From 065c8b1c1eae4adcc891748769f7383245305b72 Mon Sep 17 00:00:00 2001 From: Yahav Itzhak Date: Thu, 12 Oct 2023 13:27:11 +0300 Subject: [PATCH] Support JFrog Apps Config file (#405) --- src/main/connect/connectionUtils.ts | 9 - src/main/scanLogic/scanManager.ts | 148 +- .../scanLogic/scanRunners/analyzerModels.ts | 4 +- .../scanRunners/applicabilityScan.ts | 227 +- src/main/scanLogic/scanRunners/eosScan.ts | 219 - src/main/scanLogic/scanRunners/iacScan.ts | 72 +- .../{binaryRunner.ts => jasRunner.ts} | 306 +- src/main/scanLogic/scanRunners/sastScan.ts | 250 + src/main/scanLogic/scanRunners/secretsScan.ts | 73 +- .../{eosTreeNode.ts => sastTreeNode.ts} | 8 +- .../issuesTree/fileTreeNode.ts | 4 +- .../issuesTree/issuesRootTreeNode.ts | 22 +- .../issuesTree/issuesTreeDataProvider.ts | 152 +- .../treeDataProviders/utils/analyzerUtils.ts | 353 +- .../utils/dependencyUtils.ts | 64 +- src/main/types/jfrogAppsConfigSchema.ts | 35 + src/main/types/workspaceIssuesDetails.ts | 36 +- .../utils/jfrogAppsConfig/jfrogAppsConfig.ts | 161 + src/main/utils/scanUtils.ts | 14 +- src/main/utils/translators.ts | 44 +- src/main/utils/usageUtils.ts | 21 +- .../applicableScan/analyzerResponse.json | 12 +- .../npm/expectedScanResponse.json | 4 +- .../.jfrog/jfrog-apps-config.yml | 50 + .../resources/sastScan/analyzerResponse.json | 78 + src/test/resources/sastScan/jquery.js | 9597 +++++++++++++++++ src/test/tests/analyzerUtils.test.ts | 2 +- src/test/tests/applicabilityScan.test.ts | 105 +- src/test/tests/appsConfig.test.ts | 114 + src/test/tests/iacScan.test.ts | 34 +- .../tests/integration/applicability.test.ts | 35 +- src/test/tests/integration/iac.test.ts | 31 +- src/test/tests/integration/secrets.test.ts | 33 +- src/test/tests/issuesTreeDataProvider.test.ts | 19 +- src/test/tests/issuesTreeNode.test.ts | 2 +- src/test/tests/maven.test.ts | 57 +- src/test/tests/mavenUpdate.test.ts | 147 +- src/test/tests/sastScan.test.ts | 133 + src/test/tests/scanAnlayzerRunner.test.ts | 65 +- src/test/tests/secretsScan.test.ts | 26 +- src/test/tests/usageUtils.test.ts | 9 +- src/test/tests/utils/testAnalyzer.test.ts | 40 +- src/test/tests/utils/testIntegration.test.ts | 8 +- src/test/tests/utils/utils.test.ts | 20 +- 44 files changed, 11441 insertions(+), 1402 deletions(-) delete mode 100644 src/main/scanLogic/scanRunners/eosScan.ts rename src/main/scanLogic/scanRunners/{binaryRunner.ts => jasRunner.ts} (58%) create mode 100644 src/main/scanLogic/scanRunners/sastScan.ts rename src/main/treeDataProviders/issuesTree/codeFileTree/{eosTreeNode.ts => sastTreeNode.ts} (89%) create mode 100644 src/main/types/jfrogAppsConfigSchema.ts create mode 100644 src/main/utils/jfrogAppsConfig/jfrogAppsConfig.ts create mode 100644 src/test/resources/jfrogAppsConfig/.jfrog/jfrog-apps-config.yml create mode 100644 src/test/resources/sastScan/analyzerResponse.json create mode 100644 src/test/resources/sastScan/jquery.js create mode 100644 src/test/tests/appsConfig.test.ts create mode 100644 src/test/tests/sastScan.test.ts diff --git a/src/main/connect/connectionUtils.ts b/src/main/connect/connectionUtils.ts index 36ceec531..c7e5cf8a7 100644 --- a/src/main/connect/connectionUtils.ts +++ b/src/main/connect/connectionUtils.ts @@ -193,15 +193,6 @@ export class ConnectionUtils { return Promise.resolve('Successfully connected to Xray version: ' + xrayVersion); } - public static async testXrayVersionForScanGraph(jfrogClient: JfrogClient, logger: LogManager): Promise { - let xrayVersion: string = await this.getXrayVersion(jfrogClient); - if (!(await this.isXrayVersionCompatible(xrayVersion, ConnectionUtils.MINIMAL_XRAY_VERSION_SUPPORTED))) { - logger.logError(new Error('Dependencies scan is supported only on Xray >= 3.29.0'), true); - return false; - } - return true; - } - public static async testXrayEntitlementForFeature(jfrogClient: JfrogClient, feature: EntitlementScanFeature): Promise { return await jfrogClient .xray() diff --git a/src/main/scanLogic/scanManager.ts b/src/main/scanLogic/scanManager.ts index 4a1468d8c..a9e957715 100644 --- a/src/main/scanLogic/scanManager.ts +++ b/src/main/scanLogic/scanManager.ts @@ -2,29 +2,23 @@ import * as vscode from 'vscode'; import { ExtensionComponent } from '../extensionComponent'; -import { LogManager } from '../log/logManager'; import { ConnectionManager } from '../connect/connectionManager'; import { ConnectionUtils, EntitlementScanFeature } from '../connect/connectionUtils'; +import { LogManager } from '../log/logManager'; -import { RootNode } from '../treeDataProviders/dependenciesTree/dependenciesRoot/rootTree'; import { IGraphResponse, XrayScanProgress } from 'jfrog-client-js'; -import { GraphScanLogic } from './scanGraphLogic'; -import { ApplicabilityRunner, ApplicabilityScanResponse } from './scanRunners/applicabilityScan'; -import { EosRunner, EosScanRequest, EosScanResponse } from './scanRunners/eosScan'; -import { AnalyzerUtils } from '../treeDataProviders/utils/analyzerUtils'; -import { Configuration } from '../utils/configuration'; +import { RootNode } from '../treeDataProviders/dependenciesTree/dependenciesRoot/rootTree'; +import { StepProgress } from '../treeDataProviders/utils/stepProgress'; import { Resource } from '../utils/resource'; -import { BinaryRunner } from './scanRunners/binaryRunner'; import { ScanUtils } from '../utils/scanUtils'; -import { StepProgress } from '../treeDataProviders/utils/stepProgress'; import { Utils } from '../utils/utils'; -import { IacRunner, IacScanResponse } from './scanRunners/iacScan'; -import { SecretsRunner, SecretsScanResponse } from './scanRunners/secretsScan'; +import { GraphScanLogic } from './scanGraphLogic'; +import { JasRunner } from './scanRunners/jasRunner'; -export interface SupportedScans { +export interface EntitledScans { dependencies: boolean; applicability: boolean; - eos: boolean; + sast: boolean; iac: boolean; secrets: boolean; } @@ -37,7 +31,7 @@ export class ScanManager implements ExtensionComponent { private static readonly RESOURCE_CHECK_UPDATE_INTERVAL_MILLISECS: number = 1000 * 60 * 60 * 24; private static lastOutdatedCheck: number; - private _supportedScans: SupportedScans = {} as SupportedScans; + private _entitledScans: EntitledScans = {} as EntitledScans; constructor(private _connectionManager: ConnectionManager, protected _logManager: LogManager) {} @@ -54,8 +48,8 @@ export class ScanManager implements ExtensionComponent { return this._connectionManager; } - public get supportedScans(): SupportedScans { - return this._supportedScans; + public get entitledScans(): EntitledScans { + return this._entitledScans; } /** @@ -63,7 +57,7 @@ export class ScanManager implements ExtensionComponent { * @param supportedScans - the supported scan to get the needed resources. if default, should call getSupportedScans before calling this method. * @returns true if all the outdated resources updated successfully, false otherwise */ - public async updateResources(supportedScans: SupportedScans = this._supportedScans): Promise { + public async updateResources(supportedScans: EntitledScans = this._entitledScans): Promise { let result: boolean = true; await ScanUtils.backgroundTask(async (progress: vscode.Progress<{ message?: string; increment?: number }>) => { progress.report({ message: 'Checking for updates' }); @@ -96,7 +90,7 @@ export class ScanManager implements ExtensionComponent { return result; } - private async getOutdatedResources(supportedScans: SupportedScans): Promise { + private async getOutdatedResources(supportedScans: EntitledScans): Promise { if (!this.shouldCheckOutdated()) { return []; } @@ -128,23 +122,16 @@ export class ScanManager implements ExtensionComponent { return !ScanManager.lastOutdatedCheck || Date.now() - ScanManager.lastOutdatedCheck > ScanManager.RESOURCE_CHECK_UPDATE_INTERVAL_MILLISECS; } - private getResources(supportedScans: SupportedScans): Resource[] { + private getResources(supportedScans: EntitledScans): Resource[] { let resources: Resource[] = []; if (supportedScans.applicability || supportedScans.iac || supportedScans.secrets) { - resources.push(BinaryRunner.getAnalyzerManagerResource(this._logManager)); + resources.push(JasRunner.getAnalyzerManagerResource(this._logManager)); } else { this.logManager.logMessage('You are not entitled to run Advanced Security scans', 'DEBUG'); } return resources; } - /** - * Validate if the graph-scan is supported in the Xray version - */ - public async validateGraphSupported(): Promise { - return await ConnectionUtils.testXrayVersionForScanGraph(this._connectionManager.createJfrogClient(), this._logManager); - } - /** * Check if Contextual Analysis (Applicability) is supported for the user */ @@ -167,23 +154,19 @@ export class ScanManager implements ExtensionComponent { } /** - * Check if Eos scan is supported for the user + * Check if SAST scan is supported for the user */ - public async isEosSupported(): Promise { - return true; + public async isSastSupported(): Promise { + // TODO: change to SAST feature when Xray entitlement service support it. + return await ConnectionUtils.testXrayEntitlementForFeature(this._connectionManager.createJfrogClient(), EntitlementScanFeature.Applicability); } /** * Get all the entitlement status for each type of scan the manager offers */ - public async getSupportedScans(): Promise { - let supportedScans: SupportedScans = {} as SupportedScans; + public async getSupportedScans(): Promise { + let supportedScans: EntitledScans = {} as EntitledScans; let requests: Promise[] = []; - requests.push( - this.validateGraphSupported() - .then(res => (supportedScans.dependencies = res)) - .catch(err => ScanUtils.onScanError(err, this._logManager, true)) - ); requests.push( this.isApplicabilitySupported() .then(res => (supportedScans.applicability = res)) @@ -200,12 +183,12 @@ export class ScanManager implements ExtensionComponent { .catch(err => ScanUtils.onScanError(err, this._logManager, true)) ); requests.push( - this.isEosSupported() - .then(res => (supportedScans.eos = res)) + this.isSastSupported() + .then(res => (supportedScans.sast = res)) .catch(err => ScanUtils.onScanError(err, this._logManager, true)) ); await Promise.all(requests); - this._supportedScans = supportedScans; + this._entitledScans = supportedScans; return supportedScans; } @@ -222,89 +205,4 @@ export class ScanManager implements ExtensionComponent { let scanLogic: GraphScanLogic = new GraphScanLogic(this._connectionManager); return await scanLogic.scan(graphRoot, progress, checkCanceled); } - - /** - * Scan CVE in files for applicability issues. - * @param directory - the directory that will be scan - * @param checkCancel - check if should cancel - * @param cveToRun - the CVE list we want to run applicability scan on - * @returns the applicability scan response - */ - public async scanApplicability( - directory: string, - checkCancel: () => void, - cveToRun: Set = new Set() - ): Promise { - let applicableRunner: ApplicabilityRunner = new ApplicabilityRunner(this._connectionManager, this._logManager); - if (!applicableRunner.validateSupported()) { - this._logManager.logMessage('Applicability runner could not find binary to run', 'WARN'); - return {} as ApplicabilityScanResponse; - } - let skipFiles: string[] = AnalyzerUtils.getAnalyzerManagerExcludePattern(Configuration.getScanExcludePattern()); - this._logManager.logMessage( - "Scanning directory '" + directory + "' for CVE issues: " + Array.from(cveToRun.values()) + '. Skipping files: ' + skipFiles, - 'DEBUG' - ); - return await applicableRunner.scan(directory, checkCancel, cveToRun, skipFiles); - } - - /** - * Scan directory for 'Infrastructure As Code' (Iac) issues. - * @param directory - the directory that will be scan - * @param checkCancel - check if should cancel - * @returns the Iac scan response - */ - public async scanIac(directory: string, checkCancel: () => void): Promise { - let iacRunner: IacRunner = new IacRunner(this._connectionManager, this.logManager); - if (!iacRunner.validateSupported()) { - this._logManager.logMessage('Iac runner could not find binary to run', 'WARN'); - return {} as IacScanResponse; - } - let skipFiles: string[] = AnalyzerUtils.getAnalyzerManagerExcludePattern(Configuration.getScanExcludePattern()); - this._logManager.logMessage("Scanning directory '" + directory + "', for Iac issues. Skipping files: " + skipFiles, 'DEBUG'); - return await iacRunner.scan(directory, checkCancel, skipFiles); - } - /** - * Scan directory for secrets issues. - * @param directory - the directory that will be scan - * @param checkCancel - check if should cancel - * @returns the Secrets scan response - */ - public async scanSecrets(directory: string, checkCancel: () => void): Promise { - let secretsRunner: SecretsRunner = new SecretsRunner(this._connectionManager, this.logManager); - if (!secretsRunner.validateSupported()) { - this._logManager.logMessage('Secrets runner could not find binary to run', 'WARN'); - return {} as SecretsScanResponse; - } - let skipFiles: string[] = AnalyzerUtils.getAnalyzerManagerExcludePattern(Configuration.getScanExcludePattern()); - this._logManager.logMessage("Scanning directory '" + directory + "', for Secrets issues. Skipping files: " + skipFiles, 'DEBUG'); - return await secretsRunner.scan(directory, checkCancel, skipFiles); - } - - /** - * Scan for Eos issues. - * @param checkCancel - check if should cancel - * @param requests - the Eos requests to run - * @returns the scan response - */ - public async scanEos(checkCancel: () => void, runDirectory?: string, ...requests: EosScanRequest[]): Promise { - let eosRunner: EosRunner = new EosRunner(this._connectionManager, this._logManager, undefined, undefined, runDirectory); - if (!eosRunner.validateSupported()) { - this._logManager.logMessage('Eos runner could not find binary to run', 'WARN'); - return {} as EosScanResponse; - } - if (requests.length === 0) { - this._logManager.logMessage('Eos runner must receive at least one request to run', 'ERR'); - return {} as EosScanResponse; - } - let skipFiles: string[] = AnalyzerUtils.getAnalyzerManagerExcludePattern(Configuration.getScanExcludePattern()); - this._logManager.logMessage( - 'Scanning for Eos issues in ' + - requests.map(request => `(Language '${request.language}', roots: [${request.roots.join()}])`) + - '. Skipping files: ' + - skipFiles, - 'DEBUG' - ); - return eosRunner.scan(checkCancel, skipFiles, ...requests); - } } diff --git a/src/main/scanLogic/scanRunners/analyzerModels.ts b/src/main/scanLogic/scanRunners/analyzerModels.ts index 0a451ce4a..f87e6c6eb 100644 --- a/src/main/scanLogic/scanRunners/analyzerModels.ts +++ b/src/main/scanLogic/scanRunners/analyzerModels.ts @@ -3,9 +3,9 @@ export interface AnalyzerRequest { } export enum ScanType { - ContextualAnalysis = 'analyze-applicability', + AnalyzeApplicability = 'analyze-applicability', Iac = 'iac-scan-modules', - Eos = 'analyze-codebase', + Sast = 'sast', Secrets = 'secrets-scan' } diff --git a/src/main/scanLogic/scanRunners/applicabilityScan.ts b/src/main/scanLogic/scanRunners/applicabilityScan.ts index de9d31019..8a7241480 100644 --- a/src/main/scanLogic/scanRunners/applicabilityScan.ts +++ b/src/main/scanLogic/scanRunners/applicabilityScan.ts @@ -1,10 +1,19 @@ -import { LogManager } from '../../log/logManager'; -import { BinaryRunner } from './binaryRunner'; -import { AnalyzeIssue, AnalyzeLocation, AnalyzerScanRun, ScanType, AnalyzeScanRequest, FileIssues } from './analyzerModels'; import { ConnectionManager } from '../../connect/connectionManager'; -import { Resource } from '../../utils/resource'; -import { ScanUtils } from '../../utils/scanUtils'; +import { LogManager } from '../../log/logManager'; +import { CveTreeNode } from '../../treeDataProviders/issuesTree/descriptorTree/cveTreeNode'; +import { ProjectDependencyTreeNode } from '../../treeDataProviders/issuesTree/descriptorTree/projectDependencyTreeNode'; +import { IssueTreeNode } from '../../treeDataProviders/issuesTree/issueTreeNode'; +import { AnalyzerUtils } from '../../treeDataProviders/utils/analyzerUtils'; +import { StepProgress } from '../../treeDataProviders/utils/stepProgress'; import { PackageType } from '../../types/projectType'; +import { DependencyScanResults } from '../../types/workspaceIssuesDetails'; +import { Configuration } from '../../utils/configuration'; +import { AppsConfigModule } from '../../utils/jfrogAppsConfig/jfrogAppsConfig'; +import { Resource } from '../../utils/resource'; +import { FileScanBundle } from '../../utils/scanUtils'; +import { Utils } from '../../utils/utils'; +import { AnalyzeIssue, AnalyzeLocation, AnalyzeScanRequest, AnalyzerScanResponse, AnalyzerScanRun, FileIssues, ScanType } from './analyzerModels'; +import { JasRunner } from './jasRunner'; /** * The request that is sent to the binary to scan applicability @@ -36,20 +45,18 @@ export interface CveApplicableDetails { } /** - * Describes a runner for the Applicability scan executable file. + * Describes a runner for the Applicability scan. */ -export class ApplicabilityRunner extends BinaryRunner { +export class ApplicabilityRunner extends JasRunner { constructor( + private _bundlesWithIssues: FileScanBundle[], + private _packageType: PackageType, + private _progressManager: StepProgress, connectionManager: ConnectionManager, logManager: LogManager, - binary?: Resource, - timeout: number = ScanUtils.ANALYZER_TIMEOUT_MILLISECS + binary?: Resource ) { - super(connectionManager, timeout, ScanType.ContextualAnalysis, logManager, binary); - } - - public static supportedPackageTypes(): PackageType[] { - return [PackageType.Npm, PackageType.Yarn, PackageType.Python, PackageType.Maven]; + super(connectionManager, ScanType.AnalyzeApplicability, logManager, new AppsConfigModule(), binary); } /** @override */ @@ -63,53 +70,181 @@ export class ApplicabilityRunner extends BinaryRunner { return str.replace('cve_whitelist', 'cve-whitelist'); } + /** @override */ + protected logStartScanning(request: ApplicabilityScanArgs): void { + this._logManager.logMessage( + `Scanning directory ' ${request.roots[0]} + ', for ${this._scanType} issues: ${request.cve_whitelist} Skipping folders: ${request.skipped_folders}`, + 'DEBUG' + ); + } + /** * Scan for applicability issues - * @param directory - the directory the scan will perform on its files - * @param checkCancel - check if cancel - * @param cvesToRun - the CVEs to run the scan on - * @param skipFolders - the subfolders inside the directory to exclude from the scan - * @returns the response generated from the scan */ - public async scan( - directory: string, - checkCancel: () => void, - cveToRun: Set = new Set(), - skipFolders: string[] = [] - ): Promise { - const request: ApplicabilityScanArgs = { - type: ScanType.ContextualAnalysis, - roots: [directory], - cve_whitelist: Array.from(cveToRun), - skipped_folders: skipFolders - } as ApplicabilityScanArgs; - return await this.run(checkCancel, request).then(response => this.convertResponse(response?.runs[0])); + public async scan(): Promise { + let filteredBundles: Map> = this.filterBundlesWithoutIssuesToScan(); + let workspaceToBundles: Map>> = this.mapBundlesForApplicableScanning(filteredBundles); + if (workspaceToBundles.size == 0) { + return; + } + let excludePatterns: string[] = AnalyzerUtils.getAnalyzerManagerExcludePatterns(Configuration.getScanExcludePattern()); + for (let [workspacePath, bundles] of workspaceToBundles) { + let cveToScan: Set = Utils.combineSets(Array.from(bundles.values())); + // Scan workspace for all cve in relevant bundles + let startApplicableTime: number = Date.now(); + + const request: ApplicabilityScanArgs = { + type: ScanType.AnalyzeApplicability, + roots: [workspacePath], + cve_whitelist: Array.from(cveToScan), + skipped_folders: excludePatterns + } as ApplicabilityScanArgs; + + this.logStartScanning(request); + let response: AnalyzerScanResponse | undefined = await this.executeRequest(this._progressManager.checkCancel, request); + let applicableIssues: ApplicabilityScanResponse = this.convertResponse(response); + if (applicableIssues?.applicableCve) { + this.transferApplicableResponseToBundles(applicableIssues, bundles, startApplicableTime); + } + } + } + + /** + * Filter bundles without direct cve issues, transform the bundle list to have its relevant cve to scan set. + * @returns Map of bundles to their set of direct cves issues, with at least one for each bundle + */ + private filterBundlesWithoutIssuesToScan(): Map> { + let filtered: Map> = new Map>(); + for (let fileScanBundle of this._bundlesWithIssues) { + if (!(fileScanBundle.dataNode instanceof ProjectDependencyTreeNode)) { + // Filter non dependencies projects + continue; + } + let cvesToScan: Set = new Set(); + fileScanBundle.dataNode.issues.forEach((issue: IssueTreeNode) => { + if (!(issue instanceof CveTreeNode) || !issue.cve?.cve) { + return; + } + // For Python projects, all CVEs should be included because in some cases it is impossible to determine whether a dependency is direct. + // Other project types should include only CVEs on direct dependencies. + if (this._packageType === PackageType.Python || !issue.parent.indirect) { + cvesToScan.add(issue.cve.cve); + } + }); + if (cvesToScan.size == 0) { + // Nothing to do in bundle + continue; + } + + filtered.set(fileScanBundle, cvesToScan); + } + + return filtered; + } + + /** + * Create a mapping between a workspace and all the given bundles that relevant to it. + * @param filteredBundles - bundles to map + * @returns mapped bundles to similar workspace + */ + private mapBundlesForApplicableScanning(filteredBundles: Map>): Map>> { + let workspaceToScanBundles: Map>> = new Map>>(); + + for (let [fileScanBundle, cvesToScan] of filteredBundles) { + let descriptorIssues: DependencyScanResults = fileScanBundle.data; + // Map information to similar directory space + let workspacePath: string = AnalyzerUtils.getWorkspacePath(fileScanBundle.dataNode, descriptorIssues.fullPath); + if (!workspaceToScanBundles.has(workspacePath)) { + workspaceToScanBundles.set(workspacePath, new Map>()); + } + workspaceToScanBundles.get(workspacePath)?.set(fileScanBundle, cvesToScan); + this._logManager.logMessage('Adding data from descriptor ' + descriptorIssues.fullPath + ' for cve applicability scan', 'INFO'); + } + + return workspaceToScanBundles; + } + + /** + * Transfer and populate information from a given applicable scan to each bundle + * @param applicableIssues - Full scan response with information relevant to all the bundles + * @param bundles - the bundles that will be populated only with their relevant information + * @param startTime - The start time for the applicable scan + */ + private transferApplicableResponseToBundles( + applicableIssues: ApplicabilityScanResponse, + bundles: Map>, + startTime: number + ) { + for (let [bundle, relevantCve] of bundles) { + let descriptorIssues: DependencyScanResults = bundle.data; + // Filter only relevant information + descriptorIssues.applicableScanTimestamp = Date.now(); + descriptorIssues.applicableIssues = this.filterApplicabilityScanResponse(applicableIssues, relevantCve); + // Populate it in bundle + let issuesCount: number = AnalyzerUtils.populateApplicableIssues( + bundle.rootNode, + bundle.dataNode, + descriptorIssues + ); + super.logNumberOfIssues(issuesCount, descriptorIssues.fullPath, startTime, descriptorIssues.applicableScanTimestamp); + bundle.rootNode.apply(); + } + } + + /** + * For a given full ApplicableScanResponse scan results, filter the results to only contain information relevant to a given cve list + * @param scanResponse - All the applicable information + * @param relevantCve - CVE list to filter information only for them + * @returns ApplicableScanResponse with information relevant only for the given relevant CVEs + */ + private filterApplicabilityScanResponse(scanResponse: ApplicabilityScanResponse, relevantCve: Set): ApplicabilityScanResponse { + // Map from Applicable CVE ID to CveApplicableDetails + let applicableCvesIdToDetails: Map = new Map( + Object.entries(scanResponse.applicableCve) + ); + let relevantScannedCve: string[] = []; + let relevantApplicableCve: Map = new Map(); + + for (let scannedCve of scanResponse.scannedCve) { + if (relevantCve.has(scannedCve)) { + relevantScannedCve.push(scannedCve); + let potential: CveApplicableDetails | undefined = applicableCvesIdToDetails.get(scannedCve); + if (potential) { + relevantApplicableCve.set(scannedCve, potential); + } + } + } + return { + scannedCve: Array.from(relevantScannedCve), + applicableCve: Object.fromEntries(relevantApplicableCve.entries()) + } as ApplicabilityScanResponse; } /** * Generate response from the run results - * @param run - the run results generated from the binary + * @param response - The run results generated from the binary * @returns the response generated from the scan run */ - public convertResponse(run: AnalyzerScanRun | undefined): ApplicabilityScanResponse { - if (!run) { + public convertResponse(response: AnalyzerScanResponse | undefined): ApplicabilityScanResponse { + if (!response) { return {} as ApplicabilityScanResponse; } // Prepare - let applicable: Map = new Map(); - let scanned: Set = new Set(); - let rulesFullDescription: Map = new Map(); - for (const rule of run.tool.driver.rules) { + const analyzerScanRun: AnalyzerScanRun = response.runs[0]; + const applicable: Map = new Map(); + const scanned: Set = new Set(); + const rulesFullDescription: Map = new Map(); + for (const rule of analyzerScanRun.tool.driver.rules) { if (rule.fullDescription) { rulesFullDescription.set(rule.id, rule.fullDescription.text); } } - let issues: AnalyzeIssue[] = run.results; + const issues: AnalyzeIssue[] = analyzerScanRun.results; if (issues) { // Generate applicable data for all the issues issues.forEach((analyzeIssue: AnalyzeIssue) => { if ((!analyzeIssue.kind || analyzeIssue.kind === 'fail') && analyzeIssue.locations) { - let applicableDetails: CveApplicableDetails = this.getOrCreateApplicableDetails( + const applicableDetails: CveApplicableDetails = this.getOrCreateApplicableDetails( analyzeIssue, applicable, rulesFullDescription.get(analyzeIssue.ruleId) @@ -131,8 +266,8 @@ export class ApplicabilityRunner extends BinaryRunner { /** * Get or create if not exists file evidence from the CVE applicable issues - * @param applicableDetails - the CVE applicable issues with the file list - * @param filePath - the file to search or create if not exist + * @param applicableDetails - The CVE applicable issues with the file list + * @param filePath - The file to search or create if not exist * @returns the object that represents the issues in a file for the CVE */ private getOrCreateFileIssues(applicableDetails: CveApplicableDetails, filePath: string): FileIssues { @@ -153,9 +288,9 @@ export class ApplicabilityRunner extends BinaryRunner { /** * Get or create CVE applicable issue if not exists from the applicable list. - * @param analyzedIssue - the applicable issue to generate information from - * @param applicable - the list of all the applicable CVEs - * @param fullDescription - the full description of the applicable issue + * @param analyzedIssue - Applicable issue to generate information from + * @param applicable - List of all the applicable CVEs + * @param fullDescription - Full description of the applicable issue * @returns the CveApplicableDetails object for the analyzedIssue CVE */ private getOrCreateApplicableDetails( diff --git a/src/main/scanLogic/scanRunners/eosScan.ts b/src/main/scanLogic/scanRunners/eosScan.ts deleted file mode 100644 index 3d5d31b3b..000000000 --- a/src/main/scanLogic/scanRunners/eosScan.ts +++ /dev/null @@ -1,219 +0,0 @@ -import { LogManager } from '../../log/logManager'; -import { BinaryRunner } from './binaryRunner'; -import { - AnalyzeIssue, - AnalyzerScanResponse, - AnalyzeScanRequest, - AnalyzeLocation, - FileRegion, - FileLocation, - CodeFlow, - ScanType -} from './analyzerModels'; -import { ConnectionManager } from '../../connect/connectionManager'; -import { AnalyzerUtils } from '../../treeDataProviders/utils/analyzerUtils'; -import { Resource } from '../../utils/resource'; -import { Severity } from '../../types/severity'; -import { Translators } from '../../utils/translators'; -import { ScanUtils } from '../../utils/scanUtils'; - -export interface EosScanRequest extends AnalyzeScanRequest { - language: LanguageType; - exclude_patterns: string[]; -} - -export type LanguageType = 'python' | 'javascript' | 'java'; - -export interface EosScanResponse { - filesWithIssues: EosFileIssues[]; -} - -export interface EosFileIssues { - full_path: string; - issues: EosIssue[]; -} - -export interface EosIssue { - ruleId: string; - severity: Severity; - ruleName: string; - fullDescription?: string; - locations: EosIssueLocation[]; -} - -export interface EosIssueLocation { - region: FileRegion; - threadFlows: FileLocation[][]; -} - -export class EosRunner extends BinaryRunner { - constructor( - connectionManager: ConnectionManager, - logManager: LogManager, - binary?: Resource, - timeout: number = ScanUtils.ANALYZER_TIMEOUT_MILLISECS, - runDirectory?: string - ) { - super(connectionManager, timeout, ScanType.Eos, logManager, binary, runDirectory); - } - - /** @override */ - protected async runBinary(yamlConfigPath: string, executionLogDirectory: string | undefined, checkCancel: () => void): Promise { - await this.executeBinary(checkCancel, ['zd', yamlConfigPath], executionLogDirectory); - } - - /** - * Scan for EOS issues - * @param checkCancel - check if cancel - * @param requests - requests to run - * @returns the response generated from the scan - */ - public async scan(checkCancel: () => void, skipFiles: string[], ...requests: EosScanRequest[]): Promise { - requests.forEach(request => { - request.type = ScanType.Eos; - request.exclude_patterns = skipFiles; - }); - return await this.run(checkCancel, ...requests).then(runResult => this.generateScanResponse(runResult)); - } - - /** - * Generate response from the run results - * @param run - the run results generated from the binary - * @returns the response generated from the scan run - */ - public generateScanResponse(response?: AnalyzerScanResponse): EosScanResponse { - if (!response) { - return {} as EosScanResponse; - } - let eosResponse: EosScanResponse = { - filesWithIssues: [] - } as EosScanResponse; - - for (const run of response.runs) { - // Prepare - let rulesFullDescription: Map = new Map(); - for (const rule of run.tool.driver.rules) { - if (rule.fullDescription) { - rulesFullDescription.set(rule.id, rule.fullDescription.text); - } - } - // Generate response data - run.results?.forEach((analyzeIssue: AnalyzeIssue) => { - if (analyzeIssue.suppressions && analyzeIssue.suppressions.length > 0) { - // Suppress issue - return; - } - this.generateIssueData(eosResponse, analyzeIssue, rulesFullDescription.get(analyzeIssue.ruleId)); - }); - } - return eosResponse; - } - - /** - * Generate the data for a specific analyze issue (the file object, the issue in the file object and all the location objects of this issue). - * If the issue also contains codeFlow generate the needed information for it as well - * @param eosResponse - the response of the scan that holds all the file objects - * @param analyzeIssue - the issue to handle and generate information base on it - * @param fullDescription - the description of the analyzeIssue - */ - public generateIssueData(eosResponse: EosScanResponse, analyzeIssue: AnalyzeIssue, fullDescription?: string) { - analyzeIssue.locations.forEach(location => { - let fileWithIssues: EosFileIssues = this.getOrCreateEosFileIssues(eosResponse, location.physicalLocation.artifactLocation.uri); - let fileIssue: EosIssue = this.getOrCreateEosIssue(fileWithIssues, analyzeIssue, fullDescription); - let issueLocation: EosIssueLocation = this.getOrCreateIssueLocation(fileIssue, location.physicalLocation); - if (analyzeIssue.codeFlows) { - this.generateCodeFlowData(fileWithIssues.full_path, issueLocation, analyzeIssue.codeFlows); - } - }); - } - - /** - * Generate the code flow data. - * Search the code flows for the given location (in a given file), the code flow belong to a location if the last location in the flow matches the given location. - * @param filePath - the path to the file the issue location belongs to - * @param issueLocation - the issue in a location to search code flows that belongs to it - * @param codeFlows - all the code flows for this issue - */ - private generateCodeFlowData(filePath: string, issueLocation: EosIssueLocation, codeFlows: CodeFlow[]) { - // Check if exists flows for the current location in this issue - for (const codeFlow of codeFlows) { - for (const threadFlow of codeFlow.threadFlows) { - // The last location in the threadFlow should match the location of the issue - let potential: AnalyzeLocation = threadFlow.locations[threadFlow.locations.length - 1].location; - if ( - potential.physicalLocation.artifactLocation.uri === filePath && - AnalyzerUtils.isSameRegion(potential.physicalLocation.region, issueLocation.region) - ) { - let locations: FileLocation[] = threadFlow.locations.map(location => location.location.physicalLocation); - for (let fileLocation of locations) { - fileLocation.artifactLocation.uri = AnalyzerUtils.parseLocationFilePath(fileLocation.artifactLocation.uri); - } - issueLocation.threadFlows.push(locations); - } - } - } - } - - /** - * Get or create issue location base on a given file location - * @param fileIssue - the issue that holds all the locations - * @param physicalLocation - the location to search or create - * @returns issue location - */ - private getOrCreateIssueLocation(fileIssue: EosIssue, physicalLocation: FileLocation): EosIssueLocation { - // TODO: There could be multiple stack trace for each location with issue, uncomment when webview can handle this. - // let potential: EosIssueLocation | undefined = fileIssue.locations.find(location => AnalyzerUtils.isSameRegion(location.region,physicalLocation.region)); - // if(potential) { - // return potential; - // } - let location: EosIssueLocation = { - region: physicalLocation.region, - threadFlows: [] - } as EosIssueLocation; - fileIssue.locations.push(location); - return location; - } - - /** - * Get or create issue in a given file if not exists - * @param fileWithIssues - the file with the issues - * @param analyzeIssue - the issue to search or create - * @param fullDescription - the description of the issue - * @returns - the eos issue - */ - private getOrCreateEosIssue(fileWithIssues: EosFileIssues, analyzeIssue: AnalyzeIssue, fullDescription?: string): EosIssue { - let potential: EosIssue | undefined = fileWithIssues.issues.find(issue => issue.ruleId === analyzeIssue.ruleId); - if (potential) { - return potential; - } - let fileIssue: EosIssue = { - ruleId: analyzeIssue.ruleId, - severity: Translators.levelToSeverity(analyzeIssue.level), - ruleName: analyzeIssue.message.text, - fullDescription: fullDescription, - locations: [] - } as EosIssue; - fileWithIssues.issues.push(fileIssue); - return fileIssue; - } - - /** - * Get or create file with issues if not exists in the response - * @param response - the response that holds the files - * @param uri - the files to search or create - * @returns - file with issues - */ - private getOrCreateEosFileIssues(response: EosScanResponse, uri: string): EosFileIssues { - let potential: EosFileIssues | undefined = response.filesWithIssues.find(fileWithIssues => fileWithIssues.full_path === uri); - if (potential) { - return potential; - } - let fileWithIssues: EosFileIssues = { - full_path: uri, - issues: [] - } as EosFileIssues; - response.filesWithIssues.push(fileWithIssues); - - return fileWithIssues; - } -} diff --git a/src/main/scanLogic/scanRunners/iacScan.ts b/src/main/scanLogic/scanRunners/iacScan.ts index 4100d2d21..203544a76 100644 --- a/src/main/scanLogic/scanRunners/iacScan.ts +++ b/src/main/scanLogic/scanRunners/iacScan.ts @@ -1,10 +1,13 @@ import { ConnectionManager } from '../../connect/connectionManager'; import { LogManager } from '../../log/logManager'; +import { IssuesRootTreeNode } from '../../treeDataProviders/issuesTree/issuesRootTreeNode'; import { AnalyzerUtils, FileWithSecurityIssues } from '../../treeDataProviders/utils/analyzerUtils'; +import { StepProgress } from '../../treeDataProviders/utils/stepProgress'; +import { ScanResults } from '../../types/workspaceIssuesDetails'; +import { AppsConfigModule } from '../../utils/jfrogAppsConfig/jfrogAppsConfig'; import { Resource } from '../../utils/resource'; -import { ScanUtils } from '../../utils/scanUtils'; -import { AnalyzeScanRequest, AnalyzerScanResponse, ScanType } from './analyzerModels'; -import { BinaryRunner } from './binaryRunner'; +import { AnalyzeScanRequest, AnalyzerScanResponse, AnalyzerScanRun, ScanType } from './analyzerModels'; +import { JasRunner } from './jasRunner'; export interface IacScanResponse { filesWithIssues: FileWithSecurityIssues[]; @@ -13,14 +16,17 @@ export interface IacScanResponse { /** * Describes a runner for the 'Infrastructure As Code' (Iac) scan executable file. */ -export class IacRunner extends BinaryRunner { +export class IacRunner extends JasRunner { constructor( + private _scanResults: ScanResults, + private _root: IssuesRootTreeNode, + private _progressManager: StepProgress, connectionManager: ConnectionManager, logManager: LogManager, - binary?: Resource, - timeout: number = ScanUtils.ANALYZER_TIMEOUT_MILLISECS + config: AppsConfigModule, + binary?: Resource ) { - super(connectionManager, timeout, ScanType.Iac, logManager, binary); + super(connectionManager, ScanType.Iac, logManager, config, binary); } /** @override */ @@ -28,41 +34,55 @@ export class IacRunner extends BinaryRunner { await this.executeBinary(checkCancel, ['iac', yamlConfigPath], executionLogDirectory); } - public async scan(directory: string, checkCancel: () => void, skipFolders: string[] = []): Promise { + /** + * Run IaC scan async task and populate the given bundle with the results. + */ + public async scan(): Promise { + let startTime: number = Date.now(); let request: AnalyzeScanRequest = { - type: ScanType.Iac, - roots: [directory], - skipped_folders: skipFolders + type: this._scanType, + roots: this._config.GetSourceRoots(this._scanType), + skipped_folders: this._config.GetExcludePatterns(this._scanType) } as AnalyzeScanRequest; - return await this.run(checkCancel, request).then(runResult => this.convertResponse(runResult)); + super.logStartScanning(request); + let response: AnalyzerScanResponse | undefined = await this.executeRequest(this._progressManager.checkCancel, request); + let iacScanResponse: IacScanResponse = this.generateScanResponse(response); + if (response) { + this._scanResults.iacScan = iacScanResponse; + this._scanResults.iacScanTimestamp = Date.now(); + let issuesCount: number = AnalyzerUtils.populateIacIssues(this._root, this._scanResults); + super.logNumberOfIssues(issuesCount, this._scanResults.path, startTime, this._scanResults.iacScanTimestamp); + this._root.apply(); + } + this._progressManager.reportProgress(); } /** * Generate response from the run results - * @param analyzerScanResponse - the run results generated from the binary + * @param response - Run results generated from the binary * @returns the response generated from the scan run */ - public convertResponse(analyzerScanResponse?: AnalyzerScanResponse): IacScanResponse { - if (!analyzerScanResponse) { + public generateScanResponse(response?: AnalyzerScanResponse): IacScanResponse { + if (!response) { return {} as IacScanResponse; } + let analyzerScanRun: AnalyzerScanRun = response.runs[0]; let iacResponse: IacScanResponse = { filesWithIssues: [] } as IacScanResponse; - for (const run of analyzerScanResponse.runs) { - // Get the full descriptions of all rules - let rulesFullDescription: Map = new Map(); - for (const rule of run.tool.driver.rules) { - if (rule.fullDescription) { - rulesFullDescription.set(rule.id, rule.fullDescription.text); - } + // Get the full descriptions of all rules + let rulesFullDescription: Map = new Map(); + for (const rule of analyzerScanRun.tool.driver.rules) { + if (rule.fullDescription) { + rulesFullDescription.set(rule.id, rule.fullDescription.text); } - // Generate response data - run.results?.forEach(analyzeIssue => - AnalyzerUtils.generateIssueData(iacResponse, analyzeIssue, rulesFullDescription.get(analyzeIssue.ruleId)) - ); } + // Generate response data + analyzerScanRun.results?.forEach(analyzeIssue => + AnalyzerUtils.generateIssueData(iacResponse, analyzeIssue, rulesFullDescription.get(analyzeIssue.ruleId)) + ); + return iacResponse; } } diff --git a/src/main/scanLogic/scanRunners/binaryRunner.ts b/src/main/scanLogic/scanRunners/jasRunner.ts similarity index 58% rename from src/main/scanLogic/scanRunners/binaryRunner.ts rename to src/main/scanLogic/scanRunners/jasRunner.ts index 070f0ca83..db6933537 100644 --- a/src/main/scanLogic/scanRunners/binaryRunner.ts +++ b/src/main/scanLogic/scanRunners/jasRunner.ts @@ -2,54 +2,58 @@ import * as