{"id":103807,"date":"2022-04-17T21:36:41","date_gmt":"2022-04-17T19:36:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-swhkd-menedzhere-goryachih-klavish-dlya-wayland"},"modified":"2022-04-17T21:36:41","modified_gmt":"2022-04-17T19:36:41","slug":"uyazvimosti-v-swhkd-menedzhere-goryachih-klavish-dlya-wayland","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-swhkd-menedzhere-goryachih-klavish-dlya-wayland","title":{"rendered":"Zranite\u013enosti v swhkd, spr\u00e1vci kl\u00e1vesov\u00fdch skratiek pre Wayland","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V swhkd (Simple Wayland HotKey Daemon) bola zisten\u00e1 s\u00e9ria zranite\u013enost\u00ed sp\u00f4soben\u00fdch nespr\u00e1vnym spracovan\u00edm do\u010dasn\u00fdch s\u00faborov, parametrov pr\u00edkazov\u00e9ho riadku a unixov\u00fdch soketov. Program je nap\u00edsan\u00fd v jazyku Rust a vykon\u00e1va spracovanie stla\u010denia kl\u00e1vesov\u00fdch skratiek v prostrediach zalo\u017een\u00fdch na protokole Wayland (kompatibiln\u00fd na \u00farovni konfigura\u010dn\u00fdch s\u00faborov anal\u00f3g procesu sxhkd, pou\u017e\u00edvan\u00e9ho v prostrediach na b\u00e1ze X11).     <\/p>\n<p>S\u00fa\u010das\u0165ou bal\u00edka je neopr\u00e1vnen\u00fd proces swhks, ktor\u00fd vykon\u00e1va \u010dinnosti pre kl\u00e1vesov\u00e9 skratky, a na pozad\u00ed be\u017eiaci proces swhkd, ktor\u00fd sa sp\u00fa\u0161\u0165a s pr\u00e1vami root a interaguje so vstupn\u00fdmi zariadeniami na \u00farovni API uinput. Na organiz\u00e1ciu interakcie medzi swhks a swhkd sa pou\u017e\u00edva Unix soket. Pomocou pravidiel Polkit m\u00e1 ktor\u00fdko\u013evek lok\u00e1lny pou\u017e\u00edvate\u013e mo\u017enos\u0165 spusti\u0165 proces \/usr\/bin\/swhkd s pr\u00e1vami root a odovzda\u0165 mu \u013eubovo\u013en\u00e9 parametre.    <\/p>\n<p>Odhalen\u00e9 zranite\u013enosti:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2022-27815 \u2014 ukladanie PID procesu do s\u00faboru s predv\u00eddate\u013en\u00fdm n\u00e1zvom v dostupnom adres\u00e1ri pre p\u00edsanie in\u00fdmi pou\u017e\u00edvate\u013emi (\/tmp\/swhkd.pid). Ka\u017ed\u00fd pou\u017e\u00edvate\u013e m\u00f4\u017ee vytvori\u0165 s\u00fabor \/tmp\/swhkd.pid a vlo\u017ei\u0165 do neho PID existuj\u00faceho procesu, \u010do sp\u00f4sob\u00ed nemo\u017enos\u0165 spusti\u0165 swhkd. Pri absencii ochrany proti vytv\u00e1raniu symbolick\u00fdch odkazov v \/tmp, je zranite\u013enos\u0165 mo\u017en\u00e9 vyu\u017ei\u0165 na vytvorenie alebo prep\u00edsanie s\u00faborov v akomko\u013evek syst\u00e9movom adres\u00e1ri (do s\u00faboru sa zapisuje PID) alebo ur\u010denie obsahu ak\u00e9hoko\u013evek s\u00faboru v syst\u00e9me (swhkd vypisuje do stdout v\u0161etok obsah PID-s\u00faboru). Zauj\u00edmav\u00e9 je, \u017ee vo vydanom oprave bol PID-s\u00fabor presunut\u00fd nie do adres\u00e1ra \/run, ale do adres\u00e1ra \/etc (\/etc\/swhkd\/runtime\/swhkd_{uid}.pid), kde mu tie\u017e nie je miesto.\n<li class=\"l\"> CVE-2022-27814 \u2014 manipulovan\u00edm s parametrom pr\u00edkazov\u00e9ho riadku \u201e-c\u201c, ktor\u00fd sa pou\u017e\u00edva na ur\u010denie konfigura\u010dn\u00e9ho s\u00faboru, je mo\u017en\u00e9 ur\u010di\u0165 existenciu ak\u00e9hoko\u013evek s\u00faboru v syst\u00e9me. Napr\u00edklad, na kontrolu \/root\/.somefile m\u00f4\u017eeme spusti\u0165 \u201epkexec \/usr\/bin\/swhkd -d -c \/root\/.somefile\u201c a ak s\u00fabor neexistuje, bude vyhoden\u00e1 chyba \u201e\/root\/.somefile doesn\u2019t exist\u201c. Rovnako ako v pr\u00edpade prvej zranite\u013enosti je oprava probl\u00e9mu zar\u00e1\u017eaj\u00faca \u2014 odstr\u00e1nenie probl\u00e9mu spo\u010d\u00edva v tom, \u017ee pre \u010d\u00edtanie konfigura\u010dn\u00e9ho s\u00faboru sa teraz sp\u00fa\u0161\u0165a extern\u00fd n\u00e1stroj \u201ecat\u201c (\u201eCommand::new(\u2018\/bin\/cat\u2019).arg(path).output()\u201c).\n<li class=\"l\"> CVE-2022-27819 \u2014 probl\u00e9m je tie\u017e spojen\u00fd s pou\u017eit\u00edm mo\u017enosti \u201e-c\u201c, cez ktor\u00fa sa cel\u00fd konfigura\u010dn\u00fd s\u00fabor na\u010d\u00edta a spracuje bez kontroly ve\u013ekosti a typu s\u00faboru. Napr\u00edklad na vyvolanie odmietnutia slu\u017eby cez vy\u010derpanie vo\u013enej pam\u00e4te a vytv\u00e1ranie parazitn\u00e9ho vstupu\/v\u00fdstupu m\u00f4\u017eeme pri spusten\u00ed zada\u0165 blokov\u00e9 zariadenie (\u201epkexec \/usr\/bin\/swhkd -d -c \/dev\/sda\u201c) alebo symbolick\u00e9 zariadenie, ktor\u00e9 vyd\u00e1va nekone\u010dn\u00fd tok d\u00e1t. Probl\u00e9m bol vyrie\u0161en\u00fd zn\u00ed\u017een\u00edm privil\u00e9gi\u00ed pred otvoren\u00edm s\u00faboru, ale oprava sa uk\u00e1zala ako ne\u00fapln\u00e1, preto\u017ee sa zni\u017euje iba identifik\u00e1tor pou\u017e\u00edvate\u013ea (UID), ale identifik\u00e1tor skupiny (GID) zost\u00e1va nezmenen\u00fd.