0.4.0-alpha.9 with [vulnerability][acl] Issue #336 Apply ACL for supe…

…r classes/objects of non-global classes/objects
t2ym · Feb 14, 2020 · feb779c · feb779c
1 parent 4bc442b
commit feb779c
Show file tree

Hide file tree

Showing 27 changed files with 92 additions and 91 deletions.
diff --git a/README.md b/README.md
@@ -6,6 +6,7 @@
 Thin Hook Preprocessor (experimental)
 
 ## Notes
+- **[Vulnerability Fix]** Since [0.4.0-alpha.9](https://github.com/t2ym/thin-hook/releases/tag/0.4.0-alpha.9) with [Fix #336 Apply ACL for super classes/objects](https://github.com/t2ym/thin-hook/issues/336), ACL is applied for super classes/objects of non-global classes/objects and instances of non-global classes. Prior to this version, ACL is not applied for super classes/objects of non-global classes/objects and instances of non-global classes.
 - **[Vulnerability Fix]** Since [0.4.0-alpha.8](https://github.com/t2ym/thin-hook/releases/tag/0.4.0-alpha.8) with [Fix #334 Apply ACL for reading the target property of `receiver` in `Reflect.get()`](https://github.com/t2ym/thin-hook/issues/334), ACL is applied for `receiver` in `Reflect.get()` to read the target property. Prior to this version, ACL is not applied for `receiver` in `Reflect.get()`.
 - **[Vulnerability Fix]** Since [0.4.0-alpha.7](https://github.com/t2ym/thin-hook/releases/tag/0.4.0-alpha.7) with [Fix #333 Check constructors of Object.assign() source objects](https://github.com/t2ym/thin-hook/issues/333), ACL is applied for class instances as source objects in `Object.assign()` by checking their constructors. Prior to this version, ACL  for class instances as source objects in `Object.assign()` is not applied while ACL for global objects is applied properly. This fix is to supplement the fix for [Fix #324 Apply ACL for S_TARGETED normalized properties with S_ALL normalized property](https://github.com/t2ym/thin-hook/issues/324).
 - **[Vulnerability Fix]** Since [0.4.0-alpha.6](https://github.com/t2ym/thin-hook/releases/tag/0.4.0-alpha.6) with [Fix #331 Check for all property access of destructured argument objects](https://github.com/t2ym/thin-hook/issues/331), destructured argument objects of functions are checked against all property access when called. Prior to this version, all properties of destructured argument objects of functions can be read without S_ALL access.

diff --git a/demo-frontend/components/thin-hook/demo/cache-bundle.json b/demo-frontend/components/thin-hook/demo/cache-bundle.json
diff --git a/demo-frontend/components/thin-hook/demo/cache-bundle.json.gz b/demo-frontend/components/thin-hook/demo/cache-bundle.json.gz
diff --git a/demo-frontend/components/thin-hook/demo/index.html b/demo-frontend/components/thin-hook/demo/index.html
@@ -15,9 +15,9 @@
 <html lang="en">
 <head>
   <meta charset="utf-8">