fs from 'fs'; import yaml from 'js-yaml'; import * as path from 'path'; -import { LogManager } from '../../log/logManager'; -import { Utils } from '../../utils/utils'; -import { NotEntitledError, NotSupportedError, OsNotSupportedError, ScanCancellationError, ScanUtils } from '../../utils/scanUtils'; -import { AnalyzerRequest, AnalyzerScanResponse, ScanType, AnalyzeScanRequest } from './analyzerModels'; +import { IProxyConfig } from 'jfrog-client-js'; import { ConnectionManager } from '../../connect/connectionManager'; import { ConnectionUtils } from '../../connect/connectionUtils'; -import { IProxyConfig } from 'jfrog-client-js'; +import { LogManager } from '../../log/logManager'; +import { LogUtils } from '../../log/logUtils'; import { Configuration } from '../../utils/configuration'; +import { AppsConfigModule } from '../../utils/jfrogAppsConfig/jfrogAppsConfig'; import { Resource } from '../../utils/resource'; import { RunUtils } from '../../utils/runUtils'; +import { NotEntitledError, NotSupportedError, OsNotSupportedError, ScanCancellationError, ScanUtils } from '../../utils/scanUtils'; import { Translators } from '../../utils/translators'; -import { LogUtils } from '../../log/logUtils'; +import { Utils } from '../../utils/utils'; +import { AnalyzeScanRequest, AnalyzerRequest, AnalyzerScanResponse, ScanType } from './analyzerModels'; /** * Arguments for running binary async */ class RunArgs { // The requests for the run - public requests: RunRequest[] = []; + public request: RunRequest = {} as RunRequest; // The directory that the requests/responses are expected constructor(public readonly directory: string) {} public getRoots(): string[] { let roots: Set = new Set(); - this.requests.forEach(request => request.roots.forEach(root => roots.add(root))); + this.request.roots.forEach(root => roots.add(root)); return Array.from(roots); } } interface RunRequest { type: ScanType; - request: string; + requestContent: string; requestPath: string; roots: string[]; responsePath: string; } /** - * Describes a runner for binary executable files. - * The executable expected to be provided with a path to request file (yaml format) and produce a response file with a result + * Base class for a JFrog Advanced Security scanner. */ -export abstract class BinaryRunner { +export abstract class JasRunner { protected _verbose: boolean = false; + protected _runDirectory: string; private static readonly RUNNER_NAME: string = 'analyzerManager'; - public static readonly RUNNER_VERSION: string = '1.3.2.2005632'; + public static readonly RUNNER_VERSION: string = '1.3.2.2019257'; private static readonly DOWNLOAD_URL: string = '/xsc-gen-exe-analyzer-manager-local/v1/'; + // 5 min + public static readonly TIMEOUT_MILLISECS: number = 1000 * 60 * 5; + public static readonly NOT_ENTITLED: number = 31; public static readonly NOT_SUPPORTED: number = 13; public static readonly OS_NOT_SUPPORTED: number = 55; @@ -64,36 +68,34 @@ export abstract class BinaryRunner { constructor( protected _connectionManager: ConnectionManager, - protected _abortCheckInterval: number, - protected _type: ScanType, + protected _scanType: ScanType, protected _logManager: LogManager, - protected _binary: Resource = BinaryRunner.getAnalyzerManagerResource(_logManager), - protected _runDirectory?: string + protected _config: AppsConfigModule, + protected _binary: Resource = JasRunner.getAnalyzerManagerResource(_logManager) ) { - this._runDirectory = this._runDirectory ?? path.dirname(this._binary.fullPath); - - if (this._abortCheckInterval <= 0) { - // Default check in 1 sec intervals - this._abortCheckInterval = 1 * 1000; - } + this._runDirectory = path.dirname(this._binary.fullPath); } public static getDefaultAnalyzerManagerSourceUrl(version: string = '[RELEASE]'): string { - return Utils.addZipSuffix(BinaryRunner.DOWNLOAD_URL + '/' + version + '/' + Utils.getArchitecture() + '/' + BinaryRunner.RUNNER_NAME); + return Utils.addZipSuffix(JasRunner.DOWNLOAD_URL + '/' + version + '/' + Utils.getArchitecture() + '/' + JasRunner.RUNNER_NAME); } public static getDefaultAnalyzerManagerTargetPath(baseDirectory?: string): string { - return Utils.addWinSuffixIfNeeded(path.join(baseDirectory ?? ScanUtils.getIssuesPath(), BinaryRunner.RUNNER_NAME, BinaryRunner.RUNNER_NAME)); + return Utils.addWinSuffixIfNeeded(path.join(baseDirectory ?? ScanUtils.getIssuesPath(), JasRunner.RUNNER_NAME, JasRunner.RUNNER_NAME)); } public static getAnalyzerManagerResource(logManager: LogManager, targetPath?: string): Resource { return new Resource( - this.getDefaultAnalyzerManagerSourceUrl(BinaryRunner.RUNNER_VERSION), + this.getDefaultAnalyzerManagerSourceUrl(JasRunner.RUNNER_VERSION), targetPath ?? this.getDefaultAnalyzerManagerTargetPath(), logManager ); } + public get binary(): Resource { + return this._binary; + } + public get verbose(): boolean { return this._verbose; } @@ -102,13 +104,39 @@ export abstract class BinaryRunner { this._verbose = value; } + /** + * Run full JAS scan for the specific scanner. + */ + public abstract scan(): Promise; + /** * Run the executeBinary method with the provided request path - * @param checkCancel - check if cancel - * @param yamlConfigPath - the path to the request - * @param executionLogDirectory - og file will be written to the dir + * @param yamlConfigPath - Path to the request + * @param executionLogDirectory - Log file will be written to the dir + * @param checkCancel - Check if should cancel + * @param responsePath - Path to the output file */ - protected abstract runBinary(yamlConfigPath: string, executionLogDirectory: string | undefined, checkCancel: () => void): Promise; + protected abstract runBinary( + yamlConfigPath: string, + executionLogDirectory: string | undefined, + checkCancel: () => void, + responsePath: string | undefined + ): Promise; + + /** + * @returns true if should run the JAS scanner + */ + public shouldRun(): boolean { + if (!this.validateSupported()) { + this._logManager.logMessage(this._scanType + ' runner could not find binary to run', 'WARN'); + return false; + } + if (this._config.ShouldSkipScanner(this._scanType)) { + this._logManager.debug('Skipping ' + this._scanType + ' scanning'); + return false; + } + return true; + } /** * Validates that the binary exists and can run @@ -120,12 +148,12 @@ export abstract class BinaryRunner { /** * Execute the cmd command to run the binary with given arguments and an option to abort the operation. - * @param checkCancel - check if should cancel - * @param args - the arguments for the command - * @param executionLogDirectory - the directory to save the execution log in + * @param checkCancel - Check if should cancel + * @param args - Arguments for the command + * @param executionLogDirectory - Directory to save the execution log in */ protected async executeBinary(checkCancel: () => void, args: string[], executionLogDirectory?: string): Promise { - await RunUtils.runWithTimeout(this._abortCheckInterval, checkCancel, { + await RunUtils.runWithTimeout(JasRunner.TIMEOUT_MILLISECS, checkCancel, { title: this._binary.name, task: this.executeBinaryTask(args, executionLogDirectory) }); @@ -137,11 +165,9 @@ export abstract class BinaryRunner { * @param executionLogDirectory - the directory to save the execution log in */ private async executeBinaryTask(args: string[], executionLogDirectory?: string): Promise { - let std: any = await ScanUtils.executeCmdAsync( - '"' + this._binary.fullPath + '" ' + args.join(' '), - this._runDirectory, - this.createEnvForRun(executionLogDirectory) - ); + let command: string = '"' + this._binary.fullPath + '" ' + args.join(' '); + this._logManager.debug("Executing '" + command + "' in directory '" + this._runDirectory + "'"); + let std: any = await ScanUtils.executeCmdAsync(command, this._runDirectory, this.createEnvForRun(executionLogDirectory)); if (std.stdout && std.stdout.length > 0) { this.logTaskResult(std.stdout, false); } @@ -151,13 +177,28 @@ export abstract class BinaryRunner { } private logTaskResult(stdChannel: string, isErr: boolean) { - let text: string = "Done executing '" + Translators.toAnalyzerTypeString(this._type) + "' with log, log:\n" + stdChannel; + let text: string = "Done executing '" + Translators.toAnalyzerTypeString(this._scanType) + "' with log, log:\n" + stdChannel; if (this._verbose) { console.log(text); } this._logManager.logMessage(text, isErr ? 'ERR' : 'DEBUG'); } + protected logStartScanning(request: AnalyzeScanRequest): void { + this._logManager.logMessage( + `Scanning directories ' ${request.roots} + ', for ${this._scanType} issues. Skipping folders: ${request.skipped_folders}`, + 'DEBUG' + ); + } + + protected logNumberOfIssues(issuesCount: number, workspace: string, startTime: number, endTime: number): void { + let elapsedTime: number = (endTime - startTime) / 1000; + this._logManager.logMessage( + `Found ${issuesCount} ${this._scanType} issues in workspace '${workspace}' (elapsed ${elapsedTime} seconds)`, + 'INFO' + ); + } + /** * Create the needed environment variables for the runner to run * @param executionLogDirectory - the directory that the log will be written into, if not provided the log will be written in stdout/stderr @@ -170,13 +211,13 @@ export abstract class BinaryRunner { let binaryVars: NodeJS.ProcessEnv = { JFROG_CLI_LOG_LEVEL: Translators.toAnalyzerLogLevel(Configuration.getLogLevel()) }; // Platform information - binaryVars[BinaryRunner.ENV_PLATFORM_URL] = this._connectionManager.url; + binaryVars[JasRunner.ENV_PLATFORM_URL] = this._connectionManager.url; // Credentials information if (this._connectionManager.accessToken) { - binaryVars[BinaryRunner.ENV_TOKEN] = this._connectionManager.accessToken; + binaryVars[JasRunner.ENV_TOKEN] = this._connectionManager.accessToken; } else { - binaryVars[BinaryRunner.ENV_USER] = this._connectionManager.username; - binaryVars[BinaryRunner.ENV_PASSWORD] = this._connectionManager.password; + binaryVars[JasRunner.ENV_USER] = this._connectionManager.username; + binaryVars[JasRunner.ENV_PASSWORD] = this._connectionManager.password; } this.populateOptionalInformation(binaryVars, executionLogDirectory); @@ -200,10 +241,10 @@ export abstract class BinaryRunner { proxyHttpsUrl = 'https://' + proxyUrl; } if (proxyHttpUrl) { - binaryVars[BinaryRunner.ENV_HTTP_PROXY] = this.addOptionalProxyAuthInformation(proxyHttpUrl); + binaryVars[JasRunner.ENV_HTTP_PROXY] = this.addOptionalProxyAuthInformation(proxyHttpUrl); } if (proxyHttpsUrl) { - binaryVars[BinaryRunner.ENV_HTTPS_PROXY] = this.addOptionalProxyAuthInformation(proxyHttpsUrl); + binaryVars[JasRunner.ENV_HTTPS_PROXY] = this.addOptionalProxyAuthInformation(proxyHttpsUrl); } // Optional log destination if (executionLogDirectory) { @@ -213,7 +254,7 @@ export abstract class BinaryRunner { /** * Add optional proxy auth information to the base url if exists - * @param url - the base url to add information on + * @param url - Base url to add information on * @returns the url with the auth information if exists or the given url if not */ private addOptionalProxyAuthInformation(url: string): string { @@ -230,55 +271,60 @@ export abstract class BinaryRunner { return url; } - public async run(checkCancel: () => void, ...requests: AnalyzeScanRequest[]): Promise { - if (!this.validateSupported()) { - return undefined; - } - let args: RunArgs = this.createRunArguments(...requests); + /** + * Execute the input scan request. + * @param checkCancel - Check if should cancel + * @param request - Request to perform in YAML format + * @returns + */ + public async executeRequest(checkCancel: () => void, request: AnalyzeScanRequest): Promise { + let args: RunArgs = this.createRunArguments(request); + let execErr: Error | undefined; try { - if (args.requests.length == 0) { - return undefined; + return await this.runRequest(checkCancel, args.request.requestContent, args.request.requestPath, args.request.responsePath); + } catch (err) { + execErr = err; + if (err instanceof ScanCancellationError || err instanceof NotEntitledError || err instanceof NotSupportedError) { + throw err; } - return await this.runTasks(args, checkCancel); + this._logManager.logError(execErr); } finally { + this.handleExecutionLog(args, execErr); ScanUtils.removeFolder(args.directory); } + return; } /** * Populate the run arguments based on the given requests information - * @param requests - the run requests information + * @param requests - Run requests information * @return run arguments for the given requests */ - private createRunArguments(...requests: AnalyzeScanRequest[]): RunArgs { + private createRunArguments(request: AnalyzeScanRequest): RunArgs { let args: RunArgs = new RunArgs(ScanUtils.createTmpDir()); - let processedRoots: Set = new Set(); - - for (const request of requests) { - if (request.roots.length > 0 && request.roots.every(root => !processedRoots.has(root))) { - // Prepare request information and insert as an actual request - const requestPath: string = path.join(args.directory, 'request_' + args.requests.length); - const responsePath: string = path.join(args.directory, 'response_' + args.requests.length); - request.output = responsePath; - request.type = this._type; - request.roots.forEach(root => processedRoots.add(root)); - // Add request to run - args.requests.push({ - type: request.type, - request: this.requestsToYaml(request), - requestPath: requestPath, - roots: request.roots, - responsePath: responsePath - } as RunRequest); - } + + // Prepare request information and insert as an actual request + const requestPath: string = path.join(args.directory, 'request'); + const responsePath: string = path.join(args.directory, 'response'); + if (request.type !== ScanType.Sast) { + request.output = responsePath; } + request.type = this._scanType; + // Add request to run + args.request = { + type: request.type, + requestContent: this.requestsToYaml(request), + requestPath: requestPath, + roots: request.roots, + responsePath: responsePath + } as RunRequest; return args; } /** * Translate the run requests to a single analyze request in yaml format - * @param requests - run requests + * @param requests - Run requests * @returns analyze request in YAML format */ public requestsToYaml(...requests: AnalyzeScanRequest[]): string { @@ -289,49 +335,13 @@ export abstract class BinaryRunner { .replace('skipped_folders', 'skipped-folders'); } - private async runTasks(args: RunArgs, checkCancel: () => void): Promise { - let runs: Promise[] = []; - let aggResponse: AnalyzerScanResponse = { runs: [] } as AnalyzerScanResponse; - for (let i: number = 0; i < args.requests.length; i++) { - runs.push( - this.runRequest( - checkCancel, - args.requests[i].request, - args.requests[i].type === ScanType.Eos ? args.requests[i].responsePath : args.requests[i].requestPath, - args.requests[i].type, - args.requests[i].responsePath - ) - .then(response => { - if (response && response.runs) { - aggResponse.runs.push(...response.runs); - } - }) - .catch(err => { - if (err instanceof ScanCancellationError || err instanceof NotEntitledError || err instanceof NotSupportedError) { - throw err; - } - this._logManager.logError(err); - }) - ); - } - let exeErr: Error | undefined; - await Promise.all(runs) - .catch(err => { - exeErr = err; - throw err; - }) - // Collect log if exist - .finally(() => this.handleExecutionLog(args, exeErr)); - return aggResponse; - } - private handleExecutionLog(args: RunArgs, exeErr: Error | undefined) { let hadError: boolean = exeErr !== undefined; let logPath: string | undefined = this.copyRunLogToFolder(args, hadError); if (logPath && !(exeErr instanceof NotSupportedError)) { this._logManager.logMessage( 'AnalyzerManager run ' + - Translators.toAnalyzerTypeString(this._type) + + Translators.toAnalyzerTypeString(this._scanType) + ' on ' + args.getRoots() + ' ended ' + @@ -345,9 +355,9 @@ export abstract class BinaryRunner { /** * Copy a file that includes 'log' in its name from a given folder to the logs folder - * @param arg - the run arguments that related this log - * @param hadError - if true, will log result as error, otherwise success. - * @param copyToDirectory - optional destination to copy the log + * @param arg - Run arguments that related this log + * @param hadError - If true, will log result as error, otherwise success. + * @param copyToDirectory - Optional destination to copy the log */ private copyRunLogToFolder(args: RunArgs, hadError: boolean, copyToDirectory: string = ScanUtils.getLogsPath()): string | undefined { let logFile: string | undefined = fs.readdirSync(args.directory).find(fileName => fileName.toLowerCase().includes('log')); @@ -360,7 +370,7 @@ export abstract class BinaryRunner { copyToDirectory, LogUtils.getLogFileName( roots.map(root => Utils.getLastSegment(root)).join('_'), - Translators.toAnalyzerTypeString(this._type), + Translators.toAnalyzerTypeString(this._scanType), '' + Date.now() ) ); @@ -372,61 +382,51 @@ export abstract class BinaryRunner { } /** - * Perform the binary run, with an option to abort on signal in 3 steps : + * Perform the binary run, with an option to abort on signal in 3 steps: * 1. Save the request in a given path * 2. Run the binary * 3. Collect the responses for each run in the request - * @param checkCancel - check if cancel - * @param request - the request to perform in YAML format - * @param requestPath - the path that the request will be - * @param responsePath - the path of the response for request in the run + * @param checkCancel - Check if cancel + * @param request - Request to perform in YAML format + * @param requestPath - Path that the request will be + * @param responsePath - Path of the response for request in the run * @returns the response from all the binary runs */ - public async runRequest( - checkCancel: () => void, - request: string, - requestPath: string, - type: ScanType, - responsePath: string - ): Promise { + public async runRequest(checkCancel: () => void, request: string, requestPath: string, responsePath: string): Promise { // 1. Save requests as yaml file in folder - if (type !== ScanType.Eos) { - fs.writeFileSync(requestPath, request); - } + fs.writeFileSync(requestPath, request); + this._logManager.debug('Input YAML:\n' + request); + // 2. Run the binary - await this.runBinary(requestPath, this._verbose ? undefined : path.dirname(requestPath), checkCancel).catch(error => { - if (error.code) { + try { + await this.runBinary(requestPath, this._verbose ? undefined : path.dirname(requestPath), checkCancel, responsePath); + } catch (error) { + let code: number | undefined = (error).code; + if (code) { // Not entitled to run binary - if (error.code === BinaryRunner.NOT_ENTITLED) { + if (code === JasRunner.NOT_ENTITLED) { throw new NotEntitledError(); } - if (error.code === BinaryRunner.NOT_SUPPORTED) { - throw new NotSupportedError(Translators.toAnalyzerTypeString(this._type)); + if (code === JasRunner.NOT_SUPPORTED) { + throw new NotSupportedError(Translators.toAnalyzerTypeString(this._scanType)); } - if (error.code === BinaryRunner.OS_NOT_SUPPORTED) { - throw new OsNotSupportedError(Translators.toAnalyzerTypeString(this._type)); + if (code === JasRunner.OS_NOT_SUPPORTED) { + throw new OsNotSupportedError(Translators.toAnalyzerTypeString(this._scanType)); } this._logManager.logMessage( - "Binary '" + Translators.toAnalyzerTypeString(this._type) + "' task ended with status code: " + error.code, + "Binary '" + Translators.toAnalyzerTypeString(this._scanType) + "' task ended with status code: " + code, 'ERR' ); } throw error; - }); + } // 3. Collect responses - let analyzerScanResponse: AnalyzerScanResponse = { runs: [] } as AnalyzerScanResponse; if (!fs.existsSync(responsePath)) { - throw new Error("Running '" + Translators.toAnalyzerTypeString(this._type) + "' binary didn't produce response.\nRequest: " + request); + throw new Error( + "Running '" + Translators.toAnalyzerTypeString(this._scanType) + "' binary didn't produce response.\nRequest: " + request + ); } // Load result and parse as response - let result: AnalyzerScanResponse = JSON.parse(fs.readFileSync(responsePath, 'utf8').toString()); - if (result && result.runs) { - analyzerScanResponse.runs.push(...result.runs); - } - return analyzerScanResponse; - } - - public get binary(): Resource { - return this._binary; + return JSON.parse(fs.readFileSync(responsePath, 'utf8').toString()); } } diff --git a/src/main/scanLogic/scanRunners/sastScan.ts b/src/main/scanLogic/scanRunners/sastScan.ts new file mode 100644 index 000000000..02291912d --- /dev/null +++ b/src/main/scanLogic/scanRunners/sastScan.ts @@ -0,0 +1,250 @@ +import { ConnectionManager } from '../../connect/connectionManager'; +import { LogManager } from '../../log/logManager'; +import { IssuesRootTreeNode } from '../../treeDataProviders/issuesTree/issuesRootTreeNode'; +import { AnalyzerUtils } from '../../treeDataProviders/utils/analyzerUtils'; +import { StepProgress } from '../../treeDataProviders/utils/stepProgress'; +import { Severity } from '../../types/severity'; +import { ScanResults } from '../../types/workspaceIssuesDetails'; +import { AppsConfigModule } from '../../utils/jfrogAppsConfig/jfrogAppsConfig'; +import { Resource } from '../../utils/resource'; +import { Translators } from '../../utils/translators'; +import { + AnalyzeIssue, + AnalyzeLocation, + AnalyzeScanRequest, + AnalyzerScanResponse, + AnalyzerScanRun, + CodeFlow, + FileLocation, + FileRegion, + ScanType +} from './analyzerModels'; +import { JasRunner } from './jasRunner'; + +/** + * The request that is sent to the binary to scan SAST + */ +export interface SastScanRequest extends AnalyzeScanRequest { + language: LanguageType; + exclude_patterns: string[]; + excluded_rules: string[]; +} + +export type LanguageType = 'python' | 'javascript' | 'typescript' | 'java'; + +export interface SastScanResponse { + filesWithIssues: SastFileIssues[]; +} + +export interface SastFileIssues { + full_path: string; + issues: SastIssue[]; +} + +export interface SastIssue { + ruleId: string; + severity: Severity; + ruleName: string; + fullDescription?: string; + locations: SastIssueLocation[]; +} + +export interface SastIssueLocation { + region: FileRegion; + threadFlows: FileLocation[][]; +} + +export class SastRunner extends JasRunner { + constructor( + private _scanResults: ScanResults, + private _root: IssuesRootTreeNode, + private _progressManager: StepProgress, + connectionManager: ConnectionManager, + logManager: LogManager, + config: AppsConfigModule, + binary?: Resource + ) { + super(connectionManager, ScanType.Sast, logManager, config, binary); + } + + /** @override */ + protected async runBinary( + yamlConfigPath: string, + executionLogDirectory: string | undefined, + checkCancel: () => void, + responsePath: string + ): Promise { + await this.executeBinary(checkCancel, ['zd', yamlConfigPath, responsePath], executionLogDirectory); + } + + /** @override */ + public requestsToYaml(...requests: AnalyzeScanRequest[]): string { + let str: string = super.requestsToYaml(...requests); + return str.replace('excluded_rules', 'excluded-rules'); + } + + /** + * Run SAST scan async task and populate the given bundle with the results. + */ + public async scan(): Promise { + let startTime: number = Date.now(); + let request: SastScanRequest = { + type: this._scanType, + roots: this._config.GetSourceRoots(this._scanType), + language: this._config.GetScanLanguage(), + excluded_rules: this._config.getExcludeRules(), + exclude_patterns: this._config.GetExcludePatterns(this._scanType) + } as SastScanRequest; + super.logStartScanning(request); + let response: AnalyzerScanResponse | undefined = await this.executeRequest(this._progressManager.checkCancel, request); + let sastScanResponse: SastScanResponse = this.generateScanResponse(response); + if (response) { + this._scanResults.sastScan = sastScanResponse; + this._scanResults.sastScanTimestamp = Date.now(); + let issuesCount: number = AnalyzerUtils.populateSastIssues(this._root, this._scanResults); + super.logNumberOfIssues(issuesCount, this._scanResults.path, startTime, this._scanResults.sastScanTimestamp); + this._root.apply(); + } + this._progressManager.reportProgress(); + } + + /** + * Generate response from the run results + * @param response - Run results generated from the binary + * @returns the response generated from the scan run + */ + public generateScanResponse(response?: AnalyzerScanResponse): SastScanResponse { + if (!response) { + return {} as SastScanResponse; + } + let analyzerScanRun: AnalyzerScanRun = response.runs[0]; + let sastResponse: SastScanResponse = { + filesWithIssues: [] + } as SastScanResponse; + + // Prepare + let rulesFullDescription: Map = new Map(); + for (const rule of analyzerScanRun.tool.driver.rules) { + if (rule.fullDescription) { + rulesFullDescription.set(rule.id, rule.fullDescription.text); + } + } + // Generate response data + analyzerScanRun.results?.forEach((analyzeIssue: AnalyzeIssue) => { + if (analyzeIssue.suppressions && analyzeIssue.suppressions.length > 0) { + // Suppress issue + return; + } + this.generateIssueData(sastResponse, analyzeIssue, rulesFullDescription.get(analyzeIssue.ruleId)); + }); + return sastResponse; + } + + /** + * Generate the data for a specific analyze issue (the file object, the issue in the file object and all the location objects of this issue). + * If the issue also contains codeFlow generate the needed information for it as well + * @param sastResponse - Response of the scan that holds all the file objects + * @param analyzeIssue - Issue to handle and generate information base on it + * @param fullDescription - The description of the analyzeIssue + */ + public generateIssueData(sastResponse: SastScanResponse, analyzeIssue: AnalyzeIssue, fullDescription?: string) { + analyzeIssue.locations.forEach(location => { + let fileWithIssues: SastFileIssues = this.getOrCreateSastFileIssues(sastResponse, location.physicalLocation.artifactLocation.uri); + let fileIssue: SastIssue = this.getOrCreateSastIssue(fileWithIssues, analyzeIssue, fullDescription); + let issueLocation: SastIssueLocation = this.getOrCreateIssueLocation(fileIssue, location.physicalLocation); + if (analyzeIssue.codeFlows) { + this.generateCodeFlowData(fileWithIssues.full_path, issueLocation, analyzeIssue.codeFlows); + } + }); + } + + /** + * Generate the code flow data. + * Search the code flows for the given location (in a given file), the code flow belong to a location if the last location in the flow matches the given location. + * @param filePath - Path to the file the issue location belongs to + * @param issueLocation - Issue in a location to search code flows that belongs to it + * @param codeFlows - All the code flows for this issue + */ + private generateCodeFlowData(filePath: string, issueLocation: SastIssueLocation, codeFlows: CodeFlow[]) { + // Check if exists flows for the current location in this issue + for (const codeFlow of codeFlows) { + for (const threadFlow of codeFlow.threadFlows) { + // The last location in the threadFlow should match the location of the issue + let potential: AnalyzeLocation = threadFlow.locations[threadFlow.locations.length - 1].location; + if ( + potential.physicalLocation.artifactLocation.uri === filePath && + AnalyzerUtils.isSameRegion(potential.physicalLocation.region, issueLocation.region) + ) { + let locations: FileLocation[] = threadFlow.locations.map(location => location.location.physicalLocation); + for (let fileLocation of locations) { + fileLocation.artifactLocation.uri = AnalyzerUtils.parseLocationFilePath(fileLocation.artifactLocation.uri); + } + issueLocation.threadFlows.push(locations); + } + } + } + } + + /** + * Get or create issue location base on a given file location + * @param fileIssue - the issue that holds all the locations + * @param physicalLocation - the location to search or create + * @returns issue location + */ + private getOrCreateIssueLocation(fileIssue: SastIssue, physicalLocation: FileLocation): SastIssueLocation { + // TODO: There could be multiple stack trace for each location with issue, uncomment when webview can handle this. + // let potential: SastIssueLocation | undefined = fileIssue.locations.find(location => AnalyzerUtils.isSameRegion(location.region,physicalLocation.region)); + // if(potential) { + // return potential; + // } + let location: SastIssueLocation = { + region: physicalLocation.region, + threadFlows: [] + } as SastIssueLocation; + fileIssue.locations.push(location); + return location; + } + + /** + * Get or create issue in a given file if not exists + * @param fileWithIssues - the file with the issues + * @param analyzeIssue - the issue to search or create + * @param fullDescription - the description of the issue + * @returns - the sast issue + */ + private getOrCreateSastIssue(fileWithIssues: SastFileIssues, analyzeIssue: AnalyzeIssue, fullDescription?: string): SastIssue { + let potential: SastIssue | undefined = fileWithIssues.issues.find(issue => issue.ruleId === analyzeIssue.ruleId); + if (potential) { + return potential; + } + let fileIssue: SastIssue = { + ruleId: analyzeIssue.ruleId, + severity: Translators.levelToSeverity(analyzeIssue.level), + ruleName: analyzeIssue.message.text, + fullDescription: fullDescription, + locations: [] + } as SastIssue; + fileWithIssues.issues.push(fileIssue); + return fileIssue; + } + + /** + * Get or create file with issues if not exists in the response + * @param response - the response that holds the files + * @param uri - the files to search or create + * @returns - file with issues + */ + private getOrCreateSastFileIssues(response: SastScanResponse, uri: string): SastFileIssues { + let potential: SastFileIssues | undefined = response.filesWithIssues.find(fileWithIssues => fileWithIssues.full_path === uri); + if (potential) { + return potential; + } + let fileWithIssues: SastFileIssues = { + full_path: uri, + issues: [] + } as SastFileIssues; + response.filesWithIssues.push(fileWithIssues); + + return fileWithIssues; + } +} diff --git a/src/main/scanLogic/scanRunners/secretsScan.ts b/src/main/scanLogic/scanRunners/secretsScan.ts index 03e490834..ac7964a60 100644 --- a/src/main/scanLogic/scanRunners/secretsScan.ts +++ b/src/main/scanLogic/scanRunners/secretsScan.ts @@ -1,10 +1,13 @@ import { ConnectionManager } from '../../connect/connectionManager'; import { LogManager } from '../../log/logManager'; +import { IssuesRootTreeNode } from '../../treeDataProviders/issuesTree/issuesRootTreeNode'; import { AnalyzerUtils, FileWithSecurityIssues } from '../../treeDataProviders/utils/analyzerUtils'; +import { StepProgress } from '../../treeDataProviders/utils/stepProgress'; +import { ScanResults } from '../../types/workspaceIssuesDetails'; +import { AppsConfigModule } from '../../utils/jfrogAppsConfig/jfrogAppsConfig'; import { Resource } from '../../utils/resource'; -import { ScanUtils } from '../../utils/scanUtils'; -import { AnalyzeScanRequest, AnalyzerScanResponse, ScanType } from './analyzerModels'; -import { BinaryRunner } from './binaryRunner'; +import { AnalyzeScanRequest, AnalyzerScanResponse, AnalyzerScanRun, ScanType } from './analyzerModels'; +import { JasRunner } from './jasRunner'; export interface SecretsScanResponse { filesWithIssues: FileWithSecurityIssues[]; @@ -13,14 +16,17 @@ export interface SecretsScanResponse { /** * Describes a runner for the Secrets scan executable file. */ -export class SecretsRunner extends BinaryRunner { +export class SecretsRunner extends JasRunner { constructor( + private _scanResults: ScanResults, + private _root: IssuesRootTreeNode, + private _progressManager: StepProgress, connectionManager: ConnectionManager, logManager: LogManager, - binary?: Resource, - timeout: number = ScanUtils.ANALYZER_TIMEOUT_MILLISECS + config: AppsConfigModule, + binary?: Resource ) { - super(connectionManager, timeout, ScanType.Secrets, logManager, binary); + super(connectionManager, ScanType.Secrets, logManager, config, binary); } /** @override */ @@ -28,45 +34,58 @@ export class SecretsRunner extends BinaryRunner { await this.executeBinary(checkCancel, ['sec', yamlConfigPath], executionLogDirectory); } - public async scan(directory: string, checkCancel: () => void, skipFolders: string[] = []): Promise { + /** + * Run Secrets scan async task and populate the given bundle with the results. + */ + public async scan(): Promise { + let startTime: number = Date.now(); let request: AnalyzeScanRequest = { type: ScanType.Secrets, - roots: [directory], - skipped_folders: skipFolders + roots: this._config.GetSourceRoots(this._scanType), + skipped_folders: this._config.GetExcludePatterns(this._scanType) } as AnalyzeScanRequest; - return await this.run(checkCancel, request).then(runResult => this.convertResponse(runResult)); + super.logStartScanning(request); + let response: AnalyzerScanResponse | undefined = await this.executeRequest(this._progressManager.checkCancel, request); + let secretsScanResponse: SecretsScanResponse = this.convertResponse(response); + if (response) { + this._scanResults.secretsScan = secretsScanResponse; + this._scanResults.secretsScanTimestamp = Date.now(); + let issuesCount: number = AnalyzerUtils.populateSecretsIssues(this._root, this._scanResults); + super.logNumberOfIssues(issuesCount, this._scanResults.path, startTime, this._scanResults.secretsScanTimestamp); + this._root.apply(); + } + this._progressManager.reportProgress(); } /** * Generate response from the run results - * @param run - the run results generated from the binary + * @param response - Run results generated from the binary * @returns the response generated from the scan run */ public convertResponse(response?: AnalyzerScanResponse): SecretsScanResponse { if (!response) { return {} as SecretsScanResponse; } + let analyzerScanRun: AnalyzerScanRun = response.runs[0]; let secretsResponse: SecretsScanResponse = { filesWithIssues: [] } as SecretsScanResponse; - for (const run of response.runs) { - // Get the full descriptions of all rules - let rulesFullDescription: Map = new Map(); - for (const rule of run.tool.driver.rules) { - if (rule.fullDescription) { - rulesFullDescription.set(rule.id, rule.fullDescription.text); - } + // Get the full descriptions of all rules + let rulesFullDescription: Map = new Map(); + for (const rule of analyzerScanRun.tool.driver.rules) { + if (rule.fullDescription) { + rulesFullDescription.set(rule.id, rule.fullDescription.text); } - // Generate response data - run.results?.forEach(analyzeIssue => { - if (analyzeIssue.suppressions && analyzeIssue.suppressions.length > 0) { - // Suppress issue - return; - } - AnalyzerUtils.generateIssueData(secretsResponse, analyzeIssue, rulesFullDescription.get(analyzeIssue.ruleId)); - }); } + // Generate response data + analyzerScanRun.results?.forEach(analyzeIssue => { + if (analyzeIssue.suppressions && analyzeIssue.suppressions.length > 0) { + // Suppress issue + return; + } + AnalyzerUtils.generateIssueData(secretsResponse, analyzeIssue, rulesFullDescription.get(analyzeIssue.ruleId)); + }); return secretsResponse; } } diff --git a/src/main/treeDataProviders/issuesTree/codeFileTree/eosTreeNode.ts b/src/main/treeDataProviders/issuesTree/codeFileTree/sastTreeNode.ts similarity index 89% rename from src/main/treeDataProviders/issuesTree/codeFileTree/eosTreeNode.ts rename to src/main/treeDataProviders/issuesTree/codeFileTree/sastTreeNode.ts index 1431469d3..10e1f7f28 100644 --- a/src/main/treeDataProviders/issuesTree/codeFileTree/eosTreeNode.ts +++ b/src/main/treeDataProviders/issuesTree/codeFileTree/sastTreeNode.ts @@ -1,6 +1,6 @@ import * as vscode from 'vscode'; import { IAnalysisStep, IEosPage, PageType } from 'jfrog-ide-webview'; -import { EosIssue, EosIssueLocation } from '../../../scanLogic/scanRunners/eosScan'; +import { SastIssue, SastIssueLocation } from '../../../scanLogic/scanRunners/sastScan'; import { SeverityUtils } from '../../../types/severity'; import { Translators } from '../../../utils/translators'; import { Utils } from '../../../utils/utils'; @@ -8,15 +8,15 @@ import { CodeFileTreeNode } from './codeFileTreeNode'; import { CodeIssueTreeNode } from './codeIssueTreeNode'; /** - * Describe a Eos issue + * Describe a SAST issue */ -export class EosTreeNode extends CodeIssueTreeNode { +export class SastTreeNode extends CodeIssueTreeNode { private _codeFlows: IAnalysisStep[][]; private _fullDescription?: string; private _snippet?: string; - constructor(issue: EosIssue, location: EosIssueLocation, parent: CodeFileTreeNode) { + constructor(issue: SastIssue, location: SastIssueLocation, parent: CodeFileTreeNode) { super( issue.ruleId, parent, diff --git a/src/main/treeDataProviders/issuesTree/fileTreeNode.ts b/src/main/treeDataProviders/issuesTree/fileTreeNode.ts index 605144a64..fafe3854d 100644 --- a/src/main/treeDataProviders/issuesTree/fileTreeNode.ts +++ b/src/main/treeDataProviders/issuesTree/fileTreeNode.ts @@ -45,8 +45,8 @@ export abstract class FileTreeNode extends vscode.TreeItem { public apply() { // If no description is set, show the full path of the file or the relative path base on the path of the parent workspace if exists let description: string | undefined = this._fullPath; - if (this._parent && this._fullPath.startsWith(this._parent.workSpace.uri.fsPath)) { - let localPath: string = this._fullPath.substring(this._parent.workSpace.uri.fsPath.length + 1); + if (this._parent && this._fullPath.startsWith(this._parent.workspace.uri.fsPath)) { + let localPath: string = this._fullPath.substring(this._parent.workspace.uri.fsPath.length + 1); if (localPath !