├── chrome ├── content │ ├── images │ │ ├── spinner.gif │ │ └── thundersec.png │ ├── thundersec.xul │ ├── about.xul │ ├── settings.js │ ├── details.xul │ ├── whitelist.xul │ ├── options.js │ ├── version_compare.js │ ├── sha256.js │ ├── options.xul │ ├── details.js │ ├── whitelist.js │ ├── thundersec.js │ └── jquery-2.1.4.min.js ├── skin │ ├── details.css │ ├── whitelist.css │ └── overlay.css └── locale │ └── en-US │ ├── about.dtd │ ├── overlay.properties │ ├── options.dtd │ └── overlay.dtd ├── chrome.manifest ├── defaults └── preferences │ └── prefs.js ├── install.rdf ├── README.md └── LICENSE /chrome/content/images/spinner.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/itemir/thundersec/HEAD/chrome/content/images/spinner.gif -------------------------------------------------------------------------------- /chrome/content/images/thundersec.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/itemir/thundersec/HEAD/chrome/content/images/thundersec.png -------------------------------------------------------------------------------- /chrome/skin/details.css: -------------------------------------------------------------------------------- 1 | window { 2 |   -moz-box-align: start; 3 |   background-color: -moz-dialog; 4 |   font: -moz-dialog; 5 |   padding: 2em; 6 | } 7 | -------------------------------------------------------------------------------- /chrome/skin/whitelist.css: -------------------------------------------------------------------------------- 1 | window { 2 |   -moz-box-align: start; 3 |   background-color: -moz-dialog; 4 |   font: -moz-dialog; 5 |   padding: 2em; 6 | } 7 | -------------------------------------------------------------------------------- /chrome/locale/en-US/about.dtd: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | -------------------------------------------------------------------------------- /chrome/locale/en-US/overlay.properties: -------------------------------------------------------------------------------- 1 | helloMessage=Hello World! 2 | helloMessageTitle=Hello 3 | prefMessage=Int Pref Value: %d 4 | extensions.thundersec@community.description=description 5 | -------------------------------------------------------------------------------- /chrome.manifest: -------------------------------------------------------------------------------- 1 | content thundersec chrome/content/ 2 | skin thundersec classic/1.0 chrome/skin/ 3 | locale thundersec en-US chrome/locale/en-US/ 4 | overlay chrome://messenger/content/msgHdrViewOverlay.xul chrome://thundersec/content/thundersec.xul 5 | -------------------------------------------------------------------------------- /chrome/locale/en-US/options.dtd: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | -------------------------------------------------------------------------------- /chrome/locale/en-US/overlay.dtd: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | -------------------------------------------------------------------------------- /chrome/skin/overlay.css: -------------------------------------------------------------------------------- 1 | #thundersec-hello 2 | { 3 | } 4 | #thundersec-toolbar-button 5 | { 6 | list-style-image: url("chrome://thundersec/skin/toolbar-button.png"); 7 | -moz-image-region: rect(0px 24px 24px 0px); 8 | } 9 | #thundersec-toolbar-button:hover 10 | { 11 | -moz-image-region: rect(24px 24px 48px 0px); 12 | } 13 | [iconsize="small"] #thundersec-toolbar-button 14 | { 15 | -moz-image-region: rect( 0px 40px 16px 24px); 16 | } 17 | [iconsize="small"] #thundersec-toolbar-button:hover 18 | { 19 | -moz-image-region: rect(24px 40px 40px 24px); 20 | } 21 | -------------------------------------------------------------------------------- /chrome/content/thundersec.xul: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 95 | 96 | -------------------------------------------------------------------------------- /chrome/content/details.js: -------------------------------------------------------------------------------- 1 | /* 2 | Security Extensions for Mozilla Thunderbird 3 | Copyright (C) 2015 by Ilker Temir (@ilkertemir) and Tim Sammut (@t1msammut) 4 | 5 | This program is free software; you can redistribute it and/or 6 | modify it under the terms of the GNU General Public License 7 | as published by the Free Software Foundation; version 2 8 | of the License. 9 | 10 | This program is distributed in the hope that it will be useful, 11 | but WITHOUT ANY WARRANTY; without even the implied warranty of 12 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 | GNU General Public License for more details. 14 | 15 | You should have received a copy of the GNU General Public License 16 | along with this program; if not, write to the Free Software 17 | Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. 18 | */ 19 | 20 | function sanitizeInput (inputText) { 21 | // Easy way of escaping with jQuery 22 | let returnText = $('').text(inputText).html(); 23 | return (returnText); 24 | } 25 | 26 | function updateSURBLtab(surbl) { 27 | var host; 28 | var code; 29 | 30 | if ( surbl.length > 0 ) { 31 | document.getElementById("surblTab").label = "SURBL (" + surbl.length + ")"; 32 | document.getElementById("detailsTabs").selectedIndex = 1; 33 | } 34 | 35 | var html = "
"; 36 | if (surbl.length > 0) { 37 | html = html + ""; 38 | if (surbl.length == 1) { 39 | html = html + surbl.length + " SURBL violation"; 40 | } 41 | else { 42 | html = html + surbl.length + " SURBL violations"; 43 | } 44 | html = html + ""; 45 | html = html + ""; 46 | html = html + ""; 47 | for (var i in surbl) { 48 | host = sanitizeInput (surbl[i].host); 49 | code = sanitizeInput (surbl[i].code); 50 | service = sanitizeInput (surbl[i].service); 51 | html = html + ""; 52 | } 53 | html = html + "
HostReturn CodeService
" + host + "" + code + "" + service + "
"; 54 | } 55 | else { 56 | html = html + "

No SURBL violations.

"; 57 | } 58 | html = html + "
"; 59 | 60 | let container = document.getElementById("surblBox"); 61 | let divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 62 | 63 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 64 | // If you are here for such warning, please review above how this value is generated 65 | // 'html' is a combination of safe static html and sanitized input 66 | divHTML.innerHTML = html; 67 | 68 | container.appendChild(divHTML); 69 | } 70 | 71 | function updateDNSBLtab(dnsbl) { 72 | var ip; 73 | var code; 74 | 75 | if ( dnsbl.length > 0 ) { 76 | document.getElementById("dnsblTab").label = "DNSBL (" + dnsbl.length + ")"; 77 | document.getElementById("detailsTabs").selectedIndex = 0; 78 | } 79 | 80 | var html = "
"; 81 | if (dnsbl.length > 0) { 82 | html = html + ""; 83 | if (dnsbl.length == 1) { 84 | html = html + dnsbl.length + " DNSBL violation"; 85 | } 86 | else { 87 | html = html + dnsbl.length + " DNSBL violations"; 88 | } 89 | html = html + ""; 90 | html = html + ""; 91 | html = html + ""; 92 | for (var i in dnsbl) { 93 | ip = sanitizeInput (dnsbl[i].ip); 94 | code = sanitizeInput (dnsbl[i].code); 95 | service = sanitizeInput (dnsbl[i].service); 96 | html = html + ""; 97 | } 98 | html = html + "
IP AddressReturn CodeService
" + ip + "" + code + "" + service + "
"; 99 | } 100 | else { 101 | html = html + "

No DNSBL violations.

"; 102 | } 103 | html = html + "
"; 104 | 105 | let container = document.getElementById("dnsblBox"); 106 | let divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 107 | 108 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 109 | // If you are here for such warning, please review above how this value is generated 110 | // 'html' is a combination of safe static html and sanitized input 111 | divHTML.innerHTML = html; 112 | 113 | container.appendChild(divHTML); 114 | } 115 | 116 | function updateSPFtab(spf) { 117 | if ( !spf.pass ) { 118 | document.getElementById("spfTab").label = "SPF (1)"; 119 | document.getElementById("detailsTabs").selectedIndex = 2; 120 | } 121 | 122 | var html = "
"; 123 | if (spf.pass) { 124 | html = html + "

No SPF failures

"; 125 | } 126 | else { 127 | html = html + "

SPF Failure

"; 128 | if (spf.reason) { 129 | let reason = sanitizeInput (spf.reason); 130 | html = html + "

" + reason + "

"; 131 | } 132 | else { 133 | html = html + "

No explicit reason identified, please manually inspect e-mail headers.

"; 134 | } 135 | } 136 | html = html + "
"; 137 | 138 | let container = document.getElementById("spfBox"); 139 | let divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 140 | 141 | 142 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 143 | // If you are here for such warning, please review above how this value is generated 144 | // 'html' is a combination of safe static html and sanitized input 145 | divHTML.innerHTML = html; 146 | 147 | container.appendChild(divHTML); 148 | } 149 | 150 | function updateDKIMtab(dkim) { 151 | if ( !dkim.pass ) { 152 | document.getElementById("dkimTab").label = "DKIM (1)"; 153 | document.getElementById("detailsTabs").selectedIndex = 3; 154 | } 155 | 156 | var html = "
"; 157 | if (dkim.pass) { 158 | html = html + "

No DKIM failures

"; 159 | } 160 | else { 161 | html = html + "

DKIM Failure

"; 162 | if (dkim.reason) { 163 | let reason = sanitizeInput (dkim.reason); 164 | html = html + "

" + reason + "

"; 165 | } 166 | else { 167 | html = html + "

No explicit reason identified, please manually inspect e-mail headers.

"; 168 | } 169 | } 170 | html = html + "
"; 171 | 172 | let container = document.getElementById("dkimBox"); 173 | let divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 174 | 175 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 176 | // If you are here for such warning, please review above how this value is generated 177 | // 'html' is a combination of safe static html and sanitized input 178 | divHTML.innerHTML = html; 179 | 180 | container.appendChild(divHTML); 181 | } 182 | 183 | function updateDetails() { 184 | var DNSBL = window.arguments[0].dnsbl; 185 | var SURBL = window.arguments[0].surbl; 186 | var SPF = window.arguments[0].spf; 187 | var DKIM = window.arguments[0].dkim; 188 | 189 | // Reverse order defines the selected tab if multiple are active 190 | updateDKIMtab(DKIM); 191 | updateSPFtab(SPF); 192 | updateDNSBLtab(DNSBL); 193 | updateSURBLtab(SURBL); 194 | } 195 | -------------------------------------------------------------------------------- /chrome/content/whitelist.js: -------------------------------------------------------------------------------- 1 | /* 2 | Security Extensions for Mozilla Thunderbird 3 | Copyright (C) 2015 by Ilker Temir (@ilkertemir) and Tim Sammut (@t1msammut) 4 | 5 | This program is free software; you can redistribute it and/or 6 | modify it under the terms of the GNU General Public License 7 | as published by the Free Software Foundation; version 2 8 | of the License. 9 | 10 | This program is distributed in the hope that it will be useful, 11 | but WITHOUT ANY WARRANTY; without even the implied warranty of 12 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 | GNU General Public License for more details. 14 | 15 | You should have received a copy of the GNU General Public License 16 | along with this program; if not, write to the Free Software 17 | Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. 18 | */ 19 | 20 | function sanitizeInput (inputText) { 21 | // Easy way of escaping with jQuery 22 | let returnText = $('').text(inputText).html(); 23 | return (returnText); 24 | } 25 | 26 | function updateDnsblWhitelist(whitelist) { 27 | var html = "
"; 28 | 29 | if (whitelist.length) { 30 | html = html + ""; 31 | html = html + "" + 32 | "" + 33 | "" + 34 | ""; 35 | 36 | for (var i in whitelist) { 37 | let ip = sanitizeInput (whitelist[i].ip); 38 | let source = sanitizeInput (whitelist[i].source); 39 | let code = sanitizeInput (whitelist[i].code); 40 | let sender = sanitizeInput (whitelist[i].sender); 41 | 42 | html = html + ""; 47 | } 48 | 49 | html = html + "
IP AddressServiceCodeSender
" + ip + 43 | "" + source + 44 | "" + code + 45 | "" + sender + 46 | "
"; 50 | } else { 51 | html = html + "

"; 52 | html = html + "DNSBL whitelist is empty"; 53 | html = html + "

"; 54 | } 55 | 56 | html = html + "
"; 57 | 58 | var container = document.getElementById("dnsblWhitelistBox"); 59 | var divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 60 | 61 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 62 | // If you are here for such warning, please review above how this value is generated 63 | // 'html' is a combination of safe static html and sanitized input 64 | divHTML.innerHTML = html; 65 | 66 | container.appendChild(divHTML); 67 | } 68 | 69 | function queryDnsblWhitelist(conn) { 70 | var whiteList = []; 71 | 72 | conn.tableExists("dnsblWhiteList").then( 73 | function (exists) { 74 | let sql = 'SELECT * FROM dnsblWhiteList'; 75 | conn.execute (sql, null, function(row) { 76 | let ip = row.getResultByName('ipAddress'); 77 | let source = row.getResultByName('dnsblSource'); 78 | let code = row.getResultByName('code'); 79 | let sender = row.getResultByName('sender'); 80 | 81 | whiteList.push ( { ip: ip, 82 | source: source, 83 | code: code, 84 | sender: sender } ); 85 | }).then( 86 | function onStatementComplete(result) { 87 | if (whiteList.length) { 88 | document.getElementById("dnsblTab").label = "DNSBL (" + whiteList.length + ")"; 89 | } 90 | updateDnsblWhitelist(whiteList); 91 | }, 92 | function onError(err) { 93 | alert ('SQL query failed: ' + err); 94 | } 95 | ); 96 | } 97 | ); 98 | } 99 | 100 | function updateSurblWhitelist(whitelist) { 101 | var html = "
"; 102 | 103 | if (whitelist.length) { 104 | html = html + ""; 105 | html = html + "" + 106 | "" + 107 | "" + 108 | ""; 109 | 110 | for (var i in whitelist) { 111 | let host = sanitizeInput (whitelist[i].host); 112 | let source = sanitizeInput (whitelist[i].source); 113 | let code = sanitizeInput (whitelist[i].code); 114 | let sender = sanitizeInput (whitelist[i].sender); 115 | 116 | html = html + ""; 121 | } 122 | 123 | html = html + "
DomainServiceCodeSender
" + host + 117 | "" + source + 118 | "" + code + 119 | "" + sender + 120 | "
"; 124 | } else { 125 | html = html + "

"; 126 | html = html + "SURBL whitelist is empty"; 127 | html = html + "

"; 128 | } 129 | 130 | html = html + "
"; 131 | 132 | var container = document.getElementById("surblWhitelistBox"); 133 | var divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 134 | 135 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 136 | // If you are here for such warning, please review above how this value is generated 137 | // 'html' is a combination of safe static html and sanitized input 138 | divHTML.innerHTML = html; 139 | 140 | container.appendChild(divHTML); 141 | } 142 | 143 | function querySurblWhitelist(conn) { 144 | var whiteList = []; 145 | 146 | conn.tableExists("surblWhiteList").then( 147 | function (exists) { 148 | let sql = 'SELECT * FROM surblWhiteList'; 149 | conn.execute (sql, null, function(row) { 150 | let host = row.getResultByName('host'); 151 | let source = row.getResultByName('surblSource'); 152 | let code = row.getResultByName('code'); 153 | let sender = row.getResultByName('sender'); 154 | 155 | whiteList.push ( { host: host, 156 | source: source, 157 | code: code, 158 | sender: sender } ); 159 | }).then( 160 | function onStatementComplete(result) { 161 | if (whiteList.length) { 162 | document.getElementById("surblTab").label = "SURBL (" + whiteList.length + ")"; 163 | } 164 | updateSurblWhitelist(whiteList); 165 | }, 166 | function onError(err) { 167 | alert ('SQL query failed: ' + err); 168 | } 169 | ); 170 | } 171 | ); 172 | } 173 | 174 | function updateSpfWhitelist(whitelist) { 175 | var html = "
"; 176 | 177 | if (whitelist.length) { 178 | html = html + ""; 179 | html = html + "" + 180 | ""; 181 | 182 | for (var i in whitelist) { 183 | let reason = sanitizeInput (whitelist[i].reason); 184 | let sender = sanitizeInput (whitelist[i].sender); 185 | 186 | html = html + ""; 189 | } 190 | 191 | html = html + "
ReasonSender
" + reason + 187 | "" + sender + 188 | "
"; 192 | } else { 193 | html = html + "

"; 194 | html = html + "SPF whitelist is empty"; 195 | html = html + "

