[B! javascript][DOM] dhrnameã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

dhrname id:dhrname

javascriptã¨DOMã«é–¢ã™ã‚‹dhrnameã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

IPAãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ã‚¦ã‚©ãƒƒãƒã€€ã€ŽDOM Based XSSã€ã«é–¢ã™ã‚‹ãƒ¬ãƒãƒ¼ãƒˆï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
IPAï¼ˆç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ã€ç†äº‹é•·ï¼šè—¤æ±Ÿ ä¸€æ£ï¼‰ã¯ã€IPAã«å±Šã‘å‡ºã‚‰ã‚Œã‚‹ã€ŒDOM Based XSSã€ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹å±Šå‡ºãŒ2012å¹´å¾ŒåŠã‹ã‚‰å¢—åŠ ã—ã¦ã„ã‚‹ã“ã¨ã‚’è¸ã¾ãˆã€ãã‚Œã‚‰ã®æƒ…å ±ã‚’åˆ†æžã—ã¦å½“è©²è„†å¼±æ€§ã®æ¦‚è¦ã‚„å¯¾ç–ã®ãƒã‚¤ãƒ³ãƒˆã‚’ã¾ã¨ã‚ãŸæŠ€è¡“ãƒ¬ãƒãƒ¼ãƒˆï¼ˆIPAãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ã‚¦ã‚©ãƒƒãƒ ç¬¬13å›žï¼‰ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ IPAã«å¤šãã®å±Šå‡ºãŒã‚ã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼‰ã®è„†å¼±æ€§ã§ã™ãŒã€2012å¹´ç¬¬1å››åŠæœŸã‹ã‚‰ç¬¬3å››åŠæœŸã®æœŸé–“ã§ã¯åˆè¨ˆ38ä»¶ã ã£ãŸã€ŒDOM Based XSSã€ã¨å‘¼ã°ã‚Œã‚‹ã‚¿ã‚¤ãƒ—ã®ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®è„†å¼±æ€§ã®å±Šå‡ºãŒã€ç¬¬4å››åŠæœŸã ã‘ã§92ä»¶ï¼ˆç¬¬3å››åŠæœŸã¾ã§ã®ä»¶æ•°æ¯”ç´„2.4å€å¢—ï¼‰ã¨æ€¥å¢—ã—ã¾ã—ãŸã€‚ ä¸€èˆ¬ã«ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¯ã€ã‚µãƒ¼ãƒå´ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã«ä½œã‚Šè¾¼ã¾ã‚Œã¦ã—ã¾ã†è„†å¼±æ€§ã§ã™ãŒã€ã€ŒDOM Based XSSã€ã¨å‘¼ã°ã‚Œã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®è„†å¼±æ€§ã¯ã€
dhrname 2013/02/01
DOM

JavaScript

é–‹ç™º

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
appendChild vs insertBefore | High Performance Web Sites
May 11, 2010 12:15 am | 43 Comments Iâ€™ve looked at a bunch of third party JavaScript snippets as part of my P3PC series. As I analyzed each of these snippets, I looked to see if scripts were being loaded dynamically. After all, this is a key ingredient for making third party content fast. It turns out nobody does dynamic loading the same way. Iâ€™d like to walk through some of the variations I found
dhrname 2011/09/16
JavaScript

