Details
-
Sub-task
-
Resolution: Unresolved
-
None
-
None
-
High
-
Empty show more show less
Description
When starting the WebSocket App in server.php a list of allowed origins can be added, or * to allow all origins. * is used at the moment.
The allowed connections should be restricted to an allowed set of origins.
This can be either done be setting them hardcoded in the config, which is very unflexible and results in a restart of the WebSocket server on each creation of a new translate5 instance.
Or the allowed origin can be added dynamicly by adding via $app->flashServer->app->addAllowedAccess($allowedOrgin, $port);
on each instance creation call coming from the Translate5 instance. But this implies to read out all possible domains configured in the Client List etc. pp.