IBM Developer is your one-stop location for getting hands-on training and learning in-demand skills on relevant technologies such as generative AI, data science, AI, and open source.
Web 2.0ã¯ãªãåãªãããºã¯ã¼ãã§ã¯ãªããåãªãä¸éæ§ã®æµè¡ã§ããªãã®ããæ¬æ¸ã¯ããã®çç±ãæããã«ãã¾ããèè Amy Shuenã¯ãGoogleãFlickrãFacebookãã¯ããã¨ãã大å°ä¼æ¥ã®æ¤è¨¼ãéãã¦ãWeb 2.0æ¦ç¥ã§ãã¸ãã¹ã«ç«¶äºåªä½ãããããæ¹æ³ãæ示ãã¾ããWeb 2.0ã®æå±è ã§ããTim O'Reillyããæ¬æ¸ã¯ããã©ãããã©ã¼ã ã¨ãã¦ã®ã¦ã§ãããã¸ãã¹ã«ããããæå³ãå¹³æãªè¨èã§èª¬æããç§ã®ä¸»å¼µãçã«æ£ããè©ä¾¡ããåãã¦ã®æ¬ã ãï¼ãã¯ããã«ãããï¼ã¨èªãæ¸ç±ã§ããWeb 2.0ã®ãã¸ãã¹ã¹ãã©ãã¸ã¼ãç解ã»å¿ç¨ããããã¹ã¦ã®ä¼æ¥ã«ã¨ã£ã¦ãæ¬æ¸ã¯æè¯ã®åºçºç¹ã¨ãªãã§ãããã åºæ ã¯ããã« 1ç« ã¦ã¼ã¶ã価å¤ãåµã Flickrã¨éåçã¦ã¼ã¶ä¾¡å¤ï¼Collective User Valueï¼ ã¤ã³ã¿ã©ã¯ã·ã§ã³ãéãã¦ã¦ã¼ã¶ä¾¡å¤ãåµåºããFlickrã®6ã¤ã®
éºä¼åãå¹çããæ¹å¤ããã²ãã ç·¨éç 究ã®ç¬¬ä¸äººè ã§ç±³ããã¼ãç 究æã®ãã§ã³ã»ãã£ã³ä¸»ä»»ç 究å¡ã¯ãã¨ãã©åºè¡ç±ãã¸ã«ç±ã®æ©æ診ææè¡ãéçºãããã¨ãæããã«ãããã¦ã¤ã«ã¹ã®éºä¼æ å ±ãâ¦ç¶ã åç²¾åµã®ã²ãã ç·¨éããªãåé¡ãåªçææ³ã¨è¡¨è£ä¸ä½ ï¼»ææä¼å¡éå®ï¼½ ã²ãã ç·¨éé£åã販売容èªãæ¡ä»¶æºããã°å®å ¨å¯©æ»ãªã ï¼»ææä¼å¡éå®ï¼½
æï¼Ryan Naraineï¼Special to ZDNet.comï¼Â ç¿»è¨³æ ¡æ£ï¼ç³æ©åä¸é 2008-05-20 19:16 CNET News.comã®Martin LaMonicaæ°ã¯æè¿ãZoho Writerã«æ å ±æ¼æ´©ã®èå¼±æ§ããããã¨ãå¶ç¶çºè¦ããããã®ãã©ã¦ã¶ãã¼ã¹ã®ã¯ã¼ããã½ããã¯ãWeb 2.0ã®æ©æå°å ¥è ã«ã¯æåãªãã®ã ã 詳細ã¯æ¬¡ã®ããã«ãªã£ã¦ããã