{"id":798,"date":"2021-03-05T17:17:32","date_gmt":"2021-03-05T08:17:32","guid":{"rendered":"http:\/\/www.opentone.co.jp\/ot-lab\/?p=798"},"modified":"2025-05-12T10:06:20","modified_gmt":"2025-05-12T01:06:20","slug":"html5%e3%81%ab%e3%81%8a%e3%81%91%e3%82%8bcsrf%e5%af%be%e7%ad%96%e3%81%ae%e6%b3%a8%e6%84%8f%e4%ba%8b%e9%a0%85","status":"publish","type":"post","link":"https:\/\/www.opentone.co.jp\/ot-lab\/all\/web-system\/html5%e3%81%ab%e3%81%8a%e3%81%91%e3%82%8bcsrf%e5%af%be%e7%ad%96%e3%81%ae%e6%b3%a8%e6%84%8f%e4%ba%8b%e9%a0%85","title":{"rendered":"HTML5\u306b\u304a\u3051\u308bCSRF\u5bfe\u7b56\u306e\u6ce8\u610f\u4e8b\u9805"},"content":{"rendered":"\n<p>\u7686\u3055\u3093\u3001\u3053\u3093\u306b\u3061\u306f\u3002<br>itou\u3067\u3059\u3002<\/p>\n\n\n\n<p>2013\/10\/30\u3001JPCERT\u304b\u3089<br>\u300cHTML5 \u3092\u5229\u7528\u3057\u305fWeb \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u554f\u984c\u306b\u95a2\u3059\u308b\u8abf\u67fb\u5831\u544a\u66f8\uff08\u4ee5\u4e0b\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb\u5831\u544a\u66f8\uff09\u300d<br><a href=\"http:\/\/www.jpcert.or.jp\/research\/html5.html\" target=\"_blank\" rel=\"noreferrer noopener\">http:\/\/www.jpcert.or.jp\/research\/html5.html<\/a><br>\u304c\u5831\u544a\u3055\u308c\u307e\u3057\u305f\u3002<br>HTML5\u306a\u3089\u3067\u306f\u306e\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u9762\u3067\u6ce8\u610f\u3059\u3079\u304d\u4e8b\u9805\u304c\u7e8f\u3081\u3089\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3053\u306e\u4e2d\u3067\u79c1\u304c\u6ce8\u76ee\u3057\u305f\u306e\u306f<br>\u300c\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30fb\u30ea\u30af\u30a8\u30b9\u30c8\u30fb\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08\u4ee5\u4e0b\u3001CSRF\uff09\u653b\u6483\u300d\u3067\u3059\u3002<\/p>\n\n\n\n<p>HTML4\u3067\u3082CSRF\u306e\u8105\u5a01\u306f\u3042\u308a\u307e\u3057\u305f\u3002<br>\u3057\u304b\u3057\u3001HTML4\u3067\u554f\u984c\u306a\u304b\u3063\u305f\u30b5\u30a4\u30c8\u3067\u3082HTML5\u3060\u3068\u8105\u5a01\u306b\u306a\u308b\u30b1\u30fc\u30b9\u304c\u3042\u308a\u307e\u3059\u3002<br>\u305d\u306e\u30b1\u30fc\u30b9\u306b\u3064\u3044\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb\u5831\u544a\u66f8\u306e\u5185\u5bb9\u3092\u30d9\u30fc\u30b9\u306b\u3001Web\u30b5\u30a4\u30c8\u306e\u30b5\u30f3\u30d7\u30eb\u3092\u4f5c\u6210\u3057\u691c\u8a3c\u3057\u3066\u307f\u307e\u3057\u305f\u3002<br>\u30b5\u30f3\u30d7\u30eb\u306f\u4e0b\u8a18\u3088\u308a\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3067\u304d\u307e\u3059\u3002<br><a href=\"http:\/\/labs.opentone.co.jp\/wp-content\/uploads\/2013\/11\/csrf_example.zip\">csrf_example.zip<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u4ed5\u69d8\u306e\u8aac\u660e<\/h3>\n\n\n\n<p>\u307e\u305a\u306f\u3001\u30b5\u30f3\u30d7\u30eb\u306e\u4ed5\u69d8\u3092\u8aac\u660e\u3044\u305f\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u300c\u30ed\u30b0\u30a4\u30f3\u753b\u9762\u306b\u30e6\u30fc\u30b6ID\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3057\u3066\u30ed\u30b0\u30a4\u30f3\u3057\u3001\u30ed\u30b0\u30a4\u30f3\u5f8c\u306e\u753b\u9762\u3067\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3059\u308b\u300d\u3068\u3044\u3046\u4ed5\u69d8\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u30ed\u30b0\u