-  <script integrity="sha256-ySIoybD7rQ0CnACIIjWk+x/573QY1pMz1/aOZcXyOdc= sha256-tnxjnvxgYM4+LQQMetxSEqWGJ9k0duZ42mrA45zvbIk=" src="../../thin-hook/hook.min.js?version=668&no-hook-authorization=6286bfd48a14947400ad2ff4792038742dcc44bc75da05e7bd4002341b52ad93,a578e741369d927f693fedc88c75b1a90f1a79465e2bb9774a3f68ffc6e011e6,log-no-hook-authorization&sw-root=/&no-hook=true&hook-name=__hook__&context-generator-name=method&discard-hook-errors=false&fallback-page=index-fb.html&hook-property=true&hook-global=true&hook-prefix=_uNpREdiC4aB1e_&compact=true&service-worker-ready=false"></script></head></html>
-  <script context-generator src="no-hook-authorization.js?no-hook=true" integrity="sha256-Yoa/1IoUlHQArS/0eSA4dC3MRLx12gXnvUACNBtSrZM="></script>
-  <script context-generator src="integrity.js?no-hook=true" integrity="sha256-umfsL1wG12gmqJkCN/cIVxeQng3Uts+Dl4/hmUQWIA0="></script>
+  <script integrity="sha256-AdGtsMJDiWbYcclUrPOU6HnxHrkSCU2magG8z9TKaI0= sha256-IoqT3MjwZIPY4ZZcrOcwf8C06fLG6yM9ogNq+zLujMg=" src="../../thin-hook/hook.min.js?version=668&no-hook-authorization=c70c531905679ae32dfd7b6b6d64c818d1f7e563a60e27a49b9f119589581ab3,a578e741369d927f693fedc88c75b1a90f1a79465e2bb9774a3f68ffc6e011e6,log-no-hook-authorization&sw-root=/&no-hook=true&hook-name=__hook__&context-generator-name=method&discard-hook-errors=false&fallback-page=index-fb.html&hook-property=true&hook-global=true&hook-prefix=_uNpREdiC4aB1e_&compact=true&service-worker-ready=false"></script></head></html>
+  <script context-generator src="no-hook-authorization.js?no-hook=true" integrity="sha256-xwxTGQVnmuMt/XtrbWTIGNH35WOmDiekm58RlYlYGrM="></script>
+  <script context-generator src="integrity.js?no-hook=true" integrity="sha256-qGJhmNp3ngichWzx0FXO5696KBV2iWIypO/e81lQXb0="></script>
   <script context-generator src="disable-devtools.js?no-hook=true" integrity="sha256-qBIJIoIJlBCXrEHFvaO8HNZDdeabfIETr/aML+Zyn/I="></script>
   <script context-generator src="context-generator.js?no-hook=true" integrity="sha256-Q3SuHyjOwrlpq0iIlaQmYkTWXijh+Cco/SzTkTD+DZ4="></script>
   <script context-generator src="bootstrap.js?no-hook=true" integrity="sha256-TqPlk5mugojW8S5owdMaeSZi4Sw/xmbQjb39/JFLAJE="></script>
@@ -49,7 +49,7 @@
     };
   }
   </script>
-  <script context-generator src="cache-bundle.js?no-hook=true&authorization=dab42b9249fe295e1394fd1da71463ee5bbb20d6a9ea5eab89c3cb8ca740cac3" integrity="sha256-xZ1Ebqkx3yhzbVhtwmh3Mdrbczw8/WRMffOvs2pq45o="></script>
+  <script context-generator src="cache-bundle.js?no-hook=true&authorization=676038a10280e5bc7ee710d7659c947ae28a314601afe5d25fb11b95544887d0" integrity="sha256-xZ1Ebqkx3yhzbVhtwmh3Mdrbczw8/WRMffOvs2pq45o="></script>
   <script src="hook-callback.js?no-hook=true" integrity="sha256-ydm7reZ8kMwmKvdziI91cDpCpJP23TFeD9hYErm7ILs="></script>
   <script context-generator src="script-hashes.js?no-hook=true&service-worker-ready=false" integrity="sha256-ugdlTRwkonG6D6fuXFXNYMAhM7DlPLa7bmNNpHOx5UA= sha256-m/JmtuLLQaIPCmfzjLaU/dNLkgZlLKlQQZqfUXXCk34="></script><!--<C!-- end of mandatory no-hook scripts --C>