ç±³å½æé5æ19æ¥ã®æãç§ã¯Zoho Writerã®ãã¼ã¸ã«è¡ãããsoccerããæ¤ç´¢ãããæ¤ç´¢çµæã«ã¯ç§ã®2件ã®ææ¸ãå«ã¾ãã¦ãããããã®ä»ã«ç§ã®ç¥ããªã人ãä½æãã7件ã®ææ¸ãè¦ã¤ãã£ãã ç§ã¯ãã®åé¡ãZohoã®æè¡ã¨ãã³ã¸ã§ãªã¹ãã«å ±åããå½¼ã¯ãã®åé¡ãè¿ éã«å社ã®æè¡ãã¼ã ã«ä¼ãããä½åãããã¨ããè¡ãããå¾ãZohoã®ãã¼ã ã¯ãã°ãçºè¦ããä¿®æ£ããã ã»ã»ã»Zohoã®åèªã®ããã«è¨ãã°ãå社ã®äººãã¡ã¯è¬ç½ª
ã¤ãæè¿ï¼ããiframeãã¿ã°ã«ã¤ãã¦ï¼ä¾ãã°ãdivãã¿ã°ã¨è¦åãããã人ã¯ã©ããããããã®ããã¨ãã質åãåãããçè ãæ¨æ¸¬ããã¨ããï¼è¦åãããã人ã¯ããå¤ãã¯ãªããæ®éã®ã¦ã¼ã¶ã¼ã«ã¨ã£ã¦ã¯ï¼iframeã¯ç±³ã¢ããã«ã®æ°è£½åã®ããã«ããèããããããããªãããã¡ãããã®ãããªé¡ã®ãã®ã§ã¯ãªãã人æ°ã®ããã½ã¼ã·ã£ã«ã»ãããã¯ã¼ãã³ã°ã»ãµã¼ãã¹ï¼SNSï¼ã§ã¯ï¼ã»ã¼ä¾å¤ãªãã¦ã¼ã¶ã¼ã®ãããã£ã¼ã«ãé²è¦§ããã¨iframeã®ã¿ã°ãã³ã¼ããåãè¾¼ã¾ãã¦ããã Web 2.0ã®ã»ã¼ã«ã¹ã»ãã¤ã³ãã¯ã¦ã¼ã¶ã¼çæã³ã³ãã³ãï¼CGMï¼ã«ããã¨ããæè¦ããããï¼ããã«ã¯çè ã大ãã«è³æã ããã ãéè¦ãªã®ã¯ï¼ãã®ã³ã³ãã³ããã誰ãï¼ã©ã®ããã«çæããã®ããã¨ãããã¨ã ãã»ã¨ãã©ã®å ´åï¼çãã¯ãã³ãã¼ã»ã¢ã³ãã»ãã¼ã¹ããã¨ãªãããã®ä»¶ã«é¢ãã¦ï¼ããå°ã詳ãã説æãããã SNSã®äººæ°ãé«ã¾ãã«ã¤ãï¼ãªã³ã©ã¤
被害ç¯å²ã®æ¡å¤§ ä»åã¯æçµåã¨ãããã¨ã§ãWebã®ã»ãã¥ãªãã£ãã©ã®ããã«å¤åãã¦ããã®ããã¾ãä»å¾ã©ã®ããã«å¤åãã¦ããã®ãã¨ãããã¨ãèãã¦ã¿ã¾ãã Web2.0ã¨ããè¨èãçã¾ãã¦ããããããããªãã®ãWebãç¨ãã¦æä¾ãããããã«ãªã£ã¦ãã¾ãããå¾æ¥ã®ããã«ããã©ã¦ã¶ãèµ·åãã¢ãã¬ã¹ãæã¡è¾¼ã¿ãWebãµã¼ãã«ã¢ã¯ã»ã¹ããã¨ããå½¢æ ã ãã§ã¯ãªããªã£ã¦ãã¾ãããã¾ãã¾ãªå ´é¢ã§Webã使ãããããã«ãªã£ã¦ãããä¸ã«ã¯ã¦ã¼ã¶ãæ°ã¥ããªãæã§ä½¿ããã¦ãããã¨ãããã¾ããããã§ã¯ãè¦è½ã¨ãããã¡ãªé¨åãä¸å¿ã«ããã¤ãä¾ãæãã¦èª¬æãã¦ããã¾ãã