SFDO-Tooling / MetaDeploy

Salesforce.org's managed package installer
https://install.salesforce.org
BSD 3-Clause "New" or "Revised" License
46 stars 45 forks source link

Validate websocket origin #3569

Closed jstvz closed 1 month ago

jstvz commented 1 month ago

WebSockets can be initiated from any site on the internet and still have the user’s cookies and session. This pull request restricts the sites which are allowed to open sockets to the app.

See W-14666893