[B! XSS] boyasanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

boyasan id:boyasan

XSSã«é–¢ã™ã‚‹boyasanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

è¦‹ç¿’ã„ãƒã‚°ãƒãƒ³ã‚¿ãƒ¼ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ–ãƒã‚°: Amazon.co.jpã«ã‚ã£ãŸXSSã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚Œã¾ã—ãŸ
2014å¹´11æœˆ7æ—¥é‡‘æ›œæ—¥ Amazon.co.jpã«ã‚ã£ãŸXSSã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚Œã¾ã—ãŸ Amazonã®è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã¦Amazonã‚®ãƒ•ãƒˆåˆ¸ã‚’ã‚²ãƒƒãƒˆã™ã‚‹ã¨ã„ã†å¤¢ãŒã‚ã‚‹â€” ã‚‰ã¾ã£ã“ (@llamakko_cafe) 2014, 10æœˆ 17 æ—©é€Ÿå¤¢ã‚’å¶ãˆã‚‹ã¹ãAmazon.co.jpã®è„†å¼±æ€§ã‚’æŽ¢ã™ã“ã¨ã«ã€‚ æ•°åˆ†å¾Œâ€¦ã€‚ ã†ã‘ã‚‹â€” ã‚‰ã¾ã£ã“ (@llamakko_cafe) 2014, 10æœˆ 17 è¦‹ã¤ã‘ã¡ã‚ƒã„ã¾ã—ãŸã€‚ ã“ã®é–“4åˆ†ã€‚ è¦‹ã¤ã‘ãŸè„†å¼±æ€§ã¯XSSã§ã™ã€‚ ä»¥ä¸‹ãã®XSSã®è„†å¼±æ€§ã®è§£èª¬ã§ã™ã€‚ ä»Šå›žã¯ä¾‹ã¨ã—ã¦ã“ã®URLã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ http://www.amazon.co.jp/%E3%83%A4%E3%82%AC%E3%82%A4-%E3%81%8A%E3%82%84%E3%81%A4%E3%82%AB%E3%83%AB%E3%83%91%E3%82%B9-50%E6%
boyasan 2014/11/09
ã‘ã£ã“ã†ãµã¤ã†ã«ã‚ã‚‹ã‚“ã ãªãƒ¼

Amazon

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚ãªãŸã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯å®‰å…¨ã‹ã€‚Googleè£½ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚«ãƒ¼Â·Skipfish MOONGIFT
Skipfishã¯SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’ã¯ã˜ã‚Webå‘ã‘ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã™ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€‚ Skipfishã¯Googleè£½ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ»ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€‚2011å¹´ã«ãªã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆé–¢ä¿‚ã®è©±é¡ŒãŒé£›ã³äº¤ã£ã¦ã„ã‚‹ã€‚ç‰¹ã«å¤§ãã„ã®ã¯ã‚½ãƒ‹ãƒ¼ã ã‚ã†ã€‚ã‚ãã“ã¾ã§ã®è¦æ¨¡ã¯ç›¸å½“çã—ã„ãŒã€ä½•ã‚‚å¯¾å²¸ã®ç«äº‹ã¨ã„ã†è¨³ã§ã¯ãªã„ã€‚ ã‚ªãƒ—ã‚·ãƒ§ãƒ³ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚’ç‹™ã†ã®ã¯äººé–“ã«é™ã‚‰ãªã„ã€‚æ—¥ã€…ã‚¯ãƒãƒ¼ãƒ©ãƒ¼ãŒWebã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚’ç‹™ã£ã¦ã„ã‚‹ã®ã ã€‚ç‹™ã‚ã‚Œã‚‹å‰ã«Skipfishã‚’ä½¿ã£ã¦è‡ªä¸»çš„ã«ãƒã‚§ãƒƒã‚¯ã—ã¦ã¿ã‚ˆã†ã€‚ Skipfishã¯GoogleãŒé–‹ç™ºã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã ã€‚ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã§å‹•ä½œã™ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã€æŒ‡å®šã—ãŸURLã«å¯¾ã—ã¦SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„XSSãªã©Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒç‹™ã‚ã‚Œã‚„ã™ã„è„†å¼±æ€§ã‚’ã¤ã„ã¦ãã‚‹ã€‚çµæžœã¯HTMLãƒ™ãƒ¼ã‚¹ã®ãƒ¬ãƒãƒ¼ãƒˆã¨ã—ã¦å‡ºåŠ›ã•ã‚Œã‚‹ã€‚ çµæžœã¯
boyasan 2011/07/13
Google

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢
ãƒªãƒ³ã‚¯
Loading...
boyasan 2010/08/16
XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒã‚°

