Making dev.to insanely fast
It makes me smile when someone raves about how fast this website loads, because that's no accident. We put a lot of effort into making it so. It is the sort of thing that usually goes unnoticed, but when your readers are developers, there's a better chance they notice and appreciate it. I have written about this in the past, but it's worth re-examining because these ideas are always evolving. From
Cookie関連ã®æœ€æ–°å‹•å‘ (2016å¹´) - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? ã¯ã˜ã‚㫠去年ãらã„ã‹ã‚‰Cookieã«é–¢ã™ã‚‹è°è«–ãŒæ´»ç™ºã«è¡Œãªã‚ã‚Œã¦ã„るよã†ã«æ„Ÿã˜ã¾ã™ã€‚ãã“ã§Cookie関連ã®æœ€æ–°å‹•å‘ã«ã¤ã„ã¦ä»•æ§˜ã®è¦³ç‚¹ã‹ã‚‰å¹¾ã¤ã‹åˆ—挙ã—ã¾ã™ã€‚ Deprecate modification of 'secure' cookies from non-secure origins Cookie Prefixes Same-site Cookies A Retention Priority Attribute for HTTP Cookies Content Security Policy: Cookie Controls G
ãƒã‚°åˆ†æžå‹‰å¼·ä¼š vol.1 - 資料一覧 - connpass
終了 2015/10/15（木） 19:00〜 ãƒã‚°åˆ†æžå‹‰å¼·ä¼š vol.1 ã‚»ã‚ュリティã®é™£ kenji kobayashi ä»– æ±äº¬éƒ½åƒä»£ç”°åŒºå¹³æ²³ç”º2-16-1 平河町森タワー2F
åŒä¸€ã‚ªãƒªã‚¸ãƒ³ã«å¢ƒç•Œã‚’è¨ã‘ã‚‹ Suborigins ã¨ã¯ - ASnoKaze blog
Webã‚»ã‚ュリティを考ãˆã‚‹ä¸Šã§å¤§äº‹ãªä»•çµ„ã¿ã®ä¸€ã¤ã«ã€Same-Origin Policyã¨ã„ã†ä»•çµ„ã¿ãŒã‚ã‚Šã¾ã™ã€‚ Originã¯ã€Œã‚¹ã‚ーム・ホスト・ãƒãƒ¼ãƒˆã€ã®çµ„ã¿åˆã‚ã›ã§ã™ã€‚ã“れらãŒä¸€ç·’ã§ã‚ã‚Œã°ã€åŒä¸€Originã§ã‚りリソースã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ æ´å²çš„経緯や様々ãªç†ç”±ã«ã‚ˆã‚Šè¤‡æ•°ã®ã‚¢ãƒ—リケーションãŒåŒä¸€Originã§æä¾›ã•ã‚Œã¦ã„ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ãŸã¨ãˆã°ã€"ãƒãƒ£ãƒƒãƒˆ"ã‚„"ショッピング"ã®æ©Ÿèƒ½ãŒä»¥ä¸‹ã®æ§˜ãªURLã§æä¾›ã•ã‚Œã¦ã„るよã†ãªå ´åˆã§ã™ã€‚ https://example.com/chat/ https://example.com/shopping/ 実際ã€Googleã®æ¤œç´¢ã‚µãƒ¼ãƒ“スã¨åœ°å›³ã‚µãƒ¼ãƒ“スã¯åŒä¸€Originã§æä¾›ã•ã‚Œã¦ã„ã¾ã™ã€‚昔ã‹ã‚‰ã‚るリンクやã€ãƒ‘フォーマンスã€ãƒ–ランディングã®ãŸã‚ã®ã‚ˆã†ã§ã™ã€‚ https://www.google.com https://www.goo
2015å¹´Webサーãƒã‚¢ãƒ¼ã‚テクãƒãƒ£åºè«– - ゆã†ã†ãブãƒã‚°
