[B! security][javascript] dazedã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

dazed id:dazed

securityã¨javascriptã«é–¢ã™ã‚‹dazedã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ï¼»æ³¨æ„å–šèµ·ï¼½ãƒ–ãƒ©ã‚¦ã‚¶äº’æ›ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€ŒPolyfill.ioã€ãŒãƒ‰ãƒ¡ã‚¤ãƒ³åã”ã¨ä¸å›½ä¼æ¥ã«å£²å´ã€Cloudflareã¨FastlyãŒä»£æ›¿ã¨ãªã‚‹é…ä¿¡ã‚’é–‹å§‹
ï¼»æ³¨æ„å–šèµ·ï¼½ãƒ–ãƒ©ã‚¦ã‚¶äº’æ›ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€ŒPolyfill.ioã€ãŒãƒ‰ãƒ¡ã‚¤ãƒ³åã”ã¨ä¸å›½ä¼æ¥ã«å£²å´ã€Cloudflareã¨FastlyãŒä»£æ›¿ã¨ãªã‚‹é…ä¿¡ã‚’é–‹å§‹ é–‹ç™ºè€…ãŒãƒ–ãƒ©ã‚¦ã‚¶ã®äº’æ›æ€§ã‚’æ°—ã«ã™ã‚‹ã“ã¨ãªãWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã™ã‚‹ãŸã‚ã®JavaScriptãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€ŒPolyfill.ioã€ãŒã€ãƒ‰ãƒ¡ã‚¤ãƒ³åã”ã¨ä¸å›½ä¼æ¥ã«å£²å´ã•ã‚ŒãŸã“ã¨ã‚’å—ã‘ã¦ã€Cloudflareã¨FastlyãŒæ€¥ãã‚‡ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ãƒ•ã‚©ãƒ¼ã‚¯ã—ã€å®‰å…¨ãŒç¢ºèªã•ã‚Œã¦ã„ã‚‹ã‚³ãƒ¼ãƒ‰ã®é…ä¿¡ã‚’é–‹å§‹ã—ã¾ã—ãŸï¼ˆCloudflareã®ç™ºè¡¨ã€Fastlyã®ç™ºè¡¨ï¼‰ã€‚ Polyfill.ioã‚’ãƒ‰ãƒ¡ã‚¤ãƒ³ã”ã¨ä¸å›½ä¼æ¥ã«å£²å´ Polyfill.ioã¯Andrew Bettsæ°ãŒé–‹ç™ºã—ãŸã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®JavaScriptãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã™ã€‚Polyfill.ioã‚’çµ„ã¿è¾¼ã‚€ã“ã¨ã§ã€ãƒ–ãƒ©ã‚¦ã‚¶ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’æ°—ã«ã™ã‚‹ã“ã¨ãªãWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®é–‹ç™ºã‚’è¡Œã†ã“ã¨ãŒã§ãã‚‹ä¾¿åˆ©ãªãƒ©
dazed 2024/03/06
security

