{"author_url":"https://blog.hatena.ne.jp/ThisIsOne/","width":"100%","provider_url":"https://hatena.blog","height":"190","url":"https://cysec148.hatenablog.com/entry/2025/09/09/075654","blog_url":"https://cysec148.hatenablog.com/","version":"1.0","title":"LAB: DOM Clobbering \u3092\u5229\u7528\u3057\u305f HTML \u30d5\u30a3\u30eb\u30bf\u30fc\u56de\u907f\uff08Clobbering DOM attributes to bypass HTML filters\uff09","blog_title":"Shikata Ga Nai","description":"Hello there, ('\u03c9')\u30ce \ud83d\udc40 \u307e\u305a\u7406\u89e3\u3059\u3079\u304d\u30dd\u30a4\u30f3\u30c8 HTML \u30d5\u30a3\u30eb\u30bf\u30fc\u304c\u5c5e\u6027\u3092\u5236\u5fa1\u3057\u3066\u3044\u308b HTMLJanitor \u306f\u4e0d\u6b63\u306a\u5c5e\u6027\uff08\u4f8b: onload \u3084 onclick\uff09\u3092\u524a\u9664\u3057\u3066\u5b89\u5168\u5316\u3059\u308b\u4ed5\u7d44\u307f\u3002 \u2192 \u3057\u304b\u3057\u5185\u90e8\u7684\u306b attributes \u30d7\u30ed\u30d1\u30c6\u30a3\u306b\u4f9d\u5b58\u3057\u3066\u3044\u308b\u3002 DOM Clobbering \u3068\u306f\uff1f HTML\u8981\u7d20\u306e id \u3084 name \u304c\u3001DOM \u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u306e\u30d7\u30ed\u30d1\u30c6\u30a3\u3068\u885d\u7a81\uff08clobber\uff09\u3059\u308b\u3068\u3001\u30d6\u30e9\u30a6\u30b6\u306e\u6319\u52d5\u304c\u58ca\u308c\u308b\u73fe\u8c61\u3002 \u3053\u308c\u306b\u3088\u308a\u3001\u30e9\u30a4\u30d6\u30e9\u30ea\u5185\u90e8\u306e\u5b89\u5168\u30c1\u30a7\u30c3\u30af\u304c bypass \u3055\u308c\u3001\u901a\u5e38\u7981\u6b62\u3055\u308c\u308b\u5c5e\u6027\u3092\u6ce8\u5165\u3067\u304d\u308b\u3002 \u3053\u306e\u30e9\u30dc\u3067\u306f attributes \u3092 c\u2026","image_url":null,"type":"rich","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fcysec148.hatenablog.com%2Fentry%2F2025%2F09%2F09%2F075654\" title=\"LAB: DOM Clobbering \u3092\u5229\u7528\u3057\u305f HTML \u30d5\u30a3\u30eb\u30bf\u30fc\u56de\u907f\uff08Clobbering DOM attributes to bypass HTML filters\uff09 - Shikata Ga Nai\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","author_name":"ThisIsOne","provider_name":"Hatena Blog","published":"2025-09-09 07:56:54","categories":["Web Security Academy","XSS"]}