[B! http][ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] yuyamaguã®ãƒ

yuyamagu id:yuyamagu

httpã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹yuyamaguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Node.jsã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | POSTD
(è¨³æ³¨ï¼š2016/1/5ã€ã„ãŸã ã„ãŸç¿»è¨³ãƒ•ã‚£ãƒ¼ãƒ‰ãƒãƒƒã‚¯ã‚’å…ƒã«è¨˜äº‹ã‚’ä¿®æ£ã„ãŸã—ã¾ã—ãŸã€‚) ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ â€“ èª°ã‚‚ãŒè¦‹ã¦è¦‹ã¬ãµã‚Šã‚’ã™ã‚‹å•é¡Œ ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒé‡è¦ã ã¨ã„ã†ã“ã¨ã¯ã€èª°ã‚‚ãŒèªè˜ã—ã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ãŒã€çœŸå‰£ã«ã¨ã‚‰ãˆã¦ã„ã‚‹äººã¯å°‘æ•°ã ã¨æ€ã„ã¾ã™ã€‚æˆ‘ã€…ã€RisingStackã¯ã€çš†ã•ã‚“ã«æ£ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã£ã¦ã„ãŸã ããŸã„ã¨è€ƒãˆã€ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆã‚’ç”¨æ„ã—ã¾ã—ãŸã€‚çš†ã•ã‚“ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä½•åƒäººã¨ã„ã†ãƒ¦ãƒ¼ã‚¶ã‚„ãŠå®¢æ§˜ã«ä½¿ç”¨ã•ã‚Œã‚‹å‰ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã£ã¦ãã ã•ã„ã€‚ ã“ã“ã«æŒ™ã’ãŸãƒªã‚¹ãƒˆã®ã»ã¨ã‚“ã©ã¯æ¦‚ç•¥çš„ãªã‚‚ã®ã§ã€Node.jsã«é™ã‚‰ãšã€å…¨ã¦ã®è¨€èªžã‚„ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã«é©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã ã—ã€ã„ãã¤ã®ãƒ„ãƒ¼ãƒ«ã¯ã€Node.jså›ºæœ‰ã®ã‚‚ã®ã¨ãªã‚Šã¾ã™ã®ã§ã€ã”äº†æ‰¿ãã ã•ã„ã€‚ Node.jsã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã«é–¢ã™ã‚‹ãƒ–ãƒã‚°è¨˜äº‹ã‚‚æŠ•ç¨¿ã—ã¦ã‚ã‚Šã¾ã™ã®ã§ã€ã“ã¡ã‚‰ã‚‚æ˜¯éžèªã‚“ã§ã¿ã¦ãã ã•ã„ã€‚ æ§‹æˆç®¡ç† HT
yuyamagu 2015/11/18
node

node.js

ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

http

security

JavaScript

webé–‹ç™º
ãƒªãƒ³ã‚¯
1åˆ†ã§ã‚ã‹ã‚‹ã€ŒX-ãƒŠãƒ³ãƒˆã‚«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ - è‘‰ã£ã±æ—¥è¨˜
æœ€è¿‘ã®ãƒ¢ãƒ€ãƒ³ãªWebãƒ–ãƒ©ã‚¦ã‚¶ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã—ãã†ãª X- ãªHTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãã‚Œä»¥å¤–ã«ã‚‚ã‚ã£ãŸã‚‰æ•™ãˆã¦ãã ã•ã„ã€‚ X-XSS-Protection 0:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’ç„¡åŠ¹ã«ã™ã‚‹ã€‚ 1:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã€‚ XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã“ã¨ã§ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãŒXSSã®è¢«å®³ã«ã‚ã†å¯èƒ½æ€§ãŒä½Žæ¸›ã™ã‚‹ãŒã€ã¾ã‚Œã«èª¤æ¤œçŸ¥ã™ã‚‹ã“ã¨ã§ç”»é¢ã®è¡¨ç¤ºãŒä¹±ã‚Œã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã€‚IE8+ã€Safariã€Chrome(å¤šåˆ†) ã§æœ‰åŠ¹ã€‚IEã§ã¯ã€ŒX-XSS-Protection: 1; mode=blockã€ã¨ã„ã†æŒ‡å®šã‚‚å¯èƒ½ã€‚ 2008/7/2 - IE8 Security Part IV: The XSS FilterBug 27312 â€“ [XSSAuditor] Add support for header X-XSS-Protection X-Content-Ty
yuyamagu 2011/01/07
xss

