[B! xss] muamqmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

muamqm id:muamqm

xssã«é–¢ã™ã‚‹muamqmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰é–‹ç™ºã®ãŸã‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ | ç¬¬1å›ž XSSã®å‚¾å‘ã¨å¯¾ç–
ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰é–‹ç™ºã®ãŸã‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ç¬¬1å›ž XSSã®å‚¾å‘ã¨å¯¾ç– æœ¬ã‚·ãƒªãƒ¼ã‚ºã§ã¯ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã®é–‹ç™ºã«é–¢ä¿‚ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ã€ç†è§£ã‚’æ·±ã‚ã¾ã™ã€‚ç¬¬1å›žç›®ã¯XSSï¼ˆã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼‰ã§ã™ã€‚å®Ÿè£…å¤±æ•—ä¾‹ã‚’æŒ™ã’ã¤ã¤ã€å¯¾ç–ã®ãƒã‚¤ãƒ³ãƒˆã‚’è§£èª¬ã—ã¾ã™ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã®å•é¡Œï¼Ÿ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã‚ã‚‹ãƒŸã‚¹ã¯ã€ŒçŸ¥ã‚‰ãªã‹ã£ãŸã€ã§ã¯ã™ã¾ã•ã‚Œãªã„å ´åˆãŒã€å¾€ã€…ã«ã—ã¦ã‚ã‚Šã¾ã™ã€‚ ã¡ã‚‡ã£ã¨ã—ãŸãƒŸã‚¹ã§ãƒ—ãƒã‚°ãƒ©ãƒ ã«ãƒã‚°ã‚’ä½œã£ã¦ã—ã¾ã„ã€ã‚µãƒ¼ãƒ“ã‚¹ãŒä¸€éƒ¨å‹•ã‹ãªããªã£ãŸã¨ã—ã¦ã‚‚ç¨‹åº¦ã«ã‚‚ã‚ˆã‚Šã¾ã™ãŒã€ã™ãã«ä¿®æ£ã™ã‚Œã°ä¸€éƒ¨ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å°‘ã—ä¸ä¾¿ã‚’ã‹ã‘ã¦ã—ã¾ã†ç¨‹åº¦ã§ã™ã‚€ã§ã—ã‚‡ã†*ã€‚ *æ³¨ï¼šã‚µãƒ¼ãƒ“ã‚¹é‹å–¶ ã“ã®è¨˜äº‹ã§ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®æŠ€è¡“çš„ãªå´é¢ã‚’æ‰±ã„ã¾ã™ã€‚ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä¸ä¾¿ã‚’ã‹ã‘ã¦ã—ã¾ã£ãŸã“ã¨ã«å¯¾ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹æä¾›å´ã®å€«ç†çš„å•é¡Œã«ã¤ã„ã¦ã¯ãã®ã¤ã©è¨€åŠã¯ã—ã¾ã›ã‚“ãŒã€ã“ã‚Œã‚‰ã®å´é¢ã‚’è»½è¦–ã™ã¹ãã§ãªã„ã“ã¨ã¯ã„ã†ã¾ã§ã‚‚ã‚ã‚Šã¾ã›ã‚“ã€‚
muamqm 2014/11/16
xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

