GitHub - w3c/trusted-types: A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
ã€JavaScript】 MutationObserverã®ä½¿ã„æ–¹ 個人的ã¾ã¨ã‚ - ã¯ã‚Šã‚’ãã°
DOMã®å¤‰æ›´ã‚’検知ã™ã‚‹ã‚¤ãƒ™ãƒ³ãƒˆãŒéžæŽ¨å¥¨ã«ãªã‚Š 代ã‚ã‚Šã«æ–°ã—ã作られãŸMutationObserverãªã‚‹ã‚‚ã®ã€‚ MutationObserver - Web API インターフェイス | MDN https://developer.mozilla.org/ja/docs/Web/API/MutationObserver DOM変更検知ã¯çµæ§‹ã‚ˆã使ã†ã‚‚ã®ï¼ˆç‰¹ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¹ã‚¯ãƒªãƒ—ト）ãªã®ã« 日本語ã®è§£èª¬ã‚µã‚¤ãƒˆãŒâ†‘ã®MDNã¨MSDNã€ã“ã“ãらã„ã—ã‹ãªã ãã®éƒ½åº¦ã‚°ã‚°ã£ãŸã‚Šæ‰‹æŽ¢ã‚Šã§ç‰‡ã£ç«¯ã‹ã‚‰è©¦ã™ã®ãŒé¢å€’ãªã®ã§ä»¥ä¸‹ã«è‡ªåˆ†ç”¨ã«ã¾ã¨ã‚る。 コンストラクタ ã¾ãšã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’作る。 window.MutationObserverコンストラクタã®å¼•æ•°ã«ã€DOM変更を検知ã—ãŸéš›ã«å®Ÿè¡Œã™ã‚‹é–¢æ•°ã‚’渡ã™ã€‚ function omega(data1, data2) { alert("ﾜﾚﾊﾒｼｱﾅﾘ"); consol
ã‚ãªãŸã®çŸ¥ã‚‰ãªã„超絶便利ãªWeb開発をå¶ãˆã‚‹ä»•æ§˜Web Componentsã¨ã¯
Web Componentsã¨ã¯ 本稿ã§ã¯ã€Google I/O 2013ã®ä¸ã‹ã‚‰ã€ã€ŒWeb Componentsã€ã«é–¢ã™ã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’レãƒãƒ¼ãƒˆã™ã‚‹ã€‚ 「Web Componentsã€ã¯ã€ç°¡å˜ã«ã„ã†ã¨ã€Web（HTML）をコンãƒãƒ¼ãƒãƒ³ãƒˆåŒ–ã™ã‚‹ãŸã‚ã®ä»•çµ„ã¿ã§ã€å†åˆ©ç”¨æ€§ã‚„メンテナンス性ã€é–‹ç™ºåŠ¹çŽ‡ã‚’上ã’ã‚‹ã®ã«å¤§ããªåŠ¹æžœãŒã‚ã‚‹ã¨ã„ã‚ã‚Œã¦ã„る。 今年ã®Google I/Oã§ã¯ã€æ¬¡ã®2ã¤ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã§Web Componentsã«ã¤ã„ã¦è§£èª¬ãŒã‚ã£ãŸã€‚ Web Components: A Tectonic Shift for Web Development（Google Chromeãƒãƒ¼ãƒ 開発者Eric Bidelmanæ°ï¼‰ 資料：http://www.WebComponentsshift.com/ 「Web Components: A Tectonic Shift for Web Developme
DOM Clobbering
DOM Clobbering Thursday, 16 May 2013 The DOM is a mess. In an effort to support legacy quick short cuts such as “form.name†etc the browsers have created a Frankenstein monster. This is well known of course but I just wonder how far the rabbit hole goes. I’m gonna share what I discovered over the years. HTML Collections First up is my favourite “HTML Collectionsâ€, when html elements are combined i
DOMイベントã®åŸºç¤Žã‹ã‚‰æ·±æ·µã¾ã§
DOMイベントã®åŸºç¤Žã‹ã‚‰ã€ç´°ã‹ã„æƒ…å ±ã¾ã§ã€æœ€æ–°ã®DOMイベントã®ä»•æ§˜ç–定状æ³ã‚‚å«ã‚ã¦ã€è§£èª¬ã—ã¦ã„ã¾ã™ã€‚Read less
Firefox 22(Nightly) 㧠WebComponents ã® document.register ãŒå®Ÿè£…ã•ã‚ŒãŸ - hogehoge @teramako
