{"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fsecondlife.hatenablog.jp%2Fentry%2F20080826%2F1219714690\" title=\"Rails \u304c\u5373\u6b7b\u3059\u308b REXML \u306e DoS \u8106\u5f31\u6027\u306b\u3064\u3044\u3066 - 2nd life (\u79fb\u8ee2\u3057\u307e\u3057\u305f)\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","provider_name":"Hatena Blog","width":"100%","provider_url":"https://hatena.blog","published":"2008-08-26 10:38:10","type":"rich","author_name":"secondlife","image_url":null,"blog_url":"https://secondlife.hatenablog.jp/","description":"http://www.ruby-lang.org/ja/news/2008/08/23/dos-vulnerability-in-rexml/ \u5148\u65e5\u516c\u958b\u3055\u308c\u305f\u3001REXML \u306e\u8106\u5f31\u6027\u3067\u3059\u304c\u3001\u300c\u3042\u30fc\u305d\u3046\u306a\u3093\u3060\u3001\u3067\u3082\u3046\u3061\u306e Rails \u306e\u30b5\u30fc\u30d3\u30b9\u3058\u3083 REXML \u3067\u30d1\u30fc\u30b9\u3059\u308b\u51e6\u7406\u306a\u3093\u3066\u66f8\u3044\u3066\u306a\u3044\u304b\u3089\u5225\u306b\u3044\u3044\u3084\u300d\u3068\u304b\u601d\u3063\u3066\u3044\u308b\u65b9\u3001\u5927\u5909\u5371\u967a\u3067\u3059\u3002\u307f\u3093\u306a\u30d1\u30c3\u30c1\u3042\u3066\u3088\u3046\u3088\uff01 XML entity explosion attack\u3068\u547c\u3070\u308c\u308b\u653b\u6483\u624b\u6cd5\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u304b\u3089\u4e0e\u3048\u3089\u308c\u305fXML\u3092\u89e3\u6790\u3059\u308b\u3088\u3046\u306a\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u30b5\u30fc\u30d3\u30b9\u4e0d\u80fd(DoS)\u72b6\u614b\u306b\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u5927\u90e8\u5206\u306eRails\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306f\u3053\u306e\u653b\u6483\u306b\u5bfe\u2026","author_url":"https://blog.hatena.ne.jp/secondlife/","title":"Rails \u304c\u5373\u6b7b\u3059\u308b REXML \u306e DoS \u8106\u5f31\u6027\u306b\u3064\u3044\u3066","blog_title":"2nd life (\u79fb\u8ee2\u3057\u307e\u3057\u305f)","categories":[],"version":"1.0","height":"190","url":"https://secondlife.hatenablog.jp/entry/20080826/1219714690"}