[B! cookie] monjudohã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

monjudoh id:monjudoh

cookieã«é–¢ã™ã‚‹monjudohã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (27)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

RFC2965: HTTP çŠ¶æ…‹ç®¡ç†ãƒ¡ã‚«ãƒ‹ã‚ºãƒ
Studying HTTP > RFC-Translations related HTTP ã“ã®æ–‡æ›¸ã¯ã€ D. Kristol, L. Montulli: HTTP State Management Mechanism (RFC 2965), October 2000. ã‚’ æ©‹æœ¬è‹±å½¦ ãŒæ—¥æœ¬èªžè¨³ã—ãŸç‰©ã§ã™ã€‚ ã“ã®æ–‡æ›¸ã®å–ã‚Šæ‰±ã„ã«ã¤ã„ã¦ã¯ã€[Studying HTTP] ã® RFC æ—¥æœ¬èªžè¨³ã‚’åˆ©ç”¨ã™ã‚‹ã«ã‚ãŸã£ã¦ã«å¾“ã£ã¦ä¸‹ã•ã„ã€‚ Network Working Group Request for Comments: 2965 Obsoletes: 2109 Category: Standards Track D. Kristol Bell Laboratories, Lucent Techno logies L. Montulli Epinions.com, Inc. October 2000
monjudoh 2012/08/22
cookie

ä»•æ§˜

ç¿»è¨³æ–‡æ›¸
ãƒªãƒ³ã‚¯
Firebug Tip: Conditional Breakpoints | Software is hard
Published:July 29th, 2012 Comments:5 Comments Category:Firebug, Firebug Tip, Planet Mozilla Firebug is mainly a debugger and being able to stop Javascript execution on a breakpoint is obviously one of its essential features. Also, ability to break on a breakpoint only if certain condition is true is useful feature and so, check out this post if you are interested how to properly create a condition
monjudoh 2012/07/30
cookie.valueç‰ã®æ¡ä»¶ã§æ¡ä»¶ä»˜ãbreak pointã‚’è²¼ã‚Œã‚‹ã®ãª

JavaScript

Firebug

cookie

XMLHttpRequest

debug
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
monjudoh 2012/07/11
XSS

cookie
ãƒªãƒ³ã‚¯
ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã®å·¨å¤§ãªã‚¯ãƒƒã‚ãƒ¼ã¨ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã®ãƒ˜ãƒƒãƒ€ãƒ¼ã‚µã‚¤ã‚ºåˆ¶é™ã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚‹DoSã«ã¤ã„ã¦ - ãƒ‡ãƒ¼
ã‚‚ã†10å¹´ä»¥ä¸Šå‰ã®ãƒã‚¿ãªã®ã§ã™ãŒã€ã„ã¾ã ã«æœ‰åŠ¹ã ã—ã€æœ€è¿‘ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’æ‰±ã£ã¦ã„ãªã„ãªã‚‰XSSãŒã‚ã£ã¦ã‚‚ã‚ã¾ã‚Šå•é¡Œãªã„ã¨ã„ã†æ„è¦‹ã‚’è¦‹ã‚‹ã“ã¨ãŒã‚ã‚‹ã®ã§ã€ã‚µãƒ¼ãƒ“ã‚¹æä¾›å´ã¨ã—ã¦æ¡ˆå¤–é¢å€’ãªã“ã¨ã«ãªã‚‹å ´åˆãŒã‚ã‚‹ã€ã¨ã„ã†è©±ã‚’æ›¸ãã¾ã—ãŸã€‚ POCã§ã™ã€‚ http://www.udp.jp/misc/largecookiedos.html å†…å®¹ã¨ã—ã¦ã¯ã€ JavaScriptã‹ã‚‰å·¨å¤§ãªCookieã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã«è¨å®šã§ãã‚‹ HTTPã‚µãƒ¼ãƒãƒ¼ã¯å—ã‘å–ã‚Œã‚‹HTTPãƒ˜ãƒƒãƒ€ãƒ¼ã‚µã‚¤ã‚ºã®ä¸Šé™ã‚’æŒã£ã¦ã„ã¦ã€ãã‚Œã‚’è¶…ãˆã¦ã„ãŸå ´åˆã«Bad Requestã‚’è¿”ã™ 1ã«ã‚ˆã£ã¦2ã‚’è¶…ãˆã‚‹ã‚µã‚¤ã‚ºã®CookieãŒè¨å®šå¯èƒ½ãªå ´åˆãŒã‚ã‚‹ï¼ˆãŸã¶ã‚“ã»ã¨ã‚“ã©ã®å ´åˆå¯èƒ½ï¼‰ ã‚ˆã£ã¦XSSãªã©ã«ã‚ˆã£ã¦å·¨å¤§ãªCookieã‚’è¨å®šã•ã‚Œã‚‹ã¨ä»¥é™ã‚µãƒ¼ãƒ“ã‚¹ãŒåˆ©ç”¨ã§ããªããªã‚‹ ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ Cookieã®æœ‰åŠ¹æœŸé™ã‚’ä½•åå¹´ã‚‚è¨å®šã•ã‚Œã‚‹ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼å´ã§å‹æ‰‹ã«å›žå¾©ã™ã‚‹ã“ã¨
monjudoh 2012/04/18
èˆˆå‘³æ·±ã„