30a4\u30f3\u6642\u306b\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u4f5c\u6210\u3057\u3001\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u6642\u306b\u30bb\u30c3\u30b7\u30e7\u30f3\u30c1\u30a7\u30c3\u30af\u3092\u884c\u3046\u3053\u3068\u3067<br>\u30ed\u30b0\u30a4\u30f3\u3057\u305f\u4eba\u306e\u307f\u304c\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u3066\u304a\u308a\u307e\u3059\u3002<br>\u8a73\u7d30\u306f\u56f3\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"975\" height=\"757\" src=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok.png\" alt=\"\" class=\"wp-image-799\" srcset=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok.png 975w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-300x233.png 300w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-768x596.png 768w\" sizes=\"(max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u653b\u6483\u306e\u5185\u5bb9<\/h3>\n\n\n\n<p>\u653b\u6483\u306e\u5185\u5bb9\u306f\u3001\u300c\u60aa\u610f\u306e\u3042\u308b\u653b\u6483\u8005\u304c\u88ab\u5bb3\u8005\u306b\u4e0d\u6b63\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3055\u305b\u308b\u300d\u3067\u3059\u3002<br>\u3082\u3061\u308d\u3093\u3001\u88ab\u5bb3\u8005\u306f\u4e0d\u6b63\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u305f\u3068\u3044\u3046\u610f\u8b58\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">HTML4\u3067\u653b\u6483\u3059\u308b\u5834\u5408<\/h3>\n\n\n\n<p>\u3067\u306f\u3001\u60aa\u610f\u306e\u3042\u308b\u653b\u6483\u8005\u304cHTML4\u306e\u4ed5\u7d44\u307f\u3067\u653b\u6483\u3057\u3066\u307f\u307e\u3059\u3002<br>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb\u5831\u544a\u66f8\u306e11\u30da\u30fc\u30b8\u306e\u624b\u6bb5\u3092\u7528\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u95b2\u89a7\u8005\u304c\u653b\u6483\u8005\u306e\u4ed5\u639b\u3051\u305f\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\uff08\u56f3\u306e\u8d64\u8272\u306e\u90e8\u5206\uff09\u3059\u308b\u3068<br>\u30af\u30ed\u30b9\u30aa\u30ea\u30b8\u30f3\u3067\u653b\u6483\u5bfe\u8c61\u306e\u6b63\u898f\u30b5\u30a4\u30c8\u306b\u5bfe\u3057\u3066\u30d5\u30a1\u30a4\u30eb\u3092POST\u3059\u308bHTML\u3092\u751f\u6210\u3057\u5b9f\u884c\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">\u653b\u6483\u5bfe\u8c61\u306e\u6b63\u898f\u30b5\u30a4\u30c8\u306b\u5bfe\u3057\u3066\u30d5\u30a1\u30a4\u30eb\u3092POST\u3059\u308bHTML<\/h5>\n\n\n\n<pre class=\"wp-block-preformatted\">[code]\n&lt;!DOCTYPE html&gt;\n&lt;html&gt;\n&lt;head&gt;\n&lt;meta charset=\"UTF-8\"&gt;\n&lt;title&gt;CSRF1&lt;\/title&gt;\n&lt;\/head&gt;\n&lt;body onload=\"document.forms[0].submit();\"&gt;\n&lt;form method=\"POST\" action=\"https:\/\/example\/before\/upload.php\"\nenctype=\"multipart\/form-data\"&gt;\n&lt;input type=\"file\" name=\"file\"&gt;\n&lt;input type=\"submit\"&gt;\n&lt;\/form&gt;\n&lt;\/body&gt;\n&lt;\/html&gt;\n[\/code]<\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"786\" src=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF-1024x786.png\" alt=\"\" class=\"wp-image-800\" srcset=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF-1024x786.png 1024w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF-300x230.png 300w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF-768x589.png 