From 3df30834ab666747032159a50f444bbb32154919 Mon Sep 17 00:00:00 2001
From: Patrick Steele-Idem <pnidem@gmail.com>
Date: Tue, 12 Jan 2016 14:37:07 -0700
Subject: [PATCH] Fixes #93 - Update lasso to add support for CSP nonce

---
 README.md                                     |  78 +++++++++-
 lib/Config.js                                 |   5 +
 lib/Lasso.js                                  |   4 +-
 lib/LassoPageResult.js                        |  85 +++++++++--
 lib/Slot.js                                   |   7 +-
 lib/config-loader.js                          |   8 +
 marko-taglib.json                             |  10 ++
 package.json                                  | 140 +++++++++---------
 taglib/LassoRenderContext.js                  |   5 +
 taglib/helper-getNonce.js                     |  11 ++
 taglib/lasso-nonce-attr-transformer.js        |  16 ++
 taglib/page-tag.js                            |   6 +-
 taglib/slot-tag.js                            |  35 +++--
 test/lasso-test.js                            |  30 ++++
 test/taglib-test.js                           |  20 +++
 .../src/pages/csp-test/browser.json           |   8 +
 .../src/pages/csp-test/favicon.ico            | Bin 0 -> 1150 bytes
 .../src/pages/csp-test/marko-logo.png         | Bin 0 -> 31647 bytes
 .../src/pages/csp-test/style-inline.css       |   3 +
 .../test-project/src/pages/csp-test/style.css |   3 +
 .../src/pages/csp-test/template.dust          |  10 ++
 .../csp-test/template.dust.expected.html      |   1 +
 .../src/pages/csp-test/template.marko         |  15 ++
 .../csp-test/template.marko.expected.html     |   5 +
 .../src/pages/csp-test/test-inline.js         |   1 +
 test/test-project/src/pages/csp-test/test.js  |   1 +
 26 files changed, 406 insertions(+), 101 deletions(-)
 create mode 100644 taglib/helper-getNonce.js
 create mode 100644 taglib/lasso-nonce-attr-transformer.js
 create mode 100644 test/test-project/src/pages/csp-test/browser.json
 create mode 100644 test/test-project/src/pages/csp-test/favicon.ico
 create mode 100644 test/test-project/src/pages/csp-test/marko-logo.png
 create mode 100644 test/test-project/src/pages/csp-test/style-inline.css
 create mode 100644 test/test-project/src/pages/csp-test/style.css
 create mode 100644 test/test-project/src/pages/csp-test/template.dust
 create mode 100644 test/test-project/src/pages/csp-test/template.dust.expected.html
 create mode 100644 test/test-project/src/pages/csp-test/template.marko
 create mode 100644 test/test-project/src/pages/csp-test/template.marko.expected.html
 create mode 100644 test/test-project/src/pages/csp-test/test-inline.js
 create mode 100644 test/test-project/src/pages/csp-test/test.js

diff --git a/README.md b/README.md
index f8539a8c..008da171 100644
--- a/README.md
+++ b/README.md
@@ -117,6 +117,7 @@ There's also a JavaScript API, taglib and a collection of plugins to make your j
 	- [Complete Configuration](#complete-configuration)
 - [Node.js-style Module Support](#nodejs-style-module-support)
 - [No Conflict Builds](#no-conflict-builds)
+- [Content Security Policy Support](#content-security-policy-support)
 - [Available Plugins](#available-plugins)
 - [Extending Lasso.js](#extending-lassojs)
 	- [Custom Plugins](#custom-plugins)
@@ -161,7 +162,6 @@ There's also a JavaScript API, taglib and a collection of plugins to make your j
     * Optional Base64 image encoding inside CSS files
     * Custom output transforms
     * Declarative browser-side package dependencies using simple `browser.json` files
-    * Generates the HTML markup required to include bundled resources
 	* Conditional dependencies
 	* Image minification
     * etc.
@@ -174,6 +174,7 @@ There's also a JavaScript API, taglib and a collection of plugins to make your j
     * Full support for [browserify](http://browserify.org/) shims and transforms
     * Maintains line numbers in wrapped code
 * Developer Friendly
+    * Generates the HTML markup required to include bundled resources
     * Disable bundling and minification in development
     * Line numbers are maintained for Node.js modules source
     * Extremely fast _incremental builds_!
@@ -199,6 +200,8 @@ There's also a JavaScript API, taglib and a collection of plugins to make your j
     * Integrate with build tools
     * Use with Express or any other web development framework
     * JavaScript API, CLI and taglib
+* Security
+    * Supports the [nonce attribute](https://www.w3.org/TR/CSP2/#script-src-the-nonce-attribute) when using Content Security Policy for extra security.
 * _Future_
     * Automatic image sprites
 
@@ -1359,6 +1362,79 @@ require('lasso').create({
 
 See [Configuration](#configuration) for full list of configuration options.
 
+# Content Security Policy Support
+
+Newer browsers support a web standard called Content Security Policy that prevents, among other things, cross-site scripting attacks by whitelisting inline `<script>` and `<style>` tags (see [HTML5 Rocks: An Introduction to Content Security Policy](http://www.html5rocks.com/en/tutorials/security/content-security-policy/)). The Lasso.js taglib for Marko is used to inject the `<script>` and `<style>` tags into the HTML output and Lasso.js provides support for injecting a nonce attribute. When Lasso.js is configured you just need to register a `cspNonceProvider` as shown below:
+
+```javascript
+require('lasso').configure({
+    cspNonceProvider: function(out) {
+        // Logic for determining the nonce will vary, but the following is one option:
+        var res = out.stream;
+        var nonce = res.csp && res.csp.nonce;
+
+        // NOTE:
+        // The code above assumes that there is some middleware that
+        // stores the nonce into a [non-standard] `res.csp.nonce` variable.
+        // Use whatever is appropriate for your app.
+        return nonce; // A string value
+    }
+});
+```
+
+A Lasso.js plugin can also be used to register the CSP nonce provider as shown below:
+
+```javascript
+module.exports = function(lasso, pluginConfig) {
+    lasso.setCSPNonceProvider(function(out) {
+        return 'abc123';
+    })
+};
+```
+
+Registering a `cspNonceProvider` will result in a `nonce` attribute being added to all inline `<script>` and `<style>` tags rendered in either the `head` slot (`<lasso-head/>`) or the `body` slot (`<lasso-body/>`).
+
+
+With a CSP nonce enable, the HTML output for a page rendered using Marko might be similar to the following:
+
+```html
+<html>
+    <head>
+        <!-- BEGIN head slot: -->
+        <link rel="stylesheet" type="text/css" href="/static/page1-8b866529.css">
+        <style type="text/css" nonce="abc123">
+            body .inline {
+                background-color: red;
+            }
+        </style>
+        <!-- END head slot -->
+    </head>
+    <body>
+        <!-- BEGIN body slot: -->
+        <script type="text/javascript" src="/static/page1-1097e0f6.js"></script>
+        <script type="text/javascript" nonce="abc123">
+            console.log('hello-inline');
+        </script>
+        <!-- END body slot -->
+    </body>
+</html>
+```
+
+NOTE: A `nonce` attribute is only added to inline `<script>` and `<style>` tags.
+
+As an extra convenience, Lasso.js also supports a custom `lasso-nonce` attribute that can be dropped onto any HTML tag in your Marko template files as shown below:
+
+```xml
+<script type="text/javascript" lasso-nonce>console.log('My inline script')</script>
+<style type="text/css" lasso-nonce>.my-inline-style { }</style>
+```
+
+The output HTML will be similar to the following:
+
+```html
+<script type="text/javascript" nonce="abc123">console.log('My inline script')</script>
+<style type="text/css" nonce="abc123">.my-inline-style { }</style>
+```
 
 # Available Plugins
 
diff --git a/lib/Config.js b/lib/Config.js
index 6d304cb9..37509e7c 100644
--- a/lib/Config.js
+++ b/lib/Config.js
@@ -150,6 +150,7 @@ function Config(params) {
     this.cacheDir = null;
     this._requirePluginConfig = {};
     this._imagePluginConfig = {};
+    this.cspNonceProvider = null;
 
     if (params) {
         extend(this.params, params);
@@ -383,6 +384,10 @@ Config.prototype = {
 
     getBundleReadTimeout: function() {
         return this.bundleReadTimeout;
+    },
+
+    setCSPNonceProvider: function(func) {
+        this.cspNonceProvider = func;
     }
 };
 
diff --git a/lib/Lasso.js b/lib/Lasso.js
index 6e71f5f9..220eabea 100644
--- a/lib/Lasso.js
+++ b/lib/Lasso.js
@@ -576,11 +576,11 @@ Lasso.prototype = {
     },
 
     getJavaScriptDependencyHtml: function(url) {
-        return '<script type="text/javascript" src="' + escapeXmlAttr(url) + '"></script>';
+        return '<script type="text/javascript" src="' + escapeXmlAttr(url) + '" attrs="data.externalScriptAttrs"></script>';
     },
 
     getCSSDependencyHtml: function(url) {
-        return '<link rel="stylesheet" type="text/css" href="' + escapeXmlAttr(url) + '">';
+        return '<link rel="stylesheet" type="text/css" href="' + escapeXmlAttr(url) + '" attrs="data.externalStyleAttrs">';
     },
 
     _resolveflags: function(options) {
diff --git a/lib/LassoPageResult.js b/lib/LassoPageResult.js
index 6561b12f..429321e6 100644
--- a/lib/LassoPageResult.js
+++ b/lib/LassoPageResult.js
@@ -1,12 +1,30 @@
 var extend = require('raptor-util/extend');
+var marko = require('marko');
+var nodePath = require('path');
+var EMPTY_OBJECT = {};
+
+function generateTempFilename(slotName) {
+    // Generates a unique filename based on date/time and, process ID and a random number
+    var now = new Date();
+    return [
+            slotName,
+            now.getYear(),
+            now.getMonth(),
+            now.getDate(),
+            process.pid,
+            (Math.random() * 0x100000000 + 1).toString(36)
+        ].join('-') + '.marko';
+}
 
 function LassoPageResult() {
-    this.htmlBySlot = {};
     this.urlsBySlot = {};
     this.urlsByContentType = {};
     this.filesByContentType = {};
     this.infoByBundleName = {};
     this.infoByAsyncBundleName = {};
+    this._htmlBySlot = {};
+
+    this._htmlTemplatesBySlot = {};
 }
 
 LassoPageResult.deserialize = function(reader, callback) {
@@ -51,8 +69,16 @@ LassoPageResult.prototype = {
      *
      * @return {Object} An object with slot names as property names and slot HTML as property values.
      */
-    getHtmlBySlot: function() {
-        return this.htmlBySlot;
+    get htmlBySlot() {
+        var htmlBySlot = {};
+        for (var slotName in this._htmlBySlot) {
+            if (this._htmlBySlot.hasOwnProperty(slotName)) {
+                var slotHtml = this.getHtmlForSlot(slotName);
+                htmlBySlot[slotName] = slotHtml;
+            }
+        }
+
+        return htmlBySlot;
     },
 
     /**
@@ -64,26 +90,54 @@ LassoPageResult.prototype = {
      * </js>
      *
      * @param  {String} slotName The name of the slot (e.g. "head" or "body")
+     * @param  {Object} data Input data to the slot that is used to render the actual slot HTML
      * @return {String} The HTML for the slot or an empty string if there is no HTML defined for the slot.
      */
-    getHtmlForSlot: function(slotName) {
-        return this.htmlBySlot[slotName] || '';
+    getHtmlForSlot: function(slotName, data) {
+        var template = this._getSlotTemplate(slotName);
+        if (!template) {
+            return '';
+        }
+        return template.renderSync(data || EMPTY_OBJECT);
     },
 
+    _getSlotTemplate: function(slotName) {
+        var template = this._htmlTemplatesBySlot[slotName];
+        if (!template) {
+            var templateSrc = this._htmlBySlot[slotName];
+            if (!templateSrc) {
+                return null;
+            }
 
-    getHeadHtml: function() {
-        return this.getHtmlForSlot('head');
+            // In order to compile the HTML for the slot into a Marko template, we need to provide a faux
+            // template path. The path doesn't really matter unless the compiled template needs to import
+            // external tags or templates.
+            var templatePath = nodePath.resolve(__dirname, '..', generateTempFilename(slotName));
+            template = marko.load(templatePath, templateSrc, { preserveWhitespace: true });
+            // Cache the loaded template:
+            this._htmlTemplatesBySlot[slotName] = template;
+
+            // The Marko template compiled to JS and required. Let's delete it out of the require cache
+            // to avoid a memory leak
+            delete require.cache[templatePath + '.js'];
+        }
+
+        return template;
     },
 
-    getBodyHtml: function() {
-        return this.getHtmlForSlot('body');
+    getHeadHtml: function(data) {
+        return this.getHtmlForSlot('head', data);
+    },
+
+    getBodyHtml: function(data) {
+        return this.getHtmlForSlot('body', data);
     },
 
     /**
      * Synonym for {@Link raptor/lasso/LassoPageResult#getHtmlForSlot}
      */
-    getSlotHtml: function(slot) {
-        return this.getHtmlForSlot(slot);
+    getSlotHtml: function(slotName, data) {
+        return this.getHtmlForSlot(slotName, data);
     },
 
     /**
@@ -94,8 +148,15 @@ LassoPageResult.prototype = {
         return JSON.stringify(this.htmlBySlot, null, indentation);
     },
 
+    toJSON: function() {
+        var clone = extend({}, this);
+        // Don't include the loaded templates when generating a JSON string
+        delete clone._htmlTemplatesBySlot;
+        return clone;
+    },
+
     setHtmlBySlot: function(htmlBySlot) {
-        this.htmlBySlot = htmlBySlot;
+        this._htmlBySlot = htmlBySlot;
     },
 
     registerBundle: function(bundle, async, lassoContext) {
diff --git a/lib/Slot.js b/lib/Slot.js
index 0b085a9a..c90bd68a 100644
--- a/lib/Slot.js
+++ b/lib/Slot.js
@@ -4,7 +4,6 @@ function Slot(contentType) {
     ok(contentType, 'contentType is required');
     this.contentType = contentType;
     this.content = [];
-    
 }
 
 Slot.prototype = {
@@ -30,16 +29,16 @@ Slot.prototype = {
             code: content
         });
     },
-    
+
     buildHtml: function() {
         var output = [];
         for (var i=0, len=this.content.length; i<len; i++) {
             var content = this.content[i];
             if (content.inline) {
                 if (this.contentType === 'js') {
-                    output.push('<script type="text/javascript">' + content.code + '</script>');
+                    output.push('<script type="text/javascript" attrs="data.inlineScriptAttrs">' + content.code + '</script>');
                 } else if (this.contentType === 'css') {
-                    output.push('<style type="text/css">' + content.code + '</style>');
+                    output.push('<style type="text/css" attrs="data.inlineStyleAttrs">' + content.code + '</style>');
                 }
             } else {
                 output.push(content.code);
diff --git a/lib/config-loader.js b/lib/config-loader.js
index 19a1cc0f..54dd73f2 100644
--- a/lib/config-loader.js
+++ b/lib/config-loader.js
@@ -364,6 +364,14 @@ function load(options, baseDir, filename, configDefaults) {
                 // dependencies.
                 config._requirePluginConfig.unbundledTargetPrefix = value;
             }
+        },
+
+        cspNonceProvider: function(value) {
+            if (typeof value !== 'function') {
+                throw new Error('"cspNonceProvider" should be a function');
+            }
+
+            config.setCSPNonceProvider(value);
         }
     };
 