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie

XSS
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®æ´å²ã¨ç¾çŠ¶ Part3 åºƒå‘Šã«ãŠã‘ã‚‹åˆ©ç”¨ã€ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ã€ã‚¿ãƒ¼ã‚²ãƒ†ã‚£ãƒ³ã‚°åºƒå‘Šã«ãŠã‘ã‚‹ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒªã‚¹ã‚¯ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
å‰å›žã®ç¶šãã€‚ãªã‚‹ã¹ãä¸€èˆ¬äººå‘ã‘ã«æ›¸ãã¾ã™ã€‚ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã¨ã‚ã¾ã‚Šé–¢ä¿‚ã®ãªã„è©±ã‚‚æ›¸ãã¾ã™ã€‚ http://d.hatena.ne.jp/mala/20111125/1322210819 http://d.hatena.ne.jp/mala/20111130/1322668652 å‰å›žã¾ã§ã®æ¦‚è¦ ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ç›®çš„ã®Cookieã®åˆ©ç”¨ãªã©ã‹ã‚‰ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®åˆ©ç”¨ã¯å•é¡Œè¦–ã•ã‚ŒIE6ã§åˆ¶é™ãŒã‹ã‘ã‚‰ã‚Œã‚‹ã‚‚ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒãƒªã‚·ãƒ¼ã‚’æ˜Žç¤ºã™ã‚Œã°åˆ©ç”¨ã§ãã‚‹ã¨ã„ã†è¿‚å›žæ‰‹æ®µã‚’ç”¨æ„ã€ã—ã‹ã—ä»Šã§ã¯P3Pã¯ã‚ªãƒ¯ã‚³ãƒ³åŒ–ã€Safariã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®å—ã‘å…¥ã‚Œã‚’ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æ‹’å¦ã™ã‚‹è¨å®šã‚’æŽ¡ç”¨ã—ãŸãŒä¸€åº¦å—ã‘å…¥ã‚ŒãŸCookieã¯å•ç”ç„¡ç”¨ã§é€ä¿¡ã€Mozillaé–¢ä¿‚è€…ã¯ã€Œæ®†ã©åˆæ³•çš„ãªåˆ©ç”¨ç›®çš„ã¯ãªã„ã€ã¨è¨€ã£ã¦ã„ãŸã‚‚ã®ã®æ—¢å˜Webã‚µã‚¤ãƒˆã¨ã®äº’æ›æ€§ã®ãŸã‚ã«å¤‰æ›´ã§ããšã€ãƒ–ãƒ©ã‚¦ã‚¶ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookie
monjudoh 2012/01/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie

ãƒ–ãƒ©ã‚¦ã‚¶
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®æ´å²ã¨ç¾çŠ¶ Part2 Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹åˆ©ç”¨ã¨ãã®å•é¡Œ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
å‰å›ž http://d.hatena.ne.jp/mala/20111125/1322210819 ã®ç¶šãã§ã™ã€‚ å‰å›žã®ã‚ã‚‰ã™ã˜ ãƒ–ãƒ©ã‚¦ã‚¶ãƒ™ãƒ³ãƒ€ãƒ¼ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã‚’ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã‚ªãƒ•ã«ã—ãŸã‹ã£ãŸã‚“ã ã‘ã©ãŠå‰ã‚‰ãŒã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã«ä¾å˜ã—ãŸã‚µã‚¤ãƒˆä½œã‚‹ã—ä½¿ã†ã‹ã‚‰ã‚ªãƒ•ã«å‡ºæ¥ãªã‹ã£ãŸã‚“ã ã‚ˆ!!!!! ã¨ã„ã£ãŸäº‹æƒ…ã‚’è¸ã¾ãˆãŸä¸Šã§Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®åˆ©ç”¨ã®æ´å²ã«ã¤ã„ã¦æ›¸ãã¾ã™ã€‚å‰æçŸ¥è˜ã®å…±æœ‰ãŒæ¸ˆã‚“ã ã®ã§ã€ã“ã“ã‹ã‚‰ã¯ã‚ã‚‹ç¨‹åº¦å€‹äººçš„ãªæ„è¦‹ã‚‚å«ã¾ã‚Œã¾ã™ã€‚å®Ÿè£…é¢ã§ã®æŠ€è¡“çš„ãªå†…å®¹ã‚‚å«ã¿ã¾ã™ã€‚ ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£CookieãŒå¿…è¦ã¨ã•ã‚Œã¦ããŸæ´å² åºƒå‘Šã®ãŸã‚ã®ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°Cookieä»¥å¤–ã«ã‚‚ã€ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã«ä¾å˜ã—ãŸã‚µãƒ¼ãƒ“ã‚¹ãŒæ•°å¤šãå˜åœ¨ã—ã¦ããŸã€‚å€‹äººçš„ã«æŠŠæ¡ã—ã¦ã„ã‚‹ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒ“ã‚¹ã«ã¤ã„ã¦æ™‚ç³»åˆ—ã§è¿°ã¹ã‚‹ã€‚ã¤ã„ã§ã«åºƒå‘Šæ¥ç•Œã®æµã‚Œã«ã¤ã„ã¦ã‚‚é‡è¦ãªã®ã‚’å¹¾
monjudoh 2012/01/17
ã€Žè¶³ã‚ã¨æ©Ÿèƒ½ã‚„ã€å‹æ‰‹ã«å…±æœ‰ã®é¡ž ãã‚Œã¯å˜ç´”ã«è‡ªåˆ†ã®ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ã‚’å‹æ‰‹ã«æŽ²ç¤ºæ¿ã«æŠ•ç¨¿ã™ã‚‹ã¨ã„ã†CSRFè„†å¼±æ€§ãã®ã‚‚ã®ãªã®ã§ã€ä½œã‚‹ã¹ãã§ã¯ãªã„ã€‚ã€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie

ãƒ–ãƒ©ã‚¦ã‚¶
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®æ´å²ã¨ç¾çŠ¶ Part1 å‰æçŸ¥è˜ã®å…±æœ‰ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
Webé–‹ç™ºè€…ã®ãŸã‚ã®ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã‚„ã‚‰ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ã‚„ã‚‰ã®å•é¡Œç‚¹ã«ã¤ã„ã¦ä¸‰å›žãã‚‰ã„ã«åˆ†ã‘ã¦æ›¸ãã¾ã™ã€‚ ã“ã®æ–‡ç« ã¯å€‹äººçš„ã«æ›¸ã„ã¦ã„ã¾ã™ã®ã§ã€ãŠã„ã€ãŠå‰ã®ã¨ã“ã‚ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã«ä¾å˜ã—ã¦ã‚‹ã˜ã‚ƒããƒ¼ã‹ã¨ã„ã†ãƒ„ãƒƒã‚³ãƒŸãŒã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ãŒã€ãã†ã„ã†ã“ã¨ã‚’æ°—ã«ã—ã¦ã„ã‚‹ã¨ã„ã¤ã¾ã§çµŒã£ã¦ã‚‚å…¬é–‹ã§ããªã„ã¨ã„ã†å•é¡ŒãŒå‡ºã¦ã—ã¾ã†ã®ã§ã€ãã‚“ãªã“ã¨ã¯ãŠæ§‹ã„ãªã—ã«æ›¸ãã€‚ã¡ãªã¿ã«ä¾‹å¤–ãªãè‡ªç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã«å¯¾ã—ã¦ã‚‚ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã«ä¾å˜ã™ã‚‹ãªæ»ãã¨è¨€ã£ã¦ã„ã‚‹ã€‚ã“ã‚Œã¯Webãƒ—ãƒã‚°ãƒ©ãƒžãƒ¼è¦³ç‚¹ã§ã€è‡ªåˆ†ãŒã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºã«é–¢ã‚ã‚‹ä¸Šã§çŸ¥ã£ã¦ãŠã‹ãã°ãªã‚‰ãªã„ã ã‚ã†çŸ¥è˜ã¨ã—ã¦åæ•°å¹´é–“ã ã‚‰ã ã‚‰ã¨Webã‚’è¦‹ã¦ã„ã¦è‡ªç„¶ã«çŸ¥ã£ã¦ã„ãŸã‚‚ã®ã¨ã€ã‚ã‚‹ã„ã¯èˆˆå‘³ã‚’æŒã£ã¦çŽ‡å…ˆã—ã¦èª¿ã¹ãŸã‚‚ã®ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã€‚ã‚°ã‚°ãƒƒã¦ç›´ãã«åˆ†ã‹ã‚‹ç¨‹åº¦ã®ç”¨èªžã®å®šç¾©çš„ãªã“ã¨ã¯æ›¸ã‹ãªã„ã€‚ã‚ãã¾ã§Webã‚µã‚¤ãƒˆåˆ¶ä½œè€…å´ã‹ã‚‰ã®è¦³ç‚¹ãªã®ã§ã€ãƒ–ãƒ©ã‚¦ã‚¶é–‹ç™ºé–¢ä¿‚
monjudoh 2012/01/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie

ãƒ–ãƒ©ã‚¦ã‚¶
ãƒªãƒ³ã‚¯
ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§cookieæ›¸ãè¾¼ã‚€æ–¹æ³• +ã‚¯ãƒã‚¹ãƒ–ãƒ©ã‚¦ã‚¶ã§ - webãƒã‚¿
ã‚ã‚‹ã‚µã‚¤ãƒˆã‹ã‚‰åˆ¥ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚¯ãƒƒã‚ãƒ¼ã‚’æ›¸ãè¾¼ã‚€ã€‚ã“ã†ã„ã†ã‚¯ãƒƒã‚ãƒ¼ã¯ã€ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ã‚¯ãƒƒã‚ãƒ¼ã¨å‘¼ã°ã‚Œã‚‹ã€‚Firefoxã¨Chromeã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ã‚¯ãƒƒã‚ãƒ¼ãŒæ›¸ãè¾¼ã‚ã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ãŒã€IEã¨SafariãŒå•é¡Œã«ãªã‚‹ã€‚IEã¯ã‚³ãƒ³ãƒ‘ã‚¯ãƒˆãƒãƒªã‚·ãƒ¼ã¨ã„ã†ã‚‚ã®ã‚’è¨å®šã™ã‚Œã°ã„ã‘ã‚‹ãŒã€Safariã¯å‡ºæ¥ãªã„ã€‚Safariã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§â€çŸ¥ã‚‰ãªã„ã¨ã‚µã‚¤ãƒˆã‚„åºƒå‘Šã®ã¿Cookieã‚’ãƒ–ãƒãƒƒã‚¯â€ã¨ãªã£ã¦ã„ã‚‹ã€‚ã§ã‚‚ã€Google Adsenseã¨ã‹ã¯æ›¸ãè¾¼ã‚ã¦ã„ã‚‹ã€‚ãªã®ã§èª¿ã¹ãŸã€‚ ç›®çš„ localhostã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã¨ãsample.comã®ã‚¯ãƒƒã‚ãƒ¼ã‚’æ›¸ãè¾¼ã¿ãŸã„ã€‚ ã‚‚ã¡ã‚ã‚“ã‚¯ãƒã‚¹ãƒ–ãƒ©ã‚¦ã‚¶ã§ã€‚ (sample.comã¯hostsæ›¸ãæ›ãˆã‚„ã‚‹ã¨ã„ã„) ãƒãƒªã‚·ãƒ¼ã®è¨å®š (P3P) (ä»¥ä¸‹IEå¯¾ç–ç”¨) webã‚µã‚¤ãƒˆã§å€‹äººæƒ…å ±ãªã©ã‚’å–ã‚Šæ‰±ã†å ´åˆã€ãƒ–ãƒ©ã‚¦ã‚¶ã§è¨å®šã•ã‚ŒãŸãƒãƒªã‚·ãƒ¼è¨å®šã¨ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã®ãƒãƒªã‚·ãƒ¼
monjudoh 2011/12/13
ã€Žiframeã®ä¸ã«formé€ä¿¡ã™ã‚‹ã¨ã€ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚¯ãƒƒã‚ãƒ¼ã‚‚æ›¸ãè¾¼ã‚ã‚‹ã€‚è©³ç´°ã¯ä¸æ˜Žã ãŒã€GoogleAdsenseãŒã“ã®ãƒã‚¸ãƒƒã‚¯ã§æ›¸ãè¾¼ã‚“ã§ã„ã‚‹(å®Ÿéš›ã¯ã‚‚ã£ã¨è¤‡é›‘ãªè¡Œç¨‹ã ãŒ)ã€‚ã€

