JavaBeansã«å¯¾ã™ã‚‹ãƒªãƒ•ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³ã¨ClassLoader脆弱性 - ã²ãŒã‚„ã™ã‚’技術ブãƒã‚°ä»Šå›žã®å•é¡Œã¯ã€(SA)Strutsã ã‘ã®å•é¡Œã§ã¯ãªãã€ã„ã‚ã‚“ãªãƒ•ãƒ¬ãƒ¼ãƒ ワークã§ã‚‚ã¡ã‚ƒã‚“ã¨èª¿ã¹ãŸæ–¹ãŒè‰¯ã„話ã—ãªã®ã§ã€ã‚‚ã†å°‘ã—詳ã—ã書ã„ã¦ãŠãã¾ã™ã€‚ Javaã§ã€JavaBeansã®ãƒ—ãƒãƒ‘ティã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å ´åˆã€ PropertyDescriptor[] descriptors = Introspector.getBeanInfo(クラス).getPropertyDescriptors();ã§å–å¾—ã§ãã‚‹PropertyDescriptorを使ã†ã“ã¨ãŒã»ã¨ã‚“ã©ã§ã™ã€‚ã“ã®ä¸ã«ã€classプãƒãƒ‘ティã¯å«ã¾ã‚Œã¾ã™ã€‚ ã“ã“ã¾ã§ã¯è‰¯ãã¦ã€ãƒã‚¹ãƒˆã—ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‘ラメータ(class.classLoader.xxxãªã©)ã‚’JavaBeansã«ã‚»ãƒƒãƒˆã™ã‚‹æ™‚ã«ã€BeanInfo.getPropertyDescriptors()ã§å–å¾—ã—ãŸã‚‚ã®ã‚’ãã®ã¾ã¾ä½¿ã†ã®ãŒå•é¡Œãªã®ã§ã™ã€‚ Seasar2(BeanDesc)ã§ã¯ã€
Strutsã®ClassLoader脆弱性ã¯SAStrutsã«å½±éŸ¿ã—ã¾ã›ã‚“ - ã²ãŒã‚„ã™ã‚’技術ブãƒã‚°
Seasar2ã‚’æ–°è¦æ¡ˆä»¶ã«æŽ¡ç”¨ã™ã‚‹ã®ã¯ãã‚ãã‚ã‚„ã‚ãŸã»ã†ãŒã„ã„ - ãã—ã ã®Hatena
DI×AOPã®ã“ã‚Œã¾ã§ã€Seasarã®ä»Šã€ãã—ã¦Slim3ã¸â€¦ (1/2) - ï¼ IT
{{#tags}}- {{label}}
{{/tags}}