Skip to content

[codex] harden notifications websocket cors#42

Draft
barry01-hash wants to merge 2 commits into
OrbitChainLabs:mainfrom
barry01-hash:websocket-gateway
Draft

[codex] harden notifications websocket cors#42
barry01-hash wants to merge 2 commits into
OrbitChainLabs:mainfrom
barry01-hash:websocket-gateway

Conversation

@barry01-hash

@barry01-hash barry01-hash commented Jun 22, 2026

Copy link
Copy Markdown

Closes #7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[HIGH] — WebSocket gateway declares cors.origin: '*' alongside credentials: true, an invalid combination exploitable depending on proxy configuration

1 participant