"; 196 | } 197 | 198 | html = html + "
"; 199 | 200 | var container = document.getElementById("spfWhitelistBox"); 201 | var divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 202 | 203 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 204 | // If you are here for such warning, please review above how this value is generated 205 | // 'html' is a combination of safe static html and sanitized input 206 | divHTML.innerHTML = html; 207 | 208 | container.appendChild(divHTML); 209 | } 210 | 211 | function querySpfWhitelist(conn) { 212 | var whiteList = []; 213 | 214 | conn.tableExists("spfWhiteList").then( 215 | function (exists) { 216 | let sql = 'SELECT * FROM spfWhiteList'; 217 | conn.execute (sql, null, function(row) { 218 | let reason = row.getResultByName('reason'); 219 | let sender = row.getResultByName('sender'); 220 | 221 | whiteList.push ( { reason: reason, 222 | sender: sender } ); 223 | }).then( 224 | function onStatementComplete(result) { 225 | if (whiteList.length) { 226 | document.getElementById("spfTab").label = "SPF (" + whiteList.length + ")"; 227 | } 228 | updateSpfWhitelist(whiteList); 229 | }, 230 | function onError(err) { 231 | alert ('SQL query failed: ' + err); 232 | } 233 | ); 234 | } 235 | ); 236 | } 237 | 238 | 239 | function updateDkimWhitelist(whitelist) { 240 | var html = "
"; 241 | 242 | if (whitelist.length) { 243 | html = html + ""; 244 | html = html + "" + 245 | ""; 246 | 247 | for (var i in whitelist) { 248 | let reason = sanitizeInput (whitelist[i].reason); 249 | let sender = sanitizeInput (whitelist[i].sender); 250 | 251 | html = html + ""; 254 | } 255 | 256 | html = html + "
ReasonSender
" + reason + 252 | "" + sender + 253 | "
"; 257 | } else { 258 | html = html + "

"; 259 | html = html + "DKIM whitelist is empty"; 260 | html = html + "

