRkNTc4NyIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTQuMTIwWiIgRGVzdGluYXRpb249Imh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL2VuZHBvaW50cy9hY3MucGhwIiBJblJlc3BvbnNlVG89Il81N2JjYmY3MC03YjFmLTAxMmUtYzgyMS03ODJiY2IxM2JiMzgiPg0KICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPg0KICA8c2FtbHA6U3RhdHVzPg0KICAgIDxzYW1scDpTdGF0dXNDb2RlIFZhbHVlPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6c3RhdHVzOlN1Y2Nlc3MiLz4NCiAgPC9zYW1scDpTdGF0dXM+DQogIDxzYW1sOkFzc2VydGlvbiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIElEPSJwZng3ODQxOTkxYy1jNzNmLTQwMzUtZTJlZS1jMTcwYzBlMWQzZTQiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDExLTA2LTE3VDE0OjU0OjE0LjEyMFoiPg0KICAgIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+ICAgIA0KICAgIDxzYW1sOlN1YmplY3Q+DQogICAgICA8c2FtbDpOYW1lSUQgU1BOYW1lUXVhbGlmaWVyPSJoZWxsby5jb20iIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj5zb21lb25lQGV4YW1wbGUuY29tPC9zYW1sOk5hbWVJRD4NCiAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb24gTWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206YmVhcmVyIj4NCiAgICAgICAgPHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDIwLTA2LTE3VDE0OjU5OjE0WiIgUmVjaXBpZW50PSJodHRwOi8vc3R1ZmYuY29tL2VuZHBvaW50cy9lbmRwb2ludHMvYWNzLnBocCIgSW5SZXNwb25zZVRvPSJfNTdiY2JmNzAtN2IxZi0wMTJlLWM4MjEtNzgyYmNiMTNiYjM4Ii8+DQogICAgICA8L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj4NCiAgICA8L3NhbWw6U3ViamVjdD4NCiAgICA8c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxMC0wNi0xN1QxNDo1Mzo0NC4xNzNaIiBOb3RPbk9yQWZ0ZXI9IjIwMjEtMDYtMTdUMTQ6NTk6MTQuMjM1WiI+DQogICAgICA8c2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgICAgICA8c2FtbDpBdWRpZW5jZT5odHRwOi8vc3R1ZmYuY29tL2VuZHBvaW50cy9tZXRhZGF0YS5waHA8L3NhbWw6QXVkaWVuY2U+DQogICAgICA8L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4NCiAgICA8L3NhbWw6Q29uZGl0aW9ucz4NCiAgICA8c2FtbDpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MDcuMTIwWiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjAyMS0wNi0xN1QyMjo1NDoxNC4xMjBaIiBTZXNzaW9uSW5kZXg9Il81MWJlMzc5NjVmZWI1NTc5ZDgwMzE0MTA3NjkzNmRjMmU5ZDFkOThlYmYiPg0KICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Pg0KICAgICAgICA8c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj4NCiAgICAgIDwvc2FtbDpBdXRobkNvbnRleHQ+DQogICAgPC9zYW1sOkF1dGhuU3RhdGVtZW50Pg0KICAgIDxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj4NCiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgPC9zYW1sOkFzc2VydGlvbj4NCjwvc2FtbHA6UmVzcG9uc2U+ \ No newline at end of file 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 \ No newline at end of file From c12a61a58b4d16fdb9df3c2ae367aae81ad6c16d Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 25 Nov 2020 18:40:08 +0100 Subject: [PATCH 134/236] Check for x509Cert of the IdP when loading settings, even if the security index was not provided --- lib/Saml2/Settings.php | 20 ++++++++++---------- tests/src/OneLogin/Saml/AuthRequestTest.php | 2 ++ tests/src/OneLogin/Saml2/SettingsTest.php | 2 ++ 3 files changed, 14 insertions(+), 10 deletions(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index fd8a12e6..bc059625 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -564,19 +564,19 @@ public function checkIdPSettings($settings) $errors[] = 'idp_slo_response_url_invalid'; } - if (isset($settings['security'])) { - $security = $settings['security']; + $existsX509 = isset($idp['x509cert']) && !empty($idp['x509cert']); + $existsMultiX509Sign = isset($idp['x509certMulti']) && isset($idp['x509certMulti']['signing']) && !empty($idp['x509certMulti']['signing']); + $existsFingerprint = isset($idp['certFingerprint']) && !empty($idp['certFingerprint']); + + if (!($existsX509 || $existsFingerprint || $existsMultiX509Sign) + ) { + $errors[] = 'idp_cert_or_fingerprint_not_found_and_required'; + } - $existsX509 = isset($idp['x509cert']) && !empty($idp['x509cert']); - $existsMultiX509Sign = isset($idp['x509certMulti']) && isset($idp['x509certMulti']['signing']) && !empty($idp['x509certMulti']['signing']); + if (isset($settings['security'])) { $existsMultiX509Enc = isset($idp['x509certMulti']) && isset($idp['x509certMulti']['encryption']) && !empty($idp['x509certMulti']['encryption']); - $existsFingerprint = isset($idp['certFingerprint']) && !empty($idp['certFingerprint']); - if (!($existsX509 || $existsFingerprint || $existsMultiX509Sign) - ) { - $errors[] = 'idp_cert_or_fingerprint_not_found_and_required'; - } - if ((isset($security['nameIdEncrypted']) && $security['nameIdEncrypted'] == true) + if ((isset($settings['security']['nameIdEncrypted']) && $settings['security']['nameIdEncrypted'] == true) && !($existsX509 || $existsMultiX509Enc) ) { $errors[] = 'idp_cert_not_found_and_required'; diff --git a/tests/src/OneLogin/Saml/AuthRequestTest.php b/tests/src/OneLogin/Saml/AuthRequestTest.php index ddc279f0..1906c141 100644 --- a/tests/src/OneLogin/Saml/AuthRequestTest.php +++ b/tests/src/OneLogin/Saml/AuthRequestTest.php @@ -15,6 +15,8 @@ public function setUp() $settings = new OneLogin_Saml_Settings; $settings->idpSingleSignOnUrl = 'http://stuff.com/'; $settings->spReturnUrl = 'http://sp.stuff.com/'; + $cert = file_get_contents(TEST_ROOT . '/data/customPath/certs/sp.crt'); + $settings->idpPublicCertificate = $cert; $this->_settings = $settings; } diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 93aaf6fc..3e41d30b 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -53,6 +53,8 @@ public function testLoadSettingsFromObject() $settingsObj = new OneLogin_Saml_Settings; $settingsObj->idpSingleSignOnUrl = 'http://stuff.com/'; $settingsObj->spReturnUrl = 'http://sp.stuff.com/'; + $cert = file_get_contents(TEST_ROOT . '/data/customPath/certs/sp.crt'); + $settingsObj->idpPublicCertificate = $cert; $settings = new OneLogin_Saml2_Settings($settingsObj); From 370a5d9c8432ede5776f278edcdcf3b8e8212cc6 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 25 Nov 2020 19:58:50 +0100 Subject: [PATCH 135/236] allowRepeatAttributeName settings added in order to support AttributeStatements with Attribute elements with the same name --- README.md | 4 ++++ advanced_settings_example.php | 4 ++++ lib/Saml2/Response.php | 19 ++++++++++++++----- lib/Saml2/Settings.php | 4 ++++ tests/src/OneLogin/Saml2/ResponseTest.php | 8 ++++++++ 5 files changed, 34 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 796dd7dd..546fe5c8 100644 --- a/README.md +++ b/README.md @@ -520,6 +520,10 @@ $advancedSettings = array ( // attribute will not be rejected for this fact. 'relaxDestinationValidation' => false, + // If true, the toolkit will not raised an error when the Statement Element + // contain atribute elements with name duplicated + 'allowRepeatAttributeName' => false, + // If true, Destination URL should strictly match to the address to // which the response has been sent. // Notice that if 'relaxDestinationValidation' is true an empty Destintation diff --git a/advanced_settings_example.php b/advanced_settings_example.php index 54224b9b..95b2f87e 100644 --- a/advanced_settings_example.php +++ b/advanced_settings_example.php @@ -85,6 +85,10 @@ // attribute will not be rejected for this fact. 'relaxDestinationValidation' => false, + // If true, the toolkit will not raised an error when the Statement Element + // contain atribute elements with name duplicated + 'allowRepeatAttributeName' => false, + // If true, Destination URL should strictly match to the address to // which the response has been sent. // Notice that if 'relaxDestinationValidation' is true an empty Destintation diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 4408feb3..69b17736 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -779,6 +779,9 @@ private function _getAttributesByKeyName($keyName = "Name") $entries = $this->_queryAssertion('/saml:AttributeStatement/saml:Attribute'); + $security = $this->_settings->getSecurityData(); + $allowRepeatAttributeName = $security['allowRepeatAttributeName']; + /** @var $entry DOMNode */ foreach ($entries as $entry) { $attributeKeyNode = $entry->attributes->getNamedItem($keyName); @@ -790,10 +793,12 @@ private function _getAttributesByKeyName($keyName = "Name") $attributeKeyName = $attributeKeyNode->nodeValue; if (in_array($attributeKeyName, array_keys($attributes))) { - throw new OneLogin_Saml2_ValidationError( - "Found an Attribute element with duplicated ".$keyName, - OneLogin_Saml2_ValidationError::DUPLICATED_ATTRIBUTE_NAME_FOUND - ); + if (!$allowRepeatAttributeName) { + throw new OneLogin_Saml2_ValidationError( + "Found an Attribute element with duplicated ".$keyName, + OneLogin_Saml2_ValidationError::DUPLICATED_ATTRIBUTE_NAME_FOUND + ); + } } $attributeValues = array(); @@ -804,7 +809,11 @@ private function _getAttributesByKeyName($keyName = "Name") } } - $attributes[$attributeKeyName] = $attributeValues; + if (in_array($attributeKeyName, array_keys($attributes))) { + $attributes[$attributeKeyName] = array_merge($attributes[$attributeKeyName], $attributeValues); + } else { + $attributes[$attributeKeyName] = $attributeValues; + } } return $attributes; } diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index bc059625..dcc0e8b6 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -399,6 +399,10 @@ private function _addDefaultValues() $this->_security['relaxDestinationValidation'] = false; } + // Allow duplicated Attribute Names + if (!isset($this->_security['allowRepeatAttributeName'])) { + $this->_security['allowRepeatAttributeName'] = false; + } // Strict Destination match validation if (!isset($this->_security['destinationStrictlyMatches'])) { diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 0d23a7bc..571aaa31 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -622,6 +622,14 @@ public function testGetAttributes() } catch (OneLogin_Saml2_ValidationError $e) { $this->assertContains('Found an Attribute element with duplicated Name', $e->getMessage()); } + + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + $settingsInfo['security']['allowRepeatAttributeName'] = true; + $settings2 = new OneLogin_Saml2_Settings($settingsInfo); + $response5 = new OneLogin_Saml2_Response($settings2, $xml4); + $attrs = $response5->getAttributes(); + $this->assertEquals([0 => "test", 1 => "test2"], $attrs['uid']); } /** From c51877e9e5801209da9a3e8c4a4c26e3f8b30e49 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 25 Nov 2020 21:14:00 +0100 Subject: [PATCH 136/236] Get lib path dinamically --- lib/Saml2/Settings.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index dcc0e8b6..a94183de 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -159,7 +159,7 @@ private function _loadPaths() 'base' => $basePath, 'config' => $basePath, 'cert' => $basePath.'certs/', - 'lib' => $basePath.'lib/Saml2/', + 'lib' => __DIR__ . '/', 'extlib' => $basePath.'extlib/' ); From 7aca365b538b19d9dc3da8a36380e60d5eac5330 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 26 Nov 2020 18:22:24 +0100 Subject: [PATCH 137/236] Fix #443. Incorrect Destination in LogoutResponse when using responseUrl. Add IdP value getters to the Settings class --- lib/Saml2/Auth.php | 28 ++++------- lib/Saml2/LogoutRequest.php | 3 +- lib/Saml2/LogoutResponse.php | 3 +- lib/Saml2/Settings.php | 41 ++++++++++++++++ tests/src/OneLogin/Saml2/AuthTest.php | 2 +- tests/src/OneLogin/Saml2/SettingsTest.php | 60 +++++++++++++++++++++++ 6 files changed, 115 insertions(+), 22 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 43c2f930..8a97cc33 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -586,43 +586,33 @@ public function logout($returnTo = null, $parameters = array(), $nameId = null, } /** - * Gets the SSO url. + * Gets the IdP SSO url. * - * @return string The url of the Single Sign On Service + * @return string The url of the IdP Single Sign On Service */ public function getSSOurl() { - $idpData = $this->_settings->getIdPData(); - return $idpData['singleSignOnService']['url']; + return $this->_settings->getIdPSSOUrl(); } /** - * Gets the SLO url. + * Gets the IdP SLO url. * - * @return string|null The url of the Single Logout Service + * @return string|null The url of the IdP Single Logout Service */ public function getSLOurl() { - $url = null; - $idpData = $this->_settings->getIdPData(); - if (isset($idpData['singleLogoutService']) && isset($idpData['singleLogoutService']['url'])) { - $url = $idpData['singleLogoutService']['url']; - } - return $url; + return $this->_settings->getIdPSLOUrl(); } /** - * Gets the SLO response url. + * Gets the IdP SLO response url. * - * @return string|null The response url of the Single Logout Service + * @return string|null The response url of the IdP Single Logout Service */ public function getSLOResponseUrl() { - $idpData = $this->_settings->getIdPData(); - if (isset($idpData['singleLogoutService']) && isset($idpData['singleLogoutService']['responseUrl'])) { - return $idpData['singleLogoutService']['responseUrl']; - } - return $this->getSLOurl(); + return $this->_settings->getIdPSLOResponseUrl(); } /** diff --git a/lib/Saml2/LogoutRequest.php b/lib/Saml2/LogoutRequest.php index b7014866..5865c8a6 100644 --- a/lib/Saml2/LogoutRequest.php +++ b/lib/Saml2/LogoutRequest.php @@ -106,6 +106,7 @@ public function __construct(OneLogin_Saml2_Settings $settings, $request = null, $sessionIndexStr = isset($sessionIndex) ? "{$sessionIndex}" : ""; $spEntityId = htmlspecialchars($spData['entityId'], ENT_QUOTES); + $destination = $this->_settings->getIdPSLOUrl(); $logoutRequest = << + Destination="{$destination}"> {$spEntityId} {$nameIdObj} {$sessionIndexStr} diff --git a/lib/Saml2/LogoutResponse.php b/lib/Saml2/LogoutResponse.php index bb7da37d..21c1adad 100644 --- a/lib/Saml2/LogoutResponse.php +++ b/lib/Saml2/LogoutResponse.php @@ -240,13 +240,14 @@ public function build($inResponseTo) $issueInstant = OneLogin_Saml2_Utils::parseTime2SAML(time()); $spEntityId = htmlspecialchars($spData['entityId'], ENT_QUOTES); + $destination = $this->_settings->getIdPSLOResponseUrl(); $logoutResponse = << {$spEntityId} diff --git a/lib/Saml2/Settings.php b/lib/Saml2/Settings.php index a94183de..cb752d22 100644 --- a/lib/Saml2/Settings.php +++ b/lib/Saml2/Settings.php @@ -838,6 +838,47 @@ public function shouldCompressResponses() return $this->_compress['responses']; } + /** + * Gets the IdP SSO url. + * + * @return string|null The url of the IdP Single Sign On Service + */ + public function getIdPSSOUrl() + { + $ssoUrl = null; + if (isset($this->_idp['singleSignOnService']) && isset($this->_idp['singleSignOnService']['url'])) { + $ssoUrl = $this->_idp['singleSignOnService']['url']; + } + return $ssoUrl; + } + + /** + * Gets the IdP SLO url. + * + * @return string|null The request url of the IdP Single Logout Service + */ + public function getIdPSLOUrl() + { + $sloUrl = null; + if (isset($this->_idp['singleLogoutService']) && isset($this->_idp['singleLogoutService']['url'])) { + $sloUrl = $this->_idp['singleLogoutService']['url']; + } + return $sloUrl; + } + + /** + * Gets the IdP SLO response url. + * + * @return string|null The response url of the IdP Single Logout Service + */ + public function getIdPSLOResponseUrl() + { + if (isset($this->_idp['singleLogoutService']) && isset($this->_idp['singleLogoutService']['responseUrl'])) { + return $this->_idp['singleLogoutService']['responseUrl']; + } + return $this->getIdPSLOUrl(); + } + /** * Gets the SP metadata. The XML representation. * diff --git a/tests/src/OneLogin/Saml2/AuthTest.php b/tests/src/OneLogin/Saml2/AuthTest.php index 94e3872f..908a7994 100644 --- a/tests/src/OneLogin/Saml2/AuthTest.php +++ b/tests/src/OneLogin/Saml2/AuthTest.php @@ -82,7 +82,7 @@ public function testGetSLOurl() /** * Tests the getSLOResponseUrl method of the OneLogin_Saml2_Auth class * - * @covers OneLogin_Saml2_Auth::getSLOurl + * @covers OneLogin_Saml2_Auth::getSLOResponseUrl */ public function testGetSLOResponseUrl() { diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 3e41d30b..66f041ed 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -419,6 +419,66 @@ public function testCheckSettings() } } + /** + * Tests the getIdPSSOurl method of the OneLogin_Saml2_Settings class + * + * @covers OneLogin_Saml2_Settings::getIdPSSOurl + */ + public function testGetIdPSSOurl() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $ssoUrl = "http://idp.example.com/SSOService.php"; + $this->assertEquals($settings->getIdPSSOUrl(), $ssoUrl); + } + + /** + * Tests the getIdPSLOurl method of the OneLogin_Saml2_Settings class + * + * @covers OneLogin_Saml2_Settings::getIdPSLOurl + */ + public function testGetIdPSLOurl() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $sloUrl = "http://idp.example.com/SingleLogoutService.php"; + $this->assertEquals($settings->getIdPSLOUrl(), $sloUrl); + + include $settingsDir.'settings2.php'; + $settings2 = new OneLogin_Saml2_Settings($settingsInfo); + + $sloUrl = "http://idp.example.com/SingleLogoutService.php"; + $this->assertEquals($settings2->getIdPSLOUrl(), $sloUrl); + } + + /** + * Tests the getIdPSLOResponseUrl method of the OneLogin_Saml2_Settings class + * + * @covers OneLogin_Saml2_Settings::getIdPSLOResponseUrl + */ + public function testGetIdPSLOResponseUrl() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings1.php'; + + $settings = new OneLogin_Saml2_Settings($settingsInfo); + + $sloUrl = "http://idp.example.com/SingleLogoutServiceResponse.php"; + $this->assertEquals($settings->getIdPSLOResponseUrl(), $sloUrl); + + include $settingsDir.'settings2.php'; + $settings2 = new OneLogin_Saml2_Settings($settingsInfo); + + $sloUrl = "http://idp.example.com/SingleLogoutService.php"; + $this->assertEquals($settings2->getIdPSLOUrl(), $sloUrl); + } + /** * Tests the getSPMetadata method of the OneLogin_Saml2_Settings * Case unsigned metadata From bc3742fe1c5e50532c621a5aa79a9331844979ee Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 26 Nov 2020 18:29:01 +0100 Subject: [PATCH 138/236] Another refactor --- lib/Saml2/AuthnRequest.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/AuthnRequest.php b/lib/Saml2/AuthnRequest.php index fc6d3237..c112a400 100644 --- a/lib/Saml2/AuthnRequest.php +++ b/lib/Saml2/AuthnRequest.php @@ -39,7 +39,6 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal $this->_settings = $settings; $spData = $this->_settings->getSPData(); - $idpData = $this->_settings->getIdPData(); $security = $this->_settings->getSecurityData(); $id = OneLogin_Saml2_Utils::generateUniqueID(); @@ -134,6 +133,7 @@ public function __construct(OneLogin_Saml2_Settings $settings, $forceAuthn = fal $spEntityId = htmlspecialchars($spData['entityId'], ENT_QUOTES); $acsUrl = htmlspecialchars($spData['assertionConsumerService']['url'], ENT_QUOTES); + $destination = $this->_settings->getIdPSSOUrl(); $request = << {$spEntityId}{$subjectStr}{$nameIdPolicyStr}{$requestedAuthnStr} From cc6d4e7ef77b57125c3758fe5fbf21aa7e9a2628 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 26 Nov 2020 19:47:56 +0100 Subject: [PATCH 139/236] Update Changelog --- CHANGELOG | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index 526279a9..b617b502 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,13 @@ CHANGELOG ========= +v.2.19.0 +* [#412](https://github.com/onelogin/php-saml/pull/412) Empty instead of unset the $_SESSION variable +* [#433](https://github.com/onelogin/php-saml/issues/443) Fix Incorrect Destination in LogoutResponse when using responseUrl #443 +* Add support for SMARTCARD_PKI and RSA_TOKEN Auth Contexts +* Support Statements with Attribute elements with the same name enabling the allowRepeatAttributeName setting +* Get lib path dinamically +* Check for x509Cert of the IdP when loading settings, even if the security index was not provided + v.2.18.1 * Add setSchemasPath to Auth class and fix backward compatibility From c137eebfff82313a1c9f12f63e90c28233bd51c5 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Sat, 28 Nov 2020 02:10:41 +0100 Subject: [PATCH 140/236] Add missing vars to the demo --- demo1/index.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/demo1/index.php b/demo1/index.php index 2400451f..44ce30c2 100644 --- a/demo1/index.php +++ b/demo1/index.php @@ -31,6 +31,8 @@ $nameId = null; $sessionIndex = null; $nameIdFormat = null; + $samlNameIdNameQualifier = null; + $samlNameIdSPNameQualifier = null; if (isset($_SESSION['samlNameId'])) { $nameId = $_SESSION['samlNameId']; From b9a777a5a66c53495f56a9ea6a1df0a8fdc1a16a Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Thu, 7 Jan 2021 16:21:04 +0100 Subject: [PATCH 141/236] Improve demo to print cause of Message invalidation if debug is enabled --- demo1/index.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/demo1/index.php b/demo1/index.php index 44ce30c2..d3dbc541 100644 --- a/demo1/index.php +++ b/demo1/index.php @@ -73,6 +73,9 @@ if (!empty($errors)) { echo '

',implode(', ', $errors),'

'; + if ($auth->getSettings()->isDebugActive()) { + echo '

'.$auth->getLastErrorReason().'

'; + } } if (!$auth->isAuthenticated()) { @@ -103,6 +106,9 @@ echo '

Sucessfully logged out

'; } else { echo '

', implode(', ', $errors), '

'; + if ($auth->getSettings()->isDebugActive()) { + echo '

'.$auth->getLastErrorReason().'

'; + } } } From 9c39466c7df0e39beaecdc4e51d591204f6754d1 Mon Sep 17 00:00:00 2001 From: chris Date: Tue, 2 Feb 2021 23:27:44 +0900 Subject: [PATCH 142/236] Update composer.json Add ext-zlib as a dependency - gzdeflate is used 7 times in various files --- composer.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/composer.json b/composer.json index b8131f6e..0c2bfd12 100644 --- a/composer.json +++ b/composer.json @@ -21,7 +21,8 @@ "ext-curl": "*", "ext-openssl": "*", "ext-dom": "*", - "ext-mcrypt": "*" + "ext-mcrypt": "*", + "ext-zlib": "*" }, "require-dev": { "phpunit/phpunit": "4.8", From 5fd9812ea824179616a978b77ace2aabfae7ebbd Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 19 Feb 2021 02:02:47 +0100 Subject: [PATCH 143/236] Forgot update version on 2.19.0 release --- lib/Saml2/version.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 91b7e8f1..5bec39fa 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.18.1", - "released": "25/11/2019" + "version": "2.19.0", + "released": "26/11/2020" } } From e4c1fb2a9b89f64e9b9539bafe3bfc2987ff74ee Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 19 Feb 2021 02:04:09 +0100 Subject: [PATCH 144/236] Fix #467 bug on getSelfRoutedURLNoQuery method --- lib/Saml2/Utils.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Saml2/Utils.php b/lib/Saml2/Utils.php index 7a0d2bee..9983e2d1 100644 --- a/lib/Saml2/Utils.php +++ b/lib/Saml2/Utils.php @@ -648,7 +648,7 @@ public static function getSelfRoutedURLNoQuery() $pos = strpos($selfRoutedURLNoQuery, "?"); if ($pos !== false) { - $selfRoutedURLNoQuery = substr($selfRoutedURLNoQuery, 0, $pos-1); + $selfRoutedURLNoQuery = substr($selfRoutedURLNoQuery, 0, $pos); } return $selfRoutedURLNoQuery; From 5cb18a3536cca7d5fec1bc3fd04f6f5233176f65 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 2 Mar 2021 11:20:53 +0100 Subject: [PATCH 145/236] Fix phpunit --- tests/src/OneLogin/Saml2/ResponseTest.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 571aaa31..8f1e162d 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -629,7 +629,7 @@ public function testGetAttributes() $settings2 = new OneLogin_Saml2_Settings($settingsInfo); $response5 = new OneLogin_Saml2_Response($settings2, $xml4); $attrs = $response5->getAttributes(); - $this->assertEquals([0 => "test", 1 => "test2"], $attrs['uid']); + $this->assertEquals(array(0 => "test", 1 => "test2"), $attrs['uid']); } /** From 790a042f2d16a086a563793dab0eeb6a5a8c4e70 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 2 Mar 2021 12:05:02 +0100 Subject: [PATCH 146/236] Release 2.19.1 --- CHANGELOG | 3 +++ lib/Saml2/version.json | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index b617b502..08a1a53a 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,8 @@ CHANGELOG ========= +v.2.19.1 +* [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method + v.2.19.0 * [#412](https://github.com/onelogin/php-saml/pull/412) Empty instead of unset the $_SESSION variable * [#433](https://github.com/onelogin/php-saml/issues/443) Fix Incorrect Destination in LogoutResponse when using responseUrl #443 diff --git a/lib/Saml2/version.json b/lib/Saml2/version.json index 5bec39fa..ac6f7011 100644 --- a/lib/Saml2/version.json +++ b/lib/Saml2/version.json @@ -1,6 +1,6 @@ { "php-saml": { - "version": "2.19.0", - "released": "26/11/2020" + "version": "2.19.1", + "released": "02/03/2021" } } From 9a4ad2d54bf538f65926e5088f3644ee38b5a681 Mon Sep 17 00:00:00 2001 From: Pierre Joye Date: Sat, 1 May 2021 20:27:15 +0700 Subject: [PATCH 147/236] Update index.php $samlNameIdSPNameQualifier and $samlNameIdNameQualifier inconsistently named and consequently not correctly initialized. --- demo1/index.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/demo1/index.php b/demo1/index.php index d3dbc541..d3648ad0 100644 --- a/demo1/index.php +++ b/demo1/index.php @@ -41,16 +41,16 @@ $nameIdFormat = $_SESSION['samlNameIdFormat']; } if (isset($_SESSION['samlNameIdNameQualifier'])) { - $nameIdNameQualifier = $_SESSION['samlNameIdNameQualifier']; + $samlNameIdNameQualifier = $_SESSION['samlNameIdNameQualifier']; } if (isset($_SESSION['samlNameIdSPNameQualifier'])) { - $nameIdSPNameQualifier = $_SESSION['samlNameIdSPNameQualifier']; + $samlNameIdSPNameQualifier = $_SESSION['samlNameIdSPNameQualifier']; } if (isset($_SESSION['samlSessionIndex'])) { $sessionIndex = $_SESSION['samlSessionIndex']; } - $auth->logout($returnTo, $parameters, $nameId, $sessionIndex, false, $nameIdFormat, $nameIdNameQualifier, $nameIdSPNameQualifier); + $auth->logout($returnTo, $parameters, $nameId, $sessionIndex, false, $nameIdFormat, $samlNameIdNameQualifier, $samlNameIdSPNameQualifier); # If LogoutRequest ID need to be saved in order to later validate it, do instead # $sloBuiltUrl = $auth->logout(null, $paramters, $nameId, $sessionIndex, true); From 9d0e8596d1e3c949ac7c24c4f9cdcc47af380211 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 14 May 2021 14:54:35 +0200 Subject: [PATCH 148/236] Create php-package.yml --- .github/workflows/php-package.yml | 48 +++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 .github/workflows/php-package.yml diff --git a/.github/workflows/php-package.yml b/.github/workflows/php-package.yml new file mode 100644 index 00000000..85a82fa8 --- /dev/null +++ b/.github/workflows/php-package.yml @@ -0,0 +1,48 @@ +# This workflow will install PHP dependencies, run tests and lint with a variety of PHP versions +# For more information see: https://github.com/marketplace/actions/setup-php-action + +name: php-saml package + +on: + push: + branches: [ master, 2.* ] + pull_request: + branches: [ master, 2.* ] + +jobs: + test: + runs-on: ubuntu-latest + strategy: + fail-fast: false + matrix: + operating-system: ['ubuntu-latest', 'windows-latest', 'macos-latest'] + php-version: [5.3, 5.4, 5.5, 5.6] +steps: + - name: Checkout + uses: actions/checkout@v2 + with: + php-version: ${{ matrix.php-versions }} + extensions: mbstring, intl, mcrypt, xml + tools: composer:v2 + ini-values: post_max_size=256M, max_execution_time=180 + coverage: xdebug + + - name: Validate composer.json and composer.lock + run: composer validate + + - name: Install Composer dependencies + composer self-update + composer install --prefer-source --no-interaction + + - name: Syntax check PHP + php vendor/bin/phpcpd --exclude tests --exclude vendor . + php vendor/bin/phploc . --exclude vendor + php vendor/bin/phploc lib/. + mkdir -p tests/build/dependences + php vendor/bin/pdepend --summary-xml=tests/build/logs/dependence-summary.xml --jdepend-chart=tests/build/dependences/jdepend.svg --overview-pyramid=tests/build/dependences/pyramid.svg lib/. + + - name: PHP Code Sniffer + php vendor/bin/phpcs --standard=tests/ZendModStandard lib/Saml2 demo1 demo2 demo-old endpoints tests/src + + - name: Run unit tests + vendor/bin/phpunit From 2992c70fcab6c36e5772056fd1805530b99da450 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Fri, 14 May 2021 20:10:33 +0200 Subject: [PATCH 149/236] Update php-package.yml --- .github/workflows/php-package.yml | 63 ++++++++++++++++++------------- 1 file changed, 36 insertions(+), 27 deletions(-) diff --git a/.github/workflows/php-package.yml b/.github/workflows/php-package.yml index 85a82fa8..54d9402a 100644 --- a/.github/workflows/php-package.yml +++ b/.github/workflows/php-package.yml @@ -11,38 +11,47 @@ on: jobs: test: - runs-on: ubuntu-latest + runs-on: ${{ matrix.operating-system }} strategy: fail-fast: false matrix: - operating-system: ['ubuntu-latest', 'windows-latest', 'macos-latest'] - php-version: [5.3, 5.4, 5.5, 5.6] -steps: - - name: Checkout - uses: actions/checkout@v2 - with: - php-version: ${{ matrix.php-versions }} - extensions: mbstring, intl, mcrypt, xml - tools: composer:v2 - ini-values: post_max_size=256M, max_execution_time=180 - coverage: xdebug - - - name: Validate composer.json and composer.lock + operating-system: ['ubuntu-latest'] + php-versions: [5.3, 5.4, 5.5, 5.6] + steps: + - name: Setup PHP, with composer and extensions + uses: shivammathur/setup-php@v2 #https://github.com/shivammathur/setup-php + with: + php-version: ${{ matrix.php-versions }} + extensions: mbstring, intl, mcrypt, xml + tools: composer:v2 + ini-values: post_max_size=256M, max_execution_time=180 + coverage: xdebug + + - name: Set git to use LF + run: | + git config --global core.autocrlf false + git config --global core.eol lf + + - uses: actions/checkout@v2 + + - name: Validate composer.json and composer.lock run: composer validate - - name: Install Composer dependencies - composer self-update - composer install --prefer-source --no-interaction + - name: Install Composer dependencies + run: | + composer self-update + composer install --prefer-source --no-interaction - - name: Syntax check PHP - php vendor/bin/phpcpd --exclude tests --exclude vendor . - php vendor/bin/phploc . --exclude vendor - php vendor/bin/phploc lib/. - mkdir -p tests/build/dependences - php vendor/bin/pdepend --summary-xml=tests/build/logs/dependence-summary.xml --jdepend-chart=tests/build/dependences/jdepend.svg --overview-pyramid=tests/build/dependences/pyramid.svg lib/. + - name: Syntax check PHP + run: | + php vendor/bin/phpcpd --exclude tests --exclude vendor . + php vendor/bin/phploc . --exclude vendor + php vendor/bin/phploc lib/. + mkdir -p tests/build/dependences + php vendor/bin/pdepend --summary-xml=tests/build/logs/dependence-summary.xml --jdepend-chart=tests/build/dependences/jdepend.svg --overview-pyramid=tests/build/dependences/pyramid.svg lib/. - - name: PHP Code Sniffer - php vendor/bin/phpcs --standard=tests/ZendModStandard lib/Saml2 demo1 demo2 demo-old endpoints tests/src + - name: PHP Code Sniffer + run: php vendor/bin/phpcs --standard=tests/ZendModStandard lib/Saml2 demo1 demo2 demo-old endpoints tests/src - - name: Run unit tests - vendor/bin/phpunit + - name: Run unit tests + run: vendor/bin/phpunit --verbose --debug From 748abe18166a500b944835b9b07ed6129e3cd157 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 25 May 2021 17:42:36 +0200 Subject: [PATCH 150/236] Add warning about the use of IdpMetadataParser class. If Metadata URLs are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF --- README.md | 4 ++++ lib/Saml2/IdPMetadataParser.php | 7 +++++++ 2 files changed, 11 insertions(+) diff --git a/README.md b/README.md index 546fe5c8..1369eca2 100644 --- a/README.md +++ b/README.md @@ -1503,6 +1503,8 @@ Auxiliary class that contains several methods to retrieve and process IdP metada * `parseXML` - Get IdP Metadata Info from XML. * `injectIntoSettings` - Inject metadata info into php-saml settings array. +The class does not validate in any way the URL that is introduced on methods like parseRemoteXML in order to retrieve the remove XML. Usually is the same administrator that handles the Service Provider the ones that set the URL that should belong to a trusted third-party IdP. +But there are other scenarios, like a SAAS app where the administrator of the app delegates on other administrators. In such case, extra protection should be taken in order to validate such URL inputs and avoid attacks like SSRF. For more info, look at the source code; each method is documented and details about what it does and how to use it are provided. Make sure to also check the doc folder where @@ -1510,6 +1512,8 @@ HTML documentation about the classes and methods is provided for SAML and SAML2. + + Demos included in the toolkit ----------------------------- diff --git a/lib/Saml2/IdPMetadataParser.php b/lib/Saml2/IdPMetadataParser.php index ca385644..53b201dc 100644 --- a/lib/Saml2/IdPMetadataParser.php +++ b/lib/Saml2/IdPMetadataParser.php @@ -10,6 +10,10 @@ class OneLogin_Saml2_IdPMetadataParser /** * Get IdP Metadata Info from URL * + * This class does not validate in any way the URL that is introduced, + * make sure to validate it properly before use it in the parseRemoteXML + * method in order to avoid security issues like SSRF attacks. + * * @param string $url URL where the IdP metadata is published * @param string $entityId Entity Id of the desired IdP, if no * entity Id is provided and the XML @@ -27,6 +31,9 @@ public static function parseRemoteXML($url, $entityId = null, $desiredNameIdForm try { $ch = curl_init($url); + curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTPS | CURLPROTO_HTTP); + curl_setopt($ch, CURLOPT_REDIR_PROTOCOLS, CURLPROTO_HTTPS | CURLPROTO_HTTP); + curl_setopt($ch, CURLOPT_MAXREDIRS, 5); curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); From 9e15d1491d4677f3185e0b9a2dd244ffe587d1bd Mon Sep 17 00:00:00 2001 From: Andrew Welburn Date: Mon, 28 Jun 2021 16:04:17 +0100 Subject: [PATCH 151/236] Fix typos in error messages --- lib/Saml2/Response.php | 2 +- tests/src/OneLogin/Saml2/ResponseTest.php | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 69b17736..58489194 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -624,7 +624,7 @@ public function getNameIdData() $spEntityId = $spData['entityId']; if ($spEntityId != $nameId->getAttribute($attr)) { throw new OneLogin_Saml2_ValidationError( - "The SPNameQualifier value mistmatch the SP entityID value.", + "The SPNameQualifier value mismatch the SP entityID value.", OneLogin_Saml2_ValidationError::SP_NAME_QUALIFIER_NAME_MISMATCH ); } diff --git a/tests/src/OneLogin/Saml2/ResponseTest.php b/tests/src/OneLogin/Saml2/ResponseTest.php index 8f1e162d..b4cb5017 100644 --- a/tests/src/OneLogin/Saml2/ResponseTest.php +++ b/tests/src/OneLogin/Saml2/ResponseTest.php @@ -184,7 +184,7 @@ public function testReturnNameId() $nameId10 = $response10->getNameId(); $this->fail('OneLogin_Saml2_ValidationError was not raised'); } catch (OneLogin_Saml2_ValidationError $e) { - $this->assertContains('The SPNameQualifier value mistmatch the SP entityID value.', $e->getMessage()); + $this->assertContains('The SPNameQualifier value mismatch the SP entityID value.', $e->getMessage()); } $response11 = new OneLogin_Saml2_Response($settings, $xml6); @@ -395,7 +395,7 @@ public function testGetNameIdData() $nameIdData10 = $response10->getNameIdData(); $this->fail('OneLogin_Saml2_ValidationError was not raised'); } catch (OneLogin_Saml2_ValidationError $e) { - $this->assertContains('The SPNameQualifier value mistmatch the SP entityID value.', $e->getMessage()); + $this->assertContains('The SPNameQualifier value mismatch the SP entityID value.', $e->getMessage()); } $response11 = new OneLogin_Saml2_Response($settings, $xml6); From 57902c444acfafba3c2d520745886816d1830f4c Mon Sep 17 00:00:00 2001 From: Ted Date: Tue, 3 Aug 2021 17:03:45 +0900 Subject: [PATCH 152/236] Update README.md code bug --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 1369eca2..6544285c 100644 --- a/README.md +++ b/README.md @@ -713,7 +713,7 @@ This code will provide the XML metadata file of our SP, based on the info that w Date: Mon, 6 Sep 2021 17:29:27 +0200 Subject: [PATCH 153/236] Fix #487. Enable strict check on in_array method --- lib/Saml2/Response.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Response.php b/lib/Saml2/Response.php index 58489194..1b57400e 100644 --- a/lib/Saml2/Response.php +++ b/lib/Saml2/Response.php @@ -792,7 +792,7 @@ private function _getAttributesByKeyName($keyName = "Name") $attributeKeyName = $attributeKeyNode->nodeValue; - if (in_array($attributeKeyName, array_keys($attributes))) { + if (in_array($attributeKeyName, array_keys($attributes), true)) { if (!$allowRepeatAttributeName) { throw new OneLogin_Saml2_ValidationError( "Found an Attribute element with duplicated ".$keyName, @@ -809,7 +809,7 @@ private function _getAttributesByKeyName($keyName = "Name") } } - if (in_array($attributeKeyName, array_keys($attributes))) { + if (in_array($attributeKeyName, array_keys($attributes), true)) { $attributes[$attributeKeyName] = array_merge($attributes[$attributeKeyName], $attributeValues); } else { $attributes[$attributeKeyName] = $attributeValues; From d074a814c45b96fd69b0401493385a17e006c533 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Tue, 19 Oct 2021 19:28:57 +0200 Subject: [PATCH 154/236] Warn about Open Redirect and Reply attacks --- README.md | 35 +++++++++++++++++++++++++++++++++++ demo1/index.php | 8 +++++--- demo2/consume.php | 4 ++-- demo2/index.php | 2 +- endpoints/acs.php | 6 ++++-- endpoints/sls.php | 2 +- 6 files changed, 48 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index 6544285c..e97cb71b 100644 --- a/README.md +++ b/README.md @@ -178,6 +178,37 @@ environment is not secure and will be exposed to attacks. In production also we highly recommended to register on the settings the IdP certificate instead of using the fingerprint method. The fingerprint, is a hash, so at the end is open to a collision attack that can end on a signature validation bypass. Other SAML toolkits deprecated that mechanism, we maintain it for compatibility and also to be used on test environment. + +### Avoiding Open Redirect attacks ### + +Some implementations uses the RelayState parameter as a way to control the flow when SSO and SLO succeeded. So basically the +user is redirected to the value of the RelayState. + +If you are using Signature Validation on the HTTP-Redirect binding, you will have the RelayState value integrity covered, otherwise, and +on HTTP-POST binding, you can't trust the RelayState so before +executing the validation, you need to verify that its value belong +a trusted and expected URL. + +Read more about Open Redirect [CWE-601](https://cwe.mitre.org/data/definitions/601.html). + + +### Avoiding Reply attacks ### + +A reply attack is basically try to reuse an intercepted valid SAML Message in order to impersonate a SAML action (SSO or SLO). + +SAML Messages have a limited timelife (NotBefore, NotOnOrAfter) that +make harder this kind of attacks, but they are still possible. + +In order to avoid them, the SP can keep a list of SAML Messages or Assertion IDs alredy valdidated and processed. Those values only need +to be stored the amount of time of the SAML Message life time, so +we don't need to store all processed message/assertion Ids, but the most recent ones. + +The OneLogin_Saml2_Auth class contains the [getLastRequestID](https://github.com/onelogin/php-saml/blob/f08bc1e8321cc8b855481153a26b9ed57a5201c2/lib/Saml2/Auth.php#L623), [getLastMessageId](https://github.com/onelogin/php-saml/blob/f08bc1e8321cc8b855481153a26b9ed57a5201c2/lib/Saml2/Auth.php#L709) and [getLastAssertionId](https://github.com/onelogin/php-saml/blob/f08bc1e8321cc8b855481153a26b9ed57a5201c2/lib/Saml2/Auth.php#L717) methods to retrieve the IDs + +Checking that the ID of the current Message/Assertion does not exists in the list of the ones already processed will prevent reply +attacks. + + Getting started --------------- @@ -791,6 +822,8 @@ $_SESSION['samlNameidSPNameQualifier'] = $auth->getNameIdSPNameQualifier(); $_SESSION['samlSessionIndex'] = $auth->getSessionIndex(); if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { + // To avoid 'Open Redirect' attacks, before execute the + // redirection confirm the value of $_POST['RelayState'] is a // trusted URL. $auth->redirectTo($_POST['RelayState']); } @@ -1129,6 +1162,8 @@ if (isset($_GET['sso'])) { // SSO action. Will send an AuthNRequest to the I $_SESSION['samlUserdata'] = $auth->getAttributes(); // Retrieves user data if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { + // To avoid 'Open Redirect' attacks, before execute the + // redirection confirm the value of $_POST['RelayState'] is a // trusted URL. $auth->redirectTo($_POST['RelayState']); // Redirect if there is a } // relayState set } else if (isset($_GET['sls'])) { // Single Logout Service diff --git a/demo1/index.php b/demo1/index.php index d3648ad0..8e1babd9 100644 --- a/demo1/index.php +++ b/demo1/index.php @@ -74,7 +74,7 @@ if (!empty($errors)) { echo '

',implode(', ', $errors),'

'; if ($auth->getSettings()->isDebugActive()) { - echo '

'.$auth->getLastErrorReason().'

'; + echo '

'.htmlentities($auth->getLastErrorReason()).'

'; } } @@ -91,6 +91,8 @@ $_SESSION['samlSessionIndex'] = $auth->getSessionIndex(); unset($_SESSION['AuthNRequestID']); if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { + // To avoid 'Open Redirect' attacks, before execute the + // redirection confirm the value of $_POST['RelayState'] is a // trusted URL. $auth->redirectTo($_POST['RelayState']); } } else if (isset($_GET['sls'])) { @@ -105,9 +107,9 @@ if (empty($errors)) { echo '

Sucessfully logged out

'; } else { - echo '

', implode(', ', $errors), '

'; + echo '

', htmlentities(implode(', ', $errors)), '

'; if ($auth->getSettings()->isDebugActive()) { - echo '

'.$auth->getLastErrorReason().'

'; + echo '

'.htmlentities($auth->getLastErrorReason()).'

'; } } } diff --git a/demo2/consume.php b/demo2/consume.php index b7c5cdd7..adff0aa7 100644 --- a/demo2/consume.php +++ b/demo2/consume.php @@ -14,7 +14,7 @@ $samlSettings = new OneLogin_Saml2_Settings(); $samlResponse = new OneLogin_Saml2_Response($samlSettings, $_POST['SAMLResponse']); if ($samlResponse->isValid()) { - echo 'You are: ' . $samlResponse->getNameId() . '
'; + echo 'You are: ' . htmlentities($samlResponse->getNameId()) . '
'; $attributes = $samlResponse->getAttributes(); if (!empty($attributes)) { echo 'You have the following attributes:
'; @@ -35,5 +35,5 @@ echo 'No SAML Response found in POST.'; } } catch (Exception $e) { - echo 'Invalid SAML Response: ' . $e->getMessage(); + echo 'Invalid SAML Response: ' . htmlentities($e->getMessage()); } diff --git a/demo2/index.php b/demo2/index.php index 64f6e0c1..cea57e83 100755 --- a/demo2/index.php +++ b/demo2/index.php @@ -39,7 +39,7 @@ } echo ''; if (!empty($_SESSION['IdPSessionIndex'])) { - echo '

The SessionIndex of the IdP is: '.$_SESSION['IdPSessionIndex'].'

'; + echo '

The SessionIndex of the IdP is: '.htmlentities($_SESSION['IdPSessionIndex']).'

'; } } else { echo "

You don't have any attribute

"; diff --git a/endpoints/acs.php b/endpoints/acs.php index 431455fd..280c961a 100644 --- a/endpoints/acs.php +++ b/endpoints/acs.php @@ -15,7 +15,7 @@ $errors = $auth->getErrors(); if (!empty($errors)) { - echo '

', implode(', ', $errors), '

'; + echo '

', htmlentities(implode(', ', $errors)), '

'; exit(); } @@ -27,6 +27,8 @@ $_SESSION['samlUserdata'] = $auth->getAttributes(); $_SESSION['IdPSessionIndex'] = $auth->getSessionIndex(); if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { + // To avoid 'Open Redirect' attacks, before execute the + // redirection confirm the value of $_POST['RelayState'] is a // trusted URL. $auth->redirectTo($_POST['RelayState']); } @@ -44,7 +46,7 @@ } echo ''; if (!empty($_SESSION['IdPSessionIndex'])) { - echo '

The SessionIndex of the IdP is: '.$_SESSION['IdPSessionIndex'].'

'; + echo '

The SessionIndex of the IdP is: '.htmlentities($_SESSION['IdPSessionIndex']).'

'; } } else { echo _('Attributes not found'); diff --git a/endpoints/sls.php b/endpoints/sls.php index 8fd1078f..7dd508ba 100644 --- a/endpoints/sls.php +++ b/endpoints/sls.php @@ -16,5 +16,5 @@ if (empty($errors)) { echo 'Sucessfully logged out'; } else { - echo implode(', ', $errors); + echo htmlentities(implode(', ', $errors)); } From 655a3cf7baff9b32027226634a21fa7029c57659 Mon Sep 17 00:00:00 2001 From: Zhangqi Chen Date: Sun, 30 Jan 2022 11:23:07 +0800 Subject: [PATCH 155/236] Make `Saml2\Auth` can accept a param `$spValidationOnly` The user who uses this package can decide if they want to make `$spValidationOnly` to be true --- lib/Saml2/Auth.php | 5 +++-- tests/src/OneLogin/Saml2/SettingsTest.php | 13 +++++++++++++ 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index 8a97cc33..d510bb4f 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -144,12 +144,13 @@ class OneLogin_Saml2_Auth * Initializes the SP SAML instance. * * @param array|object|null $oldSettings Setting data (You can provide a OneLogin_Saml_Settings, the settings object of the Saml folder implementation) + * @param bool $spValidationOnly if you only as an SP , you should set it to false if not you should set it to true * * @throws OneLogin_Saml2_Error */ - public function __construct($oldSettings = null) + public function __construct($oldSettings = null , $spValidationOnly = true) { - $this->_settings = new OneLogin_Saml2_Settings($oldSettings); + $this->_settings = new OneLogin_Saml2_Settings($oldSettings, $spValidationOnly); } /** diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 66f041ed..1380a121 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -1164,4 +1164,17 @@ public function testIsDebugActive() $settings3 = new OneLogin_Saml2_Settings($settingsInfo); $this->assertTrue($settings3->isDebugActive()); } + /** + * Tests the checkSettings method of the OneLogin_Saml2_Settings + * + * @covers OneLogin_Saml2_Settings::checkSettings + */ + public function testSpValidateOnlyIsTrue() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings2.php'; + unset($settingsInfo['idp']); + $settings = new OneLogin_Saml2_Settings($settingsInfo,true); + $this->assertEmpty($settings->getErrors()); + } } From 04232b7e86e00f9d1bd70733a2792667e2a51a01 Mon Sep 17 00:00:00 2001 From: Zhangqi Chen Date: Wed, 23 Feb 2022 11:22:55 +0800 Subject: [PATCH 156/236] Fix style error and add another test for my changes --- lib/Saml2/Auth.php | 2 +- tests/src/OneLogin/Saml2/SettingsTest.php | 22 ++++++++++++++++++++-- 2 files changed, 21 insertions(+), 3 deletions(-) diff --git a/lib/Saml2/Auth.php b/lib/Saml2/Auth.php index d510bb4f..df769531 100644 --- a/lib/Saml2/Auth.php +++ b/lib/Saml2/Auth.php @@ -148,7 +148,7 @@ class OneLogin_Saml2_Auth * * @throws OneLogin_Saml2_Error */ - public function __construct($oldSettings = null , $spValidationOnly = true) + public function __construct($oldSettings = null , $spValidationOnly = false) { $this->_settings = new OneLogin_Saml2_Settings($oldSettings, $spValidationOnly); } diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 1380a121..6da2e5d2 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -1165,7 +1165,7 @@ public function testIsDebugActive() $this->assertTrue($settings3->isDebugActive()); } /** - * Tests the checkSettings method of the OneLogin_Saml2_Settings + * Tests the checkSettings method of the OneLogin_Saml2_Settings when SpValidateOnly is false and IdP is not defined * * @covers OneLogin_Saml2_Settings::checkSettings */ @@ -1174,7 +1174,25 @@ public function testSpValidateOnlyIsTrue() $settingsDir = TEST_ROOT .'/settings/'; include $settingsDir.'settings2.php'; unset($settingsInfo['idp']); - $settings = new OneLogin_Saml2_Settings($settingsInfo,true); + $settings = new OneLogin_Saml2_Settings($settingsInfo, true); $this->assertEmpty($settings->getErrors()); } + + /** + * Tests the checkSettings method of the OneLogin_Saml2_Settings when SpValidateOnly is false and IdP is not defined + * + * @covers OneLogin_Saml2_Settings::checkSettings + */ + public function testSpValidateOnlyIsFalse() + { + $settingsDir = TEST_ROOT .'/settings/'; + include $settingsDir.'settings2.php'; + unset($settingsInfo['idp']); + try { + $settings = new OneLogin_Saml2_Settings($settingsInfo); + }catch (OneLogin_Saml2_Error $e) { + $this->assertContains('idp_not_found', $e->getMessage()); + } + $this->assertEmpty($settings); + } } From b35b96c21f2ece659fde4e106032ddebdeb74065 Mon Sep 17 00:00:00 2001 From: Zhangqi Chen Date: Fri, 25 Feb 2022 09:51:15 +0800 Subject: [PATCH 157/236] Fix tests error. --- tests/src/OneLogin/Saml2/SettingsTest.php | 1 - 1 file changed, 1 deletion(-) diff --git a/tests/src/OneLogin/Saml2/SettingsTest.php b/tests/src/OneLogin/Saml2/SettingsTest.php index 6da2e5d2..be03fe76 100644 --- a/tests/src/OneLogin/Saml2/SettingsTest.php +++ b/tests/src/OneLogin/Saml2/SettingsTest.php @@ -1193,6 +1193,5 @@ public function testSpValidateOnlyIsFalse() }catch (OneLogin_Saml2_Error $e) { $this->assertContains('idp_not_found', $e->getMessage()); } - $this->assertEmpty($settings); } } From f04475edd397537e86763fa63b9192b6567a07a8 Mon Sep 17 00:00:00 2001 From: Zhangqi Chen Date: Mon, 28 Feb 2022 09:58:08 +0800 Subject: [PATCH 158/236] Fix action errors by change the `NotOnOrAfter` --- tests/data/responses/invalids/encrypted_attrs.xml.base64 | 2 +- tests/data/responses/invalids/invalid_audience.xml.base64 | 2 +- .../data/responses/invalids/invalid_issuer_assertion.xml.base64 | 2 +- tests/data/responses/invalids/invalid_issuer_message.xml.base64 | 2 +- tests/data/responses/invalids/invalid_sessionindex.xml.base64 | 2 +- .../invalids/invalid_subjectconfirmation_inresponse.xml.base64 | 2 +- .../invalids/invalid_subjectconfirmation_noa.xml.base64 | 2 +- .../invalids/invalid_subjectconfirmation_recipient.xml.base64 | 2 +- .../responses/invalids/no_subjectconfirmation_data.xml.base64 | 2 +- .../responses/invalids/no_subjectconfirmation_method.xml.base64 | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/tests/data/responses/invalids/encrypted_attrs.xml.base64 b/tests/data/responses/invalids/encrypted_attrs.xml.base64 index f452075c..64438cbb 100644 --- a/tests/data/responses/invalids/encrypted_attrs.xml.base64 +++ b/tests/data/responses/invalids/encrypted_attrs.xml.base64 @@ -1 +1 @@ -PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeGMzMmFlZDY3LTgyMGYtNDI5Ni0wYzIwLTIwNWExMGRkNTc4NyIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIiBEZXN0aW5hdGlvbj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCI+DQogIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+DQogIDxzYW1scDpTdGF0dXM+DQogICAgPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPg0KICA8L3NhbWxwOlN0YXR1cz4NCiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4NCiAgICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPiAgICANCiAgICA8c2FtbDpTdWJqZWN0Pg0KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAyMC0wNi0xN1QxNDo1OToxNFoiIFJlY2lwaWVudD0iaGh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL21ldGFkYXRhLnBocCIgSW5SZXNwb25zZVRvPSJfNTdiY2JmNzAtN2IxZi0wMTJlLWM4MjEtNzgyYmNiMTNiYjM4Ii8+DQogICAgICA8L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj4NCiAgICA8L3NhbWw6U3ViamVjdD4NCiAgICA8c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxMC0wNi0xN1QxNDo1Mzo0NFoiIE5vdE9uT3JBZnRlcj0iMjAyMS0wNi0xN1QxNDo1OToxNFoiPg0KICAgICAgPHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4NCiAgICAgICAgPHNhbWw6QXVkaWVuY2U+aHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvbWV0YWRhdGEucGhwPC9zYW1sOkF1ZGllbmNlPg0KICAgICAgPC9zYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgPC9zYW1sOkNvbmRpdGlvbnM+DQogICAgPHNhbWw6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDExLTA2LTE3VDE0OjU0OjA3WiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjAyMC0wNi0xN1QyMjo1NDoxNFoiIFNlc3Npb25JbmRleD0iXzUxYmUzNzk2NWZlYjU1NzlkODAzMTQxMDc2OTM2ZGMyZTlkMWQ5OGViZiI+DQogICAgICA8c2FtbDpBdXRobkNvbnRleHQ+DQogICAgICAgIDxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPg0KICAgICAgPC9zYW1sOkF1dGhuQ29udGV4dD4NCiAgICA8L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+DQogICAgPHNhbWw6QXR0cmlidXRlU3RhdGVtZW50Pg0KIDxzYW1sOkVuY3J5cHRlZEF0dHJpYnV0ZSB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIj4NCiAgICAgICAgICA8eGVuYzpFbmNyeXB0ZWREYXRhIHhtbG5zOnhlbmM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyIgVHlwZT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjRWxlbWVudCIgSWQ9Il9GMzk2MjVBRjY4QjRGQzA3OENDNzU4MkQyOEQwNUQ5QyI+DQogICAgICAgICAgICA8eGVuYzpFbmNyeXB0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjYWVzMjU2LWNiYyIvPg0KICAgICAgICAgICAgPGRzOktleUluZm8geG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICAgICAgICAgICAgICA8eGVuYzpFbmNyeXB0ZWRLZXk+DQogICAgICAgICAgICAgICAgPHhlbmM6RW5jcnlwdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jI3JzYS1vYWVwLW1nZjFwIi8+DQogICAgICAgICAgICAgICAgPGRzOktleUluZm8geG1sbnM6ZHNpZz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogICAgICAgICAgICAgICAgICA8ZHM6S2V5TmFtZT42MjM1NWZiZDFmNjI0NTAzYzVjOTY3NzQwMmVjY2EwMGVmMWY2Mjc3PC9kczpLZXlOYW1lPg0KICAgICAgICAgICAgICAgIDwvZHM6S2V5SW5mbz4NCiAgICAgICAgICAgICAgICA8eGVuYzpDaXBoZXJEYXRhPg0KICAgICAgICAgICAgICAgICAgPHhlbmM6Q2lwaGVyVmFsdWU+SzBtQkx4Zkx6aUtWVUtFQU9ZZTdENnVWU0NQeTh2eVdWaDNSZWNuUEVTKzhRa0FoT3VSU3VFL0xRcEZyMGh1SS9pQ0V5OXBkZTFRZ2pZREx0akhjdWpLaTJ4R3FXNmprWFcvRXVLb21xV1BQQTJ4WXMxZnBCMXN1NGFYVU9RQjZPSjcwL29EY09zeTgzNGdoRmFCV2lsRThmcXlEQlVCdlcrMkl2YU1VWmFid04vczltVmtXek0zcjMwdGxraExLN2lPcmJHQWxkSUh3RlU1ejdQUFI2Uk8zWTNmSXhqSFU0ME9uTHNKYzN4SXFkTEgzZlhwQzBrZ2k1VXNwTGRxMTRlNU9vWGpMb1BHM0JPM3p3T0FJSjhYTkJXWTV1UW9mNktyS2JjdnRaU1kwZk12UFloWWZOanRSRnk4eTQ5b3ZMOWZ3akNSVERsVDUrYUhxc0NUQnJ3PT08L3hlbmM6Q2lwaGVyVmFsdWU+DQogICAgICAgICAgICAgICAgPC94ZW5jOkNpcGhlckRhdGE+DQogICAgICAgICAgICAgIDwveGVuYzpFbmNyeXB0ZWRLZXk+DQogICAgICAgICAgICA8L2RzOktleUluZm8+DQogICAgICAgICAgICA8eGVuYzpDaXBoZXJEYXRhPg0KICAgICAgICAgICAgICA8eGVuYzpDaXBoZXJWYWx1ZT5aekN1NmF4R2dBWVpIVmY3N05YOGFwWktCL0dKRGV1VjZiRkJ5QlMwQUlnaVhrdkRVQW1MQ3BhYlRBV0JNK3l6MTlvbEE2cnJ5dU9mcjgyZXYyYnpQTlVSdm00U1l4YWh2dUw0UGlibjV3Smt5MEJsNTRWcW1jVStBcWowZEF2T2dxRzF5M1g0d085bjliUnNUdjY5MjFtMGVxUkFGcGg4a0s4TDloaXJLMUJ4WUJZajJSeUZDb0ZEUHhWWjV3eXJhM3E0cW1FNC9FTFFwRlA2bWZVOExYYjB1b1dKVWpHVWVsUzJBYTdiWmlzOHpFcHdvdjRDd3RsTmpsdFFpaDRtdjd0dENBZllxY1FJRnpCVEIrREFhMCtYZ2d4Q0xjZEIzK21RaVJjRUNCZndISEo3Z1JtbnVCRWdlV1QzQ0dLYTNOYjdHTVhPZnV4RktGNXBJZWhXZ28za2ROUUxhbG9yOFJWVzZJOFAvSThmUTMzRmUrTnNIVm5KM3p3U0EvL2E8L3hlbmM6Q2lwaGVyVmFsdWU+DQogICAgICAgICAgICA8L3hlbmM6Q2lwaGVyRGF0YT4NCiAgICAgICAgICA8L3hlbmM6RW5jcnlwdGVkRGF0YT4NCiAgICAgICAgPC9zYW1sOkVuY3J5cHRlZEF0dHJpYnV0ZT4NCiAgICA8L3NhbWw6QXR0cmlidXRlU3RhdGVtZW50Pg0KICA8L3NhbWw6QXNzZXJ0aW9uPg0KPC9zYW1scDpSZXNwb25zZT4= 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 \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_audience.xml.base64 b/tests/data/responses/invalids/invalid_audience.xml.base64 index a2575836..3bf86bb7 100644 --- a/tests/data/responses/invalids/invalid_audience.xml.base64 +++ b/tests/data/responses/invalids/invalid_audience.xml.base64 @@ -1 +1 @@ -PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeGMzMmFlZDY3LTgyMGYtNDI5Ni0wYzIwLTIwNWExMGRkNTc4NyIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIiBEZXN0aW5hdGlvbj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCI+DQogIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+DQogIDxzYW1scDpTdGF0dXM+DQogICAgPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPg0KICA8L3NhbWxwOlN0YXR1cz4NCiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4NCiAgICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPiAgICANCiAgICA8c2FtbDpTdWJqZWN0Pg0KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAyMC0wNi0xN1QxNDo1OToxNFoiIFJlY2lwaWVudD0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCIvPg0KICAgICAgPC9zYW1sOlN1YmplY3RDb25maXJtYXRpb24+DQogICAgPC9zYW1sOlN1YmplY3Q+DQogICAgPHNhbWw6Q29uZGl0aW9ucyBOb3RCZWZvcmU9IjIwMTAtMDYtMTdUMTQ6NTM6NDRaIiBOb3RPbk9yQWZ0ZXI9IjIwMjEtMDYtMTdUMTQ6NTk6MTRaIj4NCiAgICAgIDxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgICAgIDxzYW1sOkF1ZGllbmNlPmh0dHA6Ly9pbnZhbGlkLmF1ZGllbmNlLmNvbTwvc2FtbDpBdWRpZW5jZT4NCiAgICAgIDwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgIDwvc2FtbDpDb25kaXRpb25zPg0KICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDowN1oiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwMjEtMDYtMTdUMjI6NTQ6MTRaIiBTZXNzaW9uSW5kZXg9Il81MWJlMzc5NjVmZWI1NTc5ZDgwMzE0MTA3NjkzNmRjMmU5ZDFkOThlYmYiPg0KICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Pg0KICAgICAgICA8c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj4NCiAgICAgIDwvc2FtbDpBdXRobkNvbnRleHQ+DQogICAgPC9zYW1sOkF1dGhuU3RhdGVtZW50Pg0KICAgIDxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj4NCiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgPC9zYW1sOkFzc2VydGlvbj4NCjwvc2FtbHA6UmVzcG9uc2U+ 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 \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_issuer_assertion.xml.base64 b/tests/data/responses/invalids/invalid_issuer_assertion.xml.base64 index 07748ece..794c6c60 100644 --- a/tests/data/responses/invalids/invalid_issuer_assertion.xml.base64 +++ b/tests/data/responses/invalids/invalid_issuer_assertion.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_issuer_message.xml.base64 b/tests/data/responses/invalids/invalid_issuer_message.xml.base64 index f1f49fe5..a65a79c1 100644 --- a/tests/data/responses/invalids/invalid_issuer_message.xml.base64 +++ b/tests/data/responses/invalids/invalid_issuer_message.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_sessionindex.xml.base64 b/tests/data/responses/invalids/invalid_sessionindex.xml.base64 index cc5a581c..b1873e14 100644 --- a/tests/data/responses/invalids/invalid_sessionindex.xml.base64 +++ b/tests/data/responses/invalids/invalid_sessionindex.xml.base64 @@ -1 +1 @@ -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 +PD94bWwgdmVyc2lvbj0iMS4wIj8+CjxzYW1scDpSZXNwb25zZSB4bWxuczpzYW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnByb3RvY29sIiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJRD0icGZ4YzMyYWVkNjctODIwZi00Mjk2LTBjMjAtMjA1YTEwZGQ1Nzg3IiBWZXJzaW9uPSIyLjAiIElzc3VlSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDoxNFoiIERlc3RpbmF0aW9uPSJodHRwOi8vc3R1ZmYuY29tL2VuZHBvaW50cy9lbmRwb2ludHMvYWNzLnBocCIgSW5SZXNwb25zZVRvPSJfNTdiY2JmNzAtN2IxZi0wMTJlLWM4MjEtNzgyYmNiMTNiYjM4Ij4KICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPgogIDxzYW1scDpTdGF0dXM+CiAgICA8c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+CiAgPC9zYW1scDpTdGF0dXM+CiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4KICAgIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+ICAgIAogICAgPHNhbWw6U3ViamVjdD4KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+CiAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb24gTWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206YmVhcmVyIj4KICAgICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBOb3RPbk9yQWZ0ZXI9IjIwOTktMDYtMTdUMTQ6NTk6MTRaIiBSZWNpcGllbnQ9Imh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL2VuZHBvaW50cy9hY3MucGhwIiBJblJlc3BvbnNlVG89Il81N2JjYmY3MC03YjFmLTAxMmUtYzgyMS03ODJiY2IxM2JiMzgiLz4KICAgICAgPC9zYW1sOlN1YmplY3RDb25maXJtYXRpb24+CiAgICA8L3NhbWw6U3ViamVjdD4KICAgIDxzYW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDEwLTA2LTE3VDE0OjUzOjQ0WiIgTm90T25PckFmdGVyPSIyMDk5LTA2LTE3VDE0OjU5OjE0WiI+CiAgICAgIDxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+CiAgICAgICAgPHNhbWw6QXVkaWVuY2U+aHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvbWV0YWRhdGEucGhwPC9zYW1sOkF1ZGllbmNlPgogICAgICA8L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4KICAgIDwvc2FtbDpDb25kaXRpb25zPgogICAgPHNhbWw6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDExLTA2LTE3VDE0OjU0OjA3WiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjAxMy0wNi0xN1QyMjo1NDoxNFoiIFNlc3Npb25JbmRleD0iXzUxYmUzNzk2NWZlYjU1NzlkODAzMTQxMDc2OTM2ZGMyZTlkMWQ5OGViZiI+CiAgICAgIDxzYW1sOkF1dGhuQ29udGV4dD4KICAgICAgICA8c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj4KICAgICAgPC9zYW1sOkF1dGhuQ29udGV4dD4KICAgIDwvc2FtbDpBdXRoblN0YXRlbWVudD4KICAgIDxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4KICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWU9Im1haWwiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPgogICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnNvbWVvbmVAZXhhbXBsZS5jb208L3NhbWw6QXR0cmlidXRlVmFsdWU+CiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+CiAgICA8L3NhbWw6QXR0cmlidXRlU3RhdGVtZW50PgogIDwvc2FtbDpBc3NlcnRpb24+Cjwvc2FtbHA6UmVzcG9uc2U+ \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64 b/tests/data/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64 index 2ce545f8..5ee14894 100644 --- a/tests/data/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64 +++ b/tests/data/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_subjectconfirmation_noa.xml.base64 b/tests/data/responses/invalids/invalid_subjectconfirmation_noa.xml.base64 index 6d4b70aa..926336ba 100644 --- a/tests/data/responses/invalids/invalid_subjectconfirmation_noa.xml.base64 +++ b/tests/data/responses/invalids/invalid_subjectconfirmation_noa.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file diff --git a/tests/data/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64 b/tests/data/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64 index 1bf1d25a..4ce477a3 100644 --- a/tests/data/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64 +++ b/tests/data/responses/invalids/invalid_subjectconfirmation_recipient.xml.base64 @@ -1 +1 @@ -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 +PD94bWwgdmVyc2lvbj0iMS4wIj8+CjxzYW1scDpSZXNwb25zZSB4bWxuczpzYW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnByb3RvY29sIiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJRD0icGZ4YzMyYWVkNjctODIwZi00Mjk2LTBjMjAtMjA1YTEwZGQ1Nzg3IiBWZXJzaW9uPSIyLjAiIElzc3VlSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDoxNFoiIERlc3RpbmF0aW9uPSJodHRwOi8vc3R1ZmYuY29tL2VuZHBvaW50cy9lbmRwb2ludHMvYWNzLnBocCIgSW5SZXNwb25zZVRvPSJfNTdiY2JmNzAtN2IxZi0wMTJlLWM4MjEtNzgyYmNiMTNiYjM4Ij4KICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPgogIDxzYW1scDpTdGF0dXM+CiAgICA8c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+CiAgPC9zYW1scDpTdGF0dXM+CiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4KICAgIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+ICAgIAogICAgPHNhbWw6U3ViamVjdD4KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+CiAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb24gTWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206YmVhcmVyIj4KICAgICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBOb3RPbk9yQWZ0ZXI9IjIwOTktMDYtMTdUMTQ6NTk6MTRaIiBSZWNpcGllbnQ9Imh0dHA6Ly9pbnZhbGlkLnJlY2lwZW50LmV4YW1wbGUuY29tIiBJblJlc3BvbnNlVG89Il81N2JjYmY3MC03YjFmLTAxMmUtYzgyMS03ODJiY2IxM2JiMzgiLz4KICAgICAgPC9zYW1sOlN1YmplY3RDb25maXJtYXRpb24+CiAgICA8L3NhbWw6U3ViamVjdD4KICAgIDxzYW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDEwLTA2LTE3VDE0OjUzOjQ0WiIgTm90T25PckFmdGVyPSIyMDk5LTA2LTE3VDE0OjU5OjE0WiI+CiAgICAgIDxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+CiAgICAgICAgPHNhbWw6QXVkaWVuY2U+aHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvbWV0YWRhdGEucGhwPC9zYW1sOkF1ZGllbmNlPgogICAgICA8L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4KICAgIDwvc2FtbDpDb25kaXRpb25zPgogICAgPHNhbWw6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDExLTA2LTE3VDE0OjU0OjA3WiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjA5OS0wNi0xN1QyMjo1NDoxNFoiIFNlc3Npb25JbmRleD0iXzUxYmUzNzk2NWZlYjU1NzlkODAzMTQxMDc2OTM2ZGMyZTlkMWQ5OGViZiI+CiAgICAgIDxzYW1sOkF1dGhuQ29udGV4dD4KICAgICAgICA8c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj4KICAgICAgPC9zYW1sOkF1dGhuQ29udGV4dD4KICAgIDwvc2FtbDpBdXRoblN0YXRlbWVudD4KICAgIDxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4KICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWU9Im1haWwiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPgogICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnNvbWVvbmVAZXhhbXBsZS5jb208L3NhbWw6QXR0cmlidXRlVmFsdWU+CiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+CiAgICA8L3NhbWw6QXR0cmlidXRlU3RhdGVtZW50PgogIDwvc2FtbDpBc3NlcnRpb24+Cjwvc2FtbHA6UmVzcG9uc2U+ \ No newline at end of file diff --git a/tests/data/responses/invalids/no_subjectconfirmation_data.xml.base64 b/tests/data/responses/invalids/no_subjectconfirmation_data.xml.base64 index 3c92f561..0c0c1837 100644 --- a/tests/data/responses/invalids/no_subjectconfirmation_data.xml.base64 +++ b/tests/data/responses/invalids/no_subjectconfirmation_data.xml.base64 @@ -1 +1 @@ -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 \ No newline at end of file diff --git a/tests/data/responses/invalids/no_subjectconfirmation_method.xml.base64 b/tests/data/responses/invalids/no_subjectconfirmation_method.xml.base64 index 07ce153a..ef222469 100644 --- a/tests/data/responses/invalids/no_subjectconfirmation_method.xml.base64 +++ b/tests/data/responses/invalids/no_subjectconfirmation_method.xml.base64 @@ -1 +1 @@ -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 +PD94bWwgdmVyc2lvbj0iMS4wIj8+CjxzYW1scDpSZXNwb25zZSB4bWxuczpzYW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnByb3RvY29sIiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJRD0icGZ4YzMyYWVkNjctODIwZi00Mjk2LTBjMjAtMjA1YTEwZGQ1Nzg3IiBWZXJzaW9uPSIyLjAiIElzc3VlSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDoxNFoiIERlc3RpbmF0aW9uPSJodHRwOi8vc3R1ZmYuY29tL2VuZHBvaW50cy9lbmRwb2ludHMvYWNzLnBocCIgSW5SZXNwb25zZVRvPSJfNTdiY2JmNzAtN2IxZi0wMTJlLWM4MjEtNzgyYmNiMTNiYjM4Ij4KICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPgogIDxzYW1scDpTdGF0dXM+CiAgICA8c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+CiAgPC9zYW1scDpTdGF0dXM+CiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4KICAgIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+ICAgIAogICAgPHNhbWw6U3ViamVjdD4KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+CiAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb24gTWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206aG9sZGVyLW9mLWtleSI+CiAgICAgICAgPHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDQ5LTA2LTE3VDE0OjU5OjE0WiIgUmVjaXBpZW50PSJodHRwOi8vc3R1ZmYuY29tL2VuZHBvaW50cy9lbmRwb2ludHMvYWNzLnBocCIgSW5SZXNwb25zZVRvPSJfNTdiY2JmNzAtN2IxZi0wMTJlLWM4MjEtNzgyYmNiMTNiYjM4Ii8+CiAgICAgIDwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPgogICAgPC9zYW1sOlN1YmplY3Q+CiAgICA8c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxMC0wNi0xN1QxNDo1Mzo0NFoiIE5vdE9uT3JBZnRlcj0iMjA0OS0wNi0xN1QxNDo1OToxNFoiPgogICAgICA8c2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPgogICAgICAgIDxzYW1sOkF1ZGllbmNlPmh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL21ldGFkYXRhLnBocDwvc2FtbDpBdWRpZW5jZT4KICAgICAgPC9zYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+CiAgICA8L3NhbWw6Q29uZGl0aW9ucz4KICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDowN1oiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwNDktMDYtMTdUMjI6NTQ6MTRaIiBTZXNzaW9uSW5kZXg9Il81MWJlMzc5NjVmZWI1NTc5ZDgwMzE0MTA3NjkzNmRjMmU5ZDFkOThlYmYiPgogICAgICA8c2FtbDpBdXRobkNvbnRleHQ+CiAgICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+CiAgICAgIDwvc2FtbDpBdXRobkNvbnRleHQ+CiAgICA8L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+CiAgICA8c2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+CiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj4KICAgICAgICA8c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5zb21lb25lQGV4YW1wbGUuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPgogICAgICA8L3NhbWw6QXR0cmlidXRlPgogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4KICA8L3NhbWw6QXNzZXJ0aW9uPgo8L3NhbWxwOlJlc3BvbnNlPg== \ No newline at end of file From 20a2cb3e2c2722f4a06d2b16006d5e140adb48db Mon Sep 17 00:00:00 2001 From: Bryan Vestey Date: Fri, 12 Aug 2022 09:48:44 -0700 Subject: [PATCH 159/236] Update README.md --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index e97cb71b..9f0ebb02 100644 --- a/README.md +++ b/README.md @@ -2,6 +2,8 @@ [![Build Status](https://api.travis-ci.org/onelogin/php-saml.png?branch=master)](http://travis-ci.org/onelogin/php-saml) [![Coverage Status](https://coveralls.io/repos/onelogin/php-saml/badge.png)](https://coveralls.io/r/onelogin/php-saml) [![License](https://poser.pugx.org/onelogin/php-saml/license.png)](https://packagist.org/packages/onelogin/php-saml) +## **Notice:** This project is currently not under active development, please see [#531](https://github.com/onelogin/php-saml/issues/531) for more information. + Add SAML support to your PHP software using this library. Forget those complicated libraries and use this open source library provided and supported by OneLogin Inc. From e2657c3f2cea55180ebe976b28e1c4b7a358dc5a Mon Sep 17 00:00:00 2001 From: George Khaburzaniya Date: Fri, 18 Nov 2022 14:25:37 -0800 Subject: [PATCH 160/236] Remove references to onelogin support. --- README.md | 40 ++- certs/README | 2 +- composer.json | 2 +- demo-old/consume.php | 2 +- demo1/Readme.txt | 4 +- demo2/Readme.txt | 12 +- .../classes/OneLogin_Saml_AuthRequest.html | 52 ++-- docs/Saml/classes/OneLogin_Saml_Metadata.html | 54 ++-- docs/Saml/classes/OneLogin_Saml_Response.html | 44 ++-- docs/Saml/classes/OneLogin_Saml_Settings.html | 80 +++--- docs/Saml/classes/OneLogin_Saml_XmlSec.html | 60 ++--- docs/Saml/graph_class.html | 12 +- docs/Saml/index.html | 18 +- docs/Saml/namespaces/default.html | 24 +- docs/Saml2/classes/OneLogin_Saml2_Auth.html | 158 ++++++------ .../classes/OneLogin_Saml2_AuthnRequest.html | 54 ++-- .../classes/OneLogin_Saml2_Constants.html | 184 ++++++------- docs/Saml2/classes/OneLogin_Saml2_Error.html | 82 +++--- .../classes/OneLogin_Saml2_LogoutRequest.html | 76 +++--- .../OneLogin_Saml2_LogoutResponse.html | 80 +++--- .../classes/OneLogin_Saml2_Metadata.html | 46 ++-- .../classes/OneLogin_Saml2_Response.html | 138 +++++----- .../classes/OneLogin_Saml2_Settings.html | 244 +++++++++--------- docs/Saml2/classes/OneLogin_Saml2_Utils.html | 152 +++++------ docs/Saml2/graph_class.html | 12 +- docs/Saml2/index.html | 14 +- docs/Saml2/namespaces/default.html | 34 +-- lib/Saml2/Auth.php | 4 +- lib/Saml2/Constants.php | 4 +- lib/Saml2/Error.php | 4 +- lib/Saml2/IdPMetadataParser.php | 2 +- lib/Saml2/Metadata.php | 2 +- lib/Saml2/Settings.php | 2 +- lib/Saml2/Utils.php | 2 +- phpdoc.xml | 2 +- phpunit.xml | 2 +- settings_example.php | 12 +- 37 files changed, 856 insertions(+), 860 deletions(-) diff --git a/README.md b/README.md index 9f0ebb02..d91ca948 100644 --- a/README.md +++ b/README.md @@ -1,12 +1,8 @@ -# OneLogin's SAML PHP Toolkit +# SAML PHP Toolkit [![Build Status](https://api.travis-ci.org/onelogin/php-saml.png?branch=master)](http://travis-ci.org/onelogin/php-saml) [![Coverage Status](https://coveralls.io/repos/onelogin/php-saml/badge.png)](https://coveralls.io/r/onelogin/php-saml) [![License](https://poser.pugx.org/onelogin/php-saml/license.png)](https://packagist.org/packages/onelogin/php-saml) -## **Notice:** This project is currently not under active development, please see [#531](https://github.com/onelogin/php-saml/issues/531) for more information. - Add SAML support to your PHP software using this library. -Forget those complicated libraries and use this open source library provided -and supported by OneLogin Inc. **The 3.X branch is compatible with PHP > 7.1, so if you are using that PHP version, use it and not the 2.X or the master branch** @@ -22,7 +18,7 @@ Version 2.17.0 sets strict mode active by default Update php-saml to 2.15.0, this version includes a security patch related to XEE attacks -php-saml is not affected by [201803-01](https://simplesamlphp.org/security/201803-01) +php-saml is not affected by [201803-01](https://simplesamlphp.org/security/201803-01) Update php-saml to 2.10.4, this version includes a security patch related to [signature validations on LogoutRequests/LogoutResponses](https://github.com/onelogin/php-saml/commit/949359f5cad5e1d085c4e5447d9aa8f49a6e82a1) @@ -35,7 +31,7 @@ php-saml < v2.10.0 is vulnerable and allows signature wrapping! Security Guidelines ------------------- -If you believe you have discovered a security vulnerability in this toolkit, please report it at https://www.onelogin.com/security with a description. We follow responsible disclosure guidelines, and will work with you to quickly find a resolution. +If you believe you have discovered a security vulnerability in this toolkit, please report it as an issue Why add SAML support to my software? @@ -65,7 +61,7 @@ since 2002, but lately it is becoming popular due its advantages: General description ------------------- -OneLogin's SAML PHP toolkit let you build a SP (Service Provider) over +SAML PHP toolkit let you build a SP (Service Provider) over your PHP application and connect it to any IdP (Identity Provider). Supports: @@ -86,7 +82,7 @@ Key features: * **Easy to use** - Programmer will be allowed to code high-level and low-level programming, 2 easy to use APIs are available. * **Tested** - Thoroughly tested. - * **Popular** - OneLogin's customers use it. Many PHP SAML plugins uses it. + * **Popular** - customers use it. Many PHP SAML plugins uses it. Integrate your PHP toolkit at OneLogin using this guide: [https://developers.onelogin.com/page/saml-toolkit-for-php](https://developers.onelogin.com/page/saml-toolkit-for-php) @@ -356,7 +352,7 @@ $settings = array ( // URL Location where the from the IdP will be returned 'url' => '', // SAML protocol binding to be used when returning the - // message. OneLogin Toolkit supports this endpoint for the + // message. SAML Toolkit supports this endpoint for the // HTTP-POST binding only. 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST', ), @@ -382,7 +378,7 @@ $settings = array ( // URL Location where the from the IdP will be returned 'url' => '', // SAML protocol binding to be used when returning the - // message. OneLogin Toolkit supports the HTTP-Redirect binding + // message. SAML Toolkit supports the HTTP-Redirect binding // only for this endpoint. 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', ), @@ -415,7 +411,7 @@ $settings = array ( // will be sent. 'url' => '', // SAML protocol binding to be used when returning the - // message. OneLogin Toolkit supports the HTTP-Redirect binding + // message. SAML Toolkit supports the HTTP-Redirect binding // only for this endpoint. 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', ), @@ -425,9 +421,9 @@ $settings = array ( 'url' => '', // URL location of the IdP where the SP will send the SLO Response (ResponseLocation) // if not set, url for the SLO Request will be used - 'responseUrl' => '', + 'responseUrl' => '', // SAML protocol binding to be used when returning the - // message. OneLogin Toolkit supports the HTTP-Redirect binding + // message. SAML Toolkit supports the HTTP-Redirect binding // only for this endpoint. 'binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', ), @@ -824,7 +820,7 @@ $_SESSION['samlNameidSPNameQualifier'] = $auth->getNameIdSPNameQualifier(); $_SESSION['samlSessionIndex'] = $auth->getSessionIndex(); if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { - // To avoid 'Open Redirect' attacks, before execute the + // To avoid 'Open Redirect' attacks, before execute the // redirection confirm the value of $_POST['RelayState'] is a // trusted URL. $auth->redirectTo($_POST['RelayState']); } @@ -1164,7 +1160,7 @@ if (isset($_GET['sso'])) { // SSO action. Will send an AuthNRequest to the I $_SESSION['samlUserdata'] = $auth->getAttributes(); // Retrieves user data if (isset($_POST['RelayState']) && OneLogin_Saml2_Utils::getSelfURL() != $_POST['RelayState']) { - // To avoid 'Open Redirect' attacks, before execute the + // To avoid 'Open Redirect' attacks, before execute the // redirection confirm the value of $_POST['RelayState'] is a // trusted URL. $auth->redirectTo($_POST['RelayState']); // Redirect if there is a } // relayState set @@ -1219,9 +1215,9 @@ $needsAuth = empty($_SESSION['samlUserdata']); if ($needsAuth) { // put SAML settings into an array to avoid placing files in the - // composer vendor/ directories + // composer vendor/ directories $samlsettings = array(/*...config goes here...*/); - + $auth = new \OneLogin\Saml2\Auth($samlsettings); if (!empty($_REQUEST['SAMLResponse']) && !empty($_REQUEST['RelayState'])) { @@ -1351,7 +1347,7 @@ Lets describe now the classes and methods of the SAML2 library. ##### OneLogin_Saml2_Auth - Auth.php ##### -Main class of OneLogin PHP Toolkit +Main class of PHP Toolkit * `OneLogin_Saml2_Auth` - Initializes the SP SAML instance * `login` - Initiates the SSO process. @@ -1448,7 +1444,7 @@ SAML 2 Logout Response class ##### OneLogin_Saml2_Settings - `Settings.php` ##### -Configuration of the OneLogin PHP Toolkit +Configuration of the PHP Toolkit * `OneLogin_Saml2_Settings` - Initializes the settings: Sets the paths of the different folders and Loads settings info from settings file or @@ -1562,7 +1558,7 @@ Demos require that SP and IdP are well configured before test it. ### SP setup ### -The Onelogin's PHP Toolkit allows you to provide the settings info in two ways: +The PHP Toolkit allows you to provide the settings info in two ways: * Use a `settings.php` file that we should locate at the base folder of the toolkit. @@ -1637,7 +1633,7 @@ must be done. ### SP setup ### -The Onelogin's PHP Toolkit allows you to provide the settings info in two ways: +The PHP Toolkit allows you to provide the settings info in two ways: * Use a `settings.php` file that we should locate at the base folder of the toolkit. diff --git a/certs/README b/certs/README index fa28e252..ceee1f3e 100644 --- a/certs/README +++ b/certs/README @@ -1,6 +1,6 @@ Take care of this folder that could contain private key. Be sure that this folder never is published. -Onelogin PHP Toolkit expects certs for the SP stored at: +PHP Toolkit expects certs for the SP stored at: * sp.key Private Key * sp.crt Public cert diff --git a/composer.json b/composer.json index 0c2bfd12..614c708c 100644 --- a/composer.json +++ b/composer.json @@ -1,6 +1,6 @@ { "name": "onelogin/php-saml", - "description": "OneLogin PHP SAML Toolkit", + "description": "PHP SAML Toolkit", "license": "MIT", "homepage": "https://developers.onelogin.com/saml/php", "keywords": ["saml", "saml2", "onelogin"], diff --git a/demo-old/consume.php b/demo-old/consume.php index fc33df84..8d993a48 100644 --- a/demo-old/consume.php +++ b/demo-old/consume.php @@ -27,7 +27,7 @@ echo ''; } echo '

'; - echo "The v.1 of the Onelogin's PHP SAML Tookit does not support SLO."; + echo "The v.1 of the PHP SAML Tookit does not support SLO."; } } else { echo 'Invalid SAML response.'; diff --git a/demo1/Readme.txt b/demo1/Readme.txt index fae19121..d8810676 100644 --- a/demo1/Readme.txt +++ b/demo1/Readme.txt @@ -3,7 +3,7 @@ The example requires that SP and IdP are well configured before test it. SP setup -------- -The Onelogin's PHP Toolkit allows you to provide the settings info in 2 ways: +The PHP Toolkit allows you to provide the settings info in 2 ways: * Use a settings.php file that we should locate at the base folder of the toolkit. * Use an array with the setting data. @@ -59,7 +59,7 @@ How it works endpoint). The SLS endpoint (index.php?sls)of the SP process the Logout Response and if is valid, close the user session of the local app. Notice that the SLO Workflow starts and ends at the SP. - + 5.2 SLO Initiated by IdP. In this case, the action takes place on the IdP side, the logout process is initiated at the idP, sends a Logout Request to the SP (SLS endpoint, index.php?sls). The SLS endpoint of the SP process the Logout Request and if is valid, close the session of the user diff --git a/demo2/Readme.txt b/demo2/Readme.txt index b969e670..7a34800f 100644 --- a/demo2/Readme.txt +++ b/demo2/Readme.txt @@ -3,12 +3,12 @@ The example requires that SP and IdP are well configured before test it. SP setup -------- -The Onelogin's PHP Toolkit allows you to provide the settings info in 2 ways: +The PHP Toolkit allows you to provide the settings info in 2 ways: * Use a settings.php file that we should locate at the base folder of the toolkit. * Use an array with the setting data. -The first is the case of the demo2 app. The setting.php file and the +The first is the case of the demo2 app. The setting.php file and the setting_extended.php file should be defined at the base folder of the toolkit. Review the setting_example.php and the advanced_settings_example.php to learn how to build them. @@ -44,14 +44,14 @@ demo1, only changes the targets. sent to the IdP automatically, (as RelayState is sent the origin url). We authenticate at the IdP and then a Response is sent to the SP, to the ACS endpoint, in this case acs.php of the endpoints folder. - + 2. The SAML Response is processed in the ACS, if the Response is not valid, the process stop here and a message is showed. Otherwise we are redirected to the RelayState view (sso.php or index.php). The sso.php detect if the user is logged and do a redirect to index.php, so we will be in the index.php at the end. - 3. We are logged in the app and the user attributes are showed. + 3. We are logged in the app and the user attributes are showed. At this point, we can test the single log out functionality. 4. The single log out funcionality could be tested by 2 ways. @@ -63,9 +63,9 @@ demo1, only changes the targets. The SLS endpoint of the SP process the Logout Response and if is valid, close the user session of the local app. Notice that the SLO Workflow starts and ends at the SP. - + 5.2 SLO Initiated by IdP. In this case, the action takes place on the IdP - side, the logout process is initiated at the idP, sends a Logout + side, the logout process is initiated at the idP, sends a Logout Request to the SP (SLS endpoint sls.php of the endpoint folder). The SLS endpoint of the SP process the Logout Request and if is valid, close the session of the user at the local app and sends a Logout Response diff --git a/docs/Saml/classes/OneLogin_Saml_AuthRequest.html b/docs/Saml/classes/OneLogin_Saml_AuthRequest.html index b5cd01a6..c2324a8b 100644 --- a/docs/Saml/classes/OneLogin_Saml_AuthRequest.html +++ b/docs/Saml/classes/OneLogin_Saml_AuthRequest.html @@ -3,13 +3,13 @@ - Onelogin's SAML PHP Toolkit » \OneLogin_Saml_AuthRequest + <title> SAML PHP Toolkit » \OneLogin_Saml_AuthRequest - + @@ -19,7 +19,7 @@ - + @@ -33,7 +33,7 @@ - Onelogin's SAML PHP Toolkit + SAML PHP Toolkit
- +
- + -
-
-
- - -
-
- - - - -
- - - - -
- -
-
-

OneLogin_Saml_AuthRequest

- - -

-
-
- -
- -
- -

Methods

- -
-

Constructs the OneLogin_Saml2_Auth, initializing -the SP SAML instance.

- 
__construct(\OneLogin_Saml2_Settings $settings)
-
-
-
-
-
- - - - - - - - - - -
- - -
- - -
- -

Arguments

-
-

$settings

- \OneLogin_Saml2_Settings

Settings

-
- -
-
-
- -
-

Obtains the SSO URL containing the AuthRequest -message deflated.

- 
getRedirectUrl($returnTo = null)
-
-
-
-
-
- - - - - - - - - - -
- - -
- - -
- -

Arguments

-
-

$returnTo

-

-
- -
-
-
- -
-

_generateUniqueID

- 
_generateUniqueID()
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- - -
-
-
- -
-

_getTimestamp

- 
_getTimestamp()
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- - -
-
-
- - -

Properties

- -
-

object

- 
auth : \OneLogin_Saml2_Auth
-
-
-
-
-
- - - - - - - - - - -
- var - -

object

-
- - -
- -

Type(s)

- \OneLogin_Saml2_Auth -
-
-
-
-
- - -
-
- -
- - - - diff --git a/docs/Saml/classes/OneLogin_Saml_Metadata.html b/docs/Saml/classes/OneLogin_Saml_Metadata.html deleted file mode 100644 index 18592ea4..00000000 --- a/docs/Saml/classes/OneLogin_Saml_Metadata.html +++ /dev/null @@ -1,361 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml_Metadata - - - - - - - - - - - - - - - - - - - - - -
-
-
- - - - SAML PHP Toolkit - -
- -
-
-
-
- Back to top   -
-
- -
- - - - -
-
-
- - -
-
- - - - -
- - - - -
- -
-
-

OneLogin_Saml_Metadata

- - -

-
-
- -
- -
- -

Methods

- -
-

__construct

- 
__construct($settings = null)
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- -

Arguments

-
-

$settings

-

-
- -
-
-
- -
-

getXml

- 
getXml()
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- - -
-
-
- -
-

_getMetadataValidTimestamp

- 
_getMetadataValidTimestamp()
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- - -
-
-
- -

Constants

- -
-

VALIDITY_SECONDS

- 
VALIDITY_SECONDS
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -

Properties

- -
-

_settings

- 
_settings :
-
-
-
-
-
- - - - - - - - - - -
- - -
- - -
- -
-
-
-
-
- - -
-
- -
- - - - diff --git a/docs/Saml/classes/OneLogin_Saml_Response.html b/docs/Saml/classes/OneLogin_Saml_Response.html deleted file mode 100644 index be561798..00000000 --- a/docs/Saml/classes/OneLogin_Saml_Response.html +++ /dev/null @@ -1,301 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml_Response - - - - - - - - - - - - - - - - - - - - - -
-
-
- - - - SAML PHP Toolkit - -
- -
-
-
-
- Back to top   -
-
- -
- - - - -
-
-
- - -
-
- - - - -
- - - - -
- -
-
-

OneLogin_Saml_Response

- - Extends \OneLogin_Saml2_Response - -

-
-
- -
- -
- -

Methods

- -
-

Constructor that process the SAML Response, -Internally initializes an SP SAML instance -and an OneLogin_Saml2_Response.

- 
__construct(\OneLogin_Saml_Settings $oldSettings, $assertion)
-
-
-
-
-
- - - - - - - - - - -
- - -
- - -
- -

Arguments

-
-

$oldSettings

- \OneLogin_Saml_Settings

Settings

-
-
-

$assertion

-

-
- -
-
-
- -
-

Retrieves an Array with the logged user data.

- 
get_saml_attributes()
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- - -
-
-
- -
-

Retrieves the nameId

- 
get_nameid()
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- - -
-
-
- - -
-
- - -
-
- -
- - - - diff --git a/docs/Saml/classes/OneLogin_Saml_Settings.html b/docs/Saml/classes/OneLogin_Saml_Settings.html deleted file mode 100644 index 21ea4a42..00000000 --- a/docs/Saml/classes/OneLogin_Saml_Settings.html +++ /dev/null @@ -1,635 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml_Settings - - - - - - - - - - - - - - - - - - - - - -
-
-
- - - - SAML PHP Toolkit - -
- -
-
-
-
- Back to top   -
-
- -
- - - - -
-
-
- - -
-
- - - - -
- - - - -
- -
-
-

OneLogin_Saml_Settings

- - -

Holds SAML settings for the SamlResponse and SamlAuthRequest classes.

-
-
-

These settings need to be filled in by the user prior to being used.

-
- -
- -

Methods

- -
-

Return an Array with the values (compatibility with the new version)

- 
getValues()
-
-
-
-
-
- - - - - - - - - - - - - - -
- - -
- - -
- - -
- - -
-
-
- -

Constants

- -
-

NAMEID_EMAIL_ADDRESS

- 
NAMEID_EMAIL_ADDRESS
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -
-

NAMEID_X509_SUBJECT_NAME

- 
NAMEID_X509_SUBJECT_NAME
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -
-

NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME

- 
NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -
-

NAMEID_KERBEROS

- 
NAMEID_KERBEROS
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -
-

NAMEID_ENTITY

- 
NAMEID_ENTITY
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -
-

NAMEID_TRANSIENT

- 
NAMEID_TRANSIENT
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -
-

NAMEID_PERSISTENT

- 
NAMEID_PERSISTENT
-
-
-
-
-
- - - - - - - - - -
- - -
- - -
-
-
-
- -

Properties

- -
-

The URL to submit SAML authentication requests to.

- 
idpSingleSignOnUrl : string
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- string -
-
-
- -
-

The URL to submit SAML Logout Request to.

- 
idpSingleLogOutUrl : string
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- string -
-
-
- -
-

The x509 certificate used to authenticate the request.

- 
idpPublicCertificate : string
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- string -
-
-
- -
-

The URL where to the SAML Response/SAML Assertion will be posted.

- 
spReturnUrl : string
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- string -
-
-
- -
-

The name of the application.

- 
spIssuer : string
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- string -
-
-
- -
-

Specifies what format to return the authentication token, i.e, the email address.

- 
requestedNameIdFormat : string
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- string -
-
-
-
-
- - -
-
- -
- - - - diff --git a/docs/Saml/classes/OneLogin_Saml_XmlSec.html b/docs/Saml/classes/OneLogin_Saml_XmlSec.html deleted file mode 100644 index 5ae89468..00000000 --- a/docs/Saml/classes/OneLogin_Saml_XmlSec.html +++ /dev/null @@ -1,400 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml_XmlSec - - - - - - - - - - - - - - - - - - - - - -
-
-
- - - - SAML PHP Toolkit - -
- -
-
-
-
- Back to top   -
-
- -
- - - - -
-
-
- - -
-
- - - - -
- - - - -
- -
-
-

OneLogin_Saml_XmlSec

- - -

Determine if the SAML response is valid using a provided x509 certificate.

-
-
- -
- -
- -

Methods

- -
-

Construct the SamlXmlSec object.

- 
__construct(\OneLogin_Saml_Settings $settings, \OneLogin_Saml_Response $response)
-
-
-
-
-
- - - - - - - - - - -
- - -
- - -
- -

Arguments

-
-

$settings

- \OneLogin_Saml_Settings

A SamlResponse settings object containing the necessary

-
                                     x509 certicate to test the document.

-
-
-

$response

- \OneLogin_Saml_Response

The document to test.

-
- -
-
-
- -
-

Verify that the document only contains a single Assertion

- 
validateNumAssertions() : bool
-
-
-
-
-
- - - - - - - - - - -
- - -
- - -
- - -

Response

- bool

TRUE if the document passes.

-
-
-
- -
-

Verify that the document is still valid according

- 
validateTimestamps() : bool
-
-
-
-
-
- - - - - - - - - - -
- - -
- - -
- - -

Response

- bool

-
-
-
- -
-

isValid

- 
isValid() : bool
-
-
-
-
-
- - - - - - - - - - - - - - -
- throws - - - -
- - -
- - -
- - -

Response

- bool

-
-
-
- - -

Properties

- -
-

A SamlResponse class provided to the constructor.

- 
_settings : \OneLogin_Saml_Settings
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- \OneLogin_Saml_Settings -
-
-
- -
-

The document to be tested.

- 
_document : \DomDocument
-
-
-
-
-
- - - - - - - - - - -
- var - - -
- - -
- -

Type(s)

- \DomDocument -
-
-
-
-
- - -
-
- -
- - - - diff --git a/docs/Saml/css/bootstrap-responsive.css b/docs/Saml/css/bootstrap-responsive.css deleted file mode 100644 index 4b032cdb..00000000 --- a/docs/Saml/css/bootstrap-responsive.css +++ /dev/null @@ -1,567 +0,0 @@ -/*! - * Bootstrap Responsive v2.0.0 - * - * Copyright 2012 Twitter, Inc - * Licensed under the Apache License v2.0 - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Designed and built with all the love in the world @twitter by @mdo and @fat. - */ -.hidden { - display: none; - visibility: hidden; -} -@media (max-width: 480px) { - .nav-collapse { - -webkit-transform: translate3d(0, 0, 0); - } - .page-header h1 small { - display: block; - line-height: 18px; - } - input[class*="span"], - select[class*="span"], - textarea[class*="span"], - .uneditable-input { - display: block; - width: 100%; - height: 28px; - /* Make inputs at least the height of their button counterpart */ - - /* Makes inputs behave like true block-level elements */ - - -webkit-box-sizing: border-box; - /* Older Webkit */ - - -moz-box-sizing: border-box; - /* Older FF */ - - -ms-box-sizing: border-box; - /* IE8 */ - - box-sizing: border-box; - /* CSS3 spec*/ - - } - .input-prepend input[class*="span"], .input-append input[class*="span"] { - width: auto; - } - input[type="checkbox"], input[type="radio"] { - border: 1px solid #ccc; - } - .form-horizontal .control-group > label { - float: none; - width: auto; - padding-top: 0; - text-align: left; - } - .form-horizontal .controls { - margin-left: 0; - } - .form-horizontal .control-list { - padding-top: 0; - } - .form-horizontal .form-actions { - padding-left: 10px; - padding-right: 10px; - } - .modal { - position: absolute; - top: 10px; - left: 10px; - right: 10px; - width: auto; - margin: 0; - } - .modal.fade.in { - top: auto; - } - .modal-header .close { - padding: 10px; - margin: -10px; - } - .carousel-caption { - position: static; - } -} -@media (max-width: 768px) { - .container { - width: auto; - padding: 0 20px; - } - .row-fluid { - width: 100%; - } - .row { - margin-left: 0; - } - .row > [class*="span"], .row-fluid > [class*="span"] { - float: none; - display: block; - width: auto; - margin: 0; - } -} -@media (min-width: 768px) and (max-width: 980px) { - .row { - margin-left: -20px; - *zoom: 1; - } - .row:before, .row:after { - display: table; - content: ""; - } - .row:after { - clear: both; - } - [class*="span"] { - float: left; - margin-left: 20px; - } - .span1 { - width: 42px; - } - .span2 { - width: 104px; - } - .span3 { - width: 166px; - } - .span4 { - width: 228px; - } - .span5 { - width: 290px; - } - .span6 { - width: 352px; - } - .span7 { - width: 414px; - } - .span8 { - width: 476px; - } - .span9 { - width: 538px; - } - .span10 { - width: 600px; - } - .span11 { - width: 662px; - } - .span12, .container { - width: 724px; - } - .offset1 { - margin-left: 82px; - } - .offset2 { - margin-left: 144px; - } - .offset3 { - margin-left: 206px; - } - .offset4 { - margin-left: 268px; - } - .offset5 { - margin-left: 330px; - } - .offset6 { - margin-left: 392px; - } - .offset7 { - margin-left: 454px; - } - .offset8 { - margin-left: 516px; - } - .offset9 { - margin-left: 578px; - } - .offset10 { - margin-left: 640px; - } - .offset11 { - margin-left: 702px; - } - .row-fluid { - width: 100%; - *zoom: 1; - } - .row-fluid:before, .row-fluid:after { - display: table; - content: ""; - } - .row-fluid:after { - clear: both; - } - .row-fluid > [class*="span"] { - float: left; - margin-left: 2.762430939%; - } - .row-fluid > [class*="span"]:first-child { - margin-left: 0; - } - .row-fluid .span1 { - width: 5.801104972%; - } - .row-fluid .span2 { - width: 14.364640883%; - } - .row-fluid .span3 { - width: 22.928176794%; - } - .row-fluid .span4 { - width: 31.491712705%; - } - .row-fluid .span5 { - width: 40.055248616%; - } - .row-fluid .span6 { - width: 48.618784527%; - } - .row-fluid .span7 { - width: 57.182320438000005%; - } - .row-fluid .span8 { - width: 65.74585634900001%; - } - .row-fluid .span9 { - width: 74.30939226%; - } - .row-fluid .span10 { - width: 82.87292817100001%; - } - .row-fluid .span11 { - width: 91.436464082%; - } - .row-fluid .span12 { - width: 99.999999993%; - } - input.span1, textarea.span1, .uneditable-input.span1 { - width: 32px; - } - input.span2, textarea.span2, .uneditable-input.span2 { - width: 94px; - } - input.span3, textarea.span3, .uneditable-input.span3 { - width: 156px; - } - input.span4, textarea.span4, .uneditable-input.span4 { - width: 218px; - } - input.span5, textarea.span5, .uneditable-input.span5 { - width: 280px; - } - input.span6, textarea.span6, .uneditable-input.span6 { - width: 342px; - } - input.span7, textarea.span7, .uneditable-input.span7 { - width: 404px; - } - input.span8, textarea.span8, .uneditable-input.span8 { - width: 466px; - } - input.span9, textarea.span9, .uneditable-input.span9 { - width: 528px; - } - input.span10, textarea.span10, .uneditable-input.span10 { - width: 590px; - } - input.span11, textarea.span11, .uneditable-input.span11 { - width: 652px; - } - input.span12, textarea.span12, .uneditable-input.span12 { - width: 714px; - } -} -@media (max-width: 980px) { - body { - padding-top: 0; - } - .navbar-fixed-top { - position: static; - margin-bottom: 18px; - } - .navbar-fixed-top .navbar-inner { - padding: 5px; - } - .navbar .container { - width: auto; - padding: 0; - } - .navbar .brand { - padding-left: 10px; - padding-right: 10px; - margin: 0 0 0 -5px; - } - .navbar .nav-collapse { - clear: left; - } - .navbar .nav { - float: none; - margin: 0 0 9px; - } - .navbar .nav > li { - float: none; - } - .navbar .nav > li > a { - margin-bottom: 2px; - } - .navbar .nav > .divider-vertical { - display: none; - } - .navbar .nav > li > a, .navbar .dropdown-menu a { - padding: 6px 15px; - font-weight: bold; - color: #999999; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; - } - .navbar .dropdown-menu li + li a { - margin-bottom: 2px; - } - .navbar .nav > li > a:hover, .navbar .dropdown-menu a:hover { - background-color: #222222; - } - .navbar .dropdown-menu { - position: static; - top: auto; - left: auto; - float: none; - display: block; - max-width: none; - margin: 0 15px; - padding: 0; - background-color: transparent; - border: none; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; - } - .navbar .dropdown-menu:before, .navbar .dropdown-menu:after { - display: none; - } - .navbar .dropdown-menu .divider { - display: none; - } - .navbar-form, .navbar-search { - float: none; - padding: 9px 15px; - margin: 9px 0; - border-top: 1px solid #222222; - border-bottom: 1px solid #222222; - -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.1); - -moz-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.1); - box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.1); - } - .navbar .nav.pull-right { - float: none; - margin-left: 0; - } - .navbar-static .navbar-inner { - padding-left: 10px; - padding-right: 10px; - } - .btn-navbar { - display: block; - } - .nav-collapse { - overflow: hidden; - height: 0; - } -} -@media (min-width: 980px) { - .nav-collapse.collapse { - height: auto !important; - } -} -@media (min-width: 1200px) { - .row { - margin-left: -30px; - *zoom: 1; - } - .row:before, .row:after { - display: table; - content: ""; - } - .row:after { - clear: both; - } - [class*="span"] { - float: left; - margin-left: 30px; - } - .span1 { - width: 70px; - } - .span2 { - width: 170px; - } - .span3 { - width: 270px; - } - .span4 { - width: 370px; - } - .span5 { - width: 470px; - } - .span6 { - width: 570px; - } - .span7 { - width: 670px; - } - .span8 { - width: 770px; - } - .span9 { - width: 870px; - } - .span10 { - width: 970px; - } - .span11 { - width: 1070px; - } - .span12, .container { - width: 1170px; - } - .offset1 { - margin-left: 130px; - } - .offset2 { - margin-left: 230px; - } - .offset3 { - margin-left: 330px; - } - .offset4 { - margin-left: 430px; - } - .offset5 { - margin-left: 530px; - } - .offset6 { - margin-left: 630px; - } - .offset7 { - margin-left: 730px; - } - .offset8 { - margin-left: 830px; - } - .offset9 { - margin-left: 930px; - } - .offset10 { - margin-left: 1030px; - } - .offset11 { - margin-left: 1130px; - } - .row-fluid { - width: 100%; - *zoom: 1; - } - .row-fluid:before, .row-fluid:after { - display: table; - content: ""; - } - .row-fluid:after { - clear: both; - } - .row-fluid > [class*="span"] { - float: left; - margin-left: 2.564102564%; - } - .row-fluid > [class*="span"]:first-child { - margin-left: 0; - } - .row-fluid .span1 { - width: 5.982905983%; - } - .row-fluid .span2 { - width: 14.529914530000001%; - } - .row-fluid .span3 { - width: 23.076923077%; - } - .row-fluid .span4 { - width: 31.623931624%; - } - .row-fluid .span5 { - width: 40.170940171000005%; - } - .row-fluid .span6 { - width: 48.717948718%; - } - .row-fluid .span7 { - width: 57.264957265%; - } - .row-fluid .span8 { - width: 65.81196581200001%; - } - .row-fluid .span9 { - width: 74.358974359%; - } - .row-fluid .span10 { - width: 82.905982906%; - } - .row-fluid .span11 { - width: 91.45299145300001%; - } - .row-fluid .span12 { - width: 100%; - } - input.span1, textarea.span1, .uneditable-input.span1 { - width: 60px; - } - input.span2, textarea.span2, .uneditable-input.span2 { - width: 160px; - } - input.span3, textarea.span3, .uneditable-input.span3 { - width: 260px; - } - input.span4, textarea.span4, .uneditable-input.span4 { - width: 360px; - } - input.span5, textarea.span5, .uneditable-input.span5 { - width: 460px; - } - input.span6, textarea.span6, .uneditable-input.span6 { - width: 560px; - } - input.span7, textarea.span7, .uneditable-input.span7 { - width: 660px; - } - input.span8, textarea.span8, .uneditable-input.span8 { - width: 760px; - } - input.span9, textarea.span9, .uneditable-input.span9 { - width: 860px; - } - input.span10, textarea.span10, .uneditable-input.span10 { - width: 960px; - } - input.span11, textarea.span11, .uneditable-input.span11 { - width: 1060px; - } - input.span12, textarea.span12, .uneditable-input.span12 { - width: 1160px; - } - .thumbnails { - margin-left: -30px; - } - .thumbnails > li { - margin-left: 30px; - } -} diff --git a/docs/Saml/css/bootstrap-responsive.min.css b/docs/Saml/css/bootstrap-responsive.min.css deleted file mode 100644 index bc3f2ab7..00000000 --- a/docs/Saml/css/bootstrap-responsive.min.css +++ /dev/null @@ -1,3 +0,0 @@ - -.hidden{display:none;visibility:hidden;} -@media (max-width:480px){.nav-collapse{-webkit-transform:translate3d(0, 0, 0);} .page-header h1 small{display:block;line-height:18px;} input[class*="span"],select[class*="span"],textarea[class*="span"],.uneditable-input{display:block;width:100%;height:28px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;-ms-box-sizing:border-box;box-sizing:border-box;} .input-prepend input[class*="span"],.input-append input[class*="span"]{width:auto;} input[type="checkbox"],input[type="radio"]{border:1px solid #ccc;} .form-horizontal .control-group>label{float:none;width:auto;padding-top:0;text-align:left;} .form-horizontal .controls{margin-left:0;} .form-horizontal .control-list{padding-top:0;} .form-horizontal .form-actions{padding-left:10px;padding-right:10px;} .modal{position:absolute;top:10px;left:10px;right:10px;width:auto;margin:0;}.modal.fade.in{top:auto;} .modal-header .close{padding:10px;margin:-10px;} .carousel-caption{position:static;}}@media (max-width:768px){.container{width:auto;padding:0 20px;} .row-fluid{width:100%;} .row{margin-left:0;} .row>[class*="span"],.row-fluid>[class*="span"]{float:none;display:block;width:auto;margin:0;}}@media (min-width:768px) and (max-width:980px){.row{margin-left:-20px;*zoom:1;}.row:before,.row:after{display:table;content:"";} .row:after{clear:both;} [class*="span"]{float:left;margin-left:20px;} .span1{width:42px;} .span2{width:104px;} .span3{width:166px;} .span4{width:228px;} .span5{width:290px;} .span6{width:352px;} .span7{width:414px;} .span8{width:476px;} .span9{width:538px;} .span10{width:600px;} .span11{width:662px;} .span12,.container{width:724px;} .offset1{margin-left:82px;} .offset2{margin-left:144px;} .offset3{margin-left:206px;} .offset4{margin-left:268px;} .offset5{margin-left:330px;} .offset6{margin-left:392px;} .offset7{margin-left:454px;} .offset8{margin-left:516px;} .offset9{margin-left:578px;} .offset10{margin-left:640px;} .offset11{margin-left:702px;} .row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";} .row-fluid:after{clear:both;} .row-fluid>[class*="span"]{float:left;margin-left:2.762430939%;} .row-fluid>[class*="span"]:first-child{margin-left:0;} .row-fluid .span1{width:5.801104972%;} .row-fluid .span2{width:14.364640883%;} .row-fluid .span3{width:22.928176794%;} .row-fluid .span4{width:31.491712705%;} .row-fluid .span5{width:40.055248616%;} .row-fluid .span6{width:48.618784527%;} .row-fluid .span7{width:57.182320438000005%;} .row-fluid .span8{width:65.74585634900001%;} .row-fluid .span9{width:74.30939226%;} .row-fluid .span10{width:82.87292817100001%;} .row-fluid .span11{width:91.436464082%;} .row-fluid .span12{width:99.999999993%;} input.span1,textarea.span1,.uneditable-input.span1{width:32px;} input.span2,textarea.span2,.uneditable-input.span2{width:94px;} input.span3,textarea.span3,.uneditable-input.span3{width:156px;} input.span4,textarea.span4,.uneditable-input.span4{width:218px;} input.span5,textarea.span5,.uneditable-input.span5{width:280px;} input.span6,textarea.span6,.uneditable-input.span6{width:342px;} input.span7,textarea.span7,.uneditable-input.span7{width:404px;} input.span8,textarea.span8,.uneditable-input.span8{width:466px;} input.span9,textarea.span9,.uneditable-input.span9{width:528px;} input.span10,textarea.span10,.uneditable-input.span10{width:590px;} input.span11,textarea.span11,.uneditable-input.span11{width:652px;} input.span12,textarea.span12,.uneditable-input.span12{width:714px;}}@media (max-width:980px){body{padding-top:0;} .navbar-fixed-top{position:static;margin-bottom:18px;} .navbar-fixed-top .navbar-inner{padding:5px;} .navbar .container{width:auto;padding:0;} .navbar .brand{padding-left:10px;padding-right:10px;margin:0 0 0 -5px;} .navbar .nav-collapse{clear:left;} .navbar .nav{float:none;margin:0 0 9px;} .navbar .nav>li{float:none;} .navbar .nav>li>a{margin-bottom:2px;} .navbar .nav>.divider-vertical{display:none;} .navbar .nav>li>a,.navbar .dropdown-menu a{padding:6px 15px;font-weight:bold;color:#999999;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} .navbar .dropdown-menu li+li a{margin-bottom:2px;} .navbar .nav>li>a:hover,.navbar .dropdown-menu a:hover{background-color:#222222;} .navbar .dropdown-menu{position:static;top:auto;left:auto;float:none;display:block;max-width:none;margin:0 15px;padding:0;background-color:transparent;border:none;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} .navbar .dropdown-menu:before,.navbar .dropdown-menu:after{display:none;} .navbar .dropdown-menu .divider{display:none;} .navbar-form,.navbar-search{float:none;padding:9px 15px;margin:9px 0;border-top:1px solid #222222;border-bottom:1px solid #222222;-webkit-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.1);-moz-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.1);box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.1);} .navbar .nav.pull-right{float:none;margin-left:0;} .navbar-static .navbar-inner{padding-left:10px;padding-right:10px;} .btn-navbar{display:block;} .nav-collapse{overflow:hidden;height:0;}}@media (min-width:980px){.nav-collapse.collapse{height:auto !important;}}@media (min-width:1200px){.row{margin-left:-30px;*zoom:1;}.row:before,.row:after{display:table;content:"";} .row:after{clear:both;} [class*="span"]{float:left;margin-left:30px;} .span1{width:70px;} .span2{width:170px;} .span3{width:270px;} .span4{width:370px;} .span5{width:470px;} .span6{width:570px;} .span7{width:670px;} .span8{width:770px;} .span9{width:870px;} .span10{width:970px;} .span11{width:1070px;} .span12,.container{width:1170px;} .offset1{margin-left:130px;} .offset2{margin-left:230px;} .offset3{margin-left:330px;} .offset4{margin-left:430px;} .offset5{margin-left:530px;} .offset6{margin-left:630px;} .offset7{margin-left:730px;} .offset8{margin-left:830px;} .offset9{margin-left:930px;} .offset10{margin-left:1030px;} .offset11{margin-left:1130px;} .row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";} .row-fluid:after{clear:both;} .row-fluid>[class*="span"]{float:left;margin-left:2.564102564%;} .row-fluid>[class*="span"]:first-child{margin-left:0;} .row-fluid .span1{width:5.982905983%;} .row-fluid .span2{width:14.529914530000001%;} .row-fluid .span3{width:23.076923077%;} .row-fluid .span4{width:31.623931624%;} .row-fluid .span5{width:40.170940171000005%;} .row-fluid .span6{width:48.717948718%;} .row-fluid .span7{width:57.264957265%;} .row-fluid .span8{width:65.81196581200001%;} .row-fluid .span9{width:74.358974359%;} .row-fluid .span10{width:82.905982906%;} .row-fluid .span11{width:91.45299145300001%;} .row-fluid .span12{width:100%;} input.span1,textarea.span1,.uneditable-input.span1{width:60px;} input.span2,textarea.span2,.uneditable-input.span2{width:160px;} input.span3,textarea.span3,.uneditable-input.span3{width:260px;} input.span4,textarea.span4,.uneditable-input.span4{width:360px;} input.span5,textarea.span5,.uneditable-input.span5{width:460px;} input.span6,textarea.span6,.uneditable-input.span6{width:560px;} input.span7,textarea.span7,.uneditable-input.span7{width:660px;} input.span8,textarea.span8,.uneditable-input.span8{width:760px;} input.span9,textarea.span9,.uneditable-input.span9{width:860px;} input.span10,textarea.span10,.uneditable-input.span10{width:960px;} input.span11,textarea.span11,.uneditable-input.span11{width:1060px;} input.span12,textarea.span12,.uneditable-input.span12{width:1160px;} .thumbnails{margin-left:-30px;} .thumbnails>li{margin-left:30px;}} diff --git a/docs/Saml/css/bootstrap.css b/docs/Saml/css/bootstrap.css deleted file mode 100644 index 563050c0..00000000 --- a/docs/Saml/css/bootstrap.css +++ /dev/null @@ -1,3370 +0,0 @@ -/*! - * Bootstrap v2.0.0 - * - * Copyright 2012 Twitter, Inc - * Licensed under the Apache License v2.0 - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Designed and built with all the love in the world @twitter by @mdo and @fat. - */ -article, -aside, -details, -figcaption, -figure, -footer, -header, -hgroup, -nav, -section { - display: block; -} -audio, canvas, video { - display: inline-block; - *display: inline; - *zoom: 1; -} -audio:not([controls]) { - display: none; -} -html { - font-size: 100%; - -webkit-text-size-adjust: 100%; - -ms-text-size-adjust: 100%; -} -a:focus { - outline: thin dotted; - outline: 5px auto -webkit-focus-ring-color; - outline-offset: -2px; -} -a:hover, a:active { - outline: 0; -} -sub, sup { - position: relative; - font-size: 75%; - line-height: 0; - vertical-align: baseline; -} -sup { - top: -0.5em; -} -sub { - bottom: -0.25em; -} -img { - max-width: 100%; - height: auto; - border: 0; - -ms-interpolation-mode: bicubic; -} -button, -input, -select, -textarea { - margin: 0; - font-size: 100%; - vertical-align: middle; -} -button, input { - *overflow: visible; - line-height: normal; -} -button::-moz-focus-inner, input::-moz-focus-inner { - padding: 0; - border: 0; -} -button, -input[type="button"], -input[type="reset"], -input[type="submit"] { - cursor: pointer; - -webkit-appearance: button; -} -input[type="search"] { - -webkit-appearance: textfield; - -webkit-box-sizing: content-box; - -moz-box-sizing: content-box; - box-sizing: content-box; -} -input[type="search"]::-webkit-search-decoration, input[type="search"]::-webkit-search-cancel-button { - -webkit-appearance: none; -} -textarea { - overflow: auto; - vertical-align: top; -} -body { - margin: 0; - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - line-height: 18px; - color: #333333; - background-color: #ffffff; -} -a { - color: #0088cc; - text-decoration: none; -} -a:hover { - color: #005580; - text-decoration: underline; -} -.row { - margin-left: -20px; - *zoom: 1; -} -.row:before, .row:after { - display: table; - content: ""; -} -.row:after { - clear: both; -} -[class*="span"] { - float: left; - margin-left: 20px; -} -.span1 { - width: 60px; -} -.span2 { - width: 140px; -} -.span3 { - width: 220px; -} -.span4 { - width: 300px; -} -.span5 { - width: 380px; -} -.span6 { - width: 460px; -} -.span7 { - width: 540px; -} -.span8 { - width: 620px; -} -.span9 { - width: 700px; -} -.span10 { - width: 780px; -} -.span11 { - width: 860px; -} -.span12, .container { - width: 940px; -} -.offset1 { - margin-left: 100px; -} -.offset2 { - margin-left: 180px; -} -.offset3 { - margin-left: 260px; -} -.offset4 { - margin-left: 340px; -} -.offset5 { - margin-left: 420px; -} -.offset6 { - margin-left: 500px; -} -.offset7 { - margin-left: 580px; -} -.offset8 { - margin-left: 660px; -} -.offset9 { - margin-left: 740px; -} -.offset10 { - margin-left: 820px; -} -.offset11 { - margin-left: 900px; -} -.row-fluid { - width: 100%; - *zoom: 1; -} -.row-fluid:before, .row-fluid:after { - display: table; - content: ""; -} -.row-fluid:after { - clear: both; -} -.row-fluid > [class*="span"] { - float: left; - margin-left: 2.127659574%; -} -.row-fluid > [class*="span"]:first-child { - margin-left: 0; -} -.row-fluid .span1 { - width: 6.382978723%; -} -.row-fluid .span2 { - width: 14.89361702%; -} -.row-fluid .span3 { - width: 23.404255317%; -} -.row-fluid .span4 { - width: 31.914893614%; -} -.row-fluid .span5 { - width: 40.425531911%; -} -.row-fluid .span6 { - width: 48.93617020799999%; -} -.row-fluid .span7 { - width: 57.446808505%; -} -.row-fluid .span8 { - width: 65.95744680199999%; -} -.row-fluid .span9 { - width: 74.468085099%; -} -.row-fluid .span10 { - width: 82.97872339599999%; -} -.row-fluid .span11 { - width: 91.489361693%; -} -.row-fluid .span12 { - width: 99.99999998999999%; -} -.container { - width: 940px; - margin-left: auto; - margin-right: auto; - *zoom: 1; -} -.container:before, .container:after { - display: table; - content: ""; -} -.container:after { - clear: both; -} -.container-fluid { - padding-left: 20px; - padding-right: 20px; - *zoom: 1; -} -.container-fluid:before, .container-fluid:after { - display: table; - content: ""; -} -.container-fluid:after { - clear: both; -} -p { - margin: 0 0 9px; - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - line-height: 18px; -} -p small { - font-size: 11px; - color: #999999; -} -.lead { - margin-bottom: 18px; - font-size: 20px; - font-weight: 200; - line-height: 27px; -} -h1, -h2, -h3, -h4, -h5, -h6 { - margin: 0; - font-weight: bold; - color: #333333; - text-rendering: optimizelegibility; -} -h1 small, -h2 small, -h3 small, -h4 small, -h5 small, -h6 small { - font-weight: normal; - color: #999999; -} -h1 { - font-size: 30px; - line-height: 36px; -} -h1 small { - font-size: 18px; -} -h2 { - font-size: 24px; - line-height: 36px; -} -h2 small { - font-size: 18px; -} -h3 { - line-height: 27px; - font-size: 18px; -} -h3 small { - font-size: 14px; -} -h4, h5, h6 { - line-height: 18px; -} -h4 { - font-size: 14px; -} -h4 small { - font-size: 12px; -} -h5 { - font-size: 12px; -} -h6 { - font-size: 11px; - color: #999999; - text-transform: uppercase; -} -.page-header { - padding-bottom: 17px; - margin: 18px 0; - border-bottom: 1px solid #eeeeee; -} -.page-header h1 { - line-height: 1; -} -ul, ol { - padding: 0; - margin: 0 0 9px 25px; -} -ul ul, -ul ol, -ol ol, -ol ul { - margin-bottom: 0; -} -ul { - list-style: disc; -} -ol { - list-style: decimal; -} -li { - line-height: 18px; -} -ul.unstyled { - margin-left: 0; - list-style: none; -} -dl { - margin-bottom: 18px; -} -dt, dd { - line-height: 18px; -} -dt { - font-weight: bold; -} -dd { - margin-left: 9px; -} -hr { - margin: 18px 0; - border: 0; - border-top: 1px solid #e5e5e5; - border-bottom: 1px solid #ffffff; -} -strong { - font-weight: bold; -} -em { - font-style: italic; -} -.muted { - color: #999999; -} -abbr { - font-size: 90%; - text-transform: uppercase; - border-bottom: 1px dotted #ddd; - cursor: help; -} -blockquote { - padding: 0 0 0 15px; - margin: 0 0 18px; - border-left: 5px solid #eeeeee; -} -blockquote p { - margin-bottom: 0; - font-size: 16px; - font-weight: 300; - line-height: 22.5px; -} -blockquote small { - display: block; - line-height: 18px; - color: #999999; -} -blockquote small:before { - content: '\2014 \00A0'; -} -blockquote.pull-right { - float: right; - padding-left: 0; - padding-right: 15px; - border-left: 0; - border-right: 5px solid #eeeeee; -} -blockquote.pull-right p, blockquote.pull-right small { - text-align: right; -} -q:before, -q:after, -blockquote:before, -blockquote:after { - content: ""; -} -address { - display: block; - margin-bottom: 18px; - line-height: 18px; - font-style: normal; -} -small { - font-size: 100%; -} -cite { - font-style: normal; -} -code, pre { - padding: 0 3px 2px; - font-family: Menlo, Monaco, "Courier New", monospace; - font-size: 12px; - color: #333333; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; -} -code { - padding: 3px 4px; - color: #d14; - background-color: #f7f7f9; - border: 1px solid #e1e1e8; -} -pre { - display: block; - padding: 8.5px; - margin: 0 0 9px; - font-size: 12px; - line-height: 18px; - background-color: #f5f5f5; - border: 1px solid #ccc; - border: 1px solid rgba(0, 0, 0, 0.15); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - white-space: pre; - white-space: pre-wrap; - word-break: break-all; -} -pre.prettyprint { - margin-bottom: 18px; -} -pre code { - padding: 0; - background-color: transparent; -} -form { - margin: 0 0 18px; -} -fieldset { - padding: 0; - margin: 0; - border: 0; -} -legend { - display: block; - width: 100%; - padding: 0; - margin-bottom: 27px; - font-size: 19.5px; - line-height: 36px; - color: #333333; - border: 0; - border-bottom: 1px solid #eee; -} -label, -input, -button, -select, -textarea { - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - font-weight: normal; - line-height: 18px; -} -label { - display: block; - margin-bottom: 5px; - color: #333333; -} -input, -textarea, -select, -.uneditable-input { - display: inline-block; - width: 210px; - height: 18px; - padding: 4px; - margin-bottom: 9px; - font-size: 13px; - line-height: 18px; - color: #555555; - border: 1px solid #ccc; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; -} -.uneditable-textarea { - width: auto; - height: auto; -} -label input, label textarea, label select { - display: block; -} -input[type="image"], input[type="checkbox"], input[type="radio"] { - width: auto; - height: auto; - padding: 0; - margin: 3px 0; - *margin-top: 0; - /* IE7 */ - - line-height: normal; - border: 0; - cursor: pointer; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -input[type="file"] { - padding: initial; - line-height: initial; - border: initial; - background-color: #ffffff; - background-color: initial; - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; -} -input[type="button"], input[type="reset"], input[type="submit"] { - width: auto; - height: auto; -} -select, input[type="file"] { - height: 28px; - /* In IE7, the height of the select element cannot be changed by height, only font-size */ - - *margin-top: 4px; - /* For IE7, add top margin to align select with labels */ - - line-height: 28px; -} -select { - width: 220px; - background-color: #ffffff; -} -select[multiple], select[size] { - height: auto; -} -input[type="image"] { - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; -} -textarea { - height: auto; -} -input[type="hidden"] { - display: none; -} -.radio, .checkbox { - padding-left: 18px; -} -.radio input[type="radio"], .checkbox input[type="checkbox"] { - float: left; - margin-left: -18px; -} -.controls > .radio:first-child, .controls > .checkbox:first-child { - padding-top: 5px; -} -.radio.inline, .checkbox.inline { - display: inline-block; - margin-bottom: 0; - vertical-align: middle; -} -.radio.inline + .radio.inline, .checkbox.inline + .checkbox.inline { - margin-left: 10px; -} -.controls > .radio.inline:first-child, .controls > .checkbox.inline:first-child { - padding-top: 0; -} -input, textarea { - -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075); - -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075); - box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075); - -webkit-transition: border linear 0.2s, box-shadow linear 0.2s; - -moz-transition: border linear 0.2s, box-shadow linear 0.2s; - -ms-transition: border linear 0.2s, box-shadow linear 0.2s; - -o-transition: border linear 0.2s, box-shadow linear 0.2s; - transition: border linear 0.2s, box-shadow linear 0.2s; -} -input:focus, textarea:focus { - border-color: rgba(82, 168, 236, 0.8); - -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075), 0 0 8px rgba(82, 168, 236, 0.6); - -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075), 0 0 8px rgba(82, 168, 236, 0.6); - box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075), 0 0 8px rgba(82, 168, 236, 0.6); - outline: 0; - outline: thin dotted \9; - /* IE6-8 */ - -} -input[type="file"]:focus, input[type="checkbox"]:focus, select:focus { - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; - outline: thin dotted; - outline: 5px auto -webkit-focus-ring-color; - outline-offset: -2px; -} -.input-mini { - width: 60px; -} -.input-small { - width: 90px; -} -.input-medium { - width: 150px; -} -.input-large { - width: 210px; -} -.input-xlarge { - width: 270px; -} -.input-xxlarge { - width: 530px; -} -input[class*="span"], -select[class*="span"], -textarea[class*="span"], -.uneditable-input { - float: none; - margin-left: 0; -} -input.span1, textarea.span1, .uneditable-input.span1 { - width: 50px; -} -input.span2, textarea.span2, .uneditable-input.span2 { - width: 130px; -} -input.span3, textarea.span3, .uneditable-input.span3 { - width: 210px; -} -input.span4, textarea.span4, .uneditable-input.span4 { - width: 290px; -} -input.span5, textarea.span5, .uneditable-input.span5 { - width: 370px; -} -input.span6, textarea.span6, .uneditable-input.span6 { - width: 450px; -} -input.span7, textarea.span7, .uneditable-input.span7 { - width: 530px; -} -input.span8, textarea.span8, .uneditable-input.span8 { - width: 610px; -} -input.span9, textarea.span9, .uneditable-input.span9 { - width: 690px; -} -input.span10, textarea.span10, .uneditable-input.span10 { - width: 770px; -} -input.span11, textarea.span11, .uneditable-input.span11 { - width: 850px; -} -input.span12, textarea.span12, .uneditable-input.span12 { - width: 930px; -} -input[disabled], -select[disabled], -textarea[disabled], -input[readonly], -select[readonly], -textarea[readonly] { - background-color: #f5f5f5; - border-color: #ddd; - cursor: not-allowed; -} -.control-group.warning > label, .control-group.warning .help-block, .control-group.warning .help-inline { - color: #c09853; -} -.control-group.warning input, .control-group.warning select, .control-group.warning textarea { - color: #c09853; - border-color: #c09853; -} -.control-group.warning input:focus, .control-group.warning select:focus, .control-group.warning textarea:focus { - border-color: #a47e3c; - -webkit-box-shadow: 0 0 6px #dbc59e; - -moz-box-shadow: 0 0 6px #dbc59e; - box-shadow: 0 0 6px #dbc59e; -} -.control-group.warning .input-prepend .add-on, .control-group.warning .input-append .add-on { - color: #c09853; - background-color: #fcf8e3; - border-color: #c09853; -} -.control-group.error > label, .control-group.error .help-block, .control-group.error .help-inline { - color: #b94a48; -} -.control-group.error input, .control-group.error select, .control-group.error textarea { - color: #b94a48; - border-color: #b94a48; -} -.control-group.error input:focus, .control-group.error select:focus, .control-group.error textarea:focus { - border-color: #953b39; - -webkit-box-shadow: 0 0 6px #d59392; - -moz-box-shadow: 0 0 6px #d59392; - box-shadow: 0 0 6px #d59392; -} -.control-group.error .input-prepend .add-on, .control-group.error .input-append .add-on { - color: #b94a48; - background-color: #f2dede; - border-color: #b94a48; -} -.control-group.success > label, .control-group.success .help-block, .control-group.success .help-inline { - color: #468847; -} -.control-group.success input, .control-group.success select, .control-group.success textarea { - color: #468847; - border-color: #468847; -} -.control-group.success input:focus, .control-group.success select:focus, .control-group.success textarea:focus { - border-color: #356635; - -webkit-box-shadow: 0 0 6px #7aba7b; - -moz-box-shadow: 0 0 6px #7aba7b; - box-shadow: 0 0 6px #7aba7b; -} -.control-group.success .input-prepend .add-on, .control-group.success .input-append .add-on { - color: #468847; - background-color: #dff0d8; - border-color: #468847; -} -input:focus:required:invalid, textarea:focus:required:invalid, select:focus:required:invalid { - color: #b94a48; - border-color: #ee5f5b; -} -input:focus:required:invalid:focus, textarea:focus:required:invalid:focus, select:focus:required:invalid:focus { - border-color: #e9322d; - -webkit-box-shadow: 0 0 6px #f8b9b7; - -moz-box-shadow: 0 0 6px #f8b9b7; - box-shadow: 0 0 6px #f8b9b7; -} -.form-actions { - padding: 17px 20px 18px; - margin-top: 18px; - margin-bottom: 18px; - background-color: #f5f5f5; - border-top: 1px solid #ddd; -} -.uneditable-input { - display: block; - background-color: #ffffff; - border-color: #eee; - -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.025); - -moz-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.025); - box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.025); - cursor: not-allowed; -} -:-moz-placeholder { - color: #999999; -} -::-webkit-input-placeholder { - color: #999999; -} -.help-block { - margin-top: 5px; - margin-bottom: 0; - color: #999999; -} -.help-inline { - display: inline-block; - *display: inline; - /* IE7 inline-block hack */ - - *zoom: 1; - margin-bottom: 9px; - vertical-align: middle; - padding-left: 5px; -} -.input-prepend, .input-append { - margin-bottom: 5px; - *zoom: 1; -} -.input-prepend:before, -.input-append:before, -.input-prepend:after, -.input-append:after { - display: table; - content: ""; -} -.input-prepend:after, .input-append:after { - clear: both; -} -.input-prepend input, -.input-append input, -.input-prepend .uneditable-input, -.input-append .uneditable-input { - -webkit-border-radius: 0 3px 3px 0; - -moz-border-radius: 0 3px 3px 0; - border-radius: 0 3px 3px 0; -} -.input-prepend input:focus, -.input-append input:focus, -.input-prepend .uneditable-input:focus, -.input-append .uneditable-input:focus { - position: relative; - z-index: 2; -} -.input-prepend .uneditable-input, .input-append .uneditable-input { - border-left-color: #ccc; -} -.input-prepend .add-on, .input-append .add-on { - float: left; - display: block; - width: auto; - min-width: 16px; - height: 18px; - margin-right: -1px; - padding: 4px 5px; - font-weight: normal; - line-height: 18px; - color: #999999; - text-align: center; - text-shadow: 0 1px 0 #ffffff; - background-color: #f5f5f5; - border: 1px solid #ccc; - -webkit-border-radius: 3px 0 0 3px; - -moz-border-radius: 3px 0 0 3px; - border-radius: 3px 0 0 3px; -} -.input-prepend .active, .input-append .active { - background-color: #a9dba9; - border-color: #46a546; -} -.input-prepend .add-on { - *margin-top: 1px; - /* IE6-7 */ - -} -.input-append input, .input-append .uneditable-input { - float: left; - -webkit-border-radius: 3px 0 0 3px; - -moz-border-radius: 3px 0 0 3px; - border-radius: 3px 0 0 3px; -} -.input-append .uneditable-input { - border-right-color: #ccc; -} -.input-append .add-on { - margin-right: 0; - margin-left: -1px; - -webkit-border-radius: 0 3px 3px 0; - -moz-border-radius: 0 3px 3px 0; - border-radius: 0 3px 3px 0; -} -.input-append input:first-child { - *margin-left: -160px; -} -.input-append input:first-child + .add-on { - *margin-left: -21px; -} -.search-query { - padding-left: 14px; - padding-right: 14px; - margin-bottom: 0; - -webkit-border-radius: 14px; - -moz-border-radius: 14px; - border-radius: 14px; -} -.form-search input, -.form-inline input, -.form-horizontal input, -.form-search textarea, -.form-inline textarea, -.form-horizontal textarea, -.form-search select, -.form-inline select, -.form-horizontal select, -.form-search .help-inline, -.form-inline .help-inline, -.form-horizontal .help-inline, -.form-search .uneditable-input, -.form-inline .uneditable-input, -.form-horizontal .uneditable-input { - display: inline-block; - margin-bottom: 0; -} -.form-search label, -.form-inline label, -.form-search .input-append, -.form-inline .input-append, -.form-search .input-prepend, -.form-inline .input-prepend { - display: inline-block; -} -.form-search .input-append .add-on, -.form-inline .input-prepend .add-on, -.form-search .input-append .add-on, -.form-inline .input-prepend .add-on { - vertical-align: middle; -} -.control-group { - margin-bottom: 9px; -} -.form-horizontal legend + .control-group { - margin-top: 18px; - -webkit-margin-top-collapse: separate; -} -.form-horizontal .control-group { - margin-bottom: 18px; - *zoom: 1; -} -.form-horizontal .control-group:before, .form-horizontal .control-group:after { - display: table; - content: ""; -} -.form-horizontal .control-group:after { - clear: both; -} -.form-horizontal .control-group > label { - float: left; - width: 140px; - padding-top: 5px; - text-align: right; -} -.form-horizontal .controls { - margin-left: 160px; -} -.form-horizontal .form-actions { - padding-left: 160px; -} -table { - max-width: 100%; - border-collapse: collapse; - border-spacing: 0; -} -.table { - width: 100%; - margin-bottom: 18px; -} -.table th, .table td { - padding: 8px; - line-height: 18px; - text-align: left; - border-top: 1px solid #ddd; -} -.table th { - font-weight: bold; - vertical-align: bottom; -} -.table td { - vertical-align: top; -} -.table thead:first-child tr th, .table thead:first-child tr td { - border-top: 0; -} -.table tbody + tbody { - border-top: 2px solid #ddd; -} -.table-condensed th, .table-condensed td { - padding: 4px 5px; -} -.table-bordered { - border: 1px solid #ddd; - border-collapse: separate; - *border-collapse: collapsed; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.table-bordered th + th, -.table-bordered td + td, -.table-bordered th + td, -.table-bordered td + th { - border-left: 1px solid #ddd; -} -.table-bordered thead:first-child tr:first-child th, .table-bordered tbody:first-child tr:first-child th, .table-bordered tbody:first-child tr:first-child td { - border-top: 0; -} -.table-bordered thead:first-child tr:first-child th:first-child, .table-bordered tbody:first-child tr:first-child td:first-child { - -webkit-border-radius: 4px 0 0 0; - -moz-border-radius: 4px 0 0 0; - border-radius: 4px 0 0 0; -} -.table-bordered thead:first-child tr:first-child th:last-child, .table-bordered tbody:first-child tr:first-child td:last-child { - -webkit-border-radius: 0 4px 0 0; - -moz-border-radius: 0 4px 0 0; - border-radius: 0 4px 0 0; -} -.table-bordered thead:last-child tr:last-child th:first-child, .table-bordered tbody:last-child tr:last-child td:first-child { - -webkit-border-radius: 0 0 0 4px; - -moz-border-radius: 0 0 0 4px; - border-radius: 0 0 0 4px; -} -.table-bordered thead:last-child tr:last-child th:last-child, .table-bordered tbody:last-child tr:last-child td:last-child { - -webkit-border-radius: 0 0 4px 0; - -moz-border-radius: 0 0 4px 0; - border-radius: 0 0 4px 0; -} -.table-striped tbody tr:nth-child(odd) td, .table-striped tbody tr:nth-child(odd) th { - background-color: #f9f9f9; -} -table .span1 { - float: none; - width: 44px; - margin-left: 0; -} -table .span2 { - float: none; - width: 124px; - margin-left: 0; -} -table .span3 { - float: none; - width: 204px; - margin-left: 0; -} -table .span4 { - float: none; - width: 284px; - margin-left: 0; -} -table .span5 { - float: none; - width: 364px; - margin-left: 0; -} -table .span6 { - float: none; - width: 444px; - margin-left: 0; -} -table .span7 { - float: none; - width: 524px; - margin-left: 0; -} -table .span8 { - float: none; - width: 604px; - margin-left: 0; -} -table .span9 { - float: none; - width: 684px; - margin-left: 0; -} -table .span10 { - float: none; - width: 764px; - margin-left: 0; -} -table .span11 { - float: none; - width: 844px; - margin-left: 0; -} -table .span12 { - float: none; - width: 924px; - margin-left: 0; -} -[class^="icon-"] { - display: inline-block; - width: 14px; - height: 14px; - vertical-align: text-top; - background-image: url(http://github.com/img/glyphicons-halflings.png); - background-position: 14px 14px; - background-repeat: no-repeat; - *margin-right: .3em; -} -[class^="icon-"]:last-child { - *margin-left: 0; -} -.icon-white { - background-image: url(http://github.com/img/glyphicons-halflings-white.png); -} -.icon-glass { - background-position: 0 0; -} -.icon-music { - background-position: -24px 0; -} -.icon-search { - background-position: -48px 0; -} -.icon-envelope { - background-position: -72px 0; -} -.icon-heart { - background-position: -96px 0; -} -.icon-star { - background-position: -120px 0; -} -.icon-star-empty { - background-position: -144px 0; -} -.icon-user { - background-position: -168px 0; -} -.icon-film { - background-position: -192px 0; -} -.icon-th-large { - background-position: -216px 0; -} -.icon-th { - background-position: -240px 0; -} -.icon-th-list { - background-position: -264px 0; -} -.icon-ok { - background-position: -288px 0; -} -.icon-remove { - background-position: -312px 0; -} -.icon-zoom-in { - background-position: -336px 0; -} -.icon-zoom-out { - background-position: -360px 0; -} -.icon-off { - background-position: -384px 0; -} -.icon-signal { - background-position: -408px 0; -} -.icon-cog { - background-position: -432px 0; -} -.icon-trash { - background-position: -456px 0; -} -.icon-home { - background-position: 0 -24px; -} -.icon-file { - background-position: -24px -24px; -} -.icon-time { - background-position: -48px -24px; -} -.icon-road { - background-position: -72px -24px; -} -.icon-download-alt { - background-position: -96px -24px; -} -.icon-download { - background-position: -120px -24px; -} -.icon-upload { - background-position: -144px -24px; -} -.icon-inbox { - background-position: -168px -24px; -} -.icon-play-circle { - background-position: -192px -24px; -} -.icon-repeat { - background-position: -216px -24px; -} -.icon-refresh { - background-position: -240px -24px; -} -.icon-list-alt { - background-position: -264px -24px; -} -.icon-lock { - background-position: -287px -24px; -} -.icon-flag { - background-position: -312px -24px; -} -.icon-headphones { - background-position: -336px -24px; -} -.icon-volume-off { - background-position: -360px -24px; -} -.icon-volume-down { - background-position: -384px -24px; -} -.icon-volume-up { - background-position: -408px -24px; -} -.icon-qrcode { - background-position: -432px -24px; -} -.icon-barcode { - background-position: -456px -24px; -} -.icon-tag { - background-position: 0 -48px; -} -.icon-tags { - background-position: -25px -48px; -} -.icon-book { - background-position: -48px -48px; -} -.icon-bookmark { - background-position: -72px -48px; -} -.icon-print { - background-position: -96px -48px; -} -.icon-camera { - background-position: -120px -48px; -} -.icon-font { - background-position: -144px -48px; -} -.icon-bold { - background-position: -167px -48px; -} -.icon-italic { - background-position: -192px -48px; -} -.icon-text-height { - background-position: -216px -48px; -} -.icon-text-width { - background-position: -240px -48px; -} -.icon-align-left { - background-position: -264px -48px; -} -.icon-align-center { - background-position: -288px -48px; -} -.icon-align-right { - background-position: -312px -48px; -} -.icon-align-justify { - background-position: -336px -48px; -} -.icon-list { - background-position: -360px -48px; -} -.icon-indent-left { - background-position: -384px -48px; -} -.icon-indent-right { - background-position: -408px -48px; -} -.icon-facetime-video { - background-position: -432px -48px; -} -.icon-picture { - background-position: -456px -48px; -} -.icon-pencil { - background-position: 0 -72px; -} -.icon-map-marker { - background-position: -24px -72px; -} -.icon-adjust { - background-position: -48px -72px; -} -.icon-tint { - background-position: -72px -72px; -} -.icon-edit { - background-position: -96px -72px; -} -.icon-share { - background-position: -120px -72px; -} -.icon-check { - background-position: -144px -72px; -} -.icon-move { - background-position: -168px -72px; -} -.icon-step-backward { - background-position: -192px -72px; -} -.icon-fast-backward { - background-position: -216px -72px; -} -.icon-backward { - background-position: -240px -72px; -} -.icon-play { - background-position: -264px -72px; -} -.icon-pause { - background-position: -288px -72px; -} -.icon-stop { - background-position: -312px -72px; -} -.icon-forward { - background-position: -336px -72px; -} -.icon-fast-forward { - background-position: -360px -72px; -} -.icon-step-forward { - background-position: -384px -72px; -} -.icon-eject { - background-position: -408px -72px; -} -.icon-chevron-left { - background-position: -432px -72px; -} -.icon-chevron-right { - background-position: -456px -72px; -} -.icon-plus-sign { - background-position: 0 -96px; -} -.icon-minus-sign { - background-position: -24px -96px; -} -.icon-remove-sign { - background-position: -48px -96px; -} -.icon-ok-sign { - background-position: -72px -96px; -} -.icon-question-sign { - background-position: -96px -96px; -} -.icon-info-sign { - background-position: -120px -96px; -} -.icon-screenshot { - background-position: -144px -96px; -} -.icon-remove-circle { - background-position: -168px -96px; -} -.icon-ok-circle { - background-position: -192px -96px; -} -.icon-ban-circle { - background-position: -216px -96px; -} -.icon-arrow-left { - background-position: -240px -96px; -} -.icon-arrow-right { - background-position: -264px -96px; -} -.icon-arrow-up { - background-position: -289px -96px; -} -.icon-arrow-down { - background-position: -312px -96px; -} -.icon-share-alt { - background-position: -336px -96px; -} -.icon-resize-full { - background-position: -360px -96px; -} -.icon-resize-small { - background-position: -384px -96px; -} -.icon-plus { - background-position: -408px -96px; -} -.icon-minus { - background-position: -433px -96px; -} -.icon-asterisk { - background-position: -456px -96px; -} -.icon-exclamation-sign { - background-position: 0 -120px; -} -.icon-gift { - background-position: -24px -120px; -} -.icon-leaf { - background-position: -48px -120px; -} -.icon-fire { - background-position: -72px -120px; -} -.icon-eye-open { - background-position: -96px -120px; -} -.icon-eye-close { - background-position: -120px -120px; -} -.icon-warning-sign { - background-position: -144px -120px; -} -.icon-plane { - background-position: -168px -120px; -} -.icon-calendar { - background-position: -192px -120px; -} -.icon-random { - background-position: -216px -120px; -} -.icon-comment { - background-position: -240px -120px; -} -.icon-magnet { - background-position: -264px -120px; -} -.icon-chevron-up { - background-position: -288px -120px; -} -.icon-chevron-down { - background-position: -313px -119px; -} -.icon-retweet { - background-position: -336px -120px; -} -.icon-shopping-cart { - background-position: -360px -120px; -} -.icon-folder-close { - background-position: -384px -120px; -} -.icon-folder-open { - background-position: -408px -120px; -} -.icon-resize-vertical { - background-position: -432px -119px; -} -.icon-resize-horizontal { - background-position: -456px -118px; -} -.dropdown { - position: relative; -} -.dropdown-toggle { - *margin-bottom: -3px; -} -.dropdown-toggle:active, .open .dropdown-toggle { - outline: 0; -} -.caret { - display: inline-block; - width: 0; - height: 0; - text-indent: -99999px; - *text-indent: 0; - vertical-align: top; - border-left: 4px solid transparent; - border-right: 4px solid transparent; - border-top: 4px solid #000000; - opacity: 0.3; - filter: alpha(opacity=30); - content: "\2193"; -} -.dropdown .caret { - margin-top: 8px; - margin-left: 2px; -} -.dropdown:hover .caret, .open.dropdown .caret { - opacity: 1; - filter: alpha(opacity=100); -} -.dropdown-menu { - position: absolute; - top: 100%; - left: 0; - z-index: 1000; - float: left; - display: none; - min-width: 160px; - max-width: 220px; - _width: 160px; - padding: 4px 0; - margin: 0; - list-style: none; - background-color: #ffffff; - border-color: #ccc; - border-color: rgba(0, 0, 0, 0.2); - border-style: solid; - border-width: 1px; - -webkit-border-radius: 0 0 5px 5px; - -moz-border-radius: 0 0 5px 5px; - border-radius: 0 0 5px 5px; - -webkit-box-shadow: 0 5px 10px rgba(0, 0, 0, 0.2); - -moz-box-shadow: 0 5px 10px rgba(0, 0, 0, 0.2); - box-shadow: 0 5px 10px rgba(0, 0, 0, 0.2); - -webkit-background-clip: padding-box; - -moz-background-clip: padding; - background-clip: padding-box; - *border-right-width: 2px; - *border-bottom-width: 2px; -} -.dropdown-menu.bottom-up { - top: auto; - bottom: 100%; - margin-bottom: 2px; -} -.dropdown-menu .divider { - height: 1px; - margin: 5px 1px; - overflow: hidden; - background-color: #e5e5e5; - border-bottom: 1px solid #ffffff; - *width: 100%; - *margin: -5px 0 5px; -} -.dropdown-menu a { - display: block; - padding: 3px 15px; - clear: both; - font-weight: normal; - line-height: 18px; - color: #555555; - white-space: nowrap; -} -.dropdown-menu li > a:hover, .dropdown-menu .active > a, .dropdown-menu .active > a:hover { - color: #ffffff; - text-decoration: none; - background-color: #0088cc; -} -.dropdown.open { - *z-index: 1000; -} -.dropdown.open .dropdown-toggle { - color: #ffffff; - background: #ccc; - background: rgba(0, 0, 0, 0.3); -} -.dropdown.open .dropdown-menu { - display: block; -} -.typeahead { - margin-top: 2px; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.well { - min-height: 20px; - padding: 19px; - margin-bottom: 20px; - background-color: #f5f5f5; - border: 1px solid #eee; - border: 1px solid rgba(0, 0, 0, 0.05); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); -} -.well blockquote { - border-color: #ddd; - border-color: rgba(0, 0, 0, 0.15); -} -.fade { - -webkit-transition: opacity 0.15s linear; - -moz-transition: opacity 0.15s linear; - -ms-transition: opacity 0.15s linear; - -o-transition: opacity 0.15s linear; - transition: opacity 0.15s linear; - opacity: 0; -} -.fade.in { - opacity: 1; -} -.collapse { - -webkit-transition: height 0.35s ease; - -moz-transition: height 0.35s ease; - -ms-transition: height 0.35s ease; - -o-transition: height 0.35s ease; - transition: height 0.35s ease; - position: relative; - overflow: hidden; - height: 0; -} -.collapse.in { - height: auto; -} -.close { - float: right; - font-size: 20px; - font-weight: bold; - line-height: 18px; - color: #000000; - text-shadow: 0 1px 0 #ffffff; - opacity: 0.2; - filter: alpha(opacity=20); -} -.close:hover { - color: #000000; - text-decoration: none; - opacity: 0.4; - filter: alpha(opacity=40); - cursor: pointer; -} -.btn { - display: inline-block; - padding: 4px 10px 4px; - font-size: 13px; - line-height: 18px; - color: #333333; - text-align: center; - text-shadow: 0 1px 1px rgba(255, 255, 255, 0.75); - background-color: #fafafa; - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), color-stop(25%, #ffffff), to(#e6e6e6)); - background-image: -webkit-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-image: -moz-linear-gradient(top, #ffffff, #ffffff 25%, #e6e6e6); - background-image: -ms-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-image: -o-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-image: linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-repeat: no-repeat; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#e6e6e6', GradientType=0); - border: 1px solid #ccc; - border-bottom-color: #bbb; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - cursor: pointer; - *margin-left: .3em; -} -.btn:first-child { - *margin-left: 0; -} -.btn:hover { - color: #333333; - text-decoration: none; - background-color: #e6e6e6; - background-position: 0 -15px; - -webkit-transition: background-position 0.1s linear; - -moz-transition: background-position 0.1s linear; - -ms-transition: background-position 0.1s linear; - -o-transition: background-position 0.1s linear; - transition: background-position 0.1s linear; -} -.btn:focus { - outline: thin dotted; - outline: 5px auto -webkit-focus-ring-color; - outline-offset: -2px; -} -.btn.active, .btn:active { - background-image: none; - -webkit-box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - background-color: #e6e6e6; - background-color: #d9d9d9 \9; - color: rgba(0, 0, 0, 0.5); - outline: 0; -} -.btn.disabled, .btn[disabled] { - cursor: default; - background-image: none; - background-color: #e6e6e6; - opacity: 0.65; - filter: alpha(opacity=65); - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; -} -.btn-large { - padding: 9px 14px; - font-size: 15px; - line-height: normal; - -webkit-border-radius: 5px; - -moz-border-radius: 5px; - border-radius: 5px; -} -.btn-large .icon { - margin-top: 1px; -} -.btn-small { - padding: 5px 9px; - font-size: 11px; - line-height: 16px; -} -.btn-small .icon { - margin-top: -1px; -} -.btn-primary, -.btn-primary:hover, -.btn-warning, -.btn-warning:hover, -.btn-danger, -.btn-danger:hover, -.btn-success, -.btn-success:hover, -.btn-info, -.btn-info:hover { - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); - color: #ffffff; -} -.btn-primary.active, -.btn-warning.active, -.btn-danger.active, -.btn-success.active, -.btn-info.active { - color: rgba(255, 255, 255, 0.75); -} -.btn-primary { - background-color: #006dcc; - background-image: -moz-linear-gradient(top, #0088cc, #0044cc); - background-image: -ms-linear-gradient(top, #0088cc, #0044cc); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#0088cc), to(#0044cc)); - background-image: -webkit-linear-gradient(top, #0088cc, #0044cc); - background-image: -o-linear-gradient(top, #0088cc, #0044cc); - background-image: linear-gradient(top, #0088cc, #0044cc); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#0088cc', endColorstr='#0044cc', GradientType=0); - border-color: #0044cc #0044cc #002a80; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-primary:hover, -.btn-primary:active, -.btn-primary.active, -.btn-primary.disabled, -.btn-primary[disabled] { - background-color: #0044cc; -} -.btn-primary:active, .btn-primary.active { - background-color: #003399 \9; -} -.btn-warning { - background-color: #faa732; - background-image: -moz-linear-gradient(top, #fbb450, #f89406); - background-image: -ms-linear-gradient(top, #fbb450, #f89406); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#fbb450), to(#f89406)); - background-image: -webkit-linear-gradient(top, #fbb450, #f89406); - background-image: -o-linear-gradient(top, #fbb450, #f89406); - background-image: linear-gradient(top, #fbb450, #f89406); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fbb450', endColorstr='#f89406', GradientType=0); - border-color: #f89406 #f89406 #ad6704; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-warning:hover, -.btn-warning:active, -.btn-warning.active, -.btn-warning.disabled, -.btn-warning[disabled] { - background-color: #f89406; -} -.btn-warning:active, .btn-warning.active { - background-color: #c67605 \9; -} -.btn-danger { - background-color: #da4f49; - background-image: -moz-linear-gradient(top, #ee5f5b, #bd362f); - background-image: -ms-linear-gradient(top, #ee5f5b, #bd362f); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#bd362f)); - background-image: -webkit-linear-gradient(top, #ee5f5b, #bd362f); - background-image: -o-linear-gradient(top, #ee5f5b, #bd362f); - background-image: linear-gradient(top, #ee5f5b, #bd362f); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#bd362f', GradientType=0); - border-color: #bd362f #bd362f #802420; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-danger:hover, -.btn-danger:active, -.btn-danger.active, -.btn-danger.disabled, -.btn-danger[disabled] { - background-color: #bd362f; -} -.btn-danger:active, .btn-danger.active { - background-color: #942a25 \9; -} -.btn-success { - background-color: #5bb75b; - background-image: -moz-linear-gradient(top, #62c462, #51a351); - background-image: -ms-linear-gradient(top, #62c462, #51a351); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#51a351)); - background-image: -webkit-linear-gradient(top, #62c462, #51a351); - background-image: -o-linear-gradient(top, #62c462, #51a351); - background-image: linear-gradient(top, #62c462, #51a351); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#51a351', GradientType=0); - border-color: #51a351 #51a351 #387038; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-success:hover, -.btn-success:active, -.btn-success.active, -.btn-success.disabled, -.btn-success[disabled] { - background-color: #51a351; -} -.btn-success:active, .btn-success.active { - background-color: #408140 \9; -} -.btn-info { - background-color: #49afcd; - background-image: -moz-linear-gradient(top, #5bc0de, #2f96b4); - background-image: -ms-linear-gradient(top, #5bc0de, #2f96b4); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#2f96b4)); - background-image: -webkit-linear-gradient(top, #5bc0de, #2f96b4); - background-image: -o-linear-gradient(top, #5bc0de, #2f96b4); - background-image: linear-gradient(top, #5bc0de, #2f96b4); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#2f96b4', GradientType=0); - border-color: #2f96b4 #2f96b4 #1f6377; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-info:hover, -.btn-info:active, -.btn-info.active, -.btn-info.disabled, -.btn-info[disabled] { - background-color: #2f96b4; -} -.btn-info:active, .btn-info.active { - background-color: #24748c \9; -} -button.btn, input[type="submit"].btn { - *padding-top: 2px; - *padding-bottom: 2px; -} -button.btn::-moz-focus-inner, input[type="submit"].btn::-moz-focus-inner { - padding: 0; - border: 0; -} -button.btn.large, input[type="submit"].btn.large { - *padding-top: 7px; - *padding-bottom: 7px; -} -button.btn.small, input[type="submit"].btn.small { - *padding-top: 3px; - *padding-bottom: 3px; -} -.btn-group { - position: relative; - *zoom: 1; - *margin-left: .3em; -} -.btn-group:before, .btn-group:after { - display: table; - content: ""; -} -.btn-group:after { - clear: both; -} -.btn-group:first-child { - *margin-left: 0; -} -.btn-group + .btn-group { - margin-left: 5px; -} -.btn-toolbar { - margin-top: 9px; - margin-bottom: 9px; -} -.btn-toolbar .btn-group { - display: inline-block; - *display: inline; - /* IE7 inline-block hack */ - - *zoom: 1; -} -.btn-group .btn { - position: relative; - float: left; - margin-left: -1px; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -.btn-group .btn:first-child { - margin-left: 0; - -webkit-border-top-left-radius: 4px; - -moz-border-radius-topleft: 4px; - border-top-left-radius: 4px; - -webkit-border-bottom-left-radius: 4px; - -moz-border-radius-bottomleft: 4px; - border-bottom-left-radius: 4px; -} -.btn-group .btn:last-child, .btn-group .dropdown-toggle { - -webkit-border-top-right-radius: 4px; - -moz-border-radius-topright: 4px; - border-top-right-radius: 4px; - -webkit-border-bottom-right-radius: 4px; - -moz-border-radius-bottomright: 4px; - border-bottom-right-radius: 4px; -} -.btn-group .btn.large:first-child { - margin-left: 0; - -webkit-border-top-left-radius: 6px; - -moz-border-radius-topleft: 6px; - border-top-left-radius: 6px; - -webkit-border-bottom-left-radius: 6px; - -moz-border-radius-bottomleft: 6px; - border-bottom-left-radius: 6px; -} -.btn-group .btn.large:last-child, .btn-group .large.dropdown-toggle { - -webkit-border-top-right-radius: 6px; - -moz-border-radius-topright: 6px; - border-top-right-radius: 6px; - -webkit-border-bottom-right-radius: 6px; - -moz-border-radius-bottomright: 6px; - border-bottom-right-radius: 6px; -} -.btn-group .btn:hover, -.btn-group .btn:focus, -.btn-group .btn:active, -.btn-group .btn.active { - z-index: 2; -} -.btn-group .dropdown-toggle:active, .btn-group.open .dropdown-toggle { - outline: 0; -} -.btn-group .dropdown-toggle { - padding-left: 8px; - padding-right: 8px; - -webkit-box-shadow: inset 1px 0 0 rgba(255, 255, 255, 0.125), inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 1px 0 0 rgba(255, 255, 255, 0.125), inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 1px 0 0 rgba(255, 255, 255, 0.125), inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - *padding-top: 5px; - *padding-bottom: 5px; -} -.btn-group.open { - *z-index: 1000; -} -.btn-group.open .dropdown-menu { - display: block; - margin-top: 1px; - -webkit-border-radius: 5px; - -moz-border-radius: 5px; - border-radius: 5px; -} -.btn-group.open .dropdown-toggle { - background-image: none; - -webkit-box-shadow: inset 0 1px 6px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 1px 6px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 1px 6px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); -} -.btn .caret { - margin-top: 7px; - margin-left: 0; -} -.btn:hover .caret, .open.btn-group .caret { - opacity: 1; - filter: alpha(opacity=100); -} -.btn-primary .caret, -.btn-danger .caret, -.btn-info .caret, -.btn-success .caret { - border-top-color: #ffffff; - opacity: 0.75; - filter: alpha(opacity=75); -} -.btn-small .caret { - margin-top: 4px; -} -.alert { - padding: 8px 35px 8px 14px; - margin-bottom: 18px; - text-shadow: 0 1px 0 rgba(255, 255, 255, 0.5); - background-color: #fcf8e3; - border: 1px solid #fbeed5; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.alert, .alert-heading { - color: #c09853; -} -.alert .close { - position: relative; - top: -2px; - right: -21px; - line-height: 18px; -} -.alert-success { - background-color: #dff0d8; - border-color: #d6e9c6; -} -.alert-success, .alert-success .alert-heading { - color: #468847; -} -.alert-danger, .alert-error { - background-color: #f2dede; - border-color: #eed3d7; -} -.alert-danger, -.alert-error, -.alert-danger .alert-heading, -.alert-error .alert-heading { - color: #b94a48; -} -.alert-info { - background-color: #d9edf7; - border-color: #bce8f1; -} -.alert-info, .alert-info .alert-heading { - color: #3a87ad; -} -.alert-block { - padding-top: 14px; - padding-bottom: 14px; -} -.alert-block > p, .alert-block > ul { - margin-bottom: 0; -} -.alert-block p + p { - margin-top: 5px; -} -.nav { - margin-left: 0; - margin-bottom: 18px; - list-style: none; -} -.nav > li > a { - display: block; -} -.nav > li > a:hover { - text-decoration: none; - background-color: #eeeeee; -} -.nav-list { - padding-left: 14px; - padding-right: 14px; - margin-bottom: 0; -} -.nav-list > li > a, .nav-list .nav-header { - display: block; - padding: 3px 15px; - margin-left: -15px; - margin-right: -15px; - text-shadow: 0 1px 0 rgba(255, 255, 255, 0.5); -} -.nav-list .nav-header { - font-size: 11px; - font-weight: bold; - line-height: 18px; - color: #999999; - text-transform: uppercase; -} - -.nav-list .nav-header * { - text-transform:none; -} - -.nav-list > li + .nav-header { - margin-top: 9px; -} -.nav-list .active > a, .nav-list .active > a:hover { - color: #ffffff; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.2); - background-color: #0088cc; -} -.nav-list [class^="icon-"] { - margin-right: 2px; -} -.nav-tabs, .nav-pills { - *zoom: 1; -} -.nav-tabs:before, -.nav-pills:before, -.nav-tabs:after, -.nav-pills:after { - display: table; - content: ""; -} -.nav-tabs:after, .nav-pills:after { - clear: both; -} -.nav-tabs > li, .nav-pills > li { - float: left; -} -.nav-tabs > li > a, .nav-pills > li > a { - padding-right: 12px; - padding-left: 12px; - margin-right: 2px; - line-height: 14px; -} -.nav-tabs { - border-bottom: 1px solid #ddd; -} -.nav-tabs > li { - margin-bottom: -1px; -} -.nav-tabs > li > a { - padding-top: 9px; - padding-bottom: 9px; - border: 1px solid transparent; - -webkit-border-radius: 4px 4px 0 0; - -moz-border-radius: 4px 4px 0 0; - border-radius: 4px 4px 0 0; -} -.nav-tabs > li > a:hover { - border-color: #eeeeee #eeeeee #dddddd; -} -.nav-tabs > .active > a, .nav-tabs > .active > a:hover { - color: #555555; - background-color: #ffffff; - border: 1px solid #ddd; - border-bottom-color: transparent; - cursor: default; -} -.nav-pills > li > a { - padding-top: 8px; - padding-bottom: 8px; - margin-top: 2px; - margin-bottom: 2px; - -webkit-border-radius: 5px; - -moz-border-radius: 5px; - border-radius: 5px; -} -.nav-pills .active > a, .nav-pills .active > a:hover { - color: #ffffff; - background-color: #0088cc; -} -.nav-stacked > li { - float: none; -} -.nav-stacked > li > a { - margin-right: 0; -} -.nav-tabs.nav-stacked { - border-bottom: 0; -} -.nav-tabs.nav-stacked > li > a { - border: 1px solid #ddd; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -.nav-tabs.nav-stacked > li:first-child > a { - -webkit-border-radius: 4px 4px 0 0; - -moz-border-radius: 4px 4px 0 0; - border-radius: 4px 4px 0 0; -} -.nav-tabs.nav-stacked > li:last-child > a { - -webkit-border-radius: 0 0 4px 4px; - -moz-border-radius: 0 0 4px 4px; - border-radius: 0 0 4px 4px; -} -.nav-tabs.nav-stacked > li > a:hover { - border-color: #ddd; - z-index: 2; -} -.nav-pills.nav-stacked > li > a { - margin-bottom: 3px; -} -.nav-pills.nav-stacked > li:last-child > a { - margin-bottom: 1px; -} -.nav-tabs .dropdown-menu, .nav-pills .dropdown-menu { - margin-top: 1px; - border-width: 1px; -} -.nav-pills .dropdown-menu { - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.nav-tabs .dropdown-toggle .caret, .nav-pills .dropdown-toggle .caret { - border-top-color: #0088cc; - margin-top: 6px; -} -.nav-tabs .dropdown-toggle:hover .caret, .nav-pills .dropdown-toggle:hover .caret { - border-top-color: #005580; -} -.nav-tabs .active .dropdown-toggle .caret, .nav-pills .active .dropdown-toggle .caret { - border-top-color: #333333; -} -.nav > .dropdown.active > a:hover { - color: #000000; - cursor: pointer; -} -.nav-tabs .open .dropdown-toggle, .nav-pills .open .dropdown-toggle, .nav > .open.active > a:hover { - color: #ffffff; - background-color: #999999; - border-color: #999999; -} -.nav .open .caret, .nav .open.active .caret, .nav .open a:hover .caret { - border-top-color: #ffffff; - opacity: 1; - filter: alpha(opacity=100); -} -.tabs-stacked .open > a:hover { - border-color: #999999; -} -.tabbable { - *zoom: 1; -} -.tabbable:before, .tabbable:after { - display: table; - content: ""; -} -.tabbable:after { - clear: both; -} -.tabs-below .nav-tabs, .tabs-right .nav-tabs, .tabs-left .nav-tabs { - border-bottom: 0; -} -.tab-content > .tab-pane, .pill-content > .pill-pane { - display: none; -} -.tab-content > .active, .pill-content > .active { - display: block; -} -.tabs-below .nav-tabs { - border-top: 1px solid #ddd; -} -.tabs-below .nav-tabs > li { - margin-top: -1px; - margin-bottom: 0; -} -.tabs-below .nav-tabs > li > a { - -webkit-border-radius: 0 0 4px 4px; - -moz-border-radius: 0 0 4px 4px; - border-radius: 0 0 4px 4px; -} -.tabs-below .nav-tabs > li > a:hover { - border-bottom-color: transparent; - border-top-color: #ddd; -} -.tabs-below .nav-tabs .active > a, .tabs-below .nav-tabs .active > a:hover { - border-color: transparent #ddd #ddd #ddd; -} -.tabs-left .nav-tabs > li, .tabs-right .nav-tabs > li { - float: none; -} -.tabs-left .nav-tabs > li > a, .tabs-right .nav-tabs > li > a { - min-width: 74px; - margin-right: 0; - margin-bottom: 3px; -} -.tabs-left .nav-tabs { - float: left; - margin-right: 19px; - border-right: 1px solid #ddd; -} -.tabs-left .nav-tabs > li > a { - margin-right: -1px; - -webkit-border-radius: 4px 0 0 4px; - -moz-border-radius: 4px 0 0 4px; - border-radius: 4px 0 0 4px; -} -.tabs-left .nav-tabs > li > a:hover { - border-color: #eeeeee #dddddd #eeeeee #eeeeee; -} -.tabs-left .nav-tabs .active > a, .tabs-left .nav-tabs .active > a:hover { - border-color: #ddd transparent #ddd #ddd; - *border-right-color: #ffffff; -} -.tabs-right .nav-tabs { - float: right; - margin-left: 19px; - border-left: 1px solid #ddd; -} -.tabs-right .nav-tabs > li > a { - margin-left: -1px; - -webkit-border-radius: 0 4px 4px 0; - -moz-border-radius: 0 4px 4px 0; - border-radius: 0 4px 4px 0; -} -.tabs-right .nav-tabs > li > a:hover { - border-color: #eeeeee #eeeeee #eeeeee #dddddd; -} -.tabs-right .nav-tabs .active > a, .tabs-right .nav-tabs .active > a:hover { - border-color: #ddd #ddd #ddd transparent; - *border-left-color: #ffffff; -} -.navbar { - overflow: visible; - margin-bottom: 18px; -} -.navbar-inner { - padding-left: 20px; - padding-right: 20px; - background-color: #2c2c2c; - background-image: -moz-linear-gradient(top, #333333, #222222); - background-image: -ms-linear-gradient(top, #333333, #222222); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222)); - background-image: -webkit-linear-gradient(top, #333333, #222222); - background-image: -o-linear-gradient(top, #333333, #222222); - background-image: linear-gradient(top, #333333, #222222); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25), inset 0 -1px 0 rgba(0, 0, 0, 0.1); - -moz-box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25), inset 0 -1px 0 rgba(0, 0, 0, 0.1); - box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25), inset 0 -1px 0 rgba(0, 0, 0, 0.1); -} -.btn-navbar { - display: none; - float: right; - padding: 7px 10px; - margin-left: 5px; - margin-right: 5px; - background-color: #2c2c2c; - background-image: -moz-linear-gradient(top, #333333, #222222); - background-image: -ms-linear-gradient(top, #333333, #222222); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222)); - background-image: -webkit-linear-gradient(top, #333333, #222222); - background-image: -o-linear-gradient(top, #333333, #222222); - background-image: linear-gradient(top, #333333, #222222); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0); - border-color: #222222 #222222 #000000; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); - -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.075); - -moz-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.075); - box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.075); -} -.btn-navbar:hover, -.btn-navbar:active, -.btn-navbar.active, -.btn-navbar.disabled, -.btn-navbar[disabled] { - background-color: #222222; -} -.btn-navbar:active, .btn-navbar.active { - background-color: #080808 \9; -} -.btn-navbar .icon-bar { - display: block; - width: 18px; - height: 2px; - background-color: #f5f5f5; - -webkit-border-radius: 1px; - -moz-border-radius: 1px; - border-radius: 1px; - -webkit-box-shadow: 0 1px 0 rgba(0, 0, 0, 0.25); - -moz-box-shadow: 0 1px 0 rgba(0, 0, 0, 0.25); - box-shadow: 0 1px 0 rgba(0, 0, 0, 0.25); -} -.btn-navbar .icon-bar + .icon-bar { - margin-top: 3px; -} -.nav-collapse.collapse { - height: auto; -} -.navbar .brand:hover { - text-decoration: none; -} -.navbar .brand { - float: left; - display: block; - padding: 8px 20px 12px; - margin-left: -20px; - font-size: 20px; - font-weight: 200; - line-height: 1; - color: #ffffff; -} -.navbar .navbar-text { - margin-bottom: 0; - line-height: 40px; - color: #999999; -} -.navbar .navbar-text a:hover { - color: #ffffff; - background-color: transparent; -} -.navbar .btn, .navbar .btn-group { - margin-top: 5px; -} -.navbar .btn-group .btn { - margin-top: 0; -} -.navbar-form { - margin-bottom: 0; - *zoom: 1; -} -.navbar-form:before, .navbar-form:after { - display: table; - content: ""; -} -.navbar-form:after { - clear: both; -} -.navbar-form input, .navbar-form select { - display: inline-block; - margin-top: 5px; - margin-bottom: 0; -} -.navbar-form .radio, .navbar-form .checkbox { - margin-top: 5px; -} -.navbar-form input[type="image"], .navbar-form input[type="checkbox"], .navbar-form input[type="radio"] { - margin-top: 3px; -} -.navbar-search { - position: relative; - float: left; - margin-top: 6px; - margin-bottom: 0; -} -.navbar-search .search-query { - padding: 4px 9px; - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - font-weight: normal; - line-height: 1; - color: #ffffff; - color: rgba(255, 255, 255, 0.75); - background: #666; - background: rgba(255, 255, 255, 0.3); - border: 1px solid #111; - -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1), 0 1px 0px rgba(255, 255, 255, 0.15); - -moz-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1), 0 1px 0px rgba(255, 255, 255, 0.15); - box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1), 0 1px 0px rgba(255, 255, 255, 0.15); - -webkit-transition: none; - -moz-transition: none; - -ms-transition: none; - -o-transition: none; - transition: none; -} -.navbar-search .search-query :-moz-placeholder { - color: #eeeeee; -} -.navbar-search .search-query::-webkit-input-placeholder { - color: #eeeeee; -} -.navbar-search .search-query:hover { - color: #ffffff; - background-color: #999999; - background-color: rgba(255, 255, 255, 0.5); -} -.navbar-search .search-query:focus, .navbar-search .search-query.focused { - padding: 5px 10px; - color: #333333; - text-shadow: 0 1px 0 #ffffff; - background-color: #ffffff; - border: 0; - -webkit-box-shadow: 0 0 3px rgba(0, 0, 0, 0.15); - -moz-box-shadow: 0 0 3px rgba(0, 0, 0, 0.15); - box-shadow: 0 0 3px rgba(0, 0, 0, 0.15); - outline: 0; -} -.navbar-fixed-top { - position: fixed; - top: 0; - right: 0; - left: 0; - z-index: 1030; -} -.navbar-fixed-top .navbar-inner { - padding-left: 0; - padding-right: 0; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -.navbar .nav { - position: relative; - left: 0; - display: block; - float: left; - margin: 0 10px 0 0; -} -.navbar .nav.pull-right { - float: right; -} -.navbar .nav > li { - display: block; - float: left; -} -.navbar .nav > li > a { - float: none; - padding: 10px 10px 11px; - line-height: 19px; - color: #999999; - text-decoration: none; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); -} -.navbar .nav > li > a:hover { - background-color: transparent; - color: #ffffff; - text-decoration: none; -} -.navbar .nav .active > a, .navbar .nav .active > a:hover { - color: #ffffff; - text-decoration: none; - background-color: #222222; - background-color: rgba(0, 0, 0, 0.5); -} -.navbar .divider-vertical { - height: 40px; - width: 1px; - margin: 0 9px; - overflow: hidden; - background-color: #222222; - border-right: 1px solid #333333; -} -.navbar .nav.pull-right { - margin-left: 10px; - margin-right: 0; -} -.navbar .dropdown-menu { - margin-top: 1px; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.navbar .dropdown-menu:before { - content: ''; - display: inline-block; - border-left: 7px solid transparent; - border-right: 7px solid transparent; - border-bottom: 7px solid #ccc; - border-bottom-color: rgba(0, 0, 0, 0.2); - position: absolute; - top: -7px; - left: 9px; -} -.navbar .dropdown-menu:after { - content: ''; - display: inline-block; - border-left: 6px solid transparent; - border-right: 6px solid transparent; - border-bottom: 6px solid #ffffff; - position: absolute; - top: -6px; - left: 10px; -} -.navbar .nav .dropdown-toggle .caret, .navbar .nav .open.dropdown .caret { - border-top-color: #ffffff; -} -.navbar .nav .active .caret { - opacity: 1; - filter: alpha(opacity=100); -} -.navbar .nav .open > .dropdown-toggle, .navbar .nav .active > .dropdown-toggle, .navbar .nav .open.active > .dropdown-toggle { - background-color: transparent; -} -.navbar .nav .active > .dropdown-toggle:hover { - color: #ffffff; -} -.navbar .nav.pull-right .dropdown-menu { - left: auto; - right: 0; -} -.navbar .nav.pull-right .dropdown-menu:before { - left: auto; - right: 12px; -} -.navbar .nav.pull-right .dropdown-menu:after { - left: auto; - right: 13px; -} -.breadcrumb { - padding: 7px 14px; - margin: 0 0 18px; - background-color: #fbfbfb; - background-image: -moz-linear-gradient(top, #ffffff, #f5f5f5); - background-image: -ms-linear-gradient(top, #ffffff, #f5f5f5); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), to(#f5f5f5)); - background-image: -webkit-linear-gradient(top, #ffffff, #f5f5f5); - background-image: -o-linear-gradient(top, #ffffff, #f5f5f5); - background-image: linear-gradient(top, #ffffff, #f5f5f5); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f5f5f5', GradientType=0); - border: 1px solid #ddd; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; - -webkit-box-shadow: inset 0 1px 0 #ffffff; - -moz-box-shadow: inset 0 1px 0 #ffffff; - box-shadow: inset 0 1px 0 #ffffff; -} -.breadcrumb li { - display: inline; - text-shadow: 0 1px 0 #ffffff; -} -.breadcrumb .divider { - padding: 0 5px; - color: #999999; -} -.breadcrumb .active a { - color: #333333; -} -.pagination { - height: 36px; - margin: 18px 0; -} -.pagination ul { - display: inline-block; - *display: inline; - /* IE7 inline-block hack */ - - *zoom: 1; - margin-left: 0; - margin-bottom: 0; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; - -webkit-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05); -} -.pagination li { - display: inline; -} -.pagination a { - float: left; - padding: 0 14px; - line-height: 34px; - text-decoration: none; - border: 1px solid #ddd; - border-left-width: 0; -} -.pagination a:hover, .pagination .active a { - background-color: #f5f5f5; -} -.pagination .active a { - color: #999999; - cursor: default; -} -.pagination .disabled a, .pagination .disabled a:hover { - color: #999999; - background-color: transparent; - cursor: default; -} -.pagination li:first-child a { - border-left-width: 1px; - -webkit-border-radius: 3px 0 0 3px; - -moz-border-radius: 3px 0 0 3px; - border-radius: 3px 0 0 3px; -} -.pagination li:last-child a { - -webkit-border-radius: 0 3px 3px 0; - -moz-border-radius: 0 3px 3px 0; - border-radius: 0 3px 3px 0; -} -.pagination-centered { - text-align: center; -} -.pagination-right { - text-align: right; -} -.pager { - margin-left: 0; - margin-bottom: 18px; - list-style: none; - text-align: center; - *zoom: 1; -} -.pager:before, .pager:after { - display: table; - content: ""; -} -.pager:after { - clear: both; -} -.pager li { - display: inline; -} -.pager a { - display: inline-block; - padding: 5px 14px; - background-color: #fff; - border: 1px solid #ddd; - -webkit-border-radius: 15px; - -moz-border-radius: 15px; - border-radius: 15px; -} -.pager a:hover { - text-decoration: none; - background-color: #f5f5f5; -} -.pager .next a { - float: right; -} -.pager .previous a { - float: left; -} -.modal-open .dropdown-menu { - z-index: 2050; -} -.modal-open .dropdown.open { - *z-index: 2050; -} -.modal-open .popover { - z-index: 2060; -} -.modal-open .tooltip { - z-index: 2070; -} -.modal-backdrop { - position: fixed; - top: 0; - right: 0; - bottom: 0; - left: 0; - z-index: 1040; - background-color: #000000; -} -.modal-backdrop.fade { - opacity: 0; -} -.modal-backdrop, .modal-backdrop.fade.in { - opacity: 0.8; - filter: alpha(opacity=80); -} -.modal { - position: fixed; - top: 50%; - left: 50%; - z-index: 1050; - max-height: 500px; - overflow: auto; - width: 560px; - margin: -250px 0 0 -280px; - background-color: #ffffff; - border: 1px solid #999; - border: 1px solid rgba(0, 0, 0, 0.3); - *border: 1px solid #999; - /* IE6-7 */ - - -webkit-border-radius: 6px; - -moz-border-radius: 6px; - border-radius: 6px; - -webkit-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - -moz-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - -webkit-background-clip: padding-box; - -moz-background-clip: padding-box; - background-clip: padding-box; -} -.modal.fade { - -webkit-transition: opacity .3s linear, top .3s ease-out; - -moz-transition: opacity .3s linear, top .3s ease-out; - -ms-transition: opacity .3s linear, top .3s ease-out; - -o-transition: opacity .3s linear, top .3s ease-out; - transition: opacity .3s linear, top .3s ease-out; - top: -25%; -} -.modal.fade.in { - top: 50%; -} -.modal-header { - padding: 9px 15px; - border-bottom: 1px solid #eee; -} -.modal-header .close { - margin-top: 2px; -} -.modal-body { - padding: 15px; -} -.modal-footer { - padding: 14px 15px 15px; - margin-bottom: 0; - background-color: #f5f5f5; - border-top: 1px solid #ddd; - -webkit-border-radius: 0 0 6px 6px; - -moz-border-radius: 0 0 6px 6px; - border-radius: 0 0 6px 6px; - -webkit-box-shadow: inset 0 1px 0 #ffffff; - -moz-box-shadow: inset 0 1px 0 #ffffff; - box-shadow: inset 0 1px 0 #ffffff; - *zoom: 1; -} -.modal-footer:before, .modal-footer:after { - display: table; - content: ""; -} -.modal-footer:after { - clear: both; -} -.modal-footer .btn { - float: right; - margin-left: 5px; - margin-bottom: 0; -} -.tooltip { - position: absolute; - z-index: 1020; - display: block; - visibility: visible; - padding: 5px; - font-size: 11px; - opacity: 0; - filter: alpha(opacity=0); -} -.tooltip.in { - opacity: 0.8; - filter: alpha(opacity=80); -} -.tooltip.top { - margin-top: -2px; -} -.tooltip.right { - margin-left: 2px; -} -.tooltip.bottom { - margin-top: 2px; -} -.tooltip.left { - margin-left: -2px; -} -.tooltip.top .tooltip-arrow { - bottom: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-top: 5px solid #000000; -} -.tooltip.left .tooltip-arrow { - top: 50%; - right: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-left: 5px solid #000000; -} -.tooltip.bottom .tooltip-arrow { - top: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-bottom: 5px solid #000000; -} -.tooltip.right .tooltip-arrow { - top: 50%; - left: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-right: 5px solid #000000; -} -.tooltip-inner { - max-width: 200px; - padding: 3px 8px; - color: #ffffff; - text-align: center; - text-decoration: none; - background-color: #000000; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.tooltip-arrow { - position: absolute; - width: 0; - height: 0; -} -.popover { - position: absolute; - top: 0; - left: 0; - z-index: 1010; - display: none; - padding: 5px; -} -.popover.top { - margin-top: -5px; -} -.popover.right { - margin-left: 5px; -} -.popover.bottom { - margin-top: 5px; -} -.popover.left { - margin-left: -5px; -} -.popover.top .arrow { - bottom: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-top: 5px solid #000000; -} -.popover.right .arrow { - top: 50%; - left: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-right: 5px solid #000000; -} -.popover.bottom .arrow { - top: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-bottom: 5px solid #000000; -} -.popover.left .arrow { - top: 50%; - right: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-left: 5px solid #000000; -} -.popover .arrow { - position: absolute; - width: 0; - height: 0; -} -.popover-inner { - padding: 3px; - width: 280px; - overflow: hidden; - background: #000000; - background: rgba(0, 0, 0, 0.8); - -webkit-border-radius: 6px; - -moz-border-radius: 6px; - border-radius: 6px; - -webkit-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - -moz-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); -} -.popover-title { - padding: 9px 15px; - line-height: 1; - background-color: #f5f5f5; - border-bottom: 1px solid #eee; - -webkit-border-radius: 3px 3px 0 0; - -moz-border-radius: 3px 3px 0 0; - border-radius: 3px 3px 0 0; -} -.popover-content { - padding: 14px; - background-color: #ffffff; - -webkit-border-radius: 0 0 3px 3px; - -moz-border-radius: 0 0 3px 3px; - border-radius: 0 0 3px 3px; - -webkit-background-clip: padding-box; - -moz-background-clip: padding-box; - background-clip: padding-box; -} -.popover-content p, .popover-content ul, .popover-content ol { - margin-bottom: 0; -} -.thumbnails { - margin-left: -20px; - list-style: none; - *zoom: 1; -} -.thumbnails:before, .thumbnails:after { - display: table; - content: ""; -} -.thumbnails:after { - clear: both; -} -.thumbnails > li { - float: left; - margin: 0 0 18px 20px; -} -.thumbnail { - display: block; - padding: 4px; - line-height: 1; - border: 1px solid #ddd; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: 0 1px 1px rgba(0, 0, 0, 0.075); - -moz-box-shadow: 0 1px 1px rgba(0, 0, 0, 0.075); - box-shadow: 0 1px 1px rgba(0, 0, 0, 0.075); -} -a.thumbnail:hover { - border-color: #0088cc; - -webkit-box-shadow: 0 1px 4px rgba(0, 105, 214, 0.25); - -moz-box-shadow: 0 1px 4px rgba(0, 105, 214, 0.25); - box-shadow: 0 1px 4px rgba(0, 105, 214, 0.25); -} -.thumbnail > img { - display: block; - max-width: 100%; - margin-left: auto; - margin-right: auto; -} -.thumbnail .caption { - padding: 9px; -} -.label { - padding: 1px 3px 2px; - font-size: 9.75px; - font-weight: bold; - color: #ffffff; - text-transform: uppercase; - background-color: #999999; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; -} -.label-important { - background-color: #b94a48; -} -.label-warning { - background-color: #f89406; -} -.label-success { - background-color: #468847; -} -.label-info { - background-color: #3a87ad; -} -@-webkit-keyframes progress-bar-stripes { - from { - background-position: 0 0; - } - to { - background-position: 40px 0; - } -} -@-moz-keyframes progress-bar-stripes { - from { - background-position: 0 0; - } - to { - background-position: 40px 0; - } -} -@keyframes progress-bar-stripes { - from { - background-position: 0 0; - } - to { - background-position: 40px 0; - } -} -.progress { - overflow: hidden; - height: 18px; - margin-bottom: 18px; - background-color: #f7f7f7; - background-image: -moz-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: -ms-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#f5f5f5), to(#f9f9f9)); - background-image: -webkit-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: -o-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: linear-gradient(top, #f5f5f5, #f9f9f9); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#f5f5f5', endColorstr='#f9f9f9', GradientType=0); - -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1); - -moz-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1); - box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.progress .bar { - width: 0%; - height: 18px; - color: #ffffff; - font-size: 12px; - text-align: center; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); - background-color: #0e90d2; - background-image: -moz-linear-gradient(top, #149bdf, #0480be); - background-image: -ms-linear-gradient(top, #149bdf, #0480be); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#149bdf), to(#0480be)); - background-image: -webkit-linear-gradient(top, #149bdf, #0480be); - background-image: -o-linear-gradient(top, #149bdf, #0480be); - background-image: linear-gradient(top, #149bdf, #0480be); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#149bdf', endColorstr='#0480be', GradientType=0); - -webkit-box-shadow: inset 0 -1px 0 rgba(0, 0, 0, 0.15); - -moz-box-shadow: inset 0 -1px 0 rgba(0, 0, 0, 0.15); - box-shadow: inset 0 -1px 0 rgba(0, 0, 0, 0.15); - -webkit-box-sizing: border-box; - -moz-box-sizing: border-box; - box-sizing: border-box; - -webkit-transition: width 0.6s ease; - -moz-transition: width 0.6s ease; - -ms-transition: width 0.6s ease; - -o-transition: width 0.6s ease; - transition: width 0.6s ease; -} -.progress-striped .bar { - background-color: #62c462; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - -webkit-background-size: 40px 40px; - -moz-background-size: 40px 40px; - -o-background-size: 40px 40px; - background-size: 40px 40px; -} -.progress.active .bar { - -webkit-animation: progress-bar-stripes 2s linear infinite; - -moz-animation: progress-bar-stripes 2s linear infinite; - animation: progress-bar-stripes 2s linear infinite; -} -.progress-danger .bar { - background-color: #dd514c; - background-image: -moz-linear-gradient(top, #ee5f5b, #c43c35); - background-image: -ms-linear-gradient(top, #ee5f5b, #c43c35); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#c43c35)); - background-image: -webkit-linear-gradient(top, #ee5f5b, #c43c35); - background-image: -o-linear-gradient(top, #ee5f5b, #c43c35); - background-image: linear-gradient(top, #ee5f5b, #c43c35); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#c43c35', GradientType=0); -} -.progress-danger.progress-striped .bar { - background-color: #ee5f5b; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); -} -.progress-success .bar { - background-color: #5eb95e; - background-image: -moz-linear-gradient(top, #62c462, #57a957); - background-image: -ms-linear-gradient(top, #62c462, #57a957); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#57a957)); - background-image: -webkit-linear-gradient(top, #62c462, #57a957); - background-image: -o-linear-gradient(top, #62c462, #57a957); - background-image: linear-gradient(top, #62c462, #57a957); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#57a957', GradientType=0); -} -.progress-success.progress-striped .bar { - background-color: #62c462; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); -} -.progress-info .bar { - background-color: #4bb1cf; - background-image: -moz-linear-gradient(top, #5bc0de, #339bb9); - background-image: -ms-linear-gradient(top, #5bc0de, #339bb9); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#339bb9)); - background-image: -webkit-linear-gradient(top, #5bc0de, #339bb9); - background-image: -o-linear-gradient(top, #5bc0de, #339bb9); - background-image: linear-gradient(top, #5bc0de, #339bb9); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#339bb9', GradientType=0); -} -.progress-info.progress-striped .bar { - background-color: #5bc0de; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); -} -.accordion { - margin-bottom: 18px; -} -.accordion-group { - margin-bottom: 2px; - border: 1px solid #e5e5e5; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.accordion-heading { - border-bottom: 0; -} -.accordion-heading .accordion-toggle { - display: block; - padding: 8px 15px; -} -.accordion-inner { - padding: 9px 15px; - border-top: 1px solid #e5e5e5; -} -.carousel { - position: relative; - margin-bottom: 18px; - line-height: 1; -} -.carousel-inner { - overflow: hidden; - width: 100%; - position: relative; -} -.carousel .item { - display: none; - position: relative; - -webkit-transition: 0.6s ease-in-out left; - -moz-transition: 0.6s ease-in-out left; - -ms-transition: 0.6s ease-in-out left; - -o-transition: 0.6s ease-in-out left; - transition: 0.6s ease-in-out left; -} -.carousel .item > img { - display: block; - line-height: 1; -} -.carousel .active, .carousel .next, .carousel .prev { - display: block; -} -.carousel .active { - left: 0; -} -.carousel .next, .carousel .prev { - position: absolute; - top: 0; - width: 100%; -} -.carousel .next { - left: 100%; -} -.carousel .prev { - left: -100%; -} -.carousel .next.left, .carousel .prev.right { - left: 0; -} -.carousel .active.left { - left: -100%; -} -.carousel .active.right { - left: 100%; -} -.carousel-control { - position: absolute; - top: 40%; - left: 15px; - width: 40px; - height: 40px; - margin-top: -20px; - font-size: 60px; - font-weight: 100; - line-height: 30px; - color: #ffffff; - text-align: center; - background: #222222; - border: 3px solid #ffffff; - -webkit-border-radius: 23px; - -moz-border-radius: 23px; - border-radius: 23px; - opacity: 0.5; - filter: alpha(opacity=50); -} -.carousel-control.right { - left: auto; - right: 15px; -} -.carousel-control:hover { - color: #ffffff; - text-decoration: none; - opacity: 0.9; - filter: alpha(opacity=90); -} -.carousel-caption { - position: absolute; - left: 0; - right: 0; - bottom: 0; - padding: 10px 15px 5px; - background: #333333; - background: rgba(0, 0, 0, 0.75); -} -.carousel-caption h4, .carousel-caption p { - color: #ffffff; -} -.hero-unit { - padding: 60px; - margin-bottom: 30px; - background-color: #f5f5f5; - -webkit-border-radius: 6px; - -moz-border-radius: 6px; - border-radius: 6px; -} -.hero-unit h1 { - margin-bottom: 0; - font-size: 60px; - line-height: 1; - letter-spacing: -1px; -} -.hero-unit p { - font-size: 18px; - font-weight: 200; - line-height: 27px; -} -.pull-right { - float: right; -} -.pull-left { - float: left; -} -.hide { - display: none; -} -.show { - display: block; -} -.invisible { - visibility: hidden; -} diff --git a/docs/Saml/css/bootstrap.min.css b/docs/Saml/css/bootstrap.min.css deleted file mode 100644 index d5221249..00000000 --- a/docs/Saml/css/bootstrap.min.css +++ /dev/null @@ -1,611 +0,0 @@ -article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block;} -audio,canvas,video{display:inline-block;*display:inline;*zoom:1;} -audio:not([controls]){display:none;} -html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;} -a:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} -a:hover,a:active{outline:0;} -sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline;} -sup{top:-0.5em;} -sub{bottom:-0.25em;} -img{max-width:100%;height:auto;border:0;-ms-interpolation-mode:bicubic;} -button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle;} -button,input{*overflow:visible;line-height:normal;} -button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0;} -button,input[type="button"],input[type="reset"],input[type="submit"]{cursor:pointer;-webkit-appearance:button;} -input[type="search"]{-webkit-appearance:textfield;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;} -input[type="search"]::-webkit-search-decoration,input[type="search"]::-webkit-search-cancel-button{-webkit-appearance:none;} -textarea{overflow:auto;vertical-align:top;} -body{margin:0;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;line-height:18px;color:#333333;background-color:#ffffff;} -a{color:#0088cc;text-decoration:none;} -a:hover{color:#005580;text-decoration:underline;} -.row{margin-left:-20px;*zoom:1;}.row:before,.row:after{display:table;content:"";} -.row:after{clear:both;} -[class*="span"]{float:left;margin-left:20px;} -.span1{width:60px;} -.span2{width:140px;} -.span3{width:220px;} -.span4{width:300px;} -.span5{width:380px;} -.span6{width:460px;} -.span7{width:540px;} -.span8{width:620px;} -.span9{width:700px;} -.span10{width:780px;} -.span11{width:860px;} -.span12,.container{width:940px;} -.offset1{margin-left:100px;} -.offset2{margin-left:180px;} -.offset3{margin-left:260px;} -.offset4{margin-left:340px;} -.offset5{margin-left:420px;} -.offset6{margin-left:500px;} -.offset7{margin-left:580px;} -.offset8{margin-left:660px;} -.offset9{margin-left:740px;} -.offset10{margin-left:820px;} -.offset11{margin-left:900px;} -.row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";} -.row-fluid:after{clear:both;} -.row-fluid>[class*="span"]{float:left;margin-left:2.127659574%;} -.row-fluid>[class*="span"]:first-child{margin-left:0;} -.row-fluid .span1{width:6.382978723%;} -.row-fluid .span2{width:14.89361702%;} -.row-fluid .span3{width:23.404255317%;} -.row-fluid .span4{width:31.914893614%;} -.row-fluid .span5{width:40.425531911%;} -.row-fluid .span6{width:48.93617020799999%;} -.row-fluid .span7{width:57.446808505%;} -.row-fluid .span8{width:65.95744680199999%;} -.row-fluid .span9{width:74.468085099%;} -.row-fluid .span10{width:82.97872339599999%;} -.row-fluid .span11{width:91.489361693%;} -.row-fluid .span12{width:99.99999998999999%;} -.container{width:940px;margin-left:auto;margin-right:auto;*zoom:1;}.container:before,.container:after{display:table;content:"";} -.container:after{clear:both;} -.container-fluid{padding-left:20px;padding-right:20px;*zoom:1;}.container-fluid:before,.container-fluid:after{display:table;content:"";} -.container-fluid:after{clear:both;} -p{margin:0 0 9px;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;line-height:18px;}p small{font-size:11px;color:#999999;} -.lead{margin-bottom:18px;font-size:20px;font-weight:200;line-height:27px;} -h1,h2,h3,h4,h5,h6{margin:0;font-weight:bold;color:#333333;text-rendering:optimizelegibility;}h1 small,h2 small,h3 small,h4 small,h5 small,h6 small{font-weight:normal;color:#999999;} -h1{font-size:30px;line-height:36px;}h1 small{font-size:18px;} -h2{font-size:24px;line-height:36px;}h2 small{font-size:18px;} -h3{line-height:27px;font-size:18px;}h3 small{font-size:14px;} -h4,h5,h6{line-height:18px;} -h4{font-size:14px;}h4 small{font-size:12px;} -h5{font-size:12px;} -h6{font-size:11px;color:#999999;text-transform:uppercase;} -.page-header{padding-bottom:17px;margin:18px 0;border-bottom:1px solid #eeeeee;} -.page-header h1{line-height:1;} -ul,ol{padding:0;margin:0 0 9px 25px;} -ul ul,ul ol,ol ol,ol ul{margin-bottom:0;} -ul{list-style:disc;} -ol{list-style:decimal;} -li{line-height:18px;} -ul.unstyled{margin-left:0;list-style:none;} -dl{margin-bottom:18px;} -dt,dd{line-height:18px;} -dt{font-weight:bold;} -dd{margin-left:9px;} -hr{margin:18px 0;border:0;border-top:1px solid #e5e5e5;border-bottom:1px solid #ffffff;} -strong{font-weight:bold;} -em{font-style:italic;} -.muted{color:#999999;} -abbr{font-size:90%;text-transform:uppercase;border-bottom:1px dotted #ddd;cursor:help;} -blockquote{padding:0 0 0 15px;margin:0 0 18px;border-left:5px solid #eeeeee;}blockquote p{margin-bottom:0;font-size:16px;font-weight:300;line-height:22.5px;} -blockquote small{display:block;line-height:18px;color:#999999;}blockquote small:before{content:'\2014 \00A0';} -blockquote.pull-right{float:right;padding-left:0;padding-right:15px;border-left:0;border-right:5px solid #eeeeee;}blockquote.pull-right p,blockquote.pull-right small{text-align:right;} -q:before,q:after,blockquote:before,blockquote:after{content:"";} -address{display:block;margin-bottom:18px;line-height:18px;font-style:normal;} -small{font-size:100%;} -cite{font-style:normal;} -code,pre{padding:0 3px 2px;font-family:Menlo,Monaco,"Courier New",monospace;font-size:12px;color:#333333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} -code{padding:3px 4px;color:#d14;background-color:#f7f7f9;border:1px solid #e1e1e8;} -pre{display:block;padding:8.5px;margin:0 0 9px;font-size:12px;line-height:18px;background-color:#f5f5f5;border:1px solid #ccc;border:1px solid rgba(0, 0, 0, 0.15);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;white-space:pre;white-space:pre-wrap;word-break:break-all;}pre.prettyprint{margin-bottom:18px;} -pre code{padding:0;background-color:transparent;} -form{margin:0 0 18px;} -fieldset{padding:0;margin:0;border:0;} -legend{display:block;width:100%;padding:0;margin-bottom:27px;font-size:19.5px;line-height:36px;color:#333333;border:0;border-bottom:1px solid #eee;} -label,input,button,select,textarea{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;font-weight:normal;line-height:18px;} -label{display:block;margin-bottom:5px;color:#333333;} -input,textarea,select,.uneditable-input{display:inline-block;width:210px;height:18px;padding:4px;margin-bottom:9px;font-size:13px;line-height:18px;color:#555555;border:1px solid #ccc;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} -.uneditable-textarea{width:auto;height:auto;} -label input,label textarea,label select{display:block;} -input[type="image"],input[type="checkbox"],input[type="radio"]{width:auto;height:auto;padding:0;margin:3px 0;*margin-top:0;line-height:normal;border:0;cursor:pointer;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -input[type="file"]{padding:initial;line-height:initial;border:initial;background-color:#ffffff;background-color:initial;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} -input[type="button"],input[type="reset"],input[type="submit"]{width:auto;height:auto;} -select,input[type="file"]{height:28px;*margin-top:4px;line-height:28px;} -select{width:220px;background-color:#ffffff;} -select[multiple],select[size]{height:auto;} -input[type="image"]{-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} -textarea{height:auto;} -input[type="hidden"]{display:none;} -.radio,.checkbox{padding-left:18px;} -.radio input[type="radio"],.checkbox input[type="checkbox"]{float:left;margin-left:-18px;} -.controls>.radio:first-child,.controls>.checkbox:first-child{padding-top:5px;} -.radio.inline,.checkbox.inline{display:inline-block;margin-bottom:0;vertical-align:middle;} -.radio.inline+.radio.inline,.checkbox.inline+.checkbox.inline{margin-left:10px;} -.controls>.radio.inline:first-child,.controls>.checkbox.inline:first-child{padding-top:0;} -input,textarea{-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-webkit-transition:border linear 0.2s,box-shadow linear 0.2s;-moz-transition:border linear 0.2s,box-shadow linear 0.2s;-ms-transition:border linear 0.2s,box-shadow linear 0.2s;-o-transition:border linear 0.2s,box-shadow linear 0.2s;transition:border linear 0.2s,box-shadow linear 0.2s;} -input:focus,textarea:focus{border-color:rgba(82, 168, 236, 0.8);-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 8px rgba(82, 168, 236, 0.6);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 8px rgba(82, 168, 236, 0.6);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 8px rgba(82, 168, 236, 0.6);outline:0;outline:thin dotted \9;} -input[type="file"]:focus,input[type="checkbox"]:focus,select:focus{-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} -.input-mini{width:60px;} -.input-small{width:90px;} -.input-medium{width:150px;} -.input-large{width:210px;} -.input-xlarge{width:270px;} -.input-xxlarge{width:530px;} -input[class*="span"],select[class*="span"],textarea[class*="span"],.uneditable-input{float:none;margin-left:0;} -input.span1,textarea.span1,.uneditable-input.span1{width:50px;} -input.span2,textarea.span2,.uneditable-input.span2{width:130px;} -input.span3,textarea.span3,.uneditable-input.span3{width:210px;} -input.span4,textarea.span4,.uneditable-input.span4{width:290px;} -input.span5,textarea.span5,.uneditable-input.span5{width:370px;} -input.span6,textarea.span6,.uneditable-input.span6{width:450px;} -input.span7,textarea.span7,.uneditable-input.span7{width:530px;} -input.span8,textarea.span8,.uneditable-input.span8{width:610px;} -input.span9,textarea.span9,.uneditable-input.span9{width:690px;} -input.span10,textarea.span10,.uneditable-input.span10{width:770px;} -input.span11,textarea.span11,.uneditable-input.span11{width:850px;} -input.span12,textarea.span12,.uneditable-input.span12{width:930px;} -input[disabled],select[disabled],textarea[disabled],input[readonly],select[readonly],textarea[readonly]{background-color:#f5f5f5;border-color:#ddd;cursor:not-allowed;} -.control-group.warning>label,.control-group.warning .help-block,.control-group.warning .help-inline{color:#c09853;} -.control-group.warning input,.control-group.warning select,.control-group.warning textarea{color:#c09853;border-color:#c09853;}.control-group.warning input:focus,.control-group.warning select:focus,.control-group.warning textarea:focus{border-color:#a47e3c;-webkit-box-shadow:0 0 6px #dbc59e;-moz-box-shadow:0 0 6px #dbc59e;box-shadow:0 0 6px #dbc59e;} -.control-group.warning .input-prepend .add-on,.control-group.warning .input-append .add-on{color:#c09853;background-color:#fcf8e3;border-color:#c09853;} -.control-group.error>label,.control-group.error .help-block,.control-group.error .help-inline{color:#b94a48;} -.control-group.error input,.control-group.error select,.control-group.error textarea{color:#b94a48;border-color:#b94a48;}.control-group.error input:focus,.control-group.error select:focus,.control-group.error textarea:focus{border-color:#953b39;-webkit-box-shadow:0 0 6px #d59392;-moz-box-shadow:0 0 6px #d59392;box-shadow:0 0 6px #d59392;} -.control-group.error .input-prepend .add-on,.control-group.error .input-append .add-on{color:#b94a48;background-color:#f2dede;border-color:#b94a48;} -.control-group.success>label,.control-group.success .help-block,.control-group.success .help-inline{color:#468847;} -.control-group.success input,.control-group.success select,.control-group.success textarea{color:#468847;border-color:#468847;}.control-group.success input:focus,.control-group.success select:focus,.control-group.success textarea:focus{border-color:#356635;-webkit-box-shadow:0 0 6px #7aba7b;-moz-box-shadow:0 0 6px #7aba7b;box-shadow:0 0 6px #7aba7b;} -.control-group.success .input-prepend .add-on,.control-group.success .input-append .add-on{color:#468847;background-color:#dff0d8;border-color:#468847;} -input:focus:required:invalid,textarea:focus:required:invalid,select:focus:required:invalid{color:#b94a48;border-color:#ee5f5b;}input:focus:required:invalid:focus,textarea:focus:required:invalid:focus,select:focus:required:invalid:focus{border-color:#e9322d;-webkit-box-shadow:0 0 6px #f8b9b7;-moz-box-shadow:0 0 6px #f8b9b7;box-shadow:0 0 6px #f8b9b7;} -.form-actions{padding:17px 20px 18px;margin-top:18px;margin-bottom:18px;background-color:#f5f5f5;border-top:1px solid #ddd;} -.uneditable-input{display:block;background-color:#ffffff;border-color:#eee;-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);cursor:not-allowed;} -:-moz-placeholder{color:#999999;} -::-webkit-input-placeholder{color:#999999;} -.help-block{margin-top:5px;margin-bottom:0;color:#999999;} -.help-inline{display:inline-block;*display:inline;*zoom:1;margin-bottom:9px;vertical-align:middle;padding-left:5px;} -.input-prepend,.input-append{margin-bottom:5px;*zoom:1;}.input-prepend:before,.input-append:before,.input-prepend:after,.input-append:after{display:table;content:"";} -.input-prepend:after,.input-append:after{clear:both;} -.input-prepend input,.input-append input,.input-prepend .uneditable-input,.input-append .uneditable-input{-webkit-border-radius:0 3px 3px 0;-moz-border-radius:0 3px 3px 0;border-radius:0 3px 3px 0;}.input-prepend input:focus,.input-append input:focus,.input-prepend .uneditable-input:focus,.input-append .uneditable-input:focus{position:relative;z-index:2;} -.input-prepend .uneditable-input,.input-append .uneditable-input{border-left-color:#ccc;} -.input-prepend .add-on,.input-append .add-on{float:left;display:block;width:auto;min-width:16px;height:18px;margin-right:-1px;padding:4px 5px;font-weight:normal;line-height:18px;color:#999999;text-align:center;text-shadow:0 1px 0 #ffffff;background-color:#f5f5f5;border:1px solid #ccc;-webkit-border-radius:3px 0 0 3px;-moz-border-radius:3px 0 0 3px;border-radius:3px 0 0 3px;} -.input-prepend .active,.input-append .active{background-color:#a9dba9;border-color:#46a546;} -.input-prepend .add-on{*margin-top:1px;} -.input-append input,.input-append .uneditable-input{float:left;-webkit-border-radius:3px 0 0 3px;-moz-border-radius:3px 0 0 3px;border-radius:3px 0 0 3px;} -.input-append .uneditable-input{border-right-color:#ccc;} -.input-append .add-on{margin-right:0;margin-left:-1px;-webkit-border-radius:0 3px 3px 0;-moz-border-radius:0 3px 3px 0;border-radius:0 3px 3px 0;} -.input-append input:first-child{*margin-left:-160px;}.input-append input:first-child+.add-on{*margin-left:-21px;} -.search-query{padding-left:14px;padding-right:14px;margin-bottom:0;-webkit-border-radius:14px;-moz-border-radius:14px;border-radius:14px;} -.form-search input,.form-inline input,.form-horizontal input,.form-search textarea,.form-inline textarea,.form-horizontal textarea,.form-search select,.form-inline select,.form-horizontal select,.form-search .help-inline,.form-inline .help-inline,.form-horizontal .help-inline,.form-search .uneditable-input,.form-inline .uneditable-input,.form-horizontal .uneditable-input{display:inline-block;margin-bottom:0;} -.form-search label,.form-inline label,.form-search .input-append,.form-inline .input-append,.form-search .input-prepend,.form-inline .input-prepend{display:inline-block;} -.form-search .input-append .add-on,.form-inline .input-prepend .add-on,.form-search .input-append .add-on,.form-inline .input-prepend .add-on{vertical-align:middle;} -.control-group{margin-bottom:9px;} -.form-horizontal legend+.control-group{margin-top:18px;-webkit-margin-top-collapse:separate;} -.form-horizontal .control-group{margin-bottom:18px;*zoom:1;}.form-horizontal .control-group:before,.form-horizontal .control-group:after{display:table;content:"";} -.form-horizontal .control-group:after{clear:both;} -.form-horizontal .control-group>label{float:left;width:140px;padding-top:5px;text-align:right;} -.form-horizontal .controls{margin-left:160px;} -.form-horizontal .form-actions{padding-left:160px;} -table{max-width:100%;border-collapse:collapse;border-spacing:0;} -.table{width:100%;margin-bottom:18px;}.table th,.table td{padding:8px;line-height:18px;text-align:left;border-top:1px solid #ddd;} -.table th{font-weight:bold;vertical-align:bottom;} -.table td{vertical-align:top;} -.table thead:first-child tr th,.table thead:first-child tr td{border-top:0;} -.table tbody+tbody{border-top:2px solid #ddd;} -.table-condensed th,.table-condensed td{padding:4px 5px;} -.table-bordered{border:1px solid #ddd;border-collapse:separate;*border-collapse:collapsed;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;}.table-bordered th+th,.table-bordered td+td,.table-bordered th+td,.table-bordered td+th{border-left:1px solid #ddd;} -.table-bordered thead:first-child tr:first-child th,.table-bordered tbody:first-child tr:first-child th,.table-bordered tbody:first-child tr:first-child td{border-top:0;} -.table-bordered thead:first-child tr:first-child th:first-child,.table-bordered tbody:first-child tr:first-child td:first-child{-webkit-border-radius:4px 0 0 0;-moz-border-radius:4px 0 0 0;border-radius:4px 0 0 0;} -.table-bordered thead:first-child tr:first-child th:last-child,.table-bordered tbody:first-child tr:first-child td:last-child{-webkit-border-radius:0 4px 0 0;-moz-border-radius:0 4px 0 0;border-radius:0 4px 0 0;} -.table-bordered thead:last-child tr:last-child th:first-child,.table-bordered tbody:last-child tr:last-child td:first-child{-webkit-border-radius:0 0 0 4px;-moz-border-radius:0 0 0 4px;border-radius:0 0 0 4px;} -.table-bordered thead:last-child tr:last-child th:last-child,.table-bordered tbody:last-child tr:last-child td:last-child{-webkit-border-radius:0 0 4px 0;-moz-border-radius:0 0 4px 0;border-radius:0 0 4px 0;} -.table-striped tbody tr:nth-child(odd) td,.table-striped tbody tr:nth-child(odd) th{background-color:#f9f9f9;} -table .span1{float:none;width:44px;margin-left:0;} -table .span2{float:none;width:124px;margin-left:0;} -table .span3{float:none;width:204px;margin-left:0;} -table .span4{float:none;width:284px;margin-left:0;} -table .span5{float:none;width:364px;margin-left:0;} -table .span6{float:none;width:444px;margin-left:0;} -table .span7{float:none;width:524px;margin-left:0;} -table .span8{float:none;width:604px;margin-left:0;} -table .span9{float:none;width:684px;margin-left:0;} -table .span10{float:none;width:764px;margin-left:0;} -table .span11{float:none;width:844px;margin-left:0;} -table .span12{float:none;width:924px;margin-left:0;} -[class^="icon-"]{display:inline-block;width:14px;height:14px;vertical-align:text-top;background-image:url(http://github.com/img/glyphicons-halflings.png);background-position:14px 14px;background-repeat:no-repeat;*margin-right:.3em;}[class^="icon-"]:last-child{*margin-left:0;} -.icon-white{background-image:url(http://github.com/img/glyphicons-halflings-white.png);} -.icon-glass{background-position:0 0;} -.icon-music{background-position:-24px 0;} -.icon-search{background-position:-48px 0;} -.icon-envelope{background-position:-72px 0;} -.icon-heart{background-position:-96px 0;} -.icon-star{background-position:-120px 0;} -.icon-star-empty{background-position:-144px 0;} -.icon-user{background-position:-168px 0;} -.icon-film{background-position:-192px 0;} -.icon-th-large{background-position:-216px 0;} -.icon-th{background-position:-240px 0;} -.icon-th-list{background-position:-264px 0;} -.icon-ok{background-position:-288px 0;} -.icon-remove{background-position:-312px 0;} -.icon-zoom-in{background-position:-336px 0;} -.icon-zoom-out{background-position:-360px 0;} -.icon-off{background-position:-384px 0;} -.icon-signal{background-position:-408px 0;} -.icon-cog{background-position:-432px 0;} -.icon-trash{background-position:-456px 0;} -.icon-home{background-position:0 -24px;} -.icon-file{background-position:-24px -24px;} -.icon-time{background-position:-48px -24px;} -.icon-road{background-position:-72px -24px;} -.icon-download-alt{background-position:-96px -24px;} -.icon-download{background-position:-120px -24px;} -.icon-upload{background-position:-144px -24px;} -.icon-inbox{background-position:-168px -24px;} -.icon-play-circle{background-position:-192px -24px;} -.icon-repeat{background-position:-216px -24px;} -.icon-refresh{background-position:-240px -24px;} -.icon-list-alt{background-position:-264px -24px;} -.icon-lock{background-position:-287px -24px;} -.icon-flag{background-position:-312px -24px;} -.icon-headphones{background-position:-336px -24px;} -.icon-volume-off{background-position:-360px -24px;} -.icon-volume-down{background-position:-384px -24px;} -.icon-volume-up{background-position:-408px -24px;} -.icon-qrcode{background-position:-432px -24px;} -.icon-barcode{background-position:-456px -24px;} -.icon-tag{background-position:0 -48px;} -.icon-tags{background-position:-25px -48px;} -.icon-book{background-position:-48px -48px;} -.icon-bookmark{background-position:-72px -48px;} -.icon-print{background-position:-96px -48px;} -.icon-camera{background-position:-120px -48px;} -.icon-font{background-position:-144px -48px;} -.icon-bold{background-position:-167px -48px;} -.icon-italic{background-position:-192px -48px;} -.icon-text-height{background-position:-216px -48px;} -.icon-text-width{background-position:-240px -48px;} -.icon-align-left{background-position:-264px -48px;} -.icon-align-center{background-position:-288px -48px;} -.icon-align-right{background-position:-312px -48px;} -.icon-align-justify{background-position:-336px -48px;} -.icon-list{background-position:-360px -48px;} -.icon-indent-left{background-position:-384px -48px;} -.icon-indent-right{background-position:-408px -48px;} -.icon-facetime-video{background-position:-432px -48px;} -.icon-picture{background-position:-456px -48px;} -.icon-pencil{background-position:0 -72px;} -.icon-map-marker{background-position:-24px -72px;} -.icon-adjust{background-position:-48px -72px;} -.icon-tint{background-position:-72px -72px;} -.icon-edit{background-position:-96px -72px;} -.icon-share{background-position:-120px -72px;} -.icon-check{background-position:-144px -72px;} -.icon-move{background-position:-168px -72px;} -.icon-step-backward{background-position:-192px -72px;} -.icon-fast-backward{background-position:-216px -72px;} -.icon-backward{background-position:-240px -72px;} -.icon-play{background-position:-264px -72px;} -.icon-pause{background-position:-288px -72px;} -.icon-stop{background-position:-312px -72px;} -.icon-forward{background-position:-336px -72px;} -.icon-fast-forward{background-position:-360px -72px;} -.icon-step-forward{background-position:-384px -72px;} -.icon-eject{background-position:-408px -72px;} -.icon-chevron-left{background-position:-432px -72px;} -.icon-chevron-right{background-position:-456px -72px;} -.icon-plus-sign{background-position:0 -96px;} -.icon-minus-sign{background-position:-24px -96px;} -.icon-remove-sign{background-position:-48px -96px;} -.icon-ok-sign{background-position:-72px -96px;} -.icon-question-sign{background-position:-96px -96px;} -.icon-info-sign{background-position:-120px -96px;} -.icon-screenshot{background-position:-144px -96px;} -.icon-remove-circle{background-position:-168px -96px;} -.icon-ok-circle{background-position:-192px -96px;} -.icon-ban-circle{background-position:-216px -96px;} -.icon-arrow-left{background-position:-240px -96px;} -.icon-arrow-right{background-position:-264px -96px;} -.icon-arrow-up{background-position:-289px -96px;} -.icon-arrow-down{background-position:-312px -96px;} -.icon-share-alt{background-position:-336px -96px;} -.icon-resize-full{background-position:-360px -96px;} -.icon-resize-small{background-position:-384px -96px;} -.icon-plus{background-position:-408px -96px;} -.icon-minus{background-position:-433px -96px;} -.icon-asterisk{background-position:-456px -96px;} -.icon-exclamation-sign{background-position:0 -120px;} -.icon-gift{background-position:-24px -120px;} -.icon-leaf{background-position:-48px -120px;} -.icon-fire{background-position:-72px -120px;} -.icon-eye-open{background-position:-96px -120px;} -.icon-eye-close{background-position:-120px -120px;} -.icon-warning-sign{background-position:-144px -120px;} -.icon-plane{background-position:-168px -120px;} -.icon-calendar{background-position:-192px -120px;} -.icon-random{background-position:-216px -120px;} -.icon-comment{background-position:-240px -120px;} -.icon-magnet{background-position:-264px -120px;} -.icon-chevron-up{background-position:-288px -120px;} -.icon-chevron-down{background-position:-313px -119px;} -.icon-retweet{background-position:-336px -120px;} -.icon-shopping-cart{background-position:-360px -120px;} -.icon-folder-close{background-position:-384px -120px;} -.icon-folder-open{background-position:-408px -120px;} -.icon-resize-vertical{background-position:-432px -119px;} -.icon-resize-horizontal{background-position:-456px -118px;} -.dropdown{position:relative;} -.dropdown-toggle{*margin-bottom:-3px;} -.dropdown-toggle:active,.open .dropdown-toggle{outline:0;} -.caret{display:inline-block;width:0;height:0;text-indent:-99999px;*text-indent:0;vertical-align:top;border-left:4px solid transparent;border-right:4px solid transparent;border-top:4px solid #000000;opacity:0.3;filter:alpha(opacity=30);content:"\2193";} -.dropdown .caret{margin-top:8px;margin-left:2px;} -.dropdown:hover .caret,.open.dropdown .caret{opacity:1;filter:alpha(opacity=100);} -.dropdown-menu{position:absolute;top:100%;left:0;z-index:1000;float:left;display:none;min-width:160px;max-width:220px;_width:160px;padding:4px 0;margin:0;list-style:none;background-color:#ffffff;border-color:#ccc;border-color:rgba(0, 0, 0, 0.2);border-style:solid;border-width:1px;-webkit-border-radius:0 0 5px 5px;-moz-border-radius:0 0 5px 5px;border-radius:0 0 5px 5px;-webkit-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);-moz-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);-webkit-background-clip:padding-box;-moz-background-clip:padding;background-clip:padding-box;*border-right-width:2px;*border-bottom-width:2px;}.dropdown-menu.bottom-up{top:auto;bottom:100%;margin-bottom:2px;} -.dropdown-menu .divider{height:1px;margin:5px 1px;overflow:hidden;background-color:#e5e5e5;border-bottom:1px solid #ffffff;*width:100%;*margin:-5px 0 5px;} -.dropdown-menu a{display:block;padding:3px 15px;clear:both;font-weight:normal;line-height:18px;color:#555555;white-space:nowrap;} -.dropdown-menu li>a:hover,.dropdown-menu .active>a,.dropdown-menu .active>a:hover{color:#ffffff;text-decoration:none;background-color:#0088cc;} -.dropdown.open{*z-index:1000;}.dropdown.open .dropdown-toggle{color:#ffffff;background:#ccc;background:rgba(0, 0, 0, 0.3);} -.dropdown.open .dropdown-menu{display:block;} -.typeahead{margin-top:2px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.well{min-height:20px;padding:19px;margin-bottom:20px;background-color:#f5f5f5;border:1px solid #eee;border:1px solid rgba(0, 0, 0, 0.05);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);}.well blockquote{border-color:#ddd;border-color:rgba(0, 0, 0, 0.15);} -.fade{-webkit-transition:opacity 0.15s linear;-moz-transition:opacity 0.15s linear;-ms-transition:opacity 0.15s linear;-o-transition:opacity 0.15s linear;transition:opacity 0.15s linear;opacity:0;}.fade.in{opacity:1;} -.collapse{-webkit-transition:height 0.35s ease;-moz-transition:height 0.35s ease;-ms-transition:height 0.35s ease;-o-transition:height 0.35s ease;transition:height 0.35s ease;position:relative;overflow:hidden;height:0;}.collapse.in{height:auto;} -.close{float:right;font-size:20px;font-weight:bold;line-height:18px;color:#000000;text-shadow:0 1px 0 #ffffff;opacity:0.2;filter:alpha(opacity=20);}.close:hover{color:#000000;text-decoration:none;opacity:0.4;filter:alpha(opacity=40);cursor:pointer;} -.btn{display:inline-block;padding:4px 10px 4px;font-size:13px;line-height:18px;color:#333333;text-align:center;text-shadow:0 1px 1px rgba(255, 255, 255, 0.75);background-color:#fafafa;background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), color-stop(25%, #ffffff), to(#e6e6e6));background-image:-webkit-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-image:-moz-linear-gradient(top, #ffffff, #ffffff 25%, #e6e6e6);background-image:-ms-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-image:-o-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-image:linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-repeat:no-repeat;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#e6e6e6', GradientType=0);border:1px solid #ccc;border-bottom-color:#bbb;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);cursor:pointer;*margin-left:.3em;}.btn:first-child{*margin-left:0;} -.btn:hover{color:#333333;text-decoration:none;background-color:#e6e6e6;background-position:0 -15px;-webkit-transition:background-position 0.1s linear;-moz-transition:background-position 0.1s linear;-ms-transition:background-position 0.1s linear;-o-transition:background-position 0.1s linear;transition:background-position 0.1s linear;} -.btn:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} -.btn.active,.btn:active{background-image:none;-webkit-box-shadow:inset 0 2px 4px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 2px 4px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 0 2px 4px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);background-color:#e6e6e6;background-color:#d9d9d9 \9;color:rgba(0, 0, 0, 0.5);outline:0;} -.btn.disabled,.btn[disabled]{cursor:default;background-image:none;background-color:#e6e6e6;opacity:0.65;filter:alpha(opacity=65);-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} -.btn-large{padding:9px 14px;font-size:15px;line-height:normal;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} -.btn-large .icon{margin-top:1px;} -.btn-small{padding:5px 9px;font-size:11px;line-height:16px;} -.btn-small .icon{margin-top:-1px;} -.btn-primary,.btn-primary:hover,.btn-warning,.btn-warning:hover,.btn-danger,.btn-danger:hover,.btn-success,.btn-success:hover,.btn-info,.btn-info:hover{text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);color:#ffffff;} -.btn-primary.active,.btn-warning.active,.btn-danger.active,.btn-success.active,.btn-info.active{color:rgba(255, 255, 255, 0.75);} -.btn-primary{background-color:#006dcc;background-image:-moz-linear-gradient(top, #0088cc, #0044cc);background-image:-ms-linear-gradient(top, #0088cc, #0044cc);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#0088cc), to(#0044cc));background-image:-webkit-linear-gradient(top, #0088cc, #0044cc);background-image:-o-linear-gradient(top, #0088cc, #0044cc);background-image:linear-gradient(top, #0088cc, #0044cc);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#0088cc', endColorstr='#0044cc', GradientType=0);border-color:#0044cc #0044cc #002a80;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-primary:hover,.btn-primary:active,.btn-primary.active,.btn-primary.disabled,.btn-primary[disabled]{background-color:#0044cc;} -.btn-primary:active,.btn-primary.active{background-color:#003399 \9;} -.btn-warning{background-color:#faa732;background-image:-moz-linear-gradient(top, #fbb450, #f89406);background-image:-ms-linear-gradient(top, #fbb450, #f89406);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#fbb450), to(#f89406));background-image:-webkit-linear-gradient(top, #fbb450, #f89406);background-image:-o-linear-gradient(top, #fbb450, #f89406);background-image:linear-gradient(top, #fbb450, #f89406);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fbb450', endColorstr='#f89406', GradientType=0);border-color:#f89406 #f89406 #ad6704;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-warning:hover,.btn-warning:active,.btn-warning.active,.btn-warning.disabled,.btn-warning[disabled]{background-color:#f89406;} -.btn-warning:active,.btn-warning.active{background-color:#c67605 \9;} -.btn-danger{background-color:#da4f49;background-image:-moz-linear-gradient(top, #ee5f5b, #bd362f);background-image:-ms-linear-gradient(top, #ee5f5b, #bd362f);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#bd362f));background-image:-webkit-linear-gradient(top, #ee5f5b, #bd362f);background-image:-o-linear-gradient(top, #ee5f5b, #bd362f);background-image:linear-gradient(top, #ee5f5b, #bd362f);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#bd362f', GradientType=0);border-color:#bd362f #bd362f #802420;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-danger:hover,.btn-danger:active,.btn-danger.active,.btn-danger.disabled,.btn-danger[disabled]{background-color:#bd362f;} -.btn-danger:active,.btn-danger.active{background-color:#942a25 \9;} -.btn-success{background-color:#5bb75b;background-image:-moz-linear-gradient(top, #62c462, #51a351);background-image:-ms-linear-gradient(top, #62c462, #51a351);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#51a351));background-image:-webkit-linear-gradient(top, #62c462, #51a351);background-image:-o-linear-gradient(top, #62c462, #51a351);background-image:linear-gradient(top, #62c462, #51a351);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#51a351', GradientType=0);border-color:#51a351 #51a351 #387038;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-success:hover,.btn-success:active,.btn-success.active,.btn-success.disabled,.btn-success[disabled]{background-color:#51a351;} -.btn-success:active,.btn-success.active{background-color:#408140 \9;} -.btn-info{background-color:#49afcd;background-image:-moz-linear-gradient(top, #5bc0de, #2f96b4);background-image:-ms-linear-gradient(top, #5bc0de, #2f96b4);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#2f96b4));background-image:-webkit-linear-gradient(top, #5bc0de, #2f96b4);background-image:-o-linear-gradient(top, #5bc0de, #2f96b4);background-image:linear-gradient(top, #5bc0de, #2f96b4);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#2f96b4', GradientType=0);border-color:#2f96b4 #2f96b4 #1f6377;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-info:hover,.btn-info:active,.btn-info.active,.btn-info.disabled,.btn-info[disabled]{background-color:#2f96b4;} -.btn-info:active,.btn-info.active{background-color:#24748c \9;} -button.btn,input[type="submit"].btn{*padding-top:2px;*padding-bottom:2px;}button.btn::-moz-focus-inner,input[type="submit"].btn::-moz-focus-inner{padding:0;border:0;} -button.btn.large,input[type="submit"].btn.large{*padding-top:7px;*padding-bottom:7px;} -button.btn.small,input[type="submit"].btn.small{*padding-top:3px;*padding-bottom:3px;} -.btn-group{position:relative;*zoom:1;*margin-left:.3em;}.btn-group:before,.btn-group:after{display:table;content:"";} -.btn-group:after{clear:both;} -.btn-group:first-child{*margin-left:0;} -.btn-group+.btn-group{margin-left:5px;} -.btn-toolbar{margin-top:9px;margin-bottom:9px;}.btn-toolbar .btn-group{display:inline-block;*display:inline;*zoom:1;} -.btn-group .btn{position:relative;float:left;margin-left:-1px;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -.btn-group .btn:first-child{margin-left:0;-webkit-border-top-left-radius:4px;-moz-border-radius-topleft:4px;border-top-left-radius:4px;-webkit-border-bottom-left-radius:4px;-moz-border-radius-bottomleft:4px;border-bottom-left-radius:4px;} -.btn-group .btn:last-child,.btn-group .dropdown-toggle{-webkit-border-top-right-radius:4px;-moz-border-radius-topright:4px;border-top-right-radius:4px;-webkit-border-bottom-right-radius:4px;-moz-border-radius-bottomright:4px;border-bottom-right-radius:4px;} -.btn-group .btn.large:first-child{margin-left:0;-webkit-border-top-left-radius:6px;-moz-border-radius-topleft:6px;border-top-left-radius:6px;-webkit-border-bottom-left-radius:6px;-moz-border-radius-bottomleft:6px;border-bottom-left-radius:6px;} -.btn-group .btn.large:last-child,.btn-group .large.dropdown-toggle{-webkit-border-top-right-radius:6px;-moz-border-radius-topright:6px;border-top-right-radius:6px;-webkit-border-bottom-right-radius:6px;-moz-border-radius-bottomright:6px;border-bottom-right-radius:6px;} -.btn-group .btn:hover,.btn-group .btn:focus,.btn-group .btn:active,.btn-group .btn.active{z-index:2;} -.btn-group .dropdown-toggle:active,.btn-group.open .dropdown-toggle{outline:0;} -.btn-group .dropdown-toggle{padding-left:8px;padding-right:8px;-webkit-box-shadow:inset 1px 0 0 rgba(255, 255, 255, 0.125),inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 1px 0 0 rgba(255, 255, 255, 0.125),inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 1px 0 0 rgba(255, 255, 255, 0.125),inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);*padding-top:5px;*padding-bottom:5px;} -.btn-group.open{*z-index:1000;}.btn-group.open .dropdown-menu{display:block;margin-top:1px;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} -.btn-group.open .dropdown-toggle{background-image:none;-webkit-box-shadow:inset 0 1px 6px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 1px 6px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 0 1px 6px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);} -.btn .caret{margin-top:7px;margin-left:0;} -.btn:hover .caret,.open.btn-group .caret{opacity:1;filter:alpha(opacity=100);} -.btn-primary .caret,.btn-danger .caret,.btn-info .caret,.btn-success .caret{border-top-color:#ffffff;opacity:0.75;filter:alpha(opacity=75);} -.btn-small .caret{margin-top:4px;} -.alert{padding:8px 35px 8px 14px;margin-bottom:18px;text-shadow:0 1px 0 rgba(255, 255, 255, 0.5);background-color:#fcf8e3;border:1px solid #fbeed5;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.alert,.alert-heading{color:#c09853;} -.alert .close{position:relative;top:-2px;right:-21px;line-height:18px;} -.alert-success{background-color:#dff0d8;border-color:#d6e9c6;} -.alert-success,.alert-success .alert-heading{color:#468847;} -.alert-danger,.alert-error{background-color:#f2dede;border-color:#eed3d7;} -.alert-danger,.alert-error,.alert-danger .alert-heading,.alert-error .alert-heading{color:#b94a48;} -.alert-info{background-color:#d9edf7;border-color:#bce8f1;} -.alert-info,.alert-info .alert-heading{color:#3a87ad;} -.alert-block{padding-top:14px;padding-bottom:14px;} -.alert-block>p,.alert-block>ul{margin-bottom:0;} -.alert-block p+p{margin-top:5px;} -.nav{margin-left:0;margin-bottom:18px;list-style:none;} -.nav>li>a{display:block;} -.nav>li>a:hover{text-decoration:none;background-color:#eeeeee;} -.nav-list{padding-left:14px;padding-right:14px;margin-bottom:0;} -.nav-list>li>a,.nav-list .nav-header{display:block;padding:3px 15px;margin-left:-15px;margin-right:-15px;text-shadow:0 1px 0 rgba(255, 255, 255, 0.5);} -.nav-list .nav-header{font-size:11px;font-weight:bold;line-height:18px;color:#999999;text-transform:uppercase;} -.nav-list .nav-header *{text-transform:none;} -.nav-list>li+.nav-header{margin-top:9px;} -.nav-list .active>a,.nav-list .active>a:hover{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.2);background-color:#0088cc;} -.nav-list [class^="icon-"]{margin-right:2px;} -.nav-tabs,.nav-pills{*zoom:1;}.nav-tabs:before,.nav-pills:before,.nav-tabs:after,.nav-pills:after{display:table;content:"";} -.nav-tabs:after,.nav-pills:after{clear:both;} -.nav-tabs>li,.nav-pills>li{float:left;} -.nav-tabs>li>a,.nav-pills>li>a{padding-right:12px;padding-left:12px;margin-right:2px;line-height:14px;} -.nav-tabs{border-bottom:1px solid #ddd;} -.nav-tabs>li{margin-bottom:-1px;} -.nav-tabs>li>a{padding-top:9px;padding-bottom:9px;border:1px solid transparent;-webkit-border-radius:4px 4px 0 0;-moz-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0;}.nav-tabs>li>a:hover{border-color:#eeeeee #eeeeee #dddddd;} -.nav-tabs>.active>a,.nav-tabs>.active>a:hover{color:#555555;background-color:#ffffff;border:1px solid #ddd;border-bottom-color:transparent;cursor:default;} -.nav-pills>li>a{padding-top:8px;padding-bottom:8px;margin-top:2px;margin-bottom:2px;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} -.nav-pills .active>a,.nav-pills .active>a:hover{color:#ffffff;background-color:#0088cc;} -.nav-stacked>li{float:none;} -.nav-stacked>li>a{margin-right:0;} -.nav-tabs.nav-stacked{border-bottom:0;} -.nav-tabs.nav-stacked>li>a{border:1px solid #ddd;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -.nav-tabs.nav-stacked>li:first-child>a{-webkit-border-radius:4px 4px 0 0;-moz-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0;} -.nav-tabs.nav-stacked>li:last-child>a{-webkit-border-radius:0 0 4px 4px;-moz-border-radius:0 0 4px 4px;border-radius:0 0 4px 4px;} -.nav-tabs.nav-stacked>li>a:hover{border-color:#ddd;z-index:2;} -.nav-pills.nav-stacked>li>a{margin-bottom:3px;} -.nav-pills.nav-stacked>li:last-child>a{margin-bottom:1px;} -.nav-tabs .dropdown-menu,.nav-pills .dropdown-menu{margin-top:1px;border-width:1px;} -.nav-pills .dropdown-menu{-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.nav-tabs .dropdown-toggle .caret,.nav-pills .dropdown-toggle .caret{border-top-color:#0088cc;margin-top:6px;} -.nav-tabs .dropdown-toggle:hover .caret,.nav-pills .dropdown-toggle:hover .caret{border-top-color:#005580;} -.nav-tabs .active .dropdown-toggle .caret,.nav-pills .active .dropdown-toggle .caret{border-top-color:#333333;} -.nav>.dropdown.active>a:hover{color:#000000;cursor:pointer;} -.nav-tabs .open .dropdown-toggle,.nav-pills .open .dropdown-toggle,.nav>.open.active>a:hover{color:#ffffff;background-color:#999999;border-color:#999999;} -.nav .open .caret,.nav .open.active .caret,.nav .open a:hover .caret{border-top-color:#ffffff;opacity:1;filter:alpha(opacity=100);} -.tabs-stacked .open>a:hover{border-color:#999999;} -.tabbable{*zoom:1;}.tabbable:before,.tabbable:after{display:table;content:"";} -.tabbable:after{clear:both;} -.tabs-below .nav-tabs,.tabs-right .nav-tabs,.tabs-left .nav-tabs{border-bottom:0;} -.tab-content>.tab-pane,.pill-content>.pill-pane{display:none;} -.tab-content>.active,.pill-content>.active{display:block;} -.tabs-below .nav-tabs{border-top:1px solid #ddd;} -.tabs-below .nav-tabs>li{margin-top:-1px;margin-bottom:0;} -.tabs-below .nav-tabs>li>a{-webkit-border-radius:0 0 4px 4px;-moz-border-radius:0 0 4px 4px;border-radius:0 0 4px 4px;}.tabs-below .nav-tabs>li>a:hover{border-bottom-color:transparent;border-top-color:#ddd;} -.tabs-below .nav-tabs .active>a,.tabs-below .nav-tabs .active>a:hover{border-color:transparent #ddd #ddd #ddd;} -.tabs-left .nav-tabs>li,.tabs-right .nav-tabs>li{float:none;} -.tabs-left .nav-tabs>li>a,.tabs-right .nav-tabs>li>a{min-width:74px;margin-right:0;margin-bottom:3px;} -.tabs-left .nav-tabs{float:left;margin-right:19px;border-right:1px solid #ddd;} -.tabs-left .nav-tabs>li>a{margin-right:-1px;-webkit-border-radius:4px 0 0 4px;-moz-border-radius:4px 0 0 4px;border-radius:4px 0 0 4px;} -.tabs-left .nav-tabs>li>a:hover{border-color:#eeeeee #dddddd #eeeeee #eeeeee;} -.tabs-left .nav-tabs .active>a,.tabs-left .nav-tabs .active>a:hover{border-color:#ddd transparent #ddd #ddd;*border-right-color:#ffffff;} -.tabs-right .nav-tabs{float:right;margin-left:19px;border-left:1px solid #ddd;} -.tabs-right .nav-tabs>li>a{margin-left:-1px;-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;} -.tabs-right .nav-tabs>li>a:hover{border-color:#eeeeee #eeeeee #eeeeee #dddddd;} -.tabs-right .nav-tabs .active>a,.tabs-right .nav-tabs .active>a:hover{border-color:#ddd #ddd #ddd transparent;*border-left-color:#ffffff;} -.navbar{overflow:visible;margin-bottom:18px;} -.navbar-inner{padding-left:20px;padding-right:20px;background-color:#2c2c2c;background-image:-moz-linear-gradient(top, #333333, #222222);background-image:-ms-linear-gradient(top, #333333, #222222);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222));background-image:-webkit-linear-gradient(top, #333333, #222222);background-image:-o-linear-gradient(top, #333333, #222222);background-image:linear-gradient(top, #333333, #222222);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:0 1px 3px rgba(0, 0, 0, 0.25),inset 0 -1px 0 rgba(0, 0, 0, 0.1);-moz-box-shadow:0 1px 3px rgba(0, 0, 0, 0.25),inset 0 -1px 0 rgba(0, 0, 0, 0.1);box-shadow:0 1px 3px rgba(0, 0, 0, 0.25),inset 0 -1px 0 rgba(0, 0, 0, 0.1);} -.btn-navbar{display:none;float:right;padding:7px 10px;margin-left:5px;margin-right:5px;background-color:#2c2c2c;background-image:-moz-linear-gradient(top, #333333, #222222);background-image:-ms-linear-gradient(top, #333333, #222222);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222));background-image:-webkit-linear-gradient(top, #333333, #222222);background-image:-o-linear-gradient(top, #333333, #222222);background-image:linear-gradient(top, #333333, #222222);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0);border-color:#222222 #222222 #000000;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);-webkit-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.075);-moz-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.075);box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.075);}.btn-navbar:hover,.btn-navbar:active,.btn-navbar.active,.btn-navbar.disabled,.btn-navbar[disabled]{background-color:#222222;} -.btn-navbar:active,.btn-navbar.active{background-color:#080808 \9;} -.btn-navbar .icon-bar{display:block;width:18px;height:2px;background-color:#f5f5f5;-webkit-border-radius:1px;-moz-border-radius:1px;border-radius:1px;-webkit-box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);-moz-box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);} -.btn-navbar .icon-bar+.icon-bar{margin-top:3px;} -.nav-collapse.collapse{height:auto;} -.navbar .brand:hover{text-decoration:none;} -.navbar .brand{float:left;display:block;padding:8px 20px 12px;margin-left:-20px;font-size:20px;font-weight:200;line-height:1;color:#ffffff;} -.navbar .navbar-text{margin-bottom:0;line-height:40px;color:#999999;}.navbar .navbar-text a:hover{color:#ffffff;background-color:transparent;} -.navbar .btn,.navbar .btn-group{margin-top:5px;} -.navbar .btn-group .btn{margin-top:0;} -.navbar-form{margin-bottom:0;*zoom:1;}.navbar-form:before,.navbar-form:after{display:table;content:"";} -.navbar-form:after{clear:both;} -.navbar-form input,.navbar-form select{display:inline-block;margin-top:5px;margin-bottom:0;} -.navbar-form .radio,.navbar-form .checkbox{margin-top:5px;} -.navbar-form input[type="image"],.navbar-form input[type="checkbox"],.navbar-form input[type="radio"]{margin-top:3px;} -.navbar-search{position:relative;float:left;margin-top:6px;margin-bottom:0;}.navbar-search .search-query{padding:4px 9px;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;font-weight:normal;line-height:1;color:#ffffff;color:rgba(255, 255, 255, 0.75);background:#666;background:rgba(255, 255, 255, 0.3);border:1px solid #111;-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1),0 1px 0px rgba(255, 255, 255, 0.15);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1),0 1px 0px rgba(255, 255, 255, 0.15);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1),0 1px 0px rgba(255, 255, 255, 0.15);-webkit-transition:none;-moz-transition:none;-ms-transition:none;-o-transition:none;transition:none;}.navbar-search .search-query :-moz-placeholder{color:#eeeeee;} -.navbar-search .search-query::-webkit-input-placeholder{color:#eeeeee;} -.navbar-search .search-query:hover{color:#ffffff;background-color:#999999;background-color:rgba(255, 255, 255, 0.5);} -.navbar-search .search-query:focus,.navbar-search .search-query.focused{padding:5px 10px;color:#333333;text-shadow:0 1px 0 #ffffff;background-color:#ffffff;border:0;-webkit-box-shadow:0 0 3px rgba(0, 0, 0, 0.15);-moz-box-shadow:0 0 3px rgba(0, 0, 0, 0.15);box-shadow:0 0 3px rgba(0, 0, 0, 0.15);outline:0;} -.navbar-fixed-top{position:fixed;top:0;right:0;left:0;z-index:1030;} -.navbar-fixed-top .navbar-inner{padding-left:0;padding-right:0;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -.navbar .nav{position:relative;left:0;display:block;float:left;margin:0 10px 0 0;} -.navbar .nav.pull-right{float:right;} -.navbar .nav>li{display:block;float:left;} -.navbar .nav>li>a{float:none;padding:10px 10px 11px;line-height:19px;color:#999999;text-decoration:none;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);} -.navbar .nav>li>a:hover{background-color:transparent;color:#ffffff;text-decoration:none;} -.navbar .nav .active>a,.navbar .nav .active>a:hover{color:#ffffff;text-decoration:none;background-color:#222222;background-color:rgba(0, 0, 0, 0.5);} -.navbar .divider-vertical{height:40px;width:1px;margin:0 9px;overflow:hidden;background-color:#222222;border-right:1px solid #333333;} -.navbar .nav.pull-right{margin-left:10px;margin-right:0;} -.navbar .dropdown-menu{margin-top:1px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;}.navbar .dropdown-menu:before{content:'';display:inline-block;border-left:7px solid transparent;border-right:7px solid transparent;border-bottom:7px solid #ccc;border-bottom-color:rgba(0, 0, 0, 0.2);position:absolute;top:-7px;left:9px;} -.navbar .dropdown-menu:after{content:'';display:inline-block;border-left:6px solid transparent;border-right:6px solid transparent;border-bottom:6px solid #ffffff;position:absolute;top:-6px;left:10px;} -.navbar .nav .dropdown-toggle .caret,.navbar .nav .open.dropdown .caret{border-top-color:#ffffff;} -.navbar .nav .active .caret{opacity:1;filter:alpha(opacity=100);} -.navbar .nav .open>.dropdown-toggle,.navbar .nav .active>.dropdown-toggle,.navbar .nav .open.active>.dropdown-toggle{background-color:transparent;} -.navbar .nav .active>.dropdown-toggle:hover{color:#ffffff;} -.navbar .nav.pull-right .dropdown-menu{left:auto;right:0;}.navbar .nav.pull-right .dropdown-menu:before{left:auto;right:12px;} -.navbar .nav.pull-right .dropdown-menu:after{left:auto;right:13px;} -.breadcrumb{padding:7px 14px;margin:0 0 18px;background-color:#fbfbfb;background-image:-moz-linear-gradient(top, #ffffff, #f5f5f5);background-image:-ms-linear-gradient(top, #ffffff, #f5f5f5);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), to(#f5f5f5));background-image:-webkit-linear-gradient(top, #ffffff, #f5f5f5);background-image:-o-linear-gradient(top, #ffffff, #f5f5f5);background-image:linear-gradient(top, #ffffff, #f5f5f5);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f5f5f5', GradientType=0);border:1px solid #ddd;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;-webkit-box-shadow:inset 0 1px 0 #ffffff;-moz-box-shadow:inset 0 1px 0 #ffffff;box-shadow:inset 0 1px 0 #ffffff;}.breadcrumb li{display:inline;text-shadow:0 1px 0 #ffffff;} -.breadcrumb .divider{padding:0 5px;color:#999999;} -.breadcrumb .active a{color:#333333;} -.pagination{height:36px;margin:18px 0;} -.pagination ul{display:inline-block;*display:inline;*zoom:1;margin-left:0;margin-bottom:0;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;-webkit-box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);} -.pagination li{display:inline;} -.pagination a{float:left;padding:0 14px;line-height:34px;text-decoration:none;border:1px solid #ddd;border-left-width:0;} -.pagination a:hover,.pagination .active a{background-color:#f5f5f5;} -.pagination .active a{color:#999999;cursor:default;} -.pagination .disabled a,.pagination .disabled a:hover{color:#999999;background-color:transparent;cursor:default;} -.pagination li:first-child a{border-left-width:1px;-webkit-border-radius:3px 0 0 3px;-moz-border-radius:3px 0 0 3px;border-radius:3px 0 0 3px;} -.pagination li:last-child a{-webkit-border-radius:0 3px 3px 0;-moz-border-radius:0 3px 3px 0;border-radius:0 3px 3px 0;} -.pagination-centered{text-align:center;} -.pagination-right{text-align:right;} -.pager{margin-left:0;margin-bottom:18px;list-style:none;text-align:center;*zoom:1;}.pager:before,.pager:after{display:table;content:"";} -.pager:after{clear:both;} -.pager li{display:inline;} -.pager a{display:inline-block;padding:5px 14px;background-color:#fff;border:1px solid #ddd;-webkit-border-radius:15px;-moz-border-radius:15px;border-radius:15px;} -.pager a:hover{text-decoration:none;background-color:#f5f5f5;} -.pager .next a{float:right;} -.pager .previous a{float:left;} -.modal-open .dropdown-menu{z-index:2050;} -.modal-open .dropdown.open{*z-index:2050;} -.modal-open .popover{z-index:2060;} -.modal-open .tooltip{z-index:2070;} -.modal-backdrop{position:fixed;top:0;right:0;bottom:0;left:0;z-index:1040;background-color:#000000;}.modal-backdrop.fade{opacity:0;} -.modal-backdrop,.modal-backdrop.fade.in{opacity:0.8;filter:alpha(opacity=80);} -.modal{position:fixed;top:50%;left:50%;z-index:1050;max-height:500px;overflow:auto;width:560px;margin:-250px 0 0 -280px;background-color:#ffffff;border:1px solid #999;border:1px solid rgba(0, 0, 0, 0.3);*border:1px solid #999;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;-webkit-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-moz-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-webkit-background-clip:padding-box;-moz-background-clip:padding-box;background-clip:padding-box;}.modal.fade{-webkit-transition:opacity .3s linear, top .3s ease-out;-moz-transition:opacity .3s linear, top .3s ease-out;-ms-transition:opacity .3s linear, top .3s ease-out;-o-transition:opacity .3s linear, top .3s ease-out;transition:opacity .3s linear, top .3s ease-out;top:-25%;} -.modal.fade.in{top:50%;} -.modal-header{padding:9px 15px;border-bottom:1px solid #eee;}.modal-header .close{margin-top:2px;} -.modal-body{padding:15px;} -.modal-footer{padding:14px 15px 15px;margin-bottom:0;background-color:#f5f5f5;border-top:1px solid #ddd;-webkit-border-radius:0 0 6px 6px;-moz-border-radius:0 0 6px 6px;border-radius:0 0 6px 6px;-webkit-box-shadow:inset 0 1px 0 #ffffff;-moz-box-shadow:inset 0 1px 0 #ffffff;box-shadow:inset 0 1px 0 #ffffff;*zoom:1;}.modal-footer:before,.modal-footer:after{display:table;content:"";} -.modal-footer:after{clear:both;} -.modal-footer .btn{float:right;margin-left:5px;margin-bottom:0;} -.tooltip{position:absolute;z-index:1020;display:block;visibility:visible;padding:5px;font-size:11px;opacity:0;filter:alpha(opacity=0);}.tooltip.in{opacity:0.8;filter:alpha(opacity=80);} -.tooltip.top{margin-top:-2px;} -.tooltip.right{margin-left:2px;} -.tooltip.bottom{margin-top:2px;} -.tooltip.left{margin-left:-2px;} -.tooltip.top .tooltip-arrow{bottom:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-top:5px solid #000000;} -.tooltip.left .tooltip-arrow{top:50%;right:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-left:5px solid #000000;} -.tooltip.bottom .tooltip-arrow{top:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-bottom:5px solid #000000;} -.tooltip.right .tooltip-arrow{top:50%;left:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-right:5px solid #000000;} -.tooltip-inner{max-width:200px;padding:3px 8px;color:#ffffff;text-align:center;text-decoration:none;background-color:#000000;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.tooltip-arrow{position:absolute;width:0;height:0;} -.popover{position:absolute;top:0;left:0;z-index:1010;display:none;padding:5px;}.popover.top{margin-top:-5px;} -.popover.right{margin-left:5px;} -.popover.bottom{margin-top:5px;} -.popover.left{margin-left:-5px;} -.popover.top .arrow{bottom:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-top:5px solid #000000;} -.popover.right .arrow{top:50%;left:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-right:5px solid #000000;} -.popover.bottom .arrow{top:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-bottom:5px solid #000000;} -.popover.left .arrow{top:50%;right:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-left:5px solid #000000;} -.popover .arrow{position:absolute;width:0;height:0;} -.popover-inner{padding:3px;width:280px;overflow:hidden;background:#000000;background:rgba(0, 0, 0, 0.8);-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;-webkit-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-moz-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);} -.popover-title{padding:9px 15px;line-height:1;background-color:#f5f5f5;border-bottom:1px solid #eee;-webkit-border-radius:3px 3px 0 0;-moz-border-radius:3px 3px 0 0;border-radius:3px 3px 0 0;} -.popover-content{padding:14px;background-color:#ffffff;-webkit-border-radius:0 0 3px 3px;-moz-border-radius:0 0 3px 3px;border-radius:0 0 3px 3px;-webkit-background-clip:padding-box;-moz-background-clip:padding-box;background-clip:padding-box;}.popover-content p,.popover-content ul,.popover-content ol{margin-bottom:0;} -.thumbnails{margin-left:-20px;list-style:none;*zoom:1;}.thumbnails:before,.thumbnails:after{display:table;content:"";} -.thumbnails:after{clear:both;} -.thumbnails>li{float:left;margin:0 0 18px 20px;} -.thumbnail{display:block;padding:4px;line-height:1;border:1px solid #ddd;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:0 1px 1px rgba(0, 0, 0, 0.075);} -a.thumbnail:hover{border-color:#0088cc;-webkit-box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);-moz-box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);} -.thumbnail>img{display:block;max-width:100%;margin-left:auto;margin-right:auto;} -.thumbnail .caption{padding:9px;} -.label{padding:1px 3px 2px;font-size:9.75px;font-weight:bold;color:#ffffff;text-transform:uppercase;background-color:#999999;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} -.label-important{background-color:#b94a48;} -.label-warning{background-color:#f89406;} -.label-success{background-color:#468847;} -.label-info{background-color:#3a87ad;} -@-webkit-keyframes progress-bar-stripes{from{background-position:0 0;} to{background-position:40px 0;}}@-moz-keyframes progress-bar-stripes{from{background-position:0 0;} to{background-position:40px 0;}}@keyframes progress-bar-stripes{from{background-position:0 0;} to{background-position:40px 0;}}.progress{overflow:hidden;height:18px;margin-bottom:18px;background-color:#f7f7f7;background-image:-moz-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-ms-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#f5f5f5), to(#f9f9f9));background-image:-webkit-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-o-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:linear-gradient(top, #f5f5f5, #f9f9f9);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#f5f5f5', endColorstr='#f9f9f9', GradientType=0);-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.progress .bar{width:0%;height:18px;color:#ffffff;font-size:12px;text-align:center;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#0e90d2;background-image:-moz-linear-gradient(top, #149bdf, #0480be);background-image:-ms-linear-gradient(top, #149bdf, #0480be);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#149bdf), to(#0480be));background-image:-webkit-linear-gradient(top, #149bdf, #0480be);background-image:-o-linear-gradient(top, #149bdf, #0480be);background-image:linear-gradient(top, #149bdf, #0480be);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#149bdf', endColorstr='#0480be', GradientType=0);-webkit-box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);-moz-box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:width 0.6s ease;-moz-transition:width 0.6s ease;-ms-transition:width 0.6s ease;-o-transition:width 0.6s ease;transition:width 0.6s ease;} -.progress-striped .bar{background-color:#62c462;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);-webkit-background-size:40px 40px;-moz-background-size:40px 40px;-o-background-size:40px 40px;background-size:40px 40px;} -.progress.active .bar{-webkit-animation:progress-bar-stripes 2s linear infinite;-moz-animation:progress-bar-stripes 2s linear infinite;animation:progress-bar-stripes 2s linear infinite;} -.progress-danger .bar{background-color:#dd514c;background-image:-moz-linear-gradient(top, #ee5f5b, #c43c35);background-image:-ms-linear-gradient(top, #ee5f5b, #c43c35);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#c43c35));background-image:-webkit-linear-gradient(top, #ee5f5b, #c43c35);background-image:-o-linear-gradient(top, #ee5f5b, #c43c35);background-image:linear-gradient(top, #ee5f5b, #c43c35);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#c43c35', GradientType=0);} -.progress-danger.progress-striped .bar{background-color:#ee5f5b;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} -.progress-success .bar{background-color:#5eb95e;background-image:-moz-linear-gradient(top, #62c462, #57a957);background-image:-ms-linear-gradient(top, #62c462, #57a957);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#57a957));background-image:-webkit-linear-gradient(top, #62c462, #57a957);background-image:-o-linear-gradient(top, #62c462, #57a957);background-image:linear-gradient(top, #62c462, #57a957);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#57a957', GradientType=0);} -.progress-success.progress-striped .bar{background-color:#62c462;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} -.progress-info .bar{background-color:#4bb1cf;background-image:-moz-linear-gradient(top, #5bc0de, #339bb9);background-image:-ms-linear-gradient(top, #5bc0de, #339bb9);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#339bb9));background-image:-webkit-linear-gradient(top, #5bc0de, #339bb9);background-image:-o-linear-gradient(top, #5bc0de, #339bb9);background-image:linear-gradient(top, #5bc0de, #339bb9);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#339bb9', GradientType=0);} -.progress-info.progress-striped .bar{background-color:#5bc0de;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} -.accordion{margin-bottom:18px;} -.accordion-group{margin-bottom:2px;border:1px solid #e5e5e5;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.accordion-heading{border-bottom:0;} -.accordion-heading .accordion-toggle{display:block;padding:8px 15px;} -.accordion-inner{padding:9px 15px;border-top:1px solid #e5e5e5;} -.carousel{position:relative;margin-bottom:18px;line-height:1;} -.carousel-inner{overflow:hidden;width:100%;position:relative;} -.carousel .item{display:none;position:relative;-webkit-transition:0.6s ease-in-out left;-moz-transition:0.6s ease-in-out left;-ms-transition:0.6s ease-in-out left;-o-transition:0.6s ease-in-out left;transition:0.6s ease-in-out left;} -.carousel .item>img{display:block;line-height:1;} -.carousel .active,.carousel .next,.carousel .prev{display:block;} -.carousel .active{left:0;} -.carousel .next,.carousel .prev{position:absolute;top:0;width:100%;} -.carousel .next{left:100%;} -.carousel .prev{left:-100%;} -.carousel .next.left,.carousel .prev.right{left:0;} -.carousel .active.left{left:-100%;} -.carousel .active.right{left:100%;} -.carousel-control{position:absolute;top:40%;left:15px;width:40px;height:40px;margin-top:-20px;font-size:60px;font-weight:100;line-height:30px;color:#ffffff;text-align:center;background:#222222;border:3px solid #ffffff;-webkit-border-radius:23px;-moz-border-radius:23px;border-radius:23px;opacity:0.5;filter:alpha(opacity=50);}.carousel-control.right{left:auto;right:15px;} -.carousel-control:hover{color:#ffffff;text-decoration:none;opacity:0.9;filter:alpha(opacity=90);} -.carousel-caption{position:absolute;left:0;right:0;bottom:0;padding:10px 15px 5px;background:#333333;background:rgba(0, 0, 0, 0.75);} -.carousel-caption h4,.carousel-caption p{color:#ffffff;} -.hero-unit{padding:60px;margin-bottom:30px;background-color:#f5f5f5;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;}.hero-unit h1{margin-bottom:0;font-size:60px;line-height:1;letter-spacing:-1px;} -.hero-unit p{font-size:18px;font-weight:200;line-height:27px;} -.pull-right{float:right;} -.pull-left{float:left;} -.hide{display:none;} -.show{display:block;} -.invisible{visibility:hidden;} diff --git a/docs/Saml/css/jquery.iviewer.css b/docs/Saml/css/jquery.iviewer.css deleted file mode 100644 index d68c6422..00000000 --- a/docs/Saml/css/jquery.iviewer.css +++ /dev/null @@ -1,91 +0,0 @@ -.iviewer_common { - position:absolute; - bottom:10px; - border: 1px solid #000; - height: 28px; - z-index: 5000; -} - -.iviewer_cursor { - cursor: url(http://github.com/img/iviewer/hand.cur) 6 8, pointer; -} - -.iviewer_drag_cursor { - cursor: url(http://github.com/img/iviewer/grab.cur) 6 8, pointer; -} - -.iviewer_button { - width: 28px; - cursor: pointer; - background-position: center center; - background-repeat: no-repeat; -} - -.iviewer_zoom_in { - left: 20px; - background: url(http://github.com/img/iviewer/iviewer.zoom_in.png); -} - -.iviewer_zoom_out { - left: 55px; - background: url(http://github.com/img/iviewer/iviewer.zoom_out.png); -} - -.iviewer_zoom_zero { - left: 90px; - background: url(http://github.com/img/iviewer/iviewer.zoom_zero.png); -} - -.iviewer_zoom_fit { - left: 125px; - background: url(http://github.com/img/iviewer/iviewer.zoom_fit.png); -} - -.iviewer_zoom_status { - left: 160px; - font: 1em/28px Sans; - color: #000; - background-color: #fff; - text-align: center; - width: 60px; -} - -.iviewer_rotate_left { - left: 227px; - background: #fff url(http://github.com/img/iviewer/iviewer.rotate_left.png) center center no-repeat; -} - -.iviewer_rotate_right { - left: 262px; - background: #fff url(http://github.com/img/iviewer/iviewer.rotate_right.png) center center no-repeat; -} - -.viewer -{ - width: 100%; - height: 500px; - position: relative; - background: transparent url('http://github.com/img/loader.gif') no-repeat center center; -} - -.viewer img -{ - max-width: none; -} - -.wrapper -{ - overflow: hidden; -} - -.iviewer_common -{ - border: 0; - bottom: auto; - top: 10px; -} - -.iviewer_zoom_status -{ - border: 1px solid black; -} diff --git a/docs/Saml/css/prettify.css b/docs/Saml/css/prettify.css deleted file mode 100644 index d44b3a22..00000000 --- a/docs/Saml/css/prettify.css +++ /dev/null @@ -1 +0,0 @@ -.pln{color:#000}@media screen{.str{color:#080}.kwd{color:#008}.com{color:#800}.typ{color:#606}.lit{color:#066}.pun,.opn,.clo{color:#660}.tag{color:#008}.atn{color:#606}.atv{color:#080}.dec,.var{color:#606}.fun{color:red}}@media print,projection{.str{color:#060}.kwd{color:#006;font-weight:bold}.com{color:#600;font-style:italic}.typ{color:#404;font-weight:bold}.lit{color:#044}.pun,.opn,.clo{color:#440}.tag{color:#006;font-weight:bold}.atn{color:#404}.atv{color:#060}}pre.prettyprint{padding:2px;border:1px solid #888}ol.linenums{margin-top:0;margin-bottom:0}li.L0,li.L1,li.L2,li.L3,li.L5,li.L6,li.L7,li.L8{list-style-type:none}li.L1,li.L3,li.L5,li.L7,li.L9{background:#eee} \ No newline at end of file diff --git a/docs/Saml/css/template.css b/docs/Saml/css/template.css deleted file mode 100644 index 45d61967..00000000 --- a/docs/Saml/css/template.css +++ /dev/null @@ -1,527 +0,0 @@ -@import url(http://github.com/bootstrap.min.css); -@import url(http://github.com/bootstrap-responsive.css); -@import url(http://github.com/prettify.css); -@import url(http://github.com/jquery.iviewer.css); -@import url(http://fonts.googleapis.com/css?family=Forum); - -body -{ - padding-top: 60px; /* 60px to make the container go all the way to the bottom of the topbar */ - background: #f9f9f9; - color: #444; -} - -a -{ - color: #55A72F; -} - -td p:last-of-type { - margin: 0; -} - -li.l0, li.l1, li.l2, li.l3, li.l5, li.l6, li.l7, li.l8 -{ - list-style-type: decimal; -} - -a.brand, h2, .hero-unit h1 -{ - font-family: 'Forum', "Helvetica Neue", Helvetica, Arial, sans-serif; -} - -.element .span4 -{ - width: 275px; -} - -.namespace-contents hr, .package-contents hr -{ - border-top: 3px dotted silver; -} - -.namespace-indent, .package-indent -{ - padding-left: 10px; border-left: 1px dashed #f0f0f0; -} - -.element h3 i, .namespace-contents h3 i, .package-contents h3 i -{ - margin-top: 2px; - margin-right: 5px; -} - -.element h3, .namespace-contents h3, .package-contents h3 -{ - margin-top: 25px; - margin-bottom: 20px; - border-bottom: 1px solid silver; -} - -.element h3:first-of-type, .namespace-contents h3:first-of-type, -.package-contents h3:first-of-type -{ - margin-top: 30px; -} - -.element h2 -{ - font-family: inherit; - font-size: 1.2em; - color: black; -} - -.element .type -{ - font-weight: bold; -} - -#search-query -{ - height: auto; -} - -.hero-unit, div.element, .well -{ - border: 1px solid #e0e0e0; - background: white; -} - -.dropdown-menu a{ - overflow: hidden; - text-overflow: ellipsis; -} -h2 -{ - border-bottom: 1px dashed #55A72F; - margin-bottom: 10px; - padding-bottom: 0; - padding-left: 5px; - color: #e9e9e9; - font-weight: normal; - margin-top: 40px; -} - -h2:first-of-type -{ - margin-top: 0; -} - -.hero-unit -{ - background: #75a70d; /* Old browsers */ - background: -moz-radial-gradient(center, ellipse cover, #bfd255 0%, #8eb92a 72%, #72aa00 96%, #9ecb2d 100%); /* FF3.6+ */ - background: -webkit-gradient(radial, center center, 0px, center center, 100%, color-stop(0%,#bfd255), color-stop(72%,#8eb92a), color-stop(96%,#72aa00), color-stop(100%,#9ecb2d)); /* Chrome,Safari4+ */ - background: -webkit-radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* Chrome10+,Safari5.1+ */ - background: -o-radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* Opera 12+ */ - background: -ms-radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* IE10+ */ - background: radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* W3C */ - filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#bfd255', endColorstr='#9ecb2d',GradientType=1 ); /* IE6-9 fallback on horizontal gradient */ - - padding: 40px 0 15px 0; - box-shadow: inset 0 0 10px gray; -} - -.hero-unit h1 -{ - font-weight: normal; - text-align: center; - color: white; - text-shadow: black 0 0 15px; -} - -.hero-unit h2 -{ - border: none; - color: white; - background: rgba(48, 48, 48, 0.5); - padding: 0; - margin: 0; - margin-top: 15px; - text-align: center; -} - -.namespace-contents h2, .package-contents h2 -{ - padding-left: 44px; - background: transparent url('http://github.com/img/icons/icon-th-big.png') no-repeat 3px center; -} - -.package-contents h2 -{ - background-image: url('http://github.com/img/icons/icon-folder-open-big.png'); -} - -.namespace-contents .element h2, .package-contents .element h2 -{ - padding-left: 0; - background: none; -} - -div.element -{ - border-left: 10px solid #55A72F; - border-radius: 5px; - padding: 7px 7px 2px 7px; - margin-bottom: 15px; - margin-left: 0; -} - -div.element.protected -{ - border-left-color: orange; -} - -div.element.private -{ - border-left-color: red; -} - -div.element.class, div.element.interface -{ - border-left-color: #e0e0e0; -} - -div.element.class.abstract h1, div.element.interface.abstract h1 -{ - font-style: italic; -} - -div.element h1 -{ - font-size: 1.2em; - line-height: 1.5em; - margin-bottom: 10px; - padding-left: 22px; - background: transparent no-repeat left 2px; - word-wrap: break-word; -} - -div.element h1 a -{ - color: transparent; - margin-left: 10px; -} - -div.element h1:hover a -{ - color: silver; -} - -div.element h1 a:hover -{ - color: navy; -} - -div.element a.more:hover -{ - background: #f0f0f0; - color: #444; - text-decoration: none; -} - -div.element a.more -{ - font-weight: bold; - text-align: center; - color: gray; - border-top: 1px dashed silver; - display: block; - margin-top: 5px; - padding: 5px 0; - border-bottom-left-radius: 5px; - border-bottom-right-radius: 5px; -} - -div.element p -{ - font-size: 0.9em; -} - -div.element .table -{ - font-size: 0.9em; -} - -div.element .table th -{ - text-transform: capitalize; -} - -div.detail-description -{ - padding-left: 30px; -} - -div.detail-description table th { - vertical-align: top; -} - -body.invert -{ - background: white; -} - -body.invert div.element -{ - background: #f9f9f9; -} - -ul.side-nav -{ - clear: both; -} - -ul.side-nav li -{ - word-wrap: break-word; - padding-left: 10px; - text-indent: -10px; -} - -ul.side-nav li a -{ - background: transparent no-repeat 5px 3px; - padding-bottom: 10px; - font-style: italic; -} - -ul.side-nav li pre -{ - font-size: 0.8em; - margin: 5px 15px 0 15px; - padding: 2px 5px; - background-color: #f8f8f8; - color: gray; - font-style: normal; - word-wrap: break-word; - text-indent: 0; -} - -ul.side-nav li.view-simple span.description -{ - display: none; -} - -ul.side-nav li.view-simple pre -{ - font-size: inherit; - margin: inherit; - padding: inherit; - background-color: inherit; - border: none; - color: inherit; - font-family: inherit; - font-style: inherit; - padding-bottom: 0; - padding-left: 5px; -} - -ul.side-nav li.view-simple a -{ - padding-bottom: 0; -} - -i.icon-custom -{ - width: 16px; - height: 16px; - background-position: 0; -} - -.table.markers -{ - background: white; -} - -/* JS only functionality; disable by default */ -.btn-group.visibility, .btn-group.view, .btn-group.type-filter -{ - display: none; -} - -.visibility button -{ - height: 24px; -} - -div.element.constant h1, -i.icon-constant { background-image: url('http://github.com/img/icons/constant.png'); } - -div.element.function h1, -i.icon-function { background-image: url('http://github.com/img/icons/function.png'); } - -div.element.method h1, -i.icon-method { background-image: url('http://github.com/img/icons/method.png'); } - -div.element.class h1, -i.icon-class { background-image: url('http://github.com/img/icons/class.png'); } - -div.element.interface h1, -i.icon-interface { background-image: url('http://github.com/img/icons/interface.png'); } - -div.element.property h1, -i.icon-property { background-image: url('http://github.com/img/icons/property.png'); } - -span.empty-namespace -{ - color: silver; -} - -footer -{ - text-align: right; - font-size: 0.8em; - opacity: 0.5; -} - -#mapHolder -{ - border: 4px solid #555; - padding: 0 !important; - overflow: hidden -} - -div.element div.subelement -{ - margin-left: 10px; - padding-bottom: 5px; - clear: both; -} - -pre code -{ - border: none; -} - -div.element div.subelement > code -{ - font-size: 0.8em; - float: left; - margin-right: 10px; - padding: 0 5px; - line-height: 16px; -} - -div.element div.subelement > p -{ - margin-left: 20px; - margin-right: 50px; -} - -div.element div.subelement h4 -{ - color: #666; - margin-bottom: 5px; -} - -div.element div.subelement.response -{ - padding-bottom: 15px; - margin-right: 50px; -} - -div.labels -{ - text-align: right; -} - -.nav-list .nav-header -{ - font-size: 13px; -} - -.nav-list .nav-header .side-nav-header -{ - font-weight: bold; - line-height: 18px; - color: #999999; - text-transform: uppercase; -} - -.detail-description code { - white-space: pre; - display: inline-block; - padding: 10px; -} - -.go_to_top -{ - float: right; - margin-right: 20px; - background: #2C2C2C; - color: #999; - padding: 3px 10px; - border-bottom-right-radius: 5px; - border-bottom-left-radius: 5px; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); - line-height: 19px; -} - -.visibility .btn { - text-transform: uppercase; - font-size: 0.7em; - font-weight: bold; -} - -.iviewer_common -{ - z-index: 100; -} - -@media (min-width: 980px) -{ - a[name] - { - margin-top: -50px; - position: absolute; - } -} - -@media (min-width: 1200px) -{ - .method .span4 - { - width: 345px; - } -} - -/* redefined because twitter bootstrap assumes that bootstrap-responsive.css */ -@media (max-width: 980px) -{ - body - { - padding-top: 0; - } - - .go_to_top - { - display: none; - } - - .btn-group.visibility - { - font-size: 0.80em; - margin-bottom: 7px; - display: inline-block; - float: right; - } -} - -@media (max-width: 768px) -{ - .hero-unit h1 { - font-size: 30px; - } - .hero-unit h2 { - font-size: 19px; - } - -} -@media (min-width: 768px) and (max-width: 980px) -{ - .method .span4 - { - width: 203px; - } -} diff --git a/docs/Saml/graph_class.html b/docs/Saml/graph_class.html deleted file mode 100644 index 1a3ab977..00000000 --- a/docs/Saml/graph_class.html +++ /dev/null @@ -1,105 +0,0 @@ - - - - - - SAML PHP Toolkit - - - - - - - - - - - - - - - - - - - - -
-
-
- - - - SAML PHP Toolkit - -
- -
-
-
-
- Back to top   -
-
- -
- - - -
-
-
-
-
-
-
- - - -
- - - - diff --git a/docs/Saml/img/apple-touch-icon-114x114.png b/docs/Saml/img/apple-touch-icon-114x114.png deleted file mode 100644 index 1506f6a668fbb2837c06b561895da248c310ac53..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 28338 zcmV)=K!m@EP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6dxqE{8JzR03ZNKL_t(|+MK+3xMgWo=J{LSu=hFVjxo=XL*xLNB$<#*nLcTTVEXjYE|_Ww$NZDp;tfr6>vr6bZ?cnIt(6ky8vA8S`+5bI#uT z8&?1E?Hdu+Bi+><&vS=3_uhTZ+3Wk(de^(&_Y?lV{geKy1)O)z&(4gh%6p%3awtww zBVbe!P&xNEa_)2gNl{Qh1p4nq&U?20$KUy%_SY1UbN@s8@6KLK&wY{euBrd@U7h{y z|Kag}?nTJCH-fJH!Flgv?a5^AvGQr{BP(PfKl6&qe{l20#Tz7txq-8_wU(KI$B4nifb$ime?ux@jYBF2 zZb0f^k}(*ugl>vp@Ph$X zAU6#v0x5wrWU(a8&KR;LQtZH3vT^0EhYkgtb%-WJ1m`NOtH?Rhv{Mj^ zah{wKIR#P*)V`vshNRGvVn9X6F|#t6u-c4ilXN-D_~_EgSMGo4(Leg!m%j3CHD>zQ zzJsek*9TSqX9D{F8c1V|gD#hp!A+Pv|-_f*66AsH+O2B_+h9 zWKoQBgb-;%L^Lz-4xS5ab}j3Q@LJF#E?{+$lUw_ zz8Ww;J7Qt|24?3Mz}KuyBm0jW|JbeHy65+AyXXGLpEz*n4A2>4QqDR5{|=hQzKRW(YB1ti@PQ=%#pEA@l)OC3G!Vk6K4gx!ml~U{!F|QdJ&f6)P1g z85K(iErY>;N(>=HVoc<$RF$KREf`OX0YuOg8P$V6T^gFUL5<*i&2%~?q>Oi#fp=JA z@Ydj+Cu?Tfb|eHVO3cuNhymsXHO?BkwjtAJ6E!q3(u9B_SOFtKj6v(ckjpN*Sa$8) z$ygna9zOPapSkspKm5n9-u7rSovt`*Lrm#A2Gf4002?DV=RCmJ^*{bYZ~Wd@UVrWH z>{&m$>BPZDx%a+%^w`lOs3vjFiLWZe*|Li?V~iliBG!;qF#^Vz{^#JF!x)1f3^CS_ za{^JEafqwPDPgU}7*G^34s5Bah=38Cb$}vBNsZ0`8L27|$T{P^$K*g3A%qrV9nKk4 z1U2RLN>*G|g`U#_7!VXP}}xUy?CqojLlup(66V~j;LqoUZ#qXH>JocC09 zg*OIg9p0B(8dVYJ5RIsm-B;HGMgxZtP%I**M>k4HiIgLi_jqR!QBXlNQ8`cLy&y)8 zoj9qdj~`>(!tC6R9ouid>gktHAKZWNv6Yq8Mj-!l!L{ZyVEy94mJj~$Ti*Ay z9UDI|J$2MP^zdFiy}TsWSs7F{)>(`(APPpX*5bS`^-B|~31fW^P%SDY4QftjmzA?+ zSE?p*%BX_%4#D(*!k1k`+2I&DiwupmC1489Tb#2PYsxO|m#*_3XDq4(XsITAJ?s}t zItw(tuW(L)OwNi}3kG5cXBT1REY=vTGgvF+lt?OwH3){#28NWpz4{Q>T}7X5eJo)-5+&dcm&YT@OBb_oQj2#+aeTiee@B{If<`57=z}Fb0rmtfH4+95wxTodv4W> zDK|)S##)Q_zNA27P)+4ci<}LxbsjO&r|5FiLvlIWU68f_POUzN)a+p$aJ_j4KNwb{ze}K`}-!($_r|j983wXjZZ+))-LjYo^DbRD&U6T@O40#*|bfIpdr!J4iEF z*Q42UZI+~rvkqr1l1rPQIibd4M6j*^E|F40o%5)IX26t%XpP{k?^_N{dft;-2iNm&sw4C(>SS#rwcycV`Z)3q2^VFj!K>nl{Cys~r6vmh92@xCVK zL>D44B{_EDv{sU2$F|Ma?cTln)P0Zc+uLXuXiJcjqAD08B`y03#PlV> zAqGm8RK#exPg+{8h!A7K2y*bq5v3b*%_TeE|NN`3xCWT(V;apXKR9_lIN*cD+0M$~9jPV%jF}^Ofdo9v^aMx~JM&!U#M|8cHxmP~_s`qc*xNa*@uf=dJ zkRF)7{KB2jylDOCmHVGO#K}`9`<_V{IE(GkW*tT6|51e zs>T?>IRmLHFVI-flA3bPh?c&}c~^pN3YyDV`(4`iUCtt8NU2At+P5MZrPNi?^8ChI zL|k9HeMz61`c*zm3LI$71Wzc zV(H7o$B-;E&!49aj&GpIby3e)kJ{rjF^_u}Y9&%FH7 zYsHv_K6aS?qu#n{!{%4r@cj4ASC%6uPpeofNfm27Mxe45az@K~D{s0UfOSmTDU<1h z&^2ULR3WB5n9gCU0VO?Ks=*AJJEA5s3StQ{kT4~s`l{z)Go~7rt(W6jFeDhvS*|mq zBBY$kPSb)|#g^4i-?NFF$MK4wvBUTpTMaRoLJtZUx)i}@&r=he4IbglR`HC(~3#XnlMl2~NQj8EAj4Nqc zG$GcYrf)+uW27|jLa9@w-GG!rNwF#QbYKZksa1uyRg@f?l0C?UaL8TR(Yb)N6q>Ry zdK7L%&I53Y_Wy6&2C)w31Yh+43L!LO6o|Q$hk{Tc#Z>C52u56~>1K_DNQADVZQH`z zlBvDL5~06F?L6LFEJ043UgE;_v)4FlHUl$&vp`*Wx8J9w78cQNTM-Y^TK7Af_&lr*yU@Ko!l3F<^36>XT}z zmpK-8NXx3vDV5+Di?zN`f?`Tw$hfK|w+)CxW82r%(hiul-EDk7;wb6TI7^HXV++6v zU5l}G0WiiQl0h>m38@>SBE&Xey{C4b99zH=Q^^cnP*R-Yd=04({UV0SnRC+`=vy-- zgpQy>N*U`sRaH?{9u%CE1#E4}Zr*z)lU6s+jYR8F_u%6P?~Ey}8ld*hE$-g5_^Q*( z%N$!;)+R=rvv{jigHkhMzZ!jiF+~gZ6-N#&pd_)ZPRDdzpzEf@7)UV_LdRe@EH|YG z9Ht&%TusO&#i&roWi!ClBaExjzDbVVgrwyr8CP1699vS?V5}vJLBxafAg-!VqnLV# z3`QmKNLi5LYE;XskL|dCk{C%TlF0PEM_+Rlr1ZQoMM93?hlDPm#+Bva3>ib)H7F1g zL{+RGoJHpeLF2UNn}xLkl~w6N;axx^43jocRRg?Lj3iha`=o@ohT0dtw9rf-F6PlngwG_pE{*5G{!)T z82Y{xMKoZo!BN^In@c<7`o7nQLE8z04p$Em4d+M=ffNE+GuAnr7_2G4EGN(q(45FI zLkf835fzNF7=h4E=(-MP$_|RtRj>}Lk;)HBHp__|ODoj1Q-Ug)(xcXuE!3T{SXB&} zs`6C6l(4oL6H_E*m4io*QQNdj&^e%XK&7g4m8L;-14NeTV&=@!5-`u~aKLEj2_ca) zgjiS&?;KW@cCw0bRiW2%xuH2kCK*Omx#`YVi1Ao4)Yj6u!bazu5o>8DEyK}}tdXuw z7^!j2l^!yebeL7iF_!db$_UJ;fU}%9cAUxT3Lynnmd=okVd>;aV$N9aAe9<5ni(+| zjmTu?=N6co8L@fGX6EM>@U|)oNx>LFy9TKTpcYM#V?bjhB@f2ow8NmJejKK1NLsjE z5kr`)g7H`tjPayc(yQi-_cd+km^KlN;+&=OuJqAKF;+2}u*TwSxo!xNl!X`~tK%_I zVOG7%`CK4t)jX0gWzsf`<`&QtNFtnGULqsR4F}YN0U-u*=o^1ASnn9Pnx>tiYZDI< z@Q#!clL({1fQ*nelDdGYD{NG{=?ZQzDm%;?rp=T=T_euWwNnOuwg+1+##wR_QU>cX zOG`@}J9&yj2M^LEW%r(EaPc)S;=-q0$;D5<3SSS|vh$)c=aX|3^YW?V96x-3$#|9h zd++Co2kz$Z{=MA(t-BZwD%P!EWc{XX%#DWqM8kp=LP}%|>T7bDqT$>ODu!&Jo2-z< zlg0ELs(`H!>#$OAh8jaiEmnj!2-7B@&i7Ia4;l$wgY!eIb9h@aOjc-9rU`+z3p6ni zj3tJSd2LY5!?i#4X>qbFpUNg}U;jlu0R-G-%7bF(IW^ z_N)n3h@oSpZJ3`Q6&i1^lXaHtlPYmb(^;U$~D)&>?}9gwG9v6 z`BlF4mCtkA7e2$O!w0zZvWwZdb2}JI=ptEjsdZYwo1q^TH>+f02whkBw~*;lz}6$2 z$XV7V=S<}WgdAy8B#PjS;4EltP-CfvGgQtYIg(QuHgqA8qB5OMX<{a%Qek74)D|hl z0Pqg5s_MvrE+iGA)F{pxu!Zetx{eqd7H8*~n{gP8Xbj{m=UAAW5L2NslmHt;$_a6v zmGPAM8CPh$IK~fVsjMSaWkO)YVyha>il~8P&?u-)tgbAx|KL+(Q}Mi;zK5TB!`s+? z(Pe!IGO&WGAQJmds_G>#4rmb>_JM7BYI(J9y%eyh8miiI^>r`f>g!&{J3jEMJodm{ z{Nta0lzYGSd1`CezI{8@a7gZAX`ieihYm0pTa&w3xaQcP)okI5v!XeWa==$ZBnP5q znl_NcU{M?yXDSrIiNPC#rJ(FCMpDj%q)eKYsD==l!lD5=tE4WlWAn!Cj~qN~9AHGm z%(#l$*MhNhZ3k6_w}Q#3prz2UJZXt4%nd7i<%uy7V?roIFJ#(YWs+6#)u5-O4AZ7% zG^{bEBISfJP#)}K0Xc)J?SrR? zR6Ww{`asseGB68F`$g-{n-iq|qn`u zIpKXx%$eoWr#O1#6boB+@z$UEk6iz%@9hIHMs+y`s6*DHBoq5r$t z^HT0wCYtu&H~p@Rhzv>#Lk8M1-l`q1dh3ty$~V1(&wcXa{Nta0l%)d)*}7#*!3@n5 zTwO?a&BPEum8z-UiC`l>pn<+Ikwqpi^8H`5IP#z0`E=0PJNVTeB z)EJSZRLjB=*3LS+pxmvN42 z#?=OT-HxdTC4G3Ijgg!JGc%)tZgVQ5AuB8`FLC0;5@vRh7r*fxyyd;`$5;<6^{F!< zVte^vJ};mNWtPwcLbptc5Zlur&^1j-*QU%g%dSy;RhMCOZSnP}-<9M3+UL{=(4g94 ztn%G&dK)*q`t|(z|Nd*-|BWwV!%;?~c?PpXL@5L5Ue8nbQ-?J|%!W1#*_7I9H5a;1 zmD<;MXRvlaN=nzXbTQCHJ)2rJr!oW9G6{0llclg>PV}tivjh^=$#~3UJY_U0DQ{E_ zNh#3ANbDy8zA7^{Vj_!SW!f-smf6v;G_lT<6`qvZ`JS6Bh)uMBkZIH6T*aU=Bmt8X zlhsuY9XZL4OP|HtKJXvdwdd)50O<*CMYZmO2O3)Ow!DWC-W|7U*_SvZsQMs{X^_~>_N6}Sz!I<%|!vBi5^;GtRdyhWZKYmEyK}F zxp!hwRcdST-l3@@W=9typ--hDrCwVrh%Y6JZ7O79RBSYo5a|e)LcI*nj>tZu{(~$ed#1`bCU$q!@4r zF(sy5BE~@FD}+oA5o0Zbs=`;UFJnSXfi^^%wk-^A&)bS9M%NfAhX5&O+O{L4Oww~2 z0k<~W8_bLtjT%rTgg{P-;h>`O4sQ(JI=T>wtgzSURMrqMgcw*}9Wy&KqP9X^56G%z zaoSw+I;IfnDPhGj9=9AieTXd=Ud|i-^}D&|g)akEQSJHw3XlrV$pYF_sktb(Zw|+f4Hg90}j;+KPX{RmLz+`oWn3dI~(-^;81Wp3Ja>NWygmvrIF}t`9 zQDtRy%!&Q?a_phoczAvT+b_SG?N5I;7hZ8C^>BnpK-KoI2UMTJ*CXEXfnVg}r(MaX z{@`~xcIYWK@7jU0j+`^orbV#~hohb`YN-c9YF}u|7>oY3Z98Hvdf1e6ncAe>Ph12| zibzS-(`G`535>;PFFTR*0;vjZS5jxMHX(+^HPJRL4?gf1*S_?-dGo*hX?9-xG*nLmuD?-h(u{dh z%shVIH`ssoH#z+99nenMv~eSY%@>h#rfbHGPc_6438|lsm?HKnH8S^_o*s};)PBwy zCgU-#s!%bkTepG1mcp(ad*JIFxbJozzw|lmdG>SJbJaD4+-JETmASr7pW-F2`2jZX zxPZU>-4Ap4&|Wre*ifc5VsKLCwkbpg^{|lUnn+P-yHK)R%%og;QeyzPcaoLO38IvLY89Zl0P8Bb`NmbNWY$&?b!bXo?rA%PgW z>6B^zm}ZDwM;8LC%VRtX0eK zKBq+J%1$-Cts(b=@enh^%5vwv^7+P$u<7 z4SiMuA)4^6NF-8DC0C0rs|zaDITu zDyqKEAWJN)-^nFcUCYDw-p}EEd)c^Y137lom7}gbs!G#N>AH?KDQ#1xCDz(rIPLl= zzm(D4d4?qC9M%-Xo>b{#qK(RMSaHw(J?mptPyKm zf$FwM6H2pMRAZHO_@ZGT##o4R(O$OTh!lCEvxcg&?0aHAd#-&6@A>&(Wo~f>)kz_e zHTH;fmNUnXamy!upF{V3m5Pq}#d$KYy1G(sMBCDZK-W%sny{bDXi+VM*iu&&ga);~ zR|G_iDQ$>Kk(h{<8q|iaP=lH=n&`TQX;ac(N*%R#%r7nwrz`B=dp`#s-^bPqFK0Nr z&@VvKe{GnVo8_{ruV?SQcXRCE<80r$8EXuoYlvBByGWZ$KZ*1*&R$k(jbJgP9LXv5 z6P2O@%sCKZpo^u)4?V_NH#^|2Cyw26X0;Ebb9VQOo^kQb<1XS%f&AL4CLHkQGw_2u~e4!iL?K^6p>!ZPsnBQEht=;rsq@hQs>~ z^LPKphiQ&J!sZPNh_#$PeTqplVcN9BF7yiSUTT;UR*HR~_(XCMCL3FrCoL8QRPnCY zt!l9^*urJgwgF=;)+m-DBn~kbL31piuL}X^Je7mPPdv(F_uj+yORr*fVIv|fnxflHowJ$HQZ)5K=X%xJDO_gx@lDKp#@&Z_clzY`_rqLApvZ_e0W2CAj6Ou4XV z#ulZYwJeMV-1+#iTh6SG&+W(;UU|XID@_snc<(WqN}kTScSIE?-dJ~5pQ&hJ9#o5* z-U(I=F)3X$De5sIM~^LW;&k9Af9vfn*bYhIm&d?`<1c9Z#4vftUqv3cHYchf#4$%wr}mu$8J6b|5IpD#mp}WN{NM+Fja$F^ZBpum*0Jju zAB#1%2Q>+297Z#SLIi}Ubg7Vy#yG6xqAM_lm{Lz3MA|l-HRYZSWD0H9I$eeU03ZNK zL_t)ss5y_fMIbD_Jkj^Pq_dWsBh&FJtCK0KT}QT-s;bJ*l9mQH1}f)R7!BC}_(9(A zo}cF08=ebk6}k?k>4P}n#Nmd&_>KR-oarvQalje!_i#w*K==I5xi;p4yjGaP$rj534BOfL^f7_-U^uXz=(_<^_c#AExZ zY~ic5ZE?nk6Ik9Fn>+NOv_^A*4tf0$m7%uEF$uE$58{5NkeT9a{hNN8J}^&CI5#AtpKuYcE%;B^_i zhpsKxiDQ~>BY*iDzkqF)*tTmsD=W)PR+h<`v-8f8srvq_6#A4(dK`@gs07pq5yh$E z9E50?#E#|VCGNiWK_aj)Gh{NJFqm6M4r4Ccb19>B3%!3cGw_4b0#t)uVv#UF)M6co zF%)k_3QWg=rIl4iGjnX&yugtor}(Si`~}|rq2Hz+8bns1okD`4b^Or#f07@+`O~b9 zr_7E9B}k^Y^4B~vA@#HzTI_uNKwXi7QbV9?TT)M|NGxFOd~g2Q9ocoE)R>fdRwiM4 zGp3_BaILky>RTAj)YMhcTy`NcZ6j@~G|dF-49>!BU%QvL{rg{GelbE-7Z$>oA#j!% zKKJoI;MAdg?A*1D$?7W2bP6$(VeCNO8KYej8|J&bvi|_r>pXadyNBH))?__0ph0$;T8fjBU z*EN`|c+;x_d#|Lomf>KCU};)K#nN>hE6dAVa`6si^$558=^t>;RBTZTSYhMVdEWlP zpXb062N?_oJ(vWfH2Tv}=9A7>__{7b;}D1mLd=B>hy|+{rDTd+6ouq-=NA;zYR&HJ zFWYhR$)%NI;EY}IMVO*LS%b$#M^btpP32;~@}Q~M#EUHzSJgcA)G?m(@>lcfA9@3I zwI&pHy)-fN!0nIm#XtTXF1%nH%i{@c8%Uv}3mwi%d9lu;Yb;6%J@V9kp((?((_`u_cINtQWpW)sA@%OmwnyaY>LRBX&e#WzT=^NjTn_0(g zw|G=!Ju%**3rdWN=)&P zGV-1rI=U_q5>$f$-~7TCcxg18*mAIiLWsS% zTP!i;UQ4XK*G0%7l^tnp*<{vX#IZPAbML`ZUs@XXs8v;&G?QW+aTRKMD4z>^pET2k zuBYBCs3oS*`vD!5F&G3V!otD=M-Lz8rq{iRU3=CcVO$j9nvpm~wdRW-|9v*h3R}0X zXS_0@Z5yl`(6xym6;y3^Ce!lO$ zKg~nmx|M-<tj;`9oYb0m#L)7lk^F~vx38*IP(bLdDZ5;b950hGo-aa9RPln^ty zPp#(MsSu@kj$KFBwIo%NnxaO`u^_gtrEA+_Bf!v;DmZHxI8)3l)^gy9qrB#AZ)a|H z2&zbkXev+l)DtK9!Y4k)wr!hfR>ycLySr;wflTNcnzke3AO>uVteiT--p3B}@KdW? zdc*7ZtJM9SvM~Xwn zOUi>^znee##rN~Izxp%Y^pii!2S553?7HA$B(*@|`d7Vz-}uy*c=HE-i6hI(LwgS} z9Z#@1GjbL(G;KNUBZP+7wyZ3zvUA5qzVY8a&XIk`dVzDX&ykh6g%PiN=fC0cN1mi< zCgoHS&4_B5^ygGgBuNQLnW`F6S0ifYDJCsBtC(*?plL!s4&1FYq2>3xU2rOR1P9y`HBS3a9py!rJET|}KJ_Ux=s&-002|1Z>T zOqPyz($F>&jAon&V(YUa;b|8*d1jTPCzhDozK1vb`2Wg}{NitN)%7o-ovd)*t)J&J z|JQ%v_`$<$xnK`_zy2AXe%(uW>05r7XT9_lJaWf3xa;pehG@TU-PoJ{s^<{*0Xy07!QB_7Q%GQt}CBOJt$_^3!nZhUiPN9B5sxk?!22b z$BtpGFm0!(wY{U-l48f8t{Dw#y!RY=>M+lI(Tzx01y>atehSoc>-qBEe-UpBA6$Gd z+6PH`7nTJBgi?I&kXb3d^1688_a{+kW=fdG*`g!{(j4Ir79_?)b;QPjhVVeO&&6m$GTsJTnU;u71hu*mU6@?)&23a@QCBfhTVJ zBFiU^aorn!kQcoEZOm@~m=LOPH4b~`^KkG%@ z_yccb(kc($yO*Uir>QH4Ghj3^sOqwta%N_3#O+`ECfB_9dzqUT=sKin!F!C$OqLV( ze&tJS-MXHXBF+_Klyl`^i_&rw;Z++`0Y0f5W}&^JDCdZAo>}jB=*ZG7%af+(T8-I# z&CYcOJy@kEIb`A3Ss>~RB5L^eeMf<`*VNA;+7p;|HgMvd(Suj`r|zL$P>&gY-VN*Hu_dm4@eOELMQm00-oXG<&GNZF{d0Ej z+T8bnWtYVi=~C`pZL!xsmHWEpPSaf2BdjB(%-pc%p`**^cBC`1`&m2YZ(eBvb>*=L z8v8*fWxMB84s@XRKdKhVwNiRMYYoSaEpz#EUd(sB`Xvl&*XvY^*eHaGPk#7U*u7(s z&~=3A6iu0&W1*h90LD-cYT|Uvu_MR0^12(i?H@kPm;dTdx#+5^dF4Cb!!HQ-*UJ7|xD>ipTH1gBV(_dhsiPF~<)a$+|RvM_|dx_V&%*cM2d>M z?bQM~D>0Uz*CprtR=sZX`q zdrni?+C6%b-X~cPYW6+)6fgPyw{qokpNbll(44dqHAtsW^SH) zzVun1dhh{a5Eiy< z8@64*71zHQQ`Ow@nNRcR9p9p=XV|dwGK?GX>5u*{cYoopSzMScF0vTunifqUPMEDL zR?aN5`JyY?dg*oup#ZKP9UeZk!rkAzmASDdw}aRAY+~ z%i@gZfg|Sy(p$6p`pb9TJZVc2w!M+HG{VxKdSNhH)MaaZrf8Wq(7TzA9$n_O?|dh_ zc5i~z^)BL!_(eYT(T}2&)8yDNolFYO%DGHZtQ1ET8G~Uk@Z{8S;IVxOhUwBNPCfM` z&3Kg!J1)e!8IXiZMzm0eWoUnz#jU%z>;*Tla{L(gedY5Ue(V8`9ej+HV~0sOvvm9z zmp97BWox3;DwH;!LvM$9`Bp-I| z%%FbM)%UJvGh#0Gg}Fh+gGZKcSsphJyS3({s>-wj$_^}3kp46Zk;2wnQwRcc4iIUN zw8qP;Y}t7+>$l89?9jGDstQqsq43}xw{y|1S=#ZKfFbto-L7q^D_;(RP>c1B@tGx> zu1pdhxbt?t=UqR}CC_*!-~Qa+uzd6gSH0|&tlPRCVTzLagOmC`k7cTAmKVJKhe%oZ ztKa-N{LE~bG*n;UrnmhVmt6ZCpgk+OM5^M0WR9E+PuzPC#}6DJM&YvOJfG2Mz&HN> zzwr+r`v@lvKEjrbvy5g3grL6wWGx-$9Re9M_Lq?z8Ego zv^lvyEXg2Fs4B0nHB2U@udFKO7Dilj*`>5+_OY-qL)T7=PsUiREr)5OTy|qj zsT^^tYe&o2-asU0rIY`3`eBN8B*st>sz^DssE5Nw>5nQiSk`=iWhXc>Xh>|`wUfc1 zD#Um%uw~%cfB#*qpC4j!E~6(?G%O{ZD9v<=^PVF|PjY%W@_q09DPHo1*D^D|fs3x# z!;5H=-gYZ@efBe)cw#Tldev*FN1JG-CwT0e|D6YJ{VK+K z*6q58i=J^YJFmE&;|KP!dipree);!s;>r6ty!R1~A3Dn8zxPo#?cC1BofmNE;RhKm zZe+_vd)Ri#1vu*5m155Ib;Y`cA&=kt z09!A37K~Sr{@}x5<=M7#H;)~Cq!+SDIiE+@eBkBy(HIh#GMK<*=n}@4L3v7AT;00H zTlE~)q?z;+kVKBf8)$mvoAiAoMtTi4#rKzskyV{zdEBvX>rMtUvtZJBhX&7a`0+;= z)q+T-t}8Ti_MizjsL2|6a^Dfgq2}#B_e*@&%{Sn@L-i;#3nO0swzsfh+cv)PiH~vm z&>>#s;yj1;KE&MOMlOEV^=!ZVVm4pA8*3aegbahx2!M?{ zx3Y2PCRR?ZaOAPW?7Q#VJaFq5x%!o_W%KS$%&wpBy&)~I8L%8baERqIrx{kUKiV@8 zfv%Yr@}w_4DHk5p+j2<%pF6bO0@f=$Tl6j(7HKU9-N3a5YD)E5haR zv|(=JBHlY_COy^Tftvk~K29~PNxJ5(5F`bRF$`NqjC`6Ax?v%kz0*IwM~N7oLC zDB9EKy!yMC-?)x1ed51z`shJ!e$T($Y!3SO97c zK6nS;{_LljE}sNdZu`4GE~E(>I)R?!7ga#?ok8k}YIoS+=m{2?uOBn2sS1NqZ66>4fgp zO$c;C!q6c&BxGm^our`|lMVzh1c%AS#(0)TY+1H7TJun<`3`6LhCTHk@4hA3-MzZj zsL{d!X()2WSMF_dThRPu)2V(Fzm&n#K^ogo=s2pJ&z*gV`G;rbcX_^>VcY)x= zKCT2Cz;fNQ?jwhWXnlZjyuke*dms0H^n+|3J;C+2-@&Wj@xA2K^Tb!~IdA-L-^HcZUCEiJPxD{?^}DI! znno*6zR2(Y(;w&PH8*kPO*e7oiHCXrzyH_Vf7d5Ce)YB7 z{Q7U_%9p&D*};aoi6{dHj@?F7GZyP-sispxhzud1jU#I#d_7^>ls^^O%W4-&rAR4JZv3g)$mj*XT0&$bv?D z?pKoUGCN3J*W{RS8fvQuN)tlFDO->)hFB^(xfEFwilhx`2oM8yQqVKc9d;l^(QX=N z3%wtzx4cO$Ro&vFkPmfIBAm*Z95c&qV5%%f zjvr#ZTJpy~_cPq_z2C zg$J;=T;oGurn)KnqY{&7waIckjk6F(54zZ>y#RrTfj*4%(Np&;4jnp72rEAHE5E?* zx$oh&x4sc70r_T?WnU-|1@a!>^oH9wbjiQtH-7v_*gf?WZ~9x`i)*H=7b6dT;zNAl z58lJ^7u>+>zVCnJ+HbzGyvZY(3sQLseQB}h=K%OAk*$$FYKo8?hcCO9=w`&#X~L!fS2;wXs#d*{z_=-?qP-Ew^4cYclK zxouwaJ#VL~m#A@+PC^D%)us8m$K^M?gm3%)|CxK=`)j=Sr=Q`_)*^f zf9@BVY;FKMFrFbBhccD8sC9;VBFNDsbxc((cnU=}mfUQyb7sk3y#N1X`^ks7?5Ha; zf2eFtwo)>ytE$-fIus2mRl@oqgR2YG#1ph-SawVsE8CfIrROL-*W^p}OBK3D20wUG zQQnERSK+BHu96oAQX5U%POz0QP3xvcl_IT(mG?tc5muRM>#~vnaKS?wPx%I#K>u7UUT+k?R zmCQQ9S%Gl{m77t~OYbl#5)CnEPCs&r&-~GU;J#0Oh*_1m?UqaNp_gKJQuMO ziu;U$s$#h}a_zO(%8bmZ$TgvnAt2X}m;ysDMRQW7bgGDD;1q~UHb%%1r&Kv8Wj5Q2`KcX-tZ~z+?2+RD zL(jD@yq^0$3F^N@Dn-WVqOhLhOA09+@*;-?LnHv~7bf1Z2!UfL@3g`wk&xO$i_o-AY?I4j-5Z zj3Ib%6M5Tn1zK^{jW-g<;-yy`#8R8=`yP|Phw)-<)>Kx6(J`R1qF=3e(QUVL-Mik! z`~J;O^QS-iGbmTF+Bwf9*S~eAj^v_u@E^zFstNEty_-Mna}?z zdaFe#MGRs?2#An4CrLI)eoZrJ0mEX^bK-_;<%Lc`FmF~fEO(ioKE>e;5iD0$5uz$d z2O1w@A!cS=A&p6+Ar&xTk^|9n`VHL=6m?azv1xJEP!-@q?JBI2B%R7hO;JdU6o#nW zC9TSAY)rWD%#-we4{nP*W>jTh=(*-4*RdF2(e(^{N4Hwy+6g&ioEE7FDGJcONa}S= z7%N@MFl@7R{0MLU!5`$F4}FrYBS*ODj@Qy|%w*roXG_6(ANL6{M;<-7=J)~2hkyCs z@{V`^6Rho^s!%b4s!1uZ+UYs})JY!v)L-z}7d{7QE_uO=xcS@vd#=0nr5Gj3y7hWR zN*QOs`$$tc`o1rkB}+f{LafY=Atc6_*y}ad-*O|&Ps-^xcyNl&XHGxy7>5pM`c6Eb z&rf7AN|J@rzL{u0QDHyPNGWJr^z&plR%+pj!v_wMmc1m#IdjoEXG=^{P7!TI*`=}& zAB9w$(Z(^GHazsThuPcix$M$}>U$VHS%IFdx%>e)F38cQQIxX+001BWNklyp46P&9GFI^Lfz%GX_o$ko!R( z#!=8}=TGghci{|IUVa%nyCYTAi1sOpPIVaiBJp@mS?&vOr!ch9C~D^f*7W>)q#}v8 zP%BahLibmOj4YqdIjq&Fw4X~=5@teV3~Nw|-NlM0A9>HQXQlPi{7U)biU&Nf9wmZWcI_TwqCAd6FeE;`f5n_HE=<%Ut1y$$FIH$*oC+vk8@OcNmP}g?_n6A7BpFFEsZsVQHmNN zCe|@vwHC5-vEyr{2|n}cx4s@$dk~^{W$K#MYUJU&zsjKl6Y27B?mXvvpUN~4S_ zd0t7*Cb1B(louao2zWn|)ALTP0BzIIjH0ngV}FsU6N49vTZ|}ch{cX=ZJ|A;jB}RY z3>#C+S3dhW_TKrI**dx*l@Tkbl&vG1-2AH7uzLE7Oj}DJ;}fJ((KpUrToG~*Mcr&; z%Ir-CS{*!x!I7)0onx5=5vJXCQc~N$+1%g#KZ% zPJuQ|>Y7|EVD>p?sb^;|?5wJUZ6U%)|DOtjP;#>f>(mpm-e$k8h{Auh;Kto179a-STfZ)*2*LqIhf zLKr!Fj<0_7k2rbnS5Oz8WHu?ls8ZpwK1wQ42BRF_Xm)njT=%k9a^uY>U^$mSH5AG^ z)??s{ANU~GTzwRXw3W>G(T|Ki5Yd9Vu?Cgoxl5fji37{Xp!fa27&E=sUvE9n8TumY zqZ}TDM(9yW6)kJND3-0PV^TNFnwrKyZ3U+8N6+y~4)B$aeVEfHcST_qB6NL;?2P<( zKlb-|@S&50VH5z9(^N(RVw6(CZ&RA6WvPkdz;t3bbkMT%*q8a^pZz&L`MVz^>$xhB%LDQg`15h8~nFmkv=fC`G{L#Po-+1IB z@1s9;KgSPSjvU;eGSUF{F*C%-dI)5tsGX&)EKfgrig*3k52402c^qLFQHwRH4?Oj? z(>#9PJMQ&Ag*@&hRdHl`nX#(ic{T~k*Tb<@z)HSMJRf3cpc zeU?DLnnIz{Mx4v8DxzggQ&m_cDQhaGi|V>mmd6lA>dN!!_kElzzW+OElp?ni!HV=f zH{EtUuXxkj*nQ;FoVel`DSC2DbY5zTWD)FE&Xy8kV!k(L-H%MSCQL%dv!DE9KJ@fs z-1=Al8b?pegr*U_q`6|G%4%Zc>N%-L zabu|yFTQm1&faI7QM64>TSRE?d}oAkrX29ez*wG-oKVr)?Umedf>j3yz8g` z1>bzj2~^ih^h3_5x@D+Z-t)7+it5jxb!N3%;eC+3t^{_cEQNO&P_bgfC|Xygg^;DP z$RuNs7j0H49zNfHWHtCl?0&>gZ8VM3rG}~tm?(>aD@C+&MNMb1&M}T7T|boaUPaS5 z>ZZY1%WA#m(4m$;{jLAZE8g;#c;QWlQR65+ket!|n%92U9enWDHax5~_+Zx-#=!fk0`pNuv5M@l6(iC{+ge zhnBi-A%G89 zmALV>ujixx<^A-_JuW+bP)?6zl2Qz#2)?w@STeO$L}l5VFYzHzIYSOTW6o@DO$o~d zpZ~A#LAP7%T{z8f=5Y>QeKS|T?6vHkAGqiD|B(0n{LgXrt6$)fEyJ-xEn^sjYSpdS z-QA-bJ?m~w^gVsoi?LKP^{6Uwmu0Q-K3r6PpFMS+Tp!|xe(~S2*&-+Bj3fzJ%RD=N z^&h;OBL@;Odd3jRDO|i0Dy<5*Da*Y*C4n}TZ6=YPQ!E%Gt#2iAkj+WO{bv>*S@r&r zi?+I#UUBHoMeoTe2$ZixMmQ(5WFIp_h!Qtc_;c-aigOhq2nWWGJ(G6AMq8s|;K1Qc zwx2zTt}fxk&DW#*UfM9$fibkT=EZlsi9i31-z57%BrUFCJqpn&g+Nm|8Y|qyRo4+x zq^>G-lqJcBOtucIiRdiKN(# z-J0#aIji-W-~-VI7OQn3ZAe~YNZ@0l?|ZRHs3a)s;#NL$evgx9R{Y3+{9P`+b`upx zsWce_){07Fx_m4Di^)1 zp|*x;Q$fn~F%pfW)iuV@G!;Y4_z>vVD=d;{Ro9j)EBoqx3!J#(CVb!a&{j27U5P=n zTQdwJl{IX%jU1bS7z2KkvRglTRPC^ppu z?M>*tZP_-QB^!mBZE$Ya^YcIOk2rBjMGQS5OHFkQNnRXlB}6=DQivBLIdt*hxT?Yw z_T119bX_lf+x?XFtZ1#~{xkFEFRl8-%da_h=egZEAtb^+ZK85)Y;G`}PNmqbMEN`p z1J-CZrxPZ1CAXIli8&T{uA+}Z*bm-w{E|a-yL+5|`W!dC@mnyHM(UF5PObwgbJ^uv z-0+$=@aMn#Awsv{=z)gHT9Pudq?f>LtK|xij48m}EbSzq4}vt?k7XDmtQIRNF2~4f zy&{yXWotw)6iNiTL18OPNX0oELn-jX(06z*ineE;*=BET_>o`xPuz0H4XCj%@F+zd zJ!&>%=oRnzC;y5`-eI;;vseo+A(Wy^QU)IjBbFj&EA2vEBv&Ybav1Am4^4>>66>y$ zmn%kEr+Mh?@*}IE45U%�!s3?wog{K-{%qGHIDjCL--fNidtk06Ee+%WTr(j3!1& zk_(|I?P8=aoe}FCb=#6c{B_jUa!!`GN~Ptx+Y}dtSV#BF;Q2dJzaIOmpN-tDKbXrx~`BI1KuZ5y@gbk z&gYgbW2DBJl@fRnaz3b?MH@#yjGQ{X#2&hezxNCOmKVL^g)pwjp-43Q4%M{uvEq+^ z?pN4({3~2?=^@tZCCmAOq4Uxxc9P$mQ24@zPo*iLwI(FFn~I@Z`kSVb-mfw;%-y=j zhlo{?C-%mVtcOqrQgh;_W79i*Qp_eZrn3o6Q=^QcU#;BSy3CX4g%xXEC15Hios)?( zJTdpr4Wu>Z#H(+(;?8U;nnnV^)~gl43y8OIj%icN7p1hilHkRprF;Z2Iu3KZb#5muR%+E|n^Y_t`RTs?d$a_yWjQAvCWNSo}Wvnz;oz`r$4LT=ww|5x4 zXSOlr(9tbE`6nMj*Be~+;v1U@ zVJk<~*3z91qUnkPOSyV|ZRVe#mE~)V-*}f_H{d@2Whl~kBo9LR)xb|R~0b^RED;4Y)l*c=$Y^B(f1v7J0Xzi zhn^$HwmA8~18kr39J}fYrk5W>jh&catBO2$m@jY>%MG`G3*YpHH?STJySqJm+q>+Y z-$tiERXZ`?mhMdB9F-GC^ys6Yezf>jGD_6o-b+X}3AAPy1B=Cq?F(~yZ)h*Qo)^FI zPTu+B|A3dh{uNlYB1ehym0o8;Sp$<9&pdjTKmV2AWarV(bMWAlz4?w5(z{NI3MEOv z7*p(Xa*fGR3Jrdcv;WA?dW_Z>6wXP+ypB;0NmhvY^SwPu_1V}YD#d)h zz>gzsQ!$%V>^%7x&piAr_3QvguRMWrkoy7p9#vN*oZQoHw!HZEZ{dbpZ>2tPgsfXa zQ0$!B=Iq&XblpJT^;Aa0T%jl$RN<{E66@8He(-et$a1lyTdp~CdY5%DR0pr*(wDq~ zTmI6UdCTAV+r08E-%i{1F5T&~W#szQPB8^|#r3;$99Nme$mAxscD& z_qe*oj|E7WGDfKa)|WcIR!UsRTyVg5*83jSc3zd#H`TCC3i4I{Pqx_KUy5GvEGJUiFq&vvFVoeJ2}!RU#i&OH`V3 z$yEn<>%0C2fiuhao1;Jad{96VpbcQe=AM z7(=R<9z4eM_+btlIn1?(FXi}kmvhyNUcfakei7AVDhj=DL6&%9zz6yB>;R}K+o#WP z*B|~VcfbFAY)%8yLp9qwJCaZ|22>QC(?0QJ97ZAsrN68NqPa;ifY77-dEiF(NFOB=RVC7 zU%iJzvxIiA>UvgtGIOmH)QpXuv6y;PR$w*DzNf8gT5YjftZ~LDYHT_9XT~f#pptVT zDd}bM#3B7gh_?}r?Xqb#K{P?r*2h_Os>fkaqqa8+A)bs3d|oJt${Z+pAD zk~!rpRo#NEST2{0gJ&{rB{CrdoOAebV3`xE^@>ABFJWdpryu-0ryqHkC%$|?x4!xH zoOtnzP;Ldwg)H$thz2NSSkEPn$vO^hISyWaHK_d%(C~F(pU=TCJ&X&eB!QN=Ewe3a z@N$qqE7_}?2Bm9KbbRge_j3QoKS}r0Lnyz;WtX%pde4RJ3oI5($=Oum_qWIkt5c#I z0@~@Kkc(0;_Kr#0h&vp~%Tnc!iA)ZHE<*`IPUVc&qEzfhX{KpoOLONNG&|!s$`p16 zV=O)iTvltL^c$_I>YA!@viTO@MrAZj(_)NaF<-D;E-}_pO=iRt+1=SjDMd4BOSJuf z$%(3-5n{yqj(RrZ!uB?a%ycqA#~t?W`wVxTe1wfFujPi|(;!!{;2FH%AIJQhiq4N{rE*5AkR{v77)|g(K&+g@ zl?Ja?B6(>l%cN<^DYCtDp7nACO3~CUAtl!9H7O<9Nh|V6@3BTRsawWzkS|v^gp}Dm ze->vPaTqyraEsZ7Mu%;7AKK)56o&Bsn=>S~2@mG~Up zMBdVMCxe#KelE5Qc#K>W^=P?@D62tNsQQ2~51!rO!Mpy1llOjwe)l}%dY5VA7^=*L z?VYkcgo`Qf#yNCMWDRRS(mF>D9&0j{tI5O2h|F}WBo%kDSTK6eq^YTDOAg|lG)mD{ zMR=WH$RhO+c%#I3Bm!X!tcL!gNXPEaO>1k$zhebViJU^?FTAiOFn=HiocXqY;2RDHF0Jd)IBtdeO03ucUBYAcQ^y=F2&04yK(j zX(Tmoqf*$MNf#dFp+9?)&%QShs5x@w)m(nv2`;2t>QS~5q*h~%?9|L(1_E6=lpv#Ow=Y&z2CTDV6 zv-X}i20?r#Fjgz;EI!0;e`(Db(lCUW{Ahg;aj;f08%=RwRa&HrbycCYVi*UOizWRy z;_8}qwn2)K3#y zF(*_M`&>+kIF2IF$_bUB(uSc_XRL9A92kb45CR*MRzz;v;3|zS*_-9kS&9UeoDoJ( z$di2X9GPi!m~;*Gwiev{qPa>DFtMt*ByV2!Z8d$!uc-6=ivHPOw~k?};kWSWQ^1X{<#V zg^wdm)8J#i=-JF#v9Ym%PJu&{ifn75q@)mIWL7(>VuSNpvDjOnETk|(HuQsMxmwbV z30FDRV~-v)78t@vQ!B#g@uQ%tQ%tO4&vY`yH8mk7tX8zM8T~LYbUm(?vSAHBc#N9-7%?a>ZV9Rl{~Ygz{E&ZQip=pIIS46T4iCa1zVDXh9#W4 zq;XsGD9A~ae9@+EsGVRdwU#*Bz1>~>I8e7!rdwOY6q)bt;bV{p!mP+XFmx-i%sKJO zdq1FDP1{cByPj1qE-tN9iE%e%Qi<8i)UAeOBn|U(yHu{CwuW(#WP@clV(Us&4>2&QYy8lYMlWXw zqsbcDNy}n)!D6}K;Gsh>3^Y~45QW*gUM!_~pe6H)u_t9CttY2MjWBu!FE5VLnj9lO zX6D{AEq8c{>j)?%!Dw~UVr)h3IyM{22&Tqg000gSNklyUfa~^;w!HsZaqis%H zzEQof^CEY&KvPvzPBJG9n)Q0c&h|Eb^h{)Fe}uT5k}tzHye|BkQgwb7M*7tvE)SEv{y zS>0Khrp1TAy7Lm%ghWS>LIE8X{AB_DDy1Y-IVXV`mbj&E^z=hVLS!2{OSx>myG_`y zC9GG3VMIGE44ar4#*u6cm2-?CmJG>+A9|rxY9$Ze8Wfs9Mx{jMY%$!p0?UvfHl;OL zfiK~46d0gVimI*)B}G1?D#=Glg7+8(al={bq+OPg#B(KyNKMo7@dr=--g*oV0H<^* zeau5lXU@-ur;g9W_uot!Y)La;c0GIZ1w+?kD<_sTZCEUq^g~BoHB_z=Z(ml#7^o^o z(@xMvmQ?K=Rb8>Sy~A=br*0dZF-)3F4Q(9v?(2+AlkT_YD1-5Isse!~vIyA)%}lm0FZmk};ZL=*i`-JPe}*a8@hPtkpZp=hX922&x%L*X!l5q$^gv^=Bi1<4MX;rzp zLTizJ3?Z`UI(&#C%9Kf&k8ZSFSjUsy7*30|nqKcSp~o0cfBBj7pK*0dWwg@9X72;r z+ZWi~+au&my|GC%+hphmcDJ`hai%nNTbFK$Ck#DRRim`9)rQeCM#W@flc5_~b!$RS zSYt}1BU3k%BC!afXDzivaYsqRckD&+J$NsHGAYR*btP*#E8+iWCt)*nLn7gakq|OD zOIWurqG~_*5@DDayNig|!Z+HI(~fN}@tkTH|A&>v~q*K;I82W3$#;X%b(0 z`pjpBkj@kW#-K}4axZ7jp4?vCe`*z;zVgTcmWu`F&Yx#@Z;l^>co6D_lrrnCm-3L( zRFerBLmb65Wb3MI%7)QP)4AQ4p|obXT98mQ?F1v5K#_%L$qebnk)(1d+)Dx96cs|c z_*;oUI78N2czI3^Mf>fbSmK1WEnHdTjTTH;X(Kr;zI>}ORgHF4*@hH-KL~HgX;$5; zB*ta>eh{{TH6*3b*5aI_53sk`MQM$3a!}M{Oyx@0b&{(~Wua;$+qoZDuh$IyKu!_o z#6IuG=U_?uE8=<>Sat)0_Z*oxPA<1}>HhVhA`_;|DK6+sc4-?Cj22uGW(2oQ375 zQi1v_xdwSJ`5y5iFrs7dBT8G0vf?GlN>-o!ZVwWQy6pNK#zBoS$4@_U=3~8&PXlMA z=O(AteMXf6s`W6|A*HQDE?<$z%G6EX*xFJkC3mf^LmSOxGQ}F{^9AowXeR9x>m;Ig z-4CEG8(Uk%7}(z4CS?&y*|Ky%qG=lO0ftP-Vo^Yg5ZNesOGBYXg(xvYN{jw>=m(6- zRL0=F$0)HhjG+L2or4%9>OyO}l>p+=A^^@xNnyIArAy7((|fVj$D)F8&Y=`^{eZC! z=W2Q%82pH>Dzwp}SqdIk)fnT72DOxQjX(sw7nQj-w$RK<4^nB2mH$snLBwB0t0Sum z*=ePwmE+6L&hLKk+3kD2`9XP68r9#Ykxm+rd zB^oA^3AL*rN5*~-T};~)rI^6l6Pnq^CdL{T%N1SM;VMT{3CAr2Pt!~=MvE+e6f`zk zmQG_GMi(hWN>o)vK+}z(VAj+{4vhfb!B)b!2{|+Ly&y_cM5QQbQ7szTYy<=5OFPY4 za}h1=eW3Rd*EVQl>4rhfy{-tq^8V7QSuIx=o!cpAR*MC7(@@tiCAL zvpKsOhoc9#jvk-Y2X}UM)qJ(eN@+D|TPo|wDKd5vtzK1)P#zImw2xU_wUd^`a>-)8 zz!-l4JpCe2VzRn;{<~DRFxb8hQ62N16MIdG0|9S3)Mp8kagXN@T#gA zK@Kr7$h|U&_*inhBBS@{y17`Xsp>}d=we}uIkO&QOR%=0TZ^JzoKKpeG{v=&7cdr8 zp*B_|{(cneLet348%Mcflz_Mp6MpdJ#4YNI5aM$Ktj)!WRPRHstyWuY&B=v-`mRS# ze{c-xE5HN5DPXxz{CoaD?uVfTAjg!{sl9dY6tjtmhm1mL>vH946j_aZCvS9B32|9T z5xpNgu5GBBhG87o+uf4~?i`JidzR9grk!GprW*#ecyM(;~djAkrx zLn+CAlcFTW86!)zQieVxaaj3LaA4j`np`Ci{V_zclH#+2k0=A$ zWTh32M%A^;Pwfqle)`cfA6xe0J;43IlVwTu&(DwK8)juJ(>07C#;0~xtE#HpB?o5* z56>E#Qc|m~&)$2b_oM5r48W@Ez&YBsMQOu)zF-(ebO{KRP-{^cIp^dqx?YnDaDD%d zmrJfP;iBf#hltVQ&7@$YBU&s5gD?Ni5WSZodsQit9Gl_vnoX;iZYi=X-sv)NK%^V#wJE7ma8?(a=O(8Qzm#3sGO+dhM4HR z$2un+hEX~VM$6r?_u`e%#xf>pA*pigmw}`lh~!k6wZWGMa&e!?Ntg%L(hsA&4A!BH zp)0e+RkBqK-jkIirj9AgVX15vIV-BF#)lxEqd3ld$mOyR##*vcbX_L{UpG=GPV$0; z7>K#dzz`S*xoU)zb5;tcm6|%G>dJCz5zgNI%U|feIbn)*1abrFt(Bd$uJ0=(ikxvX^l^cew5`s z@2j+9LK(>_S$Cb3-kkU|`(BdAl{OMd>}3}FnCS+A02?jFo^{tt*k?|x`<`L+RCPm) z^1=$-#BQB|LKGIsf z(YBR6Fq>$r6?=PoEcfQv+Wp_{oo#E|FcgI!OS1fuG^AsYZU6s|bsx$KX`2_Pwj5d7 zhkIQz7+u$W8xa@_3^w?1rF*2Kb6K@D-dM)aV@*k2dlt(DFClO^b~s~bZ*Iu1E{BQM zm2%)Sp7B*l!g30uSeiAB@T@VgYCV+`)1u0ILgDD+neNcxD@Pn7t+TYwuv{*A?)IF+ zL~L7pS#mraNEsSe(pZ_N3b7_+yW2xmbGu#>V`O(Y(E5^9)6i>@w^*%kzNQ-ny3+~o zJ-(_LhJpRlBa7Oz*?gh&72Wa35Q1zqO^H5?3{y_w9OEwJ?y(!T+itku_2Z9yf4z!FzW2(|xUliGi^;s;8HDau* zLtKForM0!hG|5t!rth;KPEm-meVSy?R1V1qVMog$ijG!_kBR}Y(Q_yw#h=X*Qpzfz z7A_Z46eDA`%9L;LYIc#e$SFGXWg}~=aza=N&p2x}F%reSF;){8*(^3jo=4F@$>O+X z#TN-xo>Goe=A3d4Lrh&iPR~wT?J+X9u! zM~aK<+J2q3xL^lCSJjRR*pqU@M~%Rjx1#VPKwbjsv_?=1EP)&CHwvV^g7`-;v$BJr z(Kds5(tfW%r}w_}Uw-xsYN-`UW*a7R1@YZr&J1Ck8N%OycWwV+`w0Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6d(bmCaqfl03ZNKL_t(|+GMGh(_ZSjmeEsb8ixoXiW5q#z-*ENt`DHMNo+hB0`JIP1Ez4&mO93jqe||)jWC6 zU#Fk*?0$BwTI*Neu>}9^M@mUbi9x^5Xgn5x0(x(J)$crh+oqWvMo^T6mNI1_g%nZ< zvJfb($;#qggH(zf0!B&zQjR1PDJODDNHRHkY|$esMNSz~!W5S59HdOrl9(aIh?Wv9 z6)6RB&LpKt-Xo+$l2J+{m7#StLK$*O#L!|*fykLm$~oq|F&U;d3b(jEKK!1mK6*DW z2IB0XpEpM1pI`fb{Sp85A4(}=j3_BZOvwNX?|H{tU-#t4pZr>#eX(?Czd3T`5JwIl zW;AIighU8XN>EyZHkLL7Qu3q-3V~FT7$Pobq5xthg%%|gy{aIQ5Lu9b$%AV8r-Cg+4ThJL>!gh1mQ#+1YmP*M<6B!oa#rrQ<4 zqcT*bMJWYZ<6O&3QQ&+egorj0p9L{^gb-BL5JDp4M9NS%4gIRbYE5Y^jdQpVKnUtK zFjrZGfDj@vX2z|{Z45#IA%r~B>+_i7PZ0er+mGztxAeDfz4HB64a#CTYTESw+d)za zQpyN{%9(|~d)sTT+%;=ne$QQZC2NEzib5!*&|1^D2A8@o8QK;p4LJp@v6O{I8;L_B za;B{(7-^7F;-e?#NQfCBKtw^WDv>Iar6Q(8X%)U{2_a(&jY~l4&Uj%hZQCNOrfD20 zWh!g1T7!tRF_U~l?IJ}{(bJijH8Cb?=cwC;!WQHdi7{c7A^4C=RumVqFJAmxk#$QfpPm1=#M|KOj!?xVdl`HkJX@5*fo(r6g3#nF=@kN{3sOut-_nMNmIAF6IcKafh;BBDkb*dH z_;B7d*MGvZFFfz@U;XZ_Uz_QbZR%;7y{{G9~y~U)<@812BY_$-!C~)4R zmBLzs5D7tdoMK8ysS#2TQ$h=gloAP)y*?>tB$1ReMrp_iv;i_?AV!R_DB($Tb44qS zk_vJ{8%v5HBxog2Qj>E+Xid&g7>ib5t)=x5QXoVq%7VgZybmM<<7R@<7A-R`mYN{_WoZ9FTvuK*dX*^Nbfh`*Az}^1l1-%R&hu zwaP{tVXVdlH~sPw0Vr*|*+Mr@vXEplN_KZhYYIKp9I29)zGQ3W9gU97tJ^bHW&fHj0cOOus|QnaU~yR(uL##jWAOeUpB zN)aIh${2#LyV*b@Cy&$$LGCV42vTsQ7*I-~q#$R=(%{+_DFubqgcxzn7#DMQTX`Ytc0tFY?-Of19k$10%osx!887%Oq0`u6v7yp5lToY zQ4)lZq~H)zBBaFmh!P+KAS7A{d^?7u#%h; zDI^M`(OPxG)jNd93~NV>sk?(I&>zeqe1im1Xn{-!xm(DbkvWsIL`jJh5^XFZB_I<+ zBt%DOYohmr;EB=U>xM8H(@i=MLUg!FE41haY-n3j666@rN+F~s_?p%^jMap;K@yP& zQj9=kQcrNHo0ElBNWe~kt{~HTm-j6$vZ*i617f~aMCd7Roz9$h$%~AT_cR8ty@F|%_L9^`ZSXoAv&y;bLOE3ALP-! zk8_rYn_B=f%NrXwXPF;VD5>!wpp?W&2(CdYO(L+UHXJb?w#*)V94~p@yE*TY7ydU4-;(q6DJN{VW061q>y2OgH?I4) zkCP_L%vB@GvPVQ9g+vKWa18;7p+O=*DI^JUH+Ni&)G1+&LZlX@4W%{Y=H2lXHa- zkqe)F2^T%*+0+xb=hp9W)w}+Xt+O-iIOZsFN_g*y3A8B*DPpE@Kxs|gI3}&f8i7$I z5<#WS6jckxtz+19pBGY*oflFmp|mbFAPZZF*sa{r7dwOp^Fk91CtsC6^Il#a9}^jKJEhk;Qzc2DL2S@9gqm2 z$XVdp#Ok3V?0fL19D3kxMo0EgPu5v}bRW9VY~HbxtO~Xqdm=}jd^$&+cq;ST7qE5? zAp$uM0mmhmUB<jhrh#~yKmuyQ%*z*P-KKLv@S53)C>j#AY){Qz*B}v(=u)y zKE@7NYl(^-sC13Tw+%mEAk!;wYh#9!nqE~fC`&TnT8~l!s}ywz_+eyzc0f#?m;zc# zd83fX3nzo_w5upbFXn?v6RJ{r# zp`J`gG1Bjq^sJ`!ftUlD?tHFojG5_K6rGGw8H*2|;l_})iQpYqf0ivfwvy5aArwNC zjMi&z|HePD_qJ~`=v8c*nZx;pjg2v_3yg>B2&rf%6SUSykqKF0w4|&8N*U&RmS)c# zeC^h6vFn^mc=B^Er9W4Yb0Fm*7d`Je>^k|eeCSVJMcIsyMM0qiIVSqOiku^LcR$dc?<0jxjKnRJ^22H0Tq?iDK)|!|iwF@Yt{P*tJ_elv* zlqHZEP9`j^uhRHVu*x~&LL?^`6a|t%iV>qBNll$I5Lusi{^FX?(w_k^2;pcZkuUzk zJ9zX5Uu14z7}XOF9X`aQu4$SflgS38gp`t)0>l79l4C%KjJAg88=AJo`xaksuyo`I z%WJE&^@zFIil2V_-}uy(@1z-*9W=;+g{_7^`{z$_XmORXN0 z-*W41_wh#`{0y_3y6p~`@lf;rH~cPs@e!)BVtsjumE}cNmKMpaM=L{00!i-ZNQj6G zc;5}o4B01)QY0Ty84v;=GrnyZuB~z4z&^Cqe>(&Gg^s`2>M7NGqe2xhYqapig&-4&D#MyLMTEg_}4#wE1Ub7wc(J12M$0=hzvq$ zymzRS2(BT;j0lP7141f{(P)`*b&Ju06apbMC@BbSM?+*vco!HACoC^6l6}KMU-OYa zc`H87g0zqYyG}lq7r*}9967v%l>&u8ON9cgGKkbIf=iuHuayFkX}qUy8eHQLVhUBW z=macl3QA+JN>dm^X*9Md7>&lPjwiIEt8EQ)!flM;{_LYq!LFCnGe0`5117b zWR8r7Lq>H=%9)-~2*A0BRt9Y~amtC>5LjGV=DO>@!`=7X$Abq~c=+K*5IG}+qR@sc zRLA1Ugq(@NBco?!d6D(?b^2`ZPj7xLf&n5A$>RfDdie|37-n)zC^A}r)`m!?jS-;~ zDo0XIG@<*xu5HLZAjFh71GKH9b&j^JNjV{fpilxM1=dQc(oz%!ZR;7;0bwl5>osrx z$UlLoJG3AKH+|`w*f_?;L_MBBjO3Kq7}uRNs{~mJ>bAiM$&Y^cLzX6jrEz56V$B=h z`w8Clx$ko2S8n1p|M>5)?PTt`dpB)Uv%IoGY#Tz(gp{W8tfq~U#9BB!v=432n$| zAsDZ%uy_9otFh!|@A@Ez9(jNZpYyBy{dGU$oJ*cce^!$7h+|IL#Bcri`*_8b|H7Sj zJ%HYF0-=8#kM2JLuBFrlpAu3)r4;KctBjh+wI6*SD@P0{3pugv*i9V&g!5@!i;$Y+ z1NCG=;{t8tJ31mjgos2!@>o-J5GnJE9TZ}w4UUi@q=;{8+PWtA*a_WIQz^-ys<{2; zAM^4zz82as_(=AV_r3P_IQ{gKNli=6iQprndIAYd@a)~Qk6Z43glE0x&w1zPzRMf0 z`WOqFxAVN;eKU7_^Gkf?Lw`#Qa>~a_Rt~j%^p9V~X!!_l`pAE9!edV6jUTv%w}1Sb z#KFxxj^hB9XI(w&r;+eHq(!ROHkm z5bS$ojlm$Z|Hxrt(^4r#5{mJ7!rl$XW6yaiFMHLcoN@ls_~G?m=1c$hZd#X^nVsb^ zXFY{K{p`26`HP?7i+}Sjj(_5LEbZS%QI!0~+ulxZ=2-5#^+pctzJoh%_%dfc?IPZM z)u*}p2RC!=)$ixNdv0f8>s-gLTtjjdbG^*LJ!>3uY)Ouh;~%qw6VJGi;0~b3D5J?r zk~4%1DMTiX$Av&b5`0UJWv8irp|3~4$;q*jC}P8p4AE`7}( zvVGSUkP4x;@tG_C2I*EAkH$34b*_U}4A)0o{*L!^(WNhB@7;Iv)em0DuE(FwGhX^i z&baWGS$y;XmiIoy_LENJ#4}Fhmo9uUU%%>adH!qP&PivViV%SxUVAi{+KY0xc+mGVBU%i5AelsyR?z-V7_S|_VC!PHiUjCPVg|Q{4 zU+^Rzxa~*$$KU-8+fO)|UwQdu9Ch3-c5L5Dnj9hJjBgs0)$F_VJB-$c3@RXcPI&Aw zY&e1R9v2b`I&nW`$bv*7`c8zydnAFM`C>bt_W0wkXneFrcgnw#8LJgC$4)Vn9VSsm zlg&IYy8I=GskHj7FMN~Hp@(QD8wjD$B&?ChoG7c3)x!r^S>C`17_Ba{Zi9^6lVeu1a|kKbbJt`aF)z>{;Pn%jgf=D7dnZ_$he zH-7Hl7$3a13m(LXB2#G1V5VZ^Do#FO8zLr3TkxgNe3iKw+0E6MI(tcLAfbL{N~O;I z9hBDJx@Wng8n!5~MS+kCTb5X3&`MF1C52HGM$;=x#;fa`cFwtoFz!Zt&fNFIJ1HxJ zL(;^+sA-5oVwB;L`yS@h3tzy@mTe4aPJ*=Le(S3i0WBRIsG*1jT$R5MrL|Ng$A^gq#VdO5>o;ph|&Lo%}-@2 zq|~I`nSN>NE+}P?TB69famz`MdmN&$h?GgTA`MrN!6RdbBXSaqhhy&Dx58y_d^^AL z(%%5!s~`L@cYgaDocHT5=aw&giWAQ~i@~NHJapUFSUtSN$>*KNsZV|;A9&qwa`8)F z!TRDoJbdT9eEoy(V{Y?is<{Pz>HKq;-?kkXP>)CK+S*5{$oiyVQcuGR8B%J&Xwqnv zTvW(*3`9=>-E^pvxt<4DI%04xd6hFMR!UB0inyz1nmT~b;jcfRtb{n9MsZk zLJSydkRhXuW@&B6_7jdnxNab3y`6frO25pVhZb69W=i%Ssd@89KFcXj*g{GxkP^>* zqK&%;f8g^jJH*$XBm=H;ac?88?Ewwu~_rnLRUQmj!UHMUrSHE99g>6_8=a zi6^izuBqk*WTA21buKvF(2hA1Q^Gq>i1rsdD5pfuk&N!Be+-1FqX|F=kP4bQ(d$`o zjw}_K#K!s>*+Yz>1B9a*sSU2KL6itLMo2-1T&-=qBK z+K*x@!zoWWmka;jm$3NAes22sHDoC{@$3s&J#c_;UHv)M4=*x*^bVf>(wDO1#AEpA z|GJXJA76(p6>ZQs7sx{3BZP5H;}ba-kP{+Edi@ITx$A=gyIGV%z3|&%E<( z+;ROK2xF#NZy@^(PC4s1F8h;&#se ze=cXR`Dp(2O~1qH(qT?~(s^9^mfz>%D}IHePg+1S=J+$tV582|lX3U7m7+_y>5liM z;C^A6god);gOKT2g;tqD33}GhFD#W&SV8A{1do>D7i?Zhg)KU{LJ5IV5|J`mP7TBu zQBqM^gA}IQ5k_?`r;_xH!Ae2TS_WlFAta}sw1wL~{(io7^_LK4b2r;kA_vdx9Q@Ds z{39ovbvE{S@}zc_Rz}OBMqy$PJqM|>ug|Sy`LeNG>2oXdi6hzL@KanoXA#}c{)LL#+AXo=9KvrLRaP8qMr38_oULBZ0&WloqcyK^lXs@^P0 zuM?VtR2frPGy>5!q_#5w+#`4J&#%9qE3SMuRT0Tb;hF_*_}GVu!$VyEv1{0M?dQ4h z)$ioY=RO&c134W+2;E^5Q$Xw-Rb)Xu%zWj8AK~Huyq+^2Geg^q$w3f|z=en;qm`oU z4LaX#nr~cNT&F)MQO1&dL`y{s2?~wMT^J(7fKZn1fB6{~Ya8miB|1qC0j(t|fKdub z#wdkCuywxAk%teE&wVVyJA`jp*t9^=Oz<;;>^qtfqbH}#;iXlq)r^~xr(gbJKKaM* z326@3OMz0ZzW?VjdKk@npirs3xU=)&`kkr)QBdgL#Da7fL2pWS@9%D_Hj_Wdtin6Nc8AUmD0}7*2QlMow$(0f;3>MgT-)^#f76_2R z(c7|}^#}K`w!DNcDzx&X=qbyxi|?k4m621e(Gvwi%e-W zb?pf;(TTo-(0Jx{?m#vT|9hOHEr!V|2JRFZJ)Y|CtZ3eqtzwu{K_|2J$#5= zr=P})-}c9BKXDG4nmjoO;%L10)Is4xpezay(8ey(cj(BFOI~?Vrw*n}GYK3%xQ~UZ z+mYP@fOFmK@(Fy3xX`JK^K*TKklg|a*#SW*GG$egV<1o6NADatc6sGV>+pHN(&8$| z%vwZJT=2XL_~4r)eQQX;p+qLcgv%MF6?jjjE2JpM!9(mKcua8yxeHKPqdD(IFJRw~ zf5^xG==E&dbs~?w@FJf3%dbI*HL~;2jJwac7EGXL4W)*<4ouoEpf07P(w2Ihcn zfj2o5i{Tc&aUr3Ez*>dLk-~KG-RrOZIG4TU zwG>4|Zd*i`Y67i0k}DML_%N5f{q?kC$LzLwlx(3rM3x$nx-Cymi20+@jbh{?RS;Mr zwlLH#GOinHmwDkIyaD_M^hywt`|kV^mYUX0lW#&GZI|Y6CJj*toDam55n7>C7aElS z2NoAuUR`5jG^TDEg7*k1Aa$XE!dm*h9)rTLd9KHG*L<32s}4=CZSeFLUCiP}z*Hp~ zL8Ub|C$dn~F4CK=Nc-;K6K{Si58QPS(Vqh;$U;J0qm+lKtI(SfENoRsCLLlo#T3UF zgdK3?aO8$-KF`0r?p17?lQh9or!Hw*S;?l^8J5-@7eD_3^3p1~^*Aio|I5|P%~bTQ zq0$l&Bf&YM?*_7xnzF30MS%;EHl$xrjhNEZnGhW}$q9?5EDV*gC^AwAMD7sM`oW*_ zqnmeg_8Gg#Mai62oc6TmarpMHu&^*g^pQG&AW;^Y)HJj>}iXx<92x~M0lc+^Ps)EBC1Aga!y_!53fmWp1 zIllX)uQRt$ab#%;vOrriEy!pRo~o?Sx}bI~jgO4RVYVbjcj#e=K7?yvs@mY1My5lZpH8-I#ieVFLFDniVe(Qw4t#s(Wr zi%(sGRvCrSnzAUFnHf;oP61HB&U267a>cj})|xI}TUG@^YTD3w^VS*$gBencv~^8o zG&_&l#GTiDi?g5mJWT8=Ok0oM!ral1<3IoXQ!LE&@F-drDXgZ_f^p+$okwR+?E^D| zlD*%*mfODnefq*N4g+rf*K0WN-RsE118kZx99mwco{U*uUB^X_2%b7b>ZYYMl7u2F z$xn7a$mM_j51e)J8RT(|5U^as2j27+Hg7UGA0SOF9%TqAF&T|%ohNjOEiwX$Af(7_ zRrp&TS@}dK+Hdb);j^+;Wy!#}b|e8-8wRs8h?EGyW3^(o-$UlEmod{XxcB}g&U)(E z;2l`a@u!{0(u!dBZ9l*iiqa}(%YxQLya1EI8pEh|xXFmYOrL%c*|BMs{rB9)_JtDH zHY_i%&`ic`)D5m_0GKqct5D@c5M9r#R~jCES_?$8l3k`CN+)gtgk2pSt$nA_*))X?iT3$laIb)c{sK%Mq-G} zEzB~gdMK^B#*UWERwYVwfH9}UaMIGamhq88w0fS$Jmm@C8dzWD%%`1$nA^$szxY*l z9W_gqhH={>1@x@OC#dV1o;6Io@4PDC;A3Vo9y45DrH-BK()dUSp3+);&Uhavv}Q6H z6Qy9!1BdvvxBLZ{zT(B?^>v5|F}J`MKJZDF?*1O5re-{u;A6t44uVM8@k}KoTI(() z=K`b2gyCpROi*a)@7TZAEzn~&+bf!o?Vv1~pPxnKjB6T1@XS^frB;L#h%w+=&twX) z%3hC!xr((1?xnZwWVRhO15rTJaPkvQVe<*6ap#TSXFS?KDwyk405rZ6*R9b^nqMR@ zMs)+B%j!%fHClElrZz-Mt4S&2W4CL9iyU4Py!em)m}k7?VzO&G!K>Hf)@$$J!Eb+o z{=l-nx`K1D1BNNngn(S0WJhWjMP5TPVHDNCDFBXm7JD;dFz|`@$LH{xXxdSfeT*nWZwFjPs8TN zvAXKJg`b9%imJ;BCNc`qwF{@cvbL=;RRu!*JlN!X!0JxLeCUxS?2c3Ui!c8N7eDVj z($Zpw%m=gF{;eN#-G~2h zj3y0wTA?VdBF2RCo)7{^)d5215V`BGW$0Q(F|lb-`rG$TkJ#zkdRHW*U6`BcRKye! zIgy2=@c|zrMr(}LC?%OKOSFWQm1RuTqfLqRwRJWx^f+|a4>^2b%<*SF5u-DCJcg9m zv~x30dC^PQdD@xOUbA#)i9?5uFqt%zTH<`b`+!V|@p#C_*s(FHSzm1k)n-n3>a%$E zt6swkUilg}&j+Z-P*_CSV_Zu<{hq6N;D#?TJ7-y0Sz$PuAg19{i9ia0RNdSODNSov zi7X|J?@Bct@KdzjGg}n?w*70L5Wx9wc;;!}SR6M4CAtianKlVs=!ziLXpFU}n3(S@#^9qT#eg8wEBh!R&?z!MGmH10mE|R>UJs9;9*ybsO7IR!ciW2DBOGv?_^<4sv zE&(@b95Dq_uK?)S{G=Xto}UzAT-Qi4{a!_3ElNtP%FGRB8IOjnt*+9anZpC4jdf;b zXA!~EuL`{P1T5pF6>>-%wS6=B$WQprKm3GAv7NJ?^(&n9D^EtM4693IUn6pWz96r! zBea3i{vw_t1zCxXkM*_^L*lkCT*rgozlnPF077L%ilipej7LbV@hLNETB@9|wj`%a zJ00|^Yism+JqCl4>;(M;MjKX#6GBLxrd}A@Nz2+~+%=Or>AuX39|{@3>W;l@t-Jh< zEhwyJZEcl}jSU8K^VDsNbB@8x3~n@Jc6O$#LFSA`vc9&;%4c+85D2wPB!1ML3% zHSGSvr`Yr+wL!6GCu77p&4gSQEG{l1rzzULl+4Zz7(aR!?c)9Hzq#cux=i-CO^imKnW}SA z+6eugWno}2T2R+5Rz#LJ#$?};P#vhtu(G~Rzbfe$mZoiSsneQU=er!F(O7M8Qv^M! zC&U=(mlj)82-P_)SqgjtCbfv77l5b%zv|QB`I+7(p$Z_Or+iEs!{X8rnn}(4maQ~R z%V<2JUv|}R?;Z2=3&iA++R#jDMx!yCW@pe!k%39$DYPa{YLe`-$ii5xEzrQi{D48P zqMtIGH%AuwecEPB9bjW)o$_EscG95 zqYYs)p&azFg`pYM_>eKyGHDu|_sq@=NK>F_wPCjGdYJ1j9|Bqh%tYkQlQ#Fy_A%v3 zYtbt$N=R0gmzazu%x~RF<61V>H|X~&tkz`LGMJemrG)dHRI;|V+WlQgdR3p=yUtmS z36&GRZOOoBJfR-fT?aK~>c+9Wyvo|@Dn!rf>KeoGgmKg2>INS@!_kn8WKuVj))HgH z76s$F#ufz|!x5V{EznFxAXT?}x_;EpE2V|8WYJ}xw9>TR)3~m^B(wr#j#7xemfX2i ze|33da=ipL9zMKsyOgSxQe;~d#4I>)@F2tCkh!f}X7b27K zq-!QShmsN(yB=!SAL$aP+L*2&OlCM7(d+jyQc_hFS>z7yWW{7W!G}np6jDIU8Cw>_ zlvo{3rtb+sfXJpA`1|%P-3)9r7A9b(8n+-$&a<(;K_Fw5>dw3^sGFv{TPaUpa1sbUFlk#-N_f{0r|&jMNTe-r zZQBX{!4X5ixz5V*ZA;G3)-BptCXE9G-g~UIxDYW_kHwW0q%s|#1+=!b&eNtuOqoej z6LZ1{NeZ42B2sHy46F^udD6H%D2#Y$arIWI!>OW3-*7e6B7*ge4Fup_*Cz?mvb3^_HU=dnN|}x- z`A+kRDY3S`)>+@i5PZakh|(74y;$8Cp{0m7+;{lv(*>%3_T~kbQWg&{ZpdFcYVLGZ z^+n97J62U8dR0YeYlM`{3}$KDmVjh-ZjQypC8Smq(`Iy4Rg7Clqyu6CL5lw81zbO^ zgh%huLLh{o37NWXx}JMZ#6%Zi$q7HLp~o1R)NNOk^QlukbMB(v#xS0YDXWUL^);&g zpd-v_YI8eJ;~YY1Qi!xJpvwX&1e2!CF$+?H*E# zCVyUnfWdmY zAcZPXYa%fs+dCE9B(k#a*=m$%hWgHI;`79@$%|agY zf)feJ9Ym=_4aTV6IJsCYluoq$^w}>T|8R473VZ>)2=&gZ4)Q<)?7Pv`*GF3~%Y3!c zJXlnP&a#wa*DEzE$kI%&=q7?XYH~TrLq27CONU13Fch*xbvq9M^Yj z7A5mM$7geHn+Bx>J$W`|&fqNl1Zh=q*dM6!9PKR%#mn0R#d=MGqVGG_Wl7t%oSi?U zF(bV(6h+DQ=2te$1?O)(;&!)VaGqu`97pGO-E_R#H9!5l@1E^@`z`Pd@Evdi5g`3H z4mv^eO5jc461Y_GmQK_rNmPZ17Lg=Tq0y*NL0==v;Y8d*RDwQ3=oMd_g5oGd0=R|fQTm#R6A7e002ovPDHLkV1hbZG{gV^ diff --git a/docs/Saml/img/apple-touch-icon.png b/docs/Saml/img/apple-touch-icon.png deleted file mode 100644 index 2d320cb5e1215894ef37cf8c6fd7a0085eba06f3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 8358 zcmV;XAX(puP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6d)&eD=4M_03ZNKL_t(&-p!kNwC!hE-#^bg{D!^v8SlxRax-(2keMNY5JDspOb`X9 z)*7v>qAhC0sue1UN@i)9v|M(qT zZCCrh?^^qhv-V#5yuast-skxa&lYyq;-JsYWcr;y`QbNyfA5mB_wQR?TD(f*RtR1v zAH*mnB7(LC(K)SafP?`AA*4u15MxAQKr2CIIVpADYqSs>PqGRh6Os~{GQ<>!K#1K3 zjUG%=(YlSCH~0iz9renu3CXxh5QDnm>WA3ZM8MP3X=VM#_4Lm<;aQ#(wiX`>(^ zQsfz~bwnjpbxV<13Tr_nnx>(49-}jQnZgICTgSAnlU7Px+om!rWYFugvUlHbtoncO zv;XRS@4D+lznyM+%davh3v}x}A9}~nbMaltu|85@lHsV!&iM0@&Q5lmZcy5{xnAd4|>s=+Z4Am@+4{HP&WWs|hiZ zqziPBXJom-2S*Y^jLs3Yn#>qPX{^zNlprNSjM&}H+02l>bHP*UPAzqtRzQ}Q zC~HaHVY7^sBBC|Hd#p7O1Cd1V5n~iZZt>m|QX(cOttKXD+m?jFW)>o7r4c}Bg^P)4 z)23dpr^e%9I&a^~3+I=Yzx>dXM~*8Xzi9u`^`qg=nK30akQ*%sDbEUAjLe#rm=Xyg zGhl3Yf^BGsAwf)NV-V?1OGsFoA<>g05tBy*lr^LjQCgFtLmQ1s5v9~_fFjmtw9@zl zAq0xd014Mrgajrt1m`hYBP6ue_z;*>)07#c%ngMx>};GqaOU#d^+2I7KL4yU&)v89 z?oy|H#wZXaMk|!o61+ocgZB|3cI`kZl5as-VhA7#NeQjGAjIeqAVp7%5t2en#Ar=I zL5wI-#NCRn1d<5e?PiVDcpnMAB}G9K2?5%W2q}_MLJ_-D6rpKrY8S{eD_NE!!Kbn) z#V8>ud(KwvZdZfC>@7{Y;`tLNlaERAOs5nRMhTheQc0p`Qaf7bNimV<1v+{Z5QD?} zh)M~??mbi*C5pCfnGAPmT_hQc$xE{SJf_ztMWLO|n2d(hvuRg(jYeyOZyG`nlz>tO z*H$?1QA8wq6ha7&x~-^v#F#{;HJMVBxs{Yc+8B+J_p=L4@@JUYbUK$@jmdM_98XwC zeOc(`-6^3^BwD(NPi7TmW+`$@R^<5DHU8E$NEPVM4XCRbn``Ts{yb-#^Fme*p2vZ6 zF5rxVhZrm@po}57z+||^`l;h=9Dk0}N1x*O(~pyncUW3pAqj+(D2=9RYFeLA0x^Qw z1r9z2YL~D^cfdglMhT5mY>h`Us#+Ej%%;clKp3$#euV5 zz`OqVPVW8mC%E&&zr$Q^(M3rN0Zl@b(6*k+c}iju{b5)n{jpIi-{=`E}*PdfC+F-i1&EnpDi0!d*)&(5A@Jf~r9$;bR9OhRtV3X@^ zzL}TZbThyAwx47B=;O={O0-t^Buwg>vdA%7QD{v}!e}yM);dB0WfV4Ql+{Gn zDO6_hvxdoRM!zgEO5?rX&GA5_rI(qm!b(CTv`x)3r^dYL9ly<0*WU3=r}@o~-oe3h7D%Z=WFKGu^v8MTzR$3b zE2_zms`dzp$#lxZ7_?6K07isaQ!^OM6XJ|KE6}paaC4p0kA9PLu6_+K{hl`hC;6^7 z+{g`hZN*WgS47lWF zH}TcK{GZJAGA5N{<^xIuYcn*EVn8cRA~I_lnxH6i%j3s4ZqqCCy~CHExBu1<6FMbY z*X6d+8m)xr19=BNfy8iY#LaL1Wv+b1i%BU^SCQM^^V>A1pT-))#`+qg(TEI%C{2n9 zB|>z*LoZ2CDG_7Bh~S;aXhrKI(K*JW5z1O*w#5_Qet`2|d=16~_Uu1EpwB~JyB8E_ z5wsF;Eg~Qyv>|pu6HAN{MdI-jTem3@$V8DTO~2P?(C?#_qG=rCX-(}Mt!u%zScJuc zhk5lIzMGULNK)MK!4D8No?|qbaO(6bnbBm{Qa3GDghawh!a2vr<`xe>_-&qi>N!pw zdk%@7%xF^V0K7_xx^5Y7Z&6K#>>PWFPk!Koh*}_pF|T>!_n^uZtOy3kl*VX-_nw#_ z#YjS^>lw4E!nF;ggo-gyHw|suF?_2uJ)zdXDW_62ILKGpyz{crQoYbpgr{{U%m4)h)(D-@=t&7_t{$Crpz-M?}%EHL}@DIoa^IUt=_w(*g-pdQGzKp?w<>HrK$XkE^W2{_!En)s3 zX8#pz?@TZ;;bO!nMQU0q2cP`FZ?Uy8fEL~1 zTdhe6ZaSiCl#u6^2Om7bpWgpXEF&o9dCyP%W6oSs ztgWuoxEdc4gv9*bgV;T1am`J)aK^p^jCVGfjb|MF>u)o+w9FOPUq^_E(Z-k)&pga! zue_PN{^a-hyYKinOm;T7?R~$)@YrL7@fN1vL$v0={=IBX;I04u--91A8Y|v(&DC6d z>AA!ZNueubQH0t#oR5r~meLwN``0IaK+l)<@L3DRtu7|C$gU{Tp$J6beamz_;-(+} zX)b@oZTlX_4 zgr@NnMM=JV7JCouA@603wgX#7{u-O-L=hSvXnnwiNb5a*m+wBiHo8qOl=krXE4^Do zh-g4kf)w%2BMOw!Os0XGe&Sa4uPlN#eBpn5oYAo-NzM^cmtKRiWIV2sl(_7bujcTJ z53{gGbKv~5Svhne_xzU+V{D&%Zh@7v&f)ZtCwbsApX18c+{hI-T+fA9U&FKCet<83 z{Nudn#+Pxr&Nny*m%ieq;2R=v-(7bhx~r<*c|wSU6!E?z^|^*; z*T=URV+{SlJYhP+D8Z^OT}hn~721F;2kcp1BD$8X)eY8(4$+ zJDWjh$%~sFF zP8{d%kKE4jXC9?*JuwMJ61l+U@uRFi{TwTMmsnX|0^36g;2k0nqZKLw3cL%DGzl=G z6j`358jsC1Mj}QVi~?;m$$9qdJ;dBxjwr=!Rx#aJC5oo@j^rI}RWn#Q#2bI{ZJauC zgu&b*M;>^Tlh5Q_aMdM@H-?-(ay!M`Jclm2it{di3C4IHy8Ex#bMP$c$%v{NbLhes za`|g+;m?2TZ7eV3#3E-ptEj!h)e5tEnpsE?J#%L)uy^l4>g}Ug1y<)c?>k~mA}LK0 zI+E>uU^Jdm*ELn$P`gO$18oB5Beiq%miAEg`-miB>f!4#RtXsao#6bJ-OQVR=eM}@ z+RON^A9@Xgg@U7xKfk9i3qK8>}>DQ>t`tGn)lMagDmeqK&(e- zqq*!=S5wR{^08lkCl_D)N_vY2_~sp-Vz6g{*T41WXsd=V{+Ituf6rdLi`;+b=b3DM zf-^6@m^b~#+xc(5`yrmc_kWW2=V%&-SAz4Asv6>2)ukXBljZo35Fe1F2+>0lQcMUP zvLYo+iUD8EkO)di*I$xCJ5QEbT!g$(5IqvQq7+>N(cq(JFjw;M9e+m8T3+>|ucgc_ zsomiPR~=%{yZ#w}{7-(F(dG`{{|j&4CC`p2flF_^i3dJ&7f;^zSzh}yzsv4FC}WY>cEV6fC_L6=^sELGk)+A6_(+GBRd<(_5)2|Jt%V%IB(+7L)+)9IM((yYmBhOZiO zl@Q|yCZ~1|trA9;OhzO2EG<%>ew5F>|GixIQ*YtWMf-q0&8*?suieeVci+K_u6;R| zzWxU}_p0;B`vnk5VFuBmYzfTs$d|s#xBlYYT=ar72!2YdpbcHC!WJmgAhLjO9ChRH z0x@=X&(qZtkI;BeiUA)ZCdNozSIioZ#DKM$6gp8T(;90HaXh6_n!Ge*Y_l>yhmo4t zHl!4ZA#!?s6Kf3%XCLCrAN_MKc8O!3Bl_D*&-D?a<~U!s5LY_563O{8W7 z#(*+}Q1bZaALLtie2SH`&t~oTb7a))Olq`N=-7ELg)Xr`N|CCm@xyKUd4>xSA3v*pe}TdnVmZg@qsK6Lv0J_s z));Jph2=g!__m+t@h^XkA9}|-fgPY>_1H1SRm(R&c_)XjzLNf8kFBF?Y@XQQ;m>`M z{^Ecidgm|EUpmagU-<$`0=d@snD8V*OxVFZnbJs%%qBC2>!)`m(||=#bS)#K*tNh; zvc_1WSse74)-7dj(Ywg5b&eDxq7`nk%I5J^_8Z}hJ$vY{9AJF%8467&^Y5blD1s=3 zmYOSWxPs)K??8po7-d=9e~9y6ejT6vj~``e|9-M^z`=_T@%_K_)AW{lFdIVJKuf|W zXnp7c4M<3wap-LJ?OOrgu(>&8HXETN5n`vdhm?pBVhpr(i?X__u1dPgUNsHQx7~xK z?xm#DTdlG@cjP#iUV0wND6V_`E!_Fk14K9L#9gh(iDX(>d-_S%j*mHT?i^|6P)38Y zh-h-7x%P*@m(8OmSURwW{+z{F)m6i4jAS{;9@+qwL?(eYDkfD!IaubJTfPU?&%g=K zKK2|c)HvySVpM`_JM7vxk53?~lj&8}wwzd7XLD!BcrvAJ+Ff}c@;qnIE7`Yao_jv> zF?`-9wT_oudj+-bV|xWw6r~anMI91l8u7`0`Kvtqr6-Wy97!u^8nkhs6uo)FxtH!^ zeknssBE>`$jY~O?f8#m+>{s5xoQ#>emL`HVuxEZiMZrt1zJxR!Q>UDJ{`5~+S)QkF zH7Z6z>rf&nrOERGWi*XX#FS7erOx`6&galdD6D0^SI{>atGZS~yT)ff{yC&9KmxD- zhd;;8>1}$Yr49)f5=Ii$WP&y|5B}-<`RoTj!f4n+o)f&nWEx43d_-)CbHc`nF^}H; zE&l7<{y7i+=l7$gN6B(csT2Uys^#dhO@8EOeikGky@K2S_`j1Cj$zdx+E5lb3;mKz z3(+++)sz$yMUkU+=^~jHlC|{noJ=Kht;jOdc^?6i((E~K2A})rN4VjQw@~^quXx>c z9DnTZbMMFg0|(DOhzgG2TV^hzjmGq0^^tq|;`@(s*^m4<$}V<>k?DiUdFZaMa^it+ zq9*HXub-q(U~Mu%`M_{iA;z#c=yCM9V_f?qZ|0>pTnV!o>GAxN z&vV5M*OA6M9DecT9Di<`?WZ2V^mf@F`iWv8Ul*Vtu4-f`S)?_+kYChwS$yB{^&Q~kEvH_ zniiE3NffnnjK`Di9_o%32|}3}p4pt;rss2g_`Id^R*T=W%g^=Qk$Fmk~H1qRwWJVL6BR7g(-uaL&1SWNh zcQsqbS2^d}>lpNezDitiw1{;p<@fKWm>gNM?8xWMp(~JDItkV087aZE zs{bZ<&+k;7GVp@^i?`amKr4{o$#oY6E#QKuZavO-wt272=_|)KK7B8TU;ZlkS)wd6 zu6pea?XIr_r1hsn-Cldp$-ARD|$6eyF0Jb4OVDvP&PwI9NVdH(~G_Q@OdkP zTPKqVbD5==XLMu+oDa;}7HcfpXa;4D4xaINLVsZR`dwe<%*(G~>ChsX2Uu2*)AtZ_{r*SQrHpGHV z_IjPr8v-P#eV`42%v!9`EcAM)7#NO5Bx~8)*k}b#b3W5nsJ$ZOOI&cn_wvKv9Rmd(vAs-~rh5t4LMCrS}wB*a8akv4V?03w7WWJ+;lySh!zUzvN|Eteg- zb7xwS8e?yq?2 z{(Gr>&3Jp8BF|`3qHZHmgv?qBqiNcfY27fc8XD(md}rK-kk~Wmard*^Z!|u5>bfGt z$h7vNi1dnrJj=*5%=dasMnjyB=sagKnNsE%rBTEX*cgsU3F58z$# z7FaF#0FK1Yq-Jr@+buf~V`5m<0-%gRQu4-yz&=dA<@-VXY{wSv`FkZ7jAZ*%=Ny^R=zec}_xM zY|e0d2S}884;LeC1X{^1^`rLLZ8T!uBx)rYSpp=re)2C8alw$In?VT-pMUUiL`eljI8f7ix(S%51zQ`$xf|>Ie zYan#KV2sd&Nc0{_oiVz;zJY5Rs_BerZrN<$<>|P6|lKFY3?iYY}hm{$BrFKm`tK**4H;u zo)st}nax1d?qrlOYa4QFLAvpmn1ryq$>2THy6zspI})nXK$WIx8XDK&oujTDZPRuw ztEv&LX?>(^TkV$+K(2FPs`y4{WTj6O~15mew~nQ{L-|5|VQcWelU~49Rk~ws$bvl7a`VnKT|B zB0dCy^8^$Q>6|VE=UST9}!_PYIQr4~(ZXHYUwOPp^%?ATZvwub4iyIvkz3XYrE#i-WzV zHn&n)_QWc|H;wfA1L~$tw(N^@j;gA#TA`H&ZD~U2O0~B5w(e3-6yAGOiroaVk5qMy z+7*7AkZ`FBLQ0WoT@#e0s%tWn(KrWM6H{bTH6TJ!WcV0pePmWQ31y_N8;MGi)`sz{ zN`oR(n{{~NQ;!^bAMjP6)^sCfO@ghHqk7ahx9{BL!I>c@nN6pZWe*o3$r#bbrj5-_ zDe{bz621O_;dDllu22}DZ5?geJ(V_4kLw(7*`D;3eI`bF4(SoqzRpz z(z<}nbEb8Rww9gkA%ppOTJLd@)Os(ij|ruj&SoSuXUzB1w@+-}|BdH2|1iY#X{}^E zCAy*B-SP8ri0SnDq}`~KHhW98cdlP%N-L>+l%nXR)s0PIcZ@sBa@r7?wjStIg%CO@ zSo?%1P3s(1YoZutt;fZL05QO{btG$PL!fCI0x)eoiEaejdq;@SghW)Tn@?{WvaF=3 zYiW~8Rb3NF)%Sza=!DzdC#G~A}w8=#fOYS4KRwkkhL3{omOTZ>r1`h4M_UumnDgO4X1T??~Z~{0ku#x_+UlRO(AM*b#4&@I3000_E wL_t(~-_WJ?-=+ur&Wb?T{fR{S|9$9x0o_B~f}pG$@MxMIpqW7mIX;E^75S4MuOE;bUjQn_}Q21AftSU z6k~||rZAd@Fh@Xhb=BXDCE*8YG7?-JRj5suW1Qf!HkqW7@xu!$_iExwPFSsJ9+KE?NUAM))E z6xydTc$U#SViedH_U78S|A2y~DCx#-(v$$H`4$dn?PQhqqi-4`G_s7vHHlVwl(t1q zPQFK-`)yuqk7H=Pg5~8mY4w~ZN7lJ4funnYpCmsKejmm0 zI^W5@)HSc7sq7`Q*oDs2A?z?EjxaaHYfEpO8h@OE@;-jJvB9RWUtC?ogo`hvUUopeH2@VsCs3J64wOs3hABt1amM>Q}7*8oO&6(;~#MAZ>a5atT{#k<_C;QeW_4mAtO^GM3?S@9^N?*dhxFqXh2S_1RZKS!-Min;3o4boTRiI9=4DG*+DTTXE}DUtoZ LNHCv2rc(U_{c|km diff --git a/docs/Saml/img/glyphicons-halflings-white.png b/docs/Saml/img/glyphicons-halflings-white.png deleted file mode 100644 index a20760bfde58d1c92cee95116059fba03c68d689..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4352 zcmd6r_dnEu|G?izMxtxU%uI5!l8nr)ZF&&*%FGe4jtO*5mbhJzhV&et11z&&^B?xH$MZ007{+ZK!Jj01(PQ zJBFS4pH$0DefCd1HM@h*JNkcsi%oOXzj>qsEle$eQ7ApHL(XYdn5Y$Lk_3-J9p9d) zFeVfl3J47_g1XaoDXWsnBp9ZzZ74CI9RN-Nw{>+8A&#rBpZgc9WX2H3Ssv6doZP?t zS!g}lGvW1<9%?dj_G_x}3WUMN(8(x{a6_pd0yiUsf^67GGS50uSB*ORe5x6}qAf1z z@Q;2y4G{Lb?f21p)uTpChN&4q%^blZ2IsusUOhk)pe0yxPD6oHKXWSjv8&2pMdnegiQUtoXt1U0MmWAWu2&>3j$eb^qKNV z_(`JQZP&mXLT@U%-2rPy!7r|*Y1oAdlarltaUyq+yq^|d{B9_>t@Rd#@_KW9w_6P$ z^Dv8(Hi8pDJK{r0Iqq*va$cL=isZh0=1)wIoQ^vYPs$(rBz$+DY z`y}1}`M%-da686`}zw_w>8 z!BcqxVTim*F)-}$segV$ON*!Zl~dhX@Rz^K2Xurh<1-vjImult%O z!-WXvkA_agVuhluW};J;#r>)?^uHS;G?a?j;(z?Y^FTwOA?tzLFvQDf&X8}9s7Wh< znEfd_vPyF_V`?>kR`w_h@+%59oKa;NPVGUo52QjisO-|$cYE(VNmm#+`#T5a;gh|Z z8A0^l3UwQMn0J3xXWL7tY~OxAu=_hGvp@_%SZKA)ec-h-dfwIhS3jGBLL6e6Os;1LR zRDG&3TF`HV*n{&*H!oTSsLq!U5xV5!Yr6I_!*VhmwC3a2BOYfWH13AtVY|n5jv49e zcb0xCCZnt0i$>-S$k9J@-c!8wG#siu(Lgy_r1nfy+}!W9g-ucwp=&Hs1=Vs4i_q;dQL$8~Uq2BVA4o4uY!6}S`xH(Qec+{mJD~qgg@6W8 zipi@Z!ZR+Kr_)u&G);pG$tg$8#KPrsl&N3(m($NAU&9ogH9rVfW<4Mw>^7$&96g<9 zHQzekG9T5SS7DVm7EFY%CjChhfRyap4+d;+^0ng^B)~xKFG^7d2oOo|R8uY&S|X0@ znAGMb^rFQwGPTzsFQ8ZK4S@WO(8`6T+$Yt9{jGMd?jrTeb|_!Un`n9xDZu-fW+_aJ z4Uyy_$)`Ot!~doWUHW`(?F!iYvc5+g-(W9X<-tX*h%6(f;+A(OQ@w{WYSiq&pjKnN z)tSH~5g)03sKk)U+&GyP*?86fusX1ttpH1ng8ruC6UOddM~t>0wvZh}1cW%&7{tT$ zze(TwkA~V|_~nL{6YE#^RUC__Mx26zo*w(EfK2Q@R6xo`VkJKs^Eax`&*O*bw~*ap zyaqA_p(~(POY{H5+NIgewtB{|(%ML_wR8o);^XGTQ|{*J>74v>{_iyU;U*NTN}A%` z`8ltg(&furYlb!j%1ra!KPSiGmJ>f4c!bkAtjb_qmQ+aVB(QohO zRo@%)1krVtMPgkT6&3T*u`XO8pE&-!!u((3qVnraj|gN5aDxvqtrPs*MCZcO3i^Qt zI7$&BFr)50exhv11)82?u`ab0FgUSw;dpbnAtmz4k^&Nx`xMQ$5(JW}ry%)ry+DV> zS)TWjtXz7V6iK5$ghFuPiT>;;fAp)oy%%7grs4UwqU5+Ms96%`wU=YU5W-UGw(6iq z2GhB=Zw49;Yu<#7=soc@tZvYFIVNfkRPsCT&;76cYOONMwv!v*e#(X?l7eB- z&pWvVcaO;IKDg7C8bZ-+Hm`g>n_WC6%BL=CZlc``M{0T;%eYQ4t}V%m20okR=HET) z@)@WU_}tJOqiH7w2K%lpe0P z^FhhCX$ufUPCq4?C1A8ZSrVz=$~!VZ>;=kb8eaI;S1TKb|E9j*muthJe2||9pYYI$ zR@lkEo?K76^_v{llrL+?Swi1koJYJqG_-g!v?$ITb=q4#Rk--)fABD zh4Ibu7+f~5HEzy@7xoP^f$=} z+D3gYZ3W>%>m=U)p#UNOPPd&2cD&; zxb{vXTzpCjcJAOEA_~=RX^_BM+_BYW*T{zzM(3TosvFOmf6Kp0IerP4`MuBgFdrkZ zf9X~m0O$toCckMn8klZDxWKr2%FHNk1VLQE)$!{Hz9{*a@TaZjC7kKsC1dIUx*6AQ zJFZc8p~!CewW(VvE@yaTPFt-6n+dZ@TM582m7=-#9JoDOH#zYPe{)-Lza89t+w#Zd zvQ3k$)Q)mPF)g)_+v$Gqgq~*RwGeBn{vhp!IPgkixW8WY)H`S{&~om!keO$Sum=oY zTatGW#*O^aVU<^!#et91z~$IYa;_C@J7+V)`<1b_lh`8FHOAgc=Az}lf)k%5xTMrv zr6uV%eKaU~wvi7pU)MeB7HK z2D;27Dik%)-q@hK-!I|N(cl`lAF^EIv0C-t$d1qtFnKIkcMW<4b%Lzf3Y+~~qB7`< zj);HTQS0Oex%zA170>?kRVA_m_*O?rZRpS3v{+O+cifN7Eb&>$Z==vGKh1V)C`qGu z_u8y<#N3Wp&$V^@T??GnE&RN^IyXM)r0h(gS3;b2pt0O!eNIt4{;3H~V5Ln7vs>8{ ziqqZL4Nwlvj4CtEv0>;Fw~D>LB_+-ecI)tiR%a!^GI3BawvNQGz4#b|_df&`e||2k;K}WnvU!Dx=0#ue(=U# zK&pYNNf5RQZOveUm+;dQ*FIA0&#`?@z*bBhUgr(n9_FpoHPB2pI8iMpW|sF*D{+75 z-k;nba~m^}=b7P$FAF1)S!oDKtNG-`%h{XQi6=SMH5GZ%8j?ugqt~!K zwvA_m(*=EIssFVW0EZ;o=u#R5gBB$CUL+->U32;2PM2O(drij20XBy|hH+=bu!0*KIKBj%c+ z^{)B`3$NB2yp-IHf02C#Fw!(;S&rR%2Pq(!<`Q=u&+_V4eCe z?!d0m@ndhMu%QZ`ERBCD+uU~%h>+E^Qd;Cz=IlGV(IwUrOz(+1Gkd7O z$HME|^+mAGBc4k(2jEj5$g30r-BUoK@Nn!*Td)5USoe+IZ-x9)#yd)sD}2Z?2{4@) zb|)xsK&pqOpB;+H#gbf^Pto29M<2Y>dU5pAF4p{+j=oBZ$2EXA*xI~AM@g20H7o_x z{2-Kc;SRpcxLXzU)a53ZoX%ndB^i8=>Sf&{i6CYkGSkvLj0<@C-!VKm#iX8dws__S zKp`T~rIAfaogJ!tV(~rs5)ctD#A};YXgPNI`<5=nWQjnIf<=1Pzn2y$C8yUkFKhwM z@%Ah?L`DM^@d<2evu->Oo=SVaiR<1GjYwe^G2)XY`l$Q%4H`|PpFA($N_8=6uOr0s zj+)C5xin zwn`&QQOr<`27|~lU*GNfe)r$+;%v`3=Q$VW;ymZMrG+ssw-7e~0K7L%46Ffwh5XNs z<6`?KHS^P-{ZmgZZ@~?jOs2~JH%~nY@PG5j1zTI#0Amn(L8qe2oETm=+B^jogFL!D zS!ISRHW3ybWQ6o&?2=byQi)JhfBSH9PzL~<0B#!S!^50cUq25lRnLyYPq06zWw>~J z`$KJG?wJet%MCZ1y81U)c?UzG;{mBi?no2aAHvt8L__Xy66K$DAupSD_4^VSeG;vA zGhrY7dmCA}Zg<=d*dvUYvYMo40k!iu>o|-n)q^ld6Q(6yBtUWr1GY<4vK2?uoeS|r zT(a}}&NC3;#Lv8{0Y$f=#j|95fZYUrx?foCUQ)KvUf$-LSb+6D%%)z#|1KO+ZTgw~ zNbE_n|4p~xYoc$edOQF-XOS;%evzdNi3 zk@(r9h#R5FpacG)j3VDRRz>g49u-o5A=@X`M=nQQ@W&MqFu3+}8)vIJyezf?(vDF#3iq72Yg1rU0$uCw``L1fzH6tU=MT zJ)FP#7~BMLoosB<>)Y`BnyxN?%PW`qwa_nrmk;P<^+|3lA$cC z!KnRdI-*8rENgl-h*t3^hviocbR?_BCX&(%?-)#H*`RRAUES@w^(0ey@bvFIq^EE0 zYIYPpa4Xz>{9(cUIq~=IuByDHtJskc@OXkoyhOvqjT$BRxhihe#hq<$(TaV?g(bYx zzk*$b_y4xdrKd-u!#@W)7x%!%FE62JOZu)fTpnAUKW94KXQKo9lR9BoI`nN#BVNL^WLc-2PBnDb`!FkQ6Yw zt8#VMCqN`vOx>8A-pqa3!sg7$vF4w|C29%3h5O_{d+D-|gED!U;S&A}5QU_Uz%?vp zmMBIPvj7qQQG74PJJYIU8KAgcJcJvNO0O6=%8w|@chXvpUX6O34cERMj)m?X)jwit zWYksusgx8zcrOv1Kd4Cm%yUoW#?wfM-ee=?*pXt7dUvyZrhI*Zx3!VQzm2&Dk2i(z zv;J?=_W|Z`2Nb*9*m`XJ^1ixr>GY^eNXXM8UzHKbJ%`E&g=nC-&t%U{b2>k}4 zM^eC8z9@VJ)NO6~zgW94x7psn_*GsP&AXPV>|c7+3V*`GDl?NuNHOr8_5jSBY+FrJ zxxFy&omakmacj-wPLUexLeI~s2^i^7jdiy$lDh;U-ze^bf8Wq&_j48xx9sRj~I0?AI|l`&NRKa0xj_M7{QQP8x>W$llZ# z^2}mA)Bep^+iA@Qw-LK1wT3nbnW#j??18HOX9M~EwO_4MW54*U(nB|yBja(g7FnMC zblZNR)Y{`EcNWNZ9&#=!$@W#;-?`_@7{fb;%BTGaNt!jg%h zP{`+<{G!`T5|=OLq>Z*{Z2O&8zMn16ACVB$Qm``DYk?tjJdb2uC7aci<-`J?E%OU+ zGrN5UtA#%|w#4Z;NP?k$>n!<|SrjF%qnK36 z-X#tb9{hRfZswTsPVZBN8H~75sHKLYIz~6u+pKzy#crwlQTpM#$E~+Abk)TD#sz#v zXX8Go`ZaF>B8Zu%M9U<;>RXE zbfFb@39Y9#&~E%DMKl*GIPjFwcNZ7nuMbVEpA0WbvBjM9QA!sp{YiDoe131&NawG0 z)w7{^`zTTBX*b%&r|n~U@dMgnxo!))g;D+Qg=`Xw5@VHk^{hiH?Dbc#u;gsXHzn0i z2)8o6*&Kl>6tpGG-xYvB-r`9coW<<#c<0|E=wQpY(XerrkkfVOt!t*N?wvbI|9F@&~JQ7q2jXe2H zCW^MvkWX8I-=%fo@BdI{A^py@pAB`shd&A{*amKE*X!a7A2Yu?Z%f;af$36@t#hgGI$UAqZQr>(vfUM3&C0L=d07kpTV z65hXXqa6SYLUvQ%beIm#w8HN~d3!4?$?iB2Owr|ut8l>>rMSqaZB}JGncrpN>H)eX z?`{XC$$(nou>9J>y&RJ_GCHrPS%%Jr+GeZ-p;^lV`1YLmyxKN-u#7+}dnx}N%zgXH z$CV1rQyi4eN)t(4&9Ix9{_jMeW*4;LYis@>9EQ2Es^gfy-VKyn0lc8i{7q3yuQV}F zD6Fom;2?qz@ukzYpge~g8?BAWbC}{;E82F=WrGc0;?er)DQ&9VG84bSn{>9B(k zwM%!e%*jQ~?@0DuS;yYC#^~O_E+}d7VN;GP%ockmCFlj4DNZ%yl_X-Hn$v_=+Er1z z)xF^ugN@xFweaki3bVXB3?uwjsn55RD1&YMi6B+jBAEU6|0Y1ne zLxbyOnkM9BHX2f}bHa<7WG>P_pz=aP(B)D(uo1i&yvId9DaA3GTsK?WdG%g5Q5z-% zUfT;wH`Xu@LDvM>F<4<`LiFUdk7UO)oS&1>Rnv!81;V#S1gZ^;byAIw5fmjY3m)nw z?+@SmlmBCWV>bFM8|-jGB{WLeI3o9DaWo<)11@8`kh*v=cN0DNB+st4sz6R#2I0qi z4c&8ZcAexDoiEyzoZJ((D9)8bG%^Z+MCs@_Q)++#Uvn&7#CI<7^ioFM{2qLTEAfMX z#1kD>oACS6EsTK8F}{R&pahvhyt|}$lX5-EzVP=!*jL*U(=7^7%UUF#`g>m(9)4uh zN+-O*&B&PgYQ520)x+!;$#)PXM`Kgq-o1CQLPsDGuSVi?k7|gIEtmv^WewHMkLAio zl1Us*ZM8T5*j_cED4OCIiNDZ{(dj&{3{g&T+~4Y*L((GimlI~v8Q&*2;zNurHxdEX zDgWY5T-u#~Rw6AH53<&eUOA_3sJa+<`S@61`0Z+&gPPC(dA9xY-3vCHs+QQ8y<*H| zq`~2~B6ACGIIhlq0$V=$vE_&HDcwxCpLD6$_1>ZT*h{SQByL1NMw0+fOj?Wz& zFvJdbQkbJBeJ=wX#hUle7%rUXR$4yPWhM|#t(`DrC+d#^K8*!sRn%{Eee5S%bqSan z?Gaxb6y6;Dw^4Ura3@7~UnV3ahsAZxfc!%uwqZbo@PGj7@>ji1sVn}8fiB(aiz~Jo zTDXK*@oVh~gVo^Iu~o8PQNMj6)RalL?o3^H@pnjZNLWoX&@@;gDJHvX&C-&SZCkAF z?Pux@B3eZQ037cWb&FZMuP+XLz1yG`s8)?SoCs!ygWlxG$PB`Eka2i37Fv)TK{|58 zJti;S=?xo)8?eTei(HD#f`Jq8j>vX~5NRzRU9sf_ z>oxtdr~$>ax+OJ;^X)vsSztp0JYJsoQlX{)JP`NN^%4mv6u3oW-hBTdM2W@5-Fze> z9n9nd!;qg7R6d&M#&&}CPAvA|mF^4XPltG`XZl9!t)5o^flxcEGJRDAZjOjF zQ0Iea%DG$E3bP&!(93|2RCY3l5t3s3J*JOik0=hGeaJ@3@H8tD7CVRqHg&`+R3j0a8@kqB}PI}{$m!yRab zvul5lL(>3*TF>n~)*#hsmwUTtKRAA2Fnk0PENdI!9GrZLu@zyKzs+&m-IKFviqv>& kg1Lm#gqI~e;$iYPkmG5c&N-g{UI@TVLkokN>#mRg2V?7pi2wiq diff --git a/docs/Saml/img/icons/arrow_down.png b/docs/Saml/img/icons/arrow_down.png deleted file mode 100644 index 61505adc46d8fa4156d9b31831ebe6770f0e2757..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 606 zcmV-k0-^nhP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iph( z1qcLRmoAwA00G`fL_t(I%cWC2tJ+``e%^eL7t$KUBw$9t*+0;sKcG;!o#ftvQ=v=O zPEznkbn((fBwn}RP@zy12dlPS%uu3(Akjdnjb!m7Z{AKf?FH|p;Io_q=Wq_^JkLWo z=Qsxf&cxXRNV#0TVT@UX5OB_sBngrvNpr^7o%nCPR4T2dTrT%m)3hhWViEKC9B~|j zF^1#uh$Kmn&1OL6a}1fD2f7I*U{_szDuTQUi!ZOqfjWA01!nH;yA``w*%)K zs;Yug3Q-h6DTN>iAcUaZZvWhDHqV4=wffsM&FACsIL_zuX_G9=kR&O+_4XuD6w&YZ zlPHQVyWQ?u0DxMp_GP_Z-y9AHSe6Azl0XPax7|XPWh@p8ESJmcPN(zf4hxRsTn&fA zuar{gx(-1QAP9d+5=9YV7-BM+jB~l%>ytFDR;#zJ>#hvLKqiw(w{yPNyJ*ytHlGe^5w{<6H+p@P5DF!?G;MvWzec z5d^`9X0!S6zm#a(_8ZrA2b!kAG);J(_suYjSEqWV`y{Gq+Kbt2=5Dv!N1CQx)a!M2 sQpyjxu~Ml#WsK2AqtU(B3+LMT58IsRj2DXS7XSbN07*qoM6N<$f?9MBJpcdz diff --git a/docs/Saml/img/icons/arrow_right.png b/docs/Saml/img/icons/arrow_right.png deleted file mode 100644 index 60c5927ebf63f388b45315cbc4cc56a77b9f903c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 628 zcmV-)0*n2LP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iph( z1qT;gv2%z300Hz#L_t(I%axPMt5Q)EhkyI*EgldQ%_FEFNFoiwK|$ce2O<`vO%-#J z*f5+m4E!U)pbO5VW@l24A`$5(O~gT>V;_X?vwa*%Pb1@|_l9>(HfyjxzP0vRMAI}J zBA?HH1aP2?dagoht>5TwNDO6R(YPG_8y~cXI2Im}{b9lX8_ zilTha<#MhY4K|w%7K;TIiv<)#fubnjoMSSXfKrNJF!)f@w4a$w<}m=UV}t2*irH)i z#ux-a_&XQ9UJr-E0ZJ)MCKDfz$D3;n4h4so5CWso2)Ek}0I1jNHC0vbmrA9tCkBKN z=yW=Wq6k3{z!-zoYK0_8=yW=};c)o2TrR)5TEmVFD5YSGK@>$e91e)0h*qoB@AZ0b zWLbWH{Ea67#u&_IGwgOdw%aYL)#{IazyG>ct9`j{4^CR}cs$tcc4#yjzXyZC2U(V% z|8JH50ce_rZnulkX!Ofwvpp*oi2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4`J+jIM*dB6Xqg)}~| zJoCIb=eAt%N2Sc0*LR=)Gr>jXc+U1{2EKOY&`?3wi#H~`UdZcts5G`~(Smi^VXH-t zNnA2H`u*=l#_~yWzkbC{@|eWZU~_(X%TKE^b)f2_P*>quOSp`{Hl;21nz{an^LB{Ts5!Fr;& diff --git a/docs/Saml/img/icons/constant.png b/docs/Saml/img/icons/constant.png deleted file mode 100644 index f5f180d5a9b09a19b5ae44ad64a1fdceb6a86d7c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 496 zcmVrl1?U*0YQ8KBh3^hnN3W5 z2%|~HXz55n-@#z_4GhF=O%)o!1~F5NWx9pcZ;~F+?Pl3!f;~`hPjKs2om2M?&}Yi{ z)a|hNOZ<{ll;no}Bk)fO?j?Pd^dsz_V-;AIg>Bmyh7qUYr=-X5?0(D-NtDZF=JPoK zm&=9SZbzX|h$DHpwjoI*lSww44g39`Mx%jgn$+ucGMNm9VNk2pa2$tryNzwzJxRTg z;8l{SR;vIEhr`H=-EJ4(_i-GD)oR6Jv3R?-aYHZ~jUoig<&w!{f+RYf4giC};OT}S zkx1Zq9*4t$R;z_&Su~qXve_)-@tE~`O*);X-|ureoq}Sq`0d7mBub?cv)PRE`3%5z zyCt8`Q>j##PN(?3kLP)~uKN-h;x$auB$vxYtfW$@*foCnJuN{HCvYhz#zuJz@P!dKp~(AL>x#lFaYJy!Tsagqt+F;zg(Vd_Ma3C z(nGFZm^~mf*5 z)sz1pn_UOj3v?y|2J0zg2h4lZXZ~Oq6V)2(>o0PAi0Mp zcm2O}aQ*+4X;%Lqp4$EY_?&u@^n?8R{_$;a_<;NZ^2eq1Gykv3ut72B2M+tMZ(scX z!_&L}cQnO<)vrjkgy>B%C#)Z+=I#Bf|8MMChN2ecXJi`Peo$P2?0#|mG=^J|^}*N= zPwo1DaqZOq$7k37KfSmE=*JoV_w{7|UykNZn0k89t1|6?Zs{cGcU*1(=|3{P60d%I dd2d6B_y4`!nK<=Rk_TaW8yL|`1mgK1y#VW>cs>9C diff --git a/docs/Saml/img/icons/file-php.png b/docs/Saml/img/icons/file-php.png deleted file mode 100644 index c323f09f66241a28d61f1d2c8e90be0a68126bb6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4017 zcmV;i4^HrjP)KLZ*U+IBfRsybQWXdwQbLP>6pAqfylh#{fb6;Z(vMMVS~$e@S=j*ftg6;Uhf59&ghTmgWD0l;*T zI709Y^p6lP1rIRMx#05C~cW=H_Aw*bJ-5DT&Z2n+x)QHX^p z00esgV8|mQcmRZ%02D^@S3L16t`O%c004NIvOKvYIYoh62rY33S640`D9%Y2D-rV&neh&#Q1i z007~1e$oCcFS8neI|hJl{-P!B1ZZ9hpmq0)X0i`JwE&>$+E?>%_LC6RbVIkUx0b+_+BaR3cnT7Zv!AJxW zizFb)h!jyGOOZ85F;a?DAXP{m@;!0_IfqH8(HlgRxt7s3}k3K`kFu>>-2Q$QMFfPW!La{h336o>X zu_CMttHv6zR;&ZNiS=X8v3CR#fknUxHUxJ0uoBa_M6WNWeqIg~6QE69c9o#eyhGvpiOA@W-aonk<7r1(?fC{oI5N*U!4 zfg=2N-7=cNnjjOr{yriy6mMFgG#l znCF=fnQv8CDz++o6_Lscl}eQ+l^ZHARH>?_s@|##Rr6KLRFA1%Q+=*RRWnoLsR`7U zt5vFIcfW3@?wFpwUVxrVZ>QdQz32KIeJ}k~{cZZE^+ya? z2D1z#2HOnI7(B%_ac?{wFUQ;QQA1tBKtrWrm0_3Rgps+?Jfqb{jYbcQX~taRB;#$y zZN{S}1|}gUOHJxc?wV3fxuz+mJ4`!F$IZ;mqRrNsHJd##*D~ju=bP7?-?v~|cv>vB zsJ6IeNwVZxrdjT`yl#bBIa#GxRa#xMMy;K#CDyyGyQdMSxlWT#tDe?p!?5wT$+oGt z8L;Kp2HUQ-ZMJ=3XJQv;x5ci*?vuTfeY$;({XGW_huIFR9a(?@3)XSs8O^N5RyOM=TTmp(3=8^+zpz2r)C z^>JO{deZfso3oq3?Wo(Y?l$ge?uXo;%ru`Vo>?<<(8I_>;8Eq#KMS9gFl*neeosSB zfoHYnBQIkwkyowPu(zdms`p{<7e4kra-ZWq<2*OsGTvEV%s0Td$hXT+!*8Bnh2KMe zBmZRodjHV?r+_5^X9J0WL4jKW`}lf%A-|44I@@LTvf1rHjG(ze6+w@Jt%Bvjts!X0 z?2xS?_ve_-kiKB_KiJlZ$9G`c^=E@oNG)mWWaNo-3TIW8)$Hg0Ub-~8?KhvJ>$ z3*&nim@mj(aCxE5!t{lw7O5^0EIO7zOo&c6l<+|iDySBWCGrz@C5{St!X3hAA}`T4 z(TLbXTq+(;@<=L8dXnssyft|w#WSTW<++3>sgS%(4NTpeI-VAqb|7ssJvzNHgOZVu zaYCvgO_R1~>SyL=cFU|~g|hy|Zi}}s9+d~lYqOB71z9Z$wnC=pR9Yz4DhIM>Wmjgu z&56o6maCpC&F##y%G;1PobR9i?GnNg;gYtchD%p19a!eQtZF&3JaKv33gZ<8D~47E ztUS1iwkmDaPpj=$m#%)jCVEY4fnLGNg2A-`YwHVD3gv};>)hAvT~AmqS>Lr``i7kw zJ{5_It`yrBmlc25DBO7E8;5VoznR>Ww5hAaxn$2~(q`%A-YuS64wkBy=9dm`4cXeX z4c}I@?e+FW+b@^RDBHV(wnMq2zdX3SWv9u`%{xC-q*U}&`cyXV(%rRT*Z6MH?i+i& z_B8C(+grT%{XWUQ+f@NoP1R=AW&26{v-dx)iK^-Nmiuj8txj!m?Z*Ss1N{dh4z}01 z)YTo*JycSU)+_5r4#yw9{+;i4Ee$peRgIj+;v;ZGdF1K$3E%e~4LaI(jC-u%2h$&R z9cLXcYC@Xwnns&bn)_Q~Te?roKGD|d-g^8;+aC{{G(1^(O7m37Y1-+6)01cN&y1aw zoqc{T`P^XJqPBbIW6s}d4{z_f5Om?vMgNQEJG?v2T=KYd^0M3I6IZxbny)%vZR&LD zJpPl@Psh8QyPB@KTx+@RdcC!KX7}kEo;S|j^u2lU7XQ}Oo;f|;z4Ll+_r>@1-xl3| zawq-H%e&ckC+@AhPrP6BKT#_XdT7&;F71j}Joy zkC~6lh7E@6o;W@^IpRNZ{ptLtL(gQ-CY~4mqW;US7Zxvm_|@yz&e53Bp_lTPlfP|z zrTyx_>lv@x#=^!PzR7qqF<$gm`|ZJZ+;<)Cqu&ot2z=00004XF*Lt006O$eEU(80000WV@Og>004R=004l4008;_004mL004C` z008P>0026e000+nl3&F}000EcNkl2m;0!ZJ-o+356@I zw3Y_?!u5KP>-BDD{IIvz>)DpBQE`&Z?C#9Y^P6X$o##J7DaFk!A`{?^ms=>z2?dI~*f68DYAyE>tCTMJ~ZSBZx9}yrvC`rT>N`VmOJ55j4nm}mgy{?&! zB3Ub`Fr-3BkWyhJAdxViT^=zapvFxuBLXN1N}01zDtT|1Z8AAS07I(O%q>son!w=@ zXqrHGfWu+dC>sDWt+TX@*nkij5Lpuh$_{{KM9Se1Fg^$iWC%joTLOl8AkCn%2VsJM z!=c#(NE%jhIE1wn__Xd_%1iH}YDzUe zkB4%fhuqu>!u{~xTTM)_9N@vFm19CU#-iJ{DvDDR4WP>8l_&2Cvp0;I%C^Ha8*#J3juAGS4#h?&@Lx-YCaT z|ICVKbXKj)Vbce*2#2AkyO-@d*Yb324k8PleOc$J7js$qyrAJ+kS}+HDfiT{{hh=1 z_krIUB;W2n#IfT?2?m>KYTnO^M^;m}P0`kQhG6FjO8tJet_zdr%%`d46vej&`1)0XLr+h^fce?Y2f5hr_H}WLL}bJk+YvMND(D0;kLpHoI3RtjpsjS{*09bTTb9~ z=FoWh0C{=Yg!@CBIp4}FJIm0s!}MP%puXoLN}_q(GiBwd9vCGC6mzR5V|1_P`-Z~^ z2I+|$r?TP!^7JaYnikL<>twp`IWAoaQx(|A@iTjvIir}#6IWpL&E{ZzI|e!n7Cy$T zc`o}wxOPo7y`gL#j+Jq#?L3b^SwsCd)f}mh=yczr!}p9F}~ z#zb;hx@03obECYlz7iv01Hf|E#toJ1t8Aw6@B+^5o5$}BjT93lzp#k>!UCMRE|fF~ zUG3-BFAC}F4dc_VQ*r0r_~!?hb6AUUaU;p;xRGFx5;P6wO!HDT-OI(x5!x9Ftd~Of|JtfnIQn0ms z4}&mB$+&TEM45ubT9Q;|R0_i|m%w^wWkE|9suj5JaEzdRR=7z4U4m{^cCOjugKnx=^{PfON`DN}?+!0m5Y~9sd L;uWgGz+epk&R;19 diff --git a/docs/Saml/img/icons/folder.gif b/docs/Saml/img/icons/folder.gif deleted file mode 100644 index 2b31631ca2bfec3a8afb1bfdd4f8ed4c5bcc3a18..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 106 zcmZ?wbhEHb6ky=hKW2GJ7 I#Kd3?0MGg2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4c?q7?3B2Xp1x8ImHETXz54QVYrPgqHx8=(z e>Gl76{l!*pI92y$_dTH37(8A5T-G@yGywo6mxkK_ diff --git a/docs/Saml/img/icons/icon-folder-open-big.png b/docs/Saml/img/icons/icon-folder-open-big.png deleted file mode 100644 index fae384ef4df761b2d6cc250ed5787e430ae91663..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 232 zcmeAS@N?(olHy`uVBq!ia0vp^azHG`!3HF+C+nOCQtLfk978H@y`6TEw^f11_3i;d ziGzYN2L&Zg3QDws(66dq&SgShn{Thb{zRo^(j5Lg&dD7z8Ed<2HaxncvF_0qB|qh( zD^{Iwcon{}=b8RLEj=%X$?owoQ+czMDqpDz@out+{J4%~%}Jdw83lFk?!Av|@026WQIOdE8_{3R(~E4X}F}*cK0{Nlc(N@tWx{N75ZIyLFkD`ce?_+omU+4eIu&X fef&+H?MME!>ysALYPH`1I-SAO)z4*}Q$iB}E$LkN diff --git a/docs/Saml/img/icons/icon-th-big.png b/docs/Saml/img/icons/icon-th-big.png deleted file mode 100644 index 04b0ad872a98de63bc0e300e627ce69a2a209471..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 106 zcmeAS@N?(olHy`uVBq!ia0vp^Vj#@H1|*Mc$*~4fhMq2tAr-gYPBH{4<6!#zfBD*P z%ML8Ga1?(i);mdUy45w?2d5KGCQHxw$nZHi?xXOW{3u1P>qQzNK+O!Eu6{1-oD!M< D6}BRE diff --git a/docs/Saml/img/icons/icon_template.svg b/docs/Saml/img/icons/icon_template.svg deleted file mode 100644 index b0428aa4..00000000 --- a/docs/Saml/img/icons/icon_template.svg +++ /dev/null @@ -1,93 +0,0 @@ - - - - - - - - - - - - image/svg+xml - - - - - - - - - Co - - diff --git a/docs/Saml/img/icons/interface.png b/docs/Saml/img/icons/interface.png deleted file mode 100644 index 51a3a1762db628e8cbbfb4d933a74b4d962d2d7e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 281 zcmeAS@N?(olHy`uVBq!ia0vp^0wB!61|;P_|4#%`EX7WqAsj$Z!;#Vf2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR40E|;Z~{{z_~j>MQR++0q{n_jdZ_~Xzv)82ln zir1^4FSoop)7kP4q||D^oYExqqT%4L-+qnX2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4|3mlps%(3Z75trJZsonk=m!SRtUbjIcd*Gd{GD-MU&5kK`Fd$; z&qe*M;R)u)+B55zu54SYqS>Xy$aOeCxaR(R@13(xM|fE^lFf7PnUNSzTjBx@u1_}0S82W4^{;r-{cRJTTl!v}kb2YK z*1sl?dBGmby>EB*DR3}+u*rYhnEoKO=X=4viDB0(R!$ZFviy;n_U!uqz48-dSM>2+ S-W3cC0R~T3KbLh*2~7ZLUYG9x diff --git a/docs/Saml/img/icons/ok.png b/docs/Saml/img/icons/ok.png deleted file mode 100644 index 39f287ab19b8bcdc156ea56355a95290d04f0ee8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3685 zcmV-r4w~_aP)KLZ*U+IBfRsybQWXdwQbLP>6pAqfylh#{fb6;Z(vMMVS~$e@S=j*ftg6;Uhf59&ghTmgWD0l;*T zI709Y^p6lP1rIRMx#05C~cW=H_Aw*bJ-5DT&Z2n+x)QHX^p z00esgV8|mQcmRZ%02D^@S3L16t`O%c004NIvOKvYIYoh62rY33S640`D9%Y2D-rV&neh&#Q1i z007~1e$oCcFS8neI|hJl{-P!B1ZZ9hpmq0)X0i`JwE&>$+E?>%_LC6RbVIkUx0b+_+BaR3cnT7Zv!AJxW zizFb)h!jyGOOZ85F;a?DAXP{m@;!0_IfqH8(HlgRxt7s3}k3K`kFu>>-2Q$QMFfPW!La{h336o>X zu_CMttHv6zR;&ZNiS=X8v3CR#fknUxHUxJ0uoBa_M6WNWeqIg~6QE69c9o#eyhGvpiOA@W-aonk<7r1(?fC{oI5N*U!4 zfg=2N-7=cNnjjOr{yriy6mMFgG#l znCF=fnQv8CDz++o6_Lscl}eQ+l^ZHARH>?_s@|##Rr6KLRFA1%Q+=*RRWnoLsR`7U zt5vFIcfW3@?wFpwUVxrVZ>QdQz32KIeJ}k~{cZZE^+ya? z2D1z#2HOnI7(B%_ac?{wFUQ;QQA1tBKtrWrm0_3Rgps+?Jfqb{jYbcQX~taRB;#$y zZN{S}1|}gUOHJxc?wV3fxuz+mJ4`!F$IZ;mqRrNsHJd##*D~ju=bP7?-?v~|cv>vB zsJ6IeNwVZxrdjT`yl#bBIa#GxRa#xMMy;K#CDyyGyQdMSxlWT#tDe?p!?5wT$+oGt z8L;Kp2HUQ-ZMJ=3XJQv;x5ci*?vuTfeY$;({XGW_huIFR9a(?@3)XSs8O^N5RyOM=TTmp(3=8^+zpz2r)C z^>JO{deZfso3oq3?Wo(Y?l$ge?uXo;%ru`Vo>?<<(8I_>;8Eq#KMS9gFl*neeosSB zfoHYnBQIkwkyowPu(zdms`p{<7e4kra-ZWq<2*OsGTvEV%s0Td$hXT+!*8Bnh2KMe zBmZRodjHV?r+_5^X9J0WL4jKW`}lf%A-|44I@@LTvf1rHjG(ze6+w@Jt%Bvjts!X0 z?2xS?_ve_-kiKB_KiJlZ$9G`c^=E@oNG)mWWaNo-3TIW8)$Hg0Ub-~8?KhvJ>$ z3*&nim@mj(aCxE5!t{lw7O5^0EIO7zOo&c6l<+|iDySBWCGrz@C5{St!X3hAA}`T4 z(TLbXTq+(;@<=L8dXnssyft|w#WSTW<++3>sgS%(4NTpeI-VAqb|7ssJvzNHgOZVu zaYCvgO_R1~>SyL=cFU|~g|hy|Zi}}s9+d~lYqOB71z9Z$wnC=pR9Yz4DhIM>Wmjgu z&56o6maCpC&F##y%G;1PobR9i?GnNg;gYtchD%p19a!eQtZF&3JaKv33gZ<8D~47E ztUS1iwkmDaPpj=$m#%)jCVEY4fnLGNg2A-`YwHVD3gv};>)hAvT~AmqS>Lr``i7kw zJ{5_It`yrBmlc25DBO7E8;5VoznR>Ww5hAaxn$2~(q`%A-YuS64wkBy=9dm`4cXeX z4c}I@?e+FW+b@^RDBHV(wnMq2zdX3SWv9u`%{xC-q*U}&`cyXV(%rRT*Z6MH?i+i& z_B8C(+grT%{XWUQ+f@NoP1R=AW&26{v-dx)iK^-Nmiuj8txj!m?Z*Ss1N{dh4z}01 z)YTo*JycSU)+_5r4#yw9{+;i4Ee$peRgIj+;v;ZGdF1K$3E%e~4LaI(jC-u%2h$&R z9cLXcYC@Xwnns&bn)_Q~Te?roKGD|d-g^8;+aC{{G(1^(O7m37Y1-+6)01cN&y1aw zoqc{T`P^XJqPBbIW6s}d4{z_f5Om?vMgNQEJG?v2T=KYd^0M3I6IZxbny)%vZR&LD zJpPl@Psh8QyPB@KTx+@RdcC!KX7}kEo;S|j^u2lU7XQ}Oo;f|;z4Ll+_r>@1-xl3| zawq-H%e&ckC+@AhPrP6BKT#_XdT7&;F71j}Joy zkC~6lh7E@6o;W@^IpRNZ{ptLtL(gQ-CY~4mqW;US7Zxvm_|@yz&e53Bp_lTPlfP|z zrTyx_>lv@x#=^!PzR7qqF<$gm`|ZJZ+;<)Cqu&ot2z=00004XF*Lt006O$eEU(80000WV@Og>004R=004l4008;_004mL004C` z008P>0026e000+nl3&F}000AkNklFk8dWoJ3jEU~XBNtL9cKTeyi??hwK;af`L)EJ3Tek!gA;-c*D;LGHMx zd+rCvabVEharf!JGL{ZB|LC)Q|N4IS+WY(C^ZGJGgnLmk+@oUe7QiXHx{X?<4kuA<{B9}JH*)E%HFP7mHP}9&od%Rlf8*q z!+Zb$Afh`O+-K<7+OmbDfJiSKSVgLB3fgw0hB97Gi?JmryQ9QHEpw(qw?6Bg(s!}7 zeKXFE{)(}LFi!hB5Q_kqWaR%yp))BPw6%&sZ3~-qtE9?3II`MQN>V_ib#1H3(5xq+ z8FYVxh90O)rj+M(9}&^tM}a!LU-9i4YO)+4ZZF(IGZa&ynkJZv_b($UAX4S2axxw@ zkp8HGGQOTenhKucp2Amu@rVf8Ph}fcG#19Xq;n(%MEbB}C!r3#H$(NU+>U}TA0a6q z(w6g;RCF?r3@3Gz+m=oVRVtDf;l$1B!N13>Ed646^!UJcBn3n|c(tBv!5(_^r)uIG zVJ0FNzE9j>+`o{dfJkq5zd>c@VltZ3so>NiN~(@0+0*Epx;s`LW^-ecBx@B9!8&mj z$^2aW=xN7m%QnN~b?0Zcru?uVl(YQc+C!)x-Uk<)2na(+q&cu18-y=7+#hYH{HYf# zXA2o~LY(%A@!?SFCE+{-PCyc$f-7SdY|MWJlGVSUuJm)JWxNTFXg}Pn3u;b{f#VV! zu0c=4MDzab2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4s{THbdS4@;+_CX;D$tbHv@ zKP(rqp0u=bnyu9N>Uo_U!3Oh7Zadn=h($1khp%^iqRq~oz#S8__oGZpqDG*IrvS_P zm_Ll!$Jaa8F?rnHX0#wvO7rxmnI~R-l$_UK=yu6u>Z(;oqO_x48#da0c>LqwX@$Pz zE!R{$o3>8d_x|{%8;t44x6gB!mU^YMH>hio#*1C=ayPx&XmD)8^Pjt|-QV41uvi_g zKK}vBAFH~?^X!>hdhhpbO0T~$$K=%J`v1M=?h7VQI@kXa7(5INp00i_>zopr0G5Z5 AIsgCw diff --git a/docs/Saml/img/icons/search.gif b/docs/Saml/img/icons/search.gif deleted file mode 100644 index eef46fc9ee10547bfa2da348f81b4c83f19e65a4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 152 zcmZ?wbhEHb6krfw*v!MQVZ+APuU|iW_~^rj4_mixJ96acuV25;ojZ5^`i(nx?(W*P zd;k6e|NsAIfC0syEQ|~cJPbM@0gxFCEUptydamAU5nbG%&zz z##7bH4$=1vId^*V*v!xR>*{?7mqKrCnmdg!}G z=IXm8Sn&!;akH?purU1n%JB2k%b%|wU4DOV*XpD9FQ1(YRJQ}B0U&^o4e)SH>*-Ur zh)`kY;$&s`_k)2EsF{J8m4Sm#kV96(KvF=6-{ZWnu*|swyBJ`G00a;d%-Q;G(RnJC zk*X~0{H%Zf{A2k0_b@F4v6je+t14+fASCR#!a*Y7?B`u`upwYzT_j5PRxk@1k>@6WFcf574M53UU$ zfM5nZ{PpG4FOc(@{(fdKQRiUz`t=9HgNKh8zJB|~V5B3;@aO9@i00pa89smd@*SEs z7ytqYX29h)kFR`S`1=Lu?N1E0y_w^~*-1fljz_B$LUvK}k?BNXe#Y!m=zM!!V#}8bncK5m;8VP zw86G*RI63?Cd%b9bX|ueNlZ|wR6rj|r_)VIP@r2imh3?SN+^{|kY%~8B{maJ@F*OK z&VH9LwOeGt#DRjj0~v~8`>iO7!Ybi;zE$va`A^T#yW`y44;k^#O~K5*jD=qcUhPSc zvyy~q;5H_1WT1l~cqje9yfa+l!hu6xjdOJ8s;8E^+=QQ$tw p?%p!Hy#YapB=@+^9(46X{{RQg%9y;OKjr`c002ovPDHLkV1g7l326WT diff --git a/docs/Saml/img/icons/visibility_private.png b/docs/Saml/img/icons/visibility_private.png deleted file mode 100644 index 386dc2d879d20cf85e4eeaaeb29e66bfe8398995..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3433 zcmV-v4VLnWP)StO&>uS)ve< z0AYj>5AR{$W90N^4L=L-RlQUJ&DC0@ZjPh;=*jPLSYvv5M~MFBAl0-BNIsH15C~g000{K(ZT*W zKal6<?_01!^k@7iDG<<3=fuAC~28EsPoqkpK{9 zG%|Vj005J}`Hw&=0RYXHq~ibpyyzHQsFW8>#s~laM4*8xut5h5!4#~(4xGUqyucR% zVFpA%3?#rj5JCpzfE)^;7?wd9RKPme1hudO8lVxH;SjXJF*pt9;1XPc>u?taU>Kgl z7`%oF1VP9M6Ja4bh!J9r*dopd7nzO(B4J20l7OTj>4+3jBE`sZqynizYLQ(?Bl0bB z6giDtK>Co|$RIL`{EECsF_eL_Q3KQhbwIhO9~z3rpmWi5G!I>XmZEFX8nhlgfVQHi z(M#xcbO3#dj$?q)F%D*o*1Pf{>6$SWH+$s3q(pv=X`qR|$iJF~TPzlc-O$C3+J1#CT#lv5;6stS0Uu z9wDA3UMCI{Uz12A4#|?_P6{CkNG+sOq(0IRX`DyT~9-sA|ffUF>w zk++Z!kWZ5P$;0Hg6gtI-;!FvmBvPc55=u2?Kjj3apE5$3psG>Lsh-pbs)#zDT1jo7 zc2F-(3)vyY4>O^>2$gY-Gd%Qm(Z8eYv>2*=jns=cMJ`N z4THx>VkjAF8G9M07`GWOnM|ey)0dgZR4~^v8<}UA514ONSSt1^d=-((5|uiYR+WC0 z=c-gyb5%dpd8!Lkt5pxHURHgkMpd&=fR^vEcAI*_=wwAG2sV%zY%w@v@XU~7=xdm1xY6*0;iwVIXu6TaXrs|dqbIl~?uTdNHFy_3W~^@< zVyraYW!!5#VPa`A+oZ&##pJ#z&6I1JX1dX|({#+t$SmBf*sRIyjyctwYo1}g*}U8Q zjfJH}oW)9uHjBrW+LnCF1(r>g_pF#!K2~{F^;XxcN!DEJEbDF7S8PxlSDOr*I-AS3 zsI8l=#CDr)-xT5$k15hA^;2%zG3@;83hbKf2JJcaVfH2VZT8O{%p4LO);n}Nd~$Sk z%yw*Wyz8XlG{dRHsl(}4XB%gsbDi@w7p6;)%MzD%mlsoQr;4X;pL)xc%+^yMd)ZNTI#eJ*$O)i@o$z8)e??LqN_gLa_%;TM>o2SC_kmoO6c3xRt`@J4d zvz#WL)-Y|z+r(Soy~}%GIzByR`p)SCKE^%*pL(B%zNWq+-#xw~e%5}Oeh2)X`#bu} z{g3#+;d$~F@lFL`0l@*~0lk45fwKc^10MvL1f>Tx1&sx}1}_Xg6+#RN4Ot&@lW)Km z@*DYMGu&q^n$Z=?2%QyL8~QNJCQKgI5srq>2;UHXZ>IT7>CCnWh~P(Th`1kV8JQRP zeH1AwGO8}>QM6NZadh`A)~w`N`)9q5@sFvDxjWlxwsLl7tZHmhY-8-3xPZ8-xPf?w z_(k!T5_A(J3GIpG#Ms0=iQ{tu=WLoYoaCBRmULsT<=mpV7v|~C%bs^USv6UZd^m-e z5|^?+<%1wXP%juy<)>~<9TW0|n}ttBzM_qyQL(qUN<5P0omQ3hINdvaL;7fjPeygd zGYL;pD|wL_lDQ-EO;$wK-mK5raoH_7l$?~Dqf!lNmb5F^Ft;eTPi8AClMUo~=55Lw zlZVRpxOiFd;3B_8yA~shQx|tGF!j;$toK>JuS&gYLDkTP@C~gS@r~shUu{a>bfJ1`^^VQ7&C1OKHDNXF zTgC{M|V%fo{xK_dk6MK@9S!GZ*1JJzrV5xZBjOk9!NTH<(q(S+MDf~ zceQX@Dh|Ry<-sT4rhI$jQ0Sq~!`#Eo-%($2E^vo}is5J@NVEf|KK?WT&2;PCq@=ncR8zO#GQ^T~S@VXG71P zKNocFOt)Y6$@AXlk6rM*aP%VgV%sIRORYVwJx6|U{ozQjTW{-S_si{9Jg#)~P3t?+ z@6&(!YQWWV*Z9{iU7vZq@5byKw{9lg9JnRA_4s!7?H6|n?o8ZWdXIRo{Jz@#>IeD{ z>VLHUv1Pz*;P_y`V9&!@5AO~Mho1hF|I>%z(nrik)gwkDjgOrl9~%uCz4Bzvli{bb zrxVZ0epdf^>vOB;-~HnIOV3#R*zgPai_gEVd8zYq@2jb=I>#f&AH2?aJ@Kaet zy{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2ipf86ea~8P{#KF00Ny!L_t(I z%YBp0Yn4Y7#(y*KdvkMd5_A2?O={#qrJ7PyP+MBWjdmkq-MF}+bs>~4r2l}>F8c>` z*;S#1g25oRl$MrOp{P3rHxkqY6G_d7NzK>&cxTQzUEGhxE*u!n40E1y&hs!2yk>n4 z3E*Cr(|w$%;c!o}HQn-B?(hnY;bqn@gMg`rE04yquox=DO|R zUp{#A{auxj--pL4JLJVP;@XOlq_|SqX>o{!htqfF@7}v`afQVW#&r%q9UDEn|J?&W z`sY)r)HV#mseu}Z7@`;hyPb@@{e1S1zup@@d1C(b)myCzzJ}7t>hXViS095JriNmO zI7AH*Mbr_aqPbq0g^~MbZcZHs@Bl|YeCxa7+6<_gnV|-;4US?&b%fZ8*;d_LWBu6V z*shBJ{@Xoisi(Pmw6T?05OX0KnHVBQh)Qh75FrajJ>ZrWmI%mYfON2wFA*ApnZs#j zh=LeIr9A-zHG&vHAc!IAOq$K1>!Uq|)M@mh-aGFQr8{y|Bed^9jA$UzDGUkfop;_h zVp(IE8T)X>~3p`YDR)gs8T?b4&RaB~e2G=e#TS7U_Goc?G~vRPt13>(@8e!!;}HaG98e z2tl;1gF{qNGxI*N;?CXl#Q5>~jQT_+PcpeC-2CV;t5Z*J_};=;uKdQKs7A9^Z*dmE zr#%#g%C6AY@6wI+&&H=WzVCkJj+uTwb&zwn9&vSFuA1&0{epqP(U>*+yie53)^v5{ ziCbL!bbOgd+l}{%8v&|wO@4sXl^Ldgpx-1&QfsV_FSGQ2*8=Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2ipf8 z6ebXJjUpTX00MkTL_t(I%Y~CqY)nxU#(($Do7AMkOp9tm{cB2DkO)>?h=q_KqKP1u z8YDz46(O`lh@FMRP9!WEe>Mg|SV~Nzf}5P&@8sU^ z`_8$!2mZ0@A;Eu^ia}Q!9P5to#og>{S<|$qwjrGj%Ek`&kMupiKXB#3Q*t*>rTCcl zC+@1L`f&g2-3IVuL14`ep2 z+uV3N?fN`hDq8CR0Wn}hZ~`tl!y8uf`=4~bS-XBq-9YQ!LR7)7d1MctYaFRhe-$SV z=fDcs3fYDrAxHpDdHU06=Ee4t!)u`ONSz%uHYIJ33SVVl3^}&=u%8{d#qdY8uDM8ssjrA9$p<3++@D?p3lf-6B z31v-Gy4a|EF_X?>qTPhx46e$!*@rfg@{$^D1#Jx&Gf6aY-?2yqJBdu3ppzcjEBwGW zhN39aHjG3jh(RT<2*=?plm!3M8;bhsT?#{E3`huJP$@Hra5&}hVo_^xDuFi+Pxy?} z-@v|lM^~Vd2?=ph5s+ZA4J#lLIV*)4)sTD5Q2^c51}D0?mH#L=jq*Gb;wllj#?FFM z8t2lU9{Qzr-pk{6wL#+XJ9u~=dS1Fal5owl>eDL_alyEAHjJEg0#dbAx|r07FW*i3 zk?UNW_{#AxJ?MlD$KmugcC<82>&RxR=1LG$qqJD~Sr{z8@BL!h&*kWyI(UCfBSZ&V uoAFjHVNPw9Y6-DJV~m~6QTTgm0e%BYER)ZarpMm^00004TSQEP)StO&>uS)ve< z0AYj>5AR{$W90N^4L=L-RlQUJ&DC0@ZjPh;=*jPLSYvv5M~MFBAl0-BNIsH15C~g000{K(ZT*W zKal6<?_01!^k@7iDG<<3=fuAC~28EsPoqkpK{9 zG%|Vj005J}`Hw&=0RYXHq~ibpyyzHQsFW8>#s~laM4*8xut5h5!4#~(4xGUqyucR% zVFpA%3?#rj5JCpzfE)^;7?wd9RKPme1hudO8lVxH;SjXJF*pt9;1XPc>u?taU>Kgl z7`%oF1VP9M6Ja4bh!J9r*dopd7nzO(B4J20l7OTj>4+3jBE`sZqynizYLQ(?Bl0bB z6giDtK>Co|$RIL`{EECsF_eL_Q3KQhbwIhO9~z3rpmWi5G!I>XmZEFX8nhlgfVQHi z(M#xcbO3#dj$?q)F%D*o*1Pf{>6$SWH+$s3q(pv=X`qR|$iJF~TPzlc-O$C3+J1#CT#lv5;6stS0Uu z9wDA3UMCI{Uz12A4#|?_P6{CkNG+sOq(0IRX`DyT~9-sA|ffUF>w zk++Z!kWZ5P$;0Hg6gtI-;!FvmBvPc55=u2?Kjj3apE5$3psG>Lsh-pbs)#zDT1jo7 zc2F-(3)vyY4>O^>2$gY-Gd%Qm(Z8eYv>2*=jns=cMJ`N z4THx>VkjAF8G9M07`GWOnM|ey)0dgZR4~^v8<}UA514ONSSt1^d=-((5|uiYR+WC0 z=c-gyb5%dpd8!Lkt5pxHURHgkMpd&=fR^vEcAI*_=wwAG2sV%zY%w@v@XU~7=xdm1xY6*0;iwVIXu6TaXrs|dqbIl~?uTdNHFy_3W~^@< zVyraYW!!5#VPa`A+oZ&##pJ#z&6I1JX1dX|({#+t$SmBf*sRIyjyctwYo1}g*}U8Q zjfJH}oW)9uHjBrW+LnCF1(r>g_pF#!K2~{F^;XxcN!DEJEbDF7S8PxlSDOr*I-AS3 zsI8l=#CDr)-xT5$k15hA^;2%zG3@;83hbKf2JJcaVfH2VZT8O{%p4LO);n}Nd~$Sk z%yw*Wyz8XlG{dRHsl(}4XB%gsbDi@w7p6;)%MzD%mlsoQr;4X;pL)xc%+^yMd)ZNTI#eJ*$O)i@o$z8)e??LqN_gLa_%;TM>o2SC_kmoO6c3xRt`@J4d zvz#WL)-Y|z+r(Soy~}%GIzByR`p)SCKE^%*pL(B%zNWq+-#xw~e%5}Oeh2)X`#bu} z{g3#+;d$~F@lFL`0l@*~0lk45fwKc^10MvL1f>Tx1&sx}1}_Xg6+#RN4Ot&@lW)Km z@*DYMGu&q^n$Z=?2%QyL8~QNJCQKgI5srq>2;UHXZ>IT7>CCnWh~P(Th`1kV8JQRP zeH1AwGO8}>QM6NZadh`A)~w`N`)9q5@sFvDxjWlxwsLl7tZHmhY-8-3xPZ8-xPf?w z_(k!T5_A(J3GIpG#Ms0=iQ{tu=WLoYoaCBRmULsT<=mpV7v|~C%bs^USv6UZd^m-e z5|^?+<%1wXP%juy<)>~<9TW0|n}ttBzM_qyQL(qUN<5P0omQ3hINdvaL;7fjPeygd zGYL;pD|wL_lDQ-EO;$wK-mK5raoH_7l$?~Dqf!lNmb5F^Ft;eTPi8AClMUo~=55Lw zlZVRpxOiFd;3B_8yA~shQx|tGF!j;$toK>JuS&gYLDkTP@C~gS@r~shUu{a>bfJ1`^^VQ7&C1OKHDNXF zTgC{M|V%fo{xK_dk6MK@9S!GZ*1JJzrV5xZBjOk9!NTH<(q(S+MDf~ zceQX@Dh|Ry<-sT4rhI$jQ0Sq~!`#Eo-%($2E^vo}is5J@NVEf|KK?WT&2;PCq@=ncR8zO#GQ^T~S@VXG71P zKNocFOt)Y6$@AXlk6rM*aP%VgV%sIRORYVwJx6|U{ozQjTW{-S_si{9Jg#)~P3t?+ z@6&(!YQWWV*Z9{iU7vZq@5byKw{9lg9JnRA_4s!7?H6|n?o8ZWdXIRo{Jz@#>IeD{ z>VLHUv1Pz*;P_y`V9&!@5AO~Mho1hF|I>%z(nrik)gwkDjgOrl9~%uCz4Bzvli{bb zrxVZ0epdf^>vOB;-~HnIOV3#R*zgPai_gEVd8zYq@2jb=I>#f&AH2?aJ@Kaet zy{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2ipf86eb*cJ8m}s00OT`L_t(I z%YBniXk1kk#(($Dn@nb+%_M1(NWV=0YLiwH$D2%?C%DVS&r7K)4FLg=c{F1vBp zWfw&#C>SgS#Xl(47O6x83))SoHqe%66G*4+B=g?8_ndoN%p|5RdN=37Ip6o4b2uM7 z?0rB5a1SflNKVhyxHwY+@aoyd;i<8y{i6e0hhmE9c6({z(#_vb{c(_Q4}CYu^}9DV zYTah=JKsFj9S5F>d{{@5_ld zrk~vYh4`yksckcGl0XxP8d0$-BQDb&|D3<^)AM`B_bz_)%7tzRLnmn-d2vsx*8eAl zk<5@}s5+t=K@(9OK@y~XLb>ho>DRCB0q_9(cRzim(OAGpre;V25l5*;5F>~q#BOYd z+;I1wd+qG-0RaE($5}J$yR&R_0$qEt3J;n%8AV`l~4N-%ND;m#e$6s1lTh5F6;$~0? z-97wA*6TnZsafVT*H^2a|9YpG=Q!!s-TZ`4O+rlefO0gV7$Oc)!xG@Ut2Y|723C&( z`02SC7iRKvORMp7Z(Cdl)+0&1`5mH(l+3)ZShF#L^~t-J-y)x$t91|Q!yl*ksubb(;uO>P3<~3gWtU5EA zO&l9waH5cM!23!vvwQ8d@>k0(9h#rz+GgWD;6{LpGbNLsl8rdV>pc31TGUV}?$6J% d{D0R1{0r!j$d`WA?P34`002ovPDHLkV1i_Kq4od( diff --git a/docs/Saml/img/iviewer/grab.cur b/docs/Saml/img/iviewer/grab.cur deleted file mode 100644 index ef540be09383a215ba21287683ae956b74a6dbbf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1150 zcmeHEF%H8Z3_L;+LM2k9N*yv~>~H#wK9i4B>Jy?)*;1Rr5Mf~HSVzWizBA$iDEg)e zv@Up@fGdC-B|(IIaVjw`XMnR4do4(}ceLED$#?I4PhZt?V;F{(zNyX4aU6>oTI<~I zR%1+|Z@pO>D9unx@mz^sV2R6KAHrH&a3w(Uah_+1dcf$ic$W0J$AsEGc`x}F-{G8# oT0W#ZA~$;zN&n?%4r~@-v(K$0B;Q#;t diff --git a/docs/Saml/img/iviewer/hand.cur b/docs/Saml/img/iviewer/hand.cur deleted file mode 100644 index 1a5bafb5263fd4937dda4098b04aa5c70e2de924..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1150 zcma)3OKyWe4E694LIn}22q6~8?0U4`qB$BzVUYuLnN^5A#g-vqrbZ8co}UNC0FIu^ z1?Y|NodI+J@I{~!RsQPaynTKEFe0{|*)R-iM9cJuPktQ*F&}vmxJX7;nU}sFz|xzG*A)o1}vy~Np8!oh{{D) z3FWrSE(G-lOIo^%@l%Jh z7d(bKZD(=f(+rDu3Ibk!p~fAzvAEw(G5oFaf>VGX;I$X`=G^#MhKzfwaaX++^R_aG z{23g@-KfbsV!rlS8y~jNpC$Q98001E5Sq?VpxukSs-?)+t$^aeGL+RsprA4wk<#_> z_+u(WTiH*vZ^%;_bKH_BUEq}jd#?-l#9J=q_v{?VaI4}Q9JQ|FoaxO4M#r~&(9l-@ga5_qddH0^Pp)3D%%13U()$KPZ9mfuKHeN zh|FV%AcKd9$Xte~JpHr7ISdEsS=dbylRpV}b%EG*(H$Zm7BrYE89CoGzCv2mgg*7U?}T-eQj1 z{ctQepE}YD%L6}S{pbtWcxoXGX*qRvIs~7NleuJ1rI2sTU9}wgEO}#naM{Mwl$wh8u zCnBy@;!tLlFk2ANZy*yRh*u1IjEu7sgd^u~j?-pP>cuPS5S69F5h60HO2`84nde#W zyHhV;*NN!tY8*EZeXCkX$LB3TNWEh+HIj>(aWc0CrwBgBQY@5_fO(q}ggUVHfHYwh z33cBmty=DP=A9=gECUXndMm_NP*e}Z-LCDyS)!}~n7b*S3$R(WUj{y!TOYyebROJ- zFF$p&>5+Q7DfKeS+K_mst_KprM8H(Hy%~al3{|Z#A5JZTYe-7!V4F>!)KgSFrn=vN z3kCIkDE(K!G*^RwzlwE`Dy#7rUC1u2#kz=0tng2mHP|cZPQ4qN4qPSy<|wW2D5KC{MlR z;>)=A5V)!Cz;#udS#FfKqnHHD=_R1Ptpjzf{nOgnDXf!ZtKqUo3Ky}YM}T&xUI8_p z+{#DD)pj7q40-gM-UA6eVt~J6Ck37*j6+@9f{jOSVfEgWC}V(*7I~i&Dx8uU4S&P_ z;3=qW>uyHVjD_fF#+pz$KVvi(@T$|6gmQ;1NkX6Jb)Y}^@BGWy!Sjrgf9<#ho=bDz zCj-9w{fH|?2J}+O500000NkvXXu0mjf*RRDb diff --git a/docs/Saml/img/iviewer/iviewer.rotate_right.png b/docs/Saml/img/iviewer/iviewer.rotate_right.png deleted file mode 100644 index 7a6c829871d058af5a5ca0ac67256c259f84c5ac..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1482 zcmV;*1vUDKP)W@q8L24va@vW@P7*!=(&yIADtgIo?`IW@@z#oP%kAO5~e4>aSvdau$keO zelrxe7h>a?XEPGL-8ZvUK7S5JxO_SC%cam%h9U3nOynA8Bd1~p@(p_slER=;FN42~ zVT$Cx%L&IBfqkNPU0Q$wV<=M8^Ktsd`-seX8%Hx4(Mza9RSeQph6Cvg*A2_?bs*!Z zJm9Mh7vz)H#bKgf96Z*=%6lrx!F>}8+<9p(ZW^~EGIuaSuQBYWfCsY}!gCl75#iYs zn4X1YwmkE{L{qbYU7_|vC;44Kc>_>d53G;Ofy>H6K72&Q1n)K0hYkOJ{}5yueQ_kO zAEZ3kO@`uTdQ^;QD4P$Xc-46$f7y>g|g44T+ z#BgE=@!>Z#-vKoL6Wa&pE*R*#HWno`0s)tGNL1G$LZyexFDGPt0qahH^Hl0tOywX% zlsY1!jA8k4hEa>zCTrlAtqC<~Car`X>shKzaMo5pP+|!}lx4#8x7#jb=yVHAyecTTC4J8t z#9H#H1x)ab5$qRn{T_~Gwh%$&8k>4#Nl^>etY1&RH*c@JV*VdWES08K(6hJ3ua1F+ z1Vqx@pUkersqB_Ip|BQ5mEtYg?Pld26u-(ZDhIXZN8p8vpywZqUmXq21K`XJ6VBRD zSPjgUh_hsuo0Zq@#H52sg=lQDK%p}U0=)MqxPXrz3y|HcLaYr6jTyT{TGH;2&kl$g zvn(tPnZ+iUo13A~-oxKTMnQmAi+~YaKrsopkYC+_iv!`6FZ*8at59p?CSTLD^ce@1hVDp0-#Q zq7i&EGSIAWEAo-(3@vR~e8qHMf3DS%&Pzg-H4FABh2HRK5QhTu_A0SBL~)<~@sXQv zl!l*(`MH4my)*cGH#$9gu8S$5cCU4I9uNy}^C|I;^|0b5vYngtVB^%;d7vlsx1OAw ktS2S0?VM~5JkO{63m1~IVD>3BuK)l507*qoM6N<$f)6RO6951J diff --git a/docs/Saml/img/iviewer/iviewer.zoom_fit.png b/docs/Saml/img/iviewer/iviewer.zoom_fit.png deleted file mode 100644 index 364e01d90eae19584713851314629f2468198e9e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1252 zcmbVMZD`zN9M7nO!F>6)Qu>rmKTa$KDx31r-tX6e<%`(6Krd_QfiW`8t`1_@uq7ekl83AbH+? zzu*7$$#_?1`>KY!8VG_|C2bSZcx-mx`sMihAai~i59?7fi@MD`D#97s?^ptvbD@%0UaWlEb9Y?!POak>Kac>j_lvC`$F%JGkXW>_ZEGx zJom!Kv#(7V2O9tK-kSZb!BUHpo@HF_;W5I?7`%^kn|fV6LyKC%38?;(5V z!PU9ZKS#&d``e%Ktf-E%=q0M&EZqyy}ir$_H&JcW2fJ{{PgiX z8-IUUIXQgrq&9v}_F_|k9sDEvsw97zUz^v|wk^6~k{(E}g+-F{ISKr))j<47BXr41~e0blAr&bSs z|IrSo^7@evzS-=(@x`Huqc2r99GkQ^PabxeDqKE2-7j>wsvG2m_N{Pyfo(Z~3KXY?;^Pc&YH??aJsCHEo`3 w8eZ!(AMJatv3kpyYro>2$M)>r+u)qoRbjGiisBQYX$xZ(3D5f)$iQF?09S=3^#A|> diff --git a/docs/Saml/img/iviewer/iviewer.zoom_in.png b/docs/Saml/img/iviewer/iviewer.zoom_in.png deleted file mode 100644 index 78993327c62ddd64e7fe33bc1b0d469ef9e17f30..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1420 zcmbVMeM}o=96n$mLI`O1*jPqxokAS8_t9QIP6}&#?I^6YLL;DzakN*s!1Zp|0}9Rz z8rh;F0cBg38IU39T#zkeLnml8hzMCSG?@^xXdOBYVGI|HL|oz(DEbH4A6|0zem&3g z`+V;WTfxD&nA8{m0OHKKM4>pQ1>fi>@%sWi*eedZ1Y?O%#JYqAlBWQjldYscGecHU zg%s&*JUU5b0YHS4wwDMcmP5FMWn^R!Bl9wx$OeF{94|*YYA6A$q^fAQR`OuPF9B(% zR#J>vU<+rUs_EP&o+@f8usfP+92%!2CmYQ2;-UaU2_)!cYTX{(tCg(l;^I8G4N1Ut zh)|=IY&cb7v4IAbr$9^wOC7Kh29<~mkt? zy6{56v}sFRX(iQyz~K<#uSL*ic3n>tk$HCK_ zK(lTzs7O|_b%ItRdb$w;!&xj_!fwxIqQsOzUXp_l84NK@Fs^m9M<}HJbz@t!$KJ?M zP$A`E>v)G)57)jBS6;_)Fv2Ks*P|kY8`^A2u!ZfsWAnHVJ68Y*ZF@k28qrD)nZSf_1^Pw#| z@pZkmCA&G}0&7bcjq%x*?aRCV3irha4o~M_DArx{=C$ijm7gxpJfn{2L~$I+EADGSEAJts^bthXdZ0!+7(pGrKca+s`)MokNH6@80m`S3a@u zY1ygFvFkgB8j(NleZ>ubn=|IJ|7-yHzY}KZV-M0lk+#l6X1~TQy|p*uWp8(@{ii>t zUM%g1pU@A_-dyI62l_3g1J;f*Z-2$!(N|(ifOlu2-fw+1YIXRfE0Nik_Z$MUT=6@` he~f-qo>Y;tmQ(?tGoVp(DLyXve>58lh(UdY?;kaa{Rsd7 diff --git a/docs/Saml/img/iviewer/iviewer.zoom_in2.gif b/docs/Saml/img/iviewer/iviewer.zoom_in2.gif deleted file mode 100644 index 5d596181627a30344f9783d466ce0558279fe729..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 90 zcmZ?wbhEHblwpuzXkcUjg8%>j>wsvG2m_O4Pyfo(Z}}I`;fT1UbHL~G(^^jrxfIDc qOSLxju^l&BbLLyj{a>m(=kzlMwFoEmw|glD9`i8f>~-Q|um%7;9UyH0 diff --git a/docs/Saml/img/iviewer/iviewer.zoom_out.png b/docs/Saml/img/iviewer/iviewer.zoom_out.png deleted file mode 100644 index 893f3502baaab667354fe8b560c1712b72630836..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1416 zcmeAS@N?(olHy`uVBq!ia0vp^av;pX1|+Qw)-3{3k|nMYCBgY=CFO}lsSJ)O`AMk? zp1FzXsX?iUDV2pMQ*9U+m{T%CB1$5BeXNr6bM+EIYV;~{3xK*A7;Nk-3KEmEQ%e+* zQqwc@Y?a>c-mj#PnPRIHZt82`Ti~3Uk?B!Ylp0*+7m{3+ootz+WN)WnQ(*-(AUCxn zQK2F?C$HG5!d3}vt`(3C64qBz04piUwpD^SD#ABF!8yMuRl!uxKsVXI%s|1+P|wiV z#N6CmN5ROz&_Lh7NZ-&%*U;R`*vQJjKmiJrfVLH-q*(>IxIyg#@@$ndN=gc>^!3Zj z%k|2Q_413-^$jg8EkR}&8R-I5=oVMzl_XZ^<`pZ$OmImpPA){ffi_eM3D1{oGuTzrd=COM+4n&cLd=IHa;5RX-@T zIKQ+g85kdF$}r8qu)}W=NFmTQR{lkqz(`5Vami0E%}vcK@pQ3O0?O#6WTsddyBS)T zxj4DGI+;7U8WbpSnwXlJx+y{RrjQe2`as9%gOUbPQh^Bp(;tWlPxwF%JnN+90rN`{ zFk|eTuyZ2=1LH1F7srr_TYIJ*^g8Sy&?e2@*d%abWdMgri<5t&U4#0<`~ZPHTulKV zL_SFVVrt@l5PQLUVYuUp3a@^r?zky&+EXok@RH&z@w!8r$f$z%0{cUx;M)M%(BO@dlSAr|x|-`3zUuyW0)IVtW>|s>WVT?mGEc zSkr=`cGH2CXUi731dH|WWa9iWg>~1jL@c(3*I%OB-d`n9ld0_~{X@e~VM+?bvqa&xDF~4=3Dc{-t;PQB<+c zv78v6y_Q$sW5p8UNtB8n}}+(%+^^VTDLxDs_M@V zktZgdHP!#l9(Qv}igT01!>vuNAL^777;7#{%n;%?`4GGKfzXddg$9fTvuy=L>XpA# emo~({32$Iz;FK4L4Ckl>myMpTelF{r5}E)fw)-Uj diff --git a/docs/Saml/img/iviewer/iviewer.zoom_out2.gif b/docs/Saml/img/iviewer/iviewer.zoom_out2.gif deleted file mode 100644 index 77ec19af216c5525438e73e4fafef1ce08db3cf3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 69 zcmZ?wbhEHblwpuzXkcUjg8%>j>wsvG2m_N!Pyfo(Z}}I`*>bCU^SwRQTrH10rZprj VQ(Lv|A^Y)9KG(nX7PB%~0{{a@8tMQ5 diff --git a/docs/Saml/img/iviewer/iviewer.zoom_zero.png b/docs/Saml/img/iviewer/iviewer.zoom_zero.png deleted file mode 100644 index c981db6d690774d0c2e67e21c9081d5c89b5fd2d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1091 zcmbVL&ui0A9M4pSOy+USDH`Jt54L&lWo?(ZTAQSq1v^VuUA;)t~d_LcwSBo>#!$V_3 z9LEjkPwFMM?vLJ`gY0_@JiN=6Jv3LLv!qU2W`Mb@O=_6WyXHJDVbfl^_!>`f+;-b3 zS7@bhO0kF=HzS*P+w~cm6!@+QT}TTXPE`s;ULyhK6LAo; zKoamt7>CkCDwR6QBLIO2kO)x>rW6S&0Pwv>U}}L~S4z6k(_*Kz(4f>;M6uOs#amLG z1oI-4WjW$ND8?*e;gUzqcFYS8^%-;=T7lzJhj@I%Xx2!RrUmBdMhLE7C~OjYVJ}fE zWn$a(MHmO7>qc>PtwUPEf85y8IxH{wSS;a?Gy{v(qkgClX1V*fP-MuwQBDUAD~h?O z6RYWBkLLBX!2ZN-$5tc*P9}BL$f+qc2OyjTdQR0O9U94`B&o2^u@x4nAeBw1(2x=n z5avKO31v+Nl7u7!=(60$=Dm=bo`w6m4%6*n!9THz7GRT-piIbOzXOU5LP^*lKCjIt z_&LY3Nh^$svk|L~1LqR9jexj(H@k|ng?bW90+iEJ2GWfvYE_c6auz`iY1tG)S)qru z|0iQ2b4H9>hb!)51ol8qidf>uee2NcllE7&Y7PpcX!=7_qbu-x&Nqo^YXsS zx4psB1L(rH2OVv_Ry|wWf8@aTYwPTIZ{+>+x4F)XFBxU;`RVIF##f(pxPd|L)0^?x S8}D{hqp{BCX7q<@b>%mi3|d_P diff --git a/docs/Saml/img/iviewer/iviewer.zoom_zero2.gif b/docs/Saml/img/iviewer/iviewer.zoom_zero2.gif deleted file mode 100644 index e56c670fe62062458276fab5512701433b37af4e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 98 zcmZ?wbhEHblwpuzXkcUjg8%>j>wsvG2m_O2Pyfo(Z}}I`*>bDfkfCt*S=$8WwkJC( zzJkfa~h{)#m_`3lMtroEImLs1;u6tiCV=-88jK13lM}Ucoqsi(A?%{$02s z&eA5y&?&<|<LT~spE^ZvVS>1|r*(!}F5%Hh-ckGxoq}-_ zn=tXwoWW5y5s)XJF~ru@*Y9({3os1o>+cx}`RW$q80#EwpJN*|0nth|rd7x=kJ2*lib|@c=G(1pluEm zM?5x5JN;yCX?bOJZGB^NYkOyRkDlo8==kLHWdFe#G5N29B5b|?Ik}x=D=##FnEJ6o z3jG~@=>V$dR^LEd7t{6O_k~<`>8VZSLLbX-^SMXQh{du!F7HdAF@GJ$N6}Zlq-L%X zzwY)lV3QUkmU-;ZHEId8RLtg0O$*3Vx01_yQV{AD@+|}ZT@>ZguK?syFJjkxG-K2ghlZTYe!qDa$z#j-YB?pZq10~eaIfcP7FIB0Eosqew9a*>aP5@TT+hQ9op3bLhV9{@}hh_GQaxLF}XD?8UF8x#tFb{0O2HBl^9q#pWmI_6l=N%K~ z>INqm(|5hjgf^zC4787ogba1gmgbqgi3H;(Z2(quqrSFh7OWQJ<(l+C3|6g~M2u*d zQ7}vN;Zz8FcCZxjf5Q^{mmk6@pu9q9`8y6=c&A_ETpw4xHg;%})IeAURdjkO9h0b0 z(_pEmb#rT- zVQX(0>pQ%ELVO52K3zVtCgo+V@r@y8)P?cVRt8?*%F+2rZ7dc-TcK?lTymk=6miQ$ zVl;tgwjlDJ^0L&;_iT)D6ndeI^4lpL!u;0bKN4bQyNDUBM^@!1vm4T-0=uxR;Kd$t zAs4-3D<#+p7>G zHBiF(n&N@|Wc}Ye0<0Z_n^QF*7u@FJgIhDzUvH{pdkt*QRVC8e&Fc=YSsL9$V}$a^;`Rb>ywXQvB#q z+-qI;+X)sN2Dc|qW;TUe6n)M<728FQStq{@C$lPn}^efbI zgl{+EGf?6Ub_Q$)ImEQ@+1PqJ_;~s1`-1|dVCGt`ZV}crwstO2VSh(EM@Eq*3VVj9 zCVWr&78_!ep_mN)0m;rR3@Q#_N8V18L)BvH>KhudznYp`THA2#9i3hHCnP<+ef^O6{br6+ zk73lwjoN$EjNx()kEBDW>h$sxN-k20f_k_hq|Zy~5@*w%nIcTegL@`4m}*$vgo^-KL<#mf}@9wxYTM4SAo#D{vNw6ZdH-5 zp0D4VeT`F)OS{axJ1_O5Lh4f$aH`o%vZ@GB=^BRV|ManNqQZrQqDv9UJAt(#;*7J( zDEWwuLMf!JIu)D2Bl%p%I^4Nt@ELT$`wD1&06wQENMA4BcO|{p#3XwR4Yup6);yR$ zJ#ljA#y+E~@)CD)Y-+zR1UnUX05|qhY1Vn_*}K#c2rjUbT6?#WnS;FS+CA}cTnUiV zaN_lrZSUsHGj7#E@4nqK59g6!#1mTkXn%AYpjN*`(psCi_(6rhQbuzU}W)^Abce25xJUE#05w-Vow)2&+_6P)1yM%Z}1bI5bUik;d zxW!5*OD00%<5IaZQ=Y?fa`O=R1%*Y$C8cHM6%+s@3SC`OTS-^j(1@&QB~ZwZT{C);FqGwuh(arhMiN2WOc?)G6=TuRd9F~bu+hz)Y zrwu422HN{=Ab}kbx7=-Q(llc4b5ag4JO29>J33s@UbtG8LIke7p%0;zDo9;lag{&S zc{qhQ4*z0M?`!({tNd}eF3GMaR6kJeR$Ca+PPaaaHr<%-tgb3DLQw&(zZOd<_Q%35 zI4~T@mm`f)GYV;36{Tjy34C>99SnI3cn_AaffOXzqB%zjp)Y~1uhleLifSd3-?zfjD?z z=ZLCYJF2S)ht3N#-V=0h^v*b~I?Y*(Zv$WiVyt%)i@|y9wMjGLk-W@ zr=MGZH%!Ol3pkKILNhYY2mJ+-<`~&gR-+|pjJPeGt_f}^AZbk z?-YlXp{r{AOYOv(F-UMzB3<>>+b#E{-P%O(_b^=0+%i{xxl-!F~7#Kxl6RY zv$ru)d*|qQ_!M<g=t2_njk86Ak8lPzj}Cd`b%9{r)#>kW~~J+_G+jjmR){)R*RNKI!)x0pV#nC4?gUj7;~)KizdYcWhwCp z4r7i#{dJW+nt8;Hq0EYv`9noC9eH{uhR{oXW^l~Kwgq~nwhPO#_kE#PE_7YRv&vz- zHhAeRbw|R>sYVy7X9I+)60^FaXA@n14$lip5K#*2*EhY_P>dZ=326BM$uR@;GyN zcTL`8eSB9BCz(wHAqq76Fs4A(NTEO{H#&Rg`bW`1Lu(B&PZx=vVh<&iM0`p)V~5=d z<>sQRO61U(t~c<)os09mVv-fk106IrSyMK#~4^DJQj!5-Mx5y04a`~wT z_sX?Js1-OBnU=_xSw}|6`i8!}75lM5r%DQC^h>!}velcq<}0QS(4~o!=@3@@t6QMA zZuIVWty^FH^zZQz{iSuqLS(F7R@F~tKV4ABy5Y z(|Z4^LjG6N>?zq5NGPZcLF6qL9?UIdSr~&@@!?HY3nnlq*QV1@Gl|-VXYohr9w(_< zd`2U5J`Hib#I12)>WYz--0&KZp-BN-^~8d(n+nT|brA;-CM)lkwoo=de@V@=mIz8*luKuwLW6Xz`k-Z7FF|%pa{@OdGs80sA@2;uw>)B4?;`vCV*BWL z$@Ap=;txp084dn7XgPGX9H3a(5w3P5B^;BY^hY5Kr}Em z`q#0#waQJ|#~x;Ff6WcWngPc@=zOryinJc)aXyJN)MtJooi3vv&hz!Dzm`T&L&ZEqa_#cIovV#lrzgM$#a24&0@)GOG6oK zNISh_!SznG=OBdqq-uT&_|<^hj;UoDez z{A@lINN;|nLYH+G^so4=be`NYWdAa|sP{In&;}uB#^wLpaKf#SDsttbI8p5bfx)>p z-SID`+hHy2_>z3`q%MXJR!Ta);j23h5gv6s`N(qag)UH>hwY?ii$lc%A9XQnyI*&-4FZ4xIr0!KXEHyx#u?(Y=)T;)e}^>r4u#*L|T)Vf1|FvqGOQjNe7D3OKGV zZkn{lkjg|WfoRy|VmYZQ!Ke}gr2sxl{Q!49LzUF$w)=MvfzR-n=b=5~p&xP;v!zqN z2aEuh<@1CJf_^aqR}?elp1%fg(Aa1J^xK!k5Dr}0;kugH1*kY%^(uSrW;PMJ!r@}- z$0P6VAO13I3>0HhSv7k34?aq$(kpzdF=`oQ3-}BP;0E|iJE{lDd zpIpz!JOfr|Q1P0W^W**Hjiwe0=CpJ7%^d?*3!e#b(p}yY)By`*?Q1-X<=&EJhR5}R ffeagp#&}jgDu`gFfASxbzOtb|ZAN*iL}LE|Ye$WH diff --git a/docs/Saml/index.html b/docs/Saml/index.html deleted file mode 100644 index bf5027b1..00000000 --- a/docs/Saml/index.html +++ /dev/null @@ -1,110 +0,0 @@ - - - - - - SAML PHP Toolkit - - - - - - - - - - - - - - - - - - - - - - -
- - -
-

