XSS using dirty Content Type in cloud era

Slide 1

Slide 1 text

944VTJOHEJSUZ$POUFOU5ZQF JODMPVEFSB B[BSB !B@[BSB@O FJ !FJ 'MBUU4FDVSJUZJOD

Slide 2

Slide 2 text

*OUSPEVDUJPO ͋ͳͨ͸حոͳ$POUFOU5ZQFΛཧղͰ͖·͔͢ $BOZPVVOEFSTUBOEUIFDVSJPVT$POUFOU5ZQF

Slide 3

Slide 3 text

JNBHFQOH )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 4

Slide 4 text

JNBHFQOH 1/(GJMF ˣ )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 5

Slide 5 text

UFYUIUNM )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 6

Slide 6 text

UFYUIUNM )5.-GJMF ˣ )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 7

Slide 7 text

UFYUIUNMJNBHFQOH )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 8

Slide 8 text

UFYUIUNMJNBHFQOH ˣ )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 9

Slide 9 text

UFYUIUNMJNBHFQOH )5.-GJMF ˣ )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 10

Slide 10 text

UFYUIUNMJNBHFQOH 4XJUDI )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 11

Slide 11 text

JNBHFQOHUFYUIUNM 1/(GJMF ˣ )PXJTJUJOUFSQSFUFECZUIFCSPXTFS

Slide 12

Slide 12 text

UFYUIUNM B

Slide 13

Slide 13 text

UFYUIUNM B JNBHFQOHYB UFYUIUNM

Slide 14

Slide 14 text

UFYUIUNM B JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM

Slide 15

Slide 15 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM

Slide 16

Slide 16 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH

Slide 17

Slide 17 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH 🤔 ....?

Slide 18

Slide 18 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH 🤔)5.-GJMF

Slide 19

Slide 19 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH 🤔)5.-GJMF ⭕

Slide 20

Slide 20 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH 😱

Slide 21

Slide 21 text

○ 3FTFBSDITVSSPVOEJOH$POUFOU5ZQFBOE944 ○ /FXBUUBDLWFDUPSTFNFSHFXJUIUIFBEWFOUPGUIFDMPVE ○ 4QFDJGJDBUJPOPG$POUFOU5ZQFBOE7BMJEBUJPO#ZQBTT5FDI ○ &YBNQMFPGDBSSJFSXBWF3VCZMJCSBSZ ○ $7&BOE$7& ○ 4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO ○ 4JEF4UPSZʜ -FUTUBMLBCPVUUIFSFBMBOEJNNFEJBUFUISFBUTXFGBDF BGUFS#4JEFT5PLZP PWFSESJOLTBUUIFBGUFSQBSUZ 5PQJDT

Slide 22

Slide 22 text

ຊ୊ʹೖΔલʹࣗݾ঺հΛ 4FMG*OUSPEVDUJPO

Slide 23

Slide 23 text

/PSJIJEF4BJUPB[BSB !B@[BSB@O ɹ೥ʹגࣜձࣾ'MBUU4FDVSJUZʹೖࣾ ͠ɺ8FCΞϓϦέʔγϣϯ΍ύϒϦοΫΫϥ ΢υΛର৅ͱͨ͠ϓϩϑΣογϣφϧαʔϏ εۀ຿ʹैࣄɻ ɹ*40(+8(ͳͲͷ֎෦ஂମͰͷ׆ಈ΍ɺ +4"$ ɺ"84%FW%BZ ɺ 4FDVSJUZ+"84%":4 Ͱͷొஃɾϫʔ Ϋγϣοϓ։࠵ͳͲΛ௨͠ɺύϒϦοΫΫϥ ΢υͱ8FCΞϓϦέʔγϣϯʹ͓͚ΔηΩϡ ϦςΟʹؔ͢Δܒ໤ͳͲͷ׆ಈΛߦ͏ɻ 4FMGJOUSPEVDUJPO &JKJ.PSJFJ !FJ ɹࣛࣇౡେֶେֶӃमྃޙɺ೥݄ʹג ࣜձࣾ'MBUU4FDVSJUZʹೖࣾɻηΩϡϦςΟ ΤϯδχΞͱͯ͠ɺओʹ8FCΞϓϦέʔγϣ ϯ਍அͱεϚʔτϑΥϯΞϓϦέʔγϣϯ਍ அΛ୲౰͍ͯ͠Δɻ ɹաڈʹηΩϡϦςΟΩϟϯϓؔ࿈Πϕϯτ ʹؔΘ͍ͬͯͨͨΊɺϋʔυ΢ΣΞ͔Βιϑ τ΢ΣΞ·Ͱ෯޿͘ڵຯ͕͋Δɻझຯ͸੬ऑ ੑௐࠪͱےτϨɻ

Slide 24

Slide 24 text

○ .BOZ944TBSFOPXTFFOUBLJOHBEWBOUBHFPGUIFDIBSBDUFSJTUJDT PG0CKFDU4UPSBHFBOEQFSJQIFSBMJNQMFNFOUBUJPOT ○ *ODSFEJCMF$POUFOU5ZQF.PWFNFOU*EFOUJGJFEJO $7&BOE0UIFS7VMOFSBCJMJUJFT ○ *ODSFBTFEUISFBUTEVFUPUIFJODSFBTFJO944BUUBDLWFDUPSTBOE UIFSFTVMUJOHFBTFPG944 ○ 1PTTJCJMJUZUPPCUBJO5PLFOTTVDIBT"DDFTT5PLFOBOE*E 5PLFOGSPNUIFCSPXTFS ○ #FDPNFBOBUUBDLHBEHFUGPSTFSWJDFTUIBUJTTVF $SFEFOUJBMT TVDIBT"NB[PO$PHOJUP*EFOUJUZ1PPM "MJUUMFCBDLHSPVOEPOIPXXFDBNFUP CFHJOUIJT3FTFBSDI

Slide 25

Slide 25 text

$POUFOU5ZQF΍ͦͷपลΛऔΓר͘ݚڀͱ944ʹ͍ͭͯ 3FTFBSDITVSSPVOEJOH$POUFOU5ZQFBOE944

Slide 26

Slide 26 text

944PSJHJOBUJOHGSPNCSPXTFSCFIBWJPSBOE DIBSBDUFSFODPEJOH IUUQTXXXEPDTXFMMDPNTIBTFHBXB-77(;Q झຯͱ࣮ӹͷ੬ऑੑൃݟ.S:PTVLF)BTFHBXB IUUQTXXXEPDTXFMMDPNTPDLFHIFN;91PXBTQ จࣈίʔυͷ੬ऑੑ͸͜ͷ೥ؒͰͲͷఔ౓ରࡦ͞Ε͔ͨ .S)JSPTIJ5PLVNBSV

Slide 27

Slide 27 text

IUUQTXXXEPDTXFMMDPNTIBTFHBXB-77(;Q झຯͱ࣮ӹͷ੬ऑੑൃݟ.S:PTVLF)BTFHBXB IUUQTXXXEPDTXFMMDPNTIBTFHBXB-77(;Q จࣈίʔυͷ੬ऑੑ͸͜ͷ೥ؒͰͲͷఔ౓ରࡦ͞Ε͔ͨ .S)JSPTIJ5PLVNBSV 8JUIUIFBEWFOUPG99441SPUFDUJPOBOEBXBSFOFTT PGUIFSFMFWBOUNFUIPET 'JYFTBOEDPVOUFSNFBTVSFTXJMMCFJNQMFNFOUFE 944PSJHJOBUJOHGSPNCSPXTFSCFIBWJPSBOE DIBSBDUFSFODPEJOH

Slide 28

Slide 28 text

944QBUIXBZEVFUPJOQVUWBMVFT $POWFOUJPOBMBUUBDLQBUIT 6TFSJOQVUFYJTUTBOEJTPVUQVU 4UPSFEWJBPOFPGUIFTFSWFST 3FOEFSFECZBUFSNJOBMTVDIBTBCSPXTFS %BUB4UPSF

Slide 29

Slide 29 text

%BUB4UPSF 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 30

Slide 30 text

%BUB4UPSF 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 31

Slide 31 text

%BUB4UPSF 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 32

Slide 32 text

%BUB4UPSF 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 33

Slide 33 text

%BUB4UPSF 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 34

Slide 34 text

%BUB4UPSF 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 35

Slide 35 text

%BUB4UPSF $POUFOU5ZQFIBEUPCFBTQFDJGJD .JNF5ZQFTVDIBTUFYUIUNM 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 36

Slide 36 text

%BUB4UPSF 4BOJUJ[BUJPOBOEFTDBQJOHBMTPJODSFBTFUIF PVUQVU 944QBUIXBZEVFUPJOQVUWBMVFT

Slide 37

Slide 37 text

944QBUIXBZDBVTFECZGJMFVQMPBET %JTL4UPSBHF

Slide 38

Slide 38 text

944QBUIXBZDBVTFECZGJMFVQMPBET %JTL4UPSBHF

Slide 39

Slide 39 text

%JTL4UPSBHF 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 40

Slide 40 text

%JTL4UPSBHF 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 41

Slide 41 text

%JTL4UPSBHF 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 42

Slide 42 text

%JTL4UPSBHF 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 43

Slide 43 text

%JTL4UPSBHF 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 44

Slide 44 text

%JTL4UPSBHF 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 45

Slide 45 text

%JTL4UPSBHF &YUFOTJPO QOHKQH $POUFOU5ZQF JNBHFQOHJNBHFKQH BOEPUIFSWBMJEBUJPO 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 46

Slide 46 text

7BMJEBUJPO&YBNQMF'JMF6QMPBE

Slide 47

Slide 47 text

%JTL4UPSBHF *GOPUBMMPXFE SFUVSOBWBMVF FHBQQMJDBUJPOPDUFUTUSFBN PSB WBMJEBUJPOFSSPSUPFOTVSFTBGFIBOEMJOH 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 48

Slide 48 text

944QBUIXBZDBVTFECZGJMFVQMPBET %JTL4UPSBHF $POUFOU5ZQFUFYUIUNM

Slide 49

Slide 49 text

%JTL4UPSBHF $POUFOU5ZQFUFYUIUNMJTJOWBMJE ˠ7BMJEBUJPO&SSPS 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 50

Slide 50 text

%JTL4UPSBHF 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 51

Slide 51 text

8BT944BNBKPSGBDUPSJOUSBEJUJPOBMGJMFVQMPBET ○ 8IFOTUPSJOHGJMFTPOEJTLTUPSBHFPSEFMJWFSJOHUIFN UIF$POUFOU 5ZQFXBTTOJGGFECZUIFNJEEMFXBSFPSBQQMJDBUJPO BOEUIFBUUBDLFS DPVMEOPUEJSFDUMZTQFDJGZUIF$POUFOU5ZQF ○ 7BMJEBUJPOXBTCFJOHEPOFBUVQMPBEUJNFJOUIFBQQMJDBUJPOBOE NJEEMFXBSF BOEUIFZOFFEFEUPCFCZQBTTFE #FDBVTFPGUIFBCPWFUXPQPJOUT GJMFVQMPBETJOUIFGPSNPGEJTLTUPSBHF XFSFPGUFONPSFEJGGJDVMUUPDBVTF944BTUIFZFBSTXFOUCZ 944QBUIXBZDBVTFECZGJMFVQMPBET

Slide 52

Slide 52 text

3FTFBSDIPO$POUFOU5ZQF IUUQTHJUIVCDPN#MBDL'BODPOUFOUUZQFSFTFBSDICMPCNBTUFS944NE $POUFOU5ZQF3FTFBSDICZ.S#MBDL'BO 1SFDFEFOUTJOUIJT3FTFBSDI

Slide 53

Slide 53 text

1SFDFEFOUTJOUIJT3FTFBSDI 3FTFBSDIPO$POUFOU5ZQF IUUQTHJUIVCDPN#MBDL'BODPOUFOUUZQFSFTFBSDICMPCNBTUFS944NE $POUFOU5ZQF3FTFBSDICZ.S#MBDL'BO 5IFJOUFSQSFUBUJPOPG$POUFOU5ZQFXBTOPUUIFNBJOUPQJDPGUIF TUVEZ BTUSBEJUJPOBMBQQMJDBUJPOJNQMFNFOUBUJPOTIBWFMJNJUFE NFUIPETGPSTQFDJGZJOHBSCJUSBSZ$POUFOU5ZQFTBOESFUSJFWJOH UIFNGSPNUIFSFTQPOTF

Slide 54

Slide 54 text

Ϋϥ΢υͱ৽͍͠߈ܸͷ଍৔0CKFDU4UPSBHF /FXBUUBDLWFDUPSTFNFSHFXJUIUIFBEWFOU

Slide 55

Slide 55 text

$MPVE MJGUcTJGUcGJSTU DBVTFEDIBOHFTJO BQQMJDBUJPOTUSVDUVSF $%/'SPOU4FSWFS #BDLFOE$MPVE

Slide 56

Slide 56 text

#BDLFOE$MPVE $MPVE MJGUcTJGUcGJSTU DBVTFEDIBOHFTJO BQQMJDBUJPOTUSVDUVSF $%/'SPOU4FSWFS

Slide 57

Slide 57 text

#BDLFOE$MPVE $MPVE MJGUcTJGUcGJSTU DBVTFEDIBOHFTJO BQQMJDBUJPOTUSVDUVSF $%/'SPOU4FSWFS

Slide 58

Slide 58 text

8IBUJT0CKFDU4UPSBHF

Slide 59

Slide 59 text

'JMF6QMPBEJODMPVE %JTLTUPSBHF 0CKFDUTUPSBHF

Slide 60

Slide 60 text

0CKFDU%BUB #JOBSZ .FUBEBUB ○ .FUBEBUBDBOCFGSFFMZDPOGJHVSFEVTJOHUIF"1* ○ $POUFOU5ZQFJOGPSNBUJPODBOBMTPCFBEEFEBTNFUBEBUB ○ 6TFDBTFT ○ 'JMF4UPSBHFGPS6QMPBEFEGJMF ○ 'JMF%FMJWFSZ 8IBU0CKFDU4UPSBHF

Slide 61

Slide 61 text

'JMF6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ

Slide 62

Slide 62 text

'JMF6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ

Slide 63

Slide 63 text

4FSWFS4JEF6QMPBEGPS4%,

Slide 64

Slide 64 text

4FSWFS4JEF6QMPBEGPS4%,

Slide 65

Slide 65 text

4FSWFS4JEF6QMPBEGPS4%,

Slide 66

Slide 66 text

4FSWFS4JEF6QMPBEGPS4%,

Slide 67

Slide 67 text

4FSWFS4JEF6QMPBEGPS4%, 4UPSFE

Slide 68

Slide 68 text

4FSWFS4JEF6QMPBEGPS4%,

Slide 69

Slide 69 text

'JMF6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ

Slide 70

Slide 70 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 71

Slide 71 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 72

Slide 72 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 73

Slide 73 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 74

Slide 74 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 75

Slide 75 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 76

Slide 76 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63- 4UPSFE

Slide 77

Slide 77 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 78

Slide 78 text

'JMF6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ

Slide 79

Slide 79 text

$MJFOU4JEF6QMPBEGPS10451PMJDZ

Slide 80

Slide 80 text

$MJFOU4JEF6QMPBEGPS10451PMJDZ

Slide 81

Slide 81 text

$MJFOU4JEF6QMPBEGPS10451PMJDZ

Slide 82

Slide 82 text

$MJFOU4JEF6QMPBEGPS10451PMJDZ

Slide 83

Slide 83 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 84

Slide 84 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63- 4UPSFE

Slide 85

Slide 85 text

$MJFOU4JEF6QMPBEGPS1SF4JHOFE63-

Slide 86

Slide 86 text

0CKFDU4UPSBHF944

Slide 87

Slide 87 text

0CKFDU%BUB #JOBSZ .FUBEBUB ○ .FUBEBUBDBOCFGSFFMZDPOGJHVSFEVTJOHUIF"1* ○ $POUFOU5ZQFJOGPSNBUJPODBOBMTPCFBEEFEBTNFUBEBUB ○ 6TFDBTFT ○ 'JMF4UPSBHFGPS6QMPBEFEGJMF ○ 'JMF%FMJWFSZ 0CKFDU4UPSBHF

Slide 88

Slide 88 text

0CKFDU4UPSBHFPG6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ

Slide 89

Slide 89 text

0CKFDU4UPSBHFPG6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ 7BMJEBUJPOCFGPSFVQMPBEJOHJOUIFSFBMXPSME &YUFOTJPO$IFDL BMMPXQOHKQFHHJGʜNPSFTBGFFYUFOTJPOT ˠ 🙆 'JMF)FBEFS$IFDLˠ 🙆 $POUFOU5ZQF$IFDLˠ 🤔

Slide 90

Slide 90 text

0CKFDU4UPSBHFPG6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ

Slide 91

Slide 91 text

4FSWFS4JEF6QMPBEGPS4%,944 5IF4%,XJMMFYQMJDJUMZHJWFQSFGFSFODFUPUIFVTFSQBTTJOH B$POUFOU5ZQF PUIFSXJTFJUXJMMTQFDJGZBTQFDJGJD $POUFOU5ZQF

Slide 92

Slide 92 text

4FSWFS4JEF6QMPBEGPS4%,944 4%,͸໌ࣔతʹϢʔβʔ͕$POUFOU5ZQFΛ౉͢৔߹ʹ͸༏ઌ͠ɺ ͦ͏Ͱͳ͍৔߹ʹ͸ಛఆͷ$POUFOU5ZQFΛࢦఆ͢Δ

Slide 93

Slide 93 text

4FSWFS4JEF6QMPBEGPS4%,944 $POUFOU5ZQFUFYUIUNM

Slide 94

Slide 94 text

4FSWFS4JEF6QMPBEGPS4%,944 &YUFOTJPO$IFDLˠDIFDL 🙆 'JMF)FBEFS$IFDLˠDIFDL 🙆 $POUFOU5ZQF$IFDLˠʜOPDIFDL 😴

Slide 95

Slide 95 text

4FSWFS4JEF6QMPBEGPS4%,944 $POUFOU5ZQFUFYUIUNM

Slide 96

Slide 96 text

4FSWFS4JEF6QMPBEGPS4%,944 4UPSFE

Slide 97

Slide 97 text

4FSWFS4JEF6QMPBEGPS4%,944 $POUFOU5ZQFUFYUIUNM

Slide 98

Slide 98 text

4FSWFS4JEF6QMPBEGPS4%,944 #SPXTFSTSFOEFSXJUIUIF$POUFOU 5ZQFTQFDJGJFECZUIFTFSWFS ˠ944

Slide 99

Slide 99 text

0CKFDU4UPSBHFPG6QMPBE.FUIPET 4FSWFS4JEF6QMPBE GPS4%, $MJFOU4JEF6QMPBE GPS1SF4JHOFE63- $MJFOU4JEF6QMPBE GPS10451PMJDZ

Slide 100

Slide 100 text

$MJFOU4JEF6QMPBE944 5IF4%,XJMMFYQMJDJUMZHJWFQSFGFSFODFUPUIFVTFSQBTTJOH B$POUFOU5ZQF PUIFSXJTFJUXJMMTQFDJGZBTQFDJGJD $POUFOU5ZQF

Slide 101

Slide 101 text

$MJFOU4JEF6QMPBE944 4%,͸໌ࣔతʹϢʔβʔ͕$POUFOU5ZQFΛ౉͢৔߹ʹ͸༏ઌ͠ɺ ͦ͏Ͱͳ͍৔߹ʹ͸ಛఆͷ$POUFOU5ZQFΛࢦఆ͢Δ