DOM

é–‹ç™º
ãƒªãƒ³ã‚¯
DOMã«è¦ç´ ãŒæŒ¿å…¥ã•ã‚Œã‚‹åº¦ã«ã‚¤ãƒ™ãƒ³ãƒˆã‚’èµ·ã“ã™DOMNodeInsertedã®æ‰±ã„æ–¹ - ä¸‰ç‰å…µ
DOMã«è¦ç´ ãŒæŒ¿å…¥ã•ã‚ŒãŸã¨ãã‚’æ¤œå‡ºã§ãã‚‹ã®ãŒDOMNodeInsertedã‚¤ãƒ™ãƒ³ãƒˆã€‚ ãŸã¨ãˆã°ajaxã§ç‰¹å®šã®å ´æ‰€ãŒè¡¨ç¤ºã•ã‚ŒãŸã‚‰DOMã«è¦ç´ ãŒæŒ¿å…¥ã•ã‚ŒãŸã¨ãã‚„ã€ãƒšãƒ¼ã‚¸ãƒ³ã‚°ç³»ã®ã‚¢ãƒ‰ã‚ªãƒ³ã‚„ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§ã‚¹ã‚¯ãƒãƒ¼ãƒ«ãƒãƒ¼ãŒä¸‹ã«ããŸã‚‰è¦ç´ ãŒæŒ¿å…¥ã•ã‚ŒãŸã¨ããªã©ã€ãã†ã„ã£ãŸã¨ãã«ã‚¤ãƒ™ãƒ³ãƒˆã‚’ç™ºç”Ÿã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ è¦ç´ ãŒæŒ¿å…¥ã•ã‚ŒãŸã‹ã©ã†ã‹æ¤œå‡ºã™ã‚‹ã«ã¯è‡ªå‰ã§DOMã‚’ç›£è¦–ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’æ›¸ãå¿…è¦ãŒã‚ã‚Šã¾ã™ãŒã€ã“ã®ã‚¤ãƒ™ãƒ³ãƒˆã‚’ä½¿ãˆã°ç°¡å˜ã§ã™ãã€‚IEä»¥å¤–ã®ä¸»è¦ãªãƒ–ãƒ©ã‚¦ã‚¶ã«ã¯å®Ÿè£…ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã—ã‹ã—ã“ã‚Œã©ã†ã‚‚ç¢ºèªã—ã¦ã¿ãŸã‚‰éžæŽ¨å¥¨ã«ãªã£ã¦ã‚‹ã‚‰ã—ã„ã‚“ã ã‘ã©ã€‚ http://www.w3.org/TR/DOM-Level-3-Events/#event-type-DOMNodeInserted ã‚ã‚Œã‹ã€‚åŒæœŸçš„ã ã‹ã‚‰ã‹ãªã€‚ä½•ã‚‚ã—ã‚‰ãšã«ä½¿ã†ã¨é¢å€’ãªã“ã¨ãªã‚Šã¾ã™ã‹ã‚‰ãã€‚ã¨ã„ã†ã‹ãªã‚Šã¾ã—ãŸã€‚ã¨ã¯ã„ãˆã€ã“ã‚Œã«å¤‰ã‚ã‚‹ã‚‚ã®ã¯ãªã„
dhrname 2011/06/03
JavaScript

DOM
ãƒªãƒ³ã‚¯
ãƒ–ãƒ©ã‚¦ã‚¶å‹•ä½œã®ç†è§£ï¼ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ãƒ„ãƒªãƒ¼ã®æ§‹ç¯‰ã¨æç”»ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚° | ã‚†ã£ãã‚Šã¨â€¦
HTML5 ã® Web Worker ã‚„ã‚‰ GPU ã§ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ãƒ»ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ãƒˆã•ã‚Œã‚‹ IE9 ã®ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ãªã©ã€ä»Šå¹´ã‚‚ãƒ–ãƒ©ã‚¦ã‚¶ã®é€²åŒ–ãŒæ¿€ã—ããªã‚Šãã†ã§ã™ãƒã€‚ä¸€æ–¹ã§ãƒ•ãƒãƒ³ãƒˆï½¥ã‚¨ãƒ³ãƒ‰æ”¹å–„ã«ã‚ˆã‚‹ãƒšãƒ¼ã‚¸è¡¨ç¤ºã®é«˜é€ŸåŒ– Tips ã‚„ Hack ã‚‚ç™¾èŠ±ç¹šä¹±ã€å‡ºå°½ãã—ãŸæ„ŸãŒã‚ã‚Šã¾ã™ãŒã€ã‚„ã¯ã‚ŠåŽŸç†åŽŸå‰‡ã‚’çŸ¥ã‚‰ãªã„ã¨ ã€Œã©ã‚ŒãŒæ£ã—ãã¦ç‹ãŒè‰¯ã„ã‹ã€ ä¸ã€…åˆ¤æ–ãŒåŠ¹ã‹ãªã„ã¨æ€ã„ã¾ã›ã‚“ã‹ï¼Ÿ ãã“ã§æœ€ã‚‚åŸºæœ¬çš„ãª ã€Œãƒšãƒ¼ã‚¸ã®èªã¿è¾¼ã¿ã‹ã‚‰è¡¨ç¤ºã¾ã§ã€ãƒ–ãƒ©ã‚¦ã‚¶ã£ã¦ä½•ã‚’ã©ã†ã‚„ã£ã¦ã‚‹ã®ï¼Ÿã€ ã‚’ç†è§£ã—ã¦ã„ããŸã„ãªã¨æ€ã£ã¦ã„ã¾ã™ã€‚ ä¸€ç•ªã®åŽ³å¯†ã‹ã¤çŽ‹é“ã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶é–“ã®é•ã„ã‚’æ¥µåŠ›å°‘ãªãã™ã‚‹ã‚ˆã†ã«æ³¨æ„æ·±ãæ›¸ã‹ã‚Œã¦ã„ã‚‹ HTML5 ã®ä»•æ§˜æ›¸ ã‚’ç†è§£ã ã¨æ€ã„ã¾ã™ãŒã€ã‚¤ã‚ãƒŠãƒªã§ã¯ãƒãƒ¼ãƒ‰ãƒ«ãŒé«˜ã„ã®ã§ã€ã¾ãšã¯å‘¨è¾ºã‚’æ¼ã£ã¦ã„ã¾ã™ã€‚ãã‚“ãªä¸ã‹ã‚‰ã€ã¡ã‚‡ã£ã¨å¤ã„ã§ã™ãŒã€2004å¹´5æœˆã®è¨˜äº‹ ã€ŒTesting Page Load Speedã€ ã‚’ä»Šå›žã€ç¿»è¨³
dhrname 2011/01/13
ãƒ–ãƒ©ã‚¦ã‚¶é–‹ç™ºè€…ãŸã¡ã¯ã©ã®ã‚ˆã†ã«ã—ã¦ã€ä½“æ„Ÿé€Ÿåº¦ã‚’ä¸Šã’ã¦ã„ã£ãŸã®ã‹ã€ãã®è‹¦åŠ´ã‚’çŸ¥ã‚‹ã“ã¨ãŒã§ãã‚‹

