{"url":"https://hasegawa.hatenablog.com/entry/20161210/p1","image_url":null,"author_url":"https://blog.hatena.ne.jp/hasegawayosuke/","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fhasegawa.hatenablog.com%2Fentry%2F20161210%2Fp1\" title=\" 30x\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u306e\u30ec\u30b9\u30dd\u30f3\u30b9\u30dc\u30c7\u30a3\u3067\u3082XSS - \u8449\u3063\u3071\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"\u8449\u3063\u3071\u65e5\u8a18","author_name":"hasegawayosuke","provider_name":"Hatena Blog","height":"190","blog_url":"https://hasegawa.hatenablog.com/","categories":["SECURITY"],"title":" 30x\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u306e\u30ec\u30b9\u30dd\u30f3\u30b9\u30dc\u30c7\u30a3\u3067\u3082XSS","type":"rich","width":"100%","provider_url":"https://hatena.blog","version":"1.0","description":"\u3053\u306e\u8a18\u4e8b\u306f \u300c\u8106\u5f31\u6027\"&'<<>\\ Advent Calendar 2016\u300d10\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002\u5c0f\u30cd\u30bf\u3067\u3059\u307f\u307e\u305b\u3093\u3002 301\u3084302\u306e\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u306e\u30ec\u30b9\u30dd\u30f3\u30b9\u30dc\u30c7\u30a3\u306b\u3066XSS\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u304c\u7a00\u306b\u3042\u308a\u307e\u3059\u304c\u300130x\u5fdc\u7b54\u3067\u306f\u30dc\u30c7\u30a3\u90e8\u5206\u306f\u8868\u793a\u3055\u308c\u306a\u3044\u306e\u3067XSS\u304c\u5b58\u5728\u3057\u3066\u3082\u8105\u5a01\u306f\u767a\u751f\u3057\u306a\u3044\u3068\u3044\u3046\u306e\u304c\u591a\u304f\u306e\u65b9\u306e\u7406\u89e3\u3067\u306f\u306a\u3044\u3067\u3057\u3087\u3046\u304b\u3002 GET /redir?q=http://example.jp/?\"><script>alert(1)</script> HTTP/1.1 Host: example.jp HTTP/1.1 301 Moved Permanently Location: http://e\u2026","published":"2016-12-10 00:00:00"}