{"type":"rich","width":"100%","blog_title":"\u8449\u3063\u3071\u65e5\u8a18","author_name":"hasegawayosuke","categories":["SECURITY"],"author_url":"https://blog.hatena.ne.jp/hasegawayosuke/","description":"\u307e\u3063\u3061\u3083\u3055\u3093\u3068\u3053\u308d\u3088\u308a\u3002Google \u691c\u7d22\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u305d\u3046\u3067\u3002\u691c\u7d22\u6587\u5b57\u5217\u3092 UTF-7 \u3067\u6307\u5b9a\u3057\u305f\u5834\u5408\u306b\u691c\u67fb\u304c\u4e0d\u5341\u5206\u306a\u305f\u3081\u306b %2BADw-SCRIPT%2BAD4-alert(%2BACI-XSS%2BACI-)%2BADw-/SCRIPT%2BAD4-%2BADw-x\u3068\u3044\u3046\u3088\u3046\u306a\u5f62\u3067\u30b9\u30af\u30ea\u30d7\u30c8\u304c\u57cb\u3081\u8fbc\u3081\u308b\u3001\u3068\u3044\u3046\u8a71\u3002Google \u306e 404 \u30da\u30fc\u30b8\u306b\u3066 UTF-7 \u3067 XSS \u306a\u8a71\u3084\u3001MS06-053 \u306e\u3088\u3046\u306b\u3001IE \u304c UTF-7 \u3092\u81ea\u52d5\u5224\u5225\u3059\u308b\u305f\u3081\u306b\u767a\u751f\u3059\u308b\u7cfb\u304b\u3068\u4e00\u77ac\u601d\u3063\u305f\u306e\u3067\u3059\u3051\u3069\u3001\u3053\u306e\u3042\u305f\u308a\u3092\u898b\u308b\u3068\u3001URL\u3067 oe=UTF-7 \u3068\u3044\u3046\u6307\u2026","url":"https://hasegawa.hatenablog.com/entry/20061121/p1","blog_url":"https://hasegawa.hatenablog.com/","version":"1.0","title":" ha.ckers.org web application security lab - Archive \u00bb Widespread XSS for Google Search Appliance","provider_url":"https://hatena.blog","height":"190","provider_name":"Hatena Blog","image_url":null,"published":"2006-11-21 00:00:02","html":""}