SAML PHP Toolkit

-

Documentation SAML lib

-
- -
-
-
- -
- -
-
-
- -
-
-
-
- - - - diff --git a/docs/Saml/js/SVGPan.js b/docs/Saml/js/SVGPan.js deleted file mode 100644 index 4966b999..00000000 --- a/docs/Saml/js/SVGPan.js +++ /dev/null @@ -1,232 +0,0 @@ -/** - * SVGPan library 1.2 - phpDocumentor1 - * ==================== - * - * Given an unique existing element with id "viewport", including the - * the library into any SVG adds the following capabilities: - * - * - Mouse panning - * - Mouse zooming (using the wheel) - * - Object dargging - * - * Known issues: - * - * - Zooming (while panning) on Safari has still some issues - * - * Releases: - * - * 1.2 - phpDocumentor1, Fri Apr 08 19:19:00 CET 2011, Mike van Riel - * Increased zoom speed with 20% - * Disabled element moving functionality - * - * 1.2, Sat Mar 20 08:42:50 GMT 2010, Zeng Xiaohui - * Fixed a bug with browser mouse handler interaction - * - * 1.1, Wed Feb 3 17:39:33 GMT 2010, Zeng Xiaohui - * Updated the zoom code to support the mouse wheel on Safari/Chrome - * - * 1.0, Andrea Leofreddi - * First release - * - * This code is licensed under the following BSD license: - * - * Copyright 2009-2010 Andrea Leofreddi . All rights reserved. - * - * Redistribution and use in source and binary forms, with or without modification, are - * permitted provided that the following conditions are met: - * - * 1. Redistributions of source code must retain the above copyright notice, this list of - * conditions and the following disclaimer. - * - * 2. Redistributions in binary form must reproduce the above copyright notice, this list - * of conditions and the following disclaimer in the documentation and/or other materials - * provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY Andrea Leofreddi ``AS IS'' AND ANY EXPRESS OR IMPLIED - * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND - * FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL Andrea Leofreddi OR - * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR - * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR - * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON - * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING - * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF - * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - * - * The views and conclusions contained in the software and documentation are those of the - * authors and should not be interpreted as representing official policies, either expressed - * or implied, of Andrea Leofreddi. - */ - -var root = document.documentElement; - -var state = 'none', stateTarget, stateOrigin, stateTf; - -setupHandlers(root); - -/** - * Register handlers - */ -function setupHandlers(root){ - setAttributes(root, { - "onmouseup" : "add(evt)", - "onmousedown" : "handleMouseDown(evt)", - "onmousemove" : "handleMouseMove(evt)", - "onmouseup" : "handleMouseUp(evt)", -// "onmouseout" : "handleMouseUp(evt)" // Decomment this to stop the pan functionality when dragging out of the SVG element - }); - - if(navigator.userAgent.toLowerCase().indexOf('webkit') >= 0) - window.addEventListener('mousewheel', handleMouseWheel, false); // Chrome/Safari - else - window.addEventListener('DOMMouseScroll', handleMouseWheel, false); // Others -} - -/** - * Instance an SVGPoint object with given event coordinates. - */ -function getEventPoint(evt) { - var p = root.createSVGPoint(); - - p.x = evt.clientX; - p.y = evt.clientY; - - return p; -} - -/** - * Sets the current transform matrix of an element. - */ -function setCTM(element, matrix) { - var s = "matrix(" + matrix.a + "," + matrix.b + "," + matrix.c + "," + matrix.d + "," + matrix.e + "," + matrix.f + ")"; - - element.setAttribute("transform", s); -} - -/** - * Dumps a matrix to a string (useful for debug). - */ -function dumpMatrix(matrix) { - var s = "[ " + matrix.a + ", " + matrix.c + ", " + matrix.e + "\n " + matrix.b + ", " + matrix.d + ", " + matrix.f + "\n 0, 0, 1 ]"; - - return s; -} - -/** - * Sets attributes of an element. - */ -function setAttributes(element, attributes){ - for (i in attributes) - element.setAttributeNS(null, i, attributes[i]); -} - -/** - * Handle mouse move event. - */ -function handleMouseWheel(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - var delta; - - if(evt.wheelDelta) - delta = evt.wheelDelta / 3600; // Chrome/Safari - else - delta = evt.detail / -90; // Mozilla - - var z = 1 + (delta * 1.2); // Zoom factor: 0.9/1.1 - - var g = svgDoc.getElementById("viewport"); - - var p = getEventPoint(evt); - - p = p.matrixTransform(g.getCTM().inverse()); - - // Compute new scale matrix in current mouse position - var k = root.createSVGMatrix().translate(p.x, p.y).scale(z).translate(-p.x, -p.y); - - setCTM(g, g.getCTM().multiply(k)); - - stateTf = stateTf.multiply(k.inverse()); -} - -/** - * Handle mouse move event. - */ -function handleMouseMove(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - var g = svgDoc.getElementById("viewport"); - - if(state == 'pan') { - // Pan mode - var p = getEventPoint(evt).matrixTransform(stateTf); - - setCTM(g, stateTf.inverse().translate(p.x - stateOrigin.x, p.y - stateOrigin.y)); - } else if(state == 'move') { - // Move mode - var p = getEventPoint(evt).matrixTransform(g.getCTM().inverse()); - - setCTM(stateTarget, root.createSVGMatrix().translate(p.x - stateOrigin.x, p.y - stateOrigin.y).multiply(g.getCTM().inverse()).multiply(stateTarget.getCTM())); - - stateOrigin = p; - } -} - -/** - * Handle click event. - */ -function handleMouseDown(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - var g = svgDoc.getElementById("viewport"); - -// if(evt.target.tagName == "svg") { - // Pan mode - state = 'pan'; - - stateTf = g.getCTM().inverse(); - - stateOrigin = getEventPoint(evt).matrixTransform(stateTf); -// } else { - // Move mode -// state = 'move'; -// -// stateTarget = evt.target; -// -// stateTf = g.getCTM().inverse(); -// -// stateOrigin = getEventPoint(evt).matrixTransform(stateTf); -// } -} - -/** - * Handle mouse button release event. - */ -function handleMouseUp(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - if(state == 'pan' || state == 'move') { - // Quit pan mode - state = ''; - } -} - diff --git a/docs/Saml/js/bootstrap.js b/docs/Saml/js/bootstrap.js deleted file mode 100644 index c832ccb2..00000000 --- a/docs/Saml/js/bootstrap.js +++ /dev/null @@ -1,1722 +0,0 @@ -/* =================================================== - * bootstrap-transition.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#transitions - * =================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - -!function( $ ) { - - $(function () { - - "use strict" - - /* CSS TRANSITION SUPPORT (https://gist.github.com/373874) - * ======================================================= */ - - $.support.transition = (function () { - var thisBody = document.body || document.documentElement - , thisStyle = thisBody.style - , support = thisStyle.transition !== undefined || thisStyle.WebkitTransition !== undefined || thisStyle.MozTransition !== undefined || thisStyle.MsTransition !== undefined || thisStyle.OTransition !== undefined - - return support && { - end: (function () { - var transitionEnd = "TransitionEnd" - if ( $.browser.webkit ) { - transitionEnd = "webkitTransitionEnd" - } else if ( $.browser.mozilla ) { - transitionEnd = "transitionend" - } else if ( $.browser.opera ) { - transitionEnd = "oTransitionEnd" - } - return transitionEnd - }()) - } - })() - - }) - -}( window.jQuery ) -/* ========================================================== - * bootstrap-alert.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#alerts - * ========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - - -!function( $ ){ - - "use strict" - - /* ALERT CLASS DEFINITION - * ====================== */ - - var dismiss = '[data-dismiss="alert"]' - , Alert = function ( el ) { - $(el).on('click', dismiss, this.close) - } - - Alert.prototype = { - - constructor: Alert - - , close: function ( e ) { - var $this = $(this) - , selector = $this.attr('data-target') - , $parent - - if (!selector) { - selector = $this.attr('href') - selector = selector && selector.replace(/.*(?=#[^\s]*$)/, '') //strip for ie7 - } - - $parent = $(selector) - $parent.trigger('close') - - e && e.preventDefault() - - $parent.length || ($parent = $this.hasClass('alert') ? $this : $this.parent()) - - $parent.removeClass('in') - - function removeElement() { - $parent.remove() - $parent.trigger('closed') - } - - $.support.transition && $parent.hasClass('fade') ? - $parent.on($.support.transition.end, removeElement) : - removeElement() - } - - } - - - /* ALERT PLUGIN DEFINITION - * ======================= */ - - $.fn.alert = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('alert') - if (!data) $this.data('alert', (data = new Alert(this))) - if (typeof option == 'string') data[option].call($this) - }) - } - - $.fn.alert.Constructor = Alert - - - /* ALERT DATA-API - * ============== */ - - $(function () { - $('body').on('click.alert.data-api', dismiss, Alert.prototype.close) - }) - -}( window.jQuery ) -/* ============================================================ - * bootstrap-button.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#buttons - * ============================================================ - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - -!function( $ ){ - - "use strict" - - /* BUTTON PUBLIC CLASS DEFINITION - * ============================== */ - - var Button = function ( element, options ) { - this.$element = $(element) - this.options = $.extend({}, $.fn.button.defaults, options) - } - - Button.prototype = { - - constructor: Button - - , setState: function ( state ) { - var d = 'disabled' - , $el = this.$element - , data = $el.data() - , val = $el.is('input') ? 'val' : 'html' - - state = state + 'Text' - data.resetText || $el.data('resetText', $el[val]()) - - $el[val](data[state] || this.options[state]) - - // push to event loop to allow forms to submit - setTimeout(function () { - state == 'loadingText' ? - $el.addClass(d).attr(d, d) : - $el.removeClass(d).removeAttr(d) - }, 0) - } - - , toggle: function () { - var $parent = this.$element.parent('[data-toggle="buttons-radio"]') - - $parent && $parent - .find('.active') - .removeClass('active') - - this.$element.toggleClass('active') - } - - } - - - /* BUTTON PLUGIN DEFINITION - * ======================== */ - - $.fn.button = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('button') - , options = typeof option == 'object' && option - if (!data) $this.data('button', (data = new Button(this, options))) - if (option == 'toggle') data.toggle() - else if (option) data.setState(option) - }) - } - - $.fn.button.defaults = { - loadingText: 'loading...' - } - - $.fn.button.Constructor = Button - - - /* BUTTON DATA-API - * =============== */ - - $(function () { - $('body').on('click.button.data-api', '[data-toggle^=button]', function ( e ) { - $(e.target).button('toggle') - }) - }) - -}( window.jQuery ) -/* ========================================================== - * bootstrap-carousel.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#carousel - * ========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - - -!function( $ ){ - - "use strict" - - /* CAROUSEL CLASS DEFINITION - * ========================= */ - - var Carousel = function (element, options) { - this.$element = $(element) - this.options = $.extend({}, $.fn.carousel.defaults, options) - this.options.slide && this.slide(this.options.slide) - } - - Carousel.prototype = { - - cycle: function () { - this.interval = setInterval($.proxy(this.next, this), this.options.interval) - return this - } - - , to: function (pos) { - var $active = this.$element.find('.active') - , children = $active.parent().children() - , activePos = children.index($active) - , that = this - - if (pos > (children.length - 1) || pos < 0) return - - if (this.sliding) { - return this.$element.one('slid', function () { - that.to(pos) - }) - } - - if (activePos == pos) { - return this.pause().cycle() - } - - return this.slide(pos > activePos ? 'next' : 'prev', $(children[pos])) - } - - , pause: function () { - clearInterval(this.interval) - return this - } - - , next: function () { - if (this.sliding) return - return this.slide('next') - } - - , prev: function () { - if (this.sliding) return - return this.slide('prev') - } - - , slide: function (type, next) { - var $active = this.$element.find('.active') - , $next = next || $active[type]() - , isCycling = this.interval - , direction = type == 'next' ? 'left' : 'right' - , fallback = type == 'next' ? 'first' : 'last' - , that = this - - this.sliding = true - - isCycling && this.pause() - - $next = $next.length ? $next : this.$element.find('.item')[fallback]() - - if (!$.support.transition && this.$element.hasClass('slide')) { - this.$element.trigger('slide') - $active.removeClass('active') - $next.addClass('active') - this.sliding = false - this.$element.trigger('slid') - } else { - $next.addClass(type) - $next[0].offsetWidth // force reflow - $active.addClass(direction) - $next.addClass(direction) - this.$element.trigger('slide') - this.$element.one($.support.transition.end, function () { - $next.removeClass([type, direction].join(' ')).addClass('active') - $active.removeClass(['active', direction].join(' ')) - that.sliding = false - setTimeout(function () { that.$element.trigger('slid') }, 0) - }) - } - - isCycling && this.cycle() - - return this - } - - } - - - /* CAROUSEL PLUGIN DEFINITION - * ========================== */ - - $.fn.carousel = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('carousel') - , options = typeof option == 'object' && option - if (!data) $this.data('carousel', (data = new Carousel(this, options))) - if (typeof option == 'number') data.to(option) - else if (typeof option == 'string' || (option = options.slide)) data[option]() - else data.cycle() - }) - } - - $.fn.carousel.defaults = { - interval: 5000 - } - - $.fn.carousel.Constructor = Carousel - - - /* CAROUSEL DATA-API - * ================= */ - - $(function () { - $('body').on('click.carousel.data-api', '[data-slide]', function ( e ) { - var $this = $(this), href - , $target = $($this.attr('data-target') || (href = $this.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '')) //strip for ie7 - , options = !$target.data('modal') && $.extend({}, $target.data(), $this.data()) - $target.carousel(options) - e.preventDefault() - }) - }) - -}( window.jQuery ) -/* ============================================================= - * bootstrap-collapse.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#collapse - * ============================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - -!function( $ ){ - - "use strict" - - var Collapse = function ( element, options ) { - this.$element = $(element) - this.options = $.extend({}, $.fn.collapse.defaults, options) - - if (this.options["parent"]) { - this.$parent = $(this.options["parent"]) - } - - this.options.toggle && this.toggle() - } - - Collapse.prototype = { - - constructor: Collapse - - , dimension: function () { - var hasWidth = this.$element.hasClass('width') - return hasWidth ? 'width' : 'height' - } - - , show: function () { - var dimension = this.dimension() - , scroll = $.camelCase(['scroll', dimension].join('-')) - , actives = this.$parent && this.$parent.find('.in') - , hasData - - if (actives && actives.length) { - hasData = actives.data('collapse') - actives.collapse('hide') - hasData || actives.data('collapse', null) - } - - this.$element[dimension](0) - this.transition('addClass', 'show', 'shown') - this.$element[dimension](this.$element[0][scroll]) - - } - - , hide: function () { - var dimension = this.dimension() - this.reset(this.$element[dimension]()) - this.transition('removeClass', 'hide', 'hidden') - this.$element[dimension](0) - } - - , reset: function ( size ) { - var dimension = this.dimension() - - this.$element - .removeClass('collapse') - [dimension](size || 'auto') - [0].offsetWidth - - this.$element.addClass('collapse') - } - - , transition: function ( method, startEvent, completeEvent ) { - var that = this - , complete = function () { - if (startEvent == 'show') that.reset() - that.$element.trigger(completeEvent) - } - - this.$element - .trigger(startEvent) - [method]('in') - - $.support.transition && this.$element.hasClass('collapse') ? - this.$element.one($.support.transition.end, complete) : - complete() - } - - , toggle: function () { - this[this.$element.hasClass('in') ? 'hide' : 'show']() - } - - } - - /* COLLAPSIBLE PLUGIN DEFINITION - * ============================== */ - - $.fn.collapse = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('collapse') - , options = typeof option == 'object' && option - if (!data) $this.data('collapse', (data = new Collapse(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.collapse.defaults = { - toggle: true - } - - $.fn.collapse.Constructor = Collapse - - - /* COLLAPSIBLE DATA-API - * ==================== */ - - $(function () { - $('body').on('click.collapse.data-api', '[data-toggle=collapse]', function ( e ) { - var $this = $(this), href - , target = $this.attr('data-target') - || e.preventDefault() - || (href = $this.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '') //strip for ie7 - , option = $(target).data('collapse') ? 'toggle' : $this.data() - $(target).collapse(option) - }) - }) - -}( window.jQuery ) -/* ============================================================ - * bootstrap-dropdown.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#dropdowns - * ============================================================ - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - - -!function( $ ){ - - "use strict" - - /* DROPDOWN CLASS DEFINITION - * ========================= */ - - var toggle = '[data-toggle="dropdown"]' - , Dropdown = function ( element ) { - var $el = $(element).on('click.dropdown.data-api', this.toggle) - $('html').on('click.dropdown.data-api', function () { - $el.parent().removeClass('open') - }) - } - - Dropdown.prototype = { - - constructor: Dropdown - - , toggle: function ( e ) { - var $this = $(this) - , selector = $this.attr('data-target') - , $parent - , isActive - - if (!selector) { - selector = $this.attr('href') - selector = selector && selector.replace(/.*(?=#[^\s]*$)/, '') //strip for ie7 - } - - $parent = $(selector) - $parent.length || ($parent = $this.parent()) - - isActive = $parent.hasClass('open') - - clearMenus() - !isActive && $parent.toggleClass('open') - - return false - } - - } - - function clearMenus() { - $(toggle).parent().removeClass('open') - } - - - /* DROPDOWN PLUGIN DEFINITION - * ========================== */ - - $.fn.dropdown = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('dropdown') - if (!data) $this.data('dropdown', (data = new Dropdown(this))) - if (typeof option == 'string') data[option].call($this) - }) - } - - $.fn.dropdown.Constructor = Dropdown - - - /* APPLY TO STANDARD DROPDOWN ELEMENTS - * =================================== */ - - $(function () { - $('html').on('click.dropdown.data-api', clearMenus) - $('body').on('click.dropdown.data-api', toggle, Dropdown.prototype.toggle) - }) - -}( window.jQuery ) -/* ========================================================= - * bootstrap-modal.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#modals - * ========================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================= */ - - -!function( $ ){ - - "use strict" - - /* MODAL CLASS DEFINITION - * ====================== */ - - var Modal = function ( content, options ) { - this.options = $.extend({}, $.fn.modal.defaults, options) - this.$element = $(content) - .delegate('[data-dismiss="modal"]', 'click.dismiss.modal', $.proxy(this.hide, this)) - } - - Modal.prototype = { - - constructor: Modal - - , toggle: function () { - return this[!this.isShown ? 'show' : 'hide']() - } - - , show: function () { - var that = this - - if (this.isShown) return - - $('body').addClass('modal-open') - - this.isShown = true - this.$element.trigger('show') - - escape.call(this) - backdrop.call(this, function () { - var transition = $.support.transition && that.$element.hasClass('fade') - - !that.$element.parent().length && that.$element.appendTo(document.body) //don't move modals dom position - - that.$element - .show() - - if (transition) { - that.$element[0].offsetWidth // force reflow - } - - that.$element.addClass('in') - - transition ? - that.$element.one($.support.transition.end, function () { that.$element.trigger('shown') }) : - that.$element.trigger('shown') - - }) - } - - , hide: function ( e ) { - e && e.preventDefault() - - if (!this.isShown) return - - var that = this - this.isShown = false - - $('body').removeClass('modal-open') - - escape.call(this) - - this.$element - .trigger('hide') - .removeClass('in') - - $.support.transition && this.$element.hasClass('fade') ? - hideWithTransition.call(this) : - hideModal.call(this) - } - - } - - - /* MODAL PRIVATE METHODS - * ===================== */ - - function hideWithTransition() { - var that = this - , timeout = setTimeout(function () { - that.$element.off($.support.transition.end) - hideModal.call(that) - }, 500) - - this.$element.one($.support.transition.end, function () { - clearTimeout(timeout) - hideModal.call(that) - }) - } - - function hideModal( that ) { - this.$element - .hide() - .trigger('hidden') - - backdrop.call(this) - } - - function backdrop( callback ) { - var that = this - , animate = this.$element.hasClass('fade') ? 'fade' : '' - - if (this.isShown && this.options.backdrop) { - var doAnimate = $.support.transition && animate - - this.$backdrop = $('
') - .appendTo(document.body) - - if (this.options.backdrop != 'static') { - this.$backdrop.click($.proxy(this.hide, this)) - } - - if (doAnimate) this.$backdrop[0].offsetWidth // force reflow - - this.$backdrop.addClass('in') - - doAnimate ? - this.$backdrop.one($.support.transition.end, callback) : - callback() - - } else if (!this.isShown && this.$backdrop) { - this.$backdrop.removeClass('in') - - $.support.transition && this.$element.hasClass('fade')? - this.$backdrop.one($.support.transition.end, $.proxy(removeBackdrop, this)) : - removeBackdrop.call(this) - - } else if (callback) { - callback() - } - } - - function removeBackdrop() { - this.$backdrop.remove() - this.$backdrop = null - } - - function escape() { - var that = this - if (this.isShown && this.options.keyboard) { - $(document).on('keyup.dismiss.modal', function ( e ) { - e.which == 27 && that.hide() - }) - } else if (!this.isShown) { - $(document).off('keyup.dismiss.modal') - } - } - - - /* MODAL PLUGIN DEFINITION - * ======================= */ - - $.fn.modal = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('modal') - , options = typeof option == 'object' && option - if (!data) $this.data('modal', (data = new Modal(this, options))) - if (typeof option == 'string') data[option]() - else data.show() - }) - } - - $.fn.modal.defaults = { - backdrop: true - , keyboard: true - } - - $.fn.modal.Constructor = Modal - - - /* MODAL DATA-API - * ============== */ - - $(function () { - $('body').on('click.modal.data-api', '[data-toggle="modal"]', function ( e ) { - var $this = $(this), href - , $target = $($this.attr('data-target') || (href = $this.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '')) //strip for ie7 - , option = $target.data('modal') ? 'toggle' : $.extend({}, $target.data(), $this.data()) - - e.preventDefault() - $target.modal(option) - }) - }) - -}( window.jQuery ) -/* =========================================================== - * bootstrap-tooltip.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#tooltips - * Inspired by the original jQuery.tipsy by Jason Frame - * =========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - -!function( $ ) { - - "use strict" - - /* TOOLTIP PUBLIC CLASS DEFINITION - * =============================== */ - - var Tooltip = function ( element, options ) { - this.init('tooltip', element, options) - } - - Tooltip.prototype = { - - constructor: Tooltip - - , init: function ( type, element, options ) { - var eventIn - , eventOut - - this.type = type - this.$element = $(element) - this.options = this.getOptions(options) - this.enabled = true - - if (this.options.trigger != 'manual') { - eventIn = this.options.trigger == 'hover' ? 'mouseenter' : 'focus' - eventOut = this.options.trigger == 'hover' ? 'mouseleave' : 'blur' - this.$element.on(eventIn, this.options.selector, $.proxy(this.enter, this)) - this.$element.on(eventOut, this.options.selector, $.proxy(this.leave, this)) - } - - this.options.selector ? - (this._options = $.extend({}, this.options, { trigger: 'manual', selector: '' })) : - this.fixTitle() - } - - , getOptions: function ( options ) { - options = $.extend({}, $.fn[this.type].defaults, options, this.$element.data()) - - if (options.delay && typeof options.delay == 'number') { - options.delay = { - show: options.delay - , hide: options.delay - } - } - - return options - } - - , enter: function ( e ) { - var self = $(e.currentTarget)[this.type](this._options).data(this.type) - - if (!self.options.delay || !self.options.delay.show) { - self.show() - } else { - self.hoverState = 'in' - setTimeout(function() { - if (self.hoverState == 'in') { - self.show() - } - }, self.options.delay.show) - } - } - - , leave: function ( e ) { - var self = $(e.currentTarget)[this.type](this._options).data(this.type) - - if (!self.options.delay || !self.options.delay.hide) { - self.hide() - } else { - self.hoverState = 'out' - setTimeout(function() { - if (self.hoverState == 'out') { - self.hide() - } - }, self.options.delay.hide) - } - } - - , show: function () { - var $tip - , inside - , pos - , actualWidth - , actualHeight - , placement - , tp - - if (this.hasContent() && this.enabled) { - $tip = this.tip() - this.setContent() - - if (this.options.animation) { - $tip.addClass('fade') - } - - placement = typeof this.options.placement == 'function' ? - this.options.placement.call(this, $tip[0], this.$element[0]) : - this.options.placement - - inside = /in/.test(placement) - - $tip - .remove() - .css({ top: 0, left: 0, display: 'block' }) - .appendTo(inside ? this.$element : document.body) - - pos = this.getPosition(inside) - - actualWidth = $tip[0].offsetWidth - actualHeight = $tip[0].offsetHeight - - switch (inside ? placement.split(' ')[1] : placement) { - case 'bottom': - tp = {top: pos.top + pos.height, left: pos.left + pos.width / 2 - actualWidth / 2} - break - case 'top': - tp = {top: pos.top - actualHeight, left: pos.left + pos.width / 2 - actualWidth / 2} - break - case 'left': - tp = {top: pos.top + pos.height / 2 - actualHeight / 2, left: pos.left - actualWidth} - break - case 'right': - tp = {top: pos.top + pos.height / 2 - actualHeight / 2, left: pos.left + pos.width} - break - } - - $tip - .css(tp) - .addClass(placement) - .addClass('in') - } - } - - , setContent: function () { - var $tip = this.tip() - $tip.find('.tooltip-inner').html(this.getTitle()) - $tip.removeClass('fade in top bottom left right') - } - - , hide: function () { - var that = this - , $tip = this.tip() - - $tip.removeClass('in') - - function removeWithAnimation() { - var timeout = setTimeout(function () { - $tip.off($.support.transition.end).remove() - }, 500) - - $tip.one($.support.transition.end, function () { - clearTimeout(timeout) - $tip.remove() - }) - } - - $.support.transition && this.$tip.hasClass('fade') ? - removeWithAnimation() : - $tip.remove() - } - - , fixTitle: function () { - var $e = this.$element - if ($e.attr('title') || typeof($e.attr('data-original-title')) != 'string') { - $e.attr('data-original-title', $e.attr('title') || '').removeAttr('title') - } - } - - , hasContent: function () { - return this.getTitle() - } - - , getPosition: function (inside) { - return $.extend({}, (inside ? {top: 0, left: 0} : this.$element.offset()), { - width: this.$element[0].offsetWidth - , height: this.$element[0].offsetHeight - }) - } - - , getTitle: function () { - var title - , $e = this.$element - , o = this.options - - title = $e.attr('data-original-title') - || (typeof o.title == 'function' ? o.title.call($e[0]) : o.title) - - title = title.toString().replace(/(^\s*|\s*$)/, "") - - return title - } - - , tip: function () { - return this.$tip = this.$tip || $(this.options.template) - } - - , validate: function () { - if (!this.$element[0].parentNode) { - this.hide() - this.$element = null - this.options = null - } - } - - , enable: function () { - this.enabled = true - } - - , disable: function () { - this.enabled = false - } - - , toggleEnabled: function () { - this.enabled = !this.enabled - } - - , toggle: function () { - this[this.tip().hasClass('in') ? 'hide' : 'show']() - } - - } - - - /* TOOLTIP PLUGIN DEFINITION - * ========================= */ - - $.fn.tooltip = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('tooltip') - , options = typeof option == 'object' && option - if (!data) $this.data('tooltip', (data = new Tooltip(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.tooltip.Constructor = Tooltip - - $.fn.tooltip.defaults = { - animation: true - , delay: 0 - , selector: false - , placement: 'top' - , trigger: 'hover' - , title: '' - , template: '
' - } - -}( window.jQuery ) -/* =========================================================== - * bootstrap-popover.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#popovers - * =========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * =========================================================== */ - - -!function( $ ) { - - "use strict" - - var Popover = function ( element, options ) { - this.init('popover', element, options) - } - - /* NOTE: POPOVER EXTENDS BOOTSTRAP-TOOLTIP.js - ========================================== */ - - Popover.prototype = $.extend({}, $.fn.tooltip.Constructor.prototype, { - - constructor: Popover - - , setContent: function () { - var $tip = this.tip() - , title = this.getTitle() - , content = this.getContent() - - $tip.find('.popover-title')[ $.type(title) == 'object' ? 'append' : 'html' ](title) - $tip.find('.popover-content > *')[ $.type(content) == 'object' ? 'append' : 'html' ](content) - - $tip.removeClass('fade top bottom left right in') - } - - , hasContent: function () { - return this.getTitle() || this.getContent() - } - - , getContent: function () { - var content - , $e = this.$element - , o = this.options - - content = $e.attr('data-content') - || (typeof o.content == 'function' ? o.content.call($e[0]) : o.content) - - content = content.toString().replace(/(^\s*|\s*$)/, "") - - return content - } - - , tip: function() { - if (!this.$tip) { - this.$tip = $(this.options.template) - } - return this.$tip - } - - }) - - - /* POPOVER PLUGIN DEFINITION - * ======================= */ - - $.fn.popover = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('popover') - , options = typeof option == 'object' && option - if (!data) $this.data('popover', (data = new Popover(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.popover.Constructor = Popover - - $.fn.popover.defaults = $.extend({} , $.fn.tooltip.defaults, { - placement: 'right' - , content: '' - , template: '

' - }) - -}( window.jQuery ) -/* ============================================================= - * bootstrap-scrollspy.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#scrollspy - * ============================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================== */ - -!function ( $ ) { - - "use strict" - - /* SCROLLSPY CLASS DEFINITION - * ========================== */ - - function ScrollSpy( element, options) { - var process = $.proxy(this.process, this) - , $element = $(element).is('body') ? $(window) : $(element) - , href - this.options = $.extend({}, $.fn.scrollspy.defaults, options) - this.$scrollElement = $element.on('scroll.scroll.data-api', process) - this.selector = (this.options.target - || ((href = $(element).attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '')) //strip for ie7 - || '') + ' .nav li > a' - this.$body = $('body').on('click.scroll.data-api', this.selector, process) - this.refresh() - this.process() - } - - ScrollSpy.prototype = { - - constructor: ScrollSpy - - , refresh: function () { - this.targets = this.$body - .find(this.selector) - .map(function () { - var href = $(this).attr('href') - return /^#\w/.test(href) && $(href).length ? href : null - }) - - this.offsets = $.map(this.targets, function (id) { - return $(id).position().top - }) - } - - , process: function () { - var scrollTop = this.$scrollElement.scrollTop() + this.options.offset - , offsets = this.offsets - , targets = this.targets - , activeTarget = this.activeTarget - , i - - for (i = offsets.length; i--;) { - activeTarget != targets[i] - && scrollTop >= offsets[i] - && (!offsets[i + 1] || scrollTop <= offsets[i + 1]) - && this.activate( targets[i] ) - } - } - - , activate: function (target) { - var active - - this.activeTarget = target - - this.$body - .find(this.selector).parent('.active') - .removeClass('active') - - active = this.$body - .find(this.selector + '[href="' + target + '"]') - .parent('li') - .addClass('active') - - if ( active.parent('.dropdown-menu') ) { - active.closest('li.dropdown').addClass('active') - } - } - - } - - - /* SCROLLSPY PLUGIN DEFINITION - * =========================== */ - - $.fn.scrollspy = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('scrollspy') - , options = typeof option == 'object' && option - if (!data) $this.data('scrollspy', (data = new ScrollSpy(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.scrollspy.Constructor = ScrollSpy - - $.fn.scrollspy.defaults = { - offset: 10 - } - - - /* SCROLLSPY DATA-API - * ================== */ - - $(function () { - $('[data-spy="scroll"]').each(function () { - var $spy = $(this) - $spy.scrollspy($spy.data()) - }) - }) - -}( window.jQuery ) -/* ======================================================== - * bootstrap-tab.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#tabs - * ======================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ======================================================== */ - - -!function( $ ){ - - "use strict" - - /* TAB CLASS DEFINITION - * ==================== */ - - var Tab = function ( element ) { - this.element = $(element) - } - - Tab.prototype = { - - constructor: Tab - - , show: function () { - var $this = this.element - , $ul = $this.closest('ul:not(.dropdown-menu)') - , selector = $this.attr('data-target') - , previous - , $target - - if (!selector) { - selector = $this.attr('href') - selector = selector && selector.replace(/.*(?=#[^\s]*$)/, '') //strip for ie7 - } - - if ( $this.parent('li').hasClass('active') ) return - - previous = $ul.find('.active a').last()[0] - - $this.trigger({ - type: 'show' - , relatedTarget: previous - }) - - $target = $(selector) - - this.activate($this.parent('li'), $ul) - this.activate($target, $target.parent(), function () { - $this.trigger({ - type: 'shown' - , relatedTarget: previous - }) - }) - } - - , activate: function ( element, container, callback) { - var $active = container.find('> .active') - , transition = callback - && $.support.transition - && $active.hasClass('fade') - - function next() { - $active - .removeClass('active') - .find('> .dropdown-menu > .active') - .removeClass('active') - - element.addClass('active') - - if (transition) { - element[0].offsetWidth // reflow for transition - element.addClass('in') - } else { - element.removeClass('fade') - } - - if ( element.parent('.dropdown-menu') ) { - element.closest('li.dropdown').addClass('active') - } - - callback && callback() - } - - transition ? - $active.one($.support.transition.end, next) : - next() - - $active.removeClass('in') - } - } - - - /* TAB PLUGIN DEFINITION - * ===================== */ - - $.fn.tab = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('tab') - if (!data) $this.data('tab', (data = new Tab(this))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.tab.Constructor = Tab - - - /* TAB DATA-API - * ============ */ - - $(function () { - $('body').on('click.tab.data-api', '[data-toggle="tab"], [data-toggle="pill"]', function (e) { - e.preventDefault() - $(this).tab('show') - }) - }) - -}( window.jQuery ) -/* ============================================================= - * bootstrap-typeahead.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#typeahead - * ============================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - -!function( $ ){ - - "use strict" - - var Typeahead = function ( element, options ) { - this.$element = $(element) - this.options = $.extend({}, $.fn.typeahead.defaults, options) - this.matcher = this.options.matcher || this.matcher - this.sorter = this.options.sorter || this.sorter - this.highlighter = this.options.highlighter || this.highlighter - this.$menu = $(this.options.menu).appendTo('body') - this.source = this.options.source - this.shown = false - this.listen() - } - - Typeahead.prototype = { - - constructor: Typeahead - - , select: function () { - var val = this.$menu.find('.active').attr('data-value') - this.$element.val(val) - return this.hide() - } - - , show: function () { - var pos = $.extend({}, this.$element.offset(), { - height: this.$element[0].offsetHeight - }) - - this.$menu.css({ - top: pos.top + pos.height - , left: pos.left - }) - - this.$menu.show() - this.shown = true - return this - } - - , hide: function () { - this.$menu.hide() - this.shown = false - return this - } - - , lookup: function (event) { - var that = this - , items - , q - - this.query = this.$element.val() - - if (!this.query) { - return this.shown ? this.hide() : this - } - - items = $.grep(this.source, function (item) { - if (that.matcher(item)) return item - }) - - items = this.sorter(items) - - if (!items.length) { - return this.shown ? this.hide() : this - } - - return this.render(items.slice(0, this.options.items)).show() - } - - , matcher: function (item) { - return ~item.toLowerCase().indexOf(this.query.toLowerCase()) - } - - , sorter: function (items) { - var beginswith = [] - , caseSensitive = [] - , caseInsensitive = [] - , item - - while (item = items.shift()) { - if (!item.toLowerCase().indexOf(this.query.toLowerCase())) beginswith.push(item) - else if (~item.indexOf(this.query)) caseSensitive.push(item) - else caseInsensitive.push(item) - } - - return beginswith.concat(caseSensitive, caseInsensitive) - } - - , highlighter: function (item) { - return item.replace(new RegExp('(' + this.query + ')', 'ig'), function ($1, match) { - return '' + match + '' - }) - } - - , render: function (items) { - var that = this - - items = $(items).map(function (i, item) { - i = $(that.options.item).attr('data-value', item) - i.find('a').html(that.highlighter(item)) - return i[0] - }) - - items.first().addClass('active') - this.$menu.html(items) - return this - } - - , next: function (event) { - var active = this.$menu.find('.active').removeClass('active') - , next = active.next() - - if (!next.length) { - next = $(this.$menu.find('li')[0]) - } - - next.addClass('active') - } - - , prev: function (event) { - var active = this.$menu.find('.active').removeClass('active') - , prev = active.prev() - - if (!prev.length) { - prev = this.$menu.find('li').last() - } - - prev.addClass('active') - } - - , listen: function () { - this.$element - .on('blur', $.proxy(this.blur, this)) - .on('keypress', $.proxy(this.keypress, this)) - .on('keyup', $.proxy(this.keyup, this)) - - if ($.browser.webkit || $.browser.msie) { - this.$element.on('keydown', $.proxy(this.keypress, this)) - } - - this.$menu - .on('click', $.proxy(this.click, this)) - .on('mouseenter', 'li', $.proxy(this.mouseenter, this)) - } - - , keyup: function (e) { - e.stopPropagation() - e.preventDefault() - - switch(e.keyCode) { - case 40: // down arrow - case 38: // up arrow - break - - case 9: // tab - case 13: // enter - if (!this.shown) return - this.select() - break - - case 27: // escape - this.hide() - break - - default: - this.lookup() - } - - } - - , keypress: function (e) { - e.stopPropagation() - if (!this.shown) return - - switch(e.keyCode) { - case 9: // tab - case 13: // enter - case 27: // escape - e.preventDefault() - break - - case 38: // up arrow - e.preventDefault() - this.prev() - break - - case 40: // down arrow - e.preventDefault() - this.next() - break - } - } - - , blur: function (e) { - var that = this - e.stopPropagation() - e.preventDefault() - setTimeout(function () { that.hide() }, 150) - } - - , click: function (e) { - e.stopPropagation() - e.preventDefault() - this.select() - } - - , mouseenter: function (e) { - this.$menu.find('.active').removeClass('active') - $(e.currentTarget).addClass('active') - } - - } - - - /* TYPEAHEAD PLUGIN DEFINITION - * =========================== */ - - $.fn.typeahead = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('typeahead') - , options = typeof option == 'object' && option - if (!data) $this.data('typeahead', (data = new Typeahead(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.typeahead.defaults = { - source: [] - , items: 8 - , menu: '
    ' - , item: '
    • ' - } - - $.fn.typeahead.Constructor = Typeahead - - - /* TYPEAHEAD DATA-API - * ================== */ - - $(function () { - $('body').on('focus.typeahead.data-api', '[data-provide="typeahead"]', function (e) { - var $this = $(this) - if ($this.data('typeahead')) return - e.preventDefault() - $this.typeahead($this.data()) - }) - }) - -}( window.jQuery ) diff --git a/docs/Saml/js/bootstrap.min.js b/docs/Saml/js/bootstrap.min.js deleted file mode 100644 index 1f295a14..00000000 --- a/docs/Saml/js/bootstrap.min.js +++ /dev/null @@ -1 +0,0 @@ -!function(a){a(function(){"use strict",a.support.transition=function(){var b=document.body||document.documentElement,c=b.style,d=c.transition!==undefined||c.WebkitTransition!==undefined||c.MozTransition!==undefined||c.MsTransition!==undefined||c.OTransition!==undefined;return d&&{end:function(){var b="TransitionEnd";return a.browser.webkit?b="webkitTransitionEnd":a.browser.mozilla?b="transitionend":a.browser.opera&&(b="oTransitionEnd"),b}()}}()})}(window.jQuery),!function(a){"use strict";var b='[data-dismiss="alert"]',c=function(c){a(c).on("click",b,this.close)};c.prototype={constructor:c,close:function(b){function f(){e.remove(),e.trigger("closed")}var c=a(this),d=c.attr("data-target"),e;d||(d=c.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,"")),e=a(d),e.trigger("close"),b&&b.preventDefault(),e.length||(e=c.hasClass("alert")?c:c.parent()),e.removeClass("in"),a.support.transition&&e.hasClass("fade")?e.on(a.support.transition.end,f):f()}},a.fn.alert=function(b){return this.each(function(){var d=a(this),e=d.data("alert");e||d.data("alert",e=new c(this)),typeof b=="string"&&e[b].call(d)})},a.fn.alert.Constructor=c,a(function(){a("body").on("click.alert.data-api",b,c.prototype.close)})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.button.defaults,c)};b.prototype={constructor:b,setState:function(a){var b="disabled",c=this.$element,d=c.data(),e=c.is("input")?"val":"html";a+="Text",d.resetText||c.data("resetText",c[e]()),c[e](d[a]||this.options[a]),setTimeout(function(){a=="loadingText"?c.addClass(b).attr(b,b):c.removeClass(b).removeAttr(b)},0)},toggle:function(){var a=this.$element.parent('[data-toggle="buttons-radio"]');a&&a.find(".active").removeClass("active"),this.$element.toggleClass("active")}},a.fn.button=function(c){return this.each(function(){var d=a(this),e=d.data("button"),f=typeof c=="object"&&c;e||d.data("button",e=new b(this,f)),c=="toggle"?e.toggle():c&&e.setState(c)})},a.fn.button.defaults={loadingText:"loading..."},a.fn.button.Constructor=b,a(function(){a("body").on("click.button.data-api","[data-toggle^=button]",function(b){a(b.target).button("toggle")})})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.carousel.defaults,c),this.options.slide&&this.slide(this.options.slide)};b.prototype={cycle:function(){return this.interval=setInterval(a.proxy(this.next,this),this.options.interval),this},to:function(b){var c=this.$element.find(".active"),d=c.parent().children(),e=d.index(c),f=this;if(b>d.length-1||b<0)return;return this.sliding?this.$element.one("slid",function(){f.to(b)}):e==b?this.pause().cycle():this.slide(b>e?"next":"prev",a(d[b]))},pause:function(){return clearInterval(this.interval),this},next:function(){if(this.sliding)return;return this.slide("next")},prev:function(){if(this.sliding)return;return this.slide("prev")},slide:function(b,c){var d=this.$element.find(".active"),e=c||d[b](),f=this.interval,g=b=="next"?"left":"right",h=b=="next"?"first":"last",i=this;return this.sliding=!0,f&&this.pause(),e=e.length?e:this.$element.find(".item")[h](),!a.support.transition&&this.$element.hasClass("slide")?(this.$element.trigger("slide"),d.removeClass("active"),e.addClass("active"),this.sliding=!1,this.$element.trigger("slid")):(e.addClass(b),e[0].offsetWidth,d.addClass(g),e.addClass(g),this.$element.trigger("slide"),this.$element.one(a.support.transition.end,function(){e.removeClass([b,g].join(" ")).addClass("active"),d.removeClass(["active",g].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger("slid")},0)})),f&&this.cycle(),this}},a.fn.carousel=function(c){return this.each(function(){var d=a(this),e=d.data("carousel"),f=typeof c=="object"&&c;e||d.data("carousel",e=new b(this,f)),typeof c=="number"?e.to(c):typeof c=="string"||(c=f.slide)?e[c]():e.cycle()})},a.fn.carousel.defaults={interval:5e3},a.fn.carousel.Constructor=b,a(function(){a("body").on("click.carousel.data-api","[data-slide]",function(b){var c=a(this),d,e=a(c.attr("data-target")||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,"")),f=!e.data("modal")&&a.extend({},e.data(),c.data());e.carousel(f),b.preventDefault()})})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.collapse.defaults,c),this.options.parent&&(this.$parent=a(this.options.parent)),this.options.toggle&&this.toggle()};b.prototype={constructor:b,dimension:function(){var a=this.$element.hasClass("width");return a?"width":"height"},show:function(){var b=this.dimension(),c=a.camelCase(["scroll",b].join("-")),d=this.$parent&&this.$parent.find(".in"),e;d&&d.length&&(e=d.data("collapse"),d.collapse("hide"),e||d.data("collapse",null)),this.$element[b](0),this.transition("addClass","show","shown"),this.$element[b](this.$element[0][c])},hide:function(){var a=this.dimension();this.reset(this.$element[a]()),this.transition("removeClass","hide","hidden"),this.$element[a](0)},reset:function(a){var b=this.dimension();this.$element.removeClass("collapse")[b](a||"auto")[0].offsetWidth,this.$element.addClass("collapse")},transition:function(b,c,d){var e=this,f=function(){c=="show"&&e.reset(),e.$element.trigger(d)};this.$element.trigger(c)[b]("in"),a.support.transition&&this.$element.hasClass("collapse")?this.$element.one(a.support.transition.end,f):f()},toggle:function(){this[this.$element.hasClass("in")?"hide":"show"]()}},a.fn.collapse=function(c){return this.each(function(){var d=a(this),e=d.data("collapse"),f=typeof c=="object"&&c;e||d.data("collapse",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.collapse.defaults={toggle:!0},a.fn.collapse.Constructor=b,a(function(){a("body").on("click.collapse.data-api","[data-toggle=collapse]",function(b){var c=a(this),d,e=c.attr("data-target")||b.preventDefault()||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,""),f=a(e).data("collapse")?"toggle":c.data();a(e).collapse(f)})})}(window.jQuery),!function(a){function d(){a(b).parent().removeClass("open")}"use strict";var b='[data-toggle="dropdown"]',c=function(b){var c=a(b).on("click.dropdown.data-api",this.toggle);a("html").on("click.dropdown.data-api",function(){c.parent().removeClass("open")})};c.prototype={constructor:c,toggle:function(b){var c=a(this),e=c.attr("data-target"),f,g;return e||(e=c.attr("href"),e=e&&e.replace(/.*(?=#[^\s]*$)/,"")),f=a(e),f.length||(f=c.parent()),g=f.hasClass("open"),d(),!g&&f.toggleClass("open"),!1}},a.fn.dropdown=function(b){return this.each(function(){var d=a(this),e=d.data("dropdown");e||d.data("dropdown",e=new c(this)),typeof b=="string"&&e[b].call(d)})},a.fn.dropdown.Constructor=c,a(function(){a("html").on("click.dropdown.data-api",d),a("body").on("click.dropdown.data-api",b,c.prototype.toggle)})}(window.jQuery),!function(a){function c(){var b=this,c=setTimeout(function(){b.$element.off(a.support.transition.end),d.call(b)},500);this.$element.one(a.support.transition.end,function(){clearTimeout(c),d.call(b)})}function d(a){this.$element.hide().trigger("hidden"),e.call(this)}function e(b){var c=this,d=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.backdrop){var e=a.support.transition&&d;this.$backdrop=a('
    ').appendTo(document.body),this.options.backdrop!="static"&&this.$backdrop.click(a.proxy(this.hide,this)),e&&this.$backdrop[0].offsetWidth,this.$backdrop.addClass("in"),e?this.$backdrop.one(a.support.transition.end,b):b()}else!this.isShown&&this.$backdrop?(this.$backdrop.removeClass("in"),a.support.transition&&this.$element.hasClass("fade")?this.$backdrop.one(a.support.transition.end,a.proxy(f,this)):f.call(this)):b&&b()}function f(){this.$backdrop.remove(),this.$backdrop=null}function g(){var b=this;this.isShown&&this.options.keyboard?a(document).on("keyup.dismiss.modal",function(a){a.which==27&&b.hide()}):this.isShown||a(document).off("keyup.dismiss.modal")}"use strict";var b=function(b,c){this.options=a.extend({},a.fn.modal.defaults,c),this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this))};b.prototype={constructor:b,toggle:function(){return this[this.isShown?"hide":"show"]()},show:function(){var b=this;if(this.isShown)return;a("body").addClass("modal-open"),this.isShown=!0,this.$element.trigger("show"),g.call(this),e.call(this,function(){var c=a.support.transition&&b.$element.hasClass("fade");!b.$element.parent().length&&b.$element.appendTo(document.body),b.$element.show(),c&&b.$element[0].offsetWidth,b.$element.addClass("in"),c?b.$element.one(a.support.transition.end,function(){b.$element.trigger("shown")}):b.$element.trigger("shown")})},hide:function(b){b&&b.preventDefault();if(!this.isShown)return;var e=this;this.isShown=!1,a("body").removeClass("modal-open"),g.call(this),this.$element.trigger("hide").removeClass("in"),a.support.transition&&this.$element.hasClass("fade")?c.call(this):d.call(this)}},a.fn.modal=function(c){return this.each(function(){var d=a(this),e=d.data("modal"),f=typeof c=="object"&&c;e||d.data("modal",e=new b(this,f)),typeof c=="string"?e[c]():e.show()})},a.fn.modal.defaults={backdrop:!0,keyboard:!0},a.fn.modal.Constructor=b,a(function(){a("body").on("click.modal.data-api",'[data-toggle="modal"]',function(b){var c=a(this),d,e=a(c.attr("data-target")||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,"")),f=e.data("modal")?"toggle":a.extend({},e.data(),c.data());b.preventDefault(),e.modal(f)})})}(window.jQuery),!function(a){"use strict";var b=function(a,b){this.init("tooltip",a,b)};b.prototype={constructor:b,init:function(b,c,d){var e,f;this.type=b,this.$element=a(c),this.options=this.getOptions(d),this.enabled=!0,this.options.trigger!="manual"&&(e=this.options.trigger=="hover"?"mouseenter":"focus",f=this.options.trigger=="hover"?"mouseleave":"blur",this.$element.on(e,this.options.selector,a.proxy(this.enter,this)),this.$element.on(f,this.options.selector,a.proxy(this.leave,this))),this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},getOptions:function(b){return b=a.extend({},a.fn[this.type].defaults,b,this.$element.data()),b.delay&&typeof b.delay=="number"&&(b.delay={show:b.delay,hide:b.delay}),b},enter:function(b){var c=a(b.currentTarget)[this.type](this._options).data(this.type);!c.options.delay||!c.options.delay.show?c.show():(c.hoverState="in",setTimeout(function(){c.hoverState=="in"&&c.show()},c.options.delay.show))},leave:function(b){var c=a(b.currentTarget)[this.type](this._options).data(this.type);!c.options.delay||!c.options.delay.hide?c.hide():(c.hoverState="out",setTimeout(function(){c.hoverState=="out"&&c.hide()},c.options.delay.hide))},show:function(){var a,b,c,d,e,f,g;if(this.hasContent()&&this.enabled){a=this.tip(),this.setContent(),this.options.animation&&a.addClass("fade"),f=typeof this.options.placement=="function"?this.options.placement.call(this,a[0],this.$element[0]):this.options.placement,b=/in/.test(f),a.remove().css({top:0,left:0,display:"block"}).appendTo(b?this.$element:document.body),c=this.getPosition(b),d=a[0].offsetWidth,e=a[0].offsetHeight;switch(b?f.split(" ")[1]:f){case"bottom":g={top:c.top+c.height,left:c.left+c.width/2-d/2};break;case"top":g={top:c.top-e,left:c.left+c.width/2-d/2};break;case"left":g={top:c.top+c.height/2-e/2,left:c.left-d};break;case"right":g={top:c.top+c.height/2-e/2,left:c.left+c.width}}a.css(g).addClass(f).addClass("in")}},setContent:function(){var a=this.tip();a.find(".tooltip-inner").html(this.getTitle()),a.removeClass("fade in top bottom left right")},hide:function(){function d(){var b=setTimeout(function(){c.off(a.support.transition.end).remove()},500);c.one(a.support.transition.end,function(){clearTimeout(b),c.remove()})}var b=this,c=this.tip();c.removeClass("in"),a.support.transition&&this.$tip.hasClass("fade")?d():c.remove()},fixTitle:function(){var a=this.$element;(a.attr("title")||typeof a.attr("data-original-title")!="string")&&a.attr("data-original-title",a.attr("title")||"").removeAttr("title")},hasContent:function(){return this.getTitle()},getPosition:function(b){return a.extend({},b?{top:0,left:0}:this.$element.offset(),{width:this.$element[0].offsetWidth,height:this.$element[0].offsetHeight})},getTitle:function(){var a,b=this.$element,c=this.options;return a=b.attr("data-original-title")||(typeof c.title=="function"?c.title.call(b[0]):c.title),a=a.toString().replace(/(^\s*|\s*$)/,""),a},tip:function(){return this.$tip=this.$tip||a(this.options.template)},validate:function(){this.$element[0].parentNode||(this.hide(),this.$element=null,this.options=null)},enable:function(){this.enabled=!0},disable:function(){this.enabled=!1},toggleEnabled:function(){this.enabled=!this.enabled},toggle:function(){this[this.tip().hasClass("in")?"hide":"show"]()}},a.fn.tooltip=function(c){return this.each(function(){var d=a(this),e=d.data("tooltip"),f=typeof c=="object"&&c;e||d.data("tooltip",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.tooltip.Constructor=b,a.fn.tooltip.defaults={animation:!0,delay:0,selector:!1,placement:"top",trigger:"hover",title:"",template:'
    '}}(window.jQuery),!function(a){"use strict";var b=function(a,b){this.init("popover",a,b)};b.prototype=a.extend({},a.fn.tooltip.Constructor.prototype,{constructor:b,setContent:function(){var b=this.tip(),c=this.getTitle(),d=this.getContent();b.find(".popover-title")[a.type(c)=="object"?"append":"html"](c),b.find(".popover-content > *")[a.type(d)=="object"?"append":"html"](d),b.removeClass("fade top bottom left right in")},hasContent:function(){return this.getTitle()||this.getContent()},getContent:function(){var a,b=this.$element,c=this.options;return a=b.attr("data-content")||(typeof c.content=="function"?c.content.call(b[0]):c.content),a=a.toString().replace(/(^\s*|\s*$)/,""),a},tip:function(){return this.$tip||(this.$tip=a(this.options.template)),this.$tip}}),a.fn.popover=function(c){return this.each(function(){var d=a(this),e=d.data("popover"),f=typeof c=="object"&&c;e||d.data("popover",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.popover.Constructor=b,a.fn.popover.defaults=a.extend({},a.fn.tooltip.defaults,{placement:"right",content:"",template:'

    '})}(window.jQuery),!function(a){function b(b,c){var d=a.proxy(this.process,this),e=a(b).is("body")?a(window):a(b),f;this.options=a.extend({},a.fn.scrollspy.defaults,c),this.$scrollElement=e.on("scroll.scroll.data-api",d),this.selector=(this.options.target||(f=a(b).attr("href"))&&f.replace(/.*(?=#[^\s]+$)/,"")||"")+" .nav li > a",this.$body=a("body").on("click.scroll.data-api",this.selector,d),this.refresh(),this.process()}"use strict",b.prototype={constructor:b,refresh:function(){this.targets=this.$body.find(this.selector).map(function(){var b=a(this).attr("href");return/^#\w/.test(b)&&a(b).length?b:null}),this.offsets=a.map(this.targets,function(b){return a(b).position().top})},process:function(){var a=this.$scrollElement.scrollTop()+this.options.offset,b=this.offsets,c=this.targets,d=this.activeTarget,e;for(e=b.length;e--;)d!=c[e]&&a>=b[e]&&(!b[e+1]||a<=b[e+1])&&this.activate(c[e])},activate:function(a){var b;this.activeTarget=a,this.$body.find(this.selector).parent(".active").removeClass("active"),b=this.$body.find(this.selector+'[href="'+a+'"]').parent("li").addClass("active"),b.parent(".dropdown-menu")&&b.closest("li.dropdown").addClass("active")}},a.fn.scrollspy=function(c){return this.each(function(){var d=a(this),e=d.data("scrollspy"),f=typeof c=="object"&&c;e||d.data("scrollspy",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.scrollspy.Constructor=b,a.fn.scrollspy.defaults={offset:10},a(function(){a('[data-spy="scroll"]').each(function(){var b=a(this);b.scrollspy(b.data())})})}(window.jQuery),!function(a){"use strict";var b=function(b){this.element=a(b)};b.prototype={constructor:b,show:function(){var b=this.element,c=b.closest("ul:not(.dropdown-menu)"),d=b.attr("data-target"),e,f;d||(d=b.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,""));if(b.parent("li").hasClass("active"))return;e=c.find(".active a").last()[0],b.trigger({type:"show",relatedTarget:e}),f=a(d),this.activate(b.parent("li"),c),this.activate(f,f.parent(),function(){b.trigger({type:"shown",relatedTarget:e})})},activate:function(b,c,d){function g(){e.removeClass("active").find("> .dropdown-menu > .active").removeClass("active"),b.addClass("active"),f?(b[0].offsetWidth,b.addClass("in")):b.removeClass("fade"),b.parent(".dropdown-menu")&&b.closest("li.dropdown").addClass("active"),d&&d()}var e=c.find("> .active"),f=d&&a.support.transition&&e.hasClass("fade");f?e.one(a.support.transition.end,g):g(),e.removeClass("in")}},a.fn.tab=function(c){return this.each(function(){var d=a(this),e=d.data("tab");e||d.data("tab",e=new b(this)),typeof c=="string"&&e[c]()})},a.fn.tab.Constructor=b,a(function(){a("body").on("click.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"]',function(b){b.preventDefault(),a(this).tab("show")})})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.typeahead.defaults,c),this.matcher=this.options.matcher||this.matcher,this.sorter=this.options.sorter||this.sorter,this.highlighter=this.options.highlighter||this.highlighter,this.$menu=a(this.options.menu).appendTo("body"),this.source=this.options.source,this.shown=!1,this.listen()};b.prototype={constructor:b,select:function(){var a=this.$menu.find(".active").attr("data-value");return this.$element.val(a),this.hide()},show:function(){var b=a.extend({},this.$element.offset(),{height:this.$element[0].offsetHeight});return this.$menu.css({top:b.top+b.height,left:b.left}),this.$menu.show(),this.shown=!0,this},hide:function(){return this.$menu.hide(),this.shown=!1,this},lookup:function(b){var c=this,d,e;return this.query=this.$element.val(),this.query?(d=a.grep(this.source,function(a){if(c.matcher(a))return a}),d=this.sorter(d),d.length?this.render(d.slice(0,this.options.items)).show():this.shown?this.hide():this):this.shown?this.hide():this},matcher:function(a){return~a.toLowerCase().indexOf(this.query.toLowerCase())},sorter:function(a){var b=[],c=[],d=[],e;while(e=a.shift())e.toLowerCase().indexOf(this.query.toLowerCase())?~e.indexOf(this.query)?c.push(e):d.push(e):b.push(e);return b.concat(c,d)},highlighter:function(a){return a.replace(new RegExp("("+this.query+")","ig"),function(a,b){return""+b+""})},render:function(b){var c=this;return b=a(b).map(function(b,d){return b=a(c.options.item).attr("data-value",d),b.find("a").html(c.highlighter(d)),b[0]}),b.first().addClass("active"),this.$menu.html(b),this},next:function(b){var c=this.$menu.find(".active").removeClass("active"),d=c.next();d.length||(d=a(this.$menu.find("li")[0])),d.addClass("active")},prev:function(a){var b=this.$menu.find(".active").removeClass("active"),c=b.prev();c.length||(c=this.$menu.find("li").last()),c.addClass("active")},listen:function(){this.$element.on("blur",a.proxy(this.blur,this)).on("keypress",a.proxy(this.keypress,this)).on("keyup",a.proxy(this.keyup,this)),(a.browser.webkit||a.browser.msie)&&this.$element.on("keydown",a.proxy(this.keypress,this)),this.$menu.on("click",a.proxy(this.click,this)).on("mouseenter","li",a.proxy(this.mouseenter,this))},keyup:function(a){a.stopPropagation(),a.preventDefault();switch(a.keyCode){case 40:case 38:break;case 9:case 13:if(!this.shown)return;this.select();break;case 27:this.hide();break;default:this.lookup()}},keypress:function(a){a.stopPropagation();if(!this.shown)return;switch(a.keyCode){case 9:case 13:case 27:a.preventDefault();break;case 38:a.preventDefault(),this.prev();break;case 40:a.preventDefault(),this.next()}},blur:function(a){var b=this;a.stopPropagation(),a.preventDefault(),setTimeout(function(){b.hide()},150)},click:function(a){a.stopPropagation(),a.preventDefault(),this.select()},mouseenter:function(b){this.$menu.find(".active").removeClass("active"),a(b.currentTarget).addClass("active")}},a.fn.typeahead=function(c){return this.each(function(){var d=a(this),e=d.data("typeahead"),f=typeof c=="object"&&c;e||d.data("typeahead",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.typeahead.defaults={source:[],items:8,menu:'
      ',item:'
      • '},a.fn.typeahead.Constructor=b,a(function(){a("body").on("focus.typeahead.data-api",'[data-provide="typeahead"]',function(b){var c=a(this);if(c.data("typeahead"))return;b.preventDefault(),c.typeahead(c.data())})})}(window.jQuery); \ No newline at end of file diff --git a/docs/Saml/js/jquery-1.4.2.min.js b/docs/Saml/js/jquery-1.4.2.min.js deleted file mode 100644 index 7c243080..00000000 --- a/docs/Saml/js/jquery-1.4.2.min.js +++ /dev/null @@ -1,154 +0,0 @@ -/*! - * jQuery JavaScript Library v1.4.2 - * http://jquery.com/ - * - * Copyright 2010, John Resig - * Dual licensed under the MIT or GPL Version 2 licenses. - * http://jquery.org/license - * - * Includes Sizzle.js - * http://sizzlejs.com/ - * Copyright 2010, The Dojo Foundation - * Released under the MIT, BSD, and GPL Licenses. - * - * Date: Sat Feb 13 22:33:48 2010 -0500 - */ -(function(A,w){function ma(){if(!c.isReady){try{s.documentElement.doScroll("left")}catch(a){setTimeout(ma,1);return}c.ready()}}function Qa(a,b){b.src?c.ajax({url:b.src,async:false,dataType:"script"}):c.globalEval(b.text||b.textContent||b.innerHTML||"");b.parentNode&&b.parentNode.removeChild(b)}function X(a,b,d,f,e,j){var i=a.length;if(typeof b==="object"){for(var o in b)X(a,o,b[o],f,e,d);return a}if(d!==w){f=!j&&f&&c.isFunction(d);for(o=0;o)[^>]*$|^#([\w-]+)$/,Ua=/^.[^:#\[\.,]*$/,Va=/\S/, -Wa=/^(\s|\u00A0)+|(\s|\u00A0)+$/g,Xa=/^<(\w+)\s*\/?>(?:<\/\1>)?$/,P=navigator.userAgent,xa=false,Q=[],L,$=Object.prototype.toString,aa=Object.prototype.hasOwnProperty,ba=Array.prototype.push,R=Array.prototype.slice,ya=Array.prototype.indexOf;c.fn=c.prototype={init:function(a,b){var d,f;if(!a)return this;if(a.nodeType){this.context=this[0]=a;this.length=1;return this}if(a==="body"&&!b){this.context=s;this[0]=s.body;this.selector="body";this.length=1;return this}if(typeof a==="string")if((d=Ta.exec(a))&& -(d[1]||!b))if(d[1]){f=b?b.ownerDocument||b:s;if(a=Xa.exec(a))if(c.isPlainObject(b)){a=[s.createElement(a[1])];c.fn.attr.call(a,b,true)}else a=[f.createElement(a[1])];else{a=sa([d[1]],[f]);a=(a.cacheable?a.fragment.cloneNode(true):a.fragment).childNodes}return c.merge(this,a)}else{if(b=s.getElementById(d[2])){if(b.id!==d[2])return T.find(a);this.length=1;this[0]=b}this.context=s;this.selector=a;return this}else if(!b&&/^\w+$/.test(a)){this.selector=a;this.context=s;a=s.getElementsByTagName(a);return c.merge(this, -a)}else return!b||b.jquery?(b||T).find(a):c(b).find(a);else if(c.isFunction(a))return T.ready(a);if(a.selector!==w){this.selector=a.selector;this.context=a.context}return c.makeArray(a,this)},selector:"",jquery:"1.4.2",length:0,size:function(){return this.length},toArray:function(){return R.call(this,0)},get:function(a){return a==null?this.toArray():a<0?this.slice(a)[0]:this[a]},pushStack:function(a,b,d){var f=c();c.isArray(a)?ba.apply(f,a):c.merge(f,a);f.prevObject=this;f.context=this.context;if(b=== -"find")f.selector=this.selector+(this.selector?" ":"")+d;else if(b)f.selector=this.selector+"."+b+"("+d+")";return f},each:function(a,b){return c.each(this,a,b)},ready:function(a){c.bindReady();if(c.isReady)a.call(s,c);else Q&&Q.push(a);return this},eq:function(a){return a===-1?this.slice(a):this.slice(a,+a+1)},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},slice:function(){return this.pushStack(R.apply(this,arguments),"slice",R.call(arguments).join(","))},map:function(a){return this.pushStack(c.map(this, -function(b,d){return a.call(b,d,b)}))},end:function(){return this.prevObject||c(null)},push:ba,sort:[].sort,splice:[].splice};c.fn.init.prototype=c.fn;c.extend=c.fn.extend=function(){var a=arguments[0]||{},b=1,d=arguments.length,f=false,e,j,i,o;if(typeof a==="boolean"){f=a;a=arguments[1]||{};b=2}if(typeof a!=="object"&&!c.isFunction(a))a={};if(d===b){a=this;--b}for(;b
      a"; -var e=d.getElementsByTagName("*"),j=d.getElementsByTagName("a")[0];if(!(!e||!e.length||!j)){c.support={leadingWhitespace:d.firstChild.nodeType===3,tbody:!d.getElementsByTagName("tbody").length,htmlSerialize:!!d.getElementsByTagName("link").length,style:/red/.test(j.getAttribute("style")),hrefNormalized:j.getAttribute("href")==="/a",opacity:/^0.55$/.test(j.style.opacity),cssFloat:!!j.style.cssFloat,checkOn:d.getElementsByTagName("input")[0].value==="on",optSelected:s.createElement("select").appendChild(s.createElement("option")).selected, -parentNode:d.removeChild(d.appendChild(s.createElement("div"))).parentNode===null,deleteExpando:true,checkClone:false,scriptEval:false,noCloneEvent:true,boxModel:null};b.type="text/javascript";try{b.appendChild(s.createTextNode("window."+f+"=1;"))}catch(i){}a.insertBefore(b,a.firstChild);if(A[f]){c.support.scriptEval=true;delete A[f]}try{delete b.test}catch(o){c.support.deleteExpando=false}a.removeChild(b);if(d.attachEvent&&d.fireEvent){d.attachEvent("onclick",function k(){c.support.noCloneEvent= -false;d.detachEvent("onclick",k)});d.cloneNode(true).fireEvent("onclick")}d=s.createElement("div");d.innerHTML="";a=s.createDocumentFragment();a.appendChild(d.firstChild);c.support.checkClone=a.cloneNode(true).cloneNode(true).lastChild.checked;c(function(){var k=s.createElement("div");k.style.width=k.style.paddingLeft="1px";s.body.appendChild(k);c.boxModel=c.support.boxModel=k.offsetWidth===2;s.body.removeChild(k).style.display="none"});a=function(k){var n= -s.createElement("div");k="on"+k;var r=k in n;if(!r){n.setAttribute(k,"return;");r=typeof n[k]==="function"}return r};c.support.submitBubbles=a("submit");c.support.changeBubbles=a("change");a=b=d=e=j=null}})();c.props={"for":"htmlFor","class":"className",readonly:"readOnly",maxlength:"maxLength",cellspacing:"cellSpacing",rowspan:"rowSpan",colspan:"colSpan",tabindex:"tabIndex",usemap:"useMap",frameborder:"frameBorder"};var G="jQuery"+J(),Ya=0,za={};c.extend({cache:{},expando:G,noData:{embed:true,object:true, -applet:true},data:function(a,b,d){if(!(a.nodeName&&c.noData[a.nodeName.toLowerCase()])){a=a==A?za:a;var f=a[G],e=c.cache;if(!f&&typeof b==="string"&&d===w)return null;f||(f=++Ya);if(typeof b==="object"){a[G]=f;e[f]=c.extend(true,{},b)}else if(!e[f]){a[G]=f;e[f]={}}a=e[f];if(d!==w)a[b]=d;return typeof b==="string"?a[b]:a}},removeData:function(a,b){if(!(a.nodeName&&c.noData[a.nodeName.toLowerCase()])){a=a==A?za:a;var d=a[G],f=c.cache,e=f[d];if(b){if(e){delete e[b];c.isEmptyObject(e)&&c.removeData(a)}}else{if(c.support.deleteExpando)delete a[c.expando]; -else a.removeAttribute&&a.removeAttribute(c.expando);delete f[d]}}}});c.fn.extend({data:function(a,b){if(typeof a==="undefined"&&this.length)return c.data(this[0]);else if(typeof a==="object")return this.each(function(){c.data(this,a)});var d=a.split(".");d[1]=d[1]?"."+d[1]:"";if(b===w){var f=this.triggerHandler("getData"+d[1]+"!",[d[0]]);if(f===w&&this.length)f=c.data(this[0],a);return f===w&&d[1]?this.data(d[0]):f}else return this.trigger("setData"+d[1]+"!",[d[0],b]).each(function(){c.data(this, -a,b)})},removeData:function(a){return this.each(function(){c.removeData(this,a)})}});c.extend({queue:function(a,b,d){if(a){b=(b||"fx")+"queue";var f=c.data(a,b);if(!d)return f||[];if(!f||c.isArray(d))f=c.data(a,b,c.makeArray(d));else f.push(d);return f}},dequeue:function(a,b){b=b||"fx";var d=c.queue(a,b),f=d.shift();if(f==="inprogress")f=d.shift();if(f){b==="fx"&&d.unshift("inprogress");f.call(a,function(){c.dequeue(a,b)})}}});c.fn.extend({queue:function(a,b){if(typeof a!=="string"){b=a;a="fx"}if(b=== -w)return c.queue(this[0],a);return this.each(function(){var d=c.queue(this,a,b);a==="fx"&&d[0]!=="inprogress"&&c.dequeue(this,a)})},dequeue:function(a){return this.each(function(){c.dequeue(this,a)})},delay:function(a,b){a=c.fx?c.fx.speeds[a]||a:a;b=b||"fx";return this.queue(b,function(){var d=this;setTimeout(function(){c.dequeue(d,b)},a)})},clearQueue:function(a){return this.queue(a||"fx",[])}});var Aa=/[\n\t]/g,ca=/\s+/,Za=/\r/g,$a=/href|src|style/,ab=/(button|input)/i,bb=/(button|input|object|select|textarea)/i, -cb=/^(a|area)$/i,Ba=/radio|checkbox/;c.fn.extend({attr:function(a,b){return X(this,a,b,true,c.attr)},removeAttr:function(a){return this.each(function(){c.attr(this,a,"");this.nodeType===1&&this.removeAttribute(a)})},addClass:function(a){if(c.isFunction(a))return this.each(function(n){var r=c(this);r.addClass(a.call(this,n,r.attr("class")))});if(a&&typeof a==="string")for(var b=(a||"").split(ca),d=0,f=this.length;d-1)return true;return false},val:function(a){if(a===w){var b=this[0];if(b){if(c.nodeName(b,"option"))return(b.attributes.value||{}).specified?b.value:b.text;if(c.nodeName(b,"select")){var d=b.selectedIndex,f=[],e=b.options;b=b.type==="select-one";if(d<0)return null;var j=b?d:0;for(d=b?d+1:e.length;j=0;else if(c.nodeName(this,"select")){var u=c.makeArray(r);c("option",this).each(function(){this.selected= -c.inArray(c(this).val(),u)>=0});if(!u.length)this.selectedIndex=-1}else this.value=r}})}});c.extend({attrFn:{val:true,css:true,html:true,text:true,data:true,width:true,height:true,offset:true},attr:function(a,b,d,f){if(!a||a.nodeType===3||a.nodeType===8)return w;if(f&&b in c.attrFn)return c(a)[b](d);f=a.nodeType!==1||!c.isXMLDoc(a);var e=d!==w;b=f&&c.props[b]||b;if(a.nodeType===1){var j=$a.test(b);if(b in a&&f&&!j){if(e){b==="type"&&ab.test(a.nodeName)&&a.parentNode&&c.error("type property can't be changed"); -a[b]=d}if(c.nodeName(a,"form")&&a.getAttributeNode(b))return a.getAttributeNode(b).nodeValue;if(b==="tabIndex")return(b=a.getAttributeNode("tabIndex"))&&b.specified?b.value:bb.test(a.nodeName)||cb.test(a.nodeName)&&a.href?0:w;return a[b]}if(!c.support.style&&f&&b==="style"){if(e)a.style.cssText=""+d;return a.style.cssText}e&&a.setAttribute(b,""+d);a=!c.support.hrefNormalized&&f&&j?a.getAttribute(b,2):a.getAttribute(b);return a===null?w:a}return c.style(a,b,d)}});var O=/\.(.*)$/,db=function(a){return a.replace(/[^\w\s\.\|`]/g, -function(b){return"\\"+b})};c.event={add:function(a,b,d,f){if(!(a.nodeType===3||a.nodeType===8)){if(a.setInterval&&a!==A&&!a.frameElement)a=A;var e,j;if(d.handler){e=d;d=e.handler}if(!d.guid)d.guid=c.guid++;if(j=c.data(a)){var i=j.events=j.events||{},o=j.handle;if(!o)j.handle=o=function(){return typeof c!=="undefined"&&!c.event.triggered?c.event.handle.apply(o.elem,arguments):w};o.elem=a;b=b.split(" ");for(var k,n=0,r;k=b[n++];){j=e?c.extend({},e):{handler:d,data:f};if(k.indexOf(".")>-1){r=k.split("."); -k=r.shift();j.namespace=r.slice(0).sort().join(".")}else{r=[];j.namespace=""}j.type=k;j.guid=d.guid;var u=i[k],z=c.event.special[k]||{};if(!u){u=i[k]=[];if(!z.setup||z.setup.call(a,f,r,o)===false)if(a.addEventListener)a.addEventListener(k,o,false);else a.attachEvent&&a.attachEvent("on"+k,o)}if(z.add){z.add.call(a,j);if(!j.handler.guid)j.handler.guid=d.guid}u.push(j);c.event.global[k]=true}a=null}}},global:{},remove:function(a,b,d,f){if(!(a.nodeType===3||a.nodeType===8)){var e,j=0,i,o,k,n,r,u,z=c.data(a), -C=z&&z.events;if(z&&C){if(b&&b.type){d=b.handler;b=b.type}if(!b||typeof b==="string"&&b.charAt(0)==="."){b=b||"";for(e in C)c.event.remove(a,e+b)}else{for(b=b.split(" ");e=b[j++];){n=e;i=e.indexOf(".")<0;o=[];if(!i){o=e.split(".");e=o.shift();k=new RegExp("(^|\\.)"+c.map(o.slice(0).sort(),db).join("\\.(?:.*\\.)?")+"(\\.|$)")}if(r=C[e])if(d){n=c.event.special[e]||{};for(B=f||0;B=0){a.type= -e=e.slice(0,-1);a.exclusive=true}if(!d){a.stopPropagation();c.event.global[e]&&c.each(c.cache,function(){this.events&&this.events[e]&&c.event.trigger(a,b,this.handle.elem)})}if(!d||d.nodeType===3||d.nodeType===8)return w;a.result=w;a.target=d;b=c.makeArray(b);b.unshift(a)}a.currentTarget=d;(f=c.data(d,"handle"))&&f.apply(d,b);f=d.parentNode||d.ownerDocument;try{if(!(d&&d.nodeName&&c.noData[d.nodeName.toLowerCase()]))if(d["on"+e]&&d["on"+e].apply(d,b)===false)a.result=false}catch(j){}if(!a.isPropagationStopped()&& -f)c.event.trigger(a,b,f,true);else if(!a.isDefaultPrevented()){f=a.target;var i,o=c.nodeName(f,"a")&&e==="click",k=c.event.special[e]||{};if((!k._default||k._default.call(d,a)===false)&&!o&&!(f&&f.nodeName&&c.noData[f.nodeName.toLowerCase()])){try{if(f[e]){if(i=f["on"+e])f["on"+e]=null;c.event.triggered=true;f[e]()}}catch(n){}if(i)f["on"+e]=i;c.event.triggered=false}}},handle:function(a){var b,d,f,e;a=arguments[0]=c.event.fix(a||A.event);a.currentTarget=this;b=a.type.indexOf(".")<0&&!a.exclusive; -if(!b){d=a.type.split(".");a.type=d.shift();f=new RegExp("(^|\\.)"+d.slice(0).sort().join("\\.(?:.*\\.)?")+"(\\.|$)")}e=c.data(this,"events");d=e[a.type];if(e&&d){d=d.slice(0);e=0;for(var j=d.length;e-1?c.map(a.options,function(f){return f.selected}).join("-"):"";else if(a.nodeName.toLowerCase()==="select")d=a.selectedIndex;return d},fa=function(a,b){var d=a.target,f,e;if(!(!da.test(d.nodeName)||d.readOnly)){f=c.data(d,"_change_data");e=Fa(d);if(a.type!=="focusout"||d.type!=="radio")c.data(d,"_change_data", -e);if(!(f===w||e===f))if(f!=null||e){a.type="change";return c.event.trigger(a,b,d)}}};c.event.special.change={filters:{focusout:fa,click:function(a){var b=a.target,d=b.type;if(d==="radio"||d==="checkbox"||b.nodeName.toLowerCase()==="select")return fa.call(this,a)},keydown:function(a){var b=a.target,d=b.type;if(a.keyCode===13&&b.nodeName.toLowerCase()!=="textarea"||a.keyCode===32&&(d==="checkbox"||d==="radio")||d==="select-multiple")return fa.call(this,a)},beforeactivate:function(a){a=a.target;c.data(a, -"_change_data",Fa(a))}},setup:function(){if(this.type==="file")return false;for(var a in ea)c.event.add(this,a+".specialChange",ea[a]);return da.test(this.nodeName)},teardown:function(){c.event.remove(this,".specialChange");return da.test(this.nodeName)}};ea=c.event.special.change.filters}s.addEventListener&&c.each({focus:"focusin",blur:"focusout"},function(a,b){function d(f){f=c.event.fix(f);f.type=b;return c.event.handle.call(this,f)}c.event.special[b]={setup:function(){this.addEventListener(a, -d,true)},teardown:function(){this.removeEventListener(a,d,true)}}});c.each(["bind","one"],function(a,b){c.fn[b]=function(d,f,e){if(typeof d==="object"){for(var j in d)this[b](j,f,d[j],e);return this}if(c.isFunction(f)){e=f;f=w}var i=b==="one"?c.proxy(e,function(k){c(this).unbind(k,i);return e.apply(this,arguments)}):e;if(d==="unload"&&b!=="one")this.one(d,f,e);else{j=0;for(var o=this.length;j0){y=t;break}}t=t[g]}m[q]=y}}}var f=/((?:\((?:\([^()]+\)|[^()]+)+\)|\[(?:\[[^[\]]*\]|['"][^'"]*['"]|[^[\]'"]+)+\]|\\.|[^ >+~,(\[\\]+)+|[>+~])(\s*,\s*)?((?:.|\r|\n)*)/g, -e=0,j=Object.prototype.toString,i=false,o=true;[0,0].sort(function(){o=false;return 0});var k=function(g,h,l,m){l=l||[];var q=h=h||s;if(h.nodeType!==1&&h.nodeType!==9)return[];if(!g||typeof g!=="string")return l;for(var p=[],v,t,y,S,H=true,M=x(h),I=g;(f.exec(""),v=f.exec(I))!==null;){I=v[3];p.push(v[1]);if(v[2]){S=v[3];break}}if(p.length>1&&r.exec(g))if(p.length===2&&n.relative[p[0]])t=ga(p[0]+p[1],h);else for(t=n.relative[p[0]]?[h]:k(p.shift(),h);p.length;){g=p.shift();if(n.relative[g])g+=p.shift(); -t=ga(g,t)}else{if(!m&&p.length>1&&h.nodeType===9&&!M&&n.match.ID.test(p[0])&&!n.match.ID.test(p[p.length-1])){v=k.find(p.shift(),h,M);h=v.expr?k.filter(v.expr,v.set)[0]:v.set[0]}if(h){v=m?{expr:p.pop(),set:z(m)}:k.find(p.pop(),p.length===1&&(p[0]==="~"||p[0]==="+")&&h.parentNode?h.parentNode:h,M);t=v.expr?k.filter(v.expr,v.set):v.set;if(p.length>0)y=z(t);else H=false;for(;p.length;){var D=p.pop();v=D;if(n.relative[D])v=p.pop();else D="";if(v==null)v=h;n.relative[D](y,v,M)}}else y=[]}y||(y=t);y||k.error(D|| -g);if(j.call(y)==="[object Array]")if(H)if(h&&h.nodeType===1)for(g=0;y[g]!=null;g++){if(y[g]&&(y[g]===true||y[g].nodeType===1&&E(h,y[g])))l.push(t[g])}else for(g=0;y[g]!=null;g++)y[g]&&y[g].nodeType===1&&l.push(t[g]);else l.push.apply(l,y);else z(y,l);if(S){k(S,q,l,m);k.uniqueSort(l)}return l};k.uniqueSort=function(g){if(B){i=o;g.sort(B);if(i)for(var h=1;h":function(g,h){var l=typeof h==="string";if(l&&!/\W/.test(h)){h=h.toLowerCase();for(var m=0,q=g.length;m=0))l||m.push(v);else if(l)h[p]=false;return false},ID:function(g){return g[1].replace(/\\/g,"")},TAG:function(g){return g[1].toLowerCase()}, -CHILD:function(g){if(g[1]==="nth"){var h=/(-?)(\d*)n((?:\+|-)?\d*)/.exec(g[2]==="even"&&"2n"||g[2]==="odd"&&"2n+1"||!/\D/.test(g[2])&&"0n+"+g[2]||g[2]);g[2]=h[1]+(h[2]||1)-0;g[3]=h[3]-0}g[0]=e++;return g},ATTR:function(g,h,l,m,q,p){h=g[1].replace(/\\/g,"");if(!p&&n.attrMap[h])g[1]=n.attrMap[h];if(g[2]==="~=")g[4]=" "+g[4]+" ";return g},PSEUDO:function(g,h,l,m,q){if(g[1]==="not")if((f.exec(g[3])||"").length>1||/^\w/.test(g[3]))g[3]=k(g[3],null,null,h);else{g=k.filter(g[3],h,l,true^q);l||m.push.apply(m, -g);return false}else if(n.match.POS.test(g[0])||n.match.CHILD.test(g[0]))return true;return g},POS:function(g){g.unshift(true);return g}},filters:{enabled:function(g){return g.disabled===false&&g.type!=="hidden"},disabled:function(g){return g.disabled===true},checked:function(g){return g.checked===true},selected:function(g){return g.selected===true},parent:function(g){return!!g.firstChild},empty:function(g){return!g.firstChild},has:function(g,h,l){return!!k(l[3],g).length},header:function(g){return/h\d/i.test(g.nodeName)}, -text:function(g){return"text"===g.type},radio:function(g){return"radio"===g.type},checkbox:function(g){return"checkbox"===g.type},file:function(g){return"file"===g.type},password:function(g){return"password"===g.type},submit:function(g){return"submit"===g.type},image:function(g){return"image"===g.type},reset:function(g){return"reset"===g.type},button:function(g){return"button"===g.type||g.nodeName.toLowerCase()==="button"},input:function(g){return/input|select|textarea|button/i.test(g.nodeName)}}, -setFilters:{first:function(g,h){return h===0},last:function(g,h,l,m){return h===m.length-1},even:function(g,h){return h%2===0},odd:function(g,h){return h%2===1},lt:function(g,h,l){return hl[3]-0},nth:function(g,h,l){return l[3]-0===h},eq:function(g,h,l){return l[3]-0===h}},filter:{PSEUDO:function(g,h,l,m){var q=h[1],p=n.filters[q];if(p)return p(g,l,h,m);else if(q==="contains")return(g.textContent||g.innerText||a([g])||"").indexOf(h[3])>=0;else if(q==="not"){h= -h[3];l=0;for(m=h.length;l=0}},ID:function(g,h){return g.nodeType===1&&g.getAttribute("id")===h},TAG:function(g,h){return h==="*"&&g.nodeType===1||g.nodeName.toLowerCase()===h},CLASS:function(g,h){return(" "+(g.className||g.getAttribute("class"))+" ").indexOf(h)>-1},ATTR:function(g,h){var l=h[1];g=n.attrHandle[l]?n.attrHandle[l](g):g[l]!=null?g[l]:g.getAttribute(l);l=g+"";var m=h[2];h=h[4];return g==null?m==="!=":m=== -"="?l===h:m==="*="?l.indexOf(h)>=0:m==="~="?(" "+l+" ").indexOf(h)>=0:!h?l&&g!==false:m==="!="?l!==h:m==="^="?l.indexOf(h)===0:m==="$="?l.substr(l.length-h.length)===h:m==="|="?l===h||l.substr(0,h.length+1)===h+"-":false},POS:function(g,h,l,m){var q=n.setFilters[h[2]];if(q)return q(g,l,h,m)}}},r=n.match.POS;for(var u in n.match){n.match[u]=new RegExp(n.match[u].source+/(?![^\[]*\])(?![^\(]*\))/.source);n.leftMatch[u]=new RegExp(/(^(?:.|\r|\n)*?)/.source+n.match[u].source.replace(/\\(\d+)/g,function(g, -h){return"\\"+(h-0+1)}))}var z=function(g,h){g=Array.prototype.slice.call(g,0);if(h){h.push.apply(h,g);return h}return g};try{Array.prototype.slice.call(s.documentElement.childNodes,0)}catch(C){z=function(g,h){h=h||[];if(j.call(g)==="[object Array]")Array.prototype.push.apply(h,g);else if(typeof g.length==="number")for(var l=0,m=g.length;l";var l=s.documentElement;l.insertBefore(g,l.firstChild);if(s.getElementById(h)){n.find.ID=function(m,q,p){if(typeof q.getElementById!=="undefined"&&!p)return(q=q.getElementById(m[1]))?q.id===m[1]||typeof q.getAttributeNode!=="undefined"&& -q.getAttributeNode("id").nodeValue===m[1]?[q]:w:[]};n.filter.ID=function(m,q){var p=typeof m.getAttributeNode!=="undefined"&&m.getAttributeNode("id");return m.nodeType===1&&p&&p.nodeValue===q}}l.removeChild(g);l=g=null})();(function(){var g=s.createElement("div");g.appendChild(s.createComment(""));if(g.getElementsByTagName("*").length>0)n.find.TAG=function(h,l){l=l.getElementsByTagName(h[1]);if(h[1]==="*"){h=[];for(var m=0;l[m];m++)l[m].nodeType===1&&h.push(l[m]);l=h}return l};g.innerHTML=""; -if(g.firstChild&&typeof g.firstChild.getAttribute!=="undefined"&&g.firstChild.getAttribute("href")!=="#")n.attrHandle.href=function(h){return h.getAttribute("href",2)};g=null})();s.querySelectorAll&&function(){var g=k,h=s.createElement("div");h.innerHTML="

      ";if(!(h.querySelectorAll&&h.querySelectorAll(".TEST").length===0)){k=function(m,q,p,v){q=q||s;if(!v&&q.nodeType===9&&!x(q))try{return z(q.querySelectorAll(m),p)}catch(t){}return g(m,q,p,v)};for(var l in g)k[l]=g[l];h=null}}(); -(function(){var g=s.createElement("div");g.innerHTML="
      ";if(!(!g.getElementsByClassName||g.getElementsByClassName("e").length===0)){g.lastChild.className="e";if(g.getElementsByClassName("e").length!==1){n.order.splice(1,0,"CLASS");n.find.CLASS=function(h,l,m){if(typeof l.getElementsByClassName!=="undefined"&&!m)return l.getElementsByClassName(h[1])};g=null}}})();var E=s.compareDocumentPosition?function(g,h){return!!(g.compareDocumentPosition(h)&16)}: -function(g,h){return g!==h&&(g.contains?g.contains(h):true)},x=function(g){return(g=(g?g.ownerDocument||g:0).documentElement)?g.nodeName!=="HTML":false},ga=function(g,h){var l=[],m="",q;for(h=h.nodeType?[h]:h;q=n.match.PSEUDO.exec(g);){m+=q[0];g=g.replace(n.match.PSEUDO,"")}g=n.relative[g]?g+"*":g;q=0;for(var p=h.length;q=0===d})};c.fn.extend({find:function(a){for(var b=this.pushStack("","find",a),d=0,f=0,e=this.length;f0)for(var j=d;j0},closest:function(a,b){if(c.isArray(a)){var d=[],f=this[0],e,j= -{},i;if(f&&a.length){e=0;for(var o=a.length;e-1:c(f).is(e)){d.push({selector:i,elem:f});delete j[i]}}f=f.parentNode}}return d}var k=c.expr.match.POS.test(a)?c(a,b||this.context):null;return this.map(function(n,r){for(;r&&r.ownerDocument&&r!==b;){if(k?k.index(r)>-1:c(r).is(a))return r;r=r.parentNode}return null})},index:function(a){if(!a||typeof a=== -"string")return c.inArray(this[0],a?c(a):this.parent().children());return c.inArray(a.jquery?a[0]:a,this)},add:function(a,b){a=typeof a==="string"?c(a,b||this.context):c.makeArray(a);b=c.merge(this.get(),a);return this.pushStack(qa(a[0])||qa(b[0])?b:c.unique(b))},andSelf:function(){return this.add(this.prevObject)}});c.each({parent:function(a){return(a=a.parentNode)&&a.nodeType!==11?a:null},parents:function(a){return c.dir(a,"parentNode")},parentsUntil:function(a,b,d){return c.dir(a,"parentNode", -d)},next:function(a){return c.nth(a,2,"nextSibling")},prev:function(a){return c.nth(a,2,"previousSibling")},nextAll:function(a){return c.dir(a,"nextSibling")},prevAll:function(a){return c.dir(a,"previousSibling")},nextUntil:function(a,b,d){return c.dir(a,"nextSibling",d)},prevUntil:function(a,b,d){return c.dir(a,"previousSibling",d)},siblings:function(a){return c.sibling(a.parentNode.firstChild,a)},children:function(a){return c.sibling(a.firstChild)},contents:function(a){return c.nodeName(a,"iframe")? -a.contentDocument||a.contentWindow.document:c.makeArray(a.childNodes)}},function(a,b){c.fn[a]=function(d,f){var e=c.map(this,b,d);eb.test(a)||(f=d);if(f&&typeof f==="string")e=c.filter(f,e);e=this.length>1?c.unique(e):e;if((this.length>1||gb.test(f))&&fb.test(a))e=e.reverse();return this.pushStack(e,a,R.call(arguments).join(","))}});c.extend({filter:function(a,b,d){if(d)a=":not("+a+")";return c.find.matches(a,b)},dir:function(a,b,d){var f=[];for(a=a[b];a&&a.nodeType!==9&&(d===w||a.nodeType!==1||!c(a).is(d));){a.nodeType=== -1&&f.push(a);a=a[b]}return f},nth:function(a,b,d){b=b||1;for(var f=0;a;a=a[d])if(a.nodeType===1&&++f===b)break;return a},sibling:function(a,b){for(var d=[];a;a=a.nextSibling)a.nodeType===1&&a!==b&&d.push(a);return d}});var Ja=/ jQuery\d+="(?:\d+|null)"/g,V=/^\s+/,Ka=/(<([\w:]+)[^>]*?)\/>/g,hb=/^(?:area|br|col|embed|hr|img|input|link|meta|param)$/i,La=/<([\w:]+)/,ib=/"},F={option:[1,""],legend:[1,"
      ","
      "],thead:[1,"","
      "],tr:[2,"","
      "],td:[3,"","
      "],col:[2,"","
      "],area:[1,"",""],_default:[0,"",""]};F.optgroup=F.option;F.tbody=F.tfoot=F.colgroup=F.caption=F.thead;F.th=F.td;if(!c.support.htmlSerialize)F._default=[1,"div
      ","
      "];c.fn.extend({text:function(a){if(c.isFunction(a))return this.each(function(b){var d= -c(this);d.text(a.call(this,b,d.text()))});if(typeof a!=="object"&&a!==w)return this.empty().append((this[0]&&this[0].ownerDocument||s).createTextNode(a));return c.text(this)},wrapAll:function(a){if(c.isFunction(a))return this.each(function(d){c(this).wrapAll(a.call(this,d))});if(this[0]){var b=c(a,this[0].ownerDocument).eq(0).clone(true);this[0].parentNode&&b.insertBefore(this[0]);b.map(function(){for(var d=this;d.firstChild&&d.firstChild.nodeType===1;)d=d.firstChild;return d}).append(this)}return this}, -wrapInner:function(a){if(c.isFunction(a))return this.each(function(b){c(this).wrapInner(a.call(this,b))});return this.each(function(){var b=c(this),d=b.contents();d.length?d.wrapAll(a):b.append(a)})},wrap:function(a){return this.each(function(){c(this).wrapAll(a)})},unwrap:function(){return this.parent().each(function(){c.nodeName(this,"body")||c(this).replaceWith(this.childNodes)}).end()},append:function(){return this.domManip(arguments,true,function(a){this.nodeType===1&&this.appendChild(a)})}, -prepend:function(){return this.domManip(arguments,true,function(a){this.nodeType===1&&this.insertBefore(a,this.firstChild)})},before:function(){if(this[0]&&this[0].parentNode)return this.domManip(arguments,false,function(b){this.parentNode.insertBefore(b,this)});else if(arguments.length){var a=c(arguments[0]);a.push.apply(a,this.toArray());return this.pushStack(a,"before",arguments)}},after:function(){if(this[0]&&this[0].parentNode)return this.domManip(arguments,false,function(b){this.parentNode.insertBefore(b, -this.nextSibling)});else if(arguments.length){var a=this.pushStack(this,"after",arguments);a.push.apply(a,c(arguments[0]).toArray());return a}},remove:function(a,b){for(var d=0,f;(f=this[d])!=null;d++)if(!a||c.filter(a,[f]).length){if(!b&&f.nodeType===1){c.cleanData(f.getElementsByTagName("*"));c.cleanData([f])}f.parentNode&&f.parentNode.removeChild(f)}return this},empty:function(){for(var a=0,b;(b=this[a])!=null;a++)for(b.nodeType===1&&c.cleanData(b.getElementsByTagName("*"));b.firstChild;)b.removeChild(b.firstChild); -return this},clone:function(a){var b=this.map(function(){if(!c.support.noCloneEvent&&!c.isXMLDoc(this)){var d=this.outerHTML,f=this.ownerDocument;if(!d){d=f.createElement("div");d.appendChild(this.cloneNode(true));d=d.innerHTML}return c.clean([d.replace(Ja,"").replace(/=([^="'>\s]+\/)>/g,'="$1">').replace(V,"")],f)[0]}else return this.cloneNode(true)});if(a===true){ra(this,b);ra(this.find("*"),b.find("*"))}return b},html:function(a){if(a===w)return this[0]&&this[0].nodeType===1?this[0].innerHTML.replace(Ja, -""):null;else if(typeof a==="string"&&!ta.test(a)&&(c.support.leadingWhitespace||!V.test(a))&&!F[(La.exec(a)||["",""])[1].toLowerCase()]){a=a.replace(Ka,Ma);try{for(var b=0,d=this.length;b0||e.cacheable||this.length>1?k.cloneNode(true):k)}o.length&&c.each(o,Qa)}return this}});c.fragments={};c.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){c.fn[a]=function(d){var f=[];d=c(d);var e=this.length===1&&this[0].parentNode;if(e&&e.nodeType===11&&e.childNodes.length===1&&d.length===1){d[b](this[0]); -return this}else{e=0;for(var j=d.length;e0?this.clone(true):this).get();c.fn[b].apply(c(d[e]),i);f=f.concat(i)}return this.pushStack(f,a,d.selector)}}});c.extend({clean:function(a,b,d,f){b=b||s;if(typeof b.createElement==="undefined")b=b.ownerDocument||b[0]&&b[0].ownerDocument||s;for(var e=[],j=0,i;(i=a[j])!=null;j++){if(typeof i==="number")i+="";if(i){if(typeof i==="string"&&!jb.test(i))i=b.createTextNode(i);else if(typeof i==="string"){i=i.replace(Ka,Ma);var o=(La.exec(i)||["", -""])[1].toLowerCase(),k=F[o]||F._default,n=k[0],r=b.createElement("div");for(r.innerHTML=k[1]+i+k[2];n--;)r=r.lastChild;if(!c.support.tbody){n=ib.test(i);o=o==="table"&&!n?r.firstChild&&r.firstChild.childNodes:k[1]===""&&!n?r.childNodes:[];for(k=o.length-1;k>=0;--k)c.nodeName(o[k],"tbody")&&!o[k].childNodes.length&&o[k].parentNode.removeChild(o[k])}!c.support.leadingWhitespace&&V.test(i)&&r.insertBefore(b.createTextNode(V.exec(i)[0]),r.firstChild);i=r.childNodes}if(i.nodeType)e.push(i);else e= -c.merge(e,i)}}if(d)for(j=0;e[j];j++)if(f&&c.nodeName(e[j],"script")&&(!e[j].type||e[j].type.toLowerCase()==="text/javascript"))f.push(e[j].parentNode?e[j].parentNode.removeChild(e[j]):e[j]);else{e[j].nodeType===1&&e.splice.apply(e,[j+1,0].concat(c.makeArray(e[j].getElementsByTagName("script"))));d.appendChild(e[j])}return e},cleanData:function(a){for(var b,d,f=c.cache,e=c.event.special,j=c.support.deleteExpando,i=0,o;(o=a[i])!=null;i++)if(d=o[c.expando]){b=f[d];if(b.events)for(var k in b.events)e[k]? -c.event.remove(o,k):Ca(o,k,b.handle);if(j)delete o[c.expando];else o.removeAttribute&&o.removeAttribute(c.expando);delete f[d]}}});var kb=/z-?index|font-?weight|opacity|zoom|line-?height/i,Na=/alpha\([^)]*\)/,Oa=/opacity=([^)]*)/,ha=/float/i,ia=/-([a-z])/ig,lb=/([A-Z])/g,mb=/^-?\d+(?:px)?$/i,nb=/^-?\d/,ob={position:"absolute",visibility:"hidden",display:"block"},pb=["Left","Right"],qb=["Top","Bottom"],rb=s.defaultView&&s.defaultView.getComputedStyle,Pa=c.support.cssFloat?"cssFloat":"styleFloat",ja= -function(a,b){return b.toUpperCase()};c.fn.css=function(a,b){return X(this,a,b,true,function(d,f,e){if(e===w)return c.curCSS(d,f);if(typeof e==="number"&&!kb.test(f))e+="px";c.style(d,f,e)})};c.extend({style:function(a,b,d){if(!a||a.nodeType===3||a.nodeType===8)return w;if((b==="width"||b==="height")&&parseFloat(d)<0)d=w;var f=a.style||a,e=d!==w;if(!c.support.opacity&&b==="opacity"){if(e){f.zoom=1;b=parseInt(d,10)+""==="NaN"?"":"alpha(opacity="+d*100+")";a=f.filter||c.curCSS(a,"filter")||"";f.filter= -Na.test(a)?a.replace(Na,b):b}return f.filter&&f.filter.indexOf("opacity=")>=0?parseFloat(Oa.exec(f.filter)[1])/100+"":""}if(ha.test(b))b=Pa;b=b.replace(ia,ja);if(e)f[b]=d;return f[b]},css:function(a,b,d,f){if(b==="width"||b==="height"){var e,j=b==="width"?pb:qb;function i(){e=b==="width"?a.offsetWidth:a.offsetHeight;f!=="border"&&c.each(j,function(){f||(e-=parseFloat(c.curCSS(a,"padding"+this,true))||0);if(f==="margin")e+=parseFloat(c.curCSS(a,"margin"+this,true))||0;else e-=parseFloat(c.curCSS(a, -"border"+this+"Width",true))||0})}a.offsetWidth!==0?i():c.swap(a,ob,i);return Math.max(0,Math.round(e))}return c.curCSS(a,b,d)},curCSS:function(a,b,d){var f,e=a.style;if(!c.support.opacity&&b==="opacity"&&a.currentStyle){f=Oa.test(a.currentStyle.filter||"")?parseFloat(RegExp.$1)/100+"":"";return f===""?"1":f}if(ha.test(b))b=Pa;if(!d&&e&&e[b])f=e[b];else if(rb){if(ha.test(b))b="float";b=b.replace(lb,"-$1").toLowerCase();e=a.ownerDocument.defaultView;if(!e)return null;if(a=e.getComputedStyle(a,null))f= -a.getPropertyValue(b);if(b==="opacity"&&f==="")f="1"}else if(a.currentStyle){d=b.replace(ia,ja);f=a.currentStyle[b]||a.currentStyle[d];if(!mb.test(f)&&nb.test(f)){b=e.left;var j=a.runtimeStyle.left;a.runtimeStyle.left=a.currentStyle.left;e.left=d==="fontSize"?"1em":f||0;f=e.pixelLeft+"px";e.left=b;a.runtimeStyle.left=j}}return f},swap:function(a,b,d){var f={};for(var e in b){f[e]=a.style[e];a.style[e]=b[e]}d.call(a);for(e in b)a.style[e]=f[e]}});if(c.expr&&c.expr.filters){c.expr.filters.hidden=function(a){var b= -a.offsetWidth,d=a.offsetHeight,f=a.nodeName.toLowerCase()==="tr";return b===0&&d===0&&!f?true:b>0&&d>0&&!f?false:c.curCSS(a,"display")==="none"};c.expr.filters.visible=function(a){return!c.expr.filters.hidden(a)}}var sb=J(),tb=//gi,ub=/select|textarea/i,vb=/color|date|datetime|email|hidden|month|number|password|range|search|tel|text|time|url|week/i,N=/=\?(&|$)/,ka=/\?/,wb=/(\?|&)_=.*?(&|$)/,xb=/^(\w+:)?\/\/([^\/?#]+)/,yb=/%20/g,zb=c.fn.load;c.fn.extend({load:function(a,b,d){if(typeof a!== -"string")return zb.call(this,a);else if(!this.length)return this;var f=a.indexOf(" ");if(f>=0){var e=a.slice(f,a.length);a=a.slice(0,f)}f="GET";if(b)if(c.isFunction(b)){d=b;b=null}else if(typeof b==="object"){b=c.param(b,c.ajaxSettings.traditional);f="POST"}var j=this;c.ajax({url:a,type:f,dataType:"html",data:b,complete:function(i,o){if(o==="success"||o==="notmodified")j.html(e?c("
      ").append(i.responseText.replace(tb,"")).find(e):i.responseText);d&&j.each(d,[i.responseText,o,i])}});return this}, -serialize:function(){return c.param(this.serializeArray())},serializeArray:function(){return this.map(function(){return this.elements?c.makeArray(this.elements):this}).filter(function(){return this.name&&!this.disabled&&(this.checked||ub.test(this.nodeName)||vb.test(this.type))}).map(function(a,b){a=c(this).val();return a==null?null:c.isArray(a)?c.map(a,function(d){return{name:b.name,value:d}}):{name:b.name,value:a}}).get()}});c.each("ajaxStart ajaxStop ajaxComplete ajaxError ajaxSuccess ajaxSend".split(" "), -function(a,b){c.fn[b]=function(d){return this.bind(b,d)}});c.extend({get:function(a,b,d,f){if(c.isFunction(b)){f=f||d;d=b;b=null}return c.ajax({type:"GET",url:a,data:b,success:d,dataType:f})},getScript:function(a,b){return c.get(a,null,b,"script")},getJSON:function(a,b,d){return c.get(a,b,d,"json")},post:function(a,b,d,f){if(c.isFunction(b)){f=f||d;d=b;b={}}return c.ajax({type:"POST",url:a,data:b,success:d,dataType:f})},ajaxSetup:function(a){c.extend(c.ajaxSettings,a)},ajaxSettings:{url:location.href, -global:true,type:"GET",contentType:"application/x-www-form-urlencoded",processData:true,async:true,xhr:A.XMLHttpRequest&&(A.location.protocol!=="file:"||!A.ActiveXObject)?function(){return new A.XMLHttpRequest}:function(){try{return new A.ActiveXObject("Microsoft.XMLHTTP")}catch(a){}},accepts:{xml:"application/xml, text/xml",html:"text/html",script:"text/javascript, application/javascript",json:"application/json, text/javascript",text:"text/plain",_default:"*/*"}},lastModified:{},etag:{},ajax:function(a){function b(){e.success&& -e.success.call(k,o,i,x);e.global&&f("ajaxSuccess",[x,e])}function d(){e.complete&&e.complete.call(k,x,i);e.global&&f("ajaxComplete",[x,e]);e.global&&!--c.active&&c.event.trigger("ajaxStop")}function f(q,p){(e.context?c(e.context):c.event).trigger(q,p)}var e=c.extend(true,{},c.ajaxSettings,a),j,i,o,k=a&&a.context||e,n=e.type.toUpperCase();if(e.data&&e.processData&&typeof e.data!=="string")e.data=c.param(e.data,e.traditional);if(e.dataType==="jsonp"){if(n==="GET")N.test(e.url)||(e.url+=(ka.test(e.url)? -"&":"?")+(e.jsonp||"callback")+"=?");else if(!e.data||!N.test(e.data))e.data=(e.data?e.data+"&":"")+(e.jsonp||"callback")+"=?";e.dataType="json"}if(e.dataType==="json"&&(e.data&&N.test(e.data)||N.test(e.url))){j=e.jsonpCallback||"jsonp"+sb++;if(e.data)e.data=(e.data+"").replace(N,"="+j+"$1");e.url=e.url.replace(N,"="+j+"$1");e.dataType="script";A[j]=A[j]||function(q){o=q;b();d();A[j]=w;try{delete A[j]}catch(p){}z&&z.removeChild(C)}}if(e.dataType==="script"&&e.cache===null)e.cache=false;if(e.cache=== -false&&n==="GET"){var r=J(),u=e.url.replace(wb,"$1_="+r+"$2");e.url=u+(u===e.url?(ka.test(e.url)?"&":"?")+"_="+r:"")}if(e.data&&n==="GET")e.url+=(ka.test(e.url)?"&":"?")+e.data;e.global&&!c.active++&&c.event.trigger("ajaxStart");r=(r=xb.exec(e.url))&&(r[1]&&r[1]!==location.protocol||r[2]!==location.host);if(e.dataType==="script"&&n==="GET"&&r){var z=s.getElementsByTagName("head")[0]||s.documentElement,C=s.createElement("script");C.src=e.url;if(e.scriptCharset)C.charset=e.scriptCharset;if(!j){var B= -false;C.onload=C.onreadystatechange=function(){if(!B&&(!this.readyState||this.readyState==="loaded"||this.readyState==="complete")){B=true;b();d();C.onload=C.onreadystatechange=null;z&&C.parentNode&&z.removeChild(C)}}}z.insertBefore(C,z.firstChild);return w}var E=false,x=e.xhr();if(x){e.username?x.open(n,e.url,e.async,e.username,e.password):x.open(n,e.url,e.async);try{if(e.data||a&&a.contentType)x.setRequestHeader("Content-Type",e.contentType);if(e.ifModified){c.lastModified[e.url]&&x.setRequestHeader("If-Modified-Since", -c.lastModified[e.url]);c.etag[e.url]&&x.setRequestHeader("If-None-Match",c.etag[e.url])}r||x.setRequestHeader("X-Requested-With","XMLHttpRequest");x.setRequestHeader("Accept",e.dataType&&e.accepts[e.dataType]?e.accepts[e.dataType]+", */*":e.accepts._default)}catch(ga){}if(e.beforeSend&&e.beforeSend.call(k,x,e)===false){e.global&&!--c.active&&c.event.trigger("ajaxStop");x.abort();return false}e.global&&f("ajaxSend",[x,e]);var g=x.onreadystatechange=function(q){if(!x||x.readyState===0||q==="abort"){E|| -d();E=true;if(x)x.onreadystatechange=c.noop}else if(!E&&x&&(x.readyState===4||q==="timeout")){E=true;x.onreadystatechange=c.noop;i=q==="timeout"?"timeout":!c.httpSuccess(x)?"error":e.ifModified&&c.httpNotModified(x,e.url)?"notmodified":"success";var p;if(i==="success")try{o=c.httpData(x,e.dataType,e)}catch(v){i="parsererror";p=v}if(i==="success"||i==="notmodified")j||b();else c.handleError(e,x,i,p);d();q==="timeout"&&x.abort();if(e.async)x=null}};try{var h=x.abort;x.abort=function(){x&&h.call(x); -g("abort")}}catch(l){}e.async&&e.timeout>0&&setTimeout(function(){x&&!E&&g("timeout")},e.timeout);try{x.send(n==="POST"||n==="PUT"||n==="DELETE"?e.data:null)}catch(m){c.handleError(e,x,null,m);d()}e.async||g();return x}},handleError:function(a,b,d,f){if(a.error)a.error.call(a.context||a,b,d,f);if(a.global)(a.context?c(a.context):c.event).trigger("ajaxError",[b,a,f])},active:0,httpSuccess:function(a){try{return!a.status&&location.protocol==="file:"||a.status>=200&&a.status<300||a.status===304||a.status=== -1223||a.status===0}catch(b){}return false},httpNotModified:function(a,b){var d=a.getResponseHeader("Last-Modified"),f=a.getResponseHeader("Etag");if(d)c.lastModified[b]=d;if(f)c.etag[b]=f;return a.status===304||a.status===0},httpData:function(a,b,d){var f=a.getResponseHeader("content-type")||"",e=b==="xml"||!b&&f.indexOf("xml")>=0;a=e?a.responseXML:a.responseText;e&&a.documentElement.nodeName==="parsererror"&&c.error("parsererror");if(d&&d.dataFilter)a=d.dataFilter(a,b);if(typeof a==="string")if(b=== -"json"||!b&&f.indexOf("json")>=0)a=c.parseJSON(a);else if(b==="script"||!b&&f.indexOf("javascript")>=0)c.globalEval(a);return a},param:function(a,b){function d(i,o){if(c.isArray(o))c.each(o,function(k,n){b||/\[\]$/.test(i)?f(i,n):d(i+"["+(typeof n==="object"||c.isArray(n)?k:"")+"]",n)});else!b&&o!=null&&typeof o==="object"?c.each(o,function(k,n){d(i+"["+k+"]",n)}):f(i,o)}function f(i,o){o=c.isFunction(o)?o():o;e[e.length]=encodeURIComponent(i)+"="+encodeURIComponent(o)}var e=[];if(b===w)b=c.ajaxSettings.traditional; -if(c.isArray(a)||a.jquery)c.each(a,function(){f(this.name,this.value)});else for(var j in a)d(j,a[j]);return e.join("&").replace(yb,"+")}});var la={},Ab=/toggle|show|hide/,Bb=/^([+-]=)?([\d+-.]+)(.*)$/,W,va=[["height","marginTop","marginBottom","paddingTop","paddingBottom"],["width","marginLeft","marginRight","paddingLeft","paddingRight"],["opacity"]];c.fn.extend({show:function(a,b){if(a||a===0)return this.animate(K("show",3),a,b);else{a=0;for(b=this.length;a").appendTo("body");f=e.css("display");if(f==="none")f="block";e.remove();la[d]=f}c.data(this[a],"olddisplay",f)}}a=0;for(b=this.length;a=0;f--)if(d[f].elem===this){b&&d[f](true);d.splice(f,1)}});b||this.dequeue();return this}});c.each({slideDown:K("show",1),slideUp:K("hide",1),slideToggle:K("toggle",1),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"}},function(a,b){c.fn[a]=function(d,f){return this.animate(b,d,f)}});c.extend({speed:function(a,b,d){var f=a&&typeof a==="object"?a:{complete:d||!d&&b||c.isFunction(a)&&a,duration:a,easing:d&&b||b&&!c.isFunction(b)&&b};f.duration=c.fx.off?0:typeof f.duration=== -"number"?f.duration:c.fx.speeds[f.duration]||c.fx.speeds._default;f.old=f.complete;f.complete=function(){f.queue!==false&&c(this).dequeue();c.isFunction(f.old)&&f.old.call(this)};return f},easing:{linear:function(a,b,d,f){return d+f*a},swing:function(a,b,d,f){return(-Math.cos(a*Math.PI)/2+0.5)*f+d}},timers:[],fx:function(a,b,d){this.options=b;this.elem=a;this.prop=d;if(!b.orig)b.orig={}}});c.fx.prototype={update:function(){this.options.step&&this.options.step.call(this.elem,this.now,this);(c.fx.step[this.prop]|| -c.fx.step._default)(this);if((this.prop==="height"||this.prop==="width")&&this.elem.style)this.elem.style.display="block"},cur:function(a){if(this.elem[this.prop]!=null&&(!this.elem.style||this.elem.style[this.prop]==null))return this.elem[this.prop];return(a=parseFloat(c.css(this.elem,this.prop,a)))&&a>-10000?a:parseFloat(c.curCSS(this.elem,this.prop))||0},custom:function(a,b,d){function f(j){return e.step(j)}this.startTime=J();this.start=a;this.end=b;this.unit=d||this.unit||"px";this.now=this.start; -this.pos=this.state=0;var e=this;f.elem=this.elem;if(f()&&c.timers.push(f)&&!W)W=setInterval(c.fx.tick,13)},show:function(){this.options.orig[this.prop]=c.style(this.elem,this.prop);this.options.show=true;this.custom(this.prop==="width"||this.prop==="height"?1:0,this.cur());c(this.elem).show()},hide:function(){this.options.orig[this.prop]=c.style(this.elem,this.prop);this.options.hide=true;this.custom(this.cur(),0)},step:function(a){var b=J(),d=true;if(a||b>=this.options.duration+this.startTime){this.now= -this.end;this.pos=this.state=1;this.update();this.options.curAnim[this.prop]=true;for(var f in this.options.curAnim)if(this.options.curAnim[f]!==true)d=false;if(d){if(this.options.display!=null){this.elem.style.overflow=this.options.overflow;a=c.data(this.elem,"olddisplay");this.elem.style.display=a?a:this.options.display;if(c.css(this.elem,"display")==="none")this.elem.style.display="block"}this.options.hide&&c(this.elem).hide();if(this.options.hide||this.options.show)for(var e in this.options.curAnim)c.style(this.elem, -e,this.options.orig[e]);this.options.complete.call(this.elem)}return false}else{e=b-this.startTime;this.state=e/this.options.duration;a=this.options.easing||(c.easing.swing?"swing":"linear");this.pos=c.easing[this.options.specialEasing&&this.options.specialEasing[this.prop]||a](this.state,e,0,1,this.options.duration);this.now=this.start+(this.end-this.start)*this.pos;this.update()}return true}};c.extend(c.fx,{tick:function(){for(var a=c.timers,b=0;b
      "; -a.insertBefore(b,a.firstChild);d=b.firstChild;f=d.firstChild;e=d.nextSibling.firstChild.firstChild;this.doesNotAddBorder=f.offsetTop!==5;this.doesAddBorderForTableAndCells=e.offsetTop===5;f.style.position="fixed";f.style.top="20px";this.supportsFixedPosition=f.offsetTop===20||f.offsetTop===15;f.style.position=f.style.top="";d.style.overflow="hidden";d.style.position="relative";this.subtractsBorderForOverflowNotVisible=f.offsetTop===-5;this.doesNotIncludeMarginInBodyOffset=a.offsetTop!==j;a.removeChild(b); -c.offset.initialize=c.noop},bodyOffset:function(a){var b=a.offsetTop,d=a.offsetLeft;c.offset.initialize();if(c.offset.doesNotIncludeMarginInBodyOffset){b+=parseFloat(c.curCSS(a,"marginTop",true))||0;d+=parseFloat(c.curCSS(a,"marginLeft",true))||0}return{top:b,left:d}},setOffset:function(a,b,d){if(/static/.test(c.curCSS(a,"position")))a.style.position="relative";var f=c(a),e=f.offset(),j=parseInt(c.curCSS(a,"top",true),10)||0,i=parseInt(c.curCSS(a,"left",true),10)||0;if(c.isFunction(b))b=b.call(a, -d,e);d={top:b.top-e.top+j,left:b.left-e.left+i};"using"in b?b.using.call(a,d):f.css(d)}};c.fn.extend({position:function(){if(!this[0])return null;var a=this[0],b=this.offsetParent(),d=this.offset(),f=/^body|html$/i.test(b[0].nodeName)?{top:0,left:0}:b.offset();d.top-=parseFloat(c.curCSS(a,"marginTop",true))||0;d.left-=parseFloat(c.curCSS(a,"marginLeft",true))||0;f.top+=parseFloat(c.curCSS(b[0],"borderTopWidth",true))||0;f.left+=parseFloat(c.curCSS(b[0],"borderLeftWidth",true))||0;return{top:d.top- -f.top,left:d.left-f.left}},offsetParent:function(){return this.map(function(){for(var a=this.offsetParent||s.body;a&&!/^body|html$/i.test(a.nodeName)&&c.css(a,"position")==="static";)a=a.offsetParent;return a})}});c.each(["Left","Top"],function(a,b){var d="scroll"+b;c.fn[d]=function(f){var e=this[0],j;if(!e)return null;if(f!==w)return this.each(function(){if(j=wa(this))j.scrollTo(!a?f:c(j).scrollLeft(),a?f:c(j).scrollTop());else this[d]=f});else return(j=wa(e))?"pageXOffset"in j?j[a?"pageYOffset": -"pageXOffset"]:c.support.boxModel&&j.document.documentElement[d]||j.document.body[d]:e[d]}});c.each(["Height","Width"],function(a,b){var d=b.toLowerCase();c.fn["inner"+b]=function(){return this[0]?c.css(this[0],d,false,"padding"):null};c.fn["outer"+b]=function(f){return this[0]?c.css(this[0],d,false,f?"margin":"border"):null};c.fn[d]=function(f){var e=this[0];if(!e)return f==null?null:this;if(c.isFunction(f))return this.each(function(j){var i=c(this);i[d](f.call(this,j,i[d]()))});return"scrollTo"in -e&&e.document?e.document.compatMode==="CSS1Compat"&&e.document.documentElement["client"+b]||e.document.body["client"+b]:e.nodeType===9?Math.max(e.documentElement["client"+b],e.body["scroll"+b],e.documentElement["scroll"+b],e.body["offset"+b],e.documentElement["offset"+b]):f===w?c.css(e,d):this.css(d,typeof f==="string"?f:f+"px")}});A.jQuery=A.$=c})(window); diff --git a/docs/Saml/js/jquery-1.7.1.min.js b/docs/Saml/js/jquery-1.7.1.min.js deleted file mode 100644 index 6ede59ce..00000000 --- a/docs/Saml/js/jquery-1.7.1.min.js +++ /dev/null @@ -1,9270 +0,0 @@ -/* - * Downloaded from http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.js, 2012-02-04 23:26 - */ - -/*! - * jQuery JavaScript Library v1.7.1 - * http://jquery.com/ - * - * Copyright 2011, John Resig - * Dual licensed under the MIT or GPL Version 2 licenses. - * http://jquery.org/license - * - * Includes Sizzle.js - * http://sizzlejs.com/ - * Copyright 2011, The Dojo Foundation - * Released under the MIT, BSD, and GPL Licenses. - * - * Date: Mon Nov 21 21:11:03 2011 -0500 - */ -(function( window, undefined ) { - -// Use the correct document accordingly with window argument (sandbox) -var document = window.document, - navigator = window.navigator, - location = window.location; -var jQuery = (function() { - -// Define a local copy of jQuery -var jQuery = function( selector, context ) { - // The jQuery object is actually just the init constructor 'enhanced' - return new jQuery.fn.init( selector, context, rootjQuery ); - }, - - // Map over jQuery in case of overwrite - _jQuery = window.jQuery, - - // Map over the $ in case of overwrite - _$ = window.$, - - // A central reference to the root jQuery(document) - rootjQuery, - - // A simple way to check for HTML strings or ID strings - // Prioritize #id over to avoid XSS via location.hash (#9521) - quickExpr = /^(?:[^#<]*(<[\w\W]+>)[^>]*$|#([\w\-]*)$)/, - - // Check if a string has a non-whitespace character in it - rnotwhite = /\S/, - - // Used for trimming whitespace - trimLeft = /^\s+/, - trimRight = /\s+$/, - - // Match a standalone tag - rsingleTag = /^<(\w+)\s*\/?>(?:<\/\1>)?$/, - - // JSON RegExp - rvalidchars = /^[\],:{}\s]*$/, - rvalidescape = /\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, - rvalidtokens = /"[^"\\\n\r]*"|true|false|null|-?\d+(?:\.\d*)?(?:[eE][+\-]?\d+)?/g, - rvalidbraces = /(?:^|:|,)(?:\s*\[)+/g, - - // Useragent RegExp - rwebkit = /(webkit)[ \/]([\w.]+)/, - ropera = /(opera)(?:.*version)?[ \/]([\w.]+)/, - rmsie = /(msie) ([\w.]+)/, - rmozilla = /(mozilla)(?:.*? rv:([\w.]+))?/, - - // Matches dashed string for camelizing - rdashAlpha = /-([a-z]|[0-9])/ig, - rmsPrefix = /^-ms-/, - - // Used by jQuery.camelCase as callback to replace() - fcamelCase = function( all, letter ) { - return ( letter + "" ).toUpperCase(); - }, - - // Keep a UserAgent string for use with jQuery.browser - userAgent = navigator.userAgent, - - // For matching the engine and version of the browser - browserMatch, - - // The deferred used on DOM ready - readyList, - - // The ready event handler - DOMContentLoaded, - - // Save a reference to some core methods - toString = Object.prototype.toString, - hasOwn = Object.prototype.hasOwnProperty, - push = Array.prototype.push, - slice = Array.prototype.slice, - trim = String.prototype.trim, - indexOf = Array.prototype.indexOf, - - // [[Class]] -> type pairs - class2type = {}; - -jQuery.fn = jQuery.prototype = { - constructor: jQuery, - init: function( selector, context, rootjQuery ) { - var match, elem, ret, doc; - - // Handle $(""), $(null), or $(undefined) - if ( !selector ) { - return this; - } - - // Handle $(DOMElement) - if ( selector.nodeType ) { - this.context = this[0] = selector; - this.length = 1; - return this; - } - - // The body element only exists once, optimize finding it - if ( selector === "body" && !context && document.body ) { - this.context = document; - this[0] = document.body; - this.selector = selector; - this.length = 1; - return this; - } - - // Handle HTML strings - if ( typeof selector === "string" ) { - // Are we dealing with HTML string or an ID? - if ( selector.charAt(0) === "<" && selector.charAt( selector.length - 1 ) === ">" && selector.length >= 3 ) { - // Assume that strings that start and end with <> are HTML and skip the regex check - match = [ null, selector, null ]; - - } else { - match = quickExpr.exec( selector ); - } - - // Verify a match, and that no context was specified for #id - if ( match && (match[1] || !context) ) { - - // HANDLE: $(html) -> $(array) - if ( match[1] ) { - context = context instanceof jQuery ? context[0] : context; - doc = ( context ? context.ownerDocument || context : document ); - - // If a single string is passed in and it's a single tag - // just do a createElement and skip the rest - ret = rsingleTag.exec( selector ); - - if ( ret ) { - if ( jQuery.isPlainObject( context ) ) { - selector = [ document.createElement( ret[1] ) ]; - jQuery.fn.attr.call( selector, context, true ); - - } else { - selector = [ doc.createElement( ret[1] ) ]; - } - - } else { - ret = jQuery.buildFragment( [ match[1] ], [ doc ] ); - selector = ( ret.cacheable ? jQuery.clone(ret.fragment) : ret.fragment ).childNodes; - } - - return jQuery.merge( this, selector ); - - // HANDLE: $("#id") - } else { - elem = document.getElementById( match[2] ); - - // Check parentNode to catch when Blackberry 4.6 returns - // nodes that are no longer in the document #6963 - if ( elem && elem.parentNode ) { - // Handle the case where IE and Opera return items - // by name instead of ID - if ( elem.id !== match[2] ) { - return rootjQuery.find( selector ); - } - - // Otherwise, we inject the element directly into the jQuery object - this.length = 1; - this[0] = elem; - } - - this.context = document; - this.selector = selector; - return this; - } - - // HANDLE: $(expr, $(...)) - } else if ( !context || context.jquery ) { - return ( context || rootjQuery ).find( selector ); - - // HANDLE: $(expr, context) - // (which is just equivalent to: $(context).find(expr) - } else { - return this.constructor( context ).find( selector ); - } - - // HANDLE: $(function) - // Shortcut for document ready - } else if ( jQuery.isFunction( selector ) ) { - return rootjQuery.ready( selector ); - } - - if ( selector.selector !== undefined ) { - this.selector = selector.selector; - this.context = selector.context; - } - - return jQuery.makeArray( selector, this ); - }, - - // Start with an empty selector - selector: "", - - // The current version of jQuery being used - jquery: "1.7.1", - - // The default length of a jQuery object is 0 - length: 0, - - // The number of elements contained in the matched element set - size: function() { - return this.length; - }, - - toArray: function() { - return slice.call( this, 0 ); - }, - - // Get the Nth element in the matched element set OR - // Get the whole matched element set as a clean array - get: function( num ) { - return num == null ? - - // Return a 'clean' array - this.toArray() : - - // Return just the object - ( num < 0 ? this[ this.length + num ] : this[ num ] ); - }, - - // Take an array of elements and push it onto the stack - // (returning the new matched element set) - pushStack: function( elems, name, selector ) { - // Build a new jQuery matched element set - var ret = this.constructor(); - - if ( jQuery.isArray( elems ) ) { - push.apply( ret, elems ); - - } else { - jQuery.merge( ret, elems ); - } - - // Add the old object onto the stack (as a reference) - ret.prevObject = this; - - ret.context = this.context; - - if ( name === "find" ) { - ret.selector = this.selector + ( this.selector ? " " : "" ) + selector; - } else if ( name ) { - ret.selector = this.selector + "." + name + "(" + selector + ")"; - } - - // Return the newly-formed element set - return ret; - }, - - // Execute a callback for every element in the matched set. - // (You can seed the arguments with an array of args, but this is - // only used internally.) - each: function( callback, args ) { - return jQuery.each( this, callback, args ); - }, - - ready: function( fn ) { - // Attach the listeners - jQuery.bindReady(); - - // Add the callback - readyList.add( fn ); - - return this; - }, - - eq: function( i ) { - i = +i; - return i === -1 ? - this.slice( i ) : - this.slice( i, i + 1 ); - }, - - first: function() { - return this.eq( 0 ); - }, - - last: function() { - return this.eq( -1 ); - }, - - slice: function() { - return this.pushStack( slice.apply( this, arguments ), - "slice", slice.call(arguments).join(",") ); - }, - - map: function( callback ) { - return this.pushStack( jQuery.map(this, function( elem, i ) { - return callback.call( elem, i, elem ); - })); - }, - - end: function() { - return this.prevObject || this.constructor(null); - }, - - // For internal use only. - // Behaves like an Array's method, not like a jQuery method. - push: push, - sort: [].sort, - splice: [].splice -}; - -// Give the init function the jQuery prototype for later instantiation -jQuery.fn.init.prototype = jQuery.fn; - -jQuery.extend = jQuery.fn.extend = function() { - var options, name, src, copy, copyIsArray, clone, - target = arguments[0] || {}, - i = 1, - length = arguments.length, - deep = false; - - // Handle a deep copy situation - if ( typeof target === "boolean" ) { - deep = target; - target = arguments[1] || {}; - // skip the boolean and the target - i = 2; - } - - // Handle case when target is a string or something (possible in deep copy) - if ( typeof target !== "object" && !jQuery.isFunction(target) ) { - target = {}; - } - - // extend jQuery itself if only one argument is passed - if ( length === i ) { - target = this; - --i; - } - - for ( ; i < length; i++ ) { - // Only deal with non-null/undefined values - if ( (options = arguments[ i ]) != null ) { - // Extend the base object - for ( name in options ) { - src = target[ name ]; - copy = options[ name ]; - - // Prevent never-ending loop - if ( target === copy ) { - continue; - } - - // Recurse if we're merging plain objects or arrays - if ( deep && copy && ( jQuery.isPlainObject(copy) || (copyIsArray = jQuery.isArray(copy)) ) ) { - if ( copyIsArray ) { - copyIsArray = false; - clone = src && jQuery.isArray(src) ? src : []; - - } else { - clone = src && jQuery.isPlainObject(src) ? src : {}; - } - - // Never move original objects, clone them - target[ name ] = jQuery.extend( deep, clone, copy ); - - // Don't bring in undefined values - } else if ( copy !== undefined ) { - target[ name ] = copy; - } - } - } - } - - // Return the modified object - return target; -}; - -jQuery.extend({ - noConflict: function( deep ) { - if ( window.$ === jQuery ) { - window.$ = _$; - } - - if ( deep && window.jQuery === jQuery ) { - window.jQuery = _jQuery; - } - - return jQuery; - }, - - // Is the DOM ready to be used? Set to true once it occurs. - isReady: false, - - // A counter to track how many items to wait for before - // the ready event fires. See #6781 - readyWait: 1, - - // Hold (or release) the ready event - holdReady: function( hold ) { - if ( hold ) { - jQuery.readyWait++; - } else { - jQuery.ready( true ); - } - }, - - // Handle when the DOM is ready - ready: function( wait ) { - // Either a released hold or an DOMready/load event and not yet ready - if ( (wait === true && !--jQuery.readyWait) || (wait !== true && !jQuery.isReady) ) { - // Make sure body exists, at least, in case IE gets a little overzealous (ticket #5443). - if ( !document.body ) { - return setTimeout( jQuery.ready, 1 ); - } - - // Remember that the DOM is ready - jQuery.isReady = true; - - // If a normal DOM Ready event fired, decrement, and wait if need be - if ( wait !== true && --jQuery.readyWait > 0 ) { - return; - } - - // If there are functions bound, to execute - readyList.fireWith( document, [ jQuery ] ); - - // Trigger any bound ready events - if ( jQuery.fn.trigger ) { - jQuery( document ).trigger( "ready" ).off( "ready" ); - } - } - }, - - bindReady: function() { - if ( readyList ) { - return; - } - - readyList = jQuery.Callbacks( "once memory" ); - - // Catch cases where $(document).ready() is called after the - // browser event has already occurred. - if ( document.readyState === "complete" ) { - // Handle it asynchronously to allow scripts the opportunity to delay ready - return setTimeout( jQuery.ready, 1 ); - } - - // Mozilla, Opera and webkit nightlies currently support this event - if ( document.addEventListener ) { - // Use the handy event callback - document.addEventListener( "DOMContentLoaded", DOMContentLoaded, false ); - - // A fallback to window.onload, that will always work - window.addEventListener( "load", jQuery.ready, false ); - - // If IE event model is used - } else if ( document.attachEvent ) { - // ensure firing before onload, - // maybe late but safe also for iframes - document.attachEvent( "onreadystatechange", DOMContentLoaded ); - - // A fallback to window.onload, that will always work - window.attachEvent( "onload", jQuery.ready ); - - // If IE and not a frame - // continually check to see if the document is ready - var toplevel = false; - - try { - toplevel = window.frameElement == null; - } catch(e) {} - - if ( document.documentElement.doScroll && toplevel ) { - doScrollCheck(); - } - } - }, - - // See test/unit/core.js for details concerning isFunction. - // Since version 1.3, DOM methods and functions like alert - // aren't supported. They return false on IE (#2968). - isFunction: function( obj ) { - return jQuery.type(obj) === "function"; - }, - - isArray: Array.isArray || function( obj ) { - return jQuery.type(obj) === "array"; - }, - - // A crude way of determining if an object is a window - isWindow: function( obj ) { - return obj && typeof obj === "object" && "setInterval" in obj; - }, - - isNumeric: function( obj ) { - return !isNaN( parseFloat(obj) ) && isFinite( obj ); - }, - - type: function( obj ) { - return obj == null ? - String( obj ) : - class2type[ toString.call(obj) ] || "object"; - }, - - isPlainObject: function( obj ) { - // Must be an Object. - // Because of IE, we also have to check the presence of the constructor property. - // Make sure that DOM nodes and window objects don't pass through, as well - if ( !obj || jQuery.type(obj) !== "object" || obj.nodeType || jQuery.isWindow( obj ) ) { - return false; - } - - try { - // Not own constructor property must be Object - if ( obj.constructor && - !hasOwn.call(obj, "constructor") && - !hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) { - return false; - } - } catch ( e ) { - // IE8,9 Will throw exceptions on certain host objects #9897 - return false; - } - - // Own properties are enumerated firstly, so to speed up, - // if last one is own, then all properties are own. - - var key; - for ( key in obj ) {} - - return key === undefined || hasOwn.call( obj, key ); - }, - - isEmptyObject: function( obj ) { - for ( var name in obj ) { - return false; - } - return true; - }, - - error: function( msg ) { - throw new Error( msg ); - }, - - parseJSON: function( data ) { - if ( typeof data !== "string" || !data ) { - return null; - } - - // Make sure leading/trailing whitespace is removed (IE can't handle it) - data = jQuery.trim( data ); - - // Attempt to parse using the native JSON parser first - if ( window.JSON && window.JSON.parse ) { - return window.JSON.parse( data ); - } - - // Make sure the incoming data is actual JSON - // Logic borrowed from http://json.org/json2.js - if ( rvalidchars.test( data.replace( rvalidescape, "@" ) - .replace( rvalidtokens, "]" ) - .replace( rvalidbraces, "")) ) { - - return ( new Function( "return " + data ) )(); - - } - jQuery.error( "Invalid JSON: " + data ); - }, - - // Cross-browser xml parsing - parseXML: function( data ) { - var xml, tmp; - try { - if ( window.DOMParser ) { // Standard - tmp = new DOMParser(); - xml = tmp.parseFromString( data , "text/xml" ); - } else { // IE - xml = new ActiveXObject( "Microsoft.XMLDOM" ); - xml.async = "false"; - xml.loadXML( data ); - } - } catch( e ) { - xml = undefined; - } - if ( !xml || !xml.documentElement || xml.getElementsByTagName( "parsererror" ).length ) { - jQuery.error( "Invalid XML: " + data ); - } - return xml; - }, - - noop: function() {}, - - // Evaluates a script in a global context - // Workarounds based on findings by Jim Driscoll - // http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context - globalEval: function( data ) { - if ( data && rnotwhite.test( data ) ) { - // We use execScript on Internet Explorer - // We use an anonymous function so that context is window - // rather than jQuery in Firefox - ( window.execScript || function( data ) { - window[ "eval" ].call( window, data ); - } )( data ); - } - }, - - // Convert dashed to camelCase; used by the css and data modules - // Microsoft forgot to hump their vendor prefix (#9572) - camelCase: function( string ) { - return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase ); - }, - - nodeName: function( elem, name ) { - return elem.nodeName && elem.nodeName.toUpperCase() === name.toUpperCase(); - }, - - // args is for internal usage only - each: function( object, callback, args ) { - var name, i = 0, - length = object.length, - isObj = length === undefined || jQuery.isFunction( object ); - - if ( args ) { - if ( isObj ) { - for ( name in object ) { - if ( callback.apply( object[ name ], args ) === false ) { - break; - } - } - } else { - for ( ; i < length; ) { - if ( callback.apply( object[ i++ ], args ) === false ) { - break; - } - } - } - - // A special, fast, case for the most common use of each - } else { - if ( isObj ) { - for ( name in object ) { - if ( callback.call( object[ name ], name, object[ name ] ) === false ) { - break; - } - } - } else { - for ( ; i < length; ) { - if ( callback.call( object[ i ], i, object[ i++ ] ) === false ) { - break; - } - } - } - } - - return object; - }, - - // Use native String.trim function wherever possible - trim: trim ? - function( text ) { - return text == null ? - "" : - trim.call( text ); - } : - - // Otherwise use our own trimming functionality - function( text ) { - return text == null ? - "" : - text.toString().replace( trimLeft, "" ).replace( trimRight, "" ); - }, - - // results is for internal usage only - makeArray: function( array, results ) { - var ret = results || []; - - if ( array != null ) { - // The window, strings (and functions) also have 'length' - // Tweaked logic slightly to handle Blackberry 4.7 RegExp issues #6930 - var type = jQuery.type( array ); - - if ( array.length == null || type === "string" || type === "function" || type === "regexp" || jQuery.isWindow( array ) ) { - push.call( ret, array ); - } else { - jQuery.merge( ret, array ); - } - } - - return ret; - }, - - inArray: function( elem, array, i ) { - var len; - - if ( array ) { - if ( indexOf ) { - return indexOf.call( array, elem, i ); - } - - len = array.length; - i = i ? i < 0 ? Math.max( 0, len + i ) : i : 0; - - for ( ; i < len; i++ ) { - // Skip accessing in sparse arrays - if ( i in array && array[ i ] === elem ) { - return i; - } - } - } - - return -1; - }, - - merge: function( first, second ) { - var i = first.length, - j = 0; - - if ( typeof second.length === "number" ) { - for ( var l = second.length; j < l; j++ ) { - first[ i++ ] = second[ j ]; - } - - } else { - while ( second[j] !== undefined ) { - first[ i++ ] = second[ j++ ]; - } - } - - first.length = i; - - return first; - }, - - grep: function( elems, callback, inv ) { - var ret = [], retVal; - inv = !!inv; - - // Go through the array, only saving the items - // that pass the validator function - for ( var i = 0, length = elems.length; i < length; i++ ) { - retVal = !!callback( elems[ i ], i ); - if ( inv !== retVal ) { - ret.push( elems[ i ] ); - } - } - - return ret; - }, - - // arg is for internal usage only - map: function( elems, callback, arg ) { - var value, key, ret = [], - i = 0, - length = elems.length, - // jquery objects are treated as arrays - isArray = elems instanceof jQuery || length !== undefined && typeof length === "number" && ( ( length > 0 && elems[ 0 ] && elems[ length -1 ] ) || length === 0 || jQuery.isArray( elems ) ) ; - - // Go through the array, translating each of the items to their - if ( isArray ) { - for ( ; i < length; i++ ) { - value = callback( elems[ i ], i, arg ); - - if ( value != null ) { - ret[ ret.length ] = value; - } - } - - // Go through every key on the object, - } else { - for ( key in elems ) { - value = callback( elems[ key ], key, arg ); - - if ( value != null ) { - ret[ ret.length ] = value; - } - } - } - - // Flatten any nested arrays - return ret.concat.apply( [], ret ); - }, - - // A global GUID counter for objects - guid: 1, - - // Bind a function to a context, optionally partially applying any - // arguments. - proxy: function( fn, context ) { - if ( typeof context === "string" ) { - var tmp = fn[ context ]; - context = fn; - fn = tmp; - } - - // Quick check to determine if target is callable, in the spec - // this throws a TypeError, but we will just return undefined. - if ( !jQuery.isFunction( fn ) ) { - return undefined; - } - - // Simulated bind - var args = slice.call( arguments, 2 ), - proxy = function() { - return fn.apply( context, args.concat( slice.call( arguments ) ) ); - }; - - // Set the guid of unique handler to the same of original handler, so it can be removed - proxy.guid = fn.guid = fn.guid || proxy.guid || jQuery.guid++; - - return proxy; - }, - - // Mutifunctional method to get and set values to a collection - // The value/s can optionally be executed if it's a function - access: function( elems, key, value, exec, fn, pass ) { - var length = elems.length; - - // Setting many attributes - if ( typeof key === "object" ) { - for ( var k in key ) { - jQuery.access( elems, k, key[k], exec, fn, value ); - } - return elems; - } - - // Setting one attribute - if ( value !== undefined ) { - // Optionally, function values get executed if exec is true - exec = !pass && exec && jQuery.isFunction(value); - - for ( var i = 0; i < length; i++ ) { - fn( elems[i], key, exec ? value.call( elems[i], i, fn( elems[i], key ) ) : value, pass ); - } - - return elems; - } - - // Getting an attribute - return length ? fn( elems[0], key ) : undefined; - }, - - now: function() { - return ( new Date() ).getTime(); - }, - - // Use of jQuery.browser is frowned upon. - // More details: http://docs.jquery.com/Utilities/jQuery.browser - uaMatch: function( ua ) { - ua = ua.toLowerCase(); - - var match = rwebkit.exec( ua ) || - ropera.exec( ua ) || - rmsie.exec( ua ) || - ua.indexOf("compatible") < 0 && rmozilla.exec( ua ) || - []; - - return { browser: match[1] || "", version: match[2] || "0" }; - }, - - sub: function() { - function jQuerySub( selector, context ) { - return new jQuerySub.fn.init( selector, context ); - } - jQuery.extend( true, jQuerySub, this ); - jQuerySub.superclass = this; - jQuerySub.fn = jQuerySub.prototype = this(); - jQuerySub.fn.constructor = jQuerySub; - jQuerySub.sub = this.sub; - jQuerySub.fn.init = function init( selector, context ) { - if ( context && context instanceof jQuery && !(context instanceof jQuerySub) ) { - context = jQuerySub( context ); - } - - return jQuery.fn.init.call( this, selector, context, rootjQuerySub ); - }; - jQuerySub.fn.init.prototype = jQuerySub.fn; - var rootjQuerySub = jQuerySub(document); - return jQuerySub; - }, - - browser: {} -}); - -// Populate the class2type map -jQuery.each("Boolean Number String Function Array Date RegExp Object".split(" "), function(i, name) { - class2type[ "[object " + name + "]" ] = name.toLowerCase(); -}); - -browserMatch = jQuery.uaMatch( userAgent ); -if ( browserMatch.browser ) { - jQuery.browser[ browserMatch.browser ] = true; - jQuery.browser.version = browserMatch.version; -} - -// Deprecated, use jQuery.browser.webkit instead -if ( jQuery.browser.webkit ) { - jQuery.browser.safari = true; -} - -// IE doesn't match non-breaking spaces with \s -if ( rnotwhite.test( "\xA0" ) ) { - trimLeft = /^[\s\xA0]+/; - trimRight = /[\s\xA0]+$/; -} - -// All jQuery objects should point back to these -rootjQuery = jQuery(document); - -// Cleanup functions for the document ready method -if ( document.addEventListener ) { - DOMContentLoaded = function() { - document.removeEventListener( "DOMContentLoaded", DOMContentLoaded, false ); - jQuery.ready(); - }; - -} else if ( document.attachEvent ) { - DOMContentLoaded = function() { - // Make sure body exists, at least, in case IE gets a little overzealous (ticket #5443). - if ( document.readyState === "complete" ) { - document.detachEvent( "onreadystatechange", DOMContentLoaded ); - jQuery.ready(); - } - }; -} - -// The DOM ready check for Internet Explorer -function doScrollCheck() { - if ( jQuery.isReady ) { - return; - } - - try { - // If IE is used, use the trick by Diego Perini - // http://javascript.nwbox.com/IEContentLoaded/ - document.documentElement.doScroll("left"); - } catch(e) { - setTimeout( doScrollCheck, 1 ); - return; - } - - // and execute any waiting functions - jQuery.ready(); -} - -return jQuery; - -})(); - - -// String to Object flags format cache -var flagsCache = {}; - -// Convert String-formatted flags into Object-formatted ones and store in cache -function createFlags( flags ) { - var object = flagsCache[ flags ] = {}, - i, length; - flags = flags.split( /\s+/ ); - for ( i = 0, length = flags.length; i < length; i++ ) { - object[ flags[i] ] = true; - } - return object; -} - -/* - * Create a callback list using the following parameters: - * - * flags: an optional list of space-separated flags that will change how - * the callback list behaves - * - * By default a callback list will act like an event callback list and can be - * "fired" multiple times. - * - * Possible flags: - * - * once: will ensure the callback list can only be fired once (like a Deferred) - * - * memory: will keep track of previous values and will call any callback added - * after the list has been fired right away with the latest "memorized" - * values (like a Deferred) - * - * unique: will ensure a callback can only be added once (no duplicate in the list) - * - * stopOnFalse: interrupt callings when a callback returns false - * - */ -jQuery.Callbacks = function( flags ) { - - // Convert flags from String-formatted to Object-formatted - // (we check in cache first) - flags = flags ? ( flagsCache[ flags ] || createFlags( flags ) ) : {}; - - var // Actual callback list - list = [], - // Stack of fire calls for repeatable lists - stack = [], - // Last fire value (for non-forgettable lists) - memory, - // Flag to know if list is currently firing - firing, - // First callback to fire (used internally by add and fireWith) - firingStart, - // End of the loop when firing - firingLength, - // Index of currently firing callback (modified by remove if needed) - firingIndex, - // Add one or several callbacks to the list - add = function( args ) { - var i, - length, - elem, - type, - actual; - for ( i = 0, length = args.length; i < length; i++ ) { - elem = args[ i ]; - type = jQuery.type( elem ); - if ( type === "array" ) { - // Inspect recursively - add( elem ); - } else if ( type === "function" ) { - // Add if not in unique mode and callback is not in - if ( !flags.unique || !self.has( elem ) ) { - list.push( elem ); - } - } - } - }, - // Fire callbacks - fire = function( context, args ) { - args = args || []; - memory = !flags.memory || [ context, args ]; - firing = true; - firingIndex = firingStart || 0; - firingStart = 0; - firingLength = list.length; - for ( ; list && firingIndex < firingLength; firingIndex++ ) { - if ( list[ firingIndex ].apply( context, args ) === false && flags.stopOnFalse ) { - memory = true; // Mark as halted - break; - } - } - firing = false; - if ( list ) { - if ( !flags.once ) { - if ( stack && stack.length ) { - memory = stack.shift(); - self.fireWith( memory[ 0 ], memory[ 1 ] ); - } - } else if ( memory === true ) { - self.disable(); - } else { - list = []; - } - } - }, - // Actual Callbacks object - self = { - // Add a callback or a collection of callbacks to the list - add: function() { - if ( list ) { - var length = list.length; - add( arguments ); - // Do we need to add the callbacks to the - // current firing batch? - if ( firing ) { - firingLength = list.length; - // With memory, if we're not firing then - // we should call right away, unless previous - // firing was halted (stopOnFalse) - } else if ( memory && memory !== true ) { - firingStart = length; - fire( memory[ 0 ], memory[ 1 ] ); - } - } - return this; - }, - // Remove a callback from the list - remove: function() { - if ( list ) { - var args = arguments, - argIndex = 0, - argLength = args.length; - for ( ; argIndex < argLength ; argIndex++ ) { - for ( var i = 0; i < list.length; i++ ) { - if ( args[ argIndex ] === list[ i ] ) { - // Handle firingIndex and firingLength - if ( firing ) { - if ( i <= firingLength ) { - firingLength--; - if ( i <= firingIndex ) { - firingIndex--; - } - } - } - // Remove the element - list.splice( i--, 1 ); - // If we have some unicity property then - // we only need to do this once - if ( flags.unique ) { - break; - } - } - } - } - } - return this; - }, - // Control if a given callback is in the list - has: function( fn ) { - if ( list ) { - var i = 0, - length = list.length; - for ( ; i < length; i++ ) { - if ( fn === list[ i ] ) { - return true; - } - } - } - return false; - }, - // Remove all callbacks from the list - empty: function() { - list = []; - return this; - }, - // Have the list do nothing anymore - disable: function() { - list = stack = memory = undefined; - return this; - }, - // Is it disabled? - disabled: function() { - return !list; - }, - // Lock the list in its current state - lock: function() { - stack = undefined; - if ( !memory || memory === true ) { - self.disable(); - } - return this; - }, - // Is it locked? - locked: function() { - return !stack; - }, - // Call all callbacks with the given context and arguments - fireWith: function( context, args ) { - if ( stack ) { - if ( firing ) { - if ( !flags.once ) { - stack.push( [ context, args ] ); - } - } else if ( !( flags.once && memory ) ) { - fire( context, args ); - } - } - return this; - }, - // Call all the callbacks with the given arguments - fire: function() { - self.fireWith( this, arguments ); - return this; - }, - // To know if the callbacks have already been called at least once - fired: function() { - return !!memory; - } - }; - - return self; -}; - - - - -var // Static reference to slice - sliceDeferred = [].slice; - -jQuery.extend({ - - Deferred: function( func ) { - var doneList = jQuery.Callbacks( "once memory" ), - failList = jQuery.Callbacks( "once memory" ), - progressList = jQuery.Callbacks( "memory" ), - state = "pending", - lists = { - resolve: doneList, - reject: failList, - notify: progressList - }, - promise = { - done: doneList.add, - fail: failList.add, - progress: progressList.add, - - state: function() { - return state; - }, - - // Deprecated - isResolved: doneList.fired, - isRejected: failList.fired, - - then: function( doneCallbacks, failCallbacks, progressCallbacks ) { - deferred.done( doneCallbacks ).fail( failCallbacks ).progress( progressCallbacks ); - return this; - }, - always: function() { - deferred.done.apply( deferred, arguments ).fail.apply( deferred, arguments ); - return this; - }, - pipe: function( fnDone, fnFail, fnProgress ) { - return jQuery.Deferred(function( newDefer ) { - jQuery.each( { - done: [ fnDone, "resolve" ], - fail: [ fnFail, "reject" ], - progress: [ fnProgress, "notify" ] - }, function( handler, data ) { - var fn = data[ 0 ], - action = data[ 1 ], - returned; - if ( jQuery.isFunction( fn ) ) { - deferred[ handler ](function() { - returned = fn.apply( this, arguments ); - if ( returned && jQuery.isFunction( returned.promise ) ) { - returned.promise().then( newDefer.resolve, newDefer.reject, newDefer.notify ); - } else { - newDefer[ action + "With" ]( this === deferred ? newDefer : this, [ returned ] ); - } - }); - } else { - deferred[ handler ]( newDefer[ action ] ); - } - }); - }).promise(); - }, - // Get a promise for this deferred - // If obj is provided, the promise aspect is added to the object - promise: function( obj ) { - if ( obj == null ) { - obj = promise; - } else { - for ( var key in promise ) { - obj[ key ] = promise[ key ]; - } - } - return obj; - } - }, - deferred = promise.promise({}), - key; - - for ( key in lists ) { - deferred[ key ] = lists[ key ].fire; - deferred[ key + "With" ] = lists[ key ].fireWith; - } - - // Handle state - deferred.done( function() { - state = "resolved"; - }, failList.disable, progressList.lock ).fail( function() { - state = "rejected"; - }, doneList.disable, progressList.lock ); - - // Call given func if any - if ( func ) { - func.call( deferred, deferred ); - } - - // All done! - return deferred; - }, - - // Deferred helper - when: function( firstParam ) { - var args = sliceDeferred.call( arguments, 0 ), - i = 0, - length = args.length, - pValues = new Array( length ), - count = length, - pCount = length, - deferred = length <= 1 && firstParam && jQuery.isFunction( firstParam.promise ) ? - firstParam : - jQuery.Deferred(), - promise = deferred.promise(); - function resolveFunc( i ) { - return function( value ) { - args[ i ] = arguments.length > 1 ? sliceDeferred.call( arguments, 0 ) : value; - if ( !( --count ) ) { - deferred.resolveWith( deferred, args ); - } - }; - } - function progressFunc( i ) { - return function( value ) { - pValues[ i ] = arguments.length > 1 ? sliceDeferred.call( arguments, 0 ) : value; - deferred.notifyWith( promise, pValues ); - }; - } - if ( length > 1 ) { - for ( ; i < length; i++ ) { - if ( args[ i ] && args[ i ].promise && jQuery.isFunction( args[ i ].promise ) ) { - args[ i ].promise().then( resolveFunc(i), deferred.reject, progressFunc(i) ); - } else { - --count; - } - } - if ( !count ) { - deferred.resolveWith( deferred, args ); - } - } else if ( deferred !== firstParam ) { - deferred.resolveWith( deferred, length ? [ firstParam ] : [] ); - } - return promise; - } -}); - - - - -jQuery.support = (function() { - - var support, - all, - a, - select, - opt, - input, - marginDiv, - fragment, - tds, - events, - eventName, - i, - isSupported, - div = document.createElement( "div" ), - documentElement = document.documentElement; - - // Preliminary tests - div.setAttribute("className", "t"); - div.innerHTML = "
      a"; - - all = div.getElementsByTagName( "*" ); - a = div.getElementsByTagName( "a" )[ 0 ]; - - // Can't get basic test support - if ( !all || !all.length || !a ) { - return {}; - } - - // First batch of supports tests - select = document.createElement( "select" ); - opt = select.appendChild( document.createElement("option") ); - input = div.getElementsByTagName( "input" )[ 0 ]; - - support = { - // IE strips leading whitespace when .innerHTML is used - leadingWhitespace: ( div.firstChild.nodeType === 3 ), - - // Make sure that tbody elements aren't automatically inserted - // IE will insert them into empty tables - tbody: !div.getElementsByTagName("tbody").length, - - // Make sure that link elements get serialized correctly by innerHTML - // This requires a wrapper element in IE - htmlSerialize: !!div.getElementsByTagName("link").length, - - // Get the style information from getAttribute - // (IE uses .cssText instead) - style: /top/.test( a.getAttribute("style") ), - - // Make sure that URLs aren't manipulated - // (IE normalizes it by default) - hrefNormalized: ( a.getAttribute("href") === "/a" ), - - // Make sure that element opacity exists - // (IE uses filter instead) - // Use a regex to work around a WebKit issue. See #5145 - opacity: /^0.55/.test( a.style.opacity ), - - // Verify style float existence - // (IE uses styleFloat instead of cssFloat) - cssFloat: !!a.style.cssFloat, - - // Make sure that if no value is specified for a checkbox - // that it defaults to "on". - // (WebKit defaults to "" instead) - checkOn: ( input.value === "on" ), - - // Make sure that a selected-by-default option has a working selected property. - // (WebKit defaults to false instead of true, IE too, if it's in an optgroup) - optSelected: opt.selected, - - // Test setAttribute on camelCase class. If it works, we need attrFixes when doing get/setAttribute (ie6/7) - getSetAttribute: div.className !== "t", - - // Tests for enctype support on a form(#6743) - enctype: !!document.createElement("form").enctype, - - // Makes sure cloning an html5 element does not cause problems - // Where outerHTML is undefined, this still works - html5Clone: document.createElement("nav").cloneNode( true ).outerHTML !== "<:nav>", - - // Will be defined later - submitBubbles: true, - changeBubbles: true, - focusinBubbles: false, - deleteExpando: true, - noCloneEvent: true, - inlineBlockNeedsLayout: false, - shrinkWrapBlocks: false, - reliableMarginRight: true - }; - - // Make sure checked status is properly cloned - input.checked = true; - support.noCloneChecked = input.cloneNode( true ).checked; - - // Make sure that the options inside disabled selects aren't marked as disabled - // (WebKit marks them as disabled) - select.disabled = true; - support.optDisabled = !opt.disabled; - - // Test to see if it's possible to delete an expando from an element - // Fails in Internet Explorer - try { - delete div.test; - } catch( e ) { - support.deleteExpando = false; - } - - if ( !div.addEventListener && div.attachEvent && div.fireEvent ) { - div.attachEvent( "onclick", function() { - // Cloning a node shouldn't copy over any - // bound event handlers (IE does this) - support.noCloneEvent = false; - }); - div.cloneNode( true ).fireEvent( "onclick" ); - } - - // Check if a radio maintains its value - // after being appended to the DOM - input = document.createElement("input"); - input.value = "t"; - input.setAttribute("type", "radio"); - support.radioValue = input.value === "t"; - - input.setAttribute("checked", "checked"); - div.appendChild( input ); - fragment = document.createDocumentFragment(); - fragment.appendChild( div.lastChild ); - - // WebKit doesn't clone checked state correctly in fragments - support.checkClone = fragment.cloneNode( true ).cloneNode( true ).lastChild.checked; - - // Check if a disconnected checkbox will retain its checked - // value of true after appended to the DOM (IE6/7) - support.appendChecked = input.checked; - - fragment.removeChild( input ); - fragment.appendChild( div ); - - div.innerHTML = ""; - - // Check if div with explicit width and no margin-right incorrectly - // gets computed margin-right based on width of container. For more - // info see bug #3333 - // Fails in WebKit before Feb 2011 nightlies - // WebKit Bug 13343 - getComputedStyle returns wrong value for margin-right - if ( window.getComputedStyle ) { - marginDiv = document.createElement( "div" ); - marginDiv.style.width = "0"; - marginDiv.style.marginRight = "0"; - div.style.width = "2px"; - div.appendChild( marginDiv ); - support.reliableMarginRight = - ( parseInt( ( window.getComputedStyle( marginDiv, null ) || { marginRight: 0 } ).marginRight, 10 ) || 0 ) === 0; - } - - // Technique from Juriy Zaytsev - // http://perfectionkills.com/detecting-event-support-without-browser-sniffing/ - // We only care about the case where non-standard event systems - // are used, namely in IE. Short-circuiting here helps us to - // avoid an eval call (in setAttribute) which can cause CSP - // to go haywire. See: https://developer.mozilla.org/en/Security/CSP - if ( div.attachEvent ) { - for( i in { - submit: 1, - change: 1, - focusin: 1 - }) { - eventName = "on" + i; - isSupported = ( eventName in div ); - if ( !isSupported ) { - div.setAttribute( eventName, "return;" ); - isSupported = ( typeof div[ eventName ] === "function" ); - } - support[ i + "Bubbles" ] = isSupported; - } - } - - fragment.removeChild( div ); - - // Null elements to avoid leaks in IE - fragment = select = opt = marginDiv = div = input = null; - - // Run tests that need a body at doc ready - jQuery(function() { - var container, outer, inner, table, td, offsetSupport, - conMarginTop, ptlm, vb, style, html, - body = document.getElementsByTagName("body")[0]; - - if ( !body ) { - // Return for frameset docs that don't have a body - return; - } - - conMarginTop = 1; - ptlm = "position:absolute;top:0;left:0;width:1px;height:1px;margin:0;"; - vb = "visibility:hidden;border:0;"; - style = "style='" + ptlm + "border:5px solid #000;padding:0;'"; - html = "
      " + - "" + - "
      "; - - container = document.createElement("div"); - container.style.cssText = vb + "width:0;height:0;position:static;top:0;margin-top:" + conMarginTop + "px"; - body.insertBefore( container, body.firstChild ); - - // Construct the test element - div = document.createElement("div"); - container.appendChild( div ); - - // Check if table cells still have offsetWidth/Height when they are set - // to display:none and there are still other visible table cells in a - // table row; if so, offsetWidth/Height are not reliable for use when - // determining if an element has been hidden directly using - // display:none (it is still safe to use offsets if a parent element is - // hidden; don safety goggles and see bug #4512 for more information). - // (only IE 8 fails this test) - div.innerHTML = "
      t
      "; - tds = div.getElementsByTagName( "td" ); - isSupported = ( tds[ 0 ].offsetHeight === 0 ); - - tds[ 0 ].style.display = ""; - tds[ 1 ].style.display = "none"; - - // Check if empty table cells still have offsetWidth/Height - // (IE <= 8 fail this test) - support.reliableHiddenOffsets = isSupported && ( tds[ 0 ].offsetHeight === 0 ); - - // Figure out if the W3C box model works as expected - div.innerHTML = ""; - div.style.width = div.style.paddingLeft = "1px"; - jQuery.boxModel = support.boxModel = div.offsetWidth === 2; - - if ( typeof div.style.zoom !== "undefined" ) { - // Check if natively block-level elements act like inline-block - // elements when setting their display to 'inline' and giving - // them layout - // (IE < 8 does this) - div.style.display = "inline"; - div.style.zoom = 1; - support.inlineBlockNeedsLayout = ( div.offsetWidth === 2 ); - - // Check if elements with layout shrink-wrap their children - // (IE 6 does this) - div.style.display = ""; - div.innerHTML = "
      "; - support.shrinkWrapBlocks = ( div.offsetWidth !== 2 ); - } - - div.style.cssText = ptlm + vb; - div.innerHTML = html; - - outer = div.firstChild; - inner = outer.firstChild; - td = outer.nextSibling.firstChild.firstChild; - - offsetSupport = { - doesNotAddBorder: ( inner.offsetTop !== 5 ), - doesAddBorderForTableAndCells: ( td.offsetTop === 5 ) - }; - - inner.style.position = "fixed"; - inner.style.top = "20px"; - - // safari subtracts parent border width here which is 5px - offsetSupport.fixedPosition = ( inner.offsetTop === 20 || inner.offsetTop === 15 ); - inner.style.position = inner.style.top = ""; - - outer.style.overflow = "hidden"; - outer.style.position = "relative"; - - offsetSupport.subtractsBorderForOverflowNotVisible = ( inner.offsetTop === -5 ); - offsetSupport.doesNotIncludeMarginInBodyOffset = ( body.offsetTop !== conMarginTop ); - - body.removeChild( container ); - div = container = null; - - jQuery.extend( support, offsetSupport ); - }); - - return support; -})(); - - - - -var rbrace = /^(?:\{.*\}|\[.*\])$/, - rmultiDash = /([A-Z])/g; - -jQuery.extend({ - cache: {}, - - // Please use with caution - uuid: 0, - - // Unique for each copy of jQuery on the page - // Non-digits removed to match rinlinejQuery - expando: "jQuery" + ( jQuery.fn.jquery + Math.random() ).replace( /\D/g, "" ), - - // The following elements throw uncatchable exceptions if you - // attempt to add expando properties to them. - noData: { - "embed": true, - // Ban all objects except for Flash (which handle expandos) - "object": "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000", - "applet": true - }, - - hasData: function( elem ) { - elem = elem.nodeType ? jQuery.cache[ elem[jQuery.expando] ] : elem[ jQuery.expando ]; - return !!elem && !isEmptyDataObject( elem ); - }, - - data: function( elem, name, data, pvt /* Internal Use Only */ ) { - if ( !jQuery.acceptData( elem ) ) { - return; - } - - var privateCache, thisCache, ret, - internalKey = jQuery.expando, - getByName = typeof name === "string", - - // We have to handle DOM nodes and JS objects differently because IE6-7 - // can't GC object references properly across the DOM-JS boundary - isNode = elem.nodeType, - - // Only DOM nodes need the global jQuery cache; JS object data is - // attached directly to the object so GC can occur automatically - cache = isNode ? jQuery.cache : elem, - - // Only defining an ID for JS objects if its cache already exists allows - // the code to shortcut on the same path as a DOM node with no cache - id = isNode ? elem[ internalKey ] : elem[ internalKey ] && internalKey, - isEvents = name === "events"; - - // Avoid doing any more work than we need to when trying to get data on an - // object that has no data at all - if ( (!id || !cache[id] || (!isEvents && !pvt && !cache[id].data)) && getByName && data === undefined ) { - return; - } - - if ( !id ) { - // Only DOM nodes need a new unique ID for each element since their data - // ends up in the global cache - if ( isNode ) { - elem[ internalKey ] = id = ++jQuery.uuid; - } else { - id = internalKey; - } - } - - if ( !cache[ id ] ) { - cache[ id ] = {}; - - // Avoids exposing jQuery metadata on plain JS objects when the object - // is serialized using JSON.stringify - if ( !isNode ) { - cache[ id ].toJSON = jQuery.noop; - } - } - - // An object can be passed to jQuery.data instead of a key/value pair; this gets - // shallow copied over onto the existing cache - if ( typeof name === "object" || typeof name === "function" ) { - if ( pvt ) { - cache[ id ] = jQuery.extend( cache[ id ], name ); - } else { - cache[ id ].data = jQuery.extend( cache[ id ].data, name ); - } - } - - privateCache = thisCache = cache[ id ]; - - // jQuery data() is stored in a separate object inside the object's internal data - // cache in order to avoid key collisions between internal data and user-defined - // data. - if ( !pvt ) { - if ( !thisCache.data ) { - thisCache.data = {}; - } - - thisCache = thisCache.data; - } - - if ( data !== undefined ) { - thisCache[ jQuery.camelCase( name ) ] = data; - } - - // Users should not attempt to inspect the internal events object using jQuery.data, - // it is undocumented and subject to change. But does anyone listen? No. - if ( isEvents && !thisCache[ name ] ) { - return privateCache.events; - } - - // Check for both converted-to-camel and non-converted data property names - // If a data property was specified - if ( getByName ) { - - // First Try to find as-is property data - ret = thisCache[ name ]; - - // Test for null|undefined property data - if ( ret == null ) { - - // Try to find the camelCased property - ret = thisCache[ jQuery.camelCase( name ) ]; - } - } else { - ret = thisCache; - } - - return ret; - }, - - removeData: function( elem, name, pvt /* Internal Use Only */ ) { - if ( !jQuery.acceptData( elem ) ) { - return; - } - - var thisCache, i, l, - - // Reference to internal data cache key - internalKey = jQuery.expando, - - isNode = elem.nodeType, - - // See jQuery.data for more information - cache = isNode ? jQuery.cache : elem, - - // See jQuery.data for more information - id = isNode ? elem[ internalKey ] : internalKey; - - // If there is already no cache entry for this object, there is no - // purpose in continuing - if ( !cache[ id ] ) { - return; - } - - if ( name ) { - - thisCache = pvt ? cache[ id ] : cache[ id ].data; - - if ( thisCache ) { - - // Support array or space separated string names for data keys - if ( !jQuery.isArray( name ) ) { - - // try the string as a key before any manipulation - if ( name in thisCache ) { - name = [ name ]; - } else { - - // split the camel cased version by spaces unless a key with the spaces exists - name = jQuery.camelCase( name ); - if ( name in thisCache ) { - name = [ name ]; - } else { - name = name.split( " " ); - } - } - } - - for ( i = 0, l = name.length; i < l; i++ ) { - delete thisCache[ name[i] ]; - } - - // If there is no data left in the cache, we want to continue - // and let the cache object itself get destroyed - if ( !( pvt ? isEmptyDataObject : jQuery.isEmptyObject )( thisCache ) ) { - return; - } - } - } - - // See jQuery.data for more information - if ( !pvt ) { - delete cache[ id ].data; - - // Don't destroy the parent cache unless the internal data object - // had been the only thing left in it - if ( !isEmptyDataObject(cache[ id ]) ) { - return; - } - } - - // Browsers that fail expando deletion also refuse to delete expandos on - // the window, but it will allow it on all other JS objects; other browsers - // don't care - // Ensure that `cache` is not a window object #10080 - if ( jQuery.support.deleteExpando || !cache.setInterval ) { - delete cache[ id ]; - } else { - cache[ id ] = null; - } - - // We destroyed the cache and need to eliminate the expando on the node to avoid - // false lookups in the cache for entries that no longer exist - if ( isNode ) { - // IE does not allow us to delete expando properties from nodes, - // nor does it have a removeAttribute function on Document nodes; - // we must handle all of these cases - if ( jQuery.support.deleteExpando ) { - delete elem[ internalKey ]; - } else if ( elem.removeAttribute ) { - elem.removeAttribute( internalKey ); - } else { - elem[ internalKey ] = null; - } - } - }, - - // For internal use only. - _data: function( elem, name, data ) { - return jQuery.data( elem, name, data, true ); - }, - - // A method for determining if a DOM node can handle the data expando - acceptData: function( elem ) { - if ( elem.nodeName ) { - var match = jQuery.noData[ elem.nodeName.toLowerCase() ]; - - if ( match ) { - return !(match === true || elem.getAttribute("classid") !== match); - } - } - - return true; - } -}); - -jQuery.fn.extend({ - data: function( key, value ) { - var parts, attr, name, - data = null; - - if ( typeof key === "undefined" ) { - if ( this.length ) { - data = jQuery.data( this[0] ); - - if ( this[0].nodeType === 1 && !jQuery._data( this[0], "parsedAttrs" ) ) { - attr = this[0].attributes; - for ( var i = 0, l = attr.length; i < l; i++ ) { - name = attr[i].name; - - if ( name.indexOf( "data-" ) === 0 ) { - name = jQuery.camelCase( name.substring(5) ); - - dataAttr( this[0], name, data[ name ] ); - } - } - jQuery._data( this[0], "parsedAttrs", true ); - } - } - - return data; - - } else if ( typeof key === "object" ) { - return this.each(function() { - jQuery.data( this, key ); - }); - } - - parts = key.split("."); - parts[1] = parts[1] ? "." + parts[1] : ""; - - if ( value === undefined ) { - data = this.triggerHandler("getData" + parts[1] + "!", [parts[0]]); - - // Try to fetch any internally stored data first - if ( data === undefined && this.length ) { - data = jQuery.data( this[0], key ); - data = dataAttr( this[0], key, data ); - } - - return data === undefined && parts[1] ? - this.data( parts[0] ) : - data; - - } else { - return this.each(function() { - var self = jQuery( this ), - args = [ parts[0], value ]; - - self.triggerHandler( "setData" + parts[1] + "!", args ); - jQuery.data( this, key, value ); - self.triggerHandler( "changeData" + parts[1] + "!", args ); - }); - } - }, - - removeData: function( key ) { - return this.each(function() { - jQuery.removeData( this, key ); - }); - } -}); - -function dataAttr( elem, key, data ) { - // If nothing was found internally, try to fetch any - // data from the HTML5 data-* attribute - if ( data === undefined && elem.nodeType === 1 ) { - - var name = "data-" + key.replace( rmultiDash, "-$1" ).toLowerCase(); - - data = elem.getAttribute( name ); - - if ( typeof data === "string" ) { - try { - data = data === "true" ? true : - data === "false" ? false : - data === "null" ? null : - jQuery.isNumeric( data ) ? parseFloat( data ) : - rbrace.test( data ) ? jQuery.parseJSON( data ) : - data; - } catch( e ) {} - - // Make sure we set the data so it isn't changed later - jQuery.data( elem, key, data ); - - } else { - data = undefined; - } - } - - return data; -} - -// checks a cache object for emptiness -function isEmptyDataObject( obj ) { - for ( var name in obj ) { - - // if the public data object is empty, the private is still empty - if ( name === "data" && jQuery.isEmptyObject( obj[name] ) ) { - continue; - } - if ( name !== "toJSON" ) { - return false; - } - } - - return true; -} - - - - -function handleQueueMarkDefer( elem, type, src ) { - var deferDataKey = type + "defer", - queueDataKey = type + "queue", - markDataKey = type + "mark", - defer = jQuery._data( elem, deferDataKey ); - if ( defer && - ( src === "queue" || !jQuery._data(elem, queueDataKey) ) && - ( src === "mark" || !jQuery._data(elem, markDataKey) ) ) { - // Give room for hard-coded callbacks to fire first - // and eventually mark/queue something else on the element - setTimeout( function() { - if ( !jQuery._data( elem, queueDataKey ) && - !jQuery._data( elem, markDataKey ) ) { - jQuery.removeData( elem, deferDataKey, true ); - defer.fire(); - } - }, 0 ); - } -} - -jQuery.extend({ - - _mark: function( elem, type ) { - if ( elem ) { - type = ( type || "fx" ) + "mark"; - jQuery._data( elem, type, (jQuery._data( elem, type ) || 0) + 1 ); - } - }, - - _unmark: function( force, elem, type ) { - if ( force !== true ) { - type = elem; - elem = force; - force = false; - } - if ( elem ) { - type = type || "fx"; - var key = type + "mark", - count = force ? 0 : ( (jQuery._data( elem, key ) || 1) - 1 ); - if ( count ) { - jQuery._data( elem, key, count ); - } else { - jQuery.removeData( elem, key, true ); - handleQueueMarkDefer( elem, type, "mark" ); - } - } - }, - - queue: function( elem, type, data ) { - var q; - if ( elem ) { - type = ( type || "fx" ) + "queue"; - q = jQuery._data( elem, type ); - - // Speed up dequeue by getting out quickly if this is just a lookup - if ( data ) { - if ( !q || jQuery.isArray(data) ) { - q = jQuery._data( elem, type, jQuery.makeArray(data) ); - } else { - q.push( data ); - } - } - return q || []; - } - }, - - dequeue: function( elem, type ) { - type = type || "fx"; - - var queue = jQuery.queue( elem, type ), - fn = queue.shift(), - hooks = {}; - - // If the fx queue is dequeued, always remove the progress sentinel - if ( fn === "inprogress" ) { - fn = queue.shift(); - } - - if ( fn ) { - // Add a progress sentinel to prevent the fx queue from being - // automatically dequeued - if ( type === "fx" ) { - queue.unshift( "inprogress" ); - } - - jQuery._data( elem, type + ".run", hooks ); - fn.call( elem, function() { - jQuery.dequeue( elem, type ); - }, hooks ); - } - - if ( !queue.length ) { - jQuery.removeData( elem, type + "queue " + type + ".run", true ); - handleQueueMarkDefer( elem, type, "queue" ); - } - } -}); - -jQuery.fn.extend({ - queue: function( type, data ) { - if ( typeof type !== "string" ) { - data = type; - type = "fx"; - } - - if ( data === undefined ) { - return jQuery.queue( this[0], type ); - } - return this.each(function() { - var queue = jQuery.queue( this, type, data ); - - if ( type === "fx" && queue[0] !== "inprogress" ) { - jQuery.dequeue( this, type ); - } - }); - }, - dequeue: function( type ) { - return this.each(function() { - jQuery.dequeue( this, type ); - }); - }, - // Based off of the plugin by Clint Helfers, with permission. - // http://blindsignals.com/index.php/2009/07/jquery-delay/ - delay: function( time, type ) { - time = jQuery.fx ? jQuery.fx.speeds[ time ] || time : time; - type = type || "fx"; - - return this.queue( type, function( next, hooks ) { - var timeout = setTimeout( next, time ); - hooks.stop = function() { - clearTimeout( timeout ); - }; - }); - }, - clearQueue: function( type ) { - return this.queue( type || "fx", [] ); - }, - // Get a promise resolved when queues of a certain type - // are emptied (fx is the type by default) - promise: function( type, object ) { - if ( typeof type !== "string" ) { - object = type; - type = undefined; - } - type = type || "fx"; - var defer = jQuery.Deferred(), - elements = this, - i = elements.length, - count = 1, - deferDataKey = type + "defer", - queueDataKey = type + "queue", - markDataKey = type + "mark", - tmp; - function resolve() { - if ( !( --count ) ) { - defer.resolveWith( elements, [ elements ] ); - } - } - while( i-- ) { - if (( tmp = jQuery.data( elements[ i ], deferDataKey, undefined, true ) || - ( jQuery.data( elements[ i ], queueDataKey, undefined, true ) || - jQuery.data( elements[ i ], markDataKey, undefined, true ) ) && - jQuery.data( elements[ i ], deferDataKey, jQuery.Callbacks( "once memory" ), true ) )) { - count++; - tmp.add( resolve ); - } - } - resolve(); - return defer.promise(); - } -}); - - - - -var rclass = /[\n\t\r]/g, - rspace = /\s+/, - rreturn = /\r/g, - rtype = /^(?:button|input)$/i, - rfocusable = /^(?:button|input|object|select|textarea)$/i, - rclickable = /^a(?:rea)?$/i, - rboolean = /^(?:autofocus|autoplay|async|checked|controls|defer|disabled|hidden|loop|multiple|open|readonly|required|scoped|selected)$/i, - getSetAttribute = jQuery.support.getSetAttribute, - nodeHook, boolHook, fixSpecified; - -jQuery.fn.extend({ - attr: function( name, value ) { - return jQuery.access( this, name, value, true, jQuery.attr ); - }, - - removeAttr: function( name ) { - return this.each(function() { - jQuery.removeAttr( this, name ); - }); - }, - - prop: function( name, value ) { - return jQuery.access( this, name, value, true, jQuery.prop ); - }, - - removeProp: function( name ) { - name = jQuery.propFix[ name ] || name; - return this.each(function() { - // try/catch handles cases where IE balks (such as removing a property on window) - try { - this[ name ] = undefined; - delete this[ name ]; - } catch( e ) {} - }); - }, - - addClass: function( value ) { - var classNames, i, l, elem, - setClass, c, cl; - - if ( jQuery.isFunction( value ) ) { - return this.each(function( j ) { - jQuery( this ).addClass( value.call(this, j, this.className) ); - }); - } - - if ( value && typeof value === "string" ) { - classNames = value.split( rspace ); - - for ( i = 0, l = this.length; i < l; i++ ) { - elem = this[ i ]; - - if ( elem.nodeType === 1 ) { - if ( !elem.className && classNames.length === 1 ) { - elem.className = value; - - } else { - setClass = " " + elem.className + " "; - - for ( c = 0, cl = classNames.length; c < cl; c++ ) { - if ( !~setClass.indexOf( " " + classNames[ c ] + " " ) ) { - setClass += classNames[ c ] + " "; - } - } - elem.className = jQuery.trim( setClass ); - } - } - } - } - - return this; - }, - - removeClass: function( value ) { - var classNames, i, l, elem, className, c, cl; - - if ( jQuery.isFunction( value ) ) { - return this.each(function( j ) { - jQuery( this ).removeClass( value.call(this, j, this.className) ); - }); - } - - if ( (value && typeof value === "string") || value === undefined ) { - classNames = ( value || "" ).split( rspace ); - - for ( i = 0, l = this.length; i < l; i++ ) { - elem = this[ i ]; - - if ( elem.nodeType === 1 && elem.className ) { - if ( value ) { - className = (" " + elem.className + " ").replace( rclass, " " ); - for ( c = 0, cl = classNames.length; c < cl; c++ ) { - className = className.replace(" " + classNames[ c ] + " ", " "); - } - elem.className = jQuery.trim( className ); - - } else { - elem.className = ""; - } - } - } - } - - return this; - }, - - toggleClass: function( value, stateVal ) { - var type = typeof value, - isBool = typeof stateVal === "boolean"; - - if ( jQuery.isFunction( value ) ) { - return this.each(function( i ) { - jQuery( this ).toggleClass( value.call(this, i, this.className, stateVal), stateVal ); - }); - } - - return this.each(function() { - if ( type === "string" ) { - // toggle individual class names - var className, - i = 0, - self = jQuery( this ), - state = stateVal, - classNames = value.split( rspace ); - - while ( (className = classNames[ i++ ]) ) { - // check each className given, space seperated list - state = isBool ? state : !self.hasClass( className ); - self[ state ? "addClass" : "removeClass" ]( className ); - } - - } else if ( type === "undefined" || type === "boolean" ) { - if ( this.className ) { - // store className if set - jQuery._data( this, "__className__", this.className ); - } - - // toggle whole className - this.className = this.className || value === false ? "" : jQuery._data( this, "__className__" ) || ""; - } - }); - }, - - hasClass: function( selector ) { - var className = " " + selector + " ", - i = 0, - l = this.length; - for ( ; i < l; i++ ) { - if ( this[i].nodeType === 1 && (" " + this[i].className + " ").replace(rclass, " ").indexOf( className ) > -1 ) { - return true; - } - } - - return false; - }, - - val: function( value ) { - var hooks, ret, isFunction, - elem = this[0]; - - if ( !arguments.length ) { - if ( elem ) { - hooks = jQuery.valHooks[ elem.nodeName.toLowerCase() ] || jQuery.valHooks[ elem.type ]; - - if ( hooks && "get" in hooks && (ret = hooks.get( elem, "value" )) !== undefined ) { - return ret; - } - - ret = elem.value; - - return typeof ret === "string" ? - // handle most common string cases - ret.replace(rreturn, "") : - // handle cases where value is null/undef or number - ret == null ? "" : ret; - } - - return; - } - - isFunction = jQuery.isFunction( value ); - - return this.each(function( i ) { - var self = jQuery(this), val; - - if ( this.nodeType !== 1 ) { - return; - } - - if ( isFunction ) { - val = value.call( this, i, self.val() ); - } else { - val = value; - } - - // Treat null/undefined as ""; convert numbers to string - if ( val == null ) { - val = ""; - } else if ( typeof val === "number" ) { - val += ""; - } else if ( jQuery.isArray( val ) ) { - val = jQuery.map(val, function ( value ) { - return value == null ? "" : value + ""; - }); - } - - hooks = jQuery.valHooks[ this.nodeName.toLowerCase() ] || jQuery.valHooks[ this.type ]; - - // If set returns undefined, fall back to normal setting - if ( !hooks || !("set" in hooks) || hooks.set( this, val, "value" ) === undefined ) { - this.value = val; - } - }); - } -}); - -jQuery.extend({ - valHooks: { - option: { - get: function( elem ) { - // attributes.value is undefined in Blackberry 4.7 but - // uses .value. See #6932 - var val = elem.attributes.value; - return !val || val.specified ? elem.value : elem.text; - } - }, - select: { - get: function( elem ) { - var value, i, max, option, - index = elem.selectedIndex, - values = [], - options = elem.options, - one = elem.type === "select-one"; - - // Nothing was selected - if ( index < 0 ) { - return null; - } - - // Loop through all the selected options - i = one ? index : 0; - max = one ? index + 1 : options.length; - for ( ; i < max; i++ ) { - option = options[ i ]; - - // Don't return options that are disabled or in a disabled optgroup - if ( option.selected && (jQuery.support.optDisabled ? !option.disabled : option.getAttribute("disabled") === null) && - (!option.parentNode.disabled || !jQuery.nodeName( option.parentNode, "optgroup" )) ) { - - // Get the specific value for the option - value = jQuery( option ).val(); - - // We don't need an array for one selects - if ( one ) { - return value; - } - - // Multi-Selects return an array - values.push( value ); - } - } - - // Fixes Bug #2551 -- select.val() broken in IE after form.reset() - if ( one && !values.length && options.length ) { - return jQuery( options[ index ] ).val(); - } - - return values; - }, - - set: function( elem, value ) { - var values = jQuery.makeArray( value ); - - jQuery(elem).find("option").each(function() { - this.selected = jQuery.inArray( jQuery(this).val(), values ) >= 0; - }); - - if ( !values.length ) { - elem.selectedIndex = -1; - } - return values; - } - } - }, - - attrFn: { - val: true, - css: true, - html: true, - text: true, - data: true, - width: true, - height: true, - offset: true - }, - - attr: function( elem, name, value, pass ) { - var ret, hooks, notxml, - nType = elem.nodeType; - - // don't get/set attributes on text, comment and attribute nodes - if ( !elem || nType === 3 || nType === 8 || nType === 2 ) { - return; - } - - if ( pass && name in jQuery.attrFn ) { - return jQuery( elem )[ name ]( value ); - } - - // Fallback to prop when attributes are not supported - if ( typeof elem.getAttribute === "undefined" ) { - return jQuery.prop( elem, name, value ); - } - - notxml = nType !== 1 || !jQuery.isXMLDoc( elem ); - - // All attributes are lowercase - // Grab necessary hook if one is defined - if ( notxml ) { - name = name.toLowerCase(); - hooks = jQuery.attrHooks[ name ] || ( rboolean.test( name ) ? boolHook : nodeHook ); - } - - if ( value !== undefined ) { - - if ( value === null ) { - jQuery.removeAttr( elem, name ); - return; - - } else if ( hooks && "set" in hooks && notxml && (ret = hooks.set( elem, value, name )) !== undefined ) { - return ret; - - } else { - elem.setAttribute( name, "" + value ); - return value; - } - - } else if ( hooks && "get" in hooks && notxml && (ret = hooks.get( elem, name )) !== null ) { - return ret; - - } else { - - ret = elem.getAttribute( name ); - - // Non-existent attributes return null, we normalize to undefined - return ret === null ? - undefined : - ret; - } - }, - - removeAttr: function( elem, value ) { - var propName, attrNames, name, l, - i = 0; - - if ( value && elem.nodeType === 1 ) { - attrNames = value.toLowerCase().split( rspace ); - l = attrNames.length; - - for ( ; i < l; i++ ) { - name = attrNames[ i ]; - - if ( name ) { - propName = jQuery.propFix[ name ] || name; - - // See #9699 for explanation of this approach (setting first, then removal) - jQuery.attr( elem, name, "" ); - elem.removeAttribute( getSetAttribute ? name : propName ); - - // Set corresponding property to false for boolean attributes - if ( rboolean.test( name ) && propName in elem ) { - elem[ propName ] = false; - } - } - } - } - }, - - attrHooks: { - type: { - set: function( elem, value ) { - // We can't allow the type property to be changed (since it causes problems in IE) - if ( rtype.test( elem.nodeName ) && elem.parentNode ) { - jQuery.error( "type property can't be changed" ); - } else if ( !jQuery.support.radioValue && value === "radio" && jQuery.nodeName(elem, "input") ) { - // Setting the type on a radio button after the value resets the value in IE6-9 - // Reset value to it's default in case type is set after value - // This is for element creation - var val = elem.value; - elem.setAttribute( "type", value ); - if ( val ) { - elem.value = val; - } - return value; - } - } - }, - // Use the value property for back compat - // Use the nodeHook for button elements in IE6/7 (#1954) - value: { - get: function( elem, name ) { - if ( nodeHook && jQuery.nodeName( elem, "button" ) ) { - return nodeHook.get( elem, name ); - } - return name in elem ? - elem.value : - null; - }, - set: function( elem, value, name ) { - if ( nodeHook && jQuery.nodeName( elem, "button" ) ) { - return nodeHook.set( elem, value, name ); - } - // Does not return so that setAttribute is also used - elem.value = value; - } - } - }, - - propFix: { - tabindex: "tabIndex", - readonly: "readOnly", - "for": "htmlFor", - "class": "className", - maxlength: "maxLength", - cellspacing: "cellSpacing", - cellpadding: "cellPadding", - rowspan: "rowSpan", - colspan: "colSpan", - usemap: "useMap", - frameborder: "frameBorder", - contenteditable: "contentEditable" - }, - - prop: function( elem, name, value ) { - var ret, hooks, notxml, - nType = elem.nodeType; - - // don't get/set properties on text, comment and attribute nodes - if ( !elem || nType === 3 || nType === 8 || nType === 2 ) { - return; - } - - notxml = nType !== 1 || !jQuery.isXMLDoc( elem ); - - if ( notxml ) { - // Fix name and attach hooks - name = jQuery.propFix[ name ] || name; - hooks = jQuery.propHooks[ name ]; - } - - if ( value !== undefined ) { - if ( hooks && "set" in hooks && (ret = hooks.set( elem, value, name )) !== undefined ) { - return ret; - - } else { - return ( elem[ name ] = value ); - } - - } else { - if ( hooks && "get" in hooks && (ret = hooks.get( elem, name )) !== null ) { - return ret; - - } else { - return elem[ name ]; - } - } - }, - - propHooks: { - tabIndex: { - get: function( elem ) { - // elem.tabIndex doesn't always return the correct value when it hasn't been explicitly set - // http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/ - var attributeNode = elem.getAttributeNode("tabindex"); - - return attributeNode && attributeNode.specified ? - parseInt( attributeNode.value, 10 ) : - rfocusable.test( elem.nodeName ) || rclickable.test( elem.nodeName ) && elem.href ? - 0 : - undefined; - } - } - } -}); - -// Add the tabIndex propHook to attrHooks for back-compat (different case is intentional) -jQuery.attrHooks.tabindex = jQuery.propHooks.tabIndex; - -// Hook for boolean attributes -boolHook = { - get: function( elem, name ) { - // Align boolean attributes with corresponding properties - // Fall back to attribute presence where some booleans are not supported - var attrNode, - property = jQuery.prop( elem, name ); - return property === true || typeof property !== "boolean" && ( attrNode = elem.getAttributeNode(name) ) && attrNode.nodeValue !== false ? - name.toLowerCase() : - undefined; - }, - set: function( elem, value, name ) { - var propName; - if ( value === false ) { - // Remove boolean attributes when set to false - jQuery.removeAttr( elem, name ); - } else { - // value is true since we know at this point it's type boolean and not false - // Set boolean attributes to the same name and set the DOM property - propName = jQuery.propFix[ name ] || name; - if ( propName in elem ) { - // Only set the IDL specifically if it already exists on the element - elem[ propName ] = true; - } - - elem.setAttribute( name, name.toLowerCase() ); - } - return name; - } -}; - -// IE6/7 do not support getting/setting some attributes with get/setAttribute -if ( !getSetAttribute ) { - - fixSpecified = { - name: true, - id: true - }; - - // Use this for any attribute in IE6/7 - // This fixes almost every IE6/7 issue - nodeHook = jQuery.valHooks.button = { - get: function( elem, name ) { - var ret; - ret = elem.getAttributeNode( name ); - return ret && ( fixSpecified[ name ] ? ret.nodeValue !== "" : ret.specified ) ? - ret.nodeValue : - undefined; - }, - set: function( elem, value, name ) { - // Set the existing or create a new attribute node - var ret = elem.getAttributeNode( name ); - if ( !ret ) { - ret = document.createAttribute( name ); - elem.setAttributeNode( ret ); - } - return ( ret.nodeValue = value + "" ); - } - }; - - // Apply the nodeHook to tabindex - jQuery.attrHooks.tabindex.set = nodeHook.set; - - // Set width and height to auto instead of 0 on empty string( Bug #8150 ) - // This is for removals - jQuery.each([ "width", "height" ], function( i, name ) { - jQuery.attrHooks[ name ] = jQuery.extend( jQuery.attrHooks[ name ], { - set: function( elem, value ) { - if ( value === "" ) { - elem.setAttribute( name, "auto" ); - return value; - } - } - }); - }); - - // Set contenteditable to false on removals(#10429) - // Setting to empty string throws an error as an invalid value - jQuery.attrHooks.contenteditable = { - get: nodeHook.get, - set: function( elem, value, name ) { - if ( value === "" ) { - value = "false"; - } - nodeHook.set( elem, value, name ); - } - }; -} - - -// Some attributes require a special call on IE -if ( !jQuery.support.hrefNormalized ) { - jQuery.each([ "href", "src", "width", "height" ], function( i, name ) { - jQuery.attrHooks[ name ] = jQuery.extend( jQuery.attrHooks[ name ], { - get: function( elem ) { - var ret = elem.getAttribute( name, 2 ); - return ret === null ? undefined : ret; - } - }); - }); -} - -if ( !jQuery.support.style ) { - jQuery.attrHooks.style = { - get: function( elem ) { - // Return undefined in the case of empty string - // Normalize to lowercase since IE uppercases css property names - return elem.style.cssText.toLowerCase() || undefined; - }, - set: function( elem, value ) { - return ( elem.style.cssText = "" + value ); - } - }; -} - -// Safari mis-reports the default selected property of an option -// Accessing the parent's selectedIndex property fixes it -if ( !jQuery.support.optSelected ) { - jQuery.propHooks.selected = jQuery.extend( jQuery.propHooks.selected, { - get: function( elem ) { - var parent = elem.parentNode; - - if ( parent ) { - parent.selectedIndex; - - // Make sure that it also works with optgroups, see #5701 - if ( parent.parentNode ) { - parent.parentNode.selectedIndex; - } - } - return null; - } - }); -} - -// IE6/7 call enctype encoding -if ( !jQuery.support.enctype ) { - jQuery.propFix.enctype = "encoding"; -} - -// Radios and checkboxes getter/setter -if ( !jQuery.support.checkOn ) { - jQuery.each([ "radio", "checkbox" ], function() { - jQuery.valHooks[ this ] = { - get: function( elem ) { - // Handle the case where in Webkit "" is returned instead of "on" if a value isn't specified - return elem.getAttribute("value") === null ? "on" : elem.value; - } - }; - }); -} -jQuery.each([ "radio", "checkbox" ], function() { - jQuery.valHooks[ this ] = jQuery.extend( jQuery.valHooks[ this ], { - set: function( elem, value ) { - if ( jQuery.isArray( value ) ) { - return ( elem.checked = jQuery.inArray( jQuery(elem).val(), value ) >= 0 ); - } - } - }); -}); - - - - -var rformElems = /^(?:textarea|input|select)$/i, - rtypenamespace = /^([^\.]*)?(?:\.(.+))?$/, - rhoverHack = /\bhover(\.\S+)?\b/, - rkeyEvent = /^key/, - rmouseEvent = /^(?:mouse|contextmenu)|click/, - rfocusMorph = /^(?:focusinfocus|focusoutblur)$/, - rquickIs = /^(\w*)(?:#([\w\-]+))?(?:\.([\w\-]+))?$/, - quickParse = function( selector ) { - var quick = rquickIs.exec( selector ); - if ( quick ) { - // 0 1 2 3 - // [ _, tag, id, class ] - quick[1] = ( quick[1] || "" ).toLowerCase(); - quick[3] = quick[3] && new RegExp( "(?:^|\\s)" + quick[3] + "(?:\\s|$)" ); - } - return quick; - }, - quickIs = function( elem, m ) { - var attrs = elem.attributes || {}; - return ( - (!m[1] || elem.nodeName.toLowerCase() === m[1]) && - (!m[2] || (attrs.id || {}).value === m[2]) && - (!m[3] || m[3].test( (attrs[ "class" ] || {}).value )) - ); - }, - hoverHack = function( events ) { - return jQuery.event.special.hover ? events : events.replace( rhoverHack, "mouseenter$1 mouseleave$1" ); - }; - -/* - * Helper functions for managing events -- not part of the public interface. - * Props to Dean Edwards' addEvent library for many of the ideas. - */ -jQuery.event = { - - add: function( elem, types, handler, data, selector ) { - - var elemData, eventHandle, events, - t, tns, type, namespaces, handleObj, - handleObjIn, quick, handlers, special; - - // Don't attach events to noData or text/comment nodes (allow plain objects tho) - if ( elem.nodeType === 3 || elem.nodeType === 8 || !types || !handler || !(elemData = jQuery._data( elem )) ) { - return; - } - - // Caller can pass in an object of custom data in lieu of the handler - if ( handler.handler ) { - handleObjIn = handler; - handler = handleObjIn.handler; - } - - // Make sure that the handler has a unique ID, used to find/remove it later - if ( !handler.guid ) { - handler.guid = jQuery.guid++; - } - - // Init the element's event structure and main handler, if this is the first - events = elemData.events; - if ( !events ) { - elemData.events = events = {}; - } - eventHandle = elemData.handle; - if ( !eventHandle ) { - elemData.handle = eventHandle = function( e ) { - // Discard the second event of a jQuery.event.trigger() and - // when an event is called after a page has unloaded - return typeof jQuery !== "undefined" && (!e || jQuery.event.triggered !== e.type) ? - jQuery.event.dispatch.apply( eventHandle.elem, arguments ) : - undefined; - }; - // Add elem as a property of the handle fn to prevent a memory leak with IE non-native events - eventHandle.elem = elem; - } - - // Handle multiple events separated by a space - // jQuery(...).bind("mouseover mouseout", fn); - types = jQuery.trim( hoverHack(types) ).split( " " ); - for ( t = 0; t < types.length; t++ ) { - - tns = rtypenamespace.exec( types[t] ) || []; - type = tns[1]; - namespaces = ( tns[2] || "" ).split( "." ).sort(); - - // If event changes its type, use the special event handlers for the changed type - special = jQuery.event.special[ type ] || {}; - - // If selector defined, determine special event api type, otherwise given type - type = ( selector ? special.delegateType : special.bindType ) || type; - - // Update special based on newly reset type - special = jQuery.event.special[ type ] || {}; - - // handleObj is passed to all event handlers - handleObj = jQuery.extend({ - type: type, - origType: tns[1], - data: data, - handler: handler, - guid: handler.guid, - selector: selector, - quick: quickParse( selector ), - namespace: namespaces.join(".") - }, handleObjIn ); - - // Init the event handler queue if we're the first - handlers = events[ type ]; - if ( !handlers ) { - handlers = events[ type ] = []; - handlers.delegateCount = 0; - - // Only use addEventListener/attachEvent if the special events handler returns false - if ( !special.setup || special.setup.call( elem, data, namespaces, eventHandle ) === false ) { - // Bind the global event handler to the element - if ( elem.addEventListener ) { - elem.addEventListener( type, eventHandle, false ); - - } else if ( elem.attachEvent ) { - elem.attachEvent( "on" + type, eventHandle ); - } - } - } - - if ( special.add ) { - special.add.call( elem, handleObj ); - - if ( !handleObj.handler.guid ) { - handleObj.handler.guid = handler.guid; - } - } - - // Add to the element's handler list, delegates in front - if ( selector ) { - handlers.splice( handlers.delegateCount++, 0, handleObj ); - } else { - handlers.push( handleObj ); - } - - // Keep track of which events have ever been used, for event optimization - jQuery.event.global[ type ] = true; - } - - // Nullify elem to prevent memory leaks in IE - elem = null; - }, - - global: {}, - - // Detach an event or set of events from an element - remove: function( elem, types, handler, selector, mappedTypes ) { - - var elemData = jQuery.hasData( elem ) && jQuery._data( elem ), - t, tns, type, origType, namespaces, origCount, - j, events, special, handle, eventType, handleObj; - - if ( !elemData || !(events = elemData.events) ) { - return; - } - - // Once for each type.namespace in types; type may be omitted - types = jQuery.trim( hoverHack( types || "" ) ).split(" "); - for ( t = 0; t < types.length; t++ ) { - tns = rtypenamespace.exec( types[t] ) || []; - type = origType = tns[1]; - namespaces = tns[2]; - - // Unbind all events (on this namespace, if provided) for the element - if ( !type ) { - for ( type in events ) { - jQuery.event.remove( elem, type + types[ t ], handler, selector, true ); - } - continue; - } - - special = jQuery.event.special[ type ] || {}; - type = ( selector? special.delegateType : special.bindType ) || type; - eventType = events[ type ] || []; - origCount = eventType.length; - namespaces = namespaces ? new RegExp("(^|\\.)" + namespaces.split(".").sort().join("\\.(?:.*\\.)?") + "(\\.|$)") : null; - - // Remove matching events - for ( j = 0; j < eventType.length; j++ ) { - handleObj = eventType[ j ]; - - if ( ( mappedTypes || origType === handleObj.origType ) && - ( !handler || handler.guid === handleObj.guid ) && - ( !namespaces || namespaces.test( handleObj.namespace ) ) && - ( !selector || selector === handleObj.selector || selector === "**" && handleObj.selector ) ) { - eventType.splice( j--, 1 ); - - if ( handleObj.selector ) { - eventType.delegateCount--; - } - if ( special.remove ) { - special.remove.call( elem, handleObj ); - } - } - } - - // Remove generic event handler if we removed something and no more handlers exist - // (avoids potential for endless recursion during removal of special event handlers) - if ( eventType.length === 0 && origCount !== eventType.length ) { - if ( !special.teardown || special.teardown.call( elem, namespaces ) === false ) { - jQuery.removeEvent( elem, type, elemData.handle ); - } - - delete events[ type ]; - } - } - - // Remove the expando if it's no longer used - if ( jQuery.isEmptyObject( events ) ) { - handle = elemData.handle; - if ( handle ) { - handle.elem = null; - } - - // removeData also checks for emptiness and clears the expando if empty - // so use it instead of delete - jQuery.removeData( elem, [ "events", "handle" ], true ); - } - }, - - // Events that are safe to short-circuit if no handlers are attached. - // Native DOM events should not be added, they may have inline handlers. - customEvent: { - "getData": true, - "setData": true, - "changeData": true - }, - - trigger: function( event, data, elem, onlyHandlers ) { - // Don't do events on text and comment nodes - if ( elem && (elem.nodeType === 3 || elem.nodeType === 8) ) { - return; - } - - // Event object or event type - var type = event.type || event, - namespaces = [], - cache, exclusive, i, cur, old, ontype, special, handle, eventPath, bubbleType; - - // focus/blur morphs to focusin/out; ensure we're not firing them right now - if ( rfocusMorph.test( type + jQuery.event.triggered ) ) { - return; - } - - if ( type.indexOf( "!" ) >= 0 ) { - // Exclusive events trigger only for the exact event (no namespaces) - type = type.slice(0, -1); - exclusive = true; - } - - if ( type.indexOf( "." ) >= 0 ) { - // Namespaced trigger; create a regexp to match event type in handle() - namespaces = type.split("."); - type = namespaces.shift(); - namespaces.sort(); - } - - if ( (!elem || jQuery.event.customEvent[ type ]) && !jQuery.event.global[ type ] ) { - // No jQuery handlers for this event type, and it can't have inline handlers - return; - } - - // Caller can pass in an Event, Object, or just an event type string - event = typeof event === "object" ? - // jQuery.Event object - event[ jQuery.expando ] ? event : - // Object literal - new jQuery.Event( type, event ) : - // Just the event type (string) - new jQuery.Event( type ); - - event.type = type; - event.isTrigger = true; - event.exclusive = exclusive; - event.namespace = namespaces.join( "." ); - event.namespace_re = event.namespace? new RegExp("(^|\\.)" + namespaces.join("\\.(?:.*\\.)?") + "(\\.|$)") : null; - ontype = type.indexOf( ":" ) < 0 ? "on" + type : ""; - - // Handle a global trigger - if ( !elem ) { - - // TODO: Stop taunting the data cache; remove global events and always attach to document - cache = jQuery.cache; - for ( i in cache ) { - if ( cache[ i ].events && cache[ i ].events[ type ] ) { - jQuery.event.trigger( event, data, cache[ i ].handle.elem, true ); - } - } - return; - } - - // Clean up the event in case it is being reused - event.result = undefined; - if ( !event.target ) { - event.target = elem; - } - - // Clone any incoming data and prepend the event, creating the handler arg list - data = data != null ? jQuery.makeArray( data ) : []; - data.unshift( event ); - - // Allow special events to draw outside the lines - special = jQuery.event.special[ type ] || {}; - if ( special.trigger && special.trigger.apply( elem, data ) === false ) { - return; - } - - // Determine event propagation path in advance, per W3C events spec (#9951) - // Bubble up to document, then to window; watch for a global ownerDocument var (#9724) - eventPath = [[ elem, special.bindType || type ]]; - if ( !onlyHandlers && !special.noBubble && !jQuery.isWindow( elem ) ) { - - bubbleType = special.delegateType || type; - cur = rfocusMorph.test( bubbleType + type ) ? elem : elem.parentNode; - old = null; - for ( ; cur; cur = cur.parentNode ) { - eventPath.push([ cur, bubbleType ]); - old = cur; - } - - // Only add window if we got to document (e.g., not plain obj or detached DOM) - if ( old && old === elem.ownerDocument ) { - eventPath.push([ old.defaultView || old.parentWindow || window, bubbleType ]); - } - } - - // Fire handlers on the event path - for ( i = 0; i < eventPath.length && !event.isPropagationStopped(); i++ ) { - - cur = eventPath[i][0]; - event.type = eventPath[i][1]; - - handle = ( jQuery._data( cur, "events" ) || {} )[ event.type ] && jQuery._data( cur, "handle" ); - if ( handle ) { - handle.apply( cur, data ); - } - // Note that this is a bare JS function and not a jQuery handler - handle = ontype && cur[ ontype ]; - if ( handle && jQuery.acceptData( cur ) && handle.apply( cur, data ) === false ) { - event.preventDefault(); - } - } - event.type = type; - - // If nobody prevented the default action, do it now - if ( !onlyHandlers && !event.isDefaultPrevented() ) { - - if ( (!special._default || special._default.apply( elem.ownerDocument, data ) === false) && - !(type === "click" && jQuery.nodeName( elem, "a" )) && jQuery.acceptData( elem ) ) { - - // Call a native DOM method on the target with the same name name as the event. - // Can't use an .isFunction() check here because IE6/7 fails that test. - // Don't do default actions on window, that's where global variables be (#6170) - // IE<9 dies on focus/blur to hidden element (#1486) - if ( ontype && elem[ type ] && ((type !== "focus" && type !== "blur") || event.target.offsetWidth !== 0) && !jQuery.isWindow( elem ) ) { - - // Don't re-trigger an onFOO event when we call its FOO() method - old = elem[ ontype ]; - - if ( old ) { - elem[ ontype ] = null; - } - - // Prevent re-triggering of the same event, since we already bubbled it above - jQuery.event.triggered = type; - elem[ type ](); - jQuery.event.triggered = undefined; - - if ( old ) { - elem[ ontype ] = old; - } - } - } - } - - return event.result; - }, - - dispatch: function( event ) { - - // Make a writable jQuery.Event from the native event object - event = jQuery.event.fix( event || window.event ); - - var handlers = ( (jQuery._data( this, "events" ) || {} )[ event.type ] || []), - delegateCount = handlers.delegateCount, - args = [].slice.call( arguments, 0 ), - run_all = !event.exclusive && !event.namespace, - handlerQueue = [], - i, j, cur, jqcur, ret, selMatch, matched, matches, handleObj, sel, related; - - // Use the fix-ed jQuery.Event rather than the (read-only) native event - args[0] = event; - event.delegateTarget = this; - - // Determine handlers that should run if there are delegated events - // Avoid disabled elements in IE (#6911) and non-left-click bubbling in Firefox (#3861) - if ( delegateCount && !event.target.disabled && !(event.button && event.type === "click") ) { - - // Pregenerate a single jQuery object for reuse with .is() - jqcur = jQuery(this); - jqcur.context = this.ownerDocument || this; - - for ( cur = event.target; cur != this; cur = cur.parentNode || this ) { - selMatch = {}; - matches = []; - jqcur[0] = cur; - for ( i = 0; i < delegateCount; i++ ) { - handleObj = handlers[ i ]; - sel = handleObj.selector; - - if ( selMatch[ sel ] === undefined ) { - selMatch[ sel ] = ( - handleObj.quick ? quickIs( cur, handleObj.quick ) : jqcur.is( sel ) - ); - } - if ( selMatch[ sel ] ) { - matches.push( handleObj ); - } - } - if ( matches.length ) { - handlerQueue.push({ elem: cur, matches: matches }); - } - } - } - - // Add the remaining (directly-bound) handlers - if ( handlers.length > delegateCount ) { - handlerQueue.push({ elem: this, matches: handlers.slice( delegateCount ) }); - } - - // Run delegates first; they may want to stop propagation beneath us - for ( i = 0; i < handlerQueue.length && !event.isPropagationStopped(); i++ ) { - matched = handlerQueue[ i ]; - event.currentTarget = matched.elem; - - for ( j = 0; j < matched.matches.length && !event.isImmediatePropagationStopped(); j++ ) { - handleObj = matched.matches[ j ]; - - // Triggered event must either 1) be non-exclusive and have no namespace, or - // 2) have namespace(s) a subset or equal to those in the bound event (both can have no namespace). - if ( run_all || (!event.namespace && !handleObj.namespace) || event.namespace_re && event.namespace_re.test( handleObj.namespace ) ) { - - event.data = handleObj.data; - event.handleObj = handleObj; - - ret = ( (jQuery.event.special[ handleObj.origType ] || {}).handle || handleObj.handler ) - .apply( matched.elem, args ); - - if ( ret !== undefined ) { - event.result = ret; - if ( ret === false ) { - event.preventDefault(); - event.stopPropagation(); - } - } - } - } - } - - return event.result; - }, - - // Includes some event props shared by KeyEvent and MouseEvent - // *** attrChange attrName relatedNode srcElement are not normalized, non-W3C, deprecated, will be removed in 1.8 *** - props: "attrChange attrName relatedNode srcElement altKey bubbles cancelable ctrlKey currentTarget eventPhase metaKey relatedTarget shiftKey target timeStamp view which".split(" "), - - fixHooks: {}, - - keyHooks: { - props: "char charCode key keyCode".split(" "), - filter: function( event, original ) { - - // Add which for key events - if ( event.which == null ) { - event.which = original.charCode != null ? original.charCode : original.keyCode; - } - - return event; - } - }, - - mouseHooks: { - props: "button buttons clientX clientY fromElement offsetX offsetY pageX pageY screenX screenY toElement".split(" "), - filter: function( event, original ) { - var eventDoc, doc, body, - button = original.button, - fromElement = original.fromElement; - - // Calculate pageX/Y if missing and clientX/Y available - if ( event.pageX == null && original.clientX != null ) { - eventDoc = event.target.ownerDocument || document; - doc = eventDoc.documentElement; - body = eventDoc.body; - - event.pageX = original.clientX + ( doc && doc.scrollLeft || body && body.scrollLeft || 0 ) - ( doc && doc.clientLeft || body && body.clientLeft || 0 ); - event.pageY = original.clientY + ( doc && doc.scrollTop || body && body.scrollTop || 0 ) - ( doc && doc.clientTop || body && body.clientTop || 0 ); - } - - // Add relatedTarget, if necessary - if ( !event.relatedTarget && fromElement ) { - event.relatedTarget = fromElement === event.target ? original.toElement : fromElement; - } - - // Add which for click: 1 === left; 2 === middle; 3 === right - // Note: button is not normalized, so don't use it - if ( !event.which && button !== undefined ) { - event.which = ( button & 1 ? 1 : ( button & 2 ? 3 : ( button & 4 ? 2 : 0 ) ) ); - } - - return event; - } - }, - - fix: function( event ) { - if ( event[ jQuery.expando ] ) { - return event; - } - - // Create a writable copy of the event object and normalize some properties - var i, prop, - originalEvent = event, - fixHook = jQuery.event.fixHooks[ event.type ] || {}, - copy = fixHook.props ? this.props.concat( fixHook.props ) : this.props; - - event = jQuery.Event( originalEvent ); - - for ( i = copy.length; i; ) { - prop = copy[ --i ]; - event[ prop ] = originalEvent[ prop ]; - } - - // Fix target property, if necessary (#1925, IE 6/7/8 & Safari2) - if ( !event.target ) { - event.target = originalEvent.srcElement || document; - } - - // Target should not be a text node (#504, Safari) - if ( event.target.nodeType === 3 ) { - event.target = event.target.parentNode; - } - - // For mouse/key events; add metaKey if it's not there (#3368, IE6/7/8) - if ( event.metaKey === undefined ) { - event.metaKey = event.ctrlKey; - } - - return fixHook.filter? fixHook.filter( event, originalEvent ) : event; - }, - - special: { - ready: { - // Make sure the ready event is setup - setup: jQuery.bindReady - }, - - load: { - // Prevent triggered image.load events from bubbling to window.load - noBubble: true - }, - - focus: { - delegateType: "focusin" - }, - blur: { - delegateType: "focusout" - }, - - beforeunload: { - setup: function( data, namespaces, eventHandle ) { - // We only want to do this special case on windows - if ( jQuery.isWindow( this ) ) { - this.onbeforeunload = eventHandle; - } - }, - - teardown: function( namespaces, eventHandle ) { - if ( this.onbeforeunload === eventHandle ) { - this.onbeforeunload = null; - } - } - } - }, - - simulate: function( type, elem, event, bubble ) { - // Piggyback on a donor event to simulate a different one. - // Fake originalEvent to avoid donor's stopPropagation, but if the - // simulated event prevents default then we do the same on the donor. - var e = jQuery.extend( - new jQuery.Event(), - event, - { type: type, - isSimulated: true, - originalEvent: {} - } - ); - if ( bubble ) { - jQuery.event.trigger( e, null, elem ); - } else { - jQuery.event.dispatch.call( elem, e ); - } - if ( e.isDefaultPrevented() ) { - event.preventDefault(); - } - } -}; - -// Some plugins are using, but it's undocumented/deprecated and will be removed. -// The 1.7 special event interface should provide all the hooks needed now. -jQuery.event.handle = jQuery.event.dispatch; - -jQuery.removeEvent = document.removeEventListener ? - function( elem, type, handle ) { - if ( elem.removeEventListener ) { - elem.removeEventListener( type, handle, false ); - } - } : - function( elem, type, handle ) { - if ( elem.detachEvent ) { - elem.detachEvent( "on" + type, handle ); - } - }; - -jQuery.Event = function( src, props ) { - // Allow instantiation without the 'new' keyword - if ( !(this instanceof jQuery.Event) ) { - return new jQuery.Event( src, props ); - } - - // Event object - if ( src && src.type ) { - this.originalEvent = src; - this.type = src.type; - - // Events bubbling up the document may have been marked as prevented - // by a handler lower down the tree; reflect the correct value. - this.isDefaultPrevented = ( src.defaultPrevented || src.returnValue === false || - src.getPreventDefault && src.getPreventDefault() ) ? returnTrue : returnFalse; - - // Event type - } else { - this.type = src; - } - - // Put explicitly provided properties onto the event object - if ( props ) { - jQuery.extend( this, props ); - } - - // Create a timestamp if incoming event doesn't have one - this.timeStamp = src && src.timeStamp || jQuery.now(); - - // Mark it as fixed - this[ jQuery.expando ] = true; -}; - -function returnFalse() { - return false; -} -function returnTrue() { - return true; -} - -// jQuery.Event is based on DOM3 Events as specified by the ECMAScript Language Binding -// http://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html -jQuery.Event.prototype = { - preventDefault: function() { - this.isDefaultPrevented = returnTrue; - - var e = this.originalEvent; - if ( !e ) { - return; - } - - // if preventDefault exists run it on the original event - if ( e.preventDefault ) { - e.preventDefault(); - - // otherwise set the returnValue property of the original event to false (IE) - } else { - e.returnValue = false; - } - }, - stopPropagation: function() { - this.isPropagationStopped = returnTrue; - - var e = this.originalEvent; - if ( !e ) { - return; - } - // if stopPropagation exists run it on the original event - if ( e.stopPropagation ) { - e.stopPropagation(); - } - // otherwise set the cancelBubble property of the original event to true (IE) - e.cancelBubble = true; - }, - stopImmediatePropagation: function() { - this.isImmediatePropagationStopped = returnTrue; - this.stopPropagation(); - }, - isDefaultPrevented: returnFalse, - isPropagationStopped: returnFalse, - isImmediatePropagationStopped: returnFalse -}; - -// Create mouseenter/leave events using mouseover/out and event-time checks -jQuery.each({ - mouseenter: "mouseover", - mouseleave: "mouseout" -}, function( orig, fix ) { - jQuery.event.special[ orig ] = { - delegateType: fix, - bindType: fix, - - handle: function( event ) { - var target = this, - related = event.relatedTarget, - handleObj = event.handleObj, - selector = handleObj.selector, - ret; - - // For mousenter/leave call the handler if related is outside the target. - // NB: No relatedTarget if the mouse left/entered the browser window - if ( !related || (related !== target && !jQuery.contains( target, related )) ) { - event.type = handleObj.origType; - ret = handleObj.handler.apply( this, arguments ); - event.type = fix; - } - return ret; - } - }; -}); - -// IE submit delegation -if ( !jQuery.support.submitBubbles ) { - - jQuery.event.special.submit = { - setup: function() { - // Only need this for delegated form submit events - if ( jQuery.nodeName( this, "form" ) ) { - return false; - } - - // Lazy-add a submit handler when a descendant form may potentially be submitted - jQuery.event.add( this, "click._submit keypress._submit", function( e ) { - // Node name check avoids a VML-related crash in IE (#9807) - var elem = e.target, - form = jQuery.nodeName( elem, "input" ) || jQuery.nodeName( elem, "button" ) ? elem.form : undefined; - if ( form && !form._submit_attached ) { - jQuery.event.add( form, "submit._submit", function( event ) { - // If form was submitted by the user, bubble the event up the tree - if ( this.parentNode && !event.isTrigger ) { - jQuery.event.simulate( "submit", this.parentNode, event, true ); - } - }); - form._submit_attached = true; - } - }); - // return undefined since we don't need an event listener - }, - - teardown: function() { - // Only need this for delegated form submit events - if ( jQuery.nodeName( this, "form" ) ) { - return false; - } - - // Remove delegated handlers; cleanData eventually reaps submit handlers attached above - jQuery.event.remove( this, "._submit" ); - } - }; -} - -// IE change delegation and checkbox/radio fix -if ( !jQuery.support.changeBubbles ) { - - jQuery.event.special.change = { - - setup: function() { - - if ( rformElems.test( this.nodeName ) ) { - // IE doesn't fire change on a check/radio until blur; trigger it on click - // after a propertychange. Eat the blur-change in special.change.handle. - // This still fires onchange a second time for check/radio after blur. - if ( this.type === "checkbox" || this.type === "radio" ) { - jQuery.event.add( this, "propertychange._change", function( event ) { - if ( event.originalEvent.propertyName === "checked" ) { - this._just_changed = true; - } - }); - jQuery.event.add( this, "click._change", function( event ) { - if ( this._just_changed && !event.isTrigger ) { - this._just_changed = false; - jQuery.event.simulate( "change", this, event, true ); - } - }); - } - return false; - } - // Delegated event; lazy-add a change handler on descendant inputs - jQuery.event.add( this, "beforeactivate._change", function( e ) { - var elem = e.target; - - if ( rformElems.test( elem.nodeName ) && !elem._change_attached ) { - jQuery.event.add( elem, "change._change", function( event ) { - if ( this.parentNode && !event.isSimulated && !event.isTrigger ) { - jQuery.event.simulate( "change", this.parentNode, event, true ); - } - }); - elem._change_attached = true; - } - }); - }, - - handle: function( event ) { - var elem = event.target; - - // Swallow native change events from checkbox/radio, we already triggered them above - if ( this !== elem || event.isSimulated || event.isTrigger || (elem.type !== "radio" && elem.type !== "checkbox") ) { - return event.handleObj.handler.apply( this, arguments ); - } - }, - - teardown: function() { - jQuery.event.remove( this, "._change" ); - - return rformElems.test( this.nodeName ); - } - }; -} - -// Create "bubbling" focus and blur events -if ( !jQuery.support.focusinBubbles ) { - jQuery.each({ focus: "focusin", blur: "focusout" }, function( orig, fix ) { - - // Attach a single capturing handler while someone wants focusin/focusout - var attaches = 0, - handler = function( event ) { - jQuery.event.simulate( fix, event.target, jQuery.event.fix( event ), true ); - }; - - jQuery.event.special[ fix ] = { - setup: function() { - if ( attaches++ === 0 ) { - document.addEventListener( orig, handler, true ); - } - }, - teardown: function() { - if ( --attaches === 0 ) { - document.removeEventListener( orig, handler, true ); - } - } - }; - }); -} - -jQuery.fn.extend({ - - on: function( types, selector, data, fn, /*INTERNAL*/ one ) { - var origFn, type; - - // Types can be a map of types/handlers - if ( typeof types === "object" ) { - // ( types-Object, selector, data ) - if ( typeof selector !== "string" ) { - // ( types-Object, data ) - data = selector; - selector = undefined; - } - for ( type in types ) { - this.on( type, selector, data, types[ type ], one ); - } - return this; - } - - if ( data == null && fn == null ) { - // ( types, fn ) - fn = selector; - data = selector = undefined; - } else if ( fn == null ) { - if ( typeof selector === "string" ) { - // ( types, selector, fn ) - fn = data; - data = undefined; - } else { - // ( types, data, fn ) - fn = data; - data = selector; - selector = undefined; - } - } - if ( fn === false ) { - fn = returnFalse; - } else if ( !fn ) { - return this; - } - - if ( one === 1 ) { - origFn = fn; - fn = function( event ) { - // Can use an empty set, since event contains the info - jQuery().off( event ); - return origFn.apply( this, arguments ); - }; - // Use same guid so caller can remove using origFn - fn.guid = origFn.guid || ( origFn.guid = jQuery.guid++ ); - } - return this.each( function() { - jQuery.event.add( this, types, fn, data, selector ); - }); - }, - one: function( types, selector, data, fn ) { - return this.on.call( this, types, selector, data, fn, 1 ); - }, - off: function( types, selector, fn ) { - if ( types && types.preventDefault && types.handleObj ) { - // ( event ) dispatched jQuery.Event - var handleObj = types.handleObj; - jQuery( types.delegateTarget ).off( - handleObj.namespace? handleObj.type + "." + handleObj.namespace : handleObj.type, - handleObj.selector, - handleObj.handler - ); - return this; - } - if ( typeof types === "object" ) { - // ( types-object [, selector] ) - for ( var type in types ) { - this.off( type, selector, types[ type ] ); - } - return this; - } - if ( selector === false || typeof selector === "function" ) { - // ( types [, fn] ) - fn = selector; - selector = undefined; - } - if ( fn === false ) { - fn = returnFalse; - } - return this.each(function() { - jQuery.event.remove( this, types, fn, selector ); - }); - }, - - bind: function( types, data, fn ) { - return this.on( types, null, data, fn ); - }, - unbind: function( types, fn ) { - return this.off( types, null, fn ); - }, - - live: function( types, data, fn ) { - jQuery( this.context ).on( types, this.selector, data, fn ); - return this; - }, - die: function( types, fn ) { - jQuery( this.context ).off( types, this.selector || "**", fn ); - return this; - }, - - delegate: function( selector, types, data, fn ) { - return this.on( types, selector, data, fn ); - }, - undelegate: function( selector, types, fn ) { - // ( namespace ) or ( selector, types [, fn] ) - return arguments.length == 1? this.off( selector, "**" ) : this.off( types, selector, fn ); - }, - - trigger: function( type, data ) { - return this.each(function() { - jQuery.event.trigger( type, data, this ); - }); - }, - triggerHandler: function( type, data ) { - if ( this[0] ) { - return jQuery.event.trigger( type, data, this[0], true ); - } - }, - - toggle: function( fn ) { - // Save reference to arguments for access in closure - var args = arguments, - guid = fn.guid || jQuery.guid++, - i = 0, - toggler = function( event ) { - // Figure out which function to execute - var lastToggle = ( jQuery._data( this, "lastToggle" + fn.guid ) || 0 ) % i; - jQuery._data( this, "lastToggle" + fn.guid, lastToggle + 1 ); - - // Make sure that clicks stop - event.preventDefault(); - - // and execute the function - return args[ lastToggle ].apply( this, arguments ) || false; - }; - - // link all the functions, so any of them can unbind this click handler - toggler.guid = guid; - while ( i < args.length ) { - args[ i++ ].guid = guid; - } - - return this.click( toggler ); - }, - - hover: function( fnOver, fnOut ) { - return this.mouseenter( fnOver ).mouseleave( fnOut || fnOver ); - } -}); - -jQuery.each( ("blur focus focusin focusout load resize scroll unload click dblclick " + - "mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave " + - "change select submit keydown keypress keyup error contextmenu").split(" "), function( i, name ) { - - // Handle event binding - jQuery.fn[ name ] = function( data, fn ) { - if ( fn == null ) { - fn = data; - data = null; - } - - return arguments.length > 0 ? - this.on( name, null, data, fn ) : - this.trigger( name ); - }; - - if ( jQuery.attrFn ) { - jQuery.attrFn[ name ] = true; - } - - if ( rkeyEvent.test( name ) ) { - jQuery.event.fixHooks[ name ] = jQuery.event.keyHooks; - } - - if ( rmouseEvent.test( name ) ) { - jQuery.event.fixHooks[ name ] = jQuery.event.mouseHooks; - } -}); - - - -/*! - * Sizzle CSS Selector Engine - * Copyright 2011, The Dojo Foundation - * Released under the MIT, BSD, and GPL Licenses. - * More information: http://sizzlejs.com/ - */ -(function(){ - -var chunker = /((?:\((?:\([^()]+\)|[^()]+)+\)|\[(?:\[[^\[\]]*\]|['"][^'"]*['"]|[^\[\]'"]+)+\]|\\.|[^ >+~,(\[\\]+)+|[>+~])(\s*,\s*)?((?:.|\r|\n)*)/g, - expando = "sizcache" + (Math.random() + '').replace('.', ''), - done = 0, - toString = Object.prototype.toString, - hasDuplicate = false, - baseHasDuplicate = true, - rBackslash = /\\/g, - rReturn = /\r\n/g, - rNonWord = /\W/; - -// Here we check if the JavaScript engine is using some sort of -// optimization where it does not always call our comparision -// function. If that is the case, discard the hasDuplicate value. -// Thus far that includes Google Chrome. -[0, 0].sort(function() { - baseHasDuplicate = false; - return 0; -}); - -var Sizzle = function( selector, context, results, seed ) { - results = results || []; - context = context || document; - - var origContext = context; - - if ( context.nodeType !== 1 && context.nodeType !== 9 ) { - return []; - } - - if ( !selector || typeof selector !== "string" ) { - return results; - } - - var m, set, checkSet, extra, ret, cur, pop, i, - prune = true, - contextXML = Sizzle.isXML( context ), - parts = [], - soFar = selector; - - // Reset the position of the chunker regexp (start from head) - do { - chunker.exec( "" ); - m = chunker.exec( soFar ); - - if ( m ) { - soFar = m[3]; - - parts.push( m[1] ); - - if ( m[2] ) { - extra = m[3]; - break; - } - } - } while ( m ); - - if ( parts.length > 1 && origPOS.exec( selector ) ) { - - if ( parts.length === 2 && Expr.relative[ parts[0] ] ) { - set = posProcess( parts[0] + parts[1], context, seed ); - - } else { - set = Expr.relative[ parts[0] ] ? - [ context ] : - Sizzle( parts.shift(), context ); - - while ( parts.length ) { - selector = parts.shift(); - - if ( Expr.relative[ selector ] ) { - selector += parts.shift(); - } - - set = posProcess( selector, set, seed ); - } - } - - } else { - // Take a shortcut and set the context if the root selector is an ID - // (but not if it'll be faster if the inner selector is an ID) - if ( !seed && parts.length > 1 && context.nodeType === 9 && !contextXML && - Expr.match.ID.test(parts[0]) && !Expr.match.ID.test(parts[parts.length - 1]) ) { - - ret = Sizzle.find( parts.shift(), context, contextXML ); - context = ret.expr ? - Sizzle.filter( ret.expr, ret.set )[0] : - ret.set[0]; - } - - if ( context ) { - ret = seed ? - { expr: parts.pop(), set: makeArray(seed) } : - Sizzle.find( parts.pop(), parts.length === 1 && (parts[0] === "~" || parts[0] === "+") && context.parentNode ? context.parentNode : context, contextXML ); - - set = ret.expr ? - Sizzle.filter( ret.expr, ret.set ) : - ret.set; - - if ( parts.length > 0 ) { - checkSet = makeArray( set ); - - } else { - prune = false; - } - - while ( parts.length ) { - cur = parts.pop(); - pop = cur; - - if ( !Expr.relative[ cur ] ) { - cur = ""; - } else { - pop = parts.pop(); - } - - if ( pop == null ) { - pop = context; - } - - Expr.relative[ cur ]( checkSet, pop, contextXML ); - } - - } else { - checkSet = parts = []; - } - } - - if ( !checkSet ) { - checkSet = set; - } - - if ( !checkSet ) { - Sizzle.error( cur || selector ); - } - - if ( toString.call(checkSet) === "[object Array]" ) { - if ( !prune ) { - results.push.apply( results, checkSet ); - - } else if ( context && context.nodeType === 1 ) { - for ( i = 0; checkSet[i] != null; i++ ) { - if ( checkSet[i] && (checkSet[i] === true || checkSet[i].nodeType === 1 && Sizzle.contains(context, checkSet[i])) ) { - results.push( set[i] ); - } - } - - } else { - for ( i = 0; checkSet[i] != null; i++ ) { - if ( checkSet[i] && checkSet[i].nodeType === 1 ) { - results.push( set[i] ); - } - } - } - - } else { - makeArray( checkSet, results ); - } - - if ( extra ) { - Sizzle( extra, origContext, results, seed ); - Sizzle.uniqueSort( results ); - } - - return results; -}; - -Sizzle.uniqueSort = function( results ) { - if ( sortOrder ) { - hasDuplicate = baseHasDuplicate; - results.sort( sortOrder ); - - if ( hasDuplicate ) { - for ( var i = 1; i < results.length; i++ ) { - if ( results[i] === results[ i - 1 ] ) { - results.splice( i--, 1 ); - } - } - } - } - - return results; -}; - -Sizzle.matches = function( expr, set ) { - return Sizzle( expr, null, null, set ); -}; - -Sizzle.matchesSelector = function( node, expr ) { - return Sizzle( expr, null, null, [node] ).length > 0; -}; - -Sizzle.find = function( expr, context, isXML ) { - var set, i, len, match, type, left; - - if ( !expr ) { - return []; - } - - for ( i = 0, len = Expr.order.length; i < len; i++ ) { - type = Expr.order[i]; - - if ( (match = Expr.leftMatch[ type ].exec( expr )) ) { - left = match[1]; - match.splice( 1, 1 ); - - if ( left.substr( left.length - 1 ) !== "\\" ) { - match[1] = (match[1] || "").replace( rBackslash, "" ); - set = Expr.find[ type ]( match, context, isXML ); - - if ( set != null ) { - expr = expr.replace( Expr.match[ type ], "" ); - break; - } - } - } - } - - if ( !set ) { - set = typeof context.getElementsByTagName !== "undefined" ? - context.getElementsByTagName( "*" ) : - []; - } - - return { set: set, expr: expr }; -}; - -Sizzle.filter = function( expr, set, inplace, not ) { - var match, anyFound, - type, found, item, filter, left, - i, pass, - old = expr, - result = [], - curLoop = set, - isXMLFilter = set && set[0] && Sizzle.isXML( set[0] ); - - while ( expr && set.length ) { - for ( type in Expr.filter ) { - if ( (match = Expr.leftMatch[ type ].exec( expr )) != null && match[2] ) { - filter = Expr.filter[ type ]; - left = match[1]; - - anyFound = false; - - match.splice(1,1); - - if ( left.substr( left.length - 1 ) === "\\" ) { - continue; - } - - if ( curLoop === result ) { - result = []; - } - - if ( Expr.preFilter[ type ] ) { - match = Expr.preFilter[ type ]( match, curLoop, inplace, result, not, isXMLFilter ); - - if ( !match ) { - anyFound = found = true; - - } else if ( match === true ) { - continue; - } - } - - if ( match ) { - for ( i = 0; (item = curLoop[i]) != null; i++ ) { - if ( item ) { - found = filter( item, match, i, curLoop ); - pass = not ^ found; - - if ( inplace && found != null ) { - if ( pass ) { - anyFound = true; - - } else { - curLoop[i] = false; - } - - } else if ( pass ) { - result.push( item ); - anyFound = true; - } - } - } - } - - if ( found !== undefined ) { - if ( !inplace ) { - curLoop = result; - } - - expr = expr.replace( Expr.match[ type ], "" ); - - if ( !anyFound ) { - return []; - } - - break; - } - } - } - - // Improper expression - if ( expr === old ) { - if ( anyFound == null ) { - Sizzle.error( expr ); - - } else { - break; - } - } - - old = expr; - } - - return curLoop; -}; - -Sizzle.error = function( msg ) { - throw new Error( "Syntax error, unrecognized expression: " + msg ); -}; - -/** - * Utility function for retreiving the text value of an array of DOM nodes - * @param {Array|Element} elem - */ -var getText = Sizzle.getText = function( elem ) { - var i, node, - nodeType = elem.nodeType, - ret = ""; - - if ( nodeType ) { - if ( nodeType === 1 || nodeType === 9 ) { - // Use textContent || innerText for elements - if ( typeof elem.textContent === 'string' ) { - return elem.textContent; - } else if ( typeof elem.innerText === 'string' ) { - // Replace IE's carriage returns - return elem.innerText.replace( rReturn, '' ); - } else { - // Traverse it's children - for ( elem = elem.firstChild; elem; elem = elem.nextSibling) { - ret += getText( elem ); - } - } - } else if ( nodeType === 3 || nodeType === 4 ) { - return elem.nodeValue; - } - } else { - - // If no nodeType, this is expected to be an array - for ( i = 0; (node = elem[i]); i++ ) { - // Do not traverse comment nodes - if ( node.nodeType !== 8 ) { - ret += getText( node ); - } - } - } - return ret; -}; - -var Expr = Sizzle.selectors = { - order: [ "ID", "NAME", "TAG" ], - - match: { - ID: /#((?:[\w\u00c0-\uFFFF\-]|\\.)+)/, - CLASS: /\.((?:[\w\u00c0-\uFFFF\-]|\\.)+)/, - NAME: /\[name=['"]*((?:[\w\u00c0-\uFFFF\-]|\\.)+)['"]*\]/, - ATTR: /\[\s*((?:[\w\u00c0-\uFFFF\-]|\\.)+)\s*(?:(\S?=)\s*(?:(['"])(.*?)\3|(#?(?:[\w\u00c0-\uFFFF\-]|\\.)*)|)|)\s*\]/, - TAG: /^((?:[\w\u00c0-\uFFFF\*\-]|\\.)+)/, - CHILD: /:(only|nth|last|first)-child(?:\(\s*(even|odd|(?:[+\-]?\d+|(?:[+\-]?\d*)?n\s*(?:[+\-]\s*\d+)?))\s*\))?/, - POS: /:(nth|eq|gt|lt|first|last|even|odd)(?:\((\d*)\))?(?=[^\-]|$)/, - PSEUDO: /:((?:[\w\u00c0-\uFFFF\-]|\\.)+)(?:\((['"]?)((?:\([^\)]+\)|[^\(\)]*)+)\2\))?/ - }, - - leftMatch: {}, - - attrMap: { - "class": "className", - "for": "htmlFor" - }, - - attrHandle: { - href: function( elem ) { - return elem.getAttribute( "href" ); - }, - type: function( elem ) { - return elem.getAttribute( "type" ); - } - }, - - relative: { - "+": function(checkSet, part){ - var isPartStr = typeof part === "string", - isTag = isPartStr && !rNonWord.test( part ), - isPartStrNotTag = isPartStr && !isTag; - - if ( isTag ) { - part = part.toLowerCase(); - } - - for ( var i = 0, l = checkSet.length, elem; i < l; i++ ) { - if ( (elem = checkSet[i]) ) { - while ( (elem = elem.previousSibling) && elem.nodeType !== 1 ) {} - - checkSet[i] = isPartStrNotTag || elem && elem.nodeName.toLowerCase() === part ? - elem || false : - elem === part; - } - } - - if ( isPartStrNotTag ) { - Sizzle.filter( part, checkSet, true ); - } - }, - - ">": function( checkSet, part ) { - var elem, - isPartStr = typeof part === "string", - i = 0, - l = checkSet.length; - - if ( isPartStr && !rNonWord.test( part ) ) { - part = part.toLowerCase(); - - for ( ; i < l; i++ ) { - elem = checkSet[i]; - - if ( elem ) { - var parent = elem.parentNode; - checkSet[i] = parent.nodeName.toLowerCase() === part ? parent : false; - } - } - - } else { - for ( ; i < l; i++ ) { - elem = checkSet[i]; - - if ( elem ) { - checkSet[i] = isPartStr ? - elem.parentNode : - elem.parentNode === part; - } - } - - if ( isPartStr ) { - Sizzle.filter( part, checkSet, true ); - } - } - }, - - "": function(checkSet, part, isXML){ - var nodeCheck, - doneName = done++, - checkFn = dirCheck; - - if ( typeof part === "string" && !rNonWord.test( part ) ) { - part = part.toLowerCase(); - nodeCheck = part; - checkFn = dirNodeCheck; - } - - checkFn( "parentNode", part, doneName, checkSet, nodeCheck, isXML ); - }, - - "~": function( checkSet, part, isXML ) { - var nodeCheck, - doneName = done++, - checkFn = dirCheck; - - if ( typeof part === "string" && !rNonWord.test( part ) ) { - part = part.toLowerCase(); - nodeCheck = part; - checkFn = dirNodeCheck; - } - - checkFn( "previousSibling", part, doneName, checkSet, nodeCheck, isXML ); - } - }, - - find: { - ID: function( match, context, isXML ) { - if ( typeof context.getElementById !== "undefined" && !isXML ) { - var m = context.getElementById(match[1]); - // Check parentNode to catch when Blackberry 4.6 returns - // nodes that are no longer in the document #6963 - return m && m.parentNode ? [m] : []; - } - }, - - NAME: function( match, context ) { - if ( typeof context.getElementsByName !== "undefined" ) { - var ret = [], - results = context.getElementsByName( match[1] ); - - for ( var i = 0, l = results.length; i < l; i++ ) { - if ( results[i].getAttribute("name") === match[1] ) { - ret.push( results[i] ); - } - } - - return ret.length === 0 ? null : ret; - } - }, - - TAG: function( match, context ) { - if ( typeof context.getElementsByTagName !== "undefined" ) { - return context.getElementsByTagName( match[1] ); - } - } - }, - preFilter: { - CLASS: function( match, curLoop, inplace, result, not, isXML ) { - match = " " + match[1].replace( rBackslash, "" ) + " "; - - if ( isXML ) { - return match; - } - - for ( var i = 0, elem; (elem = curLoop[i]) != null; i++ ) { - if ( elem ) { - if ( not ^ (elem.className && (" " + elem.className + " ").replace(/[\t\n\r]/g, " ").indexOf(match) >= 0) ) { - if ( !inplace ) { - result.push( elem ); - } - - } else if ( inplace ) { - curLoop[i] = false; - } - } - } - - return false; - }, - - ID: function( match ) { - return match[1].replace( rBackslash, "" ); - }, - - TAG: function( match, curLoop ) { - return match[1].replace( rBackslash, "" ).toLowerCase(); - }, - - CHILD: function( match ) { - if ( match[1] === "nth" ) { - if ( !match[2] ) { - Sizzle.error( match[0] ); - } - - match[2] = match[2].replace(/^\+|\s*/g, ''); - - // parse equations like 'even', 'odd', '5', '2n', '3n+2', '4n-1', '-n+6' - var test = /(-?)(\d*)(?:n([+\-]?\d*))?/.exec( - match[2] === "even" && "2n" || match[2] === "odd" && "2n+1" || - !/\D/.test( match[2] ) && "0n+" + match[2] || match[2]); - - // calculate the numbers (first)n+(last) including if they are negative - match[2] = (test[1] + (test[2] || 1)) - 0; - match[3] = test[3] - 0; - } - else if ( match[2] ) { - Sizzle.error( match[0] ); - } - - // TODO: Move to normal caching system - match[0] = done++; - - return match; - }, - - ATTR: function( match, curLoop, inplace, result, not, isXML ) { - var name = match[1] = match[1].replace( rBackslash, "" ); - - if ( !isXML && Expr.attrMap[name] ) { - match[1] = Expr.attrMap[name]; - } - - // Handle if an un-quoted value was used - match[4] = ( match[4] || match[5] || "" ).replace( rBackslash, "" ); - - if ( match[2] === "~=" ) { - match[4] = " " + match[4] + " "; - } - - return match; - }, - - PSEUDO: function( match, curLoop, inplace, result, not ) { - if ( match[1] === "not" ) { - // If we're dealing with a complex expression, or a simple one - if ( ( chunker.exec(match[3]) || "" ).length > 1 || /^\w/.test(match[3]) ) { - match[3] = Sizzle(match[3], null, null, curLoop); - - } else { - var ret = Sizzle.filter(match[3], curLoop, inplace, true ^ not); - - if ( !inplace ) { - result.push.apply( result, ret ); - } - - return false; - } - - } else if ( Expr.match.POS.test( match[0] ) || Expr.match.CHILD.test( match[0] ) ) { - return true; - } - - return match; - }, - - POS: function( match ) { - match.unshift( true ); - - return match; - } - }, - - filters: { - enabled: function( elem ) { - return elem.disabled === false && elem.type !== "hidden"; - }, - - disabled: function( elem ) { - return elem.disabled === true; - }, - - checked: function( elem ) { - return elem.checked === true; - }, - - selected: function( elem ) { - // Accessing this property makes selected-by-default - // options in Safari work properly - if ( elem.parentNode ) { - elem.parentNode.selectedIndex; - } - - return elem.selected === true; - }, - - parent: function( elem ) { - return !!elem.firstChild; - }, - - empty: function( elem ) { - return !elem.firstChild; - }, - - has: function( elem, i, match ) { - return !!Sizzle( match[3], elem ).length; - }, - - header: function( elem ) { - return (/h\d/i).test( elem.nodeName ); - }, - - text: function( elem ) { - var attr = elem.getAttribute( "type" ), type = elem.type; - // IE6 and 7 will map elem.type to 'text' for new HTML5 types (search, etc) - // use getAttribute instead to test this case - return elem.nodeName.toLowerCase() === "input" && "text" === type && ( attr === type || attr === null ); - }, - - radio: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "radio" === elem.type; - }, - - checkbox: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "checkbox" === elem.type; - }, - - file: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "file" === elem.type; - }, - - password: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "password" === elem.type; - }, - - submit: function( elem ) { - var name = elem.nodeName.toLowerCase(); - return (name === "input" || name === "button") && "submit" === elem.type; - }, - - image: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "image" === elem.type; - }, - - reset: function( elem ) { - var name = elem.nodeName.toLowerCase(); - return (name === "input" || name === "button") && "reset" === elem.type; - }, - - button: function( elem ) { - var name = elem.nodeName.toLowerCase(); - return name === "input" && "button" === elem.type || name === "button"; - }, - - input: function( elem ) { - return (/input|select|textarea|button/i).test( elem.nodeName ); - }, - - focus: function( elem ) { - return elem === elem.ownerDocument.activeElement; - } - }, - setFilters: { - first: function( elem, i ) { - return i === 0; - }, - - last: function( elem, i, match, array ) { - return i === array.length - 1; - }, - - even: function( elem, i ) { - return i % 2 === 0; - }, - - odd: function( elem, i ) { - return i % 2 === 1; - }, - - lt: function( elem, i, match ) { - return i < match[3] - 0; - }, - - gt: function( elem, i, match ) { - return i > match[3] - 0; - }, - - nth: function( elem, i, match ) { - return match[3] - 0 === i; - }, - - eq: function( elem, i, match ) { - return match[3] - 0 === i; - } - }, - filter: { - PSEUDO: function( elem, match, i, array ) { - var name = match[1], - filter = Expr.filters[ name ]; - - if ( filter ) { - return filter( elem, i, match, array ); - - } else if ( name === "contains" ) { - return (elem.textContent || elem.innerText || getText([ elem ]) || "").indexOf(match[3]) >= 0; - - } else if ( name === "not" ) { - var not = match[3]; - - for ( var j = 0, l = not.length; j < l; j++ ) { - if ( not[j] === elem ) { - return false; - } - } - - return true; - - } else { - Sizzle.error( name ); - } - }, - - CHILD: function( elem, match ) { - var first, last, - doneName, parent, cache, - count, diff, - type = match[1], - node = elem; - - switch ( type ) { - case "only": - case "first": - while ( (node = node.previousSibling) ) { - if ( node.nodeType === 1 ) { - return false; - } - } - - if ( type === "first" ) { - return true; - } - - node = elem; - - case "last": - while ( (node = node.nextSibling) ) { - if ( node.nodeType === 1 ) { - return false; - } - } - - return true; - - case "nth": - first = match[2]; - last = match[3]; - - if ( first === 1 && last === 0 ) { - return true; - } - - doneName = match[0]; - parent = elem.parentNode; - - if ( parent && (parent[ expando ] !== doneName || !elem.nodeIndex) ) { - count = 0; - - for ( node = parent.firstChild; node; node = node.nextSibling ) { - if ( node.nodeType === 1 ) { - node.nodeIndex = ++count; - } - } - - parent[ expando ] = doneName; - } - - diff = elem.nodeIndex - last; - - if ( first === 0 ) { - return diff === 0; - - } else { - return ( diff % first === 0 && diff / first >= 0 ); - } - } - }, - - ID: function( elem, match ) { - return elem.nodeType === 1 && elem.getAttribute("id") === match; - }, - - TAG: function( elem, match ) { - return (match === "*" && elem.nodeType === 1) || !!elem.nodeName && elem.nodeName.toLowerCase() === match; - }, - - CLASS: function( elem, match ) { - return (" " + (elem.className || elem.getAttribute("class")) + " ") - .indexOf( match ) > -1; - }, - - ATTR: function( elem, match ) { - var name = match[1], - result = Sizzle.attr ? - Sizzle.attr( elem, name ) : - Expr.attrHandle[ name ] ? - Expr.attrHandle[ name ]( elem ) : - elem[ name ] != null ? - elem[ name ] : - elem.getAttribute( name ), - value = result + "", - type = match[2], - check = match[4]; - - return result == null ? - type === "!=" : - !type && Sizzle.attr ? - result != null : - type === "=" ? - value === check : - type === "*=" ? - value.indexOf(check) >= 0 : - type === "~=" ? - (" " + value + " ").indexOf(check) >= 0 : - !check ? - value && result !== false : - type === "!=" ? - value !== check : - type === "^=" ? - value.indexOf(check) === 0 : - type === "$=" ? - value.substr(value.length - check.length) === check : - type === "|=" ? - value === check || value.substr(0, check.length + 1) === check + "-" : - false; - }, - - POS: function( elem, match, i, array ) { - var name = match[2], - filter = Expr.setFilters[ name ]; - - if ( filter ) { - return filter( elem, i, match, array ); - } - } - } -}; - -var origPOS = Expr.match.POS, - fescape = function(all, num){ - return "\\" + (num - 0 + 1); - }; - -for ( var type in Expr.match ) { - Expr.match[ type ] = new RegExp( Expr.match[ type ].source + (/(?![^\[]*\])(?![^\(]*\))/.source) ); - Expr.leftMatch[ type ] = new RegExp( /(^(?:.|\r|\n)*?)/.source + Expr.match[ type ].source.replace(/\\(\d+)/g, fescape) ); -} - -var makeArray = function( array, results ) { - array = Array.prototype.slice.call( array, 0 ); - - if ( results ) { - results.push.apply( results, array ); - return results; - } - - return array; -}; - -// Perform a simple check to determine if the browser is capable of -// converting a NodeList to an array using builtin methods. -// Also verifies that the returned array holds DOM nodes -// (which is not the case in the Blackberry browser) -try { - Array.prototype.slice.call( document.documentElement.childNodes, 0 )[0].nodeType; - -// Provide a fallback method if it does not work -} catch( e ) { - makeArray = function( array, results ) { - var i = 0, - ret = results || []; - - if ( toString.call(array) === "[object Array]" ) { - Array.prototype.push.apply( ret, array ); - - } else { - if ( typeof array.length === "number" ) { - for ( var l = array.length; i < l; i++ ) { - ret.push( array[i] ); - } - - } else { - for ( ; array[i]; i++ ) { - ret.push( array[i] ); - } - } - } - - return ret; - }; -} - -var sortOrder, siblingCheck; - -if ( document.documentElement.compareDocumentPosition ) { - sortOrder = function( a, b ) { - if ( a === b ) { - hasDuplicate = true; - return 0; - } - - if ( !a.compareDocumentPosition || !b.compareDocumentPosition ) { - return a.compareDocumentPosition ? -1 : 1; - } - - return a.compareDocumentPosition(b) & 4 ? -1 : 1; - }; - -} else { - sortOrder = function( a, b ) { - // The nodes are identical, we can exit early - if ( a === b ) { - hasDuplicate = true; - return 0; - - // Fallback to using sourceIndex (in IE) if it's available on both nodes - } else if ( a.sourceIndex && b.sourceIndex ) { - return a.sourceIndex - b.sourceIndex; - } - - var al, bl, - ap = [], - bp = [], - aup = a.parentNode, - bup = b.parentNode, - cur = aup; - - // If the nodes are siblings (or identical) we can do a quick check - if ( aup === bup ) { - return siblingCheck( a, b ); - - // If no parents were found then the nodes are disconnected - } else if ( !aup ) { - return -1; - - } else if ( !bup ) { - return 1; - } - - // Otherwise they're somewhere else in the tree so we need - // to build up a full list of the parentNodes for comparison - while ( cur ) { - ap.unshift( cur ); - cur = cur.parentNode; - } - - cur = bup; - - while ( cur ) { - bp.unshift( cur ); - cur = cur.parentNode; - } - - al = ap.length; - bl = bp.length; - - // Start walking down the tree looking for a discrepancy - for ( var i = 0; i < al && i < bl; i++ ) { - if ( ap[i] !== bp[i] ) { - return siblingCheck( ap[i], bp[i] ); - } - } - - // We ended someplace up the tree so do a sibling check - return i === al ? - siblingCheck( a, bp[i], -1 ) : - siblingCheck( ap[i], b, 1 ); - }; - - siblingCheck = function( a, b, ret ) { - if ( a === b ) { - return ret; - } - - var cur = a.nextSibling; - - while ( cur ) { - if ( cur === b ) { - return -1; - } - - cur = cur.nextSibling; - } - - return 1; - }; -} - -// Check to see if the browser returns elements by name when -// querying by getElementById (and provide a workaround) -(function(){ - // We're going to inject a fake input element with a specified name - var form = document.createElement("div"), - id = "script" + (new Date()).getTime(), - root = document.documentElement; - - form.innerHTML = ""; - - // Inject it into the root element, check its status, and remove it quickly - root.insertBefore( form, root.firstChild ); - - // The workaround has to do additional checks after a getElementById - // Which slows things down for other browsers (hence the branching) - if ( document.getElementById( id ) ) { - Expr.find.ID = function( match, context, isXML ) { - if ( typeof context.getElementById !== "undefined" && !isXML ) { - var m = context.getElementById(match[1]); - - return m ? - m.id === match[1] || typeof m.getAttributeNode !== "undefined" && m.getAttributeNode("id").nodeValue === match[1] ? - [m] : - undefined : - []; - } - }; - - Expr.filter.ID = function( elem, match ) { - var node = typeof elem.getAttributeNode !== "undefined" && elem.getAttributeNode("id"); - - return elem.nodeType === 1 && node && node.nodeValue === match; - }; - } - - root.removeChild( form ); - - // release memory in IE - root = form = null; -})(); - -(function(){ - // Check to see if the browser returns only elements - // when doing getElementsByTagName("*") - - // Create a fake element - var div = document.createElement("div"); - div.appendChild( document.createComment("") ); - - // Make sure no comments are found - if ( div.getElementsByTagName("*").length > 0 ) { - Expr.find.TAG = function( match, context ) { - var results = context.getElementsByTagName( match[1] ); - - // Filter out possible comments - if ( match[1] === "*" ) { - var tmp = []; - - for ( var i = 0; results[i]; i++ ) { - if ( results[i].nodeType === 1 ) { - tmp.push( results[i] ); - } - } - - results = tmp; - } - - return results; - }; - } - - // Check to see if an attribute returns normalized href attributes - div.innerHTML = ""; - - if ( div.firstChild && typeof div.firstChild.getAttribute !== "undefined" && - div.firstChild.getAttribute("href") !== "#" ) { - - Expr.attrHandle.href = function( elem ) { - return elem.getAttribute( "href", 2 ); - }; - } - - // release memory in IE - div = null; -})(); - -if ( document.querySelectorAll ) { - (function(){ - var oldSizzle = Sizzle, - div = document.createElement("div"), - id = "__sizzle__"; - - div.innerHTML = "

      "; - - // Safari can't handle uppercase or unicode characters when - // in quirks mode. - if ( div.querySelectorAll && div.querySelectorAll(".TEST").length === 0 ) { - return; - } - - Sizzle = function( query, context, extra, seed ) { - context = context || document; - - // Only use querySelectorAll on non-XML documents - // (ID selectors don't work in non-HTML documents) - if ( !seed && !Sizzle.isXML(context) ) { - // See if we find a selector to speed up - var match = /^(\w+$)|^\.([\w\-]+$)|^#([\w\-]+$)/.exec( query ); - - if ( match && (context.nodeType === 1 || context.nodeType === 9) ) { - // Speed-up: Sizzle("TAG") - if ( match[1] ) { - return makeArray( context.getElementsByTagName( query ), extra ); - - // Speed-up: Sizzle(".CLASS") - } else if ( match[2] && Expr.find.CLASS && context.getElementsByClassName ) { - return makeArray( context.getElementsByClassName( match[2] ), extra ); - } - } - - if ( context.nodeType === 9 ) { - // Speed-up: Sizzle("body") - // The body element only exists once, optimize finding it - if ( query === "body" && context.body ) { - return makeArray( [ context.body ], extra ); - - // Speed-up: Sizzle("#ID") - } else if ( match && match[3] ) { - var elem = context.getElementById( match[3] ); - - // Check parentNode to catch when Blackberry 4.6 returns - // nodes that are no longer in the document #6963 - if ( elem && elem.parentNode ) { - // Handle the case where IE and Opera return items - // by name instead of ID - if ( elem.id === match[3] ) { - return makeArray( [ elem ], extra ); - } - - } else { - return makeArray( [], extra ); - } - } - - try { - return makeArray( context.querySelectorAll(query), extra ); - } catch(qsaError) {} - - // qSA works strangely on Element-rooted queries - // We can work around this by specifying an extra ID on the root - // and working up from there (Thanks to Andrew Dupont for the technique) - // IE 8 doesn't work on object elements - } else if ( context.nodeType === 1 && context.nodeName.toLowerCase() !== "object" ) { - var oldContext = context, - old = context.getAttribute( "id" ), - nid = old || id, - hasParent = context.parentNode, - relativeHierarchySelector = /^\s*[+~]/.test( query ); - - if ( !old ) { - context.setAttribute( "id", nid ); - } else { - nid = nid.replace( /'/g, "\\$&" ); - } - if ( relativeHierarchySelector && hasParent ) { - context = context.parentNode; - } - - try { - if ( !relativeHierarchySelector || hasParent ) { - return makeArray( context.querySelectorAll( "[id='" + nid + "'] " + query ), extra ); - } - - } catch(pseudoError) { - } finally { - if ( !old ) { - oldContext.removeAttribute( "id" ); - } - } - } - } - - return oldSizzle(query, context, extra, seed); - }; - - for ( var prop in oldSizzle ) { - Sizzle[ prop ] = oldSizzle[ prop ]; - } - - // release memory in IE - div = null; - })(); -} - -(function(){ - var html = document.documentElement, - matches = html.matchesSelector || html.mozMatchesSelector || html.webkitMatchesSelector || html.msMatchesSelector; - - if ( matches ) { - // Check to see if it's possible to do matchesSelector - // on a disconnected node (IE 9 fails this) - var disconnectedMatch = !matches.call( document.createElement( "div" ), "div" ), - pseudoWorks = false; - - try { - // This should fail with an exception - // Gecko does not error, returns false instead - matches.call( document.documentElement, "[test!='']:sizzle" ); - - } catch( pseudoError ) { - pseudoWorks = true; - } - - Sizzle.matchesSelector = function( node, expr ) { - // Make sure that attribute selectors are quoted - expr = expr.replace(/\=\s*([^'"\]]*)\s*\]/g, "='$1']"); - - if ( !Sizzle.isXML( node ) ) { - try { - if ( pseudoWorks || !Expr.match.PSEUDO.test( expr ) && !/!=/.test( expr ) ) { - var ret = matches.call( node, expr ); - - // IE 9's matchesSelector returns false on disconnected nodes - if ( ret || !disconnectedMatch || - // As well, disconnected nodes are said to be in a document - // fragment in IE 9, so check for that - node.document && node.document.nodeType !== 11 ) { - return ret; - } - } - } catch(e) {} - } - - return Sizzle(expr, null, null, [node]).length > 0; - }; - } -})(); - -(function(){ - var div = document.createElement("div"); - - div.innerHTML = "
      "; - - // Opera can't find a second classname (in 9.6) - // Also, make sure that getElementsByClassName actually exists - if ( !div.getElementsByClassName || div.getElementsByClassName("e").length === 0 ) { - return; - } - - // Safari caches class attributes, doesn't catch changes (in 3.2) - div.lastChild.className = "e"; - - if ( div.getElementsByClassName("e").length === 1 ) { - return; - } - - Expr.order.splice(1, 0, "CLASS"); - Expr.find.CLASS = function( match, context, isXML ) { - if ( typeof context.getElementsByClassName !== "undefined" && !isXML ) { - return context.getElementsByClassName(match[1]); - } - }; - - // release memory in IE - div = null; -})(); - -function dirNodeCheck( dir, cur, doneName, checkSet, nodeCheck, isXML ) { - for ( var i = 0, l = checkSet.length; i < l; i++ ) { - var elem = checkSet[i]; - - if ( elem ) { - var match = false; - - elem = elem[dir]; - - while ( elem ) { - if ( elem[ expando ] === doneName ) { - match = checkSet[elem.sizset]; - break; - } - - if ( elem.nodeType === 1 && !isXML ){ - elem[ expando ] = doneName; - elem.sizset = i; - } - - if ( elem.nodeName.toLowerCase() === cur ) { - match = elem; - break; - } - - elem = elem[dir]; - } - - checkSet[i] = match; - } - } -} - -function dirCheck( dir, cur, doneName, checkSet, nodeCheck, isXML ) { - for ( var i = 0, l = checkSet.length; i < l; i++ ) { - var elem = checkSet[i]; - - if ( elem ) { - var match = false; - - elem = elem[dir]; - - while ( elem ) { - if ( elem[ expando ] === doneName ) { - match = checkSet[elem.sizset]; - break; - } - - if ( elem.nodeType === 1 ) { - if ( !isXML ) { - elem[ expando ] = doneName; - elem.sizset = i; - } - - if ( typeof cur !== "string" ) { - if ( elem === cur ) { - match = true; - break; - } - - } else if ( Sizzle.filter( cur, [elem] ).length > 0 ) { - match = elem; - break; - } - } - - elem = elem[dir]; - } - - checkSet[i] = match; - } - } -} - -if ( document.documentElement.contains ) { - Sizzle.contains = function( a, b ) { - return a !== b && (a.contains ? a.contains(b) : true); - }; - -} else if ( document.documentElement.compareDocumentPosition ) { - Sizzle.contains = function( a, b ) { - return !!(a.compareDocumentPosition(b) & 16); - }; - -} else { - Sizzle.contains = function() { - return false; - }; -} - -Sizzle.isXML = function( elem ) { - // documentElement is verified for cases where it doesn't yet exist - // (such as loading iframes in IE - #4833) - var documentElement = (elem ? elem.ownerDocument || elem : 0).documentElement; - - return documentElement ? documentElement.nodeName !== "HTML" : false; -}; - -var posProcess = function( selector, context, seed ) { - var match, - tmpSet = [], - later = "", - root = context.nodeType ? [context] : context; - - // Position selectors must be done after the filter - // And so must :not(positional) so we move all PSEUDOs to the end - while ( (match = Expr.match.PSEUDO.exec( selector )) ) { - later += match[0]; - selector = selector.replace( Expr.match.PSEUDO, "" ); - } - - selector = Expr.relative[selector] ? selector + "*" : selector; - - for ( var i = 0, l = root.length; i < l; i++ ) { - Sizzle( selector, root[i], tmpSet, seed ); - } - - return Sizzle.filter( later, tmpSet ); -}; - -// EXPOSE -// Override sizzle attribute retrieval -Sizzle.attr = jQuery.attr; -Sizzle.selectors.attrMap = {}; -jQuery.find = Sizzle; -jQuery.expr = Sizzle.selectors; -jQuery.expr[":"] = jQuery.expr.filters; -jQuery.unique = Sizzle.uniqueSort; -jQuery.text = Sizzle.getText; -jQuery.isXMLDoc = Sizzle.isXML; -jQuery.contains = Sizzle.contains; - - -})(); - - -var runtil = /Until$/, - rparentsprev = /^(?:parents|prevUntil|prevAll)/, - // Note: This RegExp should be improved, or likely pulled from Sizzle - rmultiselector = /,/, - isSimple = /^.[^:#\[\.,]*$/, - slice = Array.prototype.slice, - POS = jQuery.expr.match.POS, - // methods guaranteed to produce a unique set when starting from a unique set - guaranteedUnique = { - children: true, - contents: true, - next: true, - prev: true - }; - -jQuery.fn.extend({ - find: function( selector ) { - var self = this, - i, l; - - if ( typeof selector !== "string" ) { - return jQuery( selector ).filter(function() { - for ( i = 0, l = self.length; i < l; i++ ) { - if ( jQuery.contains( self[ i ], this ) ) { - return true; - } - } - }); - } - - var ret = this.pushStack( "", "find", selector ), - length, n, r; - - for ( i = 0, l = this.length; i < l; i++ ) { - length = ret.length; - jQuery.find( selector, this[i], ret ); - - if ( i > 0 ) { - // Make sure that the results are unique - for ( n = length; n < ret.length; n++ ) { - for ( r = 0; r < length; r++ ) { - if ( ret[r] === ret[n] ) { - ret.splice(n--, 1); - break; - } - } - } - } - } - - return ret; - }, - - has: function( target ) { - var targets = jQuery( target ); - return this.filter(function() { - for ( var i = 0, l = targets.length; i < l; i++ ) { - if ( jQuery.contains( this, targets[i] ) ) { - return true; - } - } - }); - }, - - not: function( selector ) { - return this.pushStack( winnow(this, selector, false), "not", selector); - }, - - filter: function( selector ) { - return this.pushStack( winnow(this, selector, true), "filter", selector ); - }, - - is: function( selector ) { - return !!selector && ( - typeof selector === "string" ? - // If this is a positional selector, check membership in the returned set - // so $("p:first").is("p:last") won't return true for a doc with two "p". - POS.test( selector ) ? - jQuery( selector, this.context ).index( this[0] ) >= 0 : - jQuery.filter( selector, this ).length > 0 : - this.filter( selector ).length > 0 ); - }, - - closest: function( selectors, context ) { - var ret = [], i, l, cur = this[0]; - - // Array (deprecated as of jQuery 1.7) - if ( jQuery.isArray( selectors ) ) { - var level = 1; - - while ( cur && cur.ownerDocument && cur !== context ) { - for ( i = 0; i < selectors.length; i++ ) { - - if ( jQuery( cur ).is( selectors[ i ] ) ) { - ret.push({ selector: selectors[ i ], elem: cur, level: level }); - } - } - - cur = cur.parentNode; - level++; - } - - return ret; - } - - // String - var pos = POS.test( selectors ) || typeof selectors !== "string" ? - jQuery( selectors, context || this.context ) : - 0; - - for ( i = 0, l = this.length; i < l; i++ ) { - cur = this[i]; - - while ( cur ) { - if ( pos ? pos.index(cur) > -1 : jQuery.find.matchesSelector(cur, selectors) ) { - ret.push( cur ); - break; - - } else { - cur = cur.parentNode; - if ( !cur || !cur.ownerDocument || cur === context || cur.nodeType === 11 ) { - break; - } - } - } - } - - ret = ret.length > 1 ? jQuery.unique( ret ) : ret; - - return this.pushStack( ret, "closest", selectors ); - }, - - // Determine the position of an element within - // the matched set of elements - index: function( elem ) { - - // No argument, return index in parent - if ( !elem ) { - return ( this[0] && this[0].parentNode ) ? this.prevAll().length : -1; - } - - // index in selector - if ( typeof elem === "string" ) { - return jQuery.inArray( this[0], jQuery( elem ) ); - } - - // Locate the position of the desired element - return jQuery.inArray( - // If it receives a jQuery object, the first element is used - elem.jquery ? elem[0] : elem, this ); - }, - - add: function( selector, context ) { - var set = typeof selector === "string" ? - jQuery( selector, context ) : - jQuery.makeArray( selector && selector.nodeType ? [ selector ] : selector ), - all = jQuery.merge( this.get(), set ); - - return this.pushStack( isDisconnected( set[0] ) || isDisconnected( all[0] ) ? - all : - jQuery.unique( all ) ); - }, - - andSelf: function() { - return this.add( this.prevObject ); - } -}); - -// A painfully simple check to see if an element is disconnected -// from a document (should be improved, where feasible). -function isDisconnected( node ) { - return !node || !node.parentNode || node.parentNode.nodeType === 11; -} - -jQuery.each({ - parent: function( elem ) { - var parent = elem.parentNode; - return parent && parent.nodeType !== 11 ? parent : null; - }, - parents: function( elem ) { - return jQuery.dir( elem, "parentNode" ); - }, - parentsUntil: function( elem, i, until ) { - return jQuery.dir( elem, "parentNode", until ); - }, - next: function( elem ) { - return jQuery.nth( elem, 2, "nextSibling" ); - }, - prev: function( elem ) { - return jQuery.nth( elem, 2, "previousSibling" ); - }, - nextAll: function( elem ) { - return jQuery.dir( elem, "nextSibling" ); - }, - prevAll: function( elem ) { - return jQuery.dir( elem, "previousSibling" ); - }, - nextUntil: function( elem, i, until ) { - return jQuery.dir( elem, "nextSibling", until ); - }, - prevUntil: function( elem, i, until ) { - return jQuery.dir( elem, "previousSibling", until ); - }, - siblings: function( elem ) { - return jQuery.sibling( elem.parentNode.firstChild, elem ); - }, - children: function( elem ) { - return jQuery.sibling( elem.firstChild ); - }, - contents: function( elem ) { - return jQuery.nodeName( elem, "iframe" ) ? - elem.contentDocument || elem.contentWindow.document : - jQuery.makeArray( elem.childNodes ); - } -}, function( name, fn ) { - jQuery.fn[ name ] = function( until, selector ) { - var ret = jQuery.map( this, fn, until ); - - if ( !runtil.test( name ) ) { - selector = until; - } - - if ( selector && typeof selector === "string" ) { - ret = jQuery.filter( selector, ret ); - } - - ret = this.length > 1 && !guaranteedUnique[ name ] ? jQuery.unique( ret ) : ret; - - if ( (this.length > 1 || rmultiselector.test( selector )) && rparentsprev.test( name ) ) { - ret = ret.reverse(); - } - - return this.pushStack( ret, name, slice.call( arguments ).join(",") ); - }; -}); - -jQuery.extend({ - filter: function( expr, elems, not ) { - if ( not ) { - expr = ":not(" + expr + ")"; - } - - return elems.length === 1 ? - jQuery.find.matchesSelector(elems[0], expr) ? [ elems[0] ] : [] : - jQuery.find.matches(expr, elems); - }, - - dir: function( elem, dir, until ) { - var matched = [], - cur = elem[ dir ]; - - while ( cur && cur.nodeType !== 9 && (until === undefined || cur.nodeType !== 1 || !jQuery( cur ).is( until )) ) { - if ( cur.nodeType === 1 ) { - matched.push( cur ); - } - cur = cur[dir]; - } - return matched; - }, - - nth: function( cur, result, dir, elem ) { - result = result || 1; - var num = 0; - - for ( ; cur; cur = cur[dir] ) { - if ( cur.nodeType === 1 && ++num === result ) { - break; - } - } - - return cur; - }, - - sibling: function( n, elem ) { - var r = []; - - for ( ; n; n = n.nextSibling ) { - if ( n.nodeType === 1 && n !== elem ) { - r.push( n ); - } - } - - return r; - } -}); - -// Implement the identical functionality for filter and not -function winnow( elements, qualifier, keep ) { - - // Can't pass null or undefined to indexOf in Firefox 4 - // Set to 0 to skip string check - qualifier = qualifier || 0; - - if ( jQuery.isFunction( qualifier ) ) { - return jQuery.grep(elements, function( elem, i ) { - var retVal = !!qualifier.call( elem, i, elem ); - return retVal === keep; - }); - - } else if ( qualifier.nodeType ) { - return jQuery.grep(elements, function( elem, i ) { - return ( elem === qualifier ) === keep; - }); - - } else if ( typeof qualifier === "string" ) { - var filtered = jQuery.grep(elements, function( elem ) { - return elem.nodeType === 1; - }); - - if ( isSimple.test( qualifier ) ) { - return jQuery.filter(qualifier, filtered, !keep); - } else { - qualifier = jQuery.filter( qualifier, filtered ); - } - } - - return jQuery.grep(elements, function( elem, i ) { - return ( jQuery.inArray( elem, qualifier ) >= 0 ) === keep; - }); -} - - - - -function createSafeFragment( document ) { - var list = nodeNames.split( "|" ), - safeFrag = document.createDocumentFragment(); - - if ( safeFrag.createElement ) { - while ( list.length ) { - safeFrag.createElement( - list.pop() - ); - } - } - return safeFrag; -} - -var nodeNames = "abbr|article|aside|audio|canvas|datalist|details|figcaption|figure|footer|" + - "header|hgroup|mark|meter|nav|output|progress|section|summary|time|video", - rinlinejQuery = / jQuery\d+="(?:\d+|null)"/g, - rleadingWhitespace = /^\s+/, - rxhtmlTag = /<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:]+)[^>]*)\/>/ig, - rtagName = /<([\w:]+)/, - rtbody = /", "" ], - legend: [ 1, "
      ", "
      " ], - thead: [ 1, "", "
      " ], - tr: [ 2, "", "
      " ], - td: [ 3, "", "
      " ], - col: [ 2, "", "
      " ], - area: [ 1, "", "" ], - _default: [ 0, "", "" ] - }, - safeFragment = createSafeFragment( document ); - -wrapMap.optgroup = wrapMap.option; -wrapMap.tbody = wrapMap.tfoot = wrapMap.colgroup = wrapMap.caption = wrapMap.thead; -wrapMap.th = wrapMap.td; - -// IE can't serialize and - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      - -
      - -
      -

      Classes, interfaces and traits

      - - -
      -

      OneLogin_Saml_Response

      -

      -
      - « More »
      - -
      -

      OneLogin_Saml_Metadata

      -

      -
      - « More »
      - -
      -

      OneLogin_Saml_AuthRequest

      -

      -
      - « More »
      - -
      -

      OneLogin_Saml_Settings

      -

      Holds SAML settings for the SamlResponse and SamlAuthRequest classes.

      -

      These settings need to be filled in by the user prior to being used.

      - « More »
      - -
      -

      OneLogin_Saml_XmlSec

      -

      Determine if the SAML response is valid using a provided x509 certificate.

      -
      - « More »
      - -
      - - -
      -
      -
      - - - - diff --git a/docs/Saml/phpdoc-cache-22/phpdoc-cache-file_41490c7e368e29f813beef0e771110ee.dat b/docs/Saml/phpdoc-cache-22/phpdoc-cache-file_41490c7e368e29f813beef0e771110ee.dat deleted file mode 100644 index 9476df27ae53dd91b27703db0e98af4f0d0761a0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 8456 zcmeHM+iu%95bd+SLJ;zh8ogMuoutZkcY~x06lj|uDfTIVK})nvRF=FFm2Nihzwa4R z)WwmV7?xk!`o$NKGs818XNKcTum8@o7qi7h>}PWx$vC;a;HjU81%3QWguMJ}d#>X> zq~5V-zv#Z0v2=S-8KK74-UhjB395@4aIC0&f?@s!YlXs4DOzZTn1(Rx* zgI(7=UBpq!-#|aDfF+Qd##!QX`hIfcc=m69;AyAhhb&F4%ZPu9ry?5Nuz5H#`z`*j z){XUm@ z))-&$@kEL^vg&8c_rF!|i)C28%Vm#l4TLBWk(~dh!5_WHW7qFT94s)kGurh#U1xzySp>8ugFmRMo z5Hbmg<4p4Oa21Y(%Pfhk1343^I?`EX?UM$QNfDd#kAXVF20Lh#2%c8|MM*PwE<4K( zWtpSXj)bHO=JT^qu#~6v>7~~nZs3OVI1IUp728v^aH7&zNIu7A=JmXXHzyu_{JcB-=Ar%Qb1xp4^_cmuRd76cpfY-?MLP^iohBd2axfYnlC=45?DP zb3)XvV?n1G1&2FWRZ%jS3Lcn1-kmQ(PUWLLymZ*GF<6cH(mow~Jt_%G-9&(h%}-QG z_7VyDXs8SeV$T+wW->yD!ko)l9PAEQpZrEyRv|^@e*Co7{hyWcn*Wa;`#0(L8Lv%lBsGzc8A1OkU(m+a4Ae+%UVp% za{V<_6uLU<};T_9|{sRduu-DhU8o&;T9a@pf20nTvxWZr#x{%QGC^GxNlC;ctvPa3{t{=mXVW+Z&j!6YfcI zp-%F~4za1KGa;(o;>Ur`2Y`Ncb?$w*zJ5LI^_*e3#Pke`C-VLTH#>>B4)t4kg6dLQ zEqoM&_!WXHz3(BIc}Xuk0a6VYbyeYi-tIVWr8E~!OyL_KP}df|1`r8m<6=WhYw?CF zc5PAzh^(!qH)LKjJ8oOP+? zQDfJbfh*{?ka#XcmWfwRCELrdKC!qi7VWi%KWBcas)u@rs*E{y@HJtgy_wuf#b}s* zn14+kmj)O7ziw376r{!cBX0+Go?~n#eN4KF7&P6;K3E@7UYw*2n$~=pX5&_+{xD5u zuc65#w?6JMH_i0Qs8)StCC3E)DLBEOCM^x4OmB~wcZ+$OpBCf3Z@jIs*`vWpo?n{A zi-r(cZ_qRU@;TRMGV{`lm8^`c xs*9}*jjfazv=}mree+W?(=t<2l&q7i46NZ2Wtqj9NtrpBC6!9nnO5f3wE*tiCN}^8 diff --git a/docs/Saml/phpdoc-cache-83/phpdoc-cache-file_93972b6811cf61deea59203557827f2a.dat b/docs/Saml/phpdoc-cache-83/phpdoc-cache-file_93972b6811cf61deea59203557827f2a.dat deleted file mode 100644 index 93a9ef7aa24e0431fbd9c0efb2e387204229039c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 16860 zcmeHPZFAeW5x&p<6&y`woMaNmdh-j@T&uH`sanVONlw$wrQ?A}$U;MrJc6>%lktD= zvj9m^5-D3Y?6W4;7e^w9#V(#_cd-C+Y}fbgN;nGJfioF%KMta=Z7!Wig!Ipk!sFAg z6}wioze{`9uKe`+rxBB*%6nR3 z`mK<~>a8l?>hm}j{<++Od}@J_pkEnGB8SuWTC=fZSN`%>Jl@!N_xkmQ_1gM-;JMQ3 zw>}+OGI`w^29XtyxYcK4ug7H=_>x=9chwKANj&QD-zQwgmg6xgx!giW)Ys{VqhZ#K z&$(;Gfi>XPPqYzx1+)YZEU)vtBz^TXg=_-8bZvsAf_ z?;93A4h9ulN3BntZu_kBsntC^Yqi_GPQOo2XFeaS%}M0j0h2=7J{xms$Bs=Z+tsbA z`bD^Jq4b!=HXk$LwOlviQf|Iq6!q`s_WoJ_^DqDC9Gsq!_`8duuKJU~|F{z$VN^xZ zzI2b;$6xwq?PF+oboT4#)?xQ!x6{^=S5oYY@ZI22wgV{W|2kow7z*x|3I1oN_e-aD zOvYRyrM9&_XTEPd8t^D6G+pQDw0rs=Wv`X`1dBv`Rb-yiUhAmeMZYVKGLD!p1^O-O z^rX}4cl)Q*>q^56c?5vPx>p4pMKRJ>QN#M&J0!5n$zUvEO*sZKk$Mh`Mc`YJ=9NS< z5JA8Bw+j|oGLFEIkKlVRI9t|6c-Es(^STKpLl+t&R zj4qBR@p8$30PL2-qZqJ*wp_8D%#kwzSFRy3!YT$hQMNe9^}gH$mm?lQSfITe`M%W6 zy;GjB1+RvYVn#0ExX6Kp0cMuG)9ofjhCLp`=`6Pi`64SAs!^~o#B?ectRST;R~ZuKQ67{(uPK4Q;!~cQ2w=+Y!;nYDE#d!i2;lHKYsXAqH75onVX@CF`3+{2~$Y!D1x(<*Q_Lxo5v^%5d|)uz%Kq z9?~aySvUA?Q~R*4s~W$EM?${+S%!N0bd)K0iGr(w;Q@jjvWckAqYL5ioJ6gfl4wzw z^ERyyKULrurTjPxr?JQua7DSH6$w%;imkEe#|j3Tyf1SO zZ$+Cdidk-&8Hw6g-c@4eCT}H?947h8{7hgl3$89V5ec6Y=xOs^Z(MIs?pM{xAh{eF zGKaT3!H~LD-XGib=8}x{AVB7(m{PG-vbv{|N)huhUS{^T{r&nH-BM6yLet>W_X3-TjO&>JW z%)&XS#W3P>{-GWfmWlc0u`;24;t3y8gk2@v=$~SCZVaHB5Il;4$WWi~i8W}Ppl)H+ z_~^)khASX%erZZmH4i@YcoX;v)J|tF1K?64Jy8%=*9U}kxSRxpON$AQ4ai-%g%tp~ zqWIrX!AnE+q%uexZ3 zCkm}bHufi<_Eo15H>*!SI=V2iE4Z&|J-h&5javlMoT3XDD>TOwg&8g4)?{^2#W)iW zHr=s!beti3Ujb*iEs`RjA?DuX$?~eEQYOHB*&o-o7eRMeKz(E+4XqrwU+{?Wy3Z3jwJ4U{5Zq zNonOTgiLlB2)poVdIzou$atX?$VK`tAi2aYMNpI zSWh`z3G4NqR(}8AAldhTZ-e>NGudI!^&&fMFcfWDu0P$EZN3z1oN^&eSj%l=fbvbm zFrqx|Bd>Pw#vK3ahL`Qn{9il%)4_n;X{fcQJ?#UO=Jqp+&a-{N5(Y@V11FTm^*bMG zGspLa;oaG1zONnMv2sn%wfzZPr-ktJC?o;f$b!DUY(YO&cb@SxwlKi<8agDlQ~pqN zZqy)=4Oge0iJU>v=wkW-SLwK#QYk$7`6tl2hM-%1XxJFd>2^$MY%j6JJm;5~&435k z!=xBL&TYqaWwUAnM87kl11n0I^g~7ksP>2DgYx7)1#nEmnE6$UcMr( z&z6{HO>4kM?OB0AT7}v0cSA616;RsJb7fPJf?FafT*_K&h?`#KLF>+tF9NI)4 zr1dTLL1@e>^$>h6Kz;?|E$5+rrW zPCFn`n#kc^rf?bkzX=_>nNhJD6nK-2O>$iC#FbC-bO@blSxx`e;Bo?2-AbVojwdGv lcBj{S+uX)y+9dUTG_478aL+8}f8az&E`wK?rFHi8{{aO$hra*- diff --git a/docs/Saml/phpdoc-cache-a6/phpdoc-cache-file_98a1f4049cf32bcdfd356923a5467878.dat b/docs/Saml/phpdoc-cache-a6/phpdoc-cache-file_98a1f4049cf32bcdfd356923a5467878.dat deleted file mode 100644 index 6c1cd53052d0ae4f0ffc14d1eb0156d6db74b2f9..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 14903 zcmeHOZByGw65h}JiaD2SW7x2UjB7ZUxVG_kRCqntL9Mg}#%0Ohl zHoTpV_epury~Yn)KMc7VHV%~6-SHZJdzbI-^?0|xyVvh^eZSN5_xJZizq^YUFJIDk zX4IG`dQ_+FHGUrjSHk}pv(tO%0jVmQ#JsSuE5z3KbqIcFzOZXA>pEJI2{Kj_ze&^x4O~_DklAIFSSC^F;g%Y0ozN zfGfq$L-97cli}?Z9|gBYsf|w?41e^r^urcAV)XjbO=X6r@{>rb<3o)kp7_8HGnj#I z?s;6A<4Pn66jb(;XZl~rN`#+4+2*aX9~^9y)wsr@`_@(rv-Si_guEA?3Dvr%R&J)QRmPnpIw976lU^WwHkgEdBBPMq-lpEr zD!Q06e+JFd5_q!;Y-$vYR}u!zWGL14Vd^RDbtdh=AeQ^eEgN6?L4@#07q)%q-kDJk zGamO|#BwkNdb|iBi^5>)jHVE56mx-KM@mtgMWMBuGvAw7B$GH~y(kLU_2oZLT?{(~ z*cj0$)M8Y1e8Z||lTkX6YR#Y%M^SPX^##FVk#f`I(4qOXs`RO%Z{4`FrNH zZL&{hftCZBVecqOV%eJ@$jQ#7u`&@Oh~L~k4D3p#?Egk@8)s4Si+~=Yk+Y|c zuaMUv{5(95j|NCuW%r;nOyG-~?2zd%Hp^&`($*0N zJWwKYPkQrEK+a5_TVQGO>`iI%SFcx`J=4SLifn0BoehmVV_4T_Z<1jg{i)dLM_-I{ zEK}|CQoW~oV3r>YSEbRM(S(bV62D|<5_W%Umd2Njp_N1i`!mzC_2k_oNaPp{nbHJU zGe)9|5~e2OaTFts=i|d7LiTHFy{?^yYpyc9<`mA}wQ{a(v@H!@N?XXIOe~d}fEruS zo1?<=hr<8BrYO=Vk>E#{#5dMj@)pK>kN7 z362Q|QQjKm5wiaeF(q5_IOfyVliyBgrUDfBfSj`u3B1coH@3!?c)rw<|0URv-;)C} z6v>?NUNkW|{)3nn*PQB<#M3ejBa+|qph8RMnwMfAViEcxuWiNzFseUftu&%pQ!J%^ zDwbh-+2^|I`jw+)nHNRInNCCB^N;}(>A%$;1-!JS2xa{IRKra^SYZtELQZB&z0XC! z_Mz;LFLV)joHZIxnP%gsjEF8TFD)8MroGqYR?F(LiQ*w&Jv>ln)G@76h%~0g+!sfI zL~N?Y!MWGnThPrNM?rw{9cj4X=|=8_Zn-E=VlemG-lvBLi0_!kp&v|87S$#eeIgn> zT@-UvRW-|Xb$5Mo(V>#Q)Fak_f(9J@bK|Di44BS}z}Urvb35^4QX}7rcV18{Zae|~ z7it4?4T#Vl(lsU=fwpxCTN~KMH+T=V3imN(&ue2^<46M;^1wantjpYHY3P>66lFD7 zX2$}V_EOpym}agqF3jZ9f<5+T?GbyOy%e2fIwob$@PIZy;97k#;HU}AGrRqvX(`3f zto2?h*^>dXCD|4qrdtK{yT$(BN`&+)ZO2r)nCImd=(b~sL#)ukTWh_PVhVbLb3X7p zJQ+y5n17>o5yS-4T{@R8dLKoz}`^fKzf}W z3^I=rez!U&=;(ztu$QxPC_$D))F9xo)VV%}mhG94f^~6f zGR;UN!>GSH=j>9_rh+%OTdS!7kLFVIJ3V=xmpl7&lfSK|m#CNwnVQCAVFiG&8|ywp zhnR_C9^dKno7Ew4U$vU3*@=@KH3O-5A(k}V8+)3on%AeAa0TPqY38oY_U| zWS%wARhIEq%=7DIE1Zv{Y?Ymjf2XR7Qh0ZEYuJ^-j;b;Qt9WW2)-{k6og>U8sd-nV z>LaJUnp@&;f}CtS@@?}ElB>Oa^qq4mIA_5zWqN6g!njz#=RvK3TwLE=*|)iuMuX39 zo;~lR>ekX!>kZUgDX?O;{W|NI^-=}UGuH)I?yQza?^@qaT)GORjl`Su>Qi+w=+-c= z7+f!iUwOTkSq3o7J+iSk#PDBQPU*0^;iU&ZI7wH6E?t@16 zxH$GsFE6+E+U@p>>=SqEKvRI-8pb^*y0=?6wnIkDk()m1CTi?JGSrwT(Z7zltnX@6 zsU@X$vU1BaTZudW-vOA__mrw=H@lyKVOYsB7et8kgr-OFWbopp3Y-)M;Z Y-||;G^FGIXWLE1rRq0E6iOyR81=`3mxBvhE diff --git a/docs/Saml/phpdoc-cache-ae/phpdoc-cache-file_b4c7cb90902b9fd1dd94f0c07751194b.dat b/docs/Saml/phpdoc-cache-ae/phpdoc-cache-file_b4c7cb90902b9fd1dd94f0c07751194b.dat deleted file mode 100644 index eff0f7d6cdc921b1639d10d2987a7c8db1833225..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 8846 zcmeHNZExE)5bkIH3PFfbXIoauFL|NY4ndM(1==P^vSKX?7_>~;MD#X^N|y!x@4F*K zS+*r7K$te`+Apmoz8vqKd!FN|r=)j4>|~Z4$6g+?NW|%j{@&f|5&M^4;ccts1vJa7(}=x^r#u>6&@dS3`K{ZQ z1%JFa%7pd)@XhPv*Owng7bi!j?~X65m)5S+-*=p$_2Px)TAvxaYRU0Q8VlwLHnFxw z854p>(`;D0%EtlsEI*Gt!Q;ppjpX8K?upKp9{V!NgJ4@Or3^qLwrDP9uxG?RqqRY4 zZFh7CZx*w+hjONzBW66?c~u$#)8#Tduck~~6qa?03G;djVdS4-&{;JnWg<@_Yinf( zwep#E;Og3?V-^m8_4VlYG~km<9j#0CJJ0{PJbJ$5C|ClP%|z?qB6R4CTy*uH*d{bh*VcWH=^K_gnH~S;51{IJv=47!G`=gih}?k z2oST0Os##H0$i{VCR5^&+xZ-pch%#_3-XD-a7Cwb6%7LQBFn>&rZ+fLzv#=*Kz2**MMkK+R2KQmYApSr-UK{?T{uBksV9O? zjR8ynnx$!+8d`HMSxqGb$Z*0^!A)f}SX(OToiIF8o8K(KaBzPZx+UOZ7m z1#UPyJ0d6N=Q{((aVk}}<_C0s5qMC2!TtudpjdgJh3eI!7Pg0wrue6v6EZQ2ClBWU z$@6%&N?k2e6&^Jz29%$$`BI|pHYRG}xO-^gy|Wc$Ad%Ms^n5}7G@Z&@)5BdNaSXPU zw~ITe>#*2+$s^LUibo2uR7GSN!jh>#7m1BG7PPnE-O6^Bl~lT0dB!G}Ddpzcy(?P0v4Opo zV9>K{YIfHp*P=bC`dp9PErMom$qBk9?UhfAv@~UkfzX#HF`=a3I`B`HkBzSS?dWsO zRRhDiDbbomrP`K)QTRy(I$5a?pWPnbhAAXYHHF}Fiov`sP78hiD`u*XzSc9Y?ayE# zplcfat$qFLMSYJ3Qsr2EzeTw&&hS{DFCIfqzvnuTUDN;Xcm!2-7G<5LaNSx~pB~q` K&JwdyH~$57Fv)iS diff --git a/docs/Saml/phpdoc-cache-dc/phpdoc-cache-file_4a753c0195a85783eb27cefbf98562d8.dat b/docs/Saml/phpdoc-cache-dc/phpdoc-cache-file_4a753c0195a85783eb27cefbf98562d8.dat deleted file mode 100644 index 62d68921f96bfdb768f8ca27c477f776f6bbbd22..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 11264 zcmeHNZExE)5bo#v3QcejCumyRvC~vpy9P;z4QQJzb_Q(gV9+w{aFr!jqPn?3{`;OI zsW)3r(pp|KAo=2$5|78{?w&gyed_EzckJoq^dxZO3HN0XzCYoS8;U9Y`=ju9_SJS; zP3J0do;miToky1}y0i}?XRqbhgM&t6#14jx4+b69dEVG_+oSfueq(gd-tVv$y{BhQ znN+iy9mhV3<>fj581qOzfeQ2zl!53dh(njt_hzSg;Mm{)fX5pfuE(OtI`#RRU@ZK8 zmrcBWPR7R7#)gHzr#n09)7r6KePSU^@X`q_HNy%9e{olu*Pg1+X&6Y1@u5{?Q0#C) z*m2-TGK^grS@M#XiG6GdUr50`@mcueLTBF!^r3ieh-**#T>*>^OHRVcA1WYw~DWct%v{&ne z<@3MGc9ffbsAgU-z;Zf}4BJwebi1e4#rYcx%hMoqSHpQDk%eHH36CN+=GKspJOjBi|dIhe^C z3!o|)$^*FMVFU>*4B4!{MLuK1Zdos078g?Ln5XsaoH}A;)xYDDshnjy-QKn`)6cE< z$JROb*sLpIh^;@ddWuiB#cPXu5&r@ib5VC8g%>%F0?-@5N8Sa$#5|nkVZ6?KGY&oI zQ7$7imaOMISevGMih1?z$5t%^^Rb1P$_<4nMlM*YW3ntK9 zZz$f^iNI%2XUbfD$UZ!E_K-Q2CamMY^AO}9LEBNe3fTh*MMyruWac!StLtl| zm8Kr{T`wM1C>E&@t10qjzN}7NEjRJY>f|=GzLZxhKtTcC+IQ^th==kVO$KaZ)#U~x zUGgOd^8Zy*7a*!pqL6<;gmRNTZO6&f<5ay=hm3X*Hb4+C7fTMD2A0*{G!j1ZlA-3h zY_7KkR+{oqimJ@hc5KS{$_`jzsU6Pry0d~QI*X>nfU(^slEm%Etb=nW zDX0v(`GCrVrX*gb_Y%dE2@92i$pgqlyn{hh!Az`^o23ihQL%(p;OHlw@Ue<;o@0(4 zk!-xW2dgLqswjO|rc1~YaD2opcDmG8dTjjujOy3CvnXGoDjxtr6~P7`e`ic#;L~O` zPQ!?=X|c#@;W^oNzG}A*LERdu#Hh(WVbfAufQ)phPlnO{$HOoPSBF_;l56@~li)Ol zCR|u>WIz+QEF7z| z>gtfFSb;9-A?a3LJThw+5ZNO{mU=TBv&dH2!A^N}8C4o@9?Z`9h$HFIX}FMr5-v2M zRE&z^j#Av##CO&8ZNyB`sQFHW(ydpL+gcQ8RR2@9xv$x6KKj0z7>YiV zZ5z%~YMr@2TvH@~k@ewiW&BMFT}%Gd7!~_I56MnJopyJsOLk;QAP#y^<*@2f5R1S~ zslS#Zloc|X_PSo6q}{6u{(qgx7Rr-iCM$+eX)=R^;#-wiXdhy~u(!O>RL(ixiifn; z!9ynd`V#jcla<}B-PWwkPTwHbr6;ssaovO#EN<&w)5+Eb>7qz7N3n>1;-TrPpny`cCuHJCWZ2UL-2IF!~a23j5#RC^qHNCo{XS{ z)5Ib;Db5iC(T6!RQw@nmb+NyG?=v*ES?Ekvej+ue7+o`F#|?mW<8fmi$WopzM;vy# zSIM;9O8v9CGegBiYlVl9^%TM1iaHtxi`1bEx=0;qyRV6$T3~`aQ-Gc5N~@RLO+B#0 z5|#i^x3EM8Vktu`B7N`JVI3WX2X-hcPpU60O4)%7dJ{XKY$-&4$_(lv7aofvXB_ci zFJz*+3&6PqeA}&NQc)%M5-n(b!zE~0RLx&Et@$1b7k6o%O^Up|bfmh>i=rdlNky0U zsD`6>P^r|)Z*jg^0xqfD$*ea-*loV83ie#E2~_{#2tUeL{r<(|G2N-eO?!m_Y&MJ= z+Yk6j6_pHC{BUHB7EC`JJ`NH}Vt>g`8}C|WL)eM_osa5X=$_iT?w%{|T&e#2L&X25 Ur}ai-vE(MR-VpK1ZB - - - - - -G - -cluster_Global - - - - - - - - -Global - - -\\OneLogin_Saml2_Response - -OneLogin_Saml2_Response - - -\\OneLogin_Saml2_Error - -OneLogin_Saml2_Error - - -\\Exception - -\Exception - - -\\OneLogin_Saml2_Error->\\Exception - - - - -\\OneLogin_Saml2_Metadata - -OneLogin_Saml2_Metadata - - -\\OneLogin_Saml2_LogoutRequest - -OneLogin_Saml2_LogoutRequest - - -\\OneLogin_Saml2_Constants - -OneLogin_Saml2_Constants - - -\\OneLogin_Saml2_LogoutResponse - -OneLogin_Saml2_LogoutResponse - - -\\OneLogin_Saml2_Auth - -OneLogin_Saml2_Auth - - -\\OneLogin_Saml2_Settings - -OneLogin_Saml2_Settings - - -\\OneLogin_Saml2_AuthnRequest - -OneLogin_Saml2_AuthnRequest - - -\\OneLogin_Saml2_Utils - -OneLogin_Saml2_Utils - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_Auth.html b/docs/Saml2/classes/OneLogin_Saml2_Auth.html deleted file mode 100644 index c1f12b09..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_Auth.html +++ /dev/null @@ -1,1143 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_Auth - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_Auth

      - - -

      Main class of PHP Toolkit

      -
      -
      - -
      - -
      - -

      Methods

      - -
      -

      Initializes the SP SAML instance.

      - 
      __construct(array $oldSettings = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $oldSettings

      - array

      Setting data

      -
      - -
      -
      -
      - -
      -

      Returns the settings info

      - 
      getSettings() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      The settings data.

      -
      -
      -
      - -
      -

      Set the strict mode active/disable

      - 
      setStrict(boolean $value) : array
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $value

      - boolean

      Strict parameter

      -
      - -

      Response

      - array

      The settings data.

      -
      -
      -
      - -
      -

      Process the SAML Response sent by the IdP.

      - 
      processResponse(string $requestId = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $requestId

      - string

      The ID of the AuthNRequest sent by this SP to the IdP

      -
      - -
      -
      -
      - -
      -

      Process the SAML Logout Response / Logout Request sent by the IdP.

      - 
      processSLO(boolean $keepLocalSession = false, string $requestId = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $keepLocalSession

      - boolean

      When false will destroy the local session, otherwise will destroy it

      -
      -
      -

      $requestId

      - string

      The ID of the LogoutRequest sent by this SP to the IdP

      -
      - -
      -
      -
      - -
      -

      Redirects the user to the url past by parameter -or to the url that we defined in our SSO Request.

      - 
      redirectTo(string $url = '', array $parameters = array())
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $url

      - string

      The target URL to redirect the user.

      -
      -
      -

      $parameters

      - array

      Extra parameters to be passed as part of the url

      -
      - -
      -
      -
      - -
      -

      Checks if the user is authenticated or not.

      - 
      isAuthenticated() : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - boolean

      True if the user is authenticated

      -
      -
      -
      - -
      -

      Returns the set of SAML attributes.

      - 
      getAttributes() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      Attributes of the user.

      -
      -
      -
      - -
      -

      Returns the nameID

      - 
      getNameId() : string
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The nameID of the assertion

      -
      -
      -
      - - -
      -

      Returns the SessionIndex

      - 
      getSessionIndex() : string
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The SessionIndex of the assertion

      -
      -
      -
      - - - -
      -

      Returns if there were any error

      - 
      getErrors() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      Errors

      -
      -
      -
      - - -
      -

      Returns the reason for the last error

      - 
      getLastErrorReason() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - String

      Error

      -
      -
      -
      - - -
      -

      Returns the requested SAML attribute

      - 
      getAttribute(string $name) : NULL || Array
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $name

      - string

      The requested attribute of the user.

      -
      - -

      Response

      - NULL

      || array Requested SAML attribute ($name).

      -
      -
      -
      - - - -
      -

      Initiates the SLO process.

      - 
      logout(string $returnTo = null, array $parameters = array(), string $nameId = null, string $sessionIndex = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $returnTo

      - string

      The target URL the user should be returned to after logout.

      -

      $parameters

      - array

      Extra parameters to be added to the GET.

      -

      $nameId

      - string

      The NameID that will be set in the LogoutRequest.

      -

      $sessionIndex

      - string

      The SessionIndex (taken from the SAML Response in the SSO process).

      -
      - -
      -
      -
      - -
      -

      Gets the SSO url.

      - 
      getSSOurl() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The url of the Single Sign On Service

      -
      -
      -
      - -
      -

      Gets the SLO url.

      - 
      getSLOurl() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The url of the Single Logout Service

      -
      -
      -
      - -
      -

      Generates the Signature for a SAML Request

      - 
      buildRequestSignature(string $samlRequest, string $relayState) : string
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $samlRequest

      - string

      The SAML Request

      -
      -
      -

      $relayState

      - string

      The RelayState

      -
      - -

      Response

      - string

      A base64 encoded signature

      -
      -
      -
      - -
      -

      Generates the Signature for a SAML Response

      - 
      buildResponseSignature(string $samlResponse, string $relayState) : string
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $samlResponse

      - string

      The SAML Response

      -
      -
      -

      $relayState

      - string

      The RelayState

      -
      - -

      Response

      - string

      A base64 encoded signature

      -
      -
      -
      - - -

      Properties

      - -
      -

      Settings data.

      - 
      _settings : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      User attributes data.

      - 
      _attributes : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      NameID

      - 
      _nameid : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - string -
      -
      -
      - -
      -

      If user is authenticated.

      - 
      _authenticated : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - boolean -
      -
      -
      - -
      -

      SessionIndex. When the user is logged, this stored the from the AuthnStatement of the SAML Response.

      - 
      _sessionIndex : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - boolean -
      -
      -
      - -
      -

      If any error.

      - 
      _errors : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      -
      -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_AuthnRequest.html b/docs/Saml2/classes/OneLogin_Saml2_AuthnRequest.html deleted file mode 100644 index a694857c..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_AuthnRequest.html +++ /dev/null @@ -1,385 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_AuthnRequest - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_AuthnRequest

      - - -

      SAML 2 Authentication Request

      -
      -
      - -
      - -
      - -

      Methods

      - -
      -

      Constructs the AuthnRequest object.

      - 
      __construct(\OneLogin_Saml2_Settings $settings, $forceAuthn = false, $isPassive = false)
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - \OneLogin_Saml2_Settings

      Settings

      -

      $forceAuthn

      - bool

      When true the AuthNReuqest will set the ForceAuthn='true'.

      -

      $isPassive

      - bool

      When true the AuthNReuqest will set the Ispassive='true'.

      -
      - -
      -
      -
      - -
      -

      Returns deflated, base64 encoded, unsigned AuthnRequest.

      - 
      getRequest()
      -
      -
      -
      -
      - - - - - - - - - - - - - - -
      - - -
      - - -
      - - -
      - - -
      -
      -
      - - -
      -

      Returns the AuthNRequest ID.

      - 
      getId()
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -

      Properties

      - -
      -

      Object that represents the setting info

      - 
      _settings : \OneLogin_Saml2_Settings
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \OneLogin_Saml2_Settings -
      -
      -
      - - -
      -

      SAML AuthNRequest ID.

      - 
      _id : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \OneLogin_Saml2_Settings -
      -
      -
      - - - -
      -

      SAML AuthNRequest string

      - 
      _authnRequest : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - string -
      -
      -
      -
      -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_Constants.html b/docs/Saml2/classes/OneLogin_Saml2_Constants.html deleted file mode 100644 index d3e4ff76..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_Constants.html +++ /dev/null @@ -1,1481 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_Constants - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_Constants

      - - -

      Constants of PHP Toolkit

      -
      -
      -

      Defines all required constants

      -
      - -
      - -

      Methods

      - -

      Constants

      - -
      -

      ALOWED_CLOCK_DRIFT

      - 
      ALOWED_CLOCK_DRIFT
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_EMAIL_ADDRESS

      - 
      NAMEID_EMAIL_ADDRESS
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_X509_SUBJECT_NAME

      - 
      NAMEID_X509_SUBJECT_NAME
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME

      - 
      NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_KERBEROS

      - 
      NAMEID_KERBEROS
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_ENTITY

      - 
      NAMEID_ENTITY
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_TRANSIENT

      - 
      NAMEID_TRANSIENT
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_PERSISTENT

      - 
      NAMEID_PERSISTENT
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NAMEID_ENCRYPTED

      - 
      NAMEID_ENCRYPTED
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      ATTRNAME_FORMAT_UNSPECIFIED

      - 
      ATTRNAME_FORMAT_UNSPECIFIED
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      ATTRNAME_FORMAT_URI

      - 
      ATTRNAME_FORMAT_URI
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      ATTRNAME_FORMAT_BASIC

      - 
      ATTRNAME_FORMAT_BASIC
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_SAML

      - 
      NS_SAML
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_SAMLP

      - 
      NS_SAMLP
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_SOAP

      - 
      NS_SOAP
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_MD

      - 
      NS_MD
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_XS

      - 
      NS_XS
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_XSI

      - 
      NS_XSI
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_XENC

      - 
      NS_XENC
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      NS_DS

      - 
      NS_DS
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      BINDING_HTTP_POST

      - 
      BINDING_HTTP_POST
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      BINDING_HTTP_REDIRECT

      - 
      BINDING_HTTP_REDIRECT
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      BINDING_HTTP_ARTIFACT

      - 
      BINDING_HTTP_ARTIFACT
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      BINDING_SOAP

      - 
      BINDING_SOAP
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      BINDING_DEFLATE

      - 
      BINDING_DEFLATE
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      AC_UNSPECIFIED

      - 
      AC_UNSPECIFIED
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      AC_PASSWORD

      - 
      AC_PASSWORD
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      AC_X509

      - 
      AC_X509
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      AC_SMARTCARD

      - 
      AC_SMARTCARD
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      AC_KERBEROS

      - 
      AC_KERBEROS
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      CM_BEARER

      - 
      CM_BEARER
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      CM_HOLDER_KEY

      - 
      CM_HOLDER_KEY
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      CM_SENDER_VOUCHES

      - 
      CM_SENDER_VOUCHES
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      STATUS_SUCCESS

      - 
      STATUS_SUCCESS
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      STATUS_REQUESTER

      - 
      STATUS_REQUESTER
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      STATUS_RESPONDER

      - 
      STATUS_RESPONDER
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      STATUS_VERSION_MISMATCH

      - 
      STATUS_VERSION_MISMATCH
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      STATUS_NO_PASSIVE

      - 
      STATUS_NO_PASSIVE
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      STATUS_PARTIAL_LOGOUT

      - 
      STATUS_PARTIAL_LOGOUT
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      STATUS_PROXY_COUNT_EXCEEDED

      - 
      STATUS_PROXY_COUNT_EXCEEDED
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_Error.html b/docs/Saml2/classes/OneLogin_Saml2_Error.html deleted file mode 100644 index 8d9851c0..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_Error.html +++ /dev/null @@ -1,641 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_Error - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_Error

      - - Extends \Exception - -

      Error class of PHP Toolkit

      -
      -
      -

      Defines the Error class

      -
      - -
      - -

      Methods

      - -
      -

      Constructor

      - 
      __construct(string $msg, integer $code, array $args = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $msg

      - string

      Describes the error.

      -
      -
      -

      $code

      - integer

      The code error (defined in the error class).

      -
      -
      -

      $args

      - array

      Arguments used in the message that describes the error.

      -
      - -
      -
      -
      - -

      Constants

      - -
      -

      SETTINGS_FILE_NOT_FOUND

      - 
      SETTINGS_FILE_NOT_FOUND
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SETTINGS_INVALID_SYNTAX

      - 
      SETTINGS_INVALID_SYNTAX
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SETTINGS_INVALID

      - 
      SETTINGS_INVALID
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      METADATA_SP_INVALID

      - 
      METADATA_SP_INVALID
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SP_CERTS_NOT_FOUND

      - 
      SP_CERTS_NOT_FOUND
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      REDIRECT_INVALID_URL

      - 
      REDIRECT_INVALID_URL
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      PUBLIC_CERT_FILE_NOT_FOUND

      - 
      PUBLIC_CERT_FILE_NOT_FOUND
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      PRIVATE_KEY_FILE_NOT_FOUND

      - 
      PRIVATE_KEY_FILE_NOT_FOUND
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SAML_RESPONSE_NOT_FOUND

      - 
      SAML_RESPONSE_NOT_FOUND
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SAML_LOGOUTMESSAGE_NOT_FOUND

      - 
      SAML_LOGOUTMESSAGE_NOT_FOUND
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SAML_LOGOUTREQUEST_INVALID

      - 
      SAML_LOGOUTREQUEST_INVALID
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SAML_LOGOUTRESPONSE_INVALID

      - 
      SAML_LOGOUTRESPONSE_INVALID
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      SAML_SINGLE_LOGOUT_NOT_SUPPORTED

      - 
      SAML_SINGLE_LOGOUT_NOT_SUPPORTED
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_LogoutRequest.html b/docs/Saml2/classes/OneLogin_Saml2_LogoutRequest.html deleted file mode 100644 index ef48384d..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_LogoutRequest.html +++ /dev/null @@ -1,635 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_LogoutRequest - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_LogoutRequest

      - - -

      SAML 2 Logout Request

      -
      -
      - -
      - -
      - -

      Methods

      - -
      -

      Constructs the Logout Request object.

      - 
      __construct(\OneLogin_Saml2_Settings $settings, string $request = null, string $nameId = null, string $sessionIndex = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - \OneLogin_Saml2_Settings

      Settings

      -

      $request

      - string

      A UUEncoded Logout Request

      -

      $nameId

      - string

      The NameID that will be set in the LogoutRequest.

      -

      $sessionIndex

      - string

      The SessionIndex (taken from the SAML Response in the SSO process)

      -
      - -
      -
      -
      - -
      -

      Returns the Logout Request defated, base64encoded, unsigned

      - 
      getRequest() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      Deflated base64 encoded Logout Request

      -
      -
      -
      - -
      -

      Returns the ID of the Logout Request.

      - 
      getID(string|\DOMDocument $request) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $request

      - string|\DOMDocument

      Logout Request Message

      -
      - -

      Response

      - string

      ID

      -
      -
      -
      - - -
      -

      After execute a validation process, if fails this method returns the cause.

      - 
      getError() : string
      -
      -
      -
      -
      - - - - - - -
      - - -
      - - -

      Response

      - string

      Error

      -
      -
      -
      - - -
      -

      Gets the NameID Data of the the Logout Request.

      - 
      getNameIdData(string|\DOMDocument $request, string $key = null) : array
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $request

      - string|\DOMDocument

      Logout Request Message

      -
      -
      -

      $key

      - string

      The SP key

      -
      - -

      Response

      - array

      Name ID Data (Value, Format, NameQualifier, SPNameQualifier)

      -
      -
      -
      - -
      -

      Gets the NameID of the Logout Request.

      - 
      getNameId(string|\DOMDocument $request, string $key = null) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $request

      - string|\DOMDocument

      Logout Request Message

      -
      -
      -

      $key

      - string

      The SP key

      -
      - -

      Response

      - string

      Name ID Value

      -
      -
      -
      - -
      -

      Gets the Issuer of the Logout Request.

      - 
      getIssuer(string|\DOMDocument $request) : string|null
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $request

      - string|\DOMDocument

      Logout Request Message

      -
      - -

      Response

      - string|null

      $issuer The Issuer

      -
      -
      -
      - -
      -

      Gets the SessionIndexes from the Logout Request.

      - 
      getSessionIndexes(string|\DOMDocument $request) : array
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $request

      - string|\DOMDocument

      Logout Request Message

      -
      - -

      Response

      - array

      The SessionIndex value

      -
      -
      -
      - - -
      -

      After execute a validation process, if fails this method returns the cause.

      - 
      getError() : string
      -
      -
      -
      -
      - -

      Response

      - string

      Cause

      -
      -
      -
      - - -
      -

      Checks if the Logout Request received is valid.

      - 
      isValid(\OneLogin_Saml2_Settings $settings, string|\DOMDocument $request, $debug = false) : boolean
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - \OneLogin_Saml2_Settings

      Settings

      -
      -
      -

      $request

      - string|\DOMDocument

      Logout Request decoded

      -
      -
      -

      $debug

      -

      -
      - -

      Response

      - boolean

      If the Logout Request is or not valid

      -
      -
      -
      -

      Properties

      - -
      -

      Object that represents the setting info

      - 
      _settings : \OneLogin_Saml2_Settings
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \OneLogin_Saml2_Settings -
      -
      -
      - -
      -

      SAML Logout Request

      - 
      _logoutRequest : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - string -
      -
      -
      -
      - - -
      -

      After execute a validation process, if it fails, this var contains the cause

      - 
      error : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - string -
      -
      -
      -
      -
      - -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_LogoutResponse.html b/docs/Saml2/classes/OneLogin_Saml2_LogoutResponse.html deleted file mode 100644 index fbcc883a..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_LogoutResponse.html +++ /dev/null @@ -1,600 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_LogoutResponse - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_LogoutResponse

      - - -

      SAML 2 Logout Response

      -
      -
      - -
      - -
      - -

      Methods

      - -
      -

      Constructs a Logout Response object (Initialize params from settings and if provided -load the Logout Response.

      - 
      __construct(\OneLogin_Saml2_Settings $settings, string|null $response = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - \OneLogin_Saml2_Settings

      Settings.

      -
      -
      -

      $response

      - string|null

      An UUEncoded SAML Logout response from the IdP.

      -
      - -
      -
      -
      - -
      -

      Gets the Issuer of the Logout Response.

      - 
      getIssuer() : string|null
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string|null

      $issuer The Issuer

      -
      -
      -
      - -
      -

      Gets the Status of the Logout Response.

      - 
      getStatus() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The Status

      -
      -
      -
      - - -
      -

      After execute a validation process, if fails this method returns the cause.

      - 
      getError() : string
      -
      -
      -
      -
      -

      Response

      - string

      Cause

      -
      -
      -
      - - -
      -

      Generates a Logout Response object.

      - 
      build(string $inResponseTo)
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $inResponseTo

      - string

      InResponseTo value for the Logout Response.

      -
      - -
      -
      -
      - -
      -

      Returns a Logout Response object.

      - 
      getResponse() : string
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      Logout Response deflated and base64 encoded

      -
      -
      -
      - - -
      -

      Determines if the SAML LogoutResponse is valid

      - 
      isValid(string $requestId = null) : bool
      -
      -
      -
      -
      - - - - - - - - - - -
      - throws - - - -
      - - -
      - -

      Arguments

      -
      -

      $requestId

      - string

      The ID of the LogoutRequest sent by this SP to the IdP

      -
      - -

      Response

      - bool

      Returns if the SAML LogoutResponse is or not valid

      -
      -
      -
      -
      - -
      -

      Extracts a node from the DOMDocument (Logout Response Menssage)

      - 
      _query(string $query) : \DOMNodeList
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $query

      - string

      Xpath Expresion

      -
      - -

      Response

      - \DOMNodeList

      The queried node

      -
      -
      -
      -
      -

      Properties

      - -
      -

      Object that represents the setting info

      - 
      _settings : \OneLogin_Saml2_Settings
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \OneLogin_Saml2_Settings -
      -
      -
      - -
      -

      The decoded, unprocessed XML response provided to the constructor.

      - 
      _logoutResponse : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - string -
      -
      -
      - -
      -

      A DOMDocument class loaded from the SAML LogoutResponse.

      - 
      document : \DomDocument
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \DomDocument -
      -
      -
      -
      - - -
      -

      After execute a validation process, if it fails, this var contains the cause

      - 
      _error : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - string -
      -
      -
      -
      - - - -
      -
      - - - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_Metadata.html b/docs/Saml2/classes/OneLogin_Saml2_Metadata.html deleted file mode 100644 index 862a0cd0..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_Metadata.html +++ /dev/null @@ -1,381 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_Metadata - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_Metadata

      - - -

      Metadata lib of PHP Toolkit

      -
      -
      - -
      - -
      - -

      Methods

      - -
      -

      Generates the metadata of the SP based on the settings

      - 
      builder(string $sp, string $authnsign = false, string $wsign = false, \DateTime $validUntil = null, \Timestamp $cacheDuration = null, array $contacts = array(), array $organization = array()) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $sp

      - string

      The SP data

      -
      -
      -

      $authnsign

      - string

      authnRequestsSigned attribute

      -
      -
      -

      $wsign

      - string

      wantAssertionsSigned attribute

      -
      -
      -

      $validUntil

      - \DateTime

      Metadata's valid time

      -
      -
      -

      $cacheDuration

      - \Timestamp

      Duration of the cache in seconds

      -
      -
      -

      $contacts

      - array

      Contacts info

      -
      -
      -

      $organization

      - array

      Organization ingo

      -
      - -

      Response

      - string

      SAML Metadata XML

      -
      -
      -
      - -
      -

      Signs the metadata with the key/cert provided

      - 
      signMetadata(string $metadata, string $key, string $cert) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $metadata

      - string

      SAML Metadata XML

      -
      -
      -

      $key

      - string

      x509 key

      -
      -
      -

      $cert

      - string

      x509 cert

      -
      - -

      Response

      - string

      Signed Metadata

      -
      -
      -
      - -
      -

      Adds the x509 descriptors (sign/encriptation) to the metadata -The same cert will be used for sign/encrypt

      - 
      addX509KeyDescriptors(string $metadata, string $cert, boolean $wantsEncrypted) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $metadata

      - string

      SAML Metadata XML

      -
      -
      -

      $cert

      - string

      x509 cert

      -
      -
      -

      $wantsEncrypted

      - boolean

      Whether to include the KeyDescriptor for encryption

      -
      - -

      Response

      - string

      Metadata with KeyDescriptors

      -
      -
      -
      - -

      Constants

      - -
      -

      TIME_VALID

      - 
      TIME_VALID
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -

      TIME_CACHED

      - 
      TIME_CACHED
      -
      -
      -
      -
      -
      - - - - - - - - - -
      - - -
      - - -
      -
      -
      -
      - -
      -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_Response.html b/docs/Saml2/classes/OneLogin_Saml2_Response.html deleted file mode 100644 index 3913cc0e..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_Response.html +++ /dev/null @@ -1,970 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_Response - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_Response

      - - -

      SAML 2 Authentication Response

      -
      -
      - -
      - -
      - -

      Methods

      - -
      -

      Constructs the SAML Response object.

      - 
      __construct(\OneLogin_Saml2_Settings $settings, string $response)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - \OneLogin_Saml2_Settings

      Settings.

      -
      -
      -

      $response

      - string

      A UUEncoded SAML response from the IdP.

      -
      - -
      -
      -
      - -
      -

      Determines if the SAML Response is valid using the certificate.

      - 
      isValid(string $requestId = null) : bool
      -
      -
      -
      -
      - - - - - - - - - -
      - throws -
      - -

      Arguments

      -
      -

      $requestId

      - string

      The ID of the AuthNRequest sent by this SP to the IdP

      -
      - -

      Response

      - bool

      Validate the document

      -
      -
      -
      - - -
      -

      Checks if the Status is success

      - 
      checkStatus()
      -
      -
      -
      -
      -
      - - - - - - - - - - - - - - - - - - -
      - throws - - -

      If status is not success

      -
      - - -
      - - -
      - - -
      - - -
      -
      -
      - -
      -

      Gets the audiences.

      - 
      getAudiences() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      @audience The valid audiences of the response

      -
      -
      -
      - -
      -

      Gets the Issuers (from Response and Assertion).

      - 
      getIssuers() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      @issuers The issuers of the assertion/response

      -
      -
      -
      - -
      -

      Gets the NameID Data provided by the SAML response from the IdP.

      - 
      getNameIdData() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      Name ID Data (Value, Format, NameQualifier, SPNameQualifier)

      -
      -
      -
      - -
      -

      Gets the NameID provided by the SAML response from the IdP.

      - 
      getNameId() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      Name ID Value

      -
      -
      -
      - -
      -

      Gets the SessionNotOnOrAfter from the AuthnStatement.

      - 
      getSessionNotOnOrAfter() : \DateTime|null
      -
      -
      -
      -
      -

      Could be used to set the local session expiration

      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - \DateTime|null

      The SessionNotOnOrAfter value

      -
      -
      -
      - -
      -

      Gets the SessionIndex from the AuthnStatement.

      - 
      getSessionIndex() : string|null
      -
      -
      -
      -
      -

      Could be used to be stored in the local session in order -to be used in a future Logout Request that the SP could -send to the SP, to set what specific session must be deleted

      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string|null

      The SessionIndex value

      -
      -
      -
      - -
      -

      Gets the Attributes from the AttributeStatement element.

      - 
      getAttributes() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      The attributes of the SAML Assertion

      -
      -
      -
      - -
      -

      Verifies that the document only contains a single Assertion (encrypted or not).

      - 
      validateNumAssertions() : bool
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - bool

      TRUE if the document passes.

      -
      -
      -
      - -
      -

      Verifies that the document is still valid according Conditions Element.

      - 
      validateTimestamps() : bool
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - bool

      -
      -
      -
      - - -
      -

      After execute a validation process, if fails this method returns the cause.

      - 
      getError() : string
      -
      -
      -
      -
      - -

      Response

      - string

      Cause

      -
      -
      -
      - - -
      -

      Extracts a node from the DOMDocument (Assertion).

      - 
      _queryAssertion(string $assertionXpath) : \DOMNodeList
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - throws - - - -
      - - -
      - -

      Arguments

      -
      -

      $assertionXpath

      - string

      Xpath Expresion

      -
      - -

      Response

      - \DOMNodeList

      The queried node

      -
      -
      -
      - -
      -

      Extracts nodes that match the query from the DOMDocument (Response Menssage)

      - 
      _query(string $query) : \DOMNodeList
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $query

      - string

      Xpath Expresion

      -
      - -

      Response

      - \DOMNodeList

      The queried nodes

      -
      -
      -
      - -
      -

      Decrypts the Assertion (DOMDocument)

      - 
      _decryptAssertion(string $dom) : \DOMDocument
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - throws - - - -
      - - -
      - -

      Arguments

      -
      -

      $dom

      - string

      DomDocument

      -
      - -

      Response

      - \DOMDocument

      Decrypted Assertion

      -
      -
      -
      - - -

      Properties

      - -
      -

      Settings

      - 
      _settings : \OneLogin_Saml2_Settings
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \OneLogin_Saml2_Settings -
      -
      -
      - -
      -

      The decoded, unprocessed XML response provided to the constructor.

      - 
      response : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - string -
      -
      -
      - -
      -

      A DOMDocument class loaded from the SAML Response.

      - 
      document : \DomDocument
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \DomDocument -
      -
      -
      - -
      -

      A DOMDocument class loaded from the SAML Response (Decrypted).

      - 
      decryptedDocument : \DomDocument
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - \DomDocument -
      -
      -
      - -
      -

      The response contains an encrypted assertion.

      - 
      encrypted : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - boolean -
      -
      -
      -
      -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_Settings.html b/docs/Saml2/classes/OneLogin_Saml2_Settings.html deleted file mode 100644 index 84778546..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_Settings.html +++ /dev/null @@ -1,1631 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_Settings - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_Settings

      - - -

      Configuration of the PHP Toolkit

      -
      -
      - -
      - -
      - -

      Methods

      - -
      -

      Initializes the settings: -- Sets the paths of the different folders -- Loads settings info from settings file or array/object provided

      - 
      __construct(array|object $settings = null)
      -
      -
      -
      -
      -
      - - - - - - - - - - - - - - -
      - exceptions - - -

      Throws error exception if any settings parameter is invalid

      -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - array|object

      SAML Toolkit Settings

      -
      - -
      -
      -
      - -
      -

      Sets the paths of the different folders

      - 
      _loadPaths()
      -
      -
      -
      -
      -
      - - - - - - - - - - - - - - -
      - - -
      - - -
      - - -
      - - -
      -
      -
      - -
      -

      Returns base path.

      - 
      getBasePath() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The base toolkit folder path

      -
      -
      -
      - -
      -

      Returns cert path.

      - 
      getCertPath() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The cert folder path

      -
      -
      -
      - -
      - -
      -

      Returns config path.

      - 
      getConfigPath() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The config folder path

      -
      -
      -
      - - -
      -

      Returns lib path.

      - 
      getLibPath() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The library folder path

      -
      -
      -
      - -
      -

      Returns external lib path.

      - 
      getExtLibPath() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The external library folder path

      -
      -
      -
      - -
      -

      Returns schema path.

      - 
      getSchemasPath() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      The external library folder path

      -
      -
      -
      - -
      -

      Loads settings info from a settings Array

      - 
      _loadSettingsFromArray(array $settings) : boolean
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - array

      SAML Toolkit Settings

      -
      - -

      Response

      - boolean

      True if the settings info is valid

      -
      -
      -
      - -
      -

      Loads settings info from the settings file

      - 
      _loadSettingsFromFile() : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - boolean

      True if the settings info is valid

      -
      -
      -
      - -
      -

      Add default values if the settings info is not complete

      - 
      _addDefaultValues()
      -
      -
      -
      -
      -
      - - - - - - - - - - - - - - -
      - - -
      - - -
      - - -
      - - -
      -
      -
      - -
      -

      Checks the settings info.

      - 
      checkSettings(array $settings) : array
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $settings

      - array

      Array with settings data

      -
      - -

      Response

      - array

      $errors Errors found on the settings data

      -
      -
      -
      - -
      -

      Checks if the x509 certs of the SP exists and are valid.

      - 
      checkSPCerts() : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - boolean

      -
      -
      -
      - -
      -

      Returns the x509 private key of the SP.

      - 
      getSPkey() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      SP private key

      -
      -
      -
      - -
      -

      Returns the x509 public cert of the SP.

      - 
      getSPcert() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      SP public cert

      -
      -
      -
      - -
      -

      Gets the IdP data.

      - 
      getIdPData() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      IdP info

      -
      -
      -
      - -
      -

      Gets the SP data.

      - 
      getSPData() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      SP info

      -
      -
      -
      - -
      -

      Gets security data.

      - 
      getSecurityData() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      SP info

      -
      -
      -
      - -
      -

      Gets contact data.

      - 
      getContacts() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      SP info

      -
      -
      -
      - -
      -

      Gets organization data.

      - 
      getOrganization() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      SP info

      -
      -
      -
      - -
      -

      Gets the SP metadata. The XML representation.

      - 
      getSPMetadata() : string
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      SP metadata (xml)

      -
      -
      -
      - -
      -

      Validates an XML SP Metadata.

      - 
      validateMetadata(string $xml) : Array
      -
      -
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $xml

      - string

      Metadata's XML that will be validate

      -
      - -

      Response

      - Array

      The list of found errors

      -
      -
      -
      - -
      -

      Formats the IdP cert.

      - 
      formatIdPCert()
      -
      -
      -
      -
      -
      - - - - - - - - - - - - - - -
      - - -
      - - -
      - - -
      - - -
      -
      -
      - - -
      -

      Formats the SP private key.

      - 
      formatSPKey()
      -
      -
      -
      -
      -
      - - - - - - - - - - - - - - -
      - - -
      - - -
      - - -
      - - -
      -
      -
      - - -
      -

      Formats the SP cert.

      - 
      formatSPCert()
      -
      -
      -
      -
      -
      - - - - - - - - - - - - - - -
      - - -
      - - -
      - - -
      - -
      -
      -
      - -
      -

      Returns an array with the errors, the array is empty when the settings is ok.

      - 
      getErrors() : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - array

      Errors

      -
      -
      -
      - -
      -

      Activates or deactivates the strict mode.

      - 
      setStrict(boolean $value)
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $value

      - boolean

      Strict parameter

      -
      - -
      -
      -
      - -
      -

      Returns if the 'strict' mode is active.

      - 
      isStrict() : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - boolean

      Strict parameter

      -
      -
      -
      - -
      -

      Returns if the debug is active.

      - 
      isDebugActive() : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - boolean

      Debug parameter

      -
      -
      -
      - - -

      Properties

      - -
      -

      List of paths.

      - 
      _paths : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      Strict. If active, PHP Toolkit will reject unsigned or unencrypted messages -if it expects them signed or encrypted. If not, the messages will be accepted -and some security issues will be also relaxed.

      - 
      _strict : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - boolean -
      -
      -
      - -
      -

      Activate debug mode

      - 
      _debug : boolean
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - boolean -
      -
      -
      - -
      -

      SP data.

      - 
      _sp : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      IdP data.

      - 
      _idp : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      Security Info related to the SP.

      - 
      _security : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      Setting contacts.

      - 
      _contacts : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      Setting organization.

      - 
      _organization : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      - -
      -

      Setting errors.

      - 
      _errors : array
      -
      -
      -
      -
      -
      - - - - - - - - - - -
      - var - - -
      - - -
      - -

      Type(s)

      - array -
      -
      -
      -
      -
      - - -
      -
      - - - - - - diff --git a/docs/Saml2/classes/OneLogin_Saml2_Utils.html b/docs/Saml2/classes/OneLogin_Saml2_Utils.html deleted file mode 100644 index bc525f63..00000000 --- a/docs/Saml2/classes/OneLogin_Saml2_Utils.html +++ /dev/null @@ -1,1259 +0,0 @@ - - - - - - SAML PHP Toolkit » \OneLogin_Saml2_Utils - - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - - -
      -
      -
      - - -
      -
      - - - - -
      - - - - -
      - -
      -
      -

      OneLogin_Saml2_Utils

      - - -

      Utils of PHP Toolkit

      -
      -
      -

      Defines several often used methods

      -
      - -
      - -

      Methods

      - -
      -

      Translates any string. Accepts args

      - 
      t(string $msg, array $args = array()) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $msg

      - string

      Message to be translated

      -
      -
      -

      $args

      - array

      Arguments

      -
      - -

      Response

      - string

      $translatedMsg Translated text

      -
      -
      -
      - -
      -

      This function attempts to validate an XML string against the specified schema.

      - 
      validateXML(string $xml, string $schema, boolean $debug = false) : string
      -
      - static
      -
      -
      -

      It will parse the string into a DOM document and validate this document against the schema.

      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $xml

      - string

      The XML string or document which should be validated.

      -
      -
      -

      $schema

      - string

      The schema filename which should be used.

      -
      -
      -

      $debug

      - boolean

      To disable/enable the debug mode

      -
      - -

      Response

      - string

      | DOMDocument $dom string that explains the problem or the DOMDocument

      -
      -
      -
      - -
      -

      Returns a x509 cert (adding header & footer if required).

      - 
      formatCert(string $cert, boolean $heads = true) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $cert

      - string

      A x509 unformated cert

      -
      -
      -

      $heads

      - boolean

      True if we want to include head and footer

      -
      - -

      Response

      - string

      $x509 Formated cert

      -
      -
      -
      - -
      -

      Returns a private key (adding header & footer if required).

      - 
      formatPrivateKey(string $key, boolean $heads = true) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $key

      - string

      A private key

      -
      -
      -

      $heads

      - boolean

      True if we want to include head and footer

      -
      - -

      Response

      - string

      $rsaKey Formated private key

      -
      -
      -
      - - - -
      -

      Executes a redirection to the provided url (or return the target url).

      - 
      redirect(string $url, array $parameters = array(), boolean $stay = false) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $url

      - string

      The target url

      -
      -
      -

      $parameters

      - array

      Extra parameters to be passed as part of the url

      -
      -
      -

      $stay

      - boolean

      True if we want to stay (returns the url string) False to redirect

      -
      - -

      Response

      - string

      $url

      -
      -
      -
      - -
      -

      Returns the protocol + the current host + the port (if different than -common ports).

      - 
      getSelfURLhost() : string
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      $url

      -
      -
      -
      - -
      -

      Returns the current host.

      - 
      getSelfHost() : string
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      $currentHost The current host

      -
      -
      -
      - -
      -

      Checks if https or http.

      - 
      isHTTPS() : boolean
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - boolean

      $isHttps False if https is not active

      -
      -
      -
      - -
      -

      Returns the URL of the current host + current view.

      - 
      getSelfURLNoQuery() : string
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      -
      -
      -
      - -
      -

      Returns the URL of the current host + current view + query.

      - 
      getSelfURL() : string
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      -
      -
      -
      - -
      -

      Generates an unique string (used for example as ID for assertions).

      - 
      generateUniqueID() : string
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - string

      A unique string

      -
      -
      -
      - -
      -

      Converts a UNIX timestamp to SAML2 timestamp on the form -yyyy-mm-ddThh:mm:ss(\.s+)?Z.

      - 
      parseTime2SAML(string $time) : \$timestamp
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $time

      - string

      The time we should convert (DateTime).

      -
      - -

      Response

      - \$timestamp

      SAML2 timestamp.

      -
      -
      -
      - -
      -

      Converts a SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z -to a UNIX timestamp. The sub-second part is ignored.

      - 
      parseSAML2Time(string $time) : \$timestamp
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $time

      - string

      The time we should convert (SAML Timestamp).

      -
      - -

      Response

      - \$timestamp

      Converted to a unix timestamp.

      -
      -
      -
      - -
      -

      Interprets a ISO8601 duration value relative to a given timestamp.

      - 
      parseDuration(string $duration, int $timestamp = null) : int
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $duration

      - string

      The duration, as a string.

      -
      -
      -

      $timestamp

      - int

      The unix timestamp we should apply the

      -
                           duration to. Optional, default to the
-                     current time.

      -
      - -

      Response

      - int

      The new timestamp, after the duration is applied.

      -
      -
      -
      - -
      -

      Compares 2 dates and returns the earliest.

      - 
      getExpireTime(string $cacheDuration = null, string $validUntil = null) : int
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $cacheDuration

      - string

      The duration, as a string.

      -
      -
      -

      $validUntil

      - string

      The valid until date, as a string or as a timestamp

      -
      - -

      Response

      - int

      $expireTime The expiration time.

      -
      -
      -
      - -
      -

      Extracts nodes from the DOMDocument.

      - 
      query(\DOMDocument $dom, string $query, \DomElement $context = null) : \DOMNodeList
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $dom

      - \DOMDocument

      The DOMDocument

      -
      -
      -

      $query

      - string

      Xpath Expresion

      -
      -
      -

      $context

      - \DomElement

      Context Node (DomElement)

      -
      - -

      Response

      - \DOMNodeList

      The queried nodes

      -
      -
      -
      - -
      -

      Checks if the session is started or not.

      - 
      isSessionStarted() : boolean
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - - -

      Response

      - boolean

      true if the sessíon is started

      -
      -
      -
      - -
      -

      Deletes the local session.

      - 
      deleteLocalSession()
      -
      - static
      -
      -
      -
      - - - - - - - - - - - - - - -
      - - -
      - - -
      - - -
      - - -
      -
      -
      - -
      -

      Calculates the fingerprint of a x509cert.

      - 
      calculateX509Fingerprint(string $x509cert) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $x509cert

      - string

      x509 cert

      -
      - -

      Response

      - string

      Formated fingerprint

      -
      -
      -
      - -
      -

      Formates a fingerprint.

      - 
      formatFingerPrint(string $fingerprint) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $fingerprint

      - string

      fingerprint

      -
      - -

      Response

      - string

      Formated fingerprint

      -
      -
      -
      - -
      -

      Generates a nameID.

      - 
      generateNameId(string $value, string $spnq, string $format, string $key = null) : string
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $value

      - string

      fingerprint

      -
      -
      -

      $spnq

      - string

      SP Name Qualifier

      -
      -
      -

      $format

      - string

      SP Format

      -
      -
      -

      $key

      - string

      SP Key to encrypt the nameID

      -
      - -

      Response

      - string

      $nameIDElement DOMElement | XMLSec nameID

      -
      -
      -
      - -
      -

      Gets Status from a Response.

      - 
      getStatus(\DomElement $dom) : array
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $dom

      - \DomElement

      The Response as XML

      -
      - -

      Response

      - array

      $status The Status, an array with the code and a message.

      -
      -
      -
      - -
      -

      Decrypts an encrypted element.

      - 
      decryptElement(\DOMElement $encryptedData, \XMLSecurityKey $inputKey) : \DOMElement
      -
      - static
      -
      -
      -
      - - - - - - -
      - - -
      - -

      Arguments

      -
      -

      $encryptedData

      - \DOMElement

      The encrypted data.

      -
      -
      -

      $inputKey

      - \XMLSecurityKey

      The decryption key.

      -
      - -

      Response

      - \DOMElement

      The decrypted element.

      -
      -
      -
      - - - -
      -

      Converts a XMLSecurityKey to the correct algorithm.

      - 
      castKey(XMLSecurityKey $key, $algorithm, $type = 'public')
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $key

      - XMLSecurityKey

      The key

      -
      -
      -

      $algorithm

      - string

      The desired algorithm

      -
      -
      -

      $type

      - string

      Public or private key, defaults to public.

      -
      - -
      -
      -
      - - - -
      -

      Adds signature key and senders certificate to an element (Message or Assertion).

      - 
      addSign(string|\DomDocument $xml, string $key, string $cert)
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $xml

      - string|\DomDocument

      The element we should sign

      -
      -
      -

      $key

      - string

      The private key

      -
      -
      -

      $cert

      - string

      The public

      -
      - -
      -
      -
      - -
      -

      Validates a signature (Message or Assertion).

      - 
      validateSign(string|\DomDocument $xml, string|null $cert = null, string|null $fingerprint = null)
      -
      - static
      -
      -
      -
      - - - - - - - - - - -
      - - -
      - - -
      - -