== this.name) { description = '.' + path.sep + localPath; } else { diff --git a/src/main/treeDataProviders/issuesTree/issuesRootTreeNode.ts b/src/main/treeDataProviders/issuesTree/issuesRootTreeNode.ts index f9e74baf4..34b003ff3 100644 --- a/src/main/treeDataProviders/issuesTree/issuesRootTreeNode.ts +++ b/src/main/treeDataProviders/issuesTree/issuesRootTreeNode.ts @@ -9,12 +9,12 @@ import { FileTreeNode } from './fileTreeNode'; export class IssuesRootTreeNode extends vscode.TreeItem { private _children: FileTreeNode[] = []; private _title: string = ''; - private _eosScanTimeStamp?: number | undefined; + private _sastScanTimeStamp?: number | undefined; private _iacScanTimeStamp?: number | undefined; private _secretsScanTimeStamp?: number | undefined; - constructor(private readonly _workSpace: vscode.WorkspaceFolder, title?: string, collapsibleState?: vscode.TreeItemCollapsibleState) { - super(_workSpace.name, collapsibleState ?? vscode.TreeItemCollapsibleState.Expanded); + constructor(private readonly _workspace: vscode.WorkspaceFolder, title?: string, collapsibleState?: vscode.TreeItemCollapsibleState) { + super(_workspace.name, collapsibleState ?? vscode.TreeItemCollapsibleState.Expanded); this.title = title ?? ''; } @@ -34,7 +34,7 @@ export class IssuesRootTreeNode extends vscode.TreeItem { } this.tooltip = 'Issue count: ' + issueCount + '\n'; - this.tooltip += 'Full path: ' + this._workSpace.uri.fsPath + ''; + this.tooltip += 'Full path: ' + this._workspace.uri.fsPath + ''; if (this._title != '') { this.tooltip += '\nStatus: ' + this._title; } else if (this.oldestScanTimestamp) { @@ -77,12 +77,12 @@ export class IssuesRootTreeNode extends vscode.TreeItem { return this._children.find(child => child.projectFilePath === file); } - public get eosScanTimeStamp(): number | undefined { - return this._eosScanTimeStamp; + public get sastScanTimeStamp(): number | undefined { + return this._sastScanTimeStamp; } - public set eosScanTimeStamp(value: number | undefined) { - this._eosScanTimeStamp = value; + public set sastScanTimeStamp(value: number | undefined) { + this._sastScanTimeStamp = value; } public get iacScanTimeStamp(): number | undefined { @@ -109,7 +109,7 @@ export class IssuesRootTreeNode extends vscode.TreeItem { ...this.children.map(file => file.timeStamp), this._iacScanTimeStamp, this._secretsScanTimeStamp, - this._eosScanTimeStamp + this._sastScanTimeStamp ); } @@ -121,8 +121,8 @@ export class IssuesRootTreeNode extends vscode.TreeItem { this.description = val; } - public get workSpace(): vscode.WorkspaceFolder { - return this._workSpace; + public get workspace(): vscode.WorkspaceFolder { + return this._workspace; } public get children(): FileTreeNode[] { diff --git a/src/main/treeDataProviders/issuesTree/issuesTreeDataProvider.ts b/src/main/treeDataProviders/issuesTree/issuesTreeDataProvider.ts index 8fe5c819c..19ef72761 100644 --- a/src/main/treeDataProviders/issuesTree/issuesTreeDataProvider.ts +++ b/src/main/treeDataProviders/issuesTree/issuesTreeDataProvider.ts @@ -1,32 +1,38 @@ import * as vscode from 'vscode'; -import { ScanManager, SupportedScans } from '../../scanLogic/scanManager'; -import { ScanCancellationError, ScanUtils } from '../../utils/scanUtils'; -import { IssuesRootTreeNode } from './issuesRootTreeNode'; -import { FileTreeNode } from './fileTreeNode'; -import { DescriptorTreeNode } from './descriptorTree/descriptorTreeNode'; -import { DependencyIssuesTreeNode } from './descriptorTree/dependencyIssuesTreeNode'; -import { CveTreeNode } from './descriptorTree/cveTreeNode'; import { CacheManager } from '../../cache/cacheManager'; +import { ConnectionManager } from '../../connect/connectionManager'; +import { LogManager } from '../../log/logManager'; +import { EntitledScans, ScanManager } from '../../scanLogic/scanManager'; +import { IacRunner } from '../../scanLogic/scanRunners/iacScan'; +import { JasRunner } from '../../scanLogic/scanRunners/jasRunner'; +import { SastRunner } from '../../scanLogic/scanRunners/sastScan'; +import { SecretsRunner } from '../../scanLogic/scanRunners/secretsScan'; import { PackageType } from '../../types/projectType'; import { Severity, SeverityUtils } from '../../types/severity'; -import { StepProgress } from '../utils/stepProgress'; +import { DependencyScanResults, EntryIssuesData, ScanResults } from '../../types/workspaceIssuesDetails'; +import { AppsConfigModule, JFrogAppsConfig } from '../../utils/jfrogAppsConfig/jfrogAppsConfig'; +import { ScanCancellationError, ScanUtils } from '../../utils/scanUtils'; +import { UsageUtils } from '../../utils/usageUtils'; import { Utils } from '../../utils/utils'; -import { DependencyUtils } from '../utils/dependencyUtils'; import { TreesManager } from '../treesManager'; -import { IssueTreeNode } from './issueTreeNode'; -import { LogManager } from '../../log/logManager'; -import { LicenseIssueTreeNode } from './descriptorTree/licenseIssueTreeNode'; -import { CodeIssueTreeNode } from './codeFileTree/codeIssueTreeNode'; -import { CodeFileTreeNode } from './codeFileTree/codeFileTreeNode'; -import { ApplicableTreeNode } from './codeFileTree/applicableTreeNode'; -import { EosTreeNode } from './codeFileTree/eosTreeNode'; -import { EnvironmentTreeNode } from './descriptorTree/environmentTreeNode'; -import { ProjectDependencyTreeNode } from './descriptorTree/projectDependencyTreeNode'; -import { DependencyScanResults, EntryIssuesData, ScanResults } from '../../types/workspaceIssuesDetails'; import { AnalyzerUtils } from '../utils/analyzerUtils'; +import { DependencyUtils } from '../utils/dependencyUtils'; +import { StepProgress } from '../utils/stepProgress'; +import { ApplicableTreeNode } from './codeFileTree/applicableTreeNode'; +import { CodeFileTreeNode } from './codeFileTree/codeFileTreeNode'; +import { CodeIssueTreeNode } from './codeFileTree/codeIssueTreeNode'; import { IacTreeNode } from './codeFileTree/iacTreeNode'; +import { SastTreeNode } from './codeFileTree/sastTreeNode'; import { SecretTreeNode } from './codeFileTree/secretsTreeNode'; -import { UsageUtils } from '../../utils/usageUtils'; +import { CveTreeNode } from './descriptorTree/cveTreeNode'; +import { DependencyIssuesTreeNode } from './descriptorTree/dependencyIssuesTreeNode'; +import { DescriptorTreeNode } from './descriptorTree/descriptorTreeNode'; +import { EnvironmentTreeNode } from './descriptorTree/environmentTreeNode'; +import { LicenseIssueTreeNode } from './descriptorTree/licenseIssueTreeNode'; +import { ProjectDependencyTreeNode } from './descriptorTree/projectDependencyTreeNode'; +import { FileTreeNode } from './fileTreeNode'; +import { IssueTreeNode } from './issueTreeNode'; +import { IssuesRootTreeNode } from './issuesRootTreeNode'; /** * Describes Xray issues data provider for the 'Issues' tree view and provides API to get issues data for files. @@ -167,14 +173,14 @@ export class IssuesTreeDataProvider implements vscode.TreeDataProvider): number { + public static getNumberOfTasksInRepopulate(supportedScans: EntitledScans, descriptors: Map): number { return ( - (supportedScans.eos ? 1 : 0) + + (supportedScans.sast ? 1 : 0) + (supportedScans.iac ? 1 : 0) + (supportedScans.secrets ? 1 : 0) + (supportedScans.dependencies ? descriptors.size + Array.from(descriptors.values()).reduce((acc, val) => acc + val.length, 0) : 0) @@ -200,62 +206,70 @@ export class IssuesTreeDataProvider implements vscode.TreeDataProvider this.onChangeFire(), this._logManager); - let workspaceDescriptors: Map = await ScanUtils.locatePackageDescriptors([root.workSpace], this._logManager); - let subStepsCount: number = IssuesTreeDataProvider.getNumberOfTasksInRepopulate(this._scanManager.supportedScans, workspaceDescriptors); + let workspaceDescriptors: Map = await ScanUtils.locatePackageDescriptors([root.workspace], this._logManager); + let subStepsCount: number = IssuesTreeDataProvider.getNumberOfTasksInRepopulate(this._scanManager.entitledScans, workspaceDescriptors); + let jfrogAppConfig: JFrogAppsConfig = new JFrogAppsConfig(root.workspace.uri.path); checkCanceled(); - UsageUtils.sendUsageReport(this._scanManager.supportedScans, workspaceDescriptors, this._treesManager.connectionManager); + UsageUtils.sendUsageReport(this._scanManager.entitledScans, workspaceDescriptors, this._treesManager.connectionManager); // Scan workspace let scansPromises: Promise[] = []; progressManager.startStep('🔎 Scanning for issues', subStepsCount); - if (this._scanManager.supportedScans.dependencies) { - // Dependency graph and applicability scans for each package - for (const [type, descriptorsPaths] of workspaceDescriptors) { - scansPromises.push( - DependencyUtils.scanPackageDependencies( - this._scanManager, - scanResults, - root, - type, - descriptorsPaths, - progressManager, - this._scanManager.supportedScans.applicability - ).catch(err => ScanUtils.onScanError(err, this._logManager, true)) - ); - } - } - if (this._scanManager.supportedScans.iac) { - // Scan the workspace for Infrastructure As Code (Iac) issues - scansPromises.push( - AnalyzerUtils.runIac(scanResults, root, this._scanManager, progressManager).catch(err => - ScanUtils.onScanError(err, this._logManager, true) - ) - ); - } - if (this._scanManager.supportedScans.secrets) { - // Scan the workspace for Secrets issues - scansPromises.push( - AnalyzerUtils.runSecrets(scanResults, root, this._scanManager, progressManager).catch(err => - ScanUtils.onScanError(err, this._logManager, true) - ) - ); - } - if (this._scanManager.supportedScans.eos) { - // Scan the workspace for Eos issues + + // Dependency graph and applicability scans for each package + for (const [type, descriptorsPaths] of workspaceDescriptors) { scansPromises.push( - AnalyzerUtils.runEos( + DependencyUtils.scanPackageDependencies( + this._scanManager, scanResults, root, - Array.from(workspaceDescriptors.keys() ?? []), - this._scanManager, - progressManager + type, + descriptorsPaths, + progressManager, + this._scanManager.entitledScans.applicability ).catch(err => ScanUtils.onScanError(err, this._logManager, true)) ); } + for (let module of jfrogAppConfig.modules) { + for (let runner of this.createJasRunners( + scanResults, + root, + progressManager, + this._treesManager.connectionManager, + this._logManager, + module + )) { + if (runner.shouldRun()) { + scansPromises.push(runner.scan().catch(err => ScanUtils.onScanError(err, this._logManager, true))); + } + } + } + await Promise.all(scansPromises); return root; } + private createJasRunners( + scanResults: ScanResults, + root: IssuesRootTreeNode, + progressManager: StepProgress, + connectionManager: ConnectionManager, + logManager: LogManager, + config: AppsConfigModule + ): JasRunner[] { + let results: JasRunner[] = []; + if (this._scanManager.entitledScans.iac) { + results.push(new IacRunner(scanResults, root, progressManager, connectionManager, logManager, config)); + } + if (this._scanManager.entitledScans.sast) { + results.push(new SastRunner(scanResults, root, progressManager, connectionManager, logManager, config)); + } + if (this._scanManager.entitledScans.secrets) { + results.push(new SecretsRunner(scanResults, root, progressManager, connectionManager, logManager, config)); + } + return results; + } + /** * Loads the issues from the last scan of all the workspaces if they exist. */ @@ -280,7 +294,7 @@ export class IssuesTreeDataProvider implements vscode.TreeDataProvider { - if (!ApplicabilityRunner.supportedPackageTypes().includes(type)) { - return; - } - let filteredBundles: Map> = this.filterBundlesWithoutIssuesToScan(fileScanBundles, type); - let spaceToBundles: Map>> = this.mapBundlesForApplicableScanning( - scanManager.logManager, - filteredBundles - ); - if (spaceToBundles.size == 0) { - return; - } - for (let [spacePath, bundles] of spaceToBundles) { - let cveToScan: Set = Utils.combineSets(Array.from(bundles.values())); - // Scan workspace for all cve in relevant bundles - let startApplicableTime: number = Date.now(); - let applicableIssues: ApplicabilityScanResponse = await scanManager.scanApplicability(spacePath, progressManager.checkCancel, cveToScan); - if (applicableIssues && applicableIssues.applicableCve) { - let applicableScanTimestamp: number = Date.now(); - AnalyzerUtils.transferApplicableResponseToBundles( - applicableIssues, - bundles, - scanManager.logManager, - applicableScanTimestamp, - applicableScanTimestamp - startApplicableTime - ); - } - } - } - - /** - * Filter bundles without direct cve issues, transform the bundle list to have its relevant cve to scan set. - * @param fileScanBundles - bundles to process and filter if needed - * @returns Map of bundles to their set of direct cves issues, with at least one for each bundle - */ - private static filterBundlesWithoutIssuesToScan(fileScanBundles: FileScanBundle[], type: PackageType): Map> { - let filtered: Map> = new Map>(); - - for (let fileScanBundle of fileScanBundles) { - if (!(fileScanBundle.dataNode instanceof ProjectDependencyTreeNode)) { - // Filter non dependencies projects - continue; - } - let cvesToScan: Set = new Set(); - fileScanBundle.dataNode.issues.forEach((issue: IssueTreeNode) => { - if (!(issue instanceof CveTreeNode) || !issue.cve?.cve) { - return; - } - // For Python projects, all CVEs should be included because in some cases it is impossible to determine whether a dependency is direct. - // Other project types should include only CVEs on direct dependencies. - if (type === PackageType.Python || !issue.parent.indirect) { - cvesToScan.add(issue.cve.cve); - } - }); - if (cvesToScan.size == 0) { - // Nothing to do in bundle - continue; - } - - filtered.set(fileScanBundle, cvesToScan); - } - - return filtered; - } - - /** - * Create a mapping between a workspace and all the given bundles that relevant to it. - * @param logManager - logger to log added map - * @param fileScanBundles - bundles to map - * @returns mapped bundles to similar workspace - */ - private static mapBundlesForApplicableScanning( - logManager: LogManager, - filteredBundles: Map> - ): Map>> { - let workspaceToScanBundles: Map>> = new Map>>(); - - for (let [fileScanBundle, cvesToScan] of filteredBundles) { - let descriptorIssues: DependencyScanResults = fileScanBundle.data; - // Map information to similar directory space - let workspacePath: string = AnalyzerUtils.getWorkspacePath(fileScanBundle.dataNode, descriptorIssues.fullPath); - if (!workspaceToScanBundles.has(workspacePath)) { - workspaceToScanBundles.set(workspacePath, new Map>()); - } - workspaceToScanBundles.get(workspacePath)?.set(fileScanBundle, cvesToScan); - logManager.logMessage('Adding data from descriptor ' + descriptorIssues.fullPath + ' for cve applicability scan', 'INFO'); - } - - return workspaceToScanBundles; - } - /** * Retrieve the workspace path, whether it's a file or an environment. * @param fileScanBundle - The data node for file tree, usually DescriptorTreeNode or EnvironmentTreeNode * @param fullWorkspacePath - Full path to the scanning directory or file * @returns the path to the workspace directory */ - private static getWorkspacePath(fileScanBundle: FileTreeNode | undefined, fullWorkspacePath: string): string { + public static getWorkspacePath(fileScanBundle: FileTreeNode | undefined, fullWorkspacePath: string): string { if (fileScanBundle instanceof EnvironmentTreeNode) { return fullWorkspacePath; } return path.dirname(fullWorkspacePath); } - /** - * Transfer and populate information from a given applicable scan to each bundle - * @param applicableIssues - full scan response with information relevant to all the bundles - * @param bundles - the bundles that will be populated only with their relevant information - * @param logManager - logger to log information to the user - * @param applicableTimeStamp - ended time stamp for the applicable scan - * @param elapsedTimeInMillsSec - elapsed time that took the scan to run - */ - private static transferApplicableResponseToBundles( - applicableIssues: ApplicabilityScanResponse, - bundles: Map>, - logManager: LogManager, - applicableTimeStamp: number, - elapsedTimeInMillsSec: number - ) { - for (let [bundle, relevantCve] of bundles) { - let descriptorIssues: DependencyScanResults = bundle.data; - // Filter only relevant information - descriptorIssues.applicableScanTimestamp = applicableTimeStamp; - descriptorIssues.applicableIssues = AnalyzerUtils.filterApplicabilityScanResponse(applicableIssues, relevantCve); - // Populate it in bundle - let applicableIssuesCount: number = AnalyzerUtils.populateApplicableIssues( - bundle.rootNode, - bundle.dataNode, - descriptorIssues - ); - logManager.logMessage( - 'Found ' + - applicableIssuesCount + - " applicable CVE issues in descriptor = '" + - descriptorIssues.fullPath + - "' (elapsed " + - elapsedTimeInMillsSec / 1000 + - ' seconds)', - 'INFO' - ); - bundle.rootNode.apply(); - } - } - - /** - * For a given full ApplicableScanResponse scan results, filter the results to only contain information relevant to a given cve list - * @param responseToFilter - all the applicable information - * @param relevantCve - cve list to filter information only for them - * @returns ApplicableScanResponse with information relevant only for the given relevantCve - */ - private static filterApplicabilityScanResponse(responseToFilter: ApplicabilityScanResponse, relevantCve: Set): ApplicabilityScanResponse { - let allApplicable: Map = new Map(Object.entries(responseToFilter.applicableCve)); - let relevantScannedCve: string[] = []; - let relevantApplicableCve: Map = new Map(); - - for (let scannedCve of responseToFilter.scannedCve) { - if (relevantCve.has(scannedCve)) { - relevantScannedCve.push(scannedCve); - let potential: CveApplicableDetails | undefined = allApplicable.get(scannedCve); - if (potential) { - relevantApplicableCve.set(scannedCve, potential); - } - } - } - return { - scannedCve: Array.from(relevantScannedCve), - applicableCve: Object.fromEntries(relevantApplicableCve.entries()) - } as ApplicabilityScanResponse; - } - /** * Populate the applicable data to the view (create file issue nodes) * @param root - the root to populate the data inside @@ -470,39 +296,6 @@ export class AnalyzerUtils { return issuesCount; } - /** - * Run Infrastructure As Code (Iac) scan async task and populate the given bundle with the results. - * @param scanResults - the data object that will be populated with the results - * @param root - the view object that will be populated with the results - * @param scanManager - the ScanManager that preforms the actual scans - * @param progressManager - the progress for the given scan - */ - public static async runIac( - scanResults: ScanResults, - root: IssuesRootTreeNode, - scanManager: ScanManager, - progressManager: StepProgress - ): Promise { - let startIacTime: number = Date.now(); - scanResults.iacScan = await scanManager.scanIac(root.workSpace.uri.fsPath, progressManager.checkCancel); - if (scanResults.iacScan) { - scanResults.iacScanTimestamp = Date.now(); - let issuesCount: number = AnalyzerUtils.populateIacIssues(root, scanResults); - scanManager.logManager.logMessage( - 'Found ' + - issuesCount + - " Iac issues in workspace = '" + - scanResults.path + - "' (elapsed " + - (scanResults.iacScanTimestamp - startIacTime) / 1000 + - ' seconds)', - 'INFO' - ); - root.apply(); - } - progressManager.reportProgress(); - } - /** * Populate Iac information in the given node * @param root - root node to populate data inside @@ -528,39 +321,6 @@ export class AnalyzerUtils { return issuesCount; } - /** - * Run Secrets scan async task and populate the given bundle with the results. - * @param scanResults - the data object that will be populated with the results - * @param root - the view object that will be populated with the results - * @param scanManager - the ScanManager that preforms the actual scans - * @param progressManager - the progress for the given scan - */ - public static async runSecrets( - scanResults: ScanResults, - root: IssuesRootTreeNode, - scanManager: ScanManager, - progressManager: StepProgress - ): Promise { - let startSecretsTime: number = Date.now(); - scanResults.secretsScan = await scanManager.scanSecrets(root.workSpace.uri.fsPath, progressManager.checkCancel); - if (scanResults.secretsScan) { - scanResults.secretsScanTimestamp = Date.now(); - let issuesCount: number = AnalyzerUtils.populateSecretsIssues(root, scanResults); - scanManager.logManager.logMessage( - 'Found ' + - issuesCount + - " Secret issues in workspace = '" + - scanResults.path + - "' (elapsed " + - (scanResults.secretsScanTimestamp - startSecretsTime) / 1000 + - ' seconds)', - 'INFO' - ); - root.apply(); - } - progressManager.reportProgress(); - } - /** * Populate Secrets information in the given node * @param root - root node to populate data inside @@ -587,83 +347,20 @@ export class AnalyzerUtils { } /** - * Create Eos scan request for each given package type supported by the scan. - * Default will create request for all supported languages. - * @param root - the root node of the workspace - * @param languages - each supported language will generate a request - * @returns list of Eos requests - */ - private static createEosRequests(root: IssuesRootTreeNode, logManager: LogManager, types?: PackageType[]): EosScanRequest[] { - let requests: EosScanRequest[] = [{ roots: [root.workSpace.uri.fsPath] } as EosScanRequest]; - - if (types && types.length > 0) { - // Check if the package type is supported for scan. - if (types.find(type => !!Translators.toLanguageType(type))) { - return requests; - } - } else { - // In case there are no descriptors to extract language from, add all. - return requests; - } - logManager.logMessage('Skip Eos scan for not supported package type:' + types.map(type => fromPackageType(type)).join(' '), 'INFO'); - return []; - } - - /** - * Run Eos scan async task - * @param workspaceData - the issues data for the workspace - * @param root - the root node of the workspace - * @param types - the packages types that were detected in the workspace - * @param scanManager - the scan manager to use for scan - * @param progressManager - the progress manager of the process for abort control - */ - public static async runEos( - workspaceData: ScanResults, - root: IssuesRootTreeNode, - types: PackageType[], - scanManager: ScanManager, - progressManager: StepProgress - ): Promise { - let startTime: number = Date.now(); - workspaceData.eosScan = await scanManager.scanEos( - progressManager.checkCancel, - root.workSpace.uri.fsPath, - ...this.createEosRequests(root, scanManager.logManager, types) - ); - if (workspaceData.eosScan) { - workspaceData.eosScanTimestamp = Date.now(); - let applicableIssuesCount: number = AnalyzerUtils.populateEosIssues(root, workspaceData); - scanManager.logManager.logMessage( - 'Found ' + - applicableIssuesCount + - " Eos issues in workspace = '" + - workspaceData.path + - "' (elapsed " + - (workspaceData.eosScanTimestamp - startTime) / 1000 + - ' seconds)', - 'INFO' - ); - - root.apply(); - progressManager.reportProgress(); - } - } - - /** - * Populate eos information in the view + * Populate SAST information in the view * @param root - root node to populate data inside * @param workspaceData - data to populate on node - * @returns number of eos issues populated + * @returns number of SAST issues populated */ - public static populateEosIssues(root: IssuesRootTreeNode, workspaceData: ScanResults): number { - root.eosScanTimeStamp = workspaceData.eosScanTimestamp; + public static populateSastIssues(root: IssuesRootTreeNode, workspaceData: ScanResults): number { + root.sastScanTimeStamp = workspaceData.sastScanTimestamp; let issuesCount: number = 0; - if (workspaceData.eosScan && workspaceData.eosScan.filesWithIssues) { - workspaceData.eosScan.filesWithIssues.forEach(fileWithIssues => { + if (workspaceData.sastScan && workspaceData.sastScan.filesWithIssues) { + workspaceData.sastScan.filesWithIssues.forEach(fileWithIssues => { let fileNode: CodeFileTreeNode = this.getOrCreateCodeFileNode(root, fileWithIssues.full_path); - fileWithIssues.issues.forEach((issue: EosIssue) => { - issue.locations.forEach((location: EosIssueLocation) => { - fileNode.issues.push(new EosTreeNode(issue, location, fileNode)); + fileWithIssues.issues.forEach((issue: SastIssue) => { + issue.locations.forEach((location: SastIssueLocation) => { + fileNode.issues.push(new SastTreeNode(issue, location, fileNode)); issuesCount++; }); }); diff --git a/src/main/treeDataProviders/utils/dependencyUtils.ts b/src/main/treeDataProviders/utils/dependencyUtils.ts index 653cbce9a..e9d98f62d 100644 --- a/src/main/treeDataProviders/utils/dependencyUtils.ts +++ b/src/main/treeDataProviders/utils/dependencyUtils.ts @@ -1,34 +1,34 @@ -import * as vscode from 'vscode'; import { IComponent, IGraphResponse, IViolation, IVulnerability } from 'jfrog-client-js'; -import { RootNode } from '../dependenciesTree/dependenciesRoot/rootTree'; -import { DependenciesTreeNode } from '../dependenciesTree/dependenciesTreeNode'; -import { Severity, SeverityUtils } from '../../types/severity'; -import { DependencyIssuesTreeNode } from '../issuesTree/descriptorTree/dependencyIssuesTreeNode'; -import { CveTreeNode } from '../issuesTree/descriptorTree/cveTreeNode'; +import { IImpactGraph, ILicense } from 'jfrog-ide-webview'; +import * as vscode from 'vscode'; +import { FocusType } from '../../constants/contextKeys'; +import { LogManager } from '../../log/logManager'; +import { ScanManager } from '../../scanLogic/scanManager'; +import { ApplicabilityRunner } from '../../scanLogic/scanRunners/applicabilityScan'; +import { GeneralInfo } from '../../types/generalInfo'; import { PackageType } from '../../types/projectType'; -import { LicenseIssueTreeNode } from '../issuesTree/descriptorTree/licenseIssueTreeNode'; +import { Severity, SeverityUtils } from '../../types/severity'; +import { DependencyScanResults, ScanResults } from '../../types/workspaceIssuesDetails'; import { GoUtils } from '../../utils/goUtils'; import { MavenUtils } from '../../utils/mavenUtils'; import { NpmUtils } from '../../utils/npmUtils'; +import { NugetUtils } from '../../utils/nugetUtils'; import { PypiUtils } from '../../utils/pypiUtils'; +import { FileScanBundle, FileScanError, ScanUtils } from '../../utils/scanUtils'; import { YarnUtils } from '../../utils/yarnUtils'; -import { IImpactGraph, ILicense } from 'jfrog-ide-webview'; -import { IssueTreeNode } from '../issuesTree/issueTreeNode'; -import { FocusType } from '../../constants/contextKeys'; -import { DependencyScanResults, ScanResults } from '../../types/workspaceIssuesDetails'; +import { RootNode } from '../dependenciesTree/dependenciesRoot/rootTree'; +import { VirtualEnvPypiTree } from '../dependenciesTree/dependenciesRoot/virtualEnvPypiTree'; +import { DependenciesTreeNode } from '../dependenciesTree/dependenciesTreeNode'; +import { CveTreeNode } from '../issuesTree/descriptorTree/cveTreeNode'; +import { DependencyIssuesTreeNode } from '../issuesTree/descriptorTree/dependencyIssuesTreeNode'; +import { DescriptorTreeNode } from '../issuesTree/descriptorTree/descriptorTreeNode'; import { EnvironmentTreeNode } from '../issuesTree/descriptorTree/environmentTreeNode'; +import { LicenseIssueTreeNode } from '../issuesTree/descriptorTree/licenseIssueTreeNode'; import { ProjectDependencyTreeNode } from '../issuesTree/descriptorTree/projectDependencyTreeNode'; -import { NugetUtils } from '../../utils/nugetUtils'; +import { FileTreeNode } from '../issuesTree/fileTreeNode'; +import { IssueTreeNode } from '../issuesTree/issueTreeNode'; import { IssuesRootTreeNode } from '../issuesTree/issuesRootTreeNode'; import { GraphScanProgress, StepProgress } from './stepProgress'; -import { AnalyzerUtils } from './analyzerUtils'; -import { DescriptorTreeNode } from '../issuesTree/descriptorTree/descriptorTreeNode'; -import { VirtualEnvPypiTree } from '../dependenciesTree/dependenciesRoot/virtualEnvPypiTree'; -import { ScanManager } from '../../scanLogic/scanManager'; -import { FileScanBundle, FileScanError, ScanUtils } from '../../utils/scanUtils'; -import { LogManager } from '../../log/logManager'; -import { GeneralInfo } from '../../types/generalInfo'; -import { FileTreeNode } from '../issuesTree/fileTreeNode'; export class DependencyUtils { public static readonly FAIL_TO_SCAN: string = '[Fail to scan]'; @@ -56,7 +56,7 @@ export class DependencyUtils { let descriptorsParsed: Set = new Set(); // Build dependency tree for all the package descriptors let packageDependenciesTree: DependenciesTreeNode = await DependencyUtils.createDependenciesTree( - root.workSpace, + root.workspace, type, descriptorsPaths, () => progressManager.onProgress, @@ -96,7 +96,6 @@ export class DependencyUtils { }) .finally(() => progressManager.reportProgress(progressIncValue / 2)) ); - continue; } } // Not root or have no dependencies @@ -106,14 +105,17 @@ export class DependencyUtils { } this.reportNotFoundDescriptors(descriptorsPaths, descriptorsParsed, scanManager.logManager); - await Promise.all(scansPromises).then(async () => { - if (!contextualScan || bundlesWithIssues.length == 0) { - return; - } - await AnalyzerUtils.cveApplicableScanning(scanManager, bundlesWithIssues, progressManager, type).catch(err => - ScanUtils.onScanError(err, scanManager.logManager, true) - ); - }); + await Promise.all(scansPromises); + let applicabilityRunner: ApplicabilityRunner = new ApplicabilityRunner( + bundlesWithIssues, + type, + progressManager, + scanManager.connectionManager, + scanManager.logManager + ); + if (contextualScan && bundlesWithIssues.length > 0 && applicabilityRunner.shouldRun()) { + await applicabilityRunner.scan().catch(err => ScanUtils.onScanError(err, scanManager.logManager, true)); + } } private static isGraphHasBuildError(child: RootNode, scanBundle: FileScanBundle, logManager: LogManager) { @@ -294,7 +296,7 @@ export class DependencyUtils { if (fileScanBundle) { logger.logMessage( "Workspace '" + - fileScanBundle.rootNode.workSpace.name + + fileScanBundle.rootNode.workspace.name + "' scan on file '" + fileScanBundle.data.fullPath + "' ended with error:\n" + diff --git a/src/main/types/jfrogAppsConfigSchema.ts b/src/main/types/jfrogAppsConfigSchema.ts new file mode 100644 index 000000000..62ba9c81a --- /dev/null +++ b/src/main/types/jfrogAppsConfigSchema.ts @@ -0,0 +1,35 @@ +export interface JFrogAppsConfigSchema { + version: string; + modules: Module[]; +} + +export enum ExcludeScannerName { + ContextualAnalysis = 'applicability', + Iac = 'iac', + Sast = 'sast', + Secrets = 'secrets' +} + +export interface Module { + name: string; + source_root: string; + exclude_patterns: string[]; + exclude_scanners: ExcludeScannerName[]; + scanners: Scanners; +} + +export interface Scanners { + secrets: Scanner; + iac: Scanner; + sast: SastScanner; +} + +export interface Scanner { + working_dirs: string[]; + exclude_patterns: string[]; +} + +export interface SastScanner extends Scanner { + language: string; + excluded_rules: string[]; +} diff --git a/src/main/types/workspaceIssuesDetails.ts b/src/main/types/workspaceIssuesDetails.ts index 8f445a801..3b3616662 100644 --- a/src/main/types/workspaceIssuesDetails.ts +++ b/src/main/types/workspaceIssuesDetails.ts @@ -1,19 +1,19 @@ import { IGraphResponse } from 'jfrog-client-js'; import { IImpactGraph } from 'jfrog-ide-webview'; import { ApplicabilityScanResponse } from '../scanLogic/scanRunners/applicabilityScan'; -import { EosScanResponse } from '../scanLogic/scanRunners/eosScan'; -import { Utils } from '../utils/utils'; -import { PackageType } from './projectType'; import { IacScanResponse } from '../scanLogic/scanRunners/iacScan'; +import { SastScanResponse } from '../scanLogic/scanRunners/sastScan'; import { SecretsScanResponse } from '../scanLogic/scanRunners/secretsScan'; +import { Utils } from '../utils/utils'; +import { PackageType } from './projectType'; /** * Describes all the issue data for a specific workspace from Xray scan */ export class ScanResults { private _descriptorsIssues: DependencyScanResults[] = []; - private _eosScan: EosScanResponse = {} as EosScanResponse; - private _eosScanTimestamp?: number; + private _sastScan: SastScanResponse = {} as SastScanResponse; + private _sastScanTimestamp?: number; private _iacScan: IacScanResponse = {} as IacScanResponse; private _iacScanTimestamp?: number; private _secretsScan: SecretsScanResponse = {} as SecretsScanResponse; @@ -30,9 +30,9 @@ export class ScanResults { if (jsonScanResults._descriptorsIssues) { workspaceIssuesDetails.descriptorsIssues.push(...jsonScanResults._descriptorsIssues); } - // Eos - workspaceIssuesDetails.eosScan = jsonScanResults._eosScan; - workspaceIssuesDetails.eosScanTimestamp = jsonScanResults._eosScanTimestamp; + // SAST + workspaceIssuesDetails.sastScan = jsonScanResults._sastScan; + workspaceIssuesDetails.sastScanTimestamp = jsonScanResults._sastScanTimestamp; // Iac workspaceIssuesDetails.iacScan = jsonScanResults._iacScan; workspaceIssuesDetails.iacScanTimestamp = jsonScanResults._iacScanTimestamp; @@ -54,7 +54,7 @@ export class ScanResults { ...this._descriptorsIssues.map(descriptorIssues => descriptorIssues.applicableScanTimestamp), this.iacScanTimestamp, this.secretsScanTimestamp, - this.eosScanTimestamp + this.sastScanTimestamp ); } @@ -65,7 +65,7 @@ export class ScanResults { public hasIssues(): boolean { return ( this.descriptorsIssues.length > 0 || - this.eosScan?.filesWithIssues?.length > 0 || + this.sastScan?.filesWithIssues?.length > 0 || this.iacScan?.filesWithIssues?.length > 0 || this.secretsScan?.filesWithIssues?.length > 0 ); @@ -83,20 +83,20 @@ export class ScanResults { this._descriptorsIssues = value; } - get eosScan(): EosScanResponse { - return this._eosScan; + get sastScan(): SastScanResponse { + return this._sastScan; } - set eosScan(value: EosScanResponse) { - this._eosScan = value; + set sastScan(value: SastScanResponse) { + this._sastScan = value; } - get eosScanTimestamp(): number | undefined { - return this._eosScanTimestamp; + get sastScanTimestamp(): number | undefined { + return this._sastScanTimestamp; } - set eosScanTimestamp(value: number | undefined) { - this._eosScanTimestamp = value; + set sastScanTimestamp(value: number | undefined) { + this._sastScanTimestamp = value; } get iacScan(): IacScanResponse { diff --git a/src/main/utils/jfrogAppsConfig/jfrogAppsConfig.ts b/src/main/utils/jfrogAppsConfig/jfrogAppsConfig.ts new file mode 100644 index 000000000..ac3f96590 --- /dev/null +++ b/src/main/utils/jfrogAppsConfig/jfrogAppsConfig.ts @@ -0,0 +1,161 @@ +import * as fs from 'fs'; +import yaml from 'js-yaml'; +import * as path from 'path'; +import { ScanType } from '../../scanLogic/scanRunners/analyzerModels'; +import { AnalyzerUtils } from '../../treeDataProviders/utils/analyzerUtils'; +import { ExcludeScannerName, JFrogAppsConfigSchema, Module, SastScanner, Scanner } from '../../types/jfrogAppsConfigSchema'; +import { Configuration } from '../configuration'; + +export class JFrogAppsConfig { + public static JFROG_APP_CONFIG_VERSION: string = '1.0'; + + private _version: string = JFrogAppsConfig.JFROG_APP_CONFIG_VERSION; + private _modules: AppsConfigModule[] = []; + + constructor(workspace: string) { + let appConfigPath: string = path.join(workspace, '.jfrog', 'jfrog-apps-config.yml'); + if (fs.existsSync(appConfigPath)) { + let jfrogAppsConfig: JFrogAppsConfigSchema = yaml.load(fs.readFileSync(appConfigPath, 'utf8')) as JFrogAppsConfigSchema; + this._version = jfrogAppsConfig.version; + if (jfrogAppsConfig.modules) { + for (let module of jfrogAppsConfig.modules) { + this._modules.push(new AppsConfigModule(module)); + } + } + } + // If no modules provides, push a default module + if (this._modules.length === 0) { + this._modules.push(new AppsConfigModule({ source_root: workspace } as Module)); + } + } + + public get version(): string { + return this._version; + } + + public get modules(): AppsConfigModule[] { + return this._modules; + } +} + +export class AppsConfigModule { + private _name: string; + private _sourceRoot: string; + private _excludePatterns: string[]; + private _excludeScanners: ScanType[] = []; + private _scanners: Map = new Map(); + + constructor(module?: Module) { + module = module || ({} as Module); + this._name = module.name; + this._sourceRoot = this.getModuleSourceRoot(module); + this._excludePatterns = module.exclude_patterns || []; + if (module.exclude_scanners) { + for (let excludeScanner of module.exclude_scanners) { + switch (excludeScanner) { + case ExcludeScannerName.Iac: + this._excludeScanners.push(ScanType.Iac); + break; + case ExcludeScannerName.Sast: + this._excludeScanners.push(ScanType.Sast); + break; + case ExcludeScannerName.Secrets: + this._excludeScanners.push(ScanType.Secrets); + break; + case ExcludeScannerName.ContextualAnalysis: + this._excludeScanners.push(ScanType.AnalyzeApplicability); + } + } + } + this._excludeScanners = this.getModuleExcludeScanners(module); + this._scanners.set(ScanType.Iac, module.scanners?.iac); + this._scanners.set(ScanType.Sast, module.scanners?.sast); + this._scanners.set(ScanType.Secrets, module.scanners?.secrets); + } + + public get name(): string { + return this._name; + } + + public get sourceRoot(): string { + return this._sourceRoot; + } + + public get excludePatterns(): string[] { + return this._excludePatterns; + } + + public get excludeScanners(): ScanType[] { + return this._excludeScanners; + } + + public ShouldSkipScanner(scanType: ScanType): boolean { + return this._excludeScanners.includes(scanType); + } + + public GetSourceRoots(scanType: ScanType): string[] { + let scanner: Scanner = this._scanners.get(scanType) || ({} as Scanner); + if (!scanner.working_dirs) { + return [this._sourceRoot]; + } + let roots: string[] = []; + for (let workingDir of scanner.working_dirs) { + roots.push(path.join(this._sourceRoot, workingDir)); + } + return roots; + } + + public GetExcludePatterns(scanType: ScanType): string[] { + let scanner: Scanner = this._scanners.get(scanType) || ({} as Scanner); + let excludePatterns: string[] = this._excludePatterns || []; + if (scanner && scanner.exclude_patterns) { + excludePatterns = excludePatterns.concat(scanner.exclude_patterns); + } + if (excludePatterns.length === 0) { + return AnalyzerUtils.getAnalyzerManagerExcludePatterns(Configuration.getScanExcludePattern()); + } + return excludePatterns; + } + + public GetScanLanguage(): string { + let scanner: SastScanner = this._scanners.get(ScanType.Sast) || ({} as SastScanner); + return scanner.language; + } + + public getExcludeRules(): string[] { + let scanner: SastScanner = this._scanners.get(ScanType.Sast) || ({} as SastScanner); + return scanner.excluded_rules; + } + + private getModuleSourceRoot(module: Module) { + let sourceRoot: string = module.source_root || ''; + if (path.isAbsolute(sourceRoot)) { + return sourceRoot; + } else { + return path.join(__dirname, sourceRoot); + } + } + + private getModuleExcludeScanners(module: Module): ScanType[] { + if (!module.exclude_scanners) { + return []; + } + let excludeScanners: ScanType[] = []; + for (let excludeScanner of module.exclude_scanners) { + switch (excludeScanner) { + case ExcludeScannerName.Iac: + excludeScanners.push(ScanType.Iac); + break; + case ExcludeScannerName.Sast: + excludeScanners.push(ScanType.Sast); + break; + case ExcludeScannerName.Secrets: + excludeScanners.push(ScanType.Secrets); + break; + case ExcludeScannerName.ContextualAnalysis: + excludeScanners.push(ScanType.AnalyzeApplicability); + } + } + return excludeScanners; + } +} diff --git a/src/main/utils/scanUtils.ts b/src/main/utils/scanUtils.ts index 5c879619b..28be806a6 100644 --- a/src/main/utils/scanUtils.ts +++ b/src/main/utils/scanUtils.ts @@ -1,19 +1,19 @@ import * as exec from 'child_process'; +import crypto from 'crypto'; // Important - Don't import '*'. It'll import deprecated encryption methods import * as fs from 'fs'; import * as fse from 'fs-extra'; import * as os from 'os'; import * as path from 'path'; import * as tmp from 'tmp'; +import * as util from 'util'; import * as vscode from 'vscode'; -import crypto from 'crypto'; // Important - Don't import '*'. It'll import deprecated encryption methods +import { ContextKeys } from '../constants/contextKeys'; import { LogManager } from '../log/logManager'; +import { FileTreeNode } from '../treeDataProviders/issuesTree/fileTreeNode'; +import { IssuesRootTreeNode } from '../treeDataProviders/issuesTree/issuesRootTreeNode'; import { PackageType } from '../types/projectType'; -import { Configuration } from './configuration'; -import { ContextKeys } from '../constants/contextKeys'; -import * as util from 'util'; import { EntryIssuesData, ScanResults } from '../types/workspaceIssuesDetails'; -import { IssuesRootTreeNode } from '../treeDataProviders/issuesTree/issuesRootTreeNode'; -import { FileTreeNode } from '../treeDataProviders/issuesTree/fileTreeNode'; +import { Configuration } from './configuration'; export class ScanUtils { public static readonly DESCRIPTOR_SELECTOR_PATTERN: string = @@ -21,8 +21,6 @@ export class ScanUtils { public static readonly RESOURCES_DIR: string = ScanUtils.getResourcesDir(); public static readonly SPAWN_PROCESS_BUFFER_SIZE: number = 104857600; - // 5 min - public static readonly ANALYZER_TIMEOUT_MILLISECS: number = 1000 * 60 * 5; public static async scanWithProgress( scanCbk: (progress: vscode.Progress<{ message?: string; increment?: number }>, checkCanceled: () => void) => Promise, diff --git a/src/main/utils/translators.ts b/src/main/utils/translators.ts index 8cf9532bc..b48e83867 100644 --- a/src/main/utils/translators.ts +++ b/src/main/utils/translators.ts @@ -1,39 +1,43 @@ import { + Severity as ClientSeverity, ICve, + IExtendedInformation, IGeneral, + IGraphCve, IIssue, ILicense, - IVulnerableComponent, - Severity as ClientSeverity, IReference, - IExtendedInformation, - IGraphCve + IVulnerableComponent } from 'jfrog-client-js'; -import { IExtendedInformation as WebExtendedInformation, ISeverityReasons, ICve as WebICve, IAnalysisStep } from 'jfrog-ide-webview'; +import { + IAnalysisStep, + IApplicableDetails, + ISeverityReasons, + IExtendedInformation as WebExtendedInformation, + ICve as WebICve +} from 'jfrog-ide-webview'; import Set from 'typescript-collections/dist/lib/Set'; -import { IApplicableDetails } from 'jfrog-ide-webview'; +import { LogLevel } from '../log/logManager'; +import { AnalyzerManagerSeverityLevel, FileLocation, ScanType } from '../scanLogic/scanRunners/analyzerModels'; import { GavGeneralInfo } from '../types/gavGeneralinfo'; import { GeneralInfo } from '../types/generalInfo'; import { IIssueCacheObject } from '../types/issueCacheObject'; import { ILicenseCacheObject } from '../types/licenseCacheObject'; +import { toPackageType } from '../types/projectType'; import { Severity } from '../types/severity'; -import { FileLocation, AnalyzerManagerSeverityLevel, ScanType } from '../scanLogic/scanRunners/analyzerModels'; -import { PackageType, toPackageType } from '../types/projectType'; import { Utils } from './utils'; -import { LogLevel } from '../log/logManager'; -import { LanguageType } from '../scanLogic/scanRunners/eosScan'; export class Translators { public static toAnalyzerTypeString(type: ScanType): string { switch (type) { - case ScanType.ContextualAnalysis: + case ScanType.AnalyzeApplicability: return 'contextual-analysis'; case ScanType.Iac: return 'iac-scan'; case ScanType.Secrets: return 'secrets-detection'; - case ScanType.Eos: - return 'Eos'; + case ScanType.Sast: + return 'sast'; default: return type; } @@ -46,20 +50,6 @@ export class Translators { return logLevel.toUpperCase(); } - public static toLanguageType(type: PackageType): LanguageType | undefined { - switch (type) { - case PackageType.Python: - return 'python'; - case PackageType.Npm: - case PackageType.Yarn: - return 'javascript'; - case PackageType.Maven: - return 'java'; - default: - return undefined; - } - } - public static levelToSeverity(level?: AnalyzerManagerSeverityLevel): Severity { switch (level) { case 'none': diff --git a/src/main/utils/usageUtils.ts b/src/main/utils/usageUtils.ts index 75ae69fed..1b92e5491 100644 --- a/src/main/utils/usageUtils.ts +++ b/src/main/utils/usageUtils.ts @@ -1,22 +1,13 @@ -import * as vscode from 'vscode'; import { IUsageFeature } from 'jfrog-client-js'; -import { PackageType } from '../types/projectType'; -import { SupportedScans } from '../scanLogic/scanManager'; +import * as vscode from 'vscode'; import { ConnectionManager } from '../connect/connectionManager'; -import { ApplicabilityRunner } from '../scanLogic/scanRunners/applicabilityScan'; +import { EntitledScans } from '../scanLogic/scanManager'; +import { PackageType } from '../types/projectType'; export class UsageUtils { - private static getUsageFeaturesByExistTech( - projectDescriptors: Map, - scanSuffix: string, - onlyInclude?: PackageType[] - ): IUsageFeature[] { + private static getUsageFeaturesByExistTech(projectDescriptors: Map, scanSuffix: string): IUsageFeature[] { let features: IUsageFeature[] = []; for (const [techEnum, descriptors] of projectDescriptors.entries()) { - // If we only support subset of the techs, check if tech is supported. - if (onlyInclude && onlyInclude.length > 0 && !onlyInclude.includes(techEnum)) { - continue; - } // Only add to usage if found descriptors for tech. if (!!descriptors && descriptors.length > 0) { const featureName: string = PackageType[techEnum].toLowerCase() + '-' + scanSuffix; @@ -33,7 +24,7 @@ export class UsageUtils { * @param connectionManager - manager containing Artifactory details if configured. */ public static async sendUsageReport( - supportedScans: SupportedScans, + supportedScans: EntitledScans, projectDescriptors: Map, connectionManager: ConnectionManager ) { @@ -42,7 +33,7 @@ export class UsageUtils { features.push(...this.getUsageFeaturesByExistTech(projectDescriptors, 'deps')); } if (supportedScans.applicability) { - features.push(...this.getUsageFeaturesByExistTech(projectDescriptors, 'contextual', ApplicabilityRunner.supportedPackageTypes())); + features.push(...this.getUsageFeaturesByExistTech(projectDescriptors, 'contextual')); } if (supportedScans.iac) { features.push({ featureId: 'iac' }); diff --git a/src/test/resources/applicableScan/analyzerResponse.json b/src/test/resources/applicableScan/analyzerResponse.json index 0bc5ad4c6..8acf7653f 100644 --- a/src/test/resources/applicableScan/analyzerResponse.json +++ b/src/test/resources/applicableScan/analyzerResponse.json @@ -19,8 +19,8 @@ { "id": "applic_CVE-2021-3918", "fullDescription": { - "text": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `json-schema.validate` with external input to its 1st (`instance`) argument.