Golang: Web Cache Deception Vulnerability #14775

aydinnyunus · 2023-11-13T21:06:19Z

Pull Request: Add Web Cache Deception Query for CodeQL

Overview

This pull request introduces a new CodeQL query to detect potential Web Cache Deception vulnerabilities in web applications. Web Cache Deception is a security vulnerability where attackers trick a server into caching sensitive information, which they can later access. This query aims to identify code patterns that might make an application susceptible to this type of attack.

Changes Introduced

New Query Added: WebCacheDeception.ql - Detects patterns where web applications might cache sensitive information inadvertently.
Experimental Code Samples: Included in the /examples directory, demonstrating both vulnerable (bad) and secure (good) coding practices related to caching.
Documentation: Added documentation explaining the query's purpose, usage, and the nature of the vulnerability.

Implementation Details

The query looks for server configurations or code patterns where URLs can be manipulated to cache sensitive information.
Focuses on common web languages and frameworks where this vulnerability might occur.

Testing and Validation

Query tested against a range of synthetic code samples (included in the PR).
Validated for false positive rates and performance impact on large codebases.

Future Work

Plan to extend support to additional languages and frameworks.
Open to community feedback for further refinement and optimization.

References

Link to the OWASP page on Web Cache Deception: OWASP Web Cache Deception Attack.

… and Fixed Version

owen-mc · 2023-11-13T23:50:19Z

Please put the query in go/ql/src/experimental/CWE-525. You seem to accidentally have two (slightly different?) copies of the query. Please put tests in go/ql/test/experimental/CWE-525 with a .qlref file pointing to the query. No need for a change note since it will be in experimental. (and change notes have to be formatted following this guide.) Please don't commit the database, or anything else in the wcd directory.

owen-mc · 2023-11-13T23:51:28Z

Will you be submitting a bug bounty application for this PR? If so then you can start the process now.

aydinnyunus · 2023-11-14T06:28:00Z

Hi,

Yes I submitted to the Bug Bounty Platform.

I removed wcd directory
Change changelog format
Move tests to go/ql/test/experimental/CWE-525
Move query to go/ql/src/experimental/CWE-525

github-actions · 2023-11-14T14:11:35Z

QHelp previews:

go/ql/src/experimental/CWE-525/WebCacheDeception.qhelp

Unknown query

Web Cache Deception is a security vulnerability where an attacker tricks a web server into caching sensitive information and then accesses that cached data.

This attack exploits certain behaviors in caching mechanisms by requesting URLs that trick the server into thinking that a non-cachable page is cachable. If a user then accesses sensitive information on these pages, it could be cached and later retrieved by the attacker.

Recommendation

To prevent Web Cache Deception attacks, web applications should clearly define cacheable and non-cacheable resources. Implementing strict cache controls and validating requested URLs can mitigate the risk of sensitive data being cached.

Example

Vulnerable code example: A web server is configured to cache all responses ending in '.css'. An attacker requests 'profile.css', and the server processes 'profile', a sensitive page, and caches it.

package main

import (
	"fmt"
	"html/template"
	"log"
	"net/http"
	"os/exec"
	"strings"
	"sync"
)

var sessionMap = make(map[string]string)

var (
	templateCache = make(map[string]*template.Template)
	mutex         = &sync.Mutex{}
)

type Lists struct {
	Uid       string
	UserName  string
	UserLists []string
	ReadFile  func(filename string) string
}

func parseTemplateFile(templateName string, tmplFile string) (*template.Template, error) {
	mutex.Lock()
	defer mutex.Unlock()

	// Check if the template is already cached
	if cachedTemplate, ok := templateCache[templateName]; ok {
		fmt.Println("cached")
		return cachedTemplate, nil
	}

	// Parse and store the template in the cache
	parsedTemplate, _ := template.ParseFiles(tmplFile)
	fmt.Println("not cached")

	templateCache[templateName] = parsedTemplate
	return parsedTemplate, nil
}

func ShowAdminPageCache(w http.ResponseWriter, r *http.Request) {

	if r.Method == "GET" {
		fmt.Println("cache called")
		sessionMap[r.RequestURI] = "admin"