   <script src="../../webcomponentsjs/webcomponents-lite.js"></script>

diff --git a/demo-frontend/components/thin-hook/demo/integrity.js b/demo-frontend/components/thin-hook/demo/integrity.js
@@ -331,8 +331,8 @@
 
   RSA.publicKeyBits = 2048; // number of bits in RSA public key, which must be at least 2048
   RSA.publicKeySize = RSA.publicKeyBits / 8; // number of bytes for RSA-OAEP encrypted data size
-  RSA.publicKeyBase64 = 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPkSeM1J1vTEl+73JIykpH1h7nf9sdkN6TqKpVmuljpeWYOrgmC9psLYX6d3FSU28HQRULGy7kuGv7CAQ0LJkSvKLwKTxZmH5WpL3q9luQXkAfMKmd5EO7jTyjM7WxJX466ZDDVVIeI6iJje8rbA1j4BIUtPQjJbQ9g/Sc5Ra5YHmLwkQyCgkaY/2c2G+J7QaXBYqH9fv5dw7bKAyzusjI41yiKr6KM4Ijt0NeGm06zdki/6SFJ11n/5R7ohxI4rh3jAX9Rk1e+FAAIH4MeKHsr9zWMeJ040I/4ce15bCk4eMMvLspM7CFj5h9JCJNVAZ+NoyOCq8Upk+0PpP/sHQIDAQAB';
-  ECDSA.publicKeyBase64 = 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYSnpsBirw0uDoUhaCO0xv+NO8+0R75ag/7d9O4vR+0zsag8ISz9+L2oRBFFQ0GnLrfRZvvE/cdBUrzX4+gv7cw==';
+  RSA.publicKeyBase64 = 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQcAisrjCdhbhuzT/y4fIx3clqPoJhwm6/+cckS0Y6zQT86cIsTAMREtPiI4ZXzyaZtVuarYAsTwBdXmkeGZ5OJTbyLZoWIWuDCl+/dhxRiIwCCoKmuhsaoL5zvyrD2Dz/paC88R3BvTwQh06/9GlxtaEnfTRLL+c3mjuELR/MX8vR66izD5l2nr/N/LPPGWZnNxgQxisCy2XA/PV1+t+fdrw9g24mlWBRDSX1YIjs5Pg0BKJe6DSzrTzT1H990ZeAb+vIIJ1MSDgnOvQksnXTF13Jx0YS3paa467UUWL31bg/p2HHniSc+xi1WtyJDzFkoXZYdvGEeu0EE/JpYwrQIDAQAB';
+  ECDSA.publicKeyBase64 = 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEuc+yvVXoynbQhb8GLjIK2J9QNmEhZlwcyD55roqx3qNg1NX8u+wsoWGJ2G6mmM7xPyYFfkfL/WxErh42cHWLeA==';
   ECDSA.signatureLength = SHA256.hashBytes * 2;
   ECDHE.publicKeyLength = 1 + SHA256.hashBytes * 2;
 

diff --git a/demo-frontend/components/thin-hook/demo/integrity.js.gz b/demo-frontend/components/thin-hook/demo/integrity.js.gz
diff --git a/demo-frontend/components/thin-hook/demo/integrity.json b/demo-frontend/components/thin-hook/demo/integrity.json
@@ -3494,13 +3494,13 @@
   "/components/thin-hook/demo/bundle.json": "NKwjN4DXt2s+80XoHlFlWbnI5rklchdQCerPDjtfBIk=",
   "/components/thin-hook/demo/cache-automation.js": "x2G0JD1JJOVC3rhFCrQnigaYlTu7C5vhOTRHBixXcS4=",
   "/components/thin-hook/demo/cache-bundle.js": "xZ1Ebqkx3yhzbVhtwmh3Mdrbczw8/WRMffOvs2pq45o=",
-  "/components/thin-hook/demo/cache-bundle.json": "L5J/nQbq4mSVmsVVjFc49xkPIuhYxbjpDkIrNdXJQq4=",
+  "/components/thin-hook/demo/cache-bundle.json": "dTgLjIJsASMob1J19cijHfTZUW6QnCiRX2uX+nLu5bc=",
   "/components/thin-hook/demo/commonjs.js": "KjmEtrrjEj4WCR1bjCEOZnXhe+9w4wJoaUg40WU0FuQ=",
   "/components/thin-hook/demo/commonjs2.js": "tiHpF2aP1nZUY/O31R9j/kWne3jFgqPIds0MwNLxhk4=",
   "/components/thin-hook/demo/content-loader.js": "AkIBbiiHsyKrKLiH8Dd5xjiZ2yMrsDbXlKAnjbnlQzk=",
   "/components/thin-hook/demo/context-generator.js": "Q3SuHyjOwrlpq0iIlaQmYkTWXijh+Cco/SzTkTD+DZ4=",
   "/components/thin-hook/demo/disable-devtools.js": "qBIJIoIJlBCXrEHFvaO8HNZDdeabfIETr/aML+Zyn/I=",
