Tag
websocket-security
Safeguard articles tagged "websocket-security" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Security Guides
WebSocket Security Guide: Origin Checks, Auth, and CSWSH
WebSockets skip the same-origin policy and don't carry your REST auth for free. Cross-site WebSocket hijacking is the flaw teams miss. Here's how to secure the handshake.
Jul 8, 20265 min read
Vulnerability Analysis
ws WebSocket library header DoS (CVE-2021-32640)
CVE-2021-32640 lets attackers stall Node.js WebSocket servers via a crafted header in the widely-used ws npm package. Here's the fix.
Jan 5, 20267 min read