cookie

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ–ãƒ©ã‚¦ã‚¶
ãƒªãƒ³ã‚¯
Cookieã®Domainå±žæ€§ã¯ *æŒ‡å®šã—ãªã„* ãŒä¸€ç•ªå®‰å…¨ - ockeghem(å¾³ä¸¸æµ©)ã®æ—¥è¨˜
ãŸã¾ã«èª¤è§£ãŒã‚ã‚‹ã‚ˆã†ã§ã™ãŒã€Cookieã‚’è¨å®šã™ã‚‹å ´åˆã®Domainå±žæ€§ã¯ *è¨å®šã—ãªã„* ã®ãŒã‚‚ã£ã¨ã‚‚å®‰å…¨ã§ã™ã€‚ä»¥ä¸‹ã€ä¾‹ç¤ºã«ã‚ˆã‚Šèª¬æ˜Žã—ã¾ã™ã€‚ â€»ã“ã®ã‚¨ãƒ³ãƒˆãƒªã¯ã€http://blog.tokumaru.org/2011/10/cookie domain.html ã«ç§»è»¢ã—ã¾ã—ãŸã€‚æã‚Œå…¥ã‚Šã¾ã™ãŒã€ç¶šãã¯ã€ãã¡ã‚‰ã‚’ã”è¦§ãã ã•ã„ã€‚
monjudoh 2011/11/09
cookie

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
twitterã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚¿ã¾ã¨ã‚ã€€4æœˆ7æ—¥ã®twitterã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¯ãƒ©ã‚¹ã‚¿
å›°ã£ãŸã“ã¨ã«ã¾ãŸã¾ãŸåœ°éœ‡ãŒæ¥ã¾ã—ãŸãŒã€ã‚‚ã†ãªã‚“ã ã‹æ…£ã‚Œã¦ã—ã¾ã£ã¦ãƒ€ãƒ¡ãªäººã§ã™ã€‚ã¡ãªã¿ã«é€±æœ«ã¯å¤§ç£¯ã®æ–¹ã«å‘ã‹ã†ã®ã§ã™ãŒã€é¿é›£ã™ã‚‹ã‚ã‘ã§ã¯ãªãä»•äº‹ã§ã™ã€‚ã¨ã„ã†ã‚ã‘ã§æ˜Žæ—¥ã‹ã‚‰æœˆæ›œæ—¥ã¾ã§ã®æ›´æ–°ã¯ãŠä¼‘ã¿ã«ãªã‚Šã¾ã™ã€‚ã™ã¿ã¾ã›ã‚“ã€‚ æ˜¨æ—¥ç´¹ä»‹ã—ãŸ@piyokangoã•ã‚“ã®æ—¥è¨˜ã«æ›¸ã‹ã‚ŒãŸWAFã®ã“ã¨ã«â†“ã«é‹ã„çªã£è¾¼ã¿ãŒå…¥ã£ã¦ã„ã¾ã™ã€‚ã§ãã‚‹ã§ããªã„ã£ã¦ã„ã†ã®ã¯è¨˜æ†¶ã«é ¼ã‚‰ãšã«ã¡ã‚ƒã‚“ã¨èª¿ã¹ãªã„ã¨ã„ã‘ã¾ã›ã‚“ãªã€‚ piyokango: å¿˜ã‚Œã‚‹å‰ã«æ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ï¼å¤§è¦æ¨¡ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ ã€ŒLizaMoonã€æ”»æ’ƒã«ã¤ã„ã¦èª¿ã¹ã¦ã¿ãŸã€‚ http://bit.ly/hXEhZ6 ymzkei5: ãˆã€ã€â€œãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆã‚¿ã‚¤ãƒ—ã®WAFã§ã“ã®æ•°å€¤ãƒªãƒ†ãƒ©ãƒ«åž‹ã‚’ã¤ãSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’é˜²ãã“ã¨ãŒå‡ºæ¥ã¾ã›ã‚“ã€‚â€ã€€ï¼žâ– å¤§è¦æ¨¡ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ ã€ŒLizaMoonã€æ”»æ’ƒã«ã¤ã„ã¦èª¿ã¹ã¦ã¿ãŸã€‚ - piyologã€€http://bit.l
monjudoh 2011/04/11
ã€ŽJSã‹ã‚‰èªã¿å‡ºã›ãªã„ã‹ã‚‰ã¡ã‚‡ã£ã¨ãã‚‰ã„XSSå¯¾ç–ã«ãªã‚Šãã†ãªæ°—ãŒã—ãªãã¯ãªã„httponlyãªcookieã«ã¤ã„ã¦ã€‚ä¸Šæ›¸ãã¯ã§ãã‚‹ã‚“ã§ã™ãã€‚ã€