		// Check if a session value exists
		if _, ok := sessionMap[r.RequestURI]; ok {
			cmd := "mysql -h mysql -u root -prootwolf -e 'select id,name,mail,age,created_at,updated_at from vulnapp.user where name not in (\"" + "admin" + "\");'"

			// mysql -h mysql -u root -prootwolf -e 'select id,name,mail,age,created_at,updated_at from vulnapp.user where name not in ("test");--';echo");'
			fmt.Println(cmd)

			res, err := exec.Command("sh", "-c", cmd).Output()
			if err != nil {
				fmt.Println("err : ", err)
			}

			splitedRes := strings.Split(string(res), "\n")

			p := Lists{Uid: "1", UserName: "admin", UserLists: splitedRes}

			parsedTemplate, _ := parseTemplateFile("page", "./views/admin/userlists.gtpl")
			w.Header().Set("Cache-Control", "no-store, no-cache")
			err = parsedTemplate.Execute(w, p)
		}
	} else {
		http.NotFound(w, nil)
	}

}

func main() {
	fmt.Println("Vulnapp server listening : 1337")

	http.Handle("/assets/", http.StripPrefix("/assets/", http.FileServer(http.Dir("assets/"))))

	http.HandleFunc("/adminusers/", ShowAdminPageCache)
	err := http.ListenAndServe(":1337", nil)
	if err != nil {
		log.Fatal("ListenAndServe: ", err)
	}
}

Example

Secure code example: The server is configured with strict cache controls and URL validation, preventing caching of dynamic or sensitive pages regardless of their URL pattern.

package main

import (
	"fmt"
	"html/template"
	"log"
	"net/http"
	"os/exec"
	"strings"
	"sync"
)

var sessionMap = make(map[string]string)

var (
	templateCache = make(map[string]*template.Template)
	mutex         = &sync.Mutex{}
)

type Lists struct {
	Uid       string
	UserName  string
	UserLists []string
	ReadFile  func(filename string) string
}

func parseTemplateFile(templateName string, tmplFile string) (*template.Template, error) {
	mutex.Lock()
	defer mutex.Unlock()

	// Check if the template is already cached
	if cachedTemplate, ok := templateCache[templateName]; ok {
		fmt.Println("cached")
		return cachedTemplate, nil
	}

	// Parse and store the template in the cache
	parsedTemplate, _ := template.ParseFiles(tmplFile)
	fmt.Println("not cached")

	templateCache[templateName] = parsedTemplate
	return parsedTemplate, nil
}

func ShowAdminPageCache(w http.ResponseWriter, r *http.Request) {

	if r.Method == "GET" {
		fmt.Println("cache called")
		sessionMap[r.RequestURI] = "admin"

		// Check if a session value exists
		if _, ok := sessionMap[r.RequestURI]; ok {
			cmd := "mysql -h mysql -u root -prootwolf -e 'select id,name,mail,age,created_at,updated_at from vulnapp.user where name not in (\"" + "admin" + "\");'"

			// mysql -h mysql -u root -prootwolf -e 'select id,name,mail,age,created_at,updated_at from vulnapp.user where name not in ("test");--';echo");'
			fmt.Println(cmd)

			res, err := exec.Command("sh", "-c", cmd).Output()
			if err != nil {
				fmt.Println("err : ", err)
			}

			splitedRes := strings.Split(string(res), "\n")

			p := Lists{Uid: "1", UserName: "admin", UserLists: splitedRes}

			parsedTemplate, _ := parseTemplateFile("page", "./views/admin/userlists.gtpl")
			w.Header().Set("Cache-Control", "no-store, no-cache")
			err = parsedTemplate.Execute(w, p)
		}
	} else {
		http.NotFound(w, nil)
	}

