[B! HTTP] katryoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

katryo id:katryo

HTTPã«é–¢ã™ã‚‹katryoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

CSRF å¯¾ç–ç”¨ãƒˆãƒ¼ã‚¯ãƒ³ã®å€¤ã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ ID ãã®ã‚‚ã®ã‚’ä½¿ã£ã¦ã‚‚ã„ã„æ™‚ä»£ã¯çµ‚ã‚ã‚Šã¤ã¤ã‚ã‚‹ - co3k.org
CSRF è„†å¼±æ€§å¯¾ç–ã«ã¯æ”»æ’ƒè€…ã®çŸ¥ã‚Šå¾—ãªã„ç§˜å¯†æƒ…å ±ã‚’ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¯¾ã—ã¦è¦æ±‚ã™ã‚Œã°ã‚ˆãã€ãã®ã‚ˆã†ãªç”¨é€”ã¨ã—ã¦ã¯ã‚»ãƒƒã‚·ãƒ§ãƒ³ ID ãŒãŠæ‰‹è»½ã§ã„ã„ã‚ˆãã¨ã„ã†æ™‚ä»£ãŒã‚ã£ãŸã‹ã¨æ€ã„ã¾ã™ã€‚ ã„ã‚„ã€ã‚‚ã¡ã‚ã‚“ã€ CSRF å¯¾ç–ã®æ–‡è„ˆã ã‘ã§è¨€ãˆã°ä»Šã‚‚æ˜”ã‚‚é–“é•ã„ã¨ã„ã†ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã‚»ãƒƒã‚·ãƒ§ãƒ³ ID ãŒç§˜å¯†æƒ…å ±ã§ã‚ã‚‹ã®ã¯ Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦å½“ç„¶ã®å‰æã§ã™ã®ã§ã€ CSRF å¯¾ç–ã¨ã—ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«æ±‚ã‚ã‚‹ã¹ããƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã¨ã—ã¦ã®æ¡ä»¶ã¯ãŸã—ã‹ã«æº€ãŸã—ã¦ã„ã¾ã™ã€‚ ãŸã¨ãˆã° ã€Žå®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹ã€ æ”¹è¨‚ç¬¬6ç‰ˆã§ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«è§£èª¬ã•ã‚Œã¦ã„ã¾ã™ã€‚ 6-(i)-a. (ä¸ç•¥) ãã®ã€Œhidden ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã€ã«ç§˜å¯†æƒ…å ±ãŒæŒ¿å…¥ã•ã‚Œã‚‹ã‚ˆã†ã€å‰ã®ãƒšãƒ¼ã‚¸ã‚’è‡ªå‹•ç”Ÿæˆã—ã¦ã€å®Ÿè¡Œãƒšãƒ¼ã‚¸ã§ã¯ãã®å€¤ãŒæ£ã—ã„å ´åˆã®ã¿å‡¦ç†ã‚’å®Ÿè¡Œã™ã‚‹ã€‚ (ä¸ç•¥) ã“ã®ç§˜å¯†æƒ…å ±ã¯ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç†ã«ä½¿ç”¨ã—ã¦ã„ã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³ ID ã‚’ç”¨ã„ã‚‹æ–¹æ³•ã®ä»–ã€
katryo 2014/07/07
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTP

CSRF
ãƒªãƒ³ã‚¯
faraday-lazyable - r7kamura blog
faraday-lazyableã¨ã„ã†ã€ HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é…å»¶è©•ä¾¡ã•ã›ã‚‹ãŸã‚ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä½œã£ãŸã€‚ é…å»¶è©•ä¾¡ã¯ã‚ã‚‹ç¨®ã®è¤‡é›‘æ€§ã‚’æŒã¡è¾¼ã‚€ãŒã€ãƒ“ã‚¸ãƒã‚¹ã®è¦æ±‚ã«åˆã‚ã›ã¦æ£ã—ãä½¿ã£ã¦ã„ããŸã„ã€‚ é…å»¶è©•ä¾¡ HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã«ãŠã‘ã‚‹é…å»¶è©•ä¾¡ã¨ã¯ä½•ã‹ã€‚ é…å»¶è©•ä¾¡ã¨ã„ã†ã®ã¯ã€è©•ä¾¡ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„å€¤ãŒå˜åœ¨ã™ã‚‹ã¨ãã€ å®Ÿéš›ã®è¨ˆç®—ã‚’å€¤ãŒå¿…è¦ã«ãªã‚‹ã¾ã§è¡Œã‚ãªã„ã“ã¨ã‚’ã„ã†ã€‚ HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é…å»¶è©•ä¾¡ã™ã‚‹ã¨ã„ã†ã®ã¯ã€ã¤ã¾ã‚ŠHTTPã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ã™ãã«ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚’è¿”ã™ãŒã€ ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã«å¯¾ã—ã¦ãƒ¡ã‚½ãƒƒãƒ‰ãŒå‘¼ã°ã‚ŒãŸã¨ãã«åˆã‚ã¦HTTPé€šä¿¡ã‚’ç™ºç”Ÿã•ã›ã‚‹ã¨ã„ã†ã“ã¨ã‚’æ„å‘³ã—ã¦ã„ã‚‹ã€‚ Faraday Faradayã¨ã¯ä½•ã‹ã€‚ faraday-lazyableã¯ã€Faradayã¨ã„ã†Rubyè£½ã®HTTPã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã¨ã—ã¦å®Ÿç¾ã•ã‚Œã¦ã„ã‚‹ã€‚ Faradayã¯Rackã®ã‚ˆã†ã«ãƒ—ãƒ©ã‚°ã‚¤ãƒ³(=ã“ã®
katryo 2014/02/03
ç§’é€Ÿæ¡ˆä»¶ã

