DOM APIã¨innerHTMLã¯ç‰ä¾¡ã§ã¯ãªã„最近ã€å¾³ä¸¸æœ¬ã‚’ã˜ã‚ã˜ã‚èªã‚“ã§ã„ã‚‹ã®ã§ã™ãŒã€DOM based XSSã®è©±ãŒæ›¸ã„ã¦ã‚ã£ãŸã®ã§ã€å°‘ã—言åŠã—ã¦ãŠã“ã†ã¨æ€ã„ã¾ã™ã€‚ 徳丸本ã‹ã‚‰å¼•ç”¨ DOM based XSSã¨å‘¼ã°ã‚Œã‚‹XSSãŒã‚ã‚Šã¾ã™ã€‚ã“ã‚Œã¯ã€JavaScriptã«ã‚ˆã‚Šã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã§è¡¨ç¤ºå‡¦ç†ã™ã‚‹ç®‡æ‰€ãŒã‚ã‚Šã€ãã“ã«è„†å¼±æ€§ãŒã‚ã‚‹å ´åˆã®XSSã§ã™ã€‚ サンプル書ã„ã¦ã¿ã¾ã—ãŸã€‚ <script> document.write(unescape(location.href)); </script> ã“ã„ã¤ã‚’é©å½“ãªãƒ•ã‚¡ã‚¤ãƒ«åã§ä¿å˜ã—ã¦ã€domxss.html#<script>alert("hello")<script>ãªã©ã®URLã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨alertãŒè¡¨ç¤ºã•ã‚Œã‚‹ã¯ãšã§ã™ã€‚ä»»æ„ã®ã‚¹ã‚¯ãƒªãƒ—トãŒå®Ÿè¡Œå¯èƒ½ãªçŠ¶æ…‹ã£ã¦ã“ã¨ã§ã™ã。任æ„ã®ã‚¹ã‚¯ãƒªãƒ—トãŒå®Ÿè¡Œå¯èƒ½ã£ã¦ã“ã¨ã¯ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¯ãƒƒã‚ー盗ã¿æ”¾é¡Œã§ã€ä»–人ã«æˆã‚Šæ¸ˆã¾ã—ã¦è²·ã„物ã§ãã¡ã‚ƒã£ãŸã‚Šã™ã‚‹ãƒ¬ãƒ™ãƒ«ã§ã™
{{#tags}}- {{label}}
{{/tags}}