JSON SQL脆弱性ã¨ã€ãã“ã‹ã‚‰å¦ã¶ã‚»ã‚ュアプãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã®åŽŸå‰‡ - YAPC::Asia Tokyo 2014The JSON SQL Injection Vulnerability, SQL::QueryMaker, and the Lessons Learned JSON SQLインジェクション脆弱性ã¯ã€SQL::Makerã‚’ã¯ã˜ã‚ã¨ã™ã‚‹å¤šãã®SQLビルダモジュールã«ãŠã‘ã‚‹è¨è¨ˆãƒŸã‚¹ã®çµæžœã€è¿‘å¹´ã®JSONã‚’å–り扱ã†Webアプリケーションã«ãŠã„ã¦æ³¨æ„ãŒå¿…è¦ã¨ãªã£ãŸå•é¡Œã§ã™ã€‚ ã“ã®ãƒˆãƒ¼ã‚¯ã§ã¯ã€ JSON SQLインジェクション脆弱性ã®è§£èª¬ æ–°è¦é–‹ç™ºã•ã‚ŒãŸSQL::QueryMakerモジュールã¨ã€SQL::Makerã«ãŠã‘る脆弱性ã®å›žé¿ç– ã“ã®ã‚ˆã†ãªè„†å¼±æ€§ã‚’産ã¾ãªã„ã‚»ã‚ュアプãƒã‚°ãƒ©ãƒ ã®æŒ‡é‡ ã¨ã„ã£ãŸè¦ç´ ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ Explains JSON SQL Injection Vulnerability, the mitigations, and the lessons being learned
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠- ã¯ã¦ãªã®å‘ŠçŸ¥
JAWS-UG三都物語ã§ã€Œãã‚ãã‚Javaã¿ãªãŠã—ã¦ã‚‚ãˆãˆã‚“ã‚„ã§ã€ã¨ã„ã†ãƒ—レゼンã—ã¾ã—㟠- ãã—ã ã®Hatena
AWS News Blog
Facebookã®æ•°åƒå°è¦æ¨¡ã®memcachedé‹ç”¨ã«ã¤ã„㦠- ゆã†ã†ãブãƒã‚°
{{#tags}}- {{label}}
{{/tags}}