ãƒ–ãƒ©ã‚¦ã‚¶

DOM

HTML

JavaScript

é–‹ç™º
ãƒªãƒ³ã‚¯
addEventListenerã§aã‚¿ã‚°ã®åˆæœŸå‹•ä½œã‚’ç„¡åŠ¹ã«ã™ã‚‹ - turusuke memo
dhrname 2010/11/28
IEã§ã®ç„¡åŠ¹ã®ã‚„ã‚Šæ–¹ã‚‚æŒ‡æ‘˜ã—ã¦ã„ã‚‹

JavaScript

DOM

W3C
ãƒªãƒ³ã‚¯
SVGãŒåˆ©ç”¨å¯èƒ½ã‹ã©ã†ã‹JavaScriptã§èª¿ã¹ã‚‹æ–¹æ³• - ynakajimaã®å‚™å¿˜éŒ²
Modernizr 1.5 ã‚ˆã‚ŠæŠœç²‹ return !!document.createElementNS && !!document.createElementNS( "http://www.w3.org/2000/svg", "svg").createSVGRect;
dhrname 2010/09/17
SVG

JavaScript

DOM

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

ãƒ–ãƒ©ã‚¦ã‚¶
ãƒªãƒ³ã‚¯
Debouncing Javascript Methods | John Hann
Back in 2006, I was the lead front-end architect for a mission-critical Web 2.0 application. Yah-yah, arenâ€™t they all mission-critical? Yes, but this one really was critical since it was one of those make-or-break moments for the product. What made this project really interesting were the unrealistic expectations the product managers had of web apps. Sometimes, pressure like this can lead to creat
dhrname 2010/04/02
debouncingã¨ã„ã†æŠ€è¡“ã«ãŠã‘ã‚‹è§£èª¬ï¼ˆè‹±èªžï¼‰

