[B! Security][HTML] raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

raimon49 id:raimon49

Securityã¨HTMLã«é–¢ã™ã‚‹raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (33)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SPAã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¶…å…¥é–€ | ãƒ‰ã‚¯ã‚»ãƒ«
ã‚¹ãƒ©ã‚¤ãƒ‰æ¦‚è¦ SPA(Single Page Application)ã®æ™®åŠãŒä¸€å±¤é€²ã‚“ã§ãŠã‚Šã€å¾“æ¥åž‹ã®MPAã‚’çŸ¥ã‚‰ãªã„ã‚¦ã‚§ãƒ–é–‹ç™ºè€…ã‚‚ç”Ÿã¾ã‚Œã¤ã¤ã‚ã‚‹ã‚ˆã†ã§ã™ã€‚SPAå¯¾å¿œã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã§ã¯åŸºæœ¬çš„ãªè„†å¼±æ€§ã«ã¤ã„ã¦ã¯å¯¾ç–æ©Ÿèƒ½ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ãŒã€ãã‚Œã«ã‚‚é–¢ã‚ã‚‰ãšã€è„†å¼±æ€§è¨ºæ–ç‰ã§åŸºæœ¬çš„ãªè„†å¼±æ€§ãŒæŒ‡æ‘˜ã•ã‚Œã‚‹ã‚±ãƒ¼ã‚¹ã¯ã‚€ã—ã‚å¢—ãˆã¤ã¤ã‚ã‚Šã¾ã™ã€‚ æœ¬ã‚»ãƒƒã‚·ãƒ§ãƒ³ã§ã¯ã€Laravelã¨Reactã§é–‹ç™ºã—ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ãƒ¢ãƒ‡ãƒ«ã¨ã—ã¦ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã€èªå¯åˆ¶å¾¡ä¸å‚™ç‰ã®è„†å¼±æ€§ã®å®Ÿä¾‹ã‚’ç´¹ä»‹ã—ãªãŒã‚‰ã€ç¾å®Ÿçš„ãªå¯¾ç–ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚Laravelã‚„Reactä»¥å¤–ã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯åˆ©ç”¨è€…ã«ã‚‚å½¹ç«‹ã¤èª¬æ˜Žã‚’å¿ƒãŒã‘ã¾ã™ã€‚ PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2022ã§ã®è¬›æ¼”è³‡æ–™ã§ã™ã€‚ PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã§ã®å‹•ç”»URL https://www.youtube.com/watch?v=jZ6sWyGxcCs
raimon49 2022/09/25
HTML

JavaScript

PHP

React

Security

XSS

browser

crossdomain

password

study
ãƒªãƒ³ã‚¯
ã€PoCç·¨ã€‘XSSã¸ã®è€æ€§ã«ãŠã„ã¦ãƒ–ãƒ©ã‚¦ã‚¶ã®ãƒ¡ãƒ¢ãƒªç©ºé–“æ–¹å¼ã¯Local Storageæ–¹å¼ã‚ˆã‚Šå®‰å…¨ã‹ï¼Ÿ - GMO Flatt Security Blog
ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®@okazu-dm ã§ã™ã€‚ ã“ã®è¨˜äº‹ã¯ã€Auth0ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ä¿å˜æ–¹æ³•ã«ã¤ã„ã¦è§£èª¬ã—ãŸå‰å›žã®è¨˜äº‹ã®è£œè¶³ã¨ãªã‚‹è¨˜äº‹ã§ã™ã€‚å‰å›žã®è¨˜äº‹ã®è¦æ—¨ã‚’ã–ã£ãã‚Šã¾ã¨ã‚ã‚‹ã¨ä»¥ä¸‹ã®ã‚ˆã†ãªã‚‚ã®ã§ã—ãŸã€‚ Auth0ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã®ãƒ¡ãƒ¢ãƒªç©ºé–“ä¸Šã«ã®ã¿ä¿å˜ã™ã‚‹in-memoryæ–¹å¼ã§ã‚ã‚Šã€XSSã¸ã®è€æ€§ã®ãªã•ç‰ã®ç†ç”±ã§localStorageã§ä¿å˜ã™ã‚‹ã“ã¨ã‚’æŽ¨å¥¨ã—ã¦ã„ãªã„ ã—ã‹ã—ã€XSSã§ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’å¥ªå–ã§ãã‚‹ã®ã¯in-memoryæ–¹å¼ã§ã‚‚åŒã˜ã®ã¯ãš(æ¤œè¨¼ã¯è¡Œã„ã¾ã›ã‚“ã§ã—ãŸ)ã€‚localStorageæ–¹å¼ã‚’éŽåº¦ã«å¿Œé¿ã™ã‚‹å¿…è¦ã¯ãªã„ã®ã§ã¯ãªã„ã‹ ãªãŠã€Flatt Securityã®æä¾›ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ã¯Auth0ã«é™ã‚‰ãšFirebase Authenticationã‚„Amazon Cognitoãªã©ã®IDaaSã®ã‚»ã‚ãƒ¥ã‚¢ãªåˆ©ç”¨
raimon49 2022/08/09
HTML

