coreruleset · fzipi · Sep 19, 2022 · Jun 30, 2022 · Jul 16, 2022
diff --git a/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf b/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf
@@ -96,7 +96,7 @@ SecRule TX:DETECTION_PARANOIA_LEVEL "@lt 1" "id:932012,phase:2,pass,nolog,skipAf
 #  ├── 932105 (2nd part of base rule, PL1)
 #  ├── 932106 (stricter sibling of base rule, PL3
 #
-SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx (?:[;\n\r`]|\$(?:\(?\(|{)|(?:\|)?\||\(\s*\)|[<>]\(|&?&|\{)\s*(?:(?:\w+=(?:[^\s]*|\$.*|\$.*|<.*|>.*|\'.*\'|\".*\")\s+|(?:\s*\(|!)\s*|\{|\$))*\s*(?:['\"])*(?:[\?\*\[\]\(\)\-\|+\w'\"\./\x5c]+/)?[\x5c'\"]*(?:l[\x5c'\"]*(?:w[\x5c'\"]*p[\x5c'\"]*-[\x5c'\"]*(?:d[\x5c'\"]*(?:o[\x5c'\"]*w[\x5c'\"]*n[\x5c'\"]*l[\x5c'\"]*o[\x5c'\"]*a[\x5c'\"]*d|u[\x5c'\"]*m[\x5c'\"]*p)|r[\x5c'\"]*e[\x5c'\"]*q[\x5c'\"]*u[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*t|m[\x5c'\"]*i[\x5c'\"]*r[\x5c'\"]*r[\x5c'\"]*o[\x5c'\"]*r)|s(?:[\x5c'\"]*(?:b[\x5c'\"]*_[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*l[\x5c'\"]*e[\x5c'\"]*a[\x5c'\"]*s[\x5c'\"]*e|c[\x5c'\"]*p[\x5c'\"]*u|m[\x5c'\"]*o[\x5c'\"]*d|p[\x5c'\"]*c[\x5c'\"]*i|u[\x5c'\"]*s[\x5c'\"]*b|-[\x5c'\"]*F|h[\x5c'\"]*w|o[\x5c'\"]*f))?|z[\x5c'\"]*(?:(?:[ef][\x5c'\"]*)?g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p|c[\x5c'\"]*(?:a[\x5c'\"]*t|m[\x5c'\"]*p)|m[\x5c'\"]*(?:o[\x5c'\"]*r[\x5c'\"]*e|a)|d[\x5c'\"]*i[\x5c'\"]*f[\x5c'\"]*f|l[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*s)|o[\x5c'\"]*(?:g[\x5c'\"]*(?:(?:n[\x5c'\"]*a[\x5c'\"]*m|s[\x5c'\"]*a[\x5c'\"]*v)[\x5c'\"]*e|i[\x5c'\"]*n[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*l)|c[\x5c'\"]*a[\x5c'\"]*(?:t[\x5c'\"]*e|l)[\x5c'\"]*(?:\s|<|>).*)|e[\x5c'\"]*s[\x5c'\"]*s[\x5c'\"]*(?:(?:f[\x5c'\"]*i[\x5c'\"]*l|p[\x5c'\"]*i[\x5c'\"]*p)[\x5c'\"]*e|e[\x5c'\"]*c[\x5c'\"]*h[\x5c'\"]*o|(?:\s|<|>).*)|a[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*(?:l[\x5c'\"]*o[\x5c'\"]*g(?:[\x5c'\"]*i[\x5c'\"]*n)?|c[\x5c'\"]*o[\x5c'\"]*m[\x5c'\"]*m|(?:\s|<|>).*)|d[\x5c'\"]*(?:c[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*g|d[\x5c'\"]*(?:\s|<|>).*)|(?:[np]|i[\x5c'\"]*n[\x5c'\"]*k[\x5c'\"]*s|y[\x5c'\"]*n[\x5c'\"]*x)[\x5c'\"]*(?:\s|<|>).