\n* `json-schema.checkPropertyChange` with external input to its 2nd (`schema`) argument.", - "markdown": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `json-schema.validate` with external input to its 1st (`instance`) argument.\n* `json-schema.checkPropertyChange` with external input to its 2nd (`schema`) argument." + "text": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`\n* `loadSync`\n\nThe scanner also checks whether the `Object.freeze()` remediation is not present.", + "markdown": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`\n* `loadSync`\n\nThe scanner also checks whether the `Object.freeze()` remediation is not present." }, "name": "CVE-2021-3918", "shortDescription": { @@ -30,8 +30,8 @@ { "id": "applic_CVE-2022-25878", "fullDescription": { - "text": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`", - "markdown": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`" + "text": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`\n* `loadSync`\n\nThe scanner also checks whether the `Object.freeze()` remediation is not present.", + "markdown": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`\n* `loadSync`\n\nThe scanner also checks whether the `Object.freeze()` remediation is not present." }, "name": "CVE-2022-25878", "shortDescription": { @@ -58,7 +58,7 @@ "results": [ { "message": { - "text": "Prototype pollution `Object.freeze` remediation was not detected, The vulnerable function protobufjs.parse is called with external input, The vulnerable function protobufjs.load is called" + "text": "Prototype pollution `Object.freeze` remediation was not detected, The vulnerable function protobufjs.parse is called with external input, The vulnerable function protobufjs.load(Sync) is called" }, "locations": [ { @@ -82,7 +82,7 @@ }, { "message": { - "text": "Prototype pollution `Object.freeze` remediation was not detected, The vulnerable function protobufjs.parse is called with external input, The vulnerable function protobufjs.load is called" + "text": "Prototype pollution `Object.freeze` remediation was not detected, The vulnerable function protobufjs.parse is called with external input, The vulnerable function protobufjs.load(Sync) is called" }, "locations": [ { diff --git a/src/test/resources/applicableScan/npm/expectedScanResponse.json b/src/test/resources/applicableScan/npm/expectedScanResponse.json index 13f37e60d..2690d80ba 100644 --- a/src/test/resources/applicableScan/npm/expectedScanResponse.json +++ b/src/test/resources/applicableScan/npm/expectedScanResponse.json @@ -6,7 +6,7 @@ ], "applicableCve": { "CVE-2022-25878": { - "fixReason": "Prototype pollution `Object.freeze` remediation was not detected, The vulnerable function protobufjs.parse is called with external input, The vulnerable function protobufjs.load is called", + "fixReason": "Prototype pollution `Object.freeze` remediation was not detected, The vulnerable function protobufjs.parse is called with external input, The vulnerable function protobufjs.load(Sync) is called", "fileEvidences": [ { "full_path": "index.js", @@ -32,7 +32,7 @@ ] } ], - "fullDescription": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`" + "fullDescription": "The scanner checks whether any of the following vulnerable functions are called:\n\n* `util.setProperty` with external input to its 2nd (`path`) or 3rd (`value`) arguments.\n* `ReflectionObject.setParsedOption` with external input to its 2nd (`name`) or 3rd (`value`) arguments.\n* `parse` with external input to its 1st (`source`) argument.\n* `load`\n* `loadSync`\n\nThe scanner also checks whether the `Object.freeze()` remediation is not present." } } } \ No newline at end of file diff --git a/src/test/resources/jfrogAppsConfig/.jfrog/jfrog-apps-config.yml b/src/test/resources/jfrogAppsConfig/.jfrog/jfrog-apps-config.yml new file mode 100644 index 000000000..cf4de853d --- /dev/null +++ b/src/test/resources/jfrogAppsConfig/.jfrog/jfrog-apps-config.yml @@ -0,0 +1,50 @@ +# [Required] JFrog Applications Config version +version: "1.0" + +modules: + # [Required] Module name + - name: FrogLeapApp + # [Optional, default: "."] Application's root directory + source_root: "src" + # [Optional] Directories to exclude from scanning across all scanners + exclude_patterns: + - "docs/" + # [Optional] Scanners to exclude from JFrog Advanced Security (Options: "secrets", "sast", "iac") + exclude_scanners: + - secrets + # [Optional] Customize scanner configurations + scanners: + # [Optional] Configuration for Static Application Security Testing (SAST) + sast: + # [Optional] Specify the programming language for SAST + language: java + # [Optional] Working directories specific to SAST (Relative to source_root) + working_dirs: + - "dir1" + - "dir2" + # [Optional] Additional exclude patterns for this scanner + exclude_patterns: + - "dir1/test/**" + # [Optional] List of specific scan rules to exclude from the scan + excluded_rules: + - xss-injection + + # [Optional] Configuration for secrets scan + secrets: + # [Optional] Working directories specific to the secret scanner (Relative to source_root) + working_dirs: + - "dir1" + - "dir2" + # [Optional] Additional exclude patterns for this scanner + exclude_patterns: + - "dir1/test/**" + + # [Optional] Configuration for Infrastructure as Code scan (IaC) + iac: + # [Optional] Working directories specific to IaC (Relative to source_root) + working_dirs: + - "dir1" + - "dir2" + # [Optional] Additional exclude patterns for this Scanner + exclude_patterns: + - "dir1/test/**" \ No newline at end of file diff --git a/src/test/resources/sastScan/analyzerResponse.json b/src/test/resources/sastScan/analyzerResponse.json new file mode 100644 index 000000000..e48c87145 --- /dev/null +++ b/src/test/resources/sastScan/analyzerResponse.json @@ -0,0 +1,78 @@ +{ + "runs": [ + { + "tool": { + "driver": { + "name": "USAF", + "rules": [ + { + "id": "js-insecure-random", + "defaultConfiguration": { + "parameters": { + "properties": { + "CWE": "338" + } + } + }, + "fullDescription": { + "text": "\n### Overview\nA use of insecure random vulnerability is a type of security flaw that is\ncaused by the use of inadequate or predictable random numbers in a program\nor system. Random numbers are used in many security-related applications,\nsuch as generating cryptographic keys and if the numbers are not truly\nrandom, an attacker may be able to predict or recreate them, potentially\ncompromising the security of the system.\n\n### Vulnerable example\n```javascript\nvar randomNum = Math.random();\n```\n`Math.random` is not secured, as it creates predictable random numbers.\n\n### Remediation\n```diff\nvar randomNum = crypto.randomInt(0, 100)\n```\n`crypto.randomInt` is secured, and creates much less predictable random\nnumbers.\n", + "markdown": "\n### Overview\nA use of insecure random vulnerability is a type of security flaw that is\ncaused by the use of inadequate or predictable random numbers in a program\nor system. Random numbers are used in many security-related applications,\nsuch as generating cryptographic keys and if the numbers are not truly\nrandom, an attacker may be able to predict or recreate them, potentially\ncompromising the security of the system.\n\n### Vulnerable example\n```javascript\nvar randomNum = Math.random();\n```\n`Math.random` is not secured, as it creates predictable random numbers.\n\n### Remediation\n```diff\nvar randomNum = crypto.randomInt(0, 100)\n```\n`crypto.randomInt` is secured, and creates much less predictable random\nnumbers.\n" + }, + "shortDescription": { + "text": "Use of Insecure Random" + } + } + ] + } + }, + "invocations": [ + { + "executionSuccessful": true, + "arguments": [ + "/Users/yahavi/.jfrog-vscode-extension/issues/analyzerManager/zd_scanner/scanner", + "scan", + "/var/folders/dn/3smrq2yj2qddjccqlky47mpw0000gq/T/tmp-33126-59BtZ0xxL1U4/response_0", + "/var/folders/dn/3smrq2yj2qddjccqlky47mpw0000gq/T/tmp-33126-59BtZ0xxL1U4/request_0" + ], + "workingDirectory": { + "uri": "file:///Users/yahavi/.jfrog-vscode-extension/issues/analyzerManager" + } + } + ], + "results": [ + { + "message": { + "text": "Use of Insecure Random" + }, + "level": "note", + "locations": [ + { + "logicalLocations": [ + { + "fullyQualifiedName": "badguys.static.js.vendor.jquery.^_0.^_213.matcherFromGroupMatchers.^_307" + } + ], + "physicalLocation": { + "artifactLocation": { + "uri": "file:///Users/yahavi/code/bad-guys/badguys/static/js/vendor/jquery.js" + }, + "region": { + "endColumn": 78, + "endLine": 5337, + "snippet": { + "text": "Math.random()" + }, + "startColumn": 65, + "startLine": 5337 + } + } + } + ], + "ruleId": "js-insecure-random" + } + ] + } + ], + "version": "2.1.0", + "$schema": "https://docs.oasis-open.org/sarif/sarif/v2.1.0/cos02/schemas/sarif-schema-2.1.0.json" +} diff --git a/src/test/resources/sastScan/jquery.js b/src/test/resources/sastScan/jquery.js new file mode 100644 index 000000000..6362d0f33 --- /dev/null +++ b/src/test/resources/sastScan/jquery.js @@ -0,0 +1,9597 @@ +/*! + * jQuery JavaScript Library v1.9.1 + * http://jquery.com/ + * + * Includes Sizzle.js + * http://sizzlejs.com/ + * + * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors + * Released under the MIT license + * http://jquery.org/license + * + * Date: 2013-2-4 + */ +(function( window, undefined ) { + +// Can't do this because several apps including ASP.NET trace +// the stack via arguments.caller.callee and Firefox dies if +// you try to trace through "use strict" call chains. (#13335) +// Support: Firefox 18+ +//"use strict"; +var + // The deferred used on DOM ready + readyList, + + // A central reference to the root jQuery(document) + rootjQuery, + + // Support: IE<9 + // For `typeof node.method` instead of `node.method !== undefined` + core_strundefined = typeof undefined, + + // Use the correct document accordingly with window argument (sandbox) + document = window.document, + location = window.location, + + // Map over jQuery in case of overwrite + _jQuery = window.jQuery, + + // Map over the $ in case of overwrite + _$ = window.$, + + // [[Class]] -> type pairs + class2type = {}, + + // List of deleted data cache ids, so we can reuse them + core_deletedIds = [], + + core_version = "1.9.1", + + // Save a reference to some core methods + core_concat = core_deletedIds.concat, + core_push = core_deletedIds.push, + core_slice = core_deletedIds.slice, + core_indexOf = core_deletedIds.indexOf, + core_toString = class2type.toString, + core_hasOwn = class2type.hasOwnProperty, + core_trim = core_version.trim, + + // Define a local copy of jQuery + jQuery = function( selector, context ) { + // The jQuery object is actually just the init constructor 'enhanced' + return new jQuery.fn.init( selector, context, rootjQuery ); + }, + + // Used for matching numbers + core_pnum = /[+-]?(?:\d*\.|)\d+(?:[eE][+-]?\d+|)/.source, + + // Used for splitting on whitespace + core_rnotwhite = /\S+/g, + + // Make sure we trim BOM and NBSP (here's looking at you, Safari 5.0 and IE) + rtrim = /^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g, + + // A simple way to check for HTML strings + // Prioritize #id over to avoid XSS via location.hash (#9521) + // Strict HTML recognition (#11290: must start with <) + rquickExpr = /^(?:(<[\w\W]+>)[^>]*|#([\w-]*))$/, + + // Match a standalone tag + rsingleTag = /^<(\w+)\s*\/?>(?:<\/\1>|)$/, + + // JSON RegExp + rvalidchars = /^[\],:{}\s]*$/, + rvalidbraces = /(?:^|:|,)(?:\s*\[)+/g, + rvalidescape = /\\(?:["\\\/bfnrt]|u[\da-fA-F]{4})/g, + rvalidtokens = /"[^"\\\r\n]*"|true|false|null|-?(?:\d+\.|)\d+(?:[eE][+-]?\d+|)/g, + + // Matches dashed string for camelizing + rmsPrefix = /^-ms-/, + rdashAlpha = /-([\da-z])/gi, + + // Used by jQuery.camelCase as callback to replace() + fcamelCase = function( all, letter ) { + return letter.toUpperCase(); + }, + + // The ready event handler + completed = function( event ) { + + // readyState === "complete" is good enough for us to call the dom ready in oldIE + if ( document.addEventListener || event.type === "load" || document.readyState === "complete" ) { + detach(); + jQuery.ready(); + } + }, + // Clean-up method for dom ready events + detach = function() { + if ( document.addEventListener ) { + document.removeEventListener( "DOMContentLoaded", completed, false ); + window.removeEventListener( "load", completed, false ); + + } else { + document.detachEvent( "onreadystatechange", completed ); + window.detachEvent( "onload", completed ); + } + }; + +jQuery.fn = jQuery.prototype = { + // The current version of jQuery being used + jquery: core_version, + + constructor: jQuery, + init: function( selector, context, rootjQuery ) { + var match, elem; + + // HANDLE: $(""), $(null), $(undefined), $(false) + if ( !selector ) { + return this; + } + + // Handle HTML strings + if ( typeof selector === "string" ) { + if ( selector.charAt(0) === "<" && selector.charAt( selector.length - 1 ) === ">" && selector.length >= 3 ) { + // Assume that strings that start and end with <> are HTML and skip the regex check + match = [ null, selector, null ]; + + } else { + match = rquickExpr.exec( selector ); + } + + // Match html or make sure no context is specified for #id + if ( match && (match[1] || !context) ) { + + // HANDLE: $(html) -> $(array) + if ( match[1] ) { + context = context instanceof jQuery ? context[0] : context; + + // scripts is true for back-compat + jQuery.merge( this, jQuery.parseHTML( + match[1], + context && context.nodeType ? context.ownerDocument || context : document, + true + ) ); + + // HANDLE: $(html, props) + if ( rsingleTag.test( match[1] ) && jQuery.isPlainObject( context ) ) { + for ( match in context ) { + // Properties of context are called as methods if possible + if ( jQuery.isFunction( this[ match ] ) ) { + this[ match ]( context[ match ] ); + + // ...and otherwise set as attributes + } else { + this.attr( match, context[ match ] ); + } + } + } + + return this; + + // HANDLE: $(#id) + } else { + elem = document.getElementById( match[2] ); + + // Check parentNode to catch when Blackberry 4.6 returns + // nodes that are no longer in the document #6963 + if ( elem && elem.parentNode ) { + // Handle the case where IE and Opera return items + // by name instead of ID + if ( elem.id !== match[2] ) { + return rootjQuery.find( selector ); + } + + // Otherwise, we inject the element directly into the jQuery object + this.length = 1; + this[0] = elem; + } + + this.context = document; + this.selector = selector; + return this; + } + + // HANDLE: $(expr, $(...)) + } else if ( !context || context.jquery ) { + return ( context || rootjQuery ).find( selector ); + + // HANDLE: $(expr, context) + // (which is just equivalent to: $(context).find(expr) + } else { + return this.constructor( context ).find( selector ); + } + + // HANDLE: $(DOMElement) + } else if ( selector.nodeType ) { + this.context = this[0] = selector; + this.length = 1; + return this; + + // HANDLE: $(function) + // Shortcut for document ready + } else if ( jQuery.isFunction( selector ) ) { + return rootjQuery.ready( selector ); + } + + if ( selector.selector !== undefined ) { + this.selector = selector.selector; + this.context = selector.context; + } + + return jQuery.makeArray( selector, this ); + }, + + // Start with an empty selector + selector: "", + + // The default length of a jQuery object is 0 + length: 0, + + // The number of elements contained in the matched element set + size: function() { + return this.length; + }, + + toArray: function() { + return core_slice.call( this ); + }, + + // Get the Nth element in the matched element set OR + // Get the whole matched element set as a clean array + get: function( num ) { + return num == null ? + + // Return a 'clean' array + this.toArray() : + + // Return just the object + ( num < 0 ? this[ this.length + num ] : this[ num ] ); + }, + + // Take an array of elements and push it onto the stack + // (returning the new matched element set) + pushStack: function( elems ) { + + // Build a new jQuery matched element set + var ret = jQuery.merge( this.constructor(), elems ); + + // Add the old object onto the stack (as a reference) + ret.prevObject = this; + ret.context = this.context; + + // Return the newly-formed element set + return ret; + }, + + // Execute a callback for every element in the matched set. + // (You can seed the arguments with an array of args, but this is + // only used internally.) + each: function( callback, args ) { + return jQuery.each( this, callback, args ); + }, + + ready: function( fn ) { + // Add the callback + jQuery.ready.promise().done( fn ); + + return this; + }, + + slice: function() { + return this.pushStack( core_slice.apply( this, arguments ) ); + }, + + first: function() { + return this.eq( 0 ); + }, + + last: function() { + return this.eq( -1 ); + }, + + eq: function( i ) { + var len = this.length, + j = +i + ( i < 0 ? len : 0 ); + return this.pushStack( j >= 0 && j < len ? [ this[j] ] : [] ); + }, + + map: function( callback ) { + return this.pushStack( jQuery.map(this, function( elem, i ) { + return callback.call( elem, i, elem ); + })); + }, + + end: function() { + return this.prevObject || this.constructor(null); + }, + + // For internal use only. + // Behaves like an Array's method, not like a jQuery method. + push: core_push, + sort: [].sort, + splice: [].splice +}; + +// Give the init function the jQuery prototype for later instantiation +jQuery.fn.init.prototype = jQuery.fn; + +jQuery.extend = jQuery.fn.extend = function() { + var src, copyIsArray, copy, name, options, clone, + target = arguments[0] || {}, + i = 1, + length = arguments.length, + deep = false; + + // Handle a deep copy situation + if ( typeof target === "boolean" ) { + deep = target; + target = arguments[1] || {}; + // skip the boolean and the target + i = 2; + } + + // Handle case when target is a string or something (possible in deep copy) + if ( typeof target !== "object" && !jQuery.isFunction(target) ) { + target = {}; + } + + // extend jQuery itself if only one argument is passed + if ( length === i ) { + target = this; + --i; + } + + for ( ; i < length; i++ ) { + // Only deal with non-null/undefined values + if ( (options = arguments[ i ]) != null ) { + // Extend the base object + for ( name in options ) { + src = target[ name ]; + copy = options[ name ]; + + // Prevent never-ending loop + if ( target === copy ) { + continue; + } + + // Recurse if we're merging plain objects or arrays + if ( deep && copy && ( jQuery.isPlainObject(copy) || (copyIsArray = jQuery.isArray(copy)) ) ) { + if ( copyIsArray ) { + copyIsArray = false; + clone = src && jQuery.isArray(src) ? src : []; + + } else { + clone = src && jQuery.isPlainObject(src) ? src : {}; + } + + // Never move original objects, clone them + target[ name ] = jQuery.extend( deep, clone, copy ); + + // Don't bring in undefined values + } else if ( copy !== undefined ) { + target[ name ] = copy; + } + } + } + } + + // Return the modified object + return target; +}; + +jQuery.extend({ + noConflict: function( deep ) { + if ( window.$ === jQuery ) { + window.$ = _$; + } + + if ( deep && window.jQuery === jQuery ) { + window.jQuery = _jQuery; + } + + return jQuery; + }, + + // Is the DOM ready to be used? Set to true once it occurs. + isReady: false, + + // A counter to track how many items to wait for before + // the ready event fires. See #6781 + readyWait: 1, + + // Hold (or release) the ready event + holdReady: function( hold ) { + if ( hold ) { + jQuery.readyWait++; + } else { + jQuery.ready( true ); + } + }, + + // Handle when the DOM is ready + ready: function( wait ) { + + // Abort if there are pending holds or we're already ready + if ( wait === true ? --jQuery.readyWait : jQuery.isReady ) { + return; + } + + // Make sure body exists, at least, in case IE gets a little overzealous (ticket #5443). + if ( !document.body ) { + return setTimeout( jQuery.ready ); + } + + // Remember that the DOM is ready + jQuery.isReady = true; + + // If a normal DOM Ready event fired, decrement, and wait if need be + if ( wait !== true && --jQuery.readyWait > 0 ) { + return; + } + + // If there are functions bound, to execute + readyList.resolveWith( document, [ jQuery ] ); + + // Trigger any bound ready events + if ( jQuery.fn.trigger ) { + jQuery( document ).trigger("ready").off("ready"); + } + }, + + // See test/unit/core.js for details concerning isFunction. + // Since version 1.3, DOM methods and functions like alert + // aren't supported. They return false on IE (#2968). + isFunction: function( obj ) { + return jQuery.type(obj) === "function"; + }, + + isArray: Array.isArray || function( obj ) { + return jQuery.type(obj) === "array"; + }, + + isWindow: function( obj ) { + return obj != null && obj == obj.window; + }, + + isNumeric: function( obj ) { + return !isNaN( parseFloat(obj) ) && isFinite( obj ); + }, + + type: function( obj ) { + if ( obj == null ) { + return String( obj ); + } + return typeof obj === "object" || typeof obj === "function" ? + class2type[ core_toString.call(obj) ] || "object" : + typeof obj; + }, + + isPlainObject: function( obj ) { + // Must be an Object. + // Because of IE, we also have to check the presence of the constructor property. + // Make sure that DOM nodes and window objects don't pass through, as well + if ( !obj || jQuery.type(obj) !== "object" || obj.nodeType || jQuery.isWindow( obj ) ) { + return false; + } + + try { + // Not own constructor property must be Object + if ( obj.constructor && + !core_hasOwn.call(obj, "constructor") && + !core_hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) { + return false; + } + } catch ( e ) { + // IE8,9 Will throw exceptions on certain host objects #9897 + return false; + } + + // Own properties are enumerated firstly, so to speed up, + // if last one is own, then all properties are own. + + var key; + for ( key in obj ) {} + + return key === undefined || core_hasOwn.call( obj, key ); + }, + + isEmptyObject: function( obj ) { + var name; + for ( name in obj ) { + return false; + } + return true; + }, + + error: function( msg ) { + throw new Error( msg ); + }, + + // data: string of html + // context (optional): If specified, the fragment will be created in this context, defaults to document + // keepScripts (optional): If true, will include scripts passed in the html string + parseHTML: function( data, context, keepScripts ) { + if ( !data || typeof data !== "string" ) { + return null; + } + if ( typeof context === "boolean" ) { + keepScripts = context; + context = false; + } + context = context || document; + + var parsed = rsingleTag.exec( data ), + scripts = !keepScripts && []; + + // Single tag + if ( parsed ) { + return [ context.createElement( parsed[1] ) ]; + } + + parsed = jQuery.buildFragment( [ data ], context, scripts ); + if ( scripts ) { + jQuery( scripts ).remove(); + } + return jQuery.merge( [], parsed.childNodes ); + }, + + parseJSON: function( data ) { + // Attempt to parse using the native JSON parser first + if ( window.JSON && window.JSON.parse ) { + return window.JSON.parse( data ); + } + + if ( data === null ) { + return data; + } + + if ( typeof data === "string" ) { + + // Make sure leading/trailing whitespace is removed (IE can't handle it) + data = jQuery.trim( data ); + + if ( data ) { + // Make sure the incoming data is actual JSON + // Logic borrowed from http://json.org/json2.js + if ( rvalidchars.test( data.replace( rvalidescape, "@" ) + .replace( rvalidtokens, "]" ) + .replace( rvalidbraces, "")) ) { + + return ( new Function( "return " + data ) )(); + } + } + } + + jQuery.error( "Invalid JSON: " + data ); + }, + + // Cross-browser xml parsing + parseXML: function( data ) { + var xml, tmp; + if ( !data || typeof data !== "string" ) { + return null; + } + try { + if ( window.DOMParser ) { // Standard + tmp = new DOMParser(); + xml = tmp.parseFromString( data , "text/xml" ); + } else { // IE + xml = new ActiveXObject( "Microsoft.XMLDOM" ); + xml.async = "false"; + xml.loadXML( data ); + } + } catch( e ) { + xml = undefined; + } + if ( !xml || !xml.documentElement || xml.getElementsByTagName( "parsererror" ).length ) { + jQuery.error( "Invalid XML: " + data ); + } + return xml; + }, + + noop: function() {}, + + // Evaluates a script in a global context + // Workarounds based on findings by Jim Driscoll + // http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context + globalEval: function( data ) { + if ( data && jQuery.trim( data ) ) { + // We use execScript on Internet Explorer + // We use an anonymous function so that context is window + // rather than jQuery in Firefox + ( window.execScript || function( data ) { + window[ "eval" ].call( window, data ); + } )( data ); + } + }, + + // Convert dashed to camelCase; used by the css and data modules + // Microsoft forgot to hump their vendor prefix (#9572) + camelCase: function( string ) { + return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase ); + }, + + nodeName: function( elem, name ) { + return elem.nodeName && elem.nodeName.toLowerCase() === name.toLowerCase(); + }, + + // args is for internal usage only + each: function( obj, callback, args ) { + var value, + i = 0, + length = obj.length, + isArray = isArraylike( obj ); + + if ( args ) { + if ( isArray ) { + for ( ; i < length; i++ ) { + value = callback.apply( obj[ i ], args ); + + if ( value === false ) { + break; + } + } + } else { + for ( i in obj ) { + value = callback.apply( obj[ i ], args ); + + if ( value === false ) { + break; + } + } + } + + // A special, fast, case for the most common use of each + } else { + if ( isArray ) { + for ( ; i < length; i++ ) { + value = callback.call( obj[ i ], i, obj[ i ] ); + + if ( value === false ) { + break; + } + } + } else { + for ( i in obj ) { + value = callback.call( obj[ i ], i, obj[ i ] ); + + if ( value === false ) { + break; + } + } + } + } + + return obj; + }, + + // Use native String.trim function wherever possible + trim: core_trim && !core_trim.call("\uFEFF\xA0") ? + function( text ) { + return text == null ? + "" : + core_trim.call( text ); + } : + + // Otherwise use our own trimming functionality + function( text ) { + return text == null ? + "" : + ( text + "" ).replace( rtrim, "" ); + }, + + // results is for internal usage only + makeArray: function( arr, results ) { + var ret = results || []; + + if ( arr != null ) { + if ( isArraylike( Object(arr) ) ) { + jQuery.merge( ret, + typeof arr === "string" ? + [ arr ] : arr + ); + } else { + core_push.call( ret, arr ); + } + } + + return ret; + }, + + inArray: function( elem, arr, i ) { + var len; + + if ( arr ) { + if ( core_indexOf ) { + return core_indexOf.call( arr, elem, i ); + } + + len = arr.length; + i = i ? i < 0 ? Math.max( 0, len + i ) : i : 0; + + for ( ; i < len; i++ ) { + // Skip accessing in sparse arrays + if ( i in arr && arr[ i ] === elem ) { + return i; + } + } + } + + return -1; + }, + + merge: function( first, second ) { + var l = second.length, + i = first.length, + j = 0; + + if ( typeof l === "number" ) { + for ( ; j < l; j++ ) { + first[ i++ ] = second[ j ]; + } + } else { + while ( second[j] !== undefined ) { + first[ i++ ] = second[ j++ ]; + } + } + + first.length = i; + + return first; + }, + + grep: function( elems, callback, inv ) { + var retVal, + ret = [], + i = 0, + length = elems.length; + inv = !!inv; + + // Go through the array, only saving the items + // that pass the validator function + for ( ; i < length; i++ ) { + retVal = !!callback( elems[ i ], i ); + if ( inv !== retVal ) { + ret.push( elems[ i ] ); + } + } + + return ret; + }, + + // arg is for internal usage only + map: function( elems, callback, arg ) { + var value, + i = 0, + length = elems.length, + isArray = isArraylike( elems ), + ret = []; + + // Go through the array, translating each of the items to their + if ( isArray ) { + for ( ; i < length; i++ ) { + value = callback( elems[ i ], i, arg ); + + if ( value != null ) { + ret[ ret.length ] = value; + } + } + + // Go through every key on the object, + } else { + for ( i in elems ) { + value = callback( elems[ i ], i, arg ); + + if ( value != null ) { + ret[ ret.length ] = value; + } + } + } + + // Flatten any nested arrays + return core_concat.apply( [], ret ); + }, + + // A global GUID counter for objects + guid: 1, + + // Bind a function to a context, optionally partially applying any + // arguments. + proxy: function( fn, context ) { + var args, proxy, tmp; + + if ( typeof context === "string" ) { + tmp = fn[ context ]; + context = fn; + fn = tmp; + } + + // Quick check to determine if target is callable, in the spec + // this throws a TypeError, but we will just return undefined. + if ( !jQuery.isFunction( fn ) ) { + return undefined; + } + + // Simulated bind + args = core_slice.call( arguments, 2 ); + proxy = function() { + return fn.apply( context || this, args.concat( core_slice.call( arguments ) ) ); + }; + + // Set the guid of unique handler to the same of original handler, so it can be removed + proxy.guid = fn.guid = fn.guid || jQuery.guid++; + + return proxy; + }, + + // Multifunctional method to get and set values of a collection + // The value/s can optionally be executed if it's a function + access: function( elems, fn, key, value, chainable, emptyGet, raw ) { + var i = 0, + length = elems.length, + bulk = key == null; + + // Sets many values + if ( jQuery.type( key ) === "object" ) { + chainable = true; + for ( i in key ) { + jQuery.access( elems, fn, i, key[i], true, emptyGet, raw ); + } + + // Sets one value + } else if ( value !== undefined ) { + chainable = true; + + if ( !jQuery.isFunction( value ) ) { + raw = true; + } + + if ( bulk ) { + // Bulk operations run against the entire set + if ( raw ) { + fn.call( elems, value ); + fn = null; + + // ...except when executing function values + } else { + bulk = fn; + fn = function( elem, key, value ) { + return bulk.call( jQuery( elem ), value ); + }; + } + } + + if ( fn ) { + for ( ; i < length; i++ ) { + fn( elems[i], key, raw ? value : value.call( elems[i], i, fn( elems[i], key ) ) ); + } + } + } + + return chainable ? + elems : + + // Gets + bulk ? + fn.call( elems ) : + length ? fn( elems[0], key ) : emptyGet; + }, + + now: function() { + return ( new Date() ).getTime(); + } +}); + +jQuery.ready.promise = function( obj ) { + if ( !readyList ) { + + readyList = jQuery.Deferred(); + + // Catch cases where $(document).ready() is called after the browser event has already occurred. + // we once tried to use readyState "interactive" here, but it caused issues like the one + // discovered by ChrisS here: http://bugs.jquery.com/ticket/12282#comment:15 + if ( document.readyState === "complete" ) { + // Handle it asynchronously to allow scripts the opportunity to delay ready + setTimeout( jQuery.ready ); + + // Standards-based browsers support DOMContentLoaded + } else if ( document.addEventListener ) { + // Use the handy event callback + document.addEventListener( "DOMContentLoaded", completed, false ); + + // A fallback to window.onload, that will always work + window.addEventListener( "load", completed, false ); + + // If IE event model is used + } else { + // Ensure firing before onload, maybe late but safe also for iframes + document.attachEvent( "onreadystatechange", completed ); + + // A fallback to window.onload, that will always work + window.attachEvent( "onload", completed ); + + // If IE and not a frame + // continually check to see if the document is ready + var top = false; + + try { + top = window.frameElement == null && document.documentElement; + } catch(e) {} + + if ( top && top.doScroll ) { + (function doScrollCheck() { + if ( !jQuery.isReady ) { + + try { + // Use the trick by Diego Perini + // http://javascript.nwbox.com/IEContentLoaded/ + top.doScroll("left"); + } catch(e) { + return setTimeout( doScrollCheck, 50 ); + } + + // detach all dom ready events + detach(); + + // and execute any waiting functions + jQuery.ready(); + } + })(); + } + } + } + return readyList.promise( obj ); +}; + +// Populate the class2type map +jQuery.each("Boolean Number String Function Array Date RegExp Object Error".split(" "), function(i, name) { + class2type[ "[object " + name + "]" ] = name.toLowerCase(); +}); + +function isArraylike( obj ) { + var length = obj.length, + type = jQuery.type( obj ); + + if ( jQuery.isWindow( obj ) ) { + return false; + } + + if ( obj.nodeType === 1 && length ) { + return true; + } + + return type === "array" || type !== "function" && + ( length === 0 || + typeof length === "number" && length > 0 && ( length - 1 ) in obj ); +} + +// All jQuery objects should point back to these +rootjQuery = jQuery(document); +// String to Object options format cache +var optionsCache = {}; + +// Convert String-formatted options into Object-formatted ones and store in cache +function createOptions( options ) { + var object = optionsCache[ options ] = {}; + jQuery.each( options.match( core_rnotwhite ) || [], function( _, flag ) { + object[ flag ] = true; + }); + return object; +} + +/* + * Create a callback list using the following parameters: + * + * options: an optional list of space-separated options that will change how + * the callback list behaves or a more traditional option object + * + * By default a callback list will act like an event callback list and can be + * "fired" multiple times. + * + * Possible options: + * + * once: will ensure the callback list can only be fired once (like a Deferred) + * + * memory: will keep track of previous values and will call any callback added + * after the list has been fired right away with the latest "memorized" + * values (like a Deferred) + * + * unique: will ensure a callback can only be added once (no duplicate in the list) + * + * stopOnFalse: interrupt callings when a callback returns false + * + */ +jQuery.Callbacks = function( options ) { + + // Convert options from String-formatted to Object-formatted if needed + // (we check in cache first) + options = typeof options === "string" ? + ( optionsCache[ options ] || createOptions( options ) ) : + jQuery.extend( {}, options ); + + var // Flag to know if list is currently firing + firing, + // Last fire value (for non-forgettable lists) + memory, + // Flag to know if list was already fired + fired, + // End of the loop when firing + firingLength, + // Index of currently firing callback (modified by remove if needed) + firingIndex, + // First callback to fire (used internally by add and fireWith) + firingStart, + // Actual callback list + list = [], + // Stack of fire calls for repeatable lists + stack = !options.once && [], + // Fire callbacks + fire = function( data ) { + memory = options.memory && data; + fired = true; + firingIndex = firingStart || 0; + firingStart = 0; + firingLength = list.length; + firing = true; + for ( ; list && firingIndex < firingLength; firingIndex++ ) { + if ( list[ firingIndex ].apply( data[ 0 ], data[ 1 ] ) === false && options.stopOnFalse ) { + memory = false; // To prevent further calls using add + break; + } + } + firing = false; + if ( list ) { + if ( stack ) { + if ( stack.length ) { + fire( stack.shift() ); + } + } else if ( memory ) { + list = []; + } else { + self.disable(); + } + } + }, + // Actual Callbacks object + self = { + // Add a callback or a collection of callbacks to the list + add: function() { + if ( list ) { + // First, we save the current length + var start = list.length; + (function add( args ) { + jQuery.each( args, function( _, arg ) { + var type = jQuery.type( arg ); + if ( type === "function" ) { + if ( !options.unique || !self.has( arg ) ) { + list.push( arg ); + } + } else if ( arg && arg.length && type !== "string" ) { + // Inspect recursively + add( arg ); + } + }); + })( arguments ); + // Do we need to add the callbacks to the + // current firing batch? + if ( firing ) { + firingLength = list.length; + // With memory, if we're not firing then + // we should call right away + } else if ( memory ) { + firingStart = start; + fire( memory ); + } + } + return this; + }, + // Remove a callback from the list + remove: function() { + if ( list ) { + jQuery.each( arguments, function( _, arg ) { + var index; + while( ( index = jQuery.inArray( arg, list, index ) ) > -1 ) { + list.splice( index, 1 ); + // Handle firing indexes + if ( firing ) { + if ( index <= firingLength ) { + firingLength--; + } + if ( index <= firingIndex ) { + firingIndex--; + } + } + } + }); + } + return this; + }, + // Check if a given callback is in the list. + // If no argument is given, return whether or not list has callbacks attached. + has: function( fn ) { + return fn ? jQuery.inArray( fn, list ) > -1 : !!( list && list.length ); + }, + // Remove all callbacks from the list + empty: function() { + list = []; + return this; + }, + // Have the list do nothing anymore + disable: function() { + list = stack = memory = undefined; + return this; + }, + // Is it disabled? + disabled: function() { + return !list; + }, + // Lock the list in its current state + lock: function() { + stack = undefined; + if ( !memory ) { + self.disable(); + } + return this; + }, + // Is it locked? + locked: function() { + return !stack; + }, + // Call all callbacks with the given context and arguments + fireWith: function( context, args ) { + args = args || []; + args = [ context, args.slice ? args.slice() : args ]; + if ( list && ( !fired || stack ) ) { + if ( firing ) { + stack.push( args ); + } else { + fire( args ); + } + } + return this; + }, + // Call all the callbacks with the given arguments + fire: function() { + self.fireWith( this, arguments ); + return this; + }, + // To know if the callbacks have already been called at least once + fired: function() { + return !!fired; + } + }; + + return self; +}; +jQuery.extend({ + + Deferred: function( func ) { + var tuples = [ + // action, add listener, listener list, final state + [ "resolve", "done", jQuery.Callbacks("once memory"), "resolved" ], + [ "reject", "fail", jQuery.Callbacks("once memory"), "rejected" ], + [ "notify", "progress", jQuery.Callbacks("memory") ] + ], + state = "pending", + promise = { + state: function() { + return state; + }, + always: function() { + deferred.done( arguments ).fail( arguments ); + return this; + }, + then: function( /* fnDone, fnFail, fnProgress */ ) { + var fns = arguments; + return jQuery.Deferred(function( newDefer ) { + jQuery.each( tuples, function( i, tuple ) { + var action = tuple[ 0 ], + fn = jQuery.isFunction( fns[ i ] ) && fns[ i ]; + // deferred[ done | fail | progress ] for forwarding actions to newDefer + deferred[ tuple[1] ](function() { + var returned = fn && fn.apply( this, arguments ); + if ( returned && jQuery.isFunction( returned.promise ) ) { + returned.promise() + .done( newDefer.resolve ) + .fail( newDefer.reject ) + .progress( newDefer.notify ); + } else { + newDefer[ action + "With" ]( this === promise ? newDefer.promise() : this, fn ? [ returned ] : arguments ); + } + }); + }); + fns = null; + }).promise(); + }, + // Get a promise for this deferred + // If obj is provided, the promise aspect is added to the object + promise: function( obj ) { + return obj != null ? jQuery.extend( obj, promise ) : promise; + } + }, + deferred = {}; + + // Keep pipe for back-compat + promise.pipe = promise.then; + + // Add list-specific methods + jQuery.each( tuples, function( i, tuple ) { + var list = tuple[ 2 ], + stateString = tuple[ 3 ]; + + // promise[ done | fail | progress ] = list.add + promise[ tuple[1] ] = list.add; + + // Handle state + if ( stateString ) { + list.add(function() { + // state = [ resolved | rejected ] + state = stateString; + + // [ reject_list | resolve_list ].disable; progress_list.lock + }, tuples[ i ^ 1 ][ 2 ].disable, tuples[ 2 ][ 2 ].lock ); + } + + // deferred[ resolve | reject | notify ] + deferred[ tuple[0] ] = function() { + deferred[ tuple[0] + "With" ]( this === deferred ? promise : this, arguments ); + return this; + }; + deferred[ tuple[0] + "With" ] = list.fireWith; + }); + + // Make the deferred a promise + promise.promise( deferred ); + + // Call given func if any + if ( func ) { + func.call( deferred, deferred ); + } + + // All done! + return deferred; + }, + + // Deferred helper + when: function( subordinate /* , ..., subordinateN */ ) { + var i = 0, + resolveValues = core_slice.call( arguments ), + length = resolveValues.length, + + // the count of uncompleted subordinates + remaining = length !== 1 || ( subordinate && jQuery.isFunction( subordinate.promise ) ) ? length : 0, + + // the master Deferred. If resolveValues consist of only a single Deferred, just use that. + deferred = remaining === 1 ? subordinate : jQuery.Deferred(), + + // Update function for both resolve and progress values + updateFunc = function( i, contexts, values ) { + return function( value ) { + contexts[ i ] = this; + values[ i ] = arguments.length > 1 ? core_slice.call( arguments ) : value; + if( values === progressValues ) { + deferred.notifyWith( contexts, values ); + } else if ( !( --remaining ) ) { + deferred.resolveWith( contexts, values ); + } + }; + }, + + progressValues, progressContexts, resolveContexts; + + // add listeners to Deferred subordinates; treat others as resolved + if ( length > 1 ) { + progressValues = new Array( length ); + progressContexts = new Array( length ); + resolveContexts = new Array( length ); + for ( ; i < length; i++ ) { + if ( resolveValues[ i ] && jQuery.isFunction( resolveValues[ i ].promise ) ) { + resolveValues[ i ].promise() + .done( updateFunc( i, resolveContexts, resolveValues ) ) + .fail( deferred.reject ) + .progress( updateFunc( i, progressContexts, progressValues ) ); + } else { + --remaining; + } + } + } + + // if we're not waiting on anything, resolve the master + if ( !remaining ) { + deferred.resolveWith( resolveContexts, resolveValues ); + } + + return deferred.promise(); + } +}); +jQuery.support = (function() { + + var support, all, a, + input, select, fragment, + opt, eventName, isSupported, i, + div = document.createElement("div"); + + // Setup + div.setAttribute( "className", "t" ); + div.innerHTML = "
