Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

cookies, csrf, and xss

Avatar for 668Jerry 668Jerry
July 03, 2014
Education
70
0

cookies, csrf, and xss

for Django Summer, 2014

Avatar for 668Jerry

668Jerry

July 03, 2014

Other Decks in Education

See All in Education
Sanapilvet opetuksessa
Avatar for Matleena Laakso matleenalaakso
1
36k
aini school小中等部説明会資料
Avatar for aini school小中等部 ainischool
0
180
検定資格の価値　～実はすごいよQC検定～
Avatar for ぶんちん bunnchinn3
0
260
Web Application Frameworks - Lecture 3 - Web Technologies (1019888BNR)
Avatar for Beat Signer signer
PRO
0
3.6k
AIがコードを書く時代に、何を教えるのか / What Should We Teach in the Age of AI-Generated Code?
Avatar for ichiroc ichiroc
1
610
BRIEF OUTLINE OF IMPORTANT PLANT CONSTITUENTS
Avatar for Pawan Kumar Sahu pawan_pharm
0
210
Human Perception and Cognition - Lecture 4 - Human-Computer Interaction (1023841ANR)
Avatar for Beat Signer signer
PRO
0
1.7k
2026年度秋学期　統計学　講義の進め方と成績評価について (2026. 9. 28)
Avatar for Akira Asano akiraasano
PRO
0
240
Railsチュートリアル × 反転学習の事例紹介
Avatar for YassLab yasslab
PRO
3
190k
【新規入学者様】ZEPメタバース校舎ガイド
Avatar for aini school小中等部 ainischool
0
200
エビデンスベースト英語教育入門：エビデンスは科学的知見（だけ）ではない，制度だ！
Avatar for TerasawaT terasawat
0
230
オンラインコミュニティ TRY部 体験マニュアル
Avatar for 田中洋輔（NPO法人 D.Live） ytapples613
0
390

Featured

See All Featured
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
9
1.2k
How to audit for AI Accessibility on your Front & Back End
Avatar for davetheseo davetheseo
0
600
Building Applications with DynamoDB
Avatar for Matt Wood mza
96
7.2k
WCS-LA-2024
Avatar for Leonardo Collado-Torres lcolladotor
0
890
Digital Projects Gone Horribly Wrong (And the UX Pros Who Still Save the Day) - Dean Schuster
Avatar for UX Y'all uxyall
1
3.4k
sira's awesome portfolio website redesign presentation
Avatar for ElsiraPls elsirapls
0
450
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
8.1k
How to build a perfect <img>
Avatar for Jono Alderson jonoalderson
1
6.1k
How Software Deployment tools have changed in the past 20 years
Avatar for Geshan Manandhar geshan
2
35k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
Avatar for Stéphanie Walter stephaniewalter
287
14k
Game over? The fight for quality and originality in the time of robots
Avatar for Wayne Barker wayneb77
1
300
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.6k

Transcript

  1. 2014೥Ն ਫՌ෩ຯతcsrf the Book (ֲढ़ّ)

  2. ࢼஶ༻ၷݸෆಉతாᥒࡏෆಉᖣ᧸ث҃ిᡵ্ొೖ

  3. ࠶ಉ㑊ॴ༗cookie

  4. ٙ!! 㠥Ұ୆ిᡵొೖྃɼෆधཁாີɺҰᒬత໊ࣈ!!!

  5. ੋతɼେ෦෼త໢᜾༻cookieመ࡞ᒟݶɻ গྃҰᴍᴍతᒾ查ɺ ࢖༻ऀᱪᱛߋՂʂ ୠੋ...

  6. ੥෰༻ https://speakerdeck.com/mrorz/selected- topics-on-website-security-at-102-2-ccsp

  7. csrfͱ͸ ˒ሣ࢖༻ऀࣕݴɼҰ छෆೳစᴍత౦੢

  8. መ࡞csrf ೺add_page.htmlతݪ࢝ᛰଘԼိɼመ࡞Ұݸ૬ ಉతෳ੡඼ɼهಘactionཁվ੒㘺ሣ࿏ኸ

  9. csrf݁Ռ Djangoత႔ཧೳ㢨զ၇ᱛᨽग़csrfɼॴҎ੥هಘ ࠾༻csrf_token࿨૬᮫౟݅ɻ

  10. xssͱ͸ ˒ ሣᆦਓࣕݴɼҰछೳዱ ҙ࠹ೖ໢ทత౦੢

  11. መ࡞xss ࡏ䓟తadd_categoryதpo্Ṝcategoryࢼࢼ ʮ”></a><script>while (true) {alert("੥ᔧܥ౷؅ཧһ");}</script><a>ʯ

  12. ༬ظత݁Ռ೗ࠨɼୠመࡍ্Django㢨զ၇၏ྃauto escape

  13. -୆େࢿ㘤ܥCCSPॿڭ-MrOrz -੒େి௨ॴࢿ㘤҆શ-༶஛੕ -How to Tango with Django-David Maxwell ײँɺ౤Өยჩߟ