2023å¹´03月31日追記：ã“ã®è¨˜äº‹ã‚’基ã«ã€@sadnessOjisanã•ã‚“よりã€ã‚³ãƒ¼ãƒ‰ãƒ¬ãƒ™ãƒ«ã«ã‚ˆã‚Šè¸ã¿è¾¼ã‚“ã ã€ã‹ã¤ã€ã‚°ãƒªãƒ¼ãƒ³ã‚¹ãƒ¬ãƒƒãƒ‰ãƒ™ãƒ¼ã‚¹ã®æ–°ã—ã„Webサーãƒã‚¢ãƒ¼ã‚テクãƒãƒ£ã‚‚å«ã‚ã¦æ•´ç†ã•ã‚ŒãŸè¨˜äº‹ Webサーãƒãƒ¼ã‚¢ãƒ¼ã‚テクãƒãƒ£é€²åŒ–è«–2023 | blog.ojisan.io ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ 主ã«æ–°å’ã®Webエンジニアå‘ã‘ã«ã€å¤å…¸çš„ãªWebサーãƒã‚¢ãƒ¼ã‚テクãƒãƒ£ã‚’å¦ã¶é“ã®ã‚Šã¨ä»£è¡¨çš„ãªå®Ÿè£…モデルã®æ¦‚è¦ã‚’紹介ã—ã¾ã™ã€‚ ã“ã®è¾ºã‚Šã®è©±é¡ŒãŒWeb界隈ã§æµè¡Œã£ã¦ã„ãŸã®ã¯æ•°å¹´ä»¥ä¸Šå‰ã¨ã„ã†ã‚¤ãƒ¡ãƒ¼ã‚¸ã§ã™ãŒã€Webサービスã¯ç›¸å¤‰ã‚らãšWebサーãƒã®ä¸Šã§å‹•ã„ã¦ã„ã‚‹ã®ã§ã€æµè¡Œã‚Šå»ƒã‚Šé–¢ä¿‚ãªãå¦ã¶ã¹ã内容ã ã¨æ€ã£ã¦ã„ã¾ã™ã€‚ ã¾ãŸã€HTTP/2ãŒã„よã„よRFC化ã—ã€æ—¢ã«h2oã‚„trusterdãªã©ã®HTTP/2ã®ã‚µãƒ¼ãƒå®Ÿè£…ãŒã‚ã‚Šã€ä»Šå¾ŒWebサーãƒã‚¢ãƒ¼ã‚テクãƒãƒ£ã‚’å†è¨ªã™ã‚‹ã“ã¨ãŒå¢—ãˆã‚‹ã‚ˆã†ãªæ°—ãŒã—ã¦ã„ã¾ã™ã€‚ ã¨ã“ã‚ãŒã€We
WebAPIリクエスト仕様書ã¨ã—ã¦curlコマンドã®ã”æ案 - Qiita
WebAPIã®ä»•æ§˜ã‚’記述ã™ã‚‹æ–¹æ³•ã¯ã„ãã¤ã‹ã‚ã‚‹ã¨æ€ã†ã€‚ 普通ã«æ—¥æœ¬èªžã§è¨˜è¿°ã™ã‚‹ JSON Hyper-Schemaã€WADLã€RAMLã€Swaggerãªã©ã‚’使ㆠ仕様書ã®ä»£ã‚ã‚Šã«ãƒ—ãƒã‚°ãƒ©ãƒ を書ã HTTPメッセージãã®ã‚‚ã®ã‚’記述ã—ã¦ãŠã ã§ã‚‚ã€æ–‡æ³•ã«ã°ã‚‰ã¤ããŒã‚ã£ãŸã‚Šã€èªã¿ã«ãã‹ã£ãŸã‚Šã€ãƒ„ールã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ãŒé¢å€’ã ã£ãŸã‚Šã€ã©ã‚Œã‚‚イマイãƒãªæ‰€ãŒã‚ã£ã¦ã€æ‰‹è»½ãªæ–¹æ³•ãŒæ¬²ã—ã„ã¨æ€ã£ã¦ã„ãŸã€‚ 何気ãªãcurlコマンドã®ã‚ªãƒ—ションを調ã¹ã¦ã„ãŸã‚‰ã€ã€Œã‚‚ã†ã“ã‚Œã§APIドã‚ュメント扱ã„ã«ã—ã¡ã‚ƒãˆã°ã„ã„ã‚“ã˜ã‚ƒã？ã€ã¨æ€ãˆã¦ããŸã®ã§ãƒ¡ãƒ¢ã—ã¦ãŠã。 curlコマンドã®ãŠã•ã‚‰ã„ curlコマンドã¯libcurlã®ä»˜å±žã‚³ãƒžãƒ³ãƒ‰ã§ã€æœ€è¿‘ã®Unixç³»OSãªã‚‰å¤§æŠµæœ€åˆã‹ã‚‰å…¥ã£ã¦ã„ã‚‹ã¨æ€ã†ã€‚コマンドã®è©³ç´°ã¯manã‚’èªã‚“ã§ã„ãŸã ã‘ã‚Œã°ã€‚ cURL - How To Use （マニュアルページ日本語訳） curlコマンドã®ã‚ªãƒ—ã‚·
Upgrade Insecure Resource Requests (A Collection of Interesting Ideas)
This document defines a mechanism which allows authors to instruct a user agent to upgrade a priori insecure resource requests to secure transport before fetching them. This is a public copy of the editors’ draft. It is provided for discussion only and may change at any moment. Its publication here does not imply endorsement of its contents by W3C. Don’t cite this document other than as work in pr
Private Presentation
Private content!This content has been marked as private by the uploader.