783129 - Implement the document.register interface method mozilla-central: changeset 123773:871fea464883 カスタムè¦ç´ ãŒä½œã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚DOMè¦ç´ ã¯å˜ã«DOM APIを呼ã³å‡ºã™ã ã‘ã®å˜åœ¨ã ã£ãŸã®ãŒã€ç‹¬è‡ªã®ãƒ¡ã‚½ãƒƒãƒ‰ã¨ã‹ã‚’è¿½åŠ ã§ãるよã†ã«ã£ãŸã‚ã‘ã§ã€ã‚ˆã‚Šã‚ªãƒ–ジェクト指å‘çš„ã«JavaScriptを書ã‘ã¾ã™ãï¼ ä»•æ§˜ Introduction to Web Components Custom Elements サンプルコード 詳細ã¯ã€ãƒ†ã‚¹ãƒˆã‚³ãƒ¼ãƒ‰ã‚’見ãŸã»ã†ãŒè‰¯ã„ã‹ã‚‚。 http://mxr.mozilla.org/mozilla-central/source/dom/tests/mochitest/webcomponents/test_document_register.html?force
JavaScript APIs you've never heard of (and some you have) - Human Who Codes
Posted at November 13, 2012 by Nicholas C. Zakas Tags: Ajax, API, CSS, DOM, JavaScript This week I was scheduled to give a brand new talk at YUIConf entitled, JavaScript APIs you’ve never heard of (and some you have). Unfortunately, a scheduling conflict means that I won’t be able to attend. So instead of letting the work of putting together a brand-= new talk go to waste (or otherwise be delayed)
DOM-based XSS
1. DOM-based XSS Attacks M.Sc. Project thesis Zdravko Danailov Krassen Deltchev zdravko.danai[email protected] [email protected] Ruhr-University of Bochum Faculty Of Electrical Engineering And Information Technology Chair for Network and Data Security Horst-Görtz Institute Prof. Dr. Jörg Schwenk First examiner: Prof. Dr. Jörg Schwenk Adviser and Second examiner: Dipl.-Ing. Mario Heiderich 16. April
Shadow DOM (W3C Working Draft 17 June 2014)
Shadow DOM W3C Working Group Note 01 March 2018 This version:https://www.w3.org/TR/2018/NOTE-shadow-dom-20180301/Latest published version:https://www.w3.org/TR/shadow-dom/ Previous Version:https://www.w3.org/TR/2017/WD-shadow-dom-20170905/ Latest editor's draft:https://w3c.github.io/webcomponents/spec/shadow/ Editor: Hayato Ito, Google, Inc. Revision history: https://github.com/w3c/webcomponents/c
HTML Form Controls reviewed
Intro Inspired by a post by John Resig about conflicts between HTML element IDs and DOM properties/JavaScript variables I started to think about related techniques that would lead to security risks or even vulnerabilities. Garrett Smith and Frank Manno also crafted an excellent writeup about this topic and related problems if you prefer a deeper introduction into form controls and unsafe names. An
