В этой заметке мы поговорим об уязвимости, найденной мной некоторое время назад в браузере Chrome и позволяющей обходить политику безопа..
{"krvd":{"state":{"logo":{"lang":"ru","a11yLabel":"Главная страница Яндекса","mordaUrl":"//ya.ru/"},"form":{"action":"/blogs/search","searchLabel":"Найти","hiddenInputs":[{"name":"lr","value":20815}]},"actions":{"advancedSearch":{"checked":true,"ariaLabel":"Расширенный поиск"},"moreButtonProps":{"ariaLabel":"Ещё"}},"userSection":{"loggedIn":false,"loginProps":{"loginUrl":"https://passport.yandex.ru/auth?retpath=%2F&origin=serp_desktop_auth_new","loginText":"Войти","burgerAriaLabel":"Меню"}},"navigation":{"tabs":[{"id":"search","label":"Поиск","url":"/search","params":{"text":"[$query]","source":"tabbar"}},{"id":"images","label":"Картинки","url":"/images/search","params":{"text":"[$query]","noreask":"[$noreask]","nomisspell":"[$nomisspell]","parent-reqid":"[$reqid]","from":"tabbar"}},{"id":"video","label":"Видео","url":"/video/search","params":{"text":"[$query]","parent-reqid":"[$reqid]","from":"tabbar"}},{"id":"maps","label":"Карты","url":"/maps","params":{"text":"[$query]","source":"serp_navig"}},{"id":"products","label":"Товары","url":"/products/search","params":{"text":"[$query]","lr":"[$lr]","from":"tabbar"}},{"id":"blogs","label":"Блоги","params":{"text":"[$query]","from":"tabbar"}},{"id":"translate","label":"Переводчик","url":"//translate.yandex.ru","params":{"text":"[$query]","from":"tabbar"}},{"id":"all","label":"Все","url":"/all","params":{"text":"[$query]","from":"tabbar"}}],"selectedTabId":"blogs","fixedTabsCount":1},"context":{"query":"link=\"http://atlassolutions.com\"","reqid":"1717240766733350-5945050684012065818-balancer-l7leveler-kubr-yp-klg-130-BAL","lr":"20815","counters":{"type":"b","data":{"$header":"j2g1z000","logo":"j2g1z001","login":"j2g1z003","usermenu":"j2g1z004","market-cart":"j2g1z006","more-button":"j2g1z007","$navigation":"j2g1z008","item":"j2g1z00n","tab-search":"j2g1z00a","tab-images":"j2g1z00c","tab-video":"j2g1z00e","tab-maps":"j2g1z00g","tab-products":"j2g1z00i","tab-blogs":"j2g1z00k","tab-translate":"j2g1z00m","tab-all":"j2g1z00o"}}},"loggedIn":false,"baobab":{"parentNode":{"context":{"genInfo":{"prefix":"j2g1w01-0-1"},"ui":"desktop","service":"web","fast":{"name":"header-desktop"}}}}},"type":"header-desktop"},"j2g10":{"state":{"withinData":{"items":[{"value":0,"text":"За всё время"},{"value":77,"text":"За сутки","logNodeData":{"name":"within","attrs":{"behaviour":{"type":"dynamic"},"period":"77"}}},{"value":1,"text":"За 2 недели","logNodeData":{"name":"within","attrs":{"behaviour":{"type":"dynamic"},"period":"1"}}},{"value":2,"text":"За месяц","logNodeData":{"name":"within","attrs":{"behaviour":{"type":"dynamic"},"period":"2"}}}]},"regionData":{"region":{"id":"-20815","name":"В Колумбусе"},"selected":false},"languageData":{"items":[{"value":"ru","text":"Русский","popular":true},{"value":"en","text":"Английский","popular":true},{"value":"be","text":"Белорусский","popular":false},{"value":"id","text":"Индонезийский","popular":false},{"value":"kk","text":"Казахский","popular":false},{"value":"de","text":"Немецкий","popular":false},{"value":"tt","text":"Татарский","popular":false},{"value":"tr","text":"Турецкий","popular":false},{"value":"uk","text":"Украинский","popular":false},{"value":"fr","text":"Французский","popular":false}],"languages":[]},"regionSuggestData":{"url":"//suggest-maps.yandex.ru/suggest-geo?lang=ru&v=8&bases=locality,country&max_geobase_level=6","skipEmptyRequest":true,"transport":"jsonp","jsonpCallbackPrefix":"suggest2_provider_jsonp_","popupOffset":0,"fitToRoot":false},"baobab":{"parentNode":{"context":{"genInfo":{"prefix":"j2g1w02-0-1"},"ui":"desktop","service":"web"}}}},"type":"advanced-search