*|u[\x5c'\"]*a[\x5c'\"]*(?:5[\x5c'\"]*\.[\x5c'\"]*[1234]|(?:\s|<|>).*)|f[\x5c'\"]*t[\x5c'\"]*p(?:[\x5c'\"]*g[\x5c'\"]*e[\x5c'\"]*t)?|t[\x5c'\"]*r[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*e)|c[\x5c'\"]*(?:o[\x5c'\"]*(?:m[\x5c'\"]*(?:p[\x5c'\"]*(?:r[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*s[\x5c'\"]*(?:\s|<|>).*|o[\x5c'\"]*s[\x5c'\"]*e[\x5c'\"]*r)|m[\x5c'\"]*a[\x5c'\"]*n[\x5c'\"]*d[\x5c'\"]*(?:\s|<|>).*)|p[\x5c'\"]*r[\x5c'\"]*o[\x5c'\"]*c)|h[\x5c'\"]*(?:d[\x5c'\"]*i[\x5c'\"]*r[\x5c'\"]*(?:\s|<|>).*|f[\x5c'\"]*l[\x5c'\"]*a[\x5c'\"]*g[\x5c'\"]*s|a[\x5c'\"]*t[\x5c'\"]*t[\x5c'\"]*r|m[\x5c'\"]*o[\x5c'\"]*d)|p[\x5c'\"]*(?:u[\x5c'\"]*l[\x5c'\"]*i[\x5c'\"]*m[\x5c'\"]*i[\x5c'\"]*t|(?:\s|<|>).*|a[\x5c'\"]*n|i[\x5c'\"]*o)|(?:a[\x5c'\"]*(?:p[\x5c'\"]*s[\x5c'\"]*h|t)|c)[\x5c'\"]*(?:\s|<|>).*|e[\x5c'\"]*r[\x5c'\"]*t[\x5c'\"]*b[\x5c'\"]*o[\x5c'\"]*t|r[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*t[\x5c'\"]*a[\x5c'\"]*b|u[\x5c'\"]*r[\x5c'\"]*l|[89][\x5c'\"]*9|s[\x5c'\"]*h)|b[\x5c'\"]*(?:z[\x5c'\"]*(?:(?:[ef][\x5c'\"]*)?g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p|d[\x5c'\"]*i[\x5c'\"]*f[\x5c'\"]*f|l[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*s|m[\x5c'\"]*o[\x5c'\"]*r[\x5c'\"]*e|c[\x5c'\"]*a[\x5c'\"]*t|i[\x5c'\"]*p[\x5c'\"]*2)|u[\x5c'\"]*(?:s[\x5c'\"]*(?:y[\x5c'\"]*b[\x5c'\"]*o[\x5c'\"]*x|c[\x5c'\"]*t[\x5c'\"]*l)|n[\x5c'\"]*d[\x5c'\"]*l[\x5c'\"]*e[\x5c'\"]*r[\x5c'\"]*(?:\s|<|>).*|i[\x5c'\"]*l[\x5c'\"]*t[\x5c'\"]*i[\x5c'\"]*n)|s[\x5c'\"]*d[\x5c'\"]*(?:c[\x5c'\"]*a[\x5c'\"]*t|i[\x5c'\"]*f[\x5c'\"]*f|t[\x5c'\"]*a[\x5c'\"]*r)|a[\x5c'\"]*(?:t[\x5c'\"]*c[\x5c'\"]*h[\x5c'\"]*(?:\s|<|>).*|s[\x5c'\"]*h)|r[\x5c'\"]*e[\x5c'\"]*a[\x5c'\"]*k[\x5c'\"]*s[\x5c'\"]*w)|e[\x5c'\"]*(?:x[\x5c'\"]*(?:p[\x5c'\"]*(?:e[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*(?:\s|<|>).*|a[\x5c'\"]*n[\x5c'\"]*d|o[\x5c'\"]*r[\x5c'\"]*t|r)|(?:e[\x5c'\"]*c[\x5c'\"]*)?(?:\s|<|>).*)|n[\x5c'\"]*(?:v(?:[\x5c'\"]*-[\x5c'\"]*u[\x5c'\"]*p[\x5c'\"]*d[\x5c'\"]*a[\x5c'\"]*t[\x5c'\"]*e)?|d[\x5c'\"]*(?:i[\x5c'\"]*f|s[\x5c'\"]*w))|(?:a[\x5c'\"]*s[\x5c'\"]*y[\x5c'\"]*_[\x5c'\"]*i[\x5c'\"]*n[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*a[\x5c'\"]*l|v[\x5c'\"]*a)[\x5c'\"]*l|(?:c[\x5c'\"]*h[\x5c'\"]*o|d)[\x5c'\"]*(?:\s|<|>).