[B! HTTP] okyawaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

okyawa id:okyawa

HTTPã«é–¢ã™ã‚‹okyawaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

2021å¹´ HTTPã‚„QUICã®æœ€æ–°å‹•å‘æŒ¯ã‚Šè¿”ã‚Š - ASnoKaze blog
2021å¹´ã«ã¤ã„ã¦ã€ãƒ—ãƒãƒˆã‚³ãƒ«å‘¨ã‚Šã®å‹•å‘ã‚’æŒ¯ã‚Šè¿”ã£ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ä»Šå¹´ã¯ã€å€‹äººçš„ã«ã¯æ¬¡ã®2ç‚¹ãŒãƒ›ãƒƒãƒˆãƒˆãƒ”ãƒƒã‚¯ã¨æŒ™ã’ã‚‰ã‚Œã‚‹ã¨æ€ã„ã¾ã™ã€‚ QUICã‚„HTTP/3ã‚’æ´»ç”¨ã—ãŸå¿œç”¨ç³»ãƒ—ãƒãƒˆã‚³ãƒ«ã®ä½œæ¥ãŒé€²ã‚€ ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ç³»ã®å–ã‚Šçµ„ã¿ãŒæ´»ç™ºåŒ– ãã‚Œã§ã¯ã€å€‹åˆ¥ã«è£œè¶³ã—ã¦ã„ãã¾ã™ã€‚ï¼ˆIETFã®å‹•å‘ãŒãƒ¡ã‚¤ãƒ³ã§ã™ã€‚ãªãŠã€å€‹äººçš„ã«ã‚ãƒ£ãƒƒãƒã‚¢ãƒƒãƒ—ã§ãã¦ãªã„ãƒˆãƒ”ãƒƒã‚¯ã‚‚ã‚ã‚Šã¾ã™...ï¼‰ HTTPé–¢é€£ ã¾ãšã¯ã€HTTPã§ã™ã€‚HTTP/3ã®æ¨™æº–åŒ–ãŒæ³¨ç›®ã‚’æµ´ã³ã¦ã„ã¾ã™ãŒã€HTTP/1.1ã‚„HTTP/2ãªã©ã‚‚æ”¹å®šä½œæ¥ãŒè¡Œã‚ã‚Œã¦ãŠã‚Šã¾ã™ã€‚ã‚ã‚ã›ã¦ã€HTTPã‚»ãƒžãƒ³ãƒ†ã‚£ã‚¯ã‚¹ã¯å„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‹ã‚‰ç‹¬ç«‹ã—ã€å„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‹ã‚‰å‚ç…§ã•ã‚Œã‚‹å½¢ã¨ãªã‚Šã¾ã—ãŸã€‚ãã‚Œãžã‚ŒRFCå‡ºç‰ˆã®æœ€çµ‚æ®µéšŽã¨ãªã£ã¦ã„ã¾ã™ã€‚ æ›¸ã„ãŸè¨˜äº‹ã¯ã“ã“ã‚‰ã¸ã‚“ HTTPã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã¤ã„ã¦ã€ç¾åœ¨ã®ã¾ã¨ã‚ HTTPã‚»ãƒžãƒ³ãƒ†ã‚£ã‚¯ã‚¹ä»•æ§˜ã®æ”¹è¨‚ç‰ˆ ã¾ã¨ã‚ HTTP/2ã®æ”¹å®šç‰ˆä»•æ§˜ã®å¤‰æ›´
okyawa 2022/01/13
HTTP