      Arguments

      -
      -

      $xml

      - string|\DomDocument

      The element we should validate

      -
      -
      -

      $cert

      - string|null

      The pubic cert

      -
      -
      -

      $fingerprint

      - string|null

      The fingerprint of the public cert

      -
      - -
      -
      -
      - - -
      -
      - - -
      -
      - -
      - - - - diff --git a/docs/Saml2/css/bootstrap-responsive.css b/docs/Saml2/css/bootstrap-responsive.css deleted file mode 100644 index 4b032cdb..00000000 --- a/docs/Saml2/css/bootstrap-responsive.css +++ /dev/null @@ -1,567 +0,0 @@ -/*! - * Bootstrap Responsive v2.0.0 - * - * Copyright 2012 Twitter, Inc - * Licensed under the Apache License v2.0 - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Designed and built with all the love in the world @twitter by @mdo and @fat. - */ -.hidden { - display: none; - visibility: hidden; -} -@media (max-width: 480px) { - .nav-collapse { - -webkit-transform: translate3d(0, 0, 0); - } - .page-header h1 small { - display: block; - line-height: 18px; - } - input[class*="span"], - select[class*="span"], - textarea[class*="span"], - .uneditable-input { - display: block; - width: 100%; - height: 28px; - /* Make inputs at least the height of their button counterpart */ - - /* Makes inputs behave like true block-level elements */ - - -webkit-box-sizing: border-box; - /* Older Webkit */ - - -moz-box-sizing: border-box; - /* Older FF */ - - -ms-box-sizing: border-box; - /* IE8 */ - - box-sizing: border-box; - /* CSS3 spec*/ - - } - .input-prepend input[class*="span"], .input-append input[class*="span"] { - width: auto; - } - input[type="checkbox"], input[type="radio"] { - border: 1px solid #ccc; - } - .form-horizontal .control-group > label { - float: none; - width: auto; - padding-top: 0; - text-align: left; - } - .form-horizontal .controls { - margin-left: 0; - } - .form-horizontal .control-list { - padding-top: 0; - } - .form-horizontal .form-actions { - padding-left: 10px; - padding-right: 10px; - } - .modal { - position: absolute; - top: 10px; - left: 10px; - right: 10px; - width: auto; - margin: 0; - } - .modal.fade.in { - top: auto; - } - .modal-header .close { - padding: 10px; - margin: -10px; - } - .carousel-caption { - position: static; - } -} -@media (max-width: 768px) { - .container { - width: auto; - padding: 0 20px; - } - .row-fluid { - width: 100%; - } - .row { - margin-left: 0; - } - .row > [class*="span"], .row-fluid > [class*="span"] { - float: none; - display: block; - width: auto; - margin: 0; - } -} -@media (min-width: 768px) and (max-width: 980px) { - .row { - margin-left: -20px; - *zoom: 1; - } - .row:before, .row:after { - display: table; - content: ""; - } - .row:after { - clear: both; - } - [class*="span"] { - float: left; - margin-left: 20px; - } - .span1 { - width: 42px; - } - .span2 { - width: 104px; - } - .span3 { - width: 166px; - } - .span4 { - width: 228px; - } - .span5 { - width: 290px; - } - .span6 { - width: 352px; - } - .span7 { - width: 414px; - } - .span8 { - width: 476px; - } - .span9 { - width: 538px; - } - .span10 { - width: 600px; - } - .span11 { - width: 662px; - } - .span12, .container { - width: 724px; - } - .offset1 { - margin-left: 82px; - } - .offset2 { - margin-left: 144px; - } - .offset3 { - margin-left: 206px; - } - .offset4 { - margin-left: 268px; - } - .offset5 { - margin-left: 330px; - } - .offset6 { - margin-left: 392px; - } - .offset7 { - margin-left: 454px; - } - .offset8 { - margin-left: 516px; - } - .offset9 { - margin-left: 578px; - } - .offset10 { - margin-left: 640px; - } - .offset11 { - margin-left: 702px; - } - .row-fluid { - width: 100%; - *zoom: 1; - } - .row-fluid:before, .row-fluid:after { - display: table; - content: ""; - } - .row-fluid:after { - clear: both; - } - .row-fluid > [class*="span"] { - float: left; - margin-left: 2.762430939%; - } - .row-fluid > [class*="span"]:first-child { - margin-left: 0; - } - .row-fluid .span1 { - width: 5.801104972%; - } - .row-fluid .span2 { - width: 14.364640883%; - } - .row-fluid .span3 { - width: 22.928176794%; - } - .row-fluid .span4 { - width: 31.491712705%; - } - .row-fluid .span5 { - width: 40.055248616%; - } - .row-fluid .span6 { - width: 48.618784527%; - } - .row-fluid .span7 { - width: 57.182320438000005%; - } - .row-fluid .span8 { - width: 65.74585634900001%; - } - .row-fluid .span9 { - width: 74.30939226%; - } - .row-fluid .span10 { - width: 82.87292817100001%; - } - .row-fluid .span11 { - width: 91.436464082%; - } - .row-fluid .span12 { - width: 99.999999993%; - } - input.span1, textarea.span1, .uneditable-input.span1 { - width: 32px; - } - input.span2, textarea.span2, .uneditable-input.span2 { - width: 94px; - } - input.span3, textarea.span3, .uneditable-input.span3 { - width: 156px; - } - input.span4, textarea.span4, .uneditable-input.span4 { - width: 218px; - } - input.span5, textarea.span5, .uneditable-input.span5 { - width: 280px; - } - input.span6, textarea.span6, .uneditable-input.span6 { - width: 342px; - } - input.span7, textarea.span7, .uneditable-input.span7 { - width: 404px; - } - input.span8, textarea.span8, .uneditable-input.span8 { - width: 466px; - } - input.span9, textarea.span9, .uneditable-input.span9 { - width: 528px; - } - input.span10, textarea.span10, .uneditable-input.span10 { - width: 590px; - } - input.span11, textarea.span11, .uneditable-input.span11 { - width: 652px; - } - input.span12, textarea.span12, .uneditable-input.span12 { - width: 714px; - } -} -@media (max-width: 980px) { - body { - padding-top: 0; - } - .navbar-fixed-top { - position: static; - margin-bottom: 18px; - } - .navbar-fixed-top .navbar-inner { - padding: 5px; - } - .navbar .container { - width: auto; - padding: 0; - } - .navbar .brand { - padding-left: 10px; - padding-right: 10px; - margin: 0 0 0 -5px; - } - .navbar .nav-collapse { - clear: left; - } - .navbar .nav { - float: none; - margin: 0 0 9px; - } - .navbar .nav > li { - float: none; - } - .navbar .nav > li > a { - margin-bottom: 2px; - } - .navbar .nav > .divider-vertical { - display: none; - } - .navbar .nav > li > a, .navbar .dropdown-menu a { - padding: 6px 15px; - font-weight: bold; - color: #999999; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; - } - .navbar .dropdown-menu li + li a { - margin-bottom: 2px; - } - .navbar .nav > li > a:hover, .navbar .dropdown-menu a:hover { - background-color: #222222; - } - .navbar .dropdown-menu { - position: static; - top: auto; - left: auto; - float: none; - display: block; - max-width: none; - margin: 0 15px; - padding: 0; - background-color: transparent; - border: none; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; - } - .navbar .dropdown-menu:before, .navbar .dropdown-menu:after { - display: none; - } - .navbar .dropdown-menu .divider { - display: none; - } - .navbar-form, .navbar-search { - float: none; - padding: 9px 15px; - margin: 9px 0; - border-top: 1px solid #222222; - border-bottom: 1px solid #222222; - -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.1); - -moz-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.1); - box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.1); - } - .navbar .nav.pull-right { - float: none; - margin-left: 0; - } - .navbar-static .navbar-inner { - padding-left: 10px; - padding-right: 10px; - } - .btn-navbar { - display: block; - } - .nav-collapse { - overflow: hidden; - height: 0; - } -} -@media (min-width: 980px) { - .nav-collapse.collapse { - height: auto !important; - } -} -@media (min-width: 1200px) { - .row { - margin-left: -30px; - *zoom: 1; - } - .row:before, .row:after { - display: table; - content: ""; - } - .row:after { - clear: both; - } - [class*="span"] { - float: left; - margin-left: 30px; - } - .span1 { - width: 70px; - } - .span2 { - width: 170px; - } - .span3 { - width: 270px; - } - .span4 { - width: 370px; - } - .span5 { - width: 470px; - } - .span6 { - width: 570px; - } - .span7 { - width: 670px; - } - .span8 { - width: 770px; - } - .span9 { - width: 870px; - } - .span10 { - width: 970px; - } - .span11 { - width: 1070px; - } - .span12, .container { - width: 1170px; - } - .offset1 { - margin-left: 130px; - } - .offset2 { - margin-left: 230px; - } - .offset3 { - margin-left: 330px; - } - .offset4 { - margin-left: 430px; - } - .offset5 { - margin-left: 530px; - } - .offset6 { - margin-left: 630px; - } - .offset7 { - margin-left: 730px; - } - .offset8 { - margin-left: 830px; - } - .offset9 { - margin-left: 930px; - } - .offset10 { - margin-left: 1030px; - } - .offset11 { - margin-left: 1130px; - } - .row-fluid { - width: 100%; - *zoom: 1; - } - .row-fluid:before, .row-fluid:after { - display: table; - content: ""; - } - .row-fluid:after { - clear: both; - } - .row-fluid > [class*="span"] { - float: left; - margin-left: 2.564102564%; - } - .row-fluid > [class*="span"]:first-child { - margin-left: 0; - } - .row-fluid .span1 { - width: 5.982905983%; - } - .row-fluid .span2 { - width: 14.529914530000001%; - } - .row-fluid .span3 { - width: 23.076923077%; - } - .row-fluid .span4 { - width: 31.623931624%; - } - .row-fluid .span5 { - width: 40.170940171000005%; - } - .row-fluid .span6 { - width: 48.717948718%; - } - .row-fluid .span7 { - width: 57.264957265%; - } - .row-fluid .span8 { - width: 65.81196581200001%; - } - .row-fluid .span9 { - width: 74.358974359%; - } - .row-fluid .span10 { - width: 82.905982906%; - } - .row-fluid .span11 { - width: 91.45299145300001%; - } - .row-fluid .span12 { - width: 100%; - } - input.span1, textarea.span1, .uneditable-input.span1 { - width: 60px; - } - input.span2, textarea.span2, .uneditable-input.span2 { - width: 160px; - } - input.span3, textarea.span3, .uneditable-input.span3 { - width: 260px; - } - input.span4, textarea.span4, .uneditable-input.span4 { - width: 360px; - } - input.span5, textarea.span5, .uneditable-input.span5 { - width: 460px; - } - input.span6, textarea.span6, .uneditable-input.span6 { - width: 560px; - } - input.span7, textarea.span7, .uneditable-input.span7 { - width: 660px; - } - input.span8, textarea.span8, .uneditable-input.span8 { - width: 760px; - } - input.span9, textarea.span9, .uneditable-input.span9 { - width: 860px; - } - input.span10, textarea.span10, .uneditable-input.span10 { - width: 960px; - } - input.span11, textarea.span11, .uneditable-input.span11 { - width: 1060px; - } - input.span12, textarea.span12, .uneditable-input.span12 { - width: 1160px; - } - .thumbnails { - margin-left: -30px; - } - .thumbnails > li { - margin-left: 30px; - } -} diff --git a/docs/Saml2/css/bootstrap-responsive.min.css b/docs/Saml2/css/bootstrap-responsive.min.css deleted file mode 100644 index bc3f2ab7..00000000 --- a/docs/Saml2/css/bootstrap-responsive.min.css +++ /dev/null @@ -1,3 +0,0 @@ - -.hidden{display:none;visibility:hidden;} -@media (max-width:480px){.nav-collapse{-webkit-transform:translate3d(0, 0, 0);} .page-header h1 small{display:block;line-height:18px;} input[class*="span"],select[class*="span"],textarea[class*="span"],.uneditable-input{display:block;width:100%;height:28px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;-ms-box-sizing:border-box;box-sizing:border-box;} .input-prepend input[class*="span"],.input-append input[class*="span"]{width:auto;} input[type="checkbox"],input[type="radio"]{border:1px solid #ccc;} .form-horizontal .control-group>label{float:none;width:auto;padding-top:0;text-align:left;} .form-horizontal .controls{margin-left:0;} .form-horizontal .control-list{padding-top:0;} .form-horizontal .form-actions{padding-left:10px;padding-right:10px;} .modal{position:absolute;top:10px;left:10px;right:10px;width:auto;margin:0;}.modal.fade.in{top:auto;} .modal-header .close{padding:10px;margin:-10px;} .carousel-caption{position:static;}}@media (max-width:768px){.container{width:auto;padding:0 20px;} .row-fluid{width:100%;} .row{margin-left:0;} .row>[class*="span"],.row-fluid>[class*="span"]{float:none;display:block;width:auto;margin:0;}}@media (min-width:768px) and (max-width:980px){.row{margin-left:-20px;*zoom:1;}.row:before,.row:after{display:table;content:"";} .row:after{clear:both;} [class*="span"]{float:left;margin-left:20px;} .span1{width:42px;} .span2{width:104px;} .span3{width:166px;} .span4{width:228px;} .span5{width:290px;} .span6{width:352px;} .span7{width:414px;} .span8{width:476px;} .span9{width:538px;} .span10{width:600px;} .span11{width:662px;} .span12,.container{width:724px;} .offset1{margin-left:82px;} .offset2{margin-left:144px;} .offset3{margin-left:206px;} .offset4{margin-left:268px;} .offset5{margin-left:330px;} .offset6{margin-left:392px;} .offset7{margin-left:454px;} .offset8{margin-left:516px;} .offset9{margin-left:578px;} .offset10{margin-left:640px;} .offset11{margin-left:702px;} .row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";} .row-fluid:after{clear:both;} .row-fluid>[class*="span"]{float:left;margin-left:2.762430939%;} .row-fluid>[class*="span"]:first-child{margin-left:0;} .row-fluid .span1{width:5.801104972%;} .row-fluid .span2{width:14.364640883%;} .row-fluid .span3{width:22.928176794%;} .row-fluid .span4{width:31.491712705%;} .row-fluid .span5{width:40.055248616%;} .row-fluid .span6{width:48.618784527%;} .row-fluid .span7{width:57.182320438000005%;} .row-fluid .span8{width:65.74585634900001%;} .row-fluid .span9{width:74.30939226%;} .row-fluid .span10{width:82.87292817100001%;} .row-fluid .span11{width:91.436464082%;} .row-fluid .span12{width:99.999999993%;} input.span1,textarea.span1,.uneditable-input.span1{width:32px;} input.span2,textarea.span2,.uneditable-input.span2{width:94px;} input.span3,textarea.span3,.uneditable-input.span3{width:156px;} input.span4,textarea.span4,.uneditable-input.span4{width:218px;} input.span5,textarea.span5,.uneditable-input.span5{width:280px;} input.span6,textarea.span6,.uneditable-input.span6{width:342px;} input.span7,textarea.span7,.uneditable-input.span7{width:404px;} input.span8,textarea.span8,.uneditable-input.span8{width:466px;} input.span9,textarea.span9,.uneditable-input.span9{width:528px;} input.span10,textarea.span10,.uneditable-input.span10{width:590px;} input.span11,textarea.span11,.uneditable-input.span11{width:652px;} input.span12,textarea.span12,.uneditable-input.span12{width:714px;}}@media (max-width:980px){body{padding-top:0;} .navbar-fixed-top{position:static;margin-bottom:18px;} .navbar-fixed-top .navbar-inner{padding:5px;} .navbar .container{width:auto;padding:0;} .navbar .brand{padding-left:10px;padding-right:10px;margin:0 0 0 -5px;} .navbar .nav-collapse{clear:left;} .navbar .nav{float:none;margin:0 0 9px;} .navbar .nav>li{float:none;} .navbar .nav>li>a{margin-bottom:2px;} .navbar .nav>.divider-vertical{display:none;} .navbar .nav>li>a,.navbar .dropdown-menu a{padding:6px 15px;font-weight:bold;color:#999999;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} .navbar .dropdown-menu li+li a{margin-bottom:2px;} .navbar .nav>li>a:hover,.navbar .dropdown-menu a:hover{background-color:#222222;} .navbar .dropdown-menu{position:static;top:auto;left:auto;float:none;display:block;max-width:none;margin:0 15px;padding:0;background-color:transparent;border:none;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} .navbar .dropdown-menu:before,.navbar .dropdown-menu:after{display:none;} .navbar .dropdown-menu .divider{display:none;} .navbar-form,.navbar-search{float:none;padding:9px 15px;margin:9px 0;border-top:1px solid #222222;border-bottom:1px solid #222222;-webkit-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.1);-moz-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.1);box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.1);} .navbar .nav.pull-right{float:none;margin-left:0;} .navbar-static .navbar-inner{padding-left:10px;padding-right:10px;} .btn-navbar{display:block;} .nav-collapse{overflow:hidden;height:0;}}@media (min-width:980px){.nav-collapse.collapse{height:auto !important;}}@media (min-width:1200px){.row{margin-left:-30px;*zoom:1;}.row:before,.row:after{display:table;content:"";} .row:after{clear:both;} [class*="span"]{float:left;margin-left:30px;} .span1{width:70px;} .span2{width:170px;} .span3{width:270px;} .span4{width:370px;} .span5{width:470px;} .span6{width:570px;} .span7{width:670px;} .span8{width:770px;} .span9{width:870px;} .span10{width:970px;} .span11{width:1070px;} .span12,.container{width:1170px;} .offset1{margin-left:130px;} .offset2{margin-left:230px;} .offset3{margin-left:330px;} .offset4{margin-left:430px;} .offset5{margin-left:530px;} .offset6{margin-left:630px;} .offset7{margin-left:730px;} .offset8{margin-left:830px;} .offset9{margin-left:930px;} .offset10{margin-left:1030px;} .offset11{margin-left:1130px;} .row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";} .row-fluid:after{clear:both;} .row-fluid>[class*="span"]{float:left;margin-left:2.564102564%;} .row-fluid>[class*="span"]:first-child{margin-left:0;} .row-fluid .span1{width:5.982905983%;} .row-fluid .span2{width:14.529914530000001%;} .row-fluid .span3{width:23.076923077%;} .row-fluid .span4{width:31.623931624%;} .row-fluid .span5{width:40.170940171000005%;} .row-fluid .span6{width:48.717948718%;} .row-fluid .span7{width:57.264957265%;} .row-fluid .span8{width:65.81196581200001%;} .row-fluid .span9{width:74.358974359%;} .row-fluid .span10{width:82.905982906%;} .row-fluid .span11{width:91.45299145300001%;} .row-fluid .span12{width:100%;} input.span1,textarea.span1,.uneditable-input.span1{width:60px;} input.span2,textarea.span2,.uneditable-input.span2{width:160px;} input.span3,textarea.span3,.uneditable-input.span3{width:260px;} input.span4,textarea.span4,.uneditable-input.span4{width:360px;} input.span5,textarea.span5,.uneditable-input.span5{width:460px;} input.span6,textarea.span6,.uneditable-input.span6{width:560px;} input.span7,textarea.span7,.uneditable-input.span7{width:660px;} input.span8,textarea.span8,.uneditable-input.span8{width:760px;} input.span9,textarea.span9,.uneditable-input.span9{width:860px;} input.span10,textarea.span10,.uneditable-input.span10{width:960px;} input.span11,textarea.span11,.uneditable-input.span11{width:1060px;} input.span12,textarea.span12,.uneditable-input.span12{width:1160px;} .thumbnails{margin-left:-30px;} .thumbnails>li{margin-left:30px;}} diff --git a/docs/Saml2/css/bootstrap.css b/docs/Saml2/css/bootstrap.css deleted file mode 100644 index 563050c0..00000000 --- a/docs/Saml2/css/bootstrap.css +++ /dev/null @@ -1,3370 +0,0 @@ -/*! - * Bootstrap v2.0.0 - * - * Copyright 2012 Twitter, Inc - * Licensed under the Apache License v2.0 - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Designed and built with all the love in the world @twitter by @mdo and @fat. - */ -article, -aside, -details, -figcaption, -figure, -footer, -header, -hgroup, -nav, -section { - display: block; -} -audio, canvas, video { - display: inline-block; - *display: inline; - *zoom: 1; -} -audio:not([controls]) { - display: none; -} -html { - font-size: 100%; - -webkit-text-size-adjust: 100%; - -ms-text-size-adjust: 100%; -} -a:focus { - outline: thin dotted; - outline: 5px auto -webkit-focus-ring-color; - outline-offset: -2px; -} -a:hover, a:active { - outline: 0; -} -sub, sup { - position: relative; - font-size: 75%; - line-height: 0; - vertical-align: baseline; -} -sup { - top: -0.5em; -} -sub { - bottom: -0.25em; -} -img { - max-width: 100%; - height: auto; - border: 0; - -ms-interpolation-mode: bicubic; -} -button, -input, -select, -textarea { - margin: 0; - font-size: 100%; - vertical-align: middle; -} -button, input { - *overflow: visible; - line-height: normal; -} -button::-moz-focus-inner, input::-moz-focus-inner { - padding: 0; - border: 0; -} -button, -input[type="button"], -input[type="reset"], -input[type="submit"] { - cursor: pointer; - -webkit-appearance: button; -} -input[type="search"] { - -webkit-appearance: textfield; - -webkit-box-sizing: content-box; - -moz-box-sizing: content-box; - box-sizing: content-box; -} -input[type="search"]::-webkit-search-decoration, input[type="search"]::-webkit-search-cancel-button { - -webkit-appearance: none; -} -textarea { - overflow: auto; - vertical-align: top; -} -body { - margin: 0; - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - line-height: 18px; - color: #333333; - background-color: #ffffff; -} -a { - color: #0088cc; - text-decoration: none; -} -a:hover { - color: #005580; - text-decoration: underline; -} -.row { - margin-left: -20px; - *zoom: 1; -} -.row:before, .row:after { - display: table; - content: ""; -} -.row:after { - clear: both; -} -[class*="span"] { - float: left; - margin-left: 20px; -} -.span1 { - width: 60px; -} -.span2 { - width: 140px; -} -.span3 { - width: 220px; -} -.span4 { - width: 300px; -} -.span5 { - width: 380px; -} -.span6 { - width: 460px; -} -.span7 { - width: 540px; -} -.span8 { - width: 620px; -} -.span9 { - width: 700px; -} -.span10 { - width: 780px; -} -.span11 { - width: 860px; -} -.span12, .container { - width: 940px; -} -.offset1 { - margin-left: 100px; -} -.offset2 { - margin-left: 180px; -} -.offset3 { - margin-left: 260px; -} -.offset4 { - margin-left: 340px; -} -.offset5 { - margin-left: 420px; -} -.offset6 { - margin-left: 500px; -} -.offset7 { - margin-left: 580px; -} -.offset8 { - margin-left: 660px; -} -.offset9 { - margin-left: 740px; -} -.offset10 { - margin-left: 820px; -} -.offset11 { - margin-left: 900px; -} -.row-fluid { - width: 100%; - *zoom: 1; -} -.row-fluid:before, .row-fluid:after { - display: table; - content: ""; -} -.row-fluid:after { - clear: both; -} -.row-fluid > [class*="span"] { - float: left; - margin-left: 2.127659574%; -} -.row-fluid > [class*="span"]:first-child { - margin-left: 0; -} -.row-fluid .span1 { - width: 6.382978723%; -} -.row-fluid .span2 { - width: 14.89361702%; -} -.row-fluid .span3 { - width: 23.404255317%; -} -.row-fluid .span4 { - width: 31.914893614%; -} -.row-fluid .span5 { - width: 40.425531911%; -} -.row-fluid .span6 { - width: 48.93617020799999%; -} -.row-fluid .span7 { - width: 57.446808505%; -} -.row-fluid .span8 { - width: 65.95744680199999%; -} -.row-fluid .span9 { - width: 74.468085099%; -} -.row-fluid .span10 { - width: 82.97872339599999%; -} -.row-fluid .span11 { - width: 91.489361693%; -} -.row-fluid .span12 { - width: 99.99999998999999%; -} -.container { - width: 940px; - margin-left: auto; - margin-right: auto; - *zoom: 1; -} -.container:before, .container:after { - display: table; - content: ""; -} -.container:after { - clear: both; -} -.container-fluid { - padding-left: 20px; - padding-right: 20px; - *zoom: 1; -} -.container-fluid:before, .container-fluid:after { - display: table; - content: ""; -} -.container-fluid:after { - clear: both; -} -p { - margin: 0 0 9px; - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - line-height: 18px; -} -p small { - font-size: 11px; - color: #999999; -} -.lead { - margin-bottom: 18px; - font-size: 20px; - font-weight: 200; - line-height: 27px; -} -h1, -h2, -h3, -h4, -h5, -h6 { - margin: 0; - font-weight: bold; - color: #333333; - text-rendering: optimizelegibility; -} -h1 small, -h2 small, -h3 small, -h4 small, -h5 small, -h6 small { - font-weight: normal; - color: #999999; -} -h1 { - font-size: 30px; - line-height: 36px; -} -h1 small { - font-size: 18px; -} -h2 { - font-size: 24px; - line-height: 36px; -} -h2 small { - font-size: 18px; -} -h3 { - line-height: 27px; - font-size: 18px; -} -h3 small { - font-size: 14px; -} -h4, h5, h6 { - line-height: 18px; -} -h4 { - font-size: 14px; -} -h4 small { - font-size: 12px; -} -h5 { - font-size: 12px; -} -h6 { - font-size: 11px; - color: #999999; - text-transform: uppercase; -} -.page-header { - padding-bottom: 17px; - margin: 18px 0; - border-bottom: 1px solid #eeeeee; -} -.page-header h1 { - line-height: 1; -} -ul, ol { - padding: 0; - margin: 0 0 9px 25px; -} -ul ul, -ul ol, -ol ol, -ol ul { - margin-bottom: 0; -} -ul { - list-style: disc; -} -ol { - list-style: decimal; -} -li { - line-height: 18px; -} -ul.unstyled { - margin-left: 0; - list-style: none; -} -dl { - margin-bottom: 18px; -} -dt, dd { - line-height: 18px; -} -dt { - font-weight: bold; -} -dd { - margin-left: 9px; -} -hr { - margin: 18px 0; - border: 0; - border-top: 1px solid #e5e5e5; - border-bottom: 1px solid #ffffff; -} -strong { - font-weight: bold; -} -em { - font-style: italic; -} -.muted { - color: #999999; -} -abbr { - font-size: 90%; - text-transform: uppercase; - border-bottom: 1px dotted #ddd; - cursor: help; -} -blockquote { - padding: 0 0 0 15px; - margin: 0 0 18px; - border-left: 5px solid #eeeeee; -} -blockquote p { - margin-bottom: 0; - font-size: 16px; - font-weight: 300; - line-height: 22.5px; -} -blockquote small { - display: block; - line-height: 18px; - color: #999999; -} -blockquote small:before { - content: '\2014 \00A0'; -} -blockquote.pull-right { - float: right; - padding-left: 0; - padding-right: 15px; - border-left: 0; - border-right: 5px solid #eeeeee; -} -blockquote.pull-right p, blockquote.pull-right small { - text-align: right; -} -q:before, -q:after, -blockquote:before, -blockquote:after { - content: ""; -} -address { - display: block; - margin-bottom: 18px; - line-height: 18px; - font-style: normal; -} -small { - font-size: 100%; -} -cite { - font-style: normal; -} -code, pre { - padding: 0 3px 2px; - font-family: Menlo, Monaco, "Courier New", monospace; - font-size: 12px; - color: #333333; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; -} -code { - padding: 3px 4px; - color: #d14; - background-color: #f7f7f9; - border: 1px solid #e1e1e8; -} -pre { - display: block; - padding: 8.5px; - margin: 0 0 9px; - font-size: 12px; - line-height: 18px; - background-color: #f5f5f5; - border: 1px solid #ccc; - border: 1px solid rgba(0, 0, 0, 0.15); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - white-space: pre; - white-space: pre-wrap; - word-break: break-all; -} -pre.prettyprint { - margin-bottom: 18px; -} -pre code { - padding: 0; - background-color: transparent; -} -form { - margin: 0 0 18px; -} -fieldset { - padding: 0; - margin: 0; - border: 0; -} -legend { - display: block; - width: 100%; - padding: 0; - margin-bottom: 27px; - font-size: 19.5px; - line-height: 36px; - color: #333333; - border: 0; - border-bottom: 1px solid #eee; -} -label, -input, -button, -select, -textarea { - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - font-weight: normal; - line-height: 18px; -} -label { - display: block; - margin-bottom: 5px; - color: #333333; -} -input, -textarea, -select, -.uneditable-input { - display: inline-block; - width: 210px; - height: 18px; - padding: 4px; - margin-bottom: 9px; - font-size: 13px; - line-height: 18px; - color: #555555; - border: 1px solid #ccc; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; -} -.uneditable-textarea { - width: auto; - height: auto; -} -label input, label textarea, label select { - display: block; -} -input[type="image"], input[type="checkbox"], input[type="radio"] { - width: auto; - height: auto; - padding: 0; - margin: 3px 0; - *margin-top: 0; - /* IE7 */ - - line-height: normal; - border: 0; - cursor: pointer; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -input[type="file"] { - padding: initial; - line-height: initial; - border: initial; - background-color: #ffffff; - background-color: initial; - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; -} -input[type="button"], input[type="reset"], input[type="submit"] { - width: auto; - height: auto; -} -select, input[type="file"] { - height: 28px; - /* In IE7, the height of the select element cannot be changed by height, only font-size */ - - *margin-top: 4px; - /* For IE7, add top margin to align select with labels */ - - line-height: 28px; -} -select { - width: 220px; - background-color: #ffffff; -} -select[multiple], select[size] { - height: auto; -} -input[type="image"] { - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; -} -textarea { - height: auto; -} -input[type="hidden"] { - display: none; -} -.radio, .checkbox { - padding-left: 18px; -} -.radio input[type="radio"], .checkbox input[type="checkbox"] { - float: left; - margin-left: -18px; -} -.controls > .radio:first-child, .controls > .checkbox:first-child { - padding-top: 5px; -} -.radio.inline, .checkbox.inline { - display: inline-block; - margin-bottom: 0; - vertical-align: middle; -} -.radio.inline + .radio.inline, .checkbox.inline + .checkbox.inline { - margin-left: 10px; -} -.controls > .radio.inline:first-child, .controls > .checkbox.inline:first-child { - padding-top: 0; -} -input, textarea { - -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075); - -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075); - box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075); - -webkit-transition: border linear 0.2s, box-shadow linear 0.2s; - -moz-transition: border linear 0.2s, box-shadow linear 0.2s; - -ms-transition: border linear 0.2s, box-shadow linear 0.2s; - -o-transition: border linear 0.2s, box-shadow linear 0.2s; - transition: border linear 0.2s, box-shadow linear 0.2s; -} -input:focus, textarea:focus { - border-color: rgba(82, 168, 236, 0.8); - -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075), 0 0 8px rgba(82, 168, 236, 0.6); - -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075), 0 0 8px rgba(82, 168, 236, 0.6); - box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075), 0 0 8px rgba(82, 168, 236, 0.6); - outline: 0; - outline: thin dotted \9; - /* IE6-8 */ - -} -input[type="file"]:focus, input[type="checkbox"]:focus, select:focus { - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; - outline: thin dotted; - outline: 5px auto -webkit-focus-ring-color; - outline-offset: -2px; -} -.input-mini { - width: 60px; -} -.input-small { - width: 90px; -} -.input-medium { - width: 150px; -} -.input-large { - width: 210px; -} -.input-xlarge { - width: 270px; -} -.input-xxlarge { - width: 530px; -} -input[class*="span"], -select[class*="span"], -textarea[class*="span"], -.uneditable-input { - float: none; - margin-left: 0; -} -input.span1, textarea.span1, .uneditable-input.span1 { - width: 50px; -} -input.span2, textarea.span2, .uneditable-input.span2 { - width: 130px; -} -input.span3, textarea.span3, .uneditable-input.span3 { - width: 210px; -} -input.span4, textarea.span4, .uneditable-input.span4 { - width: 290px; -} -input.span5, textarea.span5, .uneditable-input.span5 { - width: 370px; -} -input.span6, textarea.span6, .uneditable-input.span6 { - width: 450px; -} -input.span7, textarea.span7, .uneditable-input.span7 { - width: 530px; -} -input.span8, textarea.span8, .uneditable-input.span8 { - width: 610px; -} -input.span9, textarea.span9, .uneditable-input.span9 { - width: 690px; -} -input.span10, textarea.span10, .uneditable-input.span10 { - width: 770px; -} -input.span11, textarea.span11, .uneditable-input.span11 { - width: 850px; -} -input.span12, textarea.span12, .uneditable-input.span12 { - width: 930px; -} -input[disabled], -select[disabled], -textarea[disabled], -input[readonly], -select[readonly], -textarea[readonly] { - background-color: #f5f5f5; - border-color: #ddd; - cursor: not-allowed; -} -.control-group.warning > label, .control-group.warning .help-block, .control-group.warning .help-inline { - color: #c09853; -} -.control-group.warning input, .control-group.warning select, .control-group.warning textarea { - color: #c09853; - border-color: #c09853; -} -.control-group.warning input:focus, .control-group.warning select:focus, .control-group.warning textarea:focus { - border-color: #a47e3c; - -webkit-box-shadow: 0 0 6px #dbc59e; - -moz-box-shadow: 0 0 6px #dbc59e; - box-shadow: 0 0 6px #dbc59e; -} -.control-group.warning .input-prepend .add-on, .control-group.warning .input-append .add-on { - color: #c09853; - background-color: #fcf8e3; - border-color: #c09853; -} -.control-group.error > label, .control-group.error .help-block, .control-group.error .help-inline { - color: #b94a48; -} -.control-group.error input, .control-group.error select, .control-group.error textarea { - color: #b94a48; - border-color: #b94a48; -} -.control-group.error input:focus, .control-group.error select:focus, .control-group.error textarea:focus { - border-color: #953b39; - -webkit-box-shadow: 0 0 6px #d59392; - -moz-box-shadow: 0 0 6px #d59392; - box-shadow: 0 0 6px #d59392; -} -.control-group.error .input-prepend .add-on, .control-group.error .input-append .add-on { - color: #b94a48; - background-color: #f2dede; - border-color: #b94a48; -} -.control-group.success > label, .control-group.success .help-block, .control-group.success .help-inline { - color: #468847; -} -.control-group.success input, .control-group.success select, .control-group.success textarea { - color: #468847; - border-color: #468847; -} -.control-group.success input:focus, .control-group.success select:focus, .control-group.success textarea:focus { - border-color: #356635; - -webkit-box-shadow: 0 0 6px #7aba7b; - -moz-box-shadow: 0 0 6px #7aba7b; - box-shadow: 0 0 6px #7aba7b; -} -.control-group.success .input-prepend .add-on, .control-group.success .input-append .add-on { - color: #468847; - background-color: #dff0d8; - border-color: #468847; -} -input:focus:required:invalid, textarea:focus:required:invalid, select:focus:required:invalid { - color: #b94a48; - border-color: #ee5f5b; -} -input:focus:required:invalid:focus, textarea:focus:required:invalid:focus, select:focus:required:invalid:focus { - border-color: #e9322d; - -webkit-box-shadow: 0 0 6px #f8b9b7; - -moz-box-shadow: 0 0 6px #f8b9b7; - box-shadow: 0 0 6px #f8b9b7; -} -.form-actions { - padding: 17px 20px 18px; - margin-top: 18px; - margin-bottom: 18px; - background-color: #f5f5f5; - border-top: 1px solid #ddd; -} -.uneditable-input { - display: block; - background-color: #ffffff; - border-color: #eee; - -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.025); - -moz-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.025); - box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.025); - cursor: not-allowed; -} -:-moz-placeholder { - color: #999999; -} -::-webkit-input-placeholder { - color: #999999; -} -.help-block { - margin-top: 5px; - margin-bottom: 0; - color: #999999; -} -.help-inline { - display: inline-block; - *display: inline; - /* IE7 inline-block hack */ - - *zoom: 1; - margin-bottom: 9px; - vertical-align: middle; - padding-left: 5px; -} -.input-prepend, .input-append { - margin-bottom: 5px; - *zoom: 1; -} -.input-prepend:before, -.input-append:before, -.input-prepend:after, -.input-append:after { - display: table; - content: ""; -} -.input-prepend:after, .input-append:after { - clear: both; -} -.input-prepend input, -.input-append input, -.input-prepend .uneditable-input, -.input-append .uneditable-input { - -webkit-border-radius: 0 3px 3px 0; - -moz-border-radius: 0 3px 3px 0; - border-radius: 0 3px 3px 0; -} -.input-prepend input:focus, -.input-append input:focus, -.input-prepend .uneditable-input:focus, -.input-append .uneditable-input:focus { - position: relative; - z-index: 2; -} -.input-prepend .uneditable-input, .input-append .uneditable-input { - border-left-color: #ccc; -} -.input-prepend .add-on, .input-append .add-on { - float: left; - display: block; - width: auto; - min-width: 16px; - height: 18px; - margin-right: -1px; - padding: 4px 5px; - font-weight: normal; - line-height: 18px; - color: #999999; - text-align: center; - text-shadow: 0 1px 0 #ffffff; - background-color: #f5f5f5; - border: 1px solid #ccc; - -webkit-border-radius: 3px 0 0 3px; - -moz-border-radius: 3px 0 0 3px; - border-radius: 3px 0 0 3px; -} -.input-prepend .active, .input-append .active { - background-color: #a9dba9; - border-color: #46a546; -} -.input-prepend .add-on { - *margin-top: 1px; - /* IE6-7 */ - -} -.input-append input, .input-append .uneditable-input { - float: left; - -webkit-border-radius: 3px 0 0 3px; - -moz-border-radius: 3px 0 0 3px; - border-radius: 3px 0 0 3px; -} -.input-append .uneditable-input { - border-right-color: #ccc; -} -.input-append .add-on { - margin-right: 0; - margin-left: -1px; - -webkit-border-radius: 0 3px 3px 0; - -moz-border-radius: 0 3px 3px 0; - border-radius: 0 3px 3px 0; -} -.input-append input:first-child { - *margin-left: -160px; -} -.input-append input:first-child + .add-on { - *margin-left: -21px; -} -.search-query { - padding-left: 14px; - padding-right: 14px; - margin-bottom: 0; - -webkit-border-radius: 14px; - -moz-border-radius: 14px; - border-radius: 14px; -} -.form-search input, -.form-inline input, -.form-horizontal input, -.form-search textarea, -.form-inline textarea, -.form-horizontal textarea, -.form-search select, -.form-inline select, -.form-horizontal select, -.form-search .help-inline, -.form-inline .help-inline, -.form-horizontal .help-inline, -.form-search .uneditable-input, -.form-inline .uneditable-input, -.form-horizontal .uneditable-input { - display: inline-block; - margin-bottom: 0; -} -.form-search label, -.form-inline label, -.form-search .input-append, -.form-inline .input-append, -.form-search .input-prepend, -.form-inline .input-prepend { - display: inline-block; -} -.form-search .input-append .add-on, -.form-inline .input-prepend .add-on, -.form-search .input-append .add-on, -.form-inline .input-prepend .add-on { - vertical-align: middle; -} -.control-group { - margin-bottom: 9px; -} -.form-horizontal legend + .control-group { - margin-top: 18px; - -webkit-margin-top-collapse: separate; -} -.form-horizontal .control-group { - margin-bottom: 18px; - *zoom: 1; -} -.form-horizontal .control-group:before, .form-horizontal .control-group:after { - display: table; - content: ""; -} -.form-horizontal .control-group:after { - clear: both; -} -.form-horizontal .control-group > label { - float: left; - width: 140px; - padding-top: 5px; - text-align: right; -} -.form-horizontal .controls { - margin-left: 160px; -} -.form-horizontal .form-actions { - padding-left: 160px; -} -table { - max-width: 100%; - border-collapse: collapse; - border-spacing: 0; -} -.table { - width: 100%; - margin-bottom: 18px; -} -.table th, .table td { - padding: 8px; - line-height: 18px; - text-align: left; - border-top: 1px solid #ddd; -} -.table th { - font-weight: bold; - vertical-align: bottom; -} -.table td { - vertical-align: top; -} -.table thead:first-child tr th, .table thead:first-child tr td { - border-top: 0; -} -.table tbody + tbody { - border-top: 2px solid #ddd; -} -.table-condensed th, .table-condensed td { - padding: 4px 5px; -} -.table-bordered { - border: 1px solid #ddd; - border-collapse: separate; - *border-collapse: collapsed; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.table-bordered th + th, -.table-bordered td + td, -.table-bordered th + td, -.table-bordered td + th { - border-left: 1px solid #ddd; -} -.table-bordered thead:first-child tr:first-child th, .table-bordered tbody:first-child tr:first-child th, .table-bordered tbody:first-child tr:first-child td { - border-top: 0; -} -.table-bordered thead:first-child tr:first-child th:first-child, .table-bordered tbody:first-child tr:first-child td:first-child { - -webkit-border-radius: 4px 0 0 0; - -moz-border-radius: 4px 0 0 0; - border-radius: 4px 0 0 0; -} -.table-bordered thead:first-child tr:first-child th:last-child, .table-bordered tbody:first-child tr:first-child td:last-child { - -webkit-border-radius: 0 4px 0 0; - -moz-border-radius: 0 4px 0 0; - border-radius: 0 4px 0 0; -} -.table-bordered thead:last-child tr:last-child th:first-child, .table-bordered tbody:last-child tr:last-child td:first-child { - -webkit-border-radius: 0 0 0 4px; - -moz-border-radius: 0 0 0 4px; - border-radius: 0 0 0 4px; -} -.table-bordered thead:last-child tr:last-child th:last-child, .table-bordered tbody:last-child tr:last-child td:last-child { - -webkit-border-radius: 0 0 4px 0; - -moz-border-radius: 0 0 4px 0; - border-radius: 0 0 4px 0; -} -.table-striped tbody tr:nth-child(odd) td, .table-striped tbody tr:nth-child(odd) th { - background-color: #f9f9f9; -} -table .span1 { - float: none; - width: 44px; - margin-left: 0; -} -table .span2 { - float: none; - width: 124px; - margin-left: 0; -} -table .span3 { - float: none; - width: 204px; - margin-left: 0; -} -table .span4 { - float: none; - width: 284px; - margin-left: 0; -} -table .span5 { - float: none; - width: 364px; - margin-left: 0; -} -table .span6 { - float: none; - width: 444px; - margin-left: 0; -} -table .span7 { - float: none; - width: 524px; - margin-left: 0; -} -table .span8 { - float: none; - width: 604px; - margin-left: 0; -} -table .span9 { - float: none; - width: 684px; - margin-left: 0; -} -table .span10 { - float: none; - width: 764px; - margin-left: 0; -} -table .span11 { - float: none; - width: 844px; - margin-left: 0; -} -table .span12 { - float: none; - width: 924px; - margin-left: 0; -} -[class^="icon-"] { - display: inline-block; - width: 14px; - height: 14px; - vertical-align: text-top; - background-image: url(http://github.com/img/glyphicons-halflings.png); - background-position: 14px 14px; - background-repeat: no-repeat; - *margin-right: .3em; -} -[class^="icon-"]:last-child { - *margin-left: 0; -} -.icon-white { - background-image: url(http://github.com/img/glyphicons-halflings-white.png); -} -.icon-glass { - background-position: 0 0; -} -.icon-music { - background-position: -24px 0; -} -.icon-search { - background-position: -48px 0; -} -.icon-envelope { - background-position: -72px 0; -} -.icon-heart { - background-position: -96px 0; -} -.icon-star { - background-position: -120px 0; -} -.icon-star-empty { - background-position: -144px 0; -} -.icon-user { - background-position: -168px 0; -} -.icon-film { - background-position: -192px 0; -} -.icon-th-large { - background-position: -216px 0; -} -.icon-th { - background-position: -240px 0; -} -.icon-th-list { - background-position: -264px 0; -} -.icon-ok { - background-position: -288px 0; -} -.icon-remove { - background-position: -312px 0; -} -.icon-zoom-in { - background-position: -336px 0; -} -.icon-zoom-out { - background-position: -360px 0; -} -.icon-off { - background-position: -384px 0; -} -.icon-signal { - background-position: -408px 0; -} -.icon-cog { - background-position: -432px 0; -} -.icon-trash { - background-position: -456px 0; -} -.icon-home { - background-position: 0 -24px; -} -.icon-file { - background-position: -24px -24px; -} -.icon-time { - background-position: -48px -24px; -} -.icon-road { - background-position: -72px -24px; -} -.icon-download-alt { - background-position: -96px -24px; -} -.icon-download { - background-position: -120px -24px; -} -.icon-upload { - background-position: -144px -24px; -} -.icon-inbox { - background-position: -168px -24px; -} -.icon-play-circle { - background-position: -192px -24px; -} -.icon-repeat { - background-position: -216px -24px; -} -.icon-refresh { - background-position: -240px -24px; -} -.icon-list-alt { - background-position: -264px -24px; -} -.icon-lock { - background-position: -287px -24px; -} -.icon-flag { - background-position: -312px -24px; -} -.icon-headphones { - background-position: -336px -24px; -} -.icon-volume-off { - background-position: -360px -24px; -} -.icon-volume-down { - background-position: -384px -24px; -} -.icon-volume-up { - background-position: -408px -24px; -} -.icon-qrcode { - background-position: -432px -24px; -} -.icon-barcode { - background-position: -456px -24px; -} -.icon-tag { - background-position: 0 -48px; -} -.icon-tags { - background-position: -25px -48px; -} -.icon-book { - background-position: -48px -48px; -} -.icon-bookmark { - background-position: -72px -48px; -} -.icon-print { - background-position: -96px -48px; -} -.icon-camera { - background-position: -120px -48px; -} -.icon-font { - background-position: -144px -48px; -} -.icon-bold { - background-position: -167px -48px; -} -.icon-italic { - background-position: -192px -48px; -} -.icon-text-height { - background-position: -216px -48px; -} -.icon-text-width { - background-position: -240px -48px; -} -.icon-align-left { - background-position: -264px -48px; -} -.icon-align-center { - background-position: -288px -48px; -} -.icon-align-right { - background-position: -312px -48px; -} -.icon-align-justify { - background-position: -336px -48px; -} -.icon-list { - background-position: -360px -48px; -} -.icon-indent-left { - background-position: -384px -48px; -} -.icon-indent-right { - background-position: -408px -48px; -} -.icon-facetime-video { - background-position: -432px -48px; -} -.icon-picture { - background-position: -456px -48px; -} -.icon-pencil { - background-position: 0 -72px; -} -.icon-map-marker { - background-position: -24px -72px; -} -.icon-adjust { - background-position: -48px -72px; -} -.icon-tint { - background-position: -72px -72px; -} -.icon-edit { - background-position: -96px -72px; -} -.icon-share { - background-position: -120px -72px; -} -.icon-check { - background-position: -144px -72px; -} -.icon-move { - background-position: -168px -72px; -} -.icon-step-backward { - background-position: -192px -72px; -} -.icon-fast-backward { - background-position: -216px -72px; -} -.icon-backward { - background-position: -240px -72px; -} -.icon-play { - background-position: -264px -72px; -} -.icon-pause { - background-position: -288px -72px; -} -.icon-stop { - background-position: -312px -72px; -} -.icon-forward { - background-position: -336px -72px; -} -.icon-fast-forward { - background-position: -360px -72px; -} -.icon-step-forward { - background-position: -384px -72px; -} -.icon-eject { - background-position: -408px -72px; -} -.icon-chevron-left { - background-position: -432px -72px; -} -.icon-chevron-right { - background-position: -456px -72px; -} -.icon-plus-sign { - background-position: 0 -96px; -} -.icon-minus-sign { - background-position: -24px -96px; -} -.icon-remove-sign { - background-position: -48px -96px; -} -.icon-ok-sign { - background-position: -72px -96px; -} -.icon-question-sign { - background-position: -96px -96px; -} -.icon-info-sign { - background-position: -120px -96px; -} -.icon-screenshot { - background-position: -144px -96px; -} -.icon-remove-circle { - background-position: -168px -96px; -} -.icon-ok-circle { - background-position: -192px -96px; -} -.icon-ban-circle { - background-position: -216px -96px; -} -.icon-arrow-left { - background-position: -240px -96px; -} -.icon-arrow-right { - background-position: -264px -96px; -} -.icon-arrow-up { - background-position: -289px -96px; -} -.icon-arrow-down { - background-position: -312px -96px; -} -.icon-share-alt { - background-position: -336px -96px; -} -.icon-resize-full { - background-position: -360px -96px; -} -.icon-resize-small { - background-position: -384px -96px; -} -.icon-plus { - background-position: -408px -96px; -} -.icon-minus { - background-position: -433px -96px; -} -.icon-asterisk { - background-position: -456px -96px; -} -.icon-exclamation-sign { - background-position: 0 -120px; -} -.icon-gift { - background-position: -24px -120px; -} -.icon-leaf { - background-position: -48px -120px; -} -.icon-fire { - background-position: -72px -120px; -} -.icon-eye-open { - background-position: -96px -120px; -} -.icon-eye-close { - background-position: -120px -120px; -} -.icon-warning-sign { - background-position: -144px -120px; -} -.icon-plane { - background-position: -168px -120px; -} -.icon-calendar { - background-position: -192px -120px; -} -.icon-random { - background-position: -216px -120px; -} -.icon-comment { - background-position: -240px -120px; -} -.icon-magnet { - background-position: -264px -120px; -} -.icon-chevron-up { - background-position: -288px -120px; -} -.icon-chevron-down { - background-position: -313px -119px; -} -.icon-retweet { - background-position: -336px -120px; -} -.icon-shopping-cart { - background-position: -360px -120px; -} -.icon-folder-close { - background-position: -384px -120px; -} -.icon-folder-open { - background-position: -408px -120px; -} -.icon-resize-vertical { - background-position: -432px -119px; -} -.icon-resize-horizontal { - background-position: -456px -118px; -} -.dropdown { - position: relative; -} -.dropdown-toggle { - *margin-bottom: -3px; -} -.dropdown-toggle:active, .open .dropdown-toggle { - outline: 0; -} -.caret { - display: inline-block; - width: 0; - height: 0; - text-indent: -99999px; - *text-indent: 0; - vertical-align: top; - border-left: 4px solid transparent; - border-right: 4px solid transparent; - border-top: 4px solid #000000; - opacity: 0.3; - filter: alpha(opacity=30); - content: "\2193"; -} -.dropdown .caret { - margin-top: 8px; - margin-left: 2px; -} -.dropdown:hover .caret, .open.dropdown .caret { - opacity: 1; - filter: alpha(opacity=100); -} -.dropdown-menu { - position: absolute; - top: 100%; - left: 0; - z-index: 1000; - float: left; - display: none; - min-width: 160px; - max-width: 220px; - _width: 160px; - padding: 4px 0; - margin: 0; - list-style: none; - background-color: #ffffff; - border-color: #ccc; - border-color: rgba(0, 0, 0, 0.2); - border-style: solid; - border-width: 1px; - -webkit-border-radius: 0 0 5px 5px; - -moz-border-radius: 0 0 5px 5px; - border-radius: 0 0 5px 5px; - -webkit-box-shadow: 0 5px 10px rgba(0, 0, 0, 0.2); - -moz-box-shadow: 0 5px 10px rgba(0, 0, 0, 0.2); - box-shadow: 0 5px 10px rgba(0, 0, 0, 0.2); - -webkit-background-clip: padding-box; - -moz-background-clip: padding; - background-clip: padding-box; - *border-right-width: 2px; - *border-bottom-width: 2px; -} -.dropdown-menu.bottom-up { - top: auto; - bottom: 100%; - margin-bottom: 2px; -} -.dropdown-menu .divider { - height: 1px; - margin: 5px 1px; - overflow: hidden; - background-color: #e5e5e5; - border-bottom: 1px solid #ffffff; - *width: 100%; - *margin: -5px 0 5px; -} -.dropdown-menu a { - display: block; - padding: 3px 15px; - clear: both; - font-weight: normal; - line-height: 18px; - color: #555555; - white-space: nowrap; -} -.dropdown-menu li > a:hover, .dropdown-menu .active > a, .dropdown-menu .active > a:hover { - color: #ffffff; - text-decoration: none; - background-color: #0088cc; -} -.dropdown.open { - *z-index: 1000; -} -.dropdown.open .dropdown-toggle { - color: #ffffff; - background: #ccc; - background: rgba(0, 0, 0, 0.3); -} -.dropdown.open .dropdown-menu { - display: block; -} -.typeahead { - margin-top: 2px; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.well { - min-height: 20px; - padding: 19px; - margin-bottom: 20px; - background-color: #f5f5f5; - border: 1px solid #eee; - border: 1px solid rgba(0, 0, 0, 0.05); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); -} -.well blockquote { - border-color: #ddd; - border-color: rgba(0, 0, 0, 0.15); -} -.fade { - -webkit-transition: opacity 0.15s linear; - -moz-transition: opacity 0.15s linear; - -ms-transition: opacity 0.15s linear; - -o-transition: opacity 0.15s linear; - transition: opacity 0.15s linear; - opacity: 0; -} -.fade.in { - opacity: 1; -} -.collapse { - -webkit-transition: height 0.35s ease; - -moz-transition: height 0.35s ease; - -ms-transition: height 0.35s ease; - -o-transition: height 0.35s ease; - transition: height 0.35s ease; - position: relative; - overflow: hidden; - height: 0; -} -.collapse.in { - height: auto; -} -.close { - float: right; - font-size: 20px; - font-weight: bold; - line-height: 18px; - color: #000000; - text-shadow: 0 1px 0 #ffffff; - opacity: 0.2; - filter: alpha(opacity=20); -} -.close:hover { - color: #000000; - text-decoration: none; - opacity: 0.4; - filter: alpha(opacity=40); - cursor: pointer; -} -.btn { - display: inline-block; - padding: 4px 10px 4px; - font-size: 13px; - line-height: 18px; - color: #333333; - text-align: center; - text-shadow: 0 1px 1px rgba(255, 255, 255, 0.75); - background-color: #fafafa; - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), color-stop(25%, #ffffff), to(#e6e6e6)); - background-image: -webkit-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-image: -moz-linear-gradient(top, #ffffff, #ffffff 25%, #e6e6e6); - background-image: -ms-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-image: -o-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-image: linear-gradient(#ffffff, #ffffff 25%, #e6e6e6); - background-repeat: no-repeat; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#e6e6e6', GradientType=0); - border: 1px solid #ccc; - border-bottom-color: #bbb; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - cursor: pointer; - *margin-left: .3em; -} -.btn:first-child { - *margin-left: 0; -} -.btn:hover { - color: #333333; - text-decoration: none; - background-color: #e6e6e6; - background-position: 0 -15px; - -webkit-transition: background-position 0.1s linear; - -moz-transition: background-position 0.1s linear; - -ms-transition: background-position 0.1s linear; - -o-transition: background-position 0.1s linear; - transition: background-position 0.1s linear; -} -.btn:focus { - outline: thin dotted; - outline: 5px auto -webkit-focus-ring-color; - outline-offset: -2px; -} -.btn.active, .btn:active { - background-image: none; - -webkit-box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - background-color: #e6e6e6; - background-color: #d9d9d9 \9; - color: rgba(0, 0, 0, 0.5); - outline: 0; -} -.btn.disabled, .btn[disabled] { - cursor: default; - background-image: none; - background-color: #e6e6e6; - opacity: 0.65; - filter: alpha(opacity=65); - -webkit-box-shadow: none; - -moz-box-shadow: none; - box-shadow: none; -} -.btn-large { - padding: 9px 14px; - font-size: 15px; - line-height: normal; - -webkit-border-radius: 5px; - -moz-border-radius: 5px; - border-radius: 5px; -} -.btn-large .icon { - margin-top: 1px; -} -.btn-small { - padding: 5px 9px; - font-size: 11px; - line-height: 16px; -} -.btn-small .icon { - margin-top: -1px; -} -.btn-primary, -.btn-primary:hover, -.btn-warning, -.btn-warning:hover, -.btn-danger, -.btn-danger:hover, -.btn-success, -.btn-success:hover, -.btn-info, -.btn-info:hover { - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); - color: #ffffff; -} -.btn-primary.active, -.btn-warning.active, -.btn-danger.active, -.btn-success.active, -.btn-info.active { - color: rgba(255, 255, 255, 0.75); -} -.btn-primary { - background-color: #006dcc; - background-image: -moz-linear-gradient(top, #0088cc, #0044cc); - background-image: -ms-linear-gradient(top, #0088cc, #0044cc); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#0088cc), to(#0044cc)); - background-image: -webkit-linear-gradient(top, #0088cc, #0044cc); - background-image: -o-linear-gradient(top, #0088cc, #0044cc); - background-image: linear-gradient(top, #0088cc, #0044cc); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#0088cc', endColorstr='#0044cc', GradientType=0); - border-color: #0044cc #0044cc #002a80; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-primary:hover, -.btn-primary:active, -.btn-primary.active, -.btn-primary.disabled, -.btn-primary[disabled] { - background-color: #0044cc; -} -.btn-primary:active, .btn-primary.active { - background-color: #003399 \9; -} -.btn-warning { - background-color: #faa732; - background-image: -moz-linear-gradient(top, #fbb450, #f89406); - background-image: -ms-linear-gradient(top, #fbb450, #f89406); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#fbb450), to(#f89406)); - background-image: -webkit-linear-gradient(top, #fbb450, #f89406); - background-image: -o-linear-gradient(top, #fbb450, #f89406); - background-image: linear-gradient(top, #fbb450, #f89406); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fbb450', endColorstr='#f89406', GradientType=0); - border-color: #f89406 #f89406 #ad6704; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-warning:hover, -.btn-warning:active, -.btn-warning.active, -.btn-warning.disabled, -.btn-warning[disabled] { - background-color: #f89406; -} -.btn-warning:active, .btn-warning.active { - background-color: #c67605 \9; -} -.btn-danger { - background-color: #da4f49; - background-image: -moz-linear-gradient(top, #ee5f5b, #bd362f); - background-image: -ms-linear-gradient(top, #ee5f5b, #bd362f); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#bd362f)); - background-image: -webkit-linear-gradient(top, #ee5f5b, #bd362f); - background-image: -o-linear-gradient(top, #ee5f5b, #bd362f); - background-image: linear-gradient(top, #ee5f5b, #bd362f); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#bd362f', GradientType=0); - border-color: #bd362f #bd362f #802420; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-danger:hover, -.btn-danger:active, -.btn-danger.active, -.btn-danger.disabled, -.btn-danger[disabled] { - background-color: #bd362f; -} -.btn-danger:active, .btn-danger.active { - background-color: #942a25 \9; -} -.btn-success { - background-color: #5bb75b; - background-image: -moz-linear-gradient(top, #62c462, #51a351); - background-image: -ms-linear-gradient(top, #62c462, #51a351); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#51a351)); - background-image: -webkit-linear-gradient(top, #62c462, #51a351); - background-image: -o-linear-gradient(top, #62c462, #51a351); - background-image: linear-gradient(top, #62c462, #51a351); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#51a351', GradientType=0); - border-color: #51a351 #51a351 #387038; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-success:hover, -.btn-success:active, -.btn-success.active, -.btn-success.disabled, -.btn-success[disabled] { - background-color: #51a351; -} -.btn-success:active, .btn-success.active { - background-color: #408140 \9; -} -.btn-info { - background-color: #49afcd; - background-image: -moz-linear-gradient(top, #5bc0de, #2f96b4); - background-image: -ms-linear-gradient(top, #5bc0de, #2f96b4); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#2f96b4)); - background-image: -webkit-linear-gradient(top, #5bc0de, #2f96b4); - background-image: -o-linear-gradient(top, #5bc0de, #2f96b4); - background-image: linear-gradient(top, #5bc0de, #2f96b4); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#2f96b4', GradientType=0); - border-color: #2f96b4 #2f96b4 #1f6377; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); -} -.btn-info:hover, -.btn-info:active, -.btn-info.active, -.btn-info.disabled, -.btn-info[disabled] { - background-color: #2f96b4; -} -.btn-info:active, .btn-info.active { - background-color: #24748c \9; -} -button.btn, input[type="submit"].btn { - *padding-top: 2px; - *padding-bottom: 2px; -} -button.btn::-moz-focus-inner, input[type="submit"].btn::-moz-focus-inner { - padding: 0; - border: 0; -} -button.btn.large, input[type="submit"].btn.large { - *padding-top: 7px; - *padding-bottom: 7px; -} -button.btn.small, input[type="submit"].btn.small { - *padding-top: 3px; - *padding-bottom: 3px; -} -.btn-group { - position: relative; - *zoom: 1; - *margin-left: .3em; -} -.btn-group:before, .btn-group:after { - display: table; - content: ""; -} -.btn-group:after { - clear: both; -} -.btn-group:first-child { - *margin-left: 0; -} -.btn-group + .btn-group { - margin-left: 5px; -} -.btn-toolbar { - margin-top: 9px; - margin-bottom: 9px; -} -.btn-toolbar .btn-group { - display: inline-block; - *display: inline; - /* IE7 inline-block hack */ - - *zoom: 1; -} -.btn-group .btn { - position: relative; - float: left; - margin-left: -1px; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -.btn-group .btn:first-child { - margin-left: 0; - -webkit-border-top-left-radius: 4px; - -moz-border-radius-topleft: 4px; - border-top-left-radius: 4px; - -webkit-border-bottom-left-radius: 4px; - -moz-border-radius-bottomleft: 4px; - border-bottom-left-radius: 4px; -} -.btn-group .btn:last-child, .btn-group .dropdown-toggle { - -webkit-border-top-right-radius: 4px; - -moz-border-radius-topright: 4px; - border-top-right-radius: 4px; - -webkit-border-bottom-right-radius: 4px; - -moz-border-radius-bottomright: 4px; - border-bottom-right-radius: 4px; -} -.btn-group .btn.large:first-child { - margin-left: 0; - -webkit-border-top-left-radius: 6px; - -moz-border-radius-topleft: 6px; - border-top-left-radius: 6px; - -webkit-border-bottom-left-radius: 6px; - -moz-border-radius-bottomleft: 6px; - border-bottom-left-radius: 6px; -} -.btn-group .btn.large:last-child, .btn-group .large.dropdown-toggle { - -webkit-border-top-right-radius: 6px; - -moz-border-radius-topright: 6px; - border-top-right-radius: 6px; - -webkit-border-bottom-right-radius: 6px; - -moz-border-radius-bottomright: 6px; - border-bottom-right-radius: 6px; -} -.btn-group .btn:hover, -.btn-group .btn:focus, -.btn-group .btn:active, -.btn-group .btn.active { - z-index: 2; -} -.btn-group .dropdown-toggle:active, .btn-group.open .dropdown-toggle { - outline: 0; -} -.btn-group .dropdown-toggle { - padding-left: 8px; - padding-right: 8px; - -webkit-box-shadow: inset 1px 0 0 rgba(255, 255, 255, 0.125), inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 1px 0 0 rgba(255, 255, 255, 0.125), inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 1px 0 0 rgba(255, 255, 255, 0.125), inset 0 1px 0 rgba(255, 255, 255, 0.2), 0 1px 2px rgba(0, 0, 0, 0.05); - *padding-top: 5px; - *padding-bottom: 5px; -} -.btn-group.open { - *z-index: 1000; -} -.btn-group.open .dropdown-menu { - display: block; - margin-top: 1px; - -webkit-border-radius: 5px; - -moz-border-radius: 5px; - border-radius: 5px; -} -.btn-group.open .dropdown-toggle { - background-image: none; - -webkit-box-shadow: inset 0 1px 6px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: inset 0 1px 6px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: inset 0 1px 6px rgba(0, 0, 0, 0.15), 0 1px 2px rgba(0, 0, 0, 0.05); -} -.btn .caret { - margin-top: 7px; - margin-left: 0; -} -.btn:hover .caret, .open.btn-group .caret { - opacity: 1; - filter: alpha(opacity=100); -} -.btn-primary .caret, -.btn-danger .caret, -.btn-info .caret, -.btn-success .caret { - border-top-color: #ffffff; - opacity: 0.75; - filter: alpha(opacity=75); -} -.btn-small .caret { - margin-top: 4px; -} -.alert { - padding: 8px 35px 8px 14px; - margin-bottom: 18px; - text-shadow: 0 1px 0 rgba(255, 255, 255, 0.5); - background-color: #fcf8e3; - border: 1px solid #fbeed5; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.alert, .alert-heading { - color: #c09853; -} -.alert .close { - position: relative; - top: -2px; - right: -21px; - line-height: 18px; -} -.alert-success { - background-color: #dff0d8; - border-color: #d6e9c6; -} -.alert-success, .alert-success .alert-heading { - color: #468847; -} -.alert-danger, .alert-error { - background-color: #f2dede; - border-color: #eed3d7; -} -.alert-danger, -.alert-error, -.alert-danger .alert-heading, -.alert-error .alert-heading { - color: #b94a48; -} -.alert-info { - background-color: #d9edf7; - border-color: #bce8f1; -} -.alert-info, .alert-info .alert-heading { - color: #3a87ad; -} -.alert-block { - padding-top: 14px; - padding-bottom: 14px; -} -.alert-block > p, .alert-block > ul { - margin-bottom: 0; -} -.alert-block p + p { - margin-top: 5px; -} -.nav { - margin-left: 0; - margin-bottom: 18px; - list-style: none; -} -.nav > li > a { - display: block; -} -.nav > li > a:hover { - text-decoration: none; - background-color: #eeeeee; -} -.nav-list { - padding-left: 14px; - padding-right: 14px; - margin-bottom: 0; -} -.nav-list > li > a, .nav-list .nav-header { - display: block; - padding: 3px 15px; - margin-left: -15px; - margin-right: -15px; - text-shadow: 0 1px 0 rgba(255, 255, 255, 0.5); -} -.nav-list .nav-header { - font-size: 11px; - font-weight: bold; - line-height: 18px; - color: #999999; - text-transform: uppercase; -} - -.nav-list .nav-header * { - text-transform:none; -} - -.nav-list > li + .nav-header { - margin-top: 9px; -} -.nav-list .active > a, .nav-list .active > a:hover { - color: #ffffff; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.2); - background-color: #0088cc; -} -.nav-list [class^="icon-"] { - margin-right: 2px; -} -.nav-tabs, .nav-pills { - *zoom: 1; -} -.nav-tabs:before, -.nav-pills:before, -.nav-tabs:after, -.nav-pills:after { - display: table; - content: ""; -} -.nav-tabs:after, .nav-pills:after { - clear: both; -} -.nav-tabs > li, .nav-pills > li { - float: left; -} -.nav-tabs > li > a, .nav-pills > li > a { - padding-right: 12px; - padding-left: 12px; - margin-right: 2px; - line-height: 14px; -} -.nav-tabs { - border-bottom: 1px solid #ddd; -} -.nav-tabs > li { - margin-bottom: -1px; -} -.nav-tabs > li > a { - padding-top: 9px; - padding-bottom: 9px; - border: 1px solid transparent; - -webkit-border-radius: 4px 4px 0 0; - -moz-border-radius: 4px 4px 0 0; - border-radius: 4px 4px 0 0; -} -.nav-tabs > li > a:hover { - border-color: #eeeeee #eeeeee #dddddd; -} -.nav-tabs > .active > a, .nav-tabs > .active > a:hover { - color: #555555; - background-color: #ffffff; - border: 1px solid #ddd; - border-bottom-color: transparent; - cursor: default; -} -.nav-pills > li > a { - padding-top: 8px; - padding-bottom: 8px; - margin-top: 2px; - margin-bottom: 2px; - -webkit-border-radius: 5px; - -moz-border-radius: 5px; - border-radius: 5px; -} -.nav-pills .active > a, .nav-pills .active > a:hover { - color: #ffffff; - background-color: #0088cc; -} -.nav-stacked > li { - float: none; -} -.nav-stacked > li > a { - margin-right: 0; -} -.nav-tabs.nav-stacked { - border-bottom: 0; -} -.nav-tabs.nav-stacked > li > a { - border: 1px solid #ddd; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -.nav-tabs.nav-stacked > li:first-child > a { - -webkit-border-radius: 4px 4px 0 0; - -moz-border-radius: 4px 4px 0 0; - border-radius: 4px 4px 0 0; -} -.nav-tabs.nav-stacked > li:last-child > a { - -webkit-border-radius: 0 0 4px 4px; - -moz-border-radius: 0 0 4px 4px; - border-radius: 0 0 4px 4px; -} -.nav-tabs.nav-stacked > li > a:hover { - border-color: #ddd; - z-index: 2; -} -.nav-pills.nav-stacked > li > a { - margin-bottom: 3px; -} -.nav-pills.nav-stacked > li:last-child > a { - margin-bottom: 1px; -} -.nav-tabs .dropdown-menu, .nav-pills .dropdown-menu { - margin-top: 1px; - border-width: 1px; -} -.nav-pills .dropdown-menu { - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.nav-tabs .dropdown-toggle .caret, .nav-pills .dropdown-toggle .caret { - border-top-color: #0088cc; - margin-top: 6px; -} -.nav-tabs .dropdown-toggle:hover .caret, .nav-pills .dropdown-toggle:hover .caret { - border-top-color: #005580; -} -.nav-tabs .active .dropdown-toggle .caret, .nav-pills .active .dropdown-toggle .caret { - border-top-color: #333333; -} -.nav > .dropdown.active > a:hover { - color: #000000; - cursor: pointer; -} -.nav-tabs .open .dropdown-toggle, .nav-pills .open .dropdown-toggle, .nav > .open.active > a:hover { - color: #ffffff; - background-color: #999999; - border-color: #999999; -} -.nav .open .caret, .nav .open.active .caret, .nav .open a:hover .caret { - border-top-color: #ffffff; - opacity: 1; - filter: alpha(opacity=100); -} -.tabs-stacked .open > a:hover { - border-color: #999999; -} -.tabbable { - *zoom: 1; -} -.tabbable:before, .tabbable:after { - display: table; - content: ""; -} -.tabbable:after { - clear: both; -} -.tabs-below .nav-tabs, .tabs-right .nav-tabs, .tabs-left .nav-tabs { - border-bottom: 0; -} -.tab-content > .tab-pane, .pill-content > .pill-pane { - display: none; -} -.tab-content > .active, .pill-content > .active { - display: block; -} -.tabs-below .nav-tabs { - border-top: 1px solid #ddd; -} -.tabs-below .nav-tabs > li { - margin-top: -1px; - margin-bottom: 0; -} -.tabs-below .nav-tabs > li > a { - -webkit-border-radius: 0 0 4px 4px; - -moz-border-radius: 0 0 4px 4px; - border-radius: 0 0 4px 4px; -} -.tabs-below .nav-tabs > li > a:hover { - border-bottom-color: transparent; - border-top-color: #ddd; -} -.tabs-below .nav-tabs .active > a, .tabs-below .nav-tabs .active > a:hover { - border-color: transparent #ddd #ddd #ddd; -} -.tabs-left .nav-tabs > li, .tabs-right .nav-tabs > li { - float: none; -} -.tabs-left .nav-tabs > li > a, .tabs-right .nav-tabs > li > a { - min-width: 74px; - margin-right: 0; - margin-bottom: 3px; -} -.tabs-left .nav-tabs { - float: left; - margin-right: 19px; - border-right: 1px solid #ddd; -} -.tabs-left .nav-tabs > li > a { - margin-right: -1px; - -webkit-border-radius: 4px 0 0 4px; - -moz-border-radius: 4px 0 0 4px; - border-radius: 4px 0 0 4px; -} -.tabs-left .nav-tabs > li > a:hover { - border-color: #eeeeee #dddddd #eeeeee #eeeeee; -} -.tabs-left .nav-tabs .active > a, .tabs-left .nav-tabs .active > a:hover { - border-color: #ddd transparent #ddd #ddd; - *border-right-color: #ffffff; -} -.tabs-right .nav-tabs { - float: right; - margin-left: 19px; - border-left: 1px solid #ddd; -} -.tabs-right .nav-tabs > li > a { - margin-left: -1px; - -webkit-border-radius: 0 4px 4px 0; - -moz-border-radius: 0 4px 4px 0; - border-radius: 0 4px 4px 0; -} -.tabs-right .nav-tabs > li > a:hover { - border-color: #eeeeee #eeeeee #eeeeee #dddddd; -} -.tabs-right .nav-tabs .active > a, .tabs-right .nav-tabs .active > a:hover { - border-color: #ddd #ddd #ddd transparent; - *border-left-color: #ffffff; -} -.navbar { - overflow: visible; - margin-bottom: 18px; -} -.navbar-inner { - padding-left: 20px; - padding-right: 20px; - background-color: #2c2c2c; - background-image: -moz-linear-gradient(top, #333333, #222222); - background-image: -ms-linear-gradient(top, #333333, #222222); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222)); - background-image: -webkit-linear-gradient(top, #333333, #222222); - background-image: -o-linear-gradient(top, #333333, #222222); - background-image: linear-gradient(top, #333333, #222222); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25), inset 0 -1px 0 rgba(0, 0, 0, 0.1); - -moz-box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25), inset 0 -1px 0 rgba(0, 0, 0, 0.1); - box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25), inset 0 -1px 0 rgba(0, 0, 0, 0.1); -} -.btn-navbar { - display: none; - float: right; - padding: 7px 10px; - margin-left: 5px; - margin-right: 5px; - background-color: #2c2c2c; - background-image: -moz-linear-gradient(top, #333333, #222222); - background-image: -ms-linear-gradient(top, #333333, #222222); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222)); - background-image: -webkit-linear-gradient(top, #333333, #222222); - background-image: -o-linear-gradient(top, #333333, #222222); - background-image: linear-gradient(top, #333333, #222222); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0); - border-color: #222222 #222222 #000000; - border-color: rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25); - filter: progid:DXImageTransform.Microsoft.gradient(enabled = false); - -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.075); - -moz-box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.075); - box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 1px 0 rgba(255, 255, 255, 0.075); -} -.btn-navbar:hover, -.btn-navbar:active, -.btn-navbar.active, -.btn-navbar.disabled, -.btn-navbar[disabled] { - background-color: #222222; -} -.btn-navbar:active, .btn-navbar.active { - background-color: #080808 \9; -} -.btn-navbar .icon-bar { - display: block; - width: 18px; - height: 2px; - background-color: #f5f5f5; - -webkit-border-radius: 1px; - -moz-border-radius: 1px; - border-radius: 1px; - -webkit-box-shadow: 0 1px 0 rgba(0, 0, 0, 0.25); - -moz-box-shadow: 0 1px 0 rgba(0, 0, 0, 0.25); - box-shadow: 0 1px 0 rgba(0, 0, 0, 0.25); -} -.btn-navbar .icon-bar + .icon-bar { - margin-top: 3px; -} -.nav-collapse.collapse { - height: auto; -} -.navbar .brand:hover { - text-decoration: none; -} -.navbar .brand { - float: left; - display: block; - padding: 8px 20px 12px; - margin-left: -20px; - font-size: 20px; - font-weight: 200; - line-height: 1; - color: #ffffff; -} -.navbar .navbar-text { - margin-bottom: 0; - line-height: 40px; - color: #999999; -} -.navbar .navbar-text a:hover { - color: #ffffff; - background-color: transparent; -} -.navbar .btn, .navbar .btn-group { - margin-top: 5px; -} -.navbar .btn-group .btn { - margin-top: 0; -} -.navbar-form { - margin-bottom: 0; - *zoom: 1; -} -.navbar-form:before, .navbar-form:after { - display: table; - content: ""; -} -.navbar-form:after { - clear: both; -} -.navbar-form input, .navbar-form select { - display: inline-block; - margin-top: 5px; - margin-bottom: 0; -} -.navbar-form .radio, .navbar-form .checkbox { - margin-top: 5px; -} -.navbar-form input[type="image"], .navbar-form input[type="checkbox"], .navbar-form input[type="radio"] { - margin-top: 3px; -} -.navbar-search { - position: relative; - float: left; - margin-top: 6px; - margin-bottom: 0; -} -.navbar-search .search-query { - padding: 4px 9px; - font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; - font-size: 13px; - font-weight: normal; - line-height: 1; - color: #ffffff; - color: rgba(255, 255, 255, 0.75); - background: #666; - background: rgba(255, 255, 255, 0.3); - border: 1px solid #111; - -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1), 0 1px 0px rgba(255, 255, 255, 0.15); - -moz-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1), 0 1px 0px rgba(255, 255, 255, 0.15); - box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1), 0 1px 0px rgba(255, 255, 255, 0.15); - -webkit-transition: none; - -moz-transition: none; - -ms-transition: none; - -o-transition: none; - transition: none; -} -.navbar-search .search-query :-moz-placeholder { - color: #eeeeee; -} -.navbar-search .search-query::-webkit-input-placeholder { - color: #eeeeee; -} -.navbar-search .search-query:hover { - color: #ffffff; - background-color: #999999; - background-color: rgba(255, 255, 255, 0.5); -} -.navbar-search .search-query:focus, .navbar-search .search-query.focused { - padding: 5px 10px; - color: #333333; - text-shadow: 0 1px 0 #ffffff; - background-color: #ffffff; - border: 0; - -webkit-box-shadow: 0 0 3px rgba(0, 0, 0, 0.15); - -moz-box-shadow: 0 0 3px rgba(0, 0, 0, 0.15); - box-shadow: 0 0 3px rgba(0, 0, 0, 0.15); - outline: 0; -} -.navbar-fixed-top { - position: fixed; - top: 0; - right: 0; - left: 0; - z-index: 1030; -} -.navbar-fixed-top .navbar-inner { - padding-left: 0; - padding-right: 0; - -webkit-border-radius: 0; - -moz-border-radius: 0; - border-radius: 0; -} -.navbar .nav { - position: relative; - left: 0; - display: block; - float: left; - margin: 0 10px 0 0; -} -.navbar .nav.pull-right { - float: right; -} -.navbar .nav > li { - display: block; - float: left; -} -.navbar .nav > li > a { - float: none; - padding: 10px 10px 11px; - line-height: 19px; - color: #999999; - text-decoration: none; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); -} -.navbar .nav > li > a:hover { - background-color: transparent; - color: #ffffff; - text-decoration: none; -} -.navbar .nav .active > a, .navbar .nav .active > a:hover { - color: #ffffff; - text-decoration: none; - background-color: #222222; - background-color: rgba(0, 0, 0, 0.5); -} -.navbar .divider-vertical { - height: 40px; - width: 1px; - margin: 0 9px; - overflow: hidden; - background-color: #222222; - border-right: 1px solid #333333; -} -.navbar .nav.pull-right { - margin-left: 10px; - margin-right: 0; -} -.navbar .dropdown-menu { - margin-top: 1px; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.navbar .dropdown-menu:before { - content: ''; - display: inline-block; - border-left: 7px solid transparent; - border-right: 7px solid transparent; - border-bottom: 7px solid #ccc; - border-bottom-color: rgba(0, 0, 0, 0.2); - position: absolute; - top: -7px; - left: 9px; -} -.navbar .dropdown-menu:after { - content: ''; - display: inline-block; - border-left: 6px solid transparent; - border-right: 6px solid transparent; - border-bottom: 6px solid #ffffff; - position: absolute; - top: -6px; - left: 10px; -} -.navbar .nav .dropdown-toggle .caret, .navbar .nav .open.dropdown .caret { - border-top-color: #ffffff; -} -.navbar .nav .active .caret { - opacity: 1; - filter: alpha(opacity=100); -} -.navbar .nav .open > .dropdown-toggle, .navbar .nav .active > .dropdown-toggle, .navbar .nav .open.active > .dropdown-toggle { - background-color: transparent; -} -.navbar .nav .active > .dropdown-toggle:hover { - color: #ffffff; -} -.navbar .nav.pull-right .dropdown-menu { - left: auto; - right: 0; -} -.navbar .nav.pull-right .dropdown-menu:before { - left: auto; - right: 12px; -} -.navbar .nav.pull-right .dropdown-menu:after { - left: auto; - right: 13px; -} -.breadcrumb { - padding: 7px 14px; - margin: 0 0 18px; - background-color: #fbfbfb; - background-image: -moz-linear-gradient(top, #ffffff, #f5f5f5); - background-image: -ms-linear-gradient(top, #ffffff, #f5f5f5); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), to(#f5f5f5)); - background-image: -webkit-linear-gradient(top, #ffffff, #f5f5f5); - background-image: -o-linear-gradient(top, #ffffff, #f5f5f5); - background-image: linear-gradient(top, #ffffff, #f5f5f5); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f5f5f5', GradientType=0); - border: 1px solid #ddd; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; - -webkit-box-shadow: inset 0 1px 0 #ffffff; - -moz-box-shadow: inset 0 1px 0 #ffffff; - box-shadow: inset 0 1px 0 #ffffff; -} -.breadcrumb li { - display: inline; - text-shadow: 0 1px 0 #ffffff; -} -.breadcrumb .divider { - padding: 0 5px; - color: #999999; -} -.breadcrumb .active a { - color: #333333; -} -.pagination { - height: 36px; - margin: 18px 0; -} -.pagination ul { - display: inline-block; - *display: inline; - /* IE7 inline-block hack */ - - *zoom: 1; - margin-left: 0; - margin-bottom: 0; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; - -webkit-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05); - -moz-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05); - box-shadow: 0 1px 2px rgba(0, 0, 0, 0.05); -} -.pagination li { - display: inline; -} -.pagination a { - float: left; - padding: 0 14px; - line-height: 34px; - text-decoration: none; - border: 1px solid #ddd; - border-left-width: 0; -} -.pagination a:hover, .pagination .active a { - background-color: #f5f5f5; -} -.pagination .active a { - color: #999999; - cursor: default; -} -.pagination .disabled a, .pagination .disabled a:hover { - color: #999999; - background-color: transparent; - cursor: default; -} -.pagination li:first-child a { - border-left-width: 1px; - -webkit-border-radius: 3px 0 0 3px; - -moz-border-radius: 3px 0 0 3px; - border-radius: 3px 0 0 3px; -} -.pagination li:last-child a { - -webkit-border-radius: 0 3px 3px 0; - -moz-border-radius: 0 3px 3px 0; - border-radius: 0 3px 3px 0; -} -.pagination-centered { - text-align: center; -} -.pagination-right { - text-align: right; -} -.pager { - margin-left: 0; - margin-bottom: 18px; - list-style: none; - text-align: center; - *zoom: 1; -} -.pager:before, .pager:after { - display: table; - content: ""; -} -.pager:after { - clear: both; -} -.pager li { - display: inline; -} -.pager a { - display: inline-block; - padding: 5px 14px; - background-color: #fff; - border: 1px solid #ddd; - -webkit-border-radius: 15px; - -moz-border-radius: 15px; - border-radius: 15px; -} -.pager a:hover { - text-decoration: none; - background-color: #f5f5f5; -} -.pager .next a { - float: right; -} -.pager .previous a { - float: left; -} -.modal-open .dropdown-menu { - z-index: 2050; -} -.modal-open .dropdown.open { - *z-index: 2050; -} -.modal-open .popover { - z-index: 2060; -} -.modal-open .tooltip { - z-index: 2070; -} -.modal-backdrop { - position: fixed; - top: 0; - right: 0; - bottom: 0; - left: 0; - z-index: 1040; - background-color: #000000; -} -.modal-backdrop.fade { - opacity: 0; -} -.modal-backdrop, .modal-backdrop.fade.in { - opacity: 0.8; - filter: alpha(opacity=80); -} -.modal { - position: fixed; - top: 50%; - left: 50%; - z-index: 1050; - max-height: 500px; - overflow: auto; - width: 560px; - margin: -250px 0 0 -280px; - background-color: #ffffff; - border: 1px solid #999; - border: 1px solid rgba(0, 0, 0, 0.3); - *border: 1px solid #999; - /* IE6-7 */ - - -webkit-border-radius: 6px; - -moz-border-radius: 6px; - border-radius: 6px; - -webkit-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - -moz-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - -webkit-background-clip: padding-box; - -moz-background-clip: padding-box; - background-clip: padding-box; -} -.modal.fade { - -webkit-transition: opacity .3s linear, top .3s ease-out; - -moz-transition: opacity .3s linear, top .3s ease-out; - -ms-transition: opacity .3s linear, top .3s ease-out; - -o-transition: opacity .3s linear, top .3s ease-out; - transition: opacity .3s linear, top .3s ease-out; - top: -25%; -} -.modal.fade.in { - top: 50%; -} -.modal-header { - padding: 9px 15px; - border-bottom: 1px solid #eee; -} -.modal-header .close { - margin-top: 2px; -} -.modal-body { - padding: 15px; -} -.modal-footer { - padding: 14px 15px 15px; - margin-bottom: 0; - background-color: #f5f5f5; - border-top: 1px solid #ddd; - -webkit-border-radius: 0 0 6px 6px; - -moz-border-radius: 0 0 6px 6px; - border-radius: 0 0 6px 6px; - -webkit-box-shadow: inset 0 1px 0 #ffffff; - -moz-box-shadow: inset 0 1px 0 #ffffff; - box-shadow: inset 0 1px 0 #ffffff; - *zoom: 1; -} -.modal-footer:before, .modal-footer:after { - display: table; - content: ""; -} -.modal-footer:after { - clear: both; -} -.modal-footer .btn { - float: right; - margin-left: 5px; - margin-bottom: 0; -} -.tooltip { - position: absolute; - z-index: 1020; - display: block; - visibility: visible; - padding: 5px; - font-size: 11px; - opacity: 0; - filter: alpha(opacity=0); -} -.tooltip.in { - opacity: 0.8; - filter: alpha(opacity=80); -} -.tooltip.top { - margin-top: -2px; -} -.tooltip.right { - margin-left: 2px; -} -.tooltip.bottom { - margin-top: 2px; -} -.tooltip.left { - margin-left: -2px; -} -.tooltip.top .tooltip-arrow { - bottom: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-top: 5px solid #000000; -} -.tooltip.left .tooltip-arrow { - top: 50%; - right: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-left: 5px solid #000000; -} -.tooltip.bottom .tooltip-arrow { - top: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-bottom: 5px solid #000000; -} -.tooltip.right .tooltip-arrow { - top: 50%; - left: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-right: 5px solid #000000; -} -.tooltip-inner { - max-width: 200px; - padding: 3px 8px; - color: #ffffff; - text-align: center; - text-decoration: none; - background-color: #000000; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.tooltip-arrow { - position: absolute; - width: 0; - height: 0; -} -.popover { - position: absolute; - top: 0; - left: 0; - z-index: 1010; - display: none; - padding: 5px; -} -.popover.top { - margin-top: -5px; -} -.popover.right { - margin-left: 5px; -} -.popover.bottom { - margin-top: 5px; -} -.popover.left { - margin-left: -5px; -} -.popover.top .arrow { - bottom: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-top: 5px solid #000000; -} -.popover.right .arrow { - top: 50%; - left: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-right: 5px solid #000000; -} -.popover.bottom .arrow { - top: 0; - left: 50%; - margin-left: -5px; - border-left: 5px solid transparent; - border-right: 5px solid transparent; - border-bottom: 5px solid #000000; -} -.popover.left .arrow { - top: 50%; - right: 0; - margin-top: -5px; - border-top: 5px solid transparent; - border-bottom: 5px solid transparent; - border-left: 5px solid #000000; -} -.popover .arrow { - position: absolute; - width: 0; - height: 0; -} -.popover-inner { - padding: 3px; - width: 280px; - overflow: hidden; - background: #000000; - background: rgba(0, 0, 0, 0.8); - -webkit-border-radius: 6px; - -moz-border-radius: 6px; - border-radius: 6px; - -webkit-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - -moz-box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); - box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3); -} -.popover-title { - padding: 9px 15px; - line-height: 1; - background-color: #f5f5f5; - border-bottom: 1px solid #eee; - -webkit-border-radius: 3px 3px 0 0; - -moz-border-radius: 3px 3px 0 0; - border-radius: 3px 3px 0 0; -} -.popover-content { - padding: 14px; - background-color: #ffffff; - -webkit-border-radius: 0 0 3px 3px; - -moz-border-radius: 0 0 3px 3px; - border-radius: 0 0 3px 3px; - -webkit-background-clip: padding-box; - -moz-background-clip: padding-box; - background-clip: padding-box; -} -.popover-content p, .popover-content ul, .popover-content ol { - margin-bottom: 0; -} -.thumbnails { - margin-left: -20px; - list-style: none; - *zoom: 1; -} -.thumbnails:before, .thumbnails:after { - display: table; - content: ""; -} -.thumbnails:after { - clear: both; -} -.thumbnails > li { - float: left; - margin: 0 0 18px 20px; -} -.thumbnail { - display: block; - padding: 4px; - line-height: 1; - border: 1px solid #ddd; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; - -webkit-box-shadow: 0 1px 1px rgba(0, 0, 0, 0.075); - -moz-box-shadow: 0 1px 1px rgba(0, 0, 0, 0.075); - box-shadow: 0 1px 1px rgba(0, 0, 0, 0.075); -} -a.thumbnail:hover { - border-color: #0088cc; - -webkit-box-shadow: 0 1px 4px rgba(0, 105, 214, 0.25); - -moz-box-shadow: 0 1px 4px rgba(0, 105, 214, 0.25); - box-shadow: 0 1px 4px rgba(0, 105, 214, 0.25); -} -.thumbnail > img { - display: block; - max-width: 100%; - margin-left: auto; - margin-right: auto; -} -.thumbnail .caption { - padding: 9px; -} -.label { - padding: 1px 3px 2px; - font-size: 9.75px; - font-weight: bold; - color: #ffffff; - text-transform: uppercase; - background-color: #999999; - -webkit-border-radius: 3px; - -moz-border-radius: 3px; - border-radius: 3px; -} -.label-important { - background-color: #b94a48; -} -.label-warning { - background-color: #f89406; -} -.label-success { - background-color: #468847; -} -.label-info { - background-color: #3a87ad; -} -@-webkit-keyframes progress-bar-stripes { - from { - background-position: 0 0; - } - to { - background-position: 40px 0; - } -} -@-moz-keyframes progress-bar-stripes { - from { - background-position: 0 0; - } - to { - background-position: 40px 0; - } -} -@keyframes progress-bar-stripes { - from { - background-position: 0 0; - } - to { - background-position: 40px 0; - } -} -.progress { - overflow: hidden; - height: 18px; - margin-bottom: 18px; - background-color: #f7f7f7; - background-image: -moz-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: -ms-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#f5f5f5), to(#f9f9f9)); - background-image: -webkit-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: -o-linear-gradient(top, #f5f5f5, #f9f9f9); - background-image: linear-gradient(top, #f5f5f5, #f9f9f9); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#f5f5f5', endColorstr='#f9f9f9', GradientType=0); - -webkit-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1); - -moz-box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1); - box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.1); - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.progress .bar { - width: 0%; - height: 18px; - color: #ffffff; - font-size: 12px; - text-align: center; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); - background-color: #0e90d2; - background-image: -moz-linear-gradient(top, #149bdf, #0480be); - background-image: -ms-linear-gradient(top, #149bdf, #0480be); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#149bdf), to(#0480be)); - background-image: -webkit-linear-gradient(top, #149bdf, #0480be); - background-image: -o-linear-gradient(top, #149bdf, #0480be); - background-image: linear-gradient(top, #149bdf, #0480be); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#149bdf', endColorstr='#0480be', GradientType=0); - -webkit-box-shadow: inset 0 -1px 0 rgba(0, 0, 0, 0.15); - -moz-box-shadow: inset 0 -1px 0 rgba(0, 0, 0, 0.15); - box-shadow: inset 0 -1px 0 rgba(0, 0, 0, 0.15); - -webkit-box-sizing: border-box; - -moz-box-sizing: border-box; - box-sizing: border-box; - -webkit-transition: width 0.6s ease; - -moz-transition: width 0.6s ease; - -ms-transition: width 0.6s ease; - -o-transition: width 0.6s ease; - transition: width 0.6s ease; -} -.progress-striped .bar { - background-color: #62c462; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - -webkit-background-size: 40px 40px; - -moz-background-size: 40px 40px; - -o-background-size: 40px 40px; - background-size: 40px 40px; -} -.progress.active .bar { - -webkit-animation: progress-bar-stripes 2s linear infinite; - -moz-animation: progress-bar-stripes 2s linear infinite; - animation: progress-bar-stripes 2s linear infinite; -} -.progress-danger .bar { - background-color: #dd514c; - background-image: -moz-linear-gradient(top, #ee5f5b, #c43c35); - background-image: -ms-linear-gradient(top, #ee5f5b, #c43c35); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#c43c35)); - background-image: -webkit-linear-gradient(top, #ee5f5b, #c43c35); - background-image: -o-linear-gradient(top, #ee5f5b, #c43c35); - background-image: linear-gradient(top, #ee5f5b, #c43c35); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#c43c35', GradientType=0); -} -.progress-danger.progress-striped .bar { - background-color: #ee5f5b; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); -} -.progress-success .bar { - background-color: #5eb95e; - background-image: -moz-linear-gradient(top, #62c462, #57a957); - background-image: -ms-linear-gradient(top, #62c462, #57a957); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#57a957)); - background-image: -webkit-linear-gradient(top, #62c462, #57a957); - background-image: -o-linear-gradient(top, #62c462, #57a957); - background-image: linear-gradient(top, #62c462, #57a957); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#57a957', GradientType=0); -} -.progress-success.progress-striped .bar { - background-color: #62c462; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); -} -.progress-info .bar { - background-color: #4bb1cf; - background-image: -moz-linear-gradient(top, #5bc0de, #339bb9); - background-image: -ms-linear-gradient(top, #5bc0de, #339bb9); - background-image: -webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#339bb9)); - background-image: -webkit-linear-gradient(top, #5bc0de, #339bb9); - background-image: -o-linear-gradient(top, #5bc0de, #339bb9); - background-image: linear-gradient(top, #5bc0de, #339bb9); - background-repeat: repeat-x; - filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#339bb9', GradientType=0); -} -.progress-info.progress-striped .bar { - background-color: #5bc0de; - background-image: -webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent)); - background-image: -webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: -o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); - background-image: linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent); -} -.accordion { - margin-bottom: 18px; -} -.accordion-group { - margin-bottom: 2px; - border: 1px solid #e5e5e5; - -webkit-border-radius: 4px; - -moz-border-radius: 4px; - border-radius: 4px; -} -.accordion-heading { - border-bottom: 0; -} -.accordion-heading .accordion-toggle { - display: block; - padding: 8px 15px; -} -.accordion-inner { - padding: 9px 15px; - border-top: 1px solid #e5e5e5; -} -.carousel { - position: relative; - margin-bottom: 18px; - line-height: 1; -} -.carousel-inner { - overflow: hidden; - width: 100%; - position: relative; -} -.carousel .item { - display: none; - position: relative; - -webkit-transition: 0.6s ease-in-out left; - -moz-transition: 0.6s ease-in-out left; - -ms-transition: 0.6s ease-in-out left; - -o-transition: 0.6s ease-in-out left; - transition: 0.6s ease-in-out left; -} -.carousel .item > img { - display: block; - line-height: 1; -} -.carousel .active, .carousel .next, .carousel .prev { - display: block; -} -.carousel .active { - left: 0; -} -.carousel .next, .carousel .prev { - position: absolute; - top: 0; - width: 100%; -} -.carousel .next { - left: 100%; -} -.carousel .prev { - left: -100%; -} -.carousel .next.left, .carousel .prev.right { - left: 0; -} -.carousel .active.left { - left: -100%; -} -.carousel .active.right { - left: 100%; -} -.carousel-control { - position: absolute; - top: 40%; - left: 15px; - width: 40px; - height: 40px; - margin-top: -20px; - font-size: 60px; - font-weight: 100; - line-height: 30px; - color: #ffffff; - text-align: center; - background: #222222; - border: 3px solid #ffffff; - -webkit-border-radius: 23px; - -moz-border-radius: 23px; - border-radius: 23px; - opacity: 0.5; - filter: alpha(opacity=50); -} -.carousel-control.right { - left: auto; - right: 15px; -} -.carousel-control:hover { - color: #ffffff; - text-decoration: none; - opacity: 0.9; - filter: alpha(opacity=90); -} -.carousel-caption { - position: absolute; - left: 0; - right: 0; - bottom: 0; - padding: 10px 15px 5px; - background: #333333; - background: rgba(0, 0, 0, 0.75); -} -.carousel-caption h4, .carousel-caption p { - color: #ffffff; -} -.hero-unit { - padding: 60px; - margin-bottom: 30px; - background-color: #f5f5f5; - -webkit-border-radius: 6px; - -moz-border-radius: 6px; - border-radius: 6px; -} -.hero-unit h1 { - margin-bottom: 0; - font-size: 60px; - line-height: 1; - letter-spacing: -1px; -} -.hero-unit p { - font-size: 18px; - font-weight: 200; - line-height: 27px; -} -.pull-right { - float: right; -} -.pull-left { - float: left; -} -.hide { - display: none; -} -.show { - display: block; -} -.invisible { - visibility: hidden; -} diff --git a/docs/Saml2/css/bootstrap.min.css b/docs/Saml2/css/bootstrap.min.css deleted file mode 100644 index d5221249..00000000 --- a/docs/Saml2/css/bootstrap.min.css +++ /dev/null @@ -1,611 +0,0 @@ -article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block;} -audio,canvas,video{display:inline-block;*display:inline;*zoom:1;} -audio:not([controls]){display:none;} -html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;} -a:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} -a:hover,a:active{outline:0;} -sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline;} -sup{top:-0.5em;} -sub{bottom:-0.25em;} -img{max-width:100%;height:auto;border:0;-ms-interpolation-mode:bicubic;} -button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle;} -button,input{*overflow:visible;line-height:normal;} -button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0;} -button,input[type="button"],input[type="reset"],input[type="submit"]{cursor:pointer;-webkit-appearance:button;} -input[type="search"]{-webkit-appearance:textfield;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;} -input[type="search"]::-webkit-search-decoration,input[type="search"]::-webkit-search-cancel-button{-webkit-appearance:none;} -textarea{overflow:auto;vertical-align:top;} -body{margin:0;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;line-height:18px;color:#333333;background-color:#ffffff;} -a{color:#0088cc;text-decoration:none;} -a:hover{color:#005580;text-decoration:underline;} -.row{margin-left:-20px;*zoom:1;}.row:before,.row:after{display:table;content:"";} -.row:after{clear:both;} -[class*="span"]{float:left;margin-left:20px;} -.span1{width:60px;} -.span2{width:140px;} -.span3{width:220px;} -.span4{width:300px;} -.span5{width:380px;} -.span6{width:460px;} -.span7{width:540px;} -.span8{width:620px;} -.span9{width:700px;} -.span10{width:780px;} -.span11{width:860px;} -.span12,.container{width:940px;} -.offset1{margin-left:100px;} -.offset2{margin-left:180px;} -.offset3{margin-left:260px;} -.offset4{margin-left:340px;} -.offset5{margin-left:420px;} -.offset6{margin-left:500px;} -.offset7{margin-left:580px;} -.offset8{margin-left:660px;} -.offset9{margin-left:740px;} -.offset10{margin-left:820px;} -.offset11{margin-left:900px;} -.row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";} -.row-fluid:after{clear:both;} -.row-fluid>[class*="span"]{float:left;margin-left:2.127659574%;} -.row-fluid>[class*="span"]:first-child{margin-left:0;} -.row-fluid .span1{width:6.382978723%;} -.row-fluid .span2{width:14.89361702%;} -.row-fluid .span3{width:23.404255317%;} -.row-fluid .span4{width:31.914893614%;} -.row-fluid .span5{width:40.425531911%;} -.row-fluid .span6{width:48.93617020799999%;} -.row-fluid .span7{width:57.446808505%;} -.row-fluid .span8{width:65.95744680199999%;} -.row-fluid .span9{width:74.468085099%;} -.row-fluid .span10{width:82.97872339599999%;} -.row-fluid .span11{width:91.489361693%;} -.row-fluid .span12{width:99.99999998999999%;} -.container{width:940px;margin-left:auto;margin-right:auto;*zoom:1;}.container:before,.container:after{display:table;content:"";} -.container:after{clear:both;} -.container-fluid{padding-left:20px;padding-right:20px;*zoom:1;}.container-fluid:before,.container-fluid:after{display:table;content:"";} -.container-fluid:after{clear:both;} -p{margin:0 0 9px;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;line-height:18px;}p small{font-size:11px;color:#999999;} -.lead{margin-bottom:18px;font-size:20px;font-weight:200;line-height:27px;} -h1,h2,h3,h4,h5,h6{margin:0;font-weight:bold;color:#333333;text-rendering:optimizelegibility;}h1 small,h2 small,h3 small,h4 small,h5 small,h6 small{font-weight:normal;color:#999999;} -h1{font-size:30px;line-height:36px;}h1 small{font-size:18px;} -h2{font-size:24px;line-height:36px;}h2 small{font-size:18px;} -h3{line-height:27px;font-size:18px;}h3 small{font-size:14px;} -h4,h5,h6{line-height:18px;} -h4{font-size:14px;}h4 small{font-size:12px;} -h5{font-size:12px;} -h6{font-size:11px;color:#999999;text-transform:uppercase;} -.page-header{padding-bottom:17px;margin:18px 0;border-bottom:1px solid #eeeeee;} -.page-header h1{line-height:1;} -ul,ol{padding:0;margin:0 0 9px 25px;} -ul ul,ul ol,ol ol,ol ul{margin-bottom:0;} -ul{list-style:disc;} -ol{list-style:decimal;} -li{line-height:18px;} -ul.unstyled{margin-left:0;list-style:none;} -dl{margin-bottom:18px;} -dt,dd{line-height:18px;} -dt{font-weight:bold;} -dd{margin-left:9px;} -hr{margin:18px 0;border:0;border-top:1px solid #e5e5e5;border-bottom:1px solid #ffffff;} -strong{font-weight:bold;} -em{font-style:italic;} -.muted{color:#999999;} -abbr{font-size:90%;text-transform:uppercase;border-bottom:1px dotted #ddd;cursor:help;} -blockquote{padding:0 0 0 15px;margin:0 0 18px;border-left:5px solid #eeeeee;}blockquote p{margin-bottom:0;font-size:16px;font-weight:300;line-height:22.5px;} -blockquote small{display:block;line-height:18px;color:#999999;}blockquote small:before{content:'\2014 \00A0';} -blockquote.pull-right{float:right;padding-left:0;padding-right:15px;border-left:0;border-right:5px solid #eeeeee;}blockquote.pull-right p,blockquote.pull-right small{text-align:right;} -q:before,q:after,blockquote:before,blockquote:after{content:"";} -address{display:block;margin-bottom:18px;line-height:18px;font-style:normal;} -small{font-size:100%;} -cite{font-style:normal;} -code,pre{padding:0 3px 2px;font-family:Menlo,Monaco,"Courier New",monospace;font-size:12px;color:#333333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} -code{padding:3px 4px;color:#d14;background-color:#f7f7f9;border:1px solid #e1e1e8;} -pre{display:block;padding:8.5px;margin:0 0 9px;font-size:12px;line-height:18px;background-color:#f5f5f5;border:1px solid #ccc;border:1px solid rgba(0, 0, 0, 0.15);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;white-space:pre;white-space:pre-wrap;word-break:break-all;}pre.prettyprint{margin-bottom:18px;} -pre code{padding:0;background-color:transparent;} -form{margin:0 0 18px;} -fieldset{padding:0;margin:0;border:0;} -legend{display:block;width:100%;padding:0;margin-bottom:27px;font-size:19.5px;line-height:36px;color:#333333;border:0;border-bottom:1px solid #eee;} -label,input,button,select,textarea{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;font-weight:normal;line-height:18px;} -label{display:block;margin-bottom:5px;color:#333333;} -input,textarea,select,.uneditable-input{display:inline-block;width:210px;height:18px;padding:4px;margin-bottom:9px;font-size:13px;line-height:18px;color:#555555;border:1px solid #ccc;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} -.uneditable-textarea{width:auto;height:auto;} -label input,label textarea,label select{display:block;} -input[type="image"],input[type="checkbox"],input[type="radio"]{width:auto;height:auto;padding:0;margin:3px 0;*margin-top:0;line-height:normal;border:0;cursor:pointer;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -input[type="file"]{padding:initial;line-height:initial;border:initial;background-color:#ffffff;background-color:initial;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} -input[type="button"],input[type="reset"],input[type="submit"]{width:auto;height:auto;} -select,input[type="file"]{height:28px;*margin-top:4px;line-height:28px;} -select{width:220px;background-color:#ffffff;} -select[multiple],select[size]{height:auto;} -input[type="image"]{-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} -textarea{height:auto;} -input[type="hidden"]{display:none;} -.radio,.checkbox{padding-left:18px;} -.radio input[type="radio"],.checkbox input[type="checkbox"]{float:left;margin-left:-18px;} -.controls>.radio:first-child,.controls>.checkbox:first-child{padding-top:5px;} -.radio.inline,.checkbox.inline{display:inline-block;margin-bottom:0;vertical-align:middle;} -.radio.inline+.radio.inline,.checkbox.inline+.checkbox.inline{margin-left:10px;} -.controls>.radio.inline:first-child,.controls>.checkbox.inline:first-child{padding-top:0;} -input,textarea{-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-webkit-transition:border linear 0.2s,box-shadow linear 0.2s;-moz-transition:border linear 0.2s,box-shadow linear 0.2s;-ms-transition:border linear 0.2s,box-shadow linear 0.2s;-o-transition:border linear 0.2s,box-shadow linear 0.2s;transition:border linear 0.2s,box-shadow linear 0.2s;} -input:focus,textarea:focus{border-color:rgba(82, 168, 236, 0.8);-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 8px rgba(82, 168, 236, 0.6);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 8px rgba(82, 168, 236, 0.6);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 8px rgba(82, 168, 236, 0.6);outline:0;outline:thin dotted \9;} -input[type="file"]:focus,input[type="checkbox"]:focus,select:focus{-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} -.input-mini{width:60px;} -.input-small{width:90px;} -.input-medium{width:150px;} -.input-large{width:210px;} -.input-xlarge{width:270px;} -.input-xxlarge{width:530px;} -input[class*="span"],select[class*="span"],textarea[class*="span"],.uneditable-input{float:none;margin-left:0;} -input.span1,textarea.span1,.uneditable-input.span1{width:50px;} -input.span2,textarea.span2,.uneditable-input.span2{width:130px;} -input.span3,textarea.span3,.uneditable-input.span3{width:210px;} -input.span4,textarea.span4,.uneditable-input.span4{width:290px;} -input.span5,textarea.span5,.uneditable-input.span5{width:370px;} -input.span6,textarea.span6,.uneditable-input.span6{width:450px;} -input.span7,textarea.span7,.uneditable-input.span7{width:530px;} -input.span8,textarea.span8,.uneditable-input.span8{width:610px;} -input.span9,textarea.span9,.uneditable-input.span9{width:690px;} -input.span10,textarea.span10,.uneditable-input.span10{width:770px;} -input.span11,textarea.span11,.uneditable-input.span11{width:850px;} -input.span12,textarea.span12,.uneditable-input.span12{width:930px;} -input[disabled],select[disabled],textarea[disabled],input[readonly],select[readonly],textarea[readonly]{background-color:#f5f5f5;border-color:#ddd;cursor:not-allowed;} -.control-group.warning>label,.control-group.warning .help-block,.control-group.warning .help-inline{color:#c09853;} -.control-group.warning input,.control-group.warning select,.control-group.warning textarea{color:#c09853;border-color:#c09853;}.control-group.warning input:focus,.control-group.warning select:focus,.control-group.warning textarea:focus{border-color:#a47e3c;-webkit-box-shadow:0 0 6px #dbc59e;-moz-box-shadow:0 0 6px #dbc59e;box-shadow:0 0 6px #dbc59e;} -.control-group.warning .input-prepend .add-on,.control-group.warning .input-append .add-on{color:#c09853;background-color:#fcf8e3;border-color:#c09853;} -.control-group.error>label,.control-group.error .help-block,.control-group.error .help-inline{color:#b94a48;} -.control-group.error input,.control-group.error select,.control-group.error textarea{color:#b94a48;border-color:#b94a48;}.control-group.error input:focus,.control-group.error select:focus,.control-group.error textarea:focus{border-color:#953b39;-webkit-box-shadow:0 0 6px #d59392;-moz-box-shadow:0 0 6px #d59392;box-shadow:0 0 6px #d59392;} -.control-group.error .input-prepend .add-on,.control-group.error .input-append .add-on{color:#b94a48;background-color:#f2dede;border-color:#b94a48;} -.control-group.success>label,.control-group.success .help-block,.control-group.success .help-inline{color:#468847;} -.control-group.success input,.control-group.success select,.control-group.success textarea{color:#468847;border-color:#468847;}.control-group.success input:focus,.control-group.success select:focus,.control-group.success textarea:focus{border-color:#356635;-webkit-box-shadow:0 0 6px #7aba7b;-moz-box-shadow:0 0 6px #7aba7b;box-shadow:0 0 6px #7aba7b;} -.control-group.success .input-prepend .add-on,.control-group.success .input-append .add-on{color:#468847;background-color:#dff0d8;border-color:#468847;} -input:focus:required:invalid,textarea:focus:required:invalid,select:focus:required:invalid{color:#b94a48;border-color:#ee5f5b;}input:focus:required:invalid:focus,textarea:focus:required:invalid:focus,select:focus:required:invalid:focus{border-color:#e9322d;-webkit-box-shadow:0 0 6px #f8b9b7;-moz-box-shadow:0 0 6px #f8b9b7;box-shadow:0 0 6px #f8b9b7;} -.form-actions{padding:17px 20px 18px;margin-top:18px;margin-bottom:18px;background-color:#f5f5f5;border-top:1px solid #ddd;} -.uneditable-input{display:block;background-color:#ffffff;border-color:#eee;-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);cursor:not-allowed;} -:-moz-placeholder{color:#999999;} -::-webkit-input-placeholder{color:#999999;} -.help-block{margin-top:5px;margin-bottom:0;color:#999999;} -.help-inline{display:inline-block;*display:inline;*zoom:1;margin-bottom:9px;vertical-align:middle;padding-left:5px;} -.input-prepend,.input-append{margin-bottom:5px;*zoom:1;}.input-prepend:before,.input-append:before,.input-prepend:after,.input-append:after{display:table;content:"";} -.input-prepend:after,.input-append:after{clear:both;} -.input-prepend input,.input-append input,.input-prepend .uneditable-input,.input-append .uneditable-input{-webkit-border-radius:0 3px 3px 0;-moz-border-radius:0 3px 3px 0;border-radius:0 3px 3px 0;}.input-prepend input:focus,.input-append input:focus,.input-prepend .uneditable-input:focus,.input-append .uneditable-input:focus{position:relative;z-index:2;} -.input-prepend .uneditable-input,.input-append .uneditable-input{border-left-color:#ccc;} -.input-prepend .add-on,.input-append .add-on{float:left;display:block;width:auto;min-width:16px;height:18px;margin-right:-1px;padding:4px 5px;font-weight:normal;line-height:18px;color:#999999;text-align:center;text-shadow:0 1px 0 #ffffff;background-color:#f5f5f5;border:1px solid #ccc;-webkit-border-radius:3px 0 0 3px;-moz-border-radius:3px 0 0 3px;border-radius:3px 0 0 3px;} -.input-prepend .active,.input-append .active{background-color:#a9dba9;border-color:#46a546;} -.input-prepend .add-on{*margin-top:1px;} -.input-append input,.input-append .uneditable-input{float:left;-webkit-border-radius:3px 0 0 3px;-moz-border-radius:3px 0 0 3px;border-radius:3px 0 0 3px;} -.input-append .uneditable-input{border-right-color:#ccc;} -.input-append .add-on{margin-right:0;margin-left:-1px;-webkit-border-radius:0 3px 3px 0;-moz-border-radius:0 3px 3px 0;border-radius:0 3px 3px 0;} -.input-append input:first-child{*margin-left:-160px;}.input-append input:first-child+.add-on{*margin-left:-21px;} -.search-query{padding-left:14px;padding-right:14px;margin-bottom:0;-webkit-border-radius:14px;-moz-border-radius:14px;border-radius:14px;} -.form-search input,.form-inline input,.form-horizontal input,.form-search textarea,.form-inline textarea,.form-horizontal textarea,.form-search select,.form-inline select,.form-horizontal select,.form-search .help-inline,.form-inline .help-inline,.form-horizontal .help-inline,.form-search .uneditable-input,.form-inline .uneditable-input,.form-horizontal .uneditable-input{display:inline-block;margin-bottom:0;} -.form-search label,.form-inline label,.form-search .input-append,.form-inline .input-append,.form-search .input-prepend,.form-inline .input-prepend{display:inline-block;} -.form-search .input-append .add-on,.form-inline .input-prepend .add-on,.form-search .input-append .add-on,.form-inline .input-prepend .add-on{vertical-align:middle;} -.control-group{margin-bottom:9px;} -.form-horizontal legend+.control-group{margin-top:18px;-webkit-margin-top-collapse:separate;} -.form-horizontal .control-group{margin-bottom:18px;*zoom:1;}.form-horizontal .control-group:before,.form-horizontal .control-group:after{display:table;content:"";} -.form-horizontal .control-group:after{clear:both;} -.form-horizontal .control-group>label{float:left;width:140px;padding-top:5px;text-align:right;} -.form-horizontal .controls{margin-left:160px;} -.form-horizontal .form-actions{padding-left:160px;} -table{max-width:100%;border-collapse:collapse;border-spacing:0;} -.table{width:100%;margin-bottom:18px;}.table th,.table td{padding:8px;line-height:18px;text-align:left;border-top:1px solid #ddd;} -.table th{font-weight:bold;vertical-align:bottom;} -.table td{vertical-align:top;} -.table thead:first-child tr th,.table thead:first-child tr td{border-top:0;} -.table tbody+tbody{border-top:2px solid #ddd;} -.table-condensed th,.table-condensed td{padding:4px 5px;} -.table-bordered{border:1px solid #ddd;border-collapse:separate;*border-collapse:collapsed;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;}.table-bordered th+th,.table-bordered td+td,.table-bordered th+td,.table-bordered td+th{border-left:1px solid #ddd;} -.table-bordered thead:first-child tr:first-child th,.table-bordered tbody:first-child tr:first-child th,.table-bordered tbody:first-child tr:first-child td{border-top:0;} -.table-bordered thead:first-child tr:first-child th:first-child,.table-bordered tbody:first-child tr:first-child td:first-child{-webkit-border-radius:4px 0 0 0;-moz-border-radius:4px 0 0 0;border-radius:4px 0 0 0;} -.table-bordered thead:first-child tr:first-child th:last-child,.table-bordered tbody:first-child tr:first-child td:last-child{-webkit-border-radius:0 4px 0 0;-moz-border-radius:0 4px 0 0;border-radius:0 4px 0 0;} -.table-bordered thead:last-child tr:last-child th:first-child,.table-bordered tbody:last-child tr:last-child td:first-child{-webkit-border-radius:0 0 0 4px;-moz-border-radius:0 0 0 4px;border-radius:0 0 0 4px;} -.table-bordered thead:last-child tr:last-child th:last-child,.table-bordered tbody:last-child tr:last-child td:last-child{-webkit-border-radius:0 0 4px 0;-moz-border-radius:0 0 4px 0;border-radius:0 0 4px 0;} -.table-striped tbody tr:nth-child(odd) td,.table-striped tbody tr:nth-child(odd) th{background-color:#f9f9f9;} -table .span1{float:none;width:44px;margin-left:0;} -table .span2{float:none;width:124px;margin-left:0;} -table .span3{float:none;width:204px;margin-left:0;} -table .span4{float:none;width:284px;margin-left:0;} -table .span5{float:none;width:364px;margin-left:0;} -table .span6{float:none;width:444px;margin-left:0;} -table .span7{float:none;width:524px;margin-left:0;} -table .span8{float:none;width:604px;margin-left:0;} -table .span9{float:none;width:684px;margin-left:0;} -table .span10{float:none;width:764px;margin-left:0;} -table .span11{float:none;width:844px;margin-left:0;} -table .span12{float:none;width:924px;margin-left:0;} -[class^="icon-"]{display:inline-block;width:14px;height:14px;vertical-align:text-top;background-image:url(http://github.com/img/glyphicons-halflings.png);background-position:14px 14px;background-repeat:no-repeat;*margin-right:.3em;}[class^="icon-"]:last-child{*margin-left:0;} -.icon-white{background-image:url(http://github.com/img/glyphicons-halflings-white.png);} -.icon-glass{background-position:0 0;} -.icon-music{background-position:-24px 0;} -.icon-search{background-position:-48px 0;} -.icon-envelope{background-position:-72px 0;} -.icon-heart{background-position:-96px 0;} -.icon-star{background-position:-120px 0;} -.icon-star-empty{background-position:-144px 0;} -.icon-user{background-position:-168px 0;} -.icon-film{background-position:-192px 0;} -.icon-th-large{background-position:-216px 0;} -.icon-th{background-position:-240px 0;} -.icon-th-list{background-position:-264px 0;} -.icon-ok{background-position:-288px 0;} -.icon-remove{background-position:-312px 0;} -.icon-zoom-in{background-position:-336px 0;} -.icon-zoom-out{background-position:-360px 0;} -.icon-off{background-position:-384px 0;} -.icon-signal{background-position:-408px 0;} -.icon-cog{background-position:-432px 0;} -.icon-trash{background-position:-456px 0;} -.icon-home{background-position:0 -24px;} -.icon-file{background-position:-24px -24px;} -.icon-time{background-position:-48px -24px;} -.icon-road{background-position:-72px -24px;} -.icon-download-alt{background-position:-96px -24px;} -.icon-download{background-position:-120px -24px;} -.icon-upload{background-position:-144px -24px;} -.icon-inbox{background-position:-168px -24px;} -.icon-play-circle{background-position:-192px -24px;} -.icon-repeat{background-position:-216px -24px;} -.icon-refresh{background-position:-240px -24px;} -.icon-list-alt{background-position:-264px -24px;} -.icon-lock{background-position:-287px -24px;} -.icon-flag{background-position:-312px -24px;} -.icon-headphones{background-position:-336px -24px;} -.icon-volume-off{background-position:-360px -24px;} -.icon-volume-down{background-position:-384px -24px;} -.icon-volume-up{background-position:-408px -24px;} -.icon-qrcode{background-position:-432px -24px;} -.icon-barcode{background-position:-456px -24px;} -.icon-tag{background-position:0 -48px;} -.icon-tags{background-position:-25px -48px;} -.icon-book{background-position:-48px -48px;} -.icon-bookmark{background-position:-72px -48px;} -.icon-print{background-position:-96px -48px;} -.icon-camera{background-position:-120px -48px;} -.icon-font{background-position:-144px -48px;} -.icon-bold{background-position:-167px -48px;} -.icon-italic{background-position:-192px -48px;} -.icon-text-height{background-position:-216px -48px;} -.icon-text-width{background-position:-240px -48px;} -.icon-align-left{background-position:-264px -48px;} -.icon-align-center{background-position:-288px -48px;} -.icon-align-right{background-position:-312px -48px;} -.icon-align-justify{background-position:-336px -48px;} -.icon-list{background-position:-360px -48px;} -.icon-indent-left{background-position:-384px -48px;} -.icon-indent-right{background-position:-408px -48px;} -.icon-facetime-video{background-position:-432px -48px;} -.icon-picture{background-position:-456px -48px;} -.icon-pencil{background-position:0 -72px;} -.icon-map-marker{background-position:-24px -72px;} -.icon-adjust{background-position:-48px -72px;} -.icon-tint{background-position:-72px -72px;} -.icon-edit{background-position:-96px -72px;} -.icon-share{background-position:-120px -72px;} -.icon-check{background-position:-144px -72px;} -.icon-move{background-position:-168px -72px;} -.icon-step-backward{background-position:-192px -72px;} -.icon-fast-backward{background-position:-216px -72px;} -.icon-backward{background-position:-240px -72px;} -.icon-play{background-position:-264px -72px;} -.icon-pause{background-position:-288px -72px;} -.icon-stop{background-position:-312px -72px;} -.icon-forward{background-position:-336px -72px;} -.icon-fast-forward{background-position:-360px -72px;} -.icon-step-forward{background-position:-384px -72px;} -.icon-eject{background-position:-408px -72px;} -.icon-chevron-left{background-position:-432px -72px;} -.icon-chevron-right{background-position:-456px -72px;} -.icon-plus-sign{background-position:0 -96px;} -.icon-minus-sign{background-position:-24px -96px;} -.icon-remove-sign{background-position:-48px -96px;} -.icon-ok-sign{background-position:-72px -96px;} -.icon-question-sign{background-position:-96px -96px;} -.icon-info-sign{background-position:-120px -96px;} -.icon-screenshot{background-position:-144px -96px;} -.icon-remove-circle{background-position:-168px -96px;} -.icon-ok-circle{background-position:-192px -96px;} -.icon-ban-circle{background-position:-216px -96px;} -.icon-arrow-left{background-position:-240px -96px;} -.icon-arrow-right{background-position:-264px -96px;} -.icon-arrow-up{background-position:-289px -96px;} -.icon-arrow-down{background-position:-312px -96px;} -.icon-share-alt{background-position:-336px -96px;} -.icon-resize-full{background-position:-360px -96px;} -.icon-resize-small{background-position:-384px -96px;} -.icon-plus{background-position:-408px -96px;} -.icon-minus{background-position:-433px -96px;} -.icon-asterisk{background-position:-456px -96px;} -.icon-exclamation-sign{background-position:0 -120px;} -.icon-gift{background-position:-24px -120px;} -.icon-leaf{background-position:-48px -120px;} -.icon-fire{background-position:-72px -120px;} -.icon-eye-open{background-position:-96px -120px;} -.icon-eye-close{background-position:-120px -120px;} -.icon-warning-sign{background-position:-144px -120px;} -.icon-plane{background-position:-168px -120px;} -.icon-calendar{background-position:-192px -120px;} -.icon-random{background-position:-216px -120px;} -.icon-comment{background-position:-240px -120px;} -.icon-magnet{background-position:-264px -120px;} -.icon-chevron-up{background-position:-288px -120px;} -.icon-chevron-down{background-position:-313px -119px;} -.icon-retweet{background-position:-336px -120px;} -.icon-shopping-cart{background-position:-360px -120px;} -.icon-folder-close{background-position:-384px -120px;} -.icon-folder-open{background-position:-408px -120px;} -.icon-resize-vertical{background-position:-432px -119px;} -.icon-resize-horizontal{background-position:-456px -118px;} -.dropdown{position:relative;} -.dropdown-toggle{*margin-bottom:-3px;} -.dropdown-toggle:active,.open .dropdown-toggle{outline:0;} -.caret{display:inline-block;width:0;height:0;text-indent:-99999px;*text-indent:0;vertical-align:top;border-left:4px solid transparent;border-right:4px solid transparent;border-top:4px solid #000000;opacity:0.3;filter:alpha(opacity=30);content:"\2193";} -.dropdown .caret{margin-top:8px;margin-left:2px;} -.dropdown:hover .caret,.open.dropdown .caret{opacity:1;filter:alpha(opacity=100);} -.dropdown-menu{position:absolute;top:100%;left:0;z-index:1000;float:left;display:none;min-width:160px;max-width:220px;_width:160px;padding:4px 0;margin:0;list-style:none;background-color:#ffffff;border-color:#ccc;border-color:rgba(0, 0, 0, 0.2);border-style:solid;border-width:1px;-webkit-border-radius:0 0 5px 5px;-moz-border-radius:0 0 5px 5px;border-radius:0 0 5px 5px;-webkit-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);-moz-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);-webkit-background-clip:padding-box;-moz-background-clip:padding;background-clip:padding-box;*border-right-width:2px;*border-bottom-width:2px;}.dropdown-menu.bottom-up{top:auto;bottom:100%;margin-bottom:2px;} -.dropdown-menu .divider{height:1px;margin:5px 1px;overflow:hidden;background-color:#e5e5e5;border-bottom:1px solid #ffffff;*width:100%;*margin:-5px 0 5px;} -.dropdown-menu a{display:block;padding:3px 15px;clear:both;font-weight:normal;line-height:18px;color:#555555;white-space:nowrap;} -.dropdown-menu li>a:hover,.dropdown-menu .active>a,.dropdown-menu .active>a:hover{color:#ffffff;text-decoration:none;background-color:#0088cc;} -.dropdown.open{*z-index:1000;}.dropdown.open .dropdown-toggle{color:#ffffff;background:#ccc;background:rgba(0, 0, 0, 0.3);} -.dropdown.open .dropdown-menu{display:block;} -.typeahead{margin-top:2px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.well{min-height:20px;padding:19px;margin-bottom:20px;background-color:#f5f5f5;border:1px solid #eee;border:1px solid rgba(0, 0, 0, 0.05);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);}.well blockquote{border-color:#ddd;border-color:rgba(0, 0, 0, 0.15);} -.fade{-webkit-transition:opacity 0.15s linear;-moz-transition:opacity 0.15s linear;-ms-transition:opacity 0.15s linear;-o-transition:opacity 0.15s linear;transition:opacity 0.15s linear;opacity:0;}.fade.in{opacity:1;} -.collapse{-webkit-transition:height 0.35s ease;-moz-transition:height 0.35s ease;-ms-transition:height 0.35s ease;-o-transition:height 0.35s ease;transition:height 0.35s ease;position:relative;overflow:hidden;height:0;}.collapse.in{height:auto;} -.close{float:right;font-size:20px;font-weight:bold;line-height:18px;color:#000000;text-shadow:0 1px 0 #ffffff;opacity:0.2;filter:alpha(opacity=20);}.close:hover{color:#000000;text-decoration:none;opacity:0.4;filter:alpha(opacity=40);cursor:pointer;} -.btn{display:inline-block;padding:4px 10px 4px;font-size:13px;line-height:18px;color:#333333;text-align:center;text-shadow:0 1px 1px rgba(255, 255, 255, 0.75);background-color:#fafafa;background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), color-stop(25%, #ffffff), to(#e6e6e6));background-image:-webkit-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-image:-moz-linear-gradient(top, #ffffff, #ffffff 25%, #e6e6e6);background-image:-ms-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-image:-o-linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-image:linear-gradient(#ffffff, #ffffff 25%, #e6e6e6);background-repeat:no-repeat;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#e6e6e6', GradientType=0);border:1px solid #ccc;border-bottom-color:#bbb;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);cursor:pointer;*margin-left:.3em;}.btn:first-child{*margin-left:0;} -.btn:hover{color:#333333;text-decoration:none;background-color:#e6e6e6;background-position:0 -15px;-webkit-transition:background-position 0.1s linear;-moz-transition:background-position 0.1s linear;-ms-transition:background-position 0.1s linear;-o-transition:background-position 0.1s linear;transition:background-position 0.1s linear;} -.btn:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} -.btn.active,.btn:active{background-image:none;-webkit-box-shadow:inset 0 2px 4px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 2px 4px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 0 2px 4px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);background-color:#e6e6e6;background-color:#d9d9d9 \9;color:rgba(0, 0, 0, 0.5);outline:0;} -.btn.disabled,.btn[disabled]{cursor:default;background-image:none;background-color:#e6e6e6;opacity:0.65;filter:alpha(opacity=65);-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} -.btn-large{padding:9px 14px;font-size:15px;line-height:normal;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} -.btn-large .icon{margin-top:1px;} -.btn-small{padding:5px 9px;font-size:11px;line-height:16px;} -.btn-small .icon{margin-top:-1px;} -.btn-primary,.btn-primary:hover,.btn-warning,.btn-warning:hover,.btn-danger,.btn-danger:hover,.btn-success,.btn-success:hover,.btn-info,.btn-info:hover{text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);color:#ffffff;} -.btn-primary.active,.btn-warning.active,.btn-danger.active,.btn-success.active,.btn-info.active{color:rgba(255, 255, 255, 0.75);} -.btn-primary{background-color:#006dcc;background-image:-moz-linear-gradient(top, #0088cc, #0044cc);background-image:-ms-linear-gradient(top, #0088cc, #0044cc);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#0088cc), to(#0044cc));background-image:-webkit-linear-gradient(top, #0088cc, #0044cc);background-image:-o-linear-gradient(top, #0088cc, #0044cc);background-image:linear-gradient(top, #0088cc, #0044cc);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#0088cc', endColorstr='#0044cc', GradientType=0);border-color:#0044cc #0044cc #002a80;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-primary:hover,.btn-primary:active,.btn-primary.active,.btn-primary.disabled,.btn-primary[disabled]{background-color:#0044cc;} -.btn-primary:active,.btn-primary.active{background-color:#003399 \9;} -.btn-warning{background-color:#faa732;background-image:-moz-linear-gradient(top, #fbb450, #f89406);background-image:-ms-linear-gradient(top, #fbb450, #f89406);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#fbb450), to(#f89406));background-image:-webkit-linear-gradient(top, #fbb450, #f89406);background-image:-o-linear-gradient(top, #fbb450, #f89406);background-image:linear-gradient(top, #fbb450, #f89406);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fbb450', endColorstr='#f89406', GradientType=0);border-color:#f89406 #f89406 #ad6704;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-warning:hover,.btn-warning:active,.btn-warning.active,.btn-warning.disabled,.btn-warning[disabled]{background-color:#f89406;} -.btn-warning:active,.btn-warning.active{background-color:#c67605 \9;} -.btn-danger{background-color:#da4f49;background-image:-moz-linear-gradient(top, #ee5f5b, #bd362f);background-image:-ms-linear-gradient(top, #ee5f5b, #bd362f);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#bd362f));background-image:-webkit-linear-gradient(top, #ee5f5b, #bd362f);background-image:-o-linear-gradient(top, #ee5f5b, #bd362f);background-image:linear-gradient(top, #ee5f5b, #bd362f);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#bd362f', GradientType=0);border-color:#bd362f #bd362f #802420;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-danger:hover,.btn-danger:active,.btn-danger.active,.btn-danger.disabled,.btn-danger[disabled]{background-color:#bd362f;} -.btn-danger:active,.btn-danger.active{background-color:#942a25 \9;} -.btn-success{background-color:#5bb75b;background-image:-moz-linear-gradient(top, #62c462, #51a351);background-image:-ms-linear-gradient(top, #62c462, #51a351);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#51a351));background-image:-webkit-linear-gradient(top, #62c462, #51a351);background-image:-o-linear-gradient(top, #62c462, #51a351);background-image:linear-gradient(top, #62c462, #51a351);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#51a351', GradientType=0);border-color:#51a351 #51a351 #387038;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-success:hover,.btn-success:active,.btn-success.active,.btn-success.disabled,.btn-success[disabled]{background-color:#51a351;} -.btn-success:active,.btn-success.active{background-color:#408140 \9;} -.btn-info{background-color:#49afcd;background-image:-moz-linear-gradient(top, #5bc0de, #2f96b4);background-image:-ms-linear-gradient(top, #5bc0de, #2f96b4);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#2f96b4));background-image:-webkit-linear-gradient(top, #5bc0de, #2f96b4);background-image:-o-linear-gradient(top, #5bc0de, #2f96b4);background-image:linear-gradient(top, #5bc0de, #2f96b4);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#2f96b4', GradientType=0);border-color:#2f96b4 #2f96b4 #1f6377;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-info:hover,.btn-info:active,.btn-info.active,.btn-info.disabled,.btn-info[disabled]{background-color:#2f96b4;} -.btn-info:active,.btn-info.active{background-color:#24748c \9;} -button.btn,input[type="submit"].btn{*padding-top:2px;*padding-bottom:2px;}button.btn::-moz-focus-inner,input[type="submit"].btn::-moz-focus-inner{padding:0;border:0;} -button.btn.large,input[type="submit"].btn.large{*padding-top:7px;*padding-bottom:7px;} -button.btn.small,input[type="submit"].btn.small{*padding-top:3px;*padding-bottom:3px;} -.btn-group{position:relative;*zoom:1;*margin-left:.3em;}.btn-group:before,.btn-group:after{display:table;content:"";} -.btn-group:after{clear:both;} -.btn-group:first-child{*margin-left:0;} -.btn-group+.btn-group{margin-left:5px;} -.btn-toolbar{margin-top:9px;margin-bottom:9px;}.btn-toolbar .btn-group{display:inline-block;*display:inline;*zoom:1;} -.btn-group .btn{position:relative;float:left;margin-left:-1px;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -.btn-group .btn:first-child{margin-left:0;-webkit-border-top-left-radius:4px;-moz-border-radius-topleft:4px;border-top-left-radius:4px;-webkit-border-bottom-left-radius:4px;-moz-border-radius-bottomleft:4px;border-bottom-left-radius:4px;} -.btn-group .btn:last-child,.btn-group .dropdown-toggle{-webkit-border-top-right-radius:4px;-moz-border-radius-topright:4px;border-top-right-radius:4px;-webkit-border-bottom-right-radius:4px;-moz-border-radius-bottomright:4px;border-bottom-right-radius:4px;} -.btn-group .btn.large:first-child{margin-left:0;-webkit-border-top-left-radius:6px;-moz-border-radius-topleft:6px;border-top-left-radius:6px;-webkit-border-bottom-left-radius:6px;-moz-border-radius-bottomleft:6px;border-bottom-left-radius:6px;} -.btn-group .btn.large:last-child,.btn-group .large.dropdown-toggle{-webkit-border-top-right-radius:6px;-moz-border-radius-topright:6px;border-top-right-radius:6px;-webkit-border-bottom-right-radius:6px;-moz-border-radius-bottomright:6px;border-bottom-right-radius:6px;} -.btn-group .btn:hover,.btn-group .btn:focus,.btn-group .btn:active,.btn-group .btn.active{z-index:2;} -.btn-group .dropdown-toggle:active,.btn-group.open .dropdown-toggle{outline:0;} -.btn-group .dropdown-toggle{padding-left:8px;padding-right:8px;-webkit-box-shadow:inset 1px 0 0 rgba(255, 255, 255, 0.125),inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 1px 0 0 rgba(255, 255, 255, 0.125),inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 1px 0 0 rgba(255, 255, 255, 0.125),inset 0 1px 0 rgba(255, 255, 255, 0.2),0 1px 2px rgba(0, 0, 0, 0.05);*padding-top:5px;*padding-bottom:5px;} -.btn-group.open{*z-index:1000;}.btn-group.open .dropdown-menu{display:block;margin-top:1px;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} -.btn-group.open .dropdown-toggle{background-image:none;-webkit-box-shadow:inset 0 1px 6px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 1px 6px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:inset 0 1px 6px rgba(0, 0, 0, 0.15),0 1px 2px rgba(0, 0, 0, 0.05);} -.btn .caret{margin-top:7px;margin-left:0;} -.btn:hover .caret,.open.btn-group .caret{opacity:1;filter:alpha(opacity=100);} -.btn-primary .caret,.btn-danger .caret,.btn-info .caret,.btn-success .caret{border-top-color:#ffffff;opacity:0.75;filter:alpha(opacity=75);} -.btn-small .caret{margin-top:4px;} -.alert{padding:8px 35px 8px 14px;margin-bottom:18px;text-shadow:0 1px 0 rgba(255, 255, 255, 0.5);background-color:#fcf8e3;border:1px solid #fbeed5;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.alert,.alert-heading{color:#c09853;} -.alert .close{position:relative;top:-2px;right:-21px;line-height:18px;} -.alert-success{background-color:#dff0d8;border-color:#d6e9c6;} -.alert-success,.alert-success .alert-heading{color:#468847;} -.alert-danger,.alert-error{background-color:#f2dede;border-color:#eed3d7;} -.alert-danger,.alert-error,.alert-danger .alert-heading,.alert-error .alert-heading{color:#b94a48;} -.alert-info{background-color:#d9edf7;border-color:#bce8f1;} -.alert-info,.alert-info .alert-heading{color:#3a87ad;} -.alert-block{padding-top:14px;padding-bottom:14px;} -.alert-block>p,.alert-block>ul{margin-bottom:0;} -.alert-block p+p{margin-top:5px;} -.nav{margin-left:0;margin-bottom:18px;list-style:none;} -.nav>li>a{display:block;} -.nav>li>a:hover{text-decoration:none;background-color:#eeeeee;} -.nav-list{padding-left:14px;padding-right:14px;margin-bottom:0;} -.nav-list>li>a,.nav-list .nav-header{display:block;padding:3px 15px;margin-left:-15px;margin-right:-15px;text-shadow:0 1px 0 rgba(255, 255, 255, 0.5);} -.nav-list .nav-header{font-size:11px;font-weight:bold;line-height:18px;color:#999999;text-transform:uppercase;} -.nav-list .nav-header *{text-transform:none;} -.nav-list>li+.nav-header{margin-top:9px;} -.nav-list .active>a,.nav-list .active>a:hover{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.2);background-color:#0088cc;} -.nav-list [class^="icon-"]{margin-right:2px;} -.nav-tabs,.nav-pills{*zoom:1;}.nav-tabs:before,.nav-pills:before,.nav-tabs:after,.nav-pills:after{display:table;content:"";} -.nav-tabs:after,.nav-pills:after{clear:both;} -.nav-tabs>li,.nav-pills>li{float:left;} -.nav-tabs>li>a,.nav-pills>li>a{padding-right:12px;padding-left:12px;margin-right:2px;line-height:14px;} -.nav-tabs{border-bottom:1px solid #ddd;} -.nav-tabs>li{margin-bottom:-1px;} -.nav-tabs>li>a{padding-top:9px;padding-bottom:9px;border:1px solid transparent;-webkit-border-radius:4px 4px 0 0;-moz-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0;}.nav-tabs>li>a:hover{border-color:#eeeeee #eeeeee #dddddd;} -.nav-tabs>.active>a,.nav-tabs>.active>a:hover{color:#555555;background-color:#ffffff;border:1px solid #ddd;border-bottom-color:transparent;cursor:default;} -.nav-pills>li>a{padding-top:8px;padding-bottom:8px;margin-top:2px;margin-bottom:2px;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} -.nav-pills .active>a,.nav-pills .active>a:hover{color:#ffffff;background-color:#0088cc;} -.nav-stacked>li{float:none;} -.nav-stacked>li>a{margin-right:0;} -.nav-tabs.nav-stacked{border-bottom:0;} -.nav-tabs.nav-stacked>li>a{border:1px solid #ddd;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -.nav-tabs.nav-stacked>li:first-child>a{-webkit-border-radius:4px 4px 0 0;-moz-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0;} -.nav-tabs.nav-stacked>li:last-child>a{-webkit-border-radius:0 0 4px 4px;-moz-border-radius:0 0 4px 4px;border-radius:0 0 4px 4px;} -.nav-tabs.nav-stacked>li>a:hover{border-color:#ddd;z-index:2;} -.nav-pills.nav-stacked>li>a{margin-bottom:3px;} -.nav-pills.nav-stacked>li:last-child>a{margin-bottom:1px;} -.nav-tabs .dropdown-menu,.nav-pills .dropdown-menu{margin-top:1px;border-width:1px;} -.nav-pills .dropdown-menu{-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.nav-tabs .dropdown-toggle .caret,.nav-pills .dropdown-toggle .caret{border-top-color:#0088cc;margin-top:6px;} -.nav-tabs .dropdown-toggle:hover .caret,.nav-pills .dropdown-toggle:hover .caret{border-top-color:#005580;} -.nav-tabs .active .dropdown-toggle .caret,.nav-pills .active .dropdown-toggle .caret{border-top-color:#333333;} -.nav>.dropdown.active>a:hover{color:#000000;cursor:pointer;} -.nav-tabs .open .dropdown-toggle,.nav-pills .open .dropdown-toggle,.nav>.open.active>a:hover{color:#ffffff;background-color:#999999;border-color:#999999;} -.nav .open .caret,.nav .open.active .caret,.nav .open a:hover .caret{border-top-color:#ffffff;opacity:1;filter:alpha(opacity=100);} -.tabs-stacked .open>a:hover{border-color:#999999;} -.tabbable{*zoom:1;}.tabbable:before,.tabbable:after{display:table;content:"";} -.tabbable:after{clear:both;} -.tabs-below .nav-tabs,.tabs-right .nav-tabs,.tabs-left .nav-tabs{border-bottom:0;} -.tab-content>.tab-pane,.pill-content>.pill-pane{display:none;} -.tab-content>.active,.pill-content>.active{display:block;} -.tabs-below .nav-tabs{border-top:1px solid #ddd;} -.tabs-below .nav-tabs>li{margin-top:-1px;margin-bottom:0;} -.tabs-below .nav-tabs>li>a{-webkit-border-radius:0 0 4px 4px;-moz-border-radius:0 0 4px 4px;border-radius:0 0 4px 4px;}.tabs-below .nav-tabs>li>a:hover{border-bottom-color:transparent;border-top-color:#ddd;} -.tabs-below .nav-tabs .active>a,.tabs-below .nav-tabs .active>a:hover{border-color:transparent #ddd #ddd #ddd;} -.tabs-left .nav-tabs>li,.tabs-right .nav-tabs>li{float:none;} -.tabs-left .nav-tabs>li>a,.tabs-right .nav-tabs>li>a{min-width:74px;margin-right:0;margin-bottom:3px;} -.tabs-left .nav-tabs{float:left;margin-right:19px;border-right:1px solid #ddd;} -.tabs-left .nav-tabs>li>a{margin-right:-1px;-webkit-border-radius:4px 0 0 4px;-moz-border-radius:4px 0 0 4px;border-radius:4px 0 0 4px;} -.tabs-left .nav-tabs>li>a:hover{border-color:#eeeeee #dddddd #eeeeee #eeeeee;} -.tabs-left .nav-tabs .active>a,.tabs-left .nav-tabs .active>a:hover{border-color:#ddd transparent #ddd #ddd;*border-right-color:#ffffff;} -.tabs-right .nav-tabs{float:right;margin-left:19px;border-left:1px solid #ddd;} -.tabs-right .nav-tabs>li>a{margin-left:-1px;-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;} -.tabs-right .nav-tabs>li>a:hover{border-color:#eeeeee #eeeeee #eeeeee #dddddd;} -.tabs-right .nav-tabs .active>a,.tabs-right .nav-tabs .active>a:hover{border-color:#ddd #ddd #ddd transparent;*border-left-color:#ffffff;} -.navbar{overflow:visible;margin-bottom:18px;} -.navbar-inner{padding-left:20px;padding-right:20px;background-color:#2c2c2c;background-image:-moz-linear-gradient(top, #333333, #222222);background-image:-ms-linear-gradient(top, #333333, #222222);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222));background-image:-webkit-linear-gradient(top, #333333, #222222);background-image:-o-linear-gradient(top, #333333, #222222);background-image:linear-gradient(top, #333333, #222222);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:0 1px 3px rgba(0, 0, 0, 0.25),inset 0 -1px 0 rgba(0, 0, 0, 0.1);-moz-box-shadow:0 1px 3px rgba(0, 0, 0, 0.25),inset 0 -1px 0 rgba(0, 0, 0, 0.1);box-shadow:0 1px 3px rgba(0, 0, 0, 0.25),inset 0 -1px 0 rgba(0, 0, 0, 0.1);} -.btn-navbar{display:none;float:right;padding:7px 10px;margin-left:5px;margin-right:5px;background-color:#2c2c2c;background-image:-moz-linear-gradient(top, #333333, #222222);background-image:-ms-linear-gradient(top, #333333, #222222);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#333333), to(#222222));background-image:-webkit-linear-gradient(top, #333333, #222222);background-image:-o-linear-gradient(top, #333333, #222222);background-image:linear-gradient(top, #333333, #222222);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#333333', endColorstr='#222222', GradientType=0);border-color:#222222 #222222 #000000;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);-webkit-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.075);-moz-box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.075);box-shadow:inset 0 1px 0 rgba(255, 255, 255, 0.1),0 1px 0 rgba(255, 255, 255, 0.075);}.btn-navbar:hover,.btn-navbar:active,.btn-navbar.active,.btn-navbar.disabled,.btn-navbar[disabled]{background-color:#222222;} -.btn-navbar:active,.btn-navbar.active{background-color:#080808 \9;} -.btn-navbar .icon-bar{display:block;width:18px;height:2px;background-color:#f5f5f5;-webkit-border-radius:1px;-moz-border-radius:1px;border-radius:1px;-webkit-box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);-moz-box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);} -.btn-navbar .icon-bar+.icon-bar{margin-top:3px;} -.nav-collapse.collapse{height:auto;} -.navbar .brand:hover{text-decoration:none;} -.navbar .brand{float:left;display:block;padding:8px 20px 12px;margin-left:-20px;font-size:20px;font-weight:200;line-height:1;color:#ffffff;} -.navbar .navbar-text{margin-bottom:0;line-height:40px;color:#999999;}.navbar .navbar-text a:hover{color:#ffffff;background-color:transparent;} -.navbar .btn,.navbar .btn-group{margin-top:5px;} -.navbar .btn-group .btn{margin-top:0;} -.navbar-form{margin-bottom:0;*zoom:1;}.navbar-form:before,.navbar-form:after{display:table;content:"";} -.navbar-form:after{clear:both;} -.navbar-form input,.navbar-form select{display:inline-block;margin-top:5px;margin-bottom:0;} -.navbar-form .radio,.navbar-form .checkbox{margin-top:5px;} -.navbar-form input[type="image"],.navbar-form input[type="checkbox"],.navbar-form input[type="radio"]{margin-top:3px;} -.navbar-search{position:relative;float:left;margin-top:6px;margin-bottom:0;}.navbar-search .search-query{padding:4px 9px;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;font-weight:normal;line-height:1;color:#ffffff;color:rgba(255, 255, 255, 0.75);background:#666;background:rgba(255, 255, 255, 0.3);border:1px solid #111;-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1),0 1px 0px rgba(255, 255, 255, 0.15);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1),0 1px 0px rgba(255, 255, 255, 0.15);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1),0 1px 0px rgba(255, 255, 255, 0.15);-webkit-transition:none;-moz-transition:none;-ms-transition:none;-o-transition:none;transition:none;}.navbar-search .search-query :-moz-placeholder{color:#eeeeee;} -.navbar-search .search-query::-webkit-input-placeholder{color:#eeeeee;} -.navbar-search .search-query:hover{color:#ffffff;background-color:#999999;background-color:rgba(255, 255, 255, 0.5);} -.navbar-search .search-query:focus,.navbar-search .search-query.focused{padding:5px 10px;color:#333333;text-shadow:0 1px 0 #ffffff;background-color:#ffffff;border:0;-webkit-box-shadow:0 0 3px rgba(0, 0, 0, 0.15);-moz-box-shadow:0 0 3px rgba(0, 0, 0, 0.15);box-shadow:0 0 3px rgba(0, 0, 0, 0.15);outline:0;} -.navbar-fixed-top{position:fixed;top:0;right:0;left:0;z-index:1030;} -.navbar-fixed-top .navbar-inner{padding-left:0;padding-right:0;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} -.navbar .nav{position:relative;left:0;display:block;float:left;margin:0 10px 0 0;} -.navbar .nav.pull-right{float:right;} -.navbar .nav>li{display:block;float:left;} -.navbar .nav>li>a{float:none;padding:10px 10px 11px;line-height:19px;color:#999999;text-decoration:none;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);} -.navbar .nav>li>a:hover{background-color:transparent;color:#ffffff;text-decoration:none;} -.navbar .nav .active>a,.navbar .nav .active>a:hover{color:#ffffff;text-decoration:none;background-color:#222222;background-color:rgba(0, 0, 0, 0.5);} -.navbar .divider-vertical{height:40px;width:1px;margin:0 9px;overflow:hidden;background-color:#222222;border-right:1px solid #333333;} -.navbar .nav.pull-right{margin-left:10px;margin-right:0;} -.navbar .dropdown-menu{margin-top:1px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;}.navbar .dropdown-menu:before{content:'';display:inline-block;border-left:7px solid transparent;border-right:7px solid transparent;border-bottom:7px solid #ccc;border-bottom-color:rgba(0, 0, 0, 0.2);position:absolute;top:-7px;left:9px;} -.navbar .dropdown-menu:after{content:'';display:inline-block;border-left:6px solid transparent;border-right:6px solid transparent;border-bottom:6px solid #ffffff;position:absolute;top:-6px;left:10px;} -.navbar .nav .dropdown-toggle .caret,.navbar .nav .open.dropdown .caret{border-top-color:#ffffff;} -.navbar .nav .active .caret{opacity:1;filter:alpha(opacity=100);} -.navbar .nav .open>.dropdown-toggle,.navbar .nav .active>.dropdown-toggle,.navbar .nav .open.active>.dropdown-toggle{background-color:transparent;} -.navbar .nav .active>.dropdown-toggle:hover{color:#ffffff;} -.navbar .nav.pull-right .dropdown-menu{left:auto;right:0;}.navbar .nav.pull-right .dropdown-menu:before{left:auto;right:12px;} -.navbar .nav.pull-right .dropdown-menu:after{left:auto;right:13px;} -.breadcrumb{padding:7px 14px;margin:0 0 18px;background-color:#fbfbfb;background-image:-moz-linear-gradient(top, #ffffff, #f5f5f5);background-image:-ms-linear-gradient(top, #ffffff, #f5f5f5);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), to(#f5f5f5));background-image:-webkit-linear-gradient(top, #ffffff, #f5f5f5);background-image:-o-linear-gradient(top, #ffffff, #f5f5f5);background-image:linear-gradient(top, #ffffff, #f5f5f5);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f5f5f5', GradientType=0);border:1px solid #ddd;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;-webkit-box-shadow:inset 0 1px 0 #ffffff;-moz-box-shadow:inset 0 1px 0 #ffffff;box-shadow:inset 0 1px 0 #ffffff;}.breadcrumb li{display:inline;text-shadow:0 1px 0 #ffffff;} -.breadcrumb .divider{padding:0 5px;color:#999999;} -.breadcrumb .active a{color:#333333;} -.pagination{height:36px;margin:18px 0;} -.pagination ul{display:inline-block;*display:inline;*zoom:1;margin-left:0;margin-bottom:0;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;-webkit-box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);} -.pagination li{display:inline;} -.pagination a{float:left;padding:0 14px;line-height:34px;text-decoration:none;border:1px solid #ddd;border-left-width:0;} -.pagination a:hover,.pagination .active a{background-color:#f5f5f5;} -.pagination .active a{color:#999999;cursor:default;} -.pagination .disabled a,.pagination .disabled a:hover{color:#999999;background-color:transparent;cursor:default;} -.pagination li:first-child a{border-left-width:1px;-webkit-border-radius:3px 0 0 3px;-moz-border-radius:3px 0 0 3px;border-radius:3px 0 0 3px;} -.pagination li:last-child a{-webkit-border-radius:0 3px 3px 0;-moz-border-radius:0 3px 3px 0;border-radius:0 3px 3px 0;} -.pagination-centered{text-align:center;} -.pagination-right{text-align:right;} -.pager{margin-left:0;margin-bottom:18px;list-style:none;text-align:center;*zoom:1;}.pager:before,.pager:after{display:table;content:"";} -.pager:after{clear:both;} -.pager li{display:inline;} -.pager a{display:inline-block;padding:5px 14px;background-color:#fff;border:1px solid #ddd;-webkit-border-radius:15px;-moz-border-radius:15px;border-radius:15px;} -.pager a:hover{text-decoration:none;background-color:#f5f5f5;} -.pager .next a{float:right;} -.pager .previous a{float:left;} -.modal-open .dropdown-menu{z-index:2050;} -.modal-open .dropdown.open{*z-index:2050;} -.modal-open .popover{z-index:2060;} -.modal-open .tooltip{z-index:2070;} -.modal-backdrop{position:fixed;top:0;right:0;bottom:0;left:0;z-index:1040;background-color:#000000;}.modal-backdrop.fade{opacity:0;} -.modal-backdrop,.modal-backdrop.fade.in{opacity:0.8;filter:alpha(opacity=80);} -.modal{position:fixed;top:50%;left:50%;z-index:1050;max-height:500px;overflow:auto;width:560px;margin:-250px 0 0 -280px;background-color:#ffffff;border:1px solid #999;border:1px solid rgba(0, 0, 0, 0.3);*border:1px solid #999;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;-webkit-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-moz-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-webkit-background-clip:padding-box;-moz-background-clip:padding-box;background-clip:padding-box;}.modal.fade{-webkit-transition:opacity .3s linear, top .3s ease-out;-moz-transition:opacity .3s linear, top .3s ease-out;-ms-transition:opacity .3s linear, top .3s ease-out;-o-transition:opacity .3s linear, top .3s ease-out;transition:opacity .3s linear, top .3s ease-out;top:-25%;} -.modal.fade.in{top:50%;} -.modal-header{padding:9px 15px;border-bottom:1px solid #eee;}.modal-header .close{margin-top:2px;} -.modal-body{padding:15px;} -.modal-footer{padding:14px 15px 15px;margin-bottom:0;background-color:#f5f5f5;border-top:1px solid #ddd;-webkit-border-radius:0 0 6px 6px;-moz-border-radius:0 0 6px 6px;border-radius:0 0 6px 6px;-webkit-box-shadow:inset 0 1px 0 #ffffff;-moz-box-shadow:inset 0 1px 0 #ffffff;box-shadow:inset 0 1px 0 #ffffff;*zoom:1;}.modal-footer:before,.modal-footer:after{display:table;content:"";} -.modal-footer:after{clear:both;} -.modal-footer .btn{float:right;margin-left:5px;margin-bottom:0;} -.tooltip{position:absolute;z-index:1020;display:block;visibility:visible;padding:5px;font-size:11px;opacity:0;filter:alpha(opacity=0);}.tooltip.in{opacity:0.8;filter:alpha(opacity=80);} -.tooltip.top{margin-top:-2px;} -.tooltip.right{margin-left:2px;} -.tooltip.bottom{margin-top:2px;} -.tooltip.left{margin-left:-2px;} -.tooltip.top .tooltip-arrow{bottom:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-top:5px solid #000000;} -.tooltip.left .tooltip-arrow{top:50%;right:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-left:5px solid #000000;} -.tooltip.bottom .tooltip-arrow{top:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-bottom:5px solid #000000;} -.tooltip.right .tooltip-arrow{top:50%;left:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-right:5px solid #000000;} -.tooltip-inner{max-width:200px;padding:3px 8px;color:#ffffff;text-align:center;text-decoration:none;background-color:#000000;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.tooltip-arrow{position:absolute;width:0;height:0;} -.popover{position:absolute;top:0;left:0;z-index:1010;display:none;padding:5px;}.popover.top{margin-top:-5px;} -.popover.right{margin-left:5px;} -.popover.bottom{margin-top:5px;} -.popover.left{margin-left:-5px;} -.popover.top .arrow{bottom:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-top:5px solid #000000;} -.popover.right .arrow{top:50%;left:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-right:5px solid #000000;} -.popover.bottom .arrow{top:0;left:50%;margin-left:-5px;border-left:5px solid transparent;border-right:5px solid transparent;border-bottom:5px solid #000000;} -.popover.left .arrow{top:50%;right:0;margin-top:-5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-left:5px solid #000000;} -.popover .arrow{position:absolute;width:0;height:0;} -.popover-inner{padding:3px;width:280px;overflow:hidden;background:#000000;background:rgba(0, 0, 0, 0.8);-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;-webkit-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-moz-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);} -.popover-title{padding:9px 15px;line-height:1;background-color:#f5f5f5;border-bottom:1px solid #eee;-webkit-border-radius:3px 3px 0 0;-moz-border-radius:3px 3px 0 0;border-radius:3px 3px 0 0;} -.popover-content{padding:14px;background-color:#ffffff;-webkit-border-radius:0 0 3px 3px;-moz-border-radius:0 0 3px 3px;border-radius:0 0 3px 3px;-webkit-background-clip:padding-box;-moz-background-clip:padding-box;background-clip:padding-box;}.popover-content p,.popover-content ul,.popover-content ol{margin-bottom:0;} -.thumbnails{margin-left:-20px;list-style:none;*zoom:1;}.thumbnails:before,.thumbnails:after{display:table;content:"";} -.thumbnails:after{clear:both;} -.thumbnails>li{float:left;margin:0 0 18px 20px;} -.thumbnail{display:block;padding:4px;line-height:1;border:1px solid #ddd;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:0 1px 1px rgba(0, 0, 0, 0.075);} -a.thumbnail:hover{border-color:#0088cc;-webkit-box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);-moz-box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);} -.thumbnail>img{display:block;max-width:100%;margin-left:auto;margin-right:auto;} -.thumbnail .caption{padding:9px;} -.label{padding:1px 3px 2px;font-size:9.75px;font-weight:bold;color:#ffffff;text-transform:uppercase;background-color:#999999;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} -.label-important{background-color:#b94a48;} -.label-warning{background-color:#f89406;} -.label-success{background-color:#468847;} -.label-info{background-color:#3a87ad;} -@-webkit-keyframes progress-bar-stripes{from{background-position:0 0;} to{background-position:40px 0;}}@-moz-keyframes progress-bar-stripes{from{background-position:0 0;} to{background-position:40px 0;}}@keyframes progress-bar-stripes{from{background-position:0 0;} to{background-position:40px 0;}}.progress{overflow:hidden;height:18px;margin-bottom:18px;background-color:#f7f7f7;background-image:-moz-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-ms-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#f5f5f5), to(#f9f9f9));background-image:-webkit-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-o-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:linear-gradient(top, #f5f5f5, #f9f9f9);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#f5f5f5', endColorstr='#f9f9f9', GradientType=0);-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.progress .bar{width:0%;height:18px;color:#ffffff;font-size:12px;text-align:center;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#0e90d2;background-image:-moz-linear-gradient(top, #149bdf, #0480be);background-image:-ms-linear-gradient(top, #149bdf, #0480be);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#149bdf), to(#0480be));background-image:-webkit-linear-gradient(top, #149bdf, #0480be);background-image:-o-linear-gradient(top, #149bdf, #0480be);background-image:linear-gradient(top, #149bdf, #0480be);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#149bdf', endColorstr='#0480be', GradientType=0);-webkit-box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);-moz-box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:width 0.6s ease;-moz-transition:width 0.6s ease;-ms-transition:width 0.6s ease;-o-transition:width 0.6s ease;transition:width 0.6s ease;} -.progress-striped .bar{background-color:#62c462;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);-webkit-background-size:40px 40px;-moz-background-size:40px 40px;-o-background-size:40px 40px;background-size:40px 40px;} -.progress.active .bar{-webkit-animation:progress-bar-stripes 2s linear infinite;-moz-animation:progress-bar-stripes 2s linear infinite;animation:progress-bar-stripes 2s linear infinite;} -.progress-danger .bar{background-color:#dd514c;background-image:-moz-linear-gradient(top, #ee5f5b, #c43c35);background-image:-ms-linear-gradient(top, #ee5f5b, #c43c35);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#c43c35));background-image:-webkit-linear-gradient(top, #ee5f5b, #c43c35);background-image:-o-linear-gradient(top, #ee5f5b, #c43c35);background-image:linear-gradient(top, #ee5f5b, #c43c35);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ee5f5b', endColorstr='#c43c35', GradientType=0);} -.progress-danger.progress-striped .bar{background-color:#ee5f5b;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} -.progress-success .bar{background-color:#5eb95e;background-image:-moz-linear-gradient(top, #62c462, #57a957);background-image:-ms-linear-gradient(top, #62c462, #57a957);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#57a957));background-image:-webkit-linear-gradient(top, #62c462, #57a957);background-image:-o-linear-gradient(top, #62c462, #57a957);background-image:linear-gradient(top, #62c462, #57a957);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#62c462', endColorstr='#57a957', GradientType=0);} -.progress-success.progress-striped .bar{background-color:#62c462;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} -.progress-info .bar{background-color:#4bb1cf;background-image:-moz-linear-gradient(top, #5bc0de, #339bb9);background-image:-ms-linear-gradient(top, #5bc0de, #339bb9);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#339bb9));background-image:-webkit-linear-gradient(top, #5bc0de, #339bb9);background-image:-o-linear-gradient(top, #5bc0de, #339bb9);background-image:linear-gradient(top, #5bc0de, #339bb9);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#5bc0de', endColorstr='#339bb9', GradientType=0);} -.progress-info.progress-striped .bar{background-color:#5bc0de;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-ms-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(-45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} -.accordion{margin-bottom:18px;} -.accordion-group{margin-bottom:2px;border:1px solid #e5e5e5;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} -.accordion-heading{border-bottom:0;} -.accordion-heading .accordion-toggle{display:block;padding:8px 15px;} -.accordion-inner{padding:9px 15px;border-top:1px solid #e5e5e5;} -.carousel{position:relative;margin-bottom:18px;line-height:1;} -.carousel-inner{overflow:hidden;width:100%;position:relative;} -.carousel .item{display:none;position:relative;-webkit-transition:0.6s ease-in-out left;-moz-transition:0.6s ease-in-out left;-ms-transition:0.6s ease-in-out left;-o-transition:0.6s ease-in-out left;transition:0.6s ease-in-out left;} -.carousel .item>img{display:block;line-height:1;} -.carousel .active,.carousel .next,.carousel .prev{display:block;} -.carousel .active{left:0;} -.carousel .next,.carousel .prev{position:absolute;top:0;width:100%;} -.carousel .next{left:100%;} -.carousel .prev{left:-100%;} -.carousel .next.left,.carousel .prev.right{left:0;} -.carousel .active.left{left:-100%;} -.carousel .active.right{left:100%;} -.carousel-control{position:absolute;top:40%;left:15px;width:40px;height:40px;margin-top:-20px;font-size:60px;font-weight:100;line-height:30px;color:#ffffff;text-align:center;background:#222222;border:3px solid #ffffff;-webkit-border-radius:23px;-moz-border-radius:23px;border-radius:23px;opacity:0.5;filter:alpha(opacity=50);}.carousel-control.right{left:auto;right:15px;} -.carousel-control:hover{color:#ffffff;text-decoration:none;opacity:0.9;filter:alpha(opacity=90);} -.carousel-caption{position:absolute;left:0;right:0;bottom:0;padding:10px 15px 5px;background:#333333;background:rgba(0, 0, 0, 0.75);} -.carousel-caption h4,.carousel-caption p{color:#ffffff;} -.hero-unit{padding:60px;margin-bottom:30px;background-color:#f5f5f5;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;}.hero-unit h1{margin-bottom:0;font-size:60px;line-height:1;letter-spacing:-1px;} -.hero-unit p{font-size:18px;font-weight:200;line-height:27px;} -.pull-right{float:right;} -.pull-left{float:left;} -.hide{display:none;} -.show{display:block;} -.invisible{visibility:hidden;} diff --git a/docs/Saml2/css/jquery.iviewer.css b/docs/Saml2/css/jquery.iviewer.css deleted file mode 100644 index d68c6422..00000000 --- a/docs/Saml2/css/jquery.iviewer.css +++ /dev/null @@ -1,91 +0,0 @@ -.iviewer_common { - position:absolute; - bottom:10px; - border: 1px solid #000; - height: 28px; - z-index: 5000; -} - -.iviewer_cursor { - cursor: url(http://github.com/img/iviewer/hand.cur) 6 8, pointer; -} - -.iviewer_drag_cursor { - cursor: url(http://github.com/img/iviewer/grab.cur) 6 8, pointer; -} - -.iviewer_button { - width: 28px; - cursor: pointer; - background-position: center center; - background-repeat: no-repeat; -} - -.iviewer_zoom_in { - left: 20px; - background: url(http://github.com/img/iviewer/iviewer.zoom_in.png); -} - -.iviewer_zoom_out { - left: 55px; - background: url(http://github.com/img/iviewer/iviewer.zoom_out.png); -} - -.iviewer_zoom_zero { - left: 90px; - background: url(http://github.com/img/iviewer/iviewer.zoom_zero.png); -} - -.iviewer_zoom_fit { - left: 125px; - background: url(http://github.com/img/iviewer/iviewer.zoom_fit.png); -} - -.iviewer_zoom_status { - left: 160px; - font: 1em/28px Sans; - color: #000; - background-color: #fff; - text-align: center; - width: 60px; -} - -.iviewer_rotate_left { - left: 227px; - background: #fff url(http://github.com/img/iviewer/iviewer.rotate_left.png) center center no-repeat; -} - -.iviewer_rotate_right { - left: 262px; - background: #fff url(http://github.com/img/iviewer/iviewer.rotate_right.png) center center no-repeat; -} - -.viewer -{ - width: 100%; - height: 500px; - position: relative; - background: transparent url('http://github.com/img/loader.gif') no-repeat center center; -} - -.viewer img -{ - max-width: none; -} - -.wrapper -{ - overflow: hidden; -} - -.iviewer_common -{ - border: 0; - bottom: auto; - top: 10px; -} - -.iviewer_zoom_status -{ - border: 1px solid black; -} diff --git a/docs/Saml2/css/prettify.css b/docs/Saml2/css/prettify.css deleted file mode 100644 index d44b3a22..00000000 --- a/docs/Saml2/css/prettify.css +++ /dev/null @@ -1 +0,0 @@ -.pln{color:#000}@media screen{.str{color:#080}.kwd{color:#008}.com{color:#800}.typ{color:#606}.lit{color:#066}.pun,.opn,.clo{color:#660}.tag{color:#008}.atn{color:#606}.atv{color:#080}.dec,.var{color:#606}.fun{color:red}}@media print,projection{.str{color:#060}.kwd{color:#006;font-weight:bold}.com{color:#600;font-style:italic}.typ{color:#404;font-weight:bold}.lit{color:#044}.pun,.opn,.clo{color:#440}.tag{color:#006;font-weight:bold}.atn{color:#404}.atv{color:#060}}pre.prettyprint{padding:2px;border:1px solid #888}ol.linenums{margin-top:0;margin-bottom:0}li.L0,li.L1,li.L2,li.L3,li.L5,li.L6,li.L7,li.L8{list-style-type:none}li.L1,li.L3,li.L5,li.L7,li.L9{background:#eee} \ No newline at end of file diff --git a/docs/Saml2/css/template.css b/docs/Saml2/css/template.css deleted file mode 100644 index 45d61967..00000000 --- a/docs/Saml2/css/template.css +++ /dev/null @@ -1,527 +0,0 @@ -@import url(http://github.com/bootstrap.min.css); -@import url(http://github.com/bootstrap-responsive.css); -@import url(http://github.com/prettify.css); -@import url(http://github.com/jquery.iviewer.css); -@import url(http://fonts.googleapis.com/css?family=Forum); - -body -{ - padding-top: 60px; /* 60px to make the container go all the way to the bottom of the topbar */ - background: #f9f9f9; - color: #444; -} - -a -{ - color: #55A72F; -} - -td p:last-of-type { - margin: 0; -} - -li.l0, li.l1, li.l2, li.l3, li.l5, li.l6, li.l7, li.l8 -{ - list-style-type: decimal; -} - -a.brand, h2, .hero-unit h1 -{ - font-family: 'Forum', "Helvetica Neue", Helvetica, Arial, sans-serif; -} - -.element .span4 -{ - width: 275px; -} - -.namespace-contents hr, .package-contents hr -{ - border-top: 3px dotted silver; -} - -.namespace-indent, .package-indent -{ - padding-left: 10px; border-left: 1px dashed #f0f0f0; -} - -.element h3 i, .namespace-contents h3 i, .package-contents h3 i -{ - margin-top: 2px; - margin-right: 5px; -} - -.element h3, .namespace-contents h3, .package-contents h3 -{ - margin-top: 25px; - margin-bottom: 20px; - border-bottom: 1px solid silver; -} - -.element h3:first-of-type, .namespace-contents h3:first-of-type, -.package-contents h3:first-of-type -{ - margin-top: 30px; -} - -.element h2 -{ - font-family: inherit; - font-size: 1.2em; - color: black; -} - -.element .type -{ - font-weight: bold; -} - -#search-query -{ - height: auto; -} - -.hero-unit, div.element, .well -{ - border: 1px solid #e0e0e0; - background: white; -} - -.dropdown-menu a{ - overflow: hidden; - text-overflow: ellipsis; -} -h2 -{ - border-bottom: 1px dashed #55A72F; - margin-bottom: 10px; - padding-bottom: 0; - padding-left: 5px; - color: #e9e9e9; - font-weight: normal; - margin-top: 40px; -} - -h2:first-of-type -{ - margin-top: 0; -} - -.hero-unit -{ - background: #75a70d; /* Old browsers */ - background: -moz-radial-gradient(center, ellipse cover, #bfd255 0%, #8eb92a 72%, #72aa00 96%, #9ecb2d 100%); /* FF3.6+ */ - background: -webkit-gradient(radial, center center, 0px, center center, 100%, color-stop(0%,#bfd255), color-stop(72%,#8eb92a), color-stop(96%,#72aa00), color-stop(100%,#9ecb2d)); /* Chrome,Safari4+ */ - background: -webkit-radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* Chrome10+,Safari5.1+ */ - background: -o-radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* Opera 12+ */ - background: -ms-radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* IE10+ */ - background: radial-gradient(center, ellipse cover, #bfd255 0%,#8eb92a 72%,#72aa00 96%,#9ecb2d 100%); /* W3C */ - filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#bfd255', endColorstr='#9ecb2d',GradientType=1 ); /* IE6-9 fallback on horizontal gradient */ - - padding: 40px 0 15px 0; - box-shadow: inset 0 0 10px gray; -} - -.hero-unit h1 -{ - font-weight: normal; - text-align: center; - color: white; - text-shadow: black 0 0 15px; -} - -.hero-unit h2 -{ - border: none; - color: white; - background: rgba(48, 48, 48, 0.5); - padding: 0; - margin: 0; - margin-top: 15px; - text-align: center; -} - -.namespace-contents h2, .package-contents h2 -{ - padding-left: 44px; - background: transparent url('http://github.com/img/icons/icon-th-big.png') no-repeat 3px center; -} - -.package-contents h2 -{ - background-image: url('http://github.com/img/icons/icon-folder-open-big.png'); -} - -.namespace-contents .element h2, .package-contents .element h2 -{ - padding-left: 0; - background: none; -} - -div.element -{ - border-left: 10px solid #55A72F; - border-radius: 5px; - padding: 7px 7px 2px 7px; - margin-bottom: 15px; - margin-left: 0; -} - -div.element.protected -{ - border-left-color: orange; -} - -div.element.private -{ - border-left-color: red; -} - -div.element.class, div.element.interface -{ - border-left-color: #e0e0e0; -} - -div.element.class.abstract h1, div.element.interface.abstract h1 -{ - font-style: italic; -} - -div.element h1 -{ - font-size: 1.2em; - line-height: 1.5em; - margin-bottom: 10px; - padding-left: 22px; - background: transparent no-repeat left 2px; - word-wrap: break-word; -} - -div.element h1 a -{ - color: transparent; - margin-left: 10px; -} - -div.element h1:hover a -{ - color: silver; -} - -div.element h1 a:hover -{ - color: navy; -} - -div.element a.more:hover -{ - background: #f0f0f0; - color: #444; - text-decoration: none; -} - -div.element a.more -{ - font-weight: bold; - text-align: center; - color: gray; - border-top: 1px dashed silver; - display: block; - margin-top: 5px; - padding: 5px 0; - border-bottom-left-radius: 5px; - border-bottom-right-radius: 5px; -} - -div.element p -{ - font-size: 0.9em; -} - -div.element .table -{ - font-size: 0.9em; -} - -div.element .table th -{ - text-transform: capitalize; -} - -div.detail-description -{ - padding-left: 30px; -} - -div.detail-description table th { - vertical-align: top; -} - -body.invert -{ - background: white; -} - -body.invert div.element -{ - background: #f9f9f9; -} - -ul.side-nav -{ - clear: both; -} - -ul.side-nav li -{ - word-wrap: break-word; - padding-left: 10px; - text-indent: -10px; -} - -ul.side-nav li a -{ - background: transparent no-repeat 5px 3px; - padding-bottom: 10px; - font-style: italic; -} - -ul.side-nav li pre -{ - font-size: 0.8em; - margin: 5px 15px 0 15px; - padding: 2px 5px; - background-color: #f8f8f8; - color: gray; - font-style: normal; - word-wrap: break-word; - text-indent: 0; -} - -ul.side-nav li.view-simple span.description -{ - display: none; -} - -ul.side-nav li.view-simple pre -{ - font-size: inherit; - margin: inherit; - padding: inherit; - background-color: inherit; - border: none; - color: inherit; - font-family: inherit; - font-style: inherit; - padding-bottom: 0; - padding-left: 5px; -} - -ul.side-nav li.view-simple a -{ - padding-bottom: 0; -} - -i.icon-custom -{ - width: 16px; - height: 16px; - background-position: 0; -} - -.table.markers -{ - background: white; -} - -/* JS only functionality; disable by default */ -.btn-group.visibility, .btn-group.view, .btn-group.type-filter -{ - display: none; -} - -.visibility button -{ - height: 24px; -} - -div.element.constant h1, -i.icon-constant { background-image: url('http://github.com/img/icons/constant.png'); } - -div.element.function h1, -i.icon-function { background-image: url('http://github.com/img/icons/function.png'); } - -div.element.method h1, -i.icon-method { background-image: url('http://github.com/img/icons/method.png'); } - -div.element.class h1, -i.icon-class { background-image: url('http://github.com/img/icons/class.png'); } - -div.element.interface h1, -i.icon-interface { background-image: url('http://github.com/img/icons/interface.png'); } - -div.element.property h1, -i.icon-property { background-image: url('http://github.com/img/icons/property.png'); } - -span.empty-namespace -{ - color: silver; -} - -footer -{ - text-align: right; - font-size: 0.8em; - opacity: 0.5; -} - -#mapHolder -{ - border: 4px solid #555; - padding: 0 !important; - overflow: hidden -} - -div.element div.subelement -{ - margin-left: 10px; - padding-bottom: 5px; - clear: both; -} - -pre code -{ - border: none; -} - -div.element div.subelement > code -{ - font-size: 0.8em; - float: left; - margin-right: 10px; - padding: 0 5px; - line-height: 16px; -} - -div.element div.subelement > p -{ - margin-left: 20px; - margin-right: 50px; -} - -div.element div.subelement h4 -{ - color: #666; - margin-bottom: 5px; -} - -div.element div.subelement.response -{ - padding-bottom: 15px; - margin-right: 50px; -} - -div.labels -{ - text-align: right; -} - -.nav-list .nav-header -{ - font-size: 13px; -} - -.nav-list .nav-header .side-nav-header -{ - font-weight: bold; - line-height: 18px; - color: #999999; - text-transform: uppercase; -} - -.detail-description code { - white-space: pre; - display: inline-block; - padding: 10px; -} - -.go_to_top -{ - float: right; - margin-right: 20px; - background: #2C2C2C; - color: #999; - padding: 3px 10px; - border-bottom-right-radius: 5px; - border-bottom-left-radius: 5px; - text-shadow: 0 -1px 0 rgba(0, 0, 0, 0.25); - line-height: 19px; -} - -.visibility .btn { - text-transform: uppercase; - font-size: 0.7em; - font-weight: bold; -} - -.iviewer_common -{ - z-index: 100; -} - -@media (min-width: 980px) -{ - a[name] - { - margin-top: -50px; - position: absolute; - } -} - -@media (min-width: 1200px) -{ - .method .span4 - { - width: 345px; - } -} - -/* redefined because twitter bootstrap assumes that bootstrap-responsive.css */ -@media (max-width: 980px) -{ - body - { - padding-top: 0; - } - - .go_to_top - { - display: none; - } - - .btn-group.visibility - { - font-size: 0.80em; - margin-bottom: 7px; - display: inline-block; - float: right; - } -} - -@media (max-width: 768px) -{ - .hero-unit h1 { - font-size: 30px; - } - .hero-unit h2 { - font-size: 19px; - } - -} -@media (min-width: 768px) and (max-width: 980px) -{ - .method .span4 - { - width: 203px; - } -} diff --git a/docs/Saml2/graph_class.html b/docs/Saml2/graph_class.html deleted file mode 100644 index edcc5d84..00000000 --- a/docs/Saml2/graph_class.html +++ /dev/null @@ -1,105 +0,0 @@ - - - - - - SAML PHP Toolkit - - - - - - - - - - - - - - - - - - - - -
      -
      -
      - - - - SAML PHP Toolkit - -
      - -
      -
      -
      -
      - Back to top   -
      -
      - -
      - - - -
      -
      -
      -
      -
      -
      -
      - - - -
      - - - - diff --git a/docs/Saml2/img/apple-touch-icon-114x114.png b/docs/Saml2/img/apple-touch-icon-114x114.png deleted file mode 100644 index 1506f6a668fbb2837c06b561895da248c310ac53..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 28338 zcmV)=K!m@EP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6dxqE{8JzR03ZNKL_t(|+MK+3xMgWo=J{LSu=hFVjxo=XL*xLNB$<#*nLcTTVEXjYE|_Ww$NZDp;tfr6>vr6bZ?cnIt(6ky8vA8S`+5bI#uT z8&?1E?Hdu+Bi+><&vS=3_uhTZ+3Wk(de^(&_Y?lV{geKy1)O)z&(4gh%6p%3awtww zBVbe!P&xNEa_)2gNl{Qh1p4nq&U?20$KUy%_SY1UbN@s8@6KLK&wY{euBrd@U7h{y z|Kag}?nTJCH-fJH!Flgv?a5^AvGQr{BP(PfKl6&qe{l20#Tz7txq-8_wU(KI$B4nifb$ime?ux@jYBF2 zZb0f^k}(*ugl>vp@Ph$X zAU6#v0x5wrWU(a8&KR;LQtZH3vT^0EhYkgtb%-WJ1m`NOtH?Rhv{Mj^ zah{wKIR#P*)V`vshNRGvVn9X6F|#t6u-c4ilXN-D_~_EgSMGo4(Leg!m%j3CHD>zQ zzJsek*9TSqX9D{F8c1V|gD#hp!A+Pv|-_f*66AsH+O2B_+h9 zWKoQBgb-;%L^Lz-4xS5ab}j3Q@LJF#E?{+$lUw_ zz8Ww;J7Qt|24?3Mz}KuyBm0jW|JbeHy65+AyXXGLpEz*n4A2>4QqDR5{|=hQzKRW(YB1ti@PQ=%#pEA@l)OC3G!Vk6K4gx!ml~U{!F|QdJ&f6)P1g z85K(iErY>;N(>=HVoc<$RF$KREf`OX0YuOg8P$V6T^gFUL5<*i&2%~?q>Oi#fp=JA z@Ydj+Cu?Tfb|eHVO3cuNhymsXHO?BkwjtAJ6E!q3(u9B_SOFtKj6v(ckjpN*Sa$8) z$ygna9zOPapSkspKm5n9-u7rSovt`*Lrm#A2Gf4002?DV=RCmJ^*{bYZ~Wd@UVrWH z>{&m$>BPZDx%a+%^w`lOs3vjFiLWZe*|Li?V~iliBG!;qF#^Vz{^#JF!x)1f3^CS_ za{^JEafqwPDPgU}7*G^34s5Bah=38Cb$}vBNsZ0`8L27|$T{P^$K*g3A%qrV9nKk4 z1U2RLN>*G|g`U#_7!VXP}}xUy?CqojLlup(66V~j;LqoUZ#qXH>JocC09 zg*OIg9p0B(8dVYJ5RIsm-B;HGMgxZtP%I**M>k4HiIgLi_jqR!QBXlNQ8`cLy&y)8 zoj9qdj~`>(!tC6R9ouid>gktHAKZWNv6Yq8Mj-!l!L{ZyVEy94mJj~$Ti*Ay z9UDI|J$2MP^zdFiy}TsWSs7F{)>(`(APPpX*5bS`^-B|~31fW^P%SDY4QftjmzA?+ zSE?p*%BX_%4#D(*!k1k`+2I&DiwupmC1489Tb#2PYsxO|m#*_3XDq4(XsITAJ?s}t zItw(tuW(L)OwNi}3kG5cXBT1REY=vTGgvF+lt?OwH3){#28NWpz4{Q>T}7X5eJo)-5+&dcm&YT@OBb_oQj2#+aeTiee@B{If<`57=z}Fb0rmtfH4+95wxTodv4W> zDK|)S##)Q_zNA27P)+4ci<}LxbsjO&r|5FiLvlIWU68f_POUzN)a+p$aJ_j4KNwb{ze}K`}-!($_r|j983wXjZZ+))-LjYo^DbRD&U6T@O40#*|bfIpdr!J4iEF z*Q42UZI+~rvkqr1l1rPQIibd4M6j*^E|F40o%5)IX26t%XpP{k?^_N{dft;-2iNm&sw4C(>SS#rwcycV`Z)3q2^VFj!K>nl{Cys~r6vmh92@xCVK zL>D44B{_EDv{sU2$F|Ma?cTln)P0Zc+uLXuXiJcjqAD08B`y03#PlV> zAqGm8RK#exPg+{8h!A7K2y*bq5v3b*%_TeE|NN`3xCWT(V;apXKR9_lIN*cD+0M$~9jPV%jF}^Ofdo9v^aMx~JM&!U#M|8cHxmP~_s`qc*xNa*@uf=dJ zkRF)7{KB2jylDOCmHVGO#K}`9`<_V{IE(GkW*tT6|51e zs>T?>IRmLHFVI-flA3bPh?c&}c~^pN3YyDV`(4`iUCtt8NU2At+P5MZrPNi?^8ChI zL|k9HeMz61`c*zm3LI$71Wzc zV(H7o$B-;E&!49aj&GpIby3e)kJ{rjF^_u}Y9&%FH7 zYsHv_K6aS?qu#n{!{%4r@cj4ASC%6uPpeofNfm27Mxe45az@K~D{s0UfOSmTDU<1h z&^2ULR3WB5n9gCU0VO?Ks=*AJJEA5s3StQ{kT4~s`l{z)Go~7rt(W6jFeDhvS*|mq zBBY$kPSb)|#g^4i-?NFF$MK4wvBUTpTMaRoLJtZUx)i}@&r=he4IbglR`HC(~3#XnlMl2~NQj8EAj4Nqc zG$GcYrf)+uW27|jLa9@w-GG!rNwF#QbYKZksa1uyRg@f?l0C?UaL8TR(Yb)N6q>Ry zdK7L%&I53Y_Wy6&2C)w31Yh+43L!LO6o|Q$hk{Tc#Z>C52u56~>1K_DNQADVZQH`z zlBvDL5~06F?L6LFEJ043UgE;_v)4FlHUl$&vp`*Wx8J9w78cQNTM-Y^TK7Af_&lr*yU@Ko!l3F<^36>XT}z zmpK-8NXx3vDV5+Di?zN`f?`Tw$hfK|w+)CxW82r%(hiul-EDk7;wb6TI7^HXV++6v zU5l}G0WiiQl0h>m38@>SBE&Xey{C4b99zH=Q^^cnP*R-Yd=04({UV0SnRC+`=vy-- zgpQy>N*U`sRaH?{9u%CE1#E4}Zr*z)lU6s+jYR8F_u%6P?~Ey}8ld*hE$-g5_^Q*( z%N$!;)+R=rvv{jigHkhMzZ!jiF+~gZ6-N#&pd_)ZPRDdzpzEf@7)UV_LdRe@EH|YG z9Ht&%TusO&#i&roWi!ClBaExjzDbVVgrwyr8CP1699vS?V5}vJLBxafAg-!VqnLV# z3`QmKNLi5LYE;XskL|dCk{C%TlF0PEM_+Rlr1ZQoMM93?hlDPm#+Bva3>ib)H7F1g zL{+RGoJHpeLF2UNn}xLkl~w6N;axx^43jocRRg?Lj3iha`=o@ohT0dtw9rf-F6PlngwG_pE{*5G{!)T z82Y{xMKoZo!BN^In@c<7`o7nQLE8z04p$Em4d+M=ffNE+GuAnr7_2G4EGN(q(45FI zLkf835fzNF7=h4E=(-MP$_|RtRj>}Lk;)HBHp__|ODoj1Q-Ug)(xcXuE!3T{SXB&} zs`6C6l(4oL6H_E*m4io*QQNdj&^e%XK&7g4m8L;-14NeTV&=@!5-`u~aKLEj2_ca) zgjiS&?;KW@cCw0bRiW2%xuH2kCK*Omx#`YVi1Ao4)Yj6u!bazu5o>8DEyK}}tdXuw z7^!j2l^!yebeL7iF_!db$_UJ;fU}%9cAUxT3Lynnmd=okVd>;aV$N9aAe9<5ni(+| zjmTu?=N6co8L@fGX6EM>@U|)oNx>LFy9TKTpcYM#V?bjhB@f2ow8NmJejKK1NLsjE z5kr`)g7H`tjPayc(yQi-_cd+km^KlN;+&=OuJqAKF;+2}u*TwSxo!xNl!X`~tK%_I zVOG7%`CK4t)jX0gWzsf`<`&QtNFtnGULqsR4F}YN0U-u*=o^1ASnn9Pnx>tiYZDI< z@Q#!clL({1fQ*nelDdGYD{NG{=?ZQzDm%;?rp=T=T_euWwNnOuwg+1+##wR_QU>cX zOG`@}J9&yj2M^LEW%r(EaPc)S;=-q0$;D5<3SSS|vh$)c=aX|3^YW?V96x-3$#|9h zd++Co2kz$Z{=MA(t-BZwD%P!EWc{XX%#DWqM8kp=LP}%|>T7bDqT$>ODu!&Jo2-z< zlg0ELs(`H!>#$OAh8jaiEmnj!2-7B@&i7Ia4;l$wgY!eIb9h@aOjc-9rU`+z3p6ni zj3tJSd2LY5!?i#4X>qbFpUNg}U;jlu0R-G-%7bF(IW^ z_N)n3h@oSpZJ3`Q6&i1^lXaHtlPYmb(^;U$~D)&>?}9gwG9v6 z`BlF4mCtkA7e2$O!w0zZvWwZdb2}JI=ptEjsdZYwo1q^TH>+f02whkBw~*;lz}6$2 z$XV7V=S<}WgdAy8B#PjS;4EltP-CfvGgQtYIg(QuHgqA8qB5OMX<{a%Qek74)D|hl z0Pqg5s_MvrE+iGA)F{pxu!Zetx{eqd7H8*~n{gP8Xbj{m=UAAW5L2NslmHt;$_a6v zmGPAM8CPh$IK~fVsjMSaWkO)YVyha>il~8P&?u-)tgbAx|KL+(Q}Mi;zK5TB!`s+? z(Pe!IGO&WGAQJmds_G>#4rmb>_JM7BYI(J9y%eyh8miiI^>r`f>g!&{J3jEMJodm{ z{Nta0lzYGSd1`CezI{8@a7gZAX`ieihYm0pTa&w3xaQcP)okI5v!XeWa==$ZBnP5q znl_NcU{M?yXDSrIiNPC#rJ(FCMpDj%q)eKYsD==l!lD5=tE4WlWAn!Cj~qN~9AHGm z%(#l$*MhNhZ3k6_w}Q#3prz2UJZXt4%nd7i<%uy7V?roIFJ#(YWs+6#)u5-O4AZ7% zG^{bEBISfJP#)}K0Xc)J?SrR? zR6Ww{`asseGB68F`$g-{n-iq|qn`u zIpKXx%$eoWr#O1#6boB+@z$UEk6iz%@9hIHMs+y`s6*DHBoq5r$t z^HT0wCYtu&H~p@Rhzv>#Lk8M1-l`q1dh3ty$~V1(&wcXa{Nta0l%)d)*}7#*!3@n5 zTwO?a&BPEum8z-UiC`l>pn<+Ikwqpi^8H`5IP#z0`E=0PJNVTeB z)EJSZRLjB=*3LS+pxmvN42 z#?=OT-HxdTC4G3Ijgg!JGc%)tZgVQ5AuB8`FLC0;5@vRh7r*fxyyd;`$5;<6^{F!< zVte^vJ};mNWtPwcLbptc5Zlur&^1j-*QU%g%dSy;RhMCOZSnP}-<9M3+UL{=(4g94 ztn%G&dK)*q`t|(z|Nd*-|BWwV!%;?~c?PpXL@5L5Ue8nbQ-?J|%!W1#*_7I9H5a;1 zmD<;MXRvlaN=nzXbTQCHJ)2rJr!oW9G6{0llclg>PV}tivjh^=$#~3UJY_U0DQ{E_ zNh#3ANbDy8zA7^{Vj_!SW!f-smf6v;G_lT<6`qvZ`JS6Bh)uMBkZIH6T*aU=Bmt8X zlhsuY9XZL4OP|HtKJXvdwdd)50O<*CMYZmO2O3)Ow!DWC-W|7U*_SvZsQMs{X^_~>_N6}Sz!I<%|!vBi5^;GtRdyhWZKYmEyK}F zxp!hwRcdST-l3@@W=9typ--hDrCwVrh%Y6JZ7O79RBSYo5a|e)LcI*nj>tZu{(~$ed#1`bCU$q!@4r zF(sy5BE~@FD}+oA5o0Zbs=`;UFJnSXfi^^%wk-^A&)bS9M%NfAhX5&O+O{L4Oww~2 z0k<~W8_bLtjT%rTgg{P-;h>`O4sQ(JI=T>wtgzSURMrqMgcw*}9Wy&KqP9X^56G%z zaoSw+I;IfnDPhGj9=9AieTXd=Ud|i-^}D&|g)akEQSJHw3XlrV$pYF_sktb(Zw|+f4Hg90}j;+KPX{RmLz+`oWn3dI~(-^;81Wp3Ja>NWygmvrIF}t`9 zQDtRy%!&Q?a_phoczAvT+b_SG?N5I;7hZ8C^>BnpK-KoI2UMTJ*CXEXfnVg}r(MaX z{@`~xcIYWK@7jU0j+`^orbV#~hohb`YN-c9YF}u|7>oY3Z98Hvdf1e6ncAe>Ph12| zibzS-(`G`535>;PFFTR*0;vjZS5jxMHX(+^HPJRL4?gf1*S_?-dGo*hX?9-xG*nLmuD?-h(u{dh z%shVIH`ssoH#z+99nenMv~eSY%@>h#rfbHGPc_6438|lsm?HKnH8S^_o*s};)PBwy zCgU-#s!%bkTepG1mcp(ad*JIFxbJozzw|lmdG>SJbJaD4+-JETmASr7pW-F2`2jZX zxPZU>-4Ap4&|Wre*ifc5VsKLCwkbpg^{|lUnn+P-yHK)R%%og;QeyzPcaoLO38IvLY89Zl0P8Bb`NmbNWY$&?b!bXo?rA%PgW z>6B^zm}ZDwM;8LC%VRtX0eK zKBq+J%1$-Cts(b=@enh^%5vwv^7+P$u<7 z4SiMuA)4^6NF-8DC0C0rs|zaDITu zDyqKEAWJN)-^nFcUCYDw-p}EEd)c^Y137lom7}gbs!G#N>AH?KDQ#1xCDz(rIPLl= zzm(D4d4?qC9M%-Xo>b{#qK(RMSaHw(J?mptPyKm zf$FwM6H2pMRAZHO_@ZGT##o4R(O$OTh!lCEvxcg&?0aHAd#-&6@A>&(Wo~f>)kz_e zHTH;fmNUnXamy!upF{V3m5Pq}#d$KYy1G(sMBCDZK-W%sny{bDXi+VM*iu&&ga);~ zR|G_iDQ$>Kk(h{<8q|iaP=lH=n&`TQX;ac(N*%R#%r7nwrz`B=dp`#s-^bPqFK0Nr z&@VvKe{GnVo8_{ruV?SQcXRCE<80r$8EXuoYlvBByGWZ$KZ*1*&R$k(jbJgP9LXv5 z6P2O@%sCKZpo^u)4?V_NH#^|2Cyw26X0;Ebb9VQOo^kQb<1XS%f&AL4CLHkQGw_2u~e4!iL?K^6p>!ZPsnBQEht=;rsq@hQs>~ z^LPKphiQ&J!sZPNh_#$PeTqplVcN9BF7yiSUTT;UR*HR~_(XCMCL3FrCoL8QRPnCY zt!l9^*urJgwgF=;)+m-DBn~kbL31piuL}X^Je7mPPdv(F_uj+yORr*fVIv|fnxflHowJ$HQZ)5K=X%xJDO_gx@lDKp#@&Z_clzY`_rqLApvZ_e0W2CAj6Ou4XV z#ulZYwJeMV-1+#iTh6SG&+W(;UU|XID@_snc<(WqN}kTScSIE?-dJ~5pQ&hJ9#o5* z-U(I=F)3X$De5sIM~^LW;&k9Af9vfn*bYhIm&d?`<1c9Z#4vftUqv3cHYchf#4$%wr}mu$8J6b|5IpD#mp}WN{NM+Fja$F^ZBpum*0Jju zAB#1%2Q>+297Z#SLIi}Ubg7Vy#yG6xqAM_lm{Lz3MA|l-HRYZSWD0H9I$eeU03ZNK zL_t)ss5y_fMIbD_Jkj^Pq_dWsBh&FJtCK0KT}QT-s;bJ*l9mQH1}f)R7!BC}_(9(A zo}cF08=ebk6}k?k>4P}n#Nmd&_>KR-oarvQalje!_i#w*K==I5xi;p4yjGaP$rj534BOfL^f7_-U^uXz=(_<^_c#AExZ zY~ic5ZE?nk6Ik9Fn>+NOv_^A*4tf0$m7%uEF$uE$58{5NkeT9a{hNN8J}^&CI5#AtpKuYcE%;B^_i zhpsKxiDQ~>BY*iDzkqF)*tTmsD=W)PR+h<`v-8f8srvq_6#A4(dK`@gs07pq5yh$E z9E50?#E#|VCGNiWK_aj)Gh{NJFqm6M4r4Ccb19>B3%!3cGw_4b0#t)uVv#UF)M6co zF%)k_3QWg=rIl4iGjnX&yugtor}(Si`~}|rq2Hz+8bns1okD`4b^Or#f07@+`O~b9 zr_7E9B}k^Y^4B~vA@#HzTI_uNKwXi7QbV9?TT)M|NGxFOd~g2Q9ocoE)R>fdRwiM4 zGp3_BaILky>RTAj)YMhcTy`NcZ6j@~G|dF-49>!BU%QvL{rg{GelbE-7Z$>oA#j!% zKKJoI;MAdg?A*1D$?7W2bP6$(VeCNO8KYej8|J&bvi|_r>pXadyNBH))?__0ph0$;T8fjBU z*EN`|c+;x_d#|Lomf>KCU};)K#nN>hE6dAVa`6si^$558=^t>;RBTZTSYhMVdEWlP zpXb062N?_oJ(vWfH2Tv}=9A7>__{7b;}D1mLd=B>hy|+{rDTd+6ouq-=NA;zYR&HJ zFWYhR$)%NI;EY}IMVO*LS%b$#M^btpP32;~@}Q~M#EUHzSJgcA)G?m(@>lcfA9@3I zwI&pHy)-fN!0nIm#XtTXF1%nH%i{@c8%Uv}3mwi%d9lu;Yb;6%J@V9kp((?((_`u_cINtQWpW)sA@%OmwnyaY>LRBX&e#WzT=^NjTn_0(g zw|G=!Ju%**3rdWN=)&P zGV-1rI=U_q5>$f$-~7TCcxg18*mAIiLWsS% zTP!i;UQ4XK*G0%7l^tnp*<{vX#IZPAbML`ZUs@XXs8v;&G?QW+aTRKMD4z>^pET2k zuBYBCs3oS*`vD!5F&G3V!otD=M-Lz8rq{iRU3=CcVO$j9nvpm~wdRW-|9v*h3R}0X zXS_0@Z5yl`(6xym6;y3^Ce!lO$ zKg~nmx|M-<tj;`9oYb0m#L)7lk^F~vx38*IP(bLdDZ5;b950hGo-aa9RPln^ty zPp#(MsSu@kj$KFBwIo%NnxaO`u^_gtrEA+_Bf!v;DmZHxI8)3l)^gy9qrB#AZ)a|H z2&zbkXev+l)DtK9!Y4k)wr!hfR>ycLySr;wflTNcnzke3AO>uVteiT--p3B}@KdW? zdc*7ZtJM9SvM~Xwn zOUi>^znee##rN~Izxp%Y^pii!2S553?7HA$B(*@|`d7Vz-}uy*c=HE-i6hI(LwgS} z9Z#@1GjbL(G;KNUBZP+7wyZ3zvUA5qzVY8a&XIk`dVzDX&ykh6g%PiN=fC0cN1mi< zCgoHS&4_B5^ygGgBuNQLnW`F6S0ifYDJCsBtC(*?plL!s4&1FYq2>3xU2rOR1P9y`HBS3a9py!rJET|}KJ_Ux=s&-002|1Z>T zOqPyz($F>&jAon&V(YUa;b|8*d1jTPCzhDozK1vb`2Wg}{NitN)%7o-ovd)*t)J&J z|JQ%v_`$<$xnK`_zy2AXe%(uW>05r7XT9_lJaWf3xa;pehG@TU-PoJ{s^<{*0Xy07!QB_7Q%GQt}CBOJt$_^3!nZhUiPN9B5sxk?!22b z$BtpGFm0!(wY{U-l48f8t{Dw#y!RY=>M+lI(Tzx01y>atehSoc>-qBEe-UpBA6$Gd z+6PH`7nTJBgi?I&kXb3d^1688_a{+kW=fdG*`g!{(j4Ir79_?)b;QPjhVVeO&&6m$GTsJTnU;u71hu*mU6@?)&23a@QCBfhTVJ zBFiU^aorn!kQcoEZOm@~m=LOPH4b~`^KkG%@ z_yccb(kc($yO*Uir>QH4Ghj3^sOqwta%N_3#O+`ECfB_9dzqUT=sKin!F!C$OqLV( ze&tJS-MXHXBF+_Klyl`^i_&rw;Z++`0Y0f5W}&^JDCdZAo>}jB=*ZG7%af+(T8-I# z&CYcOJy@kEIb`A3Ss>~RB5L^eeMf<`*VNA;+7p;|HgMvd(Suj`r|zL$P>&gY-VN*Hu_dm4@eOELMQm00-oXG<&GNZF{d0Ej z+T8bnWtYVi=~C`pZL!xsmHWEpPSaf2BdjB(%-pc%p`**^cBC`1`&m2YZ(eBvb>*=L z8v8*fWxMB84s@XRKdKhVwNiRMYYoSaEpz#EUd(sB`Xvl&*XvY^*eHaGPk#7U*u7(s z&~=3A6iu0&W1*h90LD-cYT|Uvu_MR0^12(i?H@kPm;dTdx#+5^dF4Cb!!HQ-*UJ7|xD>ipTH1gBV(_dhsiPF~<)a$+|RvM_|dx_V&%*cM2d>M z?bQM~D>0Uz*CprtR=sZX`q zdrni?+C6%b-X~cPYW6+)6fgPyw{qokpNbll(44dqHAtsW^SH) zzVun1dhh{a5Eiy< z8@64*71zHQQ`Ow@nNRcR9p9p=XV|dwGK?GX>5u*{cYoopSzMScF0vTunifqUPMEDL zR?aN5`JyY?dg*oup#ZKP9UeZk!rkAzmASDdw}aRAY+~ z%i@gZfg|Sy(p$6p`pb9TJZVc2w!M+HG{VxKdSNhH)MaaZrf8Wq(7TzA9$n_O?|dh_ zc5i~z^)BL!_(eYT(T}2&)8yDNolFYO%DGHZtQ1ET8G~Uk@Z{8S;IVxOhUwBNPCfM` z&3Kg!J1)e!8IXiZMzm0eWoUnz#jU%z>;*Tla{L(gedY5Ue(V8`9ej+HV~0sOvvm9z zmp97BWox3;DwH;!LvM$9`Bp-I| z%%FbM)%UJvGh#0Gg}Fh+gGZKcSsphJyS3({s>-wj$_^}3kp46Zk;2wnQwRcc4iIUN zw8qP;Y}t7+>$l89?9jGDstQqsq43}xw{y|1S=#ZKfFbto-L7q^D_;(RP>c1B@tGx> zu1pdhxbt?t=UqR}CC_*!-~Qa+uzd6gSH0|&tlPRCVTzLagOmC`k7cTAmKVJKhe%oZ ztKa-N{LE~bG*n;UrnmhVmt6ZCpgk+OM5^M0WR9E+PuzPC#}6DJM&YvOJfG2Mz&HN> zzwr+r`v@lvKEjrbvy5g3grL6wWGx-$9Re9M_Lq?z8Ego zv^lvyEXg2Fs4B0nHB2U@udFKO7Dilj*`>5+_OY-qL)T7=PsUiREr)5OTy|qj zsT^^tYe&o2-asU0rIY`3`eBN8B*st>sz^DssE5Nw>5nQiSk`=iWhXc>Xh>|`wUfc1 zD#Um%uw~%cfB#*qpC4j!E~6(?G%O{ZD9v<=^PVF|PjY%W@_q09DPHo1*D^D|fs3x# z!;5H=-gYZ@efBe)cw#Tldev*FN1JG-CwT0e|D6YJ{VK+K z*6q58i=J^YJFmE&;|KP!dipree);!s;>r6ty!R1~A3Dn8zxPo#?cC1BofmNE;RhKm zZe+_vd)Ri#1vu*5m155Ib;Y`cA&=kt z09!A37K~Sr{@}x5<=M7#H;)~Cq!+SDIiE+@eBkBy(HIh#GMK<*=n}@4L3v7AT;00H zTlE~)q?z;+kVKBf8)$mvoAiAoMtTi4#rKzskyV{zdEBvX>rMtUvtZJBhX&7a`0+;= z)q+T-t}8Ti_MizjsL2|6a^Dfgq2}#B_e*@&%{Sn@L-i;#3nO0swzsfh+cv)PiH~vm z&>>#s;yj1;KE&MOMlOEV^=!ZVVm4pA8*3aegbahx2!M?{ zx3Y2PCRR?ZaOAPW?7Q#VJaFq5x%!o_W%KS$%&wpBy&)~I8L%8baERqIrx{kUKiV@8 zfv%Yr@}w_4DHk5p+j2<%pF6bO0@f=$Tl6j(7HKU9-N3a5YD)E5haR zv|(=JBHlY_COy^Tftvk~K29~PNxJ5(5F`bRF$`NqjC`6Ax?v%kz0*IwM~N7oLC zDB9EKy!yMC-?)x1ed51z`shJ!e$T($Y!3SO97c zK6nS;{_LljE}sNdZu`4GE~E(>I)R?!7ga#?ok8k}YIoS+=m{2?uOBn2sS1NqZ66>4fgp zO$c;C!q6c&BxGm^our`|lMVzh1c%AS#(0)TY+1H7TJun<`3`6LhCTHk@4hA3-MzZj zsL{d!X()2WSMF_dThRPu)2V(Fzm&n#K^ogo=s2pJ&z*gV`G;rbcX_^>VcY)x= zKCT2Cz;fNQ?jwhWXnlZjyuke*dms0H^n+|3J;C+2-@&Wj@xA2K^Tb!~IdA-L-^HcZUCEiJPxD{?^}DI! znno*6zR2(Y(;w&PH8*kPO*e7oiHCXrzyH_Vf7d5Ce)YB7 z{Q7U_%9p&D*};aoi6{dHj@?F7GZyP-sispxhzud1jU#I#d_7^>ls^^O%W4-&rAR4JZv3g)$mj*XT0&$bv?D z?pKoUGCN3J*W{RS8fvQuN)tlFDO->)hFB^(xfEFwilhx`2oM8yQqVKc9d;l^(QX=N z3%wtzx4cO$Ro&vFkPmfIBAm*Z95c&qV5%%f zjvr#ZTJpy~_cPq_z2C zg$J;=T;oGurn)KnqY{&7waIckjk6F(54zZ>y#RrTfj*4%(Np&;4jnp72rEAHE5E?* zx$oh&x4sc70r_T?WnU-|1@a!>^oH9wbjiQtH-7v_*gf?WZ~9x`i)*H=7b6dT;zNAl z58lJ^7u>+>zVCnJ+HbzGyvZY(3sQLseQB}h=K%OAk*$$FYKo8?hcCO9=w`&#X~L!fS2;wXs#d*{z_=-?qP-Ew^4cYclK zxouwaJ#VL~m#A@+PC^D%)us8m$K^M?gm3%)|CxK=`)j=Sr=Q`_)*^f zf9@BVY;FKMFrFbBhccD8sC9;VBFNDsbxc((cnU=}mfUQyb7sk3y#N1X`^ks7?5Ha; zf2eFtwo)>ytE$-fIus2mRl@oqgR2YG#1ph-SawVsE8CfIrROL-*W^p}OBK3D20wUG zQQnERSK+BHu96oAQX5U%POz0QP3xvcl_IT(mG?tc5muRM>#~vnaKS?wPx%I#K>u7UUT+k?R zmCQQ9S%Gl{m77t~OYbl#5)CnEPCs&r&-~GU;J#0Oh*_1m?UqaNp_gKJQuMO ziu;U$s$#h}a_zO(%8bmZ$TgvnAt2X}m;ysDMRQW7bgGDD;1q~UHb%%1r&Kv8Wj5Q2`KcX-tZ~z+?2+RD zL(jD@yq^0$3F^N@Dn-WVqOhLhOA09+@*;-?LnHv~7bf1Z2!UfL@3g`wk&xO$i_o-AY?I4j-5Z zj3Ib%6M5Tn1zK^{jW-g<;-yy`#8R8=`yP|Phw)-<)>Kx6(J`R1qF=3e(QUVL-Mik! z`~J;O^QS-iGbmTF+Bwf9*S~eAj^v_u@E^zFstNEty_-Mna}?z zdaFe#MGRs?2#An4CrLI)eoZrJ0mEX^bK-_;<%Lc`FmF~fEO(ioKE>e;5iD0$5uz$d z2O1w@A!cS=A&p6+Ar&xTk^|9n`VHL=6m?azv1xJEP!-@q?JBI2B%R7hO;JdU6o#nW zC9TSAY)rWD%#-we4{nP*W>jTh=(*-4*RdF2(e(^{N4Hwy+6g&ioEE7FDGJcONa}S= z7%N@MFl@7R{0MLU!5`$F4}FrYBS*ODj@Qy|%w*roXG_6(ANL6{M;<-7=J)~2hkyCs z@{V`^6Rho^s!%b4s!1uZ+UYs})JY!v)L-z}7d{7QE_uO=xcS@vd#=0nr5Gj3y7hWR zN*QOs`$$tc`o1rkB}+f{LafY=Atc6_*y}ad-*O|&Ps-^xcyNl&XHGxy7>5pM`c6Eb z&rf7AN|J@rzL{u0QDHyPNGWJr^z&plR%+pj!v_wMmc1m#IdjoEXG=^{P7!TI*`=}& zAB9w$(Z(^GHazsThuPcix$M$}>U$VHS%IFdx%>e)F38cQQIxX+001BWNklyp46P&9GFI^Lfz%GX_o$ko!R( z#!=8}=TGghci{|IUVa%nyCYTAi1sOpPIVaiBJp@mS?&vOr!ch9C~D^f*7W>)q#}v8 zP%BahLibmOj4YqdIjq&Fw4X~=5@teV3~Nw|-NlM0A9>HQXQlPi{7U)biU&Nf9wmZWcI_TwqCAd6FeE;`f5n_HE=<%Ut1y$$FIH$*oC+vk8@OcNmP}g?_n6A7BpFFEsZsVQHmNN zCe|@vwHC5-vEyr{2|n}cx4s@$dk~^{W$K#MYUJU&zsjKl6Y27B?mXvvpUN~4S_ zd0t7*Cb1B(louao2zWn|)ALTP0BzIIjH0ngV}FsU6N49vTZ|}ch{cX=ZJ|A;jB}RY z3>#C+S3dhW_TKrI**dx*l@Tkbl&vG1-2AH7uzLE7Oj}DJ;}fJ((KpUrToG~*Mcr&; z%Ir-CS{*!x!I7)0onx5=5vJXCQc~N$+1%g#KZ% zPJuQ|>Y7|EVD>p?sb^;|?5wJUZ6U%)|DOtjP;#>f>(mpm-e$k8h{Auh;Kto179a-STfZ)*2*LqIhf zLKr!Fj<0_7k2rbnS5Oz8WHu?ls8ZpwK1wQ42BRF_Xm)njT=%k9a^uY>U^$mSH5AG^ z)??s{ANU~GTzwRXw3W>G(T|Ki5Yd9Vu?Cgoxl5fji37{Xp!fa27&E=sUvE9n8TumY zqZ}TDM(9yW6)kJND3-0PV^TNFnwrKyZ3U+8N6+y~4)B$aeVEfHcST_qB6NL;?2P<( zKlb-|@S&50VH5z9(^N(RVw6(CZ&RA6WvPkdz;t3bbkMT%*q8a^pZz&L`MVz^>$xhB%LDQg`15h8~nFmkv=fC`G{L#Po-+1IB z@1s9;KgSPSjvU;eGSUF{F*C%-dI)5tsGX&)EKfgrig*3k52402c^qLFQHwRH4?Oj? z(>#9PJMQ&Ag*@&hRdHl`nX#(ic{T~k*Tb<@z)HSMJRf3cpc zeU?DLnnIz{Mx4v8DxzggQ&m_cDQhaGi|V>mmd6lA>dN!!_kElzzW+OElp?ni!HV=f zH{EtUuXxkj*nQ;FoVel`DSC2DbY5zTWD)FE&Xy8kV!k(L-H%MSCQL%dv!DE9KJ@fs z-1=Al8b?pegr*U_q`6|G%4%Zc>N%-L zabu|yFTQm1&faI7QM64>TSRE?d}oAkrX29ez*wG-oKVr)?Umedf>j3yz8g` z1>bzj2~^ih^h3_5x@D+Z-t)7+it5jxb!N3%;eC+3t^{_cEQNO&P_bgfC|Xygg^;DP z$RuNs7j0H49zNfHWHtCl?0&>gZ8VM3rG}~tm?(>aD@C+&MNMb1&M}T7T|boaUPaS5 z>ZZY1%WA#m(4m$;{jLAZE8g;#c;QWlQR65+ket!|n%92U9enWDHax5~_+Zx-#=!fk0`pNuv5M@l6(iC{+ge zhnBi-A%G89 zmALV>ujixx<^A-_JuW+bP)?6zl2Qz#2)?w@STeO$L}l5VFYzHzIYSOTW6o@DO$o~d zpZ~A#LAP7%T{z8f=5Y>QeKS|T?6vHkAGqiD|B(0n{LgXrt6$)fEyJ-xEn^sjYSpdS z-QA-bJ?m~w^gVsoi?LKP^{6Uwmu0Q-K3r6PpFMS+Tp!|xe(~S2*&-+Bj3fzJ%RD=N z^&h;OBL@;Odd3jRDO|i0Dy<5*Da*Y*C4n}TZ6=YPQ!E%Gt#2iAkj+WO{bv>*S@r&r zi?+I#UUBHoMeoTe2$ZixMmQ(5WFIp_h!Qtc_;c-aigOhq2nWWGJ(G6AMq8s|;K1Qc zwx2zTt}fxk&DW#*UfM9$fibkT=EZlsi9i31-z57%BrUFCJqpn&g+Nm|8Y|qyRo4+x zq^>G-lqJcBOtucIiRdiKN(# z-J0#aIji-W-~-VI7OQn3ZAe~YNZ@0l?|ZRHs3a)s;#NL$evgx9R{Y3+{9P`+b`upx zsWce_){07Fx_m4Di^)1 zp|*x;Q$fn~F%pfW)iuV@G!;Y4_z>vVD=d;{Ro9j)EBoqx3!J#(CVb!a&{j27U5P=n zTQdwJl{IX%jU1bS7z2KkvRglTRPC^ppu z?M>*tZP_-QB^!mBZE$Ya^YcIOk2rBjMGQS5OHFkQNnRXlB}6=DQivBLIdt*hxT?Yw z_T119bX_lf+x?XFtZ1#~{xkFEFRl8-%da_h=egZEAtb^+ZK85)Y;G`}PNmqbMEN`p z1J-CZrxPZ1CAXIli8&T{uA+}Z*bm-w{E|a-yL+5|`W!dC@mnyHM(UF5PObwgbJ^uv z-0+$=@aMn#Awsv{=z)gHT9Pudq?f>LtK|xij48m}EbSzq4}vt?k7XDmtQIRNF2~4f zy&{yXWotw)6iNiTL18OPNX0oELn-jX(06z*ineE;*=BET_>o`xPuz0H4XCj%@F+zd zJ!&>%=oRnzC;y5`-eI;;vseo+A(Wy^QU)IjBbFj&EA2vEBv&Ybav1Am4^4>>66>y$ zmn%kEr+Mh?@*}IE45U%�!s3?wog{K-{%qGHIDjCL--fNidtk06Ee+%WTr(j3!1& zk_(|I?P8=aoe}FCb=#6c{B_jUa!!`GN~Ptx+Y}dtSV#BF;Q2dJzaIOmpN-tDKbXrx~`BI1KuZ5y@gbk z&gYgbW2DBJl@fRnaz3b?MH@#yjGQ{X#2&hezxNCOmKVL^g)pwjp-43Q4%M{uvEq+^ z?pN4({3~2?=^@tZCCmAOq4Uxxc9P$mQ24@zPo*iLwI(FFn~I@Z`kSVb-mfw;%-y=j zhlo{?C-%mVtcOqrQgh;_W79i*Qp_eZrn3o6Q=^QcU#;BSy3CX4g%xXEC15Hios)?( zJTdpr4Wu>Z#H(+(;?8U;nnnV^)~gl43y8OIj%icN7p1hilHkRprF;Z2Iu3KZb#5muR%+E|n^Y_t`RTs?d$a_yWjQAvCWNSo}Wvnz;oz`r$4LT=ww|5x4 zXSOlr(9tbE`6nMj*Be~+;v1U@ zVJk<~*3z91qUnkPOSyV|ZRVe#mE~)V-*}f_H{d@2Whl~kBo9LR)xb|R~0b^RED;4Y)l*c=$Y^B(f1v7J0Xzi zhn^$HwmA8~18kr39J}fYrk5W>jh&catBO2$m@jY>%MG`G3*YpHH?STJySqJm+q>+Y z-$tiERXZ`?mhMdB9F-GC^ys6Yezf>jGD_6o-b+X}3AAPy1B=Cq?F(~yZ)h*Qo)^FI zPTu+B|A3dh{uNlYB1ehym0o8;Sp$<9&pdjTKmV2AWarV(bMWAlz4?w5(z{NI3MEOv z7*p(Xa*fGR3Jrdcv;WA?dW_Z>6wXP+ypB;0NmhvY^SwPu_1V}YD#d)h zz>gzsQ!$%V>^%7x&piAr_3QvguRMWrkoy7p9#vN*oZQoHw!HZEZ{dbpZ>2tPgsfXa zQ0$!B=Iq&XblpJT^;Aa0T%jl$RN<{E66@8He(-et$a1lyTdp~CdY5%DR0pr*(wDq~ zTmI6UdCTAV+r08E-%i{1F5T&~W#szQPB8^|#r3;$99Nme$mAxscD& z_qe*oj|E7WGDfKa)|WcIR!UsRTyVg5*83jSc3zd#H`TCC3i4I{Pqx_KUy5GvEGJUiFq&vvFVoeJ2}!RU#i&OH`V3 z$yEn<>%0C2fiuhao1;Jad{96VpbcQe=AM z7(=R<9z4eM_+btlIn1?(FXi}kmvhyNUcfakei7AVDhj=DL6&%9zz6yB>;R}K+o#WP z*B|~VcfbFAY)%8yLp9qwJCaZ|22>QC(?0QJ97ZAsrN68NqPa;ifY77-dEiF(NFOB=RVC7 zU%iJzvxIiA>UvgtGIOmH)QpXuv6y;PR$w*DzNf8gT5YjftZ~LDYHT_9XT~f#pptVT zDd}bM#3B7gh_?}r?Xqb#K{P?r*2h_Os>fkaqqa8+A)bs3d|oJt${Z+pAD zk~!rpRo#NEST2{0gJ&{rB{CrdoOAebV3`xE^@>ABFJWdpryu-0ryqHkC%$|?x4!xH zoOtnzP;Ldwg)H$thz2NSSkEPn$vO^hISyWaHK_d%(C~F(pU=TCJ&X&eB!QN=Ewe3a z@N$qqE7_}?2Bm9KbbRge_j3QoKS}r0Lnyz;WtX%pde4RJ3oI5($=Oum_qWIkt5c#I z0@~@Kkc(0;_Kr#0h&vp~%Tnc!iA)ZHE<*`IPUVc&qEzfhX{KpoOLONNG&|!s$`p16 zV=O)iTvltL^c$_I>YA!@viTO@MrAZj(_)NaF<-D;E-}_pO=iRt+1=SjDMd4BOSJuf z$%(3-5n{yqj(RrZ!uB?a%ycqA#~t?W`wVxTe1wfFujPi|(;!!{;2FH%AIJQhiq4N{rE*5AkR{v77)|g(K&+g@ zl?Ja?B6(>l%cN<^DYCtDp7nACO3~CUAtl!9H7O<9Nh|V6@3BTRsawWzkS|v^gp}Dm ze->vPaTqyraEsZ7Mu%;7AKK)56o&Bsn=>S~2@mG~Up zMBdVMCxe#KelE5Qc#K>W^=P?@D62tNsQQ2~51!rO!Mpy1llOjwe)l}%dY5VA7^=*L z?VYkcgo`Qf#yNCMWDRRS(mF>D9&0j{tI5O2h|F}WBo%kDSTK6eq^YTDOAg|lG)mD{ zMR=WH$RhO+c%#I3Bm!X!tcL!gNXPEaO>1k$zhebViJU^?FTAiOFn=HiocXqY;2RDHF0Jd)IBtdeO03ucUBYAcQ^y=F2&04yK(j zX(Tmoqf*$MNf#dFp+9?)&%QShs5x@w)m(nv2`;2t>QS~5q*h~%?9|L(1_E6=lpv#Ow=Y&z2CTDV6 zv-X}i20?r#Fjgz;EI!0;e`(Db(lCUW{Ahg;aj;f08%=RwRa&HrbycCYVi*UOizWRy z;_8}qwn2)K3#y zF(*_M`&>+kIF2IF$_bUB(uSc_XRL9A92kb45CR*MRzz;v;3|zS*_-9kS&9UeoDoJ( z$di2X9GPi!m~;*Gwiev{qPa>DFtMt*ByV2!Z8d$!uc-6=ivHPOw~k?};kWSWQ^1X{<#V zg^wdm)8J#i=-JF#v9Ym%PJu&{ifn75q@)mIWL7(>VuSNpvDjOnETk|(HuQsMxmwbV z30FDRV~-v)78t@vQ!B#g@uQ%tQ%tO4&vY`yH8mk7tX8zM8T~LYbUm(?vSAHBc#N9-7%?a>ZV9Rl{~Ygz{E&ZQip=pIIS46T4iCa1zVDXh9#W4 zq;XsGD9A~ae9@+EsGVRdwU#*Bz1>~>I8e7!rdwOY6q)bt;bV{p!mP+XFmx-i%sKJO zdq1FDP1{cByPj1qE-tN9iE%e%Qi<8i)UAeOBn|U(yHu{CwuW(#WP@clV(Us&4>2&QYy8lYMlWXw zqsbcDNy}n)!D6}K;Gsh>3^Y~45QW*gUM!_~pe6H)u_t9CttY2MjWBu!FE5VLnj9lO zX6D{AEq8c{>j)?%!Dw~UVr)h3IyM{22&Tqg000gSNklyUfa~^;w!HsZaqis%H zzEQof^CEY&KvPvzPBJG9n)Q0c&h|Eb^h{)Fe}uT5k}tzHye|BkQgwb7M*7tvE)SEv{y zS>0Khrp1TAy7Lm%ghWS>LIE8X{AB_DDy1Y-IVXV`mbj&E^z=hVLS!2{OSx>myG_`y zC9GG3VMIGE44ar4#*u6cm2-?CmJG>+A9|rxY9$Ze8Wfs9Mx{jMY%$!p0?UvfHl;OL zfiK~46d0gVimI*)B}G1?D#=Glg7+8(al={bq+OPg#B(KyNKMo7@dr=--g*oV0H<^* zeau5lXU@-ur;g9W_uot!Y)La;c0GIZ1w+?kD<_sTZCEUq^g~BoHB_z=Z(ml#7^o^o z(@xMvmQ?K=Rb8>Sy~A=br*0dZF-)3F4Q(9v?(2+AlkT_YD1-5Isse!~vIyA)%}lm0FZmk};ZL=*i`-JPe}*a8@hPtkpZp=hX922&x%L*X!l5q$^gv^=Bi1<4MX;rzp zLTizJ3?Z`UI(&#C%9Kf&k8ZSFSjUsy7*30|nqKcSp~o0cfBBj7pK*0dWwg@9X72;r z+ZWi~+au&my|GC%+hphmcDJ`hai%nNTbFK$Ck#DRRim`9)rQeCM#W@flc5_~b!$RS zSYt}1BU3k%BC!afXDzivaYsqRckD&+J$NsHGAYR*btP*#E8+iWCt)*nLn7gakq|OD zOIWurqG~_*5@DDayNig|!Z+HI(~fN}@tkTH|A&>v~q*K;I82W3$#;X%b(0 z`pjpBkj@kW#-K}4axZ7jp4?vCe`*z;zVgTcmWu`F&Yx#@Z;l^>co6D_lrrnCm-3L( zRFerBLmb65Wb3MI%7)QP)4AQ4p|obXT98mQ?F1v5K#_%L$qebnk)(1d+)Dx96cs|c z_*;oUI78N2czI3^Mf>fbSmK1WEnHdTjTTH;X(Kr;zI>}ORgHF4*@hH-KL~HgX;$5; zB*ta>eh{{TH6*3b*5aI_53sk`MQM$3a!}M{Oyx@0b&{(~Wua;$+qoZDuh$IyKu!_o z#6IuG=U_?uE8=<>Sat)0_Z*oxPA<1}>HhVhA`_;|DK6+sc4-?Cj22uGW(2oQ375 zQi1v_xdwSJ`5y5iFrs7dBT8G0vf?GlN>-o!ZVwWQy6pNK#zBoS$4@_U=3~8&PXlMA z=O(AteMXf6s`W6|A*HQDE?<$z%G6EX*xFJkC3mf^LmSOxGQ}F{^9AowXeR9x>m;Ig z-4CEG8(Uk%7}(z4CS?&y*|Ky%qG=lO0ftP-Vo^Yg5ZNesOGBYXg(xvYN{jw>=m(6- zRL0=F$0)HhjG+L2or4%9>OyO}l>p+=A^^@xNnyIArAy7((|fVj$D)F8&Y=`^{eZC! z=W2Q%82pH>Dzwp}SqdIk)fnT72DOxQjX(sw7nQj-w$RK<4^nB2mH$snLBwB0t0Sum z*=ePwmE+6L&hLKk+3kD2`9XP68r9#Ykxm+rd zB^oA^3AL*rN5*~-T};~)rI^6l6Pnq^CdL{T%N1SM;VMT{3CAr2Pt!~=MvE+e6f`zk zmQG_GMi(hWN>o)vK+}z(VAj+{4vhfb!B)b!2{|+Ly&y_cM5QQbQ7szTYy<=5OFPY4 za}h1=eW3Rd*EVQl>4rhfy{-tq^8V7QSuIx=o!cpAR*MC7(@@tiCAL zvpKsOhoc9#jvk-Y2X}UM)qJ(eN@+D|TPo|wDKd5vtzK1)P#zImw2xU_wUd^`a>-)8 zz!-l4JpCe2VzRn;{<~DRFxb8hQ62N16MIdG0|9S3)Mp8kagXN@T#gA zK@Kr7$h|U&_*inhBBS@{y17`Xsp>}d=we}uIkO&QOR%=0TZ^JzoKKpeG{v=&7cdr8 zp*B_|{(cneLet348%Mcflz_Mp6MpdJ#4YNI5aM$Ktj)!WRPRHstyWuY&B=v-`mRS# ze{c-xE5HN5DPXxz{CoaD?uVfTAjg!{sl9dY6tjtmhm1mL>vH946j_aZCvS9B32|9T z5xpNgu5GBBhG87o+uf4~?i`JidzR9grk!GprW*#ecyM(;~djAkrx zLn+CAlcFTW86!)zQieVxaaj3LaA4j`np`Ci{V_zclH#+2k0=A$ zWTh32M%A^;Pwfqle)`cfA6xe0J;43IlVwTu&(DwK8)juJ(>07C#;0~xtE#HpB?o5* z56>E#Qc|m~&)$2b_oM5r48W@Ez&YBsMQOu)zF-(ebO{KRP-{^cIp^dqx?YnDaDD%d zmrJfP;iBf#hltVQ&7@$YBU&s5gD?Ni5WSZodsQit9Gl_vnoX;iZYi=X-sv)NK%^V#wJE7ma8?(a=O(8Qzm#3sGO+dhM4HR z$2un+hEX~VM$6r?_u`e%#xf>pA*pigmw}`lh~!k6wZWGMa&e!?Ntg%L(hsA&4A!BH zp)0e+RkBqK-jkIirj9AgVX15vIV-BF#)lxEqd3ld$mOyR##*vcbX_L{UpG=GPV$0; z7>K#dzz`S*xoU)zb5;tcm6|%G>dJCz5zgNI%U|feIbn)*1abrFt(Bd$uJ0=(ikxvX^l^cew5`s z@2j+9LK(>_S$Cb3-kkU|`(BdAl{OMd>}3}FnCS+A02?jFo^{tt*k?|x`<`L+RCPm) z^1=$-#BQB|LKGIsf z(YBR6Fq>$r6?=PoEcfQv+Wp_{oo#E|FcgI!OS1fuG^AsYZU6s|bsx$KX`2_Pwj5d7 zhkIQz7+u$W8xa@_3^w?1rF*2Kb6K@D-dM)aV@*k2dlt(DFClO^b~s~bZ*Iu1E{BQM zm2%)Sp7B*l!g30uSeiAB@T@VgYCV+`)1u0ILgDD+neNcxD@Pn7t+TYwuv{*A?)IF+ zL~L7pS#mraNEsSe(pZ_N3b7_+yW2xmbGu#>V`O(Y(E5^9)6i>@w^*%kzNQ-ny3+~o zJ-(_LhJpRlBa7Oz*?gh&72Wa35Q1zqO^H5?3{y_w9OEwJ?y(!T+itku_2Z9yf4z!FzW2(|xUliGi^;s;8HDau* zLtKForM0!hG|5t!rth;KPEm-meVSy?R1V1qVMog$ijG!_kBR}Y(Q_yw#h=X*Qpzfz z7A_Z46eDA`%9L;LYIc#e$SFGXWg}~=aza=N&p2x}F%reSF;){8*(^3jo=4F@$>O+X z#TN-xo>Goe=A3d4Lrh&iPR~wT?J+X9u! zM~aK<+J2q3xL^lCSJjRR*pqU@M~%Rjx1#VPKwbjsv_?=1EP)&CHwvV^g7`-;v$BJr z(Kds5(tfW%r}w_}Uw-xsYN-`UW*a7R1@YZr&J1Ck8N%OycWwV+`w0Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6d(bmCaqfl03ZNKL_t(|+GMGh(_ZSjmeEsb8ixoXiW5q#z-*ENt`DHMNo+hB0`JIP1Ez4&mO93jqe||)jWC6 zU#Fk*?0$BwTI*Neu>}9^M@mUbi9x^5Xgn5x0(x(J)$crh+oqWvMo^T6mNI1_g%nZ< zvJfb($;#qggH(zf0!B&zQjR1PDJODDNHRHkY|$esMNSz~!W5S59HdOrl9(aIh?Wv9 z6)6RB&LpKt-Xo+$l2J+{m7#StLK$*O#L!|*fykLm$~oq|F&U;d3b(jEKK!1mK6*DW z2IB0XpEpM1pI`fb{Sp85A4(}=j3_BZOvwNX?|H{tU-#t4pZr>#eX(?Czd3T`5JwIl zW;AIighU8XN>EyZHkLL7Qu3q-3V~FT7$Pobq5xthg%%|gy{aIQ5Lu9b$%AV8r-Cg+4ThJL>!gh1mQ#+1YmP*M<6B!oa#rrQ<4 zqcT*bMJWYZ<6O&3QQ&+egorj0p9L{^gb-BL5JDp4M9NS%4gIRbYE5Y^jdQpVKnUtK zFjrZGfDj@vX2z|{Z45#IA%r~B>+_i7PZ0er+mGztxAeDfz4HB64a#CTYTESw+d)za zQpyN{%9(|~d)sTT+%;=ne$QQZC2NEzib5!*&|1^D2A8@o8QK;p4LJp@v6O{I8;L_B za;B{(7-^7F;-e?#NQfCBKtw^WDv>Iar6Q(8X%)U{2_a(&jY~l4&Uj%hZQCNOrfD20 zWh!g1T7!tRF_U~l?IJ}{(bJijH8Cb?=cwC;!WQHdi7{c7A^4C=RumVqFJAmxk#$QfpPm1=#M|KOj!?xVdl`HkJX@5*fo(r6g3#nF=@kN{3sOut-_nMNmIAF6IcKafh;BBDkb*dH z_;B7d*MGvZFFfz@U;XZ_Uz_QbZR%;7y{{G9~y~U)<@812BY_$-!C~)4R zmBLzs5D7tdoMK8ysS#2TQ$h=gloAP)y*?>tB$1ReMrp_iv;i_?AV!R_DB($Tb44qS zk_vJ{8%v5HBxog2Qj>E+Xid&g7>ib5t)=x5QXoVq%7VgZybmM<<7R@<7A-R`mYN{_WoZ9FTvuK*dX*^Nbfh`*Az}^1l1-%R&hu zwaP{tVXVdlH~sPw0Vr*|*+Mr@vXEplN_KZhYYIKp9I29)zGQ3W9gU97tJ^bHW&fHj0cOOus|QnaU~yR(uL##jWAOeUpB zN)aIh${2#LyV*b@Cy&$$LGCV42vTsQ7*I-~q#$R=(%{+_DFubqgcxzn7#DMQTX`Ytc0tFY?-Of19k$10%osx!887%Oq0`u6v7yp5lToY zQ4)lZq~H)zBBaFmh!P+KAS7A{d^?7u#%h; zDI^M`(OPxG)jNd93~NV>sk?(I&>zeqe1im1Xn{-!xm(DbkvWsIL`jJh5^XFZB_I<+ zBt%DOYohmr;EB=U>xM8H(@i=MLUg!FE41haY-n3j666@rN+F~s_?p%^jMap;K@yP& zQj9=kQcrNHo0ElBNWe~kt{~HTm-j6$vZ*i617f~aMCd7Roz9$h$%~AT_cR8ty@F|%_L9^`ZSXoAv&y;bLOE3ALP-! zk8_rYn_B=f%NrXwXPF;VD5>!wpp?W&2(CdYO(L+UHXJb?w#*)V94~p@yE*TY7ydU4-;(q6DJN{VW061q>y2OgH?I4) zkCP_L%vB@GvPVQ9g+vKWa18;7p+O=*DI^JUH+Ni&)G1+&LZlX@4W%{Y=H2lXHa- zkqe)F2^T%*+0+xb=hp9W)w}+Xt+O-iIOZsFN_g*y3A8B*DPpE@Kxs|gI3}&f8i7$I z5<#WS6jckxtz+19pBGY*oflFmp|mbFAPZZF*sa{r7dwOp^Fk91CtsC6^Il#a9}^jKJEhk;Qzc2DL2S@9gqm2 z$XVdp#Ok3V?0fL19D3kxMo0EgPu5v}bRW9VY~HbxtO~Xqdm=}jd^$&+cq;ST7qE5? zAp$uM0mmhmUB<jhrh#~yKmuyQ%*z*P-KKLv@S53)C>j#AY){Qz*B}v(=u)y zKE@7NYl(^-sC13Tw+%mEAk!;wYh#9!nqE~fC`&TnT8~l!s}ywz_+eyzc0f#?m;zc# zd83fX3nzo_w5upbFXn?v6RJ{r# zp`J`gG1Bjq^sJ`!ftUlD?tHFojG5_K6rGGw8H*2|;l_})iQpYqf0ivfwvy5aArwNC zjMi&z|HePD_qJ~`=v8c*nZx;pjg2v_3yg>B2&rf%6SUSykqKF0w4|&8N*U&RmS)c# zeC^h6vFn^mc=B^Er9W4Yb0Fm*7d`Je>^k|eeCSVJMcIsyMM0qiIVSqOiku^LcR$dc?<0jxjKnRJ^22H0Tq?iDK)|!|iwF@Yt{P*tJ_elv* zlqHZEP9`j^uhRHVu*x~&LL?^`6a|t%iV>qBNll$I5Lusi{^FX?(w_k^2;pcZkuUzk zJ9zX5Uu14z7}XOF9X`aQu4$SflgS38gp`t)0>l79l4C%KjJAg88=AJo`xaksuyo`I z%WJE&^@zFIil2V_-}uy(@1z-*9W=;+g{_7^`{z$_XmORXN0 z-*W41_wh#`{0y_3y6p~`@lf;rH~cPs@e!)BVtsjumE}cNmKMpaM=L{00!i-ZNQj6G zc;5}o4B01)QY0Ty84v;=GrnyZuB~z4z&^Cqe>(&Gg^s`2>M7NGqe2xhYqapig&-4&D#MyLMTEg_}4#wE1Ub7wc(J12M$0=hzvq$ zymzRS2(BT;j0lP7141f{(P)`*b&Ju06apbMC@BbSM?+*vco!HACoC^6l6}KMU-OYa zc`H87g0zqYyG}lq7r*}9967v%l>&u8ON9cgGKkbIf=iuHuayFkX}qUy8eHQLVhUBW z=macl3QA+JN>dm^X*9Md7>&lPjwiIEt8EQ)!flM;{_LYq!LFCnGe0`5117b zWR8r7Lq>H=%9)-~2*A0BRt9Y~amtC>5LjGV=DO>@!`=7X$Abq~c=+K*5IG}+qR@sc zRLA1Ugq(@NBco?!d6D(?b^2`ZPj7xLf&n5A$>RfDdie|37-n)zC^A}r)`m!?jS-;~ zDo0XIG@<*xu5HLZAjFh71GKH9b&j^JNjV{fpilxM1=dQc(oz%!ZR;7;0bwl5>osrx z$UlLoJG3AKH+|`w*f_?;L_MBBjO3Kq7}uRNs{~mJ>bAiM$&Y^cLzX6jrEz56V$B=h z`w8Clx$ko2S8n1p|M>5)?PTt`dpB)Uv%IoGY#Tz(gp{W8tfq~U#9BB!v=432n$| zAsDZ%uy_9otFh!|@A@Ez9(jNZpYyBy{dGU$oJ*cce^!$7h+|IL#Bcri`*_8b|H7Sj zJ%HYF0-=8#kM2JLuBFrlpAu3)r4;KctBjh+wI6*SD@P0{3pugv*i9V&g!5@!i;$Y+ z1NCG=;{t8tJ31mjgos2!@>o-J5GnJE9TZ}w4UUi@q=;{8+PWtA*a_WIQz^-ys<{2; zAM^4zz82as_(=AV_r3P_IQ{gKNli=6iQprndIAYd@a)~Qk6Z43glE0x&w1zPzRMf0 z`WOqFxAVN;eKU7_^Gkf?Lw`#Qa>~a_Rt~j%^p9V~X!!_l`pAE9!edV6jUTv%w}1Sb z#KFxxj^hB9XI(w&r;+eHq(!ROHkm z5bS$ojlm$Z|Hxrt(^4r#5{mJ7!rl$XW6yaiFMHLcoN@ls_~G?m=1c$hZd#X^nVsb^ zXFY{K{p`26`HP?7i+}Sjj(_5LEbZS%QI!0~+ulxZ=2-5#^+pctzJoh%_%dfc?IPZM z)u*}p2RC!=)$ixNdv0f8>s-gLTtjjdbG^*LJ!>3uY)Ouh;~%qw6VJGi;0~b3D5J?r zk~4%1DMTiX$Av&b5`0UJWv8irp|3~4$;q*jC}P8p4AE`7}( zvVGSUkP4x;@tG_C2I*EAkH$34b*_U}4A)0o{*L!^(WNhB@7;Iv)em0DuE(FwGhX^i z&baWGS$y;XmiIoy_LENJ#4}Fhmo9uUU%%>adH!qP&PivViV%SxUVAi{+KY0xc+mGVBU%i5AelsyR?z-V7_S|_VC!PHiUjCPVg|Q{4 zU+^Rzxa~*$$KU-8+fO)|UwQdu9Ch3-c5L5Dnj9hJjBgs0)$F_VJB-$c3@RXcPI&Aw zY&e1R9v2b`I&nW`$bv*7`c8zydnAFM`C>bt_W0wkXneFrcgnw#8LJgC$4)Vn9VSsm zlg&IYy8I=GskHj7FMN~Hp@(QD8wjD$B&?ChoG7c3)x!r^S>C`17_Ba{Zi9^6lVeu1a|kKbbJt`aF)z>{;Pn%jgf=D7dnZ_$he zH-7Hl7$3a13m(LXB2#G1V5VZ^Do#FO8zLr3TkxgNe3iKw+0E6MI(tcLAfbL{N~O;I z9hBDJx@Wng8n!5~MS+kCTb5X3&`MF1C52HGM$;=x#;fa`cFwtoFz!Zt&fNFIJ1HxJ zL(;^+sA-5oVwB;L`yS@h3tzy@mTe4aPJ*=Le(S3i0WBRIsG*1jT$R5MrL|Ng$A^gq#VdO5>o;ph|&Lo%}-@2 zq|~I`nSN>NE+}P?TB69famz`MdmN&$h?GgTA`MrN!6RdbBXSaqhhy&Dx58y_d^^AL z(%%5!s~`L@cYgaDocHT5=aw&giWAQ~i@~NHJapUFSUtSN$>*KNsZV|;A9&qwa`8)F z!TRDoJbdT9eEoy(V{Y?is<{Pz>HKq;-?kkXP>)CK+S*5{$oiyVQcuGR8B%J&Xwqnv zTvW(*3`9=>-E^pvxt<4DI%04xd6hFMR!UB0inyz1nmT~b;jcfRtb{n9MsZk zLJSydkRhXuW@&B6_7jdnxNab3y`6frO25pVhZb69W=i%Ssd@89KFcXj*g{GxkP^>* zqK&%;f8g^jJH*$XBm=H;ac?88?Ewwu~_rnLRUQmj!UHMUrSHE99g>6_8=a zi6^izuBqk*WTA21buKvF(2hA1Q^Gq>i1rsdD5pfuk&N!Be+-1FqX|F=kP4bQ(d$`o zjw}_K#K!s>*+Yz>1B9a*sSU2KL6itLMo2-1T&-=qBK z+K*x@!zoWWmka;jm$3NAes22sHDoC{@$3s&J#c_;UHv)M4=*x*^bVf>(wDO1#AEpA z|GJXJA76(p6>ZQs7sx{3BZP5H;}ba-kP{+Edi@ITx$A=gyIGV%z3|&%E<( z+;ROK2xF#NZy@^(PC4s1F8h;&#se ze=cXR`Dp(2O~1qH(qT?~(s^9^mfz>%D}IHePg+1S=J+$tV582|lX3U7m7+_y>5liM z;C^A6god);gOKT2g;tqD33}GhFD#W&SV8A{1do>D7i?Zhg)KU{LJ5IV5|J`mP7TBu zQBqM^gA}IQ5k_?`r;_xH!Ae2TS_WlFAta}sw1wL~{(io7^_LK4b2r;kA_vdx9Q@Ds z{39ovbvE{S@}zc_Rz}OBMqy$PJqM|>ug|Sy`LeNG>2oXdi6hzL@KanoXA#}c{)LL#+AXo=9KvrLRaP8qMr38_oULBZ0&WloqcyK^lXs@^P0 zuM?VtR2frPGy>5!q_#5w+#`4J&#%9qE3SMuRT0Tb;hF_*_}GVu!$VyEv1{0M?dQ4h z)$ioY=RO&c134W+2;E^5Q$Xw-Rb)Xu%zWj8AK~Huyq+^2Geg^q$w3f|z=en;qm`oU z4LaX#nr~cNT&F)MQO1&dL`y{s2?~wMT^J(7fKZn1fB6{~Ya8miB|1qC0j(t|fKdub z#wdkCuywxAk%teE&wVVyJA`jp*t9^=Oz<;;>^qtfqbH}#;iXlq)r^~xr(gbJKKaM* z326@3OMz0ZzW?VjdKk@npirs3xU=)&`kkr)QBdgL#Da7fL2pWS@9%D_Hj_Wdtin6Nc8AUmD0}7*2QlMow$(0f;3>MgT-)^#f76_2R z(c7|}^#}K`w!DNcDzx&X=qbyxi|?k4m621e(Gvwi%e-W zb?pf;(TTo-(0Jx{?m#vT|9hOHEr!V|2JRFZJ)Y|CtZ3eqtzwu{K_|2J$#5= zr=P})-}c9BKXDG4nmjoO;%L10)Is4xpezay(8ey(cj(BFOI~?Vrw*n}GYK3%xQ~UZ z+mYP@fOFmK@(Fy3xX`JK^K*TKklg|a*#SW*GG$egV<1o6NADatc6sGV>+pHN(&8$| z%vwZJT=2XL_~4r)eQQX;p+qLcgv%MF6?jjjE2JpM!9(mKcua8yxeHKPqdD(IFJRw~ zf5^xG==E&dbs~?w@FJf3%dbI*HL~;2jJwac7EGXL4W)*<4ouoEpf07P(w2Ihcn zfj2o5i{Tc&aUr3Ez*>dLk-~KG-RrOZIG4TU zwG>4|Zd*i`Y67i0k}DML_%N5f{q?kC$LzLwlx(3rM3x$nx-Cymi20+@jbh{?RS;Mr zwlLH#GOinHmwDkIyaD_M^hywt`|kV^mYUX0lW#&GZI|Y6CJj*toDam55n7>C7aElS z2NoAuUR`5jG^TDEg7*k1Aa$XE!dm*h9)rTLd9KHG*L<32s}4=CZSeFLUCiP}z*Hp~ zL8Ub|C$dn~F4CK=Nc-;K6K{Si58QPS(Vqh;$U;J0qm+lKtI(SfENoRsCLLlo#T3UF zgdK3?aO8$-KF`0r?p17?lQh9or!Hw*S;?l^8J5-@7eD_3^3p1~^*Aio|I5|P%~bTQ zq0$l&Bf&YM?*_7xnzF30MS%;EHl$xrjhNEZnGhW}$q9?5EDV*gC^AwAMD7sM`oW*_ zqnmeg_8Gg#Mai62oc6TmarpMHu&^*g^pQG&AW;^Y)HJj>}iXx<92x~M0lc+^Ps)EBC1Aga!y_!53fmWp1 zIllX)uQRt$ab#%;vOrriEy!pRo~o?Sx}bI~jgO4RVYVbjcj#e=K7?yvs@mY1My5lZpH8-I#ieVFLFDniVe(Qw4t#s(Wr zi%(sGRvCrSnzAUFnHf;oP61HB&U267a>cj})|xI}TUG@^YTD3w^VS*$gBencv~^8o zG&_&l#GTiDi?g5mJWT8=Ok0oM!ral1<3IoXQ!LE&@F-drDXgZ_f^p+$okwR+?E^D| zlD*%*mfODnefq*N4g+rf*K0WN-RsE118kZx99mwco{U*uUB^X_2%b7b>ZYYMl7u2F z$xn7a$mM_j51e)J8RT(|5U^as2j27+Hg7UGA0SOF9%TqAF&T|%ohNjOEiwX$Af(7_ zRrp&TS@}dK+Hdb);j^+;Wy!#}b|e8-8wRs8h?EGyW3^(o-$UlEmod{XxcB}g&U)(E z;2l`a@u!{0(u!dBZ9l*iiqa}(%YxQLya1EI8pEh|xXFmYOrL%c*|BMs{rB9)_JtDH zHY_i%&`ic`)D5m_0GKqct5D@c5M9r#R~jCES_?$8l3k`CN+)gtgk2pSt$nA_*))X?iT3$laIb)c{sK%Mq-G} zEzB~gdMK^B#*UWERwYVwfH9}UaMIGamhq88w0fS$Jmm@C8dzWD%%`1$nA^$szxY*l z9W_gqhH={>1@x@OC#dV1o;6Io@4PDC;A3Vo9y45DrH-BK()dUSp3+);&Uhavv}Q6H z6Qy9!1BdvvxBLZ{zT(B?^>v5|F}J`MKJZDF?*1O5re-{u;A6t44uVM8@k}KoTI(() z=K`b2gyCpROi*a)@7TZAEzn~&+bf!o?Vv1~pPxnKjB6T1@XS^frB;L#h%w+=&twX) z%3hC!xr((1?xnZwWVRhO15rTJaPkvQVe<*6ap#TSXFS?KDwyk405rZ6*R9b^nqMR@ zMs)+B%j!%fHClElrZz-Mt4S&2W4CL9iyU4Py!em)m}k7?VzO&G!K>Hf)@$$J!Eb+o z{=l-nx`K1D1BNNngn(S0WJhWjMP5TPVHDNCDFBXm7JD;dFz|`@$LH{xXxdSfeT*nWZwFjPs8TN zvAXKJg`b9%imJ;BCNc`qwF{@cvbL=;RRu!*JlN!X!0JxLeCUxS?2c3Ui!c8N7eDVj z($Zpw%m=gF{;eN#-G~2h zj3y0wTA?VdBF2RCo)7{^)d5215V`BGW$0Q(F|lb-`rG$TkJ#zkdRHW*U6`BcRKye! zIgy2=@c|zrMr(}LC?%OKOSFWQm1RuTqfLqRwRJWx^f+|a4>^2b%<*SF5u-DCJcg9m zv~x30dC^PQdD@xOUbA#)i9?5uFqt%zTH<`b`+!V|@p#C_*s(FHSzm1k)n-n3>a%$E zt6swkUilg}&j+Z-P*_CSV_Zu<{hq6N;D#?TJ7-y0Sz$PuAg19{i9ia0RNdSODNSov zi7X|J?@Bct@KdzjGg}n?w*70L5Wx9wc;;!}SR6M4CAtianKlVs=!ziLXpFU}n3(S@#^9qT#eg8wEBh!R&?z!MGmH10mE|R>UJs9;9*ybsO7IR!ciW2DBOGv?_^<4sv zE&(@b95Dq_uK?)S{G=Xto}UzAT-Qi4{a!_3ElNtP%FGRB8IOjnt*+9anZpC4jdf;b zXA!~EuL`{P1T5pF6>>-%wS6=B$WQprKm3GAv7NJ?^(&n9D^EtM4693IUn6pWz96r! zBea3i{vw_t1zCxXkM*_^L*lkCT*rgozlnPF077L%ilipej7LbV@hLNETB@9|wj`%a zJ00|^Yism+JqCl4>;(M;MjKX#6GBLxrd}A@Nz2+~+%=Or>AuX39|{@3>W;l@t-Jh< zEhwyJZEcl}jSU8K^VDsNbB@8x3~n@Jc6O$#LFSA`vc9&;%4c+85D2wPB!1ML3% zHSGSvr`Yr+wL!6GCu77p&4gSQEG{l1rzzULl+4Zz7(aR!?c)9Hzq#cux=i-CO^imKnW}SA z+6eugWno}2T2R+5Rz#LJ#$?};P#vhtu(G~Rzbfe$mZoiSsneQU=er!F(O7M8Qv^M! zC&U=(mlj)82-P_)SqgjtCbfv77l5b%zv|QB`I+7(p$Z_Or+iEs!{X8rnn}(4maQ~R z%V<2JUv|}R?;Z2=3&iA++R#jDMx!yCW@pe!k%39$DYPa{YLe`-$ii5xEzrQi{D48P zqMtIGH%AuwecEPB9bjW)o$_EscG95 zqYYs)p&azFg`pYM_>eKyGHDu|_sq@=NK>F_wPCjGdYJ1j9|Bqh%tYkQlQ#Fy_A%v3 zYtbt$N=R0gmzazu%x~RF<61V>H|X~&tkz`LGMJemrG)dHRI;|V+WlQgdR3p=yUtmS z36&GRZOOoBJfR-fT?aK~>c+9Wyvo|@Dn!rf>KeoGgmKg2>INS@!_kn8WKuVj))HgH z76s$F#ufz|!x5V{EznFxAXT?}x_;EpE2V|8WYJ}xw9>TR)3~m^B(wr#j#7xemfX2i ze|33da=ipL9zMKsyOgSxQe;~d#4I>)@F2tCkh!f}X7b27K zq-!QShmsN(yB=!SAL$aP+L*2&OlCM7(d+jyQc_hFS>z7yWW{7W!G}np6jDIU8Cw>_ zlvo{3rtb+sfXJpA`1|%P-3)9r7A9b(8n+-$&a<(;K_Fw5>dw3^sGFv{TPaUpa1sbUFlk#-N_f{0r|&jMNTe-r zZQBX{!4X5ixz5V*ZA;G3)-BptCXE9G-g~UIxDYW_kHwW0q%s|#1+=!b&eNtuOqoej z6LZ1{NeZ42B2sHy46F^udD6H%D2#Y$arIWI!>OW3-*7e6B7*ge4Fup_*Cz?mvb3^_HU=dnN|}x- z`A+kRDY3S`)>+@i5PZakh|(74y;$8Cp{0m7+;{lv(*>%3_T~kbQWg&{ZpdFcYVLGZ z^+n97J62U8dR0YeYlM`{3}$KDmVjh-ZjQypC8Smq(`Iy4Rg7Clqyu6CL5lw81zbO^ zgh%huLLh{o37NWXx}JMZ#6%Zi$q7HLp~o1R)NNOk^QlukbMB(v#xS0YDXWUL^);&g zpd-v_YI8eJ;~YY1Qi!xJpvwX&1e2!CF$+?H*E# zCVyUnfWdmY zAcZPXYa%fs+dCE9B(k#a*=m$%hWgHI;`79@$%|agY zf)feJ9Ym=_4aTV6IJsCYluoq$^w}>T|8R473VZ>)2=&gZ4)Q<)?7Pv`*GF3~%Y3!c zJXlnP&a#wa*DEzE$kI%&=q7?XYH~TrLq27CONU13Fch*xbvq9M^Yj z7A5mM$7geHn+Bx>J$W`|&fqNl1Zh=q*dM6!9PKR%#mn0R#d=MGqVGG_Wl7t%oSi?U zF(bV(6h+DQ=2te$1?O)(;&!)VaGqu`97pGO-E_R#H9!5l@1E^@`z`Pd@Evdi5g`3H z4mv^eO5jc461Y_GmQK_rNmPZ17Lg=Tq0y*NL0==v;Y8d*RDwQ3=oMd_g5oGd0=R|fQTm#R6A7e002ovPDHLkV1hbZG{gV^ diff --git a/docs/Saml2/img/apple-touch-icon.png b/docs/Saml2/img/apple-touch-icon.png deleted file mode 100644 index 2d320cb5e1215894ef37cf8c6fd7a0085eba06f3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 8358 zcmV;XAX(puP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6d)&eD=4M_03ZNKL_t(&-p!kNwC!hE-#^bg{D!^v8SlxRax-(2keMNY5JDspOb`X9 z)*7v>qAhC0sue1UN@i)9v|M(qT zZCCrh?^^qhv-V#5yuast-skxa&lYyq;-JsYWcr;y`QbNyfA5mB_wQR?TD(f*RtR1v zAH*mnB7(LC(K)SafP?`AA*4u15MxAQKr2CIIVpADYqSs>PqGRh6Os~{GQ<>!K#1K3 zjUG%=(YlSCH~0iz9renu3CXxh5QDnm>WA3ZM8MP3X=VM#_4Lm<;aQ#(wiX`>(^ zQsfz~bwnjpbxV<13Tr_nnx>(49-}jQnZgICTgSAnlU7Px+om!rWYFugvUlHbtoncO zv;XRS@4D+lznyM+%davh3v}x}A9}~nbMaltu|85@lHsV!&iM0@&Q5lmZcy5{xnAd4|>s=+Z4Am@+4{HP&WWs|hiZ zqziPBXJom-2S*Y^jLs3Yn#>qPX{^zNlprNSjM&}H+02l>bHP*UPAzqtRzQ}Q zC~HaHVY7^sBBC|Hd#p7O1Cd1V5n~iZZt>m|QX(cOttKXD+m?jFW)>o7r4c}Bg^P)4 z)23dpr^e%9I&a^~3+I=Yzx>dXM~*8Xzi9u`^`qg=nK30akQ*%sDbEUAjLe#rm=Xyg zGhl3Yf^BGsAwf)NV-V?1OGsFoA<>g05tBy*lr^LjQCgFtLmQ1s5v9~_fFjmtw9@zl zAq0xd014Mrgajrt1m`hYBP6ue_z;*>)07#c%ngMx>};GqaOU#d^+2I7KL4yU&)v89 z?oy|H#wZXaMk|!o61+ocgZB|3cI`kZl5as-VhA7#NeQjGAjIeqAVp7%5t2en#Ar=I zL5wI-#NCRn1d<5e?PiVDcpnMAB}G9K2?5%W2q}_MLJ_-D6rpKrY8S{eD_NE!!Kbn) z#V8>ud(KwvZdZfC>@7{Y;`tLNlaERAOs5nRMhTheQc0p`Qaf7bNimV<1v+{Z5QD?} zh)M~??mbi*C5pCfnGAPmT_hQc$xE{SJf_ztMWLO|n2d(hvuRg(jYeyOZyG`nlz>tO z*H$?1QA8wq6ha7&x~-^v#F#{;HJMVBxs{Yc+8B+J_p=L4@@JUYbUK$@jmdM_98XwC zeOc(`-6^3^BwD(NPi7TmW+`$@R^<5DHU8E$NEPVM4XCRbn``Ts{yb-#^Fme*p2vZ6 zF5rxVhZrm@po}57z+||^`l;h=9Dk0}N1x*O(~pyncUW3pAqj+(D2=9RYFeLA0x^Qw z1r9z2YL~D^cfdglMhT5mY>h`Us#+Ej%%;clKp3$#euV5 zz`OqVPVW8mC%E&&zr$Q^(M3rN0Zl@b(6*k+c}iju{b5)n{jpIi-{=`E}*PdfC+F-i1&EnpDi0!d*)&(5A@Jf~r9$;bR9OhRtV3X@^ zzL}TZbThyAwx47B=;O={O0-t^Buwg>vdA%7QD{v}!e}yM);dB0WfV4Ql+{Gn zDO6_hvxdoRM!zgEO5?rX&GA5_rI(qm!b(CTv`x)3r^dYL9ly<0*WU3=r}@o~-oe3h7D%Z=WFKGu^v8MTzR$3b zE2_zms`dzp$#lxZ7_?6K07isaQ!^OM6XJ|KE6}paaC4p0kA9PLu6_+K{hl`hC;6^7 z+{g`hZN*WgS47lWF zH}TcK{GZJAGA5N{<^xIuYcn*EVn8cRA~I_lnxH6i%j3s4ZqqCCy~CHExBu1<6FMbY z*X6d+8m)xr19=BNfy8iY#LaL1Wv+b1i%BU^SCQM^^V>A1pT-))#`+qg(TEI%C{2n9 zB|>z*LoZ2CDG_7Bh~S;aXhrKI(K*JW5z1O*w#5_Qet`2|d=16~_Uu1EpwB~JyB8E_ z5wsF;Eg~Qyv>|pu6HAN{MdI-jTem3@$V8DTO~2P?(C?#_qG=rCX-(}Mt!u%zScJuc zhk5lIzMGULNK)MK!4D8No?|qbaO(6bnbBm{Qa3GDghawh!a2vr<`xe>_-&qi>N!pw zdk%@7%xF^V0K7_xx^5Y7Z&6K#>>PWFPk!Koh*}_pF|T>!_n^uZtOy3kl*VX-_nw#_ z#YjS^>lw4E!nF;ggo-gyHw|suF?_2uJ)zdXDW_62ILKGpyz{crQoYbpgr{{U%m4)h)(D-@=t&7_t{$Crpz-M?}%EHL}@DIoa^IUt=_w(*g-pdQGzKp?w<>HrK$XkE^W2{_!En)s3 zX8#pz?@TZ;;bO!nMQU0q2cP`FZ?Uy8fEL~1 zTdhe6ZaSiCl#u6^2Om7bpWgpXEF&o9dCyP%W6oSs ztgWuoxEdc4gv9*bgV;T1am`J)aK^p^jCVGfjb|MF>u)o+w9FOPUq^_E(Z-k)&pga! zue_PN{^a-hyYKinOm;T7?R~$)@YrL7@fN1vL$v0={=IBX;I04u--91A8Y|v(&DC6d z>AA!ZNueubQH0t#oR5r~meLwN``0IaK+l)<@L3DRtu7|C$gU{Tp$J6beamz_;-(+} zX)b@oZTlX_4 zgr@NnMM=JV7JCouA@603wgX#7{u-O-L=hSvXnnwiNb5a*m+wBiHo8qOl=krXE4^Do zh-g4kf)w%2BMOw!Os0XGe&Sa4uPlN#eBpn5oYAo-NzM^cmtKRiWIV2sl(_7bujcTJ z53{gGbKv~5Svhne_xzU+V{D&%Zh@7v&f)ZtCwbsApX18c+{hI-T+fA9U&FKCet<83 z{Nudn#+Pxr&Nny*m%ieq;2R=v-(7bhx~r<*c|wSU6!E?z^|^*; z*T=URV+{SlJYhP+D8Z^OT}hn~721F;2kcp1BD$8X)eY8(4$+ zJDWjh$%~sFF zP8{d%kKE4jXC9?*JuwMJ61l+U@uRFi{TwTMmsnX|0^36g;2k0nqZKLw3cL%DGzl=G z6j`358jsC1Mj}QVi~?;m$$9qdJ;dBxjwr=!Rx#aJC5oo@j^rI}RWn#Q#2bI{ZJauC zgu&b*M;>^Tlh5Q_aMdM@H-?-(ay!M`Jclm2it{di3C4IHy8Ex#bMP$c$%v{NbLhes za`|g+;m?2TZ7eV3#3E-ptEj!h)e5tEnpsE?J#%L)uy^l4>g}Ug1y<)c?>k~mA}LK0 zI+E>uU^Jdm*ELn$P`gO$18oB5Beiq%miAEg`-miB>f!4#RtXsao#6bJ-OQVR=eM}@ z+RON^A9@Xgg@U7xKfk9i3qK8>}>DQ>t`tGn)lMagDmeqK&(e- zqq*!=S5wR{^08lkCl_D)N_vY2_~sp-Vz6g{*T41WXsd=V{+Ituf6rdLi`;+b=b3DM zf-^6@m^b~#+xc(5`yrmc_kWW2=V%&-SAz4Asv6>2)ukXBljZo35Fe1F2+>0lQcMUP zvLYo+iUD8EkO)di*I$xCJ5QEbT!g$(5IqvQq7+>N(cq(JFjw;M9e+m8T3+>|ucgc_ zsomiPR~=%{yZ#w}{7-(F(dG`{{|j&4CC`p2flF_^i3dJ&7f;^zSzh}yzsv4FC}WY>cEV6fC_L6=^sELGk)+A6_(+GBRd<(_5)2|Jt%V%IB(+7L)+)9IM((yYmBhOZiO zl@Q|yCZ~1|trA9;OhzO2EG<%>ew5F>|GixIQ*YtWMf-q0&8*?suieeVci+K_u6;R| zzWxU}_p0;B`vnk5VFuBmYzfTs$d|s#xBlYYT=ar72!2YdpbcHC!WJmgAhLjO9ChRH z0x@=X&(qZtkI;BeiUA)ZCdNozSIioZ#DKM$6gp8T(;90HaXh6_n!Ge*Y_l>yhmo4t zHl!4ZA#!?s6Kf3%XCLCrAN_MKc8O!3Bl_D*&-D?a<~U!s5LY_563O{8W7 z#(*+}Q1bZaALLtie2SH`&t~oTb7a))Olq`N=-7ELg)Xr`N|CCm@xyKUd4>xSA3v*pe}TdnVmZg@qsK6Lv0J_s z));Jph2=g!__m+t@h^XkA9}|-fgPY>_1H1SRm(R&c_)XjzLNf8kFBF?Y@XQQ;m>`M z{^Ecidgm|EUpmagU-<$`0=d@snD8V*OxVFZnbJs%%qBC2>!)`m(||=#bS)#K*tNh; zvc_1WSse74)-7dj(Ywg5b&eDxq7`nk%I5J^_8Z}hJ$vY{9AJF%8467&^Y5blD1s=3 zmYOSWxPs)K??8po7-d=9e~9y6ejT6vj~``e|9-M^z`=_T@%_K_)AW{lFdIVJKuf|W zXnp7c4M<3wap-LJ?OOrgu(>&8HXETN5n`vdhm?pBVhpr(i?X__u1dPgUNsHQx7~xK z?xm#DTdlG@cjP#iUV0wND6V_`E!_Fk14K9L#9gh(iDX(>d-_S%j*mHT?i^|6P)38Y zh-h-7x%P*@m(8OmSURwW{+z{F)m6i4jAS{;9@+qwL?(eYDkfD!IaubJTfPU?&%g=K zKK2|c)HvySVpM`_JM7vxk53?~lj&8}wwzd7XLD!BcrvAJ+Ff}c@;qnIE7`Yao_jv> zF?`-9wT_oudj+-bV|xWw6r~anMI91l8u7`0`Kvtqr6-Wy97!u^8nkhs6uo)FxtH!^ zeknssBE>`$jY~O?f8#m+>{s5xoQ#>emL`HVuxEZiMZrt1zJxR!Q>UDJ{`5~+S)QkF zH7Z6z>rf&nrOERGWi*XX#FS7erOx`6&galdD6D0^SI{>atGZS~yT)ff{yC&9KmxD- zhd;;8>1}$Yr49)f5=Ii$WP&y|5B}-<`RoTj!f4n+o)f&nWEx43d_-)CbHc`nF^}H; zE&l7<{y7i+=l7$gN6B(csT2Uys^#dhO@8EOeikGky@K2S_`j1Cj$zdx+E5lb3;mKz z3(+++)sz$yMUkU+=^~jHlC|{noJ=Kht;jOdc^?6i((E~K2A})rN4VjQw@~^quXx>c z9DnTZbMMFg0|(DOhzgG2TV^hzjmGq0^^tq|;`@(s*^m4<$}V<>k?DiUdFZaMa^it+ zq9*HXub-q(U~Mu%`M_{iA;z#c=yCM9V_f?qZ|0>pTnV!o>GAxN z&vV5M*OA6M9DecT9Di<`?WZ2V^mf@F`iWv8Ul*Vtu4-f`S)?_+kYChwS$yB{^&Q~kEvH_ zniiE3NffnnjK`Di9_o%32|}3}p4pt;rss2g_`Id^R*T=W%g^=Qk$Fmk~H1qRwWJVL6BR7g(-uaL&1SWNh zcQsqbS2^d}>lpNezDitiw1{;p<@fKWm>gNM?8xWMp(~JDItkV087aZE zs{bZ<&+k;7GVp@^i?`amKr4{o$#oY6E#QKuZavO-wt272=_|)KK7B8TU;ZlkS)wd6 zu6pea?XIr_r1hsn-Cldp$-ARD|$6eyF0Jb4OVDvP&PwI9NVdH(~G_Q@OdkP zTPKqVbD5==XLMu+oDa;}7HcfpXa;4D4xaINLVsZR`dwe<%*(G~>ChsX2Uu2*)AtZ_{r*SQrHpGHV z_IjPr8v-P#eV`42%v!9`EcAM)7#NO5Bx~8)*k}b#b3W5nsJ$ZOOI&cn_wvKv9Rmd(vAs-~rh5t4LMCrS}wB*a8akv4V?03w7WWJ+;lySh!zUzvN|Eteg- zb7xwS8e?yq?2 z{(Gr>&3Jp8BF|`3qHZHmgv?qBqiNcfY27fc8XD(md}rK-kk~Wmard*^Z!|u5>bfGt z$h7vNi1dnrJj=*5%=dasMnjyB=sagKnNsE%rBTEX*cgsU3F58z$# z7FaF#0FK1Yq-Jr@+buf~V`5m<0-%gRQu4-yz&=dA<@-VXY{wSv`FkZ7jAZ*%=Ny^R=zec}_xM zY|e0d2S}884;LeC1X{^1^`rLLZ8T!uBx)rYSpp=re)2C8alw$In?VT-pMUUiL`eljI8f7ix(S%51zQ`$xf|>Ie zYan#KV2sd&Nc0{_oiVz;zJY5Rs_BerZrN<$<>|P6|lKFY3?iYY}hm{$BrFKm`tK**4H;u zo)st}nax1d?qrlOYa4QFLAvpmn1ryq$>2THy6zspI})nXK$WIx8XDK&oujTDZPRuw ztEv&LX?>(^TkV$+K(2FPs`y4{WTj6O~15mew~nQ{L-|5|VQcWelU~49Rk~ws$bvl7a`VnKT|B zB0dCy^8^$Q>6|VE=UST9}!_PYIQr4~(ZXHYUwOPp^%?ATZvwub4iyIvkz3XYrE#i-WzV zHn&n)_QWc|H;wfA1L~$tw(N^@j;gA#TA`H&ZD~U2O0~B5w(e3-6yAGOiroaVk5qMy z+7*7AkZ`FBLQ0WoT@#e0s%tWn(KrWM6H{bTH6TJ!WcV0pePmWQ31y_N8;MGi)`sz{ zN`oR(n{{~NQ;!^bAMjP6)^sCfO@ghHqk7ahx9{BL!I>c@nN6pZWe*o3$r#bbrj5-_ zDe{bz621O_;dDllu22}DZ5?geJ(V_4kLw(7*`D;3eI`bF4(SoqzRpz z(z<}nbEb8Rww9gkA%ppOTJLd@)Os(ij|ruj&SoSuXUzB1w@+-}|BdH2|1iY#X{}^E zCAy*B-SP8ri0SnDq}`~KHhW98cdlP%N-L>+l%nXR)s0PIcZ@sBa@r7?wjStIg%CO@ zSo?%1P3s(1YoZutt;fZL05QO{btG$PL!fCI0x)eoiEaejdq;@SghW)Tn@?{WvaF=3 zYiW~8Rb3NF)%Sza=!DzdC#G~A}w8=#fOYS4KRwkkhL3{omOTZ>r1`h4M_UumnDgO4X1T??~Z~{0ku#x_+UlRO(AM*b#4&@I3000_E wL_t(~-_WJ?-=+ur&Wb?T{fR{S|9$9x0o_B~f}pG$@MxMIpqW7mIX;E^75S4MuOE;bUjQn_}Q21AftSU z6k~||rZAd@Fh@Xhb=BXDCE*8YG7?-JRj5suW1Qf!HkqW7@xu!$_iExwPFSsJ9+KE?NUAM))E z6xydTc$U#SViedH_U78S|A2y~DCx#-(v$$H`4$dn?PQhqqi-4`G_s7vHHlVwl(t1q zPQFK-`)yuqk7H=Pg5~8mY4w~ZN7lJ4funnYpCmsKejmm0 zI^W5@)HSc7sq7`Q*oDs2A?z?EjxaaHYfEpO8h@OE@;-jJvB9RWUtC?ogo`hvUUopeH2@VsCs3J64wOs3hABt1amM>Q}7*8oO&6(;~#MAZ>a5atT{#k<_C;QeW_4mAtO^GM3?S@9^N?*dhxFqXh2S_1RZKS!-Min;3o4boTRiI9=4DG*+DTTXE}DUtoZ LNHCv2rc(U_{c|km diff --git a/docs/Saml2/img/glyphicons-halflings-white.png b/docs/Saml2/img/glyphicons-halflings-white.png deleted file mode 100644 index a20760bfde58d1c92cee95116059fba03c68d689..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4352 zcmd6r_dnEu|G?izMxtxU%uI5!l8nr)ZF&&*%FGe4jtO*5mbhJzhV&et11z&&^B?xH$MZ007{+ZK!Jj01(PQ zJBFS4pH$0DefCd1HM@h*JNkcsi%oOXzj>qsEle$eQ7ApHL(XYdn5Y$Lk_3-J9p9d) zFeVfl3J47_g1XaoDXWsnBp9ZzZ74CI9RN-Nw{>+8A&#rBpZgc9WX2H3Ssv6doZP?t zS!g}lGvW1<9%?dj_G_x}3WUMN(8(x{a6_pd0yiUsf^67GGS50uSB*ORe5x6}qAf1z z@Q;2y4G{Lb?f21p)uTpChN&4q%^blZ2IsusUOhk)pe0yxPD6oHKXWSjv8&2pMdnegiQUtoXt1U0MmWAWu2&>3j$eb^qKNV z_(`JQZP&mXLT@U%-2rPy!7r|*Y1oAdlarltaUyq+yq^|d{B9_>t@Rd#@_KW9w_6P$ z^Dv8(Hi8pDJK{r0Iqq*va$cL=isZh0=1)wIoQ^vYPs$(rBz$+DY z`y}1}`M%-da686`}zw_w>8 z!BcqxVTim*F)-}$segV$ON*!Zl~dhX@Rz^K2Xurh<1-vjImult%O z!-WXvkA_agVuhluW};J;#r>)?^uHS;G?a?j;(z?Y^FTwOA?tzLFvQDf&X8}9s7Wh< znEfd_vPyF_V`?>kR`w_h@+%59oKa;NPVGUo52QjisO-|$cYE(VNmm#+`#T5a;gh|Z z8A0^l3UwQMn0J3xXWL7tY~OxAu=_hGvp@_%SZKA)ec-h-dfwIhS3jGBLL6e6Os;1LR zRDG&3TF`HV*n{&*H!oTSsLq!U5xV5!Yr6I_!*VhmwC3a2BOYfWH13AtVY|n5jv49e zcb0xCCZnt0i$>-S$k9J@-c!8wG#siu(Lgy_r1nfy+}!W9g-ucwp=&Hs1=Vs4i_q;dQL$8~Uq2BVA4o4uY!6}S`xH(Qec+{mJD~qgg@6W8 zipi@Z!ZR+Kr_)u&G);pG$tg$8#KPrsl&N3(m($NAU&9ogH9rVfW<4Mw>^7$&96g<9 zHQzekG9T5SS7DVm7EFY%CjChhfRyap4+d;+^0ng^B)~xKFG^7d2oOo|R8uY&S|X0@ znAGMb^rFQwGPTzsFQ8ZK4S@WO(8`6T+$Yt9{jGMd?jrTeb|_!Un`n9xDZu-fW+_aJ z4Uyy_$)`Ot!~doWUHW`(?F!iYvc5+g-(W9X<-tX*h%6(f;+A(OQ@w{WYSiq&pjKnN z)tSH~5g)03sKk)U+&GyP*?86fusX1ttpH1ng8ruC6UOddM~t>0wvZh}1cW%&7{tT$ zze(TwkA~V|_~nL{6YE#^RUC__Mx26zo*w(EfK2Q@R6xo`VkJKs^Eax`&*O*bw~*ap zyaqA_p(~(POY{H5+NIgewtB{|(%ML_wR8o);^XGTQ|{*J>74v>{_iyU;U*NTN}A%` z`8ltg(&furYlb!j%1ra!KPSiGmJ>f4c!bkAtjb_qmQ+aVB(QohO zRo@%)1krVtMPgkT6&3T*u`XO8pE&-!!u((3qVnraj|gN5aDxvqtrPs*MCZcO3i^Qt zI7$&BFr)50exhv11)82?u`ab0FgUSw;dpbnAtmz4k^&Nx`xMQ$5(JW}ry%)ry+DV> zS)TWjtXz7V6iK5$ghFuPiT>;;fAp)oy%%7grs4UwqU5+Ms96%`wU=YU5W-UGw(6iq z2GhB=Zw49;Yu<#7=soc@tZvYFIVNfkRPsCT&;76cYOONMwv!v*e#(X?l7eB- z&pWvVcaO;IKDg7C8bZ-+Hm`g>n_WC6%BL=CZlc``M{0T;%eYQ4t}V%m20okR=HET) z@)@WU_}tJOqiH7w2K%lpe0P z^FhhCX$ufUPCq4?C1A8ZSrVz=$~!VZ>;=kb8eaI;S1TKb|E9j*muthJe2||9pYYI$ zR@lkEo?K76^_v{llrL+?Swi1koJYJqG_-g!v?$ITb=q4#Rk--)fABD zh4Ibu7+f~5HEzy@7xoP^f$=} z+D3gYZ3W>%>m=U)p#UNOPPd&2cD&; zxb{vXTzpCjcJAOEA_~=RX^_BM+_BYW*T{zzM(3TosvFOmf6Kp0IerP4`MuBgFdrkZ zf9X~m0O$toCckMn8klZDxWKr2%FHNk1VLQE)$!{Hz9{*a@TaZjC7kKsC1dIUx*6AQ zJFZc8p~!CewW(VvE@yaTPFt-6n+dZ@TM582m7=-#9JoDOH#zYPe{)-Lza89t+w#Zd zvQ3k$)Q)mPF)g)_+v$Gqgq~*RwGeBn{vhp!IPgkixW8WY)H`S{&~om!keO$Sum=oY zTatGW#*O^aVU<^!#et91z~$IYa;_C@J7+V)`<1b_lh`8FHOAgc=Az}lf)k%5xTMrv zr6uV%eKaU~wvi7pU)MeB7HK z2D;27Dik%)-q@hK-!I|N(cl`lAF^EIv0C-t$d1qtFnKIkcMW<4b%Lzf3Y+~~qB7`< zj);HTQS0Oex%zA170>?kRVA_m_*O?rZRpS3v{+O+cifN7Eb&>$Z==vGKh1V)C`qGu z_u8y<#N3Wp&$V^@T??GnE&RN^IyXM)r0h(gS3;b2pt0O!eNIt4{;3H~V5Ln7vs>8{ ziqqZL4Nwlvj4CtEv0>;Fw~D>LB_+-ecI)tiR%a!^GI3BawvNQGz4#b|_df&`e||2k;K}WnvU!Dx=0#ue(=U# zK&pYNNf5RQZOveUm+;dQ*FIA0&#`?@z*bBhUgr(n9_FpoHPB2pI8iMpW|sF*D{+75 z-k;nba~m^}=b7P$FAF1)S!oDKtNG-`%h{XQi6=SMH5GZ%8j?ugqt~!K zwvA_m(*=EIssFVW0EZ;o=u#R5gBB$CUL+->U32;2PM2O(drij20XBy|hH+=bu!0*KIKBj%c+ z^{)B`3$NB2yp-IHf02C#Fw!(;S&rR%2Pq(!<`Q=u&+_V4eCe z?!d0m@ndhMu%QZ`ERBCD+uU~%h>+E^Qd;Cz=IlGV(IwUrOz(+1Gkd7O z$HME|^+mAGBc4k(2jEj5$g30r-BUoK@Nn!*Td)5USoe+IZ-x9)#yd)sD}2Z?2{4@) zb|)xsK&pqOpB;+H#gbf^Pto29M<2Y>dU5pAF4p{+j=oBZ$2EXA*xI~AM@g20H7o_x z{2-Kc;SRpcxLXzU)a53ZoX%ndB^i8=>Sf&{i6CYkGSkvLj0<@C-!VKm#iX8dws__S zKp`T~rIAfaogJ!tV(~rs5)ctD#A};YXgPNI`<5=nWQjnIf<=1Pzn2y$C8yUkFKhwM z@%Ah?L`DM^@d<2evu->Oo=SVaiR<1GjYwe^G2)XY`l$Q%4H`|PpFA($N_8=6uOr0s zj+)C5xin zwn`&QQOr<`27|~lU*GNfe)r$+;%v`3=Q$VW;ymZMrG+ssw-7e~0K7L%46Ffwh5XNs z<6`?KHS^P-{ZmgZZ@~?jOs2~JH%~nY@PG5j1zTI#0Amn(L8qe2oETm=+B^jogFL!D zS!ISRHW3ybWQ6o&?2=byQi)JhfBSH9PzL~<0B#!S!^50cUq25lRnLyYPq06zWw>~J z`$KJG?wJet%MCZ1y81U)c?UzG;{mBi?no2aAHvt8L__Xy66K$DAupSD_4^VSeG;vA zGhrY7dmCA}Zg<=d*dvUYvYMo40k!iu>o|-n)q^ld6Q(6yBtUWr1GY<4vK2?uoeS|r zT(a}}&NC3;#Lv8{0Y$f=#j|95fZYUrx?foCUQ)KvUf$-LSb+6D%%)z#|1KO+ZTgw~ zNbE_n|4p~xYoc$edOQF-XOS;%evzdNi3 zk@(r9h#R5FpacG)j3VDRRz>g49u-o5A=@X`M=nQQ@W&MqFu3+}8)vIJyezf?(vDF#3iq72Yg1rU0$uCw``L1fzH6tU=MT zJ)FP#7~BMLoosB<>)Y`BnyxN?%PW`qwa_nrmk;P<^+|3lA$cC z!KnRdI-*8rENgl-h*t3^hviocbR?_BCX&(%?-)#H*`RRAUES@w^(0ey@bvFIq^EE0 zYIYPpa4Xz>{9(cUIq~=IuByDHtJskc@OXkoyhOvqjT$BRxhihe#hq<$(TaV?g(bYx zzk*$b_y4xdrKd-u!#@W)7x%!%FE62JOZu)fTpnAUKW94KXQKo9lR9BoI`nN#BVNL^WLc-2PBnDb`!FkQ6Yw zt8#VMCqN`vOx>8A-pqa3!sg7$vF4w|C29%3h5O_{d+D-|gED!U;S&A}5QU_Uz%?vp zmMBIPvj7qQQG74PJJYIU8KAgcJcJvNO0O6=%8w|@chXvpUX6O34cERMj)m?X)jwit zWYksusgx8zcrOv1Kd4Cm%yUoW#?wfM-ee=?*pXt7dUvyZrhI*Zx3!VQzm2&Dk2i(z zv;J?=_W|Z`2Nb*9*m`XJ^1ixr>GY^eNXXM8UzHKbJ%`E&g=nC-&t%U{b2>k}4 zM^eC8z9@VJ)NO6~zgW94x7psn_*GsP&AXPV>|c7+3V*`GDl?NuNHOr8_5jSBY+FrJ zxxFy&omakmacj-wPLUexLeI~s2^i^7jdiy$lDh;U-ze^bf8Wq&_j48xx9sRj~I0?AI|l`&NRKa0xj_M7{QQP8x>W$llZ# z^2}mA)Bep^+iA@Qw-LK1wT3nbnW#j??18HOX9M~EwO_4MW54*U(nB|yBja(g7FnMC zblZNR)Y{`EcNWNZ9&#=!$@W#;-?`_@7{fb;%BTGaNt!jg%h zP{`+<{G!`T5|=OLq>Z*{Z2O&8zMn16ACVB$Qm``DYk?tjJdb2uC7aci<-`J?E%OU+ zGrN5UtA#%|w#4Z;NP?k$>n!<|SrjF%qnK36 z-X#tb9{hRfZswTsPVZBN8H~75sHKLYIz~6u+pKzy#crwlQTpM#$E~+Abk)TD#sz#v zXX8Go`ZaF>B8Zu%M9U<;>RXE zbfFb@39Y9#&~E%DMKl*GIPjFwcNZ7nuMbVEpA0WbvBjM9QA!sp{YiDoe131&NawG0 z)w7{^`zTTBX*b%&r|n~U@dMgnxo!))g;D+Qg=`Xw5@VHk^{hiH?Dbc#u;gsXHzn0i z2)8o6*&Kl>6tpGG-xYvB-r`9coW<<#c<0|E=wQpY(XerrkkfVOt!t*N?wvbI|9F@&~JQ7q2jXe2H zCW^MvkWX8I-=%fo@BdI{A^py@pAB`shd&A{*amKE*X!a7A2Yu?Z%f;af$36@t#hgGI$UAqZQr>(vfUM3&C0L=d07kpTV z65hXXqa6SYLUvQ%beIm#w8HN~d3!4?$?iB2Owr|ut8l>>rMSqaZB}JGncrpN>H)eX z?`{XC$$(nou>9J>y&RJ_GCHrPS%%Jr+GeZ-p;^lV`1YLmyxKN-u#7+}dnx}N%zgXH z$CV1rQyi4eN)t(4&9Ix9{_jMeW*4;LYis@>9EQ2Es^gfy-VKyn0lc8i{7q3yuQV}F zD6Fom;2?qz@ukzYpge~g8?BAWbC}{;E82F=WrGc0;?er)DQ&9VG84bSn{>9B(k zwM%!e%*jQ~?@0DuS;yYC#^~O_E+}d7VN;GP%ockmCFlj4DNZ%yl_X-Hn$v_=+Er1z z)xF^ugN@xFweaki3bVXB3?uwjsn55RD1&YMi6B+jBAEU6|0Y1ne zLxbyOnkM9BHX2f}bHa<7WG>P_pz=aP(B)D(uo1i&yvId9DaA3GTsK?WdG%g5Q5z-% zUfT;wH`Xu@LDvM>F<4<`LiFUdk7UO)oS&1>Rnv!81;V#S1gZ^;byAIw5fmjY3m)nw z?+@SmlmBCWV>bFM8|-jGB{WLeI3o9DaWo<)11@8`kh*v=cN0DNB+st4sz6R#2I0qi z4c&8ZcAexDoiEyzoZJ((D9)8bG%^Z+MCs@_Q)++#Uvn&7#CI<7^ioFM{2qLTEAfMX z#1kD>oACS6EsTK8F}{R&pahvhyt|}$lX5-EzVP=!*jL*U(=7^7%UUF#`g>m(9)4uh zN+-O*&B&PgYQ520)x+!;$#)PXM`Kgq-o1CQLPsDGuSVi?k7|gIEtmv^WewHMkLAio zl1Us*ZM8T5*j_cED4OCIiNDZ{(dj&{3{g&T+~4Y*L((GimlI~v8Q&*2;zNurHxdEX zDgWY5T-u#~Rw6AH53<&eUOA_3sJa+<`S@61`0Z+&gPPC(dA9xY-3vCHs+QQ8y<*H| zq`~2~B6ACGIIhlq0$V=$vE_&HDcwxCpLD6$_1>ZT*h{SQByL1NMw0+fOj?Wz& zFvJdbQkbJBeJ=wX#hUle7%rUXR$4yPWhM|#t(`DrC+d#^K8*!sRn%{Eee5S%bqSan z?Gaxb6y6;Dw^4Ura3@7~UnV3ahsAZxfc!%uwqZbo@PGj7@>ji1sVn}8fiB(aiz~Jo zTDXK*@oVh~gVo^Iu~o8PQNMj6)RalL?o3^H@pnjZNLWoX&@@;gDJHvX&C-&SZCkAF z?Pux@B3eZQ037cWb&FZMuP+XLz1yG`s8)?SoCs!ygWlxG$PB`Eka2i37Fv)TK{|58 zJti;S=?xo)8?eTei(HD#f`Jq8j>vX~5NRzRU9sf_ z>oxtdr~$>ax+OJ;^X)vsSztp0JYJsoQlX{)JP`NN^%4mv6u3oW-hBTdM2W@5-Fze> z9n9nd!;qg7R6d&M#&&}CPAvA|mF^4XPltG`XZl9!t)5o^flxcEGJRDAZjOjF zQ0Iea%DG$E3bP&!(93|2RCY3l5t3s3J*JOik0=hGeaJ@3@H8tD7CVRqHg&`+R3j0a8@kqB}PI}{$m!yRab zvul5lL(>3*TF>n~)*#hsmwUTtKRAA2Fnk0PENdI!9GrZLu@zyKzs+&m-IKFviqv>& kg1Lm#gqI~e;$iYPkmG5c&N-g{UI@TVLkokN>#mRg2V?7pi2wiq diff --git a/docs/Saml2/img/icons/arrow_down.png b/docs/Saml2/img/icons/arrow_down.png deleted file mode 100644 index 61505adc46d8fa4156d9b31831ebe6770f0e2757..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 606 zcmV-k0-^nhP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iph( z1qcLRmoAwA00G`fL_t(I%cWC2tJ+``e%^eL7t$KUBw$9t*+0;sKcG;!o#ftvQ=v=O zPEznkbn((fBwn}RP@zy12dlPS%uu3(Akjdnjb!m7Z{AKf?FH|p;Io_q=Wq_^JkLWo z=Qsxf&cxXRNV#0TVT@UX5OB_sBngrvNpr^7o%nCPR4T2dTrT%m)3hhWViEKC9B~|j zF^1#uh$Kmn&1OL6a}1fD2f7I*U{_szDuTQUi!ZOqfjWA01!nH;yA``w*%)K zs;Yug3Q-h6DTN>iAcUaZZvWhDHqV4=wffsM&FACsIL_zuX_G9=kR&O+_4XuD6w&YZ zlPHQVyWQ?u0DxMp_GP_Z-y9AHSe6Azl0XPax7|XPWh@p8ESJmcPN(zf4hxRsTn&fA zuar{gx(-1QAP9d+5=9YV7-BM+jB~l%>ytFDR;#zJ>#hvLKqiw(w{yPNyJ*ytHlGe^5w{<6H+p@P5DF!?G;MvWzec z5d^`9X0!S6zm#a(_8ZrA2b!kAG);J(_suYjSEqWV`y{Gq+Kbt2=5Dv!N1CQx)a!M2 sQpyjxu~Ml#WsK2AqtU(B3+LMT58IsRj2DXS7XSbN07*qoM6N<$f?9MBJpcdz diff --git a/docs/Saml2/img/icons/arrow_right.png b/docs/Saml2/img/icons/arrow_right.png deleted file mode 100644 index 60c5927ebf63f388b45315cbc4cc56a77b9f903c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 628 zcmV-)0*n2LP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iph( z1qT;gv2%z300Hz#L_t(I%axPMt5Q)EhkyI*EgldQ%_FEFNFoiwK|$ce2O<`vO%-#J z*f5+m4E!U)pbO5VW@l24A`$5(O~gT>V;_X?vwa*%Pb1@|_l9>(HfyjxzP0vRMAI}J zBA?HH1aP2?dagoht>5TwNDO6R(YPG_8y~cXI2Im}{b9lX8_ zilTha<#MhY4K|w%7K;TIiv<)#fubnjoMSSXfKrNJF!)f@w4a$w<}m=UV}t2*irH)i z#ux-a_&XQ9UJr-E0ZJ)MCKDfz$D3;n4h4so5CWso2)Ek}0I1jNHC0vbmrA9tCkBKN z=yW=Wq6k3{z!-zoYK0_8=yW=};c)o2TrR)5TEmVFD5YSGK@>$e91e)0h*qoB@AZ0b zWLbWH{Ea67#u&_IGwgOdw%aYL)#{IazyG>ct9`j{4^CR}cs$tcc4#yjzXyZC2U(V% z|8JH50ce_rZnulkX!Ofwvpp*oi2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4`J+jIM*dB6Xqg)}~| zJoCIb=eAt%N2Sc0*LR=)Gr>jXc+U1{2EKOY&`?3wi#H~`UdZcts5G`~(Smi^VXH-t zNnA2H`u*=l#_~yWzkbC{@|eWZU~_(X%TKE^b)f2_P*>quOSp`{Hl;21nz{an^LB{Ts5!Fr;& diff --git a/docs/Saml2/img/icons/constant.png b/docs/Saml2/img/icons/constant.png deleted file mode 100644 index f5f180d5a9b09a19b5ae44ad64a1fdceb6a86d7c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 496 zcmVrl1?U*0YQ8KBh3^hnN3W5 z2%|~HXz55n-@#z_4GhF=O%)o!1~F5NWx9pcZ;~F+?Pl3!f;~`hPjKs2om2M?&}Yi{ z)a|hNOZ<{ll;no}Bk)fO?j?Pd^dsz_V-;AIg>Bmyh7qUYr=-X5?0(D-NtDZF=JPoK zm&=9SZbzX|h$DHpwjoI*lSww44g39`Mx%jgn$+ucGMNm9VNk2pa2$tryNzwzJxRTg z;8l{SR;vIEhr`H=-EJ4(_i-GD)oR6Jv3R?-aYHZ~jUoig<&w!{f+RYf4giC};OT}S zkx1Zq9*4t$R;z_&Su~qXve_)-@tE~`O*);X-|ureoq}Sq`0d7mBub?cv)PRE`3%5z zyCt8`Q>j##PN(?3kLP)~uKN-h;x$auB$vxYtfW$@*foCnJuN{HCvYhz#zuJz@P!dKp~(AL>x#lFaYJy!Tsagqt+F;zg(Vd_Ma3C z(nGFZm^~mf*5 z)sz1pn_UOj3v?y|2J0zg2h4lZXZ~Oq6V)2(>o0PAi0Mp zcm2O}aQ*+4X;%Lqp4$EY_?&u@^n?8R{_$;a_<;NZ^2eq1Gykv3ut72B2M+tMZ(scX z!_&L}cQnO<)vrjkgy>B%C#)Z+=I#Bf|8MMChN2ecXJi`Peo$P2?0#|mG=^J|^}*N= zPwo1DaqZOq$7k37KfSmE=*JoV_w{7|UykNZn0k89t1|6?Zs{cGcU*1(=|3{P60d%I dd2d6B_y4`!nK<=Rk_TaW8yL|`1mgK1y#VW>cs>9C diff --git a/docs/Saml2/img/icons/file-php.png b/docs/Saml2/img/icons/file-php.png deleted file mode 100644 index c323f09f66241a28d61f1d2c8e90be0a68126bb6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4017 zcmV;i4^HrjP)KLZ*U+IBfRsybQWXdwQbLP>6pAqfylh#{fb6;Z(vMMVS~$e@S=j*ftg6;Uhf59&ghTmgWD0l;*T zI709Y^p6lP1rIRMx#05C~cW=H_Aw*bJ-5DT&Z2n+x)QHX^p z00esgV8|mQcmRZ%02D^@S3L16t`O%c004NIvOKvYIYoh62rY33S640`D9%Y2D-rV&neh&#Q1i z007~1e$oCcFS8neI|hJl{-P!B1ZZ9hpmq0)X0i`JwE&>$+E?>%_LC6RbVIkUx0b+_+BaR3cnT7Zv!AJxW zizFb)h!jyGOOZ85F;a?DAXP{m@;!0_IfqH8(HlgRxt7s3}k3K`kFu>>-2Q$QMFfPW!La{h336o>X zu_CMttHv6zR;&ZNiS=X8v3CR#fknUxHUxJ0uoBa_M6WNWeqIg~6QE69c9o#eyhGvpiOA@W-aonk<7r1(?fC{oI5N*U!4 zfg=2N-7=cNnjjOr{yriy6mMFgG#l znCF=fnQv8CDz++o6_Lscl}eQ+l^ZHARH>?_s@|##Rr6KLRFA1%Q+=*RRWnoLsR`7U zt5vFIcfW3@?wFpwUVxrVZ>QdQz32KIeJ}k~{cZZE^+ya? z2D1z#2HOnI7(B%_ac?{wFUQ;QQA1tBKtrWrm0_3Rgps+?Jfqb{jYbcQX~taRB;#$y zZN{S}1|}gUOHJxc?wV3fxuz+mJ4`!F$IZ;mqRrNsHJd##*D~ju=bP7?-?v~|cv>vB zsJ6IeNwVZxrdjT`yl#bBIa#GxRa#xMMy;K#CDyyGyQdMSxlWT#tDe?p!?5wT$+oGt z8L;Kp2HUQ-ZMJ=3XJQv;x5ci*?vuTfeY$;({XGW_huIFR9a(?@3)XSs8O^N5RyOM=TTmp(3=8^+zpz2r)C z^>JO{deZfso3oq3?Wo(Y?l$ge?uXo;%ru`Vo>?<<(8I_>;8Eq#KMS9gFl*neeosSB zfoHYnBQIkwkyowPu(zdms`p{<7e4kra-ZWq<2*OsGTvEV%s0Td$hXT+!*8Bnh2KMe zBmZRodjHV?r+_5^X9J0WL4jKW`}lf%A-|44I@@LTvf1rHjG(ze6+w@Jt%Bvjts!X0 z?2xS?_ve_-kiKB_KiJlZ$9G`c^=E@oNG)mWWaNo-3TIW8)$Hg0Ub-~8?KhvJ>$ z3*&nim@mj(aCxE5!t{lw7O5^0EIO7zOo&c6l<+|iDySBWCGrz@C5{St!X3hAA}`T4 z(TLbXTq+(;@<=L8dXnssyft|w#WSTW<++3>sgS%(4NTpeI-VAqb|7ssJvzNHgOZVu zaYCvgO_R1~>SyL=cFU|~g|hy|Zi}}s9+d~lYqOB71z9Z$wnC=pR9Yz4DhIM>Wmjgu z&56o6maCpC&F##y%G;1PobR9i?GnNg;gYtchD%p19a!eQtZF&3JaKv33gZ<8D~47E ztUS1iwkmDaPpj=$m#%)jCVEY4fnLGNg2A-`YwHVD3gv};>)hAvT~AmqS>Lr``i7kw zJ{5_It`yrBmlc25DBO7E8;5VoznR>Ww5hAaxn$2~(q`%A-YuS64wkBy=9dm`4cXeX z4c}I@?e+FW+b@^RDBHV(wnMq2zdX3SWv9u`%{xC-q*U}&`cyXV(%rRT*Z6MH?i+i& z_B8C(+grT%{XWUQ+f@NoP1R=AW&26{v-dx)iK^-Nmiuj8txj!m?Z*Ss1N{dh4z}01 z)YTo*JycSU)+_5r4#yw9{+;i4Ee$peRgIj+;v;ZGdF1K$3E%e~4LaI(jC-u%2h$&R z9cLXcYC@Xwnns&bn)_Q~Te?roKGD|d-g^8;+aC{{G(1^(O7m37Y1-+6)01cN&y1aw zoqc{T`P^XJqPBbIW6s}d4{z_f5Om?vMgNQEJG?v2T=KYd^0M3I6IZxbny)%vZR&LD zJpPl@Psh8QyPB@KTx+@RdcC!KX7}kEo;S|j^u2lU7XQ}Oo;f|;z4Ll+_r>@1-xl3| zawq-H%e&ckC+@AhPrP6BKT#_XdT7&;F71j}Joy zkC~6lh7E@6o;W@^IpRNZ{ptLtL(gQ-CY~4mqW;US7Zxvm_|@yz&e53Bp_lTPlfP|z zrTyx_>lv@x#=^!PzR7qqF<$gm`|ZJZ+;<)Cqu&ot2z=00004XF*Lt006O$eEU(80000WV@Og>004R=004l4008;_004mL004C` z008P>0026e000+nl3&F}000EcNkl2m;0!ZJ-o+356@I zw3Y_?!u5KP>-BDD{IIvz>)DpBQE`&Z?C#9Y^P6X$o##J7DaFk!A`{?^ms=>z2?dI~*f68DYAyE>tCTMJ~ZSBZx9}yrvC`rT>N`VmOJ55j4nm}mgy{?&! zB3Ub`Fr-3BkWyhJAdxViT^=zapvFxuBLXN1N}01zDtT|1Z8AAS07I(O%q>son!w=@ zXqrHGfWu+dC>sDWt+TX@*nkij5Lpuh$_{{KM9Se1Fg^$iWC%joTLOl8AkCn%2VsJM z!=c#(NE%jhIE1wn__Xd_%1iH}YDzUe zkB4%fhuqu>!u{~xTTM)_9N@vFm19CU#-iJ{DvDDR4WP>8l_&2Cvp0;I%C^Ha8*#J3juAGS4#h?&@Lx-YCaT z|ICVKbXKj)Vbce*2#2AkyO-@d*Yb324k8PleOc$J7js$qyrAJ+kS}+HDfiT{{hh=1 z_krIUB;W2n#IfT?2?m>KYTnO^M^;m}P0`kQhG6FjO8tJet_zdr%%`d46vej&`1)0XLr+h^fce?Y2f5hr_H}WLL}bJk+YvMND(D0;kLpHoI3RtjpsjS{*09bTTb9~ z=FoWh0C{=Yg!@CBIp4}FJIm0s!}MP%puXoLN}_q(GiBwd9vCGC6mzR5V|1_P`-Z~^ z2I+|$r?TP!^7JaYnikL<>twp`IWAoaQx(|A@iTjvIir}#6IWpL&E{ZzI|e!n7Cy$T zc`o}wxOPo7y`gL#j+Jq#?L3b^SwsCd)f}mh=yczr!}p9F}~ z#zb;hx@03obECYlz7iv01Hf|E#toJ1t8Aw6@B+^5o5$}BjT93lzp#k>!UCMRE|fF~ zUG3-BFAC}F4dc_VQ*r0r_~!?hb6AUUaU;p;xRGFx5;P6wO!HDT-OI(x5!x9Ftd~Of|JtfnIQn0ms z4}&mB$+&TEM45ubT9Q;|R0_i|m%w^wWkE|9suj5JaEzdRR=7z4U4m{^cCOjugKnx=^{PfON`DN}?+!0m5Y~9sd L;uWgGz+epk&R;19 diff --git a/docs/Saml2/img/icons/folder.gif b/docs/Saml2/img/icons/folder.gif deleted file mode 100644 index 2b31631ca2bfec3a8afb1bfdd4f8ed4c5bcc3a18..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 106 zcmZ?wbhEHb6ky=hKW2GJ7 I#Kd3?0MGg2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4c?q7?3B2Xp1x8ImHETXz54QVYrPgqHx8=(z e>Gl76{l!*pI92y$_dTH37(8A5T-G@yGywo6mxkK_ diff --git a/docs/Saml2/img/icons/icon-folder-open-big.png b/docs/Saml2/img/icons/icon-folder-open-big.png deleted file mode 100644 index fae384ef4df761b2d6cc250ed5787e430ae91663..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 232 zcmeAS@N?(olHy`uVBq!ia0vp^azHG`!3HF+C+nOCQtLfk978H@y`6TEw^f11_3i;d ziGzYN2L&Zg3QDws(66dq&SgShn{Thb{zRo^(j5Lg&dD7z8Ed<2HaxncvF_0qB|qh( zD^{Iwcon{}=b8RLEj=%X$?owoQ+czMDqpDz@out+{J4%~%}Jdw83lFk?!Av|@026WQIOdE8_{3R(~E4X}F}*cK0{Nlc(N@tWx{N75ZIyLFkD`ce?_+omU+4eIu&X fef&+H?MME!>ysALYPH`1I-SAO)z4*}Q$iB}E$LkN diff --git a/docs/Saml2/img/icons/icon-th-big.png b/docs/Saml2/img/icons/icon-th-big.png deleted file mode 100644 index 04b0ad872a98de63bc0e300e627ce69a2a209471..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 106 zcmeAS@N?(olHy`uVBq!ia0vp^Vj#@H1|*Mc$*~4fhMq2tAr-gYPBH{4<6!#zfBD*P z%ML8Ga1?(i);mdUy45w?2d5KGCQHxw$nZHi?xXOW{3u1P>qQzNK+O!Eu6{1-oD!M< D6}BRE diff --git a/docs/Saml2/img/icons/icon_template.svg b/docs/Saml2/img/icons/icon_template.svg deleted file mode 100644 index b0428aa4..00000000 --- a/docs/Saml2/img/icons/icon_template.svg +++ /dev/null @@ -1,93 +0,0 @@ - - - - - - - - - - - - image/svg+xml - - - - - - - - - Co - - diff --git a/docs/Saml2/img/icons/interface.png b/docs/Saml2/img/icons/interface.png deleted file mode 100644 index 51a3a1762db628e8cbbfb4d933a74b4d962d2d7e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 281 zcmeAS@N?(olHy`uVBq!ia0vp^0wB!61|;P_|4#%`EX7WqAsj$Z!;#Vf2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR40E|;Z~{{z_~j>MQR++0q{n_jdZ_~Xzv)82ln zir1^4FSoop)7kP4q||D^oYExqqT%4L-+qnX2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4|3mlps%(3Z75trJZsonk=m!SRtUbjIcd*Gd{GD-MU&5kK`Fd$; z&qe*M;R)u)+B55zu54SYqS>Xy$aOeCxaR(R@13(xM|fE^lFf7PnUNSzTjBx@u1_}0S82W4^{;r-{cRJTTl!v}kb2YK z*1sl?dBGmby>EB*DR3}+u*rYhnEoKO=X=4viDB0(R!$ZFviy;n_U!uqz48-dSM>2+ S-W3cC0R~T3KbLh*2~7ZLUYG9x diff --git a/docs/Saml2/img/icons/ok.png b/docs/Saml2/img/icons/ok.png deleted file mode 100644 index 39f287ab19b8bcdc156ea56355a95290d04f0ee8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3685 zcmV-r4w~_aP)KLZ*U+IBfRsybQWXdwQbLP>6pAqfylh#{fb6;Z(vMMVS~$e@S=j*ftg6;Uhf59&ghTmgWD0l;*T zI709Y^p6lP1rIRMx#05C~cW=H_Aw*bJ-5DT&Z2n+x)QHX^p z00esgV8|mQcmRZ%02D^@S3L16t`O%c004NIvOKvYIYoh62rY33S640`D9%Y2D-rV&neh&#Q1i z007~1e$oCcFS8neI|hJl{-P!B1ZZ9hpmq0)X0i`JwE&>$+E?>%_LC6RbVIkUx0b+_+BaR3cnT7Zv!AJxW zizFb)h!jyGOOZ85F;a?DAXP{m@;!0_IfqH8(HlgRxt7s3}k3K`kFu>>-2Q$QMFfPW!La{h336o>X zu_CMttHv6zR;&ZNiS=X8v3CR#fknUxHUxJ0uoBa_M6WNWeqIg~6QE69c9o#eyhGvpiOA@W-aonk<7r1(?fC{oI5N*U!4 zfg=2N-7=cNnjjOr{yriy6mMFgG#l znCF=fnQv8CDz++o6_Lscl}eQ+l^ZHARH>?_s@|##Rr6KLRFA1%Q+=*RRWnoLsR`7U zt5vFIcfW3@?wFpwUVxrVZ>QdQz32KIeJ}k~{cZZE^+ya? z2D1z#2HOnI7(B%_ac?{wFUQ;QQA1tBKtrWrm0_3Rgps+?Jfqb{jYbcQX~taRB;#$y zZN{S}1|}gUOHJxc?wV3fxuz+mJ4`!F$IZ;mqRrNsHJd##*D~ju=bP7?-?v~|cv>vB zsJ6IeNwVZxrdjT`yl#bBIa#GxRa#xMMy;K#CDyyGyQdMSxlWT#tDe?p!?5wT$+oGt z8L;Kp2HUQ-ZMJ=3XJQv;x5ci*?vuTfeY$;({XGW_huIFR9a(?@3)XSs8O^N5RyOM=TTmp(3=8^+zpz2r)C z^>JO{deZfso3oq3?Wo(Y?l$ge?uXo;%ru`Vo>?<<(8I_>;8Eq#KMS9gFl*neeosSB zfoHYnBQIkwkyowPu(zdms`p{<7e4kra-ZWq<2*OsGTvEV%s0Td$hXT+!*8Bnh2KMe zBmZRodjHV?r+_5^X9J0WL4jKW`}lf%A-|44I@@LTvf1rHjG(ze6+w@Jt%Bvjts!X0 z?2xS?_ve_-kiKB_KiJlZ$9G`c^=E@oNG)mWWaNo-3TIW8)$Hg0Ub-~8?KhvJ>$ z3*&nim@mj(aCxE5!t{lw7O5^0EIO7zOo&c6l<+|iDySBWCGrz@C5{St!X3hAA}`T4 z(TLbXTq+(;@<=L8dXnssyft|w#WSTW<++3>sgS%(4NTpeI-VAqb|7ssJvzNHgOZVu zaYCvgO_R1~>SyL=cFU|~g|hy|Zi}}s9+d~lYqOB71z9Z$wnC=pR9Yz4DhIM>Wmjgu z&56o6maCpC&F##y%G;1PobR9i?GnNg;gYtchD%p19a!eQtZF&3JaKv33gZ<8D~47E ztUS1iwkmDaPpj=$m#%)jCVEY4fnLGNg2A-`YwHVD3gv};>)hAvT~AmqS>Lr``i7kw zJ{5_It`yrBmlc25DBO7E8;5VoznR>Ww5hAaxn$2~(q`%A-YuS64wkBy=9dm`4cXeX z4c}I@?e+FW+b@^RDBHV(wnMq2zdX3SWv9u`%{xC-q*U}&`cyXV(%rRT*Z6MH?i+i& z_B8C(+grT%{XWUQ+f@NoP1R=AW&26{v-dx)iK^-Nmiuj8txj!m?Z*Ss1N{dh4z}01 z)YTo*JycSU)+_5r4#yw9{+;i4Ee$peRgIj+;v;ZGdF1K$3E%e~4LaI(jC-u%2h$&R z9cLXcYC@Xwnns&bn)_Q~Te?roKGD|d-g^8;+aC{{G(1^(O7m37Y1-+6)01cN&y1aw zoqc{T`P^XJqPBbIW6s}d4{z_f5Om?vMgNQEJG?v2T=KYd^0M3I6IZxbny)%vZR&LD zJpPl@Psh8QyPB@KTx+@RdcC!KX7}kEo;S|j^u2lU7XQ}Oo;f|;z4Ll+_r>@1-xl3| zawq-H%e&ckC+@AhPrP6BKT#_XdT7&;F71j}Joy zkC~6lh7E@6o;W@^IpRNZ{ptLtL(gQ-CY~4mqW;US7Zxvm_|@yz&e53Bp_lTPlfP|z zrTyx_>lv@x#=^!PzR7qqF<$gm`|ZJZ+;<)Cqu&ot2z=00004XF*Lt006O$eEU(80000WV@Og>004R=004l4008;_004mL004C` z008P>0026e000+nl3&F}000AkNklFk8dWoJ3jEU~XBNtL9cKTeyi??hwK;af`L)EJ3Tek!gA;-c*D;LGHMx zd+rCvabVEharf!JGL{ZB|LC)Q|N4IS+WY(C^ZGJGgnLmk+@oUe7QiXHx{X?<4kuA<{B9}JH*)E%HFP7mHP}9&od%Rlf8*q z!+Zb$Afh`O+-K<7+OmbDfJiSKSVgLB3fgw0hB97Gi?JmryQ9QHEpw(qw?6Bg(s!}7 zeKXFE{)(}LFi!hB5Q_kqWaR%yp))BPw6%&sZ3~-qtE9?3II`MQN>V_ib#1H3(5xq+ z8FYVxh90O)rj+M(9}&^tM}a!LU-9i4YO)+4ZZF(IGZa&ynkJZv_b($UAX4S2axxw@ zkp8HGGQOTenhKucp2Amu@rVf8Ph}fcG#19Xq;n(%MEbB}C!r3#H$(NU+>U}TA0a6q z(w6g;RCF?r3@3Gz+m=oVRVtDf;l$1B!N13>Ed646^!UJcBn3n|c(tBv!5(_^r)uIG zVJ0FNzE9j>+`o{dfJkq5zd>c@VltZ3so>NiN~(@0+0*Epx;s`LW^-ecBx@B9!8&mj z$^2aW=xN7m%QnN~b?0Zcru?uVl(YQc+C!)x-Uk<)2na(+q&cu18-y=7+#hYH{HYf# zXA2o~LY(%A@!?SFCE+{-PCyc$f-7SdY|MWJlGVSUuJm)JWxNTFXg}Pn3u;b{f#VV! zu0c=4MDzab2?p zUk71ECym(^Ktah8*NBqf{Irtt#G+J&^73-M%)IR4s{THbdS4@;+_CX;D$tbHv@ zKP(rqp0u=bnyu9N>Uo_U!3Oh7Zadn=h($1khp%^iqRq~oz#S8__oGZpqDG*IrvS_P zm_Ll!$Jaa8F?rnHX0#wvO7rxmnI~R-l$_UK=yu6u>Z(;oqO_x48#da0c>LqwX@$Pz zE!R{$o3>8d_x|{%8;t44x6gB!mU^YMH>hio#*1C=ayPx&XmD)8^Pjt|-QV41uvi_g zKK}vBAFH~?^X!>hdhhpbO0T~$$K=%J`v1M=?h7VQI@kXa7(5INp00i_>zopr0G5Z5 AIsgCw diff --git a/docs/Saml2/img/icons/search.gif b/docs/Saml2/img/icons/search.gif deleted file mode 100644 index eef46fc9ee10547bfa2da348f81b4c83f19e65a4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 152 zcmZ?wbhEHb6krfw*v!MQVZ+APuU|iW_~^rj4_mixJ96acuV25;ojZ5^`i(nx?(W*P zd;k6e|NsAIfC0syEQ|~cJPbM@0gxFCEUptydamAU5nbG%&zz z##7bH4$=1vId^*V*v!xR>*{?7mqKrCnmdg!}G z=IXm8Sn&!;akH?purU1n%JB2k%b%|wU4DOV*XpD9FQ1(YRJQ}B0U&^o4e)SH>*-Ur zh)`kY;$&s`_k)2EsF{J8m4Sm#kV96(KvF=6-{ZWnu*|swyBJ`G00a;d%-Q;G(RnJC zk*X~0{H%Zf{A2k0_b@F4v6je+t14+fASCR#!a*Y7?B`u`upwYzT_j5PRxk@1k>@6WFcf574M53UU$ zfM5nZ{PpG4FOc(@{(fdKQRiUz`t=9HgNKh8zJB|~V5B3;@aO9@i00pa89smd@*SEs z7ytqYX29h)kFR`S`1=Lu?N1E0y_w^~*-1fljz_B$LUvK}k?BNXe#Y!m=zM!!V#}8bncK5m;8VP zw86G*RI63?Cd%b9bX|ueNlZ|wR6rj|r_)VIP@r2imh3?SN+^{|kY%~8B{maJ@F*OK z&VH9LwOeGt#DRjj0~v~8`>iO7!Ybi;zE$va`A^T#yW`y44;k^#O~K5*jD=qcUhPSc zvyy~q;5H_1WT1l~cqje9yfa+l!hu6xjdOJ8s;8E^+=QQ$tw p?%p!Hy#YapB=@+^9(46X{{RQg%9y;OKjr`c002ovPDHLkV1g7l326WT diff --git a/docs/Saml2/img/icons/visibility_private.png b/docs/Saml2/img/icons/visibility_private.png deleted file mode 100644 index 386dc2d879d20cf85e4eeaaeb29e66bfe8398995..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3433 zcmV-v4VLnWP)StO&>uS)ve< z0AYj>5AR{$W90N^4L=L-RlQUJ&DC0@ZjPh;=*jPLSYvv5M~MFBAl0-BNIsH15C~g000{K(ZT*W zKal6<?_01!^k@7iDG<<3=fuAC~28EsPoqkpK{9 zG%|Vj005J}`Hw&=0RYXHq~ibpyyzHQsFW8>#s~laM4*8xut5h5!4#~(4xGUqyucR% zVFpA%3?#rj5JCpzfE)^;7?wd9RKPme1hudO8lVxH;SjXJF*pt9;1XPc>u?taU>Kgl z7`%oF1VP9M6Ja4bh!J9r*dopd7nzO(B4J20l7OTj>4+3jBE`sZqynizYLQ(?Bl0bB z6giDtK>Co|$RIL`{EECsF_eL_Q3KQhbwIhO9~z3rpmWi5G!I>XmZEFX8nhlgfVQHi z(M#xcbO3#dj$?q)F%D*o*1Pf{>6$SWH+$s3q(pv=X`qR|$iJF~TPzlc-O$C3+J1#CT#lv5;6stS0Uu z9wDA3UMCI{Uz12A4#|?_P6{CkNG+sOq(0IRX`DyT~9-sA|ffUF>w zk++Z!kWZ5P$;0Hg6gtI-;!FvmBvPc55=u2?Kjj3apE5$3psG>Lsh-pbs)#zDT1jo7 zc2F-(3)vyY4>O^>2$gY-Gd%Qm(Z8eYv>2*=jns=cMJ`N z4THx>VkjAF8G9M07`GWOnM|ey)0dgZR4~^v8<}UA514ONSSt1^d=-((5|uiYR+WC0 z=c-gyb5%dpd8!Lkt5pxHURHgkMpd&=fR^vEcAI*_=wwAG2sV%zY%w@v@XU~7=xdm1xY6*0;iwVIXu6TaXrs|dqbIl~?uTdNHFy_3W~^@< zVyraYW!!5#VPa`A+oZ&##pJ#z&6I1JX1dX|({#+t$SmBf*sRIyjyctwYo1}g*}U8Q zjfJH}oW)9uHjBrW+LnCF1(r>g_pF#!K2~{F^;XxcN!DEJEbDF7S8PxlSDOr*I-AS3 zsI8l=#CDr)-xT5$k15hA^;2%zG3@;83hbKf2JJcaVfH2VZT8O{%p4LO);n}Nd~$Sk z%yw*Wyz8XlG{dRHsl(}4XB%gsbDi@w7p6;)%MzD%mlsoQr;4X;pL)xc%+^yMd)ZNTI#eJ*$O)i@o$z8)e??LqN_gLa_%;TM>o2SC_kmoO6c3xRt`@J4d zvz#WL)-Y|z+r(Soy~}%GIzByR`p)SCKE^%*pL(B%zNWq+-#xw~e%5}Oeh2)X`#bu} z{g3#+;d$~F@lFL`0l@*~0lk45fwKc^10MvL1f>Tx1&sx}1}_Xg6+#RN4Ot&@lW)Km z@*DYMGu&q^n$Z=?2%QyL8~QNJCQKgI5srq>2;UHXZ>IT7>CCnWh~P(Th`1kV8JQRP zeH1AwGO8}>QM6NZadh`A)~w`N`)9q5@sFvDxjWlxwsLl7tZHmhY-8-3xPZ8-xPf?w z_(k!T5_A(J3GIpG#Ms0=iQ{tu=WLoYoaCBRmULsT<=mpV7v|~C%bs^USv6UZd^m-e z5|^?+<%1wXP%juy<)>~<9TW0|n}ttBzM_qyQL(qUN<5P0omQ3hINdvaL;7fjPeygd zGYL;pD|wL_lDQ-EO;$wK-mK5raoH_7l$?~Dqf!lNmb5F^Ft;eTPi8AClMUo~=55Lw zlZVRpxOiFd;3B_8yA~shQx|tGF!j;$toK>JuS&gYLDkTP@C~gS@r~shUu{a>bfJ1`^^VQ7&C1OKHDNXF zTgC{M|V%fo{xK_dk6MK@9S!GZ*1JJzrV5xZBjOk9!NTH<(q(S+MDf~ zceQX@Dh|Ry<-sT4rhI$jQ0Sq~!`#Eo-%($2E^vo}is5J@NVEf|KK?WT&2;PCq@=ncR8zO#GQ^T~S@VXG71P zKNocFOt)Y6$@AXlk6rM*aP%VgV%sIRORYVwJx6|U{ozQjTW{-S_si{9Jg#)~P3t?+ z@6&(!YQWWV*Z9{iU7vZq@5byKw{9lg9JnRA_4s!7?H6|n?o8ZWdXIRo{Jz@#>IeD{ z>VLHUv1Pz*;P_y`V9&!@5AO~Mho1hF|I>%z(nrik)gwkDjgOrl9~%uCz4Bzvli{bb zrxVZ0epdf^>vOB;-~HnIOV3#R*zgPai_gEVd8zYq@2jb=I>#f&AH2?aJ@Kaet zy{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2ipf86ea~8P{#KF00Ny!L_t(I z%YBp0Yn4Y7#(y*KdvkMd5_A2?O={#qrJ7PyP+MBWjdmkq-MF}+bs>~4r2l}>F8c>` z*;S#1g25oRl$MrOp{P3rHxkqY6G_d7NzK>&cxTQzUEGhxE*u!n40E1y&hs!2yk>n4 z3E*Cr(|w$%;c!o}HQn-B?(hnY;bqn@gMg`rE04yquox=DO|R zUp{#A{auxj--pL4JLJVP;@XOlq_|SqX>o{!htqfF@7}v`afQVW#&r%q9UDEn|J?&W z`sY)r)HV#mseu}Z7@`;hyPb@@{e1S1zup@@d1C(b)myCzzJ}7t>hXViS095JriNmO zI7AH*Mbr_aqPbq0g^~MbZcZHs@Bl|YeCxa7+6<_gnV|-;4US?&b%fZ8*;d_LWBu6V z*shBJ{@Xoisi(Pmw6T?05OX0KnHVBQh)Qh75FrajJ>ZrWmI%mYfON2wFA*ApnZs#j zh=LeIr9A-zHG&vHAc!IAOq$K1>!Uq|)M@mh-aGFQr8{y|Bed^9jA$UzDGUkfop;_h zVp(IE8T)X>~3p`YDR)gs8T?b4&RaB~e2G=e#TS7U_Goc?G~vRPt13>(@8e!!;}HaG98e z2tl;1gF{qNGxI*N;?CXl#Q5>~jQT_+PcpeC-2CV;t5Z*J_};=;uKdQKs7A9^Z*dmE zr#%#g%C6AY@6wI+&&H=WzVCkJj+uTwb&zwn9&vSFuA1&0{epqP(U>*+yie53)^v5{ ziCbL!bbOgd+l}{%8v&|wO@4sXl^Ldgpx-1&QfsV_FSGQ2*8=Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2ipf8 z6ebXJjUpTX00MkTL_t(I%Y~CqY)nxU#(($Do7AMkOp9tm{cB2DkO)>?h=q_KqKP1u z8YDz46(O`lh@FMRP9!WEe>Mg|SV~Nzf}5P&@8sU^ z`_8$!2mZ0@A;Eu^ia}Q!9P5to#og>{S<|$qwjrGj%Ek`&kMupiKXB#3Q*t*>rTCcl zC+@1L`f&g2-3IVuL14`ep2 z+uV3N?fN`hDq8CR0Wn}hZ~`tl!y8uf`=4~bS-XBq-9YQ!LR7)7d1MctYaFRhe-$SV z=fDcs3fYDrAxHpDdHU06=Ee4t!)u`ONSz%uHYIJ33SVVl3^}&=u%8{d#qdY8uDM8ssjrA9$p<3++@D?p3lf-6B z31v-Gy4a|EF_X?>qTPhx46e$!*@rfg@{$^D1#Jx&Gf6aY-?2yqJBdu3ppzcjEBwGW zhN39aHjG3jh(RT<2*=?plm!3M8;bhsT?#{E3`huJP$@Hra5&}hVo_^xDuFi+Pxy?} z-@v|lM^~Vd2?=ph5s+ZA4J#lLIV*)4)sTD5Q2^c51}D0?mH#L=jq*Gb;wllj#?FFM z8t2lU9{Qzr-pk{6wL#+XJ9u~=dS1Fal5owl>eDL_alyEAHjJEg0#dbAx|r07FW*i3 zk?UNW_{#AxJ?MlD$KmugcC<82>&RxR=1LG$qqJD~Sr{z8@BL!h&*kWyI(UCfBSZ&V uoAFjHVNPw9Y6-DJV~m~6QTTgm0e%BYER)ZarpMm^00004TSQEP)StO&>uS)ve< z0AYj>5AR{$W90N^4L=L-RlQUJ&DC0@ZjPh;=*jPLSYvv5M~MFBAl0-BNIsH15C~g000{K(ZT*W zKal6<?_01!^k@7iDG<<3=fuAC~28EsPoqkpK{9 zG%|Vj005J}`Hw&=0RYXHq~ibpyyzHQsFW8>#s~laM4*8xut5h5!4#~(4xGUqyucR% zVFpA%3?#rj5JCpzfE)^;7?wd9RKPme1hudO8lVxH;SjXJF*pt9;1XPc>u?taU>Kgl z7`%oF1VP9M6Ja4bh!J9r*dopd7nzO(B4J20l7OTj>4+3jBE`sZqynizYLQ(?Bl0bB z6giDtK>Co|$RIL`{EECsF_eL_Q3KQhbwIhO9~z3rpmWi5G!I>XmZEFX8nhlgfVQHi z(M#xcbO3#dj$?q)F%D*o*1Pf{>6$SWH+$s3q(pv=X`qR|$iJF~TPzlc-O$C3+J1#CT#lv5;6stS0Uu z9wDA3UMCI{Uz12A4#|?_P6{CkNG+sOq(0IRX`DyT~9-sA|ffUF>w zk++Z!kWZ5P$;0Hg6gtI-;!FvmBvPc55=u2?Kjj3apE5$3psG>Lsh-pbs)#zDT1jo7 zc2F-(3)vyY4>O^>2$gY-Gd%Qm(Z8eYv>2*=jns=cMJ`N z4THx>VkjAF8G9M07`GWOnM|ey)0dgZR4~^v8<}UA514ONSSt1^d=-((5|uiYR+WC0 z=c-gyb5%dpd8!Lkt5pxHURHgkMpd&=fR^vEcAI*_=wwAG2sV%zY%w@v@XU~7=xdm1xY6*0;iwVIXu6TaXrs|dqbIl~?uTdNHFy_3W~^@< zVyraYW!!5#VPa`A+oZ&##pJ#z&6I1JX1dX|({#+t$SmBf*sRIyjyctwYo1}g*}U8Q zjfJH}oW)9uHjBrW+LnCF1(r>g_pF#!K2~{F^;XxcN!DEJEbDF7S8PxlSDOr*I-AS3 zsI8l=#CDr)-xT5$k15hA^;2%zG3@;83hbKf2JJcaVfH2VZT8O{%p4LO);n}Nd~$Sk z%yw*Wyz8XlG{dRHsl(}4XB%gsbDi@w7p6;)%MzD%mlsoQr;4X;pL)xc%+^yMd)ZNTI#eJ*$O)i@o$z8)e??LqN_gLa_%;TM>o2SC_kmoO6c3xRt`@J4d zvz#WL)-Y|z+r(Soy~}%GIzByR`p)SCKE^%*pL(B%zNWq+-#xw~e%5}Oeh2)X`#bu} z{g3#+;d$~F@lFL`0l@*~0lk45fwKc^10MvL1f>Tx1&sx}1}_Xg6+#RN4Ot&@lW)Km z@*DYMGu&q^n$Z=?2%QyL8~QNJCQKgI5srq>2;UHXZ>IT7>CCnWh~P(Th`1kV8JQRP zeH1AwGO8}>QM6NZadh`A)~w`N`)9q5@sFvDxjWlxwsLl7tZHmhY-8-3xPZ8-xPf?w z_(k!T5_A(J3GIpG#Ms0=iQ{tu=WLoYoaCBRmULsT<=mpV7v|~C%bs^USv6UZd^m-e z5|^?+<%1wXP%juy<)>~<9TW0|n}ttBzM_qyQL(qUN<5P0omQ3hINdvaL;7fjPeygd zGYL;pD|wL_lDQ-EO;$wK-mK5raoH_7l$?~Dqf!lNmb5F^Ft;eTPi8AClMUo~=55Lw zlZVRpxOiFd;3B_8yA~shQx|tGF!j;$toK>JuS&gYLDkTP@C~gS@r~shUu{a>bfJ1`^^VQ7&C1OKHDNXF zTgC{M|V%fo{xK_dk6MK@9S!GZ*1JJzrV5xZBjOk9!NTH<(q(S+MDf~ zceQX@Dh|Ry<-sT4rhI$jQ0Sq~!`#Eo-%($2E^vo}is5J@NVEf|KK?WT&2;PCq@=ncR8zO#GQ^T~S@VXG71P zKNocFOt)Y6$@AXlk6rM*aP%VgV%sIRORYVwJx6|U{ozQjTW{-S_si{9Jg#)~P3t?+ z@6&(!YQWWV*Z9{iU7vZq@5byKw{9lg9JnRA_4s!7?H6|n?o8ZWdXIRo{Jz@#>IeD{ z>VLHUv1Pz*;P_y`V9&!@5AO~Mho1hF|I>%z(nrik)gwkDjgOrl9~%uCz4Bzvli{bb zrxVZ0epdf^>vOB;-~HnIOV3#R*zgPai_gEVd8zYq@2jb=I>#f&AH2?aJ@Kaet zy{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2ipf86eb*cJ8m}s00OT`L_t(I z%YBniXk1kk#(($Dn@nb+%_M1(NWV=0YLiwH$D2%?C%DVS&r7K)4FLg=c{F1vBp zWfw&#C>SgS#Xl(47O6x83))SoHqe%66G*4+B=g?8_ndoN%p|5RdN=37Ip6o4b2uM7 z?0rB5a1SflNKVhyxHwY+@aoyd;i<8y{i6e0hhmE9c6({z(#_vb{c(_Q4}CYu^}9DV zYTah=JKsFj9S5F>d{{@5_ld zrk~vYh4`yksckcGl0XxP8d0$-BQDb&|D3<^)AM`B_bz_)%7tzRLnmn-d2vsx*8eAl zk<5@}s5+t=K@(9OK@y~XLb>ho>DRCB0q_9(cRzim(OAGpre;V25l5*;5F>~q#BOYd z+;I1wd+qG-0RaE($5}J$yR&R_0$qEt3J;n%8AV`l~4N-%ND;m#e$6s1lTh5F6;$~0? z-97wA*6TnZsafVT*H^2a|9YpG=Q!!s-TZ`4O+rlefO0gV7$Oc)!xG@Ut2Y|723C&( z`02SC7iRKvORMp7Z(Cdl)+0&1`5mH(l+3)ZShF#L^~t-J-y)x$t91|Q!yl*ksubb(;uO>P3<~3gWtU5EA zO&l9waH5cM!23!vvwQ8d@>k0(9h#rz+GgWD;6{LpGbNLsl8rdV>pc31TGUV}?$6J% d{D0R1{0r!j$d`WA?P34`002ovPDHLkV1i_Kq4od( diff --git a/docs/Saml2/img/iviewer/grab.cur b/docs/Saml2/img/iviewer/grab.cur deleted file mode 100644 index ef540be09383a215ba21287683ae956b74a6dbbf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1150 zcmeHEF%H8Z3_L;+LM2k9N*yv~>~H#wK9i4B>Jy?)*;1Rr5Mf~HSVzWizBA$iDEg)e zv@Up@fGdC-B|(IIaVjw`XMnR4do4(}ceLED$#?I4PhZt?V;F{(zNyX4aU6>oTI<~I zR%1+|Z@pO>D9unx@mz^sV2R6KAHrH&a3w(Uah_+1dcf$ic$W0J$AsEGc`x}F-{G8# oT0W#ZA~$;zN&n?%4r~@-v(K$0B;Q#;t diff --git a/docs/Saml2/img/iviewer/hand.cur b/docs/Saml2/img/iviewer/hand.cur deleted file mode 100644 index 1a5bafb5263fd4937dda4098b04aa5c70e2de924..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1150 zcma)3OKyWe4E694LIn}22q6~8?0U4`qB$BzVUYuLnN^5A#g-vqrbZ8co}UNC0FIu^ z1?Y|NodI+J@I{~!RsQPaynTKEFe0{|*)R-iM9cJuPktQ*F&}vmxJX7;nU}sFz|xzG*A)o1}vy~Np8!oh{{D) z3FWrSE(G-lOIo^%@l%Jh z7d(bKZD(=f(+rDu3Ibk!p~fAzvAEw(G5oFaf>VGX;I$X`=G^#MhKzfwaaX++^R_aG z{23g@-KfbsV!rlS8y~jNpC$Q98001E5Sq?VpxukSs-?)+t$^aeGL+RsprA4wk<#_> z_+u(WTiH*vZ^%;_bKH_BUEq}jd#?-l#9J=q_v{?VaI4}Q9JQ|FoaxO4M#r~&(9l-@ga5_qddH0^Pp)3D%%13U()$KPZ9mfuKHeN zh|FV%AcKd9$Xte~JpHr7ISdEsS=dbylRpV}b%EG*(H$Zm7BrYE89CoGzCv2mgg*7U?}T-eQj1 z{ctQepE}YD%L6}S{pbtWcxoXGX*qRvIs~7NleuJ1rI2sTU9}wgEO}#naM{Mwl$wh8u zCnBy@;!tLlFk2ANZy*yRh*u1IjEu7sgd^u~j?-pP>cuPS5S69F5h60HO2`84nde#W zyHhV;*NN!tY8*EZeXCkX$LB3TNWEh+HIj>(aWc0CrwBgBQY@5_fO(q}ggUVHfHYwh z33cBmty=DP=A9=gECUXndMm_NP*e}Z-LCDyS)!}~n7b*S3$R(WUj{y!TOYyebROJ- zFF$p&>5+Q7DfKeS+K_mst_KprM8H(Hy%~al3{|Z#A5JZTYe-7!V4F>!)KgSFrn=vN z3kCIkDE(K!G*^RwzlwE`Dy#7rUC1u2#kz=0tng2mHP|cZPQ4qN4qPSy<|wW2D5KC{MlR z;>)=A5V)!Cz;#udS#FfKqnHHD=_R1Ptpjzf{nOgnDXf!ZtKqUo3Ky}YM}T&xUI8_p z+{#DD)pj7q40-gM-UA6eVt~J6Ck37*j6+@9f{jOSVfEgWC}V(*7I~i&Dx8uU4S&P_ z;3=qW>uyHVjD_fF#+pz$KVvi(@T$|6gmQ;1NkX6Jb)Y}^@BGWy!Sjrgf9<#ho=bDz zCj-9w{fH|?2J}+O500000NkvXXu0mjf*RRDb diff --git a/docs/Saml2/img/iviewer/iviewer.rotate_right.png b/docs/Saml2/img/iviewer/iviewer.rotate_right.png deleted file mode 100644 index 7a6c829871d058af5a5ca0ac67256c259f84c5ac..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1482 zcmV;*1vUDKP)W@q8L24va@vW@P7*!=(&yIADtgIo?`IW@@z#oP%kAO5~e4>aSvdau$keO zelrxe7h>a?XEPGL-8ZvUK7S5JxO_SC%cam%h9U3nOynA8Bd1~p@(p_slER=;FN42~ zVT$Cx%L&IBfqkNPU0Q$wV<=M8^Ktsd`-seX8%Hx4(Mza9RSeQph6Cvg*A2_?bs*!Z zJm9Mh7vz)H#bKgf96Z*=%6lrx!F>}8+<9p(ZW^~EGIuaSuQBYWfCsY}!gCl75#iYs zn4X1YwmkE{L{qbYU7_|vC;44Kc>_>d53G;Ofy>H6K72&Q1n)K0hYkOJ{}5yueQ_kO zAEZ3kO@`uTdQ^;QD4P$Xc-46$f7y>g|g44T+ z#BgE=@!>Z#-vKoL6Wa&pE*R*#HWno`0s)tGNL1G$LZyexFDGPt0qahH^Hl0tOywX% zlsY1!jA8k4hEa>zCTrlAtqC<~Car`X>shKzaMo5pP+|!}lx4#8x7#jb=yVHAyecTTC4J8t z#9H#H1x)ab5$qRn{T_~Gwh%$&8k>4#Nl^>etY1&RH*c@JV*VdWES08K(6hJ3ua1F+ z1Vqx@pUkersqB_Ip|BQ5mEtYg?Pld26u-(ZDhIXZN8p8vpywZqUmXq21K`XJ6VBRD zSPjgUh_hsuo0Zq@#H52sg=lQDK%p}U0=)MqxPXrz3y|HcLaYr6jTyT{TGH;2&kl$g zvn(tPnZ+iUo13A~-oxKTMnQmAi+~YaKrsopkYC+_iv!`6FZ*8at59p?CSTLD^ce@1hVDp0-#Q zq7i&EGSIAWEAo-(3@vR~e8qHMf3DS%&Pzg-H4FABh2HRK5QhTu_A0SBL~)<~@sXQv zl!l*(`MH4my)*cGH#$9gu8S$5cCU4I9uNy}^C|I;^|0b5vYngtVB^%;d7vlsx1OAw ktS2S0?VM~5JkO{63m1~IVD>3BuK)l507*qoM6N<$f)6RO6951J diff --git a/docs/Saml2/img/iviewer/iviewer.zoom_fit.png b/docs/Saml2/img/iviewer/iviewer.zoom_fit.png deleted file mode 100644 index 364e01d90eae19584713851314629f2468198e9e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1252 zcmbVMZD`zN9M7nO!F>6)Qu>rmKTa$KDx31r-tX6e<%`(6Krd_QfiW`8t`1_@uq7ekl83AbH+? zzu*7$$#_?1`>KY!8VG_|C2bSZcx-mx`sMihAai~i59?7fi@MD`D#97s?^ptvbD@%0UaWlEb9Y?!POak>Kac>j_lvC`$F%JGkXW>_ZEGx zJom!Kv#(7V2O9tK-kSZb!BUHpo@HF_;W5I?7`%^kn|fV6LyKC%38?;(5V z!PU9ZKS#&d``e%Ktf-E%=q0M&EZqyy}ir$_H&JcW2fJ{{PgiX z8-IUUIXQgrq&9v}_F_|k9sDEvsw97zUz^v|wk^6~k{(E}g+-F{ISKr))j<47BXr41~e0blAr&bSs z|IrSo^7@evzS-=(@x`Huqc2r99GkQ^PabxeDqKE2-7j>wsvG2m_N{Pyfo(Z~3KXY?;^Pc&YH??aJsCHEo`3 w8eZ!(AMJatv3kpyYro>2$M)>r+u)qoRbjGiisBQYX$xZ(3D5f)$iQF?09S=3^#A|> diff --git a/docs/Saml2/img/iviewer/iviewer.zoom_in.png b/docs/Saml2/img/iviewer/iviewer.zoom_in.png deleted file mode 100644 index 78993327c62ddd64e7fe33bc1b0d469ef9e17f30..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1420 zcmbVMeM}o=96n$mLI`O1*jPqxokAS8_t9QIP6}&#?I^6YLL;DzakN*s!1Zp|0}9Rz z8rh;F0cBg38IU39T#zkeLnml8hzMCSG?@^xXdOBYVGI|HL|oz(DEbH4A6|0zem&3g z`+V;WTfxD&nA8{m0OHKKM4>pQ1>fi>@%sWi*eedZ1Y?O%#JYqAlBWQjldYscGecHU zg%s&*JUU5b0YHS4wwDMcmP5FMWn^R!Bl9wx$OeF{94|*YYA6A$q^fAQR`OuPF9B(% zR#J>vU<+rUs_EP&o+@f8usfP+92%!2CmYQ2;-UaU2_)!cYTX{(tCg(l;^I8G4N1Ut zh)|=IY&cb7v4IAbr$9^wOC7Kh29<~mkt? zy6{56v}sFRX(iQyz~K<#uSL*ic3n>tk$HCK_ zK(lTzs7O|_b%ItRdb$w;!&xj_!fwxIqQsOzUXp_l84NK@Fs^m9M<}HJbz@t!$KJ?M zP$A`E>v)G)57)jBS6;_)Fv2Ks*P|kY8`^A2u!ZfsWAnHVJ68Y*ZF@k28qrD)nZSf_1^Pw#| z@pZkmCA&G}0&7bcjq%x*?aRCV3irha4o~M_DArx{=C$ijm7gxpJfn{2L~$I+EADGSEAJts^bthXdZ0!+7(pGrKca+s`)MokNH6@80m`S3a@u zY1ygFvFkgB8j(NleZ>ubn=|IJ|7-yHzY}KZV-M0lk+#l6X1~TQy|p*uWp8(@{ii>t zUM%g1pU@A_-dyI62l_3g1J;f*Z-2$!(N|(ifOlu2-fw+1YIXRfE0Nik_Z$MUT=6@` he~f-qo>Y;tmQ(?tGoVp(DLyXve>58lh(UdY?;kaa{Rsd7 diff --git a/docs/Saml2/img/iviewer/iviewer.zoom_in2.gif b/docs/Saml2/img/iviewer/iviewer.zoom_in2.gif deleted file mode 100644 index 5d596181627a30344f9783d466ce0558279fe729..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 90 zcmZ?wbhEHblwpuzXkcUjg8%>j>wsvG2m_O4Pyfo(Z}}I`;fT1UbHL~G(^^jrxfIDc qOSLxju^l&BbLLyj{a>m(=kzlMwFoEmw|glD9`i8f>~-Q|um%7;9UyH0 diff --git a/docs/Saml2/img/iviewer/iviewer.zoom_out.png b/docs/Saml2/img/iviewer/iviewer.zoom_out.png deleted file mode 100644 index 893f3502baaab667354fe8b560c1712b72630836..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1416 zcmeAS@N?(olHy`uVBq!ia0vp^av;pX1|+Qw)-3{3k|nMYCBgY=CFO}lsSJ)O`AMk? zp1FzXsX?iUDV2pMQ*9U+m{T%CB1$5BeXNr6bM+EIYV;~{3xK*A7;Nk-3KEmEQ%e+* zQqwc@Y?a>c-mj#PnPRIHZt82`Ti~3Uk?B!Ylp0*+7m{3+ootz+WN)WnQ(*-(AUCxn zQK2F?C$HG5!d3}vt`(3C64qBz04piUwpD^SD#ABF!8yMuRl!uxKsVXI%s|1+P|wiV z#N6CmN5ROz&_Lh7NZ-&%*U;R`*vQJjKmiJrfVLH-q*(>IxIyg#@@$ndN=gc>^!3Zj z%k|2Q_413-^$jg8EkR}&8R-I5=oVMzl_XZ^<`pZ$OmImpPA){ffi_eM3D1{oGuTzrd=COM+4n&cLd=IHa;5RX-@T zIKQ+g85kdF$}r8qu)}W=NFmTQR{lkqz(`5Vami0E%}vcK@pQ3O0?O#6WTsddyBS)T zxj4DGI+;7U8WbpSnwXlJx+y{RrjQe2`as9%gOUbPQh^Bp(;tWlPxwF%JnN+90rN`{ zFk|eTuyZ2=1LH1F7srr_TYIJ*^g8Sy&?e2@*d%abWdMgri<5t&U4#0<`~ZPHTulKV zL_SFVVrt@l5PQLUVYuUp3a@^r?zky&+EXok@RH&z@w!8r$f$z%0{cUx;M)M%(BO@dlSAr|x|-`3zUuyW0)IVtW>|s>WVT?mGEc zSkr=`cGH2CXUi731dH|WWa9iWg>~1jL@c(3*I%OB-d`n9ld0_~{X@e~VM+?bvqa&xDF~4=3Dc{-t;PQB<+c zv78v6y_Q$sW5p8UNtB8n}}+(%+^^VTDLxDs_M@V zktZgdHP!#l9(Qv}igT01!>vuNAL^777;7#{%n;%?`4GGKfzXddg$9fTvuy=L>XpA# emo~({32$Iz;FK4L4Ckl>myMpTelF{r5}E)fw)-Uj diff --git a/docs/Saml2/img/iviewer/iviewer.zoom_out2.gif b/docs/Saml2/img/iviewer/iviewer.zoom_out2.gif deleted file mode 100644 index 77ec19af216c5525438e73e4fafef1ce08db3cf3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 69 zcmZ?wbhEHblwpuzXkcUjg8%>j>wsvG2m_N!Pyfo(Z}}I`*>bCU^SwRQTrH10rZprj VQ(Lv|A^Y)9KG(nX7PB%~0{{a@8tMQ5 diff --git a/docs/Saml2/img/iviewer/iviewer.zoom_zero.png b/docs/Saml2/img/iviewer/iviewer.zoom_zero.png deleted file mode 100644 index c981db6d690774d0c2e67e21c9081d5c89b5fd2d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1091 zcmbVL&ui0A9M4pSOy+USDH`Jt54L&lWo?(ZTAQSq1v^VuUA;)t~d_LcwSBo>#!$V_3 z9LEjkPwFMM?vLJ`gY0_@JiN=6Jv3LLv!qU2W`Mb@O=_6WyXHJDVbfl^_!>`f+;-b3 zS7@bhO0kF=HzS*P+w~cm6!@+QT}TTXPE`s;ULyhK6LAo; zKoamt7>CkCDwR6QBLIO2kO)x>rW6S&0Pwv>U}}L~S4z6k(_*Kz(4f>;M6uOs#amLG z1oI-4WjW$ND8?*e;gUzqcFYS8^%-;=T7lzJhj@I%Xx2!RrUmBdMhLE7C~OjYVJ}fE zWn$a(MHmO7>qc>PtwUPEf85y8IxH{wSS;a?Gy{v(qkgClX1V*fP-MuwQBDUAD~h?O z6RYWBkLLBX!2ZN-$5tc*P9}BL$f+qc2OyjTdQR0O9U94`B&o2^u@x4nAeBw1(2x=n z5avKO31v+Nl7u7!=(60$=Dm=bo`w6m4%6*n!9THz7GRT-piIbOzXOU5LP^*lKCjIt z_&LY3Nh^$svk|L~1LqR9jexj(H@k|ng?bW90+iEJ2GWfvYE_c6auz`iY1tG)S)qru z|0iQ2b4H9>hb!)51ol8qidf>uee2NcllE7&Y7PpcX!=7_qbu-x&Nqo^YXsS zx4psB1L(rH2OVv_Ry|wWf8@aTYwPTIZ{+>+x4F)XFBxU;`RVIF##f(pxPd|L)0^?x S8}D{hqp{BCX7q<@b>%mi3|d_P diff --git a/docs/Saml2/img/iviewer/iviewer.zoom_zero2.gif b/docs/Saml2/img/iviewer/iviewer.zoom_zero2.gif deleted file mode 100644 index e56c670fe62062458276fab5512701433b37af4e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 98 zcmZ?wbhEHblwpuzXkcUjg8%>j>wsvG2m_O2Pyfo(Z}}I`*>bDfkfCt*S=$8WwkJC( zzJkfa~h{)#m_`3lMtroEImLs1;u6tiCV=-88jK13lM}Ucoqsi(A?%{$02s z&eA5y&?&<|<LT~spE^ZvVS>1|r*(!}F5%Hh-ckGxoq}-_ zn=tXwoWW5y5s)XJF~ru@*Y9({3os1o>+cx}`RW$q80#EwpJN*|0nth|rd7x=kJ2*lib|@c=G(1pluEm zM?5x5JN;yCX?bOJZGB^NYkOyRkDlo8==kLHWdFe#G5N29B5b|?Ik}x=D=##FnEJ6o z3jG~@=>V$dR^LEd7t{6O_k~<`>8VZSLLbX-^SMXQh{du!F7HdAF@GJ$N6}Zlq-L%X zzwY)lV3QUkmU-;ZHEId8RLtg0O$*3Vx01_yQV{AD@+|}ZT@>ZguK?syFJjkxG-K2ghlZTYe!qDa$z#j-YB?pZq10~eaIfcP7FIB0Eosqew9a*>aP5@TT+hQ9op3bLhV9{@}hh_GQaxLF}XD?8UF8x#tFb{0O2HBl^9q#pWmI_6l=N%K~ z>INqm(|5hjgf^zC4787ogba1gmgbqgi3H;(Z2(quqrSFh7OWQJ<(l+C3|6g~M2u*d zQ7}vN;Zz8FcCZxjf5Q^{mmk6@pu9q9`8y6=c&A_ETpw4xHg;%})IeAURdjkO9h0b0 z(_pEmb#rT- zVQX(0>pQ%ELVO52K3zVtCgo+V@r@y8)P?cVRt8?*%F+2rZ7dc-TcK?lTymk=6miQ$ zVl;tgwjlDJ^0L&;_iT)D6ndeI^4lpL!u;0bKN4bQyNDUBM^@!1vm4T-0=uxR;Kd$t zAs4-3D<#+p7>G zHBiF(n&N@|Wc}Ye0<0Z_n^QF*7u@FJgIhDzUvH{pdkt*QRVC8e&Fc=YSsL9$V}$a^;`Rb>ywXQvB#q z+-qI;+X)sN2Dc|qW;TUe6n)M<728FQStq{@C$lPn}^efbI zgl{+EGf?6Ub_Q$)ImEQ@+1PqJ_;~s1`-1|dVCGt`ZV}crwstO2VSh(EM@Eq*3VVj9 zCVWr&78_!ep_mN)0m;rR3@Q#_N8V18L)BvH>KhudznYp`THA2#9i3hHCnP<+ef^O6{br6+ zk73lwjoN$EjNx()kEBDW>h$sxN-k20f_k_hq|Zy~5@*w%nIcTegL@`4m}*$vgo^-KL<#mf}@9wxYTM4SAo#D{vNw6ZdH-5 zp0D4VeT`F)OS{axJ1_O5Lh4f$aH`o%vZ@GB=^BRV|ManNqQZrQqDv9UJAt(#;*7J( zDEWwuLMf!JIu)D2Bl%p%I^4Nt@ELT$`wD1&06wQENMA4BcO|{p#3XwR4Yup6);yR$ zJ#ljA#y+E~@)CD)Y-+zR1UnUX05|qhY1Vn_*}K#c2rjUbT6?#WnS;FS+CA}cTnUiV zaN_lrZSUsHGj7#E@4nqK59g6!#1mTkXn%AYpjN*`(psCi_(6rhQbuzU}W)^Abce25xJUE#05w-Vow)2&+_6P)1yM%Z}1bI5bUik;d zxW!5*OD00%<5IaZQ=Y?fa`O=R1%*Y$C8cHM6%+s@3SC`OTS-^j(1@&QB~ZwZT{C);FqGwuh(arhMiN2WOc?)G6=TuRd9F~bu+hz)Y zrwu422HN{=Ab}kbx7=-Q(llc4b5ag4JO29>J33s@UbtG8LIke7p%0;zDo9;lag{&S zc{qhQ4*z0M?`!({tNd}eF3GMaR6kJeR$Ca+PPaaaHr<%-tgb3DLQw&(zZOd<_Q%35 zI4~T@mm`f)GYV;36{Tjy34C>99SnI3cn_AaffOXzqB%zjp)Y~1uhleLifSd3-?zfjD?z z=ZLCYJF2S)ht3N#-V=0h^v*b~I?Y*(Zv$WiVyt%)i@|y9wMjGLk-W@ zr=MGZH%!Ol3pkKILNhYY2mJ+-<`~&gR-+|pjJPeGt_f}^AZbk z?-YlXp{r{AOYOv(F-UMzB3<>>+b#E{-P%O(_b^=0+%i{xxl-!F~7#Kxl6RY zv$ru)d*|qQ_!M<g=t2_njk86Ak8lPzj}Cd`b%9{r)#>kW~~J+_G+jjmR){)R*RNKI!)x0pV#nC4?gUj7;~)KizdYcWhwCp z4r7i#{dJW+nt8;Hq0EYv`9noC9eH{uhR{oXW^l~Kwgq~nwhPO#_kE#PE_7YRv&vz- zHhAeRbw|R>sYVy7X9I+)60^FaXA@n14$lip5K#*2*EhY_P>dZ=326BM$uR@;GyN zcTL`8eSB9BCz(wHAqq76Fs4A(NTEO{H#&Rg`bW`1Lu(B&PZx=vVh<&iM0`p)V~5=d z<>sQRO61U(t~c<)os09mVv-fk106IrSyMK#~4^DJQj!5-Mx5y04a`~wT z_sX?Js1-OBnU=_xSw}|6`i8!}75lM5r%DQC^h>!}velcq<}0QS(4~o!=@3@@t6QMA zZuIVWty^FH^zZQz{iSuqLS(F7R@F~tKV4ABy5Y z(|Z4^LjG6N>?zq5NGPZcLF6qL9?UIdSr~&@@!?HY3nnlq*QV1@Gl|-VXYohr9w(_< zd`2U5J`Hib#I12)>WYz--0&KZp-BN-^~8d(n+nT|brA;-CM)lkwoo=de@V@=mIz8*luKuwLW6Xz`k-Z7FF|%pa{@OdGs80sA@2;uw>)B4?;`vCV*BWL z$@Ap=;txp084dn7XgPGX9H3a(5w3P5B^;BY^hY5Kr}Em z`q#0#waQJ|#~x;Ff6WcWngPc@=zOryinJc)aXyJN)MtJooi3vv&hz!Dzm`T&L&ZEqa_#cIovV#lrzgM$#a24&0@)GOG6oK zNISh_!SznG=OBdqq-uT&_|<^hj;UoDez z{A@lINN;|nLYH+G^so4=be`NYWdAa|sP{In&;}uB#^wLpaKf#SDsttbI8p5bfx)>p z-SID`+hHy2_>z3`q%MXJR!Ta);j23h5gv6s`N(qag)UH>hwY?ii$lc%A9XQnyI*&-4FZ4xIr0!KXEHyx#u?(Y=)T;)e}^>r4u#*L|T)Vf1|FvqGOQjNe7D3OKGV zZkn{lkjg|WfoRy|VmYZQ!Ke}gr2sxl{Q!49LzUF$w)=MvfzR-n=b=5~p&xP;v!zqN z2aEuh<@1CJf_^aqR}?elp1%fg(Aa1J^xK!k5Dr}0;kugH1*kY%^(uSrW;PMJ!r@}- z$0P6VAO13I3>0HhSv7k34?aq$(kpzdF=`oQ3-}BP;0E|iJE{lDd zpIpz!JOfr|Q1P0W^W**Hjiwe0=CpJ7%^d?*3!e#b(p}yY)By`*?Q1-X<=&EJhR5}R ffeagp#&}jgDu`gFfASxbzOtb|ZAN*iL}LE|Ye$WH diff --git a/docs/Saml2/index.html b/docs/Saml2/index.html deleted file mode 100644 index 7d94bc2a..00000000 --- a/docs/Saml2/index.html +++ /dev/null @@ -1,109 +0,0 @@ - - - - - - SAML PHP Toolkit - - - - - - - - - - - - - - - - - - - - - - -
      - - -
      -

      SAML PHP Toolkit

      -

      Documentation SAML2 lib

      -
      - -
      -
      -
      - -
      -
      -
      -
      - -
      -
      -
      -
      - - - - diff --git a/docs/Saml2/js/SVGPan.js b/docs/Saml2/js/SVGPan.js deleted file mode 100644 index 4966b999..00000000 --- a/docs/Saml2/js/SVGPan.js +++ /dev/null @@ -1,232 +0,0 @@ -/** - * SVGPan library 1.2 - phpDocumentor1 - * ==================== - * - * Given an unique existing element with id "viewport", including the - * the library into any SVG adds the following capabilities: - * - * - Mouse panning - * - Mouse zooming (using the wheel) - * - Object dargging - * - * Known issues: - * - * - Zooming (while panning) on Safari has still some issues - * - * Releases: - * - * 1.2 - phpDocumentor1, Fri Apr 08 19:19:00 CET 2011, Mike van Riel - * Increased zoom speed with 20% - * Disabled element moving functionality - * - * 1.2, Sat Mar 20 08:42:50 GMT 2010, Zeng Xiaohui - * Fixed a bug with browser mouse handler interaction - * - * 1.1, Wed Feb 3 17:39:33 GMT 2010, Zeng Xiaohui - * Updated the zoom code to support the mouse wheel on Safari/Chrome - * - * 1.0, Andrea Leofreddi - * First release - * - * This code is licensed under the following BSD license: - * - * Copyright 2009-2010 Andrea Leofreddi . All rights reserved. - * - * Redistribution and use in source and binary forms, with or without modification, are - * permitted provided that the following conditions are met: - * - * 1. Redistributions of source code must retain the above copyright notice, this list of - * conditions and the following disclaimer. - * - * 2. Redistributions in binary form must reproduce the above copyright notice, this list - * of conditions and the following disclaimer in the documentation and/or other materials - * provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY Andrea Leofreddi ``AS IS'' AND ANY EXPRESS OR IMPLIED - * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND - * FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL Andrea Leofreddi OR - * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR - * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR - * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON - * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING - * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF - * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - * - * The views and conclusions contained in the software and documentation are those of the - * authors and should not be interpreted as representing official policies, either expressed - * or implied, of Andrea Leofreddi. - */ - -var root = document.documentElement; - -var state = 'none', stateTarget, stateOrigin, stateTf; - -setupHandlers(root); - -/** - * Register handlers - */ -function setupHandlers(root){ - setAttributes(root, { - "onmouseup" : "add(evt)", - "onmousedown" : "handleMouseDown(evt)", - "onmousemove" : "handleMouseMove(evt)", - "onmouseup" : "handleMouseUp(evt)", -// "onmouseout" : "handleMouseUp(evt)" // Decomment this to stop the pan functionality when dragging out of the SVG element - }); - - if(navigator.userAgent.toLowerCase().indexOf('webkit') >= 0) - window.addEventListener('mousewheel', handleMouseWheel, false); // Chrome/Safari - else - window.addEventListener('DOMMouseScroll', handleMouseWheel, false); // Others -} - -/** - * Instance an SVGPoint object with given event coordinates. - */ -function getEventPoint(evt) { - var p = root.createSVGPoint(); - - p.x = evt.clientX; - p.y = evt.clientY; - - return p; -} - -/** - * Sets the current transform matrix of an element. - */ -function setCTM(element, matrix) { - var s = "matrix(" + matrix.a + "," + matrix.b + "," + matrix.c + "," + matrix.d + "," + matrix.e + "," + matrix.f + ")"; - - element.setAttribute("transform", s); -} - -/** - * Dumps a matrix to a string (useful for debug). - */ -function dumpMatrix(matrix) { - var s = "[ " + matrix.a + ", " + matrix.c + ", " + matrix.e + "\n " + matrix.b + ", " + matrix.d + ", " + matrix.f + "\n 0, 0, 1 ]"; - - return s; -} - -/** - * Sets attributes of an element. - */ -function setAttributes(element, attributes){ - for (i in attributes) - element.setAttributeNS(null, i, attributes[i]); -} - -/** - * Handle mouse move event. - */ -function handleMouseWheel(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - var delta; - - if(evt.wheelDelta) - delta = evt.wheelDelta / 3600; // Chrome/Safari - else - delta = evt.detail / -90; // Mozilla - - var z = 1 + (delta * 1.2); // Zoom factor: 0.9/1.1 - - var g = svgDoc.getElementById("viewport"); - - var p = getEventPoint(evt); - - p = p.matrixTransform(g.getCTM().inverse()); - - // Compute new scale matrix in current mouse position - var k = root.createSVGMatrix().translate(p.x, p.y).scale(z).translate(-p.x, -p.y); - - setCTM(g, g.getCTM().multiply(k)); - - stateTf = stateTf.multiply(k.inverse()); -} - -/** - * Handle mouse move event. - */ -function handleMouseMove(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - var g = svgDoc.getElementById("viewport"); - - if(state == 'pan') { - // Pan mode - var p = getEventPoint(evt).matrixTransform(stateTf); - - setCTM(g, stateTf.inverse().translate(p.x - stateOrigin.x, p.y - stateOrigin.y)); - } else if(state == 'move') { - // Move mode - var p = getEventPoint(evt).matrixTransform(g.getCTM().inverse()); - - setCTM(stateTarget, root.createSVGMatrix().translate(p.x - stateOrigin.x, p.y - stateOrigin.y).multiply(g.getCTM().inverse()).multiply(stateTarget.getCTM())); - - stateOrigin = p; - } -} - -/** - * Handle click event. - */ -function handleMouseDown(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - var g = svgDoc.getElementById("viewport"); - -// if(evt.target.tagName == "svg") { - // Pan mode - state = 'pan'; - - stateTf = g.getCTM().inverse(); - - stateOrigin = getEventPoint(evt).matrixTransform(stateTf); -// } else { - // Move mode -// state = 'move'; -// -// stateTarget = evt.target; -// -// stateTf = g.getCTM().inverse(); -// -// stateOrigin = getEventPoint(evt).matrixTransform(stateTf); -// } -} - -/** - * Handle mouse button release event. - */ -function handleMouseUp(evt) { - if(evt.preventDefault) - evt.preventDefault(); - - evt.returnValue = false; - - var svgDoc = evt.target.ownerDocument; - - if(state == 'pan' || state == 'move') { - // Quit pan mode - state = ''; - } -} - diff --git a/docs/Saml2/js/bootstrap.js b/docs/Saml2/js/bootstrap.js deleted file mode 100644 index c832ccb2..00000000 --- a/docs/Saml2/js/bootstrap.js +++ /dev/null @@ -1,1722 +0,0 @@ -/* =================================================== - * bootstrap-transition.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#transitions - * =================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - -!function( $ ) { - - $(function () { - - "use strict" - - /* CSS TRANSITION SUPPORT (https://gist.github.com/373874) - * ======================================================= */ - - $.support.transition = (function () { - var thisBody = document.body || document.documentElement - , thisStyle = thisBody.style - , support = thisStyle.transition !== undefined || thisStyle.WebkitTransition !== undefined || thisStyle.MozTransition !== undefined || thisStyle.MsTransition !== undefined || thisStyle.OTransition !== undefined - - return support && { - end: (function () { - var transitionEnd = "TransitionEnd" - if ( $.browser.webkit ) { - transitionEnd = "webkitTransitionEnd" - } else if ( $.browser.mozilla ) { - transitionEnd = "transitionend" - } else if ( $.browser.opera ) { - transitionEnd = "oTransitionEnd" - } - return transitionEnd - }()) - } - })() - - }) - -}( window.jQuery ) -/* ========================================================== - * bootstrap-alert.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#alerts - * ========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - - -!function( $ ){ - - "use strict" - - /* ALERT CLASS DEFINITION - * ====================== */ - - var dismiss = '[data-dismiss="alert"]' - , Alert = function ( el ) { - $(el).on('click', dismiss, this.close) - } - - Alert.prototype = { - - constructor: Alert - - , close: function ( e ) { - var $this = $(this) - , selector = $this.attr('data-target') - , $parent - - if (!selector) { - selector = $this.attr('href') - selector = selector && selector.replace(/.*(?=#[^\s]*$)/, '') //strip for ie7 - } - - $parent = $(selector) - $parent.trigger('close') - - e && e.preventDefault() - - $parent.length || ($parent = $this.hasClass('alert') ? $this : $this.parent()) - - $parent.removeClass('in') - - function removeElement() { - $parent.remove() - $parent.trigger('closed') - } - - $.support.transition && $parent.hasClass('fade') ? - $parent.on($.support.transition.end, removeElement) : - removeElement() - } - - } - - - /* ALERT PLUGIN DEFINITION - * ======================= */ - - $.fn.alert = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('alert') - if (!data) $this.data('alert', (data = new Alert(this))) - if (typeof option == 'string') data[option].call($this) - }) - } - - $.fn.alert.Constructor = Alert - - - /* ALERT DATA-API - * ============== */ - - $(function () { - $('body').on('click.alert.data-api', dismiss, Alert.prototype.close) - }) - -}( window.jQuery ) -/* ============================================================ - * bootstrap-button.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#buttons - * ============================================================ - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - -!function( $ ){ - - "use strict" - - /* BUTTON PUBLIC CLASS DEFINITION - * ============================== */ - - var Button = function ( element, options ) { - this.$element = $(element) - this.options = $.extend({}, $.fn.button.defaults, options) - } - - Button.prototype = { - - constructor: Button - - , setState: function ( state ) { - var d = 'disabled' - , $el = this.$element - , data = $el.data() - , val = $el.is('input') ? 'val' : 'html' - - state = state + 'Text' - data.resetText || $el.data('resetText', $el[val]()) - - $el[val](data[state] || this.options[state]) - - // push to event loop to allow forms to submit - setTimeout(function () { - state == 'loadingText' ? - $el.addClass(d).attr(d, d) : - $el.removeClass(d).removeAttr(d) - }, 0) - } - - , toggle: function () { - var $parent = this.$element.parent('[data-toggle="buttons-radio"]') - - $parent && $parent - .find('.active') - .removeClass('active') - - this.$element.toggleClass('active') - } - - } - - - /* BUTTON PLUGIN DEFINITION - * ======================== */ - - $.fn.button = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('button') - , options = typeof option == 'object' && option - if (!data) $this.data('button', (data = new Button(this, options))) - if (option == 'toggle') data.toggle() - else if (option) data.setState(option) - }) - } - - $.fn.button.defaults = { - loadingText: 'loading...' - } - - $.fn.button.Constructor = Button - - - /* BUTTON DATA-API - * =============== */ - - $(function () { - $('body').on('click.button.data-api', '[data-toggle^=button]', function ( e ) { - $(e.target).button('toggle') - }) - }) - -}( window.jQuery ) -/* ========================================================== - * bootstrap-carousel.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#carousel - * ========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - - -!function( $ ){ - - "use strict" - - /* CAROUSEL CLASS DEFINITION - * ========================= */ - - var Carousel = function (element, options) { - this.$element = $(element) - this.options = $.extend({}, $.fn.carousel.defaults, options) - this.options.slide && this.slide(this.options.slide) - } - - Carousel.prototype = { - - cycle: function () { - this.interval = setInterval($.proxy(this.next, this), this.options.interval) - return this - } - - , to: function (pos) { - var $active = this.$element.find('.active') - , children = $active.parent().children() - , activePos = children.index($active) - , that = this - - if (pos > (children.length - 1) || pos < 0) return - - if (this.sliding) { - return this.$element.one('slid', function () { - that.to(pos) - }) - } - - if (activePos == pos) { - return this.pause().cycle() - } - - return this.slide(pos > activePos ? 'next' : 'prev', $(children[pos])) - } - - , pause: function () { - clearInterval(this.interval) - return this - } - - , next: function () { - if (this.sliding) return - return this.slide('next') - } - - , prev: function () { - if (this.sliding) return - return this.slide('prev') - } - - , slide: function (type, next) { - var $active = this.$element.find('.active') - , $next = next || $active[type]() - , isCycling = this.interval - , direction = type == 'next' ? 'left' : 'right' - , fallback = type == 'next' ? 'first' : 'last' - , that = this - - this.sliding = true - - isCycling && this.pause() - - $next = $next.length ? $next : this.$element.find('.item')[fallback]() - - if (!$.support.transition && this.$element.hasClass('slide')) { - this.$element.trigger('slide') - $active.removeClass('active') - $next.addClass('active') - this.sliding = false - this.$element.trigger('slid') - } else { - $next.addClass(type) - $next[0].offsetWidth // force reflow - $active.addClass(direction) - $next.addClass(direction) - this.$element.trigger('slide') - this.$element.one($.support.transition.end, function () { - $next.removeClass([type, direction].join(' ')).addClass('active') - $active.removeClass(['active', direction].join(' ')) - that.sliding = false - setTimeout(function () { that.$element.trigger('slid') }, 0) - }) - } - - isCycling && this.cycle() - - return this - } - - } - - - /* CAROUSEL PLUGIN DEFINITION - * ========================== */ - - $.fn.carousel = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('carousel') - , options = typeof option == 'object' && option - if (!data) $this.data('carousel', (data = new Carousel(this, options))) - if (typeof option == 'number') data.to(option) - else if (typeof option == 'string' || (option = options.slide)) data[option]() - else data.cycle() - }) - } - - $.fn.carousel.defaults = { - interval: 5000 - } - - $.fn.carousel.Constructor = Carousel - - - /* CAROUSEL DATA-API - * ================= */ - - $(function () { - $('body').on('click.carousel.data-api', '[data-slide]', function ( e ) { - var $this = $(this), href - , $target = $($this.attr('data-target') || (href = $this.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '')) //strip for ie7 - , options = !$target.data('modal') && $.extend({}, $target.data(), $this.data()) - $target.carousel(options) - e.preventDefault() - }) - }) - -}( window.jQuery ) -/* ============================================================= - * bootstrap-collapse.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#collapse - * ============================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - -!function( $ ){ - - "use strict" - - var Collapse = function ( element, options ) { - this.$element = $(element) - this.options = $.extend({}, $.fn.collapse.defaults, options) - - if (this.options["parent"]) { - this.$parent = $(this.options["parent"]) - } - - this.options.toggle && this.toggle() - } - - Collapse.prototype = { - - constructor: Collapse - - , dimension: function () { - var hasWidth = this.$element.hasClass('width') - return hasWidth ? 'width' : 'height' - } - - , show: function () { - var dimension = this.dimension() - , scroll = $.camelCase(['scroll', dimension].join('-')) - , actives = this.$parent && this.$parent.find('.in') - , hasData - - if (actives && actives.length) { - hasData = actives.data('collapse') - actives.collapse('hide') - hasData || actives.data('collapse', null) - } - - this.$element[dimension](0) - this.transition('addClass', 'show', 'shown') - this.$element[dimension](this.$element[0][scroll]) - - } - - , hide: function () { - var dimension = this.dimension() - this.reset(this.$element[dimension]()) - this.transition('removeClass', 'hide', 'hidden') - this.$element[dimension](0) - } - - , reset: function ( size ) { - var dimension = this.dimension() - - this.$element - .removeClass('collapse') - [dimension](size || 'auto') - [0].offsetWidth - - this.$element.addClass('collapse') - } - - , transition: function ( method, startEvent, completeEvent ) { - var that = this - , complete = function () { - if (startEvent == 'show') that.reset() - that.$element.trigger(completeEvent) - } - - this.$element - .trigger(startEvent) - [method]('in') - - $.support.transition && this.$element.hasClass('collapse') ? - this.$element.one($.support.transition.end, complete) : - complete() - } - - , toggle: function () { - this[this.$element.hasClass('in') ? 'hide' : 'show']() - } - - } - - /* COLLAPSIBLE PLUGIN DEFINITION - * ============================== */ - - $.fn.collapse = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('collapse') - , options = typeof option == 'object' && option - if (!data) $this.data('collapse', (data = new Collapse(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.collapse.defaults = { - toggle: true - } - - $.fn.collapse.Constructor = Collapse - - - /* COLLAPSIBLE DATA-API - * ==================== */ - - $(function () { - $('body').on('click.collapse.data-api', '[data-toggle=collapse]', function ( e ) { - var $this = $(this), href - , target = $this.attr('data-target') - || e.preventDefault() - || (href = $this.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '') //strip for ie7 - , option = $(target).data('collapse') ? 'toggle' : $this.data() - $(target).collapse(option) - }) - }) - -}( window.jQuery ) -/* ============================================================ - * bootstrap-dropdown.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#dropdowns - * ============================================================ - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - - -!function( $ ){ - - "use strict" - - /* DROPDOWN CLASS DEFINITION - * ========================= */ - - var toggle = '[data-toggle="dropdown"]' - , Dropdown = function ( element ) { - var $el = $(element).on('click.dropdown.data-api', this.toggle) - $('html').on('click.dropdown.data-api', function () { - $el.parent().removeClass('open') - }) - } - - Dropdown.prototype = { - - constructor: Dropdown - - , toggle: function ( e ) { - var $this = $(this) - , selector = $this.attr('data-target') - , $parent - , isActive - - if (!selector) { - selector = $this.attr('href') - selector = selector && selector.replace(/.*(?=#[^\s]*$)/, '') //strip for ie7 - } - - $parent = $(selector) - $parent.length || ($parent = $this.parent()) - - isActive = $parent.hasClass('open') - - clearMenus() - !isActive && $parent.toggleClass('open') - - return false - } - - } - - function clearMenus() { - $(toggle).parent().removeClass('open') - } - - - /* DROPDOWN PLUGIN DEFINITION - * ========================== */ - - $.fn.dropdown = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('dropdown') - if (!data) $this.data('dropdown', (data = new Dropdown(this))) - if (typeof option == 'string') data[option].call($this) - }) - } - - $.fn.dropdown.Constructor = Dropdown - - - /* APPLY TO STANDARD DROPDOWN ELEMENTS - * =================================== */ - - $(function () { - $('html').on('click.dropdown.data-api', clearMenus) - $('body').on('click.dropdown.data-api', toggle, Dropdown.prototype.toggle) - }) - -}( window.jQuery ) -/* ========================================================= - * bootstrap-modal.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#modals - * ========================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================= */ - - -!function( $ ){ - - "use strict" - - /* MODAL CLASS DEFINITION - * ====================== */ - - var Modal = function ( content, options ) { - this.options = $.extend({}, $.fn.modal.defaults, options) - this.$element = $(content) - .delegate('[data-dismiss="modal"]', 'click.dismiss.modal', $.proxy(this.hide, this)) - } - - Modal.prototype = { - - constructor: Modal - - , toggle: function () { - return this[!this.isShown ? 'show' : 'hide']() - } - - , show: function () { - var that = this - - if (this.isShown) return - - $('body').addClass('modal-open') - - this.isShown = true - this.$element.trigger('show') - - escape.call(this) - backdrop.call(this, function () { - var transition = $.support.transition && that.$element.hasClass('fade') - - !that.$element.parent().length && that.$element.appendTo(document.body) //don't move modals dom position - - that.$element - .show() - - if (transition) { - that.$element[0].offsetWidth // force reflow - } - - that.$element.addClass('in') - - transition ? - that.$element.one($.support.transition.end, function () { that.$element.trigger('shown') }) : - that.$element.trigger('shown') - - }) - } - - , hide: function ( e ) { - e && e.preventDefault() - - if (!this.isShown) return - - var that = this - this.isShown = false - - $('body').removeClass('modal-open') - - escape.call(this) - - this.$element - .trigger('hide') - .removeClass('in') - - $.support.transition && this.$element.hasClass('fade') ? - hideWithTransition.call(this) : - hideModal.call(this) - } - - } - - - /* MODAL PRIVATE METHODS - * ===================== */ - - function hideWithTransition() { - var that = this - , timeout = setTimeout(function () { - that.$element.off($.support.transition.end) - hideModal.call(that) - }, 500) - - this.$element.one($.support.transition.end, function () { - clearTimeout(timeout) - hideModal.call(that) - }) - } - - function hideModal( that ) { - this.$element - .hide() - .trigger('hidden') - - backdrop.call(this) - } - - function backdrop( callback ) { - var that = this - , animate = this.$element.hasClass('fade') ? 'fade' : '' - - if (this.isShown && this.options.backdrop) { - var doAnimate = $.support.transition && animate - - this.$backdrop = $('
      ') - .appendTo(document.body) - - if (this.options.backdrop != 'static') { - this.$backdrop.click($.proxy(this.hide, this)) - } - - if (doAnimate) this.$backdrop[0].offsetWidth // force reflow - - this.$backdrop.addClass('in') - - doAnimate ? - this.$backdrop.one($.support.transition.end, callback) : - callback() - - } else if (!this.isShown && this.$backdrop) { - this.$backdrop.removeClass('in') - - $.support.transition && this.$element.hasClass('fade')? - this.$backdrop.one($.support.transition.end, $.proxy(removeBackdrop, this)) : - removeBackdrop.call(this) - - } else if (callback) { - callback() - } - } - - function removeBackdrop() { - this.$backdrop.remove() - this.$backdrop = null - } - - function escape() { - var that = this - if (this.isShown && this.options.keyboard) { - $(document).on('keyup.dismiss.modal', function ( e ) { - e.which == 27 && that.hide() - }) - } else if (!this.isShown) { - $(document).off('keyup.dismiss.modal') - } - } - - - /* MODAL PLUGIN DEFINITION - * ======================= */ - - $.fn.modal = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('modal') - , options = typeof option == 'object' && option - if (!data) $this.data('modal', (data = new Modal(this, options))) - if (typeof option == 'string') data[option]() - else data.show() - }) - } - - $.fn.modal.defaults = { - backdrop: true - , keyboard: true - } - - $.fn.modal.Constructor = Modal - - - /* MODAL DATA-API - * ============== */ - - $(function () { - $('body').on('click.modal.data-api', '[data-toggle="modal"]', function ( e ) { - var $this = $(this), href - , $target = $($this.attr('data-target') || (href = $this.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '')) //strip for ie7 - , option = $target.data('modal') ? 'toggle' : $.extend({}, $target.data(), $this.data()) - - e.preventDefault() - $target.modal(option) - }) - }) - -}( window.jQuery ) -/* =========================================================== - * bootstrap-tooltip.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#tooltips - * Inspired by the original jQuery.tipsy by Jason Frame - * =========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ========================================================== */ - -!function( $ ) { - - "use strict" - - /* TOOLTIP PUBLIC CLASS DEFINITION - * =============================== */ - - var Tooltip = function ( element, options ) { - this.init('tooltip', element, options) - } - - Tooltip.prototype = { - - constructor: Tooltip - - , init: function ( type, element, options ) { - var eventIn - , eventOut - - this.type = type - this.$element = $(element) - this.options = this.getOptions(options) - this.enabled = true - - if (this.options.trigger != 'manual') { - eventIn = this.options.trigger == 'hover' ? 'mouseenter' : 'focus' - eventOut = this.options.trigger == 'hover' ? 'mouseleave' : 'blur' - this.$element.on(eventIn, this.options.selector, $.proxy(this.enter, this)) - this.$element.on(eventOut, this.options.selector, $.proxy(this.leave, this)) - } - - this.options.selector ? - (this._options = $.extend({}, this.options, { trigger: 'manual', selector: '' })) : - this.fixTitle() - } - - , getOptions: function ( options ) { - options = $.extend({}, $.fn[this.type].defaults, options, this.$element.data()) - - if (options.delay && typeof options.delay == 'number') { - options.delay = { - show: options.delay - , hide: options.delay - } - } - - return options - } - - , enter: function ( e ) { - var self = $(e.currentTarget)[this.type](this._options).data(this.type) - - if (!self.options.delay || !self.options.delay.show) { - self.show() - } else { - self.hoverState = 'in' - setTimeout(function() { - if (self.hoverState == 'in') { - self.show() - } - }, self.options.delay.show) - } - } - - , leave: function ( e ) { - var self = $(e.currentTarget)[this.type](this._options).data(this.type) - - if (!self.options.delay || !self.options.delay.hide) { - self.hide() - } else { - self.hoverState = 'out' - setTimeout(function() { - if (self.hoverState == 'out') { - self.hide() - } - }, self.options.delay.hide) - } - } - - , show: function () { - var $tip - , inside - , pos - , actualWidth - , actualHeight - , placement - , tp - - if (this.hasContent() && this.enabled) { - $tip = this.tip() - this.setContent() - - if (this.options.animation) { - $tip.addClass('fade') - } - - placement = typeof this.options.placement == 'function' ? - this.options.placement.call(this, $tip[0], this.$element[0]) : - this.options.placement - - inside = /in/.test(placement) - - $tip - .remove() - .css({ top: 0, left: 0, display: 'block' }) - .appendTo(inside ? this.$element : document.body) - - pos = this.getPosition(inside) - - actualWidth = $tip[0].offsetWidth - actualHeight = $tip[0].offsetHeight - - switch (inside ? placement.split(' ')[1] : placement) { - case 'bottom': - tp = {top: pos.top + pos.height, left: pos.left + pos.width / 2 - actualWidth / 2} - break - case 'top': - tp = {top: pos.top - actualHeight, left: pos.left + pos.width / 2 - actualWidth / 2} - break - case 'left': - tp = {top: pos.top + pos.height / 2 - actualHeight / 2, left: pos.left - actualWidth} - break - case 'right': - tp = {top: pos.top + pos.height / 2 - actualHeight / 2, left: pos.left + pos.width} - break - } - - $tip - .css(tp) - .addClass(placement) - .addClass('in') - } - } - - , setContent: function () { - var $tip = this.tip() - $tip.find('.tooltip-inner').html(this.getTitle()) - $tip.removeClass('fade in top bottom left right') - } - - , hide: function () { - var that = this - , $tip = this.tip() - - $tip.removeClass('in') - - function removeWithAnimation() { - var timeout = setTimeout(function () { - $tip.off($.support.transition.end).remove() - }, 500) - - $tip.one($.support.transition.end, function () { - clearTimeout(timeout) - $tip.remove() - }) - } - - $.support.transition && this.$tip.hasClass('fade') ? - removeWithAnimation() : - $tip.remove() - } - - , fixTitle: function () { - var $e = this.$element - if ($e.attr('title') || typeof($e.attr('data-original-title')) != 'string') { - $e.attr('data-original-title', $e.attr('title') || '').removeAttr('title') - } - } - - , hasContent: function () { - return this.getTitle() - } - - , getPosition: function (inside) { - return $.extend({}, (inside ? {top: 0, left: 0} : this.$element.offset()), { - width: this.$element[0].offsetWidth - , height: this.$element[0].offsetHeight - }) - } - - , getTitle: function () { - var title - , $e = this.$element - , o = this.options - - title = $e.attr('data-original-title') - || (typeof o.title == 'function' ? o.title.call($e[0]) : o.title) - - title = title.toString().replace(/(^\s*|\s*$)/, "") - - return title - } - - , tip: function () { - return this.$tip = this.$tip || $(this.options.template) - } - - , validate: function () { - if (!this.$element[0].parentNode) { - this.hide() - this.$element = null - this.options = null - } - } - - , enable: function () { - this.enabled = true - } - - , disable: function () { - this.enabled = false - } - - , toggleEnabled: function () { - this.enabled = !this.enabled - } - - , toggle: function () { - this[this.tip().hasClass('in') ? 'hide' : 'show']() - } - - } - - - /* TOOLTIP PLUGIN DEFINITION - * ========================= */ - - $.fn.tooltip = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('tooltip') - , options = typeof option == 'object' && option - if (!data) $this.data('tooltip', (data = new Tooltip(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.tooltip.Constructor = Tooltip - - $.fn.tooltip.defaults = { - animation: true - , delay: 0 - , selector: false - , placement: 'top' - , trigger: 'hover' - , title: '' - , template: '
      ' - } - -}( window.jQuery ) -/* =========================================================== - * bootstrap-popover.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#popovers - * =========================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * =========================================================== */ - - -!function( $ ) { - - "use strict" - - var Popover = function ( element, options ) { - this.init('popover', element, options) - } - - /* NOTE: POPOVER EXTENDS BOOTSTRAP-TOOLTIP.js - ========================================== */ - - Popover.prototype = $.extend({}, $.fn.tooltip.Constructor.prototype, { - - constructor: Popover - - , setContent: function () { - var $tip = this.tip() - , title = this.getTitle() - , content = this.getContent() - - $tip.find('.popover-title')[ $.type(title) == 'object' ? 'append' : 'html' ](title) - $tip.find('.popover-content > *')[ $.type(content) == 'object' ? 'append' : 'html' ](content) - - $tip.removeClass('fade top bottom left right in') - } - - , hasContent: function () { - return this.getTitle() || this.getContent() - } - - , getContent: function () { - var content - , $e = this.$element - , o = this.options - - content = $e.attr('data-content') - || (typeof o.content == 'function' ? o.content.call($e[0]) : o.content) - - content = content.toString().replace(/(^\s*|\s*$)/, "") - - return content - } - - , tip: function() { - if (!this.$tip) { - this.$tip = $(this.options.template) - } - return this.$tip - } - - }) - - - /* POPOVER PLUGIN DEFINITION - * ======================= */ - - $.fn.popover = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('popover') - , options = typeof option == 'object' && option - if (!data) $this.data('popover', (data = new Popover(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.popover.Constructor = Popover - - $.fn.popover.defaults = $.extend({} , $.fn.tooltip.defaults, { - placement: 'right' - , content: '' - , template: '

      ' - }) - -}( window.jQuery ) -/* ============================================================= - * bootstrap-scrollspy.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#scrollspy - * ============================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================== */ - -!function ( $ ) { - - "use strict" - - /* SCROLLSPY CLASS DEFINITION - * ========================== */ - - function ScrollSpy( element, options) { - var process = $.proxy(this.process, this) - , $element = $(element).is('body') ? $(window) : $(element) - , href - this.options = $.extend({}, $.fn.scrollspy.defaults, options) - this.$scrollElement = $element.on('scroll.scroll.data-api', process) - this.selector = (this.options.target - || ((href = $(element).attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '')) //strip for ie7 - || '') + ' .nav li > a' - this.$body = $('body').on('click.scroll.data-api', this.selector, process) - this.refresh() - this.process() - } - - ScrollSpy.prototype = { - - constructor: ScrollSpy - - , refresh: function () { - this.targets = this.$body - .find(this.selector) - .map(function () { - var href = $(this).attr('href') - return /^#\w/.test(href) && $(href).length ? href : null - }) - - this.offsets = $.map(this.targets, function (id) { - return $(id).position().top - }) - } - - , process: function () { - var scrollTop = this.$scrollElement.scrollTop() + this.options.offset - , offsets = this.offsets - , targets = this.targets - , activeTarget = this.activeTarget - , i - - for (i = offsets.length; i--;) { - activeTarget != targets[i] - && scrollTop >= offsets[i] - && (!offsets[i + 1] || scrollTop <= offsets[i + 1]) - && this.activate( targets[i] ) - } - } - - , activate: function (target) { - var active - - this.activeTarget = target - - this.$body - .find(this.selector).parent('.active') - .removeClass('active') - - active = this.$body - .find(this.selector + '[href="' + target + '"]') - .parent('li') - .addClass('active') - - if ( active.parent('.dropdown-menu') ) { - active.closest('li.dropdown').addClass('active') - } - } - - } - - - /* SCROLLSPY PLUGIN DEFINITION - * =========================== */ - - $.fn.scrollspy = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('scrollspy') - , options = typeof option == 'object' && option - if (!data) $this.data('scrollspy', (data = new ScrollSpy(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.scrollspy.Constructor = ScrollSpy - - $.fn.scrollspy.defaults = { - offset: 10 - } - - - /* SCROLLSPY DATA-API - * ================== */ - - $(function () { - $('[data-spy="scroll"]').each(function () { - var $spy = $(this) - $spy.scrollspy($spy.data()) - }) - }) - -}( window.jQuery ) -/* ======================================================== - * bootstrap-tab.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#tabs - * ======================================================== - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ======================================================== */ - - -!function( $ ){ - - "use strict" - - /* TAB CLASS DEFINITION - * ==================== */ - - var Tab = function ( element ) { - this.element = $(element) - } - - Tab.prototype = { - - constructor: Tab - - , show: function () { - var $this = this.element - , $ul = $this.closest('ul:not(.dropdown-menu)') - , selector = $this.attr('data-target') - , previous - , $target - - if (!selector) { - selector = $this.attr('href') - selector = selector && selector.replace(/.*(?=#[^\s]*$)/, '') //strip for ie7 - } - - if ( $this.parent('li').hasClass('active') ) return - - previous = $ul.find('.active a').last()[0] - - $this.trigger({ - type: 'show' - , relatedTarget: previous - }) - - $target = $(selector) - - this.activate($this.parent('li'), $ul) - this.activate($target, $target.parent(), function () { - $this.trigger({ - type: 'shown' - , relatedTarget: previous - }) - }) - } - - , activate: function ( element, container, callback) { - var $active = container.find('> .active') - , transition = callback - && $.support.transition - && $active.hasClass('fade') - - function next() { - $active - .removeClass('active') - .find('> .dropdown-menu > .active') - .removeClass('active') - - element.addClass('active') - - if (transition) { - element[0].offsetWidth // reflow for transition - element.addClass('in') - } else { - element.removeClass('fade') - } - - if ( element.parent('.dropdown-menu') ) { - element.closest('li.dropdown').addClass('active') - } - - callback && callback() - } - - transition ? - $active.one($.support.transition.end, next) : - next() - - $active.removeClass('in') - } - } - - - /* TAB PLUGIN DEFINITION - * ===================== */ - - $.fn.tab = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('tab') - if (!data) $this.data('tab', (data = new Tab(this))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.tab.Constructor = Tab - - - /* TAB DATA-API - * ============ */ - - $(function () { - $('body').on('click.tab.data-api', '[data-toggle="tab"], [data-toggle="pill"]', function (e) { - e.preventDefault() - $(this).tab('show') - }) - }) - -}( window.jQuery ) -/* ============================================================= - * bootstrap-typeahead.js v2.0.0 - * http://twitter.github.com/bootstrap/javascript.html#typeahead - * ============================================================= - * Copyright 2012 Twitter, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - * ============================================================ */ - -!function( $ ){ - - "use strict" - - var Typeahead = function ( element, options ) { - this.$element = $(element) - this.options = $.extend({}, $.fn.typeahead.defaults, options) - this.matcher = this.options.matcher || this.matcher - this.sorter = this.options.sorter || this.sorter - this.highlighter = this.options.highlighter || this.highlighter - this.$menu = $(this.options.menu).appendTo('body') - this.source = this.options.source - this.shown = false - this.listen() - } - - Typeahead.prototype = { - - constructor: Typeahead - - , select: function () { - var val = this.$menu.find('.active').attr('data-value') - this.$element.val(val) - return this.hide() - } - - , show: function () { - var pos = $.extend({}, this.$element.offset(), { - height: this.$element[0].offsetHeight - }) - - this.$menu.css({ - top: pos.top + pos.height - , left: pos.left - }) - - this.$menu.show() - this.shown = true - return this - } - - , hide: function () { - this.$menu.hide() - this.shown = false - return this - } - - , lookup: function (event) { - var that = this - , items - , q - - this.query = this.$element.val() - - if (!this.query) { - return this.shown ? this.hide() : this - } - - items = $.grep(this.source, function (item) { - if (that.matcher(item)) return item - }) - - items = this.sorter(items) - - if (!items.length) { - return this.shown ? this.hide() : this - } - - return this.render(items.slice(0, this.options.items)).show() - } - - , matcher: function (item) { - return ~item.toLowerCase().indexOf(this.query.toLowerCase()) - } - - , sorter: function (items) { - var beginswith = [] - , caseSensitive = [] - , caseInsensitive = [] - , item - - while (item = items.shift()) { - if (!item.toLowerCase().indexOf(this.query.toLowerCase())) beginswith.push(item) - else if (~item.indexOf(this.query)) caseSensitive.push(item) - else caseInsensitive.push(item) - } - - return beginswith.concat(caseSensitive, caseInsensitive) - } - - , highlighter: function (item) { - return item.replace(new RegExp('(' + this.query + ')', 'ig'), function ($1, match) { - return '' + match + '' - }) - } - - , render: function (items) { - var that = this - - items = $(items).map(function (i, item) { - i = $(that.options.item).attr('data-value', item) - i.find('a').html(that.highlighter(item)) - return i[0] - }) - - items.first().addClass('active') - this.$menu.html(items) - return this - } - - , next: function (event) { - var active = this.$menu.find('.active').removeClass('active') - , next = active.next() - - if (!next.length) { - next = $(this.$menu.find('li')[0]) - } - - next.addClass('active') - } - - , prev: function (event) { - var active = this.$menu.find('.active').removeClass('active') - , prev = active.prev() - - if (!prev.length) { - prev = this.$menu.find('li').last() - } - - prev.addClass('active') - } - - , listen: function () { - this.$element - .on('blur', $.proxy(this.blur, this)) - .on('keypress', $.proxy(this.keypress, this)) - .on('keyup', $.proxy(this.keyup, this)) - - if ($.browser.webkit || $.browser.msie) { - this.$element.on('keydown', $.proxy(this.keypress, this)) - } - - this.$menu - .on('click', $.proxy(this.click, this)) - .on('mouseenter', 'li', $.proxy(this.mouseenter, this)) - } - - , keyup: function (e) { - e.stopPropagation() - e.preventDefault() - - switch(e.keyCode) { - case 40: // down arrow - case 38: // up arrow - break - - case 9: // tab - case 13: // enter - if (!this.shown) return - this.select() - break - - case 27: // escape - this.hide() - break - - default: - this.lookup() - } - - } - - , keypress: function (e) { - e.stopPropagation() - if (!this.shown) return - - switch(e.keyCode) { - case 9: // tab - case 13: // enter - case 27: // escape - e.preventDefault() - break - - case 38: // up arrow - e.preventDefault() - this.prev() - break - - case 40: // down arrow - e.preventDefault() - this.next() - break - } - } - - , blur: function (e) { - var that = this - e.stopPropagation() - e.preventDefault() - setTimeout(function () { that.hide() }, 150) - } - - , click: function (e) { - e.stopPropagation() - e.preventDefault() - this.select() - } - - , mouseenter: function (e) { - this.$menu.find('.active').removeClass('active') - $(e.currentTarget).addClass('active') - } - - } - - - /* TYPEAHEAD PLUGIN DEFINITION - * =========================== */ - - $.fn.typeahead = function ( option ) { - return this.each(function () { - var $this = $(this) - , data = $this.data('typeahead') - , options = typeof option == 'object' && option - if (!data) $this.data('typeahead', (data = new Typeahead(this, options))) - if (typeof option == 'string') data[option]() - }) - } - - $.fn.typeahead.defaults = { - source: [] - , items: 8 - , menu: '
        ' - , item: '
        • ' - } - - $.fn.typeahead.Constructor = Typeahead - - - /* TYPEAHEAD DATA-API - * ================== */ - - $(function () { - $('body').on('focus.typeahead.data-api', '[data-provide="typeahead"]', function (e) { - var $this = $(this) - if ($this.data('typeahead')) return - e.preventDefault() - $this.typeahead($this.data()) - }) - }) - -}( window.jQuery ) diff --git a/docs/Saml2/js/bootstrap.min.js b/docs/Saml2/js/bootstrap.min.js deleted file mode 100644 index 1f295a14..00000000 --- a/docs/Saml2/js/bootstrap.min.js +++ /dev/null @@ -1 +0,0 @@ -!function(a){a(function(){"use strict",a.support.transition=function(){var b=document.body||document.documentElement,c=b.style,d=c.transition!==undefined||c.WebkitTransition!==undefined||c.MozTransition!==undefined||c.MsTransition!==undefined||c.OTransition!==undefined;return d&&{end:function(){var b="TransitionEnd";return a.browser.webkit?b="webkitTransitionEnd":a.browser.mozilla?b="transitionend":a.browser.opera&&(b="oTransitionEnd"),b}()}}()})}(window.jQuery),!function(a){"use strict";var b='[data-dismiss="alert"]',c=function(c){a(c).on("click",b,this.close)};c.prototype={constructor:c,close:function(b){function f(){e.remove(),e.trigger("closed")}var c=a(this),d=c.attr("data-target"),e;d||(d=c.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,"")),e=a(d),e.trigger("close"),b&&b.preventDefault(),e.length||(e=c.hasClass("alert")?c:c.parent()),e.removeClass("in"),a.support.transition&&e.hasClass("fade")?e.on(a.support.transition.end,f):f()}},a.fn.alert=function(b){return this.each(function(){var d=a(this),e=d.data("alert");e||d.data("alert",e=new c(this)),typeof b=="string"&&e[b].call(d)})},a.fn.alert.Constructor=c,a(function(){a("body").on("click.alert.data-api",b,c.prototype.close)})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.button.defaults,c)};b.prototype={constructor:b,setState:function(a){var b="disabled",c=this.$element,d=c.data(),e=c.is("input")?"val":"html";a+="Text",d.resetText||c.data("resetText",c[e]()),c[e](d[a]||this.options[a]),setTimeout(function(){a=="loadingText"?c.addClass(b).attr(b,b):c.removeClass(b).removeAttr(b)},0)},toggle:function(){var a=this.$element.parent('[data-toggle="buttons-radio"]');a&&a.find(".active").removeClass("active"),this.$element.toggleClass("active")}},a.fn.button=function(c){return this.each(function(){var d=a(this),e=d.data("button"),f=typeof c=="object"&&c;e||d.data("button",e=new b(this,f)),c=="toggle"?e.toggle():c&&e.setState(c)})},a.fn.button.defaults={loadingText:"loading..."},a.fn.button.Constructor=b,a(function(){a("body").on("click.button.data-api","[data-toggle^=button]",function(b){a(b.target).button("toggle")})})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.carousel.defaults,c),this.options.slide&&this.slide(this.options.slide)};b.prototype={cycle:function(){return this.interval=setInterval(a.proxy(this.next,this),this.options.interval),this},to:function(b){var c=this.$element.find(".active"),d=c.parent().children(),e=d.index(c),f=this;if(b>d.length-1||b<0)return;return this.sliding?this.$element.one("slid",function(){f.to(b)}):e==b?this.pause().cycle():this.slide(b>e?"next":"prev",a(d[b]))},pause:function(){return clearInterval(this.interval),this},next:function(){if(this.sliding)return;return this.slide("next")},prev:function(){if(this.sliding)return;return this.slide("prev")},slide:function(b,c){var d=this.$element.find(".active"),e=c||d[b](),f=this.interval,g=b=="next"?"left":"right",h=b=="next"?"first":"last",i=this;return this.sliding=!0,f&&this.pause(),e=e.length?e:this.$element.find(".item")[h](),!a.support.transition&&this.$element.hasClass("slide")?(this.$element.trigger("slide"),d.removeClass("active"),e.addClass("active"),this.sliding=!1,this.$element.trigger("slid")):(e.addClass(b),e[0].offsetWidth,d.addClass(g),e.addClass(g),this.$element.trigger("slide"),this.$element.one(a.support.transition.end,function(){e.removeClass([b,g].join(" ")).addClass("active"),d.removeClass(["active",g].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger("slid")},0)})),f&&this.cycle(),this}},a.fn.carousel=function(c){return this.each(function(){var d=a(this),e=d.data("carousel"),f=typeof c=="object"&&c;e||d.data("carousel",e=new b(this,f)),typeof c=="number"?e.to(c):typeof c=="string"||(c=f.slide)?e[c]():e.cycle()})},a.fn.carousel.defaults={interval:5e3},a.fn.carousel.Constructor=b,a(function(){a("body").on("click.carousel.data-api","[data-slide]",function(b){var c=a(this),d,e=a(c.attr("data-target")||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,"")),f=!e.data("modal")&&a.extend({},e.data(),c.data());e.carousel(f),b.preventDefault()})})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.collapse.defaults,c),this.options.parent&&(this.$parent=a(this.options.parent)),this.options.toggle&&this.toggle()};b.prototype={constructor:b,dimension:function(){var a=this.$element.hasClass("width");return a?"width":"height"},show:function(){var b=this.dimension(),c=a.camelCase(["scroll",b].join("-")),d=this.$parent&&this.$parent.find(".in"),e;d&&d.length&&(e=d.data("collapse"),d.collapse("hide"),e||d.data("collapse",null)),this.$element[b](0),this.transition("addClass","show","shown"),this.$element[b](this.$element[0][c])},hide:function(){var a=this.dimension();this.reset(this.$element[a]()),this.transition("removeClass","hide","hidden"),this.$element[a](0)},reset:function(a){var b=this.dimension();this.$element.removeClass("collapse")[b](a||"auto")[0].offsetWidth,this.$element.addClass("collapse")},transition:function(b,c,d){var e=this,f=function(){c=="show"&&e.reset(),e.$element.trigger(d)};this.$element.trigger(c)[b]("in"),a.support.transition&&this.$element.hasClass("collapse")?this.$element.one(a.support.transition.end,f):f()},toggle:function(){this[this.$element.hasClass("in")?"hide":"show"]()}},a.fn.collapse=function(c){return this.each(function(){var d=a(this),e=d.data("collapse"),f=typeof c=="object"&&c;e||d.data("collapse",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.collapse.defaults={toggle:!0},a.fn.collapse.Constructor=b,a(function(){a("body").on("click.collapse.data-api","[data-toggle=collapse]",function(b){var c=a(this),d,e=c.attr("data-target")||b.preventDefault()||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,""),f=a(e).data("collapse")?"toggle":c.data();a(e).collapse(f)})})}(window.jQuery),!function(a){function d(){a(b).parent().removeClass("open")}"use strict";var b='[data-toggle="dropdown"]',c=function(b){var c=a(b).on("click.dropdown.data-api",this.toggle);a("html").on("click.dropdown.data-api",function(){c.parent().removeClass("open")})};c.prototype={constructor:c,toggle:function(b){var c=a(this),e=c.attr("data-target"),f,g;return e||(e=c.attr("href"),e=e&&e.replace(/.*(?=#[^\s]*$)/,"")),f=a(e),f.length||(f=c.parent()),g=f.hasClass("open"),d(),!g&&f.toggleClass("open"),!1}},a.fn.dropdown=function(b){return this.each(function(){var d=a(this),e=d.data("dropdown");e||d.data("dropdown",e=new c(this)),typeof b=="string"&&e[b].call(d)})},a.fn.dropdown.Constructor=c,a(function(){a("html").on("click.dropdown.data-api",d),a("body").on("click.dropdown.data-api",b,c.prototype.toggle)})}(window.jQuery),!function(a){function c(){var b=this,c=setTimeout(function(){b.$element.off(a.support.transition.end),d.call(b)},500);this.$element.one(a.support.transition.end,function(){clearTimeout(c),d.call(b)})}function d(a){this.$element.hide().trigger("hidden"),e.call(this)}function e(b){var c=this,d=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.backdrop){var e=a.support.transition&&d;this.$backdrop=a('
        ').appendTo(document.body),this.options.backdrop!="static"&&this.$backdrop.click(a.proxy(this.hide,this)),e&&this.$backdrop[0].offsetWidth,this.$backdrop.addClass("in"),e?this.$backdrop.one(a.support.transition.end,b):b()}else!this.isShown&&this.$backdrop?(this.$backdrop.removeClass("in"),a.support.transition&&this.$element.hasClass("fade")?this.$backdrop.one(a.support.transition.end,a.proxy(f,this)):f.call(this)):b&&b()}function f(){this.$backdrop.remove(),this.$backdrop=null}function g(){var b=this;this.isShown&&this.options.keyboard?a(document).on("keyup.dismiss.modal",function(a){a.which==27&&b.hide()}):this.isShown||a(document).off("keyup.dismiss.modal")}"use strict";var b=function(b,c){this.options=a.extend({},a.fn.modal.defaults,c),this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this))};b.prototype={constructor:b,toggle:function(){return this[this.isShown?"hide":"show"]()},show:function(){var b=this;if(this.isShown)return;a("body").addClass("modal-open"),this.isShown=!0,this.$element.trigger("show"),g.call(this),e.call(this,function(){var c=a.support.transition&&b.$element.hasClass("fade");!b.$element.parent().length&&b.$element.appendTo(document.body),b.$element.show(),c&&b.$element[0].offsetWidth,b.$element.addClass("in"),c?b.$element.one(a.support.transition.end,function(){b.$element.trigger("shown")}):b.$element.trigger("shown")})},hide:function(b){b&&b.preventDefault();if(!this.isShown)return;var e=this;this.isShown=!1,a("body").removeClass("modal-open"),g.call(this),this.$element.trigger("hide").removeClass("in"),a.support.transition&&this.$element.hasClass("fade")?c.call(this):d.call(this)}},a.fn.modal=function(c){return this.each(function(){var d=a(this),e=d.data("modal"),f=typeof c=="object"&&c;e||d.data("modal",e=new b(this,f)),typeof c=="string"?e[c]():e.show()})},a.fn.modal.defaults={backdrop:!0,keyboard:!0},a.fn.modal.Constructor=b,a(function(){a("body").on("click.modal.data-api",'[data-toggle="modal"]',function(b){var c=a(this),d,e=a(c.attr("data-target")||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,"")),f=e.data("modal")?"toggle":a.extend({},e.data(),c.data());b.preventDefault(),e.modal(f)})})}(window.jQuery),!function(a){"use strict";var b=function(a,b){this.init("tooltip",a,b)};b.prototype={constructor:b,init:function(b,c,d){var e,f;this.type=b,this.$element=a(c),this.options=this.getOptions(d),this.enabled=!0,this.options.trigger!="manual"&&(e=this.options.trigger=="hover"?"mouseenter":"focus",f=this.options.trigger=="hover"?"mouseleave":"blur",this.$element.on(e,this.options.selector,a.proxy(this.enter,this)),this.$element.on(f,this.options.selector,a.proxy(this.leave,this))),this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},getOptions:function(b){return b=a.extend({},a.fn[this.type].defaults,b,this.$element.data()),b.delay&&typeof b.delay=="number"&&(b.delay={show:b.delay,hide:b.delay}),b},enter:function(b){var c=a(b.currentTarget)[this.type](this._options).data(this.type);!c.options.delay||!c.options.delay.show?c.show():(c.hoverState="in",setTimeout(function(){c.hoverState=="in"&&c.show()},c.options.delay.show))},leave:function(b){var c=a(b.currentTarget)[this.type](this._options).data(this.type);!c.options.delay||!c.options.delay.hide?c.hide():(c.hoverState="out",setTimeout(function(){c.hoverState=="out"&&c.hide()},c.options.delay.hide))},show:function(){var a,b,c,d,e,f,g;if(this.hasContent()&&this.enabled){a=this.tip(),this.setContent(),this.options.animation&&a.addClass("fade"),f=typeof this.options.placement=="function"?this.options.placement.call(this,a[0],this.$element[0]):this.options.placement,b=/in/.test(f),a.remove().css({top:0,left:0,display:"block"}).appendTo(b?this.$element:document.body),c=this.getPosition(b),d=a[0].offsetWidth,e=a[0].offsetHeight;switch(b?f.split(" ")[1]:f){case"bottom":g={top:c.top+c.height,left:c.left+c.width/2-d/2};break;case"top":g={top:c.top-e,left:c.left+c.width/2-d/2};break;case"left":g={top:c.top+c.height/2-e/2,left:c.left-d};break;case"right":g={top:c.top+c.height/2-e/2,left:c.left+c.width}}a.css(g).addClass(f).addClass("in")}},setContent:function(){var a=this.tip();a.find(".tooltip-inner").html(this.getTitle()),a.removeClass("fade in top bottom left right")},hide:function(){function d(){var b=setTimeout(function(){c.off(a.support.transition.end).remove()},500);c.one(a.support.transition.end,function(){clearTimeout(b),c.remove()})}var b=this,c=this.tip();c.removeClass("in"),a.support.transition&&this.$tip.hasClass("fade")?d():c.remove()},fixTitle:function(){var a=this.$element;(a.attr("title")||typeof a.attr("data-original-title")!="string")&&a.attr("data-original-title",a.attr("title")||"").removeAttr("title")},hasContent:function(){return this.getTitle()},getPosition:function(b){return a.extend({},b?{top:0,left:0}:this.$element.offset(),{width:this.$element[0].offsetWidth,height:this.$element[0].offsetHeight})},getTitle:function(){var a,b=this.$element,c=this.options;return a=b.attr("data-original-title")||(typeof c.title=="function"?c.title.call(b[0]):c.title),a=a.toString().replace(/(^\s*|\s*$)/,""),a},tip:function(){return this.$tip=this.$tip||a(this.options.template)},validate:function(){this.$element[0].parentNode||(this.hide(),this.$element=null,this.options=null)},enable:function(){this.enabled=!0},disable:function(){this.enabled=!1},toggleEnabled:function(){this.enabled=!this.enabled},toggle:function(){this[this.tip().hasClass("in")?"hide":"show"]()}},a.fn.tooltip=function(c){return this.each(function(){var d=a(this),e=d.data("tooltip"),f=typeof c=="object"&&c;e||d.data("tooltip",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.tooltip.Constructor=b,a.fn.tooltip.defaults={animation:!0,delay:0,selector:!1,placement:"top",trigger:"hover",title:"",template:'
        '}}(window.jQuery),!function(a){"use strict";var b=function(a,b){this.init("popover",a,b)};b.prototype=a.extend({},a.fn.tooltip.Constructor.prototype,{constructor:b,setContent:function(){var b=this.tip(),c=this.getTitle(),d=this.getContent();b.find(".popover-title")[a.type(c)=="object"?"append":"html"](c),b.find(".popover-content > *")[a.type(d)=="object"?"append":"html"](d),b.removeClass("fade top bottom left right in")},hasContent:function(){return this.getTitle()||this.getContent()},getContent:function(){var a,b=this.$element,c=this.options;return a=b.attr("data-content")||(typeof c.content=="function"?c.content.call(b[0]):c.content),a=a.toString().replace(/(^\s*|\s*$)/,""),a},tip:function(){return this.$tip||(this.$tip=a(this.options.template)),this.$tip}}),a.fn.popover=function(c){return this.each(function(){var d=a(this),e=d.data("popover"),f=typeof c=="object"&&c;e||d.data("popover",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.popover.Constructor=b,a.fn.popover.defaults=a.extend({},a.fn.tooltip.defaults,{placement:"right",content:"",template:'

        '})}(window.jQuery),!function(a){function b(b,c){var d=a.proxy(this.process,this),e=a(b).is("body")?a(window):a(b),f;this.options=a.extend({},a.fn.scrollspy.defaults,c),this.$scrollElement=e.on("scroll.scroll.data-api",d),this.selector=(this.options.target||(f=a(b).attr("href"))&&f.replace(/.*(?=#[^\s]+$)/,"")||"")+" .nav li > a",this.$body=a("body").on("click.scroll.data-api",this.selector,d),this.refresh(),this.process()}"use strict",b.prototype={constructor:b,refresh:function(){this.targets=this.$body.find(this.selector).map(function(){var b=a(this).attr("href");return/^#\w/.test(b)&&a(b).length?b:null}),this.offsets=a.map(this.targets,function(b){return a(b).position().top})},process:function(){var a=this.$scrollElement.scrollTop()+this.options.offset,b=this.offsets,c=this.targets,d=this.activeTarget,e;for(e=b.length;e--;)d!=c[e]&&a>=b[e]&&(!b[e+1]||a<=b[e+1])&&this.activate(c[e])},activate:function(a){var b;this.activeTarget=a,this.$body.find(this.selector).parent(".active").removeClass("active"),b=this.$body.find(this.selector+'[href="'+a+'"]').parent("li").addClass("active"),b.parent(".dropdown-menu")&&b.closest("li.dropdown").addClass("active")}},a.fn.scrollspy=function(c){return this.each(function(){var d=a(this),e=d.data("scrollspy"),f=typeof c=="object"&&c;e||d.data("scrollspy",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.scrollspy.Constructor=b,a.fn.scrollspy.defaults={offset:10},a(function(){a('[data-spy="scroll"]').each(function(){var b=a(this);b.scrollspy(b.data())})})}(window.jQuery),!function(a){"use strict";var b=function(b){this.element=a(b)};b.prototype={constructor:b,show:function(){var b=this.element,c=b.closest("ul:not(.dropdown-menu)"),d=b.attr("data-target"),e,f;d||(d=b.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,""));if(b.parent("li").hasClass("active"))return;e=c.find(".active a").last()[0],b.trigger({type:"show",relatedTarget:e}),f=a(d),this.activate(b.parent("li"),c),this.activate(f,f.parent(),function(){b.trigger({type:"shown",relatedTarget:e})})},activate:function(b,c,d){function g(){e.removeClass("active").find("> .dropdown-menu > .active").removeClass("active"),b.addClass("active"),f?(b[0].offsetWidth,b.addClass("in")):b.removeClass("fade"),b.parent(".dropdown-menu")&&b.closest("li.dropdown").addClass("active"),d&&d()}var e=c.find("> .active"),f=d&&a.support.transition&&e.hasClass("fade");f?e.one(a.support.transition.end,g):g(),e.removeClass("in")}},a.fn.tab=function(c){return this.each(function(){var d=a(this),e=d.data("tab");e||d.data("tab",e=new b(this)),typeof c=="string"&&e[c]()})},a.fn.tab.Constructor=b,a(function(){a("body").on("click.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"]',function(b){b.preventDefault(),a(this).tab("show")})})}(window.jQuery),!function(a){"use strict";var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.typeahead.defaults,c),this.matcher=this.options.matcher||this.matcher,this.sorter=this.options.sorter||this.sorter,this.highlighter=this.options.highlighter||this.highlighter,this.$menu=a(this.options.menu).appendTo("body"),this.source=this.options.source,this.shown=!1,this.listen()};b.prototype={constructor:b,select:function(){var a=this.$menu.find(".active").attr("data-value");return this.$element.val(a),this.hide()},show:function(){var b=a.extend({},this.$element.offset(),{height:this.$element[0].offsetHeight});return this.$menu.css({top:b.top+b.height,left:b.left}),this.$menu.show(),this.shown=!0,this},hide:function(){return this.$menu.hide(),this.shown=!1,this},lookup:function(b){var c=this,d,e;return this.query=this.$element.val(),this.query?(d=a.grep(this.source,function(a){if(c.matcher(a))return a}),d=this.sorter(d),d.length?this.render(d.slice(0,this.options.items)).show():this.shown?this.hide():this):this.shown?this.hide():this},matcher:function(a){return~a.toLowerCase().indexOf(this.query.toLowerCase())},sorter:function(a){var b=[],c=[],d=[],e;while(e=a.shift())e.toLowerCase().indexOf(this.query.toLowerCase())?~e.indexOf(this.query)?c.push(e):d.push(e):b.push(e);return b.concat(c,d)},highlighter:function(a){return a.replace(new RegExp("("+this.query+")","ig"),function(a,b){return""+b+""})},render:function(b){var c=this;return b=a(b).map(function(b,d){return b=a(c.options.item).attr("data-value",d),b.find("a").html(c.highlighter(d)),b[0]}),b.first().addClass("active"),this.$menu.html(b),this},next:function(b){var c=this.$menu.find(".active").removeClass("active"),d=c.next();d.length||(d=a(this.$menu.find("li")[0])),d.addClass("active")},prev:function(a){var b=this.$menu.find(".active").removeClass("active"),c=b.prev();c.length||(c=this.$menu.find("li").last()),c.addClass("active")},listen:function(){this.$element.on("blur",a.proxy(this.blur,this)).on("keypress",a.proxy(this.keypress,this)).on("keyup",a.proxy(this.keyup,this)),(a.browser.webkit||a.browser.msie)&&this.$element.on("keydown",a.proxy(this.keypress,this)),this.$menu.on("click",a.proxy(this.click,this)).on("mouseenter","li",a.proxy(this.mouseenter,this))},keyup:function(a){a.stopPropagation(),a.preventDefault();switch(a.keyCode){case 40:case 38:break;case 9:case 13:if(!this.shown)return;this.select();break;case 27:this.hide();break;default:this.lookup()}},keypress:function(a){a.stopPropagation();if(!this.shown)return;switch(a.keyCode){case 9:case 13:case 27:a.preventDefault();break;case 38:a.preventDefault(),this.prev();break;case 40:a.preventDefault(),this.next()}},blur:function(a){var b=this;a.stopPropagation(),a.preventDefault(),setTimeout(function(){b.hide()},150)},click:function(a){a.stopPropagation(),a.preventDefault(),this.select()},mouseenter:function(b){this.$menu.find(".active").removeClass("active"),a(b.currentTarget).addClass("active")}},a.fn.typeahead=function(c){return this.each(function(){var d=a(this),e=d.data("typeahead"),f=typeof c=="object"&&c;e||d.data("typeahead",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.typeahead.defaults={source:[],items:8,menu:'
          ',item:'
          • '},a.fn.typeahead.Constructor=b,a(function(){a("body").on("focus.typeahead.data-api",'[data-provide="typeahead"]',function(b){var c=a(this);if(c.data("typeahead"))return;b.preventDefault(),c.typeahead(c.data())})})}(window.jQuery); \ No newline at end of file diff --git a/docs/Saml2/js/jquery-1.4.2.min.js b/docs/Saml2/js/jquery-1.4.2.min.js deleted file mode 100644 index 7c243080..00000000 --- a/docs/Saml2/js/jquery-1.4.2.min.js +++ /dev/null @@ -1,154 +0,0 @@ -/*! - * jQuery JavaScript Library v1.4.2 - * http://jquery.com/ - * - * Copyright 2010, John Resig - * Dual licensed under the MIT or GPL Version 2 licenses. - * http://jquery.org/license - * - * Includes Sizzle.js - * http://sizzlejs.com/ - * Copyright 2010, The Dojo Foundation - * Released under the MIT, BSD, and GPL Licenses. - * - * Date: Sat Feb 13 22:33:48 2010 -0500 - */ -(function(A,w){function ma(){if(!c.isReady){try{s.documentElement.doScroll("left")}catch(a){setTimeout(ma,1);return}c.ready()}}function Qa(a,b){b.src?c.ajax({url:b.src,async:false,dataType:"script"}):c.globalEval(b.text||b.textContent||b.innerHTML||"");b.parentNode&&b.parentNode.removeChild(b)}function X(a,b,d,f,e,j){var i=a.length;if(typeof b==="object"){for(var o in b)X(a,o,b[o],f,e,d);return a}if(d!==w){f=!j&&f&&c.isFunction(d);for(o=0;o)[^>]*$|^#([\w-]+)$/,Ua=/^.[^:#\[\.,]*$/,Va=/\S/, -Wa=/^(\s|\u00A0)+|(\s|\u00A0)+$/g,Xa=/^<(\w+)\s*\/?>(?:<\/\1>)?$/,P=navigator.userAgent,xa=false,Q=[],L,$=Object.prototype.toString,aa=Object.prototype.hasOwnProperty,ba=Array.prototype.push,R=Array.prototype.slice,ya=Array.prototype.indexOf;c.fn=c.prototype={init:function(a,b){var d,f;if(!a)return this;if(a.nodeType){this.context=this[0]=a;this.length=1;return this}if(a==="body"&&!b){this.context=s;this[0]=s.body;this.selector="body";this.length=1;return this}if(typeof a==="string")if((d=Ta.exec(a))&& -(d[1]||!b))if(d[1]){f=b?b.ownerDocument||b:s;if(a=Xa.exec(a))if(c.isPlainObject(b)){a=[s.createElement(a[1])];c.fn.attr.call(a,b,true)}else a=[f.createElement(a[1])];else{a=sa([d[1]],[f]);a=(a.cacheable?a.fragment.cloneNode(true):a.fragment).childNodes}return c.merge(this,a)}else{if(b=s.getElementById(d[2])){if(b.id!==d[2])return T.find(a);this.length=1;this[0]=b}this.context=s;this.selector=a;return this}else if(!b&&/^\w+$/.test(a)){this.selector=a;this.context=s;a=s.getElementsByTagName(a);return c.merge(this, -a)}else return!b||b.jquery?(b||T).find(a):c(b).find(a);else if(c.isFunction(a))return T.ready(a);if(a.selector!==w){this.selector=a.selector;this.context=a.context}return c.makeArray(a,this)},selector:"",jquery:"1.4.2",length:0,size:function(){return this.length},toArray:function(){return R.call(this,0)},get:function(a){return a==null?this.toArray():a<0?this.slice(a)[0]:this[a]},pushStack:function(a,b,d){var f=c();c.isArray(a)?ba.apply(f,a):c.merge(f,a);f.prevObject=this;f.context=this.context;if(b=== -"find")f.selector=this.selector+(this.selector?" ":"")+d;else if(b)f.selector=this.selector+"."+b+"("+d+")";return f},each:function(a,b){return c.each(this,a,b)},ready:function(a){c.bindReady();if(c.isReady)a.call(s,c);else Q&&Q.push(a);return this},eq:function(a){return a===-1?this.slice(a):this.slice(a,+a+1)},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},slice:function(){return this.pushStack(R.apply(this,arguments),"slice",R.call(arguments).join(","))},map:function(a){return this.pushStack(c.map(this, -function(b,d){return a.call(b,d,b)}))},end:function(){return this.prevObject||c(null)},push:ba,sort:[].sort,splice:[].splice};c.fn.init.prototype=c.fn;c.extend=c.fn.extend=function(){var a=arguments[0]||{},b=1,d=arguments.length,f=false,e,j,i,o;if(typeof a==="boolean"){f=a;a=arguments[1]||{};b=2}if(typeof a!=="object"&&!c.isFunction(a))a={};if(d===b){a=this;--b}for(;b
          a"; -var e=d.getElementsByTagName("*"),j=d.getElementsByTagName("a")[0];if(!(!e||!e.length||!j)){c.support={leadingWhitespace:d.firstChild.nodeType===3,tbody:!d.getElementsByTagName("tbody").length,htmlSerialize:!!d.getElementsByTagName("link").length,style:/red/.test(j.getAttribute("style")),hrefNormalized:j.getAttribute("href")==="/a",opacity:/^0.55$/.test(j.style.opacity),cssFloat:!!j.style.cssFloat,checkOn:d.getElementsByTagName("input")[0].value==="on",optSelected:s.createElement("select").appendChild(s.createElement("option")).selected, -parentNode:d.removeChild(d.appendChild(s.createElement("div"))).parentNode===null,deleteExpando:true,checkClone:false,scriptEval:false,noCloneEvent:true,boxModel:null};b.type="text/javascript";try{b.appendChild(s.createTextNode("window."+f+"=1;"))}catch(i){}a.insertBefore(b,a.firstChild);if(A[f]){c.support.scriptEval=true;delete A[f]}try{delete b.test}catch(o){c.support.deleteExpando=false}a.removeChild(b);if(d.attachEvent&&d.fireEvent){d.attachEvent("onclick",function k(){c.support.noCloneEvent= -false;d.detachEvent("onclick",k)});d.cloneNode(true).fireEvent("onclick")}d=s.createElement("div");d.innerHTML="";a=s.createDocumentFragment();a.appendChild(d.firstChild);c.support.checkClone=a.cloneNode(true).cloneNode(true).lastChild.checked;c(function(){var k=s.createElement("div");k.style.width=k.style.paddingLeft="1px";s.body.appendChild(k);c.boxModel=c.support.boxModel=k.offsetWidth===2;s.body.removeChild(k).style.display="none"});a=function(k){var n= -s.createElement("div");k="on"+k;var r=k in n;if(!r){n.setAttribute(k,"return;");r=typeof n[k]==="function"}return r};c.support.submitBubbles=a("submit");c.support.changeBubbles=a("change");a=b=d=e=j=null}})();c.props={"for":"htmlFor","class":"className",readonly:"readOnly",maxlength:"maxLength",cellspacing:"cellSpacing",rowspan:"rowSpan",colspan:"colSpan",tabindex:"tabIndex",usemap:"useMap",frameborder:"frameBorder"};var G="jQuery"+J(),Ya=0,za={};c.extend({cache:{},expando:G,noData:{embed:true,object:true, -applet:true},data:function(a,b,d){if(!(a.nodeName&&c.noData[a.nodeName.toLowerCase()])){a=a==A?za:a;var f=a[G],e=c.cache;if(!f&&typeof b==="string"&&d===w)return null;f||(f=++Ya);if(typeof b==="object"){a[G]=f;e[f]=c.extend(true,{},b)}else if(!e[f]){a[G]=f;e[f]={}}a=e[f];if(d!==w)a[b]=d;return typeof b==="string"?a[b]:a}},removeData:function(a,b){if(!(a.nodeName&&c.noData[a.nodeName.toLowerCase()])){a=a==A?za:a;var d=a[G],f=c.cache,e=f[d];if(b){if(e){delete e[b];c.isEmptyObject(e)&&c.removeData(a)}}else{if(c.support.deleteExpando)delete a[c.expando]; -else a.removeAttribute&&a.removeAttribute(c.expando);delete f[d]}}}});c.fn.extend({data:function(a,b){if(typeof a==="undefined"&&this.length)return c.data(this[0]);else if(typeof a==="object")return this.each(function(){c.data(this,a)});var d=a.split(".");d[1]=d[1]?"."+d[1]:"";if(b===w){var f=this.triggerHandler("getData"+d[1]+"!",[d[0]]);if(f===w&&this.length)f=c.data(this[0],a);return f===w&&d[1]?this.data(d[0]):f}else return this.trigger("setData"+d[1]+"!",[d[0],b]).each(function(){c.data(this, -a,b)})},removeData:function(a){return this.each(function(){c.removeData(this,a)})}});c.extend({queue:function(a,b,d){if(a){b=(b||"fx")+"queue";var f=c.data(a,b);if(!d)return f||[];if(!f||c.isArray(d))f=c.data(a,b,c.makeArray(d));else f.push(d);return f}},dequeue:function(a,b){b=b||"fx";var d=c.queue(a,b),f=d.shift();if(f==="inprogress")f=d.shift();if(f){b==="fx"&&d.unshift("inprogress");f.call(a,function(){c.dequeue(a,b)})}}});c.fn.extend({queue:function(a,b){if(typeof a!=="string"){b=a;a="fx"}if(b=== -w)return c.queue(this[0],a);return this.each(function(){var d=c.queue(this,a,b);a==="fx"&&d[0]!=="inprogress"&&c.dequeue(this,a)})},dequeue:function(a){return this.each(function(){c.dequeue(this,a)})},delay:function(a,b){a=c.fx?c.fx.speeds[a]||a:a;b=b||"fx";return this.queue(b,function(){var d=this;setTimeout(function(){c.dequeue(d,b)},a)})},clearQueue:function(a){return this.queue(a||"fx",[])}});var Aa=/[\n\t]/g,ca=/\s+/,Za=/\r/g,$a=/href|src|style/,ab=/(button|input)/i,bb=/(button|input|object|select|textarea)/i, -cb=/^(a|area)$/i,Ba=/radio|checkbox/;c.fn.extend({attr:function(a,b){return X(this,a,b,true,c.attr)},removeAttr:function(a){return this.each(function(){c.attr(this,a,"");this.nodeType===1&&this.removeAttribute(a)})},addClass:function(a){if(c.isFunction(a))return this.each(function(n){var r=c(this);r.addClass(a.call(this,n,r.attr("class")))});if(a&&typeof a==="string")for(var b=(a||"").split(ca),d=0,f=this.length;d-1)return true;return false},val:function(a){if(a===w){var b=this[0];if(b){if(c.nodeName(b,"option"))return(b.attributes.value||{}).specified?b.value:b.text;if(c.nodeName(b,"select")){var d=b.selectedIndex,f=[],e=b.options;b=b.type==="select-one";if(d<0)return null;var j=b?d:0;for(d=b?d+1:e.length;j=0;else if(c.nodeName(this,"select")){var u=c.makeArray(r);c("option",this).each(function(){this.selected= -c.inArray(c(this).val(),u)>=0});if(!u.length)this.selectedIndex=-1}else this.value=r}})}});c.extend({attrFn:{val:true,css:true,html:true,text:true,data:true,width:true,height:true,offset:true},attr:function(a,b,d,f){if(!a||a.nodeType===3||a.nodeType===8)return w;if(f&&b in c.attrFn)return c(a)[b](d);f=a.nodeType!==1||!c.isXMLDoc(a);var e=d!==w;b=f&&c.props[b]||b;if(a.nodeType===1){var j=$a.test(b);if(b in a&&f&&!j){if(e){b==="type"&&ab.test(a.nodeName)&&a.parentNode&&c.error("type property can't be changed"); -a[b]=d}if(c.nodeName(a,"form")&&a.getAttributeNode(b))return a.getAttributeNode(b).nodeValue;if(b==="tabIndex")return(b=a.getAttributeNode("tabIndex"))&&b.specified?b.value:bb.test(a.nodeName)||cb.test(a.nodeName)&&a.href?0:w;return a[b]}if(!c.support.style&&f&&b==="style"){if(e)a.style.cssText=""+d;return a.style.cssText}e&&a.setAttribute(b,""+d);a=!c.support.hrefNormalized&&f&&j?a.getAttribute(b,2):a.getAttribute(b);return a===null?w:a}return c.style(a,b,d)}});var O=/\.(.*)$/,db=function(a){return a.replace(/[^\w\s\.\|`]/g, -function(b){return"\\"+b})};c.event={add:function(a,b,d,f){if(!(a.nodeType===3||a.nodeType===8)){if(a.setInterval&&a!==A&&!a.frameElement)a=A;var e,j;if(d.handler){e=d;d=e.handler}if(!d.guid)d.guid=c.guid++;if(j=c.data(a)){var i=j.events=j.events||{},o=j.handle;if(!o)j.handle=o=function(){return typeof c!=="undefined"&&!c.event.triggered?c.event.handle.apply(o.elem,arguments):w};o.elem=a;b=b.split(" ");for(var k,n=0,r;k=b[n++];){j=e?c.extend({},e):{handler:d,data:f};if(k.indexOf(".")>-1){r=k.split("."); -k=r.shift();j.namespace=r.slice(0).sort().join(".")}else{r=[];j.namespace=""}j.type=k;j.guid=d.guid;var u=i[k],z=c.event.special[k]||{};if(!u){u=i[k]=[];if(!z.setup||z.setup.call(a,f,r,o)===false)if(a.addEventListener)a.addEventListener(k,o,false);else a.attachEvent&&a.attachEvent("on"+k,o)}if(z.add){z.add.call(a,j);if(!j.handler.guid)j.handler.guid=d.guid}u.push(j);c.event.global[k]=true}a=null}}},global:{},remove:function(a,b,d,f){if(!(a.nodeType===3||a.nodeType===8)){var e,j=0,i,o,k,n,r,u,z=c.data(a), -C=z&&z.events;if(z&&C){if(b&&b.type){d=b.handler;b=b.type}if(!b||typeof b==="string"&&b.charAt(0)==="."){b=b||"";for(e in C)c.event.remove(a,e+b)}else{for(b=b.split(" ");e=b[j++];){n=e;i=e.indexOf(".")<0;o=[];if(!i){o=e.split(".");e=o.shift();k=new RegExp("(^|\\.)"+c.map(o.slice(0).sort(),db).join("\\.(?:.*\\.)?")+"(\\.|$)")}if(r=C[e])if(d){n=c.event.special[e]||{};for(B=f||0;B=0){a.type= -e=e.slice(0,-1);a.exclusive=true}if(!d){a.stopPropagation();c.event.global[e]&&c.each(c.cache,function(){this.events&&this.events[e]&&c.event.trigger(a,b,this.handle.elem)})}if(!d||d.nodeType===3||d.nodeType===8)return w;a.result=w;a.target=d;b=c.makeArray(b);b.unshift(a)}a.currentTarget=d;(f=c.data(d,"handle"))&&f.apply(d,b);f=d.parentNode||d.ownerDocument;try{if(!(d&&d.nodeName&&c.noData[d.nodeName.toLowerCase()]))if(d["on"+e]&&d["on"+e].apply(d,b)===false)a.result=false}catch(j){}if(!a.isPropagationStopped()&& -f)c.event.trigger(a,b,f,true);else if(!a.isDefaultPrevented()){f=a.target;var i,o=c.nodeName(f,"a")&&e==="click",k=c.event.special[e]||{};if((!k._default||k._default.call(d,a)===false)&&!o&&!(f&&f.nodeName&&c.noData[f.nodeName.toLowerCase()])){try{if(f[e]){if(i=f["on"+e])f["on"+e]=null;c.event.triggered=true;f[e]()}}catch(n){}if(i)f["on"+e]=i;c.event.triggered=false}}},handle:function(a){var b,d,f,e;a=arguments[0]=c.event.fix(a||A.event);a.currentTarget=this;b=a.type.indexOf(".")<0&&!a.exclusive; -if(!b){d=a.type.split(".");a.type=d.shift();f=new RegExp("(^|\\.)"+d.slice(0).sort().join("\\.(?:.*\\.)?")+"(\\.|$)")}e=c.data(this,"events");d=e[a.type];if(e&&d){d=d.slice(0);e=0;for(var j=d.length;e-1?c.map(a.options,function(f){return f.selected}).join("-"):"";else if(a.nodeName.toLowerCase()==="select")d=a.selectedIndex;return d},fa=function(a,b){var d=a.target,f,e;if(!(!da.test(d.nodeName)||d.readOnly)){f=c.data(d,"_change_data");e=Fa(d);if(a.type!=="focusout"||d.type!=="radio")c.data(d,"_change_data", -e);if(!(f===w||e===f))if(f!=null||e){a.type="change";return c.event.trigger(a,b,d)}}};c.event.special.change={filters:{focusout:fa,click:function(a){var b=a.target,d=b.type;if(d==="radio"||d==="checkbox"||b.nodeName.toLowerCase()==="select")return fa.call(this,a)},keydown:function(a){var b=a.target,d=b.type;if(a.keyCode===13&&b.nodeName.toLowerCase()!=="textarea"||a.keyCode===32&&(d==="checkbox"||d==="radio")||d==="select-multiple")return fa.call(this,a)},beforeactivate:function(a){a=a.target;c.data(a, -"_change_data",Fa(a))}},setup:function(){if(this.type==="file")return false;for(var a in ea)c.event.add(this,a+".specialChange",ea[a]);return da.test(this.nodeName)},teardown:function(){c.event.remove(this,".specialChange");return da.test(this.nodeName)}};ea=c.event.special.change.filters}s.addEventListener&&c.each({focus:"focusin",blur:"focusout"},function(a,b){function d(f){f=c.event.fix(f);f.type=b;return c.event.handle.call(this,f)}c.event.special[b]={setup:function(){this.addEventListener(a, -d,true)},teardown:function(){this.removeEventListener(a,d,true)}}});c.each(["bind","one"],function(a,b){c.fn[b]=function(d,f,e){if(typeof d==="object"){for(var j in d)this[b](j,f,d[j],e);return this}if(c.isFunction(f)){e=f;f=w}var i=b==="one"?c.proxy(e,function(k){c(this).unbind(k,i);return e.apply(this,arguments)}):e;if(d==="unload"&&b!=="one")this.one(d,f,e);else{j=0;for(var o=this.length;j0){y=t;break}}t=t[g]}m[q]=y}}}var f=/((?:\((?:\([^()]+\)|[^()]+)+\)|\[(?:\[[^[\]]*\]|['"][^'"]*['"]|[^[\]'"]+)+\]|\\.|[^ >+~,(\[\\]+)+|[>+~])(\s*,\s*)?((?:.|\r|\n)*)/g, -e=0,j=Object.prototype.toString,i=false,o=true;[0,0].sort(function(){o=false;return 0});var k=function(g,h,l,m){l=l||[];var q=h=h||s;if(h.nodeType!==1&&h.nodeType!==9)return[];if(!g||typeof g!=="string")return l;for(var p=[],v,t,y,S,H=true,M=x(h),I=g;(f.exec(""),v=f.exec(I))!==null;){I=v[3];p.push(v[1]);if(v[2]){S=v[3];break}}if(p.length>1&&r.exec(g))if(p.length===2&&n.relative[p[0]])t=ga(p[0]+p[1],h);else for(t=n.relative[p[0]]?[h]:k(p.shift(),h);p.length;){g=p.shift();if(n.relative[g])g+=p.shift(); -t=ga(g,t)}else{if(!m&&p.length>1&&h.nodeType===9&&!M&&n.match.ID.test(p[0])&&!n.match.ID.test(p[p.length-1])){v=k.find(p.shift(),h,M);h=v.expr?k.filter(v.expr,v.set)[0]:v.set[0]}if(h){v=m?{expr:p.pop(),set:z(m)}:k.find(p.pop(),p.length===1&&(p[0]==="~"||p[0]==="+")&&h.parentNode?h.parentNode:h,M);t=v.expr?k.filter(v.expr,v.set):v.set;if(p.length>0)y=z(t);else H=false;for(;p.length;){var D=p.pop();v=D;if(n.relative[D])v=p.pop();else D="";if(v==null)v=h;n.relative[D](y,v,M)}}else y=[]}y||(y=t);y||k.error(D|| -g);if(j.call(y)==="[object Array]")if(H)if(h&&h.nodeType===1)for(g=0;y[g]!=null;g++){if(y[g]&&(y[g]===true||y[g].nodeType===1&&E(h,y[g])))l.push(t[g])}else for(g=0;y[g]!=null;g++)y[g]&&y[g].nodeType===1&&l.push(t[g]);else l.push.apply(l,y);else z(y,l);if(S){k(S,q,l,m);k.uniqueSort(l)}return l};k.uniqueSort=function(g){if(B){i=o;g.sort(B);if(i)for(var h=1;h":function(g,h){var l=typeof h==="string";if(l&&!/\W/.test(h)){h=h.toLowerCase();for(var m=0,q=g.length;m=0))l||m.push(v);else if(l)h[p]=false;return false},ID:function(g){return g[1].replace(/\\/g,"")},TAG:function(g){return g[1].toLowerCase()}, -CHILD:function(g){if(g[1]==="nth"){var h=/(-?)(\d*)n((?:\+|-)?\d*)/.exec(g[2]==="even"&&"2n"||g[2]==="odd"&&"2n+1"||!/\D/.test(g[2])&&"0n+"+g[2]||g[2]);g[2]=h[1]+(h[2]||1)-0;g[3]=h[3]-0}g[0]=e++;return g},ATTR:function(g,h,l,m,q,p){h=g[1].replace(/\\/g,"");if(!p&&n.attrMap[h])g[1]=n.attrMap[h];if(g[2]==="~=")g[4]=" "+g[4]+" ";return g},PSEUDO:function(g,h,l,m,q){if(g[1]==="not")if((f.exec(g[3])||"").length>1||/^\w/.test(g[3]))g[3]=k(g[3],null,null,h);else{g=k.filter(g[3],h,l,true^q);l||m.push.apply(m, -g);return false}else if(n.match.POS.test(g[0])||n.match.CHILD.test(g[0]))return true;return g},POS:function(g){g.unshift(true);return g}},filters:{enabled:function(g){return g.disabled===false&&g.type!=="hidden"},disabled:function(g){return g.disabled===true},checked:function(g){return g.checked===true},selected:function(g){return g.selected===true},parent:function(g){return!!g.firstChild},empty:function(g){return!g.firstChild},has:function(g,h,l){return!!k(l[3],g).length},header:function(g){return/h\d/i.test(g.nodeName)}, -text:function(g){return"text"===g.type},radio:function(g){return"radio"===g.type},checkbox:function(g){return"checkbox"===g.type},file:function(g){return"file"===g.type},password:function(g){return"password"===g.type},submit:function(g){return"submit"===g.type},image:function(g){return"image"===g.type},reset:function(g){return"reset"===g.type},button:function(g){return"button"===g.type||g.nodeName.toLowerCase()==="button"},input:function(g){return/input|select|textarea|button/i.test(g.nodeName)}}, -setFilters:{first:function(g,h){return h===0},last:function(g,h,l,m){return h===m.length-1},even:function(g,h){return h%2===0},odd:function(g,h){return h%2===1},lt:function(g,h,l){return hl[3]-0},nth:function(g,h,l){return l[3]-0===h},eq:function(g,h,l){return l[3]-0===h}},filter:{PSEUDO:function(g,h,l,m){var q=h[1],p=n.filters[q];if(p)return p(g,l,h,m);else if(q==="contains")return(g.textContent||g.innerText||a([g])||"").indexOf(h[3])>=0;else if(q==="not"){h= -h[3];l=0;for(m=h.length;l=0}},ID:function(g,h){return g.nodeType===1&&g.getAttribute("id")===h},TAG:function(g,h){return h==="*"&&g.nodeType===1||g.nodeName.toLowerCase()===h},CLASS:function(g,h){return(" "+(g.className||g.getAttribute("class"))+" ").indexOf(h)>-1},ATTR:function(g,h){var l=h[1];g=n.attrHandle[l]?n.attrHandle[l](g):g[l]!=null?g[l]:g.getAttribute(l);l=g+"";var m=h[2];h=h[4];return g==null?m==="!=":m=== -"="?l===h:m==="*="?l.indexOf(h)>=0:m==="~="?(" "+l+" ").indexOf(h)>=0:!h?l&&g!==false:m==="!="?l!==h:m==="^="?l.indexOf(h)===0:m==="$="?l.substr(l.length-h.length)===h:m==="|="?l===h||l.substr(0,h.length+1)===h+"-":false},POS:function(g,h,l,m){var q=n.setFilters[h[2]];if(q)return q(g,l,h,m)}}},r=n.match.POS;for(var u in n.match){n.match[u]=new RegExp(n.match[u].source+/(?![^\[]*\])(?![^\(]*\))/.source);n.leftMatch[u]=new RegExp(/(^(?:.|\r|\n)*?)/.source+n.match[u].source.replace(/\\(\d+)/g,function(g, -h){return"\\"+(h-0+1)}))}var z=function(g,h){g=Array.prototype.slice.call(g,0);if(h){h.push.apply(h,g);return h}return g};try{Array.prototype.slice.call(s.documentElement.childNodes,0)}catch(C){z=function(g,h){h=h||[];if(j.call(g)==="[object Array]")Array.prototype.push.apply(h,g);else if(typeof g.length==="number")for(var l=0,m=g.length;l";var l=s.documentElement;l.insertBefore(g,l.firstChild);if(s.getElementById(h)){n.find.ID=function(m,q,p){if(typeof q.getElementById!=="undefined"&&!p)return(q=q.getElementById(m[1]))?q.id===m[1]||typeof q.getAttributeNode!=="undefined"&& -q.getAttributeNode("id").nodeValue===m[1]?[q]:w:[]};n.filter.ID=function(m,q){var p=typeof m.getAttributeNode!=="undefined"&&m.getAttributeNode("id");return m.nodeType===1&&p&&p.nodeValue===q}}l.removeChild(g);l=g=null})();(function(){var g=s.createElement("div");g.appendChild(s.createComment(""));if(g.getElementsByTagName("*").length>0)n.find.TAG=function(h,l){l=l.getElementsByTagName(h[1]);if(h[1]==="*"){h=[];for(var m=0;l[m];m++)l[m].nodeType===1&&h.push(l[m]);l=h}return l};g.innerHTML=""; -if(g.firstChild&&typeof g.firstChild.getAttribute!=="undefined"&&g.firstChild.getAttribute("href")!=="#")n.attrHandle.href=function(h){return h.getAttribute("href",2)};g=null})();s.querySelectorAll&&function(){var g=k,h=s.createElement("div");h.innerHTML="

          ";if(!(h.querySelectorAll&&h.querySelectorAll(".TEST").length===0)){k=function(m,q,p,v){q=q||s;if(!v&&q.nodeType===9&&!x(q))try{return z(q.querySelectorAll(m),p)}catch(t){}return g(m,q,p,v)};for(var l in g)k[l]=g[l];h=null}}(); -(function(){var g=s.createElement("div");g.innerHTML="
          ";if(!(!g.getElementsByClassName||g.getElementsByClassName("e").length===0)){g.lastChild.className="e";if(g.getElementsByClassName("e").length!==1){n.order.splice(1,0,"CLASS");n.find.CLASS=function(h,l,m){if(typeof l.getElementsByClassName!=="undefined"&&!m)return l.getElementsByClassName(h[1])};g=null}}})();var E=s.compareDocumentPosition?function(g,h){return!!(g.compareDocumentPosition(h)&16)}: -function(g,h){return g!==h&&(g.contains?g.contains(h):true)},x=function(g){return(g=(g?g.ownerDocument||g:0).documentElement)?g.nodeName!=="HTML":false},ga=function(g,h){var l=[],m="",q;for(h=h.nodeType?[h]:h;q=n.match.PSEUDO.exec(g);){m+=q[0];g=g.replace(n.match.PSEUDO,"")}g=n.relative[g]?g+"*":g;q=0;for(var p=h.length;q=0===d})};c.fn.extend({find:function(a){for(var b=this.pushStack("","find",a),d=0,f=0,e=this.length;f0)for(var j=d;j0},closest:function(a,b){if(c.isArray(a)){var d=[],f=this[0],e,j= -{},i;if(f&&a.length){e=0;for(var o=a.length;e-1:c(f).is(e)){d.push({selector:i,elem:f});delete j[i]}}f=f.parentNode}}return d}var k=c.expr.match.POS.test(a)?c(a,b||this.context):null;return this.map(function(n,r){for(;r&&r.ownerDocument&&r!==b;){if(k?k.index(r)>-1:c(r).is(a))return r;r=r.parentNode}return null})},index:function(a){if(!a||typeof a=== -"string")return c.inArray(this[0],a?c(a):this.parent().children());return c.inArray(a.jquery?a[0]:a,this)},add:function(a,b){a=typeof a==="string"?c(a,b||this.context):c.makeArray(a);b=c.merge(this.get(),a);return this.pushStack(qa(a[0])||qa(b[0])?b:c.unique(b))},andSelf:function(){return this.add(this.prevObject)}});c.each({parent:function(a){return(a=a.parentNode)&&a.nodeType!==11?a:null},parents:function(a){return c.dir(a,"parentNode")},parentsUntil:function(a,b,d){return c.dir(a,"parentNode", -d)},next:function(a){return c.nth(a,2,"nextSibling")},prev:function(a){return c.nth(a,2,"previousSibling")},nextAll:function(a){return c.dir(a,"nextSibling")},prevAll:function(a){return c.dir(a,"previousSibling")},nextUntil:function(a,b,d){return c.dir(a,"nextSibling",d)},prevUntil:function(a,b,d){return c.dir(a,"previousSibling",d)},siblings:function(a){return c.sibling(a.parentNode.firstChild,a)},children:function(a){return c.sibling(a.firstChild)},contents:function(a){return c.nodeName(a,"iframe")? -a.contentDocument||a.contentWindow.document:c.makeArray(a.childNodes)}},function(a,b){c.fn[a]=function(d,f){var e=c.map(this,b,d);eb.test(a)||(f=d);if(f&&typeof f==="string")e=c.filter(f,e);e=this.length>1?c.unique(e):e;if((this.length>1||gb.test(f))&&fb.test(a))e=e.reverse();return this.pushStack(e,a,R.call(arguments).join(","))}});c.extend({filter:function(a,b,d){if(d)a=":not("+a+")";return c.find.matches(a,b)},dir:function(a,b,d){var f=[];for(a=a[b];a&&a.nodeType!==9&&(d===w||a.nodeType!==1||!c(a).is(d));){a.nodeType=== -1&&f.push(a);a=a[b]}return f},nth:function(a,b,d){b=b||1;for(var f=0;a;a=a[d])if(a.nodeType===1&&++f===b)break;return a},sibling:function(a,b){for(var d=[];a;a=a.nextSibling)a.nodeType===1&&a!==b&&d.push(a);return d}});var Ja=/ jQuery\d+="(?:\d+|null)"/g,V=/^\s+/,Ka=/(<([\w:]+)[^>]*?)\/>/g,hb=/^(?:area|br|col|embed|hr|img|input|link|meta|param)$/i,La=/<([\w:]+)/,ib=/"},F={option:[1,""],legend:[1,"
          ","
          "],thead:[1,"","
          "],tr:[2,"","
          "],td:[3,"","
          "],col:[2,"","
          "],area:[1,"",""],_default:[0,"",""]};F.optgroup=F.option;F.tbody=F.tfoot=F.colgroup=F.caption=F.thead;F.th=F.td;if(!c.support.htmlSerialize)F._default=[1,"div
          ","
          "];c.fn.extend({text:function(a){if(c.isFunction(a))return this.each(function(b){var d= -c(this);d.text(a.call(this,b,d.text()))});if(typeof a!=="object"&&a!==w)return this.empty().append((this[0]&&this[0].ownerDocument||s).createTextNode(a));return c.text(this)},wrapAll:function(a){if(c.isFunction(a))return this.each(function(d){c(this).wrapAll(a.call(this,d))});if(this[0]){var b=c(a,this[0].ownerDocument).eq(0).clone(true);this[0].parentNode&&b.insertBefore(this[0]);b.map(function(){for(var d=this;d.firstChild&&d.firstChild.nodeType===1;)d=d.firstChild;return d}).append(this)}return this}, -wrapInner:function(a){if(c.isFunction(a))return this.each(function(b){c(this).wrapInner(a.call(this,b))});return this.each(function(){var b=c(this),d=b.contents();d.length?d.wrapAll(a):b.append(a)})},wrap:function(a){return this.each(function(){c(this).wrapAll(a)})},unwrap:function(){return this.parent().each(function(){c.nodeName(this,"body")||c(this).replaceWith(this.childNodes)}).end()},append:function(){return this.domManip(arguments,true,function(a){this.nodeType===1&&this.appendChild(a)})}, -prepend:function(){return this.domManip(arguments,true,function(a){this.nodeType===1&&this.insertBefore(a,this.firstChild)})},before:function(){if(this[0]&&this[0].parentNode)return this.domManip(arguments,false,function(b){this.parentNode.insertBefore(b,this)});else if(arguments.length){var a=c(arguments[0]);a.push.apply(a,this.toArray());return this.pushStack(a,"before",arguments)}},after:function(){if(this[0]&&this[0].parentNode)return this.domManip(arguments,false,function(b){this.parentNode.insertBefore(b, -this.nextSibling)});else if(arguments.length){var a=this.pushStack(this,"after",arguments);a.push.apply(a,c(arguments[0]).toArray());return a}},remove:function(a,b){for(var d=0,f;(f=this[d])!=null;d++)if(!a||c.filter(a,[f]).length){if(!b&&f.nodeType===1){c.cleanData(f.getElementsByTagName("*"));c.cleanData([f])}f.parentNode&&f.parentNode.removeChild(f)}return this},empty:function(){for(var a=0,b;(b=this[a])!=null;a++)for(b.nodeType===1&&c.cleanData(b.getElementsByTagName("*"));b.firstChild;)b.removeChild(b.firstChild); -return this},clone:function(a){var b=this.map(function(){if(!c.support.noCloneEvent&&!c.isXMLDoc(this)){var d=this.outerHTML,f=this.ownerDocument;if(!d){d=f.createElement("div");d.appendChild(this.cloneNode(true));d=d.innerHTML}return c.clean([d.replace(Ja,"").replace(/=([^="'>\s]+\/)>/g,'="$1">').replace(V,"")],f)[0]}else return this.cloneNode(true)});if(a===true){ra(this,b);ra(this.find("*"),b.find("*"))}return b},html:function(a){if(a===w)return this[0]&&this[0].nodeType===1?this[0].innerHTML.replace(Ja, -""):null;else if(typeof a==="string"&&!ta.test(a)&&(c.support.leadingWhitespace||!V.test(a))&&!F[(La.exec(a)||["",""])[1].toLowerCase()]){a=a.replace(Ka,Ma);try{for(var b=0,d=this.length;b0||e.cacheable||this.length>1?k.cloneNode(true):k)}o.length&&c.each(o,Qa)}return this}});c.fragments={};c.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){c.fn[a]=function(d){var f=[];d=c(d);var e=this.length===1&&this[0].parentNode;if(e&&e.nodeType===11&&e.childNodes.length===1&&d.length===1){d[b](this[0]); -return this}else{e=0;for(var j=d.length;e0?this.clone(true):this).get();c.fn[b].apply(c(d[e]),i);f=f.concat(i)}return this.pushStack(f,a,d.selector)}}});c.extend({clean:function(a,b,d,f){b=b||s;if(typeof b.createElement==="undefined")b=b.ownerDocument||b[0]&&b[0].ownerDocument||s;for(var e=[],j=0,i;(i=a[j])!=null;j++){if(typeof i==="number")i+="";if(i){if(typeof i==="string"&&!jb.test(i))i=b.createTextNode(i);else if(typeof i==="string"){i=i.replace(Ka,Ma);var o=(La.exec(i)||["", -""])[1].toLowerCase(),k=F[o]||F._default,n=k[0],r=b.createElement("div");for(r.innerHTML=k[1]+i+k[2];n--;)r=r.lastChild;if(!c.support.tbody){n=ib.test(i);o=o==="table"&&!n?r.firstChild&&r.firstChild.childNodes:k[1]===""&&!n?r.childNodes:[];for(k=o.length-1;k>=0;--k)c.nodeName(o[k],"tbody")&&!o[k].childNodes.length&&o[k].parentNode.removeChild(o[k])}!c.support.leadingWhitespace&&V.test(i)&&r.insertBefore(b.createTextNode(V.exec(i)[0]),r.firstChild);i=r.childNodes}if(i.nodeType)e.push(i);else e= -c.merge(e,i)}}if(d)for(j=0;e[j];j++)if(f&&c.nodeName(e[j],"script")&&(!e[j].type||e[j].type.toLowerCase()==="text/javascript"))f.push(e[j].parentNode?e[j].parentNode.removeChild(e[j]):e[j]);else{e[j].nodeType===1&&e.splice.apply(e,[j+1,0].concat(c.makeArray(e[j].getElementsByTagName("script"))));d.appendChild(e[j])}return e},cleanData:function(a){for(var b,d,f=c.cache,e=c.event.special,j=c.support.deleteExpando,i=0,o;(o=a[i])!=null;i++)if(d=o[c.expando]){b=f[d];if(b.events)for(var k in b.events)e[k]? -c.event.remove(o,k):Ca(o,k,b.handle);if(j)delete o[c.expando];else o.removeAttribute&&o.removeAttribute(c.expando);delete f[d]}}});var kb=/z-?index|font-?weight|opacity|zoom|line-?height/i,Na=/alpha\([^)]*\)/,Oa=/opacity=([^)]*)/,ha=/float/i,ia=/-([a-z])/ig,lb=/([A-Z])/g,mb=/^-?\d+(?:px)?$/i,nb=/^-?\d/,ob={position:"absolute",visibility:"hidden",display:"block"},pb=["Left","Right"],qb=["Top","Bottom"],rb=s.defaultView&&s.defaultView.getComputedStyle,Pa=c.support.cssFloat?"cssFloat":"styleFloat",ja= -function(a,b){return b.toUpperCase()};c.fn.css=function(a,b){return X(this,a,b,true,function(d,f,e){if(e===w)return c.curCSS(d,f);if(typeof e==="number"&&!kb.test(f))e+="px";c.style(d,f,e)})};c.extend({style:function(a,b,d){if(!a||a.nodeType===3||a.nodeType===8)return w;if((b==="width"||b==="height")&&parseFloat(d)<0)d=w;var f=a.style||a,e=d!==w;if(!c.support.opacity&&b==="opacity"){if(e){f.zoom=1;b=parseInt(d,10)+""==="NaN"?"":"alpha(opacity="+d*100+")";a=f.filter||c.curCSS(a,"filter")||"";f.filter= -Na.test(a)?a.replace(Na,b):b}return f.filter&&f.filter.indexOf("opacity=")>=0?parseFloat(Oa.exec(f.filter)[1])/100+"":""}if(ha.test(b))b=Pa;b=b.replace(ia,ja);if(e)f[b]=d;return f[b]},css:function(a,b,d,f){if(b==="width"||b==="height"){var e,j=b==="width"?pb:qb;function i(){e=b==="width"?a.offsetWidth:a.offsetHeight;f!=="border"&&c.each(j,function(){f||(e-=parseFloat(c.curCSS(a,"padding"+this,true))||0);if(f==="margin")e+=parseFloat(c.curCSS(a,"margin"+this,true))||0;else e-=parseFloat(c.curCSS(a, -"border"+this+"Width",true))||0})}a.offsetWidth!==0?i():c.swap(a,ob,i);return Math.max(0,Math.round(e))}return c.curCSS(a,b,d)},curCSS:function(a,b,d){var f,e=a.style;if(!c.support.opacity&&b==="opacity"&&a.currentStyle){f=Oa.test(a.currentStyle.filter||"")?parseFloat(RegExp.$1)/100+"":"";return f===""?"1":f}if(ha.test(b))b=Pa;if(!d&&e&&e[b])f=e[b];else if(rb){if(ha.test(b))b="float";b=b.replace(lb,"-$1").toLowerCase();e=a.ownerDocument.defaultView;if(!e)return null;if(a=e.getComputedStyle(a,null))f= -a.getPropertyValue(b);if(b==="opacity"&&f==="")f="1"}else if(a.currentStyle){d=b.replace(ia,ja);f=a.currentStyle[b]||a.currentStyle[d];if(!mb.test(f)&&nb.test(f)){b=e.left;var j=a.runtimeStyle.left;a.runtimeStyle.left=a.currentStyle.left;e.left=d==="fontSize"?"1em":f||0;f=e.pixelLeft+"px";e.left=b;a.runtimeStyle.left=j}}return f},swap:function(a,b,d){var f={};for(var e in b){f[e]=a.style[e];a.style[e]=b[e]}d.call(a);for(e in b)a.style[e]=f[e]}});if(c.expr&&c.expr.filters){c.expr.filters.hidden=function(a){var b= -a.offsetWidth,d=a.offsetHeight,f=a.nodeName.toLowerCase()==="tr";return b===0&&d===0&&!f?true:b>0&&d>0&&!f?false:c.curCSS(a,"display")==="none"};c.expr.filters.visible=function(a){return!c.expr.filters.hidden(a)}}var sb=J(),tb=//gi,ub=/select|textarea/i,vb=/color|date|datetime|email|hidden|month|number|password|range|search|tel|text|time|url|week/i,N=/=\?(&|$)/,ka=/\?/,wb=/(\?|&)_=.*?(&|$)/,xb=/^(\w+:)?\/\/([^\/?#]+)/,yb=/%20/g,zb=c.fn.load;c.fn.extend({load:function(a,b,d){if(typeof a!== -"string")return zb.call(this,a);else if(!this.length)return this;var f=a.indexOf(" ");if(f>=0){var e=a.slice(f,a.length);a=a.slice(0,f)}f="GET";if(b)if(c.isFunction(b)){d=b;b=null}else if(typeof b==="object"){b=c.param(b,c.ajaxSettings.traditional);f="POST"}var j=this;c.ajax({url:a,type:f,dataType:"html",data:b,complete:function(i,o){if(o==="success"||o==="notmodified")j.html(e?c("
          ").append(i.responseText.replace(tb,"")).find(e):i.responseText);d&&j.each(d,[i.responseText,o,i])}});return this}, -serialize:function(){return c.param(this.serializeArray())},serializeArray:function(){return this.map(function(){return this.elements?c.makeArray(this.elements):this}).filter(function(){return this.name&&!this.disabled&&(this.checked||ub.test(this.nodeName)||vb.test(this.type))}).map(function(a,b){a=c(this).val();return a==null?null:c.isArray(a)?c.map(a,function(d){return{name:b.name,value:d}}):{name:b.name,value:a}}).get()}});c.each("ajaxStart ajaxStop ajaxComplete ajaxError ajaxSuccess ajaxSend".split(" "), -function(a,b){c.fn[b]=function(d){return this.bind(b,d)}});c.extend({get:function(a,b,d,f){if(c.isFunction(b)){f=f||d;d=b;b=null}return c.ajax({type:"GET",url:a,data:b,success:d,dataType:f})},getScript:function(a,b){return c.get(a,null,b,"script")},getJSON:function(a,b,d){return c.get(a,b,d,"json")},post:function(a,b,d,f){if(c.isFunction(b)){f=f||d;d=b;b={}}return c.ajax({type:"POST",url:a,data:b,success:d,dataType:f})},ajaxSetup:function(a){c.extend(c.ajaxSettings,a)},ajaxSettings:{url:location.href, -global:true,type:"GET",contentType:"application/x-www-form-urlencoded",processData:true,async:true,xhr:A.XMLHttpRequest&&(A.location.protocol!=="file:"||!A.ActiveXObject)?function(){return new A.XMLHttpRequest}:function(){try{return new A.ActiveXObject("Microsoft.XMLHTTP")}catch(a){}},accepts:{xml:"application/xml, text/xml",html:"text/html",script:"text/javascript, application/javascript",json:"application/json, text/javascript",text:"text/plain",_default:"*/*"}},lastModified:{},etag:{},ajax:function(a){function b(){e.success&& -e.success.call(k,o,i,x);e.global&&f("ajaxSuccess",[x,e])}function d(){e.complete&&e.complete.call(k,x,i);e.global&&f("ajaxComplete",[x,e]);e.global&&!--c.active&&c.event.trigger("ajaxStop")}function f(q,p){(e.context?c(e.context):c.event).trigger(q,p)}var e=c.extend(true,{},c.ajaxSettings,a),j,i,o,k=a&&a.context||e,n=e.type.toUpperCase();if(e.data&&e.processData&&typeof e.data!=="string")e.data=c.param(e.data,e.traditional);if(e.dataType==="jsonp"){if(n==="GET")N.test(e.url)||(e.url+=(ka.test(e.url)? -"&":"?")+(e.jsonp||"callback")+"=?");else if(!e.data||!N.test(e.data))e.data=(e.data?e.data+"&":"")+(e.jsonp||"callback")+"=?";e.dataType="json"}if(e.dataType==="json"&&(e.data&&N.test(e.data)||N.test(e.url))){j=e.jsonpCallback||"jsonp"+sb++;if(e.data)e.data=(e.data+"").replace(N,"="+j+"$1");e.url=e.url.replace(N,"="+j+"$1");e.dataType="script";A[j]=A[j]||function(q){o=q;b();d();A[j]=w;try{delete A[j]}catch(p){}z&&z.removeChild(C)}}if(e.dataType==="script"&&e.cache===null)e.cache=false;if(e.cache=== -false&&n==="GET"){var r=J(),u=e.url.replace(wb,"$1_="+r+"$2");e.url=u+(u===e.url?(ka.test(e.url)?"&":"?")+"_="+r:"")}if(e.data&&n==="GET")e.url+=(ka.test(e.url)?"&":"?")+e.data;e.global&&!c.active++&&c.event.trigger("ajaxStart");r=(r=xb.exec(e.url))&&(r[1]&&r[1]!==location.protocol||r[2]!==location.host);if(e.dataType==="script"&&n==="GET"&&r){var z=s.getElementsByTagName("head")[0]||s.documentElement,C=s.createElement("script");C.src=e.url;if(e.scriptCharset)C.charset=e.scriptCharset;if(!j){var B= -false;C.onload=C.onreadystatechange=function(){if(!B&&(!this.readyState||this.readyState==="loaded"||this.readyState==="complete")){B=true;b();d();C.onload=C.onreadystatechange=null;z&&C.parentNode&&z.removeChild(C)}}}z.insertBefore(C,z.firstChild);return w}var E=false,x=e.xhr();if(x){e.username?x.open(n,e.url,e.async,e.username,e.password):x.open(n,e.url,e.async);try{if(e.data||a&&a.contentType)x.setRequestHeader("Content-Type",e.contentType);if(e.ifModified){c.lastModified[e.url]&&x.setRequestHeader("If-Modified-Since", -c.lastModified[e.url]);c.etag[e.url]&&x.setRequestHeader("If-None-Match",c.etag[e.url])}r||x.setRequestHeader("X-Requested-With","XMLHttpRequest");x.setRequestHeader("Accept",e.dataType&&e.accepts[e.dataType]?e.accepts[e.dataType]+", */*":e.accepts._default)}catch(ga){}if(e.beforeSend&&e.beforeSend.call(k,x,e)===false){e.global&&!--c.active&&c.event.trigger("ajaxStop");x.abort();return false}e.global&&f("ajaxSend",[x,e]);var g=x.onreadystatechange=function(q){if(!x||x.readyState===0||q==="abort"){E|| -d();E=true;if(x)x.onreadystatechange=c.noop}else if(!E&&x&&(x.readyState===4||q==="timeout")){E=true;x.onreadystatechange=c.noop;i=q==="timeout"?"timeout":!c.httpSuccess(x)?"error":e.ifModified&&c.httpNotModified(x,e.url)?"notmodified":"success";var p;if(i==="success")try{o=c.httpData(x,e.dataType,e)}catch(v){i="parsererror";p=v}if(i==="success"||i==="notmodified")j||b();else c.handleError(e,x,i,p);d();q==="timeout"&&x.abort();if(e.async)x=null}};try{var h=x.abort;x.abort=function(){x&&h.call(x); -g("abort")}}catch(l){}e.async&&e.timeout>0&&setTimeout(function(){x&&!E&&g("timeout")},e.timeout);try{x.send(n==="POST"||n==="PUT"||n==="DELETE"?e.data:null)}catch(m){c.handleError(e,x,null,m);d()}e.async||g();return x}},handleError:function(a,b,d,f){if(a.error)a.error.call(a.context||a,b,d,f);if(a.global)(a.context?c(a.context):c.event).trigger("ajaxError",[b,a,f])},active:0,httpSuccess:function(a){try{return!a.status&&location.protocol==="file:"||a.status>=200&&a.status<300||a.status===304||a.status=== -1223||a.status===0}catch(b){}return false},httpNotModified:function(a,b){var d=a.getResponseHeader("Last-Modified"),f=a.getResponseHeader("Etag");if(d)c.lastModified[b]=d;if(f)c.etag[b]=f;return a.status===304||a.status===0},httpData:function(a,b,d){var f=a.getResponseHeader("content-type")||"",e=b==="xml"||!b&&f.indexOf("xml")>=0;a=e?a.responseXML:a.responseText;e&&a.documentElement.nodeName==="parsererror"&&c.error("parsererror");if(d&&d.dataFilter)a=d.dataFilter(a,b);if(typeof a==="string")if(b=== -"json"||!b&&f.indexOf("json")>=0)a=c.parseJSON(a);else if(b==="script"||!b&&f.indexOf("javascript")>=0)c.globalEval(a);return a},param:function(a,b){function d(i,o){if(c.isArray(o))c.each(o,function(k,n){b||/\[\]$/.test(i)?f(i,n):d(i+"["+(typeof n==="object"||c.isArray(n)?k:"")+"]",n)});else!b&&o!=null&&typeof o==="object"?c.each(o,function(k,n){d(i+"["+k+"]",n)}):f(i,o)}function f(i,o){o=c.isFunction(o)?o():o;e[e.length]=encodeURIComponent(i)+"="+encodeURIComponent(o)}var e=[];if(b===w)b=c.ajaxSettings.traditional; -if(c.isArray(a)||a.jquery)c.each(a,function(){f(this.name,this.value)});else for(var j in a)d(j,a[j]);return e.join("&").replace(yb,"+")}});var la={},Ab=/toggle|show|hide/,Bb=/^([+-]=)?([\d+-.]+)(.*)$/,W,va=[["height","marginTop","marginBottom","paddingTop","paddingBottom"],["width","marginLeft","marginRight","paddingLeft","paddingRight"],["opacity"]];c.fn.extend({show:function(a,b){if(a||a===0)return this.animate(K("show",3),a,b);else{a=0;for(b=this.length;a").appendTo("body");f=e.css("display");if(f==="none")f="block";e.remove();la[d]=f}c.data(this[a],"olddisplay",f)}}a=0;for(b=this.length;a=0;f--)if(d[f].elem===this){b&&d[f](true);d.splice(f,1)}});b||this.dequeue();return this}});c.each({slideDown:K("show",1),slideUp:K("hide",1),slideToggle:K("toggle",1),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"}},function(a,b){c.fn[a]=function(d,f){return this.animate(b,d,f)}});c.extend({speed:function(a,b,d){var f=a&&typeof a==="object"?a:{complete:d||!d&&b||c.isFunction(a)&&a,duration:a,easing:d&&b||b&&!c.isFunction(b)&&b};f.duration=c.fx.off?0:typeof f.duration=== -"number"?f.duration:c.fx.speeds[f.duration]||c.fx.speeds._default;f.old=f.complete;f.complete=function(){f.queue!==false&&c(this).dequeue();c.isFunction(f.old)&&f.old.call(this)};return f},easing:{linear:function(a,b,d,f){return d+f*a},swing:function(a,b,d,f){return(-Math.cos(a*Math.PI)/2+0.5)*f+d}},timers:[],fx:function(a,b,d){this.options=b;this.elem=a;this.prop=d;if(!b.orig)b.orig={}}});c.fx.prototype={update:function(){this.options.step&&this.options.step.call(this.elem,this.now,this);(c.fx.step[this.prop]|| -c.fx.step._default)(this);if((this.prop==="height"||this.prop==="width")&&this.elem.style)this.elem.style.display="block"},cur:function(a){if(this.elem[this.prop]!=null&&(!this.elem.style||this.elem.style[this.prop]==null))return this.elem[this.prop];return(a=parseFloat(c.css(this.elem,this.prop,a)))&&a>-10000?a:parseFloat(c.curCSS(this.elem,this.prop))||0},custom:function(a,b,d){function f(j){return e.step(j)}this.startTime=J();this.start=a;this.end=b;this.unit=d||this.unit||"px";this.now=this.start; -this.pos=this.state=0;var e=this;f.elem=this.elem;if(f()&&c.timers.push(f)&&!W)W=setInterval(c.fx.tick,13)},show:function(){this.options.orig[this.prop]=c.style(this.elem,this.prop);this.options.show=true;this.custom(this.prop==="width"||this.prop==="height"?1:0,this.cur());c(this.elem).show()},hide:function(){this.options.orig[this.prop]=c.style(this.elem,this.prop);this.options.hide=true;this.custom(this.cur(),0)},step:function(a){var b=J(),d=true;if(a||b>=this.options.duration+this.startTime){this.now= -this.end;this.pos=this.state=1;this.update();this.options.curAnim[this.prop]=true;for(var f in this.options.curAnim)if(this.options.curAnim[f]!==true)d=false;if(d){if(this.options.display!=null){this.elem.style.overflow=this.options.overflow;a=c.data(this.elem,"olddisplay");this.elem.style.display=a?a:this.options.display;if(c.css(this.elem,"display")==="none")this.elem.style.display="block"}this.options.hide&&c(this.elem).hide();if(this.options.hide||this.options.show)for(var e in this.options.curAnim)c.style(this.elem, -e,this.options.orig[e]);this.options.complete.call(this.elem)}return false}else{e=b-this.startTime;this.state=e/this.options.duration;a=this.options.easing||(c.easing.swing?"swing":"linear");this.pos=c.easing[this.options.specialEasing&&this.options.specialEasing[this.prop]||a](this.state,e,0,1,this.options.duration);this.now=this.start+(this.end-this.start)*this.pos;this.update()}return true}};c.extend(c.fx,{tick:function(){for(var a=c.timers,b=0;b
          "; -a.insertBefore(b,a.firstChild);d=b.firstChild;f=d.firstChild;e=d.nextSibling.firstChild.firstChild;this.doesNotAddBorder=f.offsetTop!==5;this.doesAddBorderForTableAndCells=e.offsetTop===5;f.style.position="fixed";f.style.top="20px";this.supportsFixedPosition=f.offsetTop===20||f.offsetTop===15;f.style.position=f.style.top="";d.style.overflow="hidden";d.style.position="relative";this.subtractsBorderForOverflowNotVisible=f.offsetTop===-5;this.doesNotIncludeMarginInBodyOffset=a.offsetTop!==j;a.removeChild(b); -c.offset.initialize=c.noop},bodyOffset:function(a){var b=a.offsetTop,d=a.offsetLeft;c.offset.initialize();if(c.offset.doesNotIncludeMarginInBodyOffset){b+=parseFloat(c.curCSS(a,"marginTop",true))||0;d+=parseFloat(c.curCSS(a,"marginLeft",true))||0}return{top:b,left:d}},setOffset:function(a,b,d){if(/static/.test(c.curCSS(a,"position")))a.style.position="relative";var f=c(a),e=f.offset(),j=parseInt(c.curCSS(a,"top",true),10)||0,i=parseInt(c.curCSS(a,"left",true),10)||0;if(c.isFunction(b))b=b.call(a, -d,e);d={top:b.top-e.top+j,left:b.left-e.left+i};"using"in b?b.using.call(a,d):f.css(d)}};c.fn.extend({position:function(){if(!this[0])return null;var a=this[0],b=this.offsetParent(),d=this.offset(),f=/^body|html$/i.test(b[0].nodeName)?{top:0,left:0}:b.offset();d.top-=parseFloat(c.curCSS(a,"marginTop",true))||0;d.left-=parseFloat(c.curCSS(a,"marginLeft",true))||0;f.top+=parseFloat(c.curCSS(b[0],"borderTopWidth",true))||0;f.left+=parseFloat(c.curCSS(b[0],"borderLeftWidth",true))||0;return{top:d.top- -f.top,left:d.left-f.left}},offsetParent:function(){return this.map(function(){for(var a=this.offsetParent||s.body;a&&!/^body|html$/i.test(a.nodeName)&&c.css(a,"position")==="static";)a=a.offsetParent;return a})}});c.each(["Left","Top"],function(a,b){var d="scroll"+b;c.fn[d]=function(f){var e=this[0],j;if(!e)return null;if(f!==w)return this.each(function(){if(j=wa(this))j.scrollTo(!a?f:c(j).scrollLeft(),a?f:c(j).scrollTop());else this[d]=f});else return(j=wa(e))?"pageXOffset"in j?j[a?"pageYOffset": -"pageXOffset"]:c.support.boxModel&&j.document.documentElement[d]||j.document.body[d]:e[d]}});c.each(["Height","Width"],function(a,b){var d=b.toLowerCase();c.fn["inner"+b]=function(){return this[0]?c.css(this[0],d,false,"padding"):null};c.fn["outer"+b]=function(f){return this[0]?c.css(this[0],d,false,f?"margin":"border"):null};c.fn[d]=function(f){var e=this[0];if(!e)return f==null?null:this;if(c.isFunction(f))return this.each(function(j){var i=c(this);i[d](f.call(this,j,i[d]()))});return"scrollTo"in -e&&e.document?e.document.compatMode==="CSS1Compat"&&e.document.documentElement["client"+b]||e.document.body["client"+b]:e.nodeType===9?Math.max(e.documentElement["client"+b],e.body["scroll"+b],e.documentElement["scroll"+b],e.body["offset"+b],e.documentElement["offset"+b]):f===w?c.css(e,d):this.css(d,typeof f==="string"?f:f+"px")}});A.jQuery=A.$=c})(window); diff --git a/docs/Saml2/js/jquery-1.7.1.min.js b/docs/Saml2/js/jquery-1.7.1.min.js deleted file mode 100644 index 6ede59ce..00000000 --- a/docs/Saml2/js/jquery-1.7.1.min.js +++ /dev/null @@ -1,9270 +0,0 @@ -/* - * Downloaded from http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.js, 2012-02-04 23:26 - */ - -/*! - * jQuery JavaScript Library v1.7.1 - * http://jquery.com/ - * - * Copyright 2011, John Resig - * Dual licensed under the MIT or GPL Version 2 licenses. - * http://jquery.org/license - * - * Includes Sizzle.js - * http://sizzlejs.com/ - * Copyright 2011, The Dojo Foundation - * Released under the MIT, BSD, and GPL Licenses. - * - * Date: Mon Nov 21 21:11:03 2011 -0500 - */ -(function( window, undefined ) { - -// Use the correct document accordingly with window argument (sandbox) -var document = window.document, - navigator = window.navigator, - location = window.location; -var jQuery = (function() { - -// Define a local copy of jQuery -var jQuery = function( selector, context ) { - // The jQuery object is actually just the init constructor 'enhanced' - return new jQuery.fn.init( selector, context, rootjQuery ); - }, - - // Map over jQuery in case of overwrite - _jQuery = window.jQuery, - - // Map over the $ in case of overwrite - _$ = window.$, - - // A central reference to the root jQuery(document) - rootjQuery, - - // A simple way to check for HTML strings or ID strings - // Prioritize #id over to avoid XSS via location.hash (#9521) - quickExpr = /^(?:[^#<]*(<[\w\W]+>)[^>]*$|#([\w\-]*)$)/, - - // Check if a string has a non-whitespace character in it - rnotwhite = /\S/, - - // Used for trimming whitespace - trimLeft = /^\s+/, - trimRight = /\s+$/, - - // Match a standalone tag - rsingleTag = /^<(\w+)\s*\/?>(?:<\/\1>)?$/, - - // JSON RegExp - rvalidchars = /^[\],:{}\s]*$/, - rvalidescape = /\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g, - rvalidtokens = /"[^"\\\n\r]*"|true|false|null|-?\d+(?:\.\d*)?(?:[eE][+\-]?\d+)?/g, - rvalidbraces = /(?:^|:|,)(?:\s*\[)+/g, - - // Useragent RegExp - rwebkit = /(webkit)[ \/]([\w.]+)/, - ropera = /(opera)(?:.*version)?[ \/]([\w.]+)/, - rmsie = /(msie) ([\w.]+)/, - rmozilla = /(mozilla)(?:.*? rv:([\w.]+))?/, - - // Matches dashed string for camelizing - rdashAlpha = /-([a-z]|[0-9])/ig, - rmsPrefix = /^-ms-/, - - // Used by jQuery.camelCase as callback to replace() - fcamelCase = function( all, letter ) { - return ( letter + "" ).toUpperCase(); - }, - - // Keep a UserAgent string for use with jQuery.browser - userAgent = navigator.userAgent, - - // For matching the engine and version of the browser - browserMatch, - - // The deferred used on DOM ready - readyList, - - // The ready event handler - DOMContentLoaded, - - // Save a reference to some core methods - toString = Object.prototype.toString, - hasOwn = Object.prototype.hasOwnProperty, - push = Array.prototype.push, - slice = Array.prototype.slice, - trim = String.prototype.trim, - indexOf = Array.prototype.indexOf, - - // [[Class]] -> type pairs - class2type = {}; - -jQuery.fn = jQuery.prototype = { - constructor: jQuery, - init: function( selector, context, rootjQuery ) { - var match, elem, ret, doc; - - // Handle $(""), $(null), or $(undefined) - if ( !selector ) { - return this; - } - - // Handle $(DOMElement) - if ( selector.nodeType ) { - this.context = this[0] = selector; - this.length = 1; - return this; - } - - // The body element only exists once, optimize finding it - if ( selector === "body" && !context && document.body ) { - this.context = document; - this[0] = document.body; - this.selector = selector; - this.length = 1; - return this; - } - - // Handle HTML strings - if ( typeof selector === "string" ) { - // Are we dealing with HTML string or an ID? - if ( selector.charAt(0) === "<" && selector.charAt( selector.length - 1 ) === ">" && selector.length >= 3 ) { - // Assume that strings that start and end with <> are HTML and skip the regex check - match = [ null, selector, null ]; - - } else { - match = quickExpr.exec( selector ); - } - - // Verify a match, and that no context was specified for #id - if ( match && (match[1] || !context) ) { - - // HANDLE: $(html) -> $(array) - if ( match[1] ) { - context = context instanceof jQuery ? context[0] : context; - doc = ( context ? context.ownerDocument || context : document ); - - // If a single string is passed in and it's a single tag - // just do a createElement and skip the rest - ret = rsingleTag.exec( selector ); - - if ( ret ) { - if ( jQuery.isPlainObject( context ) ) { - selector = [ document.createElement( ret[1] ) ]; - jQuery.fn.attr.call( selector, context, true ); - - } else { - selector = [ doc.createElement( ret[1] ) ]; - } - - } else { - ret = jQuery.buildFragment( [ match[1] ], [ doc ] ); - selector = ( ret.cacheable ? jQuery.clone(ret.fragment) : ret.fragment ).childNodes; - } - - return jQuery.merge( this, selector ); - - // HANDLE: $("#id") - } else { - elem = document.getElementById( match[2] ); - - // Check parentNode to catch when Blackberry 4.6 returns - // nodes that are no longer in the document #6963 - if ( elem && elem.parentNode ) { - // Handle the case where IE and Opera return items - // by name instead of ID - if ( elem.id !== match[2] ) { - return rootjQuery.find( selector ); - } - - // Otherwise, we inject the element directly into the jQuery object - this.length = 1; - this[0] = elem; - } - - this.context = document; - this.selector = selector; - return this; - } - - // HANDLE: $(expr, $(...)) - } else if ( !context || context.jquery ) { - return ( context || rootjQuery ).find( selector ); - - // HANDLE: $(expr, context) - // (which is just equivalent to: $(context).find(expr) - } else { - return this.constructor( context ).find( selector ); - } - - // HANDLE: $(function) - // Shortcut for document ready - } else if ( jQuery.isFunction( selector ) ) { - return rootjQuery.ready( selector ); - } - - if ( selector.selector !== undefined ) { - this.selector = selector.selector; - this.context = selector.context; - } - - return jQuery.makeArray( selector, this ); - }, - - // Start with an empty selector - selector: "", - - // The current version of jQuery being used - jquery: "1.7.1", - - // The default length of a jQuery object is 0 - length: 0, - - // The number of elements contained in the matched element set - size: function() { - return this.length; - }, - - toArray: function() { - return slice.call( this, 0 ); - }, - - // Get the Nth element in the matched element set OR - // Get the whole matched element set as a clean array - get: function( num ) { - return num == null ? - - // Return a 'clean' array - this.toArray() : - - // Return just the object - ( num < 0 ? this[ this.length + num ] : this[ num ] ); - }, - - // Take an array of elements and push it onto the stack - // (returning the new matched element set) - pushStack: function( elems, name, selector ) { - // Build a new jQuery matched element set - var ret = this.constructor(); - - if ( jQuery.isArray( elems ) ) { - push.apply( ret, elems ); - - } else { - jQuery.merge( ret, elems ); - } - - // Add the old object onto the stack (as a reference) - ret.prevObject = this; - - ret.context = this.context; - - if ( name === "find" ) { - ret.selector = this.selector + ( this.selector ? " " : "" ) + selector; - } else if ( name ) { - ret.selector = this.selector + "." + name + "(" + selector + ")"; - } - - // Return the newly-formed element set - return ret; - }, - - // Execute a callback for every element in the matched set. - // (You can seed the arguments with an array of args, but this is - // only used internally.) - each: function( callback, args ) { - return jQuery.each( this, callback, args ); - }, - - ready: function( fn ) { - // Attach the listeners - jQuery.bindReady(); - - // Add the callback - readyList.add( fn ); - - return this; - }, - - eq: function( i ) { - i = +i; - return i === -1 ? - this.slice( i ) : - this.slice( i, i + 1 ); - }, - - first: function() { - return this.eq( 0 ); - }, - - last: function() { - return this.eq( -1 ); - }, - - slice: function() { - return this.pushStack( slice.apply( this, arguments ), - "slice", slice.call(arguments).join(",") ); - }, - - map: function( callback ) { - return this.pushStack( jQuery.map(this, function( elem, i ) { - return callback.call( elem, i, elem ); - })); - }, - - end: function() { - return this.prevObject || this.constructor(null); - }, - - // For internal use only. - // Behaves like an Array's method, not like a jQuery method. - push: push, - sort: [].sort, - splice: [].splice -}; - -// Give the init function the jQuery prototype for later instantiation -jQuery.fn.init.prototype = jQuery.fn; - -jQuery.extend = jQuery.fn.extend = function() { - var options, name, src, copy, copyIsArray, clone, - target = arguments[0] || {}, - i = 1, - length = arguments.length, - deep = false; - - // Handle a deep copy situation - if ( typeof target === "boolean" ) { - deep = target; - target = arguments[1] || {}; - // skip the boolean and the target - i = 2; - } - - // Handle case when target is a string or something (possible in deep copy) - if ( typeof target !== "object" && !jQuery.isFunction(target) ) { - target = {}; - } - - // extend jQuery itself if only one argument is passed - if ( length === i ) { - target = this; - --i; - } - - for ( ; i < length; i++ ) { - // Only deal with non-null/undefined values - if ( (options = arguments[ i ]) != null ) { - // Extend the base object - for ( name in options ) { - src = target[ name ]; - copy = options[ name ]; - - // Prevent never-ending loop - if ( target === copy ) { - continue; - } - - // Recurse if we're merging plain objects or arrays - if ( deep && copy && ( jQuery.isPlainObject(copy) || (copyIsArray = jQuery.isArray(copy)) ) ) { - if ( copyIsArray ) { - copyIsArray = false; - clone = src && jQuery.isArray(src) ? src : []; - - } else { - clone = src && jQuery.isPlainObject(src) ? src : {}; - } - - // Never move original objects, clone them - target[ name ] = jQuery.extend( deep, clone, copy ); - - // Don't bring in undefined values - } else if ( copy !== undefined ) { - target[ name ] = copy; - } - } - } - } - - // Return the modified object - return target; -}; - -jQuery.extend({ - noConflict: function( deep ) { - if ( window.$ === jQuery ) { - window.$ = _$; - } - - if ( deep && window.jQuery === jQuery ) { - window.jQuery = _jQuery; - } - - return jQuery; - }, - - // Is the DOM ready to be used? Set to true once it occurs. - isReady: false, - - // A counter to track how many items to wait for before - // the ready event fires. See #6781 - readyWait: 1, - - // Hold (or release) the ready event - holdReady: function( hold ) { - if ( hold ) { - jQuery.readyWait++; - } else { - jQuery.ready( true ); - } - }, - - // Handle when the DOM is ready - ready: function( wait ) { - // Either a released hold or an DOMready/load event and not yet ready - if ( (wait === true && !--jQuery.readyWait) || (wait !== true && !jQuery.isReady) ) { - // Make sure body exists, at least, in case IE gets a little overzealous (ticket #5443). - if ( !document.body ) { - return setTimeout( jQuery.ready, 1 ); - } - - // Remember that the DOM is ready - jQuery.isReady = true; - - // If a normal DOM Ready event fired, decrement, and wait if need be - if ( wait !== true && --jQuery.readyWait > 0 ) { - return; - } - - // If there are functions bound, to execute - readyList.fireWith( document, [ jQuery ] ); - - // Trigger any bound ready events - if ( jQuery.fn.trigger ) { - jQuery( document ).trigger( "ready" ).off( "ready" ); - } - } - }, - - bindReady: function() { - if ( readyList ) { - return; - } - - readyList = jQuery.Callbacks( "once memory" ); - - // Catch cases where $(document).ready() is called after the - // browser event has already occurred. - if ( document.readyState === "complete" ) { - // Handle it asynchronously to allow scripts the opportunity to delay ready - return setTimeout( jQuery.ready, 1 ); - } - - // Mozilla, Opera and webkit nightlies currently support this event - if ( document.addEventListener ) { - // Use the handy event callback - document.addEventListener( "DOMContentLoaded", DOMContentLoaded, false ); - - // A fallback to window.onload, that will always work - window.addEventListener( "load", jQuery.ready, false ); - - // If IE event model is used - } else if ( document.attachEvent ) { - // ensure firing before onload, - // maybe late but safe also for iframes - document.attachEvent( "onreadystatechange", DOMContentLoaded ); - - // A fallback to window.onload, that will always work - window.attachEvent( "onload", jQuery.ready ); - - // If IE and not a frame - // continually check to see if the document is ready - var toplevel = false; - - try { - toplevel = window.frameElement == null; - } catch(e) {} - - if ( document.documentElement.doScroll && toplevel ) { - doScrollCheck(); - } - } - }, - - // See test/unit/core.js for details concerning isFunction. - // Since version 1.3, DOM methods and functions like alert - // aren't supported. They return false on IE (#2968). - isFunction: function( obj ) { - return jQuery.type(obj) === "function"; - }, - - isArray: Array.isArray || function( obj ) { - return jQuery.type(obj) === "array"; - }, - - // A crude way of determining if an object is a window - isWindow: function( obj ) { - return obj && typeof obj === "object" && "setInterval" in obj; - }, - - isNumeric: function( obj ) { - return !isNaN( parseFloat(obj) ) && isFinite( obj ); - }, - - type: function( obj ) { - return obj == null ? - String( obj ) : - class2type[ toString.call(obj) ] || "object"; - }, - - isPlainObject: function( obj ) { - // Must be an Object. - // Because of IE, we also have to check the presence of the constructor property. - // Make sure that DOM nodes and window objects don't pass through, as well - if ( !obj || jQuery.type(obj) !== "object" || obj.nodeType || jQuery.isWindow( obj ) ) { - return false; - } - - try { - // Not own constructor property must be Object - if ( obj.constructor && - !hasOwn.call(obj, "constructor") && - !hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) { - return false; - } - } catch ( e ) { - // IE8,9 Will throw exceptions on certain host objects #9897 - return false; - } - - // Own properties are enumerated firstly, so to speed up, - // if last one is own, then all properties are own. - - var key; - for ( key in obj ) {} - - return key === undefined || hasOwn.call( obj, key ); - }, - - isEmptyObject: function( obj ) { - for ( var name in obj ) { - return false; - } - return true; - }, - - error: function( msg ) { - throw new Error( msg ); - }, - - parseJSON: function( data ) { - if ( typeof data !== "string" || !data ) { - return null; - } - - // Make sure leading/trailing whitespace is removed (IE can't handle it) - data = jQuery.trim( data ); - - // Attempt to parse using the native JSON parser first - if ( window.JSON && window.JSON.parse ) { - return window.JSON.parse( data ); - } - - // Make sure the incoming data is actual JSON - // Logic borrowed from http://json.org/json2.js - if ( rvalidchars.test( data.replace( rvalidescape, "@" ) - .replace( rvalidtokens, "]" ) - .replace( rvalidbraces, "")) ) { - - return ( new Function( "return " + data ) )(); - - } - jQuery.error( "Invalid JSON: " + data ); - }, - - // Cross-browser xml parsing - parseXML: function( data ) { - var xml, tmp; - try { - if ( window.DOMParser ) { // Standard - tmp = new DOMParser(); - xml = tmp.parseFromString( data , "text/xml" ); - } else { // IE - xml = new ActiveXObject( "Microsoft.XMLDOM" ); - xml.async = "false"; - xml.loadXML( data ); - } - } catch( e ) { - xml = undefined; - } - if ( !xml || !xml.documentElement || xml.getElementsByTagName( "parsererror" ).length ) { - jQuery.error( "Invalid XML: " + data ); - } - return xml; - }, - - noop: function() {}, - - // Evaluates a script in a global context - // Workarounds based on findings by Jim Driscoll - // http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context - globalEval: function( data ) { - if ( data && rnotwhite.test( data ) ) { - // We use execScript on Internet Explorer - // We use an anonymous function so that context is window - // rather than jQuery in Firefox - ( window.execScript || function( data ) { - window[ "eval" ].call( window, data ); - } )( data ); - } - }, - - // Convert dashed to camelCase; used by the css and data modules - // Microsoft forgot to hump their vendor prefix (#9572) - camelCase: function( string ) { - return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase ); - }, - - nodeName: function( elem, name ) { - return elem.nodeName && elem.nodeName.toUpperCase() === name.toUpperCase(); - }, - - // args is for internal usage only - each: function( object, callback, args ) { - var name, i = 0, - length = object.length, - isObj = length === undefined || jQuery.isFunction( object ); - - if ( args ) { - if ( isObj ) { - for ( name in object ) { - if ( callback.apply( object[ name ], args ) === false ) { - break; - } - } - } else { - for ( ; i < length; ) { - if ( callback.apply( object[ i++ ], args ) === false ) { - break; - } - } - } - - // A special, fast, case for the most common use of each - } else { - if ( isObj ) { - for ( name in object ) { - if ( callback.call( object[ name ], name, object[ name ] ) === false ) { - break; - } - } - } else { - for ( ; i < length; ) { - if ( callback.call( object[ i ], i, object[ i++ ] ) === false ) { - break; - } - } - } - } - - return object; - }, - - // Use native String.trim function wherever possible - trim: trim ? - function( text ) { - return text == null ? - "" : - trim.call( text ); - } : - - // Otherwise use our own trimming functionality - function( text ) { - return text == null ? - "" : - text.toString().replace( trimLeft, "" ).replace( trimRight, "" ); - }, - - // results is for internal usage only - makeArray: function( array, results ) { - var ret = results || []; - - if ( array != null ) { - // The window, strings (and functions) also have 'length' - // Tweaked logic slightly to handle Blackberry 4.7 RegExp issues #6930 - var type = jQuery.type( array ); - - if ( array.length == null || type === "string" || type === "function" || type === "regexp" || jQuery.isWindow( array ) ) { - push.call( ret, array ); - } else { - jQuery.merge( ret, array ); - } - } - - return ret; - }, - - inArray: function( elem, array, i ) { - var len; - - if ( array ) { - if ( indexOf ) { - return indexOf.call( array, elem, i ); - } - - len = array.length; - i = i ? i < 0 ? Math.max( 0, len + i ) : i : 0; - - for ( ; i < len; i++ ) { - // Skip accessing in sparse arrays - if ( i in array && array[ i ] === elem ) { - return i; - } - } - } - - return -1; - }, - - merge: function( first, second ) { - var i = first.length, - j = 0; - - if ( typeof second.length === "number" ) { - for ( var l = second.length; j < l; j++ ) { - first[ i++ ] = second[ j ]; - } - - } else { - while ( second[j] !== undefined ) { - first[ i++ ] = second[ j++ ]; - } - } - - first.length = i; - - return first; - }, - - grep: function( elems, callback, inv ) { - var ret = [], retVal; - inv = !!inv; - - // Go through the array, only saving the items - // that pass the validator function - for ( var i = 0, length = elems.length; i < length; i++ ) { - retVal = !!callback( elems[ i ], i ); - if ( inv !== retVal ) { - ret.push( elems[ i ] ); - } - } - - return ret; - }, - - // arg is for internal usage only - map: function( elems, callback, arg ) { - var value, key, ret = [], - i = 0, - length = elems.length, - // jquery objects are treated as arrays - isArray = elems instanceof jQuery || length !== undefined && typeof length === "number" && ( ( length > 0 && elems[ 0 ] && elems[ length -1 ] ) || length === 0 || jQuery.isArray( elems ) ) ; - - // Go through the array, translating each of the items to their - if ( isArray ) { - for ( ; i < length; i++ ) { - value = callback( elems[ i ], i, arg ); - - if ( value != null ) { - ret[ ret.length ] = value; - } - } - - // Go through every key on the object, - } else { - for ( key in elems ) { - value = callback( elems[ key ], key, arg ); - - if ( value != null ) { - ret[ ret.length ] = value; - } - } - } - - // Flatten any nested arrays - return ret.concat.apply( [], ret ); - }, - - // A global GUID counter for objects - guid: 1, - - // Bind a function to a context, optionally partially applying any - // arguments. - proxy: function( fn, context ) { - if ( typeof context === "string" ) { - var tmp = fn[ context ]; - context = fn; - fn = tmp; - } - - // Quick check to determine if target is callable, in the spec - // this throws a TypeError, but we will just return undefined. - if ( !jQuery.isFunction( fn ) ) { - return undefined; - } - - // Simulated bind - var args = slice.call( arguments, 2 ), - proxy = function() { - return fn.apply( context, args.concat( slice.call( arguments ) ) ); - }; - - // Set the guid of unique handler to the same of original handler, so it can be removed - proxy.guid = fn.guid = fn.guid || proxy.guid || jQuery.guid++; - - return proxy; - }, - - // Mutifunctional method to get and set values to a collection - // The value/s can optionally be executed if it's a function - access: function( elems, key, value, exec, fn, pass ) { - var length = elems.length; - - // Setting many attributes - if ( typeof key === "object" ) { - for ( var k in key ) { - jQuery.access( elems, k, key[k], exec, fn, value ); - } - return elems; - } - - // Setting one attribute - if ( value !== undefined ) { - // Optionally, function values get executed if exec is true - exec = !pass && exec && jQuery.isFunction(value); - - for ( var i = 0; i < length; i++ ) { - fn( elems[i], key, exec ? value.call( elems[i], i, fn( elems[i], key ) ) : value, pass ); - } - - return elems; - } - - // Getting an attribute - return length ? fn( elems[0], key ) : undefined; - }, - - now: function() { - return ( new Date() ).getTime(); - }, - - // Use of jQuery.browser is frowned upon. - // More details: http://docs.jquery.com/Utilities/jQuery.browser - uaMatch: function( ua ) { - ua = ua.toLowerCase(); - - var match = rwebkit.exec( ua ) || - ropera.exec( ua ) || - rmsie.exec( ua ) || - ua.indexOf("compatible") < 0 && rmozilla.exec( ua ) || - []; - - return { browser: match[1] || "", version: match[2] || "0" }; - }, - - sub: function() { - function jQuerySub( selector, context ) { - return new jQuerySub.fn.init( selector, context ); - } - jQuery.extend( true, jQuerySub, this ); - jQuerySub.superclass = this; - jQuerySub.fn = jQuerySub.prototype = this(); - jQuerySub.fn.constructor = jQuerySub; - jQuerySub.sub = this.sub; - jQuerySub.fn.init = function init( selector, context ) { - if ( context && context instanceof jQuery && !(context instanceof jQuerySub) ) { - context = jQuerySub( context ); - } - - return jQuery.fn.init.call( this, selector, context, rootjQuerySub ); - }; - jQuerySub.fn.init.prototype = jQuerySub.fn; - var rootjQuerySub = jQuerySub(document); - return jQuerySub; - }, - - browser: {} -}); - -// Populate the class2type map -jQuery.each("Boolean Number String Function Array Date RegExp Object".split(" "), function(i, name) { - class2type[ "[object " + name + "]" ] = name.toLowerCase(); -}); - -browserMatch = jQuery.uaMatch( userAgent ); -if ( browserMatch.browser ) { - jQuery.browser[ browserMatch.browser ] = true; - jQuery.browser.version = browserMatch.version; -} - -// Deprecated, use jQuery.browser.webkit instead -if ( jQuery.browser.webkit ) { - jQuery.browser.safari = true; -} - -// IE doesn't match non-breaking spaces with \s -if ( rnotwhite.test( "\xA0" ) ) { - trimLeft = /^[\s\xA0]+/; - trimRight = /[\s\xA0]+$/; -} - -// All jQuery objects should point back to these -rootjQuery = jQuery(document); - -// Cleanup functions for the document ready method -if ( document.addEventListener ) { - DOMContentLoaded = function() { - document.removeEventListener( "DOMContentLoaded", DOMContentLoaded, false ); - jQuery.ready(); - }; - -} else if ( document.attachEvent ) { - DOMContentLoaded = function() { - // Make sure body exists, at least, in case IE gets a little overzealous (ticket #5443). - if ( document.readyState === "complete" ) { - document.detachEvent( "onreadystatechange", DOMContentLoaded ); - jQuery.ready(); - } - }; -} - -// The DOM ready check for Internet Explorer -function doScrollCheck() { - if ( jQuery.isReady ) { - return; - } - - try { - // If IE is used, use the trick by Diego Perini - // http://javascript.nwbox.com/IEContentLoaded/ - document.documentElement.doScroll("left"); - } catch(e) { - setTimeout( doScrollCheck, 1 ); - return; - } - - // and execute any waiting functions - jQuery.ready(); -} - -return jQuery; - -})(); - - -// String to Object flags format cache -var flagsCache = {}; - -// Convert String-formatted flags into Object-formatted ones and store in cache -function createFlags( flags ) { - var object = flagsCache[ flags ] = {}, - i, length; - flags = flags.split( /\s+/ ); - for ( i = 0, length = flags.length; i < length; i++ ) { - object[ flags[i] ] = true; - } - return object; -} - -/* - * Create a callback list using the following parameters: - * - * flags: an optional list of space-separated flags that will change how - * the callback list behaves - * - * By default a callback list will act like an event callback list and can be - * "fired" multiple times. - * - * Possible flags: - * - * once: will ensure the callback list can only be fired once (like a Deferred) - * - * memory: will keep track of previous values and will call any callback added - * after the list has been fired right away with the latest "memorized" - * values (like a Deferred) - * - * unique: will ensure a callback can only be added once (no duplicate in the list) - * - * stopOnFalse: interrupt callings when a callback returns false - * - */ -jQuery.Callbacks = function( flags ) { - - // Convert flags from String-formatted to Object-formatted - // (we check in cache first) - flags = flags ? ( flagsCache[ flags ] || createFlags( flags ) ) : {}; - - var // Actual callback list - list = [], - // Stack of fire calls for repeatable lists - stack = [], - // Last fire value (for non-forgettable lists) - memory, - // Flag to know if list is currently firing - firing, - // First callback to fire (used internally by add and fireWith) - firingStart, - // End of the loop when firing - firingLength, - // Index of currently firing callback (modified by remove if needed) - firingIndex, - // Add one or several callbacks to the list - add = function( args ) { - var i, - length, - elem, - type, - actual; - for ( i = 0, length = args.length; i < length; i++ ) { - elem = args[ i ]; - type = jQuery.type( elem ); - if ( type === "array" ) { - // Inspect recursively - add( elem ); - } else if ( type === "function" ) { - // Add if not in unique mode and callback is not in - if ( !flags.unique || !self.has( elem ) ) { - list.push( elem ); - } - } - } - }, - // Fire callbacks - fire = function( context, args ) { - args = args || []; - memory = !flags.memory || [ context, args ]; - firing = true; - firingIndex = firingStart || 0; - firingStart = 0; - firingLength = list.length; - for ( ; list && firingIndex < firingLength; firingIndex++ ) { - if ( list[ firingIndex ].apply( context, args ) === false && flags.stopOnFalse ) { - memory = true; // Mark as halted - break; - } - } - firing = false; - if ( list ) { - if ( !flags.once ) { - if ( stack && stack.length ) { - memory = stack.shift(); - self.fireWith( memory[ 0 ], memory[ 1 ] ); - } - } else if ( memory === true ) { - self.disable(); - } else { - list = []; - } - } - }, - // Actual Callbacks object - self = { - // Add a callback or a collection of callbacks to the list - add: function() { - if ( list ) { - var length = list.length; - add( arguments ); - // Do we need to add the callbacks to the - // current firing batch? - if ( firing ) { - firingLength = list.length; - // With memory, if we're not firing then - // we should call right away, unless previous - // firing was halted (stopOnFalse) - } else if ( memory && memory !== true ) { - firingStart = length; - fire( memory[ 0 ], memory[ 1 ] ); - } - } - return this; - }, - // Remove a callback from the list - remove: function() { - if ( list ) { - var args = arguments, - argIndex = 0, - argLength = args.length; - for ( ; argIndex < argLength ; argIndex++ ) { - for ( var i = 0; i < list.length; i++ ) { - if ( args[ argIndex ] === list[ i ] ) { - // Handle firingIndex and firingLength - if ( firing ) { - if ( i <= firingLength ) { - firingLength--; - if ( i <= firingIndex ) { - firingIndex--; - } - } - } - // Remove the element - list.splice( i--, 1 ); - // If we have some unicity property then - // we only need to do this once - if ( flags.unique ) { - break; - } - } - } - } - } - return this; - }, - // Control if a given callback is in the list - has: function( fn ) { - if ( list ) { - var i = 0, - length = list.length; - for ( ; i < length; i++ ) { - if ( fn === list[ i ] ) { - return true; - } - } - } - return false; - }, - // Remove all callbacks from the list - empty: function() { - list = []; - return this; - }, - // Have the list do nothing anymore - disable: function() { - list = stack = memory = undefined; - return this; - }, - // Is it disabled? - disabled: function() { - return !list; - }, - // Lock the list in its current state - lock: function() { - stack = undefined; - if ( !memory || memory === true ) { - self.disable(); - } - return this; - }, - // Is it locked? - locked: function() { - return !stack; - }, - // Call all callbacks with the given context and arguments - fireWith: function( context, args ) { - if ( stack ) { - if ( firing ) { - if ( !flags.once ) { - stack.push( [ context, args ] ); - } - } else if ( !( flags.once && memory ) ) { - fire( context, args ); - } - } - return this; - }, - // Call all the callbacks with the given arguments - fire: function() { - self.fireWith( this, arguments ); - return this; - }, - // To know if the callbacks have already been called at least once - fired: function() { - return !!memory; - } - }; - - return self; -}; - - - - -var // Static reference to slice - sliceDeferred = [].slice; - -jQuery.extend({ - - Deferred: function( func ) { - var doneList = jQuery.Callbacks( "once memory" ), - failList = jQuery.Callbacks( "once memory" ), - progressList = jQuery.Callbacks( "memory" ), - state = "pending", - lists = { - resolve: doneList, - reject: failList, - notify: progressList - }, - promise = { - done: doneList.add, - fail: failList.add, - progress: progressList.add, - - state: function() { - return state; - }, - - // Deprecated - isResolved: doneList.fired, - isRejected: failList.fired, - - then: function( doneCallbacks, failCallbacks, progressCallbacks ) { - deferred.done( doneCallbacks ).fail( failCallbacks ).progress( progressCallbacks ); - return this; - }, - always: function() { - deferred.done.apply( deferred, arguments ).fail.apply( deferred, arguments ); - return this; - }, - pipe: function( fnDone, fnFail, fnProgress ) { - return jQuery.Deferred(function( newDefer ) { - jQuery.each( { - done: [ fnDone, "resolve" ], - fail: [ fnFail, "reject" ], - progress: [ fnProgress, "notify" ] - }, function( handler, data ) { - var fn = data[ 0 ], - action = data[ 1 ], - returned; - if ( jQuery.isFunction( fn ) ) { - deferred[ handler ](function() { - returned = fn.apply( this, arguments ); - if ( returned && jQuery.isFunction( returned.promise ) ) { - returned.promise().then( newDefer.resolve, newDefer.reject, newDefer.notify ); - } else { - newDefer[ action + "With" ]( this === deferred ? newDefer : this, [ returned ] ); - } - }); - } else { - deferred[ handler ]( newDefer[ action ] ); - } - }); - }).promise(); - }, - // Get a promise for this deferred - // If obj is provided, the promise aspect is added to the object - promise: function( obj ) { - if ( obj == null ) { - obj = promise; - } else { - for ( var key in promise ) { - obj[ key ] = promise[ key ]; - } - } - return obj; - } - }, - deferred = promise.promise({}), - key; - - for ( key in lists ) { - deferred[ key ] = lists[ key ].fire; - deferred[ key + "With" ] = lists[ key ].fireWith; - } - - // Handle state - deferred.done( function() { - state = "resolved"; - }, failList.disable, progressList.lock ).fail( function() { - state = "rejected"; - }, doneList.disable, progressList.lock ); - - // Call given func if any - if ( func ) { - func.call( deferred, deferred ); - } - - // All done! - return deferred; - }, - - // Deferred helper - when: function( firstParam ) { - var args = sliceDeferred.call( arguments, 0 ), - i = 0, - length = args.length, - pValues = new Array( length ), - count = length, - pCount = length, - deferred = length <= 1 && firstParam && jQuery.isFunction( firstParam.promise ) ? - firstParam : - jQuery.Deferred(), - promise = deferred.promise(); - function resolveFunc( i ) { - return function( value ) { - args[ i ] = arguments.length > 1 ? sliceDeferred.call( arguments, 0 ) : value; - if ( !( --count ) ) { - deferred.resolveWith( deferred, args ); - } - }; - } - function progressFunc( i ) { - return function( value ) { - pValues[ i ] = arguments.length > 1 ? sliceDeferred.call( arguments, 0 ) : value; - deferred.notifyWith( promise, pValues ); - }; - } - if ( length > 1 ) { - for ( ; i < length; i++ ) { - if ( args[ i ] && args[ i ].promise && jQuery.isFunction( args[ i ].promise ) ) { - args[ i ].promise().then( resolveFunc(i), deferred.reject, progressFunc(i) ); - } else { - --count; - } - } - if ( !count ) { - deferred.resolveWith( deferred, args ); - } - } else if ( deferred !== firstParam ) { - deferred.resolveWith( deferred, length ? [ firstParam ] : [] ); - } - return promise; - } -}); - - - - -jQuery.support = (function() { - - var support, - all, - a, - select, - opt, - input, - marginDiv, - fragment, - tds, - events, - eventName, - i, - isSupported, - div = document.createElement( "div" ), - documentElement = document.documentElement; - - // Preliminary tests - div.setAttribute("className", "t"); - div.innerHTML = "
          a"; - - all = div.getElementsByTagName( "*" ); - a = div.getElementsByTagName( "a" )[ 0 ]; - - // Can't get basic test support - if ( !all || !all.length || !a ) { - return {}; - } - - // First batch of supports tests - select = document.createElement( "select" ); - opt = select.appendChild( document.createElement("option") ); - input = div.getElementsByTagName( "input" )[ 0 ]; - - support = { - // IE strips leading whitespace when .innerHTML is used - leadingWhitespace: ( div.firstChild.nodeType === 3 ), - - // Make sure that tbody elements aren't automatically inserted - // IE will insert them into empty tables - tbody: !div.getElementsByTagName("tbody").length, - - // Make sure that link elements get serialized correctly by innerHTML - // This requires a wrapper element in IE - htmlSerialize: !!div.getElementsByTagName("link").length, - - // Get the style information from getAttribute - // (IE uses .cssText instead) - style: /top/.test( a.getAttribute("style") ), - - // Make sure that URLs aren't manipulated - // (IE normalizes it by default) - hrefNormalized: ( a.getAttribute("href") === "/a" ), - - // Make sure that element opacity exists - // (IE uses filter instead) - // Use a regex to work around a WebKit issue. See #5145 - opacity: /^0.55/.test( a.style.opacity ), - - // Verify style float existence - // (IE uses styleFloat instead of cssFloat) - cssFloat: !!a.style.cssFloat, - - // Make sure that if no value is specified for a checkbox - // that it defaults to "on". - // (WebKit defaults to "" instead) - checkOn: ( input.value === "on" ), - - // Make sure that a selected-by-default option has a working selected property. - // (WebKit defaults to false instead of true, IE too, if it's in an optgroup) - optSelected: opt.selected, - - // Test setAttribute on camelCase class. If it works, we need attrFixes when doing get/setAttribute (ie6/7) - getSetAttribute: div.className !== "t", - - // Tests for enctype support on a form(#6743) - enctype: !!document.createElement("form").enctype, - - // Makes sure cloning an html5 element does not cause problems - // Where outerHTML is undefined, this still works - html5Clone: document.createElement("nav").cloneNode( true ).outerHTML !== "<:nav>", - - // Will be defined later - submitBubbles: true, - changeBubbles: true, - focusinBubbles: false, - deleteExpando: true, - noCloneEvent: true, - inlineBlockNeedsLayout: false, - shrinkWrapBlocks: false, - reliableMarginRight: true - }; - - // Make sure checked status is properly cloned - input.checked = true; - support.noCloneChecked = input.cloneNode( true ).checked; - - // Make sure that the options inside disabled selects aren't marked as disabled - // (WebKit marks them as disabled) - select.disabled = true; - support.optDisabled = !opt.disabled; - - // Test to see if it's possible to delete an expando from an element - // Fails in Internet Explorer - try { - delete div.test; - } catch( e ) { - support.deleteExpando = false; - } - - if ( !div.addEventListener && div.attachEvent && div.fireEvent ) { - div.attachEvent( "onclick", function() { - // Cloning a node shouldn't copy over any - // bound event handlers (IE does this) - support.noCloneEvent = false; - }); - div.cloneNode( true ).fireEvent( "onclick" ); - } - - // Check if a radio maintains its value - // after being appended to the DOM - input = document.createElement("input"); - input.value = "t"; - input.setAttribute("type", "radio"); - support.radioValue = input.value === "t"; - - input.setAttribute("checked", "checked"); - div.appendChild( input ); - fragment = document.createDocumentFragment(); - fragment.appendChild( div.lastChild ); - - // WebKit doesn't clone checked state correctly in fragments - support.checkClone = fragment.cloneNode( true ).cloneNode( true ).lastChild.checked; - - // Check if a disconnected checkbox will retain its checked - // value of true after appended to the DOM (IE6/7) - support.appendChecked = input.checked; - - fragment.removeChild( input ); - fragment.appendChild( div ); - - div.innerHTML = ""; - - // Check if div with explicit width and no margin-right incorrectly - // gets computed margin-right based on width of container. For more - // info see bug #3333 - // Fails in WebKit before Feb 2011 nightlies - // WebKit Bug 13343 - getComputedStyle returns wrong value for margin-right - if ( window.getComputedStyle ) { - marginDiv = document.createElement( "div" ); - marginDiv.style.width = "0"; - marginDiv.style.marginRight = "0"; - div.style.width = "2px"; - div.appendChild( marginDiv ); - support.reliableMarginRight = - ( parseInt( ( window.getComputedStyle( marginDiv, null ) || { marginRight: 0 } ).marginRight, 10 ) || 0 ) === 0; - } - - // Technique from Juriy Zaytsev - // http://perfectionkills.com/detecting-event-support-without-browser-sniffing/ - // We only care about the case where non-standard event systems - // are used, namely in IE. Short-circuiting here helps us to - // avoid an eval call (in setAttribute) which can cause CSP - // to go haywire. See: https://developer.mozilla.org/en/Security/CSP - if ( div.attachEvent ) { - for( i in { - submit: 1, - change: 1, - focusin: 1 - }) { - eventName = "on" + i; - isSupported = ( eventName in div ); - if ( !isSupported ) { - div.setAttribute( eventName, "return;" ); - isSupported = ( typeof div[ eventName ] === "function" ); - } - support[ i + "Bubbles" ] = isSupported; - } - } - - fragment.removeChild( div ); - - // Null elements to avoid leaks in IE - fragment = select = opt = marginDiv = div = input = null; - - // Run tests that need a body at doc ready - jQuery(function() { - var container, outer, inner, table, td, offsetSupport, - conMarginTop, ptlm, vb, style, html, - body = document.getElementsByTagName("body")[0]; - - if ( !body ) { - // Return for frameset docs that don't have a body - return; - } - - conMarginTop = 1; - ptlm = "position:absolute;top:0;left:0;width:1px;height:1px;margin:0;"; - vb = "visibility:hidden;border:0;"; - style = "style='" + ptlm + "border:5px solid #000;padding:0;'"; - html = "
          " + - "" + - "
          "; - - container = document.createElement("div"); - container.style.cssText = vb + "width:0;height:0;position:static;top:0;margin-top:" + conMarginTop + "px"; - body.insertBefore( container, body.firstChild ); - - // Construct the test element - div = document.createElement("div"); - container.appendChild( div ); - - // Check if table cells still have offsetWidth/Height when they are set - // to display:none and there are still other visible table cells in a - // table row; if so, offsetWidth/Height are not reliable for use when - // determining if an element has been hidden directly using - // display:none (it is still safe to use offsets if a parent element is - // hidden; don safety goggles and see bug #4512 for more information). - // (only IE 8 fails this test) - div.innerHTML = "
          t
          "; - tds = div.getElementsByTagName( "td" ); - isSupported = ( tds[ 0 ].offsetHeight === 0 ); - - tds[ 0 ].style.display = ""; - tds[ 1 ].style.display = "none"; - - // Check if empty table cells still have offsetWidth/Height - // (IE <= 8 fail this test) - support.reliableHiddenOffsets = isSupported && ( tds[ 0 ].offsetHeight === 0 ); - - // Figure out if the W3C box model works as expected - div.innerHTML = ""; - div.style.width = div.style.paddingLeft = "1px"; - jQuery.boxModel = support.boxModel = div.offsetWidth === 2; - - if ( typeof div.style.zoom !== "undefined" ) { - // Check if natively block-level elements act like inline-block - // elements when setting their display to 'inline' and giving - // them layout - // (IE < 8 does this) - div.style.display = "inline"; - div.style.zoom = 1; - support.inlineBlockNeedsLayout = ( div.offsetWidth === 2 ); - - // Check if elements with layout shrink-wrap their children - // (IE 6 does this) - div.style.display = ""; - div.innerHTML = "
          "; - support.shrinkWrapBlocks = ( div.offsetWidth !== 2 ); - } - - div.style.cssText = ptlm + vb; - div.innerHTML = html; - - outer = div.firstChild; - inner = outer.firstChild; - td = outer.nextSibling.firstChild.firstChild; - - offsetSupport = { - doesNotAddBorder: ( inner.offsetTop !== 5 ), - doesAddBorderForTableAndCells: ( td.offsetTop === 5 ) - }; - - inner.style.position = "fixed"; - inner.style.top = "20px"; - - // safari subtracts parent border width here which is 5px - offsetSupport.fixedPosition = ( inner.offsetTop === 20 || inner.offsetTop === 15 ); - inner.style.position = inner.style.top = ""; - - outer.style.overflow = "hidden"; - outer.style.position = "relative"; - - offsetSupport.subtractsBorderForOverflowNotVisible = ( inner.offsetTop === -5 ); - offsetSupport.doesNotIncludeMarginInBodyOffset = ( body.offsetTop !== conMarginTop ); - - body.removeChild( container ); - div = container = null; - - jQuery.extend( support, offsetSupport ); - }); - - return support; -})(); - - - - -var rbrace = /^(?:\{.*\}|\[.*\])$/, - rmultiDash = /([A-Z])/g; - -jQuery.extend({ - cache: {}, - - // Please use with caution - uuid: 0, - - // Unique for each copy of jQuery on the page - // Non-digits removed to match rinlinejQuery - expando: "jQuery" + ( jQuery.fn.jquery + Math.random() ).replace( /\D/g, "" ), - - // The following elements throw uncatchable exceptions if you - // attempt to add expando properties to them. - noData: { - "embed": true, - // Ban all objects except for Flash (which handle expandos) - "object": "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000", - "applet": true - }, - - hasData: function( elem ) { - elem = elem.nodeType ? jQuery.cache[ elem[jQuery.expando] ] : elem[ jQuery.expando ]; - return !!elem && !isEmptyDataObject( elem ); - }, - - data: function( elem, name, data, pvt /* Internal Use Only */ ) { - if ( !jQuery.acceptData( elem ) ) { - return; - } - - var privateCache, thisCache, ret, - internalKey = jQuery.expando, - getByName = typeof name === "string", - - // We have to handle DOM nodes and JS objects differently because IE6-7 - // can't GC object references properly across the DOM-JS boundary - isNode = elem.nodeType, - - // Only DOM nodes need the global jQuery cache; JS object data is - // attached directly to the object so GC can occur automatically - cache = isNode ? jQuery.cache : elem, - - // Only defining an ID for JS objects if its cache already exists allows - // the code to shortcut on the same path as a DOM node with no cache - id = isNode ? elem[ internalKey ] : elem[ internalKey ] && internalKey, - isEvents = name === "events"; - - // Avoid doing any more work than we need to when trying to get data on an - // object that has no data at all - if ( (!id || !cache[id] || (!isEvents && !pvt && !cache[id].data)) && getByName && data === undefined ) { - return; - } - - if ( !id ) { - // Only DOM nodes need a new unique ID for each element since their data - // ends up in the global cache - if ( isNode ) { - elem[ internalKey ] = id = ++jQuery.uuid; - } else { - id = internalKey; - } - } - - if ( !cache[ id ] ) { - cache[ id ] = {}; - - // Avoids exposing jQuery metadata on plain JS objects when the object - // is serialized using JSON.stringify - if ( !isNode ) { - cache[ id ].toJSON = jQuery.noop; - } - } - - // An object can be passed to jQuery.data instead of a key/value pair; this gets - // shallow copied over onto the existing cache - if ( typeof name === "object" || typeof name === "function" ) { - if ( pvt ) { - cache[ id ] = jQuery.extend( cache[ id ], name ); - } else { - cache[ id ].data = jQuery.extend( cache[ id ].data, name ); - } - } - - privateCache = thisCache = cache[ id ]; - - // jQuery data() is stored in a separate object inside the object's internal data - // cache in order to avoid key collisions between internal data and user-defined - // data. - if ( !pvt ) { - if ( !thisCache.data ) { - thisCache.data = {}; - } - - thisCache = thisCache.data; - } - - if ( data !== undefined ) { - thisCache[ jQuery.camelCase( name ) ] = data; - } - - // Users should not attempt to inspect the internal events object using jQuery.data, - // it is undocumented and subject to change. But does anyone listen? No. - if ( isEvents && !thisCache[ name ] ) { - return privateCache.events; - } - - // Check for both converted-to-camel and non-converted data property names - // If a data property was specified - if ( getByName ) { - - // First Try to find as-is property data - ret = thisCache[ name ]; - - // Test for null|undefined property data - if ( ret == null ) { - - // Try to find the camelCased property - ret = thisCache[ jQuery.camelCase( name ) ]; - } - } else { - ret = thisCache; - } - - return ret; - }, - - removeData: function( elem, name, pvt /* Internal Use Only */ ) { - if ( !jQuery.acceptData( elem ) ) { - return; - } - - var thisCache, i, l, - - // Reference to internal data cache key - internalKey = jQuery.expando, - - isNode = elem.nodeType, - - // See jQuery.data for more information - cache = isNode ? jQuery.cache : elem, - - // See jQuery.data for more information - id = isNode ? elem[ internalKey ] : internalKey; - - // If there is already no cache entry for this object, there is no - // purpose in continuing - if ( !cache[ id ] ) { - return; - } - - if ( name ) { - - thisCache = pvt ? cache[ id ] : cache[ id ].data; - - if ( thisCache ) { - - // Support array or space separated string names for data keys - if ( !jQuery.isArray( name ) ) { - - // try the string as a key before any manipulation - if ( name in thisCache ) { - name = [ name ]; - } else { - - // split the camel cased version by spaces unless a key with the spaces exists - name = jQuery.camelCase( name ); - if ( name in thisCache ) { - name = [ name ]; - } else { - name = name.split( " " ); - } - } - } - - for ( i = 0, l = name.length; i < l; i++ ) { - delete thisCache[ name[i] ]; - } - - // If there is no data left in the cache, we want to continue - // and let the cache object itself get destroyed - if ( !( pvt ? isEmptyDataObject : jQuery.isEmptyObject )( thisCache ) ) { - return; - } - } - } - - // See jQuery.data for more information - if ( !pvt ) { - delete cache[ id ].data; - - // Don't destroy the parent cache unless the internal data object - // had been the only thing left in it - if ( !isEmptyDataObject(cache[ id ]) ) { - return; - } - } - - // Browsers that fail expando deletion also refuse to delete expandos on - // the window, but it will allow it on all other JS objects; other browsers - // don't care - // Ensure that `cache` is not a window object #10080 - if ( jQuery.support.deleteExpando || !cache.setInterval ) { - delete cache[ id ]; - } else { - cache[ id ] = null; - } - - // We destroyed the cache and need to eliminate the expando on the node to avoid - // false lookups in the cache for entries that no longer exist - if ( isNode ) { - // IE does not allow us to delete expando properties from nodes, - // nor does it have a removeAttribute function on Document nodes; - // we must handle all of these cases - if ( jQuery.support.deleteExpando ) { - delete elem[ internalKey ]; - } else if ( elem.removeAttribute ) { - elem.removeAttribute( internalKey ); - } else { - elem[ internalKey ] = null; - } - } - }, - - // For internal use only. - _data: function( elem, name, data ) { - return jQuery.data( elem, name, data, true ); - }, - - // A method for determining if a DOM node can handle the data expando - acceptData: function( elem ) { - if ( elem.nodeName ) { - var match = jQuery.noData[ elem.nodeName.toLowerCase() ]; - - if ( match ) { - return !(match === true || elem.getAttribute("classid") !== match); - } - } - - return true; - } -}); - -jQuery.fn.extend({ - data: function( key, value ) { - var parts, attr, name, - data = null; - - if ( typeof key === "undefined" ) { - if ( this.length ) { - data = jQuery.data( this[0] ); - - if ( this[0].nodeType === 1 && !jQuery._data( this[0], "parsedAttrs" ) ) { - attr = this[0].attributes; - for ( var i = 0, l = attr.length; i < l; i++ ) { - name = attr[i].name; - - if ( name.indexOf( "data-" ) === 0 ) { - name = jQuery.camelCase( name.substring(5) ); - - dataAttr( this[0], name, data[ name ] ); - } - } - jQuery._data( this[0], "parsedAttrs", true ); - } - } - - return data; - - } else if ( typeof key === "object" ) { - return this.each(function() { - jQuery.data( this, key ); - }); - } - - parts = key.split("."); - parts[1] = parts[1] ? "." + parts[1] : ""; - - if ( value === undefined ) { - data = this.triggerHandler("getData" + parts[1] + "!", [parts[0]]); - - // Try to fetch any internally stored data first - if ( data === undefined && this.length ) { - data = jQuery.data( this[0], key ); - data = dataAttr( this[0], key, data ); - } - - return data === undefined && parts[1] ? - this.data( parts[0] ) : - data; - - } else { - return this.each(function() { - var self = jQuery( this ), - args = [ parts[0], value ]; - - self.triggerHandler( "setData" + parts[1] + "!", args ); - jQuery.data( this, key, value ); - self.triggerHandler( "changeData" + parts[1] + "!", args ); - }); - } - }, - - removeData: function( key ) { - return this.each(function() { - jQuery.removeData( this, key ); - }); - } -}); - -function dataAttr( elem, key, data ) { - // If nothing was found internally, try to fetch any - // data from the HTML5 data-* attribute - if ( data === undefined && elem.nodeType === 1 ) { - - var name = "data-" + key.replace( rmultiDash, "-$1" ).toLowerCase(); - - data = elem.getAttribute( name ); - - if ( typeof data === "string" ) { - try { - data = data === "true" ? true : - data === "false" ? false : - data === "null" ? null : - jQuery.isNumeric( data ) ? parseFloat( data ) : - rbrace.test( data ) ? jQuery.parseJSON( data ) : - data; - } catch( e ) {} - - // Make sure we set the data so it isn't changed later - jQuery.data( elem, key, data ); - - } else { - data = undefined; - } - } - - return data; -} - -// checks a cache object for emptiness -function isEmptyDataObject( obj ) { - for ( var name in obj ) { - - // if the public data object is empty, the private is still empty - if ( name === "data" && jQuery.isEmptyObject( obj[name] ) ) { - continue; - } - if ( name !== "toJSON" ) { - return false; - } - } - - return true; -} - - - - -function handleQueueMarkDefer( elem, type, src ) { - var deferDataKey = type + "defer", - queueDataKey = type + "queue", - markDataKey = type + "mark", - defer = jQuery._data( elem, deferDataKey ); - if ( defer && - ( src === "queue" || !jQuery._data(elem, queueDataKey) ) && - ( src === "mark" || !jQuery._data(elem, markDataKey) ) ) { - // Give room for hard-coded callbacks to fire first - // and eventually mark/queue something else on the element - setTimeout( function() { - if ( !jQuery._data( elem, queueDataKey ) && - !jQuery._data( elem, markDataKey ) ) { - jQuery.removeData( elem, deferDataKey, true ); - defer.fire(); - } - }, 0 ); - } -} - -jQuery.extend({ - - _mark: function( elem, type ) { - if ( elem ) { - type = ( type || "fx" ) + "mark"; - jQuery._data( elem, type, (jQuery._data( elem, type ) || 0) + 1 ); - } - }, - - _unmark: function( force, elem, type ) { - if ( force !== true ) { - type = elem; - elem = force; - force = false; - } - if ( elem ) { - type = type || "fx"; - var key = type + "mark", - count = force ? 0 : ( (jQuery._data( elem, key ) || 1) - 1 ); - if ( count ) { - jQuery._data( elem, key, count ); - } else { - jQuery.removeData( elem, key, true ); - handleQueueMarkDefer( elem, type, "mark" ); - } - } - }, - - queue: function( elem, type, data ) { - var q; - if ( elem ) { - type = ( type || "fx" ) + "queue"; - q = jQuery._data( elem, type ); - - // Speed up dequeue by getting out quickly if this is just a lookup - if ( data ) { - if ( !q || jQuery.isArray(data) ) { - q = jQuery._data( elem, type, jQuery.makeArray(data) ); - } else { - q.push( data ); - } - } - return q || []; - } - }, - - dequeue: function( elem, type ) { - type = type || "fx"; - - var queue = jQuery.queue( elem, type ), - fn = queue.shift(), - hooks = {}; - - // If the fx queue is dequeued, always remove the progress sentinel - if ( fn === "inprogress" ) { - fn = queue.shift(); - } - - if ( fn ) { - // Add a progress sentinel to prevent the fx queue from being - // automatically dequeued - if ( type === "fx" ) { - queue.unshift( "inprogress" ); - } - - jQuery._data( elem, type + ".run", hooks ); - fn.call( elem, function() { - jQuery.dequeue( elem, type ); - }, hooks ); - } - - if ( !queue.length ) { - jQuery.removeData( elem, type + "queue " + type + ".run", true ); - handleQueueMarkDefer( elem, type, "queue" ); - } - } -}); - -jQuery.fn.extend({ - queue: function( type, data ) { - if ( typeof type !== "string" ) { - data = type; - type = "fx"; - } - - if ( data === undefined ) { - return jQuery.queue( this[0], type ); - } - return this.each(function() { - var queue = jQuery.queue( this, type, data ); - - if ( type === "fx" && queue[0] !== "inprogress" ) { - jQuery.dequeue( this, type ); - } - }); - }, - dequeue: function( type ) { - return this.each(function() { - jQuery.dequeue( this, type ); - }); - }, - // Based off of the plugin by Clint Helfers, with permission. - // http://blindsignals.com/index.php/2009/07/jquery-delay/ - delay: function( time, type ) { - time = jQuery.fx ? jQuery.fx.speeds[ time ] || time : time; - type = type || "fx"; - - return this.queue( type, function( next, hooks ) { - var timeout = setTimeout( next, time ); - hooks.stop = function() { - clearTimeout( timeout ); - }; - }); - }, - clearQueue: function( type ) { - return this.queue( type || "fx", [] ); - }, - // Get a promise resolved when queues of a certain type - // are emptied (fx is the type by default) - promise: function( type, object ) { - if ( typeof type !== "string" ) { - object = type; - type = undefined; - } - type = type || "fx"; - var defer = jQuery.Deferred(), - elements = this, - i = elements.length, - count = 1, - deferDataKey = type + "defer", - queueDataKey = type + "queue", - markDataKey = type + "mark", - tmp; - function resolve() { - if ( !( --count ) ) { - defer.resolveWith( elements, [ elements ] ); - } - } - while( i-- ) { - if (( tmp = jQuery.data( elements[ i ], deferDataKey, undefined, true ) || - ( jQuery.data( elements[ i ], queueDataKey, undefined, true ) || - jQuery.data( elements[ i ], markDataKey, undefined, true ) ) && - jQuery.data( elements[ i ], deferDataKey, jQuery.Callbacks( "once memory" ), true ) )) { - count++; - tmp.add( resolve ); - } - } - resolve(); - return defer.promise(); - } -}); - - - - -var rclass = /[\n\t\r]/g, - rspace = /\s+/, - rreturn = /\r/g, - rtype = /^(?:button|input)$/i, - rfocusable = /^(?:button|input|object|select|textarea)$/i, - rclickable = /^a(?:rea)?$/i, - rboolean = /^(?:autofocus|autoplay|async|checked|controls|defer|disabled|hidden|loop|multiple|open|readonly|required|scoped|selected)$/i, - getSetAttribute = jQuery.support.getSetAttribute, - nodeHook, boolHook, fixSpecified; - -jQuery.fn.extend({ - attr: function( name, value ) { - return jQuery.access( this, name, value, true, jQuery.attr ); - }, - - removeAttr: function( name ) { - return this.each(function() { - jQuery.removeAttr( this, name ); - }); - }, - - prop: function( name, value ) { - return jQuery.access( this, name, value, true, jQuery.prop ); - }, - - removeProp: function( name ) { - name = jQuery.propFix[ name ] || name; - return this.each(function() { - // try/catch handles cases where IE balks (such as removing a property on window) - try { - this[ name ] = undefined; - delete this[ name ]; - } catch( e ) {} - }); - }, - - addClass: function( value ) { - var classNames, i, l, elem, - setClass, c, cl; - - if ( jQuery.isFunction( value ) ) { - return this.each(function( j ) { - jQuery( this ).addClass( value.call(this, j, this.className) ); - }); - } - - if ( value && typeof value === "string" ) { - classNames = value.split( rspace ); - - for ( i = 0, l = this.length; i < l; i++ ) { - elem = this[ i ]; - - if ( elem.nodeType === 1 ) { - if ( !elem.className && classNames.length === 1 ) { - elem.className = value; - - } else { - setClass = " " + elem.className + " "; - - for ( c = 0, cl = classNames.length; c < cl; c++ ) { - if ( !~setClass.indexOf( " " + classNames[ c ] + " " ) ) { - setClass += classNames[ c ] + " "; - } - } - elem.className = jQuery.trim( setClass ); - } - } - } - } - - return this; - }, - - removeClass: function( value ) { - var classNames, i, l, elem, className, c, cl; - - if ( jQuery.isFunction( value ) ) { - return this.each(function( j ) { - jQuery( this ).removeClass( value.call(this, j, this.className) ); - }); - } - - if ( (value && typeof value === "string") || value === undefined ) { - classNames = ( value || "" ).split( rspace ); - - for ( i = 0, l = this.length; i < l; i++ ) { - elem = this[ i ]; - - if ( elem.nodeType === 1 && elem.className ) { - if ( value ) { - className = (" " + elem.className + " ").replace( rclass, " " ); - for ( c = 0, cl = classNames.length; c < cl; c++ ) { - className = className.replace(" " + classNames[ c ] + " ", " "); - } - elem.className = jQuery.trim( className ); - - } else { - elem.className = ""; - } - } - } - } - - return this; - }, - - toggleClass: function( value, stateVal ) { - var type = typeof value, - isBool = typeof stateVal === "boolean"; - - if ( jQuery.isFunction( value ) ) { - return this.each(function( i ) { - jQuery( this ).toggleClass( value.call(this, i, this.className, stateVal), stateVal ); - }); - } - - return this.each(function() { - if ( type === "string" ) { - // toggle individual class names - var className, - i = 0, - self = jQuery( this ), - state = stateVal, - classNames = value.split( rspace ); - - while ( (className = classNames[ i++ ]) ) { - // check each className given, space seperated list - state = isBool ? state : !self.hasClass( className ); - self[ state ? "addClass" : "removeClass" ]( className ); - } - - } else if ( type === "undefined" || type === "boolean" ) { - if ( this.className ) { - // store className if set - jQuery._data( this, "__className__", this.className ); - } - - // toggle whole className - this.className = this.className || value === false ? "" : jQuery._data( this, "__className__" ) || ""; - } - }); - }, - - hasClass: function( selector ) { - var className = " " + selector + " ", - i = 0, - l = this.length; - for ( ; i < l; i++ ) { - if ( this[i].nodeType === 1 && (" " + this[i].className + " ").replace(rclass, " ").indexOf( className ) > -1 ) { - return true; - } - } - - return false; - }, - - val: function( value ) { - var hooks, ret, isFunction, - elem = this[0]; - - if ( !arguments.length ) { - if ( elem ) { - hooks = jQuery.valHooks[ elem.nodeName.toLowerCase() ] || jQuery.valHooks[ elem.type ]; - - if ( hooks && "get" in hooks && (ret = hooks.get( elem, "value" )) !== undefined ) { - return ret; - } - - ret = elem.value; - - return typeof ret === "string" ? - // handle most common string cases - ret.replace(rreturn, "") : - // handle cases where value is null/undef or number - ret == null ? "" : ret; - } - - return; - } - - isFunction = jQuery.isFunction( value ); - - return this.each(function( i ) { - var self = jQuery(this), val; - - if ( this.nodeType !== 1 ) { - return; - } - - if ( isFunction ) { - val = value.call( this, i, self.val() ); - } else { - val = value; - } - - // Treat null/undefined as ""; convert numbers to string - if ( val == null ) { - val = ""; - } else if ( typeof val === "number" ) { - val += ""; - } else if ( jQuery.isArray( val ) ) { - val = jQuery.map(val, function ( value ) { - return value == null ? "" : value + ""; - }); - } - - hooks = jQuery.valHooks[ this.nodeName.toLowerCase() ] || jQuery.valHooks[ this.type ]; - - // If set returns undefined, fall back to normal setting - if ( !hooks || !("set" in hooks) || hooks.set( this, val, "value" ) === undefined ) { - this.value = val; - } - }); - } -}); - -jQuery.extend({ - valHooks: { - option: { - get: function( elem ) { - // attributes.value is undefined in Blackberry 4.7 but - // uses .value. See #6932 - var val = elem.attributes.value; - return !val || val.specified ? elem.value : elem.text; - } - }, - select: { - get: function( elem ) { - var value, i, max, option, - index = elem.selectedIndex, - values = [], - options = elem.options, - one = elem.type === "select-one"; - - // Nothing was selected - if ( index < 0 ) { - return null; - } - - // Loop through all the selected options - i = one ? index : 0; - max = one ? index + 1 : options.length; - for ( ; i < max; i++ ) { - option = options[ i ]; - - // Don't return options that are disabled or in a disabled optgroup - if ( option.selected && (jQuery.support.optDisabled ? !option.disabled : option.getAttribute("disabled") === null) && - (!option.parentNode.disabled || !jQuery.nodeName( option.parentNode, "optgroup" )) ) { - - // Get the specific value for the option - value = jQuery( option ).val(); - - // We don't need an array for one selects - if ( one ) { - return value; - } - - // Multi-Selects return an array - values.push( value ); - } - } - - // Fixes Bug #2551 -- select.val() broken in IE after form.reset() - if ( one && !values.length && options.length ) { - return jQuery( options[ index ] ).val(); - } - - return values; - }, - - set: function( elem, value ) { - var values = jQuery.makeArray( value ); - - jQuery(elem).find("option").each(function() { - this.selected = jQuery.inArray( jQuery(this).val(), values ) >= 0; - }); - - if ( !values.length ) { - elem.selectedIndex = -1; - } - return values; - } - } - }, - - attrFn: { - val: true, - css: true, - html: true, - text: true, - data: true, - width: true, - height: true, - offset: true - }, - - attr: function( elem, name, value, pass ) { - var ret, hooks, notxml, - nType = elem.nodeType; - - // don't get/set attributes on text, comment and attribute nodes - if ( !elem || nType === 3 || nType === 8 || nType === 2 ) { - return; - } - - if ( pass && name in jQuery.attrFn ) { - return jQuery( elem )[ name ]( value ); - } - - // Fallback to prop when attributes are not supported - if ( typeof elem.getAttribute === "undefined" ) { - return jQuery.prop( elem, name, value ); - } - - notxml = nType !== 1 || !jQuery.isXMLDoc( elem ); - - // All attributes are lowercase - // Grab necessary hook if one is defined - if ( notxml ) { - name = name.toLowerCase(); - hooks = jQuery.attrHooks[ name ] || ( rboolean.test( name ) ? boolHook : nodeHook ); - } - - if ( value !== undefined ) { - - if ( value === null ) { - jQuery.removeAttr( elem, name ); - return; - - } else if ( hooks && "set" in hooks && notxml && (ret = hooks.set( elem, value, name )) !== undefined ) { - return ret; - - } else { - elem.setAttribute( name, "" + value ); - return value; - } - - } else if ( hooks && "get" in hooks && notxml && (ret = hooks.get( elem, name )) !== null ) { - return ret; - - } else { - - ret = elem.getAttribute( name ); - - // Non-existent attributes return null, we normalize to undefined - return ret === null ? - undefined : - ret; - } - }, - - removeAttr: function( elem, value ) { - var propName, attrNames, name, l, - i = 0; - - if ( value && elem.nodeType === 1 ) { - attrNames = value.toLowerCase().split( rspace ); - l = attrNames.length; - - for ( ; i < l; i++ ) { - name = attrNames[ i ]; - - if ( name ) { - propName = jQuery.propFix[ name ] || name; - - // See #9699 for explanation of this approach (setting first, then removal) - jQuery.attr( elem, name, "" ); - elem.removeAttribute( getSetAttribute ? name : propName ); - - // Set corresponding property to false for boolean attributes - if ( rboolean.test( name ) && propName in elem ) { - elem[ propName ] = false; - } - } - } - } - }, - - attrHooks: { - type: { - set: function( elem, value ) { - // We can't allow the type property to be changed (since it causes problems in IE) - if ( rtype.test( elem.nodeName ) && elem.parentNode ) { - jQuery.error( "type property can't be changed" ); - } else if ( !jQuery.support.radioValue && value === "radio" && jQuery.nodeName(elem, "input") ) { - // Setting the type on a radio button after the value resets the value in IE6-9 - // Reset value to it's default in case type is set after value - // This is for element creation - var val = elem.value; - elem.setAttribute( "type", value ); - if ( val ) { - elem.value = val; - } - return value; - } - } - }, - // Use the value property for back compat - // Use the nodeHook for button elements in IE6/7 (#1954) - value: { - get: function( elem, name ) { - if ( nodeHook && jQuery.nodeName( elem, "button" ) ) { - return nodeHook.get( elem, name ); - } - return name in elem ? - elem.value : - null; - }, - set: function( elem, value, name ) { - if ( nodeHook && jQuery.nodeName( elem, "button" ) ) { - return nodeHook.set( elem, value, name ); - } - // Does not return so that setAttribute is also used - elem.value = value; - } - } - }, - - propFix: { - tabindex: "tabIndex", - readonly: "readOnly", - "for": "htmlFor", - "class": "className", - maxlength: "maxLength", - cellspacing: "cellSpacing", - cellpadding: "cellPadding", - rowspan: "rowSpan", - colspan: "colSpan", - usemap: "useMap", - frameborder: "frameBorder", - contenteditable: "contentEditable" - }, - - prop: function( elem, name, value ) { - var ret, hooks, notxml, - nType = elem.nodeType; - - // don't get/set properties on text, comment and attribute nodes - if ( !elem || nType === 3 || nType === 8 || nType === 2 ) { - return; - } - - notxml = nType !== 1 || !jQuery.isXMLDoc( elem ); - - if ( notxml ) { - // Fix name and attach hooks - name = jQuery.propFix[ name ] || name; - hooks = jQuery.propHooks[ name ]; - } - - if ( value !== undefined ) { - if ( hooks && "set" in hooks && (ret = hooks.set( elem, value, name )) !== undefined ) { - return ret; - - } else { - return ( elem[ name ] = value ); - } - - } else { - if ( hooks && "get" in hooks && (ret = hooks.get( elem, name )) !== null ) { - return ret; - - } else { - return elem[ name ]; - } - } - }, - - propHooks: { - tabIndex: { - get: function( elem ) { - // elem.tabIndex doesn't always return the correct value when it hasn't been explicitly set - // http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/ - var attributeNode = elem.getAttributeNode("tabindex"); - - return attributeNode && attributeNode.specified ? - parseInt( attributeNode.value, 10 ) : - rfocusable.test( elem.nodeName ) || rclickable.test( elem.nodeName ) && elem.href ? - 0 : - undefined; - } - } - } -}); - -// Add the tabIndex propHook to attrHooks for back-compat (different case is intentional) -jQuery.attrHooks.tabindex = jQuery.propHooks.tabIndex; - -// Hook for boolean attributes -boolHook = { - get: function( elem, name ) { - // Align boolean attributes with corresponding properties - // Fall back to attribute presence where some booleans are not supported - var attrNode, - property = jQuery.prop( elem, name ); - return property === true || typeof property !== "boolean" && ( attrNode = elem.getAttributeNode(name) ) && attrNode.nodeValue !== false ? - name.toLowerCase() : - undefined; - }, - set: function( elem, value, name ) { - var propName; - if ( value === false ) { - // Remove boolean attributes when set to false - jQuery.removeAttr( elem, name ); - } else { - // value is true since we know at this point it's type boolean and not false - // Set boolean attributes to the same name and set the DOM property - propName = jQuery.propFix[ name ] || name; - if ( propName in elem ) { - // Only set the IDL specifically if it already exists on the element - elem[ propName ] = true; - } - - elem.setAttribute( name, name.toLowerCase() ); - } - return name; - } -}; - -// IE6/7 do not support getting/setting some attributes with get/setAttribute -if ( !getSetAttribute ) { - - fixSpecified = { - name: true, - id: true - }; - - // Use this for any attribute in IE6/7 - // This fixes almost every IE6/7 issue - nodeHook = jQuery.valHooks.button = { - get: function( elem, name ) { - var ret; - ret = elem.getAttributeNode( name ); - return ret && ( fixSpecified[ name ] ? ret.nodeValue !== "" : ret.specified ) ? - ret.nodeValue : - undefined; - }, - set: function( elem, value, name ) { - // Set the existing or create a new attribute node - var ret = elem.getAttributeNode( name ); - if ( !ret ) { - ret = document.createAttribute( name ); - elem.setAttributeNode( ret ); - } - return ( ret.nodeValue = value + "" ); - } - }; - - // Apply the nodeHook to tabindex - jQuery.attrHooks.tabindex.set = nodeHook.set; - - // Set width and height to auto instead of 0 on empty string( Bug #8150 ) - // This is for removals - jQuery.each([ "width", "height" ], function( i, name ) { - jQuery.attrHooks[ name ] = jQuery.extend( jQuery.attrHooks[ name ], { - set: function( elem, value ) { - if ( value === "" ) { - elem.setAttribute( name, "auto" ); - return value; - } - } - }); - }); - - // Set contenteditable to false on removals(#10429) - // Setting to empty string throws an error as an invalid value - jQuery.attrHooks.contenteditable = { - get: nodeHook.get, - set: function( elem, value, name ) { - if ( value === "" ) { - value = "false"; - } - nodeHook.set( elem, value, name ); - } - }; -} - - -// Some attributes require a special call on IE -if ( !jQuery.support.hrefNormalized ) { - jQuery.each([ "href", "src", "width", "height" ], function( i, name ) { - jQuery.attrHooks[ name ] = jQuery.extend( jQuery.attrHooks[ name ], { - get: function( elem ) { - var ret = elem.getAttribute( name, 2 ); - return ret === null ? undefined : ret; - } - }); - }); -} - -if ( !jQuery.support.style ) { - jQuery.attrHooks.style = { - get: function( elem ) { - // Return undefined in the case of empty string - // Normalize to lowercase since IE uppercases css property names - return elem.style.cssText.toLowerCase() || undefined; - }, - set: function( elem, value ) { - return ( elem.style.cssText = "" + value ); - } - }; -} - -// Safari mis-reports the default selected property of an option -// Accessing the parent's selectedIndex property fixes it -if ( !jQuery.support.optSelected ) { - jQuery.propHooks.selected = jQuery.extend( jQuery.propHooks.selected, { - get: function( elem ) { - var parent = elem.parentNode; - - if ( parent ) { - parent.selectedIndex; - - // Make sure that it also works with optgroups, see #5701 - if ( parent.parentNode ) { - parent.parentNode.selectedIndex; - } - } - return null; - } - }); -} - -// IE6/7 call enctype encoding -if ( !jQuery.support.enctype ) { - jQuery.propFix.enctype = "encoding"; -} - -// Radios and checkboxes getter/setter -if ( !jQuery.support.checkOn ) { - jQuery.each([ "radio", "checkbox" ], function() { - jQuery.valHooks[ this ] = { - get: function( elem ) { - // Handle the case where in Webkit "" is returned instead of "on" if a value isn't specified - return elem.getAttribute("value") === null ? "on" : elem.value; - } - }; - }); -} -jQuery.each([ "radio", "checkbox" ], function() { - jQuery.valHooks[ this ] = jQuery.extend( jQuery.valHooks[ this ], { - set: function( elem, value ) { - if ( jQuery.isArray( value ) ) { - return ( elem.checked = jQuery.inArray( jQuery(elem).val(), value ) >= 0 ); - } - } - }); -}); - - - - -var rformElems = /^(?:textarea|input|select)$/i, - rtypenamespace = /^([^\.]*)?(?:\.(.+))?$/, - rhoverHack = /\bhover(\.\S+)?\b/, - rkeyEvent = /^key/, - rmouseEvent = /^(?:mouse|contextmenu)|click/, - rfocusMorph = /^(?:focusinfocus|focusoutblur)$/, - rquickIs = /^(\w*)(?:#([\w\-]+))?(?:\.([\w\-]+))?$/, - quickParse = function( selector ) { - var quick = rquickIs.exec( selector ); - if ( quick ) { - // 0 1 2 3 - // [ _, tag, id, class ] - quick[1] = ( quick[1] || "" ).toLowerCase(); - quick[3] = quick[3] && new RegExp( "(?:^|\\s)" + quick[3] + "(?:\\s|$)" ); - } - return quick; - }, - quickIs = function( elem, m ) { - var attrs = elem.attributes || {}; - return ( - (!m[1] || elem.nodeName.toLowerCase() === m[1]) && - (!m[2] || (attrs.id || {}).value === m[2]) && - (!m[3] || m[3].test( (attrs[ "class" ] || {}).value )) - ); - }, - hoverHack = function( events ) { - return jQuery.event.special.hover ? events : events.replace( rhoverHack, "mouseenter$1 mouseleave$1" ); - }; - -/* - * Helper functions for managing events -- not part of the public interface. - * Props to Dean Edwards' addEvent library for many of the ideas. - */ -jQuery.event = { - - add: function( elem, types, handler, data, selector ) { - - var elemData, eventHandle, events, - t, tns, type, namespaces, handleObj, - handleObjIn, quick, handlers, special; - - // Don't attach events to noData or text/comment nodes (allow plain objects tho) - if ( elem.nodeType === 3 || elem.nodeType === 8 || !types || !handler || !(elemData = jQuery._data( elem )) ) { - return; - } - - // Caller can pass in an object of custom data in lieu of the handler - if ( handler.handler ) { - handleObjIn = handler; - handler = handleObjIn.handler; - } - - // Make sure that the handler has a unique ID, used to find/remove it later - if ( !handler.guid ) { - handler.guid = jQuery.guid++; - } - - // Init the element's event structure and main handler, if this is the first - events = elemData.events; - if ( !events ) { - elemData.events = events = {}; - } - eventHandle = elemData.handle; - if ( !eventHandle ) { - elemData.handle = eventHandle = function( e ) { - // Discard the second event of a jQuery.event.trigger() and - // when an event is called after a page has unloaded - return typeof jQuery !== "undefined" && (!e || jQuery.event.triggered !== e.type) ? - jQuery.event.dispatch.apply( eventHandle.elem, arguments ) : - undefined; - }; - // Add elem as a property of the handle fn to prevent a memory leak with IE non-native events - eventHandle.elem = elem; - } - - // Handle multiple events separated by a space - // jQuery(...).bind("mouseover mouseout", fn); - types = jQuery.trim( hoverHack(types) ).split( " " ); - for ( t = 0; t < types.length; t++ ) { - - tns = rtypenamespace.exec( types[t] ) || []; - type = tns[1]; - namespaces = ( tns[2] || "" ).split( "." ).sort(); - - // If event changes its type, use the special event handlers for the changed type - special = jQuery.event.special[ type ] || {}; - - // If selector defined, determine special event api type, otherwise given type - type = ( selector ? special.delegateType : special.bindType ) || type; - - // Update special based on newly reset type - special = jQuery.event.special[ type ] || {}; - - // handleObj is passed to all event handlers - handleObj = jQuery.extend({ - type: type, - origType: tns[1], - data: data, - handler: handler, - guid: handler.guid, - selector: selector, - quick: quickParse( selector ), - namespace: namespaces.join(".") - }, handleObjIn ); - - // Init the event handler queue if we're the first - handlers = events[ type ]; - if ( !handlers ) { - handlers = events[ type ] = []; - handlers.delegateCount = 0; - - // Only use addEventListener/attachEvent if the special events handler returns false - if ( !special.setup || special.setup.call( elem, data, namespaces, eventHandle ) === false ) { - // Bind the global event handler to the element - if ( elem.addEventListener ) { - elem.addEventListener( type, eventHandle, false ); - - } else if ( elem.attachEvent ) { - elem.attachEvent( "on" + type, eventHandle ); - } - } - } - - if ( special.add ) { - special.add.call( elem, handleObj ); - - if ( !handleObj.handler.guid ) { - handleObj.handler.guid = handler.guid; - } - } - - // Add to the element's handler list, delegates in front - if ( selector ) { - handlers.splice( handlers.delegateCount++, 0, handleObj ); - } else { - handlers.push( handleObj ); - } - - // Keep track of which events have ever been used, for event optimization - jQuery.event.global[ type ] = true; - } - - // Nullify elem to prevent memory leaks in IE - elem = null; - }, - - global: {}, - - // Detach an event or set of events from an element - remove: function( elem, types, handler, selector, mappedTypes ) { - - var elemData = jQuery.hasData( elem ) && jQuery._data( elem ), - t, tns, type, origType, namespaces, origCount, - j, events, special, handle, eventType, handleObj; - - if ( !elemData || !(events = elemData.events) ) { - return; - } - - // Once for each type.namespace in types; type may be omitted - types = jQuery.trim( hoverHack( types || "" ) ).split(" "); - for ( t = 0; t < types.length; t++ ) { - tns = rtypenamespace.exec( types[t] ) || []; - type = origType = tns[1]; - namespaces = tns[2]; - - // Unbind all events (on this namespace, if provided) for the element - if ( !type ) { - for ( type in events ) { - jQuery.event.remove( elem, type + types[ t ], handler, selector, true ); - } - continue; - } - - special = jQuery.event.special[ type ] || {}; - type = ( selector? special.delegateType : special.bindType ) || type; - eventType = events[ type ] || []; - origCount = eventType.length; - namespaces = namespaces ? new RegExp("(^|\\.)" + namespaces.split(".").sort().join("\\.(?:.*\\.)?") + "(\\.|$)") : null; - - // Remove matching events - for ( j = 0; j < eventType.length; j++ ) { - handleObj = eventType[ j ]; - - if ( ( mappedTypes || origType === handleObj.origType ) && - ( !handler || handler.guid === handleObj.guid ) && - ( !namespaces || namespaces.test( handleObj.namespace ) ) && - ( !selector || selector === handleObj.selector || selector === "**" && handleObj.selector ) ) { - eventType.splice( j--, 1 ); - - if ( handleObj.selector ) { - eventType.delegateCount--; - } - if ( special.remove ) { - special.remove.call( elem, handleObj ); - } - } - } - - // Remove generic event handler if we removed something and no more handlers exist - // (avoids potential for endless recursion during removal of special event handlers) - if ( eventType.length === 0 && origCount !== eventType.length ) { - if ( !special.teardown || special.teardown.call( elem, namespaces ) === false ) { - jQuery.removeEvent( elem, type, elemData.handle ); - } - - delete events[ type ]; - } - } - - // Remove the expando if it's no longer used - if ( jQuery.isEmptyObject( events ) ) { - handle = elemData.handle; - if ( handle ) { - handle.elem = null; - } - - // removeData also checks for emptiness and clears the expando if empty - // so use it instead of delete - jQuery.removeData( elem, [ "events", "handle" ], true ); - } - }, - - // Events that are safe to short-circuit if no handlers are attached. - // Native DOM events should not be added, they may have inline handlers. - customEvent: { - "getData": true, - "setData": true, - "changeData": true - }, - - trigger: function( event, data, elem, onlyHandlers ) { - // Don't do events on text and comment nodes - if ( elem && (elem.nodeType === 3 || elem.nodeType === 8) ) { - return; - } - - // Event object or event type - var type = event.type || event, - namespaces = [], - cache, exclusive, i, cur, old, ontype, special, handle, eventPath, bubbleType; - - // focus/blur morphs to focusin/out; ensure we're not firing them right now - if ( rfocusMorph.test( type + jQuery.event.triggered ) ) { - return; - } - - if ( type.indexOf( "!" ) >= 0 ) { - // Exclusive events trigger only for the exact event (no namespaces) - type = type.slice(0, -1); - exclusive = true; - } - - if ( type.indexOf( "." ) >= 0 ) { - // Namespaced trigger; create a regexp to match event type in handle() - namespaces = type.split("."); - type = namespaces.shift(); - namespaces.sort(); - } - - if ( (!elem || jQuery.event.customEvent[ type ]) && !jQuery.event.global[ type ] ) { - // No jQuery handlers for this event type, and it can't have inline handlers - return; - } - - // Caller can pass in an Event, Object, or just an event type string - event = typeof event === "object" ? - // jQuery.Event object - event[ jQuery.expando ] ? event : - // Object literal - new jQuery.Event( type, event ) : - // Just the event type (string) - new jQuery.Event( type ); - - event.type = type; - event.isTrigger = true; - event.exclusive = exclusive; - event.namespace = namespaces.join( "." ); - event.namespace_re = event.namespace? new RegExp("(^|\\.)" + namespaces.join("\\.(?:.*\\.)?") + "(\\.|$)") : null; - ontype = type.indexOf( ":" ) < 0 ? "on" + type : ""; - - // Handle a global trigger - if ( !elem ) { - - // TODO: Stop taunting the data cache; remove global events and always attach to document - cache = jQuery.cache; - for ( i in cache ) { - if ( cache[ i ].events && cache[ i ].events[ type ] ) { - jQuery.event.trigger( event, data, cache[ i ].handle.elem, true ); - } - } - return; - } - - // Clean up the event in case it is being reused - event.result = undefined; - if ( !event.target ) { - event.target = elem; - } - - // Clone any incoming data and prepend the event, creating the handler arg list - data = data != null ? jQuery.makeArray( data ) : []; - data.unshift( event ); - - // Allow special events to draw outside the lines - special = jQuery.event.special[ type ] || {}; - if ( special.trigger && special.trigger.apply( elem, data ) === false ) { - return; - } - - // Determine event propagation path in advance, per W3C events spec (#9951) - // Bubble up to document, then to window; watch for a global ownerDocument var (#9724) - eventPath = [[ elem, special.bindType || type ]]; - if ( !onlyHandlers && !special.noBubble && !jQuery.isWindow( elem ) ) { - - bubbleType = special.delegateType || type; - cur = rfocusMorph.test( bubbleType + type ) ? elem : elem.parentNode; - old = null; - for ( ; cur; cur = cur.parentNode ) { - eventPath.push([ cur, bubbleType ]); - old = cur; - } - - // Only add window if we got to document (e.g., not plain obj or detached DOM) - if ( old && old === elem.ownerDocument ) { - eventPath.push([ old.defaultView || old.parentWindow || window, bubbleType ]); - } - } - - // Fire handlers on the event path - for ( i = 0; i < eventPath.length && !event.isPropagationStopped(); i++ ) { - - cur = eventPath[i][0]; - event.type = eventPath[i][1]; - - handle = ( jQuery._data( cur, "events" ) || {} )[ event.type ] && jQuery._data( cur, "handle" ); - if ( handle ) { - handle.apply( cur, data ); - } - // Note that this is a bare JS function and not a jQuery handler - handle = ontype && cur[ ontype ]; - if ( handle && jQuery.acceptData( cur ) && handle.apply( cur, data ) === false ) { - event.preventDefault(); - } - } - event.type = type; - - // If nobody prevented the default action, do it now - if ( !onlyHandlers && !event.isDefaultPrevented() ) { - - if ( (!special._default || special._default.apply( elem.ownerDocument, data ) === false) && - !(type === "click" && jQuery.nodeName( elem, "a" )) && jQuery.acceptData( elem ) ) { - - // Call a native DOM method on the target with the same name name as the event. - // Can't use an .isFunction() check here because IE6/7 fails that test. - // Don't do default actions on window, that's where global variables be (#6170) - // IE<9 dies on focus/blur to hidden element (#1486) - if ( ontype && elem[ type ] && ((type !== "focus" && type !== "blur") || event.target.offsetWidth !== 0) && !jQuery.isWindow( elem ) ) { - - // Don't re-trigger an onFOO event when we call its FOO() method - old = elem[ ontype ]; - - if ( old ) { - elem[ ontype ] = null; - } - - // Prevent re-triggering of the same event, since we already bubbled it above - jQuery.event.triggered = type; - elem[ type ](); - jQuery.event.triggered = undefined; - - if ( old ) { - elem[ ontype ] = old; - } - } - } - } - - return event.result; - }, - - dispatch: function( event ) { - - // Make a writable jQuery.Event from the native event object - event = jQuery.event.fix( event || window.event ); - - var handlers = ( (jQuery._data( this, "events" ) || {} )[ event.type ] || []), - delegateCount = handlers.delegateCount, - args = [].slice.call( arguments, 0 ), - run_all = !event.exclusive && !event.namespace, - handlerQueue = [], - i, j, cur, jqcur, ret, selMatch, matched, matches, handleObj, sel, related; - - // Use the fix-ed jQuery.Event rather than the (read-only) native event - args[0] = event; - event.delegateTarget = this; - - // Determine handlers that should run if there are delegated events - // Avoid disabled elements in IE (#6911) and non-left-click bubbling in Firefox (#3861) - if ( delegateCount && !event.target.disabled && !(event.button && event.type === "click") ) { - - // Pregenerate a single jQuery object for reuse with .is() - jqcur = jQuery(this); - jqcur.context = this.ownerDocument || this; - - for ( cur = event.target; cur != this; cur = cur.parentNode || this ) { - selMatch = {}; - matches = []; - jqcur[0] = cur; - for ( i = 0; i < delegateCount; i++ ) { - handleObj = handlers[ i ]; - sel = handleObj.selector; - - if ( selMatch[ sel ] === undefined ) { - selMatch[ sel ] = ( - handleObj.quick ? quickIs( cur, handleObj.quick ) : jqcur.is( sel ) - ); - } - if ( selMatch[ sel ] ) { - matches.push( handleObj ); - } - } - if ( matches.length ) { - handlerQueue.push({ elem: cur, matches: matches }); - } - } - } - - // Add the remaining (directly-bound) handlers - if ( handlers.length > delegateCount ) { - handlerQueue.push({ elem: this, matches: handlers.slice( delegateCount ) }); - } - - // Run delegates first; they may want to stop propagation beneath us - for ( i = 0; i < handlerQueue.length && !event.isPropagationStopped(); i++ ) { - matched = handlerQueue[ i ]; - event.currentTarget = matched.elem; - - for ( j = 0; j < matched.matches.length && !event.isImmediatePropagationStopped(); j++ ) { - handleObj = matched.matches[ j ]; - - // Triggered event must either 1) be non-exclusive and have no namespace, or - // 2) have namespace(s) a subset or equal to those in the bound event (both can have no namespace). - if ( run_all || (!event.namespace && !handleObj.namespace) || event.namespace_re && event.namespace_re.test( handleObj.namespace ) ) { - - event.data = handleObj.data; - event.handleObj = handleObj; - - ret = ( (jQuery.event.special[ handleObj.origType ] || {}).handle || handleObj.handler ) - .apply( matched.elem, args ); - - if ( ret !== undefined ) { - event.result = ret; - if ( ret === false ) { - event.preventDefault(); - event.stopPropagation(); - } - } - } - } - } - - return event.result; - }, - - // Includes some event props shared by KeyEvent and MouseEvent - // *** attrChange attrName relatedNode srcElement are not normalized, non-W3C, deprecated, will be removed in 1.8 *** - props: "attrChange attrName relatedNode srcElement altKey bubbles cancelable ctrlKey currentTarget eventPhase metaKey relatedTarget shiftKey target timeStamp view which".split(" "), - - fixHooks: {}, - - keyHooks: { - props: "char charCode key keyCode".split(" "), - filter: function( event, original ) { - - // Add which for key events - if ( event.which == null ) { - event.which = original.charCode != null ? original.charCode : original.keyCode; - } - - return event; - } - }, - - mouseHooks: { - props: "button buttons clientX clientY fromElement offsetX offsetY pageX pageY screenX screenY toElement".split(" "), - filter: function( event, original ) { - var eventDoc, doc, body, - button = original.button, - fromElement = original.fromElement; - - // Calculate pageX/Y if missing and clientX/Y available - if ( event.pageX == null && original.clientX != null ) { - eventDoc = event.target.ownerDocument || document; - doc = eventDoc.documentElement; - body = eventDoc.body; - - event.pageX = original.clientX + ( doc && doc.scrollLeft || body && body.scrollLeft || 0 ) - ( doc && doc.clientLeft || body && body.clientLeft || 0 ); - event.pageY = original.clientY + ( doc && doc.scrollTop || body && body.scrollTop || 0 ) - ( doc && doc.clientTop || body && body.clientTop || 0 ); - } - - // Add relatedTarget, if necessary - if ( !event.relatedTarget && fromElement ) { - event.relatedTarget = fromElement === event.target ? original.toElement : fromElement; - } - - // Add which for click: 1 === left; 2 === middle; 3 === right - // Note: button is not normalized, so don't use it - if ( !event.which && button !== undefined ) { - event.which = ( button & 1 ? 1 : ( button & 2 ? 3 : ( button & 4 ? 2 : 0 ) ) ); - } - - return event; - } - }, - - fix: function( event ) { - if ( event[ jQuery.expando ] ) { - return event; - } - - // Create a writable copy of the event object and normalize some properties - var i, prop, - originalEvent = event, - fixHook = jQuery.event.fixHooks[ event.type ] || {}, - copy = fixHook.props ? this.props.concat( fixHook.props ) : this.props; - - event = jQuery.Event( originalEvent ); - - for ( i = copy.length; i; ) { - prop = copy[ --i ]; - event[ prop ] = originalEvent[ prop ]; - } - - // Fix target property, if necessary (#1925, IE 6/7/8 & Safari2) - if ( !event.target ) { - event.target = originalEvent.srcElement || document; - } - - // Target should not be a text node (#504, Safari) - if ( event.target.nodeType === 3 ) { - event.target = event.target.parentNode; - } - - // For mouse/key events; add metaKey if it's not there (#3368, IE6/7/8) - if ( event.metaKey === undefined ) { - event.metaKey = event.ctrlKey; - } - - return fixHook.filter? fixHook.filter( event, originalEvent ) : event; - }, - - special: { - ready: { - // Make sure the ready event is setup - setup: jQuery.bindReady - }, - - load: { - // Prevent triggered image.load events from bubbling to window.load - noBubble: true - }, - - focus: { - delegateType: "focusin" - }, - blur: { - delegateType: "focusout" - }, - - beforeunload: { - setup: function( data, namespaces, eventHandle ) { - // We only want to do this special case on windows - if ( jQuery.isWindow( this ) ) { - this.onbeforeunload = eventHandle; - } - }, - - teardown: function( namespaces, eventHandle ) { - if ( this.onbeforeunload === eventHandle ) { - this.onbeforeunload = null; - } - } - } - }, - - simulate: function( type, elem, event, bubble ) { - // Piggyback on a donor event to simulate a different one. - // Fake originalEvent to avoid donor's stopPropagation, but if the - // simulated event prevents default then we do the same on the donor. - var e = jQuery.extend( - new jQuery.Event(), - event, - { type: type, - isSimulated: true, - originalEvent: {} - } - ); - if ( bubble ) { - jQuery.event.trigger( e, null, elem ); - } else { - jQuery.event.dispatch.call( elem, e ); - } - if ( e.isDefaultPrevented() ) { - event.preventDefault(); - } - } -}; - -// Some plugins are using, but it's undocumented/deprecated and will be removed. -// The 1.7 special event interface should provide all the hooks needed now. -jQuery.event.handle = jQuery.event.dispatch; - -jQuery.removeEvent = document.removeEventListener ? - function( elem, type, handle ) { - if ( elem.removeEventListener ) { - elem.removeEventListener( type, handle, false ); - } - } : - function( elem, type, handle ) { - if ( elem.detachEvent ) { - elem.detachEvent( "on" + type, handle ); - } - }; - -jQuery.Event = function( src, props ) { - // Allow instantiation without the 'new' keyword - if ( !(this instanceof jQuery.Event) ) { - return new jQuery.Event( src, props ); - } - - // Event object - if ( src && src.type ) { - this.originalEvent = src; - this.type = src.type; - - // Events bubbling up the document may have been marked as prevented - // by a handler lower down the tree; reflect the correct value. - this.isDefaultPrevented = ( src.defaultPrevented || src.returnValue === false || - src.getPreventDefault && src.getPreventDefault() ) ? returnTrue : returnFalse; - - // Event type - } else { - this.type = src; - } - - // Put explicitly provided properties onto the event object - if ( props ) { - jQuery.extend( this, props ); - } - - // Create a timestamp if incoming event doesn't have one - this.timeStamp = src && src.timeStamp || jQuery.now(); - - // Mark it as fixed - this[ jQuery.expando ] = true; -}; - -function returnFalse() { - return false; -} -function returnTrue() { - return true; -} - -// jQuery.Event is based on DOM3 Events as specified by the ECMAScript Language Binding -// http://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html -jQuery.Event.prototype = { - preventDefault: function() { - this.isDefaultPrevented = returnTrue; - - var e = this.originalEvent; - if ( !e ) { - return; - } - - // if preventDefault exists run it on the original event - if ( e.preventDefault ) { - e.preventDefault(); - - // otherwise set the returnValue property of the original event to false (IE) - } else { - e.returnValue = false; - } - }, - stopPropagation: function() { - this.isPropagationStopped = returnTrue; - - var e = this.originalEvent; - if ( !e ) { - return; - } - // if stopPropagation exists run it on the original event - if ( e.stopPropagation ) { - e.stopPropagation(); - } - // otherwise set the cancelBubble property of the original event to true (IE) - e.cancelBubble = true; - }, - stopImmediatePropagation: function() { - this.isImmediatePropagationStopped = returnTrue; - this.stopPropagation(); - }, - isDefaultPrevented: returnFalse, - isPropagationStopped: returnFalse, - isImmediatePropagationStopped: returnFalse -}; - -// Create mouseenter/leave events using mouseover/out and event-time checks -jQuery.each({ - mouseenter: "mouseover", - mouseleave: "mouseout" -}, function( orig, fix ) { - jQuery.event.special[ orig ] = { - delegateType: fix, - bindType: fix, - - handle: function( event ) { - var target = this, - related = event.relatedTarget, - handleObj = event.handleObj, - selector = handleObj.selector, - ret; - - // For mousenter/leave call the handler if related is outside the target. - // NB: No relatedTarget if the mouse left/entered the browser window - if ( !related || (related !== target && !jQuery.contains( target, related )) ) { - event.type = handleObj.origType; - ret = handleObj.handler.apply( this, arguments ); - event.type = fix; - } - return ret; - } - }; -}); - -// IE submit delegation -if ( !jQuery.support.submitBubbles ) { - - jQuery.event.special.submit = { - setup: function() { - // Only need this for delegated form submit events - if ( jQuery.nodeName( this, "form" ) ) { - return false; - } - - // Lazy-add a submit handler when a descendant form may potentially be submitted - jQuery.event.add( this, "click._submit keypress._submit", function( e ) { - // Node name check avoids a VML-related crash in IE (#9807) - var elem = e.target, - form = jQuery.nodeName( elem, "input" ) || jQuery.nodeName( elem, "button" ) ? elem.form : undefined; - if ( form && !form._submit_attached ) { - jQuery.event.add( form, "submit._submit", function( event ) { - // If form was submitted by the user, bubble the event up the tree - if ( this.parentNode && !event.isTrigger ) { - jQuery.event.simulate( "submit", this.parentNode, event, true ); - } - }); - form._submit_attached = true; - } - }); - // return undefined since we don't need an event listener - }, - - teardown: function() { - // Only need this for delegated form submit events - if ( jQuery.nodeName( this, "form" ) ) { - return false; - } - - // Remove delegated handlers; cleanData eventually reaps submit handlers attached above - jQuery.event.remove( this, "._submit" ); - } - }; -} - -// IE change delegation and checkbox/radio fix -if ( !jQuery.support.changeBubbles ) { - - jQuery.event.special.change = { - - setup: function() { - - if ( rformElems.test( this.nodeName ) ) { - // IE doesn't fire change on a check/radio until blur; trigger it on click - // after a propertychange. Eat the blur-change in special.change.handle. - // This still fires onchange a second time for check/radio after blur. - if ( this.type === "checkbox" || this.type === "radio" ) { - jQuery.event.add( this, "propertychange._change", function( event ) { - if ( event.originalEvent.propertyName === "checked" ) { - this._just_changed = true; - } - }); - jQuery.event.add( this, "click._change", function( event ) { - if ( this._just_changed && !event.isTrigger ) { - this._just_changed = false; - jQuery.event.simulate( "change", this, event, true ); - } - }); - } - return false; - } - // Delegated event; lazy-add a change handler on descendant inputs - jQuery.event.add( this, "beforeactivate._change", function( e ) { - var elem = e.target; - - if ( rformElems.test( elem.nodeName ) && !elem._change_attached ) { - jQuery.event.add( elem, "change._change", function( event ) { - if ( this.parentNode && !event.isSimulated && !event.isTrigger ) { - jQuery.event.simulate( "change", this.parentNode, event, true ); - } - }); - elem._change_attached = true; - } - }); - }, - - handle: function( event ) { - var elem = event.target; - - // Swallow native change events from checkbox/radio, we already triggered them above - if ( this !== elem || event.isSimulated || event.isTrigger || (elem.type !== "radio" && elem.type !== "checkbox") ) { - return event.handleObj.handler.apply( this, arguments ); - } - }, - - teardown: function() { - jQuery.event.remove( this, "._change" ); - - return rformElems.test( this.nodeName ); - } - }; -} - -// Create "bubbling" focus and blur events -if ( !jQuery.support.focusinBubbles ) { - jQuery.each({ focus: "focusin", blur: "focusout" }, function( orig, fix ) { - - // Attach a single capturing handler while someone wants focusin/focusout - var attaches = 0, - handler = function( event ) { - jQuery.event.simulate( fix, event.target, jQuery.event.fix( event ), true ); - }; - - jQuery.event.special[ fix ] = { - setup: function() { - if ( attaches++ === 0 ) { - document.addEventListener( orig, handler, true ); - } - }, - teardown: function() { - if ( --attaches === 0 ) { - document.removeEventListener( orig, handler, true ); - } - } - }; - }); -} - -jQuery.fn.extend({ - - on: function( types, selector, data, fn, /*INTERNAL*/ one ) { - var origFn, type; - - // Types can be a map of types/handlers - if ( typeof types === "object" ) { - // ( types-Object, selector, data ) - if ( typeof selector !== "string" ) { - // ( types-Object, data ) - data = selector; - selector = undefined; - } - for ( type in types ) { - this.on( type, selector, data, types[ type ], one ); - } - return this; - } - - if ( data == null && fn == null ) { - // ( types, fn ) - fn = selector; - data = selector = undefined; - } else if ( fn == null ) { - if ( typeof selector === "string" ) { - // ( types, selector, fn ) - fn = data; - data = undefined; - } else { - // ( types, data, fn ) - fn = data; - data = selector; - selector = undefined; - } - } - if ( fn === false ) { - fn = returnFalse; - } else if ( !fn ) { - return this; - } - - if ( one === 1 ) { - origFn = fn; - fn = function( event ) { - // Can use an empty set, since event contains the info - jQuery().off( event ); - return origFn.apply( this, arguments ); - }; - // Use same guid so caller can remove using origFn - fn.guid = origFn.guid || ( origFn.guid = jQuery.guid++ ); - } - return this.each( function() { - jQuery.event.add( this, types, fn, data, selector ); - }); - }, - one: function( types, selector, data, fn ) { - return this.on.call( this, types, selector, data, fn, 1 ); - }, - off: function( types, selector, fn ) { - if ( types && types.preventDefault && types.handleObj ) { - // ( event ) dispatched jQuery.Event - var handleObj = types.handleObj; - jQuery( types.delegateTarget ).off( - handleObj.namespace? handleObj.type + "." + handleObj.namespace : handleObj.type, - handleObj.selector, - handleObj.handler - ); - return this; - } - if ( typeof types === "object" ) { - // ( types-object [, selector] ) - for ( var type in types ) { - this.off( type, selector, types[ type ] ); - } - return this; - } - if ( selector === false || typeof selector === "function" ) { - // ( types [, fn] ) - fn = selector; - selector = undefined; - } - if ( fn === false ) { - fn = returnFalse; - } - return this.each(function() { - jQuery.event.remove( this, types, fn, selector ); - }); - }, - - bind: function( types, data, fn ) { - return this.on( types, null, data, fn ); - }, - unbind: function( types, fn ) { - return this.off( types, null, fn ); - }, - - live: function( types, data, fn ) { - jQuery( this.context ).on( types, this.selector, data, fn ); - return this; - }, - die: function( types, fn ) { - jQuery( this.context ).off( types, this.selector || "**", fn ); - return this; - }, - - delegate: function( selector, types, data, fn ) { - return this.on( types, selector, data, fn ); - }, - undelegate: function( selector, types, fn ) { - // ( namespace ) or ( selector, types [, fn] ) - return arguments.length == 1? this.off( selector, "**" ) : this.off( types, selector, fn ); - }, - - trigger: function( type, data ) { - return this.each(function() { - jQuery.event.trigger( type, data, this ); - }); - }, - triggerHandler: function( type, data ) { - if ( this[0] ) { - return jQuery.event.trigger( type, data, this[0], true ); - } - }, - - toggle: function( fn ) { - // Save reference to arguments for access in closure - var args = arguments, - guid = fn.guid || jQuery.guid++, - i = 0, - toggler = function( event ) { - // Figure out which function to execute - var lastToggle = ( jQuery._data( this, "lastToggle" + fn.guid ) || 0 ) % i; - jQuery._data( this, "lastToggle" + fn.guid, lastToggle + 1 ); - - // Make sure that clicks stop - event.preventDefault(); - - // and execute the function - return args[ lastToggle ].apply( this, arguments ) || false; - }; - - // link all the functions, so any of them can unbind this click handler - toggler.guid = guid; - while ( i < args.length ) { - args[ i++ ].guid = guid; - } - - return this.click( toggler ); - }, - - hover: function( fnOver, fnOut ) { - return this.mouseenter( fnOver ).mouseleave( fnOut || fnOver ); - } -}); - -jQuery.each( ("blur focus focusin focusout load resize scroll unload click dblclick " + - "mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave " + - "change select submit keydown keypress keyup error contextmenu").split(" "), function( i, name ) { - - // Handle event binding - jQuery.fn[ name ] = function( data, fn ) { - if ( fn == null ) { - fn = data; - data = null; - } - - return arguments.length > 0 ? - this.on( name, null, data, fn ) : - this.trigger( name ); - }; - - if ( jQuery.attrFn ) { - jQuery.attrFn[ name ] = true; - } - - if ( rkeyEvent.test( name ) ) { - jQuery.event.fixHooks[ name ] = jQuery.event.keyHooks; - } - - if ( rmouseEvent.test( name ) ) { - jQuery.event.fixHooks[ name ] = jQuery.event.mouseHooks; - } -}); - - - -/*! - * Sizzle CSS Selector Engine - * Copyright 2011, The Dojo Foundation - * Released under the MIT, BSD, and GPL Licenses. - * More information: http://sizzlejs.com/ - */ -(function(){ - -var chunker = /((?:\((?:\([^()]+\)|[^()]+)+\)|\[(?:\[[^\[\]]*\]|['"][^'"]*['"]|[^\[\]'"]+)+\]|\\.|[^ >+~,(\[\\]+)+|[>+~])(\s*,\s*)?((?:.|\r|\n)*)/g, - expando = "sizcache" + (Math.random() + '').replace('.', ''), - done = 0, - toString = Object.prototype.toString, - hasDuplicate = false, - baseHasDuplicate = true, - rBackslash = /\\/g, - rReturn = /\r\n/g, - rNonWord = /\W/; - -// Here we check if the JavaScript engine is using some sort of -// optimization where it does not always call our comparision -// function. If that is the case, discard the hasDuplicate value. -// Thus far that includes Google Chrome. -[0, 0].sort(function() { - baseHasDuplicate = false; - return 0; -}); - -var Sizzle = function( selector, context, results, seed ) { - results = results || []; - context = context || document; - - var origContext = context; - - if ( context.nodeType !== 1 && context.nodeType !== 9 ) { - return []; - } - - if ( !selector || typeof selector !== "string" ) { - return results; - } - - var m, set, checkSet, extra, ret, cur, pop, i, - prune = true, - contextXML = Sizzle.isXML( context ), - parts = [], - soFar = selector; - - // Reset the position of the chunker regexp (start from head) - do { - chunker.exec( "" ); - m = chunker.exec( soFar ); - - if ( m ) { - soFar = m[3]; - - parts.push( m[1] ); - - if ( m[2] ) { - extra = m[3]; - break; - } - } - } while ( m ); - - if ( parts.length > 1 && origPOS.exec( selector ) ) { - - if ( parts.length === 2 && Expr.relative[ parts[0] ] ) { - set = posProcess( parts[0] + parts[1], context, seed ); - - } else { - set = Expr.relative[ parts[0] ] ? - [ context ] : - Sizzle( parts.shift(), context ); - - while ( parts.length ) { - selector = parts.shift(); - - if ( Expr.relative[ selector ] ) { - selector += parts.shift(); - } - - set = posProcess( selector, set, seed ); - } - } - - } else { - // Take a shortcut and set the context if the root selector is an ID - // (but not if it'll be faster if the inner selector is an ID) - if ( !seed && parts.length > 1 && context.nodeType === 9 && !contextXML && - Expr.match.ID.test(parts[0]) && !Expr.match.ID.test(parts[parts.length - 1]) ) { - - ret = Sizzle.find( parts.shift(), context, contextXML ); - context = ret.expr ? - Sizzle.filter( ret.expr, ret.set )[0] : - ret.set[0]; - } - - if ( context ) { - ret = seed ? - { expr: parts.pop(), set: makeArray(seed) } : - Sizzle.find( parts.pop(), parts.length === 1 && (parts[0] === "~" || parts[0] === "+") && context.parentNode ? context.parentNode : context, contextXML ); - - set = ret.expr ? - Sizzle.filter( ret.expr, ret.set ) : - ret.set; - - if ( parts.length > 0 ) { - checkSet = makeArray( set ); - - } else { - prune = false; - } - - while ( parts.length ) { - cur = parts.pop(); - pop = cur; - - if ( !Expr.relative[ cur ] ) { - cur = ""; - } else { - pop = parts.pop(); - } - - if ( pop == null ) { - pop = context; - } - - Expr.relative[ cur ]( checkSet, pop, contextXML ); - } - - } else { - checkSet = parts = []; - } - } - - if ( !checkSet ) { - checkSet = set; - } - - if ( !checkSet ) { - Sizzle.error( cur || selector ); - } - - if ( toString.call(checkSet) === "[object Array]" ) { - if ( !prune ) { - results.push.apply( results, checkSet ); - - } else if ( context && context.nodeType === 1 ) { - for ( i = 0; checkSet[i] != null; i++ ) { - if ( checkSet[i] && (checkSet[i] === true || checkSet[i].nodeType === 1 && Sizzle.contains(context, checkSet[i])) ) { - results.push( set[i] ); - } - } - - } else { - for ( i = 0; checkSet[i] != null; i++ ) { - if ( checkSet[i] && checkSet[i].nodeType === 1 ) { - results.push( set[i] ); - } - } - } - - } else { - makeArray( checkSet, results ); - } - - if ( extra ) { - Sizzle( extra, origContext, results, seed ); - Sizzle.uniqueSort( results ); - } - - return results; -}; - -Sizzle.uniqueSort = function( results ) { - if ( sortOrder ) { - hasDuplicate = baseHasDuplicate; - results.sort( sortOrder ); - - if ( hasDuplicate ) { - for ( var i = 1; i < results.length; i++ ) { - if ( results[i] === results[ i - 1 ] ) { - results.splice( i--, 1 ); - } - } - } - } - - return results; -}; - -Sizzle.matches = function( expr, set ) { - return Sizzle( expr, null, null, set ); -}; - -Sizzle.matchesSelector = function( node, expr ) { - return Sizzle( expr, null, null, [node] ).length > 0; -}; - -Sizzle.find = function( expr, context, isXML ) { - var set, i, len, match, type, left; - - if ( !expr ) { - return []; - } - - for ( i = 0, len = Expr.order.length; i < len; i++ ) { - type = Expr.order[i]; - - if ( (match = Expr.leftMatch[ type ].exec( expr )) ) { - left = match[1]; - match.splice( 1, 1 ); - - if ( left.substr( left.length - 1 ) !== "\\" ) { - match[1] = (match[1] || "").replace( rBackslash, "" ); - set = Expr.find[ type ]( match, context, isXML ); - - if ( set != null ) { - expr = expr.replace( Expr.match[ type ], "" ); - break; - } - } - } - } - - if ( !set ) { - set = typeof context.getElementsByTagName !== "undefined" ? - context.getElementsByTagName( "*" ) : - []; - } - - return { set: set, expr: expr }; -}; - -Sizzle.filter = function( expr, set, inplace, not ) { - var match, anyFound, - type, found, item, filter, left, - i, pass, - old = expr, - result = [], - curLoop = set, - isXMLFilter = set && set[0] && Sizzle.isXML( set[0] ); - - while ( expr && set.length ) { - for ( type in Expr.filter ) { - if ( (match = Expr.leftMatch[ type ].exec( expr )) != null && match[2] ) { - filter = Expr.filter[ type ]; - left = match[1]; - - anyFound = false; - - match.splice(1,1); - - if ( left.substr( left.length - 1 ) === "\\" ) { - continue; - } - - if ( curLoop === result ) { - result = []; - } - - if ( Expr.preFilter[ type ] ) { - match = Expr.preFilter[ type ]( match, curLoop, inplace, result, not, isXMLFilter ); - - if ( !match ) { - anyFound = found = true; - - } else if ( match === true ) { - continue; - } - } - - if ( match ) { - for ( i = 0; (item = curLoop[i]) != null; i++ ) { - if ( item ) { - found = filter( item, match, i, curLoop ); - pass = not ^ found; - - if ( inplace && found != null ) { - if ( pass ) { - anyFound = true; - - } else { - curLoop[i] = false; - } - - } else if ( pass ) { - result.push( item ); - anyFound = true; - } - } - } - } - - if ( found !== undefined ) { - if ( !inplace ) { - curLoop = result; - } - - expr = expr.replace( Expr.match[ type ], "" ); - - if ( !anyFound ) { - return []; - } - - break; - } - } - } - - // Improper expression - if ( expr === old ) { - if ( anyFound == null ) { - Sizzle.error( expr ); - - } else { - break; - } - } - - old = expr; - } - - return curLoop; -}; - -Sizzle.error = function( msg ) { - throw new Error( "Syntax error, unrecognized expression: " + msg ); -}; - -/** - * Utility function for retreiving the text value of an array of DOM nodes - * @param {Array|Element} elem - */ -var getText = Sizzle.getText = function( elem ) { - var i, node, - nodeType = elem.nodeType, - ret = ""; - - if ( nodeType ) { - if ( nodeType === 1 || nodeType === 9 ) { - // Use textContent || innerText for elements - if ( typeof elem.textContent === 'string' ) { - return elem.textContent; - } else if ( typeof elem.innerText === 'string' ) { - // Replace IE's carriage returns - return elem.innerText.replace( rReturn, '' ); - } else { - // Traverse it's children - for ( elem = elem.firstChild; elem; elem = elem.nextSibling) { - ret += getText( elem ); - } - } - } else if ( nodeType === 3 || nodeType === 4 ) { - return elem.nodeValue; - } - } else { - - // If no nodeType, this is expected to be an array - for ( i = 0; (node = elem[i]); i++ ) { - // Do not traverse comment nodes - if ( node.nodeType !== 8 ) { - ret += getText( node ); - } - } - } - return ret; -}; - -var Expr = Sizzle.selectors = { - order: [ "ID", "NAME", "TAG" ], - - match: { - ID: /#((?:[\w\u00c0-\uFFFF\-]|\\.)+)/, - CLASS: /\.((?:[\w\u00c0-\uFFFF\-]|\\.)+)/, - NAME: /\[name=['"]*((?:[\w\u00c0-\uFFFF\-]|\\.)+)['"]*\]/, - ATTR: /\[\s*((?:[\w\u00c0-\uFFFF\-]|\\.)+)\s*(?:(\S?=)\s*(?:(['"])(.*?)\3|(#?(?:[\w\u00c0-\uFFFF\-]|\\.)*)|)|)\s*\]/, - TAG: /^((?:[\w\u00c0-\uFFFF\*\-]|\\.)+)/, - CHILD: /:(only|nth|last|first)-child(?:\(\s*(even|odd|(?:[+\-]?\d+|(?:[+\-]?\d*)?n\s*(?:[+\-]\s*\d+)?))\s*\))?/, - POS: /:(nth|eq|gt|lt|first|last|even|odd)(?:\((\d*)\))?(?=[^\-]|$)/, - PSEUDO: /:((?:[\w\u00c0-\uFFFF\-]|\\.)+)(?:\((['"]?)((?:\([^\)]+\)|[^\(\)]*)+)\2\))?/ - }, - - leftMatch: {}, - - attrMap: { - "class": "className", - "for": "htmlFor" - }, - - attrHandle: { - href: function( elem ) { - return elem.getAttribute( "href" ); - }, - type: function( elem ) { - return elem.getAttribute( "type" ); - } - }, - - relative: { - "+": function(checkSet, part){ - var isPartStr = typeof part === "string", - isTag = isPartStr && !rNonWord.test( part ), - isPartStrNotTag = isPartStr && !isTag; - - if ( isTag ) { - part = part.toLowerCase(); - } - - for ( var i = 0, l = checkSet.length, elem; i < l; i++ ) { - if ( (elem = checkSet[i]) ) { - while ( (elem = elem.previousSibling) && elem.nodeType !== 1 ) {} - - checkSet[i] = isPartStrNotTag || elem && elem.nodeName.toLowerCase() === part ? - elem || false : - elem === part; - } - } - - if ( isPartStrNotTag ) { - Sizzle.filter( part, checkSet, true ); - } - }, - - ">": function( checkSet, part ) { - var elem, - isPartStr = typeof part === "string", - i = 0, - l = checkSet.length; - - if ( isPartStr && !rNonWord.test( part ) ) { - part = part.toLowerCase(); - - for ( ; i < l; i++ ) { - elem = checkSet[i]; - - if ( elem ) { - var parent = elem.parentNode; - checkSet[i] = parent.nodeName.toLowerCase() === part ? parent : false; - } - } - - } else { - for ( ; i < l; i++ ) { - elem = checkSet[i]; - - if ( elem ) { - checkSet[i] = isPartStr ? - elem.parentNode : - elem.parentNode === part; - } - } - - if ( isPartStr ) { - Sizzle.filter( part, checkSet, true ); - } - } - }, - - "": function(checkSet, part, isXML){ - var nodeCheck, - doneName = done++, - checkFn = dirCheck; - - if ( typeof part === "string" && !rNonWord.test( part ) ) { - part = part.toLowerCase(); - nodeCheck = part; - checkFn = dirNodeCheck; - } - - checkFn( "parentNode", part, doneName, checkSet, nodeCheck, isXML ); - }, - - "~": function( checkSet, part, isXML ) { - var nodeCheck, - doneName = done++, - checkFn = dirCheck; - - if ( typeof part === "string" && !rNonWord.test( part ) ) { - part = part.toLowerCase(); - nodeCheck = part; - checkFn = dirNodeCheck; - } - - checkFn( "previousSibling", part, doneName, checkSet, nodeCheck, isXML ); - } - }, - - find: { - ID: function( match, context, isXML ) { - if ( typeof context.getElementById !== "undefined" && !isXML ) { - var m = context.getElementById(match[1]); - // Check parentNode to catch when Blackberry 4.6 returns - // nodes that are no longer in the document #6963 - return m && m.parentNode ? [m] : []; - } - }, - - NAME: function( match, context ) { - if ( typeof context.getElementsByName !== "undefined" ) { - var ret = [], - results = context.getElementsByName( match[1] ); - - for ( var i = 0, l = results.length; i < l; i++ ) { - if ( results[i].getAttribute("name") === match[1] ) { - ret.push( results[i] ); - } - } - - return ret.length === 0 ? null : ret; - } - }, - - TAG: function( match, context ) { - if ( typeof context.getElementsByTagName !== "undefined" ) { - return context.getElementsByTagName( match[1] ); - } - } - }, - preFilter: { - CLASS: function( match, curLoop, inplace, result, not, isXML ) { - match = " " + match[1].replace( rBackslash, "" ) + " "; - - if ( isXML ) { - return match; - } - - for ( var i = 0, elem; (elem = curLoop[i]) != null; i++ ) { - if ( elem ) { - if ( not ^ (elem.className && (" " + elem.className + " ").replace(/[\t\n\r]/g, " ").indexOf(match) >= 0) ) { - if ( !inplace ) { - result.push( elem ); - } - - } else if ( inplace ) { - curLoop[i] = false; - } - } - } - - return false; - }, - - ID: function( match ) { - return match[1].replace( rBackslash, "" ); - }, - - TAG: function( match, curLoop ) { - return match[1].replace( rBackslash, "" ).toLowerCase(); - }, - - CHILD: function( match ) { - if ( match[1] === "nth" ) { - if ( !match[2] ) { - Sizzle.error( match[0] ); - } - - match[2] = match[2].replace(/^\+|\s*/g, ''); - - // parse equations like 'even', 'odd', '5', '2n', '3n+2', '4n-1', '-n+6' - var test = /(-?)(\d*)(?:n([+\-]?\d*))?/.exec( - match[2] === "even" && "2n" || match[2] === "odd" && "2n+1" || - !/\D/.test( match[2] ) && "0n+" + match[2] || match[2]); - - // calculate the numbers (first)n+(last) including if they are negative - match[2] = (test[1] + (test[2] || 1)) - 0; - match[3] = test[3] - 0; - } - else if ( match[2] ) { - Sizzle.error( match[0] ); - } - - // TODO: Move to normal caching system - match[0] = done++; - - return match; - }, - - ATTR: function( match, curLoop, inplace, result, not, isXML ) { - var name = match[1] = match[1].replace( rBackslash, "" ); - - if ( !isXML && Expr.attrMap[name] ) { - match[1] = Expr.attrMap[name]; - } - - // Handle if an un-quoted value was used - match[4] = ( match[4] || match[5] || "" ).replace( rBackslash, "" ); - - if ( match[2] === "~=" ) { - match[4] = " " + match[4] + " "; - } - - return match; - }, - - PSEUDO: function( match, curLoop, inplace, result, not ) { - if ( match[1] === "not" ) { - // If we're dealing with a complex expression, or a simple one - if ( ( chunker.exec(match[3]) || "" ).length > 1 || /^\w/.test(match[3]) ) { - match[3] = Sizzle(match[3], null, null, curLoop); - - } else { - var ret = Sizzle.filter(match[3], curLoop, inplace, true ^ not); - - if ( !inplace ) { - result.push.apply( result, ret ); - } - - return false; - } - - } else if ( Expr.match.POS.test( match[0] ) || Expr.match.CHILD.test( match[0] ) ) { - return true; - } - - return match; - }, - - POS: function( match ) { - match.unshift( true ); - - return match; - } - }, - - filters: { - enabled: function( elem ) { - return elem.disabled === false && elem.type !== "hidden"; - }, - - disabled: function( elem ) { - return elem.disabled === true; - }, - - checked: function( elem ) { - return elem.checked === true; - }, - - selected: function( elem ) { - // Accessing this property makes selected-by-default - // options in Safari work properly - if ( elem.parentNode ) { - elem.parentNode.selectedIndex; - } - - return elem.selected === true; - }, - - parent: function( elem ) { - return !!elem.firstChild; - }, - - empty: function( elem ) { - return !elem.firstChild; - }, - - has: function( elem, i, match ) { - return !!Sizzle( match[3], elem ).length; - }, - - header: function( elem ) { - return (/h\d/i).test( elem.nodeName ); - }, - - text: function( elem ) { - var attr = elem.getAttribute( "type" ), type = elem.type; - // IE6 and 7 will map elem.type to 'text' for new HTML5 types (search, etc) - // use getAttribute instead to test this case - return elem.nodeName.toLowerCase() === "input" && "text" === type && ( attr === type || attr === null ); - }, - - radio: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "radio" === elem.type; - }, - - checkbox: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "checkbox" === elem.type; - }, - - file: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "file" === elem.type; - }, - - password: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "password" === elem.type; - }, - - submit: function( elem ) { - var name = elem.nodeName.toLowerCase(); - return (name === "input" || name === "button") && "submit" === elem.type; - }, - - image: function( elem ) { - return elem.nodeName.toLowerCase() === "input" && "image" === elem.type; - }, - - reset: function( elem ) { - var name = elem.nodeName.toLowerCase(); - return (name === "input" || name === "button") && "reset" === elem.type; - }, - - button: function( elem ) { - var name = elem.nodeName.toLowerCase(); - return name === "input" && "button" === elem.type || name === "button"; - }, - - input: function( elem ) { - return (/input|select|textarea|button/i).test( elem.nodeName ); - }, - - focus: function( elem ) { - return elem === elem.ownerDocument.activeElement; - } - }, - setFilters: { - first: function( elem, i ) { - return i === 0; - }, - - last: function( elem, i, match, array ) { - return i === array.length - 1; - }, - - even: function( elem, i ) { - return i % 2 === 0; - }, - - odd: function( elem, i ) { - return i % 2 === 1; - }, - - lt: function( elem, i, match ) { - return i < match[3] - 0; - }, - - gt: function( elem, i, match ) { - return i > match[3] - 0; - }, - - nth: function( elem, i, match ) { - return match[3] - 0 === i; - }, - - eq: function( elem, i, match ) { - return match[3] - 0 === i; - } - }, - filter: { - PSEUDO: function( elem, match, i, array ) { - var name = match[1], - filter = Expr.filters[ name ]; - - if ( filter ) { - return filter( elem, i, match, array ); - - } else if ( name === "contains" ) { - return (elem.textContent || elem.innerText || getText([ elem ]) || "").indexOf(match[3]) >= 0; - - } else if ( name === "not" ) { - var not = match[3]; - - for ( var j = 0, l = not.length; j < l; j++ ) { - if ( not[j] === elem ) { - return false; - } - } - - return true; - - } else { - Sizzle.error( name ); - } - }, - - CHILD: function( elem, match ) { - var first, last, - doneName, parent, cache, - count, diff, - type = match[1], - node = elem; - - switch ( type ) { - case "only": - case "first": - while ( (node = node.previousSibling) ) { - if ( node.nodeType === 1 ) { - return false; - } - } - - if ( type === "first" ) { - return true; - } - - node = elem; - - case "last": - while ( (node = node.nextSibling) ) { - if ( node.nodeType === 1 ) { - return false; - } - } - - return true; - - case "nth": - first = match[2]; - last = match[3]; - - if ( first === 1 && last === 0 ) { - return true; - } - - doneName = match[0]; - parent = elem.parentNode; - - if ( parent && (parent[ expando ] !== doneName || !elem.nodeIndex) ) { - count = 0; - - for ( node = parent.firstChild; node; node = node.nextSibling ) { - if ( node.nodeType === 1 ) { - node.nodeIndex = ++count; - } - } - - parent[ expando ] = doneName; - } - - diff = elem.nodeIndex - last; - - if ( first === 0 ) { - return diff === 0; - - } else { - return ( diff % first === 0 && diff / first >= 0 ); - } - } - }, - - ID: function( elem, match ) { - return elem.nodeType === 1 && elem.getAttribute("id") === match; - }, - - TAG: function( elem, match ) { - return (match === "*" && elem.nodeType === 1) || !!elem.nodeName && elem.nodeName.toLowerCase() === match; - }, - - CLASS: function( elem, match ) { - return (" " + (elem.className || elem.getAttribute("class")) + " ") - .indexOf( match ) > -1; - }, - - ATTR: function( elem, match ) { - var name = match[1], - result = Sizzle.attr ? - Sizzle.attr( elem, name ) : - Expr.attrHandle[ name ] ? - Expr.attrHandle[ name ]( elem ) : - elem[ name ] != null ? - elem[ name ] : - elem.getAttribute( name ), - value = result + "", - type = match[2], - check = match[4]; - - return result == null ? - type === "!=" : - !type && Sizzle.attr ? - result != null : - type === "=" ? - value === check : - type === "*=" ? - value.indexOf(check) >= 0 : - type === "~=" ? - (" " + value + " ").indexOf(check) >= 0 : - !check ? - value && result !== false : - type === "!=" ? - value !== check : - type === "^=" ? - value.indexOf(check) === 0 : - type === "$=" ? - value.substr(value.length - check.length) === check : - type === "|=" ? - value === check || value.substr(0, check.length + 1) === check + "-" : - false; - }, - - POS: function( elem, match, i, array ) { - var name = match[2], - filter = Expr.setFilters[ name ]; - - if ( filter ) { - return filter( elem, i, match, array ); - } - } - } -}; - -var origPOS = Expr.match.POS, - fescape = function(all, num){ - return "\\" + (num - 0 + 1); - }; - -for ( var type in Expr.match ) { - Expr.match[ type ] = new RegExp( Expr.match[ type ].source + (/(?![^\[]*\])(?![^\(]*\))/.source) ); - Expr.leftMatch[ type ] = new RegExp( /(^(?:.|\r|\n)*?)/.source + Expr.match[ type ].source.replace(/\\(\d+)/g, fescape) ); -} - -var makeArray = function( array, results ) { - array = Array.prototype.slice.call( array, 0 ); - - if ( results ) { - results.push.apply( results, array ); - return results; - } - - return array; -}; - -// Perform a simple check to determine if the browser is capable of -// converting a NodeList to an array using builtin methods. -// Also verifies that the returned array holds DOM nodes -// (which is not the case in the Blackberry browser) -try { - Array.prototype.slice.call( document.documentElement.childNodes, 0 )[0].nodeType; - -// Provide a fallback method if it does not work -} catch( e ) { - makeArray = function( array, results ) { - var i = 0, - ret = results || []; - - if ( toString.call(array) === "[object Array]" ) { - Array.prototype.push.apply( ret, array ); - - } else { - if ( typeof array.length === "number" ) { - for ( var l = array.length; i < l; i++ ) { - ret.push( array[i] ); - } - - } else { - for ( ; array[i]; i++ ) { - ret.push( array[i] ); - } - } - } - - return ret; - }; -} - -var sortOrder, siblingCheck; - -if ( document.documentElement.compareDocumentPosition ) { - sortOrder = function( a, b ) { - if ( a === b ) { - hasDuplicate = true; - return 0; - } - - if ( !a.compareDocumentPosition || !b.compareDocumentPosition ) { - return a.compareDocumentPosition ? -1 : 1; - } - - return a.compareDocumentPosition(b) & 4 ? -1 : 1; - }; - -} else { - sortOrder = function( a, b ) { - // The nodes are identical, we can exit early - if ( a === b ) { - hasDuplicate = true; - return 0; - - // Fallback to using sourceIndex (in IE) if it's available on both nodes - } else if ( a.sourceIndex && b.sourceIndex ) { - return a.sourceIndex - b.sourceIndex; - } - - var al, bl, - ap = [], - bp = [], - aup = a.parentNode, - bup = b.parentNode, - cur = aup; - - // If the nodes are siblings (or identical) we can do a quick check - if ( aup === bup ) { - return siblingCheck( a, b ); - - // If no parents were found then the nodes are disconnected - } else if ( !aup ) { - return -1; - - } else if ( !bup ) { - return 1; - } - - // Otherwise they're somewhere else in the tree so we need - // to build up a full list of the parentNodes for comparison - while ( cur ) { - ap.unshift( cur ); - cur = cur.parentNode; - } - - cur = bup; - - while ( cur ) { - bp.unshift( cur ); - cur = cur.parentNode; - } - - al = ap.length; - bl = bp.length; - - // Start walking down the tree looking for a discrepancy - for ( var i = 0; i < al && i < bl; i++ ) { - if ( ap[i] !== bp[i] ) { - return siblingCheck( ap[i], bp[i] ); - } - } - - // We ended someplace up the tree so do a sibling check - return i === al ? - siblingCheck( a, bp[i], -1 ) : - siblingCheck( ap[i], b, 1 ); - }; - - siblingCheck = function( a, b, ret ) { - if ( a === b ) { - return ret; - } - - var cur = a.nextSibling; - - while ( cur ) { - if ( cur === b ) { - return -1; - } - - cur = cur.nextSibling; - } - - return 1; - }; -} - -// Check to see if the browser returns elements by name when -// querying by getElementById (and provide a workaround) -(function(){ - // We're going to inject a fake input element with a specified name - var form = document.createElement("div"), - id = "script" + (new Date()).getTime(), - root = document.documentElement; - - form.innerHTML = ""; - - // Inject it into the root element, check its status, and remove it quickly - root.insertBefore( form, root.firstChild ); - - // The workaround has to do additional checks after a getElementById - // Which slows things down for other browsers (hence the branching) - if ( document.getElementById( id ) ) { - Expr.find.ID = function( match, context, isXML ) { - if ( typeof context.getElementById !== "undefined" && !isXML ) { - var m = context.getElementById(match[1]); - - return m ? - m.id === match[1] || typeof m.getAttributeNode !== "undefined" && m.getAttributeNode("id").nodeValue === match[1] ? - [m] : - undefined : - []; - } - }; - - Expr.filter.ID = function( elem, match ) { - var node = typeof elem.getAttributeNode !== "undefined" && elem.getAttributeNode("id"); - - return elem.nodeType === 1 && node && node.nodeValue === match; - }; - } - - root.removeChild( form ); - - // release memory in IE - root = form = null; -})(); - -(function(){ - // Check to see if the browser returns only elements - // when doing getElementsByTagName("*") - - // Create a fake element - var div = document.createElement("div"); - div.appendChild( document.createComment("") ); - - // Make sure no comments are found - if ( div.getElementsByTagName("*").length > 0 ) { - Expr.find.TAG = function( match, context ) { - var results = context.getElementsByTagName( match[1] ); - - // Filter out possible comments - if ( match[1] === "*" ) { - var tmp = []; - - for ( var i = 0; results[i]; i++ ) { - if ( results[i].nodeType === 1 ) { - tmp.push( results[i] ); - } - } - - results = tmp; - } - - return results; - }; - } - - // Check to see if an attribute returns normalized href attributes - div.innerHTML = ""; - - if ( div.firstChild && typeof div.firstChild.getAttribute !== "undefined" && - div.firstChild.getAttribute("href") !== "#" ) { - - Expr.attrHandle.href = function( elem ) { - return elem.getAttribute( "href", 2 ); - }; - } - - // release memory in IE - div = null; -})(); - -if ( document.querySelectorAll ) { - (function(){ - var oldSizzle = Sizzle, - div = document.createElement("div"), - id = "__sizzle__"; - - div.innerHTML = "

