{"author_url":"https://blog.hatena.ne.jp/teracc/","blog_url":"https://blog.ts5.me/","blog_title":"teracc\u2019s blog","published":"2021-08-23 18:27:43","image_url":null,"description":"\u524d\u56de\u306e\u7d9a\u304d\u306e\u30a8\u30f3\u30c8\u30ea\u3002\u524d\u63d0\u6761\u4ef6\u306f\u524d\u3068\u540c\u3058\u3002 CSRF (Refresh, Link, Content-Security-Policy) \u30d8\u30c3\u30c0\u304c\u5165\u308b\u30da\u30fc\u30b8\u3092\u8d77\u70b9\u3068\u3057\u3066\u3001\u540c\u3058\u30aa\u30ea\u30b8\u30f3\u306e\u4ed6\u306e\u30da\u30fc\u30b8\u306bCSRF\u3067\u304d\u306a\u3044\u304b\uff1f\u3068\u3044\u3046\u6587\u8108\u306e\u8a71\u3002\u30c8\u30fc\u30af\u30f3\u3067\u5bfe\u7b56\u3057\u3066\u3044\u308b\u306a\u3089\u653b\u6483\u306e\u53ef\u80fd\u6027\u306f\u7121\u3044\u304c\u3001SameSite\u306eCookie\u3084\u3001Referer/Origin\u306a\u3069\u306e\u8981\u6c42\u30d8\u30c3\u30c0\u3092\u4f7f\u3044\u5bfe\u7b56\u3057\u3066\u3044\u308b\u5834\u5408\u306b\u306f\u3001\u53ef\u80fd\u6027\u304c\u51fa\u3066\u304f\u308b\u3002\u4ee5\u4e0b\u306fLink\u30d8\u30c3\u30c0\u3092\u5165\u308c\u305f\u4f8b\u3002 Link: </target.cgi?a=1&b=2>; rel=preload; as=script; crossorigin Chrome\u3084Safari\u3067\u306f\u4e0a\u306e\u2026","author_name":"teracc","provider_name":"Hatena Blog","provider_url":"https://hatena.blog","height":"190","version":"1.0","width":"100%","type":"rich","url":"https://blog.ts5.me/entry/2021/08/23/182743","categories":[],"title":"HTTP\u30d8\u30c3\u30c0\u306b\u3064\u3044\u3066\u306e\u8abf\u67fb(2/?)","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.ts5.me%2Fentry%2F2021%2F08%2F23%2F182743\" title=\"HTTP\u30d8\u30c3\u30c0\u306b\u3064\u3044\u3066\u306e\u8abf\u67fb(2/?) - teracc\u2019s blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>"}