*|g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p|m[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*s|s[\x5c'\"]*a[\x5c'\"]*c)|f[\x5c'\"]*(?:i(?:[\x5c'\"]*(?:l[\x5c'\"]*e[\x5c'\"]*(?:t[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*t|(?:\s|<|>).*)|n[\x5c'\"]*d[\x5c'\"]*(?:\s|<|>).*|s[\x5c'\"]*h))?|t[\x5c'\"]*p[\x5c'\"]*(?:s[\x5c'\"]*t[\x5c'\"]*a[\x5c'\"]*t[\x5c'\"]*s|w[\x5c'\"]*h[\x5c'\"]*o|(?:\s|<|>).*)|(?:e[\x5c'\"]*t[\x5c'\"]*c[\x5c'\"]*h|l[\x5c'\"]*o[\x5c'\"]*c[\x5c'\"]*k|c)[\x5c'\"]*(?:\s|<|>).*|u[\x5c'\"]*n[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*i[\x5c'\"]*o[\x5c'\"]*n|o[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*h|g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p)|i[\x5c'\"]*(?:p[\x5c'\"]*(?:(?:6[\x5c'\"]*)?t[\x5c'\"]*a[\x5c'\"]*b[\x5c'\"]*l[\x5c'\"]*e[\x5c'\"]*s|c[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*g)|r[\x5c'\"]*b(?:[\x5c'\"]*(?:2[\x5c'\"]*[01234567]|1(?:[\x5c'\"]*[89])?|3[\x5c'\"]*0))?|f[\x5c'\"]*c[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*g|o[\x5c'\"]*n[\x5c'\"]*i[\x5c'\"]*c[\x5c'\"]*e|d[\x5c'\"]*(?:\s|<|>).*)|h[\x5c'\"]*(?:t[\x5c'\"]*(?:d[\x5c'\"]*i[\x5c'\"]*g[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*t|p[\x5c'\"]*a[\x5c'\"]*s[\x5c'\"]*s[\x5c'\"]*w[\x5c'\"]*d)|o[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*(?:n[\x5c'\"]*a[\x5c'\"]*m[\x5c'\"]*e|i[\x5c'\"]*d)|(?:e[\x5c'\"]*a[\x5c'\"]*d|u[\x5c'\"]*p)[\x5c'\"]*(?:\s|<|>).*|i[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*o[\x5c'\"]*r[\x5c'\"]*y)|a[\x5c'\"]*(?:l[\x5c'\"]*(?:i[\x5c'\"]*a[\x5c'\"]*s[\x5c'\"]*(?:\s|<|>).*|p[\x5c'\"]*i[\x5c'\"]*n[\x5c'\"]*e)|p[\x5c'\"]*t[\x5c'\"]*(?:-[\x5c'\"]*g[\x5c'\"]*e[\x5c'\"]*t|(?:\s|<|>).*)|d[\x5c'\"]*d[\x5c'\"]*u[\x5c'\"]*s[\x5c'\"]*e[\x5c'\"]*r|r[\x5c'\"]*(?:c[\x5c'\"]*h[\x5c'\"]*(?:\s|<|>).*|p)|(?:w[\x5c'\"]*[ks]|t)[\x5c'\"]*(?:\s|<|>).*)|g[\x5c'\"]*(?:(?:e[\x5c'\"]*(
9CCF