JavaScript

OAuth

Security

XSS

browser

memory
ãƒªãƒ³ã‚¯
SPAèªè¨¼ãƒˆãƒ¼ã‚¯ãƒ³ã¯localStorageã§ã‚‚Cookieã§ã‚‚ãªã„ã€Auth0æ–¹å¼ã¯ã„ã„ãã¨ã„ã†ãŠè©± - @mizumotokã®ãƒ–ãƒã‚°
SPAèªè¨¼ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ã©ã“ã«ä¿å˜ã™ã‚‹ã‹ã¯è«–äº‰ãŒçµ¶ãˆã¾ã›ã‚“ã€‚localStorageã‚„CookieãŒã‚ˆãä½¿ã‚ã‚Œã¾ã™ãŒã€Auth0ã¯é•ã†æ–¹æ³•ã‚’æŽ¡ç”¨ã—ã¦ã„ã¾ã™ã€‚ã“ã®è¨˜äº‹ã§ã¯ã€Auth0ã®ãƒˆãƒ¼ã‚¯ãƒ³ç®¡ç†ã®æ–¹å¼ã‚’ç†è§£ã§ãã€ãƒˆãƒ¼ã‚¯ãƒ³ç®¡ç†ä¸Šã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¸ã®ç†è§£ã‚’æ·±ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ SPAã®èªè¨¼ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ã©ã“ã«ä¿å˜ã™ã‚‹ã‹ ãƒ–ãƒ©ã‚¦ã‚¶ã§ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ä¿å˜ã§ãã‚‹å ´æ‰€ ä¿å˜å ´æ‰€ã®æ¯”è¼ƒ ãƒ¡ãƒªãƒƒãƒˆãƒ»ãƒ‡ãƒ¡ãƒªãƒƒãƒˆ Auth0ã®ã‚¢ãƒ—ãƒãƒ¼ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã¯ã‚¤ãƒ³ãƒ¡ãƒ¢ãƒªã«ä¿å˜ OpenID Connectæº–æ‹ ã¨ãƒˆãƒ¼ã‚¯ãƒ³å–å¾—ã®UI/UXã®æ‚ªåŒ–å›žé¿ã‚’ä¸¡ç«‹ Auth0ã®jsãƒ©ã‚¤ãƒ–ãƒ©ãƒª ãƒã‚°ã‚¤ãƒ³ ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ï¼ˆå†ï¼‰å–å¾— å›³è§£ ãƒã‚°ã‚¤ãƒ³ ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®ï¼ˆå†ï¼‰å–å¾— è‡ªã‚µãƒ¼ãƒ“ã‚¹å†…ã®èªè¨¼ã ã‘ã®ã‚‚ã£ã¨ç°¡æ˜“ãªæ§‹æˆ ãƒã‚°ã‚¤ãƒ³ IDãƒˆãƒ¼ã‚¯ãƒ³å–å¾— ã¾ã¨ã‚ SPAã®èªè¨¼ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ã©ã“ã«ä¿å˜ã™ã‚‹ã‹ React ã‚„Vueã§èªè¨¼ä»˜ãSPAï¼ˆSingle Pa
raimon49 2022/08/03
HTML

