[B! json] matsutakegohan1ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

matsutakegohan1 id:matsutakegohan1

jsonã«é–¢ã™ã‚‹matsutakegohan1ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ï¼»æ°—ã«ãªã‚‹ï¼½JSONPã®å®ˆã‚Šæ–¹
XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ ï¼ˆç·¨é›†éƒ¨ï¼‰ JSONPã ã£ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ°—ã«ã—ã¦ã»ã—ã„ çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ä»Šå›žã¯ã€JSONPã‚’ä½¿ç”¨ã™ã‚‹å ´åˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã—ã‚‡ã†ã€‚ JSONPã¨ã¯ã€JSON with Paddingã®åç§°ãŒç¤ºã—ã¦ã„ã‚‹ã¨ãŠã‚Šã€JSONå½¢å¼ã®ãƒ‡ãƒ¼ã‚¿ã«ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯é–¢æ•°ã®å‘¼ã³å‡ºã—ã®ãŸã‚ã®ã‚³ãƒ¼ãƒ‰ã‚’ä»˜åŠ ã™ã‚‹ã“ã¨ã§ã€ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ãƒ‡ãƒ¼ã‚¿ã®å—ã‘æ¸¡ã—ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã®ãƒ‡ãƒ¼ã‚¿å½¢å¼ã§ã™ã€‚JavaScriptã‹ã‚‰ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã®ãƒ‡ãƒ¼ã‚¿ãŒç°¡å˜ã«æ‰±ãˆã‚‹ã“ã¨ãªã©ã‚’ç†ç”±ã«ã€å¤šæ•°ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§APIã®ä¸€éƒ¨ã¨ã—ã¦JSONPå½¢å¼ã§ãƒ‡ãƒ¼ã‚¿ã®æä¾›ãŒè¡Œã‚ã‚Œã¦ã„ã¾ã™ã€‚ å…·ä½“çš„ãªä¾‹ã‚’è¦‹
matsutakegohan1 2009/08/13
dev

javascript

js

json

security

web

webappsec

xss

ajax
ãƒªãƒ³ã‚¯
JavaScript Hijack/JSON Hijackã®ãœã„å¼±æ€§
ä»Šå›žã§ï¼Œratproxyã§æ¤œå‡ºã§ãã‚‹ç‰¹å¾´çš„ãªãœã„å¼±æ€§ã®è§£èª¬ã¯çµ‚ã‚ã‚Šã§ã™ã€‚æœ€çµ‚å›žã¨ãªã‚‹ä»Šå›žã¯ï¼ŒJavaScript Hijackã«ã¤ã„ã¦ã§ã™ã€‚JavaScript Hijackï¼Œãã—ã¦JSON Hijackã¯ï¼ŒJavaScriptãƒ•ã‚¡ã‚¤ãƒ«ã‚„JSONãƒ‡ãƒ¼ã‚¿å†…ã«å«ã¾ã‚Œã‚‹æƒ…å ±ã‚’ç›—ã‚€æ”»æ’ƒã§ã™ã€‚ratproxyã¯ï¼Œã“ã®æ”»æ’ƒã‚’æˆç«‹ã•ã›ã¦ã—ã¾ã†ãœã„å¼±æ€§ã‚’è¦‹ä»˜ã‘ã‚„ã™ããªã£ã¦ã„ã¾ã™ã€‚ JavaScript Hijack ã¾ãšæœ€åˆã«JavaScript Hijackã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã—ã‚‡ã†ã€‚JavaScript Hijackæ”»æ’ƒã«ãœã„å¼±ã«ãªã‚‹ã®ã¯ï¼Œå€‹äººæƒ…å ±ãªã©ã®æ©Ÿå¯†æƒ…å ±ã‚’å†…å®¹ã¨ã—ã¦å«ã‚€JavaScriptãƒ•ã‚¡ã‚¤ãƒ«ã‚’å‹•çš„ã«ç”Ÿæˆã—ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã™ã€‚ç†è€…ãŒéŽåŽ»ã®æ¤œæŸ»ã§å®Ÿéš›ã«è¦‹ãŸã‚±ãƒ¼ã‚¹ã«ã¯ï¼Œä»¥ä¸‹ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã—ãŸã€‚ ï¼ˆindex.htmlã®ä¸€éƒ¨ï¼‰ <script src="greeting.cgi"></
matsutakegohan1 2008/12/05
google

