JSONAssert - Write JSON Unit Tests with Less Code - Introduction
Write JSON unit tests in less code. Great for testing REST interfaces. Code JSON tests as if you are comparing a string. Under the covers, JSONassert converts your string into a JSON object and compares the logical structure and data with the actual JSON. When strict is set to false (recommended), it forgives reordering data and extending results (as long as all the expected elements are there), m
PHPã®JSON HashDosã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·
4å¹´å‰ã«HashDos（Hash Collision Attack）ã«é–¢ã™ã‚‹åŠ¹çŽ‡çš„ãªæ”»æ’ƒæ–¹æ³•ãŒ28C3ã«ã¦å…¬é–‹ã•ã‚Œã€PHPã‚’å«ã‚€ä¸»è¦è¨€èªžãŒã“ã®æ”»æ’ƒã®å½±éŸ¿ã‚’å—ã‘ã‚‹ãŸã‚対ç–を実施ã—ã¾ã—ãŸã€‚ã—ã‹ã—ã€PHP以外ã®è¨€èªžãŒã€ãƒãƒƒã‚·ãƒ¥ãŒè¡çªã™ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’予測困難ã«ã™ã‚‹å¯¾ç–ã‚’ã¨ã£ãŸã®ã«å¯¾ã—ã¦ã€PHPã¯ã€GET/POST/COOKIEç‰ã®å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ã®å€‹æ•°ã‚’制é™ã™ã‚‹ã¨ã„ã†å¯¾ç—‡ç™‚法を実施ã—ãŸãŸã‚ã€PHPã«ã¯HashDosã«å¯¾ã™ã‚‹æ”»æ’ƒçµŒè·¯ãŒã¾ã 残ã£ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€ä¸€éƒ¨ã®æŠ€è¡“者ã«ã¯çŸ¥ã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚例ãˆã°ã€ä»¥ä¸‹ã®æ§˜ãªã¤ã¶ã‚„ãã«ã‚‚見るã“ã¨ãŒã§ãã¾ã™ã€‚ ã ã£ã¦ã€ hashdos 脆弱性ã®æ™‚〠Python ã¨ã‹ã®è¨€èªžãŒã€å¤–部入力をãƒãƒƒã‚·ãƒ¥ã«å…¥ã‚Œã‚‹ã¨ãã«è¡çªã‚’ç‹™ãˆãªã„よã†ã«å¯¾ç–ã—ãŸã®ã«ã€phpã ã‘POST処ç†ã§å¯¾ç–ã—ãŸã‹ã‚‰ã？ json ã‚’å—ã‘å–るよã†ãªå£ã‚‚ã£ã¦ã‚‹phpアプリã®ã»ã¨ã‚“ã©ãŒhashdos残ã£ã¦ã‚‹ã‚“ã˜ã‚ƒãªã„
GitHub - interagent/http-api-design: HTTP API design guide extracted from work on the Heroku Platform API
This guide describes a set of HTTP+JSON API design practices, originally extracted from work on the Heroku Platform API. This guide informs additions to that API and also guides new internal APIs at Heroku. We hope it’s also of interest to API designers outside of Heroku. Our goals here are consistency and focusing on business logic while avoiding design bikeshedding. We’re looking for a good, con
JSON Web Token (JWT)
Network Working Group M. Jones Internet-Draft Microsoft Intended status: Standards Track D. Balfanz Expires: November 13, 2012 Google J. Bradley Ping Identity Y. Goland Microsoft J. Panzer Google N. Sakimura NRI P. Tarjan Facebook May 12, 2012 JSON Web Token (JWT) draft-jones-json-web-token-10 Abstract JSON Web Token (JWT) is a means of representing claims to be transferred between two parties. Th
JSON Web Signatureã®ç´¹ä»‹ - r-weblife
