IEã§jsonã«ã‚„られ㟠- åã£ãŸè¨€èªžä¿¡è€…ã®åž‚ã‚Œæµã—ã¾ã‚IEã§ã™ã‹ã‚‰ã€‚jsonã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã§ã‚¿ã‚°ã‚’エスケープã—ã¦ãªã„ã¨IEã§XSSã§ãã¦ã—ã¾ã†ã¨ã„ã†è©±ã€‚ {test: "<html><script>alert(document.cookie)</script></html>"}ã“ã‚“ãªæ„Ÿã˜ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’è¿”ã™ãƒšãƒ¼ã‚¸ã‚’IEã§èªã¾ã›ã‚‹ã€‚ test.py #!/usr/bin/env python from wsgiref.simple_server import make_server def app(environ, start_response): start_response("200 OK", [('Content-Type','text/plain')]) return ["{test: \"<html><script>alert(document.cookie)</script></html>\"}"] if __name__ == '
{{#tags}}- {{label}}
{{/tags}}