{"height":"190","description":"Vue.js\u3092\u4f7f\u3046\u3068\u304d\u306fDOM-based XSS\u306b\u6ce8\u610f\u3057\u306a\u3051\u308c\u3070\u306a\u308a\u307e\u305b\u3093\uff0e\u4f8b\u3048\u3070\uff0cv-html\u304cXSS\u306e\u539f\u56e0\u3068\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3053\u3068\u306f\u6709\u540d\u3067\u3059\uff0e Dynamically rendering arbitrary HTML on your website can be very dangerous because it can easily lead to XSS attacks. Only use v-html on trusted content and never on user-provided content. *1 v-bind\u3068JSON\u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3053\u3068\u3067\uff0c\u540c\u69d8\u306bXSS\u306e\u539f\u56e0\u3068\u306a\u308b\u2026","title":"Vue.js\u306ev-bind\u306bObject\u3092\u4f7f\u3046\u3068\u304d\u306fXSS\u306b\u6c17\u3092\u3064\u3051\u308b","author_url":"https://blog.hatena.ne.jp/atsuhiro-me/","type":"rich","image_url":null,"categories":["JavaScript","\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3","Vue.js"],"blog_url":"https://pc.atsuhiro-me.net/","author_name":"atsuhiro-me","width":"100%","provider_url":"https://hatena.blog","published":"2021-04-08 13:40:11","version":"1.0","provider_name":"Hatena Blog","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fpc.atsuhiro-me.net%2Fentry%2F2021%2F04%2F08%2F134011\" title=\"Vue.js\u306ev-bind\u306bObject\u3092\u4f7f\u3046\u3068\u304d\u306fXSS\u306b\u6c17\u3092\u3064\u3051\u308b - \u307f\u30fc\u306e\u307a\u30fc\u3058\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","url":"https://pc.atsuhiro-me.net/entry/2021/04/08/134011","blog_title":"\u307f\u30fc\u306e\u307a\u30fc\u3058"}