ã“ã‚“ã°ã‚“ã¯ã€ritouã§ã™ã€‚ TLã§13æ—¥ã®é‡‘曜ã ã‹ã‚‰JSONã®ãƒ»ãƒ»ãƒ»ã¿ãŸã„ãªã®ã‚’見ã¤ã‘ãŸã®ã§ã¡ã‚‡ã£ã¨æ›¸ãã¾ã™ã€‚ ã£ã¦æ€ã£ãŸã‚‰ã‚‚ã†åœŸæ›œæ—¥ã§ã—ãŸorz JSON Web Signatureã¨ã¯ï¼Ÿ draft-jones-json-web-signature-02 - JSON Web Signature (JWS) JWSã¯ã€HTTP Authorization Headerã‚„URIクエリパラメータãªã©åˆ¶é™ãŒã‚る環境ã§ã‚‚使ãˆã‚‹ã‚ˆã†ãªã‚³ãƒ³ãƒ‘クトãªç½²åå½¢å¼ã§ã™ã€‚ã£ã¦ã‚ã‚Šã¾ã™ã€‚ ã–ã£ãり説明ã™ã‚‹ã¨ã€æ¬¡ã®3ã¤ã‹ã‚‰æ§‹æˆã•ã‚Œã¾ã™ã€‚ JWS Header Input : ç½²åã®ãŸã‚ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãªã©ã‚’å«ã‚€JSONデータをBase64 URLエンコードã—ãŸã‚‚ã® JWS Payload Input : ã‚‚ã¨ã‚‚ã¨ç½²åã¤ã‘ãŸã‹ã£ãŸJSONデータをBase64 URLエンコードã—ãŸã‚‚ã® JWS Crypto Out
JSON Schema: interactive and non interactive validation
Internet Engineering Task Force fge. Galiegue, Ed. Internet-Draft Intended status: Informational K. Zyp Expires: August 5, 2013 SitePen (USA) G. Court February 1, 2013 JSON Schema: interactive and non interactive validation draft-fge-json-schema-validation-00 Abstract JSON Schema (application/schema+json) has several purposes, one of which is instance validation. The validation process may be inte
PHPã®ã‚¤ã‚¿ã„入門書をèªã‚“ã§Ajaxã®XSSã«ã¤ã„ã¦æ¤œè¨Žã—ãŸ(3)～JSONç‰ã®æƒ³å®šå¤–èªã¿å‡ºã—ã«ã‚ˆã‚‹æ”»æ’ƒï½ž - ockeghem(徳丸浩)ã®æ—¥è¨˜
昨日ã®æ—¥è¨˜ã®ç¶šãã§ã€Ajaxã«å›ºæœ‰ãªã‚»ã‚ュリティå•é¡Œã«ã¤ã„ã¦æ¤œè¨Žã—ã¾ã™ã€‚今回ã¯JSONç‰ã®æƒ³å®šå¤–èªã¿å‡ºã—ã«ã‚ˆã‚‹æ”»æ’ƒã§ã™ã€‚ã“れら攻撃手法ã¯æœ¬æ¥ãƒ–ラウザå´ã§å¯¾å¿œã™ã¹ãã‚‚ã®ã§ã€ã‚„むを得ãšWebアプリケーションå´ã§å¯¾å¿œã™ã‚‹ä¸Šã§ã€ã¾ã 定番ã¨ãªã‚‹å¯¾ç–ãŒãªã„よã†ã«æ€ãˆã¾ã™ã€‚ã“ã®ãŸã‚ã€è¤‡æ•°ã®å€™è£œã‚’示ã™ã‚‹ã“ã¨ã§è°è«–ã®ãã£ã‹ã‘ã«ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšã€ä½œã‚ŠãªãŒã‚‰åŸºç¤Žã‹ã‚‰å¦ã¶PHPã«ã‚ˆã‚‹Webアプリケーション入門XAMPP/jQuery/HTML5ã§ä½œã‚‹ã‚¤ãƒžãƒ‰ã‚ã®Weã‹ã‚‰ã€Ajaxを利用ã—ãŸã‚¢ãƒ—リケーションã®æ¦‚念図を引用ã—ã¾ã™ï¼ˆåŒæ›¸P20ã®å›³1-23）。 å‰å›žã€å‰ã€…回ã¯ã€(5)ã®HTTPレスãƒãƒ³ã‚¹ã®å‰å¾Œã§ã€JSONç‰ã®ãƒ‡ãƒ¼ã‚¿ä½œæˆï¼ˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ï¼‰ã«èµ·å› ã™ã‚‹evalインジェクションやã€(5)ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’å—ã‘å–ã£ãŸå¾Œã®HTMLレンダリングã®éš›ã®XSSã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã—ãŸã€‚ ã—ã‹ã—ã€å•é¡Œã¯ã“ã‚Œã ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“。æ£å¸¸
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - gr2m/get-json-paths-action: A GitHub Action to access deep values of JSON strings
GitHub - babarot/stein: A linter for config files with a customizable rule set
ã“ã‚“ãªã«ä½¿ãˆã‚‹ï¼ä»Šã©ãã®APIドã‚ュメンテーションツール
Log in with Atlassian account
https://oauth.jp/post/43684099914/json-web-token-jwt/
GitHub - java-json-tools/json-schema-validator: A JSON Schema validation implementation in pure Java, which aims for correctness and performance, in that order
Create new page · json-schema/json-schema Wiki
{{#tags}}- {{label}}
{{/tags}}