WebSockets

WebSocket Hijacking: Preventing Cross-Site WebSocket Abuse in Real-Time Apps

WebSockets skip the browser's same-origin policy for connections — and attackers exploit that gap to send commands or steal data through a victim's live socket. Here's how the attack works and exactly how to stop it.