Validate protected WebSocket origins#5

Merged

sasicodes merged 1 commit into

mainfrom

fix-protected-websocket-origin

Jun 6, 2026

sasicodes commented Jun 6, 2026

Owner

Summary

reject cross-origin WebSocket upgrades for password-protected tunnels
keep intentionally public tunnels unchanged
add unit and integration coverage for same-origin and cross-origin WebSocket behavior

Testing

cargo test


          Validate protected websocket origins

ce26dfe

sasicodes merged commit 541a529 into main

1 check passed

sasicodes deleted the fix-protected-websocket-origin branch

June 6, 2026 18:11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet