{"author_name":"hamayanhamayan","provider_url":"https://hatena.blog","blog_title":"\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.hamayanhamayan.com%2Fentry%2F2020%2F03%2F06%2F211103\" title=\"csp-1 [BSidesSF 2020 CTF Web] - \u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","provider_name":"Hatena Blog","height":"190","author_url":"https://blog.hatena.ne.jp/hamayanhamayan/","image_url":null,"type":"rich","title":"csp-1 [BSidesSF 2020 CTF Web]","url":"https://blog.hamayanhamayan.com/entry/2020/03/06/211103","version":"1.0","categories":["Security"],"blog_url":"https://blog.hamayanhamayan.com/","width":"100%","description":"https://ctftime.org/task/10518 \u524d\u63d0\u77e5\u8b58 CSP Bypass \u89e3\u8aac CSP\u306e\u8a2d\u5b9a\u3092\u898b\u308b\u3002 content-security-policy: script-src 'self' data:; default-src 'self'; connect-src *; report-uri /csp_report script-src\u306edata:\u306f\u8a31\u53ef\u3057\u3066\u3044\u308b\u3002 \u305d\u308c\u3067\u4e0e\u3048\u308c\u3070\u8a31\u53ef\u3055\u308c\u308b\u3002 Data URI scheme - Wikipedia data:\u306f\u3053\u308c\u898b\u3068\u3051\u3070\u5927\u4e08\u592b\u3002 \u53c2\u8003\u306b\u3057\u305f\u3002BSidesSF 2020 CTF <script src=\"data:text/\u2026","published":"2020-03-06 21:11:03"}