{"url":"https://teramako.hatenadiary.org/entry/20130302/p1","provider_name":"Hatena Blog","height":"190","image_url":null,"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fteramako.hatenadiary.org%2Fentry%2F20130302%2Fp1\" title=\"GoogleChrome(27.0.1425.2 dev-m\u3042\u305f\u308a) \u306e __proto__ \u6319\u52d5\u304c\u5909\u308f\u3063\u305f - hogehoge @teramako\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"hogehoge @teramako","type":"rich","width":"100%","author_url":"https://blog.hatena.ne.jp/teramako/","title":"GoogleChrome(27.0.1425.2 dev-m\u3042\u305f\u308a) \u306e __proto__ \u6319\u52d5\u304c\u5909\u308f\u3063\u305f","blog_url":"https://teramako.hatenadiary.org/","version":"1.0","author_name":"teramako","provider_url":"https://hatena.blog","published":"2013-03-02 00:00:00","categories":["JavaScript","GoogleChrome"],"description":"\u30b3\u30df\u30c3\u30c8\u30ed\u30b0\u3088\u308a\u3001\u4ee5\u4e0b2\u70b9\u304c\u5909\u66f4\u3055\u308c\u305f\u6a21\u69d8 \"__proto__\"\u30d7\u30ed\u30d1\u30c6\u30a3\u3092 Object.prototype \u3078 JSON.parse \u6642\u306b \"__proto__\" \u30d7\u30ed\u30d1\u30c6\u30a3\u3092\u7279\u5225\u6271\u3044\u3057\u306a\u3044 \u3053\u308c\u3067\u3001__proto__\u30d7\u30ed\u30d1\u30c6\u30a3\u306e\u4e0d\u601d\u8b70 - hogehoge\u3084JSON.parse('{\"__proto__\": null}') - hogehoge\u306b\u304a\u3051\u308bv8\u30a8\u30f3\u30b8\u30f3\u3067\u306e\u6319\u52d5\u304c\u4fee\u6b63\u3055\u308c\u3001Firefox\u306eSpiderMonkey\u306b\u4f3c\u305f\u52d5\u304d\u3068\u306a\u308b\u3002 Developer Tools \u306e Console \u306e\u6319\u52d5 var o = {}; Object.defineProperty(o, \"__pro\u2026"}