{"type":"rich","url":"https://blog.willnet.in/entry/20080912/1221218145","author_url":"https://blog.hatena.ne.jp/willnet/","published":"2008-09-12 20:15:45","categories":["rails"],"blog_url":"https://blog.willnet.in/","author_name":"willnet","provider_url":"https://hatena.blog","height":"190","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.willnet.in%2Fentry%2F20080912%2F1221218145\" title=\"session fixation attack\u3068CSRF\u306e\u30b8\u30ec\u30f3\u30de - \u304a\u3082\u3057\u308dweb\u30b5\u30fc\u30d3\u30b9\u958b\u767a\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","version":"1.0","title":"session fixation attack\u3068CSRF\u306e\u30b8\u30ec\u30f3\u30de","provider_name":"Hatena Blog","blog_title":"\u304a\u3082\u3057\u308dweb\u30b5\u30fc\u30d3\u30b9\u958b\u767a\u65e5\u8a18","width":"100%","image_url":null,"description":"\u6700\u8fd1\u3001Rails\u306e\u8a8d\u8a3c\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30c7\u30d5\u30a1\u30af\u30c8\u30b9\u30bf\u30f3\u30c0\u30fc\u30c9(\u591a\u5206)\u3067\u3042\u308brestful_authentication\u3092\u4f7f\u3044\u59cb\u3081\u307e\u3057\u305f\u3002\u307e\u3060\u5c11\u3057\u3057\u304b\u89e6\u308c\u3066\u306a\u3044\u3067\u3059\u304c\u3001\u304b\u306a\u308a\u4fbf\u5229\u305d\u3046\u306a\u611f\u3058\u3067\u3059\u3002\u3053\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001\u8a8d\u8a3c\u306b\u5fc5\u8981\u306a\u30b3\u30fc\u30c9\u3092\u81ea\u52d5\u751f\u6210\u3057\u3066\u304f\u308c\u308b\u306e\u3067\u3059\u304c\u3001\u305d\u3053\u3067\u5c11\u3057\u6c17\u306b\u306a\u308b\u3068\u3053\u308d\u304c\u51fa\u3066\u304d\u307e\u3057\u305f\u3002UsersController#create*1\u306e\u30b3\u30fc\u30c9\u306e\u30b3\u30e1\u30f3\u30c8\u90e8\u5206\u3067\u3059\u3002 def create logout_keeping_session! @user = User.new(params[:user]) success = @user && @user.save if success && @us\u2026"}