istio.io/archive/v1.2/about/notes/1.1.2/index.html

42 lines
23 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<!doctype html><html lang=en itemscope itemtype=https://schema.org/WebPage><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=theme-color content=#466BB0><meta name=title content="Istio 1.1.2"><meta name=description content="Connect, secure, control, and observe services."><meta name=keywords content=microservices,services,mesh><meta property=og:title content="Istio 1.1.2"><meta property=og:type content=website><meta property=og:description content="Connect, secure, control, and observe services."><meta property=og:url content=/v1.2/about/notes/1.1.2/><meta property=og:image content=/v1.2/img/istio-whitelogo-bluebackground-framed.svg><meta property=og:image:alt content="Istio Logo"><meta property=og:image:width content=112><meta property=og:image:height content=150><meta property=og:site_name content=Istio><meta name=twitter:card content=summary><meta name=twitter:site content=@IstioMesh><title>Istioldie 1.2 / Istio 1.1.2</title><script async src="https://www.googletagmanager.com/gtag/js?id=UA-98480406-2"></script><script>window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}
gtag('js',new Date());gtag('config','UA-98480406-2');</script><link rel=alternate type=application/rss+xml title="Istio Blog" href=/v1.2/feed.xml><link rel="shortcut icon" href=/v1.2/favicons/favicon.ico><link rel=apple-touch-icon href=/v1.2/favicons/apple-touch-icon-180x180.png sizes=180x180><link rel=icon type=image/png href=/v1.2/favicons/favicon-16x16.png sizes=16x16><link rel=icon type=image/png href=/v1.2/favicons/favicon-32x32.png sizes=32x32><link rel=icon type=image/png href=/v1.2/favicons/android-36x36.png sizes=36x36><link rel=icon type=image/png href=/v1.2/favicons/android-48x48.png sizes=48x48><link rel=icon type=image/png href=/v1.2/favicons/android-72x72.png sizes=72x72><link rel=icon type=image/png href=/v1.2/favicons/android-96x96.png sizes=96xW96><link rel=icon type=image/png href=/v1.2/favicons/android-144x144.png sizes=144x144><link rel=icon type=image/png href=/v1.2/favicons/android-192x192.png sizes=192x192><link rel=manifest href=/v1.2/manifest.json><meta name=apple-mobile-web-app-title content=Istio><meta name=application-name content=Istio><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Work+Sans:400|Chivo:400|Work+Sans:500,300,600,300italic,400italic,500italic,600italic|Chivo:500,300,600,300italic,400italic,500italic,600italic"><link rel=stylesheet href=/v1.2/css/all.css><script src=/v1.2/js/themes_init.min.js></script></head><body class="language-unknown archive-site"><script>const branchName="release-1.2";const docTitle="Istio 1.1.2";const iconFile="\/v1.2/img/icons.svg";const buttonCopy='Copy to clipboard';const buttonPrint='Print';const buttonDownload='Download';</script><script src="https://www.google.com/cse/brand?form=search-form" defer></script><script src=/v1.2/js/all.min.js data-manual defer></script><header><nav><a id=brand href=/v1.2/><span class=logo><svg viewBox="0 0 300 300"><circle cx="150" cy="150" r="146" stroke-width="2" /><path d="M65 240H225L125 270z"/><path d="M65 230l60-10V110z"/><path d="M135 220l90 10L135 30z"/></svg></span><span class=name>Istioldie 1.2</span></a><div id=hamburger><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#hamburger"/></svg></div><div id=header-links><a title="Learn how to deploy, use, and operate Istio." href=/v1.2/docs/>Docs</a>
<a title="Posts about using Istio." href=/v1.2/blog/2019/announcing-1.2.5/>Blog</a>
<a title="Frequently Asked Questions about Istio." href=/v1.2/faq/>FAQ</a>
<span title="Get a bit more in-depth info about the Istio project.">About</span><div class=menu><button id=gearDropdownButton class=menu-trigger title="Options and settings" aria-label="Options and Settings" aria-controls=gearDropdownContent><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#gear"/></svg></button><div id=gearDropdownContent class=menu-content aria-labelledby=gearDropdownButton role=menu><a tabindex=-1 role=menuitem lang=en id=switch-lang-en class=active>English</a>
<a tabindex=-1 role=menuitem lang=zh id=switch-lang-zh>中文</a><div role=separator></div><a tabindex=-1 role=menuitem class=active id=light-theme-item>Light Theme</a>
<a tabindex=-1 role=menuitem id=dark-theme-item>Dark Theme</a><div role=separator></div><a tabindex=-1 role=menuitem id=syntax-coloring-item>Color Examples</a><div role=separator></div><h6>Other versions of this site</h6><a tabindex=-1 role=menuitem onclick="navigateToUrlOrRoot('https://istio.io/about\/notes\/1.1.2\/');return false;">Current Release</a>