?:t[\x5c'\"]*f[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*l|m)|r[\x5c'\"]*e[\x5c'\"]*p|o)[\x5c'\"]*(?:\s|<|>).*|z[\x5c'\"]*(?:c[\x5c'\"]*a[\x5c'\"]*t|i[\x5c'\"]*p)|u[\x5c'\"]*n[\x5c'\"]*z[\x5c'\"]*i[\x5c'\"]*p|c[\x5c'\"]*c(?:[\x5c'\"]*(?:\s|<|>).*)?|i[\x5c'\"]*t(?:[\x5c'\"]*(?:\s|<|>).*)?|d[\x5c'\"]*b)|d[\x5c'\"]*(?:h[\x5c'\"]*c[\x5c'\"]*l[\x5c'\"]*i[\x5c'\"]*e[\x5c'\"]*n[\x5c'\"]*t|(?:i[\x5c'\"]*f[\x5c'\"]*f|u)[\x5c'\"]*(?:\s|<|>).*|(?:m[\x5c'\"]*e[\x5c'\"]*s|p[\x5c'\"]*k)[\x5c'\"]*g|o[\x5c'\"]*(?:a[\x5c'\"]*s|n[\x5c'\"]*e)|a[\x5c'\"]*s[\x5c'\"]*h)|j[\x5c'\"]*(?:o[\x5c'\"]*(?:u[\x5c'\"]*r[\x5c'\"]*n[\x5c'\"]*a[\x5c'\"]*l[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*l|b[\x5c'\"]*s[\x5c'\"]*(?:\s|<|>).*)|a[\x5c'\"]*v[\x5c'\"]*a[\x5c'\"]*(?:\s|<|>).*|e[\x5c'\"]*x[\x5c'\"]*e[\x5c'\"]*c)|k[\x5c'\"]*(?:i[\x5c'\"]*l[\x5c'\"]*l[\x5c'\"]*(?:a[\x5c'\"]*l[\x5c'\"]*l|(?:\s|<|>).*)|s[\x5c'\"]*h)|G[\x5c'\"]*E[\x5c'\"]*T[\x5c'\"]*(?:\s|<|>).*|7[\x5c'\"]*z(?:[\x5c'\"]*[ar])?)\b" \
+SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx (?:[;\n\r`]|\$(?:\(?\(|{)|(?:\|)?\||\(\s*\)|[<>]\(|&?&|\{)\s*(?:(?:\w+=(?:[^\s]*|\$.*|\$.*|<.*|>.*|\'.*\'|\".*\")\s+|(?:\s*\(|!)\s*|\{|\$))*\s*(?:['\"])*(?:[\?\*\[\]\(\)\-\|+\w'\"\./\x5c]+/)?[\x5c'\"]*(?:c[\x5c'\"]*(?:h[\x5c'\"]*(?:e[\x5c'\"]*c[\x5c'\"]*k[\x5c'\"]*_[\x5c'\"]*(?:s[\x5c'\"]*(?:t[\x5c'\"]*a[\x5c'\"]*t[\x5c'\"]*u[\x5c'\"]*s[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*l[\x5c'\"]*e|s[\x5c'\"]*l[\x5c'\"]*_[\x5c'\"]*c[\x5c'\"]*e[\x5c'\"]*r[\x5c'\"]*t)|b[\x5c'\"]*y[\x5c'\"]*_[\x5c'\"]*s[\x5c'\"]*s[\x5c'\"]*h|m[\x5c'\"]*e[\x5c'\"]*m[\x5c'\"]*o[\x5c'\"]*r[\x5c'\"]*y|c[\x5c'\"]*u[\x5c'\"]*p[\x5c'\"]*s|r[\x5c'\"]*a[\x5c'\"]*i[\x5c'\"]*d|l[\x5c'\"]*o[\x5c'\"]*g)|d[\x5c'\"]*i[\x5c'\"]*r[\x5c'\"]*(?:\s|<|>).*|f[\x5c'\"]*l[\x5c'\"]*a[\x5c'\"]*g[\x5c'\"]*s|o[\x5c'\"]*(?:o[\x5c'\"]*m|w[\x5c'\"]*n)|a[\x5c'\"]*t[\x5c'\"]*t[\x5c'\"]*r|r[\x5c'\"]*o[\x5c'\"]*o[\x5c'\"]*t|m[\x5c'\"]*o[\x5c'\"]*d)|o[\x5c'\"]*(?:m[\x5c'\"]*(?:p[\x5c'\"]*(?:r[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*s[\x5c'\"]*(?:\s|<|>).*|o[\x5c'\"]*s[\x5c'\"]*e[\x5c'\"]*r)|m(?:[\x5c'\"]*a[\x5c'\"]*n[\x5c'\"]*d[\x5c'\"]*(?:\s|<|>).*)?)|w[\x5c'\"]*(?:t[\x5c'\"]*h[\x5c'\"]*i[\x5c'\"]*n[\x5c'\"]*k|s[\x5c'\"]*a[\x5c'\"]*y)|l[\x5c'\"]*u[\x5c'\"]*m[\x5c'\"]*n[\x5c'\"]*(?:\s|<|>).*|(?:p[\x5c'\"]*r[\x5c'\"]*o|b)[\x5c'\"]*c)|u[\x5c'\"]*(?:p[\x5c'\"]*s[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*l[\x5c'\"]*t[\x5c'\"]*e[\x5c'\"]*r|t[\x5c'\"]*(?:\s|<|>).