Jump to content
  • Advertisement
Sign in to follow this  
Gamer Gamester

[web] the status of Web Sockets

This topic is 2705 days old which is more than the 365 day threshold we allow for new replies. Please post a new topic.

If you intended to correct an error in the post then please contact us.

Recommended Posts

Mozilla and Opera have removed support for Web Sockets due to a recently discovered security flaw. That's the latest from news sites and blogs about a month ago, but I haven't located more recent or detailed information. Can someone tell me more about this?

Share this post


Link to post
Share on other sites
Advertisement
The issue is with how some proxy servers handle HTTP header data. With the new scheme, it's theoretically possible to poison the proxy cache for all users, using the WebSocket interface.

See here for more information.

I'm looking forward to when it's resolved; JS needs WebSockets (and needs fundamental WS security flaws like it needs a hole in the head).

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Advertisement
×

Important Information

By using GameDev.net, you agree to our community Guidelines, Terms of Use, and Privacy Policy.

Participate in the game development conversation and more when you create an account on GameDev.net!

Sign me up!