Hacker News
Newest
Ask HN
Show HN
Submit
A WebSocket upgrade bypassed our Lambda Edge
(prosopo.io)
1
points by arbol
•
austin-cheney
•
I don’t see the security problem. Everything looks like it’s operating correctly. If you don’t want to accept a WebSocket handshake then just drop the socket at your security layer if it contains the required Sec-Websocket-Key header.
