[B! js][security] drillbitsã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

drillbits id:drillbits

jsã¨securityã«é–¢ã™ã‚‹drillbitsã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

åœ°ç„ã®JavaScriptã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
TopicsPlaceHolder SectionTitlePlaceHolder TIME rest time current/total en
drillbits 2012/12/10
js

security

xss
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ã•ã‚“ã¸ã€ã—ã£ã‹ã‚Šã—ã¦ãã ã•ã„ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
æŠ€è¡“è€…ã¨ã—ã¦ã®è‰¯å¿ƒã«å¾“ã£ã¦ã“ã®è¨˜äº‹ã‚’æ›¸ãã¾ã™ã€‚ä¿ºã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã®äººã§ã¯ãªãã€JavaScriptã¨UIã®äººã§ã‚ã‚‹ã€‚æ³•å¾‹ã®å‹‰å¼·ã ã£ã¦è‡ªåˆ†ã®ç”Ÿæ´»ã¨æ¥å‹™ã«é–¢ã‚ã‚Šã®ã‚ã‚‹ç¯„å›²ã§ã—ã‹ã—ãªã„ã ã‚ã†ã€‚ã—ã‹ã—å°‘ãªãã¨ã‚‚JavaScriptã‚„ãƒ–ãƒ©ã‚¦ã‚¶ãŒçµ¡ã‚€ã‚ˆã†ãªéƒ¨åˆ†ã«ã¤ã„ã¦ã¯ã€ç¢ºå®Ÿã«è‡ªåˆ†ã®ã»ã†ãŒç†è§£ã—ã¦ã„ã‚‹ã¨æ€ã£ã¦ã„ã‚‹ã€‚é«˜æœ¨æµ©å…‰ã•ã‚“ãŒã€ã‚ã‹ã‚‰ã•ã¾ã«é–“é•ã£ãŸã“ã¨ã‚’æ›¸ã„ãŸã‚Šã€ãŠã‹ã—ãªã“ã¨ã‚’æ›¸ã„ã¦ã„ãŸã‚Šã—ã¦ã‚‚ã€å¾ã€…ã«èª°ã‚‚æŒ‡æ‘˜ã—ãªããªã£ã¦ããŸã¨æ€ã†ã€‚ãŠã‹ã—ãªã“ã¨æ›¸ã„ã¦ã„ãŸã¨ã—ã¦ã‚‚ã€éžæŠ€è¡“è€…ã‹ã‚‰è¦‹ãŸã¨ãã«ã€Œå¤šå°‘éŽæ¿€ãªç‰©è¨€ã„ã ã‘ã©ã€ã‚ã®äººã¯å°‚é–€å®¶ã ã‹ã‚‰è¨€ã£ã¦ã„ã‚‹ã“ã¨ã¯æ£è«–ãªã®ã ã‚ã†ã€ã¨ã‹ã€ã‚ã‚‹ã„ã¯æŠ€è¡“è€…ã‹ã‚‰è¦‹ãŸæ™‚ã§ã‚‚ã€å°‚é–€åˆ†é‡ŽãŒé•ãˆã°é–“é•ã£ãŸã“ã¨ãŒæ›¸ã‹ã‚Œã¦ã„ã¦ã‚‚æ°—ä»˜ã‘ãªã„ã¨ã„ã†ã“ã¨ã‚‚ã‚ã‚‹ã ã‚ã†ã€‚ ã‚‚ã†è‡ªåˆ†ã«ã¯åˆ†ã‹ã‚‰ãªããªã£ã¦ã„ã‚‹ã€‚èª°ã«ã§ã‚‚æ¤œè¨¼ã§ãã‚‹ã‚ˆã†ãªäº‹å®Ÿé–¢ä¿‚ã®é–“é•ã„ã€ã‚ã‚‹ã„ã¯ã€æŠ€è¡“çš„ãªé–“é•ã„ãŒå«ã¾ã‚Œã¦ã„
drillbits 2012/08/30
security

privacy

js

twitter

gmail
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
drillbits 2012/07/04
js

security
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
drillbits 2011/04/21
js

