{"type":"rich","categories":["web","Security","svg"],"image_url":null,"description":"\u30b9\u30af\u30ea\u30d7\u30c8\u306eSVG\u304cCSP(Content-Security-Policy)\u4e0b\u3067\u3069\u306e\u3088\u3046\u306b\u52d5\u304f\u306e\u304b\u3092\u691c\u8a3c\u3057\u305f\u306e\u3067\u307e\u3068\u3081\u3066\u307f\u307e\u3057\u305f\u3002\u300eSVG\u3067XSS\u3057\u3066\u307f\u308b\u3002\u305d\u306e1\u300f\u306e\u3064\u3065\u304d\u3067\u3059 \u524d\u56de\u306fsvg\u3092html\u306b\u53d6\u308a\u5165\u308c\u308b\u30bf\u30b0\u3092\u305d\u308c\u305e\u308c\u8a66\u3057\u3066\u6319\u52d5\u304c\u3069\u306e\u3088\u3046\u306b\u5909\u308f\u308b\u304b\u3092\u898b\u307e\u3057\u305f\u3002\u4eca\u56de\u306f\u305d\u308c\u3092CSP\u4e0b\u3067\u305f\u3081\u3057\u3066\u307f\u307e\u3059\u3002\u74b0\u5883\u306ffirefox26\u3067\u3059\u3002 \u3069\u3061\u3089\u304b\u3068\u3044\u3046\u3068\u8a66\u3057\u305f\u3053\u3068\u3092\u305d\u306e\u307e\u307e\u4e57\u3063\u3051\u3066\u308b\u5b9f\u9a13\u30ec\u30dd\u30fc\u30c8\u306b\u8fd1\u3044\u3082\u306e\u306a\u306e\u3067\u3082\u3046\u4e00\u56de\u307e\u3068\u3081\u306a\u3044\u3068\u3044\u3051\u306a\u3044\u304b\u306a\u3068\u601d\u3063\u3066\u307e\u3059\u3002","provider_name":"Hatena Blog","url":"https://cocu.hatenablog.com/entry/2013/12/24/060950","author_url":"https://blog.hatena.ne.jp/cocu_628496/","version":"1.0","blog_title":"cocuh's note","blog_url":"https://cocu.hatenablog.com/","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fcocu.hatenablog.com%2Fentry%2F2013%2F12%2F24%2F060950\" title=\"SVG\u3067XSS\u3057\u3066\u307f\u308b\u3002\u305d\u306e2 - cocuh&#39;s note\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","published":"2013-12-24 06:09:50","height":"190","title":"SVG\u3067XSS\u3057\u3066\u307f\u308b\u3002\u305d\u306e2","width":"100%","author_name":"cocu_628496","provider_url":"https://hatena.blog"}