javascript

china
ãƒªãƒ³ã‚¯
ãƒ•ã‚©ãƒ¼ãƒ å…¥åŠ›æ”¯æ´ã‚„ã‚µã‚¤ãƒˆæœ€é©åŒ–ã‚µãƒ¼ãƒ“ã‚¹ã®æ”¹ã–ã‚“ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2022å¹´10æœˆ25æ—¥ã€ã‚·ãƒ§ãƒ¼ã‚±ãƒ¼ã‚¹ã¯åŒç¤¾ãŒæä¾›ã™ã‚‹è¤‡æ•°ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’å—ã‘ãŸãŸã‚ã€ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹ä¼æ¥ã®Webã‚µã‚¤ãƒˆã‚’é€šã˜ã¦å…¥åŠ›ã•ã‚ŒãŸæƒ…å ±ãŒå¤–éƒ¨ã¸æµå‡ºã—ãŸå¯èƒ½æ€§ãŒã‚ã‚‹ã¨å…¬è¡¨ã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ ãƒ•ã‚©ãƒ¼ãƒ å…¥åŠ›æ”¯æ´ã‚„ã‚µã‚¤ãƒˆæœ€é©åŒ–ã‚µãƒ¼ãƒ“ã‚¹æ”¹ã–ã‚“ã§è¤‡æ•°ç¤¾ã«å½±éŸ¿æ³¢åŠ www.showcase-tv.com ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚Šã‚·ãƒ§ãƒ¼ã‚±ãƒ¼ã‚¹ãŒæä¾›ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã®æ”¹ã–ã‚“ãŒè¡Œã‚ã‚ŒãŸã€‚å¯¾è±¡ã‚µãƒ¼ãƒ“ã‚¹ãŒç¨¼åƒã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã®ä¸€éƒ¨ã§è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚ŒãŸã“ã¨ãŒåŽŸå› ã€‚ è¢«å®³ã«éã£ãŸã®ã¯ã€Œãƒ•ã‚©ãƒ¼ãƒ ã‚¢ã‚·ã‚¹ãƒˆã€ã€Œã‚µã‚¤ãƒˆãƒ»ãƒ‘ãƒ¼ã‚½ãƒŠãƒ©ã‚¤ã‚¶ã€ã€Œã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ãƒ»ã‚³ãƒ³ãƒãƒ¼ã‚¿ã€ã®3ã¤ã€‚ãƒ•ã‚©ãƒ¼ãƒ ã®å…¥åŠ›æ”¯æ´ã‚„ã‚µã‚¤ãƒˆè¡¨ç¤ºæœ€é©åŒ–ã‚’è¡Œã†ã‚µãƒ¼ãƒ“ã‚¹ã§åˆ©ç”¨ä¼æ¥ã¯åŒç¤¾ãŒå…¬é–‹ã™ã‚‹JavaScript (formassist.jpã€navicast.jpä¸Šã§å…¬é–‹)ã‚’è‡ªç¤¾ã‚µã‚¤ãƒˆã‚ˆã‚Šèªã¿è¾¼ã‚€ã“ã¨ã§åˆ©ç”¨ã™ã‚‹ã€‚ æ”¹ã–ã‚“è¢«å®³
dazed 2022/10/27
æ€ã£ã¦ãŸã‚ˆã‚Šãƒ¤ãƒãã†ã€‚å…¥åŠ›ãƒ•ã‚©ãƒ¼ãƒ ã®å¤–éƒ¨å‚ç…§JSãŒã‚„ã‚‰ã‚Œã¦ãŸã®ã‹â€¦ã€‚

ec

security

javascript
ãƒªãƒ³ã‚¯
åœ°ç„ã®JavaScriptã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
TopicsPlaceHolder SectionTitlePlaceHolder TIME rest time current/total en
dazed 2012/11/20
javascript

