[B! javascript][xss] Kanasansoftã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Kanasansoft id:Kanasansoft

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (8)

ã‚¿ã‚°ã®çµžã‚Šè¾¼ã¿ã‚’è§£é™¤

javascriptã¨xssã«é–¢ã™ã‚‹Kanasansoftã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

PHPã®ã‚¤ã‚¿ã„å…¥é–€æ›¸ã‚’èªã‚“ã§Ajaxã®XSSã«ã¤ã„ã¦æ¤œè¨Žã—ãŸ(3)ï½žJSONç‰ã®æƒ³å®šå¤–èªã¿å‡ºã—ã«ã‚ˆã‚‹æ”»æ’ƒï½ž - ockeghem(å¾³ä¸¸æµ©)ã®æ—¥è¨˜
æ˜¨æ—¥ã®æ—¥è¨˜ã®ç¶šãã§ã€Ajaxã«å›ºæœ‰ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«ã¤ã„ã¦æ¤œè¨Žã—ã¾ã™ã€‚ä»Šå›žã¯JSONç‰ã®æƒ³å®šå¤–èªã¿å‡ºã—ã«ã‚ˆã‚‹æ”»æ’ƒã§ã™ã€‚ã“ã‚Œã‚‰æ”»æ’ƒæ‰‹æ³•ã¯æœ¬æ¥ãƒ–ãƒ©ã‚¦ã‚¶å´ã§å¯¾å¿œã™ã¹ãã‚‚ã®ã§ã€ã‚„ã‚€ã‚’å¾—ãšWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å´ã§å¯¾å¿œã™ã‚‹ä¸Šã§ã€ã¾ã å®šç•ªã¨ãªã‚‹å¯¾ç–ãŒãªã„ã‚ˆã†ã«æ€ãˆã¾ã™ã€‚ã“ã®ãŸã‚ã€è¤‡æ•°ã®å€™è£œã‚’ç¤ºã™ã‚‹ã“ã¨ã§è°è«–ã®ãã£ã‹ã‘ã«ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšã€ä½œã‚ŠãªãŒã‚‰åŸºç¤Žã‹ã‚‰å¦ã¶PHPã«ã‚ˆã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å…¥é–€XAMPP/jQuery/HTML5ã§ä½œã‚‹ã‚¤ãƒžãƒ‰ã‚ã®Weã‹ã‚‰ã€Ajaxã‚’åˆ©ç”¨ã—ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¦‚å¿µå›³ã‚’å¼•ç”¨ã—ã¾ã™ï¼ˆåŒæ›¸P20ã®å›³1-23ï¼‰ã€‚ å‰å›žã€å‰ã€…å›žã¯ã€(5)ã®HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®å‰å¾Œã§ã€JSONç‰ã®ãƒ‡ãƒ¼ã‚¿ä½œæˆï¼ˆã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ï¼‰ã«èµ·å› ã™ã‚‹evalã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„ã€(5)ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’å—ã‘å–ã£ãŸå¾Œã®HTMLãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã®éš›ã®XSSã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã—ãŸã€‚ ã—ã‹ã—ã€å•é¡Œã¯ã“ã‚Œã ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚æ£å¸¸
Kanasansoft 2011/09/07
ã“ã®ãƒ¬ãƒ™ãƒ«ã®è„†å¼±æ€§ã ã¨ã€è©±ã®ç™ºç«¯ã«ãªã£ãŸæ›¸ç±ã ã‘ã˜ã‚ƒãªãã€å¯¾ç–ãŒã¨ã‚Œã¦ã„ãªã„ã‚µã‚¤ãƒˆãŒå¤šã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨ã„ã†å°è±¡ã€‚

