{"url":"https://cysec148.hatenablog.com/entry/2025/08/15/215316","provider_name":"Hatena Blog","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fcysec148.hatenablog.com%2Fentry%2F2025%2F08%2F15%2F215316\" title=\"\u3010\u6709\u6599\u8a66\u4f5c\u7248\u3011PortSwigger LAB\u89e3\u8aac\uff1aDOM XSS in document.write sink using source location.search\uff08select\u8981\u7d20\u5185\u306edocument.write\u3092\u60aa\u7528\uff09 - Shikata Ga Nai\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"Shikata Ga Nai","published":"2025-08-15 21:53:16","image_url":null,"width":"100%","version":"1.0","title":"\u3010\u6709\u6599\u8a66\u4f5c\u7248\u3011PortSwigger LAB\u89e3\u8aac\uff1aDOM XSS in document.write sink using source location.search\uff08select\u8981\u7d20\u5185\u306edocument.write\u3092\u60aa\u7528\uff09","categories":["Web Security Academy","XSS"],"description":"Hello there, ('\u03c9')\u30ce \u306d\u3089\u3044 \u3053\u306eLAB\u306f\u3001\u5546\u54c1\u30da\u30fc\u30b8\u306e\u5728\u5eab\u30c1\u30a7\u30c3\u30ab\u30fc\u3067\u4f7f\u308f\u308c\u3066\u3044\u308bJavaScript\u304c\u3001URL\u306elocation.search\uff08\u30af\u30a8\u30ea\u6587\u5b57\u5217\uff09\u304b\u3089\u5024\u3092\u53d6\u308a\u51fa\u3057\u3001\u305d\u306e\u307e\u307edocument.write\u3067\uff1cselect>\u914d\u4e0b\u306b\u66f8\u304d\u8fbc\u3080\u3001\u3068\u3044\u3046\u5371\u967a\u306a\u5b9f\u88c5\u306b\u306a\u3063\u3066\u3044\u308b\u70b9\u3092\u7a81\u304d\u307e\u3059\u3002\u653b\u6483\u8005\u306fstoreId\u3068\u3044\u3046URL\u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u7d30\u5de5\u3057\u3066select\u8981\u7d20\u304b\u3089\u8131\u51fa\u3057\u3001\u4efb\u610f\u306eHTML\u8981\u7d20\uff0b\u30a4\u30d9\u30f3\u30c8\u30cf\u30f3\u30c9\u30e9\u3092\u633f\u5165\u3059\u308b\u3053\u3068\u3067alert(1)\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002 \u5168\u4f53\u50cf\uff08\u307e\u305a\u306f\u30b9\u30c8\u30fc\u30ea\u30fc\uff09 \u5546\u54c1\u30da\u30fc\u30b8\u306eURL\u306bstoreId\u3092\u4ed8\u4e0e\u3059\u308b\u3068\u3001\u305d\u306e\u5024\u304c\uff1cselect>\u306e\uff1coption>\u3068\u3057\u3066\u2026","height":"190","provider_url":"https://hatena.blog","type":"rich","blog_url":"https://cysec148.hatenablog.com/","author_url":"https://blog.hatena.ne.jp/ThisIsOne/","author_name":"ThisIsOne"}