security

xss
ãƒªãƒ³ã‚¯
ã€ãƒ¬ãƒ“ãƒ¥ãƒ¼ã€‘IE6ã€IE7ã€IE8ã€IE9ã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ã‚‹æ–¹æ³• | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
Taranfx.com - Your Gateway to Techno logy, Redefined. ãƒ–ãƒ©ã‚¦ã‚¶ã¯ç‰¹å®šã®HTMLã‚„CSSã€JavaScriptã®ã‚³ãƒ¼ãƒ‰ã‚’èªã¿è¾¼ã‚€ã¨ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—ãŸã‚Šãƒ•ãƒªãƒ¼ã‚ºã™ã‚‹ã“ã¨ãŒçŸ¥ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ã—ã‹ã‚‚ãã‚Œã¯è¤‡é›‘æ€ªå¥‡ãªã‚³ãƒ¼ãƒ‰ã§ã¯ãªãã€ã¨ã¦ã‚‚çŸã„ã‚³ãƒ¼ãƒ‰ã§ã‚‚èµ·ã“ã‚‹ã“ã¨ãŒã‚ã‹ã£ã¦ã„ã‚‹ã€‚ç‰¹ã«IEã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ãŸã‚Šãƒ•ãƒªãƒ¼ã‚ºã•ã›ã‚‹ãŸã‚ã®ã‚³ãƒ¼ãƒ‰ã®å¤šããŒã‚¹ãƒ‹ãƒšãƒƒãƒˆã¨ã—ã¦å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã€‚ ãã†ã—ãŸæƒ…å ±ã®ã²ã¨ã¤ã«Taranfxã§å…¬é–‹ã•ã‚Œã¦ã„ã‚‹How to Crash Internet Explorer IE6, IE7, IE8, IE9ãŒã‚ã‚‹ã€‚IE6ã€IE7ã€IE8ã€IE9ã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ãŸã‚Šãƒ•ãƒªãƒ¼ã‚ºã•ã›ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚³ãƒ¼ãƒ‰ã‚’ç´¹ä»‹ã™ã‚‹ã¨ã„ã†å†…å®¹ã«ãªã£ã¦ã„ã‚‹ã€‚è¨˜äº‹ã®ç›®çš„ã¯IEãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã£ã¦ã»ã‹ã®ãƒ–ãƒ©ã‚¦ã‚¶ã¸ãƒ¦ãƒ¼ã‚¶ã®ç›®ã‚’å‘ã‘ã•ã›ã‚ˆã†ã¨ã„ã†ã‚‚ã®ã€‚åŒæ§˜ã®å–ã‚Šçµ„ã¿ã¯ã™ã§
dazed 2011/01/17
ie

browser

bug

security

html

css

javascript
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
dazed 2010/10/23
greasemonkey

javascript

security

tips
ãƒªãƒ³ã‚¯
bit.lyã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ã‚‹ã¨ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æŠœã‹ã‚Œã‚‹
bit.lyã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ã‚‹ã¨ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æŠœã‹ã‚Œã‚‹ â€»ä¿®æ£ã•ã‚ŒãŸã‚ˆã†ã§ä»Šã¯æŠœã‘ãªããªã£ã¦ã„ã¾ã™ (2010/08/10 10:00) account name: - mail: - api key: - Â» ã“ã®ãƒšãƒ¼ã‚¸ã‚’ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã§ç´¹ä»‹ã™ã‚‹ Â» ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã§ã®ã‚³ãƒ¡ãƒ³ãƒˆ Â» ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼ Â» ã¯ã¾ã¡ã‚„ï¼’(Blog) Â» ã¯ã¾ã¡ã‚„ï¼’(twitter) Powered by BEARS SERVER PROJECT: ã¤ã„ã£ãŸãƒ¼ã¨Hamachiya2ã¯ã¾ã¡ã‚„ï¼’ã®tumblr [hmcy]ãƒ‰ãƒªãƒ¼ãƒ ãƒ¡ãƒ¼ã‚«ãƒ¼:ç°¡å˜ãƒ»ç„¡æ–™ãƒ»ãƒ•ãƒªãƒ¼ã®ãƒŽãƒ™ãƒ«ã‚²ãƒ¼ãƒ ãŒä½œæˆã§ãã‚‹Webã‚µã‚¤ãƒˆã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ é€Ÿå ±ç°¡å˜ï¼ç¯€ç´„ï¼ãŠã„ã—ã„ï¼ãŠæ–™ç†ãƒ¬ã‚·ãƒ”ã®ã‚‚ãã‚‚ãäºˆå‘Š.out - äºˆå‘ŠãŒã§ãã‚‹æŽ²ç¤ºæ¿ã¼ãå°‚ç”¨mxximixiã‚·ãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆãƒãƒˆãƒ³ã¯ã¾ã¡ã‚„ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã‚ªãƒŠãƒ›ãƒ¼ãƒ«ãƒ”ãƒ³ã‚¯ãƒãƒ¼ã‚¿ãƒ¼ç§ç«‹æµæ¯”å¯¿ä¸å¦ï¼ˆã‚¨ãƒ“ä¸ï¼‰ãƒ•ã‚¡ãƒ³ã‚¯ãƒ©
dazed 2010/08/10
bitly

