[B! dom] ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ockeghem id:ockeghem

domã«é–¢ã™ã‚‹ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

DOM APIã¨innerHTMLã¯ç‰ä¾¡ã§ã¯ãªã„
æœ€è¿‘ã€å¾³ä¸¸æœ¬ã‚’ã˜ã‚ã˜ã‚èªã‚“ã§ã„ã‚‹ã®ã§ã™ãŒã€DOM based XSSã®è©±ãŒæ›¸ã„ã¦ã‚ã£ãŸã®ã§ã€å°‘ã—è¨€åŠã—ã¦ãŠã“ã†ã¨æ€ã„ã¾ã™ã€‚ å¾³ä¸¸æœ¬ã‹ã‚‰å¼•ç”¨ DOM based XSSã¨å‘¼ã°ã‚Œã‚‹XSSãŒã‚ã‚Šã¾ã™ã€‚ã“ã‚Œã¯ã€JavaScriptã«ã‚ˆã‚Šã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã§è¡¨ç¤ºå‡¦ç†ã™ã‚‹ç®‡æ‰€ãŒã‚ã‚Šã€ãã“ã«è„†å¼±æ€§ãŒã‚ã‚‹å ´åˆã®XSSã§ã™ã€‚ ã‚µãƒ³ãƒ—ãƒ«æ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ <script> document.write(unescape(location.href)); </script> ã“ã„ã¤ã‚’é©å½“ãªãƒ•ã‚¡ã‚¤ãƒ«åã§ä¿å˜ã—ã¦ã€domxss.html#<script>alert("hello")<script>ãªã©ã®URLã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨alertãŒè¡¨ç¤ºã•ã‚Œã‚‹ã¯ãšã§ã™ã€‚ä»»æ„ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œå¯èƒ½ãªçŠ¶æ…‹ã£ã¦ã“ã¨ã§ã™ãã€‚ä»»æ„ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œå¯èƒ½ã£ã¦ã“ã¨ã¯ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚¯ãƒƒã‚ãƒ¼ç›—ã¿æ”¾é¡Œã§ã€ä»–äººã«æˆã‚Šæ¸ˆã¾ã—ã¦è²·ã„ç‰©ã§ãã¡ã‚ƒã£ãŸã‚Šã™ã‚‹ãƒ¬ãƒ™ãƒ«ã§ã™
ockeghem 2011/06/05
#wasbook ã«è¨€åŠã„ãŸã ãã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ã€ŽJavaScriptã«ã ã£ã¦XSSã‚’ä½œã‚Šè¾¼ã‚€å¯èƒ½æ€§ãŒã‚ã‚‹ã€‚DOM based XSSã¯ã‚‚ã†å°‘ã—å‘¨çŸ¥ã•ã‚Œã‚‹ã¹ãã€<æœ¬å½“ã«ãã†ã§ã™ã

security

javascript

dom

wasbook
ãƒªãƒ³ã‚¯
å¾³ä¸¸æµ©ã®æ—¥è¨˜ - iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶2.0ã®XMLHttpRequestã§POSTãƒ‡ãƒ¼ã‚¿ã®æ‰±ã„ãŒå›°é›£ã«ãªã£ãŸ
_iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶2.0ã®XMLHttpRequestã§POSTãƒ‡ãƒ¼ã‚¿ã®æ‰±ã„ãŒå›°é›£ã«ãªã£ãŸ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶2.0ã®åˆ¶é™ã«ã‚ˆã‚Šã€XMLHttpRequestã§POSTãƒ¡ã‚½ãƒƒãƒ‰ã®åˆ©ç”¨ãŒå›°é›£ã«ãªã£ã¦ã„ã‚‹ã“ã¨ã‚’ç¢ºèªã—ãŸã®ã§å ±å‘Šã™ã‚‹ã€‚ iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶2.0ã®JavaScriptã‚’è©¦ã—ã¦ã„ã¦ã€POSTãƒ¡ã‚½ãƒƒãƒ‰ã§ãƒ‡ãƒ¼ã‚¿ãŒæ¸¡ã›ã¦ã„ãªã„ã“ã¨ã«æ°—ãŒã¤ã„ãŸã€‚ä»¥ä¸‹ã®ã‚ˆã†ãªãƒ—ãƒã‚°ãƒ©ãƒ ã§æ¤œè¨¼ã—ã¦ã¿ãŸã€‚ ã€post.htmlã€‘ <html> <head> <script> function test() { try { var requester = new XMLHttpRequest(); requester.open('POST', '/dumppost.php', true); requester.onreadystatechange = function() { if (requeste
ockeghem 2010/01/18
â†‘id:hasegawayosuke ãã®æ–¹æ³•ã ã¨ã€ãƒšãƒ¼ã‚¸å…¨ä½“ãŒSUBMITå…ˆã«é·ç§»ã—ã¦ã—ã¾ã„ã¾ã›ã‚“ã‹?