          "; - - // Safari can't handle uppercase or unicode characters when - // in quirks mode. - if ( div.querySelectorAll && div.querySelectorAll(".TEST").length === 0 ) { - return; - } - - Sizzle = function( query, context, extra, seed ) { - context = context || document; - - // Only use querySelectorAll on non-XML documents - // (ID selectors don't work in non-HTML documents) - if ( !seed && !Sizzle.isXML(context) ) { - // See if we find a selector to speed up - var match = /^(\w+$)|^\.([\w\-]+$)|^#([\w\-]+$)/.exec( query ); - - if ( match && (context.nodeType === 1 || context.nodeType === 9) ) { - // Speed-up: Sizzle("TAG") - if ( match[1] ) { - return makeArray( context.getElementsByTagName( query ), extra ); - - // Speed-up: Sizzle(".CLASS") - } else if ( match[2] && Expr.find.CLASS && context.getElementsByClassName ) { - return makeArray( context.getElementsByClassName( match[2] ), extra ); - } - } - - if ( context.nodeType === 9 ) { - // Speed-up: Sizzle("body") - // The body element only exists once, optimize finding it - if ( query === "body" && context.body ) { - return makeArray( [ context.body ], extra ); - - // Speed-up: Sizzle("#ID") - } else if ( match && match[3] ) { - var elem = context.getElementById( match[3] ); - - // Check parentNode to catch when Blackberry 4.6 returns - // nodes that are no longer in the document #6963 - if ( elem && elem.parentNode ) { - // Handle the case where IE and Opera return items - // by name instead of ID - if ( elem.id === match[3] ) { - return makeArray( [ elem ], extra ); - } - - } else { - return makeArray( [], extra ); - } - } - - try { - return makeArray( context.querySelectorAll(query), extra ); - } catch(qsaError) {} - - // qSA works strangely on Element-rooted queries - // We can work around this by specifying an extra ID on the root - // and working up from there (Thanks to Andrew Dupont for the technique) - // IE 8 doesn't work on object elements - } else if ( context.nodeType === 1 && context.nodeName.toLowerCase() !== "object" ) { - var oldContext = context, - old = context.getAttribute( "id" ), - nid = old || id, - hasParent = context.parentNode, - relativeHierarchySelector = /^\s*[+~]/.test( query ); - - if ( !old ) { - context.setAttribute( "id", nid ); - } else { - nid = nid.replace( /'/g, "\\$&" ); - } - if ( relativeHierarchySelector && hasParent ) { - context = context.parentNode; - } - - try { - if ( !relativeHierarchySelector || hasParent ) { - return makeArray( context.querySelectorAll( "[id='" + nid + "'] " + query ), extra ); - } - - } catch(pseudoError) { - } finally { - if ( !old ) { - oldContext.removeAttribute( "id" ); - } - } - } - } - - return oldSizzle(query, context, extra, seed); - }; - - for ( var prop in oldSizzle ) { - Sizzle[ prop ] = oldSizzle[ prop ]; - } - - // release memory in IE - div = null; - })(); -} - -(function(){ - var html = document.documentElement, - matches = html.matchesSelector || html.mozMatchesSelector || html.webkitMatchesSelector || html.msMatchesSelector; - - if ( matches ) { - // Check to see if it's possible to do matchesSelector - // on a disconnected node (IE 9 fails this) - var disconnectedMatch = !matches.call( document.createElement( "div" ), "div" ), - pseudoWorks = false; - - try { - // This should fail with an exception - // Gecko does not error, returns false instead - matches.call( document.documentElement, "[test!='']:sizzle" ); - - } catch( pseudoError ) { - pseudoWorks = true; - } - - Sizzle.matchesSelector = function( node, expr ) { - // Make sure that attribute selectors are quoted - expr = expr.replace(/\=\s*([^'"\]]*)\s*\]/g, "='$1']"); - - if ( !Sizzle.isXML( node ) ) { - try { - if ( pseudoWorks || !Expr.match.PSEUDO.test( expr ) && !/!=/.test( expr ) ) { - var ret = matches.call( node, expr ); - - // IE 9's matchesSelector returns false on disconnected nodes - if ( ret || !disconnectedMatch || - // As well, disconnected nodes are said to be in a document - // fragment in IE 9, so check for that - node.document && node.document.nodeType !== 11 ) { - return ret; - } - } - } catch(e) {} - } - - return Sizzle(expr, null, null, [node]).length > 0; - }; - } -})(); - -(function(){ - var div = document.createElement("div"); - - div.innerHTML = "
          "; - - // Opera can't find a second classname (in 9.6) - // Also, make sure that getElementsByClassName actually exists - if ( !div.getElementsByClassName || div.getElementsByClassName("e").length === 0 ) { - return; - } - - // Safari caches class attributes, doesn't catch changes (in 3.2) - div.lastChild.className = "e"; - - if ( div.getElementsByClassName("e").length === 1 ) { - return; - } - - Expr.order.splice(1, 0, "CLASS"); - Expr.find.CLASS = function( match, context, isXML ) { - if ( typeof context.getElementsByClassName !== "undefined" && !isXML ) { - return context.getElementsByClassName(match[1]); - } - }; - - // release memory in IE - div = null; -})(); - -function dirNodeCheck( dir, cur, doneName, checkSet, nodeCheck, isXML ) { - for ( var i = 0, l = checkSet.length; i < l; i++ ) { - var elem = checkSet[i]; - - if ( elem ) { - var match = false; - - elem = elem[dir]; - - while ( elem ) { - if ( elem[ expando ] === doneName ) { - match = checkSet[elem.sizset]; - break; - } - - if ( elem.nodeType === 1 && !isXML ){ - elem[ expando ] = doneName; - elem.sizset = i; - } - - if ( elem.nodeName.toLowerCase() === cur ) { - match = elem; - break; - } - - elem = elem[dir]; - } - - checkSet[i] = match; - } - } -} - -function dirCheck( dir, cur, doneName, checkSet, nodeCheck, isXML ) { - for ( var i = 0, l = checkSet.length; i < l; i++ ) { - var elem = checkSet[i]; - - if ( elem ) { - var match = false; - - elem = elem[dir]; - - while ( elem ) { - if ( elem[ expando ] === doneName ) { - match = checkSet[elem.sizset]; - break; - } - - if ( elem.nodeType === 1 ) { - if ( !isXML ) { - elem[ expando ] = doneName; - elem.sizset = i; - } - - if ( typeof cur !== "string" ) { - if ( elem === cur ) { - match = true; - break; - } - - } else if ( Sizzle.filter( cur, [elem] ).length > 0 ) { - match = elem; - break; - } - } - - elem = elem[dir]; - } - - checkSet[i] = match; - } - } -} - -if ( document.documentElement.contains ) { - Sizzle.contains = function( a, b ) { - return a !== b && (a.contains ? a.contains(b) : true); - }; - -} else if ( document.documentElement.compareDocumentPosition ) { - Sizzle.contains = function( a, b ) { - return !!(a.compareDocumentPosition(b) & 16); - }; - -} else { - Sizzle.contains = function() { - return false; - }; -} - -Sizzle.isXML = function( elem ) { - // documentElement is verified for cases where it doesn't yet exist - // (such as loading iframes in IE - #4833) - var documentElement = (elem ? elem.ownerDocument || elem : 0).documentElement; - - return documentElement ? documentElement.nodeName !== "HTML" : false; -}; - -var posProcess = function( selector, context, seed ) { - var match, - tmpSet = [], - later = "", - root = context.nodeType ? [context] : context; - - // Position selectors must be done after the filter - // And so must :not(positional) so we move all PSEUDOs to the end - while ( (match = Expr.match.PSEUDO.exec( selector )) ) { - later += match[0]; - selector = selector.replace( Expr.match.PSEUDO, "" ); - } - - selector = Expr.relative[selector] ? selector + "*" : selector; - - for ( var i = 0, l = root.length; i < l; i++ ) { - Sizzle( selector, root[i], tmpSet, seed ); - } - - return Sizzle.filter( later, tmpSet ); -}; - -// EXPOSE -// Override sizzle attribute retrieval -Sizzle.attr = jQuery.attr; -Sizzle.selectors.attrMap = {}; -jQuery.find = Sizzle; -jQuery.expr = Sizzle.selectors; -jQuery.expr[":"] = jQuery.expr.filters; -jQuery.unique = Sizzle.uniqueSort; -jQuery.text = Sizzle.getText; -jQuery.isXMLDoc = Sizzle.isXML; -jQuery.contains = Sizzle.contains; - - -})(); - - -var runtil = /Until$/, - rparentsprev = /^(?:parents|prevUntil|prevAll)/, - // Note: This RegExp should be improved, or likely pulled from Sizzle - rmultiselector = /,/, - isSimple = /^.[^:#\[\.,]*$/, - slice = Array.prototype.slice, - POS = jQuery.expr.match.POS, - // methods guaranteed to produce a unique set when starting from a unique set - guaranteedUnique = { - children: true, - contents: true, - next: true, - prev: true - }; - -jQuery.fn.extend({ - find: function( selector ) { - var self = this, - i, l; - - if ( typeof selector !== "string" ) { - return jQuery( selector ).filter(function() { - for ( i = 0, l = self.length; i < l; i++ ) { - if ( jQuery.contains( self[ i ], this ) ) { - return true; - } - } - }); - } - - var ret = this.pushStack( "", "find", selector ), - length, n, r; - - for ( i = 0, l = this.length; i < l; i++ ) { - length = ret.length; - jQuery.find( selector, this[i], ret ); - - if ( i > 0 ) { - // Make sure that the results are unique - for ( n = length; n < ret.length; n++ ) { - for ( r = 0; r < length; r++ ) { - if ( ret[r] === ret[n] ) { - ret.splice(n--, 1); - break; - } - } - } - } - } - - return ret; - }, - - has: function( target ) { - var targets = jQuery( target ); - return this.filter(function() { - for ( var i = 0, l = targets.length; i < l; i++ ) { - if ( jQuery.contains( this, targets[i] ) ) { - return true; - } - } - }); - }, - - not: function( selector ) { - return this.pushStack( winnow(this, selector, false), "not", selector); - }, - - filter: function( selector ) { - return this.pushStack( winnow(this, selector, true), "filter", selector ); - }, - - is: function( selector ) { - return !!selector && ( - typeof selector === "string" ? - // If this is a positional selector, check membership in the returned set - // so $("p:first").is("p:last") won't return true for a doc with two "p". - POS.test( selector ) ? - jQuery( selector, this.context ).index( this[0] ) >= 0 : - jQuery.filter( selector, this ).length > 0 : - this.filter( selector ).length > 0 ); - }, - - closest: function( selectors, context ) { - var ret = [], i, l, cur = this[0]; - - // Array (deprecated as of jQuery 1.7) - if ( jQuery.isArray( selectors ) ) { - var level = 1; - - while ( cur && cur.ownerDocument && cur !== context ) { - for ( i = 0; i < selectors.length; i++ ) { - - if ( jQuery( cur ).is( selectors[ i ] ) ) { - ret.push({ selector: selectors[ i ], elem: cur, level: level }); - } - } - - cur = cur.parentNode; - level++; - } - - return ret; - } - - // String - var pos = POS.test( selectors ) || typeof selectors !== "string" ? - jQuery( selectors, context || this.context ) : - 0; - - for ( i = 0, l = this.length; i < l; i++ ) { - cur = this[i]; - - while ( cur ) { - if ( pos ? pos.index(cur) > -1 : jQuery.find.matchesSelector(cur, selectors) ) { - ret.push( cur ); - break; - - } else { - cur = cur.parentNode; - if ( !cur || !cur.ownerDocument || cur === context || cur.nodeType === 11 ) { - break; - } - } - } - } - - ret = ret.length > 1 ? jQuery.unique( ret ) : ret; - - return this.pushStack( ret, "closest", selectors ); - }, - - // Determine the position of an element within - // the matched set of elements - index: function( elem ) { - - // No argument, return index in parent - if ( !elem ) { - return ( this[0] && this[0].parentNode ) ? this.prevAll().length : -1; - } - - // index in selector - if ( typeof elem === "string" ) { - return jQuery.inArray( this[0], jQuery( elem ) ); - } - - // Locate the position of the desired element - return jQuery.inArray( - // If it receives a jQuery object, the first element is used - elem.jquery ? elem[0] : elem, this ); - }, - - add: function( selector, context ) { - var set = typeof selector === "string" ? - jQuery( selector, context ) : - jQuery.makeArray( selector && selector.nodeType ? [ selector ] : selector ), - all = jQuery.merge( this.get(), set ); - - return this.pushStack( isDisconnected( set[0] ) || isDisconnected( all[0] ) ? - all : - jQuery.unique( all ) ); - }, - - andSelf: function() { - return this.add( this.prevObject ); - } -}); - -// A painfully simple check to see if an element is disconnected -// from a document (should be improved, where feasible). -function isDisconnected( node ) { - return !node || !node.parentNode || node.parentNode.nodeType === 11; -} - -jQuery.each({ - parent: function( elem ) { - var parent = elem.parentNode; - return parent && parent.nodeType !== 11 ? parent : null; - }, - parents: function( elem ) { - return jQuery.dir( elem, "parentNode" ); - }, - parentsUntil: function( elem, i, until ) { - return jQuery.dir( elem, "parentNode", until ); - }, - next: function( elem ) { - return jQuery.nth( elem, 2, "nextSibling" ); - }, - prev: function( elem ) { - return jQuery.nth( elem, 2, "previousSibling" ); - }, - nextAll: function( elem ) { - return jQuery.dir( elem, "nextSibling" ); - }, - prevAll: function( elem ) { - return jQuery.dir( elem, "previousSibling" ); - }, - nextUntil: function( elem, i, until ) { - return jQuery.dir( elem, "nextSibling", until ); - }, - prevUntil: function( elem, i, until ) { - return jQuery.dir( elem, "previousSibling", until ); - }, - siblings: function( elem ) { - return jQuery.sibling( elem.parentNode.firstChild, elem ); - }, - children: function( elem ) { - return jQuery.sibling( elem.firstChild ); - }, - contents: function( elem ) { - return jQuery.nodeName( elem, "iframe" ) ? - elem.contentDocument || elem.contentWindow.document : - jQuery.makeArray( elem.childNodes ); - } -}, function( name, fn ) { - jQuery.fn[ name ] = function( until, selector ) { - var ret = jQuery.map( this, fn, until ); - - if ( !runtil.test( name ) ) { - selector = until; - } - - if ( selector && typeof selector === "string" ) { - ret = jQuery.filter( selector, ret ); - } - - ret = this.length > 1 && !guaranteedUnique[ name ] ? jQuery.unique( ret ) : ret; - - if ( (this.length > 1 || rmultiselector.test( selector )) && rparentsprev.test( name ) ) { - ret = ret.reverse(); - } - - return this.pushStack( ret, name, slice.call( arguments ).join(",") ); - }; -}); - -jQuery.extend({ - filter: function( expr, elems, not ) { - if ( not ) { - expr = ":not(" + expr + ")"; - } - - return elems.length === 1 ? - jQuery.find.matchesSelector(elems[0], expr) ? [ elems[0] ] : [] : - jQuery.find.matches(expr, elems); - }, - - dir: function( elem, dir, until ) { - var matched = [], - cur = elem[ dir ]; - - while ( cur && cur.nodeType !== 9 && (until === undefined || cur.nodeType !== 1 || !jQuery( cur ).is( until )) ) { - if ( cur.nodeType === 1 ) { - matched.push( cur ); - } - cur = cur[dir]; - } - return matched; - }, - - nth: function( cur, result, dir, elem ) { - result = result || 1; - var num = 0; - - for ( ; cur; cur = cur[dir] ) { - if ( cur.nodeType === 1 && ++num === result ) { - break; - } - } - - return cur; - }, - - sibling: function( n, elem ) { - var r = []; - - for ( ; n; n = n.nextSibling ) { - if ( n.nodeType === 1 && n !== elem ) { - r.push( n ); - } - } - - return r; - } -}); - -// Implement the identical functionality for filter and not -function winnow( elements, qualifier, keep ) { - - // Can't pass null or undefined to indexOf in Firefox 4 - // Set to 0 to skip string check - qualifier = qualifier || 0; - - if ( jQuery.isFunction( qualifier ) ) { - return jQuery.grep(elements, function( elem, i ) { - var retVal = !!qualifier.call( elem, i, elem ); - return retVal === keep; - }); - - } else if ( qualifier.nodeType ) { - return jQuery.grep(elements, function( elem, i ) { - return ( elem === qualifier ) === keep; - }); - - } else if ( typeof qualifier === "string" ) { - var filtered = jQuery.grep(elements, function( elem ) { - return elem.nodeType === 1; - }); - - if ( isSimple.test( qualifier ) ) { - return jQuery.filter(qualifier, filtered, !keep); - } else { - qualifier = jQuery.filter( qualifier, filtered ); - } - } - - return jQuery.grep(elements, function( elem, i ) { - return ( jQuery.inArray( elem, qualifier ) >= 0 ) === keep; - }); -} - - - - -function createSafeFragment( document ) { - var list = nodeNames.split( "|" ), - safeFrag = document.createDocumentFragment(); - - if ( safeFrag.createElement ) { - while ( list.length ) { - safeFrag.createElement( - list.pop() - ); - } - } - return safeFrag; -} - -var nodeNames = "abbr|article|aside|audio|canvas|datalist|details|figcaption|figure|footer|" + - "header|hgroup|mark|meter|nav|output|progress|section|summary|time|video", - rinlinejQuery = / jQuery\d+="(?:\d+|null)"/g, - rleadingWhitespace = /^\s+/, - rxhtmlTag = /<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:]+)[^>]*)\/>/ig, - rtagName = /<([\w:]+)/, - rtbody = /", "" ], - legend: [ 1, "
          ", "
          " ], - thead: [ 1, "", "
          " ], - tr: [ 2, "", "
          " ], - td: [ 3, "", "
          " ], - col: [ 2, "", "
          " ], - area: [ 1, "", "" ], - _default: [ 0, "", "" ] - }, - safeFragment = createSafeFragment( document ); - -wrapMap.optgroup = wrapMap.option; -wrapMap.tbody = wrapMap.tfoot = wrapMap.colgroup = wrapMap.caption = wrapMap.thead; -wrapMap.th = wrapMap.td; - -// IE can't serialize and - - - - - - - - - - - - - -
          -
          -
          - - - - SAML PHP Toolkit - -
          - -
          -
          -
          -
          - Back to top   -
          -
          - -
          - - - - -
          - -
          - -
          -

          Classes, interfaces and traits

          - - -
          -

          OneLogin_Saml2_Response

          -

          SAML 2 Authentication Response

          -
          - « More »
          - -
          -

          OneLogin_Saml2_Error

          -

          Error class of PHP Toolkit

          -

          Defines the Error class

          - « More »
          - -
          -

          OneLogin_Saml2_Metadata

          -

          Metadata lib of PHP Toolkit

          -
          - « More »
          - -
          -

          OneLogin_Saml2_LogoutRequest

          -

          SAML 2 Logout Request

          -
          - « More »
          - -
          -

          OneLogin_Saml2_Constants

          -

          Constants of PHP Toolkit

          -

          Defines all required constants

          - « More »
          - -
          -

          OneLogin_Saml2_LogoutResponse

          -

          SAML 2 Logout Response

          -
          - « More »
          - -
          -

          OneLogin_Saml2_Auth

          -

          Main class of PHP Toolkit

          -
          - « More »
          - -
          -

          OneLogin_Saml2_Settings

          -

          Configuration of the PHP Toolkit

          -
          - « More »
          - -
          -

          OneLogin_Saml2_AuthnRequest

          -

          SAML 2 Authentication Request

          -
          - « More »
          - -
          -

          OneLogin_Saml2_Utils

          -

          Utils of PHP Toolkit

          -

          Defines several often used methods

          - « More »
          - -
          - - -
          -
          -
          - - - - diff --git a/docs/Saml2/phpdoc-cache-22/phpdoc-cache-file_41490c7e368e29f813beef0e771110ee.dat b/docs/Saml2/phpdoc-cache-22/phpdoc-cache-file_41490c7e368e29f813beef0e771110ee.dat deleted file mode 100644 index c5ded34d8162551805061e21e4ad670db6c337d8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 54490 zcmeHQdsEw1+TXwPDHLAM8dC1JG|q;G1-ip*ZUxe}Gf9ULwg9~~vR9H5m~6iL`+J^q z)zOhHu-rBUPp83_&h5G1&N**88_zm(!^`3RpgX#Xl6;VU+>f$u8V~8uALD*xzRq>l z*E(Oa&eP7^-=6&KGR!XLo@bqn_0HVd)AMI*;nVe}PdA@!ZLO}ZZ*QD!ulKe#H=nI- zpZCt_J<)0y=GI7qT+8ROF%m_C zQGgG3Nq?Z*D9_{MBIDoj{pF`Hb(=fytnjN*tm>7P=WaUqC9;35<+znc) zv+^8vgZ;O!6`lhDp#C7F@y^r16_3c!RbVQPxj(p4jlBc+Bn34va4^3gb<>+6pt^9& zNvL*es?Kbl1cV6%BLZ+9#z_{0Nf0G+$N-cRr9@U@Y)K4fgF!zE6J9$gjL2pvVQ!kf z2+qTP7CEDWp7s7GuK5!pbNatFJiTrU@O0j zv!xx)M8ONwOv00vAz#xIeG#06S+u=*D%fjYFK(gSNRcSIPNL5?JIv#41td9wdUW^w1>MUC|34q3jOHPx3F3%?!Fd2U3zFVd{kE`y|+p z@+iHE6F?A4CrMh6YeAd^pTd6J3q~2lD8JApjz1@L5(#pL9>E8^FStZgtE+7x{ktL;A_#N|) zG+U-pMhO1bihINTFb~ZtwWMc)0dvq}ca>=N?f`aPegl?+IF!A7Xp`|rKem5$#7Q=G zm}CDa+0Y(DbWt3mxR@-yNTQw+#F$u^rs0h{d5c@L4D?|LlyH%_65kcM3?((9CHjxi z7HCML61IW}rih2tyu(TB?e?P-00YGrh22Z28?&S^gCds;tX#bT=7(Pi&#J-F4&*Oz zP0(4|$%VcvV%)?0lJ_kNi?d@0q;5XXJYJYHQ7Bmr7#8+R-|`pU=W##lbQC*UHh_{P zi$ObsYq6Ap^smAtas~$7L4OHSZuvUvwPEi#X3f%0ob5+vql;abPoE;pr??uLjgVh7 zCD^8U2m=CI#xmZ0P^5M~89H~E@cfISX*qZUM!yPk;EL4OxJAr)X6V4228TV`9i`w& zLSJdoPzlHKxnlD&640J-{r>1xB`&z1{yAQGGx%u~r6r!Dsg!!Q7*SzvX-EB~)s~|V zk|XJtoecb%fmaPIu@ie}y>1|&#_)_*RFZacmyu~455Tpy#_9-%b{EPlQA-f07QRP? z(K4^?g#{u&<%@b@3GEl|9}iXuBFc8rN`t_w`Rhab zbC?)AIXh5}Mf=w(I90+ZRK7@wU|_it7|ayH1aS#~74|G4EQYZV=f0&@EXtWb`7MXN z8gn;}%VE#ak*5H7dZSIG`SuFQvCi>`{b}();dpf&rK^F3dC6ili=tRB$@E4Y#+^Kl!>4((qq{d6@nP zo5*m*4MMKu&m(f7f=UZM{CGGUfY1!3k?e6L%9NzJOE;^>-THM+fexeV7ko=7GPZt| zht@Q%|e9IcF(vDDV5T+RpvO*h};Kr_82wp&V zbBwl%dnRGpM2|nivq__F1T(%zlGGZ94fiPQky^DE;6tw(uq?;vN%>bl7YcF+N4*$~ z6_sc~2%ug0*z(!Q3{}5YN*;*`mOuJ!Hu@eTxgvbumhqtha_7}5V0+og>WOp|u}CNb zc4~bx!iuN27u*6;B=lJrrXFc69~jyOlnzO9rll|p;mCNssv-Hj;_s@J6LU(isu%zJ zU)6{WVJq@c)d>ym1)*~KMAu3JX-jEk9Mq`O+fg0CGDAL#l;FYjFi!pQ2o@l}V_qo$ z_*guBGsxd2Z`0j##Be7OWT``@Nivn)f&PKeGqkU8|7nHp#|y?2EG$%3Q5IZ=pQ0e5 z1yUN1@(y5dA>2KaS0=SqGFoAYCsPuyv~rPHI*(I$D**mt(Vp|X5nPR6?43n|oyt-o zOm2LwbXv=WS}PN_wmpk_YFrLeu-NThe9GJKS>>=CZ0aUe48tlh>n2M(MYZ=j$}a~! z1g6>1qUS~TTtA10>I8`}X&8M-$8ZP5`{zT0mqS*>TNvK)mwftqo>tR z#zFBY>c&G@9(fHA!ekQfGG+ymUHDo3O$MGa`gF&4HTh`$e+>L=rB?%l$$;1bg2=9J zk$FvtVa} zA)=s1|IQAAtx8Q_&d}R4IzxWvH~&J*lEdSvkPvxXF?f}D^O|P6(j$;|#GYja1>~5K z*Kj@;?{I9W2F6Z~V5(XFINo4V%u07XXRrJskW z?CmWVlfnpQQ5_=Wn#YzduC(|~)+-e?$JYSGR8$I}>v@7!F9#TmjY=s<+(?3V0kU>eAz8d5g@sis%mE}*S|*BMpkT65m#TUN zKR%Ii6%}MG+^GnH-_+oEom~Wn=YjZDi}OMs{tB-y)o4*LVT5QDkM>2&06B;-Ydp0K z@DXK8hmnDD-3dV#kt0g+irIZ=Q;jI)7ui4Nq1A6(IOtF}v@sg8Pkel`d-DGH^!WYW z-of#)i>(%-DSdR^+Y?zN`E|bCVI@)+$RWxWi`4L}AIY{HhCCe(hNyM4dbJlunDwCn zb!nt*#bRM~A)_Vh`jk%7HpQ_(&?5iPUM|j}Or(#MUXe?=$}Rv#7YtSNTE@hJrJVrd zC`51v#c>>U=CdU{i?+a7Md<&Ea-nim*fmq7z=pUb?=$d&m+D2Xj^r3{pnl2}NR_KA z`NU7-6n-&bX_v@NpH}6SCSPQXQR@S3X~c>@Q4BKe#S}QpL>Nkq2&8kd5S|nt*n-gn zqttK|d!oN@T=cf|d_{2+zl3V0=sL#~a(p!iwUB9p_H>lQSj4>PO5(39o;21DMZ`Lo z=VES6$&`N5W~HgGm*@yy+QSAfMFcrxgsQ(KZ-lCNV5Kff<&4TwOZDtUr|Mm_cCjk6 z{>H=+C=)N+2xFa5?8}a2t(CAQCna#^Hk3i9$yjV@F!|@NQK8BgDrW9_0&js1h-LdZa!BROE1{^RP=t(PHr9fCAu) z0X_U_1Y7kyj?zU`suX?@s*-jGk+_w6H}p0J2ppbok9sZ>sJ2!Q`Gtd;5=MHbf+Tfn zxUv*Qi!i2D|Cr+uuiG$yAOQ6bg^8mIQ3Xx)n5=|;i>mAQ-r=EZM^ROeXhS*u8okhT2M{fN~}&6qXm)C9%s&YAiY#2zq^L z3KsI{1@$o|t))X~sK?+~vgJfaCF8?qFU%o4$m|4G6Hydd#Gqw~(&k4paBXL{t?}ic zk{SixEofMeKeU;f5mN!xim5K`BrwJJX9Ga3cO?-C=7+i1cKDrsBKT{Gfb9D9HX_+FrvJl5aYnNJ&is zq^F?=s#aMDIkk9gdYcKFG?l)iP#j~ z;ZYczk7(yc0JSw3<)~%h3S!WrsL`Za+b$8SYL1#?y*c>!-J+u1&-8vaL|zR$*fjmB zRDUn(V?UhkL-nQXe8Ki55*F|%(k?gk7)}yH+@wsknJC5(9X3t1-0NM*)tQ;%ph=X- zW7-^2ra-&ri4>^yL}t;S(j8iSA*@;yV=f|v3+|MxNLP*brD;hZTUHvvWSom#?uCv zr|MJN8s3Qtf8XuUYbpp6xg6w#PCWLR)np*d)U>t+D4Eyv%>J6^Fv2OJ2t-jzG^xV%=T zK^2?wjJ~R689eoUqh;J1j%RZPv2})fYE~u6 zvBjBU4iqevnp>rEkbOo1udC0QK;Div{h9zAszB8?6POB=w$>pzu^dpQoCxm+KRJ4T zK$s$XRSz;Gw@e3T{c;_uoHvp?n~HgmFB)K7D82&PUXz|#*~uD%SIYNbduU&lA%xv73_bFn zOi($H&{5W-51;b4@hBr71Mz=sEGg+@=Gh4eRh?HfQnPfZf<^zn{H?ExQexD0`>EKL zr>xODiEa$sY3tgiTQ zB)}gCh0dYPxp@we>`#FO3Rnb=Oj((i4mdnO)SF#RsCg{M$R&B zH~aBrYjxIPRwUmxx$d&mIJnN!u#41L2yqT8LdPSlE!@GpmPciIUp#U|%eG(W@T@@m z|KOU=mO+9_3J@(@WU^Ujne_uXacSDTicv#Cz5->&Vz{p~)1ojEL0Pz{>YyJdiDrZ@ zPszl_oS5}{`TwnEjC>r{on%&V}*~$*rR#rEuL%hTN3Bm!d8=4@wZ}g3^ zaefHIE?qZYS2i1D>Q!m>wjP9p3Vk{iU1`p08?DBLcw7ea6YUwMnP~v?RF~0NFYD-P z8TADgdU8IXZ%5HNcFkgQmEEoGL_bvvm)K{f5yxSe;h}GI{za@sZSnN?=ZaqxhQadoFR&3 zS%HPAjM44w_eX~Xw`)-wgVekFa5!Gk%^cIEA>R)#5BFcRQ4HArb!Bc@2`^3XKLm5U zDcwWgbD-e4xrJr%!mc9pxnS9X>MtZA4IR^zy!k15Fm|55*W@(Wd8Y|D%@|aM`WOTno^a z&Lk6kF`>}*JHK5}L;b7DHR+7__5XZ}hjX>P?B1BCY*R|}lv^myP<{YHK%yr>++{Or zUzB$WIj6Y;XG5A(EGGb_hf^)f$5v`6)-aX!rPY8V<>Xlq#&ehbR6$F+SbE}A-g)JM ztu>6UjFz;jAML=P<|q=5vYrg>>LzlL8szkPKtagx6DmKcXl_yN{Z||QZRf*SyL#vr zol%)|F;|o4he)%_0Vs5^FEf7PZHg??iF#W0(PIGzBhhG4k5yY&(Rp*zdtrhw31{nY z`~pT5r*xR3%<8RWX$Na3vA{I}G&RdMl0YC|76zIas^d4RST#U6e6kA)Y}4lTvH zC44a)PFNBwioeyms9&e8A#L-Q>QfUtEno7P0MOD7hATly&b~5!u1C-vquiN^)y9bY zNf4qK4v9S+lWEPI@uAw*I}=Q)E!oPz-m8|Kx0iN6dr_*SpVe3|h5z{a=<6dosd-Ht z-OPRwc}=_h7@MQBx#w>?8(U+}m);xn`=~gF8#~wGqou#+BcRDPM&q!v+WGSJE4p73 zKPTP(2)eYfZgB=R4xC1CRs=p8?pHa^&CPdJ%$JU~ZU71l@b%5k+(&3_yKqX`9|Vt0 zj9Ga+_#Vv!r+LWZ!hyr@>3ncO4C35Aq7HPyM1r%t0q*z;XV38YwT;1BkVi;P0OBrl z&(Aum7*@~{_DzI+^%I>sJ`;?Kr6CG1#BL2F0;XQtmIS0W2^bj|rV<(N#Namte5h`) zXoZiov$mz7L)s0KeS;s?1a;A9TQKIMD|;FDiNp!O=0SgJilR+8nsg-C)SjWuCBtA zCyI$3%TwCvy)}?OU<0ATG)#iXYAueeKQA7F&%hE-`Z!{E?s+T#Dt4prz2P);a+pf*hkX9i-C(nRUxo`Y4IjXvfS0DmwG$X5MWO2A^b4wC{4R z2a!rYbUJ2zE=JLf{cvi&-Nqy-Tn%#u7W-WfOHOK!O8xQ>d!2i-0&_T=Jo$a#@ z+%2xCA=0kxevh@_$NJvZQeDQ!=!K_K^ZO=dLN>f|46L$9|Mgo9viGwG_AatFw4A)r z?0zVAjw6e3&=nu{IDG^Gp^-08gNQy_cc8Jzz)zK-7IBoM9cNkFE=NselukyzYlJrM zCMzUQhv^01{y05M*5y*Lc|lyLI8lV|%CQR&*`RLj99;5+GG(Oi>_*pysDP#u@sN?N zVt@+JwN})C?ITC=#~(483YIOi3>1@@9EhaQn|Qa8IHXL!2-0deIz|vxieLsbQjA8- zh9J!JXH5`vNo&o!8vmN~LekseQ-VpgV`E9=`2~VWk)KOKy8#StfabV}nr>_rRV#(- z;M6sr%~>^@4F@e)c*98J`eS0ssgk$oZ5Eja5*$XkD6*J31!0yAQt)PlFmORC<2w=~ zjfzF2k{Zv{5WH+jRi#yn60^uIlYw(f2{i-Qk%+(=L?y%2#4EEy$_Hx{%PfrKHJz;b z?ytGXnNHHqAW>8U(#5L3yD^Y;!0uE)WeMgxnu+d88qg|Z4aF@4_sFBhaUF7_cg=ff z?~j!L(N%3FsJn7K76JsIX3+-FxD8BAc`dO;o>SHE3BHPO$TlOX?t|EarM#4&8fikr&I*lV62RFpe3Uk zQ-Tf4*>#e$p5uW1GGmg&r8>XEiZiTdCN>)P^Em6)OwePtej|nJ>0m*1GV+69^8^N| zWWCztx54L?Y$XskVExnnh<}w2({50lJ)1=+u(@!`%q$*AM?QqiFTN(3Jd}~X)tTip zlxZaAsRDay6Me=a2;2o85{FcCzHsyYhOa6tD_B}%1&{=uSNu5OZ9w>J!phOYM-DyV zO!(#m)5h9nvvwBeDE|6_2`jwa(fbdQX$>JZNG95$BF;L0u#SAz5v284;bh?Fl}}|L zHz1<6;YMf?#S@Sx{9{wurx^P^YFr!8pv>CXevnyC!rYR$z&FrU-Zi%k)kV0w>-7u| z5)58~7GMv;%OkutV9L}GUOvH9glz*dYs>cOq|Ewb#MRS#Dy|@tDtDaKkXK|cD0#() zz&;3|brJkH7ALmj;7fBhCDo-oIC`x2&egVd+O#%S9C-lglTG8m-h`wAp=;~PGbM8j zm2>MswMn%J;dkq6G`Kqva-Uqvy7B$@_sR&9)pDF^`-qc<_+k-0TmWEzy(J1%N;_+7 z$hmdkii$*hn8%^eBX!V1(`h);-``453-g5KB_YK3J3QE59{X$jWBL?6CeTeht|g}f{Yx4IX--1UZ+X|8s;m0;amyBG?<(gb{rnNxs4=JZ(W(ZJ6uN<}2jywr#w-LeI#>Dw|9 z)wLeS>RvT{F%eI|8ybS0d^;JnzJ9NaKban7dufVvChb5WnG`A<={uK;_dgLXU=-eC zgO6(6Ags$5qCA*=KC=(RQZ1>xaPF+gv?%YBMTj=8VpF8A;>DA2YWF1h|z(x6ZW zQ&glvV~)G;=s}L*z)da3%q>9=Ld++`pd2R)F#|-O1gipf6XFXRX^i-~&2>`^imj%r zWbcL8lGg71wy-GDbIJ$&>l5(*^kNCIX?a#Yvycc%HFq`!tb7Oxz{T83!Iw5LT;R=B zZl}5Z5gAsj15sGoTf_N!>uBHU&cpDoq5&zW97V4eNrO7KTri&MrWC%J(=mM73-nQ~ zy&OjKsxBWtHh?k81nH|z>Rx!(oQB$3oy9&5z^a*ATvPW9imv4ETc5sM!G0pZR6Yu! zC=CR=B=R6J4*Mn@;|$TWB7(Dkiw{-retc%dLvEmF1R6Xu_;GX= zN4&_;P`4P8aG42ll31QW$Gn|MNbm;>2^JDiDsG1Q2JIqi?hWYH2Wtp<6V50(sgn&T zs!7(6&j?JeuEla&%6PJFJ;xQcjZv>q zGq{=< zD&AMOi-PmeKg5M~H>ctR7z3QGoa#=_hOHTRMGV{`lm8^`c xs*9}*jjfazv=}mree+W?(=t<2l&q7i46NZ2Wtqj9NtrpBC6!9nnO5f3wE*tiCN}^8 diff --git a/docs/Saml2/phpdoc-cache-30/phpdoc-cache-file_11373a29b3c52a2e91a3c8c3c0e98382.dat b/docs/Saml2/phpdoc-cache-30/phpdoc-cache-file_11373a29b3c52a2e91a3c8c3c0e98382.dat deleted file mode 100644 index 968976b9fd3d183aed1adbfbb542e0efe9f08c0c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 26121 zcmeHQ`%~M-7QR38S8P3=+GK!WUI|LzmI>Tk<|cuQlTK%n4kOD8=vJ0oNhYBw|NH&U zKBSejvH{DTwA7OUENOSop2v3{yQ`cyo4ZbHd^J9dyvc}%X%v4t{{X}yUqqe*(klW`O#d<|64bD#&kC($JKxM;WA+jLql|B2g6OHZFX zSz=FE|KRN#w!vfvO!t60`1f?l3*01OCn3juKRoZdqhRB_IM~wHr6q=s=#Tz*!cGSN z<6g?rD>r2^AICfaI}&{7Ea7SDhnLI`FCx(lkNRCkYz;gqeaC!6Jss*FGL$X(R~qz_>J?c#zdvfiPSJ z!6iEUYd7VfA}H{^O3MK|Jb9}Xf=O-$kxS!V#L-BMEF@6mX_11%Xr#L+k}(+szQ@`_ zrEt~ZU+GCD%q@$UMN&%LIT3q|C|nlP{wgOAQrqd3pRDd@>dN-=)-STB zz}{}w(=yAO(`4I9nbCCMCVXe>TwX9*EtCK3DhWANCKohcE>FRvh`3d>dJ zCcD?m>{b&Z>$Y*Tok;#b0kYmQNkFL%QqVt`!00+Zy1}GCgO-HsqD~TrJmvAo55WZJ z33*YA%V2)Ou7To1#pg^O5`Lv&5L`h$lk|8fBy)UN6ziG13ojj}Y;c3I&};ux`$&Li zx%c!cjy@;s=!?h4grC{4YHEWh3g8;ZIA>8G#Vm}{!X)gL>L*~NKP3Fqld*$u8s7j* zB}t_C__Y1u_|Q#V!(O!mTHPlI7@pGY3eNe%)1xr;(;ILOl2*NZ?0`|?V&`Y&edREW zB$a_+K7yb0p$%TzT_!CnP$sB@!$SA)JHX8>-ujUGLE<<c-mo+LvV5fuAb*A)rNa$On_l1Gv3w4tjFkHmC3%xg|tv(9qE10AnMb zDI1DzCv-x1j!Z4Ot>aM8Z>nw{GO%|L{K!qcE1}-g=F+kds=!N+FF2WSZxTZ^b%O4z z`&!x+Sv-BpUR`nT7j1LLp$75yQPFC$dB`cqK(}mKct|KK>tKXdI8K}tpYbnuc1!U#{Q%q7P1(Kx;7s&>ol_us)>82|}B=lE5}W-E)e z*{ZJmP#CBTYP3q*7-5-m8wMFeKR=wksl_z;iSjmLWT_4zA>0^8XP$yoQ6q} zO|_4?92C%~`NpLGAhLqxT;>)B-_o z%+aW>6;W2pB{g&nAW^JF@RJC_M1n1%x>NA-*NGo<=BIURvN3~5(Vr4)Xm0nKnw1#` z!Q~WAv}qoA1jc~aL_601@EgZD>mQu=|9#M_>iI3>P{UHHt0!Uf*v=#(h_G~2#RsVi ziYTC89aVLrwTZQ(kx)-oK_Rr?=cN4^CdvYnnQG{1m1IMg#Z387U>*3^p~zmx8GD_z zNsK&@>Ka|m2jf0OQe{U);AcE=Zzu(trpyI0)a%n5G z`W%PvCBkeNEkLU6UAQR157)|~gLtT34HsdVdQp{&-&BrE)6aQ!%RG_DbhG3Kg@H2d zaEQpgNXE1BvbcPas?Wi54|bO`tV{yqb_TQ4Gg; zR3&@kC#fi7P+K1mOjN07^@4#c)aTV*F-*5DewFKds&{+#tr|*k>0l4hmF!8GWtC^I zdB|g6Z+!t?m!q>u7WrZ(NX$%QNURASqhFO3Dt+$k7QHRWg%;|PJiOj zvSN!pRYMet&HGD|igNvbf2pWkIp}IfP*KQs@rrCw1sYvrty|}-z>GpWRT!3n%PUz! zE*6TA)M52cE;}(9iRuEg9av!II()5`@^z>B37FgEZ|Y)JEG^SBWtLox%iwLcgFYMeVfW$(bdS(a4PjxwMn$ zj+JbOJ4-cez{WqPYJ^uut9zu(H^C;iDHcl9y8Va(?ZXR_wH}yJv1( zL|;CP2KJ7r)~eWh_wv)Ji!CgsjtLd(0qbGgAjNkF0e`0irvxCiLFt-Hcu#{R&ISf6 ztA*YK(s}{-m)z270L2q?ogomZv^mDuOoyw)5bY>*Aess9ZK0uUe| z881H;>xcR1TF19-^^lCLU)qcwFh9%a^I2+@*Qj1#K?7F44N@PvEwn+~-uc_M;e8Ef zPw@T8*lPPYOk5X6dT_96OQ2NdFt|D67aaL8of9Zz zr#eGYk#aE*0(XrWHGqw36nj2{(RA>=CV)^9GdrD`&tFomG#583(?9Ha}Gtxr?qHB*@9x+^GLv7Q=bUj%Lx$DxmmH0 zf!p0>;!M%%E70D6JbR>k3puS)drYOdSZb5%Rgy=Iq`1@qT;J2}=I?r&2B)imxm zXC!&eoIthiTr$`v>KLUm1 z-h{tV$QH`p4TU5J>rqH^xM>uU{pyXNa*-k1Um+7%nNyYG8=V77V40oW?lfG<6Vaz( zw{sdv(o{)Q^}=6 zteBSGych2%n3djSTqpT_$_{T>mH~}9)bUmvP$A{+OuSo;m@yF+L$7|Yb59dr z$GvT^PmXt=cSaB_Erj8edn}-1Q4l*9=SRNzkPAM?*i_Z{`Y6;!a6_J^5#0DA!!5DB zR7NuoT;KvEXxbZa$x{O?+I?0!CiQqCCxYgwd&04OPoC7W1Wpi=Hn#?Zv;z&D^F&;8 zfmH9=F3?Yw48FlNsNBso8c7wbZZSbrjkPVn9W=W_l5>1kbaYS0F1JbL2QVMz;jy_# zWQk;}`sC)H&wqop;vnTW@4mt9e0Stxyf?jBv~ZsEPw2%hb7;U(O!ekeRx(dQ&N$Wk zXgobF=*{x<@({Dd(dTyAfcR+h#T`y@H|WcE8{V+i?0%Bmvoz|Ybmv7!lDJ`DhCG3M}qHiR(J!wi1z_kUgG~ytHufJ%!c*h;Ah#D=E@6HRMdx|=QL{t z$yB;eCWA(MT~PJc&|n{L>W(k)a*FvEMHC-oxPrG0G-wsXTbLV;sQ-d@%1{U}*S2K4 z6IHpAEM#e8s{aozR4P03$SwLi)b9-daLAb$=k3+7_H!rtrX*_ihMYx2?~l|}@>~N# zs9od3OMCpGOaIBr5gn>;;Z)04NEtCJ^fkfD8RUa?;|J}9(A9K`=Wrfh+& diff --git a/docs/Saml2/phpdoc-cache-70/phpdoc-cache-file_e9d34eadaeaefe21f3f7d9637905ed7e.dat b/docs/Saml2/phpdoc-cache-70/phpdoc-cache-file_e9d34eadaeaefe21f3f7d9637905ed7e.dat deleted file mode 100644 index 0c9bfdf3dc04448e1ec2b722b8d612a7a8d4023c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 15033 zcmd^G>u=&l5btOH3JXQLBx*01M;=a3Elqsas0mOYr=AoEEoMoqGmqLPx+u#3-rwxn z#>NjWhdJQNhXm~1@jQMzGrKcxYLzpsIDMF2PK?=zkKKuVcgY>YHmCIUy=n3J&!SdV zwP!~=(TYDE{`A0{hvK=TRmxhiR8vpXe$`-=Gh=viYLw1OmE#htvg(jkOM_DyCudEW zD`w%Tx@}MFw|F+)#c$AbCNtaM^jlR=FyYtVaJ!%sjt&nC%Aq1=D2BxxN0|(j=9phk z?#;2%`m?2UCll+l>0%g-yyQc3%pJvj;Ne-gbySe^G1;QYy$%~$<(?$Xzqouna1{NE z!Kbb{85f=l3O+|il8PgK8I!T&DjmJsy=r{u^xj`x>%B&^+k4-s`I~m;Na}@+3U6Q@^?Hwe?P`+2}-7 zbs8IX-TctJ?cV5}PW?l4>{-g#w*L36-U);v%|DKmK8GMU4j;(1f6 z)H0mv#l*6>P*zbB{`6G%KGWqROlDe1dwzK#4=68>4QmD~H0Xx zk8VlwOHMxrEeM4pj1}(|@F4;KDY=RVrUt|dVj~<8)l-Uy5(yGQ0ve!k7X%S;r6R34 znp&LVY<~KYFkyWx8fLh~^S)L>{FInN5M-8rNzL2xYK3GkL$Z`uDAbAD>FOkx2^2;& zDyT*^YHMmO5Xya;5)c}}g-2%1WYU04gp}P znl$OQ6gbr#0uEwBe7C&;+*Ffrla}1V)x=H+XueDl{1}CVHc_@MMGd8eyOQG|?Mpg= z*#K^8Nw`6xp5kwkx%L(BBd44y-=>F-Pj5GXrju8qDTDV!G-Zz8%5B%_4xxz-fRa!6HvlD3YkI}rJ&o}gjovni`e=)!M7A(J9EMq8nQIzB@m%Wh(R9qdX_>Al*COP~_7}<&y=^4=N@PzBalcX@h^T|35=>n*OTB>K z$`etBpdj}`UeTOU$B8LA1i-xPvnifaw}~_-x{27#LKgv5*Hu}D?mxBpkfS?>I`bmk z1%81Yb4dd-E%XzTfb&2#bVqc`c;w|HSFVfGxuX<2+NLCoB6(U~EZ?ED7LHhSKCJ;0 z(3aP2mIw-1((ABT4H|O^){TuSQ23gTxgQxb)bX|k%)pqUt1tyIFaUM?3B|7DPY5(p zgmr_4QXSu)zOps)$HWgM5(`Ia6@-tJbTAab_YX)R(YO!`@;R83XolKvLttC6hpLkE zZlX--3E(BVf%C`^D3)X2iItU_C3V^TU5mPp!?{6?7*W9qGMz_eo2+l~hS%!`VlwCO zt-dUIh#Gh<9-bhV{DKv-BDPGva&0d|D_rh6f{z9n|8MSJD7XwUcM zY56HMJdZ1{)!m9Nd<|+O9}1sob9ZK=D|N-af!Kr*$u)6`)?V@q^jbjIW@div$_rs6 zqZ4~EZjjSR?%7TXAd5}5U$e`g-I{0v&wj-yJ-SdAYs#BP8HoY*r$LbPdv|j#|B0}J zH56ze5BNdtFo`qk=Sp?`pr##;J;VzetDjnUXCZPCqW?a}h2m|<(HZ`k+qrSNu>4@Z zc!CCL#47M#&5PH^#o++v!b1eM7t0mkm&XSZ8+3}YrsnpX_v`=X1>&6uEqU|hBeTo_ zqnAPjIEq?TWROU_$;$kZ+uorVoT$j&=D?!Y)r9|pdu+8XG`-#arB=dcKE(HXWL6LP Vctgp>``sHC!Gr&uF$D9tmkof$gzI{x3^ z*NtO<8O)Fr!HQ&2m5MA9N2AgGp}WxlPMh1Wnrq|h@xiDw8AQWul)O8L(oPbO>7TFT zew6>Y*4)}`eomV&nrnai=5Nc5XO6vlr~A3W&v z!!)HLeJav!g@gW9TXp{6^Me3C+&KN?o8UN3GisMeO`q_$)ROq}hYw*Agh>*9lAk=~ z-{U0y5N1)Z-sW1tccRS3!*3t(_eS%rEQveWli;WqgqAjK68t+Fc9Kuy41W%yG!3t!G*DEy}!3Z;lm+5~U2%s;c_^L-dj00vMbI7uU(?k2GM;0EOh|0Z=I%e#$B2 zPNOVJ03;Z}2e3$ijl_n@Wk2o&y~z-&4{&d{Av}PINhjOL$@?xCPWt_aOo#w)g68$? zI!+&d-|mA^XN24ud+A${vhjDoS7bEw@L`Zw*M-b>)YxBx(X}qd$sE z%pnQbhF};KG=3UKV)$a#6z7}4|D=sa&I*Oqi<@pXTZb1HM<+kE+D9k9?j0W;xa+b+ zY{Y|c9}v3Hcog72HB2GR4+S?30t2jE=AU1zzf|q8+dYVS;iRAa8uqa?5YJVuFF^!Y zXU@lIThO2arB&V_Uxr(}=Vhu-lE3VK|63 zioe_K*GI>P?e@cm51%xiHgZ8!OtCDpz}CwKbuFeqK}!Qr1*Dmy+1|y^ zjgn?qV}C0K@jIC4sH}&Rb51CIdAiS|Y?1)?iD_&mm)7cpO9W)%4X*+$5RoXH3DaDz zZ(LW56m~j|a9mgcAg4ddsoy9fzU-qgM4rgs#Tcq7r`eo^aw43|iUoNlf=N|KR%axb z1#2q75S3Z!MbRWoKF!19|x zfjFlAv7I?O@oRNE^=ongRKe-^X@P1c2V1H6+U0rqy@s|E~%B8NPJ*k~}$ zU~VYWs9+^3ywPn7)5cgv3CL6_b`&+=-Zs*)5;!VFKdPkg{fwgcfXeF8P+=mkV8)_N zcBC7>m(bsAUVGa{52|85e5zradd?o%tDe%K^1O}yWVK>3)u^g$PX>eN6Z)w#K`Qag!WQz01#RERU%?Mc2PNSta(|yS zW7dfjvRiX7vTPebxOB8B8VVTKHAw;gPPN<7M?@ym4c$~p-{WT+ad>C&X=F%(PM;;)qz0>YeX52EBM z$`>j4?5YJdZ8p<1Kc$2#MV{tO3p&cSGI1B)26^|iI8)>oytVX;!%$eeNpdr*q zY04i4|M*9s!cxXqorPx|=CsPQkMR8P;OP8t-x{SBGN|7!@{ccw*5@*g`)pilklew!zeQ57quk9ck5dKx1j` z(hLE&XhSBjTc6%)OC?MGs_s|<^&$1q*TvEg=Uxo``}x? zZG7B)_DV#bN=A!XHw)#^O~Z(++KXOcA>*pl{A(W za$*g3fxwM*mQHNUA`9ZEYg1YLsz@a@Riacixe`WTd}wv>xGE6>D(G#ynBKi@ng-xs0eHWF{-JUGWL2k|I?8+vhg z-sb(#y^F*4FXzW4X(rZ`=7i`0Bid5B4H=^1jtP-gzQLQKeP7}z?ER^=DyM^-h4Oq9 z`mC*8!Af@%ZdO`Dnr)u@^?W7n(vQJmQ`~capxCJ!ANZRhG1dg9^Ps~FL0c761d1@w znm9{?p%KWLHU^+0k#31J8a1FveL5v>XYmZHyMmYk&+KoCJR{PJd{YfoD{CHUQA1at zQ}1^>5ofllm11tJWmBRC4$zy09bqS}=0pW-)w5wS=z?SuNjE_*BFh;rC{IidT$Pn7 zr-X3JM4o9a_y8VoCGFpkE854mT{n)_nD&>*iX;}+x`ZX2sA&If<9+mr!iZ$uyOv{W z$XL)7E))q6+x&G6xx}0rFKWIyu!?1os^xBg_{&-%2$nW-C{#RihA5cBK)%{S!FS&U zwCPZmQSheRkuwTW?8sT@h8@{)hN_5LY8t1Nhf4og0#tFuxe-BEeE2o|KD zDV!iqGC~fSB|k1%Ey^i*nK>r6k+|GW5H*XFs9SHvt&5$4-{1&iAup}hun^1w!J1w| z45!{wBc-Sojj7O4v5fA<79;A11PRb=wPS~ex*mN=;kC5Gme}>&bJj5<5 zoi6zh(I=NUk3oA&_~!_borIz-YFzXi8In=hxehiYkztA*badtt9ATmlRRD&HVOKAw z&*>FVCl=tz;kK!I&8kfGE+&nZ{Y~W`N^~ysT1Z7~)YPOP|!mrK~gJc^eT#)?d zvY?Aj)nth3U=dX{a`ejA203&pBfg%6sX{DxHs@h#UTr#4g#dRN^bOO^uWpD|>ZtR@bRxEfuQb?N91VMdfKiIYDBhC!k`Kk28&dD0hIpt!dfm zuxqDMR&{#PCJd!!p{q3$S!q30Dt6#L)p;|zWH@3Lrm600IVWuvk0kEPvzgQ8RQ8{iN>%5fpPAmq*4$hs+&y&8y^Sq zY$2T;r{&&pCZ%c zbUWOS_?)Erf4=zU(xThKqF~RDwWTaUE^ncAMjz4IEWid#Vw+JKSM+5WDreyfk^{*x z|5x-WzjXksl&T7Pxosg6G&hF9{PZcsBLc-_i!$kPDsJllqZ!~N+mpfzQwjxtNBof! zy^7``v0!TL?^N`%aH@a?qgG?`jUYYwicepfKYCR&N{ThiEalw!rUE=yv$15}nDi9p z-8?isZ)&q*L_;04ZHdrblk@PDkchliW&UB?Pv)|+OI|qFr&^@n1;yqJkn(BVcI)3K z7kj^HNin8HmIFs4U82W4(^wg7EcFxX^ex+=M ze;xi?oMWv?q^DNIrgM?$c07;D739p8F-tPbd?O|=iE+8TzcAx|`SJK@zrBBWj)Mnu z0C+aWmBwcAVk+lM#sjJy_J2Vg3iDuzy1RiAg#~39NTa9D&M?_7c#6P6Kz106Gu3b@x*&4#qz$$Xvr89kq+B_>4l{k(3_~)S z7V}if$=jnV0@(cP%jPPEagLRpj2imB(XA zj@Ds_mgne~Ebik(f$AH);sz-ijq8aXi}Re1)f_+Gdh+ba$Fz$mw8CsYOJ__Lt1tHz z^Ld3%1poWs^o_dMsc5a3K`g44OPAAbSnuMl5rlB8l03YqAJN58^d-tX{=O@3k~$Qh z=j~EyqHH}9UhzsqCRJn5Z60!hU2gg{ibRVJIp0!b{S8OOI&Dl|anny^W#p4d z&Crhsz5jw<`$T>Ras22&-7JLJ7;omJoVY}mA0%%~yXDo0$@vuhJ) zl`C$d2=cVDDf;XQaPtPe9O`M>u;&okl23u5E2@1OzqEt%sb()ABR)S2a2p~XT0tQ+O9H(=i6!Mx7LV{k&6 z@SN31p<`+qzEM#X6%G~3K>{#ONGQ}7tw|Xc{qLhO?Iabd8WSWqQy%uY4B}#S5m7JB z*`_FfV3)YrOne1Xp8e6_kL#$Al#Q=O?-je`f}#(GirQ?_*RLBSc??CR7=W5X$;$ev zRM(t=rUd8h_)a)pLTOmE*5D#Iy8Em|uUJ3T;d+vEoUU()3j7^iwIoO9mI-X|iSiqw zcFm$k-KbLbqNiLw(J=sk2@&v9J%bQ98lO75&Lbr6i-%txtK_H}>|CRaQ#r`u@CwtE z@(5-mT%2y7ncxGy!fv)%iBm4kasd!3Xlj9IrbE&E%8qjI(Hf%3u96R7VaVom^509vXkX(_903C)^N*?rP}QFp0y{R;IlqG;GPKchK72ekW7#Wuh7*6Nm^O`iG1{!`~Y zZkcSWq2MY`7BBq9HJubo#tkaOt=fr${rO{m)Or7o!j4oyOdQ?+iB`0bQp>V~EzyDg zstudmAn zf!u>Al4&6!kTY@o+8cg}cGaaaivyU#MX48b*{lb&WgyvtqQ5KHy)ux=bnl=~8!~g} z>D@k2lK%}*e@XBsRtGFaaN4x`XkemS0@V1)i7V=nBg zkCry$0@rZ%dJOY3_AoiGh>=iAu}9Ash(0Q3;!N~xY-(UKcFU8IGD{J zrVuR&%rt3O7T8YRcu0TAi<4=ytD~7I2K^yUW2CU*+?uQ=^B3qZvA*~IBXN{2a;_4# zW>XDSp|4sM3@&J$)zEE`FV_?58RMZ}a$LC1VSo$E_!9`cegCrh6vBeVnlGj%3&m(e zTr5qitRd{oH}MV9_ryxMi%Q}n1RfTbZ`M$783)rA#wN5SjUX_fQjRXdt9LMN!htc+ zCd(0|iI!84!uH9Dv_2%C#Y9Vi3dy*m&QeqrQnW@kgy4*tRy8h65-6%v|Zf~yC_P(nvmeqEO7fBFJz&|UkvAbc_Z$V?~j0ApprDXf@_&w+=EKijr z>QP6@NfIQl4EcL$$ipRRWB2GQQPFJ}&^0Q`162aA{4>n~4@wGz&^hM*v~*|XZi~%@ zd+TmPu5gd4ILG?6s4Bep8dc3lThv#Z7ao+BqIE6F+~COl9+W?2-rZU)xwct+-(qJZ zz_jOw5I%=azXH>kcEf9wIUlV{nayv@o0&$`ex|TDtXa9QlRvcPQG4Z1GQzkkgZW+> z%#?P}Hjh<(E$cC0sYZqE5f|0i!4wY*Gu}wmx@`9U#GgJtmwWjueZJ2-S^2Kp*RU4X z?`5g67F8JQW;_3G@pTv$fm(+}vmUkf#rDdEzRxx^Cp96|1JuU3j_XmE?dXM4GPj;n z5(y8ADEu~ zW$DL3!s&Z307UKPNx7;JcWQZLq9za~7#`CY+mx1!Qhqk*q3~?Sd^AH-F%q)MQDF z#X2fZgDfoL691M$DfkKj$lqn><@h$6C(tP)Nmlw4{_GREehGcglW*~N%|b(OxY4Vy zxE+@S%2xX#e?2TS+YnheLgIkom^xOMWOU;m+b#4|Al+dDg|5;ZWm^bpryB~Jo1V7} z`B;x_P8vL}Tr|^t!r7 z72CeuDwgNLlPz;SR<{?7l6U!X{tk=#JHe&=!!;a=`>gEua;iI|i}Im|SB~6M10kxQ zYzy;pf%B^T;=SV$`z5aOxl!lG$ywGSFSLOUc+*0)f*T6=6c_nvaHF_a12?J&V}gjC zEO6Y$fSV3xPCRn&5pH}Z0eN20Z!O%wbRxLnIT3aiPt6Ku$kxTWd>mh{P)41|FQN?o zt~F{T^PC`4V6P982IjvqY5MV{cZk_tSu~~7d$U+Hh$9ljU`i4kzLehF3T4FEb1;Xl zclo#i8u<76>W>1@(7g|}K$G*&i8W;=dw?5kiD|gObrVs71Lh>;-f`#o3U_XTJCwId zxMR-E3V^ITcEDDO-UEPIxR7oTrYlpY!qnM;Fx4WE!9XVjIoRw2gJ4A|lSka-=pB7t ztk7qLKH$I-wwBW77SxJ2Y-BD}`Z^g6_UMMyTOZb0^5)GFlS^bQ!b~oqg#b{3q#S+q z3n!L~t=&}$NmYD!#+&SxpgWGB-!5jbdW~|cnQN`8Q%VnO78&!E86jbyb3!Bx2or@R zbFoW#UcS)#nO@R^I6~+xW}XKKp>wtS5p&(k1IaVe(^Qla?aC8t2F%vJ3&|>s;?n2=&xeyHYDK!?+?>m))^cbtr_&l5nW-*R}L>N zQoFRvkw{!hXhgRS-uE@%y>+}(yO-l+q!ZPvx$XnhVaQd2x+T1no#AiaXKQO2sBS3d z3S5?CyyVNuf-GKgatlzrjn|?MqFy-ZXTQ?j*PL2dzKb?b5%|j!-=6S2!m z=mD*_073iLQRltL3${ETj|U~UH$C51u!;%rs}2aX(1qf4y0s*$@(x(;5bdf^i$Q%= zP=Gd~bC z^D9)TKoz=!wcax_IOxI_C!>8p3_yz^Mmb)eW-+5> z1v2tnDS-^KAOSM_=KBKps50&M>%PIX!WDuZ*8+^&l zTvg9L8K{UETp2Gz++Cbs`xKXs(F)_`G`R|g@qckKF})nU3bUvKC;Ilmsm6=RK_|Yr z80`ULwqRAU@nXKD;2mgoRzR}?no)-@Ah&Oto9QGW88DDj@{-PAnS^9tuVBWpdsLs) zXz|YpGG!)vfS4UX7ekELnGSF_KhNNk-~wCKzr8sQl4zVnDK4ky1;nT4w0lp12WHGd zTi3#OQZp57d>r)oUR;>Sh~{{|6dn?CCvJQNTlw%I9>-qc5MNxx#v#n)bw~(9G9aYV ztDN~A2$|Bs?>-oE?EkF3rrZP0$y_qG(?B^yN@N--qh59$X2`(r_k&BB5eTuO?G-u= z^!4Z8gZ0(kc2UcmtCdq5JxnCM=#2w!G0co8Mb0MA7UI=v{yZ*F&o@24`*|la@eQp* zhy$WtKA2y(faR+NCL3*)_ZQ~Twk0iT7(l}JOcN?D`reLwAA<(&@t{7M`xN|f9TiSy;j7Vm zpIZ6c^8wWRk<5j)UFqIZ7E==FyMshHW81>J6`lLO;IktS(O8G;H4#@5`E})iBj&YG z{(X6acn`Q&>&@di&ov=6xOWt9;NiB6P9|So)^nldAxz944+{i7Cu_7$2ixedX|D!Iqn5D z7ojY*yPl5_8tU}it2Ao~P9LpP7?LM1eYqwxxE-gfb*l2F{Q4uBighkXvN-Eu-7t@6 z$`j!Y0YVK%A-cejA<8QryAiA7f z@!~4X!BxJX*p^Z6hu3emTl{kYkAulR;0Lp$+;s^*U7E+`z|N}`?0gF=!ZvbdfgJz= ztC#IQEXl~Z6R1Ph7^wu@fk_&5FOo18x8N+acjC_UrLBvqy+?9O?D?b=xzl0PA6>=6 zb}Jn8x7saz^PWp(Q=DMnYel4wI}SVV!z)*{r53K6;XiCdD!NkNW>hzs<>j<`A1had}jGq1`ar4*9*o?n~xGh@O()CsUsFm27EORtnF zJ%L#`Pe=eQ$-8N}7TO1L7z(8{!RckHFWqWFPe6!ol#(pN+eZ&x#rcjXN$v_@5-ME* znSOy>Q4Uqhw}2@2(vA)0c6k`SsKtpF0|Lz+CPWwhwX*`y8B;eet5REew~yjP>(`S`Ry^7fzYdq?B(;B7xb1Gd=-PWq!D^upj>F!cv$9R(wA76v_U z7({2|UWisJckXltei(9~0SD?F`oqC`M<%%Q^BoUAGAI7M>m5z~Q8@4;jOvdryfB*f zN2kl)R<|2WB78PI4Lwi#00Qapmx(|1ho+_17>1{w_aX>G|1|KTv3HFB+A(|SF8*}t zUwB?a2Hl#T3RM8I3~QTCgJ?D##lt6Kz2HPKxIHfl-UBb}yCVNgX2*km7ajcw|D4Q5 z-Kakvc~OfX-ZQg4#)<$$YjIKfC^k3<5Ee|MR=6bI66vAOv59cjrn$Nf={v-ZYA zzdve`w<4v_!aZ+c<()rWIX^#N83pHKgZh=hxa$vsl?4pL5%}Yb&`d^1P1H!Q`muK! zMC_(8B}4U3yw(@Na1vd#1gVRQUa}(2)eu^Ro>_Kh7)(!tmZBg%$)drK1E>s;g#^nP zbii@b4l&%(p_<_YY!jU{F^JCS4D)Neazonm#JZYa70Z?{$(U#TFrlK4^<$kOIqaQ3 z==Z>}U|8?_7tbxL_@^LB7-p;ERUeBlvOw&u|j0jfpl{;tQOlfKH8t;b#;`InqIm0dU#q1;;bW*x2j!L;o0j zi$U;@AV|L)j(b4{mw!o1>@P%~Rk;{*JoGGbqccD9g7=dF2_=J0relmh^ss&s!Rcux znJd~BGeBgEhz0lQ`tgf```A122VrmtVMq5x@0VYcK;$ET)D57G9grxZq#b_>)P+u+ z))<5SF$V5*f!}E-m`=yju;q+mz6Mb`V7y>D@&~q6G@S)#8Ba)27v?F3EhqTI`(s&6 z0`#w50AyrUgtmmza@U%4;%Y_Dkd#YL24lZx@tspQY-_loIUBKQ(CYvJ&Gc}IMlfQ} zeui{3%K*IB2Qr31tJ8V9_k6e0SzKcB?87CgjEZ10%hAil5!NhRNh{h5hMM2%B1Jd9spuZHb z$I2+u_h+3HqsTO}+Q(F_ooN7-+O>9l;m!Ni9Xcd$rt;s>0&M#NewCpejuxpl-U9*W zhy?;-zJYwWb2XRv^Vi*P_g;G2y9Y;mPxrRBj&|i!xB)U>JZPHP%D~qlcVF&QHlPPc znsiDWNMbCK9wKpq>LLM(yJ77MbJh!STJE0BMsGXeWYDLe8=T$q9&C~jAi=T@P_(+7 zG&Y#NW>c!dEZI`nqm!>6R@1^q4`K-%EuOlVSj)M)rBVjx7AFi~d6 zSae~c5lqNWf&9w1EnS`Z8iZNpbkTcCuYh81QDi2G=gP=+0>)g2#E#Z#paa;>S!5h| z;A4U9@~#QS60gE6*7ZG%C!frdc0b78;p`ZzHW01e^VSx<$B!R-&6Q@BcSM1`m&PLq89WGBE6WXHhhvhsS>r zyY{1C*~V;KlBl7{G&t=*U3bq~&A0p#pS4YJP zTU))J7mT{_rF*U*m_XJd1!S9yLqoadH=q{@rw(n_i4zXkpCUi-9wbC#hfsxHU#7z! z-42P@nfM$Di;2@A!NubzUIU1PCj)Te^;z)sD}i}58^F8%In{*CR6qbQD6IHsH8`?^ zK{hjfD;Wjhx#4-8c0>M8P)qG6BaK2E4 zCw!&zq-ZJ{1h~?14Ld?{2(;;*sV3l97h{gph=HcQ%o50&Ljafz>~vH|ven$5`lmy9 z;-m3W7v6K=2648{HosWf9*?5wc#t%`=M86Jv@{K{a!EK8^?i;65A#fk9&yMKyoWbn z{x+~V8IA+v2UA}n5RS&(@xc3&sL$?fIz`6PqwX~yF@ymBpCB|kISJ%jXxowE|E|{^ z4~NKhu~nEi-=AjAvNk~GN~E}9pcEi8cH@~C4JSNn2>c*46iv)Cq^_Eqe)#O@X#Ws- zxr~}<#F#-}u?w!IDpqY4m!^l?Aw72=E(hGT&f)ICce@8aEa<_m2rrCN$1ZXPE!x){EUwn$Yc^n=&KST(Hg1$Lj@(s7h#nnz?lf|D@OI zw6{vu@^-n!OAmqkduPT8TMLNM5QEB;fGN#G`hGLXg*9$iZy+l0@G@J_w3{ z*-yBAEi?yFoe?sVgNMVgkKE`!cp3eaT$Awx2?DhZcF;^m0thDwS_U3@x0MMT7m%6D#gN6k6;cPvGEv+<3%YMZ>OPGOOo&h>iE-cuTOpBziQ?k^h&M*# z$nz2KzOzZ{xiT3W9V3r+4GlZP<79iqYI~8Z!{(2gQno$pzkmE=EU7=(mfjas(c_bo zW-RZvIsZk@83aq&p{8SpFq4-WHT4~}KQwLvj6)$y3A30oDjYao2%|O=cpLgz55)fY zt{hlFCUM?fY9t&m^%6q-RZU`2C?pMYHI@taD>)pd6gwcCNcux(MkTumS!8>8*ERCew z534__2<9^$wzZpm_(PI?_~G9xKi+MvEZ<%HgXAHSF`*hISrLReMv1YOv<4Pz^B>k6 z9<)spX5lBvU&(I;OhmsYnWBuPz70mG6wuv$Z#L?KFm^Yt#l1l8D!?fD(E8X<4ZXb` z`9!z35Y~J!mO#EeHSFcYUx9ip@a*m6IL<7$`Re5^_FDE{cIZ8aXZ~7?bM%``(NC*aV5NT&95zw_ZG7cRpgZ0Aev_ z3;Zk%hfBTQ(b-vhIBbVu>& zN~1LyLV?XdYNwuS-2hG~6Rfj$OGdM5)^Z-UNl*OQAR-+9LD2#@6&qJU$9&u&?EJg~ zjqUna#f_*fJ>ih8g)jfP^yP5r%ihtK&)Q$UXn%S5FZx6L&aq(S zvt;3RI$2TSSc1GV(QsHJgI>>Jgn1lbnMAUjY4%#y-T2w@QW${ZlIDw;5$&Iju#Xq- z!P_DJ@{!C#h`l4b#LKXdXVwdu7kD8_?-Sm?JVyzxICBX{8NCQj(nK9dql*O3t=#qg zft)^4@4g4I)N-S4ge?4N0AR*UhMIben0%>RaRdJI8jZ@zzgutK^y2?7E}1`*UmUZ; zUhC|2WLvd!zqGz-zj?Ea0V&#zl^v%$?TKR{6b5Ktj%t|Ju?KX?RciN;WaF)pnLHx+3ySxh2|_)E2QM8t__KoQxG0THPBlH3yVNfQYE z2&&U~gdEX3nWC-$Et8?|dY0lSS>qT&%w<;6AaAB+Hp=uKsvu;O_dmgO9BAE_tl};j zOIP(Eoi#cc@x}#eC_qFV7nM-lEC@mvRA*%k!IPRz2(-5$}xR zQBd9lbV3c6;1Lu>L7ADL)!;hGzOoYhqOkH4q7wfCS@ zU1k&;Ws%Yr^my?G<6HuP=GIrt5m+=zLA8h~1_joJ3qTc|9qYsX!j8ddE51TxuxF{%wvOtt=TyhvSAY!AX^a^PUEYAIujzm1m%3W_iHV=0E8 zl(rqV&p~jyE4yTW_;+jRo5g*oe)E4(|NmV4hJVWMFPz_Z-0B3P@lbreq9GoZ41v#8k8&6e@sA)tZY+<7 zMcM*Q)^+c+^`h0MgpU46BAq->0kL)hN#kpzvo+6 zvPl#9Bi|;Wj83M6%C}3~Ns4 zVwcImRVh3r>#6j}X9cu6WK}bKDs21p2CSBYXExL>tWlJhECx`=@w33V4#Xm#nxB-fI4{Jz|bL<_y+z z+TQ%vdaR-{TgiAxNM&2vd2&s~yG@M>93KS3vEt@3D9#FY46nE3_<^V-(EnS%Zw*T$ z0bRAiRbhUXuL!dx#0B3G#fWW(*ew5#5Drqpy;67~^i9tFX)jC}wzUlrs?)lbseMJl>kI4a7_PZ=KL zKgbZGNT0D_YQBW?Iagw|?s^XqgRF1jKMz*rKM5-GeZ(|ezPZ|oOO0&J1sl(UAhr)N z4dUR&;#s>J3^^grHlk!G+0a{;yct*>LZH31=nw(~2RyX8rYw|^(v%$=&l~~o5C@5q z=7uvi5|RRy*CQM{BO%#cK0#o^kEjY$!>|}nf~1&Pbma+jPOQN+2dYSqsB>j#`CDT+ z_Fp!A=f)ODAMVD(U<;E4H}P`SoI>3=%P0;sTv)V4#^=e5OhZ~|s+~324Gl>>S(q{) zBFl`GqBtdCBS%`qKX70#o0aWsjFU9aIb|fFg9<@B#4G8M0Kul^Tir%LD(CRl0aHxE0^U`CMxP`#oVtPF$!ZoertBu|sBkF%%BUt$-%O#1bma z9T7F@E$$8XAgDHh| zkS|2$BhzJPJls|73bG?r%yWLs)ylsw0W)?A;wFoF6qBbx`Gb^*!302J+vlhp5fC{y zkH5*HP2;%|D!?M@9}gjj@(2F4;FL(?ds!I1)U!k1?_-@Zgu_S;X|(hNSwX-SOkbkd zBAoEFLNmm%)CoMOOqng#4%-G}({8^!?2u9SFF)R8hP&Koz3@Y0?Hpnx#Vu%|(k&ax z25mXX#(o_`I*Ss6@(i*a=n6%9&LD2r7%nR+m^+pc@{S`SNg)P|J+|6Wc>>=b=_Al# z$`drO7pSbriHRB77G`iKj%cuh{O|vyM!5_Z_QOM+{ZMDl?FFI7uOH2DBu}c85qw}%`tWe?)yvM-_R-#VyNLE> zQEjcdP83riWin%9o6?lpH!+TsZ6kle@tko4DS5wQ2M!lEZHY=bLTssGX)srod(xYg zsRM(~7>_Yq5Rni(Ice@55O25hG{|aji#_O5RLr7y!(C83!)#=$D+HycQGTu4{-8V4 z6X;wnPPm^kZ45`3@vR;bHE~4(sCv=P3IyP zNL6sZ$047m39!kjpX?@UL3-2zn?A15Ku|9l0%lFC#BekSYB+A~s2il^rJyWTPm5UE z91+x!;N;1eSpu%aF=X@2w5c{xBK{Mcfy6E_n1jX&9)HT=r`nM5pv0!Y;;^NoC*)@f za+YZY7h&!>u`FEd4%n3Yz5m9EDuwMh;L1cA$O$;vjiT%HDH3+&kBb-mME|Q2TLfFt zk*vZJRzS8VySMbHeJA7oA()OqmA7dmm4l;4>h@p%_4(em_qW}D>WMn>vV=Brc*i-6 zc5t}m?H}xYhr@SC^Ag0$nfktDS9o?F3@nEu=i$=`4ZY~16%<6kK-1Pl5=azhn>`ZP zbsNN;Q&5>>vV@Q<{RrAB}sC{V;g2xnz&vs0z_7 z`b%u(=Fck0 zhBgm++ClZdRE)&OTP67>$2r|`63!?e!s5B8g=4%7VTxMmEO|0G^;I70i1&6rKmr71 z@RAC!pS5SnhxAY$qAyY%%1bV-sXvaTLIZ!}(d(uF#X0t2>&A#H(RCsnwly_TN9i`j}` z?T|1>&~muXrZF|(X9~0q7b%8%*^WvUw%279^}u#5%k(o?hIa--sfz=& zU8<)-?xKKp&lX++nfb^hL@Bl+8HiLm&Zhn70$kEc|A_;Thg+Ss&V8hm;tSG?PdUXWHBRO5*q!IYgkWr`G9d%v5(zX$-Dk|bt@;m#}z&J}! z2oXk$M{2hXwH>Ztk4AVg#35u9$^)*{^reg6+C5xbf7IFj>vnFL&R9!NENdGFoa@eZ z5K!?S%Aepx5k-!2hAP4odj!25^#FCrW*kM$-2M=i56g^T$BY^DP!$T{(T>IPv#ZNs z)6}NDjAJ{dnA91(e2IHIOHayrEj<~ZqmFdPT+_4k1VX#%LM0GZlY>(|i?*=O{J>rgLp(3teE}iWN&Y4ckts9kP6c!;E0}4ITF*OY&5d5rg0O5A(qS8R~-7d~xQW7;)=_aLc{|oa)ZM#~q6 zjvI!}s=(q4<=D$2(w%uOF5^|;LOEH4d$yraJ;?2NKv{Z<7;DV&BHf8g{LFbp#dItw zKQ!%394IlX4(nMZrVL-^rtSoy(YQZlJwBxM0?j*H$&U4fdX|oBC*+T{qSzg(kN6Xf z;xhf!`dUNkHTt8;jCM}f$o>d*sArjMd>fRWVR7MbdgbAttC`GP*6VWyP1L>GiZZxu z#FD5ptRI{V^O1NOX~z={9ET-F7w2&diyCm_v!tQP2-d<892=ffOki+LJ;h3a+Mf#8nJs1zBFs*i8U)rb&FSjczuMZ}@4Wc- z>Ds;=JG9HuiA(w*7|6oRX=7X%sOL|YXgBtCScQMe3R19elQn~wA{dG|AcY%_&Yz~m z-q0KNL#dfVX?1iS;DS||SUDXY5x7CGTy>)7qQZO`RZ~Qk+R_){pL}X;!m>o-=YA+f znuV~rcgVR&Fn%r0Mm4{-ZW=ByyW~h|t}&RCyt1jD2`3RG%?5I zW8{10RwdW4;$ld2Z2ozQiwHgZF$&uZKprpPcH;Kf5Bp)8VP4pdx@~S!x7U|f+wr-{ z1=Hny*nhmh86HtE+1()Q6~p8Tw21PS1rW&E*8{<>sGPIQtXl zEE0ooM7)5EZU?*=8~$cZ%onDmayzDyYa?@spCbL(eCng5PL7Ge6U5<@1d|wN*?Zw% z@RDbk$n)tKVG^>}IMGJwgzgd5h`Xv>n#2T*2QqFLDWeNodUDdotqPL*a(_>T5rN7N z05ecj;ZwLS8`s5(DfWQV@Wx8eI@j506)MAQPBf3gNM3MuigMN&_N#~zDLh3|k9Cml z?g5MkeQ{Iy(R!gF3wPSLa2WvhxW=RWsXjO5`wJ2QmiX8r1h+~mz>b(4Vj(=bqBw_O zGW(V;{8w_UG6GWX@8CTW`b%`yQ!hi%~!l5=HN zKCmC`uzXg7N;(7_g&qmp6f1QmPUeabL0~50=a?5wCXgtD>_~3=S0pOyPy^;L>e!H{1w)rv@IA+FyP#y$wuUI!= z6t>uiRVUIvh}P`1-F}>Hto&$WF5xk;xyMQesAcMP+8?nj_tsMQ5V}y@dnV(@MKI zbDDgD>Ywo}iW{1C_S1aIlL{H{No2SI`z`+IOW+%7-1wOSRnFPKy*eT45-CaqxhTgA zEtIU=49ly(;d!<9q<2}K$aEA+F7cA!EWuF2M=CnMzM4sin$6m()ui1{)- zXnEvv452_AS{}!RB}T~ri7tQ{Mm*5hG01qZgfLNoT-yq?Dj?6Fg0JS#+Lp&1m z7YD<(B;Etzry&h@M}m`JToks2 znap*yPTsjjVRHoiLS2qin2gP0BrTk$sS)xvPs!ytsBC6DRFeits70z7eJq}ci&WG&-FwhJC7uxck*&}&-j7|+Y`|Z{C&%geP;n(zI zedD6KVezUNUOGeVCFBSPI4T2I$F&!RRyXdd!pqmvDnPCv9M8xtyeZ;uB4ZO1;^Z~knB+wSWl+sos^AvF( zPY#*0`!|Rk##BcG)p)-zwC7cb1{!|cc zrBeYyoGZ^wBALrxV3-A)=tcgQN%Z)oM1H@faPjdr2RpJt{f3qB3tuZ%^b>^0S7&4+ z9?DJfoK!_)f?Tjx@-$%$e1V}Q6H&+(@+hY!Di#H|S7MQ56?O9nh+riIM7W7OK?fuw zmg^AlLZjJk6?9?D{+(*U;rR%fCPFNyT^UL8_Ap?QHR0QG+4raNXMtC zoh%PCs2FFc@FB%ogJ$c)*j9}vEY#@Aazvp`qVzr%Pg&(s170ZIkY)|QuFR0e2LPhU z1ZAEx8S+39qb^5^cXm0SB8^7}{4$2yfCfrGV~fP4)g#y{K<=1~UkiST;Ti_UQn4tT zYC+;bEcWenYQ-g`=0g6w2Iu9saB2l|(6v^l_CB0_rrE(UW)qu53_bgJa`pjY%V51_ zF{+ofn+!p@^rg97P04l!l?sg5# z0%DrGIZ8q#7*$D;3Ubx6`otL8Sw`J#vjKH>^noYJZzi`CL{1w(d`aYFH7yi#VGNbE z_7%|WA>1vwW5A|rJ>J7RoZyTb@*Nf+7QQ*w!awCfecfUTdBY`6IpeZMsf<)3QRwr3 z1^D+Oy$YL!R9cZ}D%<3iJYTlRV@t$JycmS&49EAAuUrtEiPhqKI3Kggw4FAt#5`3S z)xndgE2=Xd#;17Mbm$pGI=Uwl)m_Q6sKG<7Bjiil+j{W$(RQ{L+^tt0E~jix8R{}N zP=(ZHem~5Emo+vupzL-;(hs4=e{rjN^;EMBCFDVAUWXK4=7Mb@q?U#ZG9oySPCYO+ zNiB4!FXBe}P?80wwe63mbr8cYGUd&jC?Ea#puUV|?I4V~NlFTaVW|2(> zN#;IA90fT?IR;&DTn#^%p^%+W$kCJ&RGkLX+Y>H9NK3+{L=P86OBqdF0sZcS@ic4A zYFgg$CnAiOfO|cj3enfey+7hWGHJxZDZclIyO?{6bK)YaIWDUO9^J+rDOXpQd5&p& zq3FE4<2YYO*Wjkq5uG?{w|qw`qdz|uQ6I0VYCzuY@U>Z0D3^(vJK`Ltp%$Fh<~KuR zp#`A{S)X>RORwTxs@e3q?otWl71&d2_zGQS)(vp40oO|7rVP){d08WQja+5!;x;6+ zh8v`(bvVp0o=FKp-dzSxE33Q8Ev9Zh*@SA@eUGv{zN(4x6{3)iGivqBE1Wpuj<4iy zYUUqqFelMTLLoQm8lhr;s5*Am$| z;tZJ-1KfPgvJN}eFf<`s$elATjcTiDxi&fn-giHIc679Vc*|4$CF%wn{Uz$gpsh&N zxJa!+%fLb=k4W;8w~+N&{H01Ivw2IE%-nd?QIen}2!R8bnL^qPc+a?d?U~TUWE|mj zDxFXV%`1p-)kFWC)VS0VFkKsU!_;dMLcARR9T(PV1{~J8^aSF~zTcr(^Kj$7MDyej zSfqnWFkOKeHLn=RkDCd<2TvCb)b+P@1$M}S+%to6ktQ&NAs=$VAz-2A5VQC>Nv|t6ISOEm+1%8%>!=+yD=xm5oO4xqn{Ba5s_NZTHi*rRYI~9It8Eo0ZFlc z_6HDj%=HI&wdFi*Lyq#uQ6glYy@Em5Zi`nCi`rbTAZ{gRim^ptk})B#vH$4nl-GD< z&2bB4^kOH#o8tuBf&Y;8DVAlgJ)9jcg#nzwo}TK!ZW!LH7^4cjO2=Wnj!-x;thd#1 z_!LpD#m-%eD^DwNA2y&{jXWZsBw~d`)B8juucI@;(3#1Fof*=1a##DUK2s{SSCErN z&&9{}$}gnBuOL31>r?Rla{3e&VR*cfL9Av_)R5e`yaI3voVejg<);L}a=6H^@wc?^#RPeI*YC^5$ z<0(1wDuy|^R^Hv#Jut&^L;15P?}hxuyu6py|Ah{2-bhryC_E~(H^L#~2}Gu*!De1soM#@c~jrNYubjC^xF475awStvPlpUgP+CJR>driX#)NSp)pWtE|CXjA< zN>aiI3U{OH<4$F3Tz~V;O1Z$VB3H3sH5GUPpJR*k1C^{t!d^#1ZtH$Miu%9()kak^ zO?D}Da}3L$sc!{+h%$gbuZLakR8-3I84{$%8d)N#8yBX2To{nj-(_Jys!=6rZkEz- zkB3M?;SQ2@Ar>qla?*$jX48@08WZ?aSjI4_(B0qMd{je?R^r@U(VMBs-7m69~G)vjuo&`sd3U&Fc99YR$s_TX4kp6F)lh5ZS{&GjBQH zM2>(#Z=e)HU$3luH%IoLcgDkAeXzdnZJpF&>ShvNvw>}KV$ORx#s&MWWTE=}^o>&> zMS&Ice#!odD4L>xDlyX)(1@?0$=!8bY^IDrhtNBjj)#(DbToRE5!9nP4&4DMhz0pJ z))gbD8lV0$=C~{fD0B?czG<>bkiK{m08I+4aSeWc9s49HBUOecG`d1~Nq42dIMsrn z>hEIAsOT~j6&a3?<)jZP=o(OVO}2Kdq|$CZ@AJaJPl+Pw4^dR9==px5XkRABYC$Yf zTf@N6Ly*UQco>BA^A2&lFJ4x<4b?H|YomDu_${))_gF`g@M0a#pnegka8$F=ynktNpu z{twP}CDf`-iCmvMiC`If!2pjDJRf)cfzeK%)lxwS!gmTv)KVUUg^H;J*A=KH?gi`! z8FfQvKw?_;RHZUnTd!eP#}Vc$1|`OzB<_C|NAOH@GFq=xy2lqEq>_l*6g>l{;NbMmkCyp zW}YvI6;O^>yKGxYR~3Dd$U1M3(`OpV=~b%h_22aijEU%{i~l zo-y60dsfc7a%ZHr=P6mYKgnrW+opy`=Ib z9_QS|c<_dTiU<&meZz?muf;Qd;bv)^uPB3H> zwH2PHikDC~Kdi&I1w;HTz+DVuFBo;F7ZbkFhm)*yK5#!aAh->|-kkeF)9zSdq*vgy zRX{mj4CdT-ZAemOi1+AseH8*+zdEi$NI7KJIku~#pwD$sYQjyKV^Tx(+izE2(U&&Y z_24LLrfWgX1}blPy+z5w?K-DnX}IFbviEx&SBZ_K@d*Hqfnj| zfh^n}*BG2qQri#9vTCrJ_C8{b zP=4sKNVGLPq~V}QB#Q*aF`^uj4ZG96T;L}{Q!Y>V=9bnj0B!zs>LY9MDJK)|(1(K^U?#V4T z=*c})CWRC9@aBtOLo!qqKJtt3^*2qO3VUgahfMC3^eMij!uavTBY#f5ZNrWMuLax#?{C!u&)Onp$tQgg_ zSk}m2iCSbMKGjK#Crz|*4ZcbpnbfRaD$9uRd~=be{8Wq;Xr>x4c1==ZA7(}D2G|3L zWdX}Nsz#XrFqqBgm0FNno9hg&@_W5QJOFdcUFP`GsQ1GPuiiBJS1Ok5nI0+^wQ_H8 zW6I9BJEKji$#Z55FDt6RuFiFr?X7>t#5z~|hr(Q#{|0)^L@)fk8XV^NwFOrXsba|M zW(<417)}qq!*N2o$2T)os)cCR^h_X}j)sC>J3l~;(0Wd0$AfkFNw?aTCBRe=1ag_WY;<;Wh4Lvde zY6H6zRlaqF@JWLvuk}I`guF^(D-79gJTi|3LYw3hyVhP@R_{OD{9V5pSL4M}#zJR8 zf{%0_6wQ~a`|+qK6CRJB&?8;OH5cT=&8Oy#Z~P! z;U}lkYd}r45vDoFTGy3IQ1)^aJ+$cO*sA?Gwt9<=HM%<1B;sG#%WyUv`crX-?H7gm zhY3x(Ox6;gHnQw@=L2A4w%a}8-{J1W5m1&B#L9U8_Y^YfgAkl zlEBS1@kP-aY3H^P@w=+XZ$g25hx1!}-iD{WlTfbq0PWH0L)b8lGa~;~$|kRLod~4M ztq{86rC2vDK)amTuff%>BS>@2UM32;oR0n2@V40c)q<_+W40o#|C?a#^2)ykOkST5 zkC5Uy2s&@GFz6jk{eE^kc33k?v>Nm?p+??F+HvDolr!;y*K{a~E34zf$y zk}d(Jdd_sFxBqP4I~tD%Z~NHCD$AmfwRQq{6);<2@Gh9*Cde@!#2k48NDEnq<&$Hg0Vp=nFLw(_Um2a-i=7 zf!X!@%jNOGV{ zl3m~t$*p|+U1`Q*Y+)o=mi_(h_U^&K60X@^T}_%;y+^Vd&WWF|@p-8kPskd@j(hrk H{q_FVNrrHg|NA{X zqmf3k3L(jkH@?hxO6Z-Qf+u_M$ z)o3-1yTEv5RKI)n-IW$zHpsR->>U1bL``=ZFGW+dY_c29KUPFj!7NdK z#(w55_sx(8EWF}u9L`Pa45>IdWpHm)$K@XpT2{Xh1gK5a~iQL2lh{}!WhMgeb zerQ9CSt=|;rVBCj?J)=Y*QR4zzq+CA5E-SCTEN5$7NS+AGj$9?b39>dLvwh=yHiLN zqq6vqNTlK|10n(r-C9bNERvz=`{peT3Ob$}n!_*zo|Nvt@sr97pXo#qY^<;Mha71@R#pP2HiG;9zPy7WeDW z`E$0GXz_rJOef&@Oe!UL)}(vD+^OTBOfhT?e^}QPy1vfj%93JDEBk;6-PYIHKcF9HWEjcH+mpgTw^{s`MpqyQ{V&IWIj`6L zy)oXfF8aS1wh>(Xrv|o@X|L}s<}xLOc}7#OvAPL{SytuJ*Lh8t4V(bIYPIAoi71j# zFnL!C01<}_mNyN1+`qPmy!L*c4@qZ#f4_I!`_Ml+IX~|7kK$qW$ClBXC&YfVT?-!{ zRPTV4oUz{32C`M{{j3^ORGM1&``8-_uz!Z`)OUy`+iX{Kt`kwr(ke-SJck!7mQHM| zAkWaBa!sZ)#sT{*$g-Wp+R%Gth8JsQ(a^sO3-^Fw;|@!PTmyS4TQLul@A-HV-qur# zZyp-@(tHC$1-wP;Hjy-`apd_NW|F1pF*9ImjtL)f&}M67=&}-^z9|-HkazDf4B&Wp zcG~Y8_62STh5C%z3QgG;rzR}^r?F$uxCA2lJ*&3w#Q5)OF5Uw<`&l~IgX5qqsazK)EkGBVtJk%^*h~8zmvF({U5OK*foTQNa>*3e9@@>(5{e}ju3l= zw@GkM7Y#me)uNa;g*nvUoCNRRGL2--GdeJb{fH}S+@xY{>ZUL($^HM0@AG-kCN};aSpguOOiL9C)$c7X-FZGhy!0 zWa4|FH}ss|bTaY$@W@31B}3BXB2@h{xFyKG>Hg&TV>1N$$b;)2DeUQ=rGX#E;XqVC zyhH&;HZDL)B;)l=yW0B#f`etmqX;2hbJAMn{EsMwe*$7fKml<$fwYifrDb&5uAo8M zzs}@GYH`gfqF)yD?aJJe(E`UPbYD}Lmlig%u3CmiX-_7*yRpM7kV^nu*IDSL(sCs|%BKS?NG9ZVV>=ETa5kkx9f1{#3EfWS%Yp$}D* zk~kBP`xn+Ipsx78=Cqi;na*FeW5@& zCc@TuHtK!IP^|W1jc>Fsd3b_A!MsFNS#Ugk)-9k8I2ZK^2o?93sRI`H{n^a(CLRXVwwf_Yi&zYw5K2q1$`TYNTq75+%(# zlNeO407#IQEebZ~3Zq$pK?4#MT|bKQM%$cBxN99=p}tYi&N9nO6oG!}%)tvVPDHY- z&}SJ|qN!^-NQ)&lDqkj?lkRg?MQD;*bk)>^GafD;2dInm9sGFPH!mq1sMj*BYwH_r zJLKbfLz}@`rV*OB6bSstfdF0?N{Q#S(H=UU%TFocpn}j`-;wPHp-|jkGejbPvc0tQ z)go9dk(6i`%OfJR(MJ8MqY9t(8jL)a1u8XS7y?T&Hu(;ie5yKr$?#2GRtc>f4w43G zCStx*s|S$H!ne>$hZp?Nsv5VV$9rKp+n*%$*7>iUD_6s zV1Q?aGa__=gaFBw)FR3k!cP?^7YPq@fZ!Qb{OaDoXkb{0rIGELj{1l;n+nxc3(hy1+wnB0zyX1s#vdT1p32QJqbj$lNXF5e{|vZGk6SzW z+SLp0)K+fG(GnKQ%FGF~l(LK0xM&6Psx{<_rT-CO5PhO_j^B8JEOc!8xB3g<4lh(x z4nwNHl)Q}6n~q}g@{MD=7{!LhgFx$Rc@A&r6*lCr3kO>z#iBRs)Gc3SVOt9N)M4e zGyO|(-eGlVyrQXKSXAsjySO{is3}B3pPf@GfgZ)jcvMQjr!PnNtTI zkNiSYn$*GVTR!6Oy>xaW+`e zW3u)TSF*ABm*XKY5O#}QNFm^rkU?0}r&2aTT3F9Z&!jw6%wUPj100VUF4`>0M#>hD zx%}YKQ-umyQEgYP1i)YsUZ`VQ3tdiNz^c%Zq5>>Tb~a@L2geuVLx-uOW=|F`&{cXf zwFJnJqqvAq=amkc1yd>;H+01HbEgcSDuiGV;&YNEfCur4IKGqv8-$3_>891qO?oC} zV}>#jwfl_2s3Y&G0)!@-IxzOQQLz~oR-s@5@~cql?DIM; zpLFVqr?>)9fQq)^SibD6zGj+MENr%R;#n3_*c5eY+KHjt1GFwz+Ll43gNhQ^9e}8E zt3BA1yf~-v^diT$D42s26o0Qx-!=yhKaFb6NeSY9MUXTKlGy|SAcef zR(esDE?hG6DR?;&x>xF5ip*Mt%Pf_LmLsnF<)5XT=qlXIZzR5=^^4l(4eqd9}C-T7tyPhNl50%-%;JXw7?G!Gc zg#l(sarwbs_|{vs_6(?HxXKNFzSXTSA7L1|GQ$ z5y%#{&j*}n>=%$Ofy4Z~r(b4zEK>3)I$%@afc z9FaJ_{Rm-@uwFI}V1)z@hB)8yG=Z?7z(r>%^9x+MpRF&ba?yDey^Rpt+?l)w9@U_* zsRsvt?^{dxre67h`!4Bb^VQc}B83VBwl8w?;;-+#XPW)82;@mkUr^vjG&Wc6t5*x8@5>D7Ff|b6c=(2ok47k!rn84Q@wqK|Eq7DkgBpshSGOkW$)_f0!o{jyPXp-Ws zzs;LHH`M}HxmSM|Ig;$P&ih;jqARGeI+uJ^>zDcg+>(vUNa|YXZv07cho?|ciKn~b z@hR;xUN9XLO0}d^P{Xk8hTI?Fj(=eomWvrzw+mbs(Y_fj9e>1Eo>98G(t)?dt1YT{ z%7Ul5M@MB^g?IIR#`9OF7nf;4sjF`EVf}$Vj7C{^rwhJJCxWGKbde;d5TLT$8o+P# zO~)pEo3{AsqAKps+(FAIqmY(4zMC()rix%ioJb^-D8V(v*RKcz35$JxerO!MeY>&U ez)#Xd**;QhgdBXaMaVy4e=ewtWhu4+L+uhxYv+MLOKD>842f=}3 z7Lb(1k)sj81^D;25`;tu=O&_IJYmtGN2Z}Suqjp^D-{QRBvSlk*SQ(~hX$#W-jmef zG~rYLegV(a5j0I%G;vrojwKje|HlL2MG8H2Pv|>u<^KtfQ$S2dPIaIWiIWxTQY_@~ zT8rX{lmpEix!jS#&K^ig0XMM}x{CiYjsSWVXo+lHII)!cjV86Em=I2;DB^odiAF@H zYGiTDkp|R!&4wWhobfCQq=5#5z;ICCigHJydQ=F(IMwu?iM{is`kb?jycQL0SQSZ& zqy*m<0QSx&H0^cpZGGn?!^=ibLR^hjK?DtEoTc-PRP=j8%O(ae1)sc4StxveLLY*pqQ~0gEV~Luv5s@iS=)_>2`EN0wg1e(S zr6TTX*Yd48uYJx`#l}vZ39xw`46ihBSNjSaNq|v13ivz$C$D|paen?8&9miFW?gBz zwOkdHC4Cr3g2JvZKD4h|gZA}h_urjgoEut`lDK#Iyk!qrtXo}Qj|x;G!MTJ0`+g5*s2ljWxb6Rb-EIHtw%zMjP6bq&#J97n#PDqzM#7gb&)gZ0{Fn$P zeAJWh)4<1=^}RO@AB#mC#GzXNdm0Lg9p#v271&kl%&oGKdiY4WfH!9@pm!^eMP(`* zUs)*zVXa4n1(YlK`X`GQqkh{E$ZA{$$%0cQ-aBY@*F)) zr9I>YEn{A*(}j`&uU&*;{PmJkNZ4mC6jf^Yk<{|IElv|(mv%am4g%t(^jqp&##6}N zOrVkIHxi^89g(Uft70!r`Ls0qX7iUNW z{q?}1Q4o*tc@_yaiJ-%hvS@Y-{mlBd1lj_9y}r_P7<&2wa60)@pVdu+VT)o_+p6L) zgH+E0#c{n_Ky5*CDXf!6U^KI+U{~B!ZL&-r2?^*$$Uq;$J-PAs51;7gFXJ!-55P3x z%T^wGYiPGwN~Zu!{D%LySOEH_I*x*HHYyPRTzOv*r2`P?u<>^Mb z2pPgif%)oW=r@3@@~1J2NNA3luVr;58kEZfD_;o)^0XqCLxwa4klAPq$f!tsp0mf{ zsy(>hJX~rgohQibH5@dRhe0kNvk;VsXL8&b>0nLB^N>t|6-I_3z1D`)DpJ0nJ&jgv$*NhCm_64?vcp zJ?(M=L2maah#_y`HOc@Dsg(Ww(T;AmX`NMGczfv4{||2~ykV)T7KA@WEX!V1m6|C{ z@8i+Svybcnu>ZBTl`=oT(Z($OK@zu9G_1EDP5LrTnQj7fbN!6YNu^cjmA7>QVD>~V zTV-si;3a$_7y2((iL83S%W~bjHD6w6+BuEvqeiyXrFDB|>C5XnCEX+p=P(OXXngUD zL9Puot&lE?`OKG>sDz|vx|6l73kaUoSs1*Y|Eb%gbBu zUL$Xn95}+yGC~=v&sUl`WuFR@8qDi6K}WEDXXS0;3jVx(!DwbCGvs@aW1rkeu5;;Z z83X@AG>a5C0w0YM)q z{%sLD71TD_4`vRAA3J4|gksX^T>9;9cki$PKiL(N|8Q{B5da_D@GCQZ;9D+&rI*Mp G>wf`X+?W&q diff --git a/docs/Saml2/phpdoc-cache-d7/phpdoc-cache-file_52084c644a12bbd66735afc25ad2f294.dat b/docs/Saml2/phpdoc-cache-d7/phpdoc-cache-file_52084c644a12bbd66735afc25ad2f294.dat deleted file mode 100644 index 473eaf0b53e0a8fbeaf7c58649a2964f354c9158..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 30626 zcmd^|ZExE+636#-K84_Wu|R<&eoPzn4hO|nw%#VTD>-cnEFdVdoaky>UP*3R6#ee^ zA3ZuK5a*~v0IxP&vyP8nXchjTl)3dTA9h8 zEwS4Xf4JgnvGvQVU!HXLsrA+sdtI@$==7IeqtkhSGp!;UfTUynHW$>LN?5()wIEF9Bye|?)OYAE`C(7x2vyQ|;j;asE74iitetGkE)n1)A6 zu%7T~JQ+T*=B* zMHQErtb5kZne2<{JeZEnG?zS?kLRC>n!{v*B+L8GGS6I*Ch8b+50vOR`o^^&mnC#2 zE9zLClhlJ$-j#Vo1N>azeLxnz| zVH+u1k%io?ZkQR*pla0Oxw2i?bjV9(ia7~xp7HM9I<{vU_Ns96RPyhA^1Q8he(oAi za5L`NxAn@k_3fGMJf71p=jP@sJnz;#&kMNaBD6L=9sX6%-+Ax*zwp7&&(CMiJ^y*# zcDr+ae|w|)Whvg}S1s?hQ_JtKjGP}+wR@mX#@ZvG-9Lx!;QSx?2aom_w|(Beq}vv* z^+@+cP2&nq&e}YtEBgvAbUgV@dpDoYwAobUw(5sahDdju(jA$CW#lRHXsp2d^I*uz zRLlkXTO;dzGIAwlKE9R?l`DbPrM^e58gjR<`y*c-7n3e#YCV##Z=`u?N0$+Fr`(*% z8^fkr5yP8P^(F1RCmOSO<~L6m(tsn?%Syw8JeMK*BNp`Nd!5!$n@OtrX{vCWke*1J zp;XVdLmrsAu5hq2)TsOB)q6?|U7i=A-lC$1(m};h*Sg~wda*olm(A(5Qe}Fd^wv=e z3I`-qDNBonRPcW(y@$8jl`JW;!qePXiw~ymm`+A#-2QHQGm;hUz5MwFBA)Ek!gNmU z<>?nQI|6_tRi2QfkJG#1JGpddM@XVTuDKy;U+o@>?4hNrW5UU3?%2ncQ2Irk%m0>=GJlnit&`G>aduTso&P?kshVOk{H zvA=yE+PjS>e=|%Ib08Su=LyZvI>CgEMpOO>L|R$8Yr3tsQ?WNFnN|+%)e4;h?Aj9j z86{?UnD|+qxyH@9*cN~M{0Z@$;Ny+4+5y|6iN%B!PxHMT%|4GTce&g6svS>mJ18&p z9Y?T&Z}2Xv=Z}38UouD^58WFU@Vl{eT%hxY;sOB;Te!rHM|ePlPYI^_RJ-f#%A^p( z@eC92p+C5o?HG9EgV@Gn1DG)R*H_U;onu!y%mam?cB?q2_ss{L_nR*aLS!u1D_YPI zJA+ss@B5Z2e-eLy5W_Brl87zD5XjP@=6|9Wpg;R%l`M*^l1E`0YSMn)?a>gr2PTc% zzJE2K^8XKr#iZnm{^-kzPzb(ocWZR<-|5omi@whYTDc#3BF~WeG6)?lv%x6e6u~zu z1bSL;EjSF^6ny0Ak4NJy;M#N?+c}a@$eBUs1x5vYIyv@;syK3%FSle(sl8|pwH=J8LTaN} zMAd)}Fz(t5C{5Cdi{u4Q{I-IDV;`dUI3|kb$zxihrjWgE5M=NY(KyL}pHw+wWj?To z7^Zae@`?o*1n~h2UYgPELEjZQHhM*zvqMecdJ~tu_S23|((lHv7Axlq6?=dSOI~HN z5PMOVno_ku8Pgy&1?{pyprJ8`tv7kyTsdhN#UDUg>isqgH3;K-v$V1W*4Q?wCv07c zr8Q(Wk@9NsDul{eJIt#k%N|&$y~wMjRE=sX?mH8&mbt2qQM+!FqIPHyg@qx>+LOwe zLvc#|TiIe426uyU7gwrz9>FfpR5f*b4T|N_`?o@!DC4Rr?3ab{XueRO5bL5C^!4Gi zN;+7krg`f2nxv+*H7I0<#lHpG{1t3f^F~45gS=j_WR67~-d-F)T&QiHxe~+Fl)46m z+|Y}J>k+HQj8?{%V-~NTWT4e6?@D8x@-U_KttmYXnuVf$N2^&Y#|O_Y#V1}q%c7_J z)qSE<9-oZD_2j45powMJ8nITiYJB=MoqYKUY8FF$59I5WM<}gxO$lnyjFH|LsoL$R zYJPe=_Y*InXQ9J+GZZM42PaXrrr30w6VVE6d9PNE4V*^gcJ}X|_)Ex;GHhgmZ|WGE z>hWCRioQ`p=nTD zr-L?_*$_zE5Uch)ecm8B-Y%Hzlw{DHS=Wcu|`cXYfu1)VzU|hNBdc;Mvc2} zFN<2dftH0Es4a38T#04siCw=zaifB9qwUT$$1dJq{Wq~o)a7EAzO;^0z6e~pBHEAVsXXo^AZgUSmjMnPk%LNP=pJu zJkFF>wXfo?%uG_Vu|O(cW}eb2k5N|VnljX+`5xR*CSP9FAkmJ4(%}<8$|mSz@I% zrK~~g9w=ND=2r|8XjYCGN>GYen8Pv3*vaAxL!%P!mDjHT7sCcMC96r3LG(+Z<>QR1 zm9xd`8$-5|6s|0~$`|$(bu943v_wq_Ytp1JZPzf(ZhZ-h^7{S_!eSju2}@m7$1&JN zgC>YwH2tuB=W{Pt4H|dtP3X$<$(|XwQJ9S1T^1G2Q&(!8db+oZCM|@(m^XwkNzYw1 zcHG%zh+UEooBv-w9f zV33F0{@BWn+-aV5gyRXKvmY?df?#Y?eX- zKIeFa0;&k2>_3cw%_;0d4X6{?=_RT5dr%%{-k?F^42FG&C;Bo`9B7kE#^1w}%Fk5v z??tO4OXPC(<0yl8H%*kS|H$!}uK2^ZYix=mAp^DD-NR9(Qp>@+B-rVwhYF+`q=oaQ z92}H&yapMR7r8i(*lI#}aTWy96d$dT=h|Y}Py#OF{CMfM5FI~S91qiJ8^sm|QD_MI zZsnhH5`O=`I@99FGyebQR)UjnESwO-Iot+^z0%RGIQ>?p6F*vFpBzhg7LjXyH63I- zCRc}%kKcUh_kb=O0vDW`0=j0ip(rcL>7b3D++hiup)LUy!|tt0rd+}npc^51B{^9(oBw^k z(+{b;)iO427o zDF0mPb~d_Sv+ncm%AX$o>B`TpR$gV@%}#e^YjfalKi}GZ-g&vb-q{*nya-;rc(Hyl zc)7lQ@v^f`&+)fLe$L){(OuaY=T}eAHGK&p&}5d3(?LLgZ*07LhIaq!zw!M8@4?fD z4=iq$c$2DDO?|ZMk3qQ&NYma_>;{|D&q}E<0iGaP8p>g(* zjX(Qwn1_B8{tIHjc)Z@R*V}o2;DvFP`|%*CbUE@<|C+bwwUTI9=!p0S(-nQl_=lrm%q-w3-TZ}U($v< z<7mMc-ux=>%p5V$DM<6xc9`{vD*04f2#Ew`a^vxvN~3iQI!=>80Q_S*ObUDwWFx2< z2`tXN^BeZf{_wa)p^35arPoS>e~g1H-ybqz@4qELr8Ws64^Q})N|V3=SWKSC)&)cD z`Y_@&O3GH1&L*pV)r^T-^b=lqt05Q*OX?pV^-kBkUw;KSl^=X)lR3*S+kdRBd8KJl z3s0Z2vBmNc@9|^r_tVp3)|~g}Fdh~tNsr?PWDC|7mdN~#@FlXLRa2Ue;1h_(3P}R= zcLPFV{{4L4l&<~W+UuKSEIO#KpG+-@6f6)js^oz&tv7pl=aGSsy4MBRT?wUoORjllIr$P z_Ik%hhrPZ2;n8XTFGpvG!kcp{JVlble@A4%9lG}=j3RFcNJ$fpK@mNO9@vwQyaecyehHx#+LIKp(a%Hg zH;&{2pj3ns93Y%7fr^jB4N~=3IiM3;cSwr^6Tiu0Vx}Uag3UQesXS z8-NW(bSqiHQOk-;w!UWD-QB%j&txL$kqs{dWw7jiHXe|BH6X)^Jk%OzmZ>?me(7nM zum}fomWL5&9tIIY6xFP3;LB~ETA`ovFF~5>A1CM+vwDkjYz>0}Laib6>fFzQXIp*# z0lclEG4gF)VWf57-OGO=wv3P`tjY!z)FQeWzYGkNTFYARb_+LXgu|s7PIQYCHIENK zC;x|#ZN*Qt!Xi*PO~Bd7JcEJkzbyg>gXhHe!o~l297aRrb=HVRN}>iorfB!^n{(=5 zRU_Z_9yd7!&P)m)zrmp7_eDZSW060tBDyaVKRpQaUcd1SFtN~Ln9hgxNf7xr1UP}k zQY^jeZ-BMJXw-IeoufvC`g?nIYu z3LO9U{ek4i{{%PP?n!T_-}`-MqsnSqE1WvkP%D$fR$sMAiAyF8hG7~E^3y~*T5?kd zN8>bFUDHNsjH`m(I*X;?Z9wKSpq0kXF!8DUOC&r+ko&|Mv23_d9vNmPsZ3+(vHZ%0j9U*FFthptRrbfgM#izNSLJhpLlLP8S>Ilo4i9*?!40c($3Wi@$nR$Ev z%u^raqxwXZ3yd!D&I1}x2KxMrzRG2`j^4$%?3uVEfRvOdMY`42bQ7P5lG%hZ1`o+u z3u|f_L#cG|MwD@|2Mg>VU<$5B`3-MGP2NxT{(81Y$+8NU6&Ek4Zy`&vJYL$ZVy}kF z6w#LC2qQ#eg)q}3_fKPyHJ6|S{C)7Rj?T;Ua4!ctR@pE?-Z%>#D*qHGt8(u zQ`BNtO_3S3HZ4!*EUFIfM6VE%VzIhtSzf3cl+fL>*ia~?qUd(Dgo%`|-8zh-nla57 zsH#z|gA2~c+>$JnKPYMDs*IF&q5wd*ERV3~O5`?JPmNPqosglP=Uk)UL%#(0Us3%Q zB#2*TZI+b`GVx_Cd-+qhv6lOo+sGuX7a1@RNY@UNR)$-i;B$-E!0LxEuP&a1F! z4*Brx;K2L$zeQPE0CI%}WQ^3&npD(UrW86SUSQpoGF0G9A|7j(Adgc9X^H|fuLE$- zk&u>^-~P?|!M66mI;m_oRP?1y<@ zdZs!FLNF+wkkMB$Z=y*n!?a)7R7-7IWEiX)HJDbMSm7N-UcsJiv$R5KSnZJX;1}WP z+e3c^cNFQ{s;LT|1w_p(S%_i- zW%i+RJgZASY99JpSRI*I8K#$niJXJUMM*gn;b<;i=ag{x)HeNS9GyAOFyFoQ4 zp$(GTe{eLM!~%f-U0J|UWoixxfHpZmtTlsVIk*|vqQn$}r;;*oxN>46Dh@saDC=OB-mW86qx+5l(u}+MqRsxiT))vaEN9sy|!-92|l<9BE z5|hlu(xR&Eu~*7+i`kWKCp%(B$O~dVMU)j(ix=(IF;!?*5@pshn47PLp98AJ^p1D2 z!UnT}=0w}9j(_Dey`j}GNMdMIJYC|8YPj3QvORC$$L$>HjgMppn1N+51L}Qc>dF1% z{_ft%X>W>oed#=vbn{bCKO1n2FSV(WR&xG-sD+c^A!*VJzVcfI@d+c#Px&p(a_(HIM_oHdJe z_vnqSU8Yqvj@y;XqusT;&grFX0S>sp7~VmfAB{2^6&;BeTllVa!^AF8q3)R2ctJZR zxFP__F?mCpfhL%OY;p-+kD`D!U%2B5R}KFh(I1viue>_%uA^J7N0{mKBl*!rQ_|)` zL*aRZXeo3cm~FwxB9&soKsU9*z?9Yz8VW<&kzbwhQi16a+aO;)4yYS(qF4 z#}SxFpNWksSRE1$3Lf&Yeh#znJdCh@gJg^CE+UMgzXa$1fkoQ%=O*N1)30t<8J*lR zL-;{2p=<41A-V!yG@^kwpZrVqo>VqInrwW1?Wc^yjjirVPuu!J-O#6C4iJUy0wNT` zr?L^gi|0b$7sNQjzlku7zVa&M9OWP7{^k6N&CC*f#%7$k0SRq|um_kjhFYsVr~c)~ zV;|G-s`@bP*#LNhLm(xj9SMg*K7vJD)IyDX0&waq>*6I=LR)zS?B<-2l9l7Sh520f z_@v$3Okhsr8~sS7cG@s^PyKRI>$_VkV=^yVt_kyj(6CZ;KFfuyYAjbBt0`gf)fzLv zACA0tH(zYVTRFpAdu4~2J1g#VptwsbUSKPR@cX2q;qbc~use6#0dm$DtsI+Fa|y}n zxE4ig+9u)(#WulYUhP~M7mN6%Pm|}xny~L~q%5vsTY4S(SO~Jl zT#dn+R!gy~$q)zD+d=HMU$-OLokedxTUxYk(LiCbc5+cnn*2@~h;Jdl4pXR%wGON-SlcCoTtR)*zu6|C03N`?*!9nY!G z#q!1S{0QdOk?z%E!F$%bTB+E0RxLb=LYF8UPf;D5y4nSgJz}RqFx%ppEw)0iBV`=$ zgs}vzs>f*D8tUwb{xz;_Qd3ivXw2$g)$pib8-i z6dz=AL8-q!6bCRTD|Dc;TE3$mMX8S+T*Ah{iMqX(N7XC-tdmlnn7(MFnk8j>QB+z1 zNHwu!XDmLXKie8fx*?i8-1=mgTM7JG8qo~)MHP~&(g6oj&fS+ten#^ym zS*(Vtur}M8%HDPHm&1fR=`_%lPsz{CbW!zfu;j~@ne*ec7TjwIoHHB(*^C{K z6wcKFlJbZXK%&I)Ox2HYih_hp*Ke%@Y36}RUeHl z`ykcP4}e@cX&4d8Gg#`(wiWE(K9@ebr-p$jlb@!ec3HeKM&iIJOe|e(!*fv>Tps;L zD=`nnZWrYUL-UN%#qsUHT)S^K4AJJ{X)&Ae7-Jl-;oiO0wS@*SLp9}LweB4L3&&G3 zKZV0L(M6U)tE&)on3&b+&t;20d}PpU+DbAKhK6133+@w{Rc%21D#xyV|0Gsl!Xk>j zcT8t%hSao=e1;(3#aX=f(`7EBFOsVavhbVML6_SAI4jg23=`~ol3#72->C(uwS#wGeU z5Ts!2gYWqsx?aW)$i``lW5jgMZom z6HDv?^1^%$>5K}#I%x?z%#)Q_Gqk4`b~xW`kfZa}0ovd|ISp+n&2oCI$ohhU%cLB3 ziWsK@Jfeanmxn}`;$ER8!f;F2qf3^Tfekyr)2z!)LKx1sdW4aDb$~E*IH8PZa0G9T zdz;NGs@&yNos9*BoB3iH08%OO1<#sLgjOT}1ux{VEn!eDcIj9H(?+_RH0O=x-w;-k z?f}ZBnqm~I^67R>dDWnF-$imjOFB^3xaWJsAlupyx5%7qK8QBm>o({>cr+~_{Scf` z?Hz;;ozZ3!8Rh!Qs`E%r{3lGAar~E53f^fJdLF_B!pXB1b+b=d{PG%8;fco?LnElzjKOBItO$RdU0PKvLER_pv9s2q$$ER(& zUCU9<<-sk~&i~AOM!jir&G`HIO|1bR@-wYZfDOQ+a7E|R-7Vdn^lJD$%f=m;&>h_! z^p4L~E`qnjVrD5ffVI)ft_y4&aJPq3_JQmffM$=DOp1Em&NxR8Zzz0#*j*RQGatSRhDL z4sg+hsE`i{+G}ihgZw?V7s=|i{Z4BVRYO=)Rs!c_GP8ijYDvN**v-{Ts3A7bG82v6 z%+N7gSfumSIn;iST$`6sKZLvVn4GT*nld0gwjY)@SK&CZi!h{ywmdo)1}PQrSW z>%o6U{V+$+xOzZo2%5`VwC|^KSb~-Xn9y&KEQJAg-l)Y&MB zv!Fo7Wv~qIgTT1OgJsU0pD`M$j=_Ojog6NUs+b6uCF{`bGG6}p1Ljl9c)6JcbhdaI z{$paiY@o0;V4i^44osVN`cD-xD|T(onk7a|YxJAXo);4-i*wM6#mC6fuAJ4;ovf8j-p_Yhe^EBMKCKx8s@<@Hsbj>7#6$H@Z<7e!DY~_v9_V0nVKb|#j+qQ zV;!EReweepm2+LpXrF%W)U1=CM1#XB?R;fb3)t{c9Iz#!{hogvb^3H;1N#d80>sjj z;s#CgT;h>G_~c)*b|h%yx4!O)Hio?S!`K@{*k4Pto#+lz4`JNSyyM@Gz0)L#K8093 z2lm{-AK;qYVo*^SgP5?}gg*e=is8;VRU~9a+p)6oxzkpg*WEDAgY?43RS}fbxX@kh zMRKS1Ahx<)`{}2E?_hR8sWI~^bY3?oJVOTb1QR26BVrR7+)N75Gpl?XT=?UN8$!j5 zL|=EY5bBWADD9((nbZZfkJ5KSLba1&fAgbo=;ulLk!=KC!R^#v0e48C2rProK^o>a zq%J7b2DIs({>^1Zr6Q(Ca2?0TyWPE$lgHcZ_$ePz#VQnkkibm;30?9jilB3|1$MLG F;XhgSIo<#O diff --git a/docs/Saml2/phpdoc-cache-ff/phpdoc-cache-file_2109b416d04de19ef5617c91c1a203bd.dat b/docs/Saml2/phpdoc-cache-ff/phpdoc-cache-file_2109b416d04de19ef5617c91c1a203bd.dat deleted file mode 100644 index 36c934bb3c9e1506c2e03bbd29c5fd60cb13bb5f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 33585 zcmeHQ`%@c7w$9J|6%!Q|2^V0*!->a+yIjNOQkxhD?5$fxT+~Qv!ED5gGBa|_I{feV zJLh!I^t>biqq`13rDCM%>Bo6~=k)33*xh>Rw#Jv^gRnojQb7_%zaFT#ANgbY_3!>j zWglDaX4m}^yWhL5Z=QW~>BX0=SFyXb>9)4EhdaaGMt^gw|AV*Hed%rWwg$tUmxC9* zZg2Z#kJ`ywV=v*iy7>50co9yL6ZQK<#mPD*LCr87bRLJ3sITaAcVl~V+iku6FFapb zdj9O$lJm?t-T(O~XVZ}m9NhyR;J@cf{gD^P&T*hd;e{WZpL$oL&GXz?OJ9~8{BURV z%QNS=_b=5?oaE9=oJfr$6@wNrJ}W0yN#X|=jvov|ehtn4_Q{KA1oWDYa4PL$-R3#} zJC4Ex9jk$}e6Bl+Uo90!=j9X^BNOA1;v~Wh3LX2OyhNc}tTLlwx$ie&fY&E|y_)oWG5|$h)drptEdN;#9AB(i{1GXE+J^i5~{e`FY>Wp;JS%tjiUigYbta zu$)}_@!DQWJZCp+s~5}7;_-o(c=WXJ!rI=2N>1O=)6U8(St0f752n6xG$_9ktNtYN zlk3`1^m8+oJs938NaTmaAH}YFp#l|wlOF;fdT?}*n`Gc!siVO^z0pM7tph)f(J3Ur z3zFI%!0lMQ_pj6@31TO~Z=Ds3R@pj!Q?&SCG8$!+^oLFd!>FVKxex-KwPoUmK|i`4 zL;BkvSDf#@BhF1}kTIP(Dq|TwowYyjY`pBNC~1Gp#=a3%;`TCR?II1G-!e%%>6)x} zna->ECn8s8ZI}aa{s=3nX~6v+{5_1WJWR3B2y02Z1!2?QmvhRCxxaq>`lsU`k3YOW zIsE0r;pzLO*D=i3*cG)+4IL)^`DzrzE@D@~}Y0y`>zfZMJ9|QshpaT_T1MK_1LP%36_Ukt8Ze45Oj~t$vf_Img1Es#2sAhhAXqAf@Kxg@fTHLcmL$Ad zb=qv>3uavG{-Nnlq*HhYDzhpU2ZK_m;3Bznc6Xg_NfXo7#DTZ4&osH^^jkgQwLL#k zSDlR&Ru8Qz@qb^x_b!Nkopw4S>c-X>Vt&>g%aPrGI%+zC<(cSRT9UdNC!h)>cBMFf zYLZ+=;U5l}hr`c(H71waY5fDz?#BpkexLXeoQNMdVKh*YlZ5a~%nmlYEPe+qOUJ28 z%T~}wf^wujkVuRI`*NzG9Y*QoKf3P8>Hc~5d}q~R73#E;>#=I@?zP7e2Qh6MY+9X* z?V=8Op#?H%=PrT+8^0sDb&p$(EF@j)wYH19j=BBs!I1^EOP_uEFLF!%4t$Q#RYSxLBg1 znWTkW*l!7z_4usKwzU0`luhQhwiiJA`0LCc4#P-!{Y$5#Wl1A$7>9zjZR0BM9W>6$HGH)l%i|vWf_T0HuZsq_8#ZIy{(Cd{vGR{<{LR6dAss6t} zrrY^aTBReBSO;i{KjciA$GYi!-Z6zUQ$3^R5kx9hqag*`2@QEv#!F!IGaHiG4X5jvb-!h;gm*dhi4&$7?7n=~Q6W7npqEyk&@1z5_2M#dyp zTKu-?CUXr`e8wKK_|n?mobqkIsE|b`_fk$JytxE0jR_=|g&Nqm@2gLQePfa|e^4Xl zGt<M^%@ENbAN^6SI zr60r9`h(8Q1;VZBEDC-bsNUoPPITxY6;X5wNpxMvPO$YeIhgsAG z2KosS@Sv)&l$z-uFr_|JW+^~^ke4R`Gv!3r;{K(&^43fucnwM0_0RDD09iO|As;gi z&FWhoY<~XHyOj~dQNS~kUAscI$D!~7DRUrt(${J8wL=UuPb<_gUr}I}ZqsChWw#*@ z2v<|CtV~@zkKkoLocsjlRbv9~XEa2Ux8X0Go2csP`E!R25iRdHIF9y*iHb_&G4HEW zZn+?&ZTEs`xu9?9$^+T}E2y@PhIx;N_5?O*qlfb;YkM;ieT7jo>|q9^e|ZfU`1P)% zH;!s%M~$n*qm2pi{wiVC*y)U6@sRL@%=UkCuCWj7^hY6nHLP5*Jrs3nelkRqeN!TN z${3_|%x*-f(cFBowlt=&#TtriLN&u7S6RT=&UIW*_-}O{$Qq$mI*2H=FeF09VNALC zlmIXUndGk^D`rgn6joAqRqSjLq!T4S(P{WUfED0*l~0}*8|>C#oE=x*fMO43%GUpg1)6Kp<%;v?p9c9m z-?Gn0T}Yj#R}$WsS?QM2du0SvMb`>Cu>u%7de;5}yT^L-BtGSRD%#NfQX&Q|lU_Ax zrt=>U-=DSV4G%kF*wvdVoRy0rY0^Vi$JGSo0{9TwKXW`JsA$_4I%CyJdS&i;ifOR*%`dc@h;J zm7SuO}bDuV6P1FwaMLS8?@VA$9^($ z_yF4}_p-;}N0}BScAuz`cYTVTz-f}q)Hah?$1J|fUaOi#_Ox;md4Vjgk_Ui-ft~rz zHDRkvnk|$mKFz8t*d7@RB}FoJ@kOl)*YG*pV=(ZP^^@l3pg5>(qE`7kGasY$z}xob zMYTi_dF-EMsuv-bTd~Y4_=jpJ+9a8KPlJ>(zp3Hu?m2DQ*(>d8(9D))2y179rnoAR z6;>WiR4vQWcR#7fA6|p&VpdUigI~4CnaYB52`p1tH;u{i+)7i^VI;`p@(oNEg@J?h zVlW#is-i==PlYz+1-YQTI)z2c&-C!d>2qArN%yd@ZC0Fn8k++4bDbWF#r*hy0@i($ zpM63lQ`RGKfXx{Pw8gIIsp?;b7==ST?RJVC@29MyY8e>=BQ> zzS#^Go||SO*k5Xo=DcUTrRx)fomfvFNl{tcf3&T#r7?XZDVi#3u4^sSlv9&U z(Vgd>YA&WGCpUlCpx;mjMeiB8lZC~Tt1B z#8|?*u=Jo1rs8|Ok$S5crx_r^phe9iYfpp4E|tEMRKVz@^$n-m(Y0Q|_zSg+7?`!r zV2H@9ilQ*OKatrB-O!IwhDJMRjrZ!nFqHmboWIq2+-(y4&)?ORd(E_A_1^nLPXXr(OWON;PY4aCkZ<}%q0zo zW?IXAJ$8;FTSSpNyQM0mq%lJ8`a}&CfG?fz%E3?rg|tu1TfO{>8nAbIlxpOHg=cOS zgUMWGBN+18(zX#3rz1R(tVZ1`>0;3}X{-VFlVXirumc2Y9pzf7@JvNTY=BK$Am?0X z*qU=xn=hK>A_poI=o2vfT7hU$zwWI1d9}@!4OxJIm4k$Wsx3&?VRI!_b8q@x|GAWb9zB({;qE1=*;~RyL6sURXSiX+pn_4!#!S z)CEVnRT($%ebG1@Vq@y$m>if!tyIqqvw;^R`(p_;l4Gu!u_l3;=_y&g^TJl~F(7ZUKC?X<-3>q_DFH04jSVo0z_#tiYR}>}=dgaDOuH

          F{RlZ0^~l{i+mD=nV$0{rt;3kWi^ED;dxTGJ9obr4hJkb%j4hp0ZVm^gyMPuB z#5hH~$0O6ZKg%iKG0B=Pp#dy0RXS)5RN5)GF7U*~jXm%bD>ykD=w-IJ3h-4J>;|~C z4f6kZyNfz3aU0xo-+$w)&bVqk*7VkY&dHc;{DTF76u>r3LCahfAasrCye(8No2kbO zkCFD_v#1q&)fTviDXI)QUclg!UAybmIe$H14M|CH^%JIM`}UM7n^|`^6*Wzd+#lX1 z^%JJPO~h4pRu4}is>&89CqAu4+q(9p3QyDnqwVOwgZ;S{tV`yPeEF%smq+nVv2r z7r8LsPr)b>VyD(ka&icC`;nj3$m#IYX0sfGhR=W6Y|aW^D*_&f4Jb4;hh}y_vDs;m zy!KUrff_Y!02ORw#%W$8Katv7NE^flFTZ~(G!vP5uzQSOH$F)BB=5JAMw4<~lv+W0Cg3%A{|6cLfJnREl#bE@4i4<8)st8#@{?2ItM z+!0=J*u?hN4RD2u4sUs1yCqonEIQoWT*OgHC_ppEyce`(n#UMsKP`<2QjB`bi-)ph zLo6x_zzWWJ0lBM1?2lsBS1noY5^4di^NZ$qyEDP zcdJFDQ*KA|{6z&aHVYwh<4M+Rdja;nc6$N4#{R&gKkR)-cYn2TWC5Fy`i7ere;9-Q zx-l&pvdLS@^t(tcU7X9d7n{)U-o0@TPfpf$Ha5CDSrc=Mn;2G&4RC!V{do^MCt+)g zaqW^H2aPSK!*_`hh4i7`NvsC%BhPQ{HbhB-q^YwxZh16hFv`1$E~eESF{u!!BSS~8 z@U@@xoq-zo7mw!I{KTJJmutC-f9{-zs5G@^5aC=A%Hndvl&gkii%5-O^mKjqtjN&! zK#)kqlU}2}Hm-^KdXP+feJDUQ#I>*YzuHODK}-@Z@@!Bgw7TN@$KUX`oheYbf5npV zm#Ly@!4$bPszeFr+%-e%uwT{sW8J}-3IS^-u5OSUIbk$JwdOshHeFX}K$)%4ltq-; bJyK2iPx-8k4U(=hTgx6RMZ+v5?3exz?rJ0` From e4ff0466b03598723e6ef6204bd3c443abe6bf2b Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Sat, 30 Sep 2023 03:20:11 +0200 Subject: [PATCH 176/236] Add new documentation --- docs/Onelogin_PHPToolkit_Guide.pdf | Bin 138908 -> 299830 bytes docs/Saml2/.htaccess | 5 + docs/Saml2/checkstyle.xml | 69 + docs/Saml2/classes/OneLogin_Saml2_Auth.html | 2085 ++++++++++++++ .../classes/OneLogin_Saml2_AuthnRequest.html | 549 ++++ .../classes/OneLogin_Saml2_Constants.html | 1332 +++++++++ docs/Saml2/classes/OneLogin_Saml2_Error.html | 724 +++++ .../OneLogin_Saml2_IdPMetadataParser.html | 555 ++++ .../classes/OneLogin_Saml2_LogoutRequest.html | 865 ++++++ .../OneLogin_Saml2_LogoutResponse.html | 797 ++++++ .../classes/OneLogin_Saml2_Metadata.html | 562 ++++ .../classes/OneLogin_Saml2_Response.html | 1514 ++++++++++ .../classes/OneLogin_Saml2_Settings.html | 2073 ++++++++++++++ docs/Saml2/classes/OneLogin_Saml2_Utils.html | 2498 +++++++++++++++++ .../OneLogin_Saml2_ValidationError.html | 1451 ++++++++++ .../css/bootstrap-combined.no-icons.min.css | 732 +++++ docs/Saml2/css/font-awesome.min.css | 403 +++ docs/Saml2/css/jquery.iviewer.css | 65 + .../css/phpdocumentor-clean-icons/Read Me.txt | 3 + .../fonts/phpdocumentor-clean-icons.dev.svg | 17 + .../fonts/phpdocumentor-clean-icons.eot | Bin 0 -> 2324 bytes .../fonts/phpdocumentor-clean-icons.svg | 17 + .../fonts/phpdocumentor-clean-icons.ttf | Bin 0 -> 2080 bytes .../fonts/phpdocumentor-clean-icons.woff | Bin 0 -> 1832 bytes .../css/phpdocumentor-clean-icons/lte-ie7.js | 30 + .../css/phpdocumentor-clean-icons/style.css | 48 + docs/Saml2/css/prism.css | 204 ++ docs/Saml2/css/template.css | 429 +++ docs/Saml2/files/Auth.html | 264 ++ docs/Saml2/files/Auth.php.txt | 766 +++++ docs/Saml2/files/AuthnRequest.html | 264 ++ docs/Saml2/files/AuthnRequest.php.txt | 199 ++ docs/Saml2/files/Constants.html | 264 ++ docs/Saml2/files/Constants.php.txt | 72 + docs/Saml2/files/Error.html | 269 ++ docs/Saml2/files/Error.php.txt | 122 + docs/Saml2/files/IdPMetadataParser.html | 264 ++ docs/Saml2/files/IdPMetadataParser.php.txt | 233 ++ docs/Saml2/files/LogoutRequest.html | 264 ++ docs/Saml2/files/LogoutRequest.php.txt | 453 +++ docs/Saml2/files/LogoutResponse.html | 264 ++ docs/Saml2/files/LogoutResponse.php.txt | 312 ++ docs/Saml2/files/Metadata.html | 264 ++ docs/Saml2/files/Metadata.php.txt | 249 ++ docs/Saml2/files/Response.html | 264 ++ docs/Saml2/files/Response.php.txt | 1198 ++++++++ docs/Saml2/files/Settings.html | 264 ++ docs/Saml2/files/Settings.php.txt | 1168 ++++++++ docs/Saml2/files/Utils.html | 264 ++ docs/Saml2/files/Utils.php.txt | 1568 +++++++++++ docs/Saml2/font/FontAwesome.otf | Bin 0 -> 75188 bytes docs/Saml2/font/fontawesome-webfont.eot | Bin 0 -> 72449 bytes docs/Saml2/font/fontawesome-webfont.svg | 504 ++++ docs/Saml2/font/fontawesome-webfont.ttf | Bin 0 -> 141564 bytes docs/Saml2/font/fontawesome-webfont.woff | Bin 0 -> 83760 bytes docs/Saml2/graphs/class.html | 163 ++ docs/Saml2/graphs/classes.svg | 108 + .../Saml2/images/apple-touch-icon-114x114.png | Bin 0 -> 28338 bytes docs/Saml2/images/apple-touch-icon-72x72.png | Bin 0 -> 12751 bytes docs/Saml2/images/apple-touch-icon.png | Bin 0 -> 8358 bytes docs/Saml2/images/custom-icons.svg | 116 + docs/Saml2/images/favicon.ico | Bin 0 -> 1150 bytes docs/Saml2/images/hierarchy-item.png | Bin 0 -> 236 bytes docs/Saml2/images/icon-class-13x13.png | Bin 0 -> 428 bytes docs/Saml2/images/icon-class.svg | 77 + docs/Saml2/images/icon-interface-13x13.png | Bin 0 -> 308 bytes docs/Saml2/images/icon-interface.svg | 73 + docs/Saml2/images/icon-trait-13x13.png | Bin 0 -> 340 bytes docs/Saml2/images/icon-trait.svg | 73 + docs/Saml2/images/iviewer/grab.cur | Bin 0 -> 1150 bytes docs/Saml2/images/iviewer/hand.cur | Bin 0 -> 1150 bytes .../images/iviewer/iviewer.rotate_left.png | Bin 0 -> 1493 bytes .../images/iviewer/iviewer.rotate_right.png | Bin 0 -> 1482 bytes .../Saml2/images/iviewer/iviewer.zoom_fit.png | Bin 0 -> 1252 bytes docs/Saml2/images/iviewer/iviewer.zoom_in.png | Bin 0 -> 1420 bytes .../Saml2/images/iviewer/iviewer.zoom_out.png | Bin 0 -> 1416 bytes .../images/iviewer/iviewer.zoom_zero.png | Bin 0 -> 1091 bytes docs/Saml2/index.html | 244 ++ docs/Saml2/js/bootstrap.min.js | 7 + docs/Saml2/js/html5.js | 8 + docs/Saml2/js/jquery-1.11.0.min.js | 4 + docs/Saml2/js/jquery.dotdotdot-1.5.9.js | 602 ++++ docs/Saml2/js/jquery.dotdotdot-1.5.9.min.js | 15 + docs/Saml2/js/jquery.iviewer.js | 1169 ++++++++ docs/Saml2/js/jquery.iviewer.min.js | 47 + docs/Saml2/js/jquery.mousewheel.js | 201 ++ docs/Saml2/js/jquery.smooth-scroll.js | 32 + docs/Saml2/js/prism.min.js | 16 + docs/Saml2/js/ui/1.10.4/jquery-ui.min.js | 7 + docs/Saml2/namespaces/default.html | 244 ++ ...-file_41490c7e368e29f813beef0e771110ee.dat | Bin 0 -> 116458 bytes ...-file_71006b8ee6871e72eddf38cf55e170d0.dat | Bin 0 -> 40487 bytes .../phpdoc-cache-2e/phpdoc-cache-settings.dat | Bin 0 -> 113 bytes ...-file_11373a29b3c52a2e91a3c8c3c0e98382.dat | Bin 0 -> 40621 bytes ...-file_e9d34eadaeaefe21f3f7d9637905ed7e.dat | Bin 0 -> 56684 bytes ...-file_93972b6811cf61deea59203557827f2a.dat | Bin 0 -> 127840 bytes ...-file_d4ec4886d9048c03af3aa70b5b826df6.dat | Bin 0 -> 207318 bytes ...-file_b4c7cb90902b9fd1dd94f0c07751194b.dat | Bin 0 -> 35907 bytes ...-file_2fa4b1a840f5f051825e538151a532ff.dat | Bin 0 -> 23889 bytes ...-file_52084c644a12bbd66735afc25ad2f294.dat | Bin 0 -> 36319 bytes ...-file_47a09008f5ff5cce89e9a6107ea425e3.dat | Bin 0 -> 143159 bytes ...-file_2109b416d04de19ef5617c91c1a203bd.dat | Bin 0 -> 58435 bytes docs/Saml2/reports/deprecated.html | 153 + docs/Saml2/reports/errors.html | 611 ++++ docs/Saml2/reports/markers.html | 174 ++ 105 files changed, 30924 insertions(+) create mode 100644 docs/Saml2/.htaccess create mode 100644 docs/Saml2/checkstyle.xml create mode 100644 docs/Saml2/classes/OneLogin_Saml2_Auth.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_AuthnRequest.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_Constants.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_Error.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_IdPMetadataParser.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_LogoutRequest.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_LogoutResponse.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_Metadata.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_Response.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_Settings.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_Utils.html create mode 100644 docs/Saml2/classes/OneLogin_Saml2_ValidationError.html create mode 100644 docs/Saml2/css/bootstrap-combined.no-icons.min.css create mode 100644 docs/Saml2/css/font-awesome.min.css create mode 100644 docs/Saml2/css/jquery.iviewer.css create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/Read Me.txt create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.dev.svg create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.eot create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.svg create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.ttf create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.woff create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/lte-ie7.js create mode 100644 docs/Saml2/css/phpdocumentor-clean-icons/style.css create mode 100644 docs/Saml2/css/prism.css create mode 100644 docs/Saml2/css/template.css create mode 100644 docs/Saml2/files/Auth.html create mode 100644 docs/Saml2/files/Auth.php.txt create mode 100644 docs/Saml2/files/AuthnRequest.html create mode 100644 docs/Saml2/files/AuthnRequest.php.txt create mode 100644 docs/Saml2/files/Constants.html create mode 100644 docs/Saml2/files/Constants.php.txt create mode 100644 docs/Saml2/files/Error.html create mode 100644 docs/Saml2/files/Error.php.txt create mode 100644 docs/Saml2/files/IdPMetadataParser.html create mode 100644 docs/Saml2/files/IdPMetadataParser.php.txt create mode 100644 docs/Saml2/files/LogoutRequest.html create mode 100644 docs/Saml2/files/LogoutRequest.php.txt create mode 100644 docs/Saml2/files/LogoutResponse.html create mode 100644 docs/Saml2/files/LogoutResponse.php.txt create mode 100644 docs/Saml2/files/Metadata.html create mode 100644 docs/Saml2/files/Metadata.php.txt create mode 100644 docs/Saml2/files/Response.html create mode 100644 docs/Saml2/files/Response.php.txt create mode 100644 docs/Saml2/files/Settings.html create mode 100644 docs/Saml2/files/Settings.php.txt create mode 100644 docs/Saml2/files/Utils.html create mode 100644 docs/Saml2/files/Utils.php.txt create mode 100644 docs/Saml2/font/FontAwesome.otf create mode 100644 docs/Saml2/font/fontawesome-webfont.eot create mode 100644 docs/Saml2/font/fontawesome-webfont.svg create mode 100644 docs/Saml2/font/fontawesome-webfont.ttf create mode 100644 docs/Saml2/font/fontawesome-webfont.woff create mode 100644 docs/Saml2/graphs/class.html create mode 100644 docs/Saml2/graphs/classes.svg create mode 100644 docs/Saml2/images/apple-touch-icon-114x114.png create mode 100644 docs/Saml2/images/apple-touch-icon-72x72.png create mode 100644 docs/Saml2/images/apple-touch-icon.png create mode 100644 docs/Saml2/images/custom-icons.svg create mode 100644 docs/Saml2/images/favicon.ico create mode 100644 docs/Saml2/images/hierarchy-item.png create mode 100644 docs/Saml2/images/icon-class-13x13.png create mode 100644 docs/Saml2/images/icon-class.svg create mode 100644 docs/Saml2/images/icon-interface-13x13.png create mode 100644 docs/Saml2/images/icon-interface.svg create mode 100644 docs/Saml2/images/icon-trait-13x13.png create mode 100644 docs/Saml2/images/icon-trait.svg create mode 100644 docs/Saml2/images/iviewer/grab.cur create mode 100644 docs/Saml2/images/iviewer/hand.cur create mode 100644 docs/Saml2/images/iviewer/iviewer.rotate_left.png create mode 100644 docs/Saml2/images/iviewer/iviewer.rotate_right.png create mode 100644 docs/Saml2/images/iviewer/iviewer.zoom_fit.png create mode 100644 docs/Saml2/images/iviewer/iviewer.zoom_in.png create mode 100644 docs/Saml2/images/iviewer/iviewer.zoom_out.png create mode 100644 docs/Saml2/images/iviewer/iviewer.zoom_zero.png create mode 100644 docs/Saml2/index.html create mode 100644 docs/Saml2/js/bootstrap.min.js create mode 100644 docs/Saml2/js/html5.js create mode 100644 docs/Saml2/js/jquery-1.11.0.min.js create mode 100644 docs/Saml2/js/jquery.dotdotdot-1.5.9.js create mode 100644 docs/Saml2/js/jquery.dotdotdot-1.5.9.min.js create mode 100644 docs/Saml2/js/jquery.iviewer.js create mode 100644 docs/Saml2/js/jquery.iviewer.min.js create mode 100644 docs/Saml2/js/jquery.mousewheel.js create mode 100644 docs/Saml2/js/jquery.smooth-scroll.js create mode 100644 docs/Saml2/js/prism.min.js create mode 100644 docs/Saml2/js/ui/1.10.4/jquery-ui.min.js create mode 100644 docs/Saml2/namespaces/default.html create mode 100644 docs/Saml2/phpdoc-cache-22/phpdoc-cache-file_41490c7e368e29f813beef0e771110ee.dat create mode 100644 docs/Saml2/phpdoc-cache-2b/phpdoc-cache-file_71006b8ee6871e72eddf38cf55e170d0.dat create mode 100644 docs/Saml2/phpdoc-cache-2e/phpdoc-cache-settings.dat create mode 100644 docs/Saml2/phpdoc-cache-30/phpdoc-cache-file_11373a29b3c52a2e91a3c8c3c0e98382.dat create mode 100644 docs/Saml2/phpdoc-cache-70/phpdoc-cache-file_e9d34eadaeaefe21f3f7d9637905ed7e.dat create mode 100644 docs/Saml2/phpdoc-cache-83/phpdoc-cache-file_93972b6811cf61deea59203557827f2a.dat create mode 100644 docs/Saml2/phpdoc-cache-aa/phpdoc-cache-file_d4ec4886d9048c03af3aa70b5b826df6.dat create mode 100644 docs/Saml2/phpdoc-cache-ae/phpdoc-cache-file_b4c7cb90902b9fd1dd94f0c07751194b.dat create mode 100644 docs/Saml2/phpdoc-cache-af/phpdoc-cache-file_2fa4b1a840f5f051825e538151a532ff.dat create mode 100644 docs/Saml2/phpdoc-cache-d7/phpdoc-cache-file_52084c644a12bbd66735afc25ad2f294.dat create mode 100644 docs/Saml2/phpdoc-cache-f4/phpdoc-cache-file_47a09008f5ff5cce89e9a6107ea425e3.dat create mode 100644 docs/Saml2/phpdoc-cache-ff/phpdoc-cache-file_2109b416d04de19ef5617c91c1a203bd.dat create mode 100644 docs/Saml2/reports/deprecated.html create mode 100644 docs/Saml2/reports/errors.html create mode 100644 docs/Saml2/reports/markers.html diff --git a/docs/Onelogin_PHPToolkit_Guide.pdf b/docs/Onelogin_PHPToolkit_Guide.pdf index c08b2c92582f36a33101121ed7b14b3c397081ce..fd71438a30c0025b10c1dc590d63dfc72c595e5a 100644 GIT binary patch literal 299830 zcmdSBWq4f6lBR1hGcz+wC1z&HVrH_KnOPPyGcz+-ELm(ZGg)LY)7X3O)3f^=Pj^4_ zOwZg~KMK~$%E}chBH_(1itM9^7#$NmD>T`+xxpo9CU!zbLR&)%XdWJD1{o6@GpA34 zOza$-gnvAs8N|%3oJ<@D8N{p%oJ>SajBJffp!xWq9i1FZ46LEuR*KX$V%FGTeKz&B z`33`jP$us+P=*&zkgpR1%@{j;koEs$eHM)!!+Tjb+|58WI_%~W$Tk6t6`n{L{^B+c zx{-w8HYFc0c*u~EFgzu4a2Y$oh`w6-y_Hyc-$72^n+WE1tN>}j^)aL;_6D7R)n94#+5AjXptiPD5yMw^~>UMUr{?L znDr&QMMSjjctc_^^NXH*bWBsbdQAbUU!rkqTrQeB*4PJNkb2_-QTy>eMk0M)jn8uo z(0*}=Afv|LTV8#-H6sRUGNL(jWIcae2&}U=5(9SppX!B2;ND8GWp}=?&ZEVxFElnb z0WhL0eyEy%X8}FiHDgZI!0G|nBI7YgOElgyg?Z{reUA4QAifY3POACvq=lSo^D=(2 zuIqe|?*w5p9^OCSSUW^~iQ-KfnFE{zuFqS>nnKzpJnt+I^NgK1W7%V9_mu9KEK1Ma zQ6s#e+oZAVU*nl12#Diy2u#jDwBJ%J=&<>)*E z?-yb!r!dHg*MueHJ|hU=XstV=TN@xgdd`<-fy*2CiSFs;es(3LxhXmxo1~Me_&^uD zDjp}&8$~5uXsDN@ucT2Bg0r&~p#*6Uiccq-$0cj_bmR<*l3XO6U{pCYS(R!#33sCl z?$L*NVdEHVW*7QZY?wq?!+(q=ihL!Bi2AxJ1L?Yvr`>-k6)mOTpP|d96sRK zR#4^xb}c-`X`bBxJ{><=X(d=&ABpW&Kqt+)ZaMuhg_ZO3_ZvaKF+Wj3kz{zxWJw-_ zC3Bd6Te z&snWwtDW?XZo#U{mZqcM3Onk#7x`@A4xHNshuXL3Ti!F^@}x$|K)<>NMD^O-HI(%P zU6hd|`i3yQRq*qDo3{6M zHR}O`GG|gdoB9vMYt?hZ0#fQm&D+>dNMdM`yYQ*& zU*@<)aLFW2SiN;B3X#sh|*qz$~=I(iiZx>~sT~r5(%OAQv z6B7$>PPhoeYd=U)HHK#->q(h+R1jvz$ylX;xAdFpzqvQ0HvrqsKrx61vx z<#EN?t^sF`%g|jq-FXz*ZYt<-Yd^HRt$CbLaFb61WG37iy3Y|Pf8+%yzf1yAk-+|% zb91U}b%V40_@M@f4FRn80FjB3N930??8uL}6A%E~bA=1P8;0fjn`m@|gG9P+{%6_r66MNkpI ztk=(6f`+5JdLO>T57FF{#h_yVf|G{8cC+cUL_sb|>1!QY+<7l?s0paH>2#90Gtm${ zM8rjvDlnezImHf7z9nys5z~W9MqFhi!cKxi{O%(bWG)&_(c1i1% zOhLcc`1H8r4e>j!&RdmWr{*suSvVAY$>Bdgq?!A=HCFZ-XZmmnK|7WjNn)ENfo@if zc^$}WmXYB5p@$`l0ougI_^)yB=eu8HDC^(GQe}5L6G8@cc|!{mBPVDEC1*pYKaPmm zI#~Z4R)0SKQGyAY;iIysI{nXa)W3}vatMYv?4TvkdUn#p%&xM4@~Twgv^XO&Xj15Os4BS91C}C-~!&0plMp!h*l*H!}G7{Bw@LV8HZ` zqm1+{e;ohy`tuAQAA`~-17mX=vp)(reqtkJ0sPqv$4?xDEWhli_^Xtdt&P*qB7_X4 zbc}S2ge+{oPW(~9zfD%yS(yLRSxRP;vTOtn6KvPB+5?9Y=5RcnuQp8AjVk2LM-Rxn zj6|E{^@DfeoV~Q5;3C>YX2yk#xS|q@u|1OP;ESE_F&Os&6i<5$4?;xym9|K^sKjcO z;__>Cd@G|Ck$R@^whN`vnv{xwkAv0M*!LB_4kSXjKFO}GVQ)^i9VcxMC(GXUOarN0 z3516k2j>Z!c#s)u!(AkrFhobPvR`lpF7Y;u; z%PPr`c9f1VeXG5g%NalQB^7L4MVuBB z!4Sb3%R`#7>Ji-nMIOumQVx&1TuIvqxDU`fnPuw|zWxH9PirAP>!xqtU^M>ry+;(4 z%!biuC>ytsx&c1|*x~}j%Id`M|CH6sR;IkfhbDUML)$7%v;w!s39_Dk4-A zh$1Oaw8c&lnRc0KRO6&HuSt-)9K9+5I9i3~XoYHxas+ze1oTk`r3NutG02mP0>Ay)q63(B`(YI9lMY zzFPb=sZ+8T5FHvCh9G6gI5cuSVxCAt68}f0`X?BWlKbIi7>|uz^Yi>q#h;kbB-klC zfyKFDo7$2%eVPX>B|kJ>sM6wMiMxIM5L-n;R&`gNsg+kgO6@tu-c@IppvCZEQLOAu zO0QBO=_EW;QGyQckSn@6L?!o-d%+9BJc27%4oslmB@2U?U2fSs9U!pFWRX2Y^tr!2 zqpAv}JU=l!t_h0I!`0=4mfx#~^$tQs)_m_@J0ZZY82+ajJ%IVo==x7)^O-tvV>W?| zh@$sz;TpveVdB^`66lIaHtIKdGd>@dK%rRoL$Uyu`Pj( z34B!Pz%e7|@l)Jyq4S2P)fEzRqo7-KH0S3y<3t@h=zvOw;2UC*>!+5q12*;VD-ZDr zKtC9t>lU!P1g+l}?dzQ#uOY~N0@=&27TiS~?sEB2m4R4qyur?OC%beveOL0Zf-97E z2Sy+{fsL_9b(4js@Rg@V5MG$>+p%xgP8{89Zgm#MmB6DtlU?WG;JJ1xNh} ze*l;zwBdqsVHs)zF~bz?tjwM2$STYI0L1~yW!$5Lmnk0#2}^Ornw*SU{^_|!+59u6 zl1FYL0+|u*#^$$)XzinCuot};)Zf^e={L6itH1o6t^ZnKF%hz|aI*dC3IDN<%A8m8 zR7X`y=5LW(_igZ#e4CJpVmQgT6in2wemqB1-&F||*uh?L9%_bzoUbJ|LSl=&`d zG=Y)Bt^Nw`=s+#U^M^{)7q(h)qfhWjVQiOlNzKT2qQgbfc*-M+`gVu{@aCt8a0S5j zr4WsbvQ>lFY}U+-k`OEt9$EI`I`gtBbQQT7fQA*r>xO%9yht>bnWJ>{atBqFHcU=b z-8w@fX;S9P3Go>G1Q*yfI@T|1ZpOm`RYQE=S~+f#+HJ$KQdFfXptMeWmZ(QyjrZ3^ zh$I>cy5Mak9N@j^t2XkY>2Ny3hN1eETTv+)Ge{%sjfM6woRH^_==!~?*ikYqoJ!HDGr*mK}!VKQ{wlxe&P zy?4DOy;;12`zCY`^H*Yq)1(@ab{wpL9+<*+gmh-5ACfzXA4W-y7?Nmglum=P^6_3b zfjK+F=uuj2y5IJLo%1PsR2t7e4R(NZ=)K&$&Uia)XE!#sIfBe~Cf}qSH~)~A;)+jU z_g#o2)>FP3Qi-CoVFf2G#qFdtL;eDOA*e;jO5clF(b98LmmW5FTqenZNgzqgVI+$f z(Ld)VA&}+m06jP`GK*TTiZ)t#SH0mQbiIVOAI`d&ZaX#w|3bT(bT%pX_0HI{0R=`0 zq}q==7V!eK(|>?iEv|zy@2k=tofNGUoxIL&x$`3VoQFl1B{F*o7ove>%Wq0s2#h*HRLoTf%S*fOkFpEnC+^<6nl{45;b7tbM z>Ex5TP@zI$Ru`I`V7-P5)!4!Ar*yoGdviPr*Jeh8$M{wbyS=x{4rbyDRuQ_5v>tE1 z#!Zx!y)HiHJ0q!nt|g4kuR97A^&cv7PPNd%hvi<~L8VhKaN?4UQ^8O{<(Fail8Tqg zetYxDkAhYf6jZYn^mLs>{0uz3JR&->KY|mVQQDd1#plkbA@2fvbo3x?^D4kR%o_hl z(cN&YCQgjNuh~s=b+J2j8ZH8@mGbVzzEI_MdICee@6)DIlsVVxJ+@i{J2%?Pdrzlr zA9XE$)SSr?6YKVYO;QFz$yhNy@njM{6%Bt&l;`W1JHle^&UbCgnQ1$9qj$#^u9kpS zx6h|Bfqi}n94)HNbE%8i%9DeNv9OCP<8~R|S9V3+G$qgAgB~j3CJ>Pda)TOYYg<+h z4$N22m=vK=_N9~go#49R$I>hGHs!<^YDhKt(``X#1yU2z(Rx_3y39MZ676r%Y zvu6uL-A=CSUxBVtG=ueOu2K@gQ4`X^eRTrYKXdmuQjmPO3>dzi6yq zD}rnmdWzN`wds;zP3Ow?D|1GfePV6|nni|9Kemg~9?qGbvt-{Tw`Tb=dT+Ton?0{P zh~G(l|Fu7YMnE)U|5yWge?Aat)pr2KG!u@R0{hch(k;8a1{6| z5NSr=gOF-+Z)VjZ--uWNQ&JMTr1^+MAvCl@aYw)`y}WLjC*jrN>V)hId|Z>~_aG#* z>e4nwPhZ9^t}ZIP5h`E%!U5{|`{zcM>@xWH%J8TF1~vwamh-iTzR4^Gt2He2{F*|O zh0392+q1FFj-A)Hw|lkI2?Xg~`Alxtorg9@y)c-a`mxu8u$z9{cc*C~wq&A&<)z?= z^!YX6OVS!r?$fQHD*{#x{$$@AE}*CxgH^{lj$R7T(J`Cn9If$4(62N zix6+%vDi_)@mZg~Tg}4<7pdwlcQ4MlZ~5=SV0d5Ten%Tl>wX8G4Jpd9WEZEM;f0CD zC1ACXe}Z&jVX6J(Qt|L}!u^Fes$7=;LK+4ODB>XO1-wx*^T;?gU+D>^U4_8u7G*gy zoG+JQ2I6+#!zapOz&6QdyB7DQTGFWd%E!NVib#q-nUDw(3{1Q z#$8{IA}SSFyqQLpfTuxIV2yN1d3NtXLUnyI*m};&Al}|=<0;AELdR@W`DU}qlEDlP zj#3|KL6nS%fH^(qF8=hV>+bXS%ZO?G!zI(^BvwW9cHL+N&R)5X-9N<5b~d%|eb0At zeZ0z3KiJCyvy|#JYJNkcXADB;Jb9N$>0XW47sTW$#SJ!H8g)^qNE|>THIKjR!*)v~ zJ+FsXr7(%N!no<7!q$MnTcQQYfNvuOdkB;MHg?d*r%95ttno#aB#=jGgJLSV|B9>) zW$5eJo*XA7gHdAbgN_%*yqA}JeQymBP~RyJZD61qmSdf4HmTMYkBcFTmt03F->IL+ z5>QfML{?I-RGDJBZ2WE~3Y!vD!JAz8j8fscU^Dh)PXwiOiy#TNu#0mKdoA{%6b%)? zu}E>|oug`A@|wM$8S4Sd^aGJeY-D3e7drg9PU^@MY!beq2HAKp9yXUplVoE=_!9jc z{mB9kf~+0%`4IF=YE@jq-s0YB?i)5RW{`)bX9JhG(r9wRnMIkhS_*zjU?mp)nBbX^ z<}>d+@rq*(AcK}Vn5{g<61CnOS1ZuDux#ZdK<>E z2y*%MFUNaZr12AJ;x!f#1Ee`T=B4uMjY-en+3A*!H5vyR8~X zM3FQ{&+KAXw{o43gdD&VM^bVXR|U_!IH-ALM+#A?_s#%Aa#J>?ANP+RPAp5`Lpwe- zbd*(-iTcX3KpH;^OR3zQB)v^pD4z#QbY+xP<4GBmvng<3FzZ8^uzYrSmM*`m7Y@%W z!A&j)3EYG_ZP?B6ez1nuweGQ{eQ4^@_4mEnCZKx=1wXyqRy!fTr~%bA?_t2H?Lg@M z-v5s1=1%+OL#&JZaL)PQzKHwg4&pN1Q_bmiDTLm=6pB%Q!Q!6-&65-OZaOTFeUaG{ zWBpL0@-R*G@^MQ8+ou_NDl>a@N_qRJ%=;$%l{na)T$=|&&Eel zKNQC|A+Q_W%_=I1AY%C5uvTZQ1NdEIOTqsf(o1U#$v+gV8H$JWA{UK>l@A{Ylg}t5tq01FltV3kO&W>`iJb8}TgxOv~ljO&Zdb zef7bHfNk}{S@G$X&r5cz0@xL5&AcBESZ~>8yJm081?G)8NET372Be3+)H*SM17^dr zy+CL0WeM40rTUP}u~xYy4eq6|RSeFuNm|<*iDN!91n#x%4&zG%m(#N4==~4@7y7^e zYE#N^fCIlBV$t@dK~Tdm^yK$aiI9WT`gRoO)zwoXzQe`rxDHyWWx403ktY@TR@x;4iO! zVUNOR+9M9eHxoMcbg|7>`Mux4-vro~{DO#qkMaWOMC7dpw^MH`p1Lyzy9gKq1{O-2 z)Gn_lz7F%W-&01N_M!wB12U6;s^{>2n+N2Llsx*K6yhA&jpEGfP$cuDhf`+TF=X3{ zdomq=!VHR*d50e|(>=7$47yXecNJ_hHyaDML|*CP=2PYY^R+qjhUrila0y^*4?L6f zLX|3Eb0ri7VLJ#56H%S=BKeZdCjxI6L*(+3jTY1F0L;Ia64z{~4)_{ugJ)>c_D4Tc z0UF;>bis9`S7U&?81DX%Hp{`9@g66zEwiCZa-3NP(^wb@%dJ;oK$-_`Tp-pFUp7*o zQ+HI!^Ecc6Mr8u|48JlynM*8pDb%OPR9Z$!eM3}_5xE*TULu+A!t7~V@OfjAmqGfS z0%ip8Ibrs5VJIB5L3KgOl|7j0s3@WE{x1I0z}A2s@^4bjniTnp!3so;kbn%sR*l@x zVi|_tD8J?A>gGm=9D!P#l|tpoWHF2Sfk=i2)Hn4N$rwWi2%wwhu};-Sc89{eb)!9G zq@3^rv1TeR|LgMi?|X;;UA)tnkr}|r#%f{;U}5E80&p0zv6z?`vNHqNIha_DOpV!D z**RHF04D!c-U;{%H2#fuG6Vk3JAcv5KQHDF{`nK#5;7<|7}z-48912O7`a0;ND?|Z zIGaE-2>(1IV&Y>;(74vPR@RLIWP~s20bOpAKc^~W*qq(PWZx{c&rA+jCeJW(lfNe*1oQW(B6>^t z_Equdwkf6eDrt`>siUYfaaX}kX+dckmU$8F0HZgmlF^HL4TUtPygyYD=zsJ=nC$8g ze4@yaI!5?f!q+=jLGp??V0TeXX`m;i#A#E$D#h6XC`6fNTq zu~j8W<_7aNaaYbEPWs0Fuff6k8#cuHm-GE+H$z8Z%w~WPw(}Z|&jx`eUO7WMUt<0) zUYNjQ1%Xgsu@D@QDD=e}uCiGXVe8Tjd^tpK_;5NM@`aa!(*V@E61ugGS0V@t!$@P@ zkC}O+-fK+7ZD@oCPiw%rai#7H#GBwCT?mMr{OH6(&j-J5u;AV$Fgd-&vX8SrUJ