a"; + + // Support tests won't run in some limited or non-browser environments + all = div.getElementsByTagName("*"); + a = div.getElementsByTagName("a")[ 0 ]; + if ( !all || !a || !all.length ) { + return {}; + } + + // First batch of tests + select = document.createElement("select"); + opt = select.appendChild( document.createElement("option") ); + input = div.getElementsByTagName("input")[ 0 ]; + + a.style.cssText = "top:1px;float:left;opacity:.5"; + support = { + // Test setAttribute on camelCase class. If it works, we need attrFixes when doing get/setAttribute (ie6/7) + getSetAttribute: div.className !== "t", + + // IE strips leading whitespace when .innerHTML is used + leadingWhitespace: div.firstChild.nodeType === 3, + + // Make sure that tbody elements aren't automatically inserted + // IE will insert them into empty tables + tbody: !div.getElementsByTagName("tbody").length, + + // Make sure that link elements get serialized correctly by innerHTML + // This requires a wrapper element in IE + htmlSerialize: !!div.getElementsByTagName("link").length, + + // Get the style information from getAttribute + // (IE uses .cssText instead) + style: /top/.test( a.getAttribute("style") ), + + // Make sure that URLs aren't manipulated + // (IE normalizes it by default) + hrefNormalized: a.getAttribute("href") === "/a", + + // Make sure that element opacity exists + // (IE uses filter instead) + // Use a regex to work around a WebKit issue. See #5145 + opacity: /^0.5/.test( a.style.opacity ), + + // Verify style float existence + // (IE uses styleFloat instead of cssFloat) + cssFloat: !!a.style.cssFloat, + + // Check the default checkbox/radio value ("" on WebKit; "on" elsewhere) + checkOn: !!input.value, + + // Make sure that a selected-by-default option has a working selected property. + // (WebKit defaults to false instead of true, IE too, if it's in an optgroup) + optSelected: opt.selected, + + // Tests for enctype support on a form (#6743) + enctype: !!document.createElement("form").enctype, + + // Makes sure cloning an html5 element does not cause problems + // Where outerHTML is undefined, this still works + html5Clone: document.createElement("nav").cloneNode( true ).outerHTML !== "<:nav>", + + // jQuery.support.boxModel DEPRECATED in 1.8 since we don't support Quirks Mode + boxModel: document.compatMode === "CSS1Compat", + + // Will be defined later + deleteExpando: true, + noCloneEvent: true, + inlineBlockNeedsLayout: false, + shrinkWrapBlocks: false, + reliableMarginRight: true, + boxSizingReliable: true, + pixelPosition: false + }; + + // Make sure checked status is properly cloned + input.checked = true; + support.noCloneChecked = input.cloneNode( true ).checked; + + // Make sure that the options inside disabled selects aren't marked as disabled + // (WebKit marks them as disabled) + select.disabled = true; + support.optDisabled = !opt.disabled; + + // Support: IE<9 + try { + delete div.test; + } catch( e ) { + support.deleteExpando = false; + } + + // Check if we can trust getAttribute("value") + input = document.createElement("input"); + input.setAttribute( "value", "" ); + support.input = input.getAttribute( "value" ) === ""; + + // Check if an input maintains its value after becoming a radio + input.value = "t"; + input.setAttribute( "type", "radio" ); + support.radioValue = input.value === "t"; + + // #11217 - WebKit loses check when the name is after the checked attribute + input.setAttribute( "checked", "t" ); + input.setAttribute( "name", "t" ); + + fragment = document.createDocumentFragment(); + fragment.appendChild( input ); + + // Check if a disconnected checkbox will retain its checked + // value of true after appended to the DOM (IE6/7) + support.appendChecked = input.checked; + + // WebKit doesn't clone checked state correctly in fragments + support.checkClone = fragment.cloneNode( true ).cloneNode( true ).lastChild.checked; + + // Support: IE<9 + // Opera does not clone events (and typeof div.attachEvent === undefined). + // IE9-10 clones events bound via attachEvent, but they don't trigger with .click() + if ( div.attachEvent ) { + div.attachEvent( "onclick", function() { + support.noCloneEvent = false; + }); + + div.cloneNode( true ).click(); + } + + // Support: IE<9 (lack submit/change bubble), Firefox 17+ (lack focusin event) + // Beware of CSP restrictions (https://developer.mozilla.org/en/Security/CSP), test/csp.php + for ( i in { submit: true, change: true, focusin: true }) { + div.setAttribute( eventName = "on" + i, "t" ); + + support[ i + "Bubbles" ] = eventName in window || div.attributes[ eventName ].expando === false; + } + + div.style.backgroundClip = "content-box"; + div.cloneNode( true ).style.backgroundClip = ""; + support.clearCloneStyle = div.style.backgroundClip === "content-box"; + + // Run tests that need a body at doc ready + jQuery(function() { + var container, marginDiv, tds, + divReset = "padding:0;margin:0;border:0;display:block;box-sizing:content-box;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;", + body = document.getElementsByTagName("body")[0]; + + if ( !body ) { + // Return for frameset docs that don't have a body + return; + } + + container = document.createElement("div"); + container.style.cssText = "border:0;width:0;height:0;position:absolute;top:0;left:-9999px;margin-top:1px"; + + body.appendChild( container ).appendChild( div ); + + // Support: IE8 + // Check if table cells still have offsetWidth/Height when they are set + // to display:none and there are still other visible table cells in a + // table row; if so, offsetWidth/Height are not reliable for use when + // determining if an element has been hidden directly using + // display:none (it is still safe to use offsets if a parent element is + // hidden; don safety goggles and see bug #4512 for more information). + div.innerHTML = "
t
"; + tds = div.getElementsByTagName("td"); + tds[ 0 ].style.cssText = "padding:0;margin:0;border:0;display:none"; + isSupported = ( tds[ 0 ].offsetHeight === 0 ); + + tds[ 0 ].style.display = ""; + tds[ 1 ].style.display = "none"; + + // Support: IE8 + // Check if empty table cells still have offsetWidth/Height + support.reliableHiddenOffsets = isSupported && ( tds[ 0 ].offsetHeight === 0 ); + + // Check box-sizing and margin behavior + div.innerHTML = ""; + div.style.cssText = "box-sizing:border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;padding:1px;border:1px;display:block;width:4px;margin-top:1%;position:absolute;top:1%;"; + support.boxSizing = ( div.offsetWidth === 4 ); + support.doesNotIncludeMarginInBodyOffset = ( body.offsetTop !== 1 ); + + // Use window.getComputedStyle because jsdom on node.js will break without it. + if ( window.getComputedStyle ) { + support.pixelPosition = ( window.getComputedStyle( div, null ) || {} ).top !== "1%"; + support.boxSizingReliable = ( window.getComputedStyle( div, null ) || { width: "4px" } ).width === "4px"; + + // Check if div with explicit width and no margin-right incorrectly + // gets computed margin-right based on width of container. (#3333) + // Fails in WebKit before Feb 2011 nightlies + // WebKit Bug 13343 - getComputedStyle returns wrong value for margin-right + marginDiv = div.appendChild( document.createElement("div") ); + marginDiv.style.cssText = div.style.cssText = divReset; + marginDiv.style.marginRight = marginDiv.style.width = "0"; + div.style.width = "1px"; + + support.reliableMarginRight = + !parseFloat( ( window.getComputedStyle( marginDiv, null ) || {} ).marginRight ); + } + + if ( typeof div.style.zoom !== core_strundefined ) { + // Support: IE<8 + // Check if natively block-level elements act like inline-block + // elements when setting their display to 'inline' and giving + // them layout + div.innerHTML = ""; + div.style.cssText = divReset + "width:1px;padding:1px;display:inline;zoom:1"; + support.inlineBlockNeedsLayout = ( div.offsetWidth === 3 ); + + // Support: IE6 + // Check if elements with layout shrink-wrap their children + div.style.display = "block"; + div.innerHTML = "
"; + div.firstChild.style.width = "5px"; + support.shrinkWrapBlocks = ( div.offsetWidth !== 3 ); + + if ( support.inlineBlockNeedsLayout ) { + // Prevent IE 6 from affecting layout for positioned elements #11048 + // Prevent IE from shrinking the body in IE 7 mode #12869 + // Support: IE<8 + body.style.zoom = 1; + } + } + + body.removeChild( container ); + + // Null elements to avoid leaks in IE + container = div = tds = marginDiv = null; + }); + + // Null elements to avoid leaks in IE + all = select = fragment = opt = a = input = null; + + return support; +})(); + +var rbrace = /(?:\{[\s\S]*\}|\[[\s\S]*\])$/, + rmultiDash = /([A-Z])/g; + +function internalData( elem, name, data, pvt /* Internal Use Only */ ){ + if ( !jQuery.acceptData( elem ) ) { + return; + } + + var thisCache, ret, + internalKey = jQuery.expando, + getByName = typeof name === "string", + + // We have to handle DOM nodes and JS objects differently because IE6-7 + // can't GC object references properly across the DOM-JS boundary + isNode = elem.nodeType, + + // Only DOM nodes need the global jQuery cache; JS object data is + // attached directly to the object so GC can occur automatically + cache = isNode ? jQuery.cache : elem, + + // Only defining an ID for JS objects if its cache already exists allows + // the code to shortcut on the same path as a DOM node with no cache + id = isNode ? elem[ internalKey ] : elem[ internalKey ] && internalKey; + + // Avoid doing any more work than we need to when trying to get data on an + // object that has no data at all + if ( (!id || !cache[id] || (!pvt && !cache[id].data)) && getByName && data === undefined ) { + return; + } + + if ( !id ) { + // Only DOM nodes need a new unique ID for each element since their data + // ends up in the global cache + if ( isNode ) { + elem[ internalKey ] = id = core_deletedIds.pop() || jQuery.guid++; + } else { + id = internalKey; + } + } + + if ( !cache[ id ] ) { + cache[ id ] = {}; + + // Avoids exposing jQuery metadata on plain JS objects when the object + // is serialized using JSON.stringify + if ( !isNode ) { + cache[ id ].toJSON = jQuery.noop; + } + } + + // An object can be passed to jQuery.data instead of a key/value pair; this gets + // shallow copied over onto the existing cache + if ( typeof name === "object" || typeof name === "function" ) { + if ( pvt ) { + cache[ id ] = jQuery.extend( cache[ id ], name ); + } else { + cache[ id ].data = jQuery.extend( cache[ id ].data, name ); + } + } + + thisCache = cache[ id ]; + + // jQuery data() is stored in a separate object inside the object's internal data + // cache in order to avoid key collisions between internal data and user-defined + // data. + if ( !pvt ) { + if ( !thisCache.data ) { + thisCache.data = {}; + } + + thisCache = thisCache.data; + } + + if ( data !== undefined ) { + thisCache[ jQuery.camelCase( name ) ] = data; + } + + // Check for both converted-to-camel and non-converted data property names + // If a data property was specified + if ( getByName ) { + + // First Try to find as-is property data + ret = thisCache[ name ]; + + // Test for null|undefined property data + if ( ret == null ) { + + // Try to find the camelCased property + ret = thisCache[ jQuery.camelCase( name ) ]; + } + } else { + ret = thisCache; + } + + return ret; +} + +function internalRemoveData( elem, name, pvt ) { + if ( !jQuery.acceptData( elem ) ) { + return; + } + + var i, l, thisCache, + isNode = elem.nodeType, + + // See jQuery.data for more information + cache = isNode ? jQuery.cache : elem, + id = isNode ? elem[ jQuery.expando ] : jQuery.expando; + + // If there is already no cache entry for this object, there is no + // purpose in continuing + if ( !cache[ id ] ) { + return; + } + + if ( name ) { + + thisCache = pvt ? cache[ id ] : cache[ id ].data; + + if ( thisCache ) { + + // Support array or space separated string names for data keys + if ( !jQuery.isArray( name ) ) { + + // try the string as a key before any manipulation + if ( name in thisCache ) { + name = [ name ]; + } else { + + // split the camel cased version by spaces unless a key with the spaces exists + name = jQuery.camelCase( name ); + if ( name in thisCache ) { + name = [ name ]; + } else { + name = name.split(" "); + } + } + } else { + // If "name" is an array of keys... + // When data is initially created, via ("key", "val") signature, + // keys will be converted to camelCase. + // Since there is no way to tell _how_ a key was added, remove + // both plain key and camelCase key. #12786 + // This will only penalize the array argument path. + name = name.concat( jQuery.map( name, jQuery.camelCase ) ); + } + + for ( i = 0, l = name.length; i < l; i++ ) { + delete thisCache[ name[i] ]; + } + + // If there is no data left in the cache, we want to continue + // and let the cache object itself get destroyed + if ( !( pvt ? isEmptyDataObject : jQuery.isEmptyObject )( thisCache ) ) { + return; + } + } + } + + // See jQuery.data for more information + if ( !pvt ) { + delete cache[ id ].data; + + // Don't destroy the parent cache unless the internal data object + // had been the only thing left in it + if ( !isEmptyDataObject( cache[ id ] ) ) { + return; + } + } + + // Destroy the cache + if ( isNode ) { + jQuery.cleanData( [ elem ], true ); + + // Use delete when supported for expandos or `cache` is not a window per isWindow (#10080) + } else if ( jQuery.support.deleteExpando || cache != cache.window ) { + delete cache[ id ]; + + // When all else fails, null + } else { + cache[ id ] = null; + } +} + +jQuery.extend({ + cache: {}, + + // Unique for each copy of jQuery on the page + // Non-digits removed to match rinlinejQuery + expando: "jQuery" + ( core_version + Math.random() ).replace( /\D/g, "" ), + + // The following elements throw uncatchable exceptions if you + // attempt to add expando properties to them. + noData: { + "embed": true, + // Ban all objects except for Flash (which handle expandos) + "object": "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000", + "applet": true + }, + + hasData: function( elem ) { + elem = elem.nodeType ? jQuery.cache[ elem[jQuery.expando] ] : elem[ jQuery.expando ]; + return !!elem && !isEmptyDataObject( elem ); + }, + + data: function( elem, name, data ) { + return internalData( elem, name, data ); + }, + + removeData: function( elem, name ) { + return internalRemoveData( elem, name ); + }, + + // For internal use only. + _data: function( elem, name, data ) { + return internalData( elem, name, data, true ); + }, + + _removeData: function( elem, name ) { + return internalRemoveData( elem, name, true ); + }, + + // A method for determining if a DOM node can handle the data expando + acceptData: function( elem ) { + // Do not set data on non-element because it will not be cleared (#8335). + if ( elem.nodeType && elem.nodeType !== 1 && elem.nodeType !== 9 ) { + return false; + } + + var noData = elem.nodeName && jQuery.noData[ elem.nodeName.toLowerCase() ]; + + // nodes accept data unless otherwise specified; rejection can be conditional + return !noData || noData !== true && elem.getAttribute("classid") === noData; + } +}); + +jQuery.fn.extend({ + data: function( key, value ) { + var attrs, name, + elem = this[0], + i = 0, + data = null; + + // Gets all values + if ( key === undefined ) { + if ( this.length ) { + data = jQuery.data( elem ); + + if ( elem.nodeType === 1 && !jQuery._data( elem, "parsedAttrs" ) ) { + attrs = elem.attributes; + for ( ; i < attrs.length; i++ ) { + name = attrs[i].name; + + if ( !name.indexOf( "data-" ) ) { + name = jQuery.camelCase( name.slice(5) ); + + dataAttr( elem, name, data[ name ] ); + } + } + jQuery._data( elem, "parsedAttrs", true ); + } + } + + return data; + } + + // Sets multiple values + if ( typeof key === "object" ) { + return this.each(function() { + jQuery.data( this, key ); + }); + } + + return jQuery.access( this, function( value ) { + + if ( value === undefined ) { + // Try to fetch any internally stored data first + return elem ? dataAttr( elem, key, jQuery.data( elem, key ) ) : null; + } + + this.each(function() { + jQuery.data( this, key, value ); + }); + }, null, value, arguments.length > 1, null, true ); + }, + + removeData: function( key ) { + return this.each(function() { + jQuery.removeData( this, key ); + }); + } +}); + +function dataAttr( elem, key, data ) { + // If nothing was found internally, try to fetch any + // data from the HTML5 data-* attribute + if ( data === undefined && elem.nodeType === 1 ) { + + var name = "data-" + key.replace( rmultiDash, "-$1" ).toLowerCase(); + + data = elem.getAttribute( name ); + + if ( typeof data === "string" ) { + try { + data = data === "true" ? true : + data === "false" ? false : + data === "null" ? null : + // Only convert to a number if it doesn't change the string + +data + "" === data ? +data : + rbrace.test( data ) ? jQuery.parseJSON( data ) : + data; + } catch( e ) {} + + // Make sure we set the data so it isn't changed later + jQuery.data( elem, key, data ); + + } else { + data = undefined; + } + } + + return data; +} + +// checks a cache object for emptiness +function isEmptyDataObject( obj ) { + var name; + for ( name in obj ) { + + // if the public data object is empty, the private is still empty + if ( name === "data" && jQuery.isEmptyObject( obj[name] ) ) { + continue; + } + if ( name !== "toJSON" ) { + return false; + } + } + + return true; +} +jQuery.extend({ + queue: function( elem, type, data ) { + var queue; + + if ( elem ) { + type = ( type || "fx" ) + "queue"; + queue = jQuery._data( elem, type ); + + // Speed up dequeue by getting out quickly if this is just a lookup + if ( data ) { + if ( !queue || jQuery.isArray(data) ) { + queue = jQuery._data( elem, type, jQuery.makeArray(data) ); + } else { + queue.push( data ); + } + } + return queue || []; + } + }, + + dequeue: function( elem, type ) { + type = type || "fx"; + + var queue = jQuery.queue( elem, type ), + startLength = queue.length, + fn = queue.shift(), + hooks = jQuery._queueHooks( elem, type ), + next = function() { + jQuery.dequeue( elem, type ); + }; + + // If the fx queue is dequeued, always remove the progress sentinel + if ( fn === "inprogress" ) { + fn = queue.shift(); + startLength--; + } + + hooks.cur = fn; + if ( fn ) { + + // Add a progress sentinel to prevent the fx queue from being + // automatically dequeued + if ( type === "fx" ) { + queue.unshift( "inprogress" ); + } + + // clear up the last queue stop function + delete hooks.stop; + fn.call( elem, next, hooks ); + } + + if ( !startLength && hooks ) { + hooks.empty.fire(); + } + }, + + // not intended for public consumption - generates a queueHooks object, or returns the current one + _queueHooks: function( elem, type ) { + var key = type + "queueHooks"; + return jQuery._data( elem, key ) || jQuery._data( elem, key, { + empty: jQuery.Callbacks("once memory").add(function() { + jQuery._removeData( elem, type + "queue" ); + jQuery._removeData( elem, key ); + }) + }); + } +}); + +jQuery.fn.extend({ + queue: function( type, data ) { + var setter = 2; + + if ( typeof type !== "string" ) { + data = type; + type = "fx"; + setter--; + } + + if ( arguments.length < setter ) { + return jQuery.queue( this[0], type ); + } + + return data === undefined ? + this : + this.each(function() { + var queue = jQuery.queue( this, type, data ); + + // ensure a hooks for this queue + jQuery._queueHooks( this, type ); + + if ( type === "fx" && queue[0] !== "inprogress" ) { + jQuery.dequeue( this, type ); + } + }); + }, + dequeue: function( type ) { + return this.each(function() { + jQuery.dequeue( this, type ); + }); + }, + // Based off of the plugin by Clint Helfers, with permission. + // http://blindsignals.com/index.php/2009/07/jquery-delay/ + delay: function( time, type ) { + time = jQuery.fx ? jQuery.fx.speeds[ time ] || time : time; + type = type || "fx"; + + return this.queue( type, function( next, hooks ) { + var timeout = setTimeout( next, time ); + hooks.stop = function() { + clearTimeout( timeout ); + }; + }); + }, + clearQueue: function( type ) { + return this.queue( type || "fx", [] ); + }, + // Get a promise resolved when queues of a certain type + // are emptied (fx is the type by default) + promise: function( type, obj ) { + var tmp, + count = 1, + defer = jQuery.Deferred(), + elements = this, + i = this.length, + resolve = function() { + if ( !( --count ) ) { + defer.resolveWith( elements, [ elements ] ); + } + }; + + if ( typeof type !== "string" ) { + obj = type; + type = undefined; + } + type = type || "fx"; + + while( i-- ) { + tmp = jQuery._data( elements[ i ], type + "queueHooks" ); + if ( tmp && tmp.empty ) { + count++; + tmp.empty.add( resolve ); + } + } + resolve(); + return defer.promise( obj ); + } +}); +var nodeHook, boolHook, + rclass = /[\t\r\n]/g, + rreturn = /\r/g, + rfocusable = /^(?:input|select|textarea|button|object)$/i, + rclickable = /^(?:a|area)$/i, + rboolean = /^(?:checked|selected|autofocus|autoplay|async|controls|defer|disabled|hidden|loop|multiple|open|readonly|required|scoped)$/i, + ruseDefault = /^(?:checked|selected)$/i, + getSetAttribute = jQuery.support.getSetAttribute, + getSetInput = jQuery.support.input; + +jQuery.fn.extend({ + attr: function( name, value ) { + return jQuery.access( this, jQuery.attr, name, value, arguments.length > 1 ); + }, + + removeAttr: function( name ) { + return this.each(function() { + jQuery.removeAttr( this, name ); + }); + }, + + prop: function( name, value ) { + return jQuery.access( this, jQuery.prop, name, value, arguments.length > 1 ); + }, + + removeProp: function( name ) { + name = jQuery.propFix[ name ] || name; + return this.each(function() { + // try/catch handles cases where IE balks (such as removing a property on window) + try { + this[ name ] = undefined; + delete this[ name ]; + } catch( e ) {} + }); + }, + + addClass: function( value ) { + var classes, elem, cur, clazz, j, + i = 0, + len = this.length, + proceed = typeof value === "string" && value; + + if ( jQuery.isFunction( value ) ) { + return this.each(function( j ) { + jQuery( this ).addClass( value.call( this, j, this.className ) ); + }); + } + + if ( proceed ) { + // The disjunction here is for better compressibility (see removeClass) + classes = ( value || "" ).match( core_rnotwhite ) || []; + + for ( ; i < len; i++ ) { + elem = this[ i ]; + cur = elem.nodeType === 1 && ( elem.className ? + ( " " + elem.className + " " ).replace( rclass, " " ) : + " " + ); + + if ( cur ) { + j = 0; + while ( (clazz = classes[j++]) ) { + if ( cur.indexOf( " " + clazz + " " ) < 0 ) { + cur += clazz + " "; + } + } + elem.className = jQuery.trim( cur ); + + } + } + } + + return this; + }, + + removeClass: function( value ) { + var classes, elem, cur, clazz, j, + i = 0, + len = this.length, + proceed = arguments.length === 0 || typeof value === "string" && value; + + if ( jQuery.isFunction( value ) ) { + return this.each(function( j ) { + jQuery( this ).removeClass( value.call( this, j, this.className ) ); + }); + } + if ( proceed ) { + classes = ( value || "" ).match( core_rnotwhite ) || []; + + for ( ; i < len; i++ ) { + elem = this[ i ]; + // This expression is here for better compressibility (see addClass) + cur = elem.nodeType === 1 && ( elem.className ? + ( " " + elem.className + " " ).replace( rclass, " " ) : + "" + ); + + if ( cur ) { + j = 0; + while ( (clazz = classes[j++]) ) { + // Remove *all* instances + while ( cur.indexOf( " " + clazz + " " ) >= 0 ) { + cur = cur.replace( " " + clazz + " ", " " ); + } + } + elem.className = value ? jQuery.trim( cur ) : ""; + } + } + } + + return this; + }, + + toggleClass: function( value, stateVal ) { + var type = typeof value, + isBool = typeof stateVal === "boolean"; + + if ( jQuery.isFunction( value ) ) { + return this.each(function( i ) { + jQuery( this ).toggleClass( value.call(this, i, this.className, stateVal), stateVal ); + }); + } + + return this.each(function() { + if ( type === "string" ) { + // toggle individual class names + var className, + i = 0, + self = jQuery( this ), + state = stateVal, + classNames = value.match( core_rnotwhite ) || []; + + while ( (className = classNames[ i++ ]) ) { + // check each className given, space separated list + state = isBool ? state : !self.hasClass( className ); + self[ state ? "addClass" : "removeClass" ]( className ); + } + + // Toggle whole class name + } else if ( type === core_strundefined || type === "boolean" ) { + if ( this.className ) { + // store className if set + jQuery._data( this, "__className__", this.className ); + } + + // If the element has a class name or if we're passed "false", + // then remove the whole classname (if there was one, the above saved it). + // Otherwise bring back whatever was previously saved (if anything), + // falling back to the empty string if nothing was stored. + this.className = this.className || value === false ? "" : jQuery._data( this, "__className__" ) || ""; + } + }); + }, + + hasClass: function( selector ) { + var className = " " + selector + " ", + i = 0, + l = this.length; + for ( ; i < l; i++ ) { + if ( this[i].nodeType === 1 && (" " + this[i].className + " ").replace(rclass, " ").indexOf( className ) >= 0 ) { + return true; + } + } + + return false; + }, + + val: function( value ) { + var ret, hooks, isFunction, + elem = this[0]; + + if ( !arguments.length ) { + if ( elem ) { + hooks = jQuery.valHooks[ elem.type ] || jQuery.valHooks[ elem.nodeName.toLowerCase() ]; + + if ( hooks && "get" in hooks && (ret = hooks.get( elem, "value" )) !== undefined ) { + return ret; + } + + ret = elem.value; + + return typeof ret === "string" ? + // handle most common string cases + ret.replace(rreturn, "") : + // handle cases where value is null/undef or number + ret == null ? "" : ret; + } + + return; + } + + isFunction = jQuery.isFunction( value ); + + return this.each(function( i ) { + var val, + self = jQuery(this); + + if ( this.nodeType !== 1 ) { + return; + } + + if ( isFunction ) { + val = value.call( this, i, self.val() ); + } else { + val = value; + } + + // Treat null/undefined as ""; convert numbers to string + if ( val == null ) { + val = ""; + } else if ( typeof val === "number" ) { + val += ""; + } else if ( jQuery.isArray( val ) ) { + val = jQuery.map(val, function ( value ) { + return value == null ? "" : value + ""; + }); + } + + hooks = jQuery.valHooks[ this.type ] || jQuery.valHooks[ this.nodeName.toLowerCase() ]; + + // If set returns undefined, fall back to normal setting + if ( !hooks || !("set" in hooks) || hooks.set( this, val, "value" ) === undefined ) { + this.value = val; + } + }); + } +}); + +jQuery.extend({ + valHooks: { + option: { + get: function( elem ) { + // attributes.value is undefined in Blackberry 4.7 but + // uses .value. See #6932 + var val = elem.attributes.value; + return !val || val.specified ? elem.value : elem.text; + } + }, + select: { + get: function( elem ) { + var value, option, + options = elem.options, + index = elem.selectedIndex, + one = elem.type === "select-one" || index < 0, + values = one ? null : [], + max = one ? index + 1 : options.length, + i = index < 0 ? + max : + one ? index : 0; + + // Loop through all the selected options + for ( ; i < max; i++ ) { + option = options[ i ]; + + // oldIE doesn't update selected after form reset (#2551) + if ( ( option.selected || i === index ) && + // Don't return options that are disabled or in a disabled optgroup + ( jQuery.support.optDisabled ? !option.disabled : option.getAttribute("disabled") === null ) && + ( !option.parentNode.disabled || !jQuery.nodeName( option.parentNode, "optgroup" ) ) ) { + + // Get the specific value for the option + value = jQuery( option ).val(); + + // We don't need an array for one selects + if ( one ) { + return value; + } + + // Multi-Selects return an array + values.push( value ); + } + } + + return values; + }, + + set: function( elem, value ) { + var values = jQuery.makeArray( value ); + + jQuery(elem).find("option").each(function() { + this.selected = jQuery.inArray( jQuery(this).val(), values ) >= 0; + }); + + if ( !values.length ) { + elem.selectedIndex = -1; + } + return values; + } + } + }, + + attr: function( elem, name, value ) { + var hooks, notxml, ret, + nType = elem.nodeType; + + // don't get/set attributes on text, comment and attribute nodes + if ( !elem || nType === 3 || nType === 8 || nType === 2 ) { + return; + } + + // Fallback to prop when attributes are not supported + if ( typeof elem.getAttribute === core_strundefined ) { + return jQuery.prop( elem, name, value ); + } + + notxml = nType !== 1 || !jQuery.isXMLDoc( elem ); + + // All attributes are lowercase + // Grab necessary hook if one is defined + if ( notxml ) { + name = name.toLowerCase(); + hooks = jQuery.attrHooks[ name ] || ( rboolean.test( name ) ? boolHook : nodeHook ); + } + + if ( value !== undefined ) { + + if ( value === null ) { + jQuery.removeAttr( elem, name ); + + } else if ( hooks && notxml && "set" in hooks && (ret = hooks.set( elem, value, name )) !== undefined ) { + return ret; + + } else { + elem.setAttribute( name, value + "" ); + return value; + } + + } else if ( hooks && notxml && "get" in hooks && (ret = hooks.get( elem, name )) !== null ) { + return ret; + + } else { + + // In IE9+, Flash objects don't have .getAttribute (#12945) + // Support: IE9+ + if ( typeof elem.getAttribute !== core_strundefined ) { + ret = elem.getAttribute( name ); + } + + // Non-existent attributes return null, we normalize to undefined + return ret == null ? + undefined : + ret; + } + }, + + removeAttr: function( elem, value ) { + var name, propName, + i = 0, + attrNames = value && value.match( core_rnotwhite ); + + if ( attrNames && elem.nodeType === 1 ) { + while ( (name = attrNames[i++]) ) { + propName = jQuery.propFix[ name ] || name; + + // Boolean attributes get special treatment (#10870) + if ( rboolean.test( name ) ) { + // Set corresponding property to false for boolean attributes + // Also clear defaultChecked/defaultSelected (if appropriate) for IE<8 + if ( !getSetAttribute && ruseDefault.test( name ) ) { + elem[ jQuery.camelCase( "default-" + name ) ] = + elem[ propName ] = false; + } else { + elem[ propName ] = false; + } + + // See #9699 for explanation of this approach (setting first, then removal) + } else { + jQuery.attr( elem, name, "" ); + } + + elem.removeAttribute( getSetAttribute ? name : propName ); + } + } + }, + + attrHooks: { + type: { + set: function( elem, value ) { + if ( !jQuery.support.radioValue && value === "radio" && jQuery.nodeName(elem, "input") ) { + // Setting the type on a radio button after the value resets the value in IE6-9 + // Reset value to default in case type is set after value during creation + var val = elem.value; + elem.setAttribute( "type", value ); + if ( val ) { + elem.value = val; + } + return value; + } + } + } + }, + + propFix: { + tabindex: "tabIndex", + readonly: "readOnly", + "for": "htmlFor", + "class": "className", + maxlength: "maxLength", + cellspacing: "cellSpacing", + cellpadding: "cellPadding", + rowspan: "rowSpan", + colspan: "colSpan", + usemap: "useMap", + frameborder: "frameBorder", + contenteditable: "contentEditable" + }, + + prop: function( elem, name, value ) { + var ret, hooks, notxml, + nType = elem.nodeType; + + // don't get/set properties on text, comment and attribute nodes + if ( !elem || nType === 3 || nType === 8 || nType === 2 ) { + return; + } + + notxml = nType !== 1 || !jQuery.isXMLDoc( elem ); + + if ( notxml ) { + // Fix name and attach hooks + name = jQuery.propFix[ name ] || name; + hooks = jQuery.propHooks[ name ]; + } + + if ( value !== undefined ) { + if ( hooks && "set" in hooks && (ret = hooks.set( elem, value, name )) !== undefined ) { + return ret; + + } else { + return ( elem[ name ] = value ); + } + + } else { + if ( hooks && "get" in hooks && (ret = hooks.get( elem, name )) !== null ) { + return ret; + + } else { + return elem[ name ]; + } + } + }, + + propHooks: { + tabIndex: { + get: function( elem ) { + // elem.tabIndex doesn't always return the correct value when it hasn't been explicitly set + // http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/ + var attributeNode = elem.getAttributeNode("tabindex"); + + return attributeNode && attributeNode.specified ? + parseInt( attributeNode.value, 10 ) : + rfocusable.test( elem.nodeName ) || rclickable.test( elem.nodeName ) && elem.href ? + 0 : + undefined; + } + } + } +}); + +// Hook for boolean attributes +boolHook = { + get: function( elem, name ) { + var + // Use .prop to determine if this attribute is understood as boolean + prop = jQuery.prop( elem, name ), + + // Fetch it accordingly + attr = typeof prop === "boolean" && elem.getAttribute( name ), + detail = typeof prop === "boolean" ? + + getSetInput && getSetAttribute ? + attr != null : + // oldIE fabricates an empty string for missing boolean attributes + // and conflates checked/selected into attroperties + ruseDefault.test( name ) ? + elem[ jQuery.camelCase( "default-" + name ) ] : + !!attr : + + // fetch an attribute node for properties not recognized as boolean + elem.getAttributeNode( name ); + + return detail && detail.value !== false ? + name.toLowerCase() : + undefined; + }, + set: function( elem, value, name ) { + if ( value === false ) { + // Remove boolean attributes when set to false + jQuery.removeAttr( elem, name ); + } else if ( getSetInput && getSetAttribute || !ruseDefault.test( name ) ) { + // IE<8 needs the *property* name + elem.setAttribute( !getSetAttribute && jQuery.propFix[ name ] || name, name ); + + // Use defaultChecked and defaultSelected for oldIE + } else { + elem[ jQuery.camelCase( "default-" + name ) ] = elem[ name ] = true; + } + + return name; + } +}; + +// fix oldIE value attroperty +if ( !getSetInput || !getSetAttribute ) { + jQuery.attrHooks.value = { + get: function( elem, name ) { + var ret = elem.getAttributeNode( name ); + return jQuery.nodeName( elem, "input" ) ? + + // Ignore the value *property* by using defaultValue + elem.defaultValue : + + ret && ret.specified ? ret.value : undefined; + }, + set: function( elem, value, name ) { + if ( jQuery.nodeName( elem, "input" ) ) { + // Does not return so that setAttribute is also used + elem.defaultValue = value; + } else { + // Use nodeHook if defined (#1954); otherwise setAttribute is fine + return nodeHook && nodeHook.set( elem, value, name ); + } + } + }; +} + +// IE6/7 do not support getting/setting some attributes with get/setAttribute +if ( !getSetAttribute ) { + + // Use this for any attribute in IE6/7 + // This fixes almost every IE6/7 issue + nodeHook = jQuery.valHooks.button = { + get: function( elem, name ) { + var ret = elem.getAttributeNode( name ); + return ret && ( name === "id" || name === "name" || name === "coords" ? ret.value !== "" : ret.specified ) ? + ret.value : + undefined; + }, + set: function( elem, value, name ) { + // Set the existing or create a new attribute node + var ret = elem.getAttributeNode( name ); + if ( !ret ) { + elem.setAttributeNode( + (ret = elem.ownerDocument.createAttribute( name )) + ); + } + + ret.value = value += ""; + + // Break association with cloned elements by also using setAttribute (#9646) + return name === "value" || value === elem.getAttribute( name ) ? + value : + undefined; + } + }; + + // Set contenteditable to false on removals(#10429) + // Setting to empty string throws an error as an invalid value + jQuery.attrHooks.contenteditable = { + get: nodeHook.get, + set: function( elem, value, name ) { + nodeHook.set( elem, value === "" ? false : value, name ); + } + }; + + // Set width and height to auto instead of 0 on empty string( Bug #8150 ) + // This is for removals + jQuery.each([ "width", "height" ], function( i, name ) { + jQuery.attrHooks[ name ] = jQuery.extend( jQuery.attrHooks[ name ], { + set: function( elem, value ) { + if ( value === "" ) { + elem.setAttribute( name, "auto" ); + return value; + } + } + }); + }); +} + + +// Some attributes require a special call on IE +// http://msdn.microsoft.com/en-us/library/ms536429%28VS.85%29.aspx +if ( !jQuery.support.hrefNormalized ) { + jQuery.each([ "href", "src", "width", "height" ], function( i, name ) { + jQuery.attrHooks[ name ] = jQuery.extend( jQuery.attrHooks[ name ], { + get: function( elem ) { + var ret = elem.getAttribute( name, 2 ); + return ret == null ? undefined : ret; + } + }); + }); + + // href/src property should get the full normalized URL (#10299/#12915) + jQuery.each([ "href", "src" ], function( i, name ) { + jQuery.propHooks[ name ] = { + get: function( elem ) { + return elem.getAttribute( name, 4 ); + } + }; + }); +} + +if ( !jQuery.support.style ) { + jQuery.attrHooks.style = { + get: function( elem ) { + // Return undefined in the case of empty string + // Note: IE uppercases css property names, but if we were to .toLowerCase() + // .cssText, that would destroy case senstitivity in URL's, like in "background" + return elem.style.cssText || undefined; + }, + set: function( elem, value ) { + return ( elem.style.cssText = value + "" ); + } + }; +} + +// Safari mis-reports the default selected property of an option +// Accessing the parent's selectedIndex property fixes it +if ( !jQuery.support.optSelected ) { + jQuery.propHooks.selected = jQuery.extend( jQuery.propHooks.selected, { + get: function( elem ) { + var parent = elem.parentNode; + + if ( parent ) { + parent.selectedIndex; + + // Make sure that it also works with optgroups, see #5701 + if ( parent.parentNode ) { + parent.parentNode.selectedIndex; + } + } + return null; + } + }); +} + +// IE6/7 call enctype encoding +if ( !jQuery.support.enctype ) { + jQuery.propFix.enctype = "encoding"; +} + +// Radios and checkboxes getter/setter +if ( !jQuery.support.checkOn ) { + jQuery.each([ "radio", "checkbox" ], function() { + jQuery.valHooks[ this ] = { + get: function( elem ) { + // Handle the case where in Webkit "" is returned instead of "on" if a value isn't specified + return elem.getAttribute("value") === null ? "on" : elem.value; + } + }; + }); +} +jQuery.each([ "radio", "checkbox" ], function() { + jQuery.valHooks[ this ] = jQuery.extend( jQuery.valHooks[ this ], { + set: function( elem, value ) { + if ( jQuery.isArray( value ) ) { + return ( elem.checked = jQuery.inArray( jQuery(elem).val(), value ) >= 0 ); + } + } + }); +}); +var rformElems = /^(?:input|select|textarea)$/i, + rkeyEvent = /^key/, + rmouseEvent = /^(?:mouse|contextmenu)|click/, + rfocusMorph = /^(?:focusinfocus|focusoutblur)$/, + rtypenamespace = /^([^.]