[B! DOM] syuu256ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

syuu256 id:syuu256

DOMã«é–¢ã™ã‚‹syuu256ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

mXSS - Mutation-based Cross-Site-Scripting ã®ã¯ãªã— - è‘‰ã£ã±æ—¥è¨˜
ã“ã“æ•°å¹´ã€XSSæ¥ç•Œã®æœ€å…ˆç«¯ã§ç››ã‚Šä¸ŠãŒã£ã¦ã„ã‚‹è©±é¡Œã¨ã—ã¦ mXSS ã¨ã„ã†ã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚mXSS - Mutation-based XSS ã¨ã¯ã€ä¾‹ãˆã° innerHTML ãªã©ã‚’çµŒç”±ã—ã¦ã™ã§ã«æ§‹ç¯‰ã•ã‚Œã¦ã„ã‚‹DOMãƒ„ãƒªãƒ¼ã‚’å‚ç…§ã—ãŸã¨ãã«ã€æœ¬æ¥ã®DOMæ§‹é€ ã¨ã¯ç•°ãªã‚‹çµæžœã‚’å¾—ã¦ã—ã¾ã„ã€ãã®ãŸã‚ã«HTMLæ§‹é€ ã®ç ´å£Šã‚’å¼•ãèµ·ã“ã™ã¨ã„ã†é¡žã®DOM based XSSã®äºœç¨®ã¨ã‚‚è¨€ãˆã¾ã™ã€‚ mXSSã«é–¢ã—ã¦ã¯ä»¥ä¸‹ã®è³‡æ–™ãªã©ãŒå‚è€ƒã«ãªã‚Šã¾ã™ã€‚ The innerHTML Apocalypse mXSS Attacks: Attacking well-secured Web-Applications by using innerHTML Mutations ã©ã¡ã‚‰ã®è³‡æ–™ã«ã‚‚æŽ²è¼‰ã•ã‚Œã¦ã„ã¾ã™ãŒã€mXSSã®ãã£ã‹ã‘ã¨ãªã£ãŸã®ã¯ ã€Œæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆ1ï¼‰ï¼šï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®
syuu256 2014/05/08
DOM

xss
ãƒªãƒ³ã‚¯
ä¸–ã®ä¸ã®HTML5ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒç³žã ã‹ã‚‰ã€ä¿ºãŒã€ŒåˆæœŸåŒ–ã€ã®ä½œã‚Šæ–¹ã‚’æ•™ãˆã¦ã‚„ã‚“ã‚ˆ - mizchi's blog
2chã¾ã¨ã‚ã¿ãŸã„ãªã‚¿ã‚¤ãƒˆãƒ«ã«ã—ã¦ã¿ãŸã€‚(ã—ã¦ã¿ãŸã‹ã£ãŸ) HTML5ã®ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã¨åˆæœŸåŒ–ã¨ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®è€ƒãˆæ–¹ãŒã€ã€Œã‚¦ã‚§ãƒ–ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã€ã¯æœ¬å½“ã«å‡ºæ¥ã¦ãªã„ã€‚ ã¨ãã«ã‚½ã‚·ãƒ£ã‚²ã‚’ã‚¦ã‚§ãƒ–ãƒ“ãƒ¥ãƒ¼ã«è²¼ã£ã¦ã‚¹ãƒžãƒ›å¯¾å¿œã—ã¾ã—ãŸç³»ã€‚æœ¬å½“ã«ãƒ€ãƒ¡ã€‚ ã˜ã‚ƒã‚ã©ã†ã™ã‚‹ã‹ï¼ŸåŸºæœ¬çš„ã«ã€ŒåˆæœŸåŒ–ã€ã®è€ƒãˆæ–¹ã‚’ç›´ã›ã°ã©ã†ã«ã‹ãªã‚‹ã€‚ (ã“ã®è¨˜äº‹ã¯Backboneã‚’ä½¿ã†ã¨ãã«è€ƒãˆã¦ã‚‹ã“ã¨ã ã‘ã©ã€ä»–ã§ã‚‚ä¸€ç·’ã ã¨æ€ã†) å‰æ ã‚·ãƒ³ã‚°ãƒ«ãƒšãƒ¼ã‚¸ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ ã‚»ãƒžãƒ³ãƒ†ã‚£ã‚¯ã‚¹ã‚„SEOã¯è€ƒæ…®ã—ãªã„ åŸºæœ¬å“²å¦ å…±é€šãƒ¢ãƒ‡ãƒ«ã®åˆæœŸåŒ–ã‚’å¾¹åº•çš„ã«è¡Œã† ã‚µãƒ¼ãƒãƒ¼ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’æŠ•ã’ã‚‹ã®ã¯æœ€å°é™ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã‚µãƒ¼ãƒãƒ¼ãƒ¢ãƒ‡ãƒ«ã®ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’ä½œã‚Šã€æ›´æ–°ãŒæœŸå¾…ã•ã‚Œã‚‹ã¾ã§å†å–å¾—ã—ãªã„ ç†ç”± ã„ãã‚‰DOMã®æœ€é©åŒ–ã—ãŸã¨ã“ã‚ã§UXã«å½±éŸ¿ãŒå¤§ãã„ã®ã¯ã‚µãƒ¼ãƒãƒ¼ãƒªã‚¯ã‚¨ã‚¹ãƒˆ(200~2000ms)ã§ã€ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°æ®µéšŽã§è¾›ã•ãŒã‚ã¤ã¾ã‚‹ã®ã¯éžåŒæœŸå‡¦ç†ã®éƒ¨åˆ†ã€‚ ãƒ—ãƒã‚°ãƒ©ãƒžã¨ã—
syuu256 2013/09/25
REST

