{"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.hamayanhamayan.com%2Fentry%2F2021%2F02%2F08%2F222218\" title=\"Web Utils [DiceCTF 2021] - \u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_url":"https://blog.hamayanhamayan.com/","url":"https://blog.hamayanhamayan.com/entry/2021/02/08/222218","image_url":null,"height":"190","provider_name":"Hatena Blog","version":"1.0","author_name":"hamayanhamayan","author_url":"https://blog.hatena.ne.jp/hamayanhamayan/","published":"2021-02-08 22:22:18","description":"XSS\u304c\u5fc5\u8981\u306b\u306a\u308b\u3002 XSS\u304c\u6210\u7acb\u3057\u305d\u3046\u306a\u6240\u3092\u63a2\u3057\u3066\u307f\u3088\u3046\u3002 \u753b\u9762\u51fa\u529b\u90e8\u5206\u3067\u306fdocument.querySelector('div').textContent = data;\u306e\u3088\u3046\u306btextContent\u3092\u4f7f\u3063\u3066\u3044\u308b\u306e\u3067\u653b\u3081\u308b\u306e\u306f\u96e3\u3057\u305d\u3046\u3002 \u4ed6\u306b\u306f\u2026\u3068\u63a2\u3059\u3068\u3001view.html\u306eif (type === 'link') return window.location = data;\u306b\u884c\u304d\u7740\u304f\u3002 \u3053\u3053\u306a\u3089\u884c\u3051\u305d\u3046\u3002 type\u304clink\u3068\u306a\u308b\u306e\u306f\u3001Link Shortener\u306e\u65b9\u3067\u3042\u308b\u304c\u3001\u3053\u3061\u3089\u306e\u65b9\u306fapi.js\u306e\u4ee5\u4e0b\u90e8\u5206\u3067\u3042\u308b\u3002 fastify.post('createLink', { hand\u2026","categories":["Security"],"title":"Web Utils [DiceCTF 2021]","provider_url":"https://hatena.blog","type":"rich","width":"100%","blog_title":"\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093\u306f\u307e\u3084\u3093"}