php

javascript
ãƒªãƒ³ã‚¯
çŸ¥ã£ã¦ã„ã‚Œã°æããªã„ã€XMLHttpRequestã«ã‚ˆã‚‹XSSã¸ã®å¯¾å¿œæ–¹æ³•
çŸ¥ã£ã¦ã„ã‚Œã°æããªã„ã€XMLHttpRequestã«ã‚ˆã‚‹XSSã¸ã®å¯¾å¿œæ–¹æ³•ï¼šHTML5æ™‚ä»£ã®ã€Œæ–°ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚¨ãƒã‚±ãƒƒãƒˆã€ï¼ˆ3ï¼‰ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ é€£è¼‰ç›®æ¬¡ çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€‚ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã®ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚å‰å›žã¯ã€åŒä¸€ã‚ªãƒªã‚¸ãƒ³ãƒãƒªã‚·ãƒ¼ã‚’çªç ´ã™ã‚‹æ”»æ’ƒã®ä»£è¡¨çš„äº‹ä¾‹ã§ã‚ã‚‹XSSã«ã¤ã„ã¦ã€ç‰¹ã«DOM based XSSã¨å‘¼ã°ã‚Œã‚‹ã‚‚ã®ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã—ãŸã€‚ä»Šå›žã¯ãã®ç¶šãã¨ã—ã¦ã€XMLHttpRequestã«ã‚ˆã‚‹XSSã‚’è§£èª¬ã—ã¾ã™ã€‚ XHR Level 2ã«ã‚ˆã‚‹ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã®ã‚³ãƒ¼ãƒ‰æŒ¿å…¥ã«ã‚ˆã‚‹XSS å¾“æ¥ã€XMLHttpRequestï¼ˆä»¥ä¸‹ã€XHRï¼‰ã¯ã€è¡¨ç¤ºã—ã¦ã„ã‚‹ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¨åŒã˜ã‚ªãƒªã‚¸ãƒ³ï¼ˆã‚ªãƒªã‚¸ãƒ³ã«ã¤ã„ã¦ã¯ç¬¬1å›žã‚’å‚ç…§ï¼‰ã¨ã—ã‹é€šä¿¡ã§ãã¾ã›ã‚“ã§ã—ãŸãŒã€ç¾åœ¨ã®ä¸»è¦ãªãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã§ã¯XHR Level 2ã¨å‘¼ã°ã‚Œã‚‹å®Ÿè£…ã«ã‚ˆã‚Šã€ã‚ªãƒªã‚¸ãƒ³ã‚’è¶…ãˆã¦é€šä¿¡ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã‚Œã¯ã€Jav
muamqm 2014/03/18
HTML5

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

javascript

xss
ãƒªãƒ³ã‚¯
jQuery 1.9 ã® $.parseHTML ã¨ã‹ãã®è¾º - ã»ã‚€ã‚‰ã¡ã‚ƒã»ã‚€ã»ã‚€
ã¾ãˆãŒã 2013/01/15 ã« jQuery 1.9 ã¨ 2.0 ãƒ™ãƒ¼ã‚¿ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ï¼Œã‚µãƒãƒ¼ãƒˆãƒ–ãƒ©ã‚¦ã‚¶ãŒã©ã†ã¨ã‹äº’æ›æ€§ãŒã©ã†ã¨ã‹ã„ã†ãŠè©±ãŒã¡ã‚‰ã»ã‚‰å‡ºã‚‹ä¸ï¼ŒjQuery 1.6.3 ã‹ã‚‰ç¶šã jQuery('ã‚»ãƒ¬ã‚¯ã‚¿ã ã¨æ€ã£ãŸã‚‰è¦ç´ ç”Ÿæˆã§ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯') å•é¡Œ ã¸ã®å¯¾å¿œã«ä¸€å¿œã®çµ‚æ¢ç¬¦ãŒæ‰“ãŸã‚ŒãŸã®ã§ã„ã‚ã„ã‚æ›¸ã„ã¦ã¿ã‚‹ï¼Ž ver 1.6.2 ä»¥å‰ jQuery ã® 1.6.2 ã¾ã§ã¯ $(String) ã¨ã—ãŸã¨ãï¼Œã€ŒString ã«ãªã‚“ã‹ï¼ˆ HTML ã®ï¼‰ã‚¿ã‚°ãŒå…¥ã£ã¦ã‚‹ã£ã½ã„ãžã€ã¨åˆ¤æ–ã™ã‚‹ã¨è¦ç´ ã‚’ç”Ÿæˆã—ï¼Œãã†ã˜ã‚ƒãªã‘ã‚Œã° CSS çš„ãªã‚»ãƒ¬ã‚¯ã‚¿ã¨ã—ã¦æŒ¯ã‚‹èˆžã†ã¨ã„ã†æ©Ÿèƒ½ãŒã‚ã‚Šã¾ã—ãŸï¼Ž å¤§æŠµã®å ´åˆï¼Œå¤§ããªå•é¡Œã¯ãªã‹ã£ãŸã®ã§ã™ã‘ã©ã‚‚ï¼Œãƒ¦ãƒ¼ã‚¶å…¥åŠ›ã‹ã‚‰ã‚»ãƒ¬ã‚¯ã‚¿ã‚’çµ„ã¿ç«‹ã¦ã‚‹ã¨ãã«å•é¡Œã«ãªã‚Šã¾ã—ãŸï¼Ž ã¨ãã« '#' ã‚’å«ã‚“ã æ–‡å—åˆ—ã§ ID ã‚»ãƒ¬ã‚¯ã‚¿ã¨ã—ã¦æŒ¯èˆžã‚ã›ã‚ˆã†ã¨ã™ã‚‹ã®ãŒå…¸åž‹çš„ã§ï¼Œãªã‹ã§ã‚‚
muamqm 2013/01/25
jquery

