[B! DOM] gologo13ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

gologo13 id:gologo13

DOMã«é–¢ã™ã‚‹gologo13ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° (XSS) å¯¾ç–ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆ - OWASP
ã“ã®è³‡æ–™ã§ã¯ã€é©åˆ‡ã«å‡ºåŠ›ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ— / ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ç”¨ã—ãŸ XSS å¯¾ç–ã«ã¤ã„ã¦ã€ã‚·ãƒ³ãƒ—ãƒ«ã‹ã¤ãƒã‚¸ãƒ†ã‚£ãƒ–ãªãƒ¢ãƒ‡ãƒ«ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚æ¥µã‚ã¦å¤šãã® XSS æ”»æ’ƒãƒ™ã‚¯ãƒˆãƒ«ãŒã‚ã‚Šã¾ã™ãŒã€ã„ãã¤ã‹ã®ã‚·ãƒ³ãƒ—ãƒ«ãªãƒ«ãƒ¼ãƒ«ã«å¾“ã†ã“ã¨ã§ã€ã“ã®é‡å¤§ãªæ”»æ’ƒã‚’å®Œå…¨ã«é˜²ãã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã®è³‡æ–™ã§ã¯ã€XSS ã®æŠ€è¡“çš„ãªå½±éŸ¿ã€ãƒ“ã‚¸ãƒã‚¹ã¸ã®å½±éŸ¿ã¯æ‰±ã„ã¾ã›ã‚“ã€‚XSS ã‚’ä½¿ç”¨ã™ã‚Œã°ã€æ”»æ’ƒè€…ã¯ã€è¢«å®³è€…ãŒãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã‚’ä½¿ç”¨ã—ã¦å®Ÿè¡Œå¯èƒ½ãªã‚ã‚‰ã‚†ã‚‹è¡Œç‚ºã‚’è¡Œã†ã“ã¨ãŒã§ãã‚‹ã¨ã ã‘ã€ã“ã“ã§ã¯è¿°ã¹ã¦ãŠãã¾ã™ã€‚ åå°„åž‹ XSS ã¨æ ¼ç´åž‹ XSS ã®ä¸¡æ–¹ã¨ã‚‚ã«ã€ã‚µãƒ¼ãƒãƒ¼å´ã§é©åˆ‡ãªæ¤œè¨¼ã¨ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ã§å¯¾å¿œã§ãã¾ã™ã€‚DOM ãƒ™ãƒ¼ã‚¹ XSS ã«ã¯ã€DOM ãƒ™ãƒ¼ã‚¹ XSS å¯¾ç–ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆã§èª¬æ˜Žã™ã‚‹ç‰¹æ®Šãªãƒ«ãƒ¼ãƒ«ã®ã‚µãƒ–ã‚»ãƒƒãƒˆã«ã‚ˆã‚Šå¯¾å¿œã§ãã¾ã™ã€‚ XSS é–¢é€£ã®æ”»æ’ƒãƒ™ã‚¯ãƒˆãƒ«ã«ã¤ã„ã¦ã®ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆã¯ã€XSS ãƒ•ã‚£ãƒ«ã‚¿ãƒ¼å›žé¿ãƒãƒ¼ãƒˆã‚·ãƒ¼ãƒˆã‚’å‚ç…§ã—ã¦ãã
gologo13 2017/07/11
DOM