diff --git a/marko-taglib.json b/marko-taglib.json
index 7e718a3a..8380a001 100644
--- a/marko-taglib.json
+++ b/marko-taglib.json
@@ -90,6 +90,16 @@
             "transformer": {
                 "path": "./taglib/lasso-resource-tag-transformer"
             }
+        },
+        "*": {
+            "attributes": {
+                "lasso-nonce": {
+                    "ignore": true
+                }
+            },
+            "transformer": {
+                "path": "./taglib/lasso-nonce-attr-transformer"
+            }
         }
     }
 }
diff --git a/package.json b/package.json
index c3012945..b2400131 100644
--- a/package.json
+++ b/package.json
@@ -1,71 +1,71 @@
 {
-    "name": "lasso",
-    "description": "Lasso.js is a build tool and runtime library for building and bundling all of the resources needed by a web application",
-    "repository": {
-        "type": "git",
-        "url": "https://github.com/lasso-js/lasso.git"
-    },
-    "scripts": {
-        "test": "rm -rf .cache && node_modules/.bin/mocha --timeout 4000 --ui bdd --reporter spec ./test && node_modules/.bin/mocha --timeout 4000 --ui bdd --reporter spec ./test && node_modules/.bin/jshint lib/ taglib/"
-    },
-    "author": "Patrick Steele-Idem <pnidem@gmail.com>",
-    "maintainers": "Patrick Steele-Idem <pnidem@gmail.com>",
-    "dependencies": {
-        "app-module-path": "^1.0.0",
-        "app-root-dir": "^1.0.0",
-        "async": "^0.9.0",
-        "browser-refresh-client": "^1.0.0",
-        "glob": "^4.0.6",
-        "jsonminify": "~0.2.3",
-        "lasso-image": "^1.0.9",
-        "lasso-minify-css": "^1.0.0",
-        "lasso-minify-js": "^1.1.4",
-        "lasso-require": "^1.4.0",
-        "lasso-resolve-css-urls": "^1.0.0",
-        "mime": "~1.2.7",
-        "mkdirp": "^0.5.0",
-        "property-handlers": "^1.0.0",
-        "raptor-async": "^1.1.0",
-        "raptor-cache": "^1.1.1",
-        "raptor-detect": "^1.0.0",
-        "raptor-dust": "^1.1.2",
-        "raptor-logging": "^1.0.1",
-        "raptor-modules": "^1.0.5",
-        "raptor-objects": "^1.0.1",
-        "raptor-polyfill": "^1.0.0",
-        "raptor-promises": "^1.0.1",
-        "raptor-regexp": "^1.0.0",
-        "raptor-strings": "^1.0.0",
-        "raptor-util": "^1.0.0",
-        "resolve-from": "^1.0.0",
-        "send": "^0.13.0",
-        "through": "^2.3.4"
-    },
-    "devDependencies": {
-        "babel-core": "^6.0.20",
-        "babel-preset-es2015": "^6.0.15",
-        "chai": "~1.8.1",
-        "deamdify": "^0.1.1",
-        "dustjs-linkedin": "^2.4.0",
-        "fs-extra": "~0.12.0",
-        "jshint": "~2.3.0",
-        "lasso-dust": "^1.1.3",
-        "lasso-marko": "^2.0.1",
-        "marko": "^2.7.25",
-        "mocha": "~1.15.1"
-    },
-    "license": "Apache License v2.0",
-    "main": "lib/index.js",
-    "publishConfig": {
-        "registry": "https://registry.npmjs.org/"
-    },
-    "keywords": [
-        "bundler",
-        "build",
-        "css",
-        "javascript",
-        "concat",
-        "minify"
-    ],
-    "version": "1.13.0"
-}
\ No newline at end of file
+  "name": "lasso",
+  "description": "Lasso.js is a build tool and runtime library for building and bundling all of the resources needed by a web application",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lasso-js/lasso.git"
+  },
+  "scripts": {
+    "test": "rm -rf .cache && node_modules/.bin/mocha --timeout 4000 --ui bdd --reporter spec ./test && node_modules/.bin/mocha --timeout 4000 --ui bdd --reporter spec ./test && node_modules/.bin/jshint lib/ taglib/"
+  },
+  "author": "Patrick Steele-Idem <pnidem@gmail.com>",
+  "maintainers": "Patrick Steele-Idem <pnidem@gmail.com>",
+  "dependencies": {
+    "app-module-path": "^1.0.0",
+    "app-root-dir": "^1.0.0",
+    "async": "^0.9.0",
+    "browser-refresh-client": "^1.0.0",
+    "glob": "^4.0.6",
+    "jsonminify": "~0.2.3",
+    "lasso-image": "^1.0.9",
+    "lasso-minify-css": "^1.0.0",
+    "lasso-minify-js": "^1.1.4",
+    "lasso-require": "^1.4.0",
+    "lasso-resolve-css-urls": "^1.0.0",
+    "marko": "^2.8.0",
+    "mime": "~1.2.7",
+    "mkdirp": "^0.5.0",
+    "property-handlers": "^1.0.0",
+    "raptor-async": "^1.1.0",
+    "raptor-cache": "^1.1.1",
+    "raptor-detect": "^1.0.0",
+    "raptor-dust": "^1.1.2",
+    "raptor-logging": "^1.0.1",
+    "raptor-modules": "^1.0.5",
+    "raptor-objects": "^1.0.1",
+    "raptor-polyfill": "^1.0.0",
+    "raptor-promises": "^1.0.1",
+    "raptor-regexp": "^1.0.0",
+    "raptor-strings": "^1.0.0",
+    "raptor-util": "^1.0.0",
+    "resolve-from": "^1.0.0",
+    "send": "^0.13.0",
+    "through": "^2.3.4"
+  },
+  "devDependencies": {
+    "babel-core": "^6.0.20",
+    "babel-preset-es2015": "^6.0.15",
+    "chai": "~1.8.1",
+    "deamdify": "^0.1.1",
+    "dustjs-linkedin": "^2.4.0",
+    "fs-extra": "~0.12.0",
+    "jshint": "~2.3.0",
+    "lasso-dust": "^1.1.3",
+    "lasso-marko": "^2.0.1",
+    "mocha": "~1.15.1"
+  },
+  "license": "Apache License v2.0",
+  "main": "lib/index.js",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/"
+  },
+  "keywords": [
+    "bundler",
+    "build",
+    "css",
+    "javascript",
+    "concat",
+    "minify"
+  ],
+  "version": "1.14.0"
+}
diff --git a/taglib/LassoRenderContext.js b/taglib/LassoRenderContext.js
index c8f0ec02..cf345da7 100644
--- a/taglib/LassoRenderContext.js
+++ b/taglib/LassoRenderContext.js
@@ -44,6 +44,11 @@ LassoRenderContext.prototype = {
 
     getWaitFor: function() {
         return this._waitFor;
+    },
+
+    getLassoConfig: function() {
+        var theLasso = this.data.lasso;
+        return theLasso.config;
     }
 };
 
diff --git a/taglib/helper-getNonce.js b/taglib/helper-getNonce.js
new file mode 100644
index 00000000..42b8ca41
--- /dev/null
+++ b/taglib/helper-getNonce.js
@@ -0,0 +1,11 @@
+var util = require('./util');
+
+module.exports = function(out) {
+    var lassoRenderContext = util.getLassoRenderContext(out);
+    var lassoConfig = lassoRenderContext.getLassoConfig();
+
+    var cspNonceProvider = lassoConfig.cspNonceProvider;
+    if (cspNonceProvider) {
+        return cspNonceProvider(out, lassoRenderContext);
+    }
+};
\ No newline at end of file
diff --git a/taglib/lasso-nonce-attr-transformer.js b/taglib/lasso-nonce-attr-transformer.js
new file mode 100644
index 00000000..eaad0299
--- /dev/null
+++ b/taglib/lasso-nonce-attr-transformer.js
@@ -0,0 +1,16 @@
+var getNonceHelperPath = require.resolve('./helper-getNonce');
+
+module.exports = function transform(node, compiler, template) {
+    if (node.hasAttribute('lasso-nonce')) {
+
+        node.removeAttribute('lasso-nonce');
+
+        var getNonceRequirePath = template.getRequirePath(getNonceHelperPath);
+
+        template.addStaticVar('__getNonce',
+
+            'require("' + getNonceRequirePath + '")');
+
+        node.setAttribute('nonce', template.makeExpression('__getNonce(out)'));
+    }
+};
\ No newline at end of file
diff --git a/taglib/page-tag.js b/taglib/page-tag.js
index 25cded27..baa4b4da 100644
--- a/taglib/page-tag.js
+++ b/taglib/page-tag.js
@@ -7,14 +7,14 @@ var fs = require('fs');
 var AsyncValue = require('raptor-async/AsyncValue');
 var extend = require('raptor-util/extend');
 
-module.exports = function render(input, context) {
+module.exports = function render(input, out) {
     var theLasso = input.lasso;
 
     if (!theLasso) {
         theLasso = lasso.defaultLasso;
     }
 
-    var lassoRenderContext = util.getLassoRenderContext(context);
+    var lassoRenderContext = util.getLassoRenderContext(out);
 
     var pageName = input.name || input.pageName;
     var cacheKey = input.cacheKey;
@@ -40,7 +40,7 @@ module.exports = function render(input, context) {
     // may be needed to build the page correctly. Ultimately, during the optimization
     // phase, this data can be access using the "lassoContext.data" property
     var lassoContextData = {
-        renderContext: context
+        renderContext: out
     };
 
     // The user of the tag may have also provided some additional data to add
diff --git a/taglib/slot-tag.js b/taglib/slot-tag.js
index 06aff958..a40f050a 100644
--- a/taglib/slot-tag.js
+++ b/taglib/slot-tag.js
@@ -1,18 +1,35 @@
 var util = require('./util');
 
-function renderSlot(slotName, lassoPageResult, context, lassoContext) {
-    var slotHtml = lassoPageResult.getSlotHtml(slotName);
+
+function renderSlot(slotName, lassoPageResult, out, lassoRenderContext) {
+
+    var lassoConfig = lassoRenderContext.getLassoConfig();
+
+    var cspNonceProvider = lassoConfig.cspNonceProvider;
+    var slotData = null;
+
+    if (cspNonceProvider) {
+        var cspAttrs = {
+            nonce: cspNonceProvider(out)
+        };
+
+        slotData = {
+            inlineScriptAttrs: cspAttrs,
+            inlineStyleAttrs: cspAttrs
+        };
+    }
+    var slotHtml = lassoPageResult.getSlotHtml(slotName, slotData);
 
     if (slotHtml) {
-        context.write(slotHtml);
+        out.write(slotHtml);
     }
 
-    lassoContext.emitAfterSlot(slotName, context);
+    lassoRenderContext.emitAfterSlot(slotName, out);
 }
 
-module.exports = function render(input, context) {
+module.exports = function render(input, out) {
     var slotName = input.name;
-    var lassoRenderContext = util.getLassoRenderContext(context);
+    var lassoRenderContext = util.getLassoRenderContext(out);
     var lassoPageResultAsyncValue = lassoRenderContext.data.lassoPageResult;
     var timeout = lassoRenderContext.data.timeout;
 
@@ -20,12 +37,12 @@ module.exports = function render(input, context) {
         throw new Error('Lasso page result not found for slot "' + slotName + '". The <lasso-page> tag should be used to lasso the page.');
     }
 
-    lassoRenderContext.emitBeforeSlot(slotName, context);
+    lassoRenderContext.emitBeforeSlot(slotName, out);
 
     if (lassoPageResultAsyncValue.isResolved()) {
-        renderSlot(slotName, lassoPageResultAsyncValue.data, context, lassoRenderContext);
+        renderSlot(slotName, lassoPageResultAsyncValue.data, out, lassoRenderContext);
     } else {
-        var asyncContext = context.beginAsync({
+        var asyncContext = out.beginAsync({
             name: 'lasso-slot:' + slotName,
             timeout: timeout
         });
diff --git a/test/lasso-test.js b/test/lasso-test.js
index 0ee1b5d0..d9c3f968 100644
--- a/test/lasso-test.js
+++ b/test/lasso-test.js
@@ -1510,4 +1510,34 @@ describe('lasso/index', function() {
             })
             .done();
     });
+
+    it('should allow for CSP nonce on inline script tags', function(done) {
+        var lasso = require('../');
+        var theLasso = lasso.create({
+            outputDir: outputDir,
+            urlPrefix: '/',
+            fingerprintsEnabled: false,
+        }, __dirname, __filename);
+        var writerTracker = require('./WriterTracker').create(theLasso.writer);
+        theLasso.lassoPage({
+                pageName: 'testPage',
+                dependencies: [
+                    {path: './src/moduleA/moduleA.js', inline: 'end'},
+                    './src/moduleB/moduleB.js',
+                ],
+                from: module,
+                basePath: __dirname
+            })
+            .then(function(lassoPageResult) {
+				var body = lassoPageResult.getSlotHtml('body', {
+                    inlineScriptAttrs: {
+                        nonce: 'abc'
+                    }
+                }).replace(/\\/g, "/");
+                expect(writerTracker.getOutputFilenames()).to.deep.equal(['testPage.js']);
+                expect(body).to.equal('<script type=\"text/javascript\" src=\"/testPage.js\"></script>\n<script type=\"text/javascript\" nonce=\"abc\">moduleA_js</script>');
+                lasso.flushAllCaches(done);
+            })
+            .done();
+    });
 });
diff --git a/test/taglib-test.js b/test/taglib-test.js
index 3166f2d6..79dcaa39 100644
--- a/test/taglib-test.js
+++ b/test/taglib-test.js
@@ -81,4 +81,24 @@ describe('lasso/taglib' , function() {
         testRender('test-project/src/pages/page1/template.marko', {}, done);
     });
 
+    it('should render a page with CSP nonce enabled', function(done) {
+        require('../').configure({
+            outputDir: nodePath.join(__dirname, 'build'),
+            urlPrefix: '/static',
+            includeSlotNames: false,
+            fingerprintsEnabled: true,
+            flags: ['browser'],
+            cspNonceProvider: function(out, lassoContext) {
+                return out.global.cspNonce;
+            }
+        }, __dirname);
+
+
+        testRender('test-project/src/pages/csp-test/template.marko', {
+            $global: {
+                cspNonce: 'abc'
+            }
+        }, done);
+    });
+
 });
diff --git a/test/test-project/src/pages/csp-test/browser.json b/test/test-project/src/pages/csp-test/browser.json
new file mode 100644
index 00000000..9a68697f
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/browser.json
@@ -0,0 +1,8 @@
+{
+    "dependencies": [
+        "style.css",
+        "test.js",
+        { "path": "style-inline.css", "inline": true },
+        { "path": "test-inline.js", "inline": true }
+    ]
+}
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/favicon.ico b/test/test-project/src/pages/csp-test/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..b34c9c79ddb5606abc55b74f9941b5d1b47397ef
GIT binary patch
literal 1150
zcmZQzU<5(|0R|wcz>vYhz#zuJz@P!dKp~(AL>x%r0{?*$Ll#>YJ^hc2FQqX2N5)L+
zzy3$Y;yc>@BV%N}AU3jI5F1%9h>ffl#2(d8S@;ivw1=KAJ_7}K&;@~f2_Oc^5d!Og
z3UaV0$_I*p<Ol&3pn_LGoC(ArcYrX64H5&%5d+kLinaqW$h{y8VuQr6fdHT&2m`?n
XM+l9Z{Cu7v0E9pA|Ns9(o`C@XPXup>

literal 0
HcmV?d00001

diff --git a/test/test-project/src/pages/csp-test/marko-logo.png b/test/test-project/src/pages/csp-test/marko-logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..d366c8f8407dddd254c5fc13bc02c6ddab9549b4
GIT binary patch
literal 31647
zcmV()K;OTKP)<h;3K|Lk000e1NJLTq008g+0077c1^@s6)_iPI0000PbVXQnQ*UN;
zcVTj606}DLVr3vnZDD6+Qe|Oed2z{QJOBWDK}keGRCwC#eFvOeS9SNf_w_erXZx;p
z)#V~rY)rGkU<0NEuuZYe2c$qgAOr~AlI4okAR&~55a1U=0zU{~OfLZ(+yM7(xk$EE
zwzui?`n%sbZ)SI=tgN=$M?N&>pzU+tz4x5+Kb?KzhqnL=IOK{ski!7Hzz5H+K(ebJ
ze9wZw3&1YSfSyW&%mK=!A_)Asz^Q=n9k8-95G+3tru$C<8-F(NZ18OdG}D04aX<hA
zNs+;JT`+VVgb08$4vypD*YOW}0)jmLO%X!<i{XEjz*&3di9L6pf5M6FWykd)o)?q3
zEZsMG_nY?>_I+RBO2an={wE0m?OFx`I|Rejpu%k!&yK+8<T&K~DR6`hLEu3s(QX(J
z(4+7Wgv4+UU3jhaG^7Fx6jg?)Q3pKyDP5Ov{{;B51d54!=yTjE4|Gok4J4q$2$K$^
zOdS$w4fl^VEnDDuNd2!o$@%?7FU$@EHuvJ%KQ4hWGtB;~k_*3%AJ2co48Zx9)!_WH
z2UyCdC0AE2e9*KLKBLGhKN1SJ65G0&tnSL){idun@*|1Kjk}9y-l>|9?&^bVK7bCM
zfnlcr?fBmeOoQQff+-ZdJT6T7qtKQpLCM(-t~CW-=!2oE-~<6^xFN)IF8<5#J-VeN
zXvsdfZQ6(3cxO&FC!o(O0mHp9X;JvTyv83P9=QxLzKCa4-M|Z)hPl(Ly(CG6>FHe?
z{%7Z7?WYechlHxhei+8HPTaJ$>2;e*PVVQ7fkm5F|KbvEX%NT4@NH2LSQQkMqWSva
zK?jKs-S$Xo)eDX*Lx0Lsynw~S388>wr}#vEM!FIAsW7{Jtb#)6&&FZTZ8G>42PTQy
zV}+oFkN?xUWcS-8kbCI!c+TC2RjK1QwQJ!oakWm%b0GyS8^5$K9_zc~4up8of`BxX
zGe-h7O|dd@L7_PM*Ll>`zj*8s;GE%Rg-cI(c^u(FQfoV7W!t)s$pSSX(;G+;Dk6yx
zfGsWe(w+#Hf$iWL-8ymt@LlNzvaEi%Y;*YGotcOQd}QFIBoY`Q-EVwzO@sBB{&1s@
z0EV`UC`4(ftaYLHvKdGfU1-CzC(5Aa(cH=1rSikq5n78ReGEhlEHm?YYGTEQf@A_j
zGTlI7A|1hts`814k>xnKH$+(N`mM;Ab4i~ljBKOLF*OD58y<$!mJPz%u5NJrrA5+A
z3Zt`eQTulrJs%&R9{zsGEAQY;YWhKjs8)id;$lJp9&QCf%$B=@pR$g&^mfjeVrU^e
zxZ8w#o;KmRt1PhGrIpzlukIi60%S7c!{rjY!FBn)thP<Uk|6W?3Ix9aupY&;*Q*aB
z;V<Q!hyGPl`!6w+-j{|V9t!~37?OV5Mk~nw&;jR(X7nWp+me*x>`#k<(ZE0nthL;C
zVvM4b`-tOPXG&b2WoY>CC!c_Kwq>faZi!$E<Dx2!Yg~crNiFYPyKVQx6BqL4h2y6j
z?Ri0mDJ{w3Ky|d%3y1HYXw%-KD$2_Q3LRn;MGoO-_hsO?J_pF{a5OCuQTMNb!jB6v
zr=Rf1wVrNo+r)Tq0b}!LC>a8bzqR0*51J5ty|%TX@I$Nk`;F^6-f%1a1vxG)#~5!*
z2AM6>#mP6b1wgA#;zs#X(!hADbVY5k+ZZF59GsB1r#``vd1s}aDsvbq6yc7&d*Gba
ztHJWTC0L?B3LEZB5FnIRQg7%qIxa0a`R}x7VGY--BS!SBqsky8>}h>rC|YcFw8sbZ
zv~hJ+4?}JL1dJDCxapA;y#9;=RQ#i>g=tk1u1{fM!x@JGL233%+jZVKIpKaymgj{a
z?-#J*m1s`=L<5$X|E0j%^M^|Lp)V$qr~h3L+VN;%5g-ywyvY~g8*Sgakulcd$b>ma
z0ZVF1Ej<Gh+K|W)5-rb3Ogo+*-x`Kt+pPATeHki82Hpqjy1F2v>u|6Rt;3azTnQHZ
z?GV?UX<xP_U$TDf3o+9IsqnCm=J~N`Rph;HeSQ&ykm@$ClNHua%w2!aOoY<Edol^9
z4%*P4@z8W(N0ot-xPMLZZ{8ue%Dh%n)t|Yp7@u7uIeCM32C(~14}v0tS*NcM97?4-
zH?PxIT&PKjRm4n-bHa!2$V_PZ78EhR!POO7&qc(750>1C#U#|M#GItP>WG-S?3CVA
zv~q8h@MDB64J09qb^-ynJ+nL7DjyH>U?@0LLctI+AMm#qbZYtJ*Z_HLN=jc*cCui5
z#RhWxBCalo(1SQC+5n#&Ei;coes$yoxUQt~N~2AC7lq`i2x6W%r#)lv%ZJkugg#mn
zgbY;VT$Ke?Q>Tf@#6SeGT-SnYE0zVeZAWC4Z1CG`NWaSk-zKNNh=?3rZcv(<F5Yof
zRagd16fOzTYGlSvbVT@x$4e8ivohI0PgbVD2|awarL~2ZRs)MFzVJO~fs4sA)8(mc
zQWOtcSgw#3-ZhhhC#R-hO=rh~4zR^gaa{7BRj?Byw`*M=7%%SmUcs8Vvl&X0=ahs@
z^(+_pKy?Yc1sBKEwjOh9%|coDSCtTUPH1rd9uv-3Q9)CL9|esdAgLnjh5LW*&==6t
zsl7W}48L6{dbdim4xk(||2Z!7oPnR;kN3b3bJsL1?f9mnuenUsSNvHR#^lh#bMMm3
zk6Jd|;Ck>t>pqi(EdBq;z+%=Ju%HJ;;vBM8c7x|T$4O0z63s7FVsOX4QRqu2(avI#
zMp{(<l_R--U}VN+wcA{=ZQtZ==Sz~jz_;bP5X0gK7J6RPPptw4p>t1X>O+PhpA|Gg
z=N7N9BH*_OrPp>lk!`$~4lUICkWxLo!iZu7JJ1jFWnIelV%|F!;l5vw3He`mkbA7=
zv*NQih=X0YW78V7?|l5rMjU`u)Z8}%DPwD)61-MgNH`;ULkYWNtCN?If5Aq(jk35J
z?<GP_=ATt`iXW0C<-iM;I8bc(fzb(g-as$H$8gcsNFgK6{b$u4^9~so+LK-9b)=TR
zXV=h<FRQZF?74)%aU#duqMRmfn@$3-X=wyW6<uA|-Dz$JMF<B%aIz#IXGw6&&Lq6%
zq&(PSakMbWQB?{c!GoGm5C_;l0Vz{@(cpmo{%q0z9Ip$*@aG9Azr}~qf0saNo8=rC
z0(auUMERl5EK8kvr5}?+i=I=F*lT>L@)u*a^&icUnW7Ue9+vU{4Fg9~l!HokuMjQx
zj^lq>zqk#*q49%^rRn(h9-qv?%1jC}x(a@{IPy-CJO~cqZ&51gx}M{&*){p_Pm00J
zNHdgX28t(V5g;^aRfU7QfM5}5+jey(x8mNlhX=WKT@B%ZAp=h8wP1i8T8ogOMep1u
z`}3C4!8{g1>F%_=$q(R1fe_Ekt^&<xSoN0x<=YrkhEVsavrbM8_LUy|`;5NgO}d;~
z-|Em>DoxBFt;^R9x#7=!Atsx5PhuSS61k$6Mgt?$N(pm5rdnq!+P?EH*KuAU@q@P=
zXlp#YCHId`!%J87MmFh@od_}-d7TOVh=bpFdS6{N`%fM?^V-{X{p#JStT(PRs5+gF
z=q#hPk%!rja;F;@02wx&&@M{1X>TDIeX#zM$Q6YDck@#zxb%#fIUm#E%NM-R2%R;2
z;P4QHK@@J1(5#fD>z~}~zg?;W0~AWiTo!=29q)xYzw$723)$j5SM+zB{{s;5q*#)i
zG&ozi-srw+rl5R~9E8m;au|{+cC@|3M>!x^y}XK|Mv_8ChOH-rAALnTe;wJ1he|5i
znB!#^p3ap>!5>k&Bzc{M?AB5z5A8q8w_sJ*@&C84ec<I*P(%yWnIjJ=K%1Ii^kLg<
zRP^9fnWR3`k1P=cnCaeSiLH^>8!yqJkg9|*R8Zi-VH44jfCU`J2Ss$5WroZqdsTiq
z#6J+A7Vb*2w{^A!e-;WdIoyb#;)48Q8}zeLFq9}aI*7;+61e4Oeps$N^*tWNn!;G9
zD!lFYDcnEDvl$>5Yary{|NR=6E-s}Amx|>U5g%0~N#50Hw+$SM_N{-REdq~CmY~~I
z(6*~yro+*2lI}%0&xgxn4FAR%gD=`XoZbCm&-0w-KtD;C!(w9GGZhpxE(A2^^OFtP
z-KSlyDSUkp2soVRg(eHQV_yPRw>ywPSRI7yu(VOeaH7=5P_V-m^vgTd?K1^&v+qH9
z?pZ9{+qVV4A3#y%vAGO4fge=z_isvQeXqdHZHJhO9jMSQld`r=GyOc^t$3cUweZ>h
zP7NGo1)-KCrwL``C@AG;NsY8X@G>{_-YZcIIMT+4PI43*26%F&5*_OyYhQ}_lHJSw
z=;OoH;7;H`d!py86Z=p9J3FjENRFI(B4~a%xw0AqUct*bj$AT1PvLk72}?SoGh=?3
zB9xJD>o7>dv$61k{b6q+Vn8~xLm@=%2qgnZNq*IFb(m_Lgi%6gr}VZ-A1mX5I(}Fs
ze0ICnhss4BjN->*sDX)SJN7y=JNFeH++NK;k4Fnryj@kjmn2N@y&$S~Z#^*-h?K(3
z;OKd!kE#Zy<P2TaTUL+SNXhx-ZOp@u*pbN)6@PuG=tED^gEpN<m+FulSBiT`j;sB>
zY=qJ$Ejw$&o~fNT7VO+EiAno6Ko8REEXychI^2cQnV@%VY8#h@L6`qXY;0W-@WhM;
zC*)LEk#-N!p(UVGtCcby;TDFTfYrV7$L%oqzU7EVX5}5_%=?%4kiA0!?-^tZZPt0G
z!Ekx!=ex`mZ!wkjvjP!Mxi~$0Lb0wY6}+Fg0qkWhDe}C^W#WGg1B=<<5V)?>a<?J}
zl*B*a3HODE3!N9*#HVI_IIT}Qco>avkE?#w{uM_Kb4U}blGc9O%CooJy6fkcQf#{w
z?%=K*q~nyKFw$HlD(Y`|A7t1}r}pQmg!-!B2${DI;luBT6VRXV4%&-MaJf@+L1%{t
zy%%(7Aun{9%GL))-8aZ}4m<MZr{5YtVY^z(JFea&WLjrW@u7|DJ74naxExxvS2Ab4
zW~Thfy;k`z`2rG~k%Lhj9Vor%5IRbCBQeAkkW>|!q>-4Wt?_tp1%+JLB9SafP;@zr
z7Q?6j;h>=NtmBG4My^^6vi%ASwy(Kld1l>3UIYc?Mk04IKd?CFc-UpcUNedVIYbDv
zG$T7uN%}qAtIg|YBXWyD3PR~AOMwR`j3^EAz>ceGx@5cJA#`T*<*-Lc0V>hnG=Kf_
zUiN<kcR|L#Pb8sXtUlKP<y<c+{12$;rFO?A?XllXRG#@-oKTula5IYh7b$Qq2>k*+
zNU4sBxL+k|>+;91foJ<E&`H?EV#`G(M^0#Hn@M<czPKr83ZCaM?pIp(q6_(~S|rlG
z?h!ez_OF^8IA!?@wvJ_|ZwkGj*y7MSK($H;Rr@qi;w?*~3%>G%^p&d0R|I|ti<x#y
zA)p7Q3|O6ZpiK?He-^Dud)s9?DE-63cU<l7Z&M7oQ`x+4(*N(W1=Dj-nmoI&b3wXS
zuEy4-**hh}P+`Y49a_(8@#DU@x_8h%45m7^XZ`H0sBP_5#U>yh1b^HN%xV`<HMNBq
zLzdoPiSVsQBVUv*bAX#TTokaf&5q)5`;#(J%$Hh3g^LesC?1>ClIxG}Kko7e_uO@5
zbB0#5(5MAZupnb-h-WQTfZZg4$kt7FsxR&w(Em0J7MFQvmqm#pcTXhXf`R;g<KbkY
zq);m+$#HcQTJ+HUF=f8`xL)nbC&t|mEA>!%r2y?R4+>vGB$E_#cdqQ0hxQhBd~!|Z
zIsf8^G1<bA5|PdjPU*wr*6_CG9$E~l_2q1l4{nidU<Pu6s$CY6f-LEJ_Lid=cqVC`
zcU8zaE+kcNVeP;c&vEr^4y`qP>pwD--F-u@l6|1LG%^Y)wd_$f%w(WBV1^6a4wQP!
zSGR4$Up;CCFB&43XG$78UC>~4%4x~`noUjaLi7^FrH|4UQfzotm-POu#lKs$f<Md^
zJCGKB1qzSbIj~0&q3E*<kU*68{HtXyyG&I&&J{5^v?yt(E789pXAS+J>}DTtsTarP
z`nB`_<FkQ9wf&%knnDr0fmCv_i|}K3M^8DNq>V!%^8QX%5>bxyLZyNN?aCl37YvUY
zQ5hqilCgf^Iola&1d1gzQHztB1d7f;T8$jKqLE-ZK>G>$`}Cyr;;2;c5R*0zg%l}-
zduGh2UN~wHB<6{7#5<9Bqf)_89Cp~~Ktv%b77BS?m$EJJ7<Z9zBSK*6;`Z5>c$7U7
zrQudXiV`^pMWOKcMg~-(7E@RWPajv3?oO@R9N=Dt&4dEdpoE1*6nxS-m;F`bA+vFJ
zsQn2g#E0ZGFjJ^W{pg^4#{yZ?A`R!cZgrCbFG>gUZ3{$O7g&i-@TiPVv_6{P{1g}b
zuQBp{;Qt*>ikjbrO61Ja6s!9FP_v08WGvN-p6O6yo`)VI^&y#PTW9&!?wQi`gOL_)
z3C2QH+;N;Y1181GEj)e)g^<JNh}$RtLuqBtVDg*z^ND#pc65l&xExgLY*rfcrbv`N
zi2K*8yNho3?$6FPWWLI0V!{%^-8xz#iV9InAZ-nr7)1&4k0@Yk)Fu?~FADE`P}!$Q
zN=Hh~ys(-lEtZ_9T05zvPV&6Mqn4B1L5((1dCd_aFAx7E$18QTq>M!3xu90}p5Q9T
zY7+KZA>{DuJxUppp&Olt(r{EPvT_y$LNi<pb(4`7YT=8Etf<;{iSY#NC+558*8$(A
z<h6r=3@mXkN<NRu>q+}AVH;5D`MkFO<m<-^!@u-=XPh@Yf7Ol5{Hhn%mc7XKZD~-4
zoU?MU?US<1x(_$w>d>Kd2s=tTtWG%4f%b01#7G34StOvACQ(0n_KbY>NY?*x&Jja%
zxiEOmf>+s4x*eGyFXnDBo%56Vr?w>2j*E0jUlqm@S|TOrL0@Xkmb^3b>p+D0ddN)2
ztJm5^i9ZGn95^<(iA?l8)vJKw+jFG4WnjATe=IGrL5j2^KXN+AEG_a*20{j1DG&re
z=5;|(zHZcHZE60ay;Kyf4fUBmp56Bg9>s?1B(|t7?PNCx8R|L`khYyC8JW8+t-ZRt
zSNr>L5yM6YL*x)F;(FE^4*0m1HbgER>e6W6dM&JSNaA_6&$#d-6+e+=BnkJY10a<_
z`n>{4l|hOTanOZdk%Tv$)Vtm&ATBK&;<~j?1<$+UWp7d>8D!4qsG1{yU_a8pEM5&P
zQ2Q!&0YoL=EI#oawXR&pip{j(MGIsfg4hZ~hT5^9U6%!4at<?D`tZE*b8GNy=<8bj
zzLDJS@8*h=x3xI5kSy+l=33Dq)?Z$UGo!mVxi!+%Y-tPFRm6THt_nLVI;>Av(1ijp
z441xjs*gOlA|w6Pl;wSUH0%F*F2REwTF>=CJyix}hXSJ3y+cL@C_0nhOu9X9HI>Y3
zgP2MVec?jJ=>5>NJ@LJYSG=#K)O5}Pb!6vy#0*T11d*L?@rH5K(4`a4*#t&vwSrI*
zVrZL7kjf7Se4&mb`1CapY{?n878~Jf`cK>Tpmpm@Syai#>b$yW*tVmZq0FMX-y~0d
zro;S*mQ>D&!bUN);8#(KJWxvd&q<Yhm4&(=#?$+lblR%4@~NRI|8~z8);uB=;9gpR
z;^qW|u9$Pll17`!?c8`~*K=^csW35~manL5_5Q?)Z98*2UbW!&7onH*;WKblte}F?
z-rkaXN1j(N)$<~||M>T-<b~x@EE^~(8f1rdeX}?1-&gJqzrf-V#t@*Xku);r^mnZO
z+u^CFzEIzJgoI3gMu$F`n$Gcgn8D=}nW2ATwzu<904N8(95O>j@P4{?)cR%LYW}Yf
z(-;v7nRgicj1}$jhjxs)+qBtsv=%<^G7s8cX@mYl4MJ1QiO|3;J(RBuf2Je3{OTZ#
z=in*pFR7+3=rMcWHEmD++d}#AOpsG64hE(oeOX=rmC}_|d13Ih?P&AKOWovaet8^C
zbieS_!#8a?dF^q#L|S@#L3W?dV;W@>hBox~th+K>D*o8@oZa(|4F;YfgRAg41`eb4
zH1bwNi|HfQ{ztTj;AAHX*AEx1`>byLQr(o#i}J7IU<SP9r}V0q=Us7Q!4gl*75`H*