          IV6u(Ev{!T$h&G?AVj9=ImTwK*~;@%)~oEvonx_8(~;Sm34TB4vO**cMq2x6; zu>981{|e~;%5Kb`{ld@ce{O^jGX2~I`7gxuA3Gilf9!tzwK?(cbg49}w09)=5Y#L`Yp|Pr@2^m6uO~1xKB) z0A-vkHeTcrmL44C!NjtUrAfRSo2DCEnO(>x#kw0a#j$*ylzK~C5aNK}XSx7Xb?=_T zetpeq_SUtfDF&s$?93e4uRxid`Q7zfcm3&nJg zC}d*4JR?3j%&RLD2KH>cITNae!BDey=lNnoJn*f_YNRj!!|-|u6jY`7%7cjnKM=zr!*~Ox0*=2}kW_=<8mnGzPG3qRaZL zytAmDqO*8)RF@qmp8A`NW2hL%u~pHUnJW2Yz5yTON*m>)m5^|-n!JFPfN>9)k||L2 z+BqN4wAteGznT7^VL4yd`Nl9cD^fnbJ~*3>j7;z9q%9}$370c|Ly&Gxj>Yh!Nb&9t z4N}VIpjfPI!lFSr&2gXS5Cd?}E!tY{68MHY=i4=*Abmq-VH%0x9hI*1#VuA3Su|5y zzr`K68_lj}Xix7?uBC8-8^Eb-^lbE^!|XxvRZDA)wqwP`#j@*j^fk`D6x~H^txmUr z2-QCBR|9IR`;yCK-EkD3xZv{PxsaF?nbQz|><5bwvGdsL?*_2omM7k4Y0923XFHg%?S;&U7*joSmct&*85?5HAc(a$ud970M zAl78Tp7B7=pYEZXIw_?Nc3sa}8Q%33JGGdF+0UQ*a{_$mHc#@vj9b_tJzZ4cH0;-{ zkre=Ql&LUV4tX&RzBPWD_%%_^p~YZfDjy`mRgqzuVrdm=%rtcA7R_LS6l+=Wi9Vhl z#R4VYPJy!(j@7=FXx3G`o2>c5#yq__$O;}E zE&uX#go{%wqv8S9XG}QD#-_fulyGzwUgpZdAMCc6NC(F0N+g`)_#DmyxdyA&cQ-`4 zE}At4XKf)t#`0dKZW?ah55wE*+r$aRGcw6Xnn>JNdYb* zH)m$@Cp`!U;AgOgVV}N7E*V;tO>!e@+Ch$ojpH}GHYF!VE*$69k!i$9OZ0_AT21U`WZm2PA~ zTYh=7T%Cxj)&4{AEQ{CM?PGKSz4cMElTON5LVp5DJV}Dih{DKpntisNd=SOV?v;pp zzGJ^5i35qFPMbp8bep}2{rom75^Ef5b$aRX_bB^Y`*nMymgEghCrd#C5d-7A3dVBU zeA@bP6?7Fe1vHKQ@^Ea`3x2sxW3FEGgyPV!rAGT*rGg8BJJ58PKyiPLl^JhnPX}W6l#+|<22hXP*8(Q6mjp~-oCeIuk?q(+XYTIv{ zdptgy`fHfM_9WzUxHh#lP|!9|LCH&)zSH{a|D2NzU`EyjS0@Il%^dW9v4iVhDI!L=_KmrM6rsdm_mH!3eRd5#^d zcd*+opQY5h8q8K|aGQ2JGrsmH5!~H+Kg{_%@n?8l?F=SR(CfZv`p|bn$GAC;e{b2; zsC7e{$Q9t6P;YEiNHOAH@!}gr3Zgi4nSx|Qto>LtWVotdXbs@poLu*5=% zF#ujvJ+ek4UH^l1;bbo4C|XoLwhUKv!x`K9GKI5q$XaCXOGX}LIeRqHjo-YCx&L8G zCRUR^`tXiu09y=NL(vNKU65Ny6$-tx5{MSue@;|k@_5ayhaC5)r*dUp=*+`4bR zsQnGE1jGIP4SQYco4mq?dn)-1V@&GNVzw2N8WMPc{}d~>e)Y7mu_F~rT4cEFys|&` zH-L&fgK1{e(O{;Dhzez@p-lR+G2m19R;oE8IT)--dZww?MnI-%#~b7fL2;gOff+&i ztkn<{5ZCgPBRm%#b76mCV(dE$-0Kbg(_F)hpMEc`x(Lo}i$@Y+q>_>;p5m1|{hAHn9v03x|wc zLq@APY(yaC5AmV)71VyzUDSl( zox1OBHuz)v4Fgst&FK{rOnX>|>F5c>?LkRB$hyQ*iO9}v26^UXZFBYUm4y`=WR*Kf zsUTgW3FT@!MOAEWaA-rrvPlQn&8l;n#}at!<7~YyZ}m&%Rw{ZkJd%9Za%1@Qp=`C_ zOT+h{yGC`La~Aa9s`lybz&j^mAiKBmq`A4lOCHY$j(aWoywswpYo^!WMMlHNM8(G6UVX6y=bWWUWmY|^8;YZtD5cWDQ)e4X&XJ(2XdI%(AmOmQA<6Fz0gx%hB!|FEksLliBx#Z%(>;gnx=g(uPZQd-|b_ zoF>j8GCTi7op|Oh*2V$cY#~J{jJ%Dd@bivn>8YD1Kg3xYj@wwJ$p zk6K0sR|s6k@rmkk2hEL5Q7#O=9?p^~+BG*NThOWMM#CZ63T(1C0q+KP)H(b`B0HGp zV9-;Gnnvt}!mb8hyF03KOC+;Ej93GB29ftl6Yu~VDq?R_>#|E#LFis6cu51#3f}e| zdsR4Qn%)GZjKXZohcZnH4@)M~NiTg|-l$?UD*#yGD* zn0e9G`{#C%uh)bbQOIZsY*zA=s)Z|p7GzSg5>$n8$S>uD z&m%zbkbH^}+;F26GKl;;qh~KHiEYVzQ$D14jKKp5hCXo4Q5Y~gBzv`7iOgRyQ<~D+ z8Y0qp8xA_;4#df#AN6!nRGe88)(-sU>EC+n^XK<`)sg4;@x7CS{<8WG8 z26@}4%P!UfmwWOTu?XbzI_MieY1vqux?eXMVb>;oY9r8OdQc{a+kVi}(dFOd9*g%) zcynYb2t~g(RGh5Qwwe?3J0o_Gl5I&TzOaDFk!z9GI&4bHp){Yj`qSr+fLc7QIiS7dfl%7dXiiVv^ z9|o0Okz;i0PM}=o5+?+`Z#F6Yecz$vMOx5%q8%03TR%|F(^h_v{OLuBRI4568|5~S z9KRma;p7J0q)Oj%$M!fu-vAbrFJ$1R^n-ezI5J=2x9z~$65;`Ks1o8WSE>vDpxt>k zdoR#V0@yR;XvqgxsB=j-wLWg-Xel=>p^P9BWKHXD^+R-;qz?#2a*1{iAN@JJK;hLc zg>Bmg^MI#5;9gy{tl53+%i!Z6+=hdiK=z?A@I`tV0+xMV%P)hxV_g~KV+X7lFa&I@ z!qiB+$@bwxb)0=8+@9A#zqEipt?%hZ6XcaEyYH2Q;?`w~z(dw$>c2}79=s!VbI(xe z#D!k1yog6?mMXml3*&zv1H`P8CHaAV7B+wersh%2Yn!y@UWz{|<(T{P5sAx8BihUMP6|@&YSorLHQcy9s zec`%pjTobzc``y}LHo$~(E*{PiA(h&Be-rK`|73C!?O&bq)AaF)oBglf`YL=F2NwA z<_YuxL)}Y$&9Oy&>|)%6?1qF#>z43$M?N4vY}1H64C0)lK7b8ehEHWBkr69CgpxO-XrB(P!rDBHhWOSb z?uEqHM7v?*j@Evl1PZY55tmdaPruYXEXbf$5JF+0_Mp!wxQ2!dGMKh#D7cJ#6Qo00 zL=&L9#DuIL6m3{Oqe8W$5ps@@#)A-!fEuB|8CIep!~Gl_k;OVhg^(hnTOy`y!dm)E zIa)BCDF)hz7Oau${I}S8C7_s)^FfH9_ao~ADq%R#|I2_m0z^wRf+)UVX{XhQjm>c=7K!=nQsk8`Zz!jeOY z(O{B(;*d?qe1`txo)r1`%pbKB7FQ1nM0&_{A6Gp@ZzDM$Xo$ z>0cM_9DiH4|95d#BW3^qz{$h}U}s`wHeljlGGu0BVq-KlW#MFJWX=MTZ@zvnh=glxYc-tVNSY=0=~{-Qm9<;^hv)O7t8 zKm8rn%*XRu{^G2z@6b^rh{IQAu-2hMDK`EBp)+|w2h2C4`&aLI@$m(&+BLXYE0|V! z5;dE{kiFl^W7#ZoH_IiP7^&pA_U7K;vbTgerL2IMzCFsB%`u6DBjE^~b*6k3>^6=^ zRrn^cp0|NbhV6xhrZpXJGsa#$AM)(!BG5e{sOvImf8L61Xeq}1xW%(%o9n|`nIrn0bB_LBV}R`!K>H_n#rBtv z{iirJPS!Sv5HaNZC7ja+0SC3A3Bs^`S(oRAr0Eq1I*_bP01@Hs`O2VK5`h_k<(wN! z%;O}-vjF6qtL>m4P$JvRt_3>-B6(&L5i3ZUD2L4>>ezS4r~?B%5c)2KWIOm967wSLk{_|1y%o_WD}Y3i4z zaSac6?7lscv~plR3i$PtDQRap*OrtsXw-{Z1;SY2!2Ne9+l0n)L&BF!Do5BL_EgT0 zul2PuUQ}M6$HPNRWRA!O{FCi_qnivT1fem%vF_iua{h8>_CKTIw;uif9;mYaBQpOV0#&xZcg+8=+J7Lm z{WqWrVC4Y(JD|F*=IN#^n#}L)tI~3PeBd$zMS2tjpQjLn_#KfjOa@0#cN9{DT%n(I zMkFK-4EBmq3=td?5e~r|FOmsZh@21yi=5Pt9zHB4cHLg+B}8;lLBSptA?slYo!Zkz zz}2Zct=pyh)x~yyt^F{w+;Q?;IjbBVia0!PAM|P>Q;X}}X?&I@Y@FhAB)2KO=J$e} zqJ1P$XJjZHw)gBdm=OB(ew5Ub_4~Ds##157Tz=nkB1OCgv!syBYj(S zDUM|3ckzSg$?OihkOEXpNp<*(`4jFTcU8BuP@))ilh(5iVlDeq*L!Fx@{L; zPVjOr&DI>6`7>atXALxpUF;g+rJ#mJY`?yUiIkay6rLJUaEHV?*Y6q+Z-KgotmbS_ zQYJW+;g+TF%^8HAoJ^gwJU2uIdbF<*(R?Llh=MOJ1|*ElR_3Q`pA1HDWFADv;4LaC zCfYluJC~6les8SG=5#E+Ru6SPec94?l6<bByg`PeW) z3nP;vvQw-?hztVRw{QB)`B3x*)%I-}JK14KVyLn%V&a1vr*%dR!ejXJy>V^3o(FIn zYVnjJbz7;`A_fqL&4JSKdBqR}YxN~WEb%SR(S7E6Vz3S`i#q z*$QKYNg}cpcephHj8{uJ*5~!A)o9rzRoA*N+-9sg1YctSKEyprzYnND@dD$YAk_pqmTlZ{Y$YYzBM}&-X5szFcE7uF&OG9og=^|qRu^UD zO4MEHn8O&2Ri>R0%@_AUxcU(HoU`P3R{2#V<}-oyTD5P@)TEoUT(700o=4MTTUV5p zMKeF=S<&;T9>bHw057=jxe?CB*>#oKdJMNEFAmu}w(%e)@zCmQK$MD!Ti7H__&J)&%B>Y2zD6OMq+Clx$Y(y;3Csz_^euz<6u<%j0$ zY%>``CM^#QkI}izLe}l=ZN%VEoMTREEk~yB>}MkXhVGxaF^}d?N>4s?8`zzbr3X@| z^Q49ASVC#x<+4dNg+vm0lWY5k;I~OGR4$-j)WX%MFIK~8k5R0bf=lImubU$4Eg>;( z#k$%QI@^>w&7Z4wJEsn~n9WUVQyg#@w~{j*2U$VEh``cL_Xn6-y3Fd|sZ(S!MY*4Y z861cpmQw?9GkxzbkVJbQg!lww^RMRIoDr}~d!6jAT2n=ezn1pLjh(kZd2@<4$;a?i zf+Om1LJ8iTp^DF>j(c;Zkbe~&E0vZ(DKh-*CSk=Kjbr=#^a%be_H<`_b97vP4p)w* zBnovxQ*(@>o^zk|X3HPo-AUIRZlTa$b!WjndB%E)eNyl~seNrhFj)IoZy5e6hantK z@_z0cNpP{_+cW&$FTSUU(q!kEcKm3wI--pgfl*tyuq0mb-6t6rjZXWE2JNaOMp=}2 zbsqYhG%^ZRXpx8)oI(j@?yD8a&)Hjc{~n7`{Tf5bDEVWZRnd06cJnB*2E9YAtgIS$ z+SNrkl6;Mltp)PAA}8Je#n)Z~PO_;PO7VcRXi>(9UnH(>o-od;~gU%#ev8N$6U_TBV8(hj(O|SH$_z2b_ssVO(69 zuv>O41^!V;#mcjScbFDM8mnWS+UjJ;P=omR2t{M3HN(2wki;5c62x_?zFY2D~1~`ofm> zvE}h`dsVD$U_SW1wI6@E;1kQ{v)1T+J-A$Z)we}E_tVr0)#2nwgXKn{w?WBYf$TiY?Yq+y{e+LxW;N`1LregRmZ?_LB4g{CG>=l0< zEZbdQkoZ{)`M!Qc9sl%6jAW;``}xxOgI@4u5scm^CySTCm?@nH+QdqX|i^47){+lYOal<&ePxLpzH zcCNhX_-J-uH=W%F>K3jagEW#H#rDd(uGkEgxYG|5Q7Hi3IgUzuiQQbBiHg^9je?^d zqWMDm+&XnUjv$aRlU>`_@;Z*C;Gx`?DuQQLACw`!C=38L;7!5E7ILbi)~rSE49dXO zyL07C+?&T|Lhzj{fGbJ|o0~N|Vi-Q^Y*pLB^TVpP8(WYjz9P;L3pT6#a2a+~$?nHj z<@$2??Xs$54{9tex)*A2c?%vSmvRa~pPbdUq*kAsSA#UK4;@=aEmc4i4t!Y@Hcol? ze2DN;t+p!fftt!-DfH;@i<`31D@ov-N0d0Y0bakhE6Ktevuf4tR!W_Ee*h~{<$+Aq zolz1__c!&nzA9CVO1oWysD11)K!6T{ifVZ%fSTq~9}*4hb9rA31R&Xh*51G#7kzNc zCn^{zQQS@s6oxpphDm;x0Ptg?XNvWp^?E+j{2^`VRBEkXCT)l|Dt1UFs)JQZJfAcG z%bs$fRcRMKD!&g?1y#@h)+au((g(T6DQb23`s|TXVgO)JX5Pg(A4r9QGKU(qYItcB zHPWJKQ9o3LZZn-akS>XhLZNP92uxncIS&f6n}u0o?}%yCk6B=!5LaXqPWX;!lNppd z6ax_3M640>wCgX$KMrw=Y~Lso1MBeE@}Lm2*fWpB{GmWXjLA2y*w2fZj8hS!@il7j zo6{Z#5+-s5Ft)HE69=~{oC`5GdSHG2JRyw6G$v+`-^q)G0OaCrjN0PkG(Y~L?ylP6 zMwsQx_rn;KSC1Zoh%eY_*xnw5f%c{Y{TM>$kTY099+2j8Zk&O-QFD-rS8?Mq^^~?SB{9VQ1oG0kCqKFaiK9CIC|-P9sJWBSub6V>T8JP8I`JX49XtI#zb0|0>yG z{}%-vJKO(Vu=7vp#D7aP{(JhdBO4+6zX|C6lK%XWZ|ufS__M{o=Q`}a(a$llvj68? zCo6^@rcVHN@ZKw&eFJV$dNO-Z#p$CRq7_o5qV44_&R`uFRm=;{m2|eBiW~q; zY<5-v#7j4S?4kxb1Hxh_z`YI{nI^Jj3jS@pUHC+Vn7^119SJ$ksapaU#TcUs*J>op{%%0?GH}U=pA;xjorJjG_zQ9BFEHtNL{9p7!7qq&$mra;ARt zuYUK(<^M1I?jJCV+|eZ@0vfSb8#E5vXLEQVLm zA0WU|Fxi%Psn~ZwKt8;oqkW- zN(=AE8#5n!jNSNKUL$E%-yqCq!6hgSEfu^*O;^~eCyWl%!P5N}$V%_TL=6?=Fos}; z&+@_YpELSo4QV3>4&xo=IGaXgLR#m_l(LE^Wyo(GI#`{Pvd{UdwS{vfuW=5MX6=S{ zUU53FC6g8za2o?ke`D0Y3l{&$MgH5w2ok;Xf=-Jrms&P1Ty(7?i>YG1Vhw|z)Kgv9?%^l|*^zyB%vIR7Io`KK+Jek!Mb z{w>7co3O6x?er6{b>I5bJl(qLy0-U=9~KCIl8_KGl<@lyk1hz72!@;$#46`UPE3+P zNL^1vzJm<86NE)ZeHG^%tD?^o2us?-*pDqZFy0EX{XLQe9y!H?op=}Ae&u7@D$rVt z;}HMdDW|7PMf-;5z3P0|z3X|^s%Svisj__TR$tL|h41U&0;@=}_~%A<7y@5_1Ogcv zvc@I_a(VqzZ_(HlfnFa@YVkS(UuXSQ>8)T?_dVi>D>_3uf&JqTub8iO;qFElEd5RE z>b*BU#i0zkPv23n)Qs_F2^h29?B@F(MLxHQ$dOZ79=%YM-=Za($e1zVRr(k!+=}cX zyc~6A>@$!@QL8lQQn}VPfy2RZ-`0#=HPw!C$(CeBv+%aWx)&eH$lG*M%%e!%7OEc4 zwcz@HkymNhemjm3r^O=uj%lP}epwf30C5B+t9}H(e!APm$=ha-Le=lkTp2rmRo@tP z^}v+fXk=}TzDeM@MD}h_Bba8;vS0dU#FZ~;Fn_fIxgB!S}ry*rS7z;KWJ)$n|;wsU@f5gZ74HV3^0cploI9|thhc+`hoEEsNlXMhKgd1ztUc#Fgv9GCVN{$Jd^+K;X6{^VIoqT=2cR;t(NGIzPGR%Vk0%J7oi>i#l4Z z9ojTJbT_6EpPxNMjl!;bX?6zAPnxi4&o*RhB!;;TzrB)lf9$PchC-ELfPH$QsS2ffw*TH&F71_ z&(9S%JkOTwtcHHQ{<2za!d|zts?@G^k>7Jz&={cS>2VjG3A!RmR&?MDSB$G<8LvSt zE+CSv<&0Bw$4>AZtpH3Qdi{U>L>IAh-g54&;Gt8T$*vM29|9vFzb%4K3Fh;uMqbL z3j=9B*=`%U6Z$!LI*d1c!FVOHX?fP8AoA&wa3PTi;it{GFEK@l@Djc2-iNcUEydU)y}m9*_Fm zl%Ib&Beh=8u8*~Hqmh(dg&8Pw&pnZ#tvU3KDg!n~kC_P;lXL}nYm;?=Gu`adJSlo=07A%IgO?y#jDbXXphI!rXkIw_4TV>&PG_c^{=9~{!- z6)JDi_z^7DdHF6fl-mKs9r0_y^X3P6TOm4DHvDE%CsiMxGhRRSeogtF+h42)yKbFV z>Ce2IK&MY)mM9wiEEm+QFLoD~p)Q?HhdxbeHtkWL{lC0UajvFpJT1OYrX=sN-X?vb z&whNe$n#k_hQHFU2y67q6j7vhM6y$_@Td#M&>vFUNidl&kFAO)A2U^JN*32hlF|nZ z(j^}WmdaO?<-Swp%RLF@>P?Gh7hWzNo>;vAcf=1KkKW642n*DlP*nB zgL3c_Yeyb)v#p(NM+=Wtue-x^;Mu8(hDT22LHl*v<)Cz{0QsWi;4!R;R>yOvd*h|G zOX@jctF~j4g`YOlX z)P9@p=_86tF+iuM07MAh{!dPzTbkJqa?>gj_wptnM8`B&S`gF}mkH zEs}i*Z|?xT-6CnqJr#3#u4qy5T8XgIp3w|G%i8Zflktr7um^2YdS--dK3}aGdlp<_ z(t2w}z{2i+52|l}v!rgFSR-#Uw>yx@_)zA{Qh8GT_E~b(*-MM;ojbK0`6xp?`iLY$ zyt~eop~TiXNEk!9a}MN4)?Ro83o(S`U3JA6ln=qH%$8@Xx*ZF84voKDHRXI&W2wmI znxl!s6&Y~<;+Gw`=XYbv3ln&s9ay8YJ#Kua_*5%U-irz0LHOjs`fvs_!VQ16v7gu` zxU@fTYI%1m-(Ga(0>O!_eXk$V8>4MEio3s!%=*FNkD@&@6L}7?+Q_lb5>zQ;>E;%? zhR`#bF8zE1XUTFMhfPb-K6MsHOUBez6UJ&~K6pFXvVVK*IuV5{avcyAvJZ>I!jd=| z6;fNPZS&$S#*&y%Ug5(VXoAeb#i(vA=W5Kfz&Li_lxvqM$nsJ%;rDAy6_fwFM;U$~ zGtOI7?`%2ujakq<4p*UEwOldWg->0h3Qwt=Mual_T*8x)G?-6ijlwoKs|wq7Gj6g+l&rnDS?RU?-b@G=CIfZGB8s&tqtVs;6nnI$aUs=Q zF}<5gZT9654bp)TjgAziX=2i#*Il~lAaIBvh~1&*y(hB4DCT`O+(8t!Jyk?tm_1U1 zNJzIPHp8r5YM8wPHp41Nc9_VC#*t}~I;-K|f(IqBW0AT_!9SuQ@cSa}e&VNkV~PaR z5$weh?!ejWHVdTn*02>YOeoR%!xsqs9D|D^6tlRH7pi}R1f{1R+Peh?QdZj4OFBMAzOj_+s(w(czs;5|U!%*(O9Y742 zN$NE5jW-2yKzS)aoh1-l0nUn`?m+G5vrq2yXCuJoO56ufRXT0$pDfV+!~ntmSBt@) zu6qAN1BAHMSJ@r}?GH1KS}B1O7EQ`j^&Bkl*#GJ;`1`eufi4=( zw{PEuzXAO7asB1(|G0wsKS|2{4;|P4KUZdO>iLjOv1JCT0qP_L=m$g50s)kzI9Vc3 z2O-j93oKh|GKWZ!6m)Khtz?g06AAL|fnfXgPY(J|yh7}MU7Y^!eVPAU*7$b-=f5o; z$iRTd{)dy~51-i|_rDb{{tv_h85I5+58MNi`RB9th0OlfV*4K$#eZ9Ur2#u5J%ceD zoe_f(ogp2IzP=ItSG=2rg_*@zpNYwc#rW%muVnXs*=9&j_ct8y*DvOeCto!C|1OUH zI}Z7GDEc2E^;e#op6=gFOaIh=Nl*80w z&sUotRPd!61nxFp4I;u8hgtG^Y^-yNbIB2z0%RzISv4=GoYVY*`H7jN&<@&RQ`a!i zFeAP;l)!AcxH28N-HU?e5UXo2znb$MU+V6AciZBITO&E8Z^L+$p=Q4P1#7$7M-=IEO}OlZvjx8bhB+pPCu=mP7%N!YGeQY;q^HpE zCv?Fzm%TCNlVDfIgl{qvh9Oc=&=QgBAjr(rND zo|}J&I(+53)D|dlwM^*^^CcKng%9&*X*-F0HyFK=nX4_DGkhI*Hq<>3P)5jF=SFdSZ8 z+?rKB`Szjr3OhJaweDad?R&OPTQ~G=MRng!i-i_mBqI`882tCJEoY(DL;xas*sB*b zn~MruGi!B zyTV=Utqzq|gWi+xN;U4UJ?vl}J4ePn%+)YdPL$8$YF)F7H8hn9?;-t#eop?`IsX%P z9sOS>ssG@d|A+s{|97VGua8Dg|8JxCe|8@Kmoaa8xeV8{bp?cgpdv+rdth?>MdZFuTzt#Yb6Sw+e+$FsAj63Ny|xIjxV)aqZZf%CZ_-p& zzEQ5>^SIIa=zX6iClD%O4hDCr1!+qK>duF;|fyWM45s~)@s_R${eD?8@DJUUuP;RcUCjnLS!|2RpFTj&{7J>86x zEs92th+i6c$!Cp>fZHI!3-|n`*Ud{2pj#Dl2E(5_4jo62nXVUudbUOokI!W0I$ZJlFhp+*=_Az9 zT;33US^3eqT?)She4w6XCrwX~u%y)<+AWv1U$ zD9Q`S@x4xA=~580erk3N(GNe1?Lin~e^8T@3p1x1(g5V61T8hp0#lpI^G9eqYVb$& zmE=YJR&ZR6ROyqeN*9MzuVCvoj{W6rzxngjI4g8~U>7~A7%4qnjm{}J@0u2Q+_CV= z$LFDILaL~TXF^{UN>;^T?%I+Iw-{u8b;-&zO}%7e=wjE%9Jt&Vxjk*Mws_lh%XI2GM+q*pn9AQHAbVt_vqX%bNi+_-qa2s-xLeZA6^I6xK^DJ6hn8N2Yk z+S`IA8Vxk-zB=Ri?h-Yf41|Om7a3?`4*6zA^?`=}Lyi|ms!VacfEhzJfvh})wBoq% z3Dc-nLBfR5tzH#V_GI!QA(rVV%kP$njaQ`mq>05+J(00a>0YGE;x0AVHKHqh+40$m4=K*7IyIk3 z9bmMQA+AerWgSr+Fr)=dZo>5B(GxOXHjNkRIbQC!k>~pC4A_Xr3Ge%RwbBAopxdY$ zLBv4!gZwBgA|VQ4&S;Xp06Se0-D3MpEm#fM@`Ti3qV#1$^g|(y35G~^gNAL**6*;k zK4GUWG{#R!Ix$Z_A$97sSmhjPOPSj3_YplbG;Y1?_m1cr^B zX?HqBr}-$Ss{M$%gjnd!33iFr2Cg>8a-?_pwTC5L*)Mk(gnv4Iew9BudvE&XMl0oA zLi1-SBjAMul-h|Wsn%z5p;9)jIN4au@Vk`rR#b=mic>|?y~+k6Ib8BnY& z3${9>xz91cIi2IU*W_OOnU3C0%Sb;PpPFzyerH4yBMwah!rfDl!+Hcsf=Yto4iOL0 z5!Bhc*E@GJHy`Gd)mp$|lWF60(>hl)SEV#LU;2aetE+Q|T%6)M>FGE3zWDxzy-rjy zN$H@*E~eZYqD@y;bTdK@$blv&*Xkl}YC=XR%Q7YInV0RhV&(Q#N+0Z{)#bZiomRR8 z4AQul(L#2csFVvFw>wO^fBj^f@iAof0pHqp5?rc?|q_lm{=UA^9Jrdjhr% z)$Cd9mX=^ZLOp5E*;23BRcuRi zOKc;Y!sxolI`#H`Nk!GPG~*T$j=t3GRuYo&_@smj>Bqu?g|c5s>K2vbdP4MrhRTh; z$d!2R9o{y}waeuTW9x`(w|m(esIS0^^NiWV5Id3}@{4KmF zn)kzTMj(yO4l$*tf#5+PKy9|**t4}xK)olKWNv^Q;pa|)E4g1AE}rB* z@pS|uj%_u;FT3)cAH)^*mn3b7j$D_%ll!CSG9qhyJ||2FS#1P}>XXqAQkqhW#*>{+ zKfapdld9RccNI^tJTx+z=hoKRBYAl2dy1|{1>9IO(UR_uEt+^WvdB6^hc`nH)qhXM z3fYTJ(GF0$S02DePv^zUtSp$qE1+pJyM-RmW){vyO|x{ z_Wr`?V}m!Zy?{36yzdr}f#`_nIzb)<7U*V)eEGV*3Z0RNJT93b8FvGCuVB<3F zIrS1Xw!Bplf!>%TUaiNku8#{Zd^jw8R6Y49$hLQzO&Z@lVT1_vq^LyT@tfisTUTy# zR#sNDHzjTq9eZmfAthi!&(T;yZ^BK26S;JXj`TBLA?-jU4|dpjRd(K?kN@;tt*A=J zmBi`0B!+Y2MwjLJ#KHnSH8SM`-}~>vO;1DLlUWUDIisl6ruG*pAkE9H`Z}Fpc(jbp zgQ(C`SBpjmMI+l=(|mP=q%=Gb*QX_GOs z69!vw00>wE^h%_1NR+O(o78hBr*`@Fg{f5~UbEZA&H6YH_r92yc!}wUypdl%Ud2my zI-BGiRU70FiFcQ;ipocyTO#BnExn(vIu0ipy$jk`KY!7qHz>Fj0B8ssnfU}RHw+KZH zdutM+cFou$qtjc*HRz-f1QkNgh%*SNQ)MPd6bvw7Hr^h4k|t@o2Cxrn5QPOEgBsGa zgJtuxU?trUb3T8Q5nyDGX+zuGIxp}$!%G~Fh^HZ%uZWZ8|83_TXF1po_bQv0m?dxl zGZQk5enTX7hB6~InWK5Wr*Q*^RBO%@V5t)PhCB32X6J3(uvX{^y$qoT1RuI(sN+EB zL9@(Y}ib&kby(;m@Y zyrTk%Q(jeAJQ{0ma>B=?4#QIUubS?snWU{f^bJ;%mtd$5Sn28_R}C?}h{|5fi&M%B zzoz6=>a}%10L2KTE1#z(4qhyV<{aDLra~9Xk3{96q&-5b6DUt+bup2br8lwcS~E!4 zEgMhqh{r0o4bcYCH$vR$gJ`Uo%hR)H+rewS>`ip$7tFXhTveIOOvmSw+nY9S#B;{+ zOM}^?vltjvN=P9Bd}q7o^^1{*R9=y&a&bXO>Rp*SF%DUjk(jvSHGY^nO?#zQK8iwq zL;RS5*+^o1s;C*~v(*rb#{7Yo5ioghH$AN@JO^dd*p%;BLn(ZoQL~-!_eU z_TfA<rFE5v~rud0K^33rr#VM#QWQ(?T3U^(5mT9R<_2ZaV;EM+M5>Zu$Gl)@{AD zl)ia_O>B2NC~oh@Fgy*dU&(`bl5NQX@(la?IP~HQUUm9DVqH}$+dja(@preey{%KQ zIlLHq7eUBuLKS;wcguo5c>%sf`1+t+aROX|v7!4Tp5u56@U?+%O!zkeVQEy}8d$p$ zf~)|w(`+#Vhyr85UzPd(0BWb&s__*BggKc~$K0v}?4{j)?D9>9LAp(b>5*if@!JG> z^4rnH#R8M)g6{SP=mPKI0icC2g}?ImJ(S#DbY5yB?S4$^%`yhvMD#TVAd!rw|gcm9w*h&jRZigm&(vhh|yQ^J3-dynyr3>~0O#|9VhS{u2WS@+w&0 z6igxpShv!bIR<9m0*H$P35TB^w*~$LxADrIl*`hOgJ>>MfZDu_QG21n7uY9!R>;!1^__7k?^*C z_b}c8h*h}Q1Jy3wNAfH@980Lc`IdAFd{w@uB5co2>va0fgQ9GDuF*lTi+DqTi|%-< zAZmS7T$0^%kcP&pu0_xcRCJD^sj&09q39qcJvkPDo^s@x@fTZ*KzQo_W~BgG&V&UZ zy1L!Hpd$R;faHL0fN}ZVA@(m=Thu`X)>k=TSqfqeewfThD6vz}*KTkjQEUL;CGb(0 zkty*&NC*1;Bz+b68oq(T*n&;Tt8l|MP=rzdw|z@z4qgRPwQFDop#oHb9s`tO8zbVg z^VftxaF#Fypy8tci(J7l5%e|Z1Dc|v*6K)tdFhHB{$%;?!%F-CToT4j`6m$UU-$<9 z+n79q5t|<4SHPc@j@{6hm7U#~@e9El85!v5GaG+d#Et0<^qAS$^$q{4261}&zX?o# z$K)9q{$FMC^#5)J|Htq@{a-f6{6m%bCno<@W$>lf{3DZR{?A$Pd>rQ=@qgbx;{OwH zqIHOe?I^8C96*5B5+Sh`GzlKDlDR%zaq+g?D{^Gm>X579c_F;`fQI5>un|)@b2$`f z321_Fv(M-_TP0YSFnlam9iaB6p4)1qCVr8lw|{Fs>?!M1Dko_>;*`it0|Ns z8l`L=`Tb3v>>p8*FRtOz`mfLYH%v@4G*1;7F0ssDZPyqj5t00=8Lzal3%3-hR(+W7 zcTNE9MX6w)bdxy+2r>qwz4^&e#PNJA4>*I`%CkfmLa0>8{vU}L8hkVU>FV&~w^Ccu zS@ojdeoKSp;z2Sm9w|sYyUDqn$S;CF3uGe{>!cSej%dlZeL;D+v*&PX+5vD&oeAhVBrOb7H!>NXZqSGTB!fV^?XF3{;)sOaF}k*T zb=bEV-p2`%txG-m?;>;y$G)d^z(KYHBOEI8IhEl}8a(q{?q40NXBPb}F2;HafS)-# z7=2$%zC-ic58#^*Bu0SK7n7$E{24s{`o-jh;VMq~@^kHI^L?;QfU?Giv=!F}-^Cic zq9@l0=bp6_6X){m?(=);TESD1^1ho%4NV>U{3;_)Dwp3h(7m}9suX~ub7M(Gq+3Sm z7bU+xMfmqEqV`oiT#=NMy1urED!VAVkWnt? z#3woyO(Ow^L*N7g6C%^+12Fm?2n8@LBp{?hgyt3q$GH_ZY~jz97Q)2>N)oVp)W0(r3{uQ=WfbrqkX zR#8tKxI=rB8S)C|F6&-taMD5>-KoPhm$Bus6a1}CJC^KT|Khr82FYX@M7pOp+=Ud5|r^-!P4#g1(a+lU;?J->%Mg6)18u&jUksYHr#3(E9Mf zF^3U;V#M-68Bb4Woi)3Higzub{LV2*Pw*cZ3JpRF)VDhJ^s3=8wfzY%U7?*PFMahp zZN4T+!$q}nw)^to6kwe;OlPxw#{Cw8b92c%>t2{Kt|c=&{I;JWFHTjHUftX-4n?Eh zK^eB3(VUBIozTM++iFp2nO56kw#pFAZ`)3}KmuY^PjU%ErPn->+7gztS6+|0;s-nC zPSxPCBZhR`T2;!}RCfhHN4%iWq8Q#tMNs(t>!X!wlh0>s`P@jg=6kS@wA0hm4d-}?r7@QL8-&Bo&Mz3IjS|CAKv+VFTJN+|^; z;S?cYWo06*#$hSc)ByrW4ltIpN<{rp<&39C6 z2I(2b$W|)mJ#!<}N6v#=1W>k^&Nb|QJE#ZrTh}|T4EWZj~UBP6kw)8Dqkibr=pJQyAhBqWVWnSI4GZQ zZMsCy)f`7?6~0>rCE)L{t=kG zmEs!6tfAwO0k;u2yJMra&*VRWE;}9qqJ%+a`EfQAG)cpJ3rp*Hdk$RNObA#%W}gp0 zfL%W&3PWg|Odui@?@LJwxy%07)J4W`7v6wmg zOrFu}6hC4_IAo28bs|&^3NNoh;@**^DSYoL%vxGFD*U6;!z~6y%MzSGwa^u59+Ng6 z{2C?1(vCPvYMMi4tH)8^#n>d>cOLlut&MWUzoOfgHLhf%lrxNLVc-(X10y1**>?6k?t!=VW;iLoUCzAJ%5>?9P^XeLv z>t+OPcw*rN{?KPzzJKTk?gCsypz<}Ng>XlZXD;b(qfPU-M{TTil}rxre3y5v)Vph$!&Plo$Cyb%g|pVz0yCf ztd{}oo*>D|fq@52yYeRw_BCKZ0IQ9SkfU(ZaU)ND=^a13V7gjg1HfO<$2ko{7XbFAzNi2{IImCHUnN!XvdEwFd&{GeI znwkE_?i7`QF;vaW!a|cX36(KDXJ933O#W zwM7KoXfoEuFOUF=uy)Pcf+>gSoSBMWTm}BQKc&;+w94YyXw}AF`Sucp`Nr|9&eJ`mf4f&ziR_?5pX+Qiw(OIX9N3n}!QT?%u!s;NxHEc(w zC2Vq=&f+~Nd5nBB3b_cVP|Efs3Pn^YXq6Yh=n0hZ(*^~79|8;|!=1j3`w2+?bP6^~ za^lgSMQFufnKJ1y(huL17}r39)@|+*oHb>Jo^5DyZB7i4t+~ZUdCKjey>*8B+2AA4 z$_*Fl_Pr5a9xcQMHY=JBi%5#&SV&y}b%yj8A8UWpX7=2&*@m?E_e{Qs z+Kv|$52i+w&%*aZ!~tfWJdGojR&0m9N>7B_)jKQ8!nU6jf)AQ|OklL}Mus@{8wHhM*k;44 z(p7QwOZCwW0{LP`XmMeh0yK1fn)$$c-zI)WHQigP3AAI7;=qxHj_(*F|+YA>RstKBGrv%HqPFb{Gfc!;sOR1NP!zh`YrdN z$hL@%)fM#Bj+j{tu`QspmwVT|AgJX;P*8iT^-Lk6hD?svM%1478$ffQVafW1#43K_ zCx|`DMM%pPz7`2cKlcuILFX!e;w2`WnHz*p%jKFTQU_L@y9 z#&#NLAb5#9I(xX0UqP;n;4y=0bX;0x*j^-;h}6(ETYzSiIwAvT-7wW#83AoVEPvRF{uyHiQ9Rqie10rSr@-324Bh)d{526IEhD27;#HX6{&d z(or08?wrG%)}sz;b-j0f@DFuF6P$_`a2~Wxf46XBktOQysrH%T*^s~6lpFBFQ77?U zS*Fn@aKQK7a8FeNU*2o3LBJmnK9Hak$9IV9)7N1L8HfW*;yA8zBXKI^a(J}Gzx@nx zD1datJ5=FMd-wHKi&l7p8R*rgruz&zit7acE}%^fa}7%dty@k|cZ8&WLP-z8$iD>% zaYlVZ3&a($;3_6Y7s)ay3NbxNe{#` z88nK;1KCp;fw)`-n`Va@jH&BZyo{qFjN3e&ZFg%je!o)Ol4tOCn9o;&}&3%Z9B zONM54c?8In5=6$w#OUWKNIFjnVd;CIT-A0tHvuG+ULBF1=G@tCEAKQ z$fU{iY?*B-ug4ge#cm0$wmu4rz~HfICQ2R(2eOQrH`QpHYn8CNAIjZ&ohrdYXg4Oq5ZE+n#5p+s169z-t{ z=Cgmhw2;FiyiWl;$+l!0?m*X(M@?%yYfnxKIzlqHtb4r7za~_WI3x&0RX5-nVr=(H zh*PPdZ}*(83Hvwu*!C4#i0J!O43_b6i{*llYhd4)xhq;20}LZuf_=)wHa-loU`{hO zPE8LJjN;ceT5?Qkdcx;)YJNKX{k1xQIkA02nr;d-NX>c#^Gp3WbUnbkLqhe}SU1W~ zpfI}^vrB9+k7l;CA+<{kNqs5P7?_CA`H1J14Iqz8+tx7o1au65ZdexxGfP_Mu^vDo zk-!0cwlIAcj&*u8&5Wes>&Jl^xz0%jjv_sBoKV}b<9b(ksF-Uo0U+j<{72YIYL{eSWm6G?zJdx!Px7)|h@OR8R-mwDTjW7PoJ2Xmh;02$f|Ht|f&|fm zF$$r=k^}akJ^b``TL)V^aN|8;*cn)kbIOyzl^A&vJv}|v5qi!rEN4~`0Eq#4eu)9V zZE9@8G_ex={UY$(-O$6p(PWkM_|PRFf#0o)3P)9DJ3mnoo;OjpY>N7Mzl&RW*Zm23 zVf+*F!oc|Ddj8ApKLw5}9jcNJYt8VTuRpF(WD-LNdLFeE9+EoBg`$g8;#ZUg*yV_f zL5yH}uJ98d7K<_0w_}+`=ZX%h zUuWk>b2p1)7te4fh|ILwe_MUOuYvgfX!Z+cc8R(y9K_|4XML&!cNIm%ue{BVD4^)j z?!lni<$EVjmB2Pi=G*BB?`l`iM{T@^8v(-F#^Vha(7GonTPcFEHcHPOywbLGU%xUp z4}W&>#^?R9v6s$W9f2J$lC-kpTjMOY*L^cWD&?iP`=*(v*BSBTL)r3T9ID)_aiyD` zYD7VU#g58NJ+4T3x0S9STL_}7H(Z7V4Fc`x_n9|uVg&<;pKX2oGg~M@mlsu+NB1&G z2E`ysCnFNApvu3qHX6&Nn(O+X1@nLBi5Pi4ezgOY>BS=4U8|gu-KluT(aw4@O zsD6XS$5i;xyvDn^iIvuNbT8NqG0jn!k$dWNjp!Thzy*z)AHX{$#h^_3IY3Zv0P*{j z5G_@x68_k^A|jdyIYT#rNkveW5^27VLIgLbHdr5a0c;Id?wUNVnn&b=DiUxT*zBYt z04W+?0nP`-&*wqb^+7f~*M#T8L}#rWBl=tJ%biq)dOkR>U(-_9?cD8qY-D2*U5nLT zYX!0^l}nc`S>l#V^tx7Y43Sk7FP=|$+M#8C8OS=fqcCB}2lcqJLL-w#`2plo{Jz!n zqs6Yg5?zya6eBGZ0_lYQWDJAC6p{bMQgxlmR+7FP(p4`A7n%>&9Xtu%(r|t6xgjC$ zau^)KAoiD2?1BSDM=H)vtR%Bw({P$nqG4)pm*9$TfCw0~DEIKtQt&szlY1c0z4pyx zT1FEKU(y?Z&uYKN;Ck$u{*Ciqq4!q5_!h7pha0B^<0E$uEX;JYeE9LASp(86!1g@snZs_Q1voU`NW}(BBvXV%S;#B75}ziUfs!B))=+)pZX%iFrn3 z*$JtEPx|96D~v(&O;sE}-WT$}h-p6ocd{Hu1!eoysTZ z%m_dh>gyub2BNXXPj`%H_&qrjHSinxS^G{xA=ERHe;RyXheCtZIQ)C-;3k%m58V?I zKbSSgv#%R8|MxuuIXIfu=S(cwDa;ncS3gt|#%jY=m%|X6nt51BpOD{3I+0SOZ67z8BK$9$c z;z=K_MA~H-uTw;oc2Y~dyy70&-$tBs+A&^_Vt#$vdgC6E1il_q&Sl3*oL=T#gk{pW z5{CEKZ6}jZq>ThxZ=WG^MjtfHBfvxu65ml-pj1+!qpRy2LaNb7h1V}GkOYV)M0lW@ zX>pHPnIHoOGpKwzN)z}k;$|c$1;J+d%lHUe76)bi3PYd*SgRj?m*XDv1qK5O6G%qO z)Sd^n(sh4c@wv!Gkof}A&%ee-+@5mWHWDiVB{8zl+Lu%Pnn3!QOeBL8qK!4~1wNqC zUd*p{TAQ~W5H<^gISEUTC;z!gEnf@i71hfO0vRuDa7pBg!Pgf|`}G;&udaM(fOkq~87IkdR^ zkE?A_2Z6TPX(M`ajWC!y}Zf-sJilKU< z)@9#>PaSjgl3Nm<%eMcp>qmzDsiYo4<%$ckOw}PfZy5ca2PK$_2S z&-4Crk9*D);Qh|!&L{RMmf#el+FkpC*|+LIE>R(oR0ys#*iQCM6;!;{cP9v)C@~l6L@tBY>{t_LOT> z7+3TqZd;2pxX{-H)J(L!ShBUsrizjd=0Kt}b>CuQogHUTIv)qCOMOmf=B5@`+H&*2 zwZ;1d6ihy{AXHkVULZIMPQlo7ei!#OTyqbyS@<46T1pHf66~(s2LQY1%LZCsY|pen zld>cOUenMFZ$0O;A?`egY?Lvl@1W1Almp-ptL}k=Zw*2=>~yI9L_u<@c~AEhR@>Ci zJAM|=gVuuZ9I|Kr*-cUHwXA^fXPjCjP@o>SUAX*uTT{W0L~>nM_NJz}CwynxTFP-8 z{_0IEioTYQSy?3yW5`iVkFYpfo63*_^k8e;91jrTW9HCi03=afQ>Zp%2B>qy0C#sx zrn#O))@`=Mh(s-@B=jD9DJ;pWpS*hW;cM`1g9@UjuHk`sRv`RuHr@U)ij$ zfToCmD44{s#k>qQnGY11)o7qt|{BY!)xj8mEkkQ&(+?aMjyv3 zi6Qh)6U%Q1?6>`nl4G`81A%nr2AK$u1}dtJCY6(`qyGJciH=0X19sOp49^thNI4di zKbxTYW-2)_j-E*DP(zi4Oi8~sXBcrx)&NVB+td}SACe;$R1$@%G|Zjtig3#uU)A1N znxc3j1x;zHl2lf8MekVNO{MP6*Gn!mTQLa-WnA=Ol-AU`&}4IvT~fyg)s1qUR#ckD z+#G~B&w!G9{M26I{w57Al$rL%`zJSbR~>A|&)lsTes4=Xe+a_uo>^;AWp;GM(1GHP z>5~2m+#Er5UYP-bHx$LB{s!Qae883b9RrKO-SVwid3;cX|~t*X`|W5 z)9hI$6&Ck0<*6(whqM-_!gHduP)YvT;{|s)aTH$FRTkR3b|_cz9kRm>;f} zl;XL(b8l=JPT*MsWeXBRbQWo=Ie)$4Q^DYntdsC$>47mf%oM9-DiTV@_;7P?c-+qN ze~3O9&y0vL7g3e9E_aPlEVU(O8PTGow_i>?Hg$x&%SSaKRKe63`^1Wy4~rUuo{n&?3YBU`XiSX z2sF9NyRTDXs~@4;`$PK_GWVyv_`uTZK;hUPPAgdMlyM{3X#ou<3JVtjSdcM}!wT+&tXz`R(#M<_3B7}e031E9z> z7HHFEMVFneu7Cec_27uy{ruvLC<*7Y&czE?TCsv&Q0Gor;QrWodl|oYil5jXq_nUm zTi2hgPAxNVH(Bi^%ZpQb^!7>1SC@jNRXx2}GqUolcBD14yGZ$A-N>@;10wzIyFt9h zR^HCa`+Dt2WxR0Z|Hs%nHi-gk+m>b9wr$(yF59+k+qR8ewr$(Cjo$Z0^oM@$MD)o& zk#nt_IYta}9b8_Hvs?@BpLhJs`7wrB@vanh$F$ox?HS7hnHk!YNq2`wisRn2;VamY zG|YhDv?@U_7n-`pe!9^{cBk`!CyvHDMKO8IxZx${qO?LY%_sr8H&fu#0(`HPw1Gvf zUJY!6VAfsefO_str#ZE?KxC|!h2Qodkk7PRf)O5uq0stv8SaSMCn0w=@2DL~yQELt zn_fRR_pWQo6kY#aJ7M(R)HGWFO{H3RO{HrP^BSfPxuDb~wc8_nuGvETfYbb8n>O^hOe~5Y zmPmaNKaXbv%h4wepWK^6!J!PfN8Ld_2vX!z`@%Fb#V71u1@}_??)x_f#Qk$g#*gG1 zUJs;G`B$PS3vwTykL(}xaCb$Pv?SXF>M#ql+hNJiY8vpo$Wpn{v_sb%Sa1upu$A+) z#t&ycie8zl{7w0F(OhqAI6QfHSgoZnaxit=)d6Q&Vbv(j1AYS{AenM6%@5 zF1NX&khe)j4TING0;-&pL?fd#}>;vTU~7t)G#i<7LJnSwEpY3nmQT zkA^&|m*yoB;+Kz`3m9XIs@gweYr<>IqRPZjWV2}s5y?b(bBE&<3Rm@_in>5p*ADYZ zw=?Gj0`@112XUtD!?bw_jlCykgl<;%XY(hx2PLcrAByz`kP;I+IqIWRBAwy1#h@V+ zrbUNdOFD8`sxEoh>EEa2enO_lFDoaPV~gizniAXXNhQOgD2=Epb>{$UPe5wzUhC#_ z-5bO@LWTei7qxJ*XnE`UtS}q?Ul@11Q`8v?=KNSjo=_?!p-Wfh?WN6AlVz~rU0g?y zu62*AkhLjbHD*P;)aRhFnT>q=qFWyS{c~SR-ydiu1TKdEup|3l8~XnNxnN>uX8&)4 zTeG@W+-3)&?`++imI*=WaFz(D`TSxr=k@^zY`hO;CLaabs;XM5w&aZI=Oygl7n|HgBx zuum2bDTuQ6lzdOmeR5*teM#AbVLg3UN(qf(?>=oUthAzQgaKA9=I)2Qj*o`Bw1eqV zIj!p?+KMJ4Y^DykmyBN@#s;x@g&tC!jK&1HadnDPe{H{JNn}{}aBQ%&s@0OsUm&fs zZz_gW)a}O!3a;wI&VZKNetSy>NA|bUq-;;EP1xmAkxJUL{NCx-iHtu1cHh9>_$}Ly z4sA6Sx#To}uvWlIGn|xg9^;NEAPko#1t4QUp~C_}9f5!j|0Hj*fjO3E6^Gsk+$L&1 zIuSH2IlK1)*UWM)WxEC3`|hi%)3F`G(zFqX8f{FhIgqIn$rPdSfn6JkLojH%3b#&$ zNuZq}e?uP$%1b%^{biMY=_mXNueTWo?30g%#E$F{|2E`l>yd^gLq=@@()nun@Bm|s zy8IRV<>rP#DD<7Xfwmj(AKCVAg27#2vgRpN#Ho;v1S3BmNCBqx$1+f}hiL1j#=0YH zB1>NRU59Tey9rsF_={7`AJfD{gM5Als#%8IP^^If{WN1302l$vMUu+$JOaWbbKU~v!Lv9}aV{?o6=QSyO&^y>0o&ng z)_T3KkKOBhf(;g{)m8GE1#O8X&F*aGX<7~Zji5xFQ#^$s`Q$Y@=scCW2Z78Lw<5%x z^hxs2;u2n5{N@;-_T%c@1_oEmDDEUD+f}nUvXHDCHHWoEtiAZMJXgrOcO<-uXTDn- zSPnT^RzmYnjMpY0J%Wr|@yDOkGo{a<4K$jZhh{6p&p8dKwTvFd_!Dg9!d0yx%7)=o zcO1&4#(6;L*klOQJF>r0MDE|A>{ z_zP;7=@@Z@cbzN5ZwmI==y;2k5I8u+XEQ0KUwd;7Cj!_Tj2X$ZhUI=&O)NiyHWH{v z_(pJI#RKmo8ch_dZGb}M9U^?I`(4GJ)u=srH%7rpLxy;XJ{;`JDyPO~ev=(V5Z7qX z{%SYhm7TaM-y_`|J}ck5%wy?tL~qW{vg6q_(cw=Qie|6;TNu#NJm`QA4o8x0_!H!| zoam-#N7&59bO7ByfSQmKlL`%d!wszflRF@A0s^00ASe>gXvIr_=~rU8$n;E|3OGOi+qTQ4NL={>J%X*QFwN?HSsvflLELONv}xtZ z!4f)9r*RV2!kDP6aOh<7>A z5oEkXHYcz!pDUVzo+Nbm)ujRhOENL&m1Q+{IAGM>wbAu(JdTr ztWsTL!c1`@iHtcPbN7qDCISTvCE0#MTha318}t64aimW~+7h$l%?5XW+M$5uK&pm% zn86Av?t0#m+ow}(gqL_ECnw)%L2G`x|L z(@6-#PbmwC#noOBBY95Tl0oO;u}}=qEa^U16yL@%53A8l#TZw-Xi~`uN9nWf(K}VQ|m}2lWrK4iOhejC)h6+)czP(lK)6yY~Ajs-K zGlY5K4SYV`-V)XA1x25J5wV2GEWirTo6e(WFZ)YMH!;GBc9Rttcn?Net{I62fT~HyyP|CMg=P!jaAK}Ny-Zar}c<{yj!h4YF4eXeW_Ab*3eV-&P z0J~sDBr%hT1iUh7HsNseC2UTv#6GX`P5g|oWfY}3W^`G(i)%wy0N`kVwwm{{qIOT- z_}hq)owvV4^8JA>&r7%S@n`jB)nQ~HT|a)iS%!moubO!|J9hWoB~OZ+)gQf&1t0?p zSsx6F47^Dhx3c37_)8Jcgu4l1_@*qiblVNEUJc01sS`9RW}27TvMsdG@vL2RhNE(%?TN zuK(2^{-249h4sIFm5kBYjNKeV^m$c-_#^>j=Dqp{BympO-7TxE%0#k=>5{*I{#13jc&bos^3)cs>g|bmdzF8+yYW?VO^KjUy}$5nO(as9 zL#;WIvZPJq&>3b!l-gYO`TH^JX@98R95;BfGBo}nT`YSYnl)V$v-Dw7wBX`aTr13X zCw{o2Xu!t?-%I=Z;?tuDIdxEFvTS#>foe1jYt))vd$wV46*s*0ob|i&>w_9WlhaZw zf^)87U9CWQ{UvQo{Q9kMs&Y9oU8B0*F(baJ++ca`wxtG~BBc&Lql|;SdeASHE&!#z zA$Ix7{b9=GfZ^Y3!>+W?(RN(?zCY*Y5it0&h=M88znLzB0*6AM1K6wC!2E!RKBwQA z;QMLmUZ~VsvHV-X0AayA<|JIYu6Z9<|DiIRO{t}SDzc5yePR za9O)9&7HiASwGc;F?l60T4f{viDML za*w;DHV_}}rD9c#;h7!R80@MMVdhDUdIj^xis?aCX?Y(}*w)9cSLgZ}0G1^QT-dv*0?1{h8U}U&*t$`^rzXqBuwX+DBE^SD@y>6nh>2#1DMnN}k7~ z-;mEE!Q}^>HytCpFWVSH_*KS(g#tw=QHXVUnRDA*U6 zhuP_6>YTbj%J+i>DhXciQw5^Uwj%GEn0g?Ed*v`fb%WZ@d7|AdbIht-8TqXaC(+ZS zx7LE&UX@2|BO@m$Z$|vX(ZDdE-5jlin40?(sLoktqYXJfuRQ}xe*>0oE5qw*ud>Kx zLqa2D;oe3qoizH9|4knX2eEu~u;HhpWAH3b>kBgnVExM+)b&@I?yd4np_sIyCp;ndD zPr;0*j4uRJpDovSzUbLRUV(ZjAZCNd4~ zc^qV=+xl?CwkMV%!+C3TS@EUwy#|Q)GA&O7=Me;=KTXyTtDOWYMMAJ$7rmrgC+rU9r@N-PA8d@L0#EHL=fAGR%QOtQyqT00>(=>)&Ct(-j zT>{jk=y}Trjd)!m8he*t(>i=yJj z?i1w^810|Tf6z3$yjOk+`Wkoeilj(IAcaeQ+W4Wh>}JC(Xb95ky7-MHV{=(&g9d>T(8 z=%L4Z!{{*j(9QyF=V^rgfmdbVxpP^1%G>I0p2glv|I27X!@q_$lq|_{Nu|wim}vx+ z>irfBad}Lta`sL8SQ)Ih*u@|?F3QV+v5@dHr$)YOe3};TXT3zot{dyGvwJrH{C)ED zH>@+uEA*c;SSwd-V7NwI!{Z;lML!H9Us)*tj}CD2$oW^dTs>TXx6E>W*(C&?_p0j% z2HN1HUM!(Cij~WD%;HR;pg(-N{BUzbs8U<)jSUjN7cEl}NQng2I97iA4dS{c{f%NE zIvJFPSDw)waXP*7FAUu_V0=oPZNV!nhuPt73X%+IRY5yp%n>U|n0Qi=6H*-v=f=og zq64R?iK!^f^LdK1XCREG4U`me;6d|}|L(arRDYJ+zn4u=E(G*i)g^S*VtZ~+pL<(k zhb6Hp7qtfc;Ockco>GYc;6MEBjX+uZQWgY2822pNWajNl??`8IVQHS;^8^%s2=*Ba zzkKIQ&wc|wV#C=-QNe71uq&MGTCXJnDiWCq1sSkS*Pf4%emw4+TmYAv%y*Z|&fG!0 zl+1*}s__n%TsfXH_WNhA>@ltRAA)$_ku~|eiwEp!piccq5b78Snv8~X;ZaQi=vnNQ zentt6p-{=ec|ZG7PRE5DH(u6rZ9p=SjEf;X7=tm?OZhs^o2_b-PF+!%-#ZiIL53!( z``(ELtYHI;On1MIf2Mx{@uM1~{zJrL{}1>*CMIUK|8}Xi{XfMsHl%;WvnhkBsfq;! z5QrW}WxN?rVsSbPHqNzL6j33p@zUE1CEVp8+vAaWOHZs9$Rl&JEz`z zHvZoGv)|9}tVcJVH4+_>jyt114ySpa-=o{jQ>{~q zF;iULK2?=COS$_vYaDoNzJEj;z8inj*s|!S(E=uonm*z!oq8|uyH(6zgZrClrY29b z=&mJRT(BV+TFS&#&LMNU?EaXQ7IIXHm%ygeIN2D2__~09uklo>VkMjwtJI=9JYk|? ztMTh@U)8+l_BP@F_{bULjrc3Vv~WXkKs7dbO3z5!SKo#@;Uo(v1dc;8nK=-Q#FfBjxBCXu{ZYEWcljhD`)ibt_4Z?$7v!_b zMEWTe30mI4T6NhocuKvXx_{Wb#0{%}Is@PP+XT&P`jprE*ez+;Z_8tUNHVld*8;=y z-Vp+@LN#hWs(JXY;u*x?F4ajl{gfPr#@ZvXOlkgQj0_Sn2^0(1JICfB2TYac5dNXR z3+}B-`?FhGGqErrcZtPaUK81qQe0SAl8mfxoit7?x{9qB7{`u|Pv`I?*ka>JAGT~| z4=Hlg7<{M1&RM(+!%$iL#%`m7mQX^5KR(j9Dku(ah+H_yONKerl?^C#HyWUHk1&~mhZqX zHL((0+2hzj6%uM$3AW)M5sUz$MVaAkMs#yx1Rxa0V16Ni!x7Z%Xe`c?_bMALW-8A? zrhL}Lfu*c=SB-^(ty$0pY;$sJ`z9El>r>c92?~AD26#)PYIZtKoh{@m#ygzs%n|2_UAzKx>6yIdwnMF`*phWu?g z3KO?J_mk_c4Yo$BWSpo?5=$;fIl&lETZ!Sbu%IaxD7-sgW(-!+m^r8*3}?iXTT^-h zy^qoaV1@m-dN)4PYQ)oYU9vhsJ(Wf0_kVj3Bq^0Q$FYQxWxOw~*v@J~Luc)vKp^Pz zypthq)A-^(zS!r+0*cr>q{C*Os^K9V_eO&$Ss8l-2_B@ydNW88;LAv5bof47y+#-SKb)!l+s}y05av5*c%)B6@OaR8 zKQcrG{i?9jtJZqLP^edCr6joVcsPRbWwY5=6J{}(U^kZpY+c!;C(%f-FmI`-F?D{( zZS^51D`o(>Pjp?Vv7+_DzjjwdZMhgz=wnp;E0rIYIfZj3zF!~PG}?d*bVkWH4;9o) z*AuFI@we*CB0>JF-36C`mF5E-NJ%qS%TkUSE7Y1CZPV}N!+W}}8Bx~Y6X)s`8yz_1 ziS$rfA#M$)jp4JBpCwm2EvfkeWcs$4=}j6%wkb9!p+HrN#e_rIw{tTToYM=i+B2)| zt?cn)ZQ9QUcWYsxPJ&ph9zTD>&;rU`Bd3>?_ed$`v}D%V>;cZQY1hfHXsfC{_!f9H z#uAZ=hEYSX&i5&^p#V=YW@ElsX-SiJ?K;Z@FKE$vz>0W)-W)n0X>8O1EzUx(o(Xaq znnS40@VX?rG?&5GOZrw9SY=_PM)jBafDVpLMuE3oLz3i)fi`}7`hh~io>W*}RA#8w zL68hN?BcPdpc3!fo-cnSf;-P=6hww{EenfPNMGLG;%%m1Q4KL&|1m(}?c4VEY7vHN zX_&qNGYn;>_wjhxpvM zk@7en(X37|j_jj0jjZBqSE_X^dhChq(p!X`z>wUo>{_`>m<}vaLK+IvT}gK9{lM)( zG{NA`vUt9Baoqjme^%k9W=HaJV>pgO0$zc(Y37R)?HxcV4ok1+LGm6Iki7?CnwMBi zG|MyM0e$4`xU8L@xRb2K%BemRb(>Qc%_&oTHfjeUgSVC4d`SEwz?`Cf1*JCS+n91| zVK|WybiCt--9!V& z+(h9Fzi3ha^)AZsjX9m9zm;(da7WK1rwEt>#;uOk`keRb0Ga@EMtl;~R4LmKL}OrY zjA7c=5(Ic2@cxDvxMvPXO$2ASy7t;aAaQ042$y0Sb2clv=wZ!4;YnMf2jXWK88mh( zi-iJ4MvOP=G<>do4u(w|h}*2`A}*GAfw6 zrgK#^Q&*X3cf;=e7{{L7v#ZzZ@v56CJJP5=l6Bb`qpv+c--C!dv_wtY2F@m>n7ZxYf!5}K8dkYtr7*wGamSb!xV-L&Y1c69i(*4otqtx}pvUCPoh zl`6$p>)lr3-F8}C-rp38svM~Z`-R~$R(2qPhvCq`{A+qc!8m)UtvmQAjJ7RWpsch$ z3yb!~c3-c*2w5TP6kg<{a!xLwXP!VVGC^0qkekl;Y;Vq+GT3E(V2a-uIS2s%_TQZzDx zkxmwGVGyfV8#Nu4gMj}bCw-D|&<7v5MjVrhBX1EoI9%aYjU#iWY8#ZL=w!yRg%&)0 zVGsmocb2+IV2;W4+z28()aKkN zZWShkk{k=gB}{f%pD&oh8q$`SWRZB*m9hPyHp zf%&>~jjl&<`MbV8L&t(S!x{9bhM#}{Bi)=qs~5LUVp752M`Zq3$WM%!Z&11<)F>TZ zMfVmJ>ucU!6+oRZD!dO4qV}nH|JXq62HXfM$f-EFeB8^ocb0Swe+C>=m!r#CY3zVg zPxS-V@cEIwR$ILU2*l(MkYL@kC!=6WAgT?x5*B$R?6r$GZdI3^yJeY^_qPZ}Us;u|9KXy(4?9fQ_J@Td6Hma-TcELg=ZRGl$o=Og1x-TmH^+4R%W!k+%lnyYkV-b)U)8*2cKGK6(Cyo&RS>MH3S&;3xuuS>Gb!!4LQH+R~P>8 z<~d*sAc?A%+Oo78lRpv67U(&Q=gcvw1S1ioP3lK#(@|kt`>owonm2r4_N?NeGO_?( z9IN*}PEstV6gg3cGd>=zj5yn2bA1eX*r`R*O5kB% zz-UZAx@aho-SMrQQ?x%RluC+bIa1!c^77eC#XJO0EgY^(P2A0-dn*$a&`oZ_jks<7~aLhrY>%KM-wC=KN-!OjCkIgR{ zXvL2BmPL?5G7wcxK`esvD`3z5Rz~KF88QU4yZy8=&8pewJGFkC4y%9!r?n=PTI&1& zeV#_L@$9iu;~?Zu(tKg>k*SM$HGK{;n_ihnIz_8{-=_ZUQAeyoqy zkcq{6U{XAY`&d^1u&c!Pt}8U_M092-V-+zv!V?*U4FZ8v4NyvqfjF(CD{T@?NA_am z?n?`EUq@yHGp3GlF`ldo3XAWL0xb}vZjlgCTyEM`Zw_;+_YR%rj3h%b8rmDkB}&-5 zr(($0ebR0(DzX>HdM3Sk%Eml&%Ww6zDFz>Fn_5r|S5JIgbe9RBRBh8JbqEeM;{?@6 zgft*XBrv3yrBQmLNJ*ox5kSkD=qO2YGm*DbO8?Z`hbWJIPi1o)`slHuJLb}hbx07S zFkvxFAVgSS?WpFQa2rMdz{ZTsgOvgd#>tSPpVZjR9DcVE&2mkZL$I z{d1H^onc81i`#W4M7p&EfS{yHpJ6y2sAZ9eE?j1qE&vnbO}W37uLxb|;!*-=-l~Q! zyA#A?aiyf`k?*W3kgF6KgW5&evDpF+fc>By65hB}7q!0nc@gF&Zo zu>nk+!XOGglU`FqWojYg7d)$^f)eDqR(SB}1v_|{SNIcDyvH}gU}%j6jYOW=_x$(L zQP}un*%{EXI6&lJ2?UU5PCNaT>DGz7hy@rv#8Sv1%QIDFG^(d%p!ryNUUvit7G4y7 z*=Hq)Mfe`DQcdYXTPn#|8D2n1%pWpP5vILDzSA2zptRWIqLG9~L9*X>u@wvLO@kVisrj>Vv;bIex|jBk3bIXGIord&0`p&!S^DW<2&+ zx1mCZyDQ#$XV>cO5p(2Ks@OTfEd3+>ce59a$J0tNrB&mv~bFdI1 zQ?4*moQ!}T&oi3=SL2K0Ql;()ESE3-Js4&@EERW;cJvr|ZU%Ky%1Df?*NhG!jQbXm zs#*crtG48K&{o$!TAxiDcX71lWa3_~t|U{BTUh2QFFh>2;JiD@_B-LL%_u#-k9;_| z{B~Py*0nwx{&+}up1Pg$c>YyUTB`OHc6rlC6eZ1V`^VIeAJkimRbsDHXrg|A$hc`Q zpmfB2LiOg)LJ+hz7aG#Fj~#(j$A)vz4Yw{X%`7meS~Cx(GGI6NlYbtIGCJ%TipB;b zJnqoSl%P9n_`lx%bcA4gX2&?@k3I03dB=*#GfRuB9!!cK>c+f}J3U?ZA$B(S5qgVy zoY>mj7Lxn5{>Je$rMWdDvI~E%T=;8a2SRN^$Y)PX;jyT;IT3P-2b+`AR@zkOxhDz} zX>Q{hbmgPj?BL_)SuJ(0CbcuaF4lkONal|yX7LpM)Q#RNPF?r+wbmEk$KuA*l2?x~ zM|cQxOACcS`*PRX26bw7cn@jii=ogATZ@-|cpA^S$B*|ZZJIKT_G$M^{MOLma{2S` zbU5K`IdCstA_${PdkLm?KkYfm&NzD(`Y$j++&K7uNC5vNbN@Gpkolh~?SIezKS$tN zbJB5>4Q2b2nqz}wTpa;25~ad|`H;osV#R_taY1$ilthTlGEyIKq4uXIA3y;}L@RZY z%3%ciF=W&y#|yspic2l_(woEa8TBpUFmSH!X9y12ZkoLaUi_9!y!$VOvmrtlgEN`a zC^iVe6Aw8I7{EsWvt;&cooDyzHUL;12Ax#uz6c-cADy~}pD(uvkAU?EZ?X(LfwrzJ z!rGCA#PO_qQupuEqf^)h1A?Q=e*y~Xh8T7sYeMF&_;r_#T<`+{NiXf1Rc>hZFc2Y3 zc^GY2fovmHgv@UNW?ec4Y$I1`Q}r3<)E9jKAdJh5(a`c0yxe%kCE{K`>aak8E+AbK z$JLY#47*^qnbQN>u!eXv?h>sE1EH&b%ovx@yAH@sdpWg+Dv84X7Mp_f4)s;|pYYkq~j+qn%5e59d3M zT3UEot_TkKre2o3htuX^+T<&apW+b!UVE=uLB`%6ilUM;=7MH_K2wb$$7`pw^Ko?@ zb4W!POtJ*)a~BXaKQ9!)Ma(C<`m&3tVXR@vl1tf(w?#LS?dcB~u8FVr{IL`$!Fm~99|u!LoQ#%pwh-mP4yiPsJ3!!&{ZldX>I zD{fKo06USmf;63tm_WC1TxVz`>%hc}x&TTUNuJVk2Poop!zwy@fIzF5AdA(g0_W5JH7S%I~3 zv^7|vZuH$G_CCnff@T$`E}^i6A*6hOCgk2+ZFbO;)Qr)oH<1w>7t9SgI6j!kQ~CsZ z5QBsIP7r-TJcm<)^Sf#ZCAS|Cy?V(;(qgw_a`{3gZ@|hcNbF( znZC?QV7t)df|>=n|HDeT$JqK_=$p5U1MElt&Ra{)0pDGyQmp4|!NK#K!v`C; zEI%X`dFKo)#-0dcy_!MAM!KuAqG@@y5nFe*^>PVGSN~JCY@-G?rfd#403E;d9;JgI za?lj+F{L3H3!NEoK9CSGLtDIom8fcyj-+2hk#@kf1pK~)S2K}$s=*f3?mj_e(Dx$^ z0&s4l2ids@GpnmOc_*DrYP^YEEDGhN@<$;c7*^0XN9&r$8h!f$!6A1nC?Vmmy`z0g zQ{r)Vq6s!1AxKdDFAVo0-kqwQ#6nJ8GWG!|(YZxpxc-4`1W_P$f#wu4t*RqG7C@`t zE`4;DNCh45FNiJAV0AqlHYagwd0($SYxGP_{t_==F=t^uXe-d2<&ld+kR^Jl~=Y5Qk<;8b!yt?P+Hnro#7?Qo@$F}IE;v_2g!r* zF+&>;n++9myB zbpMYUB_qp!zgE81)KNZUL;3gP*!ZPn5)SPrJcncP1|}zUyU98Ya=+p_s6Is`h`2pb zW^Y$5f)9ri4q>cun~r`6t;Ny#w*3|FeB@S!+xK)Zz>ZIF>Gq8vBGqpJE~)5d>};@q z_Auyh(RV>oFf&-vjOQH02mh(lfIPyBAo^g2KfWwLkBf|HvWf7szu!{79@Ejn4z`r1olxTp*(Lvfh_r)Q4{3}jPcH!Vzg6!e>ia@AeUV65vT4X zVd%C7nLo7-#PML6nE#A?MOb*c7@tApU6{$ti3yX(VX51$u@8KEXy#?{GYpZJXEMPk z_i&L!+iMBB5Tm%lYQFc2LxCP}H%;tPYKkB{nKmb(gf?sU4g;J8KsqiIF}{i^wk>Sv z;s#yXgE5E<#>Je5V4fJ06vSizWF9Cg1FkGGgTWGsA$s})soT&@BmiFL?s8-i&Y`;N zDBJ;jM*6z(&NtV_NdsG)#8&b!MOqb4bKg}=HCO3=9K+eE@+Zu>vyOaoJt$Y~IDNq7 z2n73dUXnNi)+uK?dJq`WB*aYD!9ckxu#S&Td@!?g)=k&3_p!Piwa;MZV8E6@+W5&G z-PYaS?2dXN*p^D2d1SD`3%}Y7ym>WFfJj`E(!t?=-JOS?k_|9wJlOUWf}@Ftx8jJu zn4XEEz9NSBNj?NdM@kHI+PpzNaVU-ia@1HeADV|WZyeN+okN(`TT&U}*>l%^tV{>N z+3WhJ8z-kCiqTjV+&b=4H0r~1Za5F&)c(VJ*o1+bNp76-{hM9~pGws`;p4993h9co z6Xa8xUQ?EpHCu|FJa1-;Cm%OTk}ha*I|su~Z3_xil80DFbXej$lJGQ+ct~1`!?TzD zV;VI_&+V-#9#9B2z1prDU9rS%9^29I+&R=PXoVXmU=l?<36kPAJ@qjHb<1s zB%?#)>XVQo;T`Yt(!|Qc=aqqIjKG#Ff?QqE23@Fv(tKiv;$v`Xwu{TyAwA0Uv~i12 z1R1T%#*|-La@}3-Ul&)qI>WlgXO)(oiIv|5Ynv0id;;L-n=frKT1+&MK@Qyqu&qK8;QAo(``C zD>?7IHY%phe09%6+x65a^5*QJz90*}tv>rsB&JRCrzy|;b&Z-plQ~AEglh*bT4*TH z?j~PeE~n{om0>_m+`uS6rmM5&tz>i;C4WjuiL%kBzm5^5Vv@RG(L6%M?Cf;|qa)aB zYs$h2Og;RE=XEjAUQ@f4OUE8VNd#K$bIvL>V!3~T1$8c zoETpce}XbVvt+xM+sozM)dAI04umM*bI$%6A)#1-H0~}mf=Mp3O!jN{>bGB*-}NvC z861RQf|?Ts!qxsiHc1DRq&r;53 zE4$z24lMnoyWxnm?J7UbwW;aZ?Eamr{b*9t9x*rhbP`Kmc3m(>N{75fszoj5sibm| z2O-{KaO;p)X5^G}9xqOeyJErNaQj-`a9_|Pxhx-gB)q#!{S6}?4Pl?UtcQtd^=I;l zF_}b6ZQn*$IyzTVt?IGbyX?g+0Q$8>)c$0lg_2 zh!{^?)Su)UgibkI7c)gi=G5XtMtaM+_!s%nbBMbU8H^}HKM!uAF$k^FB%GPoz|$f_ z&N`(8?7ILP7NSfabdLepb7Xb})o>c*xKy6J5tEq6amsk<#>@!AkcE*(qEqY>3n^|r z9%Bp6W(o3#)PA$BNWdW@XDY_)f~Z2aq!2X(?r}CI*=vv#g!Qr|g%F;qr_>^qiYk89s?5A+{Kk&0F;mJOQu{xQ<{iS-)+%dgY6Ha^}S;S0Srj_7_` z_&(TGVM16g9S9;sZ{C0+!rwX(E8IiV1QiQ#Zhrr*|kGcxdRuDaZ2wY zvbEGv9qo5#*^Gd3)0kyyM1+z0u*(5>1J6q^QQK{{z3GR^jTvSrAyk~`@vuONsyrs$ZVEHcf+bO8F5AwIlLnY8C z#WRUUrbWk-rABiIO0tU4YwJdfB}N;n_Tr*a(wmdYP-wDnGf$LFQ$VWX*v7(SJ~R<+ zH(h&rloxTs7}B=S8NB)0;Ro?PK7*4JU9<2vU^2X>3C2REU|FFZLNBK^(aLrIPi zdpK;s>`4Zd-Z46O?W~1H%7^mGhwKWxLq@E#8kL)F)$+xv8tkDt0XVg&2XPQ9{Lly3%kP zYt2HoGcFA)5POkL3q1}d*kceGzgIbk9A=jsA1)<&q?0UeM0+v)b6NtfFo48)bB~QlL>!M{ zto#lvhEaFhl|r(Th-&jmj72|ZA;ch;~(t<{1GXjD_MJbC4Gkc zCakg)^^jW}rB_z>2ny)=bJgvJwB`T9*gG~07HvVc$F^)=!O6z_e@hI(f3f_@(3Rh2Knc75rgj2XS!vDP zkX#5GVTsx>$SQD;iLP;#ZehDkLQ#vv?@#7{Y)$uD1jxOR&EA;IK0Y3Qvo}I3!9}wrlYQYs5SX!N}Q+$eOWmkInw+4c>lB zH;bOHv3#J)+I#(VfQj*OSi0Dc9^`OZY#W-(F zu3?p$R4p>@ZsuA*YG1hY43?nC*OgU*jCB&hm?ed0QUq9m=%88$z`8Znu0 zjRj*x6v>KW%La!P+x+!hc;(ikA@cloAV15C+7^wU)}xN=f-^S4~I8lDiixTh!4{=ZvrUh$B&@vvOth=_>(P- z=&eitW^!6l&I&HH=pxp;r(FCT@l(LwwHl;1*9BIx7E&7F&CD5Bw``VbaMv}_a=Xe{ zAK|3Mds-qig$dpx8TJX5126WoNU~?Opr0v4O3Y1_FMoQbAa<;X5UF08WY3w(MC#l~ zvLS@C&8=JzI7vx_raD+--XcK93KPxhY8zvcPpP{tg`9N7$2axYjbl>EZvcyLvbwnO z&wT_#TtQfcy{F-YY`&g0KZg|UiBVnHyR?kvg9QiMRS z2&~t?SRGUAxw}6TGU5oXs|>lNZee8{r2Ug>FtyeeD(OP} zmtK$F-;?4V52UlOIq0q@p$TGme4jWPh{34u!ilQuzb?O4cXpkmuPO7e(7~J7vyGLZ zg1jnG^eeQgs%k9~32&IAB+-Ic9*LcC5BJYAsaU3(Oj}U#-v^+Nre{y*_B}KXPCo1_ zFS+VR?i0`kelAF&4N$`lIf0a_)bS}tPL1uJ zowiQT{P^2dFZXdoY@AUQQ9mZ~-oKiJe8Xb=+Z}wJJrlCRrZ4>K7BPdrf)(~hEK4b= zf!TIdGwdg9a&h5oqiDqGYLT{FS-Do`H=0)M3lb>4a4)lTmoSGX5Me`f>y9Vm5nb)P zw(Gw@{N}&M|LLFbAN>7{tSn6b?Y;9>bKCBi4Z(L_9b+T>4#--osE%a;$dbKVBC$m9 z$QIq=dq5(lRxM2@DJr@Degef*GL7D`#f{#xkwgk-4rYEPvoLnA!~BIW7vn3cVVOC> zb~xVpl_O?N+>S5Tho1}6=fyFe;K-<*z3V!rZX!>tm5*DzW+zgHws3$ z+8zyTRm{$b5w9`|&=_LP>CTcy!*+F7WQ}E*jwyHP;T_g7t=# zMMq@d(AQ>ART39w?-lo^hj;cQgp>)YB4$Y>7Sxhxvsh$a4}E#o6V zpr<|c8;rsWnBx59U$IdR%L12l zXvCcnE>z|(LB-MEz_Ea{!>FEpm~jhdz&6CUT3fmeckHdVeYb@8-duH`eWK#D*zTpz zXyXJn-$CIK2X|1&k4+mOQ|^1#h{}866pfIT=V`UIW2)pv2KbW_yh&Fk;)(f2FM}iI zZgRdI!pBa$6yT23kGW(9a$Yr(&5J(7toHTU6DUWFP=;a%5#AZifg*4Io`Hx~>YLCLMeDA1nFasi46GriKC4JUV8kBg=abR> z^y%pQ)LupE(=Wc8#%|SGq{d~L2`|mWWN-FCJI)6zsqJ&nZ!YRbGivs+&P~?>da8o- zG0(nFU9^t2$OgD)vz&c;_IF>zEdf+^7^w)6iwAwDW->dr+{tn%Ky-W8UCQW4d;)H9 z$xiKD5#Ce;FZay2Yf~_(B`_n-Z(~IyRMplx$@JD^UKJbqu;xdbrKn5eQATV)TP-*u zK2D;dznLqdG$#h#xm{|6x@UfwWsmuZI?*_C#D$MaLb=YdIh-uPvP3BZ49iXQoYAYp zdj|F@GoF>wuGr$%1LjthsR*;yeMO&BW{*Lm!@|Zm7yP;V4VcAGD&f|CJd0rtHv?)( z>svK&4*No2J^P3Ut32HpA3n~CIAAhMG;|2HR%sm*+sahIlD$S$in7B9UABsSw^Z)) zMUPaeiVABXq{h4b9~nm0dhc1Dxi@-omSb9Z4J{0f zS~_=DKuNjeGfYbAs@Nxx*OXKaJMfA=z!mUqI1^VFv?p2WU$Ul=5x|Fc$ zkHuBZ4SNP>GCQgz>hRpqu>2RrBQJzdtc&#~|K#ALN@nte1U6oQ;tcL9Cjv!-CrEj}VShgew7CiXVC+-YQ>eC|tb{GT0__C{WL?jXMXL|UQ-)mLP?6ig)IsD$~nMK}oY%_^d>(_Zc zI|3b7l5abX3*Mg9cz-3(9ektNvmXn9-rN^@A&R&EhyHg?gFj}>v~-j8vKzc)m{r9B z3Ewkr*AOmnZN{m0xCvM~i2WLJ0l?=&H_HNhf^e@9!h!b_weEgS0UqWhzA4oj<6c4g zv)_m(^@wdT_ndg!@we5bJqhpOF5@ccL@GY;w$&ILXm8?MJ;B^7M|&`u*H{i;XDevDqxT;Y9+XiYJeEo#%HFTz3|XPU7JWiq&5B(-8 z!uI{=tIOc=W$0DmfQdMK$-7rY}RIm7H6u zJD9HzNcqe8^G3f?c*(N&tdW~|{>v(;Y}J~msm%5DE)p?^wq zt@ZFrrk`rLwaW9UyY|VOH(-Fdu)YT^D7#M{68qMJw}6j(bi-k8FpYVV%M0li9x#>~ z5@0rn{>tuJxTxyUS;)!Lxcnk=A?CK;QFbQK5Ar*73&i&?Y8-N{JxY?je8o^MGEs+9 zpxKXzt|Bmk!PhxVS1>UIL_k$pi>(HRq=-Ca|QM^hOUF?h5QRv2#WWTB0J{q+7)N*_GJ-&vsU zz_9`HM~4G%pY7i(Twrs4DMY{&ed+Mx=8&3#7&?@Ut2@39y3lNZGEfqs&Qa@yGKBziRASNChwHS<4y zE7B`5{WUZ<{%p)Wdvgc_wvEo~@_7%N7ZQakhw3Kot=28uT*>0CItweQ?)*q87oU^dg&f#wZ7|| zA`$WHB)!^F59zRb-Qf1ZvdC@pbKu|f`bzNYQT>kk1=;PG%K06aL#T(sKu0~0h{N0# zm$3_ON0!Ip3D1>Aq6S_==ADLnD0;BE@0%#tAZQPYQ_kxx0pC3HGU27xU517l27uw` zq`sDWCf;#eoY`wdBXvZ1Q6WLii&@eEs-~KS3#1jp+_eNt?H97XqIpGim!sFI$^qu} z+Fnq!E??0MKM~&jSP=~IpG|?{>-A^Sm(Rhx*DO{q%lRM)9>R9dL}+e}E|wa%g>9+K zYc(Icr=o#0co=56tuNWY{imw1zy)VPy`parv+a3_Ju^RY_kIr-jY}>Se<} zSWn<|Jd;i49P(W>C|I$1u42I>76QB-jJ#v)$Zd^~+J8)nV#iv5Ik8g`w1j8UT{zBO zrSYUA1gs+)33G+u#p(veTm<>IZ&)QqiQIgfB9EkjF0;o>;8pquE1rCN2*pb;(tONe zF>-62*vhk%*WG-R^=Al@U5Wks#3d0ZX|A?9Sj z$kWD|N#|I);E@tvL~|H^-E3VYA107;&{ZV%Q2lNm_&Qg$t?DDjQ*hc$)FDng3^8vg z@WLd;Ze|l8DrAHpR3x){Da>I8%&L>Gb5c?JY(Joh33Howj_f}Gcy%aI&;siWF63gN zVCHM6_PeIW0dB0E&qnry+Kr)2v~nD!&R8~a8>!v@7_S^(U=G>VL;)LDH(oW(V7XY? z4vLSPvt71K(^{Y@S9QgG_Nv@arygixF7^JJwu+0or>DSa=~(zpx-eHegON4^U#z&u z&btbPty^uO~3xq*t4qQ$vA^ACtCbfQvIVK;_&A}esWHkK;rH0O!`}pB531& zn(>?7$+5P6J8*&kLCMLNvTEhe#o08*g$O6|_Ly>+VRYrEDYo~+98ms%?sJWSjqEH+ zv`{Wls0N%@zE*l1vrvQ5jHb|BuGu|8W^b?}C6ha=T5hk+OKJk4Hawz$cSqDUD(Jl2 z?iTBq$?1Tn9k57X*vwp+mZNmPyt*|3#{RU=5^q`vY_HN!ccHoI-dO@C|3*L0#m_B3 zpqXFd&S~)F=iVMEEXHvE^LhFd+;4)BL@C0OFUUCzY6Qp0Pq#{MWqdjOFCY}<%*TIH z@c%Rzax(wdUg2BK>;I|XfA{)_D4 zoBRF5_axI$PFGzl0#AjBt|aj8NB4Ip?@nxv25y!2e11;G zN0UDf3&@}-2SSiVuZBoZ4iRL5_)UbokVl(5&3U5PU%$T8kJ96w8faguY|SlMyVr7LeCm!#1vEi=%I&(Zb^jv#u-%lAp!&z zNg-gzZtCuoYf61I;fJ{74?Mvsb!6IS;X}7&UMJbjE@V5VepTfCH_ZV`cR$-VBS zX)TXqY_Vygyy(S>W0ra_EQ9Lmshg(p1pKT46#hQ22pmUV1^?A)n;f(=Lqmw}TPEsq zCPP>yE7Cy#Y@Cu7mNq8cV`=KL90_bPho!r|ZhD(JSyo&v^m9xOvo1Uv)=B=*45<~X zilh@-mx)OCozazWmqhc&3LbeWviiqPrls_Aj?{8VDrlYu9*mkO7+XLpw*xud8vgOD zXIX!za|E1SO<+O-CFNt7@B8rQ*PlHKgANxa%gVodWu<(SPo;PdK?B9PfR9&-2;AL? zxB(7TqABOZjrYQXJ47Q++N+~yC6OLtTQC_^qb3+{8GFdDbrK5<-VRL%4$msp^2#YR zSw_Y(f;kjUU0!Wuo$VOICQCUx;_<$N&j(26W2q*64-_sR#--1xs$9>)mvO3$L*|J^ z6rP$gr2sEL8RxJqLlFu15|@^k>FLCp;4sLnn&Z(K-~pGB5Gp7T8RBSviqIkqEdnv} z{;lK;Yu}jxqE*VVrJNglJ6SR;pQ(CIlJym<_EpcT8a zml@s<{UBHOorHWxA{mqE-WObIHGLR5u-`gcI;To~Dso6EKqwb2PJ*&H<%(<#9I(_` zf?fjKSfolD8?dNS9elL$+uhskUXyxMI(dhH{ z_?P>f^>|oHod8G+S8O?3Wd+e4IrnefoEa`_fC{qWO;zT@E-b`)1K)+U8@{0QLX(RuSrP(T7m{% z8mMZYL>ILgD<%*-#kS-M;>WJ&S}jlwrz>weF2JPTB9_7y*ia|SILL6)I~8bGQ|S_} zf zGh6Z2s02*h_S6bFL|ihjst#|M;Cc<}p|EMSfd3#D19aClC)XMHZJ4+g6R5!C#=x8k zYi`8Bg^@sqJFRK)5qd4|s~>G|2k+}0Qt*Kb&N=o_O#wDTU+*;y#UVlT%(v=#{CV;) z%hXc_h5%iU3O9a3KVVCc)2t1NB}Ntj>dD%65*CroEuxTzf{D!j`b5x@sKEC=r;DET z)G05wOj}EDPe){8P$>A~(aV?;Y+VgWG-;Ph7yEtH8?mA<#%(FX94mz&zSx@_&t0mH z%|YLdTXQ}lk+gQ6haxh-U5i|`z5yal?6(KMS5taDjEwzU16B^s6sp*)fr1`^xML** zEAG{LXc~o{%iabC)>glB=m`h#7>ouBzRMMlf*qhshJosgitB6G2g$0ytsx^-VR!*q zSu(uPja8@`lWS*%V_Trf0+w0c7zX4ZZ=N_P#uB4_$=|mEKyM~&WiXoVDEb3{_x?x> z>Zq+d{@cTXXdtR{RfQE#gV_*K-OGm-n05wdV%d5p8hb9_xil7U8$T`pStRrjA&Ph! z#y_LZ-c9RJ)kX8ve1il^!0jw~aEOLl-XQ2wdS>c_xPD;As6KlMEk_WWy?3>niy)fDP1vc|c5U z(aWnX;+;l~yS}{y)^uuQANq4(sw&Rp0yZDn2d2tw6xW}!a9P}Us=!*6&?E4cT>HZ^ z+`VHhq-({0>5llPc8n|@;%R+*op>FeKqV55DX!wjVp~d5(X_AoR5BS$yn!4l^JRN# z^5v?(Kd@_2XT3Tc4A8mwZ2_>$b579-=I-Of4!lYuf0CeMxV>B6)(g)&ufF9Rv)<3# zZ$w8RBojsxMG1YTcW*5pP5u`Yo2ba~KWIGb|3tU{e@q8VY@GjfWAd$*_CM1B+W(aY zGMAdwU;uo`l5-!MJv-86f84NoUU1`y0MXu2DoGEyIoZGGl>y*}@k#mDW3T3(z|niwIre2ti%G^)rH zHIxB~8CUkaXs=iLw|k1pR~3z!_t*HV-Yxc6J@Eo24kQM)a6Im77v9$^JG4m?$B%}b z7s>(XUVguq`}_U!L{6w_a3W_8cXvo53dXl<;;Y-ZWanB%>iZIX!O=Qw~)KW|HhSbO(my3E72<`n;<>A$BOV)c{yscyOuqG(k=`X~njA}~lk?_7uV(mQ)6Uhq zD4Qutuv#mkT$rv7uDN<;B2B zT{W0vl+dCwI$5($k%VJyb*-yD;6#TyLk%t&THujlO(bw`r*&+7#hmDJ(66MBru8SR z2esJ76DLR6+QrW7i3jLO125W_Dp>_6y zKt>9Bw_LKDbAqv|ux_KlmCFX!KsbO0Nc`FLo zG9m4KQ4yvcwXE20kkK;3S&8!GOYp%Vn_Nt|6BhG3I$udA#Y$nRik&8=U ziJjX9jP{~QY($Ew)-_fROM^DfzO`zdn4YZK3ySt|E_cKx zgmyeDWymh{R`~~h7T$yl9pKSG&j{MhY)sJC7Yph3aRmq$M;c2(sd>OR8JhknvEtGS zL3KEjT;2_LU%Tmob=mK!g?Bo&3mN9d2R?$2eayS3r`%R5DA1G611X~6>D_}InKkN#^ zPV#NR@7>(m$8)VF$FqVB+5%BPPF?0n%V%FKo_JckJ@X*wEWi<%{j2LUb;nr13(MvD zzOZQ5P^-)l+k6tj#?f4z2geE0bQ@&Jki6hXsgpt5@xQ@<7#pc2^joh{UF9y~HYlY) zEgp!+i2wJFLtv1&2YJUfAXTQ+u_!Mxc7>GR0%9{(XCz7ID>RLI#?S@aZcxREN*6di z9JmAKiQ^AwhL8FF>HXvM^-&i@Vaj*@qgb$}hXjd?HhL%_WQQsQlQfZi`QqbrXa)I} zQAbAdp(n#7qpsjT&(h`8SZs0%2~99KEh1ox*xH3uko_J)0TPg5RT}x$VIqpu*ulS! zhtXa8$^k)t2~VDTJk?gwIKwj)1X6GjJmb~eV^#Wi9F~JJc7XYPtV$gd-n>CD{jYiH zZ56s9Zq)Jx1=Retv+DXr?tY0Lzztx4DGXrrGx>E|6XBhlTVPNSgplU8r%gDIXBNN!kgLE-;^CHi>B*i;PDtKr zRZ3sFE^=$=xfOGq;^WUE5BJr5m^?rWl!a%FZ?I1osCp0ZoPwV z>iQjT)|NhTuL+ptNGn?(2do(P9Tw zOHQ@OtR_?fO_rWFpc(y@LmO_VGqeqb7s?1~&|+G1xTXl$0li#3*ZTC^zy-Z5?#OmM zmA>W10v!Q35D0mSkicqdT4qeByVgu|CR0~g{~E~ASr5?nZJ_qddWzTUU|!KrxI?zD zW~W*&h5BdC)=L_8iCXgP(s3WH$6B~C1^4u#4{?jw3%SxDk-i&TX~CG13thWP7y{)F zZ8Y8)e9tv%fbsfR@gR73P@wylJUcPqssrx_NOa*?*aJy1+lv@;38#_8TOVY16o>&X zh{m+wg zw)~yVLnc2a!}M6^^*``!n!jXE4}3)f@H+@4xG;ZQqq*;^X3f)|N{G(FDIzx)$VfpvPyzmh?P1f@e&`MkNopi;+A}z;( zAK+hhr|LH&GkB@=?@F@SCa{N{Ujs*4iQ;<&XX2Y0UOxS8YB|c=6f$1f9+2NL*kqt- zpz1S+nco4xLg-v-^_lU%9%@*VNJ~m0mAI0uFijOLW%st8(&*zU7ddRBd%ER!R*@ir zmuz`=8et~@D-RSV{(m8*%GjWTf(s`2at|ib@)!o9m+1kgxN`wLOYea%zJ-AC z2VqcaA_@kk^j2yy^%Xr=V2xH}AHRWJa~I?75TlP6a&!C`k_8w-L8iErUBLLyV@@Ms zIESJ}5_T@D3@9k*G5JSpqzhAyn(0_;h(2!^6nYQL%K-8OqbaFZ4KgsbO$H10$%WEO zm?48V?rk(uRzvbdT!HgA%y11nfjspac$6_bD1w@y)Ejy(s4xPep&;OboT&nb0k}xc z87X>Y$UN3CH5$-IL4oO9#26%42+(B>>i>PLBBhbXAPa{g`aSFcQqjD@F@k~J6Cvgx zjt7E_4kN%IXy-(bK^f4LLtRZYiT$X6E2vVSew`7_AWtGjVI|WfM3iw*Lc!4h9&v%7 zqg13kBL-f9bR-5s2?1z0hvg0&N3!r-_Nak2kSOSF&G`2(eUPvix;EE+s(3p6o51?#-R=Jjx+2ZE57TQ z$w*5*!O<3-SE#grExa+oWI>%ih8fx)jO*-t^yf#-?M&z8KYyN5E%#dSxt{4S-Timl zJ`6op;j+*-%5q)ZBUbZP3Ou*>X7ACD-|FC>{jSR2oS1z0{u<2TlCd};W}A7`Z#XVc_rNyeKvaT_6$G=eF$Y@1bds{MYDjB zw}3JZ#?^YEi(*RyUETPt1R6b?F?|v*G3B$G&(hoLU!QMZ*LD9CTH4jy z-`3n_x$(7P_=D%c8AD&Lae=VxtT2g)RBU6gJ_qp6eKWd&&(&?&@$`4*?zcj7>+7&m z*Hq4fXue`z`I2!qM!eGg)f(sfP?y=WTB`<@ZlO%oYG~g4g}Y9IRk<1fAX;`H-5@?yM>;#GO_Oysa3E|=;dN4wNlj5i z2Aq-qTAea%zT@M@y;D#ZitV_RqQvufC^;QW_W1NU(66rgN1(qFC`w7ZRCM7W!QoAe zs9kRwd4JpCe~$lab30q2-Qv5~kK;Cc*5u2dDU0I2E^>bB>dwr2R`V1=jN%>m6+}Xy z){_=I#OA7 zwz<@Yw}H9wnphM~p(sQHht&7q%m#|qD5!RnG^3`iET6`quNK9TQWgJ+T4Q{8I{Q*M zs?H4sC0vdGJE3eXP%{O&3-9ZJNJ3rGd7Q!Kb14QmN2pW-Dj0&)s#hi zvm`Eu0P1rcNluay>>?=#6K$tT;ARl)k|gu7PPCFFSU1CW-%&aS)Gc5AM(7*RgBJJI z50?`hUEw76?7(7lZPq~HJ{ys^y^2+_IWRX&*a=gtc2$EwYstzHvBo6oPJv|W*56uS za1Ia8rLu3gRP3=iFUm|jeI&gn^XW_x?c54I9Xt!KDjQM$Dl^@-_#>aG&v?83*CT)F z3x|dUr<{dqFkNIXS=@2x*=<2NaB$AlzY-Va#Rnex=MANS<9HtaunhOLfn4u?T8jCD z;7@H}M}t@r`h{RaYOxjmF)Ee^hjxyqeIkENIM4V(a+^5|d;}OzeML~OYy^SlEU0vz zUTrs5_mj6@!y}aG-pe!&v^RuQf{A>hYH1#zy6xDHB29AYkO-lZt>Sr#3lZpqR7PdAN;?J zoXr1y_#4am-;>URw_hj&N(GEai^NrC??IboI;~~U76w>NaG{1w&1xD?WE?Wg_dPe? ziA2)M*LBPcrHH}zx)1|p=rK6!W$((Dz*mJd=ts3sC!j=!KO!98)CZ` zP7|a}6ReGbRq+D(JGngIffErF!`gDasqh3Z; zIgj>@#8P!lPE-dLEf)y`>q+JSSAvE$f@GDO6+)dR!(8%9S4EL3f#70btPKG;rvU2E z%7kFSYbN|X92V1%EEod5;|gZKvluxD+_3ACcM)Rd+_t~vc4SHaP;0mxqTK!-6@~|hmDPvzs4|hMk#Sy{gMYCM!7Z;2DvAeth!~av~yNH zpsf&)Rj@T&;JJG>0vI(kB&Fi7_HlHn&Ttgpsu@UMo0^>btqsmt?rF1B=N9@KR{)4fO+Thn*+LP=vBO41F5m zb>v4sAd%Iva3wI;8vJ_9JFAp_1if1@@v_v~iz(+4RWzwO-IU8+=Eu+z&vbNsBsKdY z31CAa-a+EZcx_V?TX6(WA8sS2e3Og2t+i^4*Im=k zYIo>*K4IHG`pzgOb<{=Ht$+Cf;JT$^j2I&31T0mlEI9TGECOm(wbew;C?{=nA)P3j z>y@_EdhseblF;C4`0Gy+)_3TltM4hrCAewZO&TJ{BIp#u*bjhC{xa?tE4vI0Im(2<5=W?g7iL?DElIpkt0J- zN3WW+cuE`S?6DP@0L2DAD;ijhhcdcwEC$`c3gK$PRhl5e(TeZ3;Uskufce60!1@i< zv}mjz?X_oJ`8T8!nNm#v`yxR?zUJ-B8wC>rhDF?m2+T@);>DbVp0r|lt2FU^6J`PX zeAyyJPouIt8rri?KAm<17QWh{F+8WiG_0Yt0fCKlB+fFutXlA@ihy%j@Hm9YIHQyf z@h^&!7MTzzIQ60`EJbI%2BrLrtV_s)BCO)I$YS7UdA6f)t1~&D`7^6^3aM3_oRbC< zCwF+)*Swz(tV9bP(*ovT^iA; z!8NS0qSNytf)!7rdf~`P&pe&E&Wph%1r)}pPZffH%p;n9Niin=1Z(|wX+c(IPJR)R z0eJ1H#R`pmSvQd-fdH6EdRfMsSm1u)djp~nh(T`g{j~g z0YC$}AiP_1$Ag3Y0f&G&m;Zyrv;XgN@BiEI#>V*HyEe3Kosa(cF7xycyDxQ|nFTeP zXtyo1GF`HCESU*Gm*_3S92+3=nAyyut(kIv->2+RIDxhg43hT3F%%xOy1#FlsVx&r z!6no9a3?mY6HFz+s;1}^5`oyJ;$Qf1|FCda=wFnX03j38z>XoQpcEJj4`sn66iEVW zck#kZq<11G6yC>9jCT*#PtOY^GT=nAE}PTDH<-83GiZ4MtOZ(H-P~z3-Gbz?o`yCZ z@|()ajRlmMJe#F|0PaZ8|Na(i_x`D6#?Z@$^_!Gch*g!NfBe~zaN?iX4QZK?<7mZU zN3u4hu?96o#)wL+eDx)vFYg$;$^7Z(E$O@WbGul0rOgI0V9O+JKPjmKnC@AT`qgC) z#djJquu*WHOx%$$DMw>MWH6oBqZkN@%(<`O%(XFiP77-p#%EuM2(E?-ETnUJn$YJA z9KD##gqR!;Hw0iM@vwvJVRV4~KL7D6_a-HXm^msPd^;R& zGh2r(u+m!Y+AmY0N=7MmkyVW5usYm^*j48h`ynaG%?Eucp#~t7osqN7IHz;cyBXM^ z^-pJ)g1$t^m?5Q|&|}SEQfS~A=d!4X@jt@8en&I`36UxGB)6S2pOKX?^#m%nlZuY; zXCuX#_>Dw|LS`p94X%UgP>MPs)8%iYs-8!e+1qh#rv*O30Ur$oQ0AvK4Vj}h6z?qH zF$k_*);x%pz<873ccE6+8ex zyi*S6V8DamjVE7`(4|~gR7}%y?A>;&>a1bNT`Wh3;RcjYYVy>ZP^mvdg+M_Q!8uM^ z9NBkMoubxlq2SHTjanJKH zP4u$5KSL7Y)I%dzB#)UwIZ`w?Q8Y4Fs|~C|PFNFMv2I%S9ve~Tll_M&wnhpa{hku2 z1>c=S@m$RYW#4nNRq|)VB}Htt8G@~?^hQn^XsaM4=yr*>UrzN-CcVKd4Rq!&FG*u+ zQ?ZO^DIjES_u2;r*Vj~DY6QJQjqswqlXcn3wAM6AY;3Hr>wO5W6a|H2LkWP@*&1~C z%ac>l#>`)hQGvB1&(H1V^5bjQIk!O=Sn(C_Za1rrvyc2nPMPpq3jeh5g6c%^y%9G90$Ec;RR+|}o4LaHXnS6b1=dXYr^~o1b zgz_F?&HGBJ&A6uFzUFkISC&oQ*Ie*?6vk!e;e#W*g}eVk=WId8JM6BV^Rsqk7{a)q z+U$w$j7_2_t<0kDCRsZeOJa3!3ZTxYtU7Ot(y|@75twgh<@1_rBU^%gi{$jwiE%d< zkq&W#xD7cG5oIEFUT$srBo2vIx_060kpj_2Zp=?G>HQ=jW+R*JQ;_UKt<(6Aczqn5 zJHsJZ1x$QlVsPSZOrG)k-t#f5KAl@`|MNIbO0fr(GB0-oP1A*>>ZM4gOL;|?nT1@2 zC$Gn(Ysmml*_aGZ<0E)VF>}}v3WICFt1cUXY-n~7xX(~MURrE+2VHBwb`7Zd23y3*$dXRvI11)1Bm_@`2Mh}C@cR4JaIfXyakw{N>wYmdv4 zSw2e6Ie*yDU(Ok|0sy$s9+r_BPH)un>y~v?M&VT~WOsS?uwhOQLvVf`3t5y@TI+;f zz)|OTOj9(f`gok@lP~YJmWrAH>F_2LtNhAB4Kd{wHUz!(PS?q6NUc2$w>N^uvI?Ne zt9I~B%lMY+r!glYPT{nxDRUy|^cpNI95qA1mEij7FBWn%{U5|zh)^KnQpy+Ep`u*H zv0i)rT(NuyZ*x83aj(kNDz z|2A@Vs1I@X0o}PXJ#&-E+}s=!Brk~4!xgcEEvkq>ICc%?sIn4p9 zlmbN*^ywMEDNF7lpEq)kJPe^$?Z*_(cwYXCg+m&|&*i$lA;=`rP|IW+KxNX&97mvB>I&(0YPdl=_nKyGhrfqgUd z#RR-uSZ7aDn$UeI7PdCYP1P!K)55B zxW=SjTw3ny0U?lq94=3o)DD0E9MAQG*Z#Wr+}6+JjFg@E!odJz8M_7EHe;Rni2VXx z4hyR(ilRhho?UN#jD7m8D5bj1B3iM3C;5bUhf$Ah$?bksD;)2N7YDfjboaDx&YRgG z*J=ORmGex9{|)XQaf-d__pZ>>P>NERF~*zlAtKY3q~pFZHidBJs6KzMrB$C4c@bii z$G1vmMX{4+3`2$}1?j0@LWte_c9h8#ytR zIPXp)Pf&<`(-(~V1){?-2;)2+h^`E$RPrly(6>v5*?PX}j}~EeZmJW^P6$zA#5f>& z9J7RjKA3jy9v9MNQ(`-A37-u-hu}vV1R@^$T-Zx8A69`Eq$d|>Y4M;TMN&An1d z|9tf;l{oPq##LV)xq@w$*QFmj{+PzewfJq9tX>caFSH<*RNf*0@C>C9hXF^ZPyo0y z^aiuO6y%D9qKDl_dj4uOIO|OvxiS*CYE@!c^~DUybXEe9BnQU9LL02i>_eN>>_<0B z^|IECfPm5vb)?@)JUhGYnJqgf+f?&b)s`xm@S5u?y9JXe3`lvc)<%H$HpFO>1I3sl zl?-1K)8h1{2Pw-m0|VWjc#7mLm$l1Msd~#AY|U&nLvqt=x5~CQC8jN-#8xQy}gKM63gb?CF+aGFany=k!g}kzReQQI68j(J=TK6*!NpEhd zCQ{#@>}Bi4M6=$Cw9-2**%BHhpo+hyIS{bYU>BO~Lekud^G;ZFQJ3gytnyRgP~gsn zwYS?>%rLoO=xGnRmSwoXoGkgLabSsa3o^d?2raJvilb1%+YrkW93|7W?nSYN-^gWT zTM-4lC9pPBaWD`g0EyC~(=Kc?F)|0cuA<{jGppOl4!fBEHdL`QsWc_O)CqlX_h@z{aXB#vphi?NjqI%YQo57fs zgxLw@WZuS-WXXmxBy~hI6V2RIFg4_tj0HgoB?7v0aDOj9s+|?$h(t8paEi)!{H);X zNM)SRP#YuP#PjZl2FD^~puCgYhTf!`wM@kBr4);S%AX=n<5tbZj>s6*dW2S)tkx@d zi8tks(CC;@!(E$y>r01i!~PuG{p0L%PrVh*{g>?GSGKCyLIF}Xo(H{R=)y2`M4}6o zS4^1Rgli;1w!I(S0J$KiD?|c$e%8z4I8}vlY-Va|iMB-8nxv1&Lyo%U>%mw9^z6F2cfY$H?w8A>SHmNJ>HlH8rhgDuwLtg8`*C@0_c1_N z9UD3sJMfTE78w@WWXkEXxR$?pv6uDXNmZqXM=vuH=dRsc8v2*dA_-9Bp$_A<5vII} zFPM(;`2P$+bA-Fw9ra5X{`?LjInEDLTUYNP^f`JNqZ4^@S6R+55GP+yE$r3 zfp0cc(EXbj--?FHyR`J#^cM=*a|$yY7obqNPbm=9xaE3E`DfvOK}pc}SpI{Iar~!I zi-YmMHqXueKL+`{ej$n|H885IlD*qC!qFu#4i4#cE|>2mS@r=VxzQZ=_7x6Ll zXZfq8IoH4L!OBQZb{a8>3#!TbCo_V?g3p zrjA@l`&VT=1v3epyLC~_+pq(DeRG@7q|Bpcoj7PnsZpvbg;hB_f(~$zg zNemi_(b9(9_(biC9lf$4tR;;~{{6uKMkAK&j5A@Y1u>R2_U3c+Ek*Inv#owI*#eYi zVn$RB6eBvjI#XFwRhwV^kuc7Beh;wZ;pU*~f__ z!Ou9ccGbtYmk>B{;1=qp--Oss4=ZkFSayg%83BSyQu|U?TobF>ieRs6aOBpuI(o9u zlgnD$@badfTq0FQ%Dd!-Y^D^Y0mx!oTopqg+GW8=qLa&L8%$s$VrNCLOdGT09MA4v z(dZ~nuuk0??vC=E(;MjaDrqz<&~>{+h@aF}cYJRIh1U^y@$$ZrfKfo?+la;5*Ur~Di_n#9i(EH z_Qo5OVPpOZnrj5?n8x3KPrdOX6O(R4fp}Am(@0n)Vx`QfSYkRGKs#((08FOBfdOBv z6k}om+3v~bx4wy#MFr^7e#rJ%2O-Q775%rAXSGav(@+*WyvgeXqp!XK3AYRlV@`#B z#$jNxWh|C*wpfEx%*9D@_6bGxH01O{Zoj~RfxK6ANmEG^+$*&rN#V@!g`q0aZdQl@FhHWx zv0Bhe8mp0tZks@ekah`zf{`k}`gtj4Ar4uhT$Rv^H+cHM0n*0SHxy=dOEV8vR8c3= zD6KS9W5`lAVu~k=DK=p-|8bBN=N_P*WSLVB`S>E9j~La1ZYCeMb4yk{Cm%2lZPhoMEhPr*LZ|>-O{LY^wVEqWs(Xx;WCb`umhg zdY05cy_nLk$%jNykIhskX%9Pa@0<+Ln|VtH+4|e+aEOE&WYU@}7TT4pP zLeg|H5o4@!J%PY>&dlJe>HFkl1pn-7;B4vJel9EK_7JcREBl{(QTymlKczP$yP88Zj`Yv_~bf+i#4FQqh62f zpBJpP+K#d+h-EQ_Th(&Tf(Vw01wLV6q;>8!ksZNI(}}fq91=|shzA6VRy8eeEq7XI z`+s$rw0KSqaAkzAFQ_w!p&z^7Re19$GL;%E5OyzlVNuK8xkMftF4HOk8L>-(@VA`! zIYH;~k397+tf9?QFFG>_4<5)>4Cq7<+5@Ow7D@!U7LpWUhlSfNbT1Ijo>LuNsZ+tb znsx4eZ2HuQQp)o%O&mz%y;8}NSZfkp!@xwaTB&9r1GR98GdEui@>zSl2N z%9{0!Q+r+3ph=dR_aRg~o=`!Ls(Aj_z=y@ykWKOX7k`>de0(`dBn^_1d-KFUoheSw z?Ujfqhi_l(@L!ZDDjC0CcU#(Cy=GHp3w!yPkShjptmi-ld{SqcvFyQlm3o*op3W=t zxV+HQ$3lpCoAAVC_c%m2vwpg{Ft9gq&kz^ib9FRT8MSK3ey1cq^8QUZsxZ8gaH9Eq z-bwa`FF%H03r4pq>0Y$&cnVZR&R7x=2PE9BX^Ww|YEsXqNFt*FkuMYqNjtl%a}1Ay ze@g!VIV;^cPE|c?Tsl`A*zg*AP71W2?x97j;jn453G`hZ!J%1c&%TrY0OewpKmFH9 z`(LYQ|9@)g+W*fod7geDprAQ0;}Cjc5>tu5R*Psj46c#8e&?V9?I>cIL?(&*dDPd7 zB8hEu6pr+xbwh!GiQ?gdNB7w+o>J)Qa?t7)GDjZ}1TBP(_NU;mlxX#a)7QV_lk?-x z*dtB6dknMH^HHH?u<0fYR{*kQEYQ_4y!>slFZp8q$s$L>VAMq(+Rkkvk^DZxb`o^v zfC>*$NtnCaVv_wZg@sS>5``8(nX@dWnyv*RaEB@2b%=JhO!#|a!m=VDROT#xe&sn> zNQnsZ@r3!wjH@teNMTX+^VDhcW*ziZ3X9<>dvE@kmAYdw-BP_r#VnZ+ ztD)+b%kQ|eHp%(TCMr9szx^N{5R|-f#2rwfU!|6^7p*R|U*b~iT4{dX8-ToGIFB{~ zA@P=61sSiLqchwP59S(gAc<^6c5b<>|#3_SH$ov1~p0@4* zO~B_`BA&CN+s0OIG3TBb^2}@%_INL2_ImMDSzp&#nT*k+%PTA`@OodLtFHY}En%R~ zH=h+d#V(E3<+Deo;plkkaUpPwvK867J!MQ06EfQ7JB~eM6V^Tohl2Q{JTBS{|9K);*Ciiux0(4oom!%1YKt#^f_TBq0(SAkK4U>PjW}2N`(frp`>g*8=1SJveIH~O3Q&q1$yP4PYqt3MP-WfN($R3^+)EFg3$yb zlZ9eCAzC2?rOtv9bLpC>3pALmn%N)*08G^-iUmb&X_UXpj`EU<&~DV&zOI^7R_Y$j zghWSCY1Lgk3v1e6S*H(fBO1|g6SAd4UHfgl(q0ABgtbY|*d2quf3@&(@UCo7?j@1# z4Xm3zZrHMJUpMABn#QbN#am~xM$&5*xk)fE8y&g5$^{-7auvlvYK7~&$etm|LIKK^ z3QDFXu2)FQenK8(Nr-;k0t#o#*!E0rYJZC_IN9Rhmp^B zG0$~Sr4j@nOzzdo05!*8Y@l>*`RxP9?CVVI24(cD3`(UY&_{2*(-a$ONxK{vaCzYa zaZ{;MY`nR5@Vz;qiv3GNxz`v6w-+Ync{wkN168pGZK3AlZ@zSR&8;g^`?iIx*ZV(R zoa;8okgFP=ldyf;@sTl2`UADTg4v!Y!NIW8!kJ19AdyZ}jm7z8-)pvh@IeKz7&_W& zg*W)zSu0Z~PrpX5yvJ9|!S6Z7L}?LH$yO!I7QCGbUuHy_?DU}U9dtq%hUM4b5^KCS z{b=SQuCrncgmoYF;dPV?HmF7PHDcA|X3 z0Y#`W4Z^pRuO?|>Z);!V|8Q4BE{`?luFd&h+7vNxEc9gwW z)p?+4p_0}ymHgdS_S0Xfv)b-b;Q%q%*|i<=Tpu*W*m>Gh@b&TY*y)~i@A;lM0Ju)u za2-Up?wTVb(=m71Hv0%fYIDG~S5KwN|e0)WT8tl78N1)*&jg-LaBtDJQEIH3@$;%p^tLbR-YC4hH;t-Gf-z5lJih8Q+ z@z0}x*Nr1`=Dfg&qtDiw9b6A(&-4Ct`#Ad`HDwY}nLXHa0%?Duu5{?VVR9b~r^ch6!+ z*GkvZ*?}=xt*j+>%fKgYW@&U8KvfSbQx4{C5~pFA5(-2}VKb(kW>-_Uy(7gq9mo(s ze(lZU1bt3@KtMN#Y&O`q#amfLA31fi2lS8tt~x;V7Knh}XtH@t$W{5#TjH# zj*6+`_tsi90`~g3o%btGG$91i%)YI8;|Rc14Z?+nfD$4^=S?|U_wMBAj5u!Xlppj}rMfi1Zc zo^ccdgU?-#xU-%(sWgaW`@Oqyuk63m4@bhq(&yeo3+sK0;;y#fk{1GhC`iK~__>k4 zZwZF`$xnPXa!wecBxYZWictP?yRZT>RBjXLU-{&FracRFNa*L$PV~_P8kFhahkGOp zeL?2ECv%i2+#1duP3Eb;Uk&m42NHSH`Y`gO7H5SsY21o z=P1Xf!dJ@T)%v_^ZSs@EHBpe!DEet%2x9!`mvIY95_v(UzuSe}J8Eaq1o6iat5g!A zoSmG2w$pX_fdAnypL)jG;C9bM>zOGC{q1Q8t|i|k_CC0wkK@ZMq#mrR)!%+=wBpJf z6-Yaq*(~B5b1H-C>9VEJLQt|xGlGW(%P&kyaSpFrxM7bLpy2%35s9P|0#g)y55ZgM+*v+p z+*D+N@jyWYW_W%9^LR(PI&P4V(X_pM*Jy9#s;OhCCnU-LIauR4tfQVy zG~_r}nn_T)*~8Ql?pb!#x)r%9jwVP{Y$>TA2ZD;{Sxk2uLSZ68Vv=)kYETDIP!ZV$ zJ@b*jwW*?N<$%qIrB>SpabKflm}HiDQ&?5vAD@b5^LpKfxh1;b|TCaC&ls3 zG*`C4A}fQu*IfgM*CFB^vY@MnA~A37-Qu_$$kx;Z?lwAInWqUH1mc0pZ@1{lj~5l~_ph9J%* zpcAl736zLHnR}yB@#KG%npi0_ox3>cWGa0#niZhZiWlC7e&@$Av_QVIy;-AbnSHxh zG4#*l<`S}cpKNlB57Qr5Odda3(MD^L_%(N$I7y*g-8g?31eWoFk43G_@yeFhNj7|{d;0I(5(+comOTR=(2+1v&Q^5M z+pt2OmI&H85O2)mw9gcUZQ8g$Ovk)z+wg9S${t9|yj84#4>SO>{DiQk02shT<{{^W z(OL;W$OiAG!*cV*7t7J_f)bCBf4(74+0zM;;nQZTsXyM$1rrWwf1eZo2w<8QT-GbGt2smq!M|x$9y<`%UZRq$M_(x`$KiAU)^t$BbSNkzcwaCU8 z@v{*qjQX6@h|=4WV7WxAsq-8c5eC9U8I^+{-%JT9`k7$Ovz@Cbbek!sphAZJn=ZoG zZ~Gg1FXw96T=pM)jKHU>E3PrUa+grD?5-9&_f>=H%Y1O&9Kmc12G_r1F zH`mxuGFYTWal;mTvymxO;Clwqg-3J>WZ*gnm`ev(xyF^3qZ*A3Eeg z)d^F^{@3N|zv2XT2FCyG{CP%m=YPmH{&V_;;Xuj( zS%{K}NlG@qae{Cd!G#sP_jr_03x;+Djpw_C(*H#FD3qcpsM>NdEc6W`iDO-RzWO-U zhMcSR;&I=;%-md_@)@WF0mybUwY1=%z3_WD(ApVF$Bui4)50N4)~$`T*H1QyswWR2 zN_%-xpV~a=m!w^4eJ4uvGW<9n(_)t=GX6cBWW6=)BAM^9%(8U|?}R+xEFWLTJ@Q;R zhBK(7IEK@*wSG$A9xnjFa}Gvm120taVG>Nkz}wdgEVrS-Oko=PS?F~`JUWzRN6p{@ zi-A_8lfSyuLGec{XyWj{hHinz`iZbh5VMYU;T`^qH?T+vI79F$2w zHR)G?Fx*9*c!F{U3IWm&Q(#E1t3x1ulnWZbSFFQwzzxNrVc-)Iu=EbZvVT;j*d2e( zZ#p85bf>2A0;&-@^roZaFgc1Z7+aBkwCRO>IU%ZC>FG4q0kVE{sWiTv5Ms;9M#qQw zQYfTWp>EvSfK0av$86a@T>mN`(T(PYRCq1;3k}G$aX`WOinduVZk$qdQdIM18v#4% z#CoOMJf+n!e%VF+9Wh&_*sDks^@1dpnNtk97Kp3~A|sJBKTuKznLfRiByr1OwS3%X zSiY<3FqT1}7##%aGxA_(PNEu{c3%W5c@bLN;&6iwT3LUBxBDjvt+J@`{kbm#FEo&^ z3j>rum!eg+rw4rqC;3$&tc>Y%(o?edS#6C$Ewt5<#WKE}?+60mxB)DOE4eKGEX!b4 z0neTA-BsERfo)2((@Z^IOhmTBs#^yb<<-a$q|u7FXr{W$*EKC08jCyzd4GXl7l|h@gVrf^{=ecT^l++Mo%Wno??po zXRBYtJUT#n6WSgIXnvH*_o)RMrLJ^jcCvAdcg~`;U4GF$D31#ev_k1pp?1jD7gc#6 zl#WL$BcG(9GdJ5b7AdU!)BKU>s=}wcTl1%N#I5XvvJ&nStd&YSxM6)tayRzRI6HW` zc_|@y(qwr|6G9QqDK)nw8QAd(!T!5v{w76st=LvUjDG(TPbG7BrC}DzD<{Vv!y`>V zY2?b%tF}j~;Rr~n%h&zNmy}JEAcry8YlD`f%zE=+&p7VZUeuvcRPtPxLHl z)%34A>%`yM@z=>bZrattEkt4OVz)_)iYt4yL`@rUM+}tOV<`Rud+{Ne!gjOyNjBm* z;S+wz1OJv1Vf_1Xq>F z56_zQ;2XezVoU;oS1uQ%TOqriH(}Y;Kkw)q{^=3e;za3K_*_0WCH`^YJAabmG*=i9(%vv>38D>Xp8!;6uq04ITI9A?Riy3)8mFq z7RumW4Pjb~IhdXAHQro$ecBHE67DhlP&l}B1jqW<O{rRQ6DIBN{dp(Q z!gCW=lOM{6mh8o%kUz(VYVKli!t8Y=r;>bnXLj}mT5I3(@bJC?2sjSOP}Gyqw(LR$ zE_#(?VsbSG$8hVgehX9KZj&STN}F&oNjQ&cQ$rjIE>g=|Q*3Q?uLT(WWS* ztQrV9pBJ8R78d!$u8O16xZ`w2nri0SIG)Gd0#I1W#Mdgk>D0qIU<{{@$D2Xo-R7__ zrq^eQQJI;i^TR5rYVDP{bPb&F1y$OAPhQ z?C#O*SC%%hli>8`bZ{QLFCBiKtzESz%MU+IJ&lMb9-4a*uF*HSwPc8AIJt4D8nYWC zQBSQ2<)8#AW{+m>lLD=B90#86%WteTLdCPfoN2=Ze_i1MMK~XcOc1oOi}w$u0C}{~_#q$t@@#{LhHxz> z4*TXt_2lo*7xYy(tMlLcYY+JYR|wYIYzlJOY6}Y0?a`B2A4#s(mvsZKPkL~e9p(N4 zQ8K{Cf&0rX2*$YHY}_yS^82^*|L>{C%FueZmI2Wg`ipJVQIOkFxLGQx4!?nL7*2xM;;PW&F+{9Vu~RT=m=n<4CS zXg}E3lYjj<;(v+zDD8rR;)_VAiV6xkd-s zgUZFrAiuTllNG;R?nmr9W*rNx1TEZ!*@|#tBln_Y!wlxYM-g})eI zG5j%znMVA_z!bsl^b4rBcj*Wj@#DU~$ACZ@!w(l61l#5K{i1sAyy&-pxim=-?L*~0 z?BOWN{4*iLCfLGza36nIG^>Z9RDgU`_|$2d!#H(%%0||UW3Idy|z&T*niuaeHbXBXg&0StPfEps^0cqegoziqg1=DqYaS)A*g%R zV09?323urkg9P$?On~BwuTmg8Bg5YOt8o)-S`OS@M=-YPByg#RzTKWZ?|hMG;6lzT2lS z-g^kj_a3?^4%PznjS_kba+c~NlpbD>0RN3OtG>3{6HN`}uzIyc0m~)-F`aeSx)7`v z?5{nsP&B(Y8?`@fbB5}Qpw8uCP5_i9nhN44!!+F&Th5%IzNe_&OCc;+6Xhes>Dl{f z?$mVDTEtX6jh6{ed;py}l@V1|B%2=wc_Smw4E7E5FyjR1QIHrCKE)#W`(lLO`zCi3 z?{U9OcpbklpIQ0(lvCD#iRJ|35zg%40|N)Ub<_l<;`o<;@~%TYByfFzu%!VnuB_XlQPW1!LpNeS`hCH}=Ch!A!&?)3K1=H?wX2uf_ zVkR;Bqjls-h=J4$HdHgQ>><1&W5g1m78%mMK=Fjj5w#IFwL3Q)a6gtt9Q=jzIy}B? zfN2!V?i|}}HcNHJt=!C63q{c>*M6ZQm{3GBn97C0 z*9bh5ZMSwlEWh^OxP6fcA&yIewC&TCWEyBbOW8D3kKd3r1#>nx50fC^@Q74}H(ts} zte7W$j=Ig){Ms=A@Z%q?Ye*6us)3z2=`G?g5a_j_zWH2Dp}D0iicHmjtla)pY(1wo zfz0j_)jUR1+m}@N6tq{64ePF*Of;Fjh^q#8tsVdPwO^-nR75kbejPAV>L?f&bPi{D+mwjd$%dUyvw`QK80!=u}`-W7a4d3AnpPF|@a@EV=|vc^Gx276n56_uS-V}BxBX}_K!oOsTjWc*h=NN#R? zHP<$b5F(IzrlVaZ#*neV^UFjDwjk7#pTrwSaKC$#$1Gc}b|DMVSaRqEkA7GzhJi_3 zPv-@NXJoGa-0I9-uE!=VSMKwn^LoPFrY+kg#LNziH&6Q_!om1TUi20?^Sd-E_xVF} z$qT?@@^2Wn^_58K(Osd$o3$;7mHxCFEP4I>Om9T)t0%8u&t|FVSCylzEHtb6MKPyZ zXAVa!4G7B7t(KR)Q%ZK|(I(!(wO&7M{B_~t?eh3i)9CD~wyuWIh%_Bw>IEXs0T-PY zi($2WA^TU`R)Z8w0A#0nA;nv+nP&F3gid&a0VvH?gYlj-@92qqGPA_OH)|nLtX<_= z9$dveBacPAUI>+`X2`#-wl?M(o7_Vr%MVd7EJz{GJ@v<~W^EfHeEBCvo@+pi{wr{2 zwnu8d?%nCn3Hp@kgQa;l8$M2*b_(5O;mrD)?&~m!^8yk*)^3UKlnblmMk zQ2>4^9sjkD9S!r~36d8w_z zV>e+QyO!Z99>)B`VeIY#Q-Uq`EpAkJj@8EmYwa6A1Ki9(Y%HiY{EJAfvSUa5U_c%} zY-Rb2$Csz>8&0v5rY6*inPLWta~(4*U=*S<@q`1LobO{&=%#3`0x|2xtibM?w2i zFeODaGRp@EqrT`{dq|3KB4HL25&Pm6!X|Jpm>QV`)dhpta67@K(v;1Y7y1`B03Va&DOY-$bRwNdvR-s=WpK-Xt9g;;E?#aF4dP)BQBjfIa~GHAep1T z7RU^==UaWIYp5)HK1*-qGKW*R{92tQ-M95CeoW!{+sUEVo$rd4biDKz;fq2lNK6070%_W27-zp2jQOz z-z+|fW{u&_;zNxEyjXeS+hDKm$R-JWYHAbR+L1?38kx@$?~)k2e=5 zO?`l%qDcQC$Yy5vuW*2a`G4K&JNduh`ridA(2-LBR?;M|8y$4*L=@bpvWgx+VRe+K zk#!-{iR9zvf%+dlr4kh7LfoELQr*6FB-8vj_c`8fZl${!FR#0mNIf6miWirHuD?SL z-jKMd;=6rZZ>~;7x*8Q{Kx;y3_D(y&t&lVj-f5P=Av3$fcfRNR4{95q*GI=~N*uU2 zF-V8tkeO!5uk<_1Z%|pmVbb^ij16W z{f&&MmY6O~qR#Fl&v)XO>4`tXlPHh@|6nIoD2>oE@hd?K6!zAlPYMl(~dAl7%)=p7!*twS(Qb9~lSWJSp9wSWw zVuqjHR{v=pslOft8ayJ%3I*!5Kh*3-3S=jnkY%VLx-?u;CxoZPHo%@p*y|siBFRf) z!R_lX+2!NFN3Bw$`5R}g`Z({a-9zqQCqZTBr@||r?wE2rl|dqTNKymA?gSheuhY)r zg#IyyZB6>!J`l;AlzRq+I~HCBssnLHPo;^JfKAlh9<#*KPG#VK6dHJEDv0yoUCN8? zyz?7hb59}tX-l;}o^Zia|6IygJdw07`n!lZ zbYjtM#N*HdHKff~$&fb_F;{0<58rYkG4X+*5tsFHg=x~H=G3iVd_gBL&m$95D5Usy z^$!kR@E!tZ*8$P~Vp?c@sfuCv+qCBQ>~Bo#p-nTqMivFQw0*)Ag?&gkRTY+8->5FU ztkcNOtePNtZl*?}6|v@Rs&!?bhguAbp4Wr%iC1M?Rf=(RVs#Vd;7SdD5^cIQitO!Z zH1XlX>+ALDYFZp_4ve%8x4NVq+*3}P_Zd?TkP4jM>cyXC^4Y0*xTGTFcc1?QvhSycCrP=eI1?nR=SgVJqSwRRG?HOb*4jo^i zA{MV$bGs#skTD=?bCXgX6BmmHlT3$dqD9OQmsj|SQO8Mjz6(?7L|${m7}XE5Ak!)( zz08BHLo(H)Ubp?Z5UIvO$Oh2<_h20~-32vaA#rp4c5VH4RXd?jjDCFvU$32rvTr47 zPiN%2hRMGeEgXYSDcaZuV2k1Sbi_3W!Jf;0g}Sya!lqpZt(h1aUHF{x_67c+z*Mb--`u%o^iT`EK0k!H^WW3AAt+!J-!^6=+ zS=2Scq7!VE{_p#ZcFm1mW!SwtzPBWNVDuL1lh4AUDH?uGn9acf_{iVZkMnJdDUP}aY$+MHlN?=oFsYI?A9cRewRm@5MVPH-kV z-8r|_cH0K!kScD`uFb2RMY@)Dt5Swx}dAATi+m_%0ceH9ki!hxb)&i)cvu< zOA(D4IW5caKbvazMO#w%fj5#ltsJ&4_@SNBn0p&@-vfx}&YW0LY=3zO*XHE)OALJ` z!Noo$#uc8#vfZLkEnjz$&Q1@=MqYO=G8(7yMxg;S7$W$h6F!hko+b;USI7QsE-VIW zLSCQ*#%Z=Bvzvm;bmmhD&V#N#Jf6}D$gc(BiEKI0;WvBP%#3aaj{X*KlVo)2oAd>2 zZgRAI#?~n{X48qldN4N*F=Ai>aC|bFsMZTXSye(i-2$JXs?=-3$j|Hk~m(H+rt`Q#-O0^Rv;*)2!O&&7*^C2+PM!e`u(YYDb&ee^# zTD35O8CK-TD~aS4l+tuD{1iFJHL1!IQ}3~25vBt0Kten$?^BU)b6YRAZSyw#oNK#% z>80OBePbWOw z7Djv(j2j=%2kT#liQl(h(h*FEXON+2&CfNxP>q;2m?Izs)BK7CIz04FUWrhAXrd>l z#l%AHvuqr);g21*9G;sq$scAIy_jD0)?J8&6KGT&&IpCE^p1;fo!8`92_BrxuXm+L zILRbe2mOUwZdxX8Xyy0BqjPS^>zX`5Jj4J=yk5gU>PTe8XEr6$EZ08cXmB8PQf$LD z1(kSJhn*PLxGfWVs3T&UHb&4#d+X=y0<(qqT>?=q8T$(%tp1$*RP5G9F|{h)mCuch zvDR0qtz>JZaK~nSouWIuzQV@%Tm=+o_w)WlAw)5~;9w)`o~4486QMJBym%O;D8PGk zn1=wiVd>(BGW?3?#-6%F6iYbsW++3h}xD-Knw>p zu6x+O%o@R{C0UhQB)Jfg>zYf5TGw>Nv6DJiFa_S7b3J)nG6fP-?@XqHtq*=*o=dxN zw6C+xI{RF}RUiAYvB#@o2$S56Mqk$C)UfczF&J~L+d}tIZci@6n|W>D7Y*=@QMi$^$cP^4Pn+ zJ@y@*_0tsMxQU+DuXjTXmP&RS8=DwL$K z*VC3#E1I|9$;nxx-(i1C@(7eS_6v7^Pnmg&wkK!C8hWs#1((JJ2odcOgj0A&Ey|Mw z*fBw(%?K3TT7ol7YVFUUXxb*{KG}|usg})%8sa53Hhk-vI464#ZP=`E z3yozgUq~2^!^gCuf35XgaUNSdSBZ33%ZqYO7)V?z76zj_2^#Z59Xp2^8%EayI66>I zaunfJ@PdXlP5dE0(sd%Zgp3ApOY@17mJJ+K97k*smTk`}UqF1giTq9pPiYc^&A>qQ z66Y-3t6Qw)VLcah^2lia)?WQ;qc{D6oB1!3Fuu6X$gkj<> zO<*XAoM#b`P_{#D4hx-U`Kl!sS9T1!DT1gAHAJxD)@ZLLBy|X9F*tdTXq1@zB3@?9 zy=wMS3gOM%EWA}PDoXsNX%HuQ+GZ$OvunWkk9 zwe&PrlUvcX`YcpWDVK%lu8my9XU-CM&U^;)pjG20JYm%ea=8>E$|J82;v9H`i1v7U04NHm3NLUlgw5U{lm)6P|4KpY6%GU8tKa0ES4tS~7omr+)%0Z5^eEb_<9+3zer z?b?@U^>;(0OKY7hvxY|Tm$ee64~oTcmXyoAoJRAcWDgK!F*I#fS_WDqMphVEn+e1D zrhY7<$DGSu9I#XEQd+7t=g|~-BWBfNN~2)*7Vvt3yaDOh+THmP&8cKOAD=57IIoTI zvWF5E79wwDTAr%0dBa$a^3Smh{K@4rB|!RUSw*SL&^+7|LQO|hGJ`Bg9eQrmO>y%_ z6f9hk^h8 z9UT4AMeHu3u$CyBqVe9`5y2?HZ3?TK4ZZZ1QICu|P7c;bwmBq^W>g`G52C`TBVHui)|hH+8Nmj;h^i zMxO9&AjD(-C>xI)f&FpruF;oDi(lZ!&Z{xldK-K6^-%`|Y~yWTceig%VB|QaUBZ?s zpY3OOv(<^{#Me7doUls>u3e%*FFqj~9mFvxs$B^dI#wnQs$VTyIwX%8 z(|_#dF|n}yuSfhfn%ef;?Wlfx`ivSh2$&I=4`tGOjS`El*)~nBOQMNj(3-;DAXAHf zDkPbHde80?uq=x@N^YXVOC<8H-057pJv4@+`@RuA_VVrhJs!l)MQ0yHNTRnsK+PKh zzwV7%!JqYVajc6iOU%<}AC!}cAbIh7aelKo* zb8w=b$xu7;agG?uUU))o-GXp73uXZ{Niiob929Bd6^^wSb>!uFFnrC0vf|h7_0qqu zI7SIgPHf;^*C>I8eY?}B8e6E%$3KhFQ-5kK9-cwNVqeaH#(&y%3X8ipXQOd1*>{f8 zSh~3rHd=Vg#50*o9V72jeN5fld}Je|Nh6~bkBEWCW7;TicJ|E&gUvm`=Q)!ZvT^#R z=;SquJZL(Ve+i$*kb1>$JAxxxj=Fr(4m9zKSj{SFEp)A;B1p+>s`+PX>l2*q6o$0;P4tI z zB6I&6Nj8G(caN+>@I83*O+Aq?V}_2}6f;HHG-s9qIv@cSdDs8jI^uP%k(=Tx+c@letMS|0uz zcGQ7i#5`vvi6=p7?3B>n{tf38{E(D#p^~F)MY3O`1^&Z@P~sFpN_5>&&Lm1TaOnkf zif(Vhv*|d|Vgg0dg_33JDa7sHH=bN^g9q4;V9FF3kwU~&J$ZssZ@+^k{Zm;HUBsUC8pBRysG97;i5xivtLoa>VhCe0L3#eW&RDq|CGPrZHeC)7OZ|> zV+BB-p|hRddq>6L2Y!&Pw(0%eA6ioJ}M_=IdIT1PHuPZQU&u&r5 z(^&1MOmEpe)y1?Ms+7~N1H#>FFb809vS7T>f^CG#S4V|i>u^$loo*Z4GCWj9OlW9% zHEYi$zvZ$V64FsF^lw;k1sSm2Pwt88h|WQ&Ol(oEM$}v))Pid{eu{!a!=2XdwX^h2 z^oUi4wPt5)$880eLtK^_=I`zDY{YIyjJgjDgrp`NDBuzPu7Nwn(W<^t&w#iI!DO9I zL<|qRwDDAJr?WJnYugNaQO2BVSHm#!D^|Re%Ms`PsPgb`H#y7qjtyjiuJ+muXuv<_ zZ%z>TUr;(cqS(H9xcqVpb1yTaY=M)dg$N$V3C;n!6v`3*pU-~B(9s1)xY^yM7#Wb- zdN9DQD6f=Vgews`?D5pV&59`8WQ*x^LdQ5nAe2JE5I*{63cLpb=Lo8?AonuOobijd zd?C>%$1=76KDAM+IyMdsV*!rLO05C|iPsKwpZ8aOeMFQ;YD))wqH*oV5)t4AdGN=x zTT6h}JI!HX){u~Gb!Lu7fx-zd=kO6jQ}t1Ng5zUwY4c3s5hN+|vyhMpqLhUIy7q?B zgB7Iycs@{{R|W8`J!2io;<**1?6cY6r0s=~NQBA2NOCMx!ddUfqdK1}=` z>0r;c^QzS_j$21@8pyTjH~R_-6M-x^)GRT)JMWkd)sD(RkGTu% zl>}!~5RCkhN;rA=W7vc)io(-{;weGxtQgc=W@N9Gs`}jlFmWF%-7Lk7Z-v`1GTS3| zIg*E7Yj-)Wqr!?ZO?Xtwqh1=AxCuB{03@c$FCej<S?`iO&v+#qYy zwhHrS9emt!bNly5g5(9b?ufmQ!*9O1Uuw1wt5_aiC=L6PIh{aDYAU z(|oRJq1KgNeU6oHYy;fbe&lF1!4_Pcj<+8Vx*QtorUNYr0nfdD>(F6YyFYHajEmyu zSt=ywXA7juHDAy!?o^R<@tq1_^B;VXzE$t``C(w1rg;Kl$;yW@9)6tkRIa>}Z}qT} zjI%GkQf2%7y&mv}f$*lN`0l|x-GhVUsE_y1v(*Eh)cO-cP^O+31=pY~Dt=!TR;JU7 zl=S2cmRSk!@F$7Io4C}#E!n3|lK_>e@+*_z@P~9GbAu?83_gYKZ8lj@S;B(`7No}o z7OWIna)7ufv^_vqeMtS7U_Gd!~M$ z0L+R!Fq|x4Z?{x(vF^>G6v z>4HkSu!S!9`t$HPGJs7+EF5D*#r16EdCgV7bHRT@Rr-^T2h#}pL!v15aSGp@Gbh6u zuMSEC@MWH8cCsZs?1ppb2LBSKT2Z#0&97yxRdc079e`2HcM!cmTczT>2i?2{7gu-~ zyABG!DhPP0eqNYl^Xd;QbK@d?P*?OUk1i}(GZE{M4h$vGk3F9dDNTO}-CX?OfA3I-X*zyuaqqKB&J(T+dVHA__ zAdi3`nD1YmdMt(HI*C`wVF=U#DknD&pHOtwH%r!NUH9<7IY3DSHi$~Yv*3WR%K=3l z5ero~!ryH~tWGNPfU5Qh?LE{O5MR$DQjAE8bRXNHzpanNb`H|k_U>EzfoA6dK!Yma zCiG3HweHS+24J61Ycfe5s1N9Hsn|&M5PHNCp6N(VxpwFwX$U`Z88Mt-;%}mLju+*K?q6I{Tz`2MhVM5$2d;6 z`XWZQ2BUpKCFGO|iK4z-GMVXKFe9A9&c>HqDB#3ElJEu7qX|AkbnrWhPQO2@1krix zu6n`1K4sDJkutw?(AM&iCn&zlOt72ER1Co;0Np$SrPl#O^}(M>G$s85{!PkyM>n^i zSe9=GuR~JmT|*LSj7x#DFnPg{TVUoQk#m53!uf+_GNG#j{^e)o0n_CfatQ}QqKxfP zk0lE=0)j<%9FKf)#3&yeZ5Hfa$Oq+PmluR_ad zH$>GXiob-jhH14d%IcP0k<3(V*^_dATyDMN=CTxeqeqdMDJ>xHgpq3w+-q_zZFS8= z??BZ+azXVi9;(KAjcVq_I#A+pF-Tvp3PH5_r0TZo{34{S4QCFT{#~SD6@+FUh5C9l zfXJA0aq}P+^nE}w|IkX%W3f0chh5I|$X-d~gZ^58HPq?fJEUKOAgnJtW)!}M{ogMD z;Z8Nn%W7&mGTozBAn`Rcv!=sPOeqy3H_?^NTWkscC1Mo$kz^B)-VBsy-Ac&ezv7@9 zNSp5BJFxM}(zHwNlkIGxc~A)Zq8<)wyIT*WRxba2aLPizSREPt3C4@ zk#bZAn*#Nbw4Bw@$zU{gEbg4Z>F6TWT{wV>1!TE>sz0cPq^wgxSXMOF^Q##srnm0U zC@X2P@oLR&pB7RBf9U<`eRvgb`^O8C1pU{Wk1%xb@6Tw>>Zy^xhwJc%5`0>xr<(+i zUk@d*fZ^X$K6B9G*-I!VK$AgF{gj|GUEa%4{$Lmrp=340ML!4IttA-Ct}pOwc@Iua ztlKmJuo8D%@~Vj=;}tnDS7CMFFeLGbEmA7iG>W!~c8rnS&d?AOl|z6cSl*Ro_cxZX zYDKG0Lw#Q8G(0dC7L^0Ks_zZAh29aCk3Gb4ASUBNQ@yLnw5_xLvv;nRjTfHqj>>7a zR(YEV0$vQN(df&K6i3N)sZr$nWB1J$%9#M|MHe!))|ZtxsBVBRU4}OEePz(&UkHsU z6$_QclHhTk`#&a%zX}j*on7l;l*Em*rm(3bzLuN4??rFB&bPHc2jdN(^u5(s zOIojGVTzdOI?Wm9c&iNx{r&q0;b4>FguzKYmghtc)5P`h%7Qvdz1cH*cpeYWa-mu3 zKA1w^gCOICch}m1ceW zF`;Hil)ffdrjx+G!2kK#{ye!1s`S{&MoJmXcN@fystB76kvOR=xY(@I+*dAH`RQ>( zW=CG_$&hK6%v!Qnjo*MP%F`W7zoulyOqAITI1K7^=5rK#>6zy#i9#j@QvA>%3MYhlrse0tNXeWs}U(gg^gl{h)nN6_FtP5e5^vEsCM$8DTuK|WT1^`EP zU;u_A>vn=N8pZo#(>GLPZe01@OUeDiWB{fD#2QCd!c-6|l{_A~KZ59rlna-&GPsr+ zT|s;DCHnx8jhM*-KG94#A>z=0^Xlg9a=l~-87!;b;#U#*v(K^xkaaZ?ix0)}vfT}U z(GCi%#*boKPxnzLxzIt{nYG7Rw?Hu=g*e?**xXCs_5IBUc=T-5OTn*5c;STjSrU(& zwVV~|EH^)nHg@^mnj*ers6cVilNsEp$+ObX+fIK{Cf4f-u1foIxiJak`5R#A9k-jI@++)^yCL~Ho*sXThC3s3z3k;eZ(P- zS=RQcg%itA#G0Ssm7TBqV4uS-Sgidj!94Ur#CN3VN1!{N&J~*nZxEPfY*j{q*zQBe z%xd>=rD)Ym5HndTcqO_}6J7sr2I8ncPg2Y!m6S=HDjKk#od61K zz3T(O`6GY~q@Nm;gZz5%S&FC1mytLMxtO9<%s;+Z>auamz8M1l%FOo$y<~qLb|tUZ zDt{=ehAl9U*TFCD0=bj2*!1?tm#3=mg!bpV2hc#J-nfOE^%l!c_4Yj|2t7EQ)}sUv z)3aN(#j$nt7o~ko`|AqA#(U2VXAZ1CT4mUV*!RzedO1?pOFNR+s&h|0IF5!d5@z(M zdzjK8bGK9A`hyQV-Gb+i0o$N?>H2$(@cva$G#(BtD*UheJRot)20Ftz`o8MRrqS)k ziXdRKAjwBcq(ag_8e9{4AwyRsTC_ZdjpsFVeRLyC%p(8~wl@|D1%=OljrZIJkVa-{ zgqL-2z;YGXdG=rlVF7RT>0M?ktRZj?SkZW+vdM)UiDXDTNx`=hUDyvqe&ZQOF(>)p zpnO1{9gSKY{354FNt2@0$2Lbod%^)&j_FxRGn8g&sW$0)SajG%8*K$u+@xAyPYidn zUuK_}nAM*|y!qUwKYM79gBxiKG7o(qmL%M+c!9ygkex z!+f1jy1YjDf89YyKgxh^CS z;s(E1RepsUmXjXB>6@A4i(0o%w9Pjl<#DL`{ghGc-IZk5AH3}2@q;BRwB(TF4>(72v| zbUH)xYAHj#Z7X-AjD)0Jj}HgE^{vO4S4qoXet4c7GzbQ*+j&mt?}eA;{cunI>45RQ z!Lynm9WM_gAKKQz?+&jZh8J2W-+&b|BXKM9VZ~NC;(0$!{HUNnkcMhbli-*nfWC#D zOc07p?i8;JY}gK-+bMNiB|+~=G4%EVkc4nZ1b2Qh95rGjpTh8;CjGsQUIEyR=nr^J zG5Nrq-c>26v+3R9Toy2sSi(4!f8NQ|t~C3hK9OIv=V2GQK$cz_Egzu3a9;y0OCnSm zVN|$Ib!oA#W`O8+M{fOlAgXS4rq|CWbPG?-<_d19Z9#F9gq4htvtvPX$@3Va zryED!D!dtcEn2ZeRkpyQlX$8Bjp|nzUhuTnzSe7X8+)OPf+PmJr?obP)SW__XwDto z)9LwwUc7vw_8&dMukGaj^a#Hsn*Z61GOej;{~H1P3m)Dj1{KLV+Wt5tb4(EH=^-*JE5CsbC#8MV}}I@*4?!rA%VTT9tJ93|)Y{C0RdT;m*$6w^XT z)Uiv7Q6dSI0!fQd$knO&voqgX?5V4ZdW4VuW+(maVW0UsKqoa(VH;!9=+gQ1ex9wh zFCJ8Lh^Cu4By0@TG(i8Geu~YLeYIc{)9P2rHi10Cay-4dsS7?rH|Ouwqlr|ayyG{A zE?B7PW;+ThYob;2)K)3R_qN{*O`^G6l^*6Gny|Mp4G0wklUi6}v&ZVJ3O`xn%rX#G zATw>4BAHM2D(6drxv54p=@6TT=!c2Be(kg{`Ax$;YjZfWf5kCtb#1l6{(&9X0E6CL zrTbw+Zm*E9IgoE0n^%pFlWdzR6G*nSFp+TnMrA^q4)@Wng72z}gD*fu(jX%`h_Kq% zACjb8Krdl^s-ciQ=#7s3LRHjSlcv6rf^HnFn1!ZOc1M0$V-@v0%KGA?R&E^@m&pJn zv!7P9@KOarosS_0QXVRMWbZ{6s$ z3g2~IS#l=B>#jMINTBbq))xHn8o{}}xODv&^7v?-eI|2+N>_Ct>9Qa1`s|8(!Ut+U=Mfs1}&{@0T9d3pOL1c>h_-gZNo+d{r?x$%VtH>+7xC!z#ibl!>fl~-Bt z^&t%oXs4Y14pOzt)EHtJhk_j_<)t7Ag4*Gw5DC7TV;D@5y-&trVk+PU$5le16ot>S zRyIiEH6a)tINs!{7zEt@F2|tP)d`<4K?N#6xu?UG&VDnUCC>Ra)|KyjXLovm*zDKv z`~`4+50?(}i3dzqWeVVYhO%#T3wm^bowu$QmZ=+Ip@$793`aNB z%5ffM07{z`rQEL^$p$dR@8>ddIa9Ud#$c*HbAXkPxsSluRkTmNW(ZyJQf_U2wzt|t z5mp6oIccVq4IA~>3$K7EUSU9*#pVhuco)1>R)1BNMcY|`n?VedqP%k?E&oZO`PGIQ zt!*#MZbf-m`7faVC|AA|;Q-ha#^_miXan6y=gr7V^9r3vN2==^k2I}eWp=NID=>>& z5mjre-#wI)HMFr_vSFbQ8Z#BB$toaomb2|N-UBWLbHdmAb4e^+bw&4es;c$c-3#D* z!)iv!v^%>qg>_`Qf;ZV~KiC^$+4dMs8M1v>jgAR6@i|j#U4dov)iOJw@{w-|RQrIH z>XLO*KYI_Z7Zz zZmmKA&QRcav#u_icaL+5J0HL2l*jGGY^}bEoc=oSnO2^;LL7u4)xpNhrz(s8#-FqYgMkfayuMB5Tb_=9(r<6uO$Qq7 zCPwmYYDqdsVJzuaP@u|T8%o%9)s-H0e|LlF=;A)79ui0py25Tzc{SWJ>A1(twI+~= z>Z1jr1V`N@^BOu!e?9ewW^p2rL%n$EKh2DX&5T8hrVP~24K%WfvH+Nu(AO-@pL%(NJx ziNpjuF%%@eWiwzxv#-U682R0{`w<8*GsI6t{^gVh6p$($%6_BYlj%G2lx_#1lv?;| zBEW)CMNp@3fXJs4f4j#;CPeilnIKm=Z6W~Q*Iw-J9=96IN5hHmy8YF+TYZG5dct4h zoVK<>*VvlBKy}t+#g;|Xcj`it+UkbgN;zbzO*t*S69!>37y}Quq(^aUh(#tU1_>>X z_CRKt;t^tmM^c0UBS#K>kfcnrrTD{eVCh@vPncF6T(+%>hpNUHlHpP0ggqKz<;E{q zIgQ7TU3C6+V{-H5 zh3SAqdsz6X9BqXjar1VQS*|HMdeUp%$TV!;$#Y+l&ipv^+SZm0!0l;(@amMBhX||l z=s$YzE%<>U(EkE0hFpvoONw7W?yRrJ_l6FbSo$Bq$joe<|54mInEvMrfMLxwrwuj~ z-&ytB#LRL;BQwl9ERXc#6Wvav(pOr;M&@TqUyX{YyjshJb+By!End-tLnOz56x5py89Fr<|3{h!H|jr&BCy|Ra1p}m5g ztEaOS9YISD8iy&GsZJ2Nx(Y>CRU`&Xg|2#;?PgdVT6(Z25k_zZQNVbRB97-gxm^vB z5h4*=2UQ$rBar*V9!Pb`gj8i&rfhE4+zW(O+b+RlDODAOB0wERgaC;^#UVUEiQd5$ zu^2Ewk&pvCaOnsM*&fj<*<^c^GApDczRU|L7fHu}f|xl&`D>tH&Dd*>n=Ytut^So6 z!I^6UMRoGBrk`TFJ`*_i zaZL{GXIBHmZuiVFL&@iEMMBTfEfg#|O{?E1I0G5pl-3m_&Rudt0Amox-S5vV^roPS zt@>OPB^ptr9g)W&(yiW6u{IDqMQ^YX2PiQJU@lvM1FXp&>WU2OL`qIE^2pJUZBfp? zgxK>23g*-4|Jt`<{z6;X1E6rio13_pdst&`pR9JoHJRc*Ow@c(dVpuqY*{x*nvv(t zYt;AU_t1^U6vM%PT*19#Qpxw@0JSN8ZAzzJyx8pR#K7My3@eV|14kZX6!NPYeseIu z)&15jAjNa8r*>KEshOA3=fIhSPfMR+t+tYJpwnxAwIh_*kLyd3Wg)w z)Usk>wj9FJFh+!EX=6&NwDYAYS*T1H}Le%1_ z^^(aIDml_Mse82u2U#zOZ8j595OIHSy}Ht%WGpaNc)jYZS>92!G3F`$A(H;(aC0yKXAQe>TwG%IR6wS=mypSw6WhvqmSWZ zE1yx0(r7L*4H1Q2Yvx_ETmCPL*en!zz2S2{7=Nh5n~L5T&&Rb?HGZ5+eGcqh%MLbN z(3rA_7t?oHQ}zpRk$S_UZ`C8X!&RD4NkqY(%LzVj$wW_3#g@7to5n1SP0f}#4(qN7 z&?uVKOU)mBn76m~r|`N>-qxSyitg{WCocv~%5>5=2UEplYs=I7rl0o<*=26+&aB8z zlSjkty2N&{+;$PCW%*~!9q;-p_8z#e!7zMZ(Pr42-sG!2H1PH9(-ASN!}H^SV7lDC z$Q`dGL;7MkkY2!98u z{m+NCfnZdD<#@}?Q!peDLBN;W%Z6@5+%YlN`w`|9uf9xPPEV3cQDmG4OQv32I!t8h z9tD)~fG9_1N#PGj9%muBzpTG?FSjr1-L-i35D?hrVS73KL<0r&$M6|7o*OyRgdrYo zJz{C5!+0xp_3p;qxP}C#55rT*6!iyD5XtCF5zQZDJaG2ccj8L))e3YlbF9`Y{;Oy! zFYld5g37v$s%2OA_R#UGz&#TWJ~S$%VE_<-0aQHr6%?W}8C~}HL-Oon zgDrZD!VpW>Yzz9N37^kfGl3!o5=56x@uJ$gvEvZXBcvTcMZKOb_QoJhT-phO2Z(@f zM^LkTkvjdHL?WON->!d4!J)YrwSPc%a@r^=A!_6XC?ry`oqv?Y zYmmHX5^E)GO5N(C?3L!i=sp87*9nQ%mtgs zTm^-baQTwDfy^Q9;ZP)o6C|*YxVL*MPc?o{l4#PtrL~sG%@?(R)pFnrS0i22nCwys zHDg)w5nK#=ae&N?Id?^1DAuV_7$b!ONq$e^<$^L32ynQC+CLFFqDcf}GC)SCkYfr7 z22aZJVc(3v5lX<2;6OPTZGpsBjr}oIBktq~kZJ_+mgh|poxN7q9@h@K2H^ATofQ+< zqKWGlF)9G{4~g{IGMQXV28MvLfSO~D)0eTE(4L_N4@KY>YU;{?V|rp+#k+-+E0Dk$ zv|i(}m-p5_ryx?<+BbeJIX^R1H_9ts%m)<|D2pmf7OoM0Ik-SWPEghm%xa;InareQAaO+y+UDat@} z0LI1s2B(xSQkkm4LCyo#CRB$(g{=gb&9<_}BrSFFxsE6kIvu9V(h$Ag5Dj(#4z-jJ zLOLlJm#Bn9#VZCdJ|LcUzI{o6XDF`T_X{~YUf5tCbU0o1N+%GqqHDu6b zDQ`Sdu!i94EVs_eRp)?4rO)~txr!!^%(Iu@gkO^#gy| zAyP?cb%}1vrjvP-RmD>N^p9LF95LX<)D090EDWoJbon$%m*#Rc&a?Yk zl~?u!I4M(nc?r3(>$ABmY>Kde?(a@%U9RoKyn)TVQ-9J2JbrLs`R(hVux}RzUoY!P zTfO;MGv^R`Kgv)R9QKfIbg~I6+5*KXm!v@H)ZTUtWY&M3!HQL;eU$BeydvC z8hw9B7a~FuTMrk*ungVuLtXm7TQuvnSl=8ve>rh@X5Vv)yFZGb?Tkm$ffqa+@g-J6 z%_N9RwBJeL+MlE^o()&cD|j`A(Lf)M#M;`?v;=M-2H+WAlg>Uaxyi}B^!yGNdlU0L-+#wA1qmAmn;nLpDdl9 zO#FsOFe6lX*$Muv^oCbSFb!;o!kvOfP@{cnOmi4idBI__hUjr%RmroUSDOLgFUsIF zv75_rx)Jn;k8ZPZuh-YIskGTa*Vt|X+UYaPP-8q~deSUw?}5bTcl>%Ev?e1pO+xG7 zn;15%ObN)1(G($7^ZOI69$a}WBxQybAUqbSfJGZ?mjpncuI-uDc<7~~jo#VYj^0XK zRxsUl%9_fd!u`tNHE@uyD&n;7cUhgT)&L_4#0) z+bV})y0N|gxo#{S`#G$tXLJje7PPn9us#l9jt)OzQN?g?n%^qDo7MxJ$~r@ui@qEF zyiFFkc#~!vT0S(cT!E;AkWr>(a3(KMd9NYi8j|naNEG*xm~7Tk($!orWi08n;WTZ0 zy6npPYob+dKOMYvww~}+Z&mr2)#;OsL!tzaerXt0K*cx$vFgOCr}N%b4bH#jk}97Z zuh4d0%%P%1U3GgRhddOJpFl{7!DcLL3?aCG;3J{ zZZqj!1p&cF5^e=rmYX{CZ!C>0LJx|nxC^L)jYywm8#~rGb#EJ?71zT1!6~~pM9yAP3f#{B-fFyJlT(t=TGeSxj0;NOYr9)PX z1N*dqmj)3B48yPW9c7dRkJYj6qVGdP3^BzDP+yGH&7v?HfT)3mg=Hp%dy#pC1dg$6 zOu9;E(9z}@_@MDY@G~Bf){fk&K2GCR1^vv8x#jYas(;Q{UGp zNJMjM!%K6!N%H$7$cGIK8DB%q!of0f%~R53H-TUiNMD#RvIy0#C&`&q6e5}!k#QwP zzF39;tS5y9U^14=p$P(88MO%%H2@b{H1R>|mmUf|oePqzt|*`oN3YXzl$ekrMO$jm z)j>!V7;u$gRw6;xn-n#5cC26Nm$V{kN!BiWr|J7c=bwOyE7)9bEu7Tm@pW%>d)(a^ zRAUC^2G`p2?G#s5Huc6?-TC3T#Y%yG_8^mnVYS@|r2X5f2c|UC8)ZY%CJZnR7d}_U zzFF&icY4@68PxU4dal*eEB(qEZ0&rMhp_*Ce+U4-@#nvM<|oP?Jn7V~g8Z|y_5HN> ze0-4xAHHGvmM+7O%lCcv9iC->W(#79@asN-tM&W=H7@)l+l0g&+knJnnFBmJF_Jz% zUL|%l!(CirWC+Q_ePRbQo74bYPP)$-6^G<9^`p?#e)xCJ1n+B&r-eB=xS(=YFY^&p zHVtzc6gZNFnczq|Q!n0aU^tm0*1zs7{wja)dk|Wspl9#ezExezm zy=mz_JJC%mi5W;e`W16x!B?<)!^~>qM_zu9!YJMO|V&No3~)afSJ z;2vk=v)D`P&$NyXdA5CtTX|`Zru>%?Z}sxOm<(h#wwXVZLPCy*8*H;2pYc+sh|hZ- za}Hg%inke!V{gcV=Y)p3au2#sA7ULD=KA+GS)O+2x0^FKEmdajxF81@D|MA|$>;By zCL@n;n>NKQbaG>k@HqLY@shlzf8+8J@D1Z_>eF-_rm=vt%u8sqCMr}`O#Gdw*Cv>k zNN0ViXIcEbJVSVu!nw^xo}3V>vSTkWG!$^&HEt>m&H&;K+ntY(gMZVSFEG+08rKcR zR2X~nW6isp@_edIk3-Yj>`;*x+R~3#KdMC%F!ux*h?$upXh~mcj17iU$oQ^f1KW={ z)MElAoqc?wCK9y1IO#KKMcm|mGA!^ zI!uj=f)$q8X^IQiKydaD>1*v)wl+x*$w}?h4MT z*0aU<-f4Yxy>7MwYHx#8*-Zb@b-=Fk63m?mbW999U;`VW<tQvEQ<>^hTRv(sPYAq>m7R|)#iT+m4%*LO8 zWKYd9+We34lH)(eOHPLWdAnNE_WvC(f05$(@ryE32_AcsPk%NRtG(}X$d$Nq+BaP= zkWw|2i{c1!UUznYI{!+9HQek!|AB<)Ts3#Uy99z$>r}0KKT~D+`1pEW%A!WBQsR%* zXjq6er~Zno;*`5A*d@6ZrH5br^mgXxziVO_O9BI^{%$1e`nv0d!dRhSjd zBcG!62D2UTp&O3==axlx;ni&r3FDI+RU2Rw6C&>9_FQ8NS2*T)(>*WF;RKn@P@M~g z=*VvZC;TXDlGqwQdOa$IyJ$2+D|SgM)gG_}A+_YDhRRW0HN(2=L3We0Xzut(l>2XM zXX!vmsE_=_SH=(DRX>h1hzi|=Re^pQoy-8vz)Jl>FoINcp!HMIT!?Y_Hhy%|QTFwW?!~wXN zY=hF6Lqo!CVkq7SvL0|Gl-TSFWL8UG-^#Yd$|?aa&$069Un}<$VdVtSZuXrG%3HrW z=$ZQ95(&GhHEf2X6ZQQIB!6m2BgT%-9b^;AK&H?D!x=ec{Q$qU1*Dtl*9RH5%H_+& z{w7{wcN;S!W9}P#? z^s(yC@U;b6={#u0Al0cnNeHY*Te^Uz=7PP}9OdY- zs28~MRHv`;TeAZe*5^h=4Xq@QxeZrVym2&9yVFJxe74l%kn$QE3B9X3(b2yeiJ>R| z;;p&Yk8UoOf2dnsA3M@Cj&PdOyy*Nmx-0I#&@afF!4G$TMtf}d9{$#v7%FFn^ce{uUGU<7b5b3v?&S2K3#GcjQz?9?@@IH7V}F0=SXwj zh&)+sjnvY2>k_kUbH94LMt)o@<&9DPb)2SNzkj}Js_`7QcbF#LTHt~z!C!MY0uY+S z6at!#6cr{g-0R@TS)|xgM>%@~fZuA}$BTvc5@fQq4}5 z8QEw`|15GEd2+PjTp479n{;lndK&JcyX4aqRh4fXfS9=k-r=-1wv#=q;-=|Lt>-U+ zh?ZeJQGjv#4zIWnbK~!KUbY~U&hQ+Q_rwob8FuzdXH;{VO$+r8Jd&}N6PVA2u9}&I zWU?kFVElLP7Zxb8t8_h?jZ;3BGRvSXsNC3FrQ{+YfUTm7}r zmGs|gM;uZaz=5LFp%#}S!(bM0RXvm|duscp^!PT?@Iv(p*_TXJsc)V7ep0DnOmr?)ZG$!@D#QtGV zDcGjCr%>8}EyP<$zXjYR20k^Xh}JU)B#j&gQHzpg~dX-A3$o2tE6K@bZsunbl=v zBqvEtGfx6%Q4!Z%*1eLme9MCN|BIT6BDvAHtLuIGFjL zamkASL6#H1#cV7rZMCcGOtmX*QJ~QB>}O~Rg}mg|-UH+Tn{!gOCxZY=b64MP*O$za zhJ}7}4gJ;AF*?!VCQBMpja4gvfH(+XtdUi|KQdj=)LKt@JvJ%cBMv-u?Kz@$r-sbp zWG(zks85dV?UhdT!ODV2A|3A2e|697jF#JRB;?e>pxyO>!B&@wqgYw%b4+?&1iJzB znr2%Fgo#jGueZKs%37X7pHRRDv{W&;jGDxyS9tp!zb+#w$>IeUH{fDzIh#Iewk{cH zW8^;f8WlrmOTRb%xXT_((@~aPUeX%)A+28ek|rZLg;Sgc%gT(S>5qrmNE`9T46DrV z@%*NpuBS`FEh5Sd%WkVQv77!S(f@a;FnQzvb(=DtDGem-4Y!lW1a4-aAbAx%^r!W4 z69uZR9(=JePW~wGZi3}QedJUuEDoQy!R#4!jtwF{8N;+SubU-P4dhEs6@^YunOprB zAB|FBFw{W7(r7cbal8P(we}kt@ny;+%s zYj2d=j}P+Q!wtLrwr{doN;FU6`1!FNY9vpv{2Z0uuv8?=xLTxSsEV0uqxM(F_o7{m zip}yt3!a6_nr?WZ$yZb2+xq-v&kY-s_U|gg69`XPRQ+GYEu^hS%R18)H5Rul)V9$F zGUkg`2I|5m!?F!;Ed_+Ty2uqb98WGybYFdfGv;cm=$vY{-kr~ntx*xYaZLKqMX|9M zlg~*3Y`DDj&NvHT++m_58M;D@F;xLNHg(E6-^S`dR)wV0J{x#r6B^NxrbU9tD{!oW z&r(hmMKT#2ygkfMyB`X-kCCV^H~(Bk+)|39IAhD#svmuP@CXe1pfI%9#rFg z3|btm7;_F#G^=xsmsdRQYE+O}!)Hdy^vjTraT!UTbOz6=PF%eXxgf!YmkJ+KYP|Q2 zUx;jqwqQQ|9N@fse(r&Swj?64aFjP4B@NvURA2`pZ%V^VXjH|`_#Mx!5@#R6HyrUC zG6oJ`DY+j7_?ANrV%98@@`Kxa%g>Yqu`ArrnHbPt2GjG!U-t}5jz6Lq}c#FESbvZ%`k-JDaVtXTzd}g#%QY7i@wn@6r zW2icbQilE%pPfvU0tTZ4l=Xy<3lNn)TA}qx16}s3cSU!e1fj7!TlXH7QW+83c4nG7g0Ptx<7teN5o{f%=$x3eh0onL}+IIrJ-b?f#|B&o^-h^0&-kFU_WK z2+)Mcn@QQzEHErdR?U~L^w8^Rx-a;eXeYC`fs5cZ#CCq#mJL; zWA5+iZ;6dRA+JrT(qx3Gr(e8>1G;BOy%rOaCaY4m36e34IW}s5fC$PlW=JSC1|g}A zMc97TUxQEiVh}ye%v;Q)VYr%Fh6kp(oDfh8;?M7WJFD^K3GQnM>_bS@7kEa$35CO? zh)M_dv$f!m&uliHU0Z+a5O}GuToa4^JYfskjEE!QKtu5Bzc)y;3UIrhtFci$I1k5HK_o2=?lO8$2-=5B6 zD9?;Lw3Kgv+uS&<2zJ;M#%0UYQ{KI4n-n+?W30-WlN}m4wf4dehT6#y9u|8_z?(N< zhWSM?2 zx_JS%iQAQV0C*iV1V3}v^!2uLh1ueu{$78MubCR$?MwJL!$AWgG3JAHOV4Sf2!HUP zXawPUr70R^F+EhVBf{r~G%4~4Se1vG(k`!LJefAgXd^Uk*pERi39HWgrp>KnT% zy^F*NS8(ZqYTP9qAh`#b!mG2i7s^0c`DXTc?|`_;(n$eLzk9|h8nGnX=Xe(Iq{GY! zP$`9M1mPP~i=;=+e-KA=vNQ6bD7Wd^3z8h-#p1Q~2?_`p;EGCwr{wnf2DmS$fL-HA zql+_DfP}~lZHn=7xL?*C;C=7x*39&o2=V;umsx(fRE{ywnMHE6Z9wsn$xL!iIv>LS z4_5I#AhOhJb3Q^Y%pP^5v7y`5mD2a#W!OPZ(F51mWNa}0y?a6c05g0D?j#_v|Naf# zF1havS>W0rUOF{1NrVV3Ir@<|G@XrT<*(J4MR}ZMwHBQpFn@$IX{mi=%N|WY)a=IlgT$RFz}nXG(Me$Nzyzy)(|zcdlyKCc;$*z0eWGtN9#Ut zTwz;3c4l`XcF9vBC5o9fX`nU2FC}fL*%oZe+cw64PTANicp&EHVx~p7X&B?ylRY&1 zBQHHkT3Wc%df=#iKgZoV*Od$TD;HeE-Uy~YQ8M+b`T>dG^7snv zJT^QS2H7=OmeBAtFVPG!gPtX*H|HvcIti(e-~faNH+cVOkR|XoK5c~V9<0x%9*5^V z6o^U>Aty7|)GE(yVyHg(No!ZpPV(+d$>3I9)i7{{T{Ci9*@?GsC)Jee+8OtfB2?6gY*aj*Q%@r~}!Gw>#|$AiTy+w{K#f zYPNtRFvUUEC1<3iJGz1cKFhkH4vBSFu;t|<<6Ose-{du%Z6qjW$lTbE{~|Q7KwjlM z2TOowb6WdbV`+zF5488(XugU{h{Y>IExzV(020gIqR>zMap#~0Ee`Pv5u!9*XpFRv zz%RxDT76gNN#P}mc_D*gBnqANP>=5wFSg}${crj#0DvjTeDEg2zH=K=hSiUa9-sOG z#RzVSdy+kLH;eRY402gLQVn#w@ayHw;}(#sh`6tioG%b(!4$nKlUCo$SP2JhGjP1kmTdoLAeyBbaZa{LvyT z4CkbApP*1mnLmT$)$;2C)_@Y@u~F{6tHx|1Zi{_?&AEMV&scN9%g*a~PdJ?PJg*?B z zqW^OoR*I(dpN%%eo)7iYvhrU`=6#~{L{^nM`_T|xyb|Y7Ic;1BX8jZ*YEq`=&xcDP zV8UNKW==?ue**ly*I}>wj{WGpT?gMUrB9tN_{EyZRZ}J{8vHaM2SWW=`VpZFpp#CG zV=^;EOwmsZ`#aKuhtpEyPM$Ak%rGeW-z~M_9axvC$2aySJ)eRHJ1zQlQ0*q)*76{O zHP@DA%1_U!VS_XCR?V2_Za3tWHy)W!8}PEt^(;0Anr>a^{1?6X08TT#U?tE-y|t~^ zBSIeY+4Nb@^}KK_d@fhhP&J#YJ*633pK?PXvlECia^;fC+VAIAzfJ(^_cs)K#L3!c zF`6ImrY{5!G;$g0;p9gt{Pm0`cYTX}Z1&IV1zg|06!1|W?ceXK$FaM6e8FetWUcEJ zKaR?1khv*;(f$DEzJ&9?&dQCD?;>WXXbJ#!@dCId?pxP-IO4)^IfM@(LyI0Gs&0ZW zz0Wt|pq6G-k3o?+a>3QCgjiP6bSSh@VUOw6ns5Fnd)CHUg#TViJf1wk2CkIt24%Ci zv|4ED&cWRr)II!rJI6Pr7T@a3AcHvr)CZ3s}mW7Gq;b1tB_ZU^1C=0aH@= z9fF+7J?{nbQ%kSkMY8lyZtACU5RS{$-knW~@`mfbpsG;TKJC=IEh@k5=E4%`m zXFU<3?)dMJB*O`wu}0cZcc)DGUmn>hO9Q$#!$;wWRUT@z5sXwwdrp&WM>xA1PH}R( zOok)e&+EY*{<-A%3O>k6p4D;(H>l_weoycXtP9{m7YFzv2v4-uYaXr0_M{X8 z&KJ7-kWn1(8}pZ$vF#NE=8bMsy(A|>0qYS7lu&vC5lz7B*6jgG|7Q8>BHt)^k}%r> zg9-}EtVxH^APta~6WKKCsV4OP$#9$5*QOP_b z5s82bF)N{YSMFE!Yx5jty@YiakYPEqW(+;GK@9M=jjoYsX1G+H(wCaai%=oVMpZ>Y z>~+>H8i9;Xp!_q5I~LI51D4E`cw5sSqDz4!x~LPzE-_d|(t;aDcBSt48vhSt=NKbO z7-s3VZQH(W8@FxSwr$(CZQHhO+wR^wyP51JGucd~QmNGM%J-eB_dMq;%hfv~lnHF( zTs%m{>&?7NtFU*wVib{4Yg-2<0#_>xODmSKW?=&DuYi_d3tj_qNQXr!ycmzl`zI(UawAD>R81{9 z7T_Ctz~NnfWF@;AzpZI(wZQYt(cGu@JL;qGyf)=f$aXW)Y6PT#Ds7EaURHY7TuV~q zYFBARK1PY#EFg=DD9eV9=*%ldy%y*le_`kX+^JfDRs&7u-~Kgkon7`ZZ0!Y~at}^V zrXW3(DB8!&>#SEkHMBuj+y&XVjcsNkGI)l&oF#WD9|M5PZ+R~6xYT`Qe5wU~oey$U zmhHu7=nBoRyp0Xi{eVUh93_`TQPbbNNtd8~BdhMO;X>%VN2$LO0ouZ?ka&v$h)8vL zv08DdP6zKAT`?4o(=`ldkTgF!P81>F8Vd7O5B&Qg_GgGI}P8P_-fN{`+K|qkNESSbTK#(# zW@Hx5cRTMy_PR|ASJ(3A#~jd?t;R!;m>Z9)Gx&rIS{s2*C|gw@FONQS(^NK4@ykE- z&|C49t10*17S;dA86|n{AN4XcxQvdHX&i;VUZ(a$wEA;-EUS#aRSFwCPxnNj#=N~? z#{}iG(Cf#qTNl7(N$cxsP^G(xeFmjFrdP8S2zCZ~nzzdNn)l~=Ch!f5yp#}LO5X;h zb!ZjZWiTJDil}Fda&2smLpp%QNygy=FCWNef+;$&fN{a42P6Q}BF`%-p0gg50~#2^ za*OzCO|5)QP2@$!n<%gXOK%zbMWfOv503s>9bFAs#sKwDt_2m*x67^b!@kwxsxh%4 zJouIPiB(ojU`Q+vnHccqkuevGa)(HaYxu|L^y-N_{rtOH`}lU4S>pJ;_@){`>T!L0 zRf)+M=fkZ8Ivq*ZGZz>y-QR|u@a*%2*7bNm`O&tQ8oVn&D{E)D>zIxfg}UMD+SMH3 zS|Kw@Pl)p2;a})rB+{h}hYH?mhA$1{WYQ6;R^}E3XkNY&WxJzY{gD#$ZrnG4&&RVxj+Nda3u>Cz9;4*kQ_hG{?TW4H4KMIV!yUyww;b6Nj0+& z$?GC(64Z@|x6&KuP-S4sDbk$UNyH>d@XwE@OX9=%=eZ=c$c@~3Gz-4sW%)TK+nKkD z+e+FJ)*~553nGhoL&&d%-7_5lQvx)%P=?n2#R`vsf7#qPjXp=?s0*({D?FQoa(i@W zK$e6=Z1N&#F;;u<6gbzP9zV8!0bIJbV*eXm#rWSvU9kVpbyc*6Wb7vUe?(o}SsUeL z#=oJ&u3yaitHbfsh!{eCOeM>LRhE_0+G6spbEMiebBA5v+5 zKbAVZe71Jx?tBqVPe9uiYj5*ZFkf$fRt$$t{Yt0uzVf)KemS20 zV0|@LV1|~0y#Qev%lg~P^DNuzP4(+b<-b8>sKB|ez@@J3e5sk)UZiOXsV34P&~cw{?O?!f0M^#Fs5z=bwA^TV54;Dy{o;%y_#| zJaFMP!&TL=lyK6`Dwfp);nqXrmjb%SVfqz>Op*te!)jjY%qP3 zNWzKd%8KqQYT9748^M|Q-3jU;-KwF^JMFHDZrunzxO8t6 zvKFO3&kGkUdNyc=6tPFBrpaOaj3?$yp}5W>Ky{jfg7=kxD5 zt;bpCG%P${Rw%j`J?QRa1EuX`4;u(+P~@Xc2Q%YVlQ+z4J(iP+>WI5O3HJHr##vDr zbyyv)NA!yoeKonDVJsy3ax3_c2URS0A`l$*Q)4LVFfqJJ;jk?2#hGTHea`7P_}b-L z^@ZCB8%`8S?6IVP5yAm3v=@!*a{bne8ESea0_DD|{I!DdKmZ(B5!$@nQ0P>(-Fj4P zt@3-ciztas#2-5y;Cx2)ZwCwP>&m`8o!K-UnL-uFzQyy1;w&Dxa~jfFoLXFljUWJx zJIm~dtq%O;2Mx48BM@V5O-`yWdPgyRINi_sU_Yfb+y;>bXr31@_w`%Si~-nN!KZ$$ zG-mJ^b}O=&?!^Zj<{P)U zgv+z!CyK%@(@JWw2o(nes0@ffR)L4LO$^U)s$j3J=j$TsZL+93D>FtjPW_3>=5yRO z2Fur9ls5rPUIqM|YZ8jT#zN*BIefP=n2Tw`jB2eaQdvnUHx#=IPfiK!-O(bZO7-`+ z`Kn+o%)pcN%tM$s|0E@P6d8g3l;e)YJFJ(3WePJhB{y|5_jqI$zT&;I>QKlLKH z4vKYkZXT}gnKRv#LI9yQOAk0BU~Xa@iL2N@SF$#6(Q-7GI5LL0ILIdl8Q>7%BcbO? z0rTV6WFNwGNzVgt;dIDDE-{J;XFyo=s5@9P}PVM02Mp zJN2GJcOF)hd&~PfHY;+&;;aW^UKsRhwN+oF&yn)v2hWxW@yg$PS)s>2eCqc|G8|g-s?uM?Q(k^CSoXYf8;iu_J0s@&R@*Q??cB#yX>$ ziQ!jgH%Il7I$FD<(Rw4Q7U!o$h08_NNdbD#U=ViCwi2@GHwXIfD7r!tN1I7G**w zQgQjxap*(F=!Jhm0iiov>EVja*t|b&Zfm3yx9c;LK_<&idXnwPW=hFHRv9(0VAj!mrGlK$F!Bj(5O+15ez5&-j2%xo!_$&>VV^nb_k6ng^v4q@A z&N%e}u#ea)4Um_l6flF4*?>6YctyK4XtBLFv$Z%c&T0FAjw zF|VGsvKAODO8$~2U37eAlO>2!B31}9M7K)-7$ew_61xD34&fF*4^f)taA%H0$fpKWx*dul1P2A z5s(vPPr-T`KC~#d}!aoicg?((M zYHNZ@&!dYiwz15D`d=H_YkBcgK`@M6wq0Lc`dJJXZLA3BecU-F;@!KRP?>tOI!P4`D>W&zaj#Y|s{4E`{c<=W?4EPKHg!my9<~_mj2FA0fdN#GY z-xSd*`ud4#&jx|S+QSpYJ?!nRao$_ybQ^sQ?9CP_TBRHPmA#@JD0M3iQ49bPzUvEP z?52iCYJkW`2A^Vjs6F=0)Au-a;_OEO|Fw9}zNy1-5>~D(Uq{klQ;;h9h_9h3RdB-J zNtKp4Xy(spUU(hvs056<5wMa*YU;@c87u93yi7!P&gIH@AF8JDAH%4aKz@jN$WGC%T=h0cdEL*vbhgt)S7{m*)q-51^kB-8RdDEWF#2sDZ^;Sg z=apgFT6B#mA>~^o?x&QkS`G>`tV9!Z#WCZyZ`x>q@5bi?8f{SF{J+uC|0?$Wul@T! z?cEHF|KmuQWR>xRe<7~j|EO`ax``lhE0EZU10w|)Zk7ew8GodF#0ixCxFoXoPv*J2 zmW8&fNC4*f%}XEH<8jFZ@?PE}`)~W_yC2}$#0Zs$a-(Kxs2THervf8!%+&D;@gJht zX~hit>2b3Xq1>PDkMD1AGWuq-nLfQ76jNX=McTbfJQ%MFR#$2Q z+OSLBQ>`u>u*EJ(rs2rP=kD~2k{k=}_G`_RJ_+VE{FQ24*OGoio@`}7pa^X;J8T|B zB~?&SzR!~H8=VJjOvjwZ);57W{l*$G z{I=Z=xaKavq&1t%5N{s!Rr#pXiXe5Ee@vEx9L9<*-EmZx0cJH@5h#wpNeKO6c2z^x zg95pFKIJMZmU@v?qB$IRUJp1aeHn^J$YEz4m&PNOB947G#Q~_?K>;q1@Fq4+J}$vD zK+Ns5pjMJ9O1M%$MS`KTs;(^rr5RuWHR>kI$u1jXhtsHofN_3pa=ie7Okcx}6tBEW zyhl_5+-yr@Vs*VIKMbfCM+rp2@j+}Xh2Tk16^YodVF)5fK373Gtwm79p!-(4&?bnL zgNE`)$#bz$Q_#QV;-2osD8oNl4Im7@D+mEQsmj~&%XJw?U-#A9lC56T9~B89cQTTi zp}+<(AwXDBk_qRUY~{h+Zs%d1^)IOa9x-bv4s-9cz)_uOACJP4<%Qg39cFiHBC_-c zHaTY=C&nG)LHh{l09+@3NFX@jG!zoj4G^C}gWKi$mm`DWo)qM;waKeClY#4w=!~A# z38FVPBwst`N*H7irnfYD*(>ZkXRIkXkp0sn>+lKq+ z*Wq3^uY5R#nZZ@qS1*Q%hea>2!bo$hs}F#tw+Mahxdv|Y?vm5`{goVsW}a?y6IofB zlvc>{h!bu!WAo1Rs(7&ET-SeRyfrH29Z(NAI=Z)Q!B8;a$p-ycHIyivlq`aZk%`A? z$=HI>?%^|`j*ib)Q0@$e`9j-G=o{`xG5k5I?BhP(Ea+G7#3YjAra*7g<65V80n1utds<25C~jJ z3Al34pA0;_pM*lHYOYBAfZ?9z{!XQyMDIWi>5spBWy0JFK|zo#t6)L?x;s-H7F4$o z0TvYSl^VrzKbTY=14)XWDl?7$0ERkH@V{tQ5LHFLpeBN1%tD5H<~kz~^P*v-(rIG4 zhX5@2`a~>vN`nNo1Q2!T@P3!bAT{9NnYthbNE&}Z*)cE+!JSUBcNAvBJPsnw6@GnT z9S#kNDg@soH9|&9r9y;qRY38&vTPSHWD;F5t~xDJ!FAdLHc?_a>_7WoecFpk8v?P? zG=B!z4Io><2a!;C+)^00fF#+^sbH&4I||oUkXKR3y7r;;hvUtb{5gUc`~J*6L#Wl$ zIrM?Z;G@SlTJMz{14uytPnMha1Qy&Od92mJr`2`$L7v7DA%z3_;%Ta@I!r?$&&a|I zP$CQw{Vj#$Wy+P8^dgsH=Vw^|BVDh|UXv_RlP!eHPCUc05^)XaQUq+3Can?rI&a%Dj%wEc`+#Ksy1C zJRd45YFwiXp0OSFZvV=G5)N+Y4#D2ivGW>Xcy({qqW^SYXD0pS#wCWVNFG>+fAenJ zi`9ouJp%cU*Xw~COf30s3K2Hvj}J?K=zQw9-W!f6dFmvnV{9vYh*;wAl?QJQO$OOw z*p8IUtXS_%PdGBDKlrHq2;abzSxk3dI#?^3lNW!of$o8I+!<%G-eHk!vR;0OeoJ^0d9+S0%`mJd&`M;Ka)* zYKrv*JJ}X>=}fD`))618!&h0_P1ZVBYbcNkuuH#PjXK5!H*N41ipKC3I4dc^OYvkq zsD*b41`%KdC9uC<=87H+fg3)`tj*1=ZS>75V9*wb*OIi1&r4MGm0xa6*xQc4FM-Ml zEv1*w0olt5x-HInO_^p?-mGn9S(Q)e2?;u?9RmH51BY!$RV2$FQNM*oO?(ldp9-^1 zIu>8Q<2g%A&-Bf(SGdneWu?^pZZB^LRQ+z{q^-28m!s~IJGYay7(M8Nsf~x}e(lj-KYELcsqA@T=4iw%3q%`p{njKPDWR0`zYlgZ zgAeB}pG(cZlJkwW`aK@1zNlEJL;eOqi_ zY-l<{x2Na7G91@iB3Y6zSANg(hqqe`X>3@gCeKo`Q|f8Lxo4zZP4T`Di8-j$d9QEH zKHJebt{%F)TeSl=4TZKJ8pSP6G*fhDT56BO>|KMn!-n;W`*AP`qq*HFFwZI(9VEupuu zDM#Cr8INC|$l$AsijB^S%1%HB15#xVeML{hyrAxEXdWhDWO#lVo#CC8v6%F5ouQo( zl)iz!p&>9a8M+G)W{3KwR%9jzzy|9Mu=SJo>`wv{;)I8s}QoV&D z7yyi-WGgQ>Gb=C}DKGA}K@hyZ0YT3R@6 z7?|7J+n7_@+1eOa*;AM}RzC}+Ci>?vcCD@rU|qhhKpOzR7EzVi=bl{JG=9G1Z{4H- z9FoX+*-Uq?aY5g^kuA5?Uhp2RonNYJp2S){r%mshxO*@lKk(7P@sGOo4iXX$0Gh;- zT+PJL--T?ynl0ho*^R}Gk&nBW{s2sp*n76mGrg}<3pezcU3CFXL2VUS-CLh~ z>+_SFy{@A%{lkOD^tZe3LBmIG09sNw046r90E?e-5u51|8=D(Fl`bKl+q{1!UwPZt zxZD|kEGw$7uePtdeyv#=o0wQWx1AML!9|_9B*j$on$~{bdouTa)~5XF0LTF55CNVT z>h->)pI3{%SebrVdt3WfH~V)0^-PQoVV;_qfqQ%dA6-}-fPu8KwETN^ezo3oK}M(k zIq#Y6-SHn@1A$&uUCg#VD{d) zVBU5Deb2pZzigWUM4cf)Y2`sTe4{6IWe!}(UP@A2P5{tc;QZnf6XVHo7C&L?>KcK& z(s#wyQO@pH;{Y%)udcLrgaF`b=z0K{JjvU3vB&%2^iY1RKd|kAFhqU{=l}}W@P}aa zP=4tTjDQ#qv(0oC<(2e)c^#Geb zLq|KWb2)Y^>wmz#=tocR@3j4|@yEVue(=lFc9%DQ2|Zt%TR+8Erfz|7e`tC~IWf9* zr&;-#Qu$O)ej9(h*M2R1c5T7)5{tk2Jchq?x)1sGJd1xRvfjICPJabob|KDQW;@b% z6@Lizd{3S0?SOvbCx2>Yhqr(50dKSIzZ)BGF@HVIv!t)Gf7FjW2e*CzcmKV3vAABc z7x(aQGZ*jZU%SMWPoLEvmsBPnjv>Fdh`-R49qj9xz$~=VyT1PKp^;tjk%`5jbc>%n z6JIvIzi+d$AHPEUKc|pyVohOT-Jxte*y!MXImg}HCNZz-Znun;x4%OfU*9=D&Y``! ztiS!e_)Gu@XMoK9n(9q#`>^#A=5W-H$n(?Vc%_`Lcfz zxB*a&^TK=cKh`%hBNA?tDmT+8AU^FhwgI&A9kM*H(SBG;`^s5aK><223jAaOor$rJ zhg$9q#gSP{?+Phc1>3iQ)9zd#^HPILAk3IKk-TB7(e|I0AqG*XEB-poNeLH~BINE~ zBl96n)XN4xShH;oh2bcWmM+WqAp>1jB*yD8dn3p;lO1I*Vf`Ko@;lVu;FKYWoZ-&8 z%DAwj0YdeV(^+IpGk_whZS`Q4C`eq+beDrcx2w(zTzvTefUmIMIMl9rFOT-F zec^zmV&tm9&LqbdOHRwM*OtHi`@09>j$iThQwytJs}&S2uT%#5jEK{4J}Dn(s?wAb zJAiv&{%%w3_-0E3g8f?7l^ z{{pJyp+U!~)0vmhp^%8)M#6?(t|Q*fq~$vD2i(QTk`a;tYQGf1k^R+UjHV5GcN0exZQ^|mbp#J9dQuI}`%4Vk}GG2cLjxVWo@9F_n zF#owr7Yls|s-1e{tHQapO(mk^&kYVGl1#%JEDOQ?IEEusmFEEqiZ!_l)*}WO`usu< z?{0*!myYZm6^QI;1oVnhsT3hGq9w18-+0LWTxt-D+e|lut(|W(Pvl3;#tCp_Z5XMV zN_xj2qtV7(8+QdFJ(0#PhUySouRd{R&V>XXg%^&KZ>T99&hrC8P2u36yzOX7&gG?g z!tyYv6`3>bF5B6#7Ullvd%625mB~q56_`%czvr>ED*D%9%qiN5YZ~3*vGQ~m&41<` zpHGl764%gNeZ1AKp(q1VmJI+eTP$jy&C*S+p<2=u=LXdKe9&ZAb>`=XG|h&hV<+#x zT!}kELQ30$smXbOdBi)hZ%fIkwnYWR0N*6cyC$}K5+Yl0+PXq+?yS2L2v&#d1%BAu zxqsZQ>Eg6Nj+3V}t9s@qCN=NHTQDO6B^olpxDw=gVIiPiwWaDReTR?opkX7$@rKnz zo(|E5vTN^{o}V)JK;59$P7PQPlXAV+Ek^-(WR!sCYFbMaGc95Mki3^)4$*2& z1!Sey6lY5y^kWyF6cnc{27xS?5Hf|w5}-zm^BgDOFvC`S6}D6yRJa9hyKnT`pykkOp^}OI zD$7!qjOAub{>VF9i4Th%Z1~(zJkaFBpGpg+2W8-uN7)t- zNjRvyw`uaB*xst4U6VC%lNn;4k#UeEFwmuiODU6UaY1$MM zX|G+ic<{LyB&fn5n!BWWF>==Dsi~hWp2pj)uP%aIFiVe0fjFOdvm3PPOn8AH@R+NJ za$uAMHJJ>4NJSYAmmy1o%I@*L1DShll4qOC>X(?wYF-%W=GSV+_+`$|_RvAj@WyJ# z>sUc}`ICfAgCpxNnyecq9C@4=PgrO%AfK)as~6{olvvd?Jec+2H=54qY&2I?DGv#_ zf*bi^7rkMDe)KAk{>hCLU4wcijp+f3$ZAvowP{v=MO8X}R^HotQcGpa`%FUXo-jNB zZ-L!knT4g*4mED<%{U`CT(NoOKLJVFBZmOU-_SVySj@b>V=|C{rp{s)x4SHROui9y zv`j9JJ`+k*KRwziI^b_L2c!EgfR7U$cjskr{e*Bjtqtd*`h>y0-=aD@U|-5F|MRcK z7_2rursWr;UO)rt{1N)9pJvmQ0lzRGn*9s`aHia6;X6XVExs5;%D>5fgdDPV2@cDv zZcM%5y-@YDjKjhB&Uit^Qmi9*EuXDN=p%#oOspfEpm@_I40H%av-Trzc=RFy_+vIG z_edM54qWUt3;2Gd_@c!+$%?K&koU84g}P58sq9qpLM;qa#A)-&(m7`-(UH9xqv{-I zgp&ROqD@DzUd5nZLOzp>u5kTZu6QmIR7|7m9%Jv8mj+D?f^I)GOk$IOCzSqtU|Ugj;&iCp-8H?g6R<#tnDKW>rhQcl*q-PMp86&_G!TQOh> zbf*S92!Zv%S+viyT_w<`uQxF8y}-;10=VyO+D{6;`hPGxg1>ae5MJ~Pw(0(~iJb`%Ac zWX1XAR<`NomNsX;RQqlrL0Mh+cA2>s(O@(U@#=D)$4T!l#AtCyp@zDKIvJJk5zo9L-5BtJH?_s1aQlFXz8MHcNT3b=DXb%L;|@7j zXLIrvgCCzUlh^`L5!)zB-ZKNM%;v&awoCv?XL*uaWl2bX8i{j*`)P2#A5OZJ3s8;& z48Cp=h8;7+=D3u6wozt3Z^CL7p@_BO3GVZ+m?s2Q)YjixR12YNd|Cl62UXcLE{#P^ z8dINnxuoi%T&}gIExatV9OTZ+xj2r3NaWa7(%mh*C0c+}qQ<;Tgv3!4w5#XJ0#^j~ z3<&*I(*4~;QMn@HX%NO{uS(1#RTKj3G*^+stZ7lt7(7I^n%9>D2QsP|M#5aS{hnK-BU;J>yH2kkMCQ_+v!=BueS|f^$+@BobNh3sqRNgfXq5SA#kK^<*?3vTiMOmDz3rKWUs70JvAG ziDs9X2%~^O2ghAB%Vp6MteUbA#YsH+BII2Ocs6H?{35eg$e_edLnd82P4YQW5+9_9 zruX&&AW)lVbqBYJwNV`<$QVV}l?If*>CX~4rsFc%lP3mW3@Sx`O}b9vf;vvGGd+qv zBnmLvirx{B7Zwwa0W1*Fu*foDjY>5bhC}=Jpk>!FOpTq?KmpxrAQ=@&D4mNW`n&iR z*k4+8F?}#ds~v+%D9_5RT&5$3XBp;Jp)&R8Uf2H1(c~dx<4BDS=qQItdC1V$wvU54 z$+Om|OVjWv7U5vl=F)$HztPGj^<}wO%5CY_u4SoWAmBs_N5(8u>i+dsJOlTRlu$>D z&Wuo5T4wv#B_2l#-Jj#zxm68IE#>(Tz=hroE2#suQEh+2eaSO{lccmTuE)25*I$hLlwLEAv@9~ zq7%_lLcXQ5tDTmCeDo10QwXT}lgNR6MP^3rYz33-LfNbdYJ-xGLQI|oI~8l8h@>wr zETFZK^ogX;i%c}ER7y96Y25E$&Cej;@&;9KNQgKQvAS#8o?;kHWq_8@NmwP z`CVLu8gQ%vGZ+_p3~SSH!-_j=I<86)`k5OFv8+?mRUMX4?X^RQz`HH+!&)^_gNr>L ztJK%VTtY}Z8*-$`84$Ie@8r3uM7OraBDx-xw+*U3TpJ$|k4mMckiJxJR@oJ1? zb*#bv5?QcbrkMnznd@T{yn9wK`o{|?T1Fo5ta&767W40@W0422Jk~c~s>;%E0fnw= zq)xM^G}F-w8SG03_o>%N$Govfag;(GId3AQKdOdi z%gozoRZd)}HSa;wI%w_~Lh9J3RSYH@@Q7MLKd+m}nc~UJ(yzhQnGPMR1L>Puu?N&V z0dt#iGYP)Q2T>|UmRIKc7oC5F5yq*M(y+h>%!!AVT$l=Ll~)rNqXz>5RkRh?TtQI?i%H!f5v_dmAvyye28aay_`zfj3^vgP>3^;m zD2;Vekf-uN2;OTtjSkB(OXsN}HP65BR31|?ORnZ)F`b0Z6Rft2DreY6!aVD0<}}Ve zwUzwIp37fdJL*ZpmATDsvq+k@492f~UXmj^|J-h`_99$x#)GDpS#KxgT0}Z__H2!uMhuy9jt#^r8 zTHEe#*GM807T!Y?OmtO8U~q)=Wcgk#k# z5`*}CgF3jTvnD#rUV`2iX9txyj)BRKVIgS$ z`-??!d}Oriy~!mCRJxSoG5m(^PPAA7g&AB%CVSST2q4{8>hE`#vCZfk#_2unnE0T2Vrph)BGxy#q3WAVC`f&602cnKJ818X>N z$3=(4$=U!jVNtP=azui7#zj-+LPv$GS(b%^twW9or@R6;sOd1J&2cO$ZxYLDF-dc5 z%ic=CS{U9Lsn@)$?&Tea>}>pvc8S?9RSl2b%D`Z%{#-Rx^T*5j$b{oh*{MW;FLC^u zp~~>U%Fr)$;IJ%Dc?ti1KJlU2gU{3Go4tspNbIJ$BI{ryNdzKRoMQ_{KJ1N(Xc=Z8 z@KaAxUsu@!7}2%R9vp~s0)qkm%j3fn5=VvtClJVlrlX3MmT(PJ zu+bDrS}Q_b>i+Cf+Xq)p7hErFm>H;{H%vCVdRML!gV7?;ETZnqe%hhtXYd zylE%KxH2Y+bd}y_@o@|-DZ{$gP?yKZ0}Yi(6LDW!bC{Pz^)_3(Y>!^^nUKE%ujYd6 z0$0a47V0_p0V$jW-sz3@D|dN)-@jy*noLxq|*l1&j~@vSc`A{7VOo7q=T_G6c-K3Q>)b*&Z{{ zmf@PC|CSw#rF)hmtR2^*(sND~9zq%WQ>kPE<{+M3qx|?~8TYlrfzoJY^Ba05GU_NB z;gSD0ZU9>F4HZp%_e{Chx;GNWJl+ft)+L4d75KAcAQ~f#-2IC1q&5@iUmIN|6jAAe zYBR8^k`}|2En8lqb;lp2G2YLv81iURnH$cfyE^fppW{{U-`Gg%AtX85Qm$Qp6mClI zDafrHmM2TT-!2Nx&hGDYAOMj?q78_2>T#c|iWs zr6^tFH$)D?xVbKp7i;aY0^#bXqW#ASQDyf6OEEzE>%NH3fByb8^e00)w}^ zC^>h&3k-rvXNJLq7rzZ-zpxivB{GI4&0$Ga9+*`#$Im7qq)syqk{-_aiTKhE6fd?-CHEj zZ(VcmQcBz$-!GwyT$-5p+V`l_E3siR9C;M&wG<($4qKNa-7CjkKambEa__$hj~!m( zq$2|ye0xz!726mz0(+(lttg;8tazG^D;S%#)b>Qs{g6#DLhF~JAei?OYM$HJ zg|?BEmZ49?6oimkKHiw{{Y%^?jiJ$>DN`g9e0qOZ#4acygeKx1B||RNa*L8wtSG|` z+3YQ?W0^YQ<(@S0V9tkCT}+1FH$818l^LXwH?(^g9XSR(C6#iOgO z@VIc%sSEiDm3}HZc@M)X8|q#ebDSDQ?KlHTEl8`hVQaqi4mb&>na=FS{>;4x@&(q2 zYluPV_piz7RLMQd7PLORmF<+AHaf=3U-uogO)oY_6~`@BND1l){#*Kem2gigE@M0T5plN2zX3Dv z`=J2k`&zA&fCXQL`BChbzy4t=FSO~@wJ^69Mns!r&G^JSzagbBRlP7yp`aF92<^tl zG+xy|I_hac(l`&%yo^ZKfH#4;W|?$iUVaJO{$zQ3(M4a~>OtuPHo%7d)+Pesh%-f> z1cH0P>q4Fw6DYhbc=uQw>L;y`p`Sr(xD$Tn-t3LiPt2v>E~|D6yojqBlg1a7w}K2?QR4Ie76d8ZhuEl*!*zpbwO&HNctq~! zf_IFe_Ta^K1iV)%E#Hhr&CHmYtou^${~NoM1q+_2iMSO9LRdy)MP2{L0ekYz+9utG zXXB%hR99Ti&7Gz%t^o~zY!%In zoz&pm`}0hf(y1+Rxm-oqev{dP7kRkvHbc@^Yc;H}gGs7;C(Jb#fB%J9Wx23eRoU!L zG6GRx+9s|#E0mL*Ts&&WFY*?Z&`tQRJS;H(UZllzI>SZUrLd5oC8Wg3?dl7TBPh32 z1%8nVd5sXnzQOAF)9NNR;7tB z`QBD~&RS^KOv7s$UOWoVE&>eHOj=tz=b9pM44AW1*vIhVDHvJiK`=cb=@lwJ5ZHDz zuvOf8i$0>e_|?b8W<0m1sO*7d4}HjYK7j{37T<+c%o-E!&o{HD*7&p39{Qx5+-?J~ zEbM^}Sw3KqWM(@8!ASvw{+2kz{i}Xx6^kuT;B(nP;q1SR3|JTylx>dk;KiEz)Ya~q z>MTQVegj>v$m*vD*(p^(hEgiu=ib#l)-w|DVjf?QaoTkXQeUB+1?pAq48X*pnt<43 z{~|Gw1eYd7uwr49_#T8cX2w3ToL4KVK32*HCnYj`tx^4Ht8s~#_1z&DV^T8B&wli` zFG!5C4=ffamb{r7SLtQbvir%!zCVcF_TW2jmh!C<(YcWo5qHS4=`6L+S4dVpJfOjt z%DiGWy=iS93h@AE*$OzQXV|gD)?HM3YgY_J| z0^4zLhGCW{WK@92!Y4LDDfPL>0@t zmM+K5P!{ddt7`hTZyojO&9p$1+cW{X_Ay!Dr-?975jj7T82kQY!w%af*-bD5Kx}J< zN)E*soDHK*WOol+wL{T^`5X0%SoM5*Z8*>S`<-L-ZusMU>tdQEFHS4kRCN@I-F(@S z^(`(riZ_3dn#v1UPbtX4RlQsvlVS<`M;T(hM>pm@;utZYm3}QV-M}Yr8W&9w8|B%HVlZzyU^U{iPBd>P0Cmj z+Ozq5nd3pzAn+oHa`~Vrb$rgl0fejSt$dthbhlYFhf5K|9xGVN7-lXD>ZgK$l_u55 z4?Uh-FI=6Ke);<3y$)ivs~_E;An>>?=ZZ#}%oOLw8%G+Jb~-b2W|6Ka?Ax*|^?phn zK=Dppi`Q92U-UMU;ixnDPx;JOzD~j) z60!$yHLzCclw@rfbcR+AoDCD8z~E4S1h_h~dG31j2=1|o2=-DJy>mgGw6fk6MM%sv ziCfoe>l)MOKNKNTy>aOJ>Te)4rS9`}O-&(ya{-d&UXHw%u_K=l5wujA2<@oTPEK8t zoAaeR=2-?)*Q@RPdDnriv4U9%Y*%FnJ?)+xs;s|D?kqZ56gma3#Rc*hwL3Y_T<2hVILzYK8hOQfT_x;m2&i*N|O=j#Q#u>sw%I$0N?X|Hxm(FAREK}KY;iE&L zU%4I<&k;vnqCI+^bco1Nj;1O=iMe$X&oIddky?$s(FPScd+iUgtDx0c`(;d8nf*o(~8MyNUU78lSxJJeInTSplTwT zOJ9Ad1AJaXPtb=o`8CDi{EY~{z!tnhXI z$*s9luuxIs*K^?PX!e`&x-W-9zyS8yLIZaEPq%rI4BN{Ei$EMvpoyU=ofv6Hjp9w7 znDmF-7G1;18~V}~R-}kfZSAht@;O_wr>I5eR8LaI1lnQ`o$2N##fEuSEi})4L%Tcr zMe`)mRdo&_IWsp=er5a5w0STu|O zdg(qW;iervg%2RsaH)Z5=k-mEkY-9GEig%jqZTgvc{nJVd}u?MzEv0jRC&cW?Pq8s zs1YoE>tN4Z_EW6pE7L2wW@20!zQLqquv3ypcnn?Uz~&U0?az+I1Hl)m4p&+f(F}rg zlKbng)czEAd-v#lzGQO>;d{55KfOQ0p-rZE;6XJ-^W>&|*rTQOKu4RAgNswH^Tv45 zqW`|~m<=(mh%5>88s^aUfaj`|TPS0;oG^_o@+g@^$uqH`n4fbW|pnf6x=FOOOq z*)5u!Zvyo~!*LtM7K34)+UBkHJ|go`uHRGRRB}4_$$(g}d23WGR|ij6aO4-06%bQ#^JYm1s<8(bW@J_<50XyKgpCk~$8dDo&UsOJx3D0L zt~ik=9ZEZY=^wB$7=UlYbPE2|+X@pNdcM-Ts+gV5r+I^i?~?xI`zD({6P%<@+1-N# zcN(^;e4-SO*3B$;n=6%*;nwpO61wF>#er-R4%)D^?dBu?+i*{~mja~4YPx5vKNKZQ z@18|2nZ_&lZGU(>)02i&Ge|>rcWW#`UGR^-w-| z3hX3acPt@}dC~TIMdFJxs~KiEWlK$3#=dj>hK(~^2RsxcqK%HUL*)4h~Hcm zC*hJcF$M)J;-SWZlS8lM&d8%| z9q;M@E<~HxuAn&?kJF_n?$p;I>FNRuOWJeet)DwC=6Q=BA>D5sq@%oKX3g3f_mFhQ z?X$SbBF`N0)W3aQ&5PIlYzeQwwXDk_^xr=v!zQqrXF;l29Q0lu@)!m%Z(i|jrw&RU zG)x9jaCG}+D$PlZ+|hYTCPeX@eKgfCX_Kj$=BE40I}dw8;Jm;M=m!08CId&sYkD+I z+zSJ=4>m{jLE6LRZfb z+h5pgO?$r!+xbtq}n>8>&r91U9(FG?aTRXiv#M6Gzt6YxFhS(;{f9VHa@jGr zW9<_8%6v{DxQ*pbSE>&lPwQpb`e_9VCqO>r@gHHIndkScEF;iz!^U7N3!%G4c^{w`+x^l`svO{o# zOz{pc7DyX2m0yvPXwMk!y=_g2+mmQAc3mu5DYDA0gVr6Ed)U$>v1MdV{-b6VwS-=l?maVnr?^j2XyTt3LZMvRh~#@Ev< zA4O?Xh+YCg@?FU<6#0<7Ypn?9Ufzuea<;kI=yFk|%=aq=t-zy&NBc7aMIGLpoW@Zl)2+`e6zq| zf<5M9mx29yRR9$fK^KfMIno89qYH&XtO#e*7W_f*ySrlq$lhIHtNg6NQnS+B`rYkw z$A>5QbBqEk`O^ANyzq2IG*MDFJP)_CAJNLmZIWM;#SbWO-~Z z+lnc?61}jRCtF$uNWhq#6`Q?XMw;c0tV%g$B++IuwbIv}{Rr~h5i!KCY^y812}_$O zWx0$TU+qikjk%`O+2F}K8p&?Yh@4`%z07@CHqSGpl6Re^PCI{^eNA6?6PPkH;y$o> zn02oxDnC&#_XG(|7ovV__Y+dlJ_xKq8$F)H@|!f_xhJ z@~c3oG3kl=&9ZcCMnmtW)e1tr4ebNIXOj;w=ZVDhv#n8lPaaEaYyFd&#RTCu2oCSL zfxQD4&lp^0FeJVn%yil1H79iOV#`uX*2h}iFC4XUdS1ztbfne!rSRK3Lzo;~t# z{ijgqx`w^mMVZyoQ5Hy_WX0%3A&>0>B9q5P3S=3;(B`*TY64=IwxVV32UKkda@Kx$ z<1?N{9DunDBQM9NA1N{m2deB|2pjPJ2-!__a_0 z|M|1EO4SZZFYAWKIU)uoex@RbVA;f)5xV7)4f1%=nAoLjw}KmMS2nvw|6)kBTJQqS zV=EM(0lfJHqs6Uk00&XmdC}rUrB?6CsP#>}eJ;+F3#0 ze#+QVSx5O(Daf*H_+{L8Y(NwT(K? zIjos}hjI27u8P@46lp1qhk|lI#B1G>yY}J|b+m`1XC5Y5|89!8bIf|LN426#(+Usr ziSs;f=uo1)`)gsMsYs2qgZak5u2M)N6*9^*?Ny_9oW`*mwDBBU}VCLTdXlQ z-OOUUm!zFDU#~vuiK)~G;MFJawL;B72wyOg9-2-Hc4gY17hOb|dxWK9qmR^9nlm&f z6LPRn>|j81e(QD70Si}Q;wC*ug+pMh zWn#~@!>|gDczsCSf^9?4>|zLAQH}S>B}{lB4eJCW9!eweQ}|C&bkwJ!%Z0k#N1J+; z;Yz!Vuf6*iJo=+p9er@BSWmaGpAa0!FIB_`s-14qB2$FEO-Aak)lHYSxW1%hHc89P zB;~Dvi!TJxwaJR8ny1ZbPCZtFLdg$ih<-;~FQ$0R$M7-&4cdu}NkW5O8b~au_fUX@ zL;V$nXVh+l#cqe;?@M0XDuYWrH6DZ=R+!$dy;mjO^aJh}uc<{jXvOfwYX-bM?j;Xe z7dtFUl+ihBU8HlatU>aVLi4JVdvK}lg#qVc=Ex9%cJA~I6A4aqrEh+;@1~SBkr6$;-k0m`_LgmcB30m6YP%wz3%*XuQRWox|ZcNAL*c^%xmrXa5 zj+)X&SE&I@X^e4?)FlhQOg`xK$dG(XGAOU;jxYbCxzTLKdW#%ZW>Y`^x)oZA8`agc zj3_Io>`DgVH*x~$(<7yaGt%@W>mM^(YrH$_vU%&o*7Pt20D_0jRVfsblkAEGq;|m{ z_#ah98;Bw(GJs3<=QPquTfxS(9Gh?3#Z>{c(n~)SF4`O4aH2hI<9y1I_c;WjaaZR9BC)pWZ<%-hYhI)>#^ z-nG1bf3^9sU%6-VwdKJOQ`~I#TZ}}*tQ=i}d=t9cmS1CQ<8x?Lq?x$u^2D%K7eH-1 zVlCGZYpV;-UUi|H2sEdzfjm?8E0Y!Iyt7T*tuU`@idN;p*^r~5PY%3C?&ORV< zZ6xVZDFzQ=QIQ6WegocewhaD|j(_C%~)RrCyp=d-us_}Pwubsl$mY^mN` zoua*0={$+g(2|Mg9WrLHK(WK^tY znGt!wKB;(Y7}Q^C_OKY|p`Q(GS+I+SX2ahBawZ8Fi+rDO$Na$&1AcW@1>>jR4p?HD z1-1EI_A@IlVVY@I>45$6?h3YUL%Rc$ARUNZIjc^b9aOYn!!5D^7S^;ye(gpmVphM2 zaXXjm9{b9hkrBg{ZFqDeE7(k-DGFj9dB=|!Z}-D0$pkM+A4OhNvA zr(`LYCGuzj!gF9>S_N%B$2kR}=D`Gwf&fJdm8eff@xo2zm}L&y4DdBES?H>JEA~%Z z&lY?Ti^Fy7nW#-4LY=I+t<|D_9N&(YB8oK<-yT0c%TTh*efa3f!F3Yhc1JQCQ7$MI zKGo7STP0 z1d)j9%SIA7ZCdC9)(%<0fUE!sRjgELY#@er+?7j?$MUeZ{tsu@pxRs9dNlF ziniB-7q{FN^Q5-SI9zTP&q8%iqQBAp+e_!8mH5O*9Ik6?;|ZCnI?#QlJ66j=6c z(YxcVKPE*2^$~OW=<7r!*o~AoB13Y2&*5lG4Kn8&IYHlpo{&pN@C_jV~kAZ79JSVE3#`60o1cp&IpN=d z@Zir$rp*jYoh9vBT6KUPt4!g0;a$aMTZ`wGy&#Z1DcyywGP^e4_qkJca-nd-ClDa* zV~E6BRl`rj*nJzopi=ebUAW zDY>37whBHUS+xstgGI{qF(*b9=V(Nc-~iS=;kK^*zQHZS%$H%m;0xbR%a@50?lGvC zqP;1yOnK`)^bYyZeWCodd8X@ac896Yt|v@oK|)1q?K5zVFC!s`x@e0Kh+J-4xC+Jo ze(4Hz!KAS=yuyazbqVg3Nwjn*!s7LMqk&>c-SQ{bg_2mP!yAx9uEan)S0g^S#gq<}J;&TY2# zISIZ7HNWO{cSP;2?rHc1&hqr|^D$<=cf8)Btq8I3cV?+;a9(o@>xh>ma@IVL^Ddt~ z3*=n>Y_o5t!e5>hZoN-Cqd;>N5qv@;;6I12yVcu_vfds;vR{HdV(a)RLO{?dpecML3XRdCJ^rZ=EHH#y2^(osjy}D z?FO=Jueq$d8=^E}~!R^%$zip_;gzFlnD;(|BBg#%GJ!8=nbQdGN zV7k=jS#c4}mI;;((0dmr>0`#SDeV}uQ>~9uaK1t$j-@TeXCqy0#BQE1S(^otJ<*Bq zSv@8-eD<;_p+#z%2&pSOb-Xj%=1p(1m*C1crk8{>dxhjTWX6h^e4$({ytDDHw>DJA zN*tx_fLV+t%V@Hvj8Rp!=oy8SMBmO!fH@LGE(~uW<^SehB}B_|m^Oi$!5BT+h|XS42zm7=w$He zT9?DMSuBRJ%*~~Av8Y{3yzn)b_~WLJQ$XEOGTiab>+Rt^#X4<%Wl{;?YI6Bg7#;+D zdT7PL06LViGRyJZ=dv$Wt zg}T0(IDG3J(OqkF|MYzz!UG2@uD-RHtKLyKlPx(PX1(<}nCRSvKM{W?RMk>w&?28xCq6)#u-%`L!KwQmiaY#7=&8Lo8dl!_Fza90E@3L{<4 zdm3UJECk7-@;;thz>4R4Dj)7~64`x*rL;nBIv-9LTcT%r8}k1bLNdM03lI3Dkj{f6 zw<7{E-gG)(ybc8LXQjbCLq=!tjfr`z+F7RWm*utO$5Z4z1euKJ6>}o^$p#3 z(D`o$>{b*H+&Bd^4PX3uxIjLyF(R`tN75#Wlq`nOStyRN)?%@DX~im;1u9KCE;57i zBk+#HBC*(RSkB1*4e203Ac61gpn(MQdr@&UWAzsEw03 z&V}jE${vpqdU@aLr$#q2l%q|g)Wi;0Ydz*`mBYd%9<+L-GiJgk^@@iWZQ-<*#K|ZG z9UP}47>$P1m!#8Y)`AqXNV-wqhZ=*<&fTH&+Gg70Z^$*<$^**bnwSfjk%dMv0~DQ$ z2RpWqr%qK`y*6!1I_O`btt?fQ40InGqkRr@eEXpOMhEKSQN$F{`5_6Dt`0R}**s&* z?|0ofLUXAVJWsi|t5bDjH^H-D?+Y)(5AoctoA__i z+;;>+fOa_15}@u5J*WCRJvI(gI<`?}OHsKrSASqX?+0 zA#Ltzjj2@mqL;*|S4HoqZBzF%AsjxK)4#W^j@P@c95U(P=*-zw zu18Pz+w=zf#tvC)mk813gPXh8lvVIW3Bn$QU=7Q5{A>JS^nGj)8FIXaAArMZtu+z& znW-~tYmZBY!ZEP{0MWXpvY#0&>Z+Mm$Q>7g@UmAf9n|i4(#=V-bSK`EMqC}46e(Xg zQmu>pS>u9aH6f>Y6XIb+RP}`(_XZgu=ww6n!kH!N88ND>C`U=IC#2HLThFYC6Id-2 ztsZ(CNC4$oUZdejDF|J<8PV{Q&@Z$Z&FZLth?)R{ha(+G4*Qst9Z4CUhxN9VqH z_kQ#&yX<(Pa*zAzu?uu0p_^e4F3Re$(os4Z8It+@%h_p9;ubXWO3o1^Nt1~RWptrb zyrq|-&f=%ju!@MVYt%HL%y;0)uwWnKSf#1q+N-O!c}s4?f4~_>js)k%<Syy; zO1WW$N_Gj{D5zKQnY$kV>%nq^U_(yzRkOzs9M{ilFDy;lsk2Q>3ao->5Jfj6ei>vqqziNiIgHPZlI!L5b1F} zU;FtHTOGjr3O`4E4W~pkc~XLGz}6P_*`V$d6$#2`SvjR3#Y>yawZ#9mv3mu-10;c282jDMJjXIo3OHuwN6(IH3~X5>`F)I7K}P z^ET^lO zFNR;x$w<8WwA72z*=MTvQyOs*p=PN7P2dcKkheFpoo0B`a=?AL>#yg;*&QaFZb~m_ z7i46G;YM*Kx9dEf?^X~21sW#v8E6V8j4JOK>a-;(p(&k5@6q>k^70Hiu&n=4hNr6o z?96$oBfGseD|nAwozpSwRkA1dLIV1vD!jZ*kB3JS5XvU4;#J27W3p#sC+s0DzW5KA zWzD^0L9Fn*{-_wKGfSuVAVKF*dOL5;X&EZGPxafGW!>RCe+>8T7n{91p}HWzX!eju+sK;ar@8*v@ot)c9i8>wp; zKH%ot+i9Q}g4vCvNw{F#+XlvDIwKG^Sv)s)CVYMH;@PsD;^iELvsrt2YRQq_=+^xf z6;%-Ge`KCwr=pZ@?&}ieJ^WrBS5>I&PG5v<$pc+_!8v*L@Qk##l(UGt+*Fx#-V-jh zrX&-BO1fXChrkrc1(_`K+p*RPf515W>pbrTqnja}3I92T><=ZfwO8H`9e#MO?|AU{ zpI!_a0-2aiUS#qB&0)`o4{MqmYiRS#@UeqxSGZgO$zFDNdRer=R< z_(}krc<0RPIgl$OdA|lROLzZqiZhP7-qsP(V6Mq-Jq&GY#e-$v+BNH{mNu#9rc(zF zXbVE&0?_0^;r5C_Za3mlxCp7ijZ>duu{Pgc%seZJeS@pIb`V>CtwEo0LG403#{*%b zLPMxs&>c)6JutIsr71Qpq{!_JNcj$wBl;UpggY(xpeq8Uy+rCoD}p)Dxx{YiZhy9_ z_b;CRfOo*jxF?ZPL;#K<7UMSlq5Mr#Q_FB68LTQet#T1unbbF2n=4->9FI6CK`vXc9U+&>HMRCkkJHqmp^W`rRL5t*RGAuGSib z1rS$?;{uoJ(lR%3_mNIU6B7d@aw7t~1=I0(wK2Ly7qNo?B}7vU?VND}Zj*9zh;v?? zdJqb|`iZ&$m4EJebe#kuGTS)hb6&=ih>W*c31*8pGmZ~1*W^Jt6_fHHL_Nk(ytMdz0G$j8=9QB z!609FmNYqY`?-_TEqin^YSYiCIivD&YX3Se2_{(N={Qh$Q+8wEu-z7zxzVC`ddk*U z-*H6%<=yCg>d$p+H7+Ff@oQMBdjM#6wF&L1NN46ez&_KZ!F+JL$x&UqW@n)9122%% zg4$ZJe^l61R=`#=bTL=o>TU@9s!*U2*VK#G$vdE}?!B#0IC=WchI%nf1h-UTL`P3i zKaY{-7ORGh08*>x%xYqpnr&V}i%+IDrlS=t>PB#5kc;2@?qzuIYr~8IE-*pRLwkg$ zd8%CUH|^v#1V7*~P^`)tnjIe2kJc8<*JV-)0gTIauGxaK>A;N(+&9}^NQo2{QKjCdCNI@bLN0%mQ^6(qkq*4I zOf6Gd3TjB;lolwZKKHS!r*RQE&}2mVT$v8^Mxy`;r{2Ccs7is1@xLNYkHcI;-VIt$ z1r+}s>OIqkv$muqX7bDhAi`+yNTx?Lv7@gK8&RW zoOg5Nj-MbSFYZg^nuNas+9x4!Ppkf(6S%w&O~+{`rG4^hl3ljr4Wh80vH>R-tUSsOa{WEl=Hf!_>i$;a- z`PJ_12=(!ScCWHozlwV(asbicfT}!#QG_ z`M6+rA~WZH$##^)elp++i#jl5NRhWYUEY1IqVax z46m^e65u2Y8TR{ZQB5PKr1eKX8|O(VrGHUeLUfo8@e|>2-B2IA#x$AAL-Ef}K1V$d z=}f=chTV&R zIB!=$;(#$9wo`mz8=^%YMjh2FQ^#JovWV~(Q~_!d@AxBQ#^WHHHrXkl#stA}OhT75 zrdjIN#dRVUy?3Lxl0)Iy&5`ge2OyreF}J|C*Zt)I&4RGF(ZXq(9&Yd!bM?N>z?jF- z5n3u(ae@WhD0bQZiSz+oc;4TLX_30dO`jV(uj6Ney`0JPUCH>Bku=0q7{3r$Ji{2q zZY8TdFrP3h+ogS`aiVH!D!!dNxlDm+QJ(lPs-S!fs-<}{%;G1Qfp4sU519*K`(8S` z;jHd{KLW?B78B(~+x5(2Q_Bz?Z3gH#_as{rN0J?llVzUBzf+Y0TN5D)>~XHygBKWL zL_keQ66+o(s@+U=DlGn13E}A86etBUfPw_#$&8wPG&YmT{L}_5Y%?t&Q!^pB2u02C zavYt{T4@~US(SpFcgK0!d@@_*zlKC>qsPJRS&`&uAP)|g9lQA>-0*248Yr`s-1d5E3WOp5 zvUWmGP|Fx=yt8S!gr47 zv3v7T1tD0Bi?L{6(7LO%F=`&0)+)$jlUY=cN%h@hcm~BCK~u=r#8Mrih-B9_ zvVUL@ed9!A08Q zwi1qPkvxbMQWWYg;PTVFjU^!w=!{!7?(v;^2kFN2osP@V&3u)@4X(^ zdS%v~lS-SH7H=$?SC@6P@P^^04WGld7QM{Ei5~N!rbw;?*dNr8gDUP&5U#W;$&|#o zZ9qfeR^N2A@uEKTh49_Ohve;`z~-NPoD)p$WTFeD&^JOs!oAN4Zurz9QwFNptShf4@AwG`d4T zE-Ale26RPwaQzzNN{c+0_@DEOFxWs@0idm^qJ?^rIPXh%lN<|@;4~{#a}>dlJ_b@# zlamWfJz928T!A}erG#OHNMBJiOW$18>-G*pT=MC&P}>B!P$cl`k2t!&8R!HRlL5R! znwOXBu_>R_JVCPeT7Pu>hv5SwmB&WkR}vmDmRwIk3T)t7_jPF;HT?Hn!8)K|iH0LUxdNLMxti*@eNWj~SCz^La7aerD!Y|;4 zHBsefhwT$TvIsAU#!`-X?766$PWzx;tXJHIKWG)ZKfbJF;2uMfSc(&zcBW-nY_)AIAwFTyF#Dv|$B0p(!`&St6K)-Y@a_s^zmocVZ&$!YCe1rT3T|1`b{(zKSo7{40;FceoRUa{Rocrvu%+oy*Ll%7b*+G|I@Lu|uRhm*y0 zqdk1hw)l0sspNEkPPRo8Pi`5jZ{oIcU5-(cE{OAdb<%A*l9|cp-mZn*dS^Sa*y6Mh z^~I++v&`q~!r?$eHbAmZO1=~{U1~ZdJeGUa&NwIhfPs5w={e770W``Y9_(nZDBSPc9?X!RaZ;APe=#6vN7fXbAe`R_f z7lDlZ5gsxWFZ&h^wn8dcgcTY?>qAKZY&4JO0@h^4O z;HtUB*%l7V&DdRR*VXqH#PJ@xorW~rNcQhvC1@r>(K*@7f{#)$8ZF0>%8>Z^qR=(Q z3?dqYNW%A+4aR3Xz6Bph?R3|y$M;=C0YpJdq>E;acL@aC1UTr?4IZ0{o&5#GOhtSq zX@Gw*V+*`IvkvqZ!E-~E4`tmiEs)rdU>&4lhRjT^x}@XValGs5v;av<@;lqt49dF% zz+i)wslvLN1C(9@l_%*J@qSejoL#DI4lTE-lbb1(iV#9dsIBe)R!jTwk6=a^o6rI( z*llJT(80H==ek>Ch-9^jJF_uE_FvO`5ejo#qIIA2 zhl8Uc{Q15<6iROc0*@OZKk`g*6 zZ#09ekk{*ZsD5N;)C@q%s8Gb|I3p@^F12ytvmEU$h=#yYUCxbD!Q;6?eo4}SaN5b4 zw;sYY{@1k1aZ8fDNX+-oqY8eK`eKa*W&-Ex-14@al0yQ?X;vI?PhjfP+#UUjzT{j6 zwCw?GAXU946h?+6_&g^v>Rfjs!0-X>sX8Ek)n%T2jap}ospsQBauomf=(dtTnw#N0ldh2_vbLdM_xb zyv8tVa-wg1Tl*AlTR3DefvFv#*=W2$pen5Ss9Vnq7a7D{A(3n_Y%T@>Z%7$>ZN`3b*k( zU!`)>{t}7%w8&lGa`pDG9x$@m{-;Y*1+dN4t}OhoI`Kuhzy4HdPU~{@i-+uShojWA z86IEf;EF8VMdS`$ymLUd%3NTqGfG}O%P;196R9X9QgiB+L@GeDQo+{M;U5YYq?3VW zjA|C%ff}I;6*%8%HtBt5iF{$Bl$8E4SZhU0&)yuc@qaP0a1$Z;+FeZ)yk&{93KqiQ z&S|tT$>?b7?y4L-I+qL5#44EArP-MwpX+X6(f`k4f2;JKwE{-r)4(FI!GZD+lSK^~ zCVn@HFEmE6cfb4DxlAkokM~L-6N~FD3VEz4w^0X$QPWBCX~Is_;$W=MRwaCyY%6)H zHZDL?Pidt-Q@CJppYa3)3~f!#`9jF-u7eSRD$Q`N7YssuSc^C$z?SuT&ej#e5rF`= zeMZqFF3aMM>18ZU#-SmvMnt(B}>K+r#^nDF{21mM0<&Wt1YFQXDNznu*E#h21A^^u~Bd=3_HvD%vu zXr!!}B=wHTG?D(|>@5ro^>-s~se2#`G4)dzPs!)V@J>PGtl{0JSO;pB0)d#{*GP?) z5TfNE`-AllWOh*L4mzK0H^^#1nsbqr1y4y=4Vfbf}v_q|!8@|WTkS%gKmpU`;|KFd8hWtAoml6X+CRpzraIc1tSt<>afT)sz;8bd>RA}r&n}TIzTzoF=Ff3$J3s6fjw;dU z^0bWd|Ln$;(rr}IEWkqHguKE}b5El$cmug007K%MVya_du39<4OAr)|%>QvHd>G79 zUdY!v@qcHoQoMr_)4oSC?O1_<;#13Cq|(%ebtYNK3xp`t2W~&5A+?knN_5bk9>nq> z9I5@UIS=y3$!iLhoNmil_{^z=B(4~TYpw2d09!9c2<#hN!lx&AuMHD+utbKUsRH=X z^`5-tCa`N^4Y9B&(w~EhQmenX>@1j22XfK3D})>tk-&TFBq;n~1L-*SnvhM+?pEq} z{s?E6_fLmlD5K0>LQU`Ona{-JPSx!Ns3^rs%jW5{-bP-}$+RpX>m8e<-Fa4>=zror z5#Xp=&y$BKAxvoh@5;%S>?m(AtpY{xMSci!@BHLX#Uf8Nf}1&p#)v2Lr{?%Fujlvp z)+l@gXydM#!guU1t2Cl_s}Xf>63;Y#McG%JSv4vW5AZMbOc^7$5!Bzs(4sR~rSZB) zeND~hw>yPa7|?5u7bSPDm26y!l5Mg3vV(U<_we-JkVk7|QFP4MEI>TM z7U9){{^#%bXcR;MlY4 zI_FCq;valL$*1~Xt}NVGYao&P4|L;CbFmq|47{+1t=7_m=68U~MHrjdqp>yqa8Rb* zlh(^`?7&@|#!FHmq{{|dEaB|9L8?My?4HKo#5s9AHC9o#j?aR^#su>Nj3ykX=cMD{xqiel+;K`0TM%k_ENwgpa?&*b2O`1~odHae}vi zInu+GX(P$qaiC0kobWQJx!4ascY14xFP6Dc`7T{fQPnc?o6W)D0yqP_)2?G^VoNi> zaqT3d{yQsP%I$&z6?^iq6%Q{CHT2K`+(pe~1?11*B47ev^^WSkO%h|3ue`knI}ge* ztN;y6A;{PI(yg(9wt7)XRYR)DpGlM7o5~MMseKH%o^x-npM!bb5@{(GVz6|w7(@^) zuuir~P)iV##<|WoJA6_$H|w(M!biQGS|n-vXzM~yE`)!ZkW=0FG8~v+17@34Y!SME z3cLaw$nMOqoku9-D#Xw95SJ^>P-haucBgjOG19;|KRGl(l5E=`HM$1q3Z}ja02CGT zfg^2Ld_$}Dv$^36YYXtEK=MqWL=jq_;j^;i6H>sAa=@7&mNtu>oX{arOHcqewSF?^4;Sm0bZAYB#%ZX2Uu5uX$|HP>R7bC{C>u7*TnALtq+rIQSD5`q2^ zp96MLbH3mo0d|xI+7_X`Yfs16mliC`8$ldXI$Xx$hu(dijN2(A)Bd;$4Km8-nl=&O zXd-5KU?9J{O-m^SiwaSyCRJh1lP^2eQHSj71Hpb<3&LNCuKoLroXBWxur)tgPbxCr zMh}hinoa-ZYE|Km3yn35_UWO@v4h}V`SWB;@>2}483&5Hkx2V)=*hX4q>=ciks%&d z!XI>18}-NM(92(1aO1TM3`(N+$6ew#2>p@Qt>sAei8YV_pd_sR0uPAhW%n{|d&mN- zC10W#^f=(1xe+0U${(C(hMX~(VKJpCgeH?!wn5mSK}|A#w7iJ=h;KT$P_bIYRL7}H z{W@7p0bw8=wc)PrM>%2nDUcV(@+QzA31^&-A0ypc(ZpRWS1ERjQ0kxP$;<=m_>}Zc znFY-(;6Bl?{%RvyiI!ph$NjQp0_b({euK*j_M9W2uUfefplE!dVMSZn?$Qy{z>gtG z!RyrTAJpDyF$YAz1Hj`U3abufl_I|)QG+<7lTh@Y6=`Fv^6N4|Zan(*kbT~kT84iH zo$spsbDO-P=fTr+1&P~brRSNn4j0B|SYxaMMa!47e3Np2$o`*w8%?dD2}Fpc9wlD& z7Axwcgfq0QW@Gj>J5X`4)*dG#u$RoR486dNXs&cEB}b@J;A-DEB3uR^aA_8)P6TWBWBz)A2}_EcGv zGn{hq@fQ?qU|zV}dLncF-4R(wr5{z_K1mZZU?jg#_R1 zVdY6uVM9%1wzr$&_h2@vw~=5R20@U&!-|S|9;!gB$OPt96}KZ9H%DrvtoPI6h2oN* z@eq!Qrb!gh2h1|?sJ`R|BFox5tI*(dIA>f=W$|fNzOmLM z#yIcLkDwWmX=%6BaNLX>Zt;xX{9Ff!_ePdS`-8Ec3W7O#|7V%;umjuhvjZdgJV12c zuMeR-=+G<~2#9w78JA1^IX4{9?s11KDLC3a5Cn=|(Lr^<*Xs@Zz*+B_n#9xgi>YgE z3L?4DfDk(SWhB=lD#c@J8HBy?Pxu;OA{=&y_Df;f>uo=B?A$1NZ9xCQ$q&z&8$lKP z%Ej?Rr5;{isu1-#n?22vkf%d>$6)r8aKv2a`z6bI5r0W%L63!j{PtpkJXwKh?AHKl zmaYrr71wC}-qZqxpc``5HbiNKs}-(ZhD!Yg@eoK2SYmh^ImwzSD1K+@#nE!g&ir$f zjaIGvg9bTOnc8OFe&~m~r^ja`e*C87zeyL2!3p%8@+*#RH)2=6VwD4VC_x3?`S4-c z5ExJvkzR0lA51_G&=sR58(zP`)IxV}(W-64k+cM0Y5|bB$rnK{? z0jjw+yvsg5G_GRW9o|2&5VnLRV_BP6YA&8oM30euPjyS@sqgJw2|s(by^Sq5+h&ucuLM~d#wmuY!z5k$B0p{o40ul$4sVN$ zDsLE2hq6u^M_q`AO#$oW&V_(j@(3){t6J$4{k1HVA-{O%^PxyuL*P$kh+DfV`=|Zf zMHfTs??_!|VsVv;GmVGH%h%M!9#_l^t-ca%JN3}iiUd`Z3I*W;CN$sL;;b`967$s-$UPC@%ZGnEJOdfswP_K z`x2YH7ZZc^(Q3Lw0_^%0nzlY*g47oP&4iwqi$uN0?d&XJ*nV*NpD-LT$fy`-cNTw>CgTj9NX70fZfLs-^}cPZB|Gh_Q@o^u*nd0|{DoBw%gM)=u9%kV1C@Ng z%)pXZsBVT`{?&c>hPQUW8W8=)-jGGTLdMq8>XRU+-D#2(%*5Z=6SEGDNv`J4?_sIR z+>@y>{Fn%`79AeHAM+@dxEw3?n2*3kxT<#8kbdaSf>a!(jsvf$ud6sWg8{*WdS~Kt z=OM`x8ydEB?2*5%m3jtv2z6o=tF1ObkyY74SmyD%(Zxb+7;9H7(B``CmGI-v9~LHm zOTEJaCccQ!Ve^r@-$l_)3@;wnEk8q?Zx?tE0(38t&KlwXjd6**c@%5iTG1$;iFeu? zAxpv{g+hsuD0Ye5sr>#J2S-_fa0uh6`#MB9ugOX835Z~_1qOw`jL4oT z&1EGu6OSMByO0lGlB|A~2e(^rQ^O1REtgD?b`m^OlfN5DC+TA=Sw@~2F?T{Jx)$qJ zY;3q{>Lj7{F0PkB zoEoR*^#*q@yQpf*tcKM(_#j3Ok$}*%g6%`ef;$sLuxAlrGCG7oI22*X#!!U?x=dPK z+kF#^39h`Lln8(wPrpMK6B#X(EWps2XN5{jLr38V6Q?Z3z6GqVI2Pkn^oo@)~pALan zF_s_eM{4=TZe14}7g=~y*ow2J>vPC8waE>Q9$<^^Evsfi7!ggVPnoiLmuc&Ld~fFt zkdCC%05V0*Q^ZBUuns}2q4#)!OK)sVB(X0rup(nWWLfQ2L>u!&VItJ+x2xRmMIYMX{A-Occkir?8o#jGi`exwDQ{d-q05A5tUU(o#;ZH^ zXB>s}owQuDp`lrSx?{FFX-Thx^>=c>cm}2BR1n1{A4Mt^e$8~-t_Vm;H&c{rYzWxN zahQn z=L@_wX0ZjX(i3hcq*X4}-CT63{=@hpGLT{>|1niV$ISvArg$aN(O|fDeebPX>fTX^ zM=u*b=#H+QkqIy&pdiIh^9(3J*jioayMNjNz(8J~Q|u<20ituUzU^-)e)$NxO2}J! zQg?CYbpL)3)Inu>c5t*-BHoZw9r$Ce5S;As1am3kX6te>q+mB2;p>($Krr#rVH7H91(RruCMAM1GxlkAuTAi&K^mSlUWru%K7C$l6=CkF+Zk zMcd(L>;J?7J|%}-`WK^#hX+wNDO5!GEC7Ug3KP+KfFBo zFIH{VW@Z^5LfxhVGx2qprLkEV_7J#;a|4{2@*upCpo>z|C^U#CBZGZ$+rfD4Hu`tnp*NN+ z%k@%;+*mf~!>Gf`O2Yw3${*vNb%e#|lzbUb#|Y-d&stg-Ovi~}0m{Xd%esU3A{}dJ&_9V*(k4R)p)c~drOo|F=4d&nnw+m|RzE-wm8m%xfBPFGQL6)1idVhv z7Wv}<(=5q7q9wBH(91_^>zx!QjR&BS_4n2ym;CFH2vI6HNrUp7?KIU9U3=qIDGdK2 zbZ{6M)nS;SQ8@H+=pF-nnpl5yHefusyijFO>zfR?5;s`V8e!HTh zoz{ORj8&1G$CD4GD)sBcge_ay(B2xvo{ce;-`Z@~(QA$2Lf z#%@Rh{y43H)n)7&$T9)db4dQom24Z~Uzy;at34arm~9nq&nk)n9s{0lLg4F6D0~C# z7903(`U^S`WXo=+_p14vLoMv4B6FWvAXv`ff^R)dtH?O?=>aQW$m7!!&*ZrCTrBqZ z*+LvUm7bF*x*o^!-eZ^pz=yNXmSNn7#cv-5BV_p$cE;6vEnLjVNeAE_bNbeIli^BAP=07_MQjK%d;D8Ps*^LQu><% zSgotXVR_`2KSiNU#rYbMP>v=)F?6aIsF>8lAV;iVqNh5B%=x*|&@V#mK}!oTf0JEG z4c5oqA3NMDFyjRJXa4_79Od}G#8F0e#{asa|HM%iPG-*kKK?Ipl#Pj%`Ts4BIyz-v zZt!NYwN#^SwpeRNw;OUtV{f)Bui0323Koux&~Kmen%z2%yxy`iB_zAs^R4pUUSdN2 z`_e#V$3fmjmUGO_q{oEk#A6dsm%=o$HW(R}AcJkB0i>N{Vrm+UjfvpMMrYCbyA+7c zlxzXOnL+yn)IW+B5c{Ra$3us}5ExjPUA*nH0D9d6jHPp7mwT*bG67OV{{Te@kehYT zi^<{JD04eXb1PTGq9EpVhZYvM2S4Uw(KtEzQhkr3m4HiNV`>9$XI0Sxin)*h{Pp1U z@Z*`g9{lHxf@}cxq-kNSrvdtz0;np>`ej6wuP0I zRY=YOi3A_14g-|@D?355qAv6EtIA&Uy=5)}9jWqv`F?nT{79xEE2AncE1?(}zCFSK zkoi@X7bYI(w)_r8e+6Rh*;?S2o5l!i_F@50&}L;{w_{>#ZEc-R>ttn}`^TI-y|DS- zD>v6U0kr|*Rs-Va#{BCN^o1Q6o;fngnn5f1rMf$n0BA@VDRGf2@l6==|8>~#iFzPD zAH4a(H^dLL`%zvz(c1?gS6=+JFfurLQm?5hD4^+E8C#fHUz!=4c_W@%A6p-W)PGC8 zKHOXiI?w}=1tg-2iShLq``$c$%Vqm5p@aEyW75H<$0u(6guL{;Tlhu>eH9|z7cMe%AtMsd-h^L~WAGgzw|HkHH_IyoAN(!b_=j(ro<8@gF-vnJ zH}Wg9+t-^ZG&VZfF(xB@_pZSsPwlcfDw_ci_bmbHU)Wgn-<2-wNxd7Hei;2=_{XO5 z&f)!s95uc$`fK`e4|sTNd}IM-=itdszB)nV{sorSK1Pjs6$71QQ~NclJdHHu39wv-bOh*V+ZnDUEZ@P$jrhV3JG8hxT40@O!%|BpN>@*BvJ1^|QPOKb`dc(fY^+DGurZV1jW z_7lx#G4cJM<2Sku00!z;Fe?fGY`Aw`TsFBEk=jr2+4f0M`H(;C5*YJe7?;;Owzm_* z54@q_m$|_M{M)@u$*&(iyvYmvTYujd{#{_eF#q1@5zQ|kzl6pwuuomxJNQ?g!6&=% zN1nke{F@-~8~)e_B6QOyIBf~M){AfM1bAgE>E2Un-A~Lr!Rgz-kePG*yF-zzU*L7V z4(?9C-~FGxn}4qo?7Oxd`|6)Lq<`CeQ2A<1{ng@*^1Xci)z$DdKs6K3Yc3Bd9v_|j zz$bJNn~6!e;fliN4m=Z`HZl6Y+29HV0AVsAZar@qCSm` zBp_o+DU_>4OCxN((%TW0d6woP*Q*S2W-Fwvi3Z4HbDBiblGwlGp&Wm)Wv*NZQ&`4&L6nft{&7M-*YjIV5gMR&Y{J;%3nK@W@-r5^iud ztUTZ>GvL&RVlH$6+nC>R-IlOu@e78z2cEPNOArE~4zwkQs_FRFn$uLR2}{uVx40J-k`j-HUlhhO`8~aUY>5BnsSk-!G2^D<7HGCa5p0TrhyK zuu)&Yx(eyYOiC?)ZJ*c+QpwI&6>UViA$&T?H)KXzsN}}z(}blw9jm=m4z@BACsO&g zKn4U!us<-q)Z45~E4I2*Ef?A~ENY}UHnrrB4wJp_Lf2$EN@hQh2`z9exYZ9VjPC?y|lB1v}0ex^s9hYHxR|L(97n)R4ACW8X1Y3*d{T zM`UDzb+x(>e&PC34>p!FVhtz<{2doP?b$5wF|`OKdP%5uSiU2GQJ)USze#@)1x#$$ zjXLM3VrB+I)~&xX=bSGh!=cx$nKPi zkpsjoABQB-6o)>}A%IW5;U23Cb?C2%nqxDmiwTI;ENu7zfow+m6=2=e&vs!JQ(}hM2n{iza{| z2`_F)S{z3cK3g!K7?T^Rilh-z3aO*rV}=;Bz9XWk&t(n2R{j>4k-JM$x3dg5iK26x z9uJiHJF)9Fl0-uo?&_fP#8Y@UmM^p<5t%t=s) z>{(;i4(1oXpOMq~WgU22JhADqVeR$E{Sg6t0Aw*9s+a8U*BD2YN(1sOGAb(a_~_n4 ziKv9DGKis$OdYeYxh3m$15TQS+R4cNAHvrmwaq1Ay&C$AKy;l2h=bp%Js(N6IjkQK!F{Cty+i$j zNjMFrCa~9)QM(HQ)I+(apvghJ>~}=s%A(?_W!-)wX9w1E4Az1jAUHsCQ-y=?r4YGS z)vBpk{wW9?mdd%-C_f}R4Pc9qfUNjdOc=G9#XX$n@X!Cu9r2xtHcE^-tdkVP7dD0$ z`5OD=qSC3F8XvA)HATRINeZ`W;Q*pP25+kI7$g!^U@Gzj77IuTK3=RQbv{o_ADdjL z?lCe%+0J{3BpP9^HkMUmV3QnB&}Uu^AB#QyQ5Q`90NoKcX7k8Ul3xrRg3*AlG7`_t zZCBjXg}dTnl#!6pa`lKJ1=Z-@TXD@o_H%hQA-Ko%JqDNqRh-KsOXu0>Merap{M^_m z_{!|RdWj$0xJnIErl`!AhhA4y>(5@;nAmx)FnuK;7fx|%$T7!j6NXk239{|oL2fXy zi;|r#qNdTY=Vk6r;3~IZM$+F0uKjRi^3Xb71}_*1OQrW&!+69Iv24%23nsjWW`;W! zW8)jNPML~qB%YU48ERodL5d`KV8{8`coNTUUTk)1ZztE-4?652<(u*PNK0})ROsyX97|lV)BT2IEjn|IdyP`$U=Q{-P3czY7%91K}5ip1NhLG z=n(44G_jP%s|K9<^xfV~o!aC6s}drNF7nYo2QU$soRr;)O~$@Ob=B4eN-qgDhN5|r zEqZxvenqD25IJS=MGII`(&t5)=xM=Z=I<%hZkh7vBJ8svW(d4tw3$e3TKxSm!IEws zzovsRfJv?H5r?(mRtbLk%qA6`C0e^TM*@lT0d;#TctH8wcwoswFIT7$d^6^_8L}?S z5({}VtCJUK(fp$rP)*fXdXXPezy8aEuf4^PIAoIFY%Dla6 zOF>P^MVD5PSA@h8PTQDn6aT!e`iMD{XqQwoG-ds$~t*&8D&pG{em>z1Ng7c zOP#lp7&w>na}Y0DWJ9Q*bAEApQtRT^K7a+5DHfZic$?2?ila4{}w znA(@|Y2kc>#!6~!h%PU=eWcC+7IU7|W|_|d-4T4`azf{0^>idNI}ZVx1_oDUo}c;q zyyc7&X0_bXxgsK4*lyeV?8S7zOOsogDg!RA?-P}tU?cEbc3%spspR}sAjtZ*NgCK6 ztzzwB7B_{GkLeqrKcXanMy6CCCR$JVASNj8B*jQhHBoXn+HiF-FWIl5R?p=!KiqeB z1ZVp{ns2A-MYMrHBK=OQ7QRFb-8oZ5^A?!zo-IU#?JB@|;79@88q~z?_yhJMi29+N zaLFI&Oe^xWwNu#~(k96EFf6x%@4zn`NA%Y|^M*z+)W=UI^I06Z8^*`!S-284`uaGG z(|GC;I*xeypazgDx>V8R^OWzn@}k`pXk4t8stY}v?bG-e@P9gF#Z-wbli?z*Gy0RodUSWC)bP9y$T;vzEd!bO@LugP-X~jFwciw?9);93T#O0UQ?au9#k8a?dR%g!a z?s$KT?X~wsvO1%d&otn9J^O5P^AX?|Z~q=I<8&yNmpM4le;Z)9dS1yY&;%3aMs%G$ z5?^bu^^Gnyv++%elPy$)IglSeH`3Epy-*av&ePDU?GWTX)z><_l{lhvBV(>TeCv>M z?96Cl=mhe-NX##b_Vl4B!GAlD&xn5XDcY2tF9`&UVRRso>F&?0hvDT8oEH*ccAV<2 zX6bwr$m%}PE|NJRM|%$_-N8~bU-u>1su&Ex5w*0{E&eS|mZhEKV&Y13L)T7UK- zO#GGtT?0y_TH}aRRE9A#QBND@;KVl`s6@KDJzp^w%hfbS+!0Wx^1pz4g%R4sRywi~ zAi(mI87<F|X zF1jaNGKi_QlT(3;L;(^j>cOFnxdI*zYr&mh3t(;zGAlzi(D6& zA#EuXbRw$*utDCIv|oOxuDXtYe}cbs8h%AWdNbc=x?1v(e=#Wx4;VL>-8f;B5k;zCf&L@cDARjW75vf>{IkGdS*So(7g z#!TpRgVNnY75UQDa@pS3X~f}*Y?t~ltlXMYLU?5P6_13YrcT#c$gf#2rIQ`$ zwmH-RH+ri*iZ93i%Ia##c=2Ys=TLp16okEX?&?JpKF$`v`ENh`{-JAD11ZB6HnDvV z(++&)BeNDba|ufa^{N58lCJyeMhrg`slj0;5Yyaa@d^P*Y}04{BiJ<(*v+7z5Q(So zYcRC4dW%9Ff3<{Hu8J}FXrEULsqcUWon^J=`3X?*)`#JEZ%%o&f`(AsCo55Z(X@zH zezC(tg2f2LBe=U^N*`d3l)7*q+%vnk8%dTh2dsih-2~8tuEg^);6bFRqUwP4HwU#( zrp@D6D}JT|8RK>nbcrHpcm)Nz+Qeu4NewBN`F1MqAZ&Ho z<8U8R!Tme?XyAIGi|quhim8YHIEZikcp1D=Q3+ju(rOVNNTOWD&LX5 zft{U319yo``KITQ`)3iAj-CvakV^I`)_%ZfnybWGA3RQR_8~M4 z$lyf$byC=R1oJ#`xhq$ULg~Vtw&Kz#FeqwR`}^c+2dVqv;f5Hj4)7Qoz?}?K6i8aQAi0{(#`i8u>#kO;VC` z*rlJDSa+bddb4&4F$v)o;t??nXn8U(AKOug;k)RX1_kc`b!++1t~H8VIU!-HyBtKL z?>L6wf{W07%}*IxV^_l*4Ptx@Y!&fpM5dvQsd{}c$YD&4;z8nB@!4e$MefpkFwc_` z>9(w}5X!N`1Le^V%k3U{Ahjx&u(od+Z|6bZ&A<&}?NFmY9gd4DB<}B1!01 zMz2FsI=4)jU9VDJV0vnD_>gKC1KZo!Cz7`=8~xcM1^GZnb|E=rd8)uP*2&oQdS(vc zJyKeTdTB0(=|g=)LVIbKu>j1Ddg81aH@xW^24M~)jgA#*|6fl4%{~Xl_XZ@b+#py1z)>A^3l%sG0 zsCcel1-Dx-{3`c8?oRD8gnh^V&5ML$vBWmm8HV-|66(?yc zv5=w1TCTdP$4E;9K92?e*wD}YdM8019?EilbRB@_`!i5-9Z7zMdmYKK7)2iYmz53% zMJh<>hTrPe8KZ*dL?n0hjD7jN%9?I7HDNxdr^s8nHyY@80_MbR2rypk6yWr?s)upr zshLk)TnfcjKXX`%gbjoo&1AY|qy2ftdT1el2=0fCLDr#<3UGlQK__h+=87GFcBe^CZGpV7ZkvQw%@3IpX z=EN~@f7O66`<6P>)ve1iAgq{>VYE@pYOZw(9l8g|@K8v9#-#Im1OhBAVZlt7pYCAy z2oJSCPF0*8b;i!ZKR6On$#C?$*e1ne)G5u*qT`<7mI#Q}D!B|H8)h6)Da~6n@%BAu zpBPYN_6sg_*Ppysb1>ay?$s5Bi+7u^(xFyu~3Jt)m-aa^^w&$NPuv*OOi$j)&# z`S|JmO5WlS2BC!jz@ARCn}igfK;B%u?BwG^66%|@Jz=2g)yi-AJ@ior{}l(i|*@W?OSEu=c^y}MkXagyjx;Bx~%U#-U8S^ z&SEhR&Qp)vnAo!g;tM7P7=ijTtF}i6rKl*Xd{>D6A$E~$s}wH=wp*9p=dsU#Kwp4S zo`1w_wFJRLE-9=<^7~E5H49QMdp7KaRGTioC7GQoSg>6=k_+vwg_n{>&qI?-Z)dlL z)c9SK>2{A5X^!E{6EyBqa(D07z8v+dEp(X;TI2D2`WyCrlmOi%Lh;8NbQk}n@)Zs- z-$$S|(1IoSl7sh^#P2W4ITUQNJqu8dGWn;qG6e5rgG;WdEa3H;6BJAi16_N(=9l}j z%`N(|e1ee=yj%8aSVM%@}P0sao`YD>s)srBAZ=3h7<(mQ>m zzD_3^f_dKKydS9)@ov@P5t@LLo|kvgWYBnUZN{Jfx#_`38#!jIfJFM4&O7iC0HnSE z+JaO$C{^Hj*pEi%-L5&*DOboMT#9G3=)#D9_CYG)4CXaQHS=C@%VhCqr&`@*r2@pj z&`K_BK>5QjS%!fBMYV6-AYX1+vu2pBFCRTq#N}I=IUlpyYyy4S(d~QTFjk)(yoJD! zM_?Trte>KMLVq#7ZhtXiUu%EYKuOcqT?agwbx9 zPO2&>%ep`nhnLPnr}SN9O5mwvP0Zj^i*>}Uz(x3c`iywNDY6iTd>50%4p-X$hhJXrL~!qWAH$ z(UpD1U1Ni@dCY6UAj(IL&)$ii^6dU1=A7xvhd!A5roK|hFFXhRod8TVkV<0G3aGo@n{|7+_OUyy!z&kxppLZlYezKYUpgTHET|gtQev z*CnZK!&E*1=vAGwvHHOkQioFG>6>xOL|!>iXB^Hf1$<%}pa|6bq0nSoQ1^AVGT*5X zuT{Ak=MAV8B~bQU%eI3iq@B2%zeRFvWvEyF3q}m*ibeQE-=}|azU~UajA@2U9xfgw zk&pUFLI=xHAP;E@BX;{QQa;ZZE}3Aefa~wYY>)tO^zJj~V^gv!5GHhkijj^g{t={8 zk)yRyk#)y#Y$-&JH(JIPq3KLA&p)e9-sfvoed9@?Uq8TEabc~LcxD{Q!u0}_ZMYm8 zuU#smT}cy%ImZTwzdqB@Q$d4bdDvU%4}OG3aVeT0b(;noyej(Nm4-jTfe?tb1Yv0Q zrs0#`gc&;U3cBY~K2=&CR^JLtxrq=$iD9AHFl_)k6G6|b8i<~kc@e7`-h;yRpt1$` zQQ=xJ8Ox6{rr;}Ng-L)%-P={pb$Oowpk@JNKtFKESvne~Q_nM6D(>2Y1W>tQ zlrOGp&AH|-jg4;lBhWi;#~rox`dAw#si^jAZR1X4nUDW;Rd*f69B0etoyqNZ37?_L z;(yI`te-I$`>x8+&J!Fm9@OwS!g!o|*kl%|L@ATLED^06FQ3RMTo_SEd-hxz5uV9bY%}GH&K?K1I1kP3>|iW}t=?bs zZclZ4VVSfOj>D-l@oU!uqizlhK~8SfC}aezs~y}gjzKIKXkEKLVDN_{n$>G`8KbET zr@^==?vbSH>-K(+pC>fv^EPY42;%a=P^pTo2uZ8Py(YeiF4!&^NYhe&W;7gd5I1fW zhUF)b0CcyEdkIx|KLoDwD`AMY5$4{^%8QxuHD5s6-3U8X9TbeU6JnUsj0dZgw`JUJ zsG7`=(l5!G6&s5_I7pH@>f)%N)b-9QzIzXIyFaqLdEwpW7tgK}Ho&;W^2EQa*K|;C zNzQ+lj+c%&`4cCkL5=(`B;JxA@gJr z{qNXJQEE7kYb_&E66d0%Ah>mgGrJaMle_f_0rBZCt=1!F<8|dbB2;I2rSccWc{T~* z87!ucH#cxC_Di{4QR(1on3=|`1`kc72v20IB~*9N9?UDCFkJFt8S)-GzrJ~HtJFFc z5=xrj<+9|@*f4OlZIe=9Lmm%BB|~2hkc}$lVht7D&FaSy#1%hRUL4S!T17Dzsp~J} zSLPyah9VYNQvz#0y1`0AKkIC=0|As%W4ngI;__Xqav3hXl z!zKUQuXcYjBST#``tZs*P#^aqV5&d4-2`S`IR12hsPNG;f$E!-Tnwo<&V4O-W&mTZIU*~73=2N`HdAsN) z@9@#ALH7JMOh=VIZj^Wua^t+kxXBFV?X?eOz9C}}MS2Pp*<{}sZN-w5-B{ix_gaSG za77=T^#Xmbh>=@A@rPfu7^A(d4t)eh{kpQm2Wm-rKe{f8c}dv%H#-PrDC6MLl_V=R zM>r9)Y5<7tavAnnWCN_(%TPW7?mo3bs$|9wUF$F0m!fr zyYTb+PWf~h;UVCUSeBRKA0o*R)hJLW0AJW)po%53u^mruh3(?o;yhc#fN|AwJsMzA zZV&8G&fUesm#e?sNYa2-dgJlQmPu}zo}&r*HAUoOAl~9Z-eE$6^1zSgF(*!LH!(Z@ zu+1+N6>XV4urh2+rStMO2~a&VECkbqFhP$c4(xaAQV>?=k7l;bN1-#9vUOBP2j z(VQ--36`K)&6uE-OW@F`&Rn3J5)J`X|yf3vHUqVQ(YRX5*ku<=Q# zMZX`?@M{hs18sF`yYyam%$tL<kxQ~7o#o#7BMLmSwW;p8Ib{nGOlov*>9EnpYOvlDQH*l3!` z-!o0bwLS zo#6(h=9-*Z3pG{VeTVB0`#XbI=^BRD&djcewP5|D2?$s6!70r~0PSNq&%6lx5-w^= za&~+1?Ln)zxD3(e&0!_iSinuAAW9TS;$!bgXY33~3iB=Oh{*fXIeP-GusW!(ciHth9hx-%C*L1a!u!oC)Xgj9ErJD4E`*3tlK0Zi9*?e;s@V`+ z&Y)0a>lXjBSUdE!Z#m`oniU^H1AGj^G1$OxnMnCL_GN=Hpo_fP$FjBR{>2Xu!w0iv zv32gcltK+fEi5`QFYxtxkldEM5i~&r3_A=4F(VK^6(h!mIdqldXwq z&G@r9=AR}VLOFnaI^E=bdU)x6TwY`Dz~p;^fY#*U(|HvO;3ocucR1A$%Vb(A?9}8# zMKTa~#y_=?u?a9ry}1-1s(+JvP$uyyr3%y(NsJsz3+1WZ1G?W0v`UbDv9an zXqDy4E%Tv1O#;j``P?TKOUWSoqCW!(Ch5hs=5W>PzU~3C2wXExLpGW1 zGVCMuQ2TgRQJROk6m>lR*k2K|E-O!!h8fI}@EOUP?5AP^D(*EtgVyPN`CI9Tj86okp zBKv}Mp41#2eBRwsgY)g~3Y*KK`+bJ&$j8_~HwzCDt`41SJ6}2^9^l__x^Vbi*lz%J zY02;-ML`jt|5>ZJ*H4lB#(PyLnF8a!@N5a8t|1nVtf6r;&qH6rAxE(M5{ z@*JgC{vH)V9PA@ub7115ouWzrs4TR`8ghU)Ad`Sb_4HIU1b$E4w23{q2hPpn1d= z^T-424~WGSaR@Qo?KybKJRpXHt;Bm;adSYOQCT(_muhPCd;UybjhAw9D_CA5W1JK{ zHTT}`5_>J2^X&kj>y0dM#sUcHp8}w03bA|JiCyYcxi);QW!-n~_&q$KhLF+75~BU4 z;7D3&T1`9)=Yw@i6Zic;UC=ywT+2_GNlL{tqtRHq($yXLGDDN~DG;1}MF;4+X`E5c ztclm0A%ccCURS2TTD(W0o%0!LZbciIz_3aZno!z|?Qw6uuk0yM5i;v0Q}V1j@8%JI1Q&Eaa5krJO_D{xk8jet8icbVgl|G;S@p%Vnhb<{t?V$rT^a8xYUFh7^0ouo4&a$hhR zmy_KeEN4d;sGeY3gOf2k&`FaZe#;j#_I4Ak<#xR-a4-o=r##zK?5JSrD7*M6^GZvo zU}Og^!JMt-Lh#ERwKNyWN2Pq|`D#hi4gxo%Sl(Glf|Lx(z4l_xnAvd(Hn3cdlY2@xaL>%cd(}V)%0g$rBuquVxaf4 zoZSJR-%LVBHP@(AFk}=6i!AT`fhu#6*2mRocef*zGm$9D9p(X;ByP}S zm80ar&P;=H+%0+4M}v*zjfr~#BJoxihel-sd-52VgM$t&7f)lh&q%{ymyK(^`GwSKdhlL=X1j-r zJyXA$-8M2mgzFf-6w{4d4#@9dZpztM5TPW)kUkjn@ENSDFV2xrgCl)xz50q()51_c zJ<{{H4e02I4MH_Vng*O5j3?lY!^+wkHZbG?=LXG;BkB#SJa-&41Yw->W zaKHD!=b-~nbkk9O7%eJG=i7obR&#P(SPU0dQj|*7PMwdV>Ezz~6`L$IjgK%~h#(Z> zA#aUmyhAqLYHu+PyOsd^sMK4vplMlWAh zJb2yGzaDiOZ)ko3(~w6!bua440;d?Gq<2c>`>NTPy|=jT^fUf%$jr3Ff@Yu?$odd= zwGfI|OMMq8*hY3L^5goh3@ov`##)G{boZ0!hF2)5;3aXK#=ws=X$(Csf7eya929hn>p{aBTU(Zd>_{>!FTZB_1%2L$AVndzo79P>byDv&ggcGq`VOn`{Pj&l=;j zpIHo_9cWY$L;z3efy;y3hUOf`p6xk6;hjFBWH*NyQH!xU;`#NVjEE@n0dB@A`FZl* z2o!7hh@kU`YJy9DZ6vy@fw-5v17-$n%}3#*{zYZVqT~iI#!BILULoUyzcUqt#r3MOOUghV#(u z`=*?KGq$FVAROVP@-m2}IOhl_JgBmmOZwv-7uCcgha-e*?YRLm%0FE+{1VjQQv1;j=ao+ZBbE(7AQ$;jBTln*$ z=CHW+vw{G6bs;YmX&Em4d&qvcC2l5n2$Wo3m;}puK}B~mWX7JtJyPUiF$=-gs+6Vs z++c3xP!=zL{A4wyG>k#+gz|wWjreJVlOQ{Pn{lVNWu!bYKRE4by&NzOOsx+R_a+0< zc$sO2999EDPEv+8GTTR&0V|2r-6s^V(gU-$LDG{x(Mg@zf7>Pv3MqaGHniU-+Spa< zwG^?PtTi5L${GOpj4)MW%dMj#IPA~Y0;cFtoN7D}Num&W!eb9>bbxZ0*tkFUey>g7 zfJn}BfN+QPj@7eS+H_+?N%D<h9NP4t_pu2la zKZ}nRoWbiC(l$!x&{|Gf&P4(C&MKv+^%yih;!P1INowv zR{;uxVUqlwwG0FvTz)TE_yz7v-Ba)%PKSfFxIi>;H`5=UAw+tX{GK#C3>43p%dpFg zqe7LvNA7rBN!dtLf!WM3ZMkI7*7!OcUA-~oUzB+4Dz{Imx?o`|taA?TGMcV!A4Cso4d0ohvf~1mX$E=)((37_x0a513zh1Jlh@S>$Q$sG@W#n;Rda8{4mkOX zy)b9!9{NFy`ae(@XY`Fzy-dA)R(O0D55sH+5Ia^Dj|M*cOfLP6NX=l;9okja3&`I{ z0Z*KA99ac;CXE_d^~jt~LmTZIpn})z5fXnZYjc`` zJ{*RPH|F?7-wFO+k;0ODruE?aYQU^C`9uk9@GH98=lMu5B?W*B)+Q&v3{7?PIena& z=*MofHg3*G@K-u13@8z)fNajTC%6eqm)BMBob2;X`EIC$UUuf1 zLJaTR_sz1xA^pYy9S{B)+||-hd731lPj@wF=WmQ1p{)v^Ow}&&c;9r>F_qplufvrQ zDykDhvIQbuOxMzoK-`c&KdzXlQ570xqH>T)Cx?tpu?ZpKe?QW)Dcz1Sc-FDg=~H)+ zTjn(nd8`!{9_!BrUgt7O)__9-cW~1oeJ4y_X(dw}gEBOvDM6P6)LgHa0dG_)((IE< zVp?lJqfp~!5XPUd$@i(nbjynsb)F(IrKXi zwIlZ7DMb(`uhvUeQ7IZ`aKv)^Z&674?C8E|<{J5|I^lycxj*nZEaQ0uRKsAC_FsiG zK3zt$&}2t@v|^qJFE<}!m}p944|L~WHe#*?=Rle5ls~_ksG`Bb)0&3t)-imyM^oYF zr7oM>Bg6Jdo=L7V+8ULiYC&3>LM#bNeNhDcNG^rfDa+GgOWYGj;VO+yzIZkt|p< zm<#lgeN^0Zz&wMT;i;I1T+3G9Gm*Yw0yBdj4(oUi7XR@JuGHhO2=u34o2G9 zubKxj@28{9wc;Ml%+{P311{RIJ!&}xjy4YqA~A6Hg(=#Yu*Lj(``MdlHNt*w-|riqLapm1KMVfu2xgn?!6kaHl`^Be*zfj?i5;61tF^ZTwp_l)h4jw}Q@8@^{Xp-4 zvTb!+bj7?KS$h`73BYql+>hUlJ!flU)3a|;6P&RHpF+Y+UCt%6RBs75_=9O}Nt2gb z8Dv%dlx_X}pxEr#Thj%ql`OF170_h93|T^WgNUKp@vXIcO>zT!G=E2F&Sgsp?hwYs zzlpM)K74m#K<@dK?0(2uKyTMBJ~?4CMj5^!VD4BpYjm#pH!(NPln#!RO%W*yW4Q6x zci_n0>ZS6ytLpJ!ExaKR8dv_Vfn5-wx2{uLAN*Jqx*A`E56~jfQ##f%)fb&o90^%+ zaKqkP+$9C}9=|SM{H;Bql zKa3~rh4nR9P7U1V_jyvD`@`U{TCQ;4F>uWz8*MQ@Us{N|X*9y)CUj0qzfC2omTHGx zUubZ83MR)3o!7QF=2TplLO4p&pPR79VHe131%^*4VM3r_-!0d9D7yc1XZLFD<>9H5 zpuEK0e?h!L$9k_Cvp&Ew0k#5#g1?*{6)3_Xkn%2-<)W}hX|2_B2&cKwt z>UAxs;@t^rO)0VLYUw$}G@)28>iZY*RjN+TTyrPfD;A&{TE{aCZ~<)hN)P1E=yK;LE-lKxtP%m#_Qo`K6+ur0f8{2U+_K~DFg#|6^EIV)t3f(*ICyR!IY~Pt zGjTfqn)xdh=S0JQXb+cn8omUyf^l$d>Ev{cBB6jjYuFlc1KLXehDoEL>v^nfu zx6hmLV-9;7uEo7f`_0h~&2R}(3hlvnTbRpPdKp_wQ}|BS$@|{vgPe=6kj#r5%V9%p z5Vtg9gf6vv0n@RgQj_4rS2}t#7!>GhPVdBS+0BTH1;QK<1hdPgqR}2r$aPgcCNzBe z*j8^`@*EH3rnF@OgfDHySSDPSa*xCZj;IRVc(`6xhWW8T z`449@$OIqY&$&oyTBY#}kBQY#$7zRP5e0Yt5hC&uuvA-HaXfITIYsQuU@58-(KQ{3H$dKh9nNNk2LCX*g2`_5oLBC9x{ z@T1-Tfg*l{6)VQ(yr3lZsn;dP9~t9zzIwPlAbq!_b-wl39VI)5J-*r9SXL8PlqQUv zuG5_);qlLj*9$~6`mBE)kB-4)mkUq=RBO8{Ud2>PRI^D6hN9S*}K5F&S|I~qGYu(Xw2j7yPzH><*=+X zjDtQ>2fgX5&#Ki5SQ;dM^qZ7hvw~@pmQcKtC|I=cRz}=4Y2`Rxq%AJL;vHbE^mJq5 zXmfkjt0dTI6yCR&sC~^#e3QcWa-Q}GB_`OXNU_8aTN{xrB(^W0p-{dz&((;vh(Ytc z>pMtdw>nNtD&4JZ#PQ!1t;yp@)Hus10t|U`$F!TLfM3s5Fb0@<7+R4;7=7&rEcBz# zm$t8$aLpnP0PTQdaw3I#ozrObqM@j*n-Ygm=E-2@_ANeQeo>K@R5a6n{o4cjfr*j? znm;Ti>A-ig9X)kbuwoM(&qbb48=|jgVYQ48-Di?xojHQ+ob*Y|e?{k6&8A^Z?$OGa zk!~=I{=GBxH@%<)q*T>p{LMoD)5>fckW7 z#9}HK0Z~ zUh)q*@n^k_+fK6>2#U#rXDyDmEziwvyDcu>J_moh?P_PE&3?wtLgNP2M*BpK`*>N; zAl-!dL!dsEZM9#G93lZsy_%a(fb zTlP-g(T-cyxmrlV9cRBS4G1XZZYm%mci7k>ilEz?-d*0Ii>yMdO zQ?kL7IhskELFK9E{y%jYvG0hQeBj)an(Uqjn{F>04c*yB*^jYcVj`{CJ_+;$vBIj8 zrIf~YuF9P&F{2_sB0}uBBoEq=m%_|vYaP9DT^Mi+S81Kk50&w-(DQl_>0vPaW8dUW z3(ItWS4$#HhF8!lS%M2iBU=!5??VUv1+PL}^n2P@?&F=&rnz`>vRw)WI1&|gP44aI z_uR{{*)crkMV`6_1@57>a{JpIee#q&DU9A2(2Md-BKOykxgsu+y=&3FAXVKc1+x=> zGcOVMXqoTqSnS-vLuXu;1!S&je@6Tbu*~-~k#GVeM=l>iQHucWBuk$YF?^g6EFcWA z2d!&IRwo%kDJ=Ww#Kejxv$UiBh7ks__X59RlG2}bgnu4UxB*XT&*xUavJl~zGm7(f zLjJ4!9Nmyfw1e^yBUmN|+5E{v|G9A=)riJ`98q&IBH@bPqy8s{7o4aFjr8_Ir|T52 zI@s9I;68>RopAo87MUc@#e)lx8JZf707dEvZxy!C0-0GfI$mkMvgw2}92EIa!ApH;$}D8M@iI9_6h zxFls>3pB!lR7V$dkSDSLTqPWR-ZgpZWwQ&tyFPBDZil)_ovEydnf}0J(X^wSP6QL2Dw%*1S>^Qsx;!*M+|dd4$i0`Yj05xYJ+oaPNOH zecPa=7w0h5PV+A!%&9)zclqXP!gDRw;%~?e z4jDQw$BXLxRq60buMH^<>*Pk}MAT_*Lvd?q&-~%-C(v8(%5bXAo)5kIn01yKiY{|I zd-Co2@Y3K2I{dBT)O6?{Z_hd`)hW_fTid$2;tpqm8mF~y&6$J7i>WNW1@qoldnU_n zpp>HU1zR2J0bQI_VW9k)=MzclF&}12zMVR$z)615-#gANZ(fpgMpP-BL1{i zt33g6Jz#I|}GEagOqJOy&8@LcegWeRU$ z@3>CMS0eAD1{4!r*7*J-*wJm{h~0IM<5tyu!Ui{T@+|$UM}Iy|F+ToC$&^ejvD<<= zwb|YcT`NYjsf!PYFsGsulV@k0Nc<^X1Ot|)e@LsMb1G>;lvt%UON~5=jhz&NfqRqA zfINAi1Rb-+9kUAjiwX`(T+4x0dM~<+J+eM(J8;@x_mXbJd=w)X@}eM1=Bu4WfV!k~ zkzZe{L>1!%URZgAD80Uz3I}(B=tZ)a&y|79J?gmJ+bM>@OlQF?p9(HESii*P)?dNh zLl*lcH2Bp8jAb;e?!b`ah=|lmf8%G!VyEL;YqMEb$1>4Us%)20aeif=sBtnvml=Z~EA5aA~eUBAx?8KGaPo zJPL#E2p0vkt_Vwlr%y7p6Ju?>6hgs&U~oT4Qh3dJ6A7?zug+^kIKD$`JEiPLVROgG zf8_wkP2&`#=Owx}D|el_W>}TxXmK+ZYs6W}kA6 zan+jx=DAe>m+2sh-Qu=f}!Ngu!_y92MrC4f z{hGHk6K51VveG${C(Caeo14|eZJ-n4vSepV$>AaE2?-H>Tkv=f5hg}s3Dh;1S%E<_ zisF5Ka*8LX6-@ElS^X2w6Ru8UizW?34CKCT8MK>r1l_F}35|bH_$f;-m_bTybD1;p z1bIZY62y=;CmzfX-tb3wNF3d*O=QE2B5C#tnTx(_oIB|q=qq(qaf(#ub#?-Im5{lFMb4Ru^kgcC>~He8YDGE4sse8;VHt0x=1q)dmUjKHr;=>x7 z8)1AK+{+TB1w2K{u*~uqF1#`L#UHwIP@d#qmDqHUmnw07Y%mUICUn&Y5m{A~zkOsT zjC}4PR+4@JF{^xfDu$7XS0axkgP;ux#ui^AY#&uB>S3z}$jP`CT6ZrEWD5Az!OI$~ zqw}9^E}aVa6Os=+A(}AcA`)2?8hK287spI@iSg@-uD|f>3uSGbK9Hjz+%Wvfymy2O zeBkiolFEkwZYTtAd4u*$#IzEig zqPgZ2h90kjAi}_W|HJUR0J<)69XF8)a>tR3ubC({aM+-Dwlk_C+xz(j(ao2E`%^n` zKhH8N^I;b^-czHMpZWd;VaRTbNg_FY-W2qix`N*I`KK?%~&tnrbVdA+T=g*1)1z)pu3FS)psI zT#d>q-UVXfZt}3(SYxeb75c|9$`MN1ja}l{pX+KHXk}e&s+{N!^Hka3(T*4S?|OMe zDyzbRZhw^uq@sTtCOii$N32dxCu+GFPIK9d)x7#Z`;LTd(rcGo1okzSVn%n>_32cu zI0f}XHn8@bvCV3?41-Aik%=O#z=TTZNDL``s*unb`5k7F_dxL_P~!4WLJGy(SB;fy z0zn>QKUeeik&d*|cvlnE9L#Sf+B6DLE{7vL4A$rtkS_)hQz@ew_Y|W@lP4J6U&h zh@xZvvUtS3t8rvG6A##0V8aTy*vsKfRZtg_xI3{izxyYKaastwUS_# z(_?|+blEsp7+`+Q{q-7j9^sj-oFisBOk|IQva*aYYlewV?HBDZ?7U+hp(F^VY^7rz zCgv0sPkoWoMuRYi7ioX%P5P*{^BkTlwg9VurU^}VImjh*A#T0vAIeNTAvrOW^<2D( zg*wvrg>o`l99A=3va;b`ab3$S@hdTyq|Tc0KxTLAg1-=;nk-{Eab41ELt)uP{s|tp zW!gb|MkM~;Z6DnW3pR%sEkso!AzUtFSJzCB&jt{gg2NcPQ`c6qEmm1!2+cwY>uXM9|tRTN${^y6munr&>;<(V;o(H1yo5yRX~KY)Cy23Fg0x-%8oWMBt$%`3Upd_dEfmo)xZ#w)kOM;_gt%>8@|^AD#niuShmGG_ z;+a9eF}j6V=>gsoEnvXZ0N_b_viOcK);V2(hBdvL^vZ+|9?5u_cZ%t5(? z4QnUtDG<*Nf6+cQWo^l+@GaPf&M=Cq`%kogWeKVr-~t_D7litz53X_XyG?X2@dMAb1^vZS0+2j1&zLN9>24qjDtO5e_s6~Kr;jJ(A zcp$Xpbb1yW5#~6K_AI(5vCC15Ot$*s0X^mKn~-=82#m!D`?{bt$S*cHHR)7h@gdUG z*o=Yyy(F`Rtt?&RL-?C_ z;p~Idbv{&`aRMrR*wRjK0W@CQXz~y!X7?b#@HmJBQe_r}R9OX47C+e{3COiw*#44* zT)h%>YaQp*@6u-<8bVj#G70F+XktP>On0`T=*?l)=PeL?Og#ED*ieh)p+!X(N>4#k zj)=G3(l1d+hF~pi;y8pCHhrv<@`!s}lWm~z7UL_l75ph;J@i-o-tewT4b*l7N@Wv? zF0uWdn5T;rnzHGzx5W$xsrSn~x@vyYS(3ZkYjHHJV~GE`dv@N-y=3LeZe$s<@~k z3>lvRq{VsYzj5?{?~p8|#Z(S7-DQ)-i6Tu%+k&(bz@24PK7D7*sKp#bqhC6P5#cIX z53i6d`4W{c(H};V^;AW;XGClpzQJ0xcXKtye<)%U9gX3|arLgaxyFF?fALel89Cn; zfrsrt^tx!+_qNi8P09(t(g;<(?hGQ%QT&)@0d8}rl;CJM_p_9Iz!{}4$mdNYyD{G^ zS_rXe(ISvd%9ISC&-k)YmP^llEP?)%omFvTpPh$)p$Ziv%W;+0%FmcJ9UUiDK=-hq z3red$-3$!cfICKU@Lh91r*9%2cE3d7K=?SNT)z3lB^y7M0(}#|*H8HIKH)vnLAXWl*s!o9Jsx3=_=`wA zt8LW$qEWBNCZ?HMtjtOU9iV`UoIt@}9(X!ZctIoOb^})4wu=j_2k-LIvHZxVGs6T5 zhdaz#A0k9+2S&Bu0M4fzO;+YyqttVerV@UUte@sf-uSfweBBUlmFTRq2kOJ;{EDj@ zy0;yQDWhliZ^~U2Sy`4WBIDYoNC~bHYo-g2k%>wX(+sKsUf4%XX)kZ*??D)f;?nAe z(RX^2xyrtp{3rOq<$!(J{uj#pw}+|YssiDw#P;V%JcrLx)^XU5CqgNyJwCe@8Y1$QG5!G?Ki?U)p&RGN}D1qf{0v@ev0 zZ*i%EHH@xdoC8#qPQ}ZQ$9+BJqAXA7PC)4b!63y zYUl+_{H(%5bq;kPc$LueOCIQVYtEd7yRDZ9rIL5b6mEzrv2xWC^MHU4E$3{L}bf2@3FFfO+2X#79Pu*Ekt$ z<&G&GKnspklm0Y4W8v=N6D;iJttgh&5YJL~9-7Da(;t&2P?y}4Jjcc_qF-#jLjS=D z$!T5K`2Y^#Ss{mi)p1Ru1|%yn9({~`m)z^8LMtx14)qmbU!FN_^_{#+qcj#;9hJwm z`y7M#a)kmG;nEu{uY7}KN160VyCWy5`rq+a$tDn+>1V_4>xy+zdNVOU3^x{JCw1n< zOUMmDC(+)TeHm$}_s_jY{m+pGvgdX1=b_73GOW;iq*>O#0!k@lH3$z< z4&(OrNB`BUvyp6_xKo%*=JK6X&0D9afa8D`z8E%1XJ)m#SDkc|UPh|$SE#e59@38h zyW%9Srwl13dG`X_g7uGG$rk0d)emi!?MGT{d@hu!QHqQl8}YpxwiS^C4To7RpL?GH zJY-LSC?0eBkS#K$j?mAS{XN2A(#Rx|^o`A@A%}-E!$9tX27##Nxb?t*Pk7bN-%zsv zYxz8?+1Vfpy0`ouQH82gVUlWVKiyZtH^4u(sNXYB?CS~_i566WjG+1#nLM^n1Y763 zfz=dH>In9b-5bt;5A+J>LrCJYq=Q}#-uSMLrI_Hvl=9$OVX9t~*$G1>wRXsXiosLN z+0M=M=VGcyqCuo~2hoOsMM<|*jgK!jdp(hCt(DV6s2iEkF0Bcbw{!Z2r=%Be^*BMp zTHj$TfSKLmCZCWMHBW>s{=5Y+&ZWko`%|jZ8jHNnN&5mn6MZ%SOl{nPa2rSTscDUd zKJS~mig)NiK5h2^-%%J&Ut*u5vSnYTYlv>Qz~Nh&bdl*7b%)FgsusJ2TZd0~cxZ2XOygL28lL17ckjd ztd0X)rW?zV*Xi#4?xU6f!N@_wM0jO~x0~6E^aPS~<`n}stYM0WLHm+4++yGx2;MV! z0ef&Y>XN&_O>*W+eFv4dQ728pmok2C-tzj|8NPPI*RRMk9Gsg0!0tuO*Z?2 zVmvn%JhA2SsEio;XiC~FLR+MX-i3o5xLbTCJ(U3u@upGCyL zNYM|Tq#O@0a1%)E9=@DwhhbG_3EM$DVef%MDYd%w;+$kAZMe~R`M2||aI3#A3~W`M zj02UB^$jaZNRGj+RB2L0HcR>q`e%V#Xto=^WDTF@Hxh=B4ib7mba2K_1YPs#N5nU- zv5`#@z#6>9+{corTJOU&82Q7i*CjQ64R*6v#}AWNE9L61y$O0zuSo`#Y&X-=yYGgJ zfymZ_86mJ64v5orJZ(*%6Ff=H^`4X>?Bqn5JXCg!_&OF?Vv4J9KRi^Trt@0zfs7wk zmckv_2gEu9=v$CRyNXan}%G;9*FmxWlLtS zkaVX4BkFPNctWt#`uovV6jWZMn(E_vv|t17^TKNTy4F1jGX#Qvje&LK^7r+NH zwC7A5R0ZcXNId$PH5T4tg8PVsBco@|PsfKZJe(%!R+iQ@g&)<^u|5v@!3w{Miuy&$ z8|kB0+RXhm6}Zo>bMx^mUew;-6ZCP%05p0c7s~g;M-+3&(hI#$L1s5?y6qw^SMcPj z-j#@A&z3g}X8@bMN6-GB>n$!xX11M#m(kgGH@*oI)XD*hCcTMeT_ils$Ychhw42zy z@`|7q;a&zOXGiB=X6*4%eNLc$z!`7xf59{?U@?BZG-_ix2C_05KOVC61fyh3RNZ4o z!_CP+^1D6{bR!W})4<6y^*wnnAwgqVm`RUrjLl04Pi^{Z{Ee~8n$1^>%(|YERbH=8 zZnogK)=I}Q)m^1BV4SyW*bBH%uw@Dj$z~$@T5x<(3ojOP<+n}_-q92W5f8|lHW@+B)5bivNs@k%rnd9Cs@k-ggFa&6VqpH)Z;`XBocbP(6Z8*5rS=7*GoVXmm zLhIoX*s@LGS?x#XLELS7Fj10qc`{rV94)Vz5eIz7pjT-F5Ekjd+jfX878I~;sN{<; z;17Oamz;tZD6&FWJ%Kw5z7I{P@rGTMFgs#|nlvT3T%DaA^$c^ZD;v2Si%d#9Ztp)g z_p5YCGeD@bK2>?Y#&vjuJxLNe{#t9R!G=b*F0n%>gy0=uy#hW(4)WYD+m4bS&)BlcvONl)JST2Sm@GPl9$)LkFn8S57onFS@yIrsyfB!-PHh zC-$9ywsn6VqQ(hL6Tt$d)V92AXlorbxD3=E(|}|o8ug1p0K9Vx6*i%{W=nnx9$~^d zZ>7pbm%(x4F=2>j*2ev28$Y$wXdiHPE+HW?y8joj+P(Xm zT9>|B6w8z+J6K&=rG*O&+%XSqP7THrYO9@Q^n*b0AI}L!f5D)B!jh9brQ)w1yjFsH z9ZF7_hu0!|tUR&*LG@*v55rmW#^ycJy^(JQQn0=}%XQ(6DpayxjC493@ zpk!Ljp&-BFie>t3OJ`3#_4@)Khoz9n`eOnQ*Sq|TUQem9P7D%&d2lfdK$y>2V8 z3$xR^Cc#6iO0^cJ1_3mTx#@|nP@o9~m_X0k(*-Jk64h9Im$J_RXk6^hq>gn-mzXwE%^z?fQt%4rk&dT%q!K0q(gH~C-E%l_YIqv`J;Q3u2*b(KBCCZ_F5S6ZFjdNfs5h6fO`L_$y-cEwfAtQ}d*|rCl*Z2zoWUOU6FQd6c-2 z>@{q-BF3IfgS&j7n_KBS8R{7O4}X=X2s%(+%f{i36x0L4#iyIU@f4Uq%K=W#W1$3(itNrsd63n8$W z&$d@zkqb`{#pb5cH?AkfN8M6*%p!K!ZL^cS1^B&ifQmmY3bpU29@{5j7-=ZjBifdcr-Af%9B)p1|NOK2v3)SE5@RF zFqh+Z_}lvvv&5>2up@llGVB~wZFRlfG)7_c!N|)9blmcKVhAKlZtr>+e_G*+D>AnG zi7}dbC&==wbtSBa`rXzAmVA+1objs%XN{{$!pX^49R7uCyx&$`G*yxE55a+y3xFrx zHyl`;+-(WFM__+g!Cmp^Hx__op}VBFwgW)b)aq!RW?+g4xAy|PlK!smdXoS1Sb>E1 zT@`VZCwOjmWP`nm81eU_&I<+Vt^Fgnu3MvyudtVma(_?aRRL@(FsFyVwak}qSt1|c zej3;4G~5KN$8S~hc+9=+es;gwc&W_Jx2#mL54}}+E6d)qcEc)RphA1HlOJZF3%9eJ z0t2=kh-z~^b7_ywottz2Fv6UvZD%_G=$*YIyfIma&g}a_Y6md63vDJ5MV_T+v zGzUO+NU9?R6dDmk11-^{^Owvl>o7WbQA(yzSR0bRq(n-%@Ee~2S_iU*|03oNwXxK0 zV^))>80sd2Pdevz15cF@PQNB2)W2U4871qTIW7@TwR*gM5k?@rGqut%`mT(mF83=X zn=%kYRmT->WtBd$&HQ1{(`IpK827hz_1n$nI^BFs#xZB2sk1P&Zz29*xckbznQp!( zw$Fi~D@)wkND45@1QhdNeddL1@9bvv(=C%5pXig(WPwoI`P_NFmT*&*@_n4bryWuQP7`@;ANiMMsOW*=@B0f4_G+< zDK))^TTtl81(OF=nomWx7{|zzYF6wvl>RzLr+>mwn`i##fBXCK>@SYJ^Dn%(dmIe{ zikgqIC_Y}0gZ8R|<~CZ}&|aiH)y^jL2-&K4LzIe8GAmNZFKPJ5dJ2( zAKwWq#X_&%^hIP1vpZqJYy_@(#V$X|0iim}W}2p=s#4Mv%%1as5h>_RK`{*O>i18r zdU`H>^#t}02AMGASzfokY{F4VtFK^-&*IAks~|kr$JWZx`2m58vqSQt`f6ZEuosr$ zPK;m=jExKp1&c{jU&FCEw|X>YFgb(Y19#}x0Zm!dALu!O!NM}4kPG2hA-X~E&H|Sk z0ErjYL`7tfCZY?O-XkhGJ2{)Pu{#5I2S2B;JqzhLMR$ajWB^*r(k^arE@NZ+X}{($ zOhG2HGBc8y9he{xd>k0@uk3q60#}0D><>5K`4wk;f;h zE3d68R+t83sJ%WuJw5mg)Eil4XDh=7LMfKPNd_v!02R_v)&K8B5x$T=v!5JPNE-C= zXBQIhl~-R`MN~~xQ#?8C?S&Oc3;0^d67yo;{^t)adM5S(BD+&{I3RRa5FUt4qrN`g zZ)S#ofIu$YfuUXwVJ=-RzA*6BT1&edhz~E<9{51fk_hTGfyv?d*oa%dF6bA9O$$lBEA z3BHxHkrNE6FR!<&2Q>DxF|aS>dLD=j1~Rgnn-}<^^w~cBCTRaHuRjC)X?7zl5I{lj z(``cW?7*-WX#KFCV1I0MV{&zLe%}x+6co-5^_tT=eZvlD`x!5%swSf)uc{xc1R~(` zl@Nz)&#(Ux`>Cg-DH?!0Fg^rnymtZ88W5$ic4W9VvV^p_3VGBOfVOQ^s7IJH znEAOe+TP;z+W7bk)>Tg0ROR^`n;2+U^8&`#lY3aqqbP0}nhasGEk-qd1FyDQp1bS_qB;NDig-BD4Db z0W5!4WTfIkm71AAmc9kDeeDaO^4cb@2mbk1jO4iG)Wso(wB$uy_<60>FRkSdKBif# zx6t@Wem3;b)r+2|6%;8!vtHl?@&MzzPJ`1`-+qNoXL{|J((SFU_nGoF0K3 zylUbg(T)5tLDc-@Fa~Ms7)WTS=YId-=L8;+UCrXn)Lqd7+vVy3p;}s^GLm83(lt7} zfcR+*hT0=Mep+e)&B#3?)E}S)mE_bA4h#)qpS^^*ID=%02j+Z-cL2?p1R`+;X@4Rf z0W-;d3ikk6O#To#U;qJD2uENjz95@`GtIw=Jb(a~gkaYUKaj!Qw4cHU*U^DU9oQwwT+3At95Q9p6=;b8KITCjWpqe;rc1w+&E@ zlb3>#sCbUYKp+X*fn83YZ5x}vDOgh=7*n5&P#Q3=6(FxsKbs(d8=#?~3rx`wL%+${HR{vakyULHlP24s(I%U=>>5;Dfbw-+Z86^0hs9bwSU8 z;=k0vKw&2PoPHv$!0q2IU2wN^z)Yy$bC*ys^T$we90uWaIT}@OnxIGb=ROqO^>r8_ z_wv@z;dYt(+c`9bJ3GkGil}guP?=lnXa4-tP$x72%HlRxi}#bA!pIy?*degV99%c| z8wZ9-kdhPf7Ip^h(U4z@+w0rwyBqPsQToUEOA%uIC+mkY7rlodunvQk>jRNkp%I8d zi1*@$fNyS}S?HyIEf!U8WOVCcJ|#G+J4jBi_L~Oo`lo`PQj1KJ*7Cq`85(1Gb@;FW z%n80-Fb8<&p_luJJX?zRL1cI41PkWb}6zXG;%J zB}+)}dQq{XeqFjO?Ok0Orqd0>OE6x#u~g2asnIvvrXWB*8oK zwGga(k5;W1NI?_83el+;z%jUThzOQR_~>*FYr8yQ6b0a#WRw=4>SR>dTIIpsKx5gb%_q+&=!ChJxJ#tBk)<}U$QI_Nv;K!YDoWdp z{-uIN*H#2fa17C}XY<*!g|Z7&lJn{eH-0dd0oA?%@L>SA!xdKfZu0t13c?}oY4ED# zjhP=m6^}l|_~;b|6mhHdXe(;5C{tpqz5z0|QsxQ9ww16Iqd31DwE@H2u$eVKnc1J4 zP(**^$dnR|_%_(-cuMWGK_;C&3avvyP4}Y9b+@dTJM6)MF^$cbghi}IM_eI+zZ%S7 zyJBcVL`~v>Wa%Cwj&9f|GWo`}X4{t9U^6&v5Jt8?(aF~2t<)OJqcIVg-U1<1^05g0 zBLiOO>iK5LDbcn;W{0djK;if6->q_YHvrmmv{TxVnJ!2(u*T)~zH_+zVW@=6a2r3t zmi8*7#mc-N1iH)Ro-O#Prk4vBH|pLl!iK+%=N@>FQ?o&Ki0l?LLvMrUwL+K`fTvispj;rw`7AqkS8vv*cTq^Qn!+ZjyQ8UGN{q$07MU8< zKEJv-#Sn$;jZ}Uum;2AB#edIJ%|TxEKu<)q<`|oL{Ue4<{Op9t(Yyavu*l5mvKuN~nV^ zGTS@+`l%YrdX+xn%U@4M~!ozCiF zd0CW=?#klgfTUz`3%!j>7;anH+qsiIdIIUOKw5igRh?_nGn`s4;)Kz!vh{#CVb_bD zGdWXlQDsXpB< z{7=gGljt@&NofA`r@YO%2 z)V`hsd}bF$uN7)mWOYB9P0%cg)h?CdN~Mmgf%>n6)k!A;#ITd_sMOe|NOVzn}6M@dnalepn+>V=^6%W4^-Atn2f;T*og5#c1qjyiN9G1UgPhGnI}0eFV8Qtz6S z59sc!bu9Z_rWB=t@j($jefe+YZPW{v;H7eo44qxl>i+>iK)=66j_q@c4MVB{txf)O zULjVYYcI-U_qQgiBk$yuPBi#VlABx<-o}ur-`Gb%OvaIZV;h$ZE?Rd`FPV9TWN$~Q zK7CSv>DPvy4@NSjOTX`6qm_LF@Sq%2vNUXQAr@1;Ht#hTi~T_n1ccCrdsUa3*V`X> z!<^Z;^O}XZ4;NqZ7FK3e`+GcCk16UPwlvBtTwn1`iE~HQJ*MIw+EiZminIk2L-JHMihxca*(}$mh5CLbifIu zTs%2)_tSpB#+u!_%H*;lC@K)_B-|UnPeH3@&Y}!In}SECo=Hea>=Y>FdrAdybbin& z!c@$xeh}&aW!fsG`(60;gOqrO-CP|%e(JLAtoVwFPM>84R(RC_I$$2>{9(xu5OFH z87|kg+2S(vyxlXx=x=d8Ulqb3O*06dkw65kV&_D>1iZ6f8m64v)GF>8#tG6WBss*s zZQfwk z^F8BEt|6#h^m1rv%=Pq&O)Fh*N|fMFRP?}}XTp-@6Renq79^5sr}|wLoJZN8R=$R& zoo16_=rzQ{c8GnX&=60Oa}W*S{9Fq(R4*4h-1@2@OgHUxj-2yCe{9%<#T>O;$pJW|~(#wZEwTNXFX>4tlpB zm5~z3GzlBGj@TPUN=%$_+sPAF+RCIN<#)pSnN4SgX{We}c%+tiVnX3QLCG8&5U*z| zC~z=P*a*+62=E%ja#Cv=ga~n(bGFQ3EBpA*O=@j{Wsvo5-~6T)YG%|oi-mUcl}`(S zebLXcAf8yBd~@!G&d^%lc*nl1&8m6-Q8n>|_sF?S-FKB{uz45wcdlq|Y1FWuhaYBj zCP@%i5A{7#C+U3fm#}{h)dq={eKu<*52oq1+JrG2^T%Z zt01*6ii`8((_f(7|J7(BS2tWA1!tspH~bQdynOX+$50`L;PXnLH$e3iO@q z{&vL`2_=f4?9?GMWPGBbRJusvb`0$c{ zG89G9SLe-PkqKF@*>wTiq0_=0LQ}1_Xd@1V2|4+}jh%eT*`BOZ=96gvgbs8{89l#Y z0Ss$#daYj4E5fEHbI!x1+R5(jOFAjX=BeW2`mR)0g1(Jc#1LMRWJp4;4D1WrXG_-R zkU<=m%ZV=;^OKPheW8YU5WA<0cUx*a7_@xD6F*l!EiZiQQ;%=Sy|teNh4wYVFseMu zIVF#lt($GLFPVT22J_!Qe!Jw*;y^r=o$HFHd^V$pic=Bij$=4so-VxCDG>?1Y%C4d z>gdmht5^xEdT>ytd)n5&aB3zEGFn>r1W|8&M>)o|;PkC9t)60dtu|T!@qMTi3B>E? zpi5wPUq^WfoFcN^bm<5=qZp+EhB40=8R4jAk2}DOQvKv5K*u-Ejer*=i*9G-XWDvL zmH)@!MXeG~z zr}-y@5xMaevC~xT%f@;wgizyq*F@#fu;FyWE~7i!*rHt>955grlWG=)xtPwRGQy=* z6@otfoov`*+@sJPZH!FCT{2zVVykSZx;TQQ77}%8GgP9l)8U+0h|{GXqm>CO%R{># zFsk6B6r7FxFNFn&@~e&Cjb01;B?91USNSoWSoE4!1FDXu64gTZ4Zg6roDL_IXBgL6 z+hW)MiV2yvwPX9zT3MZONW1>Ui-{dyK|0!bKukxQx{DcS&+_(r;*joGLxEm4;T)@Y zlO*HC(U7Y`Mt+)V9ZI@W1LVh_p4lc`FJ8o97|k*JgHuLoK9 zLdW<41{3Vdp2xQ7360>L*y+zOPhi-3BkURA_ba8zRc}!7ZO>%kQRt&M+4UdNueKVr zASg-nl=v31q<@jQ!W>V6^0y{`j?$x5P@v|K&eLY81*XP-5n`^QxxS8`I9~J8Dc;-! z9AjicCqAHaeBe-$Z-;M{YAGqJ57%)Kg;LEj1v%E*z;b-L)=0oh4Vd!K6LVT3BNi6$ zrf@z#>M>&P{GJ|YH9P$aL1O(IRASnA2@fEBybTD7zFh-I<_tCC24^Bo8EHBLi*lH`B z&ly|VLdaUAa-Q!@mJMx&Fk`ndy=jI1NW{(oIv*?QV#*#idTJ4~F%`h03g? zQ#X`lPoyJM-5Fcw8rw|n!aiF-_VG|v;lj%Vs%CE524p6h7&w=+1|Ia2NI(h(u}jQBeM8+%rqoG8Bqw^1I<4O}d z55*X2eFJ~Jl%TIJnPMrzg@P5w2eXX)L5!@?g$+VAXfxDG;=-8*XfWFiPry7+v7c}1 z@@yQn5@pcp~h+;RQf?d+%~m7R!V^Z;bEBagfa)Fp2HuQl`ds zc`0y0-KMcYOjcDL)X4%9mZTUdCa%A%-gAX!8>c!O&eHR`mx3 zesz)l83gyi5AAU{u6A(8=62N7XB3GjI9~4Us0nHalTxQ|5;IlRBN4Ow641kechVvOFJbmzXUzAe0Rmn?3UHBJSgx zXQqOX;-zR}GT66Z8(mz8`(e8Wjl5?2S6or^4%WNTvt`-)p35gQ-wUxBlu)$3{Bz*_TQKcv>^XPuBwev!q$EFR(7cS z>!nkzX6DC33ZsYOPiiV>v2nWXt&`$j{>uye<1!!`i z2+@5&Lvr;v(`6v8S4u9%~hr5y{@Ti=O{;>;{)9^RGU3^!cm4e?7mo0yJK{B|hx)xCwy_u}G(zcn8~pmTtOQm4Ss;mC&I>aKg%ZCq6M z%qpMC^I8}aV#&tzU61)=KP(*VNcd&oT=K70H|0oZ&4Ch2bkB%_G)YL)25x}~KM1vS z>6d=>bJh{LS$iw4Fj5@rZHJQmp=vz%f>?pWaSUel=sTve*pohP`w{=h=AaXMDf)w_ zD7S4T-3sCTr*fyacAZf_yC=Qa7JeQow%%mzkL0<(O*O1$gm(|g?-R&}FQ2}lI@bL@ z&}G5mwiBKUn@nKEdhlq>n!<9(k#g7$JG5XBm+Uhgj-pp9?=r%q)OrgUB8jG^h%^j9 zeYvK(_UI@ki~_!cc*PYAgkBxLpL1Bu=O-u~U;g@zj{of$Bg{pt-SqGorg9ekTAW^6 z*a&L$>XB`u%m)E3hgnHRHwBF0hxP@svGGob_2=U8fjg; zP5+eA(>1DlEK=&M6|p%s^;)x9Co4#QvUoI~t3EH^K)57WKS#Y7+9FQw zHy33c^!5mHwOIomsx*UDahhom3SEm$f6t6apE4W@GJBhTdHQ9uPH$lf7T#^>a0COk zGvs4jfX6Jn!I7+xhJ1v{c~jY)FmGZ5#WQlZNG~b*jk8+dAbUXGhZb>>mBZd2TEB!n zuV_DuXOSf)2oO?nh9Drojw_Tl+Za^LC~bm5GcKr^4CE95LE?^M`~>6Maiu4N=d?x_ zM??<6tuQn>PNV{6_dBVCt_^)LpESe~j7Bi~2I&Wk1ES`@SLHCSp!o!%pv}ibp`d8cL*!=6@9J4=dK@Vz;L;4#SY|vhk{2i@{h|`_2BDQ|fv%CTQGhf{;H^!g%2kMAsdyzo%Y) z>M$vI+~Vg>BKeZy?MJ5S!Ea5-=(X*C;)$!pPmuV_6e1x?=vQ2X|BO>#2NmzV1Y_G> zML%^GO1_yDn=M7JQ>AMQ@2%nTgh@N5krEm z!k*4}H|{@CXSI<1gDw@Opofo(gQ03tKFNHcHg%^DFlNOLcgP?DctodX!RM4VRj(D< zyBqB^ynIeg^r&!{9z`e|<*X#2$xGWqGYMQSh`V^TQQ#HzGF@Ly2_u+eJpFQv{iPBf z>4q~+bBmqA2PO+<&0~K8HFrIG=vRAgvHz*qHLBE4Z^gNwe5>8}qdv$3!bFf$G65p2 z+?n+Q77m&!qC@vsM>@RfLp!+IR8le7N?t!7MtU|WO7`y$>}cTSG}b-!XNg|-Av|0x zaaSi#t?!q~gx6|;@}!%Q`cWz#cE>8^Q733$8GkfeP-YBe7|Y&SIM}{APlp!X9Y=~= zU&T3#ke|^OTgj*hck;e8x-Fgd&PU4p2ub1CzF&D?-*I5zAN&@pF@-OYyu_JZI43L7 zxxyZ;Ei^J}D`BJ3cjm&OFi`iwM528F7!CW2KEFAnZMfsdm)4g#D8FQ~7*8!~i=lqGxJFMi< zAC~I3ygLu}=h0%pahd)IOJUW{TmB-md9Zapsv;Dy2w3=0d@Hji? z&PHhFZ5iSX(WgM^55Js&&XTka{e~xy5cU}nsVduIJHW}3*xiuNJ!{9COy~2kkItA@ z01y6o7?}^oL+MWdIv?H?UXvFP#oPwA@K{?Yr1YCLT*C>Hi$c7)yLr7?BU!PCK1ig# z32lqu>K=8ve3rJ}YQOTyLowm$$A4OUzJ^l`Nw1~_J})2)l!5g6o~!$m_?$$LX`3X~ z)tUTWp?7(rc$V=%#oqwRrV7D|G6|Z)kCvRX!@>+9Ru1zO_(&jU2#S8CEn_JtVFgRONJ879`qn}w7d3Abg9*zsdZ@Mba^S~ zG-%t=WV$Lr@l^3bfD#{Ty&wzup>L6G;6>mU!zCj9OrtbG`JDna5@V-vG1?_y+qthm z(SkIp@uHb64{Ny$?MoyRp2f^Kld5;p$2k?Jky`jE5Wjtp{yW_8O@4k>GBe6N-=!s^ zJj72X=S)N)+fiB0rS(>Z1*CiDd`@mW+XW;)nlOC#e;E=wx50Z}R`+S%(s}x0g`sT) zKH^|%7X$}$(4F+TQ)BiD`6ovxz_Dd=pd27r0KQfr52SO{MY5zqVLqTRa80%P;brRu z0G(yMt#n&HO4T=1&W##!ozck!TJXLpG`sk$z>nF04MTm{;S=vpaGqmJd1~2c=>F!*JId8VydOVAr<_CYH#SL! z9PaUyd6(l1`Ji0lgWh<{^Wn;ot+JBBZ6UeUvPf!nl{605+&QnDIzzTPT`y9CzB>Xb z^Plw*ZJ9iFii{}^PF!I+CMntU7>{DD-7rIzoz2!7>FE>j)9ziK)48PiGoN5YV?p}F}jo?=@^@V}o+4#{E*&!oi z(PoN%4-=*_0a2^Y>sKU_e3C zsNIC)0RriZa^Ad=cG|;a;e=M+PT++`>htyZw^#7@U#u#0G=8duM zUuDtXoS46KVQf=2@Ombd2_|I~qk~9A6xJo1rOY23(dXMnPudiX=56fidIL3L8m0sA zhLKKsdkX^w()@&mdJve_$CjRE36wC5CtloQ$8-<&kHcf&qdT))F?zH06!j4WQVOiw z*;c>7qcKw7hA}f#F@Lm)`D%j^UM{#GT1waFdsrf=+|KR+M7XjFVcYuzAaNb&<5eJB zP3S^^)-o7ys<>n_g@46=?yc148Hd^G({u~4?ziqc65*2a2jLr}WM!oe6(=fe2Op73 zmoCh5M`l~il=Wg=!plUZ!z$O;P3G0$f14oTfA{SGr;W)@o-`9OQLG7$+*sJVK&n;& zhJ$%M90V86MvN0r0s8f!^;N_wuK)qbg+AOrZ}le>=m8JDCj8)=Fhx!t+m$@2Et0Qo zWbDZSQx)q{83(82!xvm8U*3!$PU%`)&8+X&{*O{(`y21=^4Y!~TcBR?%Ia@jZnjHF4>c?D8kOiep)Gc|KUI)dOI z_9L*wP%b)yOR*VgK;P>;4}-5GaHq7d@lC%SxwLgC2>oAV#~gu=t$w@_qsgU1he zXU(7Dr1W$uYu>&&6XITBIIDjX3bO$ep7@EiGtYQ~>kENhbKNfb+C=gYKpg!&M5i$& ztovrcHVA>6{-Vh_GnnAhFU;V$LH@FSv0dVnpHf0AV}zYtax{r#J2R9-SH!S*W#U@e z9%nMsxTHvy2{UYnvZ=Katq%Pd6j;%bhW#ba7MYe%2V%Lciy}S(j`#Y7j4)fTmecur5>5;0f-^sMoX ztL)?Q_vLR{7qSHa4Aedur_Xjp#QQ0wgsG){!Gmm{;n4yEsf3ysGH(_S3%j>(Hba&) zW5V@~zbNh5U|=-S$8&1+wR`A%|NI#W=UrTWO$oc6BHyo`=p`exPvNbC)M@1M3OSRR zB-1WAxz=%)TS@qW5e8gIh{``c3Hr_>RN@DpTIzTljXffS=U`|(QCd4^fc}1xP$Z#X|{bLEKEijW^q+Nx4Yh^q=cs|HNZZd ztUqFP<;HxkSNs*SvpQK#_moSDb#HG?6)$-&{;hA`h*L8U$`Pc(Veg~c@{arBK(GtW z+&b3-n>9JVzl(-P8y}s*bhQK;J0anluKJjkIv4L*>JNP`PtG3K=*38BUg#y9&cT&h zk_1r0K5wA3v?7d@gq5r}?hv>>%=lTw+AaU*e@9;VeWMzvUC`el8Z#(Nm!D| z-i8u3)$ZcXw@27itS<6lQ|VCdB3XKq2<(P9hB?bNhy|C=l+=eX=#r@Kq(7H;Al3`? z2PCOueCVe(QcjJx!dQF zK-@Pk`2?-D%-WS1aax4Iv*uXFCx!!k)MYBj#wjpoC5K-^3!C#KnrE5JN?B~@8CI~f zedBsl0h%;T$6&>=^2ZE`pI|18M+nP9wkVDFFklcR^#NnNOdCy#~K`id;N%^tBX43wgs{GJl% z0WBe~lIICu(O?*KH!MftwM$oVU(w6^T>C9J5iknJMFOusDk?JqX^J^nUj*NCC?j#WqrH(&7o9esBh(u{sya~h?S58{!SW4fH`5~{F?WC+dF=!r8lFH+; zisLoyT@Jr;GAuXzo=F9zW0$Cg3&8ZKBWJX^;@fVIRbP?|ibRx~og5(V#(YP0_bN-p z2wCw$K(%9$r@Yi^-;aCB<+Ec)X&L<1FLTf+oN4l~}E zuu}M0#m1dxuYR3MSI9W=&GGb9r>G|dlL+6l{gK^*5@rg_5T!V;+#FmhZ@iIr{LDy| zZy5V4q~*HL@eq>V+JAW{B);hu5H`tGZb$QEKNKA_AI>>Lffcfc-Ks3X!(yj5WvXYZ zEr6JcPmQN8j~Cx~s&*x%BAR_{UsF3roenjo9sib{X6Y-ZmlF0i69-$z&#Iup+Zjge z^@_@|`@B$6^Yz72ORs*7ycn02$`IWS$BLv$+MfRez@^a2`_h192+~wT^e+r*=Zq3-o$zfaJRYNd3j~l+|5P zqaPQb>a(WIfz?kr{Ys;7zjqBgyENCbA@%}KasZKB_&y-_RZH~Q)A(usY=AWGZmW_6 zuoFFUN{#3}Z^l1$`!h?pCmsdAm{Kd&#Q(F7h&vDf@Gu;-2;M%{Q|WzAi|YrO8z9Q@s2-ahBdVDct%8khmqC|Q{+YvtJmO7)Oc_fnsZX~C@)2fxQvwl zDqoCIco(H;xoqL}`zEcZ(*9@!!|-oR%hgZE%%!;&figbS@6R@4{7^@~K^IjDu3cRF zIx11laI;bN^QZyOzB=$b7lnz>OVr)zwkNBk6gdkX+%|_yWv2$CrU@PPjWRVJ{H#S3 z&gPbFR5q`D)=lg>MXX|y9KKEOxHycDN%$&>UZG})eZcfB(j3Jp#>Is6EDmQdrf(*y z`Q~=zArLgWqPSeQ*gwb@`T^dN&%vw0e$uF{&r^vn%o+LOa%}gtYe-+8CbDv1rHUJ7 z?`ZJzrC8IGd6zI3LpZ5CNDX$bJ_|acMXK5WJ*&xo^a?QxvfUN5Kn4)dKGjH?WSMfDiNmP-R?S>E_Dp*8073^aP#j$*bfi>v;!^^lN;3CEbrSuKn==-dqs?{;mf@Ir+l4epAw$GE>uX z)4+*TU+-y$21?SoV9Zn{6kPud7vp^aJ;cI9=-yUxgFPRTo23O|$g9iL%plPq5JyB* zij?sBx(r`9i<4S1hxSbsEw#|Gs!{?&Vm#hVkBUJ1!nhsP+diofLejyniA^{>1fOrE zy5kYI?8{0DlxJ#Q0+30dNt@m%ju@BVohY(Hi#R434yD_PTa;C%nm3j&M-8RgoznJ& zY;#Qtsb7f1kccY@UnoN3LHM{OB`oUg9dfb}OI3e#&8_G3)t|ZIbVMU!}^;K9wkf@ zxY19lw+1rUZ7PQa2|@D>`5`$8jti?sCcj>DDpoUy#OezIqH>&Lh(Crwyik4%{IS-< z{&rRtTD}Vl0kM4U4W=3qVr+m$Pp%T zcnIO=`G&NG++qv8-HPJG(SX2|u}|H4ZgHMO?Ki}{(AZ*(`ftq^@uMc=R}_Uxrf7b2 zi|_D7^fT&urSn2pKSIhCy~tR!kd!m8iTw&`?N-?1XnF{ojFn)qFkC)zTISV}A1HE9 zZ;m9r(u1e7dw+kCpn)wHup(Mfg&}&-cxWGO6`I2Fm94n*=oJHJLLmV`Jk&BKBk66~ zO-L-C^V%d{bBF|O8^57v#@m)Ylx2)}x#i`{g_bRuG$TTK$AT_#wZAH#+RW)5RBh7W zeijcWK1;KBnO15@sIJar4PGx+l$#j`@1Eu`j)W2yxzF*`y=~q#MWyb^Az>^j)C4^@ z^>pvw0e;jD)#`q%x*dn2O7OE(`eA@nY}EHC!xlWNllcjeZdi5&01!2$D(^P9vWC4s z3=Tnif5e&)g_au`#JP8{MczfN^Fzps1V``(nNr_sU}31K@;)VuX$sSs{bBkTKbm{_ zsNil`eYC|$xOZ$T>R5K zQK#u`gztV<&F9F8lWA`7EQtfFgugUqy;qxbcYTeF26gZ^#Q89pc<3SuUoQ4## z(t^}yo+(=oC4!NQ!bI7EV_YoaaQC~~s9(#89s;uKcPB(ebvqXrso#r!&^eubDRXPi zd{ot@35NVWe+>Prt(4$=-`}Vv6$axIfmlJjePtB$S_-c zefsQ34QEEMz{R#qXs1dNhjyCDo#$bP}*UR5bl(hfD{ zj=u(|<{{NO-cgE}cx1WzD@;X66fEFAlPt1YC&I?{fXGK<15}KVhFIML3-n3w9?&;# z<9$9;4dWQ6zwG$cgI?&$K0KUZrSQtw0`eKtF{tnFOsj&BoNT=UV@$GxM<*Y#SF|QK9&+%kJQRH#V_t9 zEs>;k#tMtRM$fJ9)R;hMp~Fstvi&l&1uTwaGc!^9)V!>W;Bu90XDtKwJXp-^YGfOqw+Ka+b3+i)Dmb68ioz zXM>tF^A~p+oczoJat|^N569Qs=orTQ5>xHID^QMQb}0pZZNR5QeknmVH zw>20JOvFWDbJqN|ZMEUQWb~_%hX&Zp_oc`zs6WS*RK`9?vQ*k99gL`#sv=}z->2zT z%PS|%#r5>wi^ZR%jWEfh%SN;^lXkY;uUp{$p*wbne5rdgKyjq z(44EbqLw~AZH0Vu-vjmMHP-~T{u@X6ld2g3!}&em38S1LnflI|7u#H~P0X$@YlSKT z_JDWqL^a4s4ble!wyT+=l#}3%I5$a9jV-cW?vY2@{RT1&Q`>lIl>-LW%D;7JC1R=R zv@nb!EE-(pZfJklm!3h*vK0Xm}`TZh-oPNP`v zAka24>`S+Mz3?*WD!k^&&NWhNj?xZMfWA6lNeL9-*Z`^v6OWW^^#$oM}a}DP}@+$??YnOQe^7+ZJXEvrcq+K1(&lTIs zQ}QV#E#Ffi$ordbJtH|l#bRR~<#r& z2UQVw}4WA!1lek|#?{&2tKJE$3edY<8 z-PEK*u$xH2`H&(l{}c@fIx`Ks{PuAgDr~*v+ZMBLdymD=8$3~)y-<>n8oDF+=!oooZyBEF-~b<{$LzJ936gSL5>#g zB63(6t_+rQTy>&067zJaNynm17h?O1VvqCN@Ykt{1`vg}UfL+%(4tVikBVT&gx&Eu zIrswo2{y_6i^V7Uc!fz41x@376Dk^+o_F@ndf7Fkl5h~mIyFYc^2yH#3iWZUhtGzs<{~n4h_>wYqH(0i z6=l(*e#X_b+1@6Iz5Sf&z8_Qki@mYAAXS!-Ke?8$+@GpH5&v|=KO66UcQDAsn^S(o zzcaqU{9H@OoQMQ^cdgrpeHuF8>icYRIOniv9uBQ$NEaG~fcXeLkDJz|oQ z>pMQnBxa48iqIj_`O3ni6ehg!i}CCOTgI)-CyW+_w9rrDv13Ir1T@c%bQ^m?yP7}g zuZ$XQGkZWf4AhEH(~K+vq@lW~*<=)5Y8{X@JXOS>Su)nQpiZ%>K2DQ6A|nVnG}S9# zA)CFPb6Pc?qQ%P)4Iu)_F9dCg^(}4 z>p?I$nr+sv*QLd^;qv|ZBvRpKH1xgPT`Gu>FxFw8ila82s51rv1R^WqaLCAL%Y4Yp zBC;_oF7=2!3`*LpU8lJgBMmTr9eP#uvDU5Yuqw()UyPaOon>Z|T2fk}e9L$75{A?2 ztdreWa7~}b+&=i4wsfq{95Ea%&K6?AhmCyfa^iEL@A(YqO+SmhdEe?NbW{0bN$Vho z&UVTc9qus%IX-fKxcPEZtSE#~Pz^>DhNrpoA@I2di6mS4LkOtC7B43}j)Zy$odC~e zH1{!C7ZoCkF9Iv>JB!CnD-&P2#bUK|E#B3ov}or?b>$hu_f)#%w$Nj&%3q7E+%;*T z^=aPLcM1-W2))72$zk3WQWc;Wa;Fg{3SFqcEH6tL&zQ>l%b3;-4PzZhigg~Kz|KjuL`9a1jhOqUkf}NGQxReg5z>4( zlZKAQq2vb%jCA&jEEknzoRM$ek^X%PM|I%Qe5ZB#^Wms`9glGHF{E~6(y^JG`9;mS zH^qL?dt9N8*)*Mym7aeZQGe%Y8!`@M&-8W%u`D)0ea5!evZ!emP$tZweTZKBIJ}S$#m{0OvG>*=Xvnia%f5>ib0BL`b3b& zp~EtWAm2o@NoR?Ia_jrC_l?jZCu3|SZAp+-#X&k_$MdeB75bR_;}EkL^mEiw;R`-D zeqqO{kSq<82<+^HoxX+x4ZV17%Y>+4;sg5=weachXL#9(MJG}8^2e+%#|KN%g0#_Yk&Aa& zF+6W?KZVZ~u(`jB;lE!wnL|x@>33}jIDGX)CRgUgy;p+#$aWw&DYiW4(;^@I{RsQ} zgrx92tL6k+X;f~6MQ7cjv3jqi-ec>BZBCjJjxXr&?YVmC{w`@N#4ab>)6=m_A#dH3 z&(}nr7Em(COL~*L3R^^XPFa-z9}Dm1OwPrM%IDkQJ)&3kw8ID2OcY+9)UtTxj8qQW zE#hPHR%|azf#X_hUM?qv+w9O4v5r(Yn#5QKYvUg;-(d#0{VHIQZ7()R^mv6V>%Gv4 z932bU3b+XQVDUKARNrG~|_mJ=h*_pPl-BHXfk<3jwSW<$VI^|zonb1R2T5#dq@!TmP zEj+%|f|BG6+}Kb(doAK{Y%rgD7%GKS$|zJ+b6aF+lIqT+H#JvE_%lj$*j`@@$RSN1 zrEr52%o=3L8DZr`W+CbWoO9|MSfu9P`AbGcD7(QWeNcH^^l5HRGRA^6KojRC_P!6E zwJW$(W4rubtk^!>!f2fLsi=vDUqKS3X`>S3Ts2DK2lNgD7cBd}CXv$ z`?>X~g7eAhj_uDQCcA8I1a@os_T}$2jkcU2ZQb*->w=JNy#*-!u5>0RGh<6Tdql5E zZf%-Xdaot_e{7t?mMDsXL(8^p+qP}nwr$(CZQHhO+c>3ulRN9LNV2n%y&#hAAHbW4 zb+tp%g}$U9HnQuMbFnKS4MD63*3g2;np(DizukG+?XayYnu2-ZM9B`U_R2joLA*f> zmy1`21Hps>WrHUAMIsoGZZ7vs)@d=Zen5n*0wG83yR0zyza2%!^zsxH=WX{UNfj(g z@1Q_VOYG)O-#Vb*HR6mcC%94Z=ysa2?kyqp!-eA7y^1w8J$mW5n+90h70(y6caTGY zEnr7csbz${iiKzXD!u+4i4ue%Hc)W85v_CQDL5_;B)5R)?*Q z4XTdqR{G$BA;T`HIZIBTHXC^Yq76Z`3b8G)6Eg*H!pl{As3e- z9D4)=x}aTTQ*SIw^lOmh5zt->s6Px)inIBXucmI{!~Rd@uNmCEg7X&he_g!Iy-}T; z@L$nKFXYReP1@*-@E^fVq3O~L7O+8! zlW1U8Qs+R}3dHaz!xB==M)_~;DHH35q2wYiZA~|ZazEjV@v1f-mgV$7p#A;Xc`2Lc zsiTP=UqfkEXQfvpxHAHy)FQE*K4@~|wNR&_AF~Hu*YI%bm|mp1nGdIWN_jGz@f42$ zMeQ_1;B7XjydkSf2yC-n1BM}VbAD;DHfLCLgMtUksef>rc+Hzcgk~C~*7oY;&c+}2 zwTY&Iwu+jdorv^ihR{lL(b8k`CP3b5-StTSCXg>Eyv_=rb+wK_dNQ7y|J7bPf?9i# zv<{Mk55wBIt>r@sFy2H`-ym$WSa;oVz8@mf%sEb^=bm-dSFo% z$|YE73dT!!tW|?M3Y}GgZ*2lO1_cJ!XqZc8K?J5%xX-_oL;*k^?Rd6hKW;+~Bva*? zj#l8z6#n9jyT+2WpawbkQ^(+ay@#;@kVW6VGAG6`wedbO}uW zC~57MbCzr48cTDE<~ycg(pODqOhpE=ia{em{abHHU^|EtNl!E9R)H4u$mZQeDM9nc zklC4Fq(v)GGbPOu0jiQGJEyB$KBq}nr_@s=s}vQ!M?l5+yY)zQ9_{ATu9-17|6 zmfcMlg{)LU@sRya7hmH=e{ye6?yeT;Rt`|W0(`qJ94ja}eL~jSx7SAnbkK0dAKYKm z!GN2}IG><2$t31>S;wI~r8qexe0%-*4GI!hRuCck?rPh#!l{HB8OG17IJ*jjb$~?8 z#{qv?LvcEPB}1AHBrf?=;DbC6#`mI&GCNqoMO|KJ+wm56aT|%y!aN5evt{F8O+2I| z{*;Tq(QJRoQ~n_H=46n+q{N{F;awSe&P!rG3bbwr>T_dZOaava4>&dO*G*Huk)Yw}D^>SQw&HCm zjCsc0>80@BY6R6aJw)J?oJDfflQ#BTJeM3h8nr8(_#hfZY#`lhA5LYGgjU?{np=c8 zG9y68Xpg@T8F_~s3zWp4?RKoy=c|Jn_6nBo>J*VbJ=E{s`|ua&bAhrg z<4PP2UT6_dCbzQ4MZFi@uXUJSt;(wR)3h?SqYO>T`^P<0C)jRNhL;20PTUqF&PfKw&X4!ou^b%?Zw`JEKD;&sk7RL`6YLm=A-&2ns!eoS zzPQ!zCHnvM@UOkfMPtZC8}o!O+4*r^e;HmoDLQ|0A1x;ifIqgW$1onE=9dC@dGF9m zITT~9yOmU2jE<+j?jfAun;sTn8mhc^v#y~H$DzAaiRLK0o>KnI=UKSw6`}tGarg%4 zK%6EBoq*zR@o~;XZ%bo70*ANqZCOfl!XDHxQv9nFhaha@9EZhH=4oUW&0nLJdRR;{ z_F3RJnCISzx)8d!!k-lCbG`=Cx?&j|49^R*xL%MwA~V?3--FcW+}{&100B?S=GIen z>nL9=6&-0_k+^MnwrS$af~U<_RgD~Ux7Io)#Mqi^ zSzh4_X}dL=D@AXnfKJVIw@X=M_GQknzPx>-%6Bm69$k4iN1U_Hb!oYj)+gOatAWhp z3Ydr4Mu@cI`=oJUm8&5x!jfliiLtHkq#ukS|Hjvcdt^=t4d_;=?EwiPvXAhV5nrU+ zwGNFT^f8f$im6U4d0#z$?rYYIP7{&jYud?`k12na*vj5@>%*SYFht zUAoghIz@~jH(1`+9RNPn!O60g4peZPYMWPVUJk|dcHa{lrTf&p>t)CV8^3k&zfc+^ zLiXV3=)$T8He2-)xhe_n6&=&x277^B`|}m)J3`8#_S;!Swj}IML<`j?XxPioti+uR zq?d9H3hmlw##1BIW*N)&fVH4-=Oxy6b~1Pm+KB~P;t87wD4rLf-pnJ~8585l5o+UX zG69~sGar!;ehtF@o|7WJMUB${C?RuYnh7Yt|W;o;1Og3ClKm1*S%U97Kb3%v=AQq)vf3Q_RkPnn9w7ZTqgRO+DOCyCmL=!lq ze8Jy;Au{JT2*OgjW{s{-#N7yefqBQr4nFQ4h#cIHbbYw>k4IOfEtLVG2}1axu}b=A zxf2RtF{kruL$$gmRe8n$%EoSaEsspWVi9kh4-qV7UkOsG}c?T zJ+;4Q0)F(b7~B*c`RlK?w|Gx5`-2TsU;6OWZ7*(MU66Tlr%gU$4vCAOK}kSJu~{wl zjhfgZlc*V?nlszcCM%@V@7${7XVh@3A&V{?f|2=)(XJ+AWKELNL!;Pk7=!8P!^t$0 zN6Ae*Y>jLAa;K4g4bSM7+rjWI`jvP!5&uAx@(EKOP7CN*U;meoj~>_y&1^5;m_Md! zr3|IB!@abE)C_Lda)nNB*!9MdBmz>|^(b5@TN>efR7oFnF02QoF#3lJJ9t4>MvAJa zEyRXSP46lf@dgvrIKVI@=H?gZi#u;jAJ%R{qD5RWkj_TmQKf`e!xMzO;lw`B+ht=Q zi>~Y6pR2aIx1U+xqV@_+Asj2stKuBk-YCo7Hbn4(3;etFRW}^VzL!^b5*ThMtr8g{ z-B614I~0x5Bmi5E=;bzOMtK`8hE42@J0@L!FPqc7c_XDM=W+1tnP~ZYZca&9WYExPuE9woy>m1h{TML9(#ufX z6j9;Oob@cHqoCLo>2JrJ7ksQQntMq(sZKp}I@yDn43@iLzhMD9B!GoLo9%>qK)3I4 z!-0Pk!$dB^2m6qkmIWQs?MGE|FuTFxu|)&Y`6;p~1BY0_h-+ZCM}e;r2`)CB zR>gk^Khd_srkKEp53F%MYSlGXQ;FNNRu9Iwp@8DbnTfSDmke&^o=Z2qG9?b;^I;)u^No_2flQJr|gKA{2nd~ z(weH2Wu#ffqPa&dr(YNE%>ijM?MLDP6+9hcp>=nj_4ldQWIYsW*7NAh0>7!dG=AFR zm+?(-3Mcc*ao4HN79&SlHdj>z@jAkCIqZ8CaX4b*w9r25xF?$i@pFJMs>xBU+$mdr zz2Tb#4WK1LDGY!dT6bz+BkwFYD{+1b@sC-K5GL{&qgR8+1SW__j z@w!YD%YZGB_}nB}6OCSYhr#EO^w8BR3>9`}go(*5sv2Dm()69r8%F{*c@sddxHXES zxQ2{n`B-^=b+E)WyGu{^LP4cZGUSktkDXUuT4yH*0!h8^zCqI0d~HI9$|Guc!S#lx zRgSKnH#Bu%Y$mO`A~NY)7y+~ne&?f7&s%Y><=k6=dyCGXa8qMY=<3sMsB?e)%&<~6 zwsHm?8%-ONas1>z)~sXzJ&D1=oe-%=>(Snzl=;WNXpJmdAS4#MMxK()TO6ce7=jlQ z5lmDV{iqakdZh`L#&n)SdkREQR2(s7Vk1w0V4+Vzx7+emBv%NrgZ#2i1BN$qVGFdB zg~2~<$9Mbb`k^9!;`ZTe(T5+Du>jzWSXpvDg(450MhWO zK^8dtB{C=X83ST&TGQvhypOJOGE80xK_IF=t={bUXH!ZjQqS4}k@j>ox{_IrT#jtA z8L+GFqJY@@Cy(cG__u1L=tf6G6LZ3QbwmftsBK1JTs2!@c1VQ6!iZcoC_mXm5R;-~ahXL7M(K7qXS zL+Y&cHKupIqrP75^t@<{$eRWGkl!e#J28Mf-@vvaKnjX7A#70((It9B+|3zYWYXM&7u5E;&hZAuhSclUk&420`)aFEgH5iNBq%}@)Tc;BuXb= zfYk~yUsszU39Q5k9Kzd4Aer-_9WRi~ykC{p1(QaJofm)z;zbq2tHhVe$@U~0NMh_n zm=##YIb9zhLcUq>XssB1kUlOqG+cUmuuVbZ>dL*;t8?Y3!6?7nAUt4`^fDMa_@7xl zl5i;ulWT+;0T^D>zK9bNr39L@WrJ*1BAxh;;X=MhF}`m^gHt1nNEvKw>XBEKTf3LM zl=!rf**ZWFhe^M;f%}W+emYC$Z{7{W(TjK7++30Grb4s}@}`Db3!Wwr1tEj)5ko`? zrOTf2RuqxC>u+n;iw=z=q+AJVjpPJ%ysczgRlQVlXsx$~mtUOP9m*DYE=$tIQM3#q z2^66H<7bw+eh4p=^^4l&zqD!)PJZL!9iQ0Oi}a;0gICaE0CV`#BqS|-eWE@MN9_aS4WfZs;zHbAhslnGCxqMD5=6J%$s?d6L=(=Ik94Af+#*3NP8sY?P{cq! zBUrPbUmi5rho(k8SN>I~ilUi#pPlv>s+OlOlhz6YRPD5uS@b0xd`k>Nn-jM|9mK2e z#|gkfGj#Y@!?bVvVQ5X-oQW3}V9Sgf4>aX*a7)I(o;wmxQ@5`HqCIDX}g+wzS z!a5~8GlUj^QW$Tbg{Q(}8ei0EmtX&xf1~fysIhH%W&QvjcJ0^bd0w5*ahkCigrdaK zx%?2T@NqQ>cdRi?)D&qI-H42A%>EH0*zkLoO`pAmSyR4=`0-Ul+40KZZ&aTEUm1#= zl8FQRV{i117xf<6Z9~<{f+k{qD!OgiUHP)53vuG8g>L^Yn)dMowO5Tv%lnC0y<~_# zqgp=tdjr{kw^cnV4MES%bJH8KVEtVA%noAn0lsyeHMbqH5);JuHNMspPBr|i_dy_)5Qx8& z%*>*NvR}^d$z>MYj{M&!_M0#Tf=M7SJ#Q+AQHY##U^H54H>_V#Tcnra+M``i*`*d- zowPut2}i$h6uMEnhG49x^OUQ|rE$!P9DE^NA$ z-L+U>M&1)V`j~7X?=y$Ad)eKN*-W-Jzd8>~KU{k(JXsmGVAZxG(0Jyn{p^f!g=`m|c^Rs-b`d zZDC&(3FvVK-_j*~_)SjfDPRd}uFhUg8s0H`_4HgDAW(OzQueO^O;Hv28<}L$xUgUj zRB{NRBmA!}cynSLr1YG++36G*WJ`+3c#eYZF-2~lbQFDSsx^2LpT&atGy!~YeB7`> zxr|q8t8{BH8kLT|qJzH2+w2yYW#1Z&jP~il76R70t7kNW&REKNm1_`U`5e~EerDnwi%a+e0h(k+vzFhLCJup(edDEav2fm`ZpPdMM?wrtLD z4NER&Yu>+b>@Vt#3Dy;eu~q3S;gP6+zEwB(fkb9A^!A-mn>YdR${62H(I#CxUblid zGe0-Nbff(DmSv^6TNJj`G(2D}k93*_y18Le6g4xWq)LvS)t%wGdC%A?POcG70SZOR zfWFS7(_*pj`H`pP3vg~sU-No7to$4Rr)XyktOIGy;fSb>ool-6f#aLjps(zlyNOv_?1WaX>@`a{0YghJB=Nf|RDHEUjBqmOnRC=q=r|Diaoq@-H9X>NGGHUyxW z8-QtT9aRW45>KiXs z%7(O(Q4}ecT4WaqyLSh}{qERX$v6;C7c7zt_15ig9Z=}PZiq~grR$IS9kj0LHm;Og zSAQIRQSA~fR#X|RPtE|>6? ziAi~9+Y2Z^=By3em=Ycr9;Ck5CGsO%7QI>?0cz@KjaX#LwWC62aeP8+d}~P`3doLT zS`fKY?$8^-n$1!XnhYiCEO$pHvXsGG2P_|{`1tD-(A{y-`NM{N&MZ7*lPsK2F>IEY zkj=tIi3_CltHPE0^`TVvQKqyOIOA+UF#T(L1W@uifE`vVdR7hUkY^jdir}CU+@&B-rFs=eIn=JlZ&Rn9eydI=9fH_ ztC8Vm%ZYSF!FC5_GkOOzbwHM0#RFPG=_0aO%)Z_UFCZnbA?BMg4{4i z_=?Rr$Nuj#cu{Qw#FgJj?8Mjs7A`;tP>BE{wT~DM^4|~9wmv;tKmI!rPj^#4SK|4q z+NO$)H14x14yX+EbEYDeQy^hSSy4d#0O;$nnzQKw+Cv61lOW+ts?e^g?utCC*lY4+=e4T&OiR z-RagjWu{{Ta-6pFCE!A8o?Df;iyIOolbc-->wKRW1|}ZQS3g{iXf3tLzZhA$p%+V) z96fp?2A zw0+LX6=zwi6Q6Xl($Q@rFSLj0XKU4)H2`cW2Gxf58k=p4HJZ2&jK;^Zg#95A=c-`x z;X2{u!RNbkW79GpZj-=ye>m|d`SsPrGV~i4U}xCzpW!#k7;%a@eo-m^sSLo7N;WI^ zYx;u284}Y<34mfYE<06Nch5yg^Mq^P$i$)L}l*RUUm1Iz?(asfTDl zVzhH5nSxVCTtot#5#kw>S&*-=>>T`UdGSrHj9)WDfz7L^v1k@{CkR>5PU#>Paw&MS z7pN-Y8^Ei~*O_5j{E9;aWCY?5`2}jNRcyC$MrSgP_l?N&Vs!00Q9m**yDR#shb_v8 z!BI9IK|fm*%sW&PIVfb2)fDQc_IAA#Yl)~H!oc^sfh2~x=6F)xrfYjUpPx>#)D_*( zpgI<nxHWRNwHc3p-Z4TSB1*M{ z6X|$H#AP(dyvJcS?ZBn&298P`ZCFygr4Ua5=p?>b0bEVi-$n$1pyP?NIt@89?M0{= zM|~~Oo>t5D^5)`vCZtC>s*axhtL?*t)$31FcMI$__c6p@!<~-Rc1>39gn>*avq#YpYBh7o35aOj&ZT%ipB;ZeIu>DP~)jb>sccm zTRE_sF7svnDL0tIH%wKIa;8vEAxYLPKAD(SNaWMhFEXu#6NMa#vQ^ZHq>0xUF`lD% zcVB?BBt?L`BqBOKjx@t2>sXb4%v1R}arTcYO!hu(s$@7)8>_4le5vYM(auonPI#AV z9_5-9`tDt~z{Xbz`J_{f!(3KkHl6M6Y!*QGMPXS{6WVPqJvp_CFRR$ChafvvJ>Lq{ zi@fehc%(UU=92^Ck))2MxykLv3%E6T2#H6LTL`EakO7io%#)TIy8^)YSk-DR7Mki< zK|!{f2=W}X{GdFoIg(1^Ck6F_W1W6@Tk+POYfn=QMp)Uf^N!e~p@~h=V@|%my(UU? zG^COhcPw%(xx)y)43`CVp+E$)lJPjPVyVQliyb;Nt7bW1U~9GnS#jX%5g$<1vz5CQ z#(y8cJ=OuZLeJg+57wozHSnZu2_AY1N7T64I2 z7122#W%g#P)gu$6`JYep7w^Q_b>ZR=xzj{6S17HAOG6C7jO%geACw2#^Tig~%pubv zT9rE%v)?jiHN+djd@KGSKH5U~dL|E+@j(lcCtkuKB^KL#_zY0&N)e?WSJFKRE&-Fw zJ)28*S$@dd$a>kyw%akUs&?ntJWbjgEvwA=+JlZkd$Jo%_Kz;Ql|)3=I2EL)}1GHX0U;wBFamwYLWEYY^RVaO)#>m zPNUM@uLh`<7U?wL23?Ij;ua2gkP!bq01@vx8J1(D9xWl8B0}6xu812(i6d1}P20QXyr$!;=(T(fUU8;)yJ>H$!JPH6`uHf7LK^=7Cs4xUVbJ|msdus)&Wr?V zE?5$Y?~fIEQE(V{9U*(lFE{utLcu>wh_Q^%h!2yI+P(DD8YgLoj-XX@R=O(<#xS^G zB9f++&pIu_B*xnqd%K42QdrGC(c6#5n(W^PTq{C$tVGtVDAO-6jZX{ETYj{lKS)4| zt-h1T6@uq^^^gd=XrcOksOP%*)=tBiD$Rq6Xi=p8Htyl&?`o6w3<&{yRIVHW^mG|W zVrL{X@TEgehw8xv!<$&<>1hpkflSMWS)!EuPTDPSk2Fko6*Z@(Dfy4MD}$^-|Hfj2 z*{_09-^+?IZ#^V6WbZ?`*Gf}&4M5lq`t_m!=6I4qGYwT8rBI%O^Eh)k;ERi|xiguZ zJ~!d5!avo2O3C3;x088oRHX{-DeOU=OgQY?=cWX&5i)3#E85yGZQfxW7lEG~E01)x z_xw{}y5nQ0KO)juD>~)!AvNokh>%)>CX15mMPFJ>9`y05fu`~u_*Llc)w`LcqO)+d zJ5mZBgdZZemxn9H?d9#AG7#};j zd0a48a)Im}0xM`RucDy&L5VmNZm^sw%iiT0jxa=?xjP&iZNI{MVn2SmpmNntZ@X_* zuZM`HksO{2!CwU)5h~cYt%nbZeJFSU?lXf5BS+^|0!O&+<(0n$K<{n*knqD#X`>c|q2K zLs{q!#Q&wMqeJg#M8rM4y?P?H8#QRxdz9*mh>HpX^zTG~+T!|kA&2oQCrez;x#Fd0 zBZ`9adq*EeIO7i7&A4Wr&&v`IX;V3GR34gp%r&3cNNwNIofSQvkF$yrng$ zyJVENlF{0y=&wVRG)UzUy|VZoOl~XiMFwu0!@N!}v3-$Zyra)4x zXPpc%3%VFiY0nWxj%1o3e~;-1SV#F*(lycB-Z0u|WLS3Ys?(|>g!iD*h0#(Eib^yj zdm*B3wT~sb*Fq7`x4$tSz)X793c?36VvZ{H_I;b|%m9GfB3yT;$4>BrWE8L z?dPE==8`lX6?wQLs7Ma__&v(YQO`xvKjt!E8s+Q%JSkG*u3iWWv##5LgAd!So(|pk zX?pNf?wt=EiO^GM1s3d)o0}_#Pem*rk&KpApuI2~R$jJ@UkL0fui20`va=(3@pwDgm6af-)Qjiyo$YOSFlUmL>=2@SL@hSi727<%|G|}{l>WC)`Y_myV{J)}^Sy$&!GF!m`4`kPSpeiRNZA8sbrQ? z@Nx}m&R^7OHmLSB^||`OY%E_d3e+K}-1vD@>}3XVlM?TaVwgD-;LVRFJcBNG-*%zv zbtQ(Ejbsz(S};V~yhNQy<6Mw}m#_V@IwtGhT%`yC(<>k15V`G$2g?8l7Fu36~`U8LFQU&3y^);hBC zAv?wpJd@YG*r~_j?*BLyA$CtZ9QRb6t`AZ+tpvki8cK_$jr6Efh|mA3@dXc#ntsdY z`&WxC8#Wm6cyv9Ei68T3-Yd|T@@Tiu$WDBI(=E?jHXqv%$b-5<9z{0>a z2K&91=*wY=>z&dFO|0o0SOG9<1XZX5Fvuz`0bb(k=z+QU9E%FOWgz-eJG@E1MD}7oOSx?GvrSp z@Q=+Nk0^L}7eO6i>`UTQslI8bN0dVS>xWatQiV*mYl08Xd zSifuhzlt`GeO!=-4ERhv?MN}vy?Q6*BfqiI)>FmEv=`W6;mlKr4@Q9i2Nkb@7x(`2 z5QW#2E&_A?F2nF~W2~%82TL&|lY5Ai6}>A}s?;bwKzS|;TWPO5gJRYREmoU(%G%SN zJd^fYag6twNeLH4pnq{*o`v}$UXM%sqmJSDX$5fLKw*^VeZI0Yar!H2 z5_I8%Os41M5yBrZ>zE^A%wg0BWC??cq!3NG*|u72mdV)nGmiE~RB1}2t~)g3h?Cd} zgIKnvNJ7yt<0pLP7HDg`$m6feq3pSO?>tN;He-UZF7$gw8CLQjo1#U%t)7HW9qt)eqA7wuuo5&aDi;Oqc& z!gKr0;phXKP%U6ZZ#0`gep=qL7+3SlW#qVPLq1ouOai%|K2%A~A|3{z0Td|w)))Zh zO`m5msuTyiS!zeHy`cMvg@ZuE^~#0TxU)XGk4mSGljj^3;EJwO@;tjfjT>HwZJhjp z%oXB1l@}=y}9OS0e6vFAnUeHnqY2iGVB@yMX_ZWp`qWtNBjjLEQ zsE1#nmopfE2HQb5B+BEq1;_V9c!xX)b7Bb5uh3V2&BAj!bV)Cj9V(DhE#2KQ_J-xwQoR+!(cuaK$ri*c}qPXH+|lu;gf!*Ve& zgk>_}pkZ%?xdydxshpW^z2nrHkBGS&xZN#<&IfTg^#N|{Wp_h`!*EZg;=!FE8+)R_ zo_=S@sC+Wem1=jR9ds__tyOv=bd_`p>pR%uh#=>*XVr~0r9$vlv*|B%sgXZgK^!a= z^{?m0v!u;-C&g`lNDn<_`_0W6nYm?mmVBaNPFi6VN{n7wz>dP1Z)(%RsP~}fBLHVi z1PBd7X*7v*G4mPlv%N*#-$yJ6<{m1@9hq*4(t4W=V9~+PNYpi(7Cb;*m%rPrVU04R z{VNtyNRae)b3-vj0T&aEhziBSCWPUtb_ebh&Uv7>C?l)lQJPHdfQ%AAlHW#R#o8`J&?$t%OOhuAI7&$8$PAsol}N{RE$8IxN>9p$wNUfv{c{J)E`O>w#LGWGr2QV zzS}Me0FP;FrX17_UJE2y5KaKfcQYK-KT|8`A&pHh}&KAW)6vaP{~;UV+KI5}&eU%1Jt-vN=KBfRf$)TrvhSWNmy9Sdt{Y zYg)DymDSB~>e5zk<|Z8Q$6xQtya3ztCYG5H-sH?PJDTt8A%U4M@b)p>u`+ZkP#jc# zNkcAVQEnoy|H*!Lbw8i8+?>V+yElT32)XBpnp2Sk#|1ya?8>nz&Cr~s2Tb7P$!ztC z(xSC&6nv*u00(Gda$X8=8+l!VKvhr~KkEAssk1!R$s&$nrjiod z9$#vKZGADL=+WDixZck&w$wKlqJ;=)=IS#>U5Y$0W{BE};lz%@tST#`1zQJA@V?sh zMKs|^(opdJz&=|FqNd>0s)GIm%^6Q8HubR#^w^-6Q}T+GpBaMI+m-T#j(P_P!$qsv z5KPDY<~z(M6h1Dv7LKCBS7C*B{!}-fOel=WCROe)tsSdG6~;Be4evNG)xMPM>t=-~ z@FNw(fl;Bhz)e?uuESR9haP>EJA&;l7e^(}`K-BTYYY>R$tp{u-@d6-hQV9loL5h@ z+bC@-AdHQLRhP~x-s(t6gNPJ^8TMJ6H3zM)ciQM`9wLjN4&+r)-)(=wzH3}-)UDN<5$0#d$Q|nsPf@I`LqG0re<#%k0Jt{4R;9?{kLNdn1n=3%A^i> za#go3ec-{kVl*+XRq9If)x~OZ-Xp1>bgYQT5;^952grfaYOZE(1Jy`UGYa#@-H)m5 zTat(rP57xnI@Y=Qa7?v#(zFUYh+P6EhD|`96F_3j*xHI^`)9vZ?`9XBOg216cl5mB zFi3oU8L?Z3KZwRwZLXKucfI?8n3)w-f1W| z1nTg@<0#=~n804?m(+hN^6i-D-y!20rgr&u`#@`qcXBD~;x^p*B3eP5<)W8Tt{I}M zowF;-iLVhz;xS7YEhIb+W*p>)ta_%tk#` zGXakzk}6IS*`W;zpIfB0V>Y*matX%uDEI~;*O5LXQ18#tI$jiW1Qm!Is}}jv?=~k` z$LXJQHsK9-H;-fI?=cjR%NGn<1C3>0F3DreUmKc~&TLFZK|8*1p?#m(1 z8Yujr>?%AOId?EVuAbZV;ff}uvGE1IjbW$?t*6_5wFw0(p^x*!v4Jp@@S>zr*>cX`b}>`OY|7gS z_GgOlBOfHn)SPBV^e${GfQ8p?U*GIpI~42t^dQMLd8TKk4e&pQLM{T3y{Tfrat+Cb zo`3;`9s9#`v#tay??M9HJ$N~pFJ(DJ zO4>fEKF00-hf-Xb>HD3dFDaD^U5o!kw~%o9ojL(Tf24no*UAt4HcFFdS#BP>RtNU? ztba&$vEDa857dLRaYu?LlL)Y|S7an$W+*_DUHfrJC@`zIAG0*VpDQvwhdYcs2|!S| z1w(q_VY(Bw=;#UK>5h}QBTEfIsPoXwBC%A}aO`<)7fpUL7_nVW$wj7N)7Ik#vLPIC zP}WhaqJwGj`hR2_P9T>p(0-x^GoYkD%8t8^=?5028>vG7&5F#LO71)LO;XyZZrq ztLK;#{Od3x&ZGAm>OCLGB%l*(z(FzbzlfHpa34o;- zI)N5KyPPJFtn^QWM5X-&wq!226MxZDrW;Q`u!wC56@339*)E=+$hD)ZAka+#hEYBq zk@^1}mUVVbxhX|{NW!;0g%~cjtpl$E(**H)UD7y~J!!(peL3!kZjNJwr|YTFP8RU3cx3 z*Z=~z^H?w%niDO~dTE-3uU()L?HDOAvN$Ss`R&oBygFhAj&5=qPE(invm`LbN^XO) zU>mQT0Gm8N(>73vUhx&p{TW%rf+vWac%LA$o^>r6+{^B2dY|{}UnS0_B8T5@`9URs z9tI^s$(88J=4Pb}>5zLG$4H{5f(a3b)k0|)ldMZ!RYGlje5vqK=-Az4?dK=#x8P&d z+U|4JqyTg%z7(|<0We>a$F?zEByCOfSyb|IHVWZiOO?FD{qpTo(Y!#(j<{vG?tkAH;jMBW6YwyNVK6d2-tW zVZUjY5d2ukfbkh;`Uz16JC3NZ0y>Z{PBq}bA)DKscgmSi6}V)-2qe9rj5B=HBjDDO zA<=wAN!mL*JV?Il59FoGEhX=1^@`vsm4{HWXnWn8E^5gd;$?5THN!R(xzk0}h)g(P zh*au={d93M3ENsOkaaK~0IcMDKyi$mh-FjrlrKzt0W%$W|-r zd^;ep1RLJU$sLo%wA3iX76Da>J3k`ufVrrzWBTgqz(JVbJ>d9cM=m6$~rUJtVDvGq|4#Z$^5?Z#CgCg9H_sxagX6j_ILcI7Bj4}{bDLYx#$ zrJ@^J)aE7hq5f)}KU6Bxqogu6l;N|t=>O}W9OQZv7<#*&GR~n)-}ncI8DHdcV{p!p zG_0_kgcpqZSoraz8apHT9Sm7K&5(*coZD=bc$8(P+-Rb(G95{u%k0B%KYOxdufmvs zQ=*EcViZE@e)Z})semK3OSxXB_vM^~9Mj+IWY2P-wzwC(OG065qi3$>#C|Hso7hbH zFP&g^!K{tTmVtaPyo;&;j!C>>8&FjH{{j~c=<@X?dQG$!ccpj2yt4&iN%YTGMk@!a zX4nS*v{BzFKkaM1G;MAL2vesF+>zGG?^-P%f-cX^UXUDz1oX+>q3-l}DctDR;tnss zrs2rzI{kL%i9hVvPAe%CY2$^rMK@;ahf)8II;uDltp?^<=0@E;4mS5k-1DzAaq(~W z{+AOW!|eSgr)2n3^+OoBW9UShI^44U1`87x!N7J$B3fW zvZ11)soi-o=ib}CRERj^)_PmL)tM~9&vM?usnj!PD_@uF>HJn_3{6Em=q-Cp77@~S(a-?6g5+}3%C$)_9pVaNkda`UL;ygYq3v9PMvJW z$P_T@NyqBLU8^7DLD%DnZ&jvHq45A#2M6;9VQR?EnH=1W2P zTsWrM!0^9um5zI+6VkOy1@)R2tw+0UI!)*6#(Q75s_7hiIiU#&N7o{grwk zn@+KnHIhW;1KKA~`4L7fa{bmDz0XUpGs-w6yymK7rR$qc_yT0TMQ8bHaR~>T<`2Y@ zVp;{kx?j4~<0014Tv-QBA+Zjxa9!tSLur7v)Oyj1Q8ZtiA&k~MEo#8# z%-EhL{)(IsKDkHVqyawE14VJFIP9!3kF}t-#3x)t!_V;n^zUYgBXX@V@@buH=f8$7 zJ_zPKvQ=hYXX{YS2Af0%sQ-VnJ=Pcj_PK(#ID5$fCoCOFdZ{?>N(@tup-YIE_z7H&c$ zX*Asc2$9=rF<~&Il=7P-)cu-0$UR@~Zwr}zSxfxkn%ToC=`C+N?61 zBf1zhXE{OD07ZQg6G4^A?jq~Ppx$pLq-?s@RzYxX5lk&n44go2UAUV^bNcT6UgGSt ztmG&8!4#BhRLvFbY!Z-n>G@rXNwWLV??Ls#l4Q;Gbp5?yLkNqdzrG;?RXe)T?Fi+6 zS^y%!_Tul3?%3>cfzrWY&!LkM%d+l0m)_U|04~YxgTCh*Y0EQ}+BAe<`sc}T0-b;? zZ^OegtO?w}3w5-pTM0m)&gub|j8~DIV~^{-Pq7nUl4wW^8@wMy7Fdren^|g65XkK} z1*)Aye2X(TC117L7Q0YgJ`k~MuojI0Y&-4=vL`+c25eF};Z%VCrFs{;UD>h2_S+Ye z3bwJj$B21}nf+@&wt)XCUiz!&Q2FRf0llTlEp3KpXH_#+;7LG0vz_MfdLr?562`iV zP9{P!slhKFYy)~xXW$7FqQ^RO6|R&W?@6hM+{50d2m2iYYDex`%;NA2Jn zEv6AbNk^(Ss(p;P(_4XValm0@y$=$eBH;(SX z>QKcZwWKWX^nxnx0yCd8#fB1)^Wl0mH$x1AFIFdHV9pFQGdc2z>fUw6(+cEr2RsCK zJ4?cLHM<9Ap0caniSl3hBPEGe_LZxVwD9LbD8Vg?dyGXUR*>G-WcuGtTaMSLNbd~K z!mgvV$1`KoP?n&OGbb zj;zkec)dt9AXRb<12h(T^xzQzZJOC-2rPNK@+Oc=CQ=`db+H1+5@9u1uzT$`1_hkZ zv*`>AbwNnBss{~xLPL+X=_><8<fe=o0}iKMcm zC0ML{i}AxukT4AzA61sMuL#~g3#3sF%P$naao9@3HX1{~E!NZ2h*ItKOXMuTaP^w} zRR&Nn(IZX{!!|rSSph38?aHUWTuMvrPIJaA)gbROL87%~q4gnBJd?zj2?rj*E#IeY8 z4VESdC(bM17%x+9(c9sf2Igm*rTWdNo7VJ?4S3afG%2=j--QX>+MTRkqxQ%Tux#gb zfKOLIZU8wVzTZtA(ugL{dMTl;-oS|Z+ zGxEU2>jNg@o~J_%$^Y3+dY2zjPF-iymy`>EZ$Z6U{2_?K zj#2K3MSb`3uPh(@^cfb=QB!^b5|RIfl)hanyf&e7Mb5gf)nea|TbJ!@*;*b- zh1xxgx0cCYo`dw?UljIncxkuowq%_S%H&?g_T33_;7&;qyY4R4-p*iEn!v#H$D|>1 zLjYYsqQ3ztHC!)yAeZ7tUZZX+Is-kSjG$$NzAkDV`c>;3h{+Q+Pr9tAs;ReYRXx0> zL(<<*(_wz7lxl)|$9yF=IuB1LG_sd?&tPlBsIViS3re}P@NP7f5a2wf4=k)w+j(!~ zH6p||Oph$w%y;qO$aPQUhG=K1k8Deb6h0zb`$J1Y;`I@I*4RU^S~<63g0ZPiwDf40zD)!uoGt0!S(B2LU;Y} z0EiWPYi+;gr&s0HMnQtKD+S}07i!i^f#IYe;DRed#dq~yIIlrwm)xdurrVE55okC^ zl36rq>dO{4uBothev+5e4tlBGL%AdA-#VHe7V~ zu?iEo%^u>xsud~?RfJDeP+-PpfUsF8i=)cC2G+TQWPGeea0|szh``gwM!}d~RTzEn zmUQ!-u1%_*Cy9-wd6^J3H*st)(MH!`a&$ET^*85WC2GV6uM@j}GrWuvu`u#G-q`V- zR_KF|Q_DSLz_W1^t1Xe^+P-+)gTy%IbHg(Qc)BSW(;TL4e}SBn{ykDFC@I+$x==fk z6pP<+0ySbu7uCf5YU3uU{dtIz=!RauioHch7uk*%*i16?yU>>gj!j4MK?e?D4wy$7 zFw_it?7kdsyH%wsOPI3)a}L%Ft;^Rbu0^wKhVuboFNw4C9leb@Ju#N)!MMH8&t2ARr(LFGgu> zbY*fNFGg%(bY(=QIN$N^{oGPku6HUI&+0E`^;OpNr* zjEtNJ6aX=x4bb6TYz#1T1IPeD2Fh-BKqdf{!Cye$))7Q!XyEv+2HKdK+W*8o>4luAW21wG&&;w*`UEYP}04iG>fFaP# zz{&(*YXVRPssmJ%L==?(Vv2Gq@=BlS-vcW-+1c4T{0|o)C1n*cT7a;Ctg;9Is7ebE zQ&Cd>^QjE9F$6l8(gI|a-}Qg;yc_;;ml07GP}YzaVPg2R1^^Sl8R+0>{wM8!aie@^ z2KbxWyQ_(Vt@U3C090lmkR2BTgNus`y{VHUh~C!0l-|zjFMi5q=8gatTL(+P`_%zx z1^lZpPBz9s2LQ+n_^$web^{=7ZUnS(1paXnwf&dU`n{CzPVaKie~7&o0`w=Q)xXRE zjzHl5N@Hf=_?NG=yu38P+Q8ff1hg@*F?u%y8GxJ|0s4Q*-rqpuPyZqa1PD1fIQ+>W z^KX^If71M$x}fd*%CxOKybN6ad&dlHoE+W%QJeq0Y$ID6M{`GzGzhip_8$FuZ|5p$QAUL^`CeG!qQv-b`BN*GZPzt@x47o zY>b6$t*zf#J0kokpRoCRoj|q@ZVdn3(3Uo~E;b(jAF+wKjj_p}x*I#$F{s#>+dBaz zg#X9*U4-zr%oGR$Fam(~0HCXp8N;7sfAz{AG1DLMdl9@m>}>4-CI(iHKreF>;QIx^ z!_mMQ2mm=a0lhr_srcUrfr%YpY;FX4Z}az~g78;#2^$kz0O!BN?@a!!`kw}%`s;vx zem|YYwl-F70ArvD0)wnA=)E1N{{J~;|CLMB$;wLBz#2&PUlsjtGXraLE4TkL{4X0d z;2*M7|A)7^qo}zn&{*CaWMuYN5&tEY02#dZy?~9W74Usa{t~JDIZ9UVJ^Ma)%>N85 z038$Cm;chex1*7z4bagMz`^{N3iw`x|Kj^z`9Ev{3`(-nGD@;E|J^WuS&7&f*&3VM zm;#tt*#HI(4hC)rjPG5*%*qPzV0v$7W1#C_Z31ARx3LAiy8!H*Kwbb7TL*+cTgk=> zU=a8t`U|l$0vJU9MqdC75`QB$0E6`3h#kNn^B=_V?kE2@Vg@iM{*B(FDE*CC01V21 zqxbA8e>tN%c@_dHgA_Uv!{I}z)@A=A5o%|GBf5!-*jcOrKGfh_O!v;#Vr z+x~+&(>pi&ztjCePC&=MdgyPPcft<;fbWF=CdBeyG)F4~$A7HoeLOLM{sG@Doc=E4 zyZ2wC-_gj{;U6_)dS92z-;nuzU9SIt@9T2=3;yqpmH#uX{~AS%f4A`e+{XUGN+1VY zOQ4#$G05znCNc&f2Xj{~#`ihG^e%sY{rj8F|4Kmd_Xzxlx1gY{s|OtmD+_?`%lm$@ ze_{Ev$(&yQ%hl*#HSP-Mo^aL{DUdJEugN!!GS608oJ+?$!Ox~Zo#Gp|)$3YweEGz+u>$|L zfwzn|0g8ygXr?N?ihr8SqHjqD>E}bq%p8qEmg%&Xm=HndCrEK?(vgB6DBBHD*`g2l;paM0TWR#dn_kH8Z3jDAia&Zs1eU3Vv%CQVX~ zvPSA+jK*DFaknM{tU}d}sdkJ|(&5Hs=l!xA#I(Mlqni#%`&GwLxX5g2;`15utzqH4 zLYu9v_=s5iYq&?^p%V4pqF=W@VxeF6q3t64QE8X|bUw{jJI(Th&1aELMnoFbRm){ zaIEx__#2ASKogi$7Q_J zNyf(`*7{|@Br~;YC5-LzEvQ})|Jz>rXG_TNS&|D9g#OTyPLoqcry_ItuCPMA8jSI=~zLJM?B*d;h4fa3yqXb zzPBD(tAEb{Oay{=2o5SGkN8I-N~et5k?JJgtsVQ}{Ur zKlJ$SElEqj?(M|ypth&W>|j62l0KEYc=)G+apC76rsa$AR5)W;p|=O~bObz$ujmIJ ztHFklbC*3GO6Fp3Bx)x3E{o{M=<1xk{`6wk1hp}msfynkyX3mP*zCQcuGp*6{KSpq zVMsj7(wNGxgchgd0iath*fF9bi-_U~B1SM6MW@dU$RlfbUft1em!4YLGe7#)8%%mHhth2TOaMHZ;2yp_OPpC zio7}UR2V3$&SC1|Z6M0SCKy^k7=mWc5T)M4D)yqvAT9Y;cV7mwDMBl)43P>rH=?6W z_}ro>QXA&s85ECKOoo0;0&OKnre9e06skJg-uzmc<4`P%$?yXri7dUgd#bX^dcN|$ zxCl!*j$B;*Fp|~U-{;rD{gcyt3K7sJ6G4MF9zbZn-NMoc{*bHkn-S543UsYH`GU@xT+9cekujAzfeY@E&V6Fybrrvl}JUa?y5IH@-3l33rG zs9ry>{6$LPR|44qYbME5$@_h+=da)19_6(eWfWwU9rLhKcD`3`y?)sjnZbA6%9y?K zQfnYg%=^@wKlVxM(|BX$0$hy@OM3u0Oi>$0zaxNrqpto5?Q^&70XYUoV6RlblCDA}(~ZnvjLUZTX)i_~S1KUs-t!Q` zG2odCrXf&LHZXsP?Q=!zcssO=QJzS%9w(h~=o;X~yj=oWT25>oFO#vYb3r2!Zmao5 zU&c9%`ryERO0VQoBO&(I9dX9ZLnqhJ!w$Z|&j_xBKHM|6-r4?Yh4^k9b5QKFW4FTJ^HVrEy3Y|)PawdnMWHMY` z!5MkwTym#L4w_2b5~wEFr)H8BQ7BpmNb!5F@wdW|&({<6V^Pzg>FiU-cnq)(_Gz}9 z5si&vE8-uIQR6GBx6wI1{0yA@ZWUcj6fK2ye z#eedt@stiTyX4RH0Wgo6MF(|2m2^U zsVBW$QkZEh4`H`av}Bj=rix#i1XRS@1y`$9c1p(aMJHc4E_S}ntjKrxDRboZnaPfq zpV+0D4je5nnbKv+qeqfi+f0<}5oy1r@*uOm#7yfnwC{*jP>Ms4VE zYBaK(yykw5K^ZcH?TIc?V-|B~^f9$os(mS$S4WuWPAX*gJJxH2(u-i(ex*h|axb4d za1kc=g)})r7{*^rCzKgraX!>3)-9h-4gnIa6334~VP-&=VAz^9|N1LG)>g(uDB9DN zrbawS(t(Gt48?j8d;C*oRZRroW`-+{x`N8jIweH~-L}38dti$B<4iGXSY$VV7P>q2 z3|&*SFV%!AI4TNOLcm6tpWAGJb(#APyq)ug6_j!z8vVTzwJtZ1&@@kl)&MGLR`5V$ z^Fy9yWO6L=(Tjhvg0+0VH>#S|mVn3ZZ`NX`pj(^9`G~Ox` z-FVUR%s`xf_)e;!F;l8Cz}^<5SQn14j5OJW%E?0nyD-4q*`VBXq6mKB?)fEYpc7dN z)>FK(bIAbX(kD%N)vKFMvBHAQ5LIr+e>U5a=Hy`&&jyjj?L<|!d5?Q{G(>aarzMmLaO(Q*7MSD`| z?lfyD69aDk^cg;98@C7&_Pweyw96TyyWcvo3rk7gXs<@BA9vU%K`_uihcOY!;qye& zh9^8|3eDSEH@*FC6dO1s$Sa>DVMpUe;npL0c2cQ z%ZHv-p95#8Kri=N^-2GTiU)Nc=RLM_y{Wp*2kJB!!!Me2%|j@Sou+66 zALUVx2b{-GQnq@$cGFu#_r^r|<+_DN88Gf~`!7S)f=+I4_AM~k3>ubWgk~k4{hT5u z;5xb2!{xZ0@ie#GNEhv8C!|xDlo{2Yi;Z@8$fJ&=L9@ZCW@6)hqfN@4cf`8=8#Xgs zG!M?yP?_~{UHwwf3TEt#UQK0$$PncfQb;r1LyrSa-b@W)BUOIC*B4UPVU-bi5JL3% z?BQl04Dxgr2R-!{UNCJ<1$=%nv6#!=1D~G`ZTcKN@6%@efIB(^_VtvAb5W{x7^)#L zm0i6HQs8o&{hJC`tn{#nHA*&&`I}B*pLs1EK47lqU}KEY(G3?hAeTe;XfciX#D|z2 zuMIxsZGaL`8aCCP`Ui+(qei@s2T4T_rwdX7iroKGfwqR%%=!&FI==^-Y=0u* zNDO~#_IRYk>)=sbBw;g5*x_pu5VlE=vYCQCto{{?k4v&$iElMK znL4NK4oSSHGfU$)bw(EOv_`u&(RooTM`n?}k3tcy(B4G|55dDUy4AmgU771PR|v4_{ijZl1= zsjO27gib`6kxf86i+g?>D_r$dGx*t;>Gx}qKViLW>_H0KJuFzy#9(QN|JK94HMO-TjV#U__qm)~ z+Yu!E@pUviR)%>}LpW--!MqJPtSjB^5NC^Qi(FQU%t1qe#r&Z+$>_nDd|e9J)1DU7 z6wVeUU^qvxhaxU9oKfogin+=cHrO!?&umpRg@T96t0H^ZZ{}~gapPb*VQn{9BbZOh zgH69Jm+W6w;-w00Zbq~g>&=n0Myzoq_VAaDcaHmJ&tdMXKL`f&?JiE?E$~n5B@;H) zg*3RwfiwjCT0<9J8U!RB4)il3l@g4$d7-XrK0G#@mXXOpN=9gzciTFliUl{+_V&0~ z%dAlv$&;5l=U~-=-)^qcqnaUEKd&JiK7C(^`1s@z->b}@j=a^pP7uTHYbZ3@hbQrP39s3xK?yR#2#am{1kquvPl;jQhtm{u)|tHK26J2=Y!*CQ&_7rr z+9^^gbpUHe7P&)S2hH9HM@Y;s^pzF;VSs(l_l83Xs&eOPBW;A4N4N1lTSs5rXKG9w8bjujvj#`qtSt_K9=m*Z8kXx@N zpaQ~n3g>1V_=o0t@8ia4p!7;?t`RXA3-2QjOmDRPLt~VG<@S5nXxPvtPBXQ_nr76L zu7&7gP-0>iI&Z1P%Axf)?TUN#s4N&8v=u{!Kr-x^(brDdsmCt6C2~L;b-Ht#W)$h2 zyO6u|?q=fPBwl5(9(7KL^jJUy*XPzVJ}t z@GEFN^e3F3IPK*4OLBg6)>#96Ud!&Gya?pnwiLh3G^HTZEkBb}%?;)ZBj%30Te?6S z-wao!3@r}jxt>zSHF3;>{7$q(QB-M}#qD%NVh;<02V-05dYLn=3gtBsz(}>S;ccC$?zg;_)~~2but9sDq-ld6m=^{ z=Twj$nOf1>bJ(T{Y|2!m|G;JK3BpW7d2mZ(J>&!N{)owsdTFQtwsw*wFB%{FL~C7q z__EGp7MceGEPM9LbSSl3E|bS6))|{+5`8RWYMoyf$)B__+8y>ML52=^9ATKB8Y(SL z9!;a^z~#>zzbjQf@F?Rbj6ry5k#)!o=|k^-y;IG82J{KrwP?ML!Cf9!nMM&h)v;vM zlKgb~a^4h+PhixF7F6`nak2wuXOP{79g?bGM0wD&rCpSuzMV&k4qe_XFgQ9?=&Vd% zCJ)3edZ9p)PpK)zWbQ|RvMt}nad~BiMT6`}P)J*;0^6%zLTf#jDP6Ddv1Pk2i~wRd zC|M%Ita7Sf;$Bs4x#Qa`|C{pfO-Pc7+&Ud07i*M;-l7P!?6v#N_>Ba3c=d-KOn10! z4++oxk>Ic*dsihx+o)G=c5Jc4-Z}iqgR>k4p?-%TE*8(C)1LP0t?5hgFEr)ICt2aS zX>^_nMTmo6D41nWJd5i>#BWGw$w}vS;*vNl9idiZvcDGH76hG&5qM7AeG8@dj+z@F zu4v+6B47|^KcCeduMu9~{ktSA?aO*U5aGlr5 zFu$5orpX~W<(QgzdGp5-Kc@0N3h|7?w_o$R{#0j94JgjoE%ow68&}rgJHF}*MxEnz zIU;q=({bWy%^ud5*Z?u5HBU*tt(yKZD<=k^PI$}&+_4r0X%-YW*vH+WluGSZB8#5n zP2<~c|C(1H?b=mLEjcqvXkKYFX=Vz@D|gL0aMueM@c=3@XS>F}oFL!C0H(E*4*~)H z(CH`(5Z{+u2tWJV9p%d@MBTDlLkmrHd*lvT4eLW9HVb;f#%0tSr=RLOoxG_(mGx}i zcCMz>loRFV>O#^)5&?``5b4jr3W7SPGaQTL?Nvfioe>2}RZ{#Z$;hxRifZC=8B8HI z-nc6Z1Orsq!?U4&2DoMKBs=ts-x{C15J7z*gsn)BLHUu}2l6n+$QAr~6H1*+SIeYG zlRP#YO+}i-&kCm6orOpYWA==f%GwkQd(m2(-?;z&HWFE;*D&g8zLo^{XZI&?bXHul;l? zC>M>&TXjs>Hb)BY(Q=}AFCs2hl*YNhyJ*IaW21R#u*m;&o$=(+!$9hW(j{+%g}E_L z{&Ji($A?;%TfNp(X=bo;ryW`8F5ikJBi<=jdA#U8Q62l)J!LaY79SLkjiz|8cIl(} z0b98?)U|Uk3Ofo$c_=}f=TfvFM1Kl8h+y{9MW}W}XM)J7eLV5t2gU?L7`_y^1zwa&gH^zq#TS?bTkFdIOzNsn{$tYrK-c^7*2+u=(p`__X`(@otu|J z!kN{bGnI8Wr+GIyfx;>%He*xZ4R{+rYz#(ZKF)U#v#qOtzg0^S$3-zhAyi7>ablum zng`R79T%^;sxwP}6vCcE4vWLWhoEJrZ1ZBQ4w+Hv zO_ydhPYE-^KI>7%XNXn_7AQ(lkyoeo(9ow{3wrer{Rs(jy=_jnJod|ngU`ixN1A<` zL(ZXi=y&0P{KuzF*AM7FyS_e4cm)$d|0*TJRc{v%6toO4@`z-HY(R);Vs-ym;IUqH zIYxy&kVm$LEY+Abx17sQVDUpy*i$mk=%owh7f?8RK*G7jkWX*S8%uk*jd502nqkFE zuD{@C^yxCX8OjS{ZZ_6RVjk0vZ?m4io9vCX!Fx8dH3Ou48Rxfm=Sv7}{dmlTycF^? zg!dv*z896@+p>Jj)8+4jsE7w}--kX%j$eJlv%R)Fyq*KMs3h*Q%zRCciLK&Ni)y1r zN`b6DsEO;TtszrBUpC)Tl6U8b*cbY8D@wn);xnC*{7Vj#R2)R*oWM#sg|G4#DVz2T867yL)aQHmS+xTVpLo@?7g3+{u%-*2dz&er} zoF!3%zWII`>|ihVxaa%yL-CFQa%aR}z;S8+t&^E=8zoG9U;Q`VFad(N3YR<80^ca= z#}(uX;Es*t5%$50CWUeAY9>*^jBEqQ#|6`p5|QLwLEeOB$~zCaksA$yQ$c*A;sQ;x z5os!Bv_&K$cvp#F@HzGB>wGGuMGD-Hv;y&rjHBm_lN~Ukby#@}y*BXk?&%MNrgbz= zszkF}{?DSjzRbWla}Mls6HZ6KHxDbKnnWV-W@^6-h6x-uD}36!s|ZaSq2-_723&&9 z63InlLtA}svf2sV861h5y5rt{x=WSuus45m~YVUW->oQ6FG|NT1&{bFJlls343%=GJ!?Nuv@ut3Y@z;Q~dA% z9h9fJFL*c0xsNQMlc^!f!U%r24V;uZw4+tf8+;FG zoU!V%A!fU%`t0GH!P;`d8K3``sD;F<=G=l(rf@~ zFNi`(>O5nu{BeD#?LddxTl#_XSDzaNUA(Ht>YAxKSV4;HOp<%hhak8wNwbX9c$xP1 ztzedTV5T(>d*Lcn8^2Ojw~!mHY)n}>ob)iYzix)n6P#It(p0LBGG`MtQnlvMRkg7j@93B^SADyegq&9TlGeNyT`Z2|l3hR}j0ZZg z36m}+=`MLj>D`j%=(ILI?9tS7a=VX$=DDM|d~^<=$RG#KGnfV{hTRA-HPDc{Ntv zdb34R!Y86crvncbipQ*2DUosC&zhDMJgS@2ymvdbZ~b{BXRodZ85W6xBCHlH?d0zX39_ek4`jhF}wuIW*hMs?vURol5;flz`<*y6ZdL9#@ecH#lW+pwKW28- z5z>&MuB-%VZXHO1jL?~3;5wwEbQ+R3{9bg0i0yg!HpB*L8-Xe;p=b#pOO{IPbtcA` z{tT^${b*ZnxU9$3H$^_E6|Oy#q#Nztc9SNahx|(Gv4nk&{F@_9S2|aG#BC2#95BP|U0X_A0YLQ^4yO zIbzBse@r=7?<6rsc8mZj?+8YWgpw6CJV&@BQI^^LH9$CC4?K%sqJ0VqYow?;AVyF7 zO4J)Xs0SPS{2YiKLMsGiW(;0cvWI_nFJDxL%@*fo8`GKn>jWPtQMwguUzb|>nea5^ zE?sy4D-lMCCCfl){_#t&c3S#KA1a=4`D}g2xdyKB$QludU1st|{w#4A9izvDIU@9X zlBG6Fzh~2B)f;69#G8{i6fC>x`fkm_zJ4aX)}zNuDsBs^@(fG&Q~3VCM4pn_XGQlQ z9H%FrEIGO8H=&WXai}eCp7hcO?M;#qDfXFBO7h({vrPB-hTVDkrbro7@S&d`9#=8D zzgw9_+~N87KMLaLA*+&VW0D$oa9GIneSN(mIFJK}<_eHIhs#9QFUXhOXn}`n9Id@$ z3elMukryXnP>yt-2 zJKm%z+qS^$*k&SgFYLd_nmban9zHA$2z@;{o2v~f|EA&I-EV&Y`P)T}l%;-$4w}Uu zN-y=n4e?WDR$afMTvvyXuf#8P`?%Pygt(CriXXNu9QQ3%8HCC0L=+X?5WS&r)XV*X z4k>-twniv(iZ9(-ggJiEZ%=LfVUC0(= zlw2;ynh$HhG8(+#$#8wod~2;Q#7c1I6JVsq7oT+zr&8D*+Da$$RGO!)0X6#SM9Nu5 z>*?o+&=xRSn-e5%Uq)ucYA^ovM?7*2zNk)3wk%FUr2NQQY~0iX!oVbgo%YI0z?zx` ze7VBq^5@W-Uz^`x^^U+tZZVxo9IbffRXZ>0ZFy;Gn3xYfwKlp<$nb;W&q7)0D0IKS zNHvp;bl0IMPA^NlSk?{MW&xpN=mSpCx>cqiXf&1t5NHmJYP_zm8;t}-TuKYSXiYzk zMS9D8Ss;!AjKiMB4z39uII^mt7Ey|oRPwA6))e)N(vg*LZ1u%MnPQ)|zH^!B-8(jmhlr0vES{u@#C`5F?rm{##$lT+hv?=}3FuvNhoSwYq3r zX5x%K9V9HCBmFMn(f7jG9+gQnQJLG;tL8+Ok{7Yh$_{Q*%1Lp zpMU?sX%QR4p${M}A5=d#$yw-;2Tb@1nMv!Z7p?ednYc!4q!+R*L6EfWH%E=$wUap+ zZtpJRz~sMwq!wOfJm#1!a*Hx_wWGDRMl@E_RD%;AEZjz5AWq`|lA{$fTY1QVIK~H3 zcIO0;LEllM9k)@-ieTBgI{hOCcZ=>X#_k{8G)_=`D#UKGgd-~h1P8oGM2XKAo+x<9 z-y{pEm(blEj7VP)8043M$?epRmQ2K%%L^X{6`GK&DNK1nzQX95n|Iu3jF@rpy7pbm z5$Nw}V)pI6ZTGHN7D{_{O-^P9v{T4*mN*7a(6;_AfR{7#rD&0}DXl|VyrLzghFE7i z7p-J$@z$VJ-eRFFi>_I=i$W+3MpxPv$c7jVCJkGOuk!^LQl%y$FE_7aXD_2Jxwx6V zbV)b9oLd-;wN=e*@+O}u=c~f zP8~v+2GT9tLMANns}y>Kl(A!41gjjw*-*q%$I_0vj%oVGxT?X$czYKO=c$byAmEMW zMoBhjmdp~}vBY+V=df)7LWlKETBp&wR8H*qTbfYbBBQSnCw{@}qii5#<>RWwoDJ-! z)M&f>noLXccvJx`v&pddlE{mjQX8Iqh$-E#gW4hraYxjAHy$*wIwrn?J@$!XB z=u7WcM71W24~tf+07LF%Cwc;mj^B05)P6EptC$8q6O>ozMXL>Vc17Y4ZS9}^GzAOR zHOZngl8e1&=If)E80k2<)JH{ZiJ9GK`K-9XD}JiiKY~+91jmk>3shTHfzv4{%0f^{ zNbbf+-Q~_5jyp2y9~NW$dWPvJRr9~G+y=>-6qk6PBG9JyhocZ0R?`&ZtvUo3Wg34(CQtRr7ypHyindt&^MH(0ynFP%SwgI5UAW{h2MxamKA!L3`m3|3k8zgKxk)&wxP=Tjo=;u-7E^1%-!; zr5L@m-q;v=z0C|(`KUq#6r?X7CyQ;2s=ujxq1##)lrzNs^h{&sEP4FgbaVHqAH&!2 z6M`V;u&=M%_C~clNrL;ZY5fRbuNE zSr4hr^|=5uDMMA(8Thd^V&$qR-TcSLB3U~rh_>(ZAC|QSODhf1`}s7fkwRK8O4WN; z4paGN1+>33DQ(kbIQh-O9&hI{R4aXHGBNvZHiLUp zizM8)KaypgH_JZEGm;L7UZsIT-|7bwSbc_MgeJLubnHEtfgo4m1`u#`+ zXCKyu=g@19cult0_-$Cm{xa0fAhlzF=1B~d#Lda<+A+3Vx!rPnJD+vpsaZykMV!ag zL^6!p&s}*7_hGVCT}H%DSCm+ljQP~LdrXZ2J|rH92UaJ{{OMsP^E|ShpMy2c7v~7X zHp2a+G?6Hv^+?*%h4p#?&;uP}>Pn~(-N+@rNRMWCKT(3;hIj?cMBPa%;CBbFUCYOR zt@PaZ{W>*APJ}}o$}0_j+w@Jpi{>*Eu4Uw#50B%b4n|clnrgk#k$?T2MGA%lBdru= zIqSGBdx6uQZ4qRwXaKzxCK0V4=Co*?=}DYyMYn7}dc{|EW~$?`#mj@#5QD()&<83x zR2_PSlUFK3ChKZV_5(6aC3Ahr?r@B+V_2ZMwh@*k4GZvDgRrkfYp-(N+?~d=XWKjo zchp%#Jt%A#LVjJz$zsN62(I<0^enoSdx#oWW!$qo9%85H+!hx!gJ$Ke3UB!(M4o?O ze)_s#Vho|Im1%&)7-ZgL`*9hfhWauWC(fPSgkCe#aFgkvU;jl?K_h_)TD0<185CCO zxSJ6(UAN5;6jMcPkn@Y`G+RpV;&h~iLQO!u=w235sv8RqzGKy@c=S7~u=ACYj7LmU z_&5uMnd@#fzAQK`QAK-4VI1zRe_0O{8AZ<6OZVFC42q`uyk?~Ji#oT)Ylsq$G(B)| zOvUi(Wq+kCWfil<9AE78BvHsgzK@5QlqNTN#n9^qxviX|iZHuVp_SqZ`>4;h%{f(b zQinjiM;WdHc=^k+8v2CHFPCA}k8J)$gcH#Tu{Esdap=v#5r~HteVsG>ZKX|TdTzal z)FEzibL-ig&1za(-(nm?Ge=+PPbaErsN>i+w*;cz2!uc9 z8<&3fAtw9c>9kK9iLIY4%)dfXQfQyC`d0j@Imv1$N$A()zN+i4*XG^+)knKjDSK>- z{qj|ujKKQ;JUvN<VQ|OrNvU+WJ_cxk<~s< zH34Ti49P4hZb&((OO4oxp9h^#_cfqYNnvu`Q{Umv1yHs{n-WmRGUgIaWdw5Oj&w;! zbyYd*mUz(q&Wq3@;RKcO?JBxNZb?OS1^tnkHLbPq9?DX2RBCH5zh4~HZ=E?=2;vwI zN}R~B0&-3{2+NnC8Yct_wlH%|9(De4W~g+`lnb&T{?P@# z7tni1(!_m>@8=FSarmr-fV!ScgXKk<=fuN0bEd8}`-!1U|PJVshBrZ=W2nZLmNxMI>? z9ujAP$u1+h0}oDekQhReuTxj8dUmFqrS|}qxvz?XMI?M(gk8;_a@x*VY5GnVNay8# zq*Q#mX+{sWTKpold+N0K)elsflFLwCer!yPqqt*BQ)CGW)D)Q+0;ngr2GlP|y$K%4 zTTpPy$RI?K=vp9`FTv`{B-CE>_A?-vDX4xzP_ohKBD2mB#YkZy!KQar8QUa8@g%pEQ zA{@^Z3xNR)wkpvBXIpDunx)hV3%kmV5BlZ$s$;@e;R{!J{0X2Nyhvf)cj=g%sZ)Rl zTwgQQf#nlWv{#Uv$WEt8r>6;=I@MoDbZ`~T^iyy`X-m6g)xEmO0HwlKZn=mPxK=N} zx(QH1d$rSwG8iC^W+j9uh;b^iEA}{xFkLC@AXq7yd|V?%OvlK30=qN%BuW*4$+Efs z>GhBp1*(2_7S*?H->AojagW?+wwORjrv-X|Pg%myfZ#jb+jXWzIpF>r!9l_H6buwr0T zpo+-LUFn4#g#nDam;cL z&Crr}Am>Oku|`ulGGU(6?OB1^2aSdzt3 zpE_w~ZFPwVsfa{t(-e-$xupFUWxNoj74?;X)q*4ycPVo8f~IQM^o%j0r5})HJ)7=!Cxu^qj}m#+~)ybxAIoY?gOH^{2tuB z18Io2O8xbH6Uo~*v(ZP(jPE+FaHD(|U2qKv5+jymz2?gT%T0mkDp_?AjZojs%0HR1 z8(C>{Hq+vjOk%lWb$%Lpv>rihL49V_Onx(po_&}pO`!9m8$4Im3Z)UJSULaB_K{+! zMx)BVnGVy(&yT2Mf;u2u-S53822?gdr4%E`B+YuC|_- zi>B#7s;_{}S`eiH#8DfULwOM@Nn=rKDUqntv;yiUNCvR{GWO(B0bQ#GaLE{4g(S_v zd>@K#-Z~yk1a?a7XDr)Q!EJ=Gqm_XIrvgIyX!y*e1%w+}70D>7mog<#)J6GkN4ysI zEjR-`9k7+q(>8y24Gr^SW)jf?lb8YjD$@%^oj#5uFlRMMcFPuL_QK>&h}e|zA`URM{MzHUZya7-72>LB(FujF2qt=ck?kpEgevv01=WmainS`)DyX49 zrS`FJhawLo1TdAbFtr!o@?e*IWaGl3cf=~HX|{w(#%?c4>5a$~RB{d@Q%D152yqAF z(?KRkA{k>?yc0iPGKD4s-LpNxY#t@ey;Ywet>LM7v&>&L#%5D^WZoR(wfYta>b4MVvu74Temr}c;Ah=o%2d^Mj9Dy% zn8JBTa++sx9;+$6*vbC7!!Cj&2-qpviSLBMjg=6MX;2yc5u9T2X-7zFg~FD@+uv}< z>{DAcsd5}<1hoXQi)=^L?}N9FCb?Uk&|j}sg7h*E{R+0VH|X}75*p&Ez|dbBNno=b{@PfRpc71 zF-6fYP4Ak51m5*FFyku`Wp1q`rsi+S7Gb>y^_>y;@N@`<>m=c;iERAFyQ_bEk5jqRut#(AgH-O(zKGN`-OD@_m zim1)>u5*(UaS8gQeVDcxQ_>afW`~mu&|bgzW+VObc9Up#Z9c$CcV=+_wu^%a`@)=z zokNgjL6<tpKZQHhOd-`9@#4Khp8SyqZUPioCM!t)4#AI`v zpE^XW)dVMNfsQMnj+=y&LK5NZJ$xWb&;(ydHz&GH7=}+fkGMoH@``8vJl{}5H%w_p zvr<8QYfkROLqLtwj1pU86B7jwDQ6_>3Vzg%)|hm>dq?X%*5(w z$9GR*uav$T?3&P@;4cm>5o1VpWy(WDU)&o9w>jga-=i-A531^;j2N?uCgvkDVb;DV z3d+K}4iOBlKj~4+$f(hx|P_@i_SHE`&c{rxYfp zRGeXbG)__1ViQ0i5d=kL5EmT(;2eD8ZPp0Z%_+0~VvkTX@^8Rc85G6EN#f)$m`^Fz zabzYr`tk{8Ggk2DqBqfL4Y2DZPrDAuTW~aZk6%Q|x+nr)`}C2EHf%@~AYUSF#@(51 z{-b~B*dvqIG*@28K9YfD#5aOn&E4(6ga<2Hss=zayJ^l)wHp2k+>cI5zpRz2RBDh_ z?!5n3g`TXJU8-N;d8LV-9Jf!34{)ZAMc>str(q*YY9}CKB&7!$G7xQ>Q=Tal#Ndjr z9~GHzE-N}4sbM#*TSm+Fx?FfUXSF|mm}}-ay6Ww%cNs7spUhPE9*`e!t76j?f>IbG z!i9|ik+S&t&Xzemzn`;k<-#qUUT&6R3VzPE{JBf-ecwUs#!!rqd)UpDn})^1Vp*-d zxbU=PNQCp$M)lNkc*mhdt>TQvOl=;nxTa7P2}gr+#j}0H@+Se299|G-D4ftE$WuqD#(_@(@T{YkFp$n}i>387Q8!N1l*3Q>+LPk>G=>rLYSwI)w! z&aPrAPA6Fg4~RyOAAGmY&?`&G1zJ&zoc~fT=#1@ayVcQAxo8Q7u$9sOVcmpfPdD;! zmD08jQ!~O~H=>u%y2s)b@dFzOf%LrL^b*1!StM|Geu;5?E-0!{Oe_MQ&N-uQ4`fab zFj{LU$SW5JWbB@X)b)OJR8989R_vTcYyNEI$0kN=_U_r_qHlraADGB-0=D zDj-#Rb|_C(o3YD?oYvhK7KYx#)vD$BecFxEAs9GL?p;{RBFWI7yI`Jmtx=cy>2H_4 z;7kq#B5J~my3uU6(ac|Gx6%3UIUa1jGJP@Id8TY{ub4j55gb34=fD-pN=GH9tI();?29zE?XXf5Z_k;N)tEf;*i92eLVXUbhmaQYGKyhVd|EqCAN_AdC0UYr zMFCF>8Fv2NJ3$QPt9WK+3xerOmdjhD9g1b}&HO)E+ga>}OqY@le- zT!UaMMCQ6;Zskm%<394B5<{-(lq4K^AHc@fUWUdbSN?2n9ZeMg5V`I6rp}^U7)zxGC;91nwW;Tf*L&&kpZtIWgGK;T$!J36x8rDy{l~A6!4{2)V)~Wvmd# z!^Bm5{GqgL0%l>r(%JR?Jp$70+Kr8CcxUA#g=^+!=|64p5Hy6&dXf_G(KKH?@d`gb zKn8+Z01YQ+6D9HITTJl*KUGa-b(RU{52L0`zbWC{N)(u$hDb~=%NS>S1=XDn; z_S?l@+rJdt2gNEJam=q#fvd>D!o zrLT#^Q{_Ll4{}XsdmZm2*DGm2NPuDaRBJh9_pqQ9T2$l`NFE0w=RS*&S76LZ_ynIU z;9t=rlao7CzpeoIs)?W2NMn^Jhzz@Lw@!~JTg!{$nuo7A@;2>6~0 zl{Wax3^(yAiSMn}e0QpgqNl}M=KU%Asm9dR&+jlfnuT&wZOjT48oH|CxM6N%ZZqVe zny9ojLF!i`4~tP*n(bBBDQ__#wco=pGpk^ir@5_bA|9C0yC&~%UQ&d-gi0_L9e?<- zI55PNKiwVx?l(OBXKI&X-%#EC_@wy)x_4xjeU+=Y;xr&Pn?A+5qqXhm!h`7T!bk2Z z^!oX1kElHMrZ0NDg}1j5)fA;nmwyDb5+SED#GZi)2F&{M_TR#{r8`Woh(R z9UB{?Tru>QfLsE4ZOr|5K9Mxr9cTR8VLJ$<04a9@G6;3GgT*trfSq1478H?e*km|s zFdl0oUJ+WOqJK?`cq~tJUOmbLSrGZ)cQ%Uq!!TA%);`JE*En4c)CFB;CX%ABq_IcJ zINLkn~%jvexZY1vnpy6z@PwCJar)0P|eK9Kt1VLL9j_HtEr}EVVO!g0-6phE- zCW>+R=1D+vMV1*=(})wfp8=WG#>6+KqAg&GNYbr+O!eQe^{pKdw=Dc+(@dsKe1_((|C21{wzs3WCTvs>+Q zVrQGYejXE}&IQ|p=GYN}*~Po&#?7ENo+YfI3=R~g@HrMipYP;v2KiuG!-d^}`uiM` z<=HcBI*lIv9g25;Y{$0BI-kIc#ROwzv7;e<#?hzZD+iI!h0Pu6vUh1ZalRG~W~w?F zwcqCeCE^xCgr`t5&6jElnv+9YkL4=U(AJjmfxi3n8FskE{ecr}z^CA||gThasYRZYocuqFC+e{qr z7X=9^el@KNlo!W5+h`Zl|^Gc{{j1Eb)1taU!>{UpbDgo=iL*1H*jSmRB-zgStGw_wgHfJI9gw zE>&+C{Lxuc*|F)EFQ>{pEs2-eK4mqXo(t~1>CncLlOy!B()RAKYd0gE4}~3k=oh4P zGD1m?1K{A3u<&w4j60&4J%i*E(9$i1(JoPlhiXw=&35Hp;Aqr@m?K}gL9k^C6DMm; zCD{ZmF`$M(zMz&}zvSQ#fMozXcTjn_9xk=H0fvWG(jE45jYjItj;}l;Ps6_Oxhhw| z5zcV&sptYfEFk@$!W1`XvGXZb2Ex)gO!gnkYyeVSR}7pmbHH7jlUI$jzKs;x-7J-n z%-gni83xXIEe&>N^T?|)0P577CmNTD45c>wWV5u&43=T)=;(ub`)EnKDRHk1^1>h$^#QEGbOX@%!NM+7odRVpg`NVE*(o3>t`U~L2E}o z_2KEu>PFaUk|zV_!jSRr)$$;1_u~)v=*>^}_XyZ}WtP9_Sq|-zuq*zQeaC@D70=QL zTI=2O79r~+n+~qL||-vDL>PVid5(Ql{4OA zp~5bQ0-xu)kk2h%`4z59q>9XfV@4s{C%Ls`m(a$=3(Q->PlLg9c~oNb3631$xT>z8 z`m<(g>yyM4T0~nb#C=QX8xK!1X!V+g3*~HUkkYU*KaiU`h`T0%rqN9QjCh6yHo5LN z?nN>Kv+a^G*e>o2Q4ESBJLd}`BsD z=7S>3g0QGo-hQFPH`FM3qaG`N{G$gzZ5kOJxE60!>H{DAw6E9pQlr&#`Yt3YT<>D ztE_((zYsBHVO^f_X_q_6<{$g{f+r3v%VE8!k#|9uy27G49B|N!Plam~rsdCf!8;Y` zhi5;p(TJzC&;iXZSfDlD@rzpAHiZ{kLZa2*qp1nA>yBo0$21j&sQ=xA!l+=%J}kWG zMk!A18*q88Xj@wTx*oCR{|If=PpH_YsX*e?fFSm!C4A)}jEu8gWJ40leoXw<>R|tk z_q#}0TKcE+oeii$c0<{ff`^kM0YM}Eqk@vXPh_XLf3HmLN=t|RWZqHMf>Sbu*3`bN z=G4IED3)=baOeaP;Vg7NSAss&Xmf9&Nc@BslOb75hH#9rMeN1 ztX6rJm%o4$BsHRjybpO)H;l8I;|T=KQ|%4eQ>1rg0BtW-y+Ixy@S zU&={P;4J*D^q7riR+yV{WS#G3`093Du6B z+YP@K)6F=Z;CnnxFVz1R4;ggV;ANmaX^DFfW7@7S zI(Wm(4@H$+2nq$2b@!5}>7ri0i*HIMqI2q#T70UIi~?f!eB_T6v^+mChDwlGiM8axE3 zs%eRTLu67r6C#IqUKmZbGz}c4(Ci?wLh3l@oS465S+W)tgvUtwiOnKWeBsVR;|=(} z{Oc7eA-4asxviVfnXW?BlPRMnE=KjnE#h=Bj6K%?g&1HcDlw^AvGdt7--6o(`jpXs zohD!l6A+wDW;G9nqFYY=M^2NfCPLG!cFZRpqfctwU}z_C<3^m106QXQY({5zoi{=^ zz58Z`ukK-ke-`aH^sT{if&|OYeX;V5$&V&2K6%*$Gp@Xt-EfZ_SA#Nmt(qj-N-buH z_svi}&`SJ5F4xtlR`rdh3>}q-%I$F(mHJ9P=Y!BLF&r>Zc`i;u+-itFVVi+Ks)yl^ z8u$M0*i-QBR4Tj3awFBB()fY$N+rGfsq+NZ*09&zabKDp33mz1n4#X}gediUp>QzL zrc}lJxPLb;^|;iX{6rMnpt@5}-!IV^`d|qIlJP@=FG<+Vzs>|=bID9sn7LKsOM<%q zj9jlh;PNBHzaB>VmMT;LQGh;B{lTn2H3>{hf~&VsGK((ApL4u$GeTdXceF*IZ~-$x zJ2N+%JNyF$K8*cX99NS(jehN}iQbTC-icgZz*S~s0m?Fg0P3A7Wj6vtARxNvT&5Yw zwly2MOraLEldEmRr#M$wl}VDP3BBdl>dbRR)}J`#+`<>A7f?5ped8|FC&()LTaL0x z->NSQ%9sYhmal>&{1O+NKNw%1DLE#mf1v`Wx!EVHpr4E)I5xJJ-*yr>(I{QT=!ngM zDs}^x;AS9#o6{h;>3a~|r1v5(f|Wy`c9P(n4`UhV#2I#LpI4zbY;X_ZvD?-qq51{p z=?Yf)vroxHPaoo1QB8Fr&8ULp{bscO)+8dwm!#MF)5ahD=qKwV6~mF9i=TIvg&|I9 zHs;4}iwRW;?(MAO%_G_vDHw*(@LHTKr2ECLz5O71zL7F7#(TLo<`;`4ksIGXX ze=B4v!&{$fA90;&E)c$Zn1%btJHl0@@Y279L2Q}n$Zjs}+0kQCgM8s7njaf@TG^4w zs2{Y`fj{cYp70Qj*^i+y8T_4k-8gQQMCJ;~ zGjkh=umu;~l4kos>0*v!wQeu+k$-lkgsCoWP}T<$e8a3wo1k=jCNYYu6q! z`Ff{N_Q>x1OccFZla&~?B)0nB)-<%-awBG;q+)V8CYjQ-w0 zG{uCJd=^7}OPFC;lS8KttZTs4S#kDud>17}4BrEs)F!T%mj1;xO_!7+p}yr!MRcOXkG%?@DAZ=LsKbuQtCG3MPQxmf$(T4KGlrs(OedO8T~w{9wkKmZ*R)f%$o3Q$;(5g1|?On_4?{(a^gJoNaxK8jK?p< zhn7w|-P$|Z13|z!%)ShT_+(k)u=_mLU4}W*zX0eo04{S8b6aFT{S7{Zxs=1|Y{vFd z5N_zo?Yq^4%gLESCOyTNEWt}o5Wd)6Q0o?2pTVJs?3+Qae}qH6CSr}^rgca<5nAfV zn~AX$Z|Ch|<vfdxhe34aKVD|NckyC2y=}z%kO0 z6Oa)ZvO^rVBLI85x4p@AUwW408SDu$$?{-G{?X7m)226sRnHm%757Tw?(@}B`qYcxZSi98gB~2w2@k0`13K+M>*3lRUlL%m z2O^Wog(=ONa=GD3VQy7d%-TzD^DZP|BRwb%b5JR{-RtclLHM`B>bF%%_WAUbiimg( z8=n*Cl?H7?XWlH12A`OttWL>hUq!zl)5QD8IEiID3&S|{@6n#wG#@w(4sqwPSS^c$ zzdQ*;`ijD9Z1WnE8!S%`CVYTeOoSqO225Xy!EOm-`XE&srxL;-IVes65K)o75o)Cp zPR2y}rpCsh_maCp7aeta@}^c1B#P` z&0mEv@VN#*5Ky4VfCds?Va&H)^TG?iYZtH2h8-s!rH*1+6nSa%%6`6xL=2z)>UT=I z-+icIU5x~bl;n2AW5I;xE^CtH!;%jcM*b_Jx_}Tw_abPDz3l2a7gXDf#5DUvBOJ|1@Vsz=W_f5ylVI{CG5zd%eOMNQY(ZHkx>Khw z1ZKokG^#~v8fQvbO=Ra~#=ZzZCcV!aCH~~!Jy~yiIp!o?6+g)8GECgaiT#XafcK<>$U@Ru2i$b~0g%m=7Ji-Z6l#B=ae%~;u*}|Z@kp#2 zMBcpbiBs0K{o<)0W2@Dt(!5foIl+{*lrsP##BAU6c@;Z5CX!FeVVldMRjF>mp(?@< z5-gexLnr&Atr=VtVMHcX8WM0C;bFulmQ;Jbcm_)KqL<(T7lHFjW9-L?+(=o8WQF5!c zcrE1w+D}b|)Q?DJ2zh_Vp#K4&KDTy~wE0-99k~<}MCi)zR6&KYVSN^O&VJUG#X8*M`{k82 z_WnX9=tgKvU&gXhBYO2V?=F=bAIBwvfg>D{hhtLk#NJw@#)^mQQdp9P5O-(Fg&vOR z(nq=)McE?oIP71}%rU#fY{Qm~+U=%D2yNEF8mm;K2FX(z%;Y;?2aQipjNbNPa|t=9 zUv-vTG>t&2uzhqzl~ z>-Hhs?`XorAD8g*#J_l7A|+VuroAUw3)OecU}oAg^9DK_>E67e8&=PrQP)lO728g~ z+4r>7qSu6thIE8O+ZW`;ptiPg=u$C$UQ*VE5r_oubTONB1Eh8q1xE_ZAjA@k z5-ovIb<|cFkz|CS8*3rxR%~KONV%iMJ2NQ8X``kZZiVyWpHTNWF1x#(dwV90T`M>^ zWA-CqZ2(F7I8B-zD#%xg2jFO9ByJ29?gP z(2Q6isJcWwb?LevFPv|AAGW!cy}NAdBzU!}%SY5=^9Nu(S&H1AM1$?qI}vCgSUtc& zQJvHl=~}FZcNEH4RkuZx<2juwl7Qw*4wW3OfX33xr6afd$U(7$`Z+ za&K+0_I$j5yush1Sq$Cx8-uAAki-o@8k7qkR65%Vn71Y5f2C4;#^s>#v&2}qji9?vgkHE^HI2RehXr=BlVZ9(WaF=QMS?@Y~eVFOb_&yhz zSJgXEl^^W)8I`SmJn6jN5e_4luxDAdhEjh)LVmQ|Vj~nwez@8=E`<{o2M4W>)k;#v zsX$s4P8TrEq1Fo3Le_l4JpOu#0XB}+sNx&(g~(1!dJz&aW1E2E_Nf~?Sz;p#4>@}lHwa5J; z_?mP-$60U8NP+<%=chKwL{gnB&BxsKgk>iG*g@C3b9XC@Z-~%csYJ5}|N1MDw-zuC zqL*JXz8BsLX$SByd8Q97(cMES1}-|nljU^Fi;%Oo9sic!lWJI_GWcHed~u@oWQ%92 zkPz~vBaR$mJe1%}*=UFS~D&ydGJB|_jC>W~f^qCK3t7&6(XXqYjnu`8XZ zWQQRY#*f*jZL@J_BQ1Be7Pc(LF@cNFFN&P5N|R z`Ls;$G(j%GZcjCdLM>q%qZ5-^-%F_?nE42ke;IMIpqRUTFT-oaSeeGq`0H7-#HWf( zI9Bma?AaY;ao;ZWgJ0a(Ofo-Yr82o4B*&Bnc2*q}yemOajuOdeK7Cq84XQN$%=_5^ z?|o0~F0OV;`ydkQfuYaHCNsVk!scvvvT1m0Um?*X^Lm{`w2lVQb|8B5D{ksp zRKbJ;u~R8n25Gi7CVb;6MHgHyBkd{4J}azztEQz`iqJfBLre^s(Fjq%JuYnfLN+2>i&MgFeg&ip*Tu z2B1ESrKoQO+93U&$9R#`4ac2rl}V=AFp8rxy*9YvfLPFM1|lBop`sd6pDM`7^4S*Wnt*h`5CZ4!X8OohIRLM&d;>8Y;H4Y_) zGOK*qT<88QIn~9(slwwEc}C!$>IeE!C7q_uR*2PsM z&J0ItQmJ;~nreX5*-UD9w6L1KM?8!{|Fj982b6JTB|?0mYJPRGZNZ8w^3QJfiXfy0 z0{oALN|rI^h5y~c4s}PT$$%a_%My*DV|C<|;u8X~Mkr}K^OjwprIYKK zKNPcMtYNQKr3v*nOxV29S9;8}?)3i@i7KX#Fykyad)4*10!nWOXpO&mj~kR-1x03H zo0(!@463+*Z|~9g8F4$Dh^Vk;kjq2l`vBy^q`i0dypTPjah|AFFSxATaZG*RbLMcU z0S@Tdm5TUoAI7a0Y3FwAx$+VfuM#emNP6~cH7Kq&jbzGa09 zY#smVgI7wLY`L?UuwQny>@e$5>Km*8Aq(d&*rES;YUEKEJVIK#28RaMjdrpmD@bpv z?V@Bl_RnGrRW&R{3Sdex9`c)aS;`vf#r-$|`UfOFA*ZN>i%v=E5K6L%Qk=8rg)_wV zJ~DHrb@Og%&!0IdY64gvlEjC&^!HOZQa^*eq&D(;vQ2%C7-H}#e2+euZ)(ln+mSvg z8=;2dtO|6pay%RKHt{U??)g#ObYpe&4M$c20`IDbT8_#7r_8q6cRuZ5=wA!JjU(Ov-+rzm>@?S*LoF@Pw!Z380Es$l|Jk$=u^bVdW_sW7h=rF4LRiAqp&o@mZf%V$R!}_VH_T!2%((i7fJ1xRi z5A;&rU>I{o@*l|-UZQ5oZTw&mJVwL2DDcW5*fcfLZ^sevoq1)bK{6x`g+B<4*y&w* z>vuuTBTP+VImBKKD?I1W+k7zzvhC- z;kE-2jFZOX3+{pUJqr0jO5K(WiBu|-*_E^Z_NbK_<}_N6&Q1gs-k$wsq|1=bp7J|p zQe%1S#EgJjCsFKtRrvdbw&Ls3{#fLEU@fSPY?B|P>xS5B%U#4GaWAYh8V(C8`{g+h zT%E-fPnzwLRS@g%ld({OCtf14T=POG(*Lquv}2H#Qvd|bn;c4oTT|nXV-C&IA!xpH z!vVslwgP1R`EDuodQfl?H#t@GXztlMuV&~Gi@lu72lS@SvG_iz$lwzPbxX)5oNAxN zdD&4dM%G>&K~~*gf^q1`+r%^*!~a887mVr$A7!bScq7e*_i)FdiK99XRNHu zEUf=u%h{WmDxU5aS)LQKcMB|-!S0_FjIUELSd0S5K#UfpIf zI{EPRg#nwXSNeCl`u8~$thF<_nz@lmJhLK*>B;2ebpJ47d{P?ZTHxwhx>~?71BZAl z5CR4V2LqY4wUR_$LIe4z{NyP1DB`YLGZ0lKSFlJQfvv5tZ23~Ma|#8mT83kZgYvvv;U7i2vs7ASqR?IaKpYXFWSY+f}@bpcGgs*P3nce9A*PZVyPFh6KzeOZCKpgyA6UGqhT6x23cMxcvBNZ&q9SPAPX^@W zE2XZ!uAHWvj#M__NdX?nJ%Dz0ZtQ-h@n;|gViN9F8XnL37^?ou0t5&U+R(r+NL!JW zg&WltmBb1=I+s1PeN57e8XX0o)|CH8>FPoG)Itl$E{2|+ zhJK}#1bM6x(y2|}C92(e6CCUn=K2}4dSLVjKt*~rSkT1c{z9cKEh2-gWv_2^fmp|0 z%Lu>+#ANGb1BLyp_U`;rS@%Z<0}<83!~dBi{<$F@`H_8aI42=;H1p=r7ZA7q=`a>| zXOPeFw|dwy%L=&6rUPUHzEhB)m>T|lmC?MTf5&FmL>G0?$F*wLTd*4a5O73k>ASS!ejgx+S=E zKQj3}0+-r1GC^R9$i!Oj1oEz#3EW30sV^^H{VSlM5O#Lt;wJD%T=KFLNJR$K!m%)z z6Lwy3t@vv47f`oi=eJV4r>K`F!L0G5N^_a+IR@5!y5qry#<0)cM)yA9@-ww)xP; z;l*veUdiO@JI@HR{cgOhfJ_I!Z8{em?Hd|B{?~U1vDwTa-t0dVFv00V4)V;@;QCvx z|H}gF@cxC&5c6S0s`ud7Umvx%N3ZwLp!g6(#(dAn0l4vF0@SwQ6E-NS?j1I0W$~R6 zO8uk>il7#b!=K~rf=hFvhsGF^w^M!ye%cID08d{GNWt#J*yi)3i2WxDg;$edme$Hq ze%3(g@^V-B${@VYWfeEjVev=Xj^X*I;rm6~C9ndtrHK60?WwhwWPPLcQw@xFb^liT zknj-1_5Gym1JR{gP#o!1oxS;u7RmNY#>d^!tH!FW&x{M$j{c{kt+kI>KJ~iBwioA1 z;iDm#yGOkjo?&vWANf_oAOPIa9rOzwXnOB{ecKS@r!yd1_E)Tb1(d$@N)J(b&W1r2 zZ1&<8BUH}P0V9+?@QlXvu58Y)5r5{_8xj4p8QhcHi>#}s#h;#$9YM{dHDpux#YQ%8 zLEj(e1WphKWe+`$+pP(N=HQ<1udHu>xnE!Jwy(6>qF{&DLzCdCkr}9!1dNm)x$t8L z4+i-ZKi*+qE?2=0rTzzk4n#mmrwD99+L@3UP+&U6>>+;l=!}__0ma8A+~3h3`Z5&2 z=F~3rF;E6{{!t)Qs(7=9xne4CiAnn_FLKbev`YmD!*yQz4)WERtsH9KwRVTJH!>j< z419^DeFX&RTT1P0+i+LEwvpH^xFP(6z=oS^(G??ETGa)f%X?{u z_A)#YK+J3YKxpz5wWjhHvBpty*&tU^kuE1q3l!vhIn(_7FwgIKMf zd(KR=BL^C?Fps}QmOKT1gv1CqK_N);kCmf#83Jw}I{4Zy=W;M%F^(pu3u+avC0MUc zW(ZGICvL|f+Fl-N_l|$M(IAnJ)nE@${XLEW<||W}G3F(3xCXa1*s_Hes@~aZqww!~ zl+<&NeRQ#{l$Wi z`b2QI*-MjOHf(WC z85yxWS4!(@LT`Q@};wyZi_Boaw*a{U$$>xlS4uPl`?!z@MsR3 z(I#qeQ{$*M68`f)>&{i!5z>Xmqa%Gmy#{lX^~5MW1A@#%$%6Pwd!qEiK7u)3Ib1Je zZdvlk#!1M=c4n)TF2{BRkCc5<->Y73aW%`g1mBYMP!_$E*qzLoaX9>w8kNV@#>dir z$377*txd8f{a7)%*y$d%{Zd|6gnMele->o0`Q0{`Fi)SrJdzhedl>IdO_?SApy0PV zgM_c>D?%HhX03|I$;4+`a*=zYRBedFb-U%8!?o=QE>0@a+80+ixFv3-T(7`0_h{)? zyT@qi>E(K?ei2_d-eM@DE~)80WK$u%j%u}Yp$p0LRXVx!K<#p8%bfVa!Pq02{ z!B}YmQ>}I31Z8rUl__}2ZWNLhhg^93f zXSDHWTR1!8O`x>@od!G@?dn9jv1%R1(Keo~U9eV2Vu1q?7IKB`Fby?d*Y^w*# zoFq6Cntyu!qW&u0Ip4+TK?=&KrOs-{wD!%UBYNgh^2e=TNMXbN=mQB5Na-*OqZMw2 z{w`?qFB{7ag|7T>=6;tcN@_}dY+r)yRaXJg#?;RjVJ%U?eRx$dd-ysK45hXJ>5#-5 zOO!xgz!5;q1Mt7x7GZ#A+%n0h5=s7>1-0RT`OA<>M~~WTp(QfPU+ngX1hQ-oy3^=8%zLODwC0 z=DT9$PVOabyisXhRF!t89u=^83Fxi6yOqVX+mFyBW^udh6mdT4gJ~G~YlwTts&Ncm z^yU)${Bh6>7hV)wJ&cBhPdQRp8@+j`p2E9{#R%dxg{qtphG>wTm0IR*Y=YQDGv<3! zy7N*u$}=`{c1F~nvNm$*Y!N|*V+-c+V3P$oj1?aYJ|1n5l!>|1G zWGi2;62-PqH-G$L{L7x(WY;`BgTA2}hF42U4M)SC#C9Rp*5oaRDaw1AijoJFJ_yh6-YkB?S2^%1D)`(=mqH!GowU6}%r5rj zZ=kFgy=lf(LLdHG(30J@btZ~>A3`u-3g!9JNMEnrTua)txzFX~wk+U>n;Fe<_d9*6 z+M5`=3??%2RyVI=0dcAueyS-3|2~FmF6(Y_WH^rQ2`d}yYSftti^}|5_Rx@Yh4tHT z5o-QE(uIwiucrCgwSienA2;iX9(O69K(c+{Y;%&G!B%9fH&XR|&Fx^XS+pl}E0i)buDBx)EEhLEiGa4Uq;kpqhukm1Votf%#f0Xkt@Q*u0zt zYN~2SLnNLub^5#{Du!AXjA9Fs42;LO;QbS=h&$&gv4#3Ipny z55_PBrR_|N(s^91M2Y-rBx|WVsj$*I)?b3RjBt4OmR25<+d~L&!m}e$VK>Uf#ANa9 zUCbstk9NU09!7<4E>zUr1(|D?jTe?BnTH})SPUNn>08r6ZC9JW`y)K#%X!Z?- zz2FdO$c7%^(0+Om^W$GCg&qkk%?sjw@z_uRN^M>>u`yNHtrGl_2%wrdug$Q$~=A5|Cg5%d^%w$L=M78aEtDU;jVIK2zzDyeDj@Xs4uVH%7r zFjjTJN7%*eG;tppj|J+t42VQdV}K}&C6t!yOEzl2>fe8q66r53%k&vgKMz19&*y&u zNIE}#A5B@m0y7NLj)K5by~2Z?QX zRo{!Hx8Cpxtv(?@c%gGDbTP8Yrz4O43u0b#HWkN`A$879>gV5Tc_{hHvmFg2XoQG) z->xDo!p>Jvl9A^&kqq_}O!Jh;he{aG5P~IhuaC$1zL{NY!liL}z_bl7Fz(&ukd;4i zDj1hmlw*0zMj^9%W>~nlzM@kb|c5%|2GbDDUT_sHV1OtLFn$eI4h#fTj@LLX?ahD66#}5bz zd-JjhQI%WgPu$;gwmTRU3cDF>_8sLgzqfA<$_bX1)1oqhFdxF|X-DfaI^0;+d+K>~ zXR`Q`d&yV>?`?QzX=CU8;kVuWk6r^L+#R(SUMzc_)aVZP0&>_(M_PjML{P*oI_$zy zK|R?Py)>}gL3+jI(L)>hUR1wV8S$7oav)6M3~5^USPsuqCOSq?Us%at&EAP5BDSjA z&b7$IijIHlYcI)9x=y+wQgM$Gr!GMT$vb@stjNNUlFtD}nN2BalR`WeTDN<~Dha=M z?)t!Y&Q|$&i#wm6D{Erwzhf6=)t75yM;V1_$Wt=5tE@N>Qm+tR3PZIcnU1BAv|S+l zZ6nRpSN@=y6#(zE5-iMH$-QqpK9XiM`^1es0AZv;_L)NrdZw)aA8%+%33H<(cr#g4 z%kyoQN(<_mjareFbeYd5a$5MeoHA%nFDXbT?7RAY{!(@ELB~{ZNLvdw2Yun5_=aNZ z9=8Hr=WT_ynk%e2N_BpVTN5v5W(KiC{cfSQ@riH3GOLMM&sDp5^F9b=GYn-M-b~@b zmj#9OGEoMipy(p}azM4JNjv%3k(CA-evxYrJbiQOR+_g3=pP7*6rS;2ot^(Z*UXG` z`UOxn(Bsy6za2VbkYZxjlZ?|U^x1eCmUy(QC}M%_aK1)oI_5(#o*#(gfquSFmUWhu z+I>XgH%!9lp(7*vJw9+Xb|4uv8{a!DY#R2X3WF5Ni&A(9DI z<`Ya|198P|`4fngarzCktfZDHc7J%OD3067ckdgu%qw~3|0=kx8p#;8Mr;vPtG=78 z--2ZQ>2J=RKZdK#*Q!i{{r#rkSz_ZrCBdpRYb`MX?P;fO{7 zXfMvl`Plo;yv)E~lms^GcEMjbpr!DA9@2_+r*3XNZ5q*uWEv8do9?DkF&T$9H#BUm z6Le)1q%{SvO*E%&R0~>aQ>Z`?xkTk}EH|2cKix^%?;_O`Bjtys?DU_nDx5|h?rVDV zw{<;qr~4tkt^W?3O)HrSBi)e^5T@-i7e2pG&a8{1Nb;2$Qu1dS;Q2Arx1=j+h+bCu z#I+ZIL!&`<7NHfN9P`v2CQ4vJDwnD5Hx7F&D;SDD!a5OA%(l?G;IXbWzlMa_9dI_5 z&C=p19cn{IVB&1Czj4S*t8`W@cD&V9bd`~+KQJyfbMul6N}^MlN!kd>wR(PDb#+!_ zuD_WGMRLa6e%@V$9J>>`Y#sRO`%(oRNURx<{#?}5JKnanoimz)zNtSw$r!rdGS?t2 zdot8K(2zgBJB5pF7nw7T@&<;rwF&3rpvCMZ0(P9Fn`8T1L{*)ft?= zvR4=|ASr7!;ix+Mih@)G_5$x`I|>u0;o25srs+<9470dAt_SINwRU`zAki^vr}r}^ zPOMNoUnz6FnLar+UnAzaGZVgCS8<@>5zOR2>1QFJ2s{PVgE}rqx-SWSUXhdw6U{^J z!H2%=?V;>y^{6{9K=JW-oofalnYW@DElRpfdk<;?*v#VkH0n4NU4JIPy06Yw%AaZ^ z>jhh+4g_)%?tOGm4VBnHbZxzaf${}q0}~B(0EQA{l}mF9#aQcdSp%&@iMr{d3GNr) z#b!}9JQeKgJnb|=4~P(nne>lz{Rm|oxGiBRI*Xmvy6xngN=!2HiEjDr3L+KB9&BM^ zs7)wE1mC??`4B{nA-H3>_b|?ATH9MlJW6_5_ zT(_#X-KC~@_BRK&dJFw8d1eGfoA za8e0`m!d0;?jU^s_|qFD{iY--vY~2Av(OwZ4!BC-8kvs>kMSFVe#Fmf!JMI)5EG3u z-LeI}{)?r73ll4~mX-9oTlD>S`?=JDR&OA_^F%WoZP~JGo`%Vd&z`gwTE8VDxZM1B zZ4K`Skx%;~{WHKR?=3b_lq}q+rSkT)8>>WVbhvSYaH7zBs~kjy5Dv$*U(1C zeR}e5J0dXp-+VYeJ+XnGt)m@tz16`^O(#rWI-|SX`k-sTr#gV9#&b z?IR!|PWhGp^2NCb~g~sn8iAa9b)`8+j zRTbhPKiU&hu~K6A@rnkgE#%^g(B~Z~8R_tc3?|%){-5{FC6ludn4IFRH27YU z2|V};U{G~)5#kX}7CW7a`7Dhzgo6Yt)j{C9xz7w#Ibu8C?>W%9{BgM`=I=+#(7trf zcp5{rVpfWwtsAV-CaI~kt#S_+@US2k3R+W6jtNfB$9~rkEE7OJpA+aG)!&ck{%E_u zHmmX-t(!Ks9L1or#X2`#I1<&|mQ^K{vR#se-wXC>5DNCh%)jS)i*aL{ir!eL?8^t0 z6^5qo8yvrq_cWqO$X>oyc|Hx_5Y$iPF})49t;6?&^z=M_ryprdXxY}s@Pm@@#-F3< z6YTHSV{}CO{a+S_e$u(b%5qpHN7Ra41S2aZHM;)aNRNaqg@34W^VSJ^h=zQoqOB<< z_-H54{hQJ~OFE9;pCTGE{62-)%7y=Nxr?Y!W8LX7YL_!@@GydSmh3}`I>Wa3x~*c9 zEZz4;eCmt%FV4-IPkS;SeUao+xxUt=d3nV#%TDiLB8EQ(N-8b=8e-`jaNcJMn2VXx z?B2uo2GyteJJ?^4s`>TKS&UnNwb6*}*vX6?2k+HMF-X5H-Gs0*d#i*J03MWMH zD*HTR@$GycM?Es0TCUQXc%K)LY@huFZWv-WZy}D=P)Gt4zx9d=eo(@qm;Jn&1^g&2ud7#uBbnt%|=Q(;ox7N60yHD zQq#j8jAXoLvFV;}3;2j}zf@_7M-z|(b5$BEUSkWHk`Wt>cELYs1EQf#Ud|nr3Bp-< zf$=+X7L28`Jf^9*@(tC9ppjDMYTDI=VfKxWri>ZnwKlxMT<@i-Bg&wb;Gr>%nYu`h zQ_ep2zHF>gIsL$%b^q+2jn&~EEqUU0i}^)xq-5W`UA5S}=8fL|5AsomOw13Y6fIrVacfjdm8r;U2LBiN^D>(d{6qElr2M3l+iYY3&1OWZJra6aT3 zLY$bgCY^_c986Fc6bHs*F19-{pLo+B)}R$74Q}7Y{>Bn3?3eQM@1|>bQz();K12i% z**>Y%WDKx@8mEN-==+k0b_Di=pLWAM5pExLEbZd^G0RR&>(`J%ASKZFg%=(1d&n@* z#zJLJ5b&6$U&i56K9Bnsl*MR2VR=@hJQ8PZd@8%wBQe)mKrVmtfJ*tPcOLF*jm{5PWUAVR5h^iQQrWw-4^HT zdyF0yHZhvqa-3eiRMB~8!^Jl&u~_f|Y`>K~DT!DcmS-pf2$KyTR5wXfoKX7|NRvLA z=AHJ&C0}JseFe|~v03-0*icO@>P)0@c{a0##>-OlAT=(I`rnOY$y4H=8ZX6!* zWfJVVScxa?{X~QD^HX70$(7SX&9G9qp3YKe#sbMwu!?4qcx8$Ggw41uF*cIoWgH8U z$h?EHf>pE&EJQptsZ#`GBlvt1;)i~FzJZ9rQyveQG54iU%pi-vc;xv6zw$VD5byi; z2#VUrk7KQy0O=Qzo0rNWN;z~$s((CVmJamkta;%zMiAdti14oktnVafH$9>xr^A;} zt0Z!YQJCjm9SF)h^2E2|iBe`ilA?Q}t zl4+GZfM+u;M0Cb7EYeL8CuRm6cz9^#@ps9iqi=^{i<%PB-9%62ZjBSYA4eBmGhoku zP28rp*T-QvBcH$Z^q#!>rkU6yv9(KfBLLFqay=ILRmxJj+{yJh0iWhNaJ3lg)7k{HUzz7t zp1K|EdHmw;iQrd>XwAcevlu7c2T7d9Ephob+HuIgi1G(_+NH0%Riq)DqJ3hNx+%kj zaB?<6QCy>#i`n(;c}?c)bfkC+D;(;wJTK@{gO37mI&1uEH`(G7Gu+WNoV20|fVHK{ z7(Pf0X`_$+rP*nUwWD>m^IslmPYK;0#?-6l9@vr&;ZUU23Ow8S2f zb->TZkTsW}XW6czqEIcw2zzC(5(r#8m*Vp)%krOB8$Dwplg2}<5_I(`4THzgg*0j=1N1I^Pi|BB(DJW) z%TO0=Lh0D&N7`Q)D zQYNkN`}Cw74!`#;zBx(Ui-^w;tg0(wg_8wl%Wl2jp^|a6klzt2|F&7ryTsL}MqkgK z<(rIG%*G}ncGxIJ6Y1$>K!-TWg+mgaknRu}I?tev=M+w}4LoG2JhWGmPo5WHJmU4; zj!=rGYw=UVCYe5gQSKrcO>ANkut<)m2>7)2a>KcAk*XV&gb|fcq|$-F)ccXGMmj%J z5I>YF*#k3%!J(*vud-YzKLT-1^=#w)>1}}eR7JHFAvs$@1*@B(i+t>O5!We=qlP1@ z%}$LD{smFR%WjyRf*Z<0)Hz6zl2sN@QAigP*J{h3-B0)||8s5JJ%BC&?%Fu@#$ zO!m&EOrP1r$BwP4QM&@|H2W`?HH~J38QZNyQ{2E*A|hVHQ_ZbR{K+6fiNUgCilhd@ z?dNw;MlBX$21zX8SKcnuwnB-?Y%3Sk?lfBM)h7E9Hg6+vv$u|HPH>aY*gD2e-U_3X z@eRvP;&V#>Txs_0f*Ee=plyB{x+-zBAexQGR_*sN;=`0Ii!fTz-86=*hk=L8q-)5C zCn5xS=U4_?6st(9#P9wPg{tyzXtf*Qgt^UkAS%AG!q~(n9+#a?GW!(Kc&7htW{d^? z%+yrQV5M-lYNa%<=`qj~5e3m~t*-@cmG$Ue27mz>02aA9iy@I-me^}pf#l` zKKAR!a^boSMA|V?zsk`;eaG6`rPmv{YblIoUxPG#Ox|?U;!*4wbV2Fl-Qhg$j4RGA zCZZ90iRFQp4*og3{Q(sy5pu3er_KIIcc5wI#rNao5T7%9W#Y{NxzSra%V#TDyDi|c za+x@Bn3fazCvzjJY|#Q#Jyv4{a@^4b=Zem_0UIxN-@1=*5}cT`A;E_@>Gi(xG%I+6aA?v$Yq8OD`q;*Y0p0Au9(i9Rg!OC`}2Gw)AOGVjnCT5}Ml z-r`pbm(<;t9||;Ybe>omFJjiCA=o{?pH}R00r3YoVViNjy*!3~h^JhJPTn3Z;D(wM zz+|GXppmA9gZ{)m8LgXoaAW9cF^kf)GLgqp7NB-GRrBR=rk61US6t`+i(otORwX}lT0Kpv_K{kI%f5N0W(cZmNo8@1Hw3wh~nE1(Sgdrk-dh1oDZzqnro#eOK1@$mcz1*5c%z z51-pX6^*x>LGHeKYV@h_eSE(QHm%bQU6t6k+4tl7ezHQQ>rT8&PO2KMb0G0Cj$e~B zT#b~G!_^E~^+M3r*s3G$#8tS$3|^Hvl)_&_aI-iTD^Dsr9kEU6)ot=Atb6jVP=0fV zQGM@Z_8psXT+Atn5}{xYk_YI2Bcwc3rqOpsxJ?$VQr_65w{AhwN6+HnfDU0 zPfzNp7R)EVE0T5$W&8M~D0y|8#bA1BPjz{SmJ9&;I*4=%-b}2OCc#@gTRq#-_4)t< z6;+XJALP}AWh!Pt7rTN4>}SnU#9&oA$x;C@IaJ=3JF3)G9+{%iXcUJ}VsOqAa75qscjf zsuF)l4jh$X>UxILJOTqNI6c=hdm!Yvr@NG^?!hcBf-drj| zO@E^N`sPD1UZx4^N~ofeZTj+~vioItY}kA>a&-1p|9y7K{9~+8-(8xxHRO)EN=L;r z&rB|=rXoGt&(wCCTIqZPitJS;FCmGfNj4)I(FEBW%R{p4a$2|W-|H&zx|X;(4zRt8 zrzW?4zwA-#2T|W!$9d?{X}8ma|x7@ZlTW<_$FuWic(RYT6nFb#Y;N!ejUOdYlreGeyhVX;E0H(54s zqQZr_$iP6M2Yo|lh!=j^UPbWDB(Xx^i5f!7xMrhIZLr^s8=A;dYicwkYM_3qU6F*| zc41c5NXMpIupG~XH_t?_Puf;Rfm@%QB^LRE`)B_o2!HQq+1ud;0(P#CE!rvOf=x`} zW`VogM;dVwBL~IYkF)d>!HU`Qs2fry*M6Qn@Ts|TStw1vx;ck}%8nPIrx+b$3>7F` zm%UplHkcoq0-cILMMvK$o=A~ZI9^zPhgZ(!*tyN|aCP&3v9b$#M1>hvpZeghg2KUu zssyt_H2oHv%+7ff8S5KG>&J>5_Af_|*qV#Y$FLp`AIU`eRN0i^Sbfl6THeF4zn%2b zId`-l^3s#NaqF|> zAgj_J9Txx6IB0{R>?K*p$BXjLr%<-1!CcYx+KJ4{6!pZso_{m>Ej$1Z5~*h}tWR(* zRyZCA^5SNpihwnI0zhj;vL0UGdO<{!$FX8qjOSODDb#ZSC9&8zM?{k)syR7Cu5j~_ zj7i#BgHJ-HVD?VRx93_6P1s%x8boTZ?OPJnn7#|?TRkrx39i$j20#xm)n8$d5QV1R z2)@6mQ`&E9yD3rS>}{J*c6Tjo ziAG>e@PSrS16WEAFt& zWAwR4$qb~4T}|BDomX+f#$JmL9J`GEheP3MMJSb+8b?Q{S^Aa4KB-Uv=|2{vVp7aZ zTInY5)(sX1pUYw;e$+qoSdPnMo$vH`kUL1^Ec{|0_s7MchyD4C z`>ezu89&Y^M~qfTLtYj+ z$jqz^yb=8S3wv4J_*5(NJDC$S_A+77t==0YlSb#sOO66EzL)_&huRdS43V(Kp^k0P(t4zLMYRXBd5Sjn_LO7_ z)R?^}XKbu1g5G{+PG47h*GpKY3E@m-O6H8#&*u5TNyi}y5l-w*4_&zCRGyUZ!5UP0 zc0W%uEvGn|HnF(QZf>W!2mEYP-=#tj8+M-Tdc1<^wNx4Dgo2i_Ik#swK2xae$y=it z_<*hd1S&px$B2^=1I4CD7FCdA=&csh#PflMwF77UL>w((J8iOZQYX7^^K%Z;GVgZa zH|cn8u2D_DjvUrDm9_4iAJr@cNm@Bs<+*qCj1iS0yilv^k`3Z>_GMzBLW_s?TJaG` z{cWsBaM3PZNow!Ih(&d(OOQ9<)-fX^@!xChubw^7s#W9c{<77IsCbL+ihnw7&HpA% zWzB83(cKHYqRNQ4!BH#I%fw3Raa9NhpV|6wzZ zY}D(sK^RZM3!bx2c$v4J65=u)8U2a-H_75fPI|Qg? z5m_V;c{pM<-#EPVQpF6sm-v{pS;4{QsPBse_5skXsX`#+Wh0{G=#KH7(mNi|t})B_ zSGDoCnh&DbmuH_1pNKl;&RSMzsXvKRDiN^88{|Io;Nf9U#|c5rZ8(?W9{}uVQm;3dpM22(}u~PLvw>v2cL%wIo3WL+R_OcDLcTm|bA`>m)5|JxlnQt8Zsksu z5K@UzHXJzk1^&yh7JKtI%sJ^VsS7s~OKIT;1&Y9Xze6Pi#uN~?%J$xGA9MrWk4G*c z7Vi))RtKV{yeZ$7!+9PN=|DG@;cclAFk`nCjxT&sS#S%g5&luo=mgV4%)@gwdMRT{ zJv;Cz_yPjPBUhjCgVqr2?TbyoJbv~Y)<3znr{0NT^O zlc(=@wqb}JDUPfPzM;{;CmT2%s2Uar`PnkUcm&M|m=aNFJ5si%vf@!*>1aUduSS&w zlFPNsT2f{HN`D~1dBFb|b8nq@;Jei{^SolP6eBT4&A8}NDO2@zE1Uu10d{@MJ~%{% zw1JD^60cPGX+~-_C4%c`U3r`#7DF7< zA#CDvg+U921H+{#{J6RIkP}rO%m-ZeDu#QL!fw2lMNMoz5=cN*L&9;-?C7g*d?YF{ z;WpgUezEd2FFaaokMkq5ezejkw$O;{n}ri(uM{l$s)`fq=XDPwRZ)waH)s5&q+NBX zMJZHa>!j}4?$X;*On~~oMDI{tQu`q1Ybv`j&!28P^D)M^f4(uzT zJG^o-D00g6EdzFYyZ1<5Ng>`C-4_SQI;$j_hFi;)!WC%M>qhGH71>KhOz$y~*;5aXQsY!}=N1j+%9HWkJ7|%FJOAxPjk>NsgjU zt!cZIaU}u<6$ID2{X7Yv3UyXPsegc;WL!cq&@`o~#|tTJsMi{`NcEd}`?tfI3nTXf zHgv4WnGDJwLf${Mm5?-13T$@MQ+`|VNlj@*X8A&%VSC7hQ7c=~upD2A*KG#@NZ&W; z?%pbTN6UtMw60pOx>TjviB!}}G!!ao5=J2SZ0)m=GrLc1o-IY3IUvBk&A*ZL5?m9| zduM3Ex-3@(4G$+v5pRff(04RC&ak76XM~ zzq;Ec=XPcuu^C{~G@PLT#k#6|tTp?zT)BtsTEr~X*eghZ4aw69K~8Kl)CBX>X;XVq zqJ~1!@ebpZl&s~=td6z;s!URY23Kz}e2c-_NQovKL6k%bv*`F-J*93zAQK%FLIk!? zhMjJ-H_x@DP@jm_1%-`J-DWw?h9#lO#h^xr?gSd4F+e;-Ja*ZDl&1Xr%s!aibmIaq zI#^|qu}w(uJ?T5Td8v7wOpa~+rJ{s-I_4wW<91Fi)Nwb5BO{G>2>gpdo3xsYl6P(w z_4=7*s4LaAj`BST?e9OmU8iXX9(X%4_Wlm`x92`YOdb!tDl%F$#%gNgV1mV#&4!Dg} z&Bjwc$IIwO*J4wj<%Eyn+9D%UD5YiD?>+n_?js``G=c%MncgZ58JPhMY+nfz%uZ+9 zv|-?!s`XwxY~|+fN7*HquILN?_i9+(3O0wVUf`~kzFc>U>LGWC<#bCj z9nXeSJNXeR$5t&D+xAlMiq&Fc<{?N!STvdnpDK9>hHO-OK)DpZ1X- z#c{^X&mWQ#t8|mtWy+Ak*emQKgARlZ=et{FETxgoBa(MRm>D)7H=m;$8?PZwW7bP_ zyPN0Lu%sbBJ~+LH3$ye;*29`C?H>PRhQ6fptF!EKbZzS^_07*|n*(MER`fR?>L9*C z+kcB43N(9^nHU=u!|u7O8nO&kx4*uZ&29>UM+Q7VpzF*V$sJ0w;dygIF8^%UiB9ThOuhvYTT~1E2w*2tTw%E|$L0jY4(8hT&lWN+v@IRB^ zkQn6sa+dQX=k7xQmN`#2OA?K@OHDf5%`EG7M9Jy>(smggS1Ig;wVwI3Xgij7zr7r| zc1Y=a@8b~^HLYUg{Nrww6`xzyS*|H7lxa6oLcA_xS5)a&wN z)VjTY+SCx#hg@bp(&~BSk3V&4(K2ENgq-!!Q$8KJ6)1iDu-kt*N}IQ9Y?5eWg>!%I zBmR?$rn|~LyG~pGn;$2N=GII_KgRJYO=y90!qFHW8-F!p;&TKI=PbjsdAfcxD14@u z&mF-6#vjs9TYmRsT1-0(vE1zA^65)4@d zYHNl^##H$E;gg>#Hsz6HG&bqgvY}W}_kMI@Xvt^BdS>J?XM<095jJr>XN@eO{vc@Y z-Mj%Hg%w<_v9qjX*{%JdTb$|Vx*~s7_;xuVp&<`md7Ql-H&DbtiKoOthI%CCp~e=$ zmE~D$*j_=5&vCBkc^B~<1~%2~!=>}gH%&`3tee|PK{0a{9QZn(w>?L2?`(DKU0s+& z>9l?7ntT>gL@ByTL*=w^7y`(vf)H}6#ts+_sBq|*gR!eH6|}}dFJD`pFXF4sbu-9a zK5I|sQkQ(pPj7^5dVMGLjEYEql~B2jMA2Lhu_*J8{+`^81v6+Kz{b zr9sJLGnXha z0LjDVh^GYIIJrJwt~|nfd}?MXnE`VT@6t8-KETZ)OQzpv&S*K+a{D6KTVlF-x7sk{ z!@zQwP`&XUKEOg)w&)nuv7XwDb7pKl z^p3!l;r!XsjXE zO&AN@4u90d^3O1hy8Xas1#C)P1X@&ifqZBrjfIm-+|TaEhb1rtw`zGekRNL~SegOB zS0u6Q%&=tS72T~lRPM|rd(kIKGpfbD2dd8$jq1ZhK~M?_rfk0~ecPlM#8r_N;Mi`Z z4m&9j#-cr(jQkLm%HuLJ0p!E zrjKwWYDC()_o>)$)QZ!|R7zCjN1@Q!SC4(f@4Jb2NIoW9S1MwrzpT;je!ae}Jq!z$JCjkF(d}xkfbVq_A)KSBGNpd(>mMOV zUI!3SKbl$>nL9Xfu_621m%zj~_8azMr|gh{FB&r|huU#x?Be^+mQ{Kfu}yPF zLMQe4RNvK9eJppm{Mg&6xa~)~G@pYz%IrznjLDx~r^#B@Bswf<7(LNM;Ra9}>1i^4 zuzQ6Fh_HyYUD*hw4;vlq!xR)9)Rjl6qZS->BgODy-8;k_&>jphvQcC5J@^e|$>CmO zwMTY}!*E!36PKo}(tS1nC&`}{|6c$?KfSL2UoEr^a%Scp}BZR)>tQxy2}bknt0 zX=W4t4FZ>HOIE!jIk_BZfDQzd=%oNK0hr6Vg2JkQPq+_bkMk-U9QK>`d>@>Ou~KDI zyS$t;lhB940InQ4~SX`b8fU=>X_rDY3xB_$S6(^`hA|WQS_LcFc5ij2*v!S>iF_zf0 z4_{Jz=8QgJ!1yLu$7qVx*EvKLO+>3A%7Vp4A=4K+ap>s}LBzCh!MnIcDgmkQakWPz z`YRhPRie0(Z+iJ1(JQzjI7Dj}`o-b551^y8$XPz00b`NvD?_LGji*P(3bslC;#{12 zanlO<4r(?=zBoH(DiLZ^sNTQdd{rtIXHuG!#pDq2&57OHEnKL+bW3LPkwe}9$O&F) zj%gCdJ*8GJ&O-m!Ib5V$9hJf-;qBi?NVA*1cGIHgBV$E~k{Gy`)oWcUHFU}#c)j!` zp2n1jkpMxN*xIx8M+stqh5>h?Tdb~ekL}p8OYFM(E_Fr_Rdnj;bLC1`gcsbd#YqC2 znTzu*wisFg^G8kz1uCy$zi)&5m?O!R4N5}j{em)QSBSnd?F?N|E{G*s=n{Z5F5-XG z2Kpk0Xc7kK0kK@G)M#R6 zA8O~&mv~u@_7btI6=ma`49;9c2_o^PhQf6KQTlToilo5*h3GAWViWgauH4ei2O07g zBH&`06|AQss9`kvWK5ZzOR4qb`QLXx=-qd6c&|eAJ1NQlWC})X)j&^1N^}Py8m@w=zo`3DX zFp!pDT18pq7sNgI@teEVhO^fm0IkZQn9jq-ei361nTSbdJixj0bhtWGT@r`%fuQk5 z#_jK|6p&EeT+#8MV^OACY*!?EhP0I*T1Q59&^$OML>+bE=`aCQV=LY91uTxP(qzJAy}!LZr1X_SlO#++xzTY$+AWfMI(`KHCOSuMyfo zv_@XPl{B6^cZB@05}H{W!D2}xu5GxPP1M^BMK0!P3XTW(=VRq#?0J}Z?UOb$7JYvk zE&~9_D8HuG?C99XTilzrNyVh+?W=MBS&R z_|M=8t`-g^Lk%(VD3zF#MyK$4Re=RkJF__|)-dsfr3kEFO{a7^39sy?+<sNyAV-4@vpCBwwe`GJMzysf1A$Ua3&)a)z+e9AAIb zlyMu|62iH-l0C4JISxvoY3i$apjqJUsUFYl4$lkN+<^J|bjNru7;S3wI!SxczyPFT zNU2&t3;U@{nRIl_w?fsL{#CrT;=ix}vI4%uEZ^Mzl|RW4;svpJd(R8v|aDKl0l;J(ch)ZiCz81QueWHhi0d`iJp~t>Uv#eRN;{3ESO}R3n7O zz2l|{AvUo*%jJW)s&P(b3i5=KY1)LppF;LHels2+jbGaqurpCBZsGBe@#lEf8jmy7 zM^|ZgdnU@6jR4fzkmG_60IkY_jGXYE_DbfA;zjQXKac-!s22#C$6cFvV-Yg_=vnlz z>N$tsul>Pl%mIKE80!ln($d%9FHM!$V*yAPV_zL+YK4~fVT=7EO1I;zpy>kVhbvNX z-EY4LG*d0{gvJ9gr*2ffNQ8^CIi`b0khZI?-fm)#uIU%T&!0Z=$70=)5ryq(p8?a& zGD&;rf>TdQZhri+^Cm5r*SXg#4A!A=KTy8_OBu5<4`PVi*PMn#nI#-p?TTZQi8dXe z*Q<+{o7o+|L;F%mUm)MPd4#`oUxxI7?T(Cu#MAo~T~m#M|01S8LBPzJ!P0?(-;H`;etTL|>F&B7L5NpJVhmGkF9lN=z>0%#{!n@lZJ3Es4Y_9pY67|G?@5|G4X zxW+19R5DcwY|TGzrTo7hVbY(@*F{3RBt9Ts>su~5qgw0l~JlW>cs%X+Tr_T@E%D#&jH*F+sN?Lq7O!N~2fst`^ z(71PRfxPlW0fvvbWX0y8Gw+-~szXhc>hFh!J&Ii3yC2>-f^y13BOYpHXNqP2<`lS) zfhd2^K|8f;&(EVt>4)8)x&Vn?fgrH`7GY94<*$w1iy4Z-o71@6k<^{3ne@c{Lsw6* z{GrkUXj*7O+>8w|$GEHOd5rvS)PC;|%e>AgSHI{FU_Lc7h-U!NRYJ7Lea8g_F3fgr zBl4A9cp(<+={!-)4e|-Mmq4wjn1U^o;TM$`T<8DZbDwY$9xHO#(;0)dsoMbYiE)ct zkb_XMrV^{D60nhJ4%&xwNXX`F_&cZkDvd>YZ`Bdexa^;q7Sd;V06}3{R&uJVeWXO_ zuL?40F%K}v%pLv5<~(eKWmj;*j?03f4(WxZqmmHtuHO3wNp7Rhjp38cUP5-AABOoS zxpgX-E{;W7VDl=NJLVuRiFbCDGEx(J=~0~$3XQt$hJS`6c$a*RioHjv<(?(MQ!0pq zo=Og77%*AvWRfmIT4G#dDATN z)vvV`d9tC4B>q0=vPV`Qqa+o5b*D8Ti@Uy$yrMr~FB7u#6bcG`;DUJCc<}JABf^Gh zMdWFL1>2j<*YZSKJ%hNE3>&r=rzr9oE9Sl9S5TCy%T@9j7Wk|R-&oXbFWWq(qwa`l z`25)99c%g=feEAad^5U$PQyJ=+&~QyHyE8erD>HYEBdu@nSrm4=B1PFkdYg+n{dE` z8rxy1cuox+M2L{aRFLfss1|OWoBZ2HVRDa=m_gJ1zif~o4oq? zEfyiGhDMLq-H1y5h%S7f1sxEsOqjGn1eH1E0lo>%gXrG)EO5;MZ$}MlotdgBW1g%J zxo{9A)mzY1;8@e?8|sQh>&D-5xYc03_ei!R{ul5T-hwgW(uVlvqKaCgrXX*;6E8}? zTeo$MrxwGGm7Etrwjcu5e3v-st~jf^HjDBDuxf>rO;fn<^G8N~2{y9dY*6bCuJ*4@ zi76!MBuT&ezqMjt4W2s^h!u;K(J@*U;q4t+;Y}AZX+9djU=WG&TyOof0%8^HXIu00 z6DL<$L5cBa^bYL}_Z1Da4J#BK%o}Ee;NHpfKEC?C^2d_gp;55d;juv`Co*4R0b9IR z-gxbk3j@B}*5)FuWjHZhp97+?kI)o|yb z;_Fs2uRHKcV6`9RIvI38lqr=PJ#+$Ht?P_=MWJ`x1!x0HmOb^ z(iPItaSKq+G4y#dz9LCE`dmsB-$m&BsFTe3Yxrb*``D4hsUQl&LekCo6?H;)0Kiss zKH4~Vjp-UmBKO#{61Mb_6>rc3&WJ#-sK+c)JxHO`Q9>CViZ*!$3jSwcrAqF~Jg`TL z0iFf`;y)}kSaMr)vCGd~bC33qE#3*(UuCT@Dr!ZhxrB-W@eDZg8k-2Z1cAgiw|w_jYj4!T`0?kC&l zsaVaqfUX`#(Rkgu_TZNjB=;m}s#@03Km4Ek@X6z5k_Qyrq*9d99`UmXEftVaOu(id z*vpcOqdj5J@q8YADij06the2Bg3C6DTXfaR^}nVG>MyLBkDdtMmcI9@x~Vn5;D+Em zYDew94anPx4H4go6RnmheXb9Xbqo(JJ1A>Z4A@;Soo*WA_G3Xorcs4tj%V_UhUlzl zoEaF%rGO#UZz4Kw((2(;N)wc3_x3LSzCG|#?&s(Jn;|sg?@jyQ=SIPiTWWNUitM~p z@g{>tRIMO|KM|&@ga}f`pHB~UfDqplQ*0Gbk_?cUCN?fi&s&PAL;-y3qoa=Ix*%hw zP|L`ExzWPg$D#pJZ4`DY9JWV_NRb&CaKP~B0DeG$za75tm`!+!uj?)ayLo2HP&Byj z)sMi892{X^C*N+uo{+$eb{7$w+-Ma5W&P?3MH^&#-x3d{o=1WM;>{Ta7GRLQfvPxl z8|dHNDIT^}s@CcyN}r5$7Fl8yF=aE{Hw?;D{{N>4R6 zziRkuSUAAKiI75AT>+(%Q2dn!X{ue z`z0>}HTzJrmL$EIUO#?KdJ5QvFC=h>2Al5T;)PnSlT`P|;0|TAN-3VRmM$$6h{yGn zPGeuYm|%-Q;})DQ+~_4~%has8%`^;e(8J z4Ymu6gJae7P#0yo?+Cq)U(-c1_%=3A&p5asDUI|cFZk7*xTQOP0F1ExsaAzl>OMSe zswn4D%R{5Y+)aGdy8Uesl$XyocnKE4eumPyd%ONu8axeM>;f-IeYCPWtEcP<;ux_zERjI_1qSxaaAq#z5rJT<))l# z^U%g-4r6U<(pv+hLsEQRd9T7sJHjoF!4AaGe0NP4k*yi)S*1K*PqnZm zk5`5F^A+~3Z`O~ZIn`eaQX76$gRu!QOiq{Mgtu3&ot=52mZ+0=qk4ZMdJwhmC)F#W zF%AM?BX<}p=F0KX0c|sxdC#z@cd-RnV{h%`zSSS8K_my^3~=?Lw^pT;2)29D{R1TK z5%aN)7zyS<$<&ay?3uREI^cQRiFDwTQHZi~I?HQ7+c*33VdGz6!-id}8sYZepE~K9 zV}Q)xcDjS->}P>6kWQU`4%AH%ejJo9R<#~sQfJx!!IrCoJ>3CBv`03=3lzblvuOj^ z0u0h*o_8=T0}Uzu_Wf$_!ehdzUPaH;NI|l(K*`p$RurrJ^cVL17pDZoW{+=x{~*nt zV`w>-&Pg1qK-*loA}fTy13hviaT3Y<3^KBwJn8Bhs$Q3QiRdeQ#=N>u7j1#TXAkq6 zu(L8$q29`q+<$vCLe(CEmd{=7FeIFCX>xywvKid zp|QRk4>SAX7CxGw?VrmgYMX}x!N#in>H9#BA}3g^p^cN!G}6ZW-ODlL^l=`?l3RT> z3rpihRN~iVRiEP)U6IbKRQEQjh7R7MURoqKZCeHvgac< zC_cHDHuqc7Ziq&yTU{%RT}=gBHO3MeoSeOOXmkRi4h< zu$tyK0YPU3SKtmEun8Qi4VuM@wNq*(brhBj50SE$SBwo3WeTiBIpNjesnmaZ zNo#v1Ayf!anZqT@^7}+!@u9g3Xt_?Tf#46_*1q@=+v&6uL6!QK0KHPTuAp7aL;d?;wT9*X%>ZJp6Xc9#!vABUnvZH3lj+(I1Wm==H^we;ryAm<0DT}n&j5wlY-Hur!xQ}3LTi1 z$|fvnZ@saoqfAmL&5SB7wmd!5t31K=i6|1g@Ue+g4Q)ANC+T7xV->#z>I$1|?B^|c zlH7a5_0R$MF2BB5&)OCPv^@BMy3>LU%1r>+^(!?H%8~uVw3dC{N6BOw#6acFQ%~ zs$N%1@kdfiCsoQ2oQWVzs_DH!5B;g`5s7=*Sw*kG5nYl*l4bQL+ML>9+9ovtkUuRlx^{y{S^_O@NtkozXs4n2=} zfAPI$r4g|9aoFN!; z7%juPx)BkEp!1JpB4LCu5&JWV-IPvOX(*rn>{u($lRkd0kt~MGY}LEpfQ$pNjc>{G z%_lK><;d^t%uvnhgdq&Df^?>Pw_C7;_<83IK%?3@n$hr%PM>i%o zv13RZl!~JAQIzF&i_6rdz?QEIN%rrAwKi7}D-V?W-3M1&I9~&RSO~s@Gqpv2Zb%dz zSPlC6C>7d^%2f0!T&{Dpt>rnrq9jsZiEsK_Gb6j?2Md1+E}a;+CPc6D_` z8k(1^dQmW?TRaV-!3(m=mZ!T2=cmmB8i7v9s@7N0?C#K~?HF@#!Kc}xcWF&^E;@rM z1cy=Bity#nkDj4lEl^KI%AnvS2Ln$8J7wV`io(1sct#qidaK26c<}NQ*<-DhQ#7*N zU+|^*K{@TRQIl$ZlxMfYPT`xBn zqFD>k(5BR$Vn>hnC2Z_Xeq-LLbq`%@grLEHcB%B8R+sLF`13ASIm!+Le0?NR&N`0X z!OmN2p>0}^;$B}EzVFo(Rc0P%zQ%RCOIK9ZuFSV;fhC+w5JRJel9J{9!E?5VCb3%y z59^`G`4O((c{)R11hA;T?tEnJQMaNPd-cwyrD0N$O?(1h$sW1%g6yDztFF>g!piYo zI&_6ew)UnUdCZ-nN~$k12!Asy3;grcdFA%$!aUiAV4A!5JY70&7K?kxS|4pceA+@s zP_Kev*)y;iIE~*tTSre*bl43>n(dIf2-u_04w#8sNp+@oWh(p9kxtE4iec)d9RemF zQqIvdeFah0(hpyRCIaMYPh7hx&as_%GpZh&j@2HjoN#jXS-FOt25zy0{W%Uvoyh@g zG!q7=S?yA04xSbepPWPAK&|2yTXOqO{|@hE!C^NLGQLRyyVZK7+$dh74FaHn z>o`Z|bV$I$aW0Z8Lp`aCA|r2P=Zm;wou8)I$+!KmEYndF_x)(!^*RGN zclSp1P`?IOwcKV0D9J*oa+MI8lnYbz?@ByvnQ6>GhXw5svd&`D=|E+m5F(i1753%b z2u^7F=U3(K=Xenp67r&QvT}I?YjVi|_T1sXPpVCcJvu;XbdnQ%>U&`Npi<=KG0l3= zh6d;s@d6DI`Cp3O|8f^TnqMli_AEkvTig#o$NOKK=L(!n0CsUz!$CRy{+9?{^7oJI z(Uyb8&xw<2e@Ds$1znMkS+T+JqKPeW>jfSEi99=8c@#_R0wgvE&L;A5=fI z8Y9VGC6$>_CR?mmi<4dLL97garD0*601!U<6PPV!bBHZ|8mQ#=b;x90$TQxl=B)y@ z5Fw})j&EV86_!ILPIZy%C>4mV_kX~wBK~0&)y@vC!hG2#vjG{lCr)Ji zIj6g{8XzX7?ri#A>Lu~w?m4*hyu%bGF?~J<=Opel%R?9XN+^NayrZuYI?Pi$ zA^k=cLB#o_W}SSB``EC2F**bQCP+(Hw93}^nMg^V)$nJ<^f5`h^rat3jFd_-F$!~U7n2-pVTwFhPGK)8Y7bG zNl?>~4&j*fL^+vkXIC^Rt>@hCH^(ypgx)1Y@RS@wbR3he+k$yl`6T_ON9$-jxp>Qw=y1Ms+Wb{b_0{VI-xR{v&_Es^o~t8 z8`KyPC}hD{vUcc&9A+a*o@y3fFu$Y+$>9KIvn7Ia(g2v~~MBr*YtRlS}<#^-5}(_e{7_ z)=>*uv9k^yvYfTt&aWnZ;B8_X!^7|*IjSa?HkRpb+R=ey>cFOWnXLRAIB$z4AFI%Zc!G6+pKWACYom+9uLfPS#hmSgm-SVQ%W7yF1;ZM_Sd6gh`!-a+f~|mM?io5md+r6O50RLsDhCVVq!rlAK8dALTe8I zAzs5x3)*X{In>3XvK5YmF+j*icJnzQX*!!icKn{v-r3PHL7JLa?-=b zesS2oD-isb*b_n&+7#U*^BXlylT>OcIa*uhVFBz4gGp-efkY|@0aKP%pu2{Y|I7Iw z<_1%=?|PkQ4ekmie^SS0>Kq$}N7&x%Ippqg0Hh%y@$V5m-X$rXMFPpP#bd2Y_tfCjjR82rNg;%zeyhKXO(iCjc){l_5|)UUQ#Ok8Ti4Y zfS3B1T!d(r$AU8&8(o(e2n+s^2Sy07Oz9Fmbu1sVM-qtPT<3Mc_0pmjN#K32E;+dd zg6kJ5_k}QV6yw(cT1x-kBb^DVoz+uG-?TwiX@aA_XG!uL;}gAFga=*68^J6x2)X~0 zN*(hD3>Mblif=F#Z9Htx8N{9gk5=0Tn6<5iEWLuqgR>C8UG?^z&5yY&GcUGKpTqh& zQJMTh6Lp`~asc1*QQLf#z@CZfA7<*@GEp?Cy7z6rwRk*JWvH4Jq^3M-z{d{~OahOT0wI0e&&r@I#{%p7$Dsl>I93t1DgO;h3LaD_4@Dot~Z_iDUzqXoo!i zLsw6*{GrkU==su|S~h$o0RQuivTlKKqJjY#%x61)0twi7v%DjUvDa+F!bI&TTs@9*}&E>sa^4NF7~f*DNP0iw@1 z0Y;&B?fh&~$DIe(6Wl|OM3u~RH1RBL*>!{#Fx$F5?l70tu_MEtTR?Ozn_L1^1xKU4 zaz7(<+=45blKs|5rs*5`Un*w_53fCv9^QwT1^`3!%K|O;Jq0i9WMuOFcPKEubA117 z6obT8K#OKFM2-uL%{)zZRJ+{L0MqK$#<9K?bxm3#vmbdU%Uc{e7?4j%EO0cplQMgDDk{c;G2JTla9!>> z?}`xH&_n09>oCoeZeXEqz;?!a_k)61{n&Q9pW6ZCr{YGhqxCiZqLq;aY5r~1nN<>2 zBU#LX9)rP8yxFj3MlV)c%8$RtG)4$KK~QLEf)uh7g-o>(b+Cxc`}Xd%ZF|GBvOjaj z8M12OWr|f6pPmZAFnbza`I?fr?heW2}|66K702$AthA?rr+&n8wHbxyEzIAP9S|MGl+1fH@6A z&rn+o!9Uy)LT#R7!`!cKx5$V3+;H(Wb`{7F48B7gdD4wdfM`0W4zuEOPxY7x7Xa~g z>ek%*;d+PjDO5NzD-Spgw0(EzQq}oanX?_NFB2t7mjMFn@rxy+p0<8hMD;FfY1P~}3_SFs-tQ|9y{x04SZs)$?h z-skoyS{c|GxG`|}msVd8sk3Tp*>SF5=2txb0YHLl_Z8v{b)09RM&-tq6=D)s%JY@I z<*E2a#6`!@veBH30(0`A#Rx@5l0_Kiu({S@b0L@z=taWQZqOQ9FbMX{-6)8n6#nGq z87_sG(Kkj6X@ldP-N#{uz6!Gl`XjyhG5H)B0#Mp1{QdcI2s!#Uqrt~kn24vZ`xs;C zqyWso0MoioWF@5f&60GUs-7OGKeVMH*pFQ+S8DE5m^sRPEP29kv}r8**#$%kVTDMC zXRcM$VOl9 zne5bN?wNh9PPJW0rVfH)%<0h1wy*rOg4K%|t~!2jY{PP_Ro-016c`erfwIkLXr4&H z0ussv78Luyxb(b{so%gnKgme8Reb9C;=S4ve}Z&$dIm^|fpt34Uu1+$ZzJWv)HycR z>cQumc=#RPwq;~QY71P1NYFwKPVqE>k-9%Sy^ErzgJpsEK;x3ONalDS z8~w)w^03${N0Fo7H%1rtP&VXxWro*B{d2O@i9ivUQS3r!HDBCQAM7^Bypv{7*@$k8 z@WZ^^R0mPbzYVAJ@J%TNM=EjwRTukGwbq==2N_476uf4fvX3tnDFl!~A`BsmGAB2Q z^=ae^x6$u_z5y=*20WV1wp&oI|F)SGA1}xpG_U#_rnxZ$C@q2Cz4{X5OYBu-cSeSW zE^?pZs+wr6Wg(klzf}^FO8&1o365{BkmJT$m06?2(KHkkF);+$E$8tc6gVUN_cB4L zs5IQhmg5jasgF_@R%~UYgMV!+1bKrTUFym}xD5((R(vjYkV7n~2z_88#)X$cSM38I zxHz~i>%;d6;2;?>a}c5Sw|s|boEO~OKBSi%paC$FVI4A*$J*qGLz24=uie;<53h)t zi1^-T+De)gh3n$_XVQ+Q_iAX21l}#I! zwM^^dJV)+$zh_cik}A!_C^eAxLogyL%`fiZPc42h_r^~NIAFE1b`P_YHfPHDCfqR& zdo(7&AxxBgd_^R63gVePEv>Ov>VhCu&t2iC*H=g=ku;2cwv_fHla00uSPnyh^{ww8 z%Kj~02J=yq#mii)8-XQ4N=b{hP%-V{BIcB7ry@lA-vzs&#hypjsxdgElAtb`9-`(<4p4m!)y7~*Q9dz2UF z7yw4KX9HIktMC{fKPhiX3p*-1gb^OK7=Gyy*TjC&CP4dnd&3cOcM_I8T9>jayvXbE|Ai%f$Fi=|vkE5ps z!G2o{!e5E5N?cMuX>CGcVO^qLEK}*2xnO#vUTunpA0_b#j?5WvffDKrmct4Lv7`uc zrXa6q`ZD6@vB-?LT5lm2Vq~v|&s3}xhIH=5NfKT>sRwvU6uuAZ!LQYim1;B8dyd_; zCLuWlIxoSR)J^j+4)Tb)^zxV!VCPfl9>6Al2U<`x9d>hyuV8rZB_SOWzRAi6U%B;9 zeq1`!IK1d0dO$;BW)(9b6^zFbEEAP^j+h!F@UF&hA%HXCbYYPsmJaK1RCdAxQ3uRD z1MocfH3*9YyznU|_tLGPR$?K=C`EaB<@NX>K{^#(XG*cMKj!3>j??nr0IFa~D9gjh z)8P~=A94w>sg1Lg0#j)A-k0aB`9qu=-vhxEW~&}uM|WT^b1lqZYR}T(_#aL*DCGUq z3u0bkBPo`ZN!sEW(hX-tZj5+s%WY_cyJe03O(}^<6*b2@4nGg&yGCuI*yFKkxc@I< zQ?~;poiP;kxZg~2yCwlKpZ2P*2B^~Lnwbl7d~9$a4M!kZ3bdYx%1)JGKINk)xZVn7JUe-WoXdR63Qq2<;*>#xSs86>JO0A zCkqG*6yo(<$E>wpESuG0%JKSn>a6*V`7_zg({}<2Rhd)|NM5RRkVfexCUAT&v-4j2 zx1kaa>nWTkVVUl!hci7Iywyuz_Ps-!;QKwMXVR4b74quLr;}40CY)Q9NnhR3O5hY{ zn@zB0O|vzv!Wg5=+XHsEj14x%T-~h`DKm#F@TI{&uHEn_hcU@$akq4#076c zYK4{#6G6#Sf`-AJ4FljbDTYDf%#Fq+rbf=fi$T1pjj6!d^SxC*;Dlb>Gy*$KTnpqc zU*DNa?pK`baD~jV9%tkrGB_{Y_){@Tv}*h zziEmTIi27ay1e(_pY6GHT|6&h=C}?dH17cf5oaIc&ueI&Go2L(JzTd-1T`VleAKSVTt9OeT>-^>EDe^j$~!#P}%_hmw7=%@HFCmBwbM_ zDVHYw4+|Fr4hEkFW7pV=N}{};N+LXhOPoOyaqJNYqbYhnjCP})+3`(?l)>~0nPPzl z?v9z{T8!9P)yG$*r{y~`AjvFUbue$kdt>GbsC&FMm#4rKoUEz>-x)voAP}u+JdFEU zcOu5jI@NkV&Ugi6k0Mth6pWE&2x)WJwh=sEtlgoa;EnuZewsHIftsTnumz-AO)p1k zKu_p3C7yO325*1LK38OX=Bd%3r1XG$-Qz)Ln(Q7XM@(wUe%?c6dDj%z1EcSqpHA&-75CTK2+^Z!jU^_mQ>xJg8rOV6W2<{4P z`5#67TGF|+wW$I9X#Cwt=EG=(0E>q9=_v?ee1H@t+|=V>wNZr8I)-^C*+Wl=D{GNzf=7 z&{xIE7R8tQ`CfyAN!yOg^gXh%d2|W*nrZRL1*^?_4eFqk~cu6O1J_ZQZN}yfbS0347VPD@tf)R%~tk*;q7a&7w*qMsexU zi!so}5DF!>1B@vq=PT5_8LD_n+Sl_PKYJ)NH6?e{xg&7UZ^*tj+0^fm5elJZfVelO zp)(Y8N1Lf*vPM16Wlifmj_1PfCdvq(o=eA@FU2BTpiWhpt82Iv`G0ZdrY0WbkIKmH zZ^!`BSNnhIPV>~{#x8xnAXZ<9 zsL_HHWqyXMDcad$`je2sa?x{`5@*E-m*vT zzr#m{lFNF*6KH^gzNiRe&AY(H_E9OrbH4!u_lHmWNb+zwLYDb)nz0Hf>v{!Js}j9w zE6uM}TLg`RjYwc=o0W-Y!tAqtH{ik2ODxxp0t(oRM*HF~VvBj>ONx%87EoOjiVHnV zG zDfwTjm;MtK@pP7O{vJ-nocWaFmX?e_c3TTgh5RIGCIV9_&9t?XtJSUo0LNY1IxHA; zAC;5+Mx|skiW%0Q5XJVcdK>WOxgjDSZGo=1#HV@5p=t1)47gO2f2Z|EMcOnbrmnOm zzyX^NsXn06iMiyS6Kj0SZoWMaaE?1-X2XmBbEfM1p3b);ou7qGZOEREm)tuVWXdE8 zLkXL(s-p}P7eC;+K@RLxeYNGYM17Tdb=G6O&v47LXM&}|^b;`SMGv2rZn-8AaP7Rs zHx9{Z7x!=^Y9;Xu%Gv)6!lr^_puVZ>o2k3b?m+-S%F&`URl?@l(dQ^9IIQN>;3i?s zsvxmi?2z}RXxJ8<_UYcUMAEf?L4@_Q9Dl{a9lD>zOF%=(T}boI?)+DnlHqD~D|s%_ zgPPN8cajG&QPQOV^|!1)>>3;JTe_slom-h4Z4C-2j_eK3Gc-OUXlWN$DBX^}S((V! zPSB9a2TD7Fs!2rtQ<3O4i-jGuSN(E#gn5&l{C? zLd$%&0ZGkrgSgogFm;1~CNabe46>wBut!FXR@#%1*6-rq5sy zm!iuezl&G}a(zosdr%1eL*;gt3B$!RwQICndN}+de-NFUG)8?q>$q@9fD-hG6sDi2#T#xXo13;oxl4NWKK znCA*!3Ku8ny@X8o5NrW*?1dmcEyAIW&F)=Sm|)}$!iwUx3*ssdfNJ_NnUP{jmnmmj zw22~ZkBr1NxTp}%>rNFkZ*MHpwB5754TW`XyOy;A%)|Z7&NJJD6KQOSphBZ(M(o?) zJRn=bmeNoWZSr2tT5?G^b*!LApir52bhOm;lPjWmpBgy2X+ zfhILCK|0^CtWm<56kdqE9zdT0EV?in!n}2NE(P{z zFServ>>h-*^<_%_3A7&A?5CDFNPO2x2CQeD3suwpS(qsVU>(O4f({4KB+Z9n{S!rj zXuobv%-QQKq<_Uc5=izlm(K=i3-k*XUdGp)J2O)=S%FnbUs$;)w7baQ%mS~Sar+t1 z(tDn=0t}FjKbP^<#krLXr+aigt^YHKQLP#;(5^}?vAgV#UyUQ$CshP-s`1ZEJ-#|q zAt8NNqWrG?=C`^}Em332-bJbbt;Bu1dk$D@tG_ERsVUADe_xg$t*f+;uCmf-lbMvI zja%QV*EJs%H!q{pp1%R#80$ILr?CmafjqaKff$R|)(~cU(%@7Vv?e?a`ejaxy?bpb ziEfRoGgbTzAo0GNLAePxlA}NddaiI)*@PkVxFL1>?EnDgf3=B7WkT7h<@Jy|nol-C zCl<<9HJ&{ml3oUfXyHOPsJT7*>_rC=y@9T;ge#QS6U+mLreO(kXZF;3fbEqFz;`Uw z;+3x?yC8~Lo%B&g+0?+=+*BN$3Zj8g=qm`(lMyb-B+Xm#PT^GvA zN)Ga%`L)Itww{w)j0a1r`hO^13^1H525?$6#Zla9`qL6guWddLaEUGMm4FUa8YQV- zmx;REX|FK`t#2=_ym(m`196QftiNUAb zD8-3=PVjQMqv<0Y56UDc*j2~ZE^kE9}5Nr3@N)vFQ!ZMu{ zgm05>?|sCI{!qJNIL8!kJP7o9YzKb9k|`vPBXn`^~#_bE+pi)V4g#`hSJ{(#d9#ZR8%L=tw+!QvgX^% zz6?(pGl<{(M?@MOngN{`iepqE0xVp|t47_Vw$;PvJ$2f5E&g1Q`zcw!etce|^GK28 zijflQ!T5^P(3P7A_G=tr{~yy3PJ!wEYy&&Tb-o571Ykzol(hlVfb1tXFy2-Rp9NcA z(|emO;=hAXgfm$L-+!sx$C}kH?xzcDZ0F($7gQ#ueJp5c`b@hAa5UA3sZFh>X^s`! z-UUs5bh@vJB>{VVtWxdX#KwEAO>`{E|HR!vREN}`G)+GC3=WU)xl7!suysFt+~w$b zs~n>o-+B|Mypl2FCbt;CRyc*6|n|1uC#L;!og4{02&vDEa9D6-hQM!~=!QcK(J-8A_=xNKOXbcv0tJ;-E7<)*94ns0agL1tXh^NfdZ#|v?8}yVlkJ_f zmb&79r9}#5Ze(+Ga%Ev{3T19&Z(?c+H8wUNFd%PYY6?6&3NK7$ZfA68F(5KHG%*S< zOl59obZ9alGBPqXFbXeBWo~D5Xfq%%3NK7$ZfA68ATl#JIWr(2ARr(LFGgu>bY*fN zFGg%(bY(mU}z|_$KAjho83{V1jf{iu+T96~a3}|g? zZwUZd0yKa+08MpCHFbcrnzE*fIvq2(u)4dG6UgQNw1}%~Xi75zBt(@oBmqDzMu4=Y zy2kIn8bC*|ek(?Rk_OoSn+F{DJ6%yyLsUaoMUsu>_Zk3f01u#xtIcoP|ItPbRtESZ z4V-G}0&@6=06=T)=H|rD!s6-a$!z8B>c$Lmv0`?z|3{yOwT&yl6XaqC0Drmw?ScO^ z#@*2Z+)g)Z;J*s|-V=a=jXBWK75FKf=I`aQj`;{$Jq$S0M1e zXsk_L|H)NQQBeRmnA$kH0Ub>p&B1|grf%-80F!@g;9sBx&A$W!0pjj1F26Yx|Lt=5 z56!=&i-Eu^GqCsdH}(AA9W!-wclG(JH~+nCbC9E}jjNmMzbXO&mNxdl-|Ag|@0pF` zKQ={CC0Qv+bqyv3@ZdQzDT2V=ab$M$a{DLxcRf)F1@I{H@B-M`*#WHJA(eEr5C=Ip zfK|I9{cfLx4Y*HkAQx|z{~c>PN06tZ@BhbaY2#>N`Md8H?oKS4jyBHjKv{|Z3kI8z z{@AR5ZU9yQ&=~;qGPh>=P4>^M{5G@wHiMhs@9P9|0$7^by8``fEP>z;Bwtrk4(cVVWti?_TK*$_&*Waz~547l|U{I zruP5ivvHNO@d8??*tnTn|I@^Ong7Kk>S$#T1Te92GP81Uv;WJZ`TIoKgGU$q__6u@ z^aA_2dH%--o=S5&N1&@KfSd0h7ZBWw|B(&efZw74EMgi;iqhf?|2sGTL`gcDgDh+u ztpMy?+yGM-7gKK}R`4*eb8!KD*}zk60rdK3S^zA}jvzO13c$(T%^zS1azXmNqug8o z7SZ3Pe<5x#*&oCMU=ja=cmXUDe-IylMe;w0hZVpg^#`#7SY-Yn4gibn9|Y!;|AWAM z3V#roPw@`|^C|s7U_RylAYL$^${z&gQ~QI!eCmG?CxAuc4+67m{y|`Ntv?9NuKfpr z*>(Pd_`p8X{~!*q&(y&QdcWxhv+{Ja2w43gSf!e%|Z6y3Hy%-&fgXXhd*N3Si!yeqml!> zW($zL{a+&3SivfQe~N-5fd56x{oC*CZfgHm3V5-We^S75Ep0shs`1+ma{rqH9AfpS zBG_;B`)&vR9Rk*F{bwcMt+MuZvIaW-6#=%{`~|^EZU2JcO|tt7f}8V4F*mpi_P>wY zA3wO24u2pUIN%Qz7r2%q_?Z6b8<^VB-NEellh5ieNo?TWfc}UE*985Q#l{9+sM8-e zn8V2we82tIW^=OrpY^}DniIS_@Qm4jEdDA7?xOP_P2h$(yMw^Dm)T!i!v?ng)m1jI z@IR~O0y|x8y#A1Y*Xe3+>T3O00+{!Y3NElXH)|K*UwaE)gqtVmuLN)n_dgQ~=KJTJ z!qpt)@^>e|+u`vS1b52wuY&h%`{vwHsp!CmzEqZwSu2k7!I1^@lXRQdhZ@XwXV z`sW$?f3H*jV0AYakR4Fl#sd5*`B#XdDfpau>9d0GGd8dt{PXYs4F8LO>d#gDSGJfK z$jg_B6MUGNIKbWG1@8;^OmX}FSE~8HUTprkO2NSvpe%OU1{0QiCg`BbN-bk~7mogfCIFO%4=(AKVd?OZ^_CAj5AMkRI$?>P4wu?Qc*D^ZcN22AKkC1M!57>!urURlY^z$Yq z5x5g_a8CVw=z0v9B^o*>hPjAB*!+I3SdldjDa2iqK+_*_@i@z2cyadc+dq0R^d$B1 zkHwZYN%Ve$rcKf>ScqB}kj}Uuc$AatD8*B5$^ST*En8mY^M(48q@#0=-1f8NSw!Nu z3!k8)a_VmJ$>*y41Fzh8>w)-G1`^a{mt@DsYR8Ihi986a$Is}`k~axGrk*sP{BP0* z{nm?~kMkNgDHFdDpi_O0&LqmoL0*baO(xXK)Oxa#A=H2s52SsHku{cy-P&K^@uwW< zB&13(==N4NU5lkrKI{BsGdr3*VMBv6LNyIyKlW|8sZLTEQ~lfq)CQVLjGrl9mBXSdV@^!P01it0X~c#sK{t`(mxTq`SW-XK3a z%2hOcZXY|f*Ef1zX<(ftZ?%Y`{qSbpE=RR!Q6 zPz!apbkCmJ!onFA|?+%0qC> zF<++PE_%lF90CEjtDgY58%yOr2aX$^qa`W(DU|T(PhmqT#a=xpT|NhUgObjyFC^ue zE#G7lf)C}eaO#u*GxI8J67|p7;&O5)-+Oc|Wb=@y;p?>e*_n`_OrWzGmA8~IM5j>G zePw5*c1W}3UrMvO!}_t2N-K-Ev>Xe7hKRM;VUej)x%?@8)|X9=8wI%E-!N(Dvb9(lU zhB1miY-ZzBc^u_h#9Hf%Lma&yToO}kJ+G>bdqOJyRQQ9}jScc?EIkJT?-%@C z*k&1A_0Zumq@geG$h|*ik3VQ>#33<((S1n@Ws7TYYlbt4W5J`|yjLH0^Js0~nGILw zlbgxOG)i}m<}Kw7G6!+EAfv_}rjQX!7&p}VPPH+ev~*3D$x4p%A=&bSrF2~8?L5OQ zYvxjquoCe73&Q{!Uu&%0(kG0rg^#hr@v0x0{Jf@46w1{eqT%8tPa|8FI<%eVQ$sLF zsLc~L>c#S&DnP#s-ee0;W7Z5;>wZLMsCuanS0IvU;D)6abn$~lPJ+xukKd71ha1Z} zYyN;rBI)iNchf%Qad`2#+&8OFUH(fxLJ~tK#&`v3P(dwO8Rkt{PWOkZ%jYlDTk+F- z1mvKpW+9z&n*$h3fdTx|E$olS1<0|6`wH8+qsPloQY@C&r#Ifur$un$I|a)hwPe%c z2dZ(t&+eh!MusIV-RBGd;K+;LRj}imYbW50v=-QX|JtKQiZ9e!I0Id0gp6lY;Xfbh zfVq}oyp$g*GbKP8YtAdZVFH_Ap<*nZ2OGVFz1IWTTS7{}N-@I}?TY1ObAiX3i1(Bi zmENL*{w1At=n-kBa}cY#^4*isOn3L4Xp_?z`F2JvYdh8&jLDI#jBYh@78PkSL1VVe zK53rp4y=bT!fFYIz<1vG#dfI#jmM`qiJGtEKntf=NRz;t{9sUP3Vf z`1pr*Xo1Sm%Itcl20LDcOQGWN(JM@6*T@)1aMLxm#zGI3w9sKg>cU>)`&P)5X_N<8 z(0UQ&P4&}cmYpsM58oQkzb7!qCQV~snCAqzed^;Xl%aw1L!pXizy1K78U{W2=5VB{ zgeVd^%TiCh6Z4pn2sJN$2WJZU8XY+dQHoV#KB(aDRVHVch|D-~K)s)rA`RRva zeBBde+>7@GOnva^wbt1CyBPQL&q=PwuzV9QugDe$85#%nu6>_J@|W2#AlZDJF&)YX zhwHNU6eCCL+@#j|-BejNuU@@Oj!KpTzNm>O8z2`m5B#h(hb_4x`03e2km&IR+OBv# z-YXY@L(ksNs6k~qLV?inYVHELo$;*L@1|1VFsx!6AiB}h_$yJlm1A1gH9n5pcJ=5J z2E}=eCi2%PyrJ#kWH&y8!YXnVB{^kCh3)qg?t*+z)Zv=~M-%ww@60Q5m9h*)r6&-W zXR>t;pznv5C^|hs=^?6Q5H?EE+^Z3HMa>j=XwhF2COXEcRFdZ^=4GPyL zYdDgDxPzv^CzeI=4;>5w%UH4JT{RLItrW@64zVe3@6_Xon$qyEOov^o^WKNmYH`rEj9=9-g{9dW$tb3#;#WcFAFu#zje7s>DQUAay?~x{S;JoV+7H%G(9q zmK6}%zcpzE-uC#qJxj2)e;=c+ao}luMY36P8XkYsD)UGpoetrVTsvZU z-`x$8zRtW&VVkL5DmmR1lJ;wu7$MCsZ*^*s#B%REK0U_333Ei!HLqq}7k<~$a=z}c zsPj_4FLrm0nagI*@2pwDVZy5X6;HoM}@u?X{qHbF}~;fQF2&L_;~)+#lgor?YP z>yWgY@HZdpF2~x6bVE%M)&%ndtbKK8N@iO8zO?I>Hkcq69CpE>kpX_L%y`?;JVSpB zLja^Yb$5%N9y*dhKW8d(MEuGx?hoXYfu#gy$?6e{lB*ved|U;E|m%g zbJLVh_|DR7O{DMKPIx6oKIGO_)sN$@N2zR>h4m4LT#1&@BVIyTP1;L}R9U@C5lDi3 z>ty&m^c3R&GeFG0Wk(3pL5DIp-_=i63hj)1Znft2@Dr-luLLDH9*5oAqSm{gRD$Ss?oJj)FF-?}4qXtqvuN>H#}e#68KxUVFy33wRsLo%N)BnNK!j z7w;1({9D*~%&z?zD%70c=|(55N|p7X4k{y852LwEF}9~IEISgy5UgmYg^Pd!6vSOu`IIkbwpo2W8EEPb3IJojMVcsN<+K! z1`uzGv+hic=c5<#$;M)ep8F6ON=x(CsQQ$po{u_BMBq~6+sTK`;+}z6G7<4n$}7e( z>aeAMBGvW{LS`UPhJQbdLo}2cP^Y554^oZdJO4n4y1pfQphqi3Yz+#f3#>{4^6dZ0 z+f?#7W(<%EQ4Z305uwT6obZ&D=e)7t7$1AnCKP~5wP7Cv=j_Ek8vClWfqxS8onC_s zHIomD)?{3#fp6|BLaY5Ir&^laIm^VIk^D8+X+bY&)vos3@aG^Y_K`*#pMKcbBPWA`8Jtq^E+Q=_0>SqoYJ zt2hBER1Ii^_w7vIA1xTqJdFx&rKxlzGg0&!zK@Q7a0p9oATcfZMtfQ;Z+v+=-bJM? zs#CkG{a)!q__ph*8jd|YW%v+}ms=6ak+Bk5@OSnsai|~oFfznubWszr1tLzrg7&h|;Bu-hi8-eSTT@fUXV6-*ooIs7dD#;Qcd&AoX_D**)P zEgx29l4IqF)5aelDe0TWx)Q6F%@3qws-ihEk*z$g0_MQSWAfwJ@J;`ncaeO`N!D%^K;?cM^3t5Yd{iM@!ZuXV2`p~6hzH#DrtRB3rV#9e#J zUtvU$x%9o;vpyeHO*rD}Qpiz@a1TTJO4X+q2B@R&Q1;V5psde*`tX%^m=ubSJnE*UCjE$_2Q+OaNflirIc7*Z>zT^iTYFj35vw(=uY z^##?7-82k}s{uL}GS+07b&{Mx9x zzkYRLs@;nT}h-_#s4?@U8#c{i3?@QVZtk2Qb*MF&3T!^5*oz^_{BUaT zu|!6_o<98u!!(@>rpr<`p}m zwMgN!$Xc{Z_UJqo4Yb!XURM_q$&)A}_K${enNPXlX^%8pir=H$kJS(=uSE1{nTb?~ zM$1oR(KMhUmyKtTPPl@%-Fwnbe)y^eMBQQ9#qhBd+8{ModFqnW7iu1RVs=BfLiE54 z)kMu$$g^6y$dHcs8aQ}~&rIqLB#6W$0qMMrC`oM7t3>eDVbjpqsZc-HSjNYXmLiE( z78oHS_(X4O_Ox}dL(;{ePXBsdO?mxw-?ZqafQBSfIG!$tf@OpgDfu3NJ}UwBf(MQc%n-TGM6L%bPx{DiY z6m5%Y`~Gawex2PX^YQhich2cyq6m7F0g5T^>@E4tKe0rY@?E~|kLJu%VyxbS4gYN>L`1SNH3 zEse*SW@^}+6J0*W4AWyc43{pSr<n&J8Zr!bVjXY>|fq{Ia(O|e;8+EhM)xeiCF3wBejUPJf!o&*lo8P&^p;PsXP&O!X<5s5pE_ds zoOZjOB6vX-{NBe$*RLS&<}>>&Dmg;lH*InMn|8%8G4D_h|4Y%!M|T5W_0fIF!rc#n zDktXwmY98S_P=K>rRX(Oyus`V7$)vEMaf@#+iI&V&C88UXb-(6u9$OTJN(AN>~)T* zPYD9VDpY&9Z4!n-+-AVI;BLLnIf3**!gW+Iyc zMIxDv^bf|jE+9lD#?Kb)Oa3;t{>reExwl3V3UYEnI(EBa$UI#8BBxNsUvuxmp_H73 z*_W)I^qlXsH1?MR1BrI>8V6k0zsG35ZyggpdIt}2!NCl)x-19S|Fc~TF)@bXD^c%@RM(}K@gV0Kd_YxJ9K z>p}|6^oN(g=52Z9Q7%5!Ppq8F7f_x4yImtX5WY1>YZzm+t%t^JyVA{C!Mv!CkB_>Q zb}VXl+59#byN+lYN>>o%8ExUlRe=u7%{tSfwvKJW{I&sMb+^w(WBLZ~sxQ%i{D>L7 za_|6OsjV^h)U>kJIlU6o3A9s_#adu-uvt=5!KB}moRLJ`;! zmYehN9rpXMIJyL~(~pfZCMQ_5XvB`PcOtaw1ggtDYfU@uK_=_%@0xaD4@aC;`+f$b zkm*ntqb``f-tSoEbatz@2oi)Vj8wODKI^Y&81il!!e&EX9a@wwfu=X~FZd(jvl(?Y zeslshO&E7Sq5dr6#54)Tk?7wI{g{U1eyxP=@H(zieXHRBe&x@~phLq=;R29}iq?GE znstfaZ}T|UCo|*Dx#mS*yc~sdO%qXgOSV{xngE!}==*B^ZWbvvYmDmRf>EL7hvo*u zi=G9(%(rcCFFWoUswlRGNLBRJ@h@Av*|=)NEN2V(yKhh?lFDVynSAA|CV~&>ryi!Z z8L%uS@8h=TsK4L*e?N)KRhG7Ax*nZ*M=BlY~h;!0+-ZSwI@EZiqp9drI{C_xV!>c){4&; z{Z6Fk1^Q!%j~R6&qUcHJ6kep>+w`|_>5rIIgFnzX9ENB0+aG98ZNt51p!1>OqVx@%nGIG zScRJL^K%gCc*cPb@Mhiqr%cy3kbp>$`WPT*iS6`Rb*$?KD?tZ2`>l+sKjz~78!p!E zPUtpe!e2>-{vE~|a?;S6eg|c$m<08G)pc^$nA%z)`xRCxuL{%rbGVPatQKZihqb!v z=BkEmf|1c}hoUKBq(1#K2vN#JPrOOEf|;qXtIjjTohON%LhWW~dx_Cb=Z-1cMI;7$ zdYaPFy!*1amO{)Q>0>|wC47$ufkDNed3iQ$Guf@h=&u6ZqnS(**h^?jH}$u9KR0dW zX5D^ue=FC346;fwd@`lo5I_4>p7Aur`Ys{utnsSZ!!?#4E$PeTdWD22h8~)Zwo~@~ zBIV38HnO3B*Q8SpOBS`yXo#$nu_J=Fa06$6_C#gw0 zi66zFm6*usT;&%4v59rg`i5D+^**fgNFBGp>H30^()#6h1&$8;yCm}Qk861wy|U{s zN4oeG*)L*5JhS^-)`HDbKyCMqSa`gX&-2HDB^d-v>|a@wR=$7DJgo|jcL`PayuUis zj%%=nl}m%6?in})dwhF3WlliVDcoBsX*CbM<7Y{^=Sd|?VfKWFW!9`ode5~zC>;O( zJwbb!N%lP6uF^b7Z6c~_vjzW^oHTuWT%z?GDD;W+dP1aF(^Pi*@7R(brKWi58&5E0 zIM*|0jWE{QzA_jCjJ;sa(y~lJu%R6iq`x#IXq6%{_kz5{pzMoi8h$R;8{h|%JcV64 zG%0|4>p75HFMDOD>*FA^$FDV?y(2JRyHW{gB+@#|7k-e%vSQ zq3_Ucr1@y|vi=%bTABVcNAx0YIe3U8Ya8ZE9xy$^sZ>_@%AmL%SKTJxBkEl72U~=D zu8qQ19B932|Ffj`-wWd~Dx|)|9R*d{qn?)PX#;Gg*Sx7mZ}`L0`;ru6!e2|Iajjs3B^o0} zLSLs{9@K1-t?CO`=Oj@j^*WXmQKf^=2Db${^yptXRQX|VGd!YWhCA#;AnD$gs@&OO zXa@P=YmVC)`m#sW$WaAveZW1I7{;(|-21voTnD7xNJHeWj!zhi#D1tP&^S8J z8(o?yx^6g_8r*T;TBA@pQj=W+0?$=iO;U@zaOn^QX6V>b8Mghs_No0({7SmHvcg5j zwhAMQ%=|mgZVpEjhn4-0IAV#TqwfTl2Ls;Mxk2x}nr?h`Y$18)f*uW1_Mp^y)rb5V zw4^7oksTOYUX{}cFP|Mg4YYX_W=Nx{Z$4Jmgp|O+XQg4U5Y}@r&`C*x3%4xs9c)?7 zI%EGOO|V`q1lvh1hR%wOBGek5tgk<0wir0-HMJk6;S+lL7AuyIoD}vbStBE)qT&KL zBVH4=hD$;}@_8|4Rk_-5>5jOOwY`>>Ut$EZVJJvY`|)vd>_T^XbyEVr0t+3-Bt147 z-;~QuJYug-|}WZeexgX1C0R$M{T5vWPy_e8UwZJ_+6QbpE^fJ3~P-NYSAH9C3>wfEzxFho2)Br*7v+;QLrE6t3S?f7G zNkPWWbAEP~@rh|tH9*{brO`D%hL92i&gN^s;&2eRn>E0!V0Uk}6hPg&h%0rjwvvWG z;}`2h9NdTa9kxpturCH|`RN2-t8g1`c2Iq+ytsb4bRC3t9j2V7K zqKyk-ZUB3(W60D$gZi$mSbY{=pE~WP_I($@;tYGnOwF?;S;W%mv|zQ1r!(uz8Bw-k z7H{QSD?SOQZFKPx4Y$j&GACS#>v218L_R$*aq-?7X2G{EE8N-_8pfnXZ`@d8d`x*tzI0mZ-buRBple7d{ zain7=X|rPMx)WoIk6j5ZA$D}<*T|`D#-aK0{94g_f=G3y(vw~vG81@H<1<`X6Bfhq z9i)n{X~Lw9?^oeZ4TG`r$m=al3aT{1#Xi8(_kYwRX}QI7_vlQGK{|^4LAv01PU*X9 z(sBX(#aO!675Zs1`O>MQj7)DLWyXk2#ocQVbGNVzsb}y*5qv+;0{-m5Oev1agR5K- z^jcJlGtM)#SgXZRztuxfcD4CV7`31}BgkdY@0}ba42xsj28351%6+jmV{_T3-8Q<1 zrU*^rxUb1RS?Fe8%t|w|QXOJ(Z=a7xizmOe8(AziXj(A@9Di3(evIm z!lIED_I~=uZH;B*08Gg>Nd2HTSHvXCrn0H9$qr|t}g}eM1R8fn}*?FvF)7Mb} zy4lSGQWLEP*B_-N&7{ra*$P_S5jjpS=$dRd2dtDf!gJL-Q@7~ItkgrqA?Dm^_-FuP3Kq|ZN8oWp?H0}9!QzCFMg@lEvMX~CZMsv!FI;@`@gYXp zv_P8#<2#Qldq=2NN}h{LkbS>0L421_0^<)S-7z-5{z<0Iea6r{-pa{eD{sd1k}f)s z@u)c$N~F&eBd(el>I#)u6G~N!Z^?D+f*(?G??uU8)|DVaxp>B#pfZplYLFZ~w+*2} zsjk#j^{L(_rm^BjPxl`f!vq7g$7PFky2okA4>C!N)IKRwG3z~5tuVY*?x~k1P(Y51 z7>;;%--%@{cygCLirFR~i1jKJ-}27H1-IJ1N_!TfE575KqrT|v0&RPaAmfF@VT`B8 zfe1F@?6*XK`SG1x1ayzF*k!qk+!Ykd0S)wU6i%+ngM6uzJ@;(xzUc&4u>LFV9MsNk z0{$fvO#PQQRQjgG==8QHw@>UOdCwOv6m_t_|S3F zKsSL7y6=NHDiJ4`&rL*%t6R`Zr2D?{oqgQ=Vd7l4trTSWZYUtBf!XPsX78r1ec~zY zg{Nl4cc1XKi?8!k%U9F>wh4hRniehx8(nv?(|Qx;tkl}q9a}3D1+1}2(8+rmnID9r z1f@hZF6*&JuL*^9R!sFah~TFlc~S(oL>I(v;Ua@TGc}(-C%0H7*pYYf*r(dDa+h;YSnvB@xigK=?uaf?@114rQU7MVnYTsYNu-0w^=Jpi z1qN%+Y+Y`F^1jzjv8EIq1`$9yBnNq>|JBg6>C&g9lim=3WQjhxLCKu@sp=Cv>)e27QLQ9u428tDI~Bj<=1Jz0NJa zZh5kx6jVz(+!EK0Y)mOw;CK9UxpDcYS!i69xO^T}lp(RjPhL~tSY&Sn^IPAZ!gng` zZNY~%UApXyp-=e!0%2724KRRg%}Pj@K}KK7^FE=dAdgbp(xKui+ID z1CZ@S5i4D}^38kI2D2ifj$ZXP)hij&TY}h^aGWM-Oum{g00ncIC76nq zrPOSYy!B!B5OR=FD5pM#n7>jaoDr>8tXxjt5r)f9Jk6u1oc0HBn68#VR@1FgdKUDF zYZBLgE=LKfM5RgKMD6eLz%M>rtJJ22@a@^|msA174isg&$EY<6=cRC1( zF-j<8j{O1AQz_`{`(J@S!-n7?3}1zVd!RFo(5T~bl6zm%K)oL<&O7b{b+u6E5cD3< zf)|3d7Wh#rH6KvyaY*DUPAo>@V-#|YAeHoIP5pgoMrE0N9Z7y=t^0KU`)lxF zXDZ1Fs`{b15_@Z!=@=cmmN*BJyxhUGP1vCRH+XPW(`j`3GmjfqSD10j<@B4VWnpgK zqXk#u2NteOKNGw~=4O45L}2PY#)5TyTb<}f@@6#BdmFx)VqL0Y2q*c@QnDo=?LWA= zn9{B-c}X)Pf3Y57B5{w%N0V`4M-@9%p+s8Z@9}PCL`iAUG5G1VU8v?u0<_BCJD7ZS z11%reEqW;R2Bo@(*oixyO`9m{$?O@Nbxv(}=GKIKx}9dMUc%?@cKt?4_{Q<;F!wh8 zr`9u!JnoUw$EDqfRvXS4iZfGxF^X@4wE`{UUo&)cxFM%kUPjEnL>4~@vPrPpyD~3v z>T9C@^6J_@UxvJy`wVr^XVZ0Wp-?*~8%%!{HT=oaxCSzMHKeGyrE;9u;=}-={9dEq+i=Z&xQ9k-XqYEKvyk7wn9ZhnVE+?v=}WJUBcM5b0L}ML)ORIFG@jzzS%g~ zIr42-xKim}V)g5z5rq?HU#j&i1*f&$p>iJWZ4Fi%TJG|>dD2HfdT)MUu)iw*3Uhsg zYP;r}3}Uu9$DdlLzD&NyA%Xa@#rH)8)u3d^U%TyX#(SF1va!2qMVI^lEG(`8%x2_D zOh8{#^dd}n2P#Ril5avq*+;hRXE_1jrn2O8S)AXizv^)Z#QHU0xQ2YFwPZEtm|$HR zLZK;q-89gAuuU(tICPx91-3e$Gt#FT=dkZ(T3?d+ohGaTqh%3_8W9{K7nJ_uXYz`+ zH>uW9F3Mj~_$j?DN!p`#tnTN%WgC{p`u!!#C(y4SO-VQ?*E6{N9}DX2YFi<=osI06 z8M|oMA?*r(u1lU>x$6KLJ+PsiE{Y7*AK`lT49^H}qtsf_=A$IgKePu*&%o`sFJYls zdV6?fg}6=8Z(gbPJ*3-kpkZpNTnXi!?Ow4vE^yTgKu%pPOf?kx##eoP-=)(uB#oz~ zhl1(@V!VMG;&E% zd4$pNjCJKE45=&zds3dkZ(JASF`}Nl?MHQ_1 z;IiqRTZeTT+IZQ^+W54lN@i0H$G|5CLLVn|ei)Len<5Ltx~y8PI>wQTra-%^eHMt2 zPirC=>?Kyi$!x>&xWokNM#XTBgipQ7T6y9>@*P-Cdf&KYXZt~?(+{Ecq75Kq=;uSo zW75VZ=*F?}c>c(1Sr&W;%GtGA)WXU9USA2T3Ap}ylDozFM zFBKas!*5zqt+?CkbD`emFYYum4Dxq+d_e}@#q3n=3B1}%22V5N$R6~Kk!E@=Y{7h? zJ2*MOW+vP#Ydwjy(uX2FTEZ6HQNtiGrF(2uR!3*;ua_D)l{;02YrcGv zb5N_6>G(GIChD=#-^NB^;{@^hh_oS80F-7AQSb&fu0*q7LGf#=eM9kD!jU3|NGixZ z$XLdDnX}bxv13g}%=uPbs7+>uY)m+h@U8JCL-ftG_MOs+lOTqxw={NWk5x1M&{kt3 zTe}Po(h;xf8&2_&+7Bh(B^mO$NF~)4*)ftGR1#^Q15Mn1XuSChgN>quV^i|s+JQa7 z`-E>>;awsTrJ=@!&YB>K+aRopc~I=qUi}f9M}f5Y5l#qpvz&I~Sbu0mQ`0H2048!G zRCSBQ4iH_&`vtCOwpRtCo;_TN&gJW8vFnt-|Nu$=_ zB`P@1L6|K+k>1B91(2uzgxjKGlV=S7!B%5(7A~^RMMq>cL0Stt&Gb|C(MTopUBNrG z%?=cY0I7zoVQMJGNP{k3=);btmcgqXp)nx=2<5y)1v>cfgs~jYJ$jE2;XY1x?|#04 z16AD5_7Wbq&gve>B-fmF9v9_Ok+m+c%e16h9xS!P&m2b$`)=NGZy7XiVAOMJ`bIZD zbGxLohsW+%ISClRZWv2K%$K!TCwEjz8N5m+dMPn<=b(M~!s_EVnbh%sROVkqZ zVHdSVd%2AOe@So2n3^~Fx^Ka9Zw)te;lPxK=)u2P|DGc2-Me$$d=_82ALB0w$4>0f zfwJhaI^M`eSjB=kOmNz@D1Oo~*_OnxC{PMpmr!u)AQ()-3ddEG#cSJ~_oArbhytk* zb!FXLBwX-*9F&?h9kMyQV{)|T;?h?}{fertW)_uQgybF!A+L#@fDa=yMiq6-_rrD_ z8kW4=((Sqt-q@cPNx-N7U5Oiod(rU&DeClATVP>A(hjiT;UZ78<{aas0l$x3g4B%xx1Xsz2_v6n?!$L`SET=!(VwURjA1lX>Vfs$W(1 zU8#CbE`P+c{!jxeaF<+E0_j_ZV2N=O!|*jFr~z;5OqZK8#uA@nG*+L4z}l3Bs8z>-F!P$nhUuwAj0lYWVu>zoJKC!Rbe^$P zZ_h=Xj;lc#fq?g1_Qj^9nT$A4RV6b~jkqu|^jeJ8nVG2cSM75z#L zHfYg7u}=<`J`BAic$6JJ)K~BTrNWR_p>`A4A(0~|@E49-w4+BKoor}7p}of+c6*s0 zvDPTGbl8RCM!;_yzVURQSSWyl#;pL9v(_AK6yD-0=KRd>-f79e9U=(<@)Rs@|XCCgFzlo3Mx3;d90JXhFOqrr}2+5(1bWai010!;q zD%bs$nQHn*#)NdMl(256zZNO}^ntQLv*~_Tmu27s4pwrE{X5fzYrdj<@k;CfKW@R~ zhPDKrA{_3Zijzc2UDFJqsIc|T){l>JFp?|vZ_~f(D4|tyOAf-|SC^#|TsF=fGIK_6 zQ?DN~-GwzXArTD<<4I{M(yvB@u9&Q_SBcC_ouFto-qbiGi-6X5gGeBU!juR_tA!!a zFw#VbR_{4^FBd?cLzv23k4T9|3pw#{Sq#q2Wars0jswfX$0xJ%ub^4q(ozouT$c2M!lT$##a%T^;tFj~yP-d{# zZbV}@RBASMCS!|RZTXUkOmXjslv|{d1c~=oo*JmV1Z(#Em`>T#(~$ZMCZiJ-5(lna+)tUJSFFVgiq0(s z;HHuEYFkJV28#E+mRWZ+h=<3eQ{AxL!=5Y!6#@q@(Gn6NQY1%PX_ckvUpNC8dQ{Yu z>2k^E^~@$TPHyD$;WQWuvp9-(>~UC0pS$YD630GI=N%qC-dcRAFisLx_lhy8!kQ~e zbY-o=hcx#KVE2NpcCcV4iQ{c)}r!Y{l|Ri6nuqDi$l7GM3d;HB4oy%=?g$)m>NLQJ&L(TFL^It?@QQXyiLtTNo-(xU3RUSsO zJ?Qh@WewlU35X6M2xIE#0?e!Wl(-nvm0L?Wn%s0GF7Z=Mrbh)AQDq^X6{g%tUp*7|lEJ9psq=I@yXMTUUV9&w4T(*t-vPN)h%Eiav-b9xZ(HlrC zwT9o4Hc8lOQOQ4wDQwLq;zZcJLftLe*vht>3}>hfjNSM}oq>b2X|{{Xc!|pLo^O(x z<4ZXXjPoAPd8z;$6*eP>Ve!01rB(;*QDMP8inboL(nWT6G)LF8N_&cZFT@+kUFk;& zGPAvrbc&-zNSs=7)2R!!r`>FP05+{R!jX`k4p|r6#{_*Y3q%4B7oLTkc9co6f_s^S z00S?^P>cp)f^{CZTb~&LyW3a2Hk5XevB83sja>_~MHC`|5HZ%oZIJ5FErWVYxU;R< zHBB*8i+aTjDd3X&K`O0`#=AMPjoHelQ_)pa7DhbGYLJVYs9>8X7MTKw7q|PMj^M#i zvnGyLl+hqr*P8a_<&Ehr1+2Wew7<;WY~y%3rKFS1vW9ieI&hyiz+N~%*_Tdmy>3?@ zk5rXvx4-q=_a^2_{YzPT25=W`hl0wM+g38t??GhTU05=ozZ;L>yhPM_eh;C|-@5A( zIjudYv25T-h+X+s!w}^#laZ25l++akSX8MkjP(811Ag{QwIQr7m0(O;d%xCt_0qay zHu!=u@G7$jY5kF>U+By=YW8CTmXd=>D2;#2H1{j=+Ag-^+#JbWx9bl~FU^jyG`3YG zRO}5`Z;Kzq^gG*&1arr3i>5-68#^)d=`dgYl@Q9DcUX33zkQc6?COlR-R&LCguGSn zU{G;L@5(Mg5hgX7g|97spN5n=*KA;lSMHR%>!Z#-zl@SO=sK9j(g@RtSH&9R?hEs+ zZ|^nsmdZyXN4_$`!Gmf9bFM>~`8X^K`outqdyr&nkU@VtO|RTJ8kzee8!92b0)i}7 zdOW$dQTRi8>1jt^?@)#jrDKtmnnemrPS*a@(1mLPIo*TuJ8o1`e`LRX!qckrtO$iZ zT*@vo)L&b(yoswtB9#!6QA>Q|KL@r!8ICk{9Ur|duKNj@pN;YQep#m5zo}^BX|(6f zwMqz5eq8UP-GnLZi)oQmmd0=WChSHX-E7TT<+3~ydV{XSt@1Iv)R$Dy{Nz_&l%aX3 z=8|I(792^oS(+l0|4d)t#r->|(9tlV99GC)cAn$%NxLMG`~GPSGmrao6OR)0Ow=bNVrkSyy>R37EC`D(@oyeC`q)_QWv{(sZF?sz zrOZPH))0Bpa%`X+>mBhG`JK0STNo#GW$iha& z#llTdb!@4p-y1BtjX=01LmfVz8QdNyIhu0;KhGP?Z#L=mh!Qbfxv<-!MB?5Px;iz$ zf2Ug4<;t(4SLuvtnwu|2AZ&%Fndg$DSo6%YZfBh{57j?45Rf0Aix>F zBtR_8QSkb1mbXDOUq~mi{WvdA<0pr)=2R-x(872HM3=0o>)?kXqf3>F11MWis`I8o z0nbcg^r1ZQR3JTa1AIbTPXs#id#X>^Dzu>fG}yJ{xd-WcL_^IH(rVvHZoSR^z`MqG9jbknEftE@GMj?KZE<`avf5l8m|VbjAi`qB))j4xm537I~Kuh z?IXvBdtG*Euo}A{g)GTfwSM7@^uQ2;^=khf^}C-nm2FXZgRQ%Zj_C{Z$YPLU*(b%;RjU$v4uEmXh44 zcPS39)BlEh4V{xeCMLtuTPwo0Qf&r&vTKumE?hA}0+3;TOX@@|)x-bHK3{*;BnH0KFNN%=*{XQeDrpGf@ey#OhtPo>SH`Gt~#Zie< zIte8B!N?O3gincZ#uGo!?RIx4wcm1U`g*K`s?AtWA>3cm-3uY_x4*y#J3FU4)pwca z=X`RI{d%*);$OlFIQ#&QmxS>V4|mvuOX6J6(2;H&hnr1364|7q^m`y?k%xe4g8d2qHJ02z&4~G4Y=~mwz;tw zm(ACW=aiX>iy?9e9D42hF3xBz36xU1^%x_9YRPEWy%$zjnuB5vmZ!L#t0?vk8v%;a zC6us!*gEebz60`w?_`PkOykn<06=qt0(bVRf`(5eJ1S*D>q-;-Fca}v9rkgHHuD+i!3zMNXO43erf%E4>t95D7r*s zXYVuf#a1Of3X|iWRHs)YT@`@ghYB~j+q;+JW6_JT&GrDbsHZ(9*}o6bn+-t)qJ zQfyr>`hNjl8=>U&YPmi-V*W@Y=SB?XHSvY-iP?7<^}EBzJa?J*hN$-V_o%O_H}VsA ztzQvIk>>thRd@<9$#yuvQ}akZYAQyV7}JlTyz4ufPzKLuRti|^ zByF%k1NsKH244Cyh1n-%95-uOvp-~q8PV^*3kG?~LBlPC9ZFT+&Lvn$ZfaJ%`qV3i zCp|FEfW#!rD2%&tRp?N~m{YhDfiUrlgV?SNTkmg?R+k`uu2uk?cT)C}fu}7G-BUES zKaC+lB&Tnan`AT^;c25Zb8RHg?2Gv4@E~vYJ7Z{bevuv1gT5(3G7OJY1WKl%KLw*+ zG{_`Mi5x*=Z-#X*bUUyc%tb?$#@xwHUFnzty^u! zWDp$G%ftLCPY@8y9pphGppyty+?sF!Mj$X7vrlGXM6IkYUVg@CSI1FpncW?+aG?%o z`s-iM0C~;2r0Pi>@D|?g#HxkScoO+AF6hA5Y)k@CGFqTSIJ^|peA85^fTcO67p%8u zq$}Nm?TsX@*Z++dK1WX+t(^oiosXmZn=S_{ADQX_NB>pDWlzv!)6a%O%q4_{2OF83 z7}h!^g0-K}87hF{gRgbQ`rDgK>bNFJ{S02cjwuXEvdlRL-~z)QA)BLdTAa%K^-@?< zw_$OI#SY-m*OVU!K@lKmWnqvlJwrtG17Y%svw-9tYM5;Dt7R@fXHlm$^C~(SwtfPv}S9tA*ejxxW1;YP_9;<>!g1jGmumy_CmQVt$R6p5U6bgs)HiY8IjYm_y((^(@YojF zTiOfRp2U+b9I%)}fsCs$*3qrCRqG&kQy)W|%7blHVQ)s`+1wnH9 zt70%A`nh-8@Dbb$9gGCd*Iuf8c+n`YIIT1#H&F3I+2FN8UTU_$TrKgg2#thr zAi~95Z=9l)utgWsg}$3)i_=q!UeX9RO1>A8ljGve%}|JTTZ)g4JRqZO{22;qoz*3= zX?pr00Ng1SWhF4?wF$UHw?0^AGelkJ7atwEq1owO+BI@)5|^19T>>U5-x^6uKY_{B zwXQ<+Pp}b!Qld3Sm9a3g$Fwa<;e5wnK@J)VRbRsljKhhvv9m{IfF>i8w(s7OUDOHp zvdYg7@{V>4I8olx3{=>~eCm=49qna~Df~1+52ztUe8mS2amI!SEiAMX$p0+t8X2pjA_%$AM z2H2k1F$~RMMxNsb#4APO6*u;bpanNUYdZYY`JL2df%JB1&f98{qNMmKoqP9c;bdBk(%y1h@d zeGNKcYiguWfD=1WUNnFi8$A#9?FE%Xch|!=_`1kXX!bI3d7tGsqG_p0Fk5}>1 zEKf&=(9cB=@jZij&hMFJs66z>?&9dYx^yfw$i(%TdO5~NYCzmU^5r!ek7ICIAIfk&iznpd=Rf@GJ7QfBQ;k($j}YMoFk)9U@lvs~Y=f!s_F|TsHCi*h`R^71=`XKGLsWL# zRp6tNZl!0Jk<@fRlzVx9!Ni+AR)tn4jJ16rNcum38*8t(-wG9RQ42a}KE)i%S^$(+ zxl21+B>vVErs!^74%;f&P7blofNv%t8%`y7G{kEBo!06x?bEr67b1F5v2Q{_Hxkya z>+Zg*l5WqAr^2{Q=b?4r3pF1WD=c(yOor7;iC{CJjbu<5enC)pa`-~KT zskKNi=eD-(ciRo9Ojj6vVl_mayu$)sOzrPO9_0@XH3CnMv%zsjmj^!V#zChs^C_z>efIAwZ zl@zM7keki^#!Zr;!dxekG?2#ViP>+Vp&e{j8@0UH8|CVI2>tcv00P}%42;1Fky=4YwDx*fgs9q0+aEKr(30s~n2H6*pzI+!T=A>66lMzpSV zTU;J@_z*TDB+@N$a7+4v$FP9B0>oQ#Gzg$0t{4a>kWkei$oxP?S3?gR>{E24rZCXfniSpFHx5)pOPv`mEeP7{@Wh+tPk#~|L?}jM|yVFH8L^E5a2B|&SDMF znH_Mi{v5fQmSCMehOED*%PeOLalH-Jj5>u_$>D%jI5ZDHnxq|u#hJ25rM?dz^Q!_i zQH=+%2V+n#GR78dsxls?zU2LNe4d1i#<@qM1WYC&fMQ_ta}m(z;Bh0jn4na%+NRP` z8Hj$!=dTv0PlUyPZ3KdJX#gi)th%4f3%x20Mch|22>_7_ud$ z9PGR%pEVAspS9y}!gYmtLtwN5q<-tO`Sk1-p#$%H}Ro}ux3&~TPN7Y2B zkEnCeVA`hMO z%SmwVG7DhOEVVu2qH(1s;*m7H2ymyTZZa=Zp}d1Xc9^~gjXJ41B_;453tBu@a!T`c z8O@($$jZ{aAH8nZQ+w*kIoE=g2YhYd80Vh8JA!Sq-t$tmr1E9DX|1}ufQY=PEd2Jp zRX^P&d$*_z4qZg`yCTQ)ukha^YutA+nZQ#N_)Z5SiPiRn{npgI=Z`_C6Y5I!T*fF2 zFk^zDfTt)z+n-exXPNHzD%PvIG=_vSEBSaLI@8#)V>gyiGEi-TIUPZ zO6MY(B){}>>q>U|7?}1wyr81)mHZLrCBX*UvWf|IW-vVlZms)tMM@N#5sM5s$&}l~ zhGufe#KbWGxZWC(gImlPOP^VNt|#3OY0}^D@xwfNV`KWO5l()ZSqR}KDOsvy z2pUr}p7?|&PBsRQbI65_T?JGe!Is6{-5~@51ew9z-5myZ3ozK=4#C|mKydfq1lQp1 z?g%b9T?2epCJCb=7qBoT++!y6zpA-wORWmsNh~AwD4pW1Obhf;U5t z1UQ=S><%)U+Jq=lT93J5_*@U_7?aGAKD1CDE&bYV4fV_QxR$HGG!ph@&YxuW%6pqe zlslxAo}->c9%ViQrSgFvY1r~&pjF$H7VfJG?<=a<-?us_K2n z*2zt)f6pnNh-f2t9fSU++|hKN)!@R93Px3n?s+#c&CU9(5Uh*?un?Oeq>nf&i@`2T zGF)b1Ko8WIJD#qKzem*BzHxa}WPNZwKIUp4K&NlCTV)m8t^lUKQCTHwdQQg~ji9Q$hA>wyF*Ahcj6gDQ`~AS# z?(9NLcca+PSeJBsq4E)0yj|s6lV3)FD5|HX7wv%89XC`!5r4kedx)FDhD<#o*R9w! z193oJRKuq6Cb`o*>Nt=H=krS!yr)^mk%MW6Zw7>>eYyZRS1xVlE6H#{1GaJLRk3tc ziN8Tmrk~UPv*Fvh;O*c`PGfXCrH}9D_Z@-Eh4=YoW~y(QzS12#B8IMqG%U--r0DfF z3oh8GxU)%|>Ca#dzyMEHvzMj%paqVUlTkwX{n}vSrpWM;%(qzLs(!v;L34|ietVpd z@WHxoeGZ-s&w0EN2eJtjSOX$52dZcqXcBjWgr2aK(@W)M8C0ngO6KMPeR~56%ltQ4 zk?&h&lg3j-lY{-Jh$qD3%edX){P0}R*hSSb^b8PJyj7%ksl(9Etf=V-;Dl zZRWNY=4&(}_3FcKqr@g7m<6EahH7H2>OZ_M0GF&SA7d=CHMpokTDrPT2Y8HZR(mN|Kw$>gqyCEyU7DCgo)xf zO`gycTkESzJpfszIln_yci31mT%z>UTUpeqWPNZF`w_TEj(p$Uzqk!atM^ygt~?z)p_&5T$q#PU z`r=1`r+>_29XsCa4=7j3SGH=>ai%TPrxREy&C+_+`>oy)-cYn~e;|KFoo?qN?!eO- zbfc0SU{S`1qbA9xNze^0uloz z8b2D9o}f!o#iHwfGNQxxVlF7^1vyQ}??s$^q`IV+L)MPwDN3=+bWmVO+ojWz8G0iQ zrzy}yz5U%(7u;#}(PT&uSbWP+Yd7#~PpVV^K8zaj=TSvbM%67XknL(6LS+`=b@%Uyf%fdOlV zyUB{}`Yv@jBQIR>O=@&2jrPVhW^x0rJ@iM4KOBFSU1Yz{v%1ax+4Xwolfo^8L)Ml~ zb5!KlkYsx-)07zo^(1Cnun_$~C8eJ*BC;ikNe07uRUz&fXGBw_@#@zGvU+JzQ{=go zi#BJ#tVRaWumYua>(B8Yn9F%kV`2=2yM1EA2MJ=j=hFO;eCiAD@k~)$j&2r$;w<${ zRkSH&sev{cRndlfhBGe*EQ2h_gG9G+w zfQb^7T;A(ZEq!5<#7t4#Sao=+QX1?Qnygov7UxTJJX)-=WQn$myv*LY0;v2a%uQJY5#LRZhwkr zG9Bn3{0d3B7M?f`*g}F!@ry=Bc4$e51Gtp%5_W`cF>%hQ=EP3Ta3n(iVuAxa!Z>r> z7}FDkRr)3$O$wsP!}8UOcb!uz8yW2!0xz~aFe~fdN}<3oo=40%re9#Jp5jKP@V8f0 z0|~3Bpqf|3r*sv<)+w03X0*!eC8^p|)}Tx#3&*ElxGZ(OvJU2x^RtCHzNx*R$K~bA z++(Y8wzF$=Y;e{iNX&HbrChfVIJVpB1QrghyUS4#D99WP{y_{IWE?(?X$Ux7-EGX^ z_Kh=b{Un&{Be*xpR8782VB~g1QZNt{@bZE7TQdw8vr^|9_77*v@MFDwlxn!S*Wynu z71%#BvD(Y%C$qcPP@OaphH)Rj2iVWLnj9R2W}>DNcIW8vE#?vM$D2^1lvXhq^ z0?fYB>F?1J6?EN2%D(Lzqrs_*wrA6zRsJ2!Oh<&sKL+@X@Aq8Je|k-_veF9q%l#Y) zF0SwUeY{W1=ym}LB=>#=W_`W3t_*6&ark4q!;3{vnI&j$1*{l1F}E9G@^js+CgvVq zd1nGQcb|X5vNM)9OIwbA`@k?3BI1s(Yt{q@)n=-rT^JOrM{(3Z06H*O+%9^rC0v}j zZkLLDGZqdakT!NpV%}3hV>QDnwU-K<(;F9sP!qBlH6`T6eN4F=LYl6le*a(_xw<4g zXdv1qoo`SDWUweFyO>Ko9hV;dG}kHpOa2%CMx$e6T9wa9#3|SKJ0Tr~A^d5X4Ef1Q zDhO|Y;X%*z70!4BREr=Vcck#n%};VNx_FwjG%VIxY65(yZCwxT?Rpnx5V#l1H`yw+pN~_2g0t+p%=SV_&^H3vQD!L0Y6NAEnlKixS>bWvG4ZpwR z`0SH(YzmDzW2A8S7qA>7%R8`~;vV0Tmthyg-Ho5HY#8{FuH#bzg@XYYy_~Ww8k~bdj2Ga1Gh>*2f zro>ZjRKB!*_^c^W@2-+2M5t=A4xf3}8h6`0d$wxqFWDSTp>ml|-cmkJ>5&{QEyak! z?*?l%^N3y@o(Z?I78h%1jV-m=M(>Gm;FxpzX_(JQF9iyW8zr6j0JSC+B(HJBQog3* z1*>()f#(zlDI<5H(uc`=p)ixdI)sJSr)G}(?*3%R11ofp75Pd0uo>oEN_UKM%dU!-*sE88v zV>T9pGP(K!PBf8j1#1B^r)_EauA!$%^V@cxRdRBteP$zG3kaw-EgVXW3|b)t%kVOA z=X>F-A*FHQE4z&ZV}yw{L+E@(sif6LhC(_uEa5J(-pTxp$R5q( z`eM*3hyLxL*VJ7vluXEZVeuKFTU}XP?^HZz`@|e*7f%E_9)qoXLLY!k(1gfY#1%+S zF_GKYNcoi(IG0yLFw6F23kW6Q^s*G6gS!8Y#@IS4byi>08YqmI)H74$Vy7<88avym z|CJ<@nuJENoe>;DY~fyicJ2&7U_80ELmM!tZ~My6ju*c-P(i^0H*B-s!e1oj(=#WiW!vZ=wl{$u-#b#VDt6&v*&W`ta`Cz!;%`>-wcJ#r#6qeJ5- zL1>wdR=Wd;^(n#eJ<1JCv)zN)dCZr-V`Q!-Sdw*%UzaS-yBxGxc#w~{`FM=v_Z*qL zQ#|iJ8=9k1tUecLs#s0~ZVzNTg)$C*%U{QrtF@-`b}i1GKoy$$BECHa=JOo}3(F5v zprMQ1o8hy{29Oq`1(zHXUI%GjS0-KTe_?Y6{#Q144Npf4DuA--Cv}KD3P6d975GNo zE@k8F0-@slTl^>6I~6-8JLf-0-2Wde?x(ssE~`>Feup*P1>g1d*0eQ0Y6|U`*^k8T z_fLHA3XlPbDd2EG>ALy7xJ{z5;N;UTUv$!7AiCVJ8u<&R=arVqS?8B3!i9y&^Mt&q z&WJ-Y0m9u2Za0YCsV>0L`a6)$VX;6k*6*v$D_32jbvibuU z1`JGTj&M0xCwh|Tv;r!zBKn;2aOjRDkh6IZoqIn-2jS3?X)wvir2-Mo7)J6;MYMi= zc0vg)3XRM)tAkO)Df|{R5@|Z1lnmokBFcX44E-|&M+I8-n)0)VevfGpW$(O~Q<_Yy z-=|a=h@nlbG&-71h#?Hz3eAta7LJHignnqMQ)3M6S`QEulxcc!lR|WWs3kPIWY7EG zKdgbH&_-s&Jg87azg>FC6q#T>ctyaiszfY|tsxj`Ah`74j}>*Md8S{f9jgZ-@grQr zDdA>4sT$?U%%JMvhBHL{ZFYR7LS(=ER*hHbc?YUb3TIt%A)Zxc{<^%4#fc?&kH{Iw2@8U*qWT6E1>yM^V2UG#!HG!K7p97wE*FI- z;y}w3r#ikSp&QGIdWCig6Cac*6-rN4EJ`||j%ybnHiec+^aqhMf)h29Q!N5knns58 zgCky0clw?eHU6c%Du#qRh+W3BwkLiH=UMc&XQcyO-lP@bhBw5QYV^fxnvliuJAzH* zo(h)4AbCm>rJu~OtQZAhP1I)rg)@!ij)|z7F3ZdfMZae!=R-^r4xcf~c`ta)0IeK_aIo1W! z>>q!BR!VASNsyzvlp!y6oSYp2+A)#qJ~q_lQvcqm(x5c4h0sS9Eo);bkjhgajBse4 zPX3d}ZCyF})?#WAusy|RrWof2Vv7iWx;z4oyp_g+4klndlcvIr~c9C;zSnv(-$dWnxG)nsf#qtQ+fML#U(#hNX? z{LaB>(C!t3j$eYs3q$32?DwsSYiXjO4hiHCTH#T)M#Ej}ji)r!-K~l_=An4%u$!Ye zA}Bk$*%jD#u&(mFx1J0D=hYFw;h&0cJryQ1mxu|57G<*{5u9&@=c)89n@Axw{9eX} zogqa>MY>V(8f^)Ff@`&50BH~EgWWM(sDha{Q->kDWX1aFs54kBTkHoU&ZM|FR{RpM z)#GpM<^;V^XxyJd33cpOkO{to-rGc#`>dmcAqQ=K0G-W(9zCszz(oRD;$>Af-!YcQ z+fP!fNs~w-K0h&kJ;@zA52Rg3%TM0REEIOqH$=~+!7nGCdL^XHchIw6 zCg>+B?_I4!O&5@*7A1$0U(Lf!TrURxX||Fcx{K94dU$t)F6Iz8`NQK#5z~tiamwt9 zZ%X|R{)p0h3;Wg#Q=s?H2Qi9nA;iyjc`vo&A3L@@@P37_?XzgyeoztgyWKmU#PnkF zP04mhv+;!24Wd>xsYpSa-Vyv}P06_OPO>II_D&VYE_~)CH9yXq2HpB)4d+H%d43bB z6#|b|F>@1Ci2s|tW+Ukvg1}_csD+mI2LN<)?BoW^h|qZ2G0I5H>)~%5>dDQ0%6CXA z%uPj@lJd90z6z;2nh)KTF5#oD;axglM&s8odsVBbhN9egj$Vn)pO4~J!>O7S9hjc# z`?)fW3KdZRORR^e=aiIz0P@U@&*XGNlW|IpnEW3X2Cg1|e<(I*8*ng>K{ATI#fiWe z-p;b8cCxHC4#!6%x}>*MX}14PKJwMD5(Q1Q0Ue#KOw=V{`ws;ipel=Ip@JKbLne9D znXVlP?S?i%3)3ZM`N&^1@81~@dL=JToh*g?5rT5lD!%Fl8KFiG{Cuhex93qHxT!m; zGC^aE^<%C=mPaLWz299(ZE%?(w`^2TbPqiH_%`TA<5^z7`OZ*-k`$A)i1@ zqoJS#voYmgo^?>~v2vc*+tHpgtTZqAXAw6D9M6B(RIYUu^+utxxG54eG9Fb4LZN8K z8#;P9WU9)nY&|3+=S6^|zroWK`y9uP!rK{7lqR>{VUou)UIUK4~y{>nt)HXjOluu=2`3-%pjl z^vPt`d!p=|blNY{v>;^M7j?3e`l~iyan0`1=(Rw_7LkVC1qFMcTLc~bb3|mCUn;=y zX%Io;bC{J1oF42OYj^ML!^P|>Xlrga-Em?^eZcC3kXmT`)P8tN7_(ogC6Ws=XK(HE zV|BGwH7tfpUq24jUR1|t!;d@&-X9*bNg_H*rA~NI60UA_8OV23dvW~iNUbx)>{&}2 z@+T2}Y`2tSXVO&RecbO7wGD)Z>0+Yk2U9)3wza0@<&)8iM_9s(0ppT+m7U>kkH(<; zyx^-kr;+^v^Ul;L+tZQ1|NLYE{kX2pHim3edd|>t3CZgYN51@$QX0h~e$kKsc6ky3 z>@h*W7V_cun0%Kpv!YOt;y^X_263J^A!*}uIJr|oyH;ja@JxA^e$OD}SSgKc5x;Oq z5IdWLAC8~^R(TJqZEzgQ0CM&5h{s-$jUUp&ilg`wJ1pb4a9-4A+MTCxwz@j@B0BC@ z=sqhH_$vY{i1s8b}`cm zJ2Qh$pe#LOz_)rlgXoH$=syNH)+muDn;YM1*_6TQj`=Mvf;=jb(<^qB( znYbZoq+WE~B*#aKM8611jTU`|O)vcHzKnZc}5K&i~{5{d6 z;6hb1*@Cu0Rm7y?)}ImvpA@vy&}S&-iV)lG!&%-M>evavD%=NwA#_5m-aE5ksE)Z{ z!e=axh0fyNS++cV8=j!C5;|Ai1@|P6*zZ^0CbZby2>qF-&%e6k5@UQ&#O%xI#FEbY zg9pvt`|BJ};D@&7ce92Jx3*tt=V|oS-j8^0*WYKBrkky63(k`y>7Mw=+|mtlNxa9u z2!_qHv0OFSXDc2Kw5?RvJL_8P5BcO2U46=|BFv&TTEyqD%!)#X$}7k{9-qWV;rkqgYpMb3gEQ^WYBi-TCl=k*LLi_=wA_O;LK)(CATE{(Fko|%je zZmf-(FUDm-!*4JXJ4?Q9A;;`Ydxp<*T6MQqy-sc!zWlC%UOYM*b-lFJVR0Q zoUJXQj0lvmr(l4u#l=MS3O(7EXcx%bQ~Za^e2laE5bQ3Oktoh+l-cM7&PNTCkCv!3 zsY?TmVXGU@g7JXJQ5!>LKopM6=lw zV?J#s9wWPesT;RosiiaB(6gHlPa)5k&%-DM|1*E&VrBa;YG5kP4(6_AZ=zoGj^>sc z79eI;77ic_8;}77AnFRSc5tR=0BG1i>@42i)m=?LS(riIO5$(wVvx7b^x3(&-ZpN1 zAP}hV*O>e@8h?$&UjzDU^no028xZLB*Vz0u|A_jR+wng<;J+pFzsBLOF=GJ8TX?!V zIGelBzkQv5v}xl2mUz=1qoSAKV*|3W19{njz_-VbSa}$MY;-^%-CLZZgZcjzqTy`f z=xAa7CS+z}=VE~ZP|=VCu}Hbv*_oPv!GHTg!`jA$>h1NtB8K7Hi9q@(9h$c5)OS+iBA9sy_6GxMpa z{Ar=W%d=dI(QQyxh3IQH$9UKIL$^XV0#}8Qxe3PMW%lIlMV)pLpB#0HCAKn~SEkH| z4{AC%7KyV-lF_J09{n2SN0Jgu`yL6{qrSW-fa4aUrzCOHr5nocdKI6C(8^xkq|f_Y+4CR3uANCp;T zF?BXg!rZky9aAE)9l_hHkNJsx*w2WN-RcI`(s4w34(?oC}Bto&F_(M!+FnXQqsW7Kn9r{pX}J72(=+!_j@301w-sn}T2hN*3&x{S({8Gy zjQpvdmMi~NeCL_eoNYhC z7tc%hjbcH6%G>wYC>Y?!uU_S**j`-C$KOB>Kfz-#>Den|Is41p_&MPor^eytr3gB! zXoog$VWfa~V;1jt*w`yO5vu|rt&=`aP@p7G=e@OzGcRqb8TA6zY3;|wK}R~Xkxn2= zRDa5kH7c>TVz zd5Tu4I-B%6?5e-$r?~oE;@^m=#@{_EDA`BFRkJMORm7ksHv1ahT==T4VdR;?smy9iwa#aou|u0%GU zkX|jZ(1&G&YT6~@oh;YlyCb``Co#}ZM@`+Z0Z}C` z1_%_YcEsi?77&0j*gV7M!_qbMiEyj!#v)IA{k~ z541cVSH#3bEfU9QaqLH72&dmakhM=)o7QU@@9_1=*pjFB#|p)XK!f-wv15u&Cn$?a zvjAvgTtat&BV0}L&@`ScKj8vOCz2oJzufuy`H<+cgu#vq6w|(}82sM5L5(ZBvbnm2 zx3H_PmDb2~sO#ssvOq3Z`YEpptx>DutAZL#6|xuyGMZ)cO))h*rn&?oL0_8Cz?=}p zGQ}6iBUE?>TIPL+6$oZLMFhrM=HM}|DI-KB6K_)N2WE6rU?iH8y19WqIrK@{=Ox8b zLJe>ybmB>JB2(qp)_3;-S79;JFBKeM5Hmw=F&vo)_A!rC7<`E%t8qH<*!3Th5a&Z| zg(WqJsvGQ=4r=E%LStt7*>ee#>A=rAaX7SzB9XmgLH(*NP9lU7@req)pUj({tMOi9v$=HuEp2JP7qU9fFO*U36 z3Ib-q9|tUtQNqJp#?(Yzl229jBrf+7Q(1G`p;eTQG4fN!`8Px^Gv> zDT2nAX-OhjEk;n|yPAhh)E`>E7CbsVf_cX|){UXVj;bSp;M*-et3h0hTgt`=Ve&ig z5|SV~C!2LDSC-+0N@iJ?BML#XdgDh9*JHz4w=th zstGgm{7+BV@5oBpo#8cGo3t!^UK2TZ*!W+;#UB?_>D^h&^|_-e&Mz|TDZRDZpGLa+ zens+Cj|`RUj*$DOc-p>a=_6aqSE&Xux@TADpI5F0>YhW!!S1(&uS8JXzYBt2n~OUw zO>Nu{7Qx!n)r51^h>K@A#EVb-xWDY*2`|Mm-FTD%kzYODq)G1tQ{Ml08w0dS&REpU z6u-AV?ayGsr_&UqRAAgshHTSa`_M6|UIx2iBEH*z13rCcUYk z{)cGlKZj*r{0GoN5jZkT)mm zTNP@5kFa!j+xt83`nxAVr6<4vl#&wV;gDbx;}K=$U}xpvxDs_=Y+ixSF~Bb1iEQO_2qL#D82nS9&}Cx0l{ZfP za7{o0O9Ct10O>+Rl1j)}5?j&$89P~2!WGv*LZXBbkWb3LWq}=tEg*ICD#T6sr{wPS z&*tmZ4Y#`7ahJYaE6wqOa0GK;L84rmsk@=tFFQB4qk<*D4>rB^>jMXGd0T(ot|N?6 zZ+)Q#Ih|4;%$LB1<>vbjO&^z5&|pt;f+cz24^5C+97mA!cH9imre$l*K(O8(d$C8vmqxeVKoD1Qb%bVSAHiLGJLaG zdKVwK`v{1}l%BEantHL&Cf(>d(Z)MtmnSwo+?Zk{-gXp)t z?`tt{`*_F#ka>`j9FdBRb!X-s>f7~q{U!y7oB7b#9pNlZFjy=>Xr7WYZ%cRw(za2^ ze@8`|5kwf8GSVGy=I#(lz5(}}sjS0V3@)6hg$O}Yq#k;`CN!Msf1+^;!!;4CJoqx) z``?k?$?9wNIJgyKqZ3xh@9WeBrh@(j4^t;({CffO`915P{e^=iDq6#+02ApmU4auL zg2P4T4ih`KC3tKty_MC)>|k&#CWDl{S+F}kW_wvkHun{u+hS(0Fh-U%iR*)XlE9$W z62b*}^g=O>?~S{U8%cW2xXj}pOER+qE=-rivyDhI=|KGc`kVbBM5k!Y0g&iPVWGE$ zQ}lihNIsgjkAP;~C<3?cTR&!WC;{z@Ryb}Y?VzqHp)s*mebf~by_@Vz@IAM+xuyAF z^`7M3Lz-CyTBO7!rfDu}d;aev(E8&R7gzqAmhq4fY&B>do{O!)gJBjaLvRF|0R zuMK?MFi%3HjVVvUoOqyc9kFBp{%@C@1fvg)EKnyscoqn_JTmo}X63=4+oJgrbX7}r z+27!_PW-jvnHThVw3f#C#z((5x8#{kLXGg9UaG|Vct+~Qu6;gqIA;~O&wFOnl&@q~ z$CC0A;Oik41BPQ8-uUFi3@sQ=hQF9ytSr|4vD+|L_!r-bZ$!l9v{&Hv3ib-n3|A#K z9tFWu7<&aYMetwAivEJ}6#7GzFZH>?pcRAku^eK6b@E>nCew<`O3F$`h)PQc`7nS* z0CN9?<;3X1y2!`QeuD4x-+B7f^HuYmii?s9l6MtUMx;lEGRkM-XX4pyXlZC^jEti) zlQX~gywz6tMI*U7IUw5yLUHs%RxUz*`En^z{yyC$V({f2BQ9Vorjxu<(-WqC>KpA+BDI2 zP}hX}<{Hu~kcbn`?U0Ro?Mo;aVl0*|kv(kWH{nzD9xFgVn$1X1FB#G$?0c_Dr)u?8 zsYI#dZSj;A9YYDI1W2b>;%%h}iFEx3Zdei~V}}4nfYv;KscrC{;VWNLTT$t`o867f zbOpC*g?1zDFXQjnuWu&8KWuw&sr%|*wv-+Rg)U>pJy8P|>zq`pB zIoLSa8yGp@(*Mu6BK9^;wz!;}xPO24|7aS8KiXc;+QIg(moRX{r4jhkB534nW?&>Q z!jH?%jSEi0XKiic=zyz%%k;N*#AW*1khn~L%|{+r>rW2>8*9fub8x_A{HuwZ8{Ej+ z@UNNvCI3ESVKYldBYRvLVM{$nBS9kr8^b?efTWSNiK8hlJslm>pAR`W+8gOvfxBjQ zsfjtPGb0YKe&@1mq))DZ0$jB@?lFobF-K{XB}@~tjUo~?BuR!K9@_bM;b8yxS!k%y zd=fc=52o)n@vJP*w~gaQ8L98?<;b2#vjslRcF!3jee^JOAi7DT8{OH>;eKm9d75v% z+}n9}a<6hWm!^KLfS38WT{_~L= z`;H?fMT(Z7asU`9Z!hfa=Oa!`TRDC;Q<7H^^p7 zCU$3l{1!}T-qK@WhRMLw=3w^A#uxQwrdIzW=FzAdOJLuq#)cO_#ge-* z7=uIW%#Jls$pjNxrRu;*Ws69jOh&(0gO_3zTa0`Tk>76T9Le}XiKqzJ@lkEbo|JvY zZY1?5qOsDAH(&vS6qbBF5y#^d=JG>TU_9K1aiEn3{|LV4I6>fSb~9QKnFOHD{R^0D z2jAP%!X3EDGt>Km?2@@DBAJA|fn9QO{vtV%&;AOSs7<)L{JfThm_+-*DCTJiuNgE0 znR!_tNn3tD5_puv?*dQt-g~ggHpj-|>7@3|eNPn|cr3QFYb05A{QZy}s7h{d${es3S7*A~QO5 z+`9vFKF$|}1Jq-d(7>YRcA|OJ9aPa10M8J!(GTUG<57h$Owt+KpyZ_;F(mPBKJx>$ zCgF47w)jpeS!NoWzTEAh9cs<1bQca7JkG*i0mOPiRP3*x;KjXSe%(JBP0CiC_AWb0 z;2`n~TR4CO(P8X<*2{Na>m&*m*U1sAQ6v&rT`J=j3ePCzeH0FoCu&C5b1t<`>jm8z zq@el~VMp8LkX?C2afmt|uu7bY@8#NB6^%HF0wQ1ZHTnSsD)7up(%?|=73ARR=~)u8 z3SEe=lBOqJlKxUL1!B7~y-~3UBi}NA@KA`2xP5f!oRDJt2K6HN*4g;t>@@yjsX$9H(q*=JzX1$4#mlfx%w0|JO^m9W($)YnMrjApwMP$TM zOHSS(b5#kz7EZ)3Y+*|OlB+mya01zGvhYHNK!X#QQgO3EjKF?J6W=E4Ir8(BRSEK` z3#V#`L~)W|ZTrL%(Rvt997T@>h*+-!Y=gLx+5kcxz{A5wCig&*v|;D7(Qh z3iCicJ)M9wWq;5b`H42>buSpH6hZttG^T&3QCZJ(iye-q`IOd2_k3qAUbZ$s$Er1# zNDrmNAPAC#J7hza!N@ALYLRs*F^93SeADE`GkH-a>McsJ zT?5Y9cm)<1pR}dpH&;rO-EsuMacLyGE|TUI#}e+8n%x}UpB|p>!s83{FDl!#gKTf+ z(}i67G-Y%IrgJI8GT41cm@*^^)pBUp94FL=2hf%{^Y4)mu@V%s0N8Y7y zWtoS{l4xwluy6voKOB)H6u2EiKrVE-ZQ4|4P4ouHcBbue%?wkf!Ev+@Gpg?}^#LoW zakPKpctsHI)_Ye#j;E(n_$nVnd+w>4i>G!H^C{KjEcFVRr;za+5#G*)oOWUmT;%R> z{8V>X!1bq?w~1HCf)uS*V&slB$qpP?C5^!!5q{^C(B4Rnt(Yh|W)Kfh+jli;v87m-GRHteSGjfyn7clYFC+1fwnIyR!jCbP!5# zV0&%7(Rk!32Fsf9aOoni&lrJE;#cO87*iBfpBo+}S`6#I{Kwzj#NV9=(?6WZf2sHS zo3;8^x5fOgZtE}kAGj?#7FODSc3Vwq7B+v}*5UC7c)!llPcQ=Ud~6_QU5gG%p@`-R zKRwmwzB;6lu#eIM#!K%{Xd1Duy%q5b{8&o`M7QhRwqtGj4~XX%EEumm&zK2TB=Vcr zPIFL!U7_$}O){OqxnbmY`7JD>;}4qd9g$T27t;~0NIMw*v4~T-l9u?lwgVDBc)i3M z{QZ=V{W+1Vdlr#wS-HvUXm55hDq8rW_7@F7fJTr(jE93E2Cz@hREhO(k>==a0 z;DZ6Ml$;tb|_fB$r_`b)4!Lg#v@m^$abwMk{cOsL#$oqcST}({3 z2I~ma>Wf);NkEQWmMc3j!@14Bk&_wDJbu=d0(XOwOMCi`P`p&Cbi0yQmm!9sI14kk zc8hcxUQi9iMrY-Ox)|)`M@u7&6(vA>PR~-`yhiWcaSVOow6ebcI_e%!WhZw~C*jin zv_9S1awziWB`n_-&&u|S_f%J=faB{;M;Ifu+SEW0GQ;ObQ|+7{OKDoHh3lU3oypJc zVOoaf@QfS$ybRTc8wqRLM~c}a z&6$sIr!!$u_VzWkSEag4Pkfmm<6iTeQ+E=|Zt<``SL0Lv-t2BG)-=7-wk9~nQ0_G# z)2lL&zrTiGUfEN+ii*a;uZ9kaM#&SlJ(<)ida^cZGC*J^xNDCR&U$aMPDCPLT?23Q zYH|t|_Als}hQ@3!P;2S!utIE$LNN&|5 zklzh|$i9Ta1UD6hBUqi6c3JGCKF76(eq&!WgP3bizPlTr(|xG&Nj!Ne+t6sF@R26M_6PRZiiE4<;^<~$B@qY5#6et_?Mw!Nm-zDg{N}- z=z*zOj8;BT&4Xu`&aXgnr0z%<0vXvj5BId){!Wh z0-jl5o{RM7PJHBo4#W9{Pz2cT=U~+=P5?Lp$e8jaewy;9%gLzZ&xF5d%+^*V_-{^+ z#DSJC=B#^`j$kM{Z1n_SrKe5RS=LCx28P|tPo?#e7;4LJREb(?$T`9e!5EUq z>!$3r*a3sBliEDV_A}|cW|0kNY_{=?=9pyeSIEDS&h9U_Zrv>9X8#WHr#4UNB<@{E<#hKDkig;)^Hdu^_pvo}u6Qxx}c?45g3p~BW zJP3Wkgm2y7Nx*U{Z;xrMiTf<-q=^f*49L)Gu^#yqn80tH>9kDa_(LxIjDko%rNk6k zf!a)>C${j^1_M0n>*XyjHpvjuoz{l;)N599xKV9cq%MGqGR}-Jzr5Dfh^njwW8_H` zuV7K#<~hTV@~A9SsVbY;GQ&k<^%uTy8jTXZKViA_P`kt_eZwXgmMRC4VgGVQl<=Kp zcE&P3oq3!m?|V6r(g4t5xyyBJb9w#~yQQLiJCcT$9YN9=I`9sat{@f;A^a z=b5QfkqB?KN_E|OpBeVhq1%5{!Ucea;B30n$OEi7qj6;|BEK|(zs_(Zipqn^ zDB;7)B)G6z+L9zVE)<@~emZR+4XdTnT)65x11&_wOXXMfK*0)%H0dkp;Rn|HV6x?uvgLqya&2bP_3H@_YKYG&`~H1F zg{&a`S>&|d2j*AGMe>vyKo!!YGQS7V3`j9az&Qa#>HuORv2D!K&bov%%rd+>%L8)r z+)`wbZHlgp)%AU|*wu~~DM8WB@O{yZfzo=rphnL?DO+U3eomYhnnte^@Y2zZAyjhp zDo8CJKnL`#!nJ>J=h0O{`m#>A0eaNoO6XU`oFne*U6ijI#^ICq~VqeV@BwVoP#qz1H-=W7pr!C)er8YsR`<~(esEUQ3@lWc$ z{45syw)3A5GgA|YE4i5l_6GA<8-bMQs_8XY3MZ0_K`f!o&N724sP+wK<6I1M!3wM* z>*DYR$%?rd`w5wbpaW{a=goINa&2)wO&tjx?@gZlzk z*$WyM>%~Ht$<~RI58gz_n#d@C=1PM=qt&SnDS$Uaj>Xr9;6Rm6a zGxMU?HDV_B`NvR*HYL7MoHQs*bcUbONk9)Ib)!B2X;Tj)e-sEHul^O23^VU(B%RfR zDNYW6Ggc5=RYH)S=m}B)EbL98Kpj@$`GxpzTHk2iB(Mr{xXQf*#%a zfg$UQI2!zx;q2bfG__ZV^!+QVjW+-ya;~pf)iF`j3Fxa##ulk01n^OzA;pfCp0jr} zvbZ#1Ia%xt+dUOGMXAsQ^Y#u9{tu9H=~i}pBKY1Kmt4I8HAI-z<-@BuWR z5+zTiqAQ;Yq_8SyZj1}pZy0?mDRO?q0D+4X=tQNZuN339T=Sh|<9FdWS%S@|l(j{7KQRuae0kqoi2;p;OtPYh!&jimSbz}x@&YN10v>Sw!_iK=xg%4&K1=cjizBb zF3C0182M9I@i5iJ_ZqW-5wP2ePu&Iwj{8N(MKun(TTKn?hK?`(k#RiFy29VVmZ84+Wafg&VDHmk!NLLH7SrUPkOxTf*VzLj|p||A-t$o&Pc!@8(x+|9M-rf&wnJ zHnbM*0CoHdddUA?QDy|;`so?dhlhdVb-d$NTcfOif)O1;B zu#FHmFil5^3{tB&l*v6b``(O5E7hE(=O``x#GMkSO^Au)QY<)RC2CW{9UqrR!#Nst z>Bm-OhCwB+K%pHV9xSW181f^nj3a!R;6C#Q^MLkGvzBS8FvT6$gYzWvO}>^T8-DJf#&@wF>Lw3Xd*I}8 zxVi_94l<1}$9+qO9Imqqv$r${jmxc#BqVndMI3wRNJ@qHKl7}U!O5#y_{t^!0n8Y- zb#vMxj#`B_;j$mYshW)3qhzk<%ssXFtU<1I>cLOOF@c2kCg5}xpPCS!c$6kv+HqQz zJGJq8MulkI;0UYMf z{KJi)HP@OraeDbdTiCimugWyZx4HIn&>MeKbD`38I(+CScN;Cnid5DHG~3Id3GxvD z2eHQ|&PDAp+y7=V+dmlg-^paUzbZKYR1Nu?{*S24%JR=t9#YfzYk_{`;0=TWTnI$3 z4DU3h(e5PF0(p)OGcb!BWJwW?vTjdAqV{y|GL1(j*NCOl&>vbT+nIUp!Y$9a!;|BR zACB;4d)Gdq^NDD?jgozQyT#5eg6v2wP@e*0pZNLtt8`*5xAI zPPv{#xvxu?!Fgu*Mzen*@k@u-14u?EZzeU{+_Y@h?U#*RB^sM=i3oEE9MePg0L(V^ z3R)xO3RGlY-SRBEo&ah9K?!Au9HwweqdIh#ak~$|vybW^XR=(3zw!R83GlvCPDQle1}>-980=jB} z$K4p6mF}}&_tL`!=iL~bQqCXDcGrj45%*JWk-qc6V&?S}b&Mjcwn&5UOtUXbGYYAZ zcLMK1+}!!o7xi>b^Oa)wjmZNZDvBuARa38*SG6YJc#FnmDjev2#An{URJ?+d9vkvMstYE@vZ!$fFJn3W%op+di;Y;Ts^JzgMzI^z>W!PaO zC?0CyHh&F58*gHqr>}Pp=zmkz^7f#e*1zkwLlQF%lq( z#nE7$vmH#tg_RQeK1wRZMR!|TIsi4K)e?S~z7K6S=o_0`gT=f=I&G$Gc)I8ZcRGU4 zsw_B82@wDLO04cIt-Su{_jA7&SS7w``6TQSHYVD$(McHPD$X;FuE}lm2S`0%8VeJx zPI+xb-T6wA{F|TXM>Dm-$F5td`0Lx~5`=tc&uH@&xnp-;CU5je3enrPg*I#uzSMHU z8`~(yHVexKu79CurV#5p_SYBTy&_h9b7z_syM7()=H?N$YOX)2wTyW8;jJ<*0vwB3 z^kOOZZ@4s?4@M_rW$)J6A6jZ;Z-AQ?S-nVV*w@eL0sF>#TuQ$I0Gvz)c)Ms;YI;}V z=1?3b<;}OWaW06`nvU7Ge@pn07_R;NI z2m|x6Y_IOsF#yq{8Gfmwf_wHNd>S(BtYSbRi-p6I^HVUK)Vg5yYsY}qnnFj~W--LS znXqEOPurohDs(CF%6MP{n?4nASBia$DzE>oKp*1JWe)3y2DA3H`&pv$6$?l@vmYDt z*iC?b%~(5vMoPhK1SNvl04>eBQS**T6ZbhEfl4BBlkpt!ujwXe+KX z9ODd`ARsGMW5?8L=Akp)sZ{&PFReX-&|J1b3m1reDm4n*i&j&e}D~pWbzH} zjT(z6su~ARR;J40sIeW~)mRbYr5fB@hb0na;1Lf`^Zv+zEfyw!pcPAchT{~{tf}s!w6q*Vfd;0&1NjO4}$!(8tgAeS7{xX zsnioxi>U>B+a%`d*T{ZF3h_)|Yr2vFu%eIy75R7wdLp(wLIM>-p=4W~csRA*q<9C^ ztbywx2KEog^MFc#t0!k&=PV`pfM2gWGd;bt34Ql1IjmVoT}4|$9C&-fi>4&IctDqi zldLXlNVslbIgpKMeG6oq-+=9ATusWCCcr*4qvcCY64g`mpw+5_LK2|j(Yx>9-9(mp z&FH&b*lPWckk>VG8({4E04kTEVNOwLEWz()k5{1GRzOuhoA%YqMbYa@Lx`a%==H?a zg^pmDA{?Yr>jl{=D*2`%8QXcgl0jSG&g62tQA+pGB9T~UrsmzJdX?GM@CN7%>Kq#9 z;J=oxEjpf(vL18k*k(9c#S4yvAsDd zs(Vy4&!BD!+XqlH1HD69c+>A`TSkI!X2;pQl5LEEQQ}vgI2awuN<~c9U-oO@R|>5f z`7=%39>K67jX1pS*4AeHrlCK`&~xoHZ1l0Y2m*dA;LcTN@4b_Rw5HbWQ`|AUhJ~7+ zjWuutZ_+g?QtG<*%(|&|* zIi^7E89Z)wHD02M)FuEiFOk0J3^R&^RH@GD@jZXDexsvyQ7yaM$ktB2y9HGY8Yhqi z87FqP(U`UT?cSkWK>p*(9yMsnQ8y}%?s!y8q0ysGuZ0Fo9}RFEpTsN-PxCGQ()dQT zo>8t!3Cg%3r6zCw~^JNSSP>erx$+v6EpfmS$CF zBHIkj4hs&~t%W+x2jaD=>9G0Q07{fpYWteQ3XTgp)B52J>+<+0q%|)y9bTvtTWhu5gPP=-HC!z?jbGt${bKo(|+W%pZuMzzBQ<7)l~uYYG)Esr)oV z>6c~-G0p|vEmXy-sAq#_`s(|)^USmEML_zCl`5|2l6F#B4b|nt&42@4Ua0(IuxZ_+ap7p{$r>^Zy9}R=doFP3dO6d-b{_`$}tp z$#T)i;$d&&?WQ4$W=@NYqEFvIR0T3Z>xwSaQNm96@e^SwR)tFhtsI)Fl zao^SGu)<=gA{=BIy=}U(wGm3#gQhuxTQ+1!Z>4O8qBb)u|Gnz8vsP^2t+dtJR{}$% z_{dS4xeCEbSNAFh!g?9xTZ@9@k*>`&x~aH%0Rr{C54*sy*?+X$;7-SK@El!?CjtsW|udvQ>^oaX%lYs*f;?Obhwhu@8ANmlCtA(V2P**;NA zwjw#~GFbrCCWDNR#5P%&?m<$<-x{1k#;W>y>zsre)G&@dVrx$uel73a=p%3vN-ihf z{9`t=jlr@Xgjoc#n)o&;Ler1#N8r0o7O(awk4PqFYfr&XFXIay2)FHpw>VKXjsgFN zefV#UNB;jkc)EW}KmJYsC-#Af>0j)_qNjzGN4f==Ffr#86{^u| z8_q0n;#}v>u&C%|Fu=F?Tz0|EhmCh1N9zw!%#jM|+w#Vpd$AHCt3VIxm;K+MuxR0t zuV_9CZUaQ$1qr@&WIb1$m-hw7WHWe7VAnafI&X)u2mHM8jKk^rIj&^2-dQrN;^;tT z;o*kJmE&$cgRg+Y8aV_Xwoe=wb#xuN63j*>FIWw1(b{`9(FWJIJSJRE=r!8rW8Jgw z*VwfV&O^woy{lwk&^PbNSv!T-*xU!7Fr`Fm8L`Ga&f-uc6ccmNZpS%3b`8QFEAiyD zWsocLR;I_6XL~0x7bNaWMlt4A&NYSzq6l3`P1qT`;R8s<5SSVHz$T%Y0lSFTD!(R~ z^jK?l+IXi}qc!(jqpo2tz{Gk+j!78TA&IDOxQQXA%`E+{WkkP-{5K3f;h#_^9Kp-P zThxyjwep!AG<_u3sK!`#Q@ac^K}t~kAY}zzJ4az z>$(zU1eSu;nyt^sp20_z9b(q$EMO`q?~J@_SuE&ViqnrOhF&mjSYPcyOB*==ra{To zTx!b1?m>5<;nfmC(olGm90*>qtHm`4?uN%=RMB>u;wkhX2yzYQOY$d&fUY%`p7#0@ z)R>lFau6roKisx7+!6rMNegDjSx4_h1bak*0X|!b>%}PSqFbutBgqQ zVH3LAOrH?itf7uMRN>ADaQZycTGIyw*n50&I}($Voo>ITua1U8!eiubJtsw3>f??H zAYQ_sVg`jLDWrg6bAqI4`p3Qx&ArD5NTvtScHp0GI>go?3wG;NcHpp$?r4o`#of=c zjh6GA`A<4K+^!$xGY`jgqM#>2 z-g48EqzTG4VP+(7+65!cr67KfL#Zobs7tu@YEo`1=2$zkVMf&onxK_hx-c;ooafKu zXL<-H4P@5CEHV$l%9H>%u4JFThmMaZcx&pZ;IfyHE)!gU6E4k_6RXP)yNCj= z-DCG)3z#gsqrX(}Zw0*`AE+NEvaj{^u3{MFB;`uAdeerr zLBcr6WJYLElU$}R{3fh^DtaBqL$SE;Og8h}+Hf69nE|aZ|MECaOqeX}xp|xgBiV@J z&dK0i%iUFY7_!_7r!wxi9Xya5PD?RwEoYTe%UXk!G)^G7k!+i2(>R3mhoU~-!g@uq zmwWpcs?T}#m9&&mHLk<}B#-8ZvN71f*puYezzjumnUlQALPFqd3cXS;DZ~ zj`0+1NQM+1jPqqilQE2s%uNo*I8NtMqObtAWm`*vhML8bSsPf;AnYNtQjXnAw`Prz zKIJ?-$a6)?+G7>Zk6}STG6zwAsAqSHYxPxeJv=bxiS=k(9CD2`Qdp0twVv;BWjP(DKVCz!-|Lg61 z)E#0`G&y)7I|~j=Qw777U}w5o7%4f{xC_@L1QGjWpp}^ITf(!&#(_>qf1@z`>&G^Z zyA!6z6DlY#V$T?HBsw@jM>Al2Jk>$AsZv<(gt=n42GVndG1AWj?RmIbUGB&Mu0&fH ze(C$yQWg!{&#VO%&WF@HpeY6Rf*j!-;YNajP*#O_7W!a+Abd+OMpRmfdhV!qF;nAZ zcyMe#sC;$)vjrVtY=pSNmVz9ThZ|A(p~9OJL*Z?ial9P+Y0eskr7UNu39w5K?h;ys zUy|aqN|2s_LL^{CG+>unB_0R5G16Z@<#7{3CU_#n>F?D!b(3SbeE=eepLIzAk;S(A zZ(ym#x#KbHh3V^Yk8hq};06i6v!}(x?dyYY(Y!PI9l-ZhZlrf#e{M&M@pCiFUni5^ zr9SXS2=1r%>~aUsu^do&W3*g0WGIlPK^7`Kd!eZFf$}!8MaO$};v`7O=Oz{FA{mrn zph{>UcLaS?)Vi$IH_s))#>&5se?*dh~()P-0J_1$#&udtP1hMv*|E5 z67eT&TU+?Z=9r62*0(nrogy%pd;5D%cnBwYiS$XW@(uL7IB-)Ce@Iam6Eecb6dA{x zb=Ohba?ujj@ zzNb~+Pht39eT{-TVX1(bt^5eTf8T+Vx=VrAY7%&o%BKS?XHv$=6N~|MpS#ZIPQ`ws z$&2l1_p3+@tr>3_0b%pfU#a(*YW(OiLONCmJ!*zj@Razop+QJjyX;O$YlDcouO1P+ zg*Hi1zG2z8VHq>^d;K925$qMCVZ!Y&CcHWT=-2O$++jXoPDwA(*a7!kzc?a+j^hCK z`r*d-IGa$y@H;d0lq9YMsCXYN+*1m52lZ9lpvH!uZxzvBS&--X4T_T$UEa}Rchy8@ z(O^@q+op0G5?A8WdX3KcOLi@Ix;V)1#9ZCPJWpvC#k~T^BgAB0EV2iNu%kAzo0tQ4 z&;zS}TBswEVcy&{3^m41(B2bs^)3UHd;KEd#e3exI0Qq?F~k`>nnVEata{tNmj-i- z0Nf%sm2qC`eZ{|&!=I-8UdyGegpha}$iWDw52+snhF_oTT_WKbGkWq7M2Q`tPGZJ7 z_*8qU;q`&*ePY7&wJ)*1O2_%b%dV{sXYHSDl}V=Qo3dD~=mbiwI2)~&#HXzN?1Mcr z{tVb+#Yqav!3s=n%-QVbwoxz3zXij}M4Qpq33<6A{|I=xUpKOt&~iecAZp3|4%X!a za2|rKvDc8zRb$GX1Ou3tO0(%{nh)9)a?hQxEjwUl5imDIBD$FOdr(osS;4iZ)fDy& z-fU#>xBl`^L-Pk$MrKb|$cf|r;U`ybVMo{ape=&g-QEcmJP3gfoJ(d`ah^B1$-rly zSGnts3GxK)1`;p4)LLi3?3Dy}0u!rXNUqi9{)9Jqmz-uM;@NPbo?(M7$)o-m2-U_S zH#q>))DL&BuRcSVhS!-QGJDU~wfh1(sXG+`2PLLzuPybPxc~Y? zDTx%&|ASKh_0cN2f6G?=P5(#BI_7^p)uwv>*RJrf$v4u+5uzws7`zaf$B)$|B(!Gc zEG|o41;}V44($(7O1A9hYJ+ANUgYe-J_>u6VOvMzB*3Y} zm1n(iEl}mE*glZ(hc4mWNgHkQV&ZM!wlQHd6CeaR{BJRrsPuyRS^VqlLnbe{0>2YE z^C?N&@Ydnq^)&Mg>0@Q~He|uQ! zZbEvyJ4T9DBo^0}#LtkRPy)D$Ij$r-8=V`DInb_H@+7KNjcCO~V$X5yJ^~N8Vp=tUWHv%J@a;ST(1(SMG z)%gg11(hWH`gw9-1wY&9aiXGpMI;VCKvE zJU#-HL6VxHdVRI`25`bH0&&rQMX~aX>5QZ6IGNi;+ga`m?JxuI2_!hKlQ)EC?S6x; z`wh#Ao%&K}tdmv)B~B7_jnruW;9~Xcl^7VV_sk0NV#`YaKkfO|xcF>-rx34#*djbE zo?P@uicLT06=0H--oxw=3>D!ih@p*9n3SdUk^*)g^q6^`KvV5ooj?#us_)$oVZcUh z;{yj!0CwT=IUYsj>agX^?-ZdR>d{?Kf6f#ktVvc-{b)eK%`eI$wD6|c$7_#yV_Z8| zY>~DItzL{o5$nq2cwQIvHqOac552%58^74g~S} zgy4hnK^H2V8I*r1OCBa8iQYsCA06+yJoi07tEabdWJ)vzw^qPjOU*k_#`aXtZiLbf zuyOs-Tzhq*iwBbmy56M3GGbr~Ze4``)t(LxKZgH(Zb2R@fE*+;uZZh~JXTz+$pQwH zu=`c|fPEuP3oSL~(*$}3uVz)RyS##^Xm)3F2a@T7cueDqEUb%i1qgjz%*pg@gh*rX zLWXW0Zs!#JVKF^i=!WLd@%xu|zkW?wIJNu=NgqM0)Q%7(^!i3|M6OPO>oc4K{!oJN z&|Pf{rS?S%=acGQ)2oOW*-(P|`sx#^Bf(hwQoo{@ijiZ(%#$}YfAT1E5*s@;44Wf! z(q225OsWcEpzbZp;a)=vSB`Xj*ANd!@p*Lp)9+uBr*km~$+p|Dt(BWx434ry@=2an z5!mO1<7$_m)}~hkYIZSyeo>L{dfoQ z0*=k28D(WfHU4uOzXsh8FW|3zoV>4KM-Y`s4W$O1gT@!HqX-!g?jEqoo}_QJHu<)v zii^Wd=8)$d_^5D~DIU6Xj=IpR<0C#7YcG7IaV(VJGMZ~5Ea_`zvk@`|myMQ~(plPV z`!EJ4X&Nh^w3Vv{-^T7gha%JtRzJ54HYLu*xvp!^8p^~jp{q!!E=no~q32wTi}_jc zpU!B9&yLqH9mcthPn5I>EQ}yrNMkTI^m2O4cqZeX21R9Xij}fTpyMTfUylB4DGGM4 z6OV8Sj=e_-W4lX>q^k2K!d|3{nwxjj6uspdG<7nd4qPVTh(K-KqWY+a&d3iiQ!0+V zZ>;ir(HOT2HUji`>?F(IsK%xBTSXfFre_*a_&>1uU!Q)W|F`th-}HZkO?u{kE~a*= z{?GBGKgHC1)MR8)v@V?UU_8KPYK@TQQa^pw5Z*dVkqpe1dab`|shxX^0nr8)W55LP zLUAd_-P2v+AB0$KNq!~#GjVpYzb61cy zWp^Pm1upmDQNX^4v%)`eaM|^N;G1LP2)H z7D4A!!y0n47-Y(>9m6%f*=*T_QN}A}B5$t*&QwDtoQJ9z8A$V@$@=~+EUIn8?NHfE zuGOZ;@b+s??%rhLwS54go~tVu%+DO~CMPz>OSDRS$1KPlXZk99iO)%i0BW;p5TMZ*Xey@6XW-_#Jc<&` z7py)Jqm()Pz4fe}3s3V|TfW*$S3p@MNFr1W1dKD-oNI;F$K~py1P7>q?@U*)bT_4mN09=F0`2J2>|w zt7ko+{lubuS$iBd+|2I5v;(ktd6?*tlSs6dl2dLKdq`uR_hO2a&h% zVB~HM%V-51{!17u(G^F5z3gsx(RSMHuEUAu@gABo)P;+utj!q^NGZz8Q(nSBO#;FG z)bKOu>5*SQe2Bo+pTjaNVZ&ZRW|UJ+4ibF|`i@3tXG#kZ8%dc?B@Ov%So*b~DWC3Q zd?3`JAJusH%TVhLfO*pP)unD@Zz9m6tTeqP+NqA+Y!;6;rEMw5(yMw`+#`s>O-~6@ z%u`zD6Pgx9PbEuwt=9STg+wE2A#2SKLUqlQJ%s_Q@sDfah-@f5xP(lTF~O6`QQMEv zGlro`3rOu8U#m?%2>m9N%f>9Q7garnv|MYzwEPJAq< z4r>KnRB&5?;Y<=5kC;>Jt3`!Qw`Kx4?k?8d;Aw9uU87jY$=2|txwrRr4>z%`_5!qO z3XUUEN7pU=#bd@xaqCzd>uf=9r&c5KX5q)-(@h4~+}NscFnM9<`Z}Iv!cuu!sm@93 zOHYOE7i;WUSEdeYa}E-24vB|O_bk@|LLa-!S2YZq6t@I*@zyEB*oU9qG44F?(+nxUSXP?}a{d^xxo zM?(CxyP0a-q`J}iL>aeu(zv1uam^AlmqfB-oR`RF+8|ld5iOI}5%oL!`SV8U!m<=k zm2yNHI2sYp$?fN@XIF@Vr60L~k#^OzhM2hO)OK0Ln{wE}b4}K?#quYl+8}b}nuKl# zcxQrxVbHgZ5Sl4wE|DPsj#U`GZjno7fUy)`5;X8)>9<1HCEVK{XbxmTh(et_M<8Ar z#mb3JYiOwSRO-+6{d2$D7(&d_4nFaYW&RM!0ObO_2jGfec$Kc&MaJzLClc5YF6y(~ z_959=xD23c3QT3o1S7MT7tQ5(mwuA0zv{p(57^gvzjaDv)=;}eF;swjaQN8M? zeDYqXUU5xeFKVQ}V_IoyLYmfTsI`KxXcItA{Jc@hPdaELwI@;k>^K&l`k5?cXXh+V z#dQVFgb?1XN9Bq6X`FSZu%f|aW$f2g`~b-%u5R8!N{1OO_A7uDvdb~YDh*NX!qUSQ zQn|0}cE)?cF!x}#V` zLSu|6DcRRr`38+F?lC`(D+HI4rMpxeb@*TxDD1iR$%J--SX*8lajLmZ2Aht~R{SC6 zr&D`y^lH^ZYBr0hlQ31X(>T4!It{|$Cj$-w#!6L$=*jT^qwXDoG;6nZ z-AY#4wpHmjZQFKM+O}=mc2?T9ZQHhaYJYKJpZ%}BPQ>c2&WsqH*_tu02iLgAzRorE z($&B&76oMI=IFGB`Kf*z_PN0sr@7f>A_gOe?Uqng1WsY}BbRrt&*a&X8HxR+<)>UV zb;jH4NV>db(0LpDFXxe}I-O64GdGz^@+e{Ayw;s6Gor-30Da;#jn+4r>yk7rGjrDQH*|8T;FK+?{Hr z1d{6{K@0MPbC+bA*b{i@l!5%)IXV^OmE8L(3PBjh8A8WdQRbbNt@O>kCQb3!XNZd9 zZZrlCFGG;Gz8#lAPD0pxkTz9p&lSTNJF-9>RLH`~tkhLl%Og`2Xv&H%>y~7HG(8Yc z$ppwc)oKyZ>A(sW3qlaDE#Zigk8dvA1)XZNi zyjVlnE=|T9Oj%{?Pp?>4u1nkU9;+JC=50&O1^Um+>2dU|5{5MZHbw^{B z1d25E#ZYT!_!HBF_Cw>f>bciLw^?{?C_15!SBN;v#e^PuUd&F%inr~Q(jiFO-Srci z1FWBFjc63@sKN&(tx|KAwquf)tA!7m2I;{f%#?k|GD$UH&H@jE7p(Ohe~Fb=#$#k* z%*;1?EQSBf0B_~!PV?XjsYKHcSdbLAoRv?xw|-leLH{K&*0XMe?w6{)*ULoPo9{ScViN0j#REa9qni ziwDKGPME#Idyc$qZ~EG?%waB*R`?xU|AliUySZ!3sv*E&7{mQ6mKDn6knAG6i|5gJ z8L7C}Qt6!W@~CYhI!_~>)j2tXH4D64v3IbB+>m@>V3d7*?j5#;r%5@Y-ZiJ5qI z{WrM&ua|ik|3&8cr~XfH&CCk;|JlCMQY538nsSSAw>1gkt1r`-t*xzsHwf>n$?PrK z;jovf!hBwHJ}WdBj)oBzV3;Z*iQi_wcO`ZtW@k#`QXsoB$`Bj%iDkC~A)6%yhT%vW z0Hccj5!sO3Kch9E{7yt(1%^cZjnf%D8?u(NYWAmY?S<)je3RfoIgyMJdkp!t>9L74 zh2ES_PRAT7a;_CRMD4s7l@>6j*phORx)nZI>fhEye8ZjeDJNr(zcaTQmrmAFcXtP6_rtCOzX zXWxt9_9ZKY=Kbmv7@5Mb@)@6Ss28_%ATNB6poHk&S@vOo*))6ii{T5I0mVTJ{?%Gn zD^!u8@3Z#g_hBnW#E)m$dl#OIQ26ITS+KcB3L@FT?5ey}zco~>S&qR3Va42aR9Si% z3y!2D?B6rB;r%VayO}OmVL)GwP8j7YV`^KW0b`ojJCMv5?3KHieMpR^1iwZNP?PC$ zIfg=o>9vANr?eC!{i>0w&AEx~{PEu5Yrj$6y&DI{M))DRNj-FACnXW0%2oE(FrUap zLZL>iB8~}|^_I%EQMGqc_f84X=1+J})=x$~n=|b3ibP1|7d5o7!+CDBDjIS`l;ZhF z%@)DC7=joqI@3T4D3s0A7E>$^cGIwJw{8u3UMbnSjd`Kyrp6^|WSU^vGVo$Lw*_&Qr*I zm@DjUuDrlTmdYgOEvGEK`W;*}BE?`EytIG(Hzs1B>@Et~L7eC^1y?tFN`=ga)#Nmc_(CjL0#5iytjpU^ zosvgy(2_xM%VY?tXj2qtiWK_=Qu4*WfV-Mn(jK=OsJwCERsv#lmfR8rgiV0CfHHLq z^J|Wy$)JD=DSE%WDuwf$uY?dBx5{MYE3k-(T6~`_c2k#f6YSj;r&(kXg5X5B*OM>SMYc~x@ zWZ4pp5s@(i)5^Qm+r0!PFSI5TcVbovAcFzF(0Y?1)^Lv3O-af@Aa>_-IQ_N^X?k!{fwe;0U<0haIThpff(1)rl`c+#o3 zr{AF8UC6ap;X{Jh=~|x87^YcYay&j6zTV9!_%O`ib<=%wh6Ev8Qk55Q?w!68Xdl_T za5iJazI%fI7Cf_$cKNA+`Xh>2mi#&sVCW22z0{GQF>m|Ip#Z6`Jm zo3JHwLV8MRsk7;p7Ic~X?B31#iBeD`4vM!}ts(q3ocPTq8%#6etUdWLk-xcGA%Li`3Pn#=xDI#gPRS|C?O?3Vkwf+an zK$*qCk{*T;e7*P2On68|FRg0VFOaDbC8B?W&;NS0hw)$3o`3592%q$f|0g~x|F_x` zjx9$(Q!__IDzTT0I^tU;HfvMLYVN<88?rkwdV5>QUSKI=%%Um@PaY&$eZ$+bNsT zr(+a@3YR*(JjI|B3LPO?_%M~(jymRz;#gJm#q!TPcF<0K6Jf?t<-fCiu zuVlZYwD8}KKsKVzV*UtR;Ti^3wKl)O(!1*=`NUE0sReD0C}j;`3m|(WpZv4xVlLpF zM?@|{FKebNev@L?i{hy7IQdO;UIgNH>-T(lffaPyAqHZ{?YV%o_ZY$A=uLo&l8-zZ zLQ|+u%u8`l?0o6$)VZ|Wpn6Ph)nEdr)=+9s+c^$cuh=16<)oCd5=#(g3x^3l=#EUV z_0p@)nG;YWJSJwvF@t3kSarvGl|bCleBsx5G41-or0z#rFzw2A{IcB&WQrUOC4kP) zJg#m2Jw|IQd~p6#$$ipV{;;5^8XiA>@$r7>QK8Z`y2|E#=H(2E8!XfZ{TkHWKE$p8 z2YtINDo_W5HxG1ghsi~48cvUJl61Q9N)$Dpd{JwdM*tRYKLPNd=$GnDDFKa>wjfKx z2|rRMypH#4k@yo`B4xyXH`isz)~FM3;Ob8cdn8)aB1(e$H=uGo@&P;hw^uGk_oQ~Y z^R|12bWOK9@q7al*Is<8#b#8?*9c%-qnK;}k)Xu)8a>eh?9Yw0#5ZWswvG)V;i1g^ z%;`pDwM!|(3Oobcm~|%jTfyj&Vz&BNkOS>s+HXpHGCh;her{&E)X=IwYXqo8qr^C} zu6^o?C8=uI6E;V5=0$`WSHNfs1@Ee+9SJxUkU+Sk+vl}^o$pyKA-{K2IQfO%QWY;vYrqZoqMW&$9zul>}*EDv;ur zB&6!#ENORmS`<%ZH6R)on-JSy(f+kJA30TeHbHs(B|6tx$%NLZI% zGC^FP)AUho231rYx-!?4s$_GK)}CKtkKSm3o7DtsB-`f4j6xOH>?$50*L^&E@|Fa} zgX6mETyq}}xLr<^dj`;CMGorUkK1<;tcE{Gg;`hztJqW`;D# zTID#I>6&c76?%B4BZTqpt$=j$mSj@mPLi$Sxl;tA#zzG%ddU*%8*j!IF3Ptc+?{j9 z0xAvMI9<(=xzA~k2Q}=5#VQ=QfSNEN5A`qNXYl#ZXkC4ceTr6_3uj68!9T3{>ga%3 zMRX$BiHWQCeW5lI(QHI=id2i>Xv$RnxnP{D_WdUOK7f+!?Lf?@Q_{OVLLq8 zUF=I#UA2DtERFPFQ#nRB(;>!MF~&bwO|QMR&ih%8Wl!c*umB@q7Pn7nI;|sV)cBNc zsG0O5N!VOeYKlOF^`P z^N;S5z-oVPh6i5sncT>K!@d7{S%~ppWTAiR|Ac!? zO#d^9N!83|<8Knv@h7T~d=K1j2T}#1q6V{!Tp9NkCnUNV_$EEeju6(_x0QZtxrgp& zI|>PnOUh+}ha5eCaLX825`&#^&JTx*f*P(qir~=if7h!d6 ziJ@2BkKpE90kOz}7#MfdAWufiMdRVTPrSSSnL?sC$ef2)UmsI1(_65}S|%dt1SEsN z*IE@+p>bkwd6kqpY!Tk}9t=_nExb{5BPYss{)c+#P%5-I zo$-9A#85+2eQG5f<=cgyAMq8m2CTl`&OmZQkO(Odtq0wWz?PZ2F_o;iTizC~R8lxM zQ@;348?gs^6#l>UEbZ2~U69K^4M!LNDt#DiTKPdLl-Cbz+a?`LQ_s3LQzj6=g}!Lr z7VL!mz&J|M8YbvF_00hs1%WK~Q5@S-YCW_!o`c?e-+*?bPo!aITn;`tk#i~cSs^9E zK>1>_v&bm*lqfY7px1QinYIfH@X)F z4-H}2Y7t7+`^^i;Di4u)MiV^D%czuwuW#U7R&=P~MJ8=+4WCy`2mPmGmPg&KLgr}h z*0q|2JOMNT|W zP_Mkem-jE$QR6SMo*&T+021)5OwQ7G`1J95RZ&!Mk?;-px~h2|jP23ZT)cq=L{DtE22Iy70-2;=rs;k`R}F7ow4nJ_AB6;mb%2&6LKMx7Jk`as2wu-+lcc^A7oJx! zQjDx`6n!l1_d##%4HVteE$SW7&+62Uo-s-G5tP-4Wq+tl39#)pS9la}PvAeFh$ ze5`GfvULuGT`Gr)00wtowD{qaqCu#oCaaFc8`B%OVEN)I4MbjigRZYI{z=<4QT!|2 z^dgRCeyoXFIpMF7v?Fg0 zqLCEC!pEXCUa?XQi-OgS+n*lOGQSOf>b#S`rC`vMIeiwgv68!S?@(c4n{;xmx2!nU zZVdt~9C;H;sgqV!230cpuN!n`%XlXN_T2EacZBJ=P*I`b5wS-H6N z+x!MUg}Q$R;XXlktt8g`^o1Al#OAlrT(_cD7)zYf4vy@|+5igb2JC5KKC$M)c$Wh`#7 z{L0WJ(28ZP6)td3c>MJlPgBtGVM`8)dF=n<+hmtEgQ|Swv$)8d^>5JiUoY$c{zcgN zr~Z%7MgKq0HL3RgPx`_1*Do~!Q;l4sffNcWF~6>4r|}tP=O!R=M7G9#BZtc&XDma( z?`N;Vtwi04I{jGExf0^n%>WnC*OBq?8W zYk9|0=X6g4oohgmbN9<&vK8z&u${Q9Coer@a-ar5Sshsl(I2#rwL@44?MGY0sX{p< zFjMNlOQk8nqdwJ}0#hAS5r_wgid6NKsEo|0enm8iQzh=TxqhUKwJ5FXhuVJLqW)Uy7XO=r7Nhpq~!?7C3)=?)h&ZbvG{S_sRVU&^v ztT(rO=R^<24c6X4_I(NLJAP(aPLvM#rrL zA%4>gH^5olx7khPFC3g-vE4%5zYOIW;y;6SVmH`m(*a7D-!Nkz{Pd+j-$E>o*c+kM zOP8``M*%g{xGzB&rhz`P0z!P_!W!YWB5)%XbHwC^=&{)eIX{L%Y9zN3=7$f~V~vys zT(#6r=F~ysxmI$Se&r)Auma)s%sw!FeZs;QEVW3@IiVD=Ein6xhGwqj4HuVuZj<&we7YVSQeX!ZQYe1dVb z@bE+6BIHLn8*N(jclOdlrdQ;a+sI zg@(ERR-aYAg-{R?ZQ!aTHi=wb^4c%4DvZTQmTax4%{y{3+`g$0+EDf9bC!Ik7TUN! zM)B?zXv^-3`0crXDQPZS1$b=@b;xUZ(*r(+p~M@jPf|m0!nC<^ZO{!#f7LL31+wS( z9db!UPt?;7P~A@TtgUl{kAdu{vZBL$3<$AXDi&%9s8?2W%E5AnlB6I()=dEuZ@gyt zZrQJ7;5UaS4~7=Dj|OC}b}RiA-^O%!s7jk+4_5x@dzKU6}f6uR}RIA;17zmRWJG z`O^KevR`h+3%i4GZ7=LM)f2IjSmZv32;%CNvV$s@mSCMEK|2kpT6fX8$=1<}s!ZP( zE?4TWQOApQ{Up(s7TJ#d;_Gbfn<%YBY?Lj5QNcTU(A>yWnLkLEIs~9@zgVf!{xIG~ zkLNl2U0@GXpoN?*RpcK~`7XXh;qwac_}aajwS6=ocC`Y3QXW!Ud$q1~Gy+Jue)`K> zNq!&c7hGTP?tNEEo`}+VuQj}KYv6${kW4`M*w{cfSXa7(n!gLom@q`uXI`61PThb1 z$lv{<`M;3__^)?n0RQ65{8RrYNMd1S`#(<+2mkjeB9uPG4w{&mJksM_6*gn;d0Wvq zhsQ~X5j{@#V3av|JaRSu)3ys&Jd*f$nHDHEj3%S*b+*UVuJ}VTxTENPY#4p6SvEZ) z>4V}Xfjt_e3^bL{$XsEguq@SwGL!`G4D)3#8g-!aOO)bEl)lWk(KI$q%f<17TOwmN zq{h^#f7f;AwfyqHk6^p4)KrM6Ii^~eH5-NmD4(Qgva{L7FuS3>liV;OXm#rXjEF$e zR;wBBh%}{_KaPOe$SUarJz&Gt0z_DE}+{ht2A$Mzb7zrTZ|xPYe-=jvy1$ z7ymDn3LYr)-tGe}M^V+|!nw$|WzKIZ%RE1$EuaqrTBwVp+ePP$<#fKxNL$zS+ME}JS}9JWVUqIBwWZH z?LZ-{zMD83RZL=aJ^>C!=V+pyOZ5loNqC)ojk2~$kWF$e3Ym5x#LvCV78#8iPc}8L zb=zD<^1nY++O>M!>%Ba2Gh+(% zbeD-F)FbomC6E;a+VNc0(2K(84q6;8gg8&a);TcXvi8TzkRnLN)Dv#feax2KLD!&y zvY$IVP`Ai49|U#Jg**0P3sxg!knO=N!m^O_NL?fTy~^y1L*LagFEdP9x!iG&b_pj!nq`<#;YaHGEXyu{i!E@L z&5LU$ch*BxsIHK02lAwFTRurI*bHCNjHrT_&)~K{834K+)IL^A}RCre@RofXxNdM$bHNZuj5Im9I>Vbkbk8x4oL-O&5H zN{s6^cPvE6StzZ3%<3D%b6^Xukkr=ekW@%sjI=w?VmR|hDd=YCyHbB|x~fm>=xbuW z)1`XsFn;sqCS}l4>m2)y;ANcRCw(EQB%52Nk-pOU z!z6I8Is2~q=o_^95-NnVI7NZNY0-wgQIt;g_qFpIk?^q_KTTU-DTb3)x(6yA+*UlI@$%NByuud%Ow&d)J>4DUcQRiK^&Zo+`C#j)tLEV?d9VI3RYZ0QPbz8wUTb%cPsR5^R799=P}<6kdLg!sGR@syc# zzfnTY9bP7GWUNJ`cBDozH*|XzLAP{boi0~NJ#%(bA$7R@ESSUlT%hWuZM~Rt+}**q z6*8mzQO-IsUo$FfGrj+iE(>zJK{Ne4H|3nL(F>qAWN2nFl_-7a01bPPa3ieNkUvjF zRH-`KEe{D&?LmIsx%Buk=UC&ycHr1W%QI_$2u40Wr>AjorVjnf3r(1yB2@2a0OB3` z6?Wn_u0jIHI=dH{`T+zGpkN0Z!g7yMm8c-G=>k8}9&$q9b67H%hZ5#1aAluy0=Qh*?nA4(z;hW$p9>!mLG}ckELG zu=6QUl6u1d{kVx5&EOvfjk5_?wN1?)a|!((ne!ox=wsg;1AE`)AG9w9hUkWP0g;l0 z39_M83}^HV2YpOKdIt%8w8Ka2U^b~l zXyj;4oFgda$`aXq-+d%SDXv8a>HBN@P-sInRo=&0>A7V`afpq-Th?pVV>5T$ay}sc zC?ssLlpd!c$Bc^A2x)v550D=3Y z8l6%ZFge}5BuSVtW+L@nvn=j@8zuCNf>9Jh24$~^9S(c>IZ|rzp(0vI-kw6`0CBQ zTKzUTK4)R;ms_ni1MRE?^VR@|tMwjiPKzn2Aemu;_;vnNjZ_?#Oe!k7rfNq@QAaWV zddmpzi`0O0#a7S;XX-J0tVaw1nQrRIV%m2j{|d@u1_gDS*d*~u?>a`h9&EjkPNSvP zVA9hSzmXEEq{bCur1b5lxwLHD6H1*zkLM{!xHiU;w2+g0S(y)Y9TigRNeK(W9=>0( z`@0P%iuR(90GH7ST$^f((8g)`thrKz^v|ph3S<76iF`24&%jYTuyM~tPvu9WUIp6o zpm;EOUDjsC^fEj$Rp={$gf8IF3xPH<`FI#y-g$Ub))NOw#^CF#v}WA2jTC?Jt%nEJ z6wHsn(H(2z7HD=OtxQ6sDFiyRDA9YgX`M2T5n*gZMojI1cz3>EewKC>^X}o;XyIff zWG$TKB9(Dt#w@Ct2GoWagSt|x3^Zg^uS@3T%{lhylP%K%)$lQZhVpWjD@=kjF9eO! zb(LxVE1jrr>H-DD(!&<^m%)?TfsLre+K7wn;lA9M7$x#dYvtikHhsN?fhy=X;Su$N zW`Li;72)TqemC)Vvbx~+`2Jj-ymKyh=I6;%h!APu{WO9 zF6}ectD;9)wysr3t9H?Z(LnrCwwGT8XBDLzLE7>2VeeMD{feULiL|dmEOq#~(0+5QoS&Q9cr(}i(|=(FfH$o(ZbjK~=I zqI~?0y!A=B7ZzIBFDvpf8ise*at<}Tim|Ts6n74GI6atZQ1l>-!XL|ql9zLn0CfC} zS*@j8n|RoQX4&^<8B{{3ssEvw&S}K`1nR^66xnImUB`NXXRPSl%lL#PEBIl}$61)_ zHr(abBg?}_b#fd_BFm|fZ?m&dO}ksaWxAs3OICIGHY1E1ZlzIhKZ z`!Gznw5@rsz%-cUNNxUMN^FA)nd9nJ!Y-N>MCV_pcJ+~Y#6;vP{6m6$W$^03Y=<*q zslfd2mk=1g97A5Vn2DW_TqX=-RYo?Ed3y4F)=qYQ-fWRIv8o&C#bP5EXF}>L$Z+BN1K0-?eMl5K zw^RV}YN=W6#?$?KU47A&mwT;5&gmVwMP6ek-ct(aPM20Y14K_5TzmITBLsbwR&sG} zR$%QG*bDta;cS+7;2vJ)^#&JVY-YogReDlslG^<%$!~#>j9SPM8mEMUae?i^9akb; zbKA=dHAUclbn%7eak7raBC8NwopCmks_5vV#n=oP+-MEQftiL-H1->+WY@Pu_uK>b zsFe#AWGlOEQ93-}on$%{w_HEG9deBwHh(-*(od+fUl(Dt8#}SfzHW+2+LyFs?lRm*rc>Th)ly{HWl3y;0mWLj zW~2I$g8G0O%)HVZ_tRzik4Oy5ovS92*%CaAgh?WC^1)zzJUMk7;?atojI-?R`fgVn zD8*Hgk@F~do2&;dKAlCxOB8!fyBO4LTe?eN#9h%xnQTK=1c%2;5l3sxZ&ywh(p>b{%Nxl=6Im(QBLx4*=0btmJu=T{`A;Qrmeby+eK!(vm!85?*G^vy&*tz{F_P^k zx#F1)Dhrk9L>X;bY%#l|(&9e!7@V7M3AFJaU(MY$5fi0IZ@p*Arw%Ih!S%ZF$qmt| zJD1`vIuJqwvuGc2;EI4NGyX3{hz6p==-R!4Q(6?um>X4I6MaeYfPSrVG%(iKsRAloBd31lQ?T3ZHa`#KpE)uxsnK}~T z`}H*)3$t?)bDm9y!kaiS))>{V`+zDHh#gdZ1(sp!SRN)s9Ty);hOg_&mnFePRaX&V z#8D8$i`VL3HpsoK+2oZkZK z>gq?#*^Ha&bf&#f&y+}8Fq;on^0xb8ptY)qe6hFhpn<`KmLqsaYy<4Y0}di6b-(@? z+k|tX7lSScXUjwrLoK>BinX8$3*et!i^O>W*Blp2QM*4)vp+CUaLG0Ib8o$%agWDbMyb&-LJb7#DpLEDu|0+L}M>R!l$VRjYIS{7o^zW*IH4@&f zAt%p52-w{Wq`A}F&Tl}}ih?_&SF!H4o=Vaz{D|?-#qRBg8b2p+)%f7tZ@AKasvIqb zB3D(3MhT{PizV!=R!7U_9x5&0M-gATCZ}Fx1a`0tPrh`K^8jaJwHIz6c6)*}rM=>> zkqnw6&b3FrO(Dxw7VVZoJ#FLZxsOVWDVt4~i-=VY_qGUk>d$KdFwjhM$RrkRRUnRY zo;a_3ogrPu|DIA2Y@FrWbQ;B%L=0{ZJVY;4)IgA1FX4Fm7H4BbA$+i?T;X{ov+tO6 za1m#50$l@tpH`s2!`v$Zi!;U+(y(qtf@sw3h-E0g-~4Vtq(T;6e9h6^#vHLyz?x~MVyKFRGM<&hRCIf|Ipd+c$Sp4oGo ztVM*^AaIC98Z!dAwJWw8hRIIOo_T0nm~kt(39~45otK_GF+zVBNvT-cWRM+FEd$o6 zmbl_hrlcKR({;O=SirR}gO1P{kD^CU<5X!9EMB}wqQg&I zC*TDvJfpvJoTB4AoxYErMwsYnb+dlOCG5Gxzi)0y@@RuaZffTPi>6knyYmz-WG0(E zixfD=iS-YCFlALd5FP*W_L#ck67&6pMH-CsXb3rN4oIm~iy+(lFR2sAa2vxO>w@kn z+4x9qxd!uIMyzhQO-;OnDw! zOtO;!HG3$K)~=a`LrH0%H_3WS-#P@Ve~3=pjBn!z=6WozQ=}QXBUsxgM_Fcw@Vi`C zLb*=yCt5?T45N^rH#X1GhhXQt0v|Il_*l-X10q9n8!PQx#0<%Ms2r$MQV7jXEIF(( zriF+I`n1sHS+~n6kjK-Vy?o#du_&yRFv!ynz~_79<9LR2k6b>ywH3GbK4WXL4N7zL zv9JKeI5~6z%CZ1K?=G9)YgSaJ7W}!VRb`w!>FquH7BVnSdTFmigZ7XtQG{h4SrDV~ z3S|@$-h6}xV!zQ%%kQJ29n=?4H51Em41q-Yz7$i?D zkw()NSrCzz?JImtqMSN<-Y>&l7gWlsArqVX2^0>sqK=zVb3JgFq>OnG>o$MfgR={D zclX0^OYhX_8E%i=VeyL~cTo2A{~cYu*V9fU8N3bmRe|)HPhO(}Lwu@|8!PMi-XPYc zFZhgs&8~P?$$746tV9(aud3`~mbGt%0<)cIpyI0S(F7v{cv-9q1zHwXI+5hkfDe2x zGPC=ZoLD*iwEzjFGm_UHgtXfH1WI-0799e82hl64wRI9UMh{pN+T!P_wBqy4>9ojBlbk|pMmSVZ0{ zj+rE217>Y`vwx-J)OadH?A>faR7-R9Mi<4Y2qCY9vl=CdXQo&{KY^{8Wt4sfcsVN# z-i(kQC$}Uh?_a&yW%tU0Bmp+yzUU5{%_ls~(G*+jp|r}^w{jsYRC`gGG+D{#<^;0w z2qX+dVJXyIo(~r~+3s0|W1(uU#n4d$qc+-_6q1$9L5eOQAqMfj+SVx)w*qYA9pYDG zb%bQ2OYTX1E9H+LG-KN9pDe573BZPLp`RfpNZDa{$ro^mzw--{bbqDLdPFa*QmFI!RGK4aoB+qbvr z*Eo%*SuYBl^gr%i=%nmlqy7!n|Lc`8rhie!{;B^Hth2EGkBp~Hjm`g+c;Edu8u2-G zf+XdAX|rIxFwJqTu#(%Wj1w0)HCF%PhcoZjTa^mZi41Tcs8YhMuT0%a=jOJzq|)3q z9UFip&qv$SL0Z>~{2!`U+ni>cNBl3UC+v7I$j5#HuN3#U@JL5Z|Nd|cWnw}4*H(ni6&L&DOt|(CRMckn$Ye6#lrv8phUj1)@nphloAXgrd$pa@4&3x5VF`?ZkyaC)T!rLY98QH(5kj`#9UkBjqk-8! zHrxF>mzfDFl8yl}gTs_XO4oplzp2KZ&oi4IKN2x2<{)Ryv#xZfx!2j?2l1VvYE0eI zGqI`~n|n8E$J5tA8Uig*H+}<;fRQ0@U4(LZymr+cOnOk_^G#=8+bhV)9ukv(k&*>M zmSK2As2y%-RFgck{A}06vQZz#Bv5)#SwSMjy;l~9_XC6~w_8~S0|zHEGh==4#(j|i+veDT&s z!L62|=O_)7N3`L>60?O<_NfL8HFFbGZ(y-*d}*R$Y;ZR}_bf8aGk2a044o)dCm4`7 zxT;fkMx}(viy$yEMwlzE5$aJ@aN%(y`$;DF{E!(fEpUVtGyS;(x^4X#dQ>oN|DNz? z7#iM}J$PCj+dfV*d~TU;ClFM+l8SW$Sy7u?b~E_u0P+$-SzybPm>8lF%apgqXGaR5 zmM6xR^fPbuxq(}S$#W_%3Ho2*NMAs^F%E+)IdIeuFszN0KycCq3MK{RmGbQ#qJul+ z`u;HD>v`Sa-tF2Rw9Q_yw0p;dOKTp{t;o{NqU!XSynkbsz9GAK zN3N#OfanxNZ3A#9P_q@cY(*%6lL*F<--erK`DTYdG3k=Gv?$!;>xr)=!511@;?PRO2NQ#$ZO>_uV9u=gPE{x;Kg1NP~G zEx-L-xS#pP+J%qFZ>BQ}v3_KtZ7j6bn-;!;%h<8b@{5C1OyhyXPfR)dV%QTvSlIE7 z_0;@*>(e>eTN`RRl2O}ftIa?)Q$0awePyW@9*d%Gqk7+z zLt1o|p3$M*=eFr5n`W+M5z6AEbRlROvO}g_;{g)KsQ{s*b;YjiJLWfo$;a^h$ZQC`a9wP`F%+}7-rsf0td?e80m^>*72pN93Da*~QClNon zrS!7*yzwKG3az;9%vN+&f-Dvm02HXj+q-iWJ$T%OR*ZnLlR`6+s~SoVk%VklMfE*X zdLAD{PVBrvtr;JHHB9Y7x_pOz0Q)532(E`yk9wF+`{WK^|HgT6!6?FBtOwz3dv#u* zpL^`p^_dTpfrrb9V#~7WAge1APjS|s)~>D%_MtYdKvis7U|ZP7X9TXC*8BUmX}*1& z>xt3gxuf%%BN4!$GC_L$@ysP~JAOb9*em*gl{tY;`rhdD%u$Gv&l%FBW3ZJpvGnew z;>$!&BH)BLq)Cx!3T1r*+rTuZZ;_uqST`>|y)U)9FUN5VNxigX1HEQWiP1nH$u-DS z?&I*mPNQ@bnNFJ{c)102gy(iZbgsn!- z=cvdHo1n$Ax>MvN2^ygK6cdjMGt#uGeiKBvg0{sjj*;y_oQTxx9E&)QUJzG1OuToB zW;Ug6W06OG5E42C2%@Fv5U1jVRq5@uJ7nRIfFHJs!;VdmSHuVDTzFcek*I#5EG-EF zS~feyWb0{jS7;jx3nw!H@4!dL;!F+V;J%@JeAsKGQ0MR~3w4$VI?$@vu9wJnt*owo zewA{5sVp4;6!!jaZGjoy9SxX(07Xho94;z>ZT5Hr>Vr9Yt2#b8>^o^`Qy+RsZUmNK z*Fp|JL;=k&(F4>>aWfD?J)K%plER!YGRRuyWNY$DVlCm8)*9b-H)3&I10qR6;d{t? zrZuGvn1J=hMjC4uv5pX3-6!TaX5S#FH)~n{CMPYT4!%T(j(~!bzXS2U#2F(Ia$#+P zew66$mb{Cq%*dYPzHds|f-PKUdd`WNyR-VS*kkbXmz1NTWcQ=+62;6S4!>jfGFm$k z_{N)57B!$BqfJrJW34gaiV)0DSri=>@c1tFWUJ43VK2#7=TdPZj3tZzG-{u533^Ba zF&YAfNfU}U_A6~Wwg&e5?4^F?OHGSF1H5w-&D$d-_4ULnm@p#9hq%lkEa10j!3H=a zEz(SRflVJX`3-0Lgp_QDkHRY)A? z!yxqm-y3_BF#@)!NXe@u>XjX&f6)e_MSaaC!p&~FE z^J^)e;xjv-@h(3H5ZSQ%v9l*Ae0w@wpZhBdquBHJp?Fr=Vkgd0+9;h;X? z^`WJUtiGHLdyYSze~h&h=W2LL|DtjBH>WUz=>MVat>fZ)mb_sk!3pj*xXa*9aCdii zXK+h!*WiQ@+}#5q!4upexF)y+mxSj)?%w^~yLb25{k+fn$Ig6?baz#Eoo`iF*PPRH zT65S{O8L^-t|DVxcU*uP%_TtHRWdV8eF>4wYpKc~B0w`tr+qC|sck2KBA3okc3PF~ zAvFKFkSRXIXV^Vu#f=?Qp{;l)5DF!c4XL((H7pAYe<~+Hcr* zx-%%m)iDC)M{_nl+Gj7nq!6g*uf26veYdfY9fq>Wjp}>Z6pS2O>{z`Dji;95l)3RM z`)9_NGKxae#QRr%X_$#QC6f;3O#;F`82LCJfsEiFbogdGNJG$qY?<*hV(!teOYR4U z_Hh)vo8Qo5lM!fI;t$y}lX?0s39I|qQd(i5SW1m3o=Y$h@lwS*33SlUT52h|T#>Fe z+Cz>1Zg$HTe;YqTsd;*Mh}LqdRY;EIWoOAF-v5l^MNGKHu_x&j+H_zPs104?*DIc` z2*!~~3FnY8oOg0M8$rulaLI-tNd=t=&#PEkiurr6oz6tyvAh((Nkv+wZCDlYcXRZh z3Ka_U^@_om(NYCfhfYIi=Vl|47fehsX*Va&Y0S)*#7 zq%lxPa3P{#?i)-}Jl=W=d;4BUA!JanIl=|kS1`rSRry-)`rb;>-~ZvKOq?PkQP0(W z!K>dz!Xx^QetyE}-SRNzW%N2_RIuLfLgI{q43X44FC?MPf-?jt=x(sW41&L=+uUR3 zh<6FOIiMb=v(YREZTPi|QyKMMK?atyvWnK0J=I@9RdjF@dU1O{JM-Q_Sa3Q)#@FpC z!N~}GzW9D?o%G0N^aHShc0n%b&ga2X4;bS)k+dleZ)MeK7*fXigI(X zJsdFUqTZ=#6eb_YAsHy#6qClMW+ic*^ofRNW$waWZU`Tfp9iV!QlrEL$pP;q(4;m0 zi4*t%$}MYCncV>8(qSaY{CPB^X&p{}QCN59T&ip<&(um4qvW*7E(&()-V4!h&pX1= z!^XbYCS02brH2Ml%FHHArfDzK4@R-yuDt#wVzyO=D#OD-raD|P?SRlcD{LQT!j@EV z-@3EQ($!%x_GQu0ji!?GR8fS~9O)Ix^>Ekqj}z}`N@a{!P{wFRq;fmI#C~_SpfGgz znvD>WHlcB<`1TZ#+Ykxzw~?-RaMVK^%wh>9ed2LE_C!#q`F2w5a%$pU%B%`?lM}S^ zob+2^sv8q0hoQ~rIk^+kY9(9J_7xoXUA-0@e}7>X!NMU*E!$;xq<|UK5Gy#Kvd)T3 zA0z;s@sS!4qn8#McQr1~BybF5Udq|fPazrL7e-0QdBQVeKI9315rU(9v+~xx0(F<%+WCL(CIW8eV4gqW^l457)lMh2gua8-5e# zkFvfZ<6BZ^ObWH{H8wdj z7M^LF4%BhXFq$~%@Lz;=nO?_Iy`;+K(mH;u)s>~IE8%&!-788nRr+Sf`8D$R0n!ysF@ddpFjlayj$l;x{8A2|1flP4*lYzwUlDdjZ`T!ejJkwJt9Xl`x~kk~=EK)> zu(sZP!(|BHGrY*(!~r_*r4^L*i)(k_#g z)E%Dh9rAKaq0aL`n2RJ~p(>~qY)2C^cWs*_RY_jV1Cf2g%(l-yB(7ox?6H9l#V}Oe1SBgNFtZgh&plQ~MoY9+WuEgr=_~6#y=iU4xdeEzydCy(|qOMY-vPz%`lB z$P@(TokH>+@`k9+`Lj^;P?hwXx-*y={jK5e}#b&-t$4~n;ri+6` zV+QY1TU7^5%koQiq`iNdXHKxb7n^S;iTX!w*M6Z{iP}|ym)#_yVbH-@L{x#{Nq`MF zS)4WMDxGOfBAw8HF$U*DdZ6o&4Jrk%CiwgN3uaP1YNO)FX|jomP{n?Wy_DGs?2Kh`EX<2?Kbo51?8(dxeJ!5h0rUYAR4z&1qwtl z{#x3a>^RUw4=mhWn76_TSKQC~ooKKgf%^H~jtW?Ngrof#yVNz=IOj9+e-SGEub(c- z`A^d&pVI%WP>KB?Ru!(&)lC5I-h4m%jYL5=j#_KtJ~SwwSS*_bQk*=3@!7!*nl1UD z2dr?>x?6MX;=RvySgcdYtUm1$@7zhC#+mQT3X^8VCuDH%E}q*FZG&GALf9Dz?(As0 z7K6o=Y&-kLM6aMoktPK_LW_u8pSUti_mPU)cCChL6@l7sGMVq*ZrxW}%SF-E0{#__ z?i=d+Ta-@^;Wua&@^-COCm(}fMROFhHPdnc>qp5%CCjC7rz@v;k4ST$@P*BMpPfI+ zvWgqc894vWTATUXGk8X~pC+%)H;%BmR63+W%Z0g;Eo)fi7!?tirm)Ht&-osMnsx1p zP>ONfg4MG0NA*|f>!o}zuN~OBclDow?0@%ad;2QAn0)+_LFC=K1Hc9_@uF88m}0FOPWo1%n$`nTt=Oo@{zj# zOM)j1B=21}_^g2P+cRKmFQWa#rz8{m4@?PhwRl(KokI<}Lknv40SDy&cT3TSp9QXTR|J8eVW7CDG(66HF)~R9I1*(M6 zNl83?J99g60y%TY{#xMF!+n89_m!_VEE}zOH_Lt_#6M0{(~2u2Q)qc3DygwXm^xML zPp_9`xgED6;n;^ zEpZ*)NMYco&xG)X$7rp$A9LCVPCn0d%MJCF5FqCxDu%@Nm9anIAUM_5y|)<;QGYFm zAPg_Xn9U^FyF6J$7{XXWoVFu;G)#!RsWh}E+mX^+_N5?6#kp{b=S4u88pl-dYs#hf z_Ts5zB;w)%O5%aC(TUqhS;B>RAoC%?V`Cd-u1IcDL(yO?uBXA_Vt(3@pOFArqcepzD)@7YL9`%^0 ze&?XyPXUErFrU7=k#s#{UTA_CdI`Q43K4v_k~8)PdLwvk*NwD4Ex zxfQsaGE=_%z^~zJzDq4^!<&p0veKi>E{Ag!@Nhfc1tANHw>HX*nO7yd>Bi}|+EZOG z+svoB0&jeHNkHpKUsQ=Drn-67dBvMIErhF`Qz&Z;_KT@g%V?=s0xuB3nqd|(vHXmG zE{IiNMAM94AGhKYWgyY$yM!gSnMmtf!JAPZAl9w1&2qDc9oW-Y%_xDjuz}kuM#EX8 zuQ~+1Y!~7mj{lZYyBdCc+*bkFOp9u;5qb@!H!$>d0xPyM67GK5niTB{8*4$;pVqk)G=boAyFWQ8McaA z-P(Xuu(#;>!Gy>OJ-c}!hI3%4mnfLm#An^p2wR@UH~@OpKK5g&2F!&(WV5nEhA3oN z(QXLg@cy^ia#6VF_Mj+)?-I2vu{}w=jzp7H>E$P?qn&g)%#U#0H?ISvKgmULd5eH9 zUzTGvdNFj4yW?G4vmxk~6U9hR8h7g_yyf5aRGh1yW9TXeT4GbZ;o+BCpL&?Z?@MZT;?JC8$QnViQU7qbT`E#d zqM#ovIQzYJVme2>Wih+pV>tQiE8aZ?SO18xDuKfl;lQ=BjI`ym$9? zP=uuIYKeUws(MeeATGH0Ji|VeKc$?@nruJVD-GGF{8e)H?ejstFMA9xHuZ;O*6qL> z$c~r|z)Kv1hQU8U2Z05$OFnF=Rpq%U647A3foib2&wH~Hd)re!N&RC>?x=K@Zgbo+ zUD+kGUIU+tuZamXOr(x>3^(6+CQ%KFZc03YH_V&JFJ;p&$0g!RuV34_Wu z7W%G)nTCDT1(!|9FywXs!$1t)R912;@K!KSHyk2 zl6vYWJUBj%>%*5?M=|TC;)KOU%fF*=W}X@fla9ME-c5-CzCs zC)c*#Tv3?FX31l{qS@dAX8u>;UHoF*C*YC%7h%x<`Wd90|1^X2DgECFgTQ>8|L`h^ zCf%opSlhrutT*Z094unNSDk#B+_JQe3o zcR>4%9=$Vs8Jc9wB9>*v$7cZC)Ug&BpfYRxBF_GaTx6t=ODaDyJP%TJwPcMsNynJ; zFcST_0I`4`S=OkR^Q$?#G3L(zHsnAwnQ=Ie@#j}vzv(j{U<(pOKI00H4IzV9f^N|+Sa))pXaML4e#&^{ zlPmhYP0+;8CRk27@f#Wv4SU)$_Th9lT8VfUyV`upA-sifWWF5Kh>BtYrSSqumYmGg z(~8cOMivTZxZfKQB03yTU%`?cVT}$EPQ>1%K)H=7T#W2=C-;A~-BF6aV`8O?xpN)+ zwF(vgqM){^mbp>eP{i$crHd>4;9y-GEbbqBy%Br%fq46b@@+sD-QtFV{4u_k1EFUz z!51+-+~^?txbJX3swc{&BOO|QzNm&gFD18%r>uHCB$Ut2OA-zko0ee5m5tE*G?{$BSnH-%hr zP)zSa&aO|-6HB0W{Y?%|0w%01?gSJ4_FHY<^m0XvpYLxokg8OXXnc7VKWTT>yniOv zBm!&RR2jkGv$CH0Q6qzpa{V=*_GarwTikHB+@~QNGi0Vnu;R0w9f6)>+2rw74V$@o z{y>7LnzmV`p2*1xT*vQquE<*Vua5;yjw^iUa6ARQPLee5iBg21Em<>G<%fS_TAzw) ze}&(w7t7Wl345p0-xhO^xoT@Fcr{q;Wx1{qnI{o%$usLG2WFVn ze(>_|uZ8=fZh7m>=3BD=$#lu452YMcl;Q>=VBt^RVCbG=KkO4YH|<(5@vCw<&#LwG zPSIOOq9Fgk<3?&Tg>Y3S&@csOsVwOSs#&GSw*9(y1d@7QpSV*vC0T;9b_L%XA_Gh2 z!u;ydgTf8AVoL+P)Vj0`LgENi|*XC7P%bOYj<+>iZ&#eq&V_q;7J6l@!=Z@lNMORdL&fiFGjQ@PAo` z>QPoTUQME-|J4G6`hsyGo_%Vtysazs4CUiE--Lw%p44$|uJKp=b;BVk#6G`o;j2Rt zExuZ-R-tx6%a$}O+q5rf2ox!v*BhUe$ow$e*k0Sisg$=O75d~}Z`wMj8yf|@f4+9x zV=&!S;*1go3}+xy6YXm(hFlAi<#;k5sgJE695Wrq62HgnB^;deDWoDlpzFImML)@V zhvam+5>-1hf5tF=VlT<8({JbTz*v?c>o>tju-?Rj?^}7B|F+4aPgL`^&ZcI?i zZ8D4xM-bzddn`}97FV@Ua+Ab1HcbocT(sS?jau*TT{&$bQ8O~%il77!h=AfMG_X=? zb@jlhl%!Hjy)m3W;o)AmOhptZ>Ssp%FgDy`7mH_7b~B{U=$p&Kkc$rLC6}JPKhIiq z<0*rXqa(&rS!dx?SkKh_#Z-S7zA}3xE03WfWx-%_2uD%hD&^Z z8#0If@=~u2%*AF{lPnK3#%z|4nf3`sHcbgsliHeg&Uuvm}ExKozTBhZ}x>AjcN`47&9_x6$n_glBm zg=%&TN98>4(uB7hD)B@{d#QbU0t@!j5FF;;t{m*l4R@Bb$lo68UZf?6BuC$0P01C% zlc6lwB0E2|zLiOS!&HJE{00HpfI0^Dqu~UkAC5C?>MVTa2ku!8Zpr&h59t%3@A4`& zl~;^(6t+W|%m+5t$BlfR-gDAIAMQGm@4-%t<|K3@c;VX}7iYEMZwC4+vwgleN(cM`yNiq$m`nv(hCR<)C$|E{tGHgI>!y46dV{ zzx7&ke|gQ5cqYJTaU#o~3uS`XA)g~-bwIgMimZlsR2EuK#Hzgiqr{!()(|VfK)L|s z7*W?t&bRu6irHZO7v}AXxEK8Z%Dv_eNg_T(=d&U?gk%DzYEe7{HTiu-A9ej_Lq?34 zYGdPr9`B53RR{NbWS?+#8Qj7-q@vRCF5a*>$mMfA=k@leeysu@^)1}@NnV(3q6002 z$j&CL?OWf<%wI%dTUluZsbFS?8V7yH6)yfkDjaVabQb#?+3^D2G2%y)U+N(}-(B8% z!1KEW*{KP{?elQ-6GqcoMgr+ujZ0?Yw`FRDwVu5J`XviN+jyE9+A^!^Dq5$s6>+g; zF#Kb8^V|r1F1&X9g>YL~II%7*rd(w|t_oY-WAswYRn(wfl72nd9Vf6LT| zt>)9RETv1;l5|yJ`4lmzk(s>#+kQSVD=(quH`NHnlW?w9b;uGOcz2TMKuDuvChnz) zlzviM^%D=5BO%Ttx?an?`ZSM7GL-E>DxyX~*YiW>Bt#3=fI5S6iAi!8DpVkGE~+^K zI)7azw5i?DUgYh;iAHVPrdWw~qb{~FCwAm7_<1K~Wdi1u7jK5(YFBYzCzq#sKq#wt zN}P)fNzo=BG%O0dse;FAV0rG0ha9kdEwon|#1&u7G~Sk+*gJj@7HRIeFWGrVF(_P= zYJ<0)aL~YyNqp1wLtDmNJ6wa8$}0BBQDgr*`lGnU;tU3b%>F5sKr8DC%&VN4*wzAF z=CTpZ5yA7%zB@$}=lQdj+wQj912ADLLuJ>w6laVpJW3Z^TO{p>%ot$9s5rv|^9aM3 z$!2lecpVK51^r_Bi*XVBiBTpewvIV&o&A8K!|VYi%7dxbV$wm&c8jTHV!FF_5I-l! zS>vD`(5cPCvQ*>Z56)7Sw^ftWcfYsFg2zAP3bWX#EFab`d~5Yvn|QmznO40oO(r5m zuKA^O28GL~$F_dFq?F|_x_S8W(!BWe)yuZ@suPqQ(w$DxrcVYu@?>@lndhJdKAbbV z-g~2+JpEy>gvB?{Cd~MSW}r1pf#nFztiM%DIFE*U*P38<<*`40Q1ZM z)cPMsJg)yR*;LfY$=Myms_tRt?&D$!VpXtpvInuMS(>|p^f}pCxPWD~dANWh@D>Fy zn2m+)G0nmAm^K8liaR^GTROQzKy<$!plqPrfv*b`KNKtQb%%0;GKKPlvW0>`F+-UH zM;0h&AkP{obB1z)vV?K~j@CfF6OiKqaJv9>5P-)K%7Grls-y^_V`F0jGXpy|APpoX z_}SUOTx?)42bhlw%*6-fiaEPkSh|7qABRCUKp;_&pdhO{h*eWf_Ro&a#@*e8pOw|! z&D7Ht!fbBK;_PP4>g;6c;B0N{#Oh+>!VEEWbf6a&1_AGWuynF`96Y%mC$#=;6xDb_ z<-bA+3}$EH<$Z(+%)<5v6Aupy$7A}xh6(aFpv(anJOMZ!;c@`J5CAA!AdeNu`JY1t z{{ILS1i;GN+0)X^)WHG5V(ZN6_J0NIKTH<-FTvtvV_^sW#`6RgaAfBMKx5F1J>paz~~HgH5XtHd9uF0 z0||iex6a4@|Dy9fT9mb=yScNYi!;R1?Fp8D>~8ApJ-4QUg6c zW>o_{-ept+Jx1+nfH(Sc_)`x4Lje9m0scesw5YQhi2V-<`yUeaKP2pbNS@wds|FzX zR2jz~5{^G49DhijCg`hyIRB7v{vqM~L&Euo#1IK^g&t1sfH@jSA2}X9B^w~PDa7)z z1aR3Z5>ld~jLI&SPU@ykfI=mm%$+T4ovcBuvKGLwVe9V0EQ7=OK&6OGjBJD`yb* zlT{(HKJq>a=4R{S?(7EQe)@|8AgeYY3UHCyAbk+J0KZ5HxG!D4GiK29-VXX zu!DF3gX00-ZqE+bA3GoS)5ZmK*T*t;zI7Z*?l@Bs!2;scgX;eN^h93MB=6G&hH zP5md1M>HO_L+kJ}?XH-Ofo3w_iJJK!Ro z%6Pb*_#YeN3MhQE z4#53!12sGn0Kl>T%^27LzyTQmLwZ!vVM| zM?yf&?0^A3s)`)|<&O-Hsi(q6F2ET7remNGD0tN7;}Ia>Wd}U((+AZmafA72smQL30HUQp#xgYV!E$d_pxDXXLXLEH+caW8>lZBfl z#M#5m+!ADF350G)V0Ms&EfA&tNj>e&9Zg-Hn*R3=jReGlY5+aN-OUF?Ckljjmh?!h z%8yawqa&iz6juk*>K-mG4wjC9PXe(4a)K-@t$=y}*_BKkftdJ-jrs3B3*h;8il_Jx z5Cz}>|B>a)`#9Q23zF)sbLa^Upo zGXE}}xrdt@Aovp&PclEsV(Vo2ceq@fT^=iV+8%cR6qcrrk7tkm^U2};&5{0(f%!pGO4%-berM4g#}r^C5x$HXOKvnA!O_fTXyoi;ShMwT(N72h0hi zr5sGHA)u!-z(tEajkC;LztG4=il@ouf3@#NgZ~?*|7PD{U=#w#-GN^#kJsRCDPj3&2#;KUQ;7H5 z!!cVm1SqJN>pUUJ%oN|k>Lt?9En_UAD!(zvAH70|*pcS=ey4O|x45k0 zx3JiG>Ggj7g=cBf3$Mb7c<$M{c(437IeYHb{EOZ{_*cVdvJTABKP;sde^^+p=32gR za&OQdac>t`c5L=rcCNl5J+GA(I+8^eI@FC3axTOBc%WIMf28QFziW7WH$EVI(Kge0 z-sBu`ENx%aGBFl-(JrE&0}u5NpVy8JZOhRAkoEt2;`75U86Q68>A$e)zeLl2!ygRh z0?g-MYJl|*31B?jyu6(MppYB^ub0@`x5tW$-&VYIwM^1+&{fg3UOH5A(&I|7RT9Fg zJu3)){p+C4G=?xrDC#s4lT|m0!nfb1oJQ6BL;8?UR1_a;e~P?-WyI>0l@~otn@C{$ z@Nk8(-|F39_H)zFM5L;hoD2jaV3zf=BzP9FA;(s^L96uH@BV>)&&0e@42tV-P`NMW z--{!tZjZmJt@rFduq<-a3$-C7|9VPLbkX!Bk{IFZ=*v%5{gslb%G7V z>6jlZfBzUkKqYwgOICCIy?-`D>?6`%K!p_#li-QixlgGxjDNP(OiF4$sS={3jSc#_ zafacCT3jy`_Rq*^0$bk8&D*{4-(TYEEd@?Dz{x>8`6pj(&OX1 z+uhG#eM46ja2C-6gU`X=9EiH$FeNr5g#+%lglTd>MQJ!;sR(JP_(404SKXR;+H760*RE+GP+l(cCMFY%m@m%Dm(E3eg?rIVJ}v8BJz&U|C@?(fB{+K%S6h6x z+Kpj@h&lTHVJ_lIh&w-ZN4*i*QBr^0sgbm**KQhtkllCC!pl{4y*C)~W^*8p?>`Y==mC>G)sjNel?m2Ia0m6Om6W_bxDg!Mt@1l=KK5Rg6qev~mtE2*gh?$$8EGQN0l2sJOVib& zQ}Slm+wngq%lb$^V1MVH%#4fM7hJ$sZlvtN`gk1!TI=ZM_?(oq8%3^ihVm1A&n34c-V_y2eO{mJ2?!y&DRsk6Ur|NXe)Tl zbH?|ZBT1S&(nJz%QwLi4!O9b@=%wnM8xf2o3@+gz?@6ZA(gY zwdDH}d*3M7S#D=D*Mf+sFZ5m(!M!|bzFG?Khgq_?{duRQfz1mfar{-x)T7MtP0*Tr z+cVr~M2KR+xU@#{y!en#ibj335)SiLU?L7BjcS`S=f z=he<{4!#bqnEqszIRMw!6+4NkQ@e-a3KnvW*GuS1nr-?JS~oj)on9;vWG&Nqdlro0(`CyUwVA0^Aonme5gVr)4hwnb~Mpp^5 zy?;$A9NdDVuC;&)%QbE?6dX+H$h#zzj6lkQieTVC9i7d+q!n8Q{3-U!iNqp1Bm4cP z%tt(xv{H3nPbfm^awuA%MLVy>fZQNhx}D}5j2@JC2wVc=&#jR7y~oGS9qOXKut(B; zteRI{cM&LeAk_{8ug677r_>wc=MVp~*PO4I71sgLSVSDX3`3ZDgJXV3Z!l(4x1u@H zStCF@?r6US$W4Uk5K5 zVXV8rA7(($UObI9S4*GaF?$~CazkfeJRSGJ#_bdt-OHrH8(zY83w94v<9Q6K6ZMpq z685(8QF%Wm&o_rJ&*WiW&4-Xsnr0GH2B9mhC-E^%3c5)X+A32YmUVi@H_E@1tV8TM z$Em%%Aywcsk*gzVE@ZyWZ&E!&)urdbPn8-;hZQyBZ1o`M6~~M$oPNpF8y|~e21mF- zy(t@RMIW99!cIs3(d#n7p&&8xr~G*Suj0~U-hEsS)Z*3ujIbF9W;aIxRP%zN0$YsOZ; zUrV+&hBWttso!ZztAi&rCmgb`1mwh7V36~*zgxey4D)twsfa||H@84hs}duhDbsY5 zDxM=!AkV`L=itEC%>bosqr4qfg3sOs=_Zbhav&9%y=_O+3MY@#;uv)V+YKcBkQ z*e>iFip-OHl^9;tUDS;l);$w^ano%`oJQ^+XO6^;yLR2(6qa#(jX6++sJ%PWJ&`H~ z9T;!G=(_IaZ-6gez1^*9fPiVZ+!mzj!XFtxN#0-OPAz3iDK?BUwff%T5J6X`DkUy1 zM#XKg&M9lZVy}j9^TjUN)WEoP<>JyRR5!SmW{p>AOFKRJW$QG*-;#&U*4Qp~*qS~S zEG?KHvxl+(Q<0_w_?_zNqUM%AWy3B{QP7x|V!qcDQeYZ8Z;59{S1Tnrn z(;usJc;$IADs*?X-Q22ea2CklR$PghYy4{XzGgqZHUPu5HDG$;q5^GyA-*BABI0Y9 zDGGGkCT-nPtYgCnxiP z^`e92H|J>61DWqqcoMyL^EjD`nxOBX8fjF6(1_qj%vIN>+nd^HVFLiDsitb#S zz?1Z-Ff+HJ;}JXEY|Q5D^Ej>SUT=M)9J}BCCh~Ceji}}5ezSk1#&&Vp0Q@nyDQD3q zI{>X7p6?_hlBN}ISCK9ha-I+sN3f$JsVAl|S!hv0F>p9tQ2B?&K6^8nzZIYJC9LJI~gTjQ~oSw|DwuPD((M1LGAabKO zE)aAVl#0Va(`J7e_z;??&EfIcXnneWQH{&V=0KaA~gOB z{E)r7#8S-cAa%)XQ{E_>EK_^7$PP9J^idVhi~@-O10=*`aHMM4 zwyK4h9U4}_+)i>1@ku#{07Y5w$3-;Z4~KPe%186!edhF?_e(zH>jTH3g?RcW`@*f1 zP}LMr=}FKQg=#}KH03-7m3dV0RE8TS41>0ls?i@8bC<5?o2Ah(KX<-kcftVWl@UTfZglsB!7^SlSvP9|H>Bkma>Xm5J)g<5kXn{!H8JZb-5puYZ0qNog6cL|;SJpjb|+H7 zElA5I`I*`;Yi`@lBTWmLDpV#hjgpV0>`2e(j=Db29 z>#(MDbi$@tPm}V;UMoiWwDE1{g*V+HBCc##Vm_~H-|IC54q7={0%di0Wn}|9lA;cC z7QDc+if%;UMk{%zRFN9Q^kWk(T`&7M_K)+i8QO)ouxopN$2k^Nr~EN75vX6HEPN4( zV)R7=?L{b5D zLMUk@%;6A?=xf(2=eSIP_}RW$V|8Ew4!l_Vy=bFuvCrbjeU-GHtt{Q+T4rwvq{%v%I`?f^jH&P5}i$Puoc{3d=O9kV^Y8E8{Yb z&jU?jGJIe??4;aFNuPU>C~?z^>e+2$O~J2rDyMvy$UIamXlQi*J!j})`n zX!*nbMAR8K3Yo~&iC+~_*zpR+%36S*1L2ohBu|pRHx?MdeB03d&GXSpD`;S|WKJ zaiZRHLys1q5uA=NMY{a^AdF;4PR|NY>9_9;d`qTnww}1p)ajwN2n2-}9WSAv&S8Jk zp3F#)x5D#0R6Ek>HFjp^fvye~3E>gaOr2VEvb>E%L*vS8T@rzQW=(l_e!cDqL;LBe zHhx&RZ{$Z{6dZxdY}iUxj3t$g5`Kas;2iag3bTQJ~|By`4a)u-W33e3yL}xAUPd?K3{=7Yr6T6p5m` z2>JYTsubCLxWKTYZjbeJP2FP+ZzBwD!Smiii#^KYuaUmKyXnqL=%J^|FWkA02N21> zPERb0#S=vNS&@$8!0+3M1*nD(VN|9rk~6J0x?6;bRU;AXr&VacEtrf#h?qFhz|nhTxl2`PkMboY zq*OCR7gyDU%GM6$nHt>}Je-)&E~C#T1abHgDpUMUy;IqP!O`RLhzooHkejDG@owG;g;R6yV5U2+mg3f(CSWlJB*;)Q_%Kh0z>; zF1Gb{VVF@#!3X1<%=5ne((_}x>;U<}sJ);`_WFF4gg4K1eGd7ZkH7U=8b+<8qDR=F`}O@E;H53tDB4)d0$_`+nW7Zj0o|lPFK{mjV`Is5N`U^N)5a5 zA+F73x40cTKhs^eba%XHrvY07D4Fp1oy*+mmS>7-V=WI*oxccoDkrEd(PIcybfL(8 zpb=BJP{2uA<_oCpo{@-*my@}ix%&r{)au&Mvg^Jc>xvmtdQ1u9yB~(+hx7zH_>b6(t`P}pxt)TJgJmH zZ~0URJvEwVjY-hC#3YwRfre98zVAWsfdlkDx{42|I zg-P43TnelgdsX^Wva)h}hqa%%g8SGmhb<1jP0b}3eYEgb->t=C{d68UoneVnpx4g6 zSm=|0H_L;qF)Ptq!zgg(prrWit*i&yx3C15U6%3oQjQpV>jd%PcSyRjt(4rdTnc8j z6xfa`ef8Cr-f+z{SH2i zUlJ?zxE==v9!Z;)sGO0ngic6%-+%QJ`Q#>9GRUIW6!M{Y`?9Cz|3t9}C zr8ac}3KP<&n&k095T1~%DC6wL#zG@}n(r!jUHCcAiK=0cEyek&WrVOO)b*Jd2q;xW z-9J}^OpCTTHR*+Eq#3lxMGUt&Wn2wRgc+|Na);v^QxRQJ!UiEqsz}4hee3B7D?R~wNPcFUjjK`ufybTD~>D5JPyX6 zx?8N%f(<`X+{VeI2Wb%$GAs}mit{;N|hc z&0KkZe5CDVh-ZZTjz3skq|=A9J<|h;6|p6BER-kNt9b3A^%i07vO2qnK(ji#a@u**z@o+ekXu5$E6-yAD!lgPJcD5D*g8eWHSgN( z&vZuo4qOj;8%(Ww$8NoK0^;bN^Re0^JTJrwortEhx}KEt#SiC=_*ql@MT;Mi<@HZZ?0(eqU5774Z0G=O|k|W6#~f^ z46nXvvl7Qcy)anCdV{+;2=kUSRxm^8CWZC{Cg`7iv6f- z!>ves-+^BBoLn?f_JQk~J<9LS^>)~9SJNR`gZr6Js|tR<3Qyjg2sdxOH(U%=Pgzrp zitHtFy}`QtQr4J*uE-X~WebzO%b1`kylPE?}<3nn0 z1bLYoy0*%`>b_N2X_1A&yCzPCCxIW^i^6>G^RIX>7JQExUpk>&1bHd42AGh~st5I0 zfG)!kND*c|u$a^odQEtY9LSM8u405b+m;M|uHd@UM_TK?Fw>(h;l!^~kcT89mZD34 zp*+u2KfD0DJ3W3 zb#kywc5g2`D$7YXYnc)(&|}AiuV1C4BtI<}M=i8H=|}J@655d}6~#XD)@{JL!|H*L zKeR++8f#dejO>^f4Ix6$Rf0ii0gnS?S@_P6&m~@eaD0!Lr|KbKac#P`vK&(6ZLN5@pT4+ARdIK?l;}i-PCVi--!zovl{&T zMqezq)Wgp?kHZA}HKZ_U1!V5F%uYa?wBxpnnbq!$SK=P=ERiglJ{|RrLmXb6+5pFi z)UivxwA1M3Xlzx`@06+FdZ5K9F?8<3uQEsddpGnKQEn%|~ zZndVyN}v%DC+|+rwKsc@{i-65u+#Z@=XP_?{_Zx$h4Kc?@+`HMUeTtzZTcZGaWyT3 z%vKyJ(zU@5LoSv+OoK6L$O4nTFJoAZ+F`<=MNM{svyxnKh+ftF_xMFrV+^}_EFms$ zBtqm12lAD0=#Uehj+=a!m#uF5*X!2C_bCjg!e5&WJ1Oo9CiTTr9acYhEF!s%B`pQP z2z*PIVbehC@=APXNkM^=*ZB2W^JMS%q!Ch>nlJ55Y!9xCCOLCt^tq%|uU7O;@K*feVJ8&TGChlKT3JtLpixPFKziD2`YSpLeG4DRB? zd&loa{!j--<>*gQie%;8JnQ36T(?Nfdv@Wmi*5y0JX4Dl`^?VwjjOO=BF#aqe{EB2x;B*iF>ik`Za@4)}76Sq73Def_SBeHW zB25M@!ot)Eojnd#rH4gy4EF!S-d)Bv`hyFiFEcZDI%Q_&cFN2QQ*Nis%*@Qp%*<0} z<|#8X#tPFv8YX#u zfqa1+pSlaPjKe+aiU()ADEyIf$T;{~$e#qx#K=AwxL?4qTMcjiOk0LWrk1%3-#z`w z;y8uNyGVGMp~JbRO%2{QBZyf!sx*czCA@#XGBKqdZE}Y~0fJX$gb-SRRfwsZLVMVG z2hPRiPKP^h8V+Jt=?j|z>bjd*o>%;e<-qLmv*8R1?T{mgxs}*ALlmo$pI#)MVg>$b zkL}Okok0g`tS;pKsMYzy#@MXydKFs36Vieb}?@opaYhEOjUT)DgiT&-C9VvqC+ zoHFs3gtmgQ+9I`p%`I)W9dWn?3{kW68O=5_6{lfkmtKs=lEGBs3DAs1pvszB1 zCXDJKXUx=oaL^;dH>o@Fz}sPvBH~{Z@7o)(lsByFqX#ssS3<*CpMLR;)kEHL%KWHL zO@5Uljaq|RIS)g*p^2cYy#tq{_kKky;@4?#?bpjhol5C`&Cgx)sC;=iGQG-(b8w|6 zDA-|ArK8m5`?k~OpxfV>ykU$odj2{(?`w^?vf`ErY>>c^xC4`tHfhoHJy3OqtpkNJ zlB-G@RtgHtfy`*cUKnq7euXQ*y>kZ&kLx89jidktMH8E3io{{tH8_)r_vxl(%jfyJ zZU<)A-z3|{wWG*fZv3*C%%t8{<{7w~Fp_>{0z0s2oEpK(^Pr+;v(@{d-^Ghd0g-8Q zMEc=?$KqN{k!xgv(vJ;(4%n*r&4FMk=Pvds8i_DM73G$&{5IMaQOXC$M?aU@O~rra z^*#ZYAj_~9S>5l!RiM?af$~S{{o!!Gb7AN&Sl2Y8*f<2E#KZa!Ta!XXbIz*CYUXl3 zhRWO`MWi@o;j@PI#*-M4eeMoBTR&8v24*UlHT+$7gvSn2_n5}d@tE$9%ll5HBmuNUpe2+)8`j;!(#bl6c-}4%ki)heDf8?6&1e`o6$}wM?5^`61GOe= zy2GUiQ!$m|8LgPu=4~7cXKeQ23H=BiDxtO3IMVlD6#V_dAXo3jM$ORD_i(Tcu~G7% zaDNY-)nymGhCD$>)Q-%}y_KRahG|%Pub8#aWM0)AE_Rmr_*gV{^t9`pnz`^tQ93vN zF?xWl`IQzh@>4}pa)NL`c&L}iGO-nTpr7RS)DMqS#Cc1QsC|nhA*H%7o&!r#`d!Nl z;{8M0b7EqBl)j~#P9#mVu;1c%Hw48;^0rf!%J8{`I8G?w$nR$Kkt5a`~6RsLmGG2kM}=4 zGyzVxzH(zgI_z=laz)#}T{8;F9AYKQ=NUDuvqXbq7sRFA)CO=?J_ZcTy(BB)&pmV6 z@)2otA5zHEGu$-Z!-69)%a)h;><@*nsB6ayB7!4xZs)i+f8_T-3Mx>op4DnvTyJaI z%SP6TRwNpABqidYPPVS!AtmAw&+tZT-4q@k?g_s>;c_+VeGy5sMaxP^<1mqMV(YtD zqr!c+1cwm<)h6rGuHJW(s+CB%U~4P109y-rufSP{4eJ&IDL)CLJXtr(jV~x?=X4hc*t^yoo+I6m+7D z4_)#m0zHBe1;MBS0-7$8a%f%;mFb!sGpI-k5r4Pr8QIv?k71@GZr21lDKl>`YTupE zng`l;9%=>1m$0el2lQjsTvs(DCZr%% zaT(DdI6?3w(5IDl<1fwg& zBtzHzX_-*fnc%BV4nW)wTXR{IzcW^r9$kr~p7bHQID6iZSGGE!R&eX`yx-4@MZdqC zm{18lE4bDmEBOGopb=|hTz0)Z$!&JHPnw?b>Q5hrdHzu-A2*3(Mu8?Q-gDYP5RG22 zFih5}iYs@cKApEZSL#S8td^l(^RQhiCNTI$kcst9Ae+HqDRRffd}Wb#*J9J%GZy+Dw_? zhYm!MGF5_tW|nr<52gY$LKeTR@%vX5v0ilW0WthBY>O$Z&cne&cz5ps1(R}vnAg3M z&f&E476NOi{U%4=?GxC?+!*>A;|Co#tK>h0J7(r77=s_WCgV;$f%tgX2VcChH3P}j zU%R(k7%}_`trkj?N*!v&pBLwK#QmS0&YyjL2U@zTzJ|{1rk5v}+;t&+(KrnD;=9LUenYiWe-?hS!Lo#8>SDnuwkeA-3!0?q77$*jwy{`1(hey%XZH=eMs7*0qSSjO{`HQyl zo{lm@!pIToQ9b-Q2Pr@YqcVj8jj3zGOpzi9XEPV$sab*`G*?1)`@E^i?i(>g64Z}b zO&*BmN7PAN|H3I$c+5@x`Yy`tP`+I4r!^PpRL4gur%}v`Se_V=_5CMeCK@FQ4NBFB zop$C}kCnlN#k9it03B~d3iGb4n%#rDO>1;Xp!0WnCX^d>ihaEPJ)p)Am`Om>(L0WaQpYE#gJ zJnRj@M+Z0U5yN`;2HV)fQer_B3#UKTa(qTQGDk7S0^d6mQNtE^u7(QkUfC3UFh@b! z^L^!X_nFs=l4|jO{M;{LN=?DV)^BxbKc7ylOJ!|=t_&UzVe>DW&M9GCsihe+XoTec{BlwV z93FOjl=7?BI<=T(`&~YuH>1FnXxH=sk{Pj;646?8h_G3sft-m9kH;)yST$D9b?3WR zCy@hX3)IDW$YGT>b|ob#+rG^L+_t;ErkH#*1wy~8Zep`iQeZvVIKr-3RsHrqDG8tk zo~F!&ay^bfldA&EFSPPdd8;F1j$C8@LPE+^uu>tx*aaNzv7+@r`CFZ#NocC+#SOz!NbNA#t0`<&tx+QQX0RP*-JgvpLdQf4Bi(Gn?8k|8#)!SOxFFe6a*^?;)`J( zXn@kejc}u+1`gIk)JNLNJ&U*d?q=1^F+S9sHu7eVcU$+>Nw^$gO1Q>0P@5|1SAe($ z{WXYTe~Mg-xl&*9QP%`ZsEGIlE#dX0=ETV8UGV(AoXYt0=*k~UuwNpqa_Vt(k}+)a zNDy3H@bm~JRS4soi}_{ zUU42st0)8WEXi?2AAf3ajNu9JG=M#?L-64Jm=vhN&XzSn2`|au;!Xv1 z1>H^`@(kj+M^{Fib~m9cFA-=-JE4HFb*DhUFKnH%id3TUAaRHbX=El0-QzVv$O68r z0g1WFV>sp>=+(5P9GMsZg(Fb7*H9L?`_@n837Nf`k5}>?mNoJiwEm?B+>A){S?(Eu zH9}LWN%1Q;;Dn|2^bQsHxd!x-3y2(xdnyH#PKrM3QO1_vjnS!$P?*b2mDvHwNhn&9QrHsL#w;u_ z7geT9Eo$-WNa4Z>S&*!6KrIV?S(r?e*A^`=EG{i1u_-T4gyHLHF%GlUIm&to4o12) zNS=uX61bH{m(s&md;@0>1%K}S8k(wbX8@3bskza^U0}?VT%Zec0MGB<@mjOFLytnT^O+jqbPyJ45?9=3$u$JSbuXK%l^2 zg($o&ttfgaUb7`9RggPn;+Q;qxk!Y37DqXZrqwZ&HuNt47lIJzN0BQFkfvDwF%A|x z?DmR0SK^sITU$!_^{*K``Nf+VRbW!wbf^mlfkoI{KG4Ykw;~2-w8q3R;;|iF$UTU@ zhd&x@E6R63r!;XULX+QC3XMd&2rlS}zH8}uk=e?VN7IIQXrv^b`dw~~?L3i6 zsulrjhWML@3&RfB(A+;|>m26bQYV}Ak9=KqLTopw?w1QC-os&?CAe2YIk1VFMvlk? zjfBN~x$!=m`P%(ZEC7B{IVbe3KsMccVVwok2}Pk;jX}(a5uvSJ!Ho> z&bO<*P0Rm8N%i~cysG?>bnL=cy`kvQTs0Cb9MM;Ql3y!di68^-#g|Bsfr-sVHjSN} zf{u*Asjh^!bFO7H>k=%HI>iuu2{%4z7knU)vsp&%-&z`K*Jp`SaiaX{mQIjm4E@Fh z%bmF+;+47dJz-wGaPahdl#))NYK)rF&r@m($*N0bCA=U7Was>RoJKs}m~N3sh#hpY ziCyRS{6#f$6{5kxt`ser$>vI*;OSm2Frd~W}EE&V4U)&Ie& z{f+Sd-_T#QO2$^^1~!&P|7`{akT?J~@^2Z~KkDvZN80}f1o!WT_1|P*|7vvq&V&7v z7VJNIuz!f!f91gd^o9jsZT`iBF@EC!P%id=tSd8sXaZ~zp!^k6f2Gx5t@V!w16U(w z05Af$g@0Q9X#_AH0C@tmFadlNpyjXo`K!VJ^yeQH1`t#n0CdC#FdS@u+n51_2vAu6 zIx>L!VF#!#fV2I^%mC=&A3gRjnv3(VPviJo{<mj~?>qs<|JR1;8WU*{jTR1rsAu4sID0t3rpYD_F%JtFOs4Qb9s9q}(W56c*d9_e}s39JF4n_GW6ku_B@8*R2>@J*KRRF zeezuhRL}48$yAw_0akDDOVmsrcAeWqb+R;yJ<9Jj7ar<{vjHbViwjpCU&xJc{!>Gy zse!=NcwV}-2j*-Q>E{=8tb_QF)jrP*3T}J+d?|t+WMv|VoDofbtsc=~I40+%pNhM} z%v?w`zNp$c+-+SxG;LCq0Tmt;zuemjlQrQ*LZ|@j$B&>hh3kkS>WHO&6$m|uYCaYa z-t|?=NnF2hE^h7~!R9F+Nkd^m5N3`6VqlYzI1tJ>m@+>l%|c;!BLPt(Arm7(RU=_! z3Y1cUpnL_m@F4Uo3WPR!9!Y^P3TTGosMlO0r|lnSpjV7^!|&zwHbWEX1H7*usm5RQ(kWo)Q=zyWPDsM`iML3 znlSExBmJna12K&D&Va`PAa`UdUrk)DVA(uSGh$gW52Ra!9#j7w1MQcUdO$37ff#xW z4bBd(u6is#jZG=L%gDAMDCGYA^wgO2)tRi6%t=yWD$-TB!w?`Lf0k;2D%C!d-;sKs ze&R0F_Lx7AgzYhGg*JFKm7Ya-L9c2~PP*bYRV5rpIUaCpZ5UmSoQ1s#I9^h;z<2F( zcNR5>PKNr+>bT7rahoUcN(VThfMX0gv0U1%gOwQaL{$MVmG1E?DDC9afZaQ8Noi=nPy{j$D$Dy-TJ zK_=D>3?$sx_?1y z=PNbShF8_|O<>rm?PDsr+!i(`_YHj3!WSE(*BD*)wGI=cN=pk?C%SKGY^nSsE26j+ zk4x>$I;q@A6*v|*Nx2v0jT^DD5fX;*4$?8{!PS>P(*5V^h;Q9}b~sRi{BdcGKgM&) znf+r6_rr#vwQJ#YN_th~u|HjWy5KQvf%3dY zi3BNXpj_|rcB^0v41b-QOLxHs?S2XU*?4P__xbTO3uv%=szc|(!V~J}R2>ue0(fQUqrwi(? zc2ru+4XVp;yK+@t`k+(?3iI$eMh6|D7oT(+9%raSEJdz-j|hr#nmb+x4emm_S6&;E z3=9l6f?^a6GbH=YAP)&2EmYci3-Q}VKs;7(7Wj9ODpjjn03P~Ebh{`hmfvQy|JwUC zhr7>kJ|23>&+h6)S9jPmxVzOXZ`0$1^ge+W;!ehiScUx8_V!+B!4SB8hg3O>{KiIw zJQw9w3mtE@F5+$4vfNgMTXAIsRN;KLRJ8+_^@nd5vCy1(9cRHP%<`$0R}$;JwkO?h zOD<|pq1D!66%(xXmee}y=(Z>XtE%hJ0}5yL)y{u1 zFjq27_iz)uQf)f=&c|wEuSw#bLke>c`?UlXpt{J4?IcHx%{ zilj2a=q?kqxYCVlk|Z(tc9XwhU&G5{fE;-p{LRyG{i14ErqmUF7r`>c`)2{qE3jSN zB51?!Dl`s@(p;YX8k?$nC1YU>efal&;By=hOM7@=0aq1)o$^Uo3LUpb-jwE};5D~3 zI^R$O*x-{0-zQRFY0~X%81m9W;@iM36_+&oF+|ZK6&E6O3J6^&%5UCtLKjd2s4$_} zPy>>Ty693I!3<2CQeaSA%Sxd^8KTjbq@d_YF5RZTQ3ld|AZNLm-cVb?<=7d&XW zt78||>ZZnTiP3|1fvd|?Zu^Yo8N1&3A~;(bztcaQ{LP%OKB^5ln0=`NLp@X~OnZnK zgot8!K6w^YUs~Ud!d3K&+=F@Yy8i-J*VwUfrfJ>xO~#u3hfiJUq83R+6jK9Pn{H7& zZX*t91p|&u@-dd*K^2WCa%I$>D{75xyf}3or6od1q)J(SEf>a#BeF>sPIu;_I9et! z(C7n}eeVEhHUaeVjEMgvj2iTh09G+7MOtEF$0B|1NucIg5vk(&$;^yG*>~p<4rrS^W60<=zm_mmvsEJR zhypXu^_4b%nO%6KD>5N%?!}A(CXE8r*K3+_PK9^^J0>r%BiTLI2(@3=8kL)7PCO^` zAuVL3u8UawI|&8Ss=pSndeGYv9-wL)+ISTQ1sEe6PuAj{tbA(&2|a~N(_DX_k4a09 zHL6#>77h$dcx$Yt5i|@^k&vBKVMNRzR%@()b@5D-eOx@(<4(u)xXQgOmGJ%PIp6O_ zp0=jqYpm{av=@-Z;j1geBh>Pkv44a+COA8y?v{ke}Tth^h1jI5Q6 zfOUcrvyx_GAC79*olgV=0t_ zwwZi0XDd_(OAB(JRwtbusON1iCwnv6A?Jg+n~%X}G``dCdBbX&zYElZy_?2+ z>E@(^BuzxFvLEPA`vYcA$1OOYUEAIrIotLo$IcBooo?qlDc`JYCVNETI*k4Nl=CHI zuNw5TNv^$(reyu^%!LS-?;iE5m*;~IcO+(tZ?%*XB%7j*5{#6=STEu}aDUWP&aZG) z*JE!_`@egTm!sq_RaQ=ThxsNk664-=t{O=I9ZJ$5oV55h)bmFAW=Zhm;>W}w;Ih1B z^FI$sd+tW@hewnoRia_itnsyNpW}A$Yk%T_?Q1NgxV+)X#4{>Q>rqsR=t;PLBG>Jfurq1DrNd zk6Fx)M1(gk&pnG#FGz$+lok?e3^hrKipVs`AO?>iDy&Yb02M3jFOjRXp#w1_DU&}H zd$EJvFskoF%4D3e)Ks-z`*U#g0XNN&X4q%LNnZNn#gy@EGV9q(-G!ktW238DNJ1T$ zCtkIm>QWc;4C{B2@yPiwi5m?Bna6y4Le&|2rDXwZL{B)Vb7xS@*E=lV$76+oJJjKK z6P#cEoeBZxy0p1r;7vl+iNBnf;Dy?*B;X2;$<#TCQ^!aQh1kSWG2QnD6?W$@2rWJG zFSzXrVEJb<*u#7>z1cK*>&^!9@sw1p|lgs^{`csM4+DBzXG62#L|mox@RUr6%9p6XiX zHg2Pzla~51ih|(a4xJv0vAxmud4;JRA{1^`{1*K{1vwBK;*m5Em@xLwJi4Dds?2o- zJr=oBx-uiS^6cu=p@4HuAYNC>vXKB)wiq&7n_HqD9nu8_e;Cx6?sSr4BsBt0#qWfl zy>m6X7C#-lPoCTMQnY#;!4~gQ==Ey#Uv6I}I05%$9R5htJR>>%${Kw^HGy7&ga?+hyy>p_z5R)R~t#^cNci{?(|p2iQ|h@d?}Pva-J&aXdQ zmpw?Xk1YQ9%E;-55uo;#9Qsz(6*$@y>W3R)MU760ik+Yryu15_4RF{u=2XLR+r2dirJYNVx)P3I*TMnu5(J*?v_D_B@Mve(x9p8;*0_QiBjG)CZIP z>(|>r47JN8$Mx^NLD#tehhb|=Gd@4`Bb!<$>Mh3+nwn}}ho2KCjgcWKQ)zC`YlU1c zpG)u|g;?a!Kv}=>fwHk;r!z=~)eF$nL5Brv4Vet4di{K_Ng*m(2XL?g{LH|!6GD8J^gc ztAW-DvPXqz%yaVO)De_iG1xbmt`{l8lKg4c?`(E49Zh<|K8K>$%q11cl^-|#goAp+ zp6SVT?%;<}bh?N`3I>bW?oZqB-ksbw2J4hfEQ)o`xFL_zedT zJ?<;`FZU8p5Cs!60k1+av zc^XmQHT$EOk(B!-(oy!xk&K)gIh=4$%%90VQqPV2GdtE>s@pGrOacU9le1ym1yxCX zE}_?Ik0ab`Ws$i%rY3AzSA$yj>yZ5BFnltGWrIe$MgJzfDCP&f)$h}ENTsn~1f|*2 zSsd?u%i}|Y>36S3gk2BYv%B%UQPVwMzvR5`*4yXA>=!^)1E=R4b=XZSR@dqRwu2=K{d_qj~=4-wB( z{~o=JAJGeiOO~k3?Ew5M2cxI+^L-C?sWSU~iv`%}Na&oU_6);f`C*}wI77vd>fx8; z23_%Zbx4aP2skzSQR1(pTYeU&c8v5NK!8Z11 zhv~vX?(3J`TR=~dMj64kfoNd2Uaac8_0n;m2E5mw;9J{s9UDyL40jyvT*ZWQ56t@t z<0I5|jj~eKNIk3(F@3Mp9B{SqY0}vK3S4|@hqyd_nY`7)gyscE)v^il^-A)_n2#KW6=RnM@cDwdxnVcf;iGkrCc5fxS zbygg(!&yDA0Pbp;c8jj-bVft)wp10(9*w2k)-CcY)n-XsSMw5=_cdYpGrVqttlf&< z^L~9il?MZ9>z(ih_U1XTYVQU|JA(6l;p-e-54GjX7q$A>MUur2QEdPp%zWN|Fmi_z z9R(@^TQ#<<(OnSe ztpoSyYtlhoTZ-?698uh^%sFMhD?Ga9etmM;L5p+px^TksslcjEg^9YN%2-A!Vq%vW z8%xq+>1zbaVglzE&ikKGJQC+ef%(FHEzSfXnB!HpaVy$!M(O+v*CnjR|LtLmqe|~( zwx@Y>OaHqHEK)#b3h>vl$F%685Bg(B>##ROEKnuf=OD&2Uve%D6jH|0#9bqO>zwMxRu)atg z;a4y-FH6>?4FcxetX(7=+@*26zo~irOWum3_C#mbmduJ=^lQKmA=tp3ShBf|Mjlm^ zY|~nzM$@OCI4if@LS|~qs;%DSncuY!srl8)cWcDXLs$m|3B{vDJheBE}*}VMW zYCdf%^~yXl-~H`IZ(PBv`&C?J1|f}ikFs{BcM)e@b+LTt>VVdL>*RjZC?|szg4!kzElM zaj*qP27|AR_AN%@b{f>?jCaNrMiwTkG}|>+x*ZGYbOHPV!?zpw0@1R2*jGd6auXR5 z{J=snk6Wbt^T$rGx@^%-Z?G9uD}ym&ZI#Pe#e5hz^l7E#`413GT3r-oHJvu5BAA*1 zF1s7H!_mWSx8B@qKT%InJbR8t@?RmmoF{m|bRaR%AUH(*R(K@f_u_6(anuuD>)l#Q z%`@8GuoJ9#M4RdXiUkT8v6*ppc+=yH0|q8=_I=dg{wzG;FLbFL(miOg?QkaPiu#Df zj#s85!D#Gam9Zz&yNd55h*J&c`SD3%#4Cooi#h(BKz(@52b13qC*XJ}cb2xTUul6| z&Grpcer6#c2Ynkc8ZrAuh5bWHeaS0xZSvY03ka%$6i(zjXytBl=#l>kldJ=Vr5x^b z=~P`sFu@8|;_t(|$`y^VQ1SXNWyGoVsV)^?+89e@dxtu`DHN-^94w!$m&)smbn!zp1s*pYXZXFBvNO!n~Q0m547vpO8D z0m6RMYwAM0btvV~neU{=kW3kgG!zAj+wlH%EA;ECui5!>T?}W5@!XIR9hJNtLhl)_ zCnwa;q?Wy}`g46BHI|-sxF@aG%;?26KgRRL2))Jg16oz`12FQ_{WjI3Njt$$&_WN; zW1A|7!#^yNQ3d2Ez~)AwZUwHBGCWi8=259_gQ~a4r$=3GNN!?RvhNAa9d*{_N$7^V zzl10j4nWc35gF#!d-YA6$cXdB6u1h~nl$0;NeH2nrHvJFl$mTLf0hT)K(xQbVgU7A zd?Q6kcfxZz@v{QtZ@ArcP`hqeL2!Sj^;YeqvL;FoA@DSFzuw&Tw%*$Mq|-Hro-*`| z$6NNbQTEe`68rcDA~p*#r7vP>;7^6agkD=^l00&SM3v}pv;*?|{-*?HZq#)|t-X&@ z4X(d@AcEbRNA1pO@$>+(%fpk}WZLW2?q=3hli--!VKOJ1W}qV4oAET~vhw69ku{3$ z!*v5UXWgT*(%DkB%x1eb*$K#yWkiE_MmCp|+`l%6+#Z`vU>l@4fb{3#p>v0gg#uBn zGZSQWsPVZt1%IOgZat=>X>MTyv~CvywK0<=%ke?r{Q4sfFCpGfhFlu)U?WLdf)L$l zcx}qhR|xt0gbHrw9VTnN;bYn_O@DlRBQ>#yvzl#-ddhn?L=UC6yuZjhVpn!09k++f@2$J6C=};Kf#ct_`gQn>qH# zFUGK!ief*sA7tm!C@}ABVm?f;q&6WfkX&CivXyF$NT!iFg9`&vj={PfZ)qx^iMo$b zjs@8W&L1gLg$gWrPaS8Oktx!62dLt0X4c5=dg8Z6!uG z-Y4m8wd_*{L*tFu@f(WKU;4+JNE9gUj$mytBE__ObU_S~IDQ2;n{Lm29lH?*xQ3*E zxZfwb^%W?{PLX0_4`m6r3w^R|;iO`2c-`@eMT-+yTq?gg3=;R!^F;AVNxG6>kGIN+ zCc;=F3tf&hUqf?4fR8x(U#6w;f}0B5pr#bon!e%V>eHD7ksQ>BTP?qPsp6s=J369i$q_ga-bCC8Drn#apOhTwz5~+8 z0m5KaijBS)>9W=sO%9^(CNg-mb^2(X?B0d;$?-gF*q#*0P_^+WH!!>i?ak5MB;A9Q z{WTK$XGeC+hsMn7=j5(rc1<-kRnheo(DU*g+4Vx*g29NDdww*LMNvElJ`*qE;}3Ju zVj=#yn@1u3Ezo;yuW2N*`&9CCq6BS!DHvvOxny(!#2kr})Vq@Ix0^jVO~+9`DJD_I zv(-h|RFPkpG$v=g9bbeDIVCxoeHjCbT`lUm?xt@Z?TC6lU$i)q0htR<%?Vusrp%Lz z3xOkW0~R|;K=BACKs@6cZ8(@N+?g)&%rXtm*<~H1n;?i2ov$m`X$gE zvc9!_;Yz{XyaL+x+f}nx&@7PkI)D`PV^0 z^~mAUWpZoshAr5%`u0o2iU+5{f*It?dHI~|O=l>-K7Mp1HLzFdjPbNT=81ip^--!v zIIVn?w1K;R)Li`10Chc^mO4_2CUV2G)R==BP`AEB zUi{u>;i-RDd0^q0rD4=prVcS<61ME4{#?>SLPB_nFBVfQ={ksqx6vcj%H#!PF4^JR`N+)e~&SAw?0GRJ1(zVKK ztNX)-|GqbtKavvLk99vNTJp9}I_IjZ#p5chy!uhXbX;|IAR5A*wBXYW%iv#9C*fTOv8RU~C1`kc^&@dVW~ z=$*0WLhw_(X$#CWuO!6eHwqVwRQ!}hQ2^r-<%#=oVEY?(1A0b#&e*_>s5>eOrt|%u zIJ=7yri6$PIlkK=q8s6xb$%bs^<4sOb%xJw8$LU^C^TXuq6S8Owz4$3gH;)E8tvudz2?D9zJrZ{3=$gJ>y}ox|*|OxU{o zXLlzKnk3y9Ksjt7B{o>X1QBtnv?DhOjCZa_UuRb|k5f*%=_D@LBcfInSU5SBegE}a? zLJ|(50t5&mn{`W~(bqwkHO$a3V5VVfVDw7DH1XGa^M%zXRu1(GQDd5?cFx|nY8=8a^lrt-g!O4Xn{3w}@kj)3J{ zZ)z>lgNIaZ(~p+_1#_bD3}izi>?&ITf`Bw)h!&gp%Lrtg3X9aB(K8kHwZmRp!m3`_ zPmzKf^LotKm1QZs|5~F?$J6-+k-rpci%pxD3`}hsc7DLPlak^K&FLbhEauzDZcr|I zCQAT`kPEL$F^P>`-#;s%tJvQcfHEXuBoMUZY;6o{Xlt$S`Jy0lD6 zy|8i^xp#l;LZeoiiiWdN<)BvwyoR4__X*$@Hy>F-3j?>nP zm)Z>+20?==8oeLYd@7(gJSV5cnJf~nhgzKQ$$Y(xcipQSj9B7pbqqTx8#Wm5dyie= ze!XEw1e~M|W}6I}Dd{_Z<}{!#ZUjjAgPRxSAi7qyrXDe-j|B4p zkp+YPs=|w}6UuKUeDz0ev4=$& z!>v(Abm4(p_ftyf&*q*@*f@fJ#C$Kim-676-qv7Fv2>UxC5>?4EBbbS9Msba_HF` z@;M9nC9*CiRHh)~c~)>MRIpEoDut#sX)UVMtmVy{APAr32p&QSi`dVPrJQ*6DgkSW zC3LCOWBM`Gd=11;;q&=M;_hyMSI&x3BLXsfc<7?>Y6*~EMM;{AL#%S{>WkY}UA! zTVT7hL4=$Bii+2CR}q^Fgo(~l8DrzMbJmMpI|yy#dRHrFc`%Be_v;&En~t=;ZNGcO zw`u-qj*ji1La5yerjrS76du%Jeegg?JbDVZSHAf8LCv(ecS0t2TX|7KHOa5cR+tK| zAC*Xi{o{jYyXfLb)y!$qjjcfR(B7y#(8R^!JV3Y#BschvER^bLcx&oy$xW#m2^ztT zRJ<#}wIPrD?w1oy_ftr`zA)0yW$w;wqIw?pOm15d`KgWSJk0GB%s!@qHUgfD#80OD z(=T>F?*d@%F8E}4EMjKcvkdSFkGicVwRua|3_wS?a5JA?8 zP@v~YXLgIu-|-NO5r!AOaWa<`22cWZF$-IoKrka5_QE{^n?@|B&~th;o1X^3I!$h6 z4b(v*Y%wF7+UWMg;A)Y1KMKZEeFi?8YjEB{+)a$5@r9BYq^ZOj%($RpzgmC)C}`1k zdFlw$H@R8u@^IULw_@ib2hPEQChYKQvH-PG-`TU_?tLb5i7$#k6&q|{k z{v8B?8~x!CEo((QUvJm=ko{ZsDyg@QlDDh2)iJ)H$+ryIQ^B~dO;_4NDxB=&hcPDp zLUDId+566vl9;;}b-omveGOgrOgUOynTpt{$L!0G>i$3u7=j0moy>4P3)uk?>^n#` z{v;QlK@^`Ja8R5j1ReSA*i~+`>z$K0=v83|Jc~#tV;6q8e&CZz(Vm!Ycyak6LzLQDGiYSMq*BFy5#2H7juVO6jLzX)?_+)dSJ)#m8mnMBu!@mS+AEOM1r99I6yB zmWOCil1IK*VWLYMuN31O0(CHmLs+BAwG3ne9&@FTkUtbi11q9f=g*EdwU?*U0hPq> zipPwVwJi{h?gqIK7UKX-ANC51u64-U|NTM95@R}pTwL4`91+}na~#S5j=yu4hgRTb z>2XZ;u$YJA%o%=Io!@mX6RNxX9bH@F@!NJA@&TjPtSAhL zOD_ICSMLI_F>|?Lw=i8ZwgxBa+HbfYxM_Y_~qifjtJ(#FPJlE z@xJl7SDYBP%HH5ibq^H&;OisUiE@<`Nmaw9X}GpUj+wMK-}v6E1P}`l-oJGZO&DmV zc}=to2;EBHyQOvtAk>9k3{DyG@55=6y2QSb>kVA(e^LH`e(96mk=RK;Ct4M36XDbC z*8J>#56+jr@!bUUQ4=c{tH3P#s%A9nOvjjGV%wPJWW@C<8ko>{eQ>Kl9lQZ*_IjuDTtsYm2aY?KCG z^&Lg@iKduLJke$vdXcpJ%_ehfro|%px=XB;=FbQ?DnU*0MCp& z++wyy79Mr2z0xv^GJ9qAsr2OqhNkYp8&fgSt^0el;p?HHviV>5{WuvWtZXVxEG$#f zxXcyK#fFxP6DGqeYuNBgI3>%8i?UhFUFGIx4o(*n>1$+S<$EoLcy10j+w5I7TQ^NI zleN*rytG~P_+lYN&hQ<)b$P1_2WIBwD_(b}k+j%^zqbx^Twr(@f; zZQE9-W81c!j&0ky>Ak;mKJANh|D5~dj!|>WQEQ@>X4R^-=JP%erX^KQuvtnzG#qEtb`ipGckd$ znCBhv8RU79nJ1e!n1V;90vr79t2DCZMVs(*M;ph7HYhD*XTDkm-BrkY`z+t(bE}pR zY|e(Seh}U*WKQq9nqFioDYEFOT#)yvTe&=6CVZENZV+=_6my`Mf8^I7DSd_0D*eud zJ6r5#n?>BfB91w?p#J?y;Lax2xhz?of8 z11K^NXCkT7Y})7W?Br^Vse}bYd$~F3ifm8~5zjAii%FmpRLSLeiPXTW zoH>vfbWBl7X4J(Jf4jUk&cmOS?HOHI)qUU+#?8?zC8g$G#8v-FDx!^sfn?>po zJHjgol|!zGVGgdm-<~dRYDPv#9$~VKNI-7lJ%FEP_U8NFp?B`23Pw>A_1P4Hx8Z4JNB#xq-CHTwx> z7dcY+FXpQMOIOSP1CmR~$Xrj^>3_-O_2okPuLu|Gf0d>Dqt3t0o&Tq7@qZ2B`j4yi zpV_T1Wa%#+@eg3*-w6@IFFNTTi~pO;i}A~h_1ELY^u5Fut|55@G zvV6fKEMG_y%NN4M`bBQA{MA!^eGKd0^d(zj_`<3FCYHaFuP;Lw+ZR&B`UQvm1Kav5 z_WFx&{Vo4Dl#2DM{og*>*}ha(Z2yK=edYf|w*I13|6J|AtN%CsL&)_Pwffq`fA;ZJ z_pjvXZ+~AH*GU9w`sF=T`RE%GU*x$0hI2hYs z!PsA9>~H!Kf&JYZ|JV;-`QN?pFR-ouiuL{DB>B%g#s4pe`rjmo`o}2xw`1}D8r%BE znEP*o{ND%VzreQs!?^yRycRpdUjXZGv%kV9nlGW**V}(LME$e)UmBw5>AucV8m2GW z@yqh_H2~>ZSpUyat^Wl@)c+v0{&HIXSESZIG17mxDSj#E{+lA|e?O^(bE*C4G2KU& zZdocS%{pfp<1ssT;J$dP&9phDec#I3asF2cB@jW=uqHw9I)A9FaVmN0b*_Q)C5PgD zT`=x?om2LCU3&Qc0;%QF{x3i=+7c1NU4XO2|5@cogPo&m)2b3qO@B^Fn z!ovF8oP(^fJwX(F@i4!CY#2KqUy210u_+%UB(V@Es3B6^ zfNybeC`4@=?G`OeWm)b~`0$I7O5m^OuF~ugzoXU@{I03PoV=o{Qk6^ZDs3g;UPvOw z^bp7&lQ;?S57LGWP}!Qk1;vJ~ZR$Ftti*vKytkXj4gZp!8N1V-;q^97x@oLY~cEa`ifc$=f^ z33j+c+^Yn)aq1Xj(0kKD5IQ~woK`@#GXGyTIVv*ALh|vv&Sqw$J zhy5~#3BYpsPy_wtAiH4&w<&-rDUgNpOi=^$<#4|YP!vc`g6nd~Cw}pA&=SJja@Z20 z9Y1a6A?}5na=nXrv3g|HYC%*PkgqtQ&t;)-TO(m+w0&m~IBj{eAgRapA8)`s zVSKWAgI{hM-sn41s|Jn@6MlZT3@RXS!`pj6zsd*m@im|Mc7r8O4)L7Vj^)J{9fx;h zfEfhwBq~R;5_teb3xCG%(88|yjmu4tEqJkK2;?$m8}5ls*98b5L_Sjxcqoz!_w;?* z3H2R>=6leZCZaNj3j9;ox9VvAPp4w^Ko{gOvHjLQ#%}z<^zqIz@GW6OC|!xo;5>uYI8W$12*}n~ zKl4DYU##iSDh|`M^$_=jWpX5Z`gh@8K|Xv__irJ54kX^8uMiv}!T!-nw-|m)xyh!? z0#m0#e&o0!;^9uL7#Uivt4^z~`x8)c-0{}UO643ztfQM&>4o*0UD>?Z2uNgS=mIVY zs%ESNIPcpo9dFg5v&C=MqZf_kdD_Kl1A^OsQm<{rFSqEqrm#mhX82uTYOVlnu1)gt zd0eJmbgiEOi?tuz#SM14M!3s_er5Jf%sRA|!4`PX&REYDV(r1CdbC3YiGAd>cS4IO z7&4k-_jST6`Xp9yUojUeNQo*4%F3J$sB{)W!$LvMA^3X5ee*;+w9xU?ho=s|XZb>z zW?5R{HLU(*^X3&;LRe?e+X|}pes|ALbf~!ewc|CMi+KZQC~w)yxRPv5G6VX^<9=6c zkf5LxlwkE(9J9>;x4Sd~f5FHS3~$s*4g5hGb0FDHNbI*u$`RaQJ8#|9yQ)VR4L|Q5 zOzeX-C^n?Wx^LOv&WQ<{Yh7&dL4;qTbwOk2;26T4o8@yNG-`q3|A?Q%|43XkPV zeLGMVug74=3OFCn|%j9cJzDD@!oPjk*Q7|a)Gj?Zc_T3!g`z$Jrb2RXi#Z#VS@jmJeF*HCV;msv&>GO@^=!OhfsPO~cA$BS~3kStgMQP;$cX>4SOW-+pe9(C?58hU}b;A?qvO zg~z~#EubXKm9wf5ORrB5kx9x50;1gJb*+ms0{{^3408aKT^-rcg+2^gooem3A>q*< z(@du=^$!$bL}AW?sG!*Jio3`i_dYS7o=i%Z|9`OUGGP7tQhU zb_S9XgVta;~na$UVZrtA@N-w3fuO zplU`XQ#Mo=S!YExBhemgfxLLSD2Y?(^fCl{8aXzXKIdF?pAkr=XKbD;?RD>pc#%PC z&w-0)GdLp`xR z?Qa4B=oox1^eYwK0~1K+u}Ke3YW<=!*mdF|p;|)TwSU}$fx%L153Z@t(qCE}%rGpO z*8JoP_2V2k&c4mqXUvN11*K;W>V^b8PKSUB`8K`XcD~UbFPM z;IkXm&aJw9WM#=f5s{Jnpc74F6u3h(M=BJ;#{$BX|=& z|9l>Ly1zZVE{lxTXo=fnuI9%Xbs|-h2JgqY=fD@BP@`Iov@o*N)=P7Wh?{+XV*@D!)NMpDF1zqaH*!s3sq>r*V0K6Lbgx_2R)WenB{=0HO;iat2 zVt)Po8r8|lCsQZj_8CFj%j!n1;oB4k$8&>k&BEKh|*^5Y~K$1N|wQU;)Aa@;#g`UPG_7wHCF8^L%N&rHu(Y0e3el% z!Kcn|*z!G+5G|30AnFvz_z-z~NUAP7cu@gfb6JSC0K84EF23~={9f84m2lpz1A7?$ z5X;wT_voR}rfj#6LctPmI$KJN*$4V2TgHJ`CeL$!`rPwdQzFrxfLb{zth1xJp_sBC zS;v}Fdk=ISXWRCyxSm&5^R&3v? zH;*FNX?bh@M5jklos9wC=Ox=BpTI(a!qO_d^N0!x|A^kPRQ7Pk{!XpwiCwFPv`psd zAi2c*!S?3yc5R_rokH;3>Gkx5QA!DO#u`pmBpdLZcTX$vohFJJ2 zm^v#B>dv>IH7PYa?l95oiD$kjiKI{QU3OWQd%FQ#s$#oWFN)GE#Y_U~JFuAtO@FUL z!i&gC;6}}{;;$e0Q0@v3Ecky~-5_*0^Nso!5;#-6`F>BtfTj!1aHx3xw1tF%ZSZSd z2KAe&=h4$JGIuWD(i;paM?~412BJdhE1u!(IePD?LA52K_Rns%Jwk-ZhRuxgOjYwA_t0 z2n^Ms_j{xk-qyKwBf!=jTb2xw5`|=EBmv-NNqyRPkIwM26R`hDX0G=Z^>$qLu{~`n&})e z-BrlTtgTC+24&P;^4GKP9!hCA17^-8TAF3goO00pU+l|T0N&= zql7!e6GrG29nG8-dtQC?e}*-CTWoF2)(rvn=~-&_LG)v zzv@NFfVZtv*Wa11ngJ)`Z!v<# zLLotdAJU%a&N`}Fr1saONOoNwv#&97DegG9De$LGD_<^BMP3Y}K9#lEK(ZSC|F z8+(zvu~|*cs)kYrh_NtYiFx3fLl1}GgkZA0jk*#Al& zb)MR0J7WgrL-x;!NT)J$gCAK{1%&F;sh>_wyrsL6FM&| zi3ymLYLCc_$zF32nCl)fC7Pf}FFQuL0ULONQ`Lt%-07L0EN`_NAf%zULcB!?M9fG? z4aUACK~kRs9%@89WJU{|yCU;^6Q^(_v(2yTUly2*C@%^?v{n{$fe?9 z$L)_A33>X>r5@j&(5{2f9(NKIOpF!G8^>FM+@2mtN0faY%nh)(LiFvyyMtahCu$^O zZ?AXx;R$xU#dxv*^45MOb3rX7Rabk8V*@Q|RZw!D9 zYfX27{aM1VuABTTAPm`>&He5^#U_odM(3s1%x$XW($h#{41$C#S~e_2NKWZG+{p+g zob0Z%?l7=aPw*?;|NcT0yJUE{ygLLt#KWvTuT#ebz8=a`EbjcC1Pl}M`vai~NRW-!R3Rdu>j!Sx`-B!$)K{TGN-p@ybXggZh-ba+AY@!$wj4&d&S*Fx74*LqsG z*q&uRz!f5*Ze@TxiY)e1pPDg8ajYcvrsmQNe8sYq+F7_yKx85jfDnv>N>&#_E;DYY zZ~oL_w+#EmNdI{b;pO2rdiNa^ZG?4JDkgWCdME@(3*~>EU8DMhBliFo# z7F?$Jeouw7&?Qrm%5%XI<1yO%dO7q5aM4F{nX_75=5|BwFmE%z8J75|+#20$kBZfC zGRnu2itBqk!-cwPNKAqQ!5&c_u&4M7;hu$9@(#?9zLhM!53*i=7&_RUKbZQtS{cCQ zvg6<3AeZ<4-D?|0G=1YzF0x)V)~pA8GQUm?oe6(}Z^0C6_O!Y`OlazLm#`8t=I|y; z!4}K~klnK`YW|eg>QM;(2E;n`MA4L7egIPcJ!Fzj?0eV&d?`kYs?+3mz}?9P6{ooa_nsyIyS2v{}5Md;_a2R6uF<~nWR|SQ-~6H-OA?XHY`m+ zUvGi<|0GbUK8CubZ5av9;cIiH^I5Ic)ry5GDYYr~QIsvQS#w*u zMk2WqfsOCR31P$m=YekP@RV|9mrKBBGfiSE`&y}W!a1J`USljp(n61qi^1{K=~rQ<_FMiQleX@$*)xDc0VK48DJa4GO|iX{q>jUZ=P$P4>6F zCiE`O(UCsN6m#CQJjy4PTDLpiUQv5o?Oy+O-}#NiI*OkEjM~L9_Xcs>s(%aX%8Q+f zI>gMp{c?0;9p}onD2OMwgyWx%t7jelE!}P-xMmS_Fe`dTaJ+Z)v}NUq{ibv83<12F zf(pRRX#9bUUU7~jzW}5)F_CoqJJc$zNrGEYJ$0sFUZb|ByKZa`^vHeCqC-WiQxY=?3UAv~i z>LRtql_op7>}mz6@55H5<^|_o>;Cb?M&GL*1_aY4K@+|t>=iBMV2l`%b}fI1XR)ys zR)34VS!_LFiVbE?N29fo?s{=`EoalajRyM2Mq?^T`&_2wEGSB)7F*!v_6RH5-yn#F zN<&Yt&QjT>n^vJT7p(z1D9T?f4@A+|1&u+@)2l&!atrh4@3EvY)kt5VpqtoUmKLe!-}(v#W(8qAjo};Y+Zr|moSg1gJ3lZ@3ttxY@yc|p4o4J~ zsh(z&2>%co%={68d}hfx98V;CCOpFGfE)>;koyjso?Lyr#;0y_qKbIME|}hX76<7R z9K*&o?%+O>BZ-Lot5cI8FNG-+hYa>>Vv#~K)|!+a(WCD)Ma2$&!lZ-DRh+*zED=A) zH?BI`*zb_*1JYctu!T)p%EgYT19p_ zZknH(tqGnRE}U*!FA(;)*NgTTKNPmBc9!GdyKv7}j`>=k~n9WwWvC;78#`?T5)DrXt}IdZFX><-`t_b*s$ z1e;|%x%hHAMfXZXqE>Re%Di$KSCF`of>)svC+8>N9IHJUdfu>%hC0+c1o}0@2=^{v z0=W6x!`4Zp(M2<+)ltDDAqNdi4Z3JtDLp%pw(!my`<{c8)y?zxU2dUk>we!{3ty&N zoe)Zzwpgp=V5>@OU?{D+yng9jlW0t3dw&)*S|wtfpaB5AKmE!wCPvk&XAGGP5=K(Z zpja6WK!F{kwtpkS7`E{fMG9~8K*=NMagSpzR4D+1L6q$|>1X9MQqT18Rlu5AHp#vJm!R$tVUkPmq1JHd=h;aEj_p)B8e-J-ekH)0T83Heoq!_!}StmkvlS+2B-NI zoBh|JBLfB!QZ^+{FNrI;$RsE}TBCyF{6%!rymvt=mcOkQy;p#y?eEXj`^_X9e} zH{7fm)9a&Jmzi6!wuqDVK@p4vLiY4}05Lr&Js{4s1(ym{Xzf>Vn!ncqinq`?r;C-F z^}*sFf_Hu|9d6$HF*gU=`L`3@zE*aEjwp~1?Pqem+f%RC@eDb6bfo$B`A!8Nap`BR z#cBv|IVT+<-55bx0(J~hgEOUSs#X*J5RumL{DX0=*pFt=5%(RN>$Js` z@5(yyv3q5JXCg1qT7Q_ZX|;P=uLkb|ZQd|f6>g!AvBn6|Rayam$NTRUw0iXro)W~7 zCW5pnUHyMx#Y`Cha|O@Nl!~2T#OA>rB;|GcfQg=8Zgo>|7DWwv}_ z_f{NOVkD8Yz@aHZj&B0MhJl^W2yEMzp^VSS3)dr|jwF50+r2{eylP^O#IttDvhOtk zFb4ra))eqVc440Rh*UpjX(;fD96+A^1a#~`M|;&YS#oG#G01a?Yck9BsDl2Of=fjh zU)Ke?+hyNTsFRTS!*v^qA>0yK8?MIfKB0chU9N5bZQ^zNfQO-o2qMi|71p3l*%`s~ zb1oSI#l)SU1CqjFX3wv__@75B8Z#|BCFUDY0)VAnkkWj^9V|F$=Z4^ zYKv-i-^Bg}$^rE4-hyTV;%`BBcm^PC)T0B=@?HK%NB3WcMt?%bd-_K>3keGr%D;Ys zh<|Vhhc6Bd*MJX{r$X4ji`(#Mi6y-py<&mmC`|NC({aTcuqVVqePdOy7pHyy=~h2u z35=g3%SeyqK#xvP1r zU+Kry4M0LaCSYPpU%JAXm`b%NLP`z~m7r9QDG2EVv2NW|dvTJ|%J;wYRsswA^Bi&K z`_}D#AK&=!Cp#sjO$Y@*{0Fks1^j@`<1nv{&Dt{no(4bYb%BW~=T0tKX_igSIURu0@3DFz7^&2!E}`RrtF zScx82s5G-%MTlYEV^wT1PS&Zmk0xzRMAMT`qipl>D8~JgN*@o+jCO(Al6G`IkUrbA z5fJ-*!tiqoSJQ?zNfK-XZdWr?(pJ35t_iA1+-MEZl9ahX0FeO64o@E6`Gmd`uQw@i zLAr1wl13YfIOuf6`$pORjn}#Kd{!=3A5UfD1#KL7bJ~8H({~Dq8bad&TJO0?DB>aw z*_ChhyYJ|>6n+>(MeWQ>{CG02kd@j+W`$SlY6JA8yKdDsqdUbAXFHZ010tigCFdG?Y-uHdviZL>^w%TMH^9gbr&9n!3-O_zx}1H7($uL_^`BcLwsZlmp{2#@CTBem4lcp@?LD%e^#xkEUx@q)(Agu%r` zK%GBD#i7W>;3}<_{5S1g)`}=t?-VE9E3B*UsX#tgylN1^dtjHkFg=cVs+!_@9X$_F zKQ$G!lxy)WktixnAp!1918Vi>Dvm=St8N301N5NuQbBt1%Ne)DyIpVcj+)O71;ebf z?lgbMGL3n-rbz?JL~flx1159aLiFz8k5W}iM)+xWXq*B$c4**1H=J<+N~bOOiZOs< zy>`KMC?<99sK$WJ!;1Q3AT<*3hudfiA4L}y7W0?dfUbTTq_I3J*%bUs;i+pwih~N1 z_BO_LB{4=S&YSWxF&AVDBhhfMhpnxKlW#SeUWijb42OK3GXXguJoM;zjspPA<+(?9fyx1j3G?L46EFb+!oyImhEB$F$b~=F;T$9 zMdT+Bu@32kBRo3YJKZ=@zyqQwl*38N`pQU3lTL=+wr`0KC~t{DIIEJ@!(aV#S71uw zv?RvXBni$kFV)(*3XQIMAe`~7+Jak(7Ev#$s6EVfKDBmc#}1_`xf@vNi>yAP?H{Q! zw7Cp(+L+kgL_IyJCR7lBs#pR(FbQ=!2GE2aaA;oM{U(i)lVh3rhph?lO;HQC^r*?D z+s4gd4v!?}<0494!}|_{SVK^{=bAo%i}f2*A;Orquw`j{J>TX@Vz`838be-rIS=t1 z-(NT#vd_DGcvI}}-ku9=ZNUny?{nS3cp%mbSAlS(9_Qn}1TKVM!dQRwT?p4({W*{u zZ=5dP+#vLeGcu;$I5bNu?nA0IH8b&#ON`_C@BP>e07Ex1hfrTmQm^9;VC}>vU(v}! zp6t)HIFhM--fT|yv0p61`tG`RXJnm^lNak#_?*s-9*=nR^n9^ct9GBJEGoe5Phq}! zO1mmo-iFR+7{81T(A&Xht-jm!SvdW0y18p(+HNyoRwdS5DU!Ds=PNimVDEOAF`oAMh>BOxK%Tq2 zYwmov)}n*nMcxFqygef9)J#JY5;Bpo2ma8g<-rd0ZNLSl08AsAQW~6^`+M{j^d|JW zVA@d0U_}D1b*-x%Y(ryzNyf?FiPu87RfpWNaTC3WKmJ4)t^M9wzy!;o-OKf(NEQ#&RuI!564 zUE3LJm0ILKFBQMxL#E82^Rf-80J&)E2Tm3j&H-p(sx8qiBNfYKKb)&?fK zm83P)74J(u4y~H3D4y;&yge>nr7ccvE>`ENg4*sU7)>@jcgNGF7Gmb7dV6yuPaby0 zno^{KQNt>oA9FNo18yFH_OJ^hyE?jW?n6^+mUSB&Fqeig?V~hLa6)R#cp2aP9HG)L z-X+!*&J3N7Of!OOqpUZKJ3|3hEnl}dvR)recvL<|k*pn7@z#Q)aI{y}77004SQ3-G z#jTFeFg?*DC6`d!`o@n)Khzv!QL6h3^v*5H4%N;4dR97ZG;|wi8|PmnVBW3aNszUC|$Mp(mJuau+AJyr%8TWR#-7z(S#S)&@ohAZIqpGSY z^YpY}G7dZIs?ChbxLmF?sh=ILHS?#ne(VqiB%8OS^#WUmT~*h|YtWR(W$&HUr;lKT zmP-;|b5$5QFSSIX{aS7gr1pn>A*zvUiY}iyCzOSHb*wtwnDdgRjjMW=^rWkhpCu-p zP~`s&@!(LC({#Rb(K-Jx=sh!|9yZmeWxYBg+|+?^=R8b%;#MDAFkgS^@SI<8_B4Vn38BU{5ja16a${n7W@K;iuq&>&Qs%%cn)S# z>2Z$wt+bSfrFmBCbsfgryo%RHgbi+shdIL$FUF4#B&9#(iwa5mESBzP`{b+GPdi!) zWSb!?`&!UUPkB6ARtH-XRtK3=#t-P6KBs%u_1K5JHQ1Qx*ii?Yr)g7AKsmeQ7fl84 zgXrpjdJSt5XOl&^*LTgCfPjNs_8rZ2O|wexO0FfkA+{x^C9WlgC5|PQp$%L|%Hc&P zR+$tlzlJhrp7nbB!^xzSYOM~}W1EwdWf2~>&qa+xUa#Azsl_szQjB>(ciJOJ&UtrJ z^|C9_+m3N}+~6R8C8Ca{B|V@I5Fen2h!Ii;`G+#2I-BzlCWf{Ho!}FBa#y_OeEj-1 zvX*@0%KIxP1Jnh&j(1IkRSL!BQKID5l-D=;i1n|#OxuTJPU_TS0@|<~n1c*i+p)Kf z;Tt?}(QCe&P3X-XewnnkqPwU%;|J!P#BQI-$q$i5Rw_kw+O4}8K2MGjk)Usuv16P< zAgTd=OsN`o5Kgs_3SD~6*dnPmfz4h!c-X~{2d`Fl1?q+SYDD|fAR-;#AS2H3*xy2@j4%aUx)h|We zFX1mn2St?UnaaaMYG=En73P3)NJ=YfDbt>a30c?WVNDG*tK-^S10?oH8C%%0N=B>3 z;I^>Ur_uSb+rRWXiNFq^s{BxYdMx^RlX27WwxtCH6%#atYNG zH5${<&qT9aJ=b@++i=|8l8xd$E!Qr7`9tPiHQ1xH1{@v+MN@=!XR@LZ- zq<_Y!9$Ap|ImV2RjgKvcrCoFV_I*bhTFy45;S!YN)Aj6TfJU>iS~qt_h`= zT>QE)r`{4ljBE1nvdz;X5jfN%w~BCsHLq0rG8O;4nz=jCR;+8eWrh^D-PAdig1Q$G zx?(t~beWrB-B`X;+3alYfUGUDJPt+ytPTz|EjHA&?ZYf@7c~gUX@cGMm{s1Q8eoya z>XV6P)d$DwrH1wVL^)awR4zW71-4e)yF4xm2ETF!{C3B zyDOt0ko9=t<_|;(X~(%2Y&7#8PZdejJ10rkKI`>D&XA(z5p(%TZQT~yD@Id^lky4| zBSsXuD~24#vU_&WX=nzbZ<88A2`vunnAc-hZ7;@&K8pr1@33rB+BG?fz3{ct!rd&C z+TK-EZF62{Rh77C?nh|Aj7(ZgNQs8~f_3Vj8VjD!mk=&4knGrA~ zA0Ac6IDtF(fH^T0Kz@rW^2iXhoPHv$a`@8Fa9psd0q<CDOeP7Y3w5_NYD_YQkl!LLzpj`z#$;1xY(%}IvbpQ(H*(u)$6i3@{K z2NkAN8{<}FvbVA@s{`k)MTHZCCgWWP*`$CQ03^*z%0x)Z(lF=SYA^L~6r$9Rz8P>_ zt@)dgp(38=W?^ox6C0f@;B!^!-?O{wjB4u~XpV+J%QMu|NFew-*ksfDQX3+!c-&B2 z2Xr-dgw8niiB|4da|!(5Ni(Z_dJIN*F>X+nk+<4@;+S60`evIeMswk|JY}a8!+4Eg zYt=wL1rnaC&;&_t+VBTi_L-hkn+o`2F>_HVWBXXHEWCm$tsQrUKm}FVBHUXh# zF(yBCDptQpl<SncLkg-6LjHz(RKxcd9?Mjfbc;F%Q%eaI}GyDA|mh#YEa%7&R}Xk$XSPML<~WAI(TBv-s`=~AT3I61@`VUT-5ht%Cx za;<#s)B+wK+f$QpWjNom3Qwd?P1hu}#p!jZrIHV@53sW7105-qHwAw;?%R53Tpm6&CS4D#s>@cbiRk;GN6vG5 z0*w#pPfMv(5k|}r4xR*5OwtA93LzUVSBkD)6LmPWZGHuX@1X8~g2ab0f`9TP%eze#GTLqw9`u*e(&rSQfUVfA$vRyFo zZ7S`3xC)xlOhdrDn|Lro*mSqpU0?0OV!F%AUoGQ8iNJR^doF$K(o|SdU3ENuPm0>bjYBmB6VA-qzB`9A`eCGPt9DrQxA^&2oGh+jZ0!uEf({M*CjVMKqI! z0awX`R73P35`n633$EtMPeftr0l9+jMbTfo{$Oco`m=h@p9l=bS!C4>6?YpK`1j~g zV-Z0+nYFU`4)f%%Zx-!REtEF(o9GKqySq^-L|zGYoFQ+Nf*fq~cvtw1UjYqcOm>!y z`oMi|=j%ft;M`qT6gFYKONy^YUqS@^@x9+h`*yKaI(>NgnaYP$Gh&x3`;a8s?+6i&!Q0ZXyfbnCUp=~ z)0N}bjAu&?W&t)O=$yAS&|w;Y=<9s6nCH>2G2=;#*C9hZZOz7V3%L$`Da-!~x2C2D zeK@y>>x< zfqr%bw1m*nd*9}rzWGb*G&&#Tj{TF~!pFCfgk-yu^Cs4G9%JKt2LZS%IiHvfA$Q4> z0~-LU+kf7}#XWb;4=T4IOXQCD4q~(O5?f-3<`$y49df9T_c608M9)tym@ze@R+;#t*eX8P&A%ojvg)k5%;iQ(&3}!I=_}F#l1ZYi^x?Fjd}wO{ zw4otq^OAhjUREY==JBQoRB%{=ECRuR*@guyd&;HFye%SXr`e|mGx$-7)~)UOrUwln ziON|AdfYh8ownpKxcx#U97QDIWy8paYp>8{1J*q@-5(FQPSbA24GWwdh<2IJc=)Oi z>k>;x_oz5to|BG)*ubtkZ4}o^_bRu&DPgxNFw|kVTkVM99_dGINs4ffWe+R9_m;j5 z3k6Fbtiz6*6e#L~N#Q$p8Jjyq>RgmlNtlDr^2|H;tZ36C@A|Uw; z5xG+2H7|f^1|BK=IVy=(|J$`WZ>o!B=Vx;|^n3VE?s^KpMr-hj$a`DHa8zG;u+4>O zV}|aEKxgQ?$L=HR2YC5GqU;kj<|Kt5Cy9aaLZmdz%vxz&k|X8iWff(V4zjZHwPh0V zNs(rAiNGtR%9IpkG-YXW%IVZTWflZ04b$8PFN(4YsHAgR*LZj#$OHavV%c$ifxaZcBlzi1xkca4iEw*bG-6Gqdtr`3<5n6F*xw6}QR8t6M ze}~$&p}X$s;YxvI7Zqe*<(L0%oK-0NMOyTD27Lm~$BI*y$vAxhjG=9_mRX4x1YZ9^Qk}=0Im>1a_;=v2ncx$5wFJq~>d5;aKsI z?9(vsu*cgQ&*{ORzzSv;(@Gh2yXj5W;DLVydH7#i&Rd^zTSqCbBUo{A~$ALGH1Lz7nI47 zBS3y=cAIHGxwX7%8x2jT!KYb+t<-$I_0^)J(!XndTj5B;Z!v2m5}>%;qi4 zrExKH3=ViLx{{RFTWr#Z15Z0-103y#4Q*e%ke=N5BI5&yx9N2N!z0Me0I@<3J>@6420uR0dvASxMkea zK}Bn>Id1^@@o{*rFF$uD>D|%!;);M*2;GSqd1mU$1? z6XW@e;}Yv&)LY4W5z}*ZVh5_DX==vEQHa5`Qzp){9phSj`%U)Xi;{N;YszY&Lf>0? z#&Z&Ub0>MjIrec~3QmD&+R{`K{SQx)2}8xC+7CI_un@U($IWHIV3$r)oCWbQri_sm zqE0E}hl}Gti;g9DPj?284dsnM1EVAD!NVU_q$+))5!%)Va$_qVj>&Dob(dkD3X&zd z_}Y4h>VRk?sf12RSJ!*2_LPxffg%nEzOiIBmG9ZcLUSQA9)~gxGIK zM<+nI1exOQ#etn^v2ZC6#!&gP3fqc)vYh`UOM!g|?u^l2WP`7y?B`-i?wQp^?Pd+) z{+9i78M>{=r6AXfwmaXeZrYVa1f35DBz3=sIfxrO`=FbBY&H4;6Igbzm%9T$+7!Js zO7v5}ny3zMC1xjIPaSfKQ{+5ci3MjSAHMd+pIje&9Y)M1BZ7 zV1$%dG5~cVRLZ&pGeV-;q}drz7XSjTiDIH+M^@x$<-HH;Ej0PbOJMch^6d*!5sXNT z=%OQAC`oxtvkDy;&tq3bF(;44^fO2GDu#dv>TaZ#V+uIj)&E2bxg=EMt z;Psf~M>fC5Y4fde9TBR_fvL=$5PS-mcJ}j_Ty#J+HhYZszseM6E0N3#RexyVB#% zO~O?Ky>Z(zZzh4+RRm5roUFV%FAcA=TbvDxa2{rfXL(v3O7Y$H_NlENv(}%wmQEzs zr!LSh9cQ+!TLzzJ;90b^15VF}d6+gUCc-#OItrwQS}JR*Q=k334ERS2a#Y56JMX|GMcDLniP25X<47?f zypJ_Y`mwh{u+vQgN{$k$zIE*$Cx0`?6IIjO(NM+r_7{L+TnekoIDg^#IGOoQtrL66 zyX*AcVW}LLbSh|{GEM<_XhA@ZGk|>(^xIY$%?L+I#RtQD!hYIf0ypLB)YsTm3C6qW zDS-J^?F@idCd+TCQ_{EDx|q;O^Xlc|B$<|FnbHr`bdnU)DU;%;vUxWxmAZZUt#;Di z1H7P)8+SZkTN(H693=%Js-^7XluF|{YygcCBtMH($Pf5cjbnj<)N!}AWy~YtP@*7C zqw9)r26`t6yui~d=1IY`Ir8pj2wzv0%#3zP@_!iXDmKM*g+u~Iu zD-oW}|s!t!fEn8I^xc;e2zM&pl~2-msrdcTFmlu_Pcv z+)iymv2@JBBFEp<9`AQKiu$%H0K^n!tPg@VeOW2Qr6^OP z2pL$l;((6U8C8j6pR0XIQNEYEhDt_TST>!YRV{=}oEzv`h23{Sjl`N>J=yWS8`g?xg|@7V#&U zskLdb74s9N^fWGg0wdUpI$N?XQ(%_9mjww23Cc6;bEg6i+h9JeQc_q4*k{GQt(G8F zujZH7DG17%s#;tHp*c*Vbt=aqZ1Xx`0v6_o1bht~ks^Ylj39=|9;*|eu5ZuR$3Bq9 zDl%yW%Fc=oDX~gQVn9ok#YEkCMKQ&e=kYvv$I9{`r__@YstT3d)eFYZ$O{i5afP}F z16uHreb)R^Myeb&Oq&(qI) zVI*&>&wI6fV205su>f9Tg8GlqHC$K_fX`*W_jV=?5JO6ziLcaDLGp|uCc%h7rlZ^6 zVIWre#8Jrwi-cU0Niook;3u#%6d0)`L4Uak*!%XTl7c6K2#-+bW(kNDkNtll^L0UQemZVX<*w3j7F!2pU+5+PKVE6^-*zk z3YxJ*q$4;F*Y{nQub2CUr;{2>do4y=xr6>0rys^v9M%N8^8LXDzd_{IVpwZ~1BaNM zVH-l~wjM&u{tYP_6d1%fj``9eKp&`-tR}x4Iof>Aq#+3q6MV#^j?ss3^Px{L-DE5T zHT2C=c5Tu9Qxbk$XKM*npWDPjz*7}Up*68l=;z_LRGHO?Pimo5Ue6 z^-9`6vy2N=erHGJSMw^1GmJhAZI~$DM4Qt$E9}TP)}^s^C^HTb;)#dENlI`;bt#>{ zMPiTgrp$GcCm(}$ux*nKP$}_Hrxm!<{e!$^G_2V~N=C7a=S;|i*RZk2Fv$~C4l+|u zbZ4>N0H?2SihF*{`--<5-%}s z(eD?$!)Ny6 zswG)T!lU9RHMrE|3(5v5-O9aW^q{IXwc$jfs`Ahnm${Evc{X5YI_c28e{L~Kr)apj z7z4;S%RJ)BXiAmZ@$bYx=qYBrKwn=OrbQg%ve0cZ&tBOQw4I`D4Mq}JZyzjf5m{c^ z0Q6=1K!XuAliQ|+eMQ=r+aCBGsRV6pnND>XdTp{SJu+{V5z~*6qLlr10G}iYK^6|l zpZ3(RJ$N)2T}My=ZCVu@r8pc+{SpS?lOXYSj($>$W1;4@lV|jI5Ja0!I zJujY=^YVzZfcu+Dtqhr5iBTD#ae2fffwyIZmN!L=J!RxaK|WS0YZW<;O6`taUbP@u z6wb)&kYB(P`(|?Id7vbYCH%T*De=vDm2LFRNft;eycupst$Qx12RjyfPMT zObMzw(T56K%9`=S_W#gPl@l;T*JJ!Ab|6=q%Xy?6frJM(-A zGDH3Snw0!$$-!S`jO5X%oWs^69|3F1v9^S6)FXJ-X!a`1s{ngtX4uVe#gSpFGRD~` zqu`VPD;g|);yx8-E4C3$nV?c5=p|uH`vjv-0cJ7eBmiWY(R78gezgBO_cZak1qC=% za)58;89H;f$ZJ`C7Qp7@49TVi@cLK->xq{yXX`&b1aQZZ_==@!Lu~%@yHF~?9b3X8 zR8WE~1{GZLG6y5JB0o5jv>@hk!yxdoAYUt2=NMfI<${!mPgP==@TP{8evzWc6K49K}AYz1OgZ~R8kn4Z) zRR4|D6Ie(zkK^Csz)HT3@!;e-;Nh{{asb|20qlEc0J5vVZv#UyR^C$^DZx=KmL2 z`;Y1%=f9bU|3w}Ag8BYe>L3&I7XbK$@#(-ad?ll7D=sM_qyL-mi|zYQdHxr*@!#F5 z|0Cl4|0Lr5+aCV^D&qZHdH64d@c&lC`%j0&|4{KbSy=v6#baS){0}M~8wbm zD<9$4Y2n}2E@p0J{N+UccZc&|&K3U@`hVXf|5q9RKPDc?|EA&Edj<4=ZQ}jgj`+{p zor{a(|G~s#_5l@u1})*n6BE{ zcJmG)oCAh216Y^nwQG*kACHRO!HG83pi2_zQtR9y0K|Ag=rE%WVTn4;*KbrfV?-Oi z(}$KA49P6O3YNr2qWS~yX5BVS=KHl_9cb%7ZUx61E=&67z8`ro`DZ&RY7A#797UGW z{vp#{z*g1N7-_7k_(jCy38C)qLPJ)qVtMq2-+-2w^3yJSV$T~U= z7W~lUY&TE?Sb6ojz>y!nw_}w=t2z~xLS}BO37H^hO1LJ3nqlG*QTNscD`BuqWa`iH35^k>!WY zCgkM`=%w__r3~7o^aaRMQTy9TC|}vk8=L@+iA$F&Fm} zq80In$abasJ-Vh3dmK6W$S1ga8@w8G)Q+Ce6>CpNlTZ|X0QT6eyTlc-*X%bJ8Nn*1 zy84no#-BLvxNjC-^sj6-#8IK-)W&7l(cP)QCyZ zBmuaucJLXT<~Y_k@E6N$nYoW&Ftf4pKETJ?~* z;(5V!RS11B?CTC^C1#~v`P!v`=lv?VjCCJcGV-ZUzBCCGIGK z^yv-t41h5n992_WDc;{QrSz4*nMwCxrX%dVK)&K`R>2qjruih1j79a=F!ZKZizCR; zOY>#|;tSY;jk1qbbK?K9rf)^MHsN=Nx%348!1wg~gz4!2_46=?K?Jua?gr~w+ic*+ zGtIhOI-}Qv5!Q<2rb+BL&N-{I)>qsLk|vfX75Xf1+O0I8^{12DAIlxC3r4UFGYCz( zsAYWD$*^PSSDsh&%$z|%volOygv}@CVjvP9=ypC?QtXgqrnw0_OI0nHhlh>OW%~L> zi_VL*7jHK@I43Pgp)p8bYWAaS@mtb#+Eb3WzL7KNeS27EzYT78!ZYh1@~V5$icAqqKPHJ$UQ? zU|;sb?KELB1b*rT6ZG-i%sq3xpMhQTrG3k2+ zn{MYd`*Y?rVUIjef|(-_1YWatck_eqUk%L3|MW<1Nen0R_H8#lCV$6q9r`fCT8Z-h zzNd)z+zjio-IhY_NTmzYG2@dMo2HOlPN?s5RC4Tn!%zdx_ymQSMyU~^J}7dS(rG944nLVEc#o4T1^$s;~DiJ!3sG+WC8& z;|V}EK8nDwrvOPIm`PAFr+~~)#Te9XZw~qHxtN4MVGKlL(CVrK3I{!HME-3K?@qvTqv48@MzOd2=TrI~b7j&i+C`rPA%}k-w9nq-_m9X!(ROCr z?l_R%DMkKSZ>YAIj@X|`9p4TM34APc18qcHa*y=cTL=y-zTNMgOsBE_2Os`CZVi;T?xvfH1shh`9xzYaq0bciQ95h)^XwsCokJSkA% zQl6zRq(KLL`im{G2x#*b)&YOx$vBEY!7Hn;%2g!%-Jl^#*o4l zNl5Zc!aBZ!%UJO;n@DrXh#v|JrW0Y+d58{UJK3k`+BIrR^S0!FBg4p4R8#~2z{!{> z*mDYR<2jj$A3K?di63{c;tGY|TajaAYo3a62^fYr#_WFd3llX9;-2X83Y`zs4a9Wh zO=`94@1G;fZy@-0{+#U;(90C!xrYqFCR{uVEnoK4p;M1US{l~pfu2pxR_Mqa4vFay zGWupM$nXP)%hbzuDF1{++*LSd@>ZF_CJQ5FEsVI&gHEyq+9HWyuFU3YVK@poX}U=e zX8^C{h+TVaD5s?^Ztx}M#lb}O%J|T6)>J+2dL6l=GAyzgDo&nji_i08x=h!kPvQwB zhMdDno#D|YgVpnR0qKE^fmmkDZV=TRNzSIKZN9@K^cDio zD&tG9jvpy3g&vjM#dbMh=#o(j7CFz{%&4cEjf)(ksKzc1${l?UT~rp_=NRqi?{w@5 zvTKq1DP6HR&f$VE)AL#XZ?&sGm@#A>t&b}>&HAian_Fd}cF1;pP0)md_V;0N4u`1r z^GugoB6+B?kOJQ;G4?t}jBGWqAdqEv!l~+OL}g9Kl#U)^$YRjap+Ox9PJKEv=D29T zZxF!FfNm~Ru{L2#-h(?U&)dd#AS3Cv3J~R--H@cchpw88gDvAfb1H3Kld}ne`!iC>d zH8Z)Y-XA#`jGLukn`-v;g{-qRZM2Y06Py)$BSQ(?)uSBiG94@46NyOYGPDzjd=S1pUl@KqNfps}n-`l}UQ z=IwkZBjccUzYrpl889Fi@`KyECQO-C&tL39-tx8Djw4zbO^O75woC=dEml87yeP*_ z&Vba6Lib!&b~}tF)+jEIE^UPMLLgqteUPWb5U3gJ_7+bSH_XqLaI*eqXmjJO; zfq@?|1{m@uU(pvAN#qCFSX)rkcagFg5`?uy*KJTaN%kMNnCWZH=;gLIwtYGh{%mq_ zb3PnXJ21l;`<-We?)%U#`_LBFKS%KfR69XG%cy;+jOR}!I5U6ku1H(Uu#KaKpO=wD z!)ff7aN23OVf>A8Bvq^-jIpwz%ER|C1j5hkA&>am2sh^v=kkArb16(s9UDzEOMBQS zI^;Mf$T=!Edqk)!jnXDNsnIP0e_re=S`)t%hrBH}Lal%*hpGrJ*V9m0^j!W6?dF_> z&RNB056lEuMbly6APYgk!nt(3@vtWsT>{k#kU;J(3Do7cTF~Xr$+?vHgX7 z+#}Uohhm)t4StOZ^@b+BO~h`cU9n~Oyvow5%9dghRvcE+&V!DsPEtc)(x}bEwIb)3 z)TBOAjgje1@)Zf5;>&YrrInkSb@^Gn+0wF=l=We~^pH9)yWySl3P)R0>))!fzRs1- zg~??ttLbkeAS!l^6O9$@gO98)*sf_+zEXZ(yqg*Cxo>71E~o}WQQn|AxBh>g--IIZ z`Mq+JJw;xeavf98ipXBmjtMB<>^G<3F{5pGLBt$IP;RUiRl^rnP^U{vu)^mT7eR`0 z^@IB3*MyOg2t+>BK%*$G<)H;;r~@+5{-*6g(ApHWcs#fH?J*i#`QT;!@b z0N=tdH0(*AI>t;K4irH-EN|4Wub>QB2`r6))?MB9HuP#gG2^aY@qax^bVj^Lv%$#p zNEMv^ULJ0Uj0lg=MQUMm2l*Jt%f#*^Zl`Fc7?oWL&G}7=9cGEr6Z!YYU>2WE`CHS=rcX_&&3;FYdmI(I9y@asUu2-+|zAwc;lTqKB$%D`=FPk&jln zYA0fvGg&D{!b8j!|B9=oL$8BLp$sC#Y7d(bUR+Kj{nrKT1w6Z)SI|93-YZRc5ci=T zjQSj+y2Jai0wM1n=vSy`kzllfC>M^Io}XTGLM7(+sNUwZ?DUse zDDm>e;O%pHMUt+LRIa`(e^4_0`X%+7Q7@A@+4*#PXNFJqhT_9x<;}5{;=k?VUdM7$ z0d<_Q@Ruw(4Yh6Ii$5-BeC-}%roebmM!kLCx4~W*P7k_d>uYhy?0m_&(q+{uQ0m5x zzjsNfUsSiHmyb#Ah~#Mxo9w}~Y5twj(vfZc>TaDjG5kbo6uKw@<EQS=F0UoU-%6-JWb$)<$D|@0y}h zwa9M|ur6p7gp4R!p4;PyGB!{8UL&8(Mbpk;l}Ru#RS;8Im^=!DccG%(FWP$a>` zq$nfIJ2&aqg#zDv&CACQ*G^|6xyfxy=CICaL4@2oWjBKP6Pl5I(VZlvJTu4wm0l8C zPx)@Uh(7bFG;1LlHV@P_{R}IAnm`|iGvDs-+Vu@0f9a>g#7_goUFJRsUwq; zh{9Ul*!fK=0SQMJlu33hiLh={-S2|7KmD7*1X~1Ia}GlLVre7Fye>kfiXl}GIk+o( zLf*F)MpsIW=e~guc*;qzY>C#LPJO9r~_tw?cWab(3`SGcEvaIz+qmzmzdL4Jmxl_qFRi$7#{+kR9!)gm<-aHP= z2PBxyM#m9r`Qyez1ERw>|Jm8n~?4&4g+04|%axmhxBG8!F+ z;UhzmaF(P@2v+- zbgyQu%AiT z4D(;3^WX|_N;3%({cqK#E`($nxovV{OpnO*{aqST4OTCSnq^ghd3oZnu+`bw+GKWHDQ1@4L^!=+_%rO8Hnz zde{2{V}q}@Iw<(avZob(D>LX;a8cT|XY;fY0ok5qS+yoLkjca^S> zsRd7AM^Q8>E@2xxsIGY%NH=a6jg8i$)|#GaX&hV)QI1(KM%^;^k6}gh&7X>;k3G-A zwSV9JKTyqFO8QGO1In%U#ptYc zh;2^{F885)ny`_(+V^iaozx(=PT)O7Gf0*IH<#l4Z(os zz9O~suIZ_}_uyeX*-5UnyW zENF+(+TAU(ZX_2jEs+Iw)zW#6=^yWy^2AJw|xwWa&Ig2F^+Ms%x~kk|nK)<9sUz=g zNM8@!qPV>ttZLK1FGKbn!VDS*0_ReQvVoF|_i^K02;dg*62mp_tPV>vc!0XtI9)hR zfoE+z5=!7Swltvf7ZOp$2T^61r-bFn>`8qmqI}Zgf^kD@8>eho8!Pq&RDzfls)+TF zG2=?X&95lmI35IYWGv&?D0$hyJoT?!LRd?;%W zqpVA=RTBr%TQc(+Dd{x-=5Fv&4Kv?!$3G%x$fuS8Zghfco-BLR?-yAj{=HSnhpKs*7&A0GYR0%wiFNod=lc?^`Sm5J?m7m2{F8Id0rpX{~t~U$8ZZ9PHy@ z&uDpk=SU?HB6WFg={N#*a?y&|9diYu;|Yemgn!^4cH;54RWvaGJB(^dV^oh4+VTDb zCoO0^#)wBFZ;_pF=FRl}ESp0~&GW;>FH`=;Uq)Aa#MZvl8Py(KZZxALQ80%MVX%dW zl8e?dd`0$C)2LxrG^B5x#R%foSNq8WBB)rkND}>MALhQew$V>L9{oP@SGxFQK_~zjPK# z3ZHhvc3r2C<;LA~QC)8^QEU`U(t}tY1vE2UDD1@Hv-oc7Pgfk>4Eo!xe-W%si8~|# z=&l8b0;WG^#oS3mCf|G2#%-7V<$nqNV^V>Q@wsYo! zp&i7Eeww%pr<_~~oKdkeO$pURZr0P@ca3a)iv~#Z*O3HAd#)RHv90oSly&EuTXBen z$zcs0smIBdqdeCow-)}3G?d&v$4j!TKPz>v1|zjl3>VIp_w<#wpLLsCj8>DUY%Pdh z1>I-1cLX)lD$tPLOSSI5D1Dq4l+{ct`f`gzhXz;A)QBEdr&S)BsyU2pE4&Hcetqb! z@hw?4E}h#pe;T}%ox!bj>Ach@Y&H$y2j$c~_F%peDwZ~2#*(R$f0wZ%QRxp3@KHyR zgJFDb6N!;~*g10^NVD{*YOz7wDvxAcdeo20cVT7W(*xhbO5B9<-zG`=X^ezzp=>dS z@pjE^Oj+y-fH{aE`Oz$w{WPS62a&rs30( znGAPgkc>JJpgh~}s4dVbO@7v4 z571?Urlhl~>u(+|>VZHDgK;K6b@Y)#14p^rVzie)G}Cs=hB_#*bTol8et>O}SWh7w zbyy){0lNo&4v6k$`9?X48yWktPBY&{k&qT-I-!q3p++c z^B6J5G`q|oK2^XQH^%YPByl0nb$l@xC_dYg`jBZN>(BN!oKPH3y9Q2%F_7!|TqS2G zXEc>JB2b`0s<`AwNS3)aNG34yn2l|f(d3_Czq zV9%)5gRBu92J-9WM&C^db){`XxY*m(8a0lsx5=7~BZe%(fsOP9=e5bSOpo6i2T5V% zNTq{{LcN>GT1fDp)>AZFriM;L6b#o(9k0_5a^d^yvWl`LG41$0!a#SQL=ky1FJ)%c zfQuPv&S>}mup7^ptK%TXk#u96hKqB~3uWgZRXl(CO^Bbg=)KjrV$5Gpzt&VO@w2P(`Pg=6iy zYp0N-Q68)V9AaQ1*u6+^$f;5=2%;|gjxU5-$IH3!5wFtP zre@1ShE(BvTZZZnz18=%bx-~+js*d*?mQxUhti40+8q7v!idW6V{Vw?=Ba-WWdE!M1Bg*X zTcDxMQ{8b)28CkpMT29Ea64!K{o^wkrESs{%?~#$oHew?!s*mLu0w}T5AS*9cjW}V zo|O{`42of^lEkhN1HFSgMf9*W5YJpl$BM`>kP>>vTRTkJJpA8G{uDjR_R0LE8)+LO z=y@W0j0S)89P}LFxbKo$rSC@!kVxpj=e$LTCjKi|*+DQKRhJYWD=FN7)bUpiBW;VMst;6K7q3`T7Pa zk`2RAbL1=Agy>`U*>FwSSUEN4H2WWNnPvJPW{{FQB8>0WqBAj7XO<`|eOI_x4eG~Q zi>*Vn-EeTo!-wne02`#4=^>sqzne9_X5s?vIT{$aVqC&<3Y%lel1wAE$2 zD4b%|m*0YefWOYzWVpPQwBhtL+rqICKXC;g)+|iDWVXUA zgQCKVy@8=JL=_XB-_6q2!;%8NfMtl;Zec1z9b+%=H9o8Izyz!s1}5TF$>Rw$hbl_C zs}bNiQiKDKim_iya4!|to|HS}A5_si5*JZL?dq8HDQ6OVNuimPaG9mc$uw8X)fC*x zPv!)s?{iFws5%kN694j2p5#rS%PrpJ6mmVlyI~qbN@BRQ14G*79p4S}1^QwZ^B^D; z`v`Xcq}090i~7ts6C&0Sg@c1DT&fkJ2`3<80C*6Rzpl&31@WUnH0so@7E(lW@VWtT zf}i-xm9mJ_l|=n;P83u8OJb>=IfIiR$o2O;B!nb}Gt@5$Z3vEmuA3 z5Uq3`91A;$yynKGsxoJ`?X)5)MJ9NfS2H_IM^?H%A9@ED*obatPucFg>+UB%&zAUa zZYJ-zZDg8)xSAG>t9Mf6#y;;?W!kFROp-{+^wW(yU|29x1YXNx9TPKT{hcWk@7`*D zn1O|5c)&vnUVo=nOdWIxWhJuol~XKQ_L6O3K4x;@ImM=sU+OX!*b_S1dHsXszwg{U z<2dq~{vvai)!cX3By67=HJ zXO_piqCG#zUcDz+*r5%3E^k;Niy^uk>F6%v0wEHEwySBh;H9b~5nrOSSs0O7v%!M+^hK9FhVn0%(m|?nk#2b5-E8^MXxHh7i!*{(aX?C_H-)eW8FC6 z4gIxw0>o45E#c8N$5!9MQ<^!q!<p4^+hKcEbEeAff=&o!s+y>WAzl|oNs+WFu2Sd60knBH*V)dYj zvP`N8sP1)Fc!dbZ$k=POi)jO)R*uFC-lwE=Vm66M6AZNj7UaEm>LKvEz#a%)Rwgs< zPdQ{82b zhNjM#t#@G9eKm=^fMI3Yz|P$GhD(A~p((Zz)}skE;kL3|)W^dSztzi01su&5LJ!d{ zhI*}QuT2L}#CA3|wqn)gX^B0*VJ77NC{;W})NH+iwCr zCFpS9IbO`Kvfr;JAsnm78+W#(f;T$*db2n6LGQ~1t#V*j- z*jCT^CX#EcDgt(95ijZJkvHq@$ZT@r@6F+$^!1{Coa#10xYx&6Oqb>?5Em43Gp8^3 zhM_3EQ+{BSbs`kW!>0o|AqVz7Kfb&{D9c?-(di)XWsbL~NG!qS8gEh~Q==sE_G*k) zQdu>zv^yaFtcB0MYoFDc*_tUvnB0oGAyqnkp{nUNM$vr)H)<(MViAO@Nth-#CIp`n4}p{ptp`?7A?L@al3f(tC31)_{q-#Yv)!60+-pQ*zx?$L9+l3}gs(T0dMT3E1?wQvFHd|xg--XTv;`HFF zIh49;V63=FJ8@!f#@}fd{DyJJ_pLoaYR*(@VU2!94?T2ox?#0@7{5Nl6_tkppCn&w zzK8J4Q^ARhQvp!5eMXS@4#4_EFb{V>`77d|ln-=sy>N6tI?As+p|@7ZO}nHM=(KEK zX`hL7vpl}y1Any*%uOOrAyVor#<_hwO=m>Ufdp}b2K}M*Exi#sNx3kNBGa4gGIN!y zT2*c&a*J|Rvy!sclJ>N7w6=1(UB8uim3fSqkzu+}wgGKY?ef#o*XgOMHXjV#6aKnq zC97gCE2WFrt)8w{x70AS&o^c*S}1^+!MGi4H{NvYS4^DO9sY^u$u$vk8o^5f=+E}x+o$6euEmDMm|%|IrnAv@zO?j=D)EZiAh^g3h4PJ=Yg=& z(^&S#`YxtT<%D@CRN+bG_dBRM#)5+0wL;P<`ngn_l^n~vBkCy~?YKktG4|=ZQez79 zNDM<}^0m2jW1|T)Z95Dm5%4>BtPrt^m}Xkg$5Fg50p&TTnxZ*ay=DdN>LVL>yWmNB z^Ech;UT#EpqT1Y+26rK8Q&ShcQPQp11$UbfE&Q?yK^{}0E|Y*Q&&Bu%hm+{I)eu|r zjeZ(A&LLXsXnHeWS@ksj{>(`}-_seQ6F++%**sNNWG3pOKDRJ(eFQx?L3O=oyh$Uewak0ddgP3(-FKR(qkFG6+W_1bqahmkQ=DY$J7)w8Uq{st~v#J@dD4$h4SV#^u?}hC+kz zUF|H;UDb{r1O1A?QktU=<|Pq_%U%_!Cug{sof%7t0|fMF1NV>eg1w~jmh-f){+_B< z&l4I=a%Pw35*d)sjCg}2-}hn$+V@k?&K0UuSXBMFM((_Xmodi0h`k8%l$317P|ON) z;%lKRPFY~aL!F~&%3SHqkhMG2 zTUtssCGe`TqekR=48ec%6J<%;wh-P9tLt>PuMX`m3Vtp11Gl9=ltJK(XY$>+N%8KGjS+(ancWcI;gtgz@ z2SG5U?Txg@N6FDmRJv)AUsqTr8d{VlCO)9r#DAUJBH{Y)2)65 z%?><#_*o=PTe|~E5k|x;n)kjL(*skOQ*8-Q<;xN|ZbbtWkro&88hv$b_xE{(P&|mr zQ~q>NhOHz8zGN1&oQI>D5+?f{i;W~K1CA156_Yi!Q{p(pXvX5BjZUnTMVJz5OUDaM z36dK=BhDyv?+zNObjotDZ8&V5^dAW5b?dwp>BI;!KgY~R<#*D+@h2l)4sE6uovk+A zCNglUErjI~Hg;inaZt5COUBT(w>&rTyq{%hdz={iZO&^`(y_6sCL!BTLE9~crliC^ z)h4Y^bSA;gRgp2^3ylN;*CEVLQ!h3AShsHj(OYq)iFNYWMN*ctC#TrnrRJOyyR;QO zs?Y=_Jf%YqBhsFp z?0dH10pQSv8S;2?1+fO}Kf);DLf5C~my4lta> zjqt=G1_&(*ki`s}^h%T3q8Jd>Ng(PE&l&M!`ws59pb5iuZ+yK3WMEt?xd^71Zk;>p zH;!R{Tc{Bz!;7Zw#r$yh7wEWD;xx=EpgQms_^R8$)(Nm(pwH|+YUTgUHB|HGecr)J z?t+-z3;TUux{_$**xOdDr1K>>)(wkt^K+84u*6HKk2v&a*rAaL+8A^XT0T1lr^b2o z-jdldaCnjhjZ>VIr+^76oR;`>+Owl+q3_No^?&;i8Ce>9Myo%1n?r$n> z3bj&^cAbAe|AGcj5(`JxsBY$iN2A8ib!zV4LB#0EKNEpZdj%5M-?3)=p4Y@f*gSQC z+5;oNSP$rLNNkoZD)1|IA`a#fY=4aQ@IlPYL-60AE@S=t3h(pP{x(yY5r-O#Y~M%4 z^CgFBwF zk3W%@D%TQqLBO*>+Z62)>oGg2YPn}X3MZ6E`OVYYuI)oGB9H@9ok_wqyT}HEtT1+D zHI$TO$sKdY>6%yWuW=4n_JYMR#P^QsuV<)2yO|x&8NC5eR=5SV;^e6P=YAFI3a!GN z-{&8S`imHkNG*cr5IR+iL0c^qEUm)Ja2+hNdu4l*Xy9|p3utJd6*dAZGXM4>$OTn; zDW;snXBsyWw74uPjUCSi4Q;VI-ZTb~C(pC(y(@pr416`BJyL++FKwi`Hao>S{-ay4n_nmbIN9x}8`fzZTs6^tFc*7ZOzDLo2$ypE35ovRY-w$ zGg4ty%}D@n0H#L)_|gbXcf>96V7xNU#FJq<=lDy*p|*@v%eD>=S0Nq+LScI-6h@({ zFe~E9cv&P~R$3}lg~K9X44{mg)YrvZT3fYRE-vY`sE=HTdNMl?iiylPsplyMdeN&K7xUUtf`= z`ymA+1)2b!eRbdo)!@0x!LygNDk{Rx^{QVe8>rnwwKeJgOtXjTdAe8rN3yLkb4^Xk zCcC{ToIkuvh-Rofw-Z8WLMJ5@vY`5NL_1U@(fAaajp;7RqE$tN#1r_;yX0**TL(FA zJe%g+MMlh&?VD&;I9I*s>elG&C9)0P6}#8t-{m&^nAG(DKvV-Xd|uh5Yub*qKr7u7cU4)e<{dDSt=WmxWP-s9g7a@Jit>2Y`hSD z;KCsWwx4tZkE|@a4RXRi;*aTO@4@ZeKiyOK9a16h!<$WC_mx-Ve)zaZRPh8lS>?_; zg|K4ehWB|6-lv`WY9`Hhm#kCEu}`vaKRG4%uW2nGBBJ7fXA`Xxgk77qpk0iQpPX?m>B=dG_Jj3e$P z73oB6Je@WejI1qg)W#F__5MJ>UsoGQNa!FACT1mi65A685~_rhD9t1!K5I#AO1zmk zoHzz~edI&Q;Sb_jm~6raF~OMi`B*|&e;>I}a@s_OwX=bVwu81qwy$igO=x(&AiIvI zXe`@6SR2yHfA>mAb|;f7-P|W0d2brcrD9aSg5@-5?N3-TKg*Bt<+x5RtmbX;D z;9f|&f1bTs`TxeFt(52XRlwP=#1Z`Cop41Y#rS78%SFh&vvbdIcgd5_@2EdIOa0&D z7ToZAnXgjz&%GA#0`l^7qui<7K!1w7eKJeMe6HYS1;FuT0LLlZBRRDM>wJQbyiBkG ztG!1oI05Tjnkp$tru;EID;Lq!Fd7ZZ0ON0$)2<|7iyhE8 z8ldTLsKy@(1^oV~mtYPc-%9ZIQFo(jSQcrPt(<7e4=Y@2MyY^=qGZ9@65vj>E`l~m`! zDf%kPaD1Y$Y)u80O|ce{WxK*mV8L3T`q*yufya5}y(pcslK=nA-u;+0mq~ai^0P#| z2A@jKS+cDE7KL8FCU2RP>GcO>*O0JSz9<2cPHO!y_qd?E+fT1+*lB z%F!{&&3ag`CV+xAFCUC~v)+;3y-9r;pXkefDRJj|uJDkAwoH4I=awKjm8<<}sjO;% zNlnQzSp)@Qyd~NiCDEuGM6=SE1=wIux*QlqPN?{9aM7Tss-~K1DrIyd8ONg%^nDbh zWAF?XDi3!SPVD&a#WuS0pDLq&M&VXOVc7&AR#>NrgmCYvnl|7%K6~OXqpQbt3_COT zFKq0-Z``B5%)NsT=hmEz)30AM>6fv3k8R2s7qrZ~SHWqkjMEip7=BfnwLW=O<%Y~{ z$vZL+mpoW@e}$G`TD7Ex=o3uRo3JPC<#9B&vOUvYds@S|VcpRgu`?6hm1opU%}lH7 zYM41}esX@*qRi~NZI$j2uH9Hy_-Mrri;&MIvU z1=h}_F`+FjFKx({w3ZDkAJ%YMbae8%=*Gn5$txR73(l!@rf3sa~MckjeUMLI#av*{RB$cm}T)Yg`v$f{0+w^% z^&g=MzScC=?|~dzWVbc>=XUD2OtSNc@Ua{6W%j`Qix&ndLebVkUVV^vI!dD=O@gJh zVt#;cO_qRHK`BIS0K5$KYN_>9hI+LDC|66Zr!v&5rPfm!>Lu-f@c0xg?Zn+GO<~*H zz?zf1&p=s_Dp+I2NtWU-#bVnK3?{2qoKZV{YEx*~XrGaH=^bP1Ys+pPSv6)svt4I( zyY@fy6(Bbtc<#-=44`*tidA%_d6&&%aEn5%(P~w>?RIW`DIWV7Mflvqxvz8I<{l#R zPeOZuKe`_BEZ}`Ps>8q9i$eJqqzPiEC24oLTe`9ftIn-rG|6FAW2I*Q74U zUYC8K?9r-&@ppo6iHG9vlz$bsTH?B@k-<@+3sP4GH>7R|{yO+r>J{<}Y|mQXCLi!5xCE|+aYuM-_|5RKFdL>^vBfHJIL#g72q)B! zU3T(nareq2-AB4*3*IK#8c^mr&(@a5vC$T*O;vadLBo{8f!OfWGgl%GOYs<<;)&P;uFi|!s7PpWU_Q0NcvPn%fbCbf&@h+^o?~0B0 zSDZe3;bU#nIzRdCUoNNJs$AKB@4Zir8d-V!A7;*c>xo{r#Yacy-2h!~zG~B)>d7@h ztIwaOJ##ifY(j(e15%DX3-h5bnz_g z3)a#FPNG$1>3W$>aMpq>FGP3{KM0_a(1&}TiwfI_n6MeIM zD*&6e`wscEzQ4z)SV#4M#|ySbt@8AH%7WI9mbZQc!l419?qY;&eqYv>%36%~a}Ue= z{-2=Tce1iH_g4zl`25^8au|X4J_F$K5_s=Q9Nv$7Kzf4t?{@|{A2kp50?5WLcRms-uc75Ux4If$c1a5&t8pI6j!W>k*LOHp}w zCGwY9^~#D#sm^55>-<(l_cl6SQ_#6p0%eNCOH18xULWVJ#1EWoI26FR2gZh2&_pzg z8iZF1o`6<6Q8!E1qg$)nq*LjHsv)vZx2#~LP}@DIY8?=I{+|{eWZP_+tkf5DtkB~F z3yeicR^Inkn>|IAVfw##XvMaRMh84*V?dEy?t1o@XI!&LmT;8}wxxggj$?CQzJNR{ zFE7e6?C_1xpMLK=IcHGs$`$6GB<_@a8l-VoqSM`Dle7Ida&P+o<^ESv|1f&kPmFeD zEsCpgaGc%YH#(f*GMWV>enp(1I2WHCe>2X;2gQQy6nlBHcvI{AKYkn%1 zJaBHVv(05Und~my;I^5}HrKE4Rcd_MR<|7zZd|W~65FD47>y2{;-7FbpASvbu?2aJ zy&uN5gnX^=Xp-CECQg@1&4O@O;<2maqLJvL#8IkDo|JSn$w#BecF58hJ)RzKkFUpn zweu?1bE@a;pE-52x!Km){A?S0kYLWqxg@9LV%@~+3J5`eprq7QOKP1}u2E!^v(43s zyPVTqSGyi|y-Hqjz7MY@FGO0o4i0l!JIC4Vev{o1O3>UuRE(~O5)|d49nt5aZ$?$o z%_Y%jqQoC6K}NM)L}$?jb;P1OpgW}dN|y&z-K^5-)GEJG#flzU#O|Nv$NsF~_j?4t zD7X>4u-KRTx0G?PjA&P}Y`|f+!z@w)Am$eAZnr=%VQ|3hg1Cz?1Tz7L6G}Kq+|@_U zlLGEI!kBTy8CIK!hdlIO6m4;nI&Lx&{47oZCb?mb5}?z&rRswM4hmS1%Cdr#sm%!M z(h!M6GlCRPWQ4e6DG8R$Dp^~ysbovZ!IG~^v?cq=g}?^7fCYCs;Wnp~1_!q~B~RAk z{7N=bn!cMz@htFc7w%Mvj%VO;cErG=SzInTf_D6z9oyra3M17-)h5+J6{~s%u9l*a zvYvmwvMKW@fasS3cf>B-JPKb-N$)~7RY9+vDr?^W8S;s%fDZ7Nl+%9^>hwXqy`otfYznw%!I{??#(KUTiBi+Jh@vu;RB-<_-Cpsrq zwAD{C&T@8FOsbz_T<%<6F{l3Cip}*8h5PuvP+z96{T2R|&?}i&+W&;U$b8j$wEdsx zYy34Ac0;w*m~Xf8?GY{<;X;|3Y8=XB+IgN2gfjL}C{rEbcrJje?HE@R;I+B9C9b!{ z`FJQU#y!L1?eR=J8*i+NSI5OZa)IOnUR|&CXd6ix`6`1m@%HxC`uf&Lq@p6xPT6z5 zwN1svF;*FkD!2)1f5gof_09qvbb3+F6Cg2=*+Hj6&wQ` zU0~wq0ux6Un7A+>Xywc%CwNACQ6TIr&~kYtpU=O&3-00jAcWiG5boru1_*AJ({Mix zcb;5@1^#4GF4t3&|5~z{U9DD&)z@lOIjF}uTB(LfvO!kJ4Hw&~$GI(brG5yjA$$r# zs~O}vJRqvdn+Q(bgnUXyEo7X!9(8I4xdU%fbRyqS|Ek;rxks*&)5qynl^VPuceM=V zA5)k<3y;9V&!VwUXr4%>_4g0#T7EV+T#1{VY9NiD4y;Udms^pAtF>Si7csB&*0B;&hpO)vD(o5@Xg@|!t6go-$#f# zq>DI0LWC``TtVTsaHd_#61sgp* z)k(_?Y@08O%6p&^$w(p*jrhwV;V|aHR>TOp>WHl>o{YwmWn#R{6XJP!hYK*`k$6Wn zuI?iT_5gy%tsKN8ODK-`iTozI9k6C7k2wCQY`uQG`)Gj$R~AR*{R~Y_MX6>8sr&XM z!uKQQQF}7?`12)|1L9VKG%FNN1Kfq&R(D}b?n?Ai0_*=jEZsD~{0qVNbDOGZ>Qm~S zfrsIm$pdgxO}N~M0l0aZR1APh0{?mFK8kk`VsZd0FgHpK7c!WiqnqQH?OdT>X;|S@ z_c5Q5&n%3VfU^V{m!*WHnR?R7Ok~zF=UdL>t|3=57KH~e=*}!m`O2=QGLWB?VdgA^ zv9hXw*+h5{pRm>_xB(cdA!!Ru}#EyBJRO!@iEL|!2_eJ zs2@ODr6j9qd_SEW2M!~q*3(0crBAh-9@py_n4v8BZ*~xKac>&kPqc@jM*(qt`HyxL z!lzv3R>D|aMW=lYpj*iVrajgsP4gZUeTstq7_egm_G)}ZIKJi<{Or?1p^=o!7h zFL-3=hMd-)S`98j(%@lVugfInu%eD-Z~XTG+9uWK%3%l?{ZD=p^QmePvY^xV=t>Mi z2B_qpBojn*IzhJ_FVV8*KK#mV^?2N+rDs|hQJ3zSv>BV<=0%1xhj{LcYE-<+&Zton`InE{Ri1MauH-grrnw@Y+%!A<(#pTEi`ZW;XWA_ zx`Tqye{gWVz)v&%46mw!cMQQWYdFnp%?iyrjY{)0{ssVq#s5Uc^iim?8|riooSmnP zFfo1MWCY&g`a%F-<$qmJ8F<0|I$*v4%=6~_A@)pW9V$V!c&;?*QO*6qM=O}PCKhaD z*VxYYoabF1#raK^LNG^c5*4RoZAYme}v+LVgXsU_zo8l7Ppsgm6048k!iI71|Qo9y$;@6w-z~ z^{!2oAvL|;qu!!EpgyE#)k0m_{=sPmC&%}HQrP&V0BG^(jCA)=s+W*YDj3kAHCP)? znJfzP1SL-gkS6~<%H)rsEI1*5d>5~+&=yaM?Os{ffNO`M`%wUj*z(U6&XDa6Wd~1& zbqzU8g&vWmY!@j|3MMXJE86f)f9lQK9zFctu&XDoTQ_%ysN-CE^Srw|w(ML%sn&~) zSDg0Lq6z1(I%og93-7$6=b|Sq+|?r&Ht5~FRd4Z>-7~NMZCU&IYb!Ugaq{Vlr_G}J z^KuybX@J{4RDz>BsED~uGH_{GybPOsPMWp}X@?*<9bsQU!(f9LH+CEP@Vq_okWLH% zk2_B)V|*}20V?`K7U+4R_LN1YAfxE8Q^Pomy~lpY4#d0ktm}sk2OWeX#ig-UdaC3R zU}=v6OM9fS)A>IgH#V->%ys{HpVT_Q&j;PKwa*7%o4>m)-teA6Do7x#xqMUL0as zaPRv!-uOOs?5F*2y_Ea*`4@7>UV1=2`m9CX4D`yDzy5U#I8@w2ISz2M3?17O(i<#v zdGAH@EgI2=42`bX^ZgeK}pI7f)%W8)K3#qQXQ#8S&rVM**7!RVxmv#V|P zPTQG|vttVr-+5GOkH9%RrCcc=^K9Vm;%;@{;(5UF0F;fyd8<=R z$CY!>;CH03t9{U9N>N!;-5%XOnH)T!TRl{1?HpAyS!evD;&@}!zH?IJ)pv_ zk`VMbpoAC>*#pREu*>__T|u3=j((vHV^1m;TE}6o4_~`0S+=fd^|`XpLv*pGNj5J7 z9^wf6AE&tR^UBexO64qTiU_;RT3$=Z%ph*;MP(rAi}nOnAjd(@h-jn20G%3ON+MbH zfI_X>RRrgu2b!=%Au~6AxatoVUigRAAKWUZSN!RgTmST@TW|Rj`{@toQ2O%FD;FL< z|AIpoy@KCYpn2;DA8e)2Ok{hEG{CZeMD(V#MDM)AL8{4cGMUUHFOipQzZ2f)-xogc z{*U|P;J=+F!B^(Xkov$_@9Dvr-WkCj@3P>f-fO*g`0fZirLvss+~<3Nd4Ye`_i8|` zebMR>MVKe8{*X(dhXCpL zqq4#6(Idr^YGmWelL*aDr(F$XVYk;F43NIUdGejI)?_6PIi05%=_#;@ltZR9Z25_Y zogY7P*6-VFX3ou3etX%Ua)+?xmEU9iG~u0_ZhG5;@44^gmKuv-wQ|+du=mxcfO`Dz zWgE9Wex0&k>OGJdX8>$w&}&jmGIpresV+BOR<+f*)3`hNeDdw2-letZjIVH9SeL0l zRTzXm_DO`o6~L_ZVM+2}fZb?G7{$6vLw+{Qx0<+5WNEF5viAM*;ZvtrpLU`g2cfrO zUxbdteh3|ps?RPxr+i*|Ud=_OOG;PPTwA)X=AP0UY91@yTC*=;CR$1l=E@{Or&4Kk zVS)n5D!0hFL>NtT;HIjOs85E_O>vF3k*Kj6m-t02>h+v%tFBkaSafs=WxMX6PNnl? zD?;lcnFX%p07!1m6w;rKnwY6vw+;9q+7y`%p zkvD%FdGg11mT9Z|^55?aXc65{kQ2-bM5es2|kqR_)Qer1_KPkVoUuT3s^bw%CJqVxQ@@+gu7=Tb2CV%R)kjl*k?6}yD%PJR z`Two;4qPg3F2VWd=*f7P?&Y?63VXQ$Avup%rBTPcDj|qH8lQra^aQ}c)&0Floj<-u zGzRSo57enFCo5+I4sxmks9QLs;^&t6@#K!1y5?Rp^DGc=g1N6`W!mNE&TLCB8)~~J zV>WO{KTI1va?`~Ae-7X;({)j~cz*vE182py6weJr&j36)RaV3RC%aZE3k%hPBup0O z32THa1dYwaO}7I-t2XMUt5jj5(RwX(n z+Ob{mPg*-D*>nB!I5o9?ck~ni9}TsCbVRbYA6e8Cx`1rHWGx;`-@M-~i@syOrF&;p z)<6F_H|fMTLueInGzw3$J9jBlFTa}~ZIO~3J+7B>!lkre1Op^gSHPp@g&QJ4azG^W`o)@MG$$L*?CidE|$-dtb{O3 zAZRp+e*Z)kvqE4W-h=;u+=C0bvN2h4vAq9C>v#Qw*0=ODHkbzKyAQncP?Km?b#0a$ zy5zE)i7Lj(=;_m&r{unsyFhpL74-f4PsrFm@9fRxK^gh4T_n$Y2ViV(0$k6MzP+dv zfZ1tkEu|LDcB33h6L~}HBHM#D@K zy!#G$k9^o`x257Ve{^Z-%vfn@JQhyHqOoXH%x3J_Y$js2@iq}f>Ud+Srm?&{l_G{l-iox1nCR_PoYwV3aOBQdbZT}V-il(7V_K0}mmy-NGBZ2F zWGGGY*V%vrfH`P|Zk>*BI#E{%5jq>Gbwcfad=FZuEPf3dxzJByQH$-P1zl}%bxSrs zE9_!+HLPbVlr;le{_S0XCc44&?Onb)B^0Wa&{ZynI|t2MFtu-ywJoZj_^!vvi^V^$ z@jbOH5VRi^KgrO=mOs496V2G=U9(ntUeV#55Xwh_%Nof+PC5ddv|Ssc$Fpbh-wm~! zg%VJzqfqMmT`?ge4xH>jmn#M~RS$AE1DfQ}fF}7z3mH!j5gcE{3z9Onm?-g>lk3A< z=E$3(j?vu4+->;0+=d}yk`Vb+uP<|*1B&L=GEVIWoU#K>xly;2nd?~XxZD9u zh;cgQ9f4b%PB}&1?YPBi4Z9IAhzN^Tj+@9G;22I2hSEg&c<`U6g+EINZ#bC>enY8X zQHU5y+%a;{GlYOQ8%4^bCQF^A-rQgrW@)lCTO>=nWu%Ue8*7cby*pEE0@q?P)i+l& z*SAKq#;2;)RQpD1M*5~|RF&GgW*I{d4a37mwG129+!C&HSZG#2rE6*`)8X1t63tw2s2#VD zYHe?qTEpdObs%0*UgGzuv8Jp}YDA;dWg*5B(&-pYU2SbF=FpqWqRS}-vz5+uPU1Wf z_Xos8oTlUJ;v{~e1*OH-7OK`lEeBc-wlFQi=&~o=Lo_J#yJ}4X!GH;H!6dY}dcrrL z{|8&%?jM_s74b$*>9EXHoXT7jxC^nQ)Gg?ZtjZ88WfMWHQVV)l5SOURg4k{J1TiX} zDk~r9+1(9nhj-9uU7!CFvEVfM_u*OZ0~7OBkq5=fIiDKZ0#A#4)&+#LB|9Nh4)gD} zIg~H`$RdPe@H}Ycz_gRoLpYXG(e$&km$l6e)vq4bRXbWf!{e?AH5CinM#<5MRpqJX zb~*ba*$P6AGIOV{9yw~%$i~xW^zV_s?sJwUXAzR z!$`#QB%43PYJl72d8=Nh7d?jrEYL}XlNsI3m0N+)6)2ZG$T}5xTm?M)kHduVf44OM zzjC;CuTQ1bXw_Px_Nf5myjs7)<(A1@u6JM$s~v9r+YYZ?0kD z$H{Q?BSv@H^y@okPpt2fA>u>XZ048eoN>|0p?q!uTGn=sC=F~pt^cb*KDYDY_AC3p z{t<`(FL*=#5ZeSWVn8lDMyltXtkdptGOyxS4eyY@sQ#*X$Dlr2v&2dkkOk}#?GpV` z(=zJ<+d`Mt5n?PM9b?dGj3FeS4e=jct3Y4=1&N1@<1anAxm;?k(pwr5 z;IieD@Kn-mnvY>j)MuO4;ET&vRTzG&eop^q&7XDeC;nXZiTY!`R$x-h#hPoGJDA5A zwbLgft&sK$g3ljzDl?UVf90fUsV$r?%t+W&nzl4Le2oCB=5)xQFAd?FSPcp`#?Y?g*nZYY6WCB{lBf0WA`!%ZTl zqh6K&>yAX^q+>^@8NPyNRMSJ%>OYHACu!HmJ$~*be_WmGf9At$m37pfAxidp-n#vc zx8J_wwzrwNcXZ8Mb8yw3T>hz?TG^)zyhWqT7A?8q;G3Ioc=I6DO~Tkc3S$>RX?!|8 zL;Aa&mWEOaeD#)wZRjEIwiq)R&GO7g%RNg&tI;K%^C~V!*Lkk0xFddd>b8nU;*X~u ztgzl6!FQEDCO%fmC{l!Zs7gqo&IZRT1;VTl;>nZ{7exf*NtC-AdCJb4%R@fBj%te% zA#_t%6UBl~5ZCFkMSoa-OwZ^&Rb?T1km1%~Z;(A0JRCe0WP(CvQKdXoOC%ev0`Y}G zrQ7~nn|?|~^dIQ#$phUPX%I%vS{S)KHoMu$ z`-)st0qagW-sk6(v4q@z-^g*72{ygi7Rd;8cOAfMWcK|WD$Tzpn}RZP-@bY30*_75 z*dm_kkL5D*;P6%#d3u1yIY_@p33xUFe=S{YZ}qhi{&dudmW+5@e7x>g^{?Ar9sW1l zyUur8{xbX@wj-I(hM%w<&wM|eH`vrpRf}$T(B^PDTD-$IhHuI2w-~0`X4EgKU)p$4 z{iTi9)L+y1fPJT3e|_VgAep31mPX=LQgc(rRL7@!C)bHEO0dgeC^4i3St!jH;RvX)JYwBsxzzVMdfXdrEPs zFtT04sN?#O;j9AE$y@IVpMt~5qlJ@3WQz?t%H4zJ8Vy4XHVWrE@yda~^>xE}(HFDD zTrG|uYV)43-EUYAa0Aj4)AwZ*xBS8)bc9F49h%rJOic z$&RqYv^v6Wu(bMUJ&{LGPuv2fyBn$KVPaSYbKMXO%3}xsScAbMCjY!0!h4a~& zOBAV=uJqMUUVq($#!;15Z67gb*6&|_d9Bu=d{gIsQDKsVO8@V6MX<8NACc^-lvXFkLoXp8=M#M^ zdqJzQArRd%NhtuZP zh$i~&uF&`m=aMwdluyi~{n!Ql*vZUA382MBJ-f$AN}SlEwdiCTY)os7Mx8cnQ5IGW z-U)?;)kKJ<%jxG(Mv2jANDL>i(_$AxjVPgaxf_FlfJLioF8x7%!X8;_B`py>2+je4e0 zuTw`F?R|KuWU!IOw6)c`-O5<^;ibrib&^TqaV6iwZ{^?QS^gQk9bhJgLxuhOzzTgL zTdo{ML+p=QoBpHG%BfrMe`3G=Pwc;!KRF!vk#eu*)Ev@#eeNOolyxkh$+{6|Vz@&2 z^k)-YADPOSipTQzk5**Bq8x~UFz4BuVJu6Sl=MJ}GvT_5dDQuUtB>q;?sjPr;mBI& zCg*nNv(7`#oKw4%^pb;w(Xv{Hn{_)%NGV(5NVw|RddC=cjAI%*%|6{RU6@|75TDI1 zb}Vu&5*C$Q%wFKQ-Fd6)LGl>;uw$!h582Q5IeJ}B2~U;0>U`Pt7w6lqzdMh(k_M;O znIuVP(zRY#U-Gzfzw;&4OZE?(pW)A3-;*Dl-@B~J<56u(e3BT-he2Rzxw1icu-b z9HX(V(Kn;ais-s1p{6V(8ofidV+j}RShh)}vt&avhFY^s)G=S_@OIgxg`p?*=PBNo6ip_hy2p*(zZEcDR*$2b1gSDBNF~XPAjJ~k z`2*ky9`G#IjL;~}F2N=H@k6p9%SOrNoJypsh76(Q2rWk>&YB^8_#w%p5@$QGH*;JjI4(1yCQccc)48Y&P1ohpDrj9RDNNEUhmPD zsTi~A|^a= z*MK>TGX3wdx=of$O<(@Aoe&mINR!ut3YIP(Njl!pY7H3p)*AZxxv>zj>Yc6@D@>a$ z?QH?R6;rRh&S!1K)N8Nvau5Troo;o<)C=kTVoSyXUbS8Dws4g9uBOa3gnS`v@5{fi zi?dT5_zRK=B9SKWLe%@&gIFj-juqR<|71E-_%71Vm^-K=WGlWbZnuD}{tZQojk&$K z{qiK1`zqkE*y8xI+@nz&T>qHPY4foc`{z?6`j}pg;umw9G)_}tX{sUjvZC`eIW-`j zj?v0jsHWyCY*p~e=+w%1bxZD2_IALlYWy^?6v)lH!%0)fmBm@>M3dzD!S=7PL1!Ch z8yjAX7h5l|T@b$7c6E5K^%>i~@Jr$M!e*$1ujZ}QHifeZm`v#bmc|$Nv}Jb=@LGCDPv|N+6Nipxm#c$L8EP$P|DjFioau*2!kICVb zt!P%_X?XI=f^8OOujv2cavA#Mg9oq%=reC}=wt#tk?c@_2*7JlbEMGeqX;oy0zA3U z-zB}7DvPn!tS8UpzeA?{_ehUeDwk-|@-bs!y;BC75w^6&X5%bjrx_ETh$ge$WHOtK z#EhLLV#H>Ph+M$^iUy+|ce9NaeXG8QYVHJQcMtt|y!+fC%DVA|z0gMn%w-w|zupPt zPB~JSD2wQXPUb+e>ig>^CAESu*GJrYkf`mFED)1INc5n@+ZD#QSydEx|F=EqifAY# zzKuMbhj@hQfA7V=7}$L%Z$OcKdX|omP6J!w_8b);=!S6Mb8=Oc@(SZhOi$;xDj)7H zY$eQE>CqPQ*Zk-q0Rvz2Q@*aFCbiYPYj{;qZ}JEev!jRC_?%8(rtN|$ZjVVPR=1Vl zZ{p$dmfRf;r>Pj75lC0{$a#2i-8hzU+HFpT9ao1JpY;nj&l~lOYHVHZ_SW$T6KY3u z1N4;%h4unG)kr1-!Wk6RXa#e@eyC}@{7Fw3BBo%(B)5&+fD4O3Zg$(h*VE2dT?ph> zhFyGf?gY~ykHI^Vtt^Z$3jZ$rd6;=LjD4wCIsNp~+maa~{xEn!>bYbVu{`6Tp8OFxAm51B<381Ed9L=B7@{n(p4YRN8%j-TXLMy)VZo`JywS`UNvGY2&)m0MqGT%H7WGjj~z+>$UzMr(&FbuTiVk z2aTbi-`}Oz+Vy%Z`eUd|z0LMVW0$vw!4{^6A&e*C6yoz98#F{pkMBQzy#ENbJ_0g~ z3YI7ZB3(Fv6`!QD)eQM`^uXCI5M}gdFa(0#E< zb7=UY;ScxbHUHks{-8}lQYV*J`Ut5X>AwT`-Z%1^{2$pL2CfwU=CW@fy0Z&P6dnEt zI6cJogF8|PbCCBT`v&QTupH7Kf!hr6B!v4Qd;`Kyze5dIH5x2e!(`tDCF?}f?>&$zVk4BD<=fSU^L8F0J7 z9VqmT1KcujHx%w$SGe~exEsNBfolX;UwGGBz#WBWK}g`)_-0xU3_*S2cO&`)|C@=j zCBW;aR9C1zP(Q8lXvS*hYc^;O>xk}Z{R~63;Z5T@)7@rdF>;6-!QIK_tfQ=t^OJ3h z?He3dJIA;<*Ae%F!e-C!ybFCE|Dypuc%HaCba!}qt=dVupDR540L@V&JHP~LILzyA+AO~tS-bg=p}f%64#DsiO`mAKM}N?hqfC9d=#jq8WB-ypXw zE60sP^3C$QjFjUXZJTD29JfK7*UXaR_95jRay={MxN}IpAm4kL9QVp)Hpy}SkTSs` z@u*yWiySYL<4?%(ayh=A#OsrF ztw9%}6>?5Hq*g(k`g0(EiCm%ruC$?L@DtHw$Xf*WuR*Kj)B*?>Kk3sTd{R><$H@Q9|>(g9biMb zch!(9E98-x4^NpV*QmVl`SP>of&bIbRnoNVJZSZ~a&OO<%l3djU%tLVhN24x`bK%y zl0psh3Uw`zeG0kakKUY?SSH6x;J#7_>6p$Pc-Bv~Yx$4r{_lHfu=e?KO^YCJl{{j~ z*v%V&jGun{L1;O-U5!KffWC?HE^FlH6=9Cnue|Gg88+yf_sDSk({HNu^qiA=bwL64 zPK7|)t81X#x$>Q~wdcuivtXbeT5=hb_>W`sh*(`&Suajmyg(e^v%F``g)0__?LDhj z^sJh*W=YTT3bAe3GI8>fMT^(07AG%Qy) z?;SSe(y;RutXd6qh}nwDO0i`8l6k9oR`)DiQ+no*{EF%e3b()=9cPT6GNb}=$!c+q zxMtOy`3ugOv+8WIXW`GbQ(UrKTm#ppE?=@{!F=(IHFMT1fSZ@kPxq`6d*I3{abC~4 z%hy2Ft1HIzoIhvPd~w`@HEWhFSk>8cu6WLz3&nF+FMulGkqdj4uMy|07FR4-bJ6?z}bh!RIetGH>yadm&u1eBQEi=fkaQdc^rlRVS&a1faGQfbH)xc`ja42rWe)nP4(^ zGCP=Om;>PUGW(dvhtxw$FBwRG2&tjZSa4EJ3h^C!eL1?24X{=0ICeDK41U8&H7$qx zCqTLLWTaH4kHxqb{|Y!hN-El*UA_UnB;J$uBNpu%{+%zfZGo4AUGDy0)K5Ghe1K`Tfx!XP4e}v%zo4h?m2L8 zf}=V6AZH)s?1P+rkkiWaAd*|qh)qCYgU6UNStC(}wF31VC3C!Kl zs=J|8cSEc0hE{zAK89NFg8aK6|1QYCOU}QG?s$T#LZyYO3X!{aTAYO(h_vaMPUcMD zA%e{GLO6{%b7yt%K-+9)Dpb8)_O~)q=((e^KTFL$c|4SB+f&(+L{!##Y^9UTJoC(o zQudv!q141+Y$L{!;z*^FEworlPO>DSl#ruBDnvweQi&3&P>EEQ?|x=f%=EqQdw%ct z$2Y(EJ0&T_eeT{)*WQ%3i9u=xyZ8tM{xsA-WXNh7V#1bc6c-HfY`48aOex+ta z;4kT_3o&I0?>h5eto036HEhhSHs>QRc}1AYEsn|H)4&Wu<+@#-2Uq=x zEN+pWA6m`#G&9jO|5d=Yy^Z@^F@G$!nyRPUetfpkzh9xW<>}%(tM}T@e`+(AZVG)C z8{2$spUV)YZ2r@|HKi9s?$V?wwN?&NPA3Ge+a);OScLD+_}KqhHsl5E_!W)UpAU6) zDOQMv4QsqEd#k!%EaoPo{JxXw#raQz{eOc>cc)p8sdPEay^b5#c`wl|sC0*K`zKN@ zQ)0a6;PasOl}jUJX@qxAjtC~Z*zNvd33sZzOaH&pQ0viAm)l(x1%scpV;QkmB} zUpb+0WMk+=**k58Zv}4KlEYJa(ij@}woeUaZSshD*>ZgxJ2(Xi5-Xl%o{-|k+Q5h{Z}?Lq&&{GCH%#OBe7&<+cU`|IK>t&A3k z9hRunP2txT9l03l@&2P#=F+HbzvZi|cxI+q^Q6+u<%B=Zb@0?s38BI=S?28|GJ#ex&y=-J!*p{uF0l)J~5b!$w z^}Jl4(8wYDX|eMvo@#GO;g@&Hk?5B@tL`=FzU+;udY&QPU;EV<3A0P;E>Br;@Rqss z;9#L?!rQihjkV4==50 zwg|iTNnY*R;8lwrt>OpI8p<}y8pMyyX9icVC=u>oepT7n`NdFG&{OHQ-77{yM(x{- zI-gTT!v;lm_I|3$KGmKecQK{C_0PbsE)yEo+5z~cN5!(O)Xk!Y618_=gjoxgDP z8ETwPKw4t&`@;=KJlm$je=^ z&#K<`#=LN8Pk5e_a?@qy`rYcdT(M@ymV?jZ)udXVESFXol-k{TxcIY+9`AryncQ6tD0(r!!ow zW|5L^$)!h9(w*LO4Y9|{j+M2VM$$heOP8!YU^-|jtJ@hq)?K3_T2h$QeP>-jz0laU zs;gpOuu~4jE>*qfA9xhzo*us*)>P5eWB2ue=ZMVL!bH*;t?T@IWo$bB5`S8Xk9W5( z9^7(9t+#mnveu4=R?G_@_x@dBg}8*@Ump1&Z*tQeBgMLnK?V2fK3dHAL-K|@F*??2 zVOG3adsNGmV7%0`^TKpLw?G#7XLP>k75b883i;<-uF*HlL)guhJG|(wtQjw$H}<7@ z(1o!M3^$f1M8yeXjpz&yPZop+m%24pKcUEnqK3|62OJwTV~ z>(BI~`>`O(|MLE3J-RE?jc!E?@C}5tw6InIbT@`8ix~jHM2Leu5Q3p!;A8(9O5UBa}j|P=Cb5{n0ZZR%ZXv_uQ#1Bj9-4) zKszU+l~5pj9M^Jgu5%3rV{R~3{|iA;{yRb0n9~BiA-1@!eQRAX{9lr!&^X|8HogQ=3^eQih$c5Rc+ zs#)PmSrwcXnACi?CVAy~M~EU>BXZ*Ag=Ht_$Ye1Lp04ye8@d02xO8^$<&en_U9aw^ z$m)kYSrIYi8S&-m#Hpd7FQe*BHX=Hy85tSJj~gT_hmMDhjV=`5Qgd8zz1+U%SH(_B*${KU`7guhI<>%+CHOBO=$#p1C_LkOBOd4MyxY#soep27= z^p_aS22!eqrslqYIsCqlZ)jNBR|DAjOV4mXc6+8+uPgY5)$69G*TK>Td!AT%nuT2&9w8{2Vm|iK?7Nn?joyn+c;^tle|yHcSGO`wTep!OC6izKD7<_< zFp$HzT3l>dXn%0YL8rpOp`kp+)x5mEq@Aqien)aED~G}_>Yj?-emv{-TV3rq(%p>0 zukJ`jR9D@JtwSkt%!iq_9_vHKovJWB_W~noRG(b*8WCA(^&4MVW9hoj9ohYZMa~{I zvHP-A2PHN}({LiLj`oU4LN~=PlaHF}sfj|e;<1=(EEX2n;r)b9EwQec8okWW(J{?zWx?6A7ascv zH8(XeN}ZCG8yg$>UjV?CA*GjRO*F*j^jFn0CkRLsG~aD~#X5W4>&`((y_sQ;%U2(G zH&s|0I)D;iC^>mC>u7Pfo0X4J|f`B$zy z^dV_xSnQ>AbadeH_`B|x9?6bR^i*CD4W&KO>qYbpyd|OvA058j6MV8!-f_#8o(`tP z#Mq(U#-Y*4&hdu+T$^i^Z5Or|l;L*WaprfsgBmJF*EUx#e=0 z)dGk2-kGsmE8ZShZXEPsZ_R!O*@)GjpHS=_9i^pizm(8UC{S7CA{QgxCZC2s&-ChV zZmr%o+~6GHklB-_QhQ-_Se~9)h?_8OgOyZ9jD%Wm$g#~^x2g!~TxN{z)MM05;u9Gy zGz_Liw@XsL{#8J0?ka7N-nZ)PN}Kfa7*Hgx$a&(l>dUC6)JNZ?%M z624A+OHKRKlwrI)F}VHj(_U)vF)}hs;x4bgHK+N-csj3`sJQ=5Ow(x#754v+v^7g+ zFo8NlYMT!Gd?I65z3*fQ_Sn&*mjnAO3LZ3+sQqdqGv+GcoxeS5`{DJ$+Rij$D)JQ-vxqQ6P%<;^dl5y}LO zn4Hv<@o#e?l_?u!u8%`*$8!qePSrh1SKDWPyjuS1ywpUwpwoCI^?@x#k0a+(%P&lx z{c``{R~fTA0Zjt;UU*;Bh-vM~5xj+KH0j+l?$7EfmB_CQPbeI2Xk)bH#^LF`ds2#7 zgQr*>ZdQGi=0ddwwOdjqeS=@#d`;RcU-v>Xs^0C~*|RNgM=)Ih6(I4o_3H_lo0-XJ z2CI?DkKFJT&-^g{mCwS%!y~S5Q~31x^9qXpb{5N4vhLgGp}tqI?Ck7b_4alQ1Yzk>Evf>&ht;3v2J+a}rWfQK_n`ih_iq{@im)H6{xB zBkMIw!`s`t$vw~s{iHwkDJm=s(#RkZiBZs}(NVwW*W_K}#NNDqEymYfb6~;5#6%S2 z)A`q9ACheRt$11RaB=xYF%ZQ6a>3r-395isuUH$IJ@-b zxw^+uJv}{Z9E#p+-5cIxVIitxB&mO@Pk)o15S>mhy>bNzs`6Q9M@RaxV+X_nDz+pm zFIlogI^IB~(96p!^wgt%miMEgW6JqOMWPCl@dk89bu2bTx!w(5T3QO&RM@Yz{IIfd zT3VV$hI+H;&7;gk;XwnB4>VruA?*n3*R1Fur2Di^E*AEw=lsNmL=P83oA^@@{|Fa~V@vt(pt z3+>dehtIRE9|%n<~NhdNOO2qI8BpCnSAZlb^E!X-`^!=J4BxJ z?(q-l5k0FKL_(gId&aj0e=Szx+xOcM0h#x1Ctbu=EjU+D04lG0eVRdUBo%tbKD;EI zXzCmGeO!`LQevI&rBXgR8jLx6{yd8!SEANfa^5=ssG3!F`iT=nnRvBEV57Ray8Fcv zUiy$us5K@l4?Mp<)!TGpWMpKO#Yrnl!^gZy@ue!oi7^J*S>k%-ha(>At85JV>~S^Q zC*QMY?S$sB>*42GI!{d1hm>8DHwbU~tUlDFT^_lO^Nz_iN?TwnuN>INL6XFQ@mJ_LV@;+=~zbZ z4D?^RI4tUR+kR;&sXNWh7JnY;Gtgni)Go_Q8yp<;r<_bm`k)xttxdbCslbS=?b+$v zQ~fyqcg%K3$NLvq4gU98&43x;D~vS^UF6*+A!jrtl5px|5*0?M6bgw1 zt%VVFB94G3A_$HGZ~b4ks?$461W*2%sY6c=Setv-;zUNM*L7|WSUDsNXjF(^DXA6B ziJpi&zfEcF`7cwr+sCc*ScxMgjY2}&^`L@;O$v$Im)_Hi{1ULWrYKfWe$k&QiqUJr zwW5OVJ4Ubl+ewDSw@k_#Q7LVmXEM>06LbGor@|%^y1Y%((S#tGn->)1gn;-S&@MlC~oq*Y+{RB`Go1@oKVN@9|(; zOV&KM>y+x~h0C&>6is8}g0IygS?>1?SOf9;PY3wO@5hU$%Jxhgf8Kpl;~P^eeo%g& zb3}!Gec6c1#$_4~`pnly4t|NP-&0tlZSdatg7t{Zn>z#Ab1SqB4Um|L1)*Yvls^o7 zZW^<83=2(4oLYB&dq<>;@**qoS05(ltQ0HvdLztyVK=r7v22ZK8ejO(Zuy~Ks2Eil z+MxhV0ZwCrtxC|AfUvd!G`~Q9S^(Y8b(b*E#dI%&iu{-YG#KRP%3?76*mDtKtRB;s z#_&Ux&(`nsuYr&=m4Mm?1pZcreIlVJU;#SJAkZrTjSiTh4*uh@}D8(AmJcHeu0p)z<;6+4i*kZ;x94&45h%gJZWwWKM%Ig zfHm{(k=R`-T_!Vt;~HE_<(M)M!*}O{*e(e+4*H=i;G~cNAQ&7fHpQE9VBF7G_kGpurY*W?vmjrFA2X1_ z+67?^0e75iG1K^d#;@;_fzeN|9Lw28b0}Ct*p0?EkUPyMkUqnFf4Tr@f-_xh=q$(? zYo%uZu+c+V5SHDA*O@-+PM?iYXJdl)Ix1-cJVa#2LvV>eBsPoSk^qsX%O3+GM4sNs z8;~IiS_iR>4t38TIs&SA02UHJVcph-WY)>(`*_OKzEIAkE(baOvJ%30#k`Fk-7#) zScSu_0;9~CZvS$?OtsGp@tnw|OJmV|m>$9)a(MtBm==SjKizL5yCQ*{*}?!%S{$7q zzaSqU&H*h;&>3d5UCbb$Z%aQqh`-zWNC5b?myxL{-i zsBbomL?H2u1N9CMJ_><%E`>zk#s_?nz&#fjCXok*M=0EMVLTDt8qDGkCg3O__He=Q zXqh-0Mx-JWH$PbSoAh6HI zhetq9gd0Z0k$?xyqKhZu$viL;uT1eIDlab-GR(stg^K5fft?l_<7d%DK-A!Y;VC>i z2ir6vw;dn^3W3{p5h9Mqo)HoSjo!2Al6idr0Tn+F4X_Mu7y(9j=n`Ne4_yL6LZkC6 zx&(y6BYOgof(F9b<48Cv4~$F#J6Eo8WGab=KMI~lM+6Fy!ZVkOL!VC0rb`7KRvs9h zM}7qAFKAE+Xw;vDkBCEf_#*;e<>rNmqu{x9M1*lvo^db%&0@1?kbq%v($v4YB2ancLMBm&+`NFc1C?9OWHK*4GMUOF0|4WRLu8;| z9(*89a?_=f5i+-|sAS&QP9+o3G&@VCR5EXTp;BNTx>O1t;noqALga}DpzFeIYcL*& zg^Onx!Qr`i2HBd#Edw-zqZPwUo?!&xiMzm4!E-w9aRfXsT>_8og1NvddFGN}9-awg zn0Fk7+m8S~DtCSZc^Z@>+%$+dbQd*yZ6MWh$r;SWbNdH?@#Ihd1N%T8d=#`s + RemoveHandler .php + ForceType text/plain + \ No newline at end of file diff --git a/docs/Saml2/checkstyle.xml b/docs/Saml2/checkstyle.xml new file mode 100644 index 00000000..cedb3813 --- /dev/null +++ b/docs/Saml2/checkstyle.xml @@ -0,0 +1,69 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_Auth.html b/docs/Saml2/classes/OneLogin_Saml2_Auth.html new file mode 100644 index 00000000..197258f0 --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_Auth.html @@ -0,0 +1,2085 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_Auth

