翻訳と辞書 Words near each other ・ HU University of Applied Sciences Utrecht ・ HTTP compression ・ HTTP cookie ・ HTTP Debugger ・ HTTP ETag ・ HTTP File Server ・ HTTP handler ・ HTTP header injection ・ HTTP Live Streaming ・ HTTP location ・ HTTP message body ・ HTTP persistent connection ・ HTTP pipelining ・ HTTP Public Key Pinning ・ HTTP referer ・ HTTP response splitting ・ HTTP Strict Transport Security ・ HTTP Switchboard ・ HTTP tunnel ・ HTTP+HTML form-based authentication ・ HTTP/1.1 Upgrade header ・ HTTP/2 ・ HTTPA ・ Httpd ・ Httpd.conf ・ Httperf ・ HTTPR ・ HTTPRange-14 ・ HTTPS ・ HTTPS Everywhere Dictionary Lists mini英和辞書 mini和英辞書 Webster 1913 Latin-English FOLDOC Wikipedia English ウィキペディア

翻訳と辞書　辞書検索 [ 開発暫定版 ] スポンサード リンク HTTP response splitting ： ウィキペディア英語版 HTTP response splitting HTTP response splitting is a form of web application vulnerability, resulting from the failure of the application or its environment to properly sanitize input values. It can be used to perform cross-site scripting attacks, cross-user defacement, web cache poisoning, and similar exploits. The attack consists of making the server print a carriage return (CR, ASCII 0x0D) line feed (LF, ASCII 0x0A) sequence followed by content supplied by the attacker in the header section of its response, typically by including them in input fields sent to the application. Per the HTTP standard (RFC 2616), headers are separated by one CRLF and the response's headers are separated from its body by two. Therefore, the failure to remove CRs and LFs allows the attacker to set arbitrary headers, take control of the body, or break the response into two or more separate responses—hence the name. == Prevention == The generic solution is to URL-encode strings before inclusion into HTTP headers such as ''Location'' or ''Set-Cookie''. Typical examples of sanitization include casting to integers or aggressive regular expression replacement. Although response splitting is not specific to PHP, the PHP interpreter contains protection against the attack since version 4.4.2 and 5.1.2.〔(【引用サイトリンク】title=PHP: PHP 5.1.2. Release Announcement )〕 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「HTTP response splitting」の詳細全文を読む スポンサード リンク 翻訳と辞書 : 翻訳のためのインターネットリソース Copyright(C) kotoba.ne.jp 1997-2016. All Rights Reserved.