z-RlC#--qiR=T$>7ihL-ryEOa{2`%$xRn|`m<0}5g|9Z{7YaM&$r@rrvGiV(`S2==1
zJ1k%p#pz_qbvDr8)*47fo7n3+;XSU|ey&25n>C|-sYy3X*z?G3Tk{k9cDYssx<<t1
zQO0r{^OdL_Z5T~u?C$SgaXqC$l4&+e9)9lD$ngSN|662LzL<iqhg&Lmq@<ug$xc-M
zsZzA>vn>XXK51<XLg6up#V=GX8W7O7HY0Dfqc*x>l{_TP2k9*qFrU}Cct{|I#XY5=
zjnzLASIJ>OWv_$jWdF5Agv@2+k9w*|a#Xd)4inuRIs=O;cBkIXE{!6kxYjKBKG=%6
zJm0zcnkw^3v5>0jP?{ON@0lm>`aCyNAT$M%mU45ZAb-W7+TWIb&`ZO_Zs0;D-SPIc
zV!YNbmq1Vq9ZB{DC}?RA>4LQ@io6ACZE52mI$zHZc1=&0w@A2my1~G<y*o$8oi9W_
zBq3rUAGQBrQhMV+n!ni<J_t%EA+m9A&$K~)kqZeFHYTo-D1~>yx3fPk+tc5vrmw|S
z?BGF{-u|AXoO~&@LiSPc%n}v7RL!KrYknvnD)UC~BW7LUP11n*P#!qtTBaJk<ivt_
zd>){nZT{GuKi?1*^R}d$(ZmOVl5TJ&aa|$lzs?4CfQy(MGKi1+SFPJx+Wo-IVJIr3
z?ii=GJJo(%Tr)SwigcU^;~QHkp^Z7bCwG-quH>lIiN-=m;n$|d?5#cR%0-gI*2Xne
zlXAjOZr8T#9Cv?R3PhgI4M{^NdO-=g9%%>eR>N~O{~-*OMm8O<CSHkZrz0+h79H+D
zvUmH8UpY678qYTREhwB+jno|4`VKJ;EFy_P&MS~=N%=Kmg!bE)T~O*-_m5IE#GA!J
znx25YkNy5@Pu}^9&jP}Hj?!&)Dur8SLr^G{Lf6mbI>d!+3FE=dv0+)!`h*|2#r*Uw
zBuGwCM^W=u@X|?VB{Ipc&>*k4w684FC=>gKqeC-SNmSy6$9rnRhO~mPH58WZipj2w
z`lgsn%19ZT3h(47Q1<4%o5;~tO=@EhbcQHw7$hIjqfVAmG%=DI;rUtI<}j@#FR0qW
z@x+ErSsBDN<to1W2Q`WfOA#rx6ky^ao#EHj)MCehXC(szMOACX3R2^)%Bo)KIc^(m
z8sqVd9i|dR&n}HU`oM3lfn<tQNp<We3K$Bi2WUj~<@wi&<?yns;k{CdDJ&B8l<w^N
zSgtsEgJWAeXr!j32+)&BDpt_q(!9jL2vdtYpU7{jl%;A~DxSGzQh^3_0%b5c?tZ(g
zO}(@|EngUyLyOu7pVY2=_|XyjhT$3S-nojU0{-u`0u0`vf;Of=sERpD(W*>+KB*<&
zoRIYw1Tje;n&;J{r>`hiDnImG|7q6JVp+hUvd%&Oc*MeC0IFd|4x)N8DN%KB{fC8-
zK9hPY&1OSMOH7((!j5}>d0iztF~kTZ)YJ->P{I+(QY5(shUJYYbnIY}3i%I}C{G$8
zUaG5W`BsKZP|i~Rz5Xs)(O)5EIVlFBl-P=8eL9g5J9<}W&^@R|Way+NSTq%bG}^vl
zdlN$0QoIf=raiyk+-9N8Tdn|9h{^zEN5I6(^AMpxA1Oe>dmH+`H&Phg7?&MfEp`YA
z#dh|m+P6rW-r@k36dgiBwBq1L93C8mwk=Q+__^&u=peb?JlP0MxpqRifBn}{`|43c
zuNa`Ssu?gfy7QL1Zu-^-5#tL+u|HftLFkjZmw_&+QGko^mf`SGUuEg(gnbSRV}jDS
zK1DN5bVcyUDf;fA!QS)@DEiV2;&WX2e(+E>Tl{N7=bok_6i{hjISkq*knpUXkhBOu
zsS-@$HY#0h%6VZ-P@3MiD<!Qh2f@C5Gw%J0TphVe^Th3LACx=?bB`QV0L@Oqv|M|)
zF3Zc3n)%%Lpfpu{@lzx{dB19Ao-mCh7)B~09Vv;Q`v|A^l>9}6(3G=DwnTf|0!bSo
zl>1NK!ep&2DxG622IxnyU3mB1^sUQ9sSq+nn}_y@Nyy75YF!s2D1!$*II3(NOY#eC
z**}5D1f^-el5JgAC3)M$vLpuFP{ii=qg<Qmea^=6G_UZwB6^y4Bn*`Fbv+ssw2en*
zoX_;MD{oHd{M6W(*c0&L73Ou1jkrInIKlXA-LS9##?LK7`_no|MLd70R{W0-IZ~Xu
zF0ChChc@T37#&(*0^9a*IruH!%pz;Tx{RhAayY1Nx$?m<uR!%4dO@Ud8{Ueh1+*`F
zlSp*FNv3`;G1<PFnS@7fzww_ZcHDC(LkR|sGw<G`%A{frk%I&E!F)Mj`F>T}wDWjz
zgA~Tqh9#tli>Legiqjc9g@Q<lWgQYSY&PqDV=PzsIaeD!p;3}O!RLBVNBN+kC=ZR>
z8%|h}_*tA8T4{|9zF^S2`m4Vw{;gRz!NF4l@Ya{$g?D7YmBTqBKL~=6snYbd%hFw6
z@nbr7+AV`QC#3{@?4F`}jna_kE+U7P7kQ+;BWGY@NxI;c?KEoND49cU6Me^Ti3A*r
zhj}Ggf%44A)A!%_)y+^w(QAA4F&p4o3Z{oAzy%A!rZq~t#rG3t|M!an`kS~LF7go_
zOqLFVK_v%!ye{aGCZUa&A%Gb6k->DaXkU{`acC@kV^OMK+7F^|Onnv+U7VS0@bl@k
z_l@p0<sE)ZVJ{zT-m_O~?|o>!^PMM0-CK2q&8<CmW(7*)Dd-r|z*pwiS8}bdmR;*o
zLs4HI#w2`baKmwi{jvK>?)S$Wct~kNUgXm;nS4McEFb6|N=5>ug|s023;K`S=<CT7
zAd30MgZ)%pgImA*^(*a4VFoB^qn>#X6|}XT06AqDbjkaWxvd64LmeoV-Iu-MiO#N9
z_!6`&Wx)@nP4>wpNbw5TLV+i|0eFGF6W9`CXi9dS8Mdw$rQjJuY7`zGp8Kg@4%)d7
zF2U2F)pXf2>RjDsO0SkA=#GOIY9NchX1%ffjz_$6$&o%A8^$w*U$4%>`6HbW){VU)
zrge%l8&2xzxgEc%#lgb#o+|R_d2O)mTUq(fsJ$3#avE27aKQFE^0U4LwH!^EAk3y=
zi6TH)oqVp}v*zz4au&s;eHG1wefQt|lU={Q@!K-my{ufS0|)`gS~qCC2ST$QM#Bme
zMt%a4Vm4mF5&uc4|HN(nS*x~#vowRFN%N}AgJp6aAu82`IxroYFcfsaN@W`1)6(RR
zljEvV@$c9-R{SC~+1~`=`ZWvI`8kB6)f7dU2MySQR_XiU?vW{X^U7ZB^Fd5n*mDJ}
z?v`Kl+(G?szw`s^^9g-E&)k+>&<q=1R!)K=g>&mJ`rbWbmEz}@nTb#MF==4}ef?Va
z+VeWycMN;}H)Pg|e^VZ1a_yf{*(ZK@3)-?Aa%d;Y$c!GPN7@xg_ACRpT!=z2EjA9>
z4r|W(723Y9gqXSjR{Kvw>7hsOeo-Yi^9U7IG(ZqthtiJ6V0y<mm@9js@8pwUcj~85
z490*r+nT=6)UN*D;oo?!Sc1d!@nBBSa?mSR<_j1o#?Asb$9x*?%^>=G32fi+>7B*%
z@&)%+-Zc5p!*yL^4nwAFgRDs4xEvJO14C=Q4s^ecA2e^#Rq5<7CMG8EP;z1F=7%cJ
zbA7RUR&kNmjZXV(?chyIz?8Y>$CUk)Ii<bhE=`h-iwjCe_gDmbp3G&R=Y?U*s8YHI
zMO>RM$ngbH&NQ$6UdWy$4ovBXT3bidWl~PI%@aauY1wgq#gbjG<P@f<*~v>yiY&oc
zZu%c=&3r@~Tn%#H@;X`pa$5#C-Zp9iNAWi~RA4~79PDWqoN2Ft?5yk9BU2lf!VDmW
z?UZcPzU6AsKCX>O0qVsp!BcKG+CN9%xkBlZQxnctW+p1PQfw%6f;qC$t~@c!!wOLW
zk8EF79c3z9DGJ$9*s-3dkKeut=W@{kvX{`I6;e-d*7c&3)XhC<0eu;WsJ{)Ms|PRt
z1!cSgBqXb(QYVZs%uQ4(S4c6Le^o&uP>{+iGlqFp2`_|2i8FOX4W<oV>k+=dG8c{m
zqZX$2FTQ0}y|=SOHYBh<HgM8^;lF8CjjS#?Q69EsRUX<kwCA0S8W2%JxF0kSbIagN
zO+#fg4{9a>iLMUFq}GBZrlBm4Ae2^68ncMFN{z+*r}1mcB~3f?Xn9p5dkr7p6k`VM
zpKAF&XY(W@;}%05+K|B$+^bEOUHl!48tjK`C_Cl6P1od-VJI+5nxR6Q#^7v!1WeRc
zj>n@U4nLq8+v@LvQf=ry*R+u84!v-%s_@>VAw4g)JZW4^Qj<<AyW!mxC)^no-4Ia2
zwd*T<&_)yx!x9RA5kXR7;)?6-kY)L_grck$F)f_5e_BzW=lTBsgh8;E)<vjcmUzw9
zWui3>yuc_I7RAe`1kZEqMzYEP-K(x<iZKwSeZ`dTObonpWbdY8DPOU1O;)8ePgV&6
zYVWf^<Ma^i&OYTuAO#3geH2c<J4e)jt};1sElTC_qos*S`>s@r(9WIcFr;WuW-C4I
zc0~+wwDbanjmCz{*G^AaW2K4*#j-m`(`6sl+Y^u=x!CO6phO89_YUE-=R?%Mb(R8T
zlD*^Zb*?A&^7s^5gcMeFYuhyyWgr*P1V$pduk7_jV98n=TB%Be<O;U63D3O{<Fcb7
zzh#N!Hc1GHl8@?14(CPr0W@$J#d3Z6w<%SJ(kSIj@44E_)BcH0D-O*YWur(kOys7&
zxp!>%QyQh8&8A64gxVsRi0UjTM(t*^a~e3+)s5zW0m4&Jaw(7(yYL{@`2tuJTKJ6A
z0k5PclCN8AElm2BrWu^BPuH|yqxPL8iHXQ7P1-nvns~9bFvmSA75(4rc_R1W2s*p-
zMEwf;!!o=?o<gL;0TnX19*gEMlLjV$tfMYqp$rapqaov@^&-OUa^0{Tgd*3~rd$+P
zF;(Q<MI?Y|*)BT%tt6~wiyidt5G*tihVH{XK!j67$x}o@KjAo23^hZyZp0Q=iq<Vj
zEAaiN%AR{ywJ~E2@zfMowEzd^Y~aRBEDCbtiRgL~3@rf-u}q5jqEReXp1vLb1Yha~
zYxQA^An>O5PK{ix>1yMM0#@y#2b6{7So?Ju1j2$Y>2%1uk3%^e#?4UczRQv6OJ7kF
z>C0qYd#PB&KtHu&U9V-M8ARkDdNyfKjnhZG46d_`KkqM|Lo3SBV9wZXXQRw?sCQh=
z_UC$mHdYNP>?b>oJPJl&;4?T;E8K=YV-mnf-u-$<M!BRjA-^UruQX}lWo_ywrf2*c
zE9KzP+1^vW!ys{v4XYkX1D`<YROis*LGW2O2;Pk7?#wVYC`~h`5?7XO`$rx^>4p$e
z&3Wau_^Ia(HUw3tgF(#|I8pKWEIA&+=~U+jxSo0uC5Ff4xS|rQec8$DEkAfhQq-s`
z$SiS5MF?G?d|r6Ae8lQ_N)ElsxxjV&JstnH&gMyDp_8B4fE%`GF(qQy0i_%fF(YZ&
zXCu<S<Xsr@+iP>d7fJgfy2{NsUl8Eklk8+*W?+ugb_vc(=b*dhxOz4rK#oDfYJ-F>
zLDFC?G*xu2z<svjf~3_9T9#bVt8Jwe25JNv5sm6K1?aEKB5bxHZz18o^zpQ1+dFgF
z%j2uUuHH>ql6tz5sm)?R;aRO4u9q*op8K5=b%}5qD6ClcNA)#&-?}T&P>iih1a-2{
zm-2V)8{PXwPIjwfHIQ$YQSp`zV(tt%Up&+z{m|~7h_+k-LeH5avV}c-AE%W6C$<R9
z_@WMB$dIQXbY_u_8y*y?sCjd!>9T>jC|>EvlN^LQvlErA(N!VGUyVpp>W%}a_!CvH
z^MRg;gp994%1WWxMHN3VM>1;UQZaa7bjJNGkI@*WQpb*@{DzJ;<uYo!L)|=xP!~aX
zybZ?leb9vtIvUGF30)%w`Ax}l|DDI^m8S7OZHDoVly1C+`nolDn}O(GK9{g0S0P6T
ziBtwevTXsjN87jmxKE-8>)<iPe5;a1gpZHxz1(s<pP0Gfa#CS5J<uU^9}K{O0rh22
z@}CAbEC8#kZ;pHdQ&U?MBY7c{q_sz450mzNjxmMyETS3eWO4}R2Z@?dzYS8{fkW@r
z&}x2+jhC<VwJ;|cjT$z@3-R2_C>Rt%I@nZBNkA~Azzk~PP=SWTdomXa6?c0kp<HaJ
zY<(D;S6aZzPHl^81-}wP%*;zB4(SU^;6H5wtMK{Kc4}BrsayqV<u&-DeQ{}Hg7Ce`
z<o3NY)3>1A+c54#itg^*tPzNY84+juD1n9NHIickGt#e@Qyp)k)XBIUSE?+-@bu)r
z&g65qYKqd>z%ClsDFah=I21;UV#C6OUi*a*Qm%?5&l5s&Jo_0tJ98B~0xd#b=PucT
z6V+_wRo<W1d4Hr3RuB?Q21$g{hp&a{89dv+QL+8+wlfvdLY^ZNG&l~S<g!vBnr(F`
zP8Vv3kg24gy91!NgUwMN!t;(a6ekPLrZ}~5G|x%pYtl(|)4s_N#%4s7CILp#LK=O+
z3_O{)VW(B8kp+*H%EP+~h3ll43UjIg5D|_npO!HbAGL#O+u2!iMK!s@uccnfbm!aJ
zIw0K^E+h#OR%UPu%@c|XRggE%aqWFONA`XaAF2f+lN|C;xG3_WHL{3WoG}-YrIld%
z15inh0S}eB?@Qq3OW#%!skbVo@%qDcXq}1LSK(n@&*wu7`JlWd7@gtv5jeD1(Q=$C
zm2_juI>m1lL@lQjM<F~M4Ubyb9#KF`sld9O>YS&#4W26cKWIyM-)&DQm-umY@4)vR
z=u$p7UGlzHw*5QiMwQY=oQF2>qY@OJ#CxU9JG6?0{Fl28<C2W3o)^UBl_n@{nx7~;
z&W(=mKiYinX}S_Ml9VfGH#)8xIVKwZK;VP1?6{9BvVJNHyx61>)geDNF?O{p#JHj;
zEruOk!u@-l53EIi!Zp)pfNkDXb7QjxXNWa9y-{Ai>^yw0<e_MI2Q}x3S`G#k+}}_F
zegpuRn3lBgpqx8&0f75AQ!H=GIhDtnZ9A7qaB^`9(w+tR!^vl_`6ntn4bYN)b^J?X
z@B;RXxmPAv%CAI))*fH61Cvi2(6>H1RC#$ARIf~=925bA7kgm+O9o_RJ{KGnmngW-
z#x_;G4dyycFa5e@#*>}N#J16F_6^Nh0d!MUJX;=s3Jyvs8s<Dpj*kFSOP{Q?^?j5H
zf5CX=QjjW3FjFr6YIJ(y>n6o`BUm|05Dkr`CVNMc@*q&FDOLs&<Hw^ER)BMTjwIOt
z;qyn`V&(4-1xnM3lH7ymnv)0Rbv_U&C}b!$Ton2td8NtgY}?`e&pcB3+|&~SChKVA
zar}v$6<9kx1)g;H&N}k)iXx(wClx5U0Tj#O9F-~|Oy>NZdnTMM@j_{VP+B@Kr6}*E
zq!XHROcYogwAC(jpI-sP=3pRa6D4rpLf^Zy;5c81)uDw7C86oBHw@!aD!2$EuSk{1
z3MNR+gD8kE8i)cY>HgK*WLZh_TKs9LNvck<x1So_yMYqbc@t6hL@)4Kki+4q5g{Sk
z7+V7hLRBz5V0th|+zi2~Wd9-byoU~UvN}1g&N3z;&D>|rxH=S~%FrCHFA)5o#T6}g
z?^E{1z*Q}Y8_4|nJaH3VqUJ#3N7k1j`d!ps+L#(KGE=Ee9Oj5RTMo^*|73Z=T~f?U
zeB5&FYFyo5wkRN9u2OaeVC>X9glP{HubTBlq)}dSrMx8wgPn}UyY9YZYAXukT1(t{
zA~xndy}i&tJ>Af=YTaA4RLAS7(kRZb(P(z^vzBe$Z=&t1A=l25PVIfTili(`iUWm3
zsH?yE_$m;t6*=!3$g(Q-^wbpxQ#MJS=H&>R*XuLjN7^@B6spFC0rH_f7oK`HqKvD_
z3Fqrm)0O`gvX5)==7^%v$178?N-BVRgbf7d_8&D`ch-dNHpI#aHb)&v25BAK-NWui
zidx0R3sK<+V|}Z7wChp^pnb`zq~Us(g<xD<fY4!eL)xP*lG#F~a%HS3mgHoXq&1z%
z)FvB0_HYC1Nmg{FQJym1$ud2gNwdYZaB^H#?D7-)#`k`TO6yo%cqj^|&{zuBi!!km
z%dDbHu8ehoobCi~a2%M|2rJ!U_GfY;@eMWE_71V1a8=cA5pYgoEYg~b-E)clrX8wi
zyP~#0=r5k-gn~efgRWk^=Jd`M#}##JJbUj>@D{Td7!79|MHo#9HmjN(TDZ=#=lxIK
zk-yq$D({Zdp*7g0yfcu!@04BtSM?69@TC?w4<f?3U!(CDwR?!>q~m_qR=vwKRk=8>
zVh4&1x9i3S#%$|*InTSJzIuw=`0*^E?t#E;zk+dT4HF`^uo3NR-Y#$IXz$4Pb|Wh2