          +

          Main class of PHP Toolkit

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          + getSettings()
          + setStrict()
          + setSchemasPath()
          + processResponse()
          + processSLO()
          + redirectTo()
          + isAuthenticated()
          + getAttributes()
          + getAttributesWithFriendlyName()
          + getNameId()
          + getNameIdFormat()
          + getNameIdNameQualifier()
          + getNameIdSPNameQualifier()
          + getSessionIndex()
          + getSessionExpiration()
          + getErrors()
          + getLastErrorReason()
          + getAttribute()
          + getAttributeWithFriendlyName()
          + login()
          + logout()
          + getSSOurl()
          + getSLOurl()
          + getSLOResponseUrl()
          + getLastRequestID()
          + buildRequestSignature()
          + buildResponseSignature()
          + getLastMessageId()
          + getLastAssertionId()
          + getLastAssertionNotOnOrAfter()
          + getLastRequestXML()
          + getLastResponseXML()
          +
          +
          + No public properties found +
          +
          + No constants found +
          +
          +
          +
          + No protected methods found +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + buildMessageSignature()
          +
          +
          + $_settings
          + $_attributes
          + $_attributesWithFriendlyName
          + $_nameid
          + $_nameidFormat
          + $_nameidNameQualifier
          + $_nameidSPNameQualifier
          + $_authenticated
          + $_sessionIndex
          + $_sessionExpiration
          + $_lastMessageId
          + $_lastAssertionId
          + $_lastAssertionNotOnOrAfter
          + $_errors
          + $_errorReason
          + $_lastRequestID
          + $_lastRequest
          + $_lastResponse
          +
          +
          + N/A +
          +
          +
          +
          + +
          + + + +
          +
          +

          Properties

          +
          + +
          + +
          +
          + + +
          + +
          + +
          +
          + +
          +

          $_attributes

          + 
          $_attributes : array
          +

          User attributes data.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_attributesWithFriendlyName

          + 
          $_attributesWithFriendlyName : array
          +

          User attributes data with FriendlyName index.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_nameid

          + 
          $_nameid : string
          +

          NameID

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_nameidFormat

          + 
          $_nameidFormat : string
          +

          NameID Format

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_nameidNameQualifier

          + 
          $_nameidNameQualifier : string
          +

          NameID NameQualifier

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_nameidSPNameQualifier

          + 
          $_nameidSPNameQualifier : string
          +

          NameID SP NameQualifier

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_authenticated

          + 
          $_authenticated : boolean
          +

          If user is authenticated.

          + + +

          Type

          + boolean +
          +
          + +
          + +
          +
          + +
          +

          $_sessionIndex

          + 
          $_sessionIndex : string
          +

          SessionIndex. When the user is logged, this stored it +from the AuthnStatement of the SAML Response

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_sessionExpiration

          + 
          $_sessionExpiration : integer|null
          +

          SessionNotOnOrAfter. When the user is logged, this stored it +from the AuthnStatement of the SAML Response

          + + +

          Type

          + integer|null +
          +
          + +
          + +
          +
          + +
          +

          $_lastMessageId

          + 
          $_lastMessageId : string
          +

          The ID of the last message processed

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_lastAssertionId

          + 
          $_lastAssertionId : string
          +

          The ID of the last assertion processed

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_lastAssertionNotOnOrAfter

          + 
          $_lastAssertionNotOnOrAfter : integer
          +

          The NotOnOrAfter value of the valid SubjectConfirmationData +node (if any) of the last assertion processed

          + + +

          Type

          + integer +
          +
          + +
          + +
          +
          + +
          +

          $_errors

          + 
          $_errors : array
          +

          If any error.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_errorReason

          + 
          $_errorReason : string|null
          +

          Reason of the last error.

          + + +

          Type

          + string|null +
          +
          + +
          + +
          +
          + +
          +

          $_lastRequestID

          + 
          $_lastRequestID : string
          +

          Last AuthNRequest ID or LogoutRequest ID generated by this Service Provider

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_lastRequest

          + 
          $_lastRequest : string
          +

          The most recently-constructed/processed XML SAML request +(AuthNRequest, LogoutRequest)

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_lastResponse

          + 
          $_lastResponse : string|\DomDocument|null
          +

          The most recently-constructed/processed XML SAML response +(SAMLResponse, LogoutResponse). If the SAMLResponse was +encrypted, by default tries to return the decrypted XML

          + + +

          Type

          + string|\DomDocument|null +
          +
          + +
          + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(array|object|null  $oldSettings = null, boolean  $spValidationOnly = false)
          +

          Initializes the SP SAML instance.

          + + +

          Parameters

          + + + + + + + + + + + +
          array|object|null$oldSettings

          Setting data (You can provide a OneLogin_Saml_Settings, the settings object of the Saml folder implementation)

          boolean$spValidationOnly

          if you only as an SP , you should set it to false if not you should set it to true

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          getSettings()

          + + 
          getSettings() : \OneLogin_Saml2_Settings
          +

          Returns the settings info

          + + + + +

          Returns

          + \OneLogin_Saml2_Settings + —

          The settings data.

          + +
          +
          + +
          + +
          +
          + +
          +

          setStrict()

          + + 
          setStrict(boolean  $value)
          +

          Set the strict mode active/disable

          + + +

          Parameters

          + + + + + + +
          boolean$value

          Strict parameter

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          setSchemasPath()

          + + 
          setSchemasPath(string  $path) : $this
          +

          Set schemas path

          + + +

          Parameters

          + + + + + + +
          string$path
          + + +

          Returns

          + $this + +
          +
          + +
          + +
          +
          + +
          +

          processResponse()

          + + 
          processResponse(string|null  $requestId = null)
          +

          Process the SAML Response sent by the IdP.

          + + +

          Parameters

          + + + + + + +
          string|null$requestId

          The ID of the AuthNRequest sent by this SP to the IdP

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          processSLO()

          + + 
          processSLO(boolean  $keepLocalSession = false, string|null  $requestId = null, boolean  $retrieveParametersFromServer = false, callable  $cbDeleteSession = null, boolean  $stay = false) : string|null
          +

          Process the SAML Logout Response / Logout Request sent by the IdP.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          boolean$keepLocalSession

          When false will destroy the local session, otherwise will keep it

          string|null$requestId

          The ID of the LogoutRequest sent by this SP to the IdP

          boolean$retrieveParametersFromServer

          True if we want to use parameters from $_SERVER to validate the signature

          callable$cbDeleteSession

          Callback to be executed to delete session

          boolean$stay

          True if we want to stay (returns the url string) False to redirect

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string|null + +
          +
          + +
          + +
          +
          + +
          +

          redirectTo()

          + + 
          redirectTo(string  $url = '', array  $parameters = array(), boolean  $stay = false) : string|null
          +

          Redirects the user to the url past by parameter +or to the url that we defined in our SSO Request.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$url

          The target URL to redirect the user.

          array$parameters

          Extra parameters to be passed as part of the url

          boolean$stay

          True if we want to stay (returns the url string) False to redirect

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string|null + +
          +
          + +
          + +
          +
          + +
          +

          isAuthenticated()

          + + 
          isAuthenticated() : boolean
          +

          Checks if the user is authenticated or not.

          + + + + +

          Returns

          + boolean + —

          True if the user is authenticated

          + +
          +
          + +
          + +
          +
          + +
          +

          getAttributes()

          + + 
          getAttributes() : array
          +

          Returns the set of SAML attributes.

          + + + + +

          Returns

          + array + —

          Attributes of the user.

          + +
          +
          + +
          + +
          +
          + +
          +

          getAttributesWithFriendlyName()

          + + 
          getAttributesWithFriendlyName() : array
          +

          Returns the set of SAML attributes indexed by FriendlyName

          + + + + +

          Returns

          + array + —

          Attributes of the user.

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameId()

          + + 
          getNameId() : string
          +

          Returns the nameID

          + + + + +

          Returns

          + string + —

          The nameID of the assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdFormat()

          + + 
          getNameIdFormat() : string
          +

          Returns the nameID Format

          + + + + +

          Returns

          + string + —

          The nameID Format of the assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdNameQualifier()

          + + 
          getNameIdNameQualifier() : string
          +

          Returns the nameID NameQualifier

          + + + + +

          Returns

          + string + —

          The nameID NameQualifier of the assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdSPNameQualifier()

          + + 
          getNameIdSPNameQualifier() : string
          +

          Returns the nameID SP NameQualifier

          + + + + +

          Returns

          + string + —

          The nameID SP NameQualifier of the assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          getSessionIndex()

          + + 
          getSessionIndex() : string|null
          +

          Returns the SessionIndex

          + + + + +

          Returns

          + string|null + —

          The SessionIndex of the assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          getSessionExpiration()

          + + 
          getSessionExpiration() : integer|null
          +

          Returns the SessionNotOnOrAfter

          + + + + +

          Returns

          + integer|null + —

          The SessionNotOnOrAfter of the assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          getErrors()

          + + 
          getErrors() : array
          +

          Returns if there were any error

          + + + + +

          Returns

          + array + —

          Errors

          + +
          +
          + +
          + +
          +
          + +
          +

          getLastErrorReason()

          + + 
          getLastErrorReason() : string|null
          +

          Returns the reason for the last error

          + + + + +

          Returns

          + string|null + —

          Error reason

          + +
          +
          + +
          + +
          +
          + +
          +

          getAttribute()

          + + 
          getAttribute(string  $name) : array|null
          +

          Returns the requested SAML attribute

          + + +

          Parameters

          + + + + + + +
          string$name

          The requested attribute of the user.

          + + +

          Returns

          + array|null + —

          Requested SAML attribute ($name).

          + +
          +
          + +
          + +
          +
          + +
          +

          getAttributeWithFriendlyName()

          + + 
          getAttributeWithFriendlyName(string  $friendlyName) : array|null
          +

          Returns the requested SAML attribute indexed by FriendlyName

          + + +

          Parameters

          + + + + + + +
          string$friendlyName

          The requested attribute of the user.

          + + +

          Returns

          + array|null + —

          Requested SAML attribute ($friendlyName).

          + +
          +
          + +
          + +
          +
          + +
          +

          login()

          + + 
          login(string|null  $returnTo = null, array  $parameters = array(), boolean  $forceAuthn = false, boolean  $isPassive = false, boolean  $stay = false, boolean  $setNameIdPolicy = true, string  $nameIdValueReq = null) : string|null
          +

          Initiates the SSO process.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string|null$returnTo

          The target URL the user should be returned to after login.

          array$parameters

          Extra parameters to be added to the GET

          boolean$forceAuthn

          When true the AuthNRequest will set the ForceAuthn='true'

          boolean$isPassive

          When true the AuthNRequest will set the Ispassive='true'

          boolean$stay

          True if we want to stay (returns the url string) False to redirect

          boolean$setNameIdPolicy

          When true the AuthNRueqest will set a nameIdPolicy element

          string$nameIdValueReq

          Indicates to the IdP the subject that should be authenticated

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string|null + —

          If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters

          + +
          +
          + +
          + +
          +
          + +
          +

          logout()

          + + 
          logout(string|null  $returnTo = null, array  $parameters = array(), string|null  $nameId = null, string|null  $sessionIndex = null, boolean  $stay = false, string|null  $nameIdFormat = null, string|null  $nameIdNameQualifier = null,   $nameIdSPNameQualifier = null) : string|null
          +

          Initiates the SLO process.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string|null$returnTo

          The target URL the user should be returned to after logout.

          array$parameters

          Extra parameters to be added to the GET

          string|null$nameId

          The NameID that will be set in the LogoutRequest.

          string|null$sessionIndex

          The SessionIndex (taken from the SAML Response in the SSO process).

          boolean$stay

          True if we want to stay (returns the url string) False to redirect

          string|null$nameIdFormat

          The NameID Format will be set in the LogoutRequest.

          string|null$nameIdNameQualifier

          The NameID NameQualifier will be set in the LogoutRequest.

          $nameIdSPNameQualifier
          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string|null + —

          If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters

          + +
          +
          + +
          + +
          +
          + +
          +

          getSSOurl()

          + + 
          getSSOurl() : string
          +

          Gets the IdP SSO url.

          + + + + +

          Returns

          + string + —

          The url of the IdP Single Sign On Service

          + +
          +
          + +
          + +
          +
          + +
          +

          getSLOurl()

          + + 
          getSLOurl() : string|null
          +

          Gets the IdP SLO url.

          + + + + +

          Returns

          + string|null + —

          The url of the IdP Single Logout Service

          + +
          +
          + +
          + +
          +
          + +
          +

          getSLOResponseUrl()

          + + 
          getSLOResponseUrl() : string|null
          +

          Gets the IdP SLO response url.

          + + + + +

          Returns

          + string|null + —

          The response url of the IdP Single Logout Service

          + +
          +
          + +
          + +
          +
          + +
          +

          getLastRequestID()

          + + 
          getLastRequestID() : string
          +

          Gets the ID of the last AuthNRequest or LogoutRequest generated by the Service Provider.

          + + + + +

          Returns

          + string + —

          The ID of the Request SAML message.

          + +
          +
          + +
          + +
          +
          + +
          +

          buildRequestSignature()

          + + 
          buildRequestSignature(string  $samlRequest, string  $relayState, string  $signAlgorithm = \XMLSecurityKey::RSA_SHA1) : string
          +

          Generates the Signature for a SAML Request

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$samlRequest

          The SAML Request

          string$relayState

          The RelayState

          string$signAlgorithm

          Signature algorithm method

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string + —

          A base64 encoded signature

          + +
          +
          + +
          + +
          +
          + +
          +

          buildResponseSignature()

          + + 
          buildResponseSignature(string  $samlResponse, string  $relayState, string  $signAlgorithm = \XMLSecurityKey::RSA_SHA1) : string
          +

          Generates the Signature for a SAML Response

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$samlResponse

          The SAML Response

          string$relayState

          The RelayState

          string$signAlgorithm

          Signature algorithm method

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string + —

          A base64 encoded signature

          + +
          +
          + +
          + +
          +
          + +
          +

          getLastMessageId()

          + + 
          getLastMessageId() : string
          +

          + + + + +

          Returns

          + string + —

          The ID of the last message processed

          + +
          +
          + +
          + +
          +
          + +
          +

          getLastAssertionId()

          + + 
          getLastAssertionId() : string
          +

          + + + + +

          Returns

          + string + —

          The ID of the last assertion processed

          + +
          +
          + +
          + +
          +
          + +
          +

          getLastAssertionNotOnOrAfter()

          + + 
          getLastAssertionNotOnOrAfter() : integer
          +

          + + + + +

          Returns

          + integer + —

          The NotOnOrAfter value of the valid +SubjectConfirmationData node (if any) +of the last assertion processed

          + +
          +
          + +
          + +
          +
          + +
          +

          getLastRequestXML()

          + + 
          getLastRequestXML() : string
          +

          Returns the most recently-constructed/processed +XML SAML request (AuthNRequest, LogoutRequest)

          + + + + +

          Returns

          + string + —

          The Request XML

          + +
          +
          + +
          + +
          +
          + +
          +

          getLastResponseXML()

          + + 
          getLastResponseXML() : string|null
          +

          Returns the most recently-constructed/processed +XML SAML response (SAMLResponse, LogoutResponse).

          +

          If the SAMLResponse was encrypted, by default tries +to return the decrypted XML.

          + + + +

          Returns

          + string|null + —

          The Response XML

          + +
          +
          + +
          + +
          +
          + +
          +

          buildMessageSignature()

          + + 
          buildMessageSignature(string  $samlMessage, string  $relayState, string  $signAlgorithm = \XMLSecurityKey::RSA_SHA256, string  $type = "SAMLRequest") : string
          +

          Generates the Signature for a SAML Response

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + +
          string$samlMessage

          The SAML Response

          string$relayState

          The RelayState

          string$signAlgorithm

          Signature algorithm method

          string$type

          "SAMLRequest" or "SAMLResponse"

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string + —

          A base64 encoded signature

          + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_AuthnRequest.html b/docs/Saml2/classes/OneLogin_Saml2_AuthnRequest.html new file mode 100644 index 00000000..fe64ea2b --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_AuthnRequest.html @@ -0,0 +1,549 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_AuthnRequest

          +

          SAML 2 Authentication Request

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          + getRequest()
          + getId()
          + getXML()
          +
          +
          + No public properties found +
          +
          + No constants found +
          +
          +
          +
          + No protected methods found +
          +
          + $_settings
          +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + $_authnRequest
          + $_id
          +
          +
          + N/A +
          +
          +
          +
          + +
          + + + +
          +
          +

          Properties

          +
          + +
          + +
          +
          + +
          +

          $_settings

          + 
          $_settings : \OneLogin_Saml2_Settings
          +

          Object that represents the setting info

          + + +

          Type

          + \OneLogin_Saml2_Settings +
          +
          + +
          + +
          +
          + +
          +

          $_authnRequest

          + 
          $_authnRequest : string
          +

          SAML AuthNRequest string

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_id

          + 
          $_id : string
          +

          SAML AuthNRequest ID.

          + + +

          Type

          + string +
          +
          + +
          + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(\OneLogin_Saml2_Settings  $settings, boolean  $forceAuthn = false, boolean  $isPassive = false, boolean  $setNameIdPolicy = true, string  $nameIdValueReq = null)
          +

          Constructs the AuthnRequest object.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          \OneLogin_Saml2_Settings$settings

          Settings

          boolean$forceAuthn

          When true the AuthNReuqest will set the ForceAuthn='true'

          boolean$isPassive

          When true the AuthNReuqest will set the Ispassive='true'

          boolean$setNameIdPolicy

          When true the AuthNReuqest will set a nameIdPolicy

          string$nameIdValueReq

          Indicates to the IdP the subject that should be authenticated

          + + + +
          +
          + +
          + +
          +
          + +
          +

          getRequest()

          + + 
          getRequest(boolean|null  $deflate = null) : string
          +

          Returns deflated, base64 encoded, unsigned AuthnRequest.

          + + +

          Parameters

          + + + + + + +
          boolean|null$deflate

          Whether or not we should 'gzdeflate' the request body before we return it.

          + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          getId()

          + + 
          getId() : string
          +

          Returns the AuthNRequest ID.

          + + + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          getXML()

          + + 
          getXML() : string
          +

          Returns the XML that will be sent as part of the request

          + + + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_Constants.html b/docs/Saml2/classes/OneLogin_Saml2_Constants.html new file mode 100644 index 00000000..c27bad1b --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_Constants.html @@ -0,0 +1,1332 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_Constants

          +

          Constants of PHP Toolkit

          +

          Defines all required constants

          + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + No public methods found +
          +
          + No public properties found +
          +
          + ALLOWED_CLOCK_DRIFT
          + NAMEID_EMAIL_ADDRESS
          + NAMEID_X509_SUBJECT_NAME
          + NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME
          + NAMEID_UNSPECIFIED
          + NAMEID_KERBEROS
          + NAMEID_ENTITY
          + NAMEID_TRANSIENT
          + NAMEID_PERSISTENT
          + NAMEID_ENCRYPTED
          + ATTRNAME_FORMAT_UNSPECIFIED
          + ATTRNAME_FORMAT_URI
          + ATTRNAME_FORMAT_BASIC
          + NS_SAML
          + NS_SAMLP
          + NS_SOAP
          + NS_MD
          + NS_XS
          + NS_XSI
          + NS_XENC
          + NS_DS
          + BINDING_HTTP_POST
          + BINDING_HTTP_REDIRECT
          + BINDING_HTTP_ARTIFACT
          + BINDING_SOAP
          + BINDING_DEFLATE
          + AC_UNSPECIFIED
          + AC_PASSWORD
          + AC_PASSWORD_PROTECTED
          + AC_X509
          + AC_SMARTCARD
          + AC_SMARTCARD_PKI
          + AC_KERBEROS
          + AC_WINDOWS
          + AC_TLS
          + AC_RSATOKEN
          + CM_BEARER
          + CM_HOLDER_KEY
          + CM_SENDER_VOUCHES
          + STATUS_SUCCESS
          + STATUS_REQUESTER
          + STATUS_RESPONDER
          + STATUS_VERSION_MISMATCH
          + STATUS_NO_PASSIVE
          + STATUS_PARTIAL_LOGOUT
          + STATUS_PROXY_COUNT_EXCEEDED
          +
          +
          +
          +
          + No protected methods found +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + No private properties found +
          +
          + N/A +
          +
          +
          +
          + +
          + + +
          +
          +

          Constants

          +
          + +
          + +
          +
          + +
          +

          ALLOWED_CLOCK_DRIFT

          + 
          ALLOWED_CLOCK_DRIFT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_EMAIL_ADDRESS

          + 
          NAMEID_EMAIL_ADDRESS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_X509_SUBJECT_NAME

          + 
          NAMEID_X509_SUBJECT_NAME
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME

          + 
          NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_UNSPECIFIED

          + 
          NAMEID_UNSPECIFIED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_KERBEROS

          + 
          NAMEID_KERBEROS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_ENTITY

          + 
          NAMEID_ENTITY
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_TRANSIENT

          + 
          NAMEID_TRANSIENT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_PERSISTENT

          + 
          NAMEID_PERSISTENT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NAMEID_ENCRYPTED

          + 
          NAMEID_ENCRYPTED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ATTRNAME_FORMAT_UNSPECIFIED

          + 
          ATTRNAME_FORMAT_UNSPECIFIED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ATTRNAME_FORMAT_URI

          + 
          ATTRNAME_FORMAT_URI
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ATTRNAME_FORMAT_BASIC

          + 
          ATTRNAME_FORMAT_BASIC
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_SAML

          + 
          NS_SAML
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_SAMLP

          + 
          NS_SAMLP
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_SOAP

          + 
          NS_SOAP
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_MD

          + 
          NS_MD
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_XS

          + 
          NS_XS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_XSI

          + 
          NS_XSI
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_XENC

          + 
          NS_XENC
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NS_DS

          + 
          NS_DS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          BINDING_HTTP_POST

          + 
          BINDING_HTTP_POST
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          BINDING_HTTP_REDIRECT

          + 
          BINDING_HTTP_REDIRECT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          BINDING_HTTP_ARTIFACT

          + 
          BINDING_HTTP_ARTIFACT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          BINDING_SOAP

          + 
          BINDING_SOAP
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          BINDING_DEFLATE

          + 
          BINDING_DEFLATE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_UNSPECIFIED

          + 
          AC_UNSPECIFIED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_PASSWORD

          + 
          AC_PASSWORD
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_PASSWORD_PROTECTED

          + 
          AC_PASSWORD_PROTECTED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_X509

          + 
          AC_X509
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_SMARTCARD

          + 
          AC_SMARTCARD
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_SMARTCARD_PKI

          + 
          AC_SMARTCARD_PKI
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_KERBEROS

          + 
          AC_KERBEROS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_WINDOWS

          + 
          AC_WINDOWS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_TLS

          + 
          AC_TLS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          AC_RSATOKEN

          + 
          AC_RSATOKEN
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          CM_BEARER

          + 
          CM_BEARER
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          CM_HOLDER_KEY

          + 
          CM_HOLDER_KEY
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          CM_SENDER_VOUCHES

          + 
          CM_SENDER_VOUCHES
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_SUCCESS

          + 
          STATUS_SUCCESS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_REQUESTER

          + 
          STATUS_REQUESTER
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_RESPONDER

          + 
          STATUS_RESPONDER
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_VERSION_MISMATCH

          + 
          STATUS_VERSION_MISMATCH
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_NO_PASSIVE

          + 
          STATUS_NO_PASSIVE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_PARTIAL_LOGOUT

          + 
          STATUS_PARTIAL_LOGOUT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_PROXY_COUNT_EXCEEDED

          + 
          STATUS_PROXY_COUNT_EXCEEDED
          +

          + +
          +
          + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_Error.html b/docs/Saml2/classes/OneLogin_Saml2_Error.html new file mode 100644 index 00000000..81029db8 --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_Error.html @@ -0,0 +1,724 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_Error

          +

          Error class of PHP Toolkit

          +

          Defines the Error class

          + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          +
          +
          + No public properties found +
          +
          + SETTINGS_FILE_NOT_FOUND
          + SETTINGS_INVALID_SYNTAX
          + SETTINGS_INVALID
          + METADATA_SP_INVALID
          + SP_CERTS_NOT_FOUND
          + CERT_NOT_FOUND
          + REDIRECT_INVALID_URL
          + PUBLIC_CERT_FILE_NOT_FOUND
          + PRIVATE_KEY_FILE_NOT_FOUND
          + SAML_RESPONSE_NOT_FOUND
          + SAML_LOGOUTMESSAGE_NOT_FOUND
          + SAML_LOGOUTREQUEST_INVALID
          + SAML_LOGOUTRESPONSE_INVALID
          + SAML_SINGLE_LOGOUT_NOT_SUPPORTED
          + PRIVATE_KEY_NOT_FOUND
          + UNSUPPORTED_SETTINGS_OBJECT
          +
          +
          +
          +
          + No protected methods found +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + No private properties found +
          +
          + N/A +
          +
          +
          +
          + +
          + + +
          +
          +

          Constants

          +
          + +
          + +
          +
          + +
          +

          SETTINGS_FILE_NOT_FOUND

          + 
          SETTINGS_FILE_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SETTINGS_INVALID_SYNTAX

          + 
          SETTINGS_INVALID_SYNTAX
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SETTINGS_INVALID

          + 
          SETTINGS_INVALID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          METADATA_SP_INVALID

          + 
          METADATA_SP_INVALID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SP_CERTS_NOT_FOUND

          + 
          SP_CERTS_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          CERT_NOT_FOUND

          + 
          CERT_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          REDIRECT_INVALID_URL

          + 
          REDIRECT_INVALID_URL
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          PUBLIC_CERT_FILE_NOT_FOUND

          + 
          PUBLIC_CERT_FILE_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          PRIVATE_KEY_FILE_NOT_FOUND

          + 
          PRIVATE_KEY_FILE_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SAML_RESPONSE_NOT_FOUND

          + 
          SAML_RESPONSE_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SAML_LOGOUTMESSAGE_NOT_FOUND

          + 
          SAML_LOGOUTMESSAGE_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SAML_LOGOUTREQUEST_INVALID

          + 
          SAML_LOGOUTREQUEST_INVALID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SAML_LOGOUTRESPONSE_INVALID

          + 
          SAML_LOGOUTRESPONSE_INVALID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SAML_SINGLE_LOGOUT_NOT_SUPPORTED

          + 
          SAML_SINGLE_LOGOUT_NOT_SUPPORTED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          PRIVATE_KEY_NOT_FOUND

          + 
          PRIVATE_KEY_NOT_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          UNSUPPORTED_SETTINGS_OBJECT

          + 
          UNSUPPORTED_SETTINGS_OBJECT
          +

          + +
          +
          + +
          + + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(string  $msg, integer  $code, array|null  $args = null)
          +

          Constructor

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$msg

          Describes the error.

          integer$code

          The code error (defined in the error class).

          array|null$args

          Arguments used in the message that describes the error.

          + + + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_IdPMetadataParser.html b/docs/Saml2/classes/OneLogin_Saml2_IdPMetadataParser.html new file mode 100644 index 00000000..5c22a7db --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_IdPMetadataParser.html @@ -0,0 +1,555 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_IdPMetadataParser

          +

          IdP Metadata Parser of PHP Toolkit

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + parseRemoteXML()
          + parseFileXML()
          + parseXML()
          + injectIntoSettings()
          +
          +
          + No public properties found +
          +
          + No constants found +
          +
          +
          +
          + No protected methods found +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + No private properties found +
          +
          + N/A +
          +
          +
          +
          + +
          + + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          parseRemoteXML()

          + + 
          parseRemoteXML(string  $url, string  $entityId = null, string  $desiredNameIdFormat = null, string  $desiredSSOBinding = \OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, string  $desiredSLOBinding = \OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) : array
          +

          Get IdP Metadata Info from URL

          +

          This class does not validate in any way the URL that is introduced, +make sure to validate it properly before use it in the parseRemoteXML +method in order to avoid security issues like SSRF attacks.

          + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string$url

          URL where the IdP metadata is published

          string$entityId

          Entity Id of the desired IdP, if no +entity Id is provided and the XML +metadata contains more than one +IDPSSODescriptor, the first is returned

          string$desiredNameIdFormat

          If available on IdP metadata, use that nameIdFormat

          string$desiredSSOBinding

          Parse specific binding SSO endpoint.

          string$desiredSLOBinding

          Parse specific binding SLO endpoint.

          + + +

          Returns

          + array + —

          metadata info in php-saml settings format

          + +
          +
          + +
          + +
          +
          + +
          +

          parseFileXML()

          + + 
          parseFileXML(string  $filepath, string  $entityId = null, string  $desiredNameIdFormat = null, string  $desiredSSOBinding = \OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, string  $desiredSLOBinding = \OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) : array
          +

          Get IdP Metadata Info from File

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string$filepath

          File path

          string$entityId

          Entity Id of the desired IdP, if no +entity Id is provided and the XML +metadata contains more than one +IDPSSODescriptor, the first is returned

          string$desiredNameIdFormat

          If available on IdP metadata, use that nameIdFormat

          string$desiredSSOBinding

          Parse specific binding SSO endpoint.

          string$desiredSLOBinding

          Parse specific binding SLO endpoint.

          + + +

          Returns

          + array + —

          metadata info in php-saml settings format

          + +
          +
          + +
          + +
          +
          + +
          +

          parseXML()

          + + 
          parseXML(string  $xml, string  $entityId = null, string  $desiredNameIdFormat = null, string  $desiredSSOBinding = \OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, string  $desiredSLOBinding = \OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) : array
          +

          Get IdP Metadata Info from URL

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string$xml

          XML that contains IdP metadata

          string$entityId

          Entity Id of the desired IdP, if no +entity Id is provided and the XML +metadata contains more than one +IDPSSODescriptor, the first is returned

          string$desiredNameIdFormat

          If available on IdP metadata, use that nameIdFormat

          string$desiredSSOBinding

          Parse specific binding SSO endpoint.

          string$desiredSLOBinding

          Parse specific binding SLO endpoint.

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + array + —

          metadata info in php-saml settings format

          + +
          +
          + +
          + +
          +
          + +
          +

          injectIntoSettings()

          + + 
          injectIntoSettings(array  $settings, array  $metadataInfo) : array
          +

          Inject metadata info into php-saml settings array

          + + +

          Parameters

          + + + + + + + + + + + +
          array$settings

          php-saml settings array

          array$metadataInfo

          array metadata info

          + + +

          Returns

          + array + —

          settings

          + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_LogoutRequest.html b/docs/Saml2/classes/OneLogin_Saml2_LogoutRequest.html new file mode 100644 index 00000000..f68e6f1b --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_LogoutRequest.html @@ -0,0 +1,865 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_LogoutRequest

          +

          SAML 2 Logout Request

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          + getRequest()
          + getID()
          + getNameIdData()
          + getNameId()
          + getIssuer()
          + getSessionIndexes()
          + isValid()
          + getError()
          + getXML()
          +
          +
          + $id
          +
          +
          + No constants found +
          +
          +
          +
          + No protected methods found +
          +
          + $_settings
          + $_logoutRequest
          +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + $_error
          +
          +
          + N/A +
          +
          +
          +
          + +
          + + + +
          +
          +

          Properties

          +
          + +
          + +
          +
          + +
          +

          $id

          + 
          $id : string
          +

          Contains the ID of the Logout Request

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_settings

          + 
          $_settings : \OneLogin_Saml2_Settings
          +

          Object that represents the setting info

          + + +

          Type

          + \OneLogin_Saml2_Settings +
          +
          + +
          + +
          +
          + +
          +

          $_logoutRequest

          + 
          $_logoutRequest : string
          +

          SAML Logout Request

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_error

          + 
          $_error : string
          +

          After execute a validation process, this var contains the cause

          + + +

          Type

          + string +
          +
          + +
          + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(\OneLogin_Saml2_Settings  $settings, string|null  $request = null, string|null  $nameId = null, string|null  $sessionIndex = null, string|null  $nameIdFormat = null, string|null  $nameIdNameQualifier = null, string|null  $nameIdSPNameQualifier = null)
          +

          Constructs the Logout Request object.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
          \OneLogin_Saml2_Settings$settings

          Settings

          string|null$request

          A UUEncoded Logout Request.

          string|null$nameId

          The NameID that will be set in the LogoutRequest.

          string|null$sessionIndex

          The SessionIndex (taken from the SAML Response in the SSO process).

          string|null$nameIdFormat

          The NameID Format will be set in the LogoutRequest.

          string|null$nameIdNameQualifier

          The NameID NameQualifier will be set in the LogoutRequest.

          string|null$nameIdSPNameQualifier

          The NameID SP NameQualifier will be set in the LogoutRequest.

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          getRequest()

          + + 
          getRequest(boolean|null  $deflate = null) : string
          +

          Returns the Logout Request defated, base64encoded, unsigned

          + + +

          Parameters

          + + + + + + +
          boolean|null$deflate

          Whether or not we should 'gzdeflate' the request body before we return it.

          + + +

          Returns

          + string + —

          Deflated base64 encoded Logout Request

          + +
          +
          + +
          + +
          +
          + +
          +

          getID()

          + + 
          getID(string|\DOMDocument  $request) : string
          +

          Returns the ID of the Logout Request.

          + + +

          Parameters

          + + + + + + +
          string|\DOMDocument$request

          Logout Request Message

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string + —

          ID

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdData()

          + + 
          getNameIdData(string|\DOMDocument  $request, string|null  $key = null) : array
          +

          Gets the NameID Data of the the Logout Request.

          + + +

          Parameters

          + + + + + + + + + + + +
          string|\DOMDocument$request

          Logout Request Message

          string|null$key

          The SP key

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + —

          Name ID Data (Value, Format, NameQualifier, SPNameQualifier)

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameId()

          + + 
          getNameId(string|\DOMDocument  $request, string|null  $key = null) : string
          +

          Gets the NameID of the Logout Request.

          + + +

          Parameters

          + + + + + + + + + + + +
          string|\DOMDocument$request

          Logout Request Message

          string|null$key

          The SP key

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + string + —

          Name ID Value

          + +
          +
          + +
          + +
          +
          + +
          +

          getIssuer()

          + + 
          getIssuer(string|\DOMDocument  $request) : string|null
          +

          Gets the Issuer of the Logout Request.

          + + +

          Parameters

          + + + + + + +
          string|\DOMDocument$request

          Logout Request Message

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + string|null + —

          $issuer The Issuer

          + +
          +
          + +
          + +
          +
          + +
          +

          getSessionIndexes()

          + + 
          getSessionIndexes(string|\DOMDocument  $request) : array
          +

          Gets the SessionIndexes from the Logout Request.

          +

          Notice: Our Constructor only support 1 SessionIndex but this parser +extracts an array of all the SessionIndex found on a +Logout Request, that could be many.

          + +

          Parameters

          + + + + + + +
          string|\DOMDocument$request

          Logout Request Message

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + array + —

          The SessionIndex value

          + +
          +
          + +
          + +
          +
          + +
          +

          isValid()

          + + 
          isValid(boolean  $retrieveParametersFromServer = false) : boolean
          +

          Checks if the Logout Request received is valid.

          + + +

          Parameters

          + + + + + + +
          boolean$retrieveParametersFromServer
          + + +

          Returns

          + boolean + —

          If the Logout Request is or not valid

          + +
          +
          + +
          + +
          +
          + +
          +

          getError()

          + + 
          getError() : string
          +

          After execute a validation process, if fails this method returns the cause

          + + + + +

          Returns

          + string + —

          Cause

          + +
          +
          + +
          + +
          +
          + +
          +

          getXML()

          + + 
          getXML() : string
          +

          Returns the XML that will be sent as part of the request +or that was received at the SP

          + + + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_LogoutResponse.html b/docs/Saml2/classes/OneLogin_Saml2_LogoutResponse.html new file mode 100644 index 00000000..6ce18eb6 --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_LogoutResponse.html @@ -0,0 +1,797 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_LogoutResponse

          +

          SAML 2 Logout Response

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          + getIssuer()
          + getStatus()
          + isValid()
          + build()
          + getResponse()
          + getError()
          + getId()
          + getXML()
          +
          +
          + $id
          + $document
          +
          +
          + No constants found +
          +
          +
          +
          + No protected methods found +
          +
          + $_settings
          + $_logoutResponse
          +
          +
          + N/A +
          +
          +
          +
          + _query()
          +
          +
          + $_error
          +
          +
          + N/A +
          +
          +
          +
          + +
          + + + +
          +
          +

          Properties

          +
          + +
          + +
          +
          + +
          +

          $id

          + 
          $id : string
          +

          Contains the ID of the Logout Response

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $document

          + 
          $document : \DomDocument
          +

          A DOMDocument class loaded from the SAML LogoutResponse.

          + + +

          Type

          + \DomDocument +
          +
          + +
          + +
          +
          + +
          +

          $_settings

          + 
          $_settings : \OneLogin_Saml2_Settings
          +

          Object that represents the setting info

          + + +

          Type

          + \OneLogin_Saml2_Settings +
          +
          + +
          + +
          +
          + +
          +

          $_logoutResponse

          + 
          $_logoutResponse : string
          +

          The decoded, unprocessed XML response provided to the constructor.

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_error

          + 
          $_error : string|null
          +

          After execute a validation process, if it fails, this var contains the cause

          + + +

          Type

          + string|null +
          +
          + +
          + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(\OneLogin_Saml2_Settings  $settings, string|null  $response = null)
          +

          Constructs a Logout Response object (Initialize params from settings and if provided +load the Logout Response.

          + + +

          Parameters

          + + + + + + + + + + + +
          \OneLogin_Saml2_Settings$settings

          Settings.

          string|null$response

          An UUEncoded SAML Logout response from the IdP.

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          getIssuer()

          + + 
          getIssuer() : string|null
          +

          Gets the Issuer of the Logout Response.

          + + + + +

          Returns

          + string|null + —

          $issuer The Issuer

          + +
          +
          + +
          + +
          +
          + +
          +

          getStatus()

          + + 
          getStatus() : string|null
          +

          Gets the Status of the Logout Response.

          + + + + +

          Returns

          + string|null + —

          The Status

          + +
          +
          + +
          + +
          +
          + +
          +

          isValid()

          + + 
          isValid(string|null  $requestId = null, boolean  $retrieveParametersFromServer = false) : boolean
          +

          Determines if the SAML LogoutResponse is valid

          + + +

          Parameters

          + + + + + + + + + + + +
          string|null$requestId

          The ID of the LogoutRequest sent by this SP to the IdP

          boolean$retrieveParametersFromServer
          + + +

          Returns

          + boolean + —

          Returns if the SAML LogoutResponse is or not valid

          + +
          +
          + +
          + +
          +
          + +
          +

          build()

          + + 
          build(string  $inResponseTo)
          +

          Generates a Logout Response object.

          + + +

          Parameters

          + + + + + + +
          string$inResponseTo

          InResponseTo value for the Logout Response.

          + + + +
          +
          + +
          + +
          +
          + +
          +

          getResponse()

          + + 
          getResponse(boolean|null  $deflate = null) : string
          +

          Returns a Logout Response object.

          + + +

          Parameters

          + + + + + + +
          boolean|null$deflate

          Whether or not we should 'gzdeflate' the response body before we return it.

          + + +

          Returns

          + string + —

          Logout Response deflated and base64 encoded

          + +
          +
          + +
          + +
          +
          + +
          +

          getError()

          + + 
          getError() : string
          +

          After execute a validation process, if fails this method returns the cause.

          + + + + +

          Returns

          + string + —

          Cause

          + +
          +
          + +
          + +
          +
          + +
          +

          getId()

          + + 
          getId() : string
          +

          + + + + +

          Returns

          + string + —

          the ID of the Response

          + +
          +
          + +
          + +
          +
          + +
          +

          getXML()

          + + 
          getXML() : string
          +

          Returns the XML that will be sent as part of the response +or that was received at the SP

          + + + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          _query()

          + + 
          _query(string  $query) : \DOMNodeList
          +

          Extracts a node from the DOMDocument (Logout Response Menssage)

          + + +

          Parameters

          + + + + + + +
          string$query

          Xpath Expresion

          + + +

          Returns

          + \DOMNodeList + —

          The queried node

          + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_Metadata.html b/docs/Saml2/classes/OneLogin_Saml2_Metadata.html new file mode 100644 index 00000000..f7932bf8 --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_Metadata.html @@ -0,0 +1,562 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_Metadata

          +

          Metadata lib of PHP Toolkit

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + builder()
          + signMetadata()
          + addX509KeyDescriptors()
          +
          +
          + No public properties found +
          +
          + TIME_VALID
          + TIME_CACHED
          +
          +
          +
          +
          + No protected methods found +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + No private properties found +
          +
          + N/A +
          +
          +
          +
          + +
          + + +
          +
          +

          Constants

          +
          + +
          + +
          +
          + +
          +

          TIME_VALID

          + 
          TIME_VALID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          TIME_CACHED

          + 
          TIME_CACHED
          +

          + +
          +
          + +
          + + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          builder()

          + + 
          builder(array  $sp, boolean|string  $authnsign = false, boolean|string  $wsign = false, \DateTime|null  $validUntil = null, integer|null  $cacheDuration = null, array  $contacts = array(), array  $organization = array(), array  $attributes = array()) : string
          +

          Generates the metadata of the SP based on the settings

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
          array$sp

          The SP data

          boolean|string$authnsign

          authnRequestsSigned attribute

          boolean|string$wsign

          wantAssertionsSigned attribute

          \DateTime|null$validUntil

          Metadata's valid time

          integer|null$cacheDuration

          Duration of the cache in seconds

          array$contacts

          Contacts info

          array$organization

          Organization ingo

          array$attributes
          + + +

          Returns

          + string + —

          SAML Metadata XML

          + +
          +
          + +
          + +
          +
          + +
          +

          signMetadata()

          + + 
          signMetadata(string  $metadata, string  $key, string  $cert, string  $signAlgorithm = \XMLSecurityKey::RSA_SHA1, string  $digestAlgorithm = \XMLSecurityDSig::SHA1) : string
          +

          Signs the metadata with the key/cert provided

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string$metadata

          SAML Metadata XML

          string$key

          x509 key

          string$cert

          x509 cert

          string$signAlgorithm

          Signature algorithm method

          string$digestAlgorithm

          Digest algorithm method

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + string + —

          Signed Metadata

          + +
          +
          + +
          + +
          +
          + +
          +

          addX509KeyDescriptors()

          + + 
          addX509KeyDescriptors(string  $metadata, string  $cert, boolean  $wantsEncrypted = true) : string
          +

          Adds the x509 descriptors (sign/encriptation) to the metadata +The same cert will be used for sign/encrypt

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$metadata

          SAML Metadata XML

          string$cert

          x509 cert

          boolean$wantsEncrypted

          Whether to include the KeyDescriptor for encryption

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + string + —

          Metadata with KeyDescriptors

          + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_Response.html b/docs/Saml2/classes/OneLogin_Saml2_Response.html new file mode 100644 index 00000000..e97dc80d --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_Response.html @@ -0,0 +1,1514 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_Response

          +

          SAML 2 Authentication Response

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          + isValid()
          + getId()
          + getAssertionId()
          + getAssertionNotOnOrAfter()
          + checkStatus()
          + checkOneCondition()
          + checkOneAuthnStatement()
          + getAudiences()
          + getIssuers()
          + getNameIdData()
          + getNameId()
          + getNameIdFormat()
          + getNameIdNameQualifier()
          + getNameIdSPNameQualifier()
          + getSessionNotOnOrAfter()
          + getSessionIndex()
          + getAttributes()
          + getAttributesWithFriendlyName()
          + validateNumAssertions()
          + processSignedElements()
          + validateTimestamps()
          + validateSignedElements()
          + getError()
          + getXMLDocument()
          +
          +
          + $response
          + $document
          + $decryptedDocument
          + $encrypted
          +
          +
          + No constants found +
          +
          +
          +
          + _queryAssertion()
          + _decryptAssertion()
          +
          +
          + $_settings
          +
          +
          + N/A +
          +
          +
          +
          + _getAttributesByKeyName()
          + _query()
          +
          +
          + $_error
          + $_validSCDNotOnOrAfter
          +
          +
          + N/A +
          +
          +
          +
          + +
          + + + +
          +
          +

          Properties

          +
          + +
          + +
          +
          + +
          +

          $response

          + 
          $response : string
          +

          The decoded, unprocessed XML response provided to the constructor.

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $document

          + 
          $document : \DomDocument
          +

          A DOMDocument class loaded from the SAML Response.

          + + +

          Type

          + \DomDocument +
          +
          + +
          + +
          +
          + +
          +

          $decryptedDocument

          + 
          $decryptedDocument : \DomDocument
          +

          A DOMDocument class loaded from the SAML Response (Decrypted).

          + + +

          Type

          + \DomDocument +
          +
          + +
          + +
          +
          + +
          +

          $encrypted

          + 
          $encrypted : boolean
          +

          The response contains an encrypted assertion.

          + + +

          Type

          + boolean +
          +
          + +
          + +
          +
          + + +
          + +
          + +
          +
          + +
          +

          $_error

          + 
          $_error : string
          +

          After validation, if it fail this var has the cause of the problem

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_validSCDNotOnOrAfter

          + 
          $_validSCDNotOnOrAfter : integer
          +

          NotOnOrAfter value of a valid SubjectConfirmationData node

          + + +

          Type

          + integer +
          +
          + +
          + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(\OneLogin_Saml2_Settings  $settings, string  $response)
          +

          Constructs the SAML Response object.

          + + +

          Parameters

          + + + + + + + + + + + +
          \OneLogin_Saml2_Settings$settings

          Settings.

          string$response

          A UUEncoded SAML response from the IdP.

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          isValid()

          + + 
          isValid(string|null  $requestId = null) : boolean
          +

          Determines if the SAML Response is valid using the certificate.

          + + +

          Parameters

          + + + + + + +
          string|null$requestId

          The ID of the AuthNRequest sent by this SP to the IdP

          + + +

          Returns

          + boolean + —

          Validate the document

          + +
          +
          + +
          + +
          +
          + +
          +

          getId()

          + + 
          getId() : string|null
          +

          + + + + +

          Returns

          + string|null + —

          the ID of the Response

          + +
          +
          + +
          + +
          +
          + +
          +

          getAssertionId()

          + + 
          getAssertionId() : string|null
          +

          + + + +

          Throws

          +
          +
          \InvalidArgumentException
          +
          +
          + +

          Returns

          + string|null + —

          the ID of the assertion in the Response

          + +
          +
          + +
          + +
          +
          + +
          +

          getAssertionNotOnOrAfter()

          + + 
          getAssertionNotOnOrAfter() : integer
          +

          + + + + +

          Returns

          + integer + —

          the NotOnOrAfter value of the valid SubjectConfirmationData +node if any

          + +
          +
          + +
          + +
          +
          + +
          +

          checkStatus()

          + + 
          checkStatus()
          +

          Checks if the Status is success

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +

          If status is not success

          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          checkOneCondition()

          + + 
          checkOneCondition() : boolean
          +

          Checks that the samlp:Response/saml:Assertion/saml:Conditions element exists and is unique.

          + + + + +

          Returns

          + boolean + —

          true if the Conditions element exists and is unique

          + +
          +
          + +
          + +
          +
          + +
          +

          checkOneAuthnStatement()

          + + 
          checkOneAuthnStatement() : boolean
          +

          Checks that the samlp:Response/saml:Assertion/saml:AuthnStatement element exists and is unique.

          + + + + +

          Returns

          + boolean + —

          true if the AuthnStatement element exists and is unique

          + +
          +
          + +
          + +
          +
          + +
          +

          getAudiences()

          + + 
          getAudiences() : array
          +

          Gets the audiences.

          + + + + +

          Returns

          + array + —

          @audience The valid audiences of the response

          + +
          +
          + +
          + +
          +
          + +
          +

          getIssuers()

          + + 
          getIssuers() : array
          +

          Gets the Issuers (from Response and Assertion).

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + —

          @issuers The issuers of the assertion/response

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdData()

          + + 
          getNameIdData() : array
          +

          Gets the NameID Data provided by the SAML response from the IdP.

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + —

          Name ID Data (Value, Format, NameQualifier, SPNameQualifier)

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameId()

          + + 
          getNameId() : string|null
          +

          Gets the NameID provided by the SAML response from the IdP.

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + string|null + —

          Name ID Value

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdFormat()

          + + 
          getNameIdFormat() : string|null
          +

          Gets the NameID Format provided by the SAML response from the IdP.

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + string|null + —

          Name ID Format

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdNameQualifier()

          + + 
          getNameIdNameQualifier() : string|null
          +

          Gets the NameID NameQualifier provided by the SAML response from the IdP.

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + string|null + —

          Name ID NameQualifier

          + +
          +
          + +
          + +
          +
          + +
          +

          getNameIdSPNameQualifier()

          + + 
          getNameIdSPNameQualifier() : string|null
          +

          Gets the NameID SP NameQualifier provided by the SAML response from the IdP.

          + + + +

          Throws

          +
          +
          \ValidationError
          +
          +
          + +

          Returns

          + string|null + —

          NameID SP NameQualifier

          + +
          +
          + +
          + +
          +
          + +
          +

          getSessionNotOnOrAfter()

          + + 
          getSessionNotOnOrAfter() : integer|null
          +

          Gets the SessionNotOnOrAfter from the AuthnStatement.

          +

          Could be used to set the local session expiration

          + + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + integer|null + —

          The SessionNotOnOrAfter value

          + +
          +
          + +
          + +
          +
          + +
          +

          getSessionIndex()

          + + 
          getSessionIndex() : string|null
          +

          Gets the SessionIndex from the AuthnStatement.

          +

          Could be used to be stored in the local session in order +to be used in a future Logout Request that the SP could +send to the SP, to set what specific session must be deleted

          + + + +

          Returns

          + string|null + —

          The SessionIndex value

          + +
          +
          + +
          + +
          +
          + +
          +

          getAttributes()

          + + 
          getAttributes() : array
          +

          Gets the Attributes from the AttributeStatement element.

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + —

          The attributes of the SAML Assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          getAttributesWithFriendlyName()

          + + 
          getAttributesWithFriendlyName() : array
          +

          Gets the Attributes from the AttributeStatement element using their FriendlyName.

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + —

          The attributes of the SAML Assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          validateNumAssertions()

          + + 
          validateNumAssertions() : boolean
          +

          Verifies that the document only contains a single Assertion (encrypted or not).

          + + + + +

          Returns

          + boolean + —

          TRUE if the document passes.

          + +
          +
          + +
          + +
          +
          + +
          +

          processSignedElements()

          + + 
          processSignedElements() : array
          +

          Verifies the signature nodes: + - Checks that are Response or Assertion + - Check that IDs and reference URI are unique and consistent.

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + —

          Signed element tags

          + +
          +
          + +
          + +
          +
          + +
          +

          validateTimestamps()

          + + 
          validateTimestamps() : boolean
          +

          Verifies that the document is still valid according Conditions Element.

          + + + +

          Throws

          +
          +
          \Exception
          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + boolean + +
          +
          + +
          + +
          +
          + +
          +

          validateSignedElements()

          + + 
          validateSignedElements(  $signedElements) : boolean
          +

          Verifies that the document has the expected signed nodes.

          + + +

          Parameters

          + + + + + + +
          $signedElements
          + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + boolean + +
          +
          + +
          + +
          +
          + +
          +

          getError()

          + + 
          getError() : string
          +

          After execute a validation process, if fails this method returns the cause

          + + + + +

          Returns

          + string + —

          Cause

          + +
          +
          + +
          + +
          +
          + +
          +

          getXMLDocument()

          + + 
          getXMLDocument() : \DomDocument
          +

          Returns the SAML Response document (If contains an encrypted assertion, decrypts it)

          + + + + +

          Returns

          + \DomDocument + —

          SAML Response

          + +
          +
          + +
          + +
          +
          + +
          +

          _queryAssertion()

          + + 
          _queryAssertion(string  $assertionXpath) : \DOMNodeList
          +

          Extracts a node from the DOMDocument (Assertion).

          + + +

          Parameters

          + + + + + + +
          string$assertionXpath

          Xpath Expression

          + + +

          Returns

          + \DOMNodeList + —

          The queried node

          + +
          +
          + +
          + +
          +
          + +
          +

          _decryptAssertion()

          + + 
          _decryptAssertion(\DomNode  $dom) : \DOMDocument
          +

          Decrypts the Assertion (DOMDocument)

          + + +

          Parameters

          + + + + + + +
          \DomNode$dom

          DomDocument

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + \DOMDocument + —

          Decrypted Assertion

          + +
          +
          + +
          + +
          +
          + +
          +

          _getAttributesByKeyName()

          + + 
          _getAttributesByKeyName(string  $keyName = "Name") : array
          +

          + + +

          Parameters

          + + + + + + +
          string$keyName
          + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + +
          +
          + +
          + +
          +
          + +
          +

          _query()

          + + 
          _query(string  $query) : \DOMNodeList
          +

          Extracts nodes that match the query from the DOMDocument (Response Menssage)

          + + +

          Parameters

          + + + + + + +
          string$query

          Xpath Expresion

          + + +

          Returns

          + \DOMNodeList + —

          The queried nodes

          + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_Settings.html b/docs/Saml2/classes/OneLogin_Saml2_Settings.html new file mode 100644 index 00000000..02fb955f --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_Settings.html @@ -0,0 +1,2073 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_Settings

          +

          Configuration of the PHP Toolkit

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          + getBasePath()
          + getCertPath()
          + getConfigPath()
          + getLibPath()
          + getExtLibPath()
          + getSchemasPath()
          + setSchemasPath()
          + checkSettings()
          + checkCompressionSettings()
          + checkIdPSettings()
          + checkSPSettings()
          + checkSPCerts()
          + getSPkey()
          + getSPcert()
          + getSPcertNew()
          + getIdPData()
          + getSPData()
          + getSecurityData()
          + getContacts()
          + getOrganization()
          + shouldCompressRequests()
          + shouldCompressResponses()
          + getIdPSSOUrl()
          + getIdPSLOUrl()
          + getIdPSLOResponseUrl()
          + getSPMetadata()
          + validateMetadata()
          + formatIdPCert()
          + formatIdPCertMulti()
          + formatSPCert()
          + formatSPCertNew()
          + formatSPKey()
          + getErrors()
          + setStrict()
          + isStrict()
          + isDebugActive()
          + setBaseURL()
          + getBaseURL()
          + setIdPCert()
          +
          +
          + No public properties found +
          +
          + No constants found +
          +
          +
          +
          + No protected methods found +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + _loadPaths()
          + _loadSettingsFromArray()
          + _loadSettingsFromFile()
          + _addDefaultValues()
          +
          +
          + $_paths
          + $_baseurl
          + $_strict
          + $_debug
          + $_sp
          + $_idp
          + $_compress
          + $_security
          + $_contacts
          + $_organization
          + $_errors
          + $_spValidationOnly
          +
          +
          + N/A +
          +
          +
          +
          + +
          + + + +
          +
          +

          Properties

          +
          + +
          + +
          +
          + +
          +

          $_paths

          + 
          $_paths : array
          +

          List of paths.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_baseurl

          + 
          $_baseurl : string
          +

          + + +

          Type

          + string +
          +
          + +
          + +
          +
          + +
          +

          $_strict

          + 
          $_strict : boolean
          +

          Strict. If active, PHP Toolkit will reject unsigned or unencrypted messages +if it expects them signed or encrypted. If not, the messages will be accepted +and some security issues will be also relaxed.

          + + +

          Type

          + boolean +
          +
          + +
          + +
          +
          + +
          +

          $_debug

          + 
          $_debug : boolean
          +

          Activate debug mode

          + + +

          Type

          + boolean +
          +
          + +
          + +
          +
          + +
          +

          $_sp

          + 
          $_sp : array
          +

          SP data.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_idp

          + 
          $_idp : array
          +

          IdP data.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_compress

          + 
          $_compress : array
          +

          Compression settings that determine +whether gzip compression should be used.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_security

          + 
          $_security : array
          +

          Security Info related to the SP.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_contacts

          + 
          $_contacts : array
          +

          Setting contacts.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_organization

          + 
          $_organization : array
          +

          Setting organization.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_errors

          + 
          $_errors : array
          +

          Setting errors.

          + + +

          Type

          + array +
          +
          + +
          + +
          +
          + +
          +

          $_spValidationOnly

          + 
          $_spValidationOnly : boolean
          +

          Setting errors.

          + + +

          Type

          + boolean +
          +
          + +
          + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(array|object|null  $settings = null, boolean  $spValidationOnly = false)
          +

          Initializes the settings: +- Sets the paths of the different folders +- Loads settings info from settings file or array/object provided

          + + +

          Parameters

          + + + + + + + + + + + +
          array|object|null$settings

          SAML Toolkit Settings

          boolean$spValidationOnly
          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +

          If any settings parameter is invalid

          +
          \Exception
          +

          If OneLogin_Saml2_Settings is incorrectly supplied

          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          getBasePath()

          + + 
          getBasePath() : string
          +

          Returns base path.

          + + + + +

          Returns

          + string + —

          The base toolkit folder path

          + +
          +
          + +
          + +
          +
          + +
          +

          getCertPath()

          + + 
          getCertPath() : string
          +

          Returns cert path.

          + + + + +

          Returns

          + string + —

          The cert folder path

          + +
          +
          + +
          + +
          +
          + +
          +

          getConfigPath()

          + + 
          getConfigPath() : string
          +

          Returns config path.

          + + + + +

          Returns

          + string + —

          The config folder path

          + +
          +
          + +
          + +
          +
          + +
          +

          getLibPath()

          + + 
          getLibPath() : string
          +

          Returns lib path.

          + + + + +

          Returns

          + string + —

          The library folder path

          + +
          +
          + +
          + +
          +
          + +
          +

          getExtLibPath()

          + + 
          getExtLibPath() : string
          +

          Returns external lib path.

          + + + + +

          Returns

          + string + —

          The external library folder path

          + +
          +
          + +
          + +
          +
          + +
          +

          getSchemasPath()

          + + 
          getSchemasPath() : string
          +

          Returns schema path.

          + + + + +

          Returns

          + string + —

          The external library folder path

          + +
          +
          + +
          + +
          +
          + +
          +

          setSchemasPath()

          + + 
          setSchemasPath(string  $path) : $this
          +

          Set schemas path

          + + +

          Parameters

          + + + + + + +
          string$path
          + + +

          Returns

          + $this + +
          +
          + +
          + +
          +
          + +
          +

          checkSettings()

          + + 
          checkSettings(array  $settings) : array
          +

          Checks the settings info.

          + + +

          Parameters

          + + + + + + +
          array$settings

          Array with settings data

          + + +

          Returns

          + array + —

          $errors Errors found on the settings data

          + +
          +
          + +
          + +
          +
          + +
          +

          checkCompressionSettings()

          + + 
          checkCompressionSettings(array  $settings) : array
          +

          Checks the compression settings info.

          + + +

          Parameters

          + + + + + + +
          array$settings

          Array with settings data

          + + +

          Returns

          + array + —

          $errors Errors found on the settings data

          + +
          +
          + +
          + +
          +
          + +
          +

          checkIdPSettings()

          + + 
          checkIdPSettings(array  $settings) : array
          +

          Checks the IdP settings info.

          + + +

          Parameters

          + + + + + + +
          array$settings

          Array with settings data

          + + +

          Returns

          + array + —

          $errors Errors found on the IdP settings data

          + +
          +
          + +
          + +
          +
          + +
          +

          checkSPSettings()

          + + 
          checkSPSettings(array  $settings) : array
          +

          Checks the SP settings info.

          + + +

          Parameters

          + + + + + + +
          array$settings

          Array with settings data

          + + +

          Returns

          + array + —

          $errors Errors found on the SP settings data

          + +
          +
          + +
          + +
          +
          + +
          +

          checkSPCerts()

          + + 
          checkSPCerts() : boolean
          +

          Checks if the x509 certs of the SP exists and are valid.

          + + + + +

          Returns

          + boolean + +
          +
          + +
          + +
          +
          + +
          +

          getSPkey()

          + + 
          getSPkey() : string
          +

          Returns the x509 private key of the SP.

          + + + + +

          Returns

          + string + —

          SP private key

          + +
          +
          + +
          + +
          +
          + +
          +

          getSPcert()

          + + 
          getSPcert() : string
          +

          Returns the x509 public cert of the SP.

          + + + + +

          Returns

          + string + —

          SP public cert

          + +
          +
          + +
          + +
          +
          + +
          +

          getSPcertNew()

          + + 
          getSPcertNew() : string
          +

          Returns the x509 public of the SP that is +planed to be used soon instead the other +public cert

          + + + + +

          Returns

          + string + —

          SP public cert New

          + +
          +
          + +
          + +
          +
          + +
          +

          getIdPData()

          + + 
          getIdPData() : array
          +

          Gets the IdP data.

          + + + + +

          Returns

          + array + —

          IdP info

          + +
          +
          + +
          + +
          +
          + +
          +

          getSPData()

          + + 
          getSPData() : array
          +

          Gets the SP data.

          + + + + +

          Returns

          + array + —

          SP info

          + +
          +
          + +
          + +
          +
          + +
          +

          getSecurityData()

          + + 
          getSecurityData() : array
          +

          Gets security data.

          + + + + +

          Returns

          + array + —

          SP info

          + +
          +
          + +
          + +
          +
          + +
          +

          getContacts()

          + + 
          getContacts() : array
          +

          Gets contact data.

          + + + + +

          Returns

          + array + —

          SP info

          + +
          +
          + +
          + +
          +
          + +
          +

          getOrganization()

          + + 
          getOrganization() : array
          +

          Gets organization data.

          + + + + +

          Returns

          + array + —

          SP info

          + +
          +
          + +
          + +
          +
          + +
          +

          shouldCompressRequests()

          + + 
          shouldCompressRequests() : boolean
          +

          Should SAML requests be compressed?

          + + + + +

          Returns

          + boolean + —

          Yes/No as True/False

          + +
          +
          + +
          + +
          +
          + +
          +

          shouldCompressResponses()

          + + 
          shouldCompressResponses() : boolean
          +

          Should SAML responses be compressed?

          + + + + +

          Returns

          + boolean + —

          Yes/No as True/False

          + +
          +
          + +
          + +
          +
          + +
          +

          getIdPSSOUrl()

          + + 
          getIdPSSOUrl() : string|null
          +

          Gets the IdP SSO url.

          + + + + +

          Returns

          + string|null + —

          The url of the IdP Single Sign On Service

          + +
          +
          + +
          + +
          +
          + +
          +

          getIdPSLOUrl()

          + + 
          getIdPSLOUrl() : string|null
          +

          Gets the IdP SLO url.

          + + + + +

          Returns

          + string|null + —

          The request url of the IdP Single Logout Service

          + +
          +
          + +
          + +
          +
          + +
          +

          getIdPSLOResponseUrl()

          + + 
          getIdPSLOResponseUrl() : string|null
          +

          Gets the IdP SLO response url.

          + + + + +

          Returns

          + string|null + —

          The response url of the IdP Single Logout Service

          + +
          +
          + +
          + +
          +
          + +
          +

          getSPMetadata()

          + + 
          getSPMetadata(boolean  $alwaysPublishEncryptionCert = false, \DateTime|null  $validUntil = null, integer|null  $cacheDuration = null) : string
          +

          Gets the SP metadata. The XML representation.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          boolean$alwaysPublishEncryptionCert

          When 'true', the returned metadata +will always include an 'encryption' KeyDescriptor. Otherwise, the 'encryption' +KeyDescriptor will only be included if $advancedSettings['security']['wantNameIdEncrypted'] +or $advancedSettings['security']['wantAssertionsEncrypted'] are enabled.

          \DateTime|null$validUntil

          Metadata's valid time

          integer|null$cacheDuration

          Duration of the cache in seconds

          + +

          Throws

          +
          +
          \Exception
          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string + —

          SP metadata (xml)

          + +
          +
          + +
          + +
          +
          + +
          +

          validateMetadata()

          + + 
          validateMetadata(string  $xml) : Array
          +

          Validates an XML SP Metadata.

          + + +

          Parameters

          + + + + + + +
          string$xml

          Metadata's XML that will be validate

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + Array + —

          The list of found errors

          + +
          +
          + +
          + +
          +
          + +
          +

          formatIdPCert()

          + + 
          formatIdPCert()
          +

          Formats the IdP cert.

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          formatIdPCertMulti()

          + + 
          formatIdPCertMulti()
          +

          Formats the Multple IdP certs.

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          formatSPCert()

          + + 
          formatSPCert()
          +

          Formats the SP cert.

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          formatSPCertNew()

          + + 
          formatSPCertNew()
          +

          Formats the SP cert.

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          formatSPKey()

          + + 
          formatSPKey()
          +

          Formats the SP private key.

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          getErrors()

          + + 
          getErrors() : array
          +

          Returns an array with the errors, the array is empty when the settings is ok.

          + + + + +

          Returns

          + array + —

          Errors

          + +
          +
          + +
          + +
          +
          + +
          +

          setStrict()

          + + 
          setStrict(boolean  $value)
          +

          Activates or deactivates the strict mode.

          + + +

          Parameters

          + + + + + + +
          boolean$value

          Strict parameter

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + + +
          +
          + +
          + +
          +
          + +
          +

          isStrict()

          + + 
          isStrict() : boolean
          +

          Returns if the 'strict' mode is active.

          + + + + +

          Returns

          + boolean + —

          Strict parameter

          + +
          +
          + +
          + +
          +
          + +
          +

          isDebugActive()

          + + 
          isDebugActive() : boolean
          +

          Returns if the debug is active.

          + + + + +

          Returns

          + boolean + —

          Debug parameter

          + +
          +
          + +
          + +
          +
          + +
          +

          setBaseURL()

          + + 
          setBaseURL(  $baseurl)
          +

          Set a baseurl value.

          + + +

          Parameters

          + + + + + + +
          $baseurl
          + + + +
          +
          + +
          + +
          +
          + +
          +

          getBaseURL()

          + + 
          getBaseURL() : null|string
          +

          Returns the baseurl set on the settings if any.

          + + + + +

          Returns

          + null|string + —

          The baseurl

          + +
          +
          + +
          + +
          +
          + +
          +

          setIdPCert()

          + + 
          setIdPCert(string  $cert)
          +

          Sets the IdP certificate.

          + + +

          Parameters

          + + + + + + +
          string$cert

          IdP certificate

          + + + +
          +
          + +
          + +
          +
          + +
          +

          _loadPaths()

          + + 
          _loadPaths()
          +

          Sets the paths of the different folders

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          _loadSettingsFromArray()

          + + 
          _loadSettingsFromArray(array  $settings) : boolean
          +

          Loads settings info from a settings Array

          + + +

          Parameters

          + + + + + + +
          array$settings

          SAML Toolkit Settings

          + + +

          Returns

          + boolean + —

          True if the settings info is valid

          + +
          +
          + +
          + +
          +
          + +
          +

          _loadSettingsFromFile()

          + + 
          _loadSettingsFromFile() : boolean
          +

          Loads settings info from the settings file

          + + + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + boolean + —

          True if the settings info is valid

          + +
          +
          + +
          + +
          +
          + +
          +

          _addDefaultValues()

          + + 
          _addDefaultValues()
          +

          Add default values if the settings info is not complete

          + + + + + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_Utils.html b/docs/Saml2/classes/OneLogin_Saml2_Utils.html new file mode 100644 index 00000000..20741819 --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_Utils.html @@ -0,0 +1,2498 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_Utils

          +

          Utils of PHP Toolkit

          +

          Defines several often used methods

          + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + t()
          + loadXML()
          + validateXML()
          + treeCopyReplace()
          + formatCert()
          + formatPrivateKey()
          + getStringBetween()
          + redirect()
          + setProtocolRegex()
          + setBaseURL()
          + setProxyVars()
          + getProxyVars()
          + getSelfURLhost()
          + setSelfHost()
          + setBaseURLPath()
          + getBaseURLPath()
          + setSelfPort()
          + setSelfProtocol()
          + getSelfProtocol()
          + getSelfHost()
          + getSelfPort()
          + isHTTPS()
          + getSelfURLNoQuery()
          + getSelfRoutedURLNoQuery()
          + strLreplace()
          + getSelfURL()
          + extractOriginalQueryParam()
          + generateUniqueID()
          + parseTime2SAML()
          + parseSAML2Time()
          + parseDuration()
          + getExpireTime()
          + query()
          + isSessionStarted()
          + deleteLocalSession()
          + calculateX509Fingerprint()
          + formatFingerPrint()
          + generateNameId()
          + getStatus()
          + decryptElement()
          + castKey()
          + isSupportedSigningAlgorithm()
          + addSign()
          + validateSign()
          + validateBinarySign()
          +
          +
          + No public properties found +
          +
          + RESPONSE_SIGNATURE_XPATH
          + ASSERTION_SIGNATURE_XPATH
          +
          +
          +
          +
          + getRawHost()
          + buildWithBaseURLPath()
          +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + $_proxyVars
          + $_host
          + $_protocol
          + $_port
          + $_baseurlpath
          + $_protocolRegex
          +
          +
          + N/A +
          +
          +
          +
          + +
          + + +
          +
          +

          Constants

          +
          + +
          + +
          +
          + +
          +

          RESPONSE_SIGNATURE_XPATH

          + 
          RESPONSE_SIGNATURE_XPATH
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ASSERTION_SIGNATURE_XPATH

          + 
          ASSERTION_SIGNATURE_XPATH
          +

          + +
          +
          + +
          + + + +
          +
          +

          Properties

          +
          + +
          + +
          +
          + +
          +

          $_proxyVars

          + 
          $_proxyVars : boolean
          +

          + + +

          Type

          + boolean + — Control if the `Forwarded-For-*` headers are used
          +
          + +
          + +
          +
          + +
          +

          $_host

          + 
          $_host : string|null
          +

          + + +

          Type

          + string|null +
          +
          + +
          + +
          +
          + +
          +

          $_protocol

          + 
          $_protocol : string|null
          +

          + + +

          Type

          + string|null +
          +
          + +
          + +
          +
          + +
          +

          $_port

          + 
          $_port : integer|null
          +

          + + +

          Type

          + integer|null +
          +
          + +
          + +
          +
          + +
          +

          $_baseurlpath

          + 
          $_baseurlpath : string|null
          +

          + + +

          Type

          + string|null +
          +
          + +
          + +
          +
          + +
          +

          $_protocolRegex

          + 
          $_protocolRegex : string
          +

          + + +

          Type

          + string +
          +
          + +
          + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          t()

          + + 
          t(string  $msg, array|null  $args = array()) : string
          +

          Translates any string. Accepts args

          + + +

          Parameters

          + + + + + + + + + + + +
          string$msg

          Message to be translated

          array|null$args

          Arguments

          + + +

          Returns

          + string + —

          $translatedMsg Translated text

          + +
          +
          + +
          + +
          +
          + +
          +

          loadXML()

          + + 
          loadXML(\DOMDocument  $dom, string  $xml) : \DOMDocument|false
          +

          This function load an XML string in a save way.

          +

          Prevent XEE/XXE Attacks

          + +

          Parameters

          + + + + + + + + + + + +
          \DOMDocument$dom

          The document where load the xml.

          string$xml

          The XML string to be loaded.

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + \DOMDocument|false + —

          $dom The result of load the XML at the DomDocument

          + +
          +
          + +
          + +
          +
          + +
          +

          validateXML()

          + + 
          validateXML(string|\DOMDocument  $xml, string  $schema, boolean  $debug = false, string  $schemaPath = null) : string|\DOMDocument
          +

          This function attempts to validate an XML string against the specified schema.

          +

          It will parse the string into a DOM document and validate this document against the schema.

          + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + +
          string|\DOMDocument$xml

          The XML string or document which should be validated.

          string$schema

          The schema filename which should be used.

          boolean$debug

          To disable/enable the debug mode

          string$schemaPath

          Change schema path

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + string|\DOMDocument + —

          $dom string that explains the problem or the DOMDocument

          + +
          +
          + +
          + +
          +
          + +
          +

          treeCopyReplace()

          + + 
          treeCopyReplace(\DomNode  $targetNode, \DomNode  $sourceNode, boolean  $recurse = false) : \DOMNode
          +

          Import a node tree into a target document +Copy it before a reference node as a sibling +and at the end of the copy remove +the reference node in the target document +As it were 'replacing' it +Leaving nested default namespaces alone +(Standard importNode with deep copy + mangles nested default namespaces)

          +

          The reference node must not be a DomDocument +It CAN be the top element of a document +Returns the copied node in the target document

          + +

          Parameters

          + + + + + + + + + + + + + + + + +
          \DomNode$targetNode
          \DomNode$sourceNode
          boolean$recurse
          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + \DOMNode + +
          +
          + +
          + +
          +
          + +
          +

          formatCert()

          + + 
          formatCert(string  $cert, boolean  $heads = true) : string
          +

          Returns a x509 cert (adding header & footer if required).

          + + +

          Parameters

          + + + + + + + + + + + +
          string$cert

          A x509 unformated cert

          boolean$heads

          True if we want to include head and footer

          + + +

          Returns

          + string + —

          $x509 Formatted cert

          + +
          +
          + +
          + +
          +
          + +
          +

          formatPrivateKey()

          + + 
          formatPrivateKey(string  $key, boolean  $heads = true) : string
          +

          Returns a private key (adding header & footer if required).

          + + +

          Parameters

          + + + + + + + + + + + +
          string$key

          A private key

          boolean$heads

          True if we want to include head and footer

          + + +

          Returns

          + string + —

          $rsaKey Formatted private key

          + +
          +
          + +
          + +
          +
          + +
          +

          getStringBetween()

          + + 
          getStringBetween(string  $str, string  $start, string  $end) : string
          +

          Extracts a substring between 2 marks

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$str

          The target string

          string$start

          The initial mark

          string$end

          The end mark

          + + +

          Returns

          + string + —

          A substring or an empty string if is not able to find the marks +or if there is no string between the marks

          + +
          +
          + +
          + +
          +
          + +
          +

          redirect()

          + + 
          redirect(string  $url, array  $parameters = array(), boolean  $stay = false) : string|null
          +

          Executes a redirection to the provided url (or return the target url).

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$url

          The target url

          array$parameters

          Extra parameters to be passed as part of the url

          boolean$stay

          True if we want to stay (returns the url string) False to redirect

          + +

          Throws

          +
          +
          \OneLogin_Saml2_Error
          +
          +
          + +

          Returns

          + string|null + —

          $url

          + +
          +
          + +
          + +
          +
          + +
          +

          setProtocolRegex()

          + + 
          setProtocolRegex(  $protocolRegex)
          +

          + + +

          Parameters

          + + + + + + +
          $protocolRegex
          + + + +
          +
          + +
          + +
          +
          + +
          +

          setBaseURL()

          + + 
          setBaseURL(  $baseurl)
          +

          + + +

          Parameters

          + + + + + + +
          $baseurl

          string The base url to be used when constructing URLs

          + + + +
          +
          + +
          + +
          +
          + +
          +

          setProxyVars()

          + + 
          setProxyVars(  $proxyVars)
          +

          + + +

          Parameters

          + + + + + + +
          $proxyVars

          bool Whether to use X-Forwarded-* headers to determine port/domain/protocol

          + + + +
          +
          + +
          + +
          +
          + +
          +

          getProxyVars()

          + + 
          getProxyVars()
          +

          return bool

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          getSelfURLhost()

          + + 
          getSelfURLhost() : string
          +

          Returns the protocol + the current host + the port (if different than +common ports).

          + + + + +

          Returns

          + string + —

          $url

          + +
          +
          + +
          + +
          +
          + +
          +

          setSelfHost()

          + + 
          setSelfHost(  $host)
          +

          + + +

          Parameters

          + + + + + + +
          $host

          string The host to use when constructing URLs

          + + + +
          +
          + +
          + +
          +
          + +
          +

          setBaseURLPath()

          + + 
          setBaseURLPath(  $baseurlpath)
          +

          + + +

          Parameters

          + + + + + + +
          $baseurlpath

          string The baseurl path to use when constructing URLs

          + + + +
          +
          + +
          + +
          +
          + +
          +

          getBaseURLPath()

          + + 
          getBaseURLPath() : string
          +

          + + + + +

          Returns

          + string + —

          The baseurlpath to be used when constructing URLs

          + +
          +
          + +
          + +
          +
          + +
          +

          setSelfPort()

          + + 
          setSelfPort(  $port)
          +

          + + +

          Parameters

          + + + + + + +
          $port

          int The port number to use when constructing URLs

          + + + +
          +
          + +
          + +
          +
          + +
          +

          setSelfProtocol()

          + + 
          setSelfProtocol(  $protocol)
          +

          + + +

          Parameters

          + + + + + + +
          $protocol

          string The protocol to identify as using, usually http or https

          + + + +
          +
          + +
          + +
          +
          + +
          +

          getSelfProtocol()

          + + 
          getSelfProtocol() : string
          +

          + + + + +

          Returns

          + string + —

          http|https

          + +
          +
          + +
          + +
          +
          + +
          +

          getSelfHost()

          + + 
          getSelfHost() : string
          +

          Returns the current host.

          + + + + +

          Returns

          + string + —

          $currentHost The current host

          + +
          +
          + +
          + +
          +
          + +
          +

          getSelfPort()

          + + 
          getSelfPort() : null|string
          +

          + + + + +

          Returns

          + null|string + —

          The port number used for the request

          + +
          +
          + +
          + +
          +
          + +
          +

          isHTTPS()

          + + 
          isHTTPS() : boolean
          +

          Checks if https or http.

          + + + + +

          Returns

          + boolean + —

          $isHttps False if https is not active

          + +
          +
          + +
          + +
          +
          + +
          +

          getSelfURLNoQuery()

          + + 
          getSelfURLNoQuery() : string
          +

          Returns the URL of the current host + current view.

          + + + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          getSelfRoutedURLNoQuery()

          + + 
          getSelfRoutedURLNoQuery() : string
          +

          Returns the routed URL of the current host + current view.

          + + + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          strLreplace()

          + + 
          strLreplace(  $search,   $replace,   $subject)
          +

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          $search
          $replace
          $subject
          + + + +
          +
          + +
          + +
          +
          + +
          +

          getSelfURL()

          + + 
          getSelfURL() : string
          +

          Returns the URL of the current host + current view + query.

          + + + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          extractOriginalQueryParam()

          + + 
          extractOriginalQueryParam(string  $name) : string
          +

          Extract a query param - as it was sent - from $_SERVER[QUERY_STRING]

          + + +

          Parameters

          + + + + + + +
          string$name

          The param to-be extracted

          + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          generateUniqueID()

          + + 
          generateUniqueID() : string
          +

          Generates an unique string (used for example as ID for assertions).

          + + + + +

          Returns

          + string + —

          A unique string

          + +
          +
          + +
          + +
          +
          + +
          +

          parseTime2SAML()

          + + 
          parseTime2SAML(string|integer  $time) : string
          +

          Converts a UNIX timestamp to SAML2 timestamp on the form +yyyy-mm-ddThh:mm:ss(\.s+)?Z.

          + + +

          Parameters

          + + + + + + +
          string|integer$time

          The time we should convert (DateTime).

          + + +

          Returns

          + string + —

          $timestamp SAML2 timestamp.

          + +
          +
          + +
          + +
          +
          + +
          +

          parseSAML2Time()

          + + 
          parseSAML2Time(string  $time) : integer
          +

          Converts a SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z +to a UNIX timestamp. The sub-second part is ignored.

          + + +

          Parameters

          + + + + + + +
          string$time

          The time we should convert (SAML Timestamp).

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + integer + —

          $timestamp Converted to a unix timestamp.

          + +
          +
          + +
          + +
          +
          + +
          +

          parseDuration()

          + + 
          parseDuration(string  $duration, integer|null  $timestamp = null) : integer
          +

          Interprets a ISO8601 duration value relative to a given timestamp.

          + + +

          Parameters

          + + + + + + + + + + + +
          string$duration

          The duration, as a string.

          integer|null$timestamp

          The unix timestamp we should apply the +duration to. Optional, default to the +current time.

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + integer + —

          The new timestamp, after the duration is applied.

          + +
          +
          + +
          + +
          +
          + +
          +

          getExpireTime()

          + + 
          getExpireTime(string|null  $cacheDuration = null, string|integer|null  $validUntil = null) : integer|null
          +

          Compares 2 dates and returns the earliest.

          + + +

          Parameters

          + + + + + + + + + + + +
          string|null$cacheDuration

          The duration, as a string.

          string|integer|null$validUntil

          The valid until date, as a string or as a timestamp

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + integer|null + —

          $expireTime The expiration time.

          + +
          +
          + +
          + +
          +
          + +
          +

          query()

          + + 
          query(\DOMDocument  $dom, string  $query, \DomElement|null  $context = null) : \DOMNodeList
          +

          Extracts nodes from the DOMDocument.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          \DOMDocument$dom

          The DOMDocument

          string$query

          Xpath Expresion

          \DomElement|null$context

          Context Node (DomElement)

          + + +

          Returns

          + \DOMNodeList + —

          The queried nodes

          + +
          +
          + +
          + +
          +
          + +
          +

          isSessionStarted()

          + + 
          isSessionStarted() : boolean
          +

          Checks if the session is started or not.

          + + + + +

          Returns

          + boolean + —

          true if the sessíon is started

          + +
          +
          + +
          + +
          +
          + +
          +

          deleteLocalSession()

          + + 
          deleteLocalSession()
          +

          Deletes the local session.

          + + + + + +
          +
          + +
          + +
          +
          + +
          +

          calculateX509Fingerprint()

          + + 
          calculateX509Fingerprint(string  $x509cert, string  $alg = 'sha1') : null|string
          +

          Calculates the fingerprint of a x509cert.

          + + +

          Parameters

          + + + + + + + + + + + +
          string$x509cert

          x509 cert

          string$alg
          + + +

          Returns

          + null|string + —

          Formatted fingerprint

          + +
          +
          + +
          + +
          +
          + +
          +

          formatFingerPrint()

          + + 
          formatFingerPrint(string  $fingerprint) : string
          +

          Formates a fingerprint.

          + + +

          Parameters

          + + + + + + +
          string$fingerprint

          fingerprint

          + + +

          Returns

          + string + —

          Formatted fingerprint

          + +
          +
          + +
          + +
          +
          + +
          +

          generateNameId()

          + + 
          generateNameId(string  $value, string  $spnq, string|null  $format = null, string|null  $cert = null, string|null  $nq = null) : string
          +

          Generates a nameID.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string$value

          fingerprint

          string$spnq

          SP Name Qualifier

          string|null$format

          SP Format

          string|null$cert

          IdP Public cert to encrypt the nameID

          string|null$nq

          IdP Name Qualifier

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + string + —

          $nameIDElement DOMElement | XMLSec nameID

          + +
          +
          + +
          + +
          +
          + +
          +

          getStatus()

          + + 
          getStatus(\DOMDocument  $dom) : array
          +

          Gets Status from a Response.

          + + +

          Parameters

          + + + + + + +
          \DOMDocument$dom

          The Response as XML

          + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + array + —

          $status The Status, an array with the code and a message.

          + +
          +
          + +
          + +
          +
          + +
          +

          decryptElement()

          + + 
          decryptElement(\DOMElement  $encryptedData, \XMLSecurityKey  $inputKey, boolean  $formatOutput = true) : \DOMElement
          +

          Decrypts an encrypted element.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          \DOMElement$encryptedData

          The encrypted data.

          \XMLSecurityKey$inputKey

          The decryption key.

          boolean$formatOutput

          Format or not the output.

          + +

          Throws

          +
          +
          \OneLogin_Saml2_ValidationError
          +
          +
          + +

          Returns

          + \DOMElement + —

          The decrypted element.

          + +
          +
          + +
          + +
          +
          + +
          +

          castKey()

          + + 
          castKey(\XMLSecurityKey  $key, string  $algorithm, string  $type = 'public') : \XMLSecurityKey
          +

          Converts a XMLSecurityKey to the correct algorithm.

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          \XMLSecurityKey$key

          The key.

          string$algorithm

          The desired algorithm.

          string$type

          Public or private key, defaults to public.

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + \XMLSecurityKey + —

          The new key.

          + +
          +
          + +
          + +
          +
          + +
          +

          isSupportedSigningAlgorithm()

          + + 
          isSupportedSigningAlgorithm(  $algorithm) : boolean
          +

          + + +

          Parameters

          + + + + + + +
          $algorithm
          + + +

          Returns

          + boolean + +
          +
          + +
          + +
          +
          + +
          +

          addSign()

          + + 
          addSign(string|\DomDocument  $xml, string  $key, string  $cert, string  $signAlgorithm = \XMLSecurityKey::RSA_SHA1, string  $digestAlgorithm = \XMLSecurityDSig::SHA1) : string
          +

          Adds signature key and senders certificate to an element (Message or Assertion).

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string|\DomDocument$xml

          The element we should sign

          string$key

          The private key

          string$cert

          The public

          string$signAlgorithm

          Signature algorithm method

          string$digestAlgorithm

          Digest algorithm method

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + +
          +

          validateSign()

          + + 
          validateSign(string|\DomNode  $xml, string|null  $cert = null, string|null  $fingerprint = null, string|null  $fingerprintalg = 'sha1', string|null  $xpath = null, array|null  $multiCerts = null) : boolean
          +

          Validates a signature (Message or Assertion).

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
          string|\DomNode$xml

          The element we should validate

          string|null$cert

          The public cert

          string|null$fingerprint

          The fingerprint of the public cert

          string|null$fingerprintalg

          The algorithm used to get the fingerprint

          string|null$xpath

          The xpath of the signed element

          array|null$multiCerts

          Multiple public certs

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + boolean + +
          +
          + +
          + +
          +
          + +
          +

          validateBinarySign()

          + + 
          validateBinarySign(string  $messageType, array  $getData, array  $idpData, boolean  $retrieveParametersFromServer = false) : boolean
          +

          Validates a binary signature

          + + +

          Parameters

          + + + + + + + + + + + + + + + + + + + + + +
          string$messageType

          Type of SAML Message

          array$getData

          HTTP GET array

          array$idpData

          IdP setting data

          boolean$retrieveParametersFromServer

          Indicates where to get the values in order to validate the Sign, from getData or from $_SERVER

          + +

          Throws

          +
          +
          \Exception
          +
          +
          + +

          Returns

          + boolean + +
          +
          + +
          + +
          +
          + +
          +

          getRawHost()

          + + 
          getRawHost() : string
          +

          + + + + +

          Returns

          + string + —

          The raw host name

          + +
          +
          + +
          + +
          +
          + +
          +

          buildWithBaseURLPath()

          + + 
          buildWithBaseURLPath(  $info) : string
          +

          Returns the part of the URL with the BaseURLPath.

          + + +

          Parameters

          + + + + + + +
          $info
          + + +

          Returns

          + string + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/classes/OneLogin_Saml2_ValidationError.html b/docs/Saml2/classes/OneLogin_Saml2_ValidationError.html new file mode 100644 index 00000000..907e9f05 --- /dev/null +++ b/docs/Saml2/classes/OneLogin_Saml2_ValidationError.html @@ -0,0 +1,1451 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          \OneLogin_Saml2_ValidationError

          +

          This class implements another custom Exception handler, +related to exceptions that happens during validation process.

          + + + +
          +

          Summary

          +
          +
          + Methods +
          +
          + Properties +
          +
          + Constants +
          +
          +
          +
          + __construct()
          +
          +
          + No public properties found +
          +
          + UNSUPPORTED_SAML_VERSION
          + MISSING_ID
          + WRONG_NUMBER_OF_ASSERTIONS
          + MISSING_STATUS
          + MISSING_STATUS_CODE
          + STATUS_CODE_IS_NOT_SUCCESS
          + WRONG_SIGNED_ELEMENT
          + ID_NOT_FOUND_IN_SIGNED_ELEMENT
          + DUPLICATED_ID_IN_SIGNED_ELEMENTS
          + INVALID_SIGNED_ELEMENT
          + DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS
          + UNEXPECTED_SIGNED_ELEMENTS
          + WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE
          + WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION
          + INVALID_XML_FORMAT
          + WRONG_INRESPONSETO
          + NO_ENCRYPTED_ASSERTION
          + NO_ENCRYPTED_NAMEID
          + MISSING_CONDITIONS
          + ASSERTION_TOO_EARLY
          + ASSERTION_EXPIRED
          + WRONG_NUMBER_OF_AUTHSTATEMENTS
          + NO_ATTRIBUTESTATEMENT
          + ENCRYPTED_ATTRIBUTES
          + WRONG_DESTINATION
          + EMPTY_DESTINATION
          + WRONG_AUDIENCE
          + ISSUER_MULTIPLE_IN_RESPONSE
          + ISSUER_NOT_FOUND_IN_ASSERTION
          + WRONG_ISSUER
          + SESSION_EXPIRED
          + WRONG_SUBJECTCONFIRMATION
          + NO_SIGNED_MESSAGE
          + NO_SIGNED_ASSERTION
          + NO_SIGNATURE_FOUND
          + KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA
          + CHILDREN_NODE_NOT_FOUND_IN_KEYINFO
          + UNSUPPORTED_RETRIEVAL_METHOD
          + NO_NAMEID
          + EMPTY_NAMEID
          + SP_NAME_QUALIFIER_NAME_MISMATCH
          + DUPLICATED_ATTRIBUTE_NAME_FOUND
          + INVALID_SIGNATURE
          + WRONG_NUMBER_OF_SIGNATURES
          + RESPONSE_EXPIRED
          + UNEXPECTED_REFERENCE
          + NOT_SUPPORTED
          + KEY_ALGORITHM_ERROR
          + MISSING_ENCRYPTED_ELEMENT
          +
          +
          +
          +
          + No protected methods found +
          +
          + No protected properties found +
          +
          + N/A +
          +
          +
          +
          + No private methods found +
          +
          + No private properties found +
          +
          + N/A +
          +
          +
          +
          + +
          + + +
          +
          +

          Constants

          +
          + +
          + +
          +
          + +
          +

          UNSUPPORTED_SAML_VERSION

          + 
          UNSUPPORTED_SAML_VERSION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          MISSING_ID

          + 
          MISSING_ID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_NUMBER_OF_ASSERTIONS

          + 
          WRONG_NUMBER_OF_ASSERTIONS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          MISSING_STATUS

          + 
          MISSING_STATUS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          MISSING_STATUS_CODE

          + 
          MISSING_STATUS_CODE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          STATUS_CODE_IS_NOT_SUCCESS

          + 
          STATUS_CODE_IS_NOT_SUCCESS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_SIGNED_ELEMENT

          + 
          WRONG_SIGNED_ELEMENT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ID_NOT_FOUND_IN_SIGNED_ELEMENT

          + 
          ID_NOT_FOUND_IN_SIGNED_ELEMENT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          DUPLICATED_ID_IN_SIGNED_ELEMENTS

          + 
          DUPLICATED_ID_IN_SIGNED_ELEMENTS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          INVALID_SIGNED_ELEMENT

          + 
          INVALID_SIGNED_ELEMENT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS

          + 
          DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          UNEXPECTED_SIGNED_ELEMENTS

          + 
          UNEXPECTED_SIGNED_ELEMENTS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE

          + 
          WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION

          + 
          WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          INVALID_XML_FORMAT

          + 
          INVALID_XML_FORMAT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_INRESPONSETO

          + 
          WRONG_INRESPONSETO
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NO_ENCRYPTED_ASSERTION

          + 
          NO_ENCRYPTED_ASSERTION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NO_ENCRYPTED_NAMEID

          + 
          NO_ENCRYPTED_NAMEID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          MISSING_CONDITIONS

          + 
          MISSING_CONDITIONS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ASSERTION_TOO_EARLY

          + 
          ASSERTION_TOO_EARLY
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ASSERTION_EXPIRED

          + 
          ASSERTION_EXPIRED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_NUMBER_OF_AUTHSTATEMENTS

          + 
          WRONG_NUMBER_OF_AUTHSTATEMENTS
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NO_ATTRIBUTESTATEMENT

          + 
          NO_ATTRIBUTESTATEMENT
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ENCRYPTED_ATTRIBUTES

          + 
          ENCRYPTED_ATTRIBUTES
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_DESTINATION

          + 
          WRONG_DESTINATION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          EMPTY_DESTINATION

          + 
          EMPTY_DESTINATION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_AUDIENCE

          + 
          WRONG_AUDIENCE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ISSUER_MULTIPLE_IN_RESPONSE

          + 
          ISSUER_MULTIPLE_IN_RESPONSE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          ISSUER_NOT_FOUND_IN_ASSERTION

          + 
          ISSUER_NOT_FOUND_IN_ASSERTION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_ISSUER

          + 
          WRONG_ISSUER
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SESSION_EXPIRED

          + 
          SESSION_EXPIRED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_SUBJECTCONFIRMATION

          + 
          WRONG_SUBJECTCONFIRMATION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NO_SIGNED_MESSAGE

          + 
          NO_SIGNED_MESSAGE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NO_SIGNED_ASSERTION

          + 
          NO_SIGNED_ASSERTION
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NO_SIGNATURE_FOUND

          + 
          NO_SIGNATURE_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA

          + 
          KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          CHILDREN_NODE_NOT_FOUND_IN_KEYINFO

          + 
          CHILDREN_NODE_NOT_FOUND_IN_KEYINFO
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          UNSUPPORTED_RETRIEVAL_METHOD

          + 
          UNSUPPORTED_RETRIEVAL_METHOD
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NO_NAMEID

          + 
          NO_NAMEID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          EMPTY_NAMEID

          + 
          EMPTY_NAMEID
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          SP_NAME_QUALIFIER_NAME_MISMATCH

          + 
          SP_NAME_QUALIFIER_NAME_MISMATCH
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          DUPLICATED_ATTRIBUTE_NAME_FOUND

          + 
          DUPLICATED_ATTRIBUTE_NAME_FOUND
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          INVALID_SIGNATURE

          + 
          INVALID_SIGNATURE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          WRONG_NUMBER_OF_SIGNATURES

          + 
          WRONG_NUMBER_OF_SIGNATURES
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          RESPONSE_EXPIRED

          + 
          RESPONSE_EXPIRED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          UNEXPECTED_REFERENCE

          + 
          UNEXPECTED_REFERENCE
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          NOT_SUPPORTED

          + 
          NOT_SUPPORTED
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          KEY_ALGORITHM_ERROR

          + 
          KEY_ALGORITHM_ERROR
          +

          + +
          +
          + +
          + +
          +
          + +
          +

          MISSING_ENCRYPTED_ELEMENT

          + 
          MISSING_ENCRYPTED_ELEMENT
          +

          + +
          +
          + +
          + + + + +
          +

          Methods

          + +
          + +
          +
          + +
          +

          __construct()

          + + 
          __construct(string  $msg, integer  $code, array|null  $args = null)
          +

          Constructor

          + + +

          Parameters

          + + + + + + + + + + + + + + + + +
          string$msg

          Describes the error.

          integer$code

          The code error (defined in the error class).

          array|null$args

          Arguments used in the message that describes the error.

          + + + +
          +
          + +
          + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/css/bootstrap-combined.no-icons.min.css b/docs/Saml2/css/bootstrap-combined.no-icons.min.css new file mode 100644 index 00000000..5ab243ec --- /dev/null +++ b/docs/Saml2/css/bootstrap-combined.no-icons.min.css @@ -0,0 +1,732 @@ +/*! + * Bootstrap v2.3.2 + * + * Copyright 2012 Twitter, Inc + * Licensed under the Apache License v2.0 + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Designed and built with all the love in the world @twitter by @mdo and @fat. + */ +.clearfix{*zoom:1;}.clearfix:before,.clearfix:after{display:table;content:"";line-height:0;} +.clearfix:after{clear:both;} +.hide-text{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0;} +.input-block-level{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;} +article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block;} +audio,canvas,video{display:inline-block;*display:inline;*zoom:1;} +audio:not([controls]){display:none;} +html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;} +a:focus{outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} +a:hover,a:active{outline:0;} +sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline;} +sup{top:-0.5em;} +sub{bottom:-0.25em;} +img{max-width:100%;width:auto\9;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic;} +#map_canvas img,.google-maps img{max-width:none;} +button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle;} +button,input{*overflow:visible;line-height:normal;} +button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0;} +button,html input[type="button"],input[type="reset"],input[type="submit"]{-webkit-appearance:button;cursor:pointer;} +label,select,button,input[type="button"],input[type="reset"],input[type="submit"],input[type="radio"],input[type="checkbox"]{cursor:pointer;} +input[type="search"]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield;} +input[type="search"]::-webkit-search-decoration,input[type="search"]::-webkit-search-cancel-button{-webkit-appearance:none;} +textarea{overflow:auto;vertical-align:top;} +@media print{*{text-shadow:none !important;color:#000 !important;background:transparent !important;box-shadow:none !important;} a,a:visited{text-decoration:underline;} a[href]:after{content:" (" attr(href) ")";} abbr[title]:after{content:" (" attr(title) ")";} .ir a:after,a[href^="javascript:"]:after,a[href^="#"]:after{content:"";} pre,blockquote{border:1px solid #999;page-break-inside:avoid;} thead{display:table-header-group;} tr,img{page-break-inside:avoid;} img{max-width:100% !important;} @page {margin:0.5cm;}p,h2,h3{orphans:3;widows:3;} h2,h3{page-break-after:avoid;}}body{margin:0;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;line-height:20px;color:#333333;background-color:#ffffff;} +a{color:#0088cc;text-decoration:none;} +a:hover,a:focus{color:#005580;text-decoration:underline;} +.img-rounded{-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;} +.img-polaroid{padding:4px;background-color:#fff;border:1px solid #ccc;border:1px solid rgba(0, 0, 0, 0.2);-webkit-box-shadow:0 1px 3px rgba(0, 0, 0, 0.1);-moz-box-shadow:0 1px 3px rgba(0, 0, 0, 0.1);box-shadow:0 1px 3px rgba(0, 0, 0, 0.1);} +.img-circle{-webkit-border-radius:500px;-moz-border-radius:500px;border-radius:500px;} +.row{margin-left:-20px;*zoom:1;}.row:before,.row:after{display:table;content:"";line-height:0;} +.row:after{clear:both;} +[class*="span"]{float:left;min-height:1px;margin-left:20px;} +.container,.navbar-static-top .container,.navbar-fixed-top .container,.navbar-fixed-bottom .container{width:940px;} +.span12{width:940px;} +.span11{width:860px;} +.span10{width:780px;} +.span9{width:700px;} +.span8{width:620px;} +.span7{width:540px;} +.span6{width:460px;} +.span5{width:380px;} +.span4{width:300px;} +.span3{width:220px;} +.span2{width:140px;} +.span1{width:60px;} +.offset12{margin-left:980px;} +.offset11{margin-left:900px;} +.offset10{margin-left:820px;} +.offset9{margin-left:740px;} +.offset8{margin-left:660px;} +.offset7{margin-left:580px;} +.offset6{margin-left:500px;} +.offset5{margin-left:420px;} +.offset4{margin-left:340px;} +.offset3{margin-left:260px;} +.offset2{margin-left:180px;} +.offset1{margin-left:100px;} +.row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";line-height:0;} +.row-fluid:after{clear:both;} +.row-fluid [class*="span"]{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;float:left;margin-left:2.127659574468085%;*margin-left:2.074468085106383%;} +.row-fluid [class*="span"]:first-child{margin-left:0;} +.row-fluid .controls-row [class*="span"]+[class*="span"]{margin-left:2.127659574468085%;} +.row-fluid .span12{width:100%;*width:99.94680851063829%;} +.row-fluid .span11{width:91.48936170212765%;*width:91.43617021276594%;} +.row-fluid .span10{width:82.97872340425532%;*width:82.92553191489361%;} +.row-fluid .span9{width:74.46808510638297%;*width:74.41489361702126%;} +.row-fluid .span8{width:65.95744680851064%;*width:65.90425531914893%;} +.row-fluid .span7{width:57.44680851063829%;*width:57.39361702127659%;} +.row-fluid .span6{width:48.93617021276595%;*width:48.88297872340425%;} +.row-fluid .span5{width:40.42553191489362%;*width:40.37234042553192%;} +.row-fluid .span4{width:31.914893617021278%;*width:31.861702127659576%;} +.row-fluid .span3{width:23.404255319148934%;*width:23.351063829787233%;} +.row-fluid .span2{width:14.893617021276595%;*width:14.840425531914894%;} +.row-fluid .span1{width:6.382978723404255%;*width:6.329787234042553%;} +.row-fluid .offset12{margin-left:104.25531914893617%;*margin-left:104.14893617021275%;} +.row-fluid .offset12:first-child{margin-left:102.12765957446808%;*margin-left:102.02127659574467%;} +.row-fluid .offset11{margin-left:95.74468085106382%;*margin-left:95.6382978723404%;} +.row-fluid .offset11:first-child{margin-left:93.61702127659574%;*margin-left:93.51063829787232%;} +.row-fluid .offset10{margin-left:87.23404255319149%;*margin-left:87.12765957446807%;} +.row-fluid .offset10:first-child{margin-left:85.1063829787234%;*margin-left:84.99999999999999%;} +.row-fluid .offset9{margin-left:78.72340425531914%;*margin-left:78.61702127659572%;} +.row-fluid .offset9:first-child{margin-left:76.59574468085106%;*margin-left:76.48936170212764%;} +.row-fluid .offset8{margin-left:70.2127659574468%;*margin-left:70.10638297872339%;} +.row-fluid .offset8:first-child{margin-left:68.08510638297872%;*margin-left:67.9787234042553%;} +.row-fluid .offset7{margin-left:61.70212765957446%;*margin-left:61.59574468085106%;} +.row-fluid .offset7:first-child{margin-left:59.574468085106375%;*margin-left:59.46808510638297%;} +.row-fluid .offset6{margin-left:53.191489361702125%;*margin-left:53.085106382978715%;} +.row-fluid .offset6:first-child{margin-left:51.063829787234035%;*margin-left:50.95744680851063%;} +.row-fluid .offset5{margin-left:44.68085106382979%;*margin-left:44.57446808510638%;} +.row-fluid .offset5:first-child{margin-left:42.5531914893617%;*margin-left:42.4468085106383%;} +.row-fluid .offset4{margin-left:36.170212765957444%;*margin-left:36.06382978723405%;} +.row-fluid .offset4:first-child{margin-left:34.04255319148936%;*margin-left:33.93617021276596%;} +.row-fluid .offset3{margin-left:27.659574468085104%;*margin-left:27.5531914893617%;} +.row-fluid .offset3:first-child{margin-left:25.53191489361702%;*margin-left:25.425531914893618%;} +.row-fluid .offset2{margin-left:19.148936170212764%;*margin-left:19.04255319148936%;} +.row-fluid .offset2:first-child{margin-left:17.02127659574468%;*margin-left:16.914893617021278%;} +.row-fluid .offset1{margin-left:10.638297872340425%;*margin-left:10.53191489361702%;} +.row-fluid .offset1:first-child{margin-left:8.51063829787234%;*margin-left:8.404255319148938%;} +[class*="span"].hide,.row-fluid [class*="span"].hide{display:none;} +[class*="span"].pull-right,.row-fluid [class*="span"].pull-right{float:right;} +.container{margin-right:auto;margin-left:auto;*zoom:1;}.container:before,.container:after{display:table;content:"";line-height:0;} +.container:after{clear:both;} +.container-fluid{padding-right:20px;padding-left:20px;*zoom:1;}.container-fluid:before,.container-fluid:after{display:table;content:"";line-height:0;} +.container-fluid:after{clear:both;} +p{margin:0 0 10px;} +.lead{margin-bottom:20px;font-size:21px;font-weight:200;line-height:30px;} +small{font-size:85%;} +strong{font-weight:bold;} +em{font-style:italic;} +cite{font-style:normal;} +.muted{color:#999999;} +a.muted:hover,a.muted:focus{color:#808080;} +.text-warning{color:#c09853;} +a.text-warning:hover,a.text-warning:focus{color:#a47e3c;} +.text-error{color:#b94a48;} +a.text-error:hover,a.text-error:focus{color:#953b39;} +.text-info{color:#3a87ad;} +a.text-info:hover,a.text-info:focus{color:#2d6987;} +.text-success{color:#468847;} +a.text-success:hover,a.text-success:focus{color:#356635;} +.text-left{text-align:left;} +.text-right{text-align:right;} +.text-center{text-align:center;} +h1,h2,h3,h4,h5,h6{margin:10px 0;font-family:inherit;font-weight:bold;line-height:20px;color:inherit;text-rendering:optimizelegibility;}h1 small,h2 small,h3 small,h4 small,h5 small,h6 small{font-weight:normal;line-height:1;color:#999999;} +h1,h2,h3{line-height:40px;} +h1{font-size:38.5px;} +h2{font-size:31.5px;} +h3{font-size:24.5px;} +h4{font-size:17.5px;} +h5{font-size:14px;} +h6{font-size:11.9px;} +h1 small{font-size:24.5px;} +h2 small{font-size:17.5px;} +h3 small{font-size:14px;} +h4 small{font-size:14px;} +.page-header{padding-bottom:9px;margin:20px 0 30px;border-bottom:1px solid #eeeeee;} +ul,ol{padding:0;margin:0 0 10px 25px;} +ul ul,ul ol,ol ol,ol ul{margin-bottom:0;} +li{line-height:20px;} +ul.unstyled,ol.unstyled{margin-left:0;list-style:none;} +ul.inline,ol.inline{margin-left:0;list-style:none;}ul.inline>li,ol.inline>li{display:inline-block;*display:inline;*zoom:1;padding-left:5px;padding-right:5px;} +dl{margin-bottom:20px;} +dt,dd{line-height:20px;} +dt{font-weight:bold;} +dd{margin-left:10px;} +.dl-horizontal{*zoom:1;}.dl-horizontal:before,.dl-horizontal:after{display:table;content:"";line-height:0;} +.dl-horizontal:after{clear:both;} +.dl-horizontal dt{float:left;width:160px;clear:left;text-align:right;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;} +.dl-horizontal dd{margin-left:180px;} +hr{margin:20px 0;border:0;border-top:1px solid #eeeeee;border-bottom:1px solid #ffffff;} +abbr[title],abbr[data-original-title]{cursor:help;border-bottom:1px dotted #999999;} +abbr.initialism{font-size:90%;text-transform:uppercase;} +blockquote{padding:0 0 0 15px;margin:0 0 20px;border-left:5px solid #eeeeee;}blockquote p{margin-bottom:0;font-size:17.5px;font-weight:300;line-height:1.25;} +blockquote small{display:block;line-height:20px;color:#999999;}blockquote small:before{content:'\2014 \00A0';} +blockquote.pull-right{float:right;padding-right:15px;padding-left:0;border-right:5px solid #eeeeee;border-left:0;}blockquote.pull-right p,blockquote.pull-right small{text-align:right;} +blockquote.pull-right small:before{content:'';} +blockquote.pull-right small:after{content:'\00A0 \2014';} +q:before,q:after,blockquote:before,blockquote:after{content:"";} +address{display:block;margin-bottom:20px;font-style:normal;line-height:20px;} +code,pre{padding:0 3px 2px;font-family:Monaco,Menlo,Consolas,"Courier New",monospace;font-size:12px;color:#333333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} +code{padding:2px 4px;color:#d14;background-color:#f7f7f9;border:1px solid #e1e1e8;white-space:nowrap;} +pre{display:block;padding:9.5px;margin:0 0 10px;font-size:13px;line-height:20px;word-break:break-all;word-wrap:break-word;white-space:pre;white-space:pre-wrap;background-color:#f5f5f5;border:1px solid #ccc;border:1px solid rgba(0, 0, 0, 0.15);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;}pre.prettyprint{margin-bottom:20px;} +pre code{padding:0;color:inherit;white-space:pre;white-space:pre-wrap;background-color:transparent;border:0;} +.pre-scrollable{max-height:340px;overflow-y:scroll;} +.label,.badge{display:inline-block;padding:2px 4px;font-size:11.844px;font-weight:bold;line-height:14px;color:#ffffff;vertical-align:baseline;white-space:nowrap;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#999999;} +.label{-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} +.badge{padding-left:9px;padding-right:9px;-webkit-border-radius:9px;-moz-border-radius:9px;border-radius:9px;} +.label:empty,.badge:empty{display:none;} +a.label:hover,a.label:focus,a.badge:hover,a.badge:focus{color:#ffffff;text-decoration:none;cursor:pointer;} +.label-important,.badge-important{background-color:#b94a48;} +.label-important[href],.badge-important[href]{background-color:#953b39;} +.label-warning,.badge-warning{background-color:#f89406;} +.label-warning[href],.badge-warning[href]{background-color:#c67605;} +.label-success,.badge-success{background-color:#468847;} +.label-success[href],.badge-success[href]{background-color:#356635;} +.label-info,.badge-info{background-color:#3a87ad;} +.label-info[href],.badge-info[href]{background-color:#2d6987;} +.label-inverse,.badge-inverse{background-color:#333333;} +.label-inverse[href],.badge-inverse[href]{background-color:#1a1a1a;} +.btn .label,.btn .badge{position:relative;top:-1px;} +.btn-mini .label,.btn-mini .badge{top:0;} +table{max-width:100%;background-color:transparent;border-collapse:collapse;border-spacing:0;} +.table{width:100%;margin-bottom:20px;}.table th,.table td{padding:8px;line-height:20px;text-align:left;vertical-align:top;border-top:1px solid #dddddd;} +.table th{font-weight:bold;} +.table thead th{vertical-align:bottom;} +.table caption+thead tr:first-child th,.table caption+thead tr:first-child td,.table colgroup+thead tr:first-child th,.table colgroup+thead tr:first-child td,.table thead:first-child tr:first-child th,.table thead:first-child tr:first-child td{border-top:0;} +.table tbody+tbody{border-top:2px solid #dddddd;} +.table .table{background-color:#ffffff;} +.table-condensed th,.table-condensed td{padding:4px 5px;} +.table-bordered{border:1px solid #dddddd;border-collapse:separate;*border-collapse:collapse;border-left:0;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;}.table-bordered th,.table-bordered td{border-left:1px solid #dddddd;} +.table-bordered caption+thead tr:first-child th,.table-bordered caption+tbody tr:first-child th,.table-bordered caption+tbody tr:first-child td,.table-bordered colgroup+thead tr:first-child th,.table-bordered colgroup+tbody tr:first-child th,.table-bordered colgroup+tbody tr:first-child td,.table-bordered thead:first-child tr:first-child th,.table-bordered tbody:first-child tr:first-child th,.table-bordered tbody:first-child tr:first-child td{border-top:0;} +.table-bordered thead:first-child tr:first-child>th:first-child,.table-bordered tbody:first-child tr:first-child>td:first-child,.table-bordered tbody:first-child tr:first-child>th:first-child{-webkit-border-top-left-radius:4px;-moz-border-radius-topleft:4px;border-top-left-radius:4px;} +.table-bordered thead:first-child tr:first-child>th:last-child,.table-bordered tbody:first-child tr:first-child>td:last-child,.table-bordered tbody:first-child tr:first-child>th:last-child{-webkit-border-top-right-radius:4px;-moz-border-radius-topright:4px;border-top-right-radius:4px;} +.table-bordered thead:last-child tr:last-child>th:first-child,.table-bordered tbody:last-child tr:last-child>td:first-child,.table-bordered tbody:last-child tr:last-child>th:first-child,.table-bordered tfoot:last-child tr:last-child>td:first-child,.table-bordered tfoot:last-child tr:last-child>th:first-child{-webkit-border-bottom-left-radius:4px;-moz-border-radius-bottomleft:4px;border-bottom-left-radius:4px;} +.table-bordered thead:last-child tr:last-child>th:last-child,.table-bordered tbody:last-child tr:last-child>td:last-child,.table-bordered tbody:last-child tr:last-child>th:last-child,.table-bordered tfoot:last-child tr:last-child>td:last-child,.table-bordered tfoot:last-child tr:last-child>th:last-child{-webkit-border-bottom-right-radius:4px;-moz-border-radius-bottomright:4px;border-bottom-right-radius:4px;} +.table-bordered tfoot+tbody:last-child tr:last-child td:first-child{-webkit-border-bottom-left-radius:0;-moz-border-radius-bottomleft:0;border-bottom-left-radius:0;} +.table-bordered tfoot+tbody:last-child tr:last-child td:last-child{-webkit-border-bottom-right-radius:0;-moz-border-radius-bottomright:0;border-bottom-right-radius:0;} +.table-bordered caption+thead tr:first-child th:first-child,.table-bordered caption+tbody tr:first-child td:first-child,.table-bordered colgroup+thead tr:first-child th:first-child,.table-bordered colgroup+tbody tr:first-child td:first-child{-webkit-border-top-left-radius:4px;-moz-border-radius-topleft:4px;border-top-left-radius:4px;} +.table-bordered caption+thead tr:first-child th:last-child,.table-bordered caption+tbody tr:first-child td:last-child,.table-bordered colgroup+thead tr:first-child th:last-child,.table-bordered colgroup+tbody tr:first-child td:last-child{-webkit-border-top-right-radius:4px;-moz-border-radius-topright:4px;border-top-right-radius:4px;} +.table-striped tbody>tr:nth-child(odd)>td,.table-striped tbody>tr:nth-child(odd)>th{background-color:#f9f9f9;} +.table-hover tbody tr:hover>td,.table-hover tbody tr:hover>th{background-color:#f5f5f5;} +table td[class*="span"],table th[class*="span"],.row-fluid table td[class*="span"],.row-fluid table th[class*="span"]{display:table-cell;float:none;margin-left:0;} +.table td.span1,.table th.span1{float:none;width:44px;margin-left:0;} +.table td.span2,.table th.span2{float:none;width:124px;margin-left:0;} +.table td.span3,.table th.span3{float:none;width:204px;margin-left:0;} +.table td.span4,.table th.span4{float:none;width:284px;margin-left:0;} +.table td.span5,.table th.span5{float:none;width:364px;margin-left:0;} +.table td.span6,.table th.span6{float:none;width:444px;margin-left:0;} +.table td.span7,.table th.span7{float:none;width:524px;margin-left:0;} +.table td.span8,.table th.span8{float:none;width:604px;margin-left:0;} +.table td.span9,.table th.span9{float:none;width:684px;margin-left:0;} +.table td.span10,.table th.span10{float:none;width:764px;margin-left:0;} +.table td.span11,.table th.span11{float:none;width:844px;margin-left:0;} +.table td.span12,.table th.span12{float:none;width:924px;margin-left:0;} +.table tbody tr.success>td{background-color:#dff0d8;} +.table tbody tr.error>td{background-color:#f2dede;} +.table tbody tr.warning>td{background-color:#fcf8e3;} +.table tbody tr.info>td{background-color:#d9edf7;} +.table-hover tbody tr.success:hover>td{background-color:#d0e9c6;} +.table-hover tbody tr.error:hover>td{background-color:#ebcccc;} +.table-hover tbody tr.warning:hover>td{background-color:#faf2cc;} +.table-hover tbody tr.info:hover>td{background-color:#c4e3f3;} +form{margin:0 0 20px;} +fieldset{padding:0;margin:0;border:0;} +legend{display:block;width:100%;padding:0;margin-bottom:20px;font-size:21px;line-height:40px;color:#333333;border:0;border-bottom:1px solid #e5e5e5;}legend small{font-size:15px;color:#999999;} +label,input,button,select,textarea{font-size:14px;font-weight:normal;line-height:20px;} +input,button,select,textarea{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;} +label{display:block;margin-bottom:5px;} +select,textarea,input[type="text"],input[type="password"],input[type="datetime"],input[type="datetime-local"],input[type="date"],input[type="month"],input[type="time"],input[type="week"],input[type="number"],input[type="email"],input[type="url"],input[type="search"],input[type="tel"],input[type="color"],.uneditable-input{display:inline-block;height:20px;padding:4px 6px;margin-bottom:10px;font-size:14px;line-height:20px;color:#555555;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;vertical-align:middle;} +input,textarea,.uneditable-input{width:206px;} +textarea{height:auto;} +textarea,input[type="text"],input[type="password"],input[type="datetime"],input[type="datetime-local"],input[type="date"],input[type="month"],input[type="time"],input[type="week"],input[type="number"],input[type="email"],input[type="url"],input[type="search"],input[type="tel"],input[type="color"],.uneditable-input{background-color:#ffffff;border:1px solid #cccccc;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-webkit-transition:border linear .2s, box-shadow linear .2s;-moz-transition:border linear .2s, box-shadow linear .2s;-o-transition:border linear .2s, box-shadow linear .2s;transition:border linear .2s, box-shadow linear .2s;}textarea:focus,input[type="text"]:focus,input[type="password"]:focus,input[type="datetime"]:focus,input[type="datetime-local"]:focus,input[type="date"]:focus,input[type="month"]:focus,input[type="time"]:focus,input[type="week"]:focus,input[type="number"]:focus,input[type="email"]:focus,input[type="url"]:focus,input[type="search"]:focus,input[type="tel"]:focus,input[type="color"]:focus,.uneditable-input:focus{border-color:rgba(82, 168, 236, 0.8);outline:0;outline:thin dotted \9;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,.075), 0 0 8px rgba(82,168,236,.6);-moz-box-shadow:inset 0 1px 1px rgba(0,0,0,.075), 0 0 8px rgba(82,168,236,.6);box-shadow:inset 0 1px 1px rgba(0,0,0,.075), 0 0 8px rgba(82,168,236,.6);} +input[type="radio"],input[type="checkbox"]{margin:4px 0 0;*margin-top:0;margin-top:1px \9;line-height:normal;} +input[type="file"],input[type="image"],input[type="submit"],input[type="reset"],input[type="button"],input[type="radio"],input[type="checkbox"]{width:auto;} +select,input[type="file"]{height:30px;*margin-top:4px;line-height:30px;} +select{width:220px;border:1px solid #cccccc;background-color:#ffffff;} +select[multiple],select[size]{height:auto;} +select:focus,input[type="file"]:focus,input[type="radio"]:focus,input[type="checkbox"]:focus{outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} +.uneditable-input,.uneditable-textarea{color:#999999;background-color:#fcfcfc;border-color:#cccccc;-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.025);cursor:not-allowed;} +.uneditable-input{overflow:hidden;white-space:nowrap;} +.uneditable-textarea{width:auto;height:auto;} +input:-moz-placeholder,textarea:-moz-placeholder{color:#999999;} +input:-ms-input-placeholder,textarea:-ms-input-placeholder{color:#999999;} +input::-webkit-input-placeholder,textarea::-webkit-input-placeholder{color:#999999;} +.radio,.checkbox{min-height:20px;padding-left:20px;} +.radio input[type="radio"],.checkbox input[type="checkbox"]{float:left;margin-left:-20px;} +.controls>.radio:first-child,.controls>.checkbox:first-child{padding-top:5px;} +.radio.inline,.checkbox.inline{display:inline-block;padding-top:5px;margin-bottom:0;vertical-align:middle;} +.radio.inline+.radio.inline,.checkbox.inline+.checkbox.inline{margin-left:10px;} +.input-mini{width:60px;} +.input-small{width:90px;} +.input-medium{width:150px;} +.input-large{width:210px;} +.input-xlarge{width:270px;} +.input-xxlarge{width:530px;} +input[class*="span"],select[class*="span"],textarea[class*="span"],.uneditable-input[class*="span"],.row-fluid input[class*="span"],.row-fluid select[class*="span"],.row-fluid textarea[class*="span"],.row-fluid .uneditable-input[class*="span"]{float:none;margin-left:0;} +.input-append input[class*="span"],.input-append .uneditable-input[class*="span"],.input-prepend input[class*="span"],.input-prepend .uneditable-input[class*="span"],.row-fluid input[class*="span"],.row-fluid select[class*="span"],.row-fluid textarea[class*="span"],.row-fluid .uneditable-input[class*="span"],.row-fluid .input-prepend [class*="span"],.row-fluid .input-append [class*="span"]{display:inline-block;} +input,textarea,.uneditable-input{margin-left:0;} +.controls-row [class*="span"]+[class*="span"]{margin-left:20px;} +input.span12,textarea.span12,.uneditable-input.span12{width:926px;} +input.span11,textarea.span11,.uneditable-input.span11{width:846px;} +input.span10,textarea.span10,.uneditable-input.span10{width:766px;} +input.span9,textarea.span9,.uneditable-input.span9{width:686px;} +input.span8,textarea.span8,.uneditable-input.span8{width:606px;} +input.span7,textarea.span7,.uneditable-input.span7{width:526px;} +input.span6,textarea.span6,.uneditable-input.span6{width:446px;} +input.span5,textarea.span5,.uneditable-input.span5{width:366px;} +input.span4,textarea.span4,.uneditable-input.span4{width:286px;} +input.span3,textarea.span3,.uneditable-input.span3{width:206px;} +input.span2,textarea.span2,.uneditable-input.span2{width:126px;} +input.span1,textarea.span1,.uneditable-input.span1{width:46px;} +.controls-row{*zoom:1;}.controls-row:before,.controls-row:after{display:table;content:"";line-height:0;} +.controls-row:after{clear:both;} +.controls-row [class*="span"],.row-fluid .controls-row [class*="span"]{float:left;} +.controls-row .checkbox[class*="span"],.controls-row .radio[class*="span"]{padding-top:5px;} +input[disabled],select[disabled],textarea[disabled],input[readonly],select[readonly],textarea[readonly]{cursor:not-allowed;background-color:#eeeeee;} +input[type="radio"][disabled],input[type="checkbox"][disabled],input[type="radio"][readonly],input[type="checkbox"][readonly]{background-color:transparent;} +.control-group.warning .control-label,.control-group.warning .help-block,.control-group.warning .help-inline{color:#c09853;} +.control-group.warning .checkbox,.control-group.warning .radio,.control-group.warning input,.control-group.warning select,.control-group.warning textarea{color:#c09853;} +.control-group.warning input,.control-group.warning select,.control-group.warning textarea{border-color:#c09853;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);}.control-group.warning input:focus,.control-group.warning select:focus,.control-group.warning textarea:focus{border-color:#a47e3c;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #dbc59e;-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #dbc59e;box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #dbc59e;} +.control-group.warning .input-prepend .add-on,.control-group.warning .input-append .add-on{color:#c09853;background-color:#fcf8e3;border-color:#c09853;} +.control-group.error .control-label,.control-group.error .help-block,.control-group.error .help-inline{color:#b94a48;} +.control-group.error .checkbox,.control-group.error .radio,.control-group.error input,.control-group.error select,.control-group.error textarea{color:#b94a48;} +.control-group.error input,.control-group.error select,.control-group.error textarea{border-color:#b94a48;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);}.control-group.error input:focus,.control-group.error select:focus,.control-group.error textarea:focus{border-color:#953b39;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #d59392;-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #d59392;box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #d59392;} +.control-group.error .input-prepend .add-on,.control-group.error .input-append .add-on{color:#b94a48;background-color:#f2dede;border-color:#b94a48;} +.control-group.success .control-label,.control-group.success .help-block,.control-group.success .help-inline{color:#468847;} +.control-group.success .checkbox,.control-group.success .radio,.control-group.success input,.control-group.success select,.control-group.success textarea{color:#468847;} +.control-group.success input,.control-group.success select,.control-group.success textarea{border-color:#468847;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);}.control-group.success input:focus,.control-group.success select:focus,.control-group.success textarea:focus{border-color:#356635;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #7aba7b;-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #7aba7b;box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #7aba7b;} +.control-group.success .input-prepend .add-on,.control-group.success .input-append .add-on{color:#468847;background-color:#dff0d8;border-color:#468847;} +.control-group.info .control-label,.control-group.info .help-block,.control-group.info .help-inline{color:#3a87ad;} +.control-group.info .checkbox,.control-group.info .radio,.control-group.info input,.control-group.info select,.control-group.info textarea{color:#3a87ad;} +.control-group.info input,.control-group.info select,.control-group.info textarea{border-color:#3a87ad;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075);}.control-group.info input:focus,.control-group.info select:focus,.control-group.info textarea:focus{border-color:#2d6987;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #7ab5d3;-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #7ab5d3;box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.075),0 0 6px #7ab5d3;} +.control-group.info .input-prepend .add-on,.control-group.info .input-append .add-on{color:#3a87ad;background-color:#d9edf7;border-color:#3a87ad;} +input:focus:invalid,textarea:focus:invalid,select:focus:invalid{color:#b94a48;border-color:#ee5f5b;}input:focus:invalid:focus,textarea:focus:invalid:focus,select:focus:invalid:focus{border-color:#e9322d;-webkit-box-shadow:0 0 6px #f8b9b7;-moz-box-shadow:0 0 6px #f8b9b7;box-shadow:0 0 6px #f8b9b7;} +.form-actions{padding:19px 20px 20px;margin-top:20px;margin-bottom:20px;background-color:#f5f5f5;border-top:1px solid #e5e5e5;*zoom:1;}.form-actions:before,.form-actions:after{display:table;content:"";line-height:0;} +.form-actions:after{clear:both;} +.help-block,.help-inline{color:#595959;} +.help-block{display:block;margin-bottom:10px;} +.help-inline{display:inline-block;*display:inline;*zoom:1;vertical-align:middle;padding-left:5px;} +.input-append,.input-prepend{display:inline-block;margin-bottom:10px;vertical-align:middle;font-size:0;white-space:nowrap;}.input-append input,.input-prepend input,.input-append select,.input-prepend select,.input-append .uneditable-input,.input-prepend .uneditable-input,.input-append .dropdown-menu,.input-prepend .dropdown-menu,.input-append .popover,.input-prepend .popover{font-size:14px;} +.input-append input,.input-prepend input,.input-append select,.input-prepend select,.input-append .uneditable-input,.input-prepend .uneditable-input{position:relative;margin-bottom:0;*margin-left:0;vertical-align:top;-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;}.input-append input:focus,.input-prepend input:focus,.input-append select:focus,.input-prepend select:focus,.input-append .uneditable-input:focus,.input-prepend .uneditable-input:focus{z-index:2;} +.input-append .add-on,.input-prepend .add-on{display:inline-block;width:auto;height:20px;min-width:16px;padding:4px 5px;font-size:14px;font-weight:normal;line-height:20px;text-align:center;text-shadow:0 1px 0 #ffffff;background-color:#eeeeee;border:1px solid #ccc;} +.input-append .add-on,.input-prepend .add-on,.input-append .btn,.input-prepend .btn,.input-append .btn-group>.dropdown-toggle,.input-prepend .btn-group>.dropdown-toggle{vertical-align:top;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.input-append .active,.input-prepend .active{background-color:#a9dba9;border-color:#46a546;} +.input-prepend .add-on,.input-prepend .btn{margin-right:-1px;} +.input-prepend .add-on:first-child,.input-prepend .btn:first-child{-webkit-border-radius:4px 0 0 4px;-moz-border-radius:4px 0 0 4px;border-radius:4px 0 0 4px;} +.input-append input,.input-append select,.input-append .uneditable-input{-webkit-border-radius:4px 0 0 4px;-moz-border-radius:4px 0 0 4px;border-radius:4px 0 0 4px;}.input-append input+.btn-group .btn:last-child,.input-append select+.btn-group .btn:last-child,.input-append .uneditable-input+.btn-group .btn:last-child{-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;} +.input-append .add-on,.input-append .btn,.input-append .btn-group{margin-left:-1px;} +.input-append .add-on:last-child,.input-append .btn:last-child,.input-append .btn-group:last-child>.dropdown-toggle{-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;} +.input-prepend.input-append input,.input-prepend.input-append select,.input-prepend.input-append .uneditable-input{-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;}.input-prepend.input-append input+.btn-group .btn,.input-prepend.input-append select+.btn-group .btn,.input-prepend.input-append .uneditable-input+.btn-group .btn{-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;} +.input-prepend.input-append .add-on:first-child,.input-prepend.input-append .btn:first-child{margin-right:-1px;-webkit-border-radius:4px 0 0 4px;-moz-border-radius:4px 0 0 4px;border-radius:4px 0 0 4px;} +.input-prepend.input-append .add-on:last-child,.input-prepend.input-append .btn:last-child{margin-left:-1px;-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;} +.input-prepend.input-append .btn-group:first-child{margin-left:0;} +input.search-query{padding-right:14px;padding-right:4px \9;padding-left:14px;padding-left:4px \9;margin-bottom:0;-webkit-border-radius:15px;-moz-border-radius:15px;border-radius:15px;} +.form-search .input-append .search-query,.form-search .input-prepend .search-query{-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.form-search .input-append .search-query{-webkit-border-radius:14px 0 0 14px;-moz-border-radius:14px 0 0 14px;border-radius:14px 0 0 14px;} +.form-search .input-append .btn{-webkit-border-radius:0 14px 14px 0;-moz-border-radius:0 14px 14px 0;border-radius:0 14px 14px 0;} +.form-search .input-prepend .search-query{-webkit-border-radius:0 14px 14px 0;-moz-border-radius:0 14px 14px 0;border-radius:0 14px 14px 0;} +.form-search .input-prepend .btn{-webkit-border-radius:14px 0 0 14px;-moz-border-radius:14px 0 0 14px;border-radius:14px 0 0 14px;} +.form-search input,.form-inline input,.form-horizontal input,.form-search textarea,.form-inline textarea,.form-horizontal textarea,.form-search select,.form-inline select,.form-horizontal select,.form-search .help-inline,.form-inline .help-inline,.form-horizontal .help-inline,.form-search .uneditable-input,.form-inline .uneditable-input,.form-horizontal .uneditable-input,.form-search .input-prepend,.form-inline .input-prepend,.form-horizontal .input-prepend,.form-search .input-append,.form-inline .input-append,.form-horizontal .input-append{display:inline-block;*display:inline;*zoom:1;margin-bottom:0;vertical-align:middle;} +.form-search .hide,.form-inline .hide,.form-horizontal .hide{display:none;} +.form-search label,.form-inline label,.form-search .btn-group,.form-inline .btn-group{display:inline-block;} +.form-search .input-append,.form-inline .input-append,.form-search .input-prepend,.form-inline .input-prepend{margin-bottom:0;} +.form-search .radio,.form-search .checkbox,.form-inline .radio,.form-inline .checkbox{padding-left:0;margin-bottom:0;vertical-align:middle;} +.form-search .radio input[type="radio"],.form-search .checkbox input[type="checkbox"],.form-inline .radio input[type="radio"],.form-inline .checkbox input[type="checkbox"]{float:left;margin-right:3px;margin-left:0;} +.control-group{margin-bottom:10px;} +legend+.control-group{margin-top:20px;-webkit-margin-top-collapse:separate;} +.form-horizontal .control-group{margin-bottom:20px;*zoom:1;}.form-horizontal .control-group:before,.form-horizontal .control-group:after{display:table;content:"";line-height:0;} +.form-horizontal .control-group:after{clear:both;} +.form-horizontal .control-label{float:left;width:160px;padding-top:5px;text-align:right;} +.form-horizontal .controls{*display:inline-block;*padding-left:20px;margin-left:180px;*margin-left:0;}.form-horizontal .controls:first-child{*padding-left:180px;} +.form-horizontal .help-block{margin-bottom:0;} +.form-horizontal input+.help-block,.form-horizontal select+.help-block,.form-horizontal textarea+.help-block,.form-horizontal .uneditable-input+.help-block,.form-horizontal .input-prepend+.help-block,.form-horizontal .input-append+.help-block{margin-top:10px;} +.form-horizontal .form-actions{padding-left:180px;} +.btn{display:inline-block;*display:inline;*zoom:1;padding:4px 12px;margin-bottom:0;font-size:14px;line-height:20px;text-align:center;vertical-align:middle;cursor:pointer;color:#333333;text-shadow:0 1px 1px rgba(255, 255, 255, 0.75);background-color:#f5f5f5;background-image:-moz-linear-gradient(top, #ffffff, #e6e6e6);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), to(#e6e6e6));background-image:-webkit-linear-gradient(top, #ffffff, #e6e6e6);background-image:-o-linear-gradient(top, #ffffff, #e6e6e6);background-image:linear-gradient(to bottom, #ffffff, #e6e6e6);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffffff', endColorstr='#ffe6e6e6', GradientType=0);border-color:#e6e6e6 #e6e6e6 #bfbfbf;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#e6e6e6;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);border:1px solid #cccccc;*border:0;border-bottom-color:#b3b3b3;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;*margin-left:.3em;-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,.2), 0 1px 2px rgba(0,0,0,.05);-moz-box-shadow:inset 0 1px 0 rgba(255,255,255,.2), 0 1px 2px rgba(0,0,0,.05);box-shadow:inset 0 1px 0 rgba(255,255,255,.2), 0 1px 2px rgba(0,0,0,.05);}.btn:hover,.btn:focus,.btn:active,.btn.active,.btn.disabled,.btn[disabled]{color:#333333;background-color:#e6e6e6;*background-color:#d9d9d9;} +.btn:active,.btn.active{background-color:#cccccc \9;} +.btn:first-child{*margin-left:0;} +.btn:hover,.btn:focus{color:#333333;text-decoration:none;background-position:0 -15px;-webkit-transition:background-position 0.1s linear;-moz-transition:background-position 0.1s linear;-o-transition:background-position 0.1s linear;transition:background-position 0.1s linear;} +.btn:focus{outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;} +.btn.active,.btn:active{background-image:none;outline:0;-webkit-box-shadow:inset 0 2px 4px rgba(0,0,0,.15), 0 1px 2px rgba(0,0,0,.05);-moz-box-shadow:inset 0 2px 4px rgba(0,0,0,.15), 0 1px 2px rgba(0,0,0,.05);box-shadow:inset 0 2px 4px rgba(0,0,0,.15), 0 1px 2px rgba(0,0,0,.05);} +.btn.disabled,.btn[disabled]{cursor:default;background-image:none;opacity:0.65;filter:alpha(opacity=65);-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} +.btn-large{padding:11px 19px;font-size:17.5px;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;} +.btn-large [class^="icon-"],.btn-large [class*=" icon-"]{margin-top:4px;} +.btn-small{padding:2px 10px;font-size:11.9px;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} +.btn-small [class^="icon-"],.btn-small [class*=" icon-"]{margin-top:0;} +.btn-mini [class^="icon-"],.btn-mini [class*=" icon-"]{margin-top:-1px;} +.btn-mini{padding:0 6px;font-size:10.5px;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} +.btn-block{display:block;width:100%;padding-left:0;padding-right:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;} +.btn-block+.btn-block{margin-top:5px;} +input[type="submit"].btn-block,input[type="reset"].btn-block,input[type="button"].btn-block{width:100%;} +.btn-primary.active,.btn-warning.active,.btn-danger.active,.btn-success.active,.btn-info.active,.btn-inverse.active{color:rgba(255, 255, 255, 0.75);} +.btn-primary{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#006dcc;background-image:-moz-linear-gradient(top, #0088cc, #0044cc);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#0088cc), to(#0044cc));background-image:-webkit-linear-gradient(top, #0088cc, #0044cc);background-image:-o-linear-gradient(top, #0088cc, #0044cc);background-image:linear-gradient(to bottom, #0088cc, #0044cc);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff0088cc', endColorstr='#ff0044cc', GradientType=0);border-color:#0044cc #0044cc #002a80;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#0044cc;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-primary:hover,.btn-primary:focus,.btn-primary:active,.btn-primary.active,.btn-primary.disabled,.btn-primary[disabled]{color:#ffffff;background-color:#0044cc;*background-color:#003bb3;} +.btn-primary:active,.btn-primary.active{background-color:#003399 \9;} +.btn-warning{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#faa732;background-image:-moz-linear-gradient(top, #fbb450, #f89406);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#fbb450), to(#f89406));background-image:-webkit-linear-gradient(top, #fbb450, #f89406);background-image:-o-linear-gradient(top, #fbb450, #f89406);background-image:linear-gradient(to bottom, #fbb450, #f89406);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffbb450', endColorstr='#fff89406', GradientType=0);border-color:#f89406 #f89406 #ad6704;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#f89406;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-warning:hover,.btn-warning:focus,.btn-warning:active,.btn-warning.active,.btn-warning.disabled,.btn-warning[disabled]{color:#ffffff;background-color:#f89406;*background-color:#df8505;} +.btn-warning:active,.btn-warning.active{background-color:#c67605 \9;} +.btn-danger{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#da4f49;background-image:-moz-linear-gradient(top, #ee5f5b, #bd362f);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#bd362f));background-image:-webkit-linear-gradient(top, #ee5f5b, #bd362f);background-image:-o-linear-gradient(top, #ee5f5b, #bd362f);background-image:linear-gradient(to bottom, #ee5f5b, #bd362f);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffee5f5b', endColorstr='#ffbd362f', GradientType=0);border-color:#bd362f #bd362f #802420;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#bd362f;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-danger:hover,.btn-danger:focus,.btn-danger:active,.btn-danger.active,.btn-danger.disabled,.btn-danger[disabled]{color:#ffffff;background-color:#bd362f;*background-color:#a9302a;} +.btn-danger:active,.btn-danger.active{background-color:#942a25 \9;} +.btn-success{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#5bb75b;background-image:-moz-linear-gradient(top, #62c462, #51a351);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#51a351));background-image:-webkit-linear-gradient(top, #62c462, #51a351);background-image:-o-linear-gradient(top, #62c462, #51a351);background-image:linear-gradient(to bottom, #62c462, #51a351);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff62c462', endColorstr='#ff51a351', GradientType=0);border-color:#51a351 #51a351 #387038;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#51a351;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-success:hover,.btn-success:focus,.btn-success:active,.btn-success.active,.btn-success.disabled,.btn-success[disabled]{color:#ffffff;background-color:#51a351;*background-color:#499249;} +.btn-success:active,.btn-success.active{background-color:#408140 \9;} +.btn-info{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#49afcd;background-image:-moz-linear-gradient(top, #5bc0de, #2f96b4);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#2f96b4));background-image:-webkit-linear-gradient(top, #5bc0de, #2f96b4);background-image:-o-linear-gradient(top, #5bc0de, #2f96b4);background-image:linear-gradient(to bottom, #5bc0de, #2f96b4);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5bc0de', endColorstr='#ff2f96b4', GradientType=0);border-color:#2f96b4 #2f96b4 #1f6377;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#2f96b4;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-info:hover,.btn-info:focus,.btn-info:active,.btn-info.active,.btn-info.disabled,.btn-info[disabled]{color:#ffffff;background-color:#2f96b4;*background-color:#2a85a0;} +.btn-info:active,.btn-info.active{background-color:#24748c \9;} +.btn-inverse{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#363636;background-image:-moz-linear-gradient(top, #444444, #222222);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#444444), to(#222222));background-image:-webkit-linear-gradient(top, #444444, #222222);background-image:-o-linear-gradient(top, #444444, #222222);background-image:linear-gradient(to bottom, #444444, #222222);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff444444', endColorstr='#ff222222', GradientType=0);border-color:#222222 #222222 #000000;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#222222;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.btn-inverse:hover,.btn-inverse:focus,.btn-inverse:active,.btn-inverse.active,.btn-inverse.disabled,.btn-inverse[disabled]{color:#ffffff;background-color:#222222;*background-color:#151515;} +.btn-inverse:active,.btn-inverse.active{background-color:#080808 \9;} +button.btn,input[type="submit"].btn{*padding-top:3px;*padding-bottom:3px;}button.btn::-moz-focus-inner,input[type="submit"].btn::-moz-focus-inner{padding:0;border:0;} +button.btn.btn-large,input[type="submit"].btn.btn-large{*padding-top:7px;*padding-bottom:7px;} +button.btn.btn-small,input[type="submit"].btn.btn-small{*padding-top:3px;*padding-bottom:3px;} +button.btn.btn-mini,input[type="submit"].btn.btn-mini{*padding-top:1px;*padding-bottom:1px;} +.btn-link,.btn-link:active,.btn-link[disabled]{background-color:transparent;background-image:none;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} +.btn-link{border-color:transparent;cursor:pointer;color:#0088cc;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.btn-link:hover,.btn-link:focus{color:#005580;text-decoration:underline;background-color:transparent;} +.btn-link[disabled]:hover,.btn-link[disabled]:focus{color:#333333;text-decoration:none;} +.btn-group{position:relative;display:inline-block;*display:inline;*zoom:1;font-size:0;vertical-align:middle;white-space:nowrap;*margin-left:.3em;}.btn-group:first-child{*margin-left:0;} +.btn-group+.btn-group{margin-left:5px;} +.btn-toolbar{font-size:0;margin-top:10px;margin-bottom:10px;}.btn-toolbar>.btn+.btn,.btn-toolbar>.btn-group+.btn,.btn-toolbar>.btn+.btn-group{margin-left:5px;} +.btn-group>.btn{position:relative;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.btn-group>.btn+.btn{margin-left:-1px;} +.btn-group>.btn,.btn-group>.dropdown-menu,.btn-group>.popover{font-size:14px;} +.btn-group>.btn-mini{font-size:10.5px;} +.btn-group>.btn-small{font-size:11.9px;} +.btn-group>.btn-large{font-size:17.5px;} +.btn-group>.btn:first-child{margin-left:0;-webkit-border-top-left-radius:4px;-moz-border-radius-topleft:4px;border-top-left-radius:4px;-webkit-border-bottom-left-radius:4px;-moz-border-radius-bottomleft:4px;border-bottom-left-radius:4px;} +.btn-group>.btn:last-child,.btn-group>.dropdown-toggle{-webkit-border-top-right-radius:4px;-moz-border-radius-topright:4px;border-top-right-radius:4px;-webkit-border-bottom-right-radius:4px;-moz-border-radius-bottomright:4px;border-bottom-right-radius:4px;} +.btn-group>.btn.large:first-child{margin-left:0;-webkit-border-top-left-radius:6px;-moz-border-radius-topleft:6px;border-top-left-radius:6px;-webkit-border-bottom-left-radius:6px;-moz-border-radius-bottomleft:6px;border-bottom-left-radius:6px;} +.btn-group>.btn.large:last-child,.btn-group>.large.dropdown-toggle{-webkit-border-top-right-radius:6px;-moz-border-radius-topright:6px;border-top-right-radius:6px;-webkit-border-bottom-right-radius:6px;-moz-border-radius-bottomright:6px;border-bottom-right-radius:6px;} +.btn-group>.btn:hover,.btn-group>.btn:focus,.btn-group>.btn:active,.btn-group>.btn.active{z-index:2;} +.btn-group .dropdown-toggle:active,.btn-group.open .dropdown-toggle{outline:0;} +.btn-group>.btn+.dropdown-toggle{padding-left:8px;padding-right:8px;-webkit-box-shadow:inset 1px 0 0 rgba(255,255,255,.125), inset 0 1px 0 rgba(255,255,255,.2), 0 1px 2px rgba(0,0,0,.05);-moz-box-shadow:inset 1px 0 0 rgba(255,255,255,.125), inset 0 1px 0 rgba(255,255,255,.2), 0 1px 2px rgba(0,0,0,.05);box-shadow:inset 1px 0 0 rgba(255,255,255,.125), inset 0 1px 0 rgba(255,255,255,.2), 0 1px 2px rgba(0,0,0,.05);*padding-top:5px;*padding-bottom:5px;} +.btn-group>.btn-mini+.dropdown-toggle{padding-left:5px;padding-right:5px;*padding-top:2px;*padding-bottom:2px;} +.btn-group>.btn-small+.dropdown-toggle{*padding-top:5px;*padding-bottom:4px;} +.btn-group>.btn-large+.dropdown-toggle{padding-left:12px;padding-right:12px;*padding-top:7px;*padding-bottom:7px;} +.btn-group.open .dropdown-toggle{background-image:none;-webkit-box-shadow:inset 0 2px 4px rgba(0,0,0,.15), 0 1px 2px rgba(0,0,0,.05);-moz-box-shadow:inset 0 2px 4px rgba(0,0,0,.15), 0 1px 2px rgba(0,0,0,.05);box-shadow:inset 0 2px 4px rgba(0,0,0,.15), 0 1px 2px rgba(0,0,0,.05);} +.btn-group.open .btn.dropdown-toggle{background-color:#e6e6e6;} +.btn-group.open .btn-primary.dropdown-toggle{background-color:#0044cc;} +.btn-group.open .btn-warning.dropdown-toggle{background-color:#f89406;} +.btn-group.open .btn-danger.dropdown-toggle{background-color:#bd362f;} +.btn-group.open .btn-success.dropdown-toggle{background-color:#51a351;} +.btn-group.open .btn-info.dropdown-toggle{background-color:#2f96b4;} +.btn-group.open .btn-inverse.dropdown-toggle{background-color:#222222;} +.btn .caret{margin-top:8px;margin-left:0;} +.btn-large .caret{margin-top:6px;} +.btn-large .caret{border-left-width:5px;border-right-width:5px;border-top-width:5px;} +.btn-mini .caret,.btn-small .caret{margin-top:8px;} +.dropup .btn-large .caret{border-bottom-width:5px;} +.btn-primary .caret,.btn-warning .caret,.btn-danger .caret,.btn-info .caret,.btn-success .caret,.btn-inverse .caret{border-top-color:#ffffff;border-bottom-color:#ffffff;} +.btn-group-vertical{display:inline-block;*display:inline;*zoom:1;} +.btn-group-vertical>.btn{display:block;float:none;max-width:100%;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.btn-group-vertical>.btn+.btn{margin-left:0;margin-top:-1px;} +.btn-group-vertical>.btn:first-child{-webkit-border-radius:4px 4px 0 0;-moz-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0;} +.btn-group-vertical>.btn:last-child{-webkit-border-radius:0 0 4px 4px;-moz-border-radius:0 0 4px 4px;border-radius:0 0 4px 4px;} +.btn-group-vertical>.btn-large:first-child{-webkit-border-radius:6px 6px 0 0;-moz-border-radius:6px 6px 0 0;border-radius:6px 6px 0 0;} +.btn-group-vertical>.btn-large:last-child{-webkit-border-radius:0 0 6px 6px;-moz-border-radius:0 0 6px 6px;border-radius:0 0 6px 6px;} +.nav{margin-left:0;margin-bottom:20px;list-style:none;} +.nav>li>a{display:block;} +.nav>li>a:hover,.nav>li>a:focus{text-decoration:none;background-color:#eeeeee;} +.nav>li>a>img{max-width:none;} +.nav>.pull-right{float:right;} +.nav-header{display:block;padding:3px 15px;font-size:11px;font-weight:bold;line-height:20px;color:#999999;text-shadow:0 1px 0 rgba(255, 255, 255, 0.5);text-transform:uppercase;} +.nav li+.nav-header{margin-top:9px;} +.nav-list{padding-left:15px;padding-right:15px;margin-bottom:0;} +.nav-list>li>a,.nav-list .nav-header{margin-left:-15px;margin-right:-15px;text-shadow:0 1px 0 rgba(255, 255, 255, 0.5);} +.nav-list>li>a{padding:3px 15px;} +.nav-list>.active>a,.nav-list>.active>a:hover,.nav-list>.active>a:focus{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.2);background-color:#0088cc;} +.nav-list [class^="icon-"],.nav-list [class*=" icon-"]{margin-right:2px;} +.nav-list .divider{*width:100%;height:1px;margin:9px 1px;*margin:-5px 0 5px;overflow:hidden;background-color:#e5e5e5;border-bottom:1px solid #ffffff;} +.nav-tabs,.nav-pills{*zoom:1;}.nav-tabs:before,.nav-pills:before,.nav-tabs:after,.nav-pills:after{display:table;content:"";line-height:0;} +.nav-tabs:after,.nav-pills:after{clear:both;} +.nav-tabs>li,.nav-pills>li{float:left;} +.nav-tabs>li>a,.nav-pills>li>a{padding-right:12px;padding-left:12px;margin-right:2px;line-height:14px;} +.nav-tabs{border-bottom:1px solid #ddd;} +.nav-tabs>li{margin-bottom:-1px;} +.nav-tabs>li>a{padding-top:8px;padding-bottom:8px;line-height:20px;border:1px solid transparent;-webkit-border-radius:4px 4px 0 0;-moz-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0;}.nav-tabs>li>a:hover,.nav-tabs>li>a:focus{border-color:#eeeeee #eeeeee #dddddd;} +.nav-tabs>.active>a,.nav-tabs>.active>a:hover,.nav-tabs>.active>a:focus{color:#555555;background-color:#ffffff;border:1px solid #ddd;border-bottom-color:transparent;cursor:default;} +.nav-pills>li>a{padding-top:8px;padding-bottom:8px;margin-top:2px;margin-bottom:2px;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} +.nav-pills>.active>a,.nav-pills>.active>a:hover,.nav-pills>.active>a:focus{color:#ffffff;background-color:#0088cc;} +.nav-stacked>li{float:none;} +.nav-stacked>li>a{margin-right:0;} +.nav-tabs.nav-stacked{border-bottom:0;} +.nav-tabs.nav-stacked>li>a{border:1px solid #ddd;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.nav-tabs.nav-stacked>li:first-child>a{-webkit-border-top-right-radius:4px;-moz-border-radius-topright:4px;border-top-right-radius:4px;-webkit-border-top-left-radius:4px;-moz-border-radius-topleft:4px;border-top-left-radius:4px;} +.nav-tabs.nav-stacked>li:last-child>a{-webkit-border-bottom-right-radius:4px;-moz-border-radius-bottomright:4px;border-bottom-right-radius:4px;-webkit-border-bottom-left-radius:4px;-moz-border-radius-bottomleft:4px;border-bottom-left-radius:4px;} +.nav-tabs.nav-stacked>li>a:hover,.nav-tabs.nav-stacked>li>a:focus{border-color:#ddd;z-index:2;} +.nav-pills.nav-stacked>li>a{margin-bottom:3px;} +.nav-pills.nav-stacked>li:last-child>a{margin-bottom:1px;} +.nav-tabs .dropdown-menu{-webkit-border-radius:0 0 6px 6px;-moz-border-radius:0 0 6px 6px;border-radius:0 0 6px 6px;} +.nav-pills .dropdown-menu{-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;} +.nav .dropdown-toggle .caret{border-top-color:#0088cc;border-bottom-color:#0088cc;margin-top:6px;} +.nav .dropdown-toggle:hover .caret,.nav .dropdown-toggle:focus .caret{border-top-color:#005580;border-bottom-color:#005580;} +.nav-tabs .dropdown-toggle .caret{margin-top:8px;} +.nav .active .dropdown-toggle .caret{border-top-color:#fff;border-bottom-color:#fff;} +.nav-tabs .active .dropdown-toggle .caret{border-top-color:#555555;border-bottom-color:#555555;} +.nav>.dropdown.active>a:hover,.nav>.dropdown.active>a:focus{cursor:pointer;} +.nav-tabs .open .dropdown-toggle,.nav-pills .open .dropdown-toggle,.nav>li.dropdown.open.active>a:hover,.nav>li.dropdown.open.active>a:focus{color:#ffffff;background-color:#999999;border-color:#999999;} +.nav li.dropdown.open .caret,.nav li.dropdown.open.active .caret,.nav li.dropdown.open a:hover .caret,.nav li.dropdown.open a:focus .caret{border-top-color:#ffffff;border-bottom-color:#ffffff;opacity:1;filter:alpha(opacity=100);} +.tabs-stacked .open>a:hover,.tabs-stacked .open>a:focus{border-color:#999999;} +.tabbable{*zoom:1;}.tabbable:before,.tabbable:after{display:table;content:"";line-height:0;} +.tabbable:after{clear:both;} +.tab-content{overflow:auto;} +.tabs-below>.nav-tabs,.tabs-right>.nav-tabs,.tabs-left>.nav-tabs{border-bottom:0;} +.tab-content>.tab-pane,.pill-content>.pill-pane{display:none;} +.tab-content>.active,.pill-content>.active{display:block;} +.tabs-below>.nav-tabs{border-top:1px solid #ddd;} +.tabs-below>.nav-tabs>li{margin-top:-1px;margin-bottom:0;} +.tabs-below>.nav-tabs>li>a{-webkit-border-radius:0 0 4px 4px;-moz-border-radius:0 0 4px 4px;border-radius:0 0 4px 4px;}.tabs-below>.nav-tabs>li>a:hover,.tabs-below>.nav-tabs>li>a:focus{border-bottom-color:transparent;border-top-color:#ddd;} +.tabs-below>.nav-tabs>.active>a,.tabs-below>.nav-tabs>.active>a:hover,.tabs-below>.nav-tabs>.active>a:focus{border-color:transparent #ddd #ddd #ddd;} +.tabs-left>.nav-tabs>li,.tabs-right>.nav-tabs>li{float:none;} +.tabs-left>.nav-tabs>li>a,.tabs-right>.nav-tabs>li>a{min-width:74px;margin-right:0;margin-bottom:3px;} +.tabs-left>.nav-tabs{float:left;margin-right:19px;border-right:1px solid #ddd;} +.tabs-left>.nav-tabs>li>a{margin-right:-1px;-webkit-border-radius:4px 0 0 4px;-moz-border-radius:4px 0 0 4px;border-radius:4px 0 0 4px;} +.tabs-left>.nav-tabs>li>a:hover,.tabs-left>.nav-tabs>li>a:focus{border-color:#eeeeee #dddddd #eeeeee #eeeeee;} +.tabs-left>.nav-tabs .active>a,.tabs-left>.nav-tabs .active>a:hover,.tabs-left>.nav-tabs .active>a:focus{border-color:#ddd transparent #ddd #ddd;*border-right-color:#ffffff;} +.tabs-right>.nav-tabs{float:right;margin-left:19px;border-left:1px solid #ddd;} +.tabs-right>.nav-tabs>li>a{margin-left:-1px;-webkit-border-radius:0 4px 4px 0;-moz-border-radius:0 4px 4px 0;border-radius:0 4px 4px 0;} +.tabs-right>.nav-tabs>li>a:hover,.tabs-right>.nav-tabs>li>a:focus{border-color:#eeeeee #eeeeee #eeeeee #dddddd;} +.tabs-right>.nav-tabs .active>a,.tabs-right>.nav-tabs .active>a:hover,.tabs-right>.nav-tabs .active>a:focus{border-color:#ddd #ddd #ddd transparent;*border-left-color:#ffffff;} +.nav>.disabled>a{color:#999999;} +.nav>.disabled>a:hover,.nav>.disabled>a:focus{text-decoration:none;background-color:transparent;cursor:default;} +.navbar{overflow:visible;margin-bottom:20px;*position:relative;*z-index:2;} +.navbar-inner{min-height:40px;padding-left:20px;padding-right:20px;background-color:#fafafa;background-image:-moz-linear-gradient(top, #ffffff, #f2f2f2);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ffffff), to(#f2f2f2));background-image:-webkit-linear-gradient(top, #ffffff, #f2f2f2);background-image:-o-linear-gradient(top, #ffffff, #f2f2f2);background-image:linear-gradient(to bottom, #ffffff, #f2f2f2);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffffff', endColorstr='#fff2f2f2', GradientType=0);border:1px solid #d4d4d4;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:0 1px 4px rgba(0, 0, 0, 0.065);-moz-box-shadow:0 1px 4px rgba(0, 0, 0, 0.065);box-shadow:0 1px 4px rgba(0, 0, 0, 0.065);*zoom:1;}.navbar-inner:before,.navbar-inner:after{display:table;content:"";line-height:0;} +.navbar-inner:after{clear:both;} +.navbar .container{width:auto;} +.nav-collapse.collapse{height:auto;overflow:visible;} +.navbar .brand{float:left;display:block;padding:10px 20px 10px;margin-left:-20px;font-size:20px;font-weight:200;color:#777777;text-shadow:0 1px 0 #ffffff;}.navbar .brand:hover,.navbar .brand:focus{text-decoration:none;} +.navbar-text{margin-bottom:0;line-height:40px;color:#777777;} +.navbar-link{color:#777777;}.navbar-link:hover,.navbar-link:focus{color:#333333;} +.navbar .divider-vertical{height:40px;margin:0 9px;border-left:1px solid #f2f2f2;border-right:1px solid #ffffff;} +.navbar .btn,.navbar .btn-group{margin-top:5px;} +.navbar .btn-group .btn,.navbar .input-prepend .btn,.navbar .input-append .btn,.navbar .input-prepend .btn-group,.navbar .input-append .btn-group{margin-top:0;} +.navbar-form{margin-bottom:0;*zoom:1;}.navbar-form:before,.navbar-form:after{display:table;content:"";line-height:0;} +.navbar-form:after{clear:both;} +.navbar-form input,.navbar-form select,.navbar-form .radio,.navbar-form .checkbox{margin-top:5px;} +.navbar-form input,.navbar-form select,.navbar-form .btn{display:inline-block;margin-bottom:0;} +.navbar-form input[type="image"],.navbar-form input[type="checkbox"],.navbar-form input[type="radio"]{margin-top:3px;} +.navbar-form .input-append,.navbar-form .input-prepend{margin-top:5px;white-space:nowrap;}.navbar-form .input-append input,.navbar-form .input-prepend input{margin-top:0;} +.navbar-search{position:relative;float:left;margin-top:5px;margin-bottom:0;}.navbar-search .search-query{margin-bottom:0;padding:4px 14px;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;font-weight:normal;line-height:1;-webkit-border-radius:15px;-moz-border-radius:15px;border-radius:15px;} +.navbar-static-top{position:static;margin-bottom:0;}.navbar-static-top .navbar-inner{-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.navbar-fixed-top,.navbar-fixed-bottom{position:fixed;right:0;left:0;z-index:1030;margin-bottom:0;} +.navbar-fixed-top .navbar-inner,.navbar-static-top .navbar-inner{border-width:0 0 1px;} +.navbar-fixed-bottom .navbar-inner{border-width:1px 0 0;} +.navbar-fixed-top .navbar-inner,.navbar-fixed-bottom .navbar-inner{padding-left:0;padding-right:0;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;} +.navbar-static-top .container,.navbar-fixed-top .container,.navbar-fixed-bottom .container{width:940px;} +.navbar-fixed-top{top:0;} +.navbar-fixed-top .navbar-inner,.navbar-static-top .navbar-inner{-webkit-box-shadow:0 1px 10px rgba(0,0,0,.1);-moz-box-shadow:0 1px 10px rgba(0,0,0,.1);box-shadow:0 1px 10px rgba(0,0,0,.1);} +.navbar-fixed-bottom{bottom:0;}.navbar-fixed-bottom .navbar-inner{-webkit-box-shadow:0 -1px 10px rgba(0,0,0,.1);-moz-box-shadow:0 -1px 10px rgba(0,0,0,.1);box-shadow:0 -1px 10px rgba(0,0,0,.1);} +.navbar .nav{position:relative;left:0;display:block;float:left;margin:0 10px 0 0;} +.navbar .nav.pull-right{float:right;margin-right:0;} +.navbar .nav>li{float:left;} +.navbar .nav>li>a{float:none;padding:10px 15px 10px;color:#777777;text-decoration:none;text-shadow:0 1px 0 #ffffff;} +.navbar .nav .dropdown-toggle .caret{margin-top:8px;} +.navbar .nav>li>a:focus,.navbar .nav>li>a:hover{background-color:transparent;color:#333333;text-decoration:none;} +.navbar .nav>.active>a,.navbar .nav>.active>a:hover,.navbar .nav>.active>a:focus{color:#555555;text-decoration:none;background-color:#e5e5e5;-webkit-box-shadow:inset 0 3px 8px rgba(0, 0, 0, 0.125);-moz-box-shadow:inset 0 3px 8px rgba(0, 0, 0, 0.125);box-shadow:inset 0 3px 8px rgba(0, 0, 0, 0.125);} +.navbar .btn-navbar{display:none;float:right;padding:7px 10px;margin-left:5px;margin-right:5px;color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#ededed;background-image:-moz-linear-gradient(top, #f2f2f2, #e5e5e5);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#f2f2f2), to(#e5e5e5));background-image:-webkit-linear-gradient(top, #f2f2f2, #e5e5e5);background-image:-o-linear-gradient(top, #f2f2f2, #e5e5e5);background-image:linear-gradient(to bottom, #f2f2f2, #e5e5e5);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff2f2f2', endColorstr='#ffe5e5e5', GradientType=0);border-color:#e5e5e5 #e5e5e5 #bfbfbf;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#e5e5e5;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,.1), 0 1px 0 rgba(255,255,255,.075);-moz-box-shadow:inset 0 1px 0 rgba(255,255,255,.1), 0 1px 0 rgba(255,255,255,.075);box-shadow:inset 0 1px 0 rgba(255,255,255,.1), 0 1px 0 rgba(255,255,255,.075);}.navbar .btn-navbar:hover,.navbar .btn-navbar:focus,.navbar .btn-navbar:active,.navbar .btn-navbar.active,.navbar .btn-navbar.disabled,.navbar .btn-navbar[disabled]{color:#ffffff;background-color:#e5e5e5;*background-color:#d9d9d9;} +.navbar .btn-navbar:active,.navbar .btn-navbar.active{background-color:#cccccc \9;} +.navbar .btn-navbar .icon-bar{display:block;width:18px;height:2px;background-color:#f5f5f5;-webkit-border-radius:1px;-moz-border-radius:1px;border-radius:1px;-webkit-box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);-moz-box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);box-shadow:0 1px 0 rgba(0, 0, 0, 0.25);} +.btn-navbar .icon-bar+.icon-bar{margin-top:3px;} +.navbar .nav>li>.dropdown-menu:before{content:'';display:inline-block;border-left:7px solid transparent;border-right:7px solid transparent;border-bottom:7px solid #ccc;border-bottom-color:rgba(0, 0, 0, 0.2);position:absolute;top:-7px;left:9px;} +.navbar .nav>li>.dropdown-menu:after{content:'';display:inline-block;border-left:6px solid transparent;border-right:6px solid transparent;border-bottom:6px solid #ffffff;position:absolute;top:-6px;left:10px;} +.navbar-fixed-bottom .nav>li>.dropdown-menu:before{border-top:7px solid #ccc;border-top-color:rgba(0, 0, 0, 0.2);border-bottom:0;bottom:-7px;top:auto;} +.navbar-fixed-bottom .nav>li>.dropdown-menu:after{border-top:6px solid #ffffff;border-bottom:0;bottom:-6px;top:auto;} +.navbar .nav li.dropdown>a:hover .caret,.navbar .nav li.dropdown>a:focus .caret{border-top-color:#333333;border-bottom-color:#333333;} +.navbar .nav li.dropdown.open>.dropdown-toggle,.navbar .nav li.dropdown.active>.dropdown-toggle,.navbar .nav li.dropdown.open.active>.dropdown-toggle{background-color:#e5e5e5;color:#555555;} +.navbar .nav li.dropdown>.dropdown-toggle .caret{border-top-color:#777777;border-bottom-color:#777777;} +.navbar .nav li.dropdown.open>.dropdown-toggle .caret,.navbar .nav li.dropdown.active>.dropdown-toggle .caret,.navbar .nav li.dropdown.open.active>.dropdown-toggle .caret{border-top-color:#555555;border-bottom-color:#555555;} +.navbar .pull-right>li>.dropdown-menu,.navbar .nav>li>.dropdown-menu.pull-right{left:auto;right:0;}.navbar .pull-right>li>.dropdown-menu:before,.navbar .nav>li>.dropdown-menu.pull-right:before{left:auto;right:12px;} +.navbar .pull-right>li>.dropdown-menu:after,.navbar .nav>li>.dropdown-menu.pull-right:after{left:auto;right:13px;} +.navbar .pull-right>li>.dropdown-menu .dropdown-menu,.navbar .nav>li>.dropdown-menu.pull-right .dropdown-menu{left:auto;right:100%;margin-left:0;margin-right:-1px;-webkit-border-radius:6px 0 6px 6px;-moz-border-radius:6px 0 6px 6px;border-radius:6px 0 6px 6px;} +.navbar-inverse .navbar-inner{background-color:#1b1b1b;background-image:-moz-linear-gradient(top, #222222, #111111);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#222222), to(#111111));background-image:-webkit-linear-gradient(top, #222222, #111111);background-image:-o-linear-gradient(top, #222222, #111111);background-image:linear-gradient(to bottom, #222222, #111111);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff222222', endColorstr='#ff111111', GradientType=0);border-color:#252525;} +.navbar-inverse .brand,.navbar-inverse .nav>li>a{color:#999999;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);}.navbar-inverse .brand:hover,.navbar-inverse .nav>li>a:hover,.navbar-inverse .brand:focus,.navbar-inverse .nav>li>a:focus{color:#ffffff;} +.navbar-inverse .brand{color:#999999;} +.navbar-inverse .navbar-text{color:#999999;} +.navbar-inverse .nav>li>a:focus,.navbar-inverse .nav>li>a:hover{background-color:transparent;color:#ffffff;} +.navbar-inverse .nav .active>a,.navbar-inverse .nav .active>a:hover,.navbar-inverse .nav .active>a:focus{color:#ffffff;background-color:#111111;} +.navbar-inverse .navbar-link{color:#999999;}.navbar-inverse .navbar-link:hover,.navbar-inverse .navbar-link:focus{color:#ffffff;} +.navbar-inverse .divider-vertical{border-left-color:#111111;border-right-color:#222222;} +.navbar-inverse .nav li.dropdown.open>.dropdown-toggle,.navbar-inverse .nav li.dropdown.active>.dropdown-toggle,.navbar-inverse .nav li.dropdown.open.active>.dropdown-toggle{background-color:#111111;color:#ffffff;} +.navbar-inverse .nav li.dropdown>a:hover .caret,.navbar-inverse .nav li.dropdown>a:focus .caret{border-top-color:#ffffff;border-bottom-color:#ffffff;} +.navbar-inverse .nav li.dropdown>.dropdown-toggle .caret{border-top-color:#999999;border-bottom-color:#999999;} +.navbar-inverse .nav li.dropdown.open>.dropdown-toggle .caret,.navbar-inverse .nav li.dropdown.active>.dropdown-toggle .caret,.navbar-inverse .nav li.dropdown.open.active>.dropdown-toggle .caret{border-top-color:#ffffff;border-bottom-color:#ffffff;} +.navbar-inverse .navbar-search .search-query{color:#ffffff;background-color:#515151;border-color:#111111;-webkit-box-shadow:inset 0 1px 2px rgba(0,0,0,.1), 0 1px 0 rgba(255,255,255,.15);-moz-box-shadow:inset 0 1px 2px rgba(0,0,0,.1), 0 1px 0 rgba(255,255,255,.15);box-shadow:inset 0 1px 2px rgba(0,0,0,.1), 0 1px 0 rgba(255,255,255,.15);-webkit-transition:none;-moz-transition:none;-o-transition:none;transition:none;}.navbar-inverse .navbar-search .search-query:-moz-placeholder{color:#cccccc;} +.navbar-inverse .navbar-search .search-query:-ms-input-placeholder{color:#cccccc;} +.navbar-inverse .navbar-search .search-query::-webkit-input-placeholder{color:#cccccc;} +.navbar-inverse .navbar-search .search-query:focus,.navbar-inverse .navbar-search .search-query.focused{padding:5px 15px;color:#333333;text-shadow:0 1px 0 #ffffff;background-color:#ffffff;border:0;-webkit-box-shadow:0 0 3px rgba(0, 0, 0, 0.15);-moz-box-shadow:0 0 3px rgba(0, 0, 0, 0.15);box-shadow:0 0 3px rgba(0, 0, 0, 0.15);outline:0;} +.navbar-inverse .btn-navbar{color:#ffffff;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#0e0e0e;background-image:-moz-linear-gradient(top, #151515, #040404);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#151515), to(#040404));background-image:-webkit-linear-gradient(top, #151515, #040404);background-image:-o-linear-gradient(top, #151515, #040404);background-image:linear-gradient(to bottom, #151515, #040404);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff151515', endColorstr='#ff040404', GradientType=0);border-color:#040404 #040404 #000000;border-color:rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.1) rgba(0, 0, 0, 0.25);*background-color:#040404;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);}.navbar-inverse .btn-navbar:hover,.navbar-inverse .btn-navbar:focus,.navbar-inverse .btn-navbar:active,.navbar-inverse .btn-navbar.active,.navbar-inverse .btn-navbar.disabled,.navbar-inverse .btn-navbar[disabled]{color:#ffffff;background-color:#040404;*background-color:#000000;} +.navbar-inverse .btn-navbar:active,.navbar-inverse .btn-navbar.active{background-color:#000000 \9;} +.breadcrumb{padding:8px 15px;margin:0 0 20px;list-style:none;background-color:#f5f5f5;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;}.breadcrumb>li{display:inline-block;*display:inline;*zoom:1;text-shadow:0 1px 0 #ffffff;}.breadcrumb>li>.divider{padding:0 5px;color:#ccc;} +.breadcrumb>.active{color:#999999;} +.pagination{margin:20px 0;} +.pagination ul{display:inline-block;*display:inline;*zoom:1;margin-left:0;margin-bottom:0;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);-moz-box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);box-shadow:0 1px 2px rgba(0, 0, 0, 0.05);} +.pagination ul>li{display:inline;} +.pagination ul>li>a,.pagination ul>li>span{float:left;padding:4px 12px;line-height:20px;text-decoration:none;background-color:#ffffff;border:1px solid #dddddd;border-left-width:0;} +.pagination ul>li>a:hover,.pagination ul>li>a:focus,.pagination ul>.active>a,.pagination ul>.active>span{background-color:#f5f5f5;} +.pagination ul>.active>a,.pagination ul>.active>span{color:#999999;cursor:default;} +.pagination ul>.disabled>span,.pagination ul>.disabled>a,.pagination ul>.disabled>a:hover,.pagination ul>.disabled>a:focus{color:#999999;background-color:transparent;cursor:default;} +.pagination ul>li:first-child>a,.pagination ul>li:first-child>span{border-left-width:1px;-webkit-border-top-left-radius:4px;-moz-border-radius-topleft:4px;border-top-left-radius:4px;-webkit-border-bottom-left-radius:4px;-moz-border-radius-bottomleft:4px;border-bottom-left-radius:4px;} +.pagination ul>li:last-child>a,.pagination ul>li:last-child>span{-webkit-border-top-right-radius:4px;-moz-border-radius-topright:4px;border-top-right-radius:4px;-webkit-border-bottom-right-radius:4px;-moz-border-radius-bottomright:4px;border-bottom-right-radius:4px;} +.pagination-centered{text-align:center;} +.pagination-right{text-align:right;} +.pagination-large ul>li>a,.pagination-large ul>li>span{padding:11px 19px;font-size:17.5px;} +.pagination-large ul>li:first-child>a,.pagination-large ul>li:first-child>span{-webkit-border-top-left-radius:6px;-moz-border-radius-topleft:6px;border-top-left-radius:6px;-webkit-border-bottom-left-radius:6px;-moz-border-radius-bottomleft:6px;border-bottom-left-radius:6px;} +.pagination-large ul>li:last-child>a,.pagination-large ul>li:last-child>span{-webkit-border-top-right-radius:6px;-moz-border-radius-topright:6px;border-top-right-radius:6px;-webkit-border-bottom-right-radius:6px;-moz-border-radius-bottomright:6px;border-bottom-right-radius:6px;} +.pagination-mini ul>li:first-child>a,.pagination-small ul>li:first-child>a,.pagination-mini ul>li:first-child>span,.pagination-small ul>li:first-child>span{-webkit-border-top-left-radius:3px;-moz-border-radius-topleft:3px;border-top-left-radius:3px;-webkit-border-bottom-left-radius:3px;-moz-border-radius-bottomleft:3px;border-bottom-left-radius:3px;} +.pagination-mini ul>li:last-child>a,.pagination-small ul>li:last-child>a,.pagination-mini ul>li:last-child>span,.pagination-small ul>li:last-child>span{-webkit-border-top-right-radius:3px;-moz-border-radius-topright:3px;border-top-right-radius:3px;-webkit-border-bottom-right-radius:3px;-moz-border-radius-bottomright:3px;border-bottom-right-radius:3px;} +.pagination-small ul>li>a,.pagination-small ul>li>span{padding:2px 10px;font-size:11.9px;} +.pagination-mini ul>li>a,.pagination-mini ul>li>span{padding:0 6px;font-size:10.5px;} +.pager{margin:20px 0;list-style:none;text-align:center;*zoom:1;}.pager:before,.pager:after{display:table;content:"";line-height:0;} +.pager:after{clear:both;} +.pager li{display:inline;} +.pager li>a,.pager li>span{display:inline-block;padding:5px 14px;background-color:#fff;border:1px solid #ddd;-webkit-border-radius:15px;-moz-border-radius:15px;border-radius:15px;} +.pager li>a:hover,.pager li>a:focus{text-decoration:none;background-color:#f5f5f5;} +.pager .next>a,.pager .next>span{float:right;} +.pager .previous>a,.pager .previous>span{float:left;} +.pager .disabled>a,.pager .disabled>a:hover,.pager .disabled>a:focus,.pager .disabled>span{color:#999999;background-color:#fff;cursor:default;} +.thumbnails{margin-left:-20px;list-style:none;*zoom:1;}.thumbnails:before,.thumbnails:after{display:table;content:"";line-height:0;} +.thumbnails:after{clear:both;} +.row-fluid .thumbnails{margin-left:0;} +.thumbnails>li{float:left;margin-bottom:20px;margin-left:20px;} +.thumbnail{display:block;padding:4px;line-height:20px;border:1px solid #ddd;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:0 1px 3px rgba(0, 0, 0, 0.055);-moz-box-shadow:0 1px 3px rgba(0, 0, 0, 0.055);box-shadow:0 1px 3px rgba(0, 0, 0, 0.055);-webkit-transition:all 0.2s ease-in-out;-moz-transition:all 0.2s ease-in-out;-o-transition:all 0.2s ease-in-out;transition:all 0.2s ease-in-out;} +a.thumbnail:hover,a.thumbnail:focus{border-color:#0088cc;-webkit-box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);-moz-box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);box-shadow:0 1px 4px rgba(0, 105, 214, 0.25);} +.thumbnail>img{display:block;max-width:100%;margin-left:auto;margin-right:auto;} +.thumbnail .caption{padding:9px;color:#555555;} +.alert{padding:8px 35px 8px 14px;margin-bottom:20px;text-shadow:0 1px 0 rgba(255, 255, 255, 0.5);background-color:#fcf8e3;border:1px solid #fbeed5;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} +.alert,.alert h4{color:#c09853;} +.alert h4{margin:0;} +.alert .close{position:relative;top:-2px;right:-21px;line-height:20px;} +.alert-success{background-color:#dff0d8;border-color:#d6e9c6;color:#468847;} +.alert-success h4{color:#468847;} +.alert-danger,.alert-error{background-color:#f2dede;border-color:#eed3d7;color:#b94a48;} +.alert-danger h4,.alert-error h4{color:#b94a48;} +.alert-info{background-color:#d9edf7;border-color:#bce8f1;color:#3a87ad;} +.alert-info h4{color:#3a87ad;} +.alert-block{padding-top:14px;padding-bottom:14px;} +.alert-block>p,.alert-block>ul{margin-bottom:0;} +.alert-block p+p{margin-top:5px;} +@-webkit-keyframes progress-bar-stripes{from{background-position:40px 0;} to{background-position:0 0;}}@-moz-keyframes progress-bar-stripes{from{background-position:40px 0;} to{background-position:0 0;}}@-ms-keyframes progress-bar-stripes{from{background-position:40px 0;} to{background-position:0 0;}}@-o-keyframes progress-bar-stripes{from{background-position:0 0;} to{background-position:40px 0;}}@keyframes progress-bar-stripes{from{background-position:40px 0;} to{background-position:0 0;}}.progress{overflow:hidden;height:20px;margin-bottom:20px;background-color:#f7f7f7;background-image:-moz-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#f5f5f5), to(#f9f9f9));background-image:-webkit-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:-o-linear-gradient(top, #f5f5f5, #f9f9f9);background-image:linear-gradient(to bottom, #f5f5f5, #f9f9f9);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff5f5f5', endColorstr='#fff9f9f9', GradientType=0);-webkit-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);-moz-box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);box-shadow:inset 0 1px 2px rgba(0, 0, 0, 0.1);-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} +.progress .bar{width:0%;height:100%;color:#ffffff;float:left;font-size:12px;text-align:center;text-shadow:0 -1px 0 rgba(0, 0, 0, 0.25);background-color:#0e90d2;background-image:-moz-linear-gradient(top, #149bdf, #0480be);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#149bdf), to(#0480be));background-image:-webkit-linear-gradient(top, #149bdf, #0480be);background-image:-o-linear-gradient(top, #149bdf, #0480be);background-image:linear-gradient(to bottom, #149bdf, #0480be);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff149bdf', endColorstr='#ff0480be', GradientType=0);-webkit-box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);-moz-box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);box-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.15);-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:width 0.6s ease;-moz-transition:width 0.6s ease;-o-transition:width 0.6s ease;transition:width 0.6s ease;} +.progress .bar+.bar{-webkit-box-shadow:inset 1px 0 0 rgba(0,0,0,.15), inset 0 -1px 0 rgba(0,0,0,.15);-moz-box-shadow:inset 1px 0 0 rgba(0,0,0,.15), inset 0 -1px 0 rgba(0,0,0,.15);box-shadow:inset 1px 0 0 rgba(0,0,0,.15), inset 0 -1px 0 rgba(0,0,0,.15);} +.progress-striped .bar{background-color:#149bdf;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);-webkit-background-size:40px 40px;-moz-background-size:40px 40px;-o-background-size:40px 40px;background-size:40px 40px;} +.progress.active .bar{-webkit-animation:progress-bar-stripes 2s linear infinite;-moz-animation:progress-bar-stripes 2s linear infinite;-ms-animation:progress-bar-stripes 2s linear infinite;-o-animation:progress-bar-stripes 2s linear infinite;animation:progress-bar-stripes 2s linear infinite;} +.progress-danger .bar,.progress .bar-danger{background-color:#dd514c;background-image:-moz-linear-gradient(top, #ee5f5b, #c43c35);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#ee5f5b), to(#c43c35));background-image:-webkit-linear-gradient(top, #ee5f5b, #c43c35);background-image:-o-linear-gradient(top, #ee5f5b, #c43c35);background-image:linear-gradient(to bottom, #ee5f5b, #c43c35);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffee5f5b', endColorstr='#ffc43c35', GradientType=0);} +.progress-danger.progress-striped .bar,.progress-striped .bar-danger{background-color:#ee5f5b;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} +.progress-success .bar,.progress .bar-success{background-color:#5eb95e;background-image:-moz-linear-gradient(top, #62c462, #57a957);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#62c462), to(#57a957));background-image:-webkit-linear-gradient(top, #62c462, #57a957);background-image:-o-linear-gradient(top, #62c462, #57a957);background-image:linear-gradient(to bottom, #62c462, #57a957);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff62c462', endColorstr='#ff57a957', GradientType=0);} +.progress-success.progress-striped .bar,.progress-striped .bar-success{background-color:#62c462;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} +.progress-info .bar,.progress .bar-info{background-color:#4bb1cf;background-image:-moz-linear-gradient(top, #5bc0de, #339bb9);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#5bc0de), to(#339bb9));background-image:-webkit-linear-gradient(top, #5bc0de, #339bb9);background-image:-o-linear-gradient(top, #5bc0de, #339bb9);background-image:linear-gradient(to bottom, #5bc0de, #339bb9);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5bc0de', endColorstr='#ff339bb9', GradientType=0);} +.progress-info.progress-striped .bar,.progress-striped .bar-info{background-color:#5bc0de;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} +.progress-warning .bar,.progress .bar-warning{background-color:#faa732;background-image:-moz-linear-gradient(top, #fbb450, #f89406);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#fbb450), to(#f89406));background-image:-webkit-linear-gradient(top, #fbb450, #f89406);background-image:-o-linear-gradient(top, #fbb450, #f89406);background-image:linear-gradient(to bottom, #fbb450, #f89406);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffbb450', endColorstr='#fff89406', GradientType=0);} +.progress-warning.progress-striped .bar,.progress-striped .bar-warning{background-color:#fbb450;background-image:-webkit-gradient(linear, 0 100%, 100% 0, color-stop(0.25, rgba(255, 255, 255, 0.15)), color-stop(0.25, transparent), color-stop(0.5, transparent), color-stop(0.5, rgba(255, 255, 255, 0.15)), color-stop(0.75, rgba(255, 255, 255, 0.15)), color-stop(0.75, transparent), to(transparent));background-image:-webkit-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-moz-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:-o-linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);background-image:linear-gradient(45deg, rgba(255, 255, 255, 0.15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.15) 50%, rgba(255, 255, 255, 0.15) 75%, transparent 75%, transparent);} +.hero-unit{padding:60px;margin-bottom:30px;font-size:18px;font-weight:200;line-height:30px;color:inherit;background-color:#eeeeee;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;}.hero-unit h1{margin-bottom:0;font-size:60px;line-height:1;color:inherit;letter-spacing:-1px;} +.hero-unit li{line-height:30px;} +.media,.media-body{overflow:hidden;*overflow:visible;zoom:1;} +.media,.media .media{margin-top:15px;} +.media:first-child{margin-top:0;} +.media-object{display:block;} +.media-heading{margin:0 0 5px;} +.media>.pull-left{margin-right:10px;} +.media>.pull-right{margin-left:10px;} +.media-list{margin-left:0;list-style:none;} +.tooltip{position:absolute;z-index:1030;display:block;visibility:visible;font-size:11px;line-height:1.4;opacity:0;filter:alpha(opacity=0);}.tooltip.in{opacity:0.8;filter:alpha(opacity=80);} +.tooltip.top{margin-top:-3px;padding:5px 0;} +.tooltip.right{margin-left:3px;padding:0 5px;} +.tooltip.bottom{margin-top:3px;padding:5px 0;} +.tooltip.left{margin-left:-3px;padding:0 5px;} +.tooltip-inner{max-width:200px;padding:8px;color:#ffffff;text-align:center;text-decoration:none;background-color:#000000;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} +.tooltip-arrow{position:absolute;width:0;height:0;border-color:transparent;border-style:solid;} +.tooltip.top .tooltip-arrow{bottom:0;left:50%;margin-left:-5px;border-width:5px 5px 0;border-top-color:#000000;} +.tooltip.right .tooltip-arrow{top:50%;left:0;margin-top:-5px;border-width:5px 5px 5px 0;border-right-color:#000000;} +.tooltip.left .tooltip-arrow{top:50%;right:0;margin-top:-5px;border-width:5px 0 5px 5px;border-left-color:#000000;} +.tooltip.bottom .tooltip-arrow{top:0;left:50%;margin-left:-5px;border-width:0 5px 5px;border-bottom-color:#000000;} +.popover{position:absolute;top:0;left:0;z-index:1010;display:none;max-width:276px;padding:1px;text-align:left;background-color:#ffffff;-webkit-background-clip:padding-box;-moz-background-clip:padding;background-clip:padding-box;border:1px solid #ccc;border:1px solid rgba(0, 0, 0, 0.2);-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;-webkit-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);-moz-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);white-space:normal;}.popover.top{margin-top:-10px;} +.popover.right{margin-left:10px;} +.popover.bottom{margin-top:10px;} +.popover.left{margin-left:-10px;} +.popover-title{margin:0;padding:8px 14px;font-size:14px;font-weight:normal;line-height:18px;background-color:#f7f7f7;border-bottom:1px solid #ebebeb;-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0;}.popover-title:empty{display:none;} +.popover-content{padding:9px 14px;} +.popover .arrow,.popover .arrow:after{position:absolute;display:block;width:0;height:0;border-color:transparent;border-style:solid;} +.popover .arrow{border-width:11px;} +.popover .arrow:after{border-width:10px;content:"";} +.popover.top .arrow{left:50%;margin-left:-11px;border-bottom-width:0;border-top-color:#999;border-top-color:rgba(0, 0, 0, 0.25);bottom:-11px;}.popover.top .arrow:after{bottom:1px;margin-left:-10px;border-bottom-width:0;border-top-color:#ffffff;} +.popover.right .arrow{top:50%;left:-11px;margin-top:-11px;border-left-width:0;border-right-color:#999;border-right-color:rgba(0, 0, 0, 0.25);}.popover.right .arrow:after{left:1px;bottom:-10px;border-left-width:0;border-right-color:#ffffff;} +.popover.bottom .arrow{left:50%;margin-left:-11px;border-top-width:0;border-bottom-color:#999;border-bottom-color:rgba(0, 0, 0, 0.25);top:-11px;}.popover.bottom .arrow:after{top:1px;margin-left:-10px;border-top-width:0;border-bottom-color:#ffffff;} +.popover.left .arrow{top:50%;right:-11px;margin-top:-11px;border-right-width:0;border-left-color:#999;border-left-color:rgba(0, 0, 0, 0.25);}.popover.left .arrow:after{right:1px;border-right-width:0;border-left-color:#ffffff;bottom:-10px;} +.modal-backdrop{position:fixed;top:0;right:0;bottom:0;left:0;z-index:1040;background-color:#000000;}.modal-backdrop.fade{opacity:0;} +.modal-backdrop,.modal-backdrop.fade.in{opacity:0.8;filter:alpha(opacity=80);} +.modal{position:fixed;top:10%;left:50%;z-index:1050;width:560px;margin-left:-280px;background-color:#ffffff;border:1px solid #999;border:1px solid rgba(0, 0, 0, 0.3);*border:1px solid #999;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;-webkit-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-moz-box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);box-shadow:0 3px 7px rgba(0, 0, 0, 0.3);-webkit-background-clip:padding-box;-moz-background-clip:padding-box;background-clip:padding-box;outline:none;}.modal.fade{-webkit-transition:opacity .3s linear, top .3s ease-out;-moz-transition:opacity .3s linear, top .3s ease-out;-o-transition:opacity .3s linear, top .3s ease-out;transition:opacity .3s linear, top .3s ease-out;top:-25%;} +.modal.fade.in{top:10%;} +.modal-header{padding:9px 15px;border-bottom:1px solid #eee;}.modal-header .close{margin-top:2px;} +.modal-header h3{margin:0;line-height:30px;} +.modal-body{position:relative;overflow-y:auto;max-height:400px;padding:15px;} +.modal-form{margin-bottom:0;} +.modal-footer{padding:14px 15px 15px;margin-bottom:0;text-align:right;background-color:#f5f5f5;border-top:1px solid #ddd;-webkit-border-radius:0 0 6px 6px;-moz-border-radius:0 0 6px 6px;border-radius:0 0 6px 6px;-webkit-box-shadow:inset 0 1px 0 #ffffff;-moz-box-shadow:inset 0 1px 0 #ffffff;box-shadow:inset 0 1px 0 #ffffff;*zoom:1;}.modal-footer:before,.modal-footer:after{display:table;content:"";line-height:0;} +.modal-footer:after{clear:both;} +.modal-footer .btn+.btn{margin-left:5px;margin-bottom:0;} +.modal-footer .btn-group .btn+.btn{margin-left:-1px;} +.modal-footer .btn-block+.btn-block{margin-left:0;} +.dropup,.dropdown{position:relative;} +.dropdown-toggle{*margin-bottom:-3px;} +.dropdown-toggle:active,.open .dropdown-toggle{outline:0;} +.caret{display:inline-block;width:0;height:0;vertical-align:top;border-top:4px solid #000000;border-right:4px solid transparent;border-left:4px solid transparent;content:"";} +.dropdown .caret{margin-top:8px;margin-left:2px;} +.dropdown-menu{position:absolute;top:100%;left:0;z-index:1000;display:none;float:left;min-width:160px;padding:5px 0;margin:2px 0 0;list-style:none;background-color:#ffffff;border:1px solid #ccc;border:1px solid rgba(0, 0, 0, 0.2);*border-right-width:2px;*border-bottom-width:2px;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;-webkit-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);-moz-box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);box-shadow:0 5px 10px rgba(0, 0, 0, 0.2);-webkit-background-clip:padding-box;-moz-background-clip:padding;background-clip:padding-box;}.dropdown-menu.pull-right{right:0;left:auto;} +.dropdown-menu .divider{*width:100%;height:1px;margin:9px 1px;*margin:-5px 0 5px;overflow:hidden;background-color:#e5e5e5;border-bottom:1px solid #ffffff;} +.dropdown-menu>li>a{display:block;padding:3px 20px;clear:both;font-weight:normal;line-height:20px;color:#333333;white-space:nowrap;} +.dropdown-menu>li>a:hover,.dropdown-menu>li>a:focus,.dropdown-submenu:hover>a,.dropdown-submenu:focus>a{text-decoration:none;color:#ffffff;background-color:#0081c2;background-image:-moz-linear-gradient(top, #0088cc, #0077b3);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#0088cc), to(#0077b3));background-image:-webkit-linear-gradient(top, #0088cc, #0077b3);background-image:-o-linear-gradient(top, #0088cc, #0077b3);background-image:linear-gradient(to bottom, #0088cc, #0077b3);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff0088cc', endColorstr='#ff0077b3', GradientType=0);} +.dropdown-menu>.active>a,.dropdown-menu>.active>a:hover,.dropdown-menu>.active>a:focus{color:#ffffff;text-decoration:none;outline:0;background-color:#0081c2;background-image:-moz-linear-gradient(top, #0088cc, #0077b3);background-image:-webkit-gradient(linear, 0 0, 0 100%, from(#0088cc), to(#0077b3));background-image:-webkit-linear-gradient(top, #0088cc, #0077b3);background-image:-o-linear-gradient(top, #0088cc, #0077b3);background-image:linear-gradient(to bottom, #0088cc, #0077b3);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff0088cc', endColorstr='#ff0077b3', GradientType=0);} +.dropdown-menu>.disabled>a,.dropdown-menu>.disabled>a:hover,.dropdown-menu>.disabled>a:focus{color:#999999;} +.dropdown-menu>.disabled>a:hover,.dropdown-menu>.disabled>a:focus{text-decoration:none;background-color:transparent;background-image:none;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);cursor:default;} +.open{*z-index:1000;}.open>.dropdown-menu{display:block;} +.dropdown-backdrop{position:fixed;left:0;right:0;bottom:0;top:0;z-index:990;} +.pull-right>.dropdown-menu{right:0;left:auto;} +.dropup .caret,.navbar-fixed-bottom .dropdown .caret{border-top:0;border-bottom:4px solid #000000;content:"";} +.dropup .dropdown-menu,.navbar-fixed-bottom .dropdown .dropdown-menu{top:auto;bottom:100%;margin-bottom:1px;} +.dropdown-submenu{position:relative;} +.dropdown-submenu>.dropdown-menu{top:0;left:100%;margin-top:-6px;margin-left:-1px;-webkit-border-radius:0 6px 6px 6px;-moz-border-radius:0 6px 6px 6px;border-radius:0 6px 6px 6px;} +.dropdown-submenu:hover>.dropdown-menu{display:block;} +.dropup .dropdown-submenu>.dropdown-menu{top:auto;bottom:0;margin-top:0;margin-bottom:-2px;-webkit-border-radius:5px 5px 5px 0;-moz-border-radius:5px 5px 5px 0;border-radius:5px 5px 5px 0;} +.dropdown-submenu>a:after{display:block;content:" ";float:right;width:0;height:0;border-color:transparent;border-style:solid;border-width:5px 0 5px 5px;border-left-color:#cccccc;margin-top:5px;margin-right:-10px;} +.dropdown-submenu:hover>a:after{border-left-color:#ffffff;} +.dropdown-submenu.pull-left{float:none;}.dropdown-submenu.pull-left>.dropdown-menu{left:-100%;margin-left:10px;-webkit-border-radius:6px 0 6px 6px;-moz-border-radius:6px 0 6px 6px;border-radius:6px 0 6px 6px;} +.dropdown .dropdown-menu .nav-header{padding-left:20px;padding-right:20px;} +.typeahead{z-index:1051;margin-top:2px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} +.accordion{margin-bottom:20px;} +.accordion-group{margin-bottom:2px;border:1px solid #e5e5e5;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} +.accordion-heading{border-bottom:0;} +.accordion-heading .accordion-toggle{display:block;padding:8px 15px;} +.accordion-toggle{cursor:pointer;} +.accordion-inner{padding:9px 15px;border-top:1px solid #e5e5e5;} +.carousel{position:relative;margin-bottom:20px;line-height:1;} +.carousel-inner{overflow:hidden;width:100%;position:relative;} +.carousel-inner>.item{display:none;position:relative;-webkit-transition:0.6s ease-in-out left;-moz-transition:0.6s ease-in-out left;-o-transition:0.6s ease-in-out left;transition:0.6s ease-in-out left;}.carousel-inner>.item>img,.carousel-inner>.item>a>img{display:block;line-height:1;} +.carousel-inner>.active,.carousel-inner>.next,.carousel-inner>.prev{display:block;} +.carousel-inner>.active{left:0;} +.carousel-inner>.next,.carousel-inner>.prev{position:absolute;top:0;width:100%;} +.carousel-inner>.next{left:100%;} +.carousel-inner>.prev{left:-100%;} +.carousel-inner>.next.left,.carousel-inner>.prev.right{left:0;} +.carousel-inner>.active.left{left:-100%;} +.carousel-inner>.active.right{left:100%;} +.carousel-control{position:absolute;top:40%;left:15px;width:40px;height:40px;margin-top:-20px;font-size:60px;font-weight:100;line-height:30px;color:#ffffff;text-align:center;background:#222222;border:3px solid #ffffff;-webkit-border-radius:23px;-moz-border-radius:23px;border-radius:23px;opacity:0.5;filter:alpha(opacity=50);}.carousel-control.right{left:auto;right:15px;} +.carousel-control:hover,.carousel-control:focus{color:#ffffff;text-decoration:none;opacity:0.9;filter:alpha(opacity=90);} +.carousel-indicators{position:absolute;top:15px;right:15px;z-index:5;margin:0;list-style:none;}.carousel-indicators li{display:block;float:left;width:10px;height:10px;margin-left:5px;text-indent:-999px;background-color:#ccc;background-color:rgba(255, 255, 255, 0.25);border-radius:5px;} +.carousel-indicators .active{background-color:#fff;} +.carousel-caption{position:absolute;left:0;right:0;bottom:0;padding:15px;background:#333333;background:rgba(0, 0, 0, 0.75);} +.carousel-caption h4,.carousel-caption p{color:#ffffff;line-height:20px;} +.carousel-caption h4{margin:0 0 5px;} +.carousel-caption p{margin-bottom:0;} +.well{min-height:20px;padding:19px;margin-bottom:20px;background-color:#f5f5f5;border:1px solid #e3e3e3;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);-moz-box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);box-shadow:inset 0 1px 1px rgba(0, 0, 0, 0.05);}.well blockquote{border-color:#ddd;border-color:rgba(0, 0, 0, 0.15);} +.well-large{padding:24px;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;} +.well-small{padding:9px;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} +.close{float:right;font-size:20px;font-weight:bold;line-height:20px;color:#000000;text-shadow:0 1px 0 #ffffff;opacity:0.2;filter:alpha(opacity=20);}.close:hover,.close:focus{color:#000000;text-decoration:none;cursor:pointer;opacity:0.4;filter:alpha(opacity=40);} +button.close{padding:0;cursor:pointer;background:transparent;border:0;-webkit-appearance:none;} +.pull-right{float:right;} +.pull-left{float:left;} +.hide{display:none;} +.show{display:block;} +.invisible{visibility:hidden;} +.affix{position:fixed;} +.fade{opacity:0;-webkit-transition:opacity 0.15s linear;-moz-transition:opacity 0.15s linear;-o-transition:opacity 0.15s linear;transition:opacity 0.15s linear;}.fade.in{opacity:1;} +.collapse{position:relative;height:0;overflow:hidden;-webkit-transition:height 0.35s ease;-moz-transition:height 0.35s ease;-o-transition:height 0.35s ease;transition:height 0.35s ease;}.collapse.in{height:auto;} +@-ms-viewport{width:device-width;}.hidden{display:none;visibility:hidden;} +.visible-phone{display:none !important;} +.visible-tablet{display:none !important;} +.hidden-desktop{display:none !important;} +.visible-desktop{display:inherit !important;} +@media (min-width:768px) and (max-width:979px){.hidden-desktop{display:inherit !important;} .visible-desktop{display:none !important ;} .visible-tablet{display:inherit !important;} .hidden-tablet{display:none !important;}}@media (max-width:767px){.hidden-desktop{display:inherit !important;} .visible-desktop{display:none !important;} .visible-phone{display:inherit !important;} .hidden-phone{display:none !important;}}.visible-print{display:none !important;} +@media print{.visible-print{display:inherit !important;} .hidden-print{display:none !important;}}@media (max-width:767px){body{padding-left:20px;padding-right:20px;} .navbar-fixed-top,.navbar-fixed-bottom,.navbar-static-top{margin-left:-20px;margin-right:-20px;} .container-fluid{padding:0;} .dl-horizontal dt{float:none;clear:none;width:auto;text-align:left;} .dl-horizontal dd{margin-left:0;} .container{width:auto;} .row-fluid{width:100%;} .row,.thumbnails{margin-left:0;} .thumbnails>li{float:none;margin-left:0;} [class*="span"],.uneditable-input[class*="span"],.row-fluid [class*="span"]{float:none;display:block;width:100%;margin-left:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;} .span12,.row-fluid .span12{width:100%;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;} .row-fluid [class*="offset"]:first-child{margin-left:0;} .input-large,.input-xlarge,.input-xxlarge,input[class*="span"],select[class*="span"],textarea[class*="span"],.uneditable-input{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;} .input-prepend input,.input-append input,.input-prepend input[class*="span"],.input-append input[class*="span"]{display:inline-block;width:auto;} .controls-row [class*="span"]+[class*="span"]{margin-left:0;} .modal{position:fixed;top:20px;left:20px;right:20px;width:auto;margin:0;}.modal.fade{top:-100px;} .modal.fade.in{top:20px;}}@media (max-width:480px){.nav-collapse{-webkit-transform:translate3d(0, 0, 0);} .page-header h1 small{display:block;line-height:20px;} input[type="checkbox"],input[type="radio"]{border:1px solid #ccc;} .form-horizontal .control-label{float:none;width:auto;padding-top:0;text-align:left;} .form-horizontal .controls{margin-left:0;} .form-horizontal .control-list{padding-top:0;} .form-horizontal .form-actions{padding-left:10px;padding-right:10px;} .media .pull-left,.media .pull-right{float:none;display:block;margin-bottom:10px;} .media-object{margin-right:0;margin-left:0;} .modal{top:10px;left:10px;right:10px;} .modal-header .close{padding:10px;margin:-10px;} .carousel-caption{position:static;}}@media (min-width:768px) and (max-width:979px){.row{margin-left:-20px;*zoom:1;}.row:before,.row:after{display:table;content:"";line-height:0;} .row:after{clear:both;} [class*="span"]{float:left;min-height:1px;margin-left:20px;} .container,.navbar-static-top .container,.navbar-fixed-top .container,.navbar-fixed-bottom .container{width:724px;} .span12{width:724px;} .span11{width:662px;} .span10{width:600px;} .span9{width:538px;} .span8{width:476px;} .span7{width:414px;} .span6{width:352px;} .span5{width:290px;} .span4{width:228px;} .span3{width:166px;} .span2{width:104px;} .span1{width:42px;} .offset12{margin-left:764px;} .offset11{margin-left:702px;} .offset10{margin-left:640px;} .offset9{margin-left:578px;} .offset8{margin-left:516px;} .offset7{margin-left:454px;} .offset6{margin-left:392px;} .offset5{margin-left:330px;} .offset4{margin-left:268px;} .offset3{margin-left:206px;} .offset2{margin-left:144px;} .offset1{margin-left:82px;} .row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";line-height:0;} .row-fluid:after{clear:both;} .row-fluid [class*="span"]{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;float:left;margin-left:2.7624309392265194%;*margin-left:2.709239449864817%;} .row-fluid [class*="span"]:first-child{margin-left:0;} .row-fluid .controls-row [class*="span"]+[class*="span"]{margin-left:2.7624309392265194%;} .row-fluid .span12{width:100%;*width:99.94680851063829%;} .row-fluid .span11{width:91.43646408839778%;*width:91.38327259903608%;} .row-fluid .span10{width:82.87292817679558%;*width:82.81973668743387%;} .row-fluid .span9{width:74.30939226519337%;*width:74.25620077583166%;} .row-fluid .span8{width:65.74585635359117%;*width:65.69266486422946%;} .row-fluid .span7{width:57.18232044198895%;*width:57.12912895262725%;} .row-fluid .span6{width:48.61878453038674%;*width:48.56559304102504%;} .row-fluid .span5{width:40.05524861878453%;*width:40.00205712942283%;} .row-fluid .span4{width:31.491712707182323%;*width:31.43852121782062%;} .row-fluid .span3{width:22.92817679558011%;*width:22.87498530621841%;} .row-fluid .span2{width:14.3646408839779%;*width:14.311449394616199%;} .row-fluid .span1{width:5.801104972375691%;*width:5.747913483013988%;} .row-fluid .offset12{margin-left:105.52486187845304%;*margin-left:105.41847889972962%;} .row-fluid .offset12:first-child{margin-left:102.76243093922652%;*margin-left:102.6560479605031%;} .row-fluid .offset11{margin-left:96.96132596685082%;*margin-left:96.8549429881274%;} .row-fluid .offset11:first-child{margin-left:94.1988950276243%;*margin-left:94.09251204890089%;} .row-fluid .offset10{margin-left:88.39779005524862%;*margin-left:88.2914070765252%;} .row-fluid .offset10:first-child{margin-left:85.6353591160221%;*margin-left:85.52897613729868%;} .row-fluid .offset9{margin-left:79.8342541436464%;*margin-left:79.72787116492299%;} .row-fluid .offset9:first-child{margin-left:77.07182320441989%;*margin-left:76.96544022569647%;} .row-fluid .offset8{margin-left:71.2707182320442%;*margin-left:71.16433525332079%;} .row-fluid .offset8:first-child{margin-left:68.50828729281768%;*margin-left:68.40190431409427%;} .row-fluid .offset7{margin-left:62.70718232044199%;*margin-left:62.600799341718584%;} .row-fluid .offset7:first-child{margin-left:59.94475138121547%;*margin-left:59.838368402492065%;} .row-fluid .offset6{margin-left:54.14364640883978%;*margin-left:54.037263430116376%;} .row-fluid .offset6:first-child{margin-left:51.38121546961326%;*margin-left:51.27483249088986%;} .row-fluid .offset5{margin-left:45.58011049723757%;*margin-left:45.47372751851417%;} .row-fluid .offset5:first-child{margin-left:42.81767955801105%;*margin-left:42.71129657928765%;} .row-fluid .offset4{margin-left:37.01657458563536%;*margin-left:36.91019160691196%;} .row-fluid .offset4:first-child{margin-left:34.25414364640884%;*margin-left:34.14776066768544%;} .row-fluid .offset3{margin-left:28.45303867403315%;*margin-left:28.346655695309746%;} .row-fluid .offset3:first-child{margin-left:25.69060773480663%;*margin-left:25.584224756083227%;} .row-fluid .offset2{margin-left:19.88950276243094%;*margin-left:19.783119783707537%;} .row-fluid .offset2:first-child{margin-left:17.12707182320442%;*margin-left:17.02068884448102%;} .row-fluid .offset1{margin-left:11.32596685082873%;*margin-left:11.219583872105325%;} .row-fluid .offset1:first-child{margin-left:8.56353591160221%;*margin-left:8.457152932878806%;} input,textarea,.uneditable-input{margin-left:0;} .controls-row [class*="span"]+[class*="span"]{margin-left:20px;} input.span12,textarea.span12,.uneditable-input.span12{width:710px;} input.span11,textarea.span11,.uneditable-input.span11{width:648px;} input.span10,textarea.span10,.uneditable-input.span10{width:586px;} input.span9,textarea.span9,.uneditable-input.span9{width:524px;} input.span8,textarea.span8,.uneditable-input.span8{width:462px;} input.span7,textarea.span7,.uneditable-input.span7{width:400px;} input.span6,textarea.span6,.uneditable-input.span6{width:338px;} input.span5,textarea.span5,.uneditable-input.span5{width:276px;} input.span4,textarea.span4,.uneditable-input.span4{width:214px;} input.span3,textarea.span3,.uneditable-input.span3{width:152px;} input.span2,textarea.span2,.uneditable-input.span2{width:90px;} input.span1,textarea.span1,.uneditable-input.span1{width:28px;}}@media (min-width:1200px){.row{margin-left:-30px;*zoom:1;}.row:before,.row:after{display:table;content:"";line-height:0;} .row:after{clear:both;} [class*="span"]{float:left;min-height:1px;margin-left:30px;} .container,.navbar-static-top .container,.navbar-fixed-top .container,.navbar-fixed-bottom .container{width:1170px;} .span12{width:1170px;} .span11{width:1070px;} .span10{width:970px;} .span9{width:870px;} .span8{width:770px;} .span7{width:670px;} .span6{width:570px;} .span5{width:470px;} .span4{width:370px;} .span3{width:270px;} .span2{width:170px;} .span1{width:70px;} .offset12{margin-left:1230px;} .offset11{margin-left:1130px;} .offset10{margin-left:1030px;} .offset9{margin-left:930px;} .offset8{margin-left:830px;} .offset7{margin-left:730px;} .offset6{margin-left:630px;} .offset5{margin-left:530px;} .offset4{margin-left:430px;} .offset3{margin-left:330px;} .offset2{margin-left:230px;} .offset1{margin-left:130px;} .row-fluid{width:100%;*zoom:1;}.row-fluid:before,.row-fluid:after{display:table;content:"";line-height:0;} .row-fluid:after{clear:both;} .row-fluid [class*="span"]{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;float:left;margin-left:2.564102564102564%;*margin-left:2.5109110747408616%;} .row-fluid [class*="span"]:first-child{margin-left:0;} .row-fluid .controls-row [class*="span"]+[class*="span"]{margin-left:2.564102564102564%;} .row-fluid .span12{width:100%;*width:99.94680851063829%;} .row-fluid .span11{width:91.45299145299145%;*width:91.39979996362975%;} .row-fluid .span10{width:82.90598290598291%;*width:82.8527914166212%;} .row-fluid .span9{width:74.35897435897436%;*width:74.30578286961266%;} .row-fluid .span8{width:65.81196581196582%;*width:65.75877432260411%;} .row-fluid .span7{width:57.26495726495726%;*width:57.21176577559556%;} .row-fluid .span6{width:48.717948717948715%;*width:48.664757228587014%;} .row-fluid .span5{width:40.17094017094017%;*width:40.11774868157847%;} .row-fluid .span4{width:31.623931623931625%;*width:31.570740134569924%;} .row-fluid .span3{width:23.076923076923077%;*width:23.023731587561375%;} .row-fluid .span2{width:14.52991452991453%;*width:14.476723040552828%;} .row-fluid .span1{width:5.982905982905983%;*width:5.929714493544281%;} .row-fluid .offset12{margin-left:105.12820512820512%;*margin-left:105.02182214948171%;} .row-fluid .offset12:first-child{margin-left:102.56410256410257%;*margin-left:102.45771958537915%;} .row-fluid .offset11{margin-left:96.58119658119658%;*margin-left:96.47481360247316%;} .row-fluid .offset11:first-child{margin-left:94.01709401709402%;*margin-left:93.91071103837061%;} .row-fluid .offset10{margin-left:88.03418803418803%;*margin-left:87.92780505546462%;} .row-fluid .offset10:first-child{margin-left:85.47008547008548%;*margin-left:85.36370249136206%;} .row-fluid .offset9{margin-left:79.48717948717949%;*margin-left:79.38079650845607%;} .row-fluid .offset9:first-child{margin-left:76.92307692307693%;*margin-left:76.81669394435352%;} .row-fluid .offset8{margin-left:70.94017094017094%;*margin-left:70.83378796144753%;} .row-fluid .offset8:first-child{margin-left:68.37606837606839%;*margin-left:68.26968539734497%;} .row-fluid .offset7{margin-left:62.393162393162385%;*margin-left:62.28677941443899%;} .row-fluid .offset7:first-child{margin-left:59.82905982905982%;*margin-left:59.72267685033642%;} .row-fluid .offset6{margin-left:53.84615384615384%;*margin-left:53.739770867430444%;} .row-fluid .offset6:first-child{margin-left:51.28205128205128%;*margin-left:51.175668303327875%;} .row-fluid .offset5{margin-left:45.299145299145295%;*margin-left:45.1927623204219%;} .row-fluid .offset5:first-child{margin-left:42.73504273504273%;*margin-left:42.62865975631933%;} .row-fluid .offset4{margin-left:36.75213675213675%;*margin-left:36.645753773413354%;} .row-fluid .offset4:first-child{margin-left:34.18803418803419%;*margin-left:34.081651209310785%;} .row-fluid .offset3{margin-left:28.205128205128204%;*margin-left:28.0987452264048%;} .row-fluid .offset3:first-child{margin-left:25.641025641025642%;*margin-left:25.53464266230224%;} .row-fluid .offset2{margin-left:19.65811965811966%;*margin-left:19.551736679396257%;} .row-fluid .offset2:first-child{margin-left:17.094017094017094%;*margin-left:16.98763411529369%;} .row-fluid .offset1{margin-left:11.11111111111111%;*margin-left:11.004728132387708%;} .row-fluid .offset1:first-child{margin-left:8.547008547008547%;*margin-left:8.440625568285142%;} input,textarea,.uneditable-input{margin-left:0;} .controls-row [class*="span"]+[class*="span"]{margin-left:30px;} input.span12,textarea.span12,.uneditable-input.span12{width:1156px;} input.span11,textarea.span11,.uneditable-input.span11{width:1056px;} input.span10,textarea.span10,.uneditable-input.span10{width:956px;} input.span9,textarea.span9,.uneditable-input.span9{width:856px;} input.span8,textarea.span8,.uneditable-input.span8{width:756px;} input.span7,textarea.span7,.uneditable-input.span7{width:656px;} input.span6,textarea.span6,.uneditable-input.span6{width:556px;} input.span5,textarea.span5,.uneditable-input.span5{width:456px;} input.span4,textarea.span4,.uneditable-input.span4{width:356px;} input.span3,textarea.span3,.uneditable-input.span3{width:256px;} input.span2,textarea.span2,.uneditable-input.span2{width:156px;} input.span1,textarea.span1,.uneditable-input.span1{width:56px;} .thumbnails{margin-left:-30px;} .thumbnails>li{margin-left:30px;} .row-fluid .thumbnails{margin-left:0;}}@media (max-width:979px){body{padding-top:0;} .navbar-fixed-top,.navbar-fixed-bottom{position:static;} .navbar-fixed-top{margin-bottom:20px;} .navbar-fixed-bottom{margin-top:20px;} .navbar-fixed-top .navbar-inner,.navbar-fixed-bottom .navbar-inner{padding:5px;} .navbar .container{width:auto;padding:0;} .navbar .brand{padding-left:10px;padding-right:10px;margin:0 0 0 -5px;} .nav-collapse{clear:both;} .nav-collapse .nav{float:none;margin:0 0 10px;} .nav-collapse .nav>li{float:none;} .nav-collapse .nav>li>a{margin-bottom:2px;} .nav-collapse .nav>.divider-vertical{display:none;} .nav-collapse .nav .nav-header{color:#777777;text-shadow:none;} .nav-collapse .nav>li>a,.nav-collapse .dropdown-menu a{padding:9px 15px;font-weight:bold;color:#777777;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} .nav-collapse .btn{padding:4px 10px 4px;font-weight:normal;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} .nav-collapse .dropdown-menu li+li a{margin-bottom:2px;} .nav-collapse .nav>li>a:hover,.nav-collapse .nav>li>a:focus,.nav-collapse .dropdown-menu a:hover,.nav-collapse .dropdown-menu a:focus{background-color:#f2f2f2;} .navbar-inverse .nav-collapse .nav>li>a,.navbar-inverse .nav-collapse .dropdown-menu a{color:#999999;} .navbar-inverse .nav-collapse .nav>li>a:hover,.navbar-inverse .nav-collapse .nav>li>a:focus,.navbar-inverse .nav-collapse .dropdown-menu a:hover,.navbar-inverse .nav-collapse .dropdown-menu a:focus{background-color:#111111;} .nav-collapse.in .btn-group{margin-top:5px;padding:0;} .nav-collapse .dropdown-menu{position:static;top:auto;left:auto;float:none;display:none;max-width:none;margin:0 15px;padding:0;background-color:transparent;border:none;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;} .nav-collapse .open>.dropdown-menu{display:block;} .nav-collapse .dropdown-menu:before,.nav-collapse .dropdown-menu:after{display:none;} .nav-collapse .dropdown-menu .divider{display:none;} .nav-collapse .nav>li>.dropdown-menu:before,.nav-collapse .nav>li>.dropdown-menu:after{display:none;} .nav-collapse .navbar-form,.nav-collapse .navbar-search{float:none;padding:10px 15px;margin:10px 0;border-top:1px solid #f2f2f2;border-bottom:1px solid #f2f2f2;-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,.1), 0 1px 0 rgba(255,255,255,.1);-moz-box-shadow:inset 0 1px 0 rgba(255,255,255,.1), 0 1px 0 rgba(255,255,255,.1);box-shadow:inset 0 1px 0 rgba(255,255,255,.1), 0 1px 0 rgba(255,255,255,.1);} .navbar-inverse .nav-collapse .navbar-form,.navbar-inverse .nav-collapse .navbar-search{border-top-color:#111111;border-bottom-color:#111111;} .navbar .nav-collapse .nav.pull-right{float:none;margin-left:0;} .nav-collapse,.nav-collapse.collapse{overflow:hidden;height:0;} .navbar .btn-navbar{display:block;} .navbar-static .navbar-inner{padding-left:10px;padding-right:10px;}}@media (min-width:980px){.nav-collapse.collapse{height:auto !important;overflow:visible !important;}} diff --git a/docs/Saml2/css/font-awesome.min.css b/docs/Saml2/css/font-awesome.min.css new file mode 100644 index 00000000..866437fa --- /dev/null +++ b/docs/Saml2/css/font-awesome.min.css @@ -0,0 +1,403 @@ +@font-face{font-family:'FontAwesome';src:url('http://github.com/font/fontawesome-webfont.eot?v=3.2.1');src:url('http://github.com/font/fontawesome-webfont.eot?#iefix&v=3.2.1') format('embedded-opentype'),url('http://github.com/font/fontawesome-webfont.woff?v=3.2.1') format('woff'),url('http://github.com/font/fontawesome-webfont.ttf?v=3.2.1') format('truetype'),url('http://github.com/font/fontawesome-webfont.svg#fontawesomeregular?v=3.2.1') format('svg');font-weight:normal;font-style:normal;}[class^="icon-"],[class*=" icon-"]{font-family:FontAwesome;font-weight:normal;font-style:normal;text-decoration:inherit;-webkit-font-smoothing:antialiased;*margin-right:.3em;} +[class^="icon-"]:before,[class*=" icon-"]:before{text-decoration:inherit;display:inline-block;speak:none;} +.icon-large:before{vertical-align:-10%;font-size:1.3333333333333333em;} +a [class^="icon-"],a [class*=" icon-"]{display:inline;} +[class^="icon-"].icon-fixed-width,[class*=" icon-"].icon-fixed-width{display:inline-block;width:1.1428571428571428em;text-align:right;padding-right:0.2857142857142857em;}[class^="icon-"].icon-fixed-width.icon-large,[class*=" icon-"].icon-fixed-width.icon-large{width:1.4285714285714286em;} +.icons-ul{margin-left:2.142857142857143em;list-style-type:none;}.icons-ul>li{position:relative;} +.icons-ul .icon-li{position:absolute;left:-2.142857142857143em;width:2.142857142857143em;text-align:center;line-height:inherit;} +[class^="icon-"].hide,[class*=" icon-"].hide{display:none;} +.icon-muted{color:#eeeeee;} +.icon-light{color:#ffffff;} +.icon-dark{color:#333333;} +.icon-border{border:solid 1px #eeeeee;padding:.2em .25em .15em;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;} +.icon-2x{font-size:2em;}.icon-2x.icon-border{border-width:2px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;} +.icon-3x{font-size:3em;}.icon-3x.icon-border{border-width:3px;-webkit-border-radius:5px;-moz-border-radius:5px;border-radius:5px;} +.icon-4x{font-size:4em;}.icon-4x.icon-border{border-width:4px;-webkit-border-radius:6px;-moz-border-radius:6px;border-radius:6px;} +.icon-5x{font-size:5em;}.icon-5x.icon-border{border-width:5px;-webkit-border-radius:7px;-moz-border-radius:7px;border-radius:7px;} +.pull-right{float:right;} +.pull-left{float:left;} +[class^="icon-"].pull-left,[class*=" icon-"].pull-left{margin-right:.3em;} +[class^="icon-"].pull-right,[class*=" icon-"].pull-right{margin-left:.3em;} +[class^="icon-"],[class*=" icon-"]{display:inline;width:auto;height:auto;line-height:normal;vertical-align:baseline;background-image:none;background-position:0% 0%;background-repeat:repeat;margin-top:0;} +.icon-white,.nav-pills>.active>a>[class^="icon-"],.nav-pills>.active>a>[class*=" icon-"],.nav-list>.active>a>[class^="icon-"],.nav-list>.active>a>[class*=" icon-"],.navbar-inverse .nav>.active>a>[class^="icon-"],.navbar-inverse .nav>.active>a>[class*=" icon-"],.dropdown-menu>li>a:hover>[class^="icon-"],.dropdown-menu>li>a:hover>[class*=" icon-"],.dropdown-menu>.active>a>[class^="icon-"],.dropdown-menu>.active>a>[class*=" icon-"],.dropdown-submenu:hover>a>[class^="icon-"],.dropdown-submenu:hover>a>[class*=" icon-"]{background-image:none;} +.btn [class^="icon-"].icon-large,.nav [class^="icon-"].icon-large,.btn [class*=" icon-"].icon-large,.nav [class*=" icon-"].icon-large{line-height:.9em;} +.btn [class^="icon-"].icon-spin,.nav [class^="icon-"].icon-spin,.btn [class*=" icon-"].icon-spin,.nav [class*=" icon-"].icon-spin{display:inline-block;} +.nav-tabs [class^="icon-"],.nav-pills [class^="icon-"],.nav-tabs [class*=" icon-"],.nav-pills [class*=" icon-"],.nav-tabs [class^="icon-"].icon-large,.nav-pills [class^="icon-"].icon-large,.nav-tabs [class*=" icon-"].icon-large,.nav-pills [class*=" icon-"].icon-large{line-height:.9em;} +.btn [class^="icon-"].pull-left.icon-2x,.btn [class*=" icon-"].pull-left.icon-2x,.btn [class^="icon-"].pull-right.icon-2x,.btn [class*=" icon-"].pull-right.icon-2x{margin-top:.18em;} +.btn [class^="icon-"].icon-spin.icon-large,.btn [class*=" icon-"].icon-spin.icon-large{line-height:.8em;} +.btn.btn-small [class^="icon-"].pull-left.icon-2x,.btn.btn-small [class*=" icon-"].pull-left.icon-2x,.btn.btn-small [class^="icon-"].pull-right.icon-2x,.btn.btn-small [class*=" icon-"].pull-right.icon-2x{margin-top:.25em;} +.btn.btn-large [class^="icon-"],.btn.btn-large [class*=" icon-"]{margin-top:0;}.btn.btn-large [class^="icon-"].pull-left.icon-2x,.btn.btn-large [class*=" icon-"].pull-left.icon-2x,.btn.btn-large [class^="icon-"].pull-right.icon-2x,.btn.btn-large [class*=" icon-"].pull-right.icon-2x{margin-top:.05em;} +.btn.btn-large [class^="icon-"].pull-left.icon-2x,.btn.btn-large [class*=" icon-"].pull-left.icon-2x{margin-right:.2em;} +.btn.btn-large [class^="icon-"].pull-right.icon-2x,.btn.btn-large [class*=" icon-"].pull-right.icon-2x{margin-left:.2em;} +.nav-list [class^="icon-"],.nav-list [class*=" icon-"]{line-height:inherit;} +.icon-stack{position:relative;display:inline-block;width:2em;height:2em;line-height:2em;vertical-align:-35%;}.icon-stack [class^="icon-"],.icon-stack [class*=" icon-"]{display:block;text-align:center;position:absolute;width:100%;height:100%;font-size:1em;line-height:inherit;*line-height:2em;} +.icon-stack .icon-stack-base{font-size:2em;*line-height:1em;} +.icon-spin{display:inline-block;-moz-animation:spin 2s infinite linear;-o-animation:spin 2s infinite linear;-webkit-animation:spin 2s infinite linear;animation:spin 2s infinite linear;} +a .icon-stack,a .icon-spin{display:inline-block;text-decoration:none;} +@-moz-keyframes spin{0%{-moz-transform:rotate(0deg);} 100%{-moz-transform:rotate(359deg);}}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg);} 100%{-webkit-transform:rotate(359deg);}}@-o-keyframes spin{0%{-o-transform:rotate(0deg);} 100%{-o-transform:rotate(359deg);}}@-ms-keyframes spin{0%{-ms-transform:rotate(0deg);} 100%{-ms-transform:rotate(359deg);}}@keyframes spin{0%{transform:rotate(0deg);} 100%{transform:rotate(359deg);}}.icon-rotate-90:before{-webkit-transform:rotate(90deg);-moz-transform:rotate(90deg);-ms-transform:rotate(90deg);-o-transform:rotate(90deg);transform:rotate(90deg);filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=1);} +.icon-rotate-180:before{-webkit-transform:rotate(180deg);-moz-transform:rotate(180deg);-ms-transform:rotate(180deg);-o-transform:rotate(180deg);transform:rotate(180deg);filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=2);} +.icon-rotate-270:before{-webkit-transform:rotate(270deg);-moz-transform:rotate(270deg);-ms-transform:rotate(270deg);-o-transform:rotate(270deg);transform:rotate(270deg);filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=3);} +.icon-flip-horizontal:before{-webkit-transform:scale(-1, 1);-moz-transform:scale(-1, 1);-ms-transform:scale(-1, 1);-o-transform:scale(-1, 1);transform:scale(-1, 1);} +.icon-flip-vertical:before{-webkit-transform:scale(1, -1);-moz-transform:scale(1, -1);-ms-transform:scale(1, -1);-o-transform:scale(1, -1);transform:scale(1, -1);} +a .icon-rotate-90:before,a .icon-rotate-180:before,a .icon-rotate-270:before,a .icon-flip-horizontal:before,a .icon-flip-vertical:before{display:inline-block;} +.icon-glass:before{content:"\f000";} +.icon-music:before{content:"\f001";} +.icon-search:before{content:"\f002";} +.icon-envelope-alt:before{content:"\f003";} +.icon-heart:before{content:"\f004";} +.icon-star:before{content:"\f005";} +.icon-star-empty:before{content:"\f006";} +.icon-user:before{content:"\f007";} +.icon-film:before{content:"\f008";} +.icon-th-large:before{content:"\f009";} +.icon-th:before{content:"\f00a";} +.icon-th-list:before{content:"\f00b";} +.icon-ok:before{content:"\f00c";} +.icon-remove:before{content:"\f00d";} +.icon-zoom-in:before{content:"\f00e";} +.icon-zoom-out:before{content:"\f010";} +.icon-power-off:before,.icon-off:before{content:"\f011";} +.icon-signal:before{content:"\f012";} +.icon-gear:before,.icon-cog:before{content:"\f013";} +.icon-trash:before{content:"\f014";} +.icon-home:before{content:"\f015";} +.icon-file-alt:before{content:"\f016";} +.icon-time:before{content:"\f017";} +.icon-road:before{content:"\f018";} +.icon-download-alt:before{content:"\f019";} +.icon-download:before{content:"\f01a";} +.icon-upload:before{content:"\f01b";} +.icon-inbox:before{content:"\f01c";} +.icon-play-circle:before{content:"\f01d";} +.icon-rotate-right:before,.icon-repeat:before{content:"\f01e";} +.icon-refresh:before{content:"\f021";} +.icon-list-alt:before{content:"\f022";} +.icon-lock:before{content:"\f023";} +.icon-flag:before{content:"\f024";} +.icon-headphones:before{content:"\f025";} +.icon-volume-off:before{content:"\f026";} +.icon-volume-down:before{content:"\f027";} +.icon-volume-up:before{content:"\f028";} +.icon-qrcode:before{content:"\f029";} +.icon-barcode:before{content:"\f02a";} +.icon-tag:before{content:"\f02b";} +.icon-tags:before{content:"\f02c";} +.icon-book:before{content:"\f02d";} +.icon-bookmark:before{content:"\f02e";} +.icon-print:before{content:"\f02f";} +.icon-camera:before{content:"\f030";} +.icon-font:before{content:"\f031";} +.icon-bold:before{content:"\f032";} +.icon-italic:before{content:"\f033";} +.icon-text-height:before{content:"\f034";} +.icon-text-width:before{content:"\f035";} +.icon-align-left:before{content:"\f036";} +.icon-align-center:before{content:"\f037";} +.icon-align-right:before{content:"\f038";} +.icon-align-justify:before{content:"\f039";} +.icon-list:before{content:"\f03a";} +.icon-indent-left:before{content:"\f03b";} +.icon-indent-right:before{content:"\f03c";} +.icon-facetime-video:before{content:"\f03d";} +.icon-picture:before{content:"\f03e";} +.icon-pencil:before{content:"\f040";} +.icon-map-marker:before{content:"\f041";} +.icon-adjust:before{content:"\f042";} +.icon-tint:before{content:"\f043";} +.icon-edit:before{content:"\f044";} +.icon-share:before{content:"\f045";} +.icon-check:before{content:"\f046";} +.icon-move:before{content:"\f047";} +.icon-step-backward:before{content:"\f048";} +.icon-fast-backward:before{content:"\f049";} +.icon-backward:before{content:"\f04a";} +.icon-play:before{content:"\f04b";} +.icon-pause:before{content:"\f04c";} +.icon-stop:before{content:"\f04d";} +.icon-forward:before{content:"\f04e";} +.icon-fast-forward:before{content:"\f050";} +.icon-step-forward:before{content:"\f051";} +.icon-eject:before{content:"\f052";} +.icon-chevron-left:before{content:"\f053";} +.icon-chevron-right:before{content:"\f054";} +.icon-plus-sign:before{content:"\f055";} +.icon-minus-sign:before{content:"\f056";} +.icon-remove-sign:before{content:"\f057";} +.icon-ok-sign:before{content:"\f058";} +.icon-question-sign:before{content:"\f059";} +.icon-info-sign:before{content:"\f05a";} +.icon-screenshot:before{content:"\f05b";} +.icon-remove-circle:before{content:"\f05c";} +.icon-ok-circle:before{content:"\f05d";} +.icon-ban-circle:before{content:"\f05e";} +.icon-arrow-left:before{content:"\f060";} +.icon-arrow-right:before{content:"\f061";} +.icon-arrow-up:before{content:"\f062";} +.icon-arrow-down:before{content:"\f063";} +.icon-mail-forward:before,.icon-share-alt:before{content:"\f064";} +.icon-resize-full:before{content:"\f065";} +.icon-resize-small:before{content:"\f066";} +.icon-plus:before{content:"\f067";} +.icon-minus:before{content:"\f068";} +.icon-asterisk:before{content:"\f069";} +.icon-exclamation-sign:before{content:"\f06a";} +.icon-gift:before{content:"\f06b";} +.icon-leaf:before{content:"\f06c";} +.icon-fire:before{content:"\f06d";} +.icon-eye-open:before{content:"\f06e";} +.icon-eye-close:before{content:"\f070";} +.icon-warning-sign:before{content:"\f071";} +.icon-plane:before{content:"\f072";} +.icon-calendar:before{content:"\f073";} +.icon-random:before{content:"\f074";} +.icon-comment:before{content:"\f075";} +.icon-magnet:before{content:"\f076";} +.icon-chevron-up:before{content:"\f077";} +.icon-chevron-down:before{content:"\f078";} +.icon-retweet:before{content:"\f079";} +.icon-shopping-cart:before{content:"\f07a";} +.icon-folder-close:before{content:"\f07b";} +.icon-folder-open:before{content:"\f07c";} +.icon-resize-vertical:before{content:"\f07d";} +.icon-resize-horizontal:before{content:"\f07e";} +.icon-bar-chart:before{content:"\f080";} +.icon-twitter-sign:before{content:"\f081";} +.icon-facebook-sign:before{content:"\f082";} +.icon-camera-retro:before{content:"\f083";} +.icon-key:before{content:"\f084";} +.icon-gears:before,.icon-cogs:before{content:"\f085";} +.icon-comments:before{content:"\f086";} +.icon-thumbs-up-alt:before{content:"\f087";} +.icon-thumbs-down-alt:before{content:"\f088";} +.icon-star-half:before{content:"\f089";} +.icon-heart-empty:before{content:"\f08a";} +.icon-signout:before{content:"\f08b";} +.icon-linkedin-sign:before{content:"\f08c";} +.icon-pushpin:before{content:"\f08d";} +.icon-external-link:before{content:"\f08e";} +.icon-signin:before{content:"\f090";} +.icon-trophy:before{content:"\f091";} +.icon-github-sign:before{content:"\f092";} +.icon-upload-alt:before{content:"\f093";} +.icon-lemon:before{content:"\f094";} +.icon-phone:before{content:"\f095";} +.icon-unchecked:before,.icon-check-empty:before{content:"\f096";} +.icon-bookmark-empty:before{content:"\f097";} +.icon-phone-sign:before{content:"\f098";} +.icon-twitter:before{content:"\f099";} +.icon-facebook:before{content:"\f09a";} +.icon-github:before{content:"\f09b";} +.icon-unlock:before{content:"\f09c";} +.icon-credit-card:before{content:"\f09d";} +.icon-rss:before{content:"\f09e";} +.icon-hdd:before{content:"\f0a0";} +.icon-bullhorn:before{content:"\f0a1";} +.icon-bell:before{content:"\f0a2";} +.icon-certificate:before{content:"\f0a3";} +.icon-hand-right:before{content:"\f0a4";} +.icon-hand-left:before{content:"\f0a5";} +.icon-hand-up:before{content:"\f0a6";} +.icon-hand-down:before{content:"\f0a7";} +.icon-circle-arrow-left:before{content:"\f0a8";} +.icon-circle-arrow-right:before{content:"\f0a9";} +.icon-circle-arrow-up:before{content:"\f0aa";} +.icon-circle-arrow-down:before{content:"\f0ab";} +.icon-globe:before{content:"\f0ac";} +.icon-wrench:before{content:"\f0ad";} +.icon-tasks:before{content:"\f0ae";} +.icon-filter:before{content:"\f0b0";} +.icon-briefcase:before{content:"\f0b1";} +.icon-fullscreen:before{content:"\f0b2";} +.icon-group:before{content:"\f0c0";} +.icon-link:before{content:"\f0c1";} +.icon-cloud:before{content:"\f0c2";} +.icon-beaker:before{content:"\f0c3";} +.icon-cut:before{content:"\f0c4";} +.icon-copy:before{content:"\f0c5";} +.icon-paperclip:before,.icon-paper-clip:before{content:"\f0c6";} +.icon-save:before{content:"\f0c7";} +.icon-sign-blank:before{content:"\f0c8";} +.icon-reorder:before{content:"\f0c9";} +.icon-list-ul:before{content:"\f0ca";} +.icon-list-ol:before{content:"\f0cb";} +.icon-strikethrough:before{content:"\f0cc";} +.icon-underline:before{content:"\f0cd";} +.icon-table:before{content:"\f0ce";} +.icon-magic:before{content:"\f0d0";} +.icon-truck:before{content:"\f0d1";} +.icon-pinterest:before{content:"\f0d2";} +.icon-pinterest-sign:before{content:"\f0d3";} +.icon-google-plus-sign:before{content:"\f0d4";} +.icon-google-plus:before{content:"\f0d5";} +.icon-money:before{content:"\f0d6";} +.icon-caret-down:before{content:"\f0d7";} +.icon-caret-up:before{content:"\f0d8";} +.icon-caret-left:before{content:"\f0d9";} +.icon-caret-right:before{content:"\f0da";} +.icon-columns:before{content:"\f0db";} +.icon-sort:before{content:"\f0dc";} +.icon-sort-down:before{content:"\f0dd";} +.icon-sort-up:before{content:"\f0de";} +.icon-envelope:before{content:"\f0e0";} +.icon-linkedin:before{content:"\f0e1";} +.icon-rotate-left:before,.icon-undo:before{content:"\f0e2";} +.icon-legal:before{content:"\f0e3";} +.icon-dashboard:before{content:"\f0e4";} +.icon-comment-alt:before{content:"\f0e5";} +.icon-comments-alt:before{content:"\f0e6";} +.icon-bolt:before{content:"\f0e7";} +.icon-sitemap:before{content:"\f0e8";} +.icon-umbrella:before{content:"\f0e9";} +.icon-paste:before{content:"\f0ea";} +.icon-lightbulb:before{content:"\f0eb";} +.icon-exchange:before{content:"\f0ec";} +.icon-cloud-download:before{content:"\f0ed";} +.icon-cloud-upload:before{content:"\f0ee";} +.icon-user-md:before{content:"\f0f0";} +.icon-stethoscope:before{content:"\f0f1";} +.icon-suitcase:before{content:"\f0f2";} +.icon-bell-alt:before{content:"\f0f3";} +.icon-coffee:before{content:"\f0f4";} +.icon-food:before{content:"\f0f5";} +.icon-file-text-alt:before{content:"\f0f6";} +.icon-building:before{content:"\f0f7";} +.icon-hospital:before{content:"\f0f8";} +.icon-ambulance:before{content:"\f0f9";} +.icon-medkit:before{content:"\f0fa";} +.icon-fighter-jet:before{content:"\f0fb";} +.icon-beer:before{content:"\f0fc";} +.icon-h-sign:before{content:"\f0fd";} +.icon-plus-sign-alt:before{content:"\f0fe";} +.icon-double-angle-left:before{content:"\f100";} +.icon-double-angle-right:before{content:"\f101";} +.icon-double-angle-up:before{content:"\f102";} +.icon-double-angle-down:before{content:"\f103";} +.icon-angle-left:before{content:"\f104";} +.icon-angle-right:before{content:"\f105";} +.icon-angle-up:before{content:"\f106";} +.icon-angle-down:before{content:"\f107";} +.icon-desktop:before{content:"\f108";} +.icon-laptop:before{content:"\f109";} +.icon-tablet:before{content:"\f10a";} +.icon-mobile-phone:before{content:"\f10b";} +.icon-circle-blank:before{content:"\f10c";} +.icon-quote-left:before{content:"\f10d";} +.icon-quote-right:before{content:"\f10e";} +.icon-spinner:before{content:"\f110";} +.icon-circle:before{content:"\f111";} +.icon-mail-reply:before,.icon-reply:before{content:"\f112";} +.icon-github-alt:before{content:"\f113";} +.icon-folder-close-alt:before{content:"\f114";} +.icon-folder-open-alt:before{content:"\f115";} +.icon-expand-alt:before{content:"\f116";} +.icon-collapse-alt:before{content:"\f117";} +.icon-smile:before{content:"\f118";} +.icon-frown:before{content:"\f119";} +.icon-meh:before{content:"\f11a";} +.icon-gamepad:before{content:"\f11b";} +.icon-keyboard:before{content:"\f11c";} +.icon-flag-alt:before{content:"\f11d";} +.icon-flag-checkered:before{content:"\f11e";} +.icon-terminal:before{content:"\f120";} +.icon-code:before{content:"\f121";} +.icon-reply-all:before{content:"\f122";} +.icon-mail-reply-all:before{content:"\f122";} +.icon-star-half-full:before,.icon-star-half-empty:before{content:"\f123";} +.icon-location-arrow:before{content:"\f124";} +.icon-crop:before{content:"\f125";} +.icon-code-fork:before{content:"\f126";} +.icon-unlink:before{content:"\f127";} +.icon-question:before{content:"\f128";} +.icon-info:before{content:"\f129";} +.icon-exclamation:before{content:"\f12a";} +.icon-superscript:before{content:"\f12b";} +.icon-subscript:before{content:"\f12c";} +.icon-eraser:before{content:"\f12d";} +.icon-puzzle-piece:before{content:"\f12e";} +.icon-microphone:before{content:"\f130";} +.icon-microphone-off:before{content:"\f131";} +.icon-shield:before{content:"\f132";} +.icon-calendar-empty:before{content:"\f133";} +.icon-fire-extinguisher:before{content:"\f134";} +.icon-rocket:before{content:"\f135";} +.icon-maxcdn:before{content:"\f136";} +.icon-chevron-sign-left:before{content:"\f137";} +.icon-chevron-sign-right:before{content:"\f138";} +.icon-chevron-sign-up:before{content:"\f139";} +.icon-chevron-sign-down:before{content:"\f13a";} +.icon-html5:before{content:"\f13b";} +.icon-css3:before{content:"\f13c";} +.icon-anchor:before{content:"\f13d";} +.icon-unlock-alt:before{content:"\f13e";} +.icon-bullseye:before{content:"\f140";} +.icon-ellipsis-horizontal:before{content:"\f141";} +.icon-ellipsis-vertical:before{content:"\f142";} +.icon-rss-sign:before{content:"\f143";} +.icon-play-sign:before{content:"\f144";} +.icon-ticket:before{content:"\f145";} +.icon-minus-sign-alt:before{content:"\f146";} +.icon-check-minus:before{content:"\f147";} +.icon-level-up:before{content:"\f148";} +.icon-level-down:before{content:"\f149";} +.icon-check-sign:before{content:"\f14a";} +.icon-edit-sign:before{content:"\f14b";} +.icon-external-link-sign:before{content:"\f14c";} +.icon-share-sign:before{content:"\f14d";} +.icon-compass:before{content:"\f14e";} +.icon-collapse:before{content:"\f150";} +.icon-collapse-top:before{content:"\f151";} +.icon-expand:before{content:"\f152";} +.icon-euro:before,.icon-eur:before{content:"\f153";} +.icon-gbp:before{content:"\f154";} +.icon-dollar:before,.icon-usd:before{content:"\f155";} +.icon-rupee:before,.icon-inr:before{content:"\f156";} +.icon-yen:before,.icon-jpy:before{content:"\f157";} +.icon-renminbi:before,.icon-cny:before{content:"\f158";} +.icon-won:before,.icon-krw:before{content:"\f159";} +.icon-bitcoin:before,.icon-btc:before{content:"\f15a";} +.icon-file:before{content:"\f15b";} +.icon-file-text:before{content:"\f15c";} +.icon-sort-by-alphabet:before{content:"\f15d";} +.icon-sort-by-alphabet-alt:before{content:"\f15e";} +.icon-sort-by-attributes:before{content:"\f160";} +.icon-sort-by-attributes-alt:before{content:"\f161";} +.icon-sort-by-order:before{content:"\f162";} +.icon-sort-by-order-alt:before{content:"\f163";} +.icon-thumbs-up:before{content:"\f164";} +.icon-thumbs-down:before{content:"\f165";} +.icon-youtube-sign:before{content:"\f166";} +.icon-youtube:before{content:"\f167";} +.icon-xing:before{content:"\f168";} +.icon-xing-sign:before{content:"\f169";} +.icon-youtube-play:before{content:"\f16a";} +.icon-dropbox:before{content:"\f16b";} +.icon-stackexchange:before{content:"\f16c";} +.icon-instagram:before{content:"\f16d";} +.icon-flickr:before{content:"\f16e";} +.icon-adn:before{content:"\f170";} +.icon-bitbucket:before{content:"\f171";} +.icon-bitbucket-sign:before{content:"\f172";} +.icon-tumblr:before{content:"\f173";} +.icon-tumblr-sign:before{content:"\f174";} +.icon-long-arrow-down:before{content:"\f175";} +.icon-long-arrow-up:before{content:"\f176";} +.icon-long-arrow-left:before{content:"\f177";} +.icon-long-arrow-right:before{content:"\f178";} +.icon-apple:before{content:"\f179";} +.icon-windows:before{content:"\f17a";} +.icon-android:before{content:"\f17b";} +.icon-linux:before{content:"\f17c";} +.icon-dribbble:before{content:"\f17d";} +.icon-skype:before{content:"\f17e";} +.icon-foursquare:before{content:"\f180";} +.icon-trello:before{content:"\f181";} +.icon-female:before{content:"\f182";} +.icon-male:before{content:"\f183";} +.icon-gittip:before{content:"\f184";} +.icon-sun:before{content:"\f185";} +.icon-moon:before{content:"\f186";} +.icon-archive:before{content:"\f187";} +.icon-bug:before{content:"\f188";} +.icon-vk:before{content:"\f189";} +.icon-weibo:before{content:"\f18a";} +.icon-renren:before{content:"\f18b";} diff --git a/docs/Saml2/css/jquery.iviewer.css b/docs/Saml2/css/jquery.iviewer.css new file mode 100644 index 00000000..11f5f094 --- /dev/null +++ b/docs/Saml2/css/jquery.iviewer.css @@ -0,0 +1,65 @@ +.viewer { + -ms-touch-action: none; +} + +.iviewer_common { + position:absolute; + bottom:10px; + border: 1px solid #000; + height: 28px; + z-index: 5000; +} + +.iviewer_cursor { + cursor: url(http://github.com/images/iviewer/hand.cur) 6 8, pointer; +} + +.iviewer_drag_cursor { + cursor: url(http://github.com/images/iviewer/grab.cur) 6 8, pointer; +} + +.iviewer_button { + width: 28px; + cursor: pointer; + background-position: center center; + background-repeat: no-repeat; +} + +.iviewer_zoom_in { + left: 20px; + background: url(http://github.com/images/iviewer/iviewer.zoom_in.png); +} + +.iviewer_zoom_out { + left: 55px; + background: url(http://github.com/images/iviewer/iviewer.zoom_out.png); +} + +.iviewer_zoom_zero { + left: 90px; + background: url(http://github.com/images/iviewer/iviewer.zoom_zero.png); +} + +.iviewer_zoom_fit { + left: 125px; + background: url(http://github.com/images/iviewer/iviewer.zoom_fit.png); +} + +.iviewer_zoom_status { + left: 160px; + font: 1em/28px Sans; + color: #000; + background-color: #fff; + text-align: center; + width: 60px; +} + +.iviewer_rotate_left { + left: 227px; + background: #fff url(http://github.com/images/iviewer/iviewer.rotate_left.png) center center no-repeat; +} + +.iviewer_rotate_right { + left: 262px; + background: #fff url(http://github.com/images/iviewer/iviewer.rotate_right.png) center center no-repeat; +} diff --git a/docs/Saml2/css/phpdocumentor-clean-icons/Read Me.txt b/docs/Saml2/css/phpdocumentor-clean-icons/Read Me.txt new file mode 100644 index 00000000..9d2b9e57 --- /dev/null +++ b/docs/Saml2/css/phpdocumentor-clean-icons/Read Me.txt @@ -0,0 +1,3 @@ +To modify your generated font, use the *dev.svg* file, located in the *fonts* folder in this package. You can import this dev.svg file to the IcoMoon app. All the tags (class names) and the Unicode points of your glyphs are saved in this file. + +See the documentation for more info on how to use this package: http://icomoon.io/#docs/font-face \ No newline at end of file diff --git a/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.dev.svg b/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.dev.svg new file mode 100644 index 00000000..8b543c17 --- /dev/null +++ b/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.dev.svg @@ -0,0 +1,17 @@ + + + + +This is a custom SVG font generated by IcoMoon. + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.eot b/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.eot new file mode 100644 index 0000000000000000000000000000000000000000..ef43f265ab2f344b7871c6d26a8722bae125b956 GIT binary patch literal 2324 zcmds3O>7%Q6#iy^oj7)E$FUn4$P!bB5}bP1`D;m0g&ens6e0)_5(i`)Cr%ar;5br2 z9CARMD%1m_w;nif;KTtT=!tTo5`s%_RLBQJ;1Vi9g@i=RH@n+3EeX(y6SJOu?|tvh zym>Qk=Q-X5SOGvlfouwN)n$lW6q1{p_hdwTN)0w8KbOC>eH*(&9W+p3UqT%vY@muV zYG_evB12@2a*;>|tCZ^G);T!wH=0F`XwqucwYFem3|WqOFi#vP;|ehb74wC{!r98p zi5VcE5gk08pDkb<24H?q*?R7UW6rTFH-fTM8{^x) zl%IR0cjgv?-no7q{_GR#;n7Z8foM|<_{Yxa`D=ID7?bup5|+EPx9Kio;zh`vlBptX zq}3^Q*#u|32ps`2CzdIn_USDQ;H|y6C5?B}iTwQX>=I73anoM|*Jf?*u0T3++lL;Z zoOB;<5)s)4-E}Y}DajQLa*Z-Y0=FYuP&Vv}AZXK4}7R)TE8*mWoa@#1qe{_EcT z*sJ^h@nM|7CVrQ@>1PY~Bq|iMjr2(P*qY7>n71(Qr5(R(rdnv3M-f8|>-P z_3rLSByl(r?FwmKfnYEkiX0Hj&Zm8`zKQ(dhe%Y#FqNZ*ZWu~n7W}o zu4<~Px{1%Id+?tBMG1bp<36t-h-IHwF@f)VUc-Pm10I{SELD&u5r4!i#q;J}$#-S#iEi{<9}YQ1LJW4u!TTaSOeW#u=wx0w|9=R_z% z6`Ih^joNA + + + +This is a custom SVG font generated by IcoMoon. + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.ttf b/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.ttf new file mode 100644 index 0000000000000000000000000000000000000000..1937c7a31fdb7659063738dfe0a1fcc8bf325636 GIT binary patch literal 2080 zcmds2O>7%Q6#iy^oj7*<7rUW`EHQN`!LD~5J84N#g&ens6e0)_5(i`)Cw3M8;5br2 z9CARMD#QW7tp^SqIB`G-dZL`Dgy7N}74iWQxRgpzAt4d-jlF5p(g2k>F{?N4eczjz z_ulO64g>%nwxMFFSX@3^eK9%@cr>!{(}jg1W?%s3_r%sS&mD7)UAi^_h!==g%JovK z8~x=f@t2fm*GrqNUXLrmyhgugedE=&t)22kKz*G4U#peU>L2qTAEi(F^HmaBp!WlP z5#mRx_0Dd`JjMBO;y}H0zJ;@3Y%xb{HA?kL-hSr`K(_$pT&ua+ z$$jwpD~x}E{w2uTDA(UBEWR{4e-mDX1n{;0vrlg8URQzW5_>Rk_veUiuZy%Kb|o!W z+TZj(W8!(ponml`=yRteWD{KVZRqfbMX^SF+SNBPjyL24o%^)c0(%Da(%Ql*PIYmE zS;-ujo3(u_gS`~-;b01Jtp9M6$ViFz^8gl!WZrS+n4$LURoGQ-fbWS-Mv<1K1qNd! z$tH|j0c9bB`uZNXyL&(O`~H8nA7`+Q-{o$)r-geG6b~yr9HP71FIYpY_nY`hT)`+N zV1cJRJZU^ABGD&=lRqhDk_j{GL`fLaVlqi0AG602V~JcMm%U&Y3igk(yZZUm+}xDx zeqPQle=DxIJe`jXcmTB^2s{%#|(0O68FmP;)ERxhK9YNkR1>D z{Sm)9Ivfl|LV;25$cU~F4+jF#!-3$CPaE=hy?$TdfLeAx4Tr+H!r=#~RK+lrqlRu6 zhHvD^_*gjP^Lb3&&>mGaRaN^3pH+|GUH6L;{B~ztTY(pAuB{@6?_68MxH#k5I=tdF z*EYysl3%1YM8@H|16x59PrJ5?b7;G^28Vye!5AG;@v>_h8-H&XAvAO8gP7(vwl literal 0 HcmV?d00001 diff --git a/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.woff b/docs/Saml2/css/phpdocumentor-clean-icons/fonts/phpdocumentor-clean-icons.woff new file mode 100644 index 0000000000000000000000000000000000000000..32fe30d4d42925d3011635b139e0079025c8862c GIT binary patch literal 1832 zcmZWqc{JPE9={}wwG~TEERWPuYc+{d2B|fq(o!IP5XdJ0fPaC!l_97Gcq&>t+B*=SbL1|E zfCe}KcX2JK^*ZNdt5;Xl|h3j8seJ(hz6Nr z^PYxV340V~7 zYl*hLsyt{o=Aq4QZ8|2|C3Yhy1GZgXhyAU??%JsgL6|K}ZpBWS+&c1FHhIeqwUoT(KKUIC4uI@oR zwRpPunVy;7ZAbGw7lQysa8x9XNR&|9ADOK!@STe{XuEvP-tFp;-r@~B`l{>wT-zdD zDs$sV2e%}BK0H60=v?eOcQs*{#qQ6WEPc7zdz!H=+Wu^q(MO*;E2M8CA__7*qHv`w z@(Z$iQ?5C)B0n&2?qAi%I_CROR%*&&__REW+mhQlC*FsxcfFJ+IVUXo=ou{d;jLn*}{c{w<7x9di{Ez-xyKTN8x-sNiy+=O3zR6;z*@-DMQdz-GGRRKXEw1|#% z>_Do^AwTzw!eSFg__;oQO-fQMVdxzbzu6NJt8Lo@tsHCyK?m3}LT_;l_aNXQni%Wj` z42G$=<>%;L)0Y7%{Py^e`r|K;1f7LTS$Qi;`WmHg@+t&6nCf<;K|^UDv7Gl8l!oKC z*6KNP4xU)trwgyfuw{7F)W?f$w`fcrOmr_NU71Y16mxv6d9?m%3rRYgULBLh@wFZ7 zCM4kvoAQaT2~@}pT&(7H8`dUSNk43Ato-cH&!cn|J(r%vxbO& ztJv#2euVwd^XlEmMigIZp{MiRtIJGfyQ96>+;FYCU$gAq9sZ=#B{^!$x6}CXpsJcN zb1H?;*B7wpBkcD4RdG(5wYp>n@k~5*?1OG|Op5NZRg#9{^PqWTgDUs8^shnpU9#!H z2`9qe$^_!awE{P^tLwI8b==22A2NHp!pts9!o%?vf7s2|&Me{G!np@TiIpox>Fq)M z6vA`!B1!(+jb#lEUqZrTnA;V4YhC81H{WEuGcFn1JyUxim=m1Vwy>1eOFFe&jx%=X zooho6QfRsE(-ForBd65sdA+1UbyR7xmT*lbT5kJeY_TteLh%F1#;qAIQiPFl77sW9 zz}Z4fZg&p&Qv4{CX_$`$0!i_qz-<*Vh-DOj$AF`|XZ}8vVmA9Zn{_f@fQ zPPi5f27_(H8MBi>at|^`aQo@>QsN8@_BLfl2K5D{j?p~=c|6^(3l3-kq^-32_dFDe zekF&5o<=F4fh-rA=DUQD1N@yf-ENhdTYcR zp`rEPI)P7$1N~$7XI>m_+TRBx?e=m&xFb`5LaBo`RcT5faGaOQ`k#N?(vC=qnmi2F zc?^M;P_Pl{1B~~uZ_s3fV(uEW|L}bQS7_w!-fPIghKOR34lJroy3@5BVVualk(0<| zSQ%Mwu4k4_pxom1+TN7VCV3ev?l6na>KWPXI?*IS* literal 0 HcmV?d00001 diff --git a/docs/Saml2/css/phpdocumentor-clean-icons/lte-ie7.js b/docs/Saml2/css/phpdocumentor-clean-icons/lte-ie7.js new file mode 100644 index 00000000..881c16ec --- /dev/null +++ b/docs/Saml2/css/phpdocumentor-clean-icons/lte-ie7.js @@ -0,0 +1,30 @@ +/* Load this script using conditional IE comments if you need to support IE 7 and IE 6. */ + +window.onload = function() { + function addIcon(el, entity) { + var html = el.innerHTML; + el.innerHTML = '' + entity + '' + html; + } + var icons = { + 'icon-trait' : '', + 'icon-interface' : '', + 'icon-class' : '' + }, + els = document.getElementsByTagName('*'), + i, attr, html, c, el; + for (i = 0; ; i += 1) { + el = els[i]; + if(!el) { + break; + } + attr = el.getAttribute('data-icon'); + if (attr) { + addIcon(el, attr); + } + c = el.className; + c = c.match(/icon-[^\s'"]+/); + if (c && icons[c[0]]) { + addIcon(el, icons[c[0]]); + } + } +}; \ No newline at end of file diff --git a/docs/Saml2/css/phpdocumentor-clean-icons/style.css b/docs/Saml2/css/phpdocumentor-clean-icons/style.css new file mode 100644 index 00000000..f069ec1f --- /dev/null +++ b/docs/Saml2/css/phpdocumentor-clean-icons/style.css @@ -0,0 +1,48 @@ +@font-face { + font-family: 'phpdocumentor-clean-icons'; + src:url('http://github.com/fonts/phpdocumentor-clean-icons.eot'); + src:url('http://github.com/fonts/phpdocumentor-clean-icons.eot?#iefix') format('embedded-opentype'), + url('http://github.com/fonts/phpdocumentor-clean-icons.woff') format('woff'), + url('http://github.com/fonts/phpdocumentor-clean-icons.ttf') format('truetype'), + url('http://github.com/fonts/phpdocumentor-clean-icons.svg#phpdocumentor-clean-icons') format('svg'); + font-weight: normal; + font-style: normal; +} + +/* Use the following CSS code if you want to use data attributes for inserting your icons */ +[data-icon]:before { + font-family: 'phpdocumentor-clean-icons'; + content: attr(data-icon); + speak: none; + font-weight: normal; + font-variant: normal; + text-transform: none; + line-height: 1; + -webkit-font-smoothing: antialiased; +} + +/* Use the following CSS code if you want to have a class per icon */ +/* +Instead of a list of all class selectors, +you can use the generic selector below, but it's slower: +[class*="icon-"] { +*/ +.icon-trait, .icon-interface, .icon-class { + font-family: 'phpdocumentor-clean-icons'; + speak: none; + font-style: normal; + font-weight: normal; + font-variant: normal; + text-transform: none; + line-height: 1; + -webkit-font-smoothing: antialiased; +} +.icon-trait:before { + content: "\e000"; +} +.icon-interface:before { + content: "\e001"; +} +.icon-class:before { + content: "\e002"; +} diff --git a/docs/Saml2/css/prism.css b/docs/Saml2/css/prism.css new file mode 100644 index 00000000..17876afc --- /dev/null +++ b/docs/Saml2/css/prism.css @@ -0,0 +1,204 @@ +/** + * prism.js default theme for JavaScript, CSS and HTML + * Based on dabblet (http://dabblet.com) + * @author Lea Verou + */ + +code[class*="language-"], +pre[class*="language-"] { + color: black; + text-shadow: 0 1px white; + font-family: Consolas, Monaco, 'Andale Mono', monospace; + direction: ltr; + text-align: left; + white-space: pre; + word-spacing: normal; + + -moz-tab-size: 4; + -o-tab-size: 4; + tab-size: 4; + + -webkit-hyphens: none; + -moz-hyphens: none; + -ms-hyphens: none; + hyphens: none; +} + +::-moz-selection { + text-shadow: none; + background: #b3d4fc; +} + +::selection { + text-shadow: none; + background: #b3d4fc; +} + +@media print { + code[class*="language-"], + pre[class*="language-"] { + text-shadow: none; + } +} + +/* Code blocks */ +pre[class*="language-"] { + padding: 1em; + margin: .5em 0; + overflow: auto; +} + +:not(pre) > code[class*="language-"], +pre[class*="language-"] { + background: #f5f2f0; +} + +/* Inline code */ +:not(pre) > code[class*="language-"] { + padding: .1em; + border-radius: .3em; +} + +.token.comment, +.token.prolog, +.token.doctype, +.token.cdata { + color: slategray; +} + +.token.punctuation { + color: #999; +} + +.namespace { + opacity: .7; +} + +.token.property, +.token.tag, +.token.boolean, +.token.number { + color: #905; +} + +.token.selector, +.token.attr-name, +.token.string { + color: #690; +} + +.token.operator, +.token.entity, +.token.url, +.language-css .token.string, +.style .token.string { + color: #a67f59; + background: hsla(0,0%,100%,.5); +} + +.token.atrule, +.token.attr-value, +.token.keyword { + color: #07a; +} + + +.token.regex, +.token.important { + color: #e90; +} + +.token.important { + font-weight: bold; +} + +.token.entity { + cursor: help; +} +pre[data-line] { + position: relative; + padding: 1em 0 1em 3em; +} + +.line-highlight { + position: absolute; + left: 0; + right: 0; + padding: inherit 0; + margin-top: 1em; /* Same as .prism’s padding-top */ + + background: hsla(24, 20%, 50%,.08); + background: -moz-linear-gradient(left, hsla(24, 20%, 50%,.1) 70%, hsla(24, 20%, 50%,0)); + background: -webkit-linear-gradient(left, hsla(24, 20%, 50%,.1) 70%, hsla(24, 20%, 50%,0)); + background: -o-linear-gradient(left, hsla(24, 20%, 50%,.1) 70%, hsla(24, 20%, 50%,0)); + background: linear-gradient(left, hsla(24, 20%, 50%,.1) 70%, hsla(24, 20%, 50%,0)); + + pointer-events: none; + + line-height: inherit; + white-space: pre; +} + + .line-highlight:before, + .line-highlight[data-end]:after { + content: attr(data-start); + position: absolute; + top: .4em; + left: .6em; + min-width: 1em; + padding: 0 .5em; + background-color: hsla(24, 20%, 50%,.4); + color: hsl(24, 20%, 95%); + font: bold 65%/1.5 sans-serif; + text-align: center; + vertical-align: .3em; + border-radius: 999px; + text-shadow: none; + box-shadow: 0 1px white; + } + + .line-highlight[data-end]:after { + content: attr(data-end); + top: auto; + bottom: .4em; + } +pre.line-numbers { + position: relative; + padding-left: 3.8em; + counter-reset: linenumber; +} + +pre.line-numbers > code { + position: relative; +} + +.line-numbers .line-numbers-rows { + position: absolute; + pointer-events: none; + top: 0; + font-size: 100%; + left: -3.8em; + width: 3em; /* works for line-numbers below 1000 lines */ + letter-spacing: -1px; + border-right: 1px solid #999; + + -webkit-user-select: none; + -moz-user-select: none; + -ms-user-select: none; + user-select: none; + +} + + .line-numbers-rows > span { + pointer-events: none; + display: block; + counter-increment: linenumber; + } + + .line-numbers-rows > span:before { + content: counter(linenumber); + color: #999; + display: block; + padding-right: 0.8em; + text-align: right; + } diff --git a/docs/Saml2/css/template.css b/docs/Saml2/css/template.css new file mode 100644 index 00000000..9edf5ee1 --- /dev/null +++ b/docs/Saml2/css/template.css @@ -0,0 +1,429 @@ +@import url(https://fonts.googleapis.com/css?family=Source+Sans+Pro); +@import url('http://github.com/phpdocumentor-clean-icons/style.css'); + +body { + padding-top: 40px; + background-color: #333333; +} + +a { + color: #6495ed; +} +a.anchor { + height: 40px; + margin-top: -40px; + display: block; +} + +h1, h2, h3, h4, h5, h6, .brand { + font-family: 'Source Sans Pro', sans-serif; + font-weight: normal; + letter-spacing: 0.05em; +} + +h2, h3, .detailsbar h1 { + overflow: hidden; + white-space: nowrap; + margin: 30px 0 20px 0; +} + +h2:after, h3:after, .detailsbar h1:after { + content: ''; + display: inline-block; + vertical-align: middle; + width: 100%; + height: 2px; + margin-left: 1em; + background: silver; +} + +h3 { + margin: 10px 0 20px 0; +} + +h4 { + margin: 20px 0 10px 0; + color: gray; + font-size: 18.5px; +} + +h3.public, h3.protected, h3.private { + padding-left: 10px; + text-overflow: ellipsis; +} + +.table tr:first-of-type th, .table tr:first-of-type td { + border-top: none; +} +.detailsbar { + color: #eeeeee; + background-color: #333333; + font-size: 0.9em; + overflow: hidden; + border-left: 2px solid gray; +} + +.detailsbar h1 { + font-size: 1.5em; + margin-bottom: 20px; + margin-top: 0; +} + +.detailsbar h2 { + font-size: 1.2em; + margin: 0; + padding: 0; +} + +.detailsbar h1:after { + background: gray; +} +.detailsbar h2:after, .detailsbar h3:after { + background: transparent; +} + +.detailsbar dt { + font-variant: small-caps; + text-transform: lowercase; + font-size: 1.1em; + letter-spacing: 0.1em; + color: silver; +} + +.hierarchy div:nth-of-type(2) { margin-left: 11px; } +.hierarchy div:nth-of-type(3) { margin-left: 22px; } +.hierarchy div:nth-of-type(4) { margin-left: 33px; } +.hierarchy div:nth-of-type(5) { margin-left: 44px; } +.hierarchy div:nth-of-type(6) { margin-left: 55px; } +.hierarchy div:nth-of-type(7) { margin-left: 66px; } +.hierarchy div:nth-of-type(8) { margin-left: 77px; } +.hierarchy div:nth-of-type(9) { margin-left: 88px; } +.hierarchy div:before { + content: "\f0da"; + font-family: FontAwesome; + margin-right: 5px; +} + +.row-fluid { + background-color: white; + overflow: hidden; +} + +footer.row-fluid, footer.row-fluid * { + background-color: #333333; + color: white; +} + +footer.row-fluid { + border-top: 2px dashed #555; + margin-top: 2px; +} + +.footer-sections .span4 { + border: 2px solid #555; + text-align: center; + border-radius: 10px; + margin-top: 70px; + margin-bottom: 20px; + background: #373737; +} + +.footer-sections .span4 h1 { + background: transparent; + margin-top: -30px; + margin-bottom: 20px; + font-size: 5em; +} + +.footer-sections .span4 h1 * { + background: transparent; +} + +.footer-sections .span4 div { + border-bottom-right-radius: 6px; + border-bottom-left-radius: 6px; + padding: 10px; + min-height: 40px; +} +.footer-sections .span4 div, .footer-sections .span4 div * { + background-color: #555; +} +.footer-sections .span4 ul { + text-align: left; + list-style: none; + margin: 0; + padding: 0; +} + +.content { + background-color: white; + padding-right: 20px; +} + +.content nav { + text-align: center; + border-bottom: 1px solid silver; + margin: 5px 0 20px 0; + padding-bottom: 5px; +} + +.content > h1 { + padding-bottom: 15px; +} + +.content > h1 small { + display: block; + padding-bottom: 8px; + font-size: 0.6em; +} + +.deprecated { + text-decoration: line-through; +} + +.method { + margin-bottom: 20px; +} + +.method .signature .argument { + color: maroon; + font-weight: bold; +} + +.class #summary section.row-fluid { + overflow: hidden +} + +.class #summary .heading { + font-weight: bold; + text-align: center; +} + +.class #summary section .span4 { + padding: 3px; + overflow: hidden; + margin-bottom: -9999px; + padding-bottom: 9999px; + white-space: nowrap; + text-overflow: ellipsis; + border-left: 5px solid transparent; +} + +.class #summary section.public .span4:first-of-type:before, +.class #summary section.public .span6:first-of-type:before, +h3.public:before { + font-family: FontAwesome; + content: "\f046"; + color: green; + display: inline-block; + width: 1.2em; +} + +.class #summary section .span4:first-of-type, +.class #summary section .span6:first-of-type { + padding-left: 21px; +} +.class #summary section .span4:first-of-type:before, +.class #summary section .span6:first-of-type:before { + margin-left: -21px; +} +.class #summary section.protected .span4:first-of-type:before, +.class #summary section.protected .span6:first-of-type:before, +h3.protected:before { + font-family: FontAwesome; + content: "\f132"; + color: orange; + display: inline-block; + width: 1.2em; +} + +.class #summary section.private .span4:first-of-type:before, +.class #summary section.private .span6:first-of-type:before, +h3.private:before { + font-family: FontAwesome; + content: "\f023"; + color: red; + display: inline-block; + width: 1.2em; +} + +.class #summary section em { + font-size: 0.9em; + color: silver; +} +.class #summary .inherited { + color: gray; + font-style: italic; +} + +.accordion-group { + border: none; +} + +.accordion { + margin-bottom: 0; +} + +.accordion a:hover { + text-decoration: none; + background: #333333; + color: #eeeeee; +} + +.accordion-heading .accordion-toggle:before { + content: "\f078"; + font-family: FontAwesome; + margin-right: 5px; +} + +.accordion-heading .accordion-toggle.collapsed:before { + content: "\f054"; +} +.accordion-heading .accordion-toggle { + float: left; + width: 16px; + height: 16px; + padding: 4px 2px 4px 12px; +} +.accordion-heading a { + display: block; + padding: 4px 12px; +} + +.accordion-inner a { + display: block; + padding: 4px 12px; +} + +.accordion-inner > ul a:before { + font-family: 'phpdocumentor-clean-icons'; + content: "\e001"; + margin-right: 5px; +} + +.accordion-inner li.class a:before { + content: "\e002"; +} + +.accordion-inner li.interface a:before { + content: "\e001"; +} + +.accordion-inner li.trait a:before { + content: "\e000"; +} + +.accordion-inner { + padding: 4px 0 4px 12px; +} +.accordion-inner ul { + list-style: none; + padding: 0; + margin: 0; +} + +.row-fluid .span2 { + width: 16.5%; +} + +body .modal { + width: 90%; /* desired relative width */ + left: 5%; /* (100%-width)/2 */ + /* place center */ + margin-left:auto; + margin-right:auto; +} + +.side-nav.nav-list li a { + overflow: hidden; + white-space: nowrap; + text-overflow: ellipsis; +} + +@media (min-width: 767px) { + .sidebar { + position: fixed; + top: 40px; + bottom: 0; + background-color: #f3f3f3; + left: 0; + border-right: 1px solid #e9e9e9; + overflow-y: scroll; + overflow-x: hidden; + padding-top: 10px; + } + + .sidebar::-webkit-scrollbar { + width: 10px; + } + + .sidebar::-webkit-scrollbar-thumb { + background: #cccccc; + background-clip: padding-box; + border: 3px solid #f3f3f3; + border-radius: 5px; + } + + .sidebar::-webkit-scrollbar-button { + display: none; + } + + .sidebar::-webkit-scrollbar-track { + background: #f3f3f3; + } +} + +@media (max-width: 979px) { + body { + padding-top: 0; + } +} + +@media (max-width: 767px) { + .class #summary .heading { + display: none; + } + + .detailsbar h1 { + display: none; + } + + body { + background-color: white; + } + + footer.row-fluid, footer.row-fluid * { + background-color: white; + } + + .footer-sections .span4 h1 { + color: #ccccd9; + margin-top: 0; + } + + .detailsbar { + background-color: white; + color: #333; + border: none; + } + + .row-fluid .span2 { + width: 100%; + } +} + +@media (min-width: 767px) { + .detailsbar { + min-height: 100%; + margin-bottom: -99999px; + padding-bottom: 99999px; + padding-left: 20px; + padding-top: 10px; + } +} + +@media (min-width: 1200px) { + .row-fluid .span2 { + width: 16.5%; + } +} diff --git a/docs/Saml2/files/Auth.html b/docs/Saml2/files/Auth.html new file mode 100644 index 00000000..2ff51c03 --- /dev/null +++ b/docs/Saml2/files/Auth.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          Auth.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_AuthMain class of PHP Toolkit
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/Auth.php.txt b/docs/Saml2/files/Auth.php.txt new file mode 100644 index 00000000..7fca3a11 --- /dev/null +++ b/docs/Saml2/files/Auth.php.txt @@ -0,0 +1,766 @@ +_settings = new OneLogin_Saml2_Settings($oldSettings, $spValidationOnly); + } + + /** + * Returns the settings info + * + * @return OneLogin_Saml2_Settings The settings data. + */ + public function getSettings() + { + return $this->_settings; + } + + /** + * Set the strict mode active/disable + * + * @param bool $value Strict parameter + * + * @throws OneLogin_Saml2_Error + */ + public function setStrict($value) + { + if (!is_bool($value)) { + throw new OneLogin_Saml2_Error( + 'Invalid value passed to setStrict()', + OneLogin_Saml2_Error::SETTINGS_INVALID_SYNTAX + ); + } + + $this->_settings->setStrict($value); + } + + /** + * Set schemas path + * + * @param string $path + * @return $this + */ + public function setSchemasPath($path) + { + $this->_paths['schemas'] = $path; + } + + /** + * Process the SAML Response sent by the IdP. + * + * @param string|null $requestId The ID of the AuthNRequest sent by this SP to the IdP + * + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError + */ + public function processResponse($requestId = null) + { + $this->_errors = array(); + $this->_errorReason = null; + if (isset($_POST['SAMLResponse'])) { + // AuthnResponse -- HTTP_POST Binding + $response = new OneLogin_Saml2_Response($this->_settings, $_POST['SAMLResponse']); + $this->_lastResponse = $response->getXMLDocument(); + + if ($response->isValid($requestId)) { + $this->_attributes = $response->getAttributes(); + $this->_attributesWithFriendlyName = $response->getAttributesWithFriendlyName(); + $this->_nameid = $response->getNameId(); + $this->_nameidFormat = $response->getNameIdFormat(); + $this->_nameidNameQualifier = $response->getNameIdNameQualifier(); + $this->_nameidSPNameQualifier = $response->getNameIdSPNameQualifier(); + $this->_authenticated = true; + $this->_sessionIndex = $response->getSessionIndex(); + $this->_sessionExpiration = $response->getSessionNotOnOrAfter(); + $this->_lastMessageId = $response->getId(); + $this->_lastAssertionId = $response->getAssertionId(); + $this->_lastAssertionNotOnOrAfter = $response->getAssertionNotOnOrAfter(); + } else { + $this->_errors[] = 'invalid_response'; + $this->_errorReason = $response->getError(); + } + } else { + $this->_errors[] = 'invalid_binding'; + throw new OneLogin_Saml2_Error( + 'SAML Response not found, Only supported HTTP_POST Binding', + OneLogin_Saml2_Error::SAML_RESPONSE_NOT_FOUND + ); + } + } + + /** + * Process the SAML Logout Response / Logout Request sent by the IdP. + * + * @param bool $keepLocalSession When false will destroy the local session, otherwise will keep it + * @param string|null $requestId The ID of the LogoutRequest sent by this SP to the IdP + * @param bool $retrieveParametersFromServer True if we want to use parameters from $_SERVER to validate the signature + * @param callable $cbDeleteSession Callback to be executed to delete session + * @param bool $stay True if we want to stay (returns the url string) False to redirect + * + * @return string|null + * + * @throws OneLogin_Saml2_Error + */ + public function processSLO($keepLocalSession = false, $requestId = null, $retrieveParametersFromServer = false, $cbDeleteSession = null, $stay = false) + { + $this->_errors = array(); + $this->_errorReason = null; + if (isset($_GET['SAMLResponse'])) { + $logoutResponse = new OneLogin_Saml2_LogoutResponse($this->_settings, $_GET['SAMLResponse']); + $this->_lastResponse = $logoutResponse->getXML(); + if (!$logoutResponse->isValid($requestId, $retrieveParametersFromServer)) { + $this->_errors[] = 'invalid_logout_response'; + $this->_errorReason = $logoutResponse->getError(); + } else if ($logoutResponse->getStatus() !== OneLogin_Saml2_Constants::STATUS_SUCCESS) { + $this->_errors[] = 'logout_not_success'; + } else { + $this->_lastMessageId = $logoutResponse->id; + if (!$keepLocalSession) { + if ($cbDeleteSession === null) { + OneLogin_Saml2_Utils::deleteLocalSession(); + } else { + call_user_func($cbDeleteSession); + } + } + } + } else if (isset($_GET['SAMLRequest'])) { + $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, $_GET['SAMLRequest']); + $this->_lastRequest = $logoutRequest->getXML(); + if (!$logoutRequest->isValid($retrieveParametersFromServer)) { + $this->_errors[] = 'invalid_logout_request'; + $this->_errorReason = $logoutRequest->getError(); + } else { + if (!$keepLocalSession) { + if ($cbDeleteSession === null) { + OneLogin_Saml2_Utils::deleteLocalSession(); + } else { + call_user_func($cbDeleteSession); + } + } + $inResponseTo = $logoutRequest->id; + $this->_lastMessageId = $logoutRequest->id; + $responseBuilder = new OneLogin_Saml2_LogoutResponse($this->_settings); + $responseBuilder->build($inResponseTo); + $this->_lastResponse = $responseBuilder->getXML(); + + $logoutResponse = $responseBuilder->getResponse(); + + $parameters = array('SAMLResponse' => $logoutResponse); + if (isset($_GET['RelayState'])) { + $parameters['RelayState'] = $_GET['RelayState']; + } + + $security = $this->_settings->getSecurityData(); + if (isset($security['logoutResponseSigned']) && $security['logoutResponseSigned']) { + $signature = $this->buildResponseSignature($logoutResponse, isset($parameters['RelayState'])? $parameters['RelayState']: null, $security['signatureAlgorithm']); + $parameters['SigAlg'] = $security['signatureAlgorithm']; + $parameters['Signature'] = $signature; + } + + return $this->redirectTo($this->getSLOResponseUrl(), $parameters, $stay); + } + } else { + $this->_errors[] = 'invalid_binding'; + throw new OneLogin_Saml2_Error( + 'SAML LogoutRequest/LogoutResponse not found. Only supported HTTP_REDIRECT Binding', + OneLogin_Saml2_Error::SAML_LOGOUTMESSAGE_NOT_FOUND + ); + } + } + + /** + * Redirects the user to the url past by parameter + * or to the url that we defined in our SSO Request. + * + * @param string $url The target URL to redirect the user. + * @param array $parameters Extra parameters to be passed as part of the url + * @param bool $stay True if we want to stay (returns the url string) False to redirect + * + * @return string|null + * + * @throws OneLogin_Saml2_Error + */ + public function redirectTo($url = '', $parameters = array(), $stay = false) + { + assert('is_string($url)'); + assert('is_array($parameters)'); + + if (empty($url) && isset($_REQUEST['RelayState'])) { + $url = $_REQUEST['RelayState']; + } + + return OneLogin_Saml2_Utils::redirect($url, $parameters, $stay); + } + + /** + * Checks if the user is authenticated or not. + * + * @return bool True if the user is authenticated + */ + public function isAuthenticated() + { + return $this->_authenticated; + } + + /** + * Returns the set of SAML attributes. + * + * @return array Attributes of the user. + */ + public function getAttributes() + { + return $this->_attributes; + } + + /** + * Returns the set of SAML attributes indexed by FriendlyName + * + * @return array Attributes of the user. + */ + public function getAttributesWithFriendlyName() + { + return $this->_attributesWithFriendlyName; + } + + /** + * Returns the nameID + * + * @return string The nameID of the assertion + */ + public function getNameId() + { + return $this->_nameid; + } + + /** + * Returns the nameID Format + * + * @return string The nameID Format of the assertion + */ + public function getNameIdFormat() + { + return $this->_nameidFormat; + } + + /** + * Returns the nameID NameQualifier + * + * @return string The nameID NameQualifier of the assertion + */ + public function getNameIdNameQualifier() + { + return $this->_nameidNameQualifier; + } + + /** + * Returns the nameID SP NameQualifier + * + * @return string The nameID SP NameQualifier of the assertion + */ + public function getNameIdSPNameQualifier() + { + return $this->_nameidSPNameQualifier; + } + + /** + * Returns the SessionIndex + * + * @return string|null The SessionIndex of the assertion + */ + public function getSessionIndex() + { + return $this->_sessionIndex; + } + + /** + * Returns the SessionNotOnOrAfter + * + * @return int|null The SessionNotOnOrAfter of the assertion + */ + public function getSessionExpiration() + { + return $this->_sessionExpiration; + } + + /** + * Returns if there were any error + * + * @return array Errors + */ + public function getErrors() + { + return $this->_errors; + } + + /** + * Returns the reason for the last error + * + * @return string|null Error reason + */ + public function getLastErrorReason() + { + return $this->_errorReason; + } + + /** + * Returns the requested SAML attribute + * + * @param string $name The requested attribute of the user. + * + * @return array|null Requested SAML attribute ($name). + */ + public function getAttribute($name) + { + assert('is_string($name)'); + + $value = null; + if (isset($this->_attributes[$name])) { + return $this->_attributes[$name]; + } + return $value; + } + + /** + * Returns the requested SAML attribute indexed by FriendlyName + * + * @param string $friendlyName The requested attribute of the user. + * + * @return array|null Requested SAML attribute ($friendlyName). + */ + public function getAttributeWithFriendlyName($friendlyName) + { + assert('is_string($friendlyName)'); + + $value = null; + if (isset($this->_attributesWithFriendlyName[$friendlyName])) { + return $this->_attributesWithFriendlyName[$friendlyName]; + } + return $value; + } + + /** + * Initiates the SSO process. + * + * @param string|null $returnTo The target URL the user should be returned to after login. + * @param array $parameters Extra parameters to be added to the GET + * @param bool $forceAuthn When true the AuthNRequest will set the ForceAuthn='true' + * @param bool $isPassive When true the AuthNRequest will set the Ispassive='true' + * @param bool $stay True if we want to stay (returns the url string) False to redirect + * @param bool $setNameIdPolicy When true the AuthNRueqest will set a nameIdPolicy element + * @param string $nameIdValueReq Indicates to the IdP the subject that should be authenticated + * + * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters + * + * @throws OneLogin_Saml2_Error + */ + public function login($returnTo = null, $parameters = array(), $forceAuthn = false, $isPassive = false, $stay = false, $setNameIdPolicy = true, $nameIdValueReq = null) + { + assert('is_array($parameters)'); + + $authnRequest = new OneLogin_Saml2_AuthnRequest($this->_settings, $forceAuthn, $isPassive, $setNameIdPolicy, $nameIdValueReq); + + $this->_lastRequest = $authnRequest->getXML(); + $this->_lastRequestID = $authnRequest->getId(); + + $samlRequest = $authnRequest->getRequest(); + $parameters['SAMLRequest'] = $samlRequest; + + if (!empty($returnTo)) { + $parameters['RelayState'] = $returnTo; + } else { + $parameters['RelayState'] = OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery(); + } + + $security = $this->_settings->getSecurityData(); + if (isset($security['authnRequestsSigned']) && $security['authnRequestsSigned']) { + $signature = $this->buildRequestSignature($samlRequest, $parameters['RelayState'], $security['signatureAlgorithm']); + $parameters['SigAlg'] = $security['signatureAlgorithm']; + $parameters['Signature'] = $signature; + } + return $this->redirectTo($this->getSSOurl(), $parameters, $stay); + } + + /** + * Initiates the SLO process. + * + * @param string|null $returnTo The target URL the user should be returned to after logout. + * @param array $parameters Extra parameters to be added to the GET + * @param string|null $nameId The NameID that will be set in the LogoutRequest. + * @param string|null $sessionIndex The SessionIndex (taken from the SAML Response in the SSO process). + * @param bool $stay True if we want to stay (returns the url string) False to redirect + * @param string|null $nameIdFormat The NameID Format will be set in the LogoutRequest. + * @param string|null $nameIdNameQualifier The NameID NameQualifier will be set in the LogoutRequest. + * + * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters + * + * @throws OneLogin_Saml2_Error + */ + public function logout($returnTo = null, $parameters = array(), $nameId = null, $sessionIndex = null, $stay = false, $nameIdFormat = null, $nameIdNameQualifier = null, $nameIdSPNameQualifier = null) + { + assert('is_array($parameters)'); + + $sloUrl = $this->getSLOurl(); + if (empty($sloUrl)) { + throw new OneLogin_Saml2_Error( + 'The IdP does not support Single Log Out', + OneLogin_Saml2_Error::SAML_SINGLE_LOGOUT_NOT_SUPPORTED + ); + } + + if (empty($nameId) && !empty($this->_nameid)) { + $nameId = $this->_nameid; + } + if (empty($nameIdFormat) && !empty($this->_nameidFormat)) { + $nameIdFormat = $this->_nameidFormat; + } + + $logoutRequest = new OneLogin_Saml2_LogoutRequest($this->_settings, null, $nameId, $sessionIndex, $nameIdFormat, $nameIdNameQualifier, $nameIdSPNameQualifier); + + $this->_lastRequest = $logoutRequest->getXML(); + $this->_lastRequestID = $logoutRequest->id; + + $samlRequest = $logoutRequest->getRequest(); + + $parameters['SAMLRequest'] = $samlRequest; + if (!empty($returnTo)) { + $parameters['RelayState'] = $returnTo; + } else { + $parameters['RelayState'] = OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery(); + } + + $security = $this->_settings->getSecurityData(); + if (isset($security['logoutRequestSigned']) && $security['logoutRequestSigned']) { + $signature = $this->buildRequestSignature($samlRequest, $parameters['RelayState'], $security['signatureAlgorithm']); + $parameters['SigAlg'] = $security['signatureAlgorithm']; + $parameters['Signature'] = $signature; + } + + return $this->redirectTo($sloUrl, $parameters, $stay); + } + + /** + * Gets the IdP SSO url. + * + * @return string The url of the IdP Single Sign On Service + */ + public function getSSOurl() + { + return $this->_settings->getIdPSSOUrl(); + } + + /** + * Gets the IdP SLO url. + * + * @return string|null The url of the IdP Single Logout Service + */ + public function getSLOurl() + { + return $this->_settings->getIdPSLOUrl(); + } + + /** + * Gets the IdP SLO response url. + * + * @return string|null The response url of the IdP Single Logout Service + */ + public function getSLOResponseUrl() + { + return $this->_settings->getIdPSLOResponseUrl(); + } + + /** + * Gets the ID of the last AuthNRequest or LogoutRequest generated by the Service Provider. + * + * @return string The ID of the Request SAML message. + */ + public function getLastRequestID() + { + return $this->_lastRequestID; + } + + /** + * Generates the Signature for a SAML Request + * + * @param string $samlRequest The SAML Request + * @param string $relayState The RelayState + * @param string $signAlgorithm Signature algorithm method + * + * @return string A base64 encoded signature + * + * @throws OneLogin_Saml2_Error + */ + public function buildRequestSignature($samlRequest, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA1) + { + return $this->buildMessageSignature($samlRequest, $relayState, $signAlgorithm, "SAMLRequest"); + } + + /** + * Generates the Signature for a SAML Response + * + * @param string $samlResponse The SAML Response + * @param string $relayState The RelayState + * @param string $signAlgorithm Signature algorithm method + * + * @return string A base64 encoded signature + * + * @throws OneLogin_Saml2_Error + */ + public function buildResponseSignature($samlResponse, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA1) + { + return $this->buildMessageSignature($samlResponse, $relayState, $signAlgorithm, "SAMLResponse"); + } + + /** + * Generates the Signature for a SAML Response + * + * @param string $samlMessage The SAML Response + * @param string $relayState The RelayState + * @param string $signAlgorithm Signature algorithm method + * @param string $type "SAMLRequest" or "SAMLResponse" + * + * @return string A base64 encoded signature + * + * @throws OneLogin_Saml2_Error + */ + private function buildMessageSignature($samlMessage, $relayState, $signAlgorithm = XMLSecurityKey::RSA_SHA256, $type = "SAMLRequest") + { + $key = $this->_settings->getSPkey(); + if (empty($key)) { + if ($type == "SAMLRequest") { + $errorMsg = "Trying to sign the SAML Request but can't load the SP private key"; + } else { + $errorMsg = "Trying to sign the SAML Response but can't load the SP private key"; + } + + throw new OneLogin_Saml2_Error($errorMsg, OneLogin_Saml2_Error::PRIVATE_KEY_NOT_FOUND); + } + + $objKey = new XMLSecurityKey($signAlgorithm, array('type' => 'private')); + $objKey->loadKey($key, false); + + $security = $this->_settings->getSecurityData(); + if ($security['lowercaseUrlencoding']) { + $msg = $type.'='.rawurlencode($samlMessage); + if (isset($relayState)) { + $msg .= '&RelayState='.rawurlencode($relayState); + } + $msg .= '&SigAlg=' . rawurlencode($signAlgorithm); + } else { + $msg = $type.'='.urlencode($samlMessage); + if (isset($relayState)) { + $msg .= '&RelayState='.urlencode($relayState); + } + $msg .= '&SigAlg=' . urlencode($signAlgorithm); + } + $signature = $objKey->signData($msg); + return base64_encode($signature); + } + + /** + * @return string The ID of the last message processed + */ + public function getLastMessageId() + { + return $this->_lastMessageId; + } + + /** + * @return string The ID of the last assertion processed + */ + public function getLastAssertionId() + { + return $this->_lastAssertionId; + } + + /** + * @return int The NotOnOrAfter value of the valid + * SubjectConfirmationData node (if any) + * of the last assertion processed + */ + public function getLastAssertionNotOnOrAfter() + { + return $this->_lastAssertionNotOnOrAfter; + } + + /** + * Returns the most recently-constructed/processed + * XML SAML request (AuthNRequest, LogoutRequest) + * + * @return string The Request XML + */ + public function getLastRequestXML() + { + return $this->_lastRequest; + } + + /** + * Returns the most recently-constructed/processed + * XML SAML response (SAMLResponse, LogoutResponse). + * If the SAMLResponse was encrypted, by default tries + * to return the decrypted XML. + * + * @return string|null The Response XML + */ + public function getLastResponseXML() + { + $response = null; + if (isset($this->_lastResponse)) { + if (is_string($this->_lastResponse)) { + $response = $this->_lastResponse; + } else { + $response = $this->_lastResponse->saveXML(); + } + } + + return $response; + } +} + diff --git a/docs/Saml2/files/AuthnRequest.html b/docs/Saml2/files/AuthnRequest.html new file mode 100644 index 00000000..40b82e5b --- /dev/null +++ b/docs/Saml2/files/AuthnRequest.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          AuthnRequest.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_AuthnRequestSAML 2 Authentication Request
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/AuthnRequest.php.txt b/docs/Saml2/files/AuthnRequest.php.txt new file mode 100644 index 00000000..cbd67e04 --- /dev/null +++ b/docs/Saml2/files/AuthnRequest.php.txt @@ -0,0 +1,199 @@ +_settings = $settings; + + $spData = $this->_settings->getSPData(); + $security = $this->_settings->getSecurityData(); + + $id = OneLogin_Saml2_Utils::generateUniqueID(); + $issueInstant = OneLogin_Saml2_Utils::parseTime2SAML(time()); + + $subjectStr = ""; + if (isset($nameIdValueReq)) { + $subjectStr = << + {$nameIdValueReq} + + +SUBJECT; + } + + $nameIdPolicyStr = ''; + if ($setNameIdPolicy) { + $nameIDPolicyFormat = $spData['NameIDFormat']; + if (isset($security['wantNameIdEncrypted']) && $security['wantNameIdEncrypted']) { + $nameIDPolicyFormat = OneLogin_Saml2_Constants::NAMEID_ENCRYPTED; + } + + $nameIdPolicyStr = << +NAMEIDPOLICY; + } + + + $providerNameStr = ''; + $organizationData = $settings->getOrganization(); + if (!empty($organizationData)) { + $langs = array_keys($organizationData); + if (in_array('en-US', $langs)) { + $lang = 'en-US'; + } else { + $lang = $langs[0]; + } + if (isset($organizationData[$lang]['displayname']) && !empty($organizationData[$lang]['displayname'])) { + $providerNameStr = << + urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport + +REQUESTEDAUTHN; + } else { + $requestedAuthnStr .= " \n"; + foreach ($security['requestedAuthnContext'] as $contextValue) { + $requestedAuthnStr .= " ".$contextValue."\n"; + } + $requestedAuthnStr .= ' '; + } + } + + $spEntityId = htmlspecialchars($spData['entityId'], ENT_QUOTES); + $acsUrl = htmlspecialchars($spData['assertionConsumerService']['url'], ENT_QUOTES); + $destination = $this->_settings->getIdPSSOUrl(); + $request = << + {$spEntityId}{$subjectStr}{$nameIdPolicyStr}{$requestedAuthnStr} + +AUTHNREQUEST; + + $this->_id = $id; + $this->_authnRequest = $request; + } + + /** + * Returns deflated, base64 encoded, unsigned AuthnRequest. + * + * @param bool|null $deflate Whether or not we should 'gzdeflate' the request body before we return it. + * + * @return string + */ + public function getRequest($deflate = null) + { + $subject = $this->_authnRequest; + + if (is_null($deflate)) { + $deflate = $this->_settings->shouldCompressRequests(); + } + + if ($deflate) { + $subject = gzdeflate($this->_authnRequest); + } + + $base64Request = base64_encode($subject); + return $base64Request; + } + + /** + * Returns the AuthNRequest ID. + * + * @return string + */ + public function getId() + { + return $this->_id; + } + + /** + * Returns the XML that will be sent as part of the request + * + * @return string + */ + public function getXML() + { + return $this->_authnRequest; + } +} + diff --git a/docs/Saml2/files/Constants.html b/docs/Saml2/files/Constants.html new file mode 100644 index 00000000..d8ffef80 --- /dev/null +++ b/docs/Saml2/files/Constants.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          Constants.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_ConstantsConstants of PHP Toolkit
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/Constants.php.txt b/docs/Saml2/files/Constants.php.txt new file mode 100644 index 00000000..e0542818 --- /dev/null +++ b/docs/Saml2/files/Constants.php.txt @@ -0,0 +1,72 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          Error.php

