4 ms·
> Also would a CORS "Access-Control-Allow-Origin: localhost" prevent the connections being established? WebSocket isn't bound by CORS, AFAIK.
by MajesticHobo2 6y ago
> Also would a CORS "Access-Control-Allow-Origin: localhost" prevent the connections being established?
WebSocket isn't bound by CORS, AFAIK.
- rndgermandude 6y agoIt is not subject to CORS, same as any regular img load isn't, but the browser will send an Origin header with websocket handshakes, which you're supposed to check server-side.