[B! escape] lesamoureusesã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lesamoureuses id:lesamoureuses

escapeã«é–¢ã™ã‚‹lesamoureusesã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Kazuho@Cybozu Labs: (Twitter ã® XSS è„†å¼±æ€§ã«é–¢é€£ã—ã¦) æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã®æ£ã—ã„ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦
æ˜¨æ—¥ã® Twitter ã® XSS é¨’ãŽã¯ã€ã¾ã çš†ã•ã‚“ã®è¨˜æ†¶ã«æ–°ã—ã„ã“ã¨ã¨æ€ã„ã¾ã™ã€‚ã„ã„æ©Ÿä¼šãªã®ã§ã€ãƒ„ã‚¤ãƒ¼ãƒˆã®ã‚ˆã†ãªæ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦è§¦ã‚Œã¦ãŠããŸã„ã¨æ€ã„ã¾ã™ã€‚ Twitter ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ã€å˜ãªã‚‹å¹³æ–‡ï¼ˆãƒ—ãƒ¬ã‚¤ãƒ³ãƒ†ã‚ã‚¹ãƒˆï¼‰ã§ã¯ãªãã€ã€Œ@è‹±æ•°å—ã€ã®ã‚ˆã†ãªä»–ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¸ã®è¨€åŠã¨ã€Œhttp://ã€œã€ã®ã‚ˆã†ãª URL ã‚’è‡ªå‹•çš„ã«ãƒã‚¤ãƒ‘ãƒ¼ãƒªãƒ³ã‚¯åŒ–ã™ã‚‹æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã§ã™ã€‚ ã“ã®ã‚ˆã†ãªè¤‡æ•°ã®ãƒ«ãƒ¼ãƒ«ã‚’ã‚‚ã¤æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã‚’ HTML åŒ–ã™ã‚‹éš›ã«ã¯ã€ã©ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã‘ã°ã„ã„ã®ã§ã—ã‚‡ã†ï¼Ÿã€€ã¾ãšã€Œ@ã€œã€ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ã¦ã‹ã‚‰ã€URL ã‚’ãƒªãƒ³ã‚¯åŒ–ã™ã‚Œã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿã€€ãã‚Œã ã¨ã€@ã€œ ã®ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ãŸ A HREF ã‚¿ã‚°ã®ä¸ã® URL ãŒã•ã‚‰ã«ãƒªãƒ³ã‚¯åŒ–ã•ã‚Œã¦ã„ã¾ã„ã¾ã™ãã€‚ ã§ã¯ã€URL ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ã¦ã‹ã‚‰ @ã€œ ã‚’ãƒªãƒ³ã‚¯åŒ–ã™ã‚Œã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿã€€ãã‚Œã ã¨ã€@ ã‚’å«ã‚€ URL ãŒã‚ã£ãŸå ´åˆã«
lesamoureuses 2010/09/22
ã“ã‚Œæ€ã„å‡ºã—ãŸï¼žhttp://blog.livedoor.jp/dankogai/archives/50940023.html

perl

twitter

escape
ãƒªãƒ³ã‚¯
Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ— - sawatã®ãƒ–ãƒã‚°
ä»˜ç®‹ç´™Greasemonkeyã§ã€GM_setValueã«ç™»éŒ²ã—ãŸæ—¥æœ¬èªžã®æ–‡å—åŒ–ã‘å¯¾ç–ã«encodeURIã‚’ã¤ã‹ã£ãŸã‘ã©ã€encodeURIã¯URIã‚’ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã™ã‚‹ãŸã‚ã®é–¢æ•°ãªã®ã§ã‚ã‚“ã¾ã‚Šè¤’ã‚ã‚‰ã‚ŒãŸä½¿ã„æ–¹ã§ã¯ãªã„ã§ã™ãã€‚ã—ã‹ã‚‚ã€encodeURIã®ã‚ˆã†ãªURLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã¯æ–‡å—åˆ—ã‚’UTF-8ã«ã—ã¦ã‹ã‚‰ã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰å¯¾è±¡ã®å„ãƒã‚¤ãƒˆã‚’%xxå½¢å¼*1ã§è¡¨ç¾ã™ã‚‹ã®ã§ã€æ—¥æœ¬èªžï¼‘æ–‡å—ã‚’ã‚ã‚‰ã‚ã™ã®ã«ãŸã„ã¦ã„ã®å ´åˆASCII9æ–‡å—ãŒå¿…è¦ã«ãªã£ã¦åŠ¹çŽ‡ãŒæ‚ªã„ã§ã™ã€‚*2 ãªã®ã§ã€å‰è¿°ã®ã‚ˆã†ãªå˜ã«éžASCIIæ–‡å—ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ãŸã„ã ã‘ã®ã‚ˆã†ãªã‚±ãƒ¼ã‚¹ã§ã¯Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’ä½¿ã£ãŸæ–¹ãŒã‚ˆã„ã§ã™ã€‚Javaã®propertiesã¨ã‹native2asciiã¨ã‹ã®ã‚„ã¤ã§ã™ã€‚ Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¯\uxxxx*3ã®å½¢å¼ã§ã‚ã‚‰ã‚ã™ã®ã§ã€ãŸã„ã¦ã„ã®æ—¥æœ¬èªžï¼‘æ–‡å—ã¯ASCII6æ–‡å—ã«ãªã£ã¦ã€URLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã«æ¯”ã¹
lesamoureuses 2008/08/14
unicode

