webkit ã§ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ーティドメイン㮠localStorage ㌠sessionStorage ã«ãªã‚‹iOS7 㧠3rd party domain ã§ã® localStorage ã®æŒ™å‹• - Please Sleep ã®ã¤ã¥ã。 iOS7 ã® Safari ã§ã‚µãƒ¼ãƒ‰ãƒ‘ーティドメイン㮠localStorage ã®ãƒ‡ãƒ¼ã‚¿ãŒãƒ–ラウザã®å†èµ·å‹•ã§ã‚¯ãƒªã‚¢ã•ã‚Œã¦ã„るよã†ãªæŒ™å‹•ã‚’発見ã—ãŸã€‚W3C ã® Web Storage ã®ä»•æ§˜ã‚’èªã‚“ã§ã¿ã‚‹ã¨ã€ä»Šå›žã®æŒ™å‹•ã¨ä¸€è‡´ã™ã‚‹ã‚‚ã®ãŒ “MAY†ã§è¦å®šã•ã‚Œã¦ã„ãŸã€‚ã¨ã„ã†ã®ãŒã“ã“ã¾ã§ã®ã‚らã™ã˜ã€‚ webkit ã® bugzilla ã‚’ã¿ã¦ã„ã‚‹ã¨ãã‚Œã£ã½ã„ãƒã‚°ãŒè¦‹ã¤ã‹ã£ãŸã€‚差分をã¿ã‚‹ã¨ã‚„ã¯ã‚Šä»Šå›žã®æŒ™å‹•ã¨ä¸€è‡´ã€‚webkit ã®ã‚³ãƒ¼ãƒ‰ãƒ¬ãƒ™ãƒ«ã§ç¢ºèªãŒã¨ã‚ŒãŸã¨ã„ã†è©±ã€‚ webkit ã®ãƒã‚°ãƒã‚±ãƒƒãƒˆ 見ã¤ã‘ãŸãƒã‚°ã¯ã“ã¡ã‚‰ã€‚ Bug 115004 – Change approach to third-party blocking for LocalStorage 経緯ã¨ã—ã¦ã€ã“
GoogleãŒSafariã®è¨å®šã‚’迂回ã—ã¦ãƒˆãƒ©ãƒƒã‚ングã—ã¦ã„ãŸã¨ã•ã‚Œã‚‹ä»¶ã«ã¤ã„㦠- 最速転è·ç ”究会
Masato Kinugawa Security Blog: ブラウザã®XSSä¿è·æ©Ÿèƒ½ã‚’ãƒã‚¤ãƒ‘スã™ã‚‹
iOSã®SafariãŒContent-Dispositionを無視ã™ã‚‹å•é¡ŒãŒä¿®æ£ã•ã‚ŒãŸ | 水無月ã°ã‘らã®ãˆã³æ—¥è¨˜
UTF-8ã¯BOMãªã—ã§ã£ã¦è¨€ã£ãŸã‚ˆã？ on Twitter: "Safariã®ã€ŒCookieをブãƒãƒƒã‚¯ã€ã§ã€Œå¸¸ã«å—ã‘入れるã€ã¨ã€Œã—ãªã„ã€ã£ã¦ã€åŒã˜æ„味ã˜ã‚ƒã‚“（常ã«å—ã‘入れるï¼ãƒ–ãƒãƒƒã‚¯ã—ãªã„）誤訳ã˜ã‚ƒã‚“ã¨æ€ã£ãŸã‚‰ã€å®Ÿã¯å‹•ä½œã‚‚ãã®é€šã‚Šã ã£ãŸï¼ˆã©ã¡ã‚‰ã‚’é¸ã‚“ã§ã‚‚Cookieをブãƒãƒƒã‚¯ã—ãªã„）ã¨ã„ã†è¡æ’ƒã®äº‹å®Ÿã€‚ http://t.co/NRTH0oJ"
Safari... - Akinori MUSHA - FriendFeed
location.protocol - ç´ äººãŒãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚’勉強ã—ã¦ã„ãŸãƒ–ãƒã‚°
Minor Safari cross domain bug
Phishing with URL Obfuscation continues in Safari 4
HttpOnly in Safari 4.0 (release) – cat slave diary
Lookout : Advisory: Webkit - Visiting a maliciously crafted website may lead to a cross-site scripting attack
http://www.lookout.net/2009/06/08/advisory-international-components-for-unicode-maliciously-crafted-content-may-bypass-website-filters-and-result-in-cross-site-scripting/
Billy (BK) Rios » Safari 3.2.2 Feed Protocol Handler Issues
{{#tags}}- {{label}}
{{/tags}}