Tag
websockets
Safeguard articles tagged "websockets" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Application Security
A WebSocket Is Authorised Once and Then Lives for Hours
The user is removed from the project, their role is downgraded, their session is revoked. The socket is still open and still receiving, because nothing re-evaluates a connection that was authorised in the past.
Sep 18, 20266 min read
Application Security
Building an authenticated, TLS-secured WebSocket server in Python
WebSockets skip same-origin checks by default — CWE-1385 exists because of it. Here's how to build one in Python with origin checks, TLS, and rate limits.
Jul 11, 20266 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.