*|r[\x5c'\"]*l)|p[\x5c'\"]*(?:u[\x5c'\"]*l[\x5c'\"]*i[\x5c'\"]*m[\x5c'\"]*i[\x5c'\"]*t|(?:\s|<|>).*|a[\x5c'\"]*n|i[\x5c'\"]*o)|r[\x5c'\"]*(?:a[\x5c'\"]*s[\x5c'\"]*h[\x5c'\"]*(?:\s|<|>).*|o[\x5c'\"]*n[\x5c'\"]*t[\x5c'\"]*a[\x5c'\"]*b)|(?:a[\x5c'\"]*(?:n[\x5c'\"]*c[\x5c'\"]*e[\x5c'\"]*l|p[\x5c'\"]*s[\x5c'\"]*h|t)|c)[\x5c'\"]*(?:\s|<|>).*|s[\x5c'\"]*(?:v[\x5c'\"]*t[\x5c'\"]*o[\x5c'\"]*o[\x5c'\"]*l|p[\x5c'\"]*l[\x5c'\"]*i[\x5c'\"]*t|h)|e[\x5c'\"]*r[\x5c'\"]*t[\x5c'\"]*b[\x5c'\"]*o[\x5c'\"]*t|[89][\x5c'\"]*9|m[\x5c'\"]*p)|l[\x5c'\"]*(?:w[\x5c'\"]*p[\x5c'\"]*-[\x5c'\"]*(?:d[\x5c'\"]*(?:o[\x5c'\"]*w[\x5c'\"]*n[\x5c'\"]*l[\x5c'\"]*o[\x5c'\"]*a[\x5c'\"]*d|u[\x5c'\"]*m[\x5c'\"]*p)|r[\x5c'\"]*e[\x5c'\"]*q[\x5c'\"]*u[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*t|m[\x5c'\"]*i[\x5c'\"]*r[\x5c'\"]*r[\x5c'\"]*o[\x5c'\"]*r)|s(?:[\x5c'\"]*(?:b[\x5c'\"]*_[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*l[\x5c'\"]*e[\x5c'\"]*a[\x5c'\"]*s[\x5c'\"]*e|c[\x5c'\"]*p[\x5c'\"]*u|m[\x5c'\"]*o[\x5c'\"]*d|p[\x5c'\"]*c[\x5c'\"]*i|u[\x5c'\"]*s[\x5c'\"]*b|-[\x5c'\"]*F|h[\x5c'\"]*w|o[\x5c'\"]*f))?|z[\x5c'\"]*(?:(?:[ef][\x5c'\"]*)?g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p|c[\x5c'\"]*(?:a[\x5c'\"]*t|m[\x5c'\"]*p)|m[\x5c'\"]*(?:o[\x5c'\"]*r[\x5c'\"]*e|a)|d[\x5c'\"]*i[\x5c'\"]*f[\x5c'\"]*f|l[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*s)|o[\x5c'\"]*(?:g[\x5c'\"]*(?:(?:n[\x5c'\"]*a[\x5c'\"]*m|s[\x5c'\"]*a[\x5c'\"]*v)[\x5c'\"]*e|i[\x5c'\"]*n[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*l)|(?:c[\x5c'\"]*a[\x5c'\"]*(?:t[\x5c'\"]*e|l)|o[\x5c'\"]*k)[\x5c'\"]*(?:\s|<|>).*)|a[\x5c'\"]*(?:s[\x5c'\"]*t[\x5c'\"]*(?:l[\x5c'\"]*o[\x5c'\"]*g(?:[\x5c'\"]*i[\x5c'\"]*n)?|c[\x5c'\"]*o[\x5c'\"]*m[\x5c'\"]*m|(?:\s|<|>).*)|t[\x5c'\"]*e[\x5c'\"]*x[\x5c'\"]*(?:\s|<|>).*)|e[\x5c'\"]*s[\x5c'\"]*s[\x5c'\"]*(?:(?:f[\x5c'\"]*i[\x5c'\"]*l|p[\x5c'\"]*i[\x5c'\"]*p)[\x5c'\"]*e|e[\x5c'\"]*c[\x5c'\"]*h[\x5c'\"]*o|(?:\s|<|>).*)|d[\x5c'\"]*(?:c[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*g|(?:d[\x5c'\"]*)?(?:\s|<|>).*)|(?:[np]|i[\x5c'\"]*n[\x5c'\"]*k[\x5c'\"]*s|y[\x5c'\"]*n[\x5c'\"]*x)[\x5c'\"]*(?:\s|<|>).