Upgrade to Pro — share decks privately, control downloads, hide ads and more …

hatena-diary-blog-xss

 hatena-diary-blog-xss

はてなダイアリーやブログのXSS対策の事例を紹介します

Yasuhiro Onishi

May 14, 2013
Tweet

More Decks by Yasuhiro Onishi

Other Decks in Technology

Transcript

  1. ΫϩευϝΠϯ௨৴  wXJOEPXQPTU.FTTBHF w΢Οϯυ΢ ϑϨʔϜ ؒͰϝοηʔδͷ ૹड৴Λߦ͏ͨΊͷ࢓૊Έ // message Πϕϯτ؂ࢹ

    window.addEventListener(“message”, function() {...}, false); // message ૹ৴ window.postMessage(data, “targetOrigin”);