Metadata
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Dokumen ini berlaku untuk metode berikut:
Metadata adalah informasi yang membantu membedakan berbagai jenis ancaman dan memungkinkan peringatan yang lebih informatif (lihat Bahasa Peringatan yang Disarankan).
Metadata adalah bagian dari objek ThreatMatch yang ditampilkan dalam respons fullHashes.find dan mencakup:
- Deskripsi daftar ancaman (kombinasi jenis ancaman/platform/threatEntry): Mengidentifikasi daftar Safe Browsing (ancaman).
- Ancaman: Untuk
threatMatches, URL. Untuk fullHashes, hash lengkap.
- Metadata: Informasi tambahan tentang ancaman.
Metadata disediakan dalam bentuk pasangan string kunci/nilai (lihat kolom ThreatEntryMetadata). Untuk permintaan JSON, kunci dan nilai berenkode base64. Jenis metadata yang ditampilkan akan bervariasi, bergantung pada daftar Safe Browsing tertentu (kombinasi jenis ancaman/platform/threatEntry).
Situs malware
Metadata saat ini tersedia untuk semua daftar yang tersedia dengan threatType MALWARE
dan URL threatEntryType. Key-value pair dijelaskan di sini.
| key |
value |
Deskripsi |
| malware_threat_type |
landing |
Situs landing malware. Situs semacam ini adalah gerbang menuju malware. Situs tersebut sering kali merupakan situs yang diretas yang
menyertakan iframe, skrip, atau pengalihan yang memuat konten dari situs lain yang meluncurkan
serangan sebenarnya. |
| malware_threat_type |
distribusi |
Situs distribusi malware. Situs tersebut meluncurkan serangan malware. |
Kecuali dinyatakan lain, konten di halaman ini dilisensikan berdasarkan Lisensi Creative Commons Attribution 4.0, sedangkan contoh kode dilisensikan berdasarkan Lisensi Apache 2.0. Untuk mengetahui informasi selengkapnya, lihat Kebijakan Situs Google Developers. Java adalah merek dagang terdaftar dari Oracle dan/atau afiliasinya.
Terakhir diperbarui pada 2025-07-25 UTC.
[null,null,["Terakhir diperbarui pada 2025-07-25 UTC."],[[["\u003cp\u003eThis documentation focuses on metadata within the Safe Browsing Lookup and Update APIs (v4), aiding in threat distinction and providing informative warnings.\u003c/p\u003e\n"],["\u003cp\u003eMetadata, found within ThreatMatch objects, includes the threat list descriptor, the threat itself (URL or hash), and additional information about the threat.\u003c/p\u003e\n"],["\u003cp\u003eMetadata is presented as key/value string pairs (base64-encoded for JSON) and varies based on the specific Safe Browsing list.\u003c/p\u003e\n"],["\u003cp\u003eCurrently, metadata is available for all lists with \u003ccode\u003eMALWARE\u003c/code\u003e threatType and \u003ccode\u003eURL\u003c/code\u003e threatEntryType, and distinguishes between malware landing and distribution sites.\u003c/p\u003e\n"]]],["The document details metadata within the Lookup and Update APIs (v4), specifically related to `threatListUpdates.fetch` and `fullHashes.find`. Metadata, provided as key/value string pairs, enhances threat differentiation. This is part of the `ThreatMatch` object, that includes threat list descriptor, the threat itself and the associated metadata. For malware, metadata keys like `malware_threat_type` are used, with values such as \"landing\" (gateway sites) or \"distribution\" (attack launching sites). The key and values are base64-encoded in JSON.\n"],null,["# Metadata\n\nThis document applies to the following methods:\n\n- [Lookup API (v4)](/safe-browsing/v4/lookup-api): [threatListUpdates.fetch](/safe-browsing/v4/update-api#example-threatListUpdatesfetch)\n- [Update API (v4)](/safe-browsing/v4/update-api): [fullHashes.find](/safe-browsing/v4/update-api#example-fullHashesfind)\n\nAbout metadata\n--------------\n\nMetadata is information that helps distinguish between threat types and allows for more informative warnings\n(see [Suggested Warning Language](/safe-browsing/v4/usage-limits#UserWarnings)).\nMetadata is part of the\n[ThreatMatch](/safe-browsing/reference/rest/v4/ThreatMatch)\nobject returned in the\n[fullHashes.find response](/safe-browsing/v4/update-api#http-post-response_2)\nand includes:\n\n- The threat list descriptor (threat/platform/threatEntry type combination): Identifies the Safe Browsing (threat) list.\n- The threat: For `threatMatches`, a URL. For `fullHashes`, a full-length hash.\n- The metadata: Additional information about the threat.\n\nMetadata is provided in the form of key/value string pairs (see the\n[ThreatEntryMetadata](/safe-browsing/reference/rest/v4/ThreatMatch#ThreatEntryMetadata)\nfield). For JSON requests, the key and value are both base64-encoded. The *type* of metadata\nreturned will vary depending on the specific Safe Browsing list (the threat/platform/threatEntry\ntype combination).\n\nMalware sites\n-------------\n\nMetadata is currently available for all available lists with the MALWARE `threatType`\nand the URL `threatEntryType`. The key/value pairs are described here.\n\n| key | value | Description |\n|---------------------|--------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| malware_threat_type | landing | Malware landing site. These sites are gateways to malware. They are often hacked sites that include iframes, scripts, or redirects that load content from other sites that launch the actual attacks. |\n| malware_threat_type | distribution | Malware distribution site. These sites launch the malware attacks. |"]]