}

func main() {

	fmt.Println("Vulnapp server listening : 1337")

	http.Handle("/assets/", http.StripPrefix("/assets/", http.FileServer(http.Dir("assets/"))))
	http.HandleFunc("/adminusers", ShowAdminPageCache)

	err := http.ListenAndServe(":1337", nil)
	if err != nil {
		log.Fatal("ListenAndServe: ", err)
	}
}

References

OWASP Web Cache Deception Attack: Understanding Web Cache Deception Attacks

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+where
+  httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
+  httpHandleFuncCall.getNumArgument() > 1 and
+  httpHandleFuncCall.getArgument(0).getType().toString() = "string" and


go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+  httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
+  httpHandleFuncCall.getNumArgument() > 1 and
+  httpHandleFuncCall.getArgument(0).getType().toString() = "string" and
+  httpHandleFuncCall.getArgument(0).toString().matches("%/\"") and


go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+  // Find the corresponding expression for the predecessor
+  get.hasQualifiedName("net/http", "Header", "Set") and
+  call = get.getACall() and
+  call.getArgument(0).toString().matches("\"Cache-Control\"")


go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+  // Find the corresponding expression for the predecessor
+  get.hasQualifiedName("net/http", "Header", "Set") and
+  call = get.getACall() and
+  call.getArgument(0).toString().matches("\"Cache-Control\"")


owen-mc

Please add a file go/ql/test/experimental/CWE-525/WebCacheDeception.qlref containing the line experimental/CWE-525/WebCacheDeception.ql. This will make the tests run. Please also delete go/ql/test/experimental/CWE-525/WebCacheDeception.qhelp (we only need one copy, with the query).

aydinnyunus · 2023-11-14T14:33:29Z

i removed the qhelp file and add qlref file
submitted to the codeql bug bounty

aydinnyunus · 2023-11-14T16:54:39Z

i tried on latest release but i did not understand the failed checks.

owen-mc

Do you know how to run the tests locally? There are some basic problems that need to be fixed. The ones that are labelled "CONSISTENCY/UnexpectedFrontendErrors.ql" in the CI results are build failures for the test file. If you run go build ." in the test folder you should see the problems. You also need a WebCacheDeception.expected` file showing the results you expect from running the query on the test file.

Please delete the change note - this is not needed for an experimental query.

aydinnyunus · 2023-11-14T17:29:33Z

i removed the change notes and fix the build error

owen-mc

There are still some failures compiling the test files. I'm not sure if you can see the logs. The main problem is that the same global variables are declared in two files in the same directory. One way to avoid this would be to combine the two files in the test folder. Another would be to give the variables different names, e.g. sessionMap1 and sessionMap2. Also portNum is declared but not used.

You also need to create and commit a .expected file. You can generate this by running the tests with codeql test run --learn <path to folder>.

owen-mc · 2023-11-14T23:09:55Z

Also, you do not need to merge main into the branch. Do not worry about the warning that this branch is out-of-date with the base branch. Because github/codeql is a monorepo there are lots of PRs being merged that do not have any effect on this PR. If there is a conflict then there will be a different warning and some of the CI won't run, so it will be clear that it needs to be fixed.

aydinnyunus · 2023-11-15T06:35:57Z

i added expected file
fixed test errors

aydinnyunus · 2023-11-15T06:36:10Z

okay thank you for your information

owen-mc

I think the .expected file is malformed. It's also showing results in the good example as well as the bad one.

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

owen-mc · 2023-11-15T11:28:35Z

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+  get.hasQualifiedName("net/http", "Header", "Set") and
+  call = get.getACall() and
+  call.getArgument(0).toString().matches("\"Cache-Control\"")
+select httpHandleFuncCall.getArgument(0), call.getArgument(0)


This is not the right format for a path query. I will try to find some documentation to show you what it should be.

https://codeql.github.com/docs/writing-codeql-queries/creating-path-queries/#constructing-a-path-query
But actually, this isn't a path query, as it's currently written.

