From fc80657ee8b81ba58eab2cd3908834b93c2c8bac Mon Sep 17 00:00:00 2001 From: LinkinStars Date: Fri, 14 Feb 2025 11:40:36 +0800 Subject: [PATCH 1/2] docs(docusaurus): add security model documentation --- community/security-model.md | 29 +++++++++++++++++++++++++++++ docusaurus.config.js | 4 ++++ static/img/community/captcha.png | Bin 0 -> 36356 bytes 3 files changed, 33 insertions(+) create mode 100644 community/security-model.md create mode 100644 static/img/community/captcha.png diff --git a/community/security-model.md b/community/security-model.md new file mode 100644 index 0000000000..0147f70120 --- /dev/null +++ b/community/security-model.md @@ -0,0 +1,29 @@ +--- +slug: /security-model +--- + +# Apache Answer Security Model + +This document outlines the security model of Apache Answer. It aims to help users understand the security model and make informed decisions about deploying and managing Apache Answer securely. + +## Admin Permission Security + +**Admin users have full system permissions**, which includes access to potentially vulnerable operations. While we assume administrators won't attack their own websites, it's crucial to exercise caution when assigning admin privileges. + +So, if a security issue comes up in the administrator page, this is usually not considered a problem. Because the administrator has the authority to do so. Unless a normal user can overstep his authority to operate outside of his capabilities. + +## Captcha + +CAPTCHA is an essential security measure to prevent automated attacks and abuse. Apache Answer will not be responsible for security issues arising from disabled CAPTCHA protection. For example, if the user disables the CAPTCHA, it may allow an attacker to crack the user's password by brute force. + +![captcha](/img/community/captcha.png) + +## Custom Plugin Security + +Apache Answer only guarantees the security of official plugins distributed through our [official repository](https://github.com/apache/answer-plugins). We take no responsibility for security issues arising from third-party plugins. + +:::caution + +If you find a security bug, with that in mind, please do not file public issues. You can follow the instructions in the [security policy](https://github.com/apache/answer/security/policy) to report it privately. We will fix it as soon as possible. + +::: \ No newline at end of file diff --git a/docusaurus.config.js b/docusaurus.config.js index 8655389dd2..e26b205471 100644 --- a/docusaurus.config.js +++ b/docusaurus.config.js @@ -139,6 +139,10 @@ const config = { label: 'Security', to: 'community/security', }, + { + label: 'SecurityModel', + to: 'community/security-model', + }, { label: 'Contributing', to: 'community/contributing', diff --git a/static/img/community/captcha.png b/static/img/community/captcha.png new file mode 100644 index 0000000000000000000000000000000000000000..7a816adb3be63776731f9ed4924574c8dcd1c447 GIT binary patch literal 36356 zcmeFZWn7ePw>~T_2vP!4Lnt7^fFekTbfX|$A|NH*4Jxg4NlJ@!cPLU0HFPsbcZ0+* z?}^WT_I~!hz4w2AeSg2_%Q)jO*L7a&T<3~o9czU=RhA*Zqr$s(?HYlctfcC-YuDYt z`ybb_!Rv62=^FS4%~4fG{917z4fsHRO-}O3b2o#{8Qez2BUI;JKcz((X|!-ac5J1b zMMCO3!_lY2<&yD{sZSZKj*IRx{m@VieQa@BMPX_vPAoUEeSu1U)bf$vakYDmY{0@u3rfO%5|E1fJ8R(wJn^9RZ5%K|eWL!=(-5z%6kZupt+Z2Cu zXo<2~b#0rNB82vXH)or49aj3FcckA(a_HB8ucfHJ^DmcfMyFD>nQg3VJXtKg0EkJ68pa= z(`xpr8!j;veL?gVn;`n@TO6~^*67Vu3-aC7@v^MO%d?H5=>3FhKVzS=3;CYb_&u5jB z?U|)+mh_(BA-VB~;KRl*f==}U4Y?wnDiRkOmv_KAeP{brfKNax@SGf~bJrJnq}esY zV=*Y{hl=b(yLJGoeZ*J3c+ zZ+^|w6Dllwa3fp0HOpcsw|PmeG01AJxk)kkF|-h6+k#}KF!Zt)O9vaMK3Zbf?