IE

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

web

browser

header

http
ãƒªãƒ³ã‚¯
2008-08-06 - T.Teradaã®æ—¥è¨˜ - HTTPç”¨ã®ãƒšãƒ¼ã‚¸ã«HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹
åŒä¸€ãƒ›ã‚¹ãƒˆä¸Šã«HTTPã¨HTTPSã®ãƒšãƒ¼ã‚¸ãŒåŒå±…ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã‚’ã—ã°ã—ã°ã¿ã¾ã™ã€‚ ãã‚“ãªã‚µã‚¤ãƒˆã§ã¯ã€æœ¬æ¥ã¯HTTPã®ãƒšãƒ¼ã‚¸ã«ã€HTTPSã§ã‚‚ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ãã†ã„ã†å ´åˆã€HTMLã®ä¸èº«ã«ã‚ˆã£ã¦ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡ŒãŒå‡ºã¾ã™ã‚ˆã¨ã„ã†è©±ã§ã™ã€‚ å•é¡ŒãŒã‚ã‚‹ãƒšãƒ¼ã‚¸ http://www.example.jp/index.html ã¨ã„ã†URLã®ãƒšãƒ¼ã‚¸ãŒã‚ã‚‹ã¨ã—ã¾ã™ã€‚ å•é¡Œã¨ãªã‚‹ã®ã¯ã€ãã®ãƒšãƒ¼ã‚¸ã®ä¸èº«ã«ä»¥ä¸‹ã®ã‚ˆã†ãªHTMLãŒãƒ™ã‚¿æ›¸ãã•ã‚Œã¦ã„ã‚‹å ´åˆã§ã™ã€‚ <script src="http://www2.example.jp/foo.js"></script> ã“ã®ãƒšãƒ¼ã‚¸ï¼ˆindex.htmlï¼‰ã¯HTTPã§ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æƒ³å®šã—ã¦ä½œã‚‰ã‚Œã¦ã„ã‚‹ãŸã‚ã€JSãƒ•ã‚¡ã‚¤ãƒ«ã‚’HTTPã§èªã¿è¾¼ã‚“ã§ã„ã¾ã™ã€‚ ã“ã“ã§ã€ã“ã®ãƒšãƒ¼ã‚¸ãŒå®Ÿã¯HTTPSã§ã‚‚ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ã ã¨ã—ã¾ã™ã€‚ã‚‚ã—HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹
yuyamagu 2008/09/10
http

https

security

web

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (13)

httpã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹yuyamaguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ãŠçŸ¥ã‚‰ã›

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (13)

httpã¨ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹yuyamaguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

Node.jsã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | POSTD

1åˆ†ã§ã‚ã‹ã‚‹ã€ŒX-ãƒŠãƒ³ãƒˆã‚«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ - è‘‰ã£ã±æ—¥è¨˜

2008-08-06 - T.Teradaã®æ—¥è¨˜ - HTTPç”¨ã®ãƒšãƒ¼ã‚¸ã«HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹

ãŠçŸ¥ã‚‰ã›

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (13)

httpã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹yuyamaguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

Node.jsã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | POSTD

1åˆ†ã§ã‚ã‹ã‚‹ã€ŒX-ãƒŠãƒ³ãƒˆã‚«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ - è‘‰ã£ã±æ—¥è¨˜

2008-08-06 - T.Teradaã®æ—¥è¨˜ - HTTPç”¨ã®ãƒšãƒ¼ã‚¸ã«HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹

ãŠçŸ¥ã‚‰ã›

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