Slide 102

Slide 102 text

$MJFOU4JEF6QMPBE944

Slide 103

Slide 103 text

$MJFOU4JEF6QMPBE944 &YUFOTJPO$IFDLBOE4JHOFEˠ0,🙆 'JMF)FBEFS$IFDLBOE4JHOFEˠ0,🙆 $POUFOU5ZQF$IFDLBOE4JHOFEˠʜOP😴

Slide 104

Slide 104 text

$MJFOU4JEF6QMPBE944

Slide 105

Slide 105 text

$MJFOU4JEF6QMPBE944 $IBOHF $POUFOU5ZQFUFYUIUNM *O1SPYZ

Slide 106

Slide 106 text

$MJFOU4JEF6QMPBE944 4UPSFE

Slide 107

Slide 107 text

$MJFOU4JEF6QMPBE944 )5513FTQPOTF)FBEFS l$POUFOU5ZQFUFYUIUNMz

Slide 108

Slide 108 text

$MJFOU4JEF6QMPBE944 #SPXTFSTSFOEFSXJUIUIF$POUFOU 5ZQFTQFDJGJFECZUIFTFSWFS ˠ944

Slide 109

Slide 109 text

4QFDJGJDBUJPOPG$POUFOU5ZQF

Slide 110

Slide 110 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 8)"58('FUDITUBOEBSE )551QSPUPDPMBOE 4FNBOUJDT 3'$ 3'$ 3'$ BOENPSF

Slide 111

Slide 111 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDTBOE$POUFOU 3'$4USVDUVSFE'JFME7BMVFTGPS)551 3'$)5514FNBOUJDT 8)"58('FUDITUBOEBSE

Slide 112

Slide 112 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDTBOE$POUFOU $POUFOU5ZQF NFEJBUZQF NFEJBUZQF UZQFTVCUZQF 084084 QBSBNFUFS UPLFO UPLFORVPUFETUSJOH RVPUFETUSJOH %2605& REUFYURVPUFEQBJS %2605& REUFYU )5"#41YY#Y%&PCTUFYU PCTUFYU Y''

Slide 113

Slide 113 text

Slide 114

Slide 114 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDTBOE$POUFOU 8.3.1. Considerations for New Header Fields Whether the field is a single value or whether it can be a list (delimited by commas; see Section 3.2 of [RFC7230]). If it does not use the list syntax, document how to treat messages where the field occurs multiple times (a sensible default would be to ignore the field, but this might not always be the right choice). Note that intermediaries and software libraries might combine multiple header field instances into a single one, despite the field's definition not allowing the list syntax. A robust format enables recipients to discover these situations (good example: "Content-Type", as the comma can only appear inside quoted strings; bad example: "Location", as a comma can occur inside a URI).

Slide 115

Slide 115 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDTBOE$POUFOU Note that intermediaries and software libraries might combine multiple header field instances into a single one, despite the field's definition not allowing the list syntax. A robust format enables recipients to discover these situations (good example: "Content-Type", as the comma can only appear inside quoted strings; bad example: "Location", as a comma can occur inside a URI). (PPE&YBNQMF $POUFOU5ZQFJNBHFQOHIPHFlGVHB UFYUIUNMz ˠNFEJB5ZQFJNBHFQOH ˠQBSBNFUFST ○ IPHFlGVHB UFYUIUNMz

Slide 116

Slide 116 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDTBOE$POUFOU Note that intermediaries and software libraries might combine multiple header field instances into a single one, despite the field's definition not allowing the list syntax. A robust format enables recipients to discover these situations (good example: "Content-Type", as the comma can only appear inside quoted strings; bad example: "Location", as a comma can occur inside a URI). 1PJOUTUPDPOTJEFS $POUFOU5ZQFJNBHFQOHIPHFGVHB UFYUIUNM ˠNFEJB5ZQFJNBHFQOH ˠQBSBNFUFST ○ IPHFGVHB ˠ UFYUIUNM 🤔 -PPLBUPUIFSTQFDJGJDBUJPOT

Slide 117

Slide 117 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$4USVDUVSFE'JFME7BMVFTGPS)551 3.1 Lists Lists are arrays of zero or more members, each of which can be an Item (Section 3.3) or an Inner List (Section 3.1.1), both of which can be Parameterized (Section 3.1.2). 4QFD TGMJTUMJTUNFNCFS 084 084MJTUNFNCFS MJTUNFNCFSTGJUFNJOOFSMJTU &YBNQMF &YBNQMF-JTUTVHBS UFB SVN

Slide 118

Slide 118 text

🤔 4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDTBOE$POUFOU Note that intermediaries and software libraries might combine multiple header field instances into a single one, despite the field's definition not allowing the list syntax. A robust format enables recipients to discover these situations (good example: "Content-Type", as the comma can only appear inside quoted strings; bad example: "Location", as a comma can occur inside a URI). 1PJOUTUPDPOTJEFS $POUFOU5ZQFJNBHFQOHIPHFGVHB UFYUIUNM ˠNFEJB5ZQFJNBHFQOH UFYUIUNM ˠQBSBNFUFST ○ IPHFGVHB UFYUIUNMDPVMECFTFUUP.FEJB5ZQFʜ

Slide 119

Slide 119 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDT $POUFOU5ZQF NFEJBUZQF NFEJBUZQF UZQFTVCUZQF 084084 QBSBNFUFS UPLFO UPLFORVPUFETUSJOH RVPUFETUSJOH %2605& REUFYURVPUFEQBJS %2605& REUFYU )5"#41YY#Y%&PCTUFYU PCTUFYU Y''