=0~* zmUa=w*%EtS{R^fXKAni(*~t!_hOB71*CAZy?OEeNpP<9ZjH{W)%=$aYo@x-bZZ zh=v}j4!MsOYL~lgP5LQ0r^K;oD)(-WV}mOM>mt5~kg9%u%Fwx+5-7w?lmgYQu8knw zy7|&Qb-0~z8?3`mKZ5d+w8zmp+17ktsLvYJ?o;@ffv3`T3+ghm7E`D%^gKL9@=wo5 zKZ33kx>ye5Al3iSHfdA8#(cUMqw;NAGr@awDZNNZg2?w`FUX`nO?bpuKAxaz_z8I1 z8!1!guw?Q*n0T<(e!+wivT(IAdM~=8neu&Z<+5)F7R-;Gm)1Di`}-&n1s>e*5_1M= zF>LYSa^E+3^l2aQmhi`TnQ@MoKl&Qaw4!~A6QSEGox+^=Nop*+_8@VvpGYPVYi}W(O?x#IqL!!JJ8&R(_?3`Og#C1XiL~tjNt4xa z5Kzc$dBjc&>anIBp?Y+VYL2`^AOA{X0e67qm8r;-3d0ssYQ3YL@b&|d7=0LCrOk{E zIlC6o{-%J-<~_AsMY)=a2qwfl?XW27;tthuSJWMu`VWsD(cYWEfP|`nQvr91yv(fT zMTdM`J2oo(V}M}tUhFd$l(Xf+q097itWf*T$*iaCfM12Yd;I%45*o5A1yO#{@t$(9 z+57xcpF|*j6nOKaZY9l1#1$N15S-*1^Fy};?GUYg-bA~>edz|kY8+v4%Oa3c#sO_jv^cRUuIsp1 z*lj-FJ~$d%;MA*q>QqOK%u;Q^vK!NP?JlaBwdC-1giBEbG|5z=fT=NU4<#$No_c(s zmGq)%F<~5dFW&fHd{HYW(HF%qjv-OsOD~!G`sIcR?$y;#m$ZMLPHz{K zG)GH?kz>)wyk&BowhuZzU7D=2S_1cs20Jr!!IctETUwp&dpW^gmYMFpZWeyll3?gl zw{y@(ZBzTCxaHEL)6r|YZbee_;of8YuM(m=`075=5jingI+IeO>C-i~>9O~oeY;RB z2S;!a9QIGPFwc{s1v(zf*i!-p+o3`JD>tD%hYX-Fc+l_I8BW{WuW8$S`U-9v?!n?v zmq#py*d$(^u5%oy>6ogtxC0_ed&z+@htxY|)t=jRGTeo(XNMN>xD=;wX+uYz&t}$| zdiDV&lK#y%*P~JH`-`}%F_Wh`hQ3JkT$Oa2ZL5iL({lHNWk2L-zM9N^jY4w~jnWrS z)GMThBA>LBIL*QgLZx|yoY!MdbqZS8nlI0+PJf1R zE-rS*EbrhWRcZ>JWd$zwCZBB9P4KB<_Nk(!j@e9BS`2LDB6%D}zNo7fXcT>pJrvHw z{(N*~dVaj+usQzlph{{kY#jv*!AQzfb@gzwvd{Te&GNab)sVZZH-V!i>hipVzq8qC zP1P}6f6j5;Q?VB-mebJS@*o|RcyKI$+8M5VJ#LonO}-o3tOC`qudFj9puYUI5V7p( zf^5nx$=jN&dekp?M>h~l=rH>zB39R?jtOyLjO(__DS#&2#tdD+!OPpDnd!VQX*FH;t@xOTa|Mb~+Q~lIFk|WulwhSy)dhF&T7~I#bu_53i z%-d(*^RZdsX3aNr8|ueBI#9G4A`Al-+Vg-R^>qrLeWugStZ=6D&TLaJB2f6=yi+*v zbY#wDkCBS1{rWA9cZNskORc}wE zL2d4V`kAS*w{8##26s+{q@+Is2-I1w1fO*S(E zrxyqP-t$6vj$?bPwOn6J&0DkV=D%g~s$X85dauw~w=T31igIgq2j^IjG%F->?wI|^v3mp)0(1ANN`M5f=ki$c>GH@CN{R_h#+$ z#20Q>zP-x3VR4<_&gHt(#wgUhosqz6ZKJf0qJ8iuuG@FPme|Pp8oU zFCmZ3G+(^ZYS=aOkCKSp`8L&0V*Y+`%g>6M8v|Grn>)QuU*FR3JMg8Y76)edm&(rL zZgdRgDjmel%WrL%RH8+6$FRVRBZSF^;_P**zOy1S&PQ5s7^~j1?UF(^}0 zh07E+Be-X|*8cuFTb@;`#1MzF1yvFM@opPovH=`Z=+@k&f&phJM@c5d^MtLz#roOO zW0R;8>0^VGr)Y#lQMpTMhs>jKqT*279GKObL$FTFevFEUy&j{qCT7{_@i5iLW8_+| zi1YgMgIv@?glNy1xH2qy0^>e>*5vSyF)TeB9$%aVy#M;vQKj=wJD~e$n8*9_qujV#q^y9*K~mlVF?xTlA=C%*yn8|HnqF_zHievrhLusXh_q@V^| z?1A=P^6+T zX(TLoBI8dLw z2@x`nSNsKnOZ1K!`vqzEoGUj7!FAAiEQcRxN|smC3c4hgG>BgQ$};~vKDphnBT`Wr z+SGKh4;uta{?tj$ZT=#jiruiek)N=H&1L+piTC+2nKywVI4Rs{gn1_$0$R}I%og6m zafNtx+{EOQv>pjU;k&?u9;WJk_6urGTR(rU-)^$fm%4nuhkz zM%7*Cs+)Q0_YM;>0v~7Mx_KRqXui7kZSqjMV(jJ+B4E_E;&BlLzvb|~ISFN;5XQN@ zl{LB9%(O=dEy(0+XPt@R?dLcjwx6F^m(&>}->N25!rx_Attn-mmoWz(x)3HG8XO%M!=Pimvv8Y=bDl*m z&c+Ak?7-j?ez7m6>zK02wYqKs0)^(SqsBtE7)d-g^Iqq3vx0j0U>}i>EGm#WABh0o zLkUmhu7U1nkz>OCs*)j`)mhWFx`^M=P2wZ7@Jg#Oj&;&e-0sKLld@st&^OCZ8wKHG z+}_p|)oH?>KPvh~sGU+I`#9J7j$kn0V(|F-l5Lw=1^P{FueLhQ4DMc@VBo=uD5b)L zhbUVWXjkOwc^{2DGsF;J^b^~^v3hQBE>scd(gK2)IYjF09f*LF?EXqWo!uL%0exWq zTaD|*{IUJ|1$Ttz7C;aekz?zs?8~wmQ~&F2yrSYx{5BdP0k66EjKPYGEte8Ggx^7u zqxsj*YdA_)#fB{+uc&91tEX&kj4NvreFTnv=V6{-(B;cY+Z89$)nq*HM=!0f(wI8- z_^P$uqVDI`R09KK!iCnW0~xROJ7+7&Ujc)L4rvDNL~0Im;Ljm2z0*hX)ZHQ6C)QM7 z25b+tlbeJT7)5JtknIj|Mz7hYCKXEyd7mBn<#7{nz3RDLVN-tsGmk2Euk{Nmz8x*> zdHhL#wWj|_H~siAa4Bo>ESZ7C#)7POcy6mT9XH6?ZMNzm&|Bg4 zqzUVCUnf@>l9SNipA$i4o(D4_h_@bQeKZ{OZs)T9*yR`GlhybWwboicgLq@1gqZ^7#Kt9$D(iiG?pB#VHmq#~QtWgw| z8d=|<;5aP0duwCEB-<}Yqi5h+dez#w0)ff6LXJ5rCxPcwfp?)!l{~jeVJ|DfsHA6J zI9|=2Q-54s^S%7<{ZZ1jnX2wp#F=~oVkM6HZ_wMyyt&IVxKMRcaD&r-v;o~_UG`N7r%!)G7{0U2? zpTJ7_QK{9^T}U^)ZstDvinBkutA8s69TKHcV3+jiFkDlD0VGrvr-oIQBR!mX0eD{T zZU9@BR@gZZ4adT}b-ljl%%~31Kk39y^&Gx@Yq!