[B! JSONP] tamaotã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tamaot id:tamaot

JSONPã«é–¢ã™ã‚‹tamaotã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ï¼»æ°—ã«ãªã‚‹ï¼½JSONPã®å®ˆã‚Šæ–¹
XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ ï¼ˆç·¨é›†éƒ¨ï¼‰ JSONPã ã£ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ°—ã«ã—ã¦ã»ã—ã„ çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ä»Šå›žã¯ã€JSONPã‚’ä½¿ç”¨ã™ã‚‹å ´åˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã—ã‚‡ã†ã€‚ JSONPã¨ã¯ã€JSON with Paddingã®åç§°ãŒç¤ºã—ã¦ã„ã‚‹ã¨ãŠã‚Šã€JSONå½¢å¼ã®ãƒ‡ãƒ¼ã‚¿ã«ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯é–¢æ•°ã®å‘¼ã³å‡ºã—ã®ãŸã‚ã®ã‚³ãƒ¼ãƒ‰ã‚’ä»˜åŠ ã™ã‚‹ã“ã¨ã§ã€ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ãƒ‡ãƒ¼ã‚¿ã®å—ã‘æ¸¡ã—ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã®ãƒ‡ãƒ¼ã‚¿å½¢å¼ã§ã™ã€‚JavaScriptã‹ã‚‰ã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã®ãƒ‡ãƒ¼ã‚¿ãŒç°¡å˜ã«æ‰±ãˆã‚‹ã“ã¨ãªã©ã‚’ç†ç”±ã«ã€å¤šæ•°ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§APIã®ä¸€éƒ¨ã¨ã—ã¦JSONPå½¢å¼ã§ãƒ‡ãƒ¼ã‚¿ã®æä¾›ãŒè¡Œã‚ã‚Œã¦ã„ã¾ã™ã€‚ å…·ä½“çš„ãªä¾‹ã‚’è¦‹
tamaot 2009/08/12
ajax

ã‚ã¨ã§èªã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

JavaScript

JSON

jsonp

security

web

xss
ãƒªãƒ³ã‚¯
chromiumã®greasemonkeyå®Ÿè£…ã¨ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å†èªã¿è¾¼ã¿ã•ã›ã‚‹æ–¹æ³• Â« ku
COLLECTION & COPYçµŒç”±Chromiumã®Greasemonkeyã‚’è»½ãè©¦ã—ãŸã€‚ã§chromeã«officialãªgreasemonkeyãŒæè¼‰ã•ã‚ŒãŸã¨ã„ã†ã®ã‚’çŸ¥ã£ã¦ã€ã‚³ãƒ¼ãƒ‰ã‚’ãƒã‚§ãƒƒã‚¯ï¼ src/chrome/renderer/greasemonkey_slave.ccãŒå®Ÿè£…ã€‚æ¥µã‚ã¦ã‚·ãƒ³ãƒ—ãƒ«ã€‚Firefoxç‰ˆã¨é–¢æ•°åãŒåŒã˜InjectScriptsã«ãªã£ã¦ã„ã¦ã†ã‘ã¾ã—ãŸã€‚ bool GreasemonkeySlave::InjectScripts(WebFrame* frame) { // TODO(aa): Check script patterns here for (std::vector<GreasemonkeyScript>::iterator script = scripts_.begin(); script != scripts_.end(); ++script
tamaot 2008/10/24
google chrome