Extensible Web ã®å¤œæ˜Žã‘ã¨é–‹ç™ºè€…ãŒå¾—ãŸå¯èƒ½æ€§ã®è©± - Block Rockin’ Codes
Web based on Standards Web ã¯èª°ã®ã‚‚ã®ã§ã‚‚ã‚ã‚Šã¾ã›ã‚“。 ã ã‚Œã‹ãƒ—ãƒãƒ€ã‚¯ãƒˆã‚ªãƒ¼ãƒŠãƒ¼ãŒã„ã¦ãã®äººãŒæ„æ€æ±ºå®šã™ã‚‹ã¨ã‹ã€ãã†ã„ã†ã®ã¨ã¯çœŸé€†ã®æˆã‚Šç«‹ã¡ã‚’ã—ã¦ã„ã¾ã™ã€‚ 標準的ãªä»•æ§˜ã‚’決ã‚ã¦ã€ãã®ä»•æ§˜ã«å‰‡ã£ã¦ Web ã®ä¸–ç•Œã¯æˆã‚Šç«‹ã£ã¦ã„る。 政府ãŒä½œã‚‹ã‚µã‚¤ãƒˆã‚‚〠Twitter ã‚‚ã€å¦ç”ŸãŒä½œã£ãŸãƒ–ãƒã‚°ã‚‚ã€å…¨éƒ¨åŒã˜ãƒ«ãƒ¼ãƒ«ã§ä½œã‚‰ã‚Œã¦ã„る。ã ã‹ã‚‰ç¹‹ãŒã‚‹ã€‚ ã“ã‚Œã£ã¦çµæ§‹å‡„ã„ã“ã¨ã ã¨ã€è‡ªåˆ†ã¯æ€ã£ã¦ã„ã¾ã™ã€‚ Standarization ã“ã®ãƒ«ãƒ¼ãƒ«ã®æ±ºã‚æ–¹ã«ã‚‚ルールãŒã‚ã£ã¦ã€ã¡ã‚‡ã£ã¨æ•·å±…ã¯é«˜ã„ã‹ã‚‚ã—ã‚Œãªã„ã‘ã©ã€èª°ã§ã‚‚自由ã«å‚åŠ ã—ã¦ã€è‡ªç”±ã«æ„見を述ã¹ã‚‹ã“ã¨ãŒã§ãã‚‹å ´ãŒã‚ã‚Šã¾ã™ã€‚ 標準化団体ã£ã¦ã‚„ã¤ã§ã™ã。 ãªã‚“ã‹ä¸€éƒ¨ã®äººãŸã¡ãŒå‹æ‰‹ã«ã‚„ã£ã¦ã„るよã†ã«æ€ãˆã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã‘ã©ã€ãã‚Œã¯é¸æŒ™ã«è¡Œã‹ãªã„人ã®ç†è«–ã¨åŒã˜ã§ã™ã€‚ ã‚ãªãŸãŒä»•æ§˜ã«ã¤ã„ã¦æ„見をæŒã£ã¦ã¦ã€ãã‚ŒãŒå¦¥å½“ã§ã‚ã‚‹ãªã‚‰ã°ã€ãã®ç™ºè¨€ã¯ä»•æ§˜ã‚’æ ¹
HTTPã§Hashã‚„Arrayã‚’é€ã‚‹æ‰‹æ³•ã«ä»•æ§˜ã¯å˜åœ¨ã—ãªã„……ã®? - ãŸã ã®ã«ã£ã(2013-09-15)
â– HTTPã§Hashã‚„Arrayã‚’é€ã‚‹æ‰‹æ³•ã«ä»•æ§˜ã¯å˜åœ¨ã—ãªã„……ã®? jQueryã§ã“ã‚“ãªãµã†ã«æ›¸ãã¨: $.post('/', { hash: { foo: 'hoge', bar: 'fuga'}, array: ['baz', 'piyo'] }); サーãƒå´ã§ã“ã‚“ãªãµã†ã«å—ã‘å–ã‚Œã¦(ã“ã‚Œã¯Sinatra): post '/' do params.each do |key, val| puts "#{key}: #{val} as #{val.class}" end end ã¡ã‚ƒã‚“ã¨Hashã‚„Arrayã¨ã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹: hash: {"foo"=>"hoge", "bar"=>"fuga"} as Hash array: ["baz", "piyo"] as Array ã‚ã‚ã“りゃ便利ã ãã€ã§æ¸ˆã¾ã—ã¦ã‚‚ã„ã„ã‚“ã ã‘ã©ã€HTTP POSTã®ä¸èº«ãªã‚“ã¦ãŸã ã®ãƒã‚¤ãƒˆåˆ—ãªã‚“ã ã‹ã‚‰åž‹ã®æƒ…
