{"id":99420,"date":"2021-03-13T16:22:51","date_gmt":"2021-03-13T14:22:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere"},"modified":"2021-03-13T16:22:51","modified_gmt":"2021-03-13T14:22:51","slug":"google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","title":{"rendered":"Google demonstroval zneu\u017eit\u00ed zranitelnost\u00ed Spectre prost\u0159ednictv\u00edm vykon\u00e1v\u00e1n\u00ed JavaScriptu v prohl\u00ed\u017ee\u010di","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Google zve\u0159ejnila n\u011bkolik prototyp\u016f exploit\u016f, kter\u00e9 ukazuj\u00ed mo\u017enost zneu\u017eit\u00ed zranitelnost\u00ed t\u0159\u00eddy Spectre p\u0159i vykon\u00e1v\u00e1n\u00ed JavaScriptov\u00e9ho k\u00f3du v prohl\u00ed\u017ee\u010di, obch\u00e1zej\u00edc\u00ed d\u0159\u00edve p\u0159idan\u00e9 ochrann\u00e9 mechanismy. Exploty mohou b\u00fdt pou\u017eity k z\u00edsk\u00e1n\u00ed p\u0159\u00edstupu k pam\u011bti procesu, kter\u00fd zpracov\u00e1v\u00e1 webov\u00fd obsah na aktu\u00e1ln\u00ed kart\u011b. Pro testov\u00e1n\u00ed funkcionality exploitu je spu\u0161t\u011bna str\u00e1nka leaky.page a k\u00f3d s popisem logiky fungov\u00e1n\u00ed je k dispozici na GitHubu. <\/p>\n

Navrhovan\u00fd prototyp je ur\u010den k prov\u00e1d\u011bn\u00ed \u00fatok\u016f na syst\u00e9my s procesory Intel Core i7-6500U v prost\u0159ed\u00ed s Linuxem a Chrome 88. Pro pou\u017eit\u00ed exploitu v jin\u00fdch prost\u0159ed\u00edch jsou t\u0159eba \u00fapravy. Metoda exploitation nen\u00ed specifick\u00e1 pro procesory Intel \u2013 po odpov\u00eddaj\u00edc\u00ed adaptaci byla potvrzena funk\u010dnost exploitu na syst\u00e9mech s CPU od jin\u00fdch v\u00fdrobc\u016f, v\u010detn\u011b Apple M1 na b\u00e1zi architektury ARM. Po drobn\u00fdch \u00faprav\u00e1ch je exploit tak\u00e9 pou\u017eiteln\u00fd v jin\u00fdch opera\u010dn\u00edch syst\u00e9mech a v jin\u00fdch prohl\u00ed\u017ee\u010d\u00edch zalo\u017een\u00fdch na enginu Chromium. <\/p>\n

V prost\u0159ed\u00ed zalo\u017een\u00e9m na standardn\u00edm Chrome 88 a procesorech Intel Skylake se poda\u0159ilo dos\u00e1hnout \u00faniku dat z procesu odpov\u011bdn\u00e9ho za zpracov\u00e1n\u00ed webov\u00e9ho obsahu na aktu\u00e1ln\u00ed kart\u011b Chrome (renderer process) rychlost\u00ed 1 kilobajt za sekundu. D\u00e1le byly vyvinuty alternativn\u00ed prototypy, nap\u0159\u00edklad exploit, kter\u00fd umo\u017e\u0148uje p\u0159i sn\u00ed\u017een\u00ed stability zv\u00fd\u0161it rychlost \u00faniku na 8kB\/s p\u0159i pou\u017eit\u00ed \u010dasova\u010de performance.now() s p\u0159esnost\u00ed 5 mikrosekund (0,005 milisekundy). Tak\u00e9 byl p\u0159ipraven variant, kter\u00fd funguje p\u0159i p\u0159esnosti \u010dasova\u010de na \u00farovni jedn\u00e9 milisekundy, a kter\u00fd mohl b\u00fdt pou\u017eit pro organizaci p\u0159\u00edstupu k pam\u011bti jin\u00e9ho procesu rychlost\u00ed p\u0159ibli\u017en\u011b 60 byt\u016f za sekundu. <\/p>\n

