> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Cross site websocket hijacking

<AccordionGroup>
  <Accordion title="cross-site-websocket-hijacking">
    The app is not validating the origin when establishing a websocket server. Websocket connections are not bound by the same-origin policy. Connections that do not validate the origin may leak information to an attacker.<br />**Likelihood**: MEDIUM<br />**Confidence**: HIGH<br />**CWE**: <br />- CWE-346: Origin Validation Error
    <br />**OWASP**: <br />- A05:2021 - Security Misconfiguration
  </Accordion>
</AccordionGroup>