*|u[\x5c'\"]*a[\x5c'\"]*(?:(?:l[\x5c'\"]*a[\x5c'\"]*)?t[\x5c'\"]*e[\x5c'\"]*x|(?:\s|<|>).*)|f[\x5c'\"]*t[\x5c'\"]*p(?:[\x5c'\"]*g[\x5c'\"]*e[\x5c'\"]*t)?|t[\x5c'\"]*r[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*e)|b[\x5c'\"]*(?:z[\x5c'\"]*(?:(?:[ef][\x5c'\"]*)?g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p|d[\x5c'\"]*i[\x5c'\"]*f[\x5c'\"]*f|l[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*s|m[\x5c'\"]*o[\x5c'\"]*r[\x5c'\"]*e|c[\x5c'\"]*a[\x5c'\"]*t|i[\x5c'\"]*p[\x5c'\"]*2)|u[\x5c'\"]*(?:s[\x5c'\"]*(?:y[\x5c'\"]*b[\x5c'\"]*o[\x5c'\"]*x|c[\x5c'\"]*t[\x5c'\"]*l)|n[\x5c'\"]*d[\x5c'\"]*l[\x5c'\"]*e[\x5c'\"]*r[\x5c'\"]*(?:\s|<|>).*|i[\x5c'\"]*l[\x5c'\"]*t[\x5c'\"]*i[\x5c'\"]*n)|a[\x5c'\"]*(?:s[\x5c'\"]*(?:e[\x5c'\"]*(?:3[\x5c'\"]*2|6[\x5c'\"]*4|n[\x5c'\"]*c)|h)|t[\x5c'\"]*c[\x5c'\"]*h[\x5c'\"]*(?:\s|<|>).*)|r[\x5c'\"]*(?:i[\x5c'\"]*d[\x5c'\"]*g[\x5c'\"]*e[\x5c'\"]*(?:\s|<|>).*|e[\x5c'\"]*a[\x5c'\"]*k[\x5c'\"]*s[\x5c'\"]*w)|s[\x5c'\"]*d[\x5c'\"]*(?:c[\x5c'\"]*a[\x5c'\"]*t|i[\x5c'\"]*f[\x5c'\"]*f|t[\x5c'\"]*a[\x5c'\"]*r)|p[\x5c'\"]*f[\x5c'\"]*t[\x5c'\"]*r[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*e|y[\x5c'\"]*e[\x5c'\"]*b[\x5c'\"]*u[\x5c'\"]*g)|a[\x5c'\"]*(?:s[\x5c'\"]*(?:c[\x5c'\"]*i[\x5c'\"]*i[\x5c'\"]*(?:-[\x5c'\"]*x[\x5c'\"]*f[\x5c'\"]*r|8[\x5c'\"]*5)|p[\x5c'\"]*e[\x5c'\"]*l[\x5c'\"]*l|(?:h[\x5c'\"]*)?(?:\s|<|>).*)|n[\x5c'\"]*s[\x5c'\"]*i[\x5c'\"]*b[\x5c'\"]*l[\x5c'\"]*e[\x5c'\"]*-[\x5c'\"]*p[\x5c'\"]*l[\x5c'\"]*a[\x5c'\"]*y[\x5c'\"]*b[\x5c'\"]*o[\x5c'\"]*o[\x5c'\"]*k|(?:l[\x5c'\"]*(?:p[\x5c'\"]*i[\x5c'\"]*n[\x5c'\"]*e|i[\x5c'\"]*a[\x5c'\"]*s)|w[\x5c'\"]*[ks]|b)[\x5c'\"]*(?:\s|<|>).*|r[\x5c'\"]*(?:[jp]|(?:c[\x5c'\"]*h[\x5c'\"]*)?(?:\s|<|>).*|i[\x5c'\"]*a[\x5c'\"]*2[\x5c'\"]*c)|p[\x5c'\"]*t[\x5c'\"]*(?:-[\x5c'\"]*g[\x5c'\"]*e[\x5c'\"]*t|(?:\s|<|>).*)|d[\x5c'\"]*d[\x5c'\"]*u[\x5c'\"]*s[\x5c'\"]*e[\x5c'\"]*r|t[\x5c'\"]*(?:o[\x5c'\"]*b[\x5c'\"]*m|(?:\s|<|>).*)|g[\x5c'\"]*e[\x5c'\"]*t[\x5c'\"]*t[\x5c'\"]*y)|e[\x5c'\"]*(?:x[\x5c'\"]*(?:p[\x5c'\"]*(?:(?:(?:e[\x5c'\"]*c|o[\x5c'\"]*r)[\x5c'\"]*t|a[\x5c'\"]*n[\x5c'\"]*d)[\x5c'\"]*(?:\s|<|>).*|r)|i[\x5c'\"]*f[\x5c'\"]*t[\x5c'\"]*o[\x5c'\"]*o[\x5c'\"]*l|(?:e[\x5c'\"]*c[\x5c'\"]*)?(?:\s|<|>).