javascript

json

security

webapp

xss
ãƒªãƒ³ã‚¯
JSONScriptRequest.jsï¼šXMLHttpRequestã®ä»£ã‚ã‚Šã«ã‚’ä½¿ã£ã¦é€šä¿¡ã™ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒª - ãƒ’ãƒ«ã‚ºã§åƒã@robarioã®æŠ€ãƒã‚°
JSONScriptRequest-0.02[Ajax][JSON][API] - ãƒ’ãƒ«ã‚ºã§åƒã@robarioã®æŠ€ãƒã‚°JSANã«ä¸Šã’ã¾ã—ãŸã€‚ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã«å‡ºã¦ãã‚‹ã€ŒHTTPã®ã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ãƒˆãŒå¯èƒ½ã¨ãªã‚Šã¾ã™ã€ã¨ã„ã†ã®ã¯JSONScriptRequest.jsã§ã¯å®Ÿè£…ã—ã¦ã„ã¾ã›ã‚“ã€‚JSONHttpRequest.jsã¨ã„ã†ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§å®Ÿè£…ã—ã¦ã„ã¾ã™ãŒã€Catalystã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã¨ä½µã›ã¦å‡ºãã†ã‹ãªã¨æ€ã£ã¦ã€ã¾ã å…¬é–‹ã¯ã—ã¦ã„ã¾ã›ã‚“ã€‚ IFrameHttpRequestã¨ã„ã†
matsutakegohan1 2008/06/30
ajax

tips

json
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
matsutakegohan1 2008/06/30
css

json

perl
ãƒªãƒ³ã‚¯
ãƒã‚¤ãƒŠãƒªã‚¢ãƒ³åº¦ãƒã‚§ãƒƒã‚¯ã®ä»•çµ„ã¿ - bkãƒ–ãƒã‚°
ãƒã‚¤ãƒŠãƒªã‚¢ãƒ³åº¦ãƒã‚§ãƒƒã‚¯ã®ä»•çµ„ã¿ å…ˆæ—¥å…¬é–‹ã—ãŸ ãƒã‚¤ãƒŠãƒªã‚¢ãƒ³åº¦ãƒã‚§ãƒƒã‚¯ã¯ JavaScript ã§å®Ÿè£…ã•ã‚Œã¦ã„ã¾ã™ã€‚ãŸã„ã—ãŸã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€ã“ã“ã§ã¯ãã®ä»•çµ„ã¿ã‚’èª¬æ˜Žã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ JavaScript ã§è¨ºæ–ãƒ†ã‚¹ãƒˆã‚’ä½œã‚‹ä¸»ãªãƒ¡ãƒªãƒƒãƒˆã¯ã€ãƒšãƒ¼ã‚¸é·ç§»ãªã—ã§ãƒ†ãƒ³ãƒã‚ˆãæŽ¡ç‚¹ãŒã§ãã‚‹ã“ã¨ã€ã‚µãƒ¼ãƒã«è² è·ã‚’ã‹ã‘ãªã„ã“ã¨ã€ã§ã™ã€‚ ãƒšãƒ¼ã‚¸ã®ã‚½ãƒ¼ã‚¹ã‚’è¦‹ã‚‹ã¨ã‚ã‹ã‚‹ã‚ˆã†ã«ã€è¨ºæ–ãƒ†ã‚¹ãƒˆã®éƒ¨åˆ†ã¯ã™ã¹ã¦ http://0xcc.net/binhacks/quiz.js ã§è¡Œã‚ã‚Œã¦ã„ã¾ã™ã€‚ printQuestions() ã§ã¯ document.write() ã§å®‰æ˜“ã«HTMLã‚’å‡ºåŠ›ã—ã¦å•é¡Œã‚’è¡¨ç¤ºã—ã¦ã„ã¾ã™ã€‚å•é¡Œã¯æ¬¡ã®ã‚ˆã†ãª JSON ãƒ‡ãƒ¼ã‚¿ã§ã™ã€‚ questions =[ { "question": "nmã§è¡¨ç¤ºã•ã‚Œã‚‹ã‚·ãƒ³ãƒœãƒ«ã®å‰ã®æ–‡å—(ã‚·ãƒ³ãƒœãƒ«ã‚¯ãƒ©ã‚¹)ã¨ã—ã¦ä½¿ã‚ã‚Œã¦ã„ãªã„ã®ã¯ã©ã‚Œã§ã—ã‚‡ã†ã‹?", "cand
matsutakegohan1 2008/06/30
json