<a tabindex=-1 role=menuitem onclick="navigateToUrlOrRoot('https://preliminary.istio.io/about\/notes\/1.1.2\/');return false;">Next Release</a>
<a tabindex=-1 role=menuitem href=https://archive.istio.io>Older Releases</a></div></div><button id=search-show title="Search this site" aria-label=Search><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#magnifier"/></svg></button></div><form id=search-form name=cse role=search><input type=hidden name=cx value=013699703217164175118:iwwf17ikgf4>
<input type=hidden name=ie value=utf-8>
<input type=hidden name=hl value=en>
<input type=hidden id=search-page-url value=/v1.2/search.html>
<input id=search-textbox class=form-control name=q type=search aria-label="Search this site">
<button id=search-close title="Cancel search" type=reset aria-label="Cancel search"><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#cancel-x"/></svg></button></form></nav></header><main class=primary><div id=sidebar-container class="sidebar-container sidebar-offcanvas"><nav id=sidebar aria-label="Section Navigation"><div class=directory><div class=card><div id=header0 class=header title="Get a bit more in-depth info about the Istio project."><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#about"/></svg>About Istio</div><div class="body default" aria-labelledby=header0><ul role=tree aria-expanded=true aria-labelledby=header0><li role=treeitem aria-label="Release Notes"><button class=show aria-hidden=true></button><a title="Description of features and improvements for every Istio release." href=/v1.2/about/notes/>Release Notes</a><ul role=group aria-expanded=true><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.14/>Istio 1.1.14</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.2.5/>Istio 1.2.5</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.13/>Istio 1.1.13</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.2.4/>Istio 1.2.4</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.12/>Istio 1.1.12</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.2.3/>Istio 1.2.3</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.11/>Istio 1.1.11</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.9/>Istio 1.0.9</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.10/>Istio 1.1.10</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.2.2/>Istio 1.2.2</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.2.1/>Istio 1.2.1</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.2/>Istio 1.2</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.9/>Istio 1.1.9</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.8/>Istio 1.0.8</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.8/>Istio 1.1.8</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.7/>Istio 1.1.7</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.6/>Istio 1.1.6</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.5/>Istio 1.1.5</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.4/>Istio 1.1.4</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.3/>Istio 1.1.3</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.7/>Istio 1.0.7</a></li><li role=none><span role=treeitem class=current>Istio 1.1.2</span></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1.1/>Istio 1.1.1</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.1/>Istio 1.1</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.6/>Istio 1.0.6</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.5/>Istio 1.0.5</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.4/>Istio 1.0.4</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.3/>Istio 1.0.3</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.2/>Istio 1.0.2</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0.1/>Istio 1.0.1</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/1.0/>Istio 1.0</a></li><li role=treeitem aria-label="Older Notes"><button aria-hidden=true></button><a title="Notes from older releases of Istio." href=/v1.2/about/notes/older/>Older Notes</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.8/>Istio 0.8</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.7/>Istio 0.7</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.6/>Istio 0.6</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.5/>Istio 0.5</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.4/>Istio 0.4</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.3/>Istio 0.3</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.2/>Istio 