\n<li class=\"l\"> CVE-2022-27818 \u2014 na vytvorenie Unix-socketu sa pou\u017e\u00edva s\u00fabor \/tmp\/swhkd.sock, ktor\u00fd je vytv\u00e1ran\u00fd v verejne pr\u00edstupnom adres\u00e1ri na z\u00e1pis, \u010do vedie k podobn\u00fdm probl\u00e9mom ako prv\u00e1 zranite\u013enos\u0165 (ktor\u00fdko\u013evek pou\u017e\u00edvate\u013e m\u00f4\u017ee vytvori\u0165 \/tmp\/swhkd.sock a generova\u0165 alebo zachyt\u00e1va\u0165 udalosti stla\u010denia kl\u00e1vesov).\n<li class=\"l\"> CVE-2022-27817 \u2014 vstupy s\u00fa prij\u00edman\u00e9 zo v\u0161etk\u00fdch zariaden\u00ed a vo v\u0161etk\u00fdch rel\u00e1ci\u00e1ch, t.j. pou\u017e\u00edvate\u013e z inej rel\u00e1cie Wayland alebo z konzoly m\u00f4\u017ee zachyti\u0165 udalosti pri stla\u010den\u00ed kl\u00e1vesov in\u00fdmi pou\u017e\u00edvate\u013emi.\n<li class=\"l\"> CVE-2022-27816 \u2014 proces swhks, rovnako ako swhkd, pou\u017e\u00edva PID s\u00fabor \/tmp\/swhks.pid v verejne zapisovate\u013enom adres\u00e1ri \/tmp. Probl\u00e9m je podobn\u00fd prvej zranite\u013enosti, ale nie je tak\u00fd nebezpe\u010dn\u00fd, preto\u017ee swhks be\u017e\u00ed pod neprivilegovan\u00fdm pou\u017e\u00edvate\u013eom.      <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57032\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 swhkd (Simple Wayland HotKey Daemon) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u0441 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 unix-\u0441\u043e\u043a\u0435\u0442\u0430\u043c\u0438. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u0433\u043e\u0440\u044f\u0447\u0438\u0445 \u043a\u043b\u0430\u0432\u0438\u0448 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Wayland (\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0439 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 sxhkd, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 X11). \u0412 \u0441\u043e\u0441\u0442\u0430\u0432 \u043f\u0430\u043a\u0435\u0442\u0430 \u0432\u0445\u043e\u0434\u0438\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103807","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 swhkd (Simple Wayland HotKey Daemon) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u0441 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 unix-\u0441\u043e\u043a\u0435\u0442\u0430\u043c\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-swhkd-menedzhere-goryachih-klavish-dlya-wayland\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 swhkd, \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u0433\u043e\u0440\u044f\u0447\u0438\u0445 \u043a\u043b\u0430\u0432\u0438\u0448 \u0434\u043b\u044f Wayland | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 swhkd (Simple Wayland HotKey Daemon) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u0441 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 unix-\u0441\u043e\u043a\u0435\u0442\u0430\u043c\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-swhkd-menedzhere-goryachih-klavish-dlya-wayland\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-04-17T19:36:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-04-17T19:36:41+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enosti v swhkd, spr\u00e1vcu hor\u00facich kl\u00e1vesov pre Wayland | ProHoster","description":"V swhkd (Simple Wayland HotKey Daemon) bola identifikovan\u00e1 s\u00e9ria zranite\u013enost\u00ed sp\u00f4soben\u00fdch nespr\u00e1vnym zaobch\u00e1dzan\u00edm s do\u010dasn\u00fdmi s\u00fabormi, parametrami pr\u00edkazov\u00e9ho riadku a unix-socketmi.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-swhkd-menedzhere-goryachih-klavish-dlya-wayland","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 swhkd, \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u0433\u043e\u0440\u044f\u0447\u0438\u0445 \u043a\u043b\u0430\u0432\u0438\u0448 \u0434\u043b\u044f Wayland | ProHoster","og:description":"\u0412 swhkd (Simple Wayland HotKey Daemon) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u0441 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 unix-\u0441\u043e\u043a\u0435\u0442\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-swhkd-menedzhere-goryachih-klavish-dlya-wayland","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-04-17T19:36:41+00:00","article:modified_time":"2022-04-17T19:36:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103807","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 10:28:44","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-04-17 19:37:39","updated":"2026-01-25 10:28:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/103807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=103807"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/103807\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=103807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=103807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=103807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}