"; 261 | } 262 | 263 | html = html + "
"; 264 | 265 | var container = document.getElementById("dkimWhitelistBox"); 266 | var divHTML = document.createElementNS("http://www.w3.org/1999/xhtml","div"); 267 | 268 | // Updating innerHTML dynamically causes security warnings in Mozilla Add-on validator 269 | // If you are here for such warning, please review above how this value is generated 270 | // 'html' is a combination of safe static html and sanitized input 271 | divHTML.innerHTML = html; 272 | 273 | container.appendChild(divHTML); 274 | } 275 | 276 | function queryDkimWhitelist(conn) { 277 | var whiteList = []; 278 | 279 | conn.tableExists("dkimWhiteList").then( 280 | function (exists) { 281 | let sql = 'SELECT * FROM dkimWhiteList'; 282 | conn.execute (sql, null, function(row) { 283 | let reason = row.getResultByName('reason'); 284 | let sender = row.getResultByName('sender'); 285 | 286 | whiteList.push ( { reason: reason, 287 | sender: sender } ); 288 | }).then( 289 | function onStatementComplete(result) { 290 | if (whiteList.length) { 291 | document.getElementById("dkimTab").label = "DKIM (" + whiteList.length + ")"; 292 | } 293 | updateDkimWhitelist(whiteList); 294 | }, 295 | function onError(err) { 296 | alert ('SQL query failed: ' + err); 297 | } 298 | ); 299 | } 300 | ); 301 | } 302 | 303 | function viewWhitelist() { 304 | Components.utils.import("resource://gre/modules/Sqlite.jsm"); 305 | Sqlite.openConnection( 306 | { path: DB_NAME } 307 | ).then( 308 | function onConnection(conn) { 309 | queryDnsblWhitelist(conn); 310 | querySurblWhitelist(conn); 311 | querySpfWhitelist(conn); 312 | queryDkimWhitelist(conn); 313 | // Give a second then close the connection 314 | // There should be a better way to do it 315 | setTimeout (function() { 316 | conn.close(); 317 | }, 1000); 318 | }, 319 | function onError(error) { 320 | alert ('Connection failed: ' + error); 321 | } 322 | ); 323 | } 324 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | GNU GENERAL PUBLIC LICENSE 2 | Version 2, June 1991 3 | 4 | Copyright (C) 1989, 1991 Free Software Foundation, Inc., 5 | 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA 6 | Everyone is permitted to copy and distribute verbatim copies 7 | of this license document, but changing it is not allowed. 8 | 9 | Preamble 10 | 11 | The licenses for most software are designed to take away your 12 | freedom to share and change it. By contrast, the GNU General Public 13 | License is intended to guarantee your freedom to share and change free 14 | software--to make sure the software is free for all its users. This 15 | General Public License applies to most of the Free Software 16 | Foundation's software and to any other program whose authors commit to 17 | using it. (Some other Free Software Foundation software is covered by 18 | the GNU Lesser General Public License instead.) You can apply it to 19 | your programs, too. 20 | 21 | When we speak of free software, we are referring to freedom, not 22 | price. Our General Public Licenses are designed to make sure that you 23 | have the freedom to distribute copies of free software (and charge for 24 | this service if you wish), that you receive source code or can get it 25 | if you want it, that you can change the software or use pieces of it 26 | in new free programs; and that you know you can do these things. 27 | 28 | To protect your rights, we need to make restrictions that forbid 29 | anyone to deny you these rights or to ask you to surrender the rights. 30 | These restrictions translate to certain responsibilities for you if you 31 | distribute copies of the software, or if you modify it. 32 | 33 | For example, if you distribute copies of such a program, whether 34 | gratis or for a fee, you must give the recipients all the rights that 35 | you have. You must make sure that they, too, receive or can get the 36 | source code. And you must show them these terms so they know their 37 | rights. 38 | 39 | We protect your rights with two steps: (1) copyright the software, and 40 | (2) offer you this license which gives you legal permission to copy, 41 | distribute and/or modify the software. 42 | 43 | Also, for each author's protection and ours, we want to make certain 44 | that everyone understands that there is no warranty for this free 45 | software. If the software is modified by someone else and passed on, we 46 | want its recipients to know that what they have is not the original, so 47 | that any problems introduced by others will not reflect on the original 48 | authors' reputations. 49 | 50 | Finally, any free program is threatened constantly by software 51 | patents. We wish to avoid the danger that redistributors of a free 52 | program will individually obtain patent licenses, in effect making the 53 | program proprietary. To prevent this, we have made it clear that any 54 | patent must be licensed for everyone's free use or not licensed at all. 55 | 56 | The precise terms and conditions for copying, distribution and 57 | modification follow. 58 | 59 | GNU GENERAL PUBLIC LICENSE 60 | TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 61 | 62 | 0. This License applies to any program or other work which contains 63 | a notice placed by the copyright holder saying it may be distributed 64 | under the terms of this General Public License. The "Program", below, 65 | refers to any such program or work, and a "work based on the Program" 66 | means either the Program or any derivative work under copyright law: 67 | that is to say, a work containing the Program or a portion of it, 68 | either verbatim or with modifications and/or translated into another 69 | language. (Hereinafter, translation is included without limitation in 70 | the term "modification".) Each licensee is addressed as "you". 71 | 72 | Activities other than copying, distribution and modification are not 73 | covered by this License; they are outside its scope. The act of 74 | running the Program is not restricted, and the output from the Program 75 | is covered only if its contents constitute a work based on the 76 | Program (independent of having been made by running the Program). 77 | Whether that is true depends on what the Program does. 78 | 79 | 1. You may copy and distribute verbatim copies of the Program's 80 | source code as you receive it, in any medium, provided that you 81 | conspicuously and appropriately publish on each copy an appropriate 82 | copyright notice and disclaimer of warranty; keep intact all the 83 | notices that refer to this License and to the absence of any warranty; 84 | and give any other recipients of the Program a copy of this License 85 | along with the Program. 86 | 87 | You may charge a fee for the physical act of transferring a copy, and 88 | you may at your option offer warranty protection in exchange for a fee. 89 | 90 | 2. You may modify your copy or copies of the Program or any portion 91 | of it, thus forming a work based on the Program, and copy and 92 | distribute such modifications or work under the terms of Section 1 93 | above, provided that you also meet all of these conditions: 94 | 95 | a) You must cause the modified files to carry prominent notices 96 | stating that you changed the files and the date of any change. 97 | 98 | b) You must cause any work that you distribute or publish, that in 99 | whole or in part contains or is derived from the Program or any 100 | part thereof, to be licensed as a whole at no charge to all third 101 | parties under the terms of this License. 102 | 103 | c) If the modified program normally reads commands interactively 104 | when run, you must cause it, when started running for such 105 | interactive use in the most ordinary way, to print or display an 106 | announcement including an appropriate copyright notice and a 107 | notice that there is no warranty (or else, saying that you provide 108 | a warranty) and that users may redistribute the program under 109 | these conditions, and telling the user how to view a copy of this 110 | License. (Exception: if the Program itself is interactive but 111 | does not normally print such an announcement, your work based on 112 | the Program is not required to print an announcement.) 113 | 114 | These requirements apply to the modified work as a whole. If 115 | identifiable sections of that work are not derived from the Program, 116 | and can be reasonably considered independent and separate works in 117 | themselves, then this License, and its terms, do not apply to those 118 | sections when you distribute them as separate works. But when you 119 | distribute the same sections as part of a whole which is a work based 120 | on the Program, the distribution of the whole must be on the terms of 121 | this License, whose permissions for other licensees extend to the 122 | entire whole, and thus to each and every part regardless of who wrote it. 123 | 124 | Thus, it is not the intent of this section to claim rights or contest 125 | your rights to work written entirely by you; rather, the intent is to 126 | exercise the right to control the distribution of derivative or 127 | collective works based on the Program. 128 | 129 | In addition, mere aggregation of another work not based on the Program 130 | with the Program (or with a work based on the Program) on a volume of 131 | a storage or distribution medium does not bring the other work under 132 | the scope of this License. 133 | 134 | 3. You may copy and distribute the Program (or a work based on it, 135 | under Section 2) in object code or executable form under the terms of 136 | Sections 1 and 2 above provided that you also do one of the following: 137 | 138 | a) Accompany it with the complete corresponding machine-readable 139 | source code, which must be distributed under the terms of Sections 140 | 1 and 2 above on a medium customarily used for software interchange; or, 141 | 142 | b) Accompany it with a written offer, valid for at least three 143 | years, to give any third party, for a charge no more than your 144 | cost of physically performing source distribution, a complete 145 | machine-readable copy of the corresponding source code, to be 146 | distributed under the terms of Sections 1 and 2 above on a medium 147 | customarily used for software interchange; or, 148 | 149 | c) Accompany it with the information you received as to the offer 150 | to distribute corresponding source code. (This alternative is 151 | allowed only for noncommercial distribution and only if you 152 | received the program in object code or executable form with such 153 | an offer, in accord with Subsection b above.) 154 | 155 | The source code for a work means the preferred form of the work for 156 | making modifications to it. For an executable work, complete source 157 | code means all the source code for all modules it contains, plus any 158 | associated interface definition files, plus the scripts used to 159 | control compilation and installation of the executable. However, as a 160 | special exception, the source code distributed need not include 161 | anything that is normally distributed (in either source or binary 162 | form) with the major components (compiler, kernel, and so on) of the 163 | operating system on which the executable runs, unless that component 164 | itself accompanies the executable. 165 | 166 | If distribution of executable or object code is made by offering 167 | access to copy from a designated place, then offering equivalent 168 | access to copy the source code from the same place counts as 169 | distribution of the source code, even though third parties are not 170 | compelled to copy the source along with the object code. 171 | 172 | 4. You may not copy, modify, sublicense, or distribute the Program 173 | except as expressly provided under this License. Any attempt 174 | otherwise to copy, modify, sublicense or distribute the Program is 175 | void, and will automatically terminate your rights under this License. 176 | However, parties who have received copies, or rights, from you under 177 | this License will not have their licenses terminated so long as such 178 | parties remain in full compliance. 179 | 180 | 5. You are not required to accept this License, since you have not 181 | signed it. However, nothing else grants you permission to modify or 182 | distribute the Program or its derivative works. These actions are 183 | prohibited by law if you do not accept this License. Therefore, by 184 | modifying or distributing the Program (or any work based on the 185 | Program), you indicate your acceptance of this License to do so, and 186 | all its terms and conditions for copying, distributing or modifying 187 | the Program or works based on it. 188 | 189 | 6. Each time you redistribute the Program (or any work based on the 190 | Program), the recipient automatically receives a license from the 191 | original licensor to copy, distribute or modify the Program subject to 192 | these terms and conditions. You may not impose any further 193 | restrictions on the recipients' exercise of the rights granted herein. 194 | You are not responsible for enforcing compliance by third parties to 195 | this License. 196 | 197 | 7. If, as a consequence of a court judgment or allegation of patent 198 | infringement or for any other reason (not limited to patent issues), 199 | conditions are imposed on you (whether by court order, agreement or 200 | otherwise) that contradict the conditions of this License, they do not 201 | excuse you from the conditions of this License. If you cannot 202 | distribute so as to satisfy simultaneously your obligations under this 203 | License and any other pertinent obligations, then as a consequence you 204 | may not distribute the Program at all. For example, if a patent 205 | license would not permit royalty-free redistribution of the Program by 206 | all those who receive copies directly or indirectly through you, then 207 | the only way you could satisfy both it and this License would be to 208 | refrain entirely from distribution of the Program. 209 | 210 | If any portion of this section is held invalid or unenforceable under 211 | any particular circumstance, the balance of the section is intended to 212 | apply and the section as a whole is intended to apply in other 213 | circumstances. 214 | 215 | It is not the purpose of this section to induce you to infringe any 216 | patents or other property right claims or to contest validity of any 217 | such claims; this section has the sole purpose of protecting the 218 | integrity of the free software distribution system, which is 219 | implemented by public license practices. Many people have made 220 | generous contributions to the wide range of software distributed 221 | through that system in reliance on consistent application of that 222 | system; it is up to the author/donor to decide if he or she is willing 223 | to distribute software through any other system and a licensee cannot 224 | impose that choice. 225 | 226 | This section is intended to make thoroughly clear what is believed to 227 | be a consequence of the rest of this License. 228 | 229 | 8. If the distribution and/or use of the Program is restricted in 230 | certain countries either by patents or by copyrighted interfaces, the 231 | original copyright holder who places the Program under this License 232 | may add an explicit geographical distribution limitation excluding 233 | those countries, so that distribution is permitted only in or among 234 | countries not thus excluded. In such case, this License incorporates 235 | the limitation as if written in the body of this License. 236 | 237 | 9. The Free Software Foundation may publish revised and/or new versions 238 | of the General Public License from time to time. Such new versions will 239 | be similar in spirit to the present version, but may differ in detail to 240 | address new problems or concerns. 241 | 242 | Each version is given a distinguishing version number. If the Program 243 | specifies a version number of this License which applies to it and "any 244 | later version", you have the option of following the terms and conditions 245 | either of that version or of any later version published by the Free 246 | Software Foundation. If the Program does not specify a version number of 247 | this License, you may choose any version ever published by the Free Software 248 | Foundation. 