WebSocket

Cross-Site WebSocket Hijacking (CSWSH)

Details about the vulnerability class I identified in the HTML5 WebSocket specification (RFC 6455).