[Seasar-user:19486] Re: 【Teeda】リクエストヘッダのhostとセキュリティ

[Koichi Kobayashi]

$B>.NS(B (koichik) $B$G$9!%(B

Date:    Thu, 11 Mar 2010 19:32:58 +0900
From:    "Hidemasa Aoki" <[E-MAIL ADDRESS DELETED]>
To:      <[E-MAIL ADDRESS DELETED]>
Subject: [Seasar-user:19485] $B!Z(BTeeda$B![%j%/%(%9%H%X%C%@$N(Bhost$B$H%;%-%e%j%F%#(B

> Teeda$B$O%j%/%(%9%H%X%C%@$K(Bhost$B$H$$$&JQ?t$r;H$C$F$$$F!"(B

$B$=$l$O(B Teeda $B$,;H$C$F$k$H$$$&$o$1$G$O$J$/!$(B
HTTP/1.1 $B$GI,?\$N(B Host: $B%X%C%@$G$9!%(B
1 $BBf$N%5!<%P$GJ#?t$N%[%9%H(B ($B2>A[%[%9%H(B) $B$r(B
$B<B8=$9$k$?$a$J$I$K;H$o$l$^$9!%(B

> $B$3$l$r$b$H$K(BURL$B$J$I$r:n(B
> $[E-MAIL ADDRESS DELETED]$7$F$$$k$H$$$&OC$r;G$$$^$7$?!#(B

$B%j%@%$%l%/%H$G(B HTTP $B$+$i(B HTTPS$B!$$"$k$$$O(B
$B$=$N5U$K%W%m%H%3%k$,JQ$o$k>l9g!$(BTeeda $B$O(B
HttpServletRequest#getRequestedURL() $B$G(B
$B<hF@$7$?8=:_$N%j%/%(%9%H$N(B URL $B$r%Y!<%9$K(B
$B%j%@%$%l%/%[E-MAIL ADDRESS DELETED]$N(B URL $B$r:[E-MAIL ADDRESS DELETED]$7$^$9!%(B

HttpServletRequest#getRequestedURL() $B$,(B
$BJV$9(B URL $BCf$N%[%9%HL>$ODL>o(B Host: $B%X%C%@$+$i(B
$BF@$i$l$k$b$N$G$9!%(B

> $B$7$+$7!"$3$N%j%/%(%9%H%X%C%@$[E-MAIL ADDRESS DELETED]$K2~$6$s$5$l$?>l9g!"0-0U<T$,K>$`(BURL$B$K%j%/(B
> $B%(%9%H$rHt$P$9$3$H$,$G$-$k$H$$$&%;%-%e%j%F%#$NLdBj$,$"$k$H!"%;%-%e%j%F%#2q<R(B
> $B$K;XE&$5$l$^$7$?!#(B
> 
> $B$=$3$G<ALd$J$N$G$9$,!"(B
> $B-!$=$b$=$b!"$3$N%;%-%e%j%F%#LdBj$O;v<B$G$7$g$&$+!)(B

$B%;%-%e%j%F%#$K>\$7$$$o$1$G$O$J$$$N$G!$(B
$B$3$l$@$1$G$O;v<B$+$I$&$+H=CG$G$-$^$;$s!%(B
$B6qBNE*$K$I$s$JLdBj$,5/$3$j$($k$N$+!$(B
$B%;%-%e%j%F%#2q<R$5$s$K3NG'$7$F$/$@$5$$!%(B

> $B!J$=$l$H$b!"(Bhost$BJQ?t$r2~$6$s$5$l$F$$$?$i!"%A%'%C%/$7$F$O$8$/!"$H$$$C$?=hM}$O(B
> $B$"$k$N$G$7$g$&$+!)!K(B
> 
> $B-"$^$?!"$3$l$,;v<B$@$H$7$F!"$I$s$JBP1~J}K!$,9M$($i$l$k$G$7$g$&$+!)(B
> 
> $B$$$^$N$H$3$m!"(Binterceptor$B$r;H$C$F!"Aw$i$l$F$-$?(Bhost$BJQ?t$NFbMF$[E-MAIL ADDRESS DELETED]$7$$$+$I$&(B
> $B$+%A%'%C%/$9$k!"$H$$$&BP1~J}K!$r9M$($F$$$^$9!#(B

Host: $B%X%C%@$N%A%'%C%/$O(B Apache and/or Tomcat $B$G(B
$B$d$k$3$H$G$O$J$$$G$7$g$&$+!%(B
$B%"%W%j$d%U%l!<%`%o!<%/$KFO$/;~E@$G%@%a$@$H;W$$$^$9!%(B


-- 
<component name="koichik">
    <property name="fullName">"Koichi Kobayashi"</property>
    <property name="email">"[E-MAIL ADDRESS DELETED]"</property>
    <property name="blog">"http://d.hatena.ne.jp/koichik"</property>
</component>