ãã¹ã¯ãããã¨ã®é£æº Googleãã¹ã¯ãããï¼å³1ï¼ã¯ãã¦ã¼ã¶ã®PCå ã®ãã¡ã¤ã«ããããã¯ã¼ã¯å ±æããã¦ãããã¡ã¤ã«ãæ¤ç´¢ã§ããã½ããã¦ã§ã¢ã§ããããã«ããGoogleãæã¤å¼·åãªæ¤ç´¢æ©è½ãã¦ã¼ã¶PCå ã®ãã¡ã¤ã«ã«å¯¾ãã¦ãé©ç¨ãããã¨ãã§ããããã«ãª
â:å®è¡ããã Ã:å®è¡ãããªã (ãã¼ã¸ã§ã³ã¯å·çæç¹ã§ã®ææ°ç, OSã¯Windows XP) ã覧ã®ã¨ããããã©ã¦ã¶ã«ãã£ã¦ç°ãªãçµæã«ãªã£ã¦ãã¾ããHTMLã®æ§æ解æã¯ãã©ã¦ã¶ã«ãã£ã¦è§£éã®ç°ãªãé¨åãããããã解æããããªãã¨ããã®ãç¾å®ã§ããã¾ããä»å¾åãã©ã¦ã¶ããã¤ä»æ§å¤æ´ããããããããã¾ããã 次ã«ä»¥ä¸ãã覧ãã ãããæ»æè ã¯ä»¥ä¸ã®ãããªHTMLãæ¿å ¥ãã¦ãããã¨ãèãããã¾ãã <H2/onmouseover=alert('xss')>è¦åºã</H2> <H2 onmouseover=alert('xss')>è¦åºã</H2> <H2 style="{javascript:expression(alert('xss'))}">è¦åºã</H2> <H2 style="{a:expression(alert('xss'))}">è¦åºã</H2> <H2 style="{ja
ããã·ã¥ã¢ãããµã¤ãã®ä»çµã¿ ååã¾ã§ãWebAPIãJSONPã®ã»ãã¥ãªãã£ã«ã¤ãã¦è¦ã¦ãã¾ãããããããWebAPIãJSONPãæ´»èºããå ´ã¨ãããã®ããããã·ã¥ã¢ããã§ãã ããã·ã¥ã¢ããã¨ã¯ãè¤æ°ãµã¤ãã®æ å ±ãçµã¿åããã¦1ã¤ã®ãµã¼ãã¹ãæä¾ãããã¨ã§ãæ°ããªä¾¡å¤ãçã¿åºããã¨ã§ãããã¨ãã°ãå°å³æ å ±ã¨ä¸åç£æ å ±ãçµã¿åããããã¨ã§ãè¦è¦å¹æã®é«ãä¸åç£æ¤ç´¢ãµã¼ãã¹ãæä¾ãããã®ãªã©ãããã¾ãã WebAPIã¨ããå½¢ã§ãæ å ±ã«ã¢ã¯ã»ã¹ããããã®ã¤ã³ã¿ã¼ãã§ã¼ã¹ãæä¾ããä¼æ¥ãå¢ãããã¨ã§ãç°¡åã«ããã·ã¥ã¢ãããµã¤ããä½ããã¨ãã§ããããã«ãªãã¾ããã ããã§ã¯ã¾ããããã·ã¥ã¢ãããµã¤ãã®ä»çµã¿ã説æãã¾ãã å³1ãããã·ã¥ã¢ãããµã¤ãã®ã¤ã¡ã¼ã¸ ããã·ã¥ã¢ãããµã¤ããæ§æããå ã¨ãªãæ å ±ãæä¾ãããµã¤ããã³ã³ãã³ããããã¤ããããã·ã¥ã¢ããã«ãã£ã¦ä½ããããµã¤ãã®ãã¨ãããã·ã¥ã¢ã