greasemonkey

chrome

firefox

Google Chrome

Greasemonkey

Iterator

JSONP

WebCore
ãƒªãƒ³ã‚¯
ã‚†ãƒ¼ã™ã‘ã¹ãƒ¼æ—¥è¨˜
ã‚µã‚ã¨ã¯å½¼å¥³ã®è‡ªå®…è¿‘ãã€æ¹˜å—å°é§…å‰ã®ã‚¹ãƒ¼ãƒ‘ãƒ¼ãƒžãƒ¼ã‚±ãƒƒãƒˆã§å¾…ã¡åˆã‚ã›ã‚’ã—ãŸã€‚å½¼å¥³ã¯è‡ªè»¢è»Šã§å¾Œã‹ã‚‰è¿½ã„ã¤ãã¨è¨€ã„ã€åƒ•ã¯å¤§ããªã‚³ã‚¤ãƒ³ãƒ‘ãƒ¼ã‚ãƒ³ã‚°ã¸è»Šã‚’åœã‚ãŸã€‚ç…™è‰ã‚’ä¸€æœ¬å¸ã£ã¦ã‹ã‚‰ã‚¹ãƒ¼ãƒ‘ãƒ¼ãƒžãƒ¼ã‚±ãƒƒãƒˆã¸å‘ã‹ã†ã¨ã€ã²ã£ãã‚Šãªã—ã«ä¸»å©¦çš„ãªå¥³æ€§ã‹ãŠã°ã‚ã¡ã‚ƒã‚“ãŒå…¥ã‚Šå£ã‚’å‡ºãŸã‚Šå…¥ã£ãŸã‚Šã—ã¦ã„ãŸã€‚æ™‚åˆ»ã¯åˆå¾Œ5æ™‚ã«ãªã‚‹ã€‚æ™‚è¨ˆã‹ã‚‰ç›®ã‚’ä¸Šã’ã‚‹ã¨ã€å¾…ãŸã›ã¡ã‚ƒã£ãŸã‚ãã¨å¤§ã—ã¦æ‚ªã³ã‚Œã¦ãªã„æ§˜åã§ã‚µã‚ãŒæ‰‹ã¶ã‚‰ã§ã‚„ã£ã¦ããŸã€‚ ãŠç¤¼ã«æ–™ç†ã‚’ä½œã‚‹ã¨ã¯ã„ãˆã€ã‚µã‚ã®å®¶ã«ã¯é£ŸæãŒååˆ†è¶³ã‚Šã¦ã„ãªã„ã‚‰ã—ãã€ã“ã†ã—ã¦ã‚¹ãƒ¼ãƒ‘ãƒ¼ãƒžãƒ¼ã‚±ãƒƒãƒˆã«å¯„ã‚‹ã“ã¨ã«ãªã£ãŸã€‚ã‚µã‚ã¯é‡Žèœã‚³ãƒ¼ãƒŠãƒ¼ã‹ã‚‰ç²¾è‚‰ã‚³ãƒ¼ãƒŠãƒ¼ã¾ã§ã€ã¾ã‚‹ã§å„ªç§€ãªã‚«ãƒ¼ãƒŠãƒ“ã«å°Žã‹ã‚Œã‚‹ã‚ˆã†ã«ç„¡é§„ãªãç‚¹æ¤œã—ã¦ã„ã£ãŸã€‚æ¬²ã—ã„é£ŸæãŒã‚ã‚‹ã¨ã€2ç§’é–“ç¨‹åº¦ãã‚Œã‚‰ã‚’å‡è¦–ã—ã€ä¸€åº¦æ‰‹ã«å–ã£ãŸã˜ã‚ƒãŒã„ã‚‚ã‚„ã‚‰è±šè‚‰ã‚„ã‚‰ã‚’è¿·ã†ã“ã¨ãªãåƒ•ãŒæŒã£ã¦ã„ã‚‹ã‚«ã‚´ã«æ”¾ã‚Šè¾¼ã‚“ã ã€‚æœ€å¾Œã«ã‚¢ãƒ«ã‚³ãƒ¼ãƒ«é£²æ–™ãŒå†·ã‚„ã•ã‚Œã¦ã„ã‚‹æ£šã®å‰ã¸è¡Œãã¨ã€ç§ãŒé£²ã‚€ã‹ã‚‰ã¨ãƒ
tamaot 2008/04/26
cpan