*)|n[\x5c'\"]*(?:v[\x5c'\"]*(?:-[\x5c'\"]*u[\x5c'\"]*p[\x5c'\"]*d[\x5c'\"]*a[\x5c'\"]*t[\x5c'\"]*e|(?:\s|<|>).*)|d[\x5c'\"]*(?:i[\x5c'\"]*f|s[\x5c'\"]*w))|(?:a[\x5c'\"]*s[\x5c'\"]*y[\x5c'\"]*_[\x5c'\"]*i[\x5c'\"]*n[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*a[\x5c'\"]*l|v[\x5c'\"]*a)[\x5c'\"]*l|(?:[bd]|c[\x5c'\"]*h[\x5c'\"]*o)[\x5c'\"]*(?:\s|<|>).*|g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p|m[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*s|f[\x5c'\"]*a[\x5c'\"]*x|s[\x5c'\"]*a[\x5c'\"]*c|q[\x5c'\"]*n)|g[\x5c'\"]*(?:e[\x5c'\"]*(?:n[\x5c'\"]*i[\x5c'\"]*(?:s[\x5c'\"]*o[\x5c'\"]*i[\x5c'\"]*m[\x5c'\"]*a[\x5c'\"]*g[\x5c'\"]*e|e[\x5c'\"]*(?:\s|<|>).*)|(?:t[\x5c'\"]*f[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*l|m)[\x5c'\"]*(?:\s|<|>).*)|c[\x5c'\"]*(?:c[\x5c'\"]*(?:(?:<|>)|(?:[\w\d._-][\x5c'\"]*)+(?:\s|<|>)).*|o[\x5c'\"]*r[\x5c'\"]*e)|i[\x5c'\"]*(?:(?:m[\x5c'\"]*p|t)[\x5c'\"]*(?:\s|<|>).*|n[\x5c'\"]*s[\x5c'\"]*h)|t[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*e[\x5c'\"]*r|r[\x5c'\"]*(?:e[\x5c'\"]*p[\x5c'\"]*(?:\s|<|>).*|c)|z[\x5c'\"]*(?:c[\x5c'\"]*a[\x5c'\"]*t|i[\x5c'\"]*p)|u[\x5c'\"]*n[\x5c'\"]*z[\x5c'\"]*i[\x5c'\"]*p|h[\x5c'\"]*c(?:[\x5c'\"]*i)?|a[\x5c'\"]*w[\x5c'\"]*k|o[\x5c'\"]*(?:\s|<|>).*|d[\x5c'\"]*b)|f[\x5c'\"]*(?:i(?:[\x5c'\"]*(?:(?:n[\x5c'\"]*(?:g[\x5c'\"]*e[\x5c'\"]*r|d)|s[\x5c'\"]*h)[\x5c'\"]*(?:\s|<|>).*|l[\x5c'\"]*e[\x5c'\"]*(?:t[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*t|(?:\s|<|>).*)))?|t[\x5c'\"]*p[\x5c'\"]*(?:s[\x5c'\"]*t[\x5c'\"]*a[\x5c'\"]*t[\x5c'\"]*s|w[\x5c'\"]*h[\x5c'\"]*o|(?:\s|<|>).*)|(?:e[\x5c'\"]*t[\x5c'\"]*c[\x5c'\"]*h|l[\x5c'\"]*o[\x5c'\"]*c[\x5c'\"]*k|c)[\x5c'\"]*(?:\s|<|>).*|o[\x5c'\"]*(?:r[\x5c'\"]*e[\x5c'\"]*a[\x5c'\"]*c[\x5c'\"]*h|l[\x5c'\"]*d[\x5c'\"]*(?:\s|<|>).*)|u[\x5c'\"]*n[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*i[\x5c'\"]*o[\x5c'\"]*n|a[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*e[\x5c'\"]*r|g[\x5c'\"]*r[\x5c'\"]*e[\x5c'\"]*p|p[\x5c'\"]*i[\x5c'\"]*n[\x5c'\"]*g|m[\x5c'\"]*t)|d[\x5c'\"]*(?:m[\x5c'\"]*(?:i[\x5c'\"]*d[\x5c'\"]*e[\x5c'\"]*c[\x5c'\"]*o[\x5c'\"]*d[\x5c'\"]*e|s[\x5c'\"]*e[\x5c'\"]*t[\x5c'\"]*u[\x5c'\"]*p|e[\x5c'\"]*s[\x5c'\"]*g)|o[\x5c'\"]*(?:(?:c[\x5c'\"]*k[\x5c'\"]*e[\x5c'\"]*r|n[\x5c'\"]*e)[\x5c'\"]*(?:\s|<|>).*|s[\x5c'\"]*b[\x5c'\"]*o[\x5c'\"]*x|a[\x5c'\"]*s)|i[\x5c'\"]*(?:(?:a[\x5c'\"]*l[\x5c'\"]*o[\x5c'\"]*g|f[\x5c'\"]*f)[\x5c'\"]*(?:\s|<|>).*|g)|(?:[du]|a[\x5c'\"]*(?:s[\x5c'\"]*h|t[\x5c'\"]*e))[\x5c'\"]*(?:\s|<|>).*|h[\x5c'\"]*c[\x5c'\"]*l[\x5c'\"]*i[\x5c'\"]*e[\x5c'\"]*n[\x5c'\"]*t|v[\x5c'\"]*i[\x5c'\"]*p[\x5c'\"]*s|p[\x5c'\"]*k[\x5c'\"]*g|n[\x5c'\"]*f)|i[\x5c'\"]*(?:(?:(?:n[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*a[\x5c'\"]*l[\x5c'\"]*l|d)[\x5c'\"]*(?:\s|<|>)|r[\x5c'\"]*b[\x5c'\"]*(?:(?:<|>)|(?:[\w\d._-][\x5c'\"]*)+(?:\s|<|>))).*|p[\x5c'\"]*(?:(?:6[\x5c'\"]*)?t[\x5c'\"]*a[\x5c'\"]*b[\x5c'\"]*l[\x5c'\"]*e[\x5c'\"]*s|c[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*g|(?:\s|<|>).*)|f[\x5c'\"]*(?:c[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*f[\x5c'\"]*i[\x5c'\"]*g|t[\x5c'\"]*o[\x5c'\"]*p)|o[\x5c'\"]*n[\x5c'\"]*i[\x5c'\"]*c[\x5c'\"]*e|s[\x5c'\"]*p[\x5c'\"]*e[\x5c'\"]*l[\x5c'\"]*l|c[\x5c'\"]*o[\x5c'\"]*n[\x5c'\"]*v)|h[\x5c'\"]*(?:(?:i[\x5c'\"]*(?:g[\x5c'\"]*h[\x5c'\"]*l[\x5c'\"]*i[\x5c'\"]*g[\x5c'\"]*h[\x5c'\"]*t|s[\x5c'\"]*t[\x5c'\"]*o[\x5c'\"]*r[\x5c'\"]*y)|u[\x5c'\"]*p|d)[\x5c'\"]*(?:\s|<|>).*|t[\x5c'\"]*(?:d[\x5c'\"]*i[\x5c'\"]*g[\x5c'\"]*e[\x5c'\"]*s[\x5c'\"]*t|p[\x5c'\"]*a[\x5c'\"]*s[\x5c'\"]*s[\x5c'\"]*w[\x5c'\"]*d)|e[\x5c'\"]*(?:x[\x5c'\"]*d[\x5c'\"]*u[\x5c'\"]*m[\x5c'\"]*p|a[\x5c'\"]*d[\x5c'\"]*(?:\s|<|>).*)|o[\x5c'\"]*s[\x5c'\"]*t[\x5c'\"]*(?:n[\x5c'\"]*a[\x5c'\"]*m[\x5c'\"]*e|i[\x5c'\"]*d)|p[\x5c'\"]*i[\x5c'\"]*n[\x5c'\"]*g[\x5c'\"]*3)|j[\x5c'\"]*(?:o[\x5c'\"]*(?:u[\x5c'\"]*r[\x5c'\"]*n[\x5c'\"]*a[\x5c'\"]*l[\x5c'\"]*c[\x5c'\"]*t[\x5c'\"]*l|(?:b[\x5c'\"]*s|i[\x5c'\"]*n)[\x5c'\"]*(?:\s|<|>).*)|r[\x5c'\"]*u[\x5c'\"]*n[\x5c'\"]*s[\x5c'\"]*c[\x5c'\"]*r[\x5c'\"]*i[\x5c'\"]*p[\x5c'\"]*t|a[\x5c'\"]*v[\x5c'\"]*a[\x5c'\"]*(?:\s|<|>).*|e[\x5c'\"]*x[\x5c'\"]*e[\x5c'\"]*c|j[\x5c'\"]*s|q)|k[\x5c'\"]*(?:i[\x5c'\"]*l[\x5c'\"]*l[\x5c'\"]*(?:a[\x5c'\"]*l[\x5c'\"]*l|(?:\s|<|>).*)|s[\x5c'\"]*(?:s[\x5c'\"]*h[\x5c'\"]*e[\x5c'\"]*l[\x5c'\"]*l|h)|n[\x5c'\"]*i[\x5c'\"]*f[\x5c'\"]*e[\x5c'\"]*(?:\s|<|>).*)|G[\x5c'\"]*E[\x5c'\"]*T[\x5c'\"]*(?:\s|<|>).*|7[\x5c'\"]*z(?:[\x5c'\"]*[ar])?)\b" \
     "id:932100,\
     phase:2,\
     block,\