{"title":"From POST to GET Open redirect\u3092\u8a33\u3057\u3066\u307f\u305f","provider_url":"https://hatena.blog","image_url":null,"author_url":"https://blog.hatena.ne.jp/ThisIsOne/","description":"Hello there, ('\u03c9')\u30ce \u8106\u5f31\u6027\uff1a \u30aa\u30fc\u30d7\u30f3\u30ea\u30c0\u30a4\u30ec\u30af\u30c8 \u8a18\u4e8b\uff1a https://medium.com/sourav-sahana/from-post-to-get-open-redirect-e91f4f4206a POST \u304b\u3089 GET \u3078\u306e\u30aa\u30fc\u30d7\u30f3\u30ea\u30c0\u30a4\u30ec\u30af\u30c8 \u4ed6\u306e\u521d\u5fc3\u8005\u30cf\u30f3\u30bf\u30fc\u3068\u540c\u3058\u3088\u3046\u306b\u3001\u30aa\u30fc\u30d7\u30f3\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3001 \u30b5\u30d6\u30c9\u30e1\u30a4\u30f3\u30c6\u30a4\u30af\u30aa\u30fc\u30d0\u30fc\u3001\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001 XSS\u3092\u63a2\u3057\u3066\u3044\u307e\u3057\u305f\u304c\u3001\u5931\u6557\u3057\u3066\u3084\u308b\u6c17\u3092\u5931\u3063\u3066\u3002 \u4eca\u56de\u306fCookie\u306e\u7121\u52b9\u5316\u306e\u554f\u984c\u3092\u30c6\u30b9\u30c8\u3057\u3066\u3082\u5931\u6557\u3002 \u767a\u898b\uff1a Cookie \u306e\u7121\u52b9\u5316\u306e\u554f\u984c\u306f\u306a\u304f\u3002 \u3057\u304b\u3057\u3001\u691c\u7d22\u30d0\u30fc\u306b\u3053\u306e\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u304c\u8868\u793a\u3055\u308c\u3002\u2026","version":"1.0","height":"190","width":"100%","type":"rich","provider_name":"Hatena Blog","blog_url":"https://cysec148.hatenablog.com/","categories":["Bug Bounty"],"url":"https://cysec148.hatenablog.com/entry/2023/08/27/155745","blog_title":"Shikata Ga Nai","published":"2023-08-27 15:57:45","author_name":"ThisIsOne","html":""}