{"author_name":"nikkie-ftnext","title":"#djangocongress \u30c8\u30fc\u30af\u5ef6\u9577\u6226\uff1aXSS\u3067cookie\u3092\u4ed6\u30b5\u30fc\u30d0\u306b\u9001\u4fe1\u3059\u308b\u305f\u3081\u3001Django\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u8a2d\u5b9a\u3092\u7de9\u3081\u308b\uff08\u8106\u5f31\u6027\u306e\u4f5c\u308a\u8fbc\u307f\u306a\u306e\u3067\u771f\u4f3c\u3057\u306a\u3044\u3067\u304f\u3060\u3055\u3044\uff09","published":"2023-10-07 23:43:32","blog_title":"nikkie-ftnext\u306e\u65e5\u8a18","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fnikkie-ftnext.hatenablog.com%2Fentry%2Fdjango-cookie-session-not-httponly-for-xss-demo\" title=\"#djangocongress \u30c8\u30fc\u30af\u5ef6\u9577\u6226\uff1aXSS\u3067cookie\u3092\u4ed6\u30b5\u30fc\u30d0\u306b\u9001\u4fe1\u3059\u308b\u305f\u3081\u3001Django\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u8a2d\u5b9a\u3092\u7de9\u3081\u308b\uff08\u8106\u5f31\u6027\u306e\u4f5c\u308a\u8fbc\u307f\u306a\u306e\u3067\u771f\u4f3c\u3057\u306a\u3044\u3067\u304f\u3060\u3055\u3044\uff09 - nikkie-ftnext\u306e\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","provider_url":"https://hatena.blog","type":"rich","description":"\u306f\u3058\u3081\u306b DjangoCongress JP 2023\u30011\u65e5\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3057\u305f\uff01 nikkie\u3067\u3059\u3002 \u30c8\u30fc\u30af\u3057\u305f\u300cDjango\u30a2\u30d7\u30ea\u306b\u4f5c\u308a\u8fbc\u3093\u3067\u5b66\u3076\u8106\u5f31\u6027\uff08SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3068XSS\u7bc7\uff09\u300d\u306b\u3064\u3044\u3066\u5ef6\u9577\u6226\u30b3\u30f3\u30c6\u30f3\u30c4\u3092\u304a\u5c4a\u3051\u3057\u307e\u3059 \u76ee\u6b21 \u306f\u3058\u3081\u306b \u76ee\u6b21 \u30c8\u30fc\u30af\u300cDjango\u30a2\u30d7\u30ea\u306b\u4f5c\u308a\u8fbc\u3093\u3067\u5b66\u3076\u8106\u5f31\u6027\uff08SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3068XSS\u7bc7\uff09\u300d nikkie\u306e\u52d8\u9055\u3044\uff1a\u30c7\u30e2\u3067\u898b\u305b\u305fcookie\u306fDjango\u30a2\u30d7\u30ea\u306b\u3088\u308b\u3082\u306e\u3067\u306f\u306a\u304b\u3063\u305f Django\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a XSS\u3067cookie\u3092\u4ed6\u30b5\u30fc\u30d0\u306b\u9001\u4fe1\u3059\u308b\u305f\u3081\u306b\u7de9\u3081\u305f\u8a2d\u5b9a\uff08\u975e\u63a8\u5968\uff09 \u7d42\u308f\u308a\u306b \u30c8\u30fc\u30af\u300cDjango\u30a2\u30d7\u30ea\u306b\u4f5c\u308a\u8fbc\u3093\u3067\u5b66\u3076\u8106\u2026","width":"100%","blog_url":"https://nikkie-ftnext.hatenablog.com/","categories":["Django"],"author_url":"https://blog.hatena.ne.jp/nikkie-ftnext/","provider_name":"Hatena Blog","version":"1.0","height":"190","url":"https://nikkie-ftnext.hatenablog.com/entry/django-cookie-session-not-httponly-for-xss-demo","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/n/nikkie-ftnext/20231007/20231007232053.png"}