-  "/components/thin-hook/demo/empty-document.html": "a61sNB4y45J3yj6N9tdIIqgYFWoyt4ZyfrpTUE8QTW8=",
+  "/components/thin-hook/demo/empty-document.html": "2NmtAV6S7EE62pm5rhDm85UQMDHLUlvheFyUEp9c6VU=",
   "/components/thin-hook/demo/es6-module.js": "fqNv9zHgC8txL7mU0+zySAwIQNRjpTVJtDI34AWzvOY=",
   "/components/thin-hook/demo/es6-module2.js": "m8es06TrC+X9xZ9p6bWrs0s4su7FcMoZak389t8NOyY=",
   "/components/thin-hook/demo/es6-module3.js": "qq7q9Gk9vgQSZmElUAaLOEQxALCbP9ysHKqQjwyas+Y=",
@@ -3515,7 +3515,7 @@
   "/components/thin-hook/demo/hook-worker.js": "W2FaqIWgUYRmFTvm7LLP7vEwDxgf9gypHK2WRlnJIFI=",
   "/components/thin-hook/demo/index-fb.html": "D9idm83/VxddYcF1L/fb3Vu6W5n8IDX4lH5KG66DSFk=",
   "/components/thin-hook/demo/inline-script.svg": "NRdobFKL9ufnJCuVHoPLUUsXRBgGgjY3EdwWwHjm/GQ=",
-  "/components/thin-hook/demo/integrity.js": "umfsL1wG12gmqJkCN/cIVxeQng3Uts+Dl4/hmUQWIA0=",
+  "/components/thin-hook/demo/integrity.js": "qGJhmNp3ngichWzx0FXO5696KBV2iWIypO/e81lQXb0=",
   "/components/thin-hook/demo/invalid-document.html": "KAPziibQgBjvjZ6VlnXTeFUTkAuZVpd3BtX0pBKBzzI=",
   "/components/thin-hook/demo/lhs.js": "h12n3evI8zqX4nFe66ZlwpbdwgB/o8YZJjkxFVPVOIQ=",
   "/components/thin-hook/demo/locales/bundle.de.json": "yBx145NiuX8NYTjr4YnQDauqpPg2forcuXjFqtzYq70=",
@@ -3551,14 +3551,14 @@
   "/components/thin-hook/demo/my-view2.json": "PptwWPvugpMTpsXZFfaSVwr2BcYSGJkfhjEiV6RrFJI=",
   "/components/thin-hook/demo/my-view3.html": "pSmI7cALKmeqoKKZefU8NicI4V0ZUcScMGSklkVBeFw=",
   "/components/thin-hook/demo/my-view3.json": "uatxD9AZkiGiFvGsMqhTVLNxAqDiylbvuGors1Hb1hc=",
-  "/components/thin-hook/demo/no-hook-authorization.js": "Yoa/1IoUlHQArS/0eSA4dC3MRLx12gXnvUACNBtSrZM=",
+  "/components/thin-hook/demo/no-hook-authorization.js": "xwxTGQVnmuMt/XtrbWTIGNH35WOmDiekm58RlYlYGrM=",
   "/components/thin-hook/demo/normalize.js": "EaJ2a5m9q6ITNw5y03+YJHfRvsorhPmTbAAioiO8jSg=",
   "/components/thin-hook/demo/script-hashes.js": "ugdlTRwkonG6D6fuXFXNYMAhM7DlPLa7bmNNpHOx5UA=",
   "/components/thin-hook/demo/shared-worker-client.js": "WE5mA1PRKWU5fULLeEqjSJ5RpFF3uf4fWyvNkGK83D0=",
   "/components/thin-hook/demo/shared-worker.js": "B9AZYCwUFTYmnEXQ0hLA6JJbVR5vakBrX3426XaEbbI=",
   "/components/thin-hook/demo/spread.js": "gpfCZwAb/tn4HErIHzwhcCC0eMbvuzExYzK97dlma2A=",
-  "/components/thin-hook/demo/sub-document.html": "J06Ujt6wcIQmbafmqRUTnob5aXbEaVmVgbISfOvN+T8=",
-  "/components/thin-hook/demo/sub-sub-document.html": "0A/KD6tE1u36N8v1tSRobHulGVlxZmyw8RQ8/R0shCU=",
+  "/components/thin-hook/demo/sub-document.html": "Ks82JPn522Yad41HNjLoU1qE9KKHpcdkKB4DjksQCJU=",
+  "/components/thin-hook/demo/sub-sub-document.html": "JN5K3aFdOG1u2iRe0SeWvThNEdmbjIlZNPwmCM9MIjU=",
   "/components/thin-hook/demo/unauthorized-no-hook-script.js": "YjNcphHrG7UkmBspO6aCgkw+hh4Y7XvsD4TmuplpABE=",
   "/components/thin-hook/demo/unauthorized-no-hook-worker-script.js": "j5e2u8zJ41kNLbACDJCY/DJkneDOzuWJwZ+lw2bh1XE=",
