Evernote XSS事件ã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã¨ãã®å¯¾ç–éŽç¨‹ã¨é¡›æœ« | uuuEvernoteã«ä»»æ„ã®HTMLを注入ã§ãる脆弱性ãŒã‚ã‚Šã¾ã—ãŸã€‚ http://togetter.com/li/125281 Evernoteã®ã‚»ã‚ュリティãƒãƒªã‚·ãƒ¼ã¨ã‹ã«ã¯è§¦ã‚Œãšã€ã¨ã‚Šã‚ãˆãšä½•ãŒå¯èƒ½ã ã£ãŸã®ã‹ã€ã©ã†ã„ã†çŠ¶æ³ã ã£ãŸã®ã‹ã‚’書ãã¾ã™ã€‚ 4/18 16時ã”ã‚ Evernoteã®ç™»éŒ²ãƒšãƒ¼ã‚¸ã®HTMLã«ä»¥ä¸‹ã®ã‚ˆã†ãªè¨˜è¿°ãŒã‚ã‚Šã¾ã™ã€‚ <script type="text/javascript"> $(document).ready(function() { suggestedTags = []; suggestedNotebook = ""; sourceUrl = ""; providerName = ""; payload = { "user" : { ... }, ..後略.. </script> ã“ã®sourceUrl = ""ã®éƒ¨åˆ†ã€https://www.evernote.c
ã“ã“ãŒå±ãªã„ï¼Web2.0ã®ã‚»ã‚ュリティ 記事一覧 | gihyo.jp
XSSã®æ”»æ’ƒæ‰‹æ³•ã„ã‚ã„ã‚ - ã†ãªã®æ—¥è¨˜
{{#tags}}- {{label}}
{{/tags}}