logoalt Hacker News

graemep • yesterday at 7:48 PM • 1 reply • view on HN

I think one problem there is that a lot of places block other ports. Was that not why websockets runs on http ports?


Replies

cowlevel • today at 1:27 AM

Websockets have to be careful not to enable a client-side SSRF by accessing anything you couldn't already access with an <img> tag. They can use any port except the ones that are generally prohibited for browser HTTP requests, such as 25 and 6667.