JavaScript

OAuth

Security

browser

memory
ãƒªãƒ³ã‚¯
Yahoo! JAPAN ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹èªè¨¼ã§å•ã„åˆã‚ã›ã‚’ 25% å‰Šæ¸›ã€ãƒã‚°ã‚¤ãƒ³æ™‚é–“ã‚‚ 2.6 å€é€Ÿã«
Yahoo! JAPAN ã¯æ—¥æœ¬ã«ã¦æ¤œç´¢ã‚„ãƒ‹ãƒ¥ãƒ¼ã‚¹ã¨ã„ã£ãŸãƒ¡ãƒ‡ã‚£ã‚¢ã‚µãƒ¼ãƒ“ã‚¹ã€e ã‚³ãƒžãƒ¼ã‚¹ã€ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ãªã©ã€100ã‚’è¶…ãˆã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã—ã¦ã„ã‚‹ä¼æ¥ã§ã™ã€‚ã“ã‚Œã‚‰ã®ã‚µãƒ¼ãƒ“ã‚¹ã§åˆ©ç”¨ã™ã‚‹ãŸã‚ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚‚é•·å¹´æä¾›ã—ç¶šã‘ã€æœˆé–“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯ 5,000 ä¸‡ã‚’è¶…ãˆã‚‹è¦æ¨¡ã¨ãªã£ã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã€ã“ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’æä¾›ã™ã‚‹ä¸ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«å¯¾ã—ã¦ã®æ”»æ’ƒã‚’ç¶™ç¶šçš„ã«å—ã‘ã¦ãŠã‚Šã€ã¾ãŸã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ç¶™ç¶šåˆ©ç”¨ã™ã‚‹ä¸Šã§ã®èª²é¡Œã«ã¤ã„ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰å•ã„åˆã‚ã›ã‚‚å¤šãé ‚ã„ã¦ã„ã¾ã—ãŸã€‚ã“ã‚Œã‚‰ã®èª²é¡Œã®å¤šãã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã„ã†èªè¨¼æ‰‹æ®µã«ä¾å˜ã™ã‚‹ã‚‚ã®ã§ã—ãŸã€‚ã¾ãŸã€å½“æ™‚ã€æŠ€è¡“çš„ã«ã‚‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ä»¥å¤–ã®èªè¨¼æ‰‹æ®µã‚’æä¾›ã™ã‚‹ãŸã‚ã®æ©Ÿèƒ½ã‚„ãƒ‡ãƒã‚¤ã‚¹ã®æ™®åŠãŒå§‹ã¾ã‚Šã¤ã¤ã‚ã‚Šã¾ã—ãŸã€‚ã“ã†ã„ã£ãŸèƒŒæ™¯ã®ã‚‚ã¨ã€Yahoo! JAPAN ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã‚ˆã‚‹èªè¨¼ã‹ã‚‰ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ãªèªè¨¼ã¸ç§»è¡Œã™ã‚‹ã¨åˆ¤æ–ã—ã¾ã—ãŸã€‚ ãªãœãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ã‹
raimon49 2022/05/31
Chrome

Edge

HTML

JavaScript

Safari

Security

Yahoo

analysis

login

password
ãƒªãƒ³ã‚¯
Spectre ã®è„…å¨ã¨ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆãŒè¨å®šã™ã¹ããƒ˜ãƒƒãƒ€ãƒ¼ã«ã¤ã„ã¦
é•·ã„è¨˜äº‹ãªã®ã§å…ˆã«çµè«–ã‚’æ›¸ãã¾ã™ã€‚ Spectre ã®ç™»å ´ã§ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«å¿…è¦ã¨ã•ã‚Œã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦ä»¶ã¯å¢—ãˆã¾ã—ãŸã€‚å…·ä½“çš„ã«å¿…è¦ãªå¯¾ç–ã¯ä¸‹è¨˜ã®é€šã‚Šã§ã™ã€‚ ã™ã¹ã¦ã®ãƒªã‚½ãƒ¼ã‚¹ã¯ Cross-Origin-Resource-Policy ãƒ˜ãƒƒãƒ€ãƒ¼ã‚’ä½¿ã£ã¦ cross-origin ãªãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¸ã®èªã¿è¾¼ã¿ã‚’åˆ¶å¾¡ã™ã‚‹ã€‚ HTML ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã¯ X-Frame-Options ãƒ˜ãƒƒãƒ€ãƒ¼ã‚‚ã—ãã¯ Content-Security-Policy (CSP) ãƒ˜ãƒƒãƒ€ãƒ¼ã® frame-ancestors ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’è¿½åŠ ã—ã¦ã€cross-origin ãªãƒšãƒ¼ã‚¸ã¸ã® iframe ã«ã‚ˆã‚‹åŸ‹ã‚è¾¼ã¿ã‚’åˆ¶å¾¡ã™ã‚‹ã€‚ HTML ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã¯ Cross-Origin-Opener-Policy ãƒ˜ãƒƒãƒ€ãƒ¼ã‚’è¿½åŠ ã—ã¦ popup ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ã¨ã—ã¦é–‹ã‹ã‚ŒãŸå ´åˆã® cross-origin ãªãƒšãƒ¼ã‚¸ã¨ã®ã‚³ãƒŸãƒ¥ãƒ‹
raimon49 2021/11/02
Chrome

HTML

HTTP

Security

browser

crossdomain
ãƒªãƒ³ã‚¯
HTMLã¨CSSã ã‘ã§Webãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚µã‚¤ãƒ‰ãƒãƒ£ãƒãƒ«æ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‹æ‰‹æ³•
raimon49 2021/03/13
ARM

