#42 Cross-Site WebSocket Hijacking (CSWSH)

[David Botton]

Look into insuring Gnoga apps protected from CSWSH

https://gist.github.com/subudeepak/9897212
http://www.christian-schneider.net/CrossSiteWebSocketHijacking.html

[Blady]

Hello David,
What is your idea? Gnoga internal change? New Gnoga API? HTTP server change?
Thanks, Pascal.

[David Botton]

I will try and write up my ideas in next few days. I created a near mirror of GNOGA in common lisp called CLOG, with it can easily prototype new ideas etc that can be ported back to GNOGA first one is a windowing desktop environment in a browser. I'll likely prototype changes for this ticket there first as well.