Cross-Site WebSocket Hijacking (CSWSH)
The article describes how WebSocket handshakes can carry cookies or HTTP authentication cross-site, allowing an attacker to open an authenticated connection, read data, and send messages unless the server checks Origin or uses tokens.