Zve\u0159ejn\u011bn\u00fd demonstra\u010dn\u00ed k\u00f3d se skl\u00e1d\u00e1 ze t\u0159\u00ed \u010d\u00e1st\u00ed. Prvn\u00ed \u010d\u00e1st prov\u00e1d\u00ed kalibraci \u010dasova\u010de pro odhadov\u00e1n\u00ed \u010dasu pot\u0159ebn\u00e9ho k dokon\u010den\u00ed operac\u00ed, kter\u00e9 jsou nezbytn\u00e9 pro obnovu dat, je\u017e z\u016fstala v procesorov\u00e9 cache v d\u016fsledku spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed instrukc\u00ed CPU. Druh\u00e1 \u010d\u00e1st ur\u010duje rozlo\u017een\u00ed pam\u011bti pou\u017e\u00edvan\u00e9 p\u0159i alokaci pole JavaScript. <\/p>\n

T\u0159et\u00ed \u010d\u00e1st p\u0159\u00edmo vyu\u017e\u00edv\u00e1 zranitelnost Spectre k ur\u010den\u00ed obsahu pam\u011bti aktu\u00e1ln\u00edho procesu t\u00edm, \u017ee vytv\u00e1\u0159\u00ed podm\u00ednky pro spekulativn\u00ed vykon\u00e1v\u00e1n\u00ed ur\u010dit\u00fdch operac\u00ed, jejich\u017e v\u00fdsledky jsou po ur\u010den\u00ed ne\u00fasp\u011b\u0161n\u00e9 p\u0159edpov\u011bdi procesorem odm\u00edtnuty, ale stopy vykon\u00e1v\u00e1n\u00ed z\u016fst\u00e1vaj\u00ed v spole\u010dn\u00e9 mezipam\u011bti a mohou b\u00fdt obnoveny pomoc\u00ed metod ur\u010den\u00ed obsahu mezipam\u011bti prost\u0159ednictv\u00edm postrann\u00edch kan\u00e1l\u016f, kter\u00e9 analyzuj\u00ed zm\u011bnu doby p\u0159\u00edstupu k mezipam\u011b\u0165ovan\u00fdm a nem\u011bzipam\u011b\u0165ovan\u00fdm dat\u016fm. <\/p>\n

Navrhovan\u00e1 technika vyu\u017eit\u00ed umo\u017e\u0148uje obej\u00edt se bez vysoce p\u0159esn\u00fdch \u010dasova\u010d\u016f dostupn\u00fdch prost\u0159ednictv\u00edm API performance.now() a bez podpory typu SharedArrayBuffer, kter\u00e1 umo\u017e\u0148uje vytv\u00e1\u0159et pole v sd\u00edlen\u00e9 pam\u011bti. Exploit zahrnuje gadget Spectre, kter\u00fd vyvol\u00e1v\u00e1 kontrolovan\u00e9 spekulativn\u00ed vykon\u00e1v\u00e1n\u00ed k\u00f3du, a analyz\u00e1tor \u00faniku prost\u0159ednictv\u00edm postrann\u00edch kan\u00e1l\u016f, kter\u00fd ur\u010duje do mezipam\u011bti ulo\u017een\u00e1 data z\u00edskan\u00e1 b\u011bhem spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed. <\/p>\n

Gadget je realizov\u00e1n pomoc\u00ed pole JavaScript, ve kter\u00e9m se pokou\u0161\u00edme p\u0159istupovat k oblasti mimo hranice vyrovn\u00e1vac\u00ed pam\u011bti, co\u017e ovliv\u0148uje stav bloku p\u0159edpov\u00edd\u00e1n\u00ed p\u0159echod\u016f kv\u016fli p\u0159idan\u00e9 kontrole velikosti vyrovn\u00e1vac\u00ed pam\u011bti kompil\u00e1torem (procesor spekulativn\u011b prov\u00e1d\u00ed p\u0159\u00edstup p\u0159ed\u010dasn\u011b, ale po kontrole se vr\u00e1t\u00ed zp\u011bt). Pro anal\u00fdzu obsahu mezipam\u011bti za podm\u00ednek nedostate\u010dn\u00e9 p\u0159esnosti \u010dasova\u010de je navr\u017een postup, kter\u00fd podv\u00e1d\u00ed strategii vy\u0159azov\u00e1n\u00ed dat z mezipam\u011bti Tree-PLRU pou\u017eit\u00e9 v procesorech a umo\u017e\u0148uje d\u00edky zv\u00fd\u0161en\u00ed po\u010dtu cykl\u016f v\u00fdrazn\u011b zv\u00fd\u0161it rozd\u00edl v \u010dase p\u0159i vr\u00e1cen\u00ed hodnoty z mezipam\u011bti a v p\u0159\u00edpad\u011b absence hodnoty v mezipam\u011bti. <\/p>\n