*)(?:\.(.+)|)$/; + +function returnTrue() { + return true; +} + +function returnFalse() { + return false; +} + +/* + * Helper functions for managing events -- not part of the public interface. + * Props to Dean Edwards' addEvent library for many of the ideas. + */ +jQuery.event = { + + global: {}, + + add: function( elem, types, handler, data, selector ) { + var tmp, events, t, handleObjIn, + special, eventHandle, handleObj, + handlers, type, namespaces, origType, + elemData = jQuery._data( elem ); + + // Don't attach events to noData or text/comment nodes (but allow plain objects) + if ( !elemData ) { + return; + } + + // Caller can pass in an object of custom data in lieu of the handler + if ( handler.handler ) { + handleObjIn = handler; + handler = handleObjIn.handler; + selector = handleObjIn.selector; + } + + // Make sure that the handler has a unique ID, used to find/remove it later + if ( !handler.guid ) { + handler.guid = jQuery.guid++; + } + + // Init the element's event structure and main handler, if this is the first + if ( !(events = elemData.events) ) { + events = elemData.events = {}; + } + if ( !(eventHandle = elemData.handle) ) { + eventHandle = elemData.handle = function( e ) { + // Discard the second event of a jQuery.event.trigger() and + // when an event is called after a page has unloaded + return typeof jQuery !== core_strundefined && (!e || jQuery.event.triggered !== e.type) ? + jQuery.event.dispatch.apply( eventHandle.elem, arguments ) : + undefined; + }; + // Add elem as a property of the handle fn to prevent a memory leak with IE non-native events + eventHandle.elem = elem; + } + + // Handle multiple events separated by a space + // jQuery(...).bind("mouseover mouseout", fn); + types = ( types || "" ).match( core_rnotwhite ) || [""]; + t = types.length; + while ( t-- ) { + tmp = rtypenamespace.exec( types[t] ) || []; + type = origType = tmp[1]; + namespaces = ( tmp[2] || "" ).split( "." ).sort(); + + // If event changes its type, use the special event handlers for the changed type + special = jQuery.event.special[ type ] || {}; + + // If selector defined, determine special event api type, otherwise given type + type = ( selector ? special.delegateType : special.bindType ) || type; + + // Update special based on newly reset type + special = jQuery.event.special[ type ] || {}; + + // handleObj is passed to all event handlers + handleObj = jQuery.extend({ + type: type, + origType: origType, + data: data, + handler: handler, + guid: handler.guid, + selector: selector, + needsContext: selector && jQuery.expr.match.needsContext.test( selector ), + namespace: namespaces.join(".") + }, handleObjIn ); + + // Init the event handler queue if we're the first + if ( !(handlers = events[ type ]) ) { + handlers = events[ type ] = []; + handlers.delegateCount = 0; + + // Only use addEventListener/attachEvent if the special events handler returns false + if ( !special.setup || special.setup.call( elem, data, namespaces, eventHandle ) === false ) { + // Bind the global event handler to the element + if ( elem.addEventListener ) { + elem.addEventListener( type, eventHandle, false ); + + } else if ( elem.attachEvent ) { + elem.attachEvent( "on" + type, eventHandle ); + } + } + } + + if ( special.add ) { + special.add.call( elem, handleObj ); + + if ( !handleObj.handler.guid ) { + handleObj.handler.guid = handler.guid; + } + } + + // Add to the element's handler list, delegates in front + if ( selector ) { + handlers.splice( handlers.delegateCount++, 0, handleObj ); + } else { + handlers.push( handleObj ); + } + + // Keep track of which events have ever been used, for event optimization + jQuery.event.global[ type ] = true; + } + + // Nullify elem to prevent memory leaks in IE + elem = null; + }, + + // Detach an event or set of events from an element + remove: function( elem, types, handler, selector, mappedTypes ) { + var j, handleObj, tmp, + origCount, t, events, + special, handlers, type, + namespaces, origType, + elemData = jQuery.hasData( elem ) && jQuery._data( elem ); + + if ( !elemData || !(events = elemData.events) ) { + return; + } + + // Once for each type.namespace in types; type may be omitted + types = ( types || "" ).match( core_rnotwhite ) || [""]; + t = types.length; + while ( t-- ) { + tmp = rtypenamespace.exec( types[t] ) || []; + type = origType = tmp[1]; + namespaces = ( tmp[2] || "" ).split( "." ).sort(); + + // Unbind all events (on this namespace, if provided) for the element + if ( !type ) { + for ( type in events ) { + jQuery.event.remove( elem, type + types[ t ], handler, selector, true ); + } + continue; + } + + special = jQuery.event.special[ type ] || {}; + type = ( selector ? special.delegateType : special.bindType ) || type; + handlers = events[ type ] || []; + tmp = tmp[2] && new RegExp( "(^|\\.)" + namespaces.join("\\.(?:.*\\.|)") + "(\\.|$)" ); + + // Remove matching events + origCount = j = handlers.length; + while ( j-- ) { + handleObj = handlers[ j ]; + + if ( ( mappedTypes || origType === handleObj.origType ) && + ( !handler || handler.guid === handleObj.guid ) && + ( !tmp || tmp.test( handleObj.namespace ) ) && + ( !selector || selector === handleObj.selector || selector === "**" && handleObj.selector ) ) { + handlers.splice( j, 1 ); + + if ( handleObj.selector ) { + handlers.delegateCount--; + } + if ( special.remove ) { + special.remove.call( elem, handleObj ); + } + } + } + + // Remove generic event handler if we removed something and no more handlers exist + // (avoids potential for endless recursion during removal of special event handlers) + if ( origCount && !handlers.length ) { + if ( !special.teardown || special.teardown.call( elem, namespaces, elemData.handle ) === false ) { + jQuery.removeEvent( elem, type, elemData.handle ); + } + + delete events[ type ]; + } + } + + // Remove the expando if it's no longer used + if ( jQuery.isEmptyObject( events ) ) { + delete elemData.handle; + + // removeData also checks for emptiness and clears the expando if empty + // so use it instead of delete + jQuery._removeData( elem, "events" ); + } + }, + + trigger: function( event, data, elem, onlyHandlers ) { + var handle, ontype, cur, + bubbleType, special, tmp, i, + eventPath = [ elem || document ], + type = core_hasOwn.call( event, "type" ) ? event.type : event, + namespaces = core_hasOwn.call( event, "namespace" ) ? event.namespace.split(".") : []; + + cur = tmp = elem = elem || document; + + // Don't do events on text and comment nodes + if ( elem.nodeType === 3 || elem.nodeType === 8 ) { + return; + } + + // focus/blur morphs to focusin/out; ensure we're not firing them right now + if ( rfocusMorph.test( type + jQuery.event.triggered ) ) { + return; + } + + if ( type.indexOf(".") >= 0 ) { + // Namespaced trigger; create a regexp to match event type in handle() + namespaces = type.split("."); + type = namespaces.shift(); + namespaces.sort(); + } + ontype = type.indexOf(":") < 0 && "on" + type; + + // Caller can pass in a jQuery.Event object, Object, or just an event type string + event = event[ jQuery.expando ] ? + event : + new jQuery.Event( type, typeof event === "object" && event ); + + event.isTrigger = true; + event.namespace = namespaces.join("."); + event.namespace_re = event.namespace ? + new RegExp( "(^|\\.)" + namespaces.join("\\.(?:.*\\.|)") + "(\\.|$)" ) : + null; + + // Clean up the event in case it is being reused + event.result = undefined; + if ( !event.target ) { + event.target = elem; + } + + // Clone any incoming data and prepend the event, creating the handler arg list + data = data == null ? + [ event ] : + jQuery.makeArray( data, [ event ] ); + + // Allow special events to draw outside the lines + special = jQuery.event.special[ type ] || {}; + if ( !onlyHandlers && special.trigger && special.trigger.apply( elem, data ) === false ) { + return; + } + + // Determine event propagation path in advance, per W3C events spec (#9951) + // Bubble up to document, then to window; watch for a global ownerDocument var (#9724) + if ( !onlyHandlers && !special.noBubble && !jQuery.isWindow( elem ) ) { + + bubbleType = special.delegateType || type; + if ( !rfocusMorph.test( bubbleType + type ) ) { + cur = cur.parentNode; + } + for ( ; cur; cur = cur.parentNode ) { + eventPath.push( cur ); + tmp = cur; + } + + // Only add window if we got to document (e.g., not plain obj or detached DOM) + if ( tmp === (elem.ownerDocument || document) ) { + eventPath.push( tmp.defaultView || tmp.parentWindow || window ); + } + } + + // Fire handlers on the event path + i = 0; + while ( (cur = eventPath[i++]) && !event.isPropagationStopped() ) { + + event.type = i > 1 ? + bubbleType : + special.bindType || type; + + // jQuery handler + handle = ( jQuery._data( cur, "events" ) || {} )[ event.type ] && jQuery._data( cur, "handle" ); + if ( handle ) { + handle.apply( cur, data ); + } + + // Native handler + handle = ontype && cur[ ontype ]; + if ( handle && jQuery.acceptData( cur ) && handle.apply && handle.apply( cur, data ) === false ) { + event.preventDefault(); + } + } + event.type = type; + + // If nobody prevented the default action, do it now + if ( !onlyHandlers && !event.isDefaultPrevented() ) { + + if ( (!special._default || special._default.apply( elem.ownerDocument, data ) === false) && + !(type === "click" && jQuery.nodeName( elem, "a" )) && jQuery.acceptData( elem ) ) { + + // Call a native DOM method on the target with the same name name as the event. + // Can't use an .isFunction() check here because IE6/7 fails that test. + // Don't do default actions on window, that's where global variables be (#6170) + if ( ontype && elem[ type ] && !jQuery.isWindow( elem ) ) { + + // Don't re-trigger an onFOO event when we call its FOO() method + tmp = elem[ ontype ]; + + if ( tmp ) { + elem[ ontype ] = null; + } + + // Prevent re-triggering of the same event, since we already bubbled it above + jQuery.event.triggered = type; + try { + elem[ type ](); + } catch ( e ) { + // IE<9 dies on focus/blur to hidden element (#1486,#12518) + // only reproducible on winXP IE8 native, not IE9 in IE8 mode + } + jQuery.event.triggered = undefined; + + if ( tmp ) { + elem[ ontype ] = tmp; + } + } + } + } + + return event.result; + }, + + dispatch: function( event ) { + + // Make a writable jQuery.Event from the native event object + event = jQuery.event.fix( event ); + + var i, ret, handleObj, matched, j, + handlerQueue = [], + args = core_slice.call( arguments ), + handlers = ( jQuery._data( this, "events" ) || {} )[ event.type ] || [], + special = jQuery.event.special[ event.type ] || {}; + + // Use the fix-ed jQuery.Event rather than the (read-only) native event + args[0] = event; + event.delegateTarget = this; + + // Call the preDispatch hook for the mapped type, and let it bail if desired + if ( special.preDispatch && special.preDispatch.call( this, event ) === false ) { + return; + } + + // Determine handlers + handlerQueue = jQuery.event.handlers.call( this, event, handlers ); + + // Run delegates first; they may want to stop propagation beneath us + i = 0; + while ( (matched = handlerQueue[ i++ ]) && !event.isPropagationStopped() ) { + event.currentTarget = matched.elem; + + j = 0; + while ( (handleObj = matched.handlers[ j++ ]) && !event.isImmediatePropagationStopped() ) { + + // Triggered event must either 1) have no namespace, or + // 2) have namespace(s) a subset or equal to those in the bound event (both can have no namespace). + if ( !event.namespace_re || event.namespace_re.test( handleObj.namespace ) ) { + + event.handleObj = handleObj; + event.data = handleObj.data; + + ret = ( (jQuery.event.special[ handleObj.origType ] || {}).handle || handleObj.handler ) + .apply( matched.elem, args ); + + if ( ret !== undefined ) { + if ( (event.result = ret) === false ) { + event.preventDefault(); + event.stopPropagation(); + } + } + } + } + } + + // Call the postDispatch hook for the mapped type + if ( special.postDispatch ) { + special.postDispatch.call( this, event ); + } + + return event.result; + }, + + handlers: function( event, handlers ) { + var sel, handleObj, matches, i, + handlerQueue = [], + delegateCount = handlers.delegateCount, + cur = event.target; + + // Find delegate handlers + // Black-hole SVG instance trees (#13180) + // Avoid non-left-click bubbling in Firefox (#3861) + if ( delegateCount && cur.nodeType && (!event.button || event.type !== "click") ) { + + for ( ; cur != this; cur = cur.parentNode || this ) { + + // Don't check non-elements (#13208) + // Don't process clicks on disabled elements (#6911, #8165, #11382, #11764) + if ( cur.nodeType === 1 && (cur.disabled !== true || event.type !== "click") ) { + matches = []; + for ( i = 0; i < delegateCount; i++ ) { + handleObj = handlers[ i ]; + + // Don't conflict with Object.prototype properties (#13203) + sel = handleObj.selector + " "; + + if ( matches[ sel ] === undefined ) { + matches[ sel ] = handleObj.needsContext ? + jQuery( sel, this ).index( cur ) >= 0 : + jQuery.find( sel, this, null, [ cur ] ).length; + } + if ( matches[ sel ] ) { + matches.push( handleObj ); + } + } + if ( matches.length ) { + handlerQueue.push({ elem: cur, handlers: matches }); + } + } + } + } + + // Add the remaining (directly-bound) handlers + if ( delegateCount < handlers.length ) { + handlerQueue.push({ elem: this, handlers: handlers.slice( delegateCount ) }); + } + + return handlerQueue; + }, + + fix: function( event ) { + if ( event[ jQuery.expando ] ) { + return event; + } + + // Create a writable copy of the event object and normalize some properties + var i, prop, copy, + type = event.type, + originalEvent = event, + fixHook = this.fixHooks[ type ]; + + if ( !fixHook ) { + this.fixHooks[ type ] = fixHook = + rmouseEvent.test( type ) ? this.mouseHooks : + rkeyEvent.test( type ) ? this.keyHooks : + {}; + } + copy = fixHook.props ? this.props.concat( fixHook.props ) : this.props; + + event = new jQuery.Event( originalEvent ); + + i = copy.length; + while ( i-- ) { + prop = copy[ i ]; + event[ prop ] = originalEvent[ prop ]; + } + + // Support: IE<9 + // Fix target property (#1925) + if ( !event.target ) { + event.target = originalEvent.srcElement || document; + } + + // Support: Chrome 23+, Safari? + // Target should not be a text node (#504, #13143) + if ( event.target.nodeType === 3 ) { + event.target = event.target.parentNode; + } + + // Support: IE<9 + // For mouse/key events, metaKey==false if it's undefined (#3368, #11328) + event.metaKey = !!event.metaKey; + + return fixHook.filter ? fixHook.filter( event, originalEvent ) : event; + }, + + // Includes some event props shared by KeyEvent and MouseEvent + props: "altKey bubbles cancelable ctrlKey currentTarget eventPhase metaKey relatedTarget shiftKey target timeStamp view which".split(" "), + + fixHooks: {}, + + keyHooks: { + props: "char charCode key keyCode".split(" "), + filter: function( event, original ) { + + // Add which for key events + if ( event.which == null ) { + event.which = original.charCode != null ? original.charCode : original.keyCode; + } + + return event; + } + }, + + mouseHooks: { + props: "button buttons clientX clientY fromElement offsetX offsetY pageX pageY screenX screenY toElement".split(" "), + filter: function( event, original ) { + var body, eventDoc, doc, + button = original.button, + fromElement = original.fromElement; + + // Calculate pageX/Y if missing and clientX/Y available + if ( event.pageX == null && original.clientX != null ) { + eventDoc = event.target.ownerDocument || document; + doc = eventDoc.documentElement; + body = eventDoc.body; + + event.pageX = original.clientX + ( doc && doc.scrollLeft || body && body.scrollLeft || 0 ) - ( doc && doc.clientLeft || body && body.clientLeft || 0 ); + event.pageY = original.clientY + ( doc && doc.scrollTop || body && body.scrollTop || 0 ) - ( doc && doc.clientTop || body && body.clientTop || 0 ); + } + + // Add relatedTarget, if necessary + if ( !event.relatedTarget && fromElement ) { + event.relatedTarget = fromElement === event.target ? original.toElement : fromElement; + } + + // Add which for click: 1 === left; 2 === middle; 3 === right + // Note: button is not normalized, so don't use it + if ( !event.which && button !== undefined ) { + event.which = ( button & 1 ? 1 : ( button & 2 ? 3 : ( button & 4 ? 2 : 0 ) ) ); + } + + return event; + } + }, + + special: { + load: { + // Prevent triggered image.load events from bubbling to window.load + noBubble: true + }, + click: { + // For checkbox, fire native event so checked state will be right + trigger: function() { + if ( jQuery.nodeName( this, "input" ) && this.type === "checkbox" && this.click ) { + this.click(); + return false; + } + } + }, + focus: { + // Fire native event if possible so blur/focus sequence is correct + trigger: function() { + if ( this !== document.activeElement && this.focus ) { + try { + this.focus(); + return false; + } catch ( e ) { + // Support: IE<9 + // If we error on focus to hidden element (#1486, #12518), + // let .trigger() run the handlers + } + } + }, + delegateType: "focusin" + }, + blur: { + trigger: function() { + if ( this === document.activeElement && this.blur ) { + this.blur(); + return false; + } + }, + delegateType: "focusout" + }, + + beforeunload: { + postDispatch: function( event ) { + + // Even when returnValue equals to undefined Firefox will still show alert + if ( event.result !== undefined ) { + event.originalEvent.returnValue = event.result; + } + } + } + }, + + simulate: function( type, elem, event, bubble ) { + // Piggyback on a donor event to simulate a different one. + // Fake originalEvent to avoid donor's stopPropagation, but if the + // simulated event prevents default then we do the same on the donor. + var e = jQuery.extend( + new jQuery.Event(), + event, + { type: type, + isSimulated: true, + originalEvent: {} + } + ); + if ( bubble ) { + jQuery.event.trigger( e, null, elem ); + } else { + jQuery.event.dispatch.call( elem, e ); + } + if ( e.isDefaultPrevented() ) { + event.preventDefault(); + } + } +}; + +jQuery.removeEvent = document.removeEventListener ? + function( elem, type, handle ) { + if ( elem.removeEventListener ) { + elem.removeEventListener( type, handle, false ); + } + } : + function( elem, type, handle ) { + var name = "on" + type; + + if ( elem.detachEvent ) { + + // #8545, #7054, preventing memory leaks for custom events in IE6-8 + // detachEvent needed property on element, by name of that event, to properly expose it to GC + if ( typeof elem[ name ] === core_strundefined ) { + elem[ name ] = null; + } + + elem.detachEvent( name, handle ); + } + }; + +jQuery.Event = function( src, props ) { + // Allow instantiation without the 'new' keyword + if ( !(this instanceof jQuery.Event) ) { + return new jQuery.Event( src, props ); + } + + // Event object + if ( src && src.type ) { + this.originalEvent = src; + this.type = src.type; + + // Events bubbling up the document may have been marked as prevented + // by a handler lower down the tree; reflect the correct value. + this.isDefaultPrevented = ( src.defaultPrevented || src.returnValue === false || + src.getPreventDefault && src.getPreventDefault() ) ? returnTrue : returnFalse; + + // Event type + } else { + this.type = src; + } + + // Put explicitly provided properties onto the event object + if ( props ) { + jQuery.extend( this, props ); + } + + // Create a timestamp if incoming event doesn't have one + this.timeStamp = src && src.timeStamp || jQuery.now(); + + // Mark it as fixed + this[ jQuery.expando ] = true; +}; + +// jQuery.Event is based on DOM3 Events as specified by the ECMAScript Language Binding +// http://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html +jQuery.Event.prototype = { + isDefaultPrevented: returnFalse, + isPropagationStopped: returnFalse, + isImmediatePropagationStopped: returnFalse, + + preventDefault: function() { + var e = this.originalEvent; + + this.isDefaultPrevented = returnTrue; + if ( !e ) { + return; + } + + // If preventDefault exists, run it on the original event + if ( e.preventDefault ) { + e.preventDefault(); + + // Support: IE + // Otherwise set the returnValue property of the original event to false + } else { + e.returnValue = false; + } + }, + stopPropagation: function() { + var e = this.originalEvent; + + this.isPropagationStopped = returnTrue; + if ( !e ) { + return; + } + // If stopPropagation exists, run it on the original event + if ( e.stopPropagation ) { + e.stopPropagation(); + } + + // Support: IE + // Set the cancelBubble property of the original event to true + e.cancelBubble = true; + }, + stopImmediatePropagation: function() { + this.isImmediatePropagationStopped = returnTrue; + this.stopPropagation(); + } +}; + +// Create mouseenter/leave events using mouseover/out and event-time checks +jQuery.each({ + mouseenter: "mouseover", + mouseleave: "mouseout" +}, function( orig, fix ) { + jQuery.event.special[ orig ] = { + delegateType: fix, + bindType: fix, + + handle: function( event ) { + var ret, + target = this, + related = event.relatedTarget, + handleObj = event.handleObj; + + // For mousenter/leave call the handler if related is outside the target. + // NB: No relatedTarget if the mouse left/entered the browser window + if ( !related || (related !== target && !jQuery.contains( target, related )) ) { + event.type = handleObj.origType; + ret = handleObj.handler.apply( this, arguments ); + event.type = fix; + } + return ret; + } + }; +}); + +// IE submit delegation +if ( !jQuery.support.submitBubbles ) { + + jQuery.event.special.submit = { + setup: function() { + // Only need this for delegated form submit events + if ( jQuery.nodeName( this, "form" ) ) { + return false; + } + + // Lazy-add a submit handler when a descendant form may potentially be submitted + jQuery.event.add( this, "click._submit keypress._submit", function( e ) { + // Node name check avoids a VML-related crash in IE (#9807) + var elem = e.target, + form = jQuery.nodeName( elem, "input" ) || jQuery.nodeName( elem, "button" ) ? elem.form : undefined; + if ( form && !jQuery._data( form, "submitBubbles" ) ) { + jQuery.event.add( form, "submit._submit", function( event ) { + event._submit_bubble = true; + }); + jQuery._data( form, "submitBubbles", true ); + } + }); + // return undefined since we don't need an event listener + }, + + postDispatch: function( event ) { + // If form was submitted by the user, bubble the event up the tree + if ( event._submit_bubble ) { + delete event._submit_bubble; + if ( this.parentNode && !event.isTrigger ) { + jQuery.event.simulate( "submit", this.parentNode, event, true ); + } + } + }, + + teardown: function() { + // Only need this for delegated form submit events + if ( jQuery.nodeName( this, "form" ) ) { + return false; + } + + // Remove delegated handlers; cleanData eventually reaps submit handlers attached above + jQuery.event.remove( this, "._submit" ); + } + }; +} + +// IE change delegation and checkbox/radio fix +if ( !jQuery.support.changeBubbles ) { + + jQuery.event.special.change = { + + setup: function() { + + if ( rformElems.test( this.nodeName ) ) { + // IE doesn't fire change on a check/radio until blur; trigger it on click + // after a propertychange. Eat the blur-change in special.change.handle. + // This still fires onchange a second time for check/radio after blur. + if ( this.type === "checkbox" || this.type === "radio" ) { + jQuery.event.add( this, "propertychange._change", function( event ) { + if ( event.originalEvent.propertyName === "checked" ) { + this._just_changed = true; + } + }); + jQuery.event.add( this, "click._change", function( event ) { + if ( this._just_changed && !event.isTrigger ) { + this._just_changed = false; + } + // Allow triggered, simulated change events (#11500) + jQuery.event.simulate( "change", this, event, true ); + }); + } + return false; + } + // Delegated event; lazy-add a change handler on descendant inputs + jQuery.event.add( this, "beforeactivate._change", function( e ) { + var elem = e.target; + + if ( rformElems.test( elem.nodeName ) && !jQuery._data( elem, "changeBubbles" ) ) { + jQuery.event.add( elem, "change._change", function( event ) { + if ( this.parentNode && !event.isSimulated && !event.isTrigger ) { + jQuery.event.simulate( "change", this.parentNode, event, true ); + } + }); + jQuery._data( elem, "changeBubbles", true ); + } + }); + }, + + handle: function( event ) { + var elem = event.target; + + // Swallow native change events from checkbox/radio, we already triggered them above + if ( this !== elem || event.isSimulated || event.isTrigger || (elem.type !== "radio" && elem.type !== "checkbox") ) { + return event.handleObj.handler.apply( this, arguments ); + } + }, + + teardown: function() { + jQuery.event.remove( this, "._change" ); + + return !rformElems.test( this.nodeName ); + } + }; +} + +// Create "bubbling" focus and blur events +if ( !jQuery.support.focusinBubbles ) { + jQuery.each({ focus: "focusin", blur: "focusout" }, function( orig, fix ) { + + // Attach a single capturing handler while someone wants focusin/focusout + var attaches = 0, + handler = function( event ) { + jQuery.event.simulate( fix, event.target, jQuery.event.fix( event ), true ); + }; + + jQuery.event.special[ fix ] = { + setup: function() { + if ( attaches++ === 0 ) { + document.addEventListener( orig, handler, true ); + } + }, + teardown: function() { + if ( --attaches === 0 ) { + document.removeEventListener( orig, handler, true ); + } + } + }; + }); +} + +jQuery.fn.extend({ + + on: function( types, selector, data, fn, /*INTERNAL*/ one ) { + var type, origFn; + + // Types can be a map of types/handlers + if ( typeof types === "object" ) { + // ( types-Object, selector, data ) + if ( typeof selector !== "string" ) { + // ( types-Object, data ) + data = data || selector; + selector = undefined; + } + for ( type in types ) { + this.on( type, selector, data, types[ type ], one ); + } + return this; + } + + if ( data == null && fn == null ) { + // ( types, fn ) + fn = selector; + data = selector = undefined; + } else if ( fn == null ) { + if ( typeof selector === "string" ) { + // ( types, selector, fn ) + fn = data; + data = undefined; + } else { + // ( types, data, fn ) + fn = data; + data = selector; + selector = undefined; + } + } + if ( fn === false ) { + fn = returnFalse; + } else if ( !fn ) { + return this; + } + + if ( one === 1 ) { + origFn = fn; + fn = function( event ) { + // Can use an empty set, since event contains the info + jQuery().off( event ); + return origFn.apply( this, arguments ); + }; + // Use same guid so caller can remove using origFn + fn.guid = origFn.guid || ( origFn.guid = jQuery.guid++ ); + } + return this.each( function() { + jQuery.event.add( this, types, fn, data, selector ); + }); + }, + one: function( types, selector, data, fn ) { + return this.on( types, selector, data, fn, 1 ); + }, + off: function( types, selector, fn ) { + var handleObj, type; + if ( types && types.preventDefault && types.handleObj ) { + // ( event ) dispatched jQuery.Event + handleObj = types.handleObj; + jQuery( types.delegateTarget ).off( + handleObj.namespace ? handleObj.origType + "." + handleObj.namespace : handleObj.origType, + handleObj.selector, + handleObj.handler + ); + return this; + } + if ( typeof types === "object" ) { + // ( types-object [, selector] ) + for ( type in types ) { + this.off( type, selector, types[ type ] ); + } + return this; + } + if ( selector === false || typeof selector === "function" ) { + // ( types [, fn] ) + fn = selector; + selector = undefined; + } + if ( fn === false ) { + fn = returnFalse; + } + return this.each(function() { + jQuery.event.remove( this, types, fn, selector ); + }); + }, + + bind: function( types, data, fn ) { + return this.on( types, null, data, fn ); + }, + unbind: function( types, fn ) { + return this.off( types, null, fn ); + }, + + delegate: function( selector, types, data, fn ) { + return this.on( types, selector, data, fn ); + }, + undelegate: function( selector, types, fn ) { + // ( namespace ) or ( selector, types [, fn] ) + return arguments.length === 1 ? this.off( selector, "**" ) : this.off( types, selector || "**", fn ); + }, + + trigger: function( type, data ) { + return this.each(function() { + jQuery.event.trigger( type, data, this ); + }); + }, + triggerHandler: function( type, data ) { + var elem = this[0]; + if ( elem ) { + return jQuery.event.trigger( type, data, elem, true ); + } + } +}); +/*! + * Sizzle CSS Selector Engine + * Copyright 2012 jQuery Foundation and other contributors + * Released under the MIT license + * http://sizzlejs.com/ + */ +(function( window, undefined ) { + +var i, + cachedruns, + Expr, + getText, + isXML, + compile, + hasDuplicate, + outermostContext, + + // Local document vars + setDocument, + document, + docElem, + documentIsXML, + rbuggyQSA, + rbuggyMatches, + matches, + contains, + sortOrder, + + // Instance-specific data + expando = "sizzle" + -(new Date()), + preferredDoc = window.document, + support = {}, + dirruns = 0, + done = 0, + classCache = createCache(), + tokenCache = createCache(), + compilerCache = createCache(), + + // General-purpose constants + strundefined = typeof undefined, + MAX_NEGATIVE = 1 << 31, + + // Array methods + arr = [], + pop = arr.pop, + push = arr.push, + slice = arr.slice, + // Use a stripped-down indexOf if we can't use a native one + indexOf = arr.indexOf || function( elem ) { + var i = 0, + len = this.length; + for ( ; i < len; i++ ) { + if ( this[i] === elem ) { + return i; + } + } + return -1; + }, + + + // Regular expressions + + // Whitespace characters http://www.w3.org/TR/css3-selectors/#whitespace + whitespace = "[\\x20\\t\\r\\n\\f]", + // http://www.w3.org/TR/css3-syntax/#characters + characterEncoding = "(?:\\\\.|[\\w-]|[^\\x00-\\xa0])+", + + // Loosely modeled on CSS identifier characters + // An unquoted value should be a CSS identifier http://www.w3.org/TR/css3-selectors/#attribute-selectors + // Proper syntax: http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier + identifier = characterEncoding.replace( "w", "w#" ), + + // Acceptable operators http://www.w3.org/TR/selectors/#attribute-selectors + operators = "([*^$|!~]?=)", + attributes = "\\[" + whitespace + "*(" + characterEncoding + ")" + whitespace + + "*(?:" + operators + whitespace + "*(?:(['\"])((?:\\\\.|[^\\\\])*?)\\3|(" + identifier + ")|)|)" + whitespace + "*\\]", + + // Prefer arguments quoted, + // then not containing pseudos/brackets, + // then attribute selectors/non-parenthetical expressions, + // then anything else + // These preferences are here to reduce the number of selectors + // needing tokenize in the PSEUDO preFilter + pseudos = ":(" + characterEncoding + ")(?:\\(((['\"])((?:\\\\.|[^\\\\])*?)\\3|((?:\\\\.|[^\\\\()[\\]]|" + attributes.replace( 3, 8 ) + ")*)|.*)\\)|)", + + // Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latter + rtrim = new RegExp( "^" + whitespace + "+|((?:^|[^\\\\])(?:\\\\.)*)" + whitespace + "+$", "g" ), + + rcomma = new RegExp( "^" + whitespace + "*," + whitespace + "*" ), + rcombinators = new RegExp( "^" + whitespace + "*([\\x20\\t\\r\\n\\f>+~])" + whitespace + "*" ), + rpseudo = new RegExp( pseudos ), + ridentifier = new RegExp( "^" + identifier + "$" ), + + matchExpr = { + "ID": new RegExp( "^#(" + characterEncoding + ")" ), + "CLASS": new RegExp( "^\\.(" + characterEncoding + ")" ), + "NAME": new RegExp( "^\\[name=['\"]?(" + characterEncoding + ")['\"]?\\]" ), + "TAG": new RegExp( "^(" + characterEncoding.replace( "w", "w*" ) + ")" ), + "ATTR": new RegExp( "^" + attributes ), + "PSEUDO": new RegExp( "^" + pseudos ), + "CHILD": new RegExp( "^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\(" + whitespace + + "*(even|odd|(([+-]|)(\\d*)n|)" + whitespace + "*(?:([+-]|)" + whitespace + + "*(\\d+)|))" + whitespace + "*\\)|)", "i" ), + // For use in libraries implementing .is() + // We use this for POS matching in `select` + "needsContext": new RegExp( "^" + whitespace + "*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\(" + + whitespace + "*((?:-\\d)?\\d*)" + whitespace + "*\\)|)(?=[^-]|$)", "i" ) + }, + + rsibling = /[\x20\t\r\n\f]*[+~]/, + + rnative = /^[^{]+\{\s*\[native code/, + + // Easily-parseable/retrievable ID or TAG or CLASS selectors + rquickExpr = /^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/, + + rinputs = /^(?:input|select|textarea|button)$/i, + rheader = /^h\d$/i, + + rescape = /'|\\/g, + rattributeQuotes = /\=[\x20\t\r\n\f]*([^'"\]]*)[\x20\t\r\n\f]*\]/g, + + // CSS escapes http://www.w3.org/TR/CSS21/syndata.html#escaped-characters + runescape = /\\([\da-fA-F]{1,6}[\x20\t\r\n\f]?|.)/g, + funescape = function( _, escaped ) { + var high = "0x" + escaped - 0x10000; + // NaN means non-codepoint + return high !== high ? + escaped : + // BMP codepoint + high < 0 ? + String.fromCharCode( high + 0x10000 ) : + // Supplemental Plane codepoint (surrogate pair) + String.fromCharCode( high >> 10 | 0xD800, high & 0x3FF | 0xDC00 ); + }; + +// Use a stripped-down slice if we can't use a native one +try { + slice.call( preferredDoc.documentElement.childNodes, 0 )[0].nodeType; +} catch ( e ) { + slice = function( i ) { + var elem, + results = []; + while ( (elem = this[i++]) ) { + results.push( elem ); + } + return results; + }; +} + +/** + * For feature detection + * @param {Function} fn The function to test for native support + */ +function isNative( fn ) { + return rnative.test( fn + "" ); +} + +/** + * Create key-value caches of limited size + * @returns {Function(string, Object)} Returns the Object data after storing it on itself with + * property name the (space-suffixed) string and (if the cache is larger than Expr.cacheLength) + * deleting the oldest entry + */ +function createCache() { + var cache, + keys = []; + + return (cache = function( key, value ) { + // Use (key + " ") to avoid collision with native prototype properties (see Issue #157) + if ( keys.push( key += " " ) > Expr.cacheLength ) { + // Only keep the most recent entries + delete cache[ keys.shift() ]; + } + return (cache[ key ] = value); + }); +} + +/** + * Mark a function for special use by Sizzle + * @param {Function} fn The function to mark + */ +function markFunction( fn ) { + fn[ expando ] = true; + return fn; +} + +/** + * Support testing using an element + * @param {Function} fn Passed the created div and expects a boolean result + */ +function assert( fn ) { + var div = document.createElement("div"); + + try { + return fn( div ); + } catch (e) { + return false; + } finally { + // release memory in IE + div = null; + } +} + +function Sizzle( selector, context, results, seed ) { + var match, elem, m, nodeType, + // QSA vars + i, groups, old, nid, newContext, newSelector; + + if ( ( context ? context.ownerDocument || context : preferredDoc ) !== document ) { + setDocument( context ); + } + + context = context || document; + results = results || []; + + if ( !selector || typeof selector !== "string" ) { + return results; + } + + if ( (nodeType = context.nodeType) !== 1 && nodeType !== 9 ) { + return []; + } + + if ( !documentIsXML && !seed ) { + + // Shortcuts + if ( (match = rquickExpr.exec( selector )) ) { + // Speed-up: Sizzle("#ID") + if ( (m = match[1]) ) { + if ( nodeType === 9 ) { + elem = context.getElementById( m ); + // Check parentNode to catch when Blackberry 4.6 returns + // nodes that are no longer in the document #6963 + if ( elem && elem.parentNode ) { + // Handle the case where IE, Opera, and Webkit return items + // by name instead of ID + if ( elem.id === m ) { + results.push( elem ); + return results; + } + } else { + return results; + } + } else { + // Context is not a document + if ( context.ownerDocument && (elem = context.ownerDocument.getElementById( m )) && + contains( context, elem ) && elem.id === m ) { + results.push( elem ); + return results; + } + } + + // Speed-up: Sizzle("TAG") + } else if ( match[2] ) { + push.apply( results, slice.call(context.getElementsByTagName( selector ), 0) ); + return results; + + // Speed-up: Sizzle(".CLASS") + } else if ( (m = match[3]) && support.getByClassName && context.getElementsByClassName ) { + push.apply( results, slice.call(context.getElementsByClassName( m ), 0) ); + return results; + } + } + + // QSA path + if ( support.qsa && !rbuggyQSA.test(selector) ) { + old = true; + nid = expando; + newContext = context; + newSelector = nodeType === 9 && selector; + + // qSA works strangely on Element-rooted queries + // We can work around this by specifying an extra ID on the root + // and working up from there (Thanks to Andrew Dupont for the technique) + // IE 8 doesn't work on object elements + if ( nodeType === 1 && context.nodeName.toLowerCase() !== "object" ) { + groups = tokenize( selector ); + + if ( (old = context.getAttribute("id")) ) { + nid = old.replace( rescape, "\\$&" ); + } else { + context.setAttribute( "id", nid ); + } + nid = "[id='" + nid + "'] "; + + i = groups.length; + while ( i-- ) { + groups[i] = nid + toSelector( groups[i] ); + } + newContext = rsibling.test( selector ) && context.parentNode || context; + newSelector = groups.join(","); + } + + if ( newSelector ) { + try { + push.apply( results, slice.call( newContext.querySelectorAll( + newSelector + ), 0 ) ); + return results; + } catch(qsaError) { + } finally { + if ( !old ) { + context.removeAttribute("id"); + } + } + } + } + } + + // All others + return select( selector.replace( rtrim, "$1" ), context, results, seed ); +} + +/** + * Detect xml + * @param {Element|Object} elem An element or a document + */ +isXML = Sizzle.isXML = function( elem ) { + // documentElement is verified for cases where it doesn't yet exist + // (such as loading iframes in IE - #4833) + var documentElement = elem && (elem.ownerDocument || elem).documentElement; + return documentElement ? documentElement.nodeName !== "HTML" : false; +}; + +/** + * Sets document-related variables once based on the current document + * @param {Element|Object} [doc] An element or document object to use to set the document + * @returns {Object} Returns the current document + */ +setDocument = Sizzle.setDocument = function( node ) { + var doc = node ? node.ownerDocument || node : preferredDoc; + + // If no document and documentElement is available, return + if ( doc === document || doc.nodeType !== 9 || !doc.documentElement ) { + return document; + } + + // Set our document + document = doc; + docElem = doc.documentElement; + + // Support tests + documentIsXML = isXML( doc ); + + // Check if getElementsByTagName("*") returns only elements + support.tagNameNoComments = assert(function( div ) { + div.appendChild( doc.createComment("") ); + return !div.getElementsByTagName("*").length; + }); + + // Check if attributes should be retrieved by attribute nodes + support.attributes = assert(function( div ) { + div.innerHTML = ""; + var type = typeof div.lastChild.getAttribute("multiple"); + // IE8 returns a string for some attributes even when not present + return type !== "boolean" && type !== "string"; + }); + + // Check if getElementsByClassName can be trusted + support.getByClassName = assert(function( div ) { + // Opera can't find a second classname (in 9.6) + div.innerHTML = ""; + if ( !div.getElementsByClassName || !div.getElementsByClassName("e").length ) { + return false; + } + + // Safari 3.2 caches class attributes and doesn't catch changes + div.lastChild.className = "e"; + return div.getElementsByClassName("e").length === 2; + }); + + // Check if getElementById returns elements by name + // Check if getElementsByName privileges form controls or returns elements by ID + support.getByName = assert(function( div ) { + // Inject content + div.id = expando + 0; + div.innerHTML = "