json

ajax

javascript

security

xss
ãƒªãƒ³ã‚¯
JSONã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’ã©ã“ã¾ã§ã‚„ã‚‹ã‹å•é¡Œ - è‘‰ã£ã±æ—¥è¨˜
Ajaxãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦ã€ã‚µãƒ¼ãƒã‹ã‚‰JSONã‚’è¿”ã™å ´åˆã«ã€JSONè‡ªä½“ã¯validã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšã€(IEã®éƒ½åˆã§)ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒä¸è¶³ã—ã¦ã„ã¦è„†å¼±æ€§ã«ã¤ãªãŒã£ã¦ã‚‹å ´åˆãŒã‚ã‚‹ã®ã§ã€æ›¸ã„ã¦ãŠãã¾ã™ã€‚ ç™ºç”Ÿã™ã‚‹ã‹ã‚‚ã—ã‚Œãªã„è„†å¼±æ€§ JSONã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒä¸è¶³ã—ã¦ã„ã‚‹å ´åˆã«ç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹è„†å¼±æ€§ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ JSONå†…ã«å«ã¾ã‚Œã‚‹æ©Ÿå¯†æƒ…å ±ã®æ¼ãˆã„ XSS ãã‚Œãžã‚Œã®è©³ç´°ã«ã¤ã„ã¦ã¯å¾Œè¿°ã—ã¾ã™ã€‚ é–‹ç™ºå´ã§ã‚„ã‚‹ã¹ãã“ã¨ æ–‡å—åˆ—ä¸ã®Unicodeæ–‡å—ã¯ "\uXXXX" ãªå½¢å¼ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã¨ã¨ã‚‚ã«ã€ASCIIãªç¯„å›²ã§ã‚ã£ã¦ã‚‚ã€Œ/ã€ã€Œ<ã€ã€Œ>ã€ã€Œ+ã€ã‚‚åŒæ§˜ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€å‰è¿°ã®è„†å¼±æ€§ã‚’é˜²ãã“ã¨ãŒã§ãã¾ã™ã€‚ Perlã§ã‚ã‚Œã°ã€ä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã«ãªã‚Šã¾ã™ã€‚JSON->ascii(1) ã«ç¶šã‘ã¦ã€JSONæ–‡å—åˆ—ã‚’æ£è¦è¡¨ç¾ã§ç½®æ›ã—ã¦ã„ã‚‹ã‚ãŸã‚ŠãŒã‚ãƒ¢ã«ãªã‚Šã¾ã™ã€‚ use utf8; u
Kanasansoft 2011/07/07
javascript

json

security

browser

xss

ajax
ãƒªãƒ³ã‚¯
ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSS
ï¼»æŸ”è»Ÿã™ãŽã‚‹ï¼½IEã®CSSè§£é‡ˆã§èµ·ã“ã‚‹XSSï¼šæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆ3ï¼‰ï¼ˆ1/3 ãƒšãƒ¼ã‚¸ï¼‰ XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ ï¼ˆç·¨é›†éƒ¨ï¼‰ ãªãœã‹å¥¥æ·±ã„IEã®XSSã®è©± çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ ç¬¬1å›žã€Œï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®å¼•ç”¨ç¬¦ã®è§£é‡ˆã€ã¨ç¬¬2å›žã€Œï¼»ç„¡è¦–ã§ããªã„ï¼½IEã®Content-Typeç„¡è¦–ã€ã§Internet Explorer(IE)ã®ç‹¬è‡ªã®æ©Ÿèƒ½ãŒã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼šcross-site scriptingï¼‰ã‚’å¼•ãèµ·ã“ã™å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ãã¾ã—ãŸã€‚ ç¬¬3å›žã§ã‚‚å¼•ãç¶šãã€IEç‰¹æœ‰ã®æ©Ÿèƒ½ãŒXSSã‚’å¼•ãèµ·ã“ã™ä¾‹ã¨ã„ã†ã“ã¨ã§ã€
Kanasansoft 2009/06/05
browser

ie

javascript

security

css

xss
ãƒªãƒ³ã‚¯
æ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ç¬¬1å›ž ï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®å¼•ç”¨ç¬¦ã®è§£é‡ˆ âˆ’ ï¼ IT
XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ å°ã•ãªè©±é¡ŒãŒé¢ç™½ã„ çš†ã•ã‚“ã€ã¯ã˜ã‚ã¾ã—ã¦ã€‚ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã¨ç”³ã—ã¾ã™ã€‚ ã€Œæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã¨ã„ã†ã“ã¨ã§ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã™ã‚‹ã€æ™®æ®µã‚ã¾ã‚Šè¦‹æŽ›ã‘ãªã„ã‚ˆã†ãªå°ã•ãªè©±é¡Œã‚’å–ã‚Šä¸Šã’ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚»ã‚ãƒ¥ã‚¢ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã«ã€é–‹ç™ºè€…ã®æ–¹ã ã‘ã§ãªãã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§æ¤œæŸ»ã‚’è¡Œã†æ–¹ã€…ã«ã‚‚èªã‚“ã§ã„ãŸã ããŸã„ã¨æ€ã£ã¦ã„ã¾ã™ã€‚é‡ç®±ã®éš…ã‚’æ¥Šæžã§ã»ã˜ãã‚‹ã‚ˆã†ãªå°ã•ãªè©±é¡Œã°ã‹ã‚Šã§ã™ãŒã€çš†ã•ã‚“ã‚ˆã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚ ã•ã¦ç¬¬1å›žã¯ã€Internet ExplorerãŒHTMLã‚’è§£é‡ˆã™ã‚‹éš›ã®å¼•ç”¨
Kanasansoft 2009/03/03
browser

html

ie

security

web

xss

javascript
ãƒªãƒ³ã‚¯
1