CPU

CSS

HTML

JavaScript

Security

browser

x86

æ™‚é–“
ãƒªãƒ³ã‚¯
ã‚¢ãƒ³ã‚«ãƒ¼ä¸Šã® target=_blank ãŒ rel=noopener ã‚’æš—ç¤ºã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸ | Firefox ã‚µã‚¤ãƒˆäº’æ›æ€§æƒ…å ±
ãƒªãƒªãƒ¼ã‚¹: Firefox 79 ã‚«ãƒ†ã‚´ãƒªãƒ¼: DOM, HTML, ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ & ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ æ¦‚è¦Firefox 79 ä»¥é™ã€target="_blank" ã‚’ä¼´ã£ãŸ <a> ã‚„ <area> è¦ç´ ã¯ã€ç¾è¡Œã® HTML ä»•æ§˜ ã«å¾“ã„ã€rel å±žæ€§ãŒè¨å®šã•ã‚Œã¦ã„ãªã„é™ã‚Šæš—é»™çš„ã« rel="noopener" ã‚’é©ç”¨ã—ã¾ã™ã€‚noopener ãƒªãƒ³ã‚¯ã‚¿ã‚¤ãƒ—ã¯æ–°ãŸã«é–‹ã‹ã‚ŒãŸã‚¦ã‚£ãƒ³ãƒ‰ã‚¦å†…ã® window.opener ã‚’ null ã¨ã™ã‚‹ã“ã¨ã§ã€ã“ã® DOM ãƒ—ãƒãƒ‘ãƒ†ã‚£ãŒä¿¡é ¼ã§ããªã„ç¬¬ä¸‰è€…ã®ã‚µã‚¤ãƒˆã«ã‚ˆã£ã¦æ‚ªç”¨ã•ã‚Œã‚‹ã®ã‚’é˜²ãŽã¾ã™ã€‚å¿…è¦ãªå ´åˆã¯ã€rel="opener" ã‚’æ˜Žç¤ºçš„ã«è¨å®šã™ã‚‹ã“ã¨ã§æŒ™å‹•ã‚’åè»¢ã•ã›ã‚‰ã‚Œã¾ã™ã€‚ Apple ã¯ 2019 å¹´ 3 æœˆå…¬é–‹ã® Safari 12.1 ã§æœ€åˆã«ã“ã®å¤‰æ›´ã‚’è¡Œã„ã¾ã—ãŸã€‚Firefox ã§ã¯ã€Firefox 65 ä»¥é™ã® Nightly ã¨æ—©æœŸ Be
raimon49 2020/06/10
Firefox

HTML

Safari

Security

privacy
ãƒªãƒ³ã‚¯
Masato Kinugawa Security Blog: CVE-2020-11022/CVE-2020-11023: jQuery 3.5.0ã§ä¿®æ£ã•ã‚ŒãŸSecurity Fixã®è©³ç´°
English version is here:Â https://mksben.l0.cm/2020/05/jquery3.5.0-xss.html å…ˆæœˆã€jQuery 3.5.0ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€åƒ•ãŒå ±å‘Šã—ãŸå•é¡ŒãŒSecurity Fixã¨ã—ã¦å«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ jQuery 3.5.0 Released! | Official jQuery Blog https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ å ±å‘Šã—ãŸãƒã‚°ã¯ã€CVE-2020-11022ã€ CVE-2020-11023 ã¨ã—ã¦æŽ¡ç•ªã•ã‚Œã¦ã„ã¾ã™ã€‚ https://github.com/advisories/GHSA-gxr4-xjj5-5px2 https://github.com/advisories/GHSA-jpcq-cgw6-v4j6
raimon49 2020/05/19
DOMPurifyã«ã‚ˆã‚‹å¯¾å‡¦ç™‚æ³•ã®ãƒ•ã‚©ãƒãƒ¼ã‚‚è§£èª¬ã—ã¦ãã‚Œã¦ã‚ã‚‹ã€‚

HTML

JavaScript

Security

XSS

jQuery

æ£è¦è¡¨ç¾
ãƒªãƒ³ã‚¯
é›»åæƒ…å ±å¦ç‰¹è«–ï¼šChromiumã®ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚’è§£ãæ˜Žã‹ã™
ã“ã®ãƒ–ãƒ©ã‚¦ã‚¶ ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®ã‚µãƒãƒ¼ãƒˆã¯çµ‚äº†ã—ã¾ã—ãŸã€‚ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã—ã¦ãã ã•ã„ã€‚
raimon49 2020/04/14
ãƒžãƒ«ãƒãƒ—ãƒã‚»ã‚¹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã€€GCã¯C++ã¨JavaScriptã®å¢ƒç•Œéƒ¨åˆ†