"; + docElem.insertBefore( div, docElem.firstChild ); + + // Test + var pass = doc.getElementsByName && + // buggy browsers will return fewer than the correct 2 + doc.getElementsByName( expando ).length === 2 + + // buggy browsers will return more than the correct 0 + doc.getElementsByName( expando + 0 ).length; + support.getIdNotName = !doc.getElementById( expando ); + + // Cleanup + docElem.removeChild( div ); + + return pass; + }); + + // IE6/7 return modified attributes + Expr.attrHandle = assert(function( div ) { + div.innerHTML = ""; + return div.firstChild && typeof div.firstChild.getAttribute !== strundefined && + div.firstChild.getAttribute("href") === "#"; + }) ? + {} : + { + "href": function( elem ) { + return elem.getAttribute( "href", 2 ); + }, + "type": function( elem ) { + return elem.getAttribute("type"); + } + }; + + // ID find and filter + if ( support.getIdNotName ) { + Expr.find["ID"] = function( id, context ) { + if ( typeof context.getElementById !== strundefined && !documentIsXML ) { + var m = context.getElementById( id ); + // Check parentNode to catch when Blackberry 4.6 returns + // nodes that are no longer in the document #6963 + return m && m.parentNode ? [m] : []; + } + }; + Expr.filter["ID"] = function( id ) { + var attrId = id.replace( runescape, funescape ); + return function( elem ) { + return elem.getAttribute("id") === attrId; + }; + }; + } else { + Expr.find["ID"] = function( id, context ) { + if ( typeof context.getElementById !== strundefined && !documentIsXML ) { + var m = context.getElementById( id ); + + return m ? + m.id === id || typeof m.getAttributeNode !== strundefined && m.getAttributeNode("id").value === id ? + [m] : + undefined : + []; + } + }; + Expr.filter["ID"] = function( id ) { + var attrId = id.replace( runescape, funescape ); + return function( elem ) { + var node = typeof elem.getAttributeNode !== strundefined && elem.getAttributeNode("id"); + return node && node.value === attrId; + }; + }; + } + + // Tag + Expr.find["TAG"] = support.tagNameNoComments ? + function( tag, context ) { + if ( typeof context.getElementsByTagName !== strundefined ) { + return context.getElementsByTagName( tag ); + } + } : + function( tag, context ) { + var elem, + tmp = [], + i = 0, + results = context.getElementsByTagName( tag ); + + // Filter out possible comments + if ( tag === "*" ) { + while ( (elem = results[i++]) ) { + if ( elem.nodeType === 1 ) { + tmp.push( elem ); + } + } + + return tmp; + } + return results; + }; + + // Name + Expr.find["NAME"] = support.getByName && function( tag, context ) { + if ( typeof context.getElementsByName !== strundefined ) { + return context.getElementsByName( name ); + } + }; + + // Class + Expr.find["CLASS"] = support.getByClassName && function( className, context ) { + if ( typeof context.getElementsByClassName !== strundefined && !documentIsXML ) { + return context.getElementsByClassName( className ); + } + }; + + // QSA and matchesSelector support + + // matchesSelector(:active) reports false when true (IE9/Opera 11.5) + rbuggyMatches = []; + + // qSa(:focus) reports false when true (Chrome 21), + // no need to also add to buggyMatches since matches checks buggyQSA + // A support test would require too much code (would include document ready) + rbuggyQSA = [ ":focus" ]; + + if ( (support.qsa = isNative(doc.querySelectorAll)) ) { + // Build QSA regex + // Regex strategy adopted from Diego Perini + assert(function( div ) { + // Select is set to empty string on purpose + // This is to test IE's treatment of not explictly + // setting a boolean content attribute, + // since its presence should be enough + // http://bugs.jquery.com/ticket/12359 + div.innerHTML = ""; + + // IE8 - Some boolean attributes are not treated correctly + if ( !div.querySelectorAll("[selected]").length ) { + rbuggyQSA.push( "\\[" + whitespace + "*(?:checked|disabled|ismap|multiple|readonly|selected|value)" ); + } + + // Webkit/Opera - :checked should return selected option elements + // http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked + // IE8 throws error here and will not see later tests + if ( !div.querySelectorAll(":checked").length ) { + rbuggyQSA.push(":checked"); + } + }); + + assert(function( div ) { + + // Opera 10-12/IE8 - ^= $= *= and empty values + // Should not select anything + div.innerHTML = ""; + if ( div.querySelectorAll("[i^='']").length ) { + rbuggyQSA.push( "[*^$]=" + whitespace + "*(?:\"\"|'')" ); + } + + // FF 3.5 - :enabled/:disabled and hidden elements (hidden elements are still enabled) + // IE8 throws error here and will not see later tests + if ( !div.querySelectorAll(":enabled").length ) { + rbuggyQSA.push( ":enabled", ":disabled" ); + } + + // Opera 10-11 does not throw on post-comma invalid pseudos + div.querySelectorAll("*,:x"); + rbuggyQSA.push(",.*:"); + }); + } + + if ( (support.matchesSelector = isNative( (matches = docElem.matchesSelector || + docElem.mozMatchesSelector || + docElem.webkitMatchesSelector || + docElem.oMatchesSelector || + docElem.msMatchesSelector) )) ) { + + assert(function( div ) { + // Check to see if it's possible to do matchesSelector + // on a disconnected node (IE 9) + support.disconnectedMatch = matches.call( div, "div" ); + + // This should fail with an exception + // Gecko does not error, returns false instead + matches.call( div, "[s!='']:x" ); + rbuggyMatches.push( "!=", pseudos ); + }); + } + + rbuggyQSA = new RegExp( rbuggyQSA.join("|") ); + rbuggyMatches = new RegExp( rbuggyMatches.join("|") ); + + // Element contains another + // Purposefully does not implement inclusive descendent + // As in, an element does not contain itself + contains = isNative(docElem.contains) || docElem.compareDocumentPosition ? + function( a, b ) { + var adown = a.nodeType === 9 ? a.documentElement : a, + bup = b && b.parentNode; + return a === bup || !!( bup && bup.nodeType === 1 && ( + adown.contains ? + adown.contains( bup ) : + a.compareDocumentPosition && a.compareDocumentPosition( bup ) & 16 + )); + } : + function( a, b ) { + if ( b ) { + while ( (b = b.parentNode) ) { + if ( b === a ) { + return true; + } + } + } + return false; + }; + + // Document order sorting + sortOrder = docElem.compareDocumentPosition ? + function( a, b ) { + var compare; + + if ( a === b ) { + hasDuplicate = true; + return 0; + } + + if ( (compare = b.compareDocumentPosition && a.compareDocumentPosition && a.compareDocumentPosition( b )) ) { + if ( compare & 1 || a.parentNode && a.parentNode.nodeType === 11 ) { + if ( a === doc || contains( preferredDoc, a ) ) { + return -1; + } + if ( b === doc || contains( preferredDoc, b ) ) { + return 1; + } + return 0; + } + return compare & 4 ? -1 : 1; + } + + return a.compareDocumentPosition ? -1 : 1; + } : + function( a, b ) { + var cur, + i = 0, + aup = a.parentNode, + bup = b.parentNode, + ap = [ a ], + bp = [ b ]; + + // Exit early if the nodes are identical + if ( a === b ) { + hasDuplicate = true; + return 0; + + // Parentless nodes are either documents or disconnected + } else if ( !aup || !bup ) { + return a === doc ? -1 : + b === doc ? 1 : + aup ? -1 : + bup ? 1 : + 0; + + // If the nodes are siblings, we can do a quick check + } else if ( aup === bup ) { + return siblingCheck( a, b ); + } + + // Otherwise we need full lists of their ancestors for comparison + cur = a; + while ( (cur = cur.parentNode) ) { + ap.unshift( cur ); + } + cur = b; + while ( (cur = cur.parentNode) ) { + bp.unshift( cur ); + } + + // Walk down the tree looking for a discrepancy + while ( ap[i] === bp[i] ) { + i++; + } + + return i ? + // Do a sibling check if the nodes have a common ancestor + siblingCheck( ap[i], bp[i] ) : + + // Otherwise nodes in our document sort first + ap[i] === preferredDoc ? -1 : + bp[i] === preferredDoc ? 1 : + 0; + }; + + // Always assume the presence of duplicates if sort doesn't + // pass them to our comparison function (as in Google Chrome). + hasDuplicate = false; + [0, 0].sort( sortOrder ); + support.detectDuplicates = hasDuplicate; + + return document; +}; + +Sizzle.matches = function( expr, elements ) { + return Sizzle( expr, null, null, elements ); +}; + +Sizzle.matchesSelector = function( elem, expr ) { + // Set document vars if needed + if ( ( elem.ownerDocument || elem ) !== document ) { + setDocument( elem ); + } + + // Make sure that attribute selectors are quoted + expr = expr.replace( rattributeQuotes, "='$1']" ); + + // rbuggyQSA always contains :focus, so no need for an existence check + if ( support.matchesSelector && !documentIsXML && (!rbuggyMatches || !rbuggyMatches.test(expr)) && !rbuggyQSA.test(expr) ) { + try { + var ret = matches.call( elem, expr ); + + // IE 9's matchesSelector returns false on disconnected nodes + if ( ret || support.disconnectedMatch || + // As well, disconnected nodes are said to be in a document + // fragment in IE 9 + elem.document && elem.document.nodeType !== 11 ) { + return ret; + } + } catch(e) {} + } + + return Sizzle( expr, document, null, [elem] ).length > 0; +}; + +Sizzle.contains = function( context, elem ) { + // Set document vars if needed + if ( ( context.ownerDocument || context ) !== document ) { + setDocument( context ); + } + return contains( context, elem ); +}; + +Sizzle.attr = function( elem, name ) { + var val; + + // Set document vars if needed + if ( ( elem.ownerDocument || elem ) !== document ) { + setDocument( elem ); + } + + if ( !documentIsXML ) { + name = name.toLowerCase(); + } + if ( (val = Expr.attrHandle[ name ]) ) { + return val( elem ); + } + if ( documentIsXML || support.attributes ) { + return elem.getAttribute( name ); + } + return ( (val = elem.getAttributeNode( name )) || elem.getAttribute( name ) ) && elem[ name ] === true ? + name : + val && val.specified ? val.value : null; +}; + +Sizzle.error = function( msg ) { + throw new Error( "Syntax error, unrecognized expression: " + msg ); +}; + +// Document sorting and removing duplicates +Sizzle.uniqueSort = function( results ) { + var elem, + duplicates = [], + i = 1, + j = 0; + + // Unless we *know* we can detect duplicates, assume their presence + hasDuplicate = !support.detectDuplicates; + results.sort( sortOrder ); + + if ( hasDuplicate ) { + for ( ; (elem = results[i]); i++ ) { + if ( elem === results[ i - 1 ] ) { + j = duplicates.push( i ); + } + } + while ( j-- ) { + results.splice( duplicates[ j ], 1 ); + } + } + + return results; +}; + +function siblingCheck( a, b ) { + var cur = b && a, + diff = cur && ( ~b.sourceIndex || MAX_NEGATIVE ) - ( ~a.sourceIndex || MAX_NEGATIVE ); + + // Use IE sourceIndex if available on both nodes + if ( diff ) { + return diff; + } + + // Check if b follows a + if ( cur ) { + while ( (cur = cur.nextSibling) ) { + if ( cur === b ) { + return -1; + } + } + } + + return a ? 1 : -1; +} + +// Returns a function to use in pseudos for input types +function createInputPseudo( type ) { + return function( elem ) { + var name = elem.nodeName.toLowerCase(); + return name === "input" && elem.type === type; + }; +} + +// Returns a function to use in pseudos for buttons +function createButtonPseudo( type ) { + return function( elem ) { + var name = elem.nodeName.toLowerCase(); + return (name === "input" || name === "button") && elem.type === type; + }; +} + +// Returns a function to use in pseudos for positionals +function createPositionalPseudo( fn ) { + return markFunction(function( argument ) { + argument = +argument; + return markFunction(function( seed, matches ) { + var j, + matchIndexes = fn( [], seed.length, argument ), + i = matchIndexes.length; + + // Match elements found at the specified indexes + while ( i-- ) { + if ( seed[ (j = matchIndexes[i]) ] ) { + seed[j] = !(matches[j] = seed[j]); + } + } + }); + }); +} + +/** + * Utility function for retrieving the text value of an array of DOM nodes + * @param {Array|Element} elem + */ +getText = Sizzle.getText = function( elem ) { + var node, + ret = "", + i = 0, + nodeType = elem.nodeType; + + if ( !nodeType ) { + // If no nodeType, this is expected to be an array + for ( ; (node = elem[i]); i++ ) { + // Do not traverse comment nodes + ret += getText( node ); + } + } else if ( nodeType === 1 || nodeType === 9 || nodeType === 11 ) { + // Use textContent for elements + // innerText usage removed for consistency of new lines (see #11153) + if ( typeof elem.textContent === "string" ) { + return elem.textContent; + } else { + // Traverse its children + for ( elem = elem.firstChild; elem; elem = elem.nextSibling ) { + ret += getText( elem ); + } + } + } else if ( nodeType === 3 || nodeType === 4 ) { + return elem.nodeValue; + } + // Do not include comment or processing instruction nodes + + return ret; +}; + +Expr = Sizzle.selectors = { + + // Can be adjusted by the user + cacheLength: 50, + + createPseudo: markFunction, + + match: matchExpr, + + find: {}, + + relative: { + ">": { dir: "parentNode", first: true }, + " ": { dir: "parentNode" }, + "+": { dir: "previousSibling", first: true }, + "~": { dir: "previousSibling" } + }, + + preFilter: { + "ATTR": function( match ) { + match[1] = match[1].replace( runescape, funescape ); + + // Move the given value to match[3] whether quoted or unquoted + match[3] = ( match[4] || match[5] || "" ).replace( runescape, funescape ); + + if ( match[2] === "~=" ) { + match[3] = " " + match[3] + " "; + } + + return match.slice( 0, 4 ); + }, + + "CHILD": function( match ) { + /* matches from matchExpr["CHILD"] + 1 type (only|nth|...) + 2 what (child|of-type) + 3 argument (even|odd|\d*|\d*n([+-]\d+)?|...) + 4 xn-component of xn+y argument ([+-]?\d*n|) + 5 sign of xn-component + 6 x of xn-component + 7 sign of y-component + 8 y of y-component + */ + match[1] = match[1].toLowerCase(); + + if ( match[1].slice( 0, 3 ) === "nth" ) { + // nth-* requires argument + if ( !match[3] ) { + Sizzle.error( match[0] ); + } + + // numeric x and y parameters for Expr.filter.CHILD + // remember that false/true cast respectively to 0/1 + match[4] = +( match[4] ? match[5] + (match[6] || 1) : 2 * ( match[3] === "even" || match[3] === "odd" ) ); + match[5] = +( ( match[7] + match[8] ) || match[3] === "odd" ); + + // other types prohibit arguments + } else if ( match[3] ) { + Sizzle.error( match[0] ); + } + + return match; + }, + + "PSEUDO": function( match ) { + var excess, + unquoted = !match[5] && match[2]; + + if ( matchExpr["CHILD"].test( match[0] ) ) { + return null; + } + + // Accept quoted arguments as-is + if ( match[4] ) { + match[2] = match[4]; + + // Strip excess characters from unquoted arguments + } else if ( unquoted && rpseudo.test( unquoted ) && + // Get excess from tokenize (recursively) + (excess = tokenize( unquoted, true )) && + // advance to the next closing parenthesis + (excess = unquoted.indexOf( ")", unquoted.length - excess ) - unquoted.length) ) { + + // excess is a negative index + match[0] = match[0].slice( 0, excess ); + match[2] = unquoted.slice( 0, excess ); + } + + // Return only captures needed by the pseudo filter method (type and argument) + return match.slice( 0, 3 ); + } + }, + + filter: { + + "TAG": function( nodeName ) { + if ( nodeName === "*" ) { + return function() { return true; }; + } + + nodeName = nodeName.replace( runescape, funescape ).toLowerCase(); + return function( elem ) { + return elem.nodeName && elem.nodeName.toLowerCase() === nodeName; + }; + }, + + "CLASS": function( className ) { + var pattern = classCache[ className + " " ]; + + return pattern || + (pattern = new RegExp( "(^|" + whitespace + ")" + className + "(" + whitespace + "|$)" )) && + classCache( className, function( elem ) { + return pattern.test( elem.className || (typeof elem.getAttribute !== strundefined && elem.getAttribute("class")) || "" ); + }); + }, + + "ATTR": function( name, operator, check ) { + return function( elem ) { + var result = Sizzle.attr( elem, name ); + + if ( result == null ) { + return operator === "!="; + } + if ( !operator ) { + return true; + } + + result += ""; + + return operator === "=" ? result === check : + operator === "!=" ? result !== check : + operator === "^=" ? check && result.indexOf( check ) === 0 : + operator === "*=" ? check && result.indexOf( check ) > -1 : + operator === "$=" ? check && result.slice( -check.length ) === check : + operator === "~=" ? ( " " + result + " " ).indexOf( check ) > -1 : + operator === "|=" ? result === check || result.slice( 0, check.length + 1 ) === check + "-" : + false; + }; + }, + + "CHILD": function( type, what, argument, first, last ) { + var simple = type.slice( 0, 3 ) !== "nth", + forward = type.slice( -4 ) !== "last", + ofType = what === "of-type"; + + return first === 1 && last === 0 ? + + // Shortcut for :nth-*(n) + function( elem ) { + return !!elem.parentNode; + } : + + function( elem, context, xml ) { + var cache, outerCache, node, diff, nodeIndex, start, + dir = simple !== forward ? "nextSibling" : "previousSibling", + parent = elem.parentNode, + name = ofType && elem.nodeName.toLowerCase(), + useCache = !xml && !ofType; + + if ( parent ) { + + // :(first|last|only)-(child|of-type) + if ( simple ) { + while ( dir ) { + node = elem; + while ( (node = node[ dir ]) ) { + if ( ofType ? node.nodeName.toLowerCase() === name : node.nodeType === 1 ) { + return false; + } + } + // Reverse direction for :only-* (if we haven't yet done so) + start = dir = type === "only" && !start && "nextSibling"; + } + return true; + } + + start = [ forward ? parent.firstChild : parent.lastChild ]; + + // non-xml :nth-child(...) stores cache data on `parent` + if ( forward && useCache ) { + // Seek `elem` from a previously-cached index + outerCache = parent[ expando ] || (parent[ expando ] = {}); + cache = outerCache[ type ] || []; + nodeIndex = cache[0] === dirruns && cache[1]; + diff = cache[0] === dirruns && cache[2]; + node = nodeIndex && parent.childNodes[ nodeIndex ]; + + while ( (node = ++nodeIndex && node && node[ dir ] || + + // Fallback to seeking `elem` from the start + (diff = nodeIndex = 0) || start.pop()) ) { + + // When found, cache indexes on `parent` and break + if ( node.nodeType === 1 && ++diff && node === elem ) { + outerCache[ type ] = [ dirruns, nodeIndex, diff ]; + break; + } + } + + // Use previously-cached element index if available + } else if ( useCache && (cache = (elem[ expando ] || (elem[ expando ] = {}))[ type ]) && cache[0] === dirruns ) { + diff = cache[1]; + + // xml :nth-child(...) or :nth-last-child(...) or :nth(-last)?-of-type(...) + } else { + // Use the same loop as above to seek `elem` from the start + while ( (node = ++nodeIndex && node && node[ dir ] || + (diff = nodeIndex = 0) || start.pop()) ) { + + if ( ( ofType ? node.nodeName.toLowerCase() === name : node.nodeType === 1 ) && ++diff ) { + // Cache the index of each encountered element + if ( useCache ) { + (node[ expando ] || (node[ expando ] = {}))[ type ] = [ dirruns, diff ]; + } + + if ( node === elem ) { + break; + } + } + } + } + + // Incorporate the offset, then check against cycle size + diff -= last; + return diff === first || ( diff % first === 0 && diff / first >= 0 ); + } + }; + }, + + "PSEUDO": function( pseudo, argument ) { + // pseudo-class names are case-insensitive + // http://www.w3.org/TR/selectors/#pseudo-classes + // Prioritize by case sensitivity in case custom pseudos are added with uppercase letters + // Remember that setFilters inherits from pseudos + var args, + fn = Expr.pseudos[ pseudo ] || Expr.setFilters[ pseudo.toLowerCase() ] || + Sizzle.error( "unsupported pseudo: " + pseudo ); + + // The user may use createPseudo to indicate that + // arguments are needed to create the filter function + // just as Sizzle does + if ( fn[ expando ] ) { + return fn( argument ); + } + + // But maintain support for old signatures + if ( fn.length > 1 ) { + args = [ pseudo, pseudo, "", argument ]; + return Expr.setFilters.hasOwnProperty( pseudo.toLowerCase() ) ? + markFunction(function( seed, matches ) { + var idx, + matched = fn( seed, argument ), + i = matched.length; + while ( i-- ) { + idx = indexOf.call( seed, matched[i] ); + seed[ idx ] = !( matches[ idx ] = matched[i] ); + } + }) : + function( elem ) { + return fn( elem, 0, args ); + }; + } + + return fn; + } + }, + + pseudos: { + // Potentially complex pseudos + "not": markFunction(function( selector ) { + // Trim the selector passed to compile + // to avoid treating leading and trailing + // spaces as combinators + var input = [], + results = [], + matcher = compile( selector.replace( rtrim, "$1" ) ); + + return matcher[ expando ] ? + markFunction(function( seed, matches, context, xml ) { + var elem, + unmatched = matcher( seed, null, xml, [] ), + i = seed.length; + + // Match elements unmatched by `matcher` + while ( i-- ) { + if ( (elem = unmatched[i]) ) { + seed[i] = !(matches[i] = elem); + } + } + }) : + function( elem, context, xml ) { + input[0] = elem; + matcher( input, null, xml, results ); + return !results.pop(); + }; + }), + + "has": markFunction(function( selector ) { + return function( elem ) { + return Sizzle( selector, elem ).length > 0; + }; + }), + + "contains": markFunction(function( text ) { + return function( elem ) { + return ( elem.textContent || elem.innerText || getText( elem ) ).indexOf( text ) > -1; + }; + }), + + // "Whether an element is represented by a :lang() selector + // is based solely on the element's language value + // being equal to the identifier C, + // or beginning with the identifier C immediately followed by "-". + // The matching of C against the element's language value is performed case-insensitively. + // The identifier C does not have to be a valid language name." + // http://www.w3.org/TR/selectors/#lang-pseudo + "lang": markFunction( function( lang ) { + // lang value must be a valid identifider + if ( !ridentifier.test(lang || "") ) { + Sizzle.error( "unsupported lang: " + lang ); + } + lang = lang.replace( runescape, funescape ).toLowerCase(); + return function( elem ) { + var elemLang; + do { + if ( (elemLang = documentIsXML ? + elem.getAttribute("xml:lang") || elem.getAttribute("lang") : + elem.lang) ) { + + elemLang = elemLang.toLowerCase(); + return elemLang === lang || elemLang.indexOf( lang + "-" ) === 0; + } + } while ( (elem = elem.parentNode) && elem.nodeType === 1 ); + return false; + }; + }), + + // Miscellaneous + "target": function( elem ) { + var hash = window.location && window.location.hash; + return hash && hash.slice( 1 ) === elem.id; + }, + + "root": function( elem ) { + return elem === docElem; + }, + + "focus": function( elem ) { + return elem === document.activeElement && (!document.hasFocus || document.hasFocus()) && !!(elem.type || elem.href || ~elem.tabIndex); + }, + + // Boolean properties + "enabled": function( elem ) { + return elem.disabled === false; + }, + + "disabled": function( elem ) { + return elem.disabled === true; + }, + + "checked": function( elem ) { + // In CSS3, :checked should return both checked and selected elements + // http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked + var nodeName = elem.nodeName.toLowerCase(); + return (nodeName === "input" && !!elem.checked) || (nodeName === "option" && !!elem.selected); + }, + + "selected": function( elem ) { + // Accessing this property makes selected-by-default + // options in Safari work properly + if ( elem.parentNode ) { + elem.parentNode.selectedIndex; + } + + return elem.selected === true; + }, + + // Contents + "empty": function( elem ) { + // http://www.w3.org/TR/selectors/#empty-pseudo + // :empty is only affected by element nodes and content nodes(including text(3), cdata(4)), + // not comment, processing instructions, or others + // Thanks to Diego Perini for the nodeName shortcut + // Greater than "@" means alpha characters (specifically not starting with "#" or "?") + for ( elem = elem.firstChild; elem; elem = elem.nextSibling ) { + if ( elem.nodeName > "@" || elem.nodeType === 3 || elem.nodeType === 4 ) { + return false; + } + } + return true; + }, + + "parent": function( elem ) { + return !Expr.pseudos["empty"]( elem ); + }, + + // Element/input types + "header": function( elem ) { + return rheader.test( elem.nodeName ); + }, + + "input": function( elem ) { + return rinputs.test( elem.nodeName ); + }, + + "button": function( elem ) { + var name = elem.nodeName.toLowerCase(); + return name === "input" && elem.type === "button" || name === "button"; + }, + + "text": function( elem ) { + var attr; + // IE6 and 7 will map elem.type to 'text' for new HTML5 types (search, etc) + // use getAttribute instead to test this case + return elem.nodeName.toLowerCase() === "input" && + elem.type === "text" && + ( (attr = elem.getAttribute("type")) == null || attr.toLowerCase() === elem.type ); + }, + + // Position-in-collection + "first": createPositionalPseudo(function() { + return [ 0 ]; + }), + + "last": createPositionalPseudo(function( matchIndexes, length ) { + return [ length - 1 ]; + }), + + "eq": createPositionalPseudo(function( matchIndexes, length, argument ) { + return [ argument < 0 ? argument + length : argument ]; + }), + + "even": createPositionalPseudo(function( matchIndexes, length ) { + var i = 0; + for ( ; i < length; i += 2 ) { + matchIndexes.push( i ); + } + return matchIndexes; + }), + + "odd": createPositionalPseudo(function( matchIndexes, length ) { + var i = 1; + for ( ; i < length; i += 2 ) { + matchIndexes.push( i ); + } + return matchIndexes; + }), + + "lt": createPositionalPseudo(function( matchIndexes, length, argument ) { + var i = argument < 0 ? argument + length : argument; + for ( ; --i >= 0; ) { + matchIndexes.push( i ); + } + return matchIndexes; + }), + + "gt": createPositionalPseudo(function( matchIndexes, length, argument ) { + var i = argument < 0 ? argument + length : argument; + for ( ; ++i < length; ) { + matchIndexes.push( i ); + } + return matchIndexes; + }) + } +}; + +// Add button/input type pseudos +for ( i in { radio: true, checkbox: true, file: true, password: true, image: true } ) { + Expr.pseudos[ i ] = createInputPseudo( i ); +} +for ( i in { submit: true, reset: true } ) { + Expr.pseudos[ i ] = createButtonPseudo( i ); +} + +function tokenize( selector, parseOnly ) { + var matched, match, tokens, type, + soFar, groups, preFilters, + cached = tokenCache[ selector + " " ]; + + if ( cached ) { + return parseOnly ? 0 : cached.slice( 0 ); + } + + soFar = selector; + groups = []; + preFilters = Expr.preFilter; + + while ( soFar ) { + + // Comma and first run + if ( !matched || (match = rcomma.exec( soFar )) ) { + if ( match ) { + // Don't consume trailing commas as valid + soFar = soFar.slice( match[0].length ) || soFar; + } + groups.push( tokens = [] ); + } + + matched = false; + + // Combinators + if ( (match = rcombinators.exec( soFar )) ) { + matched = match.shift(); + tokens.push( { + value: matched, + // Cast descendant combinators to space + type: match[0].replace( rtrim, " " ) + } ); + soFar = soFar.slice( matched.length ); + } + + // Filters + for ( type in Expr.filter ) { + if ( (match = matchExpr[ type ].exec( soFar )) && (!preFilters[ type ] || + (match = preFilters[ type ]( match ))) ) { + matched = match.shift(); + tokens.push( { + value: matched, + type: type, + matches: match + } ); + soFar = soFar.slice( matched.length ); + } + } + + if ( !matched ) { + break; + } + } + + // Return the length of the invalid excess + // if we're just parsing + // Otherwise, throw an error or return tokens + return parseOnly ? + soFar.length : + soFar ? + Sizzle.error( selector ) : + // Cache the tokens + tokenCache( selector, groups ).slice( 0 ); +} + +function toSelector( tokens ) { + var i = 0, + len = tokens.length, + selector = ""; + for ( ; i < len; i++ ) { + selector += tokens[i].value; + } + return selector; +} + +function addCombinator( matcher, combinator, base ) { + var dir = combinator.dir, + checkNonElements = base && dir === "parentNode", + doneName = done++; + + return combinator.first ? + // Check against closest ancestor/preceding element + function( elem, context, xml ) { + while ( (elem = elem[ dir ]) ) { + if ( elem.nodeType === 1 || checkNonElements ) { + return matcher( elem, context, xml ); + } + } + } : + + // Check against all ancestor/preceding elements + function( elem, context, xml ) { + var data, cache, outerCache, + dirkey = dirruns + " " + doneName; + + // We can't set arbitrary data on XML nodes, so they don't benefit from dir caching + if ( xml ) { + while ( (elem = elem[ dir ]) ) { + if ( elem.nodeType === 1 || checkNonElements ) { + if ( matcher( elem, context, xml ) ) { + return true; + } + } + } + } else { + while ( (elem = elem[ dir ]) ) { + if ( elem.nodeType === 1 || checkNonElements ) { + outerCache = elem[ expando ] || (elem[ expando ] = {}); + if ( (cache = outerCache[ dir ]) && cache[0] === dirkey ) { + if ( (data = cache[1]) === true || data === cachedruns ) { + return data === true; + } + } else { + cache = outerCache[ dir ] = [ dirkey ]; + cache[1] = matcher( elem, context, xml ) || cachedruns; + if ( cache[1] === true ) { + return true; + } + } + } + } + } + }; +} + +function elementMatcher( matchers ) { + return matchers.length > 1 ? + function( elem, context, xml ) { + var i = matchers.length; + while ( i-- ) { + if ( !matchers[i]( elem, context, xml ) ) { + return false; + } + } + return true; + } : + matchers[0]; +} + +function condense( unmatched, map, filter, context, xml ) { + var elem, + newUnmatched = [], + i = 0, + len = unmatched.length, + mapped = map != null; + + for ( ; i < len; i++ ) { + if ( (elem = unmatched[i]) ) { + if ( !filter || filter( elem, context, xml ) ) { + newUnmatched.push( elem ); + if ( mapped ) { + map.push( i ); + } + } + } + } + + return newUnmatched; +} + +function setMatcher( preFilter, selector, matcher, postFilter, postFinder, postSelector ) { + if ( postFilter && !postFilter[ expando ] ) { + postFilter = setMatcher( postFilter ); + } + if ( postFinder && !postFinder[ expando ] ) { + postFinder = setMatcher( postFinder, postSelector ); + } + return markFunction(function( seed, results, context, xml ) { + var temp, i, elem, + preMap = [], + postMap = [], + preexisting = results.length, + + // Get initial elements from seed or context + elems = seed || multipleContexts( selector || "*", context.nodeType ? [ context ] : context, [] ), + + // Prefilter to get matcher input, preserving a map for seed-results synchronization + matcherIn = preFilter && ( seed || !selector ) ? + condense( elems, preMap, preFilter, context, xml ) : + elems, + + matcherOut = matcher ? + // If we have a postFinder, or filtered seed, or non-seed postFilter or preexisting results, + postFinder || ( seed ? preFilter : preexisting || postFilter ) ? + + // ...intermediate processing is necessary + [] : + + // ...otherwise use results directly + results : + matcherIn; + + // Find primary matches + if ( matcher ) { + matcher( matcherIn, matcherOut, context, xml ); + } + + // Apply postFilter + if ( postFilter ) { + temp = condense( matcherOut, postMap ); + postFilter( temp, [], context, xml ); + + // Un-match failing elements by moving them back to matcherIn + i = temp.length; + while ( i-- ) { + if ( (elem = temp[i]) ) { + matcherOut[ postMap[i] ] = !(matcherIn[ postMap[i] ] = elem); + } + } + } + + if ( seed ) { + if ( postFinder || preFilter ) { + if ( postFinder ) { + // Get the final matcherOut by condensing this intermediate into postFinder contexts + temp = []; + i = matcherOut.length; + while ( i-- ) { + if ( (elem = matcherOut[i]) ) { + // Restore matcherIn since elem is not yet a final match + temp.push( (matcherIn[i] = elem) ); + } + } + postFinder( null, (matcherOut = []), temp, xml ); + } + + // Move matched elements from seed to results to keep them synchronized + i = matcherOut.length; + while ( i-- ) { + if ( (elem = matcherOut[i]) && + (temp = postFinder ? indexOf.call( seed, elem ) : preMap[i]) > -1 ) { + + seed[temp] = !(results[temp] = elem); + } + } + } + + // Add elements to results, through postFinder if defined + } else { + matcherOut = condense( + matcherOut === results ? + matcherOut.splice( preexisting, matcherOut.length ) : + matcherOut + ); + if ( postFinder ) { + postFinder( null, results, matcherOut, xml ); + } else { + push.apply( results, matcherOut ); + } + } + }); +} + +function matcherFromTokens( tokens ) { + var checkContext, matcher, j, + len = tokens.length, + leadingRelative = Expr.relative[ tokens[0].type ], + implicitRelative = leadingRelative || Expr.relative[" "], + i = leadingRelative ? 1 : 0, + + // The foundational matcher ensures that elements are reachable from top-level context(s) + matchContext = addCombinator( function( elem ) { + return elem === checkContext; + }, implicitRelative, true ), + matchAnyContext = addCombinator( function( elem ) { + return indexOf.call( checkContext, elem ) > -1; + }, implicitRelative, true ), + matchers = [ function( elem, context, xml ) { + return ( !leadingRelative && ( xml || context !== outermostContext ) ) || ( + (checkContext = context).nodeType ? + matchContext( elem, context, xml ) : + matchAnyContext( elem, context, xml ) ); + } ]; + + for ( ; i < len; i++ ) { + if ( (matcher = Expr.relative[ tokens[i].type ]) ) { + matchers = [ addCombinator(elementMatcher( matchers ), matcher) ]; + } else { + matcher = Expr.filter[ tokens[i].type ].apply( null, tokens[i].matches ); + + // Return special upon seeing a positional matcher + if ( matcher[ expando ] ) { + // Find the next relative operator (if any) for proper handling + j = ++i; + for ( ; j < len; j++ ) { + if ( Expr.relative[ tokens[j].type ] ) { + break; + } + } + return setMatcher( + i > 1 && elementMatcher( matchers ), + i > 1 && toSelector( tokens.slice( 0, i - 1 ) ).replace( rtrim, "$1" ), + matcher, + i < j && matcherFromTokens( tokens.slice( i, j ) ), + j < len && matcherFromTokens( (tokens = tokens.slice( j )) ), + j < len && toSelector( tokens ) + ); + } + matchers.push( matcher ); + } + } + + return elementMatcher( matchers ); +} + +function matcherFromGroupMatchers( elementMatchers, setMatchers ) { + // A counter to specify which element is currently being matched + var matcherCachedRuns = 0, + bySet = setMatchers.length > 0, + byElement = elementMatchers.length > 0, + superMatcher = function( seed, context, xml, results, expandContext ) { + var elem, j, matcher, + setMatched = [], + matchedCount = 0, + i = "0", + unmatched = seed && [], + outermost = expandContext != null, + contextBackup = outermostContext, + // We must always have either seed elements or context + elems = seed || byElement && Expr.find["TAG"]( "*", expandContext && context.parentNode || context ), + // Use integer dirruns iff this is the outermost matcher + dirrunsUnique = (dirruns += contextBackup == null ? 1 : Math.random() || 0.1); + + if ( outermost ) { + outermostContext = context !== document && context; + cachedruns = matcherCachedRuns; + } + + // Add elements passing elementMatchers directly to results + // Keep `i` a string if there are no elements so `matchedCount` will be "00" below + for ( ; (elem = elems[i]) != null; i++ ) { + if ( byElement && elem ) { + j = 0; + while ( (matcher = elementMatchers[j++]) ) { + if ( matcher( elem, context, xml ) ) { + results.push( elem ); + break; + } + } + if ( outermost ) { + dirruns = dirrunsUnique; + cachedruns = ++matcherCachedRuns; + } + } + + // Track unmatched elements for set filters + if ( bySet ) { + // They will have gone through all possible matchers + if ( (elem = !matcher && elem) ) { + matchedCount--; + } + + // Lengthen the array for every element, matched or not + if ( seed ) { + unmatched.push( elem ); + } + } + } + + // Apply set filters to unmatched elements + matchedCount += i; + if ( bySet && i !== matchedCount ) { + j = 0; + while ( (matcher = setMatchers[j++]) ) { + matcher( unmatched, setMatched, context, xml ); + } + + if ( seed ) { + // Reintegrate element matches to eliminate the need for sorting + if ( matchedCount > 0 ) { + while ( i-- ) { + if ( !(unmatched[i] || setMatched[i]) ) { + setMatched[i] = pop.call( results ); + } + } + } + + // Discard index placeholder values to get only actual matches + setMatched = condense( setMatched ); + } + + // Add matches to results + push.apply( results, setMatched ); + + // Seedless set matches succeeding multiple successful matchers stipulate sorting + if ( outermost && !seed && setMatched.length > 0 && + ( matchedCount + setMatchers.length ) > 1 ) { + + Sizzle.uniqueSort( results ); + } + } + + // Override manipulation of globals by nested matchers + if ( outermost ) { + dirruns = dirrunsUnique; + outermostContext = contextBackup; + } + + return unmatched; + }; + + return bySet ? + markFunction( superMatcher ) : + superMatcher; +} + +compile = Sizzle.compile = function( selector, group /* Internal Use Only */ ) { + var i, + setMatchers = [], + elementMatchers = [], + cached = compilerCache[ selector + " " ]; + + if ( !cached ) { + // Generate a function of recursive functions that can be used to check each element + if ( !group ) { + group = tokenize( selector ); + } + i = group.length; + while ( i-- ) { + cached = matcherFromTokens( group[i] ); + if ( cached[ expando ] ) { + setMatchers.push( cached ); + } else { + elementMatchers.push( cached ); + } + } + + // Cache the compiled function + cached = compilerCache( selector, matcherFromGroupMatchers( elementMatchers, setMatchers ) ); + } + return cached; +}; + +function multipleContexts( selector, contexts, results ) { + var i = 0, + len = contexts.length; + for ( ; i < len; i++ ) { + Sizzle( selector, contexts[i], results ); + } + return results; +} + +function select( selector, context, results, seed ) { + var i, tokens, token, type, find, + match = tokenize( selector ); + + if ( !seed ) { + // Try to minimize operations if there is only one group + if ( match.length === 1 ) { + + // Take a shortcut and set the context if the root selector is an ID + tokens = match[0] = match[0].slice( 0 ); + if ( tokens.length > 2 && (token = tokens[0]).type === "ID" && + context.nodeType === 9 && !documentIsXML && + Expr.relative[ tokens[1].type ] ) { + + context = Expr.find["ID"]( token.matches[0].replace( runescape, funescape ), context )[0]; + if ( !context ) { + return results; + } + + selector = selector.slice( tokens.shift().value.length ); + } + + // Fetch a seed set for right-to-left matching + i = matchExpr["needsContext"].test( selector ) ? 0 : tokens.length; + while ( i-- ) { + token = tokens[i]; + + // Abort if we hit a combinator + if ( Expr.relative[ (type = token.type) ] ) { + break; + } + if ( (find = Expr.find[ type ]) ) { + // Search, expanding context for leading sibling combinators + if ( (seed = find( + token.matches[0].replace( runescape, funescape ), + rsibling.test( tokens[0].type ) && context.parentNode || context + )) ) { + + // If seed is empty or no tokens remain, we can return early + tokens.splice( i, 1 ); + selector = seed.length && toSelector( tokens ); + if ( !selector ) { + push.apply( results, slice.call( seed, 0 ) ); + return results; + } + + break; + } + } + } + } + } + + // Compile and execute a filtering function + // Provide `match` to avoid retokenization if we modified the selector above + compile( selector, match )( + seed, + context, + documentIsXML, + results, + rsibling.test( selector ) + ); + return results; +} + +// Deprecated +Expr.pseudos["nth"] = Expr.pseudos["eq"]; + +// Easy API for creating new setFilters +function setFilters() {} +Expr.filters = setFilters.prototype = Expr.pseudos; +Expr.setFilters = new setFilters(); + +// Initialize with the default document +setDocument(); + +// Override sizzle attribute retrieval +Sizzle.attr = jQuery.attr; +jQuery.find = Sizzle; +jQuery.expr = Sizzle.selectors; +jQuery.expr[":"] = jQuery.expr.pseudos; +jQuery.unique = Sizzle.uniqueSort; +jQuery.text = Sizzle.getText; +jQuery.isXMLDoc = Sizzle.isXML; +jQuery.contains = Sizzle.contains; + + +})( window ); +var runtil = /Until$/, + rparentsprev = /^(?:parents|prev(?:Until|All))/, + isSimple = /^.[^:#\[\.,]*$/, + rneedsContext = jQuery.expr.match.needsContext, + // methods guaranteed to produce a unique set when starting from a unique set + guaranteedUnique = { + children: true, + contents: true, + next: true, + prev: true + }; + +jQuery.fn.extend({ + find: function( selector ) { + var i, ret, self, + len = this.length; + + if ( typeof selector !== "string" ) { + self = this; + return this.pushStack( jQuery( selector ).filter(function() { + for ( i = 0; i < len; i++ ) { + if ( jQuery.contains( self[ i ], this ) ) { + return true; + } + } + }) ); + } + + ret = []; + for ( i = 0; i < len; i++ ) { + jQuery.find( selector, this[ i ], ret ); + } + + // Needed because $( selector, context ) becomes $( context ).find( selector ) + ret = this.pushStack( len > 1 ? jQuery.unique( ret ) : ret ); + ret.selector = ( this.selector ? this.selector + " " : "" ) + selector; + return ret; + }, + + has: function( target ) { + var i, + targets = jQuery( target, this ), + len = targets.length; + + return this.filter(function() { + for ( i = 0; i < len; i++ ) { + if ( jQuery.contains( this, targets[i] ) ) { + return true; + } + } + }); + }, + + not: function( selector ) { + return this.pushStack( winnow(this, selector, false) ); + }, + + filter: function( selector ) { + return this.pushStack( winnow(this, selector, true) ); + }, + + is: function( selector ) { + return !!selector && ( + typeof selector === "string" ? + // If this is a positional/relative selector, check membership in the returned set + // so $("p:first").is("p:last") won't return true for a doc with two "p". + rneedsContext.test( selector ) ? + jQuery( selector, this.context ).index( this[0] ) >= 0 : + jQuery.filter( selector, this ).length > 0 : + this.filter( selector ).length > 0 ); + }, + + closest: function( selectors, context ) { + var cur, + i = 0, + l = this.length, + ret = [], + pos = rneedsContext.test( selectors ) || typeof selectors !