Bug #49785 htmlspecialchars() should check byte sequence more strictly - A Day in Serenity @ kenjis岩本ã•ã‚“ã¨ãã®ä»–ã„ã‚ã„ã‚ãªæ–¹ãŒã€PHPã®htmlspecialchars()関数ã«ã‚ã£ãŸä¸æ£æ–‡å—コードã®ãƒã‚§ãƒƒã‚¯ãŒç”˜ã„ã¨ã„ã†ã‚»ã‚ュリティãƒã‚°ã‚’ä¿®æ£ã—ãŸãŠè©±ã€‚ 今回ã€PHPコミュニティã¯å‰²ã¨å¥å…¨ã§ã€ãƒã‚°ã‚‚割åˆç°¡å˜ã«ä¿®æ£ã•ã‚Œã¾ã—ãŸã€‚ã¨ã¯ã„ãˆã€è‹±èªžã§ãƒã‚°å ±å‘Šã™ã‚‹ã®ã¯ãªã‹ãªã‹å¤§å¤‰ãªã‚“ã§ã€å²©æœ¬ã•ã‚“ã‚„æµ·è€åŽŸã•ã‚“ã€ãŠç–²ã‚Œæ§˜ã§ã—ãŸã€‚ htmlspecialcharsã«é–¢ã™ã‚‹ç´ 敵ãªãŠçŸ¥ã‚‰ã› - 岩本隆å²ã®æ—¥è¨˜å¸³ OSS を育ã¦ã‚‹ãŸã‚ã«åƒ•ã‚‰ãŒã§ãã‚‹ã“ã¨ï½œSNS構築ã®æ‰‹å¶‹å±‹ http://co3k.org/sample/php_bugs_49785.html contributor を大切㫠- ã¾ã‚ã‚ã‚‚ htmlspecialcharsã®Shift_JISãƒã‚§ãƒƒã‚¯æ¼ã‚Œã«ã‚ˆã‚‹XSS回é¿ç– | 徳丸浩ã®æ—¥è¨˜ htmlspecialchars: å•é¡Œã‚’解決ã™ã‚‹ã«ã¯ã©ã†ã™ã‚Œã°ã‚ˆã„ã‹æ¡ˆ - ã‚‚ã®ãŒãŸã‚Š Re:htmls
PHP Snapshots
ã¯ã¦ãªãƒ–ãƒã‚° | 無料ブãƒã‚°ã‚’作æˆã—よã†
{{#tags}}- {{label}}
{{/tags}}