{"author_name":"t_ashula","width":"100%","blog_title":"\u307b\u3080\u3089\u3061\u3083\u307b\u3080\u307b\u3080","version":"1.0","blog_url":"https://t-ashula.hateblo.jp/","url":"https://t-ashula.hateblo.jp/entry/2012/08/24/174051","provider_name":"Hatena Blog","height":"190","published":"2012-08-24 17:40:51","categories":[],"image_url":null,"author_url":"https://blog.hatena.ne.jp/t_ashula/","provider_url":"https://hatena.blog","type":"rich","title":"Disqus \u306b\u3044\u304f\u3064\u304b DOM based XSS \u304c\u3042\u3063\u305f\u4ef6","description":"\u6982\u7565 \u30b5\u30a4\u30c8\u306e\u30b3\u30e1\u30f3\u30c8\u6b04\u306e\u5916\u90e8\u59d4\u8a17\u7cfb\u30b5\u30fc\u30d3\u30b9\u306e disqus.com\u306b\u3044\u304f\u3064\u304b DOM based XSS \u304c\u3042\u308a\u307e\u3057\u3066\u4fee\u6b63\u3055\u308c\u307e\u3057\u305f\uff0elocation.hash \u90e8\u5206\u306e url encode \u304c\u884c\u308f\u308c\u306a\u3044 IE, Chrome, Opera \u3067\u554f\u984c\u304c\u3042\u3063\u305f\u3053\u3068\u306f\u78ba\u8a8d\u3057\u3066\u3044\u307e\u3059\uff0e \u307e\u305a\u4e00\u3064\u76ee\u306f\uff0c\u30b3\u30e1\u30f3\u30c8\u6b04\u306e\u57cb\u3081\u8fbc\u307f\u30b9\u30af\u30ea\u30d7\u30c8\u306b\u3042\u308a\u307e\u3057\u305f\uff0e \u8106\u5f31\u6027\u3068\u305d\u306e\u4fee\u6b63\u3092\u78ba\u8a8d\u3057\u3066\u3044\u308b\u306e\u306f\uff0cblogid.disqus.com/admin/universal/ \u306b\u3066\u8868\u793a\u3055\u308c\u308b\u30b3\u30fc\u30c9\u3092\u57cb\u3081\u8fbc\u3080\u30bf\u30a4\u30d7\u3067\uff0cblogid.disqus.com/embed.js \u3068\u3044\u3046\u30b9\u30af\u30ea\u30d7\u30c8\u3067\u3059\uff0e \u3053\u3061\u3089\u306e\u30b3\u30fc\u30c9\u306f\uff0c\u57cb\u3081\u8fbc\u3093\u3060\u30c9\u30e1\u30a4\u2026","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Ft-ashula.hateblo.jp%2Fentry%2F2012%2F08%2F24%2F174051\" title=\"Disqus \u306b\u3044\u304f\u3064\u304b DOM based XSS \u304c\u3042\u3063\u305f\u4ef6 - \u307b\u3080\u3089\u3061\u3083\u307b\u3080\u307b\u3080\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>"}