February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
181
10
장
사이트 간 스크립팅(XSS)
<noscript><p title="</noscript>
<img src="x" onerror="alert(1)">
"">
"
이런 일이 일어나는 것은
DOMPurify
가 정제 과정에서 루트 엘리먼트
<
template
>
를 이용하
기 때문이다.
<
template
>
태그는 파싱되고 렌더링되지 않기 때문에 정제에 이용하기 좋다.
<
template
>
태그 내에서는 엘리먼트 스크립팅이 비활성화된다.
<
noscript
>
태그는 스크립팅
이 비활성화되면 자식 엘리먼트를 나타내지만 스크립팅이 활성화되면 아무 일도 하지 않는다.
달리 말해 이미지
onerror
는 정제기에 있을 때는 스크립트 실행을 할 수 없지만 정제를 마치
고 실제 브라우저 환경으로 넘어가면
<
p
title
="
가 무시되어
onerror
가 유효하게 바뀐다.
이와 같이 브라우저
DOM
엘리먼트는 부모, 자식, 형제가 무엇인지에 따라 다르게 작동하곤
한다. 해커는 이런 점을 이용해 유효한 스크립트가 아닌 것처럼 필터를 우회한 후 브라우저에
서는 실제 작동하는
XSS
페이로드를 만들 수 있다.
뮤테이션 기반
XSS
는 매우 최신의 기술이며 애플리케이션 보안 분야의 오해를 받곤 한다. 웹
에는 익스플로잇의 개념 증명을 많이 찾아볼 수 있으며 그 수는 앞으로 더 늘어날 것으로 보인
다.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.