768w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF-1170x898.png 1170w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF.png 1479w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>\u3057\u304b\u3057\u3001\u5b9f\u969b\u306b\u306f\u7a7a\u306e\u30d5\u30a1\u30a4\u30eb\u304cPOST\u3055\u308c\u308b\u3060\u3051\u306b\u306a\u308a\u307e\u3059\u3002<br>\u4eca\u56de\u306e\u30b1\u30fc\u30b9\u3067\u306f\u3001\u300c\u30d5\u30a1\u30a4\u30eb\u53c2\u7167\u30c0\u30a4\u30a2\u30ed\u30b0\u306f\u51fa\u3055\u305a\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3055\u305b\u308bCSRF\u653b\u6483\u300d\u306f\u3067\u304d\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">HTML5\u3067\u653b\u6483\u3059\u308b\u5834\u5408<\/h3>\n\n\n\n<p>\u3068\u3053\u308d\u304c\u3001HTML5\u3067\u306f\u305d\u308c\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u4eca\u56de\u7740\u76ee\u3059\u308bHTML5\u306e\u6280\u8853\u306fXMLHttpRequest Level 2\uff08\u4ee5\u4e0b\u3001XHR2\uff09\u3067\u3059\u3002<br>\u30d6\u30e9\u30a6\u30b6\u642d\u8f09\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u8a00\u8a9e\u3067\u30b5\u30fc\u30d0\u3068\u306eHTTP\u901a\u4fe1\u3092\u884c\u3046\u305f\u3081\u306e\u4ed5\u7d44\u307f\u3067<br>\u30da\u30fc\u30b8\u9077\u79fb\u306a\u3057\u306bHTTP\u901a\u4fe1\u3092\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u904e\u53bb\u306eLevel1\u304b\u3089Level2\u306b\u306a\u3063\u305f\u3053\u3068\u3067<br>\u30af\u30ed\u30b9\u30aa\u30ea\u30b8\u30f3\uff08URL\u306e\u300c\u30b9\u30ad\u30fc\u30e0\u300d\u300c\u30db\u30b9\u30c8\u300d\u300c\u30dd\u30fc\u30c8\u300d\u3092\u8de8\u3044\u3067\u901a\u4fe1\u3059\u308b\u3053\u3068\uff09\u3067\u306ePOST\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3057\u305f\u3002<br>\uff08\u53b3\u5bc6\u306b\u3044\u3046\u3068\u3001XHR2 \u306f HTML5\u3067\u306f\u306a\u3044\u3067\u3059\u304c\u3001HTML5\u306e\u5468\u8fba\u6280\u8853\u306e\u4e00\u3064\u3068\u3057\u3066\u6271\u308f\u308c\u3066\u3044\u308b\u3088\u3046\u3067\u3059\uff09<\/p>\n\n\n\n<p><a href=\"http:\/\/www.w3.org\/TR\/XMLHttpRequest2\/\" target=\"_blank\" rel=\"noreferrer noopener\">http:\/\/www.w3.org\/TR\/XMLHttpRequest2\/<\/a><\/p>\n\n\n\n<p>HTML5\u3067\u306f\u3001\u30af\u30ed\u30b9\u30aa\u30ea\u30b8\u30f3\u901a\u4fe1\u306b\u5bfe\u5fdc\u3057\u305fXHR2\u306b\u3088\u308a<br>JavaScript\u3067\u30d5\u30a1\u30a4\u30eb\u306e\u5185\u5bb9\u3092\u751f\u6210\u3057\u3066POST\u30ea\u30af\u30a8\u30b9\u30c8\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002<br>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb\u5831\u544a\u66f8\u306e12\u30da\u30fc\u30b8\u306e\u624b\u6bb5\u3092\u7528\u3044\u3066\u691c\u8a3c\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">\u653b\u6483\u5bfe\u8c61\u306e\u6b63\u898f\u30b5\u30a4\u30c8\u306b\u5bfe\u3057\u3066\u30d5\u30a1\u30a4\u30eb\u3092POST\u3059\u308bHTML<\/h5>\n\n\n\n<pre class=\"wp-block-preformatted\">[code]\n&lt;!DOCTYPE html&gt;\n&lt;html&gt;\n&lt;head&gt;\n&lt;script language=\"javascript\"&gt;\n&lt;!