*g+;T=)lXkE8^G|O*&6{v+h@AHX;IrHkYKX{NAIM?1esHkRT0`AtdFVCpI!7sS1OfDjVPPipPym z@!ploz+w3JFg&fYRCiy81dMxoY#oR!wkH#azB z$)rI_4qSlFR$%hbo<=s7+8op+n8yo(Fp1>2x$oO=0m*R@M(|-o#h9Bm8kx zmq_}hDM@w*&;<4Az4g@A4W93W1n7K~AbnDQ_fu1|3SXo-I)p_z<+?lzKb8=)N*a5r zfHNLn$}9rl>iBLwXEI74TCB zm$Yx)iAtXW*W`YeIhTz;au{ZO)+>hG6;>T`92yBY!mvK)t!={+YCc^~{$zSunQQrb6{Kk#dlu!=)69005w}lj!+Ms?GtADkK zI~c|kB6$cT9%}lND~io+wJd={|NaLmp3rq>_}HsdPsgOn_m((L;@AAM$p)~94u#{I zEPl1te+ek=GvYMMnbLw$S^nyy!h^3!1h{5lh5R-{S@sJZPfYV(^&}cKlMC|XMV>@5 zNSGj6{a?A}`E}MiZ}eE+JzluB7pjjL5X1$ykpMyikima{DKGc)F>skMP3Rsi(#23#gGm~?%?CWGs^41DcFF=y zVdYBu5^2_T%)2C5=4Ra%K78g#h-Y`(X*$UU&|LH7JctWSRlfzWU!JbebpxDZKW&H;$M*>?sOdN#dvMdMsd-$)oViq3NxWOCuaWn?!N98tw^0f80cp`86632fqHP0syFJV#EY&l=Sr-x|y2Q228wwUspp) zd=LDq0s^HpkwVL}9U-9Nmc=7yzo%dCgv)2@=}zv=1=KL-F#v)VK}o2$yO&8JK5@>R zaBLIpgB=iE7&)Yg({wTSWUUX$s9jA~r@c_K;DccrWF=NjD zOcmyR#|AeH$mmx~{#(e$=U>zdOxB0#WG4lz4Wp;-wRdyRg6vXcO8I?n5Crrb2QpCP4!gIv#!Ti+DxId#&y z{;CdRLPT|)GSP~$lO`ymMF=>rcZHI%y}>u|K2oo6N~{XNa~tQKZSt(qK7Q4g!k>9y za!h{zImr}R4lk&wz4hZLwp)tR>=3@CZ}-V*Z7?(J(W<=bakX*hO;+u4lY!r1hPQHC z%UOD$*cXi=s;5-U@nhYxzXM7g7wI`qaJqNHcowBw+j7aRTP1jhvfqz};g0|hMarVw zb-I#HH!z~3GIaKCTkXW!nv!;Rz;O6XVf<1-8>Lk~`ea|EL^SbCCWV)*1jZqNyw;A4 zf!+Kchx{KOyS}4m{HPpP>CP7lJC<8qaVf(VQdL#$Ia?Xc&3Wb&_tI)8n)PhH!Mj|o z1z)qqM!&)ega;xeZ1=5Re4k9w;D+12vqIV z$k+?3p*gv;vvd$g`*j}icweO{5y0Qdgws4^d0C{?_F#07=PV`OptJa)&`Y)XXywfi)ocP!9rDAZ>sGLMss z{v=HD!NnX#*6m>w6wqW<5J~%WR^cmvkh@1t(8>{SjlakxW6E4iY2`zsDHe%vOLpe~ z$%`0fCA`}UWSV*m0y3uF$m7ejGGBjfy0K^spoXzGIBHuj^t0Jg$2A4vKBIm?L-q|W zTlf1#QC_WDmDvgaOGJmG<$Edf={$p=eGq2a*e&d~n1Ut>E$-a-Ra45Xq z%R5JND|FOH2OTzb-EEx15p2=SbJEay{7=X?tB%JcP~dZ;a}*M=XS9G%Xo&??ltYRZ zj*8V`E&)V_@t|SPS!Zt38ev4PJWncs`gX3WHYSGVssH2xyg6$;-)?YNNpsN&jmd`aJt|Bb1UX^|JF+ax7EGWAK0tk%{E4hmO7|yxkY(X0q}lWmr=E5l7}tn zu=K-Jga$w>1-`4t9KFThzyE zz~s}3`Po@kfv)+rp8&+h!+Ya)PC)&b-TddXb1ONHyxjBN1kUtA!xjUlfUv8qX^%TG z<11cXE>qDV^^#6f`xJl%Ne-=DcN`~u!O|Ew{XiC4(k}4K!uE`5{tAi1C-@RJq&K_@ z&&qM#nYD1un0N&09${ji$NT{XApi9ZmPEJ_fC9ru7=3=t_s5{2L+!+t;ZRhe~9z0p__dW%jSY+ z{HSpA2gs4WB|1a^ZB?K0PW+8r(%hMP=L2gJAZXguW;ku{!xrT6l%K#3rcmayEKn|W z!#YeJ13>i+{ylOzdCiUib$)J;TYz}4M$c=nJv`>atPk)l3811O$GDQ(5015a|k@k6Ps?~w&!3DgUSXG8&z#8o4fF5+#{llTyg z#VB2k&^b`q=#f=bNS)(KXdvB73#!VYG4peIsVfsiy32P3wl~}z9cuyjcu2EM&0};( zHCsxOU(j|Y0Drk`rfW-ivzTq`U3Varn{i0y^*|5z@Z(DR`Q&?s_JjJ>;xg`oh2R z^#m6pAH?JJ{vdbH*d|CN8n!iAPZ%xy;3uPjviNyHB-_{uTxqZB9Rb|i3PT|hP~w~d zJHDzhLtlNTxRa;7)Vs2a7ttqLROLgb_wrs5x|!!gQ%&@0?Tp5U49iXA22RH@AZJi- zXa%D3XVXw0k0hVx@oQFqMX(Rf|*bMuB$n z?C|Kd5Vc<3qK9kxuLc^5hV~zVM1-`7p-`!_#Cfo=_Yz~?Te*e!lXK)D&fVufWEHAc zRUcUbIPxzMHgLZFyXf;jD&Mj7znrmZOrL5x98`Gn^#*d(rNsxyXdnWu87$D`)NXLG z9tb+FFHiZW1BGE}ytcFNV!+uroZ9jz1|VkysFQWF zyM9WqD$lh0RyVm^XRzI)3^Z!)v-rGOzfl|m<7i-4HxM|=Fz6Ib5a7%<3?F@HnaDJZ#{{QeU8k=XO+~27coU4FK!uUK zclq!MP&9Eob5?fml3Lq25jcHibM@+mWA<3>Q^EHjg-n8F?iihHP8c_vjgI;1=gY24 z93dSwUTZTVqR2S$SFSi0e`a(1w=dkVuDjWB{vZDE>QCf2#9Hrka}u@v`4s%+WPnQ( z{`=DZl9B&gApawA`L{s+Es*~qf&cOG4LU^7v#B6+Zs)5*1KpD*_EFxt3|3d!`{e~gyE zFjyMj<+~o1;;8(3YLNPBCG_g(m_n-U9n$~H)%;qu?+%#Nc5zPiXOb>I&myngB#D9} zv$mCGt^yhV;TuG|vQ4zQ|3a_+Pj=LQu2I`iOmkbSoNFVU#VpaopZQ171mM9F!R6JIsYE!-3^y0kvsPQAEH>-BVz1K1b8G=E7SqyF)nez0YK@(MILY*_2PzoX-$ydcR+k5eqL^ z&nb#w=|^a-o`vs4kI%cLDz(L7i>S?&;Ku54raA}H<3}$q{$51iSsz$bchyHMOyee} zlcAqHr*N-4(zgGSaz##!e1;DA)`^01(0&!W^FD<(?BiV0H8M6Thtnm-C0NL`Qx?NY zTJp17Q4v#R6}lobtD-CfXnH!#`z{s}3q6!k&N~gJmti)i$GR(b^1a`l1y=fwM;`R6 zz~Cm^-kQxE?XKt>qxE+Un|r)P-UA-k-xz%VTC6l0)^c~N=>{VlGyhhyCCR`eksHdf zYFA8QE@k>&bOU>l46a%M!wti@lK=$EQPP? zXS-yslCvB2o##9m);!x(x6&eIH1G zPkH!!ABTu*|A+AC2$aryleb~sLjtm6)3vmOA#=3T!WffRyVM@wUy#qP|1)|phif07 zkuKR!#^jF2A6N4GbVcT(E3W3T+U8F2pGf33nBd#R}N&>ejKlj#8*ciU85kK=t?