Chrome

CodeReading

GC

HTML

Security

cpp

design

embedded

memory

performance
ãƒªãƒ³ã‚¯
Superfish/eDellRootãŒå±é™ºãªç†ç”± - ã‚ã‚‚ãŠãã°
Lenovoè£½ã®PCã®ä¸€éƒ¨ã«Superfishã¨ã„ã†ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒæ¨™æº–ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒç¢ºèªã•ã‚Œã€å¤§ããªå•é¡Œã¨ãªã£ã¦ã„ã¾ã™ã€‚ [2015-11-24è¿½è¨˜] DELLè£½ã®PCã«ã‚‚ã€ã€ŒeDellRootã€ã¨ã•ã‚Œã‚‹Superfishã¨åŒæ§˜ã®å•é¡Œã‚’æŒã¤ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ãŒå°Žå…¥ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ Dellã®PCã«ä¸å¯©ãªãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã€Lenovoã®Superfishã¨åŒã˜å•é¡Œã‹ - ITmedia ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º Dude, You Got Dellâ€™d: Publishing Your Privates - Blog - Duo Security Joe Nord personal blog: New Dell computer comes with a eDellRoot trusted root certificate https://t.co/chURwV7eNE eDellRootã§
raimon49 2015/02/20
å…¬å¼ãŒä¸é–“è€…æ”»æ’ƒã€€WindowsãŒæä¾›ã—ã¦ã„ã‚‹ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã®ã‚¹ãƒˆã‚¢ã‚’å…±ç”¨ã—ã¦ã„ã‚‹ãƒ–ãƒ©ã‚¦ã‚¶ã¯å½±éŸ¿ã‚’å—ã‘ã‚‹

HTML

JavaScript

Lenovo

PC

Security

SSL

browser

åºƒå‘Š
ãƒªãƒ³ã‚¯
ãã‚ãã‚æŠ¼ã•ãˆã¦ãŠããŸã„ AngularJSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
20211203 AWS Black Belt Online Seminar AWS re:Invent 2021ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆé€Ÿå ±
raimon49 2014/07/28
ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æœ‰åŠ¹ã«ãªã£ã¦ã„ã‚‹Strict Contextual Escapingã‚„åŒä¸€ã‚ªãƒªã‚¸ãƒ³XHRãƒ˜ãƒƒãƒ€ã¸ã®X-XSRF-TOKENä»˜ä¸Žã®è©±ã€‚

AngularJS

CSRF

HTML

JavaScript

Security

XSS

ã‚ã¨ã§èªã‚“ã
ãƒªãƒ³ã‚¯
ãƒãƒƒã‚«ã‚½ãƒ³ã§kintoneã‚’ä½¿ãŠã†ï¼ â€“ cybozu developer network
ï¼”ä¸‡ç¤¾*1ã®æ¥å‹™èª²é¡Œã‚’ ã‚µã‚¤ãƒœã‚¦ã‚ºã®ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã§è§£æ±ºã—ã‚ˆã† API ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã€è¨è¨ˆãƒ»é–‹ç™ºãƒ»é‹ç”¨ã®ãƒŽã‚¦ãƒã‚¦ã‚„ã€ã‚¤ãƒ™ãƒ³ãƒˆæƒ…å ±ãªã©ã€ ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æˆæžœã‚’æœ€å¤§åŒ–ã™ã‚‹æŠ€è¡“æƒ…å ±ã‚’ç™ºä¿¡ã—ã¦ã„ã¾ã™ã€‚ *1 2025å¹´10æœˆæ™‚ç‚¹ã§ã®kintoneå°Žå…¥ç¤¾æ•°
raimon49 2014/05/09
strictãƒ¢ãƒ¼ãƒ‰æŽ¨å¥¨ã—ã¦ã‚‹ã‚“ã ãªã€‚

API

CSRF

CSS

Cybozu

HTML

JavaScript

Security

XSS

guideline

programming
ãƒªãƒ³ã‚¯
mXSS - Mutation-based Cross-Site-Scripting ã®ã¯ãªã— - è‘‰ã£ã±æ—¥è¨˜
ã“ã“æ•°å¹´ã€XSSæ¥ç•Œã®æœ€å…ˆç«¯ã§ç››ã‚Šä¸ŠãŒã£ã¦ã„ã‚‹è©±é¡Œã¨ã—ã¦ mXSS ã¨ã„ã†ã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚mXSS - Mutation-based XSS ã¨ã¯ã€ä¾‹ãˆã° innerHTML ãªã©ã‚’çµŒç”±ã—ã¦ã™ã§ã«æ§‹ç¯‰ã•ã‚Œã¦ã„ã‚‹DOMãƒ„ãƒªãƒ¼ã‚’å‚ç…§ã—ãŸã¨ãã«ã€æœ¬æ¥ã®DOMæ§‹é€ ã¨ã¯ç•°ãªã‚‹çµæžœã‚’å¾—ã¦ã—ã¾ã„ã€ãã®ãŸã‚ã«HTMLæ§‹é€ ã®ç ´å£Šã‚’å¼•ãèµ·ã“ã™ã¨ã„ã†é¡žã®DOM based XSSã®äºœç¨®ã¨ã‚‚è¨€ãˆã¾ã™ã€‚ mXSSã«é–¢ã—ã¦ã¯ä»¥ä¸‹ã®è³‡æ–™ãªã©ãŒå‚è€ƒã«ãªã‚Šã¾ã™ã€‚ The innerHTML Apocalypse mXSS Attacks: Attacking well-secured Web-Applications by using innerHTML Mutations ã©ã¡ã‚‰ã®è³‡æ–™ã«ã‚‚æŽ²è¼‰ã•ã‚Œã¦ã„ã¾ã™ãŒã€mXSSã®ãã£ã‹ã‘ã¨ãªã£ãŸã®ã¯ ã€Œæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆ1ï¼‰ï¼šï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®
raimon49 2014/05/09
ï¼žinnnerHTMLãªã©ã‚’é€šã˜ã¦HTMLã‚’å–å¾—ã—ãŸå ´åˆã«ã€æœ¬æ¥ã®DOMæ§‹é€ ã¨ã¯ç•°ãªã‚‹æ§‹é€ ã‚’è¡¨ã™HTMLæ–‡å—åˆ—ãŒå–å¾—ã§ãã¦ã—ã¾ã†ã¨ã„ã†ç‚¹ãŒmXSSã®è‚