cookie

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ä»–äººã®Cookieã‚’æ“ä½œã™ã‚‹ - T.Teradaã®æ—¥è¨˜
è„†å¼±æ€§æ¤œæŸ»ã‚’ã—ã¦ã„ã¦ã—ã°ã—ã°å‡ºãã‚ã™ã®ã¯ã€ä»–äººã®Cookieã®å€¤ã‚’æ“ä½œã§ãã‚‹ã¨XSSã‚„ã‚»ãƒƒã‚·ãƒ§ãƒ³å›ºå®šç‰ã®æ”»æ’ƒãŒæˆåŠŸã™ã‚‹ã‚ˆã†ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã™ã€‚ ã“ã®ã‚ˆã†ãªã‚¢ãƒ—ãƒªãŒã‚ã‚‹ã¨ã€æ¥ç•Œçš„ã«ã¯ã€ŒCookie Monsterã¨ã„ã†å•é¡ŒãŒã‚ã‚Šã¾ã—ã¦ã€ã€ã€ã§ã‚‚ã€ã€ã€åŸºæœ¬çš„ã«ç¾çŠ¶ã®ãƒ–ãƒ©ã‚¦ã‚¶ã§ã¯ãƒªã‚¹ã‚¯ã¯ä½Žã„ã§ã™ã€ã¿ãŸã„ãªè©±ãŒã•ã‚Œã‚‹ã“ã¨ãŒå¤šã„ã®ã§ã¯ãªã„ã‹ã¨æ€ã„ã¾ã™ã€‚ æœ¬æ—¥ã®æ—¥è¨˜ã§ã¯ã€ãã‚Œï¼ˆCookie Monsterï¼‰ä»¥å¤–ã«ã‚‚çŠ¶æ³ã«ã‚ˆã£ã¦ã¯è€ƒæ…®ã™ã¹ãã“ã¨ãŒã‚ã‚‹ã€ã¨ã„ã†è©±ã‚’ã—ãŸã„ã¨æ€ã„ã¾ã™ï¼ˆéŽåŽ»ã®æ—¥è¨˜ã§ã‚‚å°‘ã—æ›¸ã„ãŸè©±ã§ã™ãŒã€ã‚‚ã†å°‘ã—ã¡ã‚ƒã‚“ã¨æ›¸ã„ã¦ãŠã“ã†ã¨æ€ã„ã¾ã™ï¼‰ã€‚ é€šä¿¡çµŒè·¯ä¸Šã«æ”»æ’ƒè€…ãŒã„ã‚‹ è¢«å®³è€…ã®ãƒ–ãƒ©ã‚¦ã‚¶ã¨ã‚µãƒ¼ãƒã®é€šä¿¡çµŒè·¯ä¸Šã«ã€ã‚¢ã‚¯ãƒ†ã‚£ãƒ–ãªæ”»æ’ƒè€…ãŒã„ã‚‹ã¨æƒ³å®šã—ã¾ã—ã‚‡ã†ã€‚ ãã®ã‚ˆã†ãªçŠ¶æ³ã§ã¯ã€æ”»æ’ƒè€…ã¯æ£è¦ã®ã‚µãƒ¼ãƒã«ãªã‚Šã‹ã‚ã£ã¦ãƒ–ãƒ©ã‚¦ã‚¶ã¨é€šä¿¡ã‚’ã—ãŸã‚Šã€ãƒ–ãƒ©ã‚¦ã‚¶ã¨æ£è¦ã®ã‚µãƒ¼ãƒã§äº¤ã‚ã•ã‚Œã‚‹é€šä¿¡ã«ä»‹å…¥ã™ã‚‹ã“ã¨ãŒ
monjudoh 2011/02/13
ã€Žé€šä¿¡çµŒè·¯ä¸Šã«æ”»æ’ƒè€…ãŒã„ã‚‹ã€é‡Žè‰¯WiFiã‚¹ãƒãƒƒãƒˆã‚’è€ƒãˆã‚‹ã¨ç¾å®Ÿçš„ã€‚ã§ã€å½ã®httpã®ã‚µã‚¤ãƒˆã§cookieã‚’è¨å®šã—ã¦ã€æœ¬ç‰©ã®httpsã®ã‚µã‚¤ãƒˆã«ã•ã£ãè¨å®šã—ãŸcookieã‚’æŒã£ãŸçŠ¶æ…‹ã§ã‚¢ã‚¯ã‚»ã‚¹ã•ã›ã‚‹ã‚ã‘ã‹ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie
ãƒªãƒ³ã‚¯
Index of /firecookie/archive
monjudoh 2010/09/29
1.1bã¯Firebug1.6å¯¾å¿œã€Firebug1.7a2ã§ã‚‚å‹•ä½œç¢ºèªã—ãŸ

Firebug

cookie

ä½¿ç”¨ä¸

Firebugæ‹¡å¼µ

Firebug1.6

Firebug1.7
ãƒªãƒ³ã‚¯
Firecookie | Software is hard
Firecookie is a an extension for Firebug that makes possible to view and manage cookies in your browser. Apart from all the other cookie managers and viewers available as Firefox extensions, this one is made as an extension for Firebug, so web developer has the functionality accessible within familiar Firebug's UI. Firecookie has been integrated with Firebug 1.10a11 so, you don't need to install i
monjudoh 2010/09/29
Firebug