#|>zp;_dWl1}bz2ZllFG z+22S2+&7>2g}5k>rM4^ec2J?GHUA^<{I}5MhjvFwYl`kvg={@-i661V{5y@SGlY;^6OHXq-I~x__vlq~-!mk{lJldyR=jCM zIm#UqR`{WJ$n)R##6uaUTx(5HXvEMD4({#}98J%^VL!~I^lp>B9Au{;BiBBzXIo4x zI;Tdy*ClWI$!kzC$rOOcPxnk=b#t7f+&NkICY=U#6pZ7MWCX<*i>GEV&NQ?B-t7tL zsqUDU@uBby=fmKxb_&lQU9lWnjV#ar$3sp~(42m?+c{;B_)>PZG3}{*u^yvNUuXUr zUo%qKq#sgqaoHdn#Rv{BwQBjh#2hPeo;(t$O-)xgEh7rq0nJkmect#jvfNav+$>^Q zJ|snesoW}|)4m_lFRWHw$iNgDW&$Ih5m^oRJ6-b=3&eepk#2M-=l)_lD7%pz9}f+) z58|JV>t=pC)1u;5`b9^Ce)yAM!qEoPRl6D*fkm$^Z+% zkKE>mbsqCBmi0+L)mlUnPVc*^s36259=T^8;N7P4-Hd1DtX(>%OF8k?CzHS?v;SZlwAEq|cE-k2}MC{CT zR>euZ>bdK-{G73~0 zAMo1+gaNShV7bBc;$7GI*tPG#j<^?>Ri56M=Gt~gT}ogXiElX`yaG<#Gi_w#Zm8bk z&gskv;|xRvmolwvyFyn}VzTlkO@lCE&&06JRY~H54DBmLN4WsJOGrMh+XZlctzT{6 z`#e!P0Whf!kqs`*F(~DSi*z#TEccZ^#=s1(Oa^iew}Gej73ww-eM`UDZIX5FVzc* z@2*{X)rOC~YKfaHLgDV6?<;6&9rrSI^Z49nS6^}}qphY~KEPOufj zV0QNzl-Cpv!P;bdON1<11aMn9ouvL5ep6ql9Ta$?rt5@F<+-oDw1y?rWxMUI+7|m@ zOqZWQ`$e`J+ag!eLZI{{+p^Yl@=++Ct(|8DxeRgl-Nos3NLF$JY$lpIQ5PxN9Cgc< zsFor$!VP=w@Amz|fzO+zP0n2&Y95W34b4fwny(D#4US!*;|b;(8a~hiBAHh8&OU85 zgGoooyRx$91MjbXeF;IT*}ccY%lfXA4hsZ~_2r#GbRmsR9jL~5S9jxlwiieER;_If z>D0w1n_16Up{I;owoef250UBI*?UO;F)>Zsj}M1@+4Z+_989AWV8JxP_scD-R%n`v z6wD+htCXgl-(T8fvi!XnCB{q~SRpUNvlF!wy)yBX_aiv~rA!r{@|KqJ!m1%-3u-&Q z|1lQ!BZ#@BZ2Iiin3)Ktfop+gs(KPwL%G-qc4av1n+3Y~l*@)_k|z(5SP8%`t+pVT zYTnbX@P`Lt&bm+030oJjBcEi{8fuo0Q z_@D1)T1+GbO`do1_!KfwDVJ5NW;`! z54S)GA|f0%d3gp~$Yu(t9I5S$gsYsN(+DoJzFmNBWEP~XTCyC!BFN?oh$699n!x#c z3EJOykU__56hDb}A`xGol7bKT7$R4WSh6kCR9!&CvTMebG8(G8OHNnl8Wul4kjuu) zr*ydCNI;$QOCu;zaEeJ&bAP8mLWUsLjro_LE7#(@%U9B!`pLFHLS*NlI#(k@B%o_R z2?iTVM1>x>zXANMO`2x6Bc7V~G)sh0h58H82mKM!th*PLLb7exA)x)>{{1=c70RIi z3XdO)d{wS@$Roe`w1 z9Eyx0Ytbu|mK}X*Na`8_MPo^<@>5s0$vyte$-eS8M0wXp&+O4(mG#!qm5*aBIRTSc zfqP{V=bgSaX($mx34U_3LI{cj3Ax{WvK}XrSRdU}LFm4{X8I#oF@2pznDEe; z57qqR19*V}{6>+Wc14JzkF-IHi0{QKrR?mO*2s# z(wqg?>x7)Gd4EB9PB)q%3;b5&L00G3{=1>@Pgs%|eJ@txfQsW!MdxeVL5j|Gx7oq@ z5&o}0HUooNCOjCQc02xL^t6rA+mm{qZb}}XichOq999_Ybr_|4DFV5C1N<~NF{Q-6 zlLNj{;Z@6RfYTrpwUg^hnFs#XfAtIfB=+H>#Y^cjEFqtn`-8RlqObQZ8#ua? zd7VW+j{;6yRdJ-LpVQ9h#@4M}KDVbP?ehIi>re?&o9E#1U3jpXB)-wrKZx5_^Wx!G@4a8XPckWi#losvN^3YNEYR;M*)kX?> z2-H~(+()1~9n6#DtcbmlmCFqZ%XIyQ2Gh2nG-Hw3-pJ9Smp9zJPMTy3aDWbQia6%f zH>zZ!L(+Zcn1 znDi>*Qz(T7BC+G6AHieICz^D#4J3S9joXtsST(qvAtBe@R)t3j1AK)9NSqrh-^*r* zLnNwt;$V@Z))&a@ZrR&OWq+Hxh*90h-g|esEqdG?m@X1y>vBOqMYtU=iW0fcy4~78 zG4u<+;&59(P+@?tb8IremZ{TLI~-e}(>)ICVxd zrJ*R!EsB+fY~b(=k(${vZI_*9y>{JIajBg8D;zebzerWCF{rk-)#E@>Zf&C>|6MVLPxl37&c4gNIq2ch`FCn z&}rC#5mG~Sa+}K}k^vCJys+nd*aqv1R(?fk>?ZQhFsT<46zu{qgLiISG-0KaQWZHm zuCY77C9K2IKE?c=cX3o#)hs>OFNnuatue7{^CQQjaUL?pM1p%E_o_qP&renrOUQ}o zL(n8nNyqLtry9lNZCpC;*Dtz0<)yIfqJW&%p_f~L&gft_4OB=iMVT2TwU-fK@_B-Aag zLDn9V3H<}lV0**;I+jt;#iLJDwN_e_{`5tY*#(9EU59h)%RMGW1pGMT*6GezTG>0@ z?j=}>B*f#LpUh%IJmg;ig5PQRKVLvZhfR7`(4xaas?q-{Cmg@Aw7y(sOlK=wV@dEO zwG`DfVHttnEckuv1T+%(JpCsN^EX*D*(BYja#i$ST@%+#)!NN8Q*DNO2MUeM0piNb z9NjdkMZyPK7@*OO0VEv#j#PoG)9}bQSgD-NJP&qF=p>RJ@6mATwYG^E&E;n?LiO6xTe^NE!`OZUVRu%)kt%4-zxX^^FYgB%? z{YrLA=j#G+v4J-o!wh6>vm{{?Nb#PDKQ&rjDWV)(Bmx(iAnGBp+}y%vp>pz?S}S=f zS-!%OAX9V;bB+*Bmzef@Pwq#~1DQH6gmKPrSqBQzPs6|DFbLOsGIxrejYA`xk5mFZ z6>79N=Qk8)xL&_&i4ZXZw64YGcwc^}u8I*J%`in@2Dha!^@5o}6f4T-m6B_B6^iW< z2?ru$Nkyk-FTnzC{GQ4Jgqf$BD+3}Mv#uc6L!R#pO-14)b!ezco*c*q-GV<2shM%k zV~B9&%}#9lL2WhX3_~#3IOg26_4Ihhz_W8ir`bj>db#LcZJ@96;(Pu5U~I{Hr=t_N z4r;N%#x7`#CL>wZd}~Nz`5;U*d~TUAg<@xB#Ov*lHA#Vl@QKvCzkze z;nv*gQqMf=2i4*fR3eLVa2?)zUahSD@irDcK?K*6vK)PJid+~NWWST<0xRc5 z-%&@0G}8Z_$gkhc5kqG=bY2SID|p4cWRceUcHQ87epPc{7J;;Tob0%LogTsdDeeKY zvP&4p=BFYXT8T9$^F4{hDdW}mo}Vzo?