Skip to content
This repository has been archived by the owner on Dec 19, 2023. It is now read-only.

Support CSRF on websockets to secure against cross-site attacks #943

Closed
oliemansm opened this issue May 10, 2023 · 0 comments · Fixed by #944
Closed

Support CSRF on websockets to secure against cross-site attacks #943

oliemansm opened this issue May 10, 2023 · 0 comments · Fixed by #944
Labels
enhancement
Milestone
15.1.0

Comments

@oliemansm
Copy link
Member

oliemansm commented May 10, 2023 •
edited
Loading

See also: https://dev.solita.fi/2018/11/07/securing-websocket-endpoints.html and https://devcenter.heroku.com/articles/websocket-security#authentication-authorization and https://stackoverflow.com/questions/4361173/http-headers-in-websockets-client-api/4361358#4361358
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
enhancement
Projects
None yet
Milestone
15.1.0
Development

Successfully merging a pull request may close this issue.

feat: add support for csrf check on websocket upgrade graphql-java-kickstart/graphql-spring-boot
1 participant
@oliemansm