7
edits
Security/Reviews/Firefox6/ReviewNotes/WebSockets: Difference between revisions
Security/Reviews/Firefox6/ReviewNotes/WebSockets (view source)
Revision as of 00:56, 2 July 2011
, 2 July 2011→Threats
| Line 129: | Line 129: | ||
| The specification details the state-machine used for parsing websockets frames. The implementation code should be robust enough to handle situations such as incomplete fragmented frames, unfragmented frame during a fragmented frame, control frames after connection closed, etc. | | The specification details the state-machine used for parsing websockets frames. The implementation code should be robust enough to handle situations such as incomplete fragmented frames, unfragmented frame during a fragmented frame, control frames after connection closed, etc. | ||
| Client browser | | Client browser | ||
| Input validation | | Input validation | ||
| | | | ||
# See above ^^ | # See above ^^ {{bug|665518}} | ||
|- | |- | ||
| SSL/TLS | | SSL/TLS | ||