cookie

ä½¿ç”¨ä¸

Firebugæ‹¡å¼µ
ãƒªãƒ³ã‚¯
[ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]httponlyã¯æ™®åŠã™ã‚‹ã®ã‹ (2006-12-26 - T.Teradaã®æ—¥è¨˜)
Firefox2ã§ã‚‚httponlyãŒä½¿ãˆã‚‹ã¨ã„ã†è©±ã‚’è€³ã«ã—ã¾ã—ãŸã€‚ httpOnly - Firefox Add-ons*1 httponlyãŒã„ã‚ˆã„ã‚ˆæ™®åŠã™ã‚‹ã‹ï¼Ÿ ã¨ã„ã†ã®ã§ãƒã‚¿ã«ã—ã¦ã¿ã¾ã™ã€‚ ãªãŠã€ã“ã®æ—¥è¨˜ã¯ã€WinXPï¼‹IE6SP2ç’°å¢ƒã‚’å‰æã¨ã—ã¦æ›¸ãã¾ã—ãŸã€‚ ã¯ã˜ã‚ã« httponlyã¯ã€XSSè„†å¼±æ€§ãŒã‚ã‚‹çŠ¶æ³ã«ãŠã„ã¦ã‚‚ã€cookieã‚’çªƒå–ã•ã‚Œãªã„ã‚ˆã†ã«ã™ã‚‹ã“ã¨ã‚’ç‹™ã£ãŸIEã®ç‹¬è‡ªæ©Ÿèƒ½ã§ã™ã€‚ MSDN - Mitigating Cross-site Scripting With HTTP-only Cookies ã“ã®æ©Ÿèƒ½ã‚’æœ‰åŠ¹ã«ã™ã‚‹ãŸã‚ã«ã¯ã€ç™ºè¡Œã™ã‚‹cookieã«httponlyå±žæ€§ã‚’ä»˜ã‘ã¾ã™ã€‚ Set-Cookie: key=value; domain=example.com; HttpOnly httponlyå±žæ€§ãŒä»˜ã‘ã‚‰ã‚ŒãŸcookieã¯ã€JavaScriptã®docume
monjudoh 2010/08/13
ã€ŽJavaScriptã®document.cookieã§æ‹¾ãˆãªãã€ãªã‚‹cookieã€‚2010/08ç¾åœ¨IEã ã‘ã˜ã‚ƒãªãã¦ã€Firefox,Safari,Google Chromeã®æœ€æ–°ç‰ˆã§å¯¾å¿œã—ã¦ã„ã‚‹ã‚‚ã‚ˆã†ã€‚ãƒ‡ãƒ•ã‚¡ã‚¯ãƒˆã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã«ãªã£ãŸ?ä»–ã¯éžå¯¾å¿œã¨ã„ã†ã‚ã‘ã˜ã‚ƒãªãã¦èª¿ã¹ã¦ãªã„ã ã‘ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã‚¯ãƒƒã‚ãƒ¼é£Ÿãˆãªã„ã®ã¯ãƒ‰ã‚³ãƒ¢ã ã‘
â– ã‚¯ãƒƒã‚ãƒ¼é£Ÿãˆãªã„ã®ã¯ãƒ‰ã‚³ãƒ¢ã ã‘ ã‚ãã«å®‰å…¨ãªä½œã‚Šæ–¹ã‚‚ç¢ºç«‹ã—ã¦ã„ãªã„ãã›ã«ãªãœã‹ã‚„ãŸã‚‰è”“å»¶ã£ã¦ã—ã¾ã£ãŸã€Œç°¡å˜ãƒã‚°ã‚¤ãƒ³ã€ã€‚ãã‚‚ãã‚‚UIè¨è¨ˆã‹ã‚‰ã—ã¦ãŠã‹ã—ã„ã€‚ãƒœã‚¿ãƒ³ã‚’æŠ¼ã›ã°å…¥ã‚Œã‚‹ãªã‚‰ã€ãƒœã‚¿ãƒ³ãŒã‚ã‚‹æ„å‘³ãŒãªã„*1ã€‚ãƒã‚°ã‚¢ã‚¦ãƒˆä¸å¯èƒ½ãªå¸¸æ™‚ãƒã‚°ã‚¤ãƒ³ã‚µã‚¤ãƒˆã ã€‚ï¼ˆãã‚Œãªã®ã«ã€Œãƒã‚°ã‚¢ã‚¦ãƒˆã€ãƒœã‚¿ãƒ³ãŒã‚ã£ãŸã‚Šã™ã‚‹ã€‚ï¼‰ ã€Œãã‚“ãªã“ã¨è¨€ã£ãŸã£ã¦ä¾¿åˆ©ã ã‹ã‚‰å¿…è¦ãªã‚“ã ã€ã¨ã‹ã€ã€Œã‚±ãƒ¼ã‚¿ã‚¤ã§ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã‚“ã‹å…¥ã‚Œã¦ã‚‰ã‚Œãªã„ã€ã ã¨ã‹ã€ã€ŒãŠå®¢ã•ã‚“ãŒä»˜ã‘ã¦ãã‚Œã£ã¦è¨€ã£ãŸã‚‰ä¿ºãŸã¡ITåœŸæ–¹ã«ã¯ä½•ã‚‚åŠ©è¨€ãªã‚“ã¦ã§ããªã„ã‚“ã ã€ã¨ã‹è¨€ã†äººãŒå‡ºã¦ãã‚‹ã‚ã‘ã ãŒã€ãã‚“ãªã®ã¯ã€ä¸€èˆ¬ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ã‚µã‚¤ãƒˆã ã£ã¦ã€æ˜”ã‹ã‚‰ã€Œâ–¡ æ¬¡å›žã‹ã‚‰è‡ªå‹•çš„ã«ãƒã‚°ã‚¤ãƒ³ ã€ã¨ã‹ã€Œâ–¡ æ¬¡å›žã‹ã‚‰å…¥åŠ›ã‚’çœç•¥ã€ã¨ã„ã£ãŸãƒã‚§ãƒƒã‚¯ãƒœãƒƒã‚¯ã‚¹ãŒæ™®é€šã«ç”¨æ„ã•ã‚Œã¦ã„ã‚‹ã€‚amazon.comãªã‚“ã‹å¤§æ˜”ã‹ã‚‰ãƒã‚°ã‚¤ãƒ³ã—ã£ã±ãªã—ã ã€‚ ãã—ã¦ãã‚Œã¯cookieã«ã‚ˆã£ã¦å®Ÿç¾ã•ã‚Œã¦ããŸã€‚å€‹äººè˜åˆ¥ç•ªå·ãª
monjudoh 2010/05/21
ã€Ždocomoã®cookieå¯¾å¿œçŽ‡ã¯28%ã€‚cookieãŒä½¿ãˆãªã„ã“ã¨ãŒã‚ã‚‹ã®ã¯docomoã ã‘ã€ã€Žå…¨ä½“ã§ã¯64%ãŒcookieã«å¯¾å¿œã—ã¦ã„ãŸã¨ã„ã†ã“ã¨ã«ãªã‚‹ã€‚ä»Šå¾Œã“ã®å‰²åˆã¯ã€iãƒ¢ãƒ¼ãƒ‰2.0ç«¯æœ«ã®æ™®åŠã¨ã¨ã‚‚ã«å¢—ãˆã¦ã„ãã ã‚ã†ã€‚ã€