Je zm\u00edn\u011bno, \u017ee spole\u010dnost Google zve\u0159ejnila prototyp exploidu, aby uk\u00e1zala realistick\u00fd p\u0159\u00edstup k \u00fatok\u016fm vyu\u017e\u00edvaj\u00edc\u00edm zranitelnosti t\u0159\u00eddy Spectre a aby stimulovala webov\u00e9 v\u00fdvoj\u00e1\u0159e k pou\u017e\u00edv\u00e1n\u00ed technik, kter\u00e9 minimalizuj\u00ed rizika podobn\u00fdch \u00fatok\u016f. Google v\u0161ak pova\u017euje za nemo\u017en\u00e9 vytvo\u0159it univerz\u00e1ln\u00ed exploity, kter\u00e9 by byly p\u0159ipraveny nejen k demonstrov\u00e1n\u00ed, ale i k \u0161irok\u00e9mu pou\u017eit\u00ed, bez z\u00e1sadn\u00ed p\u0159epracov\u00e1n\u00ed navr\u017een\u00e9ho prototypu. <\/p>\n

Aby sn\u00ed\u017eili riziko, se doporu\u010duje majitel\u016fm webov\u00fdch str\u00e1nek vyu\u017e\u00edvat v posledn\u00ed dob\u011b implementovan\u00e9 hlavi\u010dky Cross-Origin Opener Policy (COOP), Cross-Origin Embedder Policy (COEP), Cross-Origin Resource Policy (CORP), Fetch Metadata Request, X-Frame-Options, X-Content-Type-Options a SameSite Cookie. Tyto mechanismy p\u0159\u00edmo nechr\u00e1n\u00ed p\u0159ed \u00fatoky, ale umo\u017e\u0148uj\u00ed odd\u011blit data webu od jejich \u00faniku do proces\u016f, ve kter\u00fdch m\u016f\u017ee b\u00fdt vykon\u00e1v\u00e1n JavaScriptov\u00fd k\u00f3d \u00fato\u010dn\u00edka (\u00fanik se objevuje z pam\u011bti aktu\u00e1ln\u00edho procesu, ve kter\u00e9m m\u016f\u017ee krom\u011b k\u00f3du \u00fato\u010dn\u00edka b\u011b\u017eet i data jin\u00e9ho webu otev\u0159en\u00e9ho na stejn\u00e9 z\u00e1lo\u017ece). Hlavn\u00ed my\u0161lenkou je odd\u011blit vykon\u00e1v\u00e1n\u00ed k\u00f3du webu od ciz\u00edho k\u00f3du poch\u00e1zej\u00edc\u00edho z ned\u016fv\u011bryhodn\u00fdch zdroj\u016f, nap\u0159\u00edklad na\u010d\u00edtan\u00e9ho p\u0159es iframe.

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 web-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435. \u0414\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0430\u0439\u0442 leaky.page, \u0430 \u043a\u043e\u0434 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u043d\u0430 GitHub. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99420","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google uk\u00e1zal vyu\u017eit\u00ed zranitelnost\u00ed Spectre prost\u0159ednictv\u00edm vykon\u00e1v\u00e1n\u00ed JavaScriptu v prohl\u00ed\u017ee\u010di | ProHoster","description":"Spole\u010dnost Google zve\u0159ejnila n\u011bkolik prototyp\u016f exploit\u016f, kter\u00e9 ukazuj\u00ed mo\u017enost vyu\u017eit\u00ed zranitelnost\u00ed t\u0159\u00eddy Spectre p\u0159i vykon\u00e1v\u00e1n\u00ed JavaScriptov\u00e9ho k\u00f3du v prohl\u00ed\u017ee\u010di, kter\u00e9 obch\u00e1z\u00ed d\u0159\u00edve zaveden\u00e9 metodiky ochrany.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-13T14:22:51+00:00","article:modified_time":"2021-03-13T14:22:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99420","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-13 14:24:19","updated":"2022-10-02 07:42:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=99420"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99420\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=99420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=99420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=99420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}