ãªãœã‚ãªãŸãŒã‚¦ã‚§ãƒ–サイトをHTTPS化ã™ã‚‹ã¨ã‚µã‚¤ãƒˆãŒé…ããªã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒé€ƒã’ã¦ã„ãã®ã‹ - å°„æ’ƒã—ã¤ã¤å‰è»¢ 改
完全ã«é‡£ã‚Šã‚¿ã‚¤ãƒˆãƒ«ã§ã™ã‘ã©ä¸èº«ã¯çœŸé¢ç›®ã«æ›¸ãよ。 è¿‘å¹´ã€ã‚¦ã‚§ãƒ–サイトã®HTTPS化ãŒæµè¡Œã®ã‚ˆã†ã«ãªã£ã¦ã„る。ç§ã®çŸ¥ã‚‹é™ã‚Šã€Googleã®å„種サービスやTwitterã€Facebookãªã©ãŒå®Œå…¨ã«HTTPSã§é€šä¿¡ã‚’è¡Œã†ã‚ˆã†ã«ãªã£ã¦ã„る。HTTPSã€ã¤ã¾ã‚ŠSSLã«ã‚ˆã‚‹é€šä¿¡ã®æš—å·åŒ–ã«ã‚ˆã£ã¦ã€ãƒ¦ãƒ¼ã‚¶ã«ã“ã‚Œã¾ã§ã‚ˆã‚Šã‚‚安全ãªã‚¦ã‚§ãƒ–サイトをæä¾›ã§ãる。 ã—ã‹ã—ã€ã‚ãªãŸãŒä½œã£ã¦ã„るサイトをãµã¨æ€ã„ã¤ãã§HTTPS化ã—ã¦ã—ã¾ã†ã¨ã€ãŸã¶ã‚“ã€ã“ã‚Œã¾ã§ã‚ˆã‚Šã‚‚サイトãŒé…ããªã‚‹ã€‚ã“ã“ã§ã¯ã€HTTPSã§é€šä¿¡ã™ã‚‹å ´åˆã®å•é¡Œã‚’解説ã™ã‚‹ã€‚ ãªãœé…ããªã‚‹ã®ã‹ HTTPã§é€šä¿¡ã™ã‚‹å ´åˆã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒã‚µãƒ¼ãƒã¸ã¨æŽ¥ç¶šã™ã‚‹ãŸã‚ã«ã¯TCP/IPã®3ウェイãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã¨ã„ã†æ‰‹é †ãŒå¿…è¦ã«ãªã‚‹ã€‚ã‚ã‚“ã©ãã•ã„ã®ã§ã“ã“ã§ã¯è©³ã—ãã¯èª¬æ˜Žã—ãªã„ãŒã€è¦ã™ã‚‹ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’投ã’ã‚‹å‰ã«ãƒ‘ケットを１往復ã•ã›ãªã„ã¨ã„ã‘ãªã„ã®ã§ã‚る。パケットã®å¾€å¾©
Identifying Application State
TAG Finding 01 December 2011This version: http://www.w3.org/2001/tag/doc/IdentifyingApplicationState-20111201 Latest version: http://www.w3.org/2001/tag/doc/IdentifyingApplicationState Previous versions: http://www.w3.org/2001/tag/doc/IdentifyingApplicationState-20111130 http://www.w3.org/2001/tag/doc/IdentifyingApplicationState-20110930 http://www.w3.org/2001/tag/doc/IdentifyingApplicationState-2
