Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
XSSのない最高の夏を過ごそう
Search
Sota Sugiura
June 02, 2016
Technology
0
1k
XSSのない最高の夏を過ごそう
社内勉強会発表資料
Sota Sugiura
June 02, 2016
Tweet
Share
More Decks by Sota Sugiura
See All by Sota Sugiura
内製したSlack Appで頑張るIncident Response@Waroom Meetup #1 / Incident Response with Slack App in 10X
sota1235
0
1.6k
20220926_セキュリティチームの今_for_Drs._Prime_公開用.pdf
sota1235
0
130
再発防止策を考える技術 / #phpconsen
sota1235
10
3.9k
How to choose the best npm module for your team?
sota1235
9
600
Realtime Database for high traffic production application
sota1235
7
4k
Road to migrate JP Web as a microservice
sota1235
4
1.6k
インターフェース再入門 / Think Interface again
sota1235
6
11k
再発防止策を考える技術 #phpconfuk_rej
sota1235
1
1.2k
Update around Firebase #io18
sota1235
3
4.3k
Other Decks in Technology
See All in Technology
自律的なスケーリング手法FASTにおけるVPoEとしてのアカウンタビリティ / dev-productivity-con-2025
yoshikiiida
1
17k
2025 AWS Jr. Championが振り返るAWS Summit
kazukiadachi
0
110
Backlog ユーザー棚卸しRTA、多分これが一番早いと思います
__allllllllez__
1
150
成長し続けるアプリのためのテストと設計の関係、そして意思決定の記録。
sansantech
PRO
0
120
What’s new in Android development tools
yanzm
0
310
OPENLOGI Company Profile for engineer
hr01
1
34k
Tokyo_reInforce_2025_recap_iam_access_analyzer
hiashisan
0
180
MobileActOsaka_250704.pdf
akaitadaaki
0
120
United Airlines Customer Service– Call 1-833-341-3142 Now!
airhelp
0
170
AIの全社活用を推進するための安全なレールを敷いた話
shoheimitani
2
510
いつの間にか入れ替わってる!?新しいAWS Security Hubとは?
cmusudakeisuke
0
120
FOSS4G 2025 KANSAI QGISで点群データをいろいろしてみた
kou_kita
0
400
Featured
See All Featured
Unsuck your backbone
ammeep
671
58k
The Pragmatic Product Professional
lauravandoore
35
6.7k
A Tale of Four Properties
chriscoyier
160
23k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
229
22k
Embracing the Ebb and Flow
colly
86
4.7k
Automating Front-end Workflow
addyosmani
1370
200k
Six Lessons from altMBA
skipperchong
28
3.9k
What's in a price? How to price your products and services
michaelherold
246
12k