Yes it is checking for response Header. Is it okay now ?

get.hasQualifiedName("net/http", "Header", "Set") and call = get.getACall() and call.getArgument(0).getStringValue() = "Cache-Control"

Currently this query checks that (1) httpHandleFuncCall is a call to HandleFunc and its first argument ends in "/", and (2) call is a call to Header.Set and its first argument is "Cache-Control". What it doesn't do it relate those two things in any way. These two calls could be in totally different files, and not relate to the same objects. I'm not totally sure how you want to relate them. Perhaps the next paragraph will help.

I looked for where Header.Set is already used in our code and found private class HeaderWriteCall in go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll. It's private so you can't use it directly. But it extends Http::HeaderWrite::Range, so you can use Http::HeaderWrite and get it (and many more classes which do similar things in other libraries). It is defined here. If you aren't familiar with "the range pattern" this might be bit confusing, but basically try using HeaderWrite and it should just work. Do you think you could HeaderWrite instead?

To be clear, I'm expecting something like "there exists a HeaderWrite with getHeaderName() = A and getHeaderValue = B" plus something linking the headerwrite to httpHandleFuncCall.

I use HeaderWrite::Range in following syntax.

hw.getHeaderName() = "cache-control"

Yes. In my case I am checking is Cache Control used in the following function which used in the endpoint but I don't think that this HeaderWrite::Range check the following function. I think first method decrease the False Positive percentage.

Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>

owen-mc · 2023-11-15T13:12:03Z

Oh, I was wrong about the .expected file being bad. It was just wrapping weirdly on my screen.

owen-mc

Can you tell me in words how the header write should be linked to the call to HandleFunc? In fact, it might be helpful to describe exactly what you want the whole query to do in words, so that I can help you get it doing the right thing.

aydinnyunus · 2023-11-16T12:11:25Z

Can you tell me in words how the header write should be linked to the call to HandleFunc?

In HandleFunc, if first argument contains "/" at the end. It means "/admin/asd.css" and "/admin" shows the same page. I want to check in second parameter in HandleFunc, if caching mechanism works on that endpoint it can cause Web Cache Deception attacks. So I checked the provided function in second parameter. Is the function have "Cache-Control". But In some cases it has no necessary to do it on that function. So I use HeaderWrite::Range but it maybe cause false positive issues if that endpoint not cached.

owen-mc · 2023-11-16T16:16:32Z

I think what you need to add is

the second argument of httpHandleFuncCall is a DataFlow::ReadNode called rn
there is a DeclaredFunction called f which satisfies rn.reads(f)
the first parameter of f is hw.getResponseWriter()

(You should probably define rn and f in the from clause of the query.)

By the way, does it matter what value the "Cache-Control" header is set to?

aydinnyunus · 2023-11-16T20:43:19Z

I think what you need to add is

the second argument of httpHandleFuncCall is a DataFlow::ReadNode called rn

there is a DeclaredFunction called f which satisfies rn.reads(f)

the first parameter of f is hw.getResponseWriter()

(You should probably define rn and f in the from clause of the query.)

By the way, does it matter what value the "Cache-Control" header is set to?

from DataFlow::CallNode httpHandleFuncCall, DataFlow::ReadNode rn, Http::HeaderWrite::Range hw, DeclaredFunction f
where
  httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
  httpHandleFuncCall.getArgument(0).getType().getUnderlyingType() instanceof StringType and
  httpHandleFuncCall.getArgument(0).getStringValue().matches("%/") and
  rn.reads(f) and
  f.getParameter(0) = hw.getResponseWriter() and
  hw.getHeaderName() = "cache-control"
select httpHandleFuncCall.getArgument(0), hw.getResponseWriter()

sorry for previous comment. header value is not necessary in my case

owen-mc · 2023-11-16T22:21:25Z

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+  DeclaredFunction f
+where
+  httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
+  httpHandleFuncCall.getArgument(0).getType().getUnderlyingType() instanceof StringType and


Suggested change

httpHandleFuncCall.getArgument(0).getType().getUnderlyingType() instanceof StringType and

This line is not needed because it is implied by the line below.