perl

webservice-simple

API

CPAN

Flickr

JSON

JSONP

Lingr

Perl
ãƒªãƒ³ã‚¯
ã¯ã¦ãªãƒ–ãƒã‚° | ç„¡æ–™ãƒ–ãƒã‚°ã‚’ä½œæˆã—ã‚ˆã†
è³ƒè²¸æš®ã‚‰ã—ã®ã‚ãŒå®¶ã®åœ°éœ‡å¯¾ç–ã€æºã‚Œã‹ã‚‰å‘½ã‚’å®ˆã‚‹ç·¨ã€‘ ä»¥å‰ã®ãƒ–ãƒã‚°ã§ã‚‚è¨˜è¼‰ã—ãŸã€é˜²ç½ã®å„ªå…ˆé †ä½ã«åŸºã¥ã„ã¦å¯¾ç–ã‚’é€²ã‚ã¦ã„ã¾ã™ã€‚ã¾ã æ‰‹ã‚’ã¤ã‘ã‚‰ã‚Œã¦ã„ãªã„éƒ¨åˆ†ã‚‚ã‚ã‚Šã¾ã™ãŒã€ã‚ã‚‹ç¨‹åº¦ã¾ã¨ã¾ã£ã¦ããŸã®ã§ã–ã£ãã‚Šã¨ã”ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ å„ªå…ˆé †ä½åˆ¥ã«æ”¹å–„ã—ã¦ã„ã£ã¦ã„ã‚‹ãŸã‚ã€ä»Šå›žã¯ä¸»ã«åœ°éœ‡ã®æºã‚Œå¯¾ç–ãŒãƒ¡ã‚¤ãƒ³ã«ãªã‚Šã¾ã™ã€‚â€¦
tamaot 2008/04/09
*ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

ajax

browser

cross domain

crossdomain

flash

javascript

js

json

jsonp
ãƒªãƒ³ã‚¯
ã‚¯ãƒªãƒ¼ãƒ³ãª JSONP ãƒªã‚¯ã‚¨ã‚¹ãƒˆ - elm200 ã®æ—¥è¨˜(æ—§ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼)
åŸºæœ¬æ¦‚å¿µ JSONP (JSON with Padding) ã¨ã¯ã€HTML æ–‡æ›¸ã«ãŠã„ã¦ã€Javascript ã‚’ä½¿ã£ã¦ SCRIPT è¦ç´ ã‚’å‹•çš„ã«è¿½åŠ ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ»ãƒ‡ãƒ¼ã‚¿ã®å–å¾—ã‚’å¯èƒ½ã«ã™ã‚‹æŠ€è¡“ã§ã‚ã‚‹ã€‚ JSON ã¨ã„ã†åå‰ã¯ã¤ã„ã¦ã„ã‚‹ãŒã€å–å¾—ã§ãã‚‹ãƒ‡ãƒ¼ã‚¿ã¯ JSON å½¢å¼ã«é™ã‚‰ãªã„ã€‚(XMLHttpRequest ã®å–å¾—ãƒ‡ãƒ¼ã‚¿ãŒ XML å½¢å¼ã¨é™ã‚‰ãªã„ã®ã¨ã€çš®è‚‰ã«ã‚‚ä¼¼ã¦ã„ã‚‹) SCRIPT è¦ç´ ã‚’è¿½åŠ ã™ã‚‹ã¨ã€ãƒ–ãƒ©ã‚¦ã‚¶ã¯ Javascript ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒã‹ã‚‰èªã¿è¾¼ã‚‚ã†ã¨ã™ã‚‹ãŒã€ã“ã® Javascript ãƒ•ã‚¡ã‚¤ãƒ«ã¯ã€èªã¿è¾¼ã¾ã‚ŒãŸã¨åŒæ™‚ã«å®Ÿè¡Œã•ã‚Œã‚‹ã®ã§ã€ã“ã“ã§èªã¿è¾¼ã¿å…ƒã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ã‚¤ã‚¹ã¨ãªã‚‹é–¢æ•°ã‚’å‘¼ã³å‡ºã—ã€ã‚µãƒ¼ãƒã‹ã‚‰å–å¾—ã—ãŸãƒ‡ãƒ¼ã‚¿ã‚’å—ã‘æ¸¡ã™ã®ã§ã‚ã‚‹ã€‚ ã‚‚ã£ã¨ã‚‚å˜ç´”åŒ–ã•ã‚ŒãŸä¾‹ã‚’ç¤ºã™ã€‚ <!-- ãƒ–ãƒ©ã‚¦ã‚¶å´(jsonp_client.html)
tamaot 2008/02/09
ajax

json

jsonp

rails

CSRF

JSON

JSONP

Rails

XML

XMLHTTPRequest
ãƒªãƒ³ã‚¯
1