security

javascript
ãƒªãƒ³ã‚¯
XSSã®æ”»æ’ƒæ‰‹æ³•ã„ã‚ã„ã‚ - ã†ãªã®æ—¥è¨˜
html5securityã®ã‚µã‚¤ãƒˆã«ã€XSSã®å„ç¨®æ”»æ’ƒæ‰‹æ³•ãŒã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã®ã‚’ç™ºè¦‹ã›ã‚Š!ã¨ã„ã†ã“ã¨ã§ã€å€‹äººçš„ã«ã€ŒãŠ!ã€ã¨æ€ã£ãŸæ”»æ’ƒã‚’ã‚µãƒ³ãƒ—ãƒ«ã¤ãã§ã”ç´¹ä»‹ã—ã¾ã™ã€‚ 1. CSS Expression IE7ä»¥å‰ã«ã¯ã€ŒCSS Expressionsã€ã¨ã„ã†æ‹¡å¼µæ©Ÿèƒ½ãŒã‚ã‚Šã€CSSå†…ã§JavaScriptã‚’å®Ÿè¡Œã§ããŸã‚Šã—ã¾ã™ã€‚ <div style="color:expression(alert('XSS'));">a</div> ç¢ºèª @IT -ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSS ã§è©³ã—ãè§£èª¬ã•ã‚Œã¦ã„ã¾ã™ãŒã€CSSã®è§£é‡ˆãŒæŸ”è»Ÿãªã“ã¨ã¨ã‚‚ã‚ã„ã¾ã£ã¦è‡ªå‰ã§ç„¡å®³åŒ–ã™ã‚‹ã®ã¯ãªã‹ãªã‹å›°é›£ã€‚ä»¥ä¸‹ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã§ã‚‚ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ <div style="color:expr/* ã‚³ãƒ¡ãƒ³ãƒˆã®æŒ¿å…¥ */ession(alert('XSS'));">a</div> ç¢ºèª <div s
dazed 2010/06/20
javascript

css

xss

security
ãƒªãƒ³ã‚¯
JavaScript Blacklist by Drew Thaler
dazed 2010/06/15
safari

extension

javascript

security
ãƒªãƒ³ã‚¯
XSS (Cross Site Scripting) Cheat Sheet
XSS (Cross Site Scripting) Cheat Sheet Esp: for filter evasion By RSnake Note from the author: XSS is Cross Site Scripting. If you don't know how XSS (Cross Site Scripting) works, this page probably won't help you. This page is for people who already understand the basics of XSS attacks but want a deep understanding of the nuances regarding filter evasion. This page will also not show you how to
dazed 2010/05/11
xss