Firefox

ã‚¢ãƒ‰ã‚ªãƒ³
ãƒªãƒ³ã‚¯
Re:PHPã§èª°ã§ã‚‚ç°¡å˜Webã‚µãƒ¼ãƒ“ã‚¹è£½ä½œï¼ã§ãªã‚“ã‹ä½œã£ã¦å…¬é–‹ã—ãŸå¥´ã¡ã‚‡ã£ã¨æ¥ã„
Re:PHPã§èª°ã§ã‚‚ç°¡å˜Webã‚µãƒ¼ãƒ“ã‚¹è£½ä½œï¼ã§ãªã‚“ã‹ä½œã£ã¦å…¬é–‹ã—ãŸå¥´ã¡ã‚‡ã£ã¨æ¥ã„ ãƒã‚¿å…ƒï¼šPHPã§èª°ã§ã‚‚ç°¡å˜Webã‚µãƒ¼ãƒ“ã‚¹è£½ä½œï¼ã§ãªã‚“ã‹ä½œã£ã¦å…¬é–‹ã—ãŸå¥´ã¡ã‚‡ã£ã¨æ¥ã„ PHPã®XSSã¨SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è§£èª¬ãŒæ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ä¸å¯§ã«æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã®ã§ãœã²ä¸€èªãã ã•ã„ã€‚ãŸã ã€èªã‚€ä¸Šã§1ç‚¹æ³¨æ„ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ XSSã¯ãã‚Œã»ã©å˜ç´”ã˜ã‚ƒãªã„ï¼ ãƒã‚¿ã‚‚ã¨ã®XSSå¯¾ç–æ¸ˆã¿ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã®ï¼‘è¡Œç›®ã§æ¬¡ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ãŒã‚ã‚Šã¾ã™ã€‚ <form action="<?=$_SERVER['PHP_SELF']?>" method="get"> å®Ÿã¯ã“ã“ã«ã‚‚XSSã®è„†å¼±æ€§ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚æ¬¡ã®ã‚ˆã†ãªURLã§ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚ŒãŸå ´åˆã€ä»»æ„ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã¾ã™ã€‚ http://www.example.jp/ example.php/%22%3E%3Cscript%3Ealert(document.co
boyasan 2010/02/22
ã‹ã£ã“ã„ã„ãƒ»ãƒ»ãƒ»

XSS

PHP

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

counteraction
ãƒªãƒ³ã‚¯
IIS 7.5 è¯¦ç»†é”™è¯¯ - 404.0 - Not Found
é”™è¯¯æ‘˜è¦ HTTP é”™è¯¯ 404.0 - Not Found æ‚¨è¦æ‰¾çš„èµ„æºå·²è¢«åˆ é™¤ã€å·²æ›´åæˆ–æš‚æ—¶ä¸å¯ç”¨ã€‚
boyasan 2009/12/19
2ch

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS

EC

ã“ã‚Œã¯ã²ã©ã„
ãƒªãƒ³ã‚¯
ã‚»ãƒ–ãƒ³-ã‚¤ãƒ¬ãƒ–ãƒ³
boyasan 2009/12/19
ãªã„ã‚‰ã—ã„

EC

SERP

XSS
ãƒªãƒ³ã‚¯
htmlspecialcharsã®Shift_JISãƒã‚§ãƒƒã‚¯æ¼ã‚Œã«ã‚ˆã‚‹XSSå›žé¿ç–
è£œè¶³ ã“ã®è¨˜äº‹ã¯æ—§å¾³ä¸¸æµ©ã®æ—¥è¨˜ã‹ã‚‰ã®è»¢è¼‰ã§ã™ï¼ˆå…ƒURLã€ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯1ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯2ï¼‰ã€‚ å‚™å¿˜ã®ãŸã‚è»¢è¼‰ã„ãŸã—ã¾ã™ãŒã€ã“ã®è¨˜äº‹ã¯2009å¹´10æœˆ9æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã‚‚ã®ã§ã€å½“æ™‚ã®å¾³ä¸¸ã®è€ƒãˆã‚’ç¤ºã™ã‚‚ã®ã‚’ã€åŸºæœ¬çš„ã«å†…å®¹ã‚’å¤‰æ›´ã›ãšã«ãã®ã¾ã¾è»¢è¼‰ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ è£œè¶³çµ‚ã‚ã‚Š ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€PHPã®htmlspecialcharsé–¢æ•°ã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒã‚§ãƒƒã‚¯ä¸å‚™ã‚’ã¤ã„ãŸã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)è„†å¼±æ€§ã«ã¤ã„ã¦ã€PHPå´ã®ãƒ‘ãƒƒãƒãŒæä¾›ã•ã‚Œãªã„çŠ¶æ³ã§ã®å›žé¿ç–ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ ä½•ãŒå•é¡Œã‹ PHPã«ãŠã„ã¦ã€XSSå¯¾ç–ã«ã¯htmlspecialcharsã«ã‚ˆã£ã¦è¨˜å·ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã“ã¨ãŒè¡Œã‚ã‚Œã¾ã™ã—ã‹ã—ã€htmlspecialcharsã‚’åˆ©ç”¨ã—ã¦ã„ã¦ã‚‚ã€Shift_JISã®å…ˆè¡Œãƒã‚¤ãƒˆã‚’åˆ©ç”¨ã—ã¦ã€XSSãŒç™ºç”Ÿã™ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ä¾‹ãˆã°ã€ä»¥ä¸‹ã®ã‚ˆã†ãªINPUTãŒã‚
boyasan 2009/10/09
PHP

XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
UTF-8ã®å†—é•·ãªã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã¨ã¯ä½•ã§ã€ãªã‚“ã§ãã‚ŒãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«å±ãªã„ã®ã‹ï¼Ÿã‚’æ–‡å—ã‚³ãƒ¼ãƒ‰çŸ¥è˜ãƒ¬ãƒ´ã‚§ãƒ«3ãã‚‰ã„ã®å‡¡ãƒ—ãƒã‚°ãƒ©ãƒžãŒè€ƒãˆã¦ã¿ã‚‹ - tohokuaikiã®ãƒãƒ©ã‚·ã®è£
ä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ | yohgaki's blog ã£ã¦ã‚ã‚‹ã‚ˆã†ã«ã€ã„ã¾ã„ã¡æ–‡å—ã‚³ãƒ¼ãƒ‰ã®ä¸æ£ãªåˆ¤å®šã«ã‚ˆã‚‹å±é™ºæ€§ã£ã¦ã®ãŒåˆ†ã‹ã£ã¦ãªã„ã€‚ SJISã®å•é¡Œã¯ã€ï¼ˆ2/3ï¼‰SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’æ ¹çµ¶ï¼ã‚»ã‚ãƒ¥ã‚¢é–‹ç™ºã®æ¥µæ„ - ç¬¬5å›žâ– æ³¨ç›®ã•ã‚Œã‚‹æ–‡å—ã‚³ãƒ¼ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œï¼šITproã®è¨˜äº‹ãŒã‚ã‹ã‚Šã‚„ã™ã‹ã£ãŸã€‚ ã¨ã„ã†ã‹ã€ã‚„ã£ã±ã‚ŠPHPä½¿ã£ã¦ã‚‹ã¨èª°ã§ã‚‚ä¸€åº¦ã¯ã€Œãªã‚“ã˜ã‚ƒã“ã®ã€Žï¿¥ã€ã¯ï¼Ÿã€ã£ã¦æ€ã†ã‚‚ã‚“ãªã‚“ã§ã€‚ ãªã‚‹ã»ã©ã€ç¢ºã‹ã«â†“ã®å›³ã®ã‚ˆã†ã«ã€Œã‚ã‚‹ãƒã‚¤ãƒˆã€ãŒ2ã¤ã®æ„å‘³ã‚’æŒã¤ã£ã¦ã„ã†æ–‡å—ã‚³ãƒ¼ãƒ‰å½¢æ…‹ã¯ã‚„ã°ã„ã‚“ã ãªã¨ã€‚ EUC-JPã¯ãã‚“ãªã“ã¨ã¯ã—ãªã„ã§ã€1ã¤ã®ãƒã‚¤ãƒˆã«ã¯1ã¤ã®æ„å‘³ã—ã‹å–ã‚‰ã›ãªã„ã€‚ ã ã‘ã©ã€ã“ã‚Œã§ã‚‚æ–‡å—åŒ–ã‘ãŒèµ·ã“ã‚‹ã“ã¨ãŒã‚ã‚‹ã€‚çµŒé¨“çš„ã«ã¯ã€ã€Œãƒžãƒ«ãƒãƒã‚¤ãƒˆã‚’XXæ–‡å—ã§åˆ‡ã‚Šè½ã¨ã—ãŸã„ã€ã¨ã‹ã‚„ã£ãŸå ´åˆã€‚ã¡ã‚ƒã‚“ã¨æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’åˆ¤å®šã—ã¦ãã‚Œã‚‹PHPã§ã„ãˆã°mb_subst
boyasan 2009/09/11
PHP