JavaScript

xss

security

cheatsheet
ãƒªãƒ³ã‚¯
I am mitsuruog | SPAã‚’æ§‹ç¯‰ã™ã‚‹ã¨ãã«çŸ¥ã£ã¦ãŠã„ãŸæ–¹ãŒã„ã„7ã¤ã®èª²é¡Œ
ãƒ–ãƒ©ã‚¦ã‚¶ã§ã® Javascript ã®é«˜é€ŸåŒ–ã¨ Backbone ã‚„ Angular ã®ã‚ˆã†ãª JavascriptMVC ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã®ç™»å ´ã«ã‚ˆã‚Šã€ä»¥å‰ã‚ˆã‚Š SPAï¼ˆSingle page applicationï¼‰ãŒæ§‹ç¯‰ã—ã‚„ã™ããªã‚Šã¾ã—ãŸã€‚ ã•ã‚‰ã«ã€Yeoman ã«ä»£è¡¨ã•ã‚Œã‚‹ SPA ã‚’ä½œæˆã™ã‚‹ã™ã‚‹ãŸã‚ã® scaffoldï¼ˆåœŸå°ï¼‰ãŒæ•´å‚™ã•ã‚Œã¦ãã¾ã—ãŸã®ã§ã€çµæ§‹ã•ãã£ã¨ SPA ãŒä½œã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã‚‚äº‹å®Ÿã§ã™ã€‚ ã•ãã£ã¨ä½œã£ãŸ SPA ãŒã•ãã•ãå‹•ã‹ãªã„ãƒ»ãƒ»ãƒ»ä½œã£ãŸã‘ã©ä½¿ãˆãªã„ãƒ»ãƒ»ãƒ»ãªã‚“ã¦ã“ã¨ã«ãªã‚‰ãªã„ã‚ˆã†ã«ã€SPA ã‚’æ§‹ç¯‰ã™ã‚‹å‰ã«çŸ¥ã£ã¦ãŠã„ãŸæ–¹ãŒã„ã„èª²é¡Œã«ã¤ã„ã¦èª¿ã¹ã¦ãŸã‚Šè€ƒãˆã¦ã¿ã¾ã—ãŸã€‚ ç›®æ¬¡ 1. ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ 2. ãƒ¡ãƒ¢ãƒªãƒªãƒ¼ã‚¯ 3. ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ 4. ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãƒãƒƒã‚¯ã‚¤ãƒ³ 5. ç”»é¢è¨è¨ˆã‹ã‚‰ UI ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆè¨è¨ˆã¸ã®æ€æƒ³è»¢æ› 6. ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ä¸è¶³ 7. ç•ªå¤–
gologo13 2017/03/15
DOM

spa
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ä¸è¦è«– - Qiita
ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã€Isomorphicã€Universal JavaScriptãªã©ã®è¨€è‘‰ã‚’ã‚ˆãè¦‹ã‹ã‘ã¾ã™ã€‚ãªã‚‹ã»ã©ãã€è‰¯ã•ãã†ã ãã€å¤–éƒ¨å…¬é–‹ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’æ›¸ãã“ã¨ãŒã‚ã£ãŸã‚‰æŒ‘æˆ¦ã—ã¦ã¿ãŸã„ãã€Mithrilã«ã‚‚isomorphic-mithrilã£ã¦ã®ã‚’ãŒã‚“ã°ã£ã¦ã„ã‚‹äººãŒã„ã‚‹ã—ã€ã¿ãŸã„ãªã“ã¨ã‚’æ¼ ç„¶ã¨æ€ã£ã¦ã„ãŸã®ã§ã™ãŒã€æœ€è¿‘ASCII.jpã®ã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã®é€£è¼‰ã‚’æ›¸ã„ã¦ã„ã¦ã€ã‚ã‚‰ãŸã‚ã¦HTTPã®ä»•æ§˜ã‚’è¦‹è¿”ã—ã¦ã¿ã¦ã€é€†ã«ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã‚’ã—ãªã„æ–¹ãŒã„ã„ã®ã§ã¯ãªã„ã‹ã€ã¨æ€ã„å§‹ã‚ã¾ã—ãŸã€‚ è¿½è¨˜(23:30): ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã¨æ›¸ã„ã¦ã„ã¾ã™ãŒUniversal JavaScriptã¿ãŸã„ãªå‡ã£ãŸãƒ“ãƒ¥ãƒ¼ã®æ›´æ–°ã®æ„å‘³ã§ã™ã€‚ ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã®æ¬ ç‚¹ ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã®ãƒ¡ãƒªãƒƒãƒˆã¨ã—ã¦ã‚ã’ã‚‰ã‚Œã‚‹ã®ã¯æ¬¡ã®2ç‚¹ã§ã™ã€‚ æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³ã®ã‚¯ãƒãƒ¼ãƒ©ãƒ¼å‘ã‘
gologo13 2016/12/25
DOM