JavaScript

xss
ãƒªãƒ³ã‚¯
XSSã‚’æ”¾ç½®ã—ã¦ãŸã‚‰æ•°ååˆ†ã§ã‚µã‚¤ãƒˆã®ãƒ‡ã‚¶ã‚¤ãƒ³ãŒå‡ºæ¥ä¸ŠãŒã£ã¦ãŸä»¶
ä½œã£ã¦ãŸã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚²ãƒ¼ãƒ ã®é€šä¿¡éƒ¨åˆ†ã‚‰ã—ãã‚‚ã®ãŒãªã‚“ã¨ãªãå‡ºæ¥ä¸ŠãŒã£ãŸã®ã§ã€é©å½“ã«ãƒãƒ£ãƒƒãƒˆã‚‚ã©ãã‚’ä½œã‚Šä¸Šã’ã¦å…¬é–‹ã—ã¦ã¾(ã™|ã—ãŸ)ã€‚ ã“ã“ã§ã™ http://osyoyu.com/client/ ã¨ã“ã‚ã§ã€WebSocket+MessagePackã‚’ä½¿ã£ãŸé€šä¿¡ãŒå®Ÿè£…ã§ããŸã“ã¨ã§å¬‰ã—ããªã£ã¦ã€XSSå¯¾ç–ã¨ã‹å¿˜ã‚Œã¦ã¾ã—ãŸã€‚ ãã“ã«ç›®ã‚’ã¤ã‘ãŸ @kyonfuee ã•ã‚“ãŒjQueryã‚’å®Ÿè¡Œã—ã¾ãã£ã¦ãƒ‡ã‚¶ã‚¤ãƒ³ã—ã¦ãã‚Œã¾ã—ãŸ(!?) ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ï¼ï¼ before (ãŠä¸–è¾žã«ã‚‚è‰¯ã„ãƒ‡ã‚¶ã‚¤ãƒ³ã¨ã¯è¨€ãˆãªã„): ã£ã¦ã„ã†æ„Ÿã˜ã«ãªã£ã¦ã¾ã—ãŸã€‚æ°—ã¥ã‹ãªã„ã†ã¡ã«ç°¡ç´ ãªãƒšãƒ¼ã‚¸ãŒè±ªè¯ã«ãªã£ã¦ã¾ã—ãŸã€‚æ„Ÿå‹•â€¦ï¼ï¼ ã‚ã¨èª°ã æ„›ç†ã‚’backgroundã«ã—ãŸã®ã€‚æ¬¡ã‹ã‚‰ã¯ã§ãã‚Œã°ãƒãƒªã£å¨˜ã§ãŠé¡˜ã„ã—ã¾ã™ã€‚ çµè«–: XSSã¯ç©æ¥µçš„ã«æ”¾ç½®ã—ã¦è¡Œã‘ ã‚ã€æœ€çµ‚çš„ã«ã¯ em-websocket ãŒãƒã‚°ã£ã¦æ»ã‚“ã ã£ã½ã„ã®ã§, æš‡ãŒã‚ã£
muamqm 2012/10/08
ãƒ¯ãƒã‚¿ã‘ã©ç¬‘ã„ã¥ã‚‰ã„ãª