z>Y1b7o<4B(WG(Eth#N{7Ml`4QiRFlal_<0nMw-4#0yUbIoxDl}!Q}p2@{W+<Ir<a~
zpavHEv3>a>P)TU;Y}sZ6`D~9}E6IGHrqQUGdE&YTCl-ew;oFPezK3dU^<f>tGLK3U
z5xmTiix=#{C+us>b~qekgr?ff($u#Va!j9^1el&e!hf?!<@572Qx&L%mIU*J0BjTP
zb}>dpOjk}>o=k01SQXIEnVUjJ+XX440ZUrq1*)F<0QEtN%W*|s=Zf#%;Bof-RJt9^
zRNEY-GaXPyDVldfSafqLa#tc;EgPWkL?%YNI4a+oC2}4(&K^5AwPm5k^%N%RkZgE?
zIgS#OKZ`9pPlsy@hxlH$P-`sQR4N$FL>9N$q5l=siBu*zM=m}{dubY$O%H+3C18t;
z5U53wo9AHcGa;E4V4CxkNT8i;grk#X=NcZfO_|X6nJG>E$mBHIz*(r$ID?#l=EXTB
z$Xfymh_Z-^$P3es^Vn3mygkm?Fom<ys`|1X!+4LVQ?7EBR$s;1Y+3)B?WmrW__`BB
z>&WHp(k8m7tUiT@V2<m<Q@fu5=;%F4@E)(U;(@krIRq<<;3aWyg1QVXy!1{n|3xL4
zzC_mav+HBSRBiOq#0Vr%i&F@RAJvwn$SA1oDczDc19ir{yi?lXg%nR{ELNb(rjsY0
zs*dE87#xiy3RGXIypE;>nm9dPG|s%i!54)8R<?u73{84PT-`eYU%-hg)XOE^yU`7T
z$7cmfl<@MVBHZ_=fZ`qwT&?Tg;X40#o~ph%tte*%G1d()OC+zEbex}hK`=zRm<Nb&
z+)5ctBl&K_OuP(Y)V?I)3QlFa?|Dzs#Db{JLXFVGf{|>2CI`S#m4vLCN}1SoQq9>H
zRO7=nLi^XZvy&U4E_u*KhNTucCu!M86EB9>`9Q>KOxzqcazpo@!_dD&VG_j==ZFy2
z@!4tUvCF7^kM91_{hqnofcx$Z;of_LCi3BT57?LEWwc{+XhqPIrTg0SZB!=d`BidV
z7ER+>`(_6Wps*5;x?z||9M}6~KEEMOhZZp~Lg>B|ld0=^aHD(aY>7Wq%~;mgyZjnf
zD;$mo<5Omdf3H(1f6kb78_pW)$lXQDg^`jM%{e;i2aNDp&Gvvk)Cbn!Uf{mkuui{R
zywxq{{zXl-zn>fo1`FWj$)N~qOAs#MMdXp@kBZfCU9KaZo)~sFH|HME&!o5qCzmI|
zr~Nz1OB4vDHCKg{V}RdN!3FRJ4zKvZefuWd&#&p%F8BPHv@qVUHch@r50y)@Men<E
zt+diDF)-J8@ci@fod1vj(8K!Q`BlkvzGkZ0JL5vBwC<#)y>nWTzg=?O-^dds8`iH~
zu}PJcen0TzOPNHPv`QN-g*(kQ64k9fGBgSy)0Yg)6BFyZ*MYyR2!TQ!H0s*XQd`nO
zezTHDUFZmP`31?n&?i^G3gt*UE~PFB39h36A^2CA%wK6uS7w?U)KSLO^TjZzXdd`c
zDD3F3QScDj3OXcDb^)}Yp}v@k9ZG?_t>P*dY7#p!w&H(0$92oKE%!a?{l@Xc%-prB
z2(VwA2lHXAVN@xh#B!x_jV3Fv!8_U?Td@ODf4Xh!p6twR^78)vi<ftGy^~_TQcTQC
zka)aO{_0dA_iMR{dFgw@Q<E?`lZURJ<x!KbB{^J*zxoMC4W9{<y}v^gFEuiF7>rlO
zXRcbmJo)vr&9SKHK#HN!ftc0Af&1e`Z}9C@f1{A|sbO<I4{M*vgA4Lew#^%%G_~GQ
zhLYePmxKBc469Cd$d47RO)Gni@3T0&cSvmAz%uR1U3=}1%w>y_-QMei`|1K{H>M-c
z^c?d9{*Yx=uIWe^Ux_QML<=`0_PlmO`=~71`mcD(0zJ-w(hRZt-qFb~JFX3^DOrLJ
zduVbRVYIsR`-I|G&8>hl5?NTLj3NUxuEC#{zV+OdLm5R1db~jLW0HU5tCED}eO(C~
z!%I{qs0RTYKQbCmyGYc+yljFpjRGc8W%FwzacGysj|#iB2h@;1C$8H^E9zjzJNh;D
zX+I3d=2nQvpPlN#?wb{G^AfPye5L3YT=pH==-32IUI{VHS0bSom|gFaA0FQOsZ{TA
z-$VwEZ7waxSHYLwIWfHVUcNwHE;(lwGil@C1s&OzA$XMw;5c&!4EUqqusS9VBv124
zKJU$?x5e~|Y6xf^lt0J7#Jn;x@5w{E!E`IQZV99~&K5<7GMPZcl4uf+0CJJPK75)#
z$71pA9Y_1T++}?yTq%#$&x@8dAEqAbhpaycye+7Eo)Gd}f6FNESjl2MbK;3gx$sTd
zvPw7TrI}YGQeE!}<0{w}A#`>R{*7H2|6VCSbu(}3ghA+l%Ni{G5UnWs3l(JIU#Ff2
z=T>fqes>B5uv~-LA~HMVc-gl}pRhURJ$+<1=vD=MMFJKsxlD<C7nL&2BVDjsEY)8y
zwlXuu-9kj*E8d>r!NPSu6~)vL0+&MY3o7imvkL;@0h`Mlql5ryprod*H=;z@_<F;+
zp8IH_oZljYU4-JqQ=1JlbrIuoZ#=lZ+Nr8*+40-LfV~75_nW`ZVqxGK+!NIvRkx>3
zhZkk<g5_Z;(rAB-FJfLwl{|Ii8A#d{uo2Oy5XK@(D9&54{gz{+aWeg(zCjUueIUhX
zx}njNU0%LQ$^?^2FyHe;F+zCsM_o|L`XKAhT)TR5UIvNoYXoEcT!gW$o61?Na(<H<
zhDBL1(ll&(sF<7hWV&<ki&5M&79|{jW~N`*zHIde%H`Z=`2zi@7&SDCt)?`J0mChA
zr^5N})6icYL(uxi!^8}#qd;jq&T)I6h9tt~fTmu@ly^)<T0(BcCiIyG{5c(-`e7Qr
z9amhH;Ih@>{Cq+ye}m=cnU|{pOzv!lnMZrUGy<6Gw}Z^<(=<cb{J*jY;$vQ_6L9SR
zD%sYL$mu2rTGgg2JGn0#e&=P1q`ySOBwc7~y=f+|aHgO6q3_zyu!X9BP@}}<{UfPM
z?RIX_kB1i*^DqeB9}NQ&^D2Q0C!yw5?Q+DtvBdOiN25w?!D0?FJ33u?JLO0S7MpBA
zq$0}0-Ng-xN&~fPnOO7<R2&oc3`UGnpRP;OSOTMM8|9+280RPj!k@`jW;SuTI=N5|
zOZKb=4D$Xn8@gAlzeR|H82o)y4qs4v*e*RYaQ)cc9dBQ#D`Y6EN8I4;NVbp?H7JAf
zx1tx$<2g84vVrV4(UdY+4XBI8i_Kuc&u8z$!ZCO@_rr|AobV!qGFzuwav1PR0B4Tx
z2Dws(3QZh{F*HLL-(=Oyp=Lu#4dg#JKzdcI+Be`Z)>Hb&eA0PXqI0WVGer+z==aND
zbgu%kVb3SLROd{8P~y__BoQCvr#gYLeEIsZvio#38xa{*lnZk|P$?IFUo_jkl<FS*
z0L@2=MGNEmnr*#r>sSuoc0KE7ty-A6)Vtu(!11^)0QKR*e}Av^L2>+S(C)hlLc7v1
zW;F<cIfk5lhA0WW#@O^VQETB7b>N4_3qOxCM8vGV??>H3qqai$y<9#Aj_X885wAXn
zqac}plv9QxdGUkzn3od0vZVlWt+E+Znf0trD%Vq{R-BG2H|af^?Ja#;r|~s4RmGJM
zDl-NQ{jL}HIGoeUHKlT#qNg^6aoWAn{3+)TfmiwGW#)XWUk>#|y&($u?D%H0qxTI6
zAy&p0s1}e;wQtSNWN#K>SZ*$z3u!*FXjW-U&BUmQ@v`1Cb~dO#_$`Q1rP@8b<|VXk
zdrm`2wa^$%zMw`0<lK>D2?D<ggCwacO`{2bHBJz<L32^X3Bq>zd(^bvFsg^QcW4Mo
zm1>3CMHvR2r%2!uVhQ36XBi5oi7l-VAE{GUuT~_sB8X9oab!${&R5tXEY*jN=&1JH
zGzg+1ffQwq&EG{Sk=Tqsk%`xF1>uxc+Tb(c*LNtDl~khH4xPy7My~1TT={holNKh;
zB+1%ovM@f9n;E&DOL7Z?%SIc3=frqdS!7FTk^?j|To5;NHpjqJ?K987tfrND#H`Wt
zNh}%&7Qyn`_v;&9(#Jy7V3J(@dz31o8MRP{JU_%bM8+i>IL<`-YNK9UpDv&|<%W=j
zDa+?}YRcb)5Fd2rxZkCA``ccp^W&61kCq5J4?o%gqfcZ&P6iOvR!BlrQ_PE1)wo2&
z?6@kqrGJ(D;;reXI$Bw3>MlXL!YyV0!!_IAim>5TB8+F@1f|=$SAIN{rSFG<yJMjY
zE!(2C$#Coy|BI@N844L^0ro`3mV0$|TQz+nzEagt5!unU($!vx&Bc7FhS{-Xc>LFW
z5J-MQk2MsDDOEE!M-d2!(Qy@edy7u)lRO$p+r+>@F5lu3qB_@{yK`gLn$us3oTA4S
zf2ATCQ`NUlJoDH^&67~+F$f>1s(y@nV%58|Oe#RJeQ3_eCAi#~)Zb^w{OmAR=*(fL
zy|`tDd%LR8xw;lf31IxUgCI|-(5~0DZX%Rqq%W7abW)t{rKs)CWTkX<C4_O#)D|9)
zT}=jARa=rI?7+R>s?2;Yk?PqHmqROx4JSJ<H2Y4tv|^RM(;OS7N$b>u%Jp)`I4Lft
z5LCU(wvfSLjcy5IW?f;c+LP*4RmWXS%!}IAG2J`!snQqH)nec|$CWjifZ_vPV3?wA
zXaLRN)J~Ta^CJYEV`E-iPtJ0F`AoL*AAEt3D$PHZ)kG3P%Yz`YCmZ7&Q+sx9SJoOA
zD|+ID#T>PHs1B`;&SjhV=;OZ<ftzjY&_-(51?Lza#rC3lazjNMTonuI=ia3JNkxXP
zI2~7H%<eXd8!d-<QeE(w2C<Fav;u8L1-Kf{!3nZ`RV}eKWWr!^q6QEZ$1ZLdRG_tm
z6s~=m+TaEr;{MP9J)MRYZ*LgnZMSr#YNWp>AdGA8flJCdSxax28sB|6=W?q%$w>XN
zBqRUH;b&b(8;vvpYj#`#v`PFmUApuRKgNIoF=;O4e8o%ozcs^oEhZscp17wItX&4E
zlrC8p^OZH@9f7R8R*KQ<ETP67t5~1ShT(&fEVq~~hJ<_(L<t-CfuaFTXb7TMX5&uh
z#)oe}ko|o#-Swt0Mu%3iYx#$KNx8xE?7LeWS`^eSP65R1hy7D~QJYo)e>;H0UGhOn
z%MB)26c3iT(aV%=VIX2{65;Z2c(+u!&aX&y!wGRsMGZ=KtpF)SrGipDF75GU<N7$6
zm-fpG+#MCC_$iGPlxTh~j%H&u>L5qO>G+Xfo(7eY1e!uN6uv-P_(~()bpd{wiqF<!
zYSJ*bW+!&Nvbn*!s5#ys&VHqTYRZ>FET#dT?6!a(@)0Fn@i93Rr-w17i<75$Qn#)_
zbvCNibyVS~eY1D30m)84%Bb%-PJ{CJRX(tl05LK!6)V{GCIi(HZ@SY2rER?He$A;X
z&)S)cMszA^@Ex~BkyVP7$0ccKd!}dkmN*?+s*!nxl<awDZffXjEp@}SF{6<tIHrh?
zKE#XqfJg|T^%h|&g>X_w;C?)scoCQVh|Fv0{{Psi;NQ}9QiN<>YmW)VJ1LevJwH;K
z?v0|IBecxl@Hp*t$}|l9@3wRQhaHB}^quP9@_pWXrk*^1|2a72JlN%IOPwSAuv4D;
zteI?ki(;gn6IX1Qv}~q#)peCp>F0s(k2TM%;gpz8j4h5C#77t6QSWIR?Oc07?Yk^g
zx8g~pM2y-O@2oS;y$zu)!(8Sj<&p;y?7g`g92Q1i-1%n;B}LABiU}dHSRE=No8a~)
zDX~yv3kKzAewjZP4{lCzf@CrYIzppn9zdqGtkU>KWZ+-KcPJsqvNqVW>cp$dmFf32
z!;8ok-~o8$V@!55Jy(7}dChz-)w6#4GlE}g1nj~%p)+0T85zDX6Y{&II>5+v0W)`K
z;O+`Q*6|xoo#RSx`x_>y=Nyf6$%7RK)L&Hci`!hkylWvCDN}hUs11Lw)xAY&d&!P!
zYGBh_J7Mrk$1eY;t|$IHHis6)hBfoOwmtbB&neupP_aW4+c@?*I?$Q=Y{@>jVe1t`
zt=FD(jm;2ar4ii*#05Ji1F_YtYq~%^t-`DX!F{P{QpEhYSSl7#SNcZk>gs&x7`t-`
z_io!Metv)GGpR^53weJGT>G|Lv7nO6wltU{4QS`G*9@#a?KP<Vx??MLz?CJ`j%~To
z;d7}gO7m5UptU3&<F=#la!5Fe)`CvD`pZDO!sL9NA0q^%E13(!E13v$^+ivT1~7h$
z3f{C6Y2tZDR|sLM_gc<)H^l6DwyeTN<SDn=ZBL(3$J1axXrtvXMZK{+3stt-k^>r8
z_U^*up6lEDkNbiM;wfk+8(cOsFEYCZ-)~Lt``ki>|NNLOytv8%s+mE72%zZuP0TC6
z1o^BKmp&NqSSxnG=IjS$TYOip6Y5+OP<)I*=@EvE?9a;{s`J&8ujX3vFT)s%73luD
zcJV7tDR)zIge7uZAzDyr#O?z4K;Ex7@Lk}l9MzyULMVX3%)T#~nVw5kJ#|ie4lN&y
zj)6^{SNI`tvAfx!B^d@ts&b5p7s-g@k@gL0oi<uIXSHO0iib=MWAZ%LFhOBt#@gfy
zHm}5JRF2JH`VT4a6akG*?<GSsJGNG*M#Xtg!coxl>k?f9twISOq*Rzjq!8@a-ruiI
zXNm&q0x6U<AE-RFdxJV~%FR?R85dUKiq@s_#O8fJ{np!=+~jgcNmHII;4_%V81RVs
z7Y|vX9yl^Ix4{YUd;OsObrPiW11ZjecZA4g@oA4KkJbA&B?BS#A0%-1d7#qF9)BLi
zsj2P{Gg&(W!Z=F>(FP3sYk4R}SgTh70?N&x2ii~gR(@8`8A1$|V#K_u3XG#>E@f}G
zb7NoD(tYm}F}0%&T?h2;Rc{N_)!)iK@%YarwW+nWWP*`YK^)V<N2uBum_`VJ)_O-I
z-~)Y@{>fM?jqrN9K0Gio9)5<<{ahy$yxr~|4))y&Xi1oNm5}gP_4VAyY=F30Dc6{{
z9QeN-tvFw03-F(caJrp8J2sG?{p2W((IfwRm5J;B6jQ*;ja(<2?XP1@S^+V&qb2)c
z?HgXZZTFALH-|w`X@=4QVP7DQWp*5i?Mq=Jnp6M_Xx{;*U!^nF@5h+5LC)r<_qbR1
zZeUAw*EAa8@}LHu<we8C>(QIh-m?W6C>5vUN)q7a+;Bs{CBYY9V4IpK9w0ACe)jWY
zk@ljNE=+`tT9~>{`1XV|z2{oJbM4pSs#XeIghr|M)7nlu^P?m8-f?}i78cY_Flrlg
zObZ`|l>#a!cZg^n^BXa5T2{_$m(+LrEIuYs6b5@o{r}jp%l?I2SF$5yytm^TC_^fM
zUgwG>RH>&gQMAOxadz3DwT@WU7sgAKyQBq@#c4dOs_Af`w88_ov#2H-L&ddWp@GaI
zJM!<HM#p8U(RM*x4lUoYq4R`OKcR4bqgO6H$~bTF@&#_?Scc`H`K_wS@*4H;TCmH8
zx`vtCtG$I{(!7kIvzXldq<;+xllfG5a$JQBwB2UZVy3>%H{^0gO>}Io`p)CC*L^>H
zYN%puqsgmbQ?&wRv-y<oa1a}NU<PJYCx-9Q^g<0<AP2s8X>#8c?E}e|Qhs|pnvQb0
zrDURSV2d;I)J3c%Lkn#lBYli357G1ueGVEz&#-BFLIj<;{sA-O&krEJZWW|`pL)vw
zBnp^4nM~c8)0!XDAt*}#P0(34GaG@+$Hm!YgKXQ!N~KLX$DL6YD9oWR$&zw#n*5-T
z6CtwjLXdQ$F*HM^PnLVHUCe&gNOx`s{J4r8eBg<;3(fwOmkF!<U$8)imKTP#Jnv(=
z_(0m1WFRHuS#DE}IQ4dB^4fOQxFU?PJuC$srl!K%@4LtOlBnzUAyC*TB?%Hw(lL8;
zEp~}v71cOX*HeE7F+ykRA~R+?KN_;!@5o$fQFl_Lfe+p!Ii!woVIV>A84GRSphd&w
zpLufo%Ck?uSTVH|L`<oS<gg0W<Yu>&`xSEZOf#cKxzp?z^Byc0`(Z20q^~U364#?`
z+z~*GF<-`ld+)4lD3|;|R_fZr;*FM{PJ$hXh?(oVY^2T1r;$N45ocpPA&QUWiyNK5
zhlOlk+EJ77#b@Biqlf?Ip4kIoIoFbA8F*fv2jwf*zUCF*3%ww=TgSM(mg#L*IQj99
zwLs}e{~lxD13IqomK#yALL*qAwm2QKdSSb)yfui?DX3@+c0J*LF*_-KmrlqHjw^Lk
zgLFlMPz&pxDFoAO`)flpUQW66aoqq7@8bjc(%+9-&SNSX!odRfm$dSs=$J#&z!B5>
z6_5fCB-Lzy(u%4<{_#CG<WJalV|wMl8$;JSB*t4jD2-6bZ2O?&6u#>^mAe`RO>IQU
zF^}|qUlfL+>48C$L$b!p$w5=!660(e8eIg%a<J#2+pR5>wHdnAg;4FWYD-`atKf!i