          +

          + + + + +

          Classes

          + + + + + + + + + +
          OneLogin_Saml2_ErrorError class of PHP Toolkit
          OneLogin_Saml2_ValidationErrorThis class implements another custom Exception handler, +related to exceptions that happens during validation process.
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/Error.php.txt b/docs/Saml2/files/Error.php.txt new file mode 100644 index 00000000..f3a6fe70 --- /dev/null +++ b/docs/Saml2/files/Error.php.txt @@ -0,0 +1,122 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          IdPMetadataParser.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_IdPMetadataParserIdP Metadata Parser of PHP Toolkit
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/IdPMetadataParser.php.txt b/docs/Saml2/files/IdPMetadataParser.php.txt new file mode 100644 index 00000000..c8464b82 --- /dev/null +++ b/docs/Saml2/files/IdPMetadataParser.php.txt @@ -0,0 +1,233 @@ +getMessage()); + } + return $metadataInfo; + } + + /** + * Get IdP Metadata Info from File + * + * @param string $filepath File path + * @param string $entityId Entity Id of the desired IdP, if no + * entity Id is provided and the XML + * metadata contains more than one + * IDPSSODescriptor, the first is returned + * @param string $desiredNameIdFormat If available on IdP metadata, use that nameIdFormat + * @param string $desiredSSOBinding Parse specific binding SSO endpoint. + * @param string $desiredSLOBinding Parse specific binding SLO endpoint. + * + * @return array metadata info in php-saml settings format + */ + public static function parseFileXML($filepath, $entityId = null, $desiredNameIdFormat = null, $desiredSSOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, $desiredSLOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) + { + $metadataInfo = array(); + + try { + if (file_exists($filepath)) { + $data = file_get_contents($filepath); + $metadataInfo = self::parseXML($data, $entityId, $desiredNameIdFormat, $desiredSSOBinding, $desiredSLOBinding); + } + } catch (Exception $e) { + throw new Exception('Error on parseFileXML. '.$e->getMessage()); + } + return $metadataInfo; + } + + /** + * Get IdP Metadata Info from URL + * + * @param string $xml XML that contains IdP metadata + * @param string $entityId Entity Id of the desired IdP, if no + * entity Id is provided and the XML + * metadata contains more than one + * IDPSSODescriptor, the first is returned + * @param string $desiredNameIdFormat If available on IdP metadata, use that nameIdFormat + * @param string $desiredSSOBinding Parse specific binding SSO endpoint. + * @param string $desiredSLOBinding Parse specific binding SLO endpoint. + * + * @return array metadata info in php-saml settings format + * + * @throws Exception + */ + public static function parseXML($xml, $entityId = null, $desiredNameIdFormat = null, $desiredSSOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT, $desiredSLOBinding = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT) + { + $metadataInfo = array(); + + $dom = new DOMDocument(); + $dom->preserveWhiteSpace = false; + $dom->formatOutput = true; + try { + $dom = OneLogin_Saml2_Utils::loadXML($dom, $xml); + if (!$dom) { + throw new Exception('Error parsing metadata'); + } + + $customIdPStr = ''; + if (!empty($entityId)) { + $customIdPStr = '[@entityID="' . $entityId . '"]'; + } + $idpDescryptorXPath = '//md:EntityDescriptor' . $customIdPStr . '/md:IDPSSODescriptor'; + + $idpDescriptorNodes = OneLogin_Saml2_Utils::query($dom, $idpDescryptorXPath); + + if (isset($idpDescriptorNodes) && $idpDescriptorNodes->length > 0) { + $metadataInfo['idp'] = array(); + + $idpDescriptor = $idpDescriptorNodes->item(0); + + if (empty($entityId) && $idpDescriptor->parentNode->hasAttribute('entityID')) { + $entityId = $idpDescriptor->parentNode->getAttribute('entityID'); + } + + if (!empty($entityId)) { + $metadataInfo['idp']['entityId'] = $entityId; + } + + $ssoNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleSignOnService[@Binding="'.$desiredSSOBinding.'"]', $idpDescriptor); + if ($ssoNodes->length < 1) { + $ssoNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleSignOnService', $idpDescriptor); + } + if ($ssoNodes->length > 0) { + $metadataInfo['idp']['singleSignOnService'] = array( + 'url' => $ssoNodes->item(0)->getAttribute('Location'), + 'binding' => $ssoNodes->item(0)->getAttribute('Binding') + ); + } + + $sloNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleLogoutService[@Binding="'.$desiredSLOBinding.'"]', $idpDescriptor); + if ($sloNodes->length < 1) { + $sloNodes = OneLogin_Saml2_Utils::query($dom, './md:SingleLogoutService', $idpDescriptor); + } + if ($sloNodes->length > 0) { + $metadataInfo['idp']['singleLogoutService'] = array( + 'url' => $sloNodes->item(0)->getAttribute('Location'), + 'binding' => $sloNodes->item(0)->getAttribute('Binding') + ); + + if ($sloNodes->item(0)->hasAttribute('ResponseLocation')) { + $metadataInfo['idp']['singleLogoutService']['responseUrl'] = $sloNodes->item(0)->getAttribute('ResponseLocation'); + } + } + + $keyDescriptorCertSigningNodes = OneLogin_Saml2_Utils::query($dom, './md:KeyDescriptor[not(contains(@use, "encryption"))]/ds:KeyInfo/ds:X509Data/ds:X509Certificate', $idpDescriptor); + + $keyDescriptorCertEncryptionNodes = OneLogin_Saml2_Utils::query($dom, './md:KeyDescriptor[not(contains(@use, "signing"))]/ds:KeyInfo/ds:X509Data/ds:X509Certificate', $idpDescriptor); + + if (!empty($keyDescriptorCertSigningNodes) || !empty($keyDescriptorCertEncryptionNodes)) { + $metadataInfo['idp']['x509certMulti'] = array(); + if (!empty($keyDescriptorCertSigningNodes)) { + foreach ($keyDescriptorCertSigningNodes as $keyDescriptorCertSigningNode) { + $metadataInfo['idp']['x509certMulti']['signing'][] = OneLogin_Saml2_Utils::formatCert($keyDescriptorCertSigningNode->nodeValue, false); + } + } + if (!empty($keyDescriptorCertEncryptionNodes)) { + foreach ($keyDescriptorCertEncryptionNodes as $keyDescriptorCertEncryptionNode) { + $metadataInfo['idp']['x509certMulti']['encryption'][] = OneLogin_Saml2_Utils::formatCert($keyDescriptorCertEncryptionNode->nodeValue, false); + } + } + + $idpCertdata = $metadataInfo['idp']['x509certMulti']; + if ((count($idpCertdata) == 1 and + ((isset($idpCertdata['signing']) and count($idpCertdata['signing']) == 1) or (isset($idpCertdata['encryption']) and count($idpCertdata['encryption']) == 1))) or + ((isset($idpCertdata['signing']) && count($idpCertdata['signing']) == 1) && isset($idpCertdata['encryption']) && count($idpCertdata['encryption']) == 1 && strcmp($idpCertdata['signing'][0], $idpCertdata['encryption'][0]) == 0)) { + if (isset($metadataInfo['idp']['x509certMulti']['signing'][0])) { + $metadataInfo['idp']['x509cert'] = $metadataInfo['idp']['x509certMulti']['signing'][0]; + } else { + $metadataInfo['idp']['x509cert'] = $metadataInfo['idp']['x509certMulti']['encryption'][0]; + } + unset($metadataInfo['idp']['x509certMulti']); + } + } + + $nameIdFormatNodes = OneLogin_Saml2_Utils::query($dom, './md:NameIDFormat', $idpDescriptor); + if ($nameIdFormatNodes->length > 0) { + $metadataInfo['sp']['NameIDFormat'] = $nameIdFormatNodes->item(0)->nodeValue; + if (!empty($desiredNameIdFormat)) { + foreach ($nameIdFormatNodes as $nameIdFormatNode) { + if (strcmp($nameIdFormatNode->nodeValue, $desiredNameIdFormat) == 0) { + $metadataInfo['sp']['NameIDFormat'] = $nameIdFormatNode->nodeValue; + break; + } + } + } + } + } + } catch (Exception $e) { + throw new Exception('Error parsing metadata. '.$e->getMessage()); + } + + return $metadataInfo; + } + + /** + * Inject metadata info into php-saml settings array + * + * @param array $settings php-saml settings array + * @param array $metadataInfo array metadata info + * + * @return array settings + */ + public static function injectIntoSettings($settings, $metadataInfo) + { + if (isset($metadataInfo['idp']) && isset($settings['idp'])) { + if (isset($metadataInfo['idp']['x509certMulti']) && !empty($metadataInfo['idp']['x509certMulti']) && isset($settings['idp']['x509cert'])) { + unset($settings['idp']['x509cert']); + } + + if (isset($metadataInfo['idp']['x509cert']) && !empty($metadataInfo['idp']['x509cert']) && isset($settings['idp']['x509certMulti'])) { + unset($settings['idp']['x509certMulti']); + } + } + + return array_replace_recursive($settings, $metadataInfo); + } +} + diff --git a/docs/Saml2/files/LogoutRequest.html b/docs/Saml2/files/LogoutRequest.html new file mode 100644 index 00000000..42f0d973 --- /dev/null +++ b/docs/Saml2/files/LogoutRequest.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          LogoutRequest.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_LogoutRequestSAML 2 Logout Request
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/LogoutRequest.php.txt b/docs/Saml2/files/LogoutRequest.php.txt new file mode 100644 index 00000000..84e4485b --- /dev/null +++ b/docs/Saml2/files/LogoutRequest.php.txt @@ -0,0 +1,453 @@ +_settings = $settings; + + $baseURL = $this->_settings->getBaseURL(); + if (!empty($baseURL)) { + OneLogin_Saml2_Utils::setBaseURL($baseURL); + } + + if (!isset($request) || empty($request)) { + $spData = $this->_settings->getSPData(); + $idpData = $this->_settings->getIdPData(); + $security = $this->_settings->getSecurityData(); + + $id = OneLogin_Saml2_Utils::generateUniqueID(); + $this->id = $id; + + $issueInstant = OneLogin_Saml2_Utils::parseTime2SAML(time()); + + $cert = null; + if (isset($security['nameIdEncrypted']) && $security['nameIdEncrypted']) { + $existsMultiX509Enc = isset($idpData['x509certMulti']) && isset($idpData['x509certMulti']['encryption']) && !empty($idpData['x509certMulti']['encryption']); + + if ($existsMultiX509Enc) { + $cert = $idpData['x509certMulti']['encryption'][0]; + } else { + $cert = $idpData['x509cert']; + } + } + + if (!empty($nameId)) { + if (empty($nameIdFormat) && + $spData['NameIDFormat'] != OneLogin_Saml2_Constants::NAMEID_UNSPECIFIED) { + $nameIdFormat = $spData['NameIDFormat']; + } + } else { + $nameId = $idpData['entityId']; + $nameIdFormat = OneLogin_Saml2_Constants::NAMEID_ENTITY; + } + + /* From saml-core-2.0-os 8.3.6, when the entity Format is used: + "The NameQualifier, SPNameQualifier, and SPProvidedID attributes MUST be omitted. + */ + if (!empty($nameIdFormat) && $nameIdFormat == OneLogin_Saml2_Constants::NAMEID_ENTITY) { + $nameIdNameQualifier = null; + $nameIdSPNameQualifier = null; + } + // NameID Format UNSPECIFIED omitted + if (!empty($nameIdFormat) && $nameIdFormat == OneLogin_Saml2_Constants::NAMEID_UNSPECIFIED) { + $nameIdFormat = null; + } + + $nameIdObj = OneLogin_Saml2_Utils::generateNameId( + $nameId, + $nameIdSPNameQualifier, + $nameIdFormat, + $cert, + $nameIdNameQualifier + ); + + $sessionIndexStr = isset($sessionIndex) ? "{$sessionIndex}" : ""; + + $spEntityId = htmlspecialchars($spData['entityId'], ENT_QUOTES); + $destination = $this->_settings->getIdPSLOUrl(); + $logoutRequest = << + {$spEntityId} + {$nameIdObj} + {$sessionIndexStr} + +LOGOUTREQUEST; + } else { + $decoded = base64_decode($request); + // We try to inflate + $inflated = @gzinflate($decoded); + if ($inflated != false) { + $logoutRequest = $inflated; + } else { + $logoutRequest = $decoded; + } + $this->id = self::getID($logoutRequest); + } + $this->_logoutRequest = $logoutRequest; + } + + + /** + * Returns the Logout Request defated, base64encoded, unsigned + * + * @param bool|null $deflate Whether or not we should 'gzdeflate' the request body before we return it. + * + * @return string Deflated base64 encoded Logout Request + */ + public function getRequest($deflate = null) + { + $subject = $this->_logoutRequest; + + if (is_null($deflate)) { + $deflate = $this->_settings->shouldCompressRequests(); + } + + if ($deflate) { + $subject = gzdeflate($this->_logoutRequest); + } + + return base64_encode($subject); + } + + /** + * Returns the ID of the Logout Request. + * + * @param string|DOMDocument $request Logout Request Message + * + * @return string ID + * + * @throws OneLogin_Saml2_Error + */ + public static function getID($request) + { + if ($request instanceof DOMDocument) { + $dom = $request; + } else { + $dom = new DOMDocument(); + $dom = OneLogin_Saml2_Utils::loadXML($dom, $request); + + if (false === $dom) { + throw new OneLogin_Saml2_Error( + "LogoutRequest could not be processed", + OneLogin_Saml2_Error::SAML_LOGOUTREQUEST_INVALID + ); + } + } + + $id = $dom->documentElement->getAttribute('ID'); + return $id; + } + + /** + * Gets the NameID Data of the the Logout Request. + * + * @param string|DOMDocument $request Logout Request Message + * @param string|null $key The SP key + * + * @return array Name ID Data (Value, Format, NameQualifier, SPNameQualifier) + * + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError + */ + public static function getNameIdData($request, $key = null) + { + if ($request instanceof DOMDocument) { + $dom = $request; + } else { + $dom = new DOMDocument(); + $dom = OneLogin_Saml2_Utils::loadXML($dom, $request); + } + + $encryptedEntries = OneLogin_Saml2_Utils::query($dom, '/samlp:LogoutRequest/saml:EncryptedID'); + + if ($encryptedEntries->length == 1) { + $encryptedDataNodes = $encryptedEntries->item(0)->getElementsByTagName('EncryptedData'); + $encryptedData = $encryptedDataNodes->item(0); + + if (empty($key)) { + throw new OneLogin_Saml2_Error( + "Private Key is required in order to decrypt the NameID, check settings", + OneLogin_Saml2_Error::PRIVATE_KEY_NOT_FOUND + ); + } + + $seckey = new XMLSecurityKey(XMLSecurityKey::RSA_1_5, array('type'=>'private')); + $seckey->loadKey($key); + + $nameId = OneLogin_Saml2_Utils::decryptElement($encryptedData, $seckey); + + } else { + $entries = OneLogin_Saml2_Utils::query($dom, '/samlp:LogoutRequest/saml:NameID'); + if ($entries->length == 1) { + $nameId = $entries->item(0); + } + } + + if (!isset($nameId)) { + throw new OneLogin_Saml2_ValidationError( + "NameID not found in the Logout Request", + OneLogin_Saml2_ValidationError::NO_NAMEID + ); + } + + $nameIdData = array(); + $nameIdData['Value'] = $nameId->nodeValue; + foreach (array('Format', 'SPNameQualifier', 'NameQualifier') as $attr) { + if ($nameId->hasAttribute($attr)) { + $nameIdData[$attr] = $nameId->getAttribute($attr); + } + } + + return $nameIdData; + } + + /** + * Gets the NameID of the Logout Request. + * + * @param string|DOMDocument $request Logout Request Message + * @param string|null $key The SP key + * + * @return string Name ID Value + * + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError + */ + public static function getNameId($request, $key = null) + { + $nameId = self::getNameIdData($request, $key); + return $nameId['Value']; + } + + /** + * Gets the Issuer of the Logout Request. + * + * @param string|DOMDocument $request Logout Request Message + * + * @return string|null $issuer The Issuer + * @throws Exception + */ + public static function getIssuer($request) + { + if ($request instanceof DOMDocument) { + $dom = $request; + } else { + $dom = new DOMDocument(); + $dom = OneLogin_Saml2_Utils::loadXML($dom, $request); + } + + $issuer = null; + $issuerNodes = OneLogin_Saml2_Utils::query($dom, '/samlp:LogoutRequest/saml:Issuer'); + if ($issuerNodes->length == 1) { + $issuer = $issuerNodes->item(0)->textContent; + } + return $issuer; + } + + /** + * Gets the SessionIndexes from the Logout Request. + * Notice: Our Constructor only support 1 SessionIndex but this parser + * extracts an array of all the SessionIndex found on a + * Logout Request, that could be many. + * + * @param string|DOMDocument $request Logout Request Message + * + * @return array The SessionIndex value + * + * @throws Exception + */ + public static function getSessionIndexes($request) + { + if ($request instanceof DOMDocument) { + $dom = $request; + } else { + $dom = new DOMDocument(); + $dom = OneLogin_Saml2_Utils::loadXML($dom, $request); + } + + $sessionIndexes = array(); + $sessionIndexNodes = OneLogin_Saml2_Utils::query($dom, '/samlp:LogoutRequest/samlp:SessionIndex'); + foreach ($sessionIndexNodes as $sessionIndexNode) { + $sessionIndexes[] = $sessionIndexNode->textContent; + } + return $sessionIndexes; + } + + /** + * Checks if the Logout Request received is valid. + * + * @param bool $retrieveParametersFromServer + * + * @return bool If the Logout Request is or not valid + */ + public function isValid($retrieveParametersFromServer = false) + { + $this->_error = null; + try { + $dom = new DOMDocument(); + $dom = OneLogin_Saml2_Utils::loadXML($dom, $this->_logoutRequest); + + $idpData = $this->_settings->getIdPData(); + $idPEntityId = $idpData['entityId']; + + if ($this->_settings->isStrict()) { + $security = $this->_settings->getSecurityData(); + + if ($security['wantXMLValidation']) { + $res = OneLogin_Saml2_Utils::validateXML($dom, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); + if (!$res instanceof DOMDocument) { + throw new OneLogin_Saml2_ValidationError( + "Invalid SAML Logout Request. Not match the saml-schema-protocol-2.0.xsd", + OneLogin_Saml2_ValidationError::INVALID_XML_FORMAT + ); + } + } + + $currentURL = OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery(); + + // Check NotOnOrAfter + if ($dom->documentElement->hasAttribute('NotOnOrAfter')) { + $na = OneLogin_Saml2_Utils::parseSAML2Time($dom->documentElement->getAttribute('NotOnOrAfter')); + if ($na <= time()) { + throw new OneLogin_Saml2_ValidationError( + "Could not validate timestamp: expired. Check system clock.", + OneLogin_Saml2_ValidationError::RESPONSE_EXPIRED + ); + } + } + + // Check destination + if ($dom->documentElement->hasAttribute('Destination')) { + $destination = $dom->documentElement->getAttribute('Destination'); + if (empty($destination)) { + if (!$security['relaxDestinationValidation']) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutRequest has an empty Destination value", + OneLogin_Saml2_ValidationError::EMPTY_DESTINATION + ); + } + } else { + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURL); + if (strncmp($destination, $currentURL, $urlComparisonLength) !== 0) { + $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURLNoRouted); + + if (strncmp($destination, $currentURLNoRouted, $urlComparisonLength) !== 0) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutRequest was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); + } + } + } + } + + $nameId = static::getNameId($dom, $this->_settings->getSPkey()); + + // Check issuer + $issuer = static::getIssuer($dom); + if (!empty($issuer) && $issuer != $idPEntityId) { + throw new OneLogin_Saml2_ValidationError( + "Invalid issuer in the Logout Request", + OneLogin_Saml2_ValidationError::WRONG_ISSUER + ); + } + + if ($security['wantMessagesSigned'] && !isset($_GET['Signature'])) { + throw new OneLogin_Saml2_ValidationError( + "The Message of the Logout Request is not signed and the SP require it", + OneLogin_Saml2_ValidationError::NO_SIGNED_MESSAGE + ); + } + } + + if (isset($_GET['Signature'])) { + $signatureValid = OneLogin_Saml2_Utils::validateBinarySign("SAMLRequest", $_GET, $idpData, $retrieveParametersFromServer); + if (!$signatureValid) { + throw new OneLogin_Saml2_ValidationError( + "Signature validation failed. Logout Request rejected", + OneLogin_Saml2_ValidationError::INVALID_SIGNATURE + ); + } + } + + return true; + } catch (Exception $e) { + $this->_error = $e->getMessage(); + $debug = $this->_settings->isDebugActive(); + if ($debug) { + echo htmlentities($this->_error); + } + return false; + } + } + + /** + * After execute a validation process, if fails this method returns the cause + * + * @return string Cause + */ + public function getError() + { + return $this->_error; + } + + /** + * Returns the XML that will be sent as part of the request + * or that was received at the SP + * + * @return string + */ + public function getXML() + { + return $this->_logoutRequest; + } +} + diff --git a/docs/Saml2/files/LogoutResponse.html b/docs/Saml2/files/LogoutResponse.html new file mode 100644 index 00000000..b9edd4ec --- /dev/null +++ b/docs/Saml2/files/LogoutResponse.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          LogoutResponse.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_LogoutResponseSAML 2 Logout Response
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/LogoutResponse.php.txt b/docs/Saml2/files/LogoutResponse.php.txt new file mode 100644 index 00000000..68d6da84 --- /dev/null +++ b/docs/Saml2/files/LogoutResponse.php.txt @@ -0,0 +1,312 @@ +_settings = $settings; + + $baseURL = $this->_settings->getBaseURL(); + if (!empty($baseURL)) { + OneLogin_Saml2_Utils::setBaseURL($baseURL); + } + + if ($response) { + $decoded = base64_decode($response); + $inflated = @gzinflate($decoded); + if ($inflated != false) { + $this->_logoutResponse = $inflated; + } else { + $this->_logoutResponse = $decoded; + } + $this->document = new DOMDocument(); + $this->document = OneLogin_Saml2_Utils::loadXML($this->document, $this->_logoutResponse); + + if (false === $this->document) { + throw new OneLogin_Saml2_Error( + "LogoutResponse could not be processed", + OneLogin_Saml2_Error::SAML_LOGOUTRESPONSE_INVALID + ); + } + + if ($this->document->documentElement->hasAttribute('ID')) { + $this->id = $this->document->documentElement->getAttribute('ID'); + } + } + } + + /** + * Gets the Issuer of the Logout Response. + * + * @return string|null $issuer The Issuer + */ + public function getIssuer() + { + $issuer = null; + $issuerNodes = $this->_query('/samlp:LogoutResponse/saml:Issuer'); + if ($issuerNodes->length == 1) { + $issuer = $issuerNodes->item(0)->textContent; + } + return $issuer; + } + + /** + * Gets the Status of the Logout Response. + * + * @return string|null The Status + */ + public function getStatus() + { + $entries = $this->_query('/samlp:LogoutResponse/samlp:Status/samlp:StatusCode'); + if ($entries->length != 1) { + return null; + } + $status = $entries->item(0)->getAttribute('Value'); + return $status; + } + + /** + * Determines if the SAML LogoutResponse is valid + * + * @param string|null $requestId The ID of the LogoutRequest sent by this SP to the IdP + * @param bool $retrieveParametersFromServer + * + * @return bool Returns if the SAML LogoutResponse is or not valid + */ + public function isValid($requestId = null, $retrieveParametersFromServer = false) + { + $this->_error = null; + try { + $idpData = $this->_settings->getIdPData(); + $idPEntityId = $idpData['entityId']; + + if ($this->_settings->isStrict()) { + $security = $this->_settings->getSecurityData(); + + if ($security['wantXMLValidation']) { + $res = OneLogin_Saml2_Utils::validateXML($this->document, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); + if (!$res instanceof DOMDocument) { + throw new OneLogin_Saml2_ValidationError( + "Invalid SAML Logout Response. Not match the saml-schema-protocol-2.0.xsd", + OneLogin_Saml2_ValidationError::INVALID_XML_FORMAT + ); + } + } + + // Check if the InResponseTo of the Logout Response matchs the ID of the Logout Request (requestId) if provided + if (isset($requestId) && $this->document->documentElement->hasAttribute('InResponseTo')) { + $inResponseTo = $this->document->documentElement->getAttribute('InResponseTo'); + if ($requestId != $inResponseTo) { + throw new OneLogin_Saml2_ValidationError( + "The InResponseTo of the Logout Response: $inResponseTo, does not match the ID of the Logout request sent by the SP: $requestId", + OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO + ); + } + } + + // Check issuer + $issuer = $this->getIssuer(); + if (!empty($issuer) && $issuer != $idPEntityId) { + throw new OneLogin_Saml2_ValidationError( + "Invalid issuer in the Logout Response", + OneLogin_Saml2_ValidationError::WRONG_ISSUER + ); + } + + $currentURL = OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery(); + + // Check destination + if ($this->document->documentElement->hasAttribute('Destination')) { + $destination = $this->document->documentElement->getAttribute('Destination'); + if (empty($destination)) { + if (!$security['relaxDestinationValidation']) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutResponse has an empty Destination value", + OneLogin_Saml2_ValidationError::EMPTY_DESTINATION + ); + } + } else { + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURL); + if (strncmp($destination, $currentURL, $urlComparisonLength) !== 0) { + $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURLNoRouted); + + if (strncmp($destination, $currentURLNoRouted, $urlComparisonLength) !== 0) { + throw new OneLogin_Saml2_ValidationError( + "The LogoutResponse was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); + } + } + } + } + + if ($security['wantMessagesSigned'] && !isset($_GET['Signature'])) { + throw new OneLogin_Saml2_ValidationError( + "The Message of the Logout Response is not signed and the SP requires it", + OneLogin_Saml2_ValidationError::NO_SIGNED_MESSAGE + ); + } + } + + if (isset($_GET['Signature'])) { + $signatureValid = OneLogin_Saml2_Utils::validateBinarySign("SAMLResponse", $_GET, $idpData, $retrieveParametersFromServer); + if (!$signatureValid) { + throw new OneLogin_Saml2_ValidationError( + "Signature validation failed. Logout Response rejected", + OneLogin_Saml2_ValidationError::INVALID_SIGNATURE + ); + } + } + return true; + } catch (Exception $e) { + $this->_error = $e->getMessage(); + $debug = $this->_settings->isDebugActive(); + if ($debug) { + echo htmlentities($this->_error); + } + return false; + } + } + + /** + * Extracts a node from the DOMDocument (Logout Response Menssage) + * + * @param string $query Xpath Expresion + * + * @return DOMNodeList The queried node + */ + private function _query($query) + { + return OneLogin_Saml2_Utils::query($this->document, $query); + + } + + /** + * Generates a Logout Response object. + * + * @param string $inResponseTo InResponseTo value for the Logout Response. + */ + public function build($inResponseTo) + { + + $spData = $this->_settings->getSPData(); + $idpData = $this->_settings->getIdPData(); + + $this->id = OneLogin_Saml2_Utils::generateUniqueID(); + $issueInstant = OneLogin_Saml2_Utils::parseTime2SAML(time()); + + $spEntityId = htmlspecialchars($spData['entityId'], ENT_QUOTES); + $destination = $this->_settings->getIdPSLOResponseUrl(); + $logoutResponse = << + {$spEntityId} + + + + +LOGOUTRESPONSE; + $this->_logoutResponse = $logoutResponse; + } + + /** + * Returns a Logout Response object. + * + * @param bool|null $deflate Whether or not we should 'gzdeflate' the response body before we return it. + * + * @return string Logout Response deflated and base64 encoded + */ + public function getResponse($deflate = null) + { + $subject = $this->_logoutResponse; + + if (is_null($deflate)) { + $deflate = $this->_settings->shouldCompressResponses(); + } + + if ($deflate) { + $subject = gzdeflate($this->_logoutResponse); + } + return base64_encode($subject); + } + + /** + * After execute a validation process, if fails this method returns the cause. + * + * @return string Cause + */ + public function getError() + { + return $this->_error; + } + + /** + * @return string the ID of the Response + */ + public function getId() + { + return $this->id; + } + + /** + * Returns the XML that will be sent as part of the response + * or that was received at the SP + * + * @return string + */ + public function getXML() + { + return $this->_logoutResponse; + } +} + diff --git a/docs/Saml2/files/Metadata.html b/docs/Saml2/files/Metadata.html new file mode 100644 index 00000000..92dbf0bb --- /dev/null +++ b/docs/Saml2/files/Metadata.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          Metadata.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_MetadataMetadata lib of PHP Toolkit
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/Metadata.php.txt b/docs/Saml2/files/Metadata.php.txt new file mode 100644 index 00000000..4a1a79fc --- /dev/null +++ b/docs/Saml2/files/Metadata.php.txt @@ -0,0 +1,249 @@ + + +SLS_TEMPLATE; + } + + if ($authnsign) { + $strAuthnsign = 'true'; + } else { + $strAuthnsign = 'false'; + } + + if ($wsign) { + $strWsign = 'true'; + } else { + $strWsign = 'false'; + } + + $strOrganization = ''; + + if (!empty($organization)) { + $organizationInfoNames = array(); + $organizationInfoDisplaynames = array(); + $organizationInfoUrls = array(); + foreach ($organization as $lang => $info) { + $organizationInfoNames[] = <<{$info['name']} +ORGANIZATION_NAME; + $organizationInfoDisplaynames[] = <<{$info['displayname']} +ORGANIZATION_DISPLAY; + $organizationInfoUrls[] = <<{$info['url']} +ORGANIZATION_URL; + } + $orgData = implode("\n", $organizationInfoNames)."\n".implode("\n", $organizationInfoDisplaynames)."\n".implode("\n", $organizationInfoUrls); + $strOrganization = << +{$orgData} + +ORGANIZATIONSTR; + } + + $strContacts = ''; + if (!empty($contacts)) { + $contactsInfo = array(); + foreach ($contacts as $type => $info) { + $contactsInfo[] = << + {$info['givenName']} + {$info['emailAddress']} + +CONTACT; + } + $strContacts = "\n".implode("\n", $contactsInfo); + } + + $strAttributeConsumingService = ''; + if (isset($sp['attributeConsumingService'])) { + $attrCsDesc = ''; + if (isset($sp['attributeConsumingService']['serviceDescription'])) { + $attrCsDesc = sprintf( + ' %s' . PHP_EOL, + $sp['attributeConsumingService']['serviceDescription'] + ); + } + if (!isset($sp['attributeConsumingService']['serviceName'])) { + $sp['attributeConsumingService']['serviceName'] = 'Service'; + } + $requestedAttributeData = array(); + foreach ($sp['attributeConsumingService']['requestedAttributes'] as $attribute) { + $requestedAttributeStr = sprintf(' {$attrValue} +ATTRIBUTEVALUE; + } + $reqAttrAuxStr .= "\n "; + } + + $requestedAttributeData[] = $requestedAttributeStr . $reqAttrAuxStr; + } + + $requestedAttributeStr = implode(PHP_EOL, $requestedAttributeData); + $strAttributeConsumingService = << + {$sp['attributeConsumingService']['serviceName']} +{$attrCsDesc}{$requestedAttributeStr} + +METADATA_TEMPLATE; + } + + $spEntityId = htmlspecialchars($sp['entityId'], ENT_QUOTES); + $acsUrl = htmlspecialchars($sp['assertionConsumerService']['url'], ENT_QUOTES); + $metadata = << + + +{$sls} {$sp['NameIDFormat']} + + {$strAttributeConsumingService} + {$strOrganization}{$strContacts} + +METADATA_TEMPLATE; + return $metadata; + } + + /** + * Signs the metadata with the key/cert provided + * + * @param string $metadata SAML Metadata XML + * @param string $key x509 key + * @param string $cert x509 cert + * @param string $signAlgorithm Signature algorithm method + * @param string $digestAlgorithm Digest algorithm method + * + * @return string Signed Metadata + * + * @throws Exception + */ + public static function signMetadata($metadata, $key, $cert, $signAlgorithm = XMLSecurityKey::RSA_SHA1, $digestAlgorithm = XMLSecurityDSig::SHA1) + { + return OneLogin_Saml2_Utils::addSign($metadata, $key, $cert, $signAlgorithm, $digestAlgorithm); + } + + /** + * Adds the x509 descriptors (sign/encriptation) to the metadata + * The same cert will be used for sign/encrypt + * + * @param string $metadata SAML Metadata XML + * @param string $cert x509 cert + * @param bool $wantsEncrypted Whether to include the KeyDescriptor for encryption + * + * @return string Metadata with KeyDescriptors + * + * @throws Exception + */ + public static function addX509KeyDescriptors($metadata, $cert, $wantsEncrypted = true) + { + $xml = new DOMDocument(); + $xml->preserveWhiteSpace = false; + $xml->formatOutput = true; + try { + $xml = OneLogin_Saml2_Utils::loadXML($xml, $metadata); + if (!$xml) { + throw new Exception('Error parsing metadata'); + } + } catch (Exception $e) { + throw new Exception('Error parsing metadata. '.$e->getMessage()); + } + + $formatedCert = OneLogin_Saml2_Utils::formatCert($cert, false); + $x509Certificate = $xml->createElementNS(OneLogin_Saml2_Constants::NS_DS, 'X509Certificate', $formatedCert); + + $keyData = $xml->createElementNS(OneLogin_Saml2_Constants::NS_DS, 'ds:X509Data'); + $keyData->appendChild($x509Certificate); + + $keyInfo = $xml->createElementNS(OneLogin_Saml2_Constants::NS_DS, 'ds:KeyInfo'); + $keyInfo->appendChild($keyData); + + $keyDescriptor = $xml->createElementNS(OneLogin_Saml2_Constants::NS_MD, "md:KeyDescriptor"); + + $SPSSODescriptor = $xml->getElementsByTagName('SPSSODescriptor')->item(0); + $SPSSODescriptor->insertBefore($keyDescriptor->cloneNode(), $SPSSODescriptor->firstChild); + if ($wantsEncrypted === true) { + $SPSSODescriptor->insertBefore($keyDescriptor->cloneNode(), $SPSSODescriptor->firstChild); + } + + $signing = $xml->getElementsByTagName('KeyDescriptor')->item(0); + $signing->setAttribute('use', 'signing'); + $signing->appendChild($keyInfo); + + if ($wantsEncrypted === true) { + $encryption = $xml->getElementsByTagName('KeyDescriptor')->item(1); + $encryption->setAttribute('use', 'encryption'); + + $encryption->appendChild($keyInfo->cloneNode(true)); + } + + return $xml->saveXML(); + } +} + diff --git a/docs/Saml2/files/Response.html b/docs/Saml2/files/Response.html new file mode 100644 index 00000000..169842dc --- /dev/null +++ b/docs/Saml2/files/Response.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          Response.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_ResponseSAML 2 Authentication Response
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/Response.php.txt b/docs/Saml2/files/Response.php.txt new file mode 100644 index 00000000..eb22b241 --- /dev/null +++ b/docs/Saml2/files/Response.php.txt @@ -0,0 +1,1198 @@ +_settings = $settings; + + $baseURL = $this->_settings->getBaseURL(); + if (!empty($baseURL)) { + OneLogin_Saml2_Utils::setBaseURL($baseURL); + } + + $this->response = base64_decode($response); + + $this->document = new DOMDocument(); + $this->document = OneLogin_Saml2_Utils::loadXML($this->document, $this->response); + if (!$this->document) { + throw new OneLogin_Saml2_ValidationError( + "SAML Response could not be processed", + OneLogin_Saml2_ValidationError::INVALID_XML_FORMAT + ); + } + + // Quick check for the presence of EncryptedAssertion + $encryptedAssertionNodes = $this->document->getElementsByTagName('EncryptedAssertion'); + if ($encryptedAssertionNodes->length !== 0) { + $this->decryptedDocument = clone $this->document; + $this->encrypted = true; + $this->decryptedDocument = $this->_decryptAssertion($this->decryptedDocument); + } + } + + /** + * Determines if the SAML Response is valid using the certificate. + * + * @param string|null $requestId The ID of the AuthNRequest sent by this SP to the IdP + * + * @return bool Validate the document + */ + public function isValid($requestId = null) + { + $this->_error = null; + try { + // Check SAML version + if ($this->document->documentElement->getAttribute('Version') != '2.0') { + throw new OneLogin_Saml2_ValidationError( + "Unsupported SAML version", + OneLogin_Saml2_ValidationError::UNSUPPORTED_SAML_VERSION + ); + } + + if (!$this->document->documentElement->hasAttribute('ID')) { + throw new OneLogin_Saml2_ValidationError( + "Missing ID attribute on SAML Response", + OneLogin_Saml2_ValidationError::MISSING_ID + ); + } + + $this->checkStatus(); + + $singleAssertion = $this->validateNumAssertions(); + if (!$singleAssertion) { + throw new OneLogin_Saml2_ValidationError( + "SAML Response must contain 1 assertion", + OneLogin_Saml2_ValidationError::WRONG_NUMBER_OF_ASSERTIONS + ); + } + + $idpData = $this->_settings->getIdPData(); + $idPEntityId = $idpData['entityId']; + $spData = $this->_settings->getSPData(); + $spEntityId = $spData['entityId']; + + $signedElements = $this->processSignedElements(); + + $responseTag = '{'.OneLogin_Saml2_Constants::NS_SAMLP.'}Response'; + $assertionTag = '{'.OneLogin_Saml2_Constants::NS_SAML.'}Assertion'; + + $hasSignedResponse = in_array($responseTag, $signedElements); + $hasSignedAssertion = in_array($assertionTag, $signedElements); + + if ($this->_settings->isStrict()) { + $security = $this->_settings->getSecurityData(); + + if ($security['wantXMLValidation']) { + $errorXmlMsg = "Invalid SAML Response. Not match the saml-schema-protocol-2.0.xsd"; + $res = OneLogin_Saml2_Utils::validateXML($this->document, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); + if (!$res instanceof DOMDocument) { + throw new OneLogin_Saml2_ValidationError( + $errorXmlMsg, + OneLogin_Saml2_ValidationError::INVALID_XML_FORMAT + ); + } + + # If encrypted, check also the decrypted document + if ($this->encrypted) { + $res = OneLogin_Saml2_Utils::validateXML($this->decryptedDocument, 'saml-schema-protocol-2.0.xsd', $this->_settings->isDebugActive(), $this->_settings->getSchemasPath()); + if (!$res instanceof DOMDocument) { + throw new OneLogin_Saml2_ValidationError( + $errorXmlMsg, + OneLogin_Saml2_ValidationError::INVALID_XML_FORMAT + ); + } + } + + } + + $currentURL = OneLogin_Saml2_Utils::getSelfRoutedURLNoQuery(); + + $responseInResponseTo = null; + if ($this->document->documentElement->hasAttribute('InResponseTo')) { + $responseInResponseTo = $this->document->documentElement->getAttribute('InResponseTo'); + } + + if (!isset($requestId) && isset($responseInResponseTo) && $security['rejectUnsolicitedResponsesWithInResponseTo']) { + throw new OneLogin_Saml2_ValidationError( + "The Response has an InResponseTo attribute: " . $responseInResponseTo . " while no InResponseTo was expected", + OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO + ); + } + + // Check if the InResponseTo of the Response matchs the ID of the AuthNRequest (requestId) if provided + if (isset($requestId) && $requestId != $responseInResponseTo) { + if ($responseInResponseTo == null) { + throw new OneLogin_Saml2_ValidationError( + "No InResponseTo at the Response, but it was provided the requestId related to the AuthNRequest sent by the SP: $requestId", + OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO + ); + } else { + throw new OneLogin_Saml2_ValidationError( + "The InResponseTo of the Response: $responseInResponseTo, does not match the ID of the AuthNRequest sent by the SP: $requestId", + OneLogin_Saml2_ValidationError::WRONG_INRESPONSETO + ); + } + } + + if (!$this->encrypted && $security['wantAssertionsEncrypted']) { + throw new OneLogin_Saml2_ValidationError( + "The assertion of the Response is not encrypted and the SP requires it", + OneLogin_Saml2_ValidationError::NO_ENCRYPTED_ASSERTION + ); + } + + if ($security['wantNameIdEncrypted']) { + $encryptedIdNodes = $this->_queryAssertion('/saml:Subject/saml:EncryptedID/xenc:EncryptedData'); + if ($encryptedIdNodes->length != 1) { + throw new OneLogin_Saml2_ValidationError( + "The NameID of the Response is not encrypted and the SP requires it", + OneLogin_Saml2_ValidationError::NO_ENCRYPTED_NAMEID + ); + } + } + + // Validate Conditions element exists + if (!$this->checkOneCondition()) { + throw new OneLogin_Saml2_ValidationError( + "The Assertion must include a Conditions element", + OneLogin_Saml2_ValidationError::MISSING_CONDITIONS + ); + } + + // Validate Asserion timestamps + $this->validateTimestamps(); + + // Validate AuthnStatement element exists and is unique + if (!$this->checkOneAuthnStatement()) { + throw new OneLogin_Saml2_ValidationError( + "The Assertion must include an AuthnStatement element", + OneLogin_Saml2_ValidationError::WRONG_NUMBER_OF_AUTHSTATEMENTS + ); + } + + // EncryptedAttributes are not supported + $encryptedAttributeNodes = $this->_queryAssertion('/saml:AttributeStatement/saml:EncryptedAttribute'); + if ($encryptedAttributeNodes->length > 0) { + throw new OneLogin_Saml2_ValidationError( + "There is an EncryptedAttribute in the Response and this SP not support them", + OneLogin_Saml2_ValidationError::ENCRYPTED_ATTRIBUTES + ); + } + + // Check destination + if ($this->document->documentElement->hasAttribute('Destination')) { + $destination = trim($this->document->documentElement->getAttribute('Destination')); + if (empty($destination)) { + if (!$security['relaxDestinationValidation']) { + throw new OneLogin_Saml2_ValidationError( + "The response has an empty Destination value", + OneLogin_Saml2_ValidationError::EMPTY_DESTINATION + ); + } + } else { + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURL); + if (strncmp($destination, $currentURL, $urlComparisonLength) !== 0) { + $currentURLNoRouted = OneLogin_Saml2_Utils::getSelfURLNoQuery(); + $urlComparisonLength = $security['destinationStrictlyMatches'] ? strlen($destination) : strlen($currentURLNoRouted); + + if (strncmp($destination, $currentURLNoRouted, $urlComparisonLength) !== 0) { + throw new OneLogin_Saml2_ValidationError( + "The response was received at $currentURL instead of $destination", + OneLogin_Saml2_ValidationError::WRONG_DESTINATION + ); + } + } + } + } + + // Check audience + $validAudiences = $this->getAudiences(); + if (!empty($validAudiences) && !in_array($spEntityId, $validAudiences, true)) { + throw new OneLogin_Saml2_ValidationError( + sprintf( + "Invalid audience for this Response (expected '%s', got '%s')", + $spEntityId, + implode(',', $validAudiences) + ), + OneLogin_Saml2_ValidationError::WRONG_AUDIENCE + ); + } + + // Check the issuers + $issuers = $this->getIssuers(); + foreach ($issuers as $issuer) { + $trimmedIssuer = trim($issuer); + if (empty($trimmedIssuer) || $trimmedIssuer !== $idPEntityId) { + throw new OneLogin_Saml2_ValidationError( + "Invalid issuer in the Assertion/Response (expected '$idPEntityId', got '$trimmedIssuer')", + OneLogin_Saml2_ValidationError::WRONG_ISSUER + ); + } + } + + // Check the session Expiration + $sessionExpiration = $this->getSessionNotOnOrAfter(); + if (!empty($sessionExpiration) && $sessionExpiration + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT <= time()) { + throw new OneLogin_Saml2_ValidationError( + "The attributes have expired, based on the SessionNotOnOrAfter of the AttributeStatement of this Response", + OneLogin_Saml2_ValidationError::SESSION_EXPIRED + ); + } + + // Check the SubjectConfirmation, at least one SubjectConfirmation must be valid + $anySubjectConfirmation = false; + $subjectConfirmationNodes = $this->_queryAssertion('/saml:Subject/saml:SubjectConfirmation'); + foreach ($subjectConfirmationNodes as $scn) { + if ($scn->hasAttribute('Method') && $scn->getAttribute('Method') != OneLogin_Saml2_Constants::CM_BEARER) { + continue; + } + $subjectConfirmationDataNodes = $scn->getElementsByTagName('SubjectConfirmationData'); + if ($subjectConfirmationDataNodes->length == 0) { + continue; + } else { + $scnData = $subjectConfirmationDataNodes->item(0); + if ($scnData->hasAttribute('InResponseTo')) { + $inResponseTo = $scnData->getAttribute('InResponseTo'); + if (isset($responseInResponseTo) && $responseInResponseTo != $inResponseTo) { + continue; + } + } + if ($scnData->hasAttribute('Recipient')) { + $recipient = $scnData->getAttribute('Recipient'); + if (!empty($recipient) && strpos($recipient, $currentURL) === false) { + continue; + } + } + if ($scnData->hasAttribute('NotOnOrAfter')) { + $noa = OneLogin_Saml2_Utils::parseSAML2Time($scnData->getAttribute('NotOnOrAfter')); + if ($noa + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT <= time()) { + continue; + } + } + if ($scnData->hasAttribute('NotBefore')) { + $nb = OneLogin_Saml2_Utils::parseSAML2Time($scnData->getAttribute('NotBefore')); + if ($nb > time() + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT) { + continue; + } + } + + // Save NotOnOrAfter value + if ($scnData->hasAttribute('NotOnOrAfter')) { + $this->_validSCDNotOnOrAfter = $noa; + } + $anySubjectConfirmation = true; + break; + } + } + + if (!$anySubjectConfirmation) { + throw new OneLogin_Saml2_ValidationError( + "A valid SubjectConfirmation was not found on this Response", + OneLogin_Saml2_ValidationError::WRONG_SUBJECTCONFIRMATION + ); + } + + if ($security['wantAssertionsSigned'] && !$hasSignedAssertion) { + throw new OneLogin_Saml2_ValidationError( + "The Assertion of the Response is not signed and the SP requires it", + OneLogin_Saml2_ValidationError::NO_SIGNED_ASSERTION + ); + } + + if ($security['wantMessagesSigned'] && !$hasSignedResponse) { + throw new OneLogin_Saml2_ValidationError( + "The Message of the Response is not signed and the SP requires it", + OneLogin_Saml2_ValidationError::NO_SIGNED_MESSAGE + ); + } + } + + // Detect case not supported + if ($this->encrypted) { + $encryptedIDNodes = OneLogin_Saml2_Utils::query($this->decryptedDocument, '/samlp:Response/saml:Assertion/saml:Subject/saml:EncryptedID'); + if ($encryptedIDNodes->length > 0) { + throw new OneLogin_Saml2_ValidationError( + 'SAML Response that contains a an encrypted Assertion with encrypted nameId is not supported.', + OneLogin_Saml2_ValidationError::NOT_SUPPORTED + ); + } + } + + if (empty($signedElements) || (!$hasSignedResponse && !$hasSignedAssertion)) { + throw new OneLogin_Saml2_ValidationError( + 'No Signature found. SAML Response rejected', + OneLogin_Saml2_ValidationError::NO_SIGNATURE_FOUND + ); + } else { + $cert = $idpData['x509cert']; + $fingerprint = $idpData['certFingerprint']; + $fingerprintalg = $idpData['certFingerprintAlgorithm']; + + $multiCerts = null; + $existsMultiX509Sign = isset($idpData['x509certMulti']) && isset($idpData['x509certMulti']['signing']) && !empty($idpData['x509certMulti']['signing']); + + if ($existsMultiX509Sign) { + $multiCerts = $idpData['x509certMulti']['signing']; + } + + # If find a Signature on the Response, validates it checking the original response + if ($hasSignedResponse && !OneLogin_Saml2_Utils::validateSign($this->document, $cert, $fingerprint, $fingerprintalg, OneLogin_Saml2_Utils::RESPONSE_SIGNATURE_XPATH, $multiCerts)) { + throw new OneLogin_Saml2_ValidationError( + "Signature validation failed. SAML Response rejected", + OneLogin_Saml2_ValidationError::INVALID_SIGNATURE + ); + } + + # If find a Signature on the Assertion (decrypted assertion if was encrypted) + $documentToCheckAssertion = $this->encrypted ? $this->decryptedDocument : $this->document; + if ($hasSignedAssertion && !OneLogin_Saml2_Utils::validateSign($documentToCheckAssertion, $cert, $fingerprint, $fingerprintalg, OneLogin_Saml2_Utils::ASSERTION_SIGNATURE_XPATH, $multiCerts)) { + throw new OneLogin_Saml2_ValidationError( + "Signature validation failed. SAML Response rejected", + OneLogin_Saml2_ValidationError::INVALID_SIGNATURE + ); + } + } + return true; + } catch (Exception $e) { + $this->_error = $e->getMessage(); + $debug = $this->_settings->isDebugActive(); + if ($debug) { + echo htmlentities($this->_error); + } + return false; + } + } + + /** + * @return string|null the ID of the Response + */ + public function getId() + { + $id = null; + if ($this->document->documentElement->hasAttribute('ID')) { + $id = $this->document->documentElement->getAttribute('ID'); + } + return $id; + } + + /** + * @return string|null the ID of the assertion in the Response + * + * @throws InvalidArgumentException + */ + public function getAssertionId() + { + if (!$this->validateNumAssertions()) { + throw new InvalidArgumentException("SAML Response must contain 1 Assertion."); + } + $assertionNodes = $this->_queryAssertion(""); + $id = null; + if ($assertionNodes->length == 1 && $assertionNodes->item(0)->hasAttribute('ID')) { + $id = $assertionNodes->item(0)->getAttribute('ID'); + } + return $id; + } + + /** + * @return int the NotOnOrAfter value of the valid SubjectConfirmationData + * node if any + */ + public function getAssertionNotOnOrAfter() + { + return $this->_validSCDNotOnOrAfter; + } + + /** + * Checks if the Status is success + * + * @throws OneLogin_Saml2_ValidationError If status is not success + */ + public function checkStatus() + { + $status = OneLogin_Saml2_Utils::getStatus($this->document); + + if (isset($status['code']) && $status['code'] !== OneLogin_Saml2_Constants::STATUS_SUCCESS) { + $explodedCode = explode(':', $status['code']); + $printableCode = array_pop($explodedCode); + + $statusExceptionMsg = 'The status code of the Response was not Success, was '.$printableCode; + if (!empty($status['msg'])) { + $statusExceptionMsg .= ' -> '.$status['msg']; + } + throw new OneLogin_Saml2_ValidationError( + $statusExceptionMsg, + OneLogin_Saml2_ValidationError::STATUS_CODE_IS_NOT_SUCCESS + ); + } + } + + /** + * Checks that the samlp:Response/saml:Assertion/saml:Conditions element exists and is unique. + * + * @return boolean true if the Conditions element exists and is unique + */ + public function checkOneCondition() + { + $entries = $this->_queryAssertion("/saml:Conditions"); + if ($entries->length == 1) { + return true; + } else { + return false; + } + } + + /** + * Checks that the samlp:Response/saml:Assertion/saml:AuthnStatement element exists and is unique. + * + * @return boolean true if the AuthnStatement element exists and is unique + */ + public function checkOneAuthnStatement() + { + $entries = $this->_queryAssertion("/saml:AuthnStatement"); + if ($entries->length == 1) { + return true; + } else { + return false; + } + } + + /** + * Gets the audiences. + * + * @return array @audience The valid audiences of the response + */ + public function getAudiences() + { + $audiences = array(); + + $entries = $this->_queryAssertion('/saml:Conditions/saml:AudienceRestriction/saml:Audience'); + foreach ($entries as $entry) { + $value = trim($entry->textContent); + if (!empty($value)) { + $audiences[] = $value; + } + } + + return array_unique($audiences); + } + + /** + * Gets the Issuers (from Response and Assertion). + * + * @return array @issuers The issuers of the assertion/response + * + * @throws OneLogin_Saml2_ValidationError + */ + public function getIssuers() + { + $issuers = array(); + + $responseIssuer = OneLogin_Saml2_Utils::query($this->document, '/samlp:Response/saml:Issuer'); + if ($responseIssuer->length > 0) { + if ($responseIssuer->length == 1) { + $issuers[] = $responseIssuer->item(0)->textContent; + } else { + throw new OneLogin_Saml2_ValidationError( + "Issuer of the Response is multiple.", + OneLogin_Saml2_ValidationError::ISSUER_MULTIPLE_IN_RESPONSE + ); + } + } + + $assertionIssuer = $this->_queryAssertion('/saml:Issuer'); + if ($assertionIssuer->length == 1) { + $issuers[] = $assertionIssuer->item(0)->textContent; + } else { + throw new OneLogin_Saml2_ValidationError( + "Issuer of the Assertion not found or multiple.", + OneLogin_Saml2_ValidationError::ISSUER_NOT_FOUND_IN_ASSERTION + ); + } + + return array_unique($issuers); + } + + /** + * Gets the NameID Data provided by the SAML response from the IdP. + * + * @return array Name ID Data (Value, Format, NameQualifier, SPNameQualifier) + * + * @throws OneLogin_Saml2_ValidationError + */ + public function getNameIdData() + { + $encryptedIdDataEntries = $this->_queryAssertion('/saml:Subject/saml:EncryptedID/xenc:EncryptedData'); + + if ($encryptedIdDataEntries->length == 1) { + $encryptedData = $encryptedIdDataEntries->item(0); + + $key = $this->_settings->getSPkey(); + $seckey = new XMLSecurityKey(XMLSecurityKey::RSA_1_5, array('type'=>'private')); + $seckey->loadKey($key); + + $nameId = OneLogin_Saml2_Utils::decryptElement($encryptedData, $seckey); + + } else { + $entries = $this->_queryAssertion('/saml:Subject/saml:NameID'); + if ($entries->length == 1) { + $nameId = $entries->item(0); + } + } + + $nameIdData = array(); + + if (!isset($nameId)) { + $security = $this->_settings->getSecurityData(); + if ($security['wantNameId']) { + throw new OneLogin_Saml2_ValidationError( + "NameID not found in the assertion of the Response", + OneLogin_Saml2_ValidationError::NO_NAMEID + ); + } + } else { + if ($this->_settings->isStrict() && empty($nameId->nodeValue)) { + throw new OneLogin_Saml2_ValidationError( + "An empty NameID value found", + OneLogin_Saml2_ValidationError::EMPTY_NAMEID + ); + } + $nameIdData['Value'] = $nameId->nodeValue; + + foreach (array('Format', 'SPNameQualifier', 'NameQualifier') as $attr) { + if ($nameId->hasAttribute($attr)) { + if ($this->_settings->isStrict() && $attr == 'SPNameQualifier') { + $spData = $this->_settings->getSPData(); + $spEntityId = $spData['entityId']; + if ($spEntityId != $nameId->getAttribute($attr)) { + throw new OneLogin_Saml2_ValidationError( + "The SPNameQualifier value mismatch the SP entityID value.", + OneLogin_Saml2_ValidationError::SP_NAME_QUALIFIER_NAME_MISMATCH + ); + } + } + $nameIdData[$attr] = $nameId->getAttribute($attr); + } + } + } + + return $nameIdData; + } + + /** + * Gets the NameID provided by the SAML response from the IdP. + * + * @return string|null Name ID Value + * + * @throws OneLogin_Saml2_ValidationError + */ + public function getNameId() + { + $nameIdvalue = null; + $nameIdData = $this->getNameIdData(); + if (!empty($nameIdData) && isset($nameIdData['Value'])) { + $nameIdvalue = $nameIdData['Value']; + } + return $nameIdvalue; + } + + /** + * Gets the NameID Format provided by the SAML response from the IdP. + * + * @return string|null Name ID Format + * + * @throws OneLogin_Saml2_ValidationError + */ + public function getNameIdFormat() + { + $nameIdFormat = null; + $nameIdData = $this->getNameIdData(); + if (!empty($nameIdData) && isset($nameIdData['Format'])) { + $nameIdFormat = $nameIdData['Format']; + } + return $nameIdFormat; + } + + /** + * Gets the NameID NameQualifier provided by the SAML response from the IdP. + * + * @return string|null Name ID NameQualifier + * + * @throws OneLogin_Saml2_ValidationError + */ + public function getNameIdNameQualifier() + { + $nameIdNameQualifier = null; + $nameIdData = $this->getNameIdData(); + if (!empty($nameIdData) && isset($nameIdData['NameQualifier'])) { + $nameIdNameQualifier = $nameIdData['NameQualifier']; + } + return $nameIdNameQualifier; + } + + /** + * Gets the NameID SP NameQualifier provided by the SAML response from the IdP. + * + * @return string|null NameID SP NameQualifier + * + * @throws ValidationError + */ + public function getNameIdSPNameQualifier() + { + $nameIdSPNameQualifier = null; + $nameIdData = $this->getNameIdData(); + if (!empty($nameIdData) && isset($nameIdData['SPNameQualifier'])) { + $nameIdSPNameQualifier = $nameIdData['SPNameQualifier']; + } + return $nameIdSPNameQualifier; + } + + /** + * Gets the SessionNotOnOrAfter from the AuthnStatement. + * Could be used to set the local session expiration + * + * @return int|null The SessionNotOnOrAfter value + * + * @throws Exception + */ + public function getSessionNotOnOrAfter() + { + $notOnOrAfter = null; + $entries = $this->_queryAssertion('/saml:AuthnStatement[@SessionNotOnOrAfter]'); + if ($entries->length !== 0) { + $notOnOrAfter = OneLogin_Saml2_Utils::parseSAML2Time($entries->item(0)->getAttribute('SessionNotOnOrAfter')); + } + return $notOnOrAfter; + } + + /** + * Gets the SessionIndex from the AuthnStatement. + * Could be used to be stored in the local session in order + * to be used in a future Logout Request that the SP could + * send to the SP, to set what specific session must be deleted + * + * @return string|null The SessionIndex value + */ + + public function getSessionIndex() + { + $sessionIndex = null; + $entries = $this->_queryAssertion('/saml:AuthnStatement[@SessionIndex]'); + if ($entries->length !== 0) { + $sessionIndex = $entries->item(0)->getAttribute('SessionIndex'); + } + return $sessionIndex; + } + + /** + * Gets the Attributes from the AttributeStatement element. + * + * @return array The attributes of the SAML Assertion + * + * @throws OneLogin_Saml2_ValidationError + */ + public function getAttributes() + { + return $this->_getAttributesByKeyName('Name'); + } + + /** + * Gets the Attributes from the AttributeStatement element using their FriendlyName. + * + * @return array The attributes of the SAML Assertion + * + * @throws OneLogin_Saml2_ValidationError + */ + public function getAttributesWithFriendlyName() + { + return $this->_getAttributesByKeyName('FriendlyName'); + } + + /** + * @param string $keyName + * + * @return array + * + * @throws OneLogin_Saml2_ValidationError + */ + private function _getAttributesByKeyName($keyName = "Name") + { + $attributes = array(); + + $entries = $this->_queryAssertion('/saml:AttributeStatement/saml:Attribute'); + + $security = $this->_settings->getSecurityData(); + $allowRepeatAttributeName = $security['allowRepeatAttributeName']; + + /** @var $entry DOMNode */ + foreach ($entries as $entry) { + $attributeKeyNode = $entry->attributes->getNamedItem($keyName); + + if ($attributeKeyNode === null) { + continue; + } + + $attributeKeyName = $attributeKeyNode->nodeValue; + + if (in_array($attributeKeyName, array_keys($attributes), true)) { + if (!$allowRepeatAttributeName) { + throw new OneLogin_Saml2_ValidationError( + "Found an Attribute element with duplicated ".$keyName, + OneLogin_Saml2_ValidationError::DUPLICATED_ATTRIBUTE_NAME_FOUND + ); + } + } + + $attributeValues = array(); + foreach ($entry->childNodes as $childNode) { + $tagName = ($childNode->prefix ? $childNode->prefix.':' : '') . 'AttributeValue'; + if ($childNode->nodeType == XML_ELEMENT_NODE && $childNode->tagName === $tagName) { + $attributeValues[] = $childNode->nodeValue; + } + } + + if (in_array($attributeKeyName, array_keys($attributes), true)) { + $attributes[$attributeKeyName] = array_merge($attributes[$attributeKeyName], $attributeValues); + } else { + $attributes[$attributeKeyName] = $attributeValues; + } + } + return $attributes; + } + + /** + * Verifies that the document only contains a single Assertion (encrypted or not). + * + * @return bool TRUE if the document passes. + */ + public function validateNumAssertions() + { + $encryptedAssertionNodes = $this->document->getElementsByTagName('EncryptedAssertion'); + $assertionNodes = $this->document->getElementsByTagName('Assertion'); + + $valid = $assertionNodes->length + $encryptedAssertionNodes->length == 1; + + if ($this->encrypted) { + $assertionNodes = $this->decryptedDocument->getElementsByTagName('Assertion'); + $valid = $valid && $assertionNodes->length == 1; + } + + return $valid; + } + + /** + * Verifies the signature nodes: + * - Checks that are Response or Assertion + * - Check that IDs and reference URI are unique and consistent. + * + * @return array Signed element tags + * + * @throws OneLogin_Saml2_ValidationError + */ + public function processSignedElements() + { + $signedElements = array(); + $verifiedSeis = array(); + $verifiedIds = array(); + + if ($this->encrypted) { + $signNodes = $this->decryptedDocument->getElementsByTagName('Signature'); + } else { + $signNodes = $this->document->getElementsByTagName('Signature'); + } + foreach ($signNodes as $signNode) { + $responseTag = '{'.OneLogin_Saml2_Constants::NS_SAMLP.'}Response'; + $assertionTag = '{'.OneLogin_Saml2_Constants::NS_SAML.'}Assertion'; + + $signedElement = '{'.$signNode->parentNode->namespaceURI.'}'.$signNode->parentNode->localName; + + if ($signedElement != $responseTag && $signedElement != $assertionTag) { + throw new OneLogin_Saml2_ValidationError( + "Invalid Signature Element $signedElement SAML Response rejected", + OneLogin_Saml2_ValidationError::WRONG_SIGNED_ELEMENT + ); + } + + # Check that reference URI matches the parent ID and no duplicate References or IDs + $idValue = $signNode->parentNode->getAttribute('ID'); + if (empty($idValue)) { + throw new OneLogin_Saml2_ValidationError( + 'Signed Element must contain an ID. SAML Response rejected', + OneLogin_Saml2_ValidationError::ID_NOT_FOUND_IN_SIGNED_ELEMENT + ); + } + + if (in_array($idValue, $verifiedIds)) { + throw new OneLogin_Saml2_ValidationError( + 'Duplicated ID. SAML Response rejected', + OneLogin_Saml2_ValidationError::DUPLICATED_ID_IN_SIGNED_ELEMENTS + ); + } + $verifiedIds[] = $idValue; + + $ref = $signNode->getElementsByTagName('Reference'); + if ($ref->length == 1) { + $ref = $ref->item(0); + $sei = $ref->getAttribute('URI'); + if (!empty($sei)) { + $sei = substr($sei, 1); + + if ($sei != $idValue) { + throw new OneLogin_Saml2_ValidationError( + 'Found an invalid Signed Element. SAML Response rejected', + OneLogin_Saml2_ValidationError::INVALID_SIGNED_ELEMENT + ); + } + + if (in_array($sei, $verifiedSeis)) { + throw new OneLogin_Saml2_ValidationError( + 'Duplicated Reference URI. SAML Response rejected', + OneLogin_Saml2_ValidationError::DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS + ); + } + $verifiedSeis[] = $sei; + } + } else { + throw new OneLogin_Saml2_ValidationError( + 'Unexpected number of Reference nodes found for signature. SAML Response rejected.', + OneLogin_Saml2_ValidationError::UNEXPECTED_REFERENCE + ); + } + $signedElements[] = $signedElement; + } + + // Check SignedElements + if (!empty($signedElements) && !$this->validateSignedElements($signedElements)) { + throw new OneLogin_Saml2_ValidationError( + 'Found an unexpected Signature Element. SAML Response rejected', + OneLogin_Saml2_ValidationError::UNEXPECTED_SIGNED_ELEMENTS + ); + } + return $signedElements; + } + + /** + * Verifies that the document is still valid according Conditions Element. + * + * @return bool + * + * @throws Exception + * @throws OneLogin_Saml2_ValidationError + */ + public function validateTimestamps() + { + if ($this->encrypted) { + $document = $this->decryptedDocument; + } else { + $document = $this->document; + } + + $timestampNodes = $document->getElementsByTagName('Conditions'); + for ($i = 0; $i < $timestampNodes->length; $i++) { + $nbAttribute = $timestampNodes->item($i)->attributes->getNamedItem("NotBefore"); + $naAttribute = $timestampNodes->item($i)->attributes->getNamedItem("NotOnOrAfter"); + if ($nbAttribute && OneLogin_Saml2_Utils::parseSAML2Time($nbAttribute->textContent) > time() + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT) { + throw new OneLogin_Saml2_ValidationError( + 'Could not validate timestamp: not yet valid. Check system clock.', + OneLogin_Saml2_ValidationError::ASSERTION_TOO_EARLY + ); + } + if ($naAttribute && OneLogin_Saml2_Utils::parseSAML2Time($naAttribute->textContent) + OneLogin_Saml2_Constants::ALLOWED_CLOCK_DRIFT <= time()) { + throw new OneLogin_Saml2_ValidationError( + 'Could not validate timestamp: expired. Check system clock.', + OneLogin_Saml2_ValidationError::ASSERTION_EXPIRED + ); + } + } + return true; + } + + /** + * Verifies that the document has the expected signed nodes. + * + * @param $signedElements + * + * @return bool + * + * @throws OneLogin_Saml2_ValidationError + */ + public function validateSignedElements($signedElements) + { + if (count($signedElements) > 2) { + return false; + } + + $responseTag = '{'.OneLogin_Saml2_Constants::NS_SAMLP.'}Response'; + $assertionTag = '{'.OneLogin_Saml2_Constants::NS_SAML.'}Assertion'; + + $ocurrence = array_count_values($signedElements); + if ((in_array($responseTag, $signedElements) && $ocurrence[$responseTag] > 1) || + (in_array($assertionTag, $signedElements) && $ocurrence[$assertionTag] > 1) || + !in_array($responseTag, $signedElements) && !in_array($assertionTag, $signedElements) + ) { + return false; + } + + // Check that the signed elements found here, are the ones that will be verified + // by OneLogin_Saml2_Utils->validateSign() + if (in_array($responseTag, $signedElements)) { + $expectedSignatureNodes = OneLogin_Saml2_Utils::query($this->document, OneLogin_Saml2_Utils::RESPONSE_SIGNATURE_XPATH); + if ($expectedSignatureNodes->length != 1) { + throw new OneLogin_Saml2_ValidationError( + "Unexpected number of Response signatures found. SAML Response rejected.", + OneLogin_Saml2_ValidationError::WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE + ); + } + } + + if (in_array($assertionTag, $signedElements)) { + $expectedSignatureNodes = $this->_query(OneLogin_Saml2_Utils::ASSERTION_SIGNATURE_XPATH); + if ($expectedSignatureNodes->length != 1) { + throw new OneLogin_Saml2_ValidationError( + "Unexpected number of Assertion signatures found. SAML Response rejected.", + OneLogin_Saml2_ValidationError::WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION + ); + } + } + + return true; + } + + /** + * Extracts a node from the DOMDocument (Assertion). + * + * @param string $assertionXpath Xpath Expression + * + * @return DOMNodeList The queried node + */ + protected function _queryAssertion($assertionXpath) + { + if ($this->encrypted) { + $xpath = new DOMXPath($this->decryptedDocument); + } else { + $xpath = new DOMXPath($this->document); + } + + $xpath->registerNamespace('samlp', OneLogin_Saml2_Constants::NS_SAMLP); + $xpath->registerNamespace('saml', OneLogin_Saml2_Constants::NS_SAML); + $xpath->registerNamespace('ds', OneLogin_Saml2_Constants::NS_DS); + $xpath->registerNamespace('xenc', OneLogin_Saml2_Constants::NS_XENC); + + $assertionNode = '/samlp:Response/saml:Assertion'; + $signatureQuery = $assertionNode . '/ds:Signature/ds:SignedInfo/ds:Reference'; + $assertionReferenceNode = $xpath->query($signatureQuery)->item(0); + if (!$assertionReferenceNode) { + // is the response signed as a whole? + $signatureQuery = '/samlp:Response/ds:Signature/ds:SignedInfo/ds:Reference'; + $responseReferenceNode = $xpath->query($signatureQuery)->item(0); + if ($responseReferenceNode) { + $uri = $responseReferenceNode->attributes->getNamedItem('URI')->nodeValue; + if (empty($uri)) { + $id = $responseReferenceNode->parentNode->parentNode->parentNode->attributes->getNamedItem('ID')->nodeValue; + } else { + $id = substr($responseReferenceNode->attributes->getNamedItem('URI')->nodeValue, 1); + } + $nameQuery = "/samlp:Response[@ID='$id']/saml:Assertion" . $assertionXpath; + } else { + $nameQuery = "/samlp:Response/saml:Assertion" . $assertionXpath; + } + } else { + $uri = $assertionReferenceNode->attributes->getNamedItem('URI')->nodeValue; + if (empty($uri)) { + $id = $assertionReferenceNode->parentNode->parentNode->parentNode->attributes->getNamedItem('ID')->nodeValue; + } else { + $id = substr($assertionReferenceNode->attributes->getNamedItem('URI')->nodeValue, 1); + } + $nameQuery = $assertionNode."[@ID='$id']" . $assertionXpath; + } + + return $xpath->query($nameQuery); + } + + /** + * Extracts nodes that match the query from the DOMDocument (Response Menssage) + * + * @param string $query Xpath Expresion + * + * @return DOMNodeList The queried nodes + */ + private function _query($query) + { + if ($this->encrypted) { + return OneLogin_Saml2_Utils::query($this->decryptedDocument, $query); + } else { + return OneLogin_Saml2_Utils::query($this->document, $query); + } + } + + /** + * Decrypts the Assertion (DOMDocument) + * + * @param DomNode $dom DomDocument + * + * @return DOMDocument Decrypted Assertion + * + * @throws OneLogin_Saml2_Error + * @throws OneLogin_Saml2_ValidationError + */ + protected function _decryptAssertion($dom) + { + $pem = $this->_settings->getSPkey(); + if (empty($pem)) { + throw new OneLogin_Saml2_Error( + "No private key available, check settings", + OneLogin_Saml2_Error::PRIVATE_KEY_NOT_FOUND + ); + } + $objenc = new XMLSecEnc(); + $encData = $objenc->locateEncryptedData($dom); + if (!$encData) { + throw new OneLogin_Saml2_ValidationError( + "Cannot locate encrypted assertion", + OneLogin_Saml2_ValidationError::MISSING_ENCRYPTED_ELEMENT + ); + } + $objenc->setNode($encData); + $objenc->type = $encData->getAttribute("Type"); + if (!$objKey = $objenc->locateKey()) { + throw new OneLogin_Saml2_ValidationError( + "Unknown algorithm", + OneLogin_Saml2_ValidationError::KEY_ALGORITHM_ERROR + ); + } + $key = null; + if ($objKeyInfo = $objenc->locateKeyInfo($objKey)) { + if ($objKeyInfo->isEncrypted) { + $objencKey = $objKeyInfo->encryptedCtx; + $objKeyInfo->loadKey($pem, false, false); + $key = $objencKey->decryptKey($objKeyInfo); + } else { + // symmetric encryption key support + $objKeyInfo->loadKey($pem, false, false); + } + } + + if (empty($objKey->key)) { + $objKey->loadKey($key); + } + $decryptedXML = $objenc->decryptNode($objKey, false); + $decrypted = new DOMDocument(); + $check = OneLogin_Saml2_Utils::loadXML($decrypted, $decryptedXML); + if ($check === false) { + throw new Exception('Error: string from decrypted assertion could not be loaded into a XML document'); + } + if ($encData->parentNode instanceof DOMDocument) { + return $decrypted; + } else { + $decrypted = $decrypted->documentElement; + $encryptedAssertion = $encData->parentNode; + $container = $encryptedAssertion->parentNode; + + // Fix possible issue with saml namespace + if (!$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml') + && !$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml2') + && !$decrypted->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns') + && !$container->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml') + && !$container->hasAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:saml2') + ) { + if (strpos($encryptedAssertion->tagName, 'saml2:') !== false) { + $ns = 'xmlns:saml2'; + } else if (strpos($encryptedAssertion->tagName, 'saml:') !== false) { + $ns = 'xmlns:saml'; + } else { + $ns = 'xmlns'; + } + $decrypted->setAttributeNS('http://www.w3.org/2000/xmlns/', $ns, OneLogin_Saml2_Constants::NS_SAML); + } + + OneLogin_Saml2_Utils::treeCopyReplace($encryptedAssertion, $decrypted); + + // Rebuild the DOM will fix issues with namespaces as well + $dom = new DOMDocument(); + return OneLogin_Saml2_Utils::loadXML($dom, $container->ownerDocument->saveXML()); + } + } + + /** + * After execute a validation process, if fails this method returns the cause + * + * @return string Cause + */ + public function getError() + { + return $this->_error; + } + + /** + * Returns the SAML Response document (If contains an encrypted assertion, decrypts it) + * + * @return DomDocument SAML Response + */ + public function getXMLDocument() + { + if ($this->encrypted) { + return $this->decryptedDocument; + } else { + return $this->document; + } + } +} + diff --git a/docs/Saml2/files/Settings.html b/docs/Saml2/files/Settings.html new file mode 100644 index 00000000..9d04cffd --- /dev/null +++ b/docs/Saml2/files/Settings.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          Settings.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_SettingsConfiguration of the PHP Toolkit
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/Settings.php.txt b/docs/Saml2/files/Settings.php.txt new file mode 100644 index 00000000..ba715b5e --- /dev/null +++ b/docs/Saml2/files/Settings.php.txt @@ -0,0 +1,1168 @@ +_spValidationOnly = $spValidationOnly; + $this->_loadPaths(); + + if (!isset($settings)) { + if (!$this->_loadSettingsFromFile()) { + throw new OneLogin_Saml2_Error( + 'Invalid file settings: %s', + OneLogin_Saml2_Error::SETTINGS_INVALID, + array(implode(', ', $this->_errors)) + ); + } + $this->_addDefaultValues(); + } else if (is_array($settings)) { + if (!$this->_loadSettingsFromArray($settings)) { + throw new OneLogin_Saml2_Error( + 'Invalid array settings: %s', + OneLogin_Saml2_Error::SETTINGS_INVALID, + array(implode(', ', $this->_errors)) + ); + } + } else if ($settings instanceof OneLogin_Saml2_Settings) { + throw new OneLogin_Saml2_Error( + 'Only instances of OneLogin_Saml_Settings are supported.', + OneLogin_Saml2_Error::UNSUPPORTED_SETTINGS_OBJECT, + array(implode(', ', $this->_errors)) + ); + } else { + if (!$this->_loadSettingsFromArray($settings->getValues())) { + throw new OneLogin_Saml2_Error( + 'Invalid array settings: %s', + OneLogin_Saml2_Error::SETTINGS_INVALID, + array(implode(', ', $this->_errors)) + ); + } + } + + $this->formatIdPCert(); + $this->formatSPCert(); + $this->formatSPKey(); + $this->formatSPCertNew(); + $this->formatIdPCertMulti(); + } + + /** + * Sets the paths of the different folders + * @suppress PhanUndeclaredConstant + */ + private function _loadPaths() + { + $basePath = dirname(dirname(__DIR__)).'/'; + $this->_paths = array ( + 'base' => $basePath, + 'config' => $basePath, + 'cert' => $basePath.'certs/', + 'lib' => __DIR__ . '/', + 'extlib' => $basePath.'extlib/' + ); + + if (defined('ONELOGIN_CUSTOMPATH')) { + $this->_paths['config'] = ONELOGIN_CUSTOMPATH; + $this->_paths['cert'] = ONELOGIN_CUSTOMPATH.'certs/'; + } + } + + /** + * Returns base path. + * + * @return string The base toolkit folder path + */ + public function getBasePath() + { + return $this->_paths['base']; + } + + /** + * Returns cert path. + * + * @return string The cert folder path + */ + public function getCertPath() + { + return $this->_paths['cert']; + } + + /** + * Returns config path. + * + * @return string The config folder path + */ + public function getConfigPath() + { + return $this->_paths['config']; + } + + /** + * Returns lib path. + * + * @return string The library folder path + */ + public function getLibPath() + { + return $this->_paths['lib']; + } + + /** + * Returns external lib path. + * + * @return string The external library folder path + */ + public function getExtLibPath() + { + return $this->_paths['extlib']; + } + + /** + * Returns schema path. + * + * @return string The external library folder path + */ + public function getSchemasPath() + { + if (isset($this->_paths['schemas'])) { + return $this->_paths['schemas']; + } + return __DIR__ . '/schemas/'; + } + + /** + * Set schemas path + * + * @param string $path + * @return $this + */ + public function setSchemasPath($path) + { + $this->_paths['schemas'] = $path; + } + + /** + * Loads settings info from a settings Array + * + * @param array $settings SAML Toolkit Settings + * + * @return bool True if the settings info is valid + */ + private function _loadSettingsFromArray($settings) + { + if (isset($settings['sp'])) { + $this->_sp = $settings['sp']; + } + if (isset($settings['idp'])) { + $this->_idp = $settings['idp']; + } + + $errors = $this->checkSettings($settings); + if (empty($errors)) { + $this->_errors = array(); + + if (isset($settings['strict'])) { + $this->_strict = $settings['strict']; + } + if (isset($settings['debug'])) { + $this->_debug = $settings['debug']; + } + + if (isset($settings['baseurl'])) { + $this->_baseurl = $settings['baseurl']; + } + + if (isset($settings['compress'])) { + $this->_compress = $settings['compress']; + } + + if (isset($settings['security'])) { + $this->_security = $settings['security']; + } + + if (isset($settings['contactPerson'])) { + $this->_contacts = $settings['contactPerson']; + } + + if (isset($settings['organization'])) { + $this->_organization = $settings['organization']; + } + + $this->_addDefaultValues(); + return true; + } else { + $this->_errors = $errors; + return false; + } + } + + /** + * Loads settings info from the settings file + * + * @return bool True if the settings info is valid + * + * @throws OneLogin_Saml2_Error + * + * @suppress PhanUndeclaredVariable + */ + private function _loadSettingsFromFile() + { + $filename = $this->getConfigPath().'settings.php'; + + if (!file_exists($filename)) { + throw new OneLogin_Saml2_Error( + 'Settings file not found: %s', + OneLogin_Saml2_Error::SETTINGS_FILE_NOT_FOUND, + array($filename) + ); + } + + /** @var array $settings */ + include $filename; + + // Add advance_settings if exists + + $advancedFilename = $this->getConfigPath().'advanced_settings.php'; + + if (file_exists($advancedFilename)) { + /** @var array $advancedSettings */ + include $advancedFilename; + $settings = array_merge($settings, $advancedSettings); + } + + + return $this->_loadSettingsFromArray($settings); + } + + /** + * Add default values if the settings info is not complete + */ + private function _addDefaultValues() + { + if (!isset($this->_sp['assertionConsumerService']['binding'])) { + $this->_sp['assertionConsumerService']['binding'] = OneLogin_Saml2_Constants::BINDING_HTTP_POST; + } + if (isset($this->_sp['singleLogoutService']) && !isset($this->_sp['singleLogoutService']['binding'])) { + $this->_sp['singleLogoutService']['binding'] = OneLogin_Saml2_Constants::BINDING_HTTP_REDIRECT; + } + + if (!isset($this->_compress['requests'])) { + $this->_compress['requests'] = true; + } + + if (!isset($this->_compress['responses'])) { + $this->_compress['responses'] = true; + } + + // Related to nameID + if (!isset($this->_sp['NameIDFormat'])) { + $this->_sp['NameIDFormat'] = OneLogin_Saml2_Constants::NAMEID_UNSPECIFIED; + } + if (!isset($this->_security['nameIdEncrypted'])) { + $this->_security['nameIdEncrypted'] = false; + } + if (!isset($this->_security['requestedAuthnContext'])) { + $this->_security['requestedAuthnContext'] = true; + } + + // sign provided + if (!isset($this->_security['authnRequestsSigned'])) { + $this->_security['authnRequestsSigned'] = false; + } + if (!isset($this->_security['logoutRequestSigned'])) { + $this->_security['logoutRequestSigned'] = false; + } + if (!isset($this->_security['logoutResponseSigned'])) { + $this->_security['logoutResponseSigned'] = false; + } + if (!isset($this->_security['signMetadata'])) { + $this->_security['signMetadata'] = false; + } + + // sign expected + if (!isset($this->_security['wantMessagesSigned'])) { + $this->_security['wantMessagesSigned'] = false; + } + if (!isset($this->_security['wantAssertionsSigned'])) { + $this->_security['wantAssertionsSigned'] = false; + } + + // NameID element expected + if (!isset($this->_security['wantNameId'])) { + $this->_security['wantNameId'] = true; + } + + // Relax Destination validation + if (!isset($this->_security['relaxDestinationValidation'])) { + $this->_security['relaxDestinationValidation'] = false; + } + + // Allow duplicated Attribute Names + if (!isset($this->_security['allowRepeatAttributeName'])) { + $this->_security['allowRepeatAttributeName'] = false; + } + + // Strict Destination match validation + if (!isset($this->_security['destinationStrictlyMatches'])) { + $this->_security['destinationStrictlyMatches'] = false; + } + + // InResponseTo + if (!isset($this->_security['rejectUnsolicitedResponsesWithInResponseTo'])) { + $this->_security['rejectUnsolicitedResponsesWithInResponseTo'] = false; + } + + // encrypt expected + if (!isset($this->_security['wantAssertionsEncrypted'])) { + $this->_security['wantAssertionsEncrypted'] = false; + } + if (!isset($this->_security['wantNameIdEncrypted'])) { + $this->_security['wantNameIdEncrypted'] = false; + } + + // XML validation + if (!isset($this->_security['wantXMLValidation'])) { + $this->_security['wantXMLValidation'] = true; + } + + // SignatureAlgorithm + if (!isset($this->_security['signatureAlgorithm'])) { + $this->_security['signatureAlgorithm'] = XMLSecurityKey::RSA_SHA1; + } + + // DigestAlgorithm + if (!isset($this->_security['digestAlgorithm'])) { + $this->_security['digestAlgorithm'] = XMLSecurityDSig::SHA1; + } + + if (!isset($this->_security['lowercaseUrlencoding'])) { + $this->_security['lowercaseUrlencoding'] = false; + } + + // Certificates / Private key /Fingerprint + if (!isset($this->_idp['x509cert'])) { + $this->_idp['x509cert'] = ''; + } + if (!isset($this->_idp['certFingerprint'])) { + $this->_idp['certFingerprint'] = ''; + } + if (!isset($this->_idp['certFingerprintAlgorithm'])) { + $this->_idp['certFingerprintAlgorithm'] = 'sha1'; + } + + if (!isset($this->_sp['x509cert'])) { + $this->_sp['x509cert'] = ''; + } + if (!isset($this->_sp['privateKey'])) { + $this->_sp['privateKey'] = ''; + } + } + + /** + * Checks the settings info. + * + * @param array $settings Array with settings data + * + * @return array $errors Errors found on the settings data + */ + public function checkSettings($settings) + { + assert('is_array($settings)'); + + if (!is_array($settings) || empty($settings)) { + $errors = array('invalid_syntax'); + } else { + $errors = array(); + if (!$this->_spValidationOnly) { + $idpErrors = $this->checkIdPSettings($settings); + $errors = array_merge($idpErrors, $errors); + } + $spErrors = $this->checkSPSettings($settings); + $errors = array_merge($spErrors, $errors); + + $compressErrors = $this->checkCompressionSettings($settings); + $errors = array_merge($compressErrors, $errors); + } + + return $errors; + } + + /** + * Checks the compression settings info. + * + * @param array $settings Array with settings data + * + * @return array $errors Errors found on the settings data + */ + public function checkCompressionSettings($settings) + { + $errors = array(); + + if (isset($settings['compress'])) { + if (!is_array($settings['compress'])) { + $errors[] = "invalid_syntax"; + } else if (isset($settings['compress']['requests']) + && $settings['compress']['requests'] !== true + && $settings['compress']['requests'] !== false + ) { + $errors[] = "'compress'=>'requests' values must be true or false."; + } else if (isset($settings['compress']['responses']) + && $settings['compress']['responses'] !== true + && $settings['compress']['responses'] !== false + ) { + $errors[] = "'compress'=>'responses' values must be true or false."; + } + } + return $errors; + } + + /** + * Checks the IdP settings info. + * + * @param array $settings Array with settings data + * + * @return array $errors Errors found on the IdP settings data + */ + public function checkIdPSettings($settings) + { + assert('is_array($settings)'); + + if (!is_array($settings) || empty($settings)) { + return array('invalid_syntax'); + } + + $errors = array(); + + if (!isset($settings['idp']) || empty($settings['idp'])) { + $errors[] = 'idp_not_found'; + } else { + $idp = $settings['idp']; + if (!isset($idp['entityId']) || empty($idp['entityId'])) { + $errors[] = 'idp_entityId_not_found'; + } + + if (!isset($idp['singleSignOnService']) + || !isset($idp['singleSignOnService']['url']) + || empty($idp['singleSignOnService']['url']) + ) { + $errors[] = 'idp_sso_not_found'; + } else if (!filter_var($idp['singleSignOnService']['url'], FILTER_VALIDATE_URL)) { + $errors[] = 'idp_sso_url_invalid'; + } + + if (isset($idp['singleLogoutService']) + && isset($idp['singleLogoutService']['url']) + && !empty($idp['singleLogoutService']['url']) + && !filter_var($idp['singleLogoutService']['url'], FILTER_VALIDATE_URL) + ) { + $errors[] = 'idp_slo_url_invalid'; + } + + if (isset($idp['singleLogoutService']) + && isset($idp['singleLogoutService']['responseUrl']) + && !empty($idp['singleLogoutService']['responseUrl']) + && !filter_var($idp['singleLogoutService']['responseUrl'], FILTER_VALIDATE_URL) + ) { + $errors[] = 'idp_slo_response_url_invalid'; + } + + $existsX509 = isset($idp['x509cert']) && !empty($idp['x509cert']); + $existsMultiX509Sign = isset($idp['x509certMulti']) && isset($idp['x509certMulti']['signing']) && !empty($idp['x509certMulti']['signing']); + $existsFingerprint = isset($idp['certFingerprint']) && !empty($idp['certFingerprint']); + + if (!($existsX509 || $existsFingerprint || $existsMultiX509Sign) + ) { + $errors[] = 'idp_cert_or_fingerprint_not_found_and_required'; + } + + if (isset($settings['security'])) { + $existsMultiX509Enc = isset($idp['x509certMulti']) && isset($idp['x509certMulti']['encryption']) && !empty($idp['x509certMulti']['encryption']); + + if ((isset($settings['security']['nameIdEncrypted']) && $settings['security']['nameIdEncrypted'] == true) + && !($existsX509 || $existsMultiX509Enc) + ) { + $errors[] = 'idp_cert_not_found_and_required'; + } + } + } + + return $errors; + } + + /** + * Checks the SP settings info. + * + * @param array $settings Array with settings data + * + * @return array $errors Errors found on the SP settings data + */ + public function checkSPSettings($settings) + { + assert('is_array($settings)'); + + if (!is_array($settings) || empty($settings)) { + return array('invalid_syntax'); + } + + $errors = array(); + + if (!isset($settings['sp']) || empty($settings['sp'])) { + $errors[] = 'sp_not_found'; + } else { + $sp = $settings['sp']; + $security = array(); + if (isset($settings['security'])) { + $security = $settings['security']; + } + + if (!isset($sp['entityId']) || empty($sp['entityId'])) { + $errors[] = 'sp_entityId_not_found'; + } + + if (!isset($sp['assertionConsumerService']) + || !isset($sp['assertionConsumerService']['url']) + || empty($sp['assertionConsumerService']['url']) + ) { + $errors[] = 'sp_acs_not_found'; + } else if (!filter_var($sp['assertionConsumerService']['url'], FILTER_VALIDATE_URL)) { + $errors[] = 'sp_acs_url_invalid'; + } + + if (isset($sp['singleLogoutService']) + && isset($sp['singleLogoutService']['url']) + && !filter_var($sp['singleLogoutService']['url'], FILTER_VALIDATE_URL) + ) { + $errors[] = 'sp_sls_url_invalid'; + } + + if (isset($security['signMetadata']) && is_array($security['signMetadata'])) { + if ((!isset($security['signMetadata']['keyFileName']) + || !isset($security['signMetadata']['certFileName'])) && + (!isset($security['signMetadata']['privateKey']) + || !isset($security['signMetadata']['x509cert'])) + ) { + $errors[] = 'sp_signMetadata_invalid'; + } + } + + if (((isset($security['authnRequestsSigned']) && $security['authnRequestsSigned'] == true) + || (isset($security['logoutRequestSigned']) && $security['logoutRequestSigned'] == true) + || (isset($security['logoutResponseSigned']) && $security['logoutResponseSigned'] == true) + || (isset($security['wantAssertionsEncrypted']) && $security['wantAssertionsEncrypted'] == true) + || (isset($security['wantNameIdEncrypted']) && $security['wantNameIdEncrypted'] == true)) + && !$this->checkSPCerts() + ) { + $errors[] = 'sp_certs_not_found_and_required'; + } + } + + if (isset($settings['contactPerson'])) { + $types = array_keys($settings['contactPerson']); + $validTypes = array('technical', 'support', 'administrative', 'billing', 'other'); + foreach ($types as $type) { + if (!in_array($type, $validTypes)) { + $errors[] = 'contact_type_invalid'; + break; + } + } + + foreach ($settings['contactPerson'] as $type => $contact) { + if (!isset($contact['givenName']) || empty($contact['givenName']) + || !isset($contact['emailAddress']) || empty($contact['emailAddress']) + ) { + $errors[] = 'contact_not_enought_data'; + break; + } + } + } + + if (isset($settings['organization'])) { + foreach ($settings['organization'] as $organization) { + if (!isset($organization['name']) || empty($organization['name']) + || !isset($organization['displayname']) || empty($organization['displayname']) + || !isset($organization['url']) || empty($organization['url']) + ) { + $errors[] = 'organization_not_enought_data'; + break; + } + } + } + + return $errors; + } + + /** + * Checks if the x509 certs of the SP exists and are valid. + * + * @return bool + */ + public function checkSPCerts() + { + $key = $this->getSPkey(); + $cert = $this->getSPcert(); + return (!empty($key) && !empty($cert)); + } + + /** + * Returns the x509 private key of the SP. + * + * @return string SP private key + */ + public function getSPkey() + { + $key = null; + if (isset($this->_sp['privateKey']) && !empty($this->_sp['privateKey'])) { + $key = $this->_sp['privateKey']; + } else { + $keyFile = $this->_paths['cert'].'sp.key'; + + if (file_exists($keyFile)) { + $key = file_get_contents($keyFile); + } + } + return $key; + } + + /** + * Returns the x509 public cert of the SP. + * + * @return string SP public cert + */ + public function getSPcert() + { + $cert = null; + + if (isset($this->_sp['x509cert']) && !empty($this->_sp['x509cert'])) { + $cert = $this->_sp['x509cert']; + } else { + $certFile = $this->_paths['cert'].'sp.crt'; + + if (file_exists($certFile)) { + $cert = file_get_contents($certFile); + } + } + return $cert; + } + + /** + * Returns the x509 public of the SP that is + * planed to be used soon instead the other + * public cert + * @return string SP public cert New + */ + public function getSPcertNew() + { + $cert = null; + + if (isset($this->_sp['x509certNew']) && !empty($this->_sp['x509certNew'])) { + $cert = $this->_sp['x509certNew']; + } else { + $certFile = $this->_paths['cert'].'sp_new.crt'; + + if (file_exists($certFile)) { + $cert = file_get_contents($certFile); + } + } + return $cert; + } + + /** + * Gets the IdP data. + * + * @return array IdP info + */ + public function getIdPData() + { + return $this->_idp; + } + + /** + * Gets the SP data. + * + * @return array SP info + */ + public function getSPData() + { + return $this->_sp; + } + + /** + * Gets security data. + * + * @return array SP info + */ + public function getSecurityData() + { + return $this->_security; + } + + /** + * Gets contact data. + * + * @return array SP info + */ + public function getContacts() + { + return $this->_contacts; + } + + /** + * Gets organization data. + * + * @return array SP info + */ + public function getOrganization() + { + return $this->_organization; + } + + /** + * Should SAML requests be compressed? + * + * @return bool Yes/No as True/False + */ + public function shouldCompressRequests() + { + return $this->_compress['requests']; + } + + /** + * Should SAML responses be compressed? + * + * @return bool Yes/No as True/False + */ + public function shouldCompressResponses() + { + return $this->_compress['responses']; + } + + /** + * Gets the IdP SSO url. + * + * @return string|null The url of the IdP Single Sign On Service + */ + public function getIdPSSOUrl() + { + $ssoUrl = null; + if (isset($this->_idp['singleSignOnService']) && isset($this->_idp['singleSignOnService']['url'])) { + $ssoUrl = $this->_idp['singleSignOnService']['url']; + } + return $ssoUrl; + } + + /** + * Gets the IdP SLO url. + * + * @return string|null The request url of the IdP Single Logout Service + */ + public function getIdPSLOUrl() + { + $sloUrl = null; + if (isset($this->_idp['singleLogoutService']) && isset($this->_idp['singleLogoutService']['url'])) { + $sloUrl = $this->_idp['singleLogoutService']['url']; + } + return $sloUrl; + } + + /** + * Gets the IdP SLO response url. + * + * @return string|null The response url of the IdP Single Logout Service + */ + public function getIdPSLOResponseUrl() + { + if (isset($this->_idp['singleLogoutService']) && isset($this->_idp['singleLogoutService']['responseUrl'])) { + return $this->_idp['singleLogoutService']['responseUrl']; + } + return $this->getIdPSLOUrl(); + } + + /** + * Gets the SP metadata. The XML representation. + * + * @param bool $alwaysPublishEncryptionCert When 'true', the returned metadata + * will always include an 'encryption' KeyDescriptor. Otherwise, the 'encryption' + * KeyDescriptor will only be included if $advancedSettings['security']['wantNameIdEncrypted'] + * or $advancedSettings['security']['wantAssertionsEncrypted'] are enabled. + * @param DateTime|null $validUntil Metadata's valid time + * @param int|null $cacheDuration Duration of the cache in seconds + * + * @return string SP metadata (xml) + * + * @throws Exception + * @throws OneLogin_Saml2_Error + */ + public function getSPMetadata($alwaysPublishEncryptionCert = false, $validUntil = null, $cacheDuration = null) + { + $metadata = OneLogin_Saml2_Metadata::builder($this->_sp, $this->_security['authnRequestsSigned'], $this->_security['wantAssertionsSigned'], $validUntil, $cacheDuration, $this->getContacts(), $this->getOrganization()); + + $certNew = $this->getSPcertNew(); + if (!empty($certNew)) { + $metadata = OneLogin_Saml2_Metadata::addX509KeyDescriptors( + $metadata, + $certNew, + $alwaysPublishEncryptionCert || $this->_security['wantNameIdEncrypted'] || $this->_security['wantAssertionsEncrypted'] + ); + } + + $cert = $this->getSPcert(); + if (!empty($cert)) { + $metadata = OneLogin_Saml2_Metadata::addX509KeyDescriptors( + $metadata, + $cert, + $alwaysPublishEncryptionCert || $this->_security['wantNameIdEncrypted'] || $this->_security['wantAssertionsEncrypted'] + ); + } + + //Sign Metadata + if (isset($this->_security['signMetadata']) && $this->_security['signMetadata'] !== false) { + if ($this->_security['signMetadata'] === true) { + $keyMetadata = $this->getSPkey(); + $certMetadata = $cert; + if (!$keyMetadata) { + throw new OneLogin_Saml2_Error( + 'SP Private key not found.', + OneLogin_Saml2_Error::PRIVATE_KEY_FILE_NOT_FOUND + ); + } + if (!$certMetadata) { + throw new OneLogin_Saml2_Error( + 'SP Public cert not found.', + OneLogin_Saml2_Error::PUBLIC_CERT_FILE_NOT_FOUND + ); + } + } else if (isset($this->_security['signMetadata']['keyFileName']) && + isset($this->_security['signMetadata']['certFileName'])) { + $keyFileName = $this->_security['signMetadata']['keyFileName']; + $certFileName = $this->_security['signMetadata']['certFileName']; + $keyMetadataFile = $this->_paths['cert'].$keyFileName; + $certMetadataFile = $this->_paths['cert'].$certFileName; + if (!file_exists($keyMetadataFile)) { + throw new OneLogin_Saml2_Error( + 'SP Private key file not found: %s', + OneLogin_Saml2_Error::PRIVATE_KEY_FILE_NOT_FOUND, + array($keyMetadataFile) + ); + } + if (!file_exists($certMetadataFile)) { + throw new OneLogin_Saml2_Error( + 'SP Public cert file not found: %s', + OneLogin_Saml2_Error::PUBLIC_CERT_FILE_NOT_FOUND, + array($certMetadataFile) + ); + } + $keyMetadata = file_get_contents($keyMetadataFile); + $certMetadata = file_get_contents($certMetadataFile); + } else if (isset($this->_security['signMetadata']['privateKey']) && + isset($this->_security['signMetadata']['x509cert'])) { + $keyMetadata = OneLogin_Saml2_Utils::formatPrivateKey($this->_security['signMetadata']['privateKey']); + $certMetadata = OneLogin_Saml2_Utils::formatCert($this->_security['signMetadata']['x509cert']); + if (!$keyMetadata) { + throw new OneLogin_Saml2_Error( + 'Private key not found.', + OneLogin_Saml2_Error::PRIVATE_KEY_FILE_NOT_FOUND + ); + } + if (!$certMetadata) { + throw new OneLogin_Saml2_Error( + 'Public cert not found.', + OneLogin_Saml2_Error::PUBLIC_CERT_FILE_NOT_FOUND + ); + } + } else { + throw new OneLogin_Saml2_Error( + 'Invalid Setting: signMetadata value of the sp is not valid', + OneLogin_Saml2_Error::SETTINGS_INVALID_SYNTAX + ); + } + + $signatureAlgorithm = $this->_security['signatureAlgorithm']; + $digestAlgorithm = $this->_security['digestAlgorithm']; + $metadata = OneLogin_Saml2_Metadata::signMetadata($metadata, $keyMetadata, $certMetadata, $signatureAlgorithm, $digestAlgorithm); + } + return $metadata; + } + + /** + * Validates an XML SP Metadata. + * + * @param string $xml Metadata's XML that will be validate + * + * @return Array The list of found errors + * + * @throws Exception + */ + public function validateMetadata($xml) + { + assert('is_string($xml)'); + + $errors = array(); + $res = OneLogin_Saml2_Utils::validateXML($xml, 'saml-schema-metadata-2.0.xsd', $this->_debug, $this->getSchemasPath()); + if (!$res instanceof DOMDocument) { + $errors[] = $res; + } else { + $dom = $res; + $element = $dom->documentElement; + if ($element->tagName !== 'md:EntityDescriptor') { + $errors[] = 'noEntityDescriptor_xml'; + } else { + $validUntil = $cacheDuration = $expireTime = null; + + if ($element->hasAttribute('validUntil')) { + $validUntil = OneLogin_Saml2_Utils::parseSAML2Time($element->getAttribute('validUntil')); + } + if ($element->hasAttribute('cacheDuration')) { + $cacheDuration = $element->getAttribute('cacheDuration'); + } + + $expireTime = OneLogin_Saml2_Utils::getExpireTime($cacheDuration, $validUntil); + if (isset($expireTime) && time() > $expireTime) { + $errors[] = 'expired_xml'; + } + } + } + + // TODO: Support Metadata Sign Validation + + return $errors; + } + + /** + * Formats the IdP cert. + */ + public function formatIdPCert() + { + if (isset($this->_idp['x509cert'])) { + $this->_idp['x509cert'] = OneLogin_Saml2_Utils::formatCert($this->_idp['x509cert']); + } + } + + /** + * Formats the Multple IdP certs. + */ + public function formatIdPCertMulti() + { + if (isset($this->_idp['x509certMulti'])) { + if (isset($this->_idp['x509certMulti']['signing'])) { + foreach ($this->_idp['x509certMulti']['signing'] as $i => $cert) { + $this->_idp['x509certMulti']['signing'][$i] = OneLogin_Saml2_Utils::formatCert($cert); + } + } + if (isset($this->_idp['x509certMulti']['encryption'])) { + foreach ($this->_idp['x509certMulti']['encryption'] as $i => $cert) { + $this->_idp['x509certMulti']['encryption'][$i] = OneLogin_Saml2_Utils::formatCert($cert); + } + } + } + } + + /** + * Formats the SP cert. + */ + public function formatSPCert() + { + if (isset($this->_sp['x509cert'])) { + $this->_sp['x509cert'] = OneLogin_Saml2_Utils::formatCert($this->_sp['x509cert']); + } + } + + /** + * Formats the SP cert. + */ + public function formatSPCertNew() + { + if (isset($this->_sp['x509certNew'])) { + $this->_sp['x509certNew'] = OneLogin_Saml2_Utils::formatCert($this->_sp['x509certNew']); + } + } + + /** + * Formats the SP private key. + */ + public function formatSPKey() + { + if (isset($this->_sp['privateKey'])) { + $this->_sp['privateKey'] = OneLogin_Saml2_Utils::formatPrivateKey($this->_sp['privateKey']); + } + } + + /** + * Returns an array with the errors, the array is empty when the settings is ok. + * + * @return array Errors + */ + public function getErrors() + { + return $this->_errors; + } + + /** + * Activates or deactivates the strict mode. + * + * @param bool $value Strict parameter + * + * @throws Exception + */ + public function setStrict($value) + { + if (!is_bool($value)) { + throw new Exception('Invalid value passed to setStrict()'); + } + + $this->_strict = $value; + } + + /** + * Returns if the 'strict' mode is active. + * + * @return bool Strict parameter + */ + public function isStrict() + { + return $this->_strict; + } + + /** + * Returns if the debug is active. + * + * @return bool Debug parameter + */ + public function isDebugActive() + { + return $this->_debug; + } + + /** + * Set a baseurl value. + * + * @param $baseurl + */ + public function setBaseURL($baseurl) + { + $this->_baseurl = $baseurl; + } + + /** + * Returns the baseurl set on the settings if any. + * + * @return null|string The baseurl + */ + public function getBaseURL() + { + return $this->_baseurl; + } + + /** + * Sets the IdP certificate. + * + * @param string $cert IdP certificate + */ + public function setIdPCert($cert) + { + $this->_idp['x509cert'] = $cert; + $this->formatIdPCert(); + } +} + diff --git a/docs/Saml2/files/Utils.html b/docs/Saml2/files/Utils.html new file mode 100644 index 00000000..6e9a4328 --- /dev/null +++ b/docs/Saml2/files/Utils.html @@ -0,0 +1,264 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + + + +

          Utils.php

          +

          + + + + +

          Classes

          + + + + + +
          OneLogin_Saml2_UtilsUtils of PHP Toolkit
          +
          + + +
          + + + +
          +
          + + + + +
          + + + diff --git a/docs/Saml2/files/Utils.php.txt b/docs/Saml2/files/Utils.php.txt new file mode 100644 index 00000000..35d635fb --- /dev/null +++ b/docs/Saml2/files/Utils.php.txt @@ -0,0 +1,1568 @@ +loadXML($xml); + + libxml_disable_entity_loader($oldEntityLoader); + + foreach ($dom->childNodes as $child) { + if ($child->nodeType === XML_DOCUMENT_TYPE_NODE) { + throw new Exception( + 'Detected use of DOCTYPE/ENTITY in XML, disabled to prevent XXE/XEE attacks' + ); + } + } + + if (!$res) { + return false; + } else { + return $dom; + } + } + + /** + * This function attempts to validate an XML string against the specified schema. + * + * It will parse the string into a DOM document and validate this document against the schema. + * + * @param string|DOMDocument $xml The XML string or document which should be validated. + * @param string $schema The schema filename which should be used. + * @param bool $debug To disable/enable the debug mode + * @param string $schemaPath Change schema path + * + * @return string|DOMDocument $dom string that explains the problem or the DOMDocument + * + * @throws Exception + */ + public static function validateXML($xml, $schema, $debug = false, $schemaPath = null) + { + assert('is_string($xml) || $xml instanceof DOMDocument'); + assert('is_string($schema)'); + + libxml_clear_errors(); + libxml_use_internal_errors(true); + + if ($xml instanceof DOMDocument) { + $dom = $xml; + } else { + $dom = new DOMDocument; + $dom = self::loadXML($dom, $xml); + if (!$dom) { + return 'unloaded_xml'; + } + } + + if (isset($schemaPath)) { + $schemaFile = $schemaPath . $schema; + } else { + $schemaFile = __DIR__ . '/schemas/' . $schema; + } + + $oldEntityLoader = libxml_disable_entity_loader(false); + $res = $dom->schemaValidate($schemaFile); + libxml_disable_entity_loader($oldEntityLoader); + if (!$res) { + $xmlErrors = libxml_get_errors(); + syslog(LOG_INFO, 'Error validating the metadata: '.var_export($xmlErrors, true)); + + if ($debug) { + foreach ($xmlErrors as $error) { + echo htmlentities($error->message."\n"); + } + } + + return 'invalid_xml'; + } + + + return $dom; + } + + /** + * Import a node tree into a target document + * Copy it before a reference node as a sibling + * and at the end of the copy remove + * the reference node in the target document + * As it were 'replacing' it + * Leaving nested default namespaces alone + * (Standard importNode with deep copy + * mangles nested default namespaces) + * + * The reference node must not be a DomDocument + * It CAN be the top element of a document + * Returns the copied node in the target document + * + * @param DomNode $targetNode + * @param DomNode $sourceNode + * @param bool $recurse + * @return DOMNode + * @throws Exception + */ + public static function treeCopyReplace(DomNode $targetNode, DomNode $sourceNode, $recurse = false) + { + if ($targetNode->parentNode === null) { + throw new Exception('Illegal argument targetNode. It has no parentNode.'); + } + $clonedNode = $targetNode->ownerDocument->importNode($sourceNode, false); + if ($recurse) { + $resultNode = $targetNode->appendChild($clonedNode); + } else { + $resultNode = $targetNode->parentNode->insertBefore($clonedNode, $targetNode); + } + if ($sourceNode->childNodes !== null) { + foreach ($sourceNode->childNodes as $child) { + self::treeCopyReplace($resultNode, $child, true); + } + } + if (!$recurse) { + $targetNode->parentNode->removeChild($targetNode); + } + return $resultNode; + } + + /** + * Returns a x509 cert (adding header & footer if required). + * + * @param string $cert A x509 unformated cert + * @param bool $heads True if we want to include head and footer + * + * @return string $x509 Formatted cert + */ + + public static function formatCert($cert, $heads = true) + { + $x509cert = str_replace(array("\x0D", "\r", "\n"), "", $cert); + if (!empty($x509cert)) { + $x509cert = str_replace('-----BEGIN CERTIFICATE-----', "", $x509cert); + $x509cert = str_replace('-----END CERTIFICATE-----', "", $x509cert); + $x509cert = str_replace(' ', '', $x509cert); + + if ($heads) { + $x509cert = "-----BEGIN CERTIFICATE-----\n".chunk_split($x509cert, 64, "\n")."-----END CERTIFICATE-----\n"; + } + + } + return $x509cert; + } + + /** + * Returns a private key (adding header & footer if required). + * + * @param string $key A private key + * @param bool $heads True if we want to include head and footer + * + * @return string $rsaKey Formatted private key + */ + + public static function formatPrivateKey($key, $heads = true) + { + $key = str_replace(array("\x0D", "\r", "\n"), "", $key); + if (!empty($key)) { + if (strpos($key, '-----BEGIN PRIVATE KEY-----') !== false) { + $key = OneLogin_Saml2_Utils::getStringBetween($key, '-----BEGIN PRIVATE KEY-----', '-----END PRIVATE KEY-----'); + $key = str_replace(' ', '', $key); + + if ($heads) { + $key = "-----BEGIN PRIVATE KEY-----\n".chunk_split($key, 64, "\n")."-----END PRIVATE KEY-----\n"; + } + } else if (strpos($key, '-----BEGIN RSA PRIVATE KEY-----') !== false) { + $key = OneLogin_Saml2_Utils::getStringBetween($key, '-----BEGIN RSA PRIVATE KEY-----', '-----END RSA PRIVATE KEY-----'); + $key = str_replace(' ', '', $key); + + if ($heads) { + $key = "-----BEGIN RSA PRIVATE KEY-----\n".chunk_split($key, 64, "\n")."-----END RSA PRIVATE KEY-----\n"; + } + } else { + $key = str_replace(' ', '', $key); + + if ($heads) { + $key = "-----BEGIN RSA PRIVATE KEY-----\n".chunk_split($key, 64, "\n")."-----END RSA PRIVATE KEY-----\n"; + } + } + } + return $key; + } + + /** + * Extracts a substring between 2 marks + * + * @param string $str The target string + * @param string $start The initial mark + * @param string $end The end mark + * + * @return string A substring or an empty string if is not able to find the marks + * or if there is no string between the marks + */ + public static function getStringBetween($str, $start, $end) + { + $str = ' ' . $str; + $ini = strpos($str, $start); + + if ($ini == 0) { + return ''; + } + + $ini += strlen($start); + $len = strpos($str, $end, $ini) - $ini; + return substr($str, $ini, $len); + } + + /** + * Executes a redirection to the provided url (or return the target url). + * + * @param string $url The target url + * @param array $parameters Extra parameters to be passed as part of the url + * @param bool $stay True if we want to stay (returns the url string) False to redirect + * + * @return string|null $url + * + * @throws OneLogin_Saml2_Error + */ + public static function redirect($url, $parameters = array(), $stay = false) + { + assert('is_string($url)'); + assert('is_array($parameters)'); + + if (substr($url, 0, 1) === '/') { + $url = self::getSelfURLhost() . $url; + } + + /** + * Verify that the URL matches the regex for the protocol. + * By default this will check for http and https + */ + $wrongProtocol = !preg_match(self::$_protocolRegex, $url); + $url = filter_var($url, FILTER_VALIDATE_URL); + if ($wrongProtocol || empty($url)) { + throw new OneLogin_Saml2_Error( + 'Redirect to invalid URL: ' . $url, + OneLogin_Saml2_Error::REDIRECT_INVALID_URL + ); + } + + /* Add encoded parameters */ + if (strpos($url, '?') === false) { + $paramPrefix = '?'; + } else { + $paramPrefix = '&'; + } + + foreach ($parameters as $name => $value) { + if ($value === null) { + $param = urlencode($name); + } else if (is_array($value)) { + $param = ""; + foreach ($value as $val) { + $param .= urlencode($name) . "[]=" . urlencode($val). '&'; + } + if (!empty($param)) { + $param = substr($param, 0, -1); + } + } else { + $param = urlencode($name) . '=' . urlencode($value); + } + + if (!empty($param)) { + $url .= $paramPrefix . $param; + $paramPrefix = '&'; + } + } + + if ($stay) { + return $url; + } + + header('Pragma: no-cache'); + header('Cache-Control: no-cache, must-revalidate'); + header('Location: ' . $url); + exit(); + } + + /** + * @var $protocolRegex string + */ + public static function setProtocolRegex($protocolRegex) + { + if (!empty($protocolRegex)) { + self::$_protocolRegex = $protocolRegex; + } + } + + /** + * @param $baseurl string The base url to be used when constructing URLs + */ + public static function setBaseURL($baseurl) + { + if (!empty($baseurl)) { + $baseurlpath = '/'; + if (preg_match('#^https?://([^/]*)/?(.*)#i', $baseurl, $matches)) { + if (strpos($baseurl, 'https://') === false) { + self::setSelfProtocol('http'); + $port = '80'; + } else { + self::setSelfProtocol('https'); + $port = '443'; + } + + $currentHost = $matches[1]; + if (false !== strpos($currentHost, ':')) { + list($currentHost, $possiblePort) = explode(':', $matches[1], 2); + if (is_numeric($possiblePort)) { + $port = $possiblePort; + } + } + + if (isset($matches[2]) && !empty($matches[2])) { + $baseurlpath = $matches[2]; + } + + self::setSelfHost($currentHost); + self::setSelfPort($port); + self::setBaseURLPath($baseurlpath); + } + } else { + self::$_host = null; + self::$_protocol = null; + self::$_port = null; + self::$_baseurlpath = null; + } + } + + /** + * @param $proxyVars bool Whether to use `X-Forwarded-*` headers to determine port/domain/protocol + */ + public static function setProxyVars($proxyVars) + { + self::$_proxyVars = (bool)$proxyVars; + } + + /** + * return bool + */ + public static function getProxyVars() + { + return self::$_proxyVars; + } + + /** + * Returns the protocol + the current host + the port (if different than + * common ports). + * + * @return string $url + */ + public static function getSelfURLhost() + { + $currenthost = self::getSelfHost(); + + $port = ''; + + if (self::isHTTPS()) { + $protocol = 'https'; + } else { + $protocol = 'http'; + } + + $portnumber = self::getSelfPort(); + + if (isset($portnumber) && ($portnumber != '80') && ($portnumber != '443')) { + $port = ':' . $portnumber; + } + + return $protocol."://" . $currenthost . $port; + } + + /** + * @param $host string The host to use when constructing URLs + */ + public static function setSelfHost($host) + { + self::$_host = $host; + } + + /** + * @param $baseurlpath string The baseurl path to use when constructing URLs + */ + public static function setBaseURLPath($baseurlpath) + { + if (empty($baseurlpath)) { + self::$_baseurlpath = null; + } else if ($baseurlpath == '/') { + self::$_baseurlpath = '/'; + } else { + self::$_baseurlpath = '/' . trim($baseurlpath, '/') . '/'; + } + } + + /** + * @return string The baseurlpath to be used when constructing URLs + */ + public static function getBaseURLPath() + { + return self::$_baseurlpath; + } + + /** + * @return string The raw host name + */ + protected static function getRawHost() + { + if (self::$_host) { + $currentHost = self::$_host; + } elseif (self::getProxyVars() && array_key_exists('HTTP_X_FORWARDED_HOST', $_SERVER)) { + $currentHost = explode(',', $_SERVER['HTTP_X_FORWARDED_HOST']); + $values = array_values($currentHost); + $currentHost = array_shift($values); + } elseif (array_key_exists('HTTP_HOST', $_SERVER)) { + $currentHost = $_SERVER['HTTP_HOST']; + } elseif (array_key_exists('SERVER_NAME', $_SERVER)) { + $currentHost = $_SERVER['SERVER_NAME']; + } else { + if (function_exists('gethostname')) { + $currentHost = gethostname(); + } else { + $currentHost = php_uname("n"); + } + } + return $currentHost; + } + + /** + * @param $port int The port number to use when constructing URLs + */ + public static function setSelfPort($port) + { + self::$_port = $port; + } + + /** + * @param $protocol string The protocol to identify as using, usually http or https + */ + public static function setSelfProtocol($protocol) + { + self::$_protocol = $protocol; + } + + /** + * @return string http|https + */ + public static function getSelfProtocol() + { + $protocol = 'http'; + if (self::$_protocol) { + $protocol = self::$_protocol; + } elseif (self::getSelfPort() == 443) { + $protocol = 'https'; + } elseif (self::getProxyVars() && isset($_SERVER['HTTP_X_FORWARDED_PROTO'])) { + $protocol = $_SERVER['HTTP_X_FORWARDED_PROTO']; + } elseif (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') { + $protocol = 'https'; + } + return $protocol; + } + + /** + * Returns the current host. + * + * @return string $currentHost The current host + */ + public static function getSelfHost() + { + $currentHost = self::getRawHost(); + + // strip the port + if (false !== strpos($currentHost, ':')) { + list($currentHost, $port) = explode(':', $currentHost, 2); + } + + return $currentHost; + } + + /** + * @return null|string The port number used for the request + */ + public static function getSelfPort() + { + $portnumber = null; + if (self::$_port) { + $portnumber = self::$_port; + } else if (self::getProxyVars() && isset($_SERVER["HTTP_X_FORWARDED_PORT"])) { + $portnumber = $_SERVER["HTTP_X_FORWARDED_PORT"]; + } else if (isset($_SERVER["SERVER_PORT"])) { + $portnumber = $_SERVER["SERVER_PORT"]; + } else { + $currentHost = self::getRawHost(); + + // strip the port + if (false !== strpos($currentHost, ':')) { + list($currentHost, $port) = explode(':', $currentHost, 2); + if (is_numeric($port)) { + $portnumber = $port; + } + } + } + return $portnumber; + } + + /** + * Checks if https or http. + * + * @return bool $isHttps False if https is not active + */ + public static function isHTTPS() + { + return self::getSelfProtocol() == 'https'; + } + + /** + * Returns the URL of the current host + current view. + * + * @return string + */ + public static function getSelfURLNoQuery() + { + $selfURLNoQuery = self::getSelfURLhost(); + + $infoWithBaseURLPath = self::buildWithBaseURLPath($_SERVER['SCRIPT_NAME']); + if (!empty($infoWithBaseURLPath)) { + $selfURLNoQuery .= $infoWithBaseURLPath; + } else { + $selfURLNoQuery .= $_SERVER['SCRIPT_NAME']; + } + + if (isset($_SERVER['PATH_INFO'])) { + $selfURLNoQuery .= $_SERVER['PATH_INFO']; + } + + return $selfURLNoQuery; + } + + /** + * Returns the routed URL of the current host + current view. + * + * @return string + */ + public static function getSelfRoutedURLNoQuery() + { + $selfURLhost = self::getSelfURLhost(); + $route = ''; + + if (!empty($_SERVER['REQUEST_URI'])) { + $route = $_SERVER['REQUEST_URI']; + if (!empty($_SERVER['QUERY_STRING'])) { + $route = self::strLreplace($_SERVER['QUERY_STRING'], '', $route); + if (substr($route, -1) == '?') { + $route = substr($route, 0, -1); + } + } + } + + $infoWithBaseURLPath = self::buildWithBaseURLPath($route); + if (!empty($infoWithBaseURLPath)) { + $route = $infoWithBaseURLPath; + } + + $selfRoutedURLNoQuery = $selfURLhost . $route; + + $pos = strpos($selfRoutedURLNoQuery, "?"); + if ($pos !== false) { + $selfRoutedURLNoQuery = substr($selfRoutedURLNoQuery, 0, $pos); + } + + return $selfRoutedURLNoQuery; + } + + public static function strLreplace($search, $replace, $subject) + { + $pos = strrpos($subject, $search); + + if ($pos !== false) { + $subject = substr_replace($subject, $replace, $pos, strlen($search)); + } + + return $subject; + } + + /** + * Returns the URL of the current host + current view + query. + * + * @return string + */ + public static function getSelfURL() + { + $selfURLhost = self::getSelfURLhost(); + + $requestURI = ''; + if (!empty($_SERVER['REQUEST_URI'])) { + $requestURI = $_SERVER['REQUEST_URI']; + if ($requestURI[0] !== '/' && preg_match('#^https?://[^/]*(/.*)#i', $requestURI, $matches)) { + $requestURI = $matches[1]; + } + } + + $infoWithBaseURLPath = self::buildWithBaseURLPath($requestURI); + if (!empty($infoWithBaseURLPath)) { + $requestURI = $infoWithBaseURLPath; + } + + return $selfURLhost . $requestURI; + } + + /** + * Returns the part of the URL with the BaseURLPath. + * + * @param $info + * + * @return string + */ + protected static function buildWithBaseURLPath($info) + { + $result = ''; + $baseURLPath = self::getBaseURLPath(); + if (!empty($baseURLPath)) { + $result = $baseURLPath; + if (!empty($info)) { + $path = explode('/', $info); + $extractedInfo = array_pop($path); + if (!empty($extractedInfo)) { + $result .= $extractedInfo; + } + } + } + return $result; + } + + /** + * Extract a query param - as it was sent - from $_SERVER[QUERY_STRING] + * + * @param string $name The param to-be extracted + * + * @return string + */ + public static function extractOriginalQueryParam($name) + { + $index = strpos($_SERVER['QUERY_STRING'], $name.'='); + $substring = substr($_SERVER['QUERY_STRING'], $index + strlen($name) + 1); + $end = strpos($substring, '&'); + return $end ? substr($substring, 0, strpos($substring, '&')) : $substring; + } + + /** + * Generates an unique string (used for example as ID for assertions). + * + * @return string A unique string + */ + public static function generateUniqueID() + { + return 'ONELOGIN_' . sha1(uniqid((string)mt_rand(), true)); + } + + /** + * Converts a UNIX timestamp to SAML2 timestamp on the form + * yyyy-mm-ddThh:mm:ss(\.s+)?Z. + * + * @param string|int $time The time we should convert (DateTime). + * + * @return string $timestamp SAML2 timestamp. + */ + public static function parseTime2SAML($time) + { + $date = new DateTime("@$time", new DateTimeZone('UTC')); + $timestamp = $date->format("Y-m-d\TH:i:s\Z"); + return $timestamp; + } + + /** + * Converts a SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z + * to a UNIX timestamp. The sub-second part is ignored. + * + * @param string $time The time we should convert (SAML Timestamp). + * + * @return int $timestamp Converted to a unix timestamp. + * + * @throws Exception + */ + public static function parseSAML2Time($time) + { + $matches = array(); + + /* We use a very strict regex to parse the timestamp. */ + $exp1 = '/^(\\d\\d\\d\\d)-(\\d\\d)-(\\d\\d)'; + $exp2 = 'T(\\d\\d):(\\d\\d):(\\d\\d)(?:\\.\\d+)?Z$/D'; + if (preg_match($exp1 . $exp2, $time, $matches) == 0) { + throw new Exception( + 'Invalid SAML2 timestamp passed to' . + ' parseSAML2Time: ' . $time + ); + } + + /* Extract the different components of the time from the + * matches in the regex. int cast will ignore leading zeroes + * in the string. + */ + $year = (int)$matches[1]; + $month = (int)$matches[2]; + $day = (int)$matches[3]; + $hour = (int)$matches[4]; + $minute = (int)$matches[5]; + $second = (int)$matches[6]; + + /* We use gmmktime because the timestamp will always be given + * in UTC. + */ + $ts = gmmktime($hour, $minute, $second, $month, $day, $year); + + return $ts; + } + + + /** + * Interprets a ISO8601 duration value relative to a given timestamp. + * + * @param string $duration The duration, as a string. + * @param int|null $timestamp The unix timestamp we should apply the + * duration to. Optional, default to the + * current time. + * + * @return int The new timestamp, after the duration is applied. + * + * @throws Exception + */ + public static function parseDuration($duration, $timestamp = null) + { + assert('is_string($duration)'); + assert('is_null($timestamp) || is_int($timestamp)'); + + /* Parse the duration. We use a very strict pattern. */ + $durationRegEx = '#^(-?)P(?:(?:(?:(\\d+)Y)?(?:(\\d+)M)?(?:(\\d+)D)?(?:T(?:(\\d+)H)?(?:(\\d+)M)?(?:(\\d+)S)?)?)|(?:(\\d+)W))$#D'; + $matches = array(); + if (!preg_match($durationRegEx, $duration, $matches)) { + throw new Exception('Invalid ISO 8601 duration: ' . $duration); + } + + $durYears = (empty($matches[2]) ? 0 : (int)$matches[2]); + $durMonths = (empty($matches[3]) ? 0 : (int)$matches[3]); + $durDays = (empty($matches[4]) ? 0 : (int)$matches[4]); + $durHours = (empty($matches[5]) ? 0 : (int)$matches[5]); + $durMinutes = (empty($matches[6]) ? 0 : (int)$matches[6]); + $durSeconds = (empty($matches[7]) ? 0 : (int)$matches[7]); + $durWeeks = (empty($matches[8]) ? 0 : (int)$matches[8]); + + if (!empty($matches[1])) { + /* Negative */ + $durYears = -$durYears; + $durMonths = -$durMonths; + $durDays = -$durDays; + $durHours = -$durHours; + $durMinutes = -$durMinutes; + $durSeconds = -$durSeconds; + $durWeeks = -$durWeeks; + } + + if ($timestamp === null) { + $timestamp = time(); + } + + if ($durYears !== 0 || $durMonths !== 0) { + /* Special handling of months and years, since they aren't a specific interval, but + * instead depend on the current time. + */ + + /* We need the year and month from the timestamp. Unfortunately, PHP doesn't have the + * gmtime function. Instead we use the gmdate function, and split the result. + */ + $yearmonth = explode(':', gmdate('Y:n', $timestamp)); + $year = (int)$yearmonth[0]; + $month = (int)$yearmonth[1]; + + /* Remove the year and month from the timestamp. */ + $timestamp -= gmmktime(0, 0, 0, $month, 1, $year); + + /* Add years and months, and normalize the numbers afterwards. */ + $year += $durYears; + $month += $durMonths; + while ($month > 12) { + $year += 1; + $month -= 12; + } + while ($month < 1) { + $year -= 1; + $month += 12; + } + + /* Add year and month back into timestamp. */ + $timestamp += gmmktime(0, 0, 0, $month, 1, $year); + } + + /* Add the other elements. */ + $timestamp += $durWeeks * 7 * 24 * 60 * 60; + $timestamp += $durDays * 24 * 60 * 60; + $timestamp += $durHours * 60 * 60; + $timestamp += $durMinutes * 60; + $timestamp += $durSeconds; + + return $timestamp; + } + + /** + * Compares 2 dates and returns the earliest. + * + * @param string|null $cacheDuration The duration, as a string. + * @param string|int|null $validUntil The valid until date, as a string or as a timestamp + * + * @return int|null $expireTime The expiration time. + * + * @throws Exception + */ + public static function getExpireTime($cacheDuration = null, $validUntil = null) + { + $expireTime = null; + + if ($cacheDuration !== null) { + $expireTime = self::parseDuration($cacheDuration, time()); + } + + if ($validUntil !== null) { + if (is_int($validUntil)) { + $validUntilTime = $validUntil; + } else { + $validUntilTime = self::parseSAML2Time($validUntil); + } + if ($expireTime === null || $expireTime > $validUntilTime) { + $expireTime = $validUntilTime; + } + } + + return $expireTime; + } + + + /** + * Extracts nodes from the DOMDocument. + * + * @param DOMDocument $dom The DOMDocument + * @param string $query Xpath Expresion + * @param DomElement|null $context Context Node (DomElement) + * + * @return DOMNodeList The queried nodes + */ + public static function query($dom, $query, $context = null) + { + $xpath = new DOMXPath($dom); + $xpath->registerNamespace('samlp', OneLogin_Saml2_Constants::NS_SAMLP); + $xpath->registerNamespace('saml', OneLogin_Saml2_Constants::NS_SAML); + $xpath->registerNamespace('ds', OneLogin_Saml2_Constants::NS_DS); + $xpath->registerNamespace('xenc', OneLogin_Saml2_Constants::NS_XENC); + $xpath->registerNamespace('xsi', OneLogin_Saml2_Constants::NS_XSI); + $xpath->registerNamespace('xs', OneLogin_Saml2_Constants::NS_XS); + $xpath->registerNamespace('md', OneLogin_Saml2_Constants::NS_MD); + + if (isset($context)) { + $res = $xpath->query($query, $context); + } else { + $res = $xpath->query($query); + } + return $res; + } + + /** + * Checks if the session is started or not. + * + * @return bool true if the sessíon is started + */ + public static function isSessionStarted() + { + if (PHP_VERSION_ID >= 50400) { + return session_status() === PHP_SESSION_ACTIVE ? true : false; + } else { + return session_id() === '' ? false : true; + } + } + + /** + * Deletes the local session. + */ + public static function deleteLocalSession() + { + if (OneLogin_Saml2_Utils::isSessionStarted()) { + session_unset(); + session_destroy(); + } else { + $_SESSION = array(); + } + } + + /** + * Calculates the fingerprint of a x509cert. + * + * @param string $x509cert x509 cert + * @param string $alg + * + * @return null|string Formatted fingerprint + */ + public static function calculateX509Fingerprint($x509cert, $alg = 'sha1') + { + assert('is_string($x509cert)'); + + $arCert = explode("\n", $x509cert); + $data = ''; + $inData = false; + + foreach ($arCert as $curData) { + if (! $inData) { + if (strncmp($curData, '-----BEGIN CERTIFICATE', 22) == 0) { + $inData = true; + } elseif ((strncmp($curData, '-----BEGIN PUBLIC KEY', 21) == 0) || (strncmp($curData, '-----BEGIN RSA PRIVATE KEY', 26) == 0)) { + /* This isn't an X509 certificate. */ + return null; + } + } else { + if (strncmp($curData, '-----END CERTIFICATE', 20) == 0) { + break; + } + $data .= trim($curData); + } + } + + if (empty($data)) { + return null; + } + + $decodedData = base64_decode($data); + + switch ($alg) { + case 'sha512': + case 'sha384': + case 'sha256': + $fingerprint = hash($alg, $decodedData, false); + break; + case 'sha1': + default: + $fingerprint = strtolower(sha1($decodedData)); + break; + } + return $fingerprint; + } + + /** + * Formates a fingerprint. + * + * @param string $fingerprint fingerprint + * + * @return string Formatted fingerprint + */ + public static function formatFingerPrint($fingerprint) + { + $formatedFingerprint = str_replace(':', '', $fingerprint); + $formatedFingerprint = strtolower($formatedFingerprint); + return $formatedFingerprint; + } + + /** + * Generates a nameID. + * + * @param string $value fingerprint + * @param string $spnq SP Name Qualifier + * @param string|null $format SP Format + * @param string|null $cert IdP Public cert to encrypt the nameID + * @param string|null $nq IdP Name Qualifier + * + * @return string $nameIDElement DOMElement | XMLSec nameID + * + * @throws Exception + */ + public static function generateNameId($value, $spnq, $format = null, $cert = null, $nq = null) + { + + $doc = new DOMDocument(); + + $nameId = $doc->createElement('saml:NameID'); + if (isset($spnq)) { + $nameId->setAttribute('SPNameQualifier', $spnq); + } + if (isset($nq)) { + $nameId->setAttribute('NameQualifier', $nq); + } + if (isset($format)) { + $nameId->setAttribute('Format', $format); + } + $nameId->appendChild($doc->createTextNode($value)); + + $doc->appendChild($nameId); + + if (!empty($cert)) { + $seckey = new XMLSecurityKey(XMLSecurityKey::RSA_1_5, array('type'=>'public')); + $seckey->loadKey($cert); + + $enc = new XMLSecEnc(); + $enc->setNode($nameId); + $enc->type = XMLSecEnc::Element; + + $symmetricKey = new XMLSecurityKey(XMLSecurityKey::AES128_CBC); + $symmetricKey->generateSessionKey(); + $enc->encryptKey($seckey, $symmetricKey); + + $encryptedData = $enc->encryptNode($symmetricKey); + + $newdoc = new DOMDocument(); + + $encryptedID = $newdoc->createElement('saml:EncryptedID'); + + $newdoc->appendChild($encryptedID); + + $encryptedID->appendChild($encryptedID->ownerDocument->importNode($encryptedData, true)); + + return $newdoc->saveXML($encryptedID); + } else { + return $doc->saveXML($nameId); + } + } + + + /** + * Gets Status from a Response. + * + * @param DOMDocument $dom The Response as XML + * + * @return array $status The Status, an array with the code and a message. + * + * @throws OneLogin_Saml2_ValidationError + */ + public static function getStatus($dom) + { + $status = array(); + + $statusEntry = self::query($dom, '/samlp:Response/samlp:Status'); + if ($statusEntry->length != 1) { + throw new OneLogin_Saml2_ValidationError( + "Missing Status on response", + OneLogin_Saml2_ValidationError::MISSING_STATUS + ); + } + + $codeEntry = self::query($dom, '/samlp:Response/samlp:Status/samlp:StatusCode', $statusEntry->item(0)); + if ($codeEntry->length != 1) { + throw new OneLogin_Saml2_ValidationError( + "Missing Status Code on response", + OneLogin_Saml2_ValidationError::MISSING_STATUS_CODE + ); + } + $code = $codeEntry->item(0)->getAttribute('Value'); + $status['code'] = $code; + + $status['msg'] = ''; + $messageEntry = self::query($dom, '/samlp:Response/samlp:Status/samlp:StatusMessage', $statusEntry->item(0)); + if ($messageEntry->length == 0) { + $subCodeEntry = self::query($dom, '/samlp:Response/samlp:Status/samlp:StatusCode/samlp:StatusCode', $statusEntry->item(0)); + if ($subCodeEntry->length == 1) { + $status['msg'] = $subCodeEntry->item(0)->getAttribute('Value'); + } + } else if ($messageEntry->length == 1) { + $msg = $messageEntry->item(0)->textContent; + $status['msg'] = $msg; + } + + return $status; + } + + /** + * Decrypts an encrypted element. + * + * @param DOMElement $encryptedData The encrypted data. + * @param XMLSecurityKey $inputKey The decryption key. + * @param bool $formatOutput Format or not the output. + * + * @return DOMElement The decrypted element. + * + * @throws OneLogin_Saml2_ValidationError + */ + public static function decryptElement(DOMElement $encryptedData, XMLSecurityKey $inputKey, $formatOutput = true) + { + + $enc = new XMLSecEnc(); + + $enc->setNode($encryptedData); + $enc->type = $encryptedData->getAttribute("Type"); + + $symmetricKey = $enc->locateKey($encryptedData); + if (!$symmetricKey) { + throw new OneLogin_Saml2_ValidationError( + 'Could not locate key algorithm in encrypted data.', + OneLogin_Saml2_ValidationError::KEY_ALGORITHM_ERROR + ); + } + + $symmetricKeyInfo = $enc->locateKeyInfo($symmetricKey); + if (!$symmetricKeyInfo) { + throw new OneLogin_Saml2_ValidationError( + "Could not locate for the encrypted key.", + OneLogin_Saml2_ValidationError::KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA + ); + } + + $inputKeyAlgo = $inputKey->getAlgorithm(); + if ($symmetricKeyInfo->isEncrypted) { + $symKeyInfoAlgo = $symmetricKeyInfo->getAlgorithm(); + + if ($symKeyInfoAlgo === XMLSecurityKey::RSA_OAEP_MGF1P && $inputKeyAlgo === XMLSecurityKey::RSA_1_5) { + $inputKeyAlgo = XMLSecurityKey::RSA_OAEP_MGF1P; + } + + if ($inputKeyAlgo !== $symKeyInfoAlgo) { + throw new OneLogin_Saml2_ValidationError( + 'Algorithm mismatch between input key and key used to encrypt ' . + ' the symmetric key for the message. Key was: ' . + var_export($inputKeyAlgo, true) . '; message was: ' . + var_export($symKeyInfoAlgo, true), + OneLogin_Saml2_ValidationError::KEY_ALGORITHM_ERROR + ); + } + + $encKey = $symmetricKeyInfo->encryptedCtx; + $symmetricKeyInfo->key = $inputKey->key; + $keySize = $symmetricKey->getSymmetricKeySize(); + if ($keySize === null) { + // To protect against "key oracle" attacks + throw new OneLogin_Saml2_ValidationError( + 'Unknown key size for encryption algorithm: ' . var_export($symmetricKey->type, true), + OneLogin_Saml2_ValidationError::KEY_ALGORITHM_ERROR + ); + } + + $key = $encKey->decryptKey($symmetricKeyInfo); + if (strlen($key) != $keySize) { + $encryptedKey = $encKey->getCipherValue(); + $pkey = openssl_pkey_get_details($symmetricKeyInfo->key); + $pkey = sha1(serialize($pkey), true); + $key = sha1($encryptedKey . $pkey, true); + + /* Make sure that the key has the correct length. */ + if (strlen($key) > $keySize) { + $key = substr($key, 0, $keySize); + } elseif (strlen($key) < $keySize) { + $key = str_pad($key, $keySize); + } + } + $symmetricKey->loadKey($key); + } else { + $symKeyAlgo = $symmetricKey->getAlgorithm(); + if ($inputKeyAlgo !== $symKeyAlgo) { + throw new OneLogin_Saml2_ValidationError( + 'Algorithm mismatch between input key and key in message. ' . + 'Key was: ' . var_export($inputKeyAlgo, true) . '; message was: ' . + var_export($symKeyAlgo, true), + OneLogin_Saml2_ValidationError::KEY_ALGORITHM_ERROR + ); + } + $symmetricKey = $inputKey; + } + + $decrypted = $enc->decryptNode($symmetricKey, false); + + $xml = ''.$decrypted.''; + $newDoc = new DOMDocument(); + if ($formatOutput) { + $newDoc->preserveWhiteSpace = false; + $newDoc->formatOutput = true; + } + $newDoc = self::loadXML($newDoc, $xml); + if (!$newDoc) { + throw new OneLogin_Saml2_ValidationError( + 'Failed to parse decrypted XML.', + OneLogin_Saml2_ValidationError::INVALID_XML_FORMAT + ); + } + + $decryptedElement = $newDoc->firstChild->firstChild; + if ($decryptedElement === null) { + throw new OneLogin_Saml2_ValidationError( + 'Missing encrypted element.', + OneLogin_Saml2_ValidationError::MISSING_ENCRYPTED_ELEMENT + ); + } + + return $decryptedElement; + } + + /** + * Converts a XMLSecurityKey to the correct algorithm. + * + * @param XMLSecurityKey $key The key. + * @param string $algorithm The desired algorithm. + * @param string $type Public or private key, defaults to public. + * + * @return XMLSecurityKey The new key. + * + * @throws Exception + */ + public static function castKey(XMLSecurityKey $key, $algorithm, $type = 'public') + { + assert('is_string($algorithm)'); + assert('$type === "public" || $type === "private"'); + // do nothing if algorithm is already the type of the key + if ($key->type === $algorithm) { + return $key; + } + + if (!OneLogin_Saml2_Utils::isSupportedSigningAlgorithm($algorithm)) { + throw new Exception('Unsupported signing algorithm.'); + } + + $keyInfo = openssl_pkey_get_details($key->key); + if ($keyInfo === false) { + throw new Exception('Unable to get key details from XMLSecurityKey.'); + } + if (!isset($keyInfo['key'])) { + throw new Exception('Missing key in public key details.'); + } + $newKey = new XMLSecurityKey($algorithm, array('type'=>$type)); + $newKey->loadKey($keyInfo['key']); + return $newKey; + } + + /** + * @param $algorithm + * + * @return bool + */ + public static function isSupportedSigningAlgorithm($algorithm) + { + return in_array( + $algorithm, + array( + XMLSecurityKey::RSA_1_5, + XMLSecurityKey::RSA_SHA1, + XMLSecurityKey::RSA_SHA256, + XMLSecurityKey::RSA_SHA384, + XMLSecurityKey::RSA_SHA512 + ) + ); + } + + /** + * Adds signature key and senders certificate to an element (Message or Assertion). + * + * @param string|DomDocument $xml The element we should sign + * @param string $key The private key + * @param string $cert The public + * @param string $signAlgorithm Signature algorithm method + * @param string $digestAlgorithm Digest algorithm method + * + * @return string + * + * @throws Exception + */ + public static function addSign($xml, $key, $cert, $signAlgorithm = XMLSecurityKey::RSA_SHA1, $digestAlgorithm = XMLSecurityDSig::SHA1) + { + if ($xml instanceof DOMDocument) { + $dom = $xml; + } else { + $dom = new DOMDocument(); + $dom = self::loadXML($dom, $xml); + if (!$dom) { + throw new Exception('Error parsing xml string'); + } + } + + /* Load the private key. */ + $objKey = new XMLSecurityKey($signAlgorithm, array('type' => 'private')); + $objKey->loadKey($key, false); + + /* Get the EntityDescriptor node we should sign. */ + $rootNode = $dom->firstChild; + + /* Sign the metadata with our private key. */ + $objXMLSecDSig = new XMLSecurityDSig(); + $objXMLSecDSig->setCanonicalMethod(XMLSecurityDSig::EXC_C14N); + + $objXMLSecDSig->addReferenceList( + array($rootNode), + $digestAlgorithm, + array('http://www.w3.org/2000/09/xmldsig#enveloped-signature', XMLSecurityDSig::EXC_C14N), + array('id_name' => 'ID') + ); + + $objXMLSecDSig->sign($objKey); + + /* Add the certificate to the signature. */ + $objXMLSecDSig->add509Cert($cert, true); + + $insertBefore = $rootNode->firstChild; + $messageTypes = array('AuthnRequest', 'Response', 'LogoutRequest','LogoutResponse'); + if (in_array($rootNode->localName, $messageTypes)) { + $issuerNodes = self::query($dom, '/'.$rootNode->tagName.'/saml:Issuer'); + if ($issuerNodes->length == 1) { + $insertBefore = $issuerNodes->item(0)->nextSibling; + } + } + + /* Add the signature. */ + $objXMLSecDSig->insertSignature($rootNode, $insertBefore); + + /* Return the DOM tree as a string. */ + $signedxml = $dom->saveXML(); + + return $signedxml; + } + + /** + * Validates a signature (Message or Assertion). + * + * @param string|DomNode $xml The element we should validate + * @param string|null $cert The public cert + * @param string|null $fingerprint The fingerprint of the public cert + * @param string|null $fingerprintalg The algorithm used to get the fingerprint + * @param string|null $xpath The xpath of the signed element + * @param array|null $multiCerts Multiple public certs + * + * @return bool + * + * @throws Exception + */ + public static function validateSign($xml, $cert = null, $fingerprint = null, $fingerprintalg = 'sha1', $xpath = null, $multiCerts = null) + { + if ($xml instanceof DOMDocument) { + $dom = clone $xml; + } else if ($xml instanceof DOMElement) { + $dom = clone $xml->ownerDocument; + } else { + $dom = new DOMDocument(); + $dom = self::loadXML($dom, $xml); + } + + $objXMLSecDSig = new XMLSecurityDSig(); + $objXMLSecDSig->idKeys = array('ID'); + + if ($xpath) { + $nodeset = OneLogin_Saml2_Utils::query($dom, $xpath); + $objDSig = $nodeset->item(0); + $objXMLSecDSig->sigNode = $objDSig; + } else { + $objDSig = $objXMLSecDSig->locateSignature($dom); + } + + if (!$objDSig) { + throw new Exception('Cannot locate Signature Node'); + } + + $objKey = $objXMLSecDSig->locateKey(); + if (!$objKey) { + throw new Exception('We have no idea about the key'); + } + + if (!OneLogin_Saml2_Utils::isSupportedSigningAlgorithm($objKey->type)) { + throw new Exception('Unsupported signing algorithm.'); + } + + $objXMLSecDSig->canonicalizeSignedInfo(); + + try { + $retVal = $objXMLSecDSig->validateReference(); + } catch (Exception $e) { + throw $e; + } + + XMLSecEnc::staticLocateKeyInfo($objKey, $objDSig); + + if (!empty($multiCerts)) { + // If multiple certs are provided, I may ignore $cert and + // $fingerprint provided by the method and just check the + // certs on the array + $fingerprint = null; + } else { + // else I add the cert to the array in order to check + // validate signatures with it and the with it and the + // $fingerprint value + $multiCerts = array($cert); + } + + $valid = false; + foreach ($multiCerts as $cert) { + if (!empty($cert)) { + $objKey->loadKey($cert, false, true); + if ($objXMLSecDSig->verify($objKey) === 1) { + $valid = true; + break; + } + } else { + if (!empty($fingerprint)) { + $domCert = $objKey->getX509Certificate(); + $domCertFingerprint = OneLogin_Saml2_Utils::calculateX509Fingerprint($domCert, $fingerprintalg); + if (OneLogin_Saml2_Utils::formatFingerPrint($fingerprint) == $domCertFingerprint) { + $objKey->loadKey($domCert, false, true); + if ($objXMLSecDSig->verify($objKey) === 1) { + $valid = true; + break; + } + } + } + } + } + return $valid; + } + + /** + * Validates a binary signature + * + * @param string $messageType Type of SAML Message + * @param array $getData HTTP GET array + * @param array $idpData IdP setting data + * @param bool $retrieveParametersFromServer Indicates where to get the values in order to validate the Sign, from getData or from $_SERVER + * + * @return bool + * + * @throws Exception + */ + public static function validateBinarySign($messageType, $getData, $idpData, $retrieveParametersFromServer = false) + { + if (!isset($getData['SigAlg'])) { + $signAlg = XMLSecurityKey::RSA_SHA1; + } else { + $signAlg = $getData['SigAlg']; + } + + if ($retrieveParametersFromServer) { + $signedQuery = $messageType.'='.OneLogin_Saml2_Utils::extractOriginalQueryParam($messageType); + if (isset($getData['RelayState'])) { + $signedQuery .= '&RelayState='.OneLogin_Saml2_Utils::extractOriginalQueryParam('RelayState'); + } + $signedQuery .= '&SigAlg='.OneLogin_Saml2_Utils::extractOriginalQueryParam('SigAlg'); + } else { + $signedQuery = $messageType.'='.urlencode($getData[$messageType]); + if (isset($getData['RelayState'])) { + $signedQuery .= '&RelayState='.urlencode($getData['RelayState']); + } + $signedQuery .= '&SigAlg='.urlencode($signAlg); + } + + if ($messageType == "SAMLRequest") { + $strMessageType = "Logout Request"; + } else { + $strMessageType = "Logout Response"; + } + $existsMultiX509Sign = isset($idpData['x509certMulti']) && isset($idpData['x509certMulti']['signing']) && !empty($idpData['x509certMulti']['signing']); + if ((!isset($idpData['x509cert']) || empty($idpData['x509cert'])) && !$existsMultiX509Sign) { + throw new OneLogin_Saml2_Error( + "In order to validate the sign on the ".$strMessageType.", the x509cert of the IdP is required", + OneLogin_Saml2_Error::CERT_NOT_FOUND + ); + } + + if ($existsMultiX509Sign) { + $multiCerts = $idpData['x509certMulti']['signing']; + } else { + $multiCerts = array($idpData['x509cert']); + } + + $signatureValid = false; + foreach ($multiCerts as $cert) { + $objKey = new XMLSecurityKey(XMLSecurityKey::RSA_SHA1, array('type' => 'public')); + $objKey->loadKey($cert, false, true); + + if ($signAlg != XMLSecurityKey::RSA_SHA1) { + try { + $objKey = OneLogin_Saml2_Utils::castKey($objKey, $signAlg, 'public'); + } catch (Exception $e) { + $ex = new OneLogin_Saml2_ValidationError( + "Invalid signAlg in the received ".$strMessageType, + OneLogin_Saml2_ValidationError::INVALID_SIGNATURE + ); + if (count($multiCerts) == 1) { + throw $ex; + } + } + } + + if ($objKey->verifySignature($signedQuery, base64_decode($getData['Signature'])) === 1) { + $signatureValid = true; + break; + } + } + return $signatureValid; + } +} + diff --git a/docs/Saml2/font/FontAwesome.otf b/docs/Saml2/font/FontAwesome.otf new file mode 100644 index 0000000000000000000000000000000000000000..3461e3fce6a37f2321ecbe64707f04c0a4f05424 GIT binary patch literal 75188 zcmd42cYG5^*C@QQyeoNEmI+v3OJ1!hp?BN#Bql&0F(rUQ=*C61jEjsU_uhM#yN!)a zZ=nSOfy5~U0x2Yzbn+xmdPp$|WF(Ia_sq&BJV=l2St!J@u6Ld}hLIigG(oNmSNVYp2bu*`8&mCT(g%JrKs|W6VjPjD7@?@<57`EsF_Gij(~7S;$jX z2uy5njLz_R|~-giuu0_{g+f+ve88OQ{Hz6>Y}qGm4HH8LdoEP_Ir~wHA13xKq37E z1Q7#%ImkKEQfdVC%s|@tAvjG9rGf|G%tLS)wVE;wz~z*JdUGJ{Lb24ffiy>{sLuw{ zN=i%p4&x(nc7ggcB(4K#2{l|&I*@jvl#*QoX(=^T^1?vc`5_#d8Y8(m0B0V8%cxE# z$pBnVc{p_qq+KX?r%B0{5Tf&5n`|=c zVocso$A%h=aRy_sSr<0ddtr36w}@);HtI||V*&u5GQ^q}ChAOv7#*33dEO5J<`I%J z*XfL=NJFf*@6;JnrxS?Jv(dU>lMZNv>x|xJgST0)^ZvUTCS9nR;D;OFCALM<4|cS0 zYNX*m0;fd-nOKu<8nuWrP;pc;Wuzjh2ue?xfq7<9)2SJhFQgVyVemeL(m{GHV42{( zj*5ZUn|hjxr9$DY5z3R_VDViTHB~GZO+`ceH&s%?2xUzWj8p>r63nNdWGs|hNF|Ez z3_x2)t$`3h#RG+4z;(3FM9l*V{~4dWakP0RwGPS}p_WLIvN!Z%D)eP4^k@*r2UcJ- zU?=@*H?{x2(58Ba^p5QH?|rs+TW>_~_TISOtlp~Lj^1Ov-M!a( zzv}J1P2C=H+Z$+4xIO*0|LtdQZ@V3LJL`7U?T*{WZg=0lcKa(r`~KGyb$|2y)%O?P zpZ?_!U)FuOW{B$$#SnIg%Mkex*jk1-50MUW8X_4&x!rfW>vqTOPq#nZZoBom{jU7N z?Kihy-F|Vq<@U4NPi{ZD{owY!+jnl?x_#sJZ|;=H59|LA1MdHSc=vyM#lTJ^gTau`vLeC!n{ysFfXP_Uc`a;;df9b8Q`%5CI-q;j?f_Z z08@+f2t13LIfyd|dpIWbJ7SE2M+X6Y`2Iv zkp55o6=8%9;E*zdF@cM1gm+?lAU^<05&JWMOK=9?GfrY#nxQ=#37!98@E7s2C_kX( zC)VL8>pEDTzy|wG(u4WIx(CZZyip8U549cAFn<07M;srB30*Ni03+$ax};f-cVgcG z?mU=>^dM|7CT$V}dFOaPnef&?TC8tyti(D1AN0WcgLMzq`5)sfN=5Jn`%Q2L%ZV|e zl|>C1nDg+#cYyEwFueh|8;M1@qnrlv{tx2;EpI}L@Bj%;S(HBnvCo4r5Z3J3VAh|L z<;C|91Fq}f+8ik7{a@>YGGgBWt|0H6vm9+D_>zG%!GU*vgSez_v3`gN?0**q@gSZe z&4DsfsLMf%#B&~$%c2BmvjBC70pNldvK)OGz|)9*7$^_8{)72JI)izrZzX|2bz&g6 z5X63xu^GT)2Fno{M$)8hgZ%>hi3CQMO{9n`r5)Xz4^*h=``X=^^&>Ji>7z6GQLVJL| z_aKddx*yOSg#T~iaf59p@jw_#VuBCxViH3?=0bWXsoR0$7|#Km$Kk!l!}JNx|I;6t zQ24u_Le9kh{ZB$TOd^pe9yTF>YR?YaZFd!x{0fp_1!PlmxoWQIAlbaCRI;O$No?ms&tQPAvhI zcLfzlZKi@i0oH?3y#tirbSj%Fr|PH{s)IU29j9KRy5UrMnfj3Wg8G5#rT(J&;SlaD zkxPb1R1%Fukc^g0koZa-mn@S6N`fTOk~m4Kq)<{PX_a(J4ogl*PD{>7UX{Elxh%OM z`M2a}$#0TBB}j75iFF$8q;VSOd9(^983P8*!UoeWONP6bYtPEAf-PDhGoA5e9%B|W&ob+o%}g+} zor!0%nS7>*zlX3A#CmdZBB z^s;1GuB<{3O7?^7SJ@vjyIdjH$RCx@kk69Omp?9FB3~hY zP97?ck{jen@yA4hRgPR6M?4L6qa z zy9%44-&Nu&cXe|e?y7dxx<2YU+11B&w(ES?CtMe~E_DrXUFEvYb))N6*AUlm*X^#c zu141c*A&+b*BsXZ*AmwX*BaM)*Jjt9uAQ!XT@Sh*bv@yF+V!04E3U7*zUBHsM0Bvp z6ccZX3^nP3jiGv7Y=SP@5T^rEoY8DD2OCKU(#6D?ljFg15*`^HW7Y>n2OA@FW<5zo zn#_hMqb|mfpi40rVuB)L#mEqEHiUXs4$|w0y-7?aMuwU7@FF5MC|VazP#^`i7&DX<)1tk} zk=!0{GDn6dlQu`jh5?RPWFRTxg$IY~$cO|bM26`MaZp`6>27Q&40mu`5NR3E4I_kr z1lY79%_e=YQ3vxC8byX4tX^?JA;FeMmyr6BCv*unaJ31gP1Ud z8g*c=(i>nNNwWv07Ros0I3ySbQJn2yqtTG)7+Nvq7)~)6ALn>UCRQ8;!U(_=ktw>M z@c8KHfut!WI67LF6dD~I6a1hh5s~3$Fye)WM?yoAflXkLNgNt&FzH}OVk2WC#FoNv z#p*(Xqjj-iP#aj~3^AdGm>8J6nBa(5-GkAIj~g5t(j24CoT$^m+!*5G2&GV1MB%_g zI-{e8fi$Ugpp^+aBbWk%2OF(77$Z}N-7gw=G$<72*lbRW1eP<3ts;CvSXIn8*fa?0 zG#a9G$*{^y15GrU_3<$wrl9yZaj7{nqMEMi#cu~7sM_|IsF(ntoqpS$k<48aWzyeH0I4A^|4`iyr2#gaSZHP93;}hy z_|kz4)q@a=j}Cz)409Qw6Gu+0m+TIXoP+Vm#uOA22Bpk;1FV5Kohd#N8gJ4OZgJEY z92M4KLFx*{R0vo_m3`OVNl># zoN#lDA%yIqjz#9+RFPkH!~^q*t#PD8iqNmvSYWlm9W;7y*+TCh7EEN29uiI@t4o4* zi2HJ=fy|0Y+_z0JP>${VqCg%1PX*1KJ@+A5ZUU||!jg-OGn?W= z9EqTrbA00BQ&Py-MCxD;BMBX%6a1YbYJo`~sf!L96zz`s$#xI~k`8zwKGLMu!9EiT z3l1(EL&IRvJ2pabX^P9@VSroTK7zY941^LXFt&2BCgutEv>&3VoZp`9CqKt_l=1{Vr z9xN(RB7~3`2KgHTa>Zxn+y}6M`!5iQM1T;i2N2TwL8vJ8{*fVXgM55^A^0W3HWeSD z6FV}HPJ&q@;b9oayWr$7n19eAf!AQH2Bb)2EMy~$!7<^W)J1_#6&pTd_Kc87mPcQP11(l~fAE6f1f>c9p^hIRIw1W-IdJrf%cK%EPya{+ZO zpw0!EFOSVFUBT2u8z$zTeZ24*L-k2%VmWX>=zGf3to8zXy8wnY{q zYm)7j9gzJ?_MPmOtXFndW)n>ff_%Jun%q}D7mN*0%Gb-c%6G^Uqs7#NV;?jm*JT!y*~ckyx==`z-3xy!RI8(g-6p&#U8~0 z#W}@0aNz$&@r$At4*Pv@)R(y`T!*@ja2@YD6At)K!2y309PN#+X|7qWd9FopptrcT zxbAY@=X%)nnCnZfmt3#8e&Tx5^()u!T>o^%N@wLzrA9eMIZ^4OoTv0xE>=FRT&dio z)GOnaY06w>iLz2zt87>9Q65vCQNF6YqjLx(`o+3HtDMCLFgiZqS^nw)69*WaefT2nCrH8J29+gL^zW`P$lw>KXxEN7rc%`Ct`NVIM80kB!xH-P=yD z)8Zax-L`G(1RRL8JeQoFp3E`RSWY&T=TxX06}9sXY&*Y{7i<>$Db+YuTPm|Jz`x*M z>h$RJAD#@MLF~WGlurXZ!z_p(*eV$j=mt zic5-$)hREIwIpgYQ?rwEljVuUSe2fp#@@0tq)Klu*48G~r8K0w&34$+O-WWb*;5K zmyc}VYET<;VqP^A0a?Au?;M#b5xIO%B-YPzJ zp3bkf6xM1iwa57j7eZLh!rlu^0KO`Oz_d1}r3CWN^C-}H;D=)tv0OFV-!q1_^*qXQ zt+QfW2k{$ELD*Jd&_T1mu9Kb}K#SY+u7^ybYe@ku!Xj<;{Jmpn-u3!^h*)X9x04H;T1h5z!i7ttko zCHZ;k9gU{_O^sDGjaut-D2r1Oz9%d~Izd>3bcC?T(fz=n*j;9IcQ!g!fi}RwM^~R@ zxh7s~53~lF*`25~n{@O|zpc{Cq8q4D^!AGOUJYu7)o#!IK+xp+QSYOyn(hJ#k% zC{1ikd3mfb7d?XJZ9q?JF27Y>_lEH0vp;R?-LW@sf5Cymmg45d$~O5ewsL1iLsnzh znV=JqU&^^s6ezU@_VxI)eXrVk&_cdH$hMV!W&OmHi#2xNGrZkbw)o`4S2k#ELH*lk zbLR_uXP02jv}WC8IgLHC)E;S%RCBT&EH@7%L)Jt#lb;A<9(^yiG+L9ER+OJE1f>{4 zwyM4QkZkL|kTWUT{HErjX3fF<4IQ0=b%k|-b%lKaozS^I>!7B&xxBhbIMcfC)JtkF z+C}z~;Z#towmLnnB2A-g<2P)e^YaUHa@Dz&Io0`ED{tq~vpn!%xHX)vuCBDysyX}` ze*HBh$8!bzxD1a3!68E)Y&uLYWC4s{e-6K<;Uf5i7M`OsGxJhY&@7hgDD{$2QchLG zV+JuxSo{_K3e9Cpd3)d_-WrG=;~|H>LSF%EqdCC;ukliDco@q)$JzsDu?JZJjlp9` zso5-IF!Ll&kO{1m5;_*d5h1i9%LIR%K3Q7^XcM3YrR93gkI^j^(|iK{?0?8PHaN6YweEq^qi1 zJa)gul<)yr>?FJUEtw;Aiao@8VM=z2&*YJkSIvPAr}3Oa40GdItHtiVp5?+y@!Eii>{SLG zMJezc6*yq`#VmIbto8OD)deEn_1GWzV?C1d5cwa21ugTrzUUh*_Y`Y$$30K6+&jE& z-hLi9XdfghST2jb*OLfU>k*VhdM>k}C9hS(Enc%`F$YqY^P;o3@D+HtKV~)CW2zf> z2yb8+_PUJcYj8MDz>nwxgrv;Ogm`s-ip<=Q(4MI+sH-ok*VH#uRM)}g@B?cHuJJ%p zcEbjb8z98&yazDT4c_y@hCdw~#nBB7H7%`bZu6dysH|1cmqB| zV|P3s)iY=ss;FzRv{W~ER@7A1l-I~BnDV@eyz0EJU=P@Ut7uflaNjJt4!f|K9S8G? z+@Io!*zqp%x;1M!NRes5oFY^<%Ts`adC zpvzO4?2?QOwS6&2KgJp<{9*f;)@SJgXXsOZ2$rke5lGUr1z<|lHjQil? z#Sb`D$5pzmdS_Fs#(IZot4mML7ZL*K>RDvQus*U(b26Inu8 zkILQIT?x%{PSuvylmblaKcC;jr!=Ltp#Yx4!?AKQ9vUr-vd^Xs3?4FW93BFT8Z88! z36@_sGlln}{Xyw#s4FY46{;)CDm6v2tek>^-0a*;PdjbjL(i~&A>-zOaKOH;JV%te zb=yvN6K#Qr1T9w@%5wdI;lR7u&{Xs@h$u9N#_!4Ofv8z!ACDGV#ef&mTm>kV-G8vk zJ*l1MI<2YBP>`I&$@Z>#y5VUJmf(o>u#`rki1i3=cu~YFXr#bZL(QBj=GT}B6X55- zgag0+dVuC;vlliz2_1X^C&Tjs2ZC<~?`6xH#8;3VsefbtM%X*@i}F0V6&E(V{q}_m zZv#`i%a#H^xJ;gmUEud;;)oi?q+eAq@+n4o!f)DN71lwL7u^*B)WpnmFXa z|Gl<2*=pcoG6C8nZ1-vOG)Rk+cm0`jXbg=CnR9py?LQKoVz`>xT1&OX(@IXqNSij%Ro&t8ev`R=44NUJZ7N_Dl`Tb z4g<|u!E?b{V`5@LvhmI|kNU=jrp9`C$8JuwHZbg&$y+X8zj5Zx4?cg-cdpj{7xyTu zEUqc4$*;+4%xlhR!U9V2!27w)c>bbQ%NM65r=(RG<)x*iB_Mh9?K!)5Yq`dZ_R_{i zPp+QSO4j6()fYcF!hdja^%9soH{SXb60RZsb>uDeqMzhozlS|oh8M##2DW?-#tT*= zx{FTYllU&D`V!6?M0vH6aYUndSdbtDGWnJKeirND)Buu$`(X9OC0usf&cb$0`_9U` zHUYMOGlxp?7PJK|g)vxyM#HlNEx{1uC0q-ugo-SjMSH5EYGp`)Jh)&>QK=fFtV#6_ z&pqq^n$VD9Nv=Dc3fpyGQUu1z`cK?d=fpZhtR%mkFr~UO+xuxb*Fj>c}QeCY}qql(e)IuAOB>Mu%3D zhm(N{f0e`cf%$VlWJ@__G1~+)NVm1s?cS}1xU2=FGVr7)Y$`v&;iR=CJ-JNaa&wCE z^I=D8ZGm~{W;kQEDH%9?93Bf}SqtO1l+^)i4AcXS!9mCaKaE1L3#avR?gkNv+@Uep zGQjSH-vHeLjRK*{aCXobI4i7v4%}BL3VyvQaCV_`DXN45j~A+mqV`CrgOsH3zEj}` zl7A8FjTF3sDyeSCI>~y;M#*N$R>?L=h$KOhBzal#yOWbsyVD`3Po-0&I_YldtIl%g z)y`GUztU6b)%3^A2-zyxr}AKMyC`%S?~?0s&gCAvk=@A+8INpxB=(UTLj#5lA9mM0RrTa>kKqf4hYYV6-ZA{ja6Dqli0vcJdCc`l z_NefrJuj-uHIp z_ag5-Bk7SbBd?8`JgRzB$EXvdxzVqT2_JLe(TK6hDdQne>}%&PT|}sb7SXr&V6^@?0L85$Ikz4LBeCnk3apyM*md{H!eK3@ZOUFPv$@M z`O?6p|`6^)U^1oJ;tz5tI=SWf&zn@w=LQBeek&8^x!KY<3rYj{2rPcrU^5J_3O6i3Uo(wU+Qk_ z?uWaEPYe$V*N5*2KO3Qq*bs3%;#|bL5&zaF>a+E~MV^VYZEx7#w7q5fPf@d@)zBK2UJENyPuv9$Z?JJR>1f1mMaMttUy z%vZCrvLDIbl`|rDd>)gxIM0%IG4F2v)cnN!iu?lw`oc-Y5v9kfL(3p?(2J)J??u>?_IvPZtsu#zSw{EfZsvg!5fFx93FYN_Q>)V+>dQI z_U-Yk<|)<*&W> z`s6ocZz|t9`_>!Zr0qi+^oOZc(eIt>&=}vJ8pJ%D82e_D7_J=EEd>ru2@r4 zcqf{QAY4A$@tOXzX8>~2UtZ9$Qtyd(;wdz`BqJxYGd#W|1I#Hak1j~iuk;MSPWqJ{ z3oh$D(M~)SFsH86CoDL+((@{II=b?+gv&?a1)4(ROK21eGyrSLW&LLzM=yI`MNUUA zCw#W@sHd_Fj@q_UAeimGR-z)}z*tDyeL*GO!%tzYkgOGLBUX4Xo69TvGeHmQk=g>$ zVb!kWwsWjZ{5ojau39(DR^6AYjL`AcUv0 zLt*N?Rm2>bol{bjqwVj(7CJP;5FV_)x9Kh3wm}AH*|h!0TfEY{6f8g>@1;4Q$j;=C z@PhI~ww*m>0Xv6(0&BC#I!vAMyAweLaDsEbGZL^|zWk#fAOBNR22OZ?{`kq2j|3zj zIU0kUL0@p%-QKyYqf6dzk@dacJZmnNKC@nn)uXU_B=#IB-?nbjv?ZDnri58C>4(!` zCiT3F)$o5uKI6kRzad7w5O(b){PFxCBiNIUsY*aw_h-myPPo^D+*oBO-{+3qRll(X zyz&M#w9i#_AgaMsskN8%;CSmMdS_0`F03Ys+g8@l%Vo4o-;y~Da+ zb=^MK?us_qm3UK+buNAjU9ir38?CkuMXT*Yt@BpUXvd}h3C+&E|7OWlq7f>Tunzr> z&uXLb2rS_B@Qgr0G+NFgY9jIxZ1))CgQ#E7ECKiQJ(9pH(S(0NKaf9bbq`p__gVTa zXW4s}9QG_|XqvqW>gR!J|q1 zy}&`!_WLZHJAmj@?0=V^IqwEZG!$(gEPoC;p2zuz3F33)LFXP2 z6!Z8Tkamz23*mE)3J7t+{Y5a$$m0H0p9M{1$ti|$Tnk_`Hp|4@0R$;#2djl!0ytxv zWj>&y9h%AK!&-T;e8kfB9>;ZpwFfWIlq3*HaUJCj|Ic1 z85gS2WZnu|D*~-m+YgMRg7XVGMnFbJj^9Ukt+JyODZtn(MV4Etw)7^@5d*;>3x<3g zc!@_n(LC@%v1wTQmq&FjDHw@0c@%cm!r<9%&pGT z9^3lD)+3uzV=`j0qwq?DM_N&4GTajwWpF#tTBJn*adnYR+gqbNBR7W!MQ)K7JYwKaYx&9M!0>Za`1YU=eg+-dlTTiLVOUp~jwf5`QSo?K*EL~huT&%X6 z!A`WAM;5!g70gA*WId~@Z!GS}sK*BMjE8k{1dE@S;Ucsx_~_EoV7+I5sQp$(R&hdo zhUeQ0tMY3LYfC&WCAAebRkmf;8y>c0_8W9TbxmG>ax&@RE5+`)*l}sZz_*GSf7;h)GLpXekpa zWnHKTJ;9@u=t;f{_t1qhTd6%lbu#N@+6!8{U*CRucXr&aI1T;*5Snoyom`fY4!kyx zNzQ0$D-)VgAQZo7!Ip7qA9-(RN)GG5Snr@u#py zb!MAec4)B08pwbd&N2fG?qI`1Gg&L#e|VsoycI4)cD7aR%kJ`2qDT3@JJvf#S#$>m z{m%dG9`Z-PvGz>nNwGg{<5g7+MU6RixCixkfUUbCSCgAtl%FTy>-ajIpI4ZhqkfEq z3lV&$nn!m~pscZ>wxLSEe^@&v^RUcofk`LBpaEx1Mi5Ga5~brEWN0+R7< zumN|#!M`)JBe7m(o zh)@Y+E zW?FVmdV!Dnu%GLhH$f<6S4@X!4I}?hoiG4OH;RMxUPr(&!N2CAdu+13M6MhyB@I3R};e z(IDiVM>&3SplzxGFt9ie{?~x(*zMlWCgxT){?LgQH0;Q;j z>^Fh3ORRPeP@e>vdK3y|Pzm0OwnF7jR8^rr} za^G;GbN8vU;(fz&Y!H477S;?+bZk|VL3juBDz{f53&S&IZ2%rB?8t~sH>Jvx(lb*` zYPkLIV;kx!s_V5kkQU9q4*FK?H`p63*T9TE^7>^&3;UZpn~tf;jva`4>Y%OA`gYc) zRavLmA3?v{pNHoW{JVV`mb8yNIbPeo5v|xxW6A#C<{?fKC0>eHd+OML`FxaY(wudV z1qn+V=%lx^ufC^7ucKE{EBXnZS8*$TeOY!u(hBX;O#0KHIo*>qhh%#8kPLCZeSswV z1+?OD`+550Z|!%HM6JA+S!%OL*Ro3ceb6D?AqCc!Q>x!r{yOEDwlX)TELWqCHADzc zAbAINg-71;ggRos;b^U;tg=@7)A7r{{0_Z>vNOQzeRpP8vi!G27s1e|RAc38EE~T_Yf3g|#-+>6nW;$z_4Dit;zf!UK|v^wg4Bf8 zB^-bb;-knFh{ZOicBKnVxh)0Fx%<-grR+(P!^z6^7rYj4Q{!zDA%?7WN0K4Mkd~I4 zT9BSAH>Ibg#;W~T3%R7xg8Ji%fFQa=_EOk8_Oc^jn^J+nZw$}$xjQ=&u%oyS!0uV@ z4O3Z%f$ls^25NMz3ee#`&+0zhk?3~^V^=?LybX-I^dKc-@d5(aof)P8tFMg^CK(T? z#tz8LFfU>QXNK7kz#-8O>iQrV8>mKuY0$K;96WU8AR2n`=eK`8cnF@KuKaX`{2jdV z^G}eyGUCc`YgDN<(yCV{z&(+8!Mq(Vm^<1_cWJJaslwQ-?9!}Fe1oO5Uh`8hTVE%d zJA>H<3mVBMw(z^!OWQSQ=)jvRf5*eJs6k|YScFsO&e9IBlLqsh0|iJ)fD8?GBz}T7 zBFgFrJ}SC2dJ{j4k{&u(dQfvEf_JoGn1|ibj1rYKvedfW8u@pdBkkMOB4y=9a-`V^ zHx|QxVjsF%2etXbUqaWvBEYr!R=U&FL@c4{+s$UJeY<@-tv|BI^s45_;idSmzSF9-_Jk(0r7XELF+T}+-!phbWNk|b*W8=N1U}VpF;U3fRc5JekT+Ob zDjGF58-s@JIfAC16VTp1ZPU5@b30z}JZcQ?*sSRT#F~8$@FpElLyvm`hCG9aw11Y4lhR|T`S9u$~&jgP&yL}Rxw zOCEdfX``?nlpJ`I#|!t|W#Dw8g_Exg&YrSVR@)zlKx6yc3kmKJz{3e9vz;Abi|o^> zhGl(-AH9sHy^1HxOOldGk~HJTSCowx?63BZR$Y0!qW+3d-qc>*1ZD)6L?qXgS;{OH zb$jW~lAYQ$wRl{`C+g$9sCmytt#w^7-4X)LzYw7gUzZn`uf-z_bkUBI9Xr&OAnQle z!_P1@EENsYSjuWG>YYXKXg9Y_tKPmRy*~XwUdx8t`oFgRDSrYjehMx1hx?6StJwpt ziQ$p2WBeI>xL=R6?e<_yJ=#7c*0Xp4O-`XE^no=LeT-|-cf-1^uQsbp7cFSjwL4{Z z@2czeoi06~L4HV`izogl99~!Z%nCJJ^Nyd6lQwN?+!>@zw`Hh?b(D0LlBc_@yIb+- zuC@F`G-y6rxD3v8sd(IK91;;;RvjVOkKc1u)u5-)(=BM}H{axcqd{lU zyNChzwQ&3xjKP}IaD2Inyxv1g)u<7dBMK*Ihjnb-QnpotvvE#JAWlBeO?pK&cr~SB+Id(wIxx@72B@<7t#t%*V0!A~Tle>9fMkv8$q= z$_+@Ar_7?s8I`kopn6*aav$NvTmy+bzt8eHbEawE(Kun)S9mCz6?ZhKG!6`pL-8zH zAJ=3!qxt-vWj+&>ZqV-)5J30p&y?;3(<0!~NB5@h3(|Pmvb~(|qeof!rOHyY`Q^j% zj{SeN9@Dg<5fy1oLPL7tqGUC8k>Rb?L|IWUufSdL8#7sSqzD};K}WPDFIAqaIwPOIQ2U*kg=qp}twgXjTcDt$kirf+jmE^=yLeZ&V&~ z)6~6OR#Yq0le1<{S@G^)+2b!j?HS1l>G5Tr7TktA@^Kqf@8#U!g*{bUTD+5mdlsgx z<*zMz?1{OAIBi;HR!X8eu|B0aQ=70CRA=s}=4|R;Z9<=gNlx`XdlY#hu4AvZxuL$b zUEQA5n%1E0h{FKXYm`B(-Tez<_n8PrA2=UcAkzn#P_lY1J z2%goV+9G1~1IPxBUO`|)a0WlBK~j#~AgzIS4~Rj24kFAv!Tm4rQ5MaUS;yJO(GK4cC7KHMOVIdi?tOtTvV9i2 zyUOkh25pPof_;%M?t!B%4$S0bw?NYn6>=~b%dUV>j{=pv)XUZ_+X2=>|3RxDC`VFs zf4DbMQ2t`R{~l%HOxn8G_NgkrIKQAkYd>K>K^GK2Mw5|aX{;`(1%9`bS0<~62e={A_em3r9&C6%^p6L**l&zWG z^Lovd%W7f?fReXVuyfq&0Sh%K!6SJ>bUKX9Fn_DX>aOZy*Sz_mc39T#+OCFnZDV`) z`yKDe>np%ZtTh?c!~BVU*BkTG`p>oNKgZiq*F4lIKb;xU z5v7R=P1u$p%)^~v`|nymUp_2r!~EzeW5qIX(LDxO?iL(A-KBjBbVs%J)}%KW*qq?R zg(uVK6Kk)^l2ekFlY{@je|Y5Nq?P1Yax7)d77O|V{o!G;G?!U&ghv@y?gpFTgEF zMSWw7TJ)>|PX*+~Dn{X2e;#Gq3RNG$TDH1-G-RgMq-b(;ii>gub9SnEhZ+Zh%F^#W z8(+p9cr&OJ@io~(ZgpKj-GC!NW3{EJxG5T?bfJk~{3!qSQ{??3iqin62QoWa%$?cV zqFM|1`n0x?dv#FO9sM8|;vhQ)yT^e0s_dYCSzLj(3qA~RFqVJ zo7Zvv{CUT)dj7X@MX9!zRfi6hUWhsbR~t?qQHM5^Mn&~&`ZXT71+_S`p4bUHMMafv zI27e+ebWBqp{NU`hYoq#Ubnpt`xTrzEU$oEw7Q#lxUL6BEQ{#WiY?d@0w-@fJaCw3 zg=3lB{S{msXAIa02*9zBq^DgNWX3Y_}X$6ErwB!A=AQbiMVi>R@Z> zzUWr3zH7DwkLXronjTzM{bl;yX$M=iVB{rNNB-dKX#uaIKJY5CS|;-M+(A|S2W%zS ziA2oftT#ASFw&Q>O!W@izwr-fmu=%myeILuqaFTs{Ttt4JHTdRc?c^BaNl72Gsyso z;3RV0^aoh`(}A9ow8{FK%4oDC9@T&?;;5y4w^1Mz4?y3ty|All8ju5jHfZ7u9$O|6 ztr|`3>j1U7*30=i@F)hEsA4CZUhs$*9OjSx=3OL2gm;pY!kc91|rXf=R zhmEH(JOE53z!U8!0)~T=g!s|w3yG!ge3(e z2pYgzYQSftl>on+K{sU9q@<`*@`yVQsfOSYU}}omIszp?2VP}ur;$HzKWRTX(6Cgo z4RB#|?}57?sqp*nK4nn?POwh4PWqJnp3tra+NcW8iekaI2v=DH-xUO|g*}yp3kWb9 zS!{6Xm^^y*6Wg?#<6<|O)upnN>j?FEIQqa9#rehTZ$zRVM*MMts^}2XwdlLUH2A1M__Zl$mYddN3?i97W+GzK6O`S(EEkT9p=LKJ{#%xO86>;pG_85*;V_)MS1V*oOd zMG^-6fF`qeG_w&!fj<8jjyf+#qk-gT8IIZr_OHh_;wU*D4Y;G3^Ee7H9z#(Z0Rr?! z%TUyL1f|ZSC@8fO%&UDjty{q37tEdDf0Fb1|;<4ZWj6@J7 zzQ70|f0DQGU>;IXibhc=01WZOYFlfIfaUS%ZL&D_;e8%>92y5}@zF=g(l`fKZm=}0 z^Q`k|G;)rk2<>efp~A1j5vUk$47x#S-@NtavkL|0!)>`%UO)BeS_!smm`6dRwjrrC7nEi2ZasL%u+~Jbzajo(yNJS~! zrM5fcs@&;pwcdr_9K6ALpyYx1xtrbB-Paj zZB=@Adoja7fCpILCLbjXRMJQ^tPIewpxFYU5apm?g6|T#It945^!olQ0uLt}$fF`*XA$VjK z*bklIE1nN9VZ4rkZ&&>2#`>qir=!4UGb-MX4wW zjYofJV5b7TeWU8DaNuNmcHHLmfm*P)d)SwKhJ%;N@v$km8Ykip)%ps3b)>d3anHJ( z)p+B)(dvYnd`pUU%if*QSN?qoZM&d3d24y<%R=<`zop*Npvh>`$@h^)0PC$5ZAM$K zqO0=8t2OUjRf}#t*jMFn#uhKxLGRcAduiVt75W}$!IuR4(J*aUNl_VnaOKgdOK`0{ zFw#CujlV}(coEulV!LPvHG{IliI6 zH-Ol31OVY@G!6|1+raeC<)KRx9$TQsrDzKlKb}LSpCx=63M*>*eE4u>=+AhZygv-i z96RFUcVK496wG|f+P;ND+U{Jq!P27Ff%bPO7$Xfv_&Xd7(r&qsnUHG+x93{8$!YDOc!|K7UM*WlVnK3j{fTJH_E zWGa?@%cA>et*So1F1s4swWnN6)?{YqXXgvgO{D9eU0J<~TpzuSgYcVpqmYr9XEdpe zHKxWyE%^E`L$mQjw9ZGKof7$6syeeeyDndw+41x0Ht@2quB#T#e~Tilu1IHfBe5sk zQB{?zkJ;C%_7&|b*r&yZ?Iko?_%4!xI<-=54Fq?bJ$W4&yR^h4^$2>8+X-o>`?>j!Vc|6*06ZV zmYhDYhMUM5*08XG@fumNl~rYwq-75*;<`p5#kz&AuBfZ2B8#|sU=in&MO;vko3DNW9Q*0i`iMtZY+fm}gk$i>8+}p)B*#i(Mx=h0YUYFUOydlWPVq zIt9f4HuzTsT*bZtlO|zb?Ca4#1^HxGWESS;d6L_Kyu6~UvK-Iy?CKm#fwc-B^1u!7 ztm~%Bii=8%G+=iSCQXDZ*Brnq1Am6v0#Jljd%#soRdsG{VO@!5St;C&gKa^$bqhS8 z;maM*b!Z)Gfaj3CiWIOEdzMtdeZ8ipro6HWe4=jE)mAkYHF#oQ+j1~C`rW#975N5S z^&C9&xgWZE2#$Wf00kEmF%4%BDKQGD&~WzZaHL}Uec?}kpZBGeA^0s2f*xr zVGZmzgH;%;7B(?<lmf$OnUFs(7Jj$JFq)Y|3K zvFC$IJ_Rw*f$EV|=z4Sa#rX#!%5pGQsnB0`_(a8?3(up( zy&gToYj5*arjFEIAtr> z%U%U#E665AMXaERiq{1du8LI8Bq!y5&q=HI{=Wb6eMXvX=H$%GnRDLdd7k&U@ErHR z<#oZ03PxHu7@ie^V?LJ<{NJC<(NupIDt;XXK_OYI0JowwrXEg7Qnx3Qqy+b3U40Ck zkul7hVIBoOy-04vvNc1K`Xt0F2}BKq6TSWO}Kw)Zhk`O$Zj1WF!?PsuPp4 z(%_|Z_=80Ty)iWvR70Zmhl^o9#~3#p;C$L;IF&;9A{o^R;bIuq_4Y%XH~`8(GR(GR z!Gvc~01=`EK-UOphk|X0;AoMaC#==9;)={lbtNo(cromEi`@27pleu$0dYh!QX|)U zgZn1S7+OC^!}-{2GE^g91CSQWVK2gFbH&FD=Fg`Cg+U(CkTqiRYFE1`Eo$Y&ZRjuN zo*A+S&xwnwN`N(}&8*L@;e5MDACY`=OF>;zv#J|y7*2X?y26uWJ)8mN0nPzd1=N)# zFoc!}Hx);hx;JwVI>aNWY|-@jJpI-mCQ3<41)=7RlluLf51*`dXY2QV|{?;T}Rz4z>b_e+mU*5S%UbssBq4su&ktW8q0jd?h_!Vxa|5u>lfr|!r z(=-1!(FGhDqOJkz=SkTEypfdSa9d@6#v2fa#DoEK7?1)kI5^aWsD(?6;At>kKj?mq zJAt~odOl~{pdlB?F+&uWWPimbVTIv@0IK-kLCIE(Cf{(yjy0P%t&5W8XIe5dRdf&C zg5lDaJ_;=G`JtSttlV6#{`tGT?|#g`V4Zj|`b(+F<1u;El_fTN1wW*6;;nlsz=$kd zb83rWpIN%#U_^U|>Y)2T#UAcHY@`=nBCljhb4$(TWhx^5@kb)Pa3*HmLGGCAXhmyX z%JQviSMPkwaoByZT#DH7;xL3&!VqsnSR!2E(;`mWPbRbqofPmsJjRO2a`Jc5i@f?( zdrn?6N7qZJ(kvRXf&$&KLKuh4Ld0A!NW)CML7Mq8w`Lv) zxjNc+mga%We^o((*UMTl0SH$WIDAk<>6TI%n-==wD**u_1b(%6=~YVFNwCO!g>qsl z0|tY*6jv9VoeD&7FL9cNXCwYe1m49Afe0I13-46h+uPxDDHwY-YKOCUCs(}Fxg$!& z-uD~%b%2$-t0_C9fy-#fZrY_{EZyI~9@&rc-tN*WcF|^1w&?(efOkQbTKB>Wx}86c zt&Zoh?7?yoeb(8AJ}6ZriVh)z>2`Xv=dm5{hL9+tB*AT;b#mSjT_bv^UhlTIzZ-yN z@-&)6-?<}-ufF+wgSz(i?OH&m1~DkwlfGaEDD=AgF2$=0=1+Zf{@JTNq$i&%=s%wz z+{>6ypzry|C`t^TG$0S3tIcf6XiRSmX*#rf|E@#Q0tcXcswN7+?an&Ro`X3Bp#hT- zphMa4*y0%X&cYBKu;wKuqyW`)jyNsDke17*FE?t9%c3)53^D0c@}06EuwxWpm5)Uy z@Q9Sd3jo)&Act$-xO-F6`t%rmOx8~NLaY+u+|+axoh?Z#N-r^Sx_lIog*C)-K*1r);4HKv-cDrS)@9V|8?r)b0i92?mgq~=WRAF`xTvIn z_Z+vMv7c-#tS_qf5XmrQZeYh<09N;Dtm5rdS7dUt(c19_oN z>9H1-dQ`|7|Ed^`NK$^#Xyyw5I`2{-2>&5T@`n(ajLU(g9}M`zG7TB^<9$RZMzgqk zaNuzPp2-HhdW{4RCBY*|u>3c9CvFz)6=qIv+A(aUnX8U1SsAI4|MroF_8I>M6>;=2 zj8H1xcaT2JS1x*C|3Y=7H@I1RgFH$mojc0c@2T6pRk%Tl7LolGCWB^fe` zKB6L>zsl%T@$UC3E_|f=Aotw1i`?Di&mQQnj)+WyW_F%oKV%~)#cQ1 z&Bw~mp8L;np2u-+#Bn}Gf~Ws=sDk_+67U^YWd07t^f_~9aI{lQAGtG%%8(h)1lyiFQZTMhN!XIcc^LW zf6h*$_|VP|hwa|5clEwC2iKpUxs4A0Wsnq6h_t=x`@bBxdz{~Mq2R*%s*jQ`Y=4g< zQ^hz19Fc(>%JF@={%!GgU`h!U-BMU2i!>sOB)|*sO;*6tnN26=<#GN`{qOoe6V8fE zRyvzZB(qdxFIjLNcIO~6o{pS-imQt{VX50CeeV<*4^wpzLj7dHJh~Sva$lq7XIa2x zMf&TG;=l%D3{rFe`ZK8tEu<>;%8sUg*fbkK^^WcYTK5OMFI;GiVL4U<+*djN8S&51 z8*lq4yfaBk*Gx&NFHG^;vPEM#i&-*Z+3EK`Jay{EjpIwE=kvlB55g3JMDpX-OE1mZ zxMm$x8dA;i2`aymrdT94?<0AaEh>^Sz$8Al`^**cICEje18D^Be@a3OzT_|skZ%Yh z_7-%ASh6Xe6SULVEDxZcH=M%weThC!UZhG+a7p%RfWyX66$dDtz+v-#*sx0aI6R`4 zK;jSvim&^VL@73pzD$j^%~Iy^lv%lxLV`$`5U#dHZZqs4Sw9lI_ zaK1~VNihfs=1{t99rxz#W+1_a0S7jO5od#e2BfV_vcca0%?8>E)=sO8E+ENt6Sp8z zQs2CQW)VE1=Dn6@wZ^8z3Z}QB^kgJEQq(EQfef|Quf2g)*sm22MF4)VM$qD_Hq@5Y6(Rfy zZ}A@_xF56U-X_5>VJ*l*3dy@%fr!d-1Qp7La#1hQpzPs@gZJJ;#miR4EmzBDY)`3e z;*Zq4`L;?v@Mg@7n<|p?5osZBkmtGcN3J!0*eKom^>_PzP|NeMK8RM3M-Lrx9a0zA zE#?AVZg-{RCnUaMcw?1nkvqC_1y{D-MgP7M^P*MJt|uY7bDTUcqdBu=|IwnikE-sk zyGg~|hK+`eAhnB*(MQ#CJMI1SrghKo^1SieMs1qDL`wB^dN}=n9#D;`A3t_g+}f2Y z`HbhT4gZ-tactKyA|gRiM6A9~{_fiMGx%UwXH&?1@^yE3iX2xsEnsqU+11Ny5{ecy z&)>7KMOwBqa`(15!|7{_)X`h&OJaFC^H<ki{B0JlXt={}7idVfSth)a$!Eer1An_0|O-fal+u?w}y}MkMj=}g$CX5 zxg-GIyrIcrte!iHof%6FvD|Ch=@Toasb|b-tewr%9iP)ok~xm-km}xxzW9Oa$}#f9 z`@6ZKx|78XYP-W?vhx)=pU?qiJEZQ!8l7%6eRAdoRYFBfQ4;qFRet{>QBIK>D(aJ} z4qYZs9#PlU#_22hrW7(@iX%yCHCl3vm^-``VVbZbq2hsXgtb1uVt&l)Ni(xQIDGO_ z-L=`9UX6Y^O?qkG=tD!*AnZL&pP|!YY%z9RiRu!Xg^@dgES2t9k)oZeqCsZ|{&POJ z*t)EAO`X(iF_~3#80k&>l7ZW~?C7Z6D0O^-)t11w!i9KrD0wPR8custVBLnOqhs=I zJNXwtX`8s1%u);Alg|XbFsZ~+VlLq?y?y5Fk#;FkwaE9M@9kR{D(X}eL=P>bz0{Cp zc>y?V2T!ADAw5nCyDa3q*Fv0gA({$uCjR zeprnT43vVwiI#FS%wgndu>V&DEg>tZgNUfJNlI!Z#Mwj~2;SmTX`iq>S^MXoBZYyh zEx&R`h6rb?0&gsxTq{-^vHaI==`t)leGo@O ztd&LE5bCY0a5m=Dhh*0$RK+;xykknlSe*6QjfoW@NtMygm~1*{v2q2OmlN0^WT$gy zc2XjUV!RTua=v?$keHl=gq)Zabe@vVX^U}2W0R1?q-^ZoM&~H$ycKMN?3j=od{>zS zZWmA=_`^1F#Dq9wsuJpR$h;NG#dJ<~V3UxF#K!D;Cz;cxJVxg^Vk#3FvP0@~8l4rD zi0^Ysqyaclnx`_WQtfc&=R5d%XH}J>{ur63By$#{``9pq9a?t%VloFJOvmaSRaMUV z5J%w9qzrS!OeSwQ2?kAKD2&?^xF&a*2L`|36^;BZEWr-Nw0ZNUar7&3w<`um>~9lS z(ja7(=p-hx(ayKNeems;HcxeNO>vF1)_sylo7A_iMGnER7&7y9mC*64 z%r6s{wmRQBqC#$2@lQw@$~&oQ4V^S}KEHis#JbJvq+6q=k6h8?Sjg}G>3CiGc~jg) ze&hY$w~-+A*RtvZp2M~`rDTE_LW98Yk}!DrIGz(k4qtLQQLOJiFm`})8!k2G5V;$o zP!lmU(0cEej}sX$-&dJmX{+GY*6Pl_t*Ud>6<2fe4oE_tWAjve>3dFQWu zc=5sqywD+*+b#{cOoCN+t~K9kJV8aeVy;+MtSgCYS$uF+>niEX?N^8Wu5N}2PF(Gc z?Cb@?DDn^BYOI+4bxRb#xizA7`#aJf=C2`>s7lQM(&2Q%YUi5Lbv(`uhJ*~}1qUXH zl(M735!%*z)>m(m%J-R&O-xhGs-AUt87Fs}jUu|xOjP|D=j7qe<^%V5xvl2n&j&84 zVP~^Q%{8p6KyrKS3V8=ES1|HZuc#us;6MI8?CQ(y9D00kaZ9`>t~jn(s&iB6$tKmU z=4*F2`B4&ldB`OMMkOCyxcDI_|MbfFdDD3Mm881voswqtJBJe^nvqz-8B@zU-ae~a zTg%%jDy@}j^4Qyxs0jX+T>)XO-mq2Yo47;E&}Vg8s@asrZ>nDJS!=_ElaMeRpp=H; zU?0IjbDUo$DP6b5xmrypga<(5Dl%!!5A*qVw&R>_mdZbEiTZl_3Khcs=-*HvB-lX$ zp?2xO&ovjhgZKCRPJ&c8=)kC@y_dgCWt_YtF)`nk#IMyY(5+I(#yX1Q`H0B%i7VAx zSC>}pWQQdGl#TG|b1#0t;do!4IfMqQheTex)ks7qYK!^W;@aYxlC~BM?N(_=`*&A= zS2Y8q5h<1*MOrWz0}5RVM%bfUSrK|M@($!T<)0E)7f!;%k)50Fad8(n{d`GuagMo!-v#bMY-tlTagI-gEjLscp|;v2x@$G`cGqwEknE0iNRLzt<;FwmtW zj9s4zl0yY=m+Y;?X)%?QnoHE}?bU}*@OEU%7Mkx96?vVxD+Rt10w^Pv<6bhqS&Tf; zd|MV8sy4i!X}4moZSyi{BsC0Kth@?Xn&yP7gkZ?IW1Q@-`xsbz_TMXte+o zH4(yqlhFhPj~dMqv8Edc6hH^fC-X&qGsHu&FU1?y{HHQTx&Hn|2GT(fNWs$#=%WZU z@+Z`&8-LWjw`74#FiR-w0UH00#uw}6_usb%TKlstyE#&Z#^h*>^#=zAAtH8U?1zC7 z>OKs~0*&7+0d;78;4lNdu;)jD=68&|+H&KI%$j$a8eGS!3QxsX5vfaltqrOEMt_CE z?L;mh*PZ9eP0y4(n51gYQ8Gdm|@Az%+k9PQwws^bxuQ? zJ0mVxUuwv;>kT;tIr+%VS@VkxHnY@d%FQ*Z?dkfoOh|y~vhqwx$r&-t+0uN=R&zdY z&9HBY_ZaLsO?mFTVzVWyI6c+m);pzoM+zLiRK4DoSDu?ym|@N{8h`_Kq!;Z-PIXH2 z3vx|1J})ENnUgDp|7XZCdScRI^P{B+o-LJn&Sl(faut*~Om2Iz-Q#eS=D%g#y2Y53 zha{&dLu#_y^X=*ao86{z7^?Cd#mdX2FVAEsPIhD#n{3go4r^M@j-qsDygP5#&fKItV|IL@G|iq-l;%uv?QrE( z<&;?~GfSmKIZ0LN>SEn)TOP0Xtlw8yWwpf>=H?d|^7ZyiJMx?kgFC4-&J>rPTTq!> znC(fl7)zv9FnsZ^Jf@_eIL&RTHk4#~QXT0oqiyrs9$SLZ@Q$rmYB5>zRRzV_@0I22 z&3TPByS1P+HQ$85Z6Wls3iZxxN1k$e}FLJo71r>G& zsLUD8JfwFw*eYwCh4s0GMydR($?lwDeX7A}Zpk#JOC8XqD^$D8*7yQrNle{|0#lN6 zFHj`TJa=q5e)Rfew;?|+AwMlYr7}HLiV>V?$OUjXEiExW+3GaM=}ftdlxxZ|8LWDv zq1^7;mTj)Km0PN^+1@3_Y7DOeM`fPFRGgEa4z0{oPfU5C&015G<&b7MGb;*<3f+}9 zdx^BLHZreVRphami@BoIs$wTsQfG2rN^OqQROvRSN(&0CwtQ87nj@v$3I(%7Qy!O- znQF~6=9y#TZF%XX@s?x^F0iSxvvRX=RC&3^B%`^=YIhepq;&LyhZJVJxhP*{E-QDN zOL51zt;N>z(&A!wvD;RgS7NNQ)aTaa=agHK62xV-I}zA-0;XQ%sIDzeE6RvT_vi}> zbBhZL%PQOnWyW%&Bgdo9EvRx@^QDyqg?f*n#88uMN+>cp@*tI%>qcPag~7DXbgGGk zv0EJ~jsP3BeU{9t6kbx$Cr>@qxr98~HKA*QvIph#J8~<}YP=J@6Gh%W!gNJdMrlF< zO{D`8w{mpRA0qIn05+Q-ayguCx2ibDWpHw>bDpbtSzV~<#*%>9JD*HK`e@oE-rZc> z+5)gg0O!xVZ1d(>?Qeq9fL1*6qYZ_lG0gAx`|2<8f4s@zEq%J^$@8LxQ@m&YRx3e4Z z?JP!O7h96RUf6GpY`YA9l&poohiH@0v00!BQk?Mn*-s!j)g!F)rAGJ;{=<@MQQv*9 zs6Y+6m~zVlS7=bzEW}{_!SS#pX`JGwjno5%6yJXoRjXI6E-YQc z+v2QoajF-ihAo-Q-Ou~+jSt32@pHfYcnmlLuttBM1sR4i08_Q0;x!M#$wE4uER;_U z6&--*Nv3H;$w@JpOh?mI0kq3HvL4wq1N7f^7uQx-aa&uOHk?$C(a6J2ZfM%t!c|w* zx_3cT(U4TZlMQqOR5*)bcdEJ;dKW3SXXxS+xR$Lu4lPx)bmY=QJ6g8#@d-LZR8RBr z$#etRa94(0)1Pguqw854&~5a|yA~-vjrv%7hGScaPA{6Wdy;zml*olze#AGTch59m zyP>)s)v@R_7wD$kerD0jyCw5BzZzMYrby7YL3jE2-fkFbgTN3CM`cTAL0YgP3?y` z%=8|B7qPI+dkP~Z;$8?m0PrE-DEt=hUXjqhU2-BlYOulQH|4I7r`?*#; zKBCo~r$-Ii{k(eEr069J`2|a&COId#p1CrRJoKt`(XF4i|EPZV zq`T?}?_kp9Ii%0aN_iXY^KxcRc6Lr?NY(14?uF{-2X0?9il+~~I&EO)Guab%O**?+ zy7b-a(ch_m{MYW&w|MgKM_2yk`pwpo+mg8lYN*x%D|z^Rr5BwN8C^_KxCryO3!X%K zWs#@SRuf{a&a6rDNJHsL?*K*Y&UG29)N@{~Iy8r;y*}Ld>&17abq%e>Z>uj{P1tae zC%vX095830bW~TGV#A!N33Ju*7gwz-uG`7ac^AaaULQ&iUHqu(qWbODjMxVL;=+vs zXs_u~GEML*Km)g0^KG_}LZ_p!u&|*)d1GZ-mM9@39hwn(B**Dk1q~mvvmvW6r!cE9 zB+qKfH`y`^l?d#Jh=>u1;1|s5()l|?LMPyR{u|_TJ0vY^1tCzk{&4YzWy!h?Jh>^6cQE-e@!~1lHf`el&tdybo3>3^tm zwutHc1QZ92P{>=MdVESkfAmgL1YQYQNX>Td27HB!p<$p_CWM0-5-yRqc!M8wDj4?{ z@EG~!?k^-jq7`7Qnz3dS6FJ6fDjA~qX49?L-{X*X`%H9r!=l=SYWncVk@R70t@iK+ zUKr{h3VC^Gv8b!ho~_1nj)V6P6^4pZ%M8^uszbY)4%XCUrj{W(=Kl=*;rb<7)u`8B zAGK(4{lSe~SGl)BwBp!~%O9#pKV&l{fwHC?&0gCwu8$kte-;U83qiu*C23AuvZFy3gWr z2wcgrqD3ltNYO2%rH2�HkOrW}z_vOChkv2rItMumE5S0hLwoSA%-~AW@ztW0A|C z2xQFs43$deYM>At)Fz$+w1rRa>wFV#?EmtOSDPyP?=AaOH~(GQghyxSxnb^bP%*KKHvsZf}z`w^*CiX33fjTbFKL)v!?6YHQD1s9L`%dCSIi zRrS%_f)S!Oj<&~NQs4jjJt+8Cy%NP!V)^59sa#_FjBIZq164ndJ2Q0B^bOOta<}G* zn#yK}MX)uTH8g zuPSxpZq5*oHIE&u3KPr229j?iAVjtv!(x{zlj9bLYbxtjS7w@_V)TA@t?eJI-~yb17}Ga-{v_{dt&$TJ^LH$YFk=r z_m&=zHeK;t{aDpv+5>=WAIP~M^~RH+F@MObkA;f*DZVfrPb?Y;8DFzPqHg=p-KZ zjAV#Z-j*ix$*QoZ%=M-!kE+t)ak)6Vz0v-Tb60+oz0oO!Ov?-%Q?{DzDgT}Vl)bGvO#!91nBx|GIyj94rCXHQC7&Kb5OZ`ip$ zBOxvxbF{Lj>Ei5VrtJX5t&n?%xl$a%*#!SOj46}p?QHiWuevnJa5~uF@K9X zE!|>H=WQcI#d)Qc3bQm+bS2c60jdrtVTYK8Qg}B~KnT970YZ(0FU9;3v;*rk!aUtY zN;mhMywNvT z5%vcoll&1TB18K^EGREsk>vYakw7I6-! zRu0&*p(5OOVi2ty;9`aP-X;q!YJmM!D&~@^9R+GKTr5unIuWGAA^VlW`q(KMv#UZ#s@RIS{zi7!dE<`@%l)3PFR(~SvW zv^k|=N0tG4!XReA%$Ewiz;RhbBS1PhL&wuNYI$kG(UUv5H|VRG5f)X-ysh)1R!QSO z`dEKmeFfQ07ibIv!Pa;Ol3~YJ-=x@;FuWnvx zSu%Ut>i)VR+*tJYhMGKm7g*vQs6i4$9)}ocG8~LaR6C<;)o%1R#hPtQWc|%cHzo%9 z+YkMPVxNj^BQpWk?jmo&nBRn+o&>r!mgbF_c;sX>x0=4f`WruH(b%mkrQV2Vkgo&Q z5a)Q8@MAaU3oDpQe!%+?xvKbj)TucD`#^Wapzcqf-wH9w$4ST=zy0*vAuIt?gf|sG z!n~y7Q5#;F{M>0^_{Cqmb?G|yJ1J7UBtAR;;OY^eiwsT}`x03iNncd~r?X-L@IjB! z3CGExt4A-KKfrzR_Feba4ykTea^pc&rMnVF zCaZzW1Na?qUHJi~g>walEet>?;>?l&8KOm|`2q4c2cE)V;oCpeL||h#lR4vXEw+#q zC&`>wp?hWTgpCvHO;pHrWQ1nu4URl1Cfqk7|0prMuID!mrM>uh5wSw-arPc$wCtO9(mQ^|F7z#RpdF57>U zKeG2+)4OUif5%7B9=Lo(O0iV) z;NR^6;99}H4hV^{k~)~2Q1V5E2muqA0~F}Nzb)88=FH3r>|D_A|6#{hg494Svvx1A+k%5Cr=xjU1RkZ=$6YY+7E5p0Stc znV0np82S$s+qa^+VGK+}5$)6wKnIv#1tu|%|~ zK4RDQ7HQW$#3g(kLEpUmaX7%Qlf_|+M-O`OS1P)?f+sKF;taz-=ygfoxJ({?;buUQ z_9l7w_R-7u8kH1=0mAzt=_UQ<;+Ma&WJD$T()%;{;z@GP*Iz-ud=N{%6jz6e{-Kb! z-8H}Z2^9fSH)YD;=dMnIzizdlirdH6e=_r-LAI{#3UZc?A{Z4Moi<_M^fkN{VU91v zmV%+V5BhQz@`Z3hvfH++u!cKdclzS@YVznY@C|r>Bl$wo2N8eQlX5*6ivncoKx`a` zZ0f@CfKBy7X&j>1&Pbb_G6Iyk!=d7Lk*mK0B_)W?{JV#)w{crabaa4V4)W3yBA3fv z>`{4)#hET{`|g?@Z>t+>iz+Jl{dJl9j0W6|ann+o*yXCnHJz+u!R? z`rsd=7ubVWkp<99h7B)hA%r{GAE&td#@;dUW22vWYWCBO&os{NZ2Ya}=9M!y9KQ-r zC|!H^RqxFNUTbe=)t0OXsqiknH(AD1ys)#Dq6shsv(YgAP!2F#{z(>LRoxh0 zd=dVhCeB`wQUxZJRsALdj0b>yUM+r=Tm~;~Dns_W{7*3zOx9<_i z?&5Mg($%@SW^*p@4;w@#3F}2RXnr_UwF#9moQ2+$#3!XEf=Ruq>;1g6g4AL|NOoay zt{c(~7SwPM2LDQzbsaaxd*W-dL(F!&xj=1`7!Vy@I_<70&qhf;e?td~S9;@BdUXW6qozGv-|UU^*lhD35I2BY;WZ84sSr ztbIaZ3n-upeTMl(WUF7Q_RIVa(XIYIFYsoQ#gwPoDRVgyd*)7`JALp=^-o`rCo~>) z3DL-Ip8rYx(@nfBQG4+A3%vdE^u|T!_#CGb+?5dsqk1D1tm?ub33TG~tE+3w)qi`M z!Su0Oz<~9-fSJj}RN3w6h9ma~-DOd=3((GZS$i&&V!BZ{Y>n*-SCCT@XbPSZkqGS9 z?dGyOTknPdSz!pd`IF`W+~;mr7m$BnQV+J~luGlY8Vpcy&Il0tl!l zj}Ha)W~Z#}kLYPTWlVHCyzi`?GuAHW664|!CY(BI?z09elF~%6fr#e*GWAwMZCrI? zjdbntogcKTz~)?yqAIU(au4w0tLfk9N`!{`A|6@{=&1vbVhrZ`r}qxOGKrJ_aAnf> zVTEDRsN|%`t*Tg;t}K~LNzT;8shbUQ%B=cko;T zf9~X-%ZT!4mGDg!<-1!{b(ys(%KOaL-2PKqnnJP+3%Xy*&5CQ6FUL8nd*g?XI0Wyl9QR2rOwQTsil!!@{!TR@A^#^Q{DRJYGHM?qGsCm+zvQ{1lU z*%Mw?-FV~ps25cq$^I0D#w!#Xks!Pn*T~85zBao5#xQkQ|AX(3=HsICwr*9?)spMc zr(Pbbl3)IlK63M9$ES@PSuJUGw3Z!&+Ut__fK?*XKKhR#B%EUc=iz_cAy~w__08$O zzru=#0f-02A^w;DAn#<+5f;=CrG#v6g!)-HS)_vHGhLQrG@Fgw zp}4h;E7Wx|@VRPhobF2AKLA?`10?#&n(SJ2H@<1b+UN~&y!?lJBlKw1&!UgLAo&1)J6<6Z~ULx(k#06#hG7K4gAPncC+Ub+u2FAq1#Zu$q;q4autF@Us|+vz%jmQrw=@MLNd(|JmsOqm4nB z-q2X6@78zVOl30FGMLl=J1&y7_jHa8)87N=EBPLz8UDMQgJkljdX2zo=xY6rE!(b0 z7N69|Zze8gAtN~!gy|b>*gF7L0VBzHu?SA~@M4F6vzsfE55};O%jC6s!PSh@ z3i7R3zNi-h%UaYtYlTw|^S>7><26SEHv=8|3PX>~VcxC0l-cEzWjzsqdQ#b%kn@xU|S#_5EGNI ze2WT0VOJEZ-YG^2GBN5KJ%xuDb)|X&1Kn?kmQe_y9*-OKW#BV_nsmu8V}`_U$y={$ zZB*x}F)J_Yvxu~|TbeC^ z*5bswFdZPSnY!6BQ9TuMV>}eFaQcBu2F?{KZCc30f)nd)m9*n$wIaB{ku+H3*RiMe zSD zW3Ztu)ImF#wh*3}xKPJl8QU0}0{kPihCv?fsBd|1uLLYc)EGp0NA_4J!xA?a7DnIy z@KtZT)1ybBs1c!!m0Jags7%lbU{_fg>n+V|-cD0@3s z_TLTSOAo#bwDo@~T8br;6*6VQ{W;u;Wjmm(hF|N%udx^2R{YRkGI%f;g;rp08Qj?0 zL0DXihHs^d0>b%V=(wI956_bRl;c^NJn&`6;=b-+ubxPs~haoDgsq0yE>Aw?4f@U zdcGrc-03ZVWT#lYdGqSkoA)0%vY-9ij11-m){x(YV@E@R>#sgit@m36`*H3bm^rOw zsDjGO<_9hmJjJN#1Kl4lQq$0GhZ8?C5R~YM#jp~BV-YsR7J<*;wa02;Dr;jg<*oMO z{NM+5xP`)zj+R#o*)StMpV>Zs+^kvS#}AVlzpv@)0Fe3a_#1-JAki+G7{a26!?<|;{VRIqdxBn&o&UL1BdFyy{N^Vk$DzP}Fs>JCma&o2B?q+wb z6cL<{ASxZk2;?vTa5iuqU3k{9%i5v%2CHV@Z@>-iOV87ml{Al|vFk>ivl&^X5xuWOQ{rl@<2k<}AzYVxThpQu|Cr_TNTHu;rq2-3qp!EP_ z4p7nFZu;oS0UTnm8bP5W6v;CDnb7it&Mnf>tgkT4sqNz zXH%)m;{ssg9mFSE_kPsUrp8TGvnP88)-Veht#~nP=~PhPUGzhd_s4HEKojf%Io)TuH34R&?jzjM@Z?&6Ceuo zA`{fm%6b;@pphqdf2J^fi0rS{$OQ!%xeVljUUUM$u0SvJq9d2_`iROcd-W~){gv*$ z(mz^${uoGS67=&cVJ*BnVt?XZcZ<7npMI|tt$qDxYw+u|i)3BF01|kEp^NGgv_shP z#$1gygn+yq80}M8XdVI6wv||`8Z=V^72dU9z;_4^m*IS9;WxA*2RaLD`QJ6&nwQWt zxO#TMR37RS!Hm%xkk#ZK1dA_e=zd6SCXxLRw2&RY@f{Bpqw(Jn*>ciXjSsOQ*$*&w zfCv(dmCJ<*tlQRMtD5|iXh_Bfm21W_tFE(LLv{b75IWJ-%CHl@7^}hBhf1jOuwGrA z|6?0(XDvJAz&736p3=x?^cu_T7kr2}PxLy4{c$z|+rWrGGeOn($-t|J*7Ou#r`a?} z^513H*{=g=@iZo9Jto~T=wsh*BD`165W5coG~h9TN<4&vnyQeY*gBj3Z658d-VjlU zx&b>%L~UWuo}@$7kPi-_H6U)_q>?r=x*WS%6wAl;tske-D=&f}-)kenQl!$^$8 zT3(i4rY1vvTr{6Zcu$VU=*gABO(d#yWW)#GAC=PACBmej7njlz6RGN;lq{9x)Hj$K z(RJi@=d;d}2k3kjE|gvaQ1N3jBq3#Co=|aYZvjC{gT~kHU-dd7_nWY0eGFssXsBdB zZ=s85ShZ-_4@zc4Ks#>P38oh3-{ju}i8ujI_fhj+Bz)sLrLdP9Dw6H9%atkiB!e;8 z|469scO^v9lgf?nB`eE}6-D-P;gL|$qe|~HUAzG~EzGl_qM4Z20dZKa@b?q?9f4+C zKjA6S6^|xU)(lKp64?a0&Z2=|^R8<Xi%+iU9o&+@oN_VLc2=F&)XyNEs-F3a&7nA z_YFi?A|gwQ6-VAmdvmS}g~ODA%3+OZ$t6i@izF#2Ejpd2asCy4^UHHH)7HMVCPe5( z{}}1d6RplJ+qp;WE-5H1<%LB=AE+{xRSGDwdQVxyk!*gXkVpPa{tyMAdr6@|bqY_t zad$$c)DuV`8Vn|2ePH)?1@BBx+wP1CiE`E_>}HxL9pdd(F}t!k7G1Ne>uNkTZr%$_ z1XNJ5HenSPPQ$8!xpiCQzb)wsJ{ou}5l(l7qb88fds__Tp}E*&smkz#q!%Yx(la0e zW>I$C28Hw`Y=KcU6D}O?-U%{qC)G6ts#!ra46&j+n4&B&>F*#+CtnJ4SkZ>764Zui z3=>X3yG(xcPi3>fWPYdb?<2qN$H|wn7{Sy-v(IkjO>|?w)pX9h<*AF3m&QotM}-{8 z*_K1^T~*1KI%R=vxUP$!3oO{WVfIwjpVi{8Zg_7&3)djId#a9%IDrcGIL^;)q)Xbp zZvZhzzHJw@?c`e+E78I%Qc*1<6V~05QJv6=gYOUz(#&SOHA&&uDtKZG{m;d{F8pugGBrE z_mC5DwpX3{5H|%ZVD}TY>w2QXCGEp^g_baCXd;6At zTb^8*UX_7%D@ZnNB#n1vbwv&8hPnV~uK}NARfxQgjsBkp;cpdMZ^?uqWI{Ew!7bi^ zx%r%I7FN=WsNT!9`-4%9p4q<$Pl$RkH=QMXQNhVI2dSQa3G-N@ytU_Z9s7K+W;eXB zefc|fZDB>Dw(N-7lFv7FxkOv?cSk{I)g|7yd)GdE~kz4Wq-B!G;1;IuNJpO{7chPaj3gRw3n2h$`y3C z_a&@Z*wI}GPkakKATKbhW4x~^-i}|jYnd9KZrYNvBNhw91J~A#S&OSyg{-Q6JL-fQ z+a1_f)>MZIiauA%!NRtLx1pRR#F1G~V)dA*=$wC-N;oRl4xXmovaP00$4BkSIr658 zmB_rwS&N+KZ3R**iu&Xrk0stoCF-eDn!W&hj`RleT}2)mdH$JxgHbF6ZQRvPQ*DXc z7OUf;wyn-ts~$7P?HS7(tn(l*D24rQWv{Acj`pFwBk9AcF`w+XdjEb^(QjP7+YJZPF3JBi^4e#rPj;X9 zoFfl6gXq&oO&&V`^=~|LSgs-(pNRzwL7;6iNg;~iX;9)BBt8_8WOV%Fa0K#5Ya~~P zfDJGPNHB~+#3vB;VfjbA1lks#;u(*r93nadp==}y>x6F&cielvqSU=}`Qy{6zD`7-e^{YvLqMq((z%Bz*l zb2!MwWb8eVeNg@9FCsW0L5{sk6v}6=zU*~3{G>gAK8b|z zGHJbofC&x0gNhL@U`=MhF>6*psA)>TAeR`^jo)NpM?2w@9 z_Oc?2qDo^>(t)m;`7B**G^9j&HttE08eK)EBCw~~8ez?c%IprZMUCq&rhV5xk73eZ z)z#W9-i$B>GNcbxBML6hYK$8JAtVSxi zEf5`5RHT$7AxF4y9JNv#w_yIf*XB<3|2;uzFdGmNXIxcfc7`>jNZ&q7nG+Dy$FiJn zdSK2-dXw?NTElu;yP+`pv%8c+ZJE&$h|P(LBh)6WS2J%_~X?*#Gw z-5K%ad_}xHGHVN+*43dT{{&c#yyPtq!NK(PBmERVYW&NE<;o*6fj#{syZ4N;Lq;#q z3rZ9&y3hfeq(c9mTd5Vne#Y z2G7KbeSbt9+`!iK!jI6%y~pev{MLVVA~k6EKYKx=-SD4o-MfcQv96#$~+;*E5nD3neY z&+mCZo!<5*(~Q%$*c|pdMleJ{D`1+Ak zU;G4cceduaQ)8~L=ICgNd@0oq!yF+G8>%7NF1460Z=_Sc8Acxa_CloAF>m6w*J2UHgwl#wJEH3yAl47nv_k+7lzU`4P|%Dq?t$hBOc2cbW{=*i zQ06S=ssKOor^pvej{Q{(fr#MM^rgSk!|%z+Ve&g3hXcNdaxrsXe z$;l37mA)9TZCyruf*v(VPqTUjq2eO?CV5jn+2`_IQTVU;uaGPBihzg6U)ME6(M^bC zchLjkL0#ROmb%yw##>~!MO~%h_;Je@%TK^(_=j@xWZK6v`P$@b7SiY1HI#H*+TnFo(z=Q6UyVuzp$J*?&E!7 z%I;8YFBx1+4NMIbe?asqOasvkETy{FHC-K>Fs>)zGW&xS^AX`gypT!hbOhi!Kt{3B z4X~`)CF$+6`Nk;RHMxx`l?e3)D`R&pv&2S0054dXl9(4=6bHI*OTgdvSI#N>5JGcsp^U)Yp{Mx}nk3-FP$1x{Qo0J#H+0ep+EB)*G#| zyTU2yKzmwoOk8T59^4#TbXg*kQ&e{AGBF`VWm#oGqrO&JqmL_%K`_R9UtGbe9AZdC z`EHS@-rgyJ*@^my5A$I6?6jF~RtlSi&40~K22vBo5*0-IF7ATz-oij(vSP^+5i6S^ zIfdMHsc=Yrh1q;gAsvbI%qkVJ zyboN^RV3FX4P~`;MO(0sk@fM`oh9rdYn92xm4<3{ zb!AaGB6Wy6l~h_A^wl9m-8Fv#@(b8q7_D$un;O#CpwueMGZKs9)$xgjp-x!+EAHX4DBma@+{eDjn{|7>C@v-jWJjf>xrw; zbJh9=Yh{Um@0I1nMU~YmsDkPc|9SuoexG)v#-|NfN?PPGekKLIeH%!U0@Z^Hv+P-* zoMz=o%~NB;)!=kL{V(z&r2L;0mwMc#HolGoSzV^0oWc-i4rr-r|7x-6ka@4ISt_K8 z%X&5uTU~iYInIzmh#F#(En+h01Jdt%GXCm^$@%JXV|h_Q`CDX!(pqSCcpqDoUh@x^Kv?yIfoJTh*12DVNZS|a%GXnjQXWgdkzTbz*wlM6Qa{&Xd+KzpCdsU`s8rg zPk#Ae)~Uh6WxjbI<4k@?oIjHlohU%%+eGdwNDkd_lfHhHqfecoect(9_5C-OfC?E* z9t*<{7Utk2S&Q-u9d_4EGC=7pHbL7pw*V2-hw18CDVd5+s*#>$m7-@z=*IN`#y&@1 zSJ48Z8%AbKgFp{iM_37%e`1^S(_x*pNT&f*(xPzlQj2= zkZ8g62L7om6Gu|qp4tf>3a*m z^erzf0n_eF^41TU-*8&qx<%faq`5EYE(;qeChrT^?L`)FLPLsj3=X}TE))ZX35$m= z^uLt2I&N+9nvj%(DTiaQp?Eh`z9uxN0J*PZGLsIwNSDJ#veTgwYLcv9XEv|niG{thOUzrh zTDBp^NVnvR;MKh(AtEbWK-HzH&5=-yIt+Nf#q5CesKu!E50E6}Wo%ocwpdM6WaYNe zSt9uwvQm6tzj?o!7E18bcCq=*R?8tZMUZqTDHIcT37K)ZmgH8DB`^Gw4%jD^SATQ# z-OtlWh?GY9-&COD>W!NI9Qj^ypWJ|$8$VTuR)APjUlq=g3zC15`bPR1&%7m<57EYL z;>?oFVnY#woGA@O8Ll*!6rw`;{|{mB0oT;^{}0njl3Qx6EnI~}?saeL-rKqmaiS=S zqOxW06-Y=3SwJ9z4Poz%2#R})imTSvx~ z+}xYoanAem9we0VST{eYn*J-X>TNT(@%jr+Y%!11)!RX`tp*y|nf)1m-oUyDb1+^2 zm?D&>{@>ODe2TtsG6fDs%YXh1xnb37K4bMEf1JJb&7Z7H_wlD_iIpOW7AiQYJcHp! zdlb(*Y5$`4!+R^Pb=3=dXz=cgm1JP?-kDhW-s*+@tPz&4p_vkz$vJ5}gZ@W*o^=(9 z=bmIG7oW33{kwxq;cv#-|76wMhHcnBo&)sp(5Fz{fG6M(W@UDEfC>*h!8-6N*WI!I zZ$m%>*l70t$;<7{Fj`>OW17RjdInmtrFR18{lk1mthVYhUZLr2L}0g2URvUR8}?C zfi8T`4**L5$YBH6U)y9@ixKYE?`A(AL*Z(!wpOn<6cZJvsxCa_-&dh^IK0rFazBvh zB-)a=RkYc|!{6W6-P>*d)+zW?FFD~S4+`?*_mMoG>Y#ch)u6l-c{PIYf@+#zFB&7r z=Y9+KaaFqDx%zr}`^n~x{L9Jr%1R6C^i76VRjUYm8*`5-P7paM)uLLezQuU{G>fjV zVVbAKNh&H3iX>-%12-AL@#+>o8kx-Pnye*OB5hbYkc=Uu&1 zkdX8f$3=@o8iNQt8{t?rXbgfveXJjiXY#Bw)`Qw*2wBgoH{=%=8)AJaUtZrAsF1|* zYrZot{)SonfQ#I=lk0IEHn36f+Qy^@BDsVcIOY zpIpZcQO2k6V^hRQae{DBem#8+*?r4vkyZ)|sj`^hY(If-a6)J_EsRbM^5A2V=aCth z6GMd-RwOhC>MOG=3TQ}@&rZ!H)S2p>V!qkM^bJ`rDu|2_$M{0so9C;KEjAkR>nWz% ze1^34YnrE;5jCGm*t*Ako0N#h_86$h_Hf~b$6RbrZ_C`%o^XMPdaQc+1TvwXs$Uj9 zqOva@Z@-X1u9vAH~e@1#p1B9>>(IE-2e<9grF|@EyS_O#aFkVY$RSxWW zL3wt)psqY2w2;n;&J2WIAI5`>tifa}FCaKHK2#7HuPcz!DOrkq7$J1tz-2sZON%&_ z1Uf<@HT3BO**SV+E{z&*n7KS=Jvu+qz5@BbMT1wrz4U$Tk9proUS>Rwdzo`f_A>4H zOEk#(ZdLDo)IlCiC<%#=m&V6a_zW*TH&>b~D9}$`Uy=W-4uS(NXlCj8to%E>|f9nK<}Aln(~4NEH)g#Ypkj% zs1r1lMSB_O%&1g9H$GH3(MvrUsESe~QHm%@j3|!q3G<49)D55f`Vcz0RNQi!k5=+d z>zWJ8sQU7T{7ykfL#%H(T@b4C+{qscMx8vj-0+&>?5t7^rPip68u>31xaPll$B}Lc zVF7`{(oPC_@j7!#s;aZY-6-tEGac%akcfcMeh9LpV!q#SVVRC7f*$fF6?TG@A9##{ z1hAz^j$5Ob5TV#o3D773hX&@U@aN^=npUvn+SdCLA`(u+O)BIh01enCl@U@}?rXa* z6n;;XAxkwldGPojVn&xiEGF>ZtGSAVE zWqn1g1Y*mBaO5(&)UNHvfp^| zwaG-Plxh&rG*iaJm{M;6mVm>#3_6ukv09j!0R7%tTO~LQD+M^i>?}=CCuE52#2E$% zVL}paLq3e{po_vd>ho26(=qU)*C&fKLIFtkVouOCdNVD+^23+!0YPEnV>s^$Y4b${?03?L<-a}ykB$%>Dl{5jk53i`$ zBw=(go5LiMXtV%aXqEa5JxC#cvxSXRQGna{%k)Zv1_pQ_jod(CVID|aa+z>&Smvv; zOPJB7om7E7E5Aa3HggTy6baZjM&XGgA&&$I$~I(#C^A|Ebq~O_q~b(*qCh0>$FvLy z#RHgDHV8=iF|DEmkSg4@Efg6dBY?X+42@Btss11_i1>BsooNQ542R+f6%Gf^5Eyt@dfwBt>;Nc<9)G70z&`WZEI7!gh*@q{V(4Qhf;ky5Eta}+%MGj75Y z-f*x5j}byTn3AVftCbuzk4a!N#O{r-d_kJoRlLL{OcFZJVUqB95>zu6&>P&$2+Ff7TbS z=E67A0IG3+c&1i0@L`6D6ynLI9UHRIWKQ2u<_ppTk2fvHjxFH#Va{i&$YppK^EWo% zN5eQc)wB*mh2}D2%s-%^PdH~y&|94pfY19lG&t%AbEHuN#+ z8yxIQeK^DQ4X&uCO(W1KUcy1?zI}YGLw@)W$^#LNA3B6|9ny}3HW-7dxP2pdxQVGI zVQ@`hK1e^8fy)~o0c;Al7e1JqF9(ZAJ_cQ66Ec&Y{{Eg6Ud8qFuW1H^iPv0H(+u~b zRq({$lg0~SOOOYNEM~pH7C_Ecs<_x<)-33Tz;hn9crgpXWXnh{vUu?VS+JVh3T6o! z3BMIKPn@mH$NF?+k3DmFSWkcanXY#{+{o}n4l^DCQ-G^D2F>A^3%O(P9L_W@v){Ci z+26O019-L$ss#8y%#SFP8Cg2Wbk4Mp{BH7@^#`e?-YRVUz~{F6AJ;{X2{gz^=Hek! zA%0_si2YBzm7yUiKb?F2s0j_fh~`c!z@rHy0o2aPX}V;A7*CAGQ`LB4;X?fko#UmJ zbGHmv^k{P(a#o_v0oO(M#7DOh=RXvY>iUNBdvgFk*=?Sy!Y9%0m?YcexV%Yulgg&p zou7n;_`QopyM0iA0j>M(-T63VTlp)29C~+y3}kfRlPc2K^(8T<*|+bAdgJ=0~0;d4r~rS z=$Ph^KI_rf&$Z9BH=l~06KDk^ApP5RX!m4dK{2M(SP-^Px?2)-sMGzL^r8e=B%qI! z?{h9@-pDxGK^*BzAR||2O%Log#z@>Lzn^_S6V1y*i<8kTxAU==!khQxN5}$G!U&ZAmL&)?d=xYY{!F(L zFNxU@;u5mUcfY%rySGcw<|qOOpk?Mp-kQuExn5L`SA|crU-RM4kTYPIaOO(VEy0xw z8QI`>kae;6dJTbOyj{zdg)SBB_s|=C>CoJmqNFlHT%L0N1)rfnvz=_VU~E~Js9uDu zN!Rdwv4@g~q(km9H^I)mnc0WvL*RKASQbK=VK;F*AE3 zM%sTE2*}9*xH?NF%7i*lI0(Uk_%Z@KEyH;UqJD%tF*QLeMhGx)s8oUw2(pcJ+VqSJ z3jN90X!WU3MzZ@iYbT?(lGJ1=vL$+q04Zm~QIgmON#JdkOyNJxHWIOdh36AB25B~2 zvf-U70atwj9sO*B7O*9_Sc5YLn~=zs3}7}eaUc*{^iLpklGz5ohe&9MWahuI8X!qC zHuz7yBwLZCvCGnA8nXGYTFWOu(qSv2uqy6p({S>Q6|k|BGbpnS`cte;NKKU4CCa3t z1U~FD9tkWTXaYpO1g*#*qd=Akh7d5ieQ%oqHC`Q`y?&42gut~j1bstpDcE_$?Kw>f_b>W&&p&eFwajvHD9Z70PM7wO1L zouYcdlc!++{gl4&to3o(_k?-y2unSgse}j@WriYCp~FP*eAnGy@BTVuu43Y`^!kjF z%*L$7(#FOkM`}8YP7sA%`p!0%=w({QRFJB^W#%(H)3Rxt5u8xVK6o@=F)icu`pqXl z(0!A*y)^!UQ)FfNfqm?o*-Nv=Ix2JkMZhmOPr<$Rz#vB4+e}8r78s5B1;*n1n8?W3 zmFF{^mz+&Z^Yy&ciyhsk|k zaW{3jUZ%d`s&Nzt7CLvn6Ba^Ia2JUhXf*Kp9`90D*JT>V_nsqfqv7eW^U`!XXvi$Lo9M5RZAxZRs#I<#O;Ld3%1~-tz=!2W2SGj zC_5@vA(zW?k_=IVwZ&A)G4`=vYfw#A|bhYTt)b;pRg_U9I51-c9f^c1u zG2(dq&5ADQPNt;9Kr^mI#OR*6xknAv;xidX32S17h5p-{XhMy4@AE%;l=qbnD*VO4>9@3b>QarqvHaB`H0aR1@S_n`iTcjqi*s@uiGq1q-oZ18JZTG< zw)YXH9#RgZ70Nop!Xilt2As4mRhE$gpk}f{QIN&@RK}!)63l$On@kfX#U-XjrSCm% zEP)6P3k&#mR#;d-RiDy0CFc(dztFhC_zXOfg&Hs%UIh*QVAc%JizUIU{~lfy|JjW;@j@?RnU&GxZ8x5Ud5k( z%XXtIM?hSfqJLEMUr0=a($1KBVtz8Z{R1+TEQ8Sm9^ zC9o6oj+Drg6iISIh2H~bZXLcuy|EgD2uHxH!T(PL85`ESF9t%qfQ2o@ zwE4FA4%Q$IN1v1cI7C7Mm@3o278)EKtvXy7Wyef0Pt{5cGK11inaa8G(>4*@nB)Y0s8JpmJeTFXNM=qxoy> zYpe4r3fSBHYfcBYvVGWWdOLjS5BO`LZdPubF8+?l0%L! zjaAHa4zlgw0T}U`6I@UoR|{UB<~gP|g%vC22lg{)72!V+l5|j&_}Yqssy|D+Z@~+!69^GaScsa52yQxzKK=cM z-LrEK-P?B)F?kgcrv#@eiwpAT_7e}=pKkwS{bBrRuouD1Tn|UN5kt$ z^7Jw=GN!;;I#ry4JEqyP3n%6UsS@Mt@OrGq9k0ddVntH2og^6!4L-ie!yQvtwvt?I zCl{;1lp1QBYG{Vl$r7a~O>CDY)=G79)G@^t7KZAfHkr~T17R{9b-aenz-l&VRHg?@ zON|zE_V9kFW12oipQ_8SgF?7o&xg%I9d9_+r$LSn+^7Di5b*h6#Yexv?FiVVgR#SG zyhFf}xcaGE?Pwd4qr&g$^`pF?D{Rd-^UxW5hT%0erDZgNbp8oxD3w)37e*HbX+lMW z@2cgoO9WX~(C9S!>MAR_eMdt)M3tyaTpFGiq$JF<;_-L*NAqkxnre?uq6$diC`DfY zZHh&JfPdl47D;rFL|)Y}9g0zbR?J;A739spZT$dL@I?E`_T3{mBA~nWS^zs-Hw7#Z zH`%iU&lNC^aA)rBfEqA3`l#Ms2WS?pyk~D$Z4afum9~9PxELltR_tAS#7=NfO~5uV zx&U1h3}G-)GOGbXDE8r~@L=%l4zm+wLnf?%&1?Z2(Gh%WRmc|ZZVupzf^1k(>oPPP z4OY=$leU|KX4&5Z-5>I_ZM|Lb8hrsn9FR(d18Wzp!DG-EsMAlfr+{$+eoG^GLAf9d z7WS%1m9TXVXwljfoQSlzB*5}wlOz$;Ui{hSF)Fb9$AK=1kvW8GP4>^=Ug=Z&d};~h zpBb)Mq#moDqjUuyyHM|3MWMVssl=a9l^sll{;lF4@$xqggzE0@vjz(3(m6<=c0`sczD#%cCfo?d5Ez2;jA0P>%u4uX9(xnt zMnHi1$Y0Pd!#8LfXQvYn<>M%89Q zGZn8{+m=}AU+J$skmw1WCb56MUyZm%T$it}Df>3=*|w_yB!T!4q8Wzcm0ftQFD&FG z3G>!^X}y}lnzV>piaz&w{MF;>#n{>#4}#eu?;_8}#Ky$tqO3;ZjnxS>!yiI)tk5um ztzlaR_>yoiTEaoObPsaf3!?cku=Q)OC9xUYrM~b*b^-tgzo@^2KBCQ%5gZ+fKWu`C zv>x+NKHk~`5^xUYQ;;(~3~uYk(9itdVYrlpovwl#@rTQlIR+3~FxNW=JORTfuq$HLkoY^4i_hWbDt_(rvY+$b5-LVDK9>(lq@Z?QUSR2CZF|Wg4Q;p^gOy&a>KX!D;WbavP zfDGw~4wy$nziK9!Y&0H4lP>_&sf0xP={QkIghoY&vT-;xYEZ+~${7sKPQeyLLcF~j zlR^O>#W=$99$XpUphj{8p6tNIoaf-WMKR^Lm@A^r(_G*3n`wn6hzenEMB86V$55CxBJp)^4B=cAm8dtyss-Oil-c`iC9-R_)O zDVTq4&E2JEkwx{{vg0LP>79fgS-9j*lAMKm$AUY@wU=~H6>Tn6Ug|wbdkJ7xhy0V4 z84iSra0obqZxz@Ncn)Z_fX3zuA7ff9&BPtE`stVza?o4hIlxCsYqa{R(aH=a_s~gV zY$22HCS%K5nSeGK=#Mu2N*2J<-~jlGJJZS$ngE#+SWRF)!qO^%$kYwg3Yg3CnEt=0 zxeSDM6CyarOco4eK>y19Ci{k=Q%fM{+V1XJeyw9S*h)}t+VzH&*~Eumxvgubm5v54 z2S-Qn8ui{!$E3xk3#ny_tqF1bxC;sQ6;z5)4g=)4zAxn zRCC$_EB3qcU4!=@45SuSb83r?bxr)H$hyPD)Q8`&kvzC^a`-qwAonM;2dD0;N=0A2 zR$E(3*Ve+}HRsJ6LIp|^8wyE|pnzr-Sc)>R)qngFe()Q*SH)G~fMzT?LV^Ft8x=j} z4cuDh9Ihp54}(LlK(#^TPkjZeWtEYfwL5A{)6=w zmc|PeDR5nx=e!fmE5(%cY&s0(AB7vv?uQIR|sT@4o(ho`RjT9V~)YT;yCb)^&9AA8x#~km_r| zx#Vbc9bJ9@7YNOPu@4%7XJ43c zcJ@W$K;`y}XZZcyZD4($Yu&el4dHHM{p0h{o5=$T-WQY^*u)(7 zDPg1VApQsr(L(<0cRk=F<VX>4jbXu>z8l{H zS-AFn#kbe_<}?UzjqRJoiM)ANbWiZ(lf23Yv?5IbvIv4%(%VC(ho*)E@s~!;^Ef`eHNsnChFyltOKAz*i4c@8GY;B*72(?XiyozI)(PG|AF@ z7_4e+n8VCraQI^%!0pTiCctc3da2)SnR?036y^`dpD7IA36OnE*vfz8wi&U%`pf*bX$0y{((NUW06%iufe~{liFeeB6gpSjhFg=K7!lt;t$TCQ@4VmAT$D5 zCOB1Dv8{$M)v6JnSU{KiH`5lf=YvN*s&A+<1769+?G#H&`=-Xg2qWv%TY(_QPM`4VEBFN)+;iy2NY%V4jX~ngdat z$@mjH&xqiId-(fGJQ~8Ot>!gKVB%&-?W6#AN~ z1iH}y&sG4>yuj9#0`+dcv+KNk*4dT%ue0kXrr*ddqU{IvQ{KLt!yu`)3fy8FI_RSf z18%WTS+`gkTQU(OxY2&)_0>pv{@1(SS|tQYSTov+gNz#k)_@i5;{hvL>!yFq zX#b#V&|)hvx19#&wzgbk{~QiGU)BB6`y;rE@4MWuy>GqCbceY~e(Q8~#R|ub%U5)7 zx_9r&<$Dx!0MR5ng|;^SJCR+8GOag|=!@~c<1e=EjPO1LvG>2>-50R84iU`9wy0+% zXPo-cfV)FkHlY$ACJFS+`jtiAzBW3P7xr{#`9j|$zWV$NkNkCM*xV0Y(@zJlz@Vve~T8= zPy@I88HnTa_(ck%yol;)>Ad?GvMfyzuUuMZ>(RqH{yU#5N&>8wgf%OoKXCwK*7bh}#-8-`-4?r00GyZ+ zR?5Mn7jDb1_oKzSI8{=TSgeZEiwXDkp2#->HOyD529JKzV{AW4>-DNUv3_7N0@tEo zvg=T*>u!%juC6TyPIR>%>7tlcW@q<;puAx7C z$%COuzb+RB+1!7WvTNwxFL{t^u@Ho@)L(t4$@G}im>52U+Ni<$_yV}usNtHrw;;7Z zQ$V>F1-75y_nbY~(^MZDQcV4F1M%C@+Pya8VXwlJ!iMC+v&H@4TJ)J{!O|bg8gYd&~>8a zNLQCf>u#3ha2HMa2~GM5O@{yI$3dp|CMR-pCFcyUJkl5%5*Zmn;X2;PS#w9?k7hqZ zA5nnYqR;pcB0HEHQWRNUZZrbg*vR|)$H#yF{o}k*6nJo?;7}5lo&%OG7PFqcr_krT zOF=)DbMWW95MyN7K$9=gWFG#kpCR-kq5#Qa9a(;WYuESx{QfYg_n7G#iH2`NE*Cgx z1P{ew7Z3ypA^2$*@X2DRJ`3J9w|(2UyLCVnFBj}mah^&JL?tmB<^!;EA`IiVq6CUz zc;`Ah&zJtZ5qmh zl)&yp`);VsLOLw?jZBz;hf?NnlXIUl16a+_w{Ou5CK2HW!kJk+|7>~rE-FF`*n#6RHqOm*)nEfpfHUP;U*BO+I~T|AfYGKnwQdrTtTyxoG~Hgn_>R;Il>U9vRs_5FW(C z-Um6Rp}Ys__ZrV#ZfYs-%sok@W@oFRpuPyiM&s~0b`{J2ZMgV=M`qUlH2eW=;+3>_ zWp@dne>ku-(~H)_r&7cmgMruYjZ!om5|%74LLowFOgV)Pdw;N>A=u~UMI>PR!?FmfKpI^W0Rl*nLBfUnaME&R-DY#_DBI|i#F%J)WMQnal3Dp% z_Bl!?$`lzS#O_;w%cNcqJVsXE^>oq(kTw-6QukoX)iOUKB|z=t&yQEdrN&Xxl2Un@ z;KsFL1zeZz7T=ZMQ`Xta(5HU63vQ*P%QPvPjC5OlDhFN0mVMSBJ#z+6n^VZX16kY{ z|6<{-HQ=jl1<2c2AU|b`iAyMv%+wTSXF=p-{=q6)J=IdwrEb?F@p-faS^tefjYo?* zQ@f-|wiEHHI5)8Dw!wqu;bG2r*lxg#BGjC3d5KC_dHf~cQo9Xb?^`p~dw*L!*++mWO~{97WGSA>k+vO4IU;!cFt6%6x*>K0n&~HSz%%{4 zooOsF3CPFT_wI2H+?qZ@YdFkqb2%yGI;q#jIY~3!ZEG}WML{_q!s?V7%Isz$$V`x$ zCJ4eKMT&4bBbI}XntREqytXXyBaZ1exV4aKo|5h7TPjkN^3+t0T0^SU>_GYH2+M@i z>>-i9n@p9ai4zkEiDc=H=}9vrcxdvOI^ifmsTp0gN!BYbQTwNEdT)XUCPbeRp=rR~= z*|~{{vu6k3p;ee;HzRWW!pVHheKj3%etp>U%19y0AoO|l^Jmr7wg{GGhqN5XMp{PB zd5S-)!Gl7GU*hK98!Nz^>C-WHQqRIyQM3>Kq!JH*HKRJf7P|WIzQAIg!?tDzxA1Ce zV3li^>W8i_yRNPWsxH^8L|a(%RF0|fLo4}i*^>!5R3)`!7A>pXs3UO&gFGC{k^jDZO zX6~{HFia-u@vy)dGXeu(_3#7R$AL|Sr|b^08&h39ux)k&Zm%+E1@`|K(12~MP-n0O6O*jW$O!5(>0m$d;&ZKNOC!LLi7PJ90)MqB75_A zrVU8Q`H;_Jjy@s1;G*t*Z6E%4Tn+MP>fZVzhrV$f^B=ttBy$Vx0z(iU&K-eM$@W$L zv4PQk@pi5dkP(N!5RAuPwsp*;GZOYzB?-h5iAV~h0vWyOG1{^5Z^2`3Rb56#6%A-= z>kp?|9c<6Q5sBJ+?*oVS7>Ak1%TCgYlKMWzhZR!Fd=>&=%r?Avft#Y_%4CS@OqMDX zN|{nle7MR}s+CHBATwoJfgU^~WSMz1FkMYKSP7*XHifYbYIfbM#CH&C1D|1R6ARFk z&c639cvG_8lk-U+z@7I0#;XZ>_;3I>d9AG3Dd?NSx_Vngv663|l}X2Y?eb{(QK~Qe zL&zK$%J$j(`xjiBpj*fe7FqLefX(0<2S{1}kApo_>sG*cx7)tR3W6H@?&3BQEwkDJ ziO4q{c{{;w&Jtc)KUr?|Kd)fs|MkN9_x_hQFevU%+hGAP5JGnUZ?h9H)3%%n2p!mu zkzh4<7hYJ~BHf3(|9?$ja0k>hwz3J>Wm#`9+0?AMwH-PMdD{X0F?tu0h2Pb#U-~v_N46%rIkb7l}qrM)3J!aw~Yh zS>lnuVt2Suk{1Bm0G#7zGbCA#18?}h}wc#v$$t0Q_x`#Z1H({PC^`gtQ|382ybEG?E~1u;2d`I$uDQ*oy2RGkgAI z=u?fvmKU%cBEd@&5a2nGuDu(Nn|yLScm~aZ(eo}e?iZIo@JBSz4!c>SC+A)%$iJcH zPzIF-D2M?%qQiTi;o)e=9%^6T6^@Uhf;DV%<~CGRH7MwPrYjsYO?^Xo(1FY*`!=CWQ~xi{gldC=JmY(OcLCMs3|Nsy7@rm|h>w@c zgmj-XD9(4s`0m-k2b-L|5fvI`ASyR%z>(YJ4AtdPUjOCfv;!Xd)n#0>uvF~Uk z3*(1#(5Lokz(Gk(wM$i`D$|tgL|d51IcluvIL-$oNQJ7Iod`I_sQMvFhZ+lS!3fKG z=xdv`XebY5nU|61%d0E#X9jQ_<)Xpb2lvomL7w>`TpE@=MdNAHc&<8EotFm!EXePS zfbMk-WMX>)Pqhh@bS`kF2cl8GB2TdT4B;*fn{;rwU_|eg6Qs2fy+voC4~~Z1-vvj9 z_4GrK&5pa6dJ>95**xo!Z+{HJ#K<-76KV5VCIgBoHVm-ZV}L3AF`Uw~R>0vo{V0t% zXD&VjXDI6}AU@xG8T+$JG#fzS8*l@_p({@^H^A62+u5p5Y#u~{S?MR9c;*tXU2A;l zH$lf%P2|Ht$X|!YQ06a9m0a`(zD-^^T5;pa82LOWZ=WxH@L*5favJt6 zfNT2pFnR29`Ed|2QD8E3VD=_#53Cs|x?2MOel0))pThCC5=h;66kY-v3?+~_rgLW; z-|>pF9w}x%CRgmY&V9($saBmG!3%r|m0poaOFmqG zW8p%F^$QnXcX;^l#`TBP2$S+RQpwXK2-Adu^*fv$_Ehda8V#K&6|XylqY#M{BEkH1 zJx?C@^gKRy%71qS-TT^{PtISrZvHlxniC;ZeAAJzHo=WEXKuV$V_aKFr|Pp(4T8r# zYvLBz=g4_IlLeUj)mN+|*iX|Cx2efcSWBBq0hFFg!QU@__}f6E z0<@EZrm^@e02u67R$pT}Q}w76Z7KmnTDVZpFl{7V4jkOI>pfzz28YIP=kC=X;DUU@O?dCj@aM+%#TaC<%;%`rLP@4#aBh>KLJ zR7xpp_tvQpy%e%O?y%cfG0*)xQ*A=%kwy}-%k=mk&$3DIs&VpK$OnBeQJ7jECVaN*A7 zQ~S4O(~J;G`&mWBnPus0ItXY(r*nQ*-@pGx@bh;|rvS3bEFEcY%p1XdGTd~Z8AO^_ z=Pk=p@dIYL;E!9sD%{`hdMbrk5NMlPoXc2p%)^;Sqv%*UDsN#L4;CTebHLeo1L<&c@O z1z}EKdG8F;@#fdROwhS%HpT_*2Zk17TbPJ$;msTr$b53_3aE?5;7eq*2uc@V6d7m! zsD8DI|6>^%Ty*Af`H{S~)8JWSB%%}+GUIcSe|a{=9-08e86dBPmz${i)^H}L%`g6pYztNMzH zx@(df@@|?r$a>R@d%p+rbT3BVlR*(tp$U-Nok-olgD~BQCkPfS6vZv2<%w~!BtbxQ zX<2PyZi$9A{`@-oR{@MQCwne~+aefTh=TZU&|%UqB-l4jl$jx-zQJGMl_&5v!Q}bE z=rwdoyd*^^@C&Y}tII2{)zPI-pBJ#+t!`-N?ipwrT^6s84(7ulrzQ{h26)Da)3rkC z5kR^Ao!CP#dbBurGA$PgW$}W8{}~k`B0xSd0uSRZb8=b+BA#KqWmlZ;gM{a2?)@uQ?n6M-&%FCi zSC&ydBYIV&m%qOksD6fVz5HvM`sX#()HL-k-Bjc6MfYXFwdqyfgY=%1U$Cn!a_;QT zQ}IhO$_-&<&~?CmH}P91i4r2=mB`2JXxq034nsVOC)P^z{cF){wR)P7^32tE9EZv3 zoe6h}VO;3r!Zr6i@9Nq6$9`;>hql=wA@>^QYaw<>n`(!`>rkK)?caY*cs2G?B*CoU z=_Oh*_2JD2u+-CD28WRnJZW(N=4IoL?b4zPMFr^udtYxkcJ>q!oM?Xe*R4UOGC+V5 zlwxs$AW;nFB(xAE=P*T_Y=a>yTQ5pbQ+ehh4ywaGq!L{C<6vfU863Svr`1rJGz~-&X%w2lW3@8KM&@UkA8|gkA(GT6<>@kk z3X$6s<}>a-M%K$DiPQPV{biFF+vg2ez25y(^vo@OA>sPZeVxN)Uu}e!yPL;tY0$&*| z1%-<;iIDRW`-W!VPcon)7pu+@<_q$3a`K@u+dPib`%57S_952D8qe_Xk_de%qzwlr zl)X4d;OLYX;Y>$Jk|nYH55sveISKg+iXCN@L%y3eu#aa@K-huA5*_Id#*UWmFfM>U z;9zTBf`36ntZ4AL9EHH!6WLlpv<2%YISOX*%uD(^PfY%$jN<`~{bMHoR`$XA>PRc= z)yy2O*#M~Jmg6o@eE!P1slKGXO6XO<5VW>r-8<7LHk(?VmQgD&PRt>!uj(aON&G(tTZ|0#z-W&XP5o%>BSntTR;xvg258be1nb=Jpl`hiA z`lG9rrHQsO9dN$|m%e|BR{u%AZ$jg15S>fxfBZ{ex8QVcQ9&AnQm9oFh&h37Z72o8 zm!4<~ou^$d@b*y14$%GuK?R{j0QZ>hnx~Vw^~bK?yWlw9-911^Fr#~?0urW9QY#g5C78PazNbi(3l*`71Vy|&4%Q$!r#h~$1Z@Hy+Bb>Jt;ns+tt1+6 zS6(Z;T)*n*<}PX%q&ph`*U(r1j03 za*f_dA2AlSpW~m7YV$TyS&_jRVEa258~fkIq|@6E?|%pQ6z-DvF6#C(O6Vbwkp6F;6C0IoU~`jxfj$h@{bFz0g0e|`4PE;OzxZGS z_{IOY!$A7U0K{S5g5+d=az0!j(RF;?7BcH&Gh#sl#gFW>0eUwyK7P^HsNRpAYo$*%r9E|5!8uSmFq8br(+hoBbb(^~k;| z>_tLCqFkH=d9I6X@o=zvfy7dH{*O`QfK4RR#>VGDAec^>7e42){;u% z+JlB)-|^r1{JP-*6<(R%T3J$2+?G-tL_8YT34=ddKDKqksnGJ&wzAUl(l%vj2yt$6&9a63h5pO7Z>ACwVx_SH z_TU}Z4cLkQ?gn`OLE62|QRwBdSs^xgR*Vhr4IEpHNI|MoQq(B|^fg$L72rb7Odet% zKokiknE&kC-GBD&pSAxR^)v_83RKQB5|JuSE3!lI)F3R9=NRlxHs=`9ibOefkZ_s; zL9!`^9C?w@V7IGTXo!OTmz}8{pMkdMj3_56O(?S4M zyOW+dqM|fI4y+uV(Hc~F5`$fzh4}z^Rh%!+H>4HVA84n$~yuXq3`ycX*Vf8a3IA?00FG?z-CN~zBqpE=C$^%_|x?mi{kBX4R&wQkXNY07CHce@GnYTUEA*inFIKo=f{&w=T|+7OU#tX_nN;YoZP3Saed z6rMn7xT#zFW{7P6ZRXX^rNI|Y;Y(1NG@72@Qi_H zz~-?83h(EB+d!<3cjBF#f}PI#ErPAv#W6c!0*vd=!{FodIs~J-MIZV|Sk4cMG{ZpH zU57r0c@$z>#q1P2Z{cs%Z!g$MG12BF;*a-nH5X_mz^0`me!C1A1`OXgFi1UxU9b-;&Ti5-wFp$gR(M^P$f znmNME!%u*EycZl5K0$M-3CO+;1)u+uP+fy4m0D^n;&D_Xx9na(sWfQFH}5DY%s4IR$m0!58&4}6*Wlg%s(?fk>S@9?tH`lChJbgb!uT{c1wP9VT0YaI*t?O zdShEm^V!j^?G?>gEuk@5??hK%$H^$YgjaNc&>NNlqlj|WNFiu}1A z(u1;tN;?N0YS047ZYrWt1c5!7CuGD`-}CNW;9WD%)_SB@`>vWTS;vvoHq+lP%~#;- zCztxu$FX!v;x2zLcRMJY%yW13-4?OY4ha`?l7eMH0sH_>kPgBR;};t@)^BSEvs+lG z$^B%&#YDS3IGK}NQ=qfao)%x_&VHydK4t|i1Ui}wma{~xq`Tj zP}qczaxk+PNLX-JQ9`M#K}$IB+LUc6Et1%|wrG41vRVFmSJ8+J(T>u>nAok+TP+MGd1=(Ig zHz3-si}@Z!lV>((9@xJl$$5LXw4JhEakMMz4DAi$vSZ;#c5RFDba5#@d=~J{Ger$2 zXtd}a87GTPiAy0eV$-2VGJ3<3aZ!}NEJoYAHlM zE0o}h`^lwayh3Gx9K>oPxia5WUtj)T_!DkSY-)_a1?(KXwEH?rOEYtdDEt`@yuNpm zZr<*D_IMpRcD%8@tE*xEUZA=h2SBd}3M@N-Snx6O0%p`fAo%TrOQ9byS^})om{-N* zoTV|V){Zs&_~Kda?Veu}X9J5egv+RfvyWBPYrI)&#FF50+@zr(n{Gl&Ae^N+k&t;K`+_#krG2I#W~ntl(( zKtB&Pm?w@w)A(nqj3)peTvYQ8k!UHuD!EczK~-dwXO`;-bh~dcnbM&;+QDZ`aCjZj zv{5*et2v-_cjue`=IvAMPuWMIP%iT;+)E=4dx|^+D--Tqq^(CXA3fn!R;5%40Eb-8 zvzDJ#oYg|iNEG+~ly>cLQB`Z3f!TY8{mu-X4<>bny+@Ch9zCXrN(EjLJz8j)qN$}; zrXVT;qQ)Q>xhT#Iw_&)0$W2kXcpZp6WzqdAew7owTy7*1#U@JR7X@b$-9^ z`{VoEGM9auHEY&-*IMuUKF?DS>sYtW}h^=9LR`R|8?J~?CZlsEtKvE=W4@yvS{6z;|D^X{WY&n(&G zo~e;PbYJG!Nd7Z91R&uHa+o%c?_!g_Vj&3nYjMD>-hxc~w9~g2-R==@`#tr013|Td-^vMu`aY-oGC5Jf@AytJ~a|>i~9gPu{ME9Zl=l zNAI$ikTSF5(3!)>+YV_r?mw8?4t(fOSFZeIasMIR$Sy$av|PR*e;`-Lcpg(b=B00%*z7i&WZSmgw#^*1Bhk7xTl+#(TJn4hjO^8IA6{mE zs{Y$qsWGQ5zdlR5nrXgW1D%X7+31qXr!7S#pxh|2em!Q}yf@Ch-TKk~PYdz~0y=DS zSmMi%{P~di)J|q-W#c9>X#(>HH&=F1ZhiIc-KLZAug4yRXwPDnwvf%1)4m(`AOe0g|Ii}6l^o4--TQ?;wTW?BoSe;g6Ss*tU6Ds$`p0|t(qM{-f zM7EuL;|=_^MMX;8$)0@UD(sDlYCF(|f7lx($?5KV<=h343vk}aHvCu4^;6DW6@>%+ z=bk*EoVyc(1nlKG@_DvS#+W@+{#dS;zmcD2D!_dnmHjQ@ax5!k{#?@a_mi%h>uMdj zb(Ss1GG7BH*}Ir<7PFi6bv76o_f^jsBRe7=LBR84+@T&B>dHGjvv1z-+F9Ktv8QEK zBzu&@6k7!wa32f7gmHxE+zP2H z_s2U&Ir)1{T-An#3@OK1WOJH#Ru@&2TG%#r%)MBi^D0CmM~Iut;~bk(`))LFQ(9_b z?uNTJS}QLY=vkzRuiVf83UFLs)CWk!^{=r@?s|F6tD^jMAn4>g=>RSzbRX=!jclo_ z3^DkMZr}%$1r!#bt^sVI=nj>?Vc&Q{5vrXZhS)Lab?;@yb%GWNbRv_u)!?IK?Tv!6 zG{QU!QCk;S*pavmM*rV)`dhjYsy7Z7ltBlsDEX!*%o7Gj)J=ETyFkguNBPPtmR~XLO*tGTO_-21Avo9> zY>rA&R$?zMG1*ub*Jl5r zb(eH}-?z_Q?!Q^c#H^4p4>-q|qf?)c4f^@miM5uOp_&zA!790JY4DQN)T= zfIER)xUnT}_iD+rfkz7FxU__+me9Bv3+IMupA1_!3Q&qa*N%T_vUD`G^NG)1IJfrG z%{Mc(o-AeoZto2?G*F(5m+(65+EHJyQ_8O_Evd}c=2z9^RGC|Lzlp5!(?Y=K04c!z z;p!c~NAWm}$4eP6m3CnC|NN2|0a1F7%iVPxQJA&BVuO{v$E7TPU3bPSl*thB8yqfp zpzPAIR=lGe?hbJOcpU5OwE#NdZ6Asd(l5r4$uSG(S!55J#W_kGrFO{n*h))u_c3M9 z!qXRHJ~J~t@>0cgN17uYCt}^#F>i8nh#C8k=sOho05d+j*xYg2!jxmSbX!`w>DL3e zRO%Nj_@`0!9W@F$2EwQt%(n}fmrTJ0$WmvK6zw_M#d zm<`z3LxJjJY)nCC0aRxK*my{bzSA?)SRRwSDkeo%FAEA<2J~b?dg7LNb7p34UZy3c zY|DYN<}(l$(qbESM(aPfx$MA}vKVd8H0Cy9U70iUorH$x?Fk8kA|kj`_shP`Nbm80 z?EpB-LBDbufPDh&2YCEL4D+3T%hK7|&|q&*Xc*)_V&*%5EpF#les3%*weLzT4Z1$C zUmh(j)xNnj^?DGvpcGN~qN0N$v&vRuzlPe_YXj5DHrdlsQ`795%F?cl9q4~gomfl?;Kf7J+YFO}CquV=hsypp}Pc@=tGg}sq8h4tKs8P^Q5B||s+z8vrJAjpt6HX7qsmnks)|(yRPCx`s@GNLRqv@jQhlPj zqPnH}QPr)wR@$R!&98^$f*mU1y%ESJb- zaxSittLOG`&D;sDo9pF$cnyCKZ{#227xPQ`=lK*qlh5Jv`C`6_e}zBEpW{E^KjJ^( zFY~wfpEUPq0yU#G<1~+H=4%#dp3!7zax@N2f#zk++nP@`S2Q;?-$Sg?qg81+EosMS z$7>(a&eT4xou^%>U8;RSyIPy1tXNt-!BC(!B_AT?iB)sQ9_U~S%?r83(JKUAg`4uBndl&UBXL3r*K*L zUbsUX>Byfh>2HjxYeY(-Qak_BbY~4~_ ztZsuYS(l}A>PmFGbh~w}x+A({x;J!h>)z3I=|0kZ1>z00-d{gJZ_y9a|4ARBpP`?x ze@-8xkJBgVQ}x^Rx%xtViN0QcKz~Btp?^!?seey@L4QeqP5-^V*WhdLGYl|T3_}eg z3=bHB4G$W^4UZe<8I~AU8sZGehHVC$A>RPwc03R)C;uX)(CjStuxEwhd7~W3fM8w5ciV<@m*h64H01q}n7IXUPd4GqND#$v2d(FloC+~mM z;`v`Q-X@DQLzD=Du3ht?&OKhB>4Js$heT40fkc`~0zrJ9_$dNCCA1PhT%@~_*qQkX zW|^SP-km;D2;|d8qI^I!Tcrr7Eo`wO1uyNJ!+PU*%&J^;n6X#2%0_DEWUBjDoc`HMP>+ zdt_#S)(#hp5UDk`DVm0YGJ^QWel1pD_tgG^$&vjf0~K9=+1y>~zJlNB`uzz#UFG<8 zQ~A-5cJAO&4+dknNNfnxqzIH$o>EPnCc7N7bQu#Rd-T=Cb&`F?u?q-wewh8zG$auS zOx<#{#(AQqxwb|tPuVHYJkMS=eYW@A;~i3FP5ejgKWWd^u;C-@rmC~&UFXc_&SzN9 zTI_82x1F1%mxjbo%G|6yzHskfLQL{8c^2G`FG_nh)GrMmW+!mxEj}?rP_#`$1f}Ap zLE7|rfvU?>k|-%vq_x7!BK7HN8*2smvV577D}vxi2b+2Y&+y(ZP#~E8#t1`%p2+*~ zr@0?B^)On17!fK^bW<#9QXoE9AcqLKGYz|E_;vSAcFzemzzlpiMp_veYj{+igXQ7xGygwX zwmHGF=+I_lCS#U}d^z-ox0H@;L%RW)i-pb!y$|mJflHIv z`*6NU`yr4GSt!{Lm_0v;%afvkoYL2oVA+O{dLmvUpxtjxu*)?HT~4tm((F~TXj}QX zHbVo?j>8IN#_C&UOtA-V%x8bJv^Y3uzZAPnh^hcDIjJ?Ma0(XwAC&&%qKWu;k*0{9 z#Y#g@CwR$vTyQ88dl0|w>Iav<@WS$ROpQR`c0;h{m8Vr;vFtGK&2K8$?Y!0a&m*6{ zsoi?&&Fr)0zL^MPRtNH(UueCK?|VN$!wy2#io5LP_KgD@rMenn%zL zCMaTvi99V6VCP1QJzdLCCJ4N-sRslW4cO#VIhyzu7*!Yy7t&`T{gP}o?L)G`Siz1p z1*$Nyrwe(`n6_zJ(PPr-cT+^=qJjNWQthwvOvqAjF!~T@AbzhvDdKeMF)}zvRXkFe zkAt=x**1S*VRA8#;LD2%&mq?)Ye&|g9G*TDkhrYqy(r8G5Gw1NEGiSm|Gp7_ssCH_ zmEMJX6$@FN$)#xoS~m&9Lu@ob_l{{frr4M!7F7)#%Z7&32r}?hlQ+Kx(O>|(Lb8b?K5>7cwCBqn4#vK^UH=`-)kv0Sf?y06OPjf!yj$gq!Z zDz)fxW@Ut(d+cN7S)zQ@#MB?)y$FD-StX)8;4}fXiP8%^nTRmm=g!22Sd%-GW(&#) ziIf%eW>0`3c}VhM%ug^wp)8E29h*Qg+regwbWylImb#a8FM$m%%ySN+V9*`}htpt1 z%wzyN48N=n^egT1DyH{u3RLeQbcdeEv1s}$1%J0()c)&BK54; zvE8MOHPzBp4Y6Uu3bbAyNo{GtyD2|rIk*+$x`0Dn6zzuapIs2#dXPzW||~?g3jWG94m2kb>+=1CSra7JNu!! z%hBNPE~wCn`&LwhIEE28@F#az4xQN5*=Z`bRqQC2$Z0RMIe(MgE-Ndmsx}$ARx%0- z0-j~sw1YBTyLOOKmqhU!H^#?rtZf8TP{bD6Si3PEp98vH{32a2O^TK&A;&2jN$1Ih zrD+x_gPeA185KJ7i(DpZNoh{3m#CrPu)QIHfa;ZqORC;l-)L$muCJ~}Iw~m4tEx#h zJ2zJ>uUuZYqAst_SzDwnY_(BkWg&*@ZXfqe&gDY5Z7HOa2@yVT6WnoQK?(g-U2Se| z9eVoT&OR{{39}9(0D@SL%aTN(P04_!-(CgZp)@Mev~G4KBuKP@!T8@D8lXPNVD#~0 z{KtPXA}7Y$J(7bA8HgZ8ax;by93Lyuw1zZ`7&tt?T^t?r>WzY>z#jlKS*g$d{ zOOj!_u_a+^lgI=HE2iE7_(aB5M~3-18_WuRMYN%Im{DSLg(m7-nkUI^^2FOfR7@O= zQ3S$*;C>-Af29lj_D6qL=mRdWVP@ucX~m*j7Lqj>&o;v)*Wto+3iz1rj&y;n$Wws8 z6`Why**RoNhEcDoz#JKEgSKPxJe81i-zB%Bwf3n7!g#O;L@W`&sD6_GSHZaiX+}Ai z*b`{PNV~IBQDKSGQc~rrF0ImDI7zz{yVwa$RCKO@0W?@~>nR)f{|GpKHXf8|;NC<2 zG8r$4gp3M?j0y@wN*%%Pfnn@n8|U%Ylvx{+tJ5i4o1LAxJp+U>yfuZ&tAHBOxblm@ zG+jvYvv=ljkfvqN_RN9BoQmNC0|<2|V$niI*$+ToKb}}5dIrz@Zrx&j7E&O~Xq%!D zm56zHf7z7BfX^vDF*$LoW$T85^*fU&ICy)od6OKWXcm%7G|1DT*fxwzs1H=VpGa72 zX$WA@VI<{2+Azb6Mak>cZ=D5v;O(PqAPS%d4$Q%)W!MQ+DL}icj~%(BtQW8tA#Oum zb4rU@DS%6{3gd(uXmBQ!TNzwQ>cwc$Vs2?BL}!0Ulp9T{xg^h;2%PiCQzdT_|D{OJ zF2v$S8JJs}U@2pr(H2sJH%cx7{S!}S`IUw8cStaqc=t;}@AO_`qXh%pZPnPvx6;1= DgjuED literal 0 HcmV?d00001 diff --git a/docs/Saml2/font/fontawesome-webfont.eot b/docs/Saml2/font/fontawesome-webfont.eot new file mode 100644 index 0000000000000000000000000000000000000000..6cfd56609567bc9db55186415c694d1d32808fc2 GIT binary patch literal 72449 zcmZ^pWl$VW@TPYcTO1a57I$}dcZcBa?vUVai#x%c;2J`3Cpf_!f(H)}Aoshg`|z*2 zx}KVOd!Fj)nr|~z-9Qo`fP@$b0R1=M0sqs002mPPA5+ozpY(tG|Ka~*P=()r|F8Q$ z1Ro#=a09pkyaAE`KY$Iu>%X1Le+mF#0JQ#7JAecT1@-~#VHLX%`UPP7~z8flf#N3 zAyod`(sc6-$1u|m)*_4U_&i*Qfh*Zpn%@Q+D5YE^F=cC)gIX%E&!~G^GT`ftPcWrZ**JQVkzzPiGhS55^vT&aADntLBvb-o0w^(vBNmZS#0E++kzrO#|hgV)J# zy{aBFzmqvGZ2Dt@Y>1y+AYb+`uMN;b_b9u^Z!^J03wK^2r0V_YhR}JZZle^DR2M^H z536e58wqWG`U!#;5Wj>`@YCRq(OGdfX7Y!eJ~BNW+>e;lbpvVw{H*4%p-`f;?~oa# zKl1&bk_h28{^k7zKiMF1Ja`$Q4Ka%}-!c#MW4oIqkl2h3ewW7mTaJTeA9fMFLJau! z0o0rc-(d66aZ7R1-4k)#HS>g8k_uVl2!5O%DoKv@NvaeN*7`M~@6pBEm$izebAFtR zk*hk}P*V|{1UYrXB8|w+&N7sgprf0QhYJ_6ie?Z;9|BJil_V2Evxs95q~eX0X)a{C z8}l0Wy8(F0Heo#Oc$C@|m+gSRX|XtBg&Hw`0`UfQ!q{-AkzWx3pBJ03*MU>84+!=% zSWTMY5jd*_b1n{X&PtYwkxCL5`>)Sq%KhHTs2Mi&Ya+wA>V|pkq=Pjh?ovXpyZ&fc z?t3ppAY#TpgOZhY)+ib;KO2DF1%J{a=lI|gS~M=c1Ql5(j)cJ*jW#$J|Gox6dYmja zy!F~s3|}<4bT?Sw8jhUD=$$rw^xu}_Bu|n6Su52a39drPK25nmU;JlYMd|u!55ubT zsAIl&y#x!Z0EpknZqATD%*D1*&>v9Wwq`oS{uaSi1xyJsVxa zYj_6#>7k{GuUfJ|!2|y;xY-B(I)@2A?d@CJQp@sPscBd;CPF#8kc-)%5{q1r*$*b*YN#OY zg|0bxedFuRyZMd|g7{SoIR>@?HGr(uM$nc@Z`s@&iYEftXD9-G9{J`3{M|MR(C5-v2uvF{h42rACTe3 znc;}~T{p5i_fO;Jzo&nm6bedH-5V6&US;|%+5i&@3w*is{}@>H?4FK~^9!-LfAiWb z-&{LIJ{&|##pt^Nu{}9S9F*HJOg8)LQ`A<(Bq_iBg`CHDSE9muTAK~eES^`=`Lp+c zTi3--VUWuE*pnHQRN%WSHlGxxm)(zYY|2mq3R`Xl!V@VU_i5fBY=dlz@V^fg80T3q zB_)>=hv)*aikNGC5(c~+(M_qtxH#qIaUysZfVb7&dju+SLCZbb$ZShN3y+yiIT5Dy zK%1McS~~E@Bu>Tc=|szVeAR$r+~HtTb(rEOf9KgxCZ!SxuPp7;J7juEF$=|7raV7; zSqhoAVP=T9$aazb`s=+et(Ys1<6Kl{p8{8Xc=4V)#AMvEN*AJo<7e|QKV;@}e@&f2 zx^}ekCDF|8aXyhz`-|$!694F~T)aV^gv@V@9!cytB#y9BR()g2#LNFv(d+pYzLZM* z8#p}U)liwRmMx;g4QCcdfx67Q7&sIYF-s>Qr^5AiX$ig$mDeenQ*W`mHa+f2=sJm# zcBhPR^P?m;Ks^(NJK+}<5dxHA9*6pu8w)%BdhTlXD#u5=(%T68fQj@?f+lE(`SDM+5ZNLgGAcxfj$*cv=;Cp2FJ* zfR6JY;|HNUjlVwTMmX$6rJb?Zjcf8Ue2JCn=Wf(8gzj$KmCmN7Bda(|q3K)8iPZdf>(yg_IZf7YFd zy;orRBdk<7JT$!4T*5-NQc1xAyVES>m?lC`vNpU4I9#ug(@sC#g=$GvPLWVnMzlg1 zBO~z`En966ccd!aJI9oTC{Fbc?VKhcU5s%}Kp=Fb_1AthiI#movdTD7&%A-()E`=9 zeV{R+ebwSM!T!1}Kq)TvFo~sRec@B8(7^Z5#9T$%mUDmNIX;UD?3s z{kYuWF+quv$PyFTvfu-sb^fSFJtfv=hZ)cK-64Hm1SwmXh8^EMFxj`#f)AbDYtMtVa(wD=#UT0+5X^*4u+ zKeqB=WK=);!kJ)BtS^#XcI`Y~w8^FM_2C4)efx7CJ6?f2%oo$i8t zPhZ2B*WCiR$A6m+!=UA-99l$S2(u3QzXdD{5Wml+g=^2maNhYYEHP92GRCS}hBTl^ zS;cY@-qjjo!B!DU+{+g7KQk$FW6Amhy~dgYlO6IgV!p`1>WmZf+7kpOT@F|POcHEA z@k|G7C)Kg8tg15EpV0@V0E{|kv7B%V4B1iJL+P}dG9E>zT)cq05^dN~Ki+KSxl9c1 z?(0fj;NKTyluYa6oTeBLnsNAOJt{MVKC5YH>N3ke z!X&kYZh~}S??@Du8bl`8Q^@N;EGAXxeo^sti<*sna&VssE+@Ih+&Y^aXG*((tF3MX zy1`eVYx*|#3)0D2pWXU~&zB}w(~xSb9bwzkt(%c^SlMr(2OHXK_>Kc&M781p*l3u& zfryzcCG+|Fti|V4)^9_$SLoGGTBIqM(aoX}4#BdWDpy0CM@GG3>h4y-c75y`~fO%|;9R;h}$tySQ9`i*Gr-eQgFjaAs zO^sBpfWWX1@}=1?+;)bPr+m=$JuVRP6h-c-|JURT&)IvrAIfx2#-n{0T~%&FN@unI zg?QzD|0R8oe9n0dBlO~DvAvSwC*SS%E6)3AWC%h#S~VXl%V0E`$PXY&4D0uisLuFd z2_|`)DkFd7GTd*Vm44L>FmBTl5eJjWKupN&EVf#Ci{Az%I+%=*CSHnD_hX6is3KFn ziob75hF#gL`=TSB)>kf1NorIDoVD
          U~M!&>g0b zP>w^~Z+#M>N%zq`RR3r6Iv_h2r+{E1$_|AX$BAqu#`-&YpsT8ToFEi#V3WRo?=Iq0 z;zSKrc0Mr|!-U7{q!e`alPUc;ZBIz>eNdu5UVcipvm~Td!`BN12uv%2Y7p)*4jM^3 zlrM8uP;Ra<2RxP;hNh&gMtNL;lLqkQ} zRR~$x=MLTIN|2%rDk}tHjJ;7ZWI}a13JAx$*A$E9B&T<4B6%_tZ<>UoVev*xWVl88 z(3WD#{A5=lV<~~nL{F&*3y{RQ-K~~o0*Y5C5=??m4nwW{_!U=ei~IV=q@ox;?O;Eu z!HbAZ!j5E>EUhHeLJnH~>&VE!*Nb|{Gc{b!iE|A$JR1Y3{}5& zVmV0E@Dl0BS#0(>H8Vrp4#H=gIW)$GEtn{i@(AIekOdlhy5+QcZ=mzSL}*tsM*9a?@Q^l<6kDFh(XPMB30p~vDD$zx6^`y@td{B@ok@l; z!N(U!wtN@$BM-IZCg8_M^|M*q&s2fV!0`HF z=+n?79pUpPL#Yv~slXpnSb&9!+(ZIeTsla}@fa+RJ(R9#@JemkJWpC?uK2Ts0q&u9 z;oV)Z<4W2Sir%sN8yoB?5r_~UYsc#a1fXdUo1xi+rYP6-U%MLXXl)SSdau8A_r!iA zC}Fz^k1gi+L~bun+~!XG&Nbm3W{D)jq zuby5|i`M*}|CWFf+$ea8wOB!*DAJhgK$0Fv(i}u8J0sWb@FwK!#$PNIm z_ZX1}{Tav6jRJ1jICmcClETGh#v|kwTil)yERQxf@dnEI3gkR{N3iJ-)Zy7r5R;i> z%(xMzlh(vYF{9Js<`keoz*#xx-iEQ1SfxU-CY*WG=*pkS4WJ6en9*}HJvc@0G^}%0 zE#!n`oCl}*v(;P=1J96tHB!`1r>Y=PSX}yXYhUg;lXDBSWL79>lZWg5qz^p&n zkJX;w_=tN`$D$E#$`$PD>l7x}ABH`-8$wkY>X*jj3|qf_^5}L%bTAYw0wY1LF6`L9 z!Vv+%9N^77O<;QVzF7IFYI9ku$EygDeA$(Ik%NLIu}+9t@TP|g$ngnX11~&%F!z2n z(8sz%)@751T~33TK!Ht|X=I?~6dm%BTrm%7pFS4Jb48mT^zO=} z5bMV8u30LL5`*vajWZi28`^a&P!Ip@!nl42or&p=Jsh(* z1kW3lXMt7Pe!R_&!ZBXD)al@R!Bk^9BLqj#kXsWh)X8T5qL6EbE_5HIDo0w(z>%n2 z30(MtHN5b=XUR@vfiyr^3`HKlQGM-)v)hSxk&#q83;NttQ`)Gw#EhCZ+}$074Ez&; zU=+*yQyuXnvBgY4rP|3!y^H7+DK(z{_e9+jFPgdQU-^aeYtio$G?@c^gw;iV!HG&T z;l{(&+IK$o-X4V~q;!syDW0-|ZyG11*>61)c=U_B4-$5AQr@3$X%R;)^c==IOW-C&@X` z8~T=1pnh?2UV22f`Lwg@$v9Y4fJG5DfM(pWE%ScY*iR_;%An`Mk8Fz+xdj2bOG%iN z82lht%#<|Y;uT+E`HL}XYM3W%=A%Vni`gd6U3CSughYKx zg?qfU-UZ~a*nosPC8+KXTyCv3wq}pjNp!sh@$bumNM_K(5QBEf>cHCHrsxZ_B;UV^ z{^qt|1FzSMjAzFz}11}UKx^1HP%)_zQo;i&L9`d=_HDl zv2?mED@^#)bJ?E``auXTjfa!MxbsN{tGb29bz!Wc8M7{9lw1!sSpt(Qh5!XeOT}*$ z&?oi-t*t)A)&@;H2TZj;F4TGW$-Tlk(?L#PD{cgtfRPr9lGu49gx}5JH7t#TQ-n1wq6s1X z)f-bDwQSlHj2L{6(*t4}baX15_|j)OdLO`+AY0;iYvLiSU4GKkk0GO6DjxQ+ZL$^v zQH{nJ%euuu;#_S!sdCZHseil*eG*b3t^fQpi2-IH$p2iq6Wwq+hJB0m_;FkAaWDH* zu*)U!a^ay|iT&?MseilDIEK!}!gm%(LDiFd!QSpHV&8oi`P^_NYud=ESwK(F0j=Ch zfHm$6wY{jtM@(k}-)qeX+JtvA@aS@fEIBP$K^yrp#U@um1XblF|Y?d;wbpNxi89zlH}`;Ahy{_NB)3UggiWDpLlepwvJmAZ_GX(=OJjU>@M zUgyws_&G63;t);Fk_4eo zSu0Y420r3sr@2tfqj0bC8O>AGWXv+?d-T|}^xe@IW_dI^EgBzUbAC$;-lX{_+(U5> z4OfD9J$I$sLBe{tdbsoAU7H6fZ}8ec3rW;FZ_vGkLsVQ`ESKVqh7_xX9KJw@-m3O2 zLszjiH*DxJAeIPTWg%5`(p8S#9_AR2QWs;y5QTfIf7*mzi!}kUD+;9UJn;eu6#t_S!rV3Nl*jejz@;ALfpkm#gWOZ%iG zbE?;1{~A$vUR5T5)FS0REq)N`QH56e%rNMC=7Y458KtkI?USd^p@j-wR@!gbzx<9nd*0}xU8AuK)0*4^0yq7Kbj*smwZ zEgQ9K`n+48tGHthmL%P_QM1P!1Xw}M$B)dx=B8UYbo#95Ba8kC`m8Q?s`I}T3z1TS zw3-xg4f9p&G$yb12DmmC;SAequx5nWvDQ^%9$Iim4`D_Bo7MzlI7f8Q} z7#mLR*-V^ghp<0RSI`aa3+LfIG2J-GV6MFdA=u6>P{CWJZ`BoTX$Jk-!`F-N=ITO; z*Kh5M_IN(B=j3KO)^rs!>9Woa(#5dv$BpZ_ET2{NF)O?qEzRTcJw-}ED8CD}+^}Or z*Z3u@EE9=|1OfZU@vm`?IIDMyVvZ~;qP0v@w}|i`J)MwDA-{WYvyd2SG$Up@eDP6q z3m*$yr0g0nF8L9`+2Tq=vSgiz9})k?YZ!AU5DN@B2P(9*<556wZ@b#QMZL!sdor<` zjYob|Q5yH%ClsKkzr~*)%zdn0pZZ zkK7Ray}9`)hx2gJ*$oJR;2trmaAK|qsM5!cTWe`Lx$9f?FI$Cnq8xn{lrnz%joQy|oV>F&4BqXn7ywxi6{a;B1mzDl!TRmo`says!4D0yE zgJCIA75dQ9Mb^*NT_8acrGQ(5l^WxgR$)mu`}S!J8v}$D1gb}IA7Dn?(G$%z>r`c=edOKKfB!A?rFgFYI)b-36fF zYJv20$Ni`mx!woNG(!`F)>=#D(Co|-DQcmqjnZxwOq!e8KspChU>@ireQ2nYKB^3@ zLO5o$)5!^im0H0t+2un>l_f-p6+LCw^Z`9HZbE_( zJWA~Ae>PuOCi$!}Uw#OS+eZ*XGK3v}&9OnXnMft=f%8q__{^a8(9)8Rx@JE@yY#2* zGw36Y36OR8AL-ApwDIKJTDHMnE-Ob@iiDq6$B3XAHT6@Gl~uQC$HAiuOVBIjzQ=kZf!O>&7QvoraT+c z4hC1w#zT&R;km#z`5M?Ve9u@REm~Pq;eglc;3zs+iKxyqcFGi0q`a-Gik1h37p%!j z`Z3HBLChRizH>S>2VScPRz(EC{U#)uYw-SV#%&)oI2XYMBE|EwyhTe9tsn`r112LB zX;JKmu<+!fGRwxcgb`H;(G*ulx}AM8Y|$EvFow5wCTfn;BVX>U-6?4P7|>7b6F|FJ z-Z%F-x!qTf0Ij%TTfXgAZxK$Na^U%WfduyF1@JkAZz83q?3Vv`Q`!I~u#Le!Bs~ zW7fggslMo`Oxr)c{XG%nP5P^jZcs9@uLN^DUW_qpnGw&MFtN<_f>7FbYca!~^Cqpe zQ#M01mp&Zc0CrV_Qt4B7FIn)pz2s?J{F*!M6T`;BultJ~h;4GnbNmP4eCn9N3ZE`U zzGH%0&?8cx8C46i$T->!hz(Zn2GHWd1&eV_(Kz~T*wYbU`&7SMmYXC;rxSDgD84pi z#VnzFoY<`@q)9J-l_$6|+l?XvzkuhXbhNaiTv5 z#yR%dEwzLJ9|*D{Kva%+R!{mJmhf`T9$>i0`Bn+v$9eSp7ilgAdcDOVv|Fk(pY*d* z-RaFL)aZq@D~U252V8M`8DY~YWxyl0Bs;WtJqP@0pmV0^Kz}O)l=jD;z+5d9 zYR-?hfBQPgU!oLB^G{!Um{LS_9KD_BsWogR+VJlnLs!Dz3J9%q)ExNyZat_$GHY+b z`M|+1avEKkKLOiVhQ=8ugxJTPLL5JqJQs=SwgzR^uHUrL@R}87MGEp)yV^!w;1J13 z{kl9&>{SJhT_|5-A|rfd#JxU+N)5txz-jg8XcdEbHWH!VI$7FI9pCKEB_rX9CGPxs zJ6sB*3p-qj`nH8Q;iKid@6LBSCQ^$CR}@oAN<}U(hu1|htWMd!LQ$JCzRyHdzy^gi z;zC2;(oQ}*czLLzx_ihFk-7}zXdnupwJTf?ChN#G$Vn@TH({71S|FBRDin65 zohg&uhaU#2&)cWBXh*6=+S*}fiU@hZEvMRKXx%OdZ4NDW3t8WZrC8Tz@jTipej!JO@~SZ~17#kfSvwO`QVU>qc~&MR ziht;9h(Ri^_#>pNC%KYqtI)(UoX=8O29owdbva^WV%=6`t;K<)j?htxff2kOB%sb9 zhZ)T`NB=l@Dl(K|r_o^CUj%oeQ{Fdk1T{5-gWOqdSa`O)^bY7yTc)#gWN(|D4_ zs2f5RQ$2g{x_PR?FvT)qP0jl88&B`5I`EL?9Q-q4yDFS!Y*N~4;1{WKJYfnnc%Gqd z;?0vU82Uv#m~lVC6w_0ENeTNqPFXv*uk$3MT>6GdOd=L;2K=hLUNVA*(=U8?;{kWa zd7u#o5Ij4QR@^`Gq*V#ElxvsX&{WSmmp^mq>UsObckd5gD=dkDg+GV%Ao@vb0=I<8Bs{TYan*n zMFo}zW>m#Rb6fhTX~h@U4f0ZA>ZPAq@~Ids_RfXr{lqS&U>^hGzXk(FC&Gq+>D{mU z?tKNLbgI~FwMTK5yCre4m-a<~Nhx-Q^KFd@C@#8)-SL7K9bVoY4|(+uE=r0Xei-Ko zq=^&uNZVMz;tb)UsAYx`I8;`sozTQg#}7~EsZVlyK?07QeeX}162oIT%~fOlEpG>N zMRPljQSB@|!qLAn^ZvOD)DZCJ$mh)e)N?ay8u30My_MS+zsoBEOq5)4g)Xi%~Vbh`D0xgkXp&ubVev{so8xFgt z?T!hzWm4kbN#LLs>CKdhaDtOvJiBYVza&{>Qk45{1z_c7MCadi=wHNkEC^Qdrzr{$ zvML=bGRUp1>!xTJ51Jk`;xIr9e?s1Rbc^#b?xLjiVCz`<$00-Y62*wn>KT zRAId;{M2!3e|}`3`K{-UX||VRsezlned3iP%{NEUDy1uQXThzIr2^WPgZgpW3#gTE zQFUDe+|(PPEo(J4ddaq~q$rkCO^R#Zc1=pjns(SU(BMBRjHs~uQHdT3TjhNepyMn$&oZiyNQ#TvZDHDD%Ml{v+5oEqA z9wF=eje)UMKgGicCa}Pb5=8WXqMAd+?3aDgr^+d1=c!|kS!k-D2oD5rbPO``sc~Sd zSnp?U;wgg!1*zkv>$&^QJP0GQn9XW2vWsLO^Lvo9yz8PZZY9+{Mc`6{G`Y!c2J)O+ zewh3U-?38QqVdD41G+}^hkjP~$ssQ9wNlJVL89Q!oUn#q0I)6KWZA^rgzWs;>Gq>v zwkw}^#ib8{0NAgQ+N|x%#ZL@rmisfs8@-o$*<8_d37I3`sYBY4(ZARKK6{a-+-zBq zG{T!4{T?u;#KxOH3d2jBp}#krX$U#W4y4dE%v>XPFw@!Y3?s28*r{fIaE_!<3`N&g$vOMt%`9k=+_l4DD?|9qSA6kc>MC5%P(Tb=P#pE0+|BL5_;*-)Mx)tl@kSc#$J?i!PwTSyVK%V_BIO2jnn-(?b%D zXjZ8;%p+#|`qU$3iznWYe7m$#YBjMHJ zf6YmRHNn5Ay;JidLPJX#sICe6a*S@k#r@#^9OdY#s7j?_F7$PpwRoHs7fgdpsyaw3 zjOZJ&EUUDjnw;*;U5uz%3d+#4%ghFA=_fqRhAH^_g~#q=FR3?Y;mOAo8&+nSQO)qb zT8vi~zXt-H66pI*JnirE+(S|Ady;FKlo7Q9`J<-{#JpF2cdqEIPFR4&ghJxh%Mxu1o(Uelk2x%6E!{LYyoVZZpGQ0=jHupM=>)=PWOkfLQvl%VUWRGAA|$0F1&vwasg- z@VcNq(D*Q}eyGOHLMCTMOViB(UIg{+72to*en28k zj0oC2e~`&a;5BWk=h5j;fHRWSgl#`s`07#}kS<$Rh!Pqlg^5OYTlaXRi?~})!tWD# z@v%=8P-#ZOUT<Epah&sW^m}#g0SdzYY#&Od^KblG+DZ!UNR}>a7#*OAT2&tFzUr zj-4(VPC{$Vwi;7Jm~{rD$Rp7D*S?upf3~n;7Rlu17;)f~_YTNr3eSxHN zo~H}C$>dKg6r%lN3cTfV83{?C<_q9Cgny$#ul(9!*fhn5f4FLIizxnJzXmr9&_kv# zf2H-J@t2G9X>a%9VCC_%BD>NQ#EAapu35#9L$2&`GOc!<#-20fKYY*sHC*pVGkptX zb@#(3z2gCt$kbkcJ%&k;M4vC%=RR>zD-+U;UjxFx$B;Z>p79{G{&JG1q|^@QZ|)%> zHb|g2Y&O6FR!O_}uxV#6>rfyseLE(zj~jjTbVQVN6JVc%CDYV=C_t;uXu}pshjfDA z&<+bsG82R1O04`cCxQG~u@w}vVT+9tJtxM$>N`Tk@!4r>={zla##3rC15X(<=<;v$ zzuW&~45fE1?|g0gSca_6Z<5RkFFBu6m4KF&>7J=kd974|_#(%g_eHZECAs98eLWFK zyYeSTL3eB~UCU5{N+;Cz^^$!$eAb_|avekPV$$-0)wMHU!}u|P9p=rWiNhBfEK~Ab zAjKpm5>F6%H69^{4?rCnKqtY&M2G!u(}DDYln}zt*?(XRjxzGi1GS-A+s^H6gDScy zERY<=pcs*b=Lef`CFf+p%_N1eY!;Bu(|vHG?F02-0Zwi}1o zns;&O?WG!5KWNT|mxX6gh5QY$qpQPnQ#zl2l)V34(xxX=&sD#t5o}n(>|b4zO6}!r zenh^;qzHYp^BQq=W(uy^T9X!p=1dXXg)gsOL&}+C2Q2& zb}7H5FxSv*e5bL3L3%tbyK<aYP$hd6kD z?||pdfGS3vHV~JaAHVnsL!!z8)!Og#48`*DN`;!yd;wJ!I!MqBFKY;OBzXsI*t4u*VEz;?KkE;aFxkGIdN4~%_Ge4insnE z`K(VWO7x;zGe_JVp$}|P;8hr_2IMHl+DL~#ls`cRh%%Ysx3(Dp0*FGJQ z&n}Q13Vzl;@^K?Ow(nE)N|W_;xIl;zxwKqA<%$d^=U(=`7&Pp1$*a?kA1y$SNoC1X zIUpmfs&G^wql9@&n9@FHSf}rr8J=^@uXcYy*Oni#K>;Uh1=wfMi9vOmDjaj zU0vF%zu09ehjOus8vQcnYF1XipVZJ4Dbi1kGnb4j`@rJzPwD2u2CcPbqbaX$FyTO$ zhF2i7C4W}-*!V-ZATAlu6k`|bJue0}m4>>0znpScDwDauxMcm4k_w9n48uGFA&zw4 zHwmq>=gC43e{nEwI{@{s;RJm_Bc(abg;7-{-HqACiaM6O?)jS!Cj2UUi*Smd{ygcl{TlgLQ6MRh#JBy_IjI z{?WC9{eWiO|C$x07q0Oxk_rG<(<^sAn2j-N4A{&fb_Rqtf}t9Wk-0SF>|dJ#=8!rQ zh1g-28{C^$D{5Q4;oTJkv&B;kta((PDg3reEzMTKq;gr^;hObo6jEyXTyGs`a{0K6 z2CHkA0@Kee0og(*ox;OQtta#lD4GA)P|e>zi1DZe#;f{T!tnTi0-F%2(dFJ$vmE80)f(Z~>{B z#BOt-8EPKjK*PXs7sa!L?^Qu?*t0${WQ~I2d=G1Y6@Z926Uo)4{>(Cx5f&uRFxu*( zn1sBHiis3on+-W6DzGzGQB?XO*F&~kJg)j94U?}|wqiy|)L4WB{H?8)pge)UzsMiN z#c(e089Yz%R(urwVwCJr4^j=`#wrdi)+WOY!M{Q=pl`$Q1lV5LMUur3p)SH3kjp`^ z7LbR@oMGYoCW6e2^z}`p3!ID^C>GsOvqQsnFXv1wNE3}uaPT@5ZlS^_k%MqyR5+x^ zJo;!S)mc5oR$a_u6heEa1z0-kx~?|ZScR=P!#Ute&+Qo@i9D-MtLFF$L@J5mse80o z`W#~mum6>UVq`hYi9OuWmR+}KY^k@#^{k?tKq8298qyWkirl(H;-_j2pru&}?5 z=-wt8S~C4|fg3Wz^9<)?i0syCv2x=ZEU;Sr99kMd)W1V7BfkZU3C}2(etb)2cxr^= zpwZj}s8ict^}GE5vE6@o8kM?ycAm%$aO{N7Q4(Vp+voosKaegf^jPKlreOu}Q+jKgZnJ zXh-^QU>z=#-p=?*=c?hheYA)B(cP>rGZsOgb)laul6y29Ryt`FQZI6TX%x=e)nVVD z<*;*8YwImd6U%pV{8aHN=E@rod!;K9RPo6+Y=++%6()K5y$$<=w&kn15BbwR9FT%; zXH1Gx@dAsXJt!dmLhy3Fa|&C14E>;cb;bxzA~zi=m50e`Q|-WI#odRlFBCpl|3u8M zP<s0r67)jLqqeW!pMX2r7_gXy8R?ZL~Y4n$A2f+KJn|#e22b4)mWn7$!1~IdiBNI=r zhX;2iLFfFD^OGDy4dmwV4Cp;v%<*2erLTU{qm0Z&wDKZ%l$+=6lL@z23U45Ct`(TNN5cMGxi>wh@H2e`0 zKCoS2DJ+BwVVjbJYPe;?*c{a{pE0AIu)-?Uk(viV~41~y$UhB>a$EZPf@=HxX+y_qr z$=rmlXh<$qn%;~U2WUxI{6WKRH1*~tewDo@E?imZgw{BR-<0=+u!l4M#d3qFi?D;a z**ZIWbLG6C5pe!XYP#k-s=tn6zvbU@mb-K#0jP3MyoD3}zgxogneGoQI*&nz842SP z{?8tTn4FUBp8 z91fEpf+A7x{}Ku12`?%FVyPdY%E2FXrKaw|TiEd~{Ut3sh_b|Hxm_GEcJG2Ln*cv+ zZ?fl1Pijig=|W;J4;Z643fiB6UZ2ior*0kL*wwPbYdt^68Rfnn^PVMtWaW!m3gE4% zn@3ovVk*J(Q6e@7Wb&g>nNV;UfmJrgT`!tzH**5XY$hSoEpuw^7TKnft z?M;@4XU#SZq>E)v3_sfEs4Ok1M3v~F@4>eGwYLE(%(I_JR#WiuY`iu63m3g;2Djvp zuJLKpDHG}JRbx_<93;Ob)LW~rH{Xp^Z9Q0ij0~;F++v!WqzDd%P`;yGtj%)D;+L_HK=Il(-YOAf~_COC~K4_w+n(v54UF5C*&7r2`=)NqMkc}n`Y>W8? z5x$pVo8&m{L|EtG5w|j|s6-sMM;ya_xxpP4A>yLkP)kK{w0#JZU2N^=LMZnbp`>}K z_?LpBU?-8mFVbu+Z3U+|E}kJSlrc>0F|@s^f3X5RRFb$wApO1%%C?R=ZpIAY{ll<4 zy}@BYbIT9*E69_IGUA@$J>$4?_XTZnj}Rf)qs`F{ zb51=?v^(cVvz77rC|uU^!(J7nEP!)YtT>)PJeE ze##uiE8pV|BnQV(dTYQdSduIis#THcwsz@;&Q&(wVRo;3I0YXzNVU)^Rfkkh7dQ;haaajU7y*jI23N;(PWPcFHq^L~ zcn`9%bn@PihbB-&XAQ~rDU!4Qj9I65r_mm(8s4_TOtKl$VFrBK@9MYi4ii(7!!hqd zT>a@@;ixoHZ)&?`X}ba!oF*R}Fy&#ZVv9EycCS6F4ih<9$&Q!hlLU{)F74}D$%Q2U znhE*TyNEJPAA$6N@opiJ1iX}+fuND{-m@DWL~CJR6&R+Y;l-TTYMC|O>gRhy%9w}o zfRuP12pqNEa$m0_?}kGj7I~+ZA6=uqF$<+@zV1d*&r9D8^VkaKSxMm_bH&XXlOU8C z{r6fT4TnHLf{%S~I|BASfWz+}WY;hx9zGvoGDnPR5v%p}7pKx`<+yfA7NyHUE&-^6 zzlzBsv!FQ$HX*Bo6prILqZ!^Qa6qWhR&!~ZV;F+k40dZs_} zor8&3k%fIPsdBH*lqxPqaP&6MA)@z=5gZMUT9~dg`IAhy31ya}`oOf3l*fSMWmu}p z=1kz#O|6rF=d+1lS=}rS(8^>>rx=MIHQRum1c^N&gd381wb={qED!xiK*U%U!!aPK zVfF2;)>0V*NhYfyB@;9Y^~v-$78N^#*+3}7pcsuLEGWVh#-lhs&`iHzSp*k_N|FTjAuSz-eO1|9M32FYCb=^TD&C zv2bDJ(8ZBJM-+J*`-8g((-2J3?}Sq};TIy!0v=FLx#8Idd}8Lz>l(2qA&A3ud91}! zR8N9iA|=1)iceso$a3|DQrhXGSk)Dc1OQ%?uyINvSyy7pL#CfXzCafDBo|eg=+hD&JJ@{^7x-206v;!du-$`bV`+(;nJAt^ z%{Chy{qyi<4kK-S;og8?RV#wCGaY zsjO7`bXf54d3*Ls4bg5gW(f?c8RMi;QuKme3n2g}JS(`Mni}$+eL%GM5D0n+@OZXD z0}V<9f653uG!z46#KvlmD4E$2@Y*%mtB0QeoD6rP-=K6r@2sUe5r~eyfP6ur9+Ukv z!CGs)#O*j@o)7^vv%)wDB3M81B7z`SaxMOsITsS)eBp_TDD5y3A;caS)eDl8z{7=w zB5&yV8*ikvJuWF~$N)3+3=8wK6dBbpB*fKmrf_#qkTDvzL(IgES*Wsq?n-;iPEI>>7J$;g;D%-mCXDd2QEUSr6nhX(AHS@Kc5?lzQ!~Gf7)56nej&$;o$B|K#-K=OsCt2{l&_U zw?~#6gBb;2qi5JDPfk-F0C?{$;-~5P{slW^vI;iIj2(z&sC}!5G>nKLZ)c@kkg;*_ za0m7{0&j%j_u^)CL^&uhf-uWhiMFqy$MPG7czvsnIgY4#8tDWzsCcuT&Y}3fLwDq=Cim+UB@O{SKEzlV!E&Pk0_}kYz|^v@3;v7= z#!O$^sAzL4h&h#H4f@@x7j<5q5xOC3XTYGYAIGxY@S-fC2qxc;ngDNXNet)vw-*+n zRr?=Q)KmhWGa10jcgZ6T~ z=6M7mSLYydM{u}FuFdGdLm`}-j+Y0w9Z2hLKYG`8 zMx~B`Wd#D?<25Lsg58(eIgtecyB!w_ACaWUZrd{c>IdHK8z z@OXk>jYweF{5ovV-whSU3o1bITG&&z)S6?F*u@;3u!NKpriS!!ESW8>Q&=9NZMw}a zM(!+-B+czAvPkTRXBgx`o^$cOG{6%=`)b9X$8^vJ-CzOGO#s1B#?vTK z;0Dw$LnO}lk^RCF21^f^B;Z=fr9~v-E_v<(&1C|~$pH|#kT-MOoP|VIBMgvIVIKC&eJ{IghYhp6s&L+4D9hx6g>ZfTl(cl^(LIfc#kxHSX#B zQSwK2coNSEt}VFfu{2^XS5i0zgIZ|OZccObT}?p ze43zDm|fO+BHZk?DU{C}DLgJSfS|OepoM|SC|=kF`VZ2VSMi+=anj~c<_#)ihK`r+ zwV5e_{9kvU#EfzvBG&(g+^ES?P6$Miv8+fPWbnzEKerwtE|S3?bjleP^syWe_N4q# zL++xX$^8aC6&h#Hi56+nJEzu%s~QU zvP_2L!F(c0C4&ec;JX(&jE!adJcXw6-Ps|ZO;kB;itmr7NH~qbz}l{k5(%y z!a)siHj6fuvc^v6j#ef@*bvRSSF#5vjbxcl)2zapokzmUko*W~NnopEKiI8${@^W1 z`Lld1+Un?8JX9odR1sK_5NGiKu>YwcT+svqDiCy$vV$uAhd~H7f~$fqfET`$fco}; z`4Vl{=f*KNz)*zwcA*I%_f440D~^q<3safo3g__q=~~o*4$essgd{G`$n#3}!{LM* z*t@feXAGK#2OHs*lYZ*>GL@)PuCZFF`7?Ynk~;wo$WgKxYy%O)8Y7hp|X zq@*{GpX7ujr1k5eb)1`g+rNamEp8N>gNNSYfvD?8nh+Jiu@ZL=R3mz4qM-KB=)bzV@3K<=`dYuvv@kSXyQp7RA=OJ{JBL2N^$sAnRfim_N!rn;wB% zkEH*L{?~kIBg~o1;a3XW)xv=2fjYoL;<{%9Kg-7rOt>0)5#>%dW7e0MrI!#JTlkmy z!X)k{<^-Wn8FwI)flOXZ`lm#Xr1{qk9ikXw%j9;UN9W|6*{a2;Q^SjE_>i&jp9>N$)NrWuDpq;5`+qa>oNKEWmi8& zAWV6=$Y$(LDAcj|6)R(oC9t%4OmNm!rvf$ zXFx%K>}W>KoWr}fBB-VzJj&#l>|BB-V&OKSHdzP}2B2a}BLW?P6}StgBJ;AirXW9< zO1xz;Oh>JDkU;Q1)5fCn_%t{lzmOvpoJm56?D6RZm=MuQeHNXaVVYnpDQ4x=SLFi9 zBDmF)aU@83P!b_>pOrBMPkmsS7%XgEVvcGYF;&b1T7DLWMqANlJ382@fWF^fu&8?Y zEt6T?j8^!*L>-$|MmqPARTmM-XJ3F^s%GOTu|zC#}NXtC;gQ zJa57>2q((pWE5#IPylbmj38}6d@yZz--Jyd**?HNU@qZlmvq9HNOM7x&yF#uC8ctJ z!)d>>E%CmjG7rwQVOEyG0m7d>9Z{wX zj8}l51oxuS8N^oLX_5+4)MuhFXjFk{_0hcR0JGtsQG-cKBptAisM!CCA-!RHBgvr> z2uWI+GHeOJf9W*Cgud2qEo-3hLG)&LnkZFtN=K*R-xl#wFwkEcvz&)?%HWe z>LH>|&&M6RVe}4w;Pwtq1`8FJlp9;@gJeIUjJ++p94q7J4#t>_jijPK4?!EUJnw09 zMFjA#BiJH*a;Q^%p{szGE@u&ID&@65qJ%CguE%`1-A~nj zh<}Y;^MugOmm;)9|GuX^r!BmYmkh|vEv7c5{`Fj};Qr}gKx{;P$;X#4$3>DOK#NfeA4ekZM zt3Yt5*LS06ztZYY#GxB#Y#ZK zl6XW27{5U3X<;z5R8T+HR4*lh$Z_vP?DqM zs|IGxs){0X$d>(4$a`N38cd)NnUo5gj0xmUE5v|fG-h!Iw1N_og|I56O9ITC1?YGw z$`zyNg$W>JFJUBD1OQtD7kj(PH^t*xZRdcJwR{rpb#5T4A-nNsa3`BC?m$7`7Sq>7 zu@{BLE*NFCz&22SC(9M2c=p)iU}+;ZZ@CaeX2RXo8lfzgHpGS?xnGk&VkAx%j0KDn zLoyPs2sPh^$9_^#_auvZd|#oF*>o-;Lje=Z-7BSq7!)L0Be)*%_k5sg*o#EZ=sYrI zGBW6wEhm-v%Z1w_h=0Ns3lHFla}olscZb71BHAFy<3D7Yh7>u4pBF$ZFG2MQ?L(o_ zY9@+la)>i%O+0{dAdRuLJ*8`dqE1d5gt(=LVl%;5j2rm0KA5j84N#~;nv&r36Hs|+ zQN)q@953i~g(up3YGwdIKv0IuBhoYq1(h@}65ik(0DSgGuKPJ2n~Bh%_8vsg;!mXZ zYcvLu8Ez^^B{4dQD0@^%If*jiTnXn?_#E2)m-nv}_^ zZLLSZQamJ7y3_-Ww-=!b_`)-WZqwa`1Op)TuH26>a3JPEw0=?n9iUGN6vI9j`2>j{ z_+cP6UnQCmLe}cWek_LIC9)u7Wa_s3* zG4TXtGe{6Wy@-2Qbw-**`*fi$O;H!{aY&qoLs*`d;!U@4N7*x(KQ6F{>G19(XCfi|4PmjSYh z9_nCn5Cla&5>D&^6Jd7?fM`OqljZmg2uV5k*GvQzk{KH!I)a&AQ~1EFZGzVY_lp+B zj-@M>9s&q%8;Aph*UG{FFQtRR!ls>X*zt@Do(8R`{IMZ~)eKngll1F7RLH0mN-l*e zk~&rc%S?=22_=l2GDTh=Yz|Kd(|*O|wc(k+5rHK{1(^jalaOd(K=M0xwWKC)`U}#T z3Wr_O`;}D)qI!WvR3o(%d6CTv=+#ZlCK%4?DlT3ACMc0-4y5==37^o8u@Nz&$&a!^ z`ve?_Iuf65Lz#=hBK9Gk(GU9jXg1nvH1uT^6NfdCVPL7F9>o?%MzlPsg>ke@0Wwc- z0xTRbQQ;Msp}Ikt;c&4XCk^CoVwnnsEgAtsNS2uZf|k|&?CCEbYyoz+OyCTT>_JM@`D~kUvr6g`=Hz66YIi&mt-Kp+cq^w z%jpKy=oQK+Ol-NqqEsfu2W6aoHM~7E4*Lh+0^$^EJk3I48AR$aQVO)3HIVKvB)mKk zN9$56$;fnWa)`81mjt6iUIJRIc`XQE%j1AUOJSfFdl8ct({CVQ1T-HV$_If#Oui303_GNK(iHhq`N4$LFYOo}cFoXpV z;YicWQ`h6Q0fp@T?Pjv=ebr$I^QQ@h~PPQ)Y*eT(NR8}Hg=epa=~ivm*QKkrMiXJhc+`> zo#X~k|IMjbDP$~TuzeF^^}^ug4WS`Lc57Bh!BDXv-K-W$P)ChfB!{Vhbl}K_V-uFn zU1L*ZB}zmdLJ&Ng4je@WLlmek0Tk9H01zxDCk8)`z$PnJBDozUfKI(^1drX|^xm<(uY3T*G!A%YTdQZ&il z2hR|R5qWk-J7UgpGF8xk(DyG6_#8Emhymkmr=#(;cz#y`OvDohHGn*o*i8mh3jWPB z3Z$i&eBg){qeQew(M`w+H{4d8pGBI2@|4*m#2N+q$y$X{YwZZ1<1vr42&4B~K6WRV zA9DpGmz|Z7MiwWKET-tGsXrLK?1IZ74AHm%ZYDLbKoCQs0vRPS5FnMI;>6$*0Mkm4 zRLed1+a;w4(sf>hKmZJEer$q|`i(nQj)~7E=taLwO-3Fvh|J?mt>GmU`OSho1{zKI z8(F#ptn1q{ZcY#J!FW_$Y69n5@=9kcpc^JWP}0yecpQz`u^al$<~~jP2K{;9T!C!J zM{Cjde9q{S+hSz;&n69oMo!pib`{`l4_B{+;CPDL5%v1$xX%bxbIQtL>}ur@B6y$( zcudjGwr~eikW8pi1vbL+vEd~5o1aW8a$>64gPX%ug#++4q+MVzd_<_7h}>2oh(PUh zU4Vt&NSD?Y>y_TL2@(kOz2GOOmGp!SU~!9=$Z<1t4IG>oegS&N-FE!a-la=1j-XB2 z4uXEjha4r2q=ZljUS*cqI5)IL5r`rahj-I=(D*EkOt9 zvqf>!go|Y4kKm)NF#WS0grOMXzF1(agP78iO+W^j%D#vc|4Wd=%mS1W4AX&8Oio7D zhx<-q6+!q7F1}J}o1+Lm5w{)=67;q$W!ixXpq!4`OpIP`2ZQ2z4-5@t+ll}s;wi-V z1`)yPE+Km08xlR-)3fd&5YjS#yG0=dV?~@G7P~RbWHnfM4PhWr9~p(%+_La72Sa|{$#4tyXU3-eN20Y|q0oj(h?^n@B$ zR&!?CCtqUNUW%`gLq=FZ<1?`A5CAx~L|@&ylSLpcmJ@>-4y+DpHUYBG|fVT_|Y*B=oU+az1ut?K>Lv7n%A2 zU$)YW9CoNj%hq~)p&a(&*G`~ET|cnnjb!)@7iYLG-^;32vZipbp%O{by&V^ZT^L~R zzv^S9%F@pFbXdC6V(*0pf%$t2UnG1FE8($Usgl<P2+XYFAXCOktf>@mR<_T@vMC5y=paLph`bh%lpAXW?(X8y zJr&&x7QKujfe4A`(_{cM4j3znf@H$G3Je9M(bjYGWedQu2$)e5yr3Gb$%^C!D%`SRjojD-jaE`oF?70nqk1Y$Qo50Zlt=2%Wp3*rNa3ZdkH z{7sl&Rbj0&8xx7giC=L-gH=ezlA0Q@@EHhE0Iz>n1%V_G@L_+4sF8R5{RyERN7EXQ zeQ=%4V0R0mZ~%jRS5zuP+ql7Rh+QHr$yVG+5Q{-I5qm}Ni|L1nNx_5!2$<6V_LTg) zdTc#>mYvD9^u&0y(O42;1;&6-@F>oW0Jvrr?7rSsChFyYs70@ zSdNkNH7L))<;!<`*dyy6_AsVbmn2&;q+_PMb&I0kRg~t2{gPJsNj1(dIBs1o6)dY*-yKY45UDWuJ(yAYCrU2{NS!OAbe$=hEJQ22a1?>mMrb{_2+G);hUD4#bPnR%(| zH+cW_^yR&hy%@e}(N~FEzY~o5lC^iZ^y-%28RAnk`Sbsx3ee5@by}og?ZvI94u+nd zv8+S|x^NztCZS5I^lX>0<1gIMiNfv_HK2qP0hamdDmM-Tr-?ym_ehvnuo9K@(j z9>WDh2xJ02W6_is3-52wH>pw{akVkPF3P3pgoFn$4H=BZh)euQAj}PG4^W_%Sb82F9W`T^$u+@q9&t)Dfs-`+8i019l%67$X>d4Co><0-Rt!Gh_K* zIaNSTyrlzRK^)-hqlE0aVnTv#aw@UIcAA?VPgK?M$Pjk`;sQHjp>gb|Ac#ezBP5Ax z*3J8(LqVbUFn@&+F=mE^>;LE5>Rx8#H!jd>B>;(n0+}mpMDu1OSc|8I-+=PCu^v&h zpAvTyOCNs}kzn}qcE0HAP4yyjr=Y|dplI1+{u zHYuv)YIDpI=HOwaRLBVFekQr5Rub#*DSuqB)NPX=fG`wHnqX`y2ceJwHB9Ws=ckF@ zV`}(@gy9{np|qAHO%06WR!l!fs{=qVg)?P|2V&4$XZPR%=(jmdXKhb?oAj%O$Y^qP zbDYZXAs{z*Z3Za$w>sVvm&(b7Y9=~}+B3vkw#}l@7o=ds$^mO;hL0^lW13zVLYyzK z7B5_SG5=0%E2r4Ioc+f$kv$x$1N@M{U`yb7lEICm1V4KEjj|3n9bjn^Z!B(CVmP|s z4}iWNP~kFLoj{YP9gM_BGS{KBg`h{si7x{^EKIWJIsuR7?|M@x6o(=$3;3g8q?!Uz zKsC64MVI-5=#&EHM@jlazVql%T+kv6sT*OgoJ`?H6f!`mT#QC200%M#tbtX=fZ-DT z^W}PS-J|LwHdMVDkYGm|P{Us~pk{CV&@8_Z7E>>00>I|WCpkPi@?Kk@g)w}J8%q7U zK{{8a$9P@WKd<<6nikW_@O02!vD8M8{{mb*Zry~5T|`A{fnE@Zb97lVhbyY!-GWZ0 zixGA8^-b@Bp?6~ax4ii<%9`hN-#dn4?G$b2bfhi6=_g4jUXiUrcp7! zN~sLuMh&Ki-Hk6oN`vPhmv!vU9Vu|!oEE5WEz2_wHQ3p`FahaeQedYo{yG*f{jeyE z9{FE*`nw?H(E=nS8~Vr9#jdt&9zYL;%DXF2rvFM(St-LaHE>@opd@ zaw&#TPs3w}1N)H|+~>)7?KPJo5MmZU!@(p5#x z@r7;AQmxx=vkMzM*g+&rMyUGC^#`_0RjE8|6a(P4rTBi5tic9nn$^Y?*LI}NPT&rF zn9o@?UNBZQ&kSG`z&Q1ZZb}e2MkXVb@pkY8P{M4@;5#NA>RI_s5J4jx`zlKzE+o8Q zYB8JJJ9f*m=%hrNgg8a$2}W#>gSY5GwX)V^MtTIV5NgTLu@3RFn_jcU?LI>lwYri$ z^SO^bVxDyhyPK{e(`E#WJ#FcT`1}>A2Too99!RpK($Z{zZJZ#BJ!8ru4>#CSDGs6U z9!pH}dkr&2#m*BmA`#F4O6bK`WmI~tb%e=wf6vq|mobG#Pp(j0;Zd+*W~^(J;j?DD z3god)PkD^sXm$BJJA768HNhUDp{w8ko-NA=y=Yp5a)}*?fc(K~+MkmxDme715K%~H zeMHjNDDcBZ&_#q}B9*Yh*1tE`g!V&-un^&J#5sVH2taUiUI(P_>mDsXz{6{pfso0h zQh^(vkvVrwPEBnA|Ks9T#6vxl5oe=`E@Fs}Ho>(u092HGx*olJaWHPg!!~p38=ujx z#KHg-f#M9&kpK`>;i`_h`ff=CuH(AV`ZP%JowXcvB_t3~eJvOQoG>Mb!844O?X|j0 zf0viS z(}uvqYaaxu5h6B_I4gM;yD%@CB?ttkIaPxaqmFMXoL4e4M`kI1`8xSbaUaRkm@Xaa zdygZ&;53n5WD@0&Tr|}1rPkUgCg6Rt4O?TRMF@gCHvtIL&-Mv%AbZ>$Oj zLJ=zndkupya#9|yY*QbibVFll8&1?666`e+L@}5JjwE6biBsr0Cod6pKMqiN<4xl1 zfl)*)wX-W-_$v$*<7_JRK1#wt zjH=Q~J0Iovk)e=qOz`rYAhj_52!l*WnU~$Dz^D709Fmz+^8vY~c#*nfy0HZ|)coOxw!!#&V zsmgXLtt}yt&@??|UhA>;_%S~`IVi$7wwTI=cxi}X30b9Fv`M5kRt`=Fy%>e*R-0ZJ zd|FVO90-Fz#Hyt{kPQWuI}JM%^*_l>Kgm%6=Kq#Sie`!nz$ls;HTweDp0)bvo+zbn zYMZv|-X(aEm^VOsO79YnGlR*xn2P}!1(UsMaHPM&?>Gg4Fr2Jx?g1Vt=*gHu(RPp;v=^aKX)tCm)*%aVYRE>&Lk%f|F9H|Xr7mIw zGA7hPK!U{fSuz7p`^P{=P07V3Fc(0*% zdba@u_}?8FY9;jKKT@XD z6ywQsWuQu;TY#n$!c7}EW3=FM0O(85bM)8E;k_9}g$?O~lq4>!d2ixkdv6JIR_7pO zLdpZ;cEpVw0-|b3aJy;L&RHSAiK)4-&ztdLR2BZ$LzW7L_409f6=ShF5S$_eL@`Gmt_tsALyS4)Nt~X~l(QBA!zl;sYa)j&9472KzLxsb^#V{c%mhev048(|#_-u4KmGct zD1|P~q%yD-{w6`<-5@-=kg>B&Sn5q%0=tuFIrWnZ4(k&#Luzn2)_`*5rDy*Z8eUPf zt^t1%3&j7iCB*iixE}(4W6H~vk6yb76J9hU?h9(CXX1x)LLiF&K{p&Eryme(5Ttkq z-9C9VvMrO`fYgO@5Sic(ArUq}D*_?`aAc_j_Qk`UkfcMNA7}s)_D?h+ZUtUgf$7lX zD&Ok>QvR7rb1}0B6$Q|+4oL100z3p|9qVvuXyXIsO9@ntD;JKSOm>Ln2KL_y;HgC;yY+r*cKxa^ zu=fjLSPn;VHv9T;?aDZ)hh;hLndgilR>gBWf+I08Sgh=xIV>|Pg$uJ{gGSv;_*rLa z913DN{IdQk92Erw116^d72=#}queAxU*alUu&S=XVd+|KK|sQ_C(hhc%RN)F4ycCV za1BcU+EZl6ws86g4(@Ox5Ri%~aDvRk>G?lM{OV|c}-Z>%>gw&26hyQg*|)_qoxekb5K1p#BQWE7zL1YInC6}r`U zv*P?dCo<#DVKl<6&^-bf6%!079Uc5e#zbr&ks-Wj zrHU_*AS18`*PWjc5`lNq$mp^Eu6z zXlUV9awsT|=Ljb>QTru>byLm}Kmi_b5^nYkcLzh|>lcX)m!aOx0U9je#`i7% z9&6lx|KnfupeULkZrh{|4Qmy+?E2BOxIG=%0T>J#COAs$2XJ}dYpWoSZOV%RO9@c0 ze4?lV^mQ60J6{fpbZfYWSJn{K$Bt)3P*!B*6V=nVEe(Ku5?H&Ub{fI`06RQ3SDAE>rgC; z7+IhRmVy45N_lmZRGKCr37{9hg-mvL0s`3oB^_yJ?D7qot5{;LV)Nk>PwJ9wU`ZkX zg0UQfQbU5S1tR0`L)jO0=Ts}_Ve1F#QCCTt;EXJg3ZfCg(iWfFfN?n=MDBIyf&l+Z zT@FO~9sow*Al0rFGAt%BsdyFd{3y(TPu^H7?&{&-p2pP90XT4&S8olOcpwyDGcaYc zJu|y34?q}0?x-jr0`fG71AmhHAP;u5vs0!Ff+InXC_!UT!-#!?@E;kl55O=oN+-d< zk-xTF3E|-dr077zx};bg$Xp9I<_N;M<+iElP=jYax3a0Uz60?Optg-Q;JMn7r)Xbt z6(>*vd90D47W0(ZMHV71pymIF$6}rY;3Rf&Tuu+9h*PL$LWs4*$U7>dYjQa$2yCqE z5Qs1ez<&u)W_2r>onu?xfDmbP;i0Wf-+9n2?F{@=^-K^>R)Bo!XI=xJ5rVv1N=<67 z{N?AE+S1{JDHZ6pB6!(CUQ@v^fN=Fpx9=)$-4HLP>prctcoiJC*wD7|*N5US9?j+gm;uBg2cJTf>S|E`(WL z1N=EXNq9}tfpk2g*gm)!AW?fP+QLv*_?#@PIyhOpfb@6?;XD`+-G_QGl?x|(31Wo? z9#z;mRTfg}JM36c%5WGD{&UU=Q!*bm^K5@0Z%P1ZL_pw1=wOY^zLOsI*V&TPTs{z< zps=%e9D@#pf{juDm_%r+Vm2RPICMf?eT_??pka`i*2_S^6G94Q5S>Slr%ZQQ6!hp# z!*m#SJKUF;b8&*MA_rNX>e~duydM>>5(*UuT40c)Ym2}?T{KA8V)CWRYl_u*WeVMG z)cRN>MsK&okELCKqE6OHaTRN95zL*#;w%l}aD+DbEs8hqQ}Pd!og&f3U@L{3M+`g) z7lcLjr7F8M=caba?*`kXjetFFZWWbV0w2nd5t6>Y$-Q(8Equ>j&Fg<$D(e~08WhVY7MxG=`FU+E>2_%k~ zC-jZsUY+FBUTS7lC%49?0A$>(+NeqP0D%AZG$I2hG|FsG@>0!AN8kW<2?fiN7i|;B zQWy6=UIRJnlKfsKqp29rm5}7pmah^m^>KT)qlOe24G=sO^@q>Mq)63U6*El(+#RamvoJfc7nk)*16PX!RpMOBH#H zlE9`f!htq`+m@#Z%jCV2uBq+2QpjXgK}oIqHr%#3c!` z34&_d5#AmJUY5|+m$WSu);%Sup=1SrF}M(P%7#6$Sy~_xD-)rFo+=@Jv1Ox^qQsOk zB@K1Tc(6qYfzQ=UkIfa4tbz}^#V8231}7}V&l<%p;}i!dKx=MgiyWs=+6%>??l6$^ z)Spd{g3R%jD8)gSbb$jsG7tx$4PTZ_Xlw%svM(1>QfIRgX;%EPjkvop&Z^09{%5!@ zMTAg_^k*@?Ps`S%{S9s4!cTb=1X!^aeenL44ejdKC>q6)Vgd<_*xAh)Yc2@Vtk zf`$i=aO~tpf(hm`;nd+LIDueM$Y>ZCct_z3=)nFe+~5v8wLo&)4d@U!?mrJ&<3Jf6 z+x9XWSp=4qb`a_ zC_4w4jx5+n1v`n^wJFL*>}Cae!i*M4VV8e(4MQc!PST9z8ycDbJ|yZz3s8&DV8lQ( z9$nXqxWT(Gsg;93B3g>QP|6h;8e-01$>d2J2rSvX`!zs*hmWViq4^njlm*XExGXa` zJB|0($h*Z+@;sG=Dv?hXZg3c{nXuyjtN7%7FCgX&BYAOX*`4CPUd{#NQ|hRr&ao|3 zCdUP)7B_W>h;s2%QywV)$U(QxQSOEfuro^W$~1F4u;IGERQF*EMU__;k-^DcRGx;S z4~7lLL1_5##FRP}h}gnOk~@eaz-?p%!d6lEFX1z*$_T;a$h$p)#~!-i8_Zn8SwxS( ze^~9Ji)QaB>`e@Wz1uPQ9o*As7qJ%Db`?Q>>TQ961_cQP>g(1T^AJQ0M?TRh;fm35 z!ph0MBo-E{whTrwqu@$(U=2_MaKh3kG-G(j0-(?v`By?m>D4-cET8AMa2PHCzYbvx zJ0l3q7n}-%=QG9oy@PGt>z4~wQcOqeo^lvqAc360Qk3EflF$1n&Zk0DP<%`J(} zfWp27PGK91mr-Qg3T%CMYsaVX*V4;_tf!(u=FD`LGhfSnkdOHA0KOme7F&|jn3Pqc zFU{mwfN?xhr&TiuRx%WTMg?|bu2?h-c)L;MKiYx1jfCFakc?O+exl)9L?xb5vlGHK zeMep(Ysm*bfkq@y0jxqMh`}F0aDLf6wVBaw?Sh3hnd0$Khafc;&0?f|C3kkU1?K85j+PhJ~F(uz1V7A7BFAxB>*Y zXHoy6f#}UlSGq?y|88VGYcUolZXoEiXhji=ucDP)!~=M_ZP)}21)`o+7y!G&Rn4^S zv@8Ig#7Y+;Nn6urN$~(ZW*&)qlSSw@lM?2LuRgoqlD67iEV5NH$ex4%0v@+Bax{U1 zl_8VWZR&LkUyp6$6@;mfJcI62wU!ly>9tOhE# zP^$`&HHk@7$|+6rJ^ReEYmH+K;{vLv3YRp(cDzsre79E^&Ukn!3?#RSY3oA?sdek* zo-cy@d_&Mk5Tzp${jWo%NVMuI6rD>9yiArhCD4sD2?bqTJ1HRLcf<3@ZPOV3SYIAP zO#9?*05ytlsQSDobuQ0>_TJ17jAc0wC0wHx70=fShCuZ~ECuOlACY5PY}`MhD%vnp zODUA*mZtK!tQH14j13-_dU9y$JQY)GEwh9#F@L;%&>U`_V|%C@dz885DkFA%bw<|G zR?xb&EEo&=9{Cz+Yy}!leLV-B?Rkq_EQ~0hzi9X}x08e&VHLG7`B~$JRWTJ)iji2} zO_bGe?h3JdIZ=<+7A_(~@4!BXEg+1T>}CY9nl&|L9m#gS|}*7 z;t3s0ASVY950t}3zz5tW=5gz3&?KVPV1E>G@ibI2bcrD(J_CRkc96)_Gl_sF-6t}3 zyiwZ44l6SioI03Eo5zWepRoqS^2)!5w^er;mq5i z;f1`s1_B7yMUS=E(JqEWG^G|m1~{5|7VAooMtbCO4RiTtu=S%1LkAE7)EBYn;}pAU zUYvaSq8)I=qvr?zHvudenJBXuZEhJ&1Nfvl$7zDtQtuN7iZLFnKeSrqtc4J$)Dh+u z0D(7}{F=1OSt}Mn>848sjz#NvnS1KlCE8BQF%~}H?#_o_!j6P^^atX80Wu-z4rJB` zJmXPo>IVX#z|14EDUJT1pq1Vk5rCXeFh~WI-fuV3g@vGM#10r4x)Z6bkazq~K0{IR z>A3VWR6SLj7mytn0qyuGJyV<~bLRESG^Sof?0z+32_NXkr!fMR^l3gD z80x?HEb}{B)vkzPI#u*ZW2_7r2%QGmtUl~qUI4F#+hXV!V6#FQR@bURPH1~)F+~f` zQODi^T>39#+|H>eIL))*MT)-@-lqZGOe1=Wi^ce$kq=J|S%qaOAsCTd<#-HHLF&5( ztK?MoO4Pn>=qQ>RRPypB$L?FS1w-NMG?vKuGt6V(wp_BeihYo%^mXh(z>1=ezcu;zM zD6X`#e4CBZnkfRyk=}S{7ilD=P?50|B0~@UP_99Uh+f9E73x2`%G& zeNwf>0${j`dysPdNpO-3t!ZWEa{_||hao1`q0t{vF*ybm@u+c8k`*LD7s86V7DPYb z5M&h5P^zrua&{un0%8(-hV*cblJiLpyYZ0yTPp?!Yf=Iju#})CauXsut|AAL zbntABb$NSc!BGW0V3xfg<-!$kf)p#pKOMUnWrLy!5LOGl*fqSVS!h$$2AT27D*DR= z0TETkNWJS;ozG!o2!@RMDS-@y#kwC;{YijV98tIG=ZT`BW{i6l0VYzodILvOW&%4~ z^h+P>l&lx$rMk~zeg=U9pNR=7EYu7I0xf(#{E$m<6xZZLv=&Y-l z!EIs#%;a``+S4o1;cRVC4r!eUT%}G+GO7txl}(8qyr?+bxludqq92H|<%V@y;#PTL zTipo~N&_$>StS7%w3-28;_273Ni`Qf ztAbKB&zz#phEV|nAVT#sbbyU%*i+vxk+3)F2xTcNSbK?M#3}5?Olteh5(*C+>6GN^ zd^FM9rmN5z*Lv)}V8X;(;Fy(HNoXiJ<5#@}z;8cOaSBj`uJn|_jg5#b9~J!E6`K33 zpgf2&Baod3jk$fL_`*`s#>WdG@oW)TNc0Rd1a>DRMjkR1Y!L(CM|5h;Lr&3;-1?r^ zn9+&D5J_MMU?I8(n**lcK)>xT2%!V05Am~{*UIpZ;01b~kp(m0+T_};5di6F27G@4 zV6WXX#Ww!!BLYy25jh6$4JzAVM`PXCnYE;}9oHd{vXmr`??6~;Aran>IT{)8QNdV8 zoWW-mfVP1iYcho!3$96yg$s)DY2`M{fNdWHDU{NKyNO6>gsoFy>yQLcfn=h~gw;$! zh%F!vGlVucA#2ppHAEqxL>5EI^U2Xg6!?j_8!%okqVE&RMLE`B%o5oU-w71aGIS>0 zBWfVFSulZg0H3Df^Tx;wBE1g{*0V@px1`87yT;=zqaW za6@paj2wv9Zg>#2Qhpd9CxIr+e|#t!LD*JJIdec*odbrNuTR!2jhXTTpo8B~WtYw* zlav8EFW}mG>*sh-(6qzTke`A9&9RTWekK(X^=PkCcSnReEs1M8DbO4Q^wL7&R4ZnVS$!aDL#*&p`4N4wWwIYyOFOAy+@ClhIG5fmW zxU+FlDJQ3L=5Fx{VSXdW_?In&zz}TL_k*uUlc%COI0M&j@5+cFu0vtJd%!eIMDZML zii&quK5}e*QHi`DsQ5#4nxK^XsI)CV49wumTkG_9uGq4(C-){d5O;xzjK>;s)-m#x?2z&`JU$)U+W}IorIP zK!`d7c!cjIV+*B;bi4SUz%BlNF|oHT7(`{#^+LTBgTEsW&l=LiK7sq67t{}H2Zp2K z>l@?zOg={8rRvIL&G!^eEO@EV840`5-k+gHc}ELkh10eu0FD7$0OvBU! zGWwPa!7}6rNg_S}{qT!qzZWdmO3WaFg1NcWh&`57XW(!mAmdUXReZ3Lbdz1=`$z7| z&gIaZJ56vnH!%km5B059U(i9sI!}R@(obsj87DU$rd8A8S%-2E0{_1{R2!7`D?BT# z<~|??t)gqF&^esPrU{}MFe-hMdb^_;=PM}3343@BRFAZGPM>I{iQV5Vz^WfJQK}l+ z2q60)08Ri%1gdOtn8W3h1a60}pBq5VfZ|xet98Iga3}H9R$)>2X%#v!{E4D)6}7Ax z4I3tg>vs~yC8(Pw2?%|O82+gAf`Hx~dR!*R@9yg0SguEVw?dMZw^&}$HCPy;H|JooZ8~dpuK4D5gcMv)Z{2V z+9sMy?p*I9Ix*niNaN49x}?z)Eyyk-w{{T9hmq2>}{1E_2aeNlVwc+q^ws6Vn~NG+$rR#6LJ zyI`Nk0RiVw?z&xU9mHS37^QNi7!Si9Fwl5Ff^P=L^w=L`Z;3yD8uk}@4emlx==^8U zU^1#h&C?J^BC~iH;ZR~+Wa&*}a|PA9|JDa3pRcXgZ|tbUQKI}yhd4F4WLx)?&oC;F z9OS_|x7$nwfs4bg2^ym0ZjiqBGU!k@hsn z;x-FYEKpEx7)^wt`(uCcfF$8fAMx2Af&8dQLPxK(wz1f*CnUU#? z>?SS(UF6u*5zC#Csx3~MGaKn9^-{4EW3iTLGA`ID*Eyt-)V7&kp8XS?(PY{+QN4Xq28VZE5z@3f^F%u?b zC>FoP0_kb#@9KmPW17I)%|9UEGSM^wmrYtAe7gQEcaHI>dMOdfN6qFndlhIjBwtMeiN4knv zV;D)M0OONEpxP29!IPhOW+Lv>zpVnx;9=zF^S)W3zouUy65pn5|2Qj%koB` z4KeJz6dNsYlSrYy78908?=AO5g$nSO6Wy8NG3-E z4;qI*tI6@|p<7ey*Gi2V4KmfZQ5@`6Gva0Zofi###CC-d{20my$>2sYqu&=#52Gs* zzG1F%wr467V1@2fL`l-^DT7XdAVRPNp0 zyO(CY7?^|&bAOz!^u zaQe~KtbXGhXFJ6%p9%D~k4bNI640?YgIqM8oFNlx>OnDv@~Dvn*dhm43v5Yca5n6M zi3p=~vO>9f4XWW$)Jii*$QOf9D^YGz9?})v;`UX*lV17^H#9s$_=QsXo^Z^387o#- zaX6-9#4lw&f-g;k*8|GxkHB0t?sTW=v#9h~Qeah?&32f{HfaPn`lWOxCE5;X$s{sU41RL|BCadwtZb{X9eo;|BsV$(J9c_vPu+= zg?8N|3P7Y7&w?gk*=YsIw3~w96$toyNUU%%>w~$(Zot6l!OjT3g7d>Scp3q|5s92j zhrEf?LWJ(@UF7f6G00d8FQsFqmp>iIstIS!$xS+tKbERNhDt7)nxgu+_#IY*)uSbE zffWsP#}5)59VfdDuh8$suw}a( z+6IL*U|(st16I!$1OS-8MC@;pFia1mUw}s!u&}Pu(mn)6z>v*q@{QlHKsp}5#uu;- z2Tj)#o7XN5%mc-k9p}PL?w}toG@x;0{oqORA0Pf3`5T}Q;f(6iB~Ae@32N|Sg7{H5 zVcHN?crXoMVTRE6iiEW_6z;`c9`4uUfVKeKbP2`y2|Ae%H0!Xb zbBoDNl2r?LmDov*jer}hPpMcE@UT3zx$)s0nl+U>dQ~lGN&hJy0W!uJ0G&4={qP3T z>NyRS9Bd^zfNcjvJRXXz9Kh;PHE`KwNEU@8&_aY?frum5b_&dE1j?I2dr&4JF3O%` zK|FA3*3{6WkH`FlUY9D~#mAaBrS}uH!gh(5Ff~|u=;Z6l6k#Un{GUKCl%t)}xx`7j zAFPu^`YY+lBblO-J{s$OVhm`ZwP`q6y(S-fkZ?2}9%dw2Osl?(hUh#=oT|+{EYNL6 z%u4XQzVo`%Yz2ma%N{Qm?9@PNunSp83qbQ#<}Vkx69uE*W#_AE%Sd$qwwJp=+lZ8#mQ%n z)scOKl)i8aRjgAvL_TSx1x9zW;EE;7P34%hhB)2NY0 zRb5$?gll}Yx_i>^y;n+>4!S@bXidE=??VHlZjAQU-i`Mbfe+P_0plUTssxP#6Qi*@ zv5oj=iFh(0W5o5YH(|g^^vGe$AZ>PW3Jyv=q^@+dt3pgmfDDc(0`WLu z>dZwqqPr7?cqOJmXs_7QY}Lp2JB9z14U1JTOn1INaM)%I>06c zQ3$H#$yO#75=2oXilRL6ah+US2B%}z?A6EE)V&*r@@3G*o3nXZA zt*~yBvqF2(0?PN;K>B49fAn!68jp*H~g#z0T4uE%4NYq(}#s5i%N`B!fu?q@MxK zRY%8*uE=4xRaHak0*lzLc6r}VCW)AC_88jMYljBak-Md#KI zGse$`6$0>p!RZGc9w02fO%fPlAockXlno$5LXHEB2qD-h5%535k=<#BfR2f6=YdeE zdxCNB3*p*67;q9vo9pT1(5yPIOJ1&g^~%>2E#Bf(N*+zCUTZ7H>;@ymgn+%=F_dqy z$2!dT*5Q=1W}Dp>z3VKDBvC)wX8`Y_L4d zvfQQ54|PV875!#rLuO^pJL+BiE3|9aoMi+k2>8$C{PHg3NPk+y^|{B72SMC88vs5A z(SMDN<>5rwyVytz))B6dv3>QhrsLD3)v7t=Wq~ctn9Yo+DYm*9L{V`@&0(?CiGbO! zBVI5>O?X{%akETH7P01u7-+Xcm=L9V%Lv}pp?n5~fbp#&`9j~}1(KD0J|qlwW`v?O zTA?Z744zv73`*cxU(6B=^s-^8PZlAG=efZ^2Baww)tLk_=VHlsbPX#J`XYWuMbRI- z6<7$}0($fj4(B7Kpe`b9?Fg(Mgcbgb#uo~1sON(dX*JSHeljK26w8fUB{bY#6DT#I zA>8ch6aml(@?q+S^38}ui_Q2Y-k=gcra*~kMA&m}&r*fg30V$kQS86pF78=oDW6w2>_G;!Mn%lxnEJ5w}O{K4L0l$W#k z@W-;U`5QIdmFU9yo;(_O$iHm+EN(}tYAA`chy)w4=LiRmj{t3Y=UVmVn5ecZuHUZR z(QYPATjqH;rTg2&r%4t?|0&wIW!7OLf2* z2+lvjHo^yxKxN4_b3Gu)a0Zvao1`@vUTBT#vAEwxtvT7C3Xd{`4hj3iL{f#O&1I#S=+tZQvB4*Dk2sWLdvl ze?zE23*Jovta=p}k~yVE-(rFou_z=3Z&T<&Gw6yrdb6rop9_Y_ifAc0qFFLNPIX^s zzK6QPSA*6hl7MSMwkGgB5D)jL2f9<%tuTtrMK0c0V6Ick+cUk7h)h=Hrr)oH7fp!b4+=F1U5wvHv_bHuAruAc8087B%>W%5$>jy zB04SB7-NUcEs{M%?tR?iNgyEgJBCAHgDhWBR7X|Ps6x)Oyp~_|4zUs~>y8uxmn`jW zQQ()59#<$i25CYKZ$QYB$a?88nxaG;%|ko5WnH9i;EiB}TJCxvAZ1>ZgBMUzc9>d> z7xx^4r!s-|9eCi-EFm{aY$@2-l^nWZ!+2riKKd?NNO&oR_>4i^gg})erUTQ3XA!L1 zx`FU+x=Vw|qqYmyNC4<)U7DIj=TviUTD#swo>p+cAs8xEKT=Z4q_kj6-eC>#~c zE`o!bMbcyNUHQ#X6N3HE3}-QAl`m#NEQ%T)O}6hfi;qUtqu5?{M$R4gQ9p20m@T|> z=_#)fQ|i`ZOpJcej}7khhf63Iw%s_;e-d3EwedM4QI3%;qKtCQPU-a&f{YFUgA3=@ zVF+qrPn-4uiL?PBdi{~+-*g8309y*8K9tCK%SN|#G8@<3ew?%ngrg$44>j?W2rYH? z*&-pPS}{;F88Jl7u-?;BK@mHN1kg(eKKYIS(fP6xs6Zs zt>n%jQVxo5x6C+dTt$1(ai}PBqa}x8pQzWw2~xWQN^p^;EZa()JHNQ)myoNgx;}JV?+HmXNTF8OPb$h z=p@|Xwf+WzZ(6CQyHGdkIvGnM0x8g)zVax%F~rCwQQnox%&00xj*eY2Eg)2oq2y6l z3&sd~Py$q622L@7jgqK`V`48vB1F&uU>lRd*Z~k{&x1m43cjxJm8&<|Ch~pU( zb%#iX1qo>dr*#nY^~S+VOv_OMoIQQ-4f`5)d0h=r=``1@XUK*f?^bbG6ADb2ixZi` z#M(d6m_tg1s?dm2L<62XqA>@8S|Evp)-3e@unmANCb2{I8&tY}^&DHaDtWKLMpGat0-8|G874$Jm?y;Qhpa6cI29cG~>rVtbJV;HX| zqv9(hnGSe}o*n#r4wPkJ87ALA^laC5uUa*baKnoIdUtS9xp-+<0Y zAVm%09`ODKzzx7naQUVgP&cD9 z;>ThfL|NoZZ$TP#YLN&a;<28}eeNzMfNuC2JX`}s|K*Zmyab<}%3g9amxGILJ=M?n zLXvh$nGTKvO)-V>F(VL}ksy5;6Ph)d@JYbkIipvCU@C&t z2Z%~76al!bo;%4m5=XMBP);0JH*T~#s)a%Tfhe8XLy{5)Lo5?lcW6Yh1T4yCH+Z@+ z<0m%OeOj@I(*vvanegagR0$CggRKga5=M5JP6JI3JI;ZT^TD~U&ae(03ryg++C~UF zo6M}XArGlfE~;r<(2l7$(_OC|!A+{*^1VPX^ z>Ug^umk0FH{KSH3L$bxh|N8NI;q+Q)rlck}gtCZB#H9`N5EgZAx{)25*8Q&_)eirbzz(LcujA znobP0H?g6G(Llbz^sqWq!q9{%YhikGb?B)vH#8E(^$uWA36e4s3NVT-?}@{a|I|lp zu*zH^g@j`FKLZO)zMm50TqTrQ5%^Gp1Y4YUFT(iFonfqyZRP0gzOY4HaYL zDDVZ@#KJUyKR|sr|1S}3e<8w!hKM^rn}kD?GI3Dxm?Du@NfLr(1^KAhhb=z8ZU>uM zn;bmY7w`o@rZE3yrFZ!dVNxWTBmv11K^=D^LP~JH4-jjUOo_yC8Hw9?q!CcGEOdIN zwTw?8YxUy~bFR%q5KflwW5;+6+Dch%NMtIa7)7c!gh1z7eS=R0cr~OW ztfp4lfv1YiOK376CCb16?NxY!z6$0nOwSM7)6Cj5#4u@4j2!wu?mBxDH5BVoFfvVkL99avWnSij@Q3S zVQcc|wUSO1ej+~|o&khD6esIK$wO>Sh`oAAc*3b(C ziDY0e?s$!cWJ9^wcRL&Nyg}JbrW>=B|Cb7)SWRGTM-~i)zg6xjO28~d1 zIS*I%RVd%qW0RSSAoFS!9=H!2P|pTWqQIC7PcEZ6gm^^;IS?T*pjhxRIglnG1*NtW zltd*)@YygF#OU;iv1gG$uLveDqEfuB21EQA)0mx9B0dYnwpuLMige+6cb+uVfRVhz zAM((^NQR-c2?@YcAJMvo#6rZ6h^6}*&`%(heDHLWvsvv_@T2HY3HGn1bgAuhS!eVM zB9iaosPk%T7AsAAIn8WCjL_H^Z_plaHbjKpiuM{#9&6L)e#v-nac^WEV4!8t*g0No z!#NwBT6-OFd%=V_Ra)Hq_HeBurVf+(pD$QWk*=dbdw=dr1J~$;Doku9nUcSF+6v!l z3v3rtNLQ}}wZ}uMyeXnTO8v^i!z-{UJtPLPj~O|kUDEA*xEh@fjUZ= z%<+p{fs1ohqJA~s2~K1-=GWJU^OQNt+s1k5=4nBG6*c(0O29KJnv{qYHUYcU??iHCrJq(tDb^F631615`rF46tdxH2^Ii7Nq5ff(qZY0 z%OjMe@OYG!`;mM$5O@$;5Vc!vG z1WC$j6wH}+Ne-=1bHb$IvyIKQkTw3Q+5|lcN4}mPg6AV4gZW4F47ubOr_Z#wDb&%}Z#4&YQV499-3?#lOq7^oay%*7E!hx)Ok#0$inTwayq}<1NQU z20D>C9a&)ht}JW_;Mpchmfe}jNF&h7xPpzdd^LfbxcXiXQm(E(7JIR4bOo(M{YI32}J> zLb3xa0sBKnQ32vqIF86kK>(NHv6^c?zd`Pg-4oxUgV2CB-43Wk%DL9ZLVFAl<(x>c zFG%vbObmHlr$XP3| zQm*;qq$j(DLNvhUm{98+BgM4HEGkQcvU{O4rU{2Und+DrJPd;saOTc8;?p{ znzvX+_XH)NUA;y&Jh1H;D7;ld)3nR?0x9Z488GpTQ__!FgMBYagmjmD>W&m$1Wreu zTpluV0~E+v2T)ERfews*ko7)dM)5m$$E#}dG^kF}0BQQ*Lwuo6s zx{*B<5yV2jE*aW|Vlgr5!ke3&`VnX}j*g=%2F|~M^R9~p?hPhLb4;S5(x`Ld@7^_HE5A_(ChLLH7FC#PPq++Z!$>`I?{qzB$!&L|3(}j zb)f^KCT7>OJ`KBZ&|HcOun8O+d`Xm$-R;spoUiw{-(GyS=|C7K9jR!NJy_J+5|L^` zCSsS?BTN|!S@|%28W0}=unXc0!^qLI1~Glf=z#%)Oz-?$N&2YI_evAx@(Las{~O^> zzDM4BANv)Lk0sPL2;hL~FOC1W?NC-hcjBTI#No&AsWw_f$P5~PvJdC~S<^vs0mV=EvcmO#zbASNL z7A)$hE#vyp{JTd}Me29r#EX_-Uvw?rFPHe|3L|^`Oy&dC5b~Q2|Y%8u=@G{)K?ne0{l}WFay-=7 zwFwQ@Ey3Xg;!tpHU|#Jz z;>w$jD>re1n%F}JcJ$B~qAU#0VX4>)w1Cdw6asK^a^l>>eQcn(Fh|ND(STmzdTVq5 z`eK-s_IURUe;jpAU)PO>APra|f6jBC`}V7*RvU(U_xNC8aF%IvHc#KfO7q1YJ~51! zdoBxN8p>Ya$PKuCe29Cuhvb_Aren-69Fbx%aDm3lXiE|_KY?O%KiMZssROC#rp$8S zf(jcIeXZM_s#r#~g{=xZY zy~E1rYGf^ysvU{Iac`9%0UZ}@D#I`CX)ILt1^Pgb_A;9DTl)HK=D0NvCcBrHi5r^h zU)_~#uj*Om@p_4+XhuEl?uCc!`^t7@!R_|CWnZ1d^fB@*yI>d7IMy-m3+t>)C^vfe zZTe2m8XM^dPMr(2C82JZ+6~lMUpu^`fR3~ph1ZjUK} zN^-VXQv?!`D7EomKnyH{Z%y9G`SFVi$qo!)ojo{I2KjNlL7B#WDB-4<uOuF zlQy=NPr8bAJjRBzlP%S^NFx(B9_j_Qo2@tWZh(viKQFI8yfXf!aCkW;cj);z>GA?; zpF?_!W>1wM<`Q%PlXd1>o77tf3DymhY|G~xG!##UiOEpp`%pnaSuUDw^Lh zl4P{>6B%dCmYKh0UQIc4M2eOW8LqWytMI~$jO4S1oXF1f+0iM=hS&C%6iL(Rt5X`}_S!W5KMr4=;vVfzX z_EpiA_gPZfR)VvIf=kD&8eL&&y356osAajBe-{r8d%9W?&GZIVlFHTj8P_9K<6(v- z2jO6576M>wJJDOM=+)hfEieLY5k4ssk$IN?3Dh6|Z9YySArT`m589y%LodJt6Xwp; zBxOOpZdMjf;ex31QI4@D>UIa6TcRnzt$~AyLdj6TC}3NIOmtGf^z?>i0wGV(#YI9b ziqKSKMC!jPrk{T7;&>qg&BG@SPpOI%APE8-&~PE4W+hl6!j(lig`#t;3}v$q3DTCr z3nhgi2J8R@C_d)SilU8W^aSt7Bm;dJ81uSXFc9X5!Au~8tBpgUK-=JgK;XGU#obuO z=m&Y5Ov5MDT8*%f7)Wp!pHPVtNkyYcLafil$4E)J++X37qJZ9XduK*}kqUE9kA@4& zf(PZq9gYVb6)wC+kaTJ6K zUx7eF2*417AL^`y{2S(C-kA0i@skM{Mvt32%BTID0<3m7mKWehonM}=Kvo4kV(>%* zI5cL>eZ1T%@8keoa3v7cR$$=Jos@%ctG5be%nDZ|f@L(^zDk_`Dm$3}>48z$}sf@!Y{e838J<96_>r>9}zK&U~ydhJSW zQ{cK#5P(3chIgAEAk$wbHUnphOrIKGI7z!Xmf(;8cw&4~gC%hy#(So7Nf)!*VPVl!MUXXFcAy9%&Yj^Xw8NuO z?Pcl2mBE*v9esvU)45xzJW3wn3D}hn_Vjh3bm|5HYCOlL;ENi=(uxjHigOf!2NwYk z9W2EN6{5uiVSGe!XSVSsC4d1OZ!9B*LElh=zdFO$X0q~2+Wn(w=Y{S9i6B#1 z95gTk1gnUZWi^FLnF>>_jFi#FBJ>t>f5U3uYXM|w%|8WiZ2QwIt%=t1M}(g7TQ))^ z?#9YbM#v6mp&^@J_YBX*r}a}0DY6iO|2AZww?u4SIP$1FfEcEq;J0Tk`wRCn{G^d^%kEK^R0 zp?u^W8zCF)p~Ww-J#kj$?WnvCEJ~A99cGchEYg^QzqF~y4HD!6h?$ zTFqYOPQMUGD<3{B=yq`vWZ+bM!tLUwgX8h@Jm4I0K*8$2cmO}xzIcQA z#_S)lkhttoKBwUD>w2{-`Cto{yx%I$M{!;;Z`E82P)-t8DbX2o1EIj6xDeBipzyiW z;WwUH(aqsZ-7TS23$w*RV3k|rvA$&Zzo26GOc|OzV~(*Y;RAxzqJ)5850;FPFfJ^# zq?E*~)Q6t(1!P+WHAzN9DT`!v)@j%pV4Yk_48FL4I|^4kHl-II5+Vd88)`~HgyoQH z(}aJpiEf2-oh0Y69R?$eCrgT%Iyz%PdK6wRqe4ogE}>;2k`deSPzKAwz!(!}b(+z< z5+-1R<--&Z6}{L&YwRBiJn&JXqk<4nQk5kGX|1H-e#muG9V%*J#NueqTewOAEFLaG zC~4l+82^q6yM^SS9%-fp=%L(}*n}3+!30#oxbWGKC68>Qtx>vZH%)Up^MV#>!=1%A zx8MP;D_~X12EVKFU^y$`F^F9$7C_t8$cikE8~dHTYE ziwGgpL46#PD)w2E;pP;CYVvZJt4bquJE);5f;MhThy&8JZNg9!Y72@64{3L-lnGL> z-=#RW98AF-B}80p5}6a%CZ9H30y zqUnvZQL^FhU*w2Zc z!+XIF#s-$Fy^;F4_XA#dNu0HNmxYzoZBRn-V=NSm0W%plKr#o0zKyB7RCv_(#Lnl`;(7+BfJ1T2WWIX=XKXh>ERoSVsc-0ooI1i#gD$i1; z-L#}-CPt~F26f*lIZ}A^NO^|Pli{cyW7Yzl59vFIt4Cyd4#1Wn+cjW5D6PPHzH7@y zO?o@X@ov~t2vXL?O2pklCQ(zJd7{KPfkuwgPxaKjfMDw0go)bT&aEf)LiI-WqVMSu zqRv3#lfj`^KrAyOYWk;S@JNpa=JmlUL@0js=S{LmP%Gdbe;n>p8P)@r%0L^CHBcZI zRQd<7d+@S&%=Jy~oXTOS(7e^hG%a9Y(mXm85S@kRWTe4{R3Y6i8z~q1lcr{DF}hPT z=gf-B4i{m;tJr15ssIKB2dkWAxiykh5yuE3%t>Md2fhdiau@ZuUv`0ejEOvChZ}dc z2+LZ!&RTlALhPtZVFl};-7R7g0A&qYk5s`QsDe1IZnBuD7#wBT8>Ltp6Qs3lSnVVl z4hmAIk(V7=Ls6liVM9K`26;TNQ{utUOeo%9;g9lkuH2cT+PMrIOfdB&XPWFJFp4`J z%6OrAmhn_M!WS4aaACUqhSfWP(iht&X1Vw&=dh+;!s+BGhft*)f{{7K58t#+>;uk> zbju933ANm|I6Bhc(?f#nP6@EM9IoIho4?du{S>VzF!~s&C@}Q%Wbgy)6lmr~&yj!{ zR(l`-04%SJfGo;EV(*1gjl0_@O;hybqu^7DB}^GR01vu~j{h3~00000Q7w%4&Fn~u zfCDN4lxU&F2|2V9ij0ZMy+F!t=5t~ITN7`^fS56`2NKCWHATP-o%+AW8 z=9)EsY*-i65u+{&sL#*mP(_(^{HMqoP%N6skO;3s9(qaMdr6#q9C-%m`p_=N(3f_A zJTcz`+m=pe~s`i5yV)f9J6aau#0Eh^d(H7Ivuy#Mvg(w@tZ2 z3@0Kj%!x|2I|dglxUR?U3INTYo1Kjy0Rti|tIDgOQaFMPM18s*(u%Z#d+{mexZy{X z(Kyljwl&n6O;o>!O{P$_NP`xgsB|_C&V*eG*^o(qw2IOl-i+X+ zjadNaxV?c-a|D+S(VP&8Tx%ZR+M;De@x`@4X@FxMZV#b>^8V)D$E8FT*T>S{jwUXzzzl#P8=}M%M$um11E^<;oFD!V?xi9?J|csy4{5jLzwdR(pP84#5L2!u=H9dwXALh6lSl?&vcj zwrMsSDnJ16K~O=~*(v4d`BrlZ?YhfUhA;Jro0+efFww^y3!(3<-!6y@K#JVamG zp2#Jjp1ZY(eSH8{{cr-Qk4FU1u3tYw9;k+ps3d9zq?!e$j~vY8@YCX~(@s;Rzgh&(+Sa-WwDoMm>WH zQ3YcxU#}a9bYJCsy8;q&3MNiFhsc^4HL_6s{@E&MB>iJ&3uf$4K$j4zc2;b*R2oF%}TN~Sl&wm70>lb8>w@+Nrg_g%qx1n(Y=H(hH2+ zMN$O{zu|y~WzK0M z>RVadP^j#&$73h+r9wIps1V#B>{c^cwIyaIOd0=u&02!>M)oLx$8S_`0!dN6{3ofK z{jowgLOck#7g?Pu%Idcas5PKLE6$KcuHV|ajt$2s>F6VpL=jX zLsitFPW}`gv^dx9&6mK8@K9OIc{lEZ?ch$C`Xv2VlCY?u-CP;Sg5ozS&74Q@DB&zO zrFD!I!nD|vPuFXZEwY9Cb6g~=jhHuh0;isR1a^R)_WpncEg>itJYedE3|$M^9r2^c zkocwk8lvEWoTL;mQ*sR70|`=cnq59k{7k%lFh_$1=#w#iYVCiB94d>nL}V-O*=_Aj zfT6~|>~9GlM(-nI@L{mLjS0y1_3ZQPx;hb}z$gfasdqw%lC0cpz?r2mp9bdV25lyn z08WyjKUkl2#o0>+5HbgWq_f8?edSfs1$+4=TyO20Pnogb?G`wF;Gv$~c^1IdypbyL zJW_-;Nl?kURU<^A2kjmk$@v)ug@AZvO;aI>Ko99o4WTR*-70XXj&2?81TQw{ey(t% zX6AQjesti*FAA(2sYb$x0W+|gA4t_m-QwP4;Fg+*kEIXXh=%YEO%ADsn0QLPr7zuM zffE_Kfzr!Ill=s-)j}xc(ebep{^N9EVj6I(LTy#|Vm#n`w0R6fY&}h)1N;Y<`Gty} zrlJHUfW*#F?DdB{M7{`QwSXCaV)pj&kU&UTWC^OEwQwgOJ_Ag2zvY%Bm7+VQlsHD3 z6k6R5Err5e*Mlq!2r{HHP3v!phHG6!N2^iDjOW3o|HVzWKc zb@OGpli9873oxOcl!vmG4D1Ua-yMk&AyE*{2lx;%P5>5g1-z_}1l%VJ7!~8ak)tfb zey+vg2=Pds_cfehFv?_dkr4jT{ldIj9>xZ;i#Bi#!!V!*AjSXy5@}OfLXZ8JqA1*u zfcT*SEgUw5tH0jv(5(+}dW{E{s3HU4YHI*hyN$F(n6?Jm9zqpC0y!`I{2KxcGH2BOC)o*^q{T2>fOuhQd4354f^qaa9nz zp7D02#;jc37JEi<;jt_Wu;f?e6nF%p+8>ZP(K>pR0D=tiG+-GJ2`qf%4$@f8KTUvr z&Rw4i7QN?lm!?1-Jm?Mb0>Fr|;uk8>RPwYz%c;;3{}HKDeKA)GN4kguU8<5ddaZ}0 zSWIk5AXO;J^yQF6Z;JPHHr?(g;KU0BMo7t0XQT|jiQqiRWnYJYaRMGHFhq5Q(a^2! zw%i!0q2Of^qQ*Q7^9qV`Gw^2^hK%5pDTGWxH!>Rv8o&M!FDk|GyjC>+EOkNVDno0VZhZ^dQtTx-25OD%-cqfkTPQhNthIG|sFXBWx z@+&4Q=TuS*Ohn=8P#L<#KFCDw(w36QtUqYYp4ZbiDPUva$s0JQNiTlY>H%Bs* ztr1u%sS#EiOAC@JBsXoih5Z8)Cd2bhd5Lq*P_Q%Z7m<`(%AL8OI)y?ZWOq<=86a`E zUS&oUiJEZFvT385L>V75)+Jv+*k35i48&4I_zUTC;S4C@yp1%ji+*}AV{DRC z$yJNt`?AQ=HceuL*50{x4b=6x6*#v5Bdrn`v?jRHZqKnotW89~VBWmf6W^~20Xh+Z|uFnax zE#9*Nn`wkxz{T5Q|0HcQ3}4gP zBNhv8Ya*-u>^&U)Yje9QkHl%|RfWxCYXp)8(qVIj?cT%;XZkM@d(;Lfromu#5k?7` z$o~=B%j`V+FMKf*Z3U}H%u9r8aXj>m1Yfqg%^_YFx1jXIDhgT=QJq$7dF`4(ClU7p zIpI;8ZN)rd&a{~c!=zl=lU0nu8ebMJg$fWJ>zvlwGt(dXjVs0EMg`j8oEveuln5cRsH)_d2-vAO@);i5V23w(;*Od z=SGDEOSQD1w)#c$2A;0~pd3<5qtnM5%Lg6@wTY48= z^pJ=FTY!nMJ}Z(C2(Eu&Re)_FgKWH6v7q<_1|~eIDPapU@x(Io2&@4(z|q77CA_{v zXsoKEzAh6)e^ksEXtL^DTl^V30?N0KVDE@!S48e*;{uQ@eosrdsdYT%4?|-!;qKf( zU*54d*T;pg%9A?jTtSjQT(-ELHLOk*Y`&Pc0&Y46`e^#08Ho2x^k95qODD)p$f{JR z2HI0_Kz!Dj{g-ZftN?O5Rl{eDIH`$1S;aJ{X?|QqBkyFcAs{7fnu&yv>$nqu%-gox zK|pm;7a}0Y9u7M?@s~lQ6tFno>mbro`in0-`P3bx`<+c-9XNk5k}^G5nU#`Jo{IMX zx5zLu{4rX@NH;yxU5KN52C6%)F$JuUP|(7l){1AO{LMiw?P-?BubJRBelBQT62y{i zF-^f2Ye=&7e7HO!aaT1F>RU>FmRKl2=b%92ILDlaHTmSWpHIKKF5e+cA+?yGo2Qp1 zU=y5yX~Xme768~@=0~A0C45YFUm+{tHndmVJ+cxI(_usnkp@vJSBtu^oddVf7R5c| zL`TKgpd=k4{zcBOJEJ5sF(JgIYKwWaR<@MOh>{42fM$Yfag@wD0&55WBYI}&ikV5< z5Ss(V{L#D`x1kF1bbOh4K}RPkxC+vmy`3ZL<1}XVPQ`K}0gUygs0CRB!CPo);A7Ai zxkafSvDw3NwpM>A3kttb4;ob`@oi}+Gt4ZcvJxe_=AVX4IWpSBu#6juqVO_t!J0Vo z>WGh;zkJ$C&bZx=IsXJYuKGeH)7`ANGn;6!z?s-*g;?f<%3MNh-UODeRZTg;d$>(T zwFAqw9+HWeo_#Y;$bat^Nk-pZ3x3DZVY!E*f|p)4YlFKaw zMib}?uBoTe5sEW)4J58ITBSihv4kcHh3Qb_tIv4e1tK2kD~(KPh3DlW>Kb-PQ(_MR za#j8;C$p$f&aC7oS(5Rh&c<)A1LNwJ8?tb>w(1UN5s= z{%EQ$&#Lii^9?<&Y_7t4lH05-T?s`7ULz^FyrEzaf%*Zk3^*D!0yf1JvOL(?s=a89 z+?Anf0rFXu((pV@kl+1H+ELb#w8^+cnF&Oww+{$FZH%H^B1%RS4jS)C@FXi1M=1hr z8RQyen?k@xU7{^JAhea=B6_>A;EMVvb&OWrEK})|;X@W3i|^iu-00iC2s+}4ndd2W z!$+T(f)@xdq!J{YmzXL97YGanVhx1~kwWW1QYJ$I?ABR(UUdzc2(Kr>w;mjuOY<#P zca3lC)8n#y+wL!xrGg}cn5JA#lvPkGl$>w25 zIv7O32}^_`G%%fiXwRZ%Vuak*mM?Xi-Psl?A}A|PKYo2|WS1tgEAo2M(?M0GY9p}` z4{Uc`yQtCO!=;)`G}XrzcOmeHVF*EzErR;XCi>+Aq7*ALLm?`w~= zDMZwgAnybKEj=#!Lwzlv$-`fp&Jf^3AJ9ZVP*8rbe*Gm&OZ%etHzKMM@U_g1w14lrY^Akv*K$5NH$h zv5l0e$NZEZ-gLO3+?2c8!8DdMnpwb3dF)0#wd><4&1BedZ%AgIMXOKDq zsl}s2b)f&LvJTkfpq`(>SWF^x{E?dZvvKa z$b?nN%tLU-1Y`cuaRCP;Fr$}+S)T`$9J4vd;87H*etn>$-1S7vmx?|KAS%l!AP7yA zmg>TXU=EN7N=oBFXu=)=Ajs&vcoPiGT|z{zlEB1*0u!0F5o?C0loRUh=D2cYXo|6k z{sd*QTE-;Ek5z6`!VGl;&wxhM!32e_zNSL8HCY#5t4lv_&8tDoLIT6|fnb2xu|JDu z*`OY{Hes1i1lfOv3gBqu55^^e41*oG25~d0j&!QYJHvR2*!3-fApm2<%dRo}#ZG_} zUp@5>3pNw}tdiGO$*=G^@)#p)QeMSPoKH5JN3nq*F zAo)zxu6A+VepJOBnG0AH7t`3gn1<*I!mo#;)&Y3vHDJdUJ1+eL9Hy6kg(FqQ?-`H~af z7*Sz-5#>B>hRCcOo_2&8KqY`TBPh}`i`@~d^umw$B(Y(y+pYe^#l!O~pI2(Q zxObM;^xfvx>{)JhxXn1c6VttC>wVvB2{E|5f`|5E8}}x!a0M5yM7m2mlxdi@ToTR_ zJnMf;0#_w|^sp_k^1{5rdO+CmR}5UEYuo*CIBzwr0ba!(*c`>SZi9mXQ?_0v3aXbX zC3<8=nIE~lO9MuIeZf1dQcH;~cNPITA0?Q~i5DZBU?r7=SK>g01hV7z+~L2@8{h-L z_q^Z{Ldh6V#*R1j1c1p5SzZWrJZ~hXEtR}S>1!U8N5&?X*UyPX#iI_0_1q2)Bk#5cyF@*o4AT9`GgD~9nRr}6fs zfyFq76XXa2`6`8`L_kzxSdc%UxC(c4ZIvRv!IAX=i{!VAS*bQQK23myTMC1EL|-98 z(4?-7Wt^^B&(+$89;+bL|E(vOAf&DaknghHd?6d(G|3CPYv-x zppdt=U*K6Hh3yCu&Ir(;1{9kfWbka8p+}mBIg124{4-iU4WLCFatr`tTu7sw?hz{5 zP1oK`aCS=8#1~`Al;FG@D9B~}vW$d18q8cV`BKslsj)hfJB5#P8+4Edl1_$wFcOiU ziiG_sVLJzEOKRwQ-;xS#0~T9AXnjn;9#B(q?jq5XLR&+5W5E3Ytpu-5LbF?bZVa0!9f7IFVZ9?kAbHc7h}@ zUYxSYb5_HupjZEv=YR!0)Ps?=*kUpO zp8&wrQ%StF7XqEhRX>s|!#J}e=Qy54843VFoOq3QKcd z+5WO6zj;0@JAaw@R9EEdF4PYr!lN%J&5X$~?Ai{H8Hyd(?7N~{)qztp0Dt0Y`YXDN z_&glr%ApWym$0`^y4wMgjyIkpB<6+FutO$qO463YOpLr{tGkd(-b~?gwjXlRD`PDy zO?uEHqnb)|9ARfb9ObK_0@BxQl#>jEKzs{sihc8nq&TFTRX!}pHdMOW2B_m{`^wS> z#4{TM+NS;dgl+Ov$bf} z6c(sx2C@9CKfk%_0i7&nKoW(jfNC@0IV9c@AYGOLB2bM0YGt}-@04(d0 zuDqio()B7>9x;Ua%cR{n88qffDb+KLoOo~;UVu7xYftjW zkqw|TKMos<$nRd^Nf{O!z4REIC7=%FE^2Yxy2@-oyLA$mv3_d#X(0 zD-QzZW)SADA)%ow``(l`-jj_(Rj_FT2Lm%nd_>pR*!&!LTw^vy#T!@gN)=c1|sk_A%5vaYiB5C{7=QzInuP=@=0a96C0zzc{Cm+$w&Fw^a7p zWM(Y|7(_bj-ebFsJ3tRi!Aq5i<1Lr-FiXWDm!uU!@Kqruy|wzMAleh;3ox; z4jof8!ox6yiV~)_W!h%YU@$g}k_>Qt=X8Lw#Y#<22@ktx3`FnKFjbU&QEIcX#Ry#k ztg~qxvbBt{+Uct|HnUSCAsY7tAZy(Bo|TqWrqoUO1NnVfj|bx(4XJV}z%>vNR)Mfb z8mH)uFQ>t*V;F$D2?M6G`1K5FkWGWNpvTsVslW;GqXA+n2%{biDa#CIcLUT$^p71` z-2wK^h}i>^>;#_*5vK%?5?BjGnq!SZn07WL+{(Ib1F8vAcSl7Kw5WtkP03 zxY)gMpBasj(4g*4dn{NUWID)*u(Z1wTS8JQ-MhXIne7%rjX4a8HwT1eCS--oEKXM- zn3`@nFNO~kp25ta3Rzv*d7#Jdq%75rcCq+d#&ee%;tYJ)4=<6J6=enfYRlTxd1}R& zl^T4YiDZm)bK5U6jkL}u1^=Lm!w{~Nc`c0UYc5Vo4(J$ zw+TVd!6HgyCVcm)%k%$kMn)*RJa3Cs;kbym;1F`SNc)5eEJbEyH;q46*qWV1o4m5^ zApoHO6^yu6P(aEB6sFCVZpEo855|A&r6uYW^E$j=n7A7`M}Z)HB(H@=dH)8S4;*L$mRONipo0kB^ii9%-8qwLZhYB;kPh}=WBSz?MchZ{`ckv15fzGg+W3TuOotLCLrX`zmyigMu`G zeQqjm2cMwmBy2T6F_?kg95drSooO3eRr#$Zi7?}bKjiU?MVC}ShNTW^#$phb_-rMA zc0zPrM}J^2*j}IOs=PN{e1)=&i?vkk9>)db#|VS16Jssc{TK+&S;#QJ=s9KVY5TX~Rp0!dz^T0d$!LU3|9m72mc z$-sD%05KOy&MFtpr6wjgWKhfKfRC`A{I&#Qw1P1!7MoI&OyYv10X1!U+!^Fgf18^M zh~z*Lkiv_)OZm%W9;g{~IC$p;EdV^DSOwuO<`-PwoOUq_!6k{r19&aI_9b5eaw79u zC0)792_hy%_dwxmdBhcgO35YH z$KL)&G$ozySzvT@adNF&_cbv06{I z8F52)jmC&!gdG0_f?_-qarDJbkvJ1*xGB`m`55>CY*tG>hDh*r?VfStoaKES10xOA zG`-{j4=S}BZG^q=4laCVwxFCx@Kx2QHcp{HFHEySnhLZPV7-8N$lk@xVv6=UL=V5$ zjwhv6C#ea>Hn$BHN#6%LvMMBa1TMy-6F40s2pFvm!zu*Ty8+}F_xhS$CctVEiICAV z1VTfg#ZNixYW+G(h=s`zIXV->d#K3eEE!Z9XuBMspzI-0!-S=afTAse+)oA*Ik}aUxEISL-DK)-#Y-&^{|PG` zA;;Z92Db+Zgonl&E6Nokui=n6!3}g|3;(exWLXVGH6vLntFBR>%Yxwd?0(}VNf}+z zFTK=+$nMmL+KI*e2008=FXVoAmuEVlXOgxdKx|PuqDFC*qKoPhF{3o|l|T$GgT7Y+X38)B znDlk??Y&)aF6)ja2I=%1A+eFTk(x4d%s2xd1(h`bn0Ex3e4jjMND4p{-kjj82_Cv& zYdm|$styK7!Mb9^>P(jkw9)TVBlJd1*_!2~7HuyhnXDquh_PwSb|3*HHnB3ylFgNa zkZOkT!ew;oRWG9<@VH4rvK3rv0Y9plGUIV~7Fm&$e_a9?3y8M}>)GgTGXYCiD15^G z#0^G7$^spfFdZEzLf}7Jf_Q5IV`WH?^x~t_W<)~ zR>&ag-`oozywY0S%8K>7!1G` zp0O}G06hid4p^s+B_Tn)ll-dV)aC(h>}YSV;Jn`?bim9MyDTB7KWk7!N>YS49OXwA z7?h>hdAV67z*b<85;DXlhCnY+e!-8T);xKYw+S7ca+456JfDK|3jc(5`| zIV^WjEdfxa%NiVbFpYR0mXaW(En`v}4ocwdOZ=yDkZ=Y&Dr_oDeFvog};?r}&kDEIHbGK2yCs;Vfnp7vFB@F@d-uqtw5o7D1%C#n zAc=_Fw?%5HQdO@g40w?6&OuF=73Lv8@S1CkUEI||(KSK0mHS3_3NDh!-XE_qjP86W zemkt1RhRUnLqQNfpilNX7|LX3`M@vCSm3+lctcrim&wcChK~JHhgw|$fT#W!{w{GX zMR5?dIVQAJVY@;DTP!JI$$fZaxyl<7EGsXUtT?uV6dTH$ERh$N;IfV(Y^1kffG)Vb zc5b#R@T>1JBNUB>MA)uY%IpXbWRBntfFcEjCF_PXNirhtC1l4XfSABPLeaoS^!g(z zaeU7~C5aCuvl_5Ms;mEfa7|6HwN!jVsAGiL(of0N@rg7=lC@3}_9d`78n{;}!T7=t z=Zp;52QA0XmSH0^mDb4P1q3lZSF9YoC(4?JVEfG!{kMvvjPE2DY}((qx2`nIzB@!i z(GU&-Y}W$2I3u(EWv_H2SDwH?hUXT1B0oh+u)qk=Hu`cl^GNra@jay1jC|^BGPD7` zgbd)(77?Yexb4v}`r<()5-rclKAjW8`e1QPY+||H>-=sSVA|^(lkN(G5LW7(>6uL8wiVt;nda%o<`%spD3lP zes@4TG1f8D?Pn0_JCEI zNnO(cMwbn%PW%8SkI?q8C2JAcz}#v+B#?v zhK#tJ%;lc&8hO>jL8kVS2x?(s|h>C%`0x{GH02~fs))_rk#Mul~w>^OBaPG@&wpCxqiW% zN(tb;F$G-~2=~oQLMu)0giTLENYV6V4KGbfof*$UQYC7`%!KmYRM@mK3zr~Oveo$>_cqQ?fIyqVxRRqvz zADWdhOXw`psJFz9iWF4@7e0@>Z!b*)NF+fW+p-cWP7n@wOqsF^WR8#x?TQPnR7xl9 zjWe_ACMqF=In3{q1dq}Me{bx9b)S)QBzMQQ{qqiUd(K$5&A!Yj9q)IMpffD5E)Tx? zv27MWHB0Qpv=Q(^EYYdtDvN;=+My(nDj6?s83GNGR0-tN!r0KbL{R_G)=~s#2{JIjl!Y8s?FEiUHskee9s&Pobv-ASoZ=mMDz+F+oq`Z5@__sz9q52WgNgK{4g&$}OW>RwSJ#t%5pKcN z+gfAQO@$OxCiK<3#2l6_$r6f@?KzW{M0h^tdEAhzr3t8rbsddEU?RoA5MZ;jgD@Uon)zux&h z=i5(W*vx6MX9FzY!osLzF&5EI)u=;z`LqV@aGU~Fpf@X--WbM!*{n6R1pYwTtFf>R z)_=1@l-3w-(526|X|A^ajVBP+Hb;z+ue0Sz3Dh3DM;24{Xoe1VG=ogeL&9e;xQ|7F z7f0S~q6&_;6dC^voZisSW-X+2iTMc{DG8PTvCf{5M87NxuM~_S)uX|SE2ulVI+`JB z0EwVwW6C!qvi{+9Du(iZb*Ph(xLZi(`$+G21_SA3aE}?>i8MRqPB4%%Anibp>gaO^ zd(94}(na{`PB*2E>>Lsjy+;oLIpO5w2(?B?r@d!{+=Id{I%yGWu(&DDT)Fi$A?V8- z;oWL~hazDQC@s0p&h2z%p_{~YKGgtNjn@%9Qn9hMXzk7$L<3Q_?!B=k1&pJHPAw^k z12+a>iIlcIBUx&iEJDqOnB2^NnlGGO$@?CM&A!D?_tG%(khH$RE&4O zkc^Yed6gracsgX5**~l-N|ie2Q(X|y1?Br!jhv|2Esltn zQ%e!QvqAe-X+#GHLQK6npe7nKJjPL)97p?Z93oPH zqnocA&KHcJv-Wmr*GZbq#k!>}eP&B6#)v6}4YU!suf$ESbgq_;>lHm^(o3EDt{Lr> zCVM)a?J{sRU}^t_2E?GiX6Up+S|CnLyUKtSld&*&W7E2!x2jpRawTKBp&k{|A_(}1 zfh53{Ofs045R^0y@^so$1U}N7!F_?bwStfvAf}Bvm}cYeW8iXw2qe&Q;dbRz>|^fK zSG3|tPYvBpHKI*}dZsiydV(P^VM0+8i*D0e7+z_ZS&_R_C^WajISp1tRa!`oyp0^C z7eP&gQPWCmIwX#UoE9W@M4kh{yW^^21^i1Eekx@kXy#Z7a7Ab~pkn_<)ljl@xPgU2Wn+jSHTW7q1Pvb7{XYfF`gJ8D=rAsID z&@|#)1VumugE&GgSxV{zDNmwgUpu9IGqQbN75EX<~s!CNGezs5*Ip;;C_|z6sdQ zqCx?LciVLhSw!ZjE&c26QHq)0AAyCYA5*5`5;6v0Ly}mz1eYP1F{PtphEA*9de0+5 zMvf>X>ax!iEx+-_^;&VN^+cd{*%3qC`=c6=+O_y{^6kFk(H4$cTm`XA`!hMi_!M_0 zPf7>6(E}=euSAcP3fe{iw2Y#8q+v)vB0rhhdMLiAuoLFP$$EFh_s!#^y$CErrey$K zC(%-~I1?Mh(@3I9f~gU7hbL!EAea||@G5bjE_518MF)?B2akj-a5pYcXgCXz^#n+M z4!VL=kQMJ7qA&oQbQTu2hbBiEX&Qj&by&Wez~dNQ$lVx&xujx*^~_Zx5xCcDIfcmf zxsa$Gp2#7(i8W45qEwoohTvJD;IJduR0u2K9DlUb@V~2}6D=dWjC;;2| zi%2bCm+ll24hG1&i)3i*3!>f-9F(Q4$BbCbxgP+MknZ+ryWFF zr7ZDj#8^Rj9f*KJ*oqE$P-;B?pyKNVlXKbP`S|U3t;!G^29U*0v~kSza1A*8s#*aj{p^hY&wDasx|1sT()xhz{vxK5hh;r_DaGXRJA?!aM~U3TM9k_F#NI=|WrBh6#VNPnybrFQe> zsN&=mRnw%H8+QX@P0-&Qa*{LTr9Nl0gDFCP6qlSR^WZ`k{>pkM`5KvaDMy%t(C|)q z22tKJ@T;(K=p{pt8VlrkACEni4q)qs`&Ox>D+VR4jd_?{7P4tEU`L4G5Hm&~GUQzw zNzDA!i-W{pFX8Si1Zt}RF+5zAK(L7pS*ZwGq(HT*IJthPSquPhcK`wUF2-~c?-3)J za7ZQs@M5l6mnmV&Y#^o*2xcZoIeK0C36<(?Bi@y&<`KJ85kq*)y`8 z@MJgk-VIQkm#Z{91b8SoQ9bQ=G8~>EdiF2G6CJdChZzmRS*NPTIs4`H{V1Ymau3Grc)`5xG+Go0jZW=1WdW< zA!SRrK$0qYQ6?-aMo%QkRv{p<1N9-aVz&oTA0AN*D%cRbv{7JysR+J{96%XDY@?=LY%PT3 z6Q1!!vmO7A`lbX75-gC|f^zXB>OdYMKppww&i-f$6zC-(JSm~FB2(fppeu?%Q^q7i zB#UnIs4qx^Ww#zUlGp#&$nXKlFHObFk6Ab`d$Hy^!~ zfv#)RMqCW#uT?;5K<7`=q3?skq(DkwWF|r?E?Ub6uQ+pAPbYxb-AXfCtr`oLiw9+D zoqBUbl`5(#CIHK23mH7qUO-sRV*CF1Zzax}$^(5R=$p)!!(vV~6N1 zGC0KVMi3jROHK?zeT65BEhMWl6BzVB_q?9$Ejuy|TP*(VZID9rmx`oNRFn&kG}=uQ z05RN)L#riVRl!`1N6GZthY(MMBCMkb&4|5{YI`LbhUPzrX*4)iTS#N^2GK9W)?-%_ z*%(fW2*No5PY8A%;G^H(N8$6U20{pM@dAk(8bBz$#nH7G5*21kgtt_I4wWqPESQbV z2k?BHlnqpBG{r}Gs8g4}%=hV48C_P54d`q=I#Dx3dd&}OpqW)j`0w# z4@~E7sARsQDYu*N##tRzgKusJxyt7c;^^Yh+Xaj{0;omDaixHmpFmj1oVEs zj1UCpLh6B#U{{Gnp**3!2Pb(YK(;L{0%H<+M;dA*;uV8q4gz@uE|@`X zEuw{_h$c||v}dx&z~q~P-bOQvVS-5{3yKkUNcJ8Nd*TTLM|euoe`h9j-46^P*po8( zZQK+jRQxGVQr4|)bCHG%Yb}D-YPr&DSWhjojO||%aFbgG<957VVhAOJ{+6f95CxuA zxR%OQYHwzVtf1LLfrO)mP(Zz=O%GqvltE+z85V15{U8HNGLN~ZxngEfzKwatF8aMo zKkfB5Ag_g&kdq)&t$zc`fdOb8dE0P9MELa`XZS@jMmbpksA9{mIS6Jmm9ImDHK~b| zkuvq*XsMFr7^i|@^zjX%z!fe}wDH2~_d^1d5FlnFg$DbG3kIkfXKg5gcr%ZdQ2z=f zMm8V!bU6&qJh}1(PK&#(;T1GRso7aT%|d9fi)+hZ3=2?Hv~dUhmd<#9ka+6VWRLax3=fWA(#jmUG&+$kprEoaYqR+m&a7KxuUNeNZ&sxA)d}%H5{5D+TP@_l|ucG;Sq^Nk*Him$UK#O>d?Aux)5e|wLW|h6sG6SSc*2zayMu;#}G!YN)%pTTm?5NXJ2E+6HS%XQ=nYK}f3v)9p zMOLowxeUTd+%m>!ku!@m_fq3Bsq{sGGFph4yCU!u$pyN;?|adZY9eN=mBXY9@Qp0% z^Dq<@VuGskvRxtc@Uj~KVHg8P#@D)?A%}S_Y>wU(9McNZv9TI53Uf^@Vro#lij^Sl zbDoH&wsq8k6_m5sm{TL~o=!To1}PseDQc*Ia3HMQndtI)k>0y8CbDT6z1P)J8MITR zoyA;@Q`8P7|Ff#Zvw($>@InlkY(La$v1M3q!B?D%D znqN>~R!vOVER#TZZaO2SIa(zNvm!DqoV8p{ZmgI_DxNHGcNj$|yY0Y5?EoK-ujCHB z!V_+i(`Ll6=F@PrzGinZ*cv@tVw$7`EPq}36OgUi%NI>TWMqSt0RBsFn0DI4W^qOY z^)NdpaXOIF+D`0oN128VxyTWTQ4F&wTI%3g!M%}uXmUUb?-ymLt91(lm+pt`%xuSf z-SVE^3tP*p2isRTL!03SVESRRg22eH@q3R?i2mX*aX0vSE`@(Yh}qjQ38WB zYJ(7<^eG5?i{Mpy60)Pok)r^RV6PzYli~o%@xo-(YktTb`LHU)niHlOWk#IiZ2T>c^X2-5g5*Y@p1VzDj&MtO}}^I_IFz8Ua>$ zPa4_%ikB%GljwEZMXWC6ORRIpc+(-=m%X@L2IwAw zssKhXr?JyYJQ;3g1Y{Rc`r-hr@By)avF{nMTj%@O=(~2lTQWH9#d#I%A>ehr?Ya=; zW%4S{l6?UxX8ixqt4b5onV9T{Iq0vOB^GM2f$ROMCCa--X($8lnAMS4V5 zZJ%2BmWJ+Eh+bh7#2hRX?kQ&6bZxj(5|9_n_8hy1)MG@tDjxOf&Iw#X-KKs6oQ=^} zrfO;T1kUS_WdnFL$+0FA8z=OO51hc+gLBpq+ijvk28A#%H#m;+D%`*l2h!bZAy)d_ zd9?{4M-{T$jg&CFa+|}Y2#5Uljfo6QSRDS#>4_`EHJijhr1b;TDmNgTSK3}lGX?C(csv1*v$o%c-&uuv?%b67(qLzIg0L)Y_S*=-YC;_2m zVAKE$9lKnaN<&mvaEbnHzA~@j zz@Z&zQFE-$X7`GAg7F@DU<{H0!!%og@%pun<$ez>@cs$OlxUEc9q`Ah4inTaiHCH! z?I#`FmjN_Doa;kn%&9ua&+LKWg!U<6pv`gh2*Qh{^u3^Y0Op*(Cy7o>9`^MS{)GmpRw+N zI7q_>vK^3u`@sr+H4RkKKQd}I*5s*|X@F)6@CH*Z`5(!a$M?WPr?ty^eQY_LixvB< z@i;W)pz(u*!{i*m%>(`K zmeB%Q={=~-XP**=%fpS-6#h%<%sOnjAW||Rlbx?=2?DSxLq|$ViFH3p%-sx|w^|-C z4Gb`a`ZgHLsg0_$MxlEW9u#^mvwH9}ZJ`J(+c8l=!2)5ou|SbT`BhJpeO=B$O3}c= zFzGEbiSL9Rh3Ia@kTJcLcJ>Z1gsd6P#!xaAh&)#xP>^UIY!Z2oU4<)(lCTK-fw~zJ z;7Ef>$jcDf0wxJ!Gtke2C<%h_o0X#yHc5D*L#kI#CE&@8O5zf^N88Z!yT(sPq!0JW#MXO1PGX*Bq13_555e`k#1qs~{{316&NQiz7J)xS}E+c)Rm~|Lbcz=B1p~ zi(KSa;~J0xR5rhI@M8db9YF&44w4|M&i<} zMSx}U&p1a~C80EdlHGw2&<=n!MJ0HKeP)@EEFgB}Xh_rH7RWcv*{E9(F@mgoxuvhV+CW z08H{7Hs6ge*vu1AlU5|MOn^e1e9+pT zB5Rku(D&n5zetGPF&n zrh9CZO6i<-e09J7iNYe{eUN@vGR#5PmNgjLl0-`qB;M(wZ=iuS@!k-?qJV*jspO)2 z_@Z}#Uv9Ja);jj5I~ZE(*M#N;QIjeXZnkLqNT)YA%0l4VtR!g*m?Wl2dV+>mfszL% zfF88TMi7(jFYZdx5;?UYoAFey2}KT*K~ZW)&4_z7u*V-y^U7G)h^ zLa))n3Z)vb7)&q+2-x<`V7``26RI>LW2?0aANb}6Bc*PTC41p?PDK%+x_~iKd8*hb z&+3QbDjwL^jyo*&iD%20IsT~3As@%=D1bdVf*JIZIDGD6=mi2!{yu%A_cY{+aQuM- zMHC1DHibUOaV3yD%q8{K{|G_M8NvvY;4$o0pGObd5u}BDjU7!DhFIPi_=JWDiwgSO zJHWWHk(cPrL3GlMrt(hVTghuhwnPl3B8M!H)4qLVfV~y_M)IhefLIL3(0B`^QCQJI zMyv4Zx^vGYIT#+REnN$$vyB8BI0a~c-7-l0emw{mO=WE_=l3?EDL%*6ByZtv!s4QO zuOZ}#M3S^r$tSTRZjb}HTIeUuiRLv2=h1N9gyH9!WIkMw!Zo%>h@dAIR?P_ z`0yE!3M~k+Y-FnL(KY&tsrWX7W&DfMqB6{;AgEE@Yg0@0pJaI+o(lm#gFuQ%`V8P= z9j=M_8R(fdJSY@EgvvD*(Am4t z%|X7*Yv}_DC{rLAI)oapRs^H0?&h9irMNz{YN0YA2OzRJcuL9RA=ul} zikOhZV80mwkFoFC;k+iz3{V}Oy?F7qE9o9ZTxn8I#!HMmY_f51eU5_h86KfaP%0tF zI@Sw?=rj*)i6K+`+>L5L@jXdDo8(1Dn-z1Vr6&-DfERMJN6hHrE#Vbt?ogl3!0f#O zP835&B0Jp3UHJze!WI&7H^!y10nFQx{=50Bi!3I`b>CP{YC^+{QBwJ-1TAi^yga6l zm%=1XK6nt644{&!3i?3zx(lx4XM2dw+=Bk5z)`6qMX2%C-xl0SS*s(95tNju_{;M( zqr3Mwi0w$rq^y%At)OQgskBHM*{eORd8XnpsN%U8K(gj`xj?*&V!jVC^UUm?+R+$NkV)(5hKVkA_ zG3M4Z9DMrp(NrqRK8hglK?^XoJI%6St^fcDKy0RhO~%+J49bKelp#$KqM({0u^5SB zMSj@6L}f?s1n*qJTaY^F?mcm8RKT7RKOi6k0;H!!FODH#9R9BmOg!d5i)2LrJ2O^ve(f1?Ce)ULZz6 zQ#T$5h;S_o`?q%utJ(h9Sg>Lhc6*g2Tf;k!ksw*;5-kQ<7e**T>o_o(SjcpmXz{S% z7GjB9dPp(j-ca4dfuT07%HP8*41>;ixxg$H?vDmf76@n==nn zG)tk4MxC371SOYZHif!loyGdVEegmK`xwVKn zez{V~3`VYL#7JxMBfPIe0OV-c3wUYt%nDGbK4L~T!3efs zGroQd`qvowatF1x#hmd&50*^tHRkwZd6|A2-Yzf3zu|OiO;c{Mq_U*N!Mi1 z@Zz&!fFoF`oCKDnLJpjBc{$d!rm=OWP(dN2!z~2RxL5=T8}9c@>urSHZh^YBi(RWT zwP@ar{kZObGcf^|{D!linW&Cg_sWE5bx70s!$P_MK4Uw=liorG z0i7kP0+v`<397==qb~}V$*@Y);p`pvJYy9$Tv-kcRuWJ^QXM|20cR{5K7f+!h+0`3J?nk;b=U}lhbQT-u{^YexDclK3s;em12dkrRe(Yn&odAF6nKS`q5}q;-beHXOI%enx zH+fD<1CJaDVi|(5$nA+s3Jye~*#ShT&w%STQ<1E|YoFN}`Z}vRHch!69#b}grXZxX zP*^55FcM@>gqK)I4Jxt7B&d)I>lL$9NZc5RS`2mdy29G&mz)rVB*fdM=O?QWgB6jw zD})@f8LcRDM;uT?#azwwlmi&eYPw4f2YP@$uA$W24AVR%Ay3@J3|pE+CG*2)hO{h;gF%4V#QN;BWGZ%ZQx ztcwJmLJ7E+ZHs>22S#EBVx=~7mg-i`q$tVq?%=nhWlGdIq=0_GHSyONxO4^m{ZJT3@n_2i?Ec`EJI6RBPwd7$a0w6LbN56X58Zqg@ zDR)c#f|RB?>!BhK|gW%_Y0+K)LRJEw0Msvs57#s=FdIuQ2xgY|^S<|HGlBva6_Kr_0AT@P}1y<`S&SQaT@vv%x> zJu=csC8S+Qu8v$}QyW%H0Zs^(AJ#M6mPxQEfDWB>w{Bd<>Sq3fA|}v$XE?`b8v2u)mfOGQlw`$ z#of&y1|yw8GQzD{9$fv}!=aC^2-hrc041cdOrhg9&bkq?LLcpvD4G@4opC?l- zL#YN(U)KQrqs&}qA#u|pq(j0wKCtmI`h$jj3<}U%ai9vr=tz&DC{e)Fxv8XG36dni zYJ&xqli-_cSU_3gO#Ue62+h$<%onvk+QqXcj<8a;zOp(YoW@1kKH)HSTEo?kQxh?< z>voq21H8YD*3nN1k1}QdN6yl>Y!qf;tVLpOMK#b9w zoy%MYXw|VaPuR-$(D`0Rz#~A7%z#sL67`&Yr#YPAbnT=AsV4MNUo=?wCkgkADW=GEEs})Xox6*WR_T_#-Y!FxageQ zT0PFzBNU9aNC*p-0Iqf$JKl^Lc$#CDwcNa(uVGE;YrDI?Y6{ci4FpYZI-y(ia*`s- z5|JBKbEkfF-nF78$A>`kz?2(_{kv1Py=wu!AJD5mB-sWeOD#-+*lyxKGvwczkLy99Hks*kpJ_DcyAO6_fGL{Hf ztVmQ!Tp7GomhITioA6d!v{$u1uT-E>sBd*tmztxi`_rXzLBUKJmw_M#dGm!>iV__J zzKC#niWHjv0e1o)t6*IVlZy_xF>BEEF6?Pu1hZ(b{A;I)F{y%V&&Nhf5mw-q%0}Yv zOK?AE_Qb8o&R&wGuXEtd_1y1V;}>?64?p9KPgQztr-;BMwA1-Z5~oUOqG`sLAE?|tuA^n3 zOAfRUjd~(vLs8#a31l;aX#E`F?;jlmc64ZVl6P${f~DxDMy%8MfKBEiVRS$$FMM2Z zb4;|~+GVD+s#9rHpBx1-LW5JFEp*$4FDPn_ybhIgf}jG04S+7LTI__=2JJg!4x=1w zs}fUV0dhYf;j*q_~Yru3s=>FJ`Ge)u#VA3-EUG4I0 z==Rv*L}Fu)>$hMsd&bxi6)OR3$^ywTB?W3FLBs0Qw$eBjnrgTB1eIJx8~eqo2`Zoe zC^F+;B<5V)=AJ$aV``=pW#iHx(5Fizp|z}Jp`5SISCf)rY=;#;L^^rn2}P1ZWmcef zp#6S@RFU6*=2)x1-<4KX*4CHTE-;ap!V@T)R9}hN#?qi9oW79Q$w#GKd#13N&Zcl$ zDKPi@4iuSF`$4KC7b6PWCDoR->j(EbrXD>QMJ zhB5XF4oo=i5lH412u(6Ti@)czI8HmDi;-c;-nCa_9Y25n!Ig(g)aDmImaa=x7~q+Z rhmB<>2}j|R2=;6fv*Ztz6$g7z0F3wv71UvW1r>skf=^zPpI1ryYMn@i literal 0 HcmV?d00001 diff --git a/docs/Saml2/font/fontawesome-webfont.svg b/docs/Saml2/font/fontawesome-webfont.svg new file mode 100644 index 00000000..a9f84695 --- /dev/null +++ b/docs/Saml2/font/fontawesome-webfont.svg @@ -0,0 +1,504 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/docs/Saml2/font/fontawesome-webfont.ttf b/docs/Saml2/font/fontawesome-webfont.ttf new file mode 100644 index 0000000000000000000000000000000000000000..5cd6cff6d6f6cf438a882e366420dbcc5dddd3f1 GIT binary patch literal 141564 zcmd4434C1DbwB>@n|(CPn|(AINi&*Fn>F$*S}kcT?~-h6Z19RL8w|z^HeiEs2n>M` zFoZ3H5VDD+A<(ADdm~6m8d4=~NZNF0+VXcBlC;kLYe`Z&p=q(D=im3-H(D$Ull1rb z|2{u2Z{EA_zU7{K&beoQ0uuzmg^ga2R<7K%_J)>6wh96Zqcyy0`HGcdEzSt63&)Ww zHl{NVi6=U7yamUj*B;t^@)On(l? z_u>5B8+PA%1nrU_7=MXh^9={@xc-Sh8GIGTZwXBO_`bcnuQToIatWg0F`Vz%hX$u; zDdG6rIF9c-boBUd|HyS0j&Z%|(M{`Le2An=zU!fJpXazmc2*h-?VrIvGK3azwP$Dd#-== z-#6Zh^Mx~|Gq0WbmovXUqn>q~tvlOxw*Tz9vpdh;boQ>ZkDUGF*)N>^ z+S%96{>#~4|EF+)UXSkn{LI~ji|#I*k8?wQkP z&YTs_N@pWy+s_uxu0K0^_Q=`d*~iX~ot4i{oc-?E({%R>Ke=$-g=;Qsy|C%RvJ08h zRsZ^ne|`C1e)q%kKm5uY^-@@>k*cMj6p;LqPx4A0$t}4gy`+;wiAjRU))IVYXx zo#&iyJOA7HU(Vk-|I_)F^S935*nXrz3~&Gc(;o)hnVv94*g*g1{=rF_y8jpcn2bTQ zA!M;uzvIggO8?LPu-^zrSVFj4xJNk3Rtj$dlm9|^S@<>~ZdnoA8eJso zT5k+S1FhQI0e7Q#NL6d(ANX)=t&y~BYT2C&=Ek zTwRv!879}I<MXr_+& zye8&~X8c}bEZUIFb!4M1mb@n37%&tAjq#SL2UsDLOok?lv}J{<2U-j(12txIO(2Go zQ$jMA#6O)N9&e%d1DO~FykCp(tWXLFLW^8q9yinn%q?6i3EoQjEaC!wGb873nf26skSUf)3Tw= zf2gZj0elZg`x=yIPkR@oN|p& z^3aIvWg1GpEDxt;J;t>zEeoe)sVui-WJyv27}{WlMt21eQpq=9D7D@4uxmV=Y!33F zRX@877n#D)_$mv{iOO@4Z4G@}hoe57zCg3sf8+$59kuU%&lKEVxhb6n%?|$T2;`tH# zT~|o`@YP@n9-lg(4giaM;??St)w(+pmNo2KO-*X|8cV_-Qa`EMOm<(b?U%o_)%uJM z_7>Yyqv5vp+$cD}LQe)Z&V6uz=@JGVOH{G>uh2B_4SvWnYuE{P$7+^Qx4rVp!Y`D$ z=zUV^KdIZl^)2>U*3{4LQs1Y&A1Dv=P>&UTlRy(eOtTg|Qm~sXEwU>kr_yo^_}a+l z2>i9WJf5f)z`&xMMiXVF3G^5hfUsh>oNy^Fb9c8~?Un=GV66FEzky~lL%gNVKm-WB zDo7m>zhsP%?*phF-zs6;|t~<6jfBd0`bXRNVe?&M{MSR3WV{u|MX<KX25@y?GI(Ma<;5o`yrfLl9oS~m6w&}&t&A0v~u82 zaE>Te<`8g|OOf_M2K`);5@aoT3?n&v6Ym~pyV4e^3CN^@v$*FbF-uzN52nz z>!sUQm6A8d#D@(i!Zvt zAA0|tgGNsGZ-efO$q-)v-*v;#Qzy_`ImNfL`+DK`y~n75KldE*n;*|S@#l0?e#H2l z=kK29ts>uQJ+%GvMc$J(?{*8W6KZSIG)@f)B|CBRRze9m&Jk%z7HB2sAa)cqK1P!) z2eFlu2#}#YgSB4n$|y_uyw7Lj)$C%n&gS98{PQC@QOJ#qnkr%{{p2j38Kus5pS8!QBRF*@MQUK>n5?7Gh zGNtYUb?wgKszNvI7NWQcoC4A!t*9%BiG*D4lD;O=4e6uXCHuPNI%o)CPyHMXA?$;c z;^~$LUE@Nis+P_q+_I%xj<`y!t{Rul*BBO17<6DOy~Hc9TKj7m1XN;3Em&W%X-M`l z$dMN-6~p-jm5L8|?590;NYtlEik{iMRM*%)e5tCTMlQLK?lEs3+J$|y^U#*2NvObj z@f=uJpqK#^>j1@<40?|*+Oz=N+Wt@BM*7P%`~H1lBx0Z*`_zQp^9MkN!1!v%;>f-c{1b~`VuObwj+W*dBSWX| z*oW@8YTq5Fh9WmMw>Tn))USQ%<8;A^*I1Z^MZUmK(U$lOluxdM&XtAtkaRz8Yh5xD z4{*kHGKT0uT-YwRz#_4p!v;bO)@KP2A*o-JWgy5j@im(W6ZA(^x~8mb z&?MR!n$RdAfzcC~8zwm&+3q1(XlD8Q6 z{yEy8#uw-j*9$iZ?-S&;X?cHHzKLv0Og_vZv#%`gla%!sdmtkZmE~G&CFLNF^JV1- zaAzO1A;q&1IJ4fR_%`5o$UT1J{zEqrO&xS8b*s^ocPo*VKqqDYTJ-MSji#Gir0iOe9=H|#`H8;g7WnT}ktL8|(Sqq=dK)e?H#Z?~UpO-puD?Y}sD zEWEhs5sTAqyC-fkJ6F3y&OftDlI_bLZ)~;IQuCPK=D4`?2dz#=)msaf|$b?*92Dyn}r*M&k3c*%8C?C zEB-c3c6C6PqlL$U+1;0x>&X&Vs*e+4)Wb?hhB%0*6?9*Xy$xk~gQRT1-tMxzTjDmk zV7U}rM3)3TFe%;$3}}yIr7`f8sL(C1b}K7Zb$2UUHlTH|Ti)%Gmv+mG+_D4HA8iE7 z%`F+(wBtHVyf)$4D9tpOWj(8K%obKL`{Z3%UzoR!PQ$e0ihAaenJ0>=jT%k!+vk%X zXd}PUxsC+abY5H$g%bUgdKI>KKs<2m-QE3ba6Q%R^uywiS!I@V6mZEn3CDgH8M`&WFBl z70vx-yUuQ&8krig+3e>2e`Vr;IKYx2wRk~LpV`b{Y8fpsh&3YK; zdwUiPw*0RH)EfoXNXt}yMyfL7D?h5-13HnfIhCm$Seh((hr@C8V} z#m3Pv>k2n^HJ*b|Tr>#kXk*uupewTDR-5`QTkV(;Vsc|x{dRb?@q7^y^J={S*?LSZ z*4kLN&5HTrHc)Q&t`Y)5D{)b4nrxlTX~=`6a5Irgm_#_gHXLXWF!I7gYL}E+3@2GG z)h4M^Z4jN3lHx(5sjReNWVLq8r&Z@9%dg@|;=m&5eKfgBvxFm)U2xMWe;5Zwn}^|m zOLZ^ z{pWL!xE-e}$WCht`{LY=ue~O|iazMc`>Sq{0vqM?k3CvjGSIEoVR>FGEQ58p)J}L@ zpC#iOEW-n7*#R!JJguz2da5+GV_B#bXbtGhbu!`y4aC*`WF;b&9Rq6!kWm{u9Vs0( zG#E`fBkVp6m2Rm#n#r1E(q%&IS##XWHrl;Fc(?sIyBoh=JKN}uo7uCWwy6SIyl7F+ zporV4H1e=)c1Et{JKapEgz53cFx*Lyu-j~&AYHQ2Fx{+In7Ydm%)kf3$}TQO|I z+Ms6zYEUPLhPgA+2uTbU-$k5?j|n9=jUSR%S4P`4m*sp~hLUM5%X%o2{aAHR$qg`_ zOG*|f&{>u{C8Za8&T^^ONf^=#CanwrFB+;b-)2)&Gv-^)x)du`Pr1`ACxIANGeFtY zOrX@vF9CmMfH> zy%o|Kb31G{_3IW3Dzu8`N)j`ygkaJ-hn0}!x;D%~@***m z2w)&6GcXA^ULGbOP$=`vPcl|T+~o`PWmrj@l??z8tl%`yfzIWD@`TOC1}qkJLh^Xk zF(N=V%4Jp(dcaqFSTPb6kCPvIbVhSN1-aU10&|I{X?Y;SJp3RYO~weo2T~C(Jkdb3 zGYUVFE~;~|>R(&)AzdMqxBj|189Ikm?VD`LE>_sZmM|TAeQL?;Ojlq(?(Y*Ds~Z}s zr~bLGU#$a9i=l}LomI!qsFG;AWIafc7N)HS6+8y}n_>SIlqH{n2h;PC-eT1SNr#_1 z8S%?c28PywxgfU@$+?%AgGVCKdNC4-Or3VRBq?%P;7?`5V#4G0s1xoXw>n`l&-$|X zT9+jsbbA`?s?^X9Dik15KzGti8#zA2y0Vfd)?N+w9=yLUvQ-#dirG42c*th-5a=Py zYZH=6LZ*l{I7BF!*$j#O5MAnED$Rqm8wGc`+rs_^USkX!M?XrrNljdsceUG1b zZH_J!7ghUnV0i@WdtUn{GcL0xtaE2#U_Uq7M#$ANo1xukn3dxm+QVBQ1o z!x4cF7XWgV{@+4>+#;FtJUF=eeYd!-3&2?_s&A>|H(h^^C#mZ(F&kS87<#lz(edPi zT0dIr%(Pk1c7Aikj_N7TwVDzP4`$_DS-vhq`sSTkd3jkrnwggNid@=*`~*iaJPHc= zp8#~FYc>69&SO}??!l=*6KH1rmeGAjjuXvHuXnSsn(-P}+(McFG;PCbNRqm#8MZW~ zeg5$uY9wF4-UrjW&dx zP%MX19RwLz;2f>Y3fT~0D&-c$Y5vQiup_~F*VPzdW_E;`BP3>!VVV`V{yZvTf8u3k zR{#6uiLS<}37i+dJ+c3(r(g#bg+j&d;}SZBErJXI0k#{&l~hY|UF4KYZpCU?N4%*u zPlleZwCp@3L+TRfq@k>I<2}tzyr)joSd-gBWLsSa*~%bDCeC*~+^FR>&8%}t$OB}N zfG`m7XSu7FGcYnUw283>?piMl?;kGkIWI7w-q-WXFCX~IUCB(x-PdfihmzGb|MX1X zdv`pvWuJt4!=Y%Xu5lb~&9y#Z zNn)xP{tG;gWLP*Ll$MfY>CMV58v7mL6x0S|vZO4>?7)N3SC;#@2N&i*Il|q!DVzZv ztpyO4w?S=M-K_-sXyp3l7K~g;xzK0_JX)60RC3WAroia{6Q>AMOT`LIVx~q$fJtXZ zJ|{x`5PjZylH+G|&uNP>tTJNq{?jbSMp*9j{Y$)G_CL5~R;ONdTf_2N8SeX%`cHE0 z@`l@1&7Rxxp#RI>CF04CuwePbiL&~?KJwg?i=!J4L`XQ$^ytW{CAM9Ao@B<4e_TEH zL`wMC(RTVH>#J^C-d2s@nuMX|zNhaE z8xmY6x$tG+%qom|5h8UC2zv$j#x#6bOg^~aTgxelR&YcIl=91HH2F4+rZ*!mlax(p z-&-zi+Dq-5hR}XZMma>w{pgKg%63yr|EdN~K)?T>14LK-hzQWEbp#MUlvoZBoa<*q zc4)w93jWbRHq+zMDO(t1*QL6=LmM{^dAlG**zFJh@gF~Ix78%~rcCvww)lHao_tTd z4ZHm0KdS0K+Ci`jO#Z@P{`-`-*4goymp{|tto5cq*}dwN`kFe`Ye@cmJfOGht3%tF z#4=3U9;(J+AdWuU)w|W4diQn%k+wiGq`>WYIxMSIi16@$E5{JC(gOQl7QF7;LJ3`3 zO2O7#7Ir;zSy_|^o0eeE%X0coQwUiVgs`$wU5hhJBDGSFK)WnhwcMDY=)v}^?1LL1 zBRkV_a~AwiPC%9clSHHzBpvWc8@8HF+?$cHi2JdX6bokFo{@EB*@&&iRN@&5FTs5g zn+H8aiL~RX>9P`{Ads}Ag3IB>GQ(82%Rd{`48%jDAx^L?~iAbq~9ndQA#Nv=s3x zYFDV04mfun?RtK$SOkorf>mUjxpPs2HFEBJ^dkP|>q04qIVm`o=*>3C8w^L{jjion z0{jotp%Q=?z@-QH$X+KYX6#jAo+QPFJtvHL8n6LrfZ2<-01ROofGHwUQo?AfFU$3s zdjb##xZ`L`m5Edvu?Lf23!ef&p8!wR+-zCS@+qiT6uQvXTb6qzWeN5M%9T)!#jdQY z6aW7we*?H`pguBCe^>pk{$2GE{M|XQbAbNT5A52B!vRC_T#*^>K6lUm!2JBftqOXc#3seCd&fn|JnziyO`F6Ie z9jLrhUKpypm0Xv(=*8fJoBv`oyEH=xDAPIylVtgzx zX=33;+#tKmNZ3oK=ZrDlR>w{yXrRT*4sl}6(8Kk(1kVxwCYdMugcbhAJ23W5!gaz? zc>GHRl0^_7){~aEz-5q@;Xk@LO?IzVu$N zhbM&bW)?+<-)MH(J>F;vaRYYo?VbL-N{y=xy02ibq?Z4PnNUaj|GXKD;P{g<@7tZ#FeYm8Oi z8f)@E(%NXQYB0u+G+5dU_Lw1bENPBe%-)dMmWZaR{miJd92uIt?e-N;sb*z;NcVkz z%o*-pJ$YMU^MQ5C#6KdTldBLDGkc&l2E6`=0V~l(ajUSu*{0)GN$i6h3=5)WWao}H z_!VG=!1^5Z1@ysyFPch4J=N_ob(Oj*o~C1y!P3x$D0O>R!@2*$o;kvvSGPoQOmVldv#oea zns~GWqR0sja6DiQ*Om-~k5`rliYND!l@>6X8j4>vK*Wzh-mi^B!zAx}>d{Cpx&*Z9 z@tV5&5VcyO6lmgba+`%F=Yy~`;8XxZP6UcAr~e{pOI~BcQ~OV6J$v(_kl*Xco+gFu zTyg(XNI;tjGQZ)4U%&9euK|$#Pd%`B)vCo0Jhguk`%j5KnT;@?`fKX*g2wkXyjYE> z`K>}JMO;Rol~TdQLixY(OoHsQ;eQ-^&7K zpT%zIzmlo_p}pbWZ5`|I5>*`+LQuh}6!su!oe#n&lN z7HBIk3=6x3Cxy}mf?~Utnjs5id3#zez{{4FJGg8(M5Go32=}CA+bMYzK@gdeZIr0W zMpOl!EqD}qz zXUZ#&ed_rgt#a#r^(OXTX2zPAU3p?pw&%K|gPCDwHV+N5<4rXy26wILSrcZ(o%*2D zR+k8;eHnx9REybeG3ePw(ZfPLo8CK|+uYp~3C3Ri@O7WMenr^mH$0U2n{3VgP+Pzh z8aTRX<&C}J^UBaQ-Uz$mmciB~QJ3DDe?3PwG)BBnFJOMUg|k8lxj-!>#0exo6IMgc zXptSdDnVvLv5Me#-fA%*#O~xS`CD}5eH0j=!V-q+SHyJISmT@y}VLuy> zH^p$6;M*kMruepzwk33?M5dV0;c|D&=I#=jX%EwsMEn?>DcwS$%9t>jEwOkq)!0O9 zb>$CxrxV%=&eE9nJjhLPEW(~0{s%=u1QxPbIOTEmF2qv#HZj#n7GR(P#T=P1^F|R{ zivKX0KxaSzqBocEBk{1Eo!HNUed|1)=ojAG)4unEVS}UY(S+G%w1_o#xI{m^2F&%m z&R*40ReLmia(VXUyRH&b?%1G7%!yU8YI~JIcY|m#7%XBcV@)_c>1dDr$*CW0vh2C? zDyLgt)7q)?irnvjwdow@XSeWP;ll#_nB$4&MO!Jt2==c=8_`AMdmwK1Ezf{X`08Uj zgk$EWh~T?O{v&e>Jou%|TI!wYMU3Ct4DGI634(%Oe=p7-Eh~3}iq;~DNii%3nPgx! zUy9$o?iZ_qeS2;sS~}_)KX~ZGd$21gHUw2*ddR@gN%YV`M1%FKA5MDg5rZppkH6N($r&!^ITHiJ2hR4<3UH z5pT1h!}cu@Q2fz2OBm~_d=7K7-m4c4soLsVon&Y5Oq*&&*R`2-5ew5B4A#cy;|5*B zi2Bo|AP=2u>%pMM$V9!a>LbzPUQb;#)NDBHj;>!Hb$jpf_Tc~A1KkBEay6hj#til< z#*Um`U+d7fZnCUf!ORw&$e3Qgp>yZdi_c1jS4Vv6)zv51)LP=C|1;_fu47!D3DI9J%GTd+&dcn!T=)?L-m0Qcw<`1b*E8B=BOZ zt6=d8!T6HV>u}Vo_!YQw8!#sy_4>V#v0)KSRghyP;tYh_qk*}Y;jp?4eRX%OKiF(x zOk@iphRLEs&Kjm#U-gluwrAy~)6nV-9R^!XmF@O@V(9#zb@_B1 zttnr;J|>E>`nWIE+M)9;)Ce5n@cebw z0P~~#lOZFlmdViDd}|PBUrQD-^8IsstLJCWV_V>Rv|-P@%Pxj>`Eh9@(nj}g<08il zajfZZ+4+u_`RC`33t2Y?{;uS+rQie|KccKvoD%uL6t=Tt(`mUhbVi*W=A735m&P_b zQ8c#MDa6^MP6Bzw5Y%7amD?Cy!#y=Dx_1MCMH7?;!56u?u_TdxZ6pX!CN;!}-p{`N#8dd_L{I z+cAQYNMC=~4TJO1P@t~oc;9#5kIdYYeehj&&%axTId|Z(+L!o>J7zf{xI`<5J>0^} z$sVooMvBqqQP;}a9G1Ljg#734#u?odq%y6cQn=$h4l^IR9=nkb_3Z*dYIYw2OT@zc zat@1nTHFl(9Pe?S_nzIKg_(X9Bx-$_F4qG3v8VnQzlt`0AY5wazy*32=dJVLQXO0f zF5HGl!8#Q);rwy`VQ_KKZ~zAlBC}8ufn&3QFm%~_aeAJ zC*t@bz~b%_O0^KS$PY~(<{5VyEgCe_JdA{!ph%t}qr?lhixaoMz&_-zvDs58IChcoE6YV$sz6$R*JFPh*i~eOF&JCM&J~Z09XT=<(Nj9<;CY@} zN`3T%f%fxb6TF`~susjE)bWV6rX!yGO~U~|q6&7V1bj{<6N$NCoO+21xkxL4g$Zs9 zc+ufUR!jyA&5A)8OxUqtBtDl#m-S^kQ>IQYOd@2PhDHvjDml)fKKKy#f^e#_$qDsz z@xb;sxBs!s1UXvZIcU?Rk_}v^-(b9X>rG)xCYLpbZ`yjZafAB0x`;S*<^8(!=5w zCZSLi9)F+ZGY@_5nmQDPy5@Tiea3S4ldq#|>n4hvh=U(QI|Gsw=!~|oXl0!-{x@j2 z89vhvp&yau@2yypF%Vdi+Yv<%WY8vI4Id%Ap+1T1qjZMOYYsQ0^bTRTVMNxyazU~6Jg9AlBG(TUNnqfZ~5h`88JSHz`$ntgEx(j1=-hj*}u4otAxB)M=GBMN0` zx4FxXn@GN|feUU1ha6K+(@k)XZ_nIAOz#Ne7VE=1G~D4a&dspMe!K!*#96+ z1NYO&OogqSTM|QvNTH-1A%p}t*@NJFtJHJ8mvQTkS@pw*pWW zyeT*sWG3+g__-+V?GzaT1i>ptSY^nl5)X$DwJaC@Us3#BkKUSmMFdApR&B*QO(@ zDOL*M4_N0bNXY$6WN;%f4lzoo)&z506p{`OJcu96A*BWiE#IXL>P4U)MUHko7w9y? zBygH`X@k>9z@c67dfw^x?hny*?$bC7wRN|a*SCQKUc)GJrc!UpR|yaExyaMXg&WGh zsYKNA!WMdq_^Kxq@=Wzu^t_>#(ji!1od9|KP-|7?~$z zppkMIpwt~8K@-Er{*F)Lu)ouAx8XiWY61%u!|f$Rab>Iztmj zGzSkR_>)tp<8^9iMZj`^_@&Bgz(+eXffqk-*3dKe36*;qaZkXx0tc$?H4P3b8^w&t z5a3C$1yliFf;epnLN*+mtHf9N4k!fewvhO$)j~U!cfJ_c>Q2dy3>fDeT*K2U52YV6 z4QPI2R9e!Wf5~f@4IJ6|MthlecqP2sa|B8apyG4di_Lk%$~$uTcZLoFkkR2PD$k+A z$~!LbavE^vzt0@tEbszEhtM++i;99-n9mx)JEP4rs7WL*f)G3B;f*^9K0ure3j?wU zXD1bY0?bVX?avhoj3d+q+Ojuh=M7JM=E5`j=L|o`^EA5R;t>R;O63Rkj7R)AZuA@` z`d6aIgB?t2NPG_W{(0r-S5v>zdWb*Q_{lch^Lp)`bL&cIsx!PC+dLxfrd>^UnF`VM zM5Xv!c^EaJ-SZsDM-@D;!b&{I<$jo(P+^LY9jOzL`?ZXG5~?BhFUCqy3(x5|Wr6UO zBITu(Vj+>=L-md-MUs%ws1;H|{-#z<30YkbaptK5w@}s=pWbPx@&f|yd>w)PCY0nr zzx0Z^{G$rkXk1W@XU0{@Zo%*r&qd>MTA|&Tpl2z13KM5Wk|*YBG<E zsR?;rddU;2!7lAw+H%Q2*S~Y$nX50Jub8l58U{7fl6VBOh78-8S@Ubyh{P$yf6=T( zFm@OMYDo&Lag~hBkG=UI08v-eeGD54KXg3|dLAmax!HaisaWrJZwJAs`+kh=_Dd5? z>tV8a%0vBX!fwDtz46BYj9Y*&e1^6j$qZvkqI|A=OV>+wdgZV`9ix(|keZHU1b$nR`OG%M1vP;Hlz1dkoaE8( z6VzOZAF9|QnuVSUR|56I=8t@VP7Q9o)7SvG**M&6WX)>HP{1fEPa`Cd@oln&=}BDI|CUPS143WoRN(buXQs>59uLw}>S}k0#!HmNTqp z-%LD8i~PI>wlVVTLEhouvyns8;n4gBk^Cg@aCzl^$#=YX=580`M?mPkBzF-JciQ{Q~2%PO}anP4uTq1^uYxtv%<=EH-s_GjTi#@)H_pgKbr zv&^~h5V?w64|BFA&TvidG5`pAt_R;lP9(P1gF9{`Ui!vmhplemUFjNrF|I)k(79uM zKjgR|YKLO1cAiLpyj2Qpi1D#%7F6WrL0_QQbA?ugmkc($-dnAW6}4(#LKueN(b7L= zYSKztnIJ@+1b70Y2MYxSZlz9?!8f~DEzjur2}%R~qM6HvHiPNyHcOhKcF-fJ#j3(e!)h zkzgjf@E)2kMyp@O%}te9ZY-U6LwGQj=EMp0`*>_JmrsfhAy)fXDwj>+wOC@RkXtGW zcrc992jgg(Iu`5fK#xRX7;nWA!vv2!*2!T*0nwr%XnH8hi|iyAaH*;=S#=Nv3i-SO z53Jo}mM0U}Y+5&P5U)c|r@PZT3@53=*Bi5g9!`q+1z&IW^?_jYE-&F-ioh*;7vPim z6w*~V7P-uL7gX?|cY)|cz?e~?=nzv?femISpBy5iKTD3}Py~u4X-84NC`WHZ^Ey1Uufx9(>jB6*#6p$$p#w)&2% zj*ac@TyBh6oL-kD1VIbFvAMEd06GWPgaNu4b^^{?F~xNf-<{FrF~iz4=RA+G5wOx* ztXB2K$M7sl71r6UY=jOfS;CL0FH)BR&pW36=pN$z5v8m<6ym*S@{Fms^%nka_6r|0 z{MK+Qd<}RvXjlur1I_zF@4WC!i2nu%F7VEt1>ZvavjyLo>&}&&s~GY(N@4PLA(-0F zg9RL!l0G_%36PahHwjVZa3t6>rC>dsqEbkudY%_cg_J5~2Q>PgLFAeEmYG~qkT_M7 z>7rVejE8-zqx^vC(1=uq@sd{FpXM4oMidN19obQQ7u!)P=9BrZ-mXSH?uZKIh04wO zqq_LL$WBG}lRS7ouQZf~cFH5^y%|bQ0cE0?&>~1N0}zG+hM7SnIuIt0+HiKrMNY^= zsl?3a3`P_fI#koftm^ODYC?t34cOIa*4lOhj%(V~-!W_Dl=?e<3SDuE?Y$xN%rm&) zCY=2!%kq-0<&WZun{ayej9R8MEX&Vayk6JBqt(v!0@Q9sNId+sA&n2WrFlN4A~jD7 z_@RXad{&WHJ3YA+iSDrfUtW}FpGMXAFFQQUZM8an;ILXHFZ|kWH#Xk+i?TjA^&zX% zX%!FIjApZOGHv&I9A9&Iymp#f9xsMI4vhnA&h0*oJ*p7HT=?MZk9Gv)^<)SD}(C%p88&#r6_uG zmXG%bQiiHOE6 z-nPE$+4}QuRoB#1cd^$eCe&7)w`+Y@J?ER1xRh?J2dE;6?=7^DBg=zjdwp8Ao|1dY zC2J2s$4U_FAwM`lzegf1QjYMlfJzVi;Jo;QyxOI>Q&5y6ZWQMfl%d7YnXIYSKEO-% zxKJ3FmI}mGLI6TEChbt_LBE~?DJfi6&^%4h9~}s6hwjj(qng(lp4Eh)cn&Q+;&}Uq z`op4S^GCjRsPo0~(uY&ll(!)jObtXNZ=3q&_fMUE@}%>LfRt|OudQqLx1M|G-$ zzM7rh2bt+hq)&Wa{lQO8cTmRuxx5wR1oh6m9rd$Ebj{A-#ckMZ? ze&f)=v|*?)Qt*dr^$w$*t;5O`-08VYZouz`tcp}1Ri{UcKdqIiK%0JU;1UxSUokp*#o|F7+xGB-+d8$Q zWqR#si~<^X{DW?E-F??=T)ldGcIW#TYua@5p3m=@ZW%3BTJWBb?P<>S#6P2`QMI~a zxkStWj9Bm^AiRU*UXT@Ry$xlm$)q%p=oZ0*CQxvTi@83DrZnvuuda&(I5ohd(;-9z z3Wqh~H`VD!87?G+K!U*`T#H77<_d>g!>7^ceVBa@>Ga=w*z0{*O-=nqO+9?@{p@k} zI(z*6PyeiszR94z-S;!9R2DvQwKp90zIR-#TORuv^Q-^Hpk8{A4l>4wNob(~0Fowif(kl;=$&o@eii}~I19nCld?Q0 zqTQ(1kyvQ-ew4k+>|3{YSlxzDye_Jf*p2Fr{fn(`+X<=l(X(3)evawaZQe5vf~fIK1?q zA6%iT$38ePao}PIPyXe7?q7d({MI9d(yoS;4TTM#{~FfB-z`c#^fN*=ogiV2Jp;OM zVFt1l-v?56VG4%V98MV05oQR4YM}A_PAX{$?un$tcU_Mpo#0xsa*0bP#1gLFhI2wg zuPdR`&8$lHsvlI@tv*@*wI&X zT3(r~Vn4Lob|ab(HJJitNvbN^4WAktDYWJ$MxLEo?Qx76na<88)v0f|9HSPoYVs8m zaUx!?8L*$u+a7?&cNOxWt`IizdYK21X?Uyf6M@7&R2D0Y>?31PDqR{}x1Y>Kjpfqv z^#`e~C0$y1k8Lq$+PCcl6;i=w-Ch8 z*oqD)wQ0b@F@Q>V5-(!dv!Ze*0gF-EoRNbWpZARa~v489~S5|Kq{r8pOvZk!aR_a^AX z{L`9D3BGAKjl8T8aLk(pvXkDxC9tbtSmwFso!64S*vYkoZIBNjIwZ4lKa%M(rJ;Um z9%?|3ejW+aUrie2EotRevP$SX!A95a+(l;fA=kJ)z3d9&nf>lkZ5>5i%mf-!Vh&Q6 zvovFKf>U5#j6z5NKXhB%sO`nh%b1uklEur?zKJhrb}(j1Jm)iy2b z+kDOOQaJ)91#Pto7Grv%{@87Jt!OIhcQSWPjJT+(>3H*E2TZ zaMvvvXzM>Txb67*tFuuYqc|SLf=(bncH*LQZrvj|{i7W(E$Up|RO_C);+hxv-n?rV z)0rHBhPFNdf54w8mIKRN64}Egcx_ww`VEKMj9VE|nut+^S3_~cHC?@*L7380sZ4Mv zqXCObGL=tuBuO4KbSA||&aja$y~RF$=8SsXTPufORnIM6>Z;M}49qIpL{q!3DOgwa ziI>FU`+oKLy?>&9PyHkHdw*j7;xdOBnP*Hd>76=wcL z8vEs3K7< z{Eje0(>CjL_%0F|pex5z5>%Y7D=-~qdZ}NZYTcxlT-ny#cIA>ZG=Cg^Q+-xltv>rr z?Fgm;w9$7>=$v-MtxN z&n3%%W;`J?FcuB6K*9G){@nS_+tYcE_%nE7Ydm?+XW=N~{@Ksc{Vtp~KBs$A^ABS= zn)~em3Ypo)J;IkbZpAnGeKeo(XK_>98BZYm;<1vZqP~cT*kR!#LJ1$$Y@zajYJ2gRl#fhMc75#p-=n94qc~mt~1rM9vij+++8)IWh z_LbQ~brkA|ODzThjCW^6+k|DBPQcVr2_Oq!#4Z8ShTM~-q}UGlX<*9adObz=!Y{Fi z)5l_7*q(|Op=5h)Mj`LSVq}}XWT^^zLsZsMP(sK+9{-h8} z`V*q^w;{F-QLU&YlIK7A=W%=H(%BBFvw^mUU_|z8SmS{3Onu-$9CLz-;VRxJFT0b-N=1A zrf`H{K@F!j8;bZwM>Dhnt=0mV3gR@8?qcCZXD#4J3}O#e_JQ}0qFpIt_o62vd<|)$ z%#=%_P!l9qdKE2tdd_=9cHB2PvGcV)^@|3!rk<^D`PiVo(2%cJW$c}wXvojL-`K9z z>QSTK^+)wF_HcF;YNEu{qxj`;C?IHU0<5$iSiz&0^rukDNVDG-d{|s%2_`$ucuRTe z2na)fu;SB02e;Y7^d$^PtR1vWUJ`RR8(~)f=K}xY(QdS<999D8Fi}**fllz4y5uAs z;Urr4T(N>l&`t1nq_UW1lqKL1h1IoqBS-}(I|)MP5rsDJjY?93Vy42rKqwbpa&B-S zNORVnj1?c`Jrnr1;ERaYPlxr-b^-0TwAm7mMQ<^A%e()i|6_3f7MyBZ%>5{|; zRDnW0sG0wl$$Sus$Q0oJBJY&;KsBSN8V6N{(hHNE4k~N1Qz!`AxiuA~MPTZMIvh99 z(BlI{1xvXT48naIM0~9@6UuK50=u$^BR~xaIp})HUDwdwH$Y6;>{i0ii3KH2^+l+{ z#QcFK{P2RI`dg|4x$g8IMlh;s07aO7lJFTL=^e5OlwSNGUX~}WOd@`p2~U3E$X`9Y zcQG4i?pnIMdg+S39h=`{xaY@L)NW7buUk{=w}*TOmLGjQG&XzD3;(%u)$Jd9VUydk zs8DTbT${8HzGri-$8>aert6kIRxJ)6bC~r5SF&wDW8yg#xWuW#B6zMXOBJXP`6h8I zBx2?(HD41P1z>6ogEvcx9kYw?>G7aKQg8ifB?&0;FXz>vUODAANYz|gnF|t1D({Su z_|lmtNYtXnAm*KNd9*Q1e5dZ;x|ZKJy6J&GI(>TT^zARq8JjqI`q7Ra_IH+NAAj!j z)YuDT-XRM*VE~UR&@(Q#-fCBTU1g8A;HM|K>#D!XSMOi36<#cAxaO{ zo|mel$)+~?%%$AwLJ5HeUhRq7RL5hfR;tA;FL8~>>sz!k%+r-(XJ~_~T;KsFR4>j) z1<4=jkdiZ{S9J4?OT%!8Qj)|uY>P(W90-5%uL@Il7J2nFq4L?m-TZSE9qzEZtC8%j zgFCgNl;`=ipqATC77N9xPpIGc5nZABd2$OAsc&N!F55}?g7xIWYU76h@5RurcM4=f zLoPs?=K`eZ<3|OJVW4C#KnXem5upGN1>;ch-2NL?V0~6c8Ji0#yVg z)C+mhWD)!nt3!@9H)MCd%yiBaP=xgmWCH)1iC1j_;gIbi$*X*U%0O-O-49M$v4*d) z%-Cnj_p)n8b!`oiJubV|xPH^t?maF`s-Z&8#KH2L?CS8>c-}EVewP&Q02p_wt84F*3`bN%3?Fu-DcY6b{uRAI;|hI z`nHvdv0a*aG=W43y+^U^8pSBzH0JnVjM7`=>E2{ zQ=xI8SXL^Z)v(AM!O z6W}A92jo6!V-$TD2jzg&d07h+XQwLa^ekBIwv>YindN8fvY;GU-*xzp;amEr~zQbVaXboJUY@n`Pb zcC~s|Cp`4a2Os>U`tQGdP}Y7fa~!&Iwj1Icyr zI@*Q6k4lo1cU4_h4&#UF^OgT&msX$8D#^A9Ww-uqdDnz&mBy>AHdGSYEsc-v-i3-m zIGn8*R6-ld1qm-%t8BYQcWZ@#*hNSD1Kl0SrbE3oWqUVf+~90k#C2E?eaTLVp-`7R z(yi128&Kg-P!3V2npo$`O@tN(mt0MsCzG%5mUp_wO`h%a38`txir6I?%BVUCn3uLb zaGpkd&4}+t0}n_i=^)+%CWKf%;0T#GfioyRnHd}N^1i1RTawVMKmWn_HKTw2o}+&CG?rOX<8p6A?1|cRpxy9~_uesKsEfJt zUT36bT}B-nEsTbOi6(!iK3UxwZ%RoKh@$!7;Jw57>O1ahPAoln?3!zzzG3T7G`@D3 z&%bx=L(eX1X&io(?wTwbO-{2*T=Th5owQ~sl37vR=VCiz*|k02>D{w4bldw|0?Q4V zNIn+V;$*SdU_H(t+Vcp5KO8dc5RdoVz&%_j1bQSbck}wM*Tc~Xe7c#-xTt^tH!&HZ zkDv=TGehz#t>xhkYu5vxP=<6TPH#pv>9V|s@CbpVJ0*D=?fS~&n_N5LTLwnmqG8n6 z2Y!1DFSZk$k78QzxHOvugBcvEvDFlv=FzIxRfU=+4tqfE>P7LrR zE|0j_X~aqa?>L%KP=UkH!hly1|Iy;tZanhvpRy&oq-F8b`{edm?EX#JR6}D`(9_<# zH?IDA7O|vMQ@pi0sqgeRC4wQK6C1@h<|9sT-W{tm?Actr_aBk}ldetJBced4)!5ql z$p;N<_xgRy*2belTW@&!+G}oGzG7)2x@Y6nzRcQtgTtbRUQ3d~ZDKn*V+A zx&^)`e(sx>d_P>1)x)r~=LPyWPGgqp4BMd}qns$192gb8{6sYkk<@}O<0vtFVqsio z_wr97kw{2{f615BJH7PfQG{dbxS<^JSJ=^A=KJc!KNnYs%fH&PY;?!I<9k;J-Tm(1 z>b=MJ?HFCwa+z#*EZZ--9 zL|2xQ#NDA9^}~2oF7@+Is`dB461a#v3>IZTV?1A$tDP7<;`X3v3d$n#wdS#Q&ZHFs z5&ei0psWx6CF~xND&}cTRIeVUA#7$12uK+rm5M%DgsMwUe6@(&CM*JPyvu0SSK6Rr zB2s`&z_1}kU}QZ_S%d|oi$th;0;&i^d?EYJ!6|rjM7^oX%#UASFym1lSRLpJ+TbP; zjF!i>%;?!vML92=g_G%akW)hbM%65-x=xt@3lED&(Y8?=gdD5DEd;6tlW z!cfGMa%Z5CK@o$AhqO0T)}j<{SQZeqgpb?+RMjC+bp%yo1Ne=)mBktS!upralF(6) zF7o1;1w;#4p%tRyZq2u`2BRnIiZKNBaiJU~K`FSs!IaI%{L_jlY2^R9s+;w$W-E`b zas1*J?D}7roJ(4d{^E(_53CV?p_`+qzM%VIcEyTpZu#=bg7~GWA$DKV9b5bf^@Hq@ zXFhps?;zpI1wmf~-)?}udY3@nVFaV;%8HZ#m?Am?QzQ&9>C=j{1puPDp8y%h5_1&`M(!Od> z=;PwSJuvD)yK<4v1&cDinF9uv(g9SONDrU@0Y7mq`P{URbYA-jm^U|OMVAfr+D6oa zz>6{HiulJ0@A;-EXy5--g>SwGR$}Bn)v%u>*$L7qwL}2I8BRAQQkhby>abfVC5Udk z2;Wc8$h-sv1S*pm3d$t_fREO@D51RIg7Llb;d-h}Np932qLp84Y+BT|ggAfHCARZ`9i>=G7NLZE-fubqoI;r>fC&lA>|}^v#bYW3&=p-(iKzsDu)Yh3v*A2t3Bd-$ zfyn3Sh}OcqSXLR9nk;|?Q&!{@%IIo5WljLAw&q>RF9axxw2JY>j%JZmZn(*~rFS~Q zE4L84(A`BWhH-Gf+dGHFFbw*I+f_JTD+Ts1VH)ZuIg1g&pXRU_Uc&|ary?^Go%AA? zWsUFws>(>V7?fhchnQE*#BcJiFKdy!aLocqmcZI0DfliH)|65$FTq&rfYT)g?|Ui3 zKNXunwl_Y0LB4ZMat8k$1`cJGfTwh#_Jgt#tB(?d>>wzE|C_ou4Q#7C(}vG;j`n?* zC2x{tOR{BKwq#k}qjD^Blk}ot4oE;yZcricUUf>lO12#*Igb?)g7C4T`pEwGr%i;)yoF5PZ-WWYxmt8eLAw)ViDLs#E$ z-Ho?oPu_DsYEzJJA41)(IJN3-8nZXs&pNZ$-+A(0+8K3Zj4kf2{^h&&9XxVP8xF}e z+w6{)%S%Jy`bILr7WD#U++x0JBxcJ91!qNCBVoW(5T(`#@3|K?p$Z9Jb58iu$l{pw zD;P0Ag=0Vz2S6jzD!HoM2r z(!O=a;@VX;4P^%-;VZs#g)MbWd40{Q+RTov?NPnEsdus0+39k*Z5k5{A~A!(+_S8Y zsNOxE^H`IulEEOUb%tt-2hu&ScW*Oy*Xd)h4N|%{CCmbgOJOQJk~# zh&s3ZKXx=|N?KRlx&FrWTaW3ZB_)2pG0>ntwiO5NSlwEpsqQlvVzq&&O43^_;ACv` zdc$!uNHxQENFJ~BJaecewN|TEJ2ZNuT5B*a_N%pKlh&m-8Flzy>rttVCJh5Ag;9hj z4D>pfrZ}$>{8z*^6Gs+{Md(>dZd3U5U~qNWh)I1J7I8{7YVQqj`}ZMhYbvKN|v>7;6+#9Qi&z4FaF z{>_iG#t9$o0*W-Ta&QHdHtfz(+Hj1NwwFs+cuRZ=p+7V?b{6|HyIgG>ZUyhDRbN-# zxp;&)qCxZz>GqsMXh^nKEam7ylRYgd=bbWdG)yqpZd81#bi;mTL zH`bSXDytiQz+Cs#-&8^&wr4fRftho#q}&ol|%e0q+*h% z+CpsP*kqtwqR1+;fY3P)H-zIA@wSSdDnM0jR3+OIzKx|8ts`U%2dq-LrM<7+pmnps zZ`~tSSxWVewnUf9QeLO>wJ&il(MT?%d(ZZ5rO8a?YW>ckZ2mu1HHD-KqeH7|*tUI- z+vo!2m2*kEPgPfLadjoy9QsmAm3Ys$2ANxHz`ZTyk~I)Eh8$W;=|*3oEva=FE2L1< zDrV0P?bNTX%p?_Ak8_k0HwALW0u4`QtfHS0VldWj#m`vqA42Sh|8PE{WxoFq^Dmb* zh#v_UG$Kq=1T97KQiQYTPZTA#?Y+v_d#sTEAOt2I3Ru!ijfXTe?Sx7oS~@VuU{1jk zDS9bsAcc&?Z3SK^MLY6(dc{6+VqHy^H z3X9p9_3QHoRX;{o;d2MK{aAtY9p-u#41R04WVnW-*4DI;PZJQ|nM#F^4l~JkSWhn* zCKL)GeZ!z0%Pqm!Tmv`?hndXv+0kr?6x}eQ3Em1dh8qRFBLf7o_5!+2_7NhUCIq{J zcc)D?v?mLZS)n~p`Dhy^sMThzL+oPh&uE$)wZ3Xw`=f4;C@oE;)MXxnqod8Hb(%cV zt_RbiS);9Ot~IzMsl;FEH5i*xjs0_0x#y)(TeYv&(WH4M|L0wzLu*#6`x{eDMztmXYr7$8j(2p(Md z>V_+ZLzF!#NNZSA;5#X}Z!zZp$*l?n>O--2atHpXGFTR?JNjtqeB$l=-+Vd$|30ibE#A6AZS=~=Rbi?AfssusKRsaxSKsy8UU&Po ziwx171D3Ko^3(r*?g*ai$`7*A|AIc`5;6iJ(Q-D*dH|p7xWI$81pu_k4zGcb4?V#7 zc1}!Cq6`EpIk+_#@&aP}`M7a%k|8`lfDmxD2Bi?3>{kjOeE-Eq*F3qQi`7K(`Pao0 zEc)YDrcC+&UbgJD{12z~;%|BV2p>Gl``22^+l`?~D%c3`OaMb6Q)7Wi0Cr`$7UMzg z0-Q1Dv7b{(W?MWBLljN-ssMyLe`z&E$|^oRWUdBM9zeW5Tu_5_CKTgl^FR4TsqYUJ zx%{QSKmcg=4aW0hzi}ad^^m&6@wb1t1hrRkl&FW;!`yC${zbY=jj*>6-GiVWKS*Ub z_{Ph}pqD2#f=gQcHtUSs49FqF*FtAu>ja>r_%N$|_Rjot$!V z7P7+=F_P#*!YpZX)bg~R79<}^VWQ;e2qQ)-3>Vrci8_>*ag--y{3_Gt-}`EjAcT^8 zOcs(e(zwBZnZcF#3V7=cv#1hGn6T<0yrLF~8aalm&~p_2Cd}=q0o&ZXRy5I#Cq6fpU^kcdJS5 zsq7@BQ36}0T#k$g2$~qTR)SUyi548WS`36Pp!f(~hB=emznEx{kAx>&CI^Oq`IP%$ zJCT|dXNZ`NS~C(Bg=(B5NAuWGx81KEW7Ws5Ib{}|j`CB!YSEMb+RuGKm%}fCit`^{ z`P$oN(BhXp=&xa>afDXi`U77`xmNt@sd9(ieCnEG`JaxJx!ghD&)I-StQPGL!hU0Z z`)jY{gZcMMU9OPt2kcH(K5k~P%b@KG_6Rq6wIby|Uub(@QMiZKzav4R$YHSIfI=+} zKVi{!Lr4*Yo+E|q=r-bDDdessL!Xr!aY#n(`nzAINk+|u8!fr`q%1*3RZYI~&5&|f zor~Z&d<-TWH%jTf8;=V%YPD+>FKjXXaEU!E7p5 z*s@xJn);O5gonnE04$XpgtCvKmH~ilwx89y)Sf_`CSuIJ+-MQtCN9O$2Te$*v0$;Y zFbI+sM0PZ)T8Yu3MgTLL&i3gYgF@AR~Gdh<&8D z373ndh^P$_u2I2bAS$^3Vh?+dK&1PY1?B6Q5W`c~M_fN~^8jx>-U^hvRt%BL6b6S8AiG21Ag zT9{5~LW-021l5ARBZ&8CK2*k}t#q9_RaQ5r6q~3kyYx`4!Blzgy%k17?d;9xmx-E04?Tc!wv5t;6dx1$ zL-z~s6!O)@fKj5p1jRbVrzTjq_H$4BdcH(mLH>3|*-{}X&w55t99b0MlYx_dq9odj zzN6T>kR*8v4+h_|9$l^1mRm|H_)wCjJmew+6axCUd=O)i+?H|^0lc?>B=RM7%pK2A zuPL$T{OCx%IJ;~G&aR>0+fWttGX!-xCZg@V%c$ItJ-33V!dt^V;nK@4(|d?TS-;ptI-` z&t&Gh!v|ZEL$3DJNUX2>-gBuiS+$;H%Pym!R$BV@Gg22;Y?;H{8Sd7&c)iKqH*l;{p@%Q~#Wr09w zaaXil1h!^b)KbEn4v$;6bThic^kiaKtzao6w(s$-{+sR!WqQ`S(<>x&3cFLkGBpj~ zcIUto_o)Z>dfe?jkMD08obgka1lF(3WW;PqqAn;&8gWg=1N%oX?CtK0jilOLL(|W4 zW82Ky0#6EX5~G+Gek6?Vr#^wk1$WDC4z+=Jx1Ialwr@t`BEBA$Gc2o1s1v|Kfr)~A zaLN<`5eL9VitpPzmD>!DwJ}D)U_Hvv$I4>1kt~?olb|35i0}Ol+0$QWhLi({bGXAD z%0bFn?gPbT=pg78#qO}c80D>W=}68N$EBFP?9e4xI{+_Y_OjCn;U?zKJ#%J|z~!cy zX*jZR@1jgW?Vd!dA4R(pH+TkcD2|drnveiB?=YfD;*c-K(_B}`IjJvGB}2uY%A13l*%}h1o-xT`7ti8+#`BLHQgw+JXB-u5frOYsW z5k({b%cPB#0mnYe*BJ%Me_>`k2Us7Ohgcy&2Z_ZLrVXg4Y1$)}L~YSn@p}HL{Pz4) z4UVnsAUq0N9gf%7Z+Lv2;WZ~15?jHCxOG04h&Y6j`7_{B#QE0{r{WL42H*uQMq#ce zKx&4aVfMYeQ-tN8eJ_QFbnbg0Msh;Z8&tfv1-+MhFJL5+L9GUF=RuMO{yumi#O>h- zY2WkSD*+$JZwfEM4&njnv6a`%8y4mvExZYpMnTj{@hwRwSg6hLZVR*-VTKBA7P_>} z=-mXwF5yk*F|+ZvS_CRALI+|Pc$Ef>K)S^%vU%^;SbVTcs-GS@f969iHaz>%3slL1 z?}feyoq4v+lvRX`BZc?!Uh-a5zoRdDA-SV3^3F)Ff|(rF15D-o#Xj_2AFli2D}Ly` z26+cX8!gy(fJd^>F zyEf8r;KJAu0pd%m;jWJmC7d7!2+!I|mT256t(+qhtp}!QO$50@TQQUIYZ2~Cxm_XY zB4b4uGa5~6bcWVDew2AQAV1{6bEV-{@(}+-g^1aZp0fvB2COB83l!XGB#{PNOQ@AD z#jo)%1hn>mHmNm42k^74^c{x%TT3Y}Tj{SiOzxaTj2;I;bQ+SlxXGOC=V3e(3ez>X zI>}Grg+a1GavGgN9!G$^FzjFfLMi%BrLkhuQ{i{%ci{K*AkQ@~q49<-FvGJ*72UEG zTeuB5i}?Ff?MFQ10mq&2aM**cz;EKkYg09$h=_|d%!PWzdEA7a3+W}1+5=%rjqu3f z!NPb9i;A{Tqo_A1jFftEJ|V12t5%7UL9bykrwIB68v?uGU}mCZH=BbRQF546Dw9t1 z0({LRAM)g?G@{>1GNY)&Rg%F17a-Clco4!Zie{5bQkUusCcD~Nrmc30YNJ+E`_(9j ze7KcxUnB3IUPKaam#FrrC9??lH`8lGBfJ5OVA)k#vy<@NCM2;`A<-mAbF?vyRjVd{ zwofhTB(2&Y8g*Kvi^U(S)?i>3yUMN6BKfzL>ERq#>rGmXx>C}LlFB36CCOnn*d&u) zvWr%a-7i`-q8dM8vxKYcq8FYFNi-Rm20RxAq!$;hcqU1$!ObKMgjdNZS#1W59>2@1 zE=kvdZ!I&IsU$!7;zg!WBYUP(rPX^i>S|vQ?_iQdNzY7LDP&cf!71%jTO_?nua-k_r1%4*TsG>?c0@%4u#r{n;pU2l^_gUSe4J04wRZmZg)NAg_}y-O`w^%j*`#JeEs zS|w?nr6SM?^Jft0lUl}X8ja4#%IqpMn*}Y&0udE6HAqqvN!N{fjXI>!l<6@jG!o+M zU3ET{+O3lCpjx-hBWg-r23<86$utHL^{zrUs!}<1%pv&CISYbx4T7K;x<{ z1|TI6$$^x(dY$BO>X}-na@zFxC8J~$;U3m$k-%1G!!I+V3ZMx5EFum>gGOy=G!ozH43?32Ht}l_)MoR6hHW+XLUIfTYjS92^8kJrrs`V-)^_4UhWL+}j z_Byu)=`7K=)gG%)t<#&4nwVLvNUK4OYBi~>>Jp3r12}G&13#e03whD!e9Wq|Fq0L1 zU8_e9duC7}+op&Nu4LrVPf^;5%kQWRonC`Nux1Q12DGw!dEqh>d&CU zAj+7i+I47V8Z{DX3f)Wu<&mWJY0#66qFzz~prV!x33H|0XZ5JGrL>kyg8Kuv<~GPF zX7Jg?k>?vQKImX@N8&8}luca72FBc~q}8IRR4+_-0*^-(f)(&;!K5c!;cG(Z81ih% zk^?$%(2>)SeKQHb9;P6YcOi8Z@&CwL4poQW8>QDV}22Fm15H zSY>?v{2^)UQkON-ch|F|Y!tZ0$j2Rr=8*<^4fzQ!iFW{S-6kXS{8#gpL5-9(q{e+v;JuKty~&aYovfDZ!UiMkIAo54 z<^++MG=L(~NNERdd@q0n!H0*oAkURJ2JtWh!iBNzz3+3-0s|8sdEprFeHXH#kf&hh zF?N28Dtjy+0E9ujgJpZSkC6=+m*ul!0I|+g-Kg&(wr?q_9B^isc=Zq;cw`^97oobX zI7G{S!CIskcPRxG^hL!+Ko(x&a>6NCt)r2OhuE(ClMgxlCR3D9Ow>3y#CAPIfGFbJ zlB;x+y@GY8^H+1&(s@FWd@2<5+mGDV~y#!j9?CCc2uDTVCUh)#aZWUUM_r zmN?WN(i}zHYz^Xz4+vinC_)>?df-y|!jOwmEyEv#I#*)|ALME~tnOhY&KONrP9>JX zA7+!+V(_}Aqe9{HK1&t9SjaYZ;(Ps6z5PjI17uGtZmp*IF_*n!T1{Ct5KR% zO+uIemWndaU(hlrKzSn|V)K)@PvIDX8o9Lw)=Z6U{i7o{+&J?3$fivjZn|OJ_t(wa zKV0_x(%QNTDPVMJ+oD#V-&83D%U&;wM#>*86aQD)>!r2PvPa9xzK>|-d8MSkcz5KH zk@epjx#8vwn>OLrm+t;`6t}LFDouW$HQJ_i8Us=#!ll1gR{BWUbO|;}{g0GIP^b(i z<`z=sA{l<~BhrDi=ew)#J@aMsVqCbR%0$Ds0jC^Vf9u~ zy%s!byrT;bTqm;nH$Tr<=aSKbXKFw3+&fQQm?T!j$&){6EwdtTVD5pQGY3~Ls(9nn zQ|~bN@X3~NEpX3fJd+n5#vy@V7~oJ-$7NeNW(bOmgZ>SVBBJ0V9t9`qFh3v)j_f9m zsc}actpN^>BBy6nQ*INIK$@BX5mu;1_@qj{7duaW;|#J0Xi@EM?U{i#_FGJX#Ux4@ z_S?3BgBP+t75^gtt}E-x-o9D#u?H1kX#Uv6f7yJyD6khRYuJPNV>NJuVu@p%>p(zk z(K=x#teLk7cM10icL?LHRKI=H?^jOc)^hRUu6XW_soXUQiZFtW8cq%$Uhw{SF8g-w z+Fj+s|p+cO5)*_!LKB-vMgV#-pccFl+{a zS?KB$v^nY+4;;A)#gYGq)K4-rlVgy2JZYZLc|~!PhnE@vNZ0*v^&?H zd}O3wZ@%d!v%Y`ik&|n8YSp!|_4hn{a%87gWl`y_62~oen>kydmdf&KcA-pCS7gmL zyJdR#Djf=FcaEHV`0fo`zME)_tk}J6jq-J8V$HVQDS#X#&zP7?DT)j;**09q}ElM^~;y*&6Vp?4-9r5j;vbO^1x72GgI}l zJ9XNOEmZBwUz5MaRUNWrpmW~Yt76SfL-(iF4X^wDNq}dQ^dbK0WU{lmjy|SO>HuH0 zsr;h>F_X!!IX2c|taj<*e#r(wo_&!^s5j=nnqiNhhGU&DJBo}{$yt-zg)ZS?KDRb= zNfZ%Q?ciSGS?U4oZ{f2otZX{;86?fa7*%4h;ur~v!@U%y?I7G~oR5i|=!&_j6NeRK z2Zdf>?gjaS9EbUuf`P;ErNi)z)VK}kcHu7cG^;&lZqG$$L5DNsLiVD3!dEsP&<55* z%n86yaw!FSL{C`Uj+U{<%SOQi9Bu3GQdqSK(KLNN+6E~KXS?!QAhSndpl5;vVYaYy zUL1>#(zQ_>_)~lkdo~4Tv@K%-ox#nBVmQlU@2^*73!4~^Oi+DrQhkg179ibE2qYC? zHUZWN(u0j0i$%x_d`F1PM&K1iYlWI<4hcmuu^=Lwf+Y~3LxD@7CYnrasFG6qSxbp7 zhDIhwKme1>S)JJ!Yoh3fT+%K(1r)M5auy6cC&wmol2jT^7$_tu&{9Jy|Li_rPDs3- zS6=ngr#^qJc!iANkuPP7w*k{4DU^3+QF1lvzrfzXy z_veqF+I{i2$D|LQ`uk(kPa90OZi9H`(3yh=1~2}0(YnmqMdCn7xI9pr--~lS2KL$R zO>3{g-FDt{{PVjd-L=Iy0Ri){6UfVyFd*y}#z6~*q?ClRg3Ap!7x+&gq_>k_Mvg4T zVX})Z;XRRu5)i>R@vi{=j=*?8-k}l|JTRc~CGdNNjk2NWdN==!S0pP)o-elI% zj+03Di1K_EkS7)vlj1iF#k`Ar+!|5fb#p%1Lvul5m)maQh(56Z&QrcFj!sf1pbv4T zAI;r_E@Y*7UHx0395ec$unl!~3#$;uw~$1z27@D!TVtbHIzGkYD#z1w0&^7+ImIb2 zEJhlH=p9ozJ)iV%isyQhxnod=rgE9Yc>hf_U-kD8j{H^{ezK_o_k=pszJ z?j+eVyb9|fysN3i_&|m(9Owh+N|PBt$ykyw%7{;K*m7;uV%3~~3)7#ULh#ybG<}xD z<=ZeBLilq`7%L;3CS<@ahk=mEWgO>JdaFBF+o`1Q+5)V)T-k;*2=I>(EUSzZ@mLFv zAO*Y7F7G%9nO~)GxQ*1-RuE`%B0y&g5pt1G0qZ>%EMb37rjqVp*jaFa;*6M1!4KgM zK}jbh7kN)5%oiw?O140|55cAMdv*oV#~yQ7W|4+-x94^!_HuGvORV1OEA8k^ zwvQ}Lj5MZwT~Ad{e|}R#d09r+X6UPRFfsM`rfW?rlB>6AZn!;vc-OAlr=uo&&HMj_ zh{KuQHfOWg2bK9`hHon+>=8~1;{(*8wgDJJ-#kv2;sjk7j-Z>c5k7CCqt>Qq&H(BW zVrK1>ybrD1*?|U0fZ5WX>uJxebes*k8V6PpECSltOC^=fWvj6bodAP$ymJ+$e3om7 zDD_QogPcl{Fc<WVUvKYQ1N%E_ zrhR4JrV7}9_gX8g>QFP1Qd3gtpe(RI_aL^3^wAv*x~bt4<6k5u3O< zd*y8QcBiR2y!z%YM=30u@+H0!ao>G5T zcmKNO<#mzN)qB#-p~fbM+Z(l+bQbern)+w`r&i%wW}Th=cXR9Gs<>R)hsAXzg2nwy zKy=MXtdCGg-gwOs8o)J#L_fj(1#wNP?XAgbmHrOUMZrFs-GJMVnEyGEKmgTwt zlV}&t^(@-d+10&aqXO+kh}p|HGUosfGOIa)fnS1jg}Dynf`wc(C z-FXC(;5`FrAJa+r4XLLoU53hg2(Ml2LFA7Eua+GVY541~sChqnAFXaK?P@t$wPEdb z6>Swv?8nrSh%OYXZC^E-0IuDlstEi@&M+=>1A zxV-gV?1MOJ*Q40)ipz(dz&^=&V_ePy14y6=XAmm@Yq17Ty*?-@WjexyL_VsWBD*?F;zr?Y%U)@!wtO<05~qh0gF}A90#Q z(9#c{;Mi`G?kc&RK3QafCW{&9v@q2=7eT|vkn$G37m0k=37x-qs??#@0CVvjhvWVC z>3d{nMa541-~O$xu5aQ0#lrrN4zZd;fx^xwTj?rX)Jj)5zN0qtYj*B@nqTv+Z(S_x z=f6dlO`k37!ncqq*j!o=4Ke_$(W}DvVp{27GX@z+h*AT{!7w^5gj0y4gGo|JfJ`U8 z?>3r2t>A`cxnTrByiHVzT27UyC07H&AL^kl!%axDU86D=_8Bt#w#vHJI?y z5M`m~^dQ`wu%89-1=^5B6%HvNb^Zx861iD|z=pz1<1SJjsS1o*AkKxa6rAqgaV{!_ z|3W4B!#bxWXo^ULTqmP)Mv9n%7N>5KWj}A$e^a03L?BWN|C$64D5Goj#7nDi3qN*= zN7?GNz!k{|$WH&^T+~~tI+|DeJpf=^64Y{t*ALii-l0R=5P!`HM@1w*rv z&moXFiDOw)7?dK$et+c7lG(fva$GFM~ zCLUC&(}3DF0fYyZ$_!lKg3TMOX-KwGIkHwdz*|?~nWr^^?DmAHgh~l6BCHBnCCE%h z6pL7AuwGz!2?M>sMNyJX;KvP%bHF)oTz#n1sc&!{?7s2q`%nDi0|#EdeQRv>P=yY} z^cs8ejprYG{+>hKD=fMikUREl@a?jzUeC|OvJuSe^}rQNtK>-gJ@1~m<}YsR7`^qb zzWtvMm;%}+U^Ke7Jock!?)>9_-`E{GzPU2dd(Hag&H3$14sB((%&Ff&utShox17iD zgHr?&KNJU=riZxgoyTTy4nSxO{fZS{K~Yl`g9>68RoqYcq@pqNvgK5%J@%K%n(gfb zg3h%#WETRY1bHz?TF%+MRpG{#G@Y4&wildI#X3cdHxD~is+6zBzq3kF$wdWuI=0@c zuXi8lI{Wh_H@|#v|JhrwTNkrz;{u_wOw?5CeSb+C)-)01lMUSG1a#D4C?T>jac zHdTEk(#9hHxbDdtm$#4J{K?+Ep9`oBmU_F_*|X`)TTg%DxnFMVsye>0vU%~bk!8*K zox4B#Jh#2UTLpWE6?4dXFoIq!jPW`}Fw~kj^-Nf2VWUOB9Nd*uvqyQ&LZz}HdyGxq zfQq~V=wi~E09C!hM&fhs5MSniJC}#y#dx{W6AC12+fj4!6&ui@gMG_*bp1a2L}@ri z0+As1tw9$qB_q?QJ);j+raF?l_wFaeX>POQ3~{OhqX+#2(aN(jJ*Fbv;g z6LJKMLfihOK#hhue@8sGKbhM(C9mBJkNwUaG)M2;jVXL5=oP2NO*`p;=@1UU$>=4I zBO|g$>)XisGSNI}g@z=+@5l!j^1tZN!piKm5nH8G6P=|SQ3PBNr8aVC<#r`<2d4lq zA3u1A?tBmt3FC(j(&nKZSQ)NDzt9araWd6!!}Ntf^|NY2YyXn9)Yuz2{}Xb2drPWG zt2%_3%bW)tWCxr8FA2Kp2oF#&As{LjY|m}8%T{>H`1*kyp-S>5j4MoJn9_g`1zZn! zVT?#(B}3XKoP&cIaRh`iMwii${$-JzI1kGt=~*074qH9C13HD9^z6Xq6?Zawpwivw z`P6rpEgJgUqwML^cdi(09$3mpy!F)3qa`UB{Ok>MZxSZ13?kRmZ)JrY2FeRJUCrJ=?f% z-`bX7Y5U%eyKY?@33g8B4*%#!hkx=D-Y4(@Ul(N|BD_Zz@(mSbU$U>ILF(nj!rsM` zjuqxk#i)+qtw^^du#%V|GRbK6jz^0j)X z&ManGHhWD*m8A+eLu_LQ%T>0~(qihnjKqZ^juEhP;eK9F@)7gc`yf0Ny1ken9(!* zZipbj4aB{(w?(diN&b$wS7z?L1c-4n_o7ysW#XIrB$IRB*GUfs`z+>@EMFTuu;FzS zVrelyz@GxNOqrq)AxH&27^SsOHu>QZHzx6 zXH=nK*`t@V4EoCl_zkF&zjuFOb8m~PL>r?z3(t$b_xto0^u0^_3%8rVt}1|2zJq!) zPzV(L(;1h$3bpO=f_Yf%1Ofv>T}^Ac;5R5b6kHGxwH6ilXyL^VQ_OaKJ3Dx)ed+Z{ z#*)`BZU1AotUacHeny7WlZ&t1xjcXOHpAjrcPmh^-q!BeV#C(_A6NBU6_EVR;ot14 zi#IpN>u&!0NYllChQg*gJiLE<@2ZEA`3o6syu8}ss4kCdGruaS1G@$Fs~lvG!-5gB zQcSo;AfsFvtUBC>T@%C#VX~2;tc*}BVWzhUVZm`PK&JtMXG8Cb@g$@%8z)~3C?OG6 zgbpacrx?+OU^xK^N*NXpZf1v7!^0&A8U>Jf;R*-SBHVOIhYgVt?obbw01Py^@~|er zNaD8d`=i~A?OP|V-R)#6UIwg?EeGav>ApoTd_R9~&4xwm-A2`)t=O?+#qymyFSJSj za52apWbZaLJrrnatNf>*O#g-GIB;ShS&^LnL7^WM_|0072_WYH4c^pvz=4%f2$W*^ ztyP*5o`f1o{}9>A z1lY4xxodK)7w8>+}1|#Pep{%UFuL0-URIiztU5vxwjkG}vv1FrLHc(d)}lHu~YBw|yYQ z@C)=ihihus;p)~D{JXa;a6MeSf|ll6KCTHn7UX${`XI?&Az(=$9Lf^VZYc}RAfIv- z=PkTQG|>)Wg(LNHX>{n%$vnC#n7wbKIJQ8huPq}58Uqzy?d&5b+3FK}G^L3~?Vhgfb;=3le4$kKWxBxw@8(~6Ie+2r%gg_c zb@D7k>^T3LZXP-vT|LxwO%=P%-(V^A=kHJtNjiQm|7)d)@)xqH{JmFaDV>EH^l6pu*eISWPAf`^Fs;W&K&*jip1#FHH!|1HM)C$$sE7D_ugMB z>w2M1I^f@aLQwo8om1l=_u}k5(4%1{q6*r>dzw-~DPBRus!t(>%ch94jaQZICi8a6 z{<2CkggUz^K2+`_dXa&ZIKIq2KD=o&H&b*{jIrIea+r$DaO^iDGg2TFqeE@>a~f@( z(AYOX1`q0;ymMZTabKz4naXY9l}iYN{|OrY?7`6;p{la_)bPsBFvF8i=6{oaJ^!00 z*)RUb*!fSaeY~x09ngFR%l`4d9^b!ze7fS}@%01p45rOnAe#jRp%ex)E?v2_QVmU^ z04-xu#j>7u5*IeIxBjK7#Kx96{puIkeTWaRI*ijlGncCjcDw4^pzP8)%nmUkwObrM zyUvhr-YHsLB^Pe?iRv<&6y3v&@a&TeQ}C~?7w#57wj|f}aHIH3Rf*Omm`xJ7afIWRx|BxWNj@iGr~(MOt4`#DT;UV{Q%>;7ht93estm1}P6M^Orx? z799nPus}$NC}&QLj*7_U$@e*bVstdGoc-`#fG(J98JsL$N<}6ITd=Pb=I0mQQ^qFe zsqBQuVzY3IFy2pNa(HUIf0(3%eq@5e=W@sj$kywwMgxEsu7v{sg%;2?<=TNAZlN?^ zNY%JHo?D0d2mfi;+quQyZB(daS0@OHw;>^K#rRzeLRqk?<(42DQ2o#_4Z@X$m<57p z3nX3;Oin@Rkin40Rw?}pU2NVi7n{%!Nb^T#L{#?s*Ej~9oIIi7D%K!;z}A2L zK4w1ur66;fji%;J9sM`Nv~HEr?l7v{+SrM^Pw-ubo$ubz-?6FLWCU3+#pDm~9uD>d zAOHU2e6Oxvd|oY{WA?jOKl)FnMYY*!Xlz{31&&g?T~lr7S}}LKvC-h1{u!x{iQ(ad z*l#pWzqllZed) z3Iu%MWK={cu)7ez3?+357}6=}1wy)EQ72n3JV)Rak{c)oMJpEPIP4g*uLOpU7Jxr; zX(9_p0LfenBiL7GVL^cIlf~;2-=Le&K-Br6QL(nD3LVgGRZwF^m>HpcM2^^)&VYAa z0LToz8Ss38#qw{B68?uEW@alSnbGJp&H=yQruqf>*Kq+QtrdYL0^AH(vx062eI^Sj zWhIau4+*)-I1S^i@!TpT{#Zq}o~;|u4S{Ot*=m1T zFPIW7eItd1gPR*jY!rDWA#_Ii)`U34F4>2O42S>xB!4hHom$!eq+fk4-fG>Zgs z$7OUuI8?Ry;d5U<_weR@4V_)8xX;&MUexGXy?wQ-agn*f=ZmYlIve(7`wg{*todi= zEWY~(u0D18)YSuQ)M-xaTIuvV54RwD<*pZwEna-=gXw+_85nG##%W9x zWSuddW8IHlyMb#Lh+lH>_#B4^COADQ8W}yPr75vIpu`CdB~CQpTqUQWuB;}9P%5q{ z9(siF5>}-WowdMXi#dU$bRuOaf*O>Wfl*#2DEZuhK)N?ygLr=6u%2Zoo39!wJv!2u z(`+&!`L5Hf9=$Z(@B3pI--3mT1M9)z9+Mc%*cBVF0e9Zqq`gk%ooBGzDdP0yXm0XD zaTcl|#l$o!P|;R&#J9;qz|}|$*k+#kngr`QGG1d~LIRYV)p%zer|74Iwg5BAM!=|n z3k9TSLTwW$+e1!A-H(eW)Poj;fg?DT$ECxd7zX6J80Cx!^1kZ{ApSWfbuPUU0P#DX zEdaztLC;2!lbBs;Kx$!8=vbqA6i2KZw{3B**VV`^I4b;17>9@xlWS5~P~pbd zL@Ot`KDMEDU_FO{%QTfUDN!36uz1?!I?Q5(Fq_XajwCcm>Q6+u!2!4EXOzii#gx1g z{c9~*D0CK7)dtYz=y~!GdHWVPNv!s=P~*Cds5-eBPSKbAPn=E^mYaGcAa zBW|*yBZi_$j=5cDKPT9Ob9NXFnWip%7~&_5({zG5@Ti5Y%I=>Db@z=~x16 z;L>*ANw(yq@8FpLc*6qliSqA(PWWXFx_)4gjD_GGg<{2D2;sT2|F$#NZnd`bf7i9U z8>#MAckgz6x2JOd{>q-rnS-0l>u5=;E8k2B9%lFYPgEHeSGLqSty`}>b6fw7r%!)Q z34koz^&LeA%<{G-A2}ES8%d%95)ffJb=-3ZXJHx~ra<;`;k5!#BlyJ8=61CC6lHNB znl0FyU~D2@QMkc95n8-Fl>Z@OlUs05af3I(+Nuz+ti)FP6!(Ig>}Yen6KlLD2Cs*! z0n92`@8Q^x8$sodT*_P&7=oAarRJ9QE=Bj@p?L`}WP47CR~5lP2|%2J=oO}QiSy@h zF%}*zeukVMT_H6(U}wVCAb!_iAO3wnJTZgT^2J=`(bw zeJO9h{CoKa^6x$KQx%C?;TG6pVVM^zs-dhq@>g*O_#+PNR9A?IiW46Cq3a|+c&~eB z4>erRPIvzJQ}4X<)JfM5|CP4}m#MPQIkSQu7>iP9;~RyXHZB{=xCSv{beAAAF49_3 zau7yYFj4!6i__R-1L_u#PLtOF>Az%Z!p%2;3`KAp=5DVN0t1Br^rHn+vyxg@ZBOzQ ziPotk4{Ahy&w|{4a$5#Th~Z06;u*8kc*ndTjZ$XfZKD#tE(j-2s)aEw2VH;xA^Uz- zEu7qTadO*9W!;(K18fiu3gmXC_*kqp6>n2aWdS5^G`~Fldr;a26dD4Ri}WL zM!%#lr%(nCX~JEPzz&j}tvmreGgE^ubZ zCcCkPNCm{E$bQUFXUi)Z8oLSREV~hm_;O7+)jF_*6h~Ouae(vXy9>22S93v3OhHMR z8J0?me-w_N0TK(CEMgh56!X$H6W*W}NQt3P28X4X_lBTi3va`Bc!R-||8rCMmHkY*Fa93)o%4{Sf*^fDVIKA&mTIxE1{r;h37-(Ygj_z~7Tywm zF8sPUDrV+P42Pm!4(X*8r!iDbA}-+T1*{*x??_R9)JRaGsJdAaQqima$Gs|GYnFNzUW`SP)0cN8-rl=2ukLcaMqkqo1QrTR%?7~Oq^idjilmH4( zbY2;L#lEV_^233PV;|9D|M!CD@274)I!d23mW$gLGYgf@e^fU_e^YZjY!)(R7)X~i zco%jF|60iMvz_xagUG!mE|*k5=9D8zuLYG49Jw6E0P7UXAqqkDHi`Nw zF14wcBI;K|tmkT<9L0iYYJr~`^8SVdi4bj^d9eZ|fQSPU4)Q~8H~}ejVu!mQ0uqE) zw=K7P3U+dN53Y_PlxRFy1$b<`+L?Hvdt;mK!f;BT5}Zn=W!baRq@qA9hF zdrqPbIYapj>g*GpT>}at5k%k=F{q$tX9g6lCYOL`2{}sv&f22W4z|Qj$X>kbV-P6x zfHCxF$Y7)u!eHSpI{JXF^*g`g%=ige%O|hNBC0m)|19vd7Tq_sqT=*pXQ8Qc*!Fo^ zlV>)WavBH;$Tu0>jdP4BXdY4{=s&EIf~fr_VmrOuqbCL|j!W;tZ+P)7ewMd=(KkW* zMJMFb<-qzQ5rwSDptT{H)__ivyAHahCR9fEV$wDiDcS}kp-Z%las+KANY&^nC!K>7 ze;&(+Ol**6bB#R2tlL|Sb6f%8QOCf|+2jmPFX4&WewQZlF)G|ibU1Ugl>o$BHaezg zD`OX7H=C)?Ih$Fo#AHbnUPy_#Of7<;s0hn#_4N%GAJs=ikYXozLWdGC(IrsmSDL0KCpZwnP`044h|U0X-SeGJ%ee z6vzZJuq9da0XB9XXLVEsqL3-Xkl2M1p|{{W#>=A7q4tPV<07Zo2GJR8rqD(aPzJVk z2+jx#10Fl4ZI?wvNRI=+i+4sqbUK(0dbM^haBoCp4?ZF43ieuef6wBl%Q!7~(&xO8T!0aXwiAwd4@I)vz@VX%|8S%3!8^t`< zz>Wc51^V_ZmJhTuApHfJ7reieG6*JjxOEG?buL7!Mwt=dQ<$;O6-}4~kDdLr+uQ z3oU`sh_`bqR)8?Uj&ph&N2kUw^Jd(6GV@ZL4T(amiZ2Bv<->2rGW?B{C(TbPuZNeI z`);Bac|`e(eW*0vtw9)){fAo6i6SBEdk*KQL+HpSIzM;^A0u`*xw*YXTo5} zpJ4YGu;Dl48`<>>9u|{+I<6Etkw2ka$ZxRFVcy5hc&@)KJ{QO$^}r_rLNo&sjMH;{ z_#iml?!gc6pQ3x`8|laBxfVG5C?4w`JiYQBR1(FNOBXnd$3lG#3HPg#su88W@LYvQ z;#H;R0XefUzc~kol!{sCb@8+F5C5%lNO^d$C@RlRDNkqLY36Y8xn9I`U0ZBNURB8N z%&B!?w?;dPO8s4WaOkqHOOG|b7DUw8ye7wE{0%+W0*CQnjQW>&EpNvPSUlVchSWkX zNHST<7KRB49{zSirej|>||2;KN^D*;#68+wSeQM$EbD4g^-*1SS zRY{5ZLph%r?36X0zbJkVd^cvipB0m=@_OWe`siN4MlRRTOc-Jf_&sW8{2p+6KrQGo zpQ2)w-y_$UmjB)YUEngUEjcgOetb^nykUgW1~Ram=Q<_Nv5nRnU?2&NgIN%>Ipi3m zoFtflM#NqK=Gm4jAp2Kzh|Cba6xTr ziLo(F29$H}A!3jT+k0mp7w@6sk9UFIGe*TB=&u57hzk`D~#S5T|VC)v;#Gudz z?kgoTP$r3-3dqhu99K=8<1dQoqo4N`2+_`|aVO6c?leNLMA%Ffo*#-NqA*k3b&!Hn zULL^PlmgV5GqlUy1P`e%G)0d%$G8V2jSFitrjr^^ zehyjiJ5e)wrDnMAjpxmdk9Wn$i_(=U)Q_K32}ir!1@{TEl3Y6fSwu3X5^)S!b||u% z_EA4YQ|!V8j;>~?jt^Cal)c=E43$5+dO9<|nl5vkx(t*IF2_&8r()%Z-&)woz!}NB z9MkWdny7J-Uj-}`4SWN32Q6XZC%Ppqj>CKpjSSjqk#Z(z%e9komcrQR1(N)2*zG6O zWEE40) z-!ERV{p9xTC)e(KWZ%9=magmST))1vi#v^ujx{Mz+RiE#iyrFz<=GgTI``~ zwu@f6Xy3*Ex?$bA8`i0^oD%24z1#r79CT5y^gTXl<@eKNZIF?QdYVzF;BmmDnW1T5 zO~AB8?x-o*%$2XXO!RYtY$;53{_Hc0!<>YFXR$!OQm_|>b>xo@1EYb|sdd2f=)yEg zbin#B3iK)=-IUxo@No&UjuJXC;5DdDNgTw~kqkJ2kCFhFA_p^!rYQ=AQvaAfm0xdn zS@j`Je|pc@@%62hCZgm;Df}UvT^3kJ0rt8K{8XF3`leVLz>tLy=?%%;05PLd8pAZ7 zL2ZD8Qvap|Yn%B@ijE5RJ9+0ps=3TY@w^1wSZCudc_g*jf*EufC9>+#!(KLQpQvc> zBF3HEI)|J_QW^mmWppu*&=R3;Xav2-S(T_aJ6zZ$fDcEADZX}c#TQ^?h@L^zf{F(c zN|;)Tq&=u9pu{vDNLs*+A!j>5C1$tpE=?YO=Fp>0f9m9cXAUJx@9qwtdi2lEY#Yu# zd;0E!!JhM(osZnL_PMopJ+d=%`uf_>F8%V-$79!@9`kjt>-N!yxNl~Yz5A=D)^56P z@2Yj7z}n%x*KJ%g_V3@jW$0*ENUw3$_UvAKb70e*D;q49hLv}2y5Tvu(dd3|Z1uYS z{&kmr%w4}+=uya)=^%LxIyWX4%*qH!p-ziF1StoiC{*nl)H0v1Ir}8SRM4qpJ&3F* zAhXP#3!qx{u=Y@%KM?5Dpduma@F|z$#ugUjXqr|8(v#a*X4^?|jOlFkMcm+;ALbX??RcoFJfTz=CYhx}F!Idnj{Q5Z+47^q-)G(Kb?3+R;j zD?+TMS6sqhQK4rel4a!;Ni2mPWl;k3!5X*}FI!)Mw?hgnz!0PDxe%qp5#$U4RApBM zrY$`oc4FvHyjtC$Q`M?!cLD*YqXQmFEE@FSd*hJnV2^EV2bZ)GxtlFwJX#V8*c&P@vmi`oevl;VVUc3OB%QR`1%i+FxRe z`)>Tyr`T^5D>f#=f?aR6ouB1i%_o#17d+6spaVO&_aiGP2zxt;7tpY!!jN zIcfsEn`6C^V{d|bH)>N(k<>$7npbos7UBu5*~QuaVq`V{=n94`Lxx(e8yDrBA|CIf z`Y{-Ovn2OV<5Q`}vmdWIr_XT}lYN)h9lvHJ=7xg4k1s3c*iPs_R}}PpOOkSyan&D7 z3F6iivveOobeJ2U2SEf<^iD90k|adB&SL0lXZ4mKV%K=}^g+CQnQ4qQ;WzFD=Y(aWAi&vr6|ujo=UWqga8)sf0Bojrv&yzvMn-fV^F} zS9nZ#R+td}si2{wHY(!sVj2D_@08s60(x9sd}8yld%jeSkn7OY#K@sLpCGqYYkXp8 z&#j-Pqw%SimR@<{!Kdi3Q<-*O;;WcawFt+S1NFEOxowEPhcr#{NoNn$USP4pToUA zm&ko(D))3^{JF1?$obskP}{y@lkGSKQ^;8^;1-wvnU!CGyg+h-?h2I*4)O)J;f6$e zqYT!-xn)4HJX0QkfSK(-=s3R~Plo51d;Q9k1}WrLrryIR@>>~e^veU|Mu}i-4%ATlvy{kOI$Jlun8AHZwN_mot zGKDxUC;X%vgp&f<6<17+H?5%dYoY{$Sk!x`a;rF8Y#jw>Gh(@ig9|cIF$^23IfeUY zAWqq2a20`bN=9ghoFN1~QV0$rWnfbocLCNpO*4b;K9Q@T?D8lVA4i0g2!T^0Xtp>!#7m! zARt$HhzXUUjrTvZ{OC81hLbnF>d{wLR)!4PA3wHfNm*ve(T=_OUtei;*ldC9uU}2? z*p*I~)wkd9;`8^cU9|hT?JxebTHs*W4*LZQ%@L~qw0B(GCH`~B<&JfSd(zIMCZOJ3 zp=ou*p;lcNvIHy2Hg)KA&IgZKYkZ{^&o*)Y)3N;%5#b2L8*u71pB_ z*3WGP@UQd@rlEgBzd6dA12J~g9M@jHIS?m|7D0R*C3{4pTsNmtHrmfoqx3EtJcJ1~ zH`6eKXqcBWBO5nS5(tEBzPx1X9&oH5p}nJy+k)X$bzoO*?9twC#E4YVEgm*XMuKkl)4@Pga?xMC;TTRVwM0x|6SM)xjPH)3GMY{Uz0~28>scCPJ+D0HlDST#$W){&nzl znG1SM2*yOqJ^=(tQCQf6A|7y9B)&2c?cHVkDF<+h4+{t8f`$(s)sCos1wThMY)=b% zCiP+usP7;#Lt%*%q_Rtjgc3Y>3N?ezt-`PVv57&et^k zMYR!E+f`ok`@dE;-dwX5g8J4+CdpdPuO=M2gV?1*xZJ@M-ERk2i=M(5HTd+10oV+oHh98Qw4ZvlsKZj>m4jwasK_IzM~pOG{UoFDS*R zF2oOBL{6*o(0`-YZB5r8r%}S|R8vzrdFt&NiVqH_kv7b$mLll}w6COfG_c>i<0>z6 zzr%jh;0WeFy+Q5q+P(Qj`9=8hs5j(4B}F<}PnW3~IE&BqRy-vgNNbm~Kd-ILw=dVG z1NqPAO~D$|FMnyO39|oUJEwnD`5fET8-KsW(8YSGodEAa?j^GQc+lsdnQ`g|dM;)9 z2JE0pYjC*Kg4tH;K!&^NtUanWcuJ=yJz{Bn)F5WHPD`!xf)EnbA&;2BJqe?ZF$R4< z0p|8L;ZwpmA{Aq~01qWDNsPx@sik9K^Z+b)2vmkhYDtW%IPJYkkHdDDqub-T#7qvBLS*CaOkQ9m12Dy-lag>_Mb#Z-1f>?;yR|In-{IwlB8PHDx zIfYLJn*m$ifKB${Of|^0ZSrz#1r^>3h4$Q_5S+yAxms9}9ODjWl*EK;Ff7XzFa`_q zN-R?E;*O>@48?g4}?w!s-M~U!9tB0Jcr2{pA!+OQ5)- zMj#e^Rz*#rrM|uekpwOEt-I5U2kRpC!mfC}|5SE_?~HQWFxh!wAzsG6GA)~ZQj2eM z3wZ*towxdtVy>pHYt`I?@7x}aMSBMPO1T@jsaUm)fBmUqH&*-tu($|DcpY2e^|}Jt zhE51~3V$Muw@_1TCL`!lWDz1~K<$>{z#qLo}=&8kRA@N+I;ZP@f&W$SwS`+ zPxQ<69i4ssE7wu+J0ujZ3JtHK9skWJZt{35_w7G)90$0$enwH1lvG6U%X_tj)IyXD zLQBa0g3G=TG8$3CRH(p!;i{&rd2p~3WlI`y&=5M{)~A`5hmI7Bc@%s|fxHVApPApC zLp&?4=h=$bu-p9~`TtOo5S1~9BjnEK)*aO&YZ8sC4}|~2+?#;6QJ!nVdS^7+m(ggo zB-`5MU9n_a-eN1Uvp5^hPRM4G5V8OXVF_CjvlR*yXn;VWl$1h&mKI4)3KZJZ3mW5EGNPQD0vcbs`M{3#24r-?yK6RxvV9ihaL00D9AsoJnN*SpoZ(Lyt zRVYGXBK6I;z4*FS;{#aCbbOMYz}xm|^ttR`6!pyz)6Qq^x4gK|Raf%wV&{0p)zePx zJ?%^G=RXViKLnvT4jD^%AS-m`P8vIiA;E{FN3{<<1e-2iO92AVpfnyUR`8M)N_HgD z)(DLg#v5^=w87_A(u25_oSia8K^z{8l9|^fP_WcRp?VX+9wrthl_t74_a1pP!BMSg z>t`aQH%q3&Y{uZDH!Q18&ud86<^%HEPVWs%y0YtM&Z>{kw<|XLV@$?gIly1U?^oHG zrDxmy%iA_|b%%WZ6&0@Pq`PtXJ@HUyrmj#~ah`12H-6#N`2o@eurzn>KkmtR+ijQV?C#f{7%U zX^RFLVkf8cGJ>a1*V7PV<&jnfj|<-*e8n(8aCp-S6c%s<@qMlQ#Ds<|OX<%WrQ`I% z9|Lh^olu2mp}2llS4M3?Dq+K@s0;k^MhYg4R2Ye0gG_&LH|7X#4D=6Beznodc>FF*fr=DA()q6n*Ksy-hvQRCC%IT9>SxwRdy-hOW-~?&#nTLKvaw zX4IvGktp7PHl0fqw6G8Hn8`LRBbBJ0{Aa!3^O$VL>FvyjJw%TW4rJ9@4Et4Jwu4&a z8ym6us4NAjRTuINOc)fj@@f7$gimU+r5%vXAz&X$?&Z*udVE-lt0HqbPxNe8F$F=L zpO1Y#OV+HVp6zy(2H|QcHb6ne1v8qPT~uF!94o|lN>Yo@1ITjhY|DEo5KKiWh)0ee z!m>*~7aTWwW1!XGQQ}h+(XC7IGAjzN>*LDa`2*fZG6Sd!W$We z!qb6xL!+;wd9Z%j+BN6Y4m9>BFNrXpHFjWI)65k(@uH%t^Byg@5(B zvtQWJS|tdl{nm=5^jp`ZA4p3~bXi(ElKqVXwdbr^yR3e&xx?4k5Dy4?6f@Sw2JA&W z=~`*{uW!+n0%@2!Eyqy+ryfm8&WH6C}X= zAo43Gs5o#T0WL$*f3>7jg0_`1HRv)6g3%?LA6pF&Te?yM2sVxwZBCg&1e%e+R}@`D zM~jTMZ6rD)&G@G!rZuG_97_btkH-+9TJcjgmCwR=MOitNm1%Fsau}UfG(MU}Qqktrb#;%43<``B|I-n04F-||KtgImt2j%zUu*By?h7v5MU8yrdeT$SzB-BOQO4l4ph}Mt z8j-6ZF@T_WJ~f7(29u1S4WXJL6QvX;=#!f>1}SF(pCsZqW42HYtP6F75y0?IlSWx`1Q26Ds0<-s%#}XQrQn7|jWr&3uUUN(?w+Su z^P+QFTpcvGlk5qUKZ9sdK!X@mj`6i$E04xWzToGFl^jJcYFi|iF#1VeQ+DymoQ28! z1PvC)fv(U?4PK;KZR3S`XT zpc~v-(PL=AOI9d zMbR51=zt}g3;3yQFq_LJx!Y%LZ?6D8%E6i(RyHc?Z6+K3=|vU3wiCKtpVSb=`!+|q zcF&vX(YtD7J6q31jd)KsV2Lc8HAksyp!SVcTNPo58O^dfDw~aLNKmX>{l&}1kJI23 zBRig|+Lh^A5H-b(?57&yRnR3)M7Yl<2?TtNj?_xx!UYdQJyEuBVg(yWH$bTcObSdH zUS%tUX#rZ?wghSK9`Xu^1|zw`pd{wqD09!Zrk*o#+#<7UhX!9{E12Z)++SY02dty& zu+eO@7VOeW_21P05DgAU|@FL+Z`4<+$FA0meM6 zVkI*d+``kEz0VgS!;hh#_;jDww7nx1tKtS#EtuFdC6@;gK>-it=ko}lJ?H@hcLktJ zkxN!=S;jbv0g4>;-1paqsK}9{sFRCqRKmGM@94?h;5#UKMybr13p)?~^%L5;R?xtY z7A=U=u+pO$ZVQ7mn{GaICIWMW6&EE>f(VBEeHNEg}hpQ!T+w(2_>h1=TJFh0qzH z@H^b>+i;z31@ZP6%ek=upK9ls=sIB$?bVL59M03OfaUxT?{yLtfP3|l9j4uD#Xq{& z23}A(3x6k-z@!o;9>4j_du0v$_He^=GyE1<4!3;<#^gV=BlK8wDu1Feb?n3Un$exv zqJ;ZIqT1yBmV(m}(`U9Vmf0*afP7irz-MdQ$=jXQUT1AwHhIH%l*tz64|vx5g=>r4 zSyLl`?$>+je!U-czwi?A_T|F>nM-KoGsZ%LHWsEg8nyD7?JGR34TduY&eZ)DIH!;v zv-U~O=nc9Wgy0ptuzh_wN{?h%0{uuk#_dxTvflT%(4;HsP=riBDwQPDdyb-g z^sBuuyq};0n6fzH!VyMC1k7Pc9x;H`uztiwuizsZQCvQJ^wO)S8xiz&7tK>vu<4kf zmkc(vkJqP7-IEg-^VSs=rDTXjsqS3dE#+F1?r1uimxhNYzCQ8Ik7a}{zL#IJKjULN z^z6dy#C1;LQ5kFFrbi#uUp4Wk-?z5jq5f$L+bl$mK0|hn?L@)wcjzrn-8N$LDH?Lb zXk$ing%fxpan_D!mm$KmXYU#P+YbKh7CfPZC$yXKgpR2vwBV7<5?)2*^EgNZNd~jU zjxG8RA_z~AcSns9?%Iu1N_W)EZ1Y%cCHp*kz5j#xo%-ifAI$HPeyjf1_-hN@6GZ22u-C0R=KS=1g^re zd<@=xN??g+N6u-obGwX~ia>N2;zWlb1+d%Y{0Px`6R%+*0>>J~U`uwe-W2C_6wh%L zD?3U}%kim-t8D#Pk(>)4)AVh#Il01Zh{sx&7Dm& zrdrUz1=2zu2d4#%V&t@d89)IAy%!65YHBHix-#T5nVeht{`0<3T2)6o=OTl9Zm0I) zzW?mo;xw6jY{;Q_OnSRz{a*D_wMD&j?|L&zQ+vb$U%2^Ux4dQTK96t~nm_#MPdCYq!X54^*SWK9gWxf7cUF+_l~;n4}q#$trx^;C~Fu6q55maPk#gVu>X((up>EwU&xxHqTIvg(oz_e%G9-7*F>iD!Rx_1c1VQK2# zbCcLEjB8}{fmsRqX=3W;OL7Fy0$VOnqrGc)tvQ&dX7+zi1vKsVPu}yXeWz|%ICXT| z<`fPeEe<*EhYmJJw}59@A~>f|(YINeGNz%U11K0nfHKUuE;Kc6p5V}3l;-Y9pt>!_ z;4Ii3WnV4uK9loK^O0+2+LRzlqvjaoS`{k2WuZXo(kaYEszat%w4GFpOaRs(oq`+c z^h9$Fedw}3_?nd|_F=n++12OXaCj8^t8CqmjeMWQDo9&Pe^h__pu=oAJS_vA**HA! z8+L_RUwhDwp#2+czMXmONNH7=@yF_8ui6!h+3_H&{$pvY#4HvdH%`-2LqLjB=#BCh zL7av8OAHYw^%G3vk{2Y8BXAaTkmu=BFUehMllmVX?TlH*vJqK!IRzvjP8_d}M$Vi} ze@(hg;73&!D5wOZxRZRow4G=*d|&z=&$!HhpN&tBB-PB|Nqo*E7lN1&Q@Ote1Uyj| zbh5G`WgZ&SZBu-uTro8=zgcKYink|sCik`PKHR=PnH;|YANJFSeIK~l4iqdDc0fZt zgpG+qYXxM|OuWQy-ukKKAO{37QzBKXD zY3)n#4cKw^sa!>x>ROCLgEW#038PMnYMcox%qXO5dG#sL)J`B38iWcUTQ zqRnBh+tIybPUd|gI>cx16kD1mfKIzBOyH81_leLo+M822PFrEl%=RcNXAM#T0sUyEq6 z9X89XFj}Ly5HwPHFcw3KQUeg}L;)2UougJ^IGLX<&CoxnY5;|;kjXb(y% zhvyed3+2cGuz>M~@=1iz(zJ-_(o8cvX)B8z?+>FdJ0cIyR&l-P9hQ@Sx zBwUJV@gRz*({Y@p;uQB*>OVBpq;2d()PguOGl&P#%)pp~gM;pL`WPfaTHGm(!8*cG zE8x^b`VpxGP4wCAuSiBH%jv_W44SlnfIxYS>{*aa-IE*yR!JQ$w-gsX)JgD@Lv$N58Fw$u3zJDpEovkoUe z5T1;CoqFEdQ+>jt)r?4*PWA~#E6D)lC!VEGbRKT7@_HNO`{a2wMng3_tz%e_cZlG- zTM60hX*j7ObuL%+-4lPBe(S86_X*B&ORhS0JeW$?R^ps#>wyzkqdwj%p0TpWPNUgF zh#+(ji7qfJ( z5`JS2>GWQC!s0XsA9T_e{CKf#yo?RJUP#*A(^_*SbflwC%bTR z^&z@eF6SGO$O_s^H+5$1+4LQ_q#-b-hM~dBMH!!7B*sqfLL~h2bpG*z-F=IzMi@q@ z$ghsNXS>x=|MX$GmvZH`bJdA>JYKC9LLoL<{eSi>QChRKXGwsC_AFB3%x5{ZG+?#; zh-Xp!P*!HUS;4QkY9@wj{=u_M^u?>$Xegu>s^jthvuBB5X8mtH3rxd2YMXJDD1Ao1 zOo!Am9h&>(O`i53v^-B@Z;zkecM5XlX#JzX_BYI@A!3s{kL+E9<2Qg?j6)G~*`kSa z1;Eu`LritRqY(Kx(T3|v8wyb320BVf#SyjSTFkQ zdcD(A5vq3V|8AE3OortdkV0xe6xsKk7PAm|G0CdNgZRnptt zfe?yHx&Nd-+Pe{jCxlDw?v5FXV~<1m3Dfy;j{Om!dQnkXFN(tOZgAP}2`2k(Hs@}u z^NNp)dPzc&c*$sVJYw@=OEgH>BQWV#V7i}b({Z$EFV#xn*a+BK8K636k|@@!xuSK!G&c>!(_zWL!D}?6c|}p4`l`XVT~i^fspys4e*Q*k_Koj+ zlB(V_h2i@)Ays<0fe zGQli`6B`!&LUG(^cdIua<=1@@mry&kpkB~V;QQKycA{JkE4T{5sfD)K%sH#IG!CRo z6VPBerwCgvgEpuhZm!Z6Jb!^wUZsxWc`mAqwOlD%XU?POtix5D5AT*zYDTC@SF)}~ zn=D(412bJm^i?fw1P&}Fl~NQmhclWn>M+k{&^QIk0LTLoRefNV=TDmERe(}Ywih>&tCE8)ZRy4(nc1~X6|R>acH3`pC>=Zd zx)p=Vw$$Ww*hPQ7XLa4it6X)-g-w~(_M!ZoWbiwWD2`j~?%CH4_E$)*FWzDi1go$) zXj*knI2)_=du1gaYN+k#T2Oo2kE)K?-HM}Vh(+sUgW@^pWTHh>;+6hY{lSKGDDH+X zm`U}_Iyd{NUj?6WC~o^R=7z>x0OW}$$LS3ir#;~RDg$T_4F*7CPB;nHG7o3g3(4F$ z(3>G5L8vy9{);vgGoA#SA<{CnIprYm`A>QQ9n9!sK2p?UX;{>5`|g`Q>r+?KpkWVp z{PdIb1ezJ~$BgTXwEIc_&%W>kOE@eh@3&;L`h!uku>OGEy=s}_*y>O&b=z;Iv#>dH zIe)wRh^MSRC@YGM?Rpi-eT=jO@dTc04)WSGCo0@rHMwFZNQyv>iLsR{_7fP4=T|o$ zqv$Y-(^mtV)J!w94rmFQg3WdGskwkpZCUPAsB6YZvLj+i768}yfnE0@2|w?q@GmW* zlTRLxYL%YI#c(ns&vE*|prX?IF=>H&kMiutnb>F>?a-Q%X=l>rB5_P@qeBA}QON0%&@&I22 zQF9~n>?Qqk7Oz~tbtZ*9^<&R&X<4>>!^X`Lr8XKf&t8yQx?<@3O{io+tu^8dM3JhT zEjx_V8V;&W5{74x6?bJyyU`$sw0zU}wm}PT%5rhhXvuGRuefUTt21AGt6Gb*tUwfE z9ikBDTM>nrJNngc_D>xd!jV24*+fUS(ljocQwEpEUd>p)6a z8RtyfadC&PAj|$(ZBO6aMXT0bc=5LFJ1^2=H>X}%p+Pb@Wq%+VtF6nm%^NAjNocOXOk{Y7Ad=(jvYl>Cfdwx6k7TIf^@;rVBEwmUM~edE?X?p+Ff+YCu1Y@_VdS#fky(y&;R%d zyjxwu;UB@fb4BF0@jom?rP-ywyFES^{*Kq9zh8=vON7G(hXPL!UfH=$yDgwTz_tan zR~ssKJ;@JgCrmsL2ngHo>aYmglsAV#C#wF8LC=yHs|T+ref~Lpz^(?;wLvzme*v;Z@E(5s(`p|h9N+1T4%{rBmHZP)sSZOWg)9~6~84B1KI!bj&H5kdy zUC7fB!67mSs>M8DfQ$X8Pv8RD&3pSBInxV?H;)+8G&_C>pXR){{htmeUU zuGu!zpxk%G<#uCk$>j%@JvdnRpfcahET+y>fAg%S<|=np!@TZuv*(zkuGs8`u2e#) zNOWfh>Sr0B&9Q@wRrf!}*!Vlbe~ufgyUw5el||u0x6iw1ZpNoS@c|o08N9DBQL@Rw zSW`IBo~W=Hga@Gvn;ib?rf@VD^;-;#Y5pn*QHW9EqSbkMa1j1-xac&$I&)EWgda5$ zA|OJ+-}?wuAU5q_4>%l$soufF@tXDz@Yk;YF8gPPL*3>;>J|BzroK1IS=y=hiL(se zFrY9HkAnG&Bp)o~2+5hbQf=0gw+?xzFpEKW8>4;&5QV7MYCEuvFx&!cSAZfBaqHQA zqySn;OTm)AtL*XKN3JMSK$a#TPA1FP@baW0r~vXJ70ZSO@!REF5V+hqc~AvGsT9MmJ> z>NxywS)y#3KUSX48JgxBF970g6Y$95uupO%xNUN9G-;?keTp!CQwq9J;#74rEsbwTW zAv8-ir12EJRP7e|9i={`tUX&5tEp}3nLj{XH`i6_C}neQK_I&&yFhscR6Jh4MKG_hmHj=S&PF@B!lQp{$NiI@Fh z&BU7~#R@F(-aks){v{*pJuHSwVH6)bqtA8k>B>pcTac4oiz1v6$jIQ>NT`autwh>T z1j_}|-;nD7_aAZ_kSB+1hIXiS(>u9c>tqa&RJPonr_O8#XrP$aC>r7rvSa0W{j`4` z6u&b&*-=c%#br=ZLe$M+Xd@|kB$?t}TneLe*+?jy{7@&Oh!{G#ADMK|Rz}k`nO?1v z=ebH<=uTZ}J_Um6Gt=FB|*%tUO_Wp5VdS^@2*Bm24^Sc8q@@sTgOlI4l2r_0kVEjOWVEF?I zA7=Ct>Rn!9_2lG*>?;TBI!P*`%H?uSs<0gC#Uq8~IsV#*&ZN?-Q}b?tmRFSr3DVT` z`pA~n6nV{)Ksll?ohc|Wwd240{10Z=)+yVNLQIgF!}L1AUy1Gn>VJV=QJ)d7C-8dK z*>yD?<);f8JeIZvZO<8-G`Ie5v^Ovk<+{!V)ZTqg7Vn@ z-?#UvwnV$~M$_7OdfT50`~BZ&Z!XKEAMo|79a#QVx>3#`=p`x{l2&l`2sX4N&`%(i zM1chOg}SrlLNB#yf!3-{40jCtlf#{0gj%5}c*&62QtqBb=XUqNR-M&No3l`}xY&(# z2*)EDM@SF>a*{HOT_bh%9Scdu%u>p!4EHE?yNp8&)$XOXLg}}stdIkQvvps6Opua@C9kC%;!;s^s<|W4c$(U z+vE0DXKT8v0;xp}F+;%P*t29+Z$o6!%=Vcb$=!1n3Duz>ihw}X;xRg%p#XD5Yrh#f z!rB6N6G6T%H#*%5C)>?A6>g<=L%3CIH*PCUi^IWU=OYW~NS;Z~8?8%(h%oX$BefL| zmI!{H-;8hy-1zj5TI?S;S}GX7cJb;@&vq?J++651r=2cWljzK|OP8qst~WVEMe#7R zGnyG_3c5XEtI=!@D$)MtZGnme8>N=lnr?Wq)zk{%dSvCY`e3M9STtvMvIDKNDAF+V z+$DP)o`4})vp5x~>aNLFd)=PyhIC!BTZyhN>=6WNHXRh$ld;V@+g!38mRFRzCO6Ptt*hGo|zIfo3d?0l!RS8r_gW-(oZvUg${dLN#c)p|fc~|js!p%i}Uv@zRdc z!^Df+)pPg#_@)mBYTa5f^9Yawl-)_=H5H8*AqWiQ8i~8&E;qn;KEF5D>W&-JZdcBw z0SvGaZ{>(#d%mvHw6)+SaH$4O&gWWNVy7Ye{>5XNRsV4z_3`>y7LVI9yZ%=7Kh!_p z+JH~X-WXh<@=3C$T;As|9{~8dS)hwWXvZgUC zi>$LUl?rv=KyQ_ucYV60<W2YwEnM2V1;#wTbz1^TS!0{XD6J8f(}d^$*pu z5Mc87%ImvAsZ_Xg(X3pM*}PVBrNgJxq(V=`aycCsLQz}q4_uFn0<$m+^Lj1j^BKM8VZJkZZjNo$wf0KTUG6M$1JbcHkP?QR>Cq!K7~Crf!Ok z5|%krOpT4q?&!s=!~E@#sjfU~YLBd5*M?n-#)|9Y(pA`X?byiW*IqR>c}weeLU3Hp zi3h<{QoKHkIXiO4O*i9&En`%f?G8*~x%36(N`Hp44?cibxpWBU9?lZWbqQM(0%&_{ zndY~T$;F1zQrz)gF)^wGXGx-gydUi37Ef@hA)-zs(^k{`M1rVN%64J;ts@ejc{IVV zy$Ta?`_Qd4t?$@^S$m+Pbkof^>Na9(KI1Cg{W$5Wk9-=tIxfLUU-|+ru4j;izAbK%4BPr(Y9ty zRY(!pn)}14zB$QoI60>;6+Um(sts!z!Ioq;yV|n#Yu5Pu>9oITEfbYc)!MbKStM6H zQ<%M8Jf{ECR!AL42I@ zoRP-x7v@}W+lB8RXbvQ2wy`(WkJWj_2)jsF_RL^1mrD*lvlMTs-nnysGH1^FCuZdH zp@EkNg6(a;oOp#b`ucv_Cw`6HrhYOi`0Cj{)t>K32F71KCz)#vh0M+NoFy@5^@aGD zOP&*M>hEtN5Ib@}ua*7_yaQ=sxyrk<>60-C1H~1RZEP|E!Msy}Tc^h|!PsYQRc1-Lf~Kb<;+>67 z**kt7oA{K+5+Rqq33!?b+Fu z79S!fc{fG?g3N@f^NNNfg3h$JEzRKc(T+?<1O3hMz(%!UG6hC%%W)yMwCR;h|~4_k$x(dv7!gRwW+GS#m>#a6RFs$T}I z-l_gj{hhdu^{T&9e>AcEq9GO*7!%ar4_&1GFPzVW+gY>v7xkaS{j5^`C-twmPb0+& zr2SZPtkA-VOCy9S_7VQYkstd|R*x6Q$&mn_khCWLMKGtmIZ`TX8qN z0y)o*dOfrU39C5j_tCb`f9hy7LVF@nItm^OY{%mKr~oh!zFQ9;_*ZO>Kt(7_sKlbt z#S2g%gUE%U6AVFq$6cI;jA9r$RK?4=K**5JwG$Zoe+*s91?Z_`G!8apWV;IL$eOC z>kmGAP)OXMK5&EZn^hCft`z;jiFrX9E0lvjJX!mX@W8#Or#p$22N)A!G~^W}5Luf9 z2$SYbTqA%xorEwVmzI)|5Fa3pdk_PI5}06(d7g?wNT)PaQUP^;gR5LU1Db9}F{BhL zu&!0m`WT9(IZ1nqtCVUun}|3Ga*vbm1-=#?6u@|b8>(cdPG;#-zy~tK;JtjQ{>r77 zU%vE%+m>Gb#duKPSdqBJGyK{OFRO2OKEYx~4-6kYI(&dVP*eHk${PMM=hOw4UlWYS zgTk%7{ri7@9dnNM_nO~*=9zb&nMtQU9n7Dx?mHYp#zius83JHXRA&DZ)LTPrV8DY zFGD?}E9rrSN9OZnO^WH6&+Z&5O6HgtIujIo;f8I3W!na|^%dx*XXFjD?BT=0h}y`q z>JRYyFse@sO4m!D!(8sx4Z=HdAz@%!xn{RDQ#>DcvMp2Ge5|ycZlsJPYj zY{HkSZCt+M0-7@CgQkyr9pB#6yKrYXl^DpIu4ql`za4C>s&ZPJl;rBBMV=o26KbHU zCG6Ut3hlO4)`nWl+3#Na^!OvP`QCdCv37Itg1!OIjEv|qd19^cA^m}H+-$52n@sV_ zP~2?FG#f3kiAUBBn@kU^+qtJ9e09e%mtyNm^)8CID5!gKPB%f5U#S}c-yiCFu7Eq1 z*Fc#M<$DJTq8ux38Y^xBy`nZMcVez~Yyz@>X3wJa7i^_IFuO_#bPcMStiT*zbe092 zp|L3}?$=X`E0kshf+o-+3cyz3f7;v9mP$kAG`g|f2KR@bx)81pkcd$U1>*Flx3+Xk z%6QtK*PDC^12Y*E`}Pqg9t~7i>t{sFuKL~otp4Su4XOIv)j?%lr&k!3C8kdy@q_+5zL$_% zJTdE_C%o3~NqL#|2d%z*v^QjnIXyEbdLC?F8fx0?p0z_UrYrP2b{K@m-2o$h9)qJ=Mz=&%VUA?!b1%-_}^)gs3>-+LnM9NC$si9EeGZ;3E46Xa^mU znv~7l<79?6oUdgusE(*Dt zl_DdRA8g3o2R?@{5;Tsb2RN^~zflNq_aCzs_*ELlxOvTiZ?nl}}D_Ef7~fqWpLs)Z0Re zJuEmmOUX?nbXq3k`V`Wqj0IGTg#@I$Q-!oBIft2_b`=}x=F7nwWTgeUe(IZ# zSt~1>XY@}W48k|miaC6XSG!=598TYwYZYC8W($YR_IZj=r53v9F9bn(oHZvygaG{^ z_n<)c>^}W5gnjtwO^#DPjYq}}(QoOPXc(RPt;zLi>bGcp;=C$a=n?TqU{N>@APwjh z;Fom6XFLNGWk3l}H7QDm(*vUo`8bs>MSrERRxj2Sq1m9qRW(((LS_JFR45Ao5PdSi zWe$p24w;04gW^0uL6$rirz5sdnhKks))i<@%Q_jDNHhka{K+sT8<^hx7Zd;RHas6=f+Eue=E?t^? z;J$l=FNzBn6q(3aWmRumTT-~@_XqE;s*1&CB?^7H4VPZ`?a;n`FGV8J7|xM|-`#i7 z&RS6hVUB+0!iBwUiWSdJ`kjvR*^n(jdUg#g0hv!peU?;a1778l2@@04x&U!Ivc#@{ zF@;oiq{k#(?#XxI3lpn^FDw*qAHPDpJtQN1p(jr97)tR?9uJ=Pp3MlydN3a-?dhp8TkR3KAoM zSy;_vUqyBQBAhdsKgk&lz}D+Vbb~k!swp24>k?;1@FES6&mRnG!ui3)h#pL}66$ZN z!u^zfMlcm}`V(X-mg=sr>+V|B{g>g3<{52v@I)A=Zmlz-F5Zd{LoVN<+|?fI&~R73xij@oWId-G}vyctGmf& zFxqd-zkJ2SY~jI)txbjB(G|bbUJK&)=<6o`jla&mT;J7I&%Z>cGwZDAkN40mPp~`K zBkXBV@w~`hVZUK-L4?r~+=TJTjo4PiawtI>D>`s97|xVZO|c&y*uep`7uN6|5yKga z2rkWG;U=w2I~Oat(E$WL@bnIN5s*MO`NcfKfhi#2>l_lfpd3)hpsP_*30;9tdWPSn z6mI-87!f3CgNlIrf)0TnqHn|Z`N`7eKimU&T1&b|Oo45XuE!cjXYg<0Uk#;$KH%Bf z=uVJ)*ot2?_&xC^W=P{`3a3Lg#Bn3|8B=ZkEZ7=}&>8=@PQxFR-wpQRP&!3R4mhBF zeh)nb#conG;T=$Ea0Y&c_Tc;S^x$GQC_+=(rBH^lMnf*!O26xG$!Bx0WDMG4rSkYz zzo(bAG~r9y(3bR&;7r74v=Ee5qrr_whk`_ps<&EV40+_t;#lRX3V2&1xflw}2{vT5 z#6&UXxjr7)GRt3IFDf3()ie4Vt$N51rOIeZ`cj@t95%hsGMJv#x+Bps2Nm~XoAYa& zP_e9*P^c}YfP2It_)>}tPkH-!HC;0YT4z|(k!VzOFo!cJhfpF%Fb4d|V9J!*7I1Af(InOAJx`itvAW7s=V(gn?FJ@#EKOJ4+~Bv` z1m-gvyrN$aT!PP;V0}xxdA$)?J4R+^mId)Zbam94u68o3*{j&?%n_^b>Gd9K+Sz3= z8GIGVFj%dir@JbA@=k@BYb!(+3x_HNW_B4Z2EEnjV$2h8c^H1klxB9x;_z8QzD!=I z3q>TeRT9lM&w#lhSkY!-Os=SNrDD;L&n^fCgVksk!{@a5ymda2RaM#*|2Zas8BE@Y zUNGn-z)F!kBoL3JUJ^y4@y`O%H$*G`8O+sgNwS*t(rPfg8uZR>f&i`)!D15~Ac{oH z&ctMgAlXHy*(_mg*z2fMfIJh-E`wy248mpp)mC{%GGVsqElMml5cNo+-C1V{*nC!J zzXPtB3X>t?5Dg72v(m1ww=9U61G2BOX@=t6+Sc#6t7Z4M&%3tX%PK>4kMwWcd+GMB zAFXblS0f0qWEEp3x2;l2I#%T8?wd7FiZ;h9lw_pBYF#kTR-LN~S)GEd!tX=z0lT7i zF9^v-#a!t_Lt+SpBNdEw+tIK#mvHf{3v3a+{}!{esYY~mH8%zNO|nUl%*GbkIX`7G zG*$HZE1CQ9h=#KnaUw@?^c%VXVuQ$QsXaKFqbS z4}cJZgO_O7D2E-?p(wsesx&gIPO?KR$C?S37G+W`2lz$fZwXXIlC>>u?S=kz=W}Hx zoW?SVOju|A@=Y7CrƓCICn66&u!PHl6pn& zji|4vhmc&@#AaM|-EE_z&;9A9>*_WMg4}lR{#)aJhu2WN@v=GB%`;!Hd)6DT9{l;^ zv;I2%#-WzK;HwSZ#jEdJtiPUp;b*})ZQWkuW2(Ki&fv$;5MjPbg78L}*(wSh1M2u& zuP^+=t=-gTr)-{T-3Hwu&N>hW>p+~eM?bhViAmWwRyJ~&rBNh{ZX?%p26+C`fXrDp zGv$FWT`>SCS#dz4e+4+hhUy{Q6s)0Q#6#%Xf$)?abVPLfjRopAfYcq(ZQ`JNC6lk; zHKLQl#K}`Mk~u(1De0p4)B6BM-(i=MNL3E8Gif74citE+{L7??UDy4Kd2wj2X@uppBnhsuG#6%a~C&n zs|wdC&b#aTYZ48?Ovmo0hx&(i^`#c9>OOd$FEThQx3sw~Tba%2b&vdZP~P=5^@F)6Hj$JVvEhxUU|zOBMuqq7UqpS9+x;l2KDrpFJr-hwDYwN_(mizJY zp5tnJgJWFian?DnayTYZE{|SNZ0dFa7vmdR)pyiOU#zRWx~8kMPTdwZ>uZIbB92WQ zZN>2eb&ji?&T*mF>AVWxFp+XH!Nwk#=F`(SMBsCTwH=2OpNoik%5XZJy@6b?5sW#_ z=!V6OxCPhhF*rE+1^O12lpAAVdOrCi@hW zot0uiZc*y!Rl|E~_`|9B0|%jWoL8n^q@&z4iWPNcitu^>q7MJDk}Ze0<0IrF#|Nhu ziKQ`75Od9uCqIu!Gv-DJZsn1d)^;Kq$CJSnBZ`qMHx+5Xi*YYiAVyg1ltBzlz9sK& zMG_7)_Nn5LGSdxQ$c8T*K=rlunq1}Y8s9O4$!vDh;ilPu(3sz8{9R=ZbX|vU{OXN2 zew7`s46xyyJJsPpCF-KGl{cvuIF(>ZeY?S6sf{K$pbd&nU`gY;p>4F<4(fYD>gK~o43J_)EV?H-mM%z|$_|!D}rEkGdbrAYuO-(q)f}lEp3~7L^{4$%J8+y6~jl3EGR!Bt`^nVzO+}@Cg950>ZY|s+4|5jHL>kJeFNS*;4g@W3KZq=e}GpGWnUUGvcP|*EL2D1R+n1U0sRox4UA6Y$ z`}baXNo}>mXxgCOeEieu?|*R3Fbdq>a5odzwzYpn{oavnubdEuKgIm7?lTCrwbe_0 zc-g)0AIvG$jvD3rf4k-fEd1#kP!#vtOVFZiUm1P8Tm3TnQKWi!h<|FFY4z~>Omd}p zWXco<-wnyih73KJu2ct7$aTD%DB_Qwf=7 z#QZGI1z9x6q2YPtG>Ax_r`Zw39GNOUMRM0;q*axO(ox*+YK_XZ%dxS>`gOrEmL?I1I3uhfuY(7bnO`aB~T-jD%6SfNm#cYuT zhtW{cZC700)~_yW^@JQo0d|YQM}|p$il|o~pr)Spm@!a66e%uUF!i%{z4I`ap#xe$lp1bc?_BNe0kvnDwI7 zo81|%>^`?SEHP7}bK5}8Y`ZOH7JP1NP+&I6RUPeYS(CE%#4^=pK_9GN+q3OzixWvQ z_$Poc%u;wg(z>O(w#GXXH*w>6k~39Rp_e>1n|IZmjEPBs_?&uYg+X$Q`r282fq`3CwZA4t&Azje4thtV=R(Zp^p7z;GR*=3PPzSFWd9`p_I)#hi!6N5V z9-f}bZJibg^~Ay70E1DzG?V%9j$IoY8~=6JLZyExG^2QI ziT7n!l>?q3v)xh2zHh4zU;Ee9t8-~{wk>E1Cwh9GULBUCV4(ZT6%}q%y&q5NIkz`Z z$8Ncd>4%^C*n+|*9X1R!p=)OEWp)P&R4Sd@3;lQ9xUHve@3YCFd*?d*e?F+asn0#X zas9eb<cYV@`Q4}Q_o zQS`V`FTe0}JZu{cP zFR_6UmU!ams}sWh7ucL*RcdHlJ%95r)T>s%d-vV%uHK-xvp-ZFQ(t&Ned8CK*&{s8 z0pII2@V)LNoB&25r1_>yaV=<#p~bP{Ma0d3oQu-MxXl9A#o}@d%C%;wwuY7KFT?hI2QqS{~i=-COqbRXX2@ADY+R;z;ENF78f9 z1`j}1FvT62wsSXL-!G(RE?K!^QJ2f*&l&;?2lrln=j_P28@6rUa89@Ex>SASNAA~C z73}9PIuw(=VZr|88Bcu4qJ|p}Gf@y-mF){In;UkyYrA@To1OAC0|w8W1-mc(M1RG= z;CbgRpW6mB?AoBw-`m<*E%=ulST?gtfw&Owxz*_JYDx*st%H}(jEIh^3XA3Uz~NyS zK&|#7*ZkiBJFtOv)&q?u&3VPZ9*s$?W07{8%SbAfRh05QO@5ICF(n$rm_7G+lIIbPqt0eRjLU558H;5nIfKZdSnyI z3j3(GK?*Q62pi&DFEENJG5DjKW=ohZq6V=~HWKTdCeJjzHS;0fxar)CWZi2ved!cG zsK&LHJS&LmOy0Puht+~t>C?FkbyI9`#2hyYCODUe^f8Z1EliJ;Pos^SI6-u5Hk5oB z4yJ6ZK=bnSzOL4tH#H9se}$Pp*{d*wPmXv5wJA#wDdv-7KZ>zmSpgR&jeXgRC;^TB z5F)Ug;LonOKg>lveYitAr4mQ6kLbWV&(1OZZS|kuKX~wcR)bg7G({!N?IxXJJ?wZd zDrtUYQeRi7h$+!=BZ3KtdW?f0LXb3hz8sN(tC{MkRYY0ZMB9J!JHH_$c`*uVm^N8o zjN%ME^6HV2pVGgFk0Y^Y3QQ_VdIf>KuMP0>Bhgqgg$?{iiS|At>}64p@m=LADa344 z%8|Zq)H&-M1ge8zz>1>hN^jy!-C1Ns%`d$ZT(61gt}d3 z->Gr^{@a}=P-wTt^_E%_NQ$g*l-2dz*!G*7Q6lPwU+sT&j8(5i{na4)-k_?lK3M7qGL}Q%1sGiel)RV8QGFzTmPr`I2!DbQKuh$Axw~m$O zY9mm2@|)k$av4Oq7#}V5I*EhmtIBu3`C~pXopLcaS~6g7WK<7~z=&Rqg8;|?iXuY< z8%}vdb_Ov*E9jN>NBMr78RKX6f~BYzoJ1o%^ePkpO(3eCiXadR@!GncUOtYey|8CR zgEJV3*Pc8=P+C&cT48OqYLE)RJh44hunBe)WerK*sSQ^f(4mBZ$2b=B#BSE=(k}G> z@fV`OVz&GLs5lOT@n)|x=vVhnzP-rweDBxP7r%jn+L^-8u-`Oq{cL8i$h7r7c{Gn+ zE_vwF)$6A=)C$mjf1QqfLw)gU$aLRKS8(|UFeLRI`E2`idnR)<;j)Ec-=+! zL{G0`@xuod?Z+aguK5t7^oP!dTX_gT9gamd4MUHkYGCt$99^p;w+B3(@aDr202p#v z6=!~w-7)$+i#tJORv7-wCHggW*UM|JX>7b^jeLFG2Txq`nPDuU#?Jq$eE4$lonOAy zu{#t-R_vO_q4n#Bn$AU@tlp8y4kXxj$IX{NEbUy{-@mj~XbHH4ia<1j1bLt6%rzt$ za!%1_EEF=)K!xzrLaJ^CXqw<75sU0clxC~9M=QL81@%bPjC*HPC3a8B&tcdd%aD_= zLl2WPlk0tOJS0zT5^RY?zLU8pH_5Sy9e93}Ry?&ylZd{c7Z@?xOuCa|zTx3k(~9oQ zA}8`r+Dt3EGK-z9k9vLGE4v#W-u_s?*Ry>6)9uC;v_G$YFRz`O|5T-S=F)t_r?-DP z=<8l4T(q6FZ5PA%mexlC{_d4+jfb}%4*0uPj`hL zYgJq0<2xRsGuj$I*J>V|Ntd#YHq+9D>UXxYuG4f6C;WeNfr34SY6trerWMUDux@Cx zE1jk6QBtZvvx3<(pN3FBfXO43kyLVQa;%O zNk#rb!)d5i)PfKTHSN{W*vqY(ZrarJjf}0%GBcSunij*3ush)Ocmr;1iOd@B&DV~P z*0fJoyI7t(+mFOOzWs?gb0SwqOexbH$#W_qdxC-+k#CD6S@7l-zU)6IR@>Q*_TZQ- z&O<`7D5={BO!lR^Yjovp$rZ8Li&vh1F>g*7 zC~b)d0+ce~6cKoeWyOd0HhfNDzd=MaCndPs5{P2@5rBkm8Qv23S41Odf1s%#G6p9K z`CY1+`{XVpUx(n3!vIaXDN~hJfji%3i`YeM(c5?4`L=pQy;nW*_64{8fz4#+v6+9k z_0~VA-%>xXe(Mj}KDO(nHxF!Q%fEdOvu?NK7wGjigMt~@D>+Re{UY^GO?7UE+da1M zfX!tPowmWNo>bqM+-HoiM_&Ik)9=52H~Z_qcNsSRh<)#jAH~lL&+wnZk52n}-{%gE zyEn4SgsMzNqtT=iG``X zA6zYbX5wmt)UaLn{8KyYl3)JTk5zadCiN)Z?+UVO=IACX`yxrp0}LJ(8H|5mAx*qw ztVzNW0yrL3fCI#oSo5tW=#Nh5m3j&Cbdm_N1iv0lGM{>d zt^egO)jzVI_4c`2|ZrJnK zgphtZdfhqdHG7uN)occxk>r*cb+BgWuAa;$uN*5!leI`((vr);eFf?(Xt6x5^<(Aw8d^E)sc@n*Tgu{j6Mz*0 zc?zAwJLLt4x?0Vkm(s$eoE(Qr1x%*wOuo~)SsOO|SGe}wVR2L(9j*<(Z=qz7F7R1S z{p$+X!Z<=<2nqX!)nWc&Tvvb?*G<4$I`xMd-&1{Oh6VwzbQ?G>2}#|^9U8>c57Q!Y z3>Bn6)k&WH2(J$tAxAYVjFLYBFTP9hMTwtZS88m*eDp-)C;`|}w8K_NVlkAI5ofwC z!>6N6!P6<1017rjA;#1(x}ho)`72TlX*EPFjJYM0`bfHceAfE(Lx7v=hkU*d4r62D z^7?i|Z)c}qF*`@$-xWGLXIWRPBkWI#(Bo_I2|bGbY4w=;n0oAK@sCX=};*h3d22Ii#Ha~xLu=U}DOoPpF2uiZBB2Rh(_ZJF~rLwN2U!UFQc2^pNUkkf9@sg8#+ z3?@}fulNb69Z4^670?h-k*0)EZWS>o0y-j`bT(DJiyHSbb8L(~Gvw-D)mJvX+{bR- zzi&oU&h%+Hp0>rFoI3yCkMH|SNy0-}GgfxymaJP`Xbg7QicK|glQVx!@0^0QwzTp^ zd5JAy`EeC%J*h3>nWtI~WVTvTs#20O6pvrsdbFV0v#|1DTm3*?sV6RBTFvaCnTuPu z56oF!y18gcX^J^KZ)rtXc0!gT(~u1%yM&^4`5l>S*0kn1BZ}6PUa+&(aF=-Y2`1ZI=<;#5AmG5DknCuj<8gAY0Xe>7dK)U7Y3Jp6i`I<{fmC z8p%N+h>LQ2XOV)BH%wqG4+-RlV6^RJVk#{F=8=R#;Q?Zs$u|d$xp2(8(B$h!Xv>&) zi$rDY8uRWlk?@U-+V>Da3+^PKclRR(CZ?C;1Rg;-|KM)16;p#ppaC*lmom^#3w#a z19HwcKaiLcpIg~jbP=VOS?-T5kd<7ppDyGOnP4RP)U)u^aG16a;Vxjk3LXTpAPW+$ z70jU&d0o&Lvu?)5*mWA}b#c1d$?&fbK~iUplp`UbHt0L3`iw*_JU@31ug zZm^H>IejfHMa8XaLt^#K5A%nc^|2xPm9O#FRkUM;YYVFHll+l)D{ z1|;OLwOp8s)|q{c*tL0AScbz&$v_CEf+MN(7A>Ss)@>P1FMxlEVsEc`B+-?dNs&=B zG5WM5_Q^(foz{T$&mI+HrL;uzh$+qmSmPM8Yg7<QpB=hm~YHD;; zDy*^?}_BsvI=D4TVt*TFP7I3Z3|Ds|; zTEm0%fPx!C)M|BZuG&Z&(*F@re7;m}>UVg)so-GWB6z+qHV4ZhSeS7KL#d0jpC(nG zJh26cNCY(sNZ51Qtwf+nL>uh5i35Q7791=xRE%^J_)o6nO96^Q73eJS1TmnK2U9P= z3>91KD~69|Ukr4h(3Czcu}HHm-b{3b*kCY^Wl+J5NXemw|E{JHsly3WCu)!==71Xk z;ngu<45EaeGeWMArjc@{c72bt+&|FTG7w?2MwGP;9v_TMia5;P9Xv5`Ek(7JeP1lV z?riPfIGbU!7ilesjHsB^*E`Gq7h6PxZR?KN{r#=mciAE$t>=YDiv9d8>LF!2D4uND zUKx?@fJst~4XcDWNkv>fz$k;MZoudRH4MTYqQ-z}k7RrdNhp--s9vEv0(w}Yf(6~H zA;{LqVqXlH?Vx{s$wUWJb*Z575D+h!Pial&Ffi{#t%WggiBKD2UrcqScAcv$Vh@-d z5Uh%H;wB-6)tAjJoA|kR{E58?jQfVqDw6g-fgr0tJM0^0vzgBSHJPpO_4j=G`MnpH zly4?Wn2BRQ|MKk5n4!GH|7mJzX)3e&zZgFI)g*l!uw9RWoe^zgG237zg+-na0Yjl_ zQY4I6N|V^|5(X1&kzjC!N&%tx{oTFQ31%3+4JYh9r|#Z8e3ZS}zIVdok8R(3d+s@wPqkG$l=8%PJWQuoX@cbbQ0?Kk2xY&un0KG@%g}4At48R7Aaf1T%*`3&Q zs{qWO1Y8C!JX0p)nveM$@!0NQ@L`L>g(5LzWN1|tY_?2Ll}qz-cR9JVD4gpGdL9|Fy z8|Ru60lox-%lQ1<{CN0rhlM2!!zgZQxc=Av)90PXt{cN2cI5T`2f5w^LA36>H| z2CX>0L>r<&S;d-%Vd{fizDUBPBptc$cP>_#PqT~(>w{Xt%YlpvI`mVbNkHKsBps15 zwg0iimkP^w`g}VZYaV(jGBv-cDL<|IrQGVBUhhtu)ls-$$7Jl(&dC<1Ja2uJ86HjW zFJyLe+tA|iCj&9^nI+3quOV{rP@7CAOZi5t9s^0R2Z(N$%AS$^O7=(DUuA!neJF#q z7@5o^Cgou_B}leON-dbH#I%XM0mw8Lt&Dhe7<*yE1qFp@Imu#-T%D^5 z3z~{Mt+@`hoo>Rzs92bqmy*pWc6`vdQWxgi3scNS_O3>6w?-%x4hS05w`k2_=HOF| z-4>E{D623_SDU76tw=9Swb^x{2Ddyp11K6Z_OD!1mF8SrHZ6PGv4r%p2v_FH23Qwq zRq5&&r9}=nb*9#sPdHp2*4Y=SviqZBOriWGU53GGTAr7^p&`qZ zTw57cr!mCFh8RNrwIeb;B`nSuuTRscdCIKulg6TSvpg+aX;vFmI<;1z4i2|u8F%%@ z=u%v#3$zhYjxfIMymC*BeO6T@fJlpTixl!A1``#=o(Xoy*BV2DbTB<(L9yn<5HtLv zC7Z$@IG&RbC%1)~EY|df@K}=^hRrch08CEi`e3^}YxP;t4Phv&ENy3VEu?+f{m8FaSA246NeM?1qa zBj#we8IcSOw`I%h2`)#5x!Bqitj(W)+tX?AU#hhhsP$H*T@$PVlak97Z2Yo0hN$qg zn1akAWrm(96oVfgRM@|L~=VX_Z+UvPE>cmycccsH6)<`uN9-a-R54M+#R#hXAG>@xdu zB?k|A=xd^L7Y4YvU>{2CNhR4P(wuMr)SU*ce|Posh2CU7UVznmu7&&74Blju-rY_rKtO_jg0A znKwn%OfSB6^Y+;AnN@YR_^jB-D4ioC+Bvi*A);Z{!oI?RTiG(EiCeeAow6WJZBQz$ z(fy6PJxYx}_$IB{ArDp=wI-ug9}%zD=#)B#76@PYS)oxm;as!mjvX6kc%pQgL|bxb zpl*<*)2-t>MjUjP43d3TJ+Qx$vIxus2urb)IQW!$AjKMlXdZ;Ap z5%YUAsKhqeR@p)sX}r(Nr5$k%9MlL+)kMHtd#8go+?M6t^on9f1U^qdGC*5Q~GY)@(SB|#6w77n!vKnU(ixg!{gmM)rZ$OITu ztb>#>LA1xIY%y|m7RNp_ld(#Ut*MyiK<%l?t(glZq;SXyv#1#O`x6rorW!z7KvGhO zqT$_=FPavTS!Fn^PfSegN{l{y^Wo!%qpR+lXX6~B zI5I@nrbkR~V-MeaB&z1Y`TBvG^R}*T3eT)D95y62qKqTQhmRaT66MLVH+62E*Vu2I z|BG5Z(ojJ3k(u>nrz;4Qs-#)kJ?N!!Lf=b@nnvH-5hytj&VSt3;q zV;we)4Vw;AYnq^y?7Iyy;Cxt5J`pL&rb|rT@=;%o`75t$^r6sCpE4m@Ka!l|g3lT2 z+fSs?rMJX1QdUw9k1{xZ>p*50xxT%U;ii%@Vui4CA;A&}$0pII48c5b*zB>Y^wx;z zq{8Mot9rIxa_x0D+;sCTm@K>|c#gV}R{jHfko(}J$UR{8=&j)qD?JU@U4P>Vk!zi0 zq-t92O}K%~=Y`fmp;_rp$HZYbgI7+97Op%P6ez7UgV2Ahd$45yivlwO<_7F2!DTJT zr9`MNs7WFTNrrww)8Z0t)ix;B~%f!naQ2D z>;$VBo)Zj7(b3@!W0Fpzh;%9%?yFmNXkKs(98cX?ki6&066f4mpH#A6@p6CG>Wr5X zSKq%Xx~bBnD9|z$Q4B**_pGz~mu8*)FYgruEYslzR z2d{n#v&zg>a+4{Z$HUSR7N2(RE>^l*B2{^u<-q6@s1Q-ge7zlRnvy><~tUS2ikpUP8|Ft-2aiJ?1updpJ*c+{y#i#L4p7 zJVj8NZ}3(mmXG5y+7vs9azDLR@x?`8MvRv&q+msdDSZ2wySgyV*x)lkW)P?tBno=h#S! z^9YtvESqN#dE^T8^~@~l_Sx8Ad!t0Ro>Uf)oaezfMkwDv0iH$Scg_JJ`FbYJLhPua zTtKj|Ndlb<0@8nb4Y}&SP5=J=|84%I)kEar8V3$JEI*#S9R7lnOQv7DcKkT}V#|kM zvNSOSy@nyuY50)?ll^FtNcgGrTDSG1+fqe*)G24V+HK zz^nl}iuUiRTK%_`|NX}M{xwMY5Hhl%-a=w?a1j2h&hWp=`+t1@_umJWLNXEop2d;+ zh==;ve{rCDn8*)*t^PJzl_NYn-GQXlD+kWn?zJ0%cA38fE(&@n5|KZ(| zM-dO@{)xi>eew^blFZ!mjY%=8TrM~^>tw`WaALNFAB2ckU{yRE5kmAz1hL%UVN>WM zfu|NCX{{Q^hK*KAHv+bc0Iz%@P(>P12G|JL?^{MpDrW+S1i)M+lDJN;(Q`pFkl13< ziVC)n-?hqQliXrY(d@`~Sl>I5vx_4AuLX=U{jafFVUj8T64CFx6Nyaz*T$a}_LvYh z3wz8WmQW|zVnWFZJpUo^SAu{@mJ98)7TIcnj0E=qG4%ej7_vi+1MS@k2*_6mk=;mw zDlkdXO};#=Hf3WYwPkr&E@q68pv#w@faM~NfQtd;7(f|n<_jPzmBr$e$XXtF|UCiBd@_U>!v z^)Jid3E`vR2|Qz2zx?B&&u+Nkv!N@VN*wL()U|Xi{cE%!DVhIjlW-w_ zh(9zj-NT0_hJZUJORmPQR-=Jyp6cWYS$vrpcwxW|GndH|{eJ(~x3G4;<2}5Sz;V?K z;k#31nXtlv_z!Z{YGIE93&kRG>P9ZizDRuqT}*} z3e%fLQ>y1=~hhfZtl7vzu z!?Xl!5OgzSLJzP?{A~k#?a`g+dj^w_c)%FF@Vb*uX7#dk=$HCx&;)AeN_e#xpy|Z? zHP9BQ%CVrK2Sb>kBjTMb5BlUZ zu+>f>MJdeX&NyyGx)rLDaVp-r;Nne{_x2Cw%;_JR?jL5!W6$_sWMMNGKk6R`cChmK z17n?hqGw=35nRu3c<7c_-h~-pUUx?y^$eLY??{AI0ecO!l=9YxNa>vO> z8=4PI48Opv7r(LJ9NoLkQ|KRK8hP4|iL0LIruwG7iJmF=$kE^(rK7f|L8JVxNofJN z#V|(z|G0oEte7z6343ftYz!*70jOhHq%wp$t`YtVNox?A=;t`gBvOI9WlaCDIRs}J z$it+glVS3eAp|WssHppF5T^J-V20u=17l*Ox^_A_D3bY#2?yR5kN8;9R?R3ws9^>w z9&nB>vo92~&;QLlE)=y*JXR=Tz$+TImbQ4gbb@#aN-ptYTFiGM3spNAIl;OO?9{1j zDd5Sj7Q-gR8clUC*xBJ#_0XKsvvrm|nC| zKb4*QyMc{2rsnk(&q_5<4E%9p7n}89+tSk)-TGKua?>=OZJ+Pn&zhV4zbvZWjyAwr zBU=wyhz**D`Ov>u438oA%ScFr>aHL^kYu(OKQ=NyJ{py78zY>XWn<(jAQ)=C!EK1l zMZE($7V<$f6)-Ifs9iV!m@B#J=oq8D4QbB6edHR{xB==<_sc`0vkOX5)84s+jp^%H zg2mQ0Z+@F3@u(ocxCp2P1LPFl+ZRuxA+p%J5}pQ%y~`{fgADewme>@-oVg1~(o9g_ zf?Xt_7O{DkxbsR;-7evyP}ILrRzOBaz9SP0lnT3|fMi%5t(BHN9?(DlD^L;vV;$Q* zuc6;056&qzs_$bb`Uh^gWx)S0&6Zh+9seY^a9+)#N_~h2nmulty~);)TDeFu&)Sey zxoA;kkc}s(qcx%GV5PFoZH#v$vtv*n=xJ`MTd;lMf{OA5{PugdEvfTA6~(^nzxl+w zx15>1Zb=<0jefziND*!}pdmqui)6=`EJfAa|WsYvGHJZrE^i z!$TDd7H(evr2(49CdX9{Y!l{V*Sl7BosiH#@&w46Rb$@nEN>gh^8>=TEVSV|(T0*# zhT2PNxzz}@LsLo;QNhQ~dbHs}$YAb=59Xq2t*Ct8>JAK@xVB}4rY-X=Bcq@YYgAH7 z+HB$1Yn6Gp%3cG8AM^n{hL~7Wx;ru7vtZ$pcF}U*7r_WQZz0wev`i(or(&c8gGquG zftD0nEktT-66FJW%}zoEf_(sU23#2G1|+fp!4?R)gshW<#orlaO$7^)swrn^CT zN8Rexb@iR_5TNDpv3`fHE~B6+t|&Po!;l?S2(6vSWTPsX?^LEnl^FB@7cr_`MMbXC z4{L!?TAQ7dUf5KK|5L{yKbYTSc`Ci6HfMY1q1Byr*E1`wnwEkDbifKbGOEbHO#Cn0 zYzT{rDmIvS;p{@zu)MZ*dF>`w0l3kHh18a&Z|1B10o)4{q{|styPJXLnjss8k!{*= z6D>?ozORyeu0u(9DRI=RnlP9`wUL$8qJFJPtIH^d4|_7~FDSGmf%O!klv7>0A~5?n zAPiE;6PZ%jy*mo!iG`VRq@Y5fP;SHy6I?DRkb*2y16dE)p1zY;Rd!^@$Q6&8;Q=jv z)@F6EHjd9^KM&^qC0Km5Z`o!ihvvj*hh}TCUiCl0e#fqfDKO|=4VS&aNzrvtsMZ7JW!iazeRtx;{?+oY{ZDlKLyU=i2S8GrY`fsoXhX zENVwkjr4!EGVwVFj8>|G{6dV}QpF4ldt4$A5`!{-UGpH9=p$ z!Peeq3JD4EUl$b*kTT`1@~@uI`>#oy8E=aV3DH^P^_T-mhT&09Z!VO~ z@{nSrlpr`YQ3d6d3VtaN&4P@%(gh-fQI1c6rOcOIJ-I}cGAkxT7?3!~K!UhH@X0D^ zO*jK*%yE+lnu$(y6x!gcCsncbwnuh5PORXgD^57NBir|a#nE@XZ+tlp%Z--fOZP2Z zx{s;k4=&=N+6j*~l*?C&xZ`Z7eJ{IZ>G|g`^|$YB_Yc9NH6hXrNk_77?OOXSv^Eb)}^0Fcjg;+Lu7uy^$856O^3H zS4|C7()68%g3$|RE@AG2*82a~WJ6#{U?c7MFB>j)vfq7zk2M<=Q!ea~j|uv(T)3vIe( zI5`vO-Q?(bI3yADZL!x18*~;NK^-yHEFhexTB1vkNYn;n)-d6EO~NFswT0v+>jEJH%UYAI2?U((W2ayF!-r7k&A@jfACoehahcJpUmR+tobGyTttBJw<=9lg6B=61dM zY=~N~S1aCE>*uZUzv{nPWvF^@-oA*?M|Xc?4Ap;ISW5|&G+ExIPp}7=Jl0-U8fi3T zKCO26cV6K)p(Oq|&!z(XbE88%d5mB9Xs&GGNOGor1lSLk$>|@5K{Q zCuK^?&n*PbB^ER*@Q{)5`&SZ?i29;5i0N|OAZG;qXt%)D!@6~xe=hWDHd*0>+E)&+Qb`8+@jH2t$K}x&oluV z-oW5h*=FUlj4VhS!olYW(rJxZPGhhw7=PfjwStla=$X-I3Nf*HK)D5fQ_J**AfUbm zvC>cjj6R^XVdO@mCEUVP%OdA3e}YAu^NTm#e*32JkAf`hnjx)rXqQ&I>o;2MZ+@lK zJ@-$8;h!Js^&gH01&x0m6!iJ~DsAxlUzoJ&FW3$XnttCGYQ5!i_A=hnpZ+;s_zU*6 zHYiBzSAA-?fBK0o$ngo+>x@R-gyIwC*Bgy`KmUg=*r@-AePA$|41U`OdXq{2A^SVi zsr6cQQ0PnebPb?fO{($V{+;gt1g~1Du}tj#Ymmhf)W1=_7g)yruSP>|-@NHI9LfD`9RE)Ov1i@#6W@>g$ zPQFlC2RTF*Z{~k{1sf|^$B{KI<=q0J^Hp|i%k%yl{mcC~KL1nK&$AWmI9u`jWd6J7 z&YwT`Zec#dp8D~NA(3O6bebaTx59ta0^!GH8zh?-V@wUVP#pkO1-tdeEbrbi?{4AR z*#V;oQudvk-u8>>4Vi2v-&#y>FkXg@GP!t0w(TaL9U-tS4`9k$3k5olZb5SDtc7ju ztF~>Td9KJjT+%a03rjeB=Pko|yV+OKjI-Txzo(}0yxkXw>9Mf|yAfvs?xef+ntgS! zmGSPjc$t%mT0s9fCxX6-7cO_%#eahmQjV>DN)_jr;umHxjsd*C0TFb*NMbOy{A8EUwdSI; z7UbuW?g_&15^2u`JOhg-1r&L_*t5r@SId#Yq)z)7>26Ewh{i_N4hMpE4Q#nh%cJKITlk=wmUDsfWWn-diO;Ypp7D%QR8!ds>Yc!KOPD@P+Enu zYz#~ca1F2ls&){_sCTIMWWiS^uC4O;pR93~!NO*&QRMbG+vel3EL&I;izv{Vi+@`o=~6I{srn2 zphV{;%S6;C3>Z_!hEs$FQc67bAt};wj5{FK4b(5ByS@~Nrpb^dojfr)(Ywh-lgyU} zxYXg8Sa24E*Cr<_mq6>>KUKNb{6b*(nkPYpf3p7$jSjIP<{6iP0n~S#ANuL~8>Kt^ zqyAAYZt3HbLmykTbA2%u{DM+wy41iQ+6>4dK9mi+ss0KDL>#(ZDS59NPA(-zL2?r6 zrO~FYjB^^;M~KV9P7$qvP!qIV&$Y%}v<5lJ8+I4K6I5Ps zyI=~DEoEF%0Wr40*Ty_AEI=?Ni8J6&h;aF_Ie%!#4?7M1;-RuwjD$&gE2yUq;8t;Xy?Dxpt1k*r)}~ zx)eU?1G5fv=72DlEfD6i)6udRC$P;8j1x#K&W#h|p+bcYEk!dB^3>1_R4VLv=OgAj z3&L`=P7Soq=G#F%mq>3jfQv#tTk`vS??eb|`NnYB?2M-kfXk7W_n6Xd35l`p z-fb$d*_Gy1s}g>yHP0RgoA8ccjV5H`%@7UO-eF0}x0r41H{rAn4>Iahz*9Ur8tIv287XsMo~vFDu|4ojvC z2O0!OnRjkNYDWYp>&p0l?vrTc96>9W0Jg3e-0K{7aS4&M>|96?twc5Xq6w&Sp4nGD zood-KTsw0<<}8U?IvJN))=2CwWbo#Rt=ZzA90OohRS^0zC?p5z=&O=kjzEkWG%Apj zS%Ls^hnxwRZ~(Lru|GKgb{UOtYr^%pdb#G*DUBR~aLus;JS3{8CEOHK)FdM|Fh3fZW79$C#QmSc)^KaXV+Ooq>+)uVNVcHHy{m8cOf>y zDvk{=yjAI#i$#Pl+_rtzU7IgE@xsaBM@!UUHKkRSm=brs=fx8hrJWsBzdVsOyEU?^ zd)2`51xnSc{=@!%JiYv`59?X->Cu0_Gbb&@PDXclv|m;DQ|XTaoVh^>W0?d%I$Zv!#xib zxY7nrlpKBdX8#Abs6thl&uqW-J*N9BlWo6jrLDnORa1~(n_Ao2TAOX7*W0Wh=_^00D5t#wTY`eHWU2+4+dhwfJ)K zXe1}WO^PoTT1LQ$@g>lRjsbeAMk{kza`NboH0XQ*GuE3WISmm8@!!Mdauh-o=2DnK zVqvu!D~HQv7r5zi2gG89NwGk|GZ6~j4*+c$+s;Hro?%IEv5L3e@}GI`9=7A2Gp%>G zo)L$8{QLNcGi}K8gJ4;s{(VyB=lo~hq7u%&N_is{2dL1t@kM6>#RYJ-)iUM3APZ;< z;4FePSAsz)D0Mq%bSR>rTmLV#D|ov^g%6vPAr%Ljw$@Fzy5o+?74HWW0&!vH`wm4 zV*KM7{^RfNK@M_v@h)4Q!4xrH`Okmj6tKwv6ULx)LEmHrJ^K;5(@Lz>(5YeGRpJwZ z#)g9gU{{b5WNeVhSBFnnJm%{}|A48v1ulTSb>>rYO@8UjmSt#SOjuUnpSp7}S1W{d zkZ?nQwUImvz<7;7)JU&|U}1xyt^sQ~3c&Lq*gulXf=mTCnzoxfs{+@46`%nJ;0)Fiu8H9LTle>D$ zk!xfCo{#DUYVL8rlm1@8|Jv<`2H#X*h`!hGjITP#5<^f}UR8-ORr#%@l zHmBK?zhldezBO~o&E_Du{H}J-Zd~29rw&m0tKPl(OV$br(&V~9*m#-PAJ)TyXQ%7{ z^qKx4MlE1WinF{sbBTSu(e3qQd3Vun(0jgn5-IQKlo3q(zht0MWngEAJw&f)9PeV2 z?^3kSm4^{~&6xL^b2xg}BR1Jd;=RPQ%q)VW0Fa4C2aLzuY4r^=)~=_R#THMD1hW@q zD<~?itgdOwpSNhq^6m|N8wUn=?mGWs0l0H1Zk)fcec9%1doR4?a=P&v%l&({AG+$= z>!=&}JP;##LTK=tL&Hp&S=n)A^|M!P+rDS-Ro5cJ4-NhA!t!xbA$;2s28simZ`fyt z(0>F$9>@hO91_)Fb%R2{e-|bQB#JC>1|p?k=73Wpl6-k`=|#*4FrhIUy0n_L8Xds;gf! zR~5bBzp;BQTmIXsBJ*okS0%+Cc2=J*U6`G|K0SM3>FH|cdq(5mVrotow`J!o$;)ml zK3x;@HzWLA7FALH^r(`x{u^KTEnB{}I6jF=EaLWr_*QFl@ro725g|V~c@fgzlk{TW zzT!k9J9^StR1~?YZ^N3%vOH%}9BAb`)8`vlwdyzWukZbhs+#NPr`}bRTJ% zQl>)W#jea`@>O9dOvhNF?KE~@(*bpj7%)ZJN%>C#{~3;JrzgY_@H-R&Aq@9+iIKK^ z%-d!1ZNl{qz+^xN$K>rB^Y&$tg}1Mm02{DpC^w%Bx5o%7%{RRY^L8neXuWY}Uo7y^ zyzLfmW3g`m0AYR2Ex2B8_RcEyc3HeD0$4$C?c$qjM>4s0_SKhSw;mpwQ@D{vQjPik zq`1uGE4Jgpw|I?2>a=2K@7s0$q;d_3kR~nQ5{2s{VkHXjD&i`l8|TAL6NC$>WQUzb zkzM70NSb_cSaAk59Uli0h;$>MN@&f6_$jY2p2`$r=v+IXX9$~3xI8Z>4OFmWC`S~F zpQ?DsWXZKnX>Tr{8IhCI+@?!3%q(`7&EH&_o|Lk2*NWBc>w=mSk{X*?mwS3nc72X% zKj-`9qX|rI0<+i>Qj^l**GsEi3s*97;>3WXE9 zol#N!^W9y+a&v8ds626*r@We5+j5iUvEL-*7sSIu)Py#oknPQMII{g)-RvMd!2B_> zpfo8obep~PExxJM778{gXs24Nc@JaFO9Q8_3|zW7vMnr%^yCO)YHgOc6MlKJMyzv} zZl;bmAJ#UOCB#FU552ZAg2wis7jDh+>R<87+}=E}HOIVpCT|q=Ii;Woq9{UOfH=S` zHF*;$33}jQ5J5r4A>p#MjCos3661&X1VaD2#Ux!c_GRz>lXs0=_-hh~7BgJZx$vs5XN3E6gVpjeP27L|fDL zO9D?5KDm^3lM|ko3T^N{oQHlU&gg_N5<&kVwT2{MrJD0xxhnKC2l#*JsR-xVaV)4V(!>^WnBKMasMl zk&4i}S}r-AmGvClV5Xcu;?N|yVp1IT=!`kV{ujcE*UjtfUd1oHXn%Pt`(5e6MS}|# zoV_b!5${+U=UhB-{h|zh*P~4Z@hLkVRrs&k>wMCcT(*2+DO;wX%@BU)be7|=A0m1j z@_Q4&Z;3`^-uNtn2!(Sq3kG)tY8I6uq{5R!8Vu}QGm8hNNIYCze`mb)v6>6nf@|&b za%;oo_N?NB`k<+UMlpS2#NW(L@+Q|!D=sO`Ua_(60Mu*oPQ~zD@{H*34YDm_77oGg z3}!Q8k3dr@$h<)^p&;n)%sfW`dtV@72no~#H8+>TR6 zf0r%UX0)C+zUQ;Y?%z|^HX}ZD_C}NwUo*>psXsKt$s=r_n=Jvl873fBlR)_f0z_dR zJOE&HM5};4LmN+ctDD?>qBWD^)#P+s`0)+^(O?&91WOeiANyA50Fbf{YA1`4%9{A- zB+IxaB#4=fr*~d*`hp8`TFcyVF*XA$w8$0B3tS0WyVv$FzaJhr>(>kQen7+rIl3| z+6zi%PG32@L^-F%m}g)>N9q6N`n3LFTdX|>0==WtY>AnvicnRDCB&-a5VmK)H*Eq0UKTHw_xB=E6t~~$Go#m zKH{EdjrqVp^u-ad7#YPtjdes}vKwhxttB(_ielev%!nhpv;qyyeBhzyVQQ>{wah7F zShy?8Ew-%?x+Y`uYVpd7y$R+KjV?xlbE7>PxxRH^rczMf#RLakb9G^Y;4KtDD=rQy z?}7nA{Xp#?UPA&r9)r&y5~X}tfss*|)C5>tPq5~vu(x_CCdPG_|D9VL@y_t!$YHx)i}Z7s4cMp{k|rI|7!pkEA?e|C9Bgex!4 z6_FutyNgBMvhTe^ilhFoj?HY8%XJDfKmXNVu`gY@Ij!#8@w-{{r0%x=*uyWA%zd^Ht(PK^mc}+}cFsMjA0B}t@Vwo^&Sz;28 zQw;^1Z6>D*s8K z7i(9ulU*laJaRlMnvA|Fm5^_{qnOh5PyW_ z(`ro#Iw9t-(;FEG)ntTJ$`DX^t-CBG{RN zT-rkiCR21MxI{!-K(UAxYamI};aj3H*%iHK9kX6_j72`bef#tNcaGibe{O@CY4+=a zP3nf1w{$&nprz%&BV8*_PTwD6HmCYM;YlziG`<-y$R@jRxrdFWn$0o0JA0`J|Fh&- z^NM}CFwFri*DdS9{V$-Hy6OYbuH+>DL!NUU91yZhsZ%{>g<9D#lr4oXa_GC!G6{(p zxK%+wqLw5AFmDB`%4Y|gWQ25wQ86-K7-Wtk=yoz(eHUVpn*{H~l*wa_?0fKuGbcGG zIQz#xyyyGMx%?!>64ylVS61IceSpa-u&$qhUBv~m7iHcxS;N)!8*(A9T`@LX*4$6T zA=sOt1l2oibh;@;J~pg%VSnxhKqB*AnC0F23hhCx?&0>W)KS_Eq#WM93Y6Veu^rhe zqlm42(xwC&(_TRA6^#uSwNmz?O2lWohg*dwj@B8tN^tuwLZ!5CMXyl-T*}*O9?`n$ z$)TIK$l^<#M%3O4>>_;AD0QLPy9M~Tp}5Z5hHJTbSe1|}$U6z62y>Iz9uQiL9SBaO z;)~_T3Nc@R5&!)h1n7+6PLmjp`B>tSpEOO;`A~-31|+K=$l*ed#B!L);*u&tLo-ij zrrwnr78aLQ6bvx5pm6>RcspV7mX_SGuyk*F+P!IEVeuIyNQ^U;WhI1$ru#Aw9~vH) zUSe|Mj>L)fB;1i`^0<@3LbFb1rrn+D2#ZN62u3OvMvYM$T$Y)jED29ntJA}yBe+Uu zzr;Uk*URByl6fvcz>yS4jD$*?>|5Pq0rg=mtGd4 zQ?aNRN=*%oj#lb)j;+P=40&dRJI)oV(kUX*XF`G5?MI(U2c8(&9|B4WyvQEs3})c=)#5DdYPO3DJ&r|)U60t$rHlXhb3GdAHF_3{;Czbsy*@>Z{NB( zB{3naA?Oz?Yjfze#|ew$a#Tr$n~)f%<0#o-t^j^Ewrg(T*07u~544&Dfupz(%lJq}dOazl zfiDTyK7z!S{LWw}0&q#Gjz~9Mni?f9HGvw%%;_MDB2kS$p6AHFVqHsi!C9{Vi(hd65d_&;B+fq>Vvr&c3Jp0qpVEJEfdQc@ zYe+C`e%Fe<7CMY1_&|4qD+6>l=+9)}dq8VqgCmJQNaz7K@YvZDV)~3C&6POJl-3A* zY6u*edt=NaW_y&AzAG7U6J+X?2NcevR9cY#_m+*kHoL)G1j9w5?!Zd~TM?0<^@tAx zeq(&xceZk}oeSqwe8P8mckWy`xBL^%KPjKPaOY0%F8)cyoP|?&b^PbvoyA*CYLQy9 z)nqhnEfKe=OgpmXAGNJMTkj+WpLW`sh zLU>|e_tU;b21*6y4Fro$DkBbb25D%;B?*vfDT(x#$;C0KM-)e01qQJ+jKs+6eS|45 zKXtRmns2TBEc5ePtJSlp_YwbD|J(kvkL1|Gg7m4DxZQKZY_{yM^|z-hPHA=Fx;C9o zX9&_QK5U7!;Qut8HbT2t3+hsjls070Y8O)mv&Beb0tc1@!M^g5-bEg(wf6JO&uZ~J z&&{VU$3uF1AK`Pdb;{(qyW{lPZksOs_Vw}zQ3i@dc`1Q1ESB5EwN(Dq;*rwJl#AC8 zG&6KVtIz(U-nlHe?4Pn2FiG+Eo9nh<|0tcmfs1G@ZI(!wO1uR61Ffx+`Cq5W7wO+% z3P#M-KlVGRB#^1|kT@#+DDH=TfcB87P{QPy9>a#DLPf!&2&f`ZGu@{c68C#3AAN@c zX9|mF%g&WUaXP5;h_uOfqC8LmKll78@A#eXJQt7r^lZ9k@+{t+;_(yjgS0^0cJV!d zyi?OvT*mM&NAYW${FeXV>=Ai}Wces7Upzx9JBXemo;4&RzrW($D4pWy9Qc_6c_yzX z^R*$pZL&_pd*VLSrAOR{@YFIVLTS)2YsLy4S zdFVaFdm?R0nViDnn(q0r-;m5sd2qjSGH>9!Oo8(N;xQqKJc_C1P#k{2be?<{)I|iY zJyY``E|$uoK0rS{B=g`W+J7>R&gaUJ!pU?!`I8Sx?;z?L@ss(fT>4GcktkzI9KFZ6 zG(1<7hjf&4?j2E927W<`Az3s1@NOCSox7fV2GYcMp)%<`#4i?STu(k%ydToUa}Y1` z2F{b^AdTL`gSTWIUcPr{B~veke@u8TjSN_aH2nDd>IZIXD-cyJtuS zCWb5y@#2Sg@ODI;_|8DS2)q-0qqrY=J@k%&v~%xF*LdbkI?M5&ew0@{lk(#ixKDrX zUW!M4dN+Ds3L}4d;OxOY=%3$wLuH73Ln5!8!r%EJo~{)*(=#;q(eo&d?xi0=%43b8 zxD9w-uXIA(>d_7(wXw(TuWzsM=`<{dUhbsx$<#cf%MR+wg+pmA=nf**iRv zFXVU1jfx`0Ddn(gx$2(uPw zmIqrCTCZ&N&sjTv>--NE^e?z|Vd}zTiw?B)v^}^ubV_G zFZAeo9`4=MXX<-(895 zbypw1X6`kouFbplz_o84E;@YZh~>!I>)h8JIa+b_*wHVpzxeuBjujo-b?ogMQg7(H z;mnOCHy*l)-?aIr*N#^ozx(F7H~;O#owwL-x%JlM+rGU0+1o$A;KDqkjsgqyaf9llGsrMgP{lKvYUVKpVV8w$E zKlsJzM;|`$$f`%PA3gq<;<2GoKH56^?BfNGA3QVjiR33!pWN|O=2M%WRy=*>(_cTc z>e17 zzklbC>tB8DwfV0-`+EQDx4!<-8~grL_9y?Fe|zisxA*+H{+;A^PW+|k-Q>S6`Rl9i zS>CUH|I5Fh_@LrL_eXIbo%zSzAG<$(_>;|_W`BD0vzebi`GxIY)&Dy9WxEHg%%>T20m>C%Uf6T)O+Z2DG?C=93HBL)Kj7(;f{S4C| zQ_ys_3qL8$kZV^U%#r8nKv)iapc8?x0uquJ0%0W(7`_OERk9Ek9tf*tCs=kMtdWJX z7Xx9f%*Ngig!Qsi<`0C8vNBE{sF}=`4+6K?T-SF25uS~L7 z*fnGWJthyKD&XMv%2ohPD;84nZP-~3BD?|TSn$Gopf%QuJNv}3L!_<3*U)|I@h^5t zsdPs_?j69dAJ+4oC^=I$9e4KNzADHiDXkY}cfw|-6YsJKC3J|=>Fow!6&?E{`6)$u zXZMffi2Yuf^YH{Kvs*kr7T=nQFV4hwPnMMXBPGqoTXo{S=sTn@S}n?o#aHwqW)O8q zDL+)Nbk9oUn0)GL+|fVf9=fL5pi=trj8(|LLDa!I#8LfHd^g%-6GD@v^x!VKT8Z2P zfjaF+47I}4TCGJ1RPV8}I)r*q`Zm$tgJ{1Ja1XM8Yal(p<2(0diYHOe_|I}?p@yWl z=@GS*1s-81-g&b0*g#EF>?*uXGu~z!&Qg!d0WYTn?U93{8@BM1?U9F3CjP$J4(-by z_+uX<`#1}kJmteBOsQs`ur3%y1Ut76r#gRW)M*mPD0H*O8Ak|(Z`9blKR zgX~gv8M~YvVpp&$*;N3hyoO!N4znY0m~#{WeaF}h>_&DIO#N?WC)h3QR(2b^o!!Ci zWOuQ<**)xDb|3p0WGG(dW5aBOon-g3Q^4DJ5O9|dv0t!<*(2;x_81#wkFzuE3HBuX zSw794Vb8K(LZ|Il?AO4Te4hP=y}*9UUSuz^mjSZ%3j00#1N$T32>yq?#$IP{us^Xk z*<0*w_Gk7E`wM%Q{gwTVy~o}M=)wo=L-rB-2m6?P!ail6vCr8**%$0z>`V3)`x-pN zaW=vH>>DnF6+2|pz++c(6<2fEt-usQ&kZ~X7#G3Z#Le8ot=z`#JcK)BaXgfV@o*ji ziY$u5T$aajCy(RtJb@?jB<|wLJcXz7G@i~g0CAtivw048^IV?C^LYU;;sHujC$H#jAM@ujSJ?NE=?y8+aq1!JBw9pUG$O*}R3f@;Q7ipU3C(1)u{L@ixAg zFX8QcDPP8y^A5g3_99=&SMg51ny=wqyqmA(>-c)Uf%ouU-p4ocem=kl`6j-ZZ{b_{ zHol#o$9M3Zd>22T5Aof658uo8@eBBc{33oa-w!*JOZY*4DZh+g&JXb`_?7%Bel@>_ zU&{~kBm6pklwZ$}@f-M!{3d>!-^@?&TllT~Hhw$5gWt*T;&=0V_`Uo-{xkk_?&Ur{ z%t!c1em_6OAK(x2)4+TE1%H@7!XM?2@lgP-oZ(OKC;3zSY5oj&x>fO+( zL1~@KI@S*=2D>+OD*AgnRvA|HZs}Q%07YviFI1cQC{Eekv!ZvazHfcUwq+~3`&X{- z#54OkI|kMLovZsh2f8%$Dx$#ky(`x#Rg($5=^W5)?p?oWL+3KQk3JBj z2WSJ~O?|43{VRJ{b*fjOI&hW`cC1n0H=tP2+q+IfhYcP5>y&-{-93Y=hnexU7g))x(0P3yrp~9V3!VQYkHQg?_51-kb)~adj>oE z_0mN@We<|VYc~xHcCX&1pl{K4_pCxb>ApZ%?Qf2VR~S0`$S8Z2mFu(NO3ijI}* zwsiEb3R>NPDxAF1Oa>HG>B_zibOLmY-ahr}-hRq%5ZNa$L`i`QW#`(?m4gO6XLEnA z^yNX57vdANed{+3ETfL0+tA$;2%=)|NtLMMuwMu%o}fcZ;Y=y%ZF0p^?Iy`gBr2^axQ!)Q|8w1Kry@ zm#yBke!U?O9@x;ae!Z!4>&o>V8#>OtmSRo!>OsZ&&W_a>BmJG4&TZ&u|6iHbuH3i{ zMeU_TJuTatO}Z4Rw-F^uw8~^1H``>AW<8S`4j+)nB}H-x!nU?blQQ`hZ!66sZ7(Xf zTb#GO4K{^nhI@ah>flG(2f8#|9NPFEH8^-%sye_Rw>^g{M*>6pj7fqtJq4ZTn z$6dB9n#=Y;3rP~>>ycI$qbWTeC?w({Pm2uXG$-7vluWR#3q+ErAsbMbBGVF*7B&{I zlHF*NVujG~z^DV4>E_U&qO0S5q$zF|n(TwuG>3YC2KU+x_xF3X&CIrf3`N-p6hqL^ z!Le0KX(e&o55WdFujqs#&qop6x`tyLF-&lbzG1hnGTwW-rmBJdr9-X_IsF$#zCP*E z6I`Bjsp=HOX`ta{DD1}?F`smsKxWd0qQYl`uujD~3Zxj4xh77!o4QmLWTnWuAf$@z zPy|p2D^d-Pvf2%+pwj$FtBwpF#E_@shahSO#+5b5^-ATh${dPOr!7yVGqK0a;RyyUv0{A1Mxp-!04!>i!&6vA$%?xpF2gIu!i(+<5JHBdHLP2;Z~4I5$^tep*iA688c9{Aiu;-Hab_ z700bq+k{a!(+iW?bcbKEYsO;Ef@gKJV6kN3vAAKOpKW)}_fz;faL}_NXfs2r2wJT=zB|>3kToFODVA}k`muQD{D6tvDM0QNAa@FoJ0-}Ovfx*TAcr6a%eW4f zaUCKYA{-)|*0y*0iF)U}BW_0AjJO$bGva2%&4`;3H{(ikt~4hC|6z`ThT*?Ae<0Ltp+9or1s7g$+66%if))fV z2wD)dAZS5TmqaXySQ4=$VoAi3gO?n<u*bn32YVdsae9vkj|h(lZ*}(9 z`MHlhoosB|wr$(C&5do_w#|)gYh!0$zE|(BcdJg#^tq?+%}_F^}-HFWslK7SziGf3fHK)aN&n+qWT03z_Cq4*DA!I0%< z4(7H$oW+l>;YVkx+)Q6)Zs`2u3-;fbkpBlna~n^yAC3e7L`Mh!`p!E7It)Yhl0EpA%|9lBSa6!H83~fz+xR9Uu#r)_r6h1t{9PFK406^S`007J} z0Dy8^Q;SpX;AHyaEB5;1OZOk@@2OGUO^wWc;{4ygg8zrn3uWh@_P^)@rg;nJ{%faH z{)-6!Fqh$O>9JvKU}9jf2Vw*Tj%Z-?(>L)!AkpmS0SCZm0TBcKdv9iJoZa6)*+2Ma z$Y{F1e;&LbBMPgq-zPgizp*@hAW(3h8U$y^pD-^rP!UUl@fW3{fdMF>2^o?D@Z&#| zFeMe_h&Xckpr-knccW#LC$t%bFA(y4P$;W#QrPkedVmsvfOycz_Uq3tt&pnJ114bl zg~FWaistB(zB$l>d|5;m26GOFSGZ}!gdDMJ@*yRrI9hWbukeJ16F$*#OU@){7b#J$ zBI-`I?UPbZOxRH1f?+Rx9_09X5mGuyNolovrQ}AH5+Yly{$Kzbq8O?pNrD)y3~Vopj4Nh+nJR7glz6zvGYFi@p&!f;@z^8B!s z_}bgY1ipE1FZJ8A>lK%WUeBGg74N6$EY{}-s*km)sqW$E?*0d!v8F2n?#(p=B`vt6 zu8XQ%FXg%mQQoTBi*oX(a(pv8ag2{HCLI<%!!?=)UxXOF7Xqun;~bY-nGRomGTgoc zKfp?9;(y8gN#8xd0f-df4+sRf0Eq!Ee-hINXa@`f!T@G~PJk?c9Pkei;jy8s*d?be zh`0@h01`O7M##B=+LRGL>RkW^HM|^aWWpVK3~9;klo0I*L?93-0=H3zm0wUSkp)hK zA>kv$M}*959Z|@_&E4cYo53tSnNaC|Zat@bN)kV~4L-y6B`49+1b8XFyo`-$4u;UO zF?*bJ{rH9f&ss?4wgMdU+EXH6$#Ms3HJ5!ad_sqPd=flxV>YuaJ}z-VofCncWI0L) z-(t;lP9eMpE$7I>3D9_^Nt;yw&(0Uu3R?aybEZ~DiRC2MPsH~6ZFJK)}jCC&9Z z9=3srWW;Sm82}|BB&PZnhCSCq1Ae6RF(;55aD4aMKL@h;W=(`At;H3dQ4P||Z*%K@ zDymDZV>VjI-M-SQ{14^Khu&=O7)UNY%#fh*K-S#Hw^ZOe4^1tL1w5#*7rWQL!j_AO zs%{LvM)JkJ2Ce^1Edc1>KLCQq#&i#q2hOT11&=#8cf+(nJrbxyHHZU<1P$l_S|M9h zF`IO&jbtjtdZQ_A>Xn3^$yit#M{75C+#v@}&XU|#=?tK`iB&G+(bQ78UGkD@=Fdwq z%anCav0V~>4XM*-o-+hMFe>%>i>)X3pHlBAHfC`P62>h~+?$!7a51z4|Yc#=a{Kx3q0>()l?W zGcgICObc?EuzZNYt$HvhWn{(&4`u~;5C3{quz za!#jZj^kicqzWCuxwTHpuWCu@&C9!uzR9Xmn8Q{zb0FI&}kNv+^^w|;cuDN(C4Jly$lYEqQPGPuWl%=yxP3IFt;bFhPvTf9pCLeeQC?ut4y~ob zn-Mn!Qbw;4OM`VK){G}fYJz-iBqwJuGwCOAD>KcdZOykdpg!9%6Pi%s1l7Ji+!r%k zCUNmJQ)>b(B*ejp&SnpRmHBE4maU%E*pS1^$wWyp4(z*iXtM^}ScObI9g9i0MaVih zMBB}!yV=>yr66#k}&!1DX9-(@i3-jL^IllIFzi z_%}LQ+wv|PFqp=9TH05AmV+X#c%iJx8+9|icd-Aj3b-TG4%h7BGUw>xj}p{;bC#cT6=DLUuvp=h zb~3I*`d%-3)bn`adyWSnI;NH``31ABgt!XFde`#VCC!r8r>{)o7~PqEGvyiZjq!|* zrxst8C%5KEl++isl@;jU^HS#bmFOarE;@B8bzXot*iumXlhD@Hj^{~DC{O&^=MS{z zFgAq-Do}!dL{*xX+mpusqZxO+a=4xv#RDha+YDlM-$MBoCe`t}2CLT*NWTqyz4Na? z{t#>WFS4lP>HYbYOFOt^rG2_du^jRr)3jWnrs%vRY|e2Bj^(@eMCW@5KL5G&xY-YO zgB=V~dR@Tovp_!S*xm#%FI_6@G`H_)bL#gEXE8f}jsBZx50s%ARc@JRs%Ev?)M@nX zD^d(NlJshXva!s1&{8*yqEMWI2(}c6)&!OTH#8OAkYFmW!;v(QKv*tn^^=o-Wph;A zhZEC|OlodYTL)i?VaD{5ideze2$Q-`6}6~Ru_%vIMp#nlw6?AxCh>F5pEH=#MOi9T zDPi%mB?{BpQsqh(S8r@XMXg}vYHrPqFT`wds*>xMQUKR)A{QwifgI3Wk0_yXhzM~* znB<3)Kd;BHGijv-Hy%intEy6MTX|9`_+{}pwL*jPDiV7l;`h{y}t*jFRf4uWF$oI-bAp+_IMxYkbWA&q^wVy>Tf zkXGFG})MmP{ZNxkAYwQl;=>j?s5j#alZ0QrY|m#ODe7 zBwA)Y67#TX+*pz`4O~o6u5{8^F}ZIvOb|6X&X92f$VN=y_-R#1Z&y2^$EO02tSsb{ zfKuVq8zB3D)m{}pW<&((4pd^HN*d%Ep{F;Xx6%xH-|u?_ww{ruEhzLi(iRRmXbwsz zDm`s1M00fWXpCC1%Vv5Cs6a+5>){QCBn%A{96sJAejda~OG~s(PD6hmF)<9P-dQ>{ zYT_zNXyik5N^=1i_et}p@NxvkG*&nXBMMt;F9@fh-3HeyJvjO>Ucjyf{Bj3eL%kp! zn4%RJRsWBbh+6flDL z5nrcT7BvO4yTCthYA1SqC*&h*Y0dzVaLxL(M`QzK`oGOQKHS%&_AGg22a&w1r%qii zUevJM$97Fvl&OS-HXTU7)p95i5;V2P7n692xxR%Dovi^i#{c$f%Jjc)rpnszcXkb7 zn(;0?4%U_HDEO6oYd)`1lx-X@_E0|?M&^`K@oTGo#um_g7RVu}vOfG9jsi zS+KlxjIT)U(V=k+i~^h<07ysgs(Rp<8E#TDjz%ZTnw~e1WF@eZ9Sftq zc`eZ*y`kK=9Bo1GqCBr( z!sGSeo6jN@EOEiBYI;-F!_QZ^SP(bkZ$YT8!ZdC8%&D$bV#U)3K0vRs5T0;Sh6x=& z&S$Z41pkAiBD}f5jhH0-TO?yi>Q!z<$^k5J^P~`+Vo3PL#rr8lNd z&9;mG7==dvC?`C&G;0yOs$-&~igWqUI0t>Boj$X3>xxyBfDzx)X4AzuZ=$gE+SV|K ze`t)qlDDfUD_; z7oyU{CDb6Jrb=TmLki$79uGF<=o59#H$$rD$u_wXM>rXJ%x&gr3M9D z)J(LcZjMZSMOVlv@#IU(OBq&>3!tI6t=J8rO|APK+K{uU3@33$4Cn~A8v7Y4fYSi~ z1R;%OuXe%d5I*CSQV23Mh9U+AHDO_tVU*39Mi}nwkSD58cTG?c3D%8i!QH}F zKiK^x&*ui_aI|Dl#MI_$wO(OB3}aDX_fooiy9fTRu*x|< z3k08#j|$QWz_n-OyC(kX_3;11t*;TKEs`1gz`(4Puw%?fvCsHo<}wIB+Nt$o&2NP2k*;H`SMk3{4bi^u$yQKtyVD1HDJSI&? zkbO4&tKvK`kh9@|rh3Y)Hw9D-GLH}_N8&Eu(2P(+kLY8Ze4{-@rnUYcIg+mvM(b% zwGbC?nX}-KRg(sKrJ`@qsgmA(HPHd#CJnrRN7u1uG+r+rdgBZdW4w7!WGL_wN4}UR zUM5HWgb>ldH+e&rzj-SPg3c?`k~iC9tOahNd~>;VHCWWCKkJ`1!DdA8w_5i7@%QO^ zHVa78;bhM2Ayr-Iy_Tf&(xz7uhTU-Q&+t0Di$W8iRb|;tQ^0(_)=g^Y8ON?Ra~S} zVZ@E(pq{x})QxsZE4X(eUb&)SPk;W;3S^2Go0#c>R7uL=jV~!d)QN2Wg5b>GOMS-= z<>8!KS>nr8Pe`X}tv3h1Eb8e21&*6)^UQDn3RK$DMq6E}e zcZejqGrwk~n?fdYjKst<j(uN1o`nY6RI;sXt7t5j8tLmK! z`k-V`C|F29z4DY#qYQlBL4% zC||EmhrRp!N+RdNN#pjBcOJyx8w0v@LPolAP00s)8BKcizh<(1mZ{yR2C5(6SR2yN z-V=!X<5e)ib;z{>eq2n`qglcQC!zkh_=;LUWtz8JxaJ4rm(X*W^co086rr?OO&&w( zs^Ji}(7#~kq_K-4ADU@#V#Y@xKsr}WOS#Y{PxWH5A%bje2oW_ntWiAp92EEHi`R@) znxiMPeFtl&vEZUxX*SweHuAj#h$@nWc`XEi;($%aRkvp6=~~sKG)b;!hz9h?Vgfp$ zYZRE$FMwURN`S(4baCR-L3uNtj3I8UP(t8K_EHWSRu&OdO#cLX z%U0ht7p%M79+v4@#)tmu7nY}QKtQ8`Kg%H_MIc{D=G}^O9kMQDUY^1RD zb9h||_;w{yTxbN~P(lb9UcJ^6dfz*B^=zd`D8UKYrvP)?%!{_PQKdMZX_8?^1*`#M zX0|X3LKll(0N^=NA2R23_RQo&b`u_9QRfd?Ri9VQaO5!cKNJG6`D5x z4JttY^!u>Qiib^2%6)*;oqIZgHcg&@$1i&Fwzp)t-3lE!4eEMuGrLb4?FyRAd?Co} zsIaoovkJse1V$WZZm}|DiWy_AP}Nki;G4!sv!YyMr!-JXnUzAg(-4+jy~To%A(OZA z3lU6gse~vqtp#7ipB6d>zjq1t(6BanW=6vjJwOm@aGu5602>qTZKFINJ^_kBC0OHB zI7oAk$z}H2BLH*U(Fk%0b-q~O_|y`8(pjGb{J5`|W0gQZU+ctv4$teNLYRUatDxi8U7&kimd>4;7PPCJ3k)l_j|F)!KHJpR(?Z(*y_D{ii)&n$Yoe4Hrzt=o57=k31Be0KnB~{ zKz-lyziGGeO1|!T9Ww_hncBVorvG}o^S2wydFt-=!$q+QnfsG8fceUz`!>MCIUu1h|tVrP6fQ8w>gPfp8C?PM?2N_rf} zf(XxR0pY+UKtAK3;(8E=N_RlVaZgHop{vBCp5W@B5-CLzdPDkmiy=i=DiHs5 z*`(x1lsuk9e^MZ)4sWtUszOz&B>s_U90Uw3h@jE~Imn3Z`e+Ztb=HNA7PQGQFc@Yb z%=&c(9V5y{(NG~Wgy2(r&p#p6T7AiXE!FsMy8}iCiuMe%XgTE|d(}>X3Qm8^gF;=w zYLsXIqyDKa_E;g<%J}FVCTQ-dwG1bSu~I#pC9K)b{vFt_yV_hovIDtQ9a4Z1fDX>| z&6HQ4NuUC1G?G4}B8Glb#Q>xjXc}InUEQP&+F+Sgv92bF4omRoMG zM7~lH9WVg{`n|E`A}Y5?RBna(UcjP}0P*$*F+!vwfi`Q{XCDMfZ!~*Zu{!X-4FQ_C!quDgBE3e)Rs? zvqD1-mA&_t0H>$DwYGTMtWOhBGjBHBU2;MZjQAD zJFDPr{kQf0w5EzHtbx-m)Q`U0&aBQs9VwI;@fhn$2@r|*$7r7V$k*cRB#O7oU`NL$ zjV?(SE8IMfmsRsMt5kLS$1Tn!l+SRUPH`E!O>Rz6UJonMXA4uwbOZppVR)U0Zg~pN z%>9piUAu`XcF23LN|ulo!O7TqmyGzo?cIPh7du|C@>~r?|MJz23ZHmlU&gd9HJE6G zg@t#;KjO#WzIN*!lHvizrZaLmT~qy*nzLh^+$3nDB=O2V)-)~@HUL8308#(cjt z*VxHg+mm-iR`falC8U;;C7q(*5P$Q5od0P`WWG`IqwO_c{tS%${mygL$6`j!ZELy0 zQBcnS5}E*G)mtv90Y}?OCLS%xMU!z5RvJ&|#A703L2Fp^QfvZ=0|#F>fD1R8sVg#u z^;>>=*X2PAXScC-X6kDkt@Z8x@PQr84R@zG^Q)+ngh`!V)$|L&GVP;A%RsaIt>)Ke zny^QwDk(Q>GZtm$;5)8MCo6s%GiEf{$VqN}qn;*#jsqSavx6^~`eB8d zQ`n4k9}pY?n4!g=eOlHuTvm!@{DT5)CKA5@rcP~sdwr9lc%^s`)BEo>=2d1@X-V!U zH^@qdvwY$bI;{Qo`+2dnR3-9CaV)Dk>XE_z+Yb;yf)=`FsLDt>Xr(6`Y3nQu>sUb- zmWGY{H!g>Z(N1v1xQb5RdJ0;gw3nrVCd)g4RMSR?;YUr>wOKR--VvtgUij7CzgZZ1 zuW*2)dF7XvTK!$`f6Cz}1)r!NbJ4SKF#e&odgX7dgnBW|+UeBkPBD{ZmY%wzdSl9g zwOiPlp<9R*$yp_aN8A8vG9Ya2q!MX|hzYJMH3t{C3w~o2yrhOSQKImR3`xP01)F4? zg(DFr2?bdTh-R@}r=S(H9A=VGVQgQsil*j)%O3|FO*5w!XP0mN!^?P@lto zH1~sKO@n{0*EwGW++UihXKh;`8jE!e8JH3**Td{8Ifmb-XvSl|Fv>F>*FcWov$6=A zQQg-T>y#7PuZepOL1kOv1NOg*ZTN`g)sK8CZE{PU_-3j0pv&I=u=Q8PMRlX&Kv0)d z0s2Z8vPiZe9CWFDb`}?z8Z0mALf+ZBa6v#fThQpTxc8g{1EALp={JL|DZ@A^dsbi* zXb7Y&5qXoA<8a2#a|J9R} zf%g^|K>j&{p!XGNz4GotcO6{OC)b91PqyWCdlq?pS&Q?SLocgy4jDhg9_I=N1{O>C zVKu6-SYs8xbCTh2KDo_7)<4WREVz2S03)f>-JhvuKP1e`=n?fy;rbx(WKZ+h#ni z09%?tMoBO327>lRf#T~`X?K67?SMbm`;pu3msd$haGr*5FJk8Ld05 z^^#Sr4UK8k#;}P)|NYURd@Ih2zEj0at>yWoBYf)#wKM#vIl+V8NpK9V{Hz#vXPp27 zv2zJ7`(by)F8I~S-%QkLl+O3`--DbDMdE+)#{U&`ipr@@R>XR+vRYix*vl9?9&)8C zQ1-e2YV*pIZ$dPi69CE0)&`lyA&G`)J_PlBYe!f+{&=$`D1%oCMP+tHt-#JY0*eGp zF`U^5sT)tL8^-a}xccPb^0 z%WKysFG#^xMcX}9T$@A|5k6yLJ2mXCnf+nN6pj`kBQLbFvekscM+*#F82y{_4rxWq z(VzU(+NoM74M?zSR#5-Rh)ji+Cg;@zoew~%>4*9FYC)98%XzB+~TDX;>i)RO|-Z8!bh(fwCs9QpJw$5mKhXp$$S1{#@lD!W*y* zUtq(hI$e}|zh>G0n>!D*yIqI^6EB9GiN$xum0dN3j#VVWVyo6vBR<7Jg%Z6vp&F#( zLYr_9GAp6+m0bv1F>vOHK@AFxebzv1&_O6hU+9H8e-^4g+h%^>DW4vFPX~>2CBZkO zgY(R87`94s9=>g-;aDO(0Wq~Y0@I6FyqRMuvlOA_UtHO^;iDCF2T{{V=`jmzS&Qbh za7WN+mj-vAhV~G8s)a;8kS1F#F*@FqRkOCUyt&iv=h5rr_+Z}a)(8L8`4{-t@aqa+ zO-IRu&x7EK_czR!Tx}ioNlbI7CfgRe<7nqQ$Ej2btA79~8*+se4iM*pJg;77k_A2x zI-9a!sGur^e;eQ7)EsGDoS1vJ;BPH6Mhy}1-=}AaMc@hj4GO<8h~~Ow6Fj^8DtMK= zU);WscSm1zyCwRf<{7<$*tA{b_M%$KRojREB!!at9-*Mor-!(ke)+(x}biIojd#)iItJPIu{nrh9(J@4eysmU*Vza{aUZm10 zn&zQ=b{O(^Bl!*jX)~{y;hkMfq<^`i26vU z*GJLad<6{}kRfCSrLOGd@@!N02y{4G$J|y88u~$*rZwY|neetM_%8*e?}t7Z41W+E zTuN6rx?t%hbJBJNJfq4R!u#5ynAE|MsBIvQazxGULG)dGx+6nayZ$U+55x{p7Tx-4 zSPZ357!U=d^v1kWL`af_!L5A!Cln!CL53w2FjeKHZU<&=_Xn6GkZ1HJQuL;D?W@TJ z3_Cpv0bM{{x5I<;5tJgeOLpERV)L)J{s)D!i~Ng*7UU#@TJ0Dsc@o8y8ZRmm93C`< zH+%`jBxcjkE|R_b&WjyrOyreN9WM&{E-+5mD{UdvtENB&4z1(oUvKUQeF9rzzZg_$ zrxGbtG2x*f*#R!1O6i7JOwP3)J}0kt83AFPu-WuWxDYI;qo?L47Tl&GM^ceGt4p^EX}zv z7Ef`{Rp4D02@_E81cy9v3bM)637H?9C)W@5b?dI*jngFOS}*q7|0?r(uRkR8RzGU7 zy!#|fJAj#b`Nc7aT09G4v@&(nqn&!mC4Qr!EzYeP>9btmIt{@Jfuu|DMsj)>%d_TU z(e9pc!qV@=B`DGykt(f6gbrVKi`+}vM(LCV(g~oo?N>xXdMqP(&c0XSn{Hn{>Lsq=- z5s%t1edvzE|FnltYXcXmRrfg%oX52Dc2qUrY|ZT@ClY`U>TH+mej1cRqES-T`42eV z9l&~RESByVzpg6V7;cs5O?4)rj~4>h96lR$b)?82rS4Up*7N&4Bb994Cj2L zhOO*9IkgKyyaIOxMSW2nQfR;i%FUIWY5lukq2+K*#+beadup|2kHuvqEcYc=@lv2s zu)J1ztK7iE_+snad0;x>Q7oO6rFlV2uRVi0=6RiCcFVe@OZUOW$eE!b7EJpyH0w05 zx3ZewDd!s$JdCCFrHUPK!Hz^uWhq!U82i<{0W$ZGJtS?Pt}4Iu^5`3bS_3|<(AuhB^7;Pmp1-0o zSsK8PcCJ9tn}P+9Y$vGD7=hN@mFlC>@@vmT360>v6j|LndV_cll$6 z=`bU&8KjSIy1OMQY`a0{XRZAk>>Xxa!MQ@oba zP8BmTfeI(=ZaP1-X$4h`c0AbJgt+#_$+>ciRU+*Zzx_fc1){6G%C8UUi-e)GV2KrS z9`))RHnbF|ry3FkT3KjT+1x7qb17Zrp}LevLC|2tNF-P%F}NOM&CD4zuMjPeDFu#dS3gZBB#D3OfgJl`R`3N z_k2-F$}iB-T@}2+^2buf#$D7NJx9a-@&Yt4)nfg%b&~*Uv)hiKRhq_KmP~XvHPfDv zZmyh1_pY;BvGZHEy3ejDf4}243!k*;?uEgAusSw}eeT@KjhakG@b8+PgXD<5a@Hlk z)%+1+_~{Y<$iY3g>zoa5Mq*gEwkTSq`I>9Tt~uXTyzG@(PrTGnHEB=;_|iZE!S9tZ zg|S&vqKWx=YT)=^z2Dd=iS-A! z?0l7X7?pEN6%Mt71KR+285}Tuy#TC1^Z=;8q7jEkL?&Y8>Y;doYQlnC{By=f>;M|Ei#&ArjA)}pyzVL#% ztW%IS523zea@-S(*-&~wRV|Q`M{J)m1-&P*`hs?6kbYkVW&(MhQWFG{#(Nm?Q!Uc| z#N2Ky)@MU8!vSzs6$`RE7EaYI^=Or;T}>L={ir7KI#gByC{Q6$s7l~ zTia(#?Mr_wiG+A9^KO~fiXAtbo@cqkESKYok3ky)bEM0~7Q$i25nhr=#^IMZjEl{X z2V|Y0)#%ez_K@75YIh$<(?{;0QyA?JX2NiF9@lKHSf|FRr>|=T3rfeLAe1AuJ}Ej^ z6oomq)RGpV2lS>r#SnD#qZd>Y*M5c`o`@kHEzJg}L-dTw(O=pP%E9kfi| ze51y7(ZNDkTQ^Y4N3PY5n1|<5u706*n&~4OFOO9l*Ov5PmycIftZ-Ew9C&S1;c|7S zIWL{lor0Cpj2)^B@x=)fID@hR$f6?-wCesAE)-0}&3}ujsW+g4LE&}e*Ku)eEh_*F zh9A{rMDyh)Wc2Msg7tpw$G6k8tTAbP_RRR!?M&k|4JeeFGwm>Y;lagS!h#Ed*v^dQ z?%r+oz*!Qc0!4KFG49hc*E_s32~rw7=I-DMq8%|@xVe&*bJ6`?B7F$-a*HTwu*91d zNTFIUpXFCfaHiSWf}Kk*v5UmF>KF~SI^i_yi^L+)B@U~ywi@3px4WfmG$QDw7P7&TN=yD!Nqz9f2p z1tE*TW5C2~cz@7_0X;QKkH7aC+tyj*HCv6i*@uh2jWI~v0E)k0`q!e5f@h72A~j+h z11Lbe8~p490+NYf72vuR+58xefl%3#%{JnFHskPHqIk5o7vYry0cEgP%YraaI+hB0 zv9}U?DWGyWF29PuHbSdO^w2`>VNZ zlcn%9FU6kvpH9aK^mE&-|ILIm1b#Z_v%0)aYw%|fEFwP{AP9U{#V?A~?I9`8C*bS1 zuKYB=|41Bpuk+RVM|?PScSb0m3=`1k)c7ok0%H)Af{;Y}boyFk0i*5`Tk&AK-KB!3 zcr$@SD8&aM7oUt&;ytk&U6YlnS%E-dB1>fN91MAp4H1g5y!4+C7f3A`v*>ln85n|-~H4-k!`w5|pIZNp2gxwG` z^jD&>I5Si+T6mgS<`;h*s;oSrgF0;l%nL*M;^fEN(~}vzmk}_yc_|y#(e&-_p0J*D z^@7|ff$jFY0DM@8c@*eS;H<$Az0zoyu9TrmG~lWT9v&G`D(@(kRLavbNKj)YN?&(0 zxTJ1$Fd%5EevriB8HLdEBwUj8x&3#MOUE6Y>5EyEx&2OiBIdrMSR+dcax!@}j(=hl z#Z-cZWbEt6%mw5n$t20W%JKBLp*89p3#E%hTX2uA2Ab!~I|ueWs?ZU46=(W>&VX#5 zldkl0QUp8<3{DEgj<3Fd`@DvI5gXR1)!&)*tdDL>n)SL8yaAkco1yUI$=TbUbiJHT z1ngqzY??Vii!d;0`G;8Uz3epZ%1O2)X*@>GaH@t1Z-$U?K+U~URK)7$1Hkld7~wbqVd8Cx&LK5o<4^HqPfF(;(O19Ds&X5%hW`Ooel7sTk(s2spfQk5VI2^aiJ0$} z+(5-frm1Kwt4W2f*gB~oRjMq-Q#f_UOSnuf=2bH zQ;yS~uDEBlwc%A(=$oD&u8llg{K>a)KQ|a| zUU2Cee{vA0x>@ySUnFtVIQ2CSJNQ;Na)4abkCoiaXuSTy)qbqsPsu@}&jc-U+obV( z&5G#`ekyy!E+)PiqzmMzoju{i?sSe;qT0w3|&|IE}Quij>0LV*_~D-F`UsX5)L=5_?rD ziP$J^XkxcL_iw%ayv@|s%KVt9a(0%&I6d3_v#ZvUai+R^Ig>8hh+)VZ$WQ% zPLli2iO=udIzz}Z3f7~XkgE)CGn3R3Qgb#-v;Qq6>3&uTvImG8YVM|77QyB zq}qtdmPEj((uCp1Sj;CN&$S^i3g2hpW6hJtt2D=W`(DTbzvm8-+az`Sc1#UpsX zSlEhgIz||kVHBr0iHrsJ5Et^i7B`>e^W1n2$&z=Ad)4N~1-9Pfm{z`aY`t>i5qQiK zhuUkJ{Qd7O*~8kycsHP2(^$%U_rX1{oztkzaa3ao6=iF5`z1I2`G&vB=j$w?*sYL3 z)xq-%yJ}X54T$sU3dx?I!nC+b&!exYbu1A5I*6@bmt9$okY=V5i!Z5|Q_#yRM_N)j z)r6t)*GXK9RW^L5+UORPY>_gup%=Tny!{Q{;rMJg{#u6eoSOAgQ-;?WGJDVY4s~1X z?^~(cj;#3SYx0}-t8c9tmjp3@IX$ zZD352!>Yy(Is9-I%4xPX@GaJ8IfB2wXYf_Qw;Hox!zAP*D$E{iNsE@M${zZzn67c* z;|LnmZv(>cW5QB4`~1mk!s0vP_~dnoW4kYpbK#6SVxGpYr|A{b?iWnqbEh7+G@G4d zpUwwL-%qFeto!;Dbx5mot7?89o0D~N_}x#^m;w(a+6cKkLALbVU~Myhcruv1VmuK* zOmV?^`cRo&Vhr-csh8ToN&Rh0s!L92Xj#AYQxptu~@(7T2ad+k!2ks2l^RGl%7!;DGqbXJG&w zq1S9}XkAKwNIHVUbU_(Y%aIjF=Tzw7&{5W~(?~5}lI~?}GdO3iPT3XTl67O2{GIOa z?~h|~K3SG5w<~>c!9UD*R2?@fFFsx_x2N~;;x^mLlM_e>j6T^=a+jZ_%*ul}lptAY8Qa6~jIKxH3MlHlu*H595<+p20e-&NrH?(b_MYiNt$HjXJ7y4GbDU+Ht0aCl;x zUelgr01j!C$)@FcwF*^cQH{H)(tLjvZeDuAq#IgcZr&`UXusmXmUB-(DWql{*jhdF zdhdhsMjq{%mtX=Vz6G9ZPo>qIm!3i8VtP`VtBZ+Iv&c25Io{p)*L8r))+Fmhe}$N| z&@%|=xuyMD(TuezHzP!|KK5jaXByXdXXukT*hartiB1Mj#8iPs6MxeMa#{3F%5x@_ zSYtJVrmpMAt2$WJ)#t+z`yiJ_UdPS2Gt&gcxwM%2p02ZNP}P#fGP0f|FaNnlq6GC; zYX5|tloqZpRot`E#`ZRBL#U(~{9y}qiNTiIA&;kXCw0XxV536Ha?0)VM4D~Oqu`hR z)FLRpHht(uaLS*A!&h17Np(Co2Hw*J9EM2g5|_pSDlK(IFdS!Y_EM>7HU5Rnl!7P| zqaoIN_)Q@5HuGwR*6?zDmcZMNUu2gE6y}!%W{gC$ER_9&dLO81*s1gMND)J)8`7l!XYMgUAkByVcz}ri?U^@oT6en=77m{@)xN9X9 zPH|x#r?oO;TC&FP585&BE9^wHD7O z=s3*%IW>4S{oMBy{>@ISSkW*ufK+Q-&RZBAovqDkx9X(AS5Dl`W4O#h4qHsHa=$?8 zd{5k@bvhqj`+W?aQ0o_$n7$wmp4Z$c7_|?ifuwRmop`LrTw>MkHh?!d;R4l;oQYVA zq%4a=nh^vp`mUy}7zWMAr%Hd}De zGB%j0?H<~^G_(0$k+yog)bV@o$tM#~_!ocf$;0Mp+p^ZvaWDME#xXaA({%SY;_(Ap zpk1ImpsL5NQ4(AlNV8QLZ?G+QS{@rV z4ABD%s{Gh4+*_S25o-s}GeEUjJMOa4u~;2*A)hFaM#hVj4okc^XHPayaXenPFE>yB zP~BcNxr?dsx->5(NfSF1dV=NsM}1sH-y<@*1{W=hV_$UtA~#y$t%p*+p;u+L8bo`pNne`oa+3XXS z2Q?SAPvIqH2_sNHX0Y>)sPwAh1_?;Si?=kiNRp>aV2cMt)sz}fmU=s8<|3ejpxH>Oj+}iPz>UdhKdfLEcZ37m4Rmx*%Lv>V6YOO}_QDXV%p=4T%0uJtf08~J$zay_@ z^-yJ*yk2<8$b>Te=%gjL+vOfr`=kQTsk#uUnll{L1UE#6X#}4-`mLOg_{ox-mTG#~ zAZmhaq#zE7q+pZ0b8LY(&gd}*nW0IqVdr3^iabp?nL%bR z1Kfr@kj9|cz7)0i&MuoNXG)=>aaSjTUP~ph`u2Dj1efE&p_=n`r235tIlkG}q|p;i$twk#&;N?( zwI1$i8id4nC0CR!{f(FGRC9@B>6hmDjAXI5xuSaXm+?foQ+mJ0#P?uY0IxN@M#JUK z(}vZ*B{{zw$bZ=>|K&`gy|y9qoxd^B>%F^4VfVf4%G6Yt zuG8TLK^VWJnA72Mqx1wqFMPdlGe-kg<}rwcdGgPW|Br_b^peqz{#9$5SFIi1z2i3R zT|eFI-<8Z>y}|FYc%6sWoOs+jvv|`B|IeQFH-F@X?RH~#q1hPUC|SmC+u;}WC-$ZK zZyYAg?Bq$SK{I*@*|{{|YXmba0?jq2F$0yAW*hU`-pIH_b?brnJ`vwD)!9 zD&{cr0`p7e-rnw8>g;>b@D9M&pf5^%iVu8sXh$XiAFeCM<_OXc5vH%}76Mn6f$?j&!?D zbBiV|SU&hcvpuajRjsy88Q4>rwB7u{ciWzZEKMDpQjcu(OD2(c!tFh)n~Y{d>rMKd zcI%OZ$7cGl$$5p|@V*wKiJx-ygxsvqRBviBnf0wV>vxLgBgrLAt(#n3l7|T2rBiPH z%MbB3zx#$}4aY_TS2|gCeLK63(=^}U_S<;4*3yjE*6)EU&OPh#LUW5v!~b{gn!gMu zKW>-!H`PMT#!ThxD6<*!b8SLODpkq@_-#_>_m*0Kpq@uVIc_(K_7Odh|FRUH!ug#L zN4k3O+v}ph7l+B7tMi0Pr5qksW%C)qw=~Qw=w~g z%7CmsqRAx)dgMiL6W~mYrnS%mKi{gunSnV)W4dtQD`YLXgRK3^SCl{hi_3Q2{!Apr zHHj=C9INGYL>uA#PSfp=um=ZPpC$1V@4e4`*He$&ZgTqhh?eLu)f+T*m{XBwZr^#C z^6wn;;IAHd;8)7O{^|k#^0-mYTR6Q=r_pohQSFSzJ>!43a9*=>`|j88+c>%Y%x$-P zZ`>1)Iwc)}CK{bi&slk*H^wjLYkC174LwXhbCe{R@@j-=yrM?%fIyQ@$wzUum3Jg@ z<=um71A@CXF|}=B`s%y)?4pr+dU|F&1nCuHJf^IU14<_&r89GuKHnapCRypNxq-nUomEW_zy#-K9P!58zAsmZ)| zdS5j!(2_H{L3dw@=36W6%EO3jZJph#RKu9;%$LIJ;M!Ea zp2=+Ut@n0BSDik2GOy|2@~Mw<#`!x4LJe;rtlQ_KK!ob)ir(@s!-&#lzLHCU04 zC*?fN|9VZ5hUMKrdE86|&BUmLJ`PQ&ni)91@JK86wGph%9Y@-1(AiKU~|LFFAJ#bf@N$ ze*&0_w(fNsvCUSYlvs_1D|@MVJA5A(W^L~5{szl7T3vAo);k-p3Gkt|=F*r}+=r^l zXaHJ?xB)a~k7M0*iOU94b;OE61Bzy7#Ib5AUIknyieJ6%_(Ok6hB(RC`}9G%CmgB#e4o<+v869 zqm}^6AZo?Cx<3AZcH;q;bM?kZaN>$}`>F{nM3^%V$1tvD|t=>y7*}w`0n_gFw5&o1bXwNeC+OFSe zVfp^ztt;#&e(oC=>>pm+Cq2((8T8_gr!i};C54I3kjSY!KVeQozJe|crLZ5pw=E8* zD$~EkPU<-aYX7pC1V9Nay< zy7MA?udn{hpD%ouO@8GwTW{Zx;L{sd`&=&H>WyhWvElY=TxI~)%{a)I>zJ}sjh7us z%H5Un2;EX`WWd;2?xqHV?o=&amWrJ;QWhmmrqqqL)@$X1t?U5vjRU@>E!T2@v7KIARBmmr`pfhQzbs%CE(cuc6)B>Woa2BHi3tmaho&e%>!0EN@ z8CwAPn$_r=4D|d3;-173;Vfd_aCO`$TpqhuULk;0Jsws8-K1__^MMn&wuNSZLOL-mgh^UZnR2I)7O1mIIvaL1O631*eVz=C zlXWLHSbzCTa?LOGwxO;QzkK4B`!}$^O(>IV+et~dIy6_E*H*)5+4OH1vms#z=wO1Bulo=beiVbrbIKUM}XBK-rk)ULdqW$*IIyY!xR72jAnVn2 zavdy++!C#-g9Iv8AQ#*nNKOa^hjO-NbdH!JAeGq*C)P(Dsc3_G`k#LyfrK!55s zf+91>j4>OS_hVK@)Wrl+xDoUEy8q_bqW|UuMUtV4JjCO^Sg@v){WJxm-)e*fWgO;L zithQ7(!zP?Dzu%eoHNkhNx-4h5P&K-n$MTk!Rk};tVSv_hH46T|LE$5T`jXq6yy$- zjRdaLm0omwqNX{OHIQIg$~jza;1$RS874tTf1CuM^Jq8^#QV2BT)CkmEBS|4PoA_} z=K;x1POcvIOWBSaDi3cfzWne6(2Tx^Uw)I}W{UBC)dt=lFRp*=#Aa<@duU_2Z(`S4 zbt{dvyC(Y58$<1V+RY~(TfgZu{!e~SdD#D%P1E1Q99mTxeFe<6>zL!rEzF$&*@u~z z7!*9rX?bHszB4J`mzHmIQFStyZ{H}eg+BZkLeTQPwmEXLQ&)(?oif(Q%?Aw)( z8=XC4tK8zC!{Ow0X1(6kX);+x##f^&kjr%z)?^!JGI3giDWWqO_3%mBjYfmfXg8S6 z27}qsXRz^{#@5RVyfCccd6sQdks6%BzwPVRdHOcrbLp*@?z+Jk_jtVCra-sxhFwr` z_m)17F0$HW>TD0hHJs6E)oM-sZnu=Q5RFEWUY4v)o)~+))Y4xV2RbH*$ zV%9s1<|YGt+FcrLlUYZaSW6SD^fWXUX?1f?%)F4J4y|U@ zmoz@*Y=`MCHsxV~CTKu!YozSaF5E!Ur$+0UdvITL)l<)m+abo=^YvXp z>1MKhxyB6P~2x~f6w<4fxSf~{5A ze=92SOLk8xRk}u%)4smvH*>0-HpR;mb0s%O{w;HwS&zF#?ELay-u;>vt~Sj!<0&+m zot&Bgp$$$Ogf^%{q3!c66K+qln#P}sZE#*crDEHrKEeJ4o3SG@xN6%jI@>P??)D3I zraPT)T~ECS&4Rp5_0?dj!Io-44aLhgJ@fTbL%$plryN@+Osqy@WO@5T^B=kWuk%0c_v~xlaKP1E zY<78EP|p7(|I)R0{lm@HCbP+4GHHzBCdbhK9_+k!b^imartj<}rDOl_%I8-N4sYr) z9oX*P={5<1$)$^bY~VTN&(G(&{QhGbJeRxU&vwLT+TA<4{I0f0_xFk8fvyKzT7BJK z_byk|PK-TnkE^eD!@vAnLyW>^DrfakUQ`t^(Nb;2Y~(Daac$+)ZK<%xs+(m~op3m$ z%Bc)4HJWsPs(D9?Rc{YBNdX)8|5EoJ;BB4f+3q5M zTy4_&@7E-aCBpyvJnsPrQk3JQ{jUG|Z3;N!JqPE!^O^TuXG)Kxb!rEh_{#l!qp4PF z?TPi0L4!vDa(Q;|G z*ji_@_s4py+FDa1fB#n|h(oQT_cqlDW?xVru&Pb9yWFv!xZ0|(7XqDIh@71~sGV-e z#F;!Jm3@+}DDb)rmsyy}YF&xg!HCAW>LsKy1eh@40L zHYKV(naE0SrX(5FR=%I4pHp>OTii{S^y3aEFKkFAC9hLw?d`FsZ3d@s=;0J^RH<9K zT6A_nsPWXgbo$O@$LI?EYSz-^Zn1W%o-6%DKW|kVC26!H*{PQ_5pSJf*R2~?tBic= z;X{JcU{f1gnj&VM(<`akJGy+L)A2a7YqU|>dOPwLb19fW=!3Jb0pfIFh_X|3DKu1N z_bnZ3yorbbUt1vZX71P@Hu$}f){~EqP7P1B-9q+#P4n8lADq2~N_zpu#Usr^~$hkW)sEOqBQ=S$a4N;THM{rx4V zs|0I}G)W$T{s3^$Q=|!>P5it!dL`P1J&pxPlbii!?KSJ z42%)-IvMq1UIbO%hLDrXAv;LKxD5URO8bi7U!X8y{2M_J6-$7JvCPZJ2pK;Q3?82^ z1B3v%N12=vr|+t`61NgpvU54AqzSEhRHkc*LFj;|68YX%o`yWYZcr6G0uy~LxY7Y? zC+`Y@IMTt06*ZE*C|-o0CE0TK@Bo%3X>)Z z=7wHyi-oMY7TQ$(MDgZ>r?rpJiN?_L)6cc4%s8k zlcwvgKV#%=*19w9Cf-^4v!A;CcB@AqD)NtC__H^Ryxr=3*wai5h0>2pcl@0@z^>&# zf2PhV8_!&SUFk>jUc1BZ{wW!A@=d(_u-9rezVT;YDEUio*V^p?_ur9wNL|55n#;J0 zjGMVxk@8NTIL5UNBVN zSNJI|#S*<*lt}r@O|%N-(AN%U`vyZj`OW9MSF;6F>g6SYx{IAEp|S z_eY1L(c$ml=RC={WBh^S@NjbJ*_gXj;df<}^7G`MjIwOJ@EVj={*?9o9<-Nta0zah zBVaIZd4tw-p#@{hT3~8$v)Yu4IbAGgDuRPB?`~lMkX`aiYP;n0MHS;Y+ADl$;$ntA z`j2Zi(Z$Y0s32(~AU1XbqD8YvWKKFTOwN%7QcO&McX%REy1aC%cUTPCRo1R(u+k`ABe#$eKrHoI&aya~SMoH0?uh4*ao^d5DJB4Cm6wRA@2J9o0m!f(M z%qi4k4rD#Yuz9=C;aPBZVO*X=8(A>AyEI^*$Z3H487dD1BCA3b3mT?3Nyn&BUQn5% zF)%l{yXZlEEgF)6-=vM6&xccVP2;Q%z|G0&<-E#_*?!$tkpDnnK<5ON0WDS+bTWt{ zO=4tEkWX5CvYp3VzXa+sjbHro;tQId=^o7si(mdCt+ouEkxQAx#4D2Zxlb)+KSh#9 zHd!ovJABzslJ67Mr@m~r+F-)AS?yo`RO#(f=#z;Fn4~8XFOg!2&{`~&;-znFI^x^W zXMuHyr#fayx`W%qakd~Ja-_Q1X9H5Qz^BW}J^`JBeX3RL6JR>jh*M~&i?}VG{m&=s-v&#O^quiScUtOeFh+_U5opf+&nk?pyq61V|(znuVEDp&0pWh{!r1dQqnHQ`~}cbKiKrdZgE$>4i;(5^OY$!!2tdom7FUf6=v zAoa!k9PL!#w#;`zfcM@$a9la-3rOKfkxz;~&0)i`QRHT=4OG29p(3f}PtPIBYXC!aX>qUcB8_y=BluCLlL zzVVA+-TIp15+~z{iK*DqVtrHno((m_HOBD94fSIim`hx1lf7oIusP+}Hkb+Ad+TWb zlShs{IhbZn@v*+LPdt;Uc85|2D8{f%MHg=<-)Kjy-vl-01v+ zJAy;e#;`H4j;}G*I%-@x;)6w@bgu8YFW&V~j*tPtFTQx}2|DkSaptEMuh_NyYhT>x z^99!RhwFGj;x~p(HN<9hIy4*h(C)Cb7@LwV^4ihnz+j8NDn@FG%-=}Q`h)*Y|CW$Y)!1yF9<4rYsT3jg#1C*z(`~!nYK?Z zJ+GMA%5f5OZHaNSbYA#AS2)V@VgbA5FoxPt@$LZn-45)bjXNF%%Nbo(*Fz_;;Y6XW zOc5-w5%T-?6mxql`G7tG$zX$Q=rg>aAz)CB!R$iC_fb7^5yFfh#lfW=?cNW4U~mt} z@;hkXFm9!b_7wD)1>5?GD^PbjdYGPVq>E4fz!2>@PR0hg4!N@I_v1lj=C#G>Q$ULa-u`R#!lH`vUg!XpC8g65W~HLG-8ml8hxPjGGslk zbcZ#@D7Mndk(@1$Oa9VBS0PE{vzMGs)|z{&W{^uxGfTEAK1J5rg#?Clc$V_E&=%|RS7TT!0i@DvF{0L!wS4(~e z%m^`yv4B!GIoD+NP0Hz4PF)4AQ&d?W+X#0Xknay#S&|Hi3f*z$pl z3|xA-%`!ccpYp+svXPeENhOcZS=?M5SWfdNPk?_)Rx;fLOdqV$nb0s8Me~zNjlr^j z1*%L2U_q48dYY8M>OosKg?kCGfA}5Dody4!#B$rO9-Vyk=2Y&nXQm>}di!vEirVp5H0vAs<8nH6f@PAWnYge#CA__8| z6@^JfJFOsnd6``Uv{A3I8X+-ky(C1xy@3!Xph701q=Iaj>Q+z^)vJ(1+O7M@oVDA! z&uV>*{0bB0bg$WL`{<$4*?kuQd`;4lrL$HmoPQ0W++IUGMJT-Hd%2J+bosp)@?-UT z0rI1u)rt6Ce%HI=kg8RHd>Km-d>?{{kMzhIz@4$6hx|%;5i&;~5FVSoW=Xd;l&A70 zP`VpyrTmsF@s3u!+Zt^aSbn#_$~J>{<5X(0W}88iRbW_ zYO$&1mtLbvF4Y$sFMcoA@_V^fyjSD9^hFoJS0SwXnMnmU7GG=)u+G(WUw*}l-fIFo zsPz)vw;G>^e2=f;xD|Z~Tp1~+x*Jv;y3D9m&Qznyu6EIHmEz|hbO#t9(Y2B4hGmL` zV)b+?!n1*xlQ}?;%?>Ql^j0Z$4otMpRCiJpN_6nxbH{5{!4Pn}hJbcd2%;khQh>p_ zJ4o;-abiGz0Q|bCL@?z{;g8eV5T0|8P@N}{q!+Nb(@-qc*g*o_a4G#Y{OX3VA=+~S zaDe`7H+%;nhCjwgFR5k~?8Y+iIO;@D6)Ky|!G0d3&qNEuHT3E@o}w>I98Qqa;FO9! ziHSGE<@A3w{DabT#fGP%zYD)ZWqN0K$cZIXuAqs)FEqj}yWxhY<2&*Fq4q;gFsuea z4a8(5HM@z6zBW`7EyB}_Rm4u~6}SOI-3q;=+9bHZ%ZAjQLHZab5w>WJ)}z7*)RU_L zVeM*3BrXjm{uTX0N)*#!GrNFL@+d(5^8xSS5kyMJ=x)#Li1jNigz6 z;E7hn>kT$Ffw1gGwb2Ig-UgAEM3MfgK-3YHSuKG-+bsziK`rTcy+*Ae@Sj<&(-D&_ zI#gx{ff z#T#|>7bS_lp-(5)$ng4tXc9U)RVvBCH)Jas)$-^ z5qO=bSE=FAdEzij2CZHt@w9hIf>~=4jXZr9-o}f9+E&Yp7RyD5wjWRvVo|9ydg7Hu z+H5A;lEfDhiJ@H(!WzQswJIr~QhBv>P^bixhPSu6Madxw^g-1Qi<4K?+I5;HmD;G% z@wDDW+Kn1Tn}!&zdO>AXiIS#<7wXJ@qNQC&Z51^&f|jS1K`WdJ1{R}%K7mazYXpH8 zHLVt%U$*dOfdH#0?T~_2r8g2;s1W6Cn z&XP_?FQ6~N6GaWnIyGrq_@{NRJ;g%TXLG+l16JZY9(Sa3n~{h zs@Wi#r5ZX0bfiW@tn>%8^o3ls&$)?NVRM*sbG+kF-AUI5Bj@0v+%#8^K?l`CCFg?wih?Nl0a1Ux_pUaJrS!uuNguvVYnENnfBn$sleF-` zCqlGv^NFTMP@?3|fD6T6uW!`9c<#8cZ-d<&8oBp*PPK~bEzYI5KHw)r#EJx3$t8@? z?<_*byS)eteoqlR3e7CnJ^4nyD~*hV`I>MnR!E|&C<&o37GDgr-q-MstoD(w-lsaA zzx?mLa5M6lJ4-N&7O3h=*=oFg-gBv)(q4K&Rseqr;iPx6(rxH3uyO>TX03qL0qqOk zNk%ZECS_tbz#|Pxa;wC(%5p==hNN!qaJG`ILHvFw)KXWnEqRd3jk9^kKa*e7Rk$u` zwcC^&=UbJYrNWwRFXoA!R;C@ycKOCILi|v*3_G0r4amQ7W2CH`W1Q#V>MUk31vM56 zjV(~3(THp@*b9N}Eidp?Cu;$_uuiXdto)8LNVb1PJ0w@+??W4a=Zc@F;$eo?_56Y1 zx6v;}W_!Zmg(I`W2hL}Ct^}FR^W@w-)bD)BN6YYclkD&T1dgPam9o4qdjZ{7Rr$Od z5FHeZyIP{;2+9hdkC`5VWnbwV%($y1RV+zh;nm_|4$mJB)jvWGm7adY<}nz;5XA(I zLl2Qdk3c{aU~VD_(j%p(>7lxo5P))GnbOnrGAIM_Pnqfqf!YWzgq!1K^`S7kOtP)K ztn%|vLdk3A)LF#Ya&u{J9k+?w$GwiIJ)vSD1RyMWtk4|6^m<+L0FLAowp^2Sf z7I4dX%~Tq4pYnZ!sMK4Sr8Wimte6UCEhhmd1|`UZU~xc_LWsy&x_wTI%2#$=2}(*V z1QMY?IC#5i{N}!qVQK5LNABHrlBG{N)ec|x`YQ)?!_)WPcklGDZs5xG-9CrQ6@B(_Hp@9xv9b{S#lbEI0I7wT@ZfmI9wg<{aG%bIsV1a&(t zJ0dR-P8USQ%bFNk#xHg$pwnh$4N4|bA>2wa>WEZ_ST@%#^F~k+Tj7-`A5)jJoQ06e zvg7fYn{S!<=FINhJ8!*t`?t5R+CSm_c5O>*z2MW^)IDLd+hb@D{N8VR!=bvzz5M_3 zezUeE?0wwp{kAu}x|Hzsw`Lxj+3~HJn{V5>dpEuH%H6*X(_1$P4F-?f9PUxu^gf}X zHSGPCxArmbQVrdx^*rVc(L!F|%0gu<6O0k4rK?}T4YM&IWK@3}8Jmbg%!f20T;Avg zJRH4Z$pl{-UA;vY3kOu!E6ktVL+|5B+v}eoq;LJ~+}W1*zwqWW=NADLaq;vIyS?Vu zNn7rr!LxJYL-pS|^URw>&1?xb(7Dlw*vWowl7lde8o>C>Tk7I*%#3S9k77fyAYc}p zpkY~XUi1+btX>SR!68c}j6B2?@H@*A6# zJ@SGvaP3VjHoM@v`WgfCQz`^iD*5aNFs}W=6Hf zTW>XLM`s>8z3re{YKiQ)|IyPk2i2lU)Lg?COtQt8t(OFENh0UHf>fV1T4dAG)HNDf zKz(rL^rQFf-207KM`-im{ae}BJ+ZC(4{r{2urKmsEma*&qGx`VKbKwN=4bt;Egr!n zQNjN2uo<`W>$6M$mFJ(HcqqBO!KmG|No#D_o_uJc??hj9>CvYzM|Q;6+)F3reALI1frDN2 zyBDZ&+iAB8_S2qbmUG5*F1#FcSOFK3SIDlIppx=q0htL_bPwPO%iCcudD1%@20ZQ2 zeuklZFx09{C11+|iC2)V73jq1(lDJ^ z0xVgghb1lrI$<)gAob2mrW#FzHZqd(&`IVcjZq)zgzSf0T+Z77(Ar|nnULt94C~Lt zXNE09m>s`rzkEKqs=WB4XFhQQf0=H;V$>}?yXC66$0h{L(6-F>p`}0bG}ckk^<%n0 zi$PbqYUuiHy9fBO!=E^H=J17IUnjit%s*VW^sLTc8PM^UPoAASHgVzCL)$akhWN3X zV4bhFbQL`}s3RX6*uCv~dbfl3pZdgML32ZOj-ZX};*#7LcbF^KA@6a;(>{?;P-k9u%bb{?uHdyb1uSSb20QM zUQwYS<1a)yNMISv8hRI51$x;N7O=b2KzDh2k@f}Jj|AFdvUXkRf9pEUEKrV$>;kvM z0pevDiq$94QekiDXS9=EfPlM=W$1SyYwFSwx6WQhvOW(=mv1>hXeFl}w_5M3jT<{9sdDmYEQjdgwX{tEKHOKfM#jB`{?Tx(O2=@-?2hpt9; z=Ma?|HgG4DTtIIzr-sE%z^>6o>L9U8ZFjP$ypz>m z7iKF|>AZ2ROl3n>K#+K<6h zt|E*yDnwsV%xQ7bzcrd0j_0l`0uOyARv5h%=Bv>`2vWTRhF{)L9|Ky%g-#bFn|7h+ zbRZ743>QN^%s`AyVJw4aha=j^f+{mcOGe`0;fTj_R!go2S`0yxVEXew3SN%|0d1rC zJLzQD325s2h7iJpjLG@nW;*3%tgnb#v%}xg$LPEE0(4?SPZ|^aLlBnb1w}lPNMk%K zm(E`?M`eCdWp(JGt<74Q0Rh?)0LTSGMQ9M?V!_oJPsSbopiOas(ldN2*{BLQ0#r#? zG0^bF>=?j(pi<5?n>81j(Id) zO*YFq%N&`!Jl=ox*17n7b03xwBMnS9c=va(sIt(&lp4_V&foGaF(v z9VvJJGfhjM*xg>|&1iabBP~|KC!gGXgJE-gdcW%CyGkbx9cp=DZ{?A2|wbI3^ zHY>fYI>yFKXYMPx(_CQ;I@JDR;SkF72&dHyQwssO2@AyME%dfnnC9HVB4)M~^GASv zpqDmCES+nSbA##Jxb-E!y<=<(ghfzo>~l2@UEXPIXd@k@g}yC7`J8VCj6aLFp$kgc zD_4?6~;oTH8U}DP zM514fiP%@)0J+5s1FbKX+gmK`MZSc+lT;x(#lm(Mqvt~qpDX72I!w8t#r$s7Z*n^q zb3>Me{-HiwWMKe52jMff)3UH@=Wbi1KtHQe%Lc(blFs#~a|3DamBFFiefStx$S-RJ@tg|&-Bv;pO{qbfq~t7j_&G-bjnRsb2O_&$<`P- zY~r^UCvLW?#P-l8m08f3R1UKzxOx2e)sH=Y>Zbkyr$u((+N@dbPSV3fR0|^EO&P7$ zZMxAIQvI~_v)iZo{86vf-{kG--SqJ-2Or_MN9xj5EYVdrJs0e-$L? zh6(|%ZHQ|4bV#|B?;#$)Y*gnjpQ^P=Dr>j(YgX&qZ^QS@!TS1x^xuK6^!I;-{=1;; zfB!gXKJHU?KF|$U(Tlp_D(lxIBOX3@@L9a(D_^;w?3ca*mo2@d>{4ANqu5*$+yK>7 zCb?I+!aC^J8{+^*5&&v|yg!K9As~)U#6czLVR+v?i1%#=*=Z`8Q@;UFiE4yORD-L5 zD#>m7GDE-!?Yfq3pd=_3LL*Qn1VFbTrd)3*<~Fdk6P#k>2-QkY=eN+SMuzC**U}2% zr5os0QvjyC=sG&(4GnMD43bZGs|+r(&aM<7eI$Z|0&qO_mBkl2HcVnLz=G8Ald6p! zq74Y^fzY-Lc_b>|nV^RdQEM}P%{Ej!AM}WvC#bQR{DzQ#HeLFW5kdyP$);H(*-sd? zf3D3U5Qvb#uSHLgWHjB*Xl*0Cg=dlBD4Sg-tw0C_vco?@1g*(MzC}2Cxv}I#AQASr z!q2gp`v6AIP%S%yYg#Rfp&2j3mHI6ZJcDL>rX{l2O(m`dSdd2AA>O)m!$uaG_llsi z)OPk5#!%n37DQV&nuTpZYHZjDlBk@~tJIvu6PN(a^--$!n*s^1CjX3Q+zggN}{ z&|st_>rSHW9dk1@@hI>~g(Jp|n~?fI{+zc-ckGR9nKU{?ourau-+KNd&!3s=hx&9Ty9RdD9ITOFS)oziy1VgDLOmq(Puriq zWm9_gwhs(n^>Lr1GquSs+u-iA-+lJ|FZ_I0f8(iL4PEQ5o7vb^I(YbFFS2|&MFtz- zc5sL28aa=3>cni_5wy0OuICe*pxVupC#ZfD16z|4~db)C81*I~va&Eatae6^j)PUIBCT z!NYV4KWNDriUq?#c{6`^Y|5XWw-_snkJ~?WN6zD zCVjvBlBDY%UB3+)dl%wA)yf4|O%rHU$3t|1aMBKPMK>L%oTe#+2?~Zbdf1=N?U(cB zhBRA0Qr*pryoup307ijd9e^f=5ecYdYJl#9xH5Y^uXGs|=wBwmhMkCs&k$0sR*@v= z-Ejx#*}grS?;*0U!O`LT@HaLNP5$jk^6UfmY@X;ETi=!0w>Q(dvGgy`oc?LL`3vi> zyJKDN@qHs{-p!>w;bb zDE^B!DoSKMKy=EWS8SO60h|I{mIrPRBWL6AE`+U4>}FPm!;dguA(Fwnv8O?pedV@6 zd@}HDX8BC@y*Pc&L5{1!w=#21u8!+fa%t)OU_@eOFVl$XtGWv? z!?@7eR?9k0!=*JHU~s~G=@ohgBt9=?1&*IJ+Ll&lMT^<i)8ff$X7eVnt6G zWdHO<^ZiO~J6)oyp6}x^#J9OSrBr*l73@?%RGY*IkC-fwv)z^^b7#^UZj2KWzi~tQ zkI2S!ga!S~OiGLEEHGWJutlGk$CBRMjfqdvRa$!qUy{qYFZy>{VGRgjuV`o_N)kZJqJcP zZ?VvfKI~>cT_Fr$C)ctXr%RXtL+>!|MZyp~3*&Tf#DLbp&p0q44Bc!f2R=nC2)7C# zDBiSUW;a=l&T@7dgxz7KDJ%BPAq$M5s!^4Ce+0Jh}Y$Kar<_RI2 zczf%HBSWA5cIlO^JBM~S^x~H`Uvb6eO$QI2?-Bm-f}cE0-srm7E3%Zjj4a!Mj=TSs^OOS4)@Q7S@zWIvu~EWK47U7C@;m8M`3oH>Z{J zqDn!^g9s|%<5URF1C33gAYi!1!5t0Do3fNu1xww1oY)@!IPoH#`A!YW2Zp{N)UU&IX zTK?PgvJJxzC^1lk3%}z~{j2mn?mCXMB?d(VM3!6%*GY#8klQ82)n^hB8b}I3V9IJ9 zaEMVM0GV2^g1ATtkA<~br@mgO59%zkPFC4@lZos%g-yIew1^tPE7a;eR*w-~t``@* zlW-C6J|1swJ`SYZrH=$7?{Ignb$#immp^Bu+xl91Q~+#1lfOgHI(S-+{+NlktLP0a zx*)x|-l^3>+3>|h?|g@g&|iSxInmrqPBe8VBZU6g#n;nkt?)&#*fBry4vkPr?lO)} z6cC59KE^mQk?5)7yxqhmS|DuNWRtBKgCsgV^?|lTPk&|xpypPGMa{zN$|`mFo2cr62p|};b$1W|4JYL@+^UkmS4K{diMJm5kS*}` zy#d>YvdAEG3O`Aoefnb$*ez|bD^<0z4)vA&2U^*QQ`M!iFT)KUdaLxgmrLjWp|0-l zNguKhkyH4!)HV4)czUw``bKi6r`=TRDcvni3K~3D`Xwv!%Q9^d!!lLy;`<@0R|hK? zfIw7>IxIvh#k6h^b%GqqoVgU>#n^R@8dm^ovNukJ9+f)K%5`3>SOb9@2$$6iZgin* zfH)F5D#1kC)NKjU3si5BkCUIR7sn?t^s@a^o$Z)}du?%O(aBB;_l_;X_Y`GXJsyy7Q;I_c#Ob5C*1 zKhjq$Y*A43yU@erSFK;6=v9 zk&U=8wR;bmDf$i}#{T%!71bE~UDgGIFA#x4J@P9mbt~5~GPd!(Anvp3tyFFTEBAj2 zhCe$udqtqp+m@Uf|0vNt{dDP9rEivg^)&g}{}?*|P1~OA>Dg|#HRw!73x8cWdbF@q z|K9NW2}j=Hgxl#l;^(;9WzH+18QlcxGOU+PLL)!g6HrhPWr^yF3qRnj8Fa5+= zC+cKb{Ay`V)L4yHJ|v_~R=2FtmAVe{W_!)~+uXe5wFu!WiQZgZyU@S3gS(H*%|!F9 zgJ=~0Tw|7?kXE3_|gC#(<_Fzpfuq)pG0Qh32-&DfB`qISUY?&4G9U zVR9@g2MmU)a!efLh>=yhC^j*gKLiE`0iQ1Vpt}SKf{)Y@x}>yo?~ol|{2(!&`;?#9 zjCw=Y?%vUxBWj1Jm#uoyp^n^i-%Yq{m2vmx(cax%2EEZnASZw7@RWbh|Kzuy#J$!w z{zZv@g~<0!KmOwfc*$tfb#!d**EOkRS=FTL-(0=j(V?>~{RGs<*wj>vAJyxZUOoEc zlalHn96QLf7$6ppR!gPR1efC8$3cL8TahseK?ItwlIPij<}feffx9XUOfd!`q>1H{ z79=E#fInfiMn@ z_(@M#q+QBkW>I71Ff)ku;n7>Z1i0%EWJY^zDa&&tQu^+!#CqzV8qHLanGG*tZ=UZF ze^y~Of7{1rA^xX?0cO}wMTTcF&h6(O;c^Yg=ddqI2YO-O79{@INxR`jCb3*rm88C# zR>MrOuzLnN?e0lhXof8*RE#-5>n6c5-}`R)6-o4lqaFPla7CE`3O#qm%*5cF9u|}a zT6^XWx`^zPU)FMlSYl*GSvb(#0AeGrt|m?hAaWb>1C;*(z(mT9!Jw{qHyXmh2-Ile zn<^$k#Fq{ciMCirjjJvJ$GW|-8z#E0d+N$9`ZoPXAAR(r^lQtN8*ksz-oEAbh{xueNI>Is z#1vVFajbi2uic5-g|=9*Vt$U*sf`r0R-{w}+P_#7LWyG-N*rsa=Nb@(x}gaiLdhso zJhVU@$EEWPu?mVUQhdgjaiwXWEXV6D<4&*Q2M%gU2KacTS?oyjHlx8%`jXaWlx9~F z_P#w&$2Vt!;x^+V26oUt9o^;IVS6P3uWgwZ6=S)Rfa#0T+u(;n6e>UD#B{Jw(QbsX z>r&K6FUE#8L!e$U*9u20479&XqVKFhh<+fn%~`B@y%l7a4nKe-SU3lA>p}N>_b_k* zv5m15VO$%PEN41Fe(**J5dSz4`ZioXceds3=am3)p3{<9`g-JYoz-*>U;iASli&TL zRK4+a()P!X44$2v7;N~?y%07|_L#J#c`Yq%Fqo_a>$Ws+TU{qvrA`{ahR-&eDnahh z4VLSMs^F5hg6rok&sPNtvO`!LR4<1bY6n^ay$0$=&Kt3A8k#@|gxJrROzX&s*i%O9 zd#EF4-*Sq3IWV-5cAZPtQB~Ez`_ta=N!=yu=%XfUX&!?W>G(52_0r-7W&T1ey=iVY zH_QEmE0`h5vpGo@)Tv@_H>{itS)73NoGZf=K-R`ix_Daht%OCGt;QKYV9CYd0HZpH zV?P7Drp?9tL0Ws;z(S!h(W=@hFQ~Lg9+E$>SGK-vmc4C)*6o)UT%J)CGtmMJ zhpLXCV}!xJ1B|FIMF%p#FshWpA!VJe+7E^jkYdepKj?@q^Uqq9q#k{9@6l0b@A{MT zCpV<#dhNDLt1~X^p_SCh)lGIwa2dEvE_eO7O)U9hswA#%3Za91A=q(RC z@Nt#^soeF=GLAL0HTcM1dYKzMQE`KJ>dOEu<9fghM=!VmAaJxcy2d*rvbA7u&wyhi0br6HLuuer zMp0nWPFuYzk?!BP%mop1VHhAzv2>vLx*13cx)j-P0w`YxJJUfFcsG?=wu`=|fhx+q zphu;X`vU-6;%|7BXkKmb!*-xw)~P(fA3X<$(i^b-O1~*RRQk7@8X!$$OxxFkUG6Tli7coK!7ylGiH}KNM;mffth&!tU$lc zbEi*B9Lr-oPnG5D+gXV_z5l}E{?lc@QRW_6HH;c}*ig{6zqUlg7;n!moNnidi&wh(}M5xt3l6i7LoOaW89t$Q_9A9xi*Zup5d$2|du;s_+Q+=~0OIAZnb1&CQhvwKWa1A}sUXx77P64u&{IiokT_6cAeF&tD)ZjJ z=i1wRmfWl}l>Wj{H?Lyp4qvCL&iO2)JBS?SHdKYXn%3OBrp`dp1|4Uw^f5D6NBh|T zU0E*UuIBFGKEyrEeU^KTD{_C&{eoK}Mp8%G$pB_NuV&J%WL?XCTapp{z&k^?k^h_f zQ^nUJB+)Lb7x$km6<$hTn6_ufJ$?@T+ zSU-N(ks|%J@=X00AaTdae5yJUNGe(z`5*4>fU7_!96E=Q%o@G=9XcD8=oIx1m;Jqa zU3T^6+GT%Rzg>i32Lw>`iO#VHE%#M1i-&y|=6_3P_&;l&{}61=&Ms$?vF!_)wMv)X zLx+Ddv8ib8U>wx6R)A~2juH{Ln0Ofd4FdNM2H>~{Ok1?5qFsdU^^dWL#BPkA?Pk%lD}<00!LtxKi>%!h_a5|mM`aK&t73#CD}#Xc ze{MOt)?@pcE#ra6TAaKV%Tcvi&&Npi6DG}{t9j=1BQH@+9fPdT!SY$zB<%DbCW2I^ z$R}Qe{0T^2S=LTKLg|0l_xB4!)dEvWdN1wDpzv!d#=_c+jh`r6LGPJd+ zWZE19qir0L@)ktBV;yK4LrmM)yh_`sE9SamplbBjfvN$DKj!k)F=BuYOfeg9HEAMD z0l}=}C}<)XdU`z)wY{4r@*XPOwn|&^QSp|{&NFRg{=)3qRf~u$Le_T)CFT;f$op36 zHVQt1nB{tb8v?cEC|0093N;yH@FNSP*3aSsjmQsaS`IN;*qh`& zB*w*=%5y2dj|K z;Ti`gFZsG_9p)dusBPg5;K9~7jB_^aU;GW&j`bW+FJTO+30#n1vdo)^4CeSsIO%)p zW|!(u@O!l1@H4A_PePiH%I^vAd)@E7`#gTh4nep{Vie;7^oKf}8RR(n73mK<5%0!G zf6tsQzutT66=dd84Gq87PJizP_Ip-@t%yn?ax9$QwpoaHdFs}@Bl%!7=eL7EXSMc(R&`}y19ZD*3AwS zzIZg-HYhC6IE@?1-tz!DWOcVSUQMrH72n2vA0S1?Z+N_yY#)cFT$Dr8a?=!QlP?voyAzJ5$>SE43vpO z3RMqcTy-MGUzkoGqgdayAgvW_$P;eUQ@yg*l5b?l{mEh>iLQfWyEX!l75Q2lZ3107 zKLFt&ZAw!N@>S*pRUJcuS(e>?TLFmiMd2hfceW>d4$SGL?DRI) zLVpC#_9vD4@qj8}P3QX?Wnd*)Isch>Ft-434AZty#)JBK_W~!U34M)=DnrO#>O_WM zbu498SH~reL-mxot``wk1|oi2xGunqBrc5Uw-pzfZQxgFDK50*MprSXhM4$;0YOc7 z*CCL8-7@5i-;ztiW|EGL;b=|^V`D)wYH3+g%n?|`7M!>%7r`Uo#F0~r{*Q%FL#-yF z#43f*9TGvH(S=krQi;1u6&Lz&cc_S2!A32_+k!8!jR3r)7dMZ?0kaMCIrh0A)XV*T}0MuM3O)EC+` z2AsCQ9aYR5akZ;gcrD>TLs1tmoY%R931oGlSN$N%NC z$-4xzL2a;@Wl0JQ9=z_OPaQl5$u695RRT%@(r)SMd;j7OOFvdOdbG0LtPQ9}Q&-NP z+R@!$02E#uP7h^HZjK95O?!gd%{{7E8|sUYBE2)78v|ripfOD03~Gtx`dC*dxji^* zFp|b$3`fpwv_L*D1a53+E_r7$zn6B>jX-2Is7M zShJ?8?fYuuC!Rb0__H5AeeAj8@!IE_3j)d$+x??cT=@ zW*)e)>Qn@sKF_w2s;1&3bmcwv5e`{?NQl^@mXm!0;gom|0+%yu}r zXwk9-owmJ#hRMRFaK1*R+k~AeuWe=tnO+&0&$WKW^VcHhnyaE26^P-rWQbrTobmL2 zlG%Tnp9eeEdAgPD35yskyHp9NJtr)}Ss!x=pWYA0c`SoPxH7(&`V@VyIx2^bakp@V zT6nW=%*Jm7(pr$+v}jydhHzu>Y;BcS3@|;)#1i!F2-%iztH;F#!VtshTma~BxO}FY z_A`4uowl@L1kufP%5=qE_3{{yjF2qEM6ebxd^@?S4s3QLiihwqta-LR0mT+y4j0&8>gNpSNNs5{9em4nPljj%1`#hx|SeL78zN^F6G}v4E zNOJ7-Uy#1!*nFkpE(n3P26Egf2O#i7Md{&pjTdKYiGv8LF-Fexkik} z8S_v(EvM$}#xPeIg<;x9gZ75y$<_{FC`hKoa5Q{!<*HSRMnoN;S9V>O!QzbgF|`AfENtQHbK z2iIM-e4po7hDwp%fZk^M(4lEhjV0>7<-;E)zh+kKwd(n!%k|ua%kuwFJ@>?wdJcv< zyQ=HC73;YR7IQV%mV{FwId7*kWxfFx_1~es>9hyTAVA#7qQvRMdCTij7gxym(~DBrbKeTUFz^uTg`2T@O@I#YKX#LrlzzI&?b8xYvN zF;ti;%(0CS^j)rXjP-5-(TLVMtT0KCdZ4PYq8oxx(MCIpJ(1{ps$gpw$d}FwW%;J* zJ=SZ`!vai}=%?bPd2iLZ^a`q&I;d0%N8g>ZaDm2908sDV zgD<5F4O1pvAZ@P;+1E*1>GjtaAN$c`i?5%snij35tjWqyfy$f0BEF_lL2cv(xTLhZ z^m;Z+7FQR>O(qS#q*RW%;zu!aHmZ#SZ|n%Sh1Pc+OSK_kEi7xYp>xp6l-aRFex#K?^g-?|BN`R^8Es$t&;p2po+TKeyrXn;w1! z4%=Aw{M^cP?7Xjy-l!HkFau}+uVfFVfQ(!6)A~qmS24HClHacf4$0ghOa3U`y0)0R z){=i8-MX!qyUmi%(ycSa+!;&$gLLb0IyY9SYv6SYOqaYV$6kn;08=~^wX$}OS&Ba3JW@x`oAQ+^J`Y=H7!D6xBUvN)tYba0AYJLC0h%bjT7Jl z^lzctliPMO-`H~CYIP`G3Ny0H=yonf3BjNbA+=d#7?&k~2hvc2+o6O487KjhvEhxmUE*d399;9$yj(jZx^_P~-9 zvP$Cn0w#aGcXzK=V|(~IbF;hF$%ThE9{`Hu%o&a zCW;Fq6DbYqHz%<>4F|tS6DDSIklwI;G&?v(jCyuXZm`=8vbv#Rw}7dC-IZX!Y&6~l2nC~R94W^ zrjwj>kCy#Co3Oa>(l`F@#m~G>vbL*UI&QPKcHR8hfBlHvCiNI&whm8Qpv~#>ki`%G z{Kfm*{l9n9&YBi2SH5|z`m357OW*HJYE`ew`~UQP?dMcl!KSxrI(_U;n?lw*~6 zMmiU?zw@|yM*IanS9)#Fq?R8f4InX7g(V6hGs#zag`Y{2Aw<(#SZ6j73z^&=(7O0^>?=qT@;(%jsFP zZ@5?pcfj#*qc#ExUcN(52ZGgESC0~MSkAXb(S(n75+I``D!Yp~6i%QfcGN+i$|>7T zg3`mSkPKNaW8=BHmQd*ihUqGa$l8-D(C zL$ja!CpozEi-s4-q2cJ;30*%KW;hr;=45c3llHk_Hzt+2;JMiJ4Uqb3oz*UJMoX>L ztkx}M<*=l4)-EkN`P#Oyj?b!XrWV_IF2G9xC!eYCC})vhJxR5v4|9bGj4~gl64%5E zk#1<|NRak`PE1r5!3Ize5%ylx(!+9$0M|gr8{o-|Qwcv-=!nDF4hZCrGkHH11LJ`! zR_0x*LuMvWxbiJ=I*1e9>2$79&Y9`7+6g9sIN(5wa?YjT0rxG33;I)Z48bsy<7I2T zgH5TJIETUGTH?3)<#N=HF!L+g;kDXdS4Hw%n8#=y+Tb%wpKa%7g!xK%&#$#wTKrcR zKD#31N0_xPJw*#=`5DCyr{r=n#EDlp2E`pKV)R_06L!W?9~y}w83_ZRpyP<@JN>Bd z2ztzYHOC3xk-@1Tg6J4X{X!(?u$y6U`Q{zjt6TvtF?Q7}Wjilmw^l)QTh+s_9F~ssq3p zY$A0;N$D(W1pF!x$wXUQ;^h3vL|gaa)Vhh*kgV+T=SI(DXK-g0ZNu!3--utC#2&Yh zaPLWg#h-4M%$^3>-Q3#0rTXBTcLgKi!7&dzbTi&U+=yR)%IwC>F95z^J=IFPxnZhP z9pi4|?&1EJDF%bvO8r*6Il)iGUys$*@v zeIuje+o8nW0xjMcnA!q6p4(_~gVWV;u%RnVBfld4@C^5(b#DLBU~3`vmq~ml`eIDOtYp-pJ{pO zLhL=oBF^N$)e+K%B+WeOoPPH1Z4IFfZK0M_jpZ$~u8f!f|^Yo^Y<*P^-O!jW?M8fMq#VLhnl zI=GEo!K>hl+hX8GGhtLkfR33cX1_MXz&jp_6>JjvWoxvNf@G_t!|Gx{lcKOtu&~a7 zik~sQESK3XBB98jtB?TM1jd6wtaq@AlMpBVw=|{a1 zixA@qb?`0#WbdowHWe4#YQWd9AjgY24&la{7)1F2n_&>23ebDtsY0tC^B`%4INWC9 zB_VjK5aFwzQNl-G;@AtEgD?1?&qceJRFaN!job!0Lm^vct|kutMrRCi#BAufk%7@p z(kQC{=$7pOOo_A@t#1IA%1ErxnugkL4ba*ii{;W5gsg}%nv5|*ryfCPFgoh$VcO5g zxj;Iv0ef57mQ$zQ)I`dQfza^&jP9^$U;vFXE zF;DZ%v1{(@8s9yU5`K2)Qb`b>Cjnx4;U{8HYtR~6fAT`Q=nr;<^tJn&>(2$Od}_E;wW{>)jXV_7ZHL5;!uw#9ck^ z6}h&S#>R2)1^7;qGSB6YaQ!~YeT*w?gkQTn4$6F2aiOgXl=*)8k%h< zSk49MM4j45j}1=k+4ui4_a0zwRoB|^*{7)M=oGb)G#YhHl{~7`N8>5>*kgO#yFKm= zu(1uM*&d7uH9#m1fe;)5Ap{a6jU7TsG6^LOrN_Csmn7sS;ii*zFU@oO@3oIKo*5gG z`+VQ?{2zFZPT5D=eXq6lTJH<@I>f^83f!)ZSU_D0t=cRCzXYi20CrIUDduScnw!bm zU?UhvDUyjYF)abj4F-Vq+ZNFBG}$FSk7rE4HdN_7jsnpDT@z+bY#a{9ykYN^%ZD!s z)&-Y!=6;JcSq?dajZOB}=HZ4VYgaF-8*J(eU*N4!?oP$r9Ul!}fJw4}q0 zSB?;n1Ls11+^F$N&?&gK72-h6YS7~*Gdb{CV>1Z0jR~xDYE2e_300H?GBr~^suNYt zwYG{-L#X`H5eocRd_)BD5#ziTNPmH%@25Xir|t=|rXcF43cdjm-Y+O`zd(Um71a_9|4PL=w5k&j9`R-a3xYt`JR;8gTS z)hFqWZ9DctC11I|j88xjyp90Yz<}wI!<9(Hkbn&GS&(!+)lJf;+SMVl+5ti;RjrS!gjf^OIdxy%GKro5@iV}*q`DYXm&n>b1>~!&G*6x-r|&3)XGAK@BuE=d zjc%Boo4o<4AEV%W_%1$T8S&jw2qLZ+#+WJRxM@;DBj9#9q8^7*?-92}mQpDzd_)X? z{rowZR~Ta7c%AB_hNwFza5QKo{Bd&<#afYAoMz!MQ7h#Apv>Vy55)=V=z@4Ybtd0b z8Z$JdbP!E6HjkWGN-8r|oeEk%0D%8GQ!Ai?6y^fVUY%4hi>cI9O zLX=J3DHSY+vee$io`(?dV`*K5jVlu_M*&6KZ#y5kO}G!!fRarfSG-kCqKT7RdUmx` zZ8*MxM={=r#u?V6GvR+MqvVYIIco1mREhWS7GL|mIh|HktQE{?y$URGPr_;N&F|@# z>KmbE{WV639zj~Ypo|N8EgGRE<90{>z*!=1GQQnUc=yKJ=lOL(E&8GA@k&#nb3S78 z2~$l}Ed}zBUd3T(0LT^stYB&&oa|IV-&AJVaw8~mHWMPKd0-V_G+It&RLaVzd{!xE z=yijDt{oYE0WCuuZ~bU-@qR1KE2CPy$(S>9%a#99{>W%}eNJS*K`a62duWuWt@{^0 ze}`;-N4aloctp8TFucy{fuPBXs+J>tPNtul^b?~f&G(5d?9-~WcgkRtWIJr|+2RG! znoQ zFK427bm31w^XkXgv)c;o9rd(XUh#b$c?r}~H_D`#p<^4g8I5><)S}M7Db*?z>DVBpqjI$=GS&UzqSv`Zy9z=?FM>M z$rt4Jf=YvoU(gwzQai(pj#J5Rj$jJ0c+`G|AbMl5r;GGM~TrwS&{ZW6G z8y%ha^2FCZ6sNb^Uw+B_v>okc(T>E#br$*&0k4glA9;kmYU205PN#2Ie!mrMp?#;H z20h1gE~ohiu}SO%G@raC35YiO1Yo5bk`Op+#$^}c#1{Z2r}4k^ z=YFaD&)L`JqpkOR@{?#Os{0D6d-vPQf0H&72(IG-YB}{VRh$P>YH;gSMPXNvva1C?5I(-A| z!4}MJJZtv1<`;?i>efPRDZcU&k*yD}NS1lfku$Riz~OSN!xi1W;Z{{WBeI;sZb4q; zsF<6u6g0)0ZJXRQ5W7&8?1QV)pK5c{;NcKeccdnfnt3#0*Xb-R7X3{UPOYC8b<`XuY0ibyg-v7H;xb7PhWEY^84^_Nq?> zt{8y8?SU%-pCUIVuC^XtyH${_STs6m*U|d*cRv33o$K|qj+<2uRzYff4Us2DsG`4Y zopUDeq6ff*HWCG3vw#2`A|^U#spuq9v9lVCbIwWQ92OWQ+{KI~kQ)mUxR~p8AOqQ0 zQAMFE2V{7N;V!f3_drn1t^_5j9SI!l|)k42sVQLJOw44W#@a%8_r_2(z6t1l^{S$vO0aptCqXoM!BSd`kzvfHk zI`0zoR2gh-6RxupKlmGc_-?;5CnY95KO^p^?}kiPXy z^^SIy3IaHk;StxaDx%;H-40>y)=-LoeD^?{zr8L-rm>lhUzLd{Y6bBT{{saL&ri{a z22iyec2-hv0&^A}L!oFyJ2MhXl6ll@MP}uTzvZox`Bk*;`&x3(V5GV2 zh2JT^e1O**rn4@Qx4&YRknyz#%ve+YEt+daRx_gTE$#P}M_)Bd20i}(s`*`EJBJJg z^9=dKU6xNEe$hk5uL=!W9--ABpP2Bp&gc#7h4M+5nAFPhA1>NV(J$c>1kpnKAOy3< z@0&T8{uY*XdX$sqNhl{va+r*l%(=AY+uXNE#ATdvQKWx`fir^y@maz%V}CWc6|#jt!kHkz3foKzXlp{Fxp=C<&j@ZpwyCtHq$!)LF+7f0aY@Ov`aEoCHnHANt((*ORU{Znv}XNK{shy!OwFAUr-Z@)~&4RGhjaN9J-q|jupE{vTdwXMc| z*0x?4iF;wt^RmSedkj>aR`#A36IRE2Fr}gMR|a&$&^YAHdaa zqClIaOGO7wOr|{K##2$DUGlFeBih!C+L2G_EqD(s71l&mZ4*VB%4)}alivk~Ia zgzH(4vgLA3A4bSW`;^xwULQ%_pK6KmA_|ITUQ~W2qHV~x&f~e?GwhjK!j-fS;mK^I z1*aeRycyE-W=IcTvkoV|-{YCd2VHl*O@iuZtDn*)UUjrJT(nK7vVvXS+fav^R#Stf zH4Ji*2BGbDNp6!l8gVH;Ai23~;`h@Qi)PX$IF-za_2_k1BwAOE(@e{2n(8HawU&xj zGxTO_wTe2;s>sTd4HQ)yC<_LHm=$;LKvZ=Ms=p|yp;~|_4K#MP>8nOH3h>A5ah*0ivsQ}XDpll!5s+|x7VX+fv zXjwd^7g$^MWPtWFAhJ4L9`6SRY0DxKxhC`hvD$aglroB_bJPb0ZJ+%W?M2kYe>M}| zL}uFB(?oU5Sbbs_&hzogJl_-niN_;DW7b_v-U-i~@l~a+JdI6n!b&***_>IvNvx$u zYemVSjLWlSW!y2f`3{{A{Z}S}!C;M&bGy-a&Hq_h{I!#12{rsnWjVhz;Oh@4i{!w< z%4`|s9FkZ&FTglY~ga2n`@kRfaWdZNyOxc??I-^~ty3`^nI3<(Q z3Ia*W316Syc9KX{aJ87f2g5Dp&Afyi8T)O6x=@uHyGOu(>$Ik zHTb4B7@(r~i)8a`n(2iiZ0<#yUf;gXsMjzJjNQz#7HgHehClL+1p1MHHBTq!R-6oj zzHKq+87D0nmBX{XeN+n7cx(d8naw69$e4^AYnGjEe;_LVUU{T@qgkfu%gu7@EQ#OG zOFuxA1E(=RY&Nq9F)YK-qx(!Ie!nZ+XEIs#87)`b!mu32BAU}``G-w5e8y-ve1}Hd z&*bxUdKTAdH*lqNmUXRoqR4g`^NK4fKOJ2FoRmn5qpA#xG07a#W=Al#362) zi%(h=;_4<6Y z8+hp#PyYO{uF7!Kh-f|M32hkqiNxPvmX#Y%llMMCq(MZb&QZ({G!(TN*Av8Y7)#*w z1(?-a2xhe!#<2$M4T=0x0ui=UDDe1tQK_&MA_ySlm21tf5rG+NsZ=y}&Vk)oUd+#J z%`cJ)%`H$T#+A5EmaJ_Bw(3)?HkSX5GSQ}m@!55;D)FUG?$+;lPnl(j&uaqydO;&u@3tVuz(~Pr$BI5zW7Hj# zu`C#mboH!CeC%hgr+G;>Kdoh{B~ZtTsGebsqks%Qu1-v zDQi)AK#(L8+WV?rB|*hvJ;ByrTlNb`#`Cqwd|N5+OF$R%CV_n0o*)*4<}oF7`1 zh?L1XOZzK>lGW)9(${3ePvo$nPWu&|?JJ@|uT#GM6EaeMjsohZY<>!l9|CfUeCp>J zZdecmNm&_L>0BkEM`eK*C%z<`ck2%s$j#Az5Q8K z3v~%qtRq-R@qCa>`EKHgSVbnM<^)8R!sOH%&o`baaFzsK1WE;0b0Sd;Hxg=0AD*BZ z!*JTD`Xqw2FiimR!T+2pw7`r6lhdT9`Q(f=iL^eowkC%ZP&WC&G86Pm{Ogm@knV3x zOngIm3cW-2xV5tRaTUY!zff-Xv17ZHaYT*s(v=c_AD-K<;H7^kNB(i;)R;*0&UN3o z4q~1l7Lp=-8_THm)Fx^hbs4>ZDh`&hau&v)xvZ~$!SeOnJ7L?CEj_a}wPfjrjaxVf zZPdn}*_K?qY-H1B4Ls#bV-}~s9zQAaTBr>kxJf*r1ny*eFe_%d!}sUpLMbHW}aH^8@40eXXzZWCTCy#ZNZFlU?|ox879L zui7Kz1LK7*(>wXPaSng+7$*$L4PzQ|w7@a%5XPL275HS2Fy`MAz$ab8SbbL=PLL$W z6ghUnF+U=V^^Nr6lL29@e_#_n!QZ){@;!^;d&ZWKZ(ApfEnT-vy}!J2XFa)t-`zmo z#oxA(eA{MWY|G|dY96*i9>%tjoZ$Q0;r?@9OTM`Qm&iD_11`sQlAGmX8sV)=$Xl1f zksG@VK8iT0?^fTfK@IL?t@)j;MVw~JjZ0gpoFF&?bzQv!Lo3$pxOC^PJ(t90{D*Rl zoW>$Joc=&veKOVA)!WxUFtlLtlBLU*uUNN!!$#c3Tefc7zT?u%F82Bd{Rey0RAJ#D z9s#R&pC19y$q~R*CK10p?bEJhCZ|yCza=psbE$RI=Ttw0LTy8m_?@N_MT*2vQE_0YO@Nc>e1eO+4%ncJvdx*m)0Ei+ zY0M%{0~7vw0->x+hJY!Uz>?Yr z7G1NmQzPAX#X+++x$xl8B@YbOKOoJOkwMoM>1*zZHG5@mMxegF%@I^Ize^Z1i~he3l-g>M9=QNW_Dpr)%pre%ygh>mcy)H1%7TH2=) zB(Rj7NB8qQ;X42pxc6W~i~R=rH=b8^@^;n6RQX;%L1~B9hkZ~R@xllbOH-Q2iuzJf zPlRec3)Z?pqJBxGLIB!TB9^j3T`N8}mJ0Lmd6fik2HfmkXhI`MiByFcVp`5;*lg4P z31H{GZ1MRF>P5JSQoFU)&>cY}a0N2-Hf@xnz&7qdywow@x2gs)X0P$__ zP5^^*ODW$XfU}z`p7#R=^_Zt77=`6563@>q73UI!rny=?SgP@0SsKqXm8}Gb+^Hwg z7|}#AOTyN&U{cAbJb5AfL#5(CFWeshy6k1@ir4XzKN1&$e02<9kvwL+dQ}UBCFXZH zd_5M4E`h!E{E`?N^HfKclqb!CiNWK_25h%^p|#MP5v6Cmf!exQ*W5v9x&g7!MmBb` zeYins6LC@nB`DSgvuswCEmUnr<@c&Y=%kY}{@>ucEWcof?ag*W2E{dg6=UF3dI2ETd&Fv2r8OgzugNo;l^KdOgYs^y9nf z6BE04@4oA<-DlU(qNLX|h&k|^)f0c#Nk*Ec5B-kY`R{RowW5HDx>%c2?@+}swE0{> zM=IESc#d?H#@t@8wgPAapj_k<5bKbMgCo9{xZbyvrZ;kn+Q?Z@0E#VHXv~&6i27C` z8iII|EfweV!TmYD3mciwM}+(mETp)hnLSt0dbqU4lWV_;8P3{NJc=GM91R zA@$ut&8JpS;{-v_22e6ETP-RTXj6iCKUJ52ARz|R5Xb5pTIa(Y(<2olabi*G5Km>= zsuwMXyGx`(G6C~aCayxNEfNa?zL8%p6L zeiy615XB@}Rhv{K7S@RVu9iBVc$Df_pzkffQBcUqi&gMS94 z+>N0jarVboF1R-6isa6tj71)BhsjqyKwn=Krs@5;m42xsTpw-hu*$ZYL~V!H85wE} zXq;Al|H2jBjlQAImd@7jzWyP)#_eiAC_IVnkR!O(P=B*1@U=C8jj<>brBj|?t~bln zdec?vO`Ngc<0$tm!c`9S29?&%;0~rGe_E(3vROhqNPIH~k!>{mi>OTJ?^9_JSMb^e zD?dJ4917ithhx+tiZRBLMVBvB{=n*ZMv|;ZZ}G3XCm*nqj-s!9gA>xFo zR^4d1)|4vxdRG|h>@If=J=DK1+=^>w$k*7pYTePg57et)ij@m?xO}2J4M(e{J zl7D4xKTSimQKl(-X!TTr>ZX=b+o(&aqtq?bL(~h@*U*bp(NQJ?9*&=yHFVi^&w`0< zPN{J0NvzS&87A^)0Z#{?iRZsm%HI^vk0Wc{oB&`N9e5UcvC^+wNfQBL-mFq_7O@1+is9*}nSgOLHvmS58V`hJ zX#)DXtd#E+AapE0m;hL$?L!N64f#E#{E$#shwt868asOHI(+N0QvR}d{%EPNZxm          KT23~?3Dw&p)A=062yj$!;@;Sv13 zpAid#qd37$U&7y3E!+Y#?Ex`=d28Vzz(sEFy6dACb?1;(GIL*<${hM@#P8GMi9iFU zk)Rk9Wx{rDOQz+ZHY$rrQFSm7fqsX049jKz1FUyPNno$dkxl_JS^%fEk#He=LA;A? zX`B+L!>P(|+3?p8ATB^Kk<%%Ha#D?gHYH1*Umw{kzrB({KwN zxuv1UV3iHC8*WzqsQl^XMtrs8x5M)!olhGy&Ra7-neLm75O1~j_C~{gy=I@yooueQ z*{Yk9Zd-3I*Wc?4)tR(fQ(e$6h}G4ikkAg2wc4WW#O;r2hi|;*! z0?OZl+9C!FX{pRBF7rSDGJ>gz&th31D6 z0{U@SayQkY{mO4@1loy&v&*k-B~R&8BE4?pF3?WzkLMpQ&f(|R5Y6K6mgj|ur&H5LuffotJL zp&J3+aXv*<-3UAllMvcSX>4|Dw~oLvw+g^3pI=uRTe&WSZw;05>x9Bp2tWqM4qkgz zW$+f(@4*wtK>|E@BYt{)0*~3T+mGLf6KpL3Gu!QW2n&VJ8XNMTAn1elCjfHr1WtQ0 z0RcmW@)khm%_XX?91!x24wE)y<)%a>)d`7S$Tu8Lz z;kOPzeCEIazxFCT5Oj0eB-w zzN-`A@j7iraJ%?b?a$C}e6ek{*@e&BzBu6`=X-Z;-J^VCboZRT?N@K*eXJi#Gut5^+bC6!yZq#zc=Dpvtq@D)lIW9qFyg%5)G?Y+a1xUBeoVXlH0p>Z8{M% z>z=NT_RkGT480ahGqEvuw6`znS-l3azdzVMthHLT!|nV24Cfk~O@q(Te@%RyZr#8< z264{H<;q`?W!|kj-aXpv40mSGpOp{Q+ZZ3ZgkJLWa5$L^4?n#ae?+w47imOJt$`iDfLs_0+sdZTgTFKF0kFxcO$ccQ%k8I2>{O)Qos2g{kLU^sLjeL zi1{O4bv8y5wj;ahv5nFwqdu8BpZ`iHJX<4w{fMpRi;_;OJN%L!J&F)#^?gy&>h#K4 z^f8@ID?aa)r_H=u%po*_eiksA#D7D|r}^Eq;t!h47W5jTe<+wt!O8tqEts*vQ#V8v ztDt0|DO5ScAJPXn301l>kQ*LdlLO346ZyC@#9}yG)BUq)i$&Ny=jY6^pU>GN@D{p! zefCKC`iNh!Sh4c$^(s_Nz)$YTX z@K$QZxm$5dX^E#@4dtPT*R%0V(eCtsG-ZKM>I#;NUL&U+DDBAF5dLS2YSW@#lS4~z zr~a&BN54la6p6bBtw0E^ya(Sv=+9`0;!vJIE79+i&(kqvQNFAEidl!cm0u~}o7i>9 z2=dSf(aNt!E>Zpir$_W{s9E`|@>S*ts#dZp?*NTLIf-2ZV@bPiu`8y~Q7&6$yNQ!>^r?vT`*>o5;0;g5~ z5c!j{vi54`3r`y0h#&8%)% zy4+H}3fDyytdH(Mlz_CS#6qO;VpGJVlY0;}cdV&XcsUA&h@uL5YPbT|T#m{=xR||i z@xg8S* zaH8rDiZ-BTz{XAU8kDZfUw2&|eUW@jbNGH5?v(#g)BI13ltkHZ4q>Q3p6qdG8LGhA zNHlSolVYlOtenjH9ZAHvXFA31*szl}?A)NFzlmkjnQ^#@lPBphr3odJ@09(_hq>#y zPvNoLK@DT=dI$Jgrio;?J)Yl$bFwp@-*Tp~3o=ui#seab<)Zv{@tKf4QrEO}**549 zo1}u5SmeYm7E25vjs%En2%|_CE6r>)#>m|Wt0i8fu@S&9e3!vO1_053!2&DSA&#f9 zZh|LhJQw2>b}V{$krsvL3p)F{O(W+0k&d#jxSG6Pi!mmJSH^~{U5>{Ur#Iyhk3`)2Ox1Pnls@r| zYo9v%u%N&9UQM7y@7mToXq^>jM4dH|4vw%#Jwd&;+N0A2tKC7pF5av)1STF{JF3&& zzi!X|M$gr)OGL@k9_b$PiD3Mm?4L0#$uFlys9nJ8xh$SvL^x39V&QvtJip>hesd|m zS%764dgUHaM>mVo>CUd9_1m^X8|cMCsGYEyEW=}X=wg25V9;Q&?#DunOAuxijc^(* zu6BTTBJGgMM51^-)XHE)!b_wBnlKupWtBn!F#X{p6HP^?#|E%Edq{(H8p*tC3^Avj zH8t!kpI&U(_ixHyk8g-HB(HW^;t#zu7Vug)BWL-fvhxvB%p41NU-^MQl;Ews(Z&a# zXpHopptDT_cN%o7j_<|_e{`8RWVMm+I&KQ5{&14rWyi&RDugaA-hr*7Up})-% zWp`B~naS*--P81=S{JNZ zkqlQGj7U=c{HU?Ix_MULwE6Ta$|VaM>O*0xl{be@w>U(PcMFQ1M!_|$t@X7I5_goN zC-5+Hkk~k9*%D417Ra8EOhTS!SfML6Xhv@>^CjB^v+{_+%o~)4%zu(u;w1N;FCr+T z1_K%u$}v~xD0+e$KmS{{Gr*7ozs1{#2Q5VqSjuRa<)|vvWieKvsye9x7f*Hi!{y3Bp5^Jq zpbz7p-puQ!78z%V_^%>HGhX>ETZMm5{ViCZ2(F5{^@R@vsgt1%#{ z_g!9ZAkY)a^(Hr5e%&kX!-rq;`TPN#hNFLV-z9tM7=d9;Z0G#>-5JSv9%BiQQP2fI z&aR~ZK>ei4abQ7(VdpPg7ie|A1|+u19a+uU^1 z#1-@}==6q(OD7!keP{p7Y^NVOeD)23M-OuSD0hT1Q30xx>c@4y7FYoSgjc#pU4Pb* zJm~N|r&1!B6R<%WNQ|{cf`lG!tbv@&B6La(rF=wX<62QFtjBE<35wD)Qgw~cHG5zl z*glf2Wlz;Y1K3fWRWOY>d+=%|*sE&#hKQ(BRo(znv0zgff^kp-K_>t&56B2MB&sgI z1kkq=OpJuS47~oN8S)ttC%+9p?P#d)XkXFs*U?MnXiaAA+>JllI9F>nY3J-2J-dTB zk!zaYv7+NvNQLIbazC*991b74)8Vt*eP~ukeM1L%v>1K9zN4dFS%Rd2ypo8cuq@HWFo6UPzk(&uUMo} zL%8ujjn+%sGFU{w?_wE(p#Q_LA@154^21%o?np(um`Dn?QBc&brXb%$zB*IhSOFOW zznRUX()hNpwL6O&_ zs>$HGghD1V*%VZJkcU}a)(`;+ipm-d0fg`pVc=JYUZ*YXO9u32i8gU83NTE-dVSEj zwa3xWz(`iZ)wBAVj4Yl*B(GK%wnwa&@g|l|4M%&@yF;!09F}0VWLI0Th-Eam-I;*o zmh?Prk4S=5Hngm%ZSNdR&oV}Rem}z_-r^G6jMYwSosO_8qKjFcT(6!5sKX`~mm1`TV}iU?Vqq7~sE(nXP(Gw^nU+aAx-^===hH*$>LWF6Eu zx~eh;goLVkF%s~*?Pi+RXpCAj<5`rk+v@EM@>ZKA$08k#G&-A)r8O)UXGIp#G~h_G z9K&d}f1()!!x-^DjlM?aIHR8BRyuWzhPCXZX`a>51{1?OadI86Ljq58X2zn|b9iky z#MeuDBTef?4X5Wc^a008qcAHR(wkU=6bKCZtsG;v)N7n3yV26ei+W9!PUGVlO=GGj zDt$9XQ-Ghx0cFtE8~6%4nQ7$5fN_x{VgvROPVSMXOn2<#}#FE9tB4xFT^E^7yI{ z>M-MqHHq}4J=;t^)^U^G602n_?aeV~pH9%xoL-v}EOR3|O{}WdQH|t-KHILpl#r0U1qg*KXR~^W}B{wMLTLF6Y5&x4cToy0Ud+0nMfgKc9m?=vN_IM zYtu8jBNjcwYFlR`)LLU{tf3jB9#zYBFRBl*7T)AQyo=L0EJj3&$fOtbyoNEF8BGl< zvsjg5S&IW9lOS94te)mLR>No!-{CSDyK3}|wyJwpU$y2ltTC5*jK^3EAq!$mM1_Ajht43B$qC+fI zLt!D3YN@G$-{SQ8!gZ-kORjI-CL*kOqIj9qQcg?5(#;z{q4SDku7SaY1l3h~MuP&W zOk3ab3+w=RkUP4VZiFYINR;(!vOcVF^GF6kC&C250b0%^14*2U&EiR1CeuFd!-;!ty*3hNCD!IszNwr*JYF1TU3J~925gCf6bf@3-|2XLqDyOX+0BKFwobLZtxlm%-u+D?VW$PdS%_-d+k5CAV4>9 z-7ikZmbs$(OI)Vgs00@Tr;<#Cg zTH62CMk5Y)|hanJ(^2AASD237c10XJ)@SW8sFS|B4H!A(2pspvtc z7}=rCLA#lxJP)wx4%PdtPaLBJkBJx=K^>Syke(7iFv{8`m0lEtQT!K*(CJi`ct|Gz zXg9{hQH)Kek_j)PM$e&O01$f#`H`cH(aYd9`j-zM+qq!yPQ-m_uP|J`P~L+Jbk#qe z82r%Q+0nLD3z~O&J@u01u7rxzR|tCk$EdR?p|Z}4fiA$H`gbs6G@hO z_?N@N-Y+Td-8r~m=P~sHad4rC>uv}STrrqfnrU@Ny7V8 zuz!>xL^L&M5)f8ZE>W7EpFWXBdS(9$^{wr7SJl^}6W*}K(-Ecj(CPHV>C{K@;T`^J zb0dG2?y}TduHyNLh-hVL$)xO}@yqxd(#l)Pz=-E1Y4}+ggoKEBC zN9*~kES9r$x5aW5{)UN&1<@vS|BTq>IM^Ib(DTaS%MHnkB8d2KpHr3YNiZPW1zY#ILIt!&lqkB1;lphQ!v}#E2}B9tZ$1f@{A>xZf(q^cR?AZ9mR1!MM@*@h+eB4_ zHe-S|U?85R5CcqCR!#>Qkk~8akpiLycc9T7gNPDZYLnH!YI;i_agEQ8os7*McSZDX zHT|kOS=)k6-tgQFH#~=4uXdu*J$sZ&j>nV3)NCZp0-%r38L zM~*@zG!T0-_#~+|X8wG{dX*O|K($Sv3PoWr*@MqSJAk(~UVtJ)YUQGzmD<@iOpgxl zYZ-3I&0aT~{NZ!tQ|sa+I!QR)M*#i_jhx*_>fn3IEcj&ZQh*4SX;5onD&~<3+;+4Vu${2`U_+@cfDASFD!=c+|-0Po2_ptbjsh3y(sl^a1@T6yhyr z6cX6VL*+I6P%(pvRd?g(O(F0Pr@B7ayTc1dd`Dby6lo)EJ=a03-mSF=;g{S#Gkp zDw2s%78V~^d$4r-GLk;lC`$enYwv#d-YYMwtKqe}4a$wLe_Z+Xcdi-T{^XyI-G!L7 znU*go-#WGPo9F1!k0Hmahc$FvUCqMp9=P}2yOUB4Un_n4@7H_>c|LyZPfu>Y_A*?f znJ;bM0~MjlSZP)PB8APWEY%o?f>DL~YFv^a*tKTPj2G_CB+C)4 zfn3C;Aqdy+0^i2eIg-vzp}Aml=NT^|?>)c}f4s9meZizEc*DMPCp9D7I5is>MW|vN z+MzL7^ucFOJnv3|k;ayQc>s$CCPFS|GTcMdZ(^j3B+=lVvF*y~0^@vp3HgO>P@(=Pl1zJx*C> z#Ba5|?n2K!j||V#fK?w+UsS(F`FDKl$wS|lQ?e|-%n5Zq7c+Wx)E$kQ`S02UDQ*4L z{*(0Rjn6-SBSoQe=P0B-%+8@cM66>s#q*vsfR}gxR~Ydm^x*0&+zd#GAdX!F(-Tej zhp<8gf)X6POd{LG60!nf0)R2$@G@4yVgq|52sS^mUAW*~v?H7Ws0`H<2qYLav>hxX zD9C9dSSDkz0PV190Jb2gfl7-pbQCeHr5;HpJI4t+Ysw;2XBuifW?CcZ4IIsDHB}vE zNwlS(TavcAc`c3g7LCa3q(FUFxFgP*IIOu^4agTwXf%$`IqMdh#2PUNd-ESoU=3DR zA2~-kb5^T&xV6X07@V>NX<1eZ9+-3D^7YOtL-3NFAMRj&Y3DRDR#sWYXiMzzRClau z_HalSYTG$jJKJmu=xMubbkWGfi8cPV)ar<_D-f^I)2ypuZP(7L4Hkw$_#e$#^oHCU zzVz0bx>{Q&&cqFCI7`G^#d21Y$+n_Du0xzN*xz8O(r_}v*7fu{orc;wP9n{R%f17j z)x5>c$Lnd5>ZayV%c(uoQECgZGS(AzYb*yHjsx-R?s$GR9wwvl{MIx1jiti%xFt7& zx79YFrmhFpDw~JuYMH%o8E8#;LHvTwIBV;+E3btCvG*`ed0lIMw^-ozsWx9Jn+d_} z?}d;ga7DzEAF-5yB?zxqF_iTp7AL~pA%v$wDgtIKLJ=N~c)=h=j89qI^yPD^LME;S zbtp?rSGZ@uT`#RtUE`ZtP2{%GC(!D7Jx#2Jw`erCoryIy(Hw6uwXW-%ch^^y3FQst zA3r{JT7MFuyMKYgy#Aze?(SbG|AA^2$K&7My?0|%(|_)rFZC_Pl2I_Q(Dt(E<-J;+ z-pp5{Z<}g7*Zytg%4AfZ$hdT#P*>MeD?J?Na&}y~tV-53IB-d=tGb=_=%xdR9ev_M z^Ku{IO}L}c?Va5R%)AkIm$qHGzB_N&+0}dKnefQH1H9u;cdH-D7oXj@ex1Ae^w#Yo zp%?mn?m%F`!n^!~H9Rmfx;f6s%x;NmT=O@LOdN2#q=b9PslNWSr1^}qjx&chT-$~rs@^puP>=mZ|SUb1cxM+L%OT2(64;MV5ABi7KGw~7TbOkY(Hc|c@F zDU=nhv^D~oE^b0RHzCo^N;W|op&v(~v58ktqdRVWF%W$5)+b+n2@Q^+(Br3HouH3A zkNVGe757euDjk|xq&sK-+0d`&p)sH_9t7=!zyMc05(HDS1MczkSKUv%rC{Aa;+XhU6-%lK@@WOg$!|oe(2rl>C7ro(-jStoYjELE z;|(VfLo;G^%e(^v9#O7q@9u842-gg1to`%$UH;*|s=?tktCkLAEEaC9OY7)Px7E;& zg-4fkdL=wvF!$W7b+pGKbaQ(6V5g7ay;TOoua$RH$Y08aW$Qn1;GHf|RxHs(39gui zM4FokGnW{L9Y|Z8P^8wx!7B*1=+Y`+1wjA7<{=pWZD=yw%Eq2Ku((w@JMre?1MHdi z>f!IeVrJpu13#TTd-);d@5p@U=hV4#Xf8SQE<1E+S?_fJ3kR024pdOi;@~-3jC&@r zfjk5o$OEJlUh@0>ly-1WS_)hoov-ALec^u=H>SF-{l4pAlG4@9pe69E9XY*mv;d zSim2V8^*$LWT=8Y6N{l!{y;dAsi2b->{{I33=5P-VnG6Aqe2qobuDG7=fSBCPYfcE z9RYnTgGYmu_mu@02gs#VGSP*i4x+2k2!s?hhAArhZGHfFld}$vm{Nei?E9Y;uelp( zpFQ&9EA-pjl!K zG^+2qA@hqHpH<#D_Om0ej{W>Wq-ReGu4MOy+5MZe$}dJogG%d`{iE6-`kCK3-M3^u zUfT&R6tUzL1%ewQVBH3ScP`>aM?z6Rn4(n|5h7$|GsHCs4A+^m+)XwKi61;{?@b*5 zqk?R*^)`z}yc&t2kgdM6VOijYLpyKbg>dR7aaM0vt1#TF<>C#V#s){V-pDwNrntLx zAoJKXEJAuh7or&lT`kpR&9M*Po!sIw*=!3=-iDHc%i}#(My}5;Z`Q_!Qfn95d@<+Z zo*mZfgW;SGD=hbVCUL%4*uU=slmKAdMEU-BzVpl&%L!c&fYDGItMUg3cu@m^(`bki z1c+j116*|?;?j_BPzkEjrNV&P1EtS=?dxhR10&>vAeP+ylJde=@Q0d`9vOA$=B%HM zGzJ0A-UTb>>4TgVuC88RIZ>+2$oge?_7&xYFG)PT1>Ts6``k*)ZJHxf1*0?>x?oZmNP&WDJYZ~|aJni9np5}(_W#BX)Cz-hM+ztu9iGW3(7 z@vq@UPkJd`6!h$aFr+~&0Q4Xd(F%(nzEDp76GZ6?Qj_l~`y%Ur!yDMZ=2FAdT8a=a zsnaRp0x>7@HDLWTl*SmHUq^!a2jclYTvdzX`Jpp;TM1%}se%Eo5rugRT3ZVYo&t-= zY6HLH0kKFAEh3&fLMlTjs{lSC;qXs&-S^|dr&UvN#F0#7{Tgimcs_a5fEXD#-jJ6~ za{fpVIWnoJ)^1(Urj^aP(NA2)uCBjcSba@X(>1Gw>+9cp{IXAs;w4nu_CM7R9c146 z>6@+l+#cn1*XpK`_3KAst6a#(^6|uA2z}$M{@_F0p2dBAi_>(|7d+8Il- zG1Qo}Fm`P&7xz1>=pW`H^|PE#h!bV<=z9<`%9{OEw&9#|$~)`cS>DjT^85*07)z)X z6op$DjF~DaV+{(QKP_`>;^N8WQwu6@{9qk|JAbMrZZPmYgtRLXmcvZ8@u9SCSx0=x zl0lh_Zh3orfhGNj&EB!Rqw%3#k2>vLOV>ZuqFn~}v&y%!YTE3_s%@Q%vyC6$^>LTI zV+no9E|l5Dc<__-!%j!X@=VjoT_>H6_7&O2Pi8fX+M5O~8RexG-Qvzo{`SXhuJ#p~ zrpIK41~A_C=f*jftGxC{dk50;;b`G+pK)&?LIJY*-~N#v^UIc-2zNT>EDs<@LxS`c`q z_3=VvFbO1#72NXuWX)Cg7xv)F*;~r*Ri!jsM+dNMwnr4DoS8G3S)0cfj5LmH-AN?0 zo#0>|9N7v!#DzLDu&g7UP!*WHVELv?D-v4z!Kr^ca@z%s;JDPmFg1HkqsPu{}q;zo8* zBe0vZ=-lj(^7~l5%*%3V{!x>tVJxQMt3IRrwtP?PLl3|4C&V7PejobVAKEn=zlXjx z<45rs{WSTho2UJ}{Zl8-${W!^`lgf5?;cs4H92Ls#cK+2dv?ju4$m6%If`jxIND#0 z3`mbmlFTEW@Ih}5j>AicPGx}ORn&Z=4$F@g+@dUZ9tbj(31w{>)@EfLVp!xNp$JN| zj;tKcM!t#G|MaKI?@;>pNKpRrYvuMc>}AOI>h0l)zu$8Ref{>g9(6qxdHv4&-|%w7 zH@-`aS|6RDqfhy-TcljGf9XIuE?*1tmY%Xxv#6`f(d5;oqCZ>*kZ|PET^g$iLfA+G zP)`}$Rhx;?wx(3{5JygrgFwc?_5}n01xxv$02G(yNEO&`ZzvTTYKgowi&)bO30&S# zka(WLMrp+g;1|<+WD8CKYXPc&a>!2k57O0nH2>qNdwY}_XU0eCJntGHSfm|Mqm_T{ zo;o!YpTk$9%Bad6LFMo?PEAl#|01qjrS0@Eht*o!Ktc+?+k!CIf!N7 zNBCiVV5n{ZrO+ozr$ou_kCO4&1n75Gf6xv(u^H#6G2*Q65#!JjMJjrb8nLDJOL?opKVP?*ty)78>l2D2sR_ z{*On6NdI8uyVvfVco=n@)@n~HFZEy9-+v{Ri7!1j%H4zeh@bMRyNF&wBm-NBPA^{V zwK{jJ3iAs7DqbWxx|l4S0^uYhgIlf~q3BE75)FObAO326_#G?K z&n#+)+C<$;0TFzb`1db`X_W-4;U?Qmz$6xw#+nycu;@aS@)U4518$0Ll9y=}38EV7 zaIexqZ!K)Wh0-m+g)%j+SEGJUbB1jHoTbo|tE7BQYu+su9nKK(n>S@~yHh%Uln{We zUy28Obfq?QRm}>;9Wm1^n&v|- z>zT)6J9aEd`Q0r$+HX9(BmHE-VkN$1C4;)N$&==o$*(Ci?NJ7SC@j z6}Rq%t@y2*@N}>VZ~vJqFE$S(p1pL`X;SRN(F4;I|EcaW(x zQv&@RP$*RRYjDz9Rm!gt3j6Wdp;G>kDrFog<&O|xF9>Qs1_G@_h`Mf3;c@O%HMCCp zkDn!~m^Q}eb>m#2N_dCQJI9~<>)fwC0}t4|BUY$#>hL|jU=rTR8^@_rI-|+qRQ0LT zT72QGnnJmmYsT|iOKX0qIL2@tZE7DH>sz#8Go0=hiw*q?p_d(!iaU1ifw1&rNB+O! z-UPml>f9TiGo#VIjYgZbTD!bSwj^7YS9wXi#7<%-P8=srLUt0ela(YmBtXMbb`l_k zKv>FlE6E`c3e-R;xAcnA($d?$ltN3nr7dlNUTz`w;K^lPZ{k_-PJch69bpI78KMg@XShg;g<8brvp{Kcyo8{wInUL;i=*ps_yDT zaKUg{7O%vtY!?1jTPk~S1mDFOQfGaX0(=v)ute`b_{>m%kyr{WDREp94ap%gaU&>c zwA6sRnbb^DI~Du!Bu?N7i#Z0Flr5yO15fP)SY=2IaSSYwK*P}4>d8Pm-fR(}ZVoP< z)AA2Ac#XuaLkrErwY}@t_x7wu!Yh}fjt|rG7awd&u!r{V6~6bKjPSiZ`wy{|b-nSb z1O77jIbsQN%OHNUBf{^{a_$$O>f5v`8tk2S5od&6bD-NLQfBXtKCH?47b z9J~I{-2VCV`{({@w=>{gS>INEU`^5dU%mEh*Nnct8C}o5c1k=MP4)MuYG=PSb^`~q({$t$-|UDQ%)4Rtw^5RSQs4p%VyWRsm+8N{C+T!uy}e>E;P`JU6QMh8p2CVi*mV)HeXFyle}m zoMn|&HKkAy=kO}|Dj*chTbhh!Nj&BU_EO~Uy|Q44w}9^hiAR;nz_`aqWpFMjXdulZ zW=TCgH6>|p$X}@B&jAm5?jSP)xzfk+@t%-Jb~|LH9ca$1HjGTmDqM6ZI#$6Nzq}TxOD0U4hWV8t{bd{F6 zoTV=^`>uZOxvR&o!bkd0pix)kT=vK%mprn}Zr3)4;$4;N3mD62I@G``Ra(uLPx^5b!I$;ilbAm zPwCf+W610M|CC3S#F zftZ)LlL|doRP6B;$I)!06uyA475cKrKl%F;->7Tc4v{buN5Aur)Bl3hjdj8&rSXJz^K~WM4ksJVJ0FJ;y0wtAJw5d>FI#R0eW=$)=2~U$MjB%U` z#5o@V1ebWV4^=~irH6y-^Ugc}O*nPM73i)!{(~j*PT?8aBs_yl?nWKLDcVTRb@VCZ z8ZUVeZJziOeX9T8PA87{)2GJ!(Oqcs_-AL&&(Brnpn_QbNmI`dpVu;iB3YLoHP!(N zPz|xT6c>zS06kKfCq~|ub2O*0zi?#Y*ASWlHkfcM)0odRidu1TLSRYC63w=P%}I}^ zzdehM-#sE80ti&5mPin*NG0atQOopHmD53d>Z@dD^4Eo5{w#+3eo#wrAgTlveljRF_@)X1sN8 zCbQSbTaxqlOqQOfGg?^kI{yMvzu*@Jk%=1`SvdavLJ2doZi)15T)1##h*DA|XB4tL zW(lsM4pBE!uTnpveo6fY^(X2h>aP?9A#;IX0!vebWt-&GbhNaPeFc2{La;LutUwDE zxZJ45#S~(`Bdkvc?ou*0GULmjh%b~#Hqpce;}h`%K?VuH^DQz<(jsG;*rbbYMkdVq zHOZUBU@Uw$2rjaSEEJ(j@tu6!A~V5F_{-q2d=p)dM12uzMzUnJDOtj4(FbysiMO*7 zi&STm9anHgobDt-51FGkN0U)ydl}o`RGus~nv_;`j0sox5Snpl`RbN3&%%ajmAj7m z%Ny*W$nq|wRHBfU%iOGiks^d-a*pvGEDm{ShOSRydhS2mShRAJLuwLSZoQR$Q(2+r z^-B|#>${@*aC@_}L#{3^HmlA5wZ~CjQsmY8RAq7*T{3I@gtoSvW6EqSC(}xmGKEB@ zvl*h=eH-1%lF+Fdh23c>qIX@8fl8T zfSJ>onXumW^sy?xmoZxP2EM$@R;*{V8oxX3C<=#ZmCnROr|-C=vvzH=(Uol02aZ1Z z+#Q$D5>~+mWKOlKC}8&3noD|g$fVS}yUm(Zqlvav5AVCnD6wrae}vRZ<3e?|lIC0< zTf{y`p{Q^m)Pt5RG5JH53NFR>=oHoS9{NEUqfjdN8kve`O>&)7$+9#fLF3fg#Z^MLn7Wf%7o$C}J$?nI(yXw?o_uw~0Iom;pK?`-?HY+Ow6 zkic_|Ozvbsi)%6#)RU}~FnCQO*Z~O7q9hDaeBiE!C}=>CGHVKxnS}q6KtLIumf-&- zf+L8_J5=94qd&@PyM2u=f4O{rs{DyElYgLXPBOIT4dGA18^Q-aA3?ozkF#xh>dx)E zi)}MoI*h((vBRmfRJc4NSNZK-vj#UMw?2rLAh~zlvRKLdGMSoXdDoWi{b^RN(%q-v zER0U7Rp_<6%I;Iim8{aD;Ek5*sMT3zqvZ=8*|T{@+NqQWjA5%|LEk+==S;iCI<0g2 zzQ-3mDE!CwF5CJla;({uFmf%uX@nZPnh@iSlXIz*|9HMqogA{nY55z$t zZj0pt#8Wlk#ca)V%p2~CX12YRnG=H%?uq4=ZG+lnDRs{lqH38S*`wt&G>}q*( zK){{I6C~qeZfL9^96fwU8@H5M)?bIFA5$YIq9ObEL+8W zo(YXTYyIREJxMYXt_tyG&+@;0xs0Tjsnd@()HU*D0A)a$zd3w7n?NRqTb;e4@J)3M zB1qrl8BvMY0EL1zV>)n{OY>3{Z+8Wgy>nJ<*m?b(cYW)=`;QZsP(xO8FHEiLuEMQv zxRC&7rd7PnzC7J^*FE<>Kw7OcjJ8Z`zmM?8CQgLl;MiC>oTMXi>484vsevE36cg>b6i5mj!^jUdtTPFVqo;rPne=XD-pv68b7k zvm{zI&FM52of?yd)BjLl!fBubRZhQ*GfBHN$6DtUsb@ymTc1IDPJim&&~mMtzQrxv zb?SEoJlsjUS_n&KX=*mLl-fj%P&eaMk)g(@*G1&a?26mtgtn<;xdh3$m5?aPPBgYB zB$~49#OqF zmOd;*;1*Sc%guHU;>%0&+0FamQ=eUf%XWSPpWl+t-k*g}ef9`0`}Q;V+>;+I@f?wZ zwI%x!EuU)o2dJ!?@-^PeoXxabNy$K4oh@V@KH2<*$DnW>imlirs@3TJly~GdH+A(f8lk| z#*%=b)A$H;WGcV{%3dnzuofeVN6O4nV*x;&)xrR>Z7kZJ3TU$Py)sN z$$Q5C>4%T~kKYIMO6fCt$r!toXl&L|pkVM|Y8#AZ>~Cev`JCNMqEkWTX4i}UNWOf= zEPAbK^EoX~atNw0KNA8)i<>iyvIR8)miG;#da1`xv@V_inClq1iY7dR;hZQc8M+`U z6HRK1)3vi5@1srcJ7(89gtrSpnZnzsorGjE|G>rXzwf|}gty24mBeF?2qPpOvljU~ z#8^yGzXHB#8p=n-sWz&QT1AkN_6CQqUZ_k10t=4fryGt(ZQb{5ow=@|>nJ`73%b9xamVcLqZ_x2zMAPX z6b*Jp6aEWmi<8d3c>=o#&{=?x06$&Eo5}W>J0hDsKUdn~0Wb5^-IfZvptEW)fHu-2Oy+zPKTaf$b5* zvlWO(92*JJW9D)*Jr<1k-4kg?t79VV_FqFkOFug?Jxz~Hj3E3?;Z`iw%H?M$ZEJXf z@-=Y6h+dCIxCSO52*MY~(J;N|!$}-hIqV~)RD_CAHB=qdM75H5oVIADmMCAFNlLf0 zm|C-bUV6TxGW8;LxxVFQ$hzhFF&VzDLNKR z>z_q8jnU9DjEV)ji1MpMU=O3DrYL z`Jk|Os+20&+5|bp(v*Q9ttY8^s)c%(%2k8d6wT+N)g(G3hSy%TK10EZU_o}Lf(Qc1$4mWB&ka|gw<2!C73X^LAW(! zU{>G-S`NxzwVC8y$(DFisjRJtRAmAjpig)V85z-IdSVdcCKG)Id;w3aI^pwFgQgsR zq68(bQkjQXQIc`m5zmlHVuyuX&cJ9|Jgi~)#{3|*mpg1~WI61V*EcvseZQsJD`imdlHRFo8b+)%2 zIq^bQ@68jrHxU1gcMfr`jl0rGA&=xt*`A5pUcQtn%*{zXvI|r5a@^a~s2S9wlh%St z;u2V#&(uJNr2tbNu*YT;yKyIX<$>sj2>wbN$zKRwgFWYHmcgVFB%0+?qFDyzdqqA| zq0csmUUI#FALj$#DJ$;Qh6+6CTid74Ak;qvIPgXvE-wae)rtmu)-^+fa}04=Yx7s4 z;ga4CiH;Z^z8Z^`Mjs=7u+Z;?Y&O-NLKYVYazaF%dY+3r+PCf4P3uD4bCbf2Pd>kA zwJ-Xn5fQ!UU9Y10BK-U&MqpM13Wly39wro9qe5>$Z@*T5q>G;R-4%@#wWvdQ#fkp0<^BggIR4V?b&EPsz3Ywi0*OuA=#O>CkvmYnVB!=$>>H9G zEu)p{RR)7q6YEeY4D`ag*RQ{O{j*K;2Y1h(f4MmlTDar%n&5C^H z(r9J~?D+*_TojMtx=5E%Bu2YPZIw-&*peTb&uhd^1Ak_-79ZiwX)+L#N(@;#h3-O@G6_bS*u2R z`u8-aE^<0kYCWBtokU$r+uN76ZwuAbgo4Q=jHUj}Jn3KAGn5|F$O^o7_fm`SXU+!t zydL6j83))#F$FJ4fRt_N!HdbNa5T4){^eOdq-Au7fx!Nnq#@WuC(SGaeHpSN2!3WQ zQYL^{68CONGJ#}-!8N!;n-QZ$5b18=14+yl$+WC2s7Kiow>4i<>1HG^aI{SBo3&l0 zQ+Vl_=sP-EScErU#e2rtVQZDI(po8x{z`Zm{T$ulu2HK(UEh3L7(VRnpVq+L{if`( z-==DxQ&;hZj@#uvl;VG8P?|{~_W&*8nJ0!HxTwYWoZx(L&E;@=ByH3}*e~xgyao&Qvhubt?yo1(0sW+R= z!d*@uBayKWGM~S!67C4h^clTov(mtH7Hk-48Q@Zs;5Ac^dF~%jnNT!qcE!OXca+t} z;(kkPv_cZX6t5``yNZn@aaV|uAOS-CVzJS(;s9=e@)-p7(9tNlY$SvcOr6&JXp7Y; zC)9A7s8DS({cW?TP>ty`^QBO>;cQAj^P6a?Z~EMo5q*o!&0r`*y4kW7av4Y=9vYwRWXrPSZQWCDLaNn zh7X|Qi?6(Lu`qmKSQyb7MgWm!L_8YMCTO+z7+NXkdHKY*$W;LsmG}h4@kjtd>F=mq z73k@T!-dhXHZ;O$Bqde2Cp+V?t@~rZ325`MW$}11%p}yTI*(a3;+i6QIL#n%8`)Xs z_k4zpK!>y02I${u=k|Ofu4%$GR;aN+&s&;#Oe>-F&Vy?;b|8U@nCkKvT zNWFV@_|hc`bI;j_|(zo5rtTf=uPYK7W3%V z-`j%t_zE0H_yin+wpY-t`1pHr6kN4VLTpRjfAg&a&`6A(#2LV-|P9S0r=o-j6Ilv1)N2ekA?Pj+4 z;KtuR&TDyx>qX(}yGt+h$zsCpQhA`gQC;GWTDoRLWdY&CBA?u|N8>9Bn{F)C2p<@o za{FqP-BiqP^(xNyRdM5SnMtrnakQaR0Gvb4N|M9ZPa$^AayI2@gAd|r+$JP6X-68(P~DCI63uss{y|!X0phP zz6;BNsdE+)=Cxb5(BN5DNQD&Oiy>~X@gwF^D4Q4o~hT!6>4NK z&_ek*Pwc< znpP@Qa+#LaY7I66k}h!!EPWZdxa!olhacWH{uhk_-7%t2jO>@&2-fQSCzXEK%H@91avJ%#eW;}`x6eWB23 z6oT{l^V;(v`VSfDkmf#BSEFrss#G4N}X2q7xZVfUauC6e^%-Bs*lj0kW!{n z$TZeB@lThttXwZ0|H+@|J&aBvW95d4{r{mc7&KcpGY2e6ukiVp`Qh!`9-m=bF6(#< z!KH-zZ?6(0Iu4?7;d%#VI)875Bh*3uxj1W%z=DnKS}LuiDq_#v+pE% zJ5<2Y&lvUDwV1rs<{?HI@&)5&yT!~nntb*;O!C$mAxv<7xOCRw(C~^~+knp1a=E$< zm&3+lGh|~+@aJwW+tiCcO@^n^ZQWPwznYN8?mjGyc>MTIxa$Cy?HI;w_8T(2pj*r~ z!JQVvXt<8VC*p^UR&Ut0lYplfG9#(8u$Y!}OqfYe0TzY_qrAmz0%JSiFxAtd$sG@m z6tcTo$byC3^Cr0NVfZ}8jZ?rLKd|_0T9&c;ez8VAx}=7rv0Gkwj^=6oP1e z``5=s$)}09k`&XQXFQnu-uuaPu{fm9l#XQ^w4Y~c$DVCk|MB}`aa^B?jb+RE&odRc zb=9XQiKj_OKN=2|@@1nXaD4V9)n7j&sFUaIZM{p1@VL#}sFzI^+Wf6vjtnb|0SA46Z@qB>wuz zd+GEC?;DXZw1hz{GjiX9(}kZ6EoW)CmeMzGxtV5>L_*W-@*&}8jAe3Ge%*AOFiosO zzc2c(#_9cnass+%OeI|U(h}|wDeT~UU6p?G5@m;jXQ3WcRv6@w~cwtItR>rLBLB95} zm)nF7yH`up3?>{BscLPH@J{>lFSXNiF4pH?jI6z1#>*vAiA*86f9+btA=|oj_sMt( zgP)_m50Aj#gx@oF7P^}~udk~xZ`MX#HQC#qXeLGig~UY9xbqwH=L24x?R;EQ3!3>5 z@zpL2!nCPDa20zhqM$ZOWleaa%`|~gmGnFoQL^zE@xabH8u4e_KQjW=m<*Gk9xQ8k zAO|YX0d0rS$bX{Gi&4k$p`OyVS>4T*{ld+Q7X5K&!d=_sj#6j-iT-^=XBp}5+iB<5 zP5c~Lk=o$tU*Oi!`zB}b`F-l6%BUE1J(Y8w-HFSHvBE;cze0b;&*@J{edvs3O7gi9 z;(=5Gxo=9uel90w-9rB+aQ~JBI6w=^mO~~c51!qSqKV3uIf395dsAZ8CJ*jh0IiE% zl%P~6EegaFGt2k&LV%_gZ@kA3td+-E$KzOl%Xap}Vjxr7@ zzf2U5hKeLI?wJ~mxp*`nNnS2iQxDxfjmuRf>mb6w)WZRbLuKoexY`%>Ky_GD0A*dx z5TXg2galGI^79sHULp!E~NPfbfM+_P-y&kr9DHl-#s@ zWR}@0T_?Zgom)m`tet`XjZFT*<9m@o9T_>DF0wbH-jNZTNjPpVnzMfWdIFqF!vh2g zj#C6)dfxhoQSF##T}(YUNp&g-!dxXmn5!(uBa7F`;M6)PZ~$ybCu3KlnoC7hilyfi{nDrW{G790g^Sq>vO1vb1Xnsy)DA zL5W_>fM_x6W&A~#pFw-zVLfj&$|Y*m!w0km^f}ENt#;%5`G%Sx%_kDyV@(FLo8P}* zUt=_}+=>#V`EywBRaX~DJF{DsvC35J0t>T9l z?b(sDxAwd`gp>*zck&o?GPC1r)(7~i&ZQQDm+BM`G%(d`i!RuPam~O~Uk!_#b+hk3 z4~o2U72%cZB%fzeW7KF>ELA7^Sx=sce%7!pyC9NqfXlW{Ck#`redfF=F7<>r($Ed+ zF5DoKAfnmAi*|bu^eW(d3a~{0m>djQ3MDekqef8#`3aCaAoT)K6H70;0QPCMzm?lm zaTOy!c~Z{c6Px_#b+lR2tkKbhPgH+S;VP3HLBdr^XXep)-fsU*hqsq1I4<-0mlqbnO)IAXtb*I2RFH z!Y*bD2*!wSut$X_wv@m}Xd#z%DuXu>vtLZW=r6&eB@Yp3!KaXlqf9~3(C0DRFpG+1 zSh~6pwTx*B1a1}F4NOKc)uc~K6O28H5`~c6Hn?l|tVg$h^MN-`hw<^XsTa%Ny`r(h|cbJv|PGk>(cqG^jE@R;jcef`shcUD12({Ki?d??@A<5hl*GC z%^zC6@Y!Eze_;8B@X7tQib}3}%T4bg8QM_Drz84e^OTvgQ7+0$1*uZ1g6g9t^C*Zj z+A1~5HcKJF>0PR|xY#A~M9FzWG_l!^9%A~b0ffCWz6 zt6-M#hzlS#z%j(pD!_7VK!GeA-aJj^CMNFnj_2{oc;0*Wi!V0O3xynD$fB7qBR#<7 z^x~3Fg&dlRG!qY@e}55eq`f5;+N;q_ykjYuc&EfN@s37Ado8E-?-w=*8_??CpbaN} zgH}%rpFDYT{1J5PiQmvWe{%xeIx)N-(Np=%+6i`YajF2e* ziTeaSr3CdxSUlM_EK)zXZAtG86dHXPS&yTQhyMJCM8}-&Ks5W+g zx%-7bAD3FCkym#=_#smM2cmX=bGflg+tOB3-Co+>-``$((~e!=yhQIWSEpO!scB-_ zjTc~T0q$vtic(4HG2(ILB_2g~;&fC-3=jF<+Y01I#TL22ywsNcwPt z1u(3+EDtVQPQ%jxz*X!ES3rL!xol-MguNTGRS6iCpcn9AeUNnB7^osDqnrWnBq`YN<5j&yjAD}qAK zq$ndeLYy3gNEdVkr7(84F91Ybi-e(`JJ*Q*}?2uVJA ze3kI)U;hFvdF||vqDS6A`#*OJ;}ycO4hgY` zcYBRd&w{=Vv#FuWDk(0lD$#1RGG(}8R#kghrGrPzJHm!Dr-T!Kx|+W8muNSpW%Br{ z9Y^kXxFZ(QyE%RQz?Ky*XHk{MCY5gGrrYe58;jjfKNZ>R^#nRNZmYJ_>8!oyRJy`# z^lJv;VnT0N(c<1~!Z+ZvnQy=u)>9m0gL;)C1&f%--Ha0(kQg5|?bY7@1Wx{kVw z`YTlc$4f;sd*h(K-WZ z9>%42L^V zwXLUmV8NoLm#*KmdF$nS_g(o70=RP{zH#2*@RIGj4qS8nO;B=&;i;>3-+bGhcM)DT zUCSBLW?1~3wMZX{R(cycXRp|``>F%C-T6*N)1&e79}c&Qm5M7f6!`?wzdV@ zmpkj$3irP86SQ<~$`^zu*3u@wub+3NmMu%!&0mZ3_kDP=v#&VOjqX0-sjYRa*tCAN zqaoo5dNGIm?eckQ)GGZk^TiWCmbTKWd8Lomme#&E-19)Y;crUi-wf>!^bF4~omV=0 zQSSq7hL4rXj}2`P^e%#;@mG*~Uir6Eu_`aVS*pd4dBTJ5ezbI+YP@sx`b{ewwY8oT z!m1OVM8k#tu(g<~bWwAtCDZ}bN<8=G<}({&c(#w$&sEFIV1{>s<7;;1c06g@^qJN9 z-0C(UJgc{2!m}_s8Y;WuD!&E7)IclGigDMXJv$Q1=?Rh2Cvn><0yvRmh7|puKa4mbx3^# zszd@_1zN=rNmX9pk}W1!MJA~wL40?;e1fnxJ};VbCFJ8+#z`c7@JwQOj+=ZYg2YBr zo;QN?PQ2O&Eu6@AKE`Ocy{GKmr8DhSRlP&XfO=*s)-Z2-eR;5C^S))PhSzC&{lV^D zv?eyaso&}?Iuw$p7$K4#bs0+OZXjle(pd{@RI|GskPC}%6w*P zbd;aFcsoqIdHI~yun2T$^YoyhnFdx!l-U{0sNTv@G2m{?^O=M`6L|G+kUdG zxpT=2H!SU6w$opxzjaSIRM9bSUPpy+$F$uWTK?^c!w=nS+Owmfeh)o;R(&0Q&AQn( ziR2xLWbsnz@1&3GQrdy}jg=j%n}%XeIW4nFO|pj?Bqamu9TMxKeb=9gMqg7a%Sx^s zwa9}ZcZtR1s+f}!-Y80~8(4Yi3i`%t4>k6qpVtpAxP1Qn(~njxpf6eM^(>sYXF&!1 z=nFkHzLGsJNQB!Cc)lMBH!K~jM@uC11$aSTEDyoX4zNIYe;3my`l0|4N@ev1g8uU5 zC9ObQoI^e>BlAThq4U<;Ce(Hfnt!KhAl`0cOwp9TQ*-X3kxZW$6?)MLx+iqsvg_+B zmu>F2&PLuTb%v6>O6GePwS!P$a~|*pYl(~iB(8 z??<(40DrSYQ@9;}T(V`2F>KWGSBziv>Gz(xs$pn`uXOfi{2X7~Ea67MYWC1}Bj%e8 z1-|)GisJR;eUrhOB&2P^tHULAlMIoNt!`5IgoNcj86+LIh#3Zn!9F6QMBs@}&@z+Y ztV0rffy)~C(Luww+^j*I_SD|%PhEX=RewXw>o%%U(!fZ1=ZE|X6K7KC5tc^lyNq*^ za$3Ts|5ClRFRhbn)AEuh`+e=(=e8K#s(PbDNz;`(HLOH#=qf=H31dNW#D9&uD!s&D=2=>T zP(_&0*=hpekdrnenx+}m^G%Ggq)nngHIwm3O>&BTiLz5c%n`Ivv#5ojGp~t)U42dr zoCz1iL00ugGc6=zrJumI`3(R`CF%(wrL71j)}9|twTCh9K=yJ7@Mst5>Fj)Fwx~Ui z5(Q$`>nH@pWK!IyL~qilP?=do2b+4~g}ox(e4Pit98ELKw1icTCyjz{lDj>ive zOTKz%J8rrV*Hu+PoxZ{zj>p6H3UpJ2J(Ng<>=n$=qsVdm;Df4X{|Lpa`eX6&$B^rj8*lvdo7;Xq|EcwX8zseJ`NXds73EGxd4;|3NfqQ^=@~q% zE{fuUNl^(cLsFuI4lrWwy=qQ@0zuj<9no<{y+?Y6V(nT^r4i~sF}O7f-oh+B{id)j zfX2f-Gp0~k!(UKNy_`KI{L&(kd5maS;u~N7fOaw;${8$o+o9eBQKfr~8RMgy9v7|cP1AuExJNNI^=4VIzF zq$0u-pq3J)bKG1&4k{q$g6j~8ofna$&%!A{VL0TvY8~QlJBl2y@812o@cz*!gxA)~ zko=HRrP`xnKT+J()|bA`e|;n}k}8Q>A;Zep@bu`!7xjr6`V=gV%(7Oeg!@($^{T+>G6)~b4ex~6FsugW@ZlAhv)f6;k)0G2?A#;@CH*4AUTr>C+fUMP zG~@EhSgxOB;^?1&ul%v>wYXD;cY+__T0Cp|xlu)^b2ag5Gh|Dr0k^koH86fqJIG~r zq_PLC_&TvG1<1KMslSx4ccPCeCPHG!GcA*vcyJx{z;?tZLXmPHot4++;vPc3vRp=Tbezwk5E|ZnpTy|QjG+i%@nN$p;GNJVK_{0({R5}o=v|Kmdx5K2A z(M}hXmK3>N5~b3#16^xUN+e2?aN{@4N-1)>p|;fOa&tJ|&5I`Gh&@;MVh-84ane*{=Y zDFhE{$!Gz7PYEhyQXx=ZrnC8{r_KQDCukiU+_e$K&~J+T0c%WRlQRCI%ZmIr`D~Zj ze77yz*P3STeR${gl7PRc%b7;fB31S2ks`mpNb=I@Cip~uQ%CD|ZKH?|Ym&DuA`$(K zSazCET|%v+j#A*3YF-=%Wq&SFN5E$|n9qp?Aew{6gP0XJGY|#WgJsdos(jYf8p9&a zDk9?8p!KpQ*zqrmX7nW5oX0yni8yY=UD6Z-XvOI`+%-o{5O$~(IXS-YnKQ6{tQP9~oL-*k~Q@)xwRh*|q^H-3Gav(MqCk_FX;~sEbMDiIM+{8v0#Q4u|nS(8nf#fJ!2Wq_Yv0P83ho?j%KYF+)Dbm(pjePXB>9 zHV!wk5mI@K?BC)z2BiwpQ6*aa^4BES}eq8R`ZE@aQfY=)%ff@S*w~_JDGh& zG<@LcmY78AtiZpghA@$$@)V37r6dPS669#`T=4>ggdMm=2N*B7QO@M_!0!qhvfcoJ zn;6vxOJiRd3_%fl5&>;41l)#d5}~BX>v@SDGk5{OCbf5PPSeNqzRcdegL4}{rsSd(1Zl_+W-&sd)lj(P+L|g=-S9VfSs)uq5 zxh;MiOck@ZjL4$e_&j27I(dJZujbo7jr_fx=hF)|J};aWek+`QzRFmnQI#6J`{x!J zjg>{0JzOq1sZiRKLrSGmtx+yKY;YLxziCQ^U9nJsxl0wU8Nv+|iiOaCGiV7nvQ&$z zkPETTZ(NY(`S!m@K5fU}m%jhxP54VTZhW4eQ>kRbbN72yl`*5T{Nc+OJ9!3vEPh@| z;TZlD}A2W6HgelRY!Vq#<3Io*-oJJ)fYt7eL|pVG=Q(NtRbriPy(_43FJkRyl4HZ zhhBd5>~HpX&2X%X<2~RO`X6fJ)rXQjbZ@-;!}nNiroet}I=f@LM*fGp^Es^BavGF z_J}5r#ARo5_5}~-erlrOA=hNc+e(eq<^3aY^39vtINKL#UE7$SMWh|c+ZDB6ioAio z5}UT{C186Lcci_byl4F?NZ&B(NL?+wsje+z#roZ7?qZ6e?3rNlcZO5TiOX}9>l1T~ zIBN|oP=hZF#I^>8f4!rXc`>Q4?asuk4718M zv*JBw%z$~azs4Cq!~MAaUTpgRKXh2mlfN!3}Sr3B*PTJw1SzB z#e!uU>n64YwjQ=~?2|a8IHqtKafxvK;V$C7!jr&rkGF!4iLZz64!;-w4uKFsGrNSsGYwvvRUpWF2Mw&eq5FhrN)+N5H4U*Ti>~-wOY20h<~5;0~m4`OTL#Nv$N+TxWGq7sdg5|Yc3FQv>& z^-KMdb}Ri!MpnjzjBOcrGMO?1GMh42WS+~?%UY8ym%S?|CFfo4g*>jjJ^6J70tL4U zLkjN|6%?nHXp~GSb2wqNa1rM$O+^l3Lloa93MVyGZ+@j(45wx>j_3>5l1s)ML;S z)$^@)U*Dttr2Z2VL?-N;m^N|Vq>{;OlebObnzCSO$kc7qOr~{BdobN%`h*!mGqPqH z&73jIZq}Sx-)48rzBb2VPTibGbG7Cc%sn*EYTktTO!Ld;-&x?aVAaBqg)bJZSS+%5 z$r6pFKbD}T2EaDeGR(18;N%?|b)@;j_? zMC(Y+QN5#O$5@U{I`->$$_a@Rb52&B5<0cxw8iNIXZD;GIXml|+PS>*b{EcF{Bmi* zWv$Bxo>m---8zq&pm2-?D0h7$)cxu z&orLLJiql)=#|r}AFmg^v3qOuPU+pD_p3e_ec1D{?32N#S)cvB9Qh{l-RXPJ53?U< zes1~s=9kW|YrpmWc>LM$cgo)%|Em7`kp}_G@62ETc-muNWME+Yz$D2a!TwxW@n;T%(B=y3i=W!w!6+GD7-mh=?y4mCzsIj#lFoG3xYom~Zx~_(FDL z@^1O*3D!hT5p6`WQfR-2&?I+AzYe~ZP{DmnKf6FQzsf#ZOGilISpIU+?aWW zGHavvhIeMZUE!;-k1odJscM)j*xd9GCY ze`JvpO4Y>DaS;{nwTbT1Nmt|zXq=H{Ah*8kd#vHp2K*EI+pElwPi_&HN7xB=hFxG+*bR1vJz!7R3-*S6U|-k|_J;%DKsX2vhC|>`I1Cgx98}Oi zhZYEELkA2nVIg$Ef*#o5fD4Nf1Bq`EW$?g<074jpahQNfSPVzNk#H0o4adN-a2y;D zC%}nt5}XXDz^QN=oDOHenQ#`I4d=kQa2}iw7r=#Z5nK$Hz@=~*Tn<;jm2eeY4cEZ6 za2;F^H^7Z>6Wk29z^!l_+zxlZop2Z24fnvka39BUM05`;qaAVvAH^m{WU=?dPjCE{a z6Gw0qH^a?w3)~X7!mV)|oQvDyJe-f);R4(qcfcKSC)^o#!Ci4T+#UD8J#jDG8~4F| zaX;K255NQQAUqfk!9(#dRPbr1a@eaHb@4~zB9=sRt!~5|8 zd=MYPhw%}76d%LK@d!{_k@d=X#5m+=*R6<@>G@eO=?9eg)& zA-;$2;|KU5euN+6C-^CThM(gX_$7XYUuQ$x92%NC#C>&WsNYxOz8d$nxF3%DdfYeS zz8Uu;aX%XObECexAnNN;UtcgU-LX{PPxnIK)HA+NJ>AF&drVl4E7AsygOnerUV$4$ z^xR-F75c(UwN0y+3k=0ly^g@Z$g*tu0Xp4`Cwk79$S!uAo?_ZL**js7blUBVZ+2|e zO6pE09eAp5qztDga2I%M{Si_&bV!nz|*<@AQQUWrA=FNCW@}5PAa6V~9U7-e9PqaPZ8##7GE@(M=H`TV(PJs^7at+58eqqe9!k$pbpJFWX2KiVH-OM6S zcUmH=sj^Q7Y9~ei{gmc7-5fVP)$68R&$NS#uJ(kdrrM4j(08kqF$2{y^uz! z#|R2i9yeQoQJ`-fTd_ntC`F_B+MXyCDWIg%HKeqgpIQ+$@9X}3r(vWsP@JJ42j z!BJDj%$9JnuBiv1Co-csyT{>ivOSDITQ7LZJsG+GosjqLY{V z19^nJYlXhTz$o-gI~I!(h@_l#y0R}X3I&CP?0A$n?Y0w{`MM{B?Hf)|j?E%eEcX^zbL}I8`yC~Tu;*>0}OB7MIOuI|qj6#`pL*Jldl_`6KN3@~vXGtNZouSQL zW3t#WX$LLBLBtNcP1+(HP;fclixT3|Mg#rijfMrO5N#G8IM+XGCR#ZY+RPzEf*2(Y z2e_5=d_QTlC@BaH6g)en3Ck+#9M(1kHV_4at}#Zp6d7$kKj^~7K zies53jD)R>CRAdGq#g!zl`cg^btQgGH|48iqQLP{Gy-au5a)P=Ck!ogEMg4L?25pk z1v^GQBwq4pSwTK%mPiwLO`T{y)Vq1QM)HT!cVJ4AVV~V`oDQ94iUW$%Cen0=VzNLn z7lAx!E)pq8BS9u{B+6J(-VlY`e#&<|f*LhZo=Az3r(fA*QR!nXMSeR3m=58;MI}jd z=#GmqoLRHfhqkOJ#PI>)H4wzDIl{I_cdrs766X~xc0wUoXgT5qy627h6ya~i zn9o&MVqctQnCn{Ny&pOJ-v!#<#>E{F-2voN|{x0cCkx5i6Wd5dfVzE4% zaJlR<*$^sIO0_v!oK{(ien=Tf>1(rjg%QX8q2+;H(?j-4rVK?Rf-bhaB8k!v{FiKsFs&cKVCmWljQHf zl9z)l*AeB*$($u9=^2KRAQ2mVm(K`E>oO&jTBTZuO1`WJl=hU?T-hRkEI|rEm$jQo z5qimv<|aeGl{9THxzL?VdZCu=dgDng(D|7x@>4lGTk?>`z;F#!ql{E))zLXqvjNem z76!s!_J61NSmpk-Bgsultv1X}y);SHG}PjQ#DmlXU2}e-|MZyB;b3N41QvQ! z6Q$EjuTNg|#-ee@Q+t^DRp5pW>l|IqT$WS?|Y;rLqFAdHni*xI(HalgXq1gc*=UrFM%id|G^Gp=NehjoDmOK5hNIQCt?;11 zO_Q4uZrG?Y#0`I~uu+ALD#P5=xnYY6TU6Mh68ko9DDK&=%63(@tFm2{?W$~7WxFcd zRe7fx?^I)p8e7!Zq87V1KVEQtCGMpLo7Unj=hx%D5%;|KFt0JpyAJcN!@TRT{J^He zvFUcaah*4=^Rjg|s + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          + + + + SAML PHP Toolkit + +
          + +
          +
          +
          + + + +
          + +
          +
          +
          +
          +
          +
          +
          +
          + + +
          + + + diff --git a/docs/Saml2/graphs/classes.svg b/docs/Saml2/graphs/classes.svg new file mode 100644 index 00000000..e5845e87 --- /dev/null +++ b/docs/Saml2/graphs/classes.svg @@ -0,0 +1,108 @@ + + + + + + +G + + +cluster_Global + +Global + + + +\\OneLogin_Saml2_Settings + +OneLogin_Saml2_Settings + + + +\\OneLogin_Saml2_IdPMetadataParser + +OneLogin_Saml2_IdPMetadataParser + + + +\\OneLogin_Saml2_LogoutResponse + +OneLogin_Saml2_LogoutResponse + + + +\\OneLogin_Saml2_Constants + +OneLogin_Saml2_Constants + + + +\\OneLogin_Saml2_LogoutRequest + +OneLogin_Saml2_LogoutRequest + + + +\\OneLogin_Saml2_Error + +OneLogin_Saml2_Error + + + +\\Exception + +\Exception + + + +\\OneLogin_Saml2_Error->\\Exception + + + + + +\\OneLogin_Saml2_ValidationError + +OneLogin_Saml2_ValidationError + + + +\\OneLogin_Saml2_ValidationError->\\Exception + + + + + +\\OneLogin_Saml2_Utils + +OneLogin_Saml2_Utils + + + +\\OneLogin_Saml2_Auth + +OneLogin_Saml2_Auth + + + +\\OneLogin_Saml2_Response + +OneLogin_Saml2_Response + + + +\\OneLogin_Saml2_AuthnRequest + +OneLogin_Saml2_AuthnRequest + + + +\\OneLogin_Saml2_Metadata + +OneLogin_Saml2_Metadata + + + diff --git a/docs/Saml2/images/apple-touch-icon-114x114.png b/docs/Saml2/images/apple-touch-icon-114x114.png new file mode 100644 index 0000000000000000000000000000000000000000..1506f6a668fbb2837c06b561895da248c310ac53 GIT binary patch literal 28338 zcmV)=K!m@EP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6dxqE{8JzR03ZNKL_t(|+MK+3xMgWo=J{LSu=hFVjxo=XL*xLNB$<#*nLcTTVEXjYE|_Ww$NZDp;tfr6>vr6bZ?cnIt(6ky8vA8S`+5bI#uT z8&?1E?Hdu+Bi+><&vS=3_uhTZ+3Wk(de^(&_Y?lV{geKy1)O)z&(4gh%6p%3awtww zBVbe!P&xNEa_)2gNl{Qh1p4nq&U?20$KUy%_SY1UbN@s8@6KLK&wY{euBrd@U7h{y z|Kag}?nTJCH-fJH!Flgv?a5^AvGQr{BP(PfKl6&qe{l20#Tz7txq-8_wU(KI$B4nifb$ime?ux@jYBF2 zZb0f^k}(*ugl>vp@Ph$X zAU6#v0x5wrWU(a8&KR;LQtZH3vT^0EhYkgtb%-WJ1m`NOtH?Rhv{Mj^ zah{wKIR#P*)V`vshNRGvVn9X6F|#t6u-c4ilXN-D_~_EgSMGo4(Leg!m%j3CHD>zQ zzJsek*9TSqX9D{F8c1V|gD#hp!A+Pv|-_f*66AsH+O2B_+h9 zWKoQBgb-;%L^Lz-4xS5ab}j3Q@LJF#E?{+$lUw_ zz8Ww;J7Qt|24?3Mz}KuyBm0jW|JbeHy65+AyXXGLpEz*n4A2>4QqDR5{|=hQzKRW(YB1ti@PQ=%#pEA@l)OC3G!Vk6K4gx!ml~U{!F|QdJ&f6)P1g z85K(iErY>;N(>=HVoc<$RF$KREf`OX0YuOg8P$V6T^gFUL5<*i&2%~?q>Oi#fp=JA z@Ydj+Cu?Tfb|eHVO3cuNhymsXHO?BkwjtAJ6E!q3(u9B_SOFtKj6v(ckjpN*Sa$8) z$ygna9zOPapSkspKm5n9-u7rSovt`*Lrm#A2Gf4002?DV=RCmJ^*{bYZ~Wd@UVrWH z>{&m$>BPZDx%a+%^w`lOs3vjFiLWZe*|Li?V~iliBG!;qF#^Vz{^#JF!x)1f3^CS_ za{^JEafqwPDPgU}7*G^34s5Bah=38Cb$}vBNsZ0`8L27|$T{P^$K*g3A%qrV9nKk4 z1U2RLN>*G|g`U#_7!VXP}}xUy?CqojLlup(66V~j;LqoUZ#qXH>JocC09 zg*OIg9p0B(8dVYJ5RIsm-B;HGMgxZtP%I**M>k4HiIgLi_jqR!QBXlNQ8`cLy&y)8 zoj9qdj~`>(!tC6R9ouid>gktHAKZWNv6Yq8Mj-!l!L{ZyVEy94mJj~$Ti*Ay z9UDI|J$2MP^zdFiy}TsWSs7F{)>(`(APPpX*5bS`^-B|~31fW^P%SDY4QftjmzA?+ zSE?p*%BX_%4#D(*!k1k`+2I&DiwupmC1489Tb#2PYsxO|m#*_3XDq4(XsITAJ?s}t zItw(tuW(L)OwNi}3kG5cXBT1REY=vTGgvF+lt?OwH3){#28NWpz4{Q>T}7X5eJo)-5+&dcm&YT@OBb_oQj2#+aeTiee@B{If<`57=z}Fb0rmtfH4+95wxTodv4W> zDK|)S##)Q_zNA27P)+4ci<}LxbsjO&r|5FiLvlIWU68f_POUzN)a+p$aJ_j4KNwb{ze}K`}-!($_r|j983wXjZZ+))-LjYo^DbRD&U6T@O40#*|bfIpdr!J4iEF z*Q42UZI+~rvkqr1l1rPQIibd4M6j*^E|F40o%5)IX26t%XpP{k?^_N{dft;-2iNm&sw4C(>SS#rwcycV`Z)3q2^VFj!K>nl{Cys~r6vmh92@xCVK zL>D44B{_EDv{sU2$F|Ma?cTln)P0Zc+uLXuXiJcjqAD08B`y03#PlV> zAqGm8RK#exPg+{8h!A7K2y*bq5v3b*%_TeE|NN`3xCWT(V;apXKR9_lIN*cD+0M$~9jPV%jF}^Ofdo9v^aMx~JM&!U#M|8cHxmP~_s`qc*xNa*@uf=dJ zkRF)7{KB2jylDOCmHVGO#K}`9`<_V{IE(GkW*tT6|51e zs>T?>IRmLHFVI-flA3bPh?c&}c~^pN3YyDV`(4`iUCtt8NU2At+P5MZrPNi?^8ChI zL|k9HeMz61`c*zm3LI$71Wzc zV(H7o$B-;E&!49aj&GpIby3e)kJ{rjF^_u}Y9&%FH7 zYsHv_K6aS?qu#n{!{%4r@cj4ASC%6uPpeofNfm27Mxe45az@K~D{s0UfOSmTDU<1h z&^2ULR3WB5n9gCU0VO?Ks=*AJJEA5s3StQ{kT4~s`l{z)Go~7rt(W6jFeDhvS*|mq zBBY$kPSb)|#g^4i-?NFF$MK4wvBUTpTMaRoLJtZUx)i}@&r=he4IbglR`HC(~3#XnlMl2~NQj8EAj4Nqc zG$GcYrf)+uW27|jLa9@w-GG!rNwF#QbYKZksa1uyRg@f?l0C?UaL8TR(Yb)N6q>Ry zdK7L%&I53Y_Wy6&2C)w31Yh+43L!LO6o|Q$hk{Tc#Z>C52u56~>1K_DNQADVZQH`z zlBvDL5~06F?L6LFEJ043UgE;_v)4FlHUl$&vp`*Wx8J9w78cQNTM-Y^TK7Af_&lr*yU@Ko!l3F<^36>XT}z zmpK-8NXx3vDV5+Di?zN`f?`Tw$hfK|w+)CxW82r%(hiul-EDk7;wb6TI7^HXV++6v zU5l}G0WiiQl0h>m38@>SBE&Xey{C4b99zH=Q^^cnP*R-Yd=04({UV0SnRC+`=vy-- zgpQy>N*U`sRaH?{9u%CE1#E4}Zr*z)lU6s+jYR8F_u%6P?~Ey}8ld*hE$-g5_^Q*( z%N$!;)+R=rvv{jigHkhMzZ!jiF+~gZ6-N#&pd_)ZPRDdzpzEf@7)UV_LdRe@EH|YG z9Ht&%TusO&#i&roWi!ClBaExjzDbVVgrwyr8CP1699vS?V5}vJLBxafAg-!VqnLV# z3`QmKNLi5LYE;XskL|dCk{C%TlF0PEM_+Rlr1ZQoMM93?hlDPm#+Bva3>ib)H7F1g zL{+RGoJHpeLF2UNn}xLkl~w6N;axx^43jocRRg?Lj3iha`=o@ohT0dtw9rf-F6PlngwG_pE{*5G{!)T z82Y{xMKoZo!BN^In@c<7`o7nQLE8z04p$Em4d+M=ffNE+GuAnr7_2G4EGN(q(45FI zLkf835fzNF7=h4E=(-MP$_|RtRj>}Lk;)HBHp__|ODoj1Q-Ug)(xcXuE!3T{SXB&} zs`6C6l(4oL6H_E*m4io*QQNdj&^e%XK&7g4m8L;-14NeTV&=@!5-`u~aKLEj2_ca) zgjiS&?;KW@cCw0bRiW2%xuH2kCK*Omx#`YVi1Ao4)Yj6u!bazu5o>8DEyK}}tdXuw z7^!j2l^!yebeL7iF_!db$_UJ;fU}%9cAUxT3Lynnmd=okVd>;aV$N9aAe9<5ni(+| zjmTu?=N6co8L@fGX6EM>@U|)oNx>LFy9TKTpcYM#V?bjhB@f2ow8NmJejKK1NLsjE z5kr`)g7H`tjPayc(yQi-_cd+km^KlN;+&=OuJqAKF;+2}u*TwSxo!xNl!X`~tK%_I zVOG7%`CK4t)jX0gWzsf`<`&QtNFtnGULqsR4F}YN0U-u*=o^1ASnn9Pnx>tiYZDI< z@Q#!clL({1fQ*nelDdGYD{NG{=?ZQzDm%;?rp=T=T_euWwNnOuwg+1+##wR_QU>cX zOG`@}J9&yj2M^LEW%r(EaPc)S;=-q0$;D5<3SSS|vh$)c=aX|3^YW?V96x-3$#|9h zd++Co2kz$Z{=MA(t-BZwD%P!EWc{XX%#DWqM8kp=LP}%|>T7bDqT$>ODu!&Jo2-z< zlg0ELs(`H!>#$OAh8jaiEmnj!2-7B@&i7Ia4;l$wgY!eIb9h@aOjc-9rU`+z3p6ni zj3tJSd2LY5!?i#4X>qbFpUNg}U;jlu0R-G-%7bF(IW^ z_N)n3h@oSpZJ3`Q6&i1^lXaHtlPYmb(^;U$~D)&>?}9gwG9v6 z`BlF4mCtkA7e2$O!w0zZvWwZdb2}JI=ptEjsdZYwo1q^TH>+f02whkBw~*;lz}6$2 z$XV7V=S<}WgdAy8B#PjS;4EltP-CfvGgQtYIg(QuHgqA8qB5OMX<{a%Qek74)D|hl z0Pqg5s_MvrE+iGA)F{pxu!Zetx{eqd7H8*~n{gP8Xbj{m=UAAW5L2NslmHt;$_a6v zmGPAM8CPh$IK~fVsjMSaWkO)YVyha>il~8P&?u-)tgbAx|KL+(Q}Mi;zK5TB!`s+? z(Pe!IGO&WGAQJmds_G>#4rmb>_JM7BYI(J9y%eyh8miiI^>r`f>g!&{J3jEMJodm{ z{Nta0lzYGSd1`CezI{8@a7gZAX`ieihYm0pTa&w3xaQcP)okI5v!XeWa==$ZBnP5q znl_NcU{M?yXDSrIiNPC#rJ(FCMpDj%q)eKYsD==l!lD5=tE4WlWAn!Cj~qN~9AHGm z%(#l$*MhNhZ3k6_w}Q#3prz2UJZXt4%nd7i<%uy7V?roIFJ#(YWs+6#)u5-O4AZ7% zG^{bEBISfJP#)}K0Xc)J?SrR? zR6Ww{`asseGB68F`$g-{n-iq|qn`u zIpKXx%$eoWr#O1#6boB+@z$UEk6iz%@9hIHMs+y`s6*DHBoq5r$t z^HT0wCYtu&H~p@Rhzv>#Lk8M1-l`q1dh3ty$~V1(&wcXa{Nta0l%)d)*}7#*!3@n5 zTwO?a&BPEum8z-UiC`l>pn<+Ikwqpi^8H`5IP#z0`E=0PJNVTeB z)EJSZRLjB=*3LS+pxmvN42 z#?=OT-HxdTC4G3Ijgg!JGc%)tZgVQ5AuB8`FLC0;5@vRh7r*fxyyd;`$5;<6^{F!< zVte^vJ};mNWtPwcLbptc5Zlur&^1j-*QU%g%dSy;RhMCOZSnP}-<9M3+UL{=(4g94 ztn%G&dK)*q`t|(z|Nd*-|BWwV!%;?~c?PpXL@5L5Ue8nbQ-?J|%!W1#*_7I9H5a;1 zmD<;MXRvlaN=nzXbTQCHJ)2rJr!oW9G6{0llclg>PV}tivjh^=$#~3UJY_U0DQ{E_ zNh#3ANbDy8zA7^{Vj_!SW!f-smf6v;G_lT<6`qvZ`JS6Bh)uMBkZIH6T*aU=Bmt8X zlhsuY9XZL4OP|HtKJXvdwdd)50O<*CMYZmO2O3)Ow!DWC-W|7U*_SvZsQMs{X^_~>_N6}Sz!I<%|!vBi5^;GtRdyhWZKYmEyK}F zxp!hwRcdST-l3@@W=9typ--hDrCwVrh%Y6JZ7O79RBSYo5a|e)LcI*nj>tZu{(~$ed#1`bCU$q!@4r zF(sy5BE~@FD}+oA5o0Zbs=`;UFJnSXfi^^%wk-^A&)bS9M%NfAhX5&O+O{L4Oww~2 z0k<~W8_bLtjT%rTgg{P-;h>`O4sQ(JI=T>wtgzSURMrqMgcw*}9Wy&KqP9X^56G%z zaoSw+I;IfnDPhGj9=9AieTXd=Ud|i-^}D&|g)akEQSJHw3XlrV$pYF_sktb(Zw|+f4Hg90}j;+KPX{RmLz+`oWn3dI~(-^;81Wp3Ja>NWygmvrIF}t`9 zQDtRy%!&Q?a_phoczAvT+b_SG?N5I;7hZ8C^>BnpK-KoI2UMTJ*CXEXfnVg}r(MaX z{@`~xcIYWK@7jU0j+`^orbV#~hohb`YN-c9YF}u|7>oY3Z98Hvdf1e6ncAe>Ph12| zibzS-(`G`535>;PFFTR*0;vjZS5jxMHX(+^HPJRL4?gf1*S_?-dGo*hX?9-xG*nLmuD?-h(u{dh z%shVIH`ssoH#z+99nenMv~eSY%@>h#rfbHGPc_6438|lsm?HKnH8S^_o*s};)PBwy zCgU-#s!%bkTepG1mcp(ad*JIFxbJozzw|lmdG>SJbJaD4+-JETmASr7pW-F2`2jZX zxPZU>-4Ap4&|Wre*ifc5VsKLCwkbpg^{|lUnn+P-yHK)R%%og;QeyzPcaoLO38IvLY89Zl0P8Bb`NmbNWY$&?b!bXo?rA%PgW z>6B^zm}ZDwM;8LC%VRtX0eK zKBq+J%1$-Cts(b=@enh^%5vwv^7+P$u<7 z4SiMuA)4^6NF-8DC0C0rs|zaDITu zDyqKEAWJN)-^nFcUCYDw-p}EEd)c^Y137lom7}gbs!G#N>AH?KDQ#1xCDz(rIPLl= zzm(D4d4?qC9M%-Xo>b{#qK(RMSaHw(J?mptPyKm zf$FwM6H2pMRAZHO_@ZGT##o4R(O$OTh!lCEvxcg&?0aHAd#-&6@A>&(Wo~f>)kz_e zHTH;fmNUnXamy!upF{V3m5Pq}#d$KYy1G(sMBCDZK-W%sny{bDXi+VM*iu&&ga);~ zR|G_iDQ$>Kk(h{<8q|iaP=lH=n&`TQX;ac(N*%R#%r7nwrz`B=dp`#s-^bPqFK0Nr z&@VvKe{GnVo8_{ruV?SQcXRCE<80r$8EXuoYlvBByGWZ$KZ*1*&R$k(jbJgP9LXv5 z6P2O@%sCKZpo^u)4?V_NH#^|2Cyw26X0;Ebb9VQOo^kQb<1XS%f&AL4CLHkQGw_2u~e4!iL?K^6p>!ZPsnBQEht=;rsq@hQs>~ z^LPKphiQ&J!sZPNh_#$PeTqplVcN9BF7yiSUTT;UR*HR~_(XCMCL3FrCoL8QRPnCY zt!l9^*urJgwgF=;)+m-DBn~kbL31piuL}X^Je7mPPdv(F_uj+yORr*fVIv|fnxflHowJ$HQZ)5K=X%xJDO_gx@lDKp#@&Z_clzY`_rqLApvZ_e0W2CAj6Ou4XV z#ulZYwJeMV-1+#iTh6SG&+W(;UU|XID@_snc<(WqN}kTScSIE?-dJ~5pQ&hJ9#o5* z-U(I=F)3X$De5sIM~^LW;&k9Af9vfn*bYhIm&d?`<1c9Z#4vftUqv3cHYchf#4$%wr}mu$8J6b|5IpD#mp}WN{NM+Fja$F^ZBpum*0Jju zAB#1%2Q>+297Z#SLIi}Ubg7Vy#yG6xqAM_lm{Lz3MA|l-HRYZSWD0H9I$eeU03ZNK zL_t)ss5y_fMIbD_Jkj^Pq_dWsBh&FJtCK0KT}QT-s;bJ*l9mQH1}f)R7!BC}_(9(A zo}cF08=ebk6}k?k>4P}n#Nmd&_>KR-oarvQalje!_i#w*K==I5xi;p4yjGaP$rj534BOfL^f7_-U^uXz=(_<^_c#AExZ zY~ic5ZE?nk6Ik9Fn>+NOv_^A*4tf0$m7%uEF$uE$58{5NkeT9a{hNN8J}^&CI5#AtpKuYcE%;B^_i zhpsKxiDQ~>BY*iDzkqF)*tTmsD=W)PR+h<`v-8f8srvq_6#A4(dK`@gs07pq5yh$E z9E50?#E#|VCGNiWK_aj)Gh{NJFqm6M4r4Ccb19>B3%!3cGw_4b0#t)uVv#UF)M6co zF%)k_3QWg=rIl4iGjnX&yugtor}(Si`~}|rq2Hz+8bns1okD`4b^Or#f07@+`O~b9 zr_7E9B}k^Y^4B~vA@#HzTI_uNKwXi7QbV9?TT)M|NGxFOd~g2Q9ocoE)R>fdRwiM4 zGp3_BaILky>RTAj)YMhcTy`NcZ6j@~G|dF-49>!BU%QvL{rg{GelbE-7Z$>oA#j!% zKKJoI;MAdg?A*1D$?7W2bP6$(VeCNO8KYej8|J&bvi|_r>pXadyNBH))?__0ph0$;T8fjBU z*EN`|c+;x_d#|Lomf>KCU};)K#nN>hE6dAVa`6si^$558=^t>;RBTZTSYhMVdEWlP zpXb062N?_oJ(vWfH2Tv}=9A7>__{7b;}D1mLd=B>hy|+{rDTd+6ouq-=NA;zYR&HJ zFWYhR$)%NI;EY}IMVO*LS%b$#M^btpP32;~@}Q~M#EUHzSJgcA)G?m(@>lcfA9@3I zwI&pHy)-fN!0nIm#XtTXF1%nH%i{@c8%Uv}3mwi%d9lu;Yb;6%J@V9kp((?((_`u_cINtQWpW)sA@%OmwnyaY>LRBX&e#WzT=^NjTn_0(g zw|G=!Ju%**3rdWN=)&P zGV-1rI=U_q5>$f$-~7TCcxg18*mAIiLWsS% zTP!i;UQ4XK*G0%7l^tnp*<{vX#IZPAbML`ZUs@XXs8v;&G?QW+aTRKMD4z>^pET2k zuBYBCs3oS*`vD!5F&G3V!otD=M-Lz8rq{iRU3=CcVO$j9nvpm~wdRW-|9v*h3R}0X zXS_0@Z5yl`(6xym6;y3^Ce!lO$ zKg~nmx|M-<tj;`9oYb0m#L)7lk^F~vx38*IP(bLdDZ5;b950hGo-aa9RPln^ty zPp#(MsSu@kj$KFBwIo%NnxaO`u^_gtrEA+_Bf!v;DmZHxI8)3l)^gy9qrB#AZ)a|H z2&zbkXev+l)DtK9!Y4k)wr!hfR>ycLySr;wflTNcnzke3AO>uVteiT--p3B}@KdW? zdc*7ZtJM9SvM~Xwn zOUi>^znee##rN~Izxp%Y^pii!2S553?7HA$B(*@|`d7Vz-}uy*c=HE-i6hI(LwgS} z9Z#@1GjbL(G;KNUBZP+7wyZ3zvUA5qzVY8a&XIk`dVzDX&ykh6g%PiN=fC0cN1mi< zCgoHS&4_B5^ygGgBuNQLnW`F6S0ifYDJCsBtC(*?plL!s4&1FYq2>3xU2rOR1P9y`HBS3a9py!rJET|}KJ_Ux=s&-002|1Z>T zOqPyz($F>&jAon&V(YUa;b|8*d1jTPCzhDozK1vb`2Wg}{NitN)%7o-ovd)*t)J&J z|JQ%v_`$<$xnK`_zy2AXe%(uW>05r7XT9_lJaWf3xa;pehG@TU-PoJ{s^<{*0Xy07!QB_7Q%GQt}CBOJt$_^3!nZhUiPN9B5sxk?!22b z$BtpGFm0!(wY{U-l48f8t{Dw#y!RY=>M+lI(Tzx01y>atehSoc>-qBEe-UpBA6$Gd z+6PH`7nTJBgi?I&kXb3d^1688_a{+kW=fdG*`g!{(j4Ir79_?)b;QPjhVVeO&&6m$GTsJTnU;u71hu*mU6@?)&23a@QCBfhTVJ zBFiU^aorn!kQcoEZOm@~m=LOPH4b~`^KkG%@ z_yccb(kc($yO*Uir>QH4Ghj3^sOqwta%N_3#O+`ECfB_9dzqUT=sKin!F!C$OqLV( ze&tJS-MXHXBF+_Klyl`^i_&rw;Z++`0Y0f5W}&^JDCdZAo>}jB=*ZG7%af+(T8-I# z&CYcOJy@kEIb`A3Ss>~RB5L^eeMf<`*VNA;+7p;|HgMvd(Suj`r|zL$P>&gY-VN*Hu_dm4@eOELMQm00-oXG<&GNZF{d0Ej z+T8bnWtYVi=~C`pZL!xsmHWEpPSaf2BdjB(%-pc%p`**^cBC`1`&m2YZ(eBvb>*=L z8v8*fWxMB84s@XRKdKhVwNiRMYYoSaEpz#EUd(sB`Xvl&*XvY^*eHaGPk#7U*u7(s z&~=3A6iu0&W1*h90LD-cYT|Uvu_MR0^12(i?H@kPm;dTdx#+5^dF4Cb!!HQ-*UJ7|xD>ipTH1gBV(_dhsiPF~<)a$+|RvM_|dx_V&%*cM2d>M z?bQM~D>0Uz*CprtR=sZX`q zdrni?+C6%b-X~cPYW6+)6fgPyw{qokpNbll(44dqHAtsW^SH) zzVun1dhh{a5Eiy< z8@64*71zHQQ`Ow@nNRcR9p9p=XV|dwGK?GX>5u*{cYoopSzMScF0vTunifqUPMEDL zR?aN5`JyY?dg*oup#ZKP9UeZk!rkAzmASDdw}aRAY+~ z%i@gZfg|Sy(p$6p`pb9TJZVc2w!M+HG{VxKdSNhH)MaaZrf8Wq(7TzA9$n_O?|dh_ zc5i~z^)BL!_(eYT(T}2&)8yDNolFYO%DGHZtQ1ET8G~Uk@Z{8S;IVxOhUwBNPCfM` z&3Kg!J1)e!8IXiZMzm0eWoUnz#jU%z>;*Tla{L(gedY5Ue(V8`9ej+HV~0sOvvm9z zmp97BWox3;DwH;!LvM$9`Bp-I| z%%FbM)%UJvGh#0Gg}Fh+gGZKcSsphJyS3({s>-wj$_^}3kp46Zk;2wnQwRcc4iIUN zw8qP;Y}t7+>$l89?9jGDstQqsq43}xw{y|1S=#ZKfFbto-L7q^D_;(RP>c1B@tGx> zu1pdhxbt?t=UqR}CC_*!-~Qa+uzd6gSH0|&tlPRCVTzLagOmC`k7cTAmKVJKhe%oZ ztKa-N{LE~bG*n;UrnmhVmt6ZCpgk+OM5^M0WR9E+PuzPC#}6DJM&YvOJfG2Mz&HN> zzwr+r`v@lvKEjrbvy5g3grL6wWGx-$9Re9M_Lq?z8Ego zv^lvyEXg2Fs4B0nHB2U@udFKO7Dilj*`>5+_OY-qL)T7=PsUiREr)5OTy|qj zsT^^tYe&o2-asU0rIY`3`eBN8B*st>sz^DssE5Nw>5nQiSk`=iWhXc>Xh>|`wUfc1 zD#Um%uw~%cfB#*qpC4j!E~6(?G%O{ZD9v<=^PVF|PjY%W@_q09DPHo1*D^D|fs3x# z!;5H=-gYZ@efBe)cw#Tldev*FN1JG-CwT0e|D6YJ{VK+K z*6q58i=J^YJFmE&;|KP!dipree);!s;>r6ty!R1~A3Dn8zxPo#?cC1BofmNE;RhKm zZe+_vd)Ri#1vu*5m155Ib;Y`cA&=kt z09!A37K~Sr{@}x5<=M7#H;)~Cq!+SDIiE+@eBkBy(HIh#GMK<*=n}@4L3v7AT;00H zTlE~)q?z;+kVKBf8)$mvoAiAoMtTi4#rKzskyV{zdEBvX>rMtUvtZJBhX&7a`0+;= z)q+T-t}8Ti_MizjsL2|6a^Dfgq2}#B_e*@&%{Sn@L-i;#3nO0swzsfh+cv)PiH~vm z&>>#s;yj1;KE&MOMlOEV^=!ZVVm4pA8*3aegbahx2!M?{ zx3Y2PCRR?ZaOAPW?7Q#VJaFq5x%!o_W%KS$%&wpBy&)~I8L%8baERqIrx{kUKiV@8 zfv%Yr@}w_4DHk5p+j2<%pF6bO0@f=$Tl6j(7HKU9-N3a5YD)E5haR zv|(=JBHlY_COy^Tftvk~K29~PNxJ5(5F`bRF$`NqjC`6Ax?v%kz0*IwM~N7oLC zDB9EKy!yMC-?)x1ed51z`shJ!e$T($Y!3SO97c zK6nS;{_LljE}sNdZu`4GE~E(>I)R?!7ga#?ok8k}YIoS+=m{2?uOBn2sS1NqZ66>4fgp zO$c;C!q6c&BxGm^our`|lMVzh1c%AS#(0)TY+1H7TJun<`3`6LhCTHk@4hA3-MzZj zsL{d!X()2WSMF_dThRPu)2V(Fzm&n#K^ogo=s2pJ&z*gV`G;rbcX_^>VcY)x= zKCT2Cz;fNQ?jwhWXnlZjyuke*dms0H^n+|3J;C+2-@&Wj@xA2K^Tb!~IdA-L-^HcZUCEiJPxD{?^}DI! znno*6zR2(Y(;w&PH8*kPO*e7oiHCXrzyH_Vf7d5Ce)YB7 z{Q7U_%9p&D*};aoi6{dHj@?F7GZyP-sispxhzud1jU#I#d_7^>ls^^O%W4-&rAR4JZv3g)$mj*XT0&$bv?D z?pKoUGCN3J*W{RS8fvQuN)tlFDO->)hFB^(xfEFwilhx`2oM8yQqVKc9d;l^(QX=N z3%wtzx4cO$Ro&vFkPmfIBAm*Z95c&qV5%%f zjvr#ZTJpy~_cPq_z2C zg$J;=T;oGurn)KnqY{&7waIckjk6F(54zZ>y#RrTfj*4%(Np&;4jnp72rEAHE5E?* zx$oh&x4sc70r_T?WnU-|1@a!>^oH9wbjiQtH-7v_*gf?WZ~9x`i)*H=7b6dT;zNAl z58lJ^7u>+>zVCnJ+HbzGyvZY(3sQLseQB}h=K%OAk*$$FYKo8?hcCO9=w`&#X~L!fS2;wXs#d*{z_=-?qP-Ew^4cYclK zxouwaJ#VL~m#A@+PC^D%)us8m$K^M?gm3%)|CxK=`)j=Sr=Q`_)*^f zf9@BVY;FKMFrFbBhccD8sC9;VBFNDsbxc((cnU=}mfUQyb7sk3y#N1X`^ks7?5Ha; zf2eFtwo)>ytE$-fIus2mRl@oqgR2YG#1ph-SawVsE8CfIrROL-*W^p}OBK3D20wUG zQQnERSK+BHu96oAQX5U%POz0QP3xvcl_IT(mG?tc5muRM>#~vnaKS?wPx%I#K>u7UUT+k?R zmCQQ9S%Gl{m77t~OYbl#5)CnEPCs&r&-~GU;J#0Oh*_1m?UqaNp_gKJQuMO ziu;U$s$#h}a_zO(%8bmZ$TgvnAt2X}m;ysDMRQW7bgGDD;1q~UHb%%1r&Kv8Wj5Q2`KcX-tZ~z+?2+RD zL(jD@yq^0$3F^N@Dn-WVqOhLhOA09+@*;-?LnHv~7bf1Z2!UfL@3g`wk&xO$i_o-AY?I4j-5Z zj3Ib%6M5Tn1zK^{jW-g<;-yy`#8R8=`yP|Phw)-<)>Kx6(J`R1qF=3e(QUVL-Mik! z`~J;O^QS-iGbmTF+Bwf9*S~eAj^v_u@E^zFstNEty_-Mna}?z zdaFe#MGRs?2#An4CrLI)eoZrJ0mEX^bK-_;<%Lc`FmF~fEO(ioKE>e;5iD0$5uz$d z2O1w@A!cS=A&p6+Ar&xTk^|9n`VHL=6m?azv1xJEP!-@q?JBI2B%R7hO;JdU6o#nW zC9TSAY)rWD%#-we4{nP*W>jTh=(*-4*RdF2(e(^{N4Hwy+6g&ioEE7FDGJcONa}S= z7%N@MFl@7R{0MLU!5`$F4}FrYBS*ODj@Qy|%w*roXG_6(ANL6{M;<-7=J)~2hkyCs z@{V`^6Rho^s!%b4s!1uZ+UYs})JY!v)L-z}7d{7QE_uO=xcS@vd#=0nr5Gj3y7hWR zN*QOs`$$tc`o1rkB}+f{LafY=Atc6_*y}ad-*O|&Ps-^xcyNl&XHGxy7>5pM`c6Eb z&rf7AN|J@rzL{u0QDHyPNGWJr^z&plR%+pj!v_wMmc1m#IdjoEXG=^{P7!TI*`=}& zAB9w$(Z(^GHazsThuPcix$M$}>U$VHS%IFdx%>e)F38cQQIxX+001BWNklyp46P&9GFI^Lfz%GX_o$ko!R( z#!=8}=TGghci{|IUVa%nyCYTAi1sOpPIVaiBJp@mS?&vOr!ch9C~D^f*7W>)q#}v8 zP%BahLibmOj4YqdIjq&Fw4X~=5@teV3~Nw|-NlM0A9>HQXQlPi{7U)biU&Nf9wmZWcI_TwqCAd6FeE;`f5n_HE=<%Ut1y$$FIH$*oC+vk8@OcNmP}g?_n6A7BpFFEsZsVQHmNN zCe|@vwHC5-vEyr{2|n}cx4s@$dk~^{W$K#MYUJU&zsjKl6Y27B?mXvvpUN~4S_ zd0t7*Cb1B(louao2zWn|)ALTP0BzIIjH0ngV}FsU6N49vTZ|}ch{cX=ZJ|A;jB}RY z3>#C+S3dhW_TKrI**dx*l@Tkbl&vG1-2AH7uzLE7Oj}DJ;}fJ((KpUrToG~*Mcr&; z%Ir-CS{*!x!I7)0onx5=5vJXCQc~N$+1%g#KZ% zPJuQ|>Y7|EVD>p?sb^;|?5wJUZ6U%)|DOtjP;#>f>(mpm-e$k8h{Auh;Kto179a-STfZ)*2*LqIhf zLKr!Fj<0_7k2rbnS5Oz8WHu?ls8ZpwK1wQ42BRF_Xm)njT=%k9a^uY>U^$mSH5AG^ z)??s{ANU~GTzwRXw3W>G(T|Ki5Yd9Vu?Cgoxl5fji37{Xp!fa27&E=sUvE9n8TumY zqZ}TDM(9yW6)kJND3-0PV^TNFnwrKyZ3U+8N6+y~4)B$aeVEfHcST_qB6NL;?2P<( zKlb-|@S&50VH5z9(^N(RVw6(CZ&RA6WvPkdz;t3bbkMT%*q8a^pZz&L`MVz^>$xhB%LDQg`15h8~nFmkv=fC`G{L#Po-+1IB z@1s9;KgSPSjvU;eGSUF{F*C%-dI)5tsGX&)EKfgrig*3k52402c^qLFQHwRH4?Oj? z(>#9PJMQ&Ag*@&hRdHl`nX#(ic{T~k*Tb<@z)HSMJRf3cpc zeU?DLnnIz{Mx4v8DxzggQ&m_cDQhaGi|V>mmd6lA>dN!!_kElzzW+OElp?ni!HV=f zH{EtUuXxkj*nQ;FoVel`DSC2DbY5zTWD)FE&Xy8kV!k(L-H%MSCQL%dv!DE9KJ@fs z-1=Al8b?pegr*U_q`6|G%4%Zc>N%-L zabu|yFTQm1&faI7QM64>TSRE?d}oAkrX29ez*wG-oKVr)?Umedf>j3yz8g` z1>bzj2~^ih^h3_5x@D+Z-t)7+it5jxb!N3%;eC+3t^{_cEQNO&P_bgfC|Xygg^;DP z$RuNs7j0H49zNfHWHtCl?0&>gZ8VM3rG}~tm?(>aD@C+&MNMb1&M}T7T|boaUPaS5 z>ZZY1%WA#m(4m$;{jLAZE8g;#c;QWlQR65+ket!|n%92U9enWDHax5~_+Zx-#=!fk0`pNuv5M@l6(iC{+ge zhnBi-A%G89 zmALV>ujixx<^A-_JuW+bP)?6zl2Qz#2)?w@STeO$L}l5VFYzHzIYSOTW6o@DO$o~d zpZ~A#LAP7%T{z8f=5Y>QeKS|T?6vHkAGqiD|B(0n{LgXrt6$)fEyJ-xEn^sjYSpdS z-QA-bJ?m~w^gVsoi?LKP^{6Uwmu0Q-K3r6PpFMS+Tp!|xe(~S2*&-+Bj3fzJ%RD=N z^&h;OBL@;Odd3jRDO|i0Dy<5*Da*Y*C4n}TZ6=YPQ!E%Gt#2iAkj+WO{bv>*S@r&r zi?+I#UUBHoMeoTe2$ZixMmQ(5WFIp_h!Qtc_;c-aigOhq2nWWGJ(G6AMq8s|;K1Qc zwx2zTt}fxk&DW#*UfM9$fibkT=EZlsi9i31-z57%BrUFCJqpn&g+Nm|8Y|qyRo4+x zq^>G-lqJcBOtucIiRdiKN(# z-J0#aIji-W-~-VI7OQn3ZAe~YNZ@0l?|ZRHs3a)s;#NL$evgx9R{Y3+{9P`+b`upx zsWce_){07Fx_m4Di^)1 zp|*x;Q$fn~F%pfW)iuV@G!;Y4_z>vVD=d;{Ro9j)EBoqx3!J#(CVb!a&{j27U5P=n zTQdwJl{IX%jU1bS7z2KkvRglTRPC^ppu z?M>*tZP_-QB^!mBZE$Ya^YcIOk2rBjMGQS5OHFkQNnRXlB}6=DQivBLIdt*hxT?Yw z_T119bX_lf+x?XFtZ1#~{xkFEFRl8-%da_h=egZEAtb^+ZK85)Y;G`}PNmqbMEN`p z1J-CZrxPZ1CAXIli8&T{uA+}Z*bm-w{E|a-yL+5|`W!dC@mnyHM(UF5PObwgbJ^uv z-0+$=@aMn#Awsv{=z)gHT9Pudq?f>LtK|xij48m}EbSzq4}vt?k7XDmtQIRNF2~4f zy&{yXWotw)6iNiTL18OPNX0oELn-jX(06z*ineE;*=BET_>o`xPuz0H4XCj%@F+zd zJ!&>%=oRnzC;y5`-eI;;vseo+A(Wy^QU)IjBbFj&EA2vEBv&Ybav1Am4^4>>66>y$ zmn%kEr+Mh?@*}IE45U%�!s3?wog{K-{%qGHIDjCL--fNidtk06Ee+%WTr(j3!1& zk_(|I?P8=aoe}FCb=#6c{B_jUa!!`GN~Ptx+Y}dtSV#BF;Q2dJzaIOmpN-tDKbXrx~`BI1KuZ5y@gbk z&gYgbW2DBJl@fRnaz3b?MH@#yjGQ{X#2&hezxNCOmKVL^g)pwjp-43Q4%M{uvEq+^ z?pN4({3~2?=^@tZCCmAOq4Uxxc9P$mQ24@zPo*iLwI(FFn~I@Z`kSVb-mfw;%-y=j zhlo{?C-%mVtcOqrQgh;_W79i*Qp_eZrn3o6Q=^QcU#;BSy3CX4g%xXEC15Hios)?( zJTdpr4Wu>Z#H(+(;?8U;nnnV^)~gl43y8OIj%icN7p1hilHkRprF;Z2Iu3KZb#5muR%+E|n^Y_t`RTs?d$a_yWjQAvCWNSo}Wvnz;oz`r$4LT=ww|5x4 zXSOlr(9tbE`6nMj*Be~+;v1U@ zVJk<~*3z91qUnkPOSyV|ZRVe#mE~)V-*}f_H{d@2Whl~kBo9LR)xb|R~0b^RED;4Y)l*c=$Y^B(f1v7J0Xzi zhn^$HwmA8~18kr39J}fYrk5W>jh&catBO2$m@jY>%MG`G3*YpHH?STJySqJm+q>+Y z-$tiERXZ`?mhMdB9F-GC^ys6Yezf>jGD_6o-b+X}3AAPy1B=Cq?F(~yZ)h*Qo)^FI zPTu+B|A3dh{uNlYB1ehym0o8;Sp$<9&pdjTKmV2AWarV(bMWAlz4?w5(z{NI3MEOv z7*p(Xa*fGR3Jrdcv;WA?dW_Z>6wXP+ypB;0NmhvY^SwPu_1V}YD#d)h zz>gzsQ!$%V>^%7x&piAr_3QvguRMWrkoy7p9#vN*oZQoHw!HZEZ{dbpZ>2tPgsfXa zQ0$!B=Iq&XblpJT^;Aa0T%jl$RN<{E66@8He(-et$a1lyTdp~CdY5%DR0pr*(wDq~ zTmI6UdCTAV+r08E-%i{1F5T&~W#szQPB8^|#r3;$99Nme$mAxscD& z_qe*oj|E7WGDfKa)|WcIR!UsRTyVg5*83jSc3zd#H`TCC3i4I{Pqx_KUy5GvEGJUiFq&vvFVoeJ2}!RU#i&OH`V3 z$yEn<>%0C2fiuhao1;Jad{96VpbcQe=AM z7(=R<9z4eM_+btlIn1?(FXi}kmvhyNUcfakei7AVDhj=DL6&%9zz6yB>;R}K+o#WP z*B|~VcfbFAY)%8yLp9qwJCaZ|22>QC(?0QJ97ZAsrN68NqPa;ifY77-dEiF(NFOB=RVC7 zU%iJzvxIiA>UvgtGIOmH)QpXuv6y;PR$w*DzNf8gT5YjftZ~LDYHT_9XT~f#pptVT zDd}bM#3B7gh_?}r?Xqb#K{P?r*2h_Os>fkaqqa8+A)bs3d|oJt${Z+pAD zk~!rpRo#NEST2{0gJ&{rB{CrdoOAebV3`xE^@>ABFJWdpryu-0ryqHkC%$|?x4!xH zoOtnzP;Ldwg)H$thz2NSSkEPn$vO^hISyWaHK_d%(C~F(pU=TCJ&X&eB!QN=Ewe3a z@N$qqE7_}?2Bm9KbbRge_j3QoKS}r0Lnyz;WtX%pde4RJ3oI5($=Oum_qWIkt5c#I z0@~@Kkc(0;_Kr#0h&vp~%Tnc!iA)ZHE<*`IPUVc&qEzfhX{KpoOLONNG&|!s$`p16 zV=O)iTvltL^c$_I>YA!@viTO@MrAZj(_)NaF<-D;E-}_pO=iRt+1=SjDMd4BOSJuf z$%(3-5n{yqj(RrZ!uB?a%ycqA#~t?W`wVxTe1wfFujPi|(;!!{;2FH%AIJQhiq4N{rE*5AkR{v77)|g(K&+g@ zl?Ja?B6(>l%cN<^DYCtDp7nACO3~CUAtl!9H7O<9Nh|V6@3BTRsawWzkS|v^gp}Dm ze->vPaTqyraEsZ7Mu%;7AKK)56o&Bsn=>S~2@mG~Up zMBdVMCxe#KelE5Qc#K>W^=P?@D62tNsQQ2~51!rO!Mpy1llOjwe)l}%dY5VA7^=*L z?VYkcgo`Qf#yNCMWDRRS(mF>D9&0j{tI5O2h|F}WBo%kDSTK6eq^YTDOAg|lG)mD{ zMR=WH$RhO+c%#I3Bm!X!tcL!gNXPEaO>1k$zhebViJU^?FTAiOFn=HiocXqY;2RDHF0Jd)IBtdeO03ucUBYAcQ^y=F2&04yK(j zX(Tmoqf*$MNf#dFp+9?)&%QShs5x@w)m(nv2`;2t>QS~5q*h~%?9|L(1_E6=lpv#Ow=Y&z2CTDV6 zv-X}i20?r#Fjgz;EI!0;e`(Db(lCUW{Ahg;aj;f08%=RwRa&HrbycCYVi*UOizWRy z;_8}qwn2)K3#y zF(*_M`&>+kIF2IF$_bUB(uSc_XRL9A92kb45CR*MRzz;v;3|zS*_-9kS&9UeoDoJ( z$di2X9GPi!m~;*Gwiev{qPa>DFtMt*ByV2!Z8d$!uc-6=ivHPOw~k?};kWSWQ^1X{<#V zg^wdm)8J#i=-JF#v9Ym%PJu&{ifn75q@)mIWL7(>VuSNpvDjOnETk|(HuQsMxmwbV z30FDRV~-v)78t@vQ!B#g@uQ%tQ%tO4&vY`yH8mk7tX8zM8T~LYbUm(?vSAHBc#N9-7%?a>ZV9Rl{~Ygz{E&ZQip=pIIS46T4iCa1zVDXh9#W4 zq;XsGD9A~ae9@+EsGVRdwU#*Bz1>~>I8e7!rdwOY6q)bt;bV{p!mP+XFmx-i%sKJO zdq1FDP1{cByPj1qE-tN9iE%e%Qi<8i)UAeOBn|U(yHu{CwuW(#WP@clV(Us&4>2&QYy8lYMlWXw zqsbcDNy}n)!D6}K;Gsh>3^Y~45QW*gUM!_~pe6H)u_t9CttY2MjWBu!FE5VLnj9lO zX6D{AEq8c{>j)?%!Dw~UVr)h3IyM{22&Tqg000gSNklyUfa~^;w!HsZaqis%H zzEQof^CEY&KvPvzPBJG9n)Q0c&h|Eb^h{)Fe}uT5k}tzHye|BkQgwb7M*7tvE)SEv{y zS>0Khrp1TAy7Lm%ghWS>LIE8X{AB_DDy1Y-IVXV`mbj&E^z=hVLS!2{OSx>myG_`y zC9GG3VMIGE44ar4#*u6cm2-?CmJG>+A9|rxY9$Ze8Wfs9Mx{jMY%$!p0?UvfHl;OL zfiK~46d0gVimI*)B}G1?D#=Glg7+8(al={bq+OPg#B(KyNKMo7@dr=--g*oV0H<^* zeau5lXU@-ur;g9W_uot!Y)La;c0GIZ1w+?kD<_sTZCEUq^g~BoHB_z=Z(ml#7^o^o z(@xMvmQ?K=Rb8>Sy~A=br*0dZF-)3F4Q(9v?(2+AlkT_YD1-5Isse!~vIyA)%}lm0FZmk};ZL=*i`-JPe}*a8@hPtkpZp=hX922&x%L*X!l5q$^gv^=Bi1<4MX;rzp zLTizJ3?Z`UI(&#C%9Kf&k8ZSFSjUsy7*30|nqKcSp~o0cfBBj7pK*0dWwg@9X72;r z+ZWi~+au&my|GC%+hphmcDJ`hai%nNTbFK$Ck#DRRim`9)rQeCM#W@flc5_~b!$RS zSYt}1BU3k%BC!afXDzivaYsqRckD&+J$NsHGAYR*btP*#E8+iWCt)*nLn7gakq|OD zOIWurqG~_*5@DDayNig|!Z+HI(~fN}@tkTH|A&>v~q*K;I82W3$#;X%b(0 z`pjpBkj@kW#-K}4axZ7jp4?vCe`*z;zVgTcmWu`F&Yx#@Z;l^>co6D_lrrnCm-3L( zRFerBLmb65Wb3MI%7)QP)4AQ4p|obXT98mQ?F1v5K#_%L$qebnk)(1d+)Dx96cs|c z_*;oUI78N2czI3^Mf>fbSmK1WEnHdTjTTH;X(Kr;zI>}ORgHF4*@hH-KL~HgX;$5; zB*ta>eh{{TH6*3b*5aI_53sk`MQM$3a!}M{Oyx@0b&{(~Wua;$+qoZDuh$IyKu!_o z#6IuG=U_?uE8=<>Sat)0_Z*oxPA<1}>HhVhA`_;|DK6+sc4-?Cj22uGW(2oQ375 zQi1v_xdwSJ`5y5iFrs7dBT8G0vf?GlN>-o!ZVwWQy6pNK#zBoS$4@_U=3~8&PXlMA z=O(AteMXf6s`W6|A*HQDE?<$z%G6EX*xFJkC3mf^LmSOxGQ}F{^9AowXeR9x>m;Ig z-4CEG8(Uk%7}(z4CS?&y*|Ky%qG=lO0ftP-Vo^Yg5ZNesOGBYXg(xvYN{jw>=m(6- zRL0=F$0)HhjG+L2or4%9>OyO}l>p+=A^^@xNnyIArAy7((|fVj$D)F8&Y=`^{eZC! z=W2Q%82pH>Dzwp}SqdIk)fnT72DOxQjX(sw7nQj-w$RK<4^nB2mH$snLBwB0t0Sum z*=ePwmE+6L&hLKk+3kD2`9XP68r9#Ykxm+rd zB^oA^3AL*rN5*~-T};~)rI^6l6Pnq^CdL{T%N1SM;VMT{3CAr2Pt!~=MvE+e6f`zk zmQG_GMi(hWN>o)vK+}z(VAj+{4vhfb!B)b!2{|+Ly&y_cM5QQbQ7szTYy<=5OFPY4 za}h1=eW3Rd*EVQl>4rhfy{-tq^8V7QSuIx=o!cpAR*MC7(@@tiCAL zvpKsOhoc9#jvk-Y2X}UM)qJ(eN@+D|TPo|wDKd5vtzK1)P#zImw2xU_wUd^`a>-)8 zz!-l4JpCe2VzRn;{<~DRFxb8hQ62N16MIdG0|9S3)Mp8kagXN@T#gA zK@Kr7$h|U&_*inhBBS@{y17`Xsp>}d=we}uIkO&QOR%=0TZ^JzoKKpeG{v=&7cdr8 zp*B_|{(cneLet348%Mcflz_Mp6MpdJ#4YNI5aM$Ktj)!WRPRHstyWuY&B=v-`mRS# ze{c-xE5HN5DPXxz{CoaD?uVfTAjg!{sl9dY6tjtmhm1mL>vH946j_aZCvS9B32|9T z5xpNgu5GBBhG87o+uf4~?i`JidzR9grk!GprW*#ecyM(;~djAkrx zLn+CAlcFTW86!)zQieVxaaj3LaA4j`np`Ci{V_zclH#+2k0=A$ zWTh32M%A^;Pwfqle)`cfA6xe0J;43IlVwTu&(DwK8)juJ(>07C#;0~xtE#HpB?o5* z56>E#Qc|m~&)$2b_oM5r48W@Ez&YBsMQOu)zF-(ebO{KRP-{^cIp^dqx?YnDaDD%d zmrJfP;iBf#hltVQ&7@$YBU&s5gD?Ni5WSZodsQit9Gl_vnoX;iZYi=X-sv)NK%^V#wJE7ma8?(a=O(8Qzm#3sGO+dhM4HR z$2un+hEX~VM$6r?_u`e%#xf>pA*pigmw}`lh~!k6wZWGMa&e!?Ntg%L(hsA&4A!BH zp)0e+RkBqK-jkIirj9AgVX15vIV-BF#)lxEqd3ld$mOyR##*vcbX_L{UpG=GPV$0; z7>K#dzz`S*xoU)zb5;tcm6|%G>dJCz5zgNI%U|feIbn)*1abrFt(Bd$uJ0=(ikxvX^l^cew5`s z@2j+9LK(>_S$Cb3-kkU|`(BdAl{OMd>}3}FnCS+A02?jFo^{tt*k?|x`<`L+RCPm) z^1=$-#BQB|LKGIsf z(YBR6Fq>$r6?=PoEcfQv+Wp_{oo#E|FcgI!OS1fuG^AsYZU6s|bsx$KX`2_Pwj5d7 zhkIQz7+u$W8xa@_3^w?1rF*2Kb6K@D-dM)aV@*k2dlt(DFClO^b~s~bZ*Iu1E{BQM zm2%)Sp7B*l!g30uSeiAB@T@VgYCV+`)1u0ILgDD+neNcxD@Pn7t+TYwuv{*A?)IF+ zL~L7pS#mraNEsSe(pZ_N3b7_+yW2xmbGu#>V`O(Y(E5^9)6i>@w^*%kzNQ-ny3+~o zJ-(_LhJpRlBa7Oz*?gh&72Wa35Q1zqO^H5?3{y_w9OEwJ?y(!T+itku_2Z9yf4z!FzW2(|xUliGi^;s;8HDau* zLtKForM0!hG|5t!rth;KPEm-meVSy?R1V1qVMog$ijG!_kBR}Y(Q_yw#h=X*Qpzfz z7A_Z46eDA`%9L;LYIc#e$SFGXWg}~=aza=N&p2x}F%reSF;){8*(^3jo=4F@$>O+X z#TN-xo>Goe=A3d4Lrh&iPR~wT?J+X9u! zM~aK<+J2q3xL^lCSJjRR*pqU@M~%Rjx1#VPKwbjsv_?=1EP)&CHwvV^g7`-;v$BJr z(Kds5(tfW%r}w_}Uw-xsYN-`UW*a7R1@YZr&J1Ck8N%OycWwV+`w0Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6d(bmCaqfl03ZNKL_t(|+GMGh(_ZSjmeEsb8ixoXiW5q#z-*ENt`DHMNo+hB0`JIP1Ez4&mO93jqe||)jWC6 zU#Fk*?0$BwTI*Neu>}9^M@mUbi9x^5Xgn5x0(x(J)$crh+oqWvMo^T6mNI1_g%nZ< zvJfb($;#qggH(zf0!B&zQjR1PDJODDNHRHkY|$esMNSz~!W5S59HdOrl9(aIh?Wv9 z6)6RB&LpKt-Xo+$l2J+{m7#StLK$*O#L!|*fykLm$~oq|F&U;d3b(jEKK!1mK6*DW z2IB0XpEpM1pI`fb{Sp85A4(}=j3_BZOvwNX?|H{tU-#t4pZr>#eX(?Czd3T`5JwIl zW;AIighU8XN>EyZHkLL7Qu3q-3V~FT7$Pobq5xthg%%|gy{aIQ5Lu9b$%AV8r-Cg+4ThJL>!gh1mQ#+1YmP*M<6B!oa#rrQ<4 zqcT*bMJWYZ<6O&3QQ&+egorj0p9L{^gb-BL5JDp4M9NS%4gIRbYE5Y^jdQpVKnUtK zFjrZGfDj@vX2z|{Z45#IA%r~B>+_i7PZ0er+mGztxAeDfz4HB64a#CTYTESw+d)za zQpyN{%9(|~d)sTT+%;=ne$QQZC2NEzib5!*&|1^D2A8@o8QK;p4LJp@v6O{I8;L_B za;B{(7-^7F;-e?#NQfCBKtw^WDv>Iar6Q(8X%)U{2_a(&jY~l4&Uj%hZQCNOrfD20 zWh!g1T7!tRF_U~l?IJ}{(bJijH8Cb?=cwC;!WQHdi7{c7A^4C=RumVqFJAmxk#$QfpPm1=#M|KOj!?xVdl`HkJX@5*fo(r6g3#nF=@kN{3sOut-_nMNmIAF6IcKafh;BBDkb*dH z_;B7d*MGvZFFfz@U;XZ_Uz_QbZR%;7y{{G9~y~U)<@812BY_$-!C~)4R zmBLzs5D7tdoMK8ysS#2TQ$h=gloAP)y*?>tB$1ReMrp_iv;i_?AV!R_DB($Tb44qS zk_vJ{8%v5HBxog2Qj>E+Xid&g7>ib5t)=x5QXoVq%7VgZybmM<<7R@<7A-R`mYN{_WoZ9FTvuK*dX*^Nbfh`*Az}^1l1-%R&hu zwaP{tVXVdlH~sPw0Vr*|*+Mr@vXEplN_KZhYYIKp9I29)zGQ3W9gU97tJ^bHW&fHj0cOOus|QnaU~yR(uL##jWAOeUpB zN)aIh${2#LyV*b@Cy&$$LGCV42vTsQ7*I-~q#$R=(%{+_DFubqgcxzn7#DMQTX`Ytc0tFY?-Of19k$10%osx!887%Oq0`u6v7yp5lToY zQ4)lZq~H)zBBaFmh!P+KAS7A{d^?7u#%h; zDI^M`(OPxG)jNd93~NV>sk?(I&>zeqe1im1Xn{-!xm(DbkvWsIL`jJh5^XFZB_I<+ zBt%DOYohmr;EB=U>xM8H(@i=MLUg!FE41haY-n3j666@rN+F~s_?p%^jMap;K@yP& zQj9=kQcrNHo0ElBNWe~kt{~HTm-j6$vZ*i617f~aMCd7Roz9$h$%~AT_cR8ty@F|%_L9^`ZSXoAv&y;bLOE3ALP-! zk8_rYn_B=f%NrXwXPF;VD5>!wpp?W&2(CdYO(L+UHXJb?w#*)V94~p@yE*TY7ydU4-;(q6DJN{VW061q>y2OgH?I4) zkCP_L%vB@GvPVQ9g+vKWa18;7p+O=*DI^JUH+Ni&)G1+&LZlX@4W%{Y=H2lXHa- zkqe)F2^T%*+0+xb=hp9W)w}+Xt+O-iIOZsFN_g*y3A8B*DPpE@Kxs|gI3}&f8i7$I z5<#WS6jckxtz+19pBGY*oflFmp|mbFAPZZF*sa{r7dwOp^Fk91CtsC6^Il#a9}^jKJEhk;Qzc2DL2S@9gqm2 z$XVdp#Ok3V?0fL19D3kxMo0EgPu5v}bRW9VY~HbxtO~Xqdm=}jd^$&+cq;ST7qE5? zAp$uM0mmhmUB<jhrh#~yKmuyQ%*z*P-KKLv@S53)C>j#AY){Qz*B}v(=u)y zKE@7NYl(^-sC13Tw+%mEAk!;wYh#9!nqE~fC`&TnT8~l!s}ywz_+eyzc0f#?m;zc# zd83fX3nzo_w5upbFXn?v6RJ{r# zp`J`gG1Bjq^sJ`!ftUlD?tHFojG5_K6rGGw8H*2|;l_})iQpYqf0ivfwvy5aArwNC zjMi&z|HePD_qJ~`=v8c*nZx;pjg2v_3yg>B2&rf%6SUSykqKF0w4|&8N*U&RmS)c# zeC^h6vFn^mc=B^Er9W4Yb0Fm*7d`Je>^k|eeCSVJMcIsyMM0qiIVSqOiku^LcR$dc?<0jxjKnRJ^22H0Tq?iDK)|!|iwF@Yt{P*tJ_elv* zlqHZEP9`j^uhRHVu*x~&LL?^`6a|t%iV>qBNll$I5Lusi{^FX?(w_k^2;pcZkuUzk zJ9zX5Uu14z7}XOF9X`aQu4$SflgS38gp`t)0>l79l4C%KjJAg88=AJo`xaksuyo`I z%WJE&^@zFIil2V_-}uy(@1z-*9W=;+g{_7^`{z$_XmORXN0 z-*W41_wh#`{0y_3y6p~`@lf;rH~cPs@e!)BVtsjumE}cNmKMpaM=L{00!i-ZNQj6G zc;5}o4B01)QY0Ty84v;=GrnyZuB~z4z&^Cqe>(&Gg^s`2>M7NGqe2xhYqapig&-4&D#MyLMTEg_}4#wE1Ub7wc(J12M$0=hzvq$ zymzRS2(BT;j0lP7141f{(P)`*b&Ju06apbMC@BbSM?+*vco!HACoC^6l6}KMU-OYa zc`H87g0zqYyG}lq7r*}9967v%l>&u8ON9cgGKkbIf=iuHuayFkX}qUy8eHQLVhUBW z=macl3QA+JN>dm^X*9Md7>&lPjwiIEt8EQ)!flM;{_LYq!LFCnGe0`5117b zWR8r7Lq>H=%9)-~2*A0BRt9Y~amtC>5LjGV=DO>@!`=7X$Abq~c=+K*5IG}+qR@sc zRLA1Ugq(@NBco?!d6D(?b^2`ZPj7xLf&n5A$>RfDdie|37-n)zC^A}r)`m!?jS-;~ zDo0XIG@<*xu5HLZAjFh71GKH9b&j^JNjV{fpilxM1=dQc(oz%!ZR;7;0bwl5>osrx z$UlLoJG3AKH+|`w*f_?;L_MBBjO3Kq7}uRNs{~mJ>bAiM$&Y^cLzX6jrEz56V$B=h z`w8Clx$ko2S8n1p|M>5)?PTt`dpB)Uv%IoGY#Tz(gp{W8tfq~U#9BB!v=432n$| zAsDZ%uy_9otFh!|@A@Ez9(jNZpYyBy{dGU$oJ*cce^!$7h+|IL#Bcri`*_8b|H7Sj zJ%HYF0-=8#kM2JLuBFrlpAu3)r4;KctBjh+wI6*SD@P0{3pugv*i9V&g!5@!i;$Y+ z1NCG=;{t8tJ31mjgos2!@>o-J5GnJE9TZ}w4UUi@q=;{8+PWtA*a_WIQz^-ys<{2; zAM^4zz82as_(=AV_r3P_IQ{gKNli=6iQprndIAYd@a)~Qk6Z43glE0x&w1zPzRMf0 z`WOqFxAVN;eKU7_^Gkf?Lw`#Qa>~a_Rt~j%^p9V~X!!_l`pAE9!edV6jUTv%w}1Sb z#KFxxj^hB9XI(w&r;+eHq(!ROHkm z5bS$ojlm$Z|Hxrt(^4r#5{mJ7!rl$XW6yaiFMHLcoN@ls_~G?m=1c$hZd#X^nVsb^ zXFY{K{p`26`HP?7i+}Sjj(_5LEbZS%QI!0~+ulxZ=2-5#^+pctzJoh%_%dfc?IPZM z)u*}p2RC!=)$ixNdv0f8>s-gLTtjjdbG^*LJ!>3uY)Ouh;~%qw6VJGi;0~b3D5J?r zk~4%1DMTiX$Av&b5`0UJWv8irp|3~4$;q*jC}P8p4AE`7}( zvVGSUkP4x;@tG_C2I*EAkH$34b*_U}4A)0o{*L!^(WNhB@7;Iv)em0DuE(FwGhX^i z&baWGS$y;XmiIoy_LENJ#4}Fhmo9uUU%%>adH!qP&PivViV%SxUVAi{+KY0xc+mGVBU%i5AelsyR?z-V7_S|_VC!PHiUjCPVg|Q{4 zU+^Rzxa~*$$KU-8+fO)|UwQdu9Ch3-c5L5Dnj9hJjBgs0)$F_VJB-$c3@RXcPI&Aw zY&e1R9v2b`I&nW`$bv*7`c8zydnAFM`C>bt_W0wkXneFrcgnw#8LJgC$4)Vn9VSsm zlg&IYy8I=GskHj7FMN~Hp@(QD8wjD$B&?ChoG7c3)x!r^S>C`17_Ba{Zi9^6lVeu1a|kKbbJt`aF)z>{;Pn%jgf=D7dnZ_$he zH-7Hl7$3a13m(LXB2#G1V5VZ^Do#FO8zLr3TkxgNe3iKw+0E6MI(tcLAfbL{N~O;I z9hBDJx@Wng8n!5~MS+kCTb5X3&`MF1C52HGM$;=x#;fa`cFwtoFz!Zt&fNFIJ1HxJ zL(;^+sA-5oVwB;L`yS@h3tzy@mTe4aPJ*=Le(S3i0WBRIsG*1jT$R5MrL|Ng$A^gq#VdO5>o;ph|&Lo%}-@2 zq|~I`nSN>NE+}P?TB69famz`MdmN&$h?GgTA`MrN!6RdbBXSaqhhy&Dx58y_d^^AL z(%%5!s~`L@cYgaDocHT5=aw&giWAQ~i@~NHJapUFSUtSN$>*KNsZV|;A9&qwa`8)F z!TRDoJbdT9eEoy(V{Y?is<{Pz>HKq;-?kkXP>)CK+S*5{$oiyVQcuGR8B%J&Xwqnv zTvW(*3`9=>-E^pvxt<4DI%04xd6hFMR!UB0inyz1nmT~b;jcfRtb{n9MsZk zLJSydkRhXuW@&B6_7jdnxNab3y`6frO25pVhZb69W=i%Ssd@89KFcXj*g{GxkP^>* zqK&%;f8g^jJH*$XBm=H;ac?88?Ewwu~_rnLRUQmj!UHMUrSHE99g>6_8=a zi6^izuBqk*WTA21buKvF(2hA1Q^Gq>i1rsdD5pfuk&N!Be+-1FqX|F=kP4bQ(d$`o zjw}_K#K!s>*+Yz>1B9a*sSU2KL6itLMo2-1T&-=qBK z+K*x@!zoWWmka;jm$3NAes22sHDoC{@$3s&J#c_;UHv)M4=*x*^bVf>(wDO1#AEpA z|GJXJA76(p6>ZQs7sx{3BZP5H;}ba-kP{+Edi@ITx$A=gyIGV%z3|&%E<( z+;ROK2xF#NZy@^(PC4s1F8h;&#se ze=cXR`Dp(2O~1qH(qT?~(s^9^mfz>%D}IHePg+1S=J+$tV582|lX3U7m7+_y>5liM z;C^A6god);gOKT2g;tqD33}GhFD#W&SV8A{1do>D7i?Zhg)KU{LJ5IV5|J`mP7TBu zQBqM^gA}IQ5k_?`r;_xH!Ae2TS_WlFAta}sw1wL~{(io7^_LK4b2r;kA_vdx9Q@Ds z{39ovbvE{S@}zc_Rz}OBMqy$PJqM|>ug|Sy`LeNG>2oXdi6hzL@KanoXA#}c{)LL#+AXo=9KvrLRaP8qMr38_oULBZ0&WloqcyK^lXs@^P0 zuM?VtR2frPGy>5!q_#5w+#`4J&#%9qE3SMuRT0Tb;hF_*_}GVu!$VyEv1{0M?dQ4h z)$ioY=RO&c134W+2;E^5Q$Xw-Rb)Xu%zWj8AK~Huyq+^2Geg^q$w3f|z=en;qm`oU z4LaX#nr~cNT&F)MQO1&dL`y{s2?~wMT^J(7fKZn1fB6{~Ya8miB|1qC0j(t|fKdub z#wdkCuywxAk%teE&wVVyJA`jp*t9^=Oz<;;>^qtfqbH}#;iXlq)r^~xr(gbJKKaM* z326@3OMz0ZzW?VjdKk@npirs3xU=)&`kkr)QBdgL#Da7fL2pWS@9%D_Hj_Wdtin6Nc8AUmD0}7*2QlMow$(0f;3>MgT-)^#f76_2R z(c7|}^#}K`w!DNcDzx&X=qbyxi|?k4m621e(Gvwi%e-W zb?pf;(TTo-(0Jx{?m#vT|9hOHEr!V|2JRFZJ)Y|CtZ3eqtzwu{K_|2J$#5= zr=P})-}c9BKXDG4nmjoO;%L10)Is4xpezay(8ey(cj(BFOI~?Vrw*n}GYK3%xQ~UZ z+mYP@fOFmK@(Fy3xX`JK^K*TKklg|a*#SW*GG$egV<1o6NADatc6sGV>+pHN(&8$| z%vwZJT=2XL_~4r)eQQX;p+qLcgv%MF6?jjjE2JpM!9(mKcua8yxeHKPqdD(IFJRw~ zf5^xG==E&dbs~?w@FJf3%dbI*HL~;2jJwac7EGXL4W)*<4ouoEpf07P(w2Ihcn zfj2o5i{Tc&aUr3Ez*>dLk-~KG-RrOZIG4TU zwG>4|Zd*i`Y67i0k}DML_%N5f{q?kC$LzLwlx(3rM3x$nx-Cymi20+@jbh{?RS;Mr zwlLH#GOinHmwDkIyaD_M^hywt`|kV^mYUX0lW#&GZI|Y6CJj*toDam55n7>C7aElS z2NoAuUR`5jG^TDEg7*k1Aa$XE!dm*h9)rTLd9KHG*L<32s}4=CZSeFLUCiP}z*Hp~ zL8Ub|C$dn~F4CK=Nc-;K6K{Si58QPS(Vqh;$U;J0qm+lKtI(SfENoRsCLLlo#T3UF zgdK3?aO8$-KF`0r?p17?lQh9or!Hw*S;?l^8J5-@7eD_3^3p1~^*Aio|I5|P%~bTQ zq0$l&Bf&YM?*_7xnzF30MS%;EHl$xrjhNEZnGhW}$q9?5EDV*gC^AwAMD7sM`oW*_ zqnmeg_8Gg#Mai62oc6TmarpMHu&^*g^pQG&AW;^Y)HJj>}iXx<92x~M0lc+^Ps)EBC1Aga!y_!53fmWp1 zIllX)uQRt$ab#%;vOrriEy!pRo~o?Sx}bI~jgO4RVYVbjcj#e=K7?yvs@mY1My5lZpH8-I#ieVFLFDniVe(Qw4t#s(Wr zi%(sGRvCrSnzAUFnHf;oP61HB&U267a>cj})|xI}TUG@^YTD3w^VS*$gBencv~^8o zG&_&l#GTiDi?g5mJWT8=Ok0oM!ral1<3IoXQ!LE&@F-drDXgZ_f^p+$okwR+?E^D| zlD*%*mfODnefq*N4g+rf*K0WN-RsE118kZx99mwco{U*uUB^X_2%b7b>ZYYMl7u2F z$xn7a$mM_j51e)J8RT(|5U^as2j27+Hg7UGA0SOF9%TqAF&T|%ohNjOEiwX$Af(7_ zRrp&TS@}dK+Hdb);j^+;Wy!#}b|e8-8wRs8h?EGyW3^(o-$UlEmod{XxcB}g&U)(E z;2l`a@u!{0(u!dBZ9l*iiqa}(%YxQLya1EI8pEh|xXFmYOrL%c*|BMs{rB9)_JtDH zHY_i%&`ic`)D5m_0GKqct5D@c5M9r#R~jCES_?$8l3k`CN+)gtgk2pSt$nA_*))X?iT3$laIb)c{sK%Mq-G} zEzB~gdMK^B#*UWERwYVwfH9}UaMIGamhq88w0fS$Jmm@C8dzWD%%`1$nA^$szxY*l z9W_gqhH={>1@x@OC#dV1o;6Io@4PDC;A3Vo9y45DrH-BK()dUSp3+);&Uhavv}Q6H z6Qy9!1BdvvxBLZ{zT(B?^>v5|F}J`MKJZDF?*1O5re-{u;A6t44uVM8@k}KoTI(() z=K`b2gyCpROi*a)@7TZAEzn~&+bf!o?Vv1~pPxnKjB6T1@XS^frB;L#h%w+=&twX) z%3hC!xr((1?xnZwWVRhO15rTJaPkvQVe<*6ap#TSXFS?KDwyk405rZ6*R9b^nqMR@ zMs)+B%j!%fHClElrZz-Mt4S&2W4CL9iyU4Py!em)m}k7?VzO&G!K>Hf)@$$J!Eb+o z{=l-nx`K1D1BNNngn(S0WJhWjMP5TPVHDNCDFBXm7JD;dFz|`@$LH{xXxdSfeT*nWZwFjPs8TN zvAXKJg`b9%imJ;BCNc`qwF{@cvbL=;RRu!*JlN!X!0JxLeCUxS?2c3Ui!c8N7eDVj z($Zpw%m=gF{;eN#-G~2h zj3y0wTA?VdBF2RCo)7{^)d5215V`BGW$0Q(F|lb-`rG$TkJ#zkdRHW*U6`BcRKye! zIgy2=@c|zrMr(}LC?%OKOSFWQm1RuTqfLqRwRJWx^f+|a4>^2b%<*SF5u-DCJcg9m zv~x30dC^PQdD@xOUbA#)i9?5uFqt%zTH<`b`+!V|@p#C_*s(FHSzm1k)n-n3>a%$E zt6swkUilg}&j+Z-P*_CSV_Zu<{hq6N;D#?TJ7-y0Sz$PuAg19{i9ia0RNdSODNSov zi7X|J?@Bct@KdzjGg}n?w*70L5Wx9wc;;!}SR6M4CAtianKlVs=!ziLXpFU}n3(S@#^9qT#eg8wEBh!R&?z!MGmH10mE|R>UJs9;9*ybsO7IR!ciW2DBOGv?_^<4sv zE&(@b95Dq_uK?)S{G=Xto}UzAT-Qi4{a!_3ElNtP%FGRB8IOjnt*+9anZpC4jdf;b zXA!~EuL`{P1T5pF6>>-%wS6=B$WQprKm3GAv7NJ?^(&n9D^EtM4693IUn6pWz96r! zBea3i{vw_t1zCxXkM*_^L*lkCT*rgozlnPF077L%ilipej7LbV@hLNETB@9|wj`%a zJ00|^Yism+JqCl4>;(M;MjKX#6GBLxrd}A@Nz2+~+%=Or>AuX39|{@3>W;l@t-Jh< zEhwyJZEcl}jSU8K^VDsNbB@8x3~n@Jc6O$#LFSA`vc9&;%4c+85D2wPB!1ML3% zHSGSvr`Yr+wL!6GCu77p&4gSQEG{l1rzzULl+4Zz7(aR!?c)9Hzq#cux=i-CO^imKnW}SA z+6eugWno}2T2R+5Rz#LJ#$?};P#vhtu(G~Rzbfe$mZoiSsneQU=er!F(O7M8Qv^M! zC&U=(mlj)82-P_)SqgjtCbfv77l5b%zv|QB`I+7(p$Z_Or+iEs!{X8rnn}(4maQ~R z%V<2JUv|}R?;Z2=3&iA++R#jDMx!yCW@pe!k%39$DYPa{YLe`-$ii5xEzrQi{D48P zqMtIGH%AuwecEPB9bjW)o$_EscG95 zqYYs)p&azFg`pYM_>eKyGHDu|_sq@=NK>F_wPCjGdYJ1j9|Bqh%tYkQlQ#Fy_A%v3 zYtbt$N=R0gmzazu%x~RF<61V>H|X~&tkz`LGMJemrG)dHRI;|V+WlQgdR3p=yUtmS z36&GRZOOoBJfR-fT?aK~>c+9Wyvo|@Dn!rf>KeoGgmKg2>INS@!_kn8WKuVj))HgH z76s$F#ufz|!x5V{EznFxAXT?}x_;EpE2V|8WYJ}xw9>TR)3~m^B(wr#j#7xemfX2i ze|33da=ipL9zMKsyOgSxQe;~d#4I>)@F2tCkh!f}X7b27K zq-!QShmsN(yB=!SAL$aP+L*2&OlCM7(d+jyQc_hFS>z7yWW{7W!G}np6jDIU8Cw>_ zlvo{3rtb+sfXJpA`1|%P-3)9r7A9b(8n+-$&a<(;K_Fw5>dw3^sGFv{TPaUpa1sbUFlk#-N_f{0r|&jMNTe-r zZQBX{!4X5ixz5V*ZA;G3)-BptCXE9G-g~UIxDYW_kHwW0q%s|#1+=!b&eNtuOqoej z6LZ1{NeZ42B2sHy46F^udD6H%D2#Y$arIWI!>OW3-*7e6B7*ge4Fup_*Cz?mvb3^_HU=dnN|}x- z`A+kRDY3S`)>+@i5PZakh|(74y;$8Cp{0m7+;{lv(*>%3_T~kbQWg&{ZpdFcYVLGZ z^+n97J62U8dR0YeYlM`{3}$KDmVjh-ZjQypC8Smq(`Iy4Rg7Clqyu6CL5lw81zbO^ zgh%huLLh{o37NWXx}JMZ#6%Zi$q7HLp~o1R)NNOk^QlukbMB(v#xS0YDXWUL^);&g zpd-v_YI8eJ;~YY1Qi!xJpvwX&1e2!CF$+?H*E# zCVyUnfWdmY zAcZPXYa%fs+dCE9B(k#a*=m$%hWgHI;`79@$%|agY zf)feJ9Ym=_4aTV6IJsCYluoq$^w}>T|8R473VZ>)2=&gZ4)Q<)?7Pv`*GF3~%Y3!c zJXlnP&a#wa*DEzE$kI%&=q7?XYH~TrLq27CONU13Fch*xbvq9M^Yj z7A5mM$7geHn+Bx>J$W`|&fqNl1Zh=q*dM6!9PKR%#mn0R#d=MGqVGG_Wl7t%oSi?U zF(bV(6h+DQ=2te$1?O)(;&!)VaGqu`97pGO-E_R#H9!5l@1E^@`z`Pd@Evdi5g`3H z4mv^eO5jc461Y_GmQK_rNmPZ17Lg=Tq0y*NL0==v;Y8d*RDwQ3=oMd_g5oGd0=R|fQTm#R6A7e002ovPDHLkV1hbZG{gV^ literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/apple-touch-icon.png b/docs/Saml2/images/apple-touch-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..2d320cb5e1215894ef37cf8c6fd7a0085eba06f3 GIT binary patch literal 8358 zcmV;XAX(puP)Px#24YJ`L;(K){{a7>y{D4^000SaNLh0L01FcU01FcV0GgZ_00007bV*G`2iyV# z6d)&eD=4M_03ZNKL_t(&-p!kNwC!hE-#^bg{D!^v8SlxRax-(2keMNY5JDspOb`X9 z)*7v>qAhC0sue1UN@i)9v|M(qT zZCCrh?^^qhv-V#5yuast-skxa&lYyq;-JsYWcr;y`QbNyfA5mB_wQR?TD(f*RtR1v zAH*mnB7(LC(K)SafP?`AA*4u15MxAQKr2CIIVpADYqSs>PqGRh6Os~{GQ<>!K#1K3 zjUG%=(YlSCH~0iz9renu3CXxh5QDnm>WA3ZM8MP3X=VM#_4Lm<;aQ#(wiX`>(^ zQsfz~bwnjpbxV<13Tr_nnx>(49-}jQnZgICTgSAnlU7Px+om!rWYFugvUlHbtoncO zv;XRS@4D+lznyM+%davh3v}x}A9}~nbMaltu|85@lHsV!&iM0@&Q5lmZcy5{xnAd4|>s=+Z4Am@+4{HP&WWs|hiZ zqziPBXJom-2S*Y^jLs3Yn#>qPX{^zNlprNSjM&}H+02l>bHP*UPAzqtRzQ}Q zC~HaHVY7^sBBC|Hd#p7O1Cd1V5n~iZZt>m|QX(cOttKXD+m?jFW)>o7r4c}Bg^P)4 z)23dpr^e%9I&a^~3+I=Yzx>dXM~*8Xzi9u`^`qg=nK30akQ*%sDbEUAjLe#rm=Xyg zGhl3Yf^BGsAwf)NV-V?1OGsFoA<>g05tBy*lr^LjQCgFtLmQ1s5v9~_fFjmtw9@zl zAq0xd014Mrgajrt1m`hYBP6ue_z;*>)07#c%ngMx>};GqaOU#d^+2I7KL4yU&)v89 z?oy|H#wZXaMk|!o61+ocgZB|3cI`kZl5as-VhA7#NeQjGAjIeqAVp7%5t2en#Ar=I zL5wI-#NCRn1d<5e?PiVDcpnMAB}G9K2?5%W2q}_MLJ_-D6rpKrY8S{eD_NE!!Kbn) z#V8>ud(KwvZdZfC>@7{Y;`tLNlaERAOs5nRMhTheQc0p`Qaf7bNimV<1v+{Z5QD?} zh)M~??mbi*C5pCfnGAPmT_hQc$xE{SJf_ztMWLO|n2d(hvuRg(jYeyOZyG`nlz>tO z*H$?1QA8wq6ha7&x~-^v#F#{;HJMVBxs{Yc+8B+J_p=L4@@JUYbUK$@jmdM_98XwC zeOc(`-6^3^BwD(NPi7TmW+`$@R^<5DHU8E$NEPVM4XCRbn``Ts{yb-#^Fme*p2vZ6 zF5rxVhZrm@po}57z+||^`l;h=9Dk0}N1x*O(~pyncUW3pAqj+(D2=9RYFeLA0x^Qw z1r9z2YL~D^cfdglMhT5mY>h`Us#+Ej%%;clKp3$#euV5 zz`OqVPVW8mC%E&&zr$Q^(M3rN0Zl@b(6*k+c}iju{b5)n{jpIi-{=`E}*PdfC+F-i1&EnpDi0!d*)&(5A@Jf~r9$;bR9OhRtV3X@^ zzL}TZbThyAwx47B=;O={O0-t^Buwg>vdA%7QD{v}!e}yM);dB0WfV4Ql+{Gn zDO6_hvxdoRM!zgEO5?rX&GA5_rI(qm!b(CTv`x)3r^dYL9ly<0*WU3=r}@o~-oe3h7D%Z=WFKGu^v8MTzR$3b zE2_zms`dzp$#lxZ7_?6K07isaQ!^OM6XJ|KE6}paaC4p0kA9PLu6_+K{hl`hC;6^7 z+{g`hZN*WgS47lWF zH}TcK{GZJAGA5N{<^xIuYcn*EVn8cRA~I_lnxH6i%j3s4ZqqCCy~CHExBu1<6FMbY z*X6d+8m)xr19=BNfy8iY#LaL1Wv+b1i%BU^SCQM^^V>A1pT-))#`+qg(TEI%C{2n9 zB|>z*LoZ2CDG_7Bh~S;aXhrKI(K*JW5z1O*w#5_Qet`2|d=16~_Uu1EpwB~JyB8E_ z5wsF;Eg~Qyv>|pu6HAN{MdI-jTem3@$V8DTO~2P?(C?#_qG=rCX-(}Mt!u%zScJuc zhk5lIzMGULNK)MK!4D8No?|qbaO(6bnbBm{Qa3GDghawh!a2vr<`xe>_-&qi>N!pw zdk%@7%xF^V0K7_xx^5Y7Z&6K#>>PWFPk!Koh*}_pF|T>!_n^uZtOy3kl*VX-_nw#_ z#YjS^>lw4E!nF;ggo-gyHw|suF?_2uJ)zdXDW_62ILKGpyz{crQoYbpgr{{U%m4)h)(D-@=t&7_t{$Crpz-M?}%EHL}@DIoa^IUt=_w(*g-pdQGzKp?w<>HrK$XkE^W2{_!En)s3 zX8#pz?@TZ;;bO!nMQU0q2cP`FZ?Uy8fEL~1 zTdhe6ZaSiCl#u6^2Om7bpWgpXEF&o9dCyP%W6oSs ztgWuoxEdc4gv9*bgV;T1am`J)aK^p^jCVGfjb|MF>u)o+w9FOPUq^_E(Z-k)&pga! zue_PN{^a-hyYKinOm;T7?R~$)@YrL7@fN1vL$v0={=IBX;I04u--91A8Y|v(&DC6d z>AA!ZNueubQH0t#oR5r~meLwN``0IaK+l)<@L3DRtu7|C$gU{Tp$J6beamz_;-(+} zX)b@oZTlX_4 zgr@NnMM=JV7JCouA@603wgX#7{u-O-L=hSvXnnwiNb5a*m+wBiHo8qOl=krXE4^Do zh-g4kf)w%2BMOw!Os0XGe&Sa4uPlN#eBpn5oYAo-NzM^cmtKRiWIV2sl(_7bujcTJ z53{gGbKv~5Svhne_xzU+V{D&%Zh@7v&f)ZtCwbsApX18c+{hI-T+fA9U&FKCet<83 z{Nudn#+Pxr&Nny*m%ieq;2R=v-(7bhx~r<*c|wSU6!E?z^|^*; z*T=URV+{SlJYhP+D8Z^OT}hn~721F;2kcp1BD$8X)eY8(4$+ zJDWjh$%~sFF zP8{d%kKE4jXC9?*JuwMJ61l+U@uRFi{TwTMmsnX|0^36g;2k0nqZKLw3cL%DGzl=G z6j`358jsC1Mj}QVi~?;m$$9qdJ;dBxjwr=!Rx#aJC5oo@j^rI}RWn#Q#2bI{ZJauC zgu&b*M;>^Tlh5Q_aMdM@H-?-(ay!M`Jclm2it{di3C4IHy8Ex#bMP$c$%v{NbLhes za`|g+;m?2TZ7eV3#3E-ptEj!h)e5tEnpsE?J#%L)uy^l4>g}Ug1y<)c?>k~mA}LK0 zI+E>uU^Jdm*ELn$P`gO$18oB5Beiq%miAEg`-miB>f!4#RtXsao#6bJ-OQVR=eM}@ z+RON^A9@Xgg@U7xKfk9i3qK8>}>DQ>t`tGn)lMagDmeqK&(e- zqq*!=S5wR{^08lkCl_D)N_vY2_~sp-Vz6g{*T41WXsd=V{+Ituf6rdLi`;+b=b3DM zf-^6@m^b~#+xc(5`yrmc_kWW2=V%&-SAz4Asv6>2)ukXBljZo35Fe1F2+>0lQcMUP zvLYo+iUD8EkO)di*I$xCJ5QEbT!g$(5IqvQq7+>N(cq(JFjw;M9e+m8T3+>|ucgc_ zsomiPR~=%{yZ#w}{7-(F(dG`{{|j&4CC`p2flF_^i3dJ&7f;^zSzh}yzsv4FC}WY>cEV6fC_L6=^sELGk)+A6_(+GBRd<(_5)2|Jt%V%IB(+7L)+)9IM((yYmBhOZiO zl@Q|yCZ~1|trA9;OhzO2EG<%>ew5F>|GixIQ*YtWMf-q0&8*?suieeVci+K_u6;R| zzWxU}_p0;B`vnk5VFuBmYzfTs$d|s#xBlYYT=ar72!2YdpbcHC!WJmgAhLjO9ChRH z0x@=X&(qZtkI;BeiUA)ZCdNozSIioZ#DKM$6gp8T(;90HaXh6_n!Ge*Y_l>yhmo4t zHl!4ZA#!?s6Kf3%XCLCrAN_MKc8O!3Bl_D*&-D?a<~U!s5LY_563O{8W7 z#(*+}Q1bZaALLtie2SH`&t~oTb7a))Olq`N=-7ELg)Xr`N|CCm@xyKUd4>xSA3v*pe}TdnVmZg@qsK6Lv0J_s z));Jph2=g!__m+t@h^XkA9}|-fgPY>_1H1SRm(R&c_)XjzLNf8kFBF?Y@XQQ;m>`M z{^Ecidgm|EUpmagU-<$`0=d@snD8V*OxVFZnbJs%%qBC2>!)`m(||=#bS)#K*tNh; zvc_1WSse74)-7dj(Ywg5b&eDxq7`nk%I5J^_8Z}hJ$vY{9AJF%8467&^Y5blD1s=3 zmYOSWxPs)K??8po7-d=9e~9y6ejT6vj~``e|9-M^z`=_T@%_K_)AW{lFdIVJKuf|W zXnp7c4M<3wap-LJ?OOrgu(>&8HXETN5n`vdhm?pBVhpr(i?X__u1dPgUNsHQx7~xK z?xm#DTdlG@cjP#iUV0wND6V_`E!_Fk14K9L#9gh(iDX(>d-_S%j*mHT?i^|6P)38Y zh-h-7x%P*@m(8OmSURwW{+z{F)m6i4jAS{;9@+qwL?(eYDkfD!IaubJTfPU?&%g=K zKK2|c)HvySVpM`_JM7vxk53?~lj&8}wwzd7XLD!BcrvAJ+Ff}c@;qnIE7`Yao_jv> zF?`-9wT_oudj+-bV|xWw6r~anMI91l8u7`0`Kvtqr6-Wy97!u^8nkhs6uo)FxtH!^ zeknssBE>`$jY~O?f8#m+>{s5xoQ#>emL`HVuxEZiMZrt1zJxR!Q>UDJ{`5~+S)QkF zH7Z6z>rf&nrOERGWi*XX#FS7erOx`6&galdD6D0^SI{>atGZS~yT)ff{yC&9KmxD- zhd;;8>1}$Yr49)f5=Ii$WP&y|5B}-<`RoTj!f4n+o)f&nWEx43d_-)CbHc`nF^}H; zE&l7<{y7i+=l7$gN6B(csT2Uys^#dhO@8EOeikGky@K2S_`j1Cj$zdx+E5lb3;mKz z3(+++)sz$yMUkU+=^~jHlC|{noJ=Kht;jOdc^?6i((E~K2A})rN4VjQw@~^quXx>c z9DnTZbMMFg0|(DOhzgG2TV^hzjmGq0^^tq|;`@(s*^m4<$}V<>k?DiUdFZaMa^it+ zq9*HXub-q(U~Mu%`M_{iA;z#c=yCM9V_f?qZ|0>pTnV!o>GAxN z&vV5M*OA6M9DecT9Di<`?WZ2V^mf@F`iWv8Ul*Vtu4-f`S)?_+kYChwS$yB{^&Q~kEvH_ zniiE3NffnnjK`Di9_o%32|}3}p4pt;rss2g_`Id^R*T=W%g^=Qk$Fmk~H1qRwWJVL6BR7g(-uaL&1SWNh zcQsqbS2^d}>lpNezDitiw1{;p<@fKWm>gNM?8xWMp(~JDItkV087aZE zs{bZ<&+k;7GVp@^i?`amKr4{o$#oY6E#QKuZavO-wt272=_|)KK7B8TU;ZlkS)wd6 zu6pea?XIr_r1hsn-Cldp$-ARD|$6eyF0Jb4OVDvP&PwI9NVdH(~G_Q@OdkP zTPKqVbD5==XLMu+oDa;}7HcfpXa;4D4xaINLVsZR`dwe<%*(G~>ChsX2Uu2*)AtZ_{r*SQrHpGHV z_IjPr8v-P#eV`42%v!9`EcAM)7#NO5Bx~8)*k}b#b3W5nsJ$ZOOI&cn_wvKv9Rmd(vAs-~rh5t4LMCrS}wB*a8akv4V?03w7WWJ+;lySh!zUzvN|Eteg- zb7xwS8e?yq?2 z{(Gr>&3Jp8BF|`3qHZHmgv?qBqiNcfY27fc8XD(md}rK-kk~Wmard*^Z!|u5>bfGt z$h7vNi1dnrJj=*5%=dasMnjyB=sagKnNsE%rBTEX*cgsU3F58z$# z7FaF#0FK1Yq-Jr@+buf~V`5m<0-%gRQu4-yz&=dA<@-VXY{wSv`FkZ7jAZ*%=Ny^R=zec}_xM zY|e0d2S}884;LeC1X{^1^`rLLZ8T!uBx)rYSpp=re)2C8alw$In?VT-pMUUiL`eljI8f7ix(S%51zQ`$xf|>Ie zYan#KV2sd&Nc0{_oiVz;zJY5Rs_BerZrN<$<>|P6|lKFY3?iYY}hm{$BrFKm`tK**4H;u zo)st}nax1d?qrlOYa4QFLAvpmn1ryq$>2THy6zspI})nXK$WIx8XDK&oujTDZPRuw ztEv&LX?>(^TkV$+K(2FPs`y4{WTj6O~15mew~nQ{L-|5|VQcWelU~49Rk~ws$bvl7a`VnKT|B zB0dCy^8^$Q>6|VE=UST9}!_PYIQr4~(ZXHYUwOPp^%?ATZvwub4iyIvkz3XYrE#i-WzV zHn&n)_QWc|H;wfA1L~$tw(N^@j;gA#TA`H&ZD~U2O0~B5w(e3-6yAGOiroaVk5qMy z+7*7AkZ`FBLQ0WoT@#e0s%tWn(KrWM6H{bTH6TJ!WcV0pePmWQ31y_N8;MGi)`sz{ zN`oR(n{{~NQ;!^bAMjP6)^sCfO@ghHqk7ahx9{BL!I>c@nN6pZWe*o3$r#bbrj5-_ zDe{bz621O_;dDllu22}DZ5?geJ(V_4kLw(7*`D;3eI`bF4(SoqzRpz z(z<}nbEb8Rww9gkA%ppOTJLd@)Os(ij|ruj&SoSuXUzB1w@+-}|BdH2|1iY#X{}^E zCAy*B-SP8ri0SnDq}`~KHhW98cdlP%N-L>+l%nXR)s0PIcZ@sBa@r7?wjStIg%CO@ zSo?%1P3s(1YoZutt;fZL05QO{btG$PL!fCI0x)eoiEaejdq;@SghW)Tn@?{WvaF=3 zYiW~8Rb3NF)%Sza=!DzdC#G~A}w8=#fOYS4KRwkkhL3{omOTZ>r1`h4M_UumnDgO4X1T??~Z~{0ku#x_+UlRO(AM*b#4&@I3000_E wL_t(~-_WJ?-=+ur&Wb?T{fR{S|9$9x0o_ + + + + + + + + + image/svg+xml + + + + + + + + + + + + + + + + diff --git a/docs/Saml2/images/favicon.ico b/docs/Saml2/images/favicon.ico new file mode 100644 index 0000000000000000000000000000000000000000..9575ac8f5be939dfdba64bf595be644d900f55ec GIT binary patch literal 1150 zcmb7@T})eL7{^OAdSkNPDABB~f}pG$@MxMIpqW7mIX;E^75S4MuOE;bUjQn_}Q21AftSU z6k~||rZAd@Fh@Xhb=BXDCE*8YG7?-JRj5suW1Qf!HkqW7@xu!$_iExwPFSsJ9+KE?NUAM))E z6xydTc$U#SViedH_U78S|A2y~DCx#-(v$$H`4$dn?PQhqqi-4`G_s7vHHlVwl(t1q zPQFK-`)yuqk7H=Pg5~8mY4w~ZN7lJ4funnYpCmsKejmm0 zI^W5@)HSc7sq7`Q*oDs2A?z?EjxaaHYfEpO8h@OE@;-jJvB9RWUtC?ogo`hvUUopeH2@VsCs3J64wOs3hABt1amM>Q}7*8oO&6(;~#MAZ>a5atT{#k<_C;QeW_4mAtO^GM3?S@9^N?*dhxFqXh2S_1RZKS!-Min;3o4boTRiI9=4DG*+DTTXE}DUtoZ LNHCv2rc(U_{c|km literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/hierarchy-item.png b/docs/Saml2/images/hierarchy-item.png new file mode 100644 index 0000000000000000000000000000000000000000..c7756e75ac9fc933cbd3b26d0f2817d33857d15b GIT binary patch literal 236 zcmeAS@N?(olHy`uVBq!ia0vp^{6H+o!2~3GGZMc6Ddu7)&kzm{j@u9Y9{{-mC9V-A z!TD(=<%vb948a+tB_*jv$xRnHfpQ(5E{-7@=aWs$%+eI33=AhQX#}3tTDL~=wC|Fv zu%{hu$0B^+IX=i!aWC8~w073*RaN&Uv6)APHLbdN<3>b%>>TUAi;C*}O=q!*m27po z*1LM!!3v?DGncuq?yGJ6C|P)9&kpBM|CRr~zT5MTS-)Pmq&#hz+O8m*w9T6~{rmTK i_6>m}i>4eazx`$b{PnHj4|Gm%darcLQk;o* zf#$tx=CVf?b@LflRVgT`A4r>)ny*wOfBfV0Re8*{>=Tw{&Jvb7&^=Rj=FL?dSI+o+ zj+wDu!1bbDfvS@D-MsHb)4DtUth5UMD^ajC=%tzbteK)-Y1>$NqSuB6eNo_^)WOrR zY1Opp)8-WOJ21tpe#PamG$?X)*y`7bP0l+XkK@Tjds literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/icon-class.svg b/docs/Saml2/images/icon-class.svg new file mode 100644 index 00000000..7dacd0c7 --- /dev/null +++ b/docs/Saml2/images/icon-class.svg @@ -0,0 +1,77 @@ + + + + + + + + + image/svg+xml + + + + + + + + + + + + + + + + diff --git a/docs/Saml2/images/icon-interface-13x13.png b/docs/Saml2/images/icon-interface-13x13.png new file mode 100644 index 0000000000000000000000000000000000000000..aa24fa96a487f029b3d4ce8c94d363450d4d17f2 GIT binary patch literal 308 zcmeAS@N?(olHy`uVBq!ia0vp@Ak4uAB#T}@sR2?f#ZI0f96(URkK{-HEu#$20vdnjmCqCCqTlR9{ z``_NTxAhrHntD@-v|F+sFBiRXjpPCa_N + + + + + + + + image/svg+xml + + + + + + + + + + + + + + + + diff --git a/docs/Saml2/images/icon-trait-13x13.png b/docs/Saml2/images/icon-trait-13x13.png new file mode 100644 index 0000000000000000000000000000000000000000..3c2792b1b1bd6b2ffed9fa34e05db2b7405c1503 GIT binary patch literal 340 zcmeAS@N?(olHy`uVBq!ia0vp@Ak4uAB#T}@sR2?f#ZI0f96(URkpP3?N+}ye3 zderN?20Z@Of&3c#Z@=H~WO&R%^mySNk6l@_p4G1U|05->KS%sy!2_jpLKim9y=2w0 eH#6MfJFD7!kJZ`Qj1oZ4F?hQAxvX + + + + + + + + image/svg+xml + + + + + + + + + + + + + + + + diff --git a/docs/Saml2/images/iviewer/grab.cur b/docs/Saml2/images/iviewer/grab.cur new file mode 100644 index 0000000000000000000000000000000000000000..ef540be09383a215ba21287683ae956b74a6dbbf GIT binary patch literal 1150 zcmeHEF%H8Z3_L;+LM2k9N*yv~>~H#wK9i4B>Jy?)*;1Rr5Mf~HSVzWizBA$iDEg)e zv@Up@fGdC-B|(IIaVjw`XMnR4do4(}ceLED$#?I4PhZt?V;F{(zNyX4aU6>oTI<~I zR%1+|Z@pO>D9unx@mz^sV2R6KAHrH&a3w(Uah_+1dcf$ic$W0J$AsEGc`x}F-{G8# oT0W#ZA~$;zN&n?%4r~@-v(K$0B;Q#;t literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/iviewer/hand.cur b/docs/Saml2/images/iviewer/hand.cur new file mode 100644 index 0000000000000000000000000000000000000000..1a5bafb5263fd4937dda4098b04aa5c70e2de924 GIT binary patch literal 1150 zcma)3OKyWe4E694LIn}22q6~8?0U4`qB$BzVUYuLnN^5A#g-vqrbZ8co}UNC0FIu^ z1?Y|NodI+J@I{~!RsQPaynTKEFe0{|*)R-iM9cJuPktQ*F&}vmxJX7;nU}sFz|xzG*A)o1}vy~Np8!oh{{D) z3FWrSE(G-lOIo^%@l%Jh z7d(bKZD(=f(+rDu3Ibk!p~fAzvAEw(G5oFaf>VGX;I$X`=G^#MhKzfwaaX++^R_aG z{23g@-KfbsV!rlS8y~jNpC$Q98001E5Sq?VpxukSs-?)+t$^aeGL+RsprA4wk<#_> z_+u(WTiH*vZ^%;_bKH_BUEq}jd#?-l#9J=q_v{?VaI4}Q9JQ|FoaxO4M#r~&(9l-@ga5_qddH0^Pp)3D%%13U()$KPZ9mfuKHeN zh|FV%AcKd9$Xte~JpHr7ISdEsS=dbylRpV}b%EG*(H$Zm7BrYE89CoGzCv2mgg*7U?}T-eQj1 z{ctQepE}YD%L6}S{pbtWcxoXGX*qRvIs~7NleuJ1rI2sTU9}wgEO}#naM{Mwl$wh8u zCnBy@;!tLlFk2ANZy*yRh*u1IjEu7sgd^u~j?-pP>cuPS5S69F5h60HO2`84nde#W zyHhV;*NN!tY8*EZeXCkX$LB3TNWEh+HIj>(aWc0CrwBgBQY@5_fO(q}ggUVHfHYwh z33cBmty=DP=A9=gECUXndMm_NP*e}Z-LCDyS)!}~n7b*S3$R(WUj{y!TOYyebROJ- zFF$p&>5+Q7DfKeS+K_mst_KprM8H(Hy%~al3{|Z#A5JZTYe-7!V4F>!)KgSFrn=vN z3kCIkDE(K!G*^RwzlwE`Dy#7rUC1u2#kz=0tng2mHP|cZPQ4qN4qPSy<|wW2D5KC{MlR z;>)=A5V)!Cz;#udS#FfKqnHHD=_R1Ptpjzf{nOgnDXf!ZtKqUo3Ky}YM}T&xUI8_p z+{#DD)pj7q40-gM-UA6eVt~J6Ck37*j6+@9f{jOSVfEgWC}V(*7I~i&Dx8uU4S&P_ z;3=qW>uyHVjD_fF#+pz$KVvi(@T$|6gmQ;1NkX6Jb)Y}^@BGWy!Sjrgf9<#ho=bDz zCj-9w{fH|?2J}+O500000NkvXXu0mjf*RRDb literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/iviewer/iviewer.rotate_right.png b/docs/Saml2/images/iviewer/iviewer.rotate_right.png new file mode 100644 index 0000000000000000000000000000000000000000..7a6c829871d058af5a5ca0ac67256c259f84c5ac GIT binary patch literal 1482 zcmV;*1vUDKP)W@q8L24va@vW@P7*!=(&yIADtgIo?`IW@@z#oP%kAO5~e4>aSvdau$keO zelrxe7h>a?XEPGL-8ZvUK7S5JxO_SC%cam%h9U3nOynA8Bd1~p@(p_slER=;FN42~ zVT$Cx%L&IBfqkNPU0Q$wV<=M8^Ktsd`-seX8%Hx4(Mza9RSeQph6Cvg*A2_?bs*!Z zJm9Mh7vz)H#bKgf96Z*=%6lrx!F>}8+<9p(ZW^~EGIuaSuQBYWfCsY}!gCl75#iYs zn4X1YwmkE{L{qbYU7_|vC;44Kc>_>d53G;Ofy>H6K72&Q1n)K0hYkOJ{}5yueQ_kO zAEZ3kO@`uTdQ^;QD4P$Xc-46$f7y>g|g44T+ z#BgE=@!>Z#-vKoL6Wa&pE*R*#HWno`0s)tGNL1G$LZyexFDGPt0qahH^Hl0tOywX% zlsY1!jA8k4hEa>zCTrlAtqC<~Car`X>shKzaMo5pP+|!}lx4#8x7#jb=yVHAyecTTC4J8t z#9H#H1x)ab5$qRn{T_~Gwh%$&8k>4#Nl^>etY1&RH*c@JV*VdWES08K(6hJ3ua1F+ z1Vqx@pUkersqB_Ip|BQ5mEtYg?Pld26u-(ZDhIXZN8p8vpywZqUmXq21K`XJ6VBRD zSPjgUh_hsuo0Zq@#H52sg=lQDK%p}U0=)MqxPXrz3y|HcLaYr6jTyT{TGH;2&kl$g zvn(tPnZ+iUo13A~-oxKTMnQmAi+~YaKrsopkYC+_iv!`6FZ*8at59p?CSTLD^ce@1hVDp0-#Q zq7i&EGSIAWEAo-(3@vR~e8qHMf3DS%&Pzg-H4FABh2HRK5QhTu_A0SBL~)<~@sXQv zl!l*(`MH4my)*cGH#$9gu8S$5cCU4I9uNy}^C|I;^|0b5vYngtVB^%;d7vlsx1OAw ktS2S0?VM~5JkO{63m1~IVD>3BuK)l507*qoM6N<$f)6RO6951J literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/iviewer/iviewer.zoom_fit.png b/docs/Saml2/images/iviewer/iviewer.zoom_fit.png new file mode 100644 index 0000000000000000000000000000000000000000..364e01d90eae19584713851314629f2468198e9e GIT binary patch literal 1252 zcmbVMZD`zN9M7nO!F>6)Qu>rmKTa$KDx31r-tX6e<%`(6Krd_QfiW`8t`1_@uq7ekl83AbH+? zzu*7$$#_?1`>KY!8VG_|C2bSZcx-mx`sMihAai~i59?7fi@MD`D#97s?^ptvbD@%0UaWlEb9Y?!POak>Kac>j_lvC`$F%JGkXW>_ZEGx zJom!Kv#(7V2O9tK-kSZb!BUHpo@HF_;W5I?7`%^kn|fV6LyKC%38?;(5V z!PU9ZKS#&d``e%Ktf-E%=q0M&EZqyy}ir$_H&JcW2fJ{{PgiX z8-IUUIXQgrq&9v}_F_|k9sDEvsw97zUz^v|wk^6~k{(E}g+-F{ISKr))j<47BXr41~e0blAr&bSs z|IrSo^7@evzS-=(@x`Huqc2r99GkQ^PabxeDqKE2-7pQ1>fi>@%sWi*eedZ1Y?O%#JYqAlBWQjldYscGecHU zg%s&*JUU5b0YHS4wwDMcmP5FMWn^R!Bl9wx$OeF{94|*YYA6A$q^fAQR`OuPF9B(% zR#J>vU<+rUs_EP&o+@f8usfP+92%!2CmYQ2;-UaU2_)!cYTX{(tCg(l;^I8G4N1Ut zh)|=IY&cb7v4IAbr$9^wOC7Kh29<~mkt? zy6{56v}sFRX(iQyz~K<#uSL*ic3n>tk$HCK_ zK(lTzs7O|_b%ItRdb$w;!&xj_!fwxIqQsOzUXp_l84NK@Fs^m9M<}HJbz@t!$KJ?M zP$A`E>v)G)57)jBS6;_)Fv2Ks*P|kY8`^A2u!ZfsWAnHVJ68Y*ZF@k28qrD)nZSf_1^Pw#| z@pZkmCA&G}0&7bcjq%x*?aRCV3irha4o~M_DArx{=C$ijm7gxpJfn{2L~$I+EADGSEAJts^bthXdZ0!+7(pGrKca+s`)MokNH6@80m`S3a@u zY1ygFvFkgB8j(NleZ>ubn=|IJ|7-yHzY}KZV-M0lk+#l6X1~TQy|p*uWp8(@{ii>t zUM%g1pU@A_-dyI62l_3g1J;f*Z-2$!(N|(ifOlu2-fw+1YIXRfE0Nik_Z$MUT=6@` he~f-qo>Y;tmQ(?tGoVp(DLyXve>58lh(UdY?;kaa{Rsd7 literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/iviewer/iviewer.zoom_out.png b/docs/Saml2/images/iviewer/iviewer.zoom_out.png new file mode 100644 index 0000000000000000000000000000000000000000..893f3502baaab667354fe8b560c1712b72630836 GIT binary patch literal 1416 zcmeAS@N?(olHy`uVBq!ia0vp^av;pX1|+Qw)-3{3k|nMYCBgY=CFO}lsSJ)O`AMk? zp1FzXsX?iUDV2pMQ*9U+m{T%CB1$5BeXNr6bM+EIYV;~{3xK*A7;Nk-3KEmEQ%e+* zQqwc@Y?a>c-mj#PnPRIHZt82`Ti~3Uk?B!Ylp0*+7m{3+ootz+WN)WnQ(*-(AUCxn zQK2F?C$HG5!d3}vt`(3C64qBz04piUwpD^SD#ABF!8yMuRl!uxKsVXI%s|1+P|wiV z#N6CmN5ROz&_Lh7NZ-&%*U;R`*vQJjKmiJrfVLH-q*(>IxIyg#@@$ndN=gc>^!3Zj z%k|2Q_413-^$jg8EkR}&8R-I5=oVMzl_XZ^<`pZ$OmImpPA){ffi_eM3D1{oGuTzrd=COM+4n&cLd=IHa;5RX-@T zIKQ+g85kdF$}r8qu)}W=NFmTQR{lkqz(`5Vami0E%}vcK@pQ3O0?O#6WTsddyBS)T zxj4DGI+;7U8WbpSnwXlJx+y{RrjQe2`as9%gOUbPQh^Bp(;tWlPxwF%JnN+90rN`{ zFk|eTuyZ2=1LH1F7srr_TYIJ*^g8Sy&?e2@*d%abWdMgri<5t&U4#0<`~ZPHTulKV zL_SFVVrt@l5PQLUVYuUp3a@^r?zky&+EXok@RH&z@w!8r$f$z%0{cUx;M)M%(BO@dlSAr|x|-`3zUuyW0)IVtW>|s>WVT?mGEc zSkr=`cGH2CXUi731dH|WWa9iWg>~1jL@c(3*I%OB-d`n9ld0_~{X@e~VM+?bvqa&xDF~4=3Dc{-t;PQB<+c zv78v6y_Q$sW5p8UNtB8n}}+(%+^^VTDLxDs_M@V zktZgdHP!#l9(Qv}igT01!>vuNAL^777;7#{%n;%?`4GGKfzXddg$9fTvuy=L>XpA# emo~({32$Iz;FK4L4Ckl>myMpTelF{r5}E)fw)-Uj literal 0 HcmV?d00001 diff --git a/docs/Saml2/images/iviewer/iviewer.zoom_zero.png b/docs/Saml2/images/iviewer/iviewer.zoom_zero.png new file mode 100644 index 0000000000000000000000000000000000000000..c981db6d690774d0c2e67e21c9081d5c89b5fd2d GIT binary patch literal 1091 zcmbVL&ui0A9M4pSOy+USDH`Jt54L&lWo?(ZTAQSq1v^VuUA;)t~d_LcwSBo>#!$V_3 z9LEjkPwFMM?vLJ`gY0_@JiN=6Jv3LLv!qU2W`Mb@O=_6WyXHJDVbfl^_!>`f+;-b3 zS7@bhO0kF=HzS*P+w~cm6!@+QT}TTXPE`s;ULyhK6LAo; zKoamt7>CkCDwR6QBLIO2kO)x>rW6S&0Pwv>U}}L~S4z6k(_*Kz(4f>;M6uOs#amLG z1oI-4WjW$ND8?*e;gUzqcFYS8^%-;=T7lzJhj@I%Xx2!RrUmBdMhLE7C~OjYVJ}fE zWn$a(MHmO7>qc>PtwUPEf85y8IxH{wSS;a?Gy{v(qkgClX1V*fP-MuwQBDUAD~h?O z6RYWBkLLBX!2ZN-$5tc*P9}BL$f+qc2OyjTdQR0O9U94`B&o2^u@x4nAeBw1(2x=n z5avKO31v+Nl7u7!=(60$=Dm=bo`w6m4%6*n!9THz7GRT-piIbOzXOU5LP^*lKCjIt z_&LY3Nh^$svk|L~1LqR9jexj(H@k|ng?bW90+iEJ2GWfvYE_c6auz`iY1tG)S)qru z|0iQ2b4H9>hb!)51ol8qidf>uee2NcllE7&Y7PpcX!=7_qbu-x&Nqo^YXsS zx4psB1L(rH2OVv_Ry|wWf8@aTYwPTIZ{+>+x4F)XFBxU;`RVIF##f(pxPd|L)0^?x S8}D{hqp{BCX7q<@b>%mi3|d_P literal 0 HcmV?d00001 diff --git a/docs/Saml2/index.html b/docs/Saml2/index.html new file mode 100644 index 00000000..028e3af4 --- /dev/null +++ b/docs/Saml2/index.html @@ -0,0 +1,244 @@ + + + + + + SAML PHP Toolkit + + + + + + + + + + + + + + + + + + + + + + + + + +
          +
          +
          +
          +
          +
          + + \ +
          +
          +
          + + + +
          +
          +
          +
          + +
          +
          +
          +
          +
          +
          + +