[RailsConf 2023] Rails as a piece of cake
palkan
55
5.7k
Music & Morning Musume
bryan
46
6.6k
Keith and Marios Guide to Fast Websites
keithpitt
411
22k
Producing Creativity
orderedlist
PRO
346
40k
Transcript
944ͷͳ͍࠷ߴͷՆΛ աͦ͝͏ !TPUB
ͱ͜ΖͰօ͞Μ
͏͙͢ՆͰ͢ΑͶ
Նָ͍͜͠ͱ͕͍ͬͺ͍
Ͱສ͕Ұ944Λग़͢ͱʜ
োใࠂͨ͠Γ
ۀͯ͠ରԠͨ͠Γ
্࢘ʹౖΒΕͨΓ
͖ͬΓݴͬͯπϥΠ
ͯ͜ͱͰ ࠓͷత
944ʹ͍ͭͯվΊͯݟΛਂΊɺ 944ͱແԑͷ࠷ߴͷՆΛաͦ͝͏ʂ
"HFOEB w "CPVU944 w 5IFSJTLPG944 w 5SZ944 w 944$PVOUFSNFBTVSFT
"CPVU944
944$SPTT4JUF4DSJQUJOH w ҙͷεΫϦϓτ࣮ߦΛڐ༰ͯ͠͠·͏੬ऑੑ w ओઓओʹ8FCϒϥβ w ಈత8FCαΠτͷൟӫʹ͍ٸ૿ͨ͠੬ऑੑ
944ͷछྨ w ࣹܕ944 3FqFDUJPO944 w ੵܕ944 4UPSFE944 w
%PN#BTFE944
4DFOBSJPPG944ᶃ 944੬ऑੑͷଘࡏ͢Δ αʔό ίϫΠਓ ߈ܸର ᶃ᠘63-Λࡌͤͨ ϝʔϧΛૹ৴ ᶄ᠘63-ʹΞΫηε ᶅ߈ܸεΫϦϓτͷؚ·Εͨ ϦιʔεΛฦ͢
4DFOBSJPPG944ᶄ 944੬ऑੑͷଘࡏ͢Δ αʔό ίϫΠਓ ߈ܸର %# ᶃ߈ܸεΫϦϓτΛؚΜͩ σʔλΛૹ৴ ᶅϖʔδʹΞΫηε ᶆ߈ܸεΫϦϓτͷؚ·Εͨ
ϦιʔεΛฦ͢ ᶄσʔλΛߋ৽
4DFOBSJPTPG944 w 944ͷදతͳγφϦΦΛհ͠·ͨ͠ w ଞʹ͍Ζ͍Ζ͋Δ͚Ͳ͍͍ͩͨ͜ͷύλʔϯ w ৄ͘͠ʮࠓ͞Βฉ͚ͳ͍944ʯΛͲ͏ͧ
5IFSJTLPG944
944ͷϦεΫ 944ͷϦεΫͱ +BWB4DSJQUͰͰ͖Δ͜ͱͳΜͰͰ͖Δ͜ͱ
+BWB4DSJQUͰͰ͖Δ͜ͱ w $PPLJFͷಡΈࠐΈ w ηογϣϯϋΠδϟοΫ w ϖʔδվ᜵ w "KBY௨৴
+BWB4DSJQUͰͰ͖ͳ͍͜ͱ w 1$্ͷϦιʔεͷΞΫηε w αϯυϘοΫε w ྲྀߦΓͷ&MFDUSPO͜͜ΒΜ͕࠷ۙݴٴ͞Ε͡Ίͨ w ҟͳΔΦϦδϯ্ͷϦιʔεͷΞΫηε w
4BNF0SJHJO1PMJDZ w ଞλϒͷଞαΠτͷใΛ౪·ΕͨΓ͠ͳ͍ ϒϥβʹ ੬ऑੑ͕ͳ͚Ε
$BTF4UVEZϖʔδվ᜵ w σβΠφʔͷࣗݾհϖʔδͷ৭Λ࠷ѱͷηϯ εʹվ᜵
·͡Ίͳ w ͠944͕ൃੜ͢Δͱ͋ΒΏΔҙͷίʔυ͕ Ϣʔβʹૹ৴͞ΕΔ͜ͱʹͳΔ w έʔεʹΑͬͯαʔόଆͷϩάʹΒͣɺ ෆՄೳͳ944ଘࡏ͢Δ w 42-ΠϯδΣΫγϣϯͱൺΔͱܰΜ͡ΒΕ ͍ͯΔҹ
ओ؍ ͚ͩͲܾͯ͠ແࢹͰ͖ͳ͍
5SZ944
ࠓͷϝΠϯίϯςϯπ
࣮ࡍʹ944Λ୳ͯ͠ΈΑ͏ʂʂ
5SZ944 w ࣮ࡍʹ944Λ୳ͯ͠ΈΔ w ॳΊͯͷϋϯζΦϯܗࣜͳͷͰ͙ͩͬͨΒεΠ Ϛηϯ w ࣮ࡍʹͳ͔ͳ͔ى͖ͳ͍944͋Γ·͕͢ɺ +BWB4DSJQUͷڍಈͷษڧ݉ͶͯͨΓ͢ΔͷͰ ؾʹͤͣύζϧײ֮Ͱ୳͍ͯͩ͘͠͞
IUUQTHJUIVCDPNTPUBYTT@UPVS
944$PVOUFSNFBTVSFT
)5.-Τεέʔϓ w ಈతʹग़ྗ͢ΔจࣈશͯΤεέʔϓ͠·͠ΐ͏ w 63-ͱ͔Կߟ͑ͣʹͦͷ··ల։͕ͪ͠ w ຊʹͦΕ҆શͰ͔͢ʁޙ͔Βݟͨਓ944Λٙ ΘͣʹࡁΉ࣮ʹͳͬͯ·͔͢ʁ w αχλΠζͱ͍͏બΛऔΔͳΒςετέʔεΛॆ
࣮ͤ͞Α͏
ϑϩϯτ+4 w ϑϩϯτ+4جຊΤεέʔϓ w ΤεέʔϓͤͣʹؤுΒͳ͖Ό͍͚ͳ͍ͷͰ͋ΕԿ ͔͠Βͷ7JFXϥΠϒϥϦͷಋೖΛݕ౼͖͢ w K2VFSZͰେྔʹ%0.ૢ࡞͞ΕͯΔίʔυͰ944͕ ઈରʹͳ͍ͱݴ͍Δࣗ৴͕͋ΔͳΒ͍͍͚Ͳɻɻɻ
ΫοΩʔΛकΔ w ສ͕Ұɺ944͕ൃੜͯ͠ΫοΩʔΛकΔ͜ͱ ͕Ͱ͖Δ w $PPLJFϔομʹIUUQ0OMZΛ͚ͭΔͱ EPDVNFOUDPPLJF͕͑ͳ͘ͳΔ w ͜ͷϔομ͜Ε͔Βઌڧ੍ͰϚετʹ͍ͨ͠ Ϩϕϧ
)551ϔομΛۦ͢Δ w ϞμϯϒϥβͰ͋Ε$41ϔομͷ༻Λਪ w ΠϯϥΠϯεΫϦϓτͷ࣮ߦΛ੍ w େͷ944͜ΕͰ͚Δ w *&944'JMUFSΛ༗ޮʹ͢Δ w
ڍಈ͕͍·͍ͪΦʔϓϯͰͳ͍͚Ͳେͷ944 ͚ͦ͏ͳงғؾʁ
944ͷͳ͍࠷ߴͷՆΛա͝͠·͠ΐ͏