HTML5

api

DOM
ãƒªãƒ³ã‚¯
HTML(.js) - Befriend the DOM!
Intuitive HTML lets you navigate, manipulate and use the DOM with intuitive, readable, consistent code. Powerful HTML's functions enable you to flexibly use all native DOM features with brevity, clarity, and more power than ever. HTML document.documentElement The global HTML is the actual document root element and all element tags queried via the dot operator are descendants. HTML.tag... Element|A
syuu256 2013/08/15
JavaScript

html

DOM
ãƒªãƒ³ã‚¯
JavaScriptã®DOM CoreåŸºç¤Ž - ä¸‰ç‰å…µ
Coreã®ç°¡æ˜“ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã€‚Coreã¯è¦ç´ ã‚’å‚ç…§ã—ãŸã‚Šã€ç›¸å¯¾ä½ç½®ã‹ã‚‰å‘¨ã‚Šã®ãƒŽãƒ¼ãƒ‰ã‚’å‚ç…§ã—ãŸã‚Šã€è¦ç´ ã‚’ç”Ÿæˆã™ã‚‹ã¨ã„ã£ãŸéƒ¨åˆ†ã€‚ä¸»ã«åˆ©ç”¨ã™ã‚‹ã§ã‚ã‚ã†ãƒ—ãƒãƒ‘ãƒ†ã‚£ã‚„ãƒ¡ã‚½ãƒƒãƒ‰ã¯ã‚«ãƒãƒ¼ã—ã¦ã„ã‚‹ã¤ã‚‚ã‚Šã§ã™ã‘ã©ã€ã“ã‚Œã‚‚å…¥ã‚Œã¨ã‘ã£ã¦ã®ã‚ã£ãŸã‚‰æ•™ãˆã¦ãã ã•ã„ã€‚ ã“ã®ã‚ãŸã‚Šã¯åœ°å‘³ã§ä½¿ã„ã¥ã‚‰ããã®ä¸Šç†è§£ã—ã«ãã„ã¨ã„ã†æ®‹å¿µãªéƒ¨åˆ†ã€‚ãµã¨å¿˜ã‚ŒãŸã¨ãã«ä½¿ã†å€‹äººçš„ãªã‚‚ã®ã§ã™ãŒã€æ…¢æ€§jQueryæ‹’çµ¶ç—‡å€™ç¾¤ãªäººã‚ˆã‹ã£ãŸã‚‰ã©ã†ãžã€‚ãã‚Œã«ã—ã¦ã‚‚æš‘ã„ã€‚ã‚¬ãƒªã‚¬ãƒªå›ãŠã„ã—ã„ãã€‚ DOMã¨ã¯ã€‚ Document Object Model (DOM) ã¯ã€HTML ãŠã‚ˆã³ XML ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®ãŸã‚ã® API ã§ã™ã€‚ã“ã‚Œã¯ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®æ§‹é€ çš„ãªè¡¨ç¾ã‚’æä¾›ã—ã€å†…å®¹ã‚„è¡¨ç¤ºå½¢æ…‹ã®å¤‰æ›´ã‚’å¯èƒ½ã«ã—ã¾ã™ã€‚ç«¯çš„ã«è¨€ãˆã°ã€Web ãƒšãƒ¼ã‚¸ã‚’ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚„ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã¨ã¤ãªãã‚ˆã†ãªæ©Ÿæ§‹ã§ã™ã€‚ https://developer.mozilla.org/ja/
syuu256 2010/08/25
DOM

JavaScript
ãƒªãƒ³ã‚¯
1