LINE Developer Meetup in Fukuoka #16 http://connpass.com/event/38413/
LINE Developer Meetup in Fukuoka #16 http://connpass.com/event/38413/
ä¸ç¹å®ã®ã¦ã¼ã¶ã¼ãå ¥åããMarkdownããã©ã¦ã¶ä¸ã§JavaScriptã使ã£ã¦HTMLã«å¤æããã¨ããå ´é¢ã«ããã¦ã¯ãJavaScriptã§å¤æãã¦HTMLãçæããã¨ããå¦çã®é½åä¸ã©ããã¦ãDOM-based XSSã®çºçãèããªãããã«ã¯ãããªãããã¨ãã£ã¦ãMarkdownããã¼ã¹ãHTMLãçæããã¨ããå¦çãã¹ã¦ãXSSãåå¨ããªãããã«æ³¨æããªããèªåã§æ¸ãã®ã大å¤ã ããmarkedãmarkdown-jsãªã©ã®æ¢åã®å¤æç¨ã®JSãæã£ã¦ãã¦ãããããXSSããªããã確èªããã®ã¯çµæ§å¤§å¤ã ã£ããããã ãããã£ãå ´åã«ã¯ãMarkdownããçæãããHTMLãRickDOMãéããã¨ã§ãä¸ãä¸HTMLå ã«JavaScriptãå«ã¾ãã¦ããã¨ãã¦ãããããé¤å¤ãã許å¯ãããè¦ç´ ã許å¯ããã屿§ã ãã§æ§ç¯ãããå®å ¨ãªHTMLã«åæ§ç¯ãããã¨ãã§ãããããã«ããããã£ã¦çæ
æ¨æ¥ã®æ¥è¨ã®ç¶ãã§ãAjaxã«åºæãªã»ãã¥ãªãã£åé¡ã«ã¤ãã¦æ¤è¨ãã¾ããä»åã¯JSONçã®æ³å®å¤èªã¿åºãã«ããæ»æã§ãããããæ»æææ³ã¯æ¬æ¥ãã©ã¦ã¶å´ã§å¯¾å¿ãã¹ããã®ã§ããããå¾ãWebã¢ããªã±ã¼ã·ã§ã³å´ã§å¯¾å¿ããä¸ã§ãã¾ã å®çªã¨ãªã対çããªãããã«æãã¾ãããã®ãããè¤æ°ã®åè£ã示ãããã¨ã§è°è«ã®ãã£ããã«ãããã¨æãã¾ãã ã¾ããä½ããªããåºç¤ããå¦ã¶PHPã«ããWebã¢ããªã±ã¼ã·ã§ã³å ¥éXAMPP/jQuery/HTML5ã§ä½ãã¤ãããã®WeãããAjaxãå©ç¨ããã¢ããªã±ã¼ã·ã§ã³ã®æ¦å¿µå³ãå¼ç¨ãã¾ãï¼åæ¸P20ã®å³1-23ï¼ã ååãåã åã¯ã(5)ã®HTTPã¬ã¹ãã³ã¹ã®åå¾ã§ãJSONçã®ãã¼ã¿ä½æï¼ã¨ã³ã³ã¼ãï¼ã«èµ·å ããevalã¤ã³ã¸ã§ã¯ã·ã§ã³ãã(5)ã®ã¬ã¹ãã³ã¹ãåãåã£ãå¾ã®HTMLã¬ã³ããªã³ã°ã®éã®XSSã«ã¤ãã¦èª¬æãã¾ããã ããããåé¡ã¯ããã ãã§ã¯ããã¾ãããæ£å¸¸
See related links to what you are looking for.
ã¯ã¦ãªã°ã«ã¼ãã®çµäºæ¥ã2020å¹´1æ31æ¥(é)ã«æ±ºå®ãã¾ãã 以ä¸ã®ã¨ã³ããªã®éããä»å¹´æ«ãç®å¦ã«ã¯ã¦ãªã°ã«ã¼ããçµäºäºå®ã§ããæ¨ããç¥ãããã¦ããã¾ããã 2019å¹´æ«ãç®å¦ã«ãã¯ã¦ãªã°ã«ã¼ãã®æä¾ãçµäºããäºå®ã§ã - ã¯ã¦ãªã°ã«ã¼ãæ¥è¨ ãã®ãã³ãæ£å¼ã«çµäºæ¥ã決å®ãããã¾ããã®ã§ã以ä¸ã®éãã確èªãã ããã çµäºæ¥: 2020å¹´1æ31æ¥(é) ã¨ã¯ã¹ãã¼ã叿ç³è«æé:2020å¹´1æ31æ¥(é) çµäºæ¥ä»¥éã¯ãã¯ã¦ãªã°ã«ã¼ãã®é²è¦§ããã³æç¨¿ã¯è¡ãã¾ãããæ¥è¨ã®ã¨ã¯ã¹ãã¼ããå¿ è¦ãªæ¹ã¯ä»¥ä¸ã®è¨äºã«ãããã£ã¦æç¶ãããã¦ãã ããã ã¯ã¦ãªã°ã«ã¼ãã«æç¨¿ãããæ¥è¨ãã¼ã¿ã®ã¨ã¯ã¹ãã¼ãã«ã¤ã㦠- ã¯ã¦ãªã°ã«ã¼ãæ¥è¨ ãå©ç¨ã®ã¿ãªãã¾ã«ã¯ãè¿·æãããããããã¾ãããã©ãããããããé¡ããããã¾ãã 2020-06-25 è¿½è¨ ã¯ã¦ãªã°ã«ã¼ãæ¥è¨ã®ã¨ã¯ã¹ãã¼ããã¼ã¿ã¯2020å¹´2æ28
æè¿ã徳丸æ¬ãããããèªãã§ããã®ã§ãããDOM based XSSã®è©±ãæ¸ãã¦ãã£ãã®ã§ãå°ãè¨åãã¦ãããã¨æãã¾ãã 徳丸æ¬ããå¼ç¨ DOM based XSSã¨å¼ã°ããXSSãããã¾ããããã¯ãJavaScriptã«ããã¯ã©ã¤ã¢ã³ãå´ã§è¡¨ç¤ºå¦çããç®æããããããã«èå¼±æ§ãããå ´åã®XSSã§ãã ãµã³ãã«æ¸ãã¦ã¿ã¾ããã <script> document.write(unescape(location.href)); </script> ããã¤ãé©å½ãªãã¡ã¤ã«åã§ä¿åãã¦ãdomxss.html#<script>alert("hello")<script>ãªã©ã®URLã§ã¢ã¯ã»ã¹ããã¨alertã表示ãããã¯ãã§ããä»»æã®ã¹ã¯ãªãããå®è¡å¯è½ãªç¶æ ã£ã¦ãã¨ã§ãããä»»æã®ã¹ã¯ãªãããå®è¡å¯è½ã£ã¦ãã¨ã¯ãã»ãã·ã§ã³ã¯ããã¼çã¿æ¾é¡ã§ãä»äººã«æãæ¸ã¾ãã¦è²·ãç©ã§ãã¡ãã£ããããã¬ãã«ã§ã
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}