owen-mc · 2023-11-16T22:22:20Z

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+  httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
+  httpHandleFuncCall.getArgument(0).getType().getUnderlyingType() instanceof StringType and
+  httpHandleFuncCall.getArgument(0).getStringValue().matches("%/") and
+  rn.reads(f) and


Suggested change

rn.reads(f) and

httpHandleFuncCall.getArgument(1) = rn and

rn.reads(f) and

owen-mc · 2023-11-17T00:27:57Z

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+/*
+ * @name Web Cache Deception
+ * @description A caching system has been detected on the application and is vulnerable to web cache deception. By manipulating the URL it is possible to force the application to cache pages that are only accessible by an authenticated user. Once cached, these pages can be accessed by an unauthenticated user.
+ * @kind path-problem


Suggested change

* @kind path-problem

* @kind problem

owen-mc · 2023-11-17T00:30:14Z

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

+  rn.reads(f) and
+  f.getParameter(0) = hw.getResponseWriter() and
+  hw.getHeaderName() = "cache-control"
+select httpHandleFuncCall.getArgument(0), hw.getResponseWriter()


Suggested change

select httpHandleFuncCall.getArgument(0), hw.getResponseWriter()

select httpHandleFuncCall.getArgument(0), hw.getResponseWriter()

Please follow these instructions on the format of the select clause. In particular, there needs to be a string explaining briefly what the problem is. If you want examples. search the repo for "@kind problem" to find other non-path queries and look at what message they have in their select clause.

aydinnyunuss and others added 6 commits November 13, 2023 23:35

Add Web Cache Deception Query and Example Code Snippet

1eb1293

Format Document

9539532

Rename Folder

78a6522

Add Web Cache Deception QHelp and Example Code Snippet for Vulnerable…

4317e58

… and Fixed Version

Add Changelog for the Pull Request

1c0aa67

Merge branch 'github:main' into main

a007d6e

aydinnyunus requested a review from a team as a code owner November 13, 2023 21:06