javascript

css

security

hack
ãƒªãƒ³ã‚¯
What the Internet knows about you
é«˜éº—äººå‚ã¯ã€å’Œåã§ã‚ªã‚¿ãƒãƒ‹ãƒ³ã‚¸ãƒ³ã¨ã‚‚å‘¼ã°ã‚Œã¦ã„ã‚‹å¥åº·é£Ÿå“ã§ã™ã€‚ ä¸»ã«ã‚¦ã‚³ã‚®ç§‘ã®è–¬ç”¨æ¤ç‰©ã®æ ¹ã£ã“ã‚’æŒ‡ã—ã¾ã™ã€‚ ã‚µãƒãƒ‹ãƒ³ã¨ã„ã†æœ‰ç”¨æˆåˆ†ãŒè±Šå¯Œã«å«ã¾ã‚Œã¦ãŠã‚Šã€æ§˜ã€…ãªç›®çš„ã«æ´»ç”¨ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã‚‹å¥åº·ç´ æã§ã™ã€‚ é«˜éº—äººå‚ã«ã¯ã€å¤šã„ã‚‚ã®ã§ç´„40ç¨®é¡žã«ã‚‚ã®ã¼ã‚‹ã‚µãƒãƒ‹ãƒ³ãŒå«ã¾ã‚Œã¦ã„ã¦ã€ãã‚Œã‚‰ãŒè¤‡åˆçš„ã«åƒãã“ã¨ã§èº«ä½“çš„ãƒ»ç²¾ç¥žçš„ã«æ§˜ã€…ãªãƒ‘ãƒ¯ãƒ¼ã‚’æ„Ÿã˜ã‚‹ã“ã¨ãŒã§ãã‚‹ã®ã§ã™ã€‚ å¥åº·ç¶æŒã«ã¯ã‚‚ã¡ã‚ã‚“ã€ç¾Žå®¹ã«ã‚‚æ´»ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®ãƒ–ãƒã‚°ã§ã¯ã€ãã‚“ãªé«˜éº—äººå‚ã®ä½¿ã„æ–¹ã‚„é¸ã³æ–¹ã‚’ã‚µãƒãƒ¼ãƒˆã€‚ ã•ã‚‰ã«ã€äººæ°—ã®ã‚ã‚‹ã‚µãƒ—ãƒªãƒ¡ãƒ³ãƒˆã‚’è©³ç´°ã«æ¤œè¨¼ã—ã¾ã—ãŸï¼ ãƒ©ãƒ³ã‚ãƒ³ã‚°ã§ã¯ã€æœ¬å½“ã«å„ªç§€ãªè£½å“ã ã‘ã‚’æŽ²è¼‰ï¼ ã€ŒåŠ¹æžœãªã—ï¼Ÿã€ã®çœŸå½ã‚’ç¢ºèªã—ã¦ã„ã¾ã™ã€‚ é«˜éº—äººå‚ã¯ã€å¤ãã‹ã‚‰ã‚¢ã‚¸ã‚¢ã§æ„›ç”¨ã•ã‚Œç¶šã‘ã¦ã„ã‚‹æ¼¢æ–¹è–¬ãƒ»ç”Ÿè–¬ã§ã™ã€‚ æ¼¢æ–¹ã®ä¸–ç•Œã§ã¯ä¸Šè–¬ã¨ã„ã†ã€Œè³ªã®é«˜ã„æ¼¢æ–¹ã€ã«ä½ç½®ä»˜ã‘ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ ä¸Šè–¬ã®ç‰¹å¾´ã¯ãƒ»ãƒ»ãƒ» ã€Œé•·æœŸé–“ã«ã‚ãŸã‚Šä½¿ã„ç¶šã‘ã‚‹ã“ã¨ã§ã€å®Ÿæ„Ÿåº¦
dazed 2009/09/03
javascriptç„¡åŠ¹ã§ã‚‚å‹•ä½œã€‚ä»•æ§˜èª¬æ˜Žãƒšãƒ¼ã‚¸â†’http://whattheinternetknowsaboutyou.com/docs/details.html

security

browser

web

css

javascript
ãƒªãƒ³ã‚¯
JavaScriptã‚’ä½¿ã‚ãšã«Webãƒ–ãƒ©ã‚¦ã‚¶ã®é–²è¦§å±¥æ´ã‚’ç›—ã‚€ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
bugzilla.mozilla.org ã§ã¯ JavaScript ã‚’ä½¿ã† exploit ã‚‚ä½¿ã‚ãªã„ exploit ã‚‚ Bug 147777 [mozilla.org] ã¨ã—ã¦æ‰±ã£ã¦ã„ã¾ã™ã€‚ã“ã® bug ã®ã‚³ãƒ¡ãƒ³ãƒˆä¸ã€ JavaScript ã‚’ä½¿ã‚ãªã„ä¾‹ã¯ã€ã¯ã£ãã‚Šã—ãŸã‚‚ã®ã¨ã—ã¦ã¯ 2006 å¹´ 12 æœˆã® Comment 71 [mozilla.org] ãŒåˆå‡ºã§ã—ã‚‡ã†ã‹ã€‚ 2005 å¹´ 6 æœˆã® Comment 48 [mozilla.org] ã‚‚ãã‚Œã£ã½ã„ã§ã™ãŒã€‚ ã¾ã æ£å¼ç‰ˆã©ã“ã‚ã‹ RC ã‚‚å‡ºã¦ã„ãªã„ã®ã§ä¸€èˆ¬ã®äººã«ã¯ãŠå‹§ã‚ã—ã¾ã›ã‚“ãŒã€äººæŸ±ã®äººã¯ Firefox 3.5 Preview ã‚’ä½¿ã£ã¦ about:config ã‹ã‚‰ layout.css.visited_links_enabled ã‚’ false ã«ã™ã‚‹ã¨ã€ãƒªãƒ³ã‚¯ãŒ visited ã‹ã©ã†ã‹ã«ã‚ˆã£ã¦ã‚¹ã‚¿ã‚¤ãƒ«ã‚’å¤‰ãˆã‚‹ã®
dazed 2009/06/15
security