XSS
ãƒªãƒ³ã‚¯
Twitter XSS é¨’å‹• - Yaks
(2009/04/12 6ï¼š40 pm è¿½è¨˜ã—ã¾ã—ãŸ) (2009/04/12 7ï¼š24 pm å†åº¦è¿½è¨˜ã—ã¾ã—ãŸ) å…ˆã»ã©ã‹ã‚‰ Twitterä¸Šã«ã¦ XSS ã®ã‚ˆã‚‹è¢«å®³ãŒå‡ºã¦ã„ã¾ã™ã€‚ æ—¢ã«æµ·å¤–ã®ãƒ–ãƒã‚°ãªã©ã§ã‚‚å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ HOWTO: Remove StalkDaily.com Auto-Tweets From Your Infected Twitter Profile (Twittercsm) Warning: Twitter Hit By StalkDaily Worm (TechCrunch) æ—¢ã« XSS ã®éƒ¨åˆ†ã¯æ”¹ä¿®ã•ã‚Œã¦å¤§åˆ†åŽã¾ã£ãŸã‚ˆã†ã§ã™ãŒã€å¿µã®ãŸã‚ã«æ›¸ã„ã¦ãŠãã¾ã™ã€‚ å†…å®¹ã¨ã—ã¦ã¯ã€ 1. StalkDaily.com ã‚’å®£ä¼ã™ã‚‹ã¤ã¶ã‚„ããŒå‹æ‰‹ã«æŠ•ç¨¿ã•ã‚Œã‚‹ 2. ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ã® Web ãŒæ”¹ã–ã‚“ã•ã‚Œã‚‹ 3. æ”¹ã–ã‚“ã•ã‚ŒãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒšãƒ¼ã‚¸ã‚’è¦‹ã‚‹ã¨ã€è‡ªåˆ†ã®ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ã‚‚
boyasan 2009/04/12
twitterå…¬å¼ã§ã“ã“ã¾ã§æ›¸ã„ã¦ã»ã—ã„ã¨ã“ã‚

Twitter

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

XSS
ãƒªãƒ³ã‚¯
ï¼ ITï¼šã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°å¯¾ç–ã®åŸºæœ¬
æœ€è¿‘Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å˜åœ¨ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒæ³¨ç›®ã‚’æµ´ã³ã¦ã„ã‚‹ã€‚ãã®ä¸ã§ã‚‚ã€Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€ã¨å‘¼ã°ã‚Œã‚‹è„†å¼±æ€§ãŒæœ‰åã§ã‚ã‚‹ãŒã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°è„†å¼±æ€§ã«ã¤ã„ã¦æ£ç¢ºã«ç†è§£ã—ã¦ã„ã‚‹äººãŒä¾ç„¶ã¨ã—ã¦å°‘ãªã„ã¨æ„Ÿã˜ã‚‹ã€‚ æœ¬ç¨¿ã§ã¯ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¨ã¯ã©ã®ã‚ˆã†ãªè„†å¼±æ€§ã§ã‚ã‚‹ã®ã‹ã€ã“ã®è„†å¼±æ€§ã‚’æŒã£ãŸã‚µã‚¤ãƒˆãŒæ”»æ’ƒã•ã‚Œã‚‹ã¨ã©ã®ã‚ˆã†ãªè¢«å®³ãŒèµ·ãå¾—ã‚‹ã®ã‹ã€ãªãœãã®ã‚ˆã†ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒä½œã‚Šè¾¼ã¾ã‚Œã¦ã—ã¾ã†ã®ã‹ã€ã©ã®ã‚ˆã†ã«å¯¾ç–ã‚’ã™ã‚Œã°ã‚ˆã„ã®ã‹ã‚’è§£èª¬ã—ã¦ã„ãã€‚ â€»ä»¥ä¸‹æœ¬æ–‡ä¸ã§ã¯ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°è„†å¼±æ€§ã®ã“ã¨ã‚’ã€ŒXSSã€ã¨è¡¨è¨˜ã™ã‚‹ã€‚ã€ŒCross Site Scriptingã€ã®ç•¥ã§ã‚ã‚‹ã‹ã‚‰ã€ŒCSSã€ã¨è¡¨è¨˜ã—ã¦ã„ã‚‹è¨˜äº‹ã‚‚ã‚ã‚‹ãŒã€ã€ŒCascading Style Sheetsã€ã®ç•¥ã‚‚ã€ŒCSSã€ã¨ãªã‚Šç´›ã‚‰ã‚ã—ã„ãŸã‚ã€ã€ŒXSSã€ã¨è¡¨è¨˜ã™ã‚‹å ´åˆãŒå¤šããªã£ã¦ãã¦ã„ã‚‹ã€‚æœ¬ç¨¿ã§
boyasan 2008/11/20
XSS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

é–‹ç™º
ãƒªãƒ³ã‚¯
1