249 | 250 | 10. If you wish to incorporate parts of the Program into other free 251 | programs whose distribution conditions are different, write to the author 252 | to ask for permission. For software which is copyrighted by the Free 253 | Software Foundation, write to the Free Software Foundation; we sometimes 254 | make exceptions for this. Our decision will be guided by the two goals 255 | of preserving the free status of all derivatives of our free software and 256 | of promoting the sharing and reuse of software generally. 257 | 258 | NO WARRANTY 259 | 260 | 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY 261 | FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN 262 | OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES 263 | PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED 264 | OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 265 | MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS 266 | TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE 267 | PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, 268 | REPAIR OR CORRECTION. 269 | 270 | 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING 271 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR 272 | REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, 273 | INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING 274 | OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED 275 | TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY 276 | YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER 277 | PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE 278 | POSSIBILITY OF SUCH DAMAGES. 279 | 280 | END OF TERMS AND CONDITIONS 281 | 282 | How to Apply These Terms to Your New Programs 283 | 284 | If you develop a new program, and you want it to be of the greatest 285 | possible use to the public, the best way to achieve this is to make it 286 | free software which everyone can redistribute and change under these terms. 287 | 288 | To do so, attach the following notices to the program. It is safest 289 | to attach them to the start of each source file to most effectively 290 | convey the exclusion of warranty; and each file should have at least 291 | the "copyright" line and a pointer to where the full notice is found. 292 | 293 | {description} 294 | Copyright (C) {year} {fullname} 295 | 296 | This program is free software; you can redistribute it and/or modify 297 | it under the terms of the GNU General Public License as published by 298 | the Free Software Foundation; either version 2 of the License, or 299 | (at your option) any later version. 300 | 301 | This program is distributed in the hope that it will be useful, 302 | but WITHOUT ANY WARRANTY; without even the implied warranty of 303 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 304 | GNU General Public License for more details. 305 | 306 | You should have received a copy of the GNU General Public License along 307 | with this program; if not, write to the Free Software Foundation, Inc., 308 | 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. 309 | 310 | Also add information on how to contact you by electronic and paper mail. 311 | 312 | If the program is interactive, make it output a short notice like this 313 | when it starts in an interactive mode: 314 | 315 | Gnomovision version 69, Copyright (C) year name of author 316 | Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. 317 | This is free software, and you are welcome to redistribute it 318 | under certain conditions; type `show c' for details. 319 | 320 | The hypothetical commands `show w' and `show c' should show the appropriate 321 | parts of the General Public License. Of course, the commands you use may 322 | be called something other than `show w' and `show c'; they could even be 323 | mouse-clicks or menu items--whatever suits your program. 324 | 325 | You should also get your employer (if you work as a programmer) or your 326 | school, if any, to sign a "copyright disclaimer" for the program, if 327 | necessary. Here is a sample; alter the names: 328 | 329 | Yoyodyne, Inc., hereby disclaims all copyright interest in the program 330 | `Gnomovision' (which makes passes at compilers) written by James Hacker. 331 | 332 | {signature of Ty Coon}, 1 April 1989 333 | Ty Coon, President of Vice 334 | 335 | This General Public License does not permit incorporating your program into 336 | proprietary programs. If your program is a subroutine library, you may 337 | consider it more useful to permit linking proprietary applications with the 338 | library. If this is what you want to do, use the GNU Lesser General 339 | Public License instead of this License. 340 | 341 | -------------------------------------------------------------------------------- /chrome/content/thundersec.js: -------------------------------------------------------------------------------- 1 | /* 2 | Security Extensions for Mozilla Thunderbird 3 | Copyright (C) 2015 by Ilker Temir (@ilkertemir) and Tim Sammut (@t1msammut) 4 | 5 | This program is free software; you can redistribute it and/or 6 | modify it under the terms of the GNU General Public License 7 | as published by the Free Software Foundation; version 2 8 | of the License. 9 | 10 | This program is distributed in the hope that it will be useful, 11 | but WITHOUT ANY WARRANTY; without even the implied warranty of 12 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 | GNU General Public License for more details. 14 | 15 | You should have received a copy of the GNU General Public License 16 | along with this program; if not, write to the Free Software 17 | Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. 18 | */ 19 | 20 | // Global variables 21 | var DNSBL = {}; 22 | var SURBL = {}; 23 | var SPF = {}; 24 | var DKIM = {}; 25 | var stats = { periodStart: Date.now() / 1000, 26 | periodEnd: null, 27 | inspectTotal: 0, 28 | dnsblLookup: 0, 29 | dnsblViolation: 0, 30 | dnsblWhitelist: 0, 31 | surblLookup: 0, 32 | surblViolation: 0, 33 | surblWhitelist: 0, 34 | spfViolation: 0, 35 | spfWhitelist:0, 36 | dkimViolation: 0, 37 | dkimWhitelist: 0 }; 38 | var totalDNSlookups = {}; 39 | var autoJunked = []; 40 | var currentMailID; 41 | var connection; 42 | var initialized = false; 43 | 44 | if ( !initialized) { 45 | initialized = true; 46 | initialize(); 47 | } 48 | 49 | function initialize() { 50 | // We will watch for application-quit 51 | function quitObserver() 52 | { 53 | this.register(); 54 | } 55 | quitObserver.prototype = { 56 | observe: function(subject, topic, data) { 57 | // Close the database connection 58 | connection.close(); 59 | // This has to be an async request while application is quitting 60 | // Or Thunderbird will quit before the $.post completes 61 | jQuery.ajaxSetup({async:false}); 62 | apiSendGenericStats(); 63 | }, 64 | register: function() { 65 | var observerService = Components.classes["@mozilla.org/observer-service;1"] 66 | .getService(Components.interfaces.nsIObserverService); 67 | observerService.addObserver(this, "quit-application", false); 68 | }, 69 | unregister: function() { 70 | var observerService = Components.classes["@mozilla.org/observer-service;1"] 71 | .getService(Components.interfaces.nsIObserverService); 72 | observerService.removeObserver(this, "quit-application"); 73 | } 74 | } 75 | 76 | let observer = new quitObserver(); 77 | 78 | // Add event listener 79 | var messagepane = document.getElementById("messagepane"); 80 | messagepane.addEventListener('load', function () { 81 | pluginMain(); 82 | }, true); 83 | 84 | // Check new version now (in a minute) and then every day 85 | setTimeout (apiCheckVersion, 60*1000); 86 | setInterval (apiCheckVersion, 24*60*60*1000); 87 | 88 | setInterval (apiSendGenericStats, STAT_INTERVAL); 89 | 90 | if (!connection) { 91 | Components.utils.import("resource://gre/modules/Sqlite.jsm"); 92 | Sqlite.openConnection( 93 | { path: DB_NAME } 94 | ).then( 95 | function onConnection(conn) { 96 | // Set the global variable 97 | connection = conn; 98 | 99 | conn.tableExists("dnsblWhiteList").then( 100 | function (exists) { 101 | if (!exists) { 102 | // This means, database has just been created. Create the table. 103 | createDnsblTable (conn); 104 | } 105 | } 106 | ); 107 | 108 | conn.tableExists("surblWhiteList").then( 109 | function (exists) { 110 | if (!exists) { 111 | // This means, database has just been created. Create the table. 112 | createSurblTable (conn); 113 | } 114 | } 115 | ); 116 | 117 | conn.tableExists("spfWhiteList").then( 118 | function (exists) { 119 | if (!exists) { 120 | // This means, database has just been created. Create the table. 121 | createSpfTable (conn); 122 | } 123 | } 124 | ); 125 | 126 | conn.tableExists("dkimWhiteList").then( 127 | function (exists) { 128 | if (!exists) { 129 | // This means, database has just been created. Create the table. 130 | createDkimTable (conn); 131 | } 132 | } 133 | ); 134 | 135 | }, // on Connection 136 | function onError(error) { 137 | alert (error); 138 | } 139 | ); 140 | } // if (!connection) 141 | } 142 | 143 | // Checks if we are running the latest version 144 | function apiCheckVersion() { 145 | $.get (API_URL + 'version', function (data) { 146 | let latestVersion = data['version']; 147 | let description = data['description']; 148 | 149 | if ( version_compare (VERSION, latestVersion, '<') ) { 150 | let message = 'New Version Available\n\n' + 151 | 'ThunderSec v' + latestVersion + ' is available.\n' + 152 | 'Description: ' + description + '\n\n' + 153 | 'Would you like to download?'; 154 | 155 | if ( window.confirm (message) ) { 156 | window.open (data['url'],'','chrome,centerscreen'); 157 | } 158 | } 159 | }, 'json'); 160 | } 161 | 162 | // Sends generic statistics to the API 163 | function apiSendGenericStats() { 164 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 165 | .getService(Components.interfaces.nsIPrefService) 166 | .getBranch("extensions.thundersec."); 167 | 168 | // Check if API usage is allowed in preferences 169 | if ( pref.getBoolPref('api_enabled') ) { 170 | // Set period end to now 171 | stats.periodEnd = Date.now() / 1000; 172 | 173 | // Add version information for the API 174 | stats.version = VERSION; 175 | 176 | // Send stats 177 | $.post (API_URL + 'stat', stats, function () { 178 | // Reset stats, only on success 179 | stats = { periodStart: Date.now() / 1000, 180 | periodEnd: null, 181 | inspectTotal: 0, 182 | dnsblLookup: 0, 183 | dnsblViolation: 0, 184 | dnsblWhitelist: 0, 185 | surblLookup: 0, 186 | surblViolation: 0, 187 | surblWhitelist: 0, 188 | spfViolation: 0, 189 | spfWhitelist:0, 190 | dkimViolation: 0, 191 | dkimWhitelist: 0 }; 192 | }); 193 | } 194 | } 195 | 196 | function createDnsblTable(connection) { 197 | let sql = " CREATE TABLE 'dnsblWhiteList' ( " + 198 | " 'id' INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT," + 199 | " 'ipAddress' TEXT NOT NULL," + 200 | " 'dnsblSource' TEXT NOT NULL," + 201 | " 'code' TEXT NOT NULL," + 202 | " 'sender' TEXT NOT NULL," + 203 | " UNIQUE(ipAddress, dnsblSource, code, sender) ); "; 204 | 205 | connection.execute (sql); 206 | } 207 | 208 | function createSurblTable(connection) { 209 | let sql = " CREATE TABLE 'surblWhiteList' ( " + 210 | " 'id' INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT," + 211 | " 'host' TEXT NOT NULL," + 212 | " 'surblSource' TEXT NOT NULL," + 213 | " 'code' TEXT NOT NULL," + 214 | " 'sender' TEXT NOT NULL," + 215 | " UNIQUE(host, surblSource, code, sender) ); "; 216 | 217 | connection.execute (sql); 218 | } 219 | 220 | function createSpfTable(connection) { 221 | let sql = " CREATE TABLE 'spfWhiteList' ( " + 222 | " 'id' INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT," + 223 | " 'reason' TEXT NOT NULL," + 224 | " 'sender' TEXT NOT NULL," + 225 | " UNIQUE(reason, sender) ); "; 226 | 227 | connection.execute (sql); 228 | } 229 | 230 | function createDkimTable(connection) { 231 | let sql = " CREATE TABLE 'dkimWhiteList' ( " + 232 | " 'id' INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT," + 233 | " 'reason' TEXT NOT NULL," + 234 | " 'sender' TEXT NOT NULL," + 235 | " UNIQUE(reason, sender) ); "; 236 | 237 | connection.execute (sql); 238 | } 239 | 240 | // Notify the API for crowd-sourced improvements 241 | // This should not send any sensitive information back 242 | function apiSendDnsblStats (ip, code, source) { 243 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 244 | .getService(Components.interfaces.nsIPrefService) 245 | .getBranch("extensions.thundersec."); 246 | 247 | // Check if API usage is allowed in preferences 248 | if ( pref.getBoolPref('api_enabled') ) { 249 | // We will hash the sender for privacy 250 | $.post( API_URL + 'dnsbl/stat', 251 | { 'ip': ip, 252 | 'code': code, 253 | 'dnsbl': source, 254 | 'version': VERSION } ); 255 | } 256 | } 257 | 258 | // Notify the API for crowd-sourced improvements 259 | // This should not send any sensitive information back 260 | function apiSendSurblStats (host, code, source) { 261 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 262 | .getService(Components.interfaces.nsIPrefService) 263 | .getBranch("extensions.thundersec."); 264 | 265 | // Check if API usage is allowed in preferences 266 | if ( pref.getBoolPref('api_enabled') ) { 267 | // We will hash the sender for privacy 268 | $.post( API_URL + 'surbl/stat', 269 | { 'host': host, 270 | 'code': code, 271 | 'surbl': source, 272 | 'version': VERSION } ); 273 | } 274 | } 275 | 276 | // Notify the API for crowd-sourced improvements 277 | // This should not send any sensitive information back 278 | function apiSendWhiteList(ip, code, source,sender) { 279 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 280 | .getService(Components.interfaces.nsIPrefService) 281 | .getBranch("extensions.thundersec."); 282 | 283 | // Check if API usage is allowed in preferences 284 | if ( pref.getBoolPref('api_enabled') ) { 285 | // We will hash the sender for privacy 286 | // We use SHA256 hash, it is a way one way hash (i.e. you cannnot go back from hash to email) 287 | let sha256Hash = CryptoJS.SHA256 (sender).toString(CryptoJS.enc.Hex); 288 | $.post( API_URL + 'dnsbl/whitelist', 289 | { 'ip': ip, 290 | 'code': code, 291 | 'dnsbl': source, 292 | 'senderHash': sha256Hash, 293 | 'version': VERSION } ); 294 | } 295 | } 296 | 297 | // Notify the API for crowd-sourced improvements 298 | // This should not send any sensitive information back 299 | function apiSurblSendWhiteList(host, code, source, sender) { 300 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 301 | .getService(Components.interfaces.nsIPrefService) 302 | .getBranch("extensions.thundersec."); 303 | 304 | // Check if API usage is allowed in preferences 305 | if ( pref.getBoolPref('api_enabled') ) { 306 | // We will hash the sender for privacy 307 | // We use SHA256 hash, it is a way one way hash (i.e. you cannnot go back from hash to email) 308 | let sha256Hash = CryptoJS.SHA256 (sender).toString(CryptoJS.enc.Hex); 309 | $.post( API_URL + 'surbl/whitelist', 310 | { 'host': host, 311 | 'code': code, 312 | 'surbl': source, 313 | 'senderHash': sha256Hash, 314 | 'version': VERSION } ); 315 | } 316 | } 317 | 318 | function IPnumber(IPaddress) { 319 | var ip = IPaddress.match(/^(\d+)\.(\d+)\.(\d+)\.(\d+)$/); 320 | if(ip) { 321 | return (+ip[1]<<24) + (+ip[2]<<16) + (+ip[3]<<8) + (+ip[4]); 322 | } 323 | return null; 324 | } 325 | 326 | function IPmask(maskSize) { 327 | return -1<<(32-maskSize) 328 | } 329 | 330 | function isReserved (IPaddress) { 331 | var netblocks= [ { network: '10.0.0.0', maskLength: 8 }, 332 | { network: '172.16.0.0', maskLength: 20 }, 333 | { network: '192.168.0.0', maskLength: 16 }, 334 | { network: '127.0.0.0', maskLength: 8 }, 335 | { network: '0.0.0.0', maskLength: 8 }, 336 | { network: '169.254.0.0', maskLength: 16 }, 337 | { network: '192.0.0.0', maskLength: 24 }, 338 | { network: '192.0.2.0', maskLength: 24 }, 339 | { network: '192.88.99.0', maskLength: 24 }, 340 | { network: '198.18.0.0', maskLength: 15 }, 341 | { network: '198.51.100.0', maskLength: 24 }, 342 | { network: '203.0.113.0', maskLength: 24 }, 343 | { network: '240.0.0.0', maskLength: 4 }, 344 | { network: '100.64.0.0', maskLength: 10 } ]; 345 | var network; 346 | var prefix; 347 | 348 | for (var i in netblocks) { 349 | network = netblocks[i].network; 350 | prefix = netblocks[i].maskLength; 351 | 352 | if ( (IPnumber (IPaddress) & IPmask (prefix)) == IPnumber(network) ) { 353 | return true; 354 | } 355 | } 356 | return false; 357 | } 358 | 359 | function parseReceivedLine (receivedLine) { 360 | var addr=null; 361 | var match; 362 | 363 | // Parses "Received: by mail-xyz.google.com with SMTP id XXXX" 364 | match = /^by ([^\s]+)/.exec(receivedLine); 365 | if (match) { 366 | addr = match[1]; 367 | return (addr); 368 | } 369 | 370 | // Parses "Received: from dc-XXX.example.com ([10.10.10.15]) by dc-YYY.example.com" 371 | match = /^from [^\s]+ \([^\[]*\[(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})\]/.exec(receivedLine); 372 | if (match) { 373 | addr = match[1]; 374 | return (addr); 375 | } 376 | 377 | // Parses "Received: from dc-XXX.example.com (10.10.10.15) by mail.example.com" 378 | // Parses "Received: from (127.0.0.1) by mail142.wdc02.mcdlv.net" 379 | match = /^from [\[\(]?