https://scholion.thluiz.com/tags/origin-header/Recent content in Origin-Header on ScholionHugo -- gohugo.iopt-BR© 2026Tue, 06 Oct 2026 04:20:06 +0100https://scholion.thluiz.com/notes/cross-site-websocket-hijacking-cswsh/Wed, 22 Apr 2015 16:24:21 -0300https://scholion.thluiz.com/notes/cross-site-websocket-hijacking-cswsh/The article describes how WebSocket handshakes can carry cookies or HTTP authentication cross-site, allowing an attacker to open an authenticated connection, read data, and send messages unless the server checks Origin or uses tokens.