3 ms·
Yes but also web servers. You could make requests to them (although you wouldn’t have access to the user cookies) and bypass CORS. There’s some more details in
by Matheus28 4y ago
Yes but also web servers. You could make requests to them (although you wouldn’t have access to the user cookies) and bypass CORS.
There’s some more details in the WebSocket RFC for why it’s a bad idea to give access to tcp/udp sockets to untrusted code unless the receiving server is willing to receive them.
- lxgr 4y agoWithout cookies, is that really a problem though? You can already cause OPTION requests, if the concern is denial of service (although these are presumably much easier to filter out at a load balancer or similar than arbitrary unauthenticated requests).