quic

protocol

ã¾ã¨ã‚

https

TLS

HTTP3

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
Spectre ã®è„…å¨ã¨ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆãŒè¨å®šã™ã¹ããƒ˜ãƒƒãƒ€ãƒ¼ã«ã¤ã„ã¦
é•·ã„è¨˜äº‹ãªã®ã§å…ˆã«çµè«–ã‚’æ›¸ãã¾ã™ã€‚ Spectre ã®ç™»å ´ã§ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«å¿…è¦ã¨ã•ã‚Œã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦ä»¶ã¯å¢—ãˆã¾ã—ãŸã€‚å…·ä½“çš„ã«å¿…è¦ãªå¯¾ç–ã¯ä¸‹è¨˜ã®é€šã‚Šã§ã™ã€‚ ã™ã¹ã¦ã®ãƒªã‚½ãƒ¼ã‚¹ã¯ Cross-Origin-Resource-Policy ãƒ˜ãƒƒãƒ€ãƒ¼ã‚’ä½¿ã£ã¦ cross-origin ãªãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¸ã®èªã¿è¾¼ã¿ã‚’åˆ¶å¾¡ã™ã‚‹ã€‚ HTML ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã¯ X-Frame-Options ãƒ˜ãƒƒãƒ€ãƒ¼ã‚‚ã—ãã¯ Content-Security-Policy (CSP) ãƒ˜ãƒƒãƒ€ãƒ¼ã® frame-ancestors ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’è¿½åŠ ã—ã¦ã€cross-origin ãªãƒšãƒ¼ã‚¸ã¸ã® iframe ã«ã‚ˆã‚‹åŸ‹ã‚è¾¼ã¿ã‚’åˆ¶å¾¡ã™ã‚‹ã€‚ HTML ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã¯ Cross-Origin-Opener-Policy ãƒ˜ãƒƒãƒ€ãƒ¼ã‚’è¿½åŠ ã—ã¦ popup ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ã¨ã—ã¦é–‹ã‹ã‚ŒãŸå ´åˆã® cross-origin ãªãƒšãƒ¼ã‚¸ã¨ã®ã‚³ãƒŸãƒ¥ãƒ‹
okyawa 2021/11/04
chrome

ãƒ‰ãƒ¡ã‚¤ãƒ³

ãƒ–ãƒ©ã‚¦ã‚¶

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

browser

HTTP

corp

coop

header
ãƒªãƒ³ã‚¯
same-site/cross-site, same-origin/cross-originã‚’ã¡ã‚ƒã‚“ã¨ç†è§£ã™ã‚‹
same-site/cross-site, same-origin/cross-origin ã®é•ã„ã‚’æ›–æ˜§ãªã¾ã¾ã«ã—ã¦ãŠãã¨ã€åˆ†ã‹ã‚‰ãªã„ã“ã¨ã‚„èª¤è§£ãŒãƒ¢ãƒªãƒ¢ãƒªå¢—ãˆã¦ã„ãã¾ã™ã®ã§ã€æ—©ã„ã†ã¡ã«å®šç¾©ã‚’è¦šãˆã¡ã‚ƒã„ã¾ã—ã‚‡ã†ã€‚ å…ƒè¨˜äº‹ã¯ã“ã¡ã‚‰: Origin ã¨ã¯ Origin ã¯ scheme (http ã¨ã‹ã€€https ã¨ã‹)ã€hostnameã€port ã®çµ„ã¿åˆã‚ã›ã‚’æŒ‡ã™ã€‚same-origin ã¨è¨€ã£ãŸå ´åˆã€ã“ã‚Œã‚‰ã™ã¹ã¦ãŒä¸€è‡´ã™ã‚‹ã‚‚ã®ã‚’ç¤ºã—ã¦ã„ã‚‹ã€‚ä¸€éƒ¨ã§ã‚‚ç•°ãªã‚‹ã‚‚ã®ã¯ã™ã¹ã¦ cross-originã€‚ Origin A Origin B è§£èª¬
okyawa 2021/08/30
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

HTTP

ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰

browser

security

same-origin

same-site

cross-origin

origin
ãƒªãƒ³ã‚¯
Security headers quick reference Â |Â Articles Â |Â web.dev
Before diving into security headers, learn about known threats on the web and why you'd want to use these security headers. Protect your site from injection vulnerabilities Injection vulnerabilities arise when untrusted data processed by your application can affect its behavior and, commonly, lead to the execution of attacker-controlled scripts. The most common vulnerability caused by injection bu
okyawa 2021/05/19
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTP

web

google

header
ãƒªãƒ³ã‚¯
Webé«˜é€ŸåŒ–ã«å¿…é ˆï¼ ãƒ–ãƒ©ã‚¦ã‚¶ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®ä»•çµ„ã¿ã¨è¨å®šæ–¹æ³•
ãƒžãƒ„ã‚«ãƒ¯ Webã‚µã‚¤ãƒˆåˆ¶ä½œï¼ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ä¼ç”»ï¼Webåºƒå‘Šï¼SEOï¼ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ã‚’çµŒé¨“ã—ã¦ããŸé›‘é£Ÿç³»Webã‚¯ãƒªã‚¨ã‚¤ã‚¿ãƒ¼ãƒ»ãƒ—ãƒãƒ‡ãƒ¥ãƒ¼ã‚µãƒ¼ ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ« / Twitter / Facebook Webã‚µã‚¤ãƒˆã®é«˜é€ŸåŒ–æŠ€è¡“ã®å¤å‚ã«ã—ã¦å¼·åŠ›ãªæ‰‹æ®µãŒã‚ãƒ£ãƒƒã‚·ãƒ¥ã®è¨å®šã§ã™ã€‚ åŸºæœ¬ä¸ã®åŸºæœ¬ã§ã¯ã‚ã‚‹ã‚‚ã®ã®ã€ãã®ä»•çµ„ã¿ã«ã¤ã„ã¦ã¯å®Ÿã¯ã‚ˆãã‚ã‹ã£ã¦ã„ãªã„ã“ã¨ã‚‚å¤šã‹ã£ãŸã‚Šã€‚ ãã“ã§ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®ä»•çµ„ã¿ã‚„è¨å®šã«ã¤ã„ã¦åŸºæœ¬çš„ãªã“ã¨ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ å®Ÿã¯å¥¥ãŒæ·±ã„ãªã€ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®ä¸–ç•Œã€‚ ãƒ–ãƒ©ã‚¦ã‚¶ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®ä»•çµ„ã¿ ã‚ãƒ£ãƒƒã‚·ãƒ¥ã¨ã¯ã€ä¸€æ™‚çš„ã«ä¿ç®¡ã—ã¦ãŠãè¤‡è£½ãƒ•ã‚¡ã‚¤ãƒ«ã®ã“ã¨ã§ã™ãã€‚ Webã®é«˜é€ŸåŒ–ã«ãŠã„ã¦éžå¸¸ã«é‡è¦ãªä»•çµ„ã¿ã§ã™ã€‚ Webã‚µã‚¤ãƒˆã¯ç”»åƒãªã©ã®ãƒªãƒƒãƒãƒ¡ãƒ‡ã‚£ã‚¢ã‚’å¤šç”¨ã—ã¦ã„ã‚‹ãŸã‚ã€ã‚µãƒ¼ãƒãƒ¼è² è·ã‚„ãƒãƒ¼ãƒ‰ã‚¿ã‚¤ãƒ ã‚’ç¯€ç´„ã§ãã‚‹ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®åŠ¹æžœã¯çµ¶å¤§ã§ã™ã€‚ ã‚ãƒ£ãƒƒã‚·ãƒ¥åˆ©ç”¨ã®ä»•çµ„ã¿ã¯æ¬¡ã®å›³ã®ã‚ˆã†ãªæµã‚Œã§ã™ã€‚ åˆã‚ã¦ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å ´åˆã¯
okyawa 2020/08/18
cache

ãƒ–ãƒ©ã‚¦ã‚¶

web

seo

HTTP
ãƒªãƒ³ã‚¯
The Collaborative API Development Platform
Announcing Insomnia 10.1 GA with a new Collection Runner CLI, in-app invites, and more Design, debug, test, and mock APIs locally, on Git, orÂ cloudB uild better APIs collaboratively for the most popular protocols with a devâ€‘friendly UI, built-in automation, and an extensible plugin ecosystem. Get Started for Free
okyawa 2019/03/20
REST