HTTPエラーページã«æ„味をæŒãŸã›ã‚ˆã†
Translation of: Adding meaning to your HTTP error pages! by Stuart Colville This article is licensed under a Creative Commons Attribution, Non Commercial - Share Alike 2.5 license ã¯ã˜ã‚㫠ウェブ上ã§ä½•ã‹ã‚’検索ã—よã†ã¨ã™ã‚‹ã¨ã€æ—¢ã«å˜åœ¨ã—ãªã„ページã—ã‹æ¤œç´¢çµæžœã«ãªãã€ãれらã¸ã®ãƒªãƒ³ã‚¯ã‚’クリックã™ã‚‹ã“ã¨ã¯ã‚ˆãã‚ã‚‹ã ã‚ã†ã€‚ãã®é–‹ã„ãŸãƒšãƒ¼ã‚¸ã«ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã‚¨ãƒ©ãƒ¼ãƒ»ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ä»–ã«ä½•ã‚‚æƒ…å ±ãŒè¼‰ã£ã¦ã„ãªã‹ã£ãŸå ´åˆã€å¤šãã®äººã€…ã¯æˆ»ã‚‹ãƒœã‚¿ãƒ³ã‚’押ã—次ã®æ¤œç´¢çµæžœã‚’é–‹ã“ã†ã¨ã™ã‚‹ã ã‚ã†ã€‚ サイト製作者ã§ã‚る我々ã¯ã‚‚ã£ã¨è¨ªå•è€…ã«æ„味ã®ã‚るエラーページを作æˆã™ã‚‹ã“ã¨ãŒã§ãる。ãã†ã™ã‚Œã°ãŸã¨ãˆã‚¨ãƒ©ãƒ¼ãƒšãƒ¼ã‚¸ã§ã‚ã£ã¦ã‚‚訪å•è€…をサイトã«ç•™ã¾ã‚‰ã›ã€å½¼ã‚‰
Cookie 今昔物語 - ã¯ã¦ãªã‚‹ã›ã ã„ã‚ã‚Š
æ¦‚è¦ Cookie ã®ä¸å¹¸ãªæ´å²ã¨ç¾çŠ¶ã€ãã—ã¦å°†æ¥ã«ã¤ã„ã¦ã¾ã¨ã‚ãŸã€‚ 仕様ã¯ã©ã“ã«ã‚ã‚‹ã‹ Web 上ã®æ§˜ã€…ãªè¦æ ¼ã¯ã€èª°ã‹ãŒå®šã‚ã€ãã‚Œã«çš†ãŒåˆã‚ã›ã‚‹ã¨ã„ã†å½¢ã§å‹•ã„ã¦ã„る。ã—ã‹ã—ã€Cookie ã®ä»•æ§˜ã¯èª°ãŒæ±ºã‚ã€ã©ã“ã§è¦å®šã•ã‚Œã¦ã„ã‚‹ã‹çŸ¥ã£ã¦ã„る人ã¯ã€æ„外ã¨å°‘ãªã„ã®ã§ã¯ãªã„ã‹ã¨æ€ã†ã€‚W3C ã‚„ IETF ã ã¨æ€ã£ã¦ã„る人ãŒå¤šã„ã®ã§ã¯ãªã‹ã‚ã†ã‹ã€‚ æ£è§£ã‚’言ã£ã¦ã—ã¾ã†ã¨ã€å®šã‚ãŸã®ã¯ 1994 å¹´ã€Netscape Communications 社ã§ã‚ã‚Šã€æ–‡æ›¸ã¯ http://wp.netscape.com/newsref/std/cookie_spec.html