[B! iframe] reponã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

repon id:repon

iframeã«é–¢ã™ã‚‹reponã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

[63] ã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ã§ ä»–ã®HTMLãƒ•ã‚¡ã‚¤ãƒ«ã‚’çµ„ã¿è¾¼ã‚‚ã† iframeè¦ç´
<iframe>è¦ç´ ã® HTML5 ã§ã®å¤‰æ›´ç‚¹ã¯ã€frameborderå±žæ€§ãƒ»marginheightå±žæ€§ãƒ»marginwidthå±žæ€§ãƒ»scrollingå±žæ€§ãƒ»longdescå±žæ€§ãƒ»alignå±žæ€§ãƒ»scrollingå±žæ€§ãŒå»ƒæ¢ã•ã‚ŒãŸã“ã¨ã€‚ ä»£ã‚ã‚Šã«æ–°ã—ãã€srcdocå±žæ€§ãƒ»seamlesså±žæ€§ãƒ»sandboxå±žæ€§ãŒè¿½åŠ ã•ã‚Œã¾ã—ãŸã€‚ ã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ã‚’é…ç½®ã—ã¦ã¿ã‚ˆã† â—ã‚µãƒ³ãƒ—ãƒ«1ï¼šã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ã®åŸºæœ¬å½¢ srcå±žæ€§ã§ã€åˆ¥ã®HTMLãƒ•ã‚¡ã‚¤ãƒ«ã‚’æŒ‡å®šã™ã‚‹ã®ãŒåŸºæœ¬å½¢ã§ã™ã€‚ ã‚µã‚¤ã‚ºã‚’æŒ‡å®šã—ãªã‘ã‚Œã°ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚µã‚¤ã‚º ï¼ˆ300pxÃ—150pxï¼‰ã«ãªã‚Šã¾ã™ã€‚ <iframe src="smp63_1.html"></iframe> ã‚µã‚¤ã‚ºã‚’æŒ‡å®šã™ã‚‹ã¨ã€ã“ã‚“ãªã‹ã‚“ã˜ã€‚ <iframe src="smp63_1.html" width="280" height="120"></iframe> width
repon 2015/05/18
HTML5

iframe
ãƒªãƒ³ã‚¯
ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§Markdownã‚’å®‰å…¨ã«å±•é–‹ã™ã‚‹ - è‘‰ã£ã±æ—¥è¨˜
ä¸ç‰¹å®šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒå…¥åŠ›ã—ãŸMarkdownã‚’ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§JavaScriptã‚’ä½¿ã£ã¦HTMLã«å¤‰æ›ã™ã‚‹ã¨ã„ã†å ´é¢ã«ãŠã„ã¦ã¯ã€JavaScriptã§å¤‰æ›ã—ã¦HTMLã‚’ç”Ÿæˆã™ã‚‹ã¨ã„ã†å‡¦ç†ã®éƒ½åˆä¸Šã©ã†ã—ã¦ã‚‚DOM-based XSSã®ç™ºç”Ÿã‚’è€ƒãˆãªã„ã‚ã‘ã«ã¯ã„ã‹ãªã„ã€‚ã‹ã¨ã„ã£ã¦ã€Markdownã‚’ãƒ‘ãƒ¼ã‚¹ã—HTMLã‚’ç”Ÿæˆã™ã‚‹ã¨ã„ã†å‡¦ç†ã™ã¹ã¦ã‚’XSSãŒå˜åœ¨ã—ãªã„ã‚ˆã†ã«æ³¨æ„ã—ãªãŒã‚‰è‡ªåˆ†ã§æ›¸ãã®ã‚‚å¤§å¤‰ã ã—ã€markedã‚„markdown-jsãªã©ã®æ—¢å˜ã®å¤‰æ›ç”¨ã®JSã‚’æŒã£ã¦ãã¦ã‚‚ãã‚Œã‚‰ãŒXSSã—ãªã„ã‹ã‚’ç¢ºèªã™ã‚‹ã®ã¯çµæ§‹å¤§å¤‰ã ã£ãŸã‚Šã™ã‚‹ã€‚ ãã†ã„ã£ãŸå ´åˆã«ã¯ã€Markdownã‹ã‚‰ç”Ÿæˆã•ã‚ŒãŸHTMLã‚’RickDOMã‚’é€šã™ã“ã¨ã§ã€ä¸‡ãŒä¸€HTMLå†…ã«JavaScriptãŒå«ã¾ã‚Œã¦ã„ãŸã¨ã—ã¦ã‚‚ãã‚Œã‚‰ã‚’é™¤å¤–ã—ã€è¨±å¯ã•ã‚ŒãŸè¦ç´ ã€è¨±å¯ã•ã‚ŒãŸå±žæ€§ã ã‘ã§æ§‹ç¯‰ã•ã‚ŒãŸå®‰å…¨ãªHTMLã«å†æ§‹ç¯‰ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ã•ã‚‰ã«ã€ãã†ã‚„ã£ã¦ç”Ÿæˆ
repon 2015/01/31
HTML