programming

tips

unix

Ajax

JavaScript
ãƒªãƒ³ã‚¯
ãƒã‚¿ã•ã‚“ã®ãƒ–ãƒã‚° : Javascriptã«ã‚ˆã‚‹å¤§è¦æ¨¡é–‹ç™ºã®è¦šãˆæ›¸ã
æœªã ã«åŠå¹´å‰ã®ã‚¨ãƒ³ãƒˆãƒªã«ãƒ–ã‚¯ãƒžã•ã‚Œã‚‹ã¿ãŸã„ãªã®ã§ã€ã‚‚ã†å°‘ã—javascriptã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ã‚‹ã€‚ ä»Šå›žã¯å¤§è¦æ¨¡åŒ–é–‹ç™ºã«ãŠã‘ã‚‹Javascriptã®æ³¨æ„ç‚¹ã¨ã‹ãã†ã„ã†ã®ã€‚å½“ã¦ã¯ã¾ã‚‰ãªã„ç’°å¢ƒã®æ–¹ã‚‚ã„ã¾ã™ã€‚(ã—ã‹ã‚‚åŸºæœ¬çš„ãªäº‹ã ã‚‰ã‘ã§å¤§ã—ãŸã“ã¨ã¯æ›¸ã„ã¦ãªã„ã§ã™) ã»ã¼ãƒªãƒƒãƒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’ä¸»ç›®çš„ã¨ã—ãŸjavascripterã¨ã‚³ãƒ¼ãƒ‰ã‚’å¯¾è±¡ã¨ã—ã¾ã™ã€‚ ã©ã¡ã‚‰ã‹ã¨ã„ã†ã¨ã€ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’æä¾›ã™ã‚‹å´ã®è¦–ç‚¹ã‹ã‚‰ 1.ãƒã‚°ã‚’å‡ºåŠ›ã›ã‚ˆ ã‚ãªãŸãŒæ›¸ã„ãŸã‚³ãƒ¼ãƒ‰ã¯é…ã„ã€ã¨å¿…ãšè¨€ã‚ã‚Œã¾ã™ã€‚ãªã®ã§è¨€ã‚ã‚Œã‚‹å‰ã‹ã‚‰ã€è‡ªåˆ†ã®æ›¸ã„ãŸã‚³ãƒ¼ãƒ‰ã®å‡¦ç†æ™‚é–“ã‚’ãƒã‚°ã™ã‚‹ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ æ¬¡ã®ã‚ˆã†ãªå‡¦ç†æ™‚é–“ã‚’è¨ˆæ¸¬ã™ã‚‹ãƒã‚¬ãƒ¼ã‚’ä½œã‚Šã¾ã™ã€‚ var TraceLog = function (){ this.startTime = -1; var outer = document.getElementById('_outer'); if(oute
matsutakegohan1 2008/06/30
debug

howto

javascript

development

json

learning

programming

reference
ãƒªãƒ³ã‚¯
1