          \

          + + + + +

          Classes

          + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
          OneLogin_Saml2_AuthMain class of PHP Toolkit
          OneLogin_Saml2_AuthnRequestSAML 2 Authentication Request
          OneLogin_Saml2_ConstantsConstants of PHP Toolkit
          OneLogin_Saml2_ErrorError class of PHP Toolkit
          OneLogin_Saml2_IdPMetadataParserIdP Metadata Parser of PHP Toolkit
          OneLogin_Saml2_LogoutRequestSAML 2 Logout Request
          OneLogin_Saml2_LogoutResponseSAML 2 Logout Response
          OneLogin_Saml2_MetadataMetadata lib of PHP Toolkit
          OneLogin_Saml2_ResponseSAML 2 Authentication Response
          OneLogin_Saml2_SettingsConfiguration of the PHP Toolkit
          OneLogin_Saml2_UtilsUtils of PHP Toolkit
          OneLogin_Saml2_ValidationErrorThis class implements another custom Exception handler, +related to exceptions that happens during validation process.
          +
          + + +
          + + + +
          +
          + + +
          + + + diff --git a/docs/Saml2/js/bootstrap.min.js b/docs/Saml2/js/bootstrap.min.js new file mode 100644 index 00000000..319a85df --- /dev/null +++ b/docs/Saml2/js/bootstrap.min.js @@ -0,0 +1,7 @@ +/** +* Bootstrap.js by @fat & @mdo +* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js +* Copyright 2012 Twitter, Inc. +* http://www.apache.org/licenses/LICENSE-2.0.txt +*/ +!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.prototype={constructor:b,toggle:function(){return this[this.isShown?"hide":"show"]()},show:function(){var b=this,c=a.Event("show");this.$element.trigger(c);if(this.isShown||c.isDefaultPrevented())return;this.isShown=!0,this.escape(),this.backdrop(function(){var c=a.support.transition&&b.$element.hasClass("fade");b.$element.parent().length||b.$element.appendTo(document.body),b.$element.show(),c&&b.$element[0].offsetWidth,b.$element.addClass("in").attr("aria-hidden",!1),b.enforceFocus(),c?b.$element.one(a.support.transition.end,function(){b.$element.focus().trigger("shown")}):b.$element.focus().trigger("shown")})},hide:function(b){b&&b.preventDefault();var c=this;b=a.Event("hide"),this.$element.trigger(b);if(!this.isShown||b.isDefaultPrevented())return;this.isShown=!1,this.escape(),a(document).off("focusin.modal"),this.$element.removeClass("in").attr("aria-hidden",!0),a.support.transition&&this.$element.hasClass("fade")?this.hideWithTransition():this.hideModal()},enforceFocus:function(){var b=this;a(document).on("focusin.modal",function(a){b.$element[0]!==a.target&&!b.$element.has(a.target).length&&b.$element.focus()})},escape:function(){var a=this;this.isShown&&this.options.keyboard?this.$element.on("keyup.dismiss.modal",function(b){b.which==27&&a.hide()}):this.isShown||this.$element.off("keyup.dismiss.modal")},hideWithTransition:function(){var b=this,c=setTimeout(function(){b.$element.off(a.support.transition.end),b.hideModal()},500);this.$element.one(a.support.transition.end,function(){clearTimeout(c),b.hideModal()})},hideModal:function(){var a=this;this.$element.hide(),this.backdrop(function(){a.removeBackdrop(),a.$element.trigger("hidden")})},removeBackdrop:function(){this.$backdrop&&this.$backdrop.remove(),this.$backdrop=null},backdrop:function(b){var c=this,d=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.backdrop){var e=a.support.transition&&d;this.$backdrop=a('
          ').appendTo(document.body),this.$backdrop.click(this.options.backdrop=="static"?a.proxy(this.$element[0].focus,this.$element[0]):a.proxy(this.hide,this)),e&&this.$backdrop[0].offsetWidth,this.$backdrop.addClass("in");if(!b)return;e?this.$backdrop.one(a.support.transition.end,b):b()}else!this.isShown&&this.$backdrop?(this.$backdrop.removeClass("in"),a.support.transition&&this.$element.hasClass("fade")?this.$backdrop.one(a.support.transition.end,b):b()):b&&b()}};var c=a.fn.modal;a.fn.modal=function(c){return this.each(function(){var d=a(this),e=d.data("modal"),f=a.extend({},a.fn.modal.defaults,d.data(),typeof c=="object"&&c);e||d.data("modal",e=new b(this,f)),typeof c=="string"?e[c]():f.show&&e.show()})},a.fn.modal.defaults={backdrop:!0,keyboard:!0,show:!0},a.fn.modal.Constructor=b,a.fn.modal.noConflict=function(){return a.fn.modal=c,this},a(document).on("click.modal.data-api",'[data-toggle="modal"]',function(b){var c=a(this),d=c.attr("href"),e=a(c.attr("data-target")||d&&d.replace(/.*(?=#[^\s]+$)/,"")),f=e.data("modal")?"toggle":a.extend({remote:!/#/.test(d)&&d},e.data(),c.data());b.preventDefault(),e.modal(f).one("hide",function(){c.focus()})})}(window.jQuery),!function(a){function d(){a(".dropdown-backdrop").remove(),a(b).each(function(){e(a(this)).removeClass("open")})}function e(b){var c=b.attr("data-target"),d;c||(c=b.attr("href"),c=c&&/#/.test(c)&&c.replace(/.*(?=#[^\s]*$)/,"")),d=c&&a(c);if(!d||!d.length)d=b.parent();return d}var b="[data-toggle=dropdown]",c=function(b){var c=a(b).on("click.dropdown.data-api",this.toggle);a("html").on("click.dropdown.data-api",function(){c.parent().removeClass("open")})};c.prototype={constructor:c,toggle:function(b){var c=a(this),f,g;if(c.is(".disabled, :disabled"))return;return f=e(c),g=f.hasClass("open"),d(),g||("ontouchstart"in document.documentElement&&a('
          ').insertBefore(a(this)).on("click",d),f.toggleClass("open")),c.focus(),!1},keydown:function(c){var d,f,g,h,i,j;if(!/(38|40|27)/.test(c.keyCode))return;d=a(this),c.preventDefault(),c.stopPropagation();if(d.is(".disabled, :disabled"))return;h=e(d),i=h.hasClass("open");if(!i||i&&c.keyCode==27)return c.which==27&&h.find(b).focus(),d.click();f=a("[role=menu] li:not(.divider):visible a",h);if(!f.length)return;j=f.index(f.filter(":focus")),c.keyCode==38&&j>0&&j--,c.keyCode==40&&j a",this.$body=a("body"),this.refresh(),this.process()}b.prototype={constructor:b,refresh:function(){var b=this,c;this.offsets=a([]),this.targets=a([]),c=this.$body.find(this.selector).map(function(){var c=a(this),d=c.data("target")||c.attr("href"),e=/^#\w/.test(d)&&a(d);return e&&e.length&&[[e.position().top+(!a.isWindow(b.$scrollElement.get(0))&&b.$scrollElement.scrollTop()),d]]||null}).sort(function(a,b){return a[0]-b[0]}).each(function(){b.offsets.push(this[0]),b.targets.push(this[1])})},process:function(){var a=this.$scrollElement.scrollTop()+this.options.offset,b=this.$scrollElement[0].scrollHeight||this.$body[0].scrollHeight,c=b-this.$scrollElement.height(),d=this.offsets,e=this.targets,f=this.activeTarget,g;if(a>=c)return f!=(g=e.last()[0])&&this.activate(g);for(g=d.length;g--;)f!=e[g]&&a>=d[g]&&(!d[g+1]||a<=d[g+1])&&this.activate(e[g])},activate:function(b){var c,d;this.activeTarget=b,a(this.selector).parent(".active").removeClass("active"),d=this.selector+'[data-target="'+b+'"],'+this.selector+'[href="'+b+'"]',c=a(d).parent("li").addClass("active"),c.parent(".dropdown-menu").length&&(c=c.closest("li.dropdown").addClass("active")),c.trigger("activate")}};var c=a.fn.scrollspy;a.fn.scrollspy=function(c){return this.each(function(){var d=a(this),e=d.data("scrollspy"),f=typeof c=="object"&&c;e||d.data("scrollspy",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.scrollspy.Constructor=b,a.fn.scrollspy.defaults={offset:10},a.fn.scrollspy.noConflict=function(){return a.fn.scrollspy=c,this},a(window).on("load",function(){a('[data-spy="scroll"]').each(function(){var b=a(this);b.scrollspy(b.data())})})}(window.jQuery),!function(a){var b=function(b){this.element=a(b)};b.prototype={constructor:b,show:function(){var b=this.element,c=b.closest("ul:not(.dropdown-menu)"),d=b.attr("data-target"),e,f,g;d||(d=b.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,""));if(b.parent("li").hasClass("active"))return;e=c.find(".active:last a")[0],g=a.Event("show",{relatedTarget:e}),b.trigger(g);if(g.isDefaultPrevented())return;f=a(d),this.activate(b.parent("li"),c),this.activate(f,f.parent(),function(){b.trigger({type:"shown",relatedTarget:e})})},activate:function(b,c,d){function g(){e.removeClass("active").find("> .dropdown-menu > .active").removeClass("active"),b.addClass("active"),f?(b[0].offsetWidth,b.addClass("in")):b.removeClass("fade"),b.parent(".dropdown-menu")&&b.closest("li.dropdown").addClass("active"),d&&d()}var e=c.find("> .active"),f=d&&a.support.transition&&e.hasClass("fade");f?e.one(a.support.transition.end,g):g(),e.removeClass("in")}};var c=a.fn.tab;a.fn.tab=function(c){return this.each(function(){var d=a(this),e=d.data("tab");e||d.data("tab",e=new b(this)),typeof c=="string"&&e[c]()})},a.fn.tab.Constructor=b,a.fn.tab.noConflict=function(){return a.fn.tab=c,this},a(document).on("click.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"]',function(b){b.preventDefault(),a(this).tab("show")})}(window.jQuery),!function(a){var b=function(a,b){this.init("tooltip",a,b)};b.prototype={constructor:b,init:function(b,c,d){var e,f,g,h,i;this.type=b,this.$element=a(c),this.options=this.getOptions(d),this.enabled=!0,g=this.options.trigger.split(" ");for(i=g.length;i--;)h=g[i],h=="click"?this.$element.on("click."+this.type,this.options.selector,a.proxy(this.toggle,this)):h!="manual"&&(e=h=="hover"?"mouseenter":"focus",f=h=="hover"?"mouseleave":"blur",this.$element.on(e+"."+this.type,this.options.selector,a.proxy(this.enter,this)),this.$element.on(f+"."+this.type,this.options.selector,a.proxy(this.leave,this)));this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},getOptions:function(b){return b=a.extend({},a.fn[this.type].defaults,this.$element.data(),b),b.delay&&typeof b.delay=="number"&&(b.delay={show:b.delay,hide:b.delay}),b},enter:function(b){var c=a.fn[this.type].defaults,d={},e;this._options&&a.each(this._options,function(a,b){c[a]!=b&&(d[a]=b)},this),e=a(b.currentTarget)[this.type](d).data(this.type);if(!e.options.delay||!e.options.delay.show)return e.show();clearTimeout(this.timeout),e.hoverState="in",this.timeout=setTimeout(function(){e.hoverState=="in"&&e.show()},e.options.delay.show)},leave:function(b){var c=a(b.currentTarget)[this.type](this._options).data(this.type);this.timeout&&clearTimeout(this.timeout);if(!c.options.delay||!c.options.delay.hide)return c.hide();c.hoverState="out",this.timeout=setTimeout(function(){c.hoverState=="out"&&c.hide()},c.options.delay.hide)},show:function(){var b,c,d,e,f,g,h=a.Event("show");if(this.hasContent()&&this.enabled){this.$element.trigger(h);if(h.isDefaultPrevented())return;b=this.tip(),this.setContent(),this.options.animation&&b.addClass("fade"),f=typeof this.options.placement=="function"?this.options.placement.call(this,b[0],this.$element[0]):this.options.placement,b.detach().css({top:0,left:0,display:"block"}),this.options.container?b.appendTo(this.options.container):b.insertAfter(this.$element),c=this.getPosition(),d=b[0].offsetWidth,e=b[0].offsetHeight;switch(f){case"bottom":g={top:c.top+c.height,left:c.left+c.width/2-d/2};break;case"top":g={top:c.top-e,left:c.left+c.width/2-d/2};break;case"left":g={top:c.top+c.height/2-e/2,left:c.left-d};break;case"right":g={top:c.top+c.height/2-e/2,left:c.left+c.width}}this.applyPlacement(g,f),this.$element.trigger("shown")}},applyPlacement:function(a,b){var c=this.tip(),d=c[0].offsetWidth,e=c[0].offsetHeight,f,g,h,i;c.offset(a).addClass(b).addClass("in"),f=c[0].offsetWidth,g=c[0].offsetHeight,b=="top"&&g!=e&&(a.top=a.top+e-g,i=!0),b=="bottom"||b=="top"?(h=0,a.left<0&&(h=a.left*-2,a.left=0,c.offset(a),f=c[0].offsetWidth,g=c[0].offsetHeight),this.replaceArrow(h-d+f,f,"left")):this.replaceArrow(g-e,g,"top"),i&&c.offset(a)},replaceArrow:function(a,b,c){this.arrow().css(c,a?50*(1-a/b)+"%":"")},setContent:function(){var a=this.tip(),b=this.getTitle();a.find(".tooltip-inner")[this.options.html?"html":"text"](b),a.removeClass("fade in top bottom left right")},hide:function(){function e(){var b=setTimeout(function(){c.off(a.support.transition.end).detach()},500);c.one(a.support.transition.end,function(){clearTimeout(b),c.detach()})}var b=this,c=this.tip(),d=a.Event("hide");this.$element.trigger(d);if(d.isDefaultPrevented())return;return c.removeClass("in"),a.support.transition&&this.$tip.hasClass("fade")?e():c.detach(),this.$element.trigger("hidden"),this},fixTitle:function(){var a=this.$element;(a.attr("title")||typeof a.attr("data-original-title")!="string")&&a.attr("data-original-title",a.attr("title")||"").attr("title","")},hasContent:function(){return this.getTitle()},getPosition:function(){var b=this.$element[0];return a.extend({},typeof b.getBoundingClientRect=="function"?b.getBoundingClientRect():{width:b.offsetWidth,height:b.offsetHeight},this.$element.offset())},getTitle:function(){var a,b=this.$element,c=this.options;return a=b.attr("data-original-title")||(typeof c.title=="function"?c.title.call(b[0]):c.title),a},tip:function(){return this.$tip=this.$tip||a(this.options.template)},arrow:function(){return this.$arrow=this.$arrow||this.tip().find(".tooltip-arrow")},validate:function(){this.$element[0].parentNode||(this.hide(),this.$element=null,this.options=null)},enable:function(){this.enabled=!0},disable:function(){this.enabled=!1},toggleEnabled:function(){this.enabled=!this.enabled},toggle:function(b){var c=b?a(b.currentTarget)[this.type](this._options).data(this.type):this;c.tip().hasClass("in")?c.hide():c.show()},destroy:function(){this.hide().$element.off("."+this.type).removeData(this.type)}};var c=a.fn.tooltip;a.fn.tooltip=function(c){return this.each(function(){var d=a(this),e=d.data("tooltip"),f=typeof c=="object"&&c;e||d.data("tooltip",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.tooltip.Constructor=b,a.fn.tooltip.defaults={animation:!0,placement:"top",selector:!1,template:'
          ',trigger:"hover focus",title:"",delay:0,html:!1,container:!1},a.fn.tooltip.noConflict=function(){return a.fn.tooltip=c,this}}(window.jQuery),!function(a){var b=function(a,b){this.init("popover",a,b)};b.prototype=a.extend({},a.fn.tooltip.Constructor.prototype,{constructor:b,setContent:function(){var a=this.tip(),b=this.getTitle(),c=this.getContent();a.find(".popover-title")[this.options.html?"html":"text"](b),a.find(".popover-content")[this.options.html?"html":"text"](c),a.removeClass("fade top bottom left right in")},hasContent:function(){return this.getTitle()||this.getContent()},getContent:function(){var a,b=this.$element,c=this.options;return a=(typeof c.content=="function"?c.content.call(b[0]):c.content)||b.attr("data-content"),a},tip:function(){return this.$tip||(this.$tip=a(this.options.template)),this.$tip},destroy:function(){this.hide().$element.off("."+this.type).removeData(this.type)}});var c=a.fn.popover;a.fn.popover=function(c){return this.each(function(){var d=a(this),e=d.data("popover"),f=typeof c=="object"&&c;e||d.data("popover",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.popover.Constructor=b,a.fn.popover.defaults=a.extend({},a.fn.tooltip.defaults,{placement:"right",trigger:"click",content:"",template:'

          '}),a.fn.popover.noConflict=function(){return a.fn.popover=c,this}}(window.jQuery),!function(a){var b=function(b,c){this.options=a.extend({},a.fn.affix.defaults,c),this.$window=a(window).on("scroll.affix.data-api",a.proxy(this.checkPosition,this)).on("click.affix.data-api",a.proxy(function(){setTimeout(a.proxy(this.checkPosition,this),1)},this)),this.$element=a(b),this.checkPosition()};b.prototype.checkPosition=function(){if(!this.$element.is(":visible"))return;var b=a(document).height(),c=this.$window.scrollTop(),d=this.$element.offset(),e=this.options.offset,f=e.bottom,g=e.top,h="affix affix-top affix-bottom",i;typeof e!="object"&&(f=g=e),typeof g=="function"&&(g=e.top()),typeof f=="function"&&(f=e.bottom()),i=this.unpin!=null&&c+this.unpin<=d.top?!1:f!=null&&d.top+this.$element.height()>=b-f?"bottom":g!=null&&c<=g?"top":!1;if(this.affixed===i)return;this.affixed=i,this.unpin=i=="bottom"?d.top-c:null,this.$element.removeClass(h).addClass("affix"+(i?"-"+i:""))};var c=a.fn.affix;a.fn.affix=function(c){return this.each(function(){var d=a(this),e=d.data("affix"),f=typeof c=="object"&&c;e||d.data("affix",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.affix.Constructor=b,a.fn.affix.defaults={offset:0},a.fn.affix.noConflict=function(){return a.fn.affix=c,this},a(window).on("load",function(){a('[data-spy="affix"]').each(function(){var b=a(this),c=b.data();c.offset=c.offset||{},c.offsetBottom&&(c.offset.bottom=c.offsetBottom),c.offsetTop&&(c.offset.top=c.offsetTop),b.affix(c)})})}(window.jQuery),!function(a){var b='[data-dismiss="alert"]',c=function(c){a(c).on("click",b,this.close)};c.prototype.close=function(b){function f(){e.trigger("closed").remove()}var c=a(this),d=c.attr("data-target"),e;d||(d=c.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,"")),e=a(d),b&&b.preventDefault(),e.length||(e=c.hasClass("alert")?c:c.parent()),e.trigger(b=a.Event("close"));if(b.isDefaultPrevented())return;e.removeClass("in"),a.support.transition&&e.hasClass("fade")?e.on(a.support.transition.end,f):f()};var d=a.fn.alert;a.fn.alert=function(b){return this.each(function(){var d=a(this),e=d.data("alert");e||d.data("alert",e=new c(this)),typeof b=="string"&&e[b].call(d)})},a.fn.alert.Constructor=c,a.fn.alert.noConflict=function(){return a.fn.alert=d,this},a(document).on("click.alert.data-api",b,c.prototype.close)}(window.jQuery),!function(a){var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.button.defaults,c)};b.prototype.setState=function(a){var b="disabled",c=this.$element,d=c.data(),e=c.is("input")?"val":"html";a+="Text",d.resetText||c.data("resetText",c[e]()),c[e](d[a]||this.options[a]),setTimeout(function(){a=="loadingText"?c.addClass(b).attr(b,b):c.removeClass(b).removeAttr(b)},0)},b.prototype.toggle=function(){var a=this.$element.closest('[data-toggle="buttons-radio"]');a&&a.find(".active").removeClass("active"),this.$element.toggleClass("active")};var c=a.fn.button;a.fn.button=function(c){return this.each(function(){var d=a(this),e=d.data("button"),f=typeof c=="object"&&c;e||d.data("button",e=new b(this,f)),c=="toggle"?e.toggle():c&&e.setState(c)})},a.fn.button.defaults={loadingText:"loading..."},a.fn.button.Constructor=b,a.fn.button.noConflict=function(){return a.fn.button=c,this},a(document).on("click.button.data-api","[data-toggle^=button]",function(b){var c=a(b.target);c.hasClass("btn")||(c=c.closest(".btn")),c.button("toggle")})}(window.jQuery),!function(a){var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.collapse.defaults,c),this.options.parent&&(this.$parent=a(this.options.parent)),this.options.toggle&&this.toggle()};b.prototype={constructor:b,dimension:function(){var a=this.$element.hasClass("width");return a?"width":"height"},show:function(){var b,c,d,e;if(this.transitioning||this.$element.hasClass("in"))return;b=this.dimension(),c=a.camelCase(["scroll",b].join("-")),d=this.$parent&&this.$parent.find("> .accordion-group > .in");if(d&&d.length){e=d.data("collapse");if(e&&e.transitioning)return;d.collapse("hide"),e||d.data("collapse",null)}this.$element[b](0),this.transition("addClass",a.Event("show"),"shown"),a.support.transition&&this.$element[b](this.$element[0][c])},hide:function(){var b;if(this.transitioning||!this.$element.hasClass("in"))return;b=this.dimension(),this.reset(this.$element[b]()),this.transition("removeClass",a.Event("hide"),"hidden"),this.$element[b](0)},reset:function(a){var b=this.dimension();return this.$element.removeClass("collapse")[b](a||"auto")[0].offsetWidth,this.$element[a!==null?"addClass":"removeClass"]("collapse"),this},transition:function(b,c,d){var e=this,f=function(){c.type=="show"&&e.reset(),e.transitioning=0,e.$element.trigger(d)};this.$element.trigger(c);if(c.isDefaultPrevented())return;this.transitioning=1,this.$element[b]("in"),a.support.transition&&this.$element.hasClass("collapse")?this.$element.one(a.support.transition.end,f):f()},toggle:function(){this[this.$element.hasClass("in")?"hide":"show"]()}};var c=a.fn.collapse;a.fn.collapse=function(c){return this.each(function(){var d=a(this),e=d.data("collapse"),f=a.extend({},a.fn.collapse.defaults,d.data(),typeof c=="object"&&c);e||d.data("collapse",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.collapse.defaults={toggle:!0},a.fn.collapse.Constructor=b,a.fn.collapse.noConflict=function(){return a.fn.collapse=c,this},a(document).on("click.collapse.data-api","[data-toggle=collapse]",function(b){var c=a(this),d,e=c.attr("data-target")||b.preventDefault()||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,""),f=a(e).data("collapse")?"toggle":c.data();c[a(e).hasClass("in")?"addClass":"removeClass"]("collapsed"),a(e).collapse(f)})}(window.jQuery),!function(a){var b=function(b,c){this.$element=a(b),this.$indicators=this.$element.find(".carousel-indicators"),this.options=c,this.options.pause=="hover"&&this.$element.on("mouseenter",a.proxy(this.pause,this)).on("mouseleave",a.proxy(this.cycle,this))};b.prototype={cycle:function(b){return b||(this.paused=!1),this.interval&&clearInterval(this.interval),this.options.interval&&!this.paused&&(this.interval=setInterval(a.proxy(this.next,this),this.options.interval)),this},getActiveIndex:function(){return this.$active=this.$element.find(".item.active"),this.$items=this.$active.parent().children(),this.$items.index(this.$active)},to:function(b){var c=this.getActiveIndex(),d=this;if(b>this.$items.length-1||b<0)return;return this.sliding?this.$element.one("slid",function(){d.to(b)}):c==b?this.pause().cycle():this.slide(b>c?"next":"prev",a(this.$items[b]))},pause:function(b){return b||(this.paused=!0),this.$element.find(".next, .prev").length&&a.support.transition.end&&(this.$element.trigger(a.support.transition.end),this.cycle(!0)),clearInterval(this.interval),this.interval=null,this},next:function(){if(this.sliding)return;return this.slide("next")},prev:function(){if(this.sliding)return;return this.slide("prev")},slide:function(b,c){var d=this.$element.find(".item.active"),e=c||d[b](),f=this.interval,g=b=="next"?"left":"right",h=b=="next"?"first":"last",i=this,j;this.sliding=!0,f&&this.pause(),e=e.length?e:this.$element.find(".item")[h](),j=a.Event("slide",{relatedTarget:e[0],direction:g});if(e.hasClass("active"))return;this.$indicators.length&&(this.$indicators.find(".active").removeClass("active"),this.$element.one("slid",function(){var b=a(i.$indicators.children()[i.getActiveIndex()]);b&&b.addClass("active")}));if(a.support.transition&&this.$element.hasClass("slide")){this.$element.trigger(j);if(j.isDefaultPrevented())return;e.addClass(b),e[0].offsetWidth,d.addClass(g),e.addClass(g),this.$element.one(a.support.transition.end,function(){e.removeClass([b,g].join(" ")).addClass("active"),d.removeClass(["active",g].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger("slid")},0)})}else{this.$element.trigger(j);if(j.isDefaultPrevented())return;d.removeClass("active"),e.addClass("active"),this.sliding=!1,this.$element.trigger("slid")}return f&&this.cycle(),this}};var c=a.fn.carousel;a.fn.carousel=function(c){return this.each(function(){var d=a(this),e=d.data("carousel"),f=a.extend({},a.fn.carousel.defaults,typeof c=="object"&&c),g=typeof c=="string"?c:f.slide;e||d.data("carousel",e=new b(this,f)),typeof c=="number"?e.to(c):g?e[g]():f.interval&&e.pause().cycle()})},a.fn.carousel.defaults={interval:5e3,pause:"hover"},a.fn.carousel.Constructor=b,a.fn.carousel.noConflict=function(){return a.fn.carousel=c,this},a(document).on("click.carousel.data-api","[data-slide], [data-slide-to]",function(b){var c=a(this),d,e=a(c.attr("data-target")||(d=c.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,"")),f=a.extend({},e.data(),c.data()),g;e.carousel(f),(g=c.attr("data-slide-to"))&&e.data("carousel").pause().to(g).cycle(),b.preventDefault()})}(window.jQuery),!function(a){var b=function(b,c){this.$element=a(b),this.options=a.extend({},a.fn.typeahead.defaults,c),this.matcher=this.options.matcher||this.matcher,this.sorter=this.options.sorter||this.sorter,this.highlighter=this.options.highlighter||this.highlighter,this.updater=this.options.updater||this.updater,this.source=this.options.source,this.$menu=a(this.options.menu),this.shown=!1,this.listen()};b.prototype={constructor:b,select:function(){var a=this.$menu.find(".active").attr("data-value");return this.$element.val(this.updater(a)).change(),this.hide()},updater:function(a){return a},show:function(){var b=a.extend({},this.$element.position(),{height:this.$element[0].offsetHeight});return this.$menu.insertAfter(this.$element).css({top:b.top+b.height,left:b.left}).show(),this.shown=!0,this},hide:function(){return this.$menu.hide(),this.shown=!1,this},lookup:function(b){var c;return this.query=this.$element.val(),!this.query||this.query.length"+b+""})},render:function(b){var c=this;return b=a(b).map(function(b,d){return b=a(c.options.item).attr("data-value",d),b.find("a").html(c.highlighter(d)),b[0]}),b.first().addClass("active"),this.$menu.html(b),this},next:function(b){var c=this.$menu.find(".active").removeClass("active"),d=c.next();d.length||(d=a(this.$menu.find("li")[0])),d.addClass("active")},prev:function(a){var b=this.$menu.find(".active").removeClass("active"),c=b.prev();c.length||(c=this.$menu.find("li").last()),c.addClass("active")},listen:function(){this.$element.on("focus",a.proxy(this.focus,this)).on("blur",a.proxy(this.blur,this)).on("keypress",a.proxy(this.keypress,this)).on("keyup",a.proxy(this.keyup,this)),this.eventSupported("keydown")&&this.$element.on("keydown",a.proxy(this.keydown,this)),this.$menu.on("click",a.proxy(this.click,this)).on("mouseenter","li",a.proxy(this.mouseenter,this)).on("mouseleave","li",a.proxy(this.mouseleave,this))},eventSupported:function(a){var b=a in this.$element;return b||(this.$element.setAttribute(a,"return;"),b=typeof this.$element[a]=="function"),b},move:function(a){if(!this.shown)return;switch(a.keyCode){case 9:case 13:case 27:a.preventDefault();break;case 38:a.preventDefault(),this.prev();break;case 40:a.preventDefault(),this.next()}a.stopPropagation()},keydown:function(b){this.suppressKeyPressRepeat=~a.inArray(b.keyCode,[40,38,9,13,27]),this.move(b)},keypress:function(a){if(this.suppressKeyPressRepeat)return;this.move(a)},keyup:function(a){switch(a.keyCode){case 40:case 38:case 16:case 17:case 18:break;case 9:case 13:if(!this.shown)return;this.select();break;case 27:if(!this.shown)return;this.hide();break;default:this.lookup()}a.stopPropagation(),a.preventDefault()},focus:function(a){this.focused=!0},blur:function(a){this.focused=!1,!this.mousedover&&this.shown&&this.hide()},click:function(a){a.stopPropagation(),a.preventDefault(),this.select(),this.$element.focus()},mouseenter:function(b){this.mousedover=!0,this.$menu.find(".active").removeClass("active"),a(b.currentTarget).addClass("active")},mouseleave:function(a){this.mousedover=!1,!this.focused&&this.shown&&this.hide()}};var c=a.fn.typeahead;a.fn.typeahead=function(c){return this.each(function(){var d=a(this),e=d.data("typeahead"),f=typeof c=="object"&&c;e||d.data("typeahead",e=new b(this,f)),typeof c=="string"&&e[c]()})},a.fn.typeahead.defaults={source:[],items:8,menu:'
            ',item:'
            • ',minLength:1},a.fn.typeahead.Constructor=b,a.fn.typeahead.noConflict=function(){return a.fn.typeahead=c,this},a(document).on("focus.typeahead.data-api",'[data-provide="typeahead"]',function(b){var c=a(this);if(c.data("typeahead"))return;c.typeahead(c.data())})}(window.jQuery) \ No newline at end of file diff --git a/docs/Saml2/js/html5.js b/docs/Saml2/js/html5.js new file mode 100644 index 00000000..448cebd7 --- /dev/null +++ b/docs/Saml2/js/html5.js @@ -0,0 +1,8 @@ +/* + HTML5 Shiv v3.7.0 | @afarkas @jdalton @jon_neal @rem | MIT/GPL2 Licensed +*/ +(function(l,f){function m(){var a=e.elements;return"string"==typeof a?a.split(" "):a}function i(a){var b=n[a[o]];b||(b={},h++,a[o]=h,n[h]=b);return b}function p(a,b,c){b||(b=f);if(g)return b.createElement(a);c||(c=i(b));b=c.cache[a]?c.cache[a].cloneNode():r.test(a)?(c.cache[a]=c.createElem(a)).cloneNode():c.createElem(a);return b.canHaveChildren&&!s.test(a)?c.frag.appendChild(b):b}function t(a,b){if(!b.cache)b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumentFragment,b.frag=b.createFrag(); +a.createElement=function(c){return!e.shivMethods?b.createElem(c):p(c,a,b)};a.createDocumentFragment=Function("h,f","return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+m().join().replace(/[\w\-]+/g,function(a){b.createElem(a);b.frag.createElement(a);return'c("'+a+'")'})+");return n}")(e,b.frag)}function q(a){a||(a=f);var b=i(a);if(e.shivCSS&&!j&&!b.hasCSS){var c,d=a;c=d.createElement("p");d=d.getElementsByTagName("head")[0]||d.documentElement;c.innerHTML="x"; +c=d.insertBefore(c.lastChild,d.firstChild);b.hasCSS=!!c}g||t(a,b);return a}var k=l.html5||{},s=/^<|^(?:button|map|select|textarea|object|iframe|option|optgroup)$/i,r=/^(?:a|b|code|div|fieldset|h1|h2|h3|h4|h5|h6|i|label|li|ol|p|q|span|strong|style|table|tbody|td|th|tr|ul)$/i,j,o="_html5shiv",h=0,n={},g;(function(){try{var a=f.createElement("a");a.innerHTML="";j="hidden"in a;var b;if(!(b=1==a.childNodes.length)){f.createElement("a");var c=f.createDocumentFragment();b="undefined"==typeof c.cloneNode|| +"undefined"==typeof c.createDocumentFragment||"undefined"==typeof c.createElement}g=b}catch(d){g=j=!0}})();var e={elements:k.elements||"abbr article aside audio bdi canvas data datalist details dialog figcaption figure footer header hgroup main mark meter nav output progress section summary template time video",version:"3.7.0",shivCSS:!1!==k.shivCSS,supportsUnknownElements:g,shivMethods:!1!==k.shivMethods,type:"default",shivDocument:q,createElement:p,createDocumentFragment:function(a,b){a||(a=f); +if(g)return a.createDocumentFragment();for(var b=b||i(a),c=b.frag.cloneNode(),d=0,e=m(),h=e.length;da?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(d.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c=+a+(0>a?b:0);return this.pushStack(c>=0&&b>c?[this[c]]:[])},end:function(){return this.prevObject||this.constructor(null)},push:f,sort:c.sort,splice:c.splice},n.extend=n.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]||{},h++),"object"==typeof g||n.isFunction(g)||(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],g!==c&&(j&&c&&(n.isPlainObject(c)||(b=n.isArray(c)))?(b?(b=!1,f=a&&n.isArray(a)?a:[]):f=a&&n.isPlainObject(a)?a:{},g[d]=n.extend(j,f,c)):void 0!==c&&(g[d]=c));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray||function(a){return"array"===n.type(a)},isWindow:function(a){return null!=a&&a==a.window},isNumeric:function(a){return a-parseFloat(a)>=0},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},isPlainObject:function(a){var b;if(!a||"object"!==n.type(a)||a.nodeType||n.isWindow(a))return!1;try{if(a.constructor&&!j.call(a,"constructor")&&!j.call(a.constructor.prototype,"isPrototypeOf"))return!1}catch(c){return!1}if(l.ownLast)for(b in a)return j.call(a,b);for(b in a);return void 0===b||j.call(a,b)},type:function(a){return null==a?a+"":"object"==typeof a||"function"==typeof a?h[i.call(a)]||"object":typeof a},globalEval:function(b){b&&n.trim(b)&&(a.execScript||function(b){a.eval.call(a,b)})(b)},camelCase:function(a){return a.replace(p,"ms-").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b,c){var d,e=0,f=a.length,g=s(a);if(c){if(g){for(;f>e;e++)if(d=b.apply(a[e],c),d===!1)break}else for(e in a)if(d=b.apply(a[e],c),d===!1)break}else if(g){for(;f>e;e++)if(d=b.call(a[e],e,a[e]),d===!1)break}else for(e in a)if(d=b.call(a[e],e,a[e]),d===!1)break;return a},trim:k&&!k.call("\ufeff\xa0")?function(a){return null==a?"":k.call(a)}:function(a){return null==a?"":(a+"").replace(o,"")},makeArray:function(a,b){var c=b||[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){var d;if(b){if(g)return g.call(b,a,c);for(d=b.length,c=c?0>c?Math.max(0,d+c):c:0;d>c;c++)if(c in b&&b[c]===a)return c}return-1},merge:function(a,b){var c=+b.length,d=0,e=a.length;while(c>d)a[e++]=b[d++];if(c!==c)while(void 0!==b[d])a[e++]=b[d++];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;g>f;f++)d=!b(a[f],f),d!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,f=0,g=a.length,h=s(a),i=[];if(h)for(;g>f;f++)d=b(a[f],f,c),null!=d&&i.push(d);else for(f in a)d=b(a[f],f,c),null!=d&&i.push(d);return e.apply([],i)},guid:1,proxy:function(a,b){var c,e,f;return"string"==typeof b&&(f=a[b],b=a,a=f),n.isFunction(a)?(c=d.call(arguments,2),e=function(){return a.apply(b||this,c.concat(d.call(arguments)))},e.guid=a.guid=a.guid||n.guid++,e):void 0},now:function(){return+new Date},support:l}),n.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(a,b){h["[object "+b+"]"]=b.toLowerCase()});function s(a){var b=a.length,c=n.type(a);return"function"===c||n.isWindow(a)?!1:1===a.nodeType&&b?!0:"array"===c||0===b||"number"==typeof b&&b>0&&b-1 in a}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s="sizzle"+-new Date,t=a.document,u=0,v=0,w=eb(),x=eb(),y=eb(),z=function(a,b){return a===b&&(j=!0),0},A="undefined",B=1<<31,C={}.hasOwnProperty,D=[],E=D.pop,F=D.push,G=D.push,H=D.slice,I=D.indexOf||function(a){for(var b=0,c=this.length;c>b;b++)if(this[b]===a)return b;return-1},J="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",K="[\\x20\\t\\r\\n\\f]",L="(?:\\\\.|[\\w-]|[^\\x00-\\xa0])+",M=L.replace("w","w#"),N="\\["+K+"*("+L+")"+K+"*(?:([*^$|!~]?=)"+K+"*(?:(['\"])((?:\\\\.|[^\\\\])*?)\\3|("+M+")|)|)"+K+"*\\]",O=":("+L+")(?:\\(((['\"])((?:\\\\.|[^\\\\])*?)\\3|((?:\\\\.|[^\\\\()[\\]]|"+N.replace(3,8)+")*)|.*)\\)|)",P=new RegExp("^"+K+"+|((?:^|[^\\\\])(?:\\\\.)*)"+K+"+$","g"),Q=new RegExp("^"+K+"*,"+K+"*"),R=new RegExp("^"+K+"*([>+~]|"+K+")"+K+"*"),S=new RegExp("="+K+"*([^\\]'\"]*?)"+K+"*\\]","g"),T=new RegExp(O),U=new RegExp("^"+M+"$"),V={ID:new RegExp("^#("+L+")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L.replace("w","w*")+")"),ATTR:new RegExp("^"+N),PSEUDO:new RegExp("^"+O),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+K+"*(even|odd|(([+-]|)(\\d*)n|)"+K+"*(?:([+-]|)"+K+"*(\\d+)|))"+K+"*\\)|)","i"),bool:new RegExp("^(?:"+J+")$","i"),needsContext:new RegExp("^"+K+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+K+"*((?:-\\d)?\\d*)"+K+"*\\)|)(?=[^-]|$)","i")},W=/^(?:input|select|textarea|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,$=/[+~]/,_=/'|\\/g,ab=new RegExp("\\\\([\\da-f]{1,6}"+K+"?|("+K+")|.)","ig"),bb=function(a,b,c){var d="0x"+b-65536;return d!==d||c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10|55296,1023&d|56320)};try{G.apply(D=H.call(t.childNodes),t.childNodes),D[t.childNodes.length].nodeType}catch(cb){G={apply:D.length?function(a,b){F.apply(a,H.call(b))}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function db(a,b,d,e){var f,g,h,i,j,m,p,q,u,v;if((b?b.ownerDocument||b:t)!==l&&k(b),b=b||l,d=d||[],!a||"string"!=typeof a)return d;if(1!==(i=b.nodeType)&&9!==i)return[];if(n&&!e){if(f=Z.exec(a))if(h=f[1]){if(9===i){if(g=b.getElementById(h),!g||!g.parentNode)return d;if(g.id===h)return d.push(g),d}else if(b.ownerDocument&&(g=b.ownerDocument.getElementById(h))&&r(b,g)&&g.id===h)return d.push(g),d}else{if(f[2])return G.apply(d,b.getElementsByTagName(a)),d;if((h=f[3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(h)),d}if(c.qsa&&(!o||!o.test(a))){if(q=p=s,u=b,v=9===i&&a,1===i&&"object"!==b.nodeName.toLowerCase()){m=ob(a),(p=b.getAttribute("id"))?q=p.replace(_,"\\$&"):b.setAttribute("id",q),q="[id='"+q+"'] ",j=m.length;while(j--)m[j]=q+pb(m[j]);u=$.test(a)&&mb(b.parentNode)||b,v=m.join(",")}if(v)try{return G.apply(d,u.querySelectorAll(v)),d}catch(w){}finally{p||b.removeAttribute("id")}}}return xb(a.replace(P,"$1"),b,d,e)}function eb(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function fb(a){return a[s]=!0,a}function gb(a){var b=l.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function hb(a,b){var c=a.split("|"),e=a.length;while(e--)d.attrHandle[c[e]]=b}function ib(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex||B)-(~a.sourceIndex||B);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function jb(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function kb(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c||"button"===c)&&b.type===a}}function lb(a){return fb(function(b){return b=+b,fb(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function mb(a){return a&&typeof a.getElementsByTagName!==A&&a}c=db.support={},f=db.isXML=function(a){var b=a&&(a.ownerDocument||a).documentElement;return b?"HTML"!==b.nodeName:!1},k=db.setDocument=function(a){var b,e=a?a.ownerDocument||a:t,g=e.defaultView;return e!==l&&9===e.nodeType&&e.documentElement?(l=e,m=e.documentElement,n=!f(e),g&&g!==g.top&&(g.addEventListener?g.addEventListener("unload",function(){k()},!1):g.attachEvent&&g.attachEvent("onunload",function(){k()})),c.attributes=gb(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=gb(function(a){return a.appendChild(e.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Y.test(e.getElementsByClassName)&&gb(function(a){return a.innerHTML="
            ",a.firstChild.className="i",2===a.getElementsByClassName("i").length}),c.getById=gb(function(a){return m.appendChild(a).id=s,!e.getElementsByName||!e.getElementsByName(s).length}),c.getById?(d.find.ID=function(a,b){if(typeof b.getElementById!==A&&n){var c=b.getElementById(a);return c&&c.parentNode?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ab,bb);return function(a){return a.getAttribute("id")===b}}):(delete d.find.ID,d.filter.ID=function(a){var b=a.replace(ab,bb);return function(a){var c=typeof a.getAttributeNode!==A&&a.getAttributeNode("id");return c&&c.value===b}}),d.find.TAG=c.getElementsByTagName?function(a,b){return typeof b.getElementsByTagName!==A?b.getElementsByTagName(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return typeof b.getElementsByClassName!==A&&n?b.getElementsByClassName(a):void 0},p=[],o=[],(c.qsa=Y.test(e.querySelectorAll))&&(gb(function(a){a.innerHTML="",a.querySelectorAll("[t^='']").length&&o.push("[*^$]="+K+"*(?:''|\"\")"),a.querySelectorAll("[selected]").length||o.push("\\["+K+"*(?:value|"+J+")"),a.querySelectorAll(":checked").length||o.push(":checked")}),gb(function(a){var b=e.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&o.push("name"+K+"*[*^$|!~]?="),a.querySelectorAll(":enabled").length||o.push(":enabled",":disabled"),a.querySelectorAll("*,:x"),o.push(",.*:")})),(c.matchesSelector=Y.test(q=m.webkitMatchesSelector||m.mozMatchesSelector||m.oMatchesSelector||m.msMatchesSelector))&&gb(function(a){c.disconnectedMatch=q.call(a,"div"),q.call(a,"[s!='']:x"),p.push("!=",O)}),o=o.length&&new RegExp(o.join("|")),p=p.length&&new RegExp(p.join("|")),b=Y.test(m.compareDocumentPosition),r=b||Y.test(m.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d||!(!d||1!==d.nodeType||!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},z=b?function(a,b){if(a===b)return j=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument||a)===(b.ownerDocument||b)?a.compareDocumentPosition(b):1,1&d||!c.sortDetached&&b.compareDocumentPosition(a)===d?a===e||a.ownerDocument===t&&r(t,a)?-1:b===e||b.ownerDocument===t&&r(t,b)?1:i?I.call(i,a)-I.call(i,b):0:4&d?-1:1)}:function(a,b){if(a===b)return j=!0,0;var c,d=0,f=a.parentNode,g=b.parentNode,h=[a],k=[b];if(!f||!g)return a===e?-1:b===e?1:f?-1:g?1:i?I.call(i,a)-I.call(i,b):0;if(f===g)return ib(a,b);c=a;while(c=c.parentNode)h.unshift(c);c=b;while(c=c.parentNode)k.unshift(c);while(h[d]===k[d])d++;return d?ib(h[d],k[d]):h[d]===t?-1:k[d]===t?1:0},e):l},db.matches=function(a,b){return db(a,null,null,b)},db.matchesSelector=function(a,b){if((a.ownerDocument||a)!==l&&k(a),b=b.replace(S,"='$1']"),!(!c.matchesSelector||!n||p&&p.test(b)||o&&o.test(b)))try{var d=q.call(a,b);if(d||c.disconnectedMatch||a.document&&11!==a.document.nodeType)return d}catch(e){}return db(b,l,null,[a]).length>0},db.contains=function(a,b){return(a.ownerDocument||a)!==l&&k(a),r(a,b)},db.attr=function(a,b){(a.ownerDocument||a)!==l&&k(a);var e=d.attrHandle[b.toLowerCase()],f=e&&C.call(d.attrHandle,b.toLowerCase())?e(a,b,!n):void 0;return void 0!==f?f:c.attributes||!n?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},db.error=function(a){throw new Error("Syntax error, unrecognized expression: "+a)},db.uniqueSort=function(a){var b,d=[],e=0,f=0;if(j=!c.detectDuplicates,i=!c.sortStable&&a.slice(0),a.sort(z),j){while(b=a[f++])b===a[f]&&(e=d.push(f));while(e--)a.splice(d[e],1)}return i=null,a},e=db.getText=function(a){var b,c="",d=0,f=a.nodeType;if(f){if(1===f||9===f||11===f){if("string"==typeof a.textContent)return a.textContent;for(a=a.firstChild;a;a=a.nextSibling)c+=e(a)}else if(3===f||4===f)return a.nodeValue}else while(b=a[d++])c+=e(b);return c},d=db.selectors={cacheLength:50,createPseudo:fb,match:V,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(a){return a[1]=a[1].replace(ab,bb),a[3]=(a[4]||a[5]||"").replace(ab,bb),"~="===a[2]&&(a[3]=" "+a[3]+" "),a.slice(0,4)},CHILD:function(a){return a[1]=a[1].toLowerCase(),"nth"===a[1].slice(0,3)?(a[3]||db.error(a[0]),a[4]=+(a[4]?a[5]+(a[6]||1):2*("even"===a[3]||"odd"===a[3])),a[5]=+(a[7]+a[8]||"odd"===a[3])):a[3]&&db.error(a[0]),a},PSEUDO:function(a){var b,c=!a[5]&&a[2];return V.CHILD.test(a[0])?null:(a[3]&&void 0!==a[4]?a[2]=a[4]:c&&T.test(c)&&(b=ob(c,!0))&&(b=c.indexOf(")",c.length-b)-c.length)&&(a[0]=a[0].slice(0,b),a[2]=c.slice(0,b)),a.slice(0,3))}},filter:{TAG:function(a){var b=a.replace(ab,bb).toLowerCase();return"*"===a?function(){return!0}:function(a){return a.nodeName&&a.nodeName.toLowerCase()===b}},CLASS:function(a){var b=w[a+" "];return b||(b=new RegExp("(^|"+K+")"+a+"("+K+"|$)"))&&w(a,function(a){return b.test("string"==typeof a.className&&a.className||typeof a.getAttribute!==A&&a.getAttribute("class")||"")})},ATTR:function(a,b,c){return function(d){var e=db.attr(d,a);return null==e?"!="===b:b?(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)===c:"~="===b?(" "+e+" ").indexOf(c)>-1:"|="===b?e===c||e.slice(0,c.length+1)===c+"-":!1):!0}},CHILD:function(a,b,c,d,e){var f="nth"!==a.slice(0,3),g="last"!==a.slice(-4),h="of-type"===b;return 1===d&&0===e?function(a){return!!a.parentNode}:function(b,c,i){var j,k,l,m,n,o,p=f!==g?"nextSibling":"previousSibling",q=b.parentNode,r=h&&b.nodeName.toLowerCase(),t=!i&&!h;if(q){if(f){while(p){l=b;while(l=l[p])if(h?l.nodeName.toLowerCase()===r:1===l.nodeType)return!1;o=p="only"===a&&!o&&"nextSibling"}return!0}if(o=[g?q.firstChild:q.lastChild],g&&t){k=q[s]||(q[s]={}),j=k[a]||[],n=j[0]===u&&j[1],m=j[0]===u&&j[2],l=n&&q.childNodes[n];while(l=++n&&l&&l[p]||(m=n=0)||o.pop())if(1===l.nodeType&&++m&&l===b){k[a]=[u,n,m];break}}else if(t&&(j=(b[s]||(b[s]={}))[a])&&j[0]===u)m=j[1];else while(l=++n&&l&&l[p]||(m=n=0)||o.pop())if((h?l.nodeName.toLowerCase()===r:1===l.nodeType)&&++m&&(t&&((l[s]||(l[s]={}))[a]=[u,m]),l===b))break;return m-=e,m===d||m%d===0&&m/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]||d.setFilters[a.toLowerCase()]||db.error("unsupported pseudo: "+a);return e[s]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase())?fb(function(a,c){var d,f=e(a,b),g=f.length;while(g--)d=I.call(a,f[g]),a[d]=!(c[d]=f[g])}):function(a){return e(a,0,c)}):e}},pseudos:{not:fb(function(a){var b=[],c=[],d=g(a.replace(P,"$1"));return d[s]?fb(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:fb(function(a){return function(b){return db(a,b).length>0}}),contains:fb(function(a){return function(b){return(b.textContent||b.innerText||e(b)).indexOf(a)>-1}}),lang:fb(function(a){return U.test(a||"")||db.error("unsupported lang: "+a),a=a.replace(ab,bb).toLowerCase(),function(b){var c;do if(c=n?b.lang:b.getAttribute("xml:lang")||b.getAttribute("lang"))return c=c.toLowerCase(),c===a||0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.hash;return c&&c.slice(1)===b.id},root:function(a){return a===m},focus:function(a){return a===l.activeElement&&(!l.hasFocus||l.hasFocus())&&!!(a.type||a.href||~a.tabIndex)},enabled:function(a){return a.disabled===!1},disabled:function(a){return a.disabled===!0},checked:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&!!a.checked||"option"===b&&!!a.selected},selected:function(a){return a.parentNode&&a.parentNode.selectedIndex,a.selected===!0},empty:function(a){for(a=a.firstChild;a;a=a.nextSibling)if(a.nodeType<6)return!1;return!0},parent:function(a){return!d.pseudos.empty(a)},header:function(a){return X.test(a.nodeName)},input:function(a){return W.test(a.nodeName)},button:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&"button"===a.type||"button"===b},text:function(a){var b;return"input"===a.nodeName.toLowerCase()&&"text"===a.type&&(null==(b=a.getAttribute("type"))||"text"===b.toLowerCase())},first:lb(function(){return[0]}),last:lb(function(a,b){return[b-1]}),eq:lb(function(a,b,c){return[0>c?c+b:c]}),even:lb(function(a,b){for(var c=0;b>c;c+=2)a.push(c);return a}),odd:lb(function(a,b){for(var c=1;b>c;c+=2)a.push(c);return a}),lt:lb(function(a,b,c){for(var d=0>c?c+b:c;--d>=0;)a.push(d);return a}),gt:lb(function(a,b,c){for(var d=0>c?c+b:c;++db;b++)d+=a[b].value;return d}function qb(a,b,c){var d=b.dir,e=c&&"parentNode"===d,f=v++;return b.first?function(b,c,f){while(b=b[d])if(1===b.nodeType||e)return a(b,c,f)}:function(b,c,g){var h,i,j=[u,f];if(g){while(b=b[d])if((1===b.nodeType||e)&&a(b,c,g))return!0}else while(b=b[d])if(1===b.nodeType||e){if(i=b[s]||(b[s]={}),(h=i[d])&&h[0]===u&&h[1]===f)return j[2]=h[2];if(i[d]=j,j[2]=a(b,c,g))return!0}}}function rb(a){return a.length>1?function(b,c,d){var e=a.length;while(e--)if(!a[e](b,c,d))return!1;return!0}:a[0]}function sb(a,b,c,d,e){for(var f,g=[],h=0,i=a.length,j=null!=b;i>h;h++)(f=a[h])&&(!c||c(f,d,e))&&(g.push(f),j&&b.push(h));return g}function tb(a,b,c,d,e,f){return d&&!d[s]&&(d=tb(d)),e&&!e[s]&&(e=tb(e,f)),fb(function(f,g,h,i){var j,k,l,m=[],n=[],o=g.length,p=f||wb(b||"*",h.nodeType?[h]:h,[]),q=!a||!f&&b?p:sb(p,m,a,h,i),r=c?e||(f?a:o||d)?[]:g:q;if(c&&c(q,r,h,i),d){j=sb(r,n),d(j,[],h,i),k=j.length;while(k--)(l=j[k])&&(r[n[k]]=!(q[n[k]]=l))}if(f){if(e||a){if(e){j=[],k=r.length;while(k--)(l=r[k])&&j.push(q[k]=l);e(null,r=[],j,i)}k=r.length;while(k--)(l=r[k])&&(j=e?I.call(f,l):m[k])>-1&&(f[j]=!(g[j]=l))}}else r=sb(r===g?r.splice(o,r.length):r),e?e(null,g,r,i):G.apply(g,r)})}function ub(a){for(var b,c,e,f=a.length,g=d.relative[a[0].type],i=g||d.relative[" "],j=g?1:0,k=qb(function(a){return a===b},i,!0),l=qb(function(a){return I.call(b,a)>-1},i,!0),m=[function(a,c,d){return!g&&(d||c!==h)||((b=c).nodeType?k(a,c,d):l(a,c,d))}];f>j;j++)if(c=d.relative[a[j].type])m=[qb(rb(m),c)];else{if(c=d.filter[a[j].type].apply(null,a[j].matches),c[s]){for(e=++j;f>e;e++)if(d.relative[a[e].type])break;return tb(j>1&&rb(m),j>1&&pb(a.slice(0,j-1).concat({value:" "===a[j-2].type?"*":""})).replace(P,"$1"),c,e>j&&ub(a.slice(j,e)),f>e&&ub(a=a.slice(e)),f>e&&pb(a))}m.push(c)}return rb(m)}function vb(a,b){var c=b.length>0,e=a.length>0,f=function(f,g,i,j,k){var m,n,o,p=0,q="0",r=f&&[],s=[],t=h,v=f||e&&d.find.TAG("*",k),w=u+=null==t?1:Math.random()||.1,x=v.length;for(k&&(h=g!==l&&g);q!==x&&null!=(m=v[q]);q++){if(e&&m){n=0;while(o=a[n++])if(o(m,g,i)){j.push(m);break}k&&(u=w)}c&&((m=!o&&m)&&p--,f&&r.push(m))}if(p+=q,c&&q!==p){n=0;while(o=b[n++])o(r,s,g,i);if(f){if(p>0)while(q--)r[q]||s[q]||(s[q]=E.call(j));s=sb(s)}G.apply(j,s),k&&!f&&s.length>0&&p+b.length>1&&db.uniqueSort(j)}return k&&(u=w,h=t),r};return c?fb(f):f}g=db.compile=function(a,b){var c,d=[],e=[],f=y[a+" "];if(!f){b||(b=ob(a)),c=b.length;while(c--)f=ub(b[c]),f[s]?d.push(f):e.push(f);f=y(a,vb(e,d))}return f};function wb(a,b,c){for(var d=0,e=b.length;e>d;d++)db(a,b[d],c);return c}function xb(a,b,e,f){var h,i,j,k,l,m=ob(a);if(!f&&1===m.length){if(i=m[0]=m[0].slice(0),i.length>2&&"ID"===(j=i[0]).type&&c.getById&&9===b.nodeType&&n&&d.relative[i[1].type]){if(b=(d.find.ID(j.matches[0].replace(ab,bb),b)||[])[0],!b)return e;a=a.slice(i.shift().value.length)}h=V.needsContext.test(a)?0:i.length;while(h--){if(j=i[h],d.relative[k=j.type])break;if((l=d.find[k])&&(f=l(j.matches[0].replace(ab,bb),$.test(i[0].type)&&mb(b.parentNode)||b))){if(i.splice(h,1),a=f.length&&pb(i),!a)return G.apply(e,f),e;break}}}return g(a,m)(f,b,!n,e,$.test(a)&&mb(b.parentNode)||b),e}return c.sortStable=s.split("").sort(z).join("")===s,c.detectDuplicates=!!j,k(),c.sortDetached=gb(function(a){return 1&a.compareDocumentPosition(l.createElement("div"))}),gb(function(a){return a.innerHTML="","#"===a.firstChild.getAttribute("href")})||hb("type|href|height|width",function(a,b,c){return c?void 0:a.getAttribute(b,"type"===b.toLowerCase()?1:2)}),c.attributes&&gb(function(a){return a.innerHTML="",a.firstChild.setAttribute("value",""),""===a.firstChild.getAttribute("value")})||hb("value",function(a,b,c){return c||"input"!==a.nodeName.toLowerCase()?void 0:a.defaultValue}),gb(function(a){return null==a.getAttribute("disabled")})||hb(J,function(a,b,c){var d;return c?void 0:a[b]===!0?b.toLowerCase():(d=a.getAttributeNode(b))&&d.specified?d.value:null}),db}(a);n.find=t,n.expr=t.selectors,n.expr[":"]=n.expr.pseudos,n.unique=t.uniqueSort,n.text=t.getText,n.isXMLDoc=t.isXML,n.contains=t.contains;var u=n.expr.match.needsContext,v=/^<(\w+)\s*\/?>(?:<\/\1>|)$/,w=/^.[^:#\[\.,]*$/;function x(a,b,c){if(n.isFunction(b))return n.grep(a,function(a,d){return!!b.call(a,d,a)!==c});if(b.nodeType)return n.grep(a,function(a){return a===b!==c});if("string"==typeof b){if(w.test(b))return n.filter(b,a,c);b=n.filter(b,a)}return n.grep(a,function(a){return n.inArray(a,b)>=0!==c})}n.filter=function(a,b,c){var d=b[0];return c&&(a=":not("+a+")"),1===b.length&&1===d.nodeType?n.find.matchesSelector(d,a)?[d]:[]:n.find.matches(a,n.grep(b,function(a){return 1===a.nodeType}))},n.fn.extend({find:function(a){var b,c=[],d=this,e=d.length;if("string"!=typeof a)return this.pushStack(n(a).filter(function(){for(b=0;e>b;b++)if(n.contains(d[b],this))return!0}));for(b=0;e>b;b++)n.find(a,d[b],c);return c=this.pushStack(e>1?n.unique(c):c),c.selector=this.selector?this.selector+" "+a:a,c},filter:function(a){return this.pushStack(x(this,a||[],!1))},not:function(a){return this.pushStack(x(this,a||[],!0))},is:function(a){return!!x(this,"string"==typeof a&&u.test(a)?n(a):a||[],!1).length}});var y,z=a.document,A=/^(?:\s*(<[\w\W]+>)[^>]*|#([\w-]*))$/,B=n.fn.init=function(a,b){var c,d;if(!a)return this;if("string"==typeof a){if(c="<"===a.charAt(0)&&">"===a.charAt(a.length-1)&&a.length>=3?[null,a,null]:A.exec(a),!c||!c[1]&&b)return!b||b.jquery?(b||y).find(a):this.constructor(b).find(a);if(c[1]){if(b=b instanceof n?b[0]:b,n.merge(this,n.parseHTML(c[1],b&&b.nodeType?b.ownerDocument||b:z,!0)),v.test(c[1])&&n.isPlainObject(b))for(c in b)n.isFunction(this[c])?this[c](b[c]):this.attr(c,b[c]);return this}if(d=z.getElementById(c[2]),d&&d.parentNode){if(d.id!==c[2])return y.find(a);this.length=1,this[0]=d}return this.context=z,this.selector=a,this}return a.nodeType?(this.context=this[0]=a,this.length=1,this):n.isFunction(a)?"undefined"!=typeof y.ready?y.ready(a):a(n):(void 0!==a.selector&&(this.selector=a.selector,this.context=a.context),n.makeArray(a,this))};B.prototype=n.fn,y=n(z);var C=/^(?:parents|prev(?:Until|All))/,D={children:!0,contents:!0,next:!0,prev:!0};n.extend({dir:function(a,b,c){var d=[],e=a[b];while(e&&9!==e.nodeType&&(void 0===c||1!==e.nodeType||!n(e).is(c)))1===e.nodeType&&d.push(e),e=e[b];return d},sibling:function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c}}),n.fn.extend({has:function(a){var b,c=n(a,this),d=c.length;return this.filter(function(){for(b=0;d>b;b++)if(n.contains(this,c[b]))return!0})},closest:function(a,b){for(var c,d=0,e=this.length,f=[],g=u.test(a)||"string"!=typeof a?n(a,b||this.context):0;e>d;d++)for(c=this[d];c&&c!==b;c=c.parentNode)if(c.nodeType<11&&(g?g.index(c)>-1:1===c.nodeType&&n.find.matchesSelector(c,a))){f.push(c);break}return this.pushStack(f.length>1?n.unique(f):f)},index:function(a){return a?"string"==typeof a?n.inArray(this[0],n(a)):n.inArray(a.jquery?a[0]:a,this):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(a,b){return this.pushStack(n.unique(n.merge(this.get(),n(a,b))))},addBack:function(a){return this.add(null==a?this.prevObject:this.prevObject.filter(a))}});function E(a,b){do a=a[b];while(a&&1!==a.nodeType);return a}n.each({parent:function(a){var b=a.parentNode;return b&&11!==b.nodeType?b:null},parents:function(a){return n.dir(a,"parentNode")},parentsUntil:function(a,b,c){return n.dir(a,"parentNode",c)},next:function(a){return E(a,"nextSibling")},prev:function(a){return E(a,"previousSibling")},nextAll:function(a){return n.dir(a,"nextSibling")},prevAll:function(a){return n.dir(a,"previousSibling")},nextUntil:function(a,b,c){return n.dir(a,"nextSibling",c)},prevUntil:function(a,b,c){return n.dir(a,"previousSibling",c)},siblings:function(a){return n.sibling((a.parentNode||{}).firstChild,a)},children:function(a){return n.sibling(a.firstChild)},contents:function(a){return n.nodeName(a,"iframe")?a.contentDocument||a.contentWindow.document:n.merge([],a.childNodes)}},function(a,b){n.fn[a]=function(c,d){var e=n.map(this,b,c);return"Until"!==a.slice(-5)&&(d=c),d&&"string"==typeof d&&(e=n.filter(d,e)),this.length>1&&(D[a]||(e=n.unique(e)),C.test(a)&&(e=e.reverse())),this.pushStack(e)}});var F=/\S+/g,G={};function H(a){var b=G[a]={};return n.each(a.match(F)||[],function(a,c){b[c]=!0}),b}n.Callbacks=function(a){a="string"==typeof a?G[a]||H(a):n.extend({},a);var b,c,d,e,f,g,h=[],i=!a.once&&[],j=function(l){for(c=a.memory&&l,d=!0,f=g||0,g=0,e=h.length,b=!0;h&&e>f;f++)if(h[f].apply(l[0],l[1])===!1&&a.stopOnFalse){c=!1;break}b=!1,h&&(i?i.length&&j(i.shift()):c?h=[]:k.disable())},k={add:function(){if(h){var d=h.length;!function f(b){n.each(b,function(b,c){var d=n.type(c);"function"===d?a.unique&&k.has(c)||h.push(c):c&&c.length&&"string"!==d&&f(c)})}(arguments),b?e=h.length:c&&(g=d,j(c))}return this},remove:function(){return h&&n.each(arguments,function(a,c){var d;while((d=n.inArray(c,h,d))>-1)h.splice(d,1),b&&(e>=d&&e--,f>=d&&f--)}),this},has:function(a){return a?n.inArray(a,h)>-1:!(!h||!h.length)},empty:function(){return h=[],e=0,this},disable:function(){return h=i=c=void 0,this},disabled:function(){return!h},lock:function(){return i=void 0,c||k.disable(),this},locked:function(){return!i},fireWith:function(a,c){return!h||d&&!i||(c=c||[],c=[a,c.slice?c.slice():c],b?i.push(c):j(c)),this},fire:function(){return k.fireWith(this,arguments),this},fired:function(){return!!d}};return k},n.extend({Deferred:function(a){var b=[["resolve","done",n.Callbacks("once memory"),"resolved"],["reject","fail",n.Callbacks("once memory"),"rejected"],["notify","progress",n.Callbacks("memory")]],c="pending",d={state:function(){return c},always:function(){return e.done(arguments).fail(arguments),this},then:function(){var a=arguments;return n.Deferred(function(c){n.each(b,function(b,f){var g=n.isFunction(a[b])&&a[b];e[f[1]](function(){var a=g&&g.apply(this,arguments);a&&n.isFunction(a.promise)?a.promise().done(c.resolve).fail(c.reject).progress(c.notify):c[f[0]+"With"](this===d?c.promise():this,g?[a]:arguments)})}),a=null}).promise()},promise:function(a){return null!=a?n.extend(a,d):d}},e={};return d.pipe=d.then,n.each(b,function(a,f){var g=f[2],h=f[3];d[f[1]]=g.add,h&&g.add(function(){c=h},b[1^a][2].disable,b[2][2].lock),e[f[0]]=function(){return e[f[0]+"With"](this===e?d:this,arguments),this},e[f[0]+"With"]=g.fireWith}),d.promise(e),a&&a.call(e,e),e},when:function(a){var b=0,c=d.call(arguments),e=c.length,f=1!==e||a&&n.isFunction(a.promise)?e:0,g=1===f?a:n.Deferred(),h=function(a,b,c){return function(e){b[a]=this,c[a]=arguments.length>1?d.call(arguments):e,c===i?g.notifyWith(b,c):--f||g.resolveWith(b,c)}},i,j,k;if(e>1)for(i=new Array(e),j=new Array(e),k=new Array(e);e>b;b++)c[b]&&n.isFunction(c[b].promise)?c[b].promise().done(h(b,k,c)).fail(g.reject).progress(h(b,j,i)):--f;return f||g.resolveWith(k,c),g.promise()}});var I;n.fn.ready=function(a){return n.ready.promise().done(a),this},n.extend({isReady:!1,readyWait:1,holdReady:function(a){a?n.readyWait++:n.ready(!0)},ready:function(a){if(a===!0?!--n.readyWait:!n.isReady){if(!z.body)return setTimeout(n.ready);n.isReady=!0,a!==!0&&--n.readyWait>0||(I.resolveWith(z,[n]),n.fn.trigger&&n(z).trigger("ready").off("ready"))}}});function J(){z.addEventListener?(z.removeEventListener("DOMContentLoaded",K,!1),a.removeEventListener("load",K,!1)):(z.detachEvent("onreadystatechange",K),a.detachEvent("onload",K))}function K(){(z.addEventListener||"load"===event.type||"complete"===z.readyState)&&(J(),n.ready())}n.ready.promise=function(b){if(!I)if(I=n.Deferred(),"complete"===z.readyState)setTimeout(n.ready);else if(z.addEventListener)z.addEventListener("DOMContentLoaded",K,!1),a.addEventListener("load",K,!1);else{z.attachEvent("onreadystatechange",K),a.attachEvent("onload",K);var c=!1;try{c=null==a.frameElement&&z.documentElement}catch(d){}c&&c.doScroll&&!function e(){if(!n.isReady){try{c.doScroll("left")}catch(a){return setTimeout(e,50)}J(),n.ready()}}()}return I.promise(b)};var L="undefined",M;for(M in n(l))break;l.ownLast="0"!==M,l.inlineBlockNeedsLayout=!1,n(function(){var a,b,c=z.getElementsByTagName("body")[0];c&&(a=z.createElement("div"),a.style.cssText="border:0;width:0;height:0;position:absolute;top:0;left:-9999px;margin-top:1px",b=z.createElement("div"),c.appendChild(a).appendChild(b),typeof b.style.zoom!==L&&(b.style.cssText="border:0;margin:0;width:1px;padding:1px;display:inline;zoom:1",(l.inlineBlockNeedsLayout=3===b.offsetWidth)&&(c.style.zoom=1)),c.removeChild(a),a=b=null)}),function(){var a=z.createElement("div");if(null==l.deleteExpando){l.deleteExpando=!0;try{delete a.test}catch(b){l.deleteExpando=!1}}a=null}(),n.acceptData=function(a){var b=n.noData[(a.nodeName+" ").toLowerCase()],c=+a.nodeType||1;return 1!==c&&9!==c?!1:!b||b!==!0&&a.getAttribute("classid")===b};var N=/^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,O=/([A-Z])/g;function P(a,b,c){if(void 0===c&&1===a.nodeType){var d="data-"+b.replace(O,"-$1").toLowerCase();if(c=a.getAttribute(d),"string"==typeof c){try{c="true"===c?!0:"false"===c?!1:"null"===c?null:+c+""===c?+c:N.test(c)?n.parseJSON(c):c}catch(e){}n.data(a,b,c)}else c=void 0}return c}function Q(a){var b;for(b in a)if(("data"!==b||!n.isEmptyObject(a[b]))&&"toJSON"!==b)return!1;return!0}function R(a,b,d,e){if(n.acceptData(a)){var f,g,h=n.expando,i=a.nodeType,j=i?n.cache:a,k=i?a[h]:a[h]&&h;if(k&&j[k]&&(e||j[k].data)||void 0!==d||"string"!=typeof b)return k||(k=i?a[h]=c.pop()||n.guid++:h),j[k]||(j[k]=i?{}:{toJSON:n.noop}),("object"==typeof b||"function"==typeof b)&&(e?j[k]=n.extend(j[k],b):j[k].data=n.extend(j[k].data,b)),g=j[k],e||(g.data||(g.data={}),g=g.data),void 0!==d&&(g[n.camelCase(b)]=d),"string"==typeof b?(f=g[b],null==f&&(f=g[n.camelCase(b)])):f=g,f +}}function S(a,b,c){if(n.acceptData(a)){var d,e,f=a.nodeType,g=f?n.cache:a,h=f?a[n.expando]:n.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){n.isArray(b)?b=b.concat(n.map(b,n.camelCase)):b in d?b=[b]:(b=n.camelCase(b),b=b in d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!Q(d):!n.isEmptyObject(d))return}(c||(delete g[h].data,Q(g[h])))&&(f?n.cleanData([a],!0):l.deleteExpando||g!=g.window?delete g[h]:g[h]=null)}}}n.extend({cache:{},noData:{"applet ":!0,"embed ":!0,"object ":"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"},hasData:function(a){return a=a.nodeType?n.cache[a[n.expando]]:a[n.expando],!!a&&!Q(a)},data:function(a,b,c){return R(a,b,c)},removeData:function(a,b){return S(a,b)},_data:function(a,b,c){return R(a,b,c,!0)},_removeData:function(a,b){return S(a,b,!0)}}),n.fn.extend({data:function(a,b){var c,d,e,f=this[0],g=f&&f.attributes;if(void 0===a){if(this.length&&(e=n.data(f),1===f.nodeType&&!n._data(f,"parsedAttrs"))){c=g.length;while(c--)d=g[c].name,0===d.indexOf("data-")&&(d=n.camelCase(d.slice(5)),P(f,d,e[d]));n._data(f,"parsedAttrs",!0)}return e}return"object"==typeof a?this.each(function(){n.data(this,a)}):arguments.length>1?this.each(function(){n.data(this,a,b)}):f?P(f,a,n.data(f,a)):void 0},removeData:function(a){return this.each(function(){n.removeData(this,a)})}}),n.extend({queue:function(a,b,c){var d;return a?(b=(b||"fx")+"queue",d=n._data(a,b),c&&(!d||n.isArray(c)?d=n._data(a,b,n.makeArray(c)):d.push(c)),d||[]):void 0},dequeue:function(a,b){b=b||"fx";var c=n.queue(a,b),d=c.length,e=c.shift(),f=n._queueHooks(a,b),g=function(){n.dequeue(a,b)};"inprogress"===e&&(e=c.shift(),d--),e&&("fx"===b&&c.unshift("inprogress"),delete f.stop,e.call(a,g,f)),!d&&f&&f.empty.fire()},_queueHooks:function(a,b){var c=b+"queueHooks";return n._data(a,c)||n._data(a,c,{empty:n.Callbacks("once memory").add(function(){n._removeData(a,b+"queue"),n._removeData(a,c)})})}}),n.fn.extend({queue:function(a,b){var c=2;return"string"!=typeof a&&(b=a,a="fx",c--),arguments.lengthh;h++)b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return e?a:j?b.call(a):i?b(a[0],c):f},X=/^(?:checkbox|radio)$/i;!function(){var a=z.createDocumentFragment(),b=z.createElement("div"),c=z.createElement("input");if(b.setAttribute("className","t"),b.innerHTML="
            a",l.leadingWhitespace=3===b.firstChild.nodeType,l.tbody=!b.getElementsByTagName("tbody").length,l.htmlSerialize=!!b.getElementsByTagName("link").length,l.html5Clone="<:nav>"!==z.createElement("nav").cloneNode(!0).outerHTML,c.type="checkbox",c.checked=!0,a.appendChild(c),l.appendChecked=c.checked,b.innerHTML="",l.noCloneChecked=!!b.cloneNode(!0).lastChild.defaultValue,a.appendChild(b),b.innerHTML="",l.checkClone=b.cloneNode(!0).cloneNode(!0).lastChild.checked,l.noCloneEvent=!0,b.attachEvent&&(b.attachEvent("onclick",function(){l.noCloneEvent=!1}),b.cloneNode(!0).click()),null==l.deleteExpando){l.deleteExpando=!0;try{delete b.test}catch(d){l.deleteExpando=!1}}a=b=c=null}(),function(){var b,c,d=z.createElement("div");for(b in{submit:!0,change:!0,focusin:!0})c="on"+b,(l[b+"Bubbles"]=c in a)||(d.setAttribute(c,"t"),l[b+"Bubbles"]=d.attributes[c].expando===!1);d=null}();var Y=/^(?:input|select|textarea)$/i,Z=/^key/,$=/^(?:mouse|contextmenu)|click/,_=/^(?:focusinfocus|focusoutblur)$/,ab=/^([^.]*)(?:\.(.+)|)$/;function bb(){return!0}function cb(){return!1}function db(){try{return z.activeElement}catch(a){}}n.event={global:{},add:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n._data(a);if(r){c.handler&&(i=c,c=i.handler,e=i.selector),c.guid||(c.guid=n.guid++),(g=r.events)||(g=r.events={}),(k=r.handle)||(k=r.handle=function(a){return typeof n===L||a&&n.event.triggered===a.type?void 0:n.event.dispatch.apply(k.elem,arguments)},k.elem=a),b=(b||"").match(F)||[""],h=b.length;while(h--)f=ab.exec(b[h])||[],o=q=f[1],p=(f[2]||"").split(".").sort(),o&&(j=n.event.special[o]||{},o=(e?j.delegateType:j.bindType)||o,j=n.event.special[o]||{},l=n.extend({type:o,origType:q,data:d,handler:c,guid:c.guid,selector:e,needsContext:e&&n.expr.match.needsContext.test(e),namespace:p.join(".")},i),(m=g[o])||(m=g[o]=[],m.delegateCount=0,j.setup&&j.setup.call(a,d,p,k)!==!1||(a.addEventListener?a.addEventListener(o,k,!1):a.attachEvent&&a.attachEvent("on"+o,k))),j.add&&(j.add.call(a,l),l.handler.guid||(l.handler.guid=c.guid)),e?m.splice(m.delegateCount++,0,l):m.push(l),n.event.global[o]=!0);a=null}},remove:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n.hasData(a)&&n._data(a);if(r&&(k=r.events)){b=(b||"").match(F)||[""],j=b.length;while(j--)if(h=ab.exec(b[j])||[],o=q=h[1],p=(h[2]||"").split(".").sort(),o){l=n.event.special[o]||{},o=(d?l.delegateType:l.bindType)||o,m=k[o]||[],h=h[2]&&new RegExp("(^|\\.)"+p.join("\\.(?:.*\\.|)")+"(\\.|$)"),i=f=m.length;while(f--)g=m[f],!e&&q!==g.origType||c&&c.guid!==g.guid||h&&!h.test(g.namespace)||d&&d!==g.selector&&("**"!==d||!g.selector)||(m.splice(f,1),g.selector&&m.delegateCount--,l.remove&&l.remove.call(a,g));i&&!m.length&&(l.teardown&&l.teardown.call(a,p,r.handle)!==!1||n.removeEvent(a,o,r.handle),delete k[o])}else for(o in k)n.event.remove(a,o+b[j],c,d,!0);n.isEmptyObject(k)&&(delete r.handle,n._removeData(a,"events"))}},trigger:function(b,c,d,e){var f,g,h,i,k,l,m,o=[d||z],p=j.call(b,"type")?b.type:b,q=j.call(b,"namespace")?b.namespace.split("."):[];if(h=l=d=d||z,3!==d.nodeType&&8!==d.nodeType&&!_.test(p+n.event.triggered)&&(p.indexOf(".")>=0&&(q=p.split("."),p=q.shift(),q.sort()),g=p.indexOf(":")<0&&"on"+p,b=b[n.expando]?b:new n.Event(p,"object"==typeof b&&b),b.isTrigger=e?2:3,b.namespace=q.join("."),b.namespace_re=b.namespace?new RegExp("(^|\\.)"+q.join("\\.(?:.*\\.|)")+"(\\.|$)"):null,b.result=void 0,b.target||(b.target=d),c=null==c?[b]:n.makeArray(c,[b]),k=n.event.special[p]||{},e||!k.trigger||k.trigger.apply(d,c)!==!1)){if(!e&&!k.noBubble&&!n.isWindow(d)){for(i=k.delegateType||p,_.test(i+p)||(h=h.parentNode);h;h=h.parentNode)o.push(h),l=h;l===(d.ownerDocument||z)&&o.push(l.defaultView||l.parentWindow||a)}m=0;while((h=o[m++])&&!b.isPropagationStopped())b.type=m>1?i:k.bindType||p,f=(n._data(h,"events")||{})[b.type]&&n._data(h,"handle"),f&&f.apply(h,c),f=g&&h[g],f&&f.apply&&n.acceptData(h)&&(b.result=f.apply(h,c),b.result===!1&&b.preventDefault());if(b.type=p,!e&&!b.isDefaultPrevented()&&(!k._default||k._default.apply(o.pop(),c)===!1)&&n.acceptData(d)&&g&&d[p]&&!n.isWindow(d)){l=d[g],l&&(d[g]=null),n.event.triggered=p;try{d[p]()}catch(r){}n.event.triggered=void 0,l&&(d[g]=l)}return b.result}},dispatch:function(a){a=n.event.fix(a);var b,c,e,f,g,h=[],i=d.call(arguments),j=(n._data(this,"events")||{})[a.type]||[],k=n.event.special[a.type]||{};if(i[0]=a,a.delegateTarget=this,!k.preDispatch||k.preDispatch.call(this,a)!==!1){h=n.event.handlers.call(this,a,j),b=0;while((f=h[b++])&&!a.isPropagationStopped()){a.currentTarget=f.elem,g=0;while((e=f.handlers[g++])&&!a.isImmediatePropagationStopped())(!a.namespace_re||a.namespace_re.test(e.namespace))&&(a.handleObj=e,a.data=e.data,c=((n.event.special[e.origType]||{}).handle||e.handler).apply(f.elem,i),void 0!==c&&(a.result=c)===!1&&(a.preventDefault(),a.stopPropagation()))}return k.postDispatch&&k.postDispatch.call(this,a),a.result}},handlers:function(a,b){var c,d,e,f,g=[],h=b.delegateCount,i=a.target;if(h&&i.nodeType&&(!a.button||"click"!==a.type))for(;i!=this;i=i.parentNode||this)if(1===i.nodeType&&(i.disabled!==!0||"click"!==a.type)){for(e=[],f=0;h>f;f++)d=b[f],c=d.selector+" ",void 0===e[c]&&(e[c]=d.needsContext?n(c,this).index(i)>=0:n.find(c,this,null,[i]).length),e[c]&&e.push(d);e.length&&g.push({elem:i,handlers:e})}return h]","i"),ib=/^\s+/,jb=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:]+)[^>]*)\/>/gi,kb=/<([\w:]+)/,lb=/\s*$/g,sb={option:[1,""],legend:[1,"
            ","
            "],area:[1,"",""],param:[1,"",""],thead:[1,"","
            "],tr:[2,"","
            "],col:[2,"","
            "],td:[3,"","
            "],_default:l.htmlSerialize?[0,"",""]:[1,"X
            ","
            "]},tb=eb(z),ub=tb.appendChild(z.createElement("div"));sb.optgroup=sb.option,sb.tbody=sb.tfoot=sb.colgroup=sb.caption=sb.thead,sb.th=sb.td;function vb(a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==L?a.getElementsByTagName(b||"*"):typeof a.querySelectorAll!==L?a.querySelectorAll(b||"*"):void 0;if(!f)for(f=[],c=a.childNodes||a;null!=(d=c[e]);e++)!b||n.nodeName(d,b)?f.push(d):n.merge(f,vb(d,b));return void 0===b||b&&n.nodeName(a,b)?n.merge([a],f):f}function wb(a){X.test(a.type)&&(a.defaultChecked=a.checked)}function xb(a,b){return n.nodeName(a,"table")&&n.nodeName(11!==b.nodeType?b:b.firstChild,"tr")?a.getElementsByTagName("tbody")[0]||a.appendChild(a.ownerDocument.createElement("tbody")):a}function yb(a){return a.type=(null!==n.find.attr(a,"type"))+"/"+a.type,a}function zb(a){var b=qb.exec(a.type);return b?a.type=b[1]:a.removeAttribute("type"),a}function Ab(a,b){for(var c,d=0;null!=(c=a[d]);d++)n._data(c,"globalEval",!b||n._data(b[d],"globalEval"))}function Bb(a,b){if(1===b.nodeType&&n.hasData(a)){var c,d,e,f=n._data(a),g=n._data(b,f),h=f.events;if(h){delete g.handle,g.events={};for(c in h)for(d=0,e=h[c].length;e>d;d++)n.event.add(b,c,h[c][d])}g.data&&(g.data=n.extend({},g.data))}}function Cb(a,b){var c,d,e;if(1===b.nodeType){if(c=b.nodeName.toLowerCase(),!l.noCloneEvent&&b[n.expando]){e=n._data(b);for(d in e.events)n.removeEvent(b,d,e.handle);b.removeAttribute(n.expando)}"script"===c&&b.text!==a.text?(yb(b).text=a.text,zb(b)):"object"===c?(b.parentNode&&(b.outerHTML=a.outerHTML),l.html5Clone&&a.innerHTML&&!n.trim(b.innerHTML)&&(b.innerHTML=a.innerHTML)):"input"===c&&X.test(a.type)?(b.defaultChecked=b.checked=a.checked,b.value!==a.value&&(b.value=a.value)):"option"===c?b.defaultSelected=b.selected=a.defaultSelected:("input"===c||"textarea"===c)&&(b.defaultValue=a.defaultValue)}}n.extend({clone:function(a,b,c){var d,e,f,g,h,i=n.contains(a.ownerDocument,a);if(l.html5Clone||n.isXMLDoc(a)||!hb.test("<"+a.nodeName+">")?f=a.cloneNode(!0):(ub.innerHTML=a.outerHTML,ub.removeChild(f=ub.firstChild)),!(l.noCloneEvent&&l.noCloneChecked||1!==a.nodeType&&11!==a.nodeType||n.isXMLDoc(a)))for(d=vb(f),h=vb(a),g=0;null!=(e=h[g]);++g)d[g]&&Cb(e,d[g]);if(b)if(c)for(h=h||vb(a),d=d||vb(f),g=0;null!=(e=h[g]);g++)Bb(e,d[g]);else Bb(a,f);return d=vb(f,"script"),d.length>0&&Ab(d,!i&&vb(a,"script")),d=h=e=null,f},buildFragment:function(a,b,c,d){for(var e,f,g,h,i,j,k,m=a.length,o=eb(b),p=[],q=0;m>q;q++)if(f=a[q],f||0===f)if("object"===n.type(f))n.merge(p,f.nodeType?[f]:f);else if(mb.test(f)){h=h||o.appendChild(b.createElement("div")),i=(kb.exec(f)||["",""])[1].toLowerCase(),k=sb[i]||sb._default,h.innerHTML=k[1]+f.replace(jb,"<$1>")+k[2],e=k[0];while(e--)h=h.lastChild;if(!l.leadingWhitespace&&ib.test(f)&&p.push(b.createTextNode(ib.exec(f)[0])),!l.tbody){f="table"!==i||lb.test(f)?""!==k[1]||lb.test(f)?0:h:h.firstChild,e=f&&f.childNodes.length;while(e--)n.nodeName(j=f.childNodes[e],"tbody")&&!j.childNodes.length&&f.removeChild(j)}n.merge(p,h.childNodes),h.textContent="";while(h.firstChild)h.removeChild(h.firstChild);h=o.lastChild}else p.push(b.createTextNode(f));h&&o.removeChild(h),l.appendChecked||n.grep(vb(p,"input"),wb),q=0;while(f=p[q++])if((!d||-1===n.inArray(f,d))&&(g=n.contains(f.ownerDocument,f),h=vb(o.appendChild(f),"script"),g&&Ab(h),c)){e=0;while(f=h[e++])pb.test(f.type||"")&&c.push(f)}return h=null,o},cleanData:function(a,b){for(var d,e,f,g,h=0,i=n.expando,j=n.cache,k=l.deleteExpando,m=n.event.special;null!=(d=a[h]);h++)if((b||n.acceptData(d))&&(f=d[i],g=f&&j[f])){if(g.events)for(e in g.events)m[e]?n.event.remove(d,e):n.removeEvent(d,e,g.handle);j[f]&&(delete j[f],k?delete d[i]:typeof d.removeAttribute!==L?d.removeAttribute(i):d[i]=null,c.push(f))}}}),n.fn.extend({text:function(a){return W(this,function(a){return void 0===a?n.text(this):this.empty().append((this[0]&&this[0].ownerDocument||z).createTextNode(a))},null,a,arguments.length)},append:function(){return this.domManip(arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=xb(this,a);b.appendChild(a)}})},prepend:function(){return this.domManip(arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=xb(this,a);b.insertBefore(a,b.firstChild)}})},before:function(){return this.domManip(arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this)})},after:function(){return this.domManip(arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this.nextSibling)})},remove:function(a,b){for(var c,d=a?n.filter(a,this):this,e=0;null!=(c=d[e]);e++)b||1!==c.nodeType||n.cleanData(vb(c)),c.parentNode&&(b&&n.contains(c.ownerDocument,c)&&Ab(vb(c,"script")),c.parentNode.removeChild(c));return this},empty:function(){for(var a,b=0;null!=(a=this[b]);b++){1===a.nodeType&&n.cleanData(vb(a,!1));while(a.firstChild)a.removeChild(a.firstChild);a.options&&n.nodeName(a,"select")&&(a.options.length=0)}return this},clone:function(a,b){return a=null==a?!1:a,b=null==b?a:b,this.map(function(){return n.clone(this,a,b)})},html:function(a){return W(this,function(a){var b=this[0]||{},c=0,d=this.length;if(void 0===a)return 1===b.nodeType?b.innerHTML.replace(gb,""):void 0;if(!("string"!=typeof a||nb.test(a)||!l.htmlSerialize&&hb.test(a)||!l.leadingWhitespace&&ib.test(a)||sb[(kb.exec(a)||["",""])[1].toLowerCase()])){a=a.replace(jb,"<$1>");try{for(;d>c;c++)b=this[c]||{},1===b.nodeType&&(n.cleanData(vb(b,!1)),b.innerHTML=a);b=0}catch(e){}}b&&this.empty().append(a)},null,a,arguments.length)},replaceWith:function(){var a=arguments[0];return this.domManip(arguments,function(b){a=this.parentNode,n.cleanData(vb(this)),a&&a.replaceChild(b,this)}),a&&(a.length||a.nodeType)?this:this.remove()},detach:function(a){return this.remove(a,!0)},domManip:function(a,b){a=e.apply([],a);var c,d,f,g,h,i,j=0,k=this.length,m=this,o=k-1,p=a[0],q=n.isFunction(p);if(q||k>1&&"string"==typeof p&&!l.checkClone&&ob.test(p))return this.each(function(c){var d=m.eq(c);q&&(a[0]=p.call(this,c,d.html())),d.domManip(a,b)});if(k&&(i=n.buildFragment(a,this[0].ownerDocument,!1,this),c=i.firstChild,1===i.childNodes.length&&(i=c),c)){for(g=n.map(vb(i,"script"),yb),f=g.length;k>j;j++)d=i,j!==o&&(d=n.clone(d,!0,!0),f&&n.merge(g,vb(d,"script"))),b.call(this[j],d,j);if(f)for(h=g[g.length-1].ownerDocument,n.map(g,zb),j=0;f>j;j++)d=g[j],pb.test(d.type||"")&&!n._data(d,"globalEval")&&n.contains(h,d)&&(d.src?n._evalUrl&&n._evalUrl(d.src):n.globalEval((d.text||d.textContent||d.innerHTML||"").replace(rb,"")));i=c=null}return this}}),n.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){n.fn[a]=function(a){for(var c,d=0,e=[],g=n(a),h=g.length-1;h>=d;d++)c=d===h?this:this.clone(!0),n(g[d])[b](c),f.apply(e,c.get());return this.pushStack(e)}});var Db,Eb={};function Fb(b,c){var d=n(c.createElement(b)).appendTo(c.body),e=a.getDefaultComputedStyle?a.getDefaultComputedStyle(d[0]).display:n.css(d[0],"display");return d.detach(),e}function Gb(a){var b=z,c=Eb[a];return c||(c=Fb(a,b),"none"!==c&&c||(Db=(Db||n("
            +
            +
            + + + + SAML PHP Toolkit + +
            + +
            +
            +
            + + + +
            +
            +
            + + + + SAML PHP Toolkit + +
            + +
            +
            +
            + + + +

            -
            -
            - - - - SAML PHP Toolkit - -
            - -
            -
            -
            -
            - Back to top   -
            -
            -
            -
            - - - - SAML PHP Toolkit - -
            - -
            -
            -
            -
            - Back to top   -
            -