DOMXss Identification and Exploitation
DOM Xss Identification and Exploitation Stefano Di Paola CTO and Co-Founder Minded Security Swiss Cyber Storm 3 12-15 May 2011 $ whoami Stefano Di Paola @WisecWisec Research OWASP-Italy Senior Member Testing Guide Contributor OWASP SWFIntruder Bug Hunter & Sec Research (Pdf Uxss, Flash Security, HPP) Security Since '99 Work CTO @ Minded Security Application Security Consulting Director of
DOM ECMAScripting
DOM 仕様書をèªã‚€å‰ã®ã‚¬ã‚¤ãƒ‰ã¨ã—ã¦ã€DOM ã®ãŠãŠã¾ã‹ãªå†…容㨠ECMAScript（JavaScript）ã«ã‚ˆã‚‹ã”ãç°¡å˜ãªä¾‹æ–‡ã‚’æä¾›ã—ã¾ã™ã€‚DOM Level 1 ã‹ã‚‰ Level 3 ã¾ã§ã€‚DOM Core 入門 (1)DOM Core 入門 (2)DOM Events 入門DOM Traversal 入門DOM Range 入門DOM Load and Save 入門DOM Validation 入門DOM XPath 入門DOM Viewsã€DOM Style Sheetsã€DOM CSS 関連。CSSOM 入門 (1)CSSOM 入門 (2)CSSOM View 入門DOM HTML 関連。DOM HTML 入門 (1)DOM HTML 入門 (2)ç§çš„翻訳。DOM FAQ 日本語訳DOM Requirements 日本語訳（途ä¸ï¼‰DOM Level 3 Load and Sa
第8回　実践DOMスクリプティング#1：HTMLã¨ãƒ†ã‚ストã®æ“作 | gihyo.jp
ã“ã‚“ã«ã¡ã¯ã€å¤ªç”°ã§ã™ã€‚å‰ã€…回ã€å‰å›žã§DOMã®åŸºç¤Žã‚’ç°¡å˜ã«è§£èª¬ã—ã¾ã—ãŸã€‚今回ã‹ã‚‰ã¯ã€DOMを使ã£ãŸå®Ÿç”¨çš„ãªã‚¹ã‚¯ãƒªãƒ—トを解説ã—ã¦ã„ãã¾ã™ã€‚特ã«ä»Šå›žã¯HTMLã®æ“作ã€ãƒ†ã‚ストã®æ“作ã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã‚’当ã¦ã¦ã„ãã¤ã‹ã®ã‚µãƒ³ãƒ—ルコードを解説ã—ã¦ã„ãã¾ã™ã€‚ HTMLæ“作ã®åŸºæœ¬ JavaScriptã«ã‚ˆã£ã¦HTMLを書ã出ã—ãŸã‚Šã€ä¸€éƒ¨ã‚’書ãæ›ãˆãŸã‚Šã€å‰Šé™¤ã—ãŸã‚Šã¨ã„ã£ãŸæ–¹æ³•ã¯å®Ÿã¯æ§˜ã€…ãªæ–¹æ³•ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ã€‚目的ã«åˆã‚ã›ã¦é©åˆ‡ãªæ–¹æ³•ã‚’é¸ã°ãªã„ã¨éžåŠ¹çŽ‡ã ã£ãŸã‚Šã€æœ€æ‚ªã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ティングãªã©ã®å•é¡Œã‚’抱ãˆã¦ã—ã¾ã†å±é™ºã‚‚ã‚ã‚Šã¾ã™ã€‚ document.writeã¨åŒæœŸèªã¿è¾¼ã¿ JavaScriptã§HTMLを書ã出ã™ã¨ã„ã†ã¨ã€æœ€åˆã«å¦ã¶ã®ã¯ã“ã®document.writeã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。ã„ã‚ゆるprintæ–‡ã®ã‚ˆã†ã«ã‚·ãƒ³ãƒ—ルãªAPIãªã®ã§ã€å…¥é–€æ›¸ã®æœ€åˆã®ã‚µãƒ³ãƒ—ルãªã©ã§æ‰±ã‚れるã“ã¨ã‚‚多ã„よã†ã§ã™ã€‚ã—ã‹ã—ã€docume
テã‚ストデータã¨HTMLæ–片を区別ã™ã‚‹ | 水無月ã°ã‘らã®ãˆã³æ—¥è¨˜