@sPKcwbEOtf<~M z(~xec`(VB1cBZM22c^ z0}%n zR@l5dN`aG%pSPilvnBN6mvN~QY&r1IZF)B~!KPpy2O3~(eKKt=yZ4iE&X;q4BDZy= z(hxMCq@|yntsk|VSxUI58PgcIBy`2QV1ZbLU03IV@%>j=1W3Dkv*+*X)wzpaMLX)U7Goot7+&Jn1Rsq~ff4Fm4@iB4!jBXo1WAMAy)R@X^!mJ_T|W3aatLL5AQwumTG@WXP3FBi@H6{cGUEhi)!HH!CLRXjQ*9D@g1HAyC;LKw z%^r!gU-TyN43-(o@Vjg#PSk;E6N5#%HC@z!t7U+lxi(Re_j^J-!F5(50k4?_u(94-Pzzig7<=5i=HkA?<=y4m=Mf83c+`2Rt+Zse@y!H+ zG9qGcwu8EGGC>lX@&TR4DzEDj!{5x{b7WW2i2uPiv#bv%DMRdtht5g5x&6UH6UC$# zWNf!pn;U^f1?uUu9xjbHYA@E=Z+{xOTZu0_#*r3%2Lq?Ubm@M-y$t@NY?mU$gEpLv z87?d37jn0Eo;i<%V-w(8XoVI8>0uKcK#T3($&v#4%B)ws;!izogaJUt?n`d+^Gifr=%{wuKB% zCQ$g5MxV^Mqw)oq#6s%6$5d13&hl$^$g1EZINoEg_{U4(G#

S5J=agBCKAlny5a zXW!tJEp-l7J-*U}!1v3&uIE2ywRTFjXY`i6eKZMBcQUW4~;uy!QdLkW5@MfK!1aQ0U^edF8hn! zgZXNCiPaf^7fVl+AcoF-=zJ6&WZ=eFY*cDLd85bUaH6Zg?JmMc_WaTObx_{X#ov#@pM1r z78~tb_~N-R8HS}$3DEgE-yV^ z`eul@>hME+6MQfJ9>DC^7R zYsnrsSH&aGg>zgTR)|@(8Oz2VPug2uGdsT-75nIAd;=~8RftRaANz@SZ(M->6VNQ{ zc&eH(T2(cSE#%Z54#wZ$Y;I))L83w1#1Ak4$MoAfT(o{DnDUXtV?};odfM-Mc_)m5 zGu)yv8Ff0Ke3Yw?k6^<*)`I;qZB@qxu zFpVJ^rnAG3r$rFu25Y$h%^08rHhZr+^9E3e$iCm}cbFgAU#i|2bVtx|X!u)k)~Tl1 zT$=pqC9xCzF2Hei2gG!D?ABxRety@rbr*;5SWykm6HAnviF)EQrm~_%$chWmRe|#4 z=loTWo&6<-B+6?Y$dE7{`1GW?$(+a-o+-rz#+-Z*(#=Su9*W&{mI*icF3k)X>_vi zoc2xH^GD8|{gS!_)@SeZTrHURFHW9O?yqZ2H1;1*rEBZ>>zytx*~GLF@&btM)!vJg ztNr7`1GV0cf@rx;$<{kD27G}Z{aetr_u=kXYdZKvE2gE=R4J+0S@>nq7p@VGq zvtdg!=(wJqwgr8ECZHRf!P(<@lhwF0oF|=AE%*He=m2;qN2L?S7dO@6ME~2&?p?q8 zLcC?POC$QHa){ZjCsWG;qIr7SnT@AzIjUrf=QGJmLHfx{yK^!m9x3Lo8dZ8^l+)Qk zCFk+pQ;TI27@0FdtY>xj35DA=^cPxSm+rQAb6p460DTO2o~~>P4$2@f3x~1<&-f4I zo$_2iUc^I-!Mkh2`7v&7Bzu@b%IPA|3FwCCh9!jR*Yy!F=BDA(Ae2cyHW=>$bdP4{ z=vU6TucYpSmUHPU+SIEmxf6wK>$}UQJ34p0#)a3b6Ff_9>KUya6wS$^5@c8|wA>vR zqjcG(5mP(;p1x!Rc3M-yaW-)*>%!}v<|i56`vb${8ZPp`TGh(hYR+43`4nJI6XxG0 zPyUT}U8wl^;nawK!wiR96+jW-MT9w3s)-tS3fi%FN zHS}Ttqj^$oegA_IA3)sRkXMqSo>Sn~zHD1Bqyod3}8i_|&e zq#|`n(WXt0`-#OtPTRT5M7lTxHDvZ;w`h_8WnyU0>b`+qt=DNF!}D-AQ^$Qo-&v8Z=FAj#XJ{x`Rf` zJ2qLgpgou2Xno|-xy$DGvv_uG5~9u09Z6U%I8Z5(GSBO;T26njJIgn#SheZfhw!}9 znd0=Em5U5wT)-${snNHO(erp_acZ%{xok<@LMMEybOviBjZ-tOQLnh=&@$gwpJ2|h zWqXdnanA7d<$23gOF~SZirn$*iJW~VGH-7eRGG>#WR_EEpDa2WE9?|9XKxp=DeCY5 z!H0ElE0QZf;S4f$dJZ|=>TeaHvdq^h4!s4ni@HGW*iU%8$ZI?}^59Q(VE$RxG3f6n z!>)7H1R#0iJ?&0B7N^HI+S$?Hd72vkw~Z&Qci^tH=YLe-YySA8!7PY}V1fnZgBO1M z$DoT)AGEVl>wmip}FAk&fNY<$b!SOS@GqT{_K<}fh@?a z8bP}^16J^}>W;x*9Rdyp$B2@*bmu3vhbf|x)pXO=E-hISosK|Bu*c(_it+?QJ% zQ(XNOeazq8>h*m#z;~!;)_hXl*bFD-R+I!o1g}dS`-6f!+2?0$Qa7=er?Q_iMDY}` z>aOyD_QuJEu&uv=KG!fo!}#IWl%{k9#5zq4bd)TCp+%u?K5c;n2XUrwGX7bwgWljN z^B_2n57NA&`>EZIu)OXh+fkfU?U>~CA8oFu3ikY|^?}UT96rh-sH2T{m_pocT&S|W zW{I^>YUeZ?T03*A7gFiw56i;bl~-!ZyHk{nbL?i{7?li;lMO9xm52sAF=ctA`N=$2 zywY`U5_$wNW&Hm_l@MblzS0w~Uv}>6`FTB$MxyWSG@sjiuNW<72Vp(;xfC@XyczTn z#o&@M{|X2CaKAH-|H{5Ybt)sy= zbW5<>Oi@vD7~;2-3rwCjTzF8r`JP;hCe2g+@iog=whUeB`-A_lxwDLmy507^Ac)|t zC?V2Fr=UnEDJdm6A}u1)jdWOuAc#r{NQW>WD4hd>v~-uWbjJV#%(Ld+d!KXfv)$+H zmya*_sOT{NYp&~BYyH+*-*woEwegG~;&6{9sc&fsM?a3Dn=@uA<8PWB+3k(dhICru zuWBM*FNMN1&|!SGUH) zhtEdmQ<+S8-%6@+U$X}@)o*x zUXIQHw9xr@KS7INc>9tUFOGlv_6okz#r1n#?zs;;qQ=A@pVjZB?`t^3=Iwm=b;fj_ z`}U4PiBKZC_+8t9a^yAL{o|^Ynk$~J3MO0QG^?E}F7b&yXrCS@`q`$9)L+$WS+3dQ znroWlF6HHlSa~!2J?Q0k?K^KI@qMJ<=jf?;$%FF!j$-#iMTXKc)LL16B5$ml9NS|Z~gRx6S-#J$vc#<$jd(eFb1%#=q<2=Ky6iHGo@XZ^C{W?EAkm%Znb zoqEjYSTxP%Jr3FSv$;shM$K#J3>mxNY{;vWwZO|3|ee7Gj8*kB~B5 zG5`k2Q034T-!gQmwlnH_zB^wZa>{dd>bLcI2m(v$R_Q$l z|L(u64f_;qDR#kz*m3BUN9vX~qesuI@xDz@teVB3TgTW{z(@1J+FvVvPIol-VQsv; zR`IpL>ei9>uo!>KfS8{EmfoR;#o^6p{@wtAA(N`q*0^)1_6ev6197rn9S0 z-Cg);ZNnWk#8fcAM^eg9CB9qvF}!Wd+j?