HTMLを許å¯ã—ã¤ã¤XSS対ç–ã‚’è¡Œãˆã‚‹PHPライブラリ「HTML Purifierã€:phpspot開発日誌HTML Purifier - Filter your HTML the standards-compliant way! HTML Purifier is a standards-compliant HTML filter library written in PHP. HTMLを許å¯ã—ã¤ã¤XSS対ç–ã‚’è¡Œãˆã‚‹PHPライブラリ「HTML Purifierã€ã€‚ HTMLã‚’ã¡ã‚ƒã‚“ã¨ãƒ‘ースã—ã¦ã€XSSã«é–¢ã‚ã‚‹å•é¡Œã®ã‚ã‚‹ã‚¿ã‚°ãªã©ã¯é™¤åŽ»ã—ã¦è¿”ã—ã¦ãã‚Œã¾ã™ã€‚ 例ãˆã°ã€æ¬¡ã®ã‚³ãƒ¼ãƒ‰ãŒ(Before)〠phpspot <a href="hogehoge" onclick="alert('test1');">hogehoge</a> <script type="text/javascript"> <!-- alert("test2"); --> </script> 次ã®ã‚³ãƒ¼ãƒ‰ã®ã‚ˆã†ã«ã‚¯ãƒªãƒ¼ãƒ³ã«ãªã‚Šã¾ã™ã€‚(A
Ywcafe.net
{{#tags}}- {{label}}
{{/tags}}