mac

HTTP

debug

api

client

development

tool
ãƒªãƒ³ã‚¯
iOSã§ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«é ¼ã‚‰ãšã€URLSessionã‚’ä½¿ã£ã¦HTTPé€šä¿¡ã™ã‚‹ - Qiita
ã“ã‚Œã¯ Swift Advent Calendar 2016 16æ—¥ç›®ã®æŠ•ç¨¿ã§ã™ã€‚ æ˜¨æ—¥15æ—¥ç›®ã¯@_ha1fã•ã‚“ã®Photos.frameworkã®ã‚µãƒ³ãƒ—ãƒ«ã‚’èªã‚€ã§ã—ãŸã€‚ TL;DR Multiparté »ç™ºã—ãŸã‚Šã€å¤§ããªãƒ‡ãƒ¼ã‚¿ã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ãŒãƒ¡ã‚¤ãƒ³ã®ã‚¢ãƒ—ãƒªã§ã¯ãªãã€å˜ç´”ãªGet, Postã®ã¿ãªã‚‰ã€URLSessionã§å•é¡Œãªã„ èƒŒæ™¯ ä»Šã¾ã§iOSã§ã®é€šä¿¡å‡¦ç†ã¨ã„ãˆã°ã€å½“ãŸã‚Šå‰ã«AFNetworkingã‹Alamofire (ãã®ä»–ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚‚è§¦ã£ãŸã“ã¨ã¯ã‚ã‚Šã¾ã™ãŒ) ã‚’ä½¿ã£ã¦ãŠã‚Šã€ãŠæ¥ãšã‹ã—ãªãŒã‚‰ã€æ¨™æº–APIã§ã®å‡¦ç†ã‚’æ›¸ã„ãŸã“ã¨ãŒã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ã€ŒSwift é€šä¿¡ã€ã§æ¤œç´¢ã™ã‚‹ã¨1ç•ªç›®ã«Alamofireã‚’ä½¿ã£ãŸè¨˜äº‹ãŒãƒ’ãƒƒãƒˆã™ã‚‹ã“ã¨ã‹ã‚‰ã‚‚ã€è‡ªåˆ†ã®ã‚ˆã†ãªäººã¯æ„å¤–ã¨å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã¾ãŸã€mono0926ã•ã‚“ã®iOS 10ãŒæ£å¼ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸä»Šã€ãã‚ãã‚æ—¢å˜ã‚¢ãƒ—ãƒªã®iOS 8ã‚µ
okyawa 2018/01/12
swift

ios

API

URLSession

HTTP
ãƒªãƒ³ã‚¯
Googleã€10æœˆæä¾›ã®Chrome 62ä»¥é™ã§ã€å…¥åŠ›æ¬„ã®ã‚ã‚‹ã™ã¹ã¦ã®HTTPæŽ¥ç¶šãƒšãƒ¼ã‚¸ã§è¦å‘Šã‚’è¡¨ç¤ºã€€ã‚·ãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆãƒ¢ãƒ¼ãƒ‰ã§ã¯å…¨HTTPæŽ¥ç¶šãƒšãƒ¼ã‚¸ã‚’è¦å‘Šè¡¨ç¤ºã®å¯¾è±¡ã«
okyawa 2017/04/28
chrome