"},"j2g11":{"state":{"src":"//yandex.ru/ads/system/context.js","blockId":"R-I-1644736-3","rawGrab":"link=\"http://atlassolutions.com\"","subtype":"rsya_guarantee","nonceId":"8364","needOwnResult":true,"needSendLayoutCoords":true,"isAjax":false,"extParams":{"reqId":"1717240766733350-5945050684012065818-balancer-l7leveler-kubr-yp-klg-130-BAL"},"initStrategy":"mediaquery","baobab":{"parentNode":{"context":{"genInfo":{"prefix":"j2g1w05-0-1"},"ui":"desktop","service":"web","fast":{"name":"adv","subtype":"rsya_guarantee"}}}}},"type":"adv","subtype":"rsya_guarantee"},"j2g12":{"state":{"linksGroups":[{"type":"geo","links":[{"label":"Колумбус","title":"Колумбус","url":"//yandex.ru/tune/geo","logNode":{"name":"region"},"target":"_self","a11yLabel":"Ваш регион Колумбус","needRetpath":true}]},{"type":"searchengines","links":[{"label":"Google","url":"//www.google.ru/search?ie=UTF-8&q=link%3D%22http%3A%2F%2Fatlassolutions.com%22","logNode":{"name":"link","attrs":{"type":"google"}},"target":"_blank"},{"label":"Bing","url":"//www.bing.com/search?q=link%3D%22http%3A%2F%2Fatlassolutions.com%22","logNode":{"name":"link","attrs":{"type":"bing"}},"target":"_blank"}]},{"type":"feedback","links":[{"label":"Сообщить об ошибке","logNode":{"name":"feedback","attrs":{"behaviour":{"type":"dynamic"}}}}]},{"type":"settings","links":[{"label":"Настройки","url":"//yandex.ru/tune/search","logNode":{"name":"settings"},"target":"_self","needRetpath":true}]},{"type":"morda","links":[{"label":"ya.ru","url":"//ya.ru/?from=serp_footer","logNode":{"name":"morda"},"target":"_self"}]},{"type":"company","links":[{"label":"О компании","url":"https://company.yandex.ru","logNode":{"name":"about"},"target":"_blank"},{"label":"Коммерческие предложения","url":"/search/direct?text=link%3D%22http%3A%2F%2Fatlassolutions.com%22&filters_docs=direct_cm","logNode":{"name":"commercial"},"target":"_blank"},{"label":"Вакансии","url":"//yandex.ru/jobs","logNode":{"name":"vacancy"},"target":"_blank"},{"label":"Лицензия на использование","url":"//yandex.ru/legal/termsofuse/","logNode":{"name":"license"},"target":"_blank"},{"label":"Политика конфиденциальности","url":"//yandex.ru/legal/confidential/","logNode":{"name":"confidential"},"target":"_blank"},{"label":"Правила рекомендаций","url":"//yandex.ru/legal/recommendations/#index__search","logNode":{"name":"recommendations"},"target":"_blank"}],"a11yHidden":true}],"reportFeedbackProps":{"feature":"Подвал","title":"Сообщить об ошибке","checkBoxLabels":[]},"isSearchApp":false,"hasExtralinks":true,"limitingSelector":".AliceFabButton","baobab":{"parentNode":{"context":{"genInfo":{"prefix":"j2g1w06-0-1"},"ui":"desktop","service":"web"}}}},"type":"serp-footer"},"j2g13":{"state":{"conditionLoadList":{"marketCart":false,"highchartsHighstock":false,"advProductGallery":false,"musicPlayer":false,"ecomRates":false,"photoViewer":false,"darkmodeChangeDrawer":true},"reportFeedbackBaseProps":{"initEmail":"","metaFields":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","userTestids":"658770,364898,1033394,1032537,982582,1","yandexuid":"9758994841717240766","uid":"0","queryText":"link=\"http://atlassolutions.com\"","reqid":"1717240766733350-5945050684012065818-balancer-l7leveler-kubr-yp-klg-130-BAL","searchSlices":[],"userRegionName":"Columbus","userRegionId":"20815"}},"extralinksPopupProps":{"abuseLink":"https://yandex.ru/search/abuse?sign=2eecc1087a6f9507b539fbd46f70f53f&keyno=0"},"isLoggedIn":false,"userMenuDialogProps":{"flag":"skin,feedback","host":"yandex.ru","lang":"ru","project":"serp","queryParams":{"utm_source":"search"},"retpath":"","tld":"ru"},"baobab":{"parentNode":{"context":{"genInfo":{"prefix":"j2g1w07-0-1"},"ui":"desktop","service":"web","fast":{"name":"lazy-load"}}}}},"type":"lazy-load"}}