== "string" ? + jQuery( selectors, context || this.context ) : + 0; + + for ( ; i < l; i++ ) { + cur = this[i]; + + while ( cur && cur.ownerDocument && cur !== context && cur.nodeType !== 11 ) { + if ( pos ? pos.index(cur) > -1 : jQuery.find.matchesSelector(cur, selectors) ) { + ret.push( cur ); + break; + } + cur = cur.parentNode; + } + } + + return this.pushStack( ret.length > 1 ? jQuery.unique( ret ) : ret ); + }, + + // Determine the position of an element within + // the matched set of elements + index: function( elem ) { + + // No argument, return index in parent + if ( !elem ) { + return ( this[0] && this[0].parentNode ) ? this.first().prevAll().length : -1; + } + + // index in selector + if ( typeof elem === "string" ) { + return jQuery.inArray( this[0], jQuery( elem ) ); + } + + // Locate the position of the desired element + return jQuery.inArray( + // If it receives a jQuery object, the first element is used + elem.jquery ? elem[0] : elem, this ); + }, + + add: function( selector, context ) { + var set = typeof selector === "string" ? + jQuery( selector, context ) : + jQuery.makeArray( selector && selector.nodeType ? [ selector ] : selector ), + all = jQuery.merge( this.get(), set ); + + return this.pushStack( jQuery.unique(all) ); + }, + + addBack: function( selector ) { + return this.add( selector == null ? + this.prevObject : this.prevObject.filter(selector) + ); + } +}); + +jQuery.fn.andSelf = jQuery.fn.addBack; + +function sibling( cur, dir ) { + do { + cur = cur[ dir ]; + } while ( cur && cur.nodeType !== 1 ); + + return cur; +} + +jQuery.each({ + parent: function( elem ) { + var parent = elem.parentNode; + return parent && parent.nodeType !== 11 ? parent : null; + }, + parents: function( elem ) { + return jQuery.dir( elem, "parentNode" ); + }, + parentsUntil: function( elem, i, until ) { + return jQuery.dir( elem, "parentNode", until ); + }, + next: function( elem ) { + return sibling( elem, "nextSibling" ); + }, + prev: function( elem ) { + return sibling( elem, "previousSibling" ); + }, + nextAll: function( elem ) { + return jQuery.dir( elem, "nextSibling" ); + }, + prevAll: function( elem ) { + return jQuery.dir( elem, "previousSibling" ); + }, + nextUntil: function( elem, i, until ) { + return jQuery.dir( elem, "nextSibling", until ); + }, + prevUntil: function( elem, i, until ) { + return jQuery.dir( elem, "previousSibling", until ); + }, + siblings: function( elem ) { + return jQuery.sibling( ( elem.parentNode || {} ).firstChild, elem ); + }, + children: function( elem ) { + return jQuery.sibling( elem.firstChild ); + }, + contents: function( elem ) { + return jQuery.nodeName( elem, "iframe" ) ? + elem.contentDocument || elem.contentWindow.document : + jQuery.merge( [], elem.childNodes ); + } +}, function( name, fn ) { + jQuery.fn[ name ] = function( until, selector ) { + var ret = jQuery.map( this, fn, until ); + + if ( !runtil.test( name ) ) { + selector = until; + } + + if ( selector && typeof selector === "string" ) { + ret = jQuery.filter( selector, ret ); + } + + ret = this.length > 1 && !guaranteedUnique[ name ] ? jQuery.unique( ret ) : ret; + + if ( this.length > 1 && rparentsprev.test( name ) ) { + ret = ret.reverse(); + } + + return this.pushStack( ret ); + }; +}); + +jQuery.extend({ + filter: function( expr, elems, not ) { + if ( not ) { + expr = ":not(" + expr + ")"; + } + + return elems.length === 1 ? + jQuery.find.matchesSelector(elems[0], expr) ? [ elems[0] ] : [] : + jQuery.find.matches(expr, elems); + }, + + dir: function( elem, dir, until ) { + var matched = [], + cur = elem[ dir ]; + + while ( cur && cur.nodeType !== 9 && (until === undefined || cur.nodeType !== 1 || !jQuery( cur ).is( until )) ) { + if ( cur.nodeType === 1 ) { + matched.push( cur ); + } + cur = cur[dir]; + } + return matched; + }, + + sibling: function( n, elem ) { + var r = []; + + for ( ; n; n = n.nextSibling ) { + if ( n.nodeType === 1 && n !== elem ) { + r.push( n ); + } + } + + return r; + } +}); + +// Implement the identical functionality for filter and not +function winnow( elements, qualifier, keep ) { + + // Can't pass null or undefined to indexOf in Firefox 4 + // Set to 0 to skip string check + qualifier = qualifier || 0; + + if ( jQuery.isFunction( qualifier ) ) { + return jQuery.grep(elements, function( elem, i ) { + var retVal = !!qualifier.call( elem, i, elem ); + return retVal === keep; + }); + + } else if ( qualifier.nodeType ) { + return jQuery.grep(elements, function( elem ) { + return ( elem === qualifier ) === keep; + }); + + } else if ( typeof qualifier === "string" ) { + var filtered = jQuery.grep(elements, function( elem ) { + return elem.nodeType === 1; + }); + + if ( isSimple.test( qualifier ) ) { + return jQuery.filter(qualifier, filtered, !keep); + } else { + qualifier = jQuery.filter( qualifier, filtered ); + } + } + + return jQuery.grep(elements, function( elem ) { + return ( jQuery.inArray( elem, qualifier ) >= 0 ) === keep; + }); +} +function createSafeFragment( document ) { + var list = nodeNames.split( "|" ), + safeFrag = document.createDocumentFragment(); + + if ( safeFrag.createElement ) { + while ( list.length ) { + safeFrag.createElement( + list.pop() + ); + } + } + return safeFrag; +} + +var nodeNames = "abbr|article|aside|audio|bdi|canvas|data|datalist|details|figcaption|figure|footer|" + + "header|hgroup|mark|meter|nav|output|progress|section|summary|time|video", + rinlinejQuery = / jQuery\d+="(?:null|\d+)"/g, + rnoshimcache = new RegExp("<(?:" + nodeNames + ")[\\s/>]", "i"), + rleadingWhitespace = /^\s+/, + rxhtmlTag = /<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:]+)[^>]*)\/>/gi, + rtagName = /<([\w:]+)/, + rtbody = /\s*$/g, + + // We have to close these tags to support XHTML (#13200) + wrapMap = { + option: [ 1, "" ], + legend: [ 1, "
", "
" ], + area: [ 1, "", "" ], + param: [ 1, "", "" ], + thead: [ 1, "", "
" ], + tr: [ 2, "", "
" ], + col: [ 2, "", "
" ], + td: [ 3, "", "
" ], + + // IE6-8 can't serialize link, script, style, or any html5 (NoScope) tags, + // unless wrapped in a div with non-breaking characters in front of it. + _default: jQuery.support.htmlSerialize ? [ 0, "", "" ] : [ 1, "X
", "
" ] + }, + safeFragment = createSafeFragment( document ), + fragmentDiv = safeFragment.appendChild( document.createElement("div") ); + +wrapMap.optgroup = wrapMap.option; +wrapMap.tbody = wrapMap.tfoot = wrapMap.colgroup = wrapMap.caption = wrapMap.thead; +wrapMap.th = wrapMap.td; + +jQuery.fn.extend({ + text: function( value ) { + return jQuery.access( this, function( value ) { + return value === undefined ? + jQuery.text( this ) : + this.empty().append( ( this[0] && this[0].ownerDocument || document ).createTextNode( value ) ); + }, null, value, arguments.length ); + }, + + wrapAll: function( html ) { + if ( jQuery.isFunction( html ) ) { + return this.each(function(i) { + jQuery(this).wrapAll( html.call(this, i) ); + }); + } + + if ( this[0] ) { + // The elements to wrap the target around + var wrap = jQuery( html, this[0].ownerDocument ).eq(0).clone(true); + + if ( this[0].parentNode ) { + wrap.insertBefore( this[0] ); + } + + wrap.map(function() { + var elem = this; + + while ( elem.firstChild && elem.firstChild.nodeType === 1 ) { + elem = elem.firstChild; + } + + return elem; + }).append( this ); + } + + return this; + }, + + wrapInner: function( html ) { + if ( jQuery.isFunction( html ) ) { + return this.each(function(i) { + jQuery(this).wrapInner( html.call(this, i) ); + }); + } + + return this.each(function() { + var self = jQuery( this ), + contents = self.contents(); + + if ( contents.length ) { + contents.wrapAll( html ); + + } else { + self.append( html ); + } + }); + }, + + wrap: function( html ) { + var isFunction = jQuery.isFunction( html ); + + return this.each(function(i) { + jQuery( this ).wrapAll( isFunction ? html.call(this, i) : html ); + }); + }, + + unwrap: function() { + return this.parent().each(function() { + if ( !jQuery.nodeName( this, "body" ) ) { + jQuery( this ).replaceWith( this.childNodes ); + } + }).end(); + }, + + append: function() { + return this.domManip(arguments, true, function( elem ) { + if ( this.nodeType === 1 || this.nodeType === 11 || this.nodeType === 9 ) { + this.appendChild( elem ); + } + }); + }, + + prepend: function() { + return this.domManip(arguments, true, function( elem ) { + if ( this.nodeType === 1 || this.nodeType === 11 || this.nodeType === 9 ) { + this.insertBefore( elem, this.firstChild ); + } + }); + }, + + before: function() { + return this.domManip( arguments, false, function( elem ) { + if ( this.parentNode ) { + this.parentNode.insertBefore( elem, this ); + } + }); + }, + + after: function() { + return this.domManip( arguments, false, function( elem ) { + if ( this.parentNode ) { + this.parentNode.insertBefore( elem, this.nextSibling ); + } + }); + }, + + // keepData is for internal use only--do not document + remove: function( selector, keepData ) { + var elem, + i = 0; + + for ( ; (elem = this[i]) != null; i++ ) { + if ( !selector || jQuery.filter( selector, [ elem ] ).length > 0 ) { + if ( !keepData && elem.nodeType === 1 ) { + jQuery.cleanData( getAll( elem ) ); + } + + if ( elem.parentNode ) { + if ( keepData && jQuery.contains( elem.ownerDocument, elem ) ) { + setGlobalEval( getAll( elem, "script" ) ); + } + elem.parentNode.removeChild( elem ); + } + } + } + + return this; + }, + + empty: function() { + var elem, + i = 0; + + for ( ; (elem = this[i]) != null; i++ ) { + // Remove element nodes and prevent memory leaks + if ( elem.nodeType === 1 ) { + jQuery.cleanData( getAll( elem, false ) ); + } + + // Remove any remaining nodes + while ( elem.firstChild ) { + elem.removeChild( elem.firstChild ); + } + + // If this is a select, ensure that it displays empty (#12336) + // Support: IE<9 + if ( elem.options && jQuery.nodeName( elem, "select" ) ) { + elem.options.length = 0; + } + } + + return this; + }, + + clone: function( dataAndEvents, deepDataAndEvents ) { + dataAndEvents = dataAndEvents == null ? false : dataAndEvents; + deepDataAndEvents = deepDataAndEvents == null ? dataAndEvents : deepDataAndEvents; + + return this.map( function () { + return jQuery.clone( this, dataAndEvents, deepDataAndEvents ); + }); + }, + + html: function( value ) { + return jQuery.access( this, function( value ) { + var elem = this[0] || {}, + i = 0, + l = this.length; + + if ( value === undefined ) { + return elem.nodeType === 1 ? + elem.innerHTML.replace( rinlinejQuery, "" ) : + undefined; + } + + // See if we can take a shortcut and just use innerHTML + if ( typeof value === "string" && !rnoInnerhtml.test( value ) && + ( jQuery.support.htmlSerialize || !rnoshimcache.test( value ) ) && + ( jQuery.support.leadingWhitespace || !rleadingWhitespace.test( value ) ) && + !wrapMap[ ( rtagName.exec( value ) || ["", ""] )[1].toLowerCase() ] ) { + + value = value.replace( rxhtmlTag, "<$1>" ); + + try { + for (; i < l; i++ ) { + // Remove element nodes and prevent memory leaks + elem = this[i] || {}; + if ( elem.nodeType === 1 ) { + jQuery.cleanData( getAll( elem, false ) ); + elem.innerHTML = value; + } + } + + elem = 0; + + // If using innerHTML throws an exception, use the fallback method + } catch(e) {} + } + + if ( elem ) { + this.empty().append( value ); + } + }, null, value, arguments.length ); + }, + + replaceWith: function( value ) { + var isFunc = jQuery.isFunction( value ); + + // Make sure that the elements are removed from the DOM before they are inserted + // this can help fix replacing a parent with child elements + if ( !isFunc && typeof value !== "string" ) { + value = jQuery( value ).not( this ).detach(); + } + + return this.domManip( [ value ], true, function( elem ) { + var next = this.nextSibling, + parent = this.parentNode; + + if ( parent ) { + jQuery( this ).remove(); + parent.insertBefore( elem, next ); + } + }); + }, + + detach: function( selector ) { + return this.remove( selector, true ); + }, + + domManip: function( args, table, callback ) { + + // Flatten any nested arrays + args = core_concat.apply( [], args ); + + var first, node, hasScripts, + scripts, doc, fragment, + i = 0, + l = this.length, + set = this, + iNoClone = l - 1, + value = args[0], + isFunction = jQuery.isFunction( value ); + + // We can't cloneNode fragments that contain checked, in WebKit + if ( isFunction || !( l <= 1 || typeof value !== "string" || jQuery.support.checkClone || !rchecked.test( value ) ) ) { + return this.each(function( index ) { + var self = set.eq( index ); + if ( isFunction ) { + args[0] = value.call( this, index, table ? self.html() : undefined ); + } + self.domManip( args, table, callback ); + }); + } + + if ( l ) { + fragment = jQuery.buildFragment( args, this[ 0 ].ownerDocument, false, this ); + first = fragment.firstChild; + + if ( fragment.childNodes.length === 1 ) { + fragment = first; + } + + if ( first ) { + table = table && jQuery.nodeName( first, "tr" ); + scripts = jQuery.map( getAll( fragment, "script" ), disableScript ); + hasScripts = scripts.length; + + // Use the original fragment for the last item instead of the first because it can end up + // being emptied incorrectly in certain situations (#8070). + for ( ; i < l; i++ ) { + node = fragment; + + if ( i !== iNoClone ) { + node = jQuery.clone( node, true, true ); + + // Keep references to cloned scripts for later restoration + if ( hasScripts ) { + jQuery.merge( scripts, getAll( node, "script" ) ); + } + } + + callback.call( + table && jQuery.nodeName( this[i], "table" ) ? + findOrAppend( this[i], "tbody" ) : + this[i], + node, + i + ); + } + + if ( hasScripts ) { + doc = scripts[ scripts.length - 1 ].ownerDocument; + + // Reenable scripts + jQuery.map( scripts, restoreScript ); + + // Evaluate executable scripts on first document insertion + for ( i = 0; i < hasScripts; i++ ) { + node = scripts[ i ]; + if ( rscriptType.test( node.type || "" ) && + !jQuery._data( node, "globalEval" ) && jQuery.contains( doc, node ) ) { + + if ( node.src ) { + // Hope ajax is available... + jQuery.ajax({ + url: node.src, + type: "GET", + dataType: "script", + async: false, + global: false, + "throws": true + }); + } else { + jQuery.globalEval( ( node.text || node.textContent || node.innerHTML || "" ).replace( rcleanScript, "" ) ); + } + } + } + } + + // Fix #11809: Avoid leaking memory + fragment = first = null; + } + } + + return this; + } +}); + +function findOrAppend( elem, tag ) { + return elem.getElementsByTagName( tag )[0] || elem.appendChild( elem.ownerDocument.createElement( tag ) ); +} + +// Replace/restore the type attribute of script elements for safe DOM manipulation +function disableScript( elem ) { + var attr = elem.getAttributeNode("type"); + elem.type = ( attr && attr.specified ) + "/" + elem.type; + return elem; +} +function restoreScript( elem ) { + var match = rscriptTypeMasked.exec( elem.type ); + if ( match ) { + elem.type = match[1]; + } else { + elem.removeAttribute("type"); + } + return elem; +} + +// Mark scripts as having already been evaluated +function setGlobalEval( elems, refElements ) { + var elem, + i = 0; + for ( ; (elem = elems[i]) != null; i++ ) { + jQuery._data( elem, "globalEval", !refElements || jQuery._data( refElements[i], "globalEval" ) ); + } +} + +function cloneCopyEvent( src, dest ) { + + if ( dest.nodeType !== 1 || !jQuery.hasData( src ) ) { + return; + } + + var type, i, l, + oldData = jQuery._data( src ), + curData = jQuery._data( dest, oldData ), + events = oldData.events; + + if ( events ) { + delete curData.handle; + curData.events = {}; + + for ( type in events ) { + for ( i = 0, l = events[ type ].length; i < l; i++ ) { + jQuery.event.add( dest, type, events[ type ][ i ] ); + } + } + } + + // make the cloned public data object a copy from the original + if ( curData.data ) { + curData.data = jQuery.extend( {}, curData.data ); + } +} + +function fixCloneNodeIssues( src, dest ) { + var nodeName, e, data; + + // We do not need to do anything for non-Elements + if ( dest.nodeType !== 1 ) { + return; + } + + nodeName = dest.nodeName.toLowerCase(); + + // IE6-8 copies events bound via attachEvent when using cloneNode. + if ( !jQuery.support.noCloneEvent && dest[ jQuery.expando ] ) { + data = jQuery._data( dest ); + + for ( e in data.events ) { + jQuery.removeEvent( dest, e, data.handle ); + } + + // Event data gets referenced instead of copied if the expando gets copied too + dest.removeAttribute( jQuery.expando ); + } + + // IE blanks contents when cloning scripts, and tries to evaluate newly-set text + if ( nodeName === "script" && dest.text !== src.text ) { + disableScript( dest ).text = src.text; + restoreScript( dest ); + + // IE6-10 improperly clones children of object elements using classid. + // IE10 throws NoModificationAllowedError if parent is null, #12132. + } else if ( nodeName === "object" ) { + if ( dest.parentNode ) { + dest.outerHTML = src.outerHTML; + } + + // This path appears unavoidable for IE9. When cloning an object + // element in IE9, the outerHTML strategy above is not sufficient. + // If the src has innerHTML and the destination does not, + // copy the src.innerHTML into the dest.innerHTML. #10324 + if ( jQuery.support.html5Clone && ( src.innerHTML && !jQuery.trim(dest.innerHTML) ) ) { + dest.innerHTML = src.innerHTML; + } + + } else if ( nodeName === "input" && manipulation_rcheckableType.test( src.type ) ) { + // IE6-8 fails to persist the checked state of a cloned checkbox + // or radio button. Worse, IE6-7 fail to give the cloned element + // a checked appearance if the defaultChecked value isn't also set + + dest.defaultChecked = dest.checked = src.checked; + + // IE6-7 get confused and end up setting the value of a cloned + // checkbox/radio button to an empty string instead of "on" + if ( dest.value !== src.value ) { + dest.value = src.value; + } + + // IE6-8 fails to return the selected option to the default selected + // state when cloning options + } else if ( nodeName === "option" ) { + dest.defaultSelected = dest.selected = src.defaultSelected; + + // IE6-8 fails to set the defaultValue to the correct value when + // cloning other types of input fields + } else if ( nodeName === "input" || nodeName === "textarea" ) { + dest.defaultValue = src.defaultValue; + } +} + +jQuery.each({ + appendTo: "append", + prependTo: "prepend", + insertBefore: "before", + insertAfter: "after", + replaceAll: "replaceWith" +}, function( name, original ) { + jQuery.fn[ name ] = function( selector ) { + var elems, + i = 0, + ret = [], + insert = jQuery( selector ), + last = insert.length - 1; + + for ( ; i <= last; i++ ) { + elems = i === last ? this : this.clone(true); + jQuery( insert[i] )[ original ]( elems ); + + // Modern browsers can apply jQuery collections as arrays, but oldIE needs a .get() + core_push.apply( ret, elems.get() ); + } + + return this.pushStack( ret ); + }; +}); + +function getAll( context, tag ) { + var elems, elem, + i = 0, + found = typeof context.getElementsByTagName !== core_strundefined ? context.getElementsByTagName( tag || "*" ) : + typeof context.querySelectorAll !== core_strundefined ? context.querySelectorAll( tag || "*" ) : + undefined; + + if ( !found ) { + for ( found = [], elems = context.childNodes || context; (elem = elems[i]) != null; i++ ) { + if ( !tag || jQuery.nodeName( elem, tag ) ) { + found.push( elem ); + } else { + jQuery.merge( found, getAll( elem, tag ) ); + } + } + } + + return tag === undefined || tag && jQuery.nodeName( context, tag ) ? + jQuery.merge( [ context ], found ) : + found; +} + +// Used in buildFragment, fixes the defaultChecked property +function fixDefaultChecked( elem ) { + if ( manipulation_rcheckableType.test( elem.type ) ) { + elem.defaultChecked = elem.checked; + } +} + +jQuery.extend({ + clone: function( elem, dataAndEvents, deepDataAndEvents ) { + var destElements, node, clone, i, srcElements, + inPage = jQuery.contains( elem.ownerDocument, elem ); + + if ( jQuery.support.html5Clone || jQuery.isXMLDoc(elem) || !rnoshimcache.test( "<" + elem.nodeName + ">" ) ) { + clone = elem.cloneNode( true ); + + // IE<=8 does not properly clone detached, unknown element nodes + } else { + fragmentDiv.innerHTML = elem.outerHTML; + fragmentDiv.removeChild( clone = fragmentDiv.firstChild ); + } + + if ( (!jQuery.support.noCloneEvent || !jQuery.support.noCloneChecked) && + (elem.nodeType === 1 || elem.nodeType === 11) && !jQuery.isXMLDoc(elem) ) { + + // We eschew Sizzle here for performance reasons: http://jsperf.com/getall-vs-sizzle/2 + destElements = getAll( clone ); + srcElements = getAll( elem ); + + // Fix all IE cloning issues + for ( i = 0; (node = srcElements[i]) != null; ++i ) { + // Ensure that the destination node is not null; Fixes #9587 + if ( destElements[i] ) { + fixCloneNodeIssues( node, destElements[i] ); + } + } + } + + // Copy the events from the original to the clone + if ( dataAndEvents ) { + if ( deepDataAndEvents ) { + srcElements = srcElements || getAll( elem ); + destElements = destElements || getAll( clone ); + + for ( i = 0; (node = srcElements[i]) != null; i++ ) { + cloneCopyEvent( node, destElements[i] ); + } + } else { + cloneCopyEvent( elem, clone ); + } + } + + // Preserve script evaluation history + destElements = getAll( clone, "script" ); + if ( destElements.length > 0 ) { + setGlobalEval( destElements, !inPage && getAll( elem, "script" ) ); + } + + destElements = srcElements = node = null; + + // Return the cloned set + return clone; + }, + + buildFragment: function( elems, context, scripts, selection ) { + var j, elem, contains, + tmp, tag, tbody, wrap, + l = elems.length, + + // Ensure a safe fragment + safe = createSafeFragment( context ), + + nodes = [], + i = 0; + + for ( ; i < l; i++ ) { + elem = elems[ i ]; + + if ( elem || elem === 0 ) { + + // Add nodes directly + if ( jQuery.type( elem ) === "object" ) { + jQuery.merge( nodes, elem.nodeType ? [ elem ] : elem ); + + // Convert non-html into a text node + } else if ( !rhtml.test( elem ) ) { + nodes.push( context.createTextNode( elem ) ); + + // Convert html into DOM nodes + } else { + tmp = tmp || safe.appendChild( context.createElement("div") ); + + // Deserialize a standard representation + tag = ( rtagName.exec( elem ) || ["", ""] )[1].toLowerCase(); + wrap = wrapMap[ tag ] || wrapMap._default; + + tmp.innerHTML = wrap[1] + elem.replace( rxhtmlTag, "<$1>" ) + wrap[2]; + + // Descend through wrappers to the right content + j = wrap[0]; + while ( j-- ) { + tmp = tmp.lastChild; + } + + // Manually add leading whitespace removed by IE + if ( !jQuery.support.leadingWhitespace && rleadingWhitespace.test( elem ) ) { + nodes.push( context.createTextNode( rleadingWhitespace.exec( elem )[0] ) ); + } + + // Remove IE's autoinserted from table fragments + if ( !jQuery.support.tbody ) { + + // String was a , *may* have spurious + elem = tag === "table" && !rtbody.test( elem ) ? + tmp.firstChild : + + // String was a bare or + wrap[1] === "
" && !rtbody.test( elem ) ? + tmp : + 0; + + j = elem && elem.childNodes.length; + while ( j-- ) { + if ( jQuery.nodeName( (tbody = elem.childNodes[j]), "tbody" ) && !tbody.childNodes.length ) { + elem.removeChild( tbody ); + } + } + } + + jQuery.merge( nodes, tmp.childNodes ); + + // Fix #12392 for WebKit and IE > 9 + tmp.textContent = ""; + + // Fix #12392 for oldIE + while ( tmp.firstChild ) { + tmp.removeChild( tmp.firstChild ); + } + + // Remember the top-level container for proper cleanup + tmp = safe.lastChild; + } + } + } + + // Fix #11356: Clear elements from fragment + if ( tmp ) { + safe.removeChild( tmp ); + } + + // Reset defaultChecked for any radios and checkboxes + // about to be appended to the DOM in IE 6/7 (#8060) + if ( !jQuery.support.appendChecked ) { + jQuery.grep( getAll( nodes, "input" ), fixDefaultChecked ); + } + + i = 0; + while ( (elem = nodes[ i++ ]) ) { + + // #4087 - If origin and destination elements are the same, and this is + // that element, do not do anything + if ( selection && jQuery.inArray( elem, selection ) !== -1 ) { + continue; + } + + contains = jQuery.contains( elem.ownerDocument, elem ); + + // Append to fragment + tmp = getAll( safe.appendChild( elem ), "script" ); + + // Preserve script evaluation history + if ( contains ) { + setGlobalEval( tmp ); + } + + // Capture executables + if ( scripts ) { + j = 0; + while ( (elem = tmp[ j++ ]) ) { + if ( rscriptType.test( elem.type || "" ) ) { + scripts.push( elem ); + } + } + } + } + + tmp = null; + + return safe; + }, + + cleanData: function( elems, /* internal */ acceptData ) { + var elem, type, id, data, + i = 0, + internalKey = jQuery.expando, + cache = jQuery.cache, + deleteExpando = jQuery.support.deleteExpando, + special = jQuery.event.special; + + for ( ; (elem = elems[i]) != null; i++ ) { + + if ( acceptData || jQuery.acceptData( elem ) ) { + + id = elem[ internalKey ]; + data = id && cache[ id ]; + + if ( data ) { + if ( data.events ) { + for ( type in data.events ) { + if ( special[ type ] ) { + jQuery.event.remove( elem, type ); + + // This is a shortcut to avoid jQuery.event.remove's overhead + } else { + jQuery.removeEvent( elem, type, data.handle ); + } + } + } + + // Remove cache only if it was not already removed by jQuery.event.remove + if ( cache[ id ] ) { + + delete cache[ id ]; + + // IE does not allow us to delete expando properties from nodes, + // nor does it have a removeAttribute function on Document nodes; + // we must handle all of these cases + if ( deleteExpando ) { + delete elem[ internalKey ]; + + } else if ( typeof elem.removeAttribute !== core_strundefined ) { + elem.removeAttribute( internalKey ); + + } else { + elem[ internalKey ] = null; + } + + core_deletedIds.push( id ); + } + } + } + } + } +}); +var iframe, getStyles, curCSS, + ralpha = /alpha\([^)]*\)/i, + ropacity = /opacity\s*=\s*([^)]*)/, + rposition = /^(top|right|bottom|left)$/, + // swappable if display is none or starts with table except "table", "table-cell", or "table-caption" + // see here for display values: https://developer.mozilla.org/en-US/docs/CSS/display + rdisplayswap = /^(none|table(?!-c[ea]).+)/, + rmargin = /^margin/, + rnumsplit = new RegExp( "^(" + core_pnum + ")(.*)$", "i" ), + rnumnonpx = new RegExp( "^(" + core_pnum + ")(?!px)[a-z%]+$", "i" ), + rrelNum = new RegExp( "^([+-])=(" + core_pnum + ")", "i" ), + elemdisplay = { BODY: "block" }, + + cssShow = { position: "absolute", visibility: "hidden", display: "block" }, + cssNormalTransform = { + letterSpacing: 0, + fontWeight: 400 + }, + + cssExpand = [ "Top", "Right", "Bottom", "Left" ], + cssPrefixes = [ "Webkit", "O", "Moz", "ms" ]; + +// return a css property mapped to a potentially vendor prefixed property +function vendorPropName( style, name ) { + + // shortcut for names that are not vendor prefixed + if ( name in style ) { + return name; + } + + // check for vendor prefixed names + var capName = name.charAt(0).toUpperCase() + name.slice(1), + origName = name, + i = cssPrefixes.length; + + while ( i-- ) { + name = cssPrefixes[ i ] + capName; + if ( name in style ) { + return name; + } + } + + return origName; +} + +function isHidden( elem, el ) { + // isHidden might be called from jQuery#filter function; + // in that case, element will be second argument + elem = el || elem; + return jQuery.css( elem, "display" ) === "none" || !jQuery.contains( elem.ownerDocument, elem ); +} + +function showHide( elements, show ) { + var display, elem, hidden, + values = [], + index = 0, + length = elements.length; + + for ( ; index < length; index++ ) { + elem = elements[ index ]; + if ( !elem.style ) { + continue; + } + + values[ index ] = jQuery._data( elem, "olddisplay" ); + display = elem.style.display; + if ( show ) { + // Reset the inline display of this element to learn if it is + // being hidden by cascaded rules or not + if ( !values[ index ] && display === "none" ) { + elem.style.display = ""; + } + + // Set elements which have been overridden with display: none + // in a stylesheet to whatever the default browser style is + // for such an element + if ( elem.style.display === "" && isHidden( elem ) ) { + values[ index ] = jQuery._data( elem, "olddisplay", css_defaultDisplay(elem.nodeName) ); + } + } else { + + if ( !values[ index ] ) { + hidden = isHidden( elem ); + + if ( display && display !== "none" || !hidden ) { + jQuery._data( elem, "olddisplay", hidden ? display : jQuery.css( elem, "display" ) ); + } + } + } + } + + // Set the display of most of the elements in a second loop + // to avoid the constant reflow + for ( index = 0; index < length; index++ ) { + elem = elements[ index ]; + if ( !elem.style ) { + continue; + } + if ( !show || elem.style.display === "none" || elem.style.display === "" ) { + elem.style.display = show ? values[ index ] || "" : "none"; + } + } + + return elements; +} + +jQuery.fn.extend({ + css: function( name, value ) { + return jQuery.access( this, function( elem, name, value ) { + var len, styles, + map = {}, + i = 0; + + if ( jQuery.isArray( name ) ) { + styles = getStyles( elem ); + len = name.length; + + for ( ; i < len; i++ ) { + map[ name[ i ] ] = jQuery.css( elem, name[ i ], false, styles ); + } + + return map; + } + + return value !== undefined ? + jQuery.style( elem, name, value ) : + jQuery.css( elem, name ); + }, name, value, arguments.length > 1 ); + }, + show: function() { + return showHide( this, true ); + }, + hide: function() { + return showHide( this ); + }, + toggle: function( state ) { + var bool = typeof state === "boolean"; + + return this.each(function() { + if ( bool ? state : isHidden( this ) ) { + jQuery( this ).show(); + } else { + jQuery( this ).hide(); + } + }); + } +}); + +jQuery.extend({ + // Add in style property hooks for overriding the default + // behavior of getting and setting a style property + cssHooks: { + opacity: { + get: function( elem, computed ) { + if ( computed ) { + // We should always get a number back from opacity + var ret = curCSS( elem, "opacity" ); + return ret === "" ? "1" : ret; + } + } + } + }, + + // Exclude the following css properties to add px + cssNumber: { + "columnCount": true, + "fillOpacity": true, + "fontWeight": true, + "lineHeight": true, + "opacity": true, + "orphans": true, + "widows": true, + "zIndex": true, + "zoom": true + }, + + // Add in properties whose names you wish to fix before + // setting or getting the value + cssProps: { + // normalize float css property + "float": jQuery.support.cssFloat ? "cssFloat" : "styleFloat" + }, + + // Get and set the style property on a DOM Node + style: function( elem, name, value, extra ) { + // Don't set styles on text and comment nodes + if ( !elem || elem.nodeType === 3 || elem.nodeType === 8 || !elem.style ) { + return; + } + + // Make sure that we're working with the right name + var ret, type, hooks, + origName = jQuery.camelCase( name ), + style = elem.style; + + name = jQuery.cssProps[ origName ] || ( jQuery.cssProps[ origName ] = vendorPropName( style, origName ) ); + + // gets hook for the prefixed version + // followed by the unprefixed version + hooks = jQuery.cssHooks[ name ] || jQuery.cssHooks[ origName ]; + + // Check if we're setting a value + if ( value !== undefined ) { + type = typeof value; + + // convert relative number strings (+= or -=) to relative numbers. #7345 + if ( type === "string" && (ret = rrelNum.exec( value )) ) { + value = ( ret[1] + 1 ) * ret[2] + parseFloat( jQuery.css( elem, name ) ); + // Fixes bug #9237 + type = "number"; + } + + // Make sure that NaN and null values aren't set. See: #7116 + if ( value == null || type === "number" && isNaN( value ) ) { + return; + } + + // If a number was passed in, add 'px' to the (except for certain CSS properties) + if ( type === "number" && !jQuery.cssNumber[ origName ] ) { + value += "px"; + } + + // Fixes #8908, it can be done more correctly by specifing setters in cssHooks, + // but it would mean to define eight (for every problematic property) identical functions + if ( !jQuery.support.clearCloneStyle && value === "" && name.indexOf("background") === 0 ) { + style[ name ] = "inherit"; + } + + // If a hook was provided, use that value, otherwise just set the specified value + if ( !hooks || !("set" in hooks) || (value = hooks.set( elem, value, extra )) !== undefined ) { + + // Wrapped to prevent IE from throwing errors when 'invalid' values are provided + // Fixes bug #5509 + try { + style[ name ] = value; + } catch(e) {} + } + + } else { + // If a hook was provided get the non-computed value from there + if ( hooks && "get" in hooks && (ret = hooks.get( elem, false, extra )) !== undefined ) { + return ret; + } + + // Otherwise just get the value from the style object + return style[ name ]; + } + }, + + css: function( elem, name, extra, styles ) { + var num, val, hooks, + origName = jQuery.camelCase( name ); + + // Make sure that we're working with the right name + name = jQuery.cssProps[ origName ] || ( jQuery.cssProps[ origName ] = vendorPropName( elem.style, origName ) ); + + // gets hook for the prefixed version + // followed by the unprefixed version + hooks = jQuery.cssHooks[ name ] || jQuery.cssHooks[ origName ]; + + // If a hook was provided get the computed value from there + if ( hooks && "get" in hooks ) { + val = hooks.get( elem, true, extra ); + } + + // Otherwise, if a way to get the computed value exists, use that + if ( val === undefined ) { + val = curCSS( elem, name, styles ); + } + + //convert "normal" to computed value + if ( val === "normal" && name in cssNormalTransform ) { + val = cssNormalTransform[ name ]; + } + + // Return, converting to number if forced or a qualifier was provided and val looks numeric + if ( extra === "" || extra ) { + num = parseFloat( val ); + return extra === true || jQuery.isNumeric( num ) ? num || 0 : val; + } + return val; + }, + + // A method for quickly swapping in/out CSS properties to get correct calculations + swap: function( elem, options, callback, args ) { + var ret, name, + old = {}; + + // Remember the old values, and insert the new ones + for ( name in options ) { + old[ name ] = elem.style[ name ]; + elem.style[ name ] = options[ name ]; + } + + ret = callback.apply( elem, args || [] ); + + // Revert the old values + for ( name in options ) { + elem.style[ name ] = old[ name ]; + } + + return ret; + } +}); + +// NOTE: we've included the "window" in window.getComputedStyle +// because jsdom on node.js will break without it. +if ( window.getComputedStyle ) { + getStyles = function( elem ) { + return window.getComputedStyle( elem, null ); + }; + + curCSS = function( elem, name, _computed ) { + var width, minWidth, maxWidth, + computed = _computed || getStyles( elem ), + + // getPropertyValue is only needed for .css('filter') in IE9, see #12537 + ret = computed ? computed.getPropertyValue( name ) || computed[ name ] : undefined, + style = elem.style; + + if ( computed ) { + + if ( ret === "" && !jQuery.contains( elem.ownerDocument, elem ) ) { + ret = jQuery.style( elem, name ); + } + + // A tribute to the "awesome hack by Dean Edwards" + // Chrome < 17 and Safari 5.0 uses "computed value" instead of "used value" for margin-right + // Safari 5.1.7 (at least) returns percentage for a larger set of values, but width seems to be reliably pixels + // this is against the CSSOM draft spec: http://dev.w3.org/csswg/cssom/#resolved-values + if ( rnumnonpx.test( ret ) && rmargin.test( name ) ) { + + // Remember the original values + width = style.width; + minWidth = style.minWidth; + maxWidth = style.maxWidth; + + // Put in the new values to get a computed value out + style.minWidth = style.maxWidth = style.width = ret; + ret = computed.width; + + // Revert the changed values + style.width = width; + style.minWidth = minWidth; + style.maxWidth = maxWidth; + } + } + + return ret; + }; +} else if ( document.documentElement.currentStyle ) { + getStyles = function( elem ) { + return elem.currentStyle; + }; + + curCSS = function( elem, name, _computed ) { + var left, rs, rsLeft, + computed = _computed || getStyles( elem ), + ret = computed ? computed[ name ] : undefined, + style = elem.style; + + // Avoid setting ret to empty string here + // so we don't default to auto + if ( ret == null && style && style[ name ] ) { + ret = style[ name ]; + } + + // From the awesome hack by Dean Edwards + // http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291 + + // If we're not dealing with a regular pixel number + // but a number that has a weird ending, we need to convert it to pixels + // but not position css attributes, as those are proportional to the parent element instead + // and we can't measure the parent instead because it might trigger a "stacking dolls" problem + if ( rnumnonpx.test( ret ) && !rposition.test( name ) ) { + + // Remember the original values + left = style.left; + rs = elem.runtimeStyle; + rsLeft = rs && rs.left; + + // Put in the new values to get a computed value out + if ( rsLeft ) { + rs.left = elem.currentStyle.left; + } + style.left = name === "fontSize" ? "1em" : ret; + ret = style.pixelLeft + "px"; + + // Revert the changed values + style.left = left; + if ( rsLeft ) { + rs.left = rsLeft; + } + } + + return ret === "" ? "auto" : ret; + }; +} + +function setPositiveNumber( elem, value, subtract ) { + var matches = rnumsplit.exec( value ); + return matches ? + // Guard against undefined "subtract", e.g., when used as in cssHooks + Math.max( 0, matches[ 1 ] - ( subtract || 0 ) ) + ( matches[ 2 ] || "px" ) : + value; +} + +function augmentWidthOrHeight( elem, name, extra, isBorderBox, styles ) { + var i = extra === ( isBorderBox ? "border" : "content" ) ? + // If we already have the right measurement, avoid augmentation + 4 : + // Otherwise initialize for horizontal or vertical properties + name === "width" ? 1 : 0, + + val = 0; + + for ( ; i < 4; i += 2 ) { + // both box models exclude margin, so add it if we want it + if ( extra === "margin" ) { + val += jQuery.css( elem, extra + cssExpand[ i ], true, styles ); + } + + if ( isBorderBox ) { + // border-box includes padding, so remove it if we want content + if ( extra === "content" ) { + val -= jQuery.css( elem, "padding" + cssExpand[ i ], true, styles ); + } + + // at this point, extra isn't border nor margin, so remove border + if ( extra !== "margin" ) { + val -= jQuery.css( elem, "border" + cssExpand[ i ] + "Width", true, styles ); + } + } else { + // at this point, extra isn't content, so add padding + val += jQuery.css( elem, "padding" + cssExpand[ i ], true, styles ); + + // at this point, extra isn't content nor padding, so add border + if ( extra !== "padding" ) { + val += jQuery.css( elem, "border" + cssExpand[ i ] + "Width", true, styles ); + } + } + } + + return val; +} + +function getWidthOrHeight( elem, name, extra ) { + + // Start with offset property, which is equivalent to the border-box value + var valueIsBorderBox = true, + val = name === "width" ? elem.offsetWidth : elem.offsetHeight, + styles = getStyles( elem ), + isBorderBox = jQuery.support.boxSizing && jQuery.css( elem, "boxSizing", false, styles ) === "border-box"; + + // some non-html elements return undefined for offsetWidth, so check for null/undefined + // svg - https://bugzilla.mozilla.org/show_bug.cgi?id=649285 + // MathML - https://bugzilla.mozilla.org/show_bug.cgi?id=491668 + if ( val <= 0 || val == null ) { + // Fall back to computed then uncomputed css if necessary + val = curCSS( elem, name, styles ); + if ( val < 0 || val == null ) { + val = elem.style[ name ]; + } + + // Computed unit is not pixels. Stop here and return. + if ( rnumnonpx.test(val) ) { + return val; + } + + // we need the check for style in case a browser which returns unreliable values + // for getComputedStyle silently falls back to the reliable elem.style + valueIsBorderBox = isBorderBox && ( jQuery.support.boxSizingReliable || val === elem.style[ name ] ); + + // Normalize "", auto, and prepare for extra + val = parseFloat( val ) || 0; + } + + // use the active box-sizing model to add/subtract irrelevant styles + return ( val + + augmentWidthOrHeight( + elem, + name, + extra || ( isBorderBox ? "border" : "content" ), + valueIsBorderBox, + styles + ) + ) + "px"; +} + +// Try to determine the default display value of an element +function css_defaultDisplay( nodeName ) { + var doc = document, + display = elemdisplay[ nodeName ]; + + if ( !display ) { + display = actualDisplay( nodeName, doc ); + + // If the simple way fails, read from inside an iframe + if ( display === "none" || !display ) { + // Use the already-created iframe if possible + iframe = ( iframe || + jQuery("