Slide 120

Slide 120 text

Slide 121

Slide 121 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 3'$)5514FNBOUJDT 5.6.2. Tokens Many HTTP field values are defined using common syntax components, separated by whitespace or specific delimiting characters. Delimiters are chosen from the set of US-ASCII visual characters not allowed in a token (DQUOTE and "(),/:;<=>?@\[\\]{}"). %2605&BOE l !a\^ 👀 $POUFOU5ZQF7BMVFJTOPUFYQMJDJUMZNBSLFE l.645/05PS4)06-%/05 ˠ-JTU5ZQF7BMVFNBZCFBWBJMBCMF

Slide 122

Slide 122 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 8)"58('FUDITUBOEBSE 1BSTF-PHJDGPS$POUFOU5ZQF -FUDIBSTFUCFOVMM -FUFTTFODFCFOVMM -FUNJNF5ZQFCFOVMM -FUWBMVFTCFUIFSFTVMUPGHFUUJOH EFDPEJOH BOETQMJUUJOH$POUFOU5ZQFGSPNIFBEFST *GWBMVFTJTOVMM UIFOSFUVSOGBJMVSF 'PSFBDIWBMVFPGWBMVFT -FUUFNQPSBSZ.JNF5ZQFCFUIFSFTVMUPGQBSTJOHWBMVF *GUFNQPSBSZ.JNF5ZQFJTGBJMVSFPSJUTFTTFODFJT UIFODPOUJOVF 4FUNJNF5ZQFUPUFNQPSBSZ.JNF5ZQF *GNJNF5ZQF`TFTTFODFJTOPUFTTFODF UIFO 4FUDIBSTFUUPOVMM *GNJNF5ZQF`TQBSBNFUFST<DIBSTFU>FYJTUT UIFOTFUDIBSTFUUPNJNF5ZQF`TQBSBNFUFST 4FUFTTFODFUPNJNF5ZQF`TFTTFODF 0UIFSXJTF JGNJNF5ZQF`TQBSBNFUFST<DIBSTFU>EPFTOPUFYJTU BOEDIBSTFUJTOPOOVMM TFUNJNF5ZQF`T QBSBNFUFST<DIBSTFU>UPDIBSTFU *GNJNF5ZQFJTOVMM UIFOSFUVSOGBJMVSF 3FUVSONJNF5ZQF

Slide 123

Slide 123 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 8)"58('FUDITUBOEBSE 7BSJBCMFTSFMBUFEUP NJNF5ZQFBSFNVUBCMF TP UIFZBSFPWFSXSJUUFOCZ'PS MPPQ 1TFVEPJNQMFNFOUBUJPOXJUI5ZQF4DSJQU

Slide 124

Slide 124 text

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

Slide 125

Slide 125 text

4QFDJGJDBUJPOPG$POUFOU5ZQF 8)"58('FUDITUBOEBSE $PNNB JTVTFEBTUIF DIBSBDUFSVTFEGPSEJWJTJPO 1TFVEPJNQMFNFOUBUJPOXJUI5ZQF4DSJQU

Slide 126

Slide 126 text

*OUFSQSFUBUJPO%JGGFSFODFGPS4QFDJGJDBUJPO 4FNJDPMPO 1TFVEPJNQMFNFOUBUJPOXJUI5ZQF4DSJQU 3'$ $POUFOU5ZQFJNBHFQOHUFYUIUNM 8)"58( $POUFOU5ZQFJNBHFQOHUFYUIUNM

Slide 127

Slide 127 text

*OUFSQSFUBUJPO%JGGFSFODFGPS4QFDJGJDBUJPO 4FNJDPMPO 1TFVEPJNQMFNFOUBUJPOXJUI5ZQF4DSJQU 3'$ $POUFOU5ZQFJNBHFQOHUFYUIUNM 8)"58( $POUFOU5ZQFJNBHFQOHUFYUIUNM .JNF5ZQFJTJNBHFQOH .JNF5ZQFJTJNBHFQOH

Slide 128

Slide 128 text

*OUFSQSFUBUJPO%JGGFSFODFGPS4QFDJGJDBUJPO 4FNJDPMPO 1TFVEPJNQMFNFOUBUJPOXJUI5ZQF4DSJQU 3'$ $POUFOU5ZQFJNBHFQOHUFYUIUNM 8)"58( $POUFOU5ZQFJNBHFQOHUFYUIUNM .JNF5ZQFJTJNBHFQOH .JNF5ZQFJTJNBHFQOH 4FNJDPMPO JTVTFEUP EFMJNJUQBSBNFUFST TPUIF

Slide 129

Slide 129 text

*OUFSQSFUBUJPO%JGGFSFODFGPS4QFDJGJDBUJPO $PNNB 1TFVEPJNQMFNFOUBUJPOXJUI5ZQF4DSJQU 3'$ $POUFOU5ZQFJNBHFQOH UFYUIUNM 8)"58( $POUFOU5ZQFJNBHFQOH UFYUIUNM