0.2</a></li><li role=none><a role=treeitem href=/v1.2/about/notes/older/0.1/>Istio 0.1</a></li></ul></li></ul></li><li role=none><a role=treeitem title="How we manage, number, and support Istio releases." href=/v1.2/about/release-cadence/>Build &amp; Release Cadence</a></li><li role=none><a role=treeitem title="List of features and their release stages." href=/v1.2/about/feature-stages/>Feature Status</a></li><li role=treeitem aria-label="Our Community"><button aria-hidden=true></button><a title="Learn about our community, our customers, and our partners." href=/v1.2/about/community/>Our Community</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Information on the various ways to participate and interact with the Istio community." href=/v1.2/about/community/join/>Getting Involved</a></li><li role=none><a role=treeitem title="Who's building stuff around Istio." href=/v1.2/about/community/partners/>Partners</a></li><li role=none><a role=treeitem title="Who's using Istio out there." href=/v1.2/about/community/customers/>Istio in Action</a></li></ul></li><li role=none><a role=treeitem title="What to do if you find a bug." href=/v1.2/about/bugs/>Reporting Bugs</a></li><li role=none><a role=treeitem title="How we handle security vulnerabilities." href=/v1.2/about/security-vulnerabilities/>Security Vulnerabilities</a></li><li role=none><a role=treeitem title="Official Istio resources for digital and printed materials." href=/v1.2/about/media-resources/>Media Resources</a></li><li role=treeitem aria-label="Contributing to the Docs"><button aria-hidden=true></button><a title="Learn how to contribute to improve and expand the Istio documentation." href=/v1.2/about/contribute/>Contributing to the Docs</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Explains the mechanics of creating and maintaining documentation pages." href=/v1.2/about/contribute/creating-and-editing-pages/>Creating and Editing Pages</a></li><li role=none><a role=treeitem title="Explains the dos and donts of writing Istio documentation." href=/v1.2/about/contribute/style-guide/>Style Guide</a></li><li role=none><a role=treeitem title="Shows you how to use GitHub to work on Istio documentation." href=/v1.2/about/contribute/github/>Working with GitHub</a></li><li role=none><a role=treeitem title="Provides assets and instructions to create diagrams for the Istio documentation." href=/v1.2/about/contribute/diagrams/>Diagram Creation Guidelines</a></li></ul></li></ul></div></div></div></nav></div><div class=article-container><button tabindex=-1 id=sidebar-toggler title="Toggle the navigation bar"><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#pull"/></svg></button><nav aria-label=Breadcrumb><ol><li><a href=/v1.2/ title="Connect, secure, control, and observe services.">Istio</a></li><li><a href=/v1.2/about/ title="Get a bit more in-depth info about the Istio project.">About</a></li><li><a href=/v1.2/about/notes/ title="Description of features and improvements for every Istio release.">Release Notes</a></li><li>Istio 1.1.2</li></ol></nav><article aria-labelledby=title><div class=title-area><i class=title-icon><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#notes"/></svg></i><div><h1 id=title>Istio 1.1.2</h1><p class=byline><span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#calendar"/></svg><span>&nbsp;</span>April 5, 2019</span><span> | </span><span title="618 words"><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#clock"/></svg><span>&nbsp;</span>3 minute read</span></p></div></div><nav class=toc-inlined aria-label="Table of Contents"><div><hr><ol><li role=none aria-label="Security update"><a href=#security-update>Security update</a><li role=none aria-label="Affected Istio releases"><a href=#affected-istio-releases>Affected Istio releases</a><li role=none aria-label="Vulnerability impact"><a href=#vulnerability-impact>Vulnerability impact</a><li role=none aria-label=Mitigation><a href=#mitigation>Mitigation</a><li role=none aria-label="Detection of NUL header exploit"><a href=#detection-of-nul-header-exploit>Detection of NUL header exploit</a><li role=none aria-label="Detection of path traversal exploit"><a href=#detection-of-path-traversal-exploit>Detection of path traversal exploit</a></ol><hr></div></nav><p>This release includes an important security update. All customers using prior versions of Istio are advised to upgrade immediately.</p><div class=call-to-action><button class="btn update-notice" data-title="Update Notice" data-downloadhref=https://github.com/istio/istio/releases/tag/1.1.2 data-updateadvice="Before you download 1.1.2, you should know that there's a newer patch release with the latest bug fixes and perf improvements." data-updatebutton="LEARN ABOUT ISTIO 1.1.14" data-updatehref=/v1.2/about/notes/1.1.14>