github-actions bot added documentation Go labels Nov 13, 2023

aydinnyunuss added 3 commits November 14, 2023 00:09

fix changelog pipeline error

5468767

Merge branch 'main' of github.com:aydinnyunus/codeql

2f50618

fix changelog pipeline error

bf59c94

Fix Pull Requests Problems

47ef123

github-advanced-security bot found potential problems Nov 14, 2023

View reviewed changes

owen-mc requested changes Nov 14, 2023

View reviewed changes

aydinnyunuss and others added 2 commits November 14, 2023 17:23

remove qhelp file and add qlref

e576650

Merge branch 'main' into main

9f63613

aydinnyunus mentioned this pull request Nov 14, 2023

Web Cache Deception CodeQL github/securitylab#801

Open

2 tasks

ghsecuritylab marked this pull request as draft November 14, 2023 16:02

Merge branch 'main' into main

ec7309c

aydinnyunus marked this pull request as ready for review November 14, 2023 16:19

owen-mc requested changes Nov 14, 2023

View reviewed changes

aydinnyunuss added 2 commits November 14, 2023 20:19

remove change-notes and fix build error

dbdf9e1

remove wcd directory

2cea720

aydinnyunuss and others added 2 commits November 14, 2023 20:20

Merge branch 'main' of github.com:aydinnyunus/codeql

ba672e5

Merge branch 'main' into main

9548a0e

Merge branch 'main' into main

b1702ab

aydinnyunus requested a review from owen-mc November 14, 2023 20:18

owen-mc requested changes Nov 14, 2023

View reviewed changes

aydinnyunuss added 2 commits November 15, 2023 09:33

fix test errors

9178cec

Merge branch 'main' of github.com:aydinnyunus/codeql

fdefcd6

aydinnyunus requested a review from owen-mc November 15, 2023 06:36

owen-mc requested changes Nov 15, 2023

View reviewed changes

aydinnyunus and others added 6 commits November 15, 2023 15:08

Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql

74f1344

Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>

Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql

fa1fa0d

Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>

Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql

d5f2547

Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>

fix the rule issues

1e91572

remove database

1ed4d2a

fix tests code issues and expected file

7877082

modify tests and rule

8a24daf

aydinnyunus requested a review from owen-mc November 15, 2023 16:41

owen-mc reviewed Nov 16, 2023

View reviewed changes

aydinnyunus requested a review from owen-mc November 16, 2023 12:11

update rule and expected file

8ff3832

owen-mc requested changes Nov 17, 2023

View reviewed changes

Golang: Web Cache Deception Vulnerability #14775

Golang: Web Cache Deception Vulnerability #14775

aydinnyunus commented Nov 13, 2023

owen-mc commented Nov 13, 2023

owen-mc commented Nov 13, 2023

aydinnyunus commented Nov 14, 2023

github-actions bot commented Nov 14, 2023 •

edited

Unknown query

Recommendation

Example

Example

References

owen-mc left a comment

aydinnyunus commented Nov 14, 2023

aydinnyunus commented Nov 14, 2023

owen-mc left a comment

aydinnyunus commented Nov 14, 2023

owen-mc left a comment •

edited

owen-mc commented Nov 14, 2023

aydinnyunus commented Nov 15, 2023

aydinnyunus commented Nov 15, 2023

owen-mc left a comment •

edited

owen-mc Nov 15, 2023 •

edited

owen-mc Nov 15, 2023 •

edited

aydinnyunus Nov 15, 2023

owen-mc Nov 15, 2023

owen-mc Nov 15, 2023

aydinnyunus Nov 15, 2023

aydinnyunus Nov 15, 2023

owen-mc commented Nov 15, 2023

owen-mc left a comment •

edited

aydinnyunus commented Nov 16, 2023

owen-mc commented Nov 16, 2023

aydinnyunus commented Nov 16, 2023 •

edited

owen-mc Nov 16, 2023

owen-mc Nov 16, 2023

owen-mc Nov 17, 2023

owen-mc Nov 17, 2023

	rn.reads(f) and
	httpHandleFuncCall.getArgument(1) = rn and
	rn.reads(f) and

	select httpHandleFuncCall.getArgument(0), hw.getResponseWriter()
	select httpHandleFuncCall.getArgument(0), hw.getResponseWriter()

Golang: Web Cache Deception Vulnerability #14775

Are you sure you want to change the base?

Golang: Web Cache Deception Vulnerability #14775

Conversation

aydinnyunus commented Nov 13, 2023

Pull Request: Add Web Cache Deception Query for CodeQL

Overview

Changes Introduced

Implementation Details

Testing and Validation

Future Work

References

owen-mc commented Nov 13, 2023

owen-mc commented Nov 13, 2023

aydinnyunus commented Nov 14, 2023

github-actions bot commented Nov 14, 2023 • edited

Unknown query

Recommendation

Example

Example

References

owen-mc left a comment

Choose a reason for hiding this comment

aydinnyunus commented Nov 14, 2023

aydinnyunus commented Nov 14, 2023

owen-mc left a comment

Choose a reason for hiding this comment

aydinnyunus commented Nov 14, 2023

owen-mc left a comment • edited

Choose a reason for hiding this comment

owen-mc commented Nov 14, 2023

aydinnyunus commented Nov 15, 2023

aydinnyunus commented Nov 15, 2023

owen-mc left a comment • edited

Choose a reason for hiding this comment

owen-mc Nov 15, 2023 • edited

Choose a reason for hiding this comment

owen-mc Nov 15, 2023 • edited

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

owen-mc commented Nov 15, 2023

owen-mc left a comment • edited

Choose a reason for hiding this comment

aydinnyunus commented Nov 16, 2023

owen-mc commented Nov 16, 2023

aydinnyunus commented Nov 16, 2023 • edited

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

github-actions bot commented Nov 14, 2023 •

edited

owen-mc left a comment •

edited

owen-mc left a comment •

edited

owen-mc Nov 15, 2023 •

edited

owen-mc Nov 15, 2023 •

edited

owen-mc left a comment •

edited

aydinnyunus commented Nov 16, 2023 •

edited