JavaScript

DOM
ãƒªãƒ³ã‚¯
HTMLDocument ã®å‹•çš„ãªä½œæˆ: Days on the Moon
ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§ã€JavaScript ã‚’ä½¿ã£ã¦ HTML ã®ã‚½ãƒ¼ã‚¹ã‹ã‚‰ HTML æ–‡æ›¸ã‚’ç”Ÿæˆã™ã‚‹ã®ã«ã€ã©ã‚“ãªæ–¹æ³•ãŒã‚ã‚‹ã®ã‹èª¿ã¹ã¾ã—ãŸã€‚ãªãŠã€ä»¥ä¸‹ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã¯ HTML æ–‡æ›¸ä¸Šã§å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒå‰æã§ã™ã€‚ è¡¨ã®è¦‹æ–¹ XSLT ã® HTML å‡ºåŠ› createHTMLDocument ãƒ¡ã‚½ãƒƒãƒ‰ createDocument ãƒ¡ã‚½ãƒƒãƒ‰ createDocument ãƒ¡ã‚½ãƒƒãƒ‰ã¨åå‰ç©ºé–“ã®æŒ‡å®š createDocument ãƒ¡ã‚½ãƒƒãƒ‰ã¨æ–‡æ›¸åž‹å®£è¨€ã®æŒ‡å®š createDocument ãƒ¡ã‚½ãƒƒãƒ‰ã¨æ–‡æ›¸åž‹å®£è¨€åŠã³åå‰ç©ºé–“ã®æŒ‡å®š cloneNode ãƒ¡ã‚½ãƒƒãƒ‰ iframe è¦ç´ ActiveXObject CID ã‹ã‚‰ã®ä½œæˆ ã¾ã¨ã‚ è¡¨ã®è¦‹æ–¹ ä»¥ä¸‹ã®è¡¨ã«ãŠã„ã¦ã€å„é …ç›®ã®æ„å‘³ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚ doc HTML æ–‡æ›¸ã‚’ä½œæˆã§ãã‚Œã°â—‹ã€XML æ–‡æ›¸ã‚’ä½œæˆã§ãã‚Œã°â–³ã€ãã‚Œä»¥å¤–ãªã‚‰Ã—ã§ã™ã€‚HTML æ–‡æ›¸ã‹ã©ã†ã‹ã¯ã€cre
dhrname 2010/01/23
JavaScript

DOM
ãƒªãƒ³ã‚¯
JavaScriptã®å‹•ã‹ãªã„ã‚³ãƒ¼ãƒ‰ã€€(ä¸ç´šç·¨)ã€€clickã‚¤ãƒ™ãƒ³ãƒˆã‚’å¼·åˆ¶çš„ã«ç™ºç”Ÿã•ã›ãŸã„ã€€ï¼ˆfireEvent/createEventã®ä½¿ã„æ–¹ï¼‰ - ä¸»ã«è¨€èªžã¨ã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºã«é–¢ã—ã¦
é€£è¼‰ç›®æ¬¡ã¸ ä»¥ä¸‹ã®JavaScriptã‚³ãƒ¼ãƒ‰ãŒæ„å›³ã—ãŸå‹•ä½œã‚’ã—ãªã„ã®ã¯ï¼Œãªãœã§ã™ã‹ã€‚ï¼ˆåˆ¶é™æ™‚é–“ï¼‘åˆ†ï¼‰ ã‚„ã‚ŠãŸã„äº‹ï¼š ã€Œã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’è¡¨ç¤ºã™ã‚‹ã€ã¨ã„ã†ï¼Œãƒ†ã‚ã‚¹ãƒˆãƒœãƒƒã‚¯ã‚¹ãŒã‚ã‚‹ã€‚ ã“ã®ãƒ†ã‚ã‚¹ãƒˆãƒœãƒƒã‚¯ã‚¹ã®å‹•ä½œãƒ†ã‚¹ãƒˆã‚’ã—ãŸã„ã€‚ã‚¯ãƒªãƒƒã‚¯ã®ã‚¤ãƒ™ãƒ³ãƒˆã‚’è‡ªå‹•çš„ã«ç™ºç”Ÿã•ã›ï¼Œã¡ã‚ƒã‚“ã¨ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒå‡ºã‚‹ã‹ã‚’ã‚³ãƒ¼ãƒ‰ã§ç¢ºèªã™ã‚‹ã€‚ <body> ã‚¤ãƒ™ãƒ³ãƒˆã®ç™ºç”Ÿæºã¨ãªã‚‹ãƒ†ã‚ã‚¹ãƒˆãƒœãƒƒã‚¯ã‚¹ï¼š <input type="text" onclick="onclick_func()" id="my_text"> clickæ™‚ã«ï¼Œã“ã“ã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ <div id="my_div"></div> ãƒ†ã‚¹ãƒˆï¼š <input type="button" onclick="test_onclick()" value="onclickã®å˜ä½“ãƒ†ã‚¹ãƒˆã‚’å®Ÿè¡Œ"> <script language="JavaScript">
dhrname 2010/01/17
DOM

JavaScript
ãƒªãƒ³ã‚¯
1