{"type":"rich","author_url":"https://blog.hatena.ne.jp/t_komura/","author_name":"t_komura","provider_url":"https://hatena.blog","version":"1.0","published":"2009-10-04 23:11:51","blog_url":"https://t-komura.hatenadiary.org/","categories":["PHP","\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3"],"description":"\u4ee5\u4e0b\u306e\u30da\u30fc\u30b8\u306b\u95a2\u9023\u3057\u3066\u3001htmlspecialchars() \u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u3067\u3082 XSS \u304c\u53ef\u80fd\u304b\u3069\u3046\u304b\u5c11\u3057\u8abf\u3079\u3066\u307f\u307e\u3057\u305f\u3002 http://www.tokumaru.org/d/20090930.html \u305d\u306e\u7d50\u679c\u3001\u3044\u304f\u3064\u304b\u306e\u30d6\u30e9\u30a6\u30b6\u3067\u6587\u5b57\u30a8\u30f3\u30b3\u30fc\u30c7\u30a3\u30f3\u30b0\u306b Shift_JIS \u3092\u4f7f\u7528\u3057\u3066\u3044\u305f\u5834\u5408\u3001XSS \u304c\u53ef\u80fd\u306a\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002 \u30c6\u30b9\u30c8\u30b3\u30fc\u30c9\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002\u30ea\u30f3\u30af\u306b\u30de\u30a6\u30b9\u30dd\u30a4\u30f3\u30bf\u3092\u4e57\u305b\u308b\u3068\u57cb\u3081\u8fbc\u3093\u3060 Javascript \u304c\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002 <?php $_GET['a1'] = \"\\xf0\"; // \\xf0 - \\xfc \u3067\u53ef\u80fd $_GET['a2'] = \" href=dumm\u2026","image_url":null,"title":" Shift_JIS \u3067\u306f\u3001htmlspecialchars() \u3092\u4f7f\u7528\u3057\u3066\u3082 XSS \u304c\u53ef\u80fd\u306a\u5834\u5408\u304c\u3042\u308b","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Ft-komura.hatenadiary.org%2Fentry%2F20091004%2F1254665511\" title=\" Shift_JIS \u3067\u306f\u3001htmlspecialchars() \u3092\u4f7f\u7528\u3057\u3066\u3082 XSS \u304c\u53ef\u80fd\u306a\u5834\u5408\u304c\u3042\u308b - t_komura\u306e\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","height":"190","width":"100%","blog_title":"t_komura\u306e\u65e5\u8a18","url":"https://t-komura.hatenadiary.org/entry/20091004/1254665511","provider_name":"Hatena Blog"}