Mobile

ã‚¬ãƒ©ã‚±ãƒ¼

cookie

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
mala on Twitter: "ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£cookieç„¡åŠ¹ã«ã—ã¦ã‚‹ã¨iframeã‚„imgã‚¿ã‚°ã§å¤–éƒ¨ã‚µã‚¤ãƒˆã‚’å–å¾—ã™ã‚‹éš›ã«ãƒã‚°ã‚¤ãƒ³ã—ãŸçŠ¶æ…‹ã«ãªã‚‰ãªã„ã€‚ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã€IFRAMEã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹CSRFã€è¶³è·¡æ©Ÿèƒ½ãŒã‚ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã«ã“ã£ãã‚Šãƒã‚°ã‚’æ®‹ã™ã€ãªã©ãŒé˜²ã’ã‚‹ã€‚"
ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£cookieç„¡åŠ¹ã«ã—ã¦ã‚‹ã¨iframeã‚„imgã‚¿ã‚°ã§å¤–éƒ¨ã‚µã‚¤ãƒˆã‚’å–å¾—ã™ã‚‹éš›ã«ãƒã‚°ã‚¤ãƒ³ã—ãŸçŠ¶æ…‹ã«ãªã‚‰ãªã„ã€‚ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã€IFRAMEã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹CSRFã€è¶³è·¡æ©Ÿèƒ½ãŒã‚ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã«ã“ã£ãã‚Šãƒã‚°ã‚’æ®‹ã™ã€ãªã©ãŒé˜²ã’ã‚‹ã€‚
monjudoh 2010/05/19
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie
ãƒªãƒ³ã‚¯
ã—ã‚ƒãŠã®é›‘è¨˜å¸³ - æºå¸¯ã‚µã‚¤ãƒˆé–‹ç™ºè€…ã®ãŸã‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å†å…¥é–€
é€šå‹¤é›»è»Šã§å‘¨å›²ã‚’è¦‹æ¸¡ã›ã°å¤§æŠµæ•°å°ã®ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚’è¦‹ã¤ã‘ã‚‰ã‚Œã‚‹ã‚ˆã†ãªã”æ™‚ä¸–ã§ã™ãŒã€ç¾å®Ÿã¯æ—¥æœ¬ã®ä¼çµ±çš„ãªæºå¸¯é›»è©±ãŒå¤šæ•°æ´¾ã§ã™ã€‚ä»Šã‚‚ãã‚“ãªã‚¬ãƒ©ã‚±ãƒ¼å‘ã‘Webã‚µã‚¤ãƒˆã®é–‹ç™ºæ¡ˆä»¶ã¯è¡°ãˆã‚‹ã“ã¨ã‚ã‚Šã¾ã›ã‚“ã€‚ ãã‚“ãªã‚¬ãƒ©ã‚±ãƒ¼ã‚µã‚¤ãƒˆã®é–‹ç™ºè€…ã®é–“ã§è©±é¡Œã«ãªã£ã¦ã„ã‚‹ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã€ã«ã¤ã„ã¦ã€ã‚¬ãƒ©ã‚±ãƒ¼ç•Œã®ç¾çŠ¶ã‚’ãµã¾ãˆãŸä¸Šã§ã¾ã¨ã‚ã¦ã¿ã¾ã™ã€‚ æºå¸¯é›»è©±ã®IPã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã§ã‚ã‚‹ã“ã¨ã‚’å‰æã¨ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¯ã™ã§ã«ç„¡é§„ ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯3Gã®ãƒ—ãƒã‚¯ã‚·æƒ…å ±ã¯æ¤œç´¢ã™ã‚Œã°ã™ãã«å‡ºã¦ãã¾ã™ ã‚¤ãƒ¼ãƒ»ãƒ¢ãƒã‚¤ãƒ«ã®EM netã«è‡³ã£ã¦ã¯å…¬é–‹æƒ…å ±ã§ã™ ã‚µã‚¤ãƒˆã®ã‚½ãƒ¼ã‚¹ã‚‚Flashã®swfã‚‚ç”»åƒã‚‚PCã‹ã‚‰ä¸¸è¦‹ãˆã ã¨æ€ã†ã¹ãã§ã™ å±é™ºãªã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã§ä½¿ã†å¥‘ç´„è€…IDã¯ã‚ãªãŸã®ã‚µã‚¤ãƒˆã«ã‚‚ä»–ã®ã‚µã‚¤ãƒˆã«ã‚‚åŒã˜ã‚‚ã®ãŒé€å‡ºã•ã‚Œã¦ã¾ã™ æ‚ªæ„ã‚’ã‚‚ã£ãŸäººãŒä»–äººã®å¥‘ç´„è€…IDã‚’ãƒ˜ãƒƒãƒ€ã«ä¹—ã›ã¦ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã®ã‚¢ã‚¯ã‚·ãƒ§ãƒ³ã‚’å‘¼ã³å‡ºã—ãŸã‚‰ã©ã†
monjudoh 2010/05/07
Mobile

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie

ã‚¬ãƒ©ã‚±ãƒ¼
ãƒªãƒ³ã‚¯
HttpOnly - OWASP
This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests. To view the new OWASP Foundation website, please visit https://owasp.org Overview The goal of this section is to introduce, discuss, and provide language specific mitigation techniques for HttpOnly. Who developed HttpOnly? When? According to a daily blog article by Jordan Wiens, â€œNo cookie for you!â€, HttpO
monjudoh 2010/04/15
JavaScriptã®document.cookieã‹ã‚‰ä¸å¯è¦–ã«ãªã‚‹httponlyå±žæ€§ã€‚å„ãƒ–ãƒ©ã‚¦ã‚¶ã®httponlyå±žæ€§ã®ã‚µãƒãƒ¼ãƒˆçŠ¶æ³ç‰ã‚‚è¼‰ã£ã¦ã‚‹ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie
ãƒªãƒ³ã‚¯
ãã‚ãã‚ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã«ã¤ã„ã¦ä¸€è¨€ã„ã£ã¦ãŠãã‹ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
Firefox3ã§ã€Œã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ã®Cookieã‚‚ä¿å˜ã™ã‚‹ã€ã‚’ã‚ªãƒ•ã«ã™ã‚‹ã€‚ é˜²ã’ã‚‹ã€‚ ã„ãšã‚Œã®ãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚‚ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£è£½ã®cookieã‚’åˆ¶é™ã™ã‚‹ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒã‚ã‚‹ãŒã€Firefox3ä»¥å¤–ã ã¨ã€ãƒ•ãƒ¬ãƒ¼ãƒ å†…è¡¨ç¤ºã•ã‚ŒãŸå ´åˆã«ã€Œæ–°è¦ã«cookieã‚’ä¿å˜ã—ãªã„ã€ã ã‘ã§ä¿å˜æ¸ˆã¿ã®cookieã¯é€ä¿¡ã—ã¦ã—ã¾ã†ã€‚ è»½ãèª¿ã¹ã¦ã¿ãŸã¨ã“ã‚ã€æ¬¡ã®ã‚ˆã†ã«ãªã£ãŸã€‚(é–“é•ã£ã¦ãŸã‚‰æ•™ãˆã¦ãã ã•ã„) ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ã®cookieã®æ–°è¦ä¿å˜ ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ã®ä¿å˜æ¸ˆã¿cookieã®é€ä¿¡ è¡¨ç¤ºä¸ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã®cookieã®ä¿å˜/é€ä¿¡ IE6,7,8(ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆ) x o o IE6,7,8(ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é«˜) x x x Opera9.6(ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆ) o o o Opera9.6(åˆ¶é™) x â–³ o Safari(åˆ¶é™/ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆ) x o o Safari(å…¨ã¦å—ã‘å…¥ã‚Œã‚‹) o o o Firefox2(ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆ) o o
monjudoh 2009/03/07
ã€Žãƒ–ãƒ©ã‚¦ã‚¶ã¯ã‚¢ãƒ‰ãƒ¬ã‚¹ãƒãƒ¼ã«è¡¨ç¤ºã•ã‚Œã¦ã„ã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³ä»¥å¤–ã¸ã®cookieã®é€ä¿¡ã‚’(ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæ˜Žç¤ºçš„ã«è¨±å¯ã—ãªã„é™ã‚Š)ã‚„ã‚ã‚‹ã¹ãã€ã€Žå¤–éƒ¨ã‚µã‚¤ãƒˆã¸ã®cookieã®é€ä¿¡ã‚’å‰æã¨ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹*1ãŒä½¿ãˆãªããªã‚‹ãã‚‰ã„ã€

web

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°

ãƒ–ãƒ©ã‚¦ã‚¶

cookie
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼ãŒyimg.jpã‚’ä½¿ã†æœ¬å½“ã®ãƒ¯ã‚± - æœ€é€Ÿé…ä¿¡ç ”ç©¶ä¼š(@yamaz)
ãƒ¤ãƒ•ãƒ¼ã®ç”»åƒã¯ãªãœyimg.jpãƒ‰ãƒ¡ã‚¤ãƒ³ãªã®ã‹ï¼Ÿ ã‚µã‚¤ãƒˆé«˜é€ŸåŒ–ã®æ‰‹æ³•ã¨ãƒ¤ãƒ•ãƒ¼ã®å¤±æ•—ä¾‹ ã§ãƒ¤ãƒ•ãƒ¼ãŒãªãœãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’å¤‰ãˆã¦ç”»åƒã‚µãƒ¼ãƒã‚’é‹ç”¨ã—ã¦ã„ã‚‹ã‹ãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹.ã€Œé™çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã—ã¦ã‚¯ãƒƒã‚ãƒ¼ãƒ•ãƒªãƒ¼ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’ä½¿ã†ã“ã¨ã«ã‚ˆã£ã¦é€Ÿåº¦å‘ä¸Šã‚’ç‹™ã†ã€ã¨ã„ã†ã®ãŒç†ç”±ã¨ã‚ã£ã¦,ã“ã‚Œã¯ã“ã‚Œã§ã‚‚ã¡ã‚ã‚“æ£ã—ã„ã®ã ã‘ã‚Œã©,ã“ã‚Œã¯ã©ã¡ã‚‰ã‹ã¨ã„ã†ã¨å‰¯æ¬¡çš„ãªç†ç”±ã§æœ¬å½“ã®ç†ç”±ã¯é•ã†. ã‚¯ãƒƒã‚ãƒ¼ãƒ•ãƒªãƒ¼ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’ä½¿ã†ã“ã¨ã§æ‚ªæ„ã‚ã‚‹Flashã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãªã©ã‹ã‚‰è‡ªç¤¾ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚¯ãƒƒã‚ãƒ¼ã‚’å®ˆã‚‹ãŸã‚ã¨ã„ã†ã®ãŒæœ¬å½“ã®ç†ç”±ã§,ã“ã‚Œã¯ã‚ã¡ã“ã¡ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã .Flashã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¯å¤–éƒ¨ã®æ¥è€…ã•ã‚“ã«ä½œã£ã¦ã‚‚ã‚‰ã£ãŸã‚Š,åºƒå‘Šã®å…¥ç¨¿ç´ æã¨ã—ã¦å…¥ã£ã¦ãã‚‹ã®ã§,ä¿¡é ¼ã§ããªã„ãƒ‡ãƒ¼ã‚¿ã¨ã—ã¦å–ã‚Šæ‰±ã†å¿…è¦ãŒã‚ã‚Š,ä¸‡ä¸€ã¾ãšã„ãƒ‡ãƒ¼ã‚¿ãŒã‚¢ãƒƒãƒ—ã•ã‚Œã‚‹ã“ã¨ãŒã‚ã£ã¦ã‚‚å¤§ä¸ˆå¤«ã«ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚‹. æœ€è¿‘ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ã®ä»»æ„ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’å—ã‘ã¤ã‘ã¦åŒä¸€ãƒ‰ãƒ¡ã‚¤ãƒ³ã§é…ä¿¡ã—
monjudoh 2009/01/14
ã€Žã‚¯ãƒƒã‚ãƒ¼ãƒ•ãƒªãƒ¼ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’ä½¿ã†ã“ã¨ã§æ‚ªæ„ã‚ã‚‹Flashã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãªã©ã‹ã‚‰è‡ªç¤¾ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚¯ãƒƒã‚ãƒ¼ã‚’å®ˆã‚‹ãŸã‚ã€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

cookie

èªã¿ç‰©

Flash
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