   "/components/thin-hook/demo/web-worker-client.js": "stBjyffqLegDpNIyI3pc9q3H0lmL961LWhGr0eR5N/0=",
@@ -3573,7 +3573,7 @@
   "/components/thin-hook/demo/xliff/bundle.fr.xlf": "qC940/MZ/rG31gok/D9KPHYD/xRCkziCBIUwhgxdovI=",
   "/components/thin-hook/demo/xliff/bundle.ja.xlf": "QbZEDWcoqnJyqKIHA8rGr7rNYmG67RAHOyw1/oEXWu8=",
   "/components/thin-hook/demo/xliff/bundle.zh-Hans.xlf": "AyxbV4426iZK9PQB6O+s3JIoA3sO+4lVOQlSrwP7+/U=",
-  "/components/thin-hook/hook.min.js": "ySIoybD7rQ0CnACIIjWk+x/573QY1pMz1/aOZcXyOdc=",
+  "/components/thin-hook/hook.min.js": "AdGtsMJDiWbYcclUrPOU6HnxHrkSCU2magG8z9TKaI0=",
   "/components/vaadin-grid/all-imports.html": "LMCPxNwxFswTTdXlEHbdRxOpL5SpqCPSHCLSit7xLw0=",
   "/components/vaadin-grid/bower.json": "0nox4NkE51Wy3KhWPvlJ7leWO6MhyCx6utOGLMOCBxA=",
   "/components/vaadin-grid/grid.gif": "bYmTEFtW4rCFnHX6m7k0XnOBHnVBsgAs4WEPiEoy4dc=",

diff --git a/demo-frontend/components/thin-hook/demo/integrity.json.gz b/demo-frontend/components/thin-hook/demo/integrity.json.gz
diff --git a/demo-frontend/components/thin-hook/demo/no-hook-authorization.js b/demo-frontend/components/thin-hook/demo/no-hook-authorization.js
@@ -13,7 +13,7 @@ else {
     //   hook.parameters.noHookAuthorizationFailed
     // JSONs are output to console in the learning mode
     //'*': true,
-    "c92228c9b0fbad0d029c00882235a4fb1ff9ef7418d69333d7f68e65c5f239d7": true, // hook.min.js
+    "01d1adb0c2438966d871c954acf394e879f11eb912094da66a01bccfd4ca688d": true, // hook.min.js
     "a81209228209941097ac41c5bda3bc1cd64375e69b7c8113aff68c2fe6729ff2": true, // demo/disable-devtools.js
     "4374ae1f28cec2b969ab488895a4266244d65e28e1f82728fd2cd39130fe0d9e": true, // demo/context-generator.js
     "4ea3e59399ae8288d6f12e68c1d31a792662e12c3fc666d08dbdfdfc914b0091": true, // demo/bootstrap.js
@@ -33,7 +33,7 @@ else {
     "c135fd6ba3cad41e63985ecca191995bf311abc756c5f574ef5b641e7db56914": true, // (function writeln2() { console.log("no-hook script tag via document.writeln"); })()
     "e233738578fd7e8f2e961fb11885e2c187146314a8e3fc65692633ff89c5d34a": true, // (function writeln4() { console.log("no-hook script tag in div tag via document.writeln"); })()
     "4f0395d52a8c1c7edaacacade9c31fe18555b79ce963dfb1abaaa34990993374": true, // location = "about:blank";
-    "ba67ec2f5c06d76826a8990237f7085717909e0dd4b6cf83978fe1994416200d": true, // demo/integrity.js
+    "a8626198da779e089c856cf1d055cee7af7a281576896232a4efdef359505dbd": true, // demo/integrity.js
     "ba07654d1c24a271ba0fa7ee5c55cd60c02133b0e53cb6bb6e634da473b1e540": true, // demo/script-hashes.js
     "0242016e2887b322ab28b887f03779c63899db232bb036d794a0278db9e54339": true, // demo/content-loader.js
   };

diff --git a/demo-frontend/components/thin-hook/demo/no-hook-authorization.js.gz b/demo-frontend/components/thin-hook/demo/no-hook-authorization.js.gz
diff --git a/demo-frontend/components/thin-hook/hook.min.js b/demo-frontend/components/thin-hook/hook.min.js