以å‰ã«ä¸Šè¨˜ã®æ–¹æ³•ã¨åŒã˜ã‚ˆã†ãªã‚‚ã®ã‚’検討ã—ãŸã“ã¨ãŒã‚る。エスケープæ¼ã‚ŒãŒç™ºç”Ÿã™ã‚‹ã®ã¯ã€åŒã˜å¤‰æ•°ã®ä¸å‘³ãŒå‡¦ç†ã®æ®µéšŽã«ã‚ˆã£ã¦æœªã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‹ã‚‰ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—済ã¿ã«å¤‰ã‚ã£ãŸã‚Šã€æœªã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã¨ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—済ã¿ã®å¤‰æ•°ãŒä½•ã®åŒºåˆ¥ã‚‚ãªã混在ã—ã¦ã„ã‚‹ã‹ã‚‰ã ã¨ã„ã†è©±ã‚’ã©ã“ã‹ã§èªã‚“ã ãŸã‚ã 。 「安全ãªãƒ†ãƒ³ãƒ—レートシステムã¯ã‚ã‚‹ã®ã‹ã€ã§ã™ã‹ã。型ãŒåŒã˜ãªã®ãŒè‰¯ããªã„ã®ã§ã¯ãªã„ã‹ã¨ã„ã†è©±ã§ã‚ã£ã¦ã€å¤‰æ•°ã®åå‰ã§åŒºåˆ¥ã™ã‚‹è©±ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€‚ ……ã¨ã“ã‚ã§ä½™è«‡ã§ã™ãŒã€æ–°ã—ã„hatomaru.dllã§ã‚‚「全部DOMã§ã¤ãã‚Šã€InnerXml/OuterXmlã«ã¯æ›¸ãè¾¼ã¾ãªã„ã€ã¨ã„ã†ãƒãƒªã‚·ãƒ¼ã¯å¥åœ¨ã§ã€XSSã«å¯¾ã™ã‚‹ç‰¹åˆ¥ãªé…æ…®ã¯ã»ã¨ã‚“ã©ã—ã¦ã„ã¾ã›ã‚“。ãã‚Œã¯è‰¯ã„ã®ã§ã™ãŒã€å®Ÿã¯ã€Œå…¨éƒ¨DOMã€æ–¹å¼ã«ã‚‚弱点ãŒã‚ã‚‹ã“ã¨ãŒåˆ¤æ˜Žã—ã¦ã„ã¾ã™ã€‚ C#ã§ã“ã‚“ãªã‚³ãƒ¼ãƒ‰ã‚’書ãã¨â€¦â€¦ã€‚ XmlDocument result = new XmlDocument(
Ex DOM Storage をリリースã—ã¾ã—㟠- Yet Another Hackadelic
çµæ§‹å‰ã«ä½œã£ã¦ã„ãŸã‚“ã ã‘ã©ã€IE6, IE7 ã§ã‚‚動作ã™ã‚‹ DOM Storage を作ã£ãŸã®ã§ã€ãã¡ã‚“ã¨å‘ŠçŸ¥ã—ã¾ã™ã€‚ 追記 ã¡ãªã¿ã«ã‚µãƒ¼ãƒãƒ¼ã«ãƒ•ã‚¡ã‚¤ãƒ«ç½®ãã ã‘ã§å‹•ãã¾ã™ã€‚ユーザーã«ä½•ã‹ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã›ã‚‹å¿…è¦ã¯ã‚ã‚Šã¾ã›ã‚“。(2008-09-24T11:45:56+09:00) CodeReposã«ã‚½ãƒ¼ã‚¹ã‚’移動ã—ã¾ã—ãŸã€‚(2008-09-24T12:37:24+09:00) Ex DOM Storage dist http://svn.coderepos.org/share/lang/javascript/exdomstorage/tags/0.01/ source http://svn.coderepos.org/share/lang/javascript/exdomstorage sample http://svn.coderepos.org/share/lang/javascript/
Gecko DOM Reference - MDC
The Document Object Model (DOM) connects web pages to scripts or programming languages by representing the structure of a document—such as the HTML representing a web page—in memory. Usually, that means JavaScript, although modeling HTML, SVG, or XML documents as objects are not part of the core JavaScript language, as such. The DOM represents a document with a logical tree. Each branch of the tre
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
https://codylindley.com/dom-desktop-tests/
DOM Reference Manual
Google Code Archive - Long-term storage for Google Code Project Hosting.
{{#tags}}- {{label}}
{{/tags}}