News for hackers. Stuff that matters.

A comment on A proposal to restrict sites from accessing a users' local network. Parent comment

Re:A proposal to restrict sites from accessing a users' loca... by James_K on Thursday June 05, 2025 @11:36AM (#44192696)
Won't the browser still append the "Origin" field to WebSocket requests, allowing servers to reject them?
[ Parent | on HN ]
Re:A proposal to restrict sites from accessing a users' loca... by bstsb on Thursday June 05, 2025 @06:12PM (#44196250)
yes, and that's exactly how discord's websocket communication checks work (allowing them to offer a non-scheme "open in app" from the website).

they also had some kind of RPC websocket system for game developers, but that appears to have been abandoned: https://discord.com/developers/docs/topics/rpc

[ Parent | on HN ]