Google

èªè¨¼å±€

HTTP

ãƒ•ã‚©ãƒ¼ãƒ
ãƒªãƒ³ã‚¯
HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’é©åˆ‡ã«é¸ã¶ãŸã‚ã®ãƒ•ãƒãƒ¼ãƒãƒ£ãƒ¼ãƒˆ : é›£ã—ãè€ƒãˆã‚‹ã®ã‚’ã‚„ã‚ã‚ˆã† | POSTD
HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’è¿”ã™ã¨ã„ã†ã®ã¯ã¨ã¦ã‚‚å˜ç´”ãªã“ã¨ã§ã™ã€‚ãƒšãƒ¼ã‚¸ãŒãƒ¬ãƒ³ãƒ€ãƒªãƒ³ã‚°ã§ããŸï¼Ÿã‚ˆã—ã€ãã‚Œãªã‚‰ 200 ã‚’è¿”ã—ã¾ã—ã‚‡ã†ã€‚ãƒšãƒ¼ã‚¸ãŒå˜åœ¨ã—ãªã„ï¼Ÿãã‚Œãªã‚‰ 404 ã§ã™ã€‚ä»–ã®ãƒšãƒ¼ã‚¸ã«ãƒ¦ãƒ¼ã‚¶ã‚’ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ãŸã„ï¼Ÿ 302 ã€ã‚ã‚‹ã„ã¯ 301 ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ I like to imagine that HTTP status codes are like CB 10 codes. "Breaker breaker, this is White Chocolate Thunder. We've got a 200 OK here." â€” Aaron Patterson (@tenderlove) 2015, 10æœˆ 7 è¨³ï¼šHTTPã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã®ã“ã¨ã¯ã€å¸‚æ°‘ãƒ©ã‚¸ã‚ªã®10ã‚³ãƒ¼ãƒ‰ã¿ãŸã„ãªã‚‚ã®ã ã¨è€ƒãˆã‚‹ã®ãŒå¥½ãã§ã™ã€‚ã€Œãƒ–ãƒ¬ãƒ¼ã‚«ãƒ¼ã€ãƒ–ãƒ¬ãƒ¼ã‚«ãƒ¼ã€ã“ã¡ã‚‰ãƒ›ãƒ¯ã‚¤ãƒˆãƒ»ãƒãƒ§ã‚³ãƒ¬ãƒ¼ãƒˆãƒ»ã‚µãƒ³ãƒ€ãƒ¼ã€‚200
okyawa 2016/11/30
HTTP

HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰

network
ãƒªãƒ³ã‚¯
æ–°ã—ã„HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã€Œ451ã€ãŒæ‰¿èªã•ã‚Œã‚‹--æ¤œé–²ã«ã‚ˆã‚‹é–²è¦§ç¦æ¢ç¤ºã™
UPDATEã€€æ”¿åºœãŒã©ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’ã‚¢ã‚¯ã‚»ã‚¹ç¦æ¢ã«ã—ã¦ã„ã‚‹ã®ã‹ã‚’å›½æ°‘ã«éš ã—ã¦ãŠãã“ã¨ãŒã€ä»Šå¾Œã¯é›£ã—ããªã‚‹ã ã‚ã†ã€‚æ¤œé–²ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã‚’è¦å‘Šã™ã‚‹æ–°ã—ã„ã‚¨ãƒ©ãƒ¼ã‚³ãƒ¼ãƒ‰ãŒç™»å ´ã™ã‚‹ãŸã‚ã ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§ã¯ã€100ç•ªå°ã‹ã‚‰500ç•ªå°ã¾ã§ã®å¹…åºƒã„ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ãŒåˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ã€‚ã“ã‚Œã‚‰ã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ã¯ã€ã‚µãƒ¼ãƒã®ãƒ€ã‚¦ãƒ³ãªã©ã®ç•°å¤‰ãŒç”Ÿã˜ãŸã“ã¨ã‚’çŸ¥ã‚‰ã›ã‚‹ãŸã‚ã‚„ã€ç‰¹å®šã®ãƒšãƒ¼ã‚¸ã«ã‚¢ã‚¯ã‚»ã‚¹ã•ã›ãªã„ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«åˆ©ç”¨ã•ã‚Œã‚‹ã€‚çš†ã•ã‚“ã‚‚ã€ãƒšãƒ¼ã‚¸ã‚’è¦‹ã¤ã‘ã‚‰ã‚Œãªã‹ã£ãŸã“ã¨ã‚’çŸ¥ã‚‰ã›ã‚‹404ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ãŠãã‚‰ãä½•åº¦ã‹ç›®ã«ã—ãŸã“ã¨ãŒã‚ã‚‹ã ã‚ã†ã€‚ ã—ã‹ã—ã€ã‚¦ã‚§ãƒ–ãƒšãƒ¼ã‚¸ã®ãƒ€ã‚¦ãƒ³ãŒæŠ€è¡“çš„ãªå•é¡Œã®ãŸã‚ãªã®ã‹ã€æ”¿åºœã®ä»‹å…¥ã®ãŸã‚ãªã®ã‹ã‚’è¦‹åˆ†ã‘ã‚‹ã®ã¯æ™®é€šã€å®¹æ˜“ã§ã¯ãªã„ã€‚ãã“ã§æ–°ã—ã„451ã‚³ãƒ¼ãƒ‰ã®ç™»å ´ã¨ãªã‚‹ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŠ€è¡“ã®æ¨™æº–åŒ–çµ„ç¹”Internet Engineering Steering Groupï¼ˆIESGï¼‰ã¯ç±³å›½æ™‚é–“
okyawa 2015/12/24
HTTP

HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰

ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

æ¤œé–²
ãƒªãƒ³ã‚¯
5åˆ†ã§ã‚ã‹ã‚‹æ£ã—ã„ Web ã‚µã‚¤ãƒˆå¸¸æ™‚ SSL åŒ–ã®ãŸã‚ã®åŸºç¤ŽçŸ¥è˜
Web ã‚µã‚¤ãƒˆã‚’å¸¸æ™‚ SSL åŒ–ã™ã‚‹å ´åˆã«ã€æœ€ä½Žé™çŸ¥ã£ã¦ãŠã‹ãªã‘ã‚Œã°ãªã‚‰ãªã„çŸ¥è˜ã‚„ã€æ³¨æ„ç‚¹ã€å®Ÿéš›ã®è¨å®šæ–¹æ³•ã¾ã§ã€ã²ã¨é€šã‚Šã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãƒ¡ãƒªãƒƒãƒˆã‚„ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã€è¨¼æ˜Žæ›¸ã®ç¨®åˆ¥ã‹ã‚‰ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆè¨å®šãªã©ã«ã¤ã„ã¦ã‚‚è§£èª¬ã—ã¦ã„ã¾ã™ã€‚ HTTPS ã‚’ãƒ©ãƒ³ã‚ãƒ³ã‚°ã‚·ã‚°ãƒŠãƒ«ã«ä½¿ç”¨ã—ã¾ã™ã¨ Google ãŒå…¬å¼ã«ç™ºè¡¨ã—ãŸã‚ãŸã‚Šã‹ã‚‰ã€Web ã‚µã‚¤ãƒˆã® SSL å¯¾å¿œã€ç‰¹ã« Google ãŒæŽ¨å¥¨ã—ã¦ã„ã‚‹ Web ã‚µã‚¤ãƒˆã‚’ã™ã¹ã¦ HTTPS ã§é…ä¿¡ã™ã‚‹ã€æ‰€è¬‚ ã€Œå¸¸æ™‚ SSL åŒ–ã€ ã«ã¤ã„ã¦ã®è©±ã‚’èžã„ãŸã‚Šã€å®Ÿéš›ã«ãŠå®¢æ§˜ã‹ã‚‰ç›¸è«‡ã•ã‚ŒãŸã‚Šã™ã‚‹ã‚±ãƒ¼ã‚¹ãŒå¢—ãˆã¦ãã¾ã—ãŸã€‚ ãã“ã§ã€ã„ã„æ©Ÿä¼šã ã—ãã®è¾ºã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ãªï½ž ã¨æ€ã£ã¦æ›¸ã„ã¦ã¿ãŸã€æ’ä¾‹ã® ï¼ˆï¼Ÿï¼‰ 5åˆ†ã§ã‚ã‹ã‚‹ã‚·ãƒªãƒ¼ã‚ºã€‚æ›¸ãçµ‚ã‚ã£ã¦è¦‹ãŸã¨ã“ã‚çµ¶å¯¾ã« 5åˆ†ã˜ã‚ƒç„¡ç†ã£ã¦ã„ã†æ–‡ç« é‡ã«ãªã£ã¦ã¦ã©ã†ã—ã‚ˆã†ã‹ãªãã¨ã‚‚æ€ã£ãŸã‚“ã§ã™ãŒã€æ°—ã«ã›ãšå…¬é–‹ã—ã¦ã¿ã¾ã™ã€‚ å¸¸æ™‚ SSL
okyawa 2015/01/24
ssl