ç±³å½æé8æ7æ¥ã«éå¬ãããLinuxWorldã§ãSPI Dynamicã®ã·ãã¢ã»ãã¥ãªãã£ã¨ã³ã¸ãã¢Matt Fisheræ°ã¯ãWeb 2.0ã®èå¼±æ§ã«é¢ãã¦æ¼èª¬ãããBlack Hatã«ã¦ãååã®Billy Hoffmanæ°ããã³Brian Sullivanæ°ãå é±ææããç¹ã¨å¤§ããå¤ãããªããã®ã®ãFisheræ°ã®æ¼èª¬ã§ã¯ããã ã®ãã¹ã¯ããããã©ã¦ã¶ã®ãããªãã¼ã«ã®ã¿ãç¨ãã¦ãç¯ç½ªè ããªã³ã©ã¤ã³ã§ä½ããªãå¾ãã®ããè¤æ°ã®æ°ããªä¾ãç´¹ä»ããããéå¶å©å£ä½MITREã«ããã¨ã容æã«ä»æããããã¨ãããã¨ããããã¯ãã¹ãµã¤ãã¹ã¯ãªããã£ã³ã°æ»æããç¾å¨æ大ã®è å¨ã¨ãªã£ã¦ããã Fisheræ°ã¯ç¹ã«ãã½ã¼ã·ã£ã«ãããã¯ã¼ãã³ã°ãµã¤ãï¼SNSï¼ã®å±éºæ§ãææãããSNSã¯ã¦ã¼ã¶ã¼ã³ã³ãã³ãã§æãç«ã£ã¦ãããããã¦ã¼ã¶ã¼ãHTMLã³ã¼ããèªç±ã«ã¢ãããã¼ãã§ãã¦ãã¾ãããããã»ã¨ãã©ã®ã±ã¼ã¹ã§
å®ã¯ãAjaxã®ã¦ã©ã«ããåç®ãããï¼Web 2.0ã§å¤ããWebããã°ã©ãã³ã°ã®å¸¸èï¼1/5 ãã¼ã¸ï¼ è¦ãç®ã«ã¤ã³ãã¯ãã大ããAjaxå©ç¨ã®Webã¢ããªã±ã¼ã·ã§ã³ããããããã®è¦ãç®ãæ¯ããè¦ã¨ãªããã®ã¯ãèå¾ã«ããæçãªæ å ±å¦çã¨æ´»ç¨æ¹æ³ã ãAjaxã®ã¤ã³ãã¯ãã«è² ããªãWebã¢ããªã¯ã©ã®ããã«ä½ãããã®ãï¼ ãã®ãªã³ã©ã¤ã³ã»ã ãã¯PlusãWeb 2.0ã§å¤ããWebããã°ã©ãã³ã°ã®å¸¸èãã§ã¯ãããã¾ã§ã«Ajaxã®æ¦è¦ï¼ç¬¬1åï¼ããçºå±ç³»ã¨ãã¦ã©ã®ãããªåãçµã¿ããã®ãï¼ç¬¬2åï¼ãããã¦ãå¹ççãªçµã¿è¾¼ã¿æ¹æ³ã®ä¸ã¤ã¨ãã¦JSONã¨å¼ã°ãããã¼ã¿å½¢å¼ã®ããåãï¼ç¬¬3åï¼ã«ã¤ãã¦è§£èª¬ããã ãã®ä¸é£ã®ç¹éãèªããã¨ã§ãããã°ã©ãã³ã°ãã¦ãã¦ãä¸ããåã¾ã§ãã¹ã¦ãå¦ã¹ãã»ã©ã®ããªã¥ã¼ã ã¯è©°ãè¾¼ããªãããããã§ãæä½éæ¼ããã¦ããã¹ããã¤ã³ããç解ã§ããã¯ãã ãä»åã®è¨äºã§ãã¼ãã¨ãªãã®
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}