Slide 130

Slide 130 text

*OUFSQSFUBUJPO%JGGFSFODFGPS4QFDJGJDBUJPO $PNNB 1TFVEPJNQMFNFOUBUJPOXJUI5ZQF4DSJQU 3'$ $POUFOU5ZQFJNBHFQOH UFYUIUNM 8)"58( $POUFOU5ZQFJNBHFQOH UFYUIUNM 6OEFGJOFE $POUFOU5ZQFJTEFGJOFEBTTJOHVMBS .JNF5ZQFJTUFYUIUNM

Slide 131

Slide 131 text

Slide 132

Slide 132 text

&YBNQMFPGDPEFXJUIJOBEFRVBUF JNQMFNFOUBUJPO $PEF*NQMFNFOUBUJPO "MMPXJNBHFQOH 1SFGJYNBUDI 4VGGJYNBUDI 3FHFYNBUDI JNBHFQOH UFYUIUNM UFYUIUNMJNBHFQOH JNBHFQOH UFYUIUNM #ZQBTT&YBNQMF *ODMVEF UFYUIUNMJNBHFQOH

Slide 133

Slide 133 text

$7&BOE$7&

Slide 134

Slide 134 text

$7&BOE$7& $7&IUUQTHJUIVCDPNDBSSJFSXBWFVQMPBEFSDBSSJFSXBWFTFDVSJUZBEWJTPSJFT()4"HYIYHGRIK $7&IUUQTHJUIVCDPNDBSSJFSXBWFVQMPBEFSDBSSJFSXBWFTFDVSJUZBEWJTPSJFT()4"WGNWKGDQKKX

Slide 135

Slide 135 text

$BSSJFSXBWF - 'JMF6QMPBE - 'JMF7BMJEBUJPO - FUD

Slide 136

Slide 136 text

$BSSJFSXBWF $POUFOU5ZQFXBTSFHJTUFSFEJOUIF NFUBEBUBXIFOUIFPCKFDUXBTVQMPBEFE 4UPSFE

Slide 137

Slide 137 text

GFBUVSFPG7BMJEBUJPO

Slide 138

Slide 138 text

$7&TPNFUIJOHXBTEJTDPWFSFE

Slide 139

Slide 139 text

$7&$POGJSNBUJPOPGJNQMFNFOUBUJPO

Slide 140

Slide 140 text

$7&$POGJSNBUJPOPGJNQMFNFOUBUJPO

Slide 141

Slide 141 text

$7&$POGJSNBUJPOPGJNQMFNFOUBUJPO

Slide 142

Slide 142 text

JNBHFQOH $7&$POGJSNBUJPOPGJNQMFNFOUBUJPO 3FTQPOTFˠ0,

Slide 143

Slide 143 text

UFYUIUNM 3FTQPOTFˠ/PU'PVOE $7&$POGJSNBUJPOPGJNQMFNFOUBUJPO

Slide 144

Slide 144 text

BJNBHFQOH 3FTQPOTFˠ0, $7&$POGJSNBUJPOPGJNQMFNFOUBUJPO

Slide 145

Slide 145 text

$7&$POGJSNBUJPOPGJNQMFNFOUBUJPO

Slide 146

Slide 146 text

$7&$POGJSNBUJPOPGJNQMFNFOUBUJPO 🤔 *XBOUUIFCSPXTFSUP SFOEFSJUBTUFYUIUN M

Slide 147

Slide 147 text

Slide 148

Slide 148 text

3FTQPOTFˠ0, UFYUIUNMJNBHFQOH $7&$POGJSNBUJPOPGJNQMFNFOUBUJPO

Slide 149

Slide 149 text

$7&&SSPOFPVT'JY1SPQPTBM .ZTJODFSFBQPMPHJFT

Slide 150

Slide 150 text

$7&'JY1SPQPTBMBGUFS4QFDJGJDBUJPOTVSWFZ a"\JUFN^ 4UBSUT8JUINVDI JNBHFQOH UFYUIUNM *DBO#ZQBTTJU

Slide 151

Slide 151 text

JNBHFQOH UFYUIUNM 3FTQPOTFˠ0, 😰 $7&'JY1SPQPTBMBGUFS4QFDJGJDBUJPOTVSWFZ

Slide 152

Slide 152 text

$7&'JY

Slide 153

Slide 153 text

$POUFOU5ZQFJNBHFQOH UFYUIUNM $7&'JY

Slide 154

Slide 154 text

$POUFOU5ZQFJNBHFQOH UFYUIUNM DIBOHFEUPJNBHFQOHCZ .BSDFM.JNFUZQF $7&'JY

Slide 155

Slide 155 text

4UPSFE $7&'JY .FUBEBUBJTTFUUPBTBGF$POUFOU5ZQF

Slide 156

Slide 156 text

ରࡦ 4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 157

Slide 157 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO 6TF6TFS*OQVU 'PS$POUFOU5ZQF 4FU.FDIBOJDBMMZEFUFSNJOFE7BMVF 'PS$POUFOU5ZQF ○ $POUFOU5ZQFJTBOFYBDUNBUDI ○ /PQBSUJBMNBUDIFTBSFVTFE ○ /PTUBSUT8JUI ○ /PFOET8JUI ○ /PJODMVEFT ○ #FDBSFGVMPGVOJOUFOEFETUSJOH NBUDIFTXIFOVTJOHSFHVMBS FYQSFTTJPOT ○ ?JNBHF QOHcKQFHcKQHcHJG ○ %FUFSNJOFUIFWBMVFPG$POUFOU UZQFCBTFEPOUIFJOGPSNBUJPOJO UIFGJMF ○ 'JMF)FBEFS ○ &YUFOTJPO ○ 7BMJEBUJPOPGUIFEFUFSNJOFEWBMVF