javascript

css
ãƒªãƒ³ã‚¯
ã¾ã ã¾ã ã‚ã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒæ³•
å‰å›žã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®ãœã„å¼±æ€§ã‚’çªãæ”»æ’ƒã®å¯¾ç–ã¨ã—ã¦ã®HTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã®æœ‰åŠ¹æ€§ã‚’è¿°ã¹ãŸã€‚ãŸã ï¼ŒHTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã ã‘ã§ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒã‚’å®Œå…¨ã«é˜²å¾¡ã™ã‚‹ã“ã¨ã¯ã§ããªã„ã€‚ãã“ã§ä»Šå›žã¯ï¼ŒHTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã§å¯¾å‡¦ã§ããªã„ã‚¿ã‚¤ãƒ—ã®ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒã®æ‰‹å£ã¨ï¼Œãã®å¯¾ç–ã«ã¤ã„ã¦è§£èª¬ã™ã‚‹ã€‚ HTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã§å¯¾å‡¦ã§ããªã„æ”»æ’ƒã«ã¯ï¼Œæ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚‹ã€‚ ã‚¿ã‚°æ–‡å—ã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆï¼ˆWebãƒ¡ãƒ¼ãƒ«ï¼Œãƒ–ãƒã‚°ãªã©ï¼‰ CSSï¼ˆã‚«ã‚¹ã‚±ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒ»ã‚¹ã‚¿ã‚¤ãƒ«ã‚·ãƒ¼ãƒˆï¼‰ã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆï¼ˆãƒ–ãƒã‚°ãªã©ï¼‰ æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’æ˜Žç¤ºã—ã¦ã„ãªã„ã‚±ãƒ¼ã‚¹ã§UTF-7æ–‡å—ã‚³ãƒ¼ãƒ‰ã«ã‚ˆã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° <SCRIPT>ã®å†…å®¹ã‚’å‹•çš„ã«ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆ Aã‚¿ã‚°ãªã©ã®URLã‚’å‹•çš„ã«ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆæ³¨ï¼‰ ä»¥ä¸‹ã§ã¯ï¼ŒHTMLã‚¿ã‚°ã‚„CSSã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆã¨ï¼Œæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’æ˜Ž
dazed 2007/04/17
css

javascript

security

xss
ãƒªãƒ³ã‚¯
ãƒšãƒ¼ã‚¸ã«ã‚¯ãƒªãƒƒã‚«ãƒ–ãƒ«ãªãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¼‰ã›ã¤ã¤ã‚¹ãƒ‘ãƒ å¯¾ç–ã‚‚ã™ã‚‹æ–¹æ³•ã€ŒEmail Riddlerã€:phpspoté–‹ç™ºæ—¥èªŒ
ãƒšãƒ¼ã‚¸ã«ã‚¯ãƒªãƒƒã‚«ãƒ–ãƒ«ãªãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¼‰ã›ã¤ã¤ã‚¹ãƒ‘ãƒ å¯¾ç–ã‚‚ã™ã‚‹æ–¹æ³•ã€ŒEm ail Riddlerã€ 2007å¹´02æœˆ14æ—¥- Dynamic Drive Em ail Riddler- em ail encryption script and tool Updated to version 2.0! Jan 28th, 07. Improved interface, output now XHTML valid, plus added ability to simply output encrypted em ail as a JavaScript variable. ãƒšãƒ¼ã‚¸ã«ã‚¯ãƒªãƒƒã‚«ãƒ–ãƒ«ãªãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¼‰ã›ã¤ã¤ã‚¹ãƒ‘ãƒ å¯¾ç–ã‚‚ã™ã‚‹æ–¹æ³•ã€ŒEm ail Riddlerã€ã€‚ Eãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ç”»åƒåŒ–ãŒé€²ã‚“ã§ã„ã¾ã™ãŒã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ã„ã¡ã„ã¡æ‰“ã¤ã®ã¯ã‚„ã£ã±ã‚Šé¢å€’ã€‚ã‚¯ãƒªãƒƒã‚¯ã§ãƒ¡ãƒ¼ãƒ«ã‚’é€ã‚ŠãŸã„ã€ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ã‚³ãƒ”ãƒ¼
dazed 2007/02/15
javascript