HTML

IE

JavaScript

Security

XSS

browser
ãƒªãƒ³ã‚¯
ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã€ã‚µãƒ‹ã‚¿ã‚¤ã‚ºã®ã‚¤ãƒ¡ãƒ¼ã‚¸
ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã€ã‚µãƒ‹ã‚¿ã‚¤ã‚ºã®ç”¨èªžã¯åˆ†ã‹ã‚Šã«ãã„ã®ã§ã€ã‚¤ãƒ¡ãƒ¼ã‚¸ã§èª¬æ˜Žã—ã¾ã™ã€‚ â€œ><script>alert(â€˜xssâ€™);</script> ã¨ã„ã†å…¥åŠ›æ–‡å—åˆ—ãŒã€ãã‚Œãžã‚Œã©ã†ãªã‚‹ã‹ã‚’ç¤ºã—ã¾ã™ã€‚ â€»1 åŽ³å¯†ãªå®šç¾©ã§ã¯ã‚ã‚Šã¾ã›ã‚“ï¼ˆè¦ä»¶ã‚„æ–‡è„ˆã«ã‚ˆã‚Šå¤‰åŒ–ã—ã¾ã™ï¼‰ â€»2 ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã„ã†ç”¨èªžã¯éžå¸¸ã«å¹…ãŒã‚ã‚Šã¾ã™ï¼ˆã“ã“ã®ã€Œåç§°è£œè¶³ã€å‚ç…§ï¼‰ã€‚ â€»3 ã‚µãƒ‹ã‚¿ã‚¤ã‚ºã¨ã„ã†ç”¨èªžã¯éžå¸¸ã«å¹…ãŒã‚ã‚‹ã§ã€ä½¿ã†å ´åˆã¯äº‹å‰ã«èªžç¾©ã‚’å®šç¾©ã—ã¾ã—ã‚‡ã†ï¼ˆå‚ç…§ï¼‰ã€‚
raimon49 2013/12/10
åˆ†ã‹ã‚Šæ˜“ã„ã€‚ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã®ã¨ã“ã‚ã¯stripã¨ã„ã†ã‚¤ãƒ¡ãƒ¼ã‚¸ï¼ˆPHPè„³ï¼‰ã€‚

HTML

MySQL

Security

XSS

programming
ãƒªãƒ³ã‚¯
PHPã®JSONã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—
(Last Updated On: 2023å¹´12æœˆ8æ—¥) è¿½è¨˜ï¼šæœ€è¿‘ã®OWASPã‚¬ã‚¤ãƒ‰ã®æ›´æ–°ã§JavaScriptæ–‡å—åˆ—ã¯Unicodeã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã§å®‰å…¨æ€§ã‚’ç¢ºä¿ã™ã‚‹ã‚ˆã†å¤‰æ›´ã•ã‚Œã¾ã—ãŸã€‚å…ƒã€…ã“ã®ãƒ–ãƒã‚°ã§ã‚‚Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®ã¾ã¾åˆ©ç”¨ã™ã‚‹ã‚ˆã†ã«æ›¸ã„ã¦ã„ã¾ã™ã€‚ä»–ã®è¨€èªžã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’åˆ©ç”¨ã—ã¾ã—ã‚‡ã†ã€‚PHPã‚‚ASCIIé ˜åŸŸã®æ–‡å—ã‚’Unicodeã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã‚ˆã†ã«ã—ãŸæ–¹ãŒè‰¯ã„ã¨æ€ã„ã¾ã™ã€‚ã“ã‚Œã¯ææ¡ˆã—ã¦å®Ÿç¾ã™ã‚‹ã‚ˆã†ã«åŠªåŠ›ã—ã¾ã™ã€‚ JSONã¯JavaScriptã®ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚„é…åˆ—ã‚’è¡¨ç¾ã™ã‚‹æ–¹å¼ã§RFC 4627ã§å®šç¾©ã•ã‚Œã¦ã„ã¾ã™ã€‚ãƒ¡ãƒ‡ã‚£ã‚¢ã‚¿ã‚¤ãƒ—ã¯application/jsonã€ãƒ•ã‚¡ã‚¤ãƒ«æ‹¡å¼µåã¯jsonã¨å®šç¾©ã•ã‚Œã¦ã„ã¾ã™ã€‚ PHPã«JSONå½¢å¼ã®ãƒ‡ãƒ¼ã‚¿ã«å¤‰æ›ã™ã‚‹json_encodeé–¢æ•°ã¨json_decodeé–¢æ•°ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚ JSONé–¢æ•°ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹
raimon49 2013/12/01
json_encode()ã«æ¸¡ã™ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã€€JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT

HTML

JavaScript

JSON

PHP

Security

study
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
raimon49 2013/11/09
HTML

Java

JSON

Security

XSS

study

æ–‡å—ã‚³ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
å¾³ä¸¸æœ¬ã«å¦ã¶ å®‰å…¨ãªPHPã‚¢ãƒ—ãƒªé–‹ç™ºã®é‰„å‰‡2012
Securityã¨Validationã®å¥‡å¦™ãªé–¢ä¿‚ã€ã‚ã‚‹ã„ã¯Drupalã¯ãªãœValidationã‚’ã—ãŸãŒã‚‰ãªã„ã®ã‹
raimon49 2012/09/16
json_encode()ã£ã¦PHP5.3ã‹ã‚‰ã¯ç¬¬2å¼•æ•°ãŒã‚ã£ãŸã®ã‹ã€‚çŸ¥ã‚‰ãªã‹ã£ãŸã€‚http://php.net/manual/ja/function.json-encode.php

DB

GREE

PHP

HTML

JSON

Security

browser

study

ã‚ã¨ã§èªã‚“ã
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
raimon49 2012/06/11
ï¼žinnerHTML/outerHTML/insertAdjacentHTML/document.write ã«æ¸¡ã™ã“ã¨ã§ãã‚‹HTMLã®åˆ¶é™

Metro

Microsoft

HTML

Security

XSS

JavaScript
ãƒªãƒ³ã‚¯
å‡¦ç†é–‹å§‹å¾Œã®ä¾‹å¤–å‡¦ç†ã§ã¯ã€Œã‚µãƒ‹ã‚¿ã‚¤ã‚ºã€ãŒæœ‰åŠ¹ãªå ´åˆã‚‚ã‚ã‚‹
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€è„†å¼±æ€§å¯¾å‡¦ã«ãŠã‘ã‚‹ä¾‹å¤–å‡¦ç†ã«ã¤ã„ã¦ã€å¥¥ä¸€ç©‚æ°(@kazuho)ã¨ã®ä¼šè©±ã‹ã‚‰ç§ãŒå¦ã‚“ã ã“ã¨ã‚’å…±æœ‰ã„ãŸã—ã¾ã™ã€‚ã‚»ã‚ãƒ¥ã‚¢ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã®å¿ƒå¾—ã¨ã—ã¦ã€ç•°å¸¸ãŒèµ·ã“ã‚Œã°ç›´ã¡ã«ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’çµ‚äº†ã™ã‚‹ã“ã¨ãŒæŽ¨å¥¨ã•ã‚Œã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ãŒã€å¿…ãšã—ã‚‚ãã†ã§ã¯ãªã„ã¨ã„ã†ã®ãŒçµè«–ã§ã™ã€‚ ã¯ã˜ã‚ã« Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§å¯¾ç–ã§ã¯ã€è„†å¼±æ€§ãŒç™ºç”Ÿã™ã‚‹ã®ã¯ãƒ‡ãƒ¼ã‚¿ã‚’ä½¿ã†ã¨ã“ã‚ã§ã‚ã‚‹ã®ã§ã€ãƒ‡ãƒ¼ã‚¿ã‚’ä½¿ã†éš›ã®é©åˆ‡ãªã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ãªã©ã§å¯¾å‡¦ã™ã‚‹ã®ãŒã‚ˆã„ã¨è¨€ã‚ã‚Œã¾ã™ã€‚ã—ã‹ã—ã€å‡¦ç†å†…å®¹ã«ã‚ˆã£ã¦ã¯ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒã§ããªã„å ´åˆã‚‚ã‚ã‚Šã€ãã®å ´åˆã®å¯¾å‡¦ã«ã¤ã„ã¦ã¯ã¾ã å®šèª¬ãŒãªã„ã¨è€ƒãˆã¾ã™ã€‚ ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒã§ããªã„å ´åˆã®ä¾‹ã¨ã—ã¦ã¯ã€ä»¥ä¸‹ãŒã‚ã‚Šã¾ã™ã€‚ SQLã®æ•°å€¤ãƒªãƒ†ãƒ©ãƒ«ã‚’æ§‹æˆã™ã‚‹éš›ã«ã€å…¥åŠ›ã«æ•°å€¤ä»¥å¤–ã®æ–‡å—ãŒå…¥ã£ã¦ã„ãŸ ãƒ¡ãƒ¼ãƒ«é€ä¿¡ã—ã‚ˆã†ã¨ã—ãŸãŒã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«æ”¹è¡Œæ–‡å—ãŒå…¥ã£ã¦ã„ãŸ å…¥åŠ›ã•ã‚ŒãŸURLã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã‚ˆã†ã¨ã—ãŸã¨ã“ã‚ã€U
raimon49 2012/04/03
ãƒ•ã‚§ãƒ¼ãƒ«ã‚»ãƒ¼ãƒ•ã¨ã—ã¦æ•¢ãˆã¦ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§ãªãã‚µãƒ‹ã‚¿ã‚¤ã‚ºã‚’é¸ã¶å ´é¢ã«ã¤ã„ã¦ã€‚è‡ã„ç‰©ã¸ã®è“‹ã ãŒè“‹ã®å¤§ãã•ã‚’ãã¡ã‚“ã¨è€ƒãˆã‚‹ã€‚æ–‡è„ˆã¨ã—ã¦ã¯å‡ºåŠ›æ™‚ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã«ã€Œã‚µãƒ‹ã‚¿ã‚¤ã‚ºï¼šå—ã‘ä»˜ã‘ã‚‰ã‚Œãªã„æ–‡å—ã‚’å‰Šé™¤ã™ã‚‹ã‹ã€ä»–