([^\s\]\)]+)/.exec(receivedLine); 380 | if (match) { 381 | addr = match[1]; 382 | return (addr); 383 | } 384 | 385 | return addr; 386 | } 387 | 388 | function updateWhiteList(dnsbl, surbl, spf, dkim) { 389 | connection.execute("BEGIN IMMEDIATE TRANSACTION"); 390 | for (var i in dnsbl) { 391 | let values = [ dnsbl[i].ip, 392 | dnsbl[i].service, 393 | dnsbl[i].code, 394 | dnsbl[i].sender ]; 395 | let sql = "INSERT OR IGNORE INTO dnsblWhiteList " + 396 | "('ipAddress', 'dnsblSource', 'code', 'sender') " + 397 | "VALUES (?, ?, ?, ?)"; 398 | connection.execute(sql, values); 399 | 400 | // Notify the API for crowd-sourced improvements 401 | apiSendWhiteList(dnsbl[i].ip, 402 | dnsbl[i].code, 403 | dnsbl[i].service, 404 | dnsbl[i].sender); 405 | } 406 | for (var i in surbl) { 407 | let values = [ surbl[i].host, 408 | surbl[i].service, 409 | surbl[i].code, 410 | surbl[i].sender ]; 411 | let sql = "INSERT OR IGNORE INTO surblWhiteList " + 412 | "('host', 'surblSource', 'code', 'sender') " + 413 | "VALUES (?, ?, ?, ?)"; 414 | connection.execute(sql, values); 415 | 416 | // Notify the API for crowd-sourced improvements 417 | apiSurblSendWhiteList(surbl[i].host, 418 | surbl[i].code, 419 | surbl[i].service, 420 | surbl[i].sender); 421 | } 422 | if (!spf.pass) { 423 | let values = [ spf.reason, spf.sender ]; 424 | let sql = "INSERT OR IGNORE INTO spfWhiteList " + 425 | "('reason', 'sender') " + 426 | "VALUES (?, ?)"; 427 | connection.execute(sql, values); 428 | } 429 | if (!dkim.pass) { 430 | let values = [ dkim.reason, dkim.sender ]; 431 | let sql = "INSERT OR IGNORE INTO dkimWhiteList " + 432 | "('reason', 'sender') " + 433 | "VALUES (?, ?)"; 434 | connection.execute(sql, values); 435 | } 436 | connection.execute("COMMIT TRANSACTION"); 437 | } 438 | 439 | function markAsJunk(notf, desc) { 440 | // This will mark the message as Junk 441 | gDBView.doCommand(Components.interfaces.nsMsgViewCommandType.junk); 442 | } 443 | 444 | function markAsLegitimate(notf, desc) { 445 | var confirm = window.confirm ("Are you sure to mark this e-mail as legitimate?\n\n" + 446 | "This will be remembered and similar messages from " + 447 | "this user will no longer be marked for the same " + 448 | "reason in the future."); 449 | if (confirm) { 450 | // We need to pass the DNSBL here, otherwise it will be reset before the database is processed 451 | updateWhiteList( DNSBL[currentMailID], SURBL[currentMailID], SPF[currentMailID], DKIM[currentMailID] ); 452 | } else { 453 | throw new Error('Preventing notification bar from closing.'); 454 | } 455 | } 456 | 457 | function detailsBox(notf, desc) { 458 | var params = { dnsbl: DNSBL[currentMailID], 459 | surbl: SURBL[currentMailID], 460 | dkim: DKIM[currentMailID], 461 | spf: SPF[currentMailID] }; 462 | 463 | window.openDialog("chrome://thundersec/content/details.xul", "", 464 | "chrome, dialog, centerscreen, resizable=no", 465 | params); 466 | 467 | throw new Error('Preventing notification bar from closing.'); 468 | } 469 | 470 | function optionsBox(notf, desc) { 471 | var features = "chrome,titlebar,toolbar,centerscreen,dialog=yes"; 472 | window.openDialog("chrome://thundersec/content/options.xul", "Preferences", features); 473 | throw new Error('Preventing notification bar from closing.'); 474 | } 475 | 476 | function cleanMessageNotification(mailID) { 477 | if (mailID != currentMailID) { 478 | // User has moved on, don't update the notificationbox 479 | return; 480 | } 481 | 482 | // This feels redundant but necessary 483 | let msgHdr = gFolderDisplay.selectedMessage; 484 | 485 | if (!msgHdr) { 486 | return 487 | } 488 | 489 | var junkScore = msgHdr.getStringProperty("junkscore"); 490 | var isJunk = (junkScore == Components.interfaces.nsIJunkMailPlugin.IS_SPAM_SCORE); 491 | 492 | // If already marked as Junk, don't display the banner 493 | if (isJunk) { 494 | return 495 | } 496 | 497 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 498 | .getService(Components.interfaces.nsIPrefService) 499 | .getBranch("extensions.thundersec."); 500 | 501 | // Check if auto-junk feature is enabled 502 | if ( !pref.getBoolPref('display_clean_message') ) { 503 | return 504 | } 505 | 506 | var buttons = [ 507 | { 508 | label: 'Preferences', 509 | accessKey: 'P', 510 | popup: null, 511 | callback: optionsBox 512 | }, 513 | ]; 514 | 515 | let notificationBox = document.getElementById("msgNotificationBar"); 516 | 517 | if ( notificationBox.getNotificationWithValue( 'noSecurityViolations' ) ) { 518 | // 'noSecurityViolations' notification is already up, no need to repeat 519 | return; 520 | } 521 | 522 | if ( notificationBox.getNotificationWithValue( 'securityViolations' ) ) { 523 | // Pass if 'securityViolations' notification is up, it has priority 524 | return; 525 | } 526 | 527 | let notificationText = "No DNSBL, SURBL, SPF or DKIM violations."; 528 | notificationBox.appendNotification(notificationText, 529 | "noSecurityViolations", 530 | null, 531 | 1, 532 | buttons); 533 | } 534 | 535 | function updateNotification(mailID) { 536 | if (mailID != currentMailID) { 537 | // User has moved on, don't update the notificationbox 538 | return; 539 | } 540 | 541 | // This feels redundant but necessary 542 | let msgHdr = gFolderDisplay.selectedMessage; 543 | 544 | if (!msgHdr) { 545 | return 546 | } 547 | 548 | var junkScore = msgHdr.getStringProperty("junkscore"); 549 | var isJunk = (junkScore == Components.interfaces.nsIJunkMailPlugin.IS_SPAM_SCORE); 550 | 551 | // If already marked as Junk, don't display the banner 552 | if (isJunk) { 553 | return 554 | } 555 | 556 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 557 | .getService(Components.interfaces.nsIPrefService) 558 | .getBranch("extensions.thundersec."); 559 | 560 | // Check if auto-junk feature is enabled 561 | if ( ( pref.getBoolPref('auto_junk_enabled') ) && ( autoJunked.indexOf(mailID) == -1 ) ) { 562 | // We auto-junk a message only once, the rest is for the user 563 | autoJunked.push(mailID); 564 | gDBView.doCommand(Components.interfaces.nsMsgViewCommandType.junk); 565 | return; 566 | } 567 | 568 | var buttons = [ 569 | { 570 | label: 'Details', 571 | accessKey: 'D', 572 | popup: null, 573 | callback: detailsBox 574 | }, 575 | { 576 | label: 'Mark as Junk', 577 | accessKey: 'J', 578 | popup: null, 579 | callback: markAsJunk 580 | }, 581 | { 582 | label: 'Mark as Legitimate', 583 | accessKey: 'M', 584 | popup: null, 585 | callback: markAsLegitimate 586 | }, 587 | { 588 | label: 'Preferences', 589 | accessKey: 'P', 590 | popup: null, 591 | callback: optionsBox 592 | }, 593 | ]; 594 | 595 | let notificationBox = document.getElementById("msgNotificationBar"); 596 | // Remove 'noSecurityViolations' bar if it exists, it is not relevant 597 | while ( notificationBox.getNotificationWithValue( 'noSecurityViolations' ) ) { 598 | notificationBox.removeCurrentNotification(); 599 | } 600 | while ( notificationBox.getNotificationWithValue( 'securityViolations' ) ) { 601 | notificationBox.removeCurrentNotification(); 602 | } 603 | 604 | let violations = []; 605 | let plural = false; 606 | if ( DNSBL[currentMailID].length == 1 ) { 607 | violations.push ("DNSBL"); 608 | } 609 | else if ( DNSBL[currentMailID].length > 1 ) { 610 | violations.push ("Multiple DNSBL"); 611 | plural = true; 612 | } 613 | 614 | if ( SURBL[currentMailID].length == 1 ) { 615 | violations.push ("SURBL"); 616 | } 617 | else if ( SURBL[currentMailID].length > 1 ) { 618 | violations.push ("Multiple SURBL"); 619 | plural = true; 620 | } 621 | 622 | if ( !SPF[currentMailID].pass ) { 623 | violations.push ("SPF"); 624 | } 625 | 626 | if ( !DKIM[currentMailID].pass ) { 627 | violations.push ("DKIM"); 628 | } 629 | 630 | let notificationText = ''; 631 | 632 | if ( violations.length == 1 ) { 633 | if (plural) { 634 | notificationText = notificationText + 635 | violations[0] + ' violations. '; 636 | } 637 | else { 638 | notificationText = notificationText + 639 | violations[0] + ' violation. '; 640 | } 641 | } 642 | if ( violations.length == 2 ) { 643 | notificationText = notificationText + 644 | violations[0] + ' and ' + 645 | violations[1] + ' violations. '; 646 | } 647 | if ( violations.length == 3 ) { 648 | notificationText = notificationText + 649 | violations[0] + ', ' + 650 | violations[1] + ' and ' + 651 | violations[2] + ' violations. '; 652 | } 653 | if ( violations.length == 4 ) { 654 | notificationText = notificationText + 655 | violations[0] + ', ' + 656 | violations[1] + ', ' + 657 | violations[2] + ' and ' + 658 | violations[3] + ' violations. '; 659 | } 660 | 661 | notificationText = notificationText + "Please check Details for more information." 662 | 663 | notificationBox.appendNotification(notificationText, 664 | "securityViolations", 665 | null, 666 | 10, 667 | buttons); 668 | } 669 | 670 | function updateDNSBLinfo(mailID) { 671 | if (mailID != currentMailID) { 672 | // User has moved on, don't updae the notificationbox 673 | return; 674 | } 675 | var numLookups = totalDNSlookups[mailID] 676 | 677 | var dnsblInfo = document.getElementById("dnsblInfo"); 678 | var imgSpinner = document.getElementById("imgSpinner"); 679 | var label; 680 | if (numLookups != 0) { 681 | label = "Number of outstanding DNS lookups: " + numLookups; 682 | imgSpinner.hidden = false; 683 | } 684 | else { 685 | label = ""; 686 | imgSpinner.hidden = true; 687 | } 688 | dnsblInfo.label = label; 689 | } 690 | 691 | function doSURBLcheck(hosts, surblService, returnPath, mailID) { 692 | var match; 693 | var numDNSLookups = 0; 694 | var numSQLLookups = 0; 695 | var safeMail = true; 696 | 697 | let DnsService = Components.classes["@mozilla.org/network/dns-service;1"] 698 | .createInstance(Components.interfaces.nsIDNSService); 699 | 700 | let Thread = Components.classes["@mozilla.org/thread-manager;1"] 701 | .getService(Components.interfaces.nsIThreadManager).currentThread; 702 | 703 | for (var i in hosts) { 704 | let surblQuery; 705 | let host; 706 | let resolvedAddr; 707 | 708 | let Listener = { 709 | onLookupComplete: function(request, record, status) { 710 | numDNSLookups--; 711 | totalDNSlookups[mailID]--; 712 | updateDNSBLinfo(mailID); 713 | 714 | if (Components.isSuccessCode(status)) { 715 | while ( record && record.hasMore() ) { 716 | // Update stats 717 | stats.surblViolation++; 718 | 719 | resolvedAddr = record.getNextAddrAsString(); 720 | if ( resolvedAddr != '127.0.0.1') { 721 | // This query HAS TO return only a single row 722 | let sql = "SELECT COUNT(id) as cnt FROM surblWhiteList " + 723 | "WHERE host=? AND surblSource=? AND code=? AND sender=?"; 724 | let values = [ host, 725 | surblService, 726 | resolvedAddr, 727 | returnPath ]; 728 | numSQLLookups++; 729 | connection.execute(sql, values, function(row) { 730 | numSQLLookups--; 731 | 732 | // This will be 1 for existing records, 0 for non-existent ones 733 | let count = row.getResultByName('cnt'); 734 | if (!count) { 735 | SURBL[mailID].push ( { host: host, 736 | service: surblService, 737 | code: resolvedAddr, 738 | sender: returnPath } ); 739 | apiSendSurblStats (host, resolvedAddr, surblService); 740 | safeMail = false; 741 | } else { 742 | // Previously white listed 743 | // Update stats 744 | stats.surblWhitelist++; 745 | } 746 | // Make sure we finished all lookups, both DNS and SQL 747 | if ( numSQLLookups == 0 ) { 748 | if (safeMail) { 749 | // Pass 750 | if (DKIM[mailID].pass && SPF[mailID].pass && (DNSBL[mailID].length == 0)) { 751 | cleanMessageNotification(mailID); 752 | } 753 | } else { 754 | updateNotification (mailID); 755 | } 756 | } 757 | }); 758 | } // If resolvedAddress != '127.0.0.1' 759 | } 760 | } 761 | else { 762 | // No response from DNS DNSBL safe 763 | if (DKIM[mailID].pass && SPF[mailID].pass && (DNSBL[mailID].length == 0)) { 764 | cleanMessageNotification(mailID); 765 | } 766 | } 767 | 768 | } 769 | }; 770 | 771 | host = hosts[i]; 772 | 773 | surblQuery = host + "." + surblService + "."; 774 | 775 | // Update stats 776 | stats.surblLookup++; 777 | 778 | numDNSLookups++; 779 | 780 | totalDNSlookups[mailID]++; 781 | updateDNSBLinfo(mailID); 782 | 783 | DnsService.asyncResolve(surblQuery, 0, Listener, Thread); 784 | } 785 | } 786 | 787 | function doDNSBLcheck(relays, dnsblService, returnPath, mailID) { 788 | var match; 789 | var reverseAddr; 790 | var numDNSLookups = 0; 791 | var numSQLLookups = 0; 792 | var safeMail = true; 793 | 794 | let DnsService = Components.classes["@mozilla.org/network/dns-service;1"] 795 | .createInstance(Components.interfaces.nsIDNSService); 796 | 797 | let Thread = Components.classes["@mozilla.org/thread-manager;1"] 798 | .getService(Components.interfaces.nsIThreadManager).currentThread; 799 | 800 | for (var i in relays) { 801 | let dnsblQuery; 802 | let addr; 803 | let resolvedAddr; 804 | 805 | let Listener = { 806 | onLookupComplete: function(request, record, status) { 807 | numDNSLookups--; 808 | totalDNSlookups[mailID]--; 809 | updateDNSBLinfo(mailID); 810 | 811 | if (Components.isSuccessCode(status)) { 812 | while ( record && record.hasMore() ) { 813 | // Update stats 814 | stats.dnsblViolation++; 815 | 816 | resolvedAddr = record.getNextAddrAsString(); 817 | // This query HAS TO return only a single row 818 | let sql = "SELECT COUNT(id) as cnt FROM dnsblWhiteList " + 819 | "WHERE ipAddress=? AND dnsblSource=? AND code=? AND sender=?"; 820 | let values = [ addr, 821 | dnsblService, 822 | resolvedAddr, 823 | returnPath ]; 824 | numSQLLookups++; 825 | connection.execute(sql, values, function(row) { 826 | numSQLLookups--; 827 | 828 | // This will be 1 for existing records, 0 for non-existent ones 829 | let count = row.getResultByName('cnt'); 830 | if (!count) { 831 | DNSBL[mailID].push ( { ip: addr, 832 | service: dnsblService, 833 | code: resolvedAddr, 834 | sender: returnPath } ); 835 | apiSendDnsblStats (addr, resolvedAddr, dnsblService); 836 | safeMail = false; 837 | } else { 838 | // Previously white listed 839 | // Update stats 840 | stats.dnsblWhitelist++; 841 | } 842 | // Make sure we finished all lookups, both DNS and SQL 843 | if ( numSQLLookups == 0 ) { 844 | if (safeMail) { 845 | // Pass 846 | if (DKIM[mailID].pass && SPF[mailID].pass && (SURBL[mailID].length == 0)) { 847 | cleanMessageNotification(mailID); 848 | } 849 | } else { 850 | updateNotification (mailID); 851 | } 852 | } 853 | }); 854 | } 855 | } 856 | else { 857 | // No response from DNS DNSBL safe 858 | if (DKIM[mailID].pass && SPF[mailID].pass && (SURBL[mailID].length == 0)) { 859 | cleanMessageNotification(mailID); 860 | } 861 | } 862 | 863 | } 864 | }; 865 | 866 | addr = relays[i]; 867 | 868 | match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec (addr); 869 | if (match) { 870 | reverseAddr = match[4] + "." + match[3] + "." + match[2] + "." + match[1]; 871 | dnsblQuery = reverseAddr + "." + dnsblService + "."; 872 | 873 | // Update stats 874 | stats.dnsblLookup++; 875 | 876 | numDNSLookups++; 877 | 878 | totalDNSlookups[mailID]++; 879 | updateDNSBLinfo(mailID); 880 | 881 | DnsService.asyncResolve(dnsblQuery, 0, Listener, Thread); 882 | 883 | } 884 | } 885 | if (!numDNSLookups && DKIM[mailID].pass && SPF[mailID].pass && (SURBL[mailID].length == 0)) { 886 | cleanMessageNotification(mailID); 887 | } 888 | } 889 | 890 | // For debugging only, should not be used in production code 891 | function mydump(arr,level) { 892 | var dumped_text = ""; 893 | if(!level) level = 0; 894 | 895 | var level_padding = ""; 896 | for(var j=0;j \"" + value + "\"\n"; 907 | } 908 | } 909 | } else { 910 | dumped_text = "===>"+arr+"<===("+typeof(arr)+")"; 911 | } 912 | return dumped_text; 913 | } 914 | 915 | // Perform all SURBL checks by calling doSURBLcheck iteratively 916 | function doSURBLchecks(hosts, returnPath, mailID) { 917 | var surblServices = [ 'multi.uribl.com', 918 | 'multi.surbl.org' ]; 919 | 920 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 921 | .getService(Components.interfaces.nsIPrefService) 922 | .getBranch("extensions.thundersec."); 923 | 924 | // Do this for each of the SURBL services 925 | for (var i in surblServices) { 926 | // Check if enabled in preferences 927 | if ( pref.getBoolPref(surblServices[i]) ){ 928 | doSURBLcheck (hosts, surblServices[i], returnPath, mailID); 929 | } 930 | } 931 | 932 | // Process Custom SURBL if it is enabled 933 | if ( pref.getBoolPref('custom_surbl_enabled') && pref.getCharPref('custom_surbl') ) { 934 | var customSURBLs = pref.getCharPref('custom_surbl').split(/\s*\,\s*|\s+/); 935 | for (var i in customSURBLs) { 936 | doSURBLcheck (hosts, customSURBLs[i], returnPath, mailID); 937 | } 938 | } 939 | 940 | } 941 | 942 | // Perform all DNSBL checks by calling doDNSBLcheck iteratively 943 | function doDNSBLchecks(relays, returnPath, mailID) { 944 | var dnsblServices = [ 'zen.spamhaus.org', 945 | 'b.barracudacentral.org', 946 | 'dnsbl.abuse.ch', 947 | 'cbl.abuseat.org', 948 | 'ubl.unsubscore.com', 949 | 'bl.spamcop.net', 950 | 'dnsbl.sorbs.net' ]; 951 | 952 | var pref = Components.classes["@mozilla.org/preferences-service;1"] 953 | .getService(Components.interfaces.nsIPrefService) 954 | .getBranch("extensions.thundersec."); 955 | 956 | // Do this for each of the DNSBL services 957 | for (var i in dnsblServices) { 958 | // Check if enabled in preferences 959 | if ( pref.getBoolPref(dnsblServices[i]) ){ 960 | doDNSBLcheck (relays, dnsblServices[i], returnPath, mailID); 961 | } 962 | } 963 | 964 | // Process Custom DNSBL if it is enabled 965 | if ( pref.getBoolPref('custom_dnsbl_enabled') && pref.getCharPref('custom_dnsbl') ) { 966 | var customDNSBLs = pref.getCharPref('custom_dnsbl').split(/\s*\,\s*|\s+/); 967 | for (var i in customDNSBLs) { 968 | doDNSBLcheck (relays, customDNSBLs[i], returnPath, mailID); 969 | } 970 | } 971 | 972 | } 973 | 974 | function parseAuthResults(input) { 975 | var parts = new Array(); 976 | for(var i = 0, mark = ';', part = ''; 977 | i < input.length; 978 | i++) { 979 | 980 | part += input[i]; 981 | if (input[i] == mark) { 982 | parts[parts.length] = part.trim().replace(/;$/, '').replace(/\s+/g, ' '); 983 | part = ''; 984 | } 985 | if (input[i] == '\"') { 986 | mark = mark == ';' ? 