Amon2ã¨JSONã¨ã‚»ã‚ュリティ - tokuhirom's blog[1]http://d.hatena.ne.jp/ockeghem/20110907/p1[2]http://www.atmarkit.co.jp/fcoding/articles/webapp/05/webapp05a.html[3] http://msdn.microsoft.com/ja-jp/asp.net/ff713315[4] http://labs.cybozu.co.jp/blog/kazuho/archives/2007/01/cross-site_including.phpã‚ãŸã‚Šã‚’よんã§ã€JSON ã¨ã‚»ã‚ュリティã«ã¤ã„ã¦ã‹ã‚“ãŒãˆã¦ã¿ãŸã€‚ ã“ã“ã§ã€æœ‰åŠ¹ã¨ã•ã‚Œã¦ã„る対ç–ã®ã†ã¡ while(1); ã‚’å…ˆé ã«ä»˜ä¸Žã™ã‚‹POST ã§ã™ã¹ã¦å‡¦ç†ã™ã‚‹ã¨ã„ã£ãŸã‚ãŸã‚Šã¯ã€RESTful ã§ãªã„ã—ã€BK æ„ŸãŒã²ã©ã„ã¨ã„ã†ã‹æœ¬è³ªçš„ã§ã¯ãªã„ã®ã§ã§ãã‚‹ã ã‘ã‚„ã‚ŠãŸããªã„。 ã¾ãŸã€Amon2 ã§ã¯äº’æ›
PHPã®ã‚¤ã‚¿ã„入門書をèªã‚“ã§Ajaxã®XSSã«ã¤ã„ã¦æ¤œè¨Žã—ãŸ(3)～JSONç‰ã®æƒ³å®šå¤–èªã¿å‡ºã—ã«ã‚ˆã‚‹æ”»æ’ƒï½ž - ockeghem(徳丸浩)ã®æ—¥è¨˜
9/5（月）ã®memo - F&R:ITmemo
Mundane Life: JSON ã‚’ eval ã™ã‚‹å ´åˆ
http://homepage.mac.com/yuji_okamura/iSawIt/archives/2010/01/entry_2448.html
JSON U+2028, U+2029 å•é¡Œå›žé¿æ–¹æ³•
U+2028 㨠U+2029 ㌠JSON データã«å«ã¾ã‚Œã¦ã„る㨠JavaScript ã® eval ã§ã‚¨ãƒ©ãƒ¼ã«ãªã‚‹
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠- ã¯ã¦ãªã®å‘ŠçŸ¥
freeml（フリーエムエル）｜新ã—ã„生活をã¯ã˜ã‚ã‚‹ç¾…é‡ç›¤
SaaSã«æ½œã‚€è„…å¨ã€ŒJSONãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã€ï¼ŒIPSã§æƒ…å ±æ¼ãˆã„対ç–ã‚’
JSONデータをクãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚¢ã‚¿ãƒƒã‚¯ã‹ã‚‰å®ˆã‚‹ãŸã‚ã«while(1)を使ã†ã“ã¨ã‚’ã‚„ã‚ã¾ã—ょㆠ- hoshikuzu | star_dust ã®æ›¸æ–Ž
Twitter ã§ãƒ™ãƒ¼ã‚·ãƒƒã‚¯èªè¨¼è¶Šã—ã«ãªã«ã‹ã‚„ã‚‹ã®ã¯æŽ§ãˆãŸæ–¹ãŒè‰¯ã„ - nothing but trouble
[Think IT] 第1回：JSONã£ã¦ãªã«ã‚‚ã®ï¼Ÿ (1/3)
ã“ã“ãŒå±ãªã„ï¼Web2.0ã®ã‚»ã‚ュリティ 記事一覧 | gihyo.jp
https://labs.cybozu.co.jp/blog/kazuho/archives/2007/01/crosssite_security.php
https://labs.cybozu.co.jp/blog/kazuho/archives/2007/01/cross-site_including.php
JavaScript Hijack/JSON Hijackã®ãœã„弱性
ãƒã‚¤ãƒŠãƒªã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºå½¢å¼ã€ŒMessagePack〠- Blog by Sadayuki Furuhashi
ã‚‚ã†ä¸€åº¦ã€ã¡ã‚ƒã‚“ã¨JSON入門 - 檜山æ£å¹¸ã®ã‚マイラ飼育記 (ã¯ã¦ãªBlog)
JSONã®XSS脆弱性を修æ£--Ruby on Rails 1.2.5
{{#tags}}- {{label}}
{{/tags}}