UTF-7 ã使ã£ã¦ã¹ã¯ãªãããè¨è¿° +ADw-SCRIPT+AD4-alert(\'XSS\');+ADw-+AC8-SCRIPT+AD4- IE ã¯ãæåã¨ã³ã³ã¼ãã£ã³ã°ãä¸æ㧠UTF-7 ã£ã½ãæååãããã°ãèªåå¤å¥ã§ UTF-7 ã¨ãªãã
UTF-7 ã使ã£ã¦ã¹ã¯ãªãããè¨è¿° +ADw-SCRIPT+AD4-alert(\'XSS\');+ADw-+AC8-SCRIPT+AD4- IE ã¯ãæåã¨ã³ã³ã¼ãã£ã³ã°ãä¸æ㧠UTF-7 ã£ã½ãæååãããã°ãèªåå¤å¥ã§ UTF-7 ã¨ãªãã
ã¾ãå ¥åã¯NTç³»(NT4.0/2000/XP)ã ããªãä½ã®è¦å´ãããã¾ãããæ®éã«ããã¹ãããã¯ã¹ãä½ãã ãã§å¯¾å¿ã§ãã¾ãã æååã®åå¾ãGetWindowText()ãSendMessage(..., WM_GETTEXT, ...)ãªã©ãæ®éã®ããã¹ãåå¾é¢æ°ã§ 対å¿ã§ãã¾ãã ãããã表示ã¯ã¾ãå¥ã§Unicodeãã©ã³ããç¡ãNT4.0/2000ã¯ã¡ãã£ã¨ä½æ¥ããªãã¨èªå½èªä»¥å¤ã¯åãã¦ãã¾ãã¾ãã ã§ã¯ããã以å¤ï¼â¦ã¨è¨ã£ã¦ãXPãããªãã§ããï¼ã¯ã©ããã¨è¨ãã¨ããªã«ãã¤ã³ã¹ãã¼ã«ããã«Unicodeã®è¡¨ç¤ºã¾ã§ã§ãã¾ãã ãããææ°ï¼¯ï¼³ï¼ã½(ï¿£â½ï¿£)ã ãªã®ã§ããWindowsXPã®ã¿å¯¾å¿ï¼ãã§ãããã°ããã§ãçµããªãã§ããããããªã¢ããªä½ã£ãã¨ãã㧠誰ã使ã£ã¦ãããªãã§ãããâ¦ï¼ï¼Â´Ð´âï¼ ãã¦ãOSèªä½Unicodeã«å¯¾å¿ãã¦ããªã9Xç³»(95/98/98SE/ME)
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}