'AA' : ';'; 987 | } 988 | } 989 | parts[parts.length] = part.trim().replace(/;$/, '').replace(/\s+/g, ' '); 990 | return parts; 991 | } 992 | 993 | function isDKIMsuccess(authResults, sender, mailID) { 994 | DKIM[mailID] = { pass: true, 995 | reason: null, 996 | sender: sender }; 997 | 998 | for (let i in authResults) { 999 | let item = authResults[i]; 1000 | let match = item.match (/dkim=([^\s]+)/); 1001 | if ( (match) && 1002 | (match[1] != 'pass') && 1003 | (match[1] != 'neutral') && 1004 | (match[1] != 'none') ) { 1005 | // Update stats 1006 | stats.dkimViolation++; 1007 | 1008 | // Try to extract reason but this is not foolproof 1009 | let match = item.match (/dkim=[^\s]+ \((.*?)\)/ ); 1010 | let reason = ''; 1011 | if (match) { 1012 | reason=match[1]; 1013 | } 1014 | // Check if previously white-listed 1015 | let sql = "SELECT COUNT(id) as cnt FROM dkimWhiteList " + 1016 | "WHERE reason=? AND sender=?"; 1017 | let values = [ reason, 1018 | sender ]; 1019 | 1020 | connection.execute(sql, values, function(row) { 1021 | // This will be 1 for existing records, 0 for non-existent ones 1022 | let count = row.getResultByName('cnt'); 1023 | if (count == 0) { 1024 | DKIM[mailID] = { pass: false, 1025 | reason: reason, 1026 | sender: sender }; 1027 | updateNotification (mailID); 1028 | } 1029 | else { 1030 | // White-listed 1031 | // Update stats 1032 | stats.dkimWhitelist++; 1033 | } 1034 | }); 1035 | } // if match 1036 | } // for 1037 | } 1038 | 1039 | function isSPFsuccess(authResults, sender, mailID) { 1040 | SPF[mailID] = { pass: true, 1041 | reason: null, 1042 | sender: sender }; 1043 | 1044 | for (let i in authResults) { 1045 | let item = authResults[i]; 1046 | let match = item.match (/^([^\s]+)/); 1047 | if ( (match) && 1048 | (match[1].toLowerCase() != 'pass') && 1049 | (match[1].toLowerCase() != 'neutral') && 1050 | (match[1].toLowerCase() != 'none') ) { 1051 | // Update stats 1052 | stats.spfViolation++; 1053 | 1054 | // Try to extract reason but this is not foolproof 1055 | let match = item.match (/^[^\s]+ \((.*?)\)/ ); 1056 | let reason = null; 1057 | if (match) { 1058 | reason=match[1]; 1059 | } 1060 | 1061 | // Check if previously white-listed 1062 | let sql = "SELECT COUNT(id) as cnt FROM spfWhiteList " + 1063 | "WHERE reason=? AND sender=?"; 1064 | let values = [ reason, 1065 | sender ]; 1066 | 1067 | connection.execute(sql, values, function(row) { 1068 | // This will be 1 for existing records, 0 for non-existent ones 1069 | let count = row.getResultByName('cnt'); 1070 | if (count == 0) { 1071 | SPF[mailID] = { pass: false, 1072 | reason: reason, 1073 | sender: sender }; 1074 | updateNotification (mailID); 1075 | } 1076 | else { 1077 | // White-listed 1078 | // Update stats 1079 | stats.spfWhitelist++; 1080 | } 1081 | }); 1082 | } 1083 | } 1084 | } 1085 | 1086 | function pluginMain() { 1087 | // Use the document URL as a unique email identifier 1088 | var mailID = document.getElementById("messagepane").contentDocument.URL; 1089 | 1090 | currentMailID = mailID; 1091 | 1092 | // Initialize DNSBL 1093 | DNSBL[mailID] = []; 1094 | // Initialize SURBL 1095 | SURBL[mailID] = []; 1096 | 1097 | // Initialize totalDNSlookups 1098 | if (!totalDNSlookups[mailID]) { 1099 | totalDNSlookups[mailID] = 0; 1100 | } 1101 | updateDNSBLinfo(mailID); 1102 | 1103 | if (!gFolderDisplay) { 1104 | return 1105 | } 1106 | 1107 | let msgHdr = gFolderDisplay.selectedMessage; 1108 | 1109 | if (!msgHdr) { 1110 | return 1111 | } 1112 | 1113 | var junkScore = msgHdr.getStringProperty("junkscore"); 1114 | var isJunk = (junkScore == Components.interfaces.nsIJunkMailPlugin.IS_SPAM_SCORE); 1115 | 1116 | // If already marked as Junk, don't do any further processing 1117 | if (isJunk) { 1118 | return 1119 | } 1120 | 1121 | MsgHdrToMimeMessage(msgHdr, null, function (aMsgHdr, aMimeMsg) { 1122 | // Update counters 1123 | stats.inspectTotal++; 1124 | 1125 | var relay = null; 1126 | var relays = []; 1127 | var urlHosts = []; 1128 | var addr; 1129 | var numDNSLookups = 0; 1130 | var temp = 0; 1131 | 1132 | // Return-Path should exist in all messages per RFC but it doesn't 1133 | // See Issue #13 on GitHub 1134 | if ('return-path' in aMimeMsg.headers) { 1135 | // This comes back as an array, we want it as string 1136 | // Some odd instances return multiple 'return-path's separated by comma 1137 | var returnPath = aMimeMsg.headers['return-path'].join().split(',')[0]; 1138 | } 1139 | else { 1140 | var returnPath = aMimeMsg.headers['from'].join().split(',')[0];; 1141 | } 1142 | 1143 | // Addresses show up as sender@example.com, or Sender 1144 | // We need to normalize it 1145 | let match = returnPath.match(/<([^>]+)>/); 1146 | if (match) { 1147 | returnPath = match[1]; 1148 | } 1149 | 1150 | // We will inspect the Authentication-Results header for DKIM 1151 | let authResults = aMimeMsg.headers['authentication-results']; 1152 | if (authResults) { 1153 | let authResultsArray = parseAuthResults(authResults); 1154 | 1155 | // Updates DKIM[mailID] 1156 | isDKIMsuccess(authResultsArray, returnPath, mailID); 1157 | } else { 1158 | DKIM[mailID] = { pass: true, reason: null, sender: null }; 1159 | } 1160 | 1161 | // We will inspect the Received-SPF header for SPF 1162 | let receivedSpfArray = aMimeMsg.headers['received-spf']; 1163 | if (receivedSpfArray) { 1164 | // Updates SPF[mailID] 1165 | isSPFsuccess(receivedSpfArray, returnPath, mailID); 1166 | } else { 1167 | SPF[mailID] = { pass: true, reason: null, sender: null }; 1168 | } 1169 | 1170 | // SURBL START 1171 | // Extract hostnames from URLs in e-mail body 1172 | let body = aMimeMsg.prettyString(true, undefined, true); 1173 | let urlMatch = body.match(/(www\.[a-zA-Z0-9\.\-_]+)/g); 1174 | if (urlMatch) { 1175 | for (let i in urlMatch) { 1176 | // Eliminate http://, https:// and www. 1177 | let url = urlMatch[i].replace(/^https?:\/\//,''); 1178 | url = url.replace(/^www\./,''); 1179 | if ( urlHosts.indexOf(url) == -1 ) { 1180 | urlHosts.push(url); 1181 | } 1182 | } 1183 | } 1184 | urlMatch = body.match(/https?:\/\/([a-zA-Z0-9\.\-_]+)/g); 1185 | if (urlMatch) { 1186 | for (let i in urlMatch) { 1187 | // Eliminate http://, https:// and www. 1188 | let url = urlMatch[i].replace(/^https?:\/\//,''); 1189 | url = url.replace(/^www\./,''); 1190 | if ( urlHosts.indexOf(url) == -1 ) { 1191 | urlHosts.push(url); 1192 | } 1193 | } 1194 | } 1195 | 1196 | doSURBLchecks (urlHosts, returnPath, mailID); 1197 | // SURBL STOP 1198 | 1199 | let DnsService = Components.classes["@mozilla.org/network/dns-service;1"] 1200 | .createInstance(Components.interfaces.nsIDNSService); 1201 | 1202 | let Thread = Components.classes["@mozilla.org/thread-manager;1"] 1203 | .getService(Components.interfaces.nsIThreadManager).currentThread; 1204 | 1205 | let Listener = { 1206 | onLookupComplete: function(request, record, status) { 1207 | numDNSLookups--; 1208 | 1209 | totalDNSlookups[mailID]--; 1210 | updateDNSBLinfo(mailID); 1211 | 1212 | if (Components.isSuccessCode(status)) { 1213 | while ( record && record.hasMore() ) { 1214 | addr = record.getNextAddrAsString(); 1215 | if ( /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.exec (addr) ) { 1216 | if ( relays.indexOf (addr) == -1 ) { 1217 | if ( !isReserved(addr) ) { 1218 | relays.push (addr); 1219 | } 1220 | } 1221 | } 1222 | } 1223 | } 1224 | else { 1225 | // DNS Lookup Error 1226 | } 1227 | 1228 | if (numDNSLookups == 0) { 1229 | doDNSBLchecks (relays, returnPath, mailID); 1230 | } 1231 | } 1232 | }; 1233 | 1234 | for (var item in aMimeMsg.headers["received"]) { 1235 | if ( relay = parseReceivedLine (aMimeMsg.headers["received"][item]) ) { 1236 | if ( relay.indexOf(':') != -1 ) { 1237 |     // IPv6 - Not supported  1238 | } 1239 | else if ( /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.exec (relay) ) { 1240 | if ( relays.indexOf (relay) == -1 ) { 1241 | if ( !isReserved(relay) ) { 1242 | relays.push ( relay ); 1243 | } 1244 | } 1245 | } 1246 | else { 1247 | numDNSLookups++; 1248 | 1249 | totalDNSlookups[mailID]++; 1250 | updateDNSBLinfo(mailID); 1251 | 1252 | DnsService.asyncResolve(relay, DnsService.RESOLVE_DISABLE_IPV6, Listener, Thread); 1253 | } 1254 | } 1255 | } 1256 | 1257 | if (numDNSLookups == 0) { 1258 | doDNSBLchecks (relays, returnPath, mailID); 1259 | } 1260 | }, true); 1261 | } 1262 | -------------------------------------------------------------------------------- /chrome/content/jquery-2.1.4.min.js: -------------------------------------------------------------------------------- 1 | /*! jQuery v2.1.4 | (c) 2005, 2015 jQuery Foundation, Inc. | jquery.org/license */ 2 | !function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(d.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c=+a+(0>a?b:0);return this.pushStack(c>=0&&b>c?[this[c]]:[])},end:function(){return this.prevObject||this.constructor(null)},push:f,sort:c.sort,splice:c.splice},n.extend=n.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]||{},h++),"object"==typeof g||n.isFunction(g)||(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(a=arguments[h]))for(b in a)c=g[b],d=a[b],g!==d&&(j&&d&&(n.isPlainObject(d)||(e=n.isArray(d)))?(e?(e=!1,f=c&&n.isArray(c)?c:[]):f=c&&n.isPlainObject(c)?c:{},g[b]=n.extend(j,f,d)):void 0!==d&&(g[b]=d));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(a){return null!=a&&a===a.window},isNumeric:function(a){return!n.isArray(a)&&a-parseFloat(a)+1>=0},isPlainObject:function(a){return"object"!==n.type(a)||a.nodeType||n.isWindow(a)?!1:a.constructor&&!j.call(a.constructor.prototype,"isPrototypeOf")?!1:!0},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a||"function"==typeof a?h[i.call(a)]||"object":typeof a},globalEval:function(a){var b,c=eval;a=n.trim(a),a&&(1===a.indexOf("use strict")?(b=l.createElement("script"),b.text=a,l.head.appendChild(b).parentNode.removeChild(b)):c(a))},camelCase:function(a){return a.replace(p,"ms-").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b,c){var d,e=0,f=a.length,g=s(a);if(c){if(g){for(;f>e;e++)if(d=b.apply(a[e],c),d===!1)break}else for(e in a)if(d=b.apply(a[e],c),d===!1)break}else if(g){for(;f>e;e++)if(d=b.call(a[e],e,a[e]),d===!1)break}else for(e in a)if(d=b.call(a[e],e,a[e]),d===!1)break;return a},trim:function(a){return null==a?"":(a+"").replace(o,"")},makeArray:function(a,b){var c=b||[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:g.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;g>f;f++)d=!b(a[f],f),d!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,f=0,g=a.length,h=s(a),i=[];if(h)for(;g>f;f++)d=b(a[f],f,c),null!=d&&i.push(d);else for(f in a)d=b(a[f],f,c),null!=d&&i.push(d);return e.apply([],i)},guid:1,proxy:function(a,b){var c,e,f;return"string"==typeof b&&(c=a[b],b=a,a=c),n.isFunction(a)?(e=d.call(arguments,2),f=function(){return a.apply(b||this,e.concat(d.call(arguments)))},f.guid=a.guid=a.guid||n.guid++,f):void 0},now:Date.now,support:k}),n.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(a,b){h["[object "+b+"]"]=b.toLowerCase()});function s(a){var b="length"in a&&a.length,c=n.type(a);return"function"===c||n.isWindow(a)?!1:1===a.nodeType&&b?!0:"array"===c||0===b||"number"==typeof b&&b>0&&b-1 in a}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C=1<<31,D={}.hasOwnProperty,E=[],F=E.pop,G=E.push,H=E.push,I=E.slice,J=function(a,b){for(var c=0,d=a.length;d>c;c++)if(a[c]===b)return c;return-1},K="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.|[\\w-]|[^\\x00-\\xa0])+",N=M.replace("w","w#"),O="\\["+L+"*("+M+")(?:"+L+"*([*^$|!~]?=)"+L+"*(?:'((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\"|("+N+"))|)"+L+"*\\]",P=":("+M+")(?:\\((('((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\")|((?:\\\\.|[^\\\\()[\\]]|"+O+")*)|.*)\\)|)",Q=new RegExp(L+"+","g"),R=new RegExp("^"+L+"+|((?:^|[^\\\\])(?:\\\\.)*)"+L+"+$","g"),S=new RegExp("^"+L+"*,"+L+"*"),T=new RegExp("^"+L+"*([>+~]|"+L+")"+L+"*"),U=new RegExp("="+L+"*([^\\]'\"]*?)"+L+"*\\]","g"),V=new RegExp(P),W=new RegExp("^"+N+"$"),X={ID:new RegExp("^#("+M+")"),CLASS:new RegExp("^\\.("+M+")"),TAG:new RegExp("^("+M.replace("w","w*")+")"),ATTR:new RegExp("^"+O),PSEUDO:new RegExp("^"+P),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+L+"*(even|odd|(([+-]|)(\\d*)n|)"+L+"*(?:([+-]|)"+L+"*(\\d+)|))"+L+"*\\)|)","i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+L+"*((?:-\\d)?\\d*)"+L+"*\\)|)(?=[^-]|$)","i")},Y=/^(?:input|select|textarea|button)$/i,Z=/^h\d$/i,$=/^[^{]+\{\s*\[native \w/,_=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,aa=/[+~]/,ba=/'|\\/g,ca=new RegExp("\\\\([\\da-f]{1,6}"+L+"?|("+L+")|.)","ig"),da=function(a,b,c){var d="0x"+b-65536;return d!==d||c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10|55296,1023&d|56320)},ea=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(fa){H={apply:E.length?function(a,b){G.apply(a,I.call(b))}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function ga(a,b,d,e){var f,h,j,k,l,o,r,s,w,x;if((b?b.ownerDocument||b:v)!==n&&m(b),b=b||n,d=d||[],k=b.nodeType,"string"!=typeof a||!a||1!==k&&9!==k&&11!==k)return d;if(!e&&p){if(11!==k&&(f=_.exec(a)))if(j=f[1]){if(9===k){if(h=b.getElementById(j),!h||!h.parentNode)return d;if(h.id===j)return d.push(h),d}else if(b.ownerDocument&&(h=b.ownerDocument.getElementById(j))&&t(b,h)&&h.id===j)return d.push(h),d}else{if(f[2])return H.apply(d,b.getElementsByTagName(a)),d;if((j=f[3])&&c.getElementsByClassName)return H.apply(d,b.getElementsByClassName(j)),d}if(c.qsa&&(!q||!q.test(a))){if(s=r=u,w=b,x=1!==k&&a,1===k&&"object"!==b.nodeName.toLowerCase()){o=g(a),(r=b.getAttribute("id"))?s=r.replace(ba,"\\$&"):b.setAttribute("id",s),s="[id='"+s+"'] ",l=o.length;while(l--)o[l]=s+ra(o[l]);w=aa.test(a)&&pa(b.parentNode)||b,x=o.join(",")}if(x)try{return H.apply(d,w.querySelectorAll(x)),d}catch(y){}finally{r||b.removeAttribute("id")}}}return i(a.replace(R,"$1"),b,d,e)}function ha(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ia(a){return a[u]=!0,a}function ja(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function ka(a,b){var c=a.split("|"),e=a.length;while(e--)d.attrHandle[c[e]]=b}function la(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex||C)-(~a.sourceIndex||C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c||"button"===c)&&b.type===a}}function oa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function pa(a){return a&&"undefined"!=typeof a.getElementsByTagName&&a}c=ga.support={},f=ga.isXML=function(a){var b=a&&(a.ownerDocument||a).documentElement;return b?"HTML"!==b.nodeName:!1},m=ga.setDocument=function(a){var b,e,g=a?a.ownerDocument||a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=g.documentElement,e=g.defaultView,e&&e!