ã§å…¬é–‹ã•ã‚Œã¦ã„ãŸã€‚アクセスã—ã¦ã¿ã‚Œã°ã‚ã‹ã‚‹é€šã‚Šã€ã“ã®ãƒšãƒ¼ã‚¸ã¯ã‚‚ã†å˜åœ¨ã—ãªã„ã—ã€Netscape 社自体㌠AOL ã«è²·åŽã•ã‚Œã¦ãŠã‚Šã€ä»Šã¯ Mozilla ã«ãªã£ãŸã¨ã„ã†ã‹ã€æ¶ˆãˆã¦ãªããªã£ã¦ã„ã‚‹ã“ã¨ã‚’知ã£ã¦ã„る人ã¯å¤šã„ã ã‚ã†ã€‚当時ã®æ–‡æ›¸ã¯ä¾‹ã«
URIã«ä½¿ã£ã¦ã‚ˆã„æ–‡å—ã®è©± - RFC2396 㨠RFC3986 - 本当ã¯æ€–ã„HPC
POSTã™ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’ã€ï¼ˆãƒ—レビューã®ãŸã‚ã«ï¼‰javascriptã§GETアクセスã™ã‚‹ã‚ˆã†ãªå‡¦ç†ã‚’書ã„ã¦ã„ã¦ãƒãƒžã£ãŸè©±ã€‚ 発端ã¯ã€textareaã«'（シングルクオートã¾ãŸã¯ã‚¢ãƒã‚¹ãƒˆãƒãƒ•ã‚£ãƒ¼ï¼‰ãŒå…¥ã‚‹ã¨ã€RailsãŒãã“ã‹ã‚‰å…ˆã®ãƒ‘ラメーターを無視ã—ã¡ã‚ƒã†ã£ã¦ã„ã†ã“ã¨ã€‚ã„ã‚ã„ã‚調ã¹ãŸçµæžœã€ä»¥ä¸‹ã®ã“ã¨ãŒã‚ã‹ã£ãŸï¼ˆRailsã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯2.0.2）。 URIを定義ã™ã‚‹ï¼’ã¤ã®RFC URIã®æ§‹æ–‡ã¯RFCã§å®šç¾©ã•ã‚Œã¦ã„る。ã“ã‚Œã«ã¯2ã¤ã‚ã£ã¦ã€å¾“æ¥ã®RFC2396（1998年発行）ã¨ã€RFC3986（2005年発行）ã 。 RFC3986ã«ã‚ˆã‚Œã°ã€ This document obsoletes [RFC2396], which merged "Uniform Resource Locators" [RFC1738] and "Relative Uniform Resource Locators" [RF
ã‚ã¾ã‚ŠçŸ¥ã‚‰ã‚Œã¦ã„ãªã„脆弱性：DOM Based XSSã«ã”用心｜アークウェブã®ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€SEã®é€²åœ°ã§ã™ã€‚ XSS（Cross Site Scripting）脆弱性ã®ä¸ã§ã‚ã¾ã‚Šæ³¨æ„を払ã‚ã‚Œã¦ã„ãªã„タイプã«DOM Based XSSã¨ã„ã†ã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚アナウンス自体ã¯éšåˆ†ã¨æ˜”ã‹ã‚‰è¡Œã‚ã‚Œã¦ãŠã‚Šã€webappsec.orgã§ã‚‚2005/7/4ã«Amit Kleinæ°ãŒ"DOM Based Cross Site Scripting or XSS of the Third Kind"を発表ã—ã¦ã„ã¾ã™ã€‚ Web 