mobile

javascript

dom

imode

ã‚»ãƒ«ã‚¯ãƒž
ãƒªãƒ³ã‚¯
XMLHttpRequest Level 2 ã¨ wedata ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ— - os0x.blog
http://ss-o.net/json/ ä»¥ä¸‹ã«å¯¾ã—ã¦ã€.htaccessã§ Header append Access-Control-Allow-Origin: *ã¨ã„ã†æŒ‡å®šã‚’ã—ã¦ã€ãƒ˜ãƒƒãƒ€ãƒ¼ã«Access-Control-Allow-Originã‚’ã¤ã‘ã¦ã„ã‚‹ã®ã§ã€(*ã¯ã™ã¹ã¦ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’è¨±å¯) http://ss-o.net/json/wedataAutoPagerize.json http://ss-o.net/json/wedataLDRize.json ãªã©ã®ãƒ•ã‚¡ã‚¤ãƒ«ã«ã¤ã„ã¦ã¯Firefox3.5ã€Safari4ã€Google Chrome 2ã€IE8*1ãªã©ã®ãƒ–ãƒ©ã‚¦ã‚¶ã§ã¯ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§XMLHttpRequestã‚’æŠ•ã’ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã‚µãƒ³ãƒ—ãƒ«ã‚³ãƒ¼ãƒ‰ javascript:(function(){ var xhr=window.XDomainRequest?
ockeghem 2009/06/17
ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³

crossdomain

dom

javascript

xmlhttprequest
ãƒªãƒ³ã‚¯
JavaScriptã§HTMLã‚’ãƒ€ã‚¤ãƒŠãƒŸãƒƒã‚¯ã«æ›¸ãæ›ãˆã‚‹ã€€å‰ç·¨
ã‚‚ã¨ã‚‚ã¨ã¯å˜åœ¨ã—ãªã‹ã£ãŸã‚¿ã‚°è¦ç´ ã‚’æ–°ãŸã«è¿½åŠ ã—ãŸã‚Šã€å¤‰æ›´ã€å‰Šé™¤ã™ã‚‹ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’å¦ã¶ã€‚ã“ã†ã—ãŸå‡¦ç†ãŒã§ãã‚‹ã®ã¯DOMãªã‚‰ã§ã¯ã®é…åŠ›ã ã€‚ æ—§æ¥ã®DHTMLã®æ‰‹æ³•ã§ã¯ã€JavaScriptã‹ã‚‰æ“ä½œã§ãã‚‹HTMLè¦ç´ ã«ã¯é™ã‚ŠãŒã‚ã‚Šã¾ã—ãŸãŒã€DOMã§ã¯ã€HTMLä¸Šã®ã‚ã‚Šã¨ã‚ã‚‰ã‚†ã‚‹è¦ç´ ã‚’è‡ªç”±è‡ªåœ¨ã«èªã¿å–ã£ãŸã‚Šã€æ›¸ãæ›ãˆã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚æœ¬é€£è¼‰ã§ã¯ã€ä¸»ã«DOM Level 1ã§è¦å®šã•ã‚Œã¦ã„ã‚‹æ‰‹æ³•ã‚’ä½¿ã„ã€JavaScriptã§ã©ã®ã‚ˆã†ã«HTMLä¸Šã®è¦ç´ ã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã®ã‹ã€ãã—ã¦ã€ãã‚Œã‚’ã©ã†ã‚„ã£ã¦æ›¸ãæ›ãˆã‚‹ã®ã‹ã‚’è©³ã—ãè§£èª¬ã—ã¾ã™ã€‚ã“ã‚Œã«ã‚ˆã‚Šã€JavaScriptã‹ã‚‰HTMLè¦ç´ ã‚’æ‰‹ã«å–ã‚‹ã‚ˆã†ã«æ“ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ DOMã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã§ã¯ã€HTMLã‚’JavaScriptã‹ã‚‰è‡ªç”±è‡ªåœ¨ã«æ›¸ãæ›ãˆã‚‰ã‚Œã‚‹ç‚¹ãŒå¤§ããªé…åŠ›ã§ã™ã€‚ã“ã‚Œã¾ã§ã€HTMLã«å˜åœ¨ã™ã‚‹è¦ç´ ã®å‚ç…§æ–¹æ³•ã‚„å±žæ€§ã®æ‰±ã„æ–¹ã‚’å¦ã‚“ã§ãã¾ã—ãŸãŒã€
ockeghem 2008/07/03
dom

javascript
ãƒªãƒ³ã‚¯
1