#CsM{@goV`dy057b!XbU_8t(7x2o3aFDRMz?Q~MoWRTy3w-vY46+bBMRjAp%a)YrcM z@z&C2xG<{{aHm$zbbqb@0Wqs)&2-G&lRvaLe+uufl%;$lvZGXqh`vC&y({s_T$>^0 z7Zz=BWV{_|`Zf3PLK|h6$V75u=QUpaH}Y{&I$2WXpDmjs5$f&Hwz;;yrZLCjOm^&2 z_Q%-VqG6?Yo3-Fa9*+`xxGd7zdp@VGG9p?2@%b}BNfkU>M0EV`wJ>Qf5_mRI&&{-t z?mskw12#c`RTn@bwQT|xTK*! z;zT-@$FsCKV#Gb2bsCd#MV#kLq~8;W7lyR7ptgKWU)`QdzZ|U4A<5jRerOhDtk>P6 zO(s8Lf~5;@FcXs-4p`flBM^^8*l^m}J4}tt;cms6E~$q)TO7V&ZN6B9=YFdBuj&=k zD9cmcYp*VLxt)K!3C;Okqo9n2tNSTUdSdItQdN70(83QEuvnR4^upN>>1 z;d|BzQ&K%S7vnSi{O_nlD(&5j_Gf%<%=z<}e=i@FXU1os`sj_~T@lj$$i^yK>GJP+)ylo4%@aq0TQY! zywG7R_?!m%2W@cp#=_Cy;%nwDAAFUgco&vj_SQ{tAvF%2`^yZPVWWV>bsGoo^JS)= z!*N10)Zz{fO29>f->?Iq`E=2&Kg^Q~;QG7T{2=H>pAdZ=HBLLv{Pv6Gd=A z%{>!u;N2?Cm}ZD%X_UAu=HNnoMQ>-u$DsO+^UR*6=i;%wbL*_g-oaw=O2%%48TObD z=aiPkHv}^%#^q*o-B%U6;k1~xzc!Lvs&p_mP+zi=CHN`rs8BK=z3w+|2BQ0-iLUI; zaZJ**kpE;nVg7bOiBE^sJ@d!ageXd>>p!|5w@c$fWK7og0D1EV6{gO9Zt7NFrQRHI z@v)0vL?1z5Y%k-669-R=OMT;WnIn3M9+tEO0q-duO7z^j1rhMi7Wgl7{29gk>lfpv zkOv2g+x&u<+~+;I26?9Gg1 zCL%qxn&fEuu0+@Ku5L;Y#8OxOeJsT_(N*p5PkqBVZOsR>v%~?E?$bB1)Pj$01EG|q z9HKr&g-{yGUjEo=OX6s_%37eo^ZbS=%O6ii|4|D7SAn1|8JB*c<#*KId_L~C1bC$0 zmMn&4?|+qCk05fenPTab{(cgB=D7}+OJs;;KL^t#(~|CduCO+mb^nzy;=M?-?MuvhWpSAuzFSbcbF6z|>))e_-b^|p{=Gsd%$?wd0<+bz< zUd!#9B#vPHM(6h9UHmML_;yfvtwN963r0JZ$`UPdvoS8H625(Ft6E*s1QBliJ8Xwj z-AZ+~$BGUX6ziRSBr%1fj~ZW?HJ)UfjIQ%0&6kKfylcfhR29m<_P*nYW8z&H0|v_f zQ26n03>{igs^ZE=2ag0lk*}|F6Nqopn=gm`tE_{&7$_B_lm7@1?4=mhc*0@}3SaT+ zSjC7oR zK!3N1FqIs2Cfemj=`704D=?w|i~UJ$`Lp9Xq0_1SR3j!Fe-y3xA0~hQN^7gx(Jr>> zI${$zmNUGDlpi~-o@lpdBWSz4++2Jdy+cSHK_E_2+jI-mBgLm9iboI7KdB5- z($y(xJ+7z}dUS^h1NrZI}~U#^K336vwnQ+Pet75Y3b*78Rv-;I+Dj3?Z52wBwm8;HM++D3f<8;aQ_a* zXzZsy))#!tvc4?sMjf?O_#XAq$b*czuIlt3@nQpfZTS$aymbn&{QN?~S)J~HF2+JMlJf5RuKhjoEEyS1>V~OTT6sTFbxeEQNm}6d7~vd7(7!bA>6+cgH_pxlamEC zzpGCBv(Y%QKY!R?cFY5`e7C6}j`CJ-_&Q4Sbz^s>WW3y@zH)Esb@Bag_~;@(BOKzp zRJ!je5yO0cs2#Xy3zA&CTGaaHtKR182u2Ro4-tDgsbcz#7+HI&lC|31X!oA9J)j&JibQnhg;1Vr8R<+k zNf#7zUtK=F34Q-dU?T1sRs4#zS#IIU3)$6!M)`DN=7*1y_3TG;jl|GAWJM1Xt*pe&(K_lBMbqRC2ZlF zxUjYffCGCL#W#h(brDBrD;3Ov=J-ydMT3$MG@GgZfl<4Xv0&$R+jFsyWPkE4w_??r zn`o%m&VUx6zQTcEK-xqmHXtEk05^HO0mP|>_EnY%0f1`b8Q>E|~s zfLjG}HS?2_Jv4=YhY$*o(J!`L;O@>W4^;kuJUT{Kmq1R{T&JOscO6tg@&H|M)Fm)u zYkmgqnsa$gzWiqr^F@j9!tynK(fu~&n_<#`ifSSguhE7!F0A$94Z|aaB9+A5#*rYq z@{Hp{&c2*$u{cVpOFt5+wb8^9#%kEk;Js`Lu>739Jd^60 zXe(itU#enLuUJN%aGV|5s}JP9b-e4q>md}USRS0gQe8ZlX2e>8ciJ+iLwktYKP663 z=r}2Z+3rzS`>C(>>XAMDEk3(6bHq8xy$Lc_VD#kUc(1;a5Y>zA4w|XhZb4#c80e>l z>t?NdB{>2)fec=mZNN+3QEdIH14Qrc?W$U)Uqcu089edx#bDR|tBX>PE2}?#AE~mk zU2UY3!{9uMPaGnFVIRpgPTf}Isqx^{aK8Z+xlCU)NhkojX0pj|Tq(+x8|8XQ%q_Dxy=2S-JWseHi_7> z+ZUtZ&;AQl{GA@0M{>5HoRj60AA%i&xSQwLFjXNmjgkgtORT-Yej{SM2Mcct zQNbO9=5L9L)raaOKYjqtY}8X^#I_)lJMcJxcOp4m4<`Z~n3$|20blS+Qc8w7t2L0< zdYX=5kFNmlw^+!g{~kb`M&HvQkUCBX8j4D#enmSl9s0W8k^v!OPdn6}C^e2lx8v?7 z(2Kp;4z|YJ$AT3EIMTAr*4(<8^mSc5LKOqBBhQuA-hY9fGxTlkP}KP%^p98Sa$ror1mI4(`KDL$p6*L~-?MC{o0C zvzcRcEZb$^v%$bhlvNE&9NORNXwv(i4C;SfW=+yb(&PuoDW`_{*LFwzOM;?YaS`d# zecTAUA9{5vc|ViyP+E#d%;7O~4eGO8d9bA#~-Ly%=7 za~pX)U^GUMjgJSPdIjbVdIqd$XtCJj3-aa3Kz}0^_2egl?V@!JVT_Evd5dTL4|)<) zs&VFa)sW=T3$>@z^eU?xv+BK4YQM6LU=oWPtX+lVi@7fMSb>4#<|w=%B5{h-UHRgW zdQ|8=t2XMs*xL+4D9nm%2JXx!vM0I^ni8R7R$Ge(j18XcNn!WHXdV2qm~nDck5f@j zE8Oe9o^i$$gYctpXWVB?El6^In)A^0aHFxJ+Sqe8(hc&k@}D$LDW`%z{uh zKS(bL)P&AHY^}~54yt9>S5WS_2f$<%Uek2e7eyiDF z@w$3Hd9>~xC6ZH!{VszIN!Ao;JdW*89sce1@ouEGl&TYlEExT{Ds3#raY|}&S8W{A zSXxcFyxUDraDK3cfLj%q^4z4^nwHMGkr!)mCPV};Hh0Xak)D{mCLK!l#6#H4`zSg^ zAurx@N~SQLeW&8_QdH+z#`R8ua`vilAwnsg8!~F->9Mvue0nw0Kw{^2O4xHMfOfM7 zMhM|Ag5)@;ct%KaDbuQqRxgn64-d<0V#mIfYx#ZUffP?sz`h`X8s)*wD{si%I; z(vYu=RfL@aRR~ucQ!