zgXZO2>euz;wG>H-E8|K=uAK4Q2k*)kK12KKFTh(oY;8@ns0>`4kBX8xl)!U+XwF~>
z5n4a}n_D)W`nET|f^jJwS7?a|q3C+YHqR=(e4(3G&DwI0aq9vY&+}@5ho)`w@e9Xi
z%ukpKKiLmsbX@5S?!MK(x=>;h6fv9)jF9IxJ(2)3RMCtQ4ca%A>bOSY(m<RsUqbnR
zm@ZvWcA=tjsiofsm0uoC&Y*lahb%(sVp#$%H#)RP*_Fm79v{8;k?n(LKX<Di)BGZe
z?;%1sU)3}3u}jlmZXS}x=$5i$?RQ$VFKUUjzCg%`CMziNX#=MA(O@<)I);~u(0T9E
z{x2T*o%NqItzvdC2RYLcmIBHYgA#Y=y5Ug0GQ#GUDXRJII2~66mv@$({~Rm3Kksg;
zl4CU?lRr$~s(hFn0-Py`*G*{dxFwkejNS9_=i1k;ywu3FogVr@Y)q_~o!40T+)o3?
z8*VWyD2$NM78}9;?^V80M<NkH=;jyMzAM`FZFu+0xZ1-;jow12-1;kPgB#X*q>8zt
zgx*{dbXjhQsWOn1Osf4;QuNiBM$$&>7L#|+6s~4GK=XvP`elSTY~PH0xVuSnlb9R;
zCyz&y*E#TfYxEEIZdmi`^M4UrKj~=mcz;{hvg`cH%wM-?TvoM(sX^E=$23G*tL#Bb
z-nfs<GLY8Z(Qe4ErH^BC0GSN#z0Li{{8ac*vM%NuNCLX2k$F80d|A|?h7giQ^8K2u
zK0k~x=Bwl7x;0naoD1ANn$(z%%xc21Is=OzmL`#pL?klQuEKRe@YVw4nJ1t6W!t({
z-{@Gk<{g0>kG)A+7-9aqyt4Og-zweIGH;l?)W<qm&cQs<)Xz{v!`pb*U{d>J6q}4`
zt7<Xd9e3VjeVW$fI-+Lx3ebEB65|Tk!kI(KB!m=MUfZslSJD^ba$Kp%Bg2k&`>iv@
zFVg4bAZX!}^bt0mkdKf<K%@*138OVb3$^mdj>oP_5A?r^OHz*r<8oW#A!mBF7e_{3
zjECv8s$20VZx7Ss^93>@N#m~W)~_-RzRC~ci=A?`eSiED>x#!G!lG`>uaXKVPR}Kx
znQ0zt>`T2YmAPJGydy5{TeEG0hjPV@{fZPQP4|wx%@YCC`iilb7<kqI@eocsjbS5_
zD^8)jXYBrmHxE4jtS^LqOj?+_cj)F>diTKJ<%fno&1I?8NQsKPD}S2I3)N~KXzHXv
zR#7G?pWU00-$yy{amhGUXYl*G?C<>dE%uMdiN(rQM)grJuM-LAcTMo55N3y~5+qIQ
z#v9U__Eze$5m#d+igWA{@Fgdu-`<~QE%v-)yTE4b+TDW~8JO&0WM0|PK`4zKFsN<k
z%o7v;l3AU-)M!th6PH6P^gKxSE!$We9{+(?sO)S>@Sq)yZn5~&a%fTLMPX3wjMQ|=
z1W3y>+NaR!kOOv<HborR0c3eB`-_JYo6M6<P;2SIWHQQO2q!%tMM?j&jw?~MB$NG#
z#MUZojt@29mhP1l`T7^?$;O?f_S1?C59dqp^t64%47e!6bs1j%&>#<B8Jb%*guWk)
z+<WhawdcR|W@K(Djy)C8_!v2pS+R2K=mU?uh06=UNEU@l{<IRcSk(Kk*$gANJkY7W
zw>>4j*b9zg*yunEjOVm>%-?$US>h>OnNPoArU3sJ8h8~vGkv}sirPQ*rBWYH$Z`~`
zj>|BjaNJa-d{x=9Cz{hGDVfAenAKJxi;$NuFP6v=flJBa)lx3e*bdO1Dc(Nw%$_fG
ztX}#4z>B959@Pyey1U+->P}r;8lCt7SDGH3d^GG&r-xPqol$d@?WP6@G?`E3E4ni3
z|6}h<;N+^xe80Qa*87r9chZ3@giTabP*ix%fQra~$^a_-6qM1?r{WtK$FRvBmXQJX
z<vEHVA}EQ1f~?9mPmmo6WbHtbPVY<Yb+`Bb?oxfLx|UAT-M13z<ag3lx9)Q8Ip6==
z&Ue0Zu`$<viwd;MNz5nH#*@RNi5pvdff)imTiaENKNcYo_OPc+G4qY7>S3MH*m*{v
zGamw_H0_>rI{k}?4Gf<~YMUk|&1SdG+V=LAs8A^LI_1Ph(&Wa1BwRdeH}K-R%Nsk}
zPm)66C38KsRIY!Z4N%*PgRhEjAAU$n<R%2a_nb`u&2z)<+aUIKp|N8!idGb{^xbcv
zdTB@&76j$E^4hp<D7(reLCc533JwY;|Ikbt%twLaoy{o#cSWPC@pIG&kSU@WsqK>!
zt5TpP(I<WR4bpgzC-C>9vuLT!qLv|&qEAxC;9rPR2@-h0gImS)BxytagFByp>6^Uu
z2?Ka8E0w7h0IWpA2emEh{koBxz`3cZYC!$xo%TZNJ}-oMI#OUas7wWwZQa%u`S{Le
z<*XpV%e&GKj%hzir;UeVDkqW`>>A~*^_~q;_60CoF=zWWxN6xfwW{hFO={@FLGDA$
zN$-c!>FeW$@jOWiClAQi5X{Vb)DXRjbJSTB5b|ukfGMcdkljiV==tf;3KFd;&$FZw
zP4uOH-m>5D>Cpu($D0AI8`g6<YF@Vd-zNL}f0G^`dv@9;X(SOx%<Rij*h1HHG?Sm!
zEl28w_iqnfMP`5r>Nv}WVeaS~$zGN<IJ1V^7G4@SEYjrfqa<*+r>i@&e?yVgj_$^$
z%Yy_jOWU-rzdW2tU8_oRfpwsuUBjwEe+q}_U6Z+4rL0-E^SN;y6AzLs?!-$Cp$_J&
zAPzy5etH$SW}5q&=Z5FK+EHUdxZ|KhR`X`z9NbY@MKBwcD99x@b7)%dUeT>lk(xpx
zHHW8agDTL9uF$_Vgr&m+#IJ4p_6_AON$1QR9CyRovpr880rPzzO6sUYD!|Mm#Fc}u
zdK(%qQYC4r6)=Ez#3#>B<g)RMt^v$bH3xP27SI)|(6c?QHTwV-pe|$ws3Eg~jFuj<
z8r$<#XjwpMO?qy8+t9Zp9v!BX04gtajI_0Xuyy|xX9;2y+D=nJ73C&J67OT+wL|y7
zzcRW-S!1fE@m*HLgBP@^|6!QHs?Osn{lUTU+)osI=Gh^xqH2+`L8bT;5lTnUUY2&8
zl9i=fD0EayB=W@|9arpW9?N8Ik7qK!ivgsZiq5NTU@9+%Li98M9HH5d$d>2gg$z-p
z*0JX(7hOU*PD$%?Xt9TS<mJCz8*P5?DN3yAV9N+_Zg@%WWy!(8dyH&)U|J$P&ONaY
z8N;la+WbqK&XyRoix-8ilm($FC;+?JDzY2;v#WBtZ&3wn%bG>0yJ9fOM52N%K`m)<
zL*q4bMaMI3H&pkr!DQkBduv;t<BFwi65oFli;=9)&5luXGgZcmll2re4n9h{DUo3a
z`D&UXX<0KqvSI5gCvB}6NHxJYWL52LS=xJ%Ng7$Odkd>cVkkz!KC;q*1(YOOw%6HT
zd4`~?O+Kx?QT}L<(wDb98J^U>ZE40+tx)Nkpwe?~X#tp@Y9P5ULJ`=$5td}^2*S85
zj>bOUpsGik0jth~>GbN9X>Md8z-f%V8bMuyj^Baf${d+vbH=$$Na2R`4$9_6DHYwH
zL^D_L)bzmc?-KpnejV%TK0PRh7B8}hb#{MI%j&mhlgUS>r=tba$!dE&cv<>#kQ{rh
z{QSt?lwJ~A7PW^iw*q!tWpd`m*9W!L0_0X+8-{^v45*a8KSsK0<l_sRc8k4jk;uhn
zz;nJ?!+3H$oxYJXP5N0qr-a>T8uWWZx7FymqVPElR<ZC>O~dy?H5#X^n4_GK$yZI%
zX=ux97Z^EhjDm7#+0_(cZS7ZsYGhs_>93})IeO4uEQIZS>MY0h<(VOW&2hw4XXyNB
zNL(4D<BI3wcZ_7uH%wzp;FxT|se)os>fS~&;tGk1n0GX?2fDkV@iJKyyMi`yw#MVD
z(gs8U7)jQx{8<BdZ-QXTSX3|{yw^xz2fz|3xe4lsZ>B`=NhBKSLMg2qn^FUlS2pyt
z{HLV{m&sBNsYf;TEdEj^p1EOqUkiJ!N7{0w8wh>c%n&b7XpYJ6=xR~FVgxzo3)Oja
zQeU%UBzFfpu{<?i2t&DlDMHpWVG2d2{3NU{Lv8**ld7H-^qlW_I`!jJCjAiSyYiDq
z1AhBsGD&~M=jL#DPTMi(#=j|sDLV25rCax>Y^WKGwNRND-PZpdId;%#YOMLl;I=A-
z$`cM<U`g^?eC;dcsj$^+bMFGN<6seZ<FD!OjN^+tL#u(AP*C`_Go6~&<o4mr1-$uu
zJ}{2;LQSOXJ&?X)VG;q@mf`kj?CM~(8i6#!*s(1hzm!~iHxDRIUIz*M^LU)3#>P2s
zi##8rB$ygS`~E<aJ^wTfz$Vm>(Jiliz3b4!9)e06*uq@FqK<G_xx!TG%;`WC>}848
zUIbt-F`ZaKd*djpg>A|?tug7ipd+sO2D8_WCyjNoB;>nYWa)c<BU#%OlA=?Z8Lv<7
zj7I-YSdtD8RQiIZ`xEg?a=Nxd;z?>>TcTj}KLmIO0pgZ<aDdK>``zR?>GV!&jgL^a
z`3MsHsx(?)4eNhN_mBJ}($(_$z>>oAe;NG@@cr8;Om`Qrs^ZW?-GVw)WCql-?P~`?
zSjCc;C>9ob_FE9TBv7w22mNQw=SC*7*T>YU4Y@_dqRgO7Ll2>^m8qQ-?8OSQd~jPN
zvdRn?ypy@?LpzempKy$}pIX`L{7f!KcctcUZTURSp9%J2hv>+CWb__Jrpj3qi~_1k
zW-^zky76I*<Kn=~O?IZ~q1D;s=)<Jvk_Fx?dlhz;SGiMQxn*|YJ$Q<ar%bI9wr@{I
z=$ncxEDF;0WzNz!lsP|RP+Ib-3A`*jc~=98Dbu!tJ%sSP^u!vj;4MLel)miy8<?D2
zr4~^EzXAI@|1YHPd@>ku{wPW!Q5&ad|9vFNF{n>+zS<i(X|yvv6u-nvvl&QbYRQ;y
zk~Hbxd401L_SKL?R#SwivBh36QLBz=dx{0rmE(AHXfvF&&#Ot@pm0R|hpraoUxEZL
ztII=i{ieZ$eh=qUW21_z5iu$Cbcj;VE4(GO&4l<L1EMt?Ikhbu{#cOUWoO`MDs^K<
z)1Fi%$^P!uR(!uFou<D-0?%jc!2CwAND)%DJx;282$`{!;I4&vqxG@ePxWx<G%2Qh
zAgFAX9DOC3P3I}i;op)%FBWS9JUBUPv}S$MwnNmMzDVEpNK1lxz@qRqLGCYOZwYEx
zgX_0uFV=Fx)V{+K8Z{x2bWbxiMI<N4nevM)S{5}mT@mzRg^aFmd_56gZBXHwcb;P3
zXc+WUNZ<KRaVpRI=y6m^|J{^cc9yd&#s>v<5+%1KS2e6ydJJ^#a9~q6njSN^Ph4ZF
zlP64T0^Wh6xSXJm+JmvJI!iQ7cV>y(+Zp<DLr6LzaK}}D<}yJrUu%r|*2_kTCf3Gi
zY=9RoOxeD?BgFEird1(PT&V{LU~cJfI&*<6$z!3S{ZDw>=!W58nzU0C&o6-I-<T6s
z5)xa<7=Mrwtx)S4Q~8=|PSd0~_DnJ{euLc+mK988WjZH)$TFof3?U6#%1%`)LxQZ6
zs3^4uUS6ng0>C<|A?7Pj$;1?8#p1Tm1%W!Q?8OSkqeBz9A8_{xJVnGIone!Vtuo~v
zQ7NqIqyh+BWiZNiS$=zGBzmqMu;VJJX=}%`>D#4z!Uw0u@J^4XQgnYZ5y;M$fdqk@
zQivJ{U!?HLlc7qtaD;u~30dPRL(ZHmDDuHU3OOMay~0vP@3SmzXj(XyAl8gC%kuu?
z{dF3ruXr)+^su4JWl?Ai62Ls|+dq+6MT%wSv!Mu19CYfgCJKQZ1>c6;tTOjBHD4px
zTY?5BdC`u^jgyn-r*(Z=mJRkd|8RUPf9@Lsz_zO~8z=SUTS+?Ri!h3&#T&;3*}A|q
ztUIkB5p0S3OJeJVBoCZBZ8s`6WvNjME0zQ&%f@74Iu)_%+|jI@+!9khZUmoY<GY!-
z`FM;CbkDmSvncUsm@?}nsLn?II4=+Eip9=pQq^PiAeRb4J?>A$ug&S&I<-i`HsZHm
zB$KpR(*j%c63{X%c9lj*7<iG4;lGo)>_`AQS?o+&BWBEBi#a;o3e4pKTQ?i~vOsNX
z4N-fzn3vd_Re~6mfNf#+9YjJz#Y~2Iiwq95yeo8FkU=Pdy_C`H8;WPI<oR^d6TY%V
znIVyqcQ=w8qPz;qOgp5gOIl+MR|K7)F0SRC+desYeev!NDmr%{5~V){Y)Z+2J{^)+
zfAZI4EqNzVxP$ZE6dQCGiF$H{KvtB90$Mn1HJD=ir_`RvGyrpEI7!diPOTtIEGAM&
z6)2r8G{boMrL9ppHLQqX-LPH?4!}b6@7ppL48_eMzjvG?uB7{0NQg@$MXZ8$cgJF%
zR7Eid4JW8}b5AO%toHThNGx5fI)~84A2&oPna#d|0W7N|jQ3Oc&)1WB%Eg>!klZZe
z-pFszE#pXwgLwm7mkR<^LPl5=B*DysScJ+ahbjB;_sB}Z29iU8weLH(S@eM;L-f`K
zBIUBhUP|#70PjyJAeXr_uW!*KJ96fZxK4^|``SKANZ@}OXr=wSqm&kn!aPzW+yL-i
z8zgx$BWaN$W}6f(059{JYeb!1z`I0nPCURi2JeMYqhxOR8|iDWbaX)5J?W0TU^zKy
z?e%38SVb$ccD_qa$HV(U2~eoOe1_IsOZu~S1qxmU!qYG7^zn-$G?Y+CRm`GfoL0uw
zUIOhy_TI|wE;cf#j&qy;`C+0jzp#TefS2t_nVdOQS1HW|-DY>}Z9j+M&QP%Ge6^(0
zZGygA8*=Y^0A|4uZX#pTQ>5K_IeT4*Q*zd7;q|CeC`ucCei7|_@Me<Oi(Uier7dCl
z!nYUG&bUlr)vU?BbAvL7SJ*vpKhdKP3iQ`hoIbT>3#Gtqcq>kmYIETxYyP}2@OqW#
z4#}jZ8rj4{td*e^B8?7+*IdC%l$<>!t=ghK&Uqw-0p6P~qJf8RB~cC6Ov;_cs7dQz
z57WQi2oNV~6U5wAkqE&10MY&T=gkv(Jnn)R(v24cShWaVH0p-1NOvj%HP_G%JT(=S
z&mcB8|BZ4ii9Hb4$Z)dc6>Z6TA?<kJ<|$m)Na8zgMnl8^h(l8#4w>^BHR*1g;3g4(
zx(ORsQBgzq3@alVaezAo-YF12!64qe*#WUA)(nU}@LrGi_$}V2$(qt8YN5!r1YkQ}
zH^S=l-)wbS{n$mYkt0sbbdZvcb45e)_TBtVfcKV~&d=dUVh6-O{K__3*lO63Saa7m
zmP17*PiG0l8&GPRK#810@w7nMj6@R|fj0HU>4~R_9{EclczupSdLogqCGjtoE~REL
zOwHcC-r7xOBJ6PzSJ7pR*Ms@|hVyCH;O3Pz1z^WWvRq00G-+#B6TSH~d;j5lxRH$>
zdj~aNxUc)!MOHPnHXo)bcyfb$-={w2_l|@3$o}b8ia&bW6!q0;%2{rf2jVY&cM)BD
z#(=#oNq#!j|6=~XRN^z0`0kfZ0Pn!KLJvL{rbJ4ik+?vkagz)qOv#K$V{skrkpXIf
zUVUZQR;nrujVFme4G>?sXc5WKzyxm-r>dk=c#fT}SQK0!`<m|?d*32P`}*RIwmB&5
zHpQSdvIw<VsL9-DGSwy-!dL=`w?0SKYtP&B#g-eR><6cAXR~DDH0*V*b{0uPr%))A
zS8tv3g#yA6MQIvk@;xNUc@E!;<8}>$kID8uP2%;bF``tKYQ1<M-n3n%Ph8nesv_q5
zhbu3glx5j|Kks~d6_zB~{orjT#(m)Ru`DYkZCVbZOJ{UEgSQhgNY`?(a}|5%6BGR=
zL+z9$%l$qRJK3>`|KXKaXwl-uv=G&pLDo{EXfA#d_Xxw_7Tswpk=1gG+af#T%UL8v
zAx|UT`*UA#AMm^{2a)g=BF#0damh7Jg|h0bjVoSQU+`IQ(@&5u4MnMQsPsKZm^vm*
z#pmX~d-tqi&v?1+V;htwLd5**IB8|=uxY`kakvspa(@>DM`khYTW;{aRA!U!FosAG
znIV`qFmeL#Rpi{qFL8H8czJ+w!@Fk$9;=)^?pKF>-v!?>!S|b0^n0kr$62m@QWT1Y
zUnudLQ09B7>#5BBgbMc-Xm8CeTfmpfd@eq>-1$L`yfDLasS0IKnGv1IIduTn%Nx2_
z`K0VtX`e*B)B#*CwV}FCDW*aj{_BPPxum0`;~~S)lf__VK#z`&QII<<)B#*CZ}1|t
z;=d&T=YfhMA1I2#Avm@?6jJxc@lMq7rAzla2!E5sl9!!i6BCoR6RIwW>j18oIVuda
za&xi(?d<^HaSTAulV2>DalKVabv6QC$+fo^vEBvsG7F`#*w(F=I)LkCFEV}WT~G&b