HTTP

ruby

gem

ç§’é€Ÿ
ãƒªãƒ³ã‚¯
Webã«é–¢ã‚ã‚‹äººã®ãŸã‚ã®ã€ŽHTTPã®æ•™ç§‘æ›¸ã€ã‚’ç™ºå£² - ã†ã•ãŽæ–‡å¦æ—¥è¨˜
ã²ã•ã³ã•ã®å˜è‘—ã¨ãªã‚‹ã€ŽHTTPã®æ•™ç§‘æ›¸ã€ãŒ2013å¹´5æœˆ24æ—¥ã«ç™ºå£²ã«ãªã‚Šã¾ã™ã€‚ å†…å®¹ã¯ã‚¿ã‚¤ãƒˆãƒ«ã®é€šã‚Šã€Webã«é–¢ã‚ã‚‹å…¨ã¦ã®äººã«æ§ã’ã‚‹HTTPã‚’å¦ã¶ãŸã‚ã®æ•™ç§‘æ›¸ã§ã™ã€‚åŸºç¤Žã‚’å¦ã³ãŸã„åˆå¿ƒè€…ã®æ–¹ã‹ã‚‰ã€æœºã®ä¸Šã«ç½®ã„ã¦ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹çš„ã«ä½¿ã„ãŸã„æ–¹ã¾ã§ã‚’å¯¾è±¡ã¨ã—ã¦ã„ã¾ã™ã€‚ HTTPã®æ•™ç§‘æ›¸ç™ºå£²å…ƒ: ç¿”æ³³ç¤¾ä¾¡æ ¼: ï¿¥ 2,730ç™ºå£²æ—¥: 2013/05/25posted with Socialtunes at 2013/05/21 HTTPé–¢é€£ã®æ›¸ç±ã¯ã€Žä»Šå¤œã‚ã‹ã‚‹HTTP (Network)ã€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ã®æœ¬ã‚’2004å¹´ã«å‡ºã—ã¦ã„ã¾ã™ã€‚ãã®é ƒã‹ã‚‰HTTP/1.1ãŒä¸»æµã§ã‚ã‚‹ã¨ã„ã†ã®ã¯ã€ä»Šã§ã‚‚å¤‰ã‚ã‚Šã¾ã›ã‚“ãŒãã‚Œã‚’å–ã‚Šå·»ãç’°å¢ƒã¨ã„ã†ã®ã¯å¤‰ã‚ã‚Šã¤ã¤ã‚ã‚Šã¾ã™ã€‚ HTTPã‚’å¦ã¶ä¸Šã§ã®è¦ç‚¹ãŒã‚ã‹ã‚Šã‚„ã™ãã€ãã—ã¦èªã¿ã‚„ã™ããªã£ã¦ãŠã‚Šã¾ã™ã€‚å‰ä½œã®ãƒªãƒ‹ãƒ¥ãƒ¼ã‚¢ãƒ«ã£ã½ãæ„Ÿã˜ã‚‹ã‹ã¨æ€ã„ã¾ã™ãŒã€9å‰²ä»¥ä¸Šã¯æ›¸ãç›´ã—ã‚„è¿½è¨˜ã—ã¦ãŠã‚Š
katryo 2013/05/21
ã¡ã‚‡ã£ã¨å¤§å¦å›³æ›¸é¤¨ã«æ³¨æ–‡ã—ã¦ãã‚‹

HTTP

Web

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
JSONã‚’ä½¿ã£ã¦ã¿ã‚‹
ä»¥ä¸‹ã®ã‚µã‚¤ãƒˆãªã©ã‚’å‚è€ƒã«ã—ãªãŒã‚‰ä½œæˆã—ã¦ã¿ã‚‹ã€‚ [android] androidã§Bingã§JSONã§ Android ã§ JSON ã‚’ä½¿ãŠã†ã€€ï½ž å‰ç·¨ ï½ž Android ã§ JSON ã‚’ä½¿ãŠã†ã€€ï½ž å¾Œç·¨ ï½ž HTTPé€šä¿¡ ã¾ãšã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ¥ç¶šã‚’è¨±å¯ã™ã‚‹ç‚ºã«ã€AndroidManifest.xmlã«ä»¥ä¸‹ã‚’è¨˜è¿°ã™ã‚‹ã€‚ [java] [/java] æ¬¡ã«HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆï¼†ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®å®Ÿè£… [java] SchemeRegistry schemeRegistry = new SchemeRegistry(); schemeRegistry.register( new Scheme( HttpHost.DEFAULT_SCHEME_NAME, PlainSocketFactory.getSocketFactory(), 80 ) ); HttpParams httpParams; http
katryo 2012/12/13
HTTP