HTTP

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SEO
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
okyawa 2012/01/20
HTTP

github

ãƒ–ãƒ©ã‚¦ã‚¶

tail

ãƒã‚°
ãƒªãƒ³ã‚¯
PHPã¨JavaScriptã§HTTPã‚¹ãƒˆãƒªãƒ¼ãƒŸãƒ³ã‚°ã™ã‚‹è©±(Transfer-Encoding: chunkedç·¨) - id:anatooã®ãƒ–ãƒã‚°
HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’ajaxã§ã‚¹ãƒˆãƒªãƒ¼ãƒŸãƒ³ã‚°çš„ã«å—ã‘å–ã‚ŠãŸã„ã¨ãã€è¦ã™ã‚‹ã«HTTPã‚¹ãƒˆãƒªãƒ¼ãƒŸãƒ³ã‚°ã‚’ã—ãŸã„æ™‚ã«ã¯ã€Transfer-Encoding: chunkedãªãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’ç”Ÿæˆã—ã¦ã‚„ã‚‹ã¨ã‚ˆã„ã€‚ã“ã†ã™ã‚‹ã¨Ajaxã§ã¯HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹å…¨ä½“ã‚’å—ã‘å–ã‚‹ã®ã‚’å¾…ãŸãšã«ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ä¸èº«ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚å¾“ã£ã¦ã€ä¸€ã¤ã®HTTPã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã§ã‚µãƒ¼ãƒå´ã‹ã‚‰ä»»æ„ã®ãƒ‡ãƒ¼ã‚¿ã‚’å¥½ããªã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ãƒ—ãƒƒã‚·ãƒ¥ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã‚‹ã€‚ ã‚³ãƒ¼ãƒ‰ ä¸€ç§’ã”ã¨ã«ç”Ÿæˆã•ã‚Œã‚‹JSONã‚’ã‚¹ãƒˆãƒªãƒ¼ãƒ çš„ã«å—ã‘å–ã‚‹ãƒ‡ãƒ¢ã®ã‚³ãƒ¼ãƒ‰ãŒä»¥ä¸‹ã€‚ <?php // push.php function output_chunk($chunk) { echo sprintf("%x\r\n", strlen($chunk)); echo $chunk . "\r\n"; } header("Content-type: applicati
okyawa 2011/05/31
HTTP

Ajax

javascript

ã‚¹ãƒˆãƒªãƒ¼ãƒŸãƒ³ã‚°
ãƒªãƒ³ã‚¯
1åˆ†ã§ã‚ã‹ã‚‹ã€ŒX-ãƒŠãƒ³ãƒˆã‚«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ - è‘‰ã£ã±æ—¥è¨˜
æœ€è¿‘ã®ãƒ¢ãƒ€ãƒ³ãªWebãƒ–ãƒ©ã‚¦ã‚¶ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã—ãã†ãª X- ãªHTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãã‚Œä»¥å¤–ã«ã‚‚ã‚ã£ãŸã‚‰æ•™ãˆã¦ãã ã•ã„ã€‚ X-XSS-Protection 0:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’ç„¡åŠ¹ã«ã™ã‚‹ã€‚ 1:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã€‚ XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã“ã¨ã§ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãŒXSSã®è¢«å®³ã«ã‚ã†å¯èƒ½æ€§ãŒä½Žæ¸›ã™ã‚‹ãŒã€ã¾ã‚Œã«èª¤æ¤œçŸ¥ã™ã‚‹ã“ã¨ã§ç”»é¢ã®è¡¨ç¤ºãŒä¹±ã‚Œã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã€‚IE8+ã€Safariã€Chrome(å¤šåˆ†) ã§æœ‰åŠ¹ã€‚IEã§ã¯ã€ŒX-XSS-Protection: 1; mode=blockã€ã¨ã„ã†æŒ‡å®šã‚‚å¯èƒ½ã€‚ 2008/7/2 - IE8 Security Part IV: The XSS FilterBug 27312 â€“ [XSSAuditor] Add support for header X-XSS-Protection X-Content-Ty
okyawa 2011/01/08
HTTP

header

ãƒ–ãƒ©ã‚¦ã‚¶
ãƒªãƒ³ã‚¯
1