zz0^y+)B#*C^->3Lz0^y+)B#*C^-?c&0M|>s)Jq+}^-?c&0M|>s)Jq+}^|Ch=p&p=7
z2XMXAOTE+qTra`N;rz~g^->3Lz0^y+)B#*C^ItfpmSNP_@76-8vE_sX`2*)d38bmb
znQKEUB`58Z=zccbT4ULVr;m-3Uu$o6ZWZRLbg{tWpp$PSy;^_2KmhDzL3I0$vo<UO
zF)S5DaX<WBh`$~9+m70V^HltmE$0H>zHkV&4_{xx@&CcmO_loC&LHZH69Z)>?tLWc
zTkv@qY8&n$TAYhbpfP-Y9mie;aXy8=FXDK%vP~$=bP+ng%L+XAFi{i^KvS0Dd$%M>
z4ZNcpZlN*_NfPnSZYjLm2->j0H0gPKejLZvSr(bIJO&Ni2WZCuc>Z#<sT*C<B}w+;
z{0MLU$vd5(jd6V5VOhd997mhXb*5=;#OFA#5$0@<dr~+PM}=%0yqih13MUiL1{M7@
z;6JZQ`r5^)N24+=9Ew8=&>#F93D@QD&b-qyzwZn9{6F}MYE9H)hOGGpa1-jA6h(eJ
zI*#ihvMle<U?qDyRv`}zKS+v?dEZr4&0^pl)ik<6)3iSp4>W@p1bGOa^9c;ZNjP*!
zsdsjgw~6`tx<t7i^%i{n5$-ft8U&WDPL?7-+~+NL=IOZCd-0i{+g?oT<-qSUhWESe
zU}^A-EK5JZb8e-gtQNaa8gS3I;hsn1Gq>q5w6A-*8CBRO51`<oUg}j#maUz5`)6`F
z?Ogn{X}9e++<S5|Zl|pEQUN=lwm3;Zb9;N+TGKQRM|YHCqyp%td1z?p!v6l9*LiK_
z@n~phplCEk`JCYneSHw;d;x#|5#M9QG*DFDfpb5??PBJDd;Si8e}MYjz6;=d>Qbx3
zU~$F<`F4D4oki6v#F-$_$;W}P?gK%6(Xxz9E(qSKs`B|5gbz`E!@FH7D?uEWp`BmC
zJ^llP@blsm#>dAgl}dw=DAV3YQIt>Oy06c|d$Q(m1m5uo-19sT_qibId&_I&h2O!L
zPLL$=llbyJ^vR;#m)Jhx2JHcVj>j<WQPx!k+Qh^Jn1YyR6#N{}iqPA;_`f5O$onc~
z?BLwiV`F2#+_Y))b;bRRYi&m8<oFifiN0fiAHA#N;hx`xYd?p-pA`i2HeDCa$1ktF
zp`2Lg%q|A+T-X(M!fsjqKqL}=9Gv@PNs_;f0eb?Se$sA&*FSg*aPOa?ey2FIBCC-7
z{X6XMOlU=Q{cOIcn}B>Ji2WY4WmR!o#>U3c9uwb%d_}Lv&>ug*b!Y4ec+0eBGr+OI
zdCqQdCD;oL-jR_}%4V~aPN%^PQ+8dvxaY>ErlyZo0xw@5k0<WhxN*~GyyWbKCXMau
z5b^$(hQsP(tTN9AGX+hZ0p{>5=<D=au#e|cg`QKlrN=3w(dgQ_=vWZImpVGyv$<UE
zJipzS&E{<4gF0WpnDF`4IU6)tzN)RQRYP0;(`ySpQ!<&fRmb_r@QC+Yhd<h$<e?iF
z7|Jt0Zw&X_Z@+J}wY7a&udo{fgEyVdJidPY`cLA#Tq#q8_eg`*aua?#bq?sE4IsYF
zFw6sS@5_R8cI|UX?dGZ@85Hg9?Oy|69*5ez#v>X&&QmJj$i>fQCrHY5!pv%6f?v3B
z;c9^ONtg|f_)U`eAS6dMHJ{$yM={e$Boej+_WF_A-P6-^R!>j&>Pq0{Yc);#`-Tnc
zPX*IT6#GbAZA|IzUU)msJ#ns>89zr+q)Wj_1+@3lQqH_G3I6H;4yriLk;Y45SKdR;
z4)Xbu$z-Mpm~c2ez~1#aA|M%3|B6H+`M;d6maWo51DO{liN1JtchkT!v3t_jV?GNO
zEI4t=lHMOz0<X(Bwys~l;iF)p{oeCiT3Yf9lxtVlg71R4ojBJSFPU+-wzgh^zkRU9
zZz={c)61TE>GxIuGaAM)7~>eW1n)J6!Q#w^y%@8mJ!EP;MX-bK?GgY_WAU^?xEi-~
zys+Y7u~_sJ49+i$2eZfto<`lu0Cw-o)HH~Xue%PA5th*SJ>vo}=Cp&30E1XEleU0p
zk8W*kc|UB?`-*Jk-R+wR)FHQTbk~2-;QB6jra*E5hj$bHzB`X$f@YIrbaXV|UZ~7R
zEnT|*E$CCF5_s|d$i|HuPl?Cl8$94c6QRb&MjI^rJsb{w8sPohE`XP(?)q@)Hr$dm
zrWV|Xr}=tj%G5CiH$dt?$y02lW=q~M07fVN$}sdBFv!EYZVWSl%d(`q11*6&ci`{w
zkUSUSoE0-sPdtJ{y$2oqD;)ZN?wq0K>{v&NWtjks`3Y4GpNA(kSGunY5ccZ+vd}J-
z+-DV>{#O7SjL2Mz&(EPXTX2WCuU+Jy`fw#k1b<Fc6!}X0c0jdv#C=ZB<udpA?^i;d
zuT;kI?8{OAifcBBq6B1Fe!Eh^Z#-WO<|(`xza7hS_s}@Dvlp1_t^#;yXgF{8HZ?UJ
zx?;t$-{RS2``w+|OK#e<`BX@{r@eRW=;(m7?Xq_hbkFRGM8a3iP;E|to_+*6`#Hw$
zRov622fh}^V;nDlcl!#Ce`E&E#g<qsc6BC`J-HNKow0pmNZ{uoeV#0*v9MZ-&b<kp
zem98p?odd5S2aS#xxd5!UyS>1b~?M5IP86-H))!FMLIoxFI3QbaPN-F_Z8lS^SfL|
zkSDTmSS`3eem@_CYL=VJE_3g+u4{L|&U*;&cNf}nRJpde^Rn+z6jdcB$Ypn;qo9hK
z>|xg`NT@M9jWwbdK#aGfQYmr6hK=R{2OMBK?{>v@W@j4%m<uFj@5+@2tijlHR{|a0
zQQNw8>nDeXh936b59SGj-?pVa)fxBu8cy%2)&`Vy*=+XX&|F?{o;wW&N!;&YjKRaW
z;!H^OAK|=cB@lxNoRrC=PDm!xfAqFA^#j;3ZDwB@*IF#J$Xw71swfqJ!vlcMAAuV7
zc~?!XI9QsNyBpGCGw<;$_&4+}QE=bCWwW_&R3}7g1F#P9BoJ42Sg;!HpUz;DZFdIE
zCG?SGGIf??MpQg^8TxG5E<}Zuq-jMFsF?7|oX!MkGI%`Ib*6>;Xn1(U1~CY_^S}dF
zuEntfD&2$o_Vw4dowH*{|L^@;Mo&)<g+gIl+h8UFK=%S@XIElg?p7|Fw{6@0K`_=A
z_<bu!Y>DjIzhz)xkf-6yYLd9Qx#g=J9c|R!URYUEXl!h-gMRjP02d4#cc6bf?EPnR
znoVdJ^cMiOwbh7LlH`AMB(cuk%aWbwsW=S{jXcP|#`i7NC>{iGST2`k29d8kpUG`3
zMf83k``^iv9)<IlWJ?$j=Xz)mw^VsY1wSv#@AA6`L;`%FZ>vdfr>zSXEZ8MU@9l%s
z-@lWiu9^YfH5lW!RReE-fB(7Lwr%@`zYn^)7C`zoa+IBIx^N%}?s*!{X|2}y!NH-=
z!-jqxs<_*Jp=!IqFxG<BuC6o=t`t5N_3%O_?l8u=@<!JzfceE85c?fPhCNu!$@wpb
zx6Q!mbSOaVG6M@h)ALfp<LG>h36pIp)C8XMaJ9h#xRx@=IMmKxJqb}L5ltIdOu!Da
zF#U`mFP->0@7+8gqdk9|L0>JIdY-U{{ccqRF}EM~o?UlM`m*h7d!C~QAAHaq=&Scs
z1MlGA;Q4)hTfgn^cUDDN`g6bsOLDHvm;sW1uC9$~x5i@82No?_WHW2Nu7Z|fPjh*D
zLQPIiUWc*TT!oop;KWmyp1^nu>Rhefs`+Uo1|D}NOFMg~coq}+0p+<!i+>1J(8(9W
zmShiaayl_O9b3#OP#(j5KU1Y?z2yjyiOO>%IUqHC^R!aYvxJhw>oF`|I8f~!@r+Kt
zgxvE!Cs&#aCC8(1FZ-FA1iCpoI!=(hH-quLzgmdo=;-K`TekGA_WKU_Z*On!v|tq+
zJ`i;AwrWx?oz8rp!Q^Sfyx*Ft3ienPGiYv~-@a#42Ee=t&$+Y;qxt~OzOc9{4lRhY
z?v>sv=7GHh2BIhx6WR`T!l3S7;qn$X*-8U=YH4ASTDxHeMBX{wAtu_AA(2S({Gcsq
zr-(ps)z6u|v!bv=%(mNkz9mtGNyVlJLztyLx7>MGzpC$n$=cQN(-Vofw0QBNp8<ST
zLnI;jzP)kdrVAOQ{s4{k_I5kQ*<t2W<_OeQ_86;`0E~M*hq3r;DW@BclORYwhU-Yp
zLa^B;z#7X^FD55Gy`*NwtD7)(`{Q$8DO=|a31Dyfp+w=OcRSE2l>p33^<w2cxupi%
zVx~}0>Y+r7C6uEk4%?t*yT>p}hWIfk`DI#A7q~02cn+G6nfNV<b9gRx5bqqveOSNO
zs{lmu6UOYBTV~$M+LL<%JVrDc`wsf$)JovxF-|6vKL&Wu_3sz#dfR!v*!D9Ng{<;#
zZ<&Gp{g|$6MkxUCIEBL!c?`pGOqRsxIy~<coO5Ue#vbLEbufj#lJEFNmB4=0x#+j?
zDwnIcJW`He$}k4LXS|Bq8i8t_7e@?Oj*DjJNOyO4sexSzTl_d)5ySJTZlFLb9xoR&
zDR=qYFlciN#~kyss(O}cyDWs7dTJ$`m&Z7rPT#bC{rZ1p6Qmeu3m10Tj;m6UT8bhc
zR84*6(9d$7`eMgpHk)yM6GE|s)iFlvz=#g5BoF}p<qkhCB19f+S)Nsg)?Olktx6j~
zXR3s&i2#nWi?pw~61WmUNKlm}PdYM#85|s>!ntPq-tXaMfN0|fi6}C|7iPx6Ne;Na
zm-c~DZF&de`?J?xd+jr9hOnCKm$dwQV`Eb#N6>=m&*um@p{gdqzn7ca=HD=m8)xvY
zi&+IPF1qN>ILzXF@LmF7p=`tt1~<FA_hcs))T)yBgmg8^*^_QeuD$xl?@gWx4|HsA
z5W@9n_t{i0Rl$wg(%akHfc{Fbuj9oRUnIXIcIVYg0g#z<W3~GOcthpvPkzpHTf7`J
zgq_tTD4RuANt47@&1X@I-fL{&a@-eor@4EM0n43|Di=v4STk{~d8#i@Iryfh_J<Vt
zJqG%)dP4LW5~3`B6#e)B#`$D_gqsJzcsx$c%}rE7vdJ?@ERX|mlI6f%h+nIsz;GRk
zRs1zVq!a_-d_A@@IE#xc>Z_4v!_@=e@|-ZMUQnew7A)xeJqV!=-d&W!oJ9rp?0v9v
zPr&!>{@(`%2B@>MlkMGNbzGR~{bzdIU2RpCanC?t2&K*uI6h#u8DE`rX2;3Kfek$H
zEiKL80+0{ejdiFRO?jJHEs*x1F5*=_ywa(A2IsyROz;n2h{tQ1w$tlh4!YR6bEh3b
z$zid6(^8g|Y!yuLf{f_Q7^>iEe0mw_D#ePYGfOalbScwJx4q#SBe@RXT9Y13V6dBy
z0eC-E4ZN-my&c!xg^!P$rnL!2hoO3Du06;qA*Uc(DG1_GIR2@<e5@uwxF-sN^j}bA
zkEyoWi?fEVSh4)hb?aU^A(P2?%RcQ$uIA?E;)U{d7D=HpDEJ2L<yBsP$gY)-iYucY
zFPOpDj{2v;@|v0`I3|En2XIXlR-btqDH4gEGXrUDK}Eb019=Uuu^l#3o@-}T$^|hm
zaeD-GbO#Q8*ah@n+eHAy)@)Wg7Vmc(?8{TC1YK}g>QO6K9&p>sFR%Lu`peFiz*9)W
z!^4om-NmyKLuDLXe#yD0{BlL3=zICJv>21+GkD+aJg&v}@RlpiW~uMYuxGN@=CT}$
z2Q@AxN#Zfprb{L!CccqKBrn3}L?!cWDi(Ye0-S50fOsX?uX;M2;bd^PRLfMs0FA|>
zAA}_SA@>9KF<18db04$6!8?Ysz7lwySpxlVP9(sYQ;Mq-z%g~M!$ho-73IL{w!GNq
ztWcX?9annY2Cfm+nY@)SJn)>9esL9N*UN@s-r!9`m5KJL7`U=Gn;Eif#{wHrg+I+p
z5o58~nUx~5Slw)CY5DZ><;(i|`v)#@7qHmDGOev``6LL6Vm<FIB&i^Q-#xYPzp!0S
zPU^x?)Kd3ylHdymS9#Se%!OA=U9WkISJYW#jCC09d12KK1Jhl}@#HRQcns=xj#X|a
z^Mh{}74pI?#eELEg({>$eSKTaS6^L!Hl*oqtGz1|JV5--wzig!+Y$$oEtAQ*E7K&e
zub$+zOO==hz<&gK_s!nQAg*4#v!e}I`CUBtJ4<Gk*k0urceMQkPQ6rxQElLqyX6@E
zY|l*80lbIB$;1)j=?%4-1cJ>w;w}DX)z4WrNWNu&)|}^13bL>Y+RzZQeFnK)PJiW<
zSI-29AFQTMyGieUh-=^KE!E^q9LzYm=5pFP0P^`N<0MC;k<a>*FtFr>n(hl0DKuZ4
z<)x-4=~W#2Of_0Sd;W~}7`&u#devs1Db^vl=XNj;j8P?vn!EP6lcy0J!qaFfAvxtG
zz`i_p?5Ml4y&&HWl*nw|`r0R)>=<Ij>rk3IJ3D^{&^0mhbAX%kmj0QLrfaJ&xR=kt
zb#Gyb%AuN$^e%l3n>U>C!%MgTCjB{F|K@7r1E8+)t|_jiRQNi8Yrqb6%UE>@EWRBo
zvf!k05z3yoFN2s>*Urukdpd|0=i^<6wruG;4NP!g21yj&itBE0)=8T-fIVpnVBUsv
zl9g3>A==p3@cno^9%U_nL0YM=nb~jw;NOn6UO9sW6VKok{^EDAO;veL65G`QyhrM@
zGv&cH87e1ouedS_D)Zs6rA|qwGgN8b((!nj`zXV6=2<zb1}|FR#rd+VyqZj=&IE(Y
zRRIXA;Ab~CH~otf0-1AdQ<Jrz4Um4ns>B4iUjeRn@3-HQ-(W0StM##yeI)vh?(T(a
z$k~{$qJ5u8B)>m7nK0t<1Qph}O(Sz*9@POn3o5jeR4v47h}T!M0b5&JegvZUXyxf9
z^3t0!*RH7zjb{tQt*y=Z<(w=D$H&JX7#bS>`b_L$Na5>n&70VC@oZu4&TKYw9Zs37
zuEr}L0`qu^cdaCQUH9~)4k!yD*}n;u{b4Yi-WjZ>dIt4o-sp~{t-m_<^cys#PL0c8
zd(hcq$!f8psP_WMM^+i^HUR!k4E7T^k2(7@ILg8MDK?YISzW`sE;cf)T9)}HNbAOZ
zQ3|VS$o2)eTg9>zy%Dx4@5FdUIf8fn2F+bvUEdoX9yyN9PVRpvp`f`QQuwNlj`pi7
zxg^~2Sq>oIiqEg(x~Fi@K1gLwwBLs29Dw#5$#%Ez{E7eu^I4TlCUeCM$YmIFwqr&e
zz_UP%T-f1(fxH>@t2ov)1AF-0`1o#5IFp;#nVhL8X<yfln9v&<B2X_2)8<S}OrG1`
z-o|_L9$0As0zh#L)ag~@;}e%TDSZucfqX5b>(S71K3r{g2KWBGcvi0m#9b{;3ZTiW
z0N(pbf!CYvnzMeaLvT;+U^`E>y_|4#baW$By8qgZ0poE9yH$B3jEfgd#dfS05ykxo
zAdCzT5C3nfvYVy5iTC-C)<-f(T!$E6Z*APT@oe1d`I+Up-ZLfy`}X#2+qPZce-CdC
z*`L#Eu1Z}3&q84W;y`=0#Q@$bR;*ZlB#7%n`>G>qHq~gTyVFwI;I{{L-MAih?s-+z
z*HCL~%eNqf-v=-moU3~K_U#NF49D<^Jw4r=4F2%B^6KNZcO(+YPqCA#RPmg2bIL^O
zq_pRS36ZBI7{K8C`q<bwM-AOu@0se_3zy;;WtPO_<KvfsF}^f|sipTql7E5k!G*Jd
zI!x8vhWi`~CVJ-_NI?ts`c=7H_H;LY85JjUpEpxvUOhg0*L`<Mns98dFN?z@i032_
z&xJID3=TCgjzUo5&t6(DD5I#xVO#!tH841PBE>FdJC?8G=qeryH?zhVj-8UrX`dx~
z52!s&dT&4PIe_<A)C;O*ZJCcUpDMKHQOHo~X%SBNrtijmJ?Brl3}Nr?G)&fQbE&z>
zF!}Ze_S8Wp91gU1IkE--U&-5$g1FAX_kZSK_*noOw`Z914&$-wK~yiI-aGY*(-tpf
zTzfKG<~_2rFt(M(Kyi;-rNGB_q__J)ae->eUj3iNVzIN)kLhv%#yvVAdA|nx_p455
zYuNqG^z7yTPNmYn!+D>>{Wu(Q#V&3FXW-nYAl1L8Y5MKBHdiZJ%<KZ#4h0m-Wb`NA
zBIKY7&Iu;$p-K*eGJJ6r{=2%8(*w_beHY(^Ge{io5?{H^j<Nu);a3MaD~AVQpPkgl
zk{E-3InQ0<`w=+zO`<5Qz|U>&zQ<m+N|SeCz%eG)3_i2;9)gX?dkSyE@y)mwZ|~8M
zzZ1?vbiv*us7y)E;5~AtDQOi4)io0;sKRHu?@;a;0Dv%3N`+>SvE*bYV6lW`-vWL=
zciFOK*Hju`^pgN!n&GgM=GWT=k>ihj+qaGwhQ1o_aU;II7pEML&qumB#aZw6mL!>O
uzYV$z6CMMDxfka>>$Rbl!qxx300RKK{3Oa)ViW2B0000<MNUMnLSTYOOdJLP