escape

unescape

js

encode

encodeURIComponent
ãƒªãƒ³ã‚¯
404 Blog Not Found:perl - å‹æ‰‹ã«æ·»å‰Š - 40è¡Œã§ä½œã‚‹Perlç”¨ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³
2007å¹´10æœˆ30æ—¥20:00 ã‚«ãƒ†ã‚´ãƒªLightweight Languages perl - å‹æ‰‹ã«æ·»å‰Š - 40è¡Œã§ä½œã‚‹Perlç”¨ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ ä¹…ã€…ã®å‹æ‰‹ã«æ·»å‰Šã€‚ä»Šå›žã¯ã“ã¡ã‚‰ã€‚ 40è¡Œã§ä½œã‚‹Perlç”¨ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ æ£è¦è¡¨ç¾ãŒã‚‰ã¿ãªã®ã§ã€Perlä»¥å¤–ã§ã‚‚æœ‰ç”¨ã€‚ æ·»å‰Šç®‡æ‰€ã¯ã€ã“ã¡ã‚‰ã€‚ 40è¡Œã§ä½œã‚‹Perlç”¨ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ sub convert { return unless defined(my $str = shift); $str =~ s{&}{&}gso; $str =~ s{<}{<}gso; $str =~ s{>}{>}gso; $str =~ s{\"}{"}gso; $str; } ã“ã‚Œã®æœ€åˆã®substitutionãŒ&ã§ã¯ãªãã¦&ã§ã¯ãªã„ã‹ã¨ã„ã†ã®ã¯ã•ã¦ãŠãã€ã“ã†ã„ã£ãŸå ´åˆã€ä½•åº¦ã‚‚æ£è¦è¡¨ç¾ã‚’ã‹ã‘
lesamoureuses 2007/10/31
htmlã‚¿ã‚°ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¯æ–‡å—ã‚¯ãƒ©ã‚¹ã¨hashã§ã‚„ã‚‹ã®ãŒã„ã„

perl

dankogai

template

regexp

blog

hash

escape
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (12)

escapeã«é–¢ã™ã‚‹lesamoureusesã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (12)

escapeã«é–¢ã™ã‚‹lesamoureusesã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

Kazuho@Cybozu Labs: (Twitter ã® XSS è„†å¼±æ€§ã«é–¢é€£ã—ã¦) æ§‹é€ åŒ–ãƒ†ã‚­ã‚¹ãƒˆã®æ­£ã—ã„ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦

Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ— - sawatã®ãƒ–ãƒ­ã‚°

404 Blog Not Found:perl - å‹æ‰‹ã«æ·»å‰Š - 40è¡Œã§ä½œã‚‹Perlç”¨ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (12)

escapeã«é–¢ã™ã‚‹lesamoureusesã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

Kazuho@Cybozu Labs: (Twitter ã® XSS è„†å¼±æ€§ã«é–¢é€£ã—ã¦) æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã®æ£ã—ã„ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦

Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ— - sawatã®ãƒ–ãƒã‚°

404 Blog Not Found:perl - å‹æ‰‹ã«æ·»å‰Š - 40è¡Œã§ä½œã‚‹Perlç”¨ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚¨ãƒ³ã‚¸ãƒ³

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