{"author_url":"https://blog.hatena.ne.jp/dk521123/","type":"rich","title":"\u3010Ajax\u3011 Ajax\u306b\u304a\u3051\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3","version":"1.0","provider_url":"https://hatena.blog","height":"190","provider_name":"Hatena Blog","description":"\u25a0 Ajax\u7279\u6709\u306e\u30ea\u30b9\u30af * Ajax\u7279\u6709\u306e\u30ea\u30b9\u30af\u3092\u8003\u3048\u308b\u3002 http://www.websec-room.com/2013/07/28/876 http://d.hatena.ne.jp/ockeghem/20110907/p1 \u304c\u53c2\u8003\u306b\u306a\u308b \u30101\u3011XSS 1-1) \u5bfe\u5fdc (1) \u300cX-Requested-With: XMLHttpRequest\u300d \u306e\u3042\u308b\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u307f\u3092\u8a31\u53ef\u3059\u308b => X-Requested-With \u306e\u5024\u306b\u3088\u3063\u3066\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u304cAjax\u306e\u3082\u306e\u306a\u306e\u304b\u3001Ajax\u4ee5\u5916\u306e\u3082\u306e\u304b\u3092\u5224\u5225\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308b => X-Requested-With \u306e\u306a\u3044\u5834\u5408\u3001\u30b5\u30fc\u30d0\u5074\u3067\u30a8\u30e9\u30fc\u306b\u3059\u308b (2)\u2026","categories":["\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u95a2\u9023"],"url":"https://dk521123.hatenablog.com/entry/35603506","width":"100%","blog_title":"\u30d7\u30ed\u30b0\u30e9\u30e0 \u306e\u8d85\u500b\u4eba\u7684\u306a\u30e1\u30e2","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fdk521123.hatenablog.com%2Fentry%2F35603506\" title=\"\u3010Ajax\u3011 Ajax\u306b\u304a\u3051\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 - \u30d7\u30ed\u30b0\u30e9\u30e0 \u306e\u8d85\u500b\u4eba\u7684\u306a\u30e1\u30e2\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_url":"https://dk521123.hatenablog.com/","author_name":"dk521123","published":"2015-12-01 23:55:00","image_url":null}