Slide 158

Slide 158 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO 7BMJEBUJPOXJUIGJYFEWBMVFT &YBNQMF4FSWFS4JEF

Slide 159

Slide 159 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO &YBNQMF4FSWFS4JEF

Slide 160

Slide 160 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO $POUFOU5ZQFUFYUIUNM &YBNQMF4FSWFS4JEF

Slide 161

Slide 161 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO $POUFOU5ZQFUFYUIUNM &YBNQMF4FSWFS4JEF

Slide 162

Slide 162 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO 9 &YBNQMF4FSWFS4JEF

Slide 163

Slide 163 text

5IFBMMPXFE$POUFOU5ZQFT FHJNBHFQOH BSFQSFEFUFSNJOFE 4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO &YBNQMF$MJFOU4JEF

Slide 164

Slide 164 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 165

Slide 165 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 166

Slide 166 text

&YBNQMF$MJFOU4JEF 4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 167

Slide 167 text

&YBNQMF$MJFOU4JEF 4JHOXJUIB$POUFOU5ZQF)FBEFS XJUI7BMJEBUJPOBOEEFUFSNJOFE WBMVFT 4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 168

Slide 168 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 169

Slide 169 text

$IBOHFUP $POUFOU5ZQFUFYUIUNM *O1SPYZ 4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 170

Slide 170 text

7FSJGZTJHOBUVSFTBOESFKFDUJG EJGGFSFOU 4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 171

Slide 171 text

4FDVSJUZNFBTVSFTJOJNQMFNFOUBUJPO

Slide 172

Slide 172 text

4JEF4UPSZ.JNF5ZQF4OJGGJOH

Slide 173

Slide 173 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH 🤔

Slide 174

Slide 174 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH 🤔 VOLOPXOUZQF

Slide 175

Slide 175 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH 😊 VOLOPXOUZQF ⭕

Slide 176

Slide 176 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH .JNF5ZQFTOJGGFS )J 😊

Slide 177

Slide 177 text

UFYUIUNM B JNBHFUFYUIUNM JNBHFQOHYB UFYUIUNM YZ YZ YZ YZ YZ YZ YZ UFYUIUNM JNBHF UFYUaIUNMQOH .JNF5ZQFTOJGGFS 5IJTJTBOPUIFSTUPSZ

Slide 178

Slide 178 text

5IBOLZPVGPSZPVSBUUFOUJPOʂ

Slide 179

Slide 179 text

3FGFSFODF

Slide 180

Slide 180 text

○ $POUFOU4FDVSJUZ1PMJDZ ○ IUUQTEFWFMPQFSNP[JMMBPSHKBEPDT8FC)551)FBEFST$POUFOU4FDVSJUZ1PMJDZ ○ "NB[PO4 ○ IUUQTBXTBNB[PODPNKQT ○ BXTTELKTW ○ IUUQTHJUIVCDPNBXTBXTTELKTW ○ TJHOFE63- ○ IUUQTEPDTBXTBNB[PODPNKB@KQ*".MBUFTU6TFS(VJEFDSFBUFTJHOFESFRVFTUIUNM ○ $BSSJFSXBWF ○ IUUQTHJUIVCDPNDBSSJFSXBWFVQMPBEFSDBSSJFSXBWF ○ 3'$ ○ IUUQTEBUBUSBDLFSJFUGPSHEPDIUNMSGD ○ 3'$ ○ IUUQTEBUBUSBDLFSJFUGPSHEPDIUNMSGD ○ 3'$ ○ IUUQTEBUBUSBDLFSJFUGPSHEPDIUNMSGD ○ 'FUDI4UBOEBSE ○ IUUQTGFUDITQFDXIBUXHPSH ○ #ZQBTTJOHBOEFYQMPJUJOH#VDLFU6QMPBE1PMJDJFTBOE4JHOFE63-T ○ IUUQTMBCTEFUFDUJGZDPNXSJUFVQTCZQBTTJOHBOEFYQMPJUJOHCVDLFUVQMPBEQPMJDJFTBOETJHOFEVSMT ○ $POUFOU5ZQFBMMPXMJTUCZQBTTWVMOFSBCJMJUZ QPTTJCMZMFBEJOHUP944 ○ IUUQTHJUIVCDPNDBSSJFSXBWFVQMPBEFSDBSSJFSXBWFTFDVSJUZBEWJTPSJFT()4"HYIYHGRIK 3FGFSFODF