DOWNLOAD 1.1.2</button>
<a class=btn href=https://archive.istio.io/v1.1>1.1.2 DOCS</a>
<a class=btn href=https://github.com/istio/istio/compare/1.1.1...1.1.2>CHANGES IN 1.1.2</a></div><h2 id=security-update>Security update</h2><p>Two security vulnerabilities have recently been identified in the Envoy proxy
(<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9900">CVE 2019-9900</a> and <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9901">CVE 2019-9901</a>). The
vulnerabilities have now been patched in Envoy version 1.9.1, and correspondingly in the Envoy builds
embedded in Istio 1.1.2 and Istio 1.0.7. Since Envoy is an integral part of Istio, users are advised to update Istio
immediately to mitigate security risks arising from these vulnerabilities.</p><p>The vulnerabilities are centered on the fact that Envoy did not normalize HTTP URI paths and did not fully validate HTTP/1.1 header values. These
vulnerabilities impact Istio features that rely on Envoy to enforce any of authorization, routing, or rate limiting.</p><h2 id=affected-istio-releases>Affected Istio releases</h2><p>The following Istio releases are vulnerable:</p><ul><li><p>1.1, 1.1.1</p><ul><li>These releases can be patched to Istio 1.1.2.</li><li>1.1.2 is built from the same source as 1.1.1 with the addition of Envoy patches minimally sufficient to address the CVEs.</li></ul></li><li><p>1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6</p><ul><li>These releases can be patched to Istio 1.0.7</li><li>1.0.7 is built from the same source as 1.0.6 with the addition of Envoy patches minimally sufficient to address the CVEs.</li></ul></li><li><p>0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8</p><ul><li>These releases are no longer supported and will not be patched. Please upgrade to a supported release with the necessary fixes.</li></ul></li></ul><h2 id=vulnerability-impact>Vulnerability impact</h2><p><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9900">CVE 2019-9900</a> and <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9901">CVE 2019-9901</a>
allow remote attackers access to unauthorized resources by using specially crafted request URI paths (9901) and NUL bytes in
HTTP/1.1 headers (9900), potentially circumventing DoS prevention systems such as rate limiting, or routing to a unexposed upstream system. Refer to
<a href=https://github.com/envoyproxy/envoy/issues/6434>issue 6434</a>
and <a href=https://github.com/envoyproxy/envoy/issues/6435>issue 6435</a> for more information.</p><p>As Istio is based on Envoy, Istio customers can be affected by these vulnerabilities based on whether paths and request headers are used within Istio
policies or routing rules and how the backend HTTP implementation resolves them. If prefix path matching rules are used by Mixer or by Istio authorization
policies or the routing rules, an attacker could exploit these vulnerabilities to gain access to unauthorized paths on certain HTTP backends.</p><h2 id=mitigation>Mitigation</h2><p>Eliminating the vulnerabilities requires updating to a corrected version of Envoy. Weve incorporated the necessary updates in the latest Istio patch releases.</p><p>For Istio 1.1.x deployments: update to a minimum of <a href=/v1.2/about/notes/1.1.2>Istio 1.1.2</a></p><p>For Istio 1.0.x deployments: update to a minimum of <a href=/v1.2/about/notes/1.0.7>Istio 1.0.7</a></p><p>While Envoy 1.9.1 requires opting in to path normalization to address CVE 2019-9901, the version of Envoy embedded in Istio 1.1.2 and 1.0.7 enables path
normalization by default.</p><h2 id=detection-of-nul-header-exploit>Detection of NUL header exploit</h2><p>Based on current information, this only affects HTTP/1.1 traffic. If this is not structurally possible in your network or configuration, then it is unlikely
that this vulnerability applies.</p><p>File-based access logging uses the <code>c_str()</code> representation for header values, as does gRPC access logging, so there will be no trivial detection via
Envoys access logs by scanning for NUL. Instead, operators might look for inconsistencies in logs between the routing that Envoy performs and the logic
intended in the <code>RouteConfiguration</code>.</p><p>External authorization and rate limit services can check for NULs in headers. Backend servers might have sufficient logging to detect NULs or unintended
