{"author_name":"masakiti2005","blog_title":"masa\u306e\u30e1\u30e2\u7f6e\u304d\u5834","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fmasakiti2005.hatenadiary.org%2Fentry%2F20070809%2F1186679980\" title=\"Struts XSS Vulnerability - masa\u306e\u30e1\u30e2\u7f6e\u304d\u5834\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","categories":["Security","Struts","Tomcat"],"blog_url":"https://masakiti2005.hatenadiary.org/","version":"1.0","provider_name":"Hatena Blog","description":"IPA\u306b\u5831\u544a\u3057\u305f\u8106\u5f31\u6027\u60c5\u5831\u304c\u5148\u65e5\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002 http://jvn.jp/jp/JVN%2316535199/index.html\u7d50\u679c\u3068\u3057\u3066\u306fTomcat\u306e\u8106\u5f31\u6027\u3067\u3042\u308b\u3068\u4f4d\u7f6e\u4ed8\u3051\u3089\u308c\u3066\u3057\u307e\u3063\u305f\u306e\u3067\u3059\u304c\u3001Struts\u306e\u8106\u5f31\u6027\u3068\u3057\u3066\u5831\u544a\u3092\u3042\u3052\u3066\u3044\u305f\u554f\u984c\u3067\u3059\u3002 \u6982\u8981\u306f\u3001Struts\u304c\u63d0\u4f9b\u3059\u308bHTML\u7528\u30bf\u30b0\u30e9\u30a4\u30d6\u30e9\u30ea\u304cAccept-Language\u30d8\u30c3\u30c0\u5024\u3092\u30a8\u30b9\u30b1\u30fc\u30d7\u305b\u305a\u306b\u51fa\u529b\u3059\u308b\u305f\u3081XSS\u304c\u767a\u52d5\u3057\u3066\u3057\u307e\u3046\u3001\u3068\u3044\u3046\u3082\u306e\u3067\u3059\u3002 \u653b\u6483\u306b\u306fFlash\u304c\u5fc5\u8981\u3068\u306a\u308b\u305f\u3081\u3001\u300cFlash\u306e\u8106\u5f31\u6027\u3067\u3042\u308b\u300d\u3068\u3044\u3046\u56de\u7b54\u304c\u6765\u308b\u53ef\u80fd\u6027\u3082\u3042\u308b\u304b\u306a\uff1f\u3068\u8003\u3048\u3066\u3044\u305f\u306e\u3067\u3059\u304c\u3001\u300cTomcat\u306e\u554f\u984c\u3060\uff01\u300d\u3068\u3044\u3046\u4e88\u60f3\u5916\u306e\u56de\u7b54\u304cIPA\u7d4c\u2026","author_url":"https://blog.hatena.ne.jp/masakiti2005/","type":"rich","width":"100%","height":"190","title":"Struts XSS Vulnerability","image_url":null,"url":"https://masakiti2005.hatenadiary.org/entry/20070809/1186679980","provider_url":"https://hatena.blog","published":"2007-08-09 02:19:40"}