--\n  window.onload = function(){\n\n\tvar xhr = new XMLHttpRequest();\n\tvar boundary = '----boundary';\n\tvar file=\"abcd\"; \/\/\u9001\u4fe1\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u306e\u5185\u5bb9\n\tvar request;\n\txhr.open( 'POST', 'https:\/\/example\/before\/upload.php', 'true' );\n\txhr.setRequestHeader( 'Content-Type',\n\t'multipart\/form-data; boundary=' + boundary );\n\txhr.withCredentials = true; \/\/ Cookie\u3092\u4ed8\u4e0e\n\trequest = '--' + boundary + '\\r\\n' +\n\t'Content-Disposition: form-data; name=\"upfile\"; ' +\n\t' filename=\"filename.txt\"\\r\\n' +\n\t'Content-Type: application\/octet-stream\\r\\n\\r\\n' +\n\tfile +\n\t'\\r\\n' + '--' + boundary + '--';\n\n\txhr.send( request );\n \t\n\txhr.onreadystatechange = function()\n\t{\n\t\tdocument.getElementById(\"status\").innerHTML=xhr.status;\n\t\tdocument.getElementById(\"text\").innerHTML=xhr.responseText;\n\t};\n\t\n  }\n\t\n\t\n--&gt;\n&lt;\/script&gt;\n&lt;meta charset=\"UTF-8\"&gt;\n&lt;title&gt;CSRF2&lt;\/title&gt;\n&lt;\/head&gt;\n&lt;body&gt;\n&lt;hr&gt;\n&lt;label&gt;XMLHttpRequest\u30b9\u30c6\u30fc\u30bf\u30b9\uff1a&lt;span id=\"status\"&gt;&lt;\/span&gt;&lt;\/label&gt; &lt;br&gt;\n&lt;hr&gt;\n&lt;label&gt;XMLHttpRequest\u30ec\u30b9\u30dd\u30f3\u30b9\uff1a&lt;span id=\"text\"&gt;&lt;\/span&gt;&lt;\/label&gt; &lt;br&gt;\n&lt;hr&gt;\n&lt;\/body&gt;\n&lt;\/html&gt;\n[\/code]<\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"786\" src=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2-1024x786.png\" alt=\"\" class=\"wp-image-801\" srcset=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2-1024x786.png 1024w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2-300x230.png 300w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2-768x589.png 768w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2-1170x898.png 1170w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2.png 1479w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>JavaScript\u3067\u4f5c\u6210\u3057\u305f\u4e0d\u6b63\u306a\u30d5\u30a1\u30a4\u30eb\u304c\u30b5\u30fc\u30d0\u5074\u306b\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>HTML5\u3067\u306f\u3001\u300c\u30d5\u30a1\u30a4\u30eb\u53c2\u7167\u30c0\u30a4\u30a2\u30ed\u30b0\u306f\u51fa\u3055\u305a\u30d5\u30a1\u30a4\u30eb\u3092\u81ea\u7531\u306b\u7de8\u96c6\u3057\u3066\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3055\u305b\u308bCSRF\u653b\u6483\u300d\u304c\u3067\u304d\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bfe\u7b56<\/h3>\n\n\n\n<p>\u3067\u306f\u3001\u3069\u3046\u3084\u3063\u3066\u5bfe\u7b56\u3059\u308b\u3068\u3088\u3044\u306e\u3067\u3057\u3087\u3046\u304b\uff1f<br>\u5f93\u6765\u306eCSRF\u306e\u5bfe\u7b56\u3068\u540c\u69d8\u3001\u30c1\u30a7\u30c3\u30af\u7528\u306e\u30c8\u30fc\u30af\u30f3\u3092<br>hidden\u306b\u6301\u305f\u305b\u308b\u5bfe\u5fdc\u304c\u6709\u52b9\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u30ed\u30b0\u30a4\u30f3\u8a8d\u8a3c\u5f8c\u3001\u30c8\u30fc\u30af\u30f3\u3092\u751f\u6210\u3057<br>\u30b5\u30fc\u30d0\uff08\u30bb\u30c3\u30b7\u30e7\u30f3\uff09\u3068\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\uff08hidden\uff09\u306e\u4e21\u65b9\u306b\u4fdd\u6301\u3057\u307e\u3059\u3002<br>\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u6642\u306b\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304b\u3089POST\u3055\u308c\u305f\u30c8\u30fc\u30af\u30f3\u3068<br>\u30b5\u30fc\u30d0\uff08\u30bb\u30c3\u30b7\u30e7\u30f3\uff09\u306e\u30c8\u30fc\u30af\u30f3\u306e\u4e00\u81f4\u78ba\u8a8d\u3092\u884c\u3044<br>\u6b63\u898f\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">\u30c8\u30fc\u30af\u30f3\u306e\u751f\u6210\u3068\u30bb\u30c3\u30b7\u30e7\u30f3\u3078\u306e\u4fdd\u6301<\/h5>\n\n\n\n<pre