MB blog: Setting arbitrary request headers in Chromium via CRLF injection

2018/06/21 15 users

In this short note I'll describe a bug I found in Chrome recently. It allowed to set arbitrary headers in cross-domain requests. @insertScript recently found a very similar bug in Adobe Reader plugin but it turns out you can still expect those bugs in browsers themselves. Why is it serious? Becau... 続きを読む

RoboGuice 2.0 で Dependency を Injection しました - Just posted a blog

2013/01/10 12 users dependency

だるすぎ— 高意識エネルギー体さん (@mizchi) 12月 1, 2012 “はじめてのDependency Injection - _development,” htn.to/yoYFMc— 高意識エネルギー体さん (@mizchi) 12月 1, 2012 人間はだるくない開発がしたい。 そこで、DIフレームワークを使うことにした。 Deep dive into RoboGuice bey... 続きを読む