Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Increase websocket messaging security #91

Open
3 tasks
tjcouch-sil opened this issue Mar 20, 2023 · 0 comments
Open
3 tasks

Increase websocket messaging security #91

tjcouch-sil opened this issue Mar 20, 2023 · 0 comments

Comments

@tjcouch-sil
Copy link
Member

tjcouch-sil commented Mar 20, 2023 •
edited
Loading

  • Use wss? Figure out secure websocket #27
  • Validate senderId in ServerNetworkConnector
    • If extensions are sending nonces upon getWebView(ish) request that can come from anywhere, we need to be careful with this. Maybe need a nonce from server to renderer through preload to validate renderer? Needs investigation
  • Test origin on messages?
@tjcouch-sil tjcouch-sil converted this from a draft issue Mar 20, 2023
@tjcouch-sil tjcouch-sil moved this to 📋Product Backlog in Paranext Mar 20, 2023
This was referenced Mar 20, 2023
Closed
Merged
@tjcouch-sil tjcouch-sil changed the title Increase websocket security Increase websocket messaging security Mar 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
Paranext
Status: 📥 For Consideration
Milestone
No milestone
Development

No branches or pull requests
1 participant
@tjcouch-sil