security

xss

facebook
ãƒªãƒ³ã‚¯
2010 å¹´ 9 æœˆ 21 æ—¥ç¾åœ¨ã®ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã®ãƒã‚°(è„†å¼±æ€§)ã«ã¤ã„ã¦
ã€ãŠçŸ¥ã‚‰ã›ã€‘ 9 æœˆ 21 æ—¥åˆå¾Œ 11 æ™‚é ƒã€å…¬å¼ã‚µã‚¤ãƒ‰ã‹ã‚‰è„†å¼±æ€§ãŒä¿®æ£ã•ã‚ŒãŸã¨ã®ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸã€‚ ã¯ã˜ã‚ã« 2010 å¹´ 9 æœˆ 21 æ—¥ã€ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã§æ·±åˆ»ãªè„†å¼±æ€§(ãœã„ã˜ã‚ƒãã›ã„)ãŒç™ºè¦‹ã•ã‚Œã€è¢«å®³ãŒåºƒãŒã£ã¦ã„ã¾ã™ã€‚ã“ã‚ŒãŒä½•ãªã®ã‹ã€ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ JavaScript ã¨ãƒžã‚¦ã‚¹ã‚ªãƒ¼ãƒãƒ¼ã‚¤ãƒ™ãƒ³ãƒˆ ã¾ãšã€ä¸‹ã®ãƒ”ãƒ³ã‚¯è‰²ã®æž å†…ã«ãƒžã‚¦ã‚¹ã‚«ãƒ¼ã‚½ãƒ«ã‚’ã™ã¹ã‚‰ã›ã¦ã¿ã¦ãã ã•ã„ã€‚ ã“ã®æž ã®ä¸ã‚’ãƒžã‚¦ã‚¹ã‚«ãƒ¼ã‚½ãƒ«ã§è§¦ã£ã¦! ã©ã†ã§ã—ãŸã‹ã€‚ã€Œè§¦ã£ã¦ãã‚Œã¦ã‚ã‚ŠãŒã¨ã†!ã€ã¨ã„ã†ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã¾ã—ãŸãã€‚ ã“ã®ã‚ˆã†ã«ã€ã‚¦ã‚§ãƒ–ãƒšãƒ¼ã‚¸ã«ã¯ç°¡å˜ãªãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä»•è¾¼ã‚€ã“ã¨ãŒã§ãã¾ã™ã€‚ã©ã®ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼(çš†ã•ã‚“ãŒã‚¦ã‚§ãƒ–ã‚’è¦‹ã‚‹æ™‚ã«ä½¿ã†ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¨ã‚¯ã‚¹ãƒ—ãƒãƒ¼ãƒ©ãƒ¼ãªã©)ã§ã‚‚å…±é€šã§ä½¿ãˆã‚‹ã€ŒJavaScript (ã‚¸ãƒ£ãƒã‚¹ã‚¯ãƒªãƒ—ãƒˆ)ã€ã¨ã„ã†è¨€èªžãŒä¸€èˆ¬çš„ã«ä½¿ã‚ã‚Œã¦ã„ã¾ã™ã€‚ ä»Šå›žã¯ã€ãƒšãƒ¼ã‚¸ä¸Šã®ã‚ã‚‹éƒ¨åˆ†ã«ãƒžã‚¦ã‚¹ã‚«ãƒ¼ã‚½
drillbits 2010/09/22
twitter

security

xss

js
ãƒªãƒ³ã‚¯
ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã«(å¯¾å¿œå¤–ã®)ãƒ–ãƒã‚°ãƒ‘ãƒ¼ãƒ„ã‚’è²¼ã‚‹
ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼æ—¥è¨˜ - è‡ªåˆ†ã®ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã«ãƒ–ãƒã‚°ãƒ‘ãƒ¼ãƒ„ã‚’è¨ç½®ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸ ã“ã‚Œã¯ã„ã„ãï¼ ã•ã£ãã googleã‚¬ã‚¸ã‚§ãƒƒãƒˆã‚’ä½¿ã£ã¦ã€(å¯¾å¿œå¤–ã®)ã™ããªãƒ–ãƒã‚°ãƒ‘ãƒ¼ãƒ„ã¨ã‹ã‚’è‰²ã€…è²¼ã£ã¦ã¿ã‚ˆã†ï¼ ã¾ãšã¯ä¸‹ã®ã‚ˆã†ãªãƒ†ã‚ã‚¹ãƒˆãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã¤ãã£ã¦ã€æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’utf-8ã§ä¿å˜â€¦ï¼ <?xml version="1.0" encoding="UTF-8" ?> <Module> <ModulePrefs title="ã“ã“ã«ãƒ‘ãƒ¼ãƒ„åã‹ã“ã†ãï¼"> </ModulePrefs> <Content type="html"> <![CDATA[ (ã“ã“ã«ãƒ–ãƒã‚°ãƒ‘ãƒ¼ãƒ„è²¼ã‚Šä»˜ã‘ã‚³ãƒ¼ãƒ‰) ]]> </Content> </Module> ãŸã¨ãˆã°twitterã®ãƒ–ãƒã‚°ãƒ‘ãƒ¼ãƒ„(badge)ã‚’è²¼ã‚‹ã®ãªã‚‰ã€ãƒ•ã‚¡ã‚¤ãƒ«åã‚’ã€Œtwitter.xmlã€ã¨ã‹ã«ã—ã¦ãŠã„ã¦ã€ ã“ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã©ã“ã‹ã®ã‚µãƒ¼ãƒãƒ¼ã«ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰
drillbits 2008/07/11
blog

gadget

google

js

security

tips

web

blogparts
ãƒªãƒ³ã‚¯
Googleãƒˆãƒ¼ã‚¯ã®ã™ã¦ããªã¨ã“ã‚ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
â†“marqueeã‚¿ã‚°ãŒä½¿ãˆã‚‹ï¼ â†“scriptãŒä½¿ãˆã‚‹ï¼ Googleãƒˆãƒ¼ã‚¯ã®éš ã—æ©Ÿèƒ½ã‚’ä½¿ã„ã“ãªã—ã¦ã€è‡ªç”±åº¦ã¯ç„¡é™å¤§ã ãï¼ ã™ã¦ãï¼ â€»alertã®ã‚¿ã‚¤ãƒˆãƒ«ãŒMicrosoft Internet Explorerãªã®ã¯ã€GoogleTalkãŒIEã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆ(?)ã¤ã‹ã£ã¦ã‚‹ã‹ã‚‰ã ã‚ˆï¼ãŸã¶ã‚“ï¼
drillbits 2008/07/08
google

im

js

security

twitter

xss
ãƒªãƒ³ã‚¯
1