==e.top&&(e.addEventListener?e.addEventListener("unload",ea,!1):e.attachEvent&&e.attachEvent("onunload",ea)),p=!f(g),c.attributes=ja(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=ja(function(a){return a.appendChild(g.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=$.test(g.getElementsByClassName),c.getById=ja(function(a){return o.appendChild(a).id=u,!g.getElementsByName||!g.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c&&c.parentNode?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ca,da);return function(a){return a.getAttribute("id")===b}}):(delete d.find.ID,d.filter.ID=function(a){var b=a.replace(ca,da);return function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}}),d.find.TAG=c.getElementsByTagName?function(a,b){return"undefined"!=typeof b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return p?b.getElementsByClassName(a):void 0},r=[],q=[],(c.qsa=$.test(g.querySelectorAll))&&(ja(function(a){o.appendChild(a).innerHTML="",a.querySelectorAll("[msallowcapture^='']").length&&q.push("[*^$]="+L+"*(?:''|\"\")"),a.querySelectorAll("[selected]").length||q.push("\\["+L+"*(?:value|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length||q.push("~="),a.querySelectorAll(":checked").length||q.push(":checked"),a.querySelectorAll("a#"+u+"+*").length||q.push(".#.+[+~]")}),ja(function(a){var b=g.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"*[*^$|!~]?="),a.querySelectorAll(":enabled").length||q.push(":enabled",":disabled"),a.querySelectorAll("*,:x"),q.push(",.*:")})),(c.matchesSelector=$.test(s=o.matches||o.webkitMatchesSelector||o.mozMatchesSelector||o.oMatchesSelector||o.msMatchesSelector))&&ja(function(a){c.disconnectedMatch=s.call(a,"div"),s.call(a,"[s!='']:x"),r.push("!=",P)}),q=q.length&&new RegExp(q.join("|")),r=r.length&&new RegExp(r.join("|")),b=$.test(o.compareDocumentPosition),t=b||$.test(o.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d||!(!d||1!==d.nodeType||!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument||a)===(b.ownerDocument||b)?a.compareDocumentPosition(b):1,1&d||!c.sortDetached&&b.compareDocumentPosition(a)===d?a===g||a.ownerDocument===v&&t(v,a)?-1:b===g||b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,h=[a],i=[b];if(!e||!f)return a===g?-1:b===g?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)h.unshift(c);c=b;while(c=c.parentNode)i.unshift(c);while(h[d]===i[d])d++;return d?la(h[d],i[d]):h[d]===v?-1:i[d]===v?1:0},g):n},ga.matches=function(a,b){return ga(a,null,null,b)},ga.matchesSelector=function(a,b){if((a.ownerDocument||a)!==n&&m(a),b=b.replace(U,"='$1']"),!(!c.matchesSelector||!p||r&&r.test(b)||q&&q.test(b)))try{var d=s.call(a,b);if(d||c.disconnectedMatch||a.document&&11!==a.document.nodeType)return d}catch(e){}return ga(b,n,null,[a]).length>0},ga.contains=function(a,b){return(a.ownerDocument||a)!==n&&m(a),t(a,b)},ga.attr=function(a,b){(a.ownerDocument||a)!==n&&m(a);var e=d.attrHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):void 0;return void 0!==f?f:c.attributes||!p?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},ga.error=function(a){throw new Error("Syntax error, unrecognized expression: "+a)},ga.uniqueSort=function(a){var b,d=[],e=0,f=0;if(l=!c.detectDuplicates,k=!c.sortStable&&a.slice(0),a.sort(B),l){while(b=a[f++])b===a[f]&&(e=d.push(f));while(e--)a.splice(d[e],1)}return k=null,a},e=ga.getText=function(a){var b,c="",d=0,f=a.nodeType;if(f){if(1===f||9===f||11===f){if("string"==typeof a.textContent)return a.textContent;for(a=a.firstChild;a;a=a.nextSibling)c+=e(a)}else if(3===f||4===f)return a.nodeValue}else while(b=a[d++])c+=e(b);return c},d=ga.selectors={cacheLength:50,createPseudo:ia,match:X,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(a){return a[1]=a[1].replace(ca,da),a[3]=(a[3]||a[4]||a[5]||"").replace(ca,da),"~="===a[2]&&(a[3]=" "+a[3]+" "),a.slice(0,4)},CHILD:function(a){return a[1]=a[1].toLowerCase(),"nth"===a[1].slice(0,3)?(a[3]||ga.error(a[0]),a[4]=+(a[4]?a[5]+(a[6]||1):2*("even"===a[3]||"odd"===a[3])),a[5]=+(a[7]+a[8]||"odd"===a[3])):a[3]&&ga.error(a[0]),a},PSEUDO:function(a){var b,c=!a[6]&&a[2];return X.CHILD.test(a[0])?null:(a[3]?a[2]=a[4]||a[5]||"":c&&V.test(c)&&(b=g(c,!0))&&(b=c.indexOf(")",c.length-b)-c.length)&&(a[0]=a[0].slice(0,b),a[2]=c.slice(0,b)),a.slice(0,3))}},filter:{TAG:function(a){var b=a.replace(ca,da).toLowerCase();return"*"===a?function(){return!0}:function(a){return a.nodeName&&a.nodeName.toLowerCase()===b}},CLASS:function(a){var b=y[a+" "];return b||(b=new RegExp("(^|"+L+")"+a+"("+L+"|$)"))&&y(a,function(a){return b.test("string"==typeof a.className&&a.className||"undefined"!=typeof a.getAttribute&&a.getAttribute("class")||"")})},ATTR:function(a,b,c){return function(d){var e=ga.attr(d,a);return null==e?"!="===b:b?(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)===c:"~="===b?(" "+e.replace(Q," ")+" ").indexOf(c)>-1:"|="===b?e===c||e.slice(0,c.length+1)===c+"-":!1):!0}},CHILD:function(a,b,c,d,e){var f="nth"!==a.slice(0,3),g="last"!==a.slice(-4),h="of-type"===b;return 1===d&&0===e?function(a){return!!a.parentNode}:function(b,c,i){var j,k,l,m,n,o,p=f!==g?"nextSibling":"previousSibling",q=b.parentNode,r=h&&b.nodeName.toLowerCase(),s=!i&&!h;if(q){if(f){while(p){l=b;while(l=l[p])if(h?l.nodeName.toLowerCase()===r:1===l.nodeType)return!1;o=p="only"===a&&!o&&"nextSibling"}return!0}if(o=[g?q.firstChild:q.lastChild],g&&s){k=q[u]||(q[u]={}),j=k[a]||[],n=j[0]===w&&j[1],m=j[0]===w&&j[2],l=n&&q.childNodes[n];while(l=++n&&l&&l[p]||(m=n=0)||o.pop())if(1===l.nodeType&&++m&&l===b){k[a]=[w,n,m];break}}else if(s&&(j=(b[u]||(b[u]={}))[a])&&j[0]===w)m=j[1];else while(l=++n&&l&&l[p]||(m=n=0)||o.pop())if((h?l.nodeName.toLowerCase()===r:1===l.nodeType)&&++m&&(s&&((l[u]||(l[u]={}))[a]=[w,m]),l===b))break;return m-=e,m===d||m%d===0&&m/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]||d.setFilters[a.toLowerCase()]||ga.error("unsupported pseudo: "+a);return e[u]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase())?ia(function(a,c){var d,f=e(a,b),g=f.length;while(g--)d=J(a,f[g]),a[d]=!(c[d]=f[g])}):function(a){return e(a,0,c)}):e}},pseudos:{not:ia(function(a){var b=[],c=[],d=h(a.replace(R,"$1"));return d[u]?ia(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),b[0]=null,!c.pop()}}),has:ia(function(a){return function(b){return ga(a,b).length>0}}),contains:ia(function(a){return a=a.replace(ca,da),function(b){return(b.textContent||b.innerText||e(b)).indexOf(a)>-1}}),lang:ia(function(a){return W.test(a||"")||ga.error("unsupported lang: "+a),a=a.replace(ca,da).toLowerCase(),function(b){var c;do if(c=p?b.lang:b.getAttribute("xml:lang")||b.getAttribute("lang"))return c=c.toLowerCase(),c===a||0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.hash;return c&&c.slice(1)===b.id},root:function(a){return a===o},focus:function(a){return a===n.activeElement&&(!n.hasFocus||n.hasFocus())&&!!(a.type||a.href||~a.tabIndex)},enabled:function(a){return a.disabled===!1},disabled:function(a){return a.disabled===!0},checked:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&!!a.checked||"option"===b&&!!a.selected},selected:function(a){return a.parentNode&&a.parentNode.selectedIndex,a.selected===!0},empty:function(a){for(a=a.firstChild;a;a=a.nextSibling)if(a.nodeType<6)return!1;return!0},parent:function(a){return!d.pseudos.empty(a)},header:function(a){return Z.test(a.nodeName)},input:function(a){return Y.test(a.nodeName)},button:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&"button"===a.type||"button"===b},text:function(a){var b;return"input"===a.nodeName.toLowerCase()&&"text"===a.type&&(null==(b=a.getAttribute("type"))||"text"===b.toLowerCase())},first:oa(function(){return[0]}),last:oa(function(a,b){return[b-1]}),eq:oa(function(a,b,c){return[0>c?c+b:c]}),even:oa(function(a,b){for(var c=0;b>c;c+=2)a.push(c);return a}),odd:oa(function(a,b){for(var c=1;b>c;c+=2)a.push(c);return a}),lt:oa(function(a,b,c){for(var d=0>c?c+b:c;--d>=0;)a.push(d);return a}),gt:oa(function(a,b,c){for(var d=0>c?c+b:c;++db;b++)d+=a[b].value;return d}function sa(a,b,c){var d=b.dir,e=c&&"parentNode"===d,f=x++;return b.first?function(b,c,f){while(b=b[d])if(1===b.nodeType||e)return a(b,c,f)}:function(b,c,g){var h,i,j=[w,f];if(g){while(b=b[d])if((1===b.nodeType||e)&&a(b,c,g))return!0}else while(b=b[d])if(1===b.nodeType||e){if(i=b[u]||(b[u]={}),(h=i[d])&&h[0]===w&&h[1]===f)return j[2]=h[2];if(i[d]=j,j[2]=a(b,c,g))return!0}}}function ta(a){return a.length>1?function(b,c,d){var e=a.length;while(e--)if(!a[e](b,c,d))return!1;return!0}:a[0]}function ua(a,b,c){for(var d=0,e=b.length;e>d;d++)ga(a,b[d],c);return c}function va(a,b,c,d,e){for(var f,g=[],h=0,i=a.length,j=null!=b;i>h;h++)(f=a[h])&&(!c||c(f,d,e))&&(g.push(f),j&&b.push(h));return g}function wa(a,b,c,d,e,f){return d&&!d[u]&&(d=wa(d)),e&&!e[u]&&(e=wa(e,f)),ia(function(f,g,h,i){var j,k,l,m=[],n=[],o=g.length,p=f||ua(b||"*",h.nodeType?[h]:h,[]),q=!a||!f&&b?p:va(p,m,a,h,i),r=c?e||(f?a:o||d)?[]:g:q;if(c&&c(q,r,h,i),d){j=va(r,n),d(j,[],h,i),k=j.length;while(k--)(l=j[k])&&(r[n[k]]=!(q[n[k]]=l))}if(f){if(e||a){if(e){j=[],k=r.length;while(k--)(l=r[k])&&j.push(q[k]=l);e(null,r=[],j,i)}k=r.length;while(k--)(l=r[k])&&(j=e?J(f,l):m[k])>-1&&(f[j]=!(g[j]=l))}}else r=va(r===g?r.splice(o,r.length):r),e?e(null,g,r,i):H.apply(g,r)})}function xa(a){for(var b,c,e,f=a.length,g=d.relative[a[0].type],h=g||d.relative[" "],i=g?1:0,k=sa(function(a){return a===b},h,!0),l=sa(function(a){return J(b,a)>-1},h,!0),m=[function(a,c,d){var e=!g&&(d||c!==j)||((b=c).nodeType?k(a,c,d):l(a,c,d));return b=null,e}];f>i;i++)if(c=d.relative[a[i].type])m=[sa(ta(m),c)];else{if(c=d.filter[a[i].type].apply(null,a[i].matches),c[u]){for(e=++i;f>e;e++)if(d.relative[a[e].type])break;return wa(i>1&&ta(m),i>1&&ra(a.slice(0,i-1).concat({value:" "===a[i-2].type?"*":""})).replace(R,"$1"),c,e>i&&xa(a.slice(i,e)),f>e&&xa(a=a.slice(e)),f>e&&ra(a))}m.push(c)}return ta(m)}function ya(a,b){var c=b.length>0,e=a.length>0,f=function(f,g,h,i,k){var l,m,o,p=0,q="0",r=f&&[],s=[],t=j,u=f||e&&d.find.TAG("*",k),v=w+=null==t?1:Math.random()||.1,x=u.length;for(k&&(j=g!==n&&g);q!==x&&null!=(l=u[q]);q++){if(e&&l){m=0;while(o=a[m++])if(o(l,g,h)){i.push(l);break}k&&(w=v)}c&&((l=!o&&l)&&p--,f&&r.push(l))}if(p+=q,c&&q!==p){m=0;while(o=b[m++])o(r,s,g,h);if(f){if(p>0)while(q--)r[q]||s[q]||(s[q]=F.call(i));s=va(s)}H.apply(i,s),k&&!f&&s.length>0&&p+b.length>1&&ga.uniqueSort(i)}return k&&(w=v,j=t),r};return c?ia(f):f}return h=ga.compile=function(a,b){var c,d=[],e=[],f=A[a+" "];if(!f){b||(b=g(a)),c=b.length;while(c--)f=xa(b[c]),f[u]?d.push(f):e.push(f);f=A(a,ya(e,d)),f.selector=a}return f},i=ga.select=function(a,b,e,f){var i,j,k,l,m,n="function"==typeof a&&a,o=!f&&g(a=n.selector||a);if(e=e||[],1===o.length){if(j=o[0]=o[0].slice(0),j.length>2&&"ID"===(k=j[0]).type&&c.getById&&9===b.nodeType&&p&&d.relative[j[1].type]){if(b=(d.find.ID(k.matches[0].replace(ca,da),b)||[])[0],!b)return e;n&&(b=b.parentNode),a=a.slice(j.shift().value.length)}i=X.needsContext.test(a)?0:j.length;while(i--){if(k=j[i],d.relative[l=k.type])break;if((m=d.find[l])&&(f=m(k.matches[0].replace(ca,da),aa.test(j[0].type)&&pa(b.parentNode)||b))){if(j.splice(i,1),a=f.length&&ra(j),!a)return H.apply(e,f),e;break}}}return(n||h(a,o))(f,b,!p,e,aa.test(a)&&pa(b.parentNode)||b),e},c.sortStable=u.split("").sort(B).join("")===u,c.detectDuplicates=!!l,m(),c.sortDetached=ja(function(a){return 1&a.compareDocumentPosition(n.createElement("div"))}),ja(function(a){return a.innerHTML="","#"===a.firstChild.getAttribute("href")})||ka("type|href|height|width",function(a,b,c){return c?void 0:a.getAttribute(b,"type"===b.toLowerCase()?1:2)}),c.attributes&&ja(function(a){return a.innerHTML="",a.firstChild.setAttribute("value",""),""===a.firstChild.getAttribute("value")})||ka("value",function(a,b,c){return c||"input"!==a.nodeName.toLowerCase()?void 0:a.defaultValue}),ja(function(a){return null==a.getAttribute("disabled")})||ka(K,function(a,b,c){var d;return c?void 0:a[b]===!0?b.toLowerCase():(d=a.getAttributeNode(b))&&d.specified?d.value:null}),ga}(a);n.find=t,n.expr=t.selectors,n.expr[":"]=n.expr.pseudos,n.unique=t.uniqueSort,n.text=t.getText,n.isXMLDoc=t.isXML,n.contains=t.contains;var u=n.expr.match.needsContext,v=/^<(\w+)\s*\/?>(?:<\/\1>|)$/,w=/^.[^:#\[\.,]*$/;function x(a,b,c){if(n.isFunction(b))return n.grep(a,function(a,d){return!!b.call(a,d,a)!==c});if(b.nodeType)return n.grep(a,function(a){return a===b!==c});if("string"==typeof b){if(w.test(b))return n.filter(b,a,c);b=n.filter(b,a)}return n.grep(a,function(a){return g.call(b,a)>=0!==c})}n.filter=function(a,b,c){var d=b[0];return c&&(a=":not("+a+")"),1===b.length&&1===d.nodeType?n.find.matchesSelector(d,a)?[d]:[]:n.find.matches(a,n.grep(b,function(a){return 1===a.nodeType}))},n.fn.extend({find:function(a){var b,c=this.length,d=[],e=this;if("string"!=typeof a)return this.pushStack(n(a).filter(function(){for(b=0;c>b;b++)if(n.contains(e[b],this))return!0}));for(b=0;c>b;b++)n.find(a,e[b],d);return d=this.pushStack(c>1?n.unique(d):d),d.selector=this.selector?this.selector+" "+a:a,d},filter:function(a){return this.pushStack(x(this,a||[],!1))},not:function(a){return this.pushStack(x(this,a||[],!0))},is:function(a){return!!x(this,"string"==typeof a&&u.test(a)?n(a):a||[],!1).length}});var y,z=/^(?:\s*(<[\w\W]+>)[^>]*|#([\w-]*))$/,A=n.fn.init=function(a,b){var c,d;if(!a)return this;if("string"==typeof a){if(c="<"===a[0]&&">"===a[a.length-1]&&a.length>=3?[null,a,null]:z.exec(a),!c||!c[1]&&b)return!b||b.jquery?(b||y).find(a):this.constructor(b).find(a);if(c[1]){if(b=b instanceof n?b[0]:b,n.merge(this,n.parseHTML(c[1],b&&b.nodeType?b.ownerDocument||b:l,!0)),v.test(c[1])&&n.isPlainObject(b))for(c in b)n.isFunction(this[c])?this[c](b[c]):this.attr(c,b[c]);return this}return d=l.getElementById(c[2]),d&&d.parentNode&&(this.length=1,this[0]=d),this.context=l,this.selector=a,this}return a.nodeType?(this.context=this[0]=a,this.length=1,this):n.isFunction(a)?"undefined"!=typeof y.ready?y.ready(a):a(n):(void 0!==a.selector&&(this.selector=a.selector,this.context=a.context),n.makeArray(a,this))};A.prototype=n.fn,y=n(l);var B=/^(?:parents|prev(?:Until|All))/,C={children:!0,contents:!0,next:!0,prev:!0};n.extend({dir:function(a,b,c){var d=[],e=void 0!==c;while((a=a[b])&&9!==a.nodeType)if(1===a.nodeType){if(e&&n(a).is(c))break;d.push(a)}return d},sibling:function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c}}),n.fn.extend({has:function(a){var b=n(a,this),c=b.length;return this.filter(function(){for(var a=0;c>a;a++)if(n.contains(this,b[a]))return!0})},closest:function(a,b){for(var c,d=0,e=this.length,f=[],g=u.test(a)||"string"!=typeof a?n(a,b||this.context):0;e>d;d++)for(c=this[d];c&&c!==b;c=c.parentNode)if(c.nodeType<11&&(g?g.index(c)>-1:1===c.nodeType&&n.find.matchesSelector(c,a))){f.push(c);break}return this.pushStack(f.length>1?n.unique(f):f)},index:function(a){return a?"string"==typeof a?g.call(n(a),this[0]):g.call(this,a.jquery?a[0]:a):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(a,b){return this.pushStack(n.unique(n.merge(this.get(),n(a,b))))},addBack:function(a){return this.add(null==a?this.prevObject:this.prevObject.filter(a))}});function D(a,b){while((a=a[b])&&1!==a.nodeType);return a}n.each({parent:function(a){var b=a.parentNode;return b&&11!==b.nodeType?b:null},parents:function(a){return n.dir(a,"parentNode")},parentsUntil:function(a,b,c){return n.dir(a,"parentNode",c)},next:function(a){return D(a,"nextSibling")},prev:function(a){return D(a,"previousSibling")},nextAll:function(a){return n.dir(a,"nextSibling")},prevAll:function(a){return n.dir(a,"previousSibling")},nextUntil:function(a,b,c){return n.dir(a,"nextSibling",c)},prevUntil:function(a,b,c){return n.dir(a,"previousSibling",c)},siblings:function(a){return n.sibling((a.parentNode||{}).firstChild,a)},children:function(a){return n.sibling(a.firstChild)},contents:function(a){return a.contentDocument||n.merge([],a.childNodes)}},function(a,b){n.fn[a]=function(c,d){var e=n.map(this,b,c);return"Until"!==a.slice(-5)&&(d=c),d&&"string"==typeof d&&(e=n.filter(d,e)),this.length>1&&(C[a]||n.unique(e),B.test(a)&&e.reverse()),this.pushStack(e)}});var E=/\S+/g,F={};function G(a){var b=F[a]={};return n.each(a.match(E)||[],function(a,c){b[c]=!0}),b}n.Callbacks=function(a){a="string"==typeof a?F[a]||G(a):n.extend({},a);var b,c,d,e,f,g,h=[],i=!a.once&&[],j=function(l){for(b=a.memory&&l,c=!0,g=e||0,e=0,f=h.length,d=!0;h&&f>g;g++)if(h[g].apply(l[0],l[1])===!1&&a.stopOnFalse){b=!1;break}d=!1,h&&(i?i.length&&j(i.shift()):b?h=[]:k.disable())},k={add:function(){if(h){var c=h.length;!function g(b){n.each(b,function(b,c){var d=n.type(c);"function"===d?a.unique&&k.has(c)||h.push(c):c&&c.length&&"string"!