class=\"wp-block-preformatted\">[code]\n$TOKEN_LENGTH = 16;\/\/16*2=32\u30d0\u30a4\u30c8\n$bytes = openssl_random_pseudo_bytes($TOKEN_LENGTH);\n$_SESSION [\"TOKEN\"] = bin2hex($bytes);\n[\/code]<\/pre>\n\n\n\n<h5 class=\"wp-block-heading\">\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3067\u306eTOKEN\u306e\u4fdd\u6301<\/h5>\n\n\n\n<pre class=\"wp-block-preformatted\">[code]\n&lt;input type=\"hidden\" name=\"token\" value=\"&lt;?php echo $_SESSION [\"TOKEN\"] ?&gt;\"&gt;\n[\/code]<\/pre>\n\n\n\n<h5 class=\"wp-block-heading\">\u30b5\u30fc\u30d0\u5074\u3067\u306e\u30c8\u30fc\u30af\u30f3\u30c1\u30a7\u30c3\u30af<\/h5>\n\n\n\n<pre class=\"wp-block-preformatted\">[code]\n\/\/ \u30c8\u30fc\u30af\u30f3\u30c1\u30a7\u30c3\u30af\nif ($_SESSION [\"TOKEN\"] != $_POST [\"token\"]) {\n\techo \"\u4e0d\u6b63\u306a\u30a2\u30af\u30bb\u30b9\u3067\u3059\";\n\texit ();\n}\n[\/code]<\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"798\" src=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2hidden-1024x798.png\" alt=\"\" class=\"wp-image-802\" srcset=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2hidden-1024x798.png 1024w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2hidden-300x234.png 300w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2hidden-768x599.png 768w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2hidden-1170x912.png 1170w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127CSRF2hidden.png 1479w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>\u60aa\u610f\u306e\u3042\u308b\u30b5\u30a4\u30c8\u304b\u3089\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u6642\u306b\u306f\u30c8\u30fc\u30af\u30f3\u306f\u9001\u4fe1\u3055\u308c\u306a\u3044\u306e\u3067<br>\u30b5\u30fc\u30d0\u5074\u3067\u6b63\u898f\u3067\u306a\u3044\u30ea\u30af\u30a8\u30b9\u30c8\u3060\u3068\u5224\u65ad\u3057\u3001\u30a8\u30e9\u30fc\u3068\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u307e\u3068\u3081<\/h3>\n\n\n\n<p>HTML5\u306e\u767b\u5834\u306b\u3088\u308a\u3001Web\u30b5\u30a4\u30c8\u69cb\u7bc9\u304c\u4fbf\u5229\u306b\u306a\u3063\u305f\u3068\u540c\u6642\u306b<br>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u6ce8\u610f\u3057\u306a\u304f\u3066\u306f\u3044\u3051\u306a\u3044\u4e8b\u9805\u3082\u5897\u3048\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>HTML4\u306e\u6642\u306b\u306f\u554f\u984c\u306a\u304b\u3063\u305f\u30b5\u30a4\u30c8\u3082<br>HTML5\u3067\u306f\u653b\u6483\u306e\u5bfe\u8c61\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>HTML4\u3067\u306f\u5927\u4e08\u592b\u3060\u304b\u3089\u3068\u3044\u3046\u8a8d\u8b58\u3092\u6539\u3081\u3001\u30e6\u30fc\u30b6\u5074\u304b\u3089\u30c7\u30fc\u30bf\u304c\u6295\u5165\u3055\u308c\u308b\u3088\u3046\u306a\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3064\u3044\u3066\u306f\u7b49\u3057\u304fCSRF\u5bfe\u7b56\u3092\u3059\u3079\u304d\u3067\u3059\u3002<\/p>\n<div class=\"opent-_2\" style=\"margin-top: 10px;margin-right: 10px;margin-bottom: 10px;margin-left: 10px;\" id=\"opent-2069445874\"><a href=\"https:\/\/www.opentone.co.jp\/backlog\/\" aria-label=\"twitter_backlogskt_new\"><img src=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2023\/02\/twitter_backlogskt_new.jpg\" alt=\"\"  