diff --git a/demo-frontend/components/thin-hook/hook.min.js.gz b/demo-frontend/components/thin-hook/hook.min.js.gz
diff --git a/demo-keys/keys.json b/demo-keys/keys.json
@@ -1,11 +1,11 @@
 {
   "version": "version_668",
-  "rsa-private-key.pem": "-----BEGIN RSA PRIVATE KEY-----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\nSBWyL+dygIsGiQdWbP3ppyT6mPMKPrZJuHDg/eRZPRsPUSSpYvNIIQ==\n-----END RSA PRIVATE KEY-----\n",
-  "rsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPkSeM1J1vTEl+73JIy\nkpH1h7nf9sdkN6TqKpVmuljpeWYOrgmC9psLYX6d3FSU28HQRULGy7kuGv7CAQ0L\nJkSvKLwKTxZmH5WpL3q9luQXkAfMKmd5EO7jTyjM7WxJX466ZDDVVIeI6iJje8rb\nA1j4BIUtPQjJbQ9g/Sc5Ra5YHmLwkQyCgkaY/2c2G+J7QaXBYqH9fv5dw7bKAyzu\nsjI41yiKr6KM4Ijt0NeGm06zdki/6SFJ11n/5R7ohxI4rh3jAX9Rk1e+FAAIH4Me\nKHsr9zWMeJ040I/4ce15bCk4eMMvLspM7CFj5h9JCJNVAZ+NoyOCq8Upk+0PpP/s\nHQIDAQAB\n-----END PUBLIC KEY-----\n",
-  "ecdsa-private-key.pem": "-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgiXqN6xtRjnodsVVS\nSQS2mejsrXmm5Zlvaf636kRb9m6hRANCAARhKemwGKvDS4OhSFoI7TG/407z7RHv\nlqD/t307i9H7TOxqDwhLP34vahEEUVDQacut9Fm+8T9x0FSvNfj6C/tz\n-----END PRIVATE KEY-----\n",
-  "ecdsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYSnpsBirw0uDoUhaCO0xv+NO8+0R\n75ag/7d9O4vR+0zsag8ISz9+L2oRBFFQ0GnLrfRZvvE/cdBUrzX4+gv7cw==\n-----END PUBLIC KEY-----\n",
-  "session-id-aes-key": "hVYv4M8zJ/XXL4wWim6WacYEGrEcHJFaJnR1ULwUI8k=",
-  "session-id-aes-iv": "hyPK8SGu7ef/fbDE",
-  "scriptsHashHex": "a46a3d0b3afeaff14b4546c7c7e690f3405782ed253822093098e819b450d82e",
-  "htmlHashHex": "11bf076b64ca1f2e2c48ebe5fc1e0a1999496adf2c9d9c986068fe9f3d639498"
+  "rsa-private-key.pem": "-----BEGIN RSA PRIVATE KEY-----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\nOtitKneFygyiE2058wpuCfw+xy2y/q/VSkOmYRSIQs1qRCwPUkYu9A==\n-----END RSA PRIVATE KEY-----\n",
+  "rsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQcAisrjCdhbhuzT/y4f\nIx3clqPoJhwm6/+cckS0Y6zQT86cIsTAMREtPiI4ZXzyaZtVuarYAsTwBdXmkeGZ\n5OJTbyLZoWIWuDCl+/dhxRiIwCCoKmuhsaoL5zvyrD2Dz/paC88R3BvTwQh06/9G\nlxtaEnfTRLL+c3mjuELR/MX8vR66izD5l2nr/N/LPPGWZnNxgQxisCy2XA/PV1+t\n+fdrw9g24mlWBRDSX1YIjs5Pg0BKJe6DSzrTzT1H990ZeAb+vIIJ1MSDgnOvQksn\nXTF13Jx0YS3paa467UUWL31bg/p2HHniSc+xi1WtyJDzFkoXZYdvGEeu0EE/JpYw\nrQIDAQAB\n-----END PUBLIC KEY-----\n",
+  "ecdsa-private-key.pem": "-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQg9MmhZRacSTtTsrER\ncGAzpSyvH4AmSA8Pet4c2ZBzvCqhRANCAAS5z7K9VejKdtCFvwYuMgrYn1A2YSFm\nXBzIPnmuirHeo2DU1fy77CyhYYnYbqaYzvE/JgV+R8v9bESuHjZwdYt4\n-----END PRIVATE KEY-----\n",
+  "ecdsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEuc+yvVXoynbQhb8GLjIK2J9QNmEh\nZlwcyD55roqx3qNg1NX8u+wsoWGJ2G6mmM7xPyYFfkfL/WxErh42cHWLeA==\n-----END PUBLIC KEY-----\n",
+  "session-id-aes-key": "JFleovzup0L3PyWNEYDQh+sE2hiz1w0elIMpWkY7lE0=",
+  "session-id-aes-iv": "0lKaz3uYtdWolwqA",
+  "scriptsHashHex": "ac2f9892ef0eb8b358857daf3f7df956dc9b86803f81d94fa8f994924fc83de4",
+  "htmlHashHex": "de6664c9e252ee34a546608212711b5ce399538b92804a2d23741abc5423fb85"
 }