DB

HTML

Security

Twitter

study

æ–‡å—ã‚³ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
å¦¥å½“æ€§ã¨ã¯ä»•æ§˜ã®æ‰€ä½œ - SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã¨ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ - ï¼Šã€Œãµã£ã‹ã¤ã®ã˜ã‚…ã‚‚ã‚“ãŒã¡ãŒã„ã¾ã™ã€‚ã€withã¬ã“
ç¹°ã‚Šè¿”ã—ã«ãªã‚Šã¾ã™ãŒã€å¦¥å½“æ€§æ¤œè¨¼ã¯ä»•æ§˜ã®å•é¡Œã§ã‚ã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ä»•æ§˜ã®å•é¡Œã§ã‚ã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ãªã„ã¨ã¯ã©ã†ã„ã†ã“ã¨ã‹èª¬æ˜Žã—ã¾ã™ã€‚SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®å¯¾ç–ã¯ã€1. SQLã‚’æ–‡å—åˆ—çµåˆã§ä½œã‚‰ãªã„ 2. ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã‚’ä½¿ã† ã§ã™ã€‚ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ã€‚ ç°¡å˜ãªä¾‹ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§éƒµä¾¿ç•ªå·ã‚’æŒ‡å®šã™ã‚‹ãƒ•ã‚©ãƒ¼ãƒ ã‚’è€ƒãˆã¾ã—ã‚‡ã†ã€‚ æ—¥æœ¬ã®éƒµä¾¿ç•ªå·ã‚’æŒ‡å®šã™ã‚‹ãƒ•ã‚©ãƒ¼ãƒ ã®è¨è¨ˆã§ã‚ˆãè¦‹ã‚‹ã‚‚ã®ã¯å¤§ããåˆ†ã‘ã¦2é€šã‚Šã‚ã‚Šã€ä¸Š3æ¡ã¨ä¸‹4æ¡ã‚’åˆ¥ã€…ã«å…¥åŠ›ã•ã›ã‚‹ã‚‚ã®ã¨ã€1ã¤ã®ãƒ•ã‚©ãƒ¼ãƒ ã«ã¾ã¨ã‚ã¦å…¥åŠ›ã•ã›ã‚‹ã‚‚ã®ã§ã™ã€‚ä½æ‰€ã‹ã‚‰è£œå®Œã•ã›ã‚‹è¨è¨ˆã‚‚ã‚ã‚Šãˆã¾ã™ãŒã“ã“ã§ã¯ãŠã„ã¦ãŠãã¾ã™ã€‚ <input type="text" name="postal_code_1"> - <input type="text" name="postal_code_2"> <input typ
raimon49 2011/12/28
ï¼žã“ã®å…¥åŠ›ã«ã¯SQLã‚„HTMLã¨ã—ã¦ç‰¹åˆ¥ãªæ„å‘³ã‚’æŒã¤æ–‡å—ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ãŒã€ãã‚‚ãã‚‚RDBMSã¨ã®ã‚„ã‚Šå–ã‚Šã§é©åˆ‡ã«ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã‚’ä½¿ç”¨ã—ã¦ã„ãŸã‚Šã€HTMLã¨ã—ã¦å‡ºåŠ›ã™ã‚‹ç›´å‰ã«HTMLã¨ã—ã¦ç‰¹åˆ¥ãªæ„å‘³ã‚’æŒã¤æ–‡å—ã‚’é©åˆ‡ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—

HTML

SQL

Security
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