Android

json
ãƒªãƒ³ã‚¯
URLã‚’æŠ½å‡ºã—ã¦ãƒªãƒ³ã‚¯ã®ã‚¿ã‚°ã«ç½®æ›ã™ã‚‹ - ã¨ã‚ã‚‹æŠ€è¡“ã®å‚™å¿˜éŒ²
Ruby ã‚³ãƒ¼ãƒ‰ require "uri" def replace_uri(s) str = s.dup URI.extract(s, %w{http https}) do |uri| str.gsub!(uri, %Q{#{uri}">#{uri}}) end str end äºˆå‚™çŸ¥è˜ String#dup --- clone --- dup æ–‡å—åˆ—ã¨åŒã˜å†…å®¹ã‚’æŒã¤æ–°ã—ã„æ–‡å—åˆ—ã‚’è¿”ã—ã¾ã™ã€‚ãƒ•ãƒªãƒ¼ã‚º Object#freeze [Object/freeze] ã—ãŸæ–‡å—åˆ—ã® clone ã¯ãƒ•ãƒªãƒ¼ã‚ºã•ã‚ŒãŸæ–‡å—åˆ—ã‚’è¿”ã—ã¾ã™ãŒã€dup ã¯å†…å®¹ã® ç‰ã—ã„ãƒ•ãƒªãƒ¼ã‚ºã•ã‚Œã¦ã„ãªã„æ–‡å—åˆ—ã‚’è¿”ã—ã¾ã™ã€‚ ã™ãªã‚ã¡ dup ã¨ String#new [String/new] ã¯ç‰ä¾¡ã§ã™ã€‚ URI.extract --- URI.extract(str[, schemes]) --- URI.extract(st
katryo 2012/11/20
HTTP

ruby

æŠ€è¡“
ãƒªãƒ³ã‚¯
ã‚¯ãƒã‚¹ã‚ªãƒªã‚¸ãƒ³ãªXMLHttpRequest2(XHR2)ã¨ç‹¬è‡ªãƒ˜ãƒƒãƒ€ã®è½ã¨ã—ç©´?
2011/5/10 ä»¥ä¸‹ã®è¨‚æ£ã‚’ã—ã¾ã—ãŸã€‚ s/prefetch/preflight/g JavaScriptã®ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³é€šä¿¡ã§å¾®å¦™ãªè©±ãŒã‚ã£ãŸã®ã§æ›¸ã„ã¦ã¿ã¾ã™ã€‚ã¡ãªã¿ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰JavaScriptã®è©±ã§ã™ã€‚ä¸‹è¨˜ä»•æ§˜ã«æ•¬æ„ã‚’è¡¨ã—ã¦ä»¥ä¸‹ã§ã¯ã‚¯ãƒã‚¹ã‚ªãƒªã‚¸ãƒ³ã¨æ›¸ãã¾ã™ã€‚ä¸€èˆ¬ã«ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³é€šä¿¡ã¨å‘¼ã°ã‚Œã¦ã„ã‚‹ã‚‚ã®ã¨åŒã˜æ„å‘³ã§ä½¿ã„ã¾ã™ã€‚ Cross-Origin Resource Sharing XMLHttpRequest2(XHR2) Webãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰XMLHttpRequest(XHR)ã§å¤–éƒ¨ã®Web APIã‚’ç›´æŽ¥å©ã“ã†ã¨ã™ã‚‹ã¨ã‚¯ãƒã‚¹ã‚ªãƒªã‚¸ãƒ³ã®åˆ¶é™ã«å½“ãŸã‚Šã¾ã™ã€‚åˆ¶é™ã®å¿…è¦æ€§ã¯æ¬¡ã®èª¬æ˜ŽãŒã‚ã‹ã‚Šã‚„ã™ã„ã®ã§ãƒªãƒ³ã‚¯ã‚’å¼µã£ã¦ãŠãã¾ã™ã€‚ Same-Originãƒãƒªã‚·ãƒ¼ã®å¿…è¦æ€§ ã‚¯ãƒã‚¹ã‚ªãƒªã‚¸ãƒ³åˆ¶é™ãŒã‚ã‚‹ä¸ã§Webãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ç›´æŽ¥Web APIã‚’å©ã“ã†ã¨å…ˆäººã¯çŸ¥æµã‚’çµžã£ã¦ãã¾ã—ãŸã€‚iframe
katryo 2012/11/07
API

Web

javascript

ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³

crossdomain

HTTP

xhr2

xhr

ajax
ãƒªãƒ³ã‚¯
1