2.0的アプリãªã©ã§ã®Ajaxã®æ™®åŠã§JavaScriptãŒå¤šç”¨ã•ã‚Œã‚‹ç¾åœ¨ã®Web開発ã§ã¯ã€DOM Based XSSãŒå…¥ã‚Šè¾¼ã‚€å¯èƒ½æ€§ã¯å¾“æ¥ã‚ˆã‚Šã‚‚高ã¾ã£ã¦ã„ã¾ã™ã€‚ãã“ã§ã€ä»Šå›žã¯ã“ã®DOM Based XSSã«ã¤ã„ã¦èª¬æ˜Žã—よã†ã¨æ€ã„ã¾ã™ã€‚ DOM Based XSSã¨ã¯ä½•ã‹ï¼Ÿ 一般的ã«XSS脆弱性ã¨èžã„ã¦æ€ã„æµ®ã‹ã¹ã‚‹ã®ã¯ã€æ”»æ’ƒè€…ã®æ‚ªæ„ã‚る入力データ（JavaScript
極楽ã›ãã‚…ã‚ブãƒã‚°
自分ãŒä»Šä½•å†Šã®æœ¬ã‚’æŒã£ã¦ã„ã‚‹ã®ã‹ã‚ã‹ã‚‰ãªããªã£ã¦ä¹…ã—ã„（笑）。本ã¨ã„ã†ãƒ¢ãƒŽã¯ã‚ã£ã—ã«ã¨ã£ã¦ã¯ä¸€æœŸä¸€ä¼šæ„ŸãŒå¼·ãã€æ€ã„ç«‹ã£ãŸã¨ãã«è²·ã‚ãªã„ã¨è²·ã„逃ã—ã¦ã—ã¾ã†ã€ã¨ã„ã†ç„¦ã‚Šã®ã‚ˆã†ãªã‚‚ã®ãŒã‚る。好ããªã‚¸ãƒ£ãƒ³ãƒ«ãŒSFã€ãƒŸã‚¹ãƒ†ãƒªãƒ¼ã€ã‚µãƒƒã‚«ãƒ¼ã€æ˜ ç”»ã¨ã„ã†ã“ã¨ã‚‚ã‚ã‚Šã€ç‰¹ã«SFã¯å…¥æ‰‹å›°é›£ã«ãªã‚‹çŽ‡ãŒé«˜ã„よã†ã«æ€ã†ã€‚é›»å書ç±ã«ãªã£ã¦ã„ã‚Œã°ã‹ãªã‚Šå»¶å‘½ã§ãã‚‹ãŒã€å¥½ããªã‚¸ãƒ£ãƒ³ãƒ«ã«ã¤ã„ã¦ã¯ã‚„ã¯ã‚Šç´™ã®æœ¬ãŒè‰¯ã„。 ã¾ãŸè¿‘å¹´ã€æ€ã†ã¨ã“ã‚ãŒã‚り関心ã®å¹…ã‚’æ‹¡ã’ã¦ã„ã‚‹ã®ã§ã€å¿…然的ã«è²·ã†æœ¬ã®é‡ã¯å¢—ãˆã¦ã„る。もã¨ã‹ã‚‰ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é ˜åŸŸã¯å°‚é–€ã ã£ãŸã®ã§ä½™ã•ãšè²·ã†ã“ã¨ã«ã—ã¦ã„ãŸãŒã€ãã‚Œã«åŠ ãˆã¦åºƒãITã«é–¢ã‚る技術書も周辺ã«æ‹¡ã’るよã†ãªå½¢ã§è²·ã£ã¦ã„る。数ç†ãƒ¢ãƒ‡ãƒ«é–¢é€£ã‚„新技術ã«é–¢ã™ã‚‹æœ¬ã‚‚増ãˆã¦ã„ã‚‹ã—ã€è‹¥æ‰‹äººæ育æˆã«çµ¡ã‚ã¦ã„ã‚ゆるコンテンツ制作ã®ãŸã‚ã«ãƒ©ã‚¤ãƒˆãƒŽãƒ™ãƒ«ã«ã¾ã§æ‰‹ã‚’出ã—ã¦ã„ã¦ä¸€æ™‚ã¯ã¨ã‚“ã§ã‚‚ãªã„ã“ã¨ã«ãªã£ã¦ã„ãŸã€‚ã•ã‚‰ãªã‚‹æ–°é–¢å¿ƒé ˜åŸŸã¨ã—
1
ランã‚ング
ãŠçŸ¥ã‚‰ã›
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Chrome Platform Status
Astalanumerator
https://jp.techcrunch.com/2009/06/05/20090604google-opens-up-internal-speed-tool-to-the-public/
{{#tags}}- {{label}}
{{/tags}}