sk Skill · ShieldNet-360
websocket-security
Securing the WebSocket upgrade and the frames after it: Origin validation against Cross-Site WebSocket Hijacking, authenticating the handshake rather than the first message, the ticket pattern for browsers that cannot set headers, per-frame authorization, and resource limits on a connection that stays open. Use when generating a WebSocket, Socket.IO, SignalR, or Phoenix Channels server, wiring real-time messaging,…
Open on skills.sh ↗read 2026-09-15
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 0
Goprevention
- Host repository
- ShieldNet-360/secure-vibe
- Category
- prevention
- Version
- 2.0.0
- Compatible with
- when generating a WebSocket / Socket.IO / SignalR / Phoenix Channels server, when wiring real-time messaging, presence, or collaborative editing, when authenticating a long-lived connection from a browser, when reviewing /ws or wss:// endpoint exposure
- Host stars
- 22
- Host language
- Go