access; its likely that many will simply reject NULs in this scenario via 400 Bad Request, as per RFC 7230.</p><h2 id=detection-of-path-traversal-exploit>Detection of path traversal exploit</h2><p>Envoys access logs (whether file-based or gRPC) will contain the unnormalized path, so it is possible to examine these logs to detect suspicious patterns and
requests that are incongruous with the intended operator configuration intent. In addition, unnormalized paths are available at <code>ext_authz</code>, rate limiting
and backend servers for log inspection.</p></article><nav class=pagenav><div class=left><a href=/v1.2/about/notes/1.0.7/><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#left-arrow"/></svg>Istio 1.0.7</a></div><div class=right><a href=/v1.2/about/notes/1.1.1/>Istio 1.1.1<svg class="icon"><use xlink:href="/v1.2/img/icons.svg#right-arrow"/></svg></a></div></nav><div id=endnotes-container aria-hidden=true><h2>Links</h2><ol id=endnotes></ol></div></div><div class=toc-container><nav class=toc aria-label="Table of Contents"><div id=toc><ol><li role=none aria-label="Security update"><a href=#security-update>Security update</a><li role=none aria-label="Affected Istio releases"><a href=#affected-istio-releases>Affected Istio releases</a><li role=none aria-label="Vulnerability impact"><a href=#vulnerability-impact>Vulnerability impact</a><li role=none aria-label=Mitigation><a href=#mitigation>Mitigation</a><li role=none aria-label="Detection of NUL header exploit"><a href=#detection-of-nul-header-exploit>Detection of NUL header exploit</a><li role=none aria-label="Detection of path traversal exploit"><a href=#detection-of-path-traversal-exploit>Detection of path traversal exploit</a></ol></div></nav></div></main><footer><div class=user-links><a class=channel title="Go download Istio 1.2.5 now" href=https://github.com/istio/istio/releases/tag/1.2.5 aria-label="Download Istio"><span>download</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#download"/></svg>
</a><a class=channel title="Join the Istio discussion board to participate in discussions and get help troubleshooting problems" href=https://discuss.istio.io aria-label="Istio discussion board"><span>discuss</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#discourse"/></svg></a>
<a class=channel title="Stack Overflow is where you can ask questions and find curated answers on deploying, configuring, and using Istio" href=https://stackoverflow.com/questions/tagged/istio aria-label="Stack Overflow"><span>stack overflow</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#stackoverflow"/></svg></a>
<a class=channel title="Interactively discuss issues with the Istio community on Slack" href=https://istio.slack.com aria-label=slack><span>slack</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#slack"/></svg></a>
<a class=channel title="Follow us on Twitter to get the latest news" href=https://twitter.com/IstioMesh aria-label=Twitter><span>twitter</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#twitter"/></svg></a><div class=tag>for everyone</div></div><div class=info><p class=copyright>Istio Archive
1.2.5<br>&copy; 2019 Istio Authors, <a href=https://policies.google.com/privacy>Privacy Policy</a><br>Archived on September 12, 2019</p></div><div class=dev-links><a class=channel title="GitHub is where development takes place on Istio code" href=https://github.com/istio/community aria-label=GitHub><span>github</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#github"/></svg></a>
<a class=channel title="Access our team drive if you'd like to take a look at the Istio technical design documents" href=https://groups.google.com/forum/#!forum/istio-team-drive-access aria-label="team drive"><span>drive</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#drive"/></svg></a>
<a class=channel title="If you'd like to contribute to the Istio project, consider participating in our working groups" href=https://github.com/istio/community/blob/master/WORKING-GROUPS.md aria-label="working groups"><span>working groups</span><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#working-groups"/></svg></a><div class=tag>for developers</div></div></footer><script src=https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js defer></script><div id=scroll-to-top-container aria-hidden=true><button id=scroll-to-top title="Back to top"><svg class="icon"><use xlink:href="/v1.2/img/icons.svg#top"/></svg></button></div></body></html>