websocket

xss

jQuery

security
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
muamqm 2011/06/24
jquery

webåˆ¶ä½œ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

xss
ãƒªãƒ³ã‚¯
ä¸–é–“ã®èªè˜ã¨è„…å¨ãƒ¬ãƒ™ãƒ«ã®ã‚®ãƒ£ãƒƒãƒ—â€•â€•XSSã¯æœ¬å½“ã«å±ãªã„ã‹ï¼Ÿ
çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€å·å£ã§ã™ã€‚ã‚³ãƒ©ãƒ ã®ç¬¬6å›žã€ŒIPSã¯â€œé”æ³•ã®ç®±â€ã‹ã€ã§ã¾ã£ã¡ã‚ƒï¼‘ï¼“ï¼™ã§è¬›æ¼”ã‚’ã—ãŸãŠè©±ã‚’æ›¸ãã¾ã—ãŸãŒã€ä»Šåº¦ã¯é–¢æ±ã§ã‚„ã£ã¦ã„ã‚‹ã€Œã¾ã£ã¡ã‚ƒï¼”ï¼”ï¼•ã€ã«ãŠæ‹›ãã„ãŸã ãã€ãŠè©±ã—ã—ã¦ãã¾ã—ãŸã€‚ ã¾ã£ã¡ã‚ƒï¼”ï¼”ï¼•ã¯å‹Ÿé›†é–‹å§‹ã‹ã‚‰å®šå“¡ãŒåŸ‹ã¾ã‚‹ã¾ã§ãŒã¨ã¦ã‚‚é€Ÿãã€ä»Šã¾ã§å‚åŠ ã—ãŸã“ã¨ãŒãªã‹ã£ãŸã®ã§ã™ãŒã€ä»Šå›žã¯é‹è‰¯ãï¼ˆï¼Ÿï¼‰è¬›å¸«å´ã¨ã„ã†ã“ã¨ã§ã‚ãƒ£ãƒ³ã‚»ãƒ«å¾…ã¡ã«ãªã‚‰ãšã«å‚åŠ ã™ã‚‹ã“ã¨ãŒã§ãã¾ã—ãŸã€‚ãƒãƒƒã‚¯ã‚ªãƒ³ã®ç¦ç”°ã•ã‚“ãŒã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ECã‚µã‚¤ãƒˆæ§‹ç¯‰ã‚·ã‚¹ãƒ†ãƒ ã€ŒEC-CUBEã€ã«è„†å¼±ï¼ˆãœã„ã˜ã‚ƒãï¼‰æ€§ãŒç™ºè¦‹ã•ã‚ŒãŸéš›ã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆãƒãƒ³ãƒ‰ãƒªãƒ³ã‚°ã®ãŠè©±ã‚’ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚EC-CUBEã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¨ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆä»¥ä¸‹ã€XSSï¼‰ãŒç™ºè¦‹ã•ã‚ŒãŸã‚ã¨ã®å¯¾å¿œã®ãŠè©±ã§ã™ã€‚JSOCã§æ—¥ã€…ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã«ã‹ã‹ã‚ã£ã¦ã„ã‚‹ã„ã‚‹è‡ªåˆ†ã¨ã—ã¦ã¯ã¨ã¦ã‚‚èˆˆå‘³æ·±ã„å†…å®¹ã§ã—ãŸã€‚ æ—¥æœ¬ã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ„è˜ã¯éŽå‰°ï¼Ÿ ä»Šå›žã®ã‚ˆã†
muamqm 2009/03/27
ãµã…ãƒ¼ã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

xss
ãƒªãƒ³ã‚¯
1