GitHub - cure53/jPurify: jPurifyYou signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
jQuery Migrate Plugin ãªã‚“ã¦ãªã‹ã£ãŸä»¶ - ã»ã‚€ã‚‰ã¡ã‚ƒã»ã‚€ã»ã‚€
ã„ãã¤ã‹ã®ã‚µã‚¤ãƒˆã§å®Ÿéš›ã«éé‡ã—ã¦ã¾ã™ãŒï¼ŒjQueyr 1.6.3 ã§è§£æ±º( jQuery Bug #9521 )ã—ãŸã¯ãšã® $("a[href=" + hash + "]") タイプ㮠XSS ㌠（ 2013/11/18 ç¾åœ¨ 1.2.1 ã‚’å«ã‚€å…¨ã¦ã®ï¼‰ jQuery Migrate Plugin ã§å¾©æ´»ã—ã¾ã™ï¼Ž jQuery 1.6.3 ã®ã¿ã®å ´åˆ jQuery 1.10.2 㨠Migrate Plugin 1.2.1 ã®å ´åˆ 色々追ã£ã¦ã¿ã¦ï¼Œã‚„ã£ã±ã‚Šã¾ã å‹•ãã‘ã©ã¨è¨€ã£ãŸã‚‰ï¼Œ8月ã«ã™ã§ã«ï¼Œå®Ÿéš›ãƒã‚°ã ã‘ã©ã“ã‚Œã§æƒ³å®šé€šã‚Šãªã‚“ã ã¨è¨€ã‚ã‚Œã¦ãŸï¼ˆHe told me that this was not, in fact, a bug, but was working as intended.） ã®ã§ãã†ã„ã†ã“ã¨ã ã£ãŸã¿ãŸã„ã§ã™ï¼Ž jQuery 本体å´ã®å¤‰é· jQuery ã® $() ã«ã¯è¤‡æ•°ã®
jQuery Migrate 1.2.0 Released | Official jQuery Blog
The latest version 1.2 of the jQuery Migrate plugin is here! It can be used with either jQuery 1.9 or jQuery 2.0 to provide diagnostics and remedial help for plugins that haven’t been updated since jQuery 1.9 was released earlier this year. Believe me, this plugin can really make your life easier; if you’ve been afraid of upgrading jQuery, this plugin can cure that irrational software phobia. The
"jQuery Migrate" is a Sink, too?!
or How "jQuery Migrate" un-fixes a nasty DOMXSS without telling us.. Foreword Today Mario Heiderich of Cure53 tweeted the following message: "@0x6D6172696F Does anyone know why jquery.com has a special jQuery 1.9.1 version that is still vulnerable to $(location.hash)?" What happened after that message might be considered to be the discovery of a rather interesting bug - which Mario and me will try
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠- ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠以下ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’目処ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—を終了予定ã§ã‚る旨をãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019年末を目処ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æ供を終了ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—日記 ã“ã®ãŸã³ã€æ£å¼ã«çµ‚了日を決定ã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”確èªãã ã•ã„。 終了日: 2020å¹´1月31æ—¥(金) エクスãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1月31æ—¥(金) 終了日以é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“。日記ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„。 ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„㦠- ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—日記 ã”利用ã®ã¿ãªã•ã¾ã«ã¯ã”迷惑をãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 追記 ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—日記ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2月28
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
jQuery.parseHTML: Mitigate XSS vulnerability by fhemberger · Pull Request #1505 · jquery/jquery
#11290 (selector interpreted as HTML) - jQuery - Bug Tracker
#9521 (XSS with $(location.hash) and $(#<tag>) is needed?) - jQuery - Bug Tracker
{{#tags}}- {{label}}
{{/tags}}