iframe

markdown

XSS

js
ãƒªãƒ³ã‚¯
ã€AngularJSã€‘JSONã‹ã‚‰å—ã‘å–ã£ãŸYoutubeã®URLã‚’iframeå†…ã§ä½¿ç”¨ã™ã‚‹æ–¹æ³•ã‚’æ•™ãˆã¦ã„ãŸã ããŸã„ã§ã™ã€‚ - Qiita
<iframe title="YouTube video player" class="youtube-player" type="text/html" width="560" height="345" src="//www.youtube.com/embed/{{YoutubeURL}}" frameborder="0" ></iframe>
repon 2014/10/06
ã€Œiframeã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«å±ãªã„ã“ã¨ãŒã§ãã¦ã—ã¾ã†ã®ã§ã€AngularJSã§ã¯æ¨™æº–ã§ã¯å¤–éƒ¨ã®ã‚µã‚¤ãƒˆã‚’æŒ‡å®šã§ããªã„ã‚ˆã†ã«ãªã£ã¦ã¾ã™ã€‚ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚

iframe

AngularJS

angular.js
ãƒªãƒ³ã‚¯
jQuery ã‚’ä½¿ã£ã¦ iframe ã®ä¸ã®è¦ç´ ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ–¹æ³• : åœ°æ½œã®æ—¥è¨˜
ãƒ–ãƒã‚°ãƒã‚¿ï¼šJavaScript ã«å‚åŠ ä¸ï¼ jQuery ã® AJAX ã®æ©Ÿèƒ½ã‚’ãƒãƒªãƒãƒªä½¿ã£ãŸã‚‚ã®ã‚’ã€æœ¬ç•ªã‚µãƒ¼ãƒãƒ¼ã«ã‚¢ãƒƒãƒ—ã—ãŸã‚‰å‹•ã‹ãªã„ï¼ã¨ã„ã†æ‚²åŠ‡ãŒã‚ã£ãŸã€‚å…ˆæ—¥ã€‚ è‰²ã€…è©¦ã—ãŸã‘ã©ã€åˆ†ã‹ã£ãŸåŽŸå› ã¯ã€Œã‚µãƒ¼ãƒãƒ¼ã®ä»•æ§˜ã£ã½ã„ã€æ¢ã¾ã‚Šã€‚(èª°ã‹åŽŸå› ã‚’æ•™ãˆã¦ãƒ¼) ã‚µãƒ¼ãƒãƒ¼ã®ä»•æ§˜å¤‰æ›´ã¯ã§ããªã„ã—ã€ã“ã‚Œã«æ™‚é–“ã‚’ã‹ã‘ã¦ã‚‚ã‚¢ãƒ¬ãªã®ã§ã€AJAX ã‚’ä½¿ã‚ãšã€iframe ã§å›žé¿ã—ãŸã€‚ ãã®æ™‚ã‚„ã£ãŸã“ã¨ã‚’å¿˜ã‚Œãªã„ã‚ˆã†ã€jQuery ã‚’ä½¿ã£ã¦ iframe ã®ä¸ã®è¦ç´ ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ–¹æ³•ã‚’æ›¸ã„ã¦ãŠãã€‚ â– åŸºç¤Ž ã¾ãšã€iframe å†…ã®ãƒšãƒ¼ã‚¸ã® document ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®å‚ç…§ã¯ã“ã‚Œã§OK $('iframe:first').contents() (ä¾‹ã¨ã—ã¦ã€ãƒšãƒ¼ã‚¸å†…ã«ã‚ã‚‹æœ€åˆ (:first) ã® iframe ã‚’å¯¾è±¡ã¨ã™ã‚‹) (contents() ã«ã¤ã„ã¦ã¯ã€contents() - jQuery 1.3.
repon 2011/01/06
iframe

jQuery

javascript

ã“ã‚Œã¯ä¾¿åˆ©

ã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ
ãƒªãƒ³ã‚¯
JavaScriptã®å‹•ã‹ãªã„ã‚³ãƒ¼ãƒ‰ã€€(ä¸ç´šç·¨)ã€€iframeå†…ã«DOMã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ã‚¨ãƒ©ãƒ¼ - ä¸»ã«è¨€èªžã¨ã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºã«é–¢ã—ã¦
é€£è¼‰ç›®æ¬¡ã¸ ä»¥ä¸‹ã®JavaScriptã‚³ãƒ¼ãƒ‰ãŒæ„å›³ã—ãŸå‹•ä½œã‚’ã—ãªã„ã®ã¯ï¼Œãªãœã§ã™ã‹ã€‚ï¼ˆåˆ¶é™æ™‚é–“ï¼‘åˆ†ï¼‰ ã‚„ã‚ŠãŸã„äº‹ï¼š tenki.htmlã®ä¸ã«ï¼Œå¤©æ°—ãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹ã€‚ index.htmlã®ã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ å†…ã« tenki.html ã‚’è¡¨ç¤ºã—ã¦ï¼Œãã®å†…å®¹ã‚’è§£æžã™ã‚‹ã€‚ â€»ï¼’ã¤ã®HTMLã¯ï¼ŒåŒã˜ãƒ•ã‚©ãƒ«ãƒ€ä¸Šã«ã‚ã‚‹ã€‚ index.html <input type="button" value="ã‚¯ãƒªãƒƒã‚¯ã—ã¦å¤©æ°—ã‚’è¡¨ç¤º" onClick="f()"> <br>  <iframe id="ifr"></iframe> <script language="JavaScript"> function f() { // iframeã‚’å–å¾— var e_ifr = document.getElementById( "ifr" ); // ifram
repon 2011/01/06
javascript

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

iframe

DOM
ãƒªãƒ³ã‚¯
1