isomorphic

SPA
ãƒªãƒ³ã‚¯
ä»Šè©±é¡Œã®React.jsã¯ã©ã®ã‚ˆã†ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«é©ã—ã¦ã„ã‚‹ã‹ï¼Ÿ Introduction To Reactâ”€ Frontrend Conference
ä»Šè©±é¡Œã®React.jsã¯ã©ã®ã‚ˆã†ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«é©ã—ã¦ã„ã‚‹ã‹ï¼Ÿ Introduction To Reactâ”€ Frontrend Conference å¤–æ‘ å’Œä»ï¼ˆæ ªå¼ä¼šç¤¾ ãƒ”ã‚¯ã‚»ãƒ«ã‚°ãƒªãƒƒãƒ‰ï¼‰ æœ¬è¨˜äº‹ã¯ã€2015/2/21ã«è¡Œã‚ã‚ŒãŸFrontrend Conferenceã®ã€ŒIntroduction To Reactã€ã®å†…å®¹ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ å½“æ—¥ã®è³‡æ–™ã¯ä»¥ä¸‹ã«ã‚¢ãƒƒãƒ—ã•ã‚Œã¦ã„ã¾ã™ã®ã§ã€ã“ã¡ã‚‰ã‚‚å‚ç…§ã—ã¦ãã ã•ã„ã€‚ Introduction To React // Speaker Deck React.jsã¨ã¯ä½•ã‹ React.jsã¯Facebookè£½ã®JavaScriptãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã™ã€‚ http://facebook.github.io/react/ å…¬å¼ã‚µã‚¤ãƒˆã«ã€ã€ŒA JavaScript library for building user interfacesã€ã¨ã‚ã‚‹ã‚ˆã†ã«ã€R
gologo13 2015/03/05
"åŸºæœ¬çš„ã«ã¯ã‚¹ãƒ†ãƒ¼ãƒˆãƒ¬ã‚¹ãªã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã‚’ä½œã£ã¦çµ„ã¿åˆã‚ã›ã¦ã„ãã®ãŒReact.jsã«ãŠã‘ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã®è€ƒãˆæ–¹" ç´”ç²‹ãªæ„å‘³ã§ã®é–¢æ•°ã¿ãŸã„ã«åŒã˜å…¥åŠ›ã«å¯¾ã—ã¦å¿…ãšåŒã˜ViewãŒç”Ÿæˆã•ã‚Œã‚‹ã£ã¦ã“ã¨ã‹

react.js

DOM

JavaScript
ãƒªãƒ³ã‚¯
addEventListener()ã®ç¬¬ï¼“å¼•æ•°ã®æ„å‘³ã¨ã‹ã‚’ã¡ã‚ƒã‚“ã¨ç†è§£ã™ã‚‹ç‚ºã®ãƒ¡ãƒ¢ - ä»Šæ—¥ã‚‚ã‚¹ãƒŸãƒžã‚»ãƒ³ã€‚
Webä¸Šã§UIã‚’ãƒžã‚¸ãƒ¡ã«ä½œã‚ã†ã¨ã™ã‚‹ã¨ã‚¤ãƒ™ãƒ³ãƒˆã®ä»•çµ„ã¿ã‚’ã¡ã‚ƒã‚“ã¨ç†è§£ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚‹ã€‚ jQueryã¨ã‹ä¾¿åˆ©ãªãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¤ã‹ãˆã°ã‚ã‚‹ç¨‹åº¦ç°¡å˜ã«ã§ãã‚‹ã‚“ã ã‚ã†ã‘ã©ã€ã„ã‚ã„ã‚åˆ¶ç´„ã‚ã£ã¦ãã‚Œã‚‰ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒä½¿ãˆãªã„å ´åˆã‚‚ã‚ã‚‹ã®ã§ã€ã¡ã‚ƒã‚“ã¨ç†è§£ã™ã‚‹ãŸã‚ã«ãƒ¡ãƒ¢ã—ã¦ãŠãã€‚ ã‚¤ãƒ™ãƒ³ãƒˆä¼æ’ã®é †ç•ª W3Cã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«åˆ†ã‹ã‚Šã‚„ã™ã„å›³ãŒã‚ã£ãŸã®ã§å¼•ç”¨ã™ã‚‹ã€‚ The capture phase: the event is dispatched to the target's ancestors from the root of the tree to the direct parent of the target node. The target phase: the event is dispatched to the target node. The bubbling phase: the event
gologo13 2015/03/03
capture/bubbling

javascript

DOM
ãƒªãƒ³ã‚¯
1