==d&&g(c)})}(arguments),d?f=h.length:b&&(e=c,j(b))}return this},remove:function(){return h&&n.each(arguments,function(a,b){var c;while((c=n.inArray(b,h,c))>-1)h.splice(c,1),d&&(f>=c&&f--,g>=c&&g--)}),this},has:function(a){return a?n.inArray(a,h)>-1:!(!h||!h.length)},empty:function(){return h=[],f=0,this},disable:function(){return h=i=b=void 0,this},disabled:function(){return!h},lock:function(){return i=void 0,b||k.disable(),this},locked:function(){return!i},fireWith:function(a,b){return!h||c&&!i||(b=b||[],b=[a,b.slice?b.slice():b],d?i.push(b):j(b)),this},fire:function(){return k.fireWith(this,arguments),this},fired:function(){return!!c}};return k},n.extend({Deferred:function(a){var b=[["resolve","done",n.Callbacks("once memory"),"resolved"],["reject","fail",n.Callbacks("once memory"),"rejected"],["notify","progress",n.Callbacks("memory")]],c="pending",d={state:function(){return c},always:function(){return e.done(arguments).fail(arguments),this},then:function(){var a=arguments;return n.Deferred(function(c){n.each(b,function(b,f){var g=n.isFunction(a[b])&&a[b];e[f[1]](function(){var a=g&&g.apply(this,arguments);a&&n.isFunction(a.promise)?a.promise().done(c.resolve).fail(c.reject).progress(c.notify):c[f[0]+"With"](this===d?c.promise():this,g?[a]:arguments)})}),a=null}).promise()},promise:function(a){return null!=a?n.extend(a,d):d}},e={};return d.pipe=d.then,n.each(b,function(a,f){var g=f[2],h=f[3];d[f[1]]=g.add,h&&g.add(function(){c=h},b[1^a][2].disable,b[2][2].lock),e[f[0]]=function(){return e[f[0]+"With"](this===e?d:this,arguments),this},e[f[0]+"With"]=g.fireWith}),d.promise(e),a&&a.call(e,e),e},when:function(a){var b=0,c=d.call(arguments),e=c.length,f=1!==e||a&&n.isFunction(a.promise)?e:0,g=1===f?a:n.Deferred(),h=function(a,b,c){return function(e){b[a]=this,c[a]=arguments.length>1?d.call(arguments):e,c===i?g.notifyWith(b,c):--f||g.resolveWith(b,c)}},i,j,k;if(e>1)for(i=new Array(e),j=new Array(e),k=new Array(e);e>b;b++)c[b]&&n.isFunction(c[b].promise)?c[b].promise().done(h(b,k,c)).fail(g.reject).progress(h(b,j,i)):--f;return f||g.resolveWith(k,c),g.promise()}});var H;n.fn.ready=function(a){return n.ready.promise().done(a),this},n.extend({isReady:!1,readyWait:1,holdReady:function(a){a?n.readyWait++:n.ready(!0)},ready:function(a){(a===!0?--n.readyWait:n.isReady)||(n.isReady=!0,a!==!0&&--n.readyWait>0||(H.resolveWith(l,[n]),n.fn.triggerHandler&&(n(l).triggerHandler("ready"),n(l).off("ready"))))}});function I(){l.removeEventListener("DOMContentLoaded",I,!1),a.removeEventListener("load",I,!1),n.ready()}n.ready.promise=function(b){return H||(H=n.Deferred(),"complete"===l.readyState?setTimeout(n.ready):(l.addEventListener("DOMContentLoaded",I,!1),a.addEventListener("load",I,!1))),H.promise(b)},n.ready.promise();var J=n.access=function(a,b,c,d,e,f,g){var h=0,i=a.length,j=null==c;if("object"===n.type(c)){e=!0;for(h in c)n.access(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,n.isFunction(d)||(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(n(a),c)})),b))for(;i>h;h++)b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return e?a:j?b.call(a):i?b(a[0],c):f};n.acceptData=function(a){return 1===a.nodeType||9===a.nodeType||!+a.nodeType};function K(){Object.defineProperty(this.cache={},0,{get:function(){return{}}}),this.expando=n.expando+K.uid++}K.uid=1,K.accepts=n.acceptData,K.prototype={key:function(a){if(!K.accepts(a))return 0;var b={},c=a[this.expando];if(!c){c=K.uid++;try{b[this.expando]={value:c},Object.defineProperties(a,b)}catch(d){b[this.expando]=c,n.extend(a,b)}}return this.cache[c]||(this.cache[c]={}),c},set:function(a,b,c){var d,e=this.key(a),f=this.cache[e];if("string"==typeof b)f[b]=c;else if(n.isEmptyObject(f))n.extend(this.cache[e],b);else for(d in b)f[d]=b[d];return f},get:function(a,b){var c=this.cache[this.key(a)];return void 0===b?c:c[b]},access:function(a,b,c){var d;return void 0===b||b&&"string"==typeof b&&void 0===c?(d=this.get(a,b),void 0!==d?d:this.get(a,n.camelCase(b))):(this.set(a,b,c),void 0!==c?c:b)},remove:function(a,b){var c,d,e,f=this.key(a),g=this.cache[f];if(void 0===b)this.cache[f]={};else{n.isArray(b)?d=b.concat(b.map(n.camelCase)):(e=n.camelCase(b),b in g?d=[b,e]:(d=e,d=d in g?[d]:d.match(E)||[])),c=d.length;while(c--)delete g[d[c]]}},hasData:function(a){return!n.isEmptyObject(this.cache[a[this.expando]]||{})},discard:function(a){a[this.expando]&&delete this.cache[a[this.expando]]}};var L=new K,M=new K,N=/^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,O=/([A-Z])/g;function P(a,b,c){var d;if(void 0===c&&1===a.nodeType)if(d="data-"+b.replace(O,"-$1").toLowerCase(),c=a.getAttribute(d),"string"==typeof c){try{c="true"===c?!0:"false"===c?!1:"null"===c?null:+c+""===c?+c:N.test(c)?n.parseJSON(c):c}catch(e){}M.set(a,b,c)}else c=void 0;return c}n.extend({hasData:function(a){return M.hasData(a)||L.hasData(a)},data:function(a,b,c){ 3 | return M.access(a,b,c)},removeData:function(a,b){M.remove(a,b)},_data:function(a,b,c){return L.access(a,b,c)},_removeData:function(a,b){L.remove(a,b)}}),n.fn.extend({data:function(a,b){var c,d,e,f=this[0],g=f&&f.attributes;if(void 0===a){if(this.length&&(e=M.get(f),1===f.nodeType&&!L.get(f,"hasDataAttrs"))){c=g.length;while(c--)g[c]&&(d=g[c].name,0===d.indexOf("data-")&&(d=n.camelCase(d.slice(5)),P(f,d,e[d])));L.set(f,"hasDataAttrs",!0)}return e}return"object"==typeof a?this.each(function(){M.set(this,a)}):J(this,function(b){var c,d=n.camelCase(a);if(f&&void 0===b){if(c=M.get(f,a),void 0!==c)return c;if(c=M.get(f,d),void 0!==c)return c;if(c=P(f,d,void 0),void 0!==c)return c}else this.each(function(){var c=M.get(this,d);M.set(this,d,b),-1!==a.indexOf("-")&&void 0!==c&&M.set(this,a,b)})},null,b,arguments.length>1,null,!0)},removeData:function(a){return this.each(function(){M.remove(this,a)})}}),n.extend({queue:function(a,b,c){var d;return a?(b=(b||"fx")+"queue",d=L.get(a,b),c&&(!d||n.isArray(c)?d=L.access(a,b,n.makeArray(c)):d.push(c)),d||[]):void 0},dequeue:function(a,b){b=b||"fx";var c=n.queue(a,b),d=c.length,e=c.shift(),f=n._queueHooks(a,b),g=function(){n.dequeue(a,b)};"inprogress"===e&&(e=c.shift(),d--),e&&("fx"===b&&c.unshift("inprogress"),delete f.stop,e.call(a,g,f)),!d&&f&&f.empty.fire()},_queueHooks:function(a,b){var c=b+"queueHooks";return L.get(a,c)||L.access(a,c,{empty:n.Callbacks("once memory").add(function(){L.remove(a,[b+"queue",c])})})}}),n.fn.extend({queue:function(a,b){var c=2;return"string"!=typeof a&&(b=a,a="fx",c--),arguments.lengthx",k.noCloneChecked=!!b.cloneNode(!0).lastChild.defaultValue}();var U="undefined";k.focusinBubbles="onfocusin"in a;var V=/^key/,W=/^(?:mouse|pointer|contextmenu)|click/,X=/^(?:focusinfocus|focusoutblur)$/,Y=/^([^.]*)(?:\.(.+)|)$/;function Z(){return!0}function $(){return!1}function _(){try{return l.activeElement}catch(a){}}n.event={global:{},add:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=L.get(a);if(r){c.handler&&(f=c,c=f.handler,e=f.selector),c.guid||(c.guid=n.guid++),(i=r.events)||(i=r.events={}),(g=r.handle)||(g=r.handle=function(b){return typeof n!==U&&n.event.triggered!==b.type?n.event.dispatch.apply(a,arguments):void 0}),b=(b||"").match(E)||[""],j=b.length;while(j--)h=Y.exec(b[j])||[],o=q=h[1],p=(h[2]||"").split(".").sort(),o&&(l=n.event.special[o]||{},o=(e?l.delegateType:l.bindType)||o,l=n.event.special[o]||{},k=n.extend({type:o,origType:q,data:d,handler:c,guid:c.guid,selector:e,needsContext:e&&n.expr.match.needsContext.test(e),namespace:p.join(".")},f),(m=i[o])||(m=i[o]=[],m.delegateCount=0,l.setup&&l.setup.call(a,d,p,g)!==!1||a.addEventListener&&a.addEventListener(o,g,!1)),l.add&&(l.add.call(a,k),k.handler.guid||(k.handler.guid=c.guid)),e?m.splice(m.delegateCount++,0,k):m.push(k),n.event.global[o]=!0)}},remove:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=L.hasData(a)&&L.get(a);if(r&&(i=r.events)){b=(b||"").match(E)||[""],j=b.length;while(j--)if(h=Y.exec(b[j])||[],o=q=h[1],p=(h[2]||"").split(".").sort(),o){l=n.event.special[o]||{},o=(d?l.delegateType:l.bindType)||o,m=i[o]||[],h=h[2]&&new RegExp("(^|\\.)"+p.join("\\.(?:.*\\.|)")+"(\\.|$)"),g=f=m.length;while(f--)k=m[f],!e&&q!==k.origType||c&&c.guid!==k.guid||h&&!h.test(k.namespace)||d&&d!==k.selector&&("**"!==d||!k.selector)||(m.splice(f,1),k.selector&&m.delegateCount--,l.remove&&l.remove.call(a,k));g&&!m.length&&(l.teardown&&l.teardown.call(a,p,r.handle)!==!1||n.removeEvent(a,o,r.handle),delete i[o])}else for(o in i)n.event.remove(a,o+b[j],c,d,!0);n.isEmptyObject(i)&&(delete r.handle,L.remove(a,"events"))}},trigger:function(b,c,d,e){var f,g,h,i,k,m,o,p=[d||l],q=j.call(b,"type")?b.type:b,r=j.call(b,"namespace")?b.namespace.split("."):[];if(g=h=d=d||l,3!==d.nodeType&&8!==d.nodeType&&!X.test(q+n.event.triggered)&&(q.indexOf(".")>=0&&(r=q.split("."),q=r.shift(),r.sort()),k=q.indexOf(":")<0&&"on"+q,b=b[n.expando]?b:new n.Event(q,"object"==typeof b&&b),b.isTrigger=e?2:3,b.namespace=r.join("."),b.namespace_re=b.namespace?new RegExp("(^|\\.)"+r.join("\\.(?:.*\\.|)")+"(\\.|$)"):null,b.result=void 0,b.target||(b.target=d),c=null==c?[b]:n.makeArray(c,[b]),o=n.event.special[q]||{},e||!o.trigger||o.trigger.apply(d,c)!==!1)){if(!e&&!o.noBubble&&!n.isWindow(d)){for(i=o.delegateType||q,X.test(i+q)||(g=g.parentNode);g;g=g.parentNode)p.push(g),h=g;h===(d.ownerDocument||l)&&p.push(h.defaultView||h.parentWindow||a)}f=0;while((g=p[f++])&&!b.isPropagationStopped())b.type=f>1?i:o.bindType||q,m=(L.get(g,"events")||{})[b.type]&&L.get(g,"handle"),m&&m.apply(g,c),m=k&&g[k],m&&m.apply&&n.acceptData(g)&&(b.result=m.apply(g,c),b.result===!1&&b.preventDefault());return b.type=q,e||b.isDefaultPrevented()||o._default&&o._default.apply(p.pop(),c)!==!1||!n.acceptData(d)||k&&n.isFunction(d[q])&&!n.isWindow(d)&&(h=d[k],h&&(d[k]=null),n.event.triggered=q,d[q](),n.event.triggered=void 0,h&&(d[k]=h)),b.result}},dispatch:function(a){a=n.event.fix(a);var b,c,e,f,g,h=[],i=d.call(arguments),j=(L.get(this,"events")||{})[a.type]||[],k=n.event.special[a.type]||{};if(i[0]=a,a.delegateTarget=this,!k.preDispatch||k.preDispatch.call(this,a)!==!1){h=n.event.handlers.call(this,a,j),b=0;while((f=h[b++])&&!a.isPropagationStopped()){a.currentTarget=f.elem,c=0;while((g=f.handlers[c++])&&!a.isImmediatePropagationStopped())(!a.namespace_re||a.namespace_re.test(g.namespace))&&(a.handleObj=g,a.data=g.data,e=((n.event.special[g.origType]||{}).handle||g.handler).apply(f.elem,i),void 0!==e&&(a.result=e)===!1&&(a.preventDefault(),a.stopPropagation()))}return k.postDispatch&&k.postDispatch.call(this,a),a.result}},handlers:function(a,b){var c,d,e,f,g=[],h=b.delegateCount,i=a.target;if(h&&i.nodeType&&(!a.button||"click"!==a.type))for(;i!==this;i=i.parentNode||this)if(i.disabled!==!0||"click"!==a.type){for(d=[],c=0;h>c;c++)f=b[c],e=f.selector+" ",void 0===d[e]&&(d[e]=f.needsContext?n(e,this).index(i)>=0:n.find(e,this,null,[i]).length),d[e]&&d.push(f);d.length&&g.push({elem:i,handlers:d})}return h]*)\/>/gi,ba=/<([\w:]+)/,ca=/<|&#?\w+;/,da=/<(?:script|style|link)/i,ea=/checked\s*(?:[^=]|=\s*.checked.)/i,fa=/^$|\/(?:java|ecma)script/i,ga=/^true\/(.*)/,ha=/^\s*\s*$/g,ia={option:[1,""],thead:[1,"","
"],col:[2,"","
"],tr:[2,"","
"],td:[3,"","
"],_default:[0,"",""]};ia.optgroup=ia.option,ia.tbody=ia.tfoot=ia.colgroup=ia.caption=ia.thead,ia.th=ia.td;function ja(a,b){return n.nodeName(a,"table")&&n.nodeName(11!==b.nodeType?b:b.firstChild,"tr")?a.getElementsByTagName("tbody")[0]||a.appendChild(a.ownerDocument.createElement("tbody")):a}function ka(a){return a.type=(null!==a.getAttribute("type"))+"/"+a.type,a}function la(a){var b=ga.exec(a.type);return b?a.type=b[1]:a.removeAttribute("type"),a}function ma(a,b){for(var c=0,d=a.length;d>c;c++)L.set(a[c],"globalEval",!b||L.get(b[c],"globalEval"))}function na(a,b){var c,d,e,f,g,h,i,j;if(1===b.nodeType){if(L.hasData(a)&&(f=L.access(a),g=L.set(b,f),j=f.events)){delete g.handle,g.events={};for(e in j)for(c=0,d=j[e].length;d>c;c++)n.event.add(b,e,j[e][c])}M.hasData(a)&&(h=M.access(a),i=n.extend({},h),M.set(b,i))}}function oa(a,b){var c=a.getElementsByTagName?a.getElementsByTagName(b||"*"):a.querySelectorAll?a.querySelectorAll(b||"*"):[];return void 0===b||b&&n.nodeName(a,b)?n.merge([a],c):c}function pa(a,b){var c=b.nodeName.toLowerCase();"input"===c&&T.test(a.type)?b.checked=a.checked:("input"===c||"textarea"===c)&&(b.defaultValue=a.defaultValue)}n.extend({clone:function(a,b,c){var d,e,f,g,h=a.cloneNode(!0),i=n.contains(a.ownerDocument,a);if(!(k.noCloneChecked||1!==a.nodeType&&11!==a.nodeType||n.isXMLDoc(a)))for(g=oa(h),f=oa(a),d=0,e=f.length;e>d;d++)pa(f[d],g[d]);if(b)if(c)for(f=f||oa(a),g=g||oa(h),d=0,e=f.length;e>d;d++)na(f[d],g[d]);else na(a,h);return g=oa(h,"script"),g.length>0&&ma(g,!i&&oa(a,"script")),h},buildFragment:function(a,b,c,d){for(var e,f,g,h,i,j,k=b.createDocumentFragment(),l=[],m=0,o=a.length;o>m;m++)if(e=a[m],e||0===e)if("object"===n.type(e))n.merge(l,e.nodeType?[e]:e);else if(ca.test(e)){f=f||k.appendChild(b.createElement("div")),g=(ba.exec(e)||["",""])[1].toLowerCase(),h=ia[g]||ia._default,f.innerHTML=h[1]+e.replace(aa,"<$1>")+h[2],j=h[0];while(j--)f=f.lastChild;n.merge(l,f.childNodes),f=k.firstChild,f.textContent=""}else l.push(b.createTextNode(e));k.textContent="",m=0;while(e=l[m++])if((!d||-1===n.inArray(e,d))&&(i=n.contains(e.ownerDocument,e),f=oa(k.appendChild(e),"script"),i&&ma(f),c)){j=0;while(e=f[j++])fa.test(e.type||"")&&c.push(e)}return k},cleanData:function(a){for(var b,c,d,e,f=n.event.special,g=0;void 0!==(c=a[g]);g++){if(n.acceptData(c)&&(e=c[L.expando],e&&(b=L.cache[e]))){if(b.events)for(d in b.events)f[d]?n.event.remove(c,d):n.removeEvent(c,d,b.handle);L.cache[e]&&delete L.cache[e]}delete M.cache[c[M.expando]]}}}),n.fn.extend({text:function(a){return J(this,function(a){return void 0===a?n.text(this):this.empty().each(function(){(1===this.nodeType||11===this.nodeType||9===this.nodeType)&&(this.textContent=a)})},null,a,arguments.length)},append:function(){return this.domManip(arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=ja(this,a);b.appendChild(a)}})},prepend:function(){return this.domManip(arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=ja(this,a);b.insertBefore(a,b.firstChild)}})},before:function(){return this.domManip(arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this)})},after:function(){return this.domManip(arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this.nextSibling)})},remove:function(a,b){for(var c,d=a?n.filter(a,this):this,e=0;null!=(c=d[e]);e++)b||1!==c.nodeType||n.cleanData(oa(c)),c.parentNode&&(b&&n.contains(c.ownerDocument,c)&&ma(oa(c,"script")),c.parentNode.removeChild(c));return this},empty:function(){for(var a,b=0;null!=(a=this[b]);b++)1===a.nodeType&&(n.cleanData(oa(a,!1)),a.textContent="");return this},clone:function(a,b){return a=null==a?!1:a,b=null==b?a:b,this.map(function(){return n.clone(this,a,b)})},html:function(a){return J(this,function(a){var b=this[0]||{},c=0,d=this.length;if(void 0===a&&1===b.nodeType)return b.innerHTML;if("string"==typeof a&&!da.test(a)&&!ia[(ba.exec(a)||["",""])[1].toLowerCase()]){a=a.replace(aa,"<$1>");try{for(;d>c;c++)b=this[c]||{},1===b.nodeType&&(n.cleanData(oa(b,!1)),b.innerHTML=a);b=0}catch(e){}}b&&this.empty().append(a)},null,a,arguments.length)},replaceWith:function(){var a=arguments[0];return this.domManip(arguments,function(b){a=this.parentNode,n.cleanData(oa(this)),a&&a.replaceChild(b,this)}),a&&(a.length||a.nodeType)?this:this.remove()},detach:function(a){return this.remove(a,!0)},domManip:function(a,b){a=e.apply([],a);var c,d,f,g,h,i,j=0,l=this.length,m=this,o=l-1,p=a[0],q=n.isFunction(p);if(q||l>1&&"string"==typeof p&&!k.checkClone&&ea.test(p))return this.each(function(c){var d=m.eq(c);q&&(a[0]=p.call(this,c,d.html())),d.domManip(a,b)});if(l&&(c=n.buildFragment(a,this[0].ownerDocument,!1,this),d=c.firstChild,1===c.childNodes.length&&(c=d),d)){for(f=n.map(oa(c,"script"),ka),g=f.length;l>j;j++)h=c,j!==o&&(h=n.clone(h,!0,!0),g&&n.merge(f,oa(h,"script"))),b.call(this[j],h,j);if(g)for(i=f[f.length-1].ownerDocument,n.map(f,la),j=0;g>j;j++)h=f[j],fa.test(h.type||"")&&!L.access(h,"globalEval")&&n.contains(i,h)&&(h.src?n._evalUrl&&n._evalUrl(h.src):n.globalEval(h.textContent.replace(ha,"")))}return this}}),n.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){n.fn[a]=function(a){for(var c,d=[],e=n(a),g=e.length-1,h=0;g>=h;h++)c=h===g?this:this.clone(!0),n(e[h])[b](c),f.apply(d,c.get());return this.pushStack(d)}});var qa,ra={};function sa(b,c){var d,e=n(c.createElement(b)).appendTo(c.body),f=a.getDefaultComputedStyle&&(d=a.getDefaultComputedStyle(e[0]))?d.display:n.css(e[0],"display");return e.detach(),f}function ta(a){var b=l,c=ra[a];return c||(c=sa(a,b),"none"!==c&&c||(qa=(qa||n("