|>q2p`sVY9Yy&7!H!Otnk8c=?g-_?jmhrR>HWIe0qoQ5urXdfBUy+|h?UBRToKCMp`#2Ls=!Z zK<0tj@2{QPS2Sv#1m0PnPzf6;y-|JqA>!^azV9%j14pqE)@=HP@kI~ui0Ts(xEO#t zS~`H(Ht;BK4Br%KmIs0zW$8QkHPRP*sS-o?_*TGmhYxfc9 zP{Yd7?hf1Vqb>NZCZ&`1zPa)1QcqrQ9|ddI!{TSOB#EjC;zJ4{mnKm?57UrrFI0Re zSSFIqWps{YS`l=vowrs;Nu)yP#rlu*=EgzG6r^#=->+jlK97*Z5uCFdl1!R;q?6y) z9ihh)9dlgqNY@;H#aNV+5b1M21kCm0R!!WXsnrft7R~cw%|Qjqn^&q2H#7C+ePnL< zB|Z-M0$pv`2rlguOqzGHxvm?W{dphLnmYeXmtu$Up9otIxCf2c@T81&lIwKCx^@@v z8IWYj-jmty=Rc5`%}a8MC$FoE2IbBQUH3H6Kf`01$sLq?^=Ge%KX2$sLh)XTP0jj1 zc;^F0M#gZ*##Rs^ucufj-?}73czS!z(JESC;@v8W9V*d+SjR~v!u?{x0sYUnh(ZqU z`F%R0^g_jT9);w7A;WVsFp8~vZyUWFYm<95;FeG8>=2^t^&Jpp5Ouu2?Wb|?)*1(&S*rVx1bUR5@Yz&Hq}wJQslNn?Vay%j&I4IWETyzd%B+*6{wyY07S2N+VfrptkH{sW#z7)8bwIIV%&sZ|PTaoKmF28AXoMHl8Tvu3@_q#88U=W$gYE zQ9>S-AXp$dPnm(`(|D^hAN4ww4LM)ywJ%#%F}kbk^jx(boc%)1hJPA8icA<=fC%gS zUZH=l{yyZ)>=(#Qns2pIfTqGR=_ig^F33H2sh@x1B~mF9`9i;R`I%G`P`6f*HkSB$ zh?y_2=X0d|k+X{BkkX;#$COZGfOo19uC`&8?x z^m2FHV3{2iK0N_e!vwY*9r9EBGwIgEllg)qw=Ji}0>!5g_O(wG%Q3OM6BmqMN6l@h z^rsKdrLVs!{H~7b$bI7usb__6be?Pm3T%k+ zI`aV6oG*)k)k$C04phzbDfxZQoMb?{rL+i}GWK#*B_4`t%>7ZN70TtC>ljpf?Wfw> z6~d8PVe8(^Oy|IcI+#E(gX*tP#1my~?-bMTa33t(e$9PyA5~vM9DSl&w6`E*;q{DY1v!7u}j27G!qu|cnrqi{Q2 z{*Ccq!9|644YCSzkDxFMHcz$&UYH}k9v&WoK;uj+W+{3O{23LmrCK(!?K5bckspbK zX8nh}FD}0atb80&ckgZ&^svoTAk_;kyHdWh*=QMux1xfT%AYiXJ+}oauOYjwQi-O} zg(GW|%jXf?8}Pw-V2{wBaZu?uU%hs$b@6J{xoyY>)oB9pNY&`1(4#I&m?UCn!ZTC8 zw<*_8^H^Fk#v4%HnzDnk*(*;{lsx%nwTAQQ{rm}|bv$L&C@HUBWhfSSwE<(wN`pDA z^||Z$7v8m~P+Am^I;)ga9qiVeB$W$17Z$gQx+pl298Ble%*@wy&9XBo4XujD!)KJ1 zVR5tPt!%l4Zet6_#D!f6y%V)2uYOWXF1x^sa)i7F>xQI}JVD8vsr=4FQmMldu;ACc zj%z30BI&b&RVuSu0=Zo*mw8k(*gSMD-|l#mmzKs9v78OO{0CTpnUwQykb8T-qMNli z71w4#yag`BLOc#g5W zc^Lj1dBkF-w#%83D7BJ&F@>r4VUJ9O@@dh)hco%yJ=Ko zw$Pp44?@L91`4J>b_Ec zZRhJ+TFAOP$EA~ayg*1%*mqsxd8o}sAhkaRzLReKw-NzESeb@${d;5bWDO;M-rMkDT{y*CII0M-D~W=^a6vZtEcyCrv@gV8h5;WR^3mxceeLVh znrC>Pvx=F_UpggDvT@8mcz;UzcR}%K+Ylf!IE1)M><9@mTq1>kBV9(Kllepu$)9F|+0DHoCcn3+!A%-x!KpK*uG! zsQ>8J=feB70E4wAV(>^B5jFx>Z%vG1E~7o&4LnIrlE`?VQ)ofGHjL z2INCo`lUH9qE0RJe~ufu{)b1VRsi>1RvS=3Lf@=$q!k$^xfnsMU-tO3ldv5@96g{ zuiX)n=s;G6BNz6!`Vc-7+{-Rj9U;i@`6}eazpZau(Aw`AAxxprxcWz!#*>X251a{W zK_tl#io@_2b13(5W{SPkyGdg`ITvFc@7k>->@@Y=a!VCb5K+>t55CvYHMi@IGwDpzl%U31_rF1g6F!G44U35AmgvT%qmT%!Tc#F)ld;`}g8|hp^Fp`ywrZr}V zdm9jgtfe(Jfw=o6XjfB(imur;gni`BWD3h0(OO^1yUAUpz2gYVTem>Uwl1|RoT@cpfv<4rJYbx5~Wb>GpUO77VqPj%e)itQEK|x_Wf=oYbKsm4HgWGqDF? z*P8$kY2jYljj!F@PL1*|V$}rwLHp+^gdq(iH892?zT&HwE^CxqXkuQh&HwFc=qEib z_8X-JHerneY)e5J8N7y*(>T-^r|we{^7TE?Ej~YLi@neQCDD|8x)+Y0c{jbiTnt)N znp_Y6{LYd;B4^MnOd@4P862as7bnk&G7Y0ZCRrU=RExdt6nSntkzM5|@0Sa)$BXa{ z;DAONK_u6;Ul`E@m%!+_)WJNhZi+o%=1TrhUnZn|_jbVFHC4V3On}<2sG)iLo`uFDjLB~VF-WW`2Rc6S?E zXK{PX92|H2iXFQ6&l3JWoUjMD4~6xAd?=mY;}Z{i?s+1<(jRB5{yCO~WL1KZv29 z5uV9`sjF<|nZ%Za1__?OsL@7O@WNosj{y{LrkL3T#X%UH|GkW&+Y=_8jn2V>lgwAb z`f#o7K>vf4Swo1^cwir4Fy*=jFz=U>o}Y7`dmYx5L-a6~9yWNsrRU{PHiT>Ek+wEt zEtA%z;~;*_JF7%)nVM9v9>Qh~e+m_kxK5}*SZe6qx?xB#Ou@9Cn7GccWyjp5TdWcE=q`N?%C{m)UbSH#X_yJ zQF^e)84hljvmQ9m>u$T)+CvFT++bDAk_mQk7iuYDvKF5vdh8HY00VgCC9VCdH}NVp zEQShGK*<+E481Dx=nK-pBVCEMt~G4X_mZI`p+N3KLE~qr&0W>OZ9E@PhsXIQQ(ce_ zrsot5Ge}6oq>f9uN^wwpeaJ(MRa{QA z(48Yb8_jRB`jc^^AF>v@j~@YH+odDS!SpnL)`Q)91h+tR*8_!8Ef7)}zWve$BP+%>x%`yE6d62OkzPq>Rp4qfQM;7Qmd&)jT+lHL z!#Eh?1sT>)b9jdDtbqdSrqaMkmlOqX1iaH~#RnNdUI?3}3@hS~P~l!-qpjT}OO63q zxY~Dj$RZsm={=%ML&`O*Xfy~HcP!2=!%HBJY`wzWg&d+Ef<)Ox_X8unRIpy#0ui}KqGX`1pJieJz z@BKe5(X%pE>x32$h~0{Gx~||0@lAjS*5c?y{>k4a6iy$q*SwHSy-aamTmT2GeCkZe z=>=_~bJ3Dri9#`XLDFjN2W-@pPyF^jC*6X`Qzgk##x<{MH&}AuMLIrJ?7hC3FZgt( z9=9UT2@gFCx5RYgGmuJbzs)|ElCl0Gin)`&A3-fs%~ZY7Kudl=LF)1SB$NK5IwBbg z4Gl^n#?