srcset=\"https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2023\/02\/twitter_backlogskt_new.jpg 1024w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2023\/02\/twitter_backlogskt_new-300x157.jpg 300w, https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2023\/02\/twitter_backlogskt_new-768x401.jpg 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" width=\"384\" height=\"200\"   \/><\/a><\/div>","protected":false},"excerpt":{"rendered":"<p>\u7686\u3055\u3093\u3001\u3053\u3093\u306b\u3061\u306f\u3002itou\u3067\u3059\u3002 2013\/10\/30\u3001JPCERT\u304b\u3089\u300cHTML5 \u3092\u5229\u7528\u3057\u305fW<\/p>\n","protected":false},"author":1,"featured_media":799,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[28],"tags":[],"class_list":["post-798","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-web-system",""],"acf":[],"aioseo_notices":[],"uagb_featured_image_src":{"full":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok.png",975,757,false],"thumbnail":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-150x150.png",150,150,true],"medium":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-300x233.png",300,233,true],"medium_large":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-768x596.png",640,497,true],"large":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok.png",640,497,false],"1536x1536":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok.png",975,757,false],"2048x2048":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok.png",975,757,false],"engage-mag-carousel-img":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-783x450.png",783,450,true],"engage-mag-carousel-img-landscape":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-783x225.png",783,225,true],"engage-mag-carousel-large-img":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-975x574.png",975,574,true],"engage-mag-carousel-large-img-landscape":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-975x287.png",975,287,true],"engage-mag-large-thumb":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok.png",975,757,false],"engage-mag-small-thumb":["https:\/\/www.opentone.co.jp\/ot-lab\/wp-content\/uploads\/sites\/11\/2021\/03\/20131127ok-350x220.png",350,220,true]},"uagb_author_info":{"display_name":"ah106rx4o4","author_link":"https:\/\/www.opentone.co.jp\/ot-lab\/author\/ah106rx4o4"},"uagb_comment_info":2,"uagb_excerpt":"\u7686\u3055\u3093\u3001\u3053\u3093\u306b\u3061\u306f\u3002itou\u3067\u3059\u3002 2013\/10\/30\u3001JPCERT\u304b\u3089\u300cHTML5 \u3092\u5229\u7528\u3057\u305fW","_links":{"self":[{"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/posts\/798","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/comments?post=798"}],"version-history":[{"count":2,"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/posts\/798\/revisions"}],"predecessor-version":[{"id":804,"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/posts\/798\/revisions\/804"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/media\/799"}],"wp:attachment":[{"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/media?parent=798"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/categories?post=798"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.opentone.co.jp\/ot-lab\/wp-json\/wp\/v2\/tags?post=798"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}