html

security

spam
ãƒªãƒ³ã‚¯
JavaScriptã‚’æ‚ªç”¨ã—ãŸæ”»æ’ƒæ‰‹æ³•--ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã‚‰ãŒç™ºè¦‹
JavaScriptã‚’ä½¿ã£ã¦å®¶åºã‚„ä¼æ¥ã«ãŠã‘ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®æ§‹æˆã‚’æŠŠæ¡ã—ã€æŽ¥ç¶šã•ã‚ŒãŸã‚µãƒ¼ãƒã‚„ãƒ—ãƒªãƒ³ã‚¿ã€ãƒ«ãƒ¼ã‚¿ãªã©ã®ãƒ‡ãƒã‚¤ã‚¹ã‚’æ”»æ’ƒã™ã‚‹æ–¹æ³•ã‚’ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã‚‰ãŒç™ºè¦‹ã—ãŸã€‚ ã“ã†ã—ãŸæ‚ªè³ªãªJavaScriptãŒåŸ‹ã‚è¾¼ã¾ã‚ŒãŸã‚¦ã‚§ãƒ–ãƒšãƒ¼ã‚¸ã‚’ä¸€èˆ¬ã®ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã«è¡¨ç¤ºã™ã‚‹ã¨ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒä½•ã®è¦å‘Šã‚‚è¡¨ç¤ºã—ãªã„ã¾ã¾å®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã†ã¨ã€ç ”ç©¶è€…ã‚‰ã¯è¿°ã¹ã‚‹ã€‚ã¾ãŸã€ã“ã‚Œã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§å‹•ä½œã™ã‚‹ãŸã‚ã€ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚‚å›žé¿ã™ã‚‹ã¨ã„ã†ã€‚ ã‚¦ã‚§ãƒ–ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å°‚é–€ã«ã™ã‚‹SPI Dynamicsã®ãƒªãƒ¼ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢Billy Hoffmanæ°ã¯ã€Œã‚ã‚Œã‚ã‚Œã¯ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ã‚¹ã‚ãƒ£ãƒ³ã—ã¦è¦‹ã¤ã‹ã£ãŸã™ã¹ã¦ã®ã‚¦ã‚§ãƒ–å¯¾å¿œãƒ‡ãƒã‚¤ã‚¹ã‚’è˜åˆ¥ã—ã€ã“ã‚Œã‚‰ã®ãƒ‡ãƒã‚¤ã‚¹ã«æ”»æ’ƒã‚’ä»•æŽ›ã‘ãŸã‚Šã€ã‚³ãƒžãƒ³ãƒ‰ã‚’é€ä¿¡ã—ãŸã‚Šã™ã‚‹æŠ€è¡“ã‚’ç™ºè¦‹ã—ãŸã€‚ã“ã®ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’ä½¿ãˆã°ã€ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã§å®ˆã‚‰ã‚ŒãŸä¼æ¥ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚‚ã‚¹ã‚ãƒ£ãƒ³ã§ãã‚‹ã‚ˆã†ã«
dazed 2006/07/31
javascript

security

topic
ãƒªãƒ³ã‚¯
1