{WJ`Ji=qtF>c@H3-jK-)@>CJ#pgf8zs40I>~uK17Et8tXPyH*>rqs)ce^- zjGx9qb;^iuqzW+Mfj*xU7>gvd^t_rQm6CBDL$ib-7*^ot?hQ8WDrUP?}(f%X&z zim76_lU}UAV8E{s>!Q9FZ;GuH_M|w5%P`QiA{kPMz0{&$5bREuUu@+7E6RcL@M{;TdpWa5waC&jf z$cK4livIpfpG$J!;Avth{kpX7AipQi-G@|c*Op(m6330#0&g=;y!xqk zT$MU^&&)pB$jxbu0P#>Cfbq4Z=KvMYJdXD7CuRE2otbOI9uJ)ZKxRN;DEBks>|>p` zJYF#my^O8w&6}OB*5K!x*Z|{GhCF}p*b|wN1Yw89YnZ4RgA5M2bd`DbIQHSrxCQNc zDd>_bIR)+9PRjyx?}7^O$;#h2%IIPiqIdKgmnrCy*8pX7y{72JoqA!Pbl;63TrG@3x?PPek_@hmyrDPP`3HQw&)&o#0Er&2Yj zQ^&`fFwE7Y?ye?W3Oyi?Kk}kVvmr6z%9$9a4DfKPBjK1VGr^fdh78z6i~*K2ak=%; zk2XdwiotdZdv=?oE6oN%;IQmhWDbxjtn^ld|6j+M1ZkQbvbg$_G#h7i-pz&xw!f-< z(wwm5^AlSp{(SlQ@5?%{{BZhY|LOFVJPDK`(0_l6d;r;wbD19!Tm`+6_NJ?)4%@f2 zG?O+S>8mjJ0fzn<2boz7o#4w$j=l3}XEw zEkDTiYwnQvCfL=~C8|eqUgS4k&efx2gml>giiG1q(Q=4M@vZR%$t+Uq@_rcLo>pmb zU|zi%kcXTSsl@3?tfky<_ssQiXo6#ym|ecefgC(9JVxX@{?)9J%=a|MGX#B&?xP@w z%%msWQJGw<6K7|pc+BVh77sTvtZBf7`5a0u$Uez4W`j`ZJhF$(rE;PwN@JplR_%kp zH;6(a-AcgHmA!pht7=+wX(bI>gUmM4W%JAO%F#3@t(&7R6F+CpYDmvpO__LIOWqvI zEj@p83PG>4e+$h!^j-v9qs2gE?YzWfW2q!um@(VF%Y$D*5L+ipW|c6bGWJMb^3R`Z zAQIQ1mc1PGQ0)i|Z9GOf((zz>A-q{2xVTF&&nXLAyOHevX*ICHvt0T;ToGFv=RfXB z&3$wkt&mx3(osu3YnOV$c#wj#OU$UxpI=yy zrk`%$vcVDA(p~rr^(Z8+nJ)5BxAQ)nc{eO&zSVmy#H!BU!okv7_|8-E+$}v3aF8B! z>}vYTmNd6{2sd>bbgXw9n~aNLKYDu^86Uk$6f?AzA#aOyZ2xowqf>Xm2$u)blWeDD zccyGv-Z%~Ym9U2)xi<4AmFZ82EwO~qMj$eI*Ld~KiW z^x&HjV;YeR7_srmbXZKqr`BKOibGiqAt56AfvbF^%IFcx*DtcBc5fcn-CsnpXYXka ze+xc3=3hDV`E9*ajRKqF0pX+ZoZ-wXF|XS+liDvnGIMBlvT*yer=>|Qsr!`pwKCD- zeYN|erB0f&C;5s5z~d$}eGUFvnPWhnG1=WBPM%gBs6x0YHTQeh_D^^Bsr3D(&yTQv zv}6RzRF-2cww*Auvhm`dI>im(vo^)#IH#&#!Z)u{Zvv%kJ+#kxBh2zwU>#mmcnJ zm5Y;pU!^Uq$%y+9N@sny`sXR%7(+VvK^i~d=d@tXMQrSY@?i>tYlk1^tVn!g+k)*g_OUY@u!>T?`)&w-!qS>6v<3b9efQTFcsdH5fiu4vjQ`x<|K}I!7-HCV zg4TEbjd=P$Utk8Fl|@8k_uuc*f4U`GQ~}8xqv^u@o4E5|A61%31fI35>?_rOwvrl; zaGO0Omi+h0;=gZ>|9*rrc-E%2(5nA%C9gq+yym0ckEeh0PXFmC|Mq%KYVfS~_RIgC zT>4LMC?W>7!L`(1a{vAQ{6 Date: Fri, 14 Feb 2025 11:50:50 +0800 Subject: [PATCH 2/2] docs/community: update security model documentation and sidebar --- community/security-model.md | 4 ++-- sidebarsCommunity.js | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/community/security-model.md b/community/security-model.md index 0147f70120..59fda59139 100644 --- a/community/security-model.md +++ b/community/security-model.md @@ -2,7 +2,7 @@ slug: /security-model --- -# Apache Answer Security Model +# Security Model This document outlines the security model of Apache Answer. It aims to help users understand the security model and make informed decisions about deploying and managing Apache Answer securely. @@ -12,7 +12,7 @@ This document outlines the security model of Apache Answer. It aims to help user So, if a security issue comes up in the administrator page, this is usually not considered a problem. Because the administrator has the authority to do so. Unless a normal user can overstep his authority to operate outside of his capabilities. -## Captcha +## Captcha Security CAPTCHA is an essential security measure to prevent automated attacks and abuse. Apache Answer will not be responsible for security issues arising from disabled CAPTCHA protection. For example, if the user disables the CAPTCHA, it may allow an attacker to crack the user's password by brute force. diff --git a/sidebarsCommunity.js b/sidebarsCommunity.js index 1265aa48c8..0e242bcf8c 100644 --- a/sidebarsCommunity.js +++ b/sidebarsCommunity.js @@ -3,6 +3,7 @@ module.exports = { 'support', 'team', 'security', + 'security-model', { type: 'category', label: 'Contributing',