literal 0
HcmV?d00001

diff --git a/test/test-project/src/pages/csp-test/style-inline.css b/test/test-project/src/pages/csp-test/style-inline.css
new file mode 100644
index 00000000..f4ca3aa2
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/style-inline.css
@@ -0,0 +1,3 @@
+body .inline {
+    background-color: red;
+}
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/style.css b/test/test-project/src/pages/csp-test/style.css
new file mode 100644
index 00000000..438954d3
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/style.css
@@ -0,0 +1,3 @@
+body {
+    background-color: red;
+}
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/template.dust b/test/test-project/src/pages/csp-test/template.dust
new file mode 100644
index 00000000..5fca9094
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/template.dust
@@ -0,0 +1,10 @@
+{@lasso-page name="page1" packagePath=packagePath /}
+
+<html>
+    <head>
+        {@lasso-head /}
+    </head>
+    <body>
+        {@lasso-body /}
+    </body>
+</html>
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/template.dust.expected.html b/test/test-project/src/pages/csp-test/template.dust.expected.html
new file mode 100644
index 00000000..55cd78f6
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/template.dust.expected.html
@@ -0,0 +1 @@
+<html><head><link rel="stylesheet" type="text/css" href="/static/page1.css"></head><body><script type="text/javascript" src="/static/page1.js"></script></body></html>
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/template.marko b/test/test-project/src/pages/csp-test/template.marko
new file mode 100644
index 00000000..f150b710
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/template.marko
@@ -0,0 +1,15 @@
+<lasso-page name="page1" package-path="./browser.json"/>
+<lasso-resource path="./favicon.ico" var="favicon"/>
+
+<html>
+    <head>
+        <lasso-head/>
+        <link rel="shortcut icon" href="${favicon.url}">
+    </head>
+    <body>
+        <lasso-img src="./marko-logo.png"/>
+        <lasso-img src="./marko-logo.png" width="100" height="100"/>
+        <script foo="bar" lasso-nonce>console.log('my inline script');</script>
+        <lasso-body/>
+    </body>
+</html>
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/template.marko.expected.html b/test/test-project/src/pages/csp-test/template.marko.expected.html
new file mode 100644
index 00000000..fc0f5e09
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/template.marko.expected.html
@@ -0,0 +1,5 @@
+<html><head><link rel="stylesheet" type="text/css" href="/static/page1-8b866529.css">
+<style type="text/css" nonce="abc">body .inline {
+    background-color: red;
+}</style><link rel="shortcut icon" href="/static/favicon-c3deb101.ico"></head><body><img src="/static/marko-logo-314d77d4.png" width="240" height="200"><img width="100" height="100" src="/static/marko-logo-314d77d4.png"><script foo="bar" nonce="abc">console.log('my inline script');</script><script type="text/javascript" src="/static/page1-1097e0f6.js"></script>
+<script type="text/javascript" nonce="abc">console.log('hello-inline');</script></body></html>
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/test-inline.js b/test/test-project/src/pages/csp-test/test-inline.js
new file mode 100644
index 00000000..7df80eb7
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/test-inline.js
@@ -0,0 +1 @@
+console.log('hello-inline');
\ No newline at end of file
diff --git a/test/test-project/src/pages/csp-test/test.js b/test/test-project/src/pages/csp-test/test.js
new file mode 100644
index 00000000..ea17b22e
--- /dev/null
+++ b/test/test-project/src/pages/csp-test/test.js
@@ -0,0 +1 @@
+console.log('hello');
\ No newline at end of file