From 711f2cb49acb97e204aad821559bbba9a51a18da Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Wed, 11 Aug 2021 10:32:31 +0300
Subject: [PATCH 1/8] Update Web.config

---
 WebGoat/Web.config | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/WebGoat/Web.config b/WebGoat/Web.config
index ed1e0ab0..6c2534a9 100644
--- a/WebGoat/Web.config
+++ b/WebGoat/Web.config
@@ -39,6 +39,11 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
     </root>
   </log4net>
   <system.web>
+    <siteMap>
+      <providers>
+        <remove name="MySqlSiteMapProvider" />
+      </providers>
+    </siteMap>
     <!-- this disables header checking -->
     <httpRuntime enableHeaderChecking="false" />
     <!-- this is how you would set secure and http only on session cookies -->

From bd6d7a6b0219acd9bbbdc44d99f82bbf2c51391a Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Wed, 11 Aug 2021 10:44:24 +0300
Subject: [PATCH 2/8] update .gitignore

---
 .gitignore | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 85cfca11..ad8eeda1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,7 +3,6 @@
 *.userprefs
 *.pidb
 *swp
-bin
 obj
 WebGoat/App_Data/*.txt
 *.sqlite*

From 57f1beed72a7c21c23fbcef8b8e2a8df95e49926 Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Thu, 12 Aug 2021 11:00:22 +0300
Subject: [PATCH 3/8] moving to .net framework 4.7.2

---
 WebGoat/WebGoat.NET.csproj | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/WebGoat/WebGoat.NET.csproj b/WebGoat/WebGoat.NET.csproj
index c00501db..d08b983f 100644
--- a/WebGoat/WebGoat.NET.csproj
+++ b/WebGoat/WebGoat.NET.csproj
@@ -1,5 +1,5 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project DefaultTargets="Build" ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" ToolsVersion="12.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   <PropertyGroup>
     <GenerateFullPaths>True</GenerateFullPaths>
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
@@ -11,10 +11,10 @@
     <OutputType>Library</OutputType>
     <RootNamespace>OWASP.WebGoat.NET</RootNamespace>
     <AssemblyName>DotNetGoat</AssemblyName>
-    <TargetFrameworkVersion>v3.5</TargetFrameworkVersion>
+    <TargetFrameworkVersion>v4.7.2</TargetFrameworkVersion>
     <FileUpgradeFlags>
     </FileUpgradeFlags>
-    <OldToolsVersion>4.0</OldToolsVersion>
+    <OldToolsVersion>12.0</OldToolsVersion>
     <UpgradeBackupLocation>
     </UpgradeBackupLocation>
   </PropertyGroup>

From cefcbf405049910c46755936f537ccf151aa6069 Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Thu, 12 Aug 2021 11:16:17 +0300
Subject: [PATCH 4/8] Revert "moving to .net framework 4.7.2"

This reverts commit 57f1beed72a7c21c23fbcef8b8e2a8df95e49926.
---
 WebGoat/WebGoat.NET.csproj | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/WebGoat/WebGoat.NET.csproj b/WebGoat/WebGoat.NET.csproj
index d08b983f..c00501db 100644
--- a/WebGoat/WebGoat.NET.csproj
+++ b/WebGoat/WebGoat.NET.csproj
@@ -1,5 +1,5 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project DefaultTargets="Build" ToolsVersion="12.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   <PropertyGroup>
     <GenerateFullPaths>True</GenerateFullPaths>
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
@@ -11,10 +11,10 @@
     <OutputType>Library</OutputType>
     <RootNamespace>OWASP.WebGoat.NET</RootNamespace>
     <AssemblyName>DotNetGoat</AssemblyName>
-    <TargetFrameworkVersion>v4.7.2</TargetFrameworkVersion>
+    <TargetFrameworkVersion>v3.5</TargetFrameworkVersion>
     <FileUpgradeFlags>
     </FileUpgradeFlags>
-    <OldToolsVersion>12.0</OldToolsVersion>
+    <OldToolsVersion>4.0</OldToolsVersion>
     <UpgradeBackupLocation>
     </UpgradeBackupLocation>
   </PropertyGroup>

From bd35ce38597afb4509b12beaf8f708e9bdf8c4f5 Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Thu, 12 Aug 2021 11:18:06 +0300
Subject: [PATCH 5/8] change to dot Net framework 4.7.2

---
 WebGoat/Web.config              | 153 +++++++++++---------------------
 WebGoat/WebGoat.NET.csproj      |  60 +++++++++++--
 WebGoat/WebGoat.NET.csproj.user |  35 +++++++-
 3 files changed, 137 insertions(+), 111 deletions(-)

diff --git a/WebGoat/Web.config b/WebGoat/Web.config
index 6c2534a9..398c40c8 100644
--- a/WebGoat/Web.config
+++ b/WebGoat/Web.config
@@ -8,139 +8,90 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
 -->
 <configuration>
   <configSections>
-    <section name="log4net" type="log4net.Config.Log4NetConfigurationSectionHandler, log4net" />
-    <sectionGroup name="system.web.extensions" type="System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
-      <sectionGroup name="scripting" type="System.Web.Configuration.ScriptingSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
-        <section name="scriptResourceHandler" type="System.Web.Configuration.ScriptingScriptResourceHandlerSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-        <sectionGroup name="webServices" type="System.Web.Configuration.ScriptingWebServicesSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
-          <section name="jsonSerialization" type="System.Web.Configuration.ScriptingJsonSerializationSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="Everywhere" />
-          <section name="profileService" type="System.Web.Configuration.ScriptingProfileServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-          <section name="authenticationService" type="System.Web.Configuration.ScriptingAuthenticationServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-          <section name="roleService" type="System.Web.Configuration.ScriptingRoleServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-        </sectionGroup>
-      </sectionGroup>
-    </sectionGroup>
+    <section name="log4net" type="log4net.Config.Log4NetConfigurationSectionHandler, log4net"/>
   </configSections>
   <log4net debug="true">
     <appender name="RollingLogFileAppender" type="log4net.Appender.RollingFileAppender">
-      <file value="App_Data/log.txt" />
-      <appendToFile value="true" />
-      <rollingStyle value="Size" />
-      <maxSizeRollBackups value="10" />
-      <maximumFileSize value="10MB" />
-      <staticLogFileName value="true" />
+      <file value="App_Data/log.txt"/>
+      <appendToFile value="true"/>
+      <rollingStyle value="Size"/>
+      <maxSizeRollBackups value="10"/>
+      <maximumFileSize value="10MB"/>
+      <staticLogFileName value="true"/>
       <layout type="log4net.Layout.PatternLayout">
-        <conversionPattern value="%-5p %d %5rms %-22.22c{1} %-18.18M - %m%n" />
+        <conversionPattern value="%-5p %d %5rms %-22.22c{1} %-18.18M - %m%n"/>
       </layout>
     </appender>
     <root>
-      <level value="DEBUG" />
-      <appender-ref ref="RollingLogFileAppender" />
+      <level value="DEBUG"/>
+      <appender-ref ref="RollingLogFileAppender"/>
     </root>
   </log4net>
+  <!--
+    For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.
+
+    The following attributes can be set on the <httpRuntime> tag.
+      <system.Web>
+        <httpRuntime targetFramework="4.7.2" />
+      </system.Web>
+  -->
   <system.web>
     <siteMap>
       <providers>
-        <remove name="MySqlSiteMapProvider" />
+        <remove name="MySqlSiteMapProvider"/>
       </providers>
     </siteMap>
     <!-- this disables header checking -->
-    <httpRuntime enableHeaderChecking="false" />
+    <httpRuntime enableHeaderChecking="false"/>
     <!-- this is how you would set secure and http only on session cookies -->
-    <httpCookies httpOnlyCookies="false" requireSSL="false" />
-    <compilation defaultLanguage="C#" debug="true">
+    <httpCookies httpOnlyCookies="false" requireSSL="false"/>
+    <compilation defaultLanguage="C#" debug="true" targetFramework="4.7.2">
       <assemblies>
         <!--add assembly="System.Web.Mobile, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /-->
-        <add assembly="Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756" />
+        <add assembly="Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756"/>
       </assemblies>
     </compilation>
     <!-- show detailed error messages -->
-    <customErrors mode="Off" />
+    <customErrors mode="Off"/>
     <!-- set up users -->
     <authentication mode="Forms">
       <forms name="customer_login" timeout="30" loginUrl="~/WebGoatCoins/CustomerLogin.aspx" requireSSL="false" protection="All" path="/">
         <credentials passwordFormat="Clear">
-          <user name="admin" password="admin" />
-          <user name="mario" password="luigi" />
-          <user name="bob" password="password" />
+          <user name="admin" password="admin"/>
+          <user name="mario" password="luigi"/>
+          <user name="bob" password="password"/>
         </credentials>
       </forms>
     </authentication>
     <authorization>
-      <allow users="*" />
+      <allow users="*"/>
     </authorization>
-    <httpHandlers>
-      <remove verb="*" path="*.asmx" />
-      <add verb="*" path="*.asmx" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add verb="*" path="*_AppService.axd" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add verb="GET,HEAD" path="ScriptResource.axd" validate="false" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-    </httpHandlers>
-    <trace enabled="false" localOnly="true" pageOutput="false" requestLimit="10" traceMode="SortByTime" />
-    <sessionState mode="InProc" cookieless="false" timeout="20000" />
+    <trace enabled="false" localOnly="true" pageOutput="false" requestLimit="10" traceMode="SortByTime"/>
+    <sessionState mode="InProc" cookieless="false" timeout="20000"/>
     <!-- setting cookieless = true breaks app -->
-    <globalization requestEncoding="utf-8" responseEncoding="utf-8" />
-    <pages styleSheetTheme="Default">
+    <globalization requestEncoding="utf-8" responseEncoding="utf-8"/>
+    <pages styleSheetTheme="Default" controlRenderingCompatibilityVersion="3.5" clientIDMode="AutoID">
       <namespaces>
-        <clear />
-        <add namespace="System" />
-        <add namespace="System.Collections" />
-        <add namespace="System.Collections.Generic" />
-        <add namespace="System.Collections.Specialized" />
-        <add namespace="System.Configuration" />
-        <add namespace="System.Text" />
-        <add namespace="System.Text.RegularExpressions" />
-        <add namespace="System.Web" />
-        <add namespace="System.Web.Caching" />
-        <add namespace="System.Web.SessionState" />
-        <add namespace="System.Web.Security" />
-        <add namespace="System.Web.Profile" />
-        <add namespace="System.Web.UI" />
-        <add namespace="System.Web.UI.WebControls" />
-        <add namespace="System.Web.UI.WebControls.WebParts" />
-        <add namespace="System.Web.UI.HtmlControls" />
+        <clear/>
+        <add namespace="System"/>
+        <add namespace="System.Collections"/>
+        <add namespace="System.Collections.Generic"/>
+        <add namespace="System.Collections.Specialized"/>
+        <add namespace="System.Configuration"/>
+        <add namespace="System.Text"/>
+        <add namespace="System.Text.RegularExpressions"/>
+        <add namespace="System.Web"/>
+        <add namespace="System.Web.Caching"/>
+        <add namespace="System.Web.SessionState"/>
+        <add namespace="System.Web.Security"/>
+        <add namespace="System.Web.Profile"/>
+        <add namespace="System.Web.UI"/>
+        <add namespace="System.Web.UI.WebControls"/>
+        <add namespace="System.Web.UI.WebControls.WebParts"/>
+        <add namespace="System.Web.UI.HtmlControls"/>
       </namespaces>
-      <controls>
-        <add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-        <add tagPrefix="asp" namespace="System.Web.UI.WebControls" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      </controls>
     </pages>
   </system.web>
-  <system.codedom>
-    <compilers>
-      <compiler language="c#;cs;csharp" extension=".cs" type="Microsoft.CSharp.CSharpCodeProvider,System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" warningLevel="4">
-        <providerOption name="CompilerVersion" value="v3.5" />
-        <providerOption name="WarnAsError" value="false" />
-      </compiler>
-    </compilers>
-  </system.codedom>
-  <system.webServer>
-    <validation validateIntegratedModeConfiguration="false" />
-    <modules>
-      <remove name="ScriptModule" />
-      <add name="ScriptModule" preCondition="managedHandler" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-    </modules>
-    <handlers>
-      <remove name="WebServiceHandlerFactory-Integrated" />
-      <remove name="ScriptHandlerFactory" />
-      <remove name="ScriptHandlerFactoryAppServices" />
-      <remove name="ScriptResource" />
-      <add name="ScriptHandlerFactory" verb="*" path="*.asmx" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add name="ScriptHandlerFactoryAppServices" verb="*" path="*_AppService.axd" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add name="ScriptResource" verb="GET,HEAD" path="ScriptResource.axd" preCondition="integratedMode" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-    </handlers>
-  </system.webServer>
-  <runtime>
-    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-      <dependentAssembly>
-        <assemblyIdentity name="System.Web.Extensions" publicKeyToken="31bf3856ad364e35" />
-        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
-      </dependentAssembly>
-      <dependentAssembly>
-        <assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35" />
-        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
-      </dependentAssembly>
-    </assemblyBinding>
-  </runtime>
   <!--
     <location path="Login.aspx">
         <system.web>
@@ -169,9 +120,9 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
   <location path="Content/VerbTamperingAttack.aspx">
     <system.web>
       <authorization>
-        <allow verbs="GET" users="Admin" />
-        <deny verbs="POST,GET" users="*" />
+        <allow verbs="GET" users="Admin"/>
+        <deny verbs="POST,GET" users="*"/>
       </authorization>
     </system.web>
   </location>
-</configuration>
+</configuration>
\ No newline at end of file
diff --git a/WebGoat/WebGoat.NET.csproj b/WebGoat/WebGoat.NET.csproj
index c00501db..9d3274bf 100644
--- a/WebGoat/WebGoat.NET.csproj
+++ b/WebGoat/WebGoat.NET.csproj
@@ -1,5 +1,5 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project DefaultTargets="Build" ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" ToolsVersion="12.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   <PropertyGroup>
     <GenerateFullPaths>True</GenerateFullPaths>
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
@@ -11,12 +11,20 @@
     <OutputType>Library</OutputType>
     <RootNamespace>OWASP.WebGoat.NET</RootNamespace>
     <AssemblyName>DotNetGoat</AssemblyName>
-    <TargetFrameworkVersion>v3.5</TargetFrameworkVersion>
+    <TargetFrameworkVersion>v4.7.2</TargetFrameworkVersion>
     <FileUpgradeFlags>
     </FileUpgradeFlags>
     <OldToolsVersion>4.0</OldToolsVersion>
     <UpgradeBackupLocation>
     </UpgradeBackupLocation>
+    <UseIISExpress>true</UseIISExpress>
+    <Use64BitIISExpress />
+    <IISExpressSSLPort />
+    <IISExpressAnonymousAuthentication />
+    <IISExpressWindowsAuthentication />
+    <IISExpressUseClassicPipelineMode />
+    <UseGlobalApplicationHostFile />
+    <TargetFrameworkProfile />
   </PropertyGroup>
   <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
     <DebugSymbols>true</DebugSymbols>
@@ -36,6 +44,7 @@
         <Variable name="DYLD_FALLBACK_LIBRARY_PATH" value=".:/usr/local/lib:/lib:/usr/lib" />
       </EnvironmentVariables>
     </EnvironmentVariables>
+    <Prefer32Bit>false</Prefer32Bit>
   </PropertyGroup>
   <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
     <DebugType>none</DebugType>
@@ -46,11 +55,17 @@
     <ConsolePause>false</ConsolePause>
     <CodeAnalysisRuleSet>AllRules.ruleset</CodeAnalysisRuleSet>
     <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+    <Prefer32Bit>false</Prefer32Bit>
   </PropertyGroup>
   <ItemGroup>
     <Reference Include="System" />
+    <Reference Include="System.Data.DataSetExtensions" />
     <Reference Include="System.Drawing" />
     <Reference Include="System.Web" />
+    <Reference Include="System.Web.ApplicationServices" />
+    <Reference Include="System.Web.DynamicData" />
+    <Reference Include="System.Web.Entity" />
+    <Reference Include="System.Web.Extensions" />
     <Reference Include="System.Xml" />
     <Reference Include="System.Web.Services" />
     <Reference Include="System.Data" />
@@ -71,8 +86,9 @@
       <HintPath>lib\log4net.dll</HintPath>
     </Reference>
     <Reference Include="Mono.Data.Sqlite">
-        <HintPath>lib\Mono.Data.Sqlite.dll</HintPath>
+      <HintPath>lib\Mono.Data.Sqlite.dll</HintPath>
     </Reference>
+    <Reference Include="System.Xml.Linq" />
   </ItemGroup>
   <ItemGroup>
     <Content Include="Content\ForgotPassword.aspx" />
@@ -911,6 +927,7 @@
     </Compile>
     <Compile Include="ProxySetup.aspx.cs">
       <DependentUpon>ProxySetup.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="ProxySetup.aspx.designer.cs">
       <DependentUpon>ProxySetup.aspx</DependentUpon>
@@ -934,30 +951,35 @@
     <Compile Include="App_Code\Util.cs" />
     <Compile Include="Content\Trace.aspx.cs">
       <DependentUpon>Trace.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Trace.aspx.designer.cs">
       <DependentUpon>Trace.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\XPathInjection.aspx.cs">
       <DependentUpon>XPathInjection.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\XPathInjection.aspx.designer.cs">
       <DependentUpon>XPathInjection.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\HeaderInjection.aspx.cs">
       <DependentUpon>HeaderInjection.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\HeaderInjection.aspx.designer.cs">
       <DependentUpon>HeaderInjection.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\MessageDigest.aspx.cs">
       <DependentUpon>MessageDigest.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\MessageDigest.aspx.designer.cs">
       <DependentUpon>MessageDigest.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\XMLInjection.aspx.cs">
       <DependentUpon>XMLInjection.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\XMLInjection.aspx.designer.cs">
       <DependentUpon>XMLInjection.aspx</DependentUpon>
@@ -965,24 +987,28 @@
     <Compile Include="App_Code\WeakMessageDigest.cs" />
     <Compile Include="Content\ReadlineDoS.aspx.cs">
       <DependentUpon>ReadlineDoS.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\ReadlineDoS.aspx.designer.cs">
       <DependentUpon>ReadlineDoS.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\RegexDoS.aspx.cs">
       <DependentUpon>RegexDoS.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\RegexDoS.aspx.designer.cs">
       <DependentUpon>RegexDoS.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\Unsafe.aspx.cs">
       <DependentUpon>Unsafe.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Unsafe.aspx.designer.cs">
       <DependentUpon>Unsafe.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\Random.aspx.cs">
       <DependentUpon>Random.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Random.aspx.designer.cs">
       <DependentUpon>Random.aspx</DependentUpon>
@@ -990,12 +1016,14 @@
     <Compile Include="App_Code\WeakRandom.cs" />
     <Compile Include="Content\VerbTampering.aspx.cs">
       <DependentUpon>VerbTampering.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\VerbTampering.aspx.designer.cs">
       <DependentUpon>VerbTampering.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\VerbTamperingAttack.aspx.cs">
       <DependentUpon>VerbTamperingAttack.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\VerbTamperingAttack.aspx.designer.cs">
       <DependentUpon>VerbTamperingAttack.aspx</DependentUpon>
@@ -1021,13 +1049,26 @@
         <XspParameters Port="8081" Address="127.0.0.1" SslMode="None" SslProtocol="Default" KeyType="None" CertFile="" KeyFile="" PasswordOptions="None" Password="" Verbose="true" />
       </Properties>
     </MonoDevelop>
+    <VisualStudio>
+      <FlavorProperties GUID="{349C5851-65DF-11DA-9384-00065B846F21}">
+        <WebProjectProperties>
+          <UseIIS>True</UseIIS>
+          <AutoAssignPort>True</AutoAssignPort>
+          <DevelopmentServerPort>0</DevelopmentServerPort>
+          <DevelopmentServerVPath>/</DevelopmentServerVPath>
+          <IISUrl>http://localhost:61317/</IISUrl>
+          <NTLMAuthentication>False</NTLMAuthentication>
+          <UseCustomServer>False</UseCustomServer>
+          <CustomServerUrl>
+          </CustomServerUrl>
+          <SaveServerSettingsInUserFile>False</SaveServerSettingsInUserFile>
+        </WebProjectProperties>
+      </FlavorProperties>
+    </VisualStudio>
   </ProjectExtensions>
   <ItemGroup>
-    <Folder Include="WebGoatCoins\uploads\" />
-    <Folder Include="App_Data\" />
-    <Folder Include="App_Code\DB\" />
     <Folder Include="Configuration\" />
-    <Folder Include="DB_Scripts\" />
+    <Folder Include="WebGoatCoins\uploads\" />
   </ItemGroup>
   <ItemGroup>
     <Content Include="WebGoatCoins\ProductDetails.aspx" />
@@ -1057,4 +1098,5 @@
     <None Include="DB_Scripts\create_webgoatcoins_sqlite3.sql" />
   </ItemGroup>
   <ItemGroup />
-</Project>
+  <Import Project="$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v16.0\WebApplications\Microsoft.WebApplication.targets" />
+</Project>
\ No newline at end of file
diff --git a/WebGoat/WebGoat.NET.csproj.user b/WebGoat/WebGoat.NET.csproj.user
index fd9084ec..31d95baa 100644
--- a/WebGoat/WebGoat.NET.csproj.user
+++ b/WebGoat/WebGoat.NET.csproj.user
@@ -1,5 +1,38 @@
 <?xml version="1.0" encoding="utf-8"?>
 <Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <PropertyGroup>
+    <UseIISExpress>true</UseIISExpress>
+    <LastActiveSolutionConfig>Debug|Any CPU</LastActiveSolutionConfig>
+    <Use64BitIISExpress />
+    <IISExpressSSLPort />
+    <IISExpressAnonymousAuthentication />
+    <IISExpressWindowsAuthentication />
+    <IISExpressUseClassicPipelineMode />
+    <UseGlobalApplicationHostFile />
+  </PropertyGroup>
   <ProjectExtensions>
+    <VisualStudio>
+      <FlavorProperties GUID="{349C5851-65DF-11DA-9384-00065B846F21}">
+        <WebProjectProperties>
+          <StartPageUrl>
+          </StartPageUrl>
+          <StartAction>CurrentPage</StartAction>
+          <AspNetDebugging>True</AspNetDebugging>
+          <SilverlightDebugging>False</SilverlightDebugging>
+          <NativeDebugging>False</NativeDebugging>
+          <SQLDebugging>False</SQLDebugging>
+          <ExternalProgram>
+          </ExternalProgram>
+          <StartExternalURL>
+          </StartExternalURL>
+          <StartCmdLineArguments>
+          </StartCmdLineArguments>
+          <StartWorkingDirectory>
+          </StartWorkingDirectory>
+          <EnableENC>True</EnableENC>
+          <AlwaysStartWebServerOnDebug>False</AlwaysStartWebServerOnDebug>
+        </WebProjectProperties>
+      </FlavorProperties>
+    </VisualStudio>
   </ProjectExtensions>
-</Project>
+</Project>
\ No newline at end of file

From 3f07a02e921378abeb4f553350681711b6c17571 Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Thu, 12 Aug 2021 11:18:15 +0300
Subject: [PATCH 6/8] Update .gitignore

---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitignore b/.gitignore
index ad8eeda1..5bb26496 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,6 +7,8 @@ obj
 WebGoat/App_Data/*.txt
 *.sqlite*
 WebGoat/Configuration/*.config
+Backup*
+*.dll
 
 # Trash Files #
 ###############

From 869cee98bfc7ce00bd2792a5730847f1a6ceafca Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Thu, 12 Aug 2021 11:21:32 +0300
Subject: [PATCH 7/8] Revert "change to dot Net framework 4.7.2"

This reverts commit bd35ce38597afb4509b12beaf8f708e9bdf8c4f5.
---
 WebGoat/Web.config              | 153 +++++++++++++++++++++-----------
 WebGoat/WebGoat.NET.csproj      |  60 ++-----------
 WebGoat/WebGoat.NET.csproj.user |  35 +-------
 3 files changed, 111 insertions(+), 137 deletions(-)

diff --git a/WebGoat/Web.config b/WebGoat/Web.config
index 398c40c8..6c2534a9 100644
--- a/WebGoat/Web.config
+++ b/WebGoat/Web.config
@@ -8,90 +8,139 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
 -->
 <configuration>
   <configSections>
-    <section name="log4net" type="log4net.Config.Log4NetConfigurationSectionHandler, log4net"/>
+    <section name="log4net" type="log4net.Config.Log4NetConfigurationSectionHandler, log4net" />
+    <sectionGroup name="system.web.extensions" type="System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
+      <sectionGroup name="scripting" type="System.Web.Configuration.ScriptingSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
+        <section name="scriptResourceHandler" type="System.Web.Configuration.ScriptingScriptResourceHandlerSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
+        <sectionGroup name="webServices" type="System.Web.Configuration.ScriptingWebServicesSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
+          <section name="jsonSerialization" type="System.Web.Configuration.ScriptingJsonSerializationSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="Everywhere" />
+          <section name="profileService" type="System.Web.Configuration.ScriptingProfileServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
+          <section name="authenticationService" type="System.Web.Configuration.ScriptingAuthenticationServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
+          <section name="roleService" type="System.Web.Configuration.ScriptingRoleServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
+        </sectionGroup>
+      </sectionGroup>
+    </sectionGroup>
   </configSections>
   <log4net debug="true">
     <appender name="RollingLogFileAppender" type="log4net.Appender.RollingFileAppender">
-      <file value="App_Data/log.txt"/>
-      <appendToFile value="true"/>
-      <rollingStyle value="Size"/>
-      <maxSizeRollBackups value="10"/>
-      <maximumFileSize value="10MB"/>
-      <staticLogFileName value="true"/>
+      <file value="App_Data/log.txt" />
+      <appendToFile value="true" />
+      <rollingStyle value="Size" />
+      <maxSizeRollBackups value="10" />
+      <maximumFileSize value="10MB" />
+      <staticLogFileName value="true" />
       <layout type="log4net.Layout.PatternLayout">
-        <conversionPattern value="%-5p %d %5rms %-22.22c{1} %-18.18M - %m%n"/>
+        <conversionPattern value="%-5p %d %5rms %-22.22c{1} %-18.18M - %m%n" />
       </layout>
     </appender>
     <root>
-      <level value="DEBUG"/>
-      <appender-ref ref="RollingLogFileAppender"/>
+      <level value="DEBUG" />
+      <appender-ref ref="RollingLogFileAppender" />
     </root>
   </log4net>
-  <!--
-    For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.
-
-    The following attributes can be set on the <httpRuntime> tag.
-      <system.Web>
-        <httpRuntime targetFramework="4.7.2" />
-      </system.Web>
-  -->
   <system.web>
     <siteMap>
       <providers>
-        <remove name="MySqlSiteMapProvider"/>
+        <remove name="MySqlSiteMapProvider" />
       </providers>
     </siteMap>
     <!-- this disables header checking -->
-    <httpRuntime enableHeaderChecking="false"/>
+    <httpRuntime enableHeaderChecking="false" />
     <!-- this is how you would set secure and http only on session cookies -->
-    <httpCookies httpOnlyCookies="false" requireSSL="false"/>
-    <compilation defaultLanguage="C#" debug="true" targetFramework="4.7.2">
+    <httpCookies httpOnlyCookies="false" requireSSL="false" />
+    <compilation defaultLanguage="C#" debug="true">
       <assemblies>
         <!--add assembly="System.Web.Mobile, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /-->
-        <add assembly="Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756"/>
+        <add assembly="Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756" />
       </assemblies>
     </compilation>
     <!-- show detailed error messages -->
-    <customErrors mode="Off"/>
+    <customErrors mode="Off" />
     <!-- set up users -->
     <authentication mode="Forms">
       <forms name="customer_login" timeout="30" loginUrl="~/WebGoatCoins/CustomerLogin.aspx" requireSSL="false" protection="All" path="/">
         <credentials passwordFormat="Clear">
-          <user name="admin" password="admin"/>
-          <user name="mario" password="luigi"/>
-          <user name="bob" password="password"/>
+          <user name="admin" password="admin" />
+          <user name="mario" password="luigi" />
+          <user name="bob" password="password" />
         </credentials>
       </forms>
     </authentication>
     <authorization>
-      <allow users="*"/>
+      <allow users="*" />
     </authorization>
-    <trace enabled="false" localOnly="true" pageOutput="false" requestLimit="10" traceMode="SortByTime"/>
-    <sessionState mode="InProc" cookieless="false" timeout="20000"/>
+    <httpHandlers>
+      <remove verb="*" path="*.asmx" />
+      <add verb="*" path="*.asmx" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+      <add verb="*" path="*_AppService.axd" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+      <add verb="GET,HEAD" path="ScriptResource.axd" validate="false" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+    </httpHandlers>
+    <trace enabled="false" localOnly="true" pageOutput="false" requestLimit="10" traceMode="SortByTime" />
+    <sessionState mode="InProc" cookieless="false" timeout="20000" />
     <!-- setting cookieless = true breaks app -->
-    <globalization requestEncoding="utf-8" responseEncoding="utf-8"/>
-    <pages styleSheetTheme="Default" controlRenderingCompatibilityVersion="3.5" clientIDMode="AutoID">
+    <globalization requestEncoding="utf-8" responseEncoding="utf-8" />
+    <pages styleSheetTheme="Default">
       <namespaces>
-        <clear/>
-        <add namespace="System"/>
-        <add namespace="System.Collections"/>
-        <add namespace="System.Collections.Generic"/>
-        <add namespace="System.Collections.Specialized"/>
-        <add namespace="System.Configuration"/>
-        <add namespace="System.Text"/>
-        <add namespace="System.Text.RegularExpressions"/>
-        <add namespace="System.Web"/>
-        <add namespace="System.Web.Caching"/>
-        <add namespace="System.Web.SessionState"/>
-        <add namespace="System.Web.Security"/>
-        <add namespace="System.Web.Profile"/>
-        <add namespace="System.Web.UI"/>
-        <add namespace="System.Web.UI.WebControls"/>
-        <add namespace="System.Web.UI.WebControls.WebParts"/>
-        <add namespace="System.Web.UI.HtmlControls"/>
+        <clear />
+        <add namespace="System" />
+        <add namespace="System.Collections" />
+        <add namespace="System.Collections.Generic" />
+        <add namespace="System.Collections.Specialized" />
+        <add namespace="System.Configuration" />
+        <add namespace="System.Text" />
+        <add namespace="System.Text.RegularExpressions" />
+        <add namespace="System.Web" />
+        <add namespace="System.Web.Caching" />
+        <add namespace="System.Web.SessionState" />
+        <add namespace="System.Web.Security" />
+        <add namespace="System.Web.Profile" />
+        <add namespace="System.Web.UI" />
+        <add namespace="System.Web.UI.WebControls" />
+        <add namespace="System.Web.UI.WebControls.WebParts" />
+        <add namespace="System.Web.UI.HtmlControls" />
       </namespaces>
+      <controls>
+        <add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+        <add tagPrefix="asp" namespace="System.Web.UI.WebControls" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+      </controls>
     </pages>
   </system.web>
+  <system.codedom>
+    <compilers>
+      <compiler language="c#;cs;csharp" extension=".cs" type="Microsoft.CSharp.CSharpCodeProvider,System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" warningLevel="4">
+        <providerOption name="CompilerVersion" value="v3.5" />
+        <providerOption name="WarnAsError" value="false" />
+      </compiler>
+    </compilers>
+  </system.codedom>
+  <system.webServer>
+    <validation validateIntegratedModeConfiguration="false" />
+    <modules>
+      <remove name="ScriptModule" />
+      <add name="ScriptModule" preCondition="managedHandler" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+    </modules>
+    <handlers>
+      <remove name="WebServiceHandlerFactory-Integrated" />
+      <remove name="ScriptHandlerFactory" />
+      <remove name="ScriptHandlerFactoryAppServices" />
+      <remove name="ScriptResource" />
+      <add name="ScriptHandlerFactory" verb="*" path="*.asmx" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+      <add name="ScriptHandlerFactoryAppServices" verb="*" path="*_AppService.axd" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+      <add name="ScriptResource" verb="GET,HEAD" path="ScriptResource.axd" preCondition="integratedMode" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
+    </handlers>
+  </system.webServer>
+  <runtime>
+    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+      <dependentAssembly>
+        <assemblyIdentity name="System.Web.Extensions" publicKeyToken="31bf3856ad364e35" />
+        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35" />
+        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
+      </dependentAssembly>
+    </assemblyBinding>
+  </runtime>
   <!--
     <location path="Login.aspx">
         <system.web>
@@ -120,9 +169,9 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
   <location path="Content/VerbTamperingAttack.aspx">
     <system.web>
       <authorization>
-        <allow verbs="GET" users="Admin"/>
-        <deny verbs="POST,GET" users="*"/>
+        <allow verbs="GET" users="Admin" />
+        <deny verbs="POST,GET" users="*" />
       </authorization>
     </system.web>
   </location>
-</configuration>
\ No newline at end of file
+</configuration>
diff --git a/WebGoat/WebGoat.NET.csproj b/WebGoat/WebGoat.NET.csproj
index 9d3274bf..c00501db 100644
--- a/WebGoat/WebGoat.NET.csproj
+++ b/WebGoat/WebGoat.NET.csproj
@@ -1,5 +1,5 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project DefaultTargets="Build" ToolsVersion="12.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   <PropertyGroup>
     <GenerateFullPaths>True</GenerateFullPaths>
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
@@ -11,20 +11,12 @@
     <OutputType>Library</OutputType>
     <RootNamespace>OWASP.WebGoat.NET</RootNamespace>
     <AssemblyName>DotNetGoat</AssemblyName>
-    <TargetFrameworkVersion>v4.7.2</TargetFrameworkVersion>
+    <TargetFrameworkVersion>v3.5</TargetFrameworkVersion>
     <FileUpgradeFlags>
     </FileUpgradeFlags>
     <OldToolsVersion>4.0</OldToolsVersion>
     <UpgradeBackupLocation>
     </UpgradeBackupLocation>
-    <UseIISExpress>true</UseIISExpress>
-    <Use64BitIISExpress />
-    <IISExpressSSLPort />
-    <IISExpressAnonymousAuthentication />
-    <IISExpressWindowsAuthentication />
-    <IISExpressUseClassicPipelineMode />
-    <UseGlobalApplicationHostFile />
-    <TargetFrameworkProfile />
   </PropertyGroup>
   <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
     <DebugSymbols>true</DebugSymbols>
@@ -44,7 +36,6 @@
         <Variable name="DYLD_FALLBACK_LIBRARY_PATH" value=".:/usr/local/lib:/lib:/usr/lib" />
       </EnvironmentVariables>
     </EnvironmentVariables>
-    <Prefer32Bit>false</Prefer32Bit>
   </PropertyGroup>
   <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
     <DebugType>none</DebugType>
@@ -55,17 +46,11 @@
     <ConsolePause>false</ConsolePause>
     <CodeAnalysisRuleSet>AllRules.ruleset</CodeAnalysisRuleSet>
     <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
-    <Prefer32Bit>false</Prefer32Bit>
   </PropertyGroup>
   <ItemGroup>
     <Reference Include="System" />
-    <Reference Include="System.Data.DataSetExtensions" />
     <Reference Include="System.Drawing" />
     <Reference Include="System.Web" />
-    <Reference Include="System.Web.ApplicationServices" />
-    <Reference Include="System.Web.DynamicData" />
-    <Reference Include="System.Web.Entity" />
-    <Reference Include="System.Web.Extensions" />
     <Reference Include="System.Xml" />
     <Reference Include="System.Web.Services" />
     <Reference Include="System.Data" />
@@ -86,9 +71,8 @@
       <HintPath>lib\log4net.dll</HintPath>
     </Reference>
     <Reference Include="Mono.Data.Sqlite">
-      <HintPath>lib\Mono.Data.Sqlite.dll</HintPath>
+        <HintPath>lib\Mono.Data.Sqlite.dll</HintPath>
     </Reference>
-    <Reference Include="System.Xml.Linq" />
   </ItemGroup>
   <ItemGroup>
     <Content Include="Content\ForgotPassword.aspx" />
@@ -927,7 +911,6 @@
     </Compile>
     <Compile Include="ProxySetup.aspx.cs">
       <DependentUpon>ProxySetup.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="ProxySetup.aspx.designer.cs">
       <DependentUpon>ProxySetup.aspx</DependentUpon>
@@ -951,35 +934,30 @@
     <Compile Include="App_Code\Util.cs" />
     <Compile Include="Content\Trace.aspx.cs">
       <DependentUpon>Trace.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Trace.aspx.designer.cs">
       <DependentUpon>Trace.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\XPathInjection.aspx.cs">
       <DependentUpon>XPathInjection.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\XPathInjection.aspx.designer.cs">
       <DependentUpon>XPathInjection.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\HeaderInjection.aspx.cs">
       <DependentUpon>HeaderInjection.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\HeaderInjection.aspx.designer.cs">
       <DependentUpon>HeaderInjection.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\MessageDigest.aspx.cs">
       <DependentUpon>MessageDigest.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\MessageDigest.aspx.designer.cs">
       <DependentUpon>MessageDigest.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\XMLInjection.aspx.cs">
       <DependentUpon>XMLInjection.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\XMLInjection.aspx.designer.cs">
       <DependentUpon>XMLInjection.aspx</DependentUpon>
@@ -987,28 +965,24 @@
     <Compile Include="App_Code\WeakMessageDigest.cs" />
     <Compile Include="Content\ReadlineDoS.aspx.cs">
       <DependentUpon>ReadlineDoS.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\ReadlineDoS.aspx.designer.cs">
       <DependentUpon>ReadlineDoS.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\RegexDoS.aspx.cs">
       <DependentUpon>RegexDoS.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\RegexDoS.aspx.designer.cs">
       <DependentUpon>RegexDoS.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\Unsafe.aspx.cs">
       <DependentUpon>Unsafe.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Unsafe.aspx.designer.cs">
       <DependentUpon>Unsafe.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\Random.aspx.cs">
       <DependentUpon>Random.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Random.aspx.designer.cs">
       <DependentUpon>Random.aspx</DependentUpon>
@@ -1016,14 +990,12 @@
     <Compile Include="App_Code\WeakRandom.cs" />
     <Compile Include="Content\VerbTampering.aspx.cs">
       <DependentUpon>VerbTampering.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\VerbTampering.aspx.designer.cs">
       <DependentUpon>VerbTampering.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\VerbTamperingAttack.aspx.cs">
       <DependentUpon>VerbTamperingAttack.aspx</DependentUpon>
-      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\VerbTamperingAttack.aspx.designer.cs">
       <DependentUpon>VerbTamperingAttack.aspx</DependentUpon>
@@ -1049,26 +1021,13 @@
         <XspParameters Port="8081" Address="127.0.0.1" SslMode="None" SslProtocol="Default" KeyType="None" CertFile="" KeyFile="" PasswordOptions="None" Password="" Verbose="true" />
       </Properties>
     </MonoDevelop>
-    <VisualStudio>
-      <FlavorProperties GUID="{349C5851-65DF-11DA-9384-00065B846F21}">
-        <WebProjectProperties>
-          <UseIIS>True</UseIIS>
-          <AutoAssignPort>True</AutoAssignPort>
-          <DevelopmentServerPort>0</DevelopmentServerPort>
-          <DevelopmentServerVPath>/</DevelopmentServerVPath>
-          <IISUrl>http://localhost:61317/</IISUrl>
-          <NTLMAuthentication>False</NTLMAuthentication>
-          <UseCustomServer>False</UseCustomServer>
-          <CustomServerUrl>
-          </CustomServerUrl>
-          <SaveServerSettingsInUserFile>False</SaveServerSettingsInUserFile>
-        </WebProjectProperties>
-      </FlavorProperties>
-    </VisualStudio>
   </ProjectExtensions>
   <ItemGroup>
-    <Folder Include="Configuration\" />
     <Folder Include="WebGoatCoins\uploads\" />
+    <Folder Include="App_Data\" />
+    <Folder Include="App_Code\DB\" />
+    <Folder Include="Configuration\" />
+    <Folder Include="DB_Scripts\" />
   </ItemGroup>
   <ItemGroup>
     <Content Include="WebGoatCoins\ProductDetails.aspx" />
@@ -1098,5 +1057,4 @@
     <None Include="DB_Scripts\create_webgoatcoins_sqlite3.sql" />
   </ItemGroup>
   <ItemGroup />
-  <Import Project="$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v16.0\WebApplications\Microsoft.WebApplication.targets" />
-</Project>
\ No newline at end of file
+</Project>
diff --git a/WebGoat/WebGoat.NET.csproj.user b/WebGoat/WebGoat.NET.csproj.user
index 31d95baa..fd9084ec 100644
--- a/WebGoat/WebGoat.NET.csproj.user
+++ b/WebGoat/WebGoat.NET.csproj.user
@@ -1,38 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
 <Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
-  <PropertyGroup>
-    <UseIISExpress>true</UseIISExpress>
-    <LastActiveSolutionConfig>Debug|Any CPU</LastActiveSolutionConfig>
-    <Use64BitIISExpress />
-    <IISExpressSSLPort />
-    <IISExpressAnonymousAuthentication />
-    <IISExpressWindowsAuthentication />
-    <IISExpressUseClassicPipelineMode />
-    <UseGlobalApplicationHostFile />
-  </PropertyGroup>
   <ProjectExtensions>
-    <VisualStudio>
-      <FlavorProperties GUID="{349C5851-65DF-11DA-9384-00065B846F21}">
-        <WebProjectProperties>
-          <StartPageUrl>
-          </StartPageUrl>
-          <StartAction>CurrentPage</StartAction>
-          <AspNetDebugging>True</AspNetDebugging>
-          <SilverlightDebugging>False</SilverlightDebugging>
-          <NativeDebugging>False</NativeDebugging>
-          <SQLDebugging>False</SQLDebugging>
-          <ExternalProgram>
-          </ExternalProgram>
-          <StartExternalURL>
-          </StartExternalURL>
-          <StartCmdLineArguments>
-          </StartCmdLineArguments>
-          <StartWorkingDirectory>
-          </StartWorkingDirectory>
-          <EnableENC>True</EnableENC>
-          <AlwaysStartWebServerOnDebug>False</AlwaysStartWebServerOnDebug>
-        </WebProjectProperties>
-      </FlavorProperties>
-    </VisualStudio>
   </ProjectExtensions>
-</Project>
\ No newline at end of file
+</Project>

From e87b5ab312b43bfbb71ea7c48a27f3c2704c7903 Mon Sep 17 00:00:00 2001
From: dor-cohen <dor.cohen@hcl.com>
Date: Thu, 12 Aug 2021 11:24:35 +0300
Subject: [PATCH 8/8] moving to .net framework 4.7.2

---
 UpgradeLog.htm                  | Bin 0 -> 449142 bytes
 WebGoat/Web.config              | 153 +++++++++++---------------------
 WebGoat/WebGoat.NET.csproj      |  60 +++++++++++--
 WebGoat/WebGoat.NET.csproj.user |  35 +++++++-
 4 files changed, 137 insertions(+), 111 deletions(-)
 create mode 100644 UpgradeLog.htm

diff --git a/UpgradeLog.htm b/UpgradeLog.htm
new file mode 100644
index 0000000000000000000000000000000000000000..9046775716b3157827b9c64d60429f9f48eb81f4
GIT binary patch
literal 449142
zcmeI5`*+*MlIQX3&N=fxXp)^t?q+0Lc49lZH+POK$&dJL$##<QJwAF+59=9{dSzz!
zPv70|r&};c3IqY#78;E@I+92b1iA{JuCA`G?*4!O_ixF+B#X)OWFc8eeoI~?OUX>K
zo%ECaWH0%9^3TaXC7dy<pP8hWtR^Q(C)v>J&7_+g>a3aMSg-bypObHs8~T|`zEA$5
z^Vam~v99w|vXdO>e@AB>=x<-&;A;NbGrD?ux0&S3-St5C`AM&Odf#(b{>t6sKu3GY
zy3X(D(^b8m)&CtGp(H*1ZtCi@dQZ82y7+cK`AYZVE**Vm!@b^j<ycioIM<hszd!5T
zj^5Aeem%YRn&>A-I?_r0(9s>q&shsY-<wUI=-LO#md;q!-;Vq4^@;aFD`&dz^^ZFE
zt1HvCuF_Qr(ALkoW?z!cO0%~sm1!k8SIGy<(pUNW(r8C_d9VM6lK+vOekKu5mpkt`
z`CjSWkzRH6tsA;``pjnZ{o$Xd`o@;dTh*EVyEDn)x8Z2`8$9{z?rdKoo>5Ql&t3Wc
zuCw#LGkT5m{q^L3=^OV{)(u?&QqwE_yWVX&8D?}03TE`n)80{edAFfY*QI5s;P{NL
zb-mKvVV(O{De-?*Iy;qfO&VTLcAc)NUkAGHPb%@($^GQk#qamYU#Ge@bpa;27gwB<
zE%3khr@SJ1N29ZP0;{gB?nz6O_p4-C+TPOVJb~Au@T-I;wW9O3b(H$e`v>lsbX4p7
z`!{;umCV#Oe*~L^#hBGEpY7;g)5(9ND{bfpd$r|Cd1J~eQTnc~!IhA<>UI9Ndwx}D
z^87!P29N<g%;~<vwE&xz+HRh5Rv#!YW#vd_A*$AbZQZj<nWw7(m!Hy{^m`;bik|)d
z>`3}*IwCTDv50?4dpymXlJiKKn(mr;HQ2XVgLQ97cS(Pzy${dWvoPyg<G#x5TgDkD
z0UG;SE!o_~?@hg@72T7p8<MV?1x_v0s1>=Xr!ptY#Q*6e`PAB!mMnXkr+SjKS9l&g
z(E~}{bv9?OVi`Y2P4#*oY_BfY)UV{B`L_8)CGRAs&J)1$;fozg4q7(qG<AGk?|m!W
z(~;`+_~sSV<Lqe+)~&hZ?kCi(?3$nN38(br*_|Ig+MSssdtDFZpM%6(j-O%@d-6Kg
zE?V0`&S<Uq4F7ya?Fr-^iO9p`!v&GlGrRy={OU~Jx>6=TKR+3p!@R@Iv~9`fvW#Dv
z?J{j%U#xgfj?&<n<2hEVOVic?dUL+@h1@;;(DU=XC;GPdM!Sw^{8{+TTDj^huU-Mk
zS@~$+zE%r-OP2MfTKc6c(kY(&nskS@GCwqJkE;0={g2oB^8O`#xy*0ssdm!i8tfBP
z_vh0#Wcb?t8SUx%N79h@Ek}=4<3GL6I9r2%{N?LZ_OyHt<0_unxL)y6a!17Td$%I@
zsV>tP&8(gimS9U3fI0=)#G9sjLfKXE(0S^Ev6Iv%#nw!B{fvOm-;!N!EpCY`dK0%V
z{tv&eCP8%@KFr(36<AmAiQ{9hJ1R!mpr3U#<&&GN-PF_c|Ep;?rTVhxz!RMAT7y;%
za_JpIL)Mq11^V=wnCC_K*6qG(xc{wM%d6AoBP~z#g#EL}5_tb$M*nHwh%09;UKV}K
z_bBMO5j7pW4*c-F9cN{JQZ$mE(P%XuciQixmGxc|*P%a1Nq7RozKTDesJ-{lzmYY|
z`o7=jcxsu5>-#7v-jM$u$9$A+Mt(f;N8Zu@OykDYy`gKayk3`2E;RY&Ta3&8(Wk~b
z$J4na_WjS|lr=1UCbKS{^Z8nf>h$M5t)E12N<bY?Zd%VawT0uK+<jRUety)?bha^^
zC+F?fg6b=^+Q*90(qT!mm{S@F_G2aKlbul=_mL+o%et;WKZ)0w1%phko<@`D>-Y5I
z$HctPgr&fuaIUv7T!VN(wLZZ$Ck3NtgEA4{{_+f_dK+!`(Mqb_YP?jhiT-)6sP18b
zM>Re8eEjnqJtOm)d`m$cKGu^Vp2%mr?z+cn%d<W)qrct@9_-us9ulRf8r8WrQf{6k
zRDJm;cq*1RB<HsC<ryWok^F1LIzH_)dm$ZW<4nHYPRH`HmNu<R>6qlI>usd<)<1Pd
zT&AfzU%T4pN#$>~n)hGs`TP%ktK83Jk2V{pxq0C$&M7vLj@|fIRmUHueHv*EO6^=~
z<$NtjBN&X+BM0$zZ}af1GK#REyn`s7C^d4`dBNE^_(_}k<VSg{|EmAhZQj?q!tf}-
zU@5P<)~w22;Hg%#bSX1lKeGcm#FxLLI6C#P8j+v+?1ycmf4-@O<6Y`mWBX3^?%Xku
zKF7f)T-5@8Jz@ce?|s!z)Js(Dc}}bQd1vWoH1h8)9g<ho-nEb4UKWe%`tkn8lIkf}
zCAPBR@(8jsAL%oqBSq)Dbx-`j^+vV|&s<X6hB1!r$XQ?h$&vX)rcy@VPihSqJ)5>4
zpI(u+B^w>hu34>4ru96}yPlQ4$SfjTfe~2xpu@+iF<5*rGME^1NykKga-3YPpEk@V
zkpfS>&qc~u{Ze({%k${{(Pz>%-Z8d(QLp{jIvxgfk(eo;4tqKK&IWovWX+v*D5|gN
ztVcRKjjCk*6CWM%?I77c<a^QXa$Ph@jr3#S#82seq%CiH7CzOW&UajEP2S#&`z~=4
zvKp}`GaAL9<dn(3#(Mb7vGjU=oO8q3psd84gTzEyeBMn}`<8O;b^D*HBmDfT>+MP6
zH@Y&hC$gc?Dwd7^<XQ5`tn%Ufy>BZgbJ*TJ`Y7>FV{GWx`ZgI_SedV-gUb>2S$#$;
zj^23QJ`eQUi}I}MSoZmK)poL~{_3uTJ}A?_>&nY|jc4WK-)Q!0<&XZ=MGWz_zE1w3
zYfr1WFIDaxY5$&bGG2*_8_8qksgcVzfARB7QoR<DOZvNYaqQm5Pv?`D>a)%(+crIa
zQ+E5h{KD;zM;7#y@9D|B)&Hj#M;XQN-*_$?Kd*bf(Vb7F$F+;&_eAWHp8S&T@J40(
zUf=#hp7n}|d9B|C{e7i8ribz(=j3T^>At@wzvx@{bSHB2c2uh0bbP_xdtF!lQT6z~
zzJ;Vub=D8M+Ptp0F1fGkK1=%aRKL3_)0wXSQqSy6ci+=BPj#K&^quFr?rmLhTd%it
z#<o6tqEh^#^B45ZZN2O2YLw!xbazK*o#@EC{(qM|)9;DX(1~81=}MIPu1fPjCH_t_
zF6%1iI{TikJ+Jp$dbOqNKhQfOwevb-SNA8^^{rk%5pz#;4%TQx=XLe%r^-{<kaUl9
zhnLEOek(b@*Cz+k)Vj*{LZ#yF^aJj=k<^}av#)O~t28%sH8g#q^A4o77t#nlw#Pd5
zr|x>9GoR^Bj45xZw4DD!WqKk#p^r1^g6A`@*DqD#-=(_^{e7+L@9XuMj&s)=y2}H7
zj`V-3glGC)(OrJmJznVhXFBJhK7XT6kEE$R{lB3r{wPTw>l)`e<A(10KzF;V5~05p
zy??9c`&j?)>KhAs{ap84QVEXTceeEXJ?Vh!5wm%&do4@4eckJpuJT&{Z|jqny7pte
zej+(KD(^3P`X~BJ1_&DXPNkf8&+QkTwW4x9R=Mysmh{<)?s+2pW6{oZ4RS@+RH8@H
z)o&_6N9Qa^A4G|NRT-C5-c6P7P-R$Ac{X(S+q&*Ax(DOk*Y(M^j;!cAbGj?FU{hsW
z(>dfgKb7<cdjEsIxu|Py>zRGf|Hr!LFYYR@b=P^lryj1j=YCt~E=ar2B;7+D<w~pi
z*1mMGB(0w4n#2pq7ob)y>Hb?P@gtS*j*hM9ymM)4Q_pEjWmwl|hq@R3<DQ=4p-TN!
zSNR}W52WQk^&U!AbcanHS(1)kNVdLoazocof3P=ioIQFhd8l>J{<E{BRoeb(z4_Fu
z_E~hPr}bt0ob+D9Em{>ReFP(IUCaJA52xuKPD;)&rRM42!Hx6KzO1KnPZo64W9i8@
zdXME$cKM|&{VUnjJF<MIvX6htLLbT|esHbhV_Dw~S-JyR?+yJP>yuZqzszL1t8YJ5
zOEIV8cp=~ES|>WIr(>&<_oeQAPgZ(e?-z9ax3Z`UuGPWXztlC?Ws~pgnti>(zkVr8
zO(|A&?lW0sqCt27yRHrSQU1bHUFWur;TLywHTojVWO||!JXg8b^`BVheZ4x91ovgP
zJ5H(vwd{}e`-j>EJj1)XFRdn?8m;Ray?>$atm~e8Y74mMGf8?=-$ITv9lP)DxvX#F
zr}W&JT<fi*{Z%FTQCIy@pIld&PV{O^S0M))?`Ki3*4;O^q~llmHh#{g?)5?6x~K0v
z)b;1wCusE#>GPQ+c&clV?XarPY4i7_(Z{;SOV=VkQk%&8o@AnL_&{3yQPTYA+Ugs+
z=kL1quFfXHdR-;GtFvC|{i(k5(rNmpj@(ko@UU;H9ety6;yM25j{T<3p6P0PdS(l{
z+V7I>JAH<Sa@T2w)_+Uo+}Dvg$+@Jmoa<@)sZ!9Zd92qQr`6}llaYnz_DJ73b5xz^
z*rr~c>r<Zc8)@$cmHm#R?6HpDkz6lbi57I9ZGFzOyrm<%`ujpUeCzJkb9Y^oq;rx6
z&xf8W(TPL%leXu0to63&!!fWg(~=M0!`kz{D6)t}8XXwsAunPv%#XF>^|j;kvc1zp
zENH2)-GdQ}BiYJj+1{73stfwhIrn9Mzt{hH+1h(L_C%kY>3>(Y`>wOmt2)jsPWsIY
zvgFIMyRY=0D8wDTo0rXfsrH9f0;~R3pAp@9sn+1Fto5(X`eXHfRjctxWjfb4f6)Iw
zbeCJYdtc|$Q+=*)6EUH`P9)|Bo%y@2a7%W7K|hc6`ER-kb@`=hVZT@VxFiYwkoA9}
z|Ho>fPSuJms$A##`BU=I3;dwZXqBGn>fh-*^E&>WuEN|idiHNr61<U~bhfJ&gxJ6f
zmFYy+xh>h~Z6E0@N=l67w$7pVd|f5l)jO_tTlZL&G(<lRbe&@-@ejH`<KcJ^clGV-
z`u|qneyl5U?4iEFC-@61y2f|9E1nPK>`U?wy3V=e>ARNjhTaq1r@uZgX;yUY?{o)x
zzaRAey8hqN`9v^@+8n4vd~#oMUe}fHOH<$L=NEncMxVhJx=dTgd-~*+zVU;!+Etl&
zlKlL9g+1PE<mbz@joI~w?V$B@8ADGa?=WnU{4@rij-_VoSesa1n@BWzv~T-|tm=wv
z>T6j;+Pqh?ZNvyqWxHRf6?rWicUM+<URL^4f9X@)l&w70c|@q^Wnby5(L-92<))u=
zPd0K%))YHSuj{^!Gb(XI_gU8wBE&?CkM-?s*;m?A?#(CkknZc)EwvuROCRWmDC2AW
zKi2zadbgqS{h`;t>&PE!59u#H);T@>|5Nw=MMsI7-<B;t&^L)YFRQE%WV0XWj!SyC
zBP;!<e)d$NIURo@Ip{Ug7QRsrv8!vW>AQ2f%c*Mt7i7<A$DXPU_+4lICV4upJgYkL
zL|WNY*%=i)ksL%l>2n?Hx;@={SwD07&i5+gEnNk@-qz>0bd6i?n#cMEx?0p3Po>2>
zy4!Dh|D(!vSEZcS)qmGD8EqgZh*9K6uB9PMV$MCSM>^vNowuVhZ|JPwBrh@G`;zIt
zj_>Q;zRtO+JDlm9eU*gg{Hw~z7{Q+IhQ4m--i#{Z^Psi9&Oqz?dd_RQ9&P!lT2M0W
zf7kK1x;h;2*_@6O&3~wKcXcHq+;|0)e@>qerT<+e?CR_Vy<3zF_yv7kk)G+9<h!ol
zBc0WA-+LgfeNfrn=)UVZvZYV%Naq{+#xvdfo_^5Ep6&;Slx9cIfOebS|AC$kz4Arf
z{een(N1y)bboWTQUeVn?=;x8jzNE68>RR-zf6*uFdcCWXF6w+D_pACgqfRfRCuCie
zOy5f~{3fzWf0Q1Vb$=M#)$#P_^Y)!5$A?+TB+K~sE19q=4b(6mOpU=GVx1L6X#JWm
zA0z?!l#BwT=YFNLi9ZakCBwJ!&n;RdrN~e4vk8_}7RFus(jr-&lfS{p60tYNdih4$
z3a9@WCHL!3kVQ)LiuM@|_%ZYB8>4HkT-S5n(YYKybs0N;ls}zYF*?pa`h7q0@5jIS
zTO<oQ_cP@O<tNUEFOiL1{Orm-eDqt5sLUk)rQhL_Vdq(u$jke!p4ezk*;j5XW+wUH
z6Y}MXN{$x39n#b_$-=r0#IdlnsmA|OsDa7jAA?V0+&#WczR}Y<kmUZUf8(AT^&q2a
zRI7~a7fI;HpT^a=j_yTt0FN6l@Ukw*tIf2)NFn9nsdV(rd3Hs2udbKk`=OyK+98XS
zm2$k4pG#MtCh=%ZgNAygE`EkZ(t5kcxHG*)YOK$<^tnT{@<d|S^h@o=YG;{4X+9_!
zLf9z2NiD(lWp<6IIT2m>WVQr$kZc^RL2<e9gof=87BDU6imu^vkzZZh{hmtq?BdGb
ze!R!0)_Z1oc<Ts-durcPS+RzfS-`vQtHuplzn=U9+Ie~<SqZ<<d0o|qNmTo~pSBm@
zN{c_st05zJN56m5?{LYOkwpE*Tim`l?>qTK#hUPUnOxsfOO$Gb2$Rn*qm@aen^74@
z%k`fs??05q<~200vymUVh~RW&yO?|D$tbH8UmD*E{EJrQ8&{ftOa4ve$^Z14%0N4d
z7xLV-Cuu3LjzmzH-(E(0RdqP3OKRI2mB!aOo??+6Gym$EO3$~B^yJCKPD}lbG+H%t
zoHFH=<3DtKn6vbG7MEkjJypL-1hXm0i<|a3NK<6ZQhoBjxZU(;7N1l6X;C>YTQ2X>
zvZe;3a)+*eK*kL@i-XVGTbDuWRcs^6)Yr784r|?$W%euICKT1X&u_odCzMz3#@o^2
zddK&w*8i)pqcgI^*y78wemM&}Onzp!{5q-BN%AG|E~t&HCHAdro5(kybuO-hgI34C
zCeN8ZB+(x{A;u_Jx1#)YifvCB>*dcWvQl|v&3x@*OIuvNqPu#JlYR&pfvHzG=ym3K
zjA@Kuv{y_20B!r0&(C(@96v8D%LLDQr^8-qw$g6ed*$<@@?W;?={J$(+>zts8O1!8
zvD`eNv`%Ik`0wPub^L~Y@lB}b>1V^9U-A9@)8}v5lBC}lrQ1teo^H=hk&e?l%_xe*
zENG%>cxc(`!#sDM9V-#@#QgK7ugH<%r=5N_%t_iqVdaOc*OIMBF?@}3rA_U)&-+gq
z_if2_k&%}8zdyd}=~?<R|0Q`R-{_s><@Y}&(X3*A^ZH9J^{gU$@AUVb{O5njm;YAh
z=AH8o%?tQT@*nOR|Dm(;&PlKHUT1OUzq_;F>F+yT`QJ3#@LlphHOt_g*!n-RTJJ>2
zJNZ-p(3P2Wz!-6{b;zDyIlbi*b#0_(f9ovjo?@xqcEG?l>i;meblaV~sS<ysvj3a@
z{@wj24!Nq=^e1K}l=`Y|8nK%!LdHxQJa;nki?lY${tWj#=`C(Z_M$76tN$t6qov0F
zl=C9#13%KaX_?9~l-j?4k*)^yRV-6VU^&@1d-&?UPv~Q0<mHoJ;p_3JwV(XG@*YGn
zfyJK|J>kpD3`TsOO7?6`imX49#eBY%O(n*Yu3MS*@{6CrWZkFFHvj4~vW=rHUH+L>
z+r7ypgNQ+^RHk(+em-2W=o#^OmH5_IVsh}g`JUr~>ImZ}ey#rRbj^H?m5Di3Da|*z
zr6K>-kA8GDD#g5%Q(58}wKCz9i?K>#Ka<N<{QQcae$kV^TsxQL!BXEQMGJ-ruv&UG
zwKVfdeFVq%@CN7He)Ey`(RFBgjx(O^=|pRgTF0ufqt90ti|soWtDGfGHO4APwBde5
z9p*waCg44Lytos+8;pH=J!NC1#d^gbq_54Bz~|>LqnGSJvZr^9IArZyI%-i|tC5kP
z&+`m2>-?$KhB6gfoT5+t=zKQD&iFh#u6S$BJMt>X?&q~%Q>W_gD4()73j5*AD2t(^
zaxk}(5#4JVTUe4O=1V%~N=DTCL}y~b@%+hq%SOD@U2a%Sezf$@-MDbq5l6gdMc44V
zuJEnVPyIb_=H7F3{TY8(MtuF~6dHs||9{*4XO|cM%8!+emhOeK{;9W>jdTsRr`%`w
zJW4s~x@eMo)wFb%ujtR1e61{_u2*oq!Lue`b2xjw=(?k4PQLbVTUm7N(K83HjfT@_
znf}L`F)zydU2u3g>u^b2W?7l!wD`S{m~9Oi#B#BAjN0*jv`_o>nA!jZ<Le1MUrIlE
zb)@k3_5X*j@NUc%uSo)8bCmOgyYApsMs<+Jq!v_*eVxRg-f%th^73W;AnBaDYbw>3
zzxyy{l;GwUD*;UK{2__8P<EX~o7NNjX3R76<Eq1bo52i=zq;phTM?(bxsqo5^D4C>
zo-%KZdA%(?UADQ)l8@Q)X+F`sq}>>?Vbse(OFa6WEYg>9=+`yrxzci9?myZt47dFB
zjW~-smX7pNYlmw=+TLV!bz2#HMYYX;j<p}u3-vl{q4MuBXoX)%OYCJr2~%s1t_RzT
zVQVui9rcZV1LYoVSB5Ry_*P)}yz%yLSbtev^)h7MPQKKsjMLc9^3N|TRrVx@?cb>7
z8mCY0Ic!OX<$9;c-972t*IA$G*i+=xlbX&H=g2jeugRJ8v9XIk<@N^hY&RAd@AmJC
zieL7p)74#kHX`1&&my30no+hZ5$54ir<}7R8D(LW%MG2yN;y~|uJnW6PcNI7A}zJ2
z$+te4HSx7%xHgh?ldd@SxriFJ=%cN2d8&r5^X19Pe`doi@-z(jXkXexg2!WLJ^eaW
z9mfLXz^Pxs(XWEa`edxNHX6I|JuNaXVU&^b?AzEd`gfzTAFLz2HRvM}gT3_k!*fV&
zDaYucT>iE{m)v>IPp?L;f_=#MJx;$q7X3@gPC5MQlaq9Cs_*+Ud8uYDayIg{=6CmE
zbZ%K~8>^9~qf4xy<=4X6cXilj)}p1$GO@xIccVv)UaraZ;Kx}l8qFil+Plg2xsF=I
zQ-n3vKY(t({+rbuZz+Z?PFQtk*bDM4(4eQ5Mzr&(n(W;?k`<!O9c_gM`-W9~6a3jx
zk1s9byx7AlPJM5*KP+FmyDxUrkE4F=e8}N8IWHnJd>z`t%l()Y9ZNHJhtK!ccR0tG
zOwfF-mg~Qai?*lQU|$w`IP@ki>t!@j*c<DcjrK%~{Fz~?%lb2e`)1Hb;Th5j_&iT?
zDSb=Kp2pZe`oyEmq|u0Ryp{KQhGl53*E1Y9^HFH;C;R>Sd>#>Nqp|)w^WGVq_x`Z=
zCA@$A>0Wg{<->m6bS?kzvohX%{V49gm3bQ1!~`BCdqU^g8UM6~qj{O%HcDQ4t<V|F
zq&6D;-10AP{pMxokJO?ssO`jae5Y6NLVsu95y(o3em&YnStsI7-f~PsCOLNX*ud%K
zG#0OlMHtLR*4`=hM6Z<f$NK8!(hjn=n(x71bMIMoy@@n_iloM4=saRai2!YhX4>#J
z5t=W%F<Te2uU$XR&lJao65nKP4`SX&uIIrqAFYhbrhba##%t4f&9^(v@=-^<f@ulP
z*M%{CRZKrnALr1;a`x2r<F~Fh)K4vv#CW<Yo<{A$yx8*Nd~vnd<K;5e!eTAIg=uzc
zn@?Z9q{d@iJd!a)-<p*I$#mGhXklZC1WlID*b9@rd`r=6n^;U^zQo37U3@OMY%a!<
z$x$OOZZ0zGSVltQFI4{W?M1UK<Rl{VWj02`Vf1G7HuAEB#$TxX<=czcY~(PJ`7#@$
z;V^nDdK-CJLgOz~{_^cbY&LS3$b6ZN(Rvy6z3dmtO52FiLKewq?1jl*zNLu4I*y|;
zUt;64K0aApf*539^HcrGXUxGPbJv$Cu5oMDAgCs<vDpkZ^DRr$ZD|!+^EF`n*2gdN
za+v4Mx;D(VOjq!VF^8ATrz+AKmrdX@-=;L(s+K1;Uw&ivs@UC7{v<2MG0U;po@kLI
z##7xq<=69O*|~9q<;!NwT@`bqIpGWHX}{8p*+tp4eR)mIwrf?TGwwp<F5gBp%l=g%
zF<)L|vo1ClUGMQ%S;pna>|v2)##?B-<=cg3+re=J=F4hK*2UzKyg}CaWCc3@E@=#=
z>qcVY@(|0*X)K1#V!j1wwzVurXTIddYkj;PXr3W^{TwM$_(opj;3}%I+0QDn8k6BO
znQu*+Zb!>fnlHU^TOYTv`kmwCGS<RkE#D$E-5%!AmoKUDSRapP7pw5GHvXde;cHsE
zVk@$k<dW97V$JwN<w6!oX&i>kVZQBXx|N(vX1?6UYF(_}mnC7PpKbNJvpr<l!znhq
zSw&LgF?1gD?MSojXIVn?WjAK)W0n~=>@%~WofaAOIdyBN#b`szOKLoZ&SSnEX}S$9
zM`*t6#%#UJ?z^38{T`ojt~=@XS}7x^u^2Xs`4%Jw>p6+ee94X1x_B*GJ-*pI7D;Bj
z)y3OGx7Gkw;6O7Wn32Dyo=;qP8s%g(2E%1Azm;mXJ)BHszSPEPU7TKCIe_sycB@;L
z<)o(*m))!`ud&$-HuEh@v+Zd$TJtqv{MN<qhvcR5JFuna(XY@_O;%$vd?xd)Nwe)~
zc}nx8H*V|V*3aIJ+czyIqcIpRgZWmY**0@BmHAQ|r*(1qR=IME$&<)>?&G8~&O+iW
z-xf660_KsIFQ>6sCyVo%Z_rn^@OrYV$Yoq{OBgJc&)5r-y?jg2e2X}q#(as5&${^h
zMYiL4@+|roWO+G_#jsh-w;;{7ndRurm)v-*i`OTbEwL57<t!_uaTqd(`L?6kR<jJ5
z`Enbp^|E@XvG2YtXHP$jg2&b)_he3%(l`v6!+hHjgUu`^Ghc3FwJuiQy0uvMql;QH
z+wrng##u<5<=cX0+rYf~lrN{TSQm?L+}s@2B4E^potWYpvzaWPu@@$L`Ie&D7O|Md
ze2I<Ey7)}@NoLKK7<Vq2ET6F#CVTmoqS>~wn8tjGjnDe{e5vfl%X6a^-HgR`^`uWO
zX5GZ)PcCad(R6YftIc9H-{Lgg#!f?Tz9x+4(0Fc#r5%;hI1HJ?eA^MH6&)lqUv6Wy
zK2{n1?#Vkn)QUuL&tY74BmHG%H73JnGT)js-HMj2k@?aaw_$M0>TYLl?8w{J!B%ix
z7B?nJC&_9|hR<ZaHE9c_`O+J=^>MqZ+#L35>Lf2@MYp0GfnSzXlO#0$Lgg>tUNqfW
z7898-voTs1qpxHWH=TuCcNt1?j>eaj(l`v6!+hJ(Y<pRT%zU|x)w)>4m+U&vYvscK
zVhzll2>0x(BB}8hI*<8wq}lefETQ?b8?$vWOS{)o-<%O6R$*Uu{d9Iz?nh}!tIKO_
zHiON4%hGJCT8-9x4H&;y#qXl)!>?)<`kt(3v&V>vWih7eXDYw8H_P6Qrz~GO<L;`s
z^Q%tKmyTn^X0klSRv2vM*ZgMLwPM=xB{cr7ia)>i@Rs_#eP`XsnLO3IZsT`vtRk85
z78-B)cA;68uPlN2vKo_D#pFV=tud1Wmy3gk7mp3BBAM|P8gKb_p;<PtEP?s58k1MY
zB%>az2gKiZ&KK;<E<SaZaYrK|MDkcMD8{UBtbP?~jmsu*nQv2?W<RH|m-+G=yY;bq
zs$TVide>=w^qH(_Upv({dwc|mhTD#^avF<Q#p1lk+t7X_9YuFuyX=N;!>KDHk?|D@
zU-@lOv)bZG#O2Fq3|<w3Z)M%qk_T#y@aAci7_;lCH#6_n#Xr<8by?e+t$n(!`K;IU
zS<~jOe!9HIX8mj~I9gZLyJpv$W_yC;i7b}VI1HJ?{C2HbZTB=}=F4rYhQMm9BQ`~x
zmY3NWZ4RUPRwf?nT8`R$Ef~ikaD1$uQQ!5Pm{XYLbH(ecmX+A}Yzm+G_9Y%GTZY(t
z9T>ymG0cjN*{s8+@8VeG(++bxNp54cS*+$;oLH@H5xx1EFrMq@dC`p;97h~`9WSBr
z7b<`G_97O`nNMWC%*JT_jFz3r5YrfH6`76E<}jLXWn!_cWvR{Af^l3w$3DL5cao1a
z!dfJwF&Hj``Bozq+c}QPe5sAo`Z;BGQatN&jE|E}lG9iWo5g$!5{um|qBCD|<F$TX
zpSv|a7}1Y+e5puAV=!C>^Q}fK_HrDR`BEFF^>g|{R`O8u=Z-Z?q@OIh(Rn=2y@+jR
z6`76E<}jLXWn!_dWvR{Af^mFR9Q)^Vrn&DvYvNcdj5IsiSw<q`D-^!+>wmMX;3VSm
zWi$q_ib20(JtH|?`Hk!?@y@NML^eJB?%9v)3G>OaTMMKkD@Z&gJ*SEDl0To^#%i-z
z&9^wsvZ|kl-h53M&sW9sy!^?d<h@%3f@kqgz4m*~%Ko8VJF6~rbYx8yn4bNKj&K%h
z;xsRZ>C<F2ChKPMsp|#7W$Z+jk<@sskH;mgm%|!4G1<aAnT)ae81wCLo~665eh=|=
zb{}9(#CTfbveFut^>KN5_Err1<x6Fp)yEm@(j6wd>Tz@~R@e4riKXu`Nj_t*KK9bK
z_gE_s@2ic?YnS3`cPC3~Jl4k}w&Eb!lr7v!?(6TKY+@YzjhD=LtB<$T{;j#VAZx?+
z)#qUCa&jPJ@b@N5X#Ca3-)oVEm5YP5VQGx3tK!PHE!kc@D~gv8Iic-j<oKwe>sgnV
z%UBDGwfxb}W{vxnqc2}l<FPItfBm>q*(3RJA7lfGAjh~zSrti*$IyAqw<FEAm}Lpg
zm))4Hi`j>=nyVLMzOh@;YO)%W;WL?UO`2^<%Tt;!y>VL?w@+nD*+1Ohf6+y@Ins};
zZ(d$bV=-(N^DRiT?PobU^CdT4>*DoS<wHD4V)sDHN@*O1%wfLmXtvcXLuS6*#_CnE
zdU>t~tA?#ApRB0Oi(zEDtenQ;Rk1iaV#3Th;z-P|I?(GyW%n#c*6%4NqcIpRgZV93
zvs>=TROU-<oYu+dmTcr%v{tf6I^!-x?(%I!^DW~z67%IXHtS;ZwY)|m=bN&Nab>a<
zNoKr-##_E!Xto_3M_|6J#$;VgzLNbrP#^kG^Rwczfkl!TZ=vy)Zx@<v1IH1VFRL+m
zRZNbLX%9cKn4;L1B{SZxinr0Y^&9m!x>^ftMQ!iCX3y}B2=-QFEpT}`jm5B8%x|%p
z-8z?}GhcG!H9TJDmGj8#>UE7x$JLV=Pim3O#%OaG&9^eK+ShT^=4-(?zABC{_lx}M
z4v(T=x2H%#<L|2YBY)>q{h&SlC$EQ9>Q}XzeLvY&ABj~{cGSABy8o=>b4`7x4UOJ3
z%T7)!rEyp%hs1)qVl5u#MkO-7>g22M)>L6U`bgHVD;xJ-c5qc|=J{3PW3hDQ<TMuR
zWN}set*g!TyB4s%1v|=+BM}RQlO#0$u8O~v<hgnm&&5_>xrzOT`EsMBH*T(q8+xYi
zmF>SS%d{iA#EOdV+&kt3uvXc7^(8tQW!ZAQiM~ENbfYY+yx2?F{i138hEJE+_^g-D
zv}fB6Hp@$ET!zl&`wN@teZpH&+0e<Hj+5TFt(V&k*VdE4?bq`5K7eokY4`CBSPi9_
z-etazQ&nbTG(<*^MI}2A?TgQ@i+FE2?=*f=CrNI+hR<soEb1_)nZ(9tczkwT9wmMp
z@$xpb_~RuuKEvblP#!8is^678_BK9WTH`WAF1yO0zyswk*^~66vbHXU2x(q_iJoDR
z+{S9ithR~IOjctuJSLA^h6a8312+N{d&@pfUSl&vHoNK%Z76qx432b-w9KBw+O{95
zZ7-7BSPh-kwlSK?Yix$k=6hL}J=xXx+xkH}+EYHwu-wLKc&zs1iLSeBO~&cZmF0A-
zBaAfp9m+CG6Km^VUIWJORq>n7D_gu6t$&yNs(Afg&dU3*#VXM#I6ZUcG>g+uk<@s+
zDjxImD##?AoI5%$6R267ehCd2zgNZY=z22u<(YL|o^#*rPRf2zr|uYDYPv&nvk09|
zMq{up245=&Kh2|j;oA9a?GVA*f@J3(>$AamyKyi%oy^AQRWbU&5xFMv_Acz;s=Uf(
z*};4njG?Pyh+SaTL{Cq4j9EqdqUoq%4CTvU3|$pNX|Hg_tz*GxA$jVH`oAffXdC-_
zzvtfflUXswc;d0BV~&2WVYGd!w8mvvTyCjvv7>l5F`0OIyey@07#4@Vm%AT1hnJ-^
z4#VPbO)WDkO|k-2+%_>^QsXf!9`9Ymtv8Ydy*ifnNPi{Xmbyq@V>2u^ZzQ+GqF=}A
z(AmwH$s8}OaTywyH^n9K9M&9)o5?&$jmOY<oD+pVCbyFt%Cowee6PQ(S47-8-j@7E
zGD&LVG&D|ch)D7z$kU14a^}lwOoqjzAKiE$Ysm;RBQ?8<R~|$eH6JIdF&P$<J8qni
zeSjJ1VeXC3!DWvp)->;_RcAF--ZyJJy4>ha75R<bCb7$`>2}jQssZD-N&K<~$Dzj9
zI~vg>qoci6c$_AT=O*%eBAPqO`Zb<MHDNqAiRYfIGrM2Rx+uez#taxe=(d>aNg6S}
zL+0C$Fmzp?@11P4_df6;$@gOfqCFP7ye^FC<}jVk`e5EBxvQ+b;WO@8(Y9&3vrQA<
z80LDCK8)><*?#0K^g;4a9FvEAO%b|wP&`g@<27Vn*PMTR;P$+33#pf7Hbz5cls#MV
zb`P9q(5AlJILVFIka=Bj^R!On&-z`4+hSMq<u+EE!|L<oM0S?_MA$jDJ&}cBa`Uxd
z9EZ$tN4+dEcV@-zp<BzOJ@k&3-I%>9W=GeXnb$0ubjCs)tCi$QWPH`d*F85Pz<9vC
zn-{aK);bQ(iX=1M>f#L#iC(zxhm)B|?tL7@70YJKg~J?kkz!?TP&Q*O9OjsT8Y^>y
zvKe#rGDj|dN9%8%D#{%faru%NZ}suUj1s@+(6U~UO|-0BA~NTEnd0HEyrjlseLRvY
z!ODn?@IBJs4<eFXhy1Ps@z7XSPGhk?7MGJ($$huFBDrYsus2RFW34XM7RA@T_Oe*k
zPb{3}%Vdnz#n_SvTT^Sg;k>+!WJx|Ac?o3E#L=rQBcbtEAAbk(<hsfxIFdj2MwV_#
z{vERz=yk-yU^yv`!}>Uk&+c88$oQ&{uQORVa!;5Qz9`$q>Ze-~S-45^8GCiHcVFD$
z%WbQ5rLASh9AYQLU1Mos%gJaA*2f@yignl1V1?a7jbpIqNn8w;k<l2em%;tSXAsfn
zjV(7SUERM(LgTM4{_^+QYS#K}qj{|PG8toaG4@bxs*mLzXq19cT)&rm9I?Df(iwMk
zad&xCc1dfWGgoL`6tbFcEIo}Xk{XY7@%SNmsrU-~okyH8P*zIgur3b$=xwaFaFTS!
zU0vM0Rjh9@c@j;lds!Z1t4_A&6+!MRs=Tf_wY{h)8z-6ZRu^x-$d)}%o<;1(m66c+
ztBb!U8m-uhn7+yK8GH4z=T{1Nq?WeldbRPixSqWt`Ha1~*n2Cx*HwOKERnm*@)%on
zvGvA{O^^dXFT$@=9mg0&kz~eOUA(397a8@BYeq$pWX4;4yuDQP?ebXBq8kk(zum8-
z$0~Yp*u7<qxKx$c_zaED*lEn<Gxq9Zk3Ig#{$%~zSjWbeHTqmeO5-pL4#}1}bA6Gx
zRuvfLaJ-bpVSOB~D$2s_AlCQsrO4W;X6J`4OP=wv8FO_p_e!j7I^tMICB9zqWciG}
zy4b_Uv69q&vT|V^$kU5!E>JlcjlsGY#6I-Y=F$TpJ9*i)zs${zZDwQ@NsY&=;*lBP
zo3eiFKg%xR&5Qw#lfpQ<DvqYvPm)y#w)ESc9WX{EHa?rcCo5hbxf$Zk>H~jDoy=r5
zMz4xdpMymIqv_F?B1w#=tK!Me!l#ApJE9l`IMutZau1s7>6Meo7`rOQ{GKG~%IWkT
zn$K7{nT)ZkV~pqs(P93+bGEFnRivJ(w|by>-I43PlD!w#h#6i$IXR8R`dDNi3|1pa
zN0-h-Vc+da+RRwW=*lX7r;lO@jlZkn@2#xhn!GnM_YM@f+ff9iS-sLc35=hs;)f_a
zD}L^{^>`Lt3$v;t*sA8PjZ#)B<Ls(9n|G@}Jrh%>$!o_}b60XNmc^L5DyDqP@jxvf
zelZ>iv9g|e1Pd2-%*WT88r!HYpRpGLd+azHR|KSp#4^$vmmzR@EZfL#dHZUGyP6Zj
zXe$;oM*BEfR%0?eCdmoUGM$>cnn01g942$T#Kvd+d^UeSjPWGq$!5&e&s@0?%_he9
z@_K6Jq%|(<=W<7Wqb~(LY~Qm!biM6Wy*twQ8>{Z&Qy#ci&CHP+Z!f2n-`EYCUEdqp
z5xex-iF_Yu?MV7X>kZBGn~vc!dN7tlXW4U%9rm$MUbV>*?@MlKa=r$P->~^5YT8u{
zfU(Ct{Sc=j3ed!C>*=g;u?CFa(D}vp?P;vD<17%fNz*K}wsBlW6UKAsJTqQ!;CN<T
z9Qt-`<G4rz#&6jC!Yutc_Lx1C7jfjgVkl;u!OwlzZIypfO(Vv4Gx+X1uNlwd_`-i~
zlh2$oJzfjOao8L)mt#-1nf@L<z*QGd-bwxt&t##tr~g+@6UKAcJo_<zIEHFG5aLlj
zqQSaWWLOj3XqPWtT`R_UvpHvOu`xba^M^HJd^e46X3w*8b$fe|m#uiQPK@!e89$MQ
zCdTE*UE1Vp=Syz9hRiGZ8Tiv3^$8)CUEJBFix>biuHm@fDxagOMvU*!`92ZhtUFuO
zZ)`K|)9c6B51aihXVC}yOKpsltSJWS^9PC|M#gg3EbqyF6TKz^($Nq3l|=sbTIQXU
z(SxxZHp|SgXO+O-n7qnZW}}SH@n2KVqF4vUaL5dk6U^#J?d&5KNpIYS&h5TN3+WGT
z6#9kj%Jhfm>UuHOLuZ|=;f;&fM>?+1(f)VqZhoO(Ri&+CFEBs7evJLF*{7f6_vKud
zo%f@R*!+$=-kx!pb@h<TXu^1I4$tH|5z}HO0V6f-np-<ebdfHM>Cl-zOisjccO;+B
zuQT4JOedHwrwd~`Y^ME8abHIK%MC@Tx1EjNx`_9+$@eI)4dc2ATz3^Ez~AV*UL~1M
zL{eDs+UGpA(HrrMSJjO1-UQxz$@lWKyK0+HMg6fdqWqZ6ev4+&WNUv+(uFbI45kk?
zcEjk+fr|~`qqNT_>8VbS(}HmvI>(nYc}DYBiS*%(_%#;VHky-{^Hp9$#((qp@5!2x
zt?lPQw$l&4Y!!;NVw{K0dG}%t0_#2z^Bx_?X`fxMq7maee7=1q3fUJ~J}WbEj%3OG
z+KcUqgVTmp(TOo0Hsh??;Mc<KiRn)Ar>OSpIIuGXW0-B~dzRORaUD9>$6}c%0_&l*
z%@64+7Md@;aT_wX8?wC}#rv?p%<>(MlC(9Sdm616=b>}X-u0|hdFocH^l=fm@920t
z=Pkf_RjnB3VRKIQ)V6Fnqd4v5da@Rb<FGkq)e*mnpI_~LS9Y4!D}BVTooniBNcyT;
zG0sEh+-H(tuhYy|M&f;`+Y<|c?J}A$p2Oyuh!$4bugTg@k|*iF7!H|XV$gnvD?I4D
zoYwYO<?^~Pro(2MoeS7cba<zZblxv>e)n25^3stXU0xr?cGzs6xp@bE4JaSM-gVwI
zqcF6^ZQLV_S^a*;4n|wcX~j4Xne$CON5A43-Zj}ESnYO3LdxsHm=2q1>@zz;<7uYR
zz4rLmo34EtC%>^9KD)<iTYYcQXB(5xgne$)zDl0r$(k^p!{(V$!_)?6YvbTWw`qRk
zro61ldN7tlW*Lg<_oXyvUUGYUi^)1LhC^qVy^y{a$@mt&tnHg`p4Q=FJs8VPV0kS$
zmoKp@A9>H^NFS@`*Di}pjV{uHaohxsiKns~5|QP0t+tn1<8c}=ew)CrpBv6PWc$tz
zx2b=Z5<Ff9#&8oD9*$5j54wGx#CRPT!yz-gEgzVS&kwS|sXc1foWV&NFn&Ylmz8?=
zH0zVzOi%wi>dUo{;YnIBj>G1d*?+8G3ct{sw`Nd#{EBU9p}anf?a<lo$|mn>JS+7v
z+C}m>>5bcvxn=!mW<s$pOv-IrXR?;pg)tp6)8x0|S>P$BOsBc{?Xk&av|t>E%`x8L
zmV63w+_ubPmL{rc#P|-IZ*tw()57l+2jzn+F}BH8m(zst95&Ca9l9^i11n|mja~IC
z%Im|}4w-E-;vl*!vi%x%>>|&o3S%qlI@TU*U0xT)bm&Y&Fnf`}HdecRYxhI*BrO=n
zp>xdqde#^4k&kS({&rdANm?+D!{(TtAby4SHL%CNyltX*k`9dFuo=cjW-TN9<kYKZ
zAH|ckU>t|d@wx19d)Jj?^k}^N#%{>$GUur)PlD_kpJ6n*`(8Vv%+u+`SP!4|zKHL+
zXzSq4Rd^rm@ti%~lQm&Hhs`r<6S2dM=b7h;6(>ijO?$D?LQU3#u^c+fjBL{rgx=xR
zKsnmiD%|vx+B7d4va4#vI1in3?DU?VD}D(3vaQQ%vwFsko_3pjkZd2(B25_2P2qW6
zL=%PHbNgqq0zto}JQr!gcy12Qew=$<M0*RxKF94F^&X4>rBV7~ofzX`GY-dom3jJ$
z%oJr-OS{&KA(wWN7L4Q2IqqN3yCr(J#IYZRX_FU?m*s14z7CAxuo)(LM{AmmfVa`Z
zn5+fkIAo6L_pz%7`TXS84f>4jvBqVzU>t|dF)`*-(R}`KKJ4JCm~CRYoF<Itka;FA
zC*6@}G_!-ge7jeb`4sIK_s!y-{{FH268iid=dJktQ2e^(?Xl~ZnJ=dq<2`KN8Bg5R
zZyKTXrEOPU6Z?ox(t>duHpj>ENsiT*JalW)9BVAm=jo9N(IzWhMi0hv$Sfbp&+wz*
z?Tm&L%Wv$4%`Uxvtnly(ckS{g*hyoO7L4PtIi|NqZr!2FlO{8Von24lU9`uWxE%Sp
ztOet^SsV}NB(<64d`%e7&EmQ3vFOV-x>zH|ceD5&jXLkiyWVKE4^pfV<GV?Gr)x*E
zng@FtlTW&K5yxXbSKDc?rXOR!N$d|s_u3X88SY(=(}eNdRGv>2Jz>smn`S1Cdg6mr
zU)G1Q9X{JxhQn~Iplx$rJlW;6VO%$f>*83!Psu+g|CG#({P-t~uTD<TR`U1cZ}QZS
z6dga%>-+NHnUyf3W5<f1vu-u>)i?Fd?-(;951)J!T89mt$5{Q0j`Z|*A^9nJm%P;{
zYsmv$pX~5!$+KiBSxIJf4aQac_ueJ<F0R7&f4KCm1)WPh?dcQ7qWn|g-JU+dujchA
z*~R)WwnJw750S)9Tg)S1uLroZ^+2F}TFn^mA@k07q+dA!E612Sy{a~4J5ADn@f$Y3
ztRA^9Vu^mVdqx2@x127F>9CnTbhE0VdFSIyu=b3y(<ksdi08>~?1s+nxjc$J*<<fl
zFe<|<v(Ionoo<ZzW-w30ft_7g4WwQ6+H;*Jzp)!KyUbbIOa2tM$Ljgn-nH-4lc=T<
z<2!V|{XQ>wnIY}5(NH~E55{unEc<>@M}8!G$g%P`vkTg^)+r=U(t>duHpjki=y%`Z
zY5E>wny0p-5j|E(Xj2rL_$9sM@;WibLuY(jKJ~f0Yrn$jzQ&3DjJ~#UJy{RNa@Z^r
zh4!nf4@dFHvxe{X<yf;$W;LA{<6$%2m$mNeXUp}J`eWkNo#afPY`eC)T~R*z&!3_p
z<3Du%@l}{Xv+exvo^s^y!?F17+S3ct%jv?H4x8y?u}j7=dw8{Xk6dzSC+opj4xMGz
zG{O?Mci#+1o}>liIAo6d&ZF3tHTL@%4d$G-ZAMIaT^Q4$GrfC3bbbzM8_BMs5#u{-
zz8PzzU&t8pks>5ezTtK%Am^C*G3=qzrktm~q^_nDV?1oe4;Ak?7s<mB?$wVG?)K!0
zFbk-hE{y5WnPz4T^J+WF@ne*o2p>^y;vwxKx{M}_=a6|mmQ^zATt*AVamXB#@3bLX
zj9vB_A?>lm<7GEyLua-xW*Pft9uq4gv@NOuyTv*%hQnr<xW$R1_t1@P?}_D(tT0|N
z`Il|V%tH@lwP9R`%r!fPc0bPGYHx;8IXxK5VY5tB)o0&fkH_WVwQc7_)_zR2QC=^`
zdT6Y(Rvf+utJ?MTMBgPhk~_(~)~0)**0`^~e151^>R#!IpJ>H8vgh|@-LEAd+}KN;
z>*;;EUX1ndS-&aTZzOk<_m22wdEI!RWHn{nzgI12EA!Lp$JlQg`|q8-XJyj&T7%TD
zYU=lde&1r7Kg@qM9a$Y{N*(x7Yx6$T54~3AulMBd93;=><D9hK_E*!5G2aa4=j8P~
zy;#+HPu{#=Wwq^|PI;{u=gr~V`}VB6PL81Y_4M)aYoNV~ZjAY+Fh8eV1ybH;70IF8
z%!;3tU(c+w*_L}Xb7H@`hK&Cv@jn>Lu^KQK-}Sbi8c<zFRtK6?2VP%T`v<c9<k+68
zXPd68X}&%+psI$9|K{*NpZp@9pP8LLo@2z%X_RBKPK@#9Fz)+rSzOwBw^{FY?xJ^F
zRy)RhQ@FpWmU~{KQup+KNj=-y<Tux|Wk;}%o_f2-Yv&Z*sj44ize()p$9C}S{SG~h
zURjKXS}?7qtUffUK0H%|v+vr0M<Rby?+*07tN!k+_FiRf2(v@>txmX>;Zw9_^`c4j
zBI^yzy6lEM)s00r4#v*kU8@hSK1`z}s|QW32hZHhDt6nZ-(Wq3*?|%9S?x*AytDDz
zG47kh{kZWR>nWsj9sF1rJ%#CYWp$znb;3sjyB8L}t0)oeen*)A?T!~!(~GelKI`e+
zE&9ZMe6!7jm(zxE9X{7fm&Ps!dv5LZ<g4n%SP!4|hnjt|BA@hyX5Btguk3+dx7mu9
z)rYYiKHJM;`JQM_$7Tk(exE#11cKc$=H;EUi)g#%m`|e{V?KQ5St*0H%80CODB8fP
zk#OEq1bUGFw((w7FUETKtY@A$^T;>dc<i2d=UtYc&^FSmX~j5i66e2YE-g7Xtdzr^
z1MTuzGP3jaU@SL@<+t)v*jWSbWJ_KPT(_6#B5fGg^>h71d~WHNePFLSa*wnhZY(R3
z<x6MW)z95iv4(|wq5po@WvpgQ?2VVu_^Y44=khh#3)%0392<N2(iwMG#ho8lJ5&Dj
zvKV8R^`pkNuEnw#Q&+{*ycjxCtaC+u3v%&UJ@}onkvlFvL}aM1_dEK;mxxa}bM?Z`
z&8nU4x_8aoo8<G$Z|q(byR3Z79P(okxPC$Ix`^G;Yi63v>eF?7wj;v*8p<CMKNr!@
zL79{Fyrtip`t`fN)1&S+te^6wv|t=JgJb&F^t1hrl>1_xHKo|OZ??5mm(__e-gL&>
zXR*h#?R8;H*U9v-r<|_fN=#}~7P^@}a-N4#PEKPnTo&<ukHqCx1paO@jhUpzW4Juh
z3u_0DnWV;JojeXl1Be@}x#-up{?uq3jPZElV28<RMC^VEtr+Lc;+*`?a~DTor_*)S
ziWs6|)ydA&gRxvE%Zz{XR2XArjRap7MkSaj&hcx?`peE~R?bOYPis(`G7=k~b@Ev}
z{=oR!fugnTh*}LxYg~rQ<#5YLfBAd;+PGMr7L4PjaC|I}U{))MT+>dX*Yy9k{;tdV
z;y<wZV4FvMtLes=uao&<>&%mTr#ywhOoqu%GtNHTr|80%4vp#ID86T!b?=z#(o>Ea
za~9K|_wr7DkVQY!|L?V9T0F7i%Qbs6?l_%hjQ6JTep7t^D7rgtCv@XIvjk-{W4t$w
z_dBxXtH~W%{7qSV<2~cOjAo4YrtyADV~2O;yR0b-*?1rH^vY<)cyAi-H=QSQ%lYue
z`ylUSG-JFsf%i4#)4g}=G;HZFIVJq}b5RaOeqW!m!#8_;GgFjxr#9vDaP;irllJvx
zKd08Lp2Sj5=mGes53>>P>ep(?B->I>XI4j=T}Q|}WTk<uE!k9mc~kYp+LG~YNp-DR
zJ&C2B+;JWkepmWqZApGxlGT!OI<q>`oI0|l9tpXTjHac%kd8(eHuY{(aVTFW7*A{C
zh?;LXrqPkrfo9eLqObJB@2DTXrW)|0)c|Q=um+UVkn!J4{(o@%-xB+)`suiF2;xxI
z0;H{EISm>A&EbF3`9MAnOMGcv_Wy?H=l8uMzwL3@>KZcso5TNx#v~{$S#_(b3q9pX
zvsSp@VfMXzAbcW5Ceoj@R<twE&i4vFkJhZ7)LBo4^Gp4jEUaDF73suM*$snw5zqKr
zRf&zyI{7S~J2;#d%&ZpXv)CN1JS`Z<SH<yL+0He$XB_+5F35UfSDBAJKW0@z)-Pk_
zjCl3~m@KLBcvU<ux;+e+)vFs^_cd+V;S!(sNc^$y8|^(_@Oner{7;qExD1I)=F3Cv
zx`;e*F}VZnOo%;=na?s(8>eA$>KVm;`qrLT&FnRmv7oFCPMyq`*Vqh+P1dudKi|_Y
zyIQ7uu{3dI!7^+X%WG_g#U{RHPqC(svn9ly`m!y4esjF`^T7GoljJs5!(!F%F$t?Z
zF-kv)wE*L_qeb!>n<23YkMxj;A{~mzBfX~`JP@mWt;KpM4`4T9R;$Tx?1sp0-+8Hc
z1MFUejg8l~ro4`q*%%FpQC3m)yJ&S?Z)(-WOLs0-oQjvza&jB1A+hRL^P?vPv3LbU
zX?)LrUEaW|;;2LcVz#f<bzlrPiDCTNHuF0yzp)!OyJS%9DaO^7-q>a9TdV=&Hza;f
zWLb&)#NG$Xm(y4bhebaJ2djDHXk3>+%ihNHp4rtEM%l$U*8W#j`HkJM*ga8Si|m!6
zK3IE5o?aWqbx2%q$sV^YqQH!o$x<7qA#uvO4##?GL<*R<MOGcrFXnf}>oJs(+Bgk~
z(?jPaY>3MIY`SLc*ETsrYfXN;U#n}J#Kvbhe3Iq4*^>TNk*vmKSWNC~6pOyqMxkeh
zMUAzsht}#^Fpk6GnEY2ilb(DnKTgomOu%(FAB$t`kJ*MSE_j|^8^(1=T&HX5F-s(+
z8e84bGmf|S#cXxtBR*Xux3L;3tK`Lai%Wkj?s<m8v=&KjyoSZ=VR9l)yDnak<#okA
zYX)A+Np8G`#H*hX>q~@(x1lI3Yir@#`Up_GJ+$(&8?)gt+g1M>PW!HhMpg_Fhqa4U
zTo_k~-9zyFR@H;C93IO(t>ei&@I%c8I}pJ~7q*u@-{YLYn2n}PlH7O=kyrKxW8~q$
z^{Vk3;wN>y%*JR~jAs3=bUw{!j^gk<@wi7K^5z$n*N3qkI@>*2VzO=hys<X;y_f5E
zu?~#kuo&)M<cG7K3^83lvX+fO#BPtP$Zzb1#;(t7V0=HzS!6!Wku0!Zc`fEqG+LS}
z8ZdrC;+L7{eg(^(c<m&Aida7vz3*)CLB##I^0FJVVKI9wPJ8kaSVJjp-=M4LU%sry
zWH?N2$Y!z!2bPl=kHgV~cFY=^MhC`lSPUPi^=DPOQ@1jmj~~EvN5|VRhZlyc>cAKd
ziD5Erwq=7EfoKb}lVvtWLt>Ow5&WuN_zCM;>ysy#M!njwp2voK_o_NDhQngmXC`20
z)9gk@e|;Ha9s7mbGIATMA+buF2kYwBR%`>MlO#4i!{L(|V}5TIJl4Ft#aOLrdC85}
zka%Uq??V?S7+k$Rode1I$GvDr4Lb5$%S&(EhQ#fe%L(^u%lHWGuJc|QL7>Hqe=i&6
zD*ILJ8S^Wr17kQGhBx)p{3=O!vt$=wZQBqrC@;D38WOMARdxZz*GnT@vHG){t`!+4
zt#KI|m&a-Web3A1kCOX>UF}5cy?R0?%WbTN#44j%sqGxjiH&zY*rxoP$x<7q;cyC}
z^r2ExGp{t(_I|R&#%EZ3vaiSYqLlXDm(1r6#%o8@+E^^LaT*?{YstBCu2$uf?ztS-
z<B0bJO(`vs*%%FvQ6h-!>_Oy|(bbq+dfJY0@*11rvFYc)vUbtFv!C&|@#7^nKEva4
zxF^pH(Acf#c!`bAaQNJo&q-F_2U*V4FN=AO)g*b1&9K;HHO)QEiKDO3)Ble8MX~ca
zNoHd-Bu1Gn#X5wr37L7Tlf>HAZ%gL#(i^v7aod$G-POoT+V00p={Q-9$#9rt{Z?j|
zuqH*yWIJZ{m6zOj4To3qoM`RwOjBN&Pfeb5thTg_%*JR)jN+edshua+X{&V}>aO!o
z%gb-<hQ#inqWP@z?)UA1;K5bb;<d5m<Th4AVwE)j_vH=vvC($L0e0oJmzUnS4ToDY
zqx_60GNH+kW)EOS1Q-`s*RfcwY<bCz*RXhnPFCZGTdZyDYhFX@B$<uTuoz|5Fmt4R
zgdkhxI%aD+NoHd-Bu42~(boI+A3N$x7cZfcBsM-n;*(kWtdW9Wnzr<@6FOODV>Bd2
z&t*T`vd$Fa9OI=mF2muHc_i$BNp6PEMj74jsSQ!o>9k-RhsJSVH1}M5ad3wfJc3v~
zRZs3@xsBD3SY^!<_HXd4^7OF2<g>)P9}w-xWT}nQusCHjm0lHO`fQaW*U#E=NBdgy
zmVU@?#P*d{w5sXA7!HeJ?CYMMA-(~71Fef-X7}%i>v;WwY{$7GxsBB@SzQ;cL|OOT
z-fPUF?ze)~BDsy#P+9e3tLviG+Zy(^jD4haFfNkDoQpMJ{D#CYjQaJO>3cDcj@bk;
zuT?>I<RqDm(XbfpUyw<EYs>YZ<Bn$G=lHsqFR}3%5}!n{X!EjB*Z5og$ub+G;V?=c
zigoS%e(T$<m=jP&W@9uYMv0-Giq!Lua{~w0yNfkOb>L#hljSy6!(o-Ij&yg4(M$n6
z(>ASW@hQ46rbA|$p7ODL1$xUJ=Rx@O|NWZ4vD)LyJeSjhu^bZ1jC1YkH;qa9vc()V
zV8^*hG8>~IF?uXN;aL5$L$@BrvBtQ3z7}Kc@mkk1QX8k?aC)S+-;cZwj`hUKXR)-#
zWk_5SFTi>ZuXq)68_!zulVmnVLt>Pk6FF9gF3**`4tD%IQHvk11)VIjF&Z+X!}%-i
z;WS@vV>M(}+ZAiA8f!LoLuPk0s=6m{cB4gpL9zVCZn*5GYqzr60Q*>yGq`pU%VLg9
zyGX944dXgot_LGramNvc`)K3jHddR#>Zzg(%s-5GCfBIvJ4ozh>5bdaxXs4UhkMy^
z&o%JWmXqC>4VT$AMj0|{i={Vi!{PQ1^}*N?hIKSq5uHqeHm+ANtsac!a9C!X%+LO2
zy<*0B>9fR}88b;<V>2W+St)K`G!i9fQ?@sCu$<(^Ye>8vy7{D#n(bN~>&Pzi+5L{N
zdD0q}VR3n`R(?-*)VKAFDDbL%c9ksPX*6Lxhsbls^~3huY6UUdS<h^qw8mvPTrxAn
z?+JgbUR3+`G^{GWu^Se<eqV#UOoLc$E5uHg+Bgl1Q{U_8$dh9qBi8vP^E=)(3!!w9
z%*JR)jQW0--zA1;=X+ae2Gfr651Hv5Z<LjY9sSGl8Zdst;&)qPT<7v;{Yr)VnltO?
zM8(bQWT}nQkT@mE>Q^ovj%1N13%jxB$g%=nH4PZQA@SRH+1!0SL;4~8G4a?=a;8tV
zU5m=PobmR?K20CSc35oVKQMD)+xfdaWzORFVyR=^dxrQ)ImwOJka#^7mt^Cy15I1@
zPVA}unJl$&8WyLlo`MB!%UbeKI!R_@G#p0zu9e@G74>^_4CWQaJrkk4<i=}QyzXAm
znxAJFKebilH+Dl}moYH<SVRzx6iI;K4Y$HKS)|NMU>AXSqXvD+SWN@QZ%F(eDlWhd
z?!yt>)sGR}SfgFcwJ0aK@fsGd%t+|D9?75baLM^%Cn0>lgJ@&3&{{@rV>KLBk7Zxl
zW>w3`Y>bA(D7i5kvZ2^hpJ5Pddp}-M<1s8A*~6RhR%SRcyF2dQKU@||Y<z~qC;j^q
zN9Lg$Pu&xz9a&GjP_pjg&Co*Xva%bq;V{dtYhCr{{j8X_WV4i$+Bgk~Q{sp|3ky3s
zE*~rIow-=&EtS2z7L4P1Ic5zs{DEWn0DV2bcgc<9PBNb?B`?%w_Vt&~50lO0m7ecO
zvLgSMUFX&mvHIY~4Sq`gIr*n#X5_~|SJs|o$F{BH@5$eE^&?sI1HHa4pMyNx86D%!
z>yDkC?!x{<dy4DM=ni<(teUu?cZ}rEI4@-;SxA0TIp6A&wd8@W&+fU`l4mOON;0c!
z&>!^Qdzak1xC-C@LEl=`k@v~6uFUM8qYIfoT?@u>XdK@Z$v2X_dfL#u?1=Nbwr5Pg
z*Yj@&&(mtdxDK1^_s&jZ0pH8AdF$!-0e#;ZTRqHnHH{eGVe<W>+V_Y0p$AAy-E)4#
zbG7&<EwkCxG+{i4$n%^$k*614@1DG8Jk*XXcALD9@;WevLuJ_e()78=6>F;>4arqB
zVLXS)^PHjuDa*6!BT`DD60`E7naMNTGW$G@K8)>f*&d8}7~RlaT_eVKxO~69u+k4?
zv&o}8S1&OgEo_@_4c%4sVQh!W_I&b-d~9aI`M5{>XfC4x<2O`(eeWoX#J0DmICs%g
zEUOD+I!vZ-s(qc;h{`?vUs5k|Hu=r<64}e9eUZHC+Ayxe<vKqGf+y{Fq#%Q%ZLtst
zpH?r%dbq4VbJ;@J??<9~Q|}JcbL^_`IIFxO^7hHx-)|-FpQ0OMK3wKA?|asbsPBpU
zMK^}SZm-=|vObMYjPYhL{!IBIK64a1->xxs{FXtsC+WhN4wvb1qZQ_vPp=u{Jv`oh
zjEr@R$;Iv}Vul6lBph##^{%D`<2W>q(>XKbV*8P}_Rw2Sc4Ia)W|uCFGY<NWZLz&o
zwO|~F#__}CxyELe<u|-iT<@78x63W^9m+~?+=j;OvN&ZvYC6&|=rO!co+ysNs`B&l
zhMD0S^L*QBG+{i4#xwK(vsv4-iozW_hI`4)7TM#fS}=}7<2dttnNz#z#tHYtGVii6
z@whE=H60kk;WGS-<{py6!CD-w=N+>jkx`p3wQ(9Qr*Gvuup&KP@0L6Xm~9KKMY0>S
zSH&zDK;#3lB6nY_1+B<t;?H6=Ve?2kDmH7qqcRd1Uv=^It0Gp67i_z1v=8EpRk-~6
zEwK<+PDW#}E(RZpx>dI#Y&T*G%Sve+*2UpdamfA{{{D-yg6vsLEF~68SVltQuP*+6
zRWJET#1?R}e8yf~?6I~gZ7^%GGvY&b_Hs0KZ<2JzU7g&~%AQ3?T)te!T3xJ>6Nh)V
zDc)l7=<;PU#_D41mH0YPJIXx1SQyKf$r!7Pu{W|`>`JmC*7g+<=A9q0h=sT^5*mNu
z@i(tnNt%BXKa2U&8kbka<?#L+j5A>c*+InTkf(c!EXqPcB|Cnw$5=DR(LPmL<FbA(
z{WHAgvJzSQfe3T6Msvqgm?xVtR}XXPUPO>a&H#B=AEqMBTheq~ct-vv%#xEpjsp84
zjoUxTo_*7wJ$qEqo1Jm?ik=2*Q}f(^(y^xlB=~%R8J&Bm&u7F(Ct+Q(9rp@K{GM1d
zA6fKy1|0YMaM3Q8Cx$V(b61+5ldnV}yK_*wRUM^ll!GYtSMD{vq)x(_!{cACbk?cX
zBgsaeAL>dQdOvLC(%STu+e57Hs9$$?W3-U#KDw~zk91cgUDAIt&$-ryE5-G(-=%EX
zsN;g(k>Bg@wW{*J*SkYq?U5p++$$~PysnJoX|~3y&Ks7m=kCmIz#Wx}?|$u$97s>8
zM)D;cz7ASMpUCXjwcuJSI<}=Bm>53)je8zD>Y?&%DdBnYZSu_+t$vgICHbrFKq>of
z_BF(@E)w2aN1vgKydB=y@h#QHOmf@pwZ#r?m-T|(8q{(x_j>TR>Ymeem1N`NtM12F
gtC9(M*-P%a)BZ`$>oxb}&o4gN*0uKat-mM#A9+0_Pyhe`

literal 0
HcmV?d00001

diff --git a/WebGoat/Web.config b/WebGoat/Web.config
index 6c2534a9..398c40c8 100644
--- a/WebGoat/Web.config
+++ b/WebGoat/Web.config
@@ -8,139 +8,90 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
 -->
 <configuration>
   <configSections>
-    <section name="log4net" type="log4net.Config.Log4NetConfigurationSectionHandler, log4net" />
-    <sectionGroup name="system.web.extensions" type="System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
-      <sectionGroup name="scripting" type="System.Web.Configuration.ScriptingSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
-        <section name="scriptResourceHandler" type="System.Web.Configuration.ScriptingScriptResourceHandlerSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-        <sectionGroup name="webServices" type="System.Web.Configuration.ScriptingWebServicesSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
-          <section name="jsonSerialization" type="System.Web.Configuration.ScriptingJsonSerializationSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="Everywhere" />
-          <section name="profileService" type="System.Web.Configuration.ScriptingProfileServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-          <section name="authenticationService" type="System.Web.Configuration.ScriptingAuthenticationServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-          <section name="roleService" type="System.Web.Configuration.ScriptingRoleServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />
-        </sectionGroup>
-      </sectionGroup>
-    </sectionGroup>
+    <section name="log4net" type="log4net.Config.Log4NetConfigurationSectionHandler, log4net"/>
   </configSections>
   <log4net debug="true">
     <appender name="RollingLogFileAppender" type="log4net.Appender.RollingFileAppender">
-      <file value="App_Data/log.txt" />
-      <appendToFile value="true" />
-      <rollingStyle value="Size" />
-      <maxSizeRollBackups value="10" />
-      <maximumFileSize value="10MB" />
-      <staticLogFileName value="true" />
+      <file value="App_Data/log.txt"/>
+      <appendToFile value="true"/>
+      <rollingStyle value="Size"/>
+      <maxSizeRollBackups value="10"/>
+      <maximumFileSize value="10MB"/>
+      <staticLogFileName value="true"/>
       <layout type="log4net.Layout.PatternLayout">
-        <conversionPattern value="%-5p %d %5rms %-22.22c{1} %-18.18M - %m%n" />
+        <conversionPattern value="%-5p %d %5rms %-22.22c{1} %-18.18M - %m%n"/>
       </layout>
     </appender>
     <root>
-      <level value="DEBUG" />
-      <appender-ref ref="RollingLogFileAppender" />
+      <level value="DEBUG"/>
+      <appender-ref ref="RollingLogFileAppender"/>
     </root>
   </log4net>
+  <!--
+    For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.
+
+    The following attributes can be set on the <httpRuntime> tag.
+      <system.Web>
+        <httpRuntime targetFramework="4.7.2" />
+      </system.Web>
+  -->
   <system.web>
     <siteMap>
       <providers>
-        <remove name="MySqlSiteMapProvider" />
+        <remove name="MySqlSiteMapProvider"/>
       </providers>
     </siteMap>
     <!-- this disables header checking -->
-    <httpRuntime enableHeaderChecking="false" />
+    <httpRuntime enableHeaderChecking="false"/>
     <!-- this is how you would set secure and http only on session cookies -->
-    <httpCookies httpOnlyCookies="false" requireSSL="false" />
-    <compilation defaultLanguage="C#" debug="true">
+    <httpCookies httpOnlyCookies="false" requireSSL="false"/>
+    <compilation defaultLanguage="C#" debug="true" targetFramework="4.7.2">
       <assemblies>
         <!--add assembly="System.Web.Mobile, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /-->
-        <add assembly="Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756" />
+        <add assembly="Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756"/>
       </assemblies>
     </compilation>
     <!-- show detailed error messages -->
-    <customErrors mode="Off" />
+    <customErrors mode="Off"/>
     <!-- set up users -->
     <authentication mode="Forms">
       <forms name="customer_login" timeout="30" loginUrl="~/WebGoatCoins/CustomerLogin.aspx" requireSSL="false" protection="All" path="/">
         <credentials passwordFormat="Clear">
-          <user name="admin" password="admin" />
-          <user name="mario" password="luigi" />
-          <user name="bob" password="password" />
+          <user name="admin" password="admin"/>
+          <user name="mario" password="luigi"/>
+          <user name="bob" password="password"/>
         </credentials>
       </forms>
     </authentication>
     <authorization>
-      <allow users="*" />
+      <allow users="*"/>
     </authorization>
-    <httpHandlers>
-      <remove verb="*" path="*.asmx" />
-      <add verb="*" path="*.asmx" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add verb="*" path="*_AppService.axd" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add verb="GET,HEAD" path="ScriptResource.axd" validate="false" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-    </httpHandlers>
-    <trace enabled="false" localOnly="true" pageOutput="false" requestLimit="10" traceMode="SortByTime" />
-    <sessionState mode="InProc" cookieless="false" timeout="20000" />
+    <trace enabled="false" localOnly="true" pageOutput="false" requestLimit="10" traceMode="SortByTime"/>
+    <sessionState mode="InProc" cookieless="false" timeout="20000"/>
     <!-- setting cookieless = true breaks app -->
-    <globalization requestEncoding="utf-8" responseEncoding="utf-8" />
-    <pages styleSheetTheme="Default">
+    <globalization requestEncoding="utf-8" responseEncoding="utf-8"/>
+    <pages styleSheetTheme="Default" controlRenderingCompatibilityVersion="3.5" clientIDMode="AutoID">
       <namespaces>
-        <clear />
-        <add namespace="System" />
-        <add namespace="System.Collections" />
-        <add namespace="System.Collections.Generic" />
-        <add namespace="System.Collections.Specialized" />
-        <add namespace="System.Configuration" />
-        <add namespace="System.Text" />
-        <add namespace="System.Text.RegularExpressions" />
-        <add namespace="System.Web" />
-        <add namespace="System.Web.Caching" />
-        <add namespace="System.Web.SessionState" />
-        <add namespace="System.Web.Security" />
-        <add namespace="System.Web.Profile" />
-        <add namespace="System.Web.UI" />
-        <add namespace="System.Web.UI.WebControls" />
-        <add namespace="System.Web.UI.WebControls.WebParts" />
-        <add namespace="System.Web.UI.HtmlControls" />
+        <clear/>
+        <add namespace="System"/>
+        <add namespace="System.Collections"/>
+        <add namespace="System.Collections.Generic"/>
+        <add namespace="System.Collections.Specialized"/>
+        <add namespace="System.Configuration"/>
+        <add namespace="System.Text"/>
+        <add namespace="System.Text.RegularExpressions"/>
+        <add namespace="System.Web"/>
+        <add namespace="System.Web.Caching"/>
+        <add namespace="System.Web.SessionState"/>
+        <add namespace="System.Web.Security"/>
+        <add namespace="System.Web.Profile"/>
+        <add namespace="System.Web.UI"/>
+        <add namespace="System.Web.UI.WebControls"/>
+        <add namespace="System.Web.UI.WebControls.WebParts"/>
+        <add namespace="System.Web.UI.HtmlControls"/>
       </namespaces>
-      <controls>
-        <add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-        <add tagPrefix="asp" namespace="System.Web.UI.WebControls" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      </controls>
     </pages>
   </system.web>
-  <system.codedom>
-    <compilers>
-      <compiler language="c#;cs;csharp" extension=".cs" type="Microsoft.CSharp.CSharpCodeProvider,System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" warningLevel="4">
-        <providerOption name="CompilerVersion" value="v3.5" />
-        <providerOption name="WarnAsError" value="false" />
-      </compiler>
-    </compilers>
-  </system.codedom>
-  <system.webServer>
-    <validation validateIntegratedModeConfiguration="false" />
-    <modules>
-      <remove name="ScriptModule" />
-      <add name="ScriptModule" preCondition="managedHandler" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-    </modules>
-    <handlers>
-      <remove name="WebServiceHandlerFactory-Integrated" />
-      <remove name="ScriptHandlerFactory" />
-      <remove name="ScriptHandlerFactoryAppServices" />
-      <remove name="ScriptResource" />
-      <add name="ScriptHandlerFactory" verb="*" path="*.asmx" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add name="ScriptHandlerFactoryAppServices" verb="*" path="*_AppService.axd" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-      <add name="ScriptResource" verb="GET,HEAD" path="ScriptResource.axd" preCondition="integratedMode" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
-    </handlers>
-  </system.webServer>
-  <runtime>
-    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-      <dependentAssembly>
-        <assemblyIdentity name="System.Web.Extensions" publicKeyToken="31bf3856ad364e35" />
-        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
-      </dependentAssembly>
-      <dependentAssembly>
-        <assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35" />
-        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
-      </dependentAssembly>
-    </assemblyBinding>
-  </runtime>
   <!--
     <location path="Login.aspx">
         <system.web>
@@ -169,9 +120,9 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
   <location path="Content/VerbTamperingAttack.aspx">
     <system.web>
       <authorization>
-        <allow verbs="GET" users="Admin" />
-        <deny verbs="POST,GET" users="*" />
+        <allow verbs="GET" users="Admin"/>
+        <deny verbs="POST,GET" users="*"/>
       </authorization>
     </system.web>
   </location>
-</configuration>
+</configuration>
\ No newline at end of file
diff --git a/WebGoat/WebGoat.NET.csproj b/WebGoat/WebGoat.NET.csproj
index c00501db..3e9e483d 100644
--- a/WebGoat/WebGoat.NET.csproj
+++ b/WebGoat/WebGoat.NET.csproj
@@ -1,5 +1,5 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project DefaultTargets="Build" ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" ToolsVersion="12.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   <PropertyGroup>
     <GenerateFullPaths>True</GenerateFullPaths>
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
@@ -11,12 +11,20 @@
     <OutputType>Library</OutputType>
     <RootNamespace>OWASP.WebGoat.NET</RootNamespace>
     <AssemblyName>DotNetGoat</AssemblyName>
-    <TargetFrameworkVersion>v3.5</TargetFrameworkVersion>
+    <TargetFrameworkVersion>v4.7.2</TargetFrameworkVersion>
     <FileUpgradeFlags>
     </FileUpgradeFlags>
     <OldToolsVersion>4.0</OldToolsVersion>
     <UpgradeBackupLocation>
     </UpgradeBackupLocation>
+    <UseIISExpress>true</UseIISExpress>
+    <Use64BitIISExpress />
+    <IISExpressSSLPort />
+    <IISExpressAnonymousAuthentication />
+    <IISExpressWindowsAuthentication />
+    <IISExpressUseClassicPipelineMode />
+    <UseGlobalApplicationHostFile />
+    <TargetFrameworkProfile />
   </PropertyGroup>
   <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
     <DebugSymbols>true</DebugSymbols>
@@ -36,6 +44,7 @@
         <Variable name="DYLD_FALLBACK_LIBRARY_PATH" value=".:/usr/local/lib:/lib:/usr/lib" />
       </EnvironmentVariables>
     </EnvironmentVariables>
+    <Prefer32Bit>false</Prefer32Bit>
   </PropertyGroup>
   <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
     <DebugType>none</DebugType>
@@ -46,11 +55,17 @@
     <ConsolePause>false</ConsolePause>
     <CodeAnalysisRuleSet>AllRules.ruleset</CodeAnalysisRuleSet>
     <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+    <Prefer32Bit>false</Prefer32Bit>
   </PropertyGroup>
   <ItemGroup>
     <Reference Include="System" />
+    <Reference Include="System.Data.DataSetExtensions" />
     <Reference Include="System.Drawing" />
     <Reference Include="System.Web" />
+    <Reference Include="System.Web.ApplicationServices" />
+    <Reference Include="System.Web.DynamicData" />
+    <Reference Include="System.Web.Entity" />
+    <Reference Include="System.Web.Extensions" />
     <Reference Include="System.Xml" />
     <Reference Include="System.Web.Services" />
     <Reference Include="System.Data" />
@@ -71,8 +86,9 @@
       <HintPath>lib\log4net.dll</HintPath>
     </Reference>
     <Reference Include="Mono.Data.Sqlite">
-        <HintPath>lib\Mono.Data.Sqlite.dll</HintPath>
+      <HintPath>lib\Mono.Data.Sqlite.dll</HintPath>
     </Reference>
+    <Reference Include="System.Xml.Linq" />
   </ItemGroup>
   <ItemGroup>
     <Content Include="Content\ForgotPassword.aspx" />
@@ -911,6 +927,7 @@
     </Compile>
     <Compile Include="ProxySetup.aspx.cs">
       <DependentUpon>ProxySetup.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="ProxySetup.aspx.designer.cs">
       <DependentUpon>ProxySetup.aspx</DependentUpon>
@@ -934,30 +951,35 @@
     <Compile Include="App_Code\Util.cs" />
     <Compile Include="Content\Trace.aspx.cs">
       <DependentUpon>Trace.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Trace.aspx.designer.cs">
       <DependentUpon>Trace.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\XPathInjection.aspx.cs">
       <DependentUpon>XPathInjection.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\XPathInjection.aspx.designer.cs">
       <DependentUpon>XPathInjection.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\HeaderInjection.aspx.cs">
       <DependentUpon>HeaderInjection.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\HeaderInjection.aspx.designer.cs">
       <DependentUpon>HeaderInjection.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\MessageDigest.aspx.cs">
       <DependentUpon>MessageDigest.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\MessageDigest.aspx.designer.cs">
       <DependentUpon>MessageDigest.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\XMLInjection.aspx.cs">
       <DependentUpon>XMLInjection.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\XMLInjection.aspx.designer.cs">
       <DependentUpon>XMLInjection.aspx</DependentUpon>
@@ -965,24 +987,28 @@
     <Compile Include="App_Code\WeakMessageDigest.cs" />
     <Compile Include="Content\ReadlineDoS.aspx.cs">
       <DependentUpon>ReadlineDoS.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\ReadlineDoS.aspx.designer.cs">
       <DependentUpon>ReadlineDoS.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\RegexDoS.aspx.cs">
       <DependentUpon>RegexDoS.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\RegexDoS.aspx.designer.cs">
       <DependentUpon>RegexDoS.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\Unsafe.aspx.cs">
       <DependentUpon>Unsafe.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Unsafe.aspx.designer.cs">
       <DependentUpon>Unsafe.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\Random.aspx.cs">
       <DependentUpon>Random.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\Random.aspx.designer.cs">
       <DependentUpon>Random.aspx</DependentUpon>
@@ -990,12 +1016,14 @@
     <Compile Include="App_Code\WeakRandom.cs" />
     <Compile Include="Content\VerbTampering.aspx.cs">
       <DependentUpon>VerbTampering.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\VerbTampering.aspx.designer.cs">
       <DependentUpon>VerbTampering.aspx</DependentUpon>
     </Compile>
     <Compile Include="Content\VerbTamperingAttack.aspx.cs">
       <DependentUpon>VerbTamperingAttack.aspx</DependentUpon>
+      <SubType>ASPXCodeBehind</SubType>
     </Compile>
     <Compile Include="Content\VerbTamperingAttack.aspx.designer.cs">
       <DependentUpon>VerbTamperingAttack.aspx</DependentUpon>
@@ -1021,13 +1049,26 @@
         <XspParameters Port="8081" Address="127.0.0.1" SslMode="None" SslProtocol="Default" KeyType="None" CertFile="" KeyFile="" PasswordOptions="None" Password="" Verbose="true" />
       </Properties>
     </MonoDevelop>
+    <VisualStudio>
+      <FlavorProperties GUID="{349C5851-65DF-11DA-9384-00065B846F21}">
+        <WebProjectProperties>
+          <UseIIS>True</UseIIS>
+          <AutoAssignPort>True</AutoAssignPort>
+          <DevelopmentServerPort>0</DevelopmentServerPort>
+          <DevelopmentServerVPath>/</DevelopmentServerVPath>
+          <IISUrl>http://localhost:51052/</IISUrl>
+          <NTLMAuthentication>False</NTLMAuthentication>
+          <UseCustomServer>False</UseCustomServer>
+          <CustomServerUrl>
+          </CustomServerUrl>
+          <SaveServerSettingsInUserFile>False</SaveServerSettingsInUserFile>
+        </WebProjectProperties>
+      </FlavorProperties>
+    </VisualStudio>
   </ProjectExtensions>
   <ItemGroup>
-    <Folder Include="WebGoatCoins\uploads\" />
-    <Folder Include="App_Data\" />
-    <Folder Include="App_Code\DB\" />
     <Folder Include="Configuration\" />
-    <Folder Include="DB_Scripts\" />
+    <Folder Include="WebGoatCoins\uploads\" />
   </ItemGroup>
   <ItemGroup>
     <Content Include="WebGoatCoins\ProductDetails.aspx" />
@@ -1057,4 +1098,5 @@
     <None Include="DB_Scripts\create_webgoatcoins_sqlite3.sql" />
   </ItemGroup>
   <ItemGroup />
-</Project>
+  <Import Project="$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v16.0\WebApplications\Microsoft.WebApplication.targets" />
+</Project>
\ No newline at end of file
diff --git a/WebGoat/WebGoat.NET.csproj.user b/WebGoat/WebGoat.NET.csproj.user
index fd9084ec..31d95baa 100644
--- a/WebGoat/WebGoat.NET.csproj.user
+++ b/WebGoat/WebGoat.NET.csproj.user
@@ -1,5 +1,38 @@
 <?xml version="1.0" encoding="utf-8"?>
 <Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <PropertyGroup>
+    <UseIISExpress>true</UseIISExpress>
+    <LastActiveSolutionConfig>Debug|Any CPU</LastActiveSolutionConfig>
+    <Use64BitIISExpress />
+    <IISExpressSSLPort />
+    <IISExpressAnonymousAuthentication />
+    <IISExpressWindowsAuthentication />
+    <IISExpressUseClassicPipelineMode />
+    <UseGlobalApplicationHostFile />
+  </PropertyGroup>
   <ProjectExtensions>
+    <VisualStudio>
+      <FlavorProperties GUID="{349C5851-65DF-11DA-9384-00065B846F21}">
+        <WebProjectProperties>
+          <StartPageUrl>
+          </StartPageUrl>
+          <StartAction>CurrentPage</StartAction>
+          <AspNetDebugging>True</AspNetDebugging>
+          <SilverlightDebugging>False</SilverlightDebugging>
+          <NativeDebugging>False</NativeDebugging>
+          <SQLDebugging>False</SQLDebugging>
+          <ExternalProgram>
+          </ExternalProgram>
+          <StartExternalURL>
+          </StartExternalURL>
+          <StartCmdLineArguments>
+          </StartCmdLineArguments>
+          <StartWorkingDirectory>
+          </StartWorkingDirectory>
+          <EnableENC>True</EnableENC>
+          <AlwaysStartWebServerOnDebug>False</AlwaysStartWebServerOnDebug>
+        